@vellumai/cli 0.10.11-dev.202607242127.a6bf2b2 → 0.10.11-staging.2

package/src/__tests__/platform-client.test.ts

@@ -240,11 +240,7 @@ describe("fetchAssistantDetail / fetchUpgradeInProgress", () => {
       current_release_version: "0.7.0",
       release_channel: "preview",
     });
-    const detail = await fetchAssistantDetail(
-      TOKEN,
-      ASSISTANT_ID,
-      PLATFORM_URL,
-    );
+    const detail = await fetchAssistantDetail(TOKEN, ASSISTANT_ID, PLATFORM_URL);
     expect(detail).toEqual({
       currentReleaseVersion: "0.7.0",
       releaseChannel: "preview",
@@ -255,11 +251,7 @@ describe("fetchAssistantDetail / fetchUpgradeInProgress", () => {
 
   test("fetchAssistantDetail defaults missing fields", async () => {
     mockFetchJson({});
-    const detail = await fetchAssistantDetail(
-      TOKEN,
-      ASSISTANT_ID,
-      PLATFORM_URL,
-    );
+    const detail = await fetchAssistantDetail(TOKEN, ASSISTANT_ID, PLATFORM_URL);
     expect(detail).toEqual({
       currentReleaseVersion: null,
       releaseChannel: "stable",

package/src/__tests__/statefulset.test.ts

@@ -56,9 +56,7 @@ describe("getBuilderManagedEnvKeys", () => {
 
   test("gateway hostForwarded equals the three spec host entries", () => {
     const { hostForwarded } = getBuilderManagedEnvKeys("gateway");
-    const sorted = [...hostForwarded].sort((a, b) =>
-      a.name.localeCompare(b.name),
-    );
+    const sorted = [...hostForwarded].sort((a, b) => a.name.localeCompare(b.name));
     expect(sorted).toEqual([
       { name: "VELAY_BASE_URL", hostVar: "VELAY_BASE_URL" },
       { name: "VELLUM_ENVIRONMENT", hostVar: "VELLUM_ENVIRONMENT" },

package/src/__tests__/tunnel.test.ts

@@ -5,7 +5,6 @@ import {
   describe,
   expect,
   mock,
-  spyOn,
   test,
 } from "bun:test";
 import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from "node:fs";
@@ -146,7 +145,6 @@ describe("tunnel nginx ingress feature flag", () => {
     expect(init?.method).toBe("GET");
     expect(runNgrokTunnelMock).toHaveBeenCalledWith({
       port: 7830,
-      assistantId: "assistant-1",
       workspaceDir: join(entry.resources!.instanceDir, ".vellum", "workspace"),
       preferNginxIngress: true,
     });
@@ -163,56 +161,4 @@ describe("tunnel nginx ingress feature flag", () => {
     expect(runNgrokTunnelMock).not.toHaveBeenCalled();
     expect(runCloudflareTunnelMock).not.toHaveBeenCalled();
   });
-
-  test("rejects an unknown --provider with a stale-CLI hint", async () => {
-    process.argv = ["bun", "vellum", "tunnel", "--provider", "bogus"];
-    const errors: string[] = [];
-    const errSpy = spyOn(console, "error").mockImplementation(
-      (...a: unknown[]) => {
-        errors.push(a.join(" "));
-      },
-    );
-    const exitSpy = spyOn(process, "exit").mockImplementation(((
-      code?: number,
-    ) => {
-      throw new Error(`exit:${code}`);
-    }) as never);
-
-    let exited = false;
-    try {
-      await tunnel();
-    } catch (e) {
-      exited = (e as Error).message === "exit:1";
-    } finally {
-      errSpy.mockRestore();
-      exitSpy.mockRestore();
-    }
-
-    expect(exited).toBe(true);
-    const joined = errors.join("\n");
-    expect(joined).toContain("unknown tunnel provider 'bogus'");
-    expect(joined).toContain("your CLI may be out of date");
-    expect(joined).toContain("bun install -g vellum@latest");
-    expect(runNgrokTunnelMock).not.toHaveBeenCalled();
-    expect(runCloudflareTunnelMock).not.toHaveBeenCalled();
-  });
-
-  test("a not-yet-implemented provider error carries the stale-CLI hint", async () => {
-    // The default `vellum` provider has no runtime yet, so it exercises the
-    // not-yet-implemented path without any network call.
-    process.argv = ["bun", "vellum", "tunnel", "--provider", "vellum"];
-
-    let err: Error | undefined;
-    try {
-      await tunnel();
-    } catch (e) {
-      err = e as Error;
-    }
-
-    expect(err?.message).toContain("is not yet implemented");
-    expect(err?.message).toContain("your CLI may be out of date");
-    expect(err?.message).toContain("bun install -g vellum@latest");
-    expect(runNgrokTunnelMock).not.toHaveBeenCalled();
-    expect(runCloudflareTunnelMock).not.toHaveBeenCalled();
-  });
 });

package/src/__tests__/wake.test.ts

@@ -14,11 +14,8 @@ import { join } from "node:path";
 
 import * as assistantConfig from "../lib/assistant-config.js";
 import * as docker from "../lib/docker.js";
-import * as featureFlags from "../lib/feature-flags.js";
 import * as guardianToken from "../lib/guardian-token.js";
-import * as ingressConfig from "../lib/ingress-config.js";
 import * as local from "../lib/local.js";
-import * as nginxIngress from "../lib/nginx-ingress.js";
 import * as ngrok from "../lib/ngrok.js";
 import * as processLib from "../lib/process.js";
 import type { AssistantEntry } from "../lib/assistant-config.js";
@@ -30,8 +27,9 @@ const realLocal = { ...local };
 const realNgrok = { ...ngrok };
 const realProcessLib = { ...processLib };
 
-const resolveTargetAssistantMock =
-  mock<typeof assistantConfig.resolveTargetAssistant>();
+const resolveTargetAssistantMock = mock<
+  typeof assistantConfig.resolveTargetAssistant
+>();
 const saveAssistantEntryMock = mock<typeof assistantConfig.saveAssistantEntry>(
   () => {},
 );
@@ -63,10 +61,9 @@ const seedGuardianTokenFromSiblingEnvMock = mock<
 // Default: a token exists, so the re-provision recovery path is skipped. Tests
 // that exercise recovery override loadGuardianToken to return null.
 const loadGuardianTokenMock = mock<typeof guardianToken.loadGuardianToken>(
-  () =>
-    ({ accessToken: "existing" }) as ReturnType<
-      typeof guardianToken.loadGuardianToken
-    >,
+  () => ({ accessToken: "existing" }) as ReturnType<
+    typeof guardianToken.loadGuardianToken
+  >,
 );
 const resetGuardianBootstrapMock = mock<
   typeof guardianToken.resetGuardianBootstrap
@@ -114,9 +111,7 @@ const isAssistantWatchModeAvailableMock = mock<
 const isGatewayWatchModeAvailableMock = mock<
   typeof local.isGatewayWatchModeAvailable
 >(() => false);
-const startLocalDaemonMock = mock<typeof local.startLocalDaemon>(
-  async () => {},
-);
+const startLocalDaemonMock = mock<typeof local.startLocalDaemon>(async () => {});
 const startGatewayMock = mock<typeof local.startGateway>(
   async () => "http://127.0.0.1:7830",
 );
@@ -141,50 +136,11 @@ mock.module("../lib/ngrok", () => ({
   maybeStartNgrokTunnel: maybeStartNgrokTunnelMock,
 }));
 
-const realFeatureFlags = { ...featureFlags };
-const realIngressConfig = { ...ingressConfig };
-const realNginxIngress = { ...nginxIngress };
-
-const isAssistantFeatureFlagEnabledMock = mock<
-  typeof featureFlags.isAssistantFeatureFlagEnabled
->(async () => true);
-
-mock.module("../lib/feature-flags.js", () => ({
-  ...realFeatureFlags,
-  isAssistantFeatureFlagEnabled: isAssistantFeatureFlagEnabledMock,
-}));
-
-const loadRawConfigMock = mock<typeof ingressConfig.loadRawConfig>(() => ({}));
-
-mock.module("../lib/ingress-config.js", () => ({
-  ...realIngressConfig,
-  loadRawConfig: loadRawConfigMock,
-}));
-
-const isIngressRunningMock = mock<typeof nginxIngress.isIngressRunning>(
-  () => false,
-);
-const startRemoteWebIngressMock = mock<
-  typeof nginxIngress.startRemoteWebIngress
->(async () => ({
-  status: "started",
-  listenPort: 7840,
-  webDistDir: "/tmp/web/dist",
-  version: "nginx/1.25.3",
-}));
-
-mock.module("../lib/nginx-ingress.js", () => ({
-  ...realNginxIngress,
-  isIngressRunning: isIngressRunningMock,
-  startRemoteWebIngress: startRemoteWebIngressMock,
-}));
-
 const { wake } = await import("../commands/wake.js");
 
 let tempDir: string;
 let originalArgv: string[];
 let logSpy: ReturnType<typeof spyOn>;
-let warnSpy: ReturnType<typeof spyOn>;
 
 function makeLocalEntry(): AssistantEntry {
   tempDir = mkdtempSync(join(tmpdir(), "vellum-wake-test-"));
@@ -209,7 +165,6 @@ beforeEach(() => {
   tempDir = "";
   process.argv = ["bun", "vellum", "wake", "--watch", "local-assistant"];
   logSpy = spyOn(console, "log").mockImplementation(() => {});
-  warnSpy = spyOn(console, "warn").mockImplementation(() => {});
 
   const entry = makeLocalEntry();
   resolveTargetAssistantMock.mockReset();
@@ -220,12 +175,10 @@ beforeEach(() => {
     join(resources!.instanceDir, ".vellum", "daemon.pid"),
   );
   resolveProcessStateMock.mockReset();
-  resolveProcessStateMock.mockImplementation(
-    async (_pidFile, _port, label) => ({
-      status: "healthy",
-      pid: label === "Gateway" ? 456 : 123,
-    }),
-  );
+  resolveProcessStateMock.mockImplementation(async (_pidFile, _port, label) => ({
+    status: "healthy",
+    pid: label === "Gateway" ? 456 : 123,
+  }));
   stopProcessByPidFileMock.mockReset();
   stopProcessByPidFileMock.mockResolvedValue(true);
   generateLocalSigningKeyMock.mockReset();
@@ -245,9 +198,9 @@ beforeEach(() => {
   seedGuardianTokenFromSiblingEnvMock.mockReset();
   seedGuardianTokenFromSiblingEnvMock.mockReturnValue(false);
   loadGuardianTokenMock.mockReset();
-  loadGuardianTokenMock.mockReturnValue({
-    accessToken: "existing",
-  } as ReturnType<typeof guardianToken.loadGuardianToken>);
+  loadGuardianTokenMock.mockReturnValue({ accessToken: "existing" } as ReturnType<
+    typeof guardianToken.loadGuardianToken
+  >);
   resetGuardianBootstrapMock.mockReset();
   resetGuardianBootstrapMock.mockResolvedValue(undefined);
   leaseGuardianTokenMock.mockReset();
@@ -256,25 +209,11 @@ beforeEach(() => {
   );
   maybeStartNgrokTunnelMock.mockReset();
   maybeStartNgrokTunnelMock.mockResolvedValue(null);
-  isAssistantFeatureFlagEnabledMock.mockReset();
-  isAssistantFeatureFlagEnabledMock.mockResolvedValue(true);
-  loadRawConfigMock.mockReset();
-  loadRawConfigMock.mockReturnValue({});
-  isIngressRunningMock.mockReset();
-  isIngressRunningMock.mockReturnValue(false);
-  startRemoteWebIngressMock.mockReset();
-  startRemoteWebIngressMock.mockResolvedValue({
-    status: "started",
-    listenPort: 7840,
-    webDistDir: "/tmp/web/dist",
-    version: "nginx/1.25.3",
-  });
 });
 
 afterEach(() => {
   process.argv = originalArgv;
   logSpy.mockRestore();
-  warnSpy.mockRestore();
   if (tempDir) {
     rmSync(tempDir, { recursive: true, force: true });
   }
@@ -287,9 +226,6 @@ afterAll(() => {
   mock.module("../lib/process", () => realProcessLib);
   mock.module("../lib/local", () => realLocal);
   mock.module("../lib/ngrok", () => realNgrok);
-  mock.module("../lib/feature-flags.js", () => realFeatureFlags);
-  mock.module("../lib/ingress-config.js", () => realIngressConfig);
-  mock.module("../lib/nginx-ingress.js", () => realNginxIngress);
 });
 
 describe("vellum wake", () => {
@@ -316,13 +252,7 @@ describe("vellum wake", () => {
   });
 
   test("re-provisions the guardian token when missing and --repair-guardian is passed", async () => {
-    process.argv = [
-      "bun",
-      "vellum",
-      "wake",
-      "--repair-guardian",
-      "local-assistant",
-    ];
+    process.argv = ["bun", "vellum", "wake", "--repair-guardian", "local-assistant"];
     loadGuardianTokenMock.mockReturnValue(null);
 
     await wake();
@@ -358,13 +288,7 @@ describe("vellum wake", () => {
     // (revoked, mis-seeded, wrong principal). The user explicitly confirmed
     // the destructive repair, so the flag forces a re-lease instead of
     // guessing from local token state and recreating the no-op loop.
-    process.argv = [
-      "bun",
-      "vellum",
-      "wake",
-      "--repair-guardian",
-      "local-assistant",
-    ];
+    process.argv = ["bun", "vellum", "wake", "--repair-guardian", "local-assistant"];
     // loadGuardianToken returns a healthy-looking token by default.
     await wake();
 
@@ -402,121 +326,3 @@ describe("vellum wake", () => {
     expect(startLocalDaemonMock).not.toHaveBeenCalled();
   });
 });
-
-describe("vellum wake — web ingress restore", () => {
-  const enabledConfig = {
-    ingress: { enabled: true, publicBaseUrl: "https://assistant.example.com" },
-  };
-
-  beforeEach(() => {
-    process.argv = ["bun", "vellum", "wake", "local-assistant"];
-  });
-
-  test("restores the edge when ingress is enabled, the flag is on, and it is not already running", async () => {
-    loadRawConfigMock.mockReturnValue(enabledConfig);
-
-    await wake();
-
-    expect(isAssistantFeatureFlagEnabledMock).toHaveBeenCalledWith(
-      "local-assistant",
-      "web-remote-ingress",
-      { runtimeUrl: "http://127.0.0.1:7830" },
-    );
-    expect(startRemoteWebIngressMock).toHaveBeenCalledWith(
-      expect.objectContaining({
-        workspaceDir: join(tempDir, ".vellum", "workspace"),
-        gatewayPort: 7830,
-      }),
-    );
-    expect(logSpy).toHaveBeenCalledWith("Wake complete.");
-  });
-
-  test("does not attempt a restore when ingress is disabled", async () => {
-    loadRawConfigMock.mockReturnValue({ ingress: { enabled: false } });
-
-    await wake();
-
-    expect(isAssistantFeatureFlagEnabledMock).not.toHaveBeenCalled();
-    expect(startRemoteWebIngressMock).not.toHaveBeenCalled();
-  });
-
-  test("does not attempt a restore when ingress config is absent", async () => {
-    loadRawConfigMock.mockReturnValue({});
-
-    await wake();
-
-    expect(isAssistantFeatureFlagEnabledMock).not.toHaveBeenCalled();
-    expect(startRemoteWebIngressMock).not.toHaveBeenCalled();
-  });
-
-  test("does not attempt a restore when enabled but the public URL is missing", async () => {
-    loadRawConfigMock.mockReturnValue({ ingress: { enabled: true } });
-
-    await wake();
-
-    expect(isAssistantFeatureFlagEnabledMock).not.toHaveBeenCalled();
-    expect(startRemoteWebIngressMock).not.toHaveBeenCalled();
-  });
-
-  test("does not start a second edge when one is already running", async () => {
-    loadRawConfigMock.mockReturnValue(enabledConfig);
-    isIngressRunningMock.mockReturnValue(true);
-
-    await wake();
-
-    // Already up — skip the flag probe and the start entirely.
-    expect(isAssistantFeatureFlagEnabledMock).not.toHaveBeenCalled();
-    expect(startRemoteWebIngressMock).not.toHaveBeenCalled();
-  });
-
-  test("skips the restore quietly with a hint when the flag is off", async () => {
-    loadRawConfigMock.mockReturnValue(enabledConfig);
-    isAssistantFeatureFlagEnabledMock.mockResolvedValue(false);
-
-    await wake();
-
-    expect(startRemoteWebIngressMock).not.toHaveBeenCalled();
-    expect(logSpy).toHaveBeenCalledWith(
-      expect.stringContaining("web-remote-ingress"),
-    );
-    expect(logSpy).toHaveBeenCalledWith("Wake complete.");
-  });
-
-  test("a thrown restore failure warns but does not fail the wake", async () => {
-    loadRawConfigMock.mockReturnValue(enabledConfig);
-    startRemoteWebIngressMock.mockRejectedValue(new Error("nginx boom"));
-
-    await wake();
-
-    expect(startRemoteWebIngressMock).toHaveBeenCalled();
-    expect(warnSpy).toHaveBeenCalled();
-    expect(logSpy).toHaveBeenCalledWith("Wake complete.");
-  });
-
-  test("an unreachable edge warns but does not fail the wake", async () => {
-    loadRawConfigMock.mockReturnValue(enabledConfig);
-    startRemoteWebIngressMock.mockResolvedValue({
-      status: "unreachable",
-      listenPort: 7840,
-      logPath: "/tmp/nginx-ingress.log",
-    });
-
-    await wake();
-
-    expect(warnSpy).toHaveBeenCalled();
-    expect(logSpy).toHaveBeenCalledWith("Wake complete.");
-  });
-
-  test("a failed flag probe warns and leaves the edge down without failing the wake", async () => {
-    loadRawConfigMock.mockReturnValue(enabledConfig);
-    isAssistantFeatureFlagEnabledMock.mockRejectedValue(
-      new Error("gateway unreachable"),
-    );
-
-    await wake();
-
-    expect(startRemoteWebIngressMock).not.toHaveBeenCalled();
-    expect(warnSpy).toHaveBeenCalled();
-    expect(logSpy).toHaveBeenCalledWith("Wake complete.");
-  });
-});

package/src/commands/backup.ts

@@ -134,18 +134,15 @@ export async function backup(): Promise<void> {
   // Call the export endpoint
   let response: Response;
   try {
-    response = await loopbackSafeFetch(
-      `${entry.runtimeUrl}/v1/migrations/export`,
-      {
-        method: "POST",
-        headers: {
-          Authorization: `Bearer ${accessToken}`,
-          "Content-Type": "application/json",
-        },
-        body: JSON.stringify({ description: "CLI backup" }),
-        signal: AbortSignal.timeout(exportTimeoutMs),
+    response = await loopbackSafeFetch(`${entry.runtimeUrl}/v1/migrations/export`, {
+      method: "POST",
+      headers: {
+        Authorization: `Bearer ${accessToken}`,
+        "Content-Type": "application/json",
       },
-    );
+      body: JSON.stringify({ description: "CLI backup" }),
+      signal: AbortSignal.timeout(exportTimeoutMs),
+    });
 
     // Retry once with a fresh token on 401 — the cached token may be stale
     // after a container restart that generated a new gateway signing key.
@@ -163,18 +160,15 @@ export async function backup(): Promise<void> {
       }
       if (refreshedToken) {
         accessToken = refreshedToken;
-        response = await loopbackSafeFetch(
-          `${entry.runtimeUrl}/v1/migrations/export`,
-          {
-            method: "POST",
-            headers: {
-              Authorization: `Bearer ${accessToken}`,
-              "Content-Type": "application/json",
-            },
-            body: JSON.stringify({ description: "CLI backup" }),
-            signal: AbortSignal.timeout(exportTimeoutMs),
+        response = await loopbackSafeFetch(`${entry.runtimeUrl}/v1/migrations/export`, {
+          method: "POST",
+          headers: {
+            Authorization: `Bearer ${accessToken}`,
+            "Content-Type": "application/json",
           },
-        );
+          body: JSON.stringify({ description: "CLI backup" }),
+          signal: AbortSignal.timeout(exportTimeoutMs),
+        });
       }
     }
   } catch (err) {