@vellumai/assistant 0.8.7 → 0.8.8-dev.202606052332.17fc8ea

package/src/runtime/routes/app-routes.ts

@@ -73,14 +73,15 @@ function buildCsp(scriptSrc: string): string {
   ].join("; ");
 }
 
-function servePageHeaders({ pathParams }: ResponseHeaderArgs): Record<string, string> {
+function servePageHeaders({
+  pathParams,
+}: ResponseHeaderArgs): Record<string, string> {
   const appId = pathParams?.appId as string;
   const app = getApp(appId);
   // Multifile apps use external scripts — no 'unsafe-inline' for script-src.
   // Legacy apps contain inline event handlers that require 'unsafe-inline'.
-  const scriptSrc = app && isMultifileApp(app)
-    ? "'self'"
-    : "'self' 'unsafe-inline'";
+  const scriptSrc =
+    app && isMultifileApp(app) ? "'self'" : "'self' 'unsafe-inline'";
   return {
     "Content-Type": "text/html; charset=utf-8",
     "Content-Security-Policy": buildCsp(scriptSrc),
@@ -186,9 +187,7 @@ const DIST_CONTENT_TYPES: Record<string, string> = {
  * Serve a static file from an app's dist/ directory.
  * Validates the filename to prevent path traversal.
  */
-function handleServeDistFile({
-  pathParams,
-}: RouteHandlerArgs): Uint8Array {
+function handleServeDistFile({ pathParams }: RouteHandlerArgs): Uint8Array {
   const appId = pathParams?.appId as string;
   const filename = pathParams?.filename as string;
 
@@ -225,9 +224,7 @@ function handleServeDistFile({
 /** 50 MB — generous cap for zip app bundles. */
 const MAX_SHARE_BODY_BYTES = 50 * 1024 * 1024;
 
-async function handleShareApp({
-  rawBody,
-}: RouteHandlerArgs): Promise<{
+async function handleShareApp({ rawBody }: RouteHandlerArgs): Promise<{
   shareToken: string;
   shareUrl: string;
   bundleSizeBytes: number;
@@ -275,9 +272,7 @@ async function handleShareApp({
   };
 }
 
-function handleDownloadSharedApp({
-  pathParams,
-}: RouteHandlerArgs): Uint8Array {
+function handleDownloadSharedApp({ pathParams }: RouteHandlerArgs): Uint8Array {
   const shareToken = pathParams?.token as string;
   const record = getSharedAppLink(shareToken);
   if (!record) {
@@ -348,8 +343,7 @@ export const ROUTES: RouteDefinition[] = [
       allowedPrincipalTypes: ACTOR_PRINCIPALS,
     },
     summary: "Serve app dist file",
-    description:
-      "Serve a static asset from an app's compiled dist/ directory.",
+    description: "Serve a static asset from an app's compiled dist/ directory.",
     tags: ["apps"],
     responseHeaders: ({ pathParams }) => ({
       "Content-Type":
@@ -411,6 +405,10 @@ export const ROUTES: RouteDefinition[] = [
       "Content-Type": "application/zip",
       "Content-Disposition": 'attachment; filename="app.vellum"',
     },
+    responseBody: {
+      contentType: "application/zip",
+      schema: { type: "string", format: "binary" },
+    },
     handler: handleDownloadSharedApp,
   },
   {

package/src/runtime/routes/approval-routes.ts

@@ -9,7 +9,7 @@
  */
 import { z } from "zod";
 
-import { findConversation } from "../../daemon/conversation-store.js";
+import { findConversation } from "../../daemon/conversation-registry.js";
 import { getConversationByKey } from "../../memory/conversation-key-store.js";
 import type { UserDecision } from "../../permissions/types.js";
 import { getLogger } from "../../util/logger.js";

package/src/runtime/routes/attachment-routes.ts

@@ -663,6 +663,10 @@ export const ROUTES: RouteDefinition[] = [
       "Serve raw file bytes for an attachment. Supports Range headers.",
     tags: ["attachments"],
     responseStatus: ({ headers }) => (headers?.["range"] ? "206" : "200"),
+    responseBody: {
+      contentType: "application/octet-stream",
+      schema: { type: "string", format: "binary" },
+    },
     additionalResponses: {
       "416": { description: "Range Not Satisfiable" },
     },
@@ -719,21 +723,28 @@ export const ROUTES: RouteDefinition[] = [
     description:
       "Upload an attachment. Supports application/json (base64 data or file path reference), multipart/form-data (file + filename + mimeType fields), and application/octet-stream (raw bytes with filename and mimeType query params).",
     tags: ["attachments"],
-    requestBody: z.object({
-      filename: z.string(),
-      mimeType: z.string(),
-      data: z.string().describe("Base64-encoded file data").optional(),
-      filePath: z
-        .string()
-        .describe("On-disk file path (file-backed upload)")
-        .optional(),
-      trustedSource: z
-        .boolean()
-        .describe(
-          "Set by the gateway when the file came from a guardian-bound channel actor. Honored only when the request is authenticated as a gateway service token; ignored otherwise.",
-        )
-        .optional(),
-    }),
+    // Advertised as multipart/form-data — the form web clients actually send,
+    // so the generated SDK types a real `{ file, filename, mimeType }` body
+    // instead of erasing it. The handler additionally accepts application/json
+    // (base64/file-path) and application/octet-stream by sniffing the request
+    // Content-Type header (see handleUploadAttachmentRoute); those forms are
+    // used over raw HTTP by the gateway and are not consumed via the SDK.
+    requestBody: {
+      contentType: "multipart/form-data",
+      schema: {
+        type: "object",
+        properties: {
+          file: {
+            type: "string",
+            format: "binary",
+            description: "The file to upload",
+          },
+          filename: { type: "string" },
+          mimeType: { type: "string" },
+        },
+        required: ["file", "filename", "mimeType"],
+      },
+    },
     responseBody: z.object({
       id: z.string(),
       original_filename: z.string(),

package/src/runtime/routes/avatar-routes.ts

@@ -363,6 +363,32 @@ export const ROUTES: RouteDefinition[] = [
     summary: "Get character components",
     description: "Return available avatar character components.",
     tags: ["avatar"],
+    responseBody: z.object({
+      bodyShapes: z.array(
+        z.object({
+          id: z.string(),
+          viewBox: z.object({ width: z.number(), height: z.number() }),
+          faceCenter: z.object({ x: z.number(), y: z.number() }),
+          svgPath: z.string(),
+        }),
+      ),
+      eyeStyles: z.array(
+        z.object({
+          id: z.string(),
+          sourceViewBox: z.object({ width: z.number(), height: z.number() }),
+          eyeCenter: z.object({ x: z.number(), y: z.number() }),
+          paths: z.array(z.object({ svgPath: z.string(), color: z.string() })),
+        }),
+      ),
+      colors: z.array(z.object({ id: z.string(), hex: z.string() })),
+      faceCenterOverrides: z.array(
+        z.object({
+          bodyShape: z.string(),
+          eyeStyle: z.string(),
+          faceCenter: z.object({ x: z.number(), y: z.number() }),
+        }),
+      ),
+    }),
   },
   {
     operationId: "avatar_get_state",

package/src/runtime/routes/browser-routes.ts

@@ -16,7 +16,7 @@ import {
   BROWSER_OPERATIONS,
   type BrowserOperation,
 } from "../../browser/types.js";
-import { findConversation } from "../../daemon/conversation-store.js";
+import { findConversation } from "../../daemon/conversation-registry.js";
 import type { ContentBlock } from "../../providers/types.js";
 import { LOCAL_PRINCIPALS } from "../auth/route-policy.js";
 import type { RouteDefinition, RouteHandlerArgs } from "./types.js";

package/src/runtime/routes/browser-tabs-routes.ts

@@ -7,7 +7,7 @@
 
 import { z } from "zod";
 
-import { findConversation } from "../../daemon/conversation-store.js";
+import { findConversation } from "../../daemon/conversation-registry.js";
 import { getCdpClient } from "../../tools/browser/cdp-client/factory.js";
 import {
   clearPinnedTab,
@@ -73,11 +73,7 @@ async function handleBrowserTabs({ body = {} }: RouteHandlerArgs) {
           ? result.clientId
           : undefined;
       if (result?.tabId !== undefined) {
-        setPinnedTab(
-          resolvedConversationId,
-          String(result.tabId),
-          clientId,
-        );
+        setPinnedTab(resolvedConversationId, String(result.tabId), clientId);
       }
       return { ok: true, tab: result };
     } finally {
@@ -88,10 +84,10 @@ async function handleBrowserTabs({ body = {} }: RouteHandlerArgs) {
   if (command === "new") {
     const cdp = getCdpClient(context, cdpOptions);
     try {
-      const result = await cdp.send<{ tabId?: number | string; clientId?: string }>(
-        "Vellum.createTab",
-        {},
-      );
+      const result = await cdp.send<{
+        tabId?: number | string;
+        clientId?: string;
+      }>("Vellum.createTab", {});
       // Normalise to string for internal use (setCdpSessionId / setPinnedTab)
       // and keep the numeric form for the API response.
       const newTabIdStr: string | undefined =

package/src/runtime/routes/btw-routes.ts

@@ -9,21 +9,18 @@
  * intro generation. The response is streamed as SSE events (`btw_text_delta`,
  * `btw_complete`, `btw_error`).
  *
- * No messages are persisted. `conversation.processing` is never set or checked.
+ * No messages are persisted. The conversation's processing flag is never set or checked.
  */
 
-import { existsSync, readFileSync } from "node:fs";
-
 import { z } from "zod";
 
+import { isAssistantFeatureFlagEnabled } from "../../config/assistant-feature-flags.js";
 import { getConfig } from "../../config/loader.js";
-import { readNowScratchpad } from "../../daemon/conversation-runtime-assembly.js";
 import { getOrCreateConversation } from "../../daemon/conversation-store.js";
-import { parseIdentityFields } from "../../daemon/handlers/identity.js";
+import { readNowScratchpad } from "../../daemon/now-scratchpad.js";
 import { getConversationByKey } from "../../memory/conversation-key-store.js";
 import { getAllToolDefinitions } from "../../tools/registry.js";
 import { getLogger } from "../../util/logger.js";
-import { getWorkspacePromptPath } from "../../util/platform.js";
 import { ACTOR_PRINCIPALS } from "../auth/route-policy.js";
 import { runBtwSidechain } from "../btw-sidechain.js";
 import { BadRequestError, ServiceUnavailableError } from "./errors.js";
@@ -37,6 +34,9 @@ const IDENTITY_INTRO_KEY = "identity-intro";
 
 /** Conversation key used by the client for empty-state greeting generation. */
 const GREETING_KEY = "greeting";
+const EMPTY_STATE_DYNAMIC_GREETINGS_FLAG =
+  "empty-state-dynamic-greetings" as const;
+const STATIC_EMPTY_STATE_GREETING = "What are we working on?";
 
 // ---------------------------------------------------------------------------
 // SSE helpers
@@ -68,26 +68,22 @@ async function handleBtw({
 
   const trimmedContent = content.trim();
 
-  // ----- Identity intro fast-path -----
+  if (
+    conversationKey === GREETING_KEY &&
+    !isAssistantFeatureFlagEnabled(
+      EMPTY_STATE_DYNAMIC_GREETINGS_FLAG,
+      getConfig(),
+    )
+  ) {
+    return streamText(STATIC_EMPTY_STATE_GREETING);
+  }
+
+  // ----- Cached identity intro fast-path -----
   if (conversationKey === IDENTITY_INTRO_KEY) {
-    let fastText: string | undefined;
-    const identityPath = getWorkspacePromptPath("IDENTITY.md");
-    if (existsSync(identityPath)) {
-      const fields = parseIdentityFields(readFileSync(identityPath, "utf-8"));
-      if (fields.name) {
-        fastText = `Hi, I'm ${fields.name}!`;
-      }
-    }
-    fastText ??= getCachedIntro()?.greetings[0];
+    const fastText = getCachedIntro()?.greetings[0];
     if (fastText) {
       log.debug("Returning identity intro fast-path");
-      return new ReadableStream({
-        start(controller) {
-          controller.enqueue(sseEvent("btw_text_delta", { text: fastText }));
-          controller.enqueue(sseEvent("btw_complete", {}));
-          controller.close();
-        },
-      });
+      return streamText(fastText);
     }
   }
 
@@ -171,6 +167,16 @@ async function handleBtw({
   });
 }
 
+function streamText(text: string): ReadableStream<Uint8Array> {
+  return new ReadableStream({
+    start(controller) {
+      controller.enqueue(sseEvent("btw_text_delta", { text }));
+      controller.enqueue(sseEvent("btw_complete", {}));
+      controller.close();
+    },
+  });
+}
+
 // ---------------------------------------------------------------------------
 // Route definitions
 // ---------------------------------------------------------------------------

package/src/runtime/routes/consolidation-routes.ts

@@ -15,26 +15,39 @@
 
 import { z } from "zod";
 
-import { getConfig } from "../../config/loader.js";
+import {
+  getConfig,
+  invalidateConfigCache,
+  loadRawConfig,
+  saveRawConfig,
+} from "../../config/loader.js";
+import type { AssistantConfig } from "../../config/schema.js";
 import { getMemoryCheckpoint } from "../../memory/checkpoints.js";
 import {
   getMessageRoleStatsByConversation,
   listConversationsBySource,
 } from "../../memory/conversation-queries.js";
 import {
+  cancelPendingAutomaticConsolidationJobs,
   enqueueMemoryJob,
   hasActiveJobOfType,
+  MEMORY_V2_CONSOLIDATION_JOB_TRIGGERS,
 } from "../../memory/jobs-store.js";
 import { GRAPH_MAINTENANCE_CHECKPOINTS } from "../../memory/jobs-worker.js";
+import { getUsageCostForConversationWindow } from "../../memory/llm-usage-store.js";
 import { MEMORY_V2_CONSOLIDATION_SOURCE } from "../../memory/v2/constants.js";
 import { ACTOR_PRINCIPALS } from "../auth/route-policy.js";
-import { BadRequestError } from "./errors.js";
+import { BadRequestError, InternalError } from "./errors.js";
 import type { RouteDefinition, RouteHandlerArgs } from "./types.js";
 
 function isConsolidationAvailable(): boolean {
   return getConfig().memory.v2.enabled;
 }
 
+function isAutomaticConsolidationEnabled(config: AssistantConfig): boolean {
+  return config.memory.v2.enabled && config.memory.v2.consolidation_enabled;
+}
+
 function consolidationIntervalMs(): number {
   return getConfig().memory.v2.consolidation_interval_hours * 60 * 60 * 1000;
 }
@@ -48,6 +61,61 @@ function readLastRunAt(): number | null {
   return Number.isFinite(parsed) ? parsed : null;
 }
 
+function readConsolidationConfigResponse() {
+  const config = getConfig();
+  const available = config.memory.v2.enabled;
+  const enabled = isAutomaticConsolidationEnabled(config);
+  const intervalMs = consolidationIntervalMs();
+  const lastRunAt = readLastRunAt();
+  const nextRunAt =
+    enabled && lastRunAt != null ? lastRunAt + intervalMs : null;
+  return {
+    available,
+    enabled,
+    intervalMs,
+    nextRunAt,
+    lastRunAt,
+    success: true,
+  };
+}
+
+function handleUpdateConfig(body: Record<string, unknown>) {
+  const consolidationPatch: Record<string, unknown> = {};
+  const disablingAutomaticConsolidation = body.enabled === false;
+  if ("enabled" in body && typeof body.enabled === "boolean") {
+    consolidationPatch.consolidation_enabled = body.enabled;
+  }
+
+  try {
+    const raw = loadRawConfig() as Record<string, unknown>;
+    const memory =
+      raw.memory != null && typeof raw.memory === "object"
+        ? (raw.memory as Record<string, unknown>)
+        : {};
+    const v2 =
+      memory.v2 != null && typeof memory.v2 === "object"
+        ? (memory.v2 as Record<string, unknown>)
+        : {};
+
+    raw.memory = {
+      ...memory,
+      v2: {
+        ...v2,
+        ...consolidationPatch,
+      },
+    };
+    saveRawConfig(raw);
+    invalidateConfigCache();
+    if (disablingAutomaticConsolidation) {
+      cancelPendingAutomaticConsolidationJobs();
+    }
+  } catch {
+    throw new InternalError("Failed to save consolidation config");
+  }
+
+  return readConsolidationConfigResponse();
+}
+
 // ---------------------------------------------------------------------------
 // Shared ROUTES
 // ---------------------------------------------------------------------------
@@ -74,18 +142,36 @@ export const ROUTES: RouteDefinition[] = [
       success: z.boolean(),
     }),
     handler: async (_args: RouteHandlerArgs) => {
-      const enabled = getConfig().memory.v2.enabled;
-      const intervalMs = consolidationIntervalMs();
-      const lastRunAt = readLastRunAt();
-      const nextRunAt = lastRunAt != null ? lastRunAt + intervalMs : null;
-      return {
-        available: enabled,
-        enabled,
-        intervalMs,
-        nextRunAt,
-        lastRunAt,
-        success: true,
-      };
+      return readConsolidationConfigResponse();
+    },
+  },
+  {
+    operationId: "updateConsolidationConfig",
+    endpoint: "consolidation/config",
+    method: "PUT",
+    policy: {
+      requiredScopes: ["settings.write"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
+    summary: "Update consolidation config",
+    description: "Update the memory v2 consolidation schedule configuration.",
+    tags: ["consolidation"],
+    requestBody: z.object({
+      enabled: z
+        .boolean()
+        .optional()
+        .describe("Enable or disable automatic consolidation"),
+    }),
+    responseBody: z.object({
+      available: z.boolean(),
+      enabled: z.boolean(),
+      intervalMs: z.number(),
+      nextRunAt: z.number().nullable(),
+      lastRunAt: z.number().nullable(),
+      success: z.boolean(),
+    }),
+    handler: async ({ body = {} }: RouteHandlerArgs) => {
+      return handleUpdateConfig(body);
     },
   },
   {
@@ -117,7 +203,9 @@ export const ROUTES: RouteDefinition[] = [
       if (hasActiveJobOfType("memory_v2_consolidate")) {
         return { success: true, ran: false, jobId: null };
       }
-      const jobId = enqueueMemoryJob("memory_v2_consolidate", {});
+      const jobId = enqueueMemoryJob("memory_v2_consolidate", {
+        trigger: MEMORY_V2_CONSOLIDATION_JOB_TRIGGERS.manual,
+      });
       return { success: true, ran: true, jobId };
     },
   },
@@ -170,6 +258,9 @@ export const ROUTES: RouteDefinition[] = [
             skipReason: z.string().nullable(),
             error: z.string().nullable(),
             conversationId: z.string().nullable(),
+            conversationExists: z.boolean(),
+            conversationArchivedAt: z.number().nullable(),
+            estimatedCostUsd: z.number(),
             createdAt: z.number(),
           }),
         )
@@ -195,24 +286,33 @@ export const ROUTES: RouteDefinition[] = [
         rows.map((r) => r.id),
         "assistant",
       );
+      const now = Date.now();
       return {
         runs: rows.map((c) => {
           const stat = assistantStats.get(c.id);
           const hasAssistantOutput = (stat?.count ?? 0) > 0;
           const finishedAt = hasAssistantOutput ? stat!.lastAt : null;
+          const estimatedCostUsd =
+            c.totalEstimatedCost > 0
+              ? c.totalEstimatedCost
+              : getUsageCostForConversationWindow({
+                  conversationId: c.id,
+                  from: c.createdAt,
+                  to: finishedAt ?? now,
+                });
           return {
             id: c.id,
             scheduledFor: c.createdAt,
             startedAt: c.createdAt,
             finishedAt,
-            durationMs:
-              finishedAt != null ? finishedAt - c.createdAt : null,
-            status: (hasAssistantOutput ? "ok" : "running") as
-              | "ok"
-              | "running",
+            durationMs: finishedAt != null ? finishedAt - c.createdAt : null,
+            status: (hasAssistantOutput ? "ok" : "running") as "ok" | "running",
             skipReason: null,
             error: null,
             conversationId: c.id,
+            conversationExists: true,
+            conversationArchivedAt: c.archivedAt,
+            estimatedCostUsd,
             createdAt: c.createdAt,
           };
         }),

package/src/runtime/routes/conversation-cli-routes.ts

@@ -9,7 +9,7 @@
 import { v4 as uuid } from "uuid";
 import { z } from "zod";
 
-import { findConversation } from "../../daemon/conversation-store.js";
+import { findConversation } from "../../daemon/conversation-registry.js";
 import { clearAllConversations as clearAllActive } from "../../daemon/handlers/conversations.js";
 import { formatJson, formatMarkdown } from "../../export/formatter.js";
 import { ipcCall as ipcCallGateway } from "../../ipc/gateway-client.js";

package/src/runtime/routes/conversation-list-routes.ts

@@ -9,7 +9,7 @@
 
 import { z } from "zod";
 
-import { findConversation } from "../../daemon/conversation-store.js";
+import { findConversation } from "../../daemon/conversation-registry.js";
 import {
   type Confidence,
   getAttentionStateByConversationIds,

package/src/runtime/routes/conversation-query-routes.ts

@@ -72,7 +72,7 @@ import { type LogRow } from "../../memory/llm-request-log-store.js";
 import { getMemoryRecallLogByMessageIds } from "../../memory/memory-recall-log-store.js";
 import { getMemoryV2ActivationLogByMessageIds } from "../../memory/memory-v2-activation-log-store.js";
 import { MEMORY_V2_CONSOLIDATION_SOURCE } from "../../memory/v2/constants.js";
-import { getMemoryV3SelectionForInspector } from "../../memory/v3/selection-log-store.js";
+import { getMemoryV3SelectionForInspector } from "../../plugins/defaults/memory-v3-shadow/selection-log-store.js";
 import {
   createConnection,
   listConnections,
@@ -1171,6 +1171,8 @@ export const ROUTES: RouteDefinition[] = [
     description:
       "Deep-merge a partial JSON object into the settings.json configuration.",
     tags: ["config"],
+    requestBody: z.record(z.string(), z.unknown()),
+    responseBody: z.object({ ok: z.boolean() }),
     handler: handlePatchConfig,
   },
   {