@vellumai/plugin-api 0.10.7-dev.202607081809.214a958 → 0.10.7-dev.202607081935.d1f7c0a

package/index.d.ts

@@ -101,12 +101,6 @@ export declare type AgentLoopExitReason =
 /** An unhandled error ended the turn. */
 | "error";
 
-declare interface AllowlistOption {
-    label: string;
-    description: string;
-    pattern: string;
-}
-
 declare interface AppDataResponse {
     type: "app_data_response";
     surfaceId: string;
@@ -1453,8 +1447,6 @@ declare interface EnvVarsResponse {
     vars: Record<string, string>;
 }
 
-declare type ErrorCategory = "permission_denied" | "auth" | "tool_failure" | "unexpected";
-
 declare type ErrorEvent_2 = z.infer<typeof ErrorEventSchema>;
 
 declare const ErrorEventSchema: z.ZodObject<{
@@ -1467,58 +1459,6 @@ declare const ErrorEventSchema: z.ZodObject<{
     conversationId: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 
-/**
- * Tool-related type declarations: the neutral leaf module describing
- * tools, permission risk, and tool execution results.
- *
- * Pure type-level declarations only (+ the `RiskLevel` enum, which is a
- * value). No runtime helpers live here — the assistant keeps all behavior
- * functions in `assistant/src/tools/` and re-exports the types from this
- * file. This module imports nothing, so it can sit at the bottom of the
- * import graph and be consumed by `tools/types.ts`, `providers/types.ts`,
- * and `permissions/types.ts` without creating cycles.
- *
- * Heavy daemon-internal references (CES client, host-proxy classes, trust
- * classifications, interface IDs, content blocks, CES `ApprovalRequired`)
- * are held as opaque `unknown` / broadened-`string` placeholders here. The
- * assistant redeclares `Tool`, `ToolContext`, `ToolExecutionResult`,
- * `ToolExecutedEvent`, `ToolLifecycleEvent`, `ToolLifecycleEventHandler`,
- * and `ProxyToolResolver` in `assistant/src/tools/types.ts` with the
- * concrete types in place, so existing call sites keep their full type
- * information. The two sides are structurally independent — no inheritance,
- * no intersection — which avoids TypeScript's contravariance mismatches on
- * lifecycle-event handlers.
- */
-declare type ExecutionTarget = "sandbox" | "host";
-
-/**
- * Telemetry fields stamped centrally by the executor's `emitLifecycleEvent`
- * on terminal (executed/error) lifecycle events.
- */
-declare interface ExecutorTelemetryStamp {
-    /**
-     * Model attribution snapshot for the conversation at invocation time.
-     * Copied from {@link ToolContext.attribution} by the executor; `null` when
-     * resolution failed or no attribution was available.
-     */
-    attribution?: UsageAttributionSnapshot | null;
-    /**
-     * Serialized byte size of the RAW tool input, stamped by the executor
-     * before sensitive-field sanitization rewrites `input`. Only the size
-     * leaves the device, never the payload.
-     */
-    inputBytes?: number | null;
-    /**
-     * Byte size of the RAW tool result content, stamped by the executor
-     * before sensitive-output extraction rewrites `result.content`. Only
-     * stamped on `executed` events: error events carry no executor-side
-     * result — the audit listener sizes the error string it builds itself,
-     * which never goes through sanitization, so it is already raw. Only the
-     * size leaves the device, never the payload.
-     */
-    resultBytes?: number | null;
-}
-
 export declare interface FileContent {
     type: "file";
     source: MediaSource_2;
@@ -3461,11 +3401,6 @@ declare interface SchedulesListResponse {
 
 declare type _SchedulesServerMessages = SchedulesListResponse | HeartbeatAlert | HeartbeatConversationCreated | HeartbeatConfigResponse | HeartbeatRunsListResponse | HeartbeatRunNowResponse | HeartbeatChecklistResponse | HeartbeatChecklistWriteResponse | FilingConfigResponse | FilingRunNowResponse;
 
-declare interface ScopeOption {
-    label: string;
-    scope: string;
-}
-
 /**
  * Result vocabulary for a secret prompt: how the value is delivered and the
  * outcome of the prompt. Kept in a leaf module (no runtime dependencies) so
@@ -4097,11 +4032,6 @@ export declare interface ToolContext {
      * @legacy
      */
     attribution?: UsageAttributionSnapshot | null;
-    /**
-     * Optional callback for tool lifecycle events (start/prompt/deny/execute/error).
-     * @legacy
-     */
-    onToolLifecycleEvent?: ToolLifecycleEventHandler;
     /**
      * Optional resolver for proxy tools - delegates execution to an external client.
      * @legacy
@@ -4369,54 +4299,6 @@ declare const ToolDefinitionSchema: z.ZodObject<{
     exclusive: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strip>;
 
-/**
- * `ToolExecutedEvent` carries a `result: ToolExecutionResult` field, so
- * the assistant re-declares it here to reference the assistant-side
- * `ToolExecutionResult` (which narrows `contentBlocks` to `ContentBlock[]`
- * and `cesApprovalRequired` to `ApprovalRequired`).
- */
-declare interface ToolExecutedEvent extends ExecutorTelemetryStamp {
-    type: "executed";
-    toolName: string;
-    input: Record<string, unknown>;
-    workingDir: string;
-    conversationId: string;
-    requestId?: string;
-    executionTarget?: ExecutionTarget;
-    riskLevel: string;
-    /** ID of the trust rule that matched this invocation (if any). */
-    matchedTrustRuleId?: string;
-    /** How the approval decision was reached. Copied from PermissionDecision for analytics consumers. */
-    approvalMode?: string;
-    /** Why the approval decision was reached (stable enum). Copied from PermissionDecision for analytics consumers. */
-    approvalReason?: string;
-    decision: string;
-    durationMs: number;
-    result: ToolExecutionResult;
-}
-
-/**
- * Extends the contracts declaration with the assistant-side telemetry
- * fields stamped centrally by the executor's `emitLifecycleEvent`.
- */
-declare interface ToolExecutionErrorEvent extends ToolExecutionErrorEvent_2, ExecutorTelemetryStamp {
-}
-
-declare interface ToolExecutionErrorEvent_2 extends ToolLifecycleEventBase {
-    type: "error";
-    riskLevel: string;
-    /** ID of the trust rule that matched this invocation (if any). */
-    matchedTrustRuleId?: string;
-    decision: string;
-    durationMs: number;
-    errorMessage: string;
-    isExpected: boolean;
-    /** Classifies the error for downstream consumers (audit, alerting, monitoring). */
-    errorCategory: ErrorCategory;
-    errorName?: string;
-    errorStack?: string;
-}
-
 export declare interface ToolExecutionResult {
     /** Textual result shown to the model in the tool-result block. Empty string is valid. */
     content: string;
@@ -4501,11 +4383,6 @@ export declare interface ToolExecutionResult {
     activityMetadata?: ToolActivityMetadata;
 }
 
-declare interface ToolExecutionStartEvent extends ToolLifecycleEventBase {
-    type: "start";
-    startedAtMs: number;
-}
-
 declare interface ToolInputDelta {
     type: "tool_input_delta";
     toolName: string;
@@ -4529,19 +4406,6 @@ declare interface ToolInputSchema {
     required?: string[];
 }
 
-declare type ToolLifecycleEvent = ToolExecutionStartEvent | ToolPermissionPromptEvent | ToolPermissionDeniedEvent | ToolExecutedEvent | ToolExecutionErrorEvent;
-
-declare interface ToolLifecycleEventBase {
-    toolName: string;
-    input: Record<string, unknown>;
-    workingDir: string;
-    conversationId: string;
-    requestId?: string;
-    executionTarget?: ExecutionTarget;
-}
-
-declare type ToolLifecycleEventHandler = (event: ToolLifecycleEvent) => void | Promise<void>;
-
 declare interface ToolNamesListResponse {
     type: "tool_names_list_response";
     /** Sorted list of all registered tool names. */
@@ -4569,30 +4433,6 @@ declare const ToolOutputChunkEventSchema: z.ZodObject<{
     messageId: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 
-declare interface ToolPermissionDeniedEvent extends ToolLifecycleEventBase {
-    type: "permission_denied";
-    riskLevel: string;
-    /** Classifier-provided reason explaining why the risk level was assigned (bash/host_bash only). */
-    riskReason?: string;
-    /** ID of the trust rule that matched this invocation (if any). */
-    matchedTrustRuleId?: string;
-    decision: "deny" | "always_deny";
-    reason: string;
-    durationMs: number;
-}
-
-declare interface ToolPermissionPromptEvent extends ToolLifecycleEventBase {
-    type: "permission_prompt";
-    riskLevel: string;
-    /** Classifier-provided reason explaining why the risk level was assigned (bash/host_bash only). */
-    riskReason?: string;
-    reason: string;
-    allowlistOptions: AllowlistOption[];
-    scopeOptions: ScopeOption[];
-    diff?: DiffInfo;
-    persistentDecisionsAllowed?: boolean;
-}
-
 declare interface ToolPermissionSimulateResponse {
     type: "tool_permission_simulate_response";
     success: boolean;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vellumai/plugin-api",
-  "version": "0.10.7-dev.202607081809.214a958",
+  "version": "0.10.7-dev.202607081935.d1f7c0a",
   "description": "Public TypeScript authoring contract for Vellum assistant plugins.",
   "license": "MIT",
   "type": "module",