@vellumai/assistant 0.9.0 → 0.9.1-staging.1

package/src/runtime/routes/plugins-routes.ts

@@ -25,6 +25,10 @@
 
 import { z } from "zod";
 
+import {
+  diffPlugin,
+  PluginDiffUnavailableError,
+} from "../../cli/lib/diff-plugin.js";
 import {
   inspectPlugin,
   PluginInspectNotFoundError,
@@ -58,7 +62,10 @@ import {
   uninstallPlugin,
 } from "../../cli/lib/uninstall-plugin.js";
 import {
+  PluginMergeBaselineError,
   PluginNotUpgradableError,
+  type PluginUpgradeStrategy,
+  PluginUpgradeStrategyUnsupportedError,
   upgradePlugin,
 } from "../../cli/lib/upgrade-plugin.js";
 import { ACTOR_PRINCIPALS } from "../auth/route-policy.js";
@@ -410,6 +417,12 @@ const pluginUpgradeRequestSchema = z.object({
     .describe(
       "Report what would change without modifying the install. Defaults to false.",
     ),
+  strategy: z
+    .enum(["ours", "theirs", "overwrite", "assistant"])
+    .optional()
+    .describe(
+      "How to reconcile local edits with the pin. `overwrite` (default) discards local edits and re-installs the pin; `ours`/`theirs` three-way merge, resolving conflicting hunks toward the local edit or the pin respectively; `assistant` is not yet supported.",
+    ),
 });
 
 const pluginUpgradeResponseSchema = z.object({
@@ -452,6 +465,9 @@ const pluginUpgradeResponseSchema = z.object({
       "Files materialized by the upgrade; null for a no-op or dry run.",
     ),
   dryRun: z.boolean().describe("Whether this was a dry run (no changes made)."),
+  strategy: z
+    .enum(["ours", "theirs", "overwrite", "assistant"])
+    .describe("Conflict-resolution strategy the upgrade applied."),
   provenanceWasUnknown: z
     .boolean()
     .describe(
@@ -459,6 +475,62 @@ const pluginUpgradeResponseSchema = z.object({
     ),
 });
 
+const pluginFileDiffSchema = z
+  .object({
+    path: z.string().describe("POSIX-relative path within the plugin root."),
+    status: z
+      .enum(["modified", "added", "removed"])
+      .describe(
+        "Whether the file was edited, newly added, or deleted since install.",
+      ),
+    diff: z
+      .string()
+      .describe(
+        "Unified diff (`--- a/… / +++ b/…`) of the file. A short `Binary files differ` marker for binary files, or a `Baseline unavailable` marker when `reconstructed` is false.",
+      ),
+    binary: z
+      .boolean()
+      .describe(
+        "True when either side was detected as binary (NUL byte present).",
+      ),
+    reconstructed: z
+      .boolean()
+      .describe(
+        "True when the install-time baseline for this file was faithfully recovered (re-materialized bytes hash-match the install fingerprint). False when it could not be reconstructed (e.g. the curated adapter overlay changed since install), in which case `diff` is a marker, not a patch. Always true for added files.",
+      ),
+  })
+  .describe("Unified diff of a single drifted file.");
+
+const pluginDiffResponseSchema = z.object({
+  name: z
+    .string()
+    .describe("Install name. Matches `assistant plugins install <name>`."),
+  target: z
+    .string()
+    .describe("Absolute path to the installed plugin directory on the host."),
+  commit: z
+    .string()
+    .describe(
+      "Commit the baseline was re-materialized from (the recorded install SHA).",
+    ),
+  committedAt: z
+    .string()
+    .nullable()
+    .describe(
+      "ISO-8601 committer timestamp (UTC) of `commit`; null when not recorded.",
+    ),
+  clean: z
+    .boolean()
+    .describe(
+      "True when the on-disk tree exactly matches the re-materialized baseline.",
+    ),
+  files: z
+    .array(pluginFileDiffSchema)
+    .describe(
+      "One entry per drifted file, sorted by path. Empty when `clean`.",
+    ),
+});
+
 // ---------------------------------------------------------------------------
 // Helpers
 // ---------------------------------------------------------------------------
@@ -740,6 +812,45 @@ async function handleInspectPlugin({ pathParams = {} }: RouteHandlerArgs) {
   }
 }
 
+// ---------------------------------------------------------------------------
+// Handler — diff
+// ---------------------------------------------------------------------------
+
+async function handleDiffPlugin({ pathParams = {} }: RouteHandlerArgs) {
+  const rawName = pathParams.name ?? "";
+
+  try {
+    return await diffPlugin(
+      { name: rawName },
+      { fetch: globalThis.fetch.bind(globalThis) },
+    );
+  } catch (err) {
+    if (err instanceof InvalidPluginNameError) {
+      throw new BadRequestError(err.message);
+    }
+    if (
+      err instanceof PluginNotInstalledError ||
+      err instanceof PluginNotFoundError
+    ) {
+      throw new NotFoundError(err.message);
+    }
+    // The install exists but recorded no commit to re-materialize a baseline
+    // from — a permanent state the caller cannot resolve by retrying. 409
+    // marks the request as well-formed but not actionable in the current state.
+    if (err instanceof PluginDiffUnavailableError) {
+      throw new ConflictError(err.message);
+    }
+    // A rate-limited or temporarily-down source (the plugin repo) is a
+    // retryable outage, not a conflict — 503.
+    if (err instanceof PluginSourceUnavailableError) {
+      throw new ServiceUnavailableError(err.message);
+    }
+    throw new InternalError(
+      err instanceof Error ? err.message : "plugin diff failed",
+    );
+  }
+}
+
 // ---------------------------------------------------------------------------
 // Handler — upgrade
 // ---------------------------------------------------------------------------
@@ -750,6 +861,10 @@ async function handleUpgradePlugin({
 }: RouteHandlerArgs) {
   const rawName = pathParams.name ?? "";
   const dryRun = typeof body.dryRun === "boolean" ? body.dryRun : undefined;
+  const strategy =
+    typeof body.strategy === "string"
+      ? (body.strategy as PluginUpgradeStrategy)
+      : undefined;
 
   // Like install, the upgrade target ref is the curated marketplace pin
   // (resolved inside `upgradePlugin` via `inspectPlugin`), never a
@@ -757,7 +872,7 @@ async function handleUpgradePlugin({
   // upgrade at an unreviewed revision.
   try {
     const result = await upgradePlugin(
-      { name: rawName, dryRun },
+      { name: rawName, dryRun, strategy },
       { fetch: globalThis.fetch.bind(globalThis) },
     );
     return {
@@ -770,10 +885,14 @@ async function handleUpgradePlugin({
       target: result.target,
       fileCount: result.fileCount,
       dryRun: result.dryRun,
+      strategy: result.strategy,
       provenanceWasUnknown: result.provenanceWasUnknown,
     };
   } catch (err) {
-    if (err instanceof InvalidPluginNameError) {
+    if (
+      err instanceof InvalidPluginNameError ||
+      err instanceof PluginUpgradeStrategyUnsupportedError
+    ) {
       throw new BadRequestError(err.message);
     }
     if (err instanceof PluginNotInstalledError) {
@@ -782,6 +901,12 @@ async function handleUpgradePlugin({
     if (err instanceof PluginNotFoundError) {
       throw new NotFoundError(err.message);
     }
+    // A merge strategy was requested but the install-time baseline can't be
+    // reconstructed — a well-formed request that isn't actionable in the
+    // current state (the caller can retry with `overwrite` or reinstall).
+    if (err instanceof PluginMergeBaselineError) {
+      throw new ConflictError(err.message);
+    }
     // The install exists but has no marketplace entry to advance to — a
     // permanent state the caller cannot resolve by retrying. 409 marks the
     // request as well-formed but not actionable in the current state.
@@ -992,6 +1117,47 @@ export const ROUTES: RouteDefinition[] = [
     },
     handler: handleInspectPlugin,
   },
+  {
+    operationId: "plugins_diff",
+    endpoint: "plugins/:name/diff",
+    method: "POST",
+    policy: {
+      requiredScopes: ["settings.read"],
+      allowedPrincipalTypes: ACTOR_PRINCIPALS,
+    },
+    summary: "Diff a plugin against its install commit",
+    description:
+      "Show a unified diff of local edits to an installed plugin against the exact commit it was installed at (recorded in its `install-meta.json`). Computing the diff re-materializes the baseline through the install pipeline — a network clone plus a temp-dir write — so this is a POST: it is not a safe, cacheable GET even though it leaves persistent state untouched (requires only `settings.read`). Drift is classified against the install-time fingerprint so an adapter overlay that moved since install never reads as a local change. Returns the baseline `commit`, a `clean` flag, and a `files` array of `{ path, status, diff, binary, reconstructed }` for each modified/added/removed file. The baseline is the install commit, not the marketplace pin — comparing against the current pin is `POST /v1/plugins/:name/upgrade` with `dryRun`. A name with no installed copy returns 404; an install that recorded no commit or fingerprint returns 409; an unreachable source returns 503. Mirrors the CLI's `assistant plugins diff <name>`.",
+    tags: ["plugins"],
+    pathParams: [
+      {
+        name: "name",
+        type: "string",
+        description:
+          "Install name. Must match the kebab-case name accepted by `assistant plugins install`.",
+      },
+    ],
+    responseBody: pluginDiffResponseSchema,
+    additionalResponses: {
+      "400": {
+        description:
+          "The plugin name failed sanitization (e.g. contained slashes, dots, or uppercase letters).",
+      },
+      "404": {
+        description:
+          "No copy of the plugin is installed, or its recorded commit resolves to nothing.",
+      },
+      "409": {
+        description:
+          "The install recorded no commit or no fingerprint to re-materialize and verify a baseline from.",
+      },
+      "503": {
+        description:
+          "The plugin source (GitHub) was temporarily unavailable; the diff is retryable.",
+      },
+    },
+    handler: handleDiffPlugin,
+  },
   {
     operationId: "plugins_upgrade",
     endpoint: "plugins/:name/upgrade",
@@ -1002,7 +1168,7 @@ export const ROUTES: RouteDefinition[] = [
     },
     summary: "Upgrade a plugin to the marketplace pin",
     description:
-      'Move an installed plugin to the marketplace\'s current pinned commit, re-materializing it under `<workspaceDir>/plugins/<name>/`. Always resolves against the curated marketplace pin (no caller-supplied ref), mirroring `plugins install`\'s curation boundary. A no-op (`outcome: "already-up-to-date"`) when the installed commit already equals the pin; pass `dryRun` to preview the move (`outcome: "would-upgrade"`) without touching the install. Installs lacking provenance are re-pinned to the current SHA. The assistant must be restarted to load the upgraded code. This does not gate on local edits — callers should consult `GET /v1/plugins/:name/inspect` (`local.localChanges`) first and confirm before overwriting. Mirrors the CLI\'s `assistant plugins upgrade <name>`.',
+      'Move an installed plugin to the marketplace\'s current pinned commit, re-materializing it under `<workspaceDir>/plugins/<name>/`. Always resolves against the curated marketplace pin (no caller-supplied ref), mirroring `plugins install`\'s curation boundary. A no-op (`outcome: "already-up-to-date"`) when the installed commit already equals the pin; pass `dryRun` to preview the move (`outcome: "would-upgrade"`) without touching the install. Installs lacking provenance are re-pinned to the current SHA. The assistant must be restarted to load the upgraded code. `strategy` controls how local edits are reconciled: `overwrite` (default) discards them and re-installs the pin wholesale; `ours`/`theirs` perform a three-way merge against the re-materialized install commit, carrying non-conflicting edits from both sides forward and resolving conflicting hunks toward the local edit or the pin respectively; `assistant` is not yet supported (400). A merge strategy whose install-time baseline cannot be reconstructed returns 409. Mirrors the CLI\'s `assistant plugins upgrade <name> [--strategy <s>]`.',
     tags: ["plugins"],
     pathParams: [
       {
@@ -1017,7 +1183,7 @@ export const ROUTES: RouteDefinition[] = [
     additionalResponses: {
       "400": {
         description:
-          "The plugin name failed sanitization (e.g. contained slashes, dots, or uppercase letters).",
+          "The plugin name failed sanitization (e.g. contained slashes, dots, or uppercase letters), or the `assistant` strategy was requested (not yet supported).",
       },
       "404": {
         description:
@@ -1025,7 +1191,7 @@ export const ROUTES: RouteDefinition[] = [
       },
       "409": {
         description:
-          "The install exists but has no marketplace entry to advance to.",
+          "The install exists but has no marketplace entry to advance to, or a merge strategy was requested whose install-time baseline cannot be reconstructed.",
       },
       "503": {
         description:

package/src/runtime/routes/schedule-routes.ts

@@ -7,8 +7,6 @@
 
 import { z } from "zod";
 
-import { isAssistantFeatureFlagEnabled } from "../../config/assistant-feature-flags.js";
-import { getConfig } from "../../config/loader.js";
 import { getOrCreateConversation } from "../../daemon/conversation-store.js";
 import { INTERNAL_GUARDIAN_TRUST_CONTEXT } from "../../daemon/trust-context.js";
 import { bootstrapConversation } from "../../memory/conversation-bootstrap.js";
@@ -299,7 +297,6 @@ function handleCreateSchedule(body: Record<string, unknown>) {
   }
 
   if (mode === "workflow") {
-    assertWorkflowsEnabled();
     const workflowName =
       typeof body.workflowName === "string" ? body.workflowName.trim() : "";
     if (!workflowName) {
@@ -351,17 +348,6 @@ function handleCreateSchedule(body: Record<string, unknown>) {
   return handleListSchedules({});
 }
 
-/**
- * Reject workflow-mode schedule operations when the `workflows` feature flag
- * is off. Scheduled workflow runs would fail at trigger time (the run manager
- * hard-fails with WorkflowsDisabledError), so we fail fast at the route.
- */
-function assertWorkflowsEnabled(): void {
-  if (!isAssistantFeatureFlagEnabled("workflows", getConfig())) {
-    throw new BadRequestError("Workflows are not enabled.");
-  }
-}
-
 function handleToggleSchedule(id: string, body: Record<string, unknown>) {
   const enabled = body.enabled;
   if (typeof enabled !== "boolean") {
@@ -427,11 +413,6 @@ function handleUpdateSchedule(id: string, body: Record<string, unknown>) {
     );
   }
 
-  // Switching a schedule into workflow mode requires the workflows flag.
-  if (body.mode === "workflow") {
-    assertWorkflowsEnabled();
-  }
-
   // Mirror the create-side validation: a schedule whose RESULTING mode is
   // `workflow` must carry a non-empty `workflowName`. Without this, a PATCH can
   // leave a workflow-mode schedule nameless — the scheduler then hits the
@@ -946,9 +927,6 @@ async function handleRunScheduleNow(id: string) {
   // `schedule.message` (usually empty — workflow-mode create no longer requires
   // a message), running a no-op normal turn instead of the workflow.
   if (schedule.mode === "workflow") {
-    // Fail fast at the route when the flag is off (the run manager would also
-    // hard-fail with WorkflowsDisabledError); matches create/update handling.
-    assertWorkflowsEnabled();
     if (!schedule.workflowName) {
       throw new BadRequestError("Workflow schedule has no workflowName");
     }

package/src/runtime/routes/workflow-routes.test.ts

@@ -1,6 +1,5 @@
 import { afterEach, beforeEach, describe, expect, test } from "bun:test";
 
-import type { AssistantConfig } from "../../config/schema.js";
 import type { WorkflowRun } from "../../workflows/journal-store.js";
 import type { SavedWorkflowEntry } from "../../workflows/library.js";
 import {
@@ -60,7 +59,6 @@ interface FakeManager {
 }
 
 function setup(opts: {
-  flagEnabled?: boolean;
   runs?: WorkflowRun[];
   saved?: SavedWorkflowEntry[];
   /** Custom resume impl; defaults to a success that records the id. */
@@ -98,8 +96,6 @@ function setup(opts: {
   __setWorkflowRoutesDeps({
     getManager: () => manager,
     listWorkflows: () => opts.saved ?? [],
-    getConfig: () => ({}) as AssistantConfig,
-    isFlagEnabled: () => opts.flagEnabled ?? true,
     getAutoApproveThreshold: async () => opts.threshold ?? "none",
   });
   return { aborted, resumed, listCalls };
@@ -113,10 +109,9 @@ afterEach(() => {
 // Happy paths
 // ---------------------------------------------------------------------------
 
-describe("workflow routes (flag on)", () => {
+describe("workflow routes (happy paths)", () => {
   beforeEach(() => {
     setup({
-      flagEnabled: true,
       runs: [
         makeRun({ id: "run-1" }),
         makeRun({ id: "run-2", status: "completed" }),
@@ -145,7 +140,6 @@ describe("workflow routes (flag on)", () => {
 
   test("listWorkflowRuns honors limit + status query params", async () => {
     const { listCalls } = setup({
-      flagEnabled: true,
       runs: [makeRun({ id: "run-1", status: "completed" })],
     });
     await route("listWorkflowRuns").handler({
@@ -163,7 +157,6 @@ describe("workflow routes (flag on)", () => {
 
   test("abortWorkflowRun aborts a known run", async () => {
     const { aborted } = setup({
-      flagEnabled: true,
       runs: [makeRun({ id: "run-1" })],
     });
     const result = (await route("abortWorkflowRun").handler({
@@ -175,7 +168,6 @@ describe("workflow routes (flag on)", () => {
 
   test("resumeWorkflowRun resumes an interrupted run", async () => {
     const { resumed } = setup({
-      flagEnabled: true,
       runs: [makeRun({ id: "run-1", status: "interrupted" })],
     });
     const result = (await route("resumeWorkflowRun").handler({
@@ -192,7 +184,6 @@ describe("workflow routes (flag on)", () => {
     // full-access posture it must refuse rather than silently bypass consent —
     // resume() is never called.
     const { resumed } = setup({
-      flagEnabled: true,
       threshold: "medium",
       runs: [
         makeRun({
@@ -213,7 +204,6 @@ describe("workflow routes (flag on)", () => {
     // high-risk tools, so no prompt is needed — the side-effecting resume
     // proceeds directly.
     const { resumed } = setup({
-      flagEnabled: true,
       threshold: "high",
       runs: [
         makeRun({
@@ -236,7 +226,6 @@ describe("workflow routes (flag on)", () => {
     // the object shape too — a strict parse would treat it as read-only and let
     // the side-effecting resume through without approval.
     const { resumed } = setup({
-      flagEnabled: true,
       threshold: "medium",
       runs: [
         makeRun({
@@ -259,7 +248,6 @@ describe("workflow routes (flag on)", () => {
     // An explicit empty manifest grants no side effects, so the route resumes
     // it directly — the gate keys on the stored manifest, not run existence.
     const { resumed } = setup({
-      flagEnabled: true,
       threshold: "medium",
       runs: [
         makeRun({
@@ -275,7 +263,6 @@ describe("workflow routes (flag on)", () => {
 
   test("resumeWorkflowRun maps a non-interrupted run to a 409 ConflictError", async () => {
     setup({
-      flagEnabled: true,
       runs: [makeRun({ id: "run-1", status: "completed" })],
       resume: (id) => {
         throw new WorkflowResumeNotPossibleError(
@@ -292,7 +279,6 @@ describe("workflow routes (flag on)", () => {
 
   test("resumeWorkflowRun maps a cap error to a 429 TooManyRequestsError", async () => {
     setup({
-      flagEnabled: true,
       runs: [makeRun({ id: "run-1", status: "interrupted" })],
       resume: () => {
         throw new WorkflowRunCapError(3);
@@ -323,14 +309,14 @@ describe("workflow routes (flag on)", () => {
 
 describe("workflow routes (unknown run)", () => {
   test("getWorkflowRun throws NotFoundError for an unknown id", () => {
-    setup({ flagEnabled: true, runs: [] });
+    setup({ runs: [] });
     expect(() =>
       route("getWorkflowRun").handler({ pathParams: { id: "nope" } }),
     ).toThrow(NotFoundError);
   });
 
   test("abortWorkflowRun throws NotFoundError for an unknown id", () => {
-    const { aborted } = setup({ flagEnabled: true, runs: [] });
+    const { aborted } = setup({ runs: [] });
     expect(() =>
       route("abortWorkflowRun").handler({ pathParams: { id: "nope" } }),
     ).toThrow(NotFoundError);
@@ -338,35 +324,10 @@ describe("workflow routes (unknown run)", () => {
   });
 
   test("resumeWorkflowRun throws NotFoundError for an unknown id", async () => {
-    const { resumed } = setup({ flagEnabled: true, runs: [] });
+    const { resumed } = setup({ runs: [] });
     await expect(
       route("resumeWorkflowRun").handler({ pathParams: { id: "nope" } }),
     ).rejects.toThrow(NotFoundError);
     expect(resumed).toEqual([]);
   });
 });
-
-// ---------------------------------------------------------------------------
-// Flag off → every route 404s
-// ---------------------------------------------------------------------------
-
-describe("workflow routes (flag off)", () => {
-  beforeEach(() => {
-    setup({ flagEnabled: false, runs: [makeRun({ id: "run-1" })], saved: [] });
-  });
-
-  test.each([
-    ["listWorkflowRuns", { queryParams: {} }],
-    ["getWorkflowRun", { pathParams: { id: "run-1" } }],
-    ["abortWorkflowRun", { pathParams: { id: "run-1" } }],
-    ["listSavedWorkflows", {}],
-  ] as const)("%s throws NotFoundError when the flag is off", (op, args) => {
-    expect(() => route(op).handler(args)).toThrow(NotFoundError);
-  });
-
-  test("resumeWorkflowRun rejects with NotFoundError when the flag is off", async () => {
-    await expect(
-      route("resumeWorkflowRun").handler({ pathParams: { id: "run-1" } }),
-    ).rejects.toThrow(NotFoundError);
-  });
-});

package/src/runtime/routes/workflow-routes.ts

@@ -5,17 +5,10 @@
  * shared ROUTES array. They are read/abort surfaces over the workflow run
  * manager and the saved-workflow library — a human (via the `vellum workflows`
  * CLI or the app) can inspect runs and abort an in-flight one.
- *
- * Every handler is gated on the `workflows` feature flag: when it is off, the
- * routes behave as if they do not exist (404), so disabling the flag fully
- * hides the surface.
  */
 
 import { z } from "zod";
 
-import { isAssistantFeatureFlagEnabled } from "../../config/assistant-feature-flags.js";
-import { getConfig } from "../../config/loader.js";
-import type { AssistantConfig } from "../../config/schema.js";
 import { getAutoApproveThreshold } from "../../permissions/gateway-threshold-reader.js";
 import { isFullAccessThreshold } from "../../permissions/threshold.js";
 import { manifestGrantsSideEffects } from "../../workflows/capabilities.js";
@@ -46,8 +39,6 @@ export interface WorkflowRoutesDeps {
     "list" | "status" | "abort" | "resume"
   >;
   listWorkflows: typeof listWorkflows;
-  getConfig: () => AssistantConfig;
-  isFlagEnabled: (config: AssistantConfig) => boolean;
   getAutoApproveThreshold: typeof getAutoApproveThreshold;
 }
 
@@ -55,9 +46,6 @@ function defaultDeps(): WorkflowRoutesDeps {
   return {
     getManager: getWorkflowRunManager,
     listWorkflows,
-    getConfig,
-    isFlagEnabled: (config) =>
-      isAssistantFeatureFlagEnabled("workflows", config),
     getAutoApproveThreshold,
   };
 }
@@ -109,17 +97,6 @@ const savedWorkflowSchema = z.object({
 // Handlers (transport-agnostic)
 // ---------------------------------------------------------------------------
 
-/**
- * Throw a 404 when the `workflows` flag is off, hiding the whole surface. The
- * NotFoundError (rather than a 403) keeps a disabled-flag indistinguishable
- * from a route that does not exist.
- */
-function assertFlagEnabled(): void {
-  if (!deps.isFlagEnabled(deps.getConfig())) {
-    throw new NotFoundError("Workflows are not enabled.");
-  }
-}
-
 /**
  * The single compact-run wire contract, inferred from {@link workflowRunSchema}.
  * The HTTP routes return this shape; other producers (e.g. the CLI's client-side
@@ -162,7 +139,6 @@ function parseStatus(
 }
 
 function handleListRuns(queryParams: Record<string, string>) {
-  assertFlagEnabled();
   const limit = parseLimit(queryParams.limit);
   const status = parseStatus(queryParams.status);
   const runs = deps.getManager().list({
@@ -173,7 +149,6 @@ function handleListRuns(queryParams: Record<string, string>) {
 }
 
 function handleGetRun(id: string) {
-  assertFlagEnabled();
   const run = deps.getManager().status(id);
   if (!run) {
     throw new NotFoundError(`Workflow run ${id} not found`);
@@ -182,7 +157,6 @@ function handleGetRun(id: string) {
 }
 
 function handleAbortRun(id: string) {
-  assertFlagEnabled();
   // status() is the source of truth for existence; abort() itself is a no-op
   // for unknown/finished runs, so 404 on an unknown id is surfaced here.
   const manager = deps.getManager();
@@ -194,7 +168,6 @@ function handleAbortRun(id: string) {
 }
 
 async function handleResumeRun(id: string) {
-  assertFlagEnabled();
   const manager = deps.getManager();
   // status() is the source of truth for existence, so 404 an unknown id here
   // (matching abort) rather than letting resume's "not_found" reach the client
@@ -245,7 +218,6 @@ async function handleResumeRun(id: string) {
 }
 
 function handleListSavedWorkflows() {
-  assertFlagEnabled();
   return { workflows: deps.listWorkflows() };
 }
 

package/src/runtime/routes/workspace-greetings.ts

@@ -0,0 +1,55 @@
+import { existsSync, readFileSync } from "node:fs";
+
+import { getWorkspacePromptPath } from "../../util/platform.js";
+
+function readWorkspaceFile(name: string): string {
+  try {
+    const path = getWorkspacePromptPath(name);
+    if (!existsSync(path)) return "";
+    return readFileSync(path, "utf-8");
+  } catch {
+    return "";
+  }
+}
+
+/**
+ * Parse the `## Greetings` section from SOUL.md. Returns bullet items as an
+ * array of strings, or `null` if the section is missing or empty.
+ */
+export function parseGreetingsSection(content: string): string[] | null {
+  let inSection = false;
+  let sectionLevel: number | null = null;
+  const greetings: string[] = [];
+
+  for (const line of content.split("\n")) {
+    const trimmed = line.trim();
+    const heading = /^(#{1,6})\s+(.+?)\s*#*$/.exec(trimmed);
+    if (heading) {
+      const level = heading[1]!.length;
+      const title = heading[2]!.trim();
+      if (inSection) {
+        if (sectionLevel !== null && level <= sectionLevel) break;
+        continue;
+      }
+      if (level === 2 && /^greetings$/i.test(title)) {
+        inSection = true;
+        sectionLevel = level;
+      }
+      continue;
+    }
+    if (!inSection) continue;
+    const bullet = /^(?:[-*+]\s+|\d+[.)]\s+)(.+)$/.exec(trimmed);
+    const greeting = bullet?.[1]?.trim();
+    if (greeting) {
+      greetings.push(greeting);
+    }
+  }
+
+  return greetings.length > 0 ? greetings : null;
+}
+
+export function readWorkspaceGreetings(): string[] | null {
+  const soulContent = readWorkspaceFile("SOUL.md");
+  if (!soulContent) return null;
+  return parseGreetingsSection(soulContent);
+}

package/src/runtime/sync/resource-sync-events.ts

@@ -29,17 +29,7 @@ export function publishIdentityChanged(
     emoji: fields.emoji,
     home: fields.home,
   });
-  void publishSyncInvalidation(
-    [SYNC_TAGS.assistantIdentity, SYNC_TAGS.assistantIdentityIntro],
-    originClientId,
-  );
-}
-
-export function publishIdentityIntroChanged(originClientId?: string): void {
-  void publishSyncInvalidation(
-    [SYNC_TAGS.assistantIdentityIntro],
-    originClientId,
-  );
+  void publishSyncInvalidation([SYNC_TAGS.assistantIdentity], originClientId);
 }
 
 export function publishConfigChanged(originClientId?: string): void {

package/src/schedule/inference-profile.ts

@@ -1,4 +1,4 @@
-import { getConfigReadOnly } from "../config/loader.js";
+import { validateInferenceProfileKey } from "../config/inference-profile-validation.js";
 
 /**
  * Validate a schedule's inference-profile key against the configured
@@ -12,17 +12,5 @@ import { getConfigReadOnly } from "../config/loader.js";
 export function validateScheduleInferenceProfile(
   profile: string,
 ): string | null {
-  if (!profile.trim()) {
-    return "inferenceProfile must be a non-empty string";
-  }
-  const profiles = getConfigReadOnly().llm?.profiles ?? {};
-  if (!Object.prototype.hasOwnProperty.call(profiles, profile)) {
-    const available = Object.keys(profiles).sort();
-    const hint =
-      available.length > 0
-        ? ` Available profiles: ${available.join(", ")}.`
-        : " No profiles defined in llm.profiles.";
-    return `Inference profile "${profile}" is not defined in llm.profiles.${hint}`;
-  }
-  return null;
+  return validateInferenceProfileKey(profile);
 }