@vellumai/cli 0.5.13 → 0.5.14
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/AGENTS.md +6 -0
- package/package.json +1 -1
- package/src/__tests__/teleport.test.ts +829 -0
- package/src/commands/hatch.ts +8 -3
- package/src/commands/ps.ts +1 -1
- package/src/commands/recover.ts +13 -4
- package/src/commands/rollback.ts +0 -9
- package/src/commands/teleport.ts +746 -0
- package/src/commands/upgrade.ts +0 -11
- package/src/commands/wake.ts +17 -4
- package/src/index.ts +3 -0
- package/src/lib/assistant-config.ts +3 -2
- package/src/lib/docker.ts +2 -146
- package/src/lib/local.ts +32 -2
- package/src/lib/upgrade-lifecycle.ts +0 -11
package/AGENTS.md
CHANGED
|
@@ -41,6 +41,12 @@ Every command must have high-quality `--help` output. Follow the same standards
|
|
|
41
41
|
AI agents parse help text to decide which command to run and how. Avoid vague
|
|
42
42
|
language — say exactly what the command does and where state is stored.
|
|
43
43
|
|
|
44
|
+
## Boundary: No `.vellum/` directory access
|
|
45
|
+
|
|
46
|
+
The CLI must **never** read from or write to the `.vellum/` directory (e.g. `~/.vellum/protected/`, `<instanceDir>/.vellum/`). That directory structure is an **assistant daemon / gateway implementation detail**. The CLI's job is to spawn those processes and pass configuration via environment variables — not to reach into their internal storage.
|
|
47
|
+
|
|
48
|
+
For example, the signing key used for JWT auth between the daemon and gateway is persisted in the lockfile (`resources.signingKey`) so that client actor tokens survive daemon/gateway restarts. On first start (or when the key is missing), the CLI generates a new key via `generateLocalSigningKey()` in `lib/local.ts`, saves it to the lockfile entry, and passes it to both `startLocalDaemon` and `startGateway` as the `ACTOR_TOKEN_SIGNING_KEY` env var. The CLI does **not** read or write to the `.vellum/` directory for signing keys — it uses the lockfile instead.
|
|
49
|
+
|
|
44
50
|
## Docker Volume Management
|
|
45
51
|
|
|
46
52
|
The CLI creates and manages Docker volumes for containerized instances. See the root `AGENTS.md` § Docker Volume Architecture for the full volume layout.
|