@vellumai/cli 0.10.7-dev.202607082034.5ac40b3 → 0.10.7-dev.202607082203.bf32263

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vellumai/cli",
-  "version": "0.10.7-dev.202607082034.5ac40b3",
+  "version": "0.10.7-dev.202607082203.bf32263",
   "description": "CLI tools for vellum-assistant",
   "type": "module",
   "exports": {

package/src/__tests__/sleep.test.ts

@@ -172,8 +172,7 @@ describe("sleep command", () => {
       undefined,
       7000,
     );
-    // The CES sibling (CES_STANDALONE opt-in) is stopped by its PID file; a
-    // no-op when absent on the default topology.
+    // The CES sibling is stopped by its PID file; a no-op when absent.
     expect(stopProcessByPidFileMock).toHaveBeenNthCalledWith(
       3,
       join(assistantRootDir, "ces.pid"),

package/src/commands/recover.ts

@@ -118,9 +118,9 @@ export async function recover(): Promise<void> {
   entry.guardianBootstrapSecret = bootstrapSecret;
   saveAssistantEntry(entry);
 
-  // 8. Start CES sibling (opt-in) + daemon + gateway in parallel, the way the
-  // Docker topology brings its sibling processes up together. startCes is a
-  // no-op unless CES_STANDALONE is set.
+  // 8. Start CES sibling + daemon + gateway in parallel, the way the
+  // Docker topology brings its sibling processes up together. startCes
+  // always launches the CES sibling.
   await Promise.all([
     startCes(false, entry.resources),
     startLocalDaemon(false, entry.resources, { signingKey }),

package/src/commands/sleep.ts

@@ -168,9 +168,8 @@ export async function sleep(): Promise<void> {
     console.log("Gateway stopped.");
   }
 
-  // Stop the CES sibling if one was launched (CES_STANDALONE). No-op when the
-  // PID file is absent — on the default topology the assistant owns CES as an
-  // stdio child and it exits with the daemon.
+  // Stop the CES sibling — it is stopped by its PID file, a no-op when the
+  // PID file is absent (e.g. the sibling was never started or already exited).
   const cesPidFile = join(vellumDir, "ces.pid");
   const cesStopped = await stopProcessByPidFile(
     cesPidFile,

package/src/commands/upgrade.ts

@@ -1018,8 +1018,8 @@ async function upgradeLocal(
   process.env.APP_VERSION = stripVersionPrefix(targetVersion);
   try {
     // Bring CES, daemon, and gateway up in parallel, the way the Docker
-    // topology starts its sibling processes together. startCes is a no-op
-    // unless CES_STANDALONE is set.
+    // topology starts its sibling processes together. startCes always
+    // launches the CES sibling.
     await Promise.all([
       startCes(false, entry.resources),
       startLocalDaemon(false, entry.resources, { signingKey }),

package/src/commands/wake.ts

@@ -210,9 +210,8 @@ export async function wake(): Promise<void> {
     // CES socket during startup (discoverCesWithRetry), so it tolerates CES
     // still binding. CES's lifecycle tracks the daemon (its only consumer):
     // restarting it under a live daemon would sever the daemon's open
-    // connection, so it is only (re)started alongside the daemon. startCes is a
-    // no-op unless CES_STANDALONE is set, in which case the assistant spawns
-    // CES itself as today.
+    // connection, so it is only (re)started alongside the daemon. startCes
+    // always launches the CES sibling unconditionally.
     await Promise.all([
       startCes(watch, resources),
       startLocalDaemon(watch, resources, { foreground, signingKey }),
@@ -229,7 +228,7 @@ export async function wake(): Promise<void> {
     // died independently (crash, OOM kill). A dead ces.pid under a live daemon
     // means credential operations will fail until the next wake. Relaunch the
     // sibling so the daemon's lazy reconnect (secure-keys.ts) picks it up on
-    // the next credential read. startCes is a no-op unless CES_STANDALONE.
+    // the next credential read. startCes always launches the sibling.
     const vellumDir = join(resources.instanceDir, ".vellum");
     const cesPidFile = join(vellumDir, "ces.pid");
     const cesAlive = isProcessAlive(cesPidFile).alive;

package/src/lib/__tests__/local-ces.test.ts

@@ -92,7 +92,6 @@ describe("startCes", () => {
 
     // Verify env vars
     const env = lastSpawnCall!.options.env!;
-    expect(env["CES_STANDALONE"]).toBe("1");
     expect(env["CES_LOCAL_SOCKET"]).toBeDefined();
     expect(env["CREDENTIAL_SECURITY_DIR"]).toBeDefined();
     expect(env["VELLUM_WORKSPACE_DIR"]).toBeDefined();

package/src/lib/hatch-local.ts

@@ -227,9 +227,9 @@ export async function hatchLocal(
   const signingKey = generateLocalSigningKey();
   const bootstrapSecret = generateLocalSigningKey();
   // Launch the CES sibling alongside the daemon, in parallel — matching the
-  // Docker topology. Under the opt-in the assistant does not spawn its own CES,
-  // so a freshly hatched instance would otherwise come up with CES unavailable.
-  // startCes is a no-op unless CES_STANDALONE is set.
+  // Docker topology. The assistant does not spawn its own CES, so a freshly
+  // hatched instance would otherwise come up with CES unavailable.
+  // startCes always launches the CES sibling.
   await Promise.all([
     startCes(watch, resources),
     startLocalDaemon(watch, resources, {

package/src/lib/local.ts

@@ -577,7 +577,6 @@ function applyDaemonEnvOverrides(
   // regardless of any stale CES_LOCAL_SOCKET inherited from the parent
   // environment. The assistant connects to the sibling instead of spawning
   // its own CES.
-  env.CES_STANDALONE = "1";
   env.CES_LOCAL_SOCKET = resolveCesSocketPath(resources);
   applyIpcSocketDirOverride(env);
 }
@@ -852,10 +851,9 @@ function resolveCesSocketPath(resources?: LocalInstanceResources): string {
  * the default topology for local (non-containerized) instances, matching how
  * containerized homes already run CES.
  *
- * The sibling runs with `CES_STANDALONE=1` so its lifecycle is anchored to
- * SIGTERM rather than stdin EOF, mirroring the gateway: a CLI-owned process
- * with a PID file under `.vellum/ces.pid`, started by `wake` and stopped by
- * `sleep`.
+ * The sibling runs as an independent process with its lifecycle anchored to
+ * SIGTERM, mirroring the gateway: a CLI-owned process with a PID file under
+ * `.vellum/ces.pid`, started by `wake` and stopped by `sleep`.
  */
 export async function startCes(
   watch: boolean = false,
@@ -891,7 +889,6 @@ export async function startCes(
 
   const cesEnv: Record<string, string | undefined> = {
     ...process.env,
-    CES_STANDALONE: "1",
     CES_LOCAL_SOCKET: socketPath,
     CREDENTIAL_SECURITY_DIR: securityDir,
     VELLUM_WORKSPACE_DIR: workspaceDir,
@@ -1701,9 +1698,8 @@ export async function stopLocalProcesses(
   const gatewayPidFile = join(vellumDir, "gateway.pid");
   await stopProcessByPidFile(gatewayPidFile, "gateway", undefined, 7000);
 
-  // Stop the CES sibling if one was launched (CES_STANDALONE). No-op when the
-  // PID file is absent, so this is safe on the default topology where the
-  // assistant owns CES as an stdio child.
+  // Stop the CES sibling if one was launched. No-op when the
+  // PID file is absent.
   const cesPidFile = join(vellumDir, "ces.pid");
   await stopProcessByPidFile(cesPidFile, "credential-executor");
 

package/src/lib/retire-local.ts

@@ -66,9 +66,8 @@ export async function retireLocal(
   const gatewayPidFile = join(vellumDir, "gateway.pid");
   await stopProcessByPidFile(gatewayPidFile, "gateway", undefined, 7000);
 
-  // Stop the CES sibling if one was launched (CES_STANDALONE). No-op when the
-  // PID file is absent — on the default topology the assistant owns CES as an
-  // stdio child and it exits with the daemon.
+  // Stop the CES sibling — it is stopped by its PID file, a no-op when the
+  // PID file is absent (e.g. the sibling was never started or already exited).
   const cesPidFile = join(vellumDir, "ces.pid");
   const cesStopped = await stopProcessByPidFile(
     cesPidFile,