vellum 0.0.16 → 0.2.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (838) hide show
  1. package/.dockerignore +27 -0
  2. package/.env.example +22 -0
  3. package/Dockerfile +99 -0
  4. package/Dockerfile.sandbox +5 -0
  5. package/README.md +150 -3
  6. package/bun.lock +1768 -0
  7. package/bunfig.toml +2 -0
  8. package/docs/skills.md +158 -0
  9. package/drizzle/0000_dizzy_maggott.sql +301 -0
  10. package/drizzle/meta/0000_snapshot.json +1999 -0
  11. package/drizzle/meta/_journal.json +13 -0
  12. package/drizzle.config.ts +7 -0
  13. package/eslint.config.mjs +17 -0
  14. package/hook-templates/debug-prompt-logger/hook.json +7 -0
  15. package/hook-templates/debug-prompt-logger/run.sh +68 -0
  16. package/knip.json +9 -0
  17. package/package.json +60 -10
  18. package/scripts/ipc/check-contract-inventory.ts +104 -0
  19. package/scripts/ipc/check-swift-decoder-drift.ts +163 -0
  20. package/scripts/ipc/generate-swift.ts +492 -0
  21. package/scripts/test-filesystem-tools.sh +48 -0
  22. package/scripts/test.sh +122 -0
  23. package/src/__tests__/__snapshots__/ipc-snapshot.test.ts.snap +2079 -0
  24. package/src/__tests__/account-registry.test.ts +244 -0
  25. package/src/__tests__/active-skill-tools.test.ts +378 -0
  26. package/src/__tests__/agent-loop-thinking.test.ts +81 -0
  27. package/src/__tests__/agent-loop.test.ts +1135 -0
  28. package/src/__tests__/anthropic-provider.test.ts +778 -0
  29. package/src/__tests__/app-builder-tool-scripts.test.ts +290 -0
  30. package/src/__tests__/app-bundler.test.ts +313 -0
  31. package/src/__tests__/app-executors.test.ts +613 -0
  32. package/src/__tests__/app-open-proxy.test.ts +62 -0
  33. package/src/__tests__/asset-materialize-tool.test.ts +451 -0
  34. package/src/__tests__/asset-search-tool.test.ts +476 -0
  35. package/src/__tests__/assistant-attachment-directive.test.ts +401 -0
  36. package/src/__tests__/assistant-attachments.test.ts +437 -0
  37. package/src/__tests__/assistant-event-hub.test.ts +226 -0
  38. package/src/__tests__/assistant-event.test.ts +123 -0
  39. package/src/__tests__/attachments-store.test.ts +547 -0
  40. package/src/__tests__/attachments.test.ts +134 -0
  41. package/src/__tests__/audit-log-rotation.test.ts +154 -0
  42. package/src/__tests__/browser-fill-credential.test.ts +309 -0
  43. package/src/__tests__/browser-manager.test.ts +203 -0
  44. package/src/__tests__/browser-runtime-check.test.ts +55 -0
  45. package/src/__tests__/browser-skill-baseline-tool-payload.test.ts +67 -0
  46. package/src/__tests__/browser-skill-endstate.test.ts +198 -0
  47. package/src/__tests__/bundle-scanner.test.ts +313 -0
  48. package/src/__tests__/checker.test.ts +3856 -0
  49. package/src/__tests__/clarification-resolver.test.ts +159 -0
  50. package/src/__tests__/classifier.test.ts +67 -0
  51. package/src/__tests__/claude-code-skill-regression.test.ts +127 -0
  52. package/src/__tests__/claude-code-tool-profiles.test.ts +88 -0
  53. package/src/__tests__/cli-discover.test.ts +85 -0
  54. package/src/__tests__/cli.test.ts +81 -0
  55. package/src/__tests__/clipboard.test.ts +80 -0
  56. package/src/__tests__/commit-guarantee.test.ts +335 -0
  57. package/src/__tests__/computer-use-session-compaction.test.ts +132 -0
  58. package/src/__tests__/computer-use-session-lifecycle.test.ts +293 -0
  59. package/src/__tests__/computer-use-session-working-dir.test.ts +117 -0
  60. package/src/__tests__/computer-use-skill-baseline.test.ts +74 -0
  61. package/src/__tests__/computer-use-skill-endstate.test.ts +89 -0
  62. package/src/__tests__/computer-use-skill-lifecycle-cleanup.test.ts +217 -0
  63. package/src/__tests__/computer-use-skill-manifest-regression.test.ts +107 -0
  64. package/src/__tests__/computer-use-skill-proxy-bridge.test.ts +54 -0
  65. package/src/__tests__/config-schema.test.ts +720 -0
  66. package/src/__tests__/conflict-store.test.ts +329 -0
  67. package/src/__tests__/connection-policy.test.ts +102 -0
  68. package/src/__tests__/context-memory-e2e.test.ts +434 -0
  69. package/src/__tests__/context-token-estimator.test.ts +135 -0
  70. package/src/__tests__/context-window-manager.test.ts +376 -0
  71. package/src/__tests__/contradiction-checker.test.ts +216 -0
  72. package/src/__tests__/conversation-store.test.ts +614 -0
  73. package/src/__tests__/credential-broker-browser-fill.test.ts +517 -0
  74. package/src/__tests__/credential-broker-server-use.test.ts +554 -0
  75. package/src/__tests__/credential-broker.test.ts +167 -0
  76. package/src/__tests__/credential-host-pattern-match.test.ts +104 -0
  77. package/src/__tests__/credential-metadata-store.test.ts +779 -0
  78. package/src/__tests__/credential-policy-validate.test.ts +121 -0
  79. package/src/__tests__/credential-resolve.test.ts +328 -0
  80. package/src/__tests__/credential-security-e2e.test.ts +352 -0
  81. package/src/__tests__/credential-security-invariants.test.ts +563 -0
  82. package/src/__tests__/credential-selection.test.ts +354 -0
  83. package/src/__tests__/credential-vault.test.ts +852 -0
  84. package/src/__tests__/daemon-assistant-events.test.ts +164 -0
  85. package/src/__tests__/daemon-server-session-init.test.ts +522 -0
  86. package/src/__tests__/delete-managed-skill-tool.test.ts +97 -0
  87. package/src/__tests__/diff.test.ts +121 -0
  88. package/src/__tests__/domain-normalize.test.ts +112 -0
  89. package/src/__tests__/domain-policy.test.ts +124 -0
  90. package/src/__tests__/doordash-client.test.ts +186 -0
  91. package/src/__tests__/doordash-session.test.ts +143 -0
  92. package/src/__tests__/dynamic-page-surface.test.ts +91 -0
  93. package/src/__tests__/dynamic-skill-workflow-prompt.test.ts +132 -0
  94. package/src/__tests__/edit-engine.test.ts +180 -0
  95. package/src/__tests__/email-cli.test.ts +283 -0
  96. package/src/__tests__/encrypted-store.test.ts +332 -0
  97. package/src/__tests__/entity-extractor.test.ts +190 -0
  98. package/src/__tests__/ephemeral-permissions.test.ts +312 -0
  99. package/src/__tests__/evaluate-typescript-tool.test.ts +286 -0
  100. package/src/__tests__/event-bus.test.ts +222 -0
  101. package/src/__tests__/file-edit-tool.test.ts +122 -0
  102. package/src/__tests__/file-ops-service.test.ts +330 -0
  103. package/src/__tests__/file-read-tool.test.ts +75 -0
  104. package/src/__tests__/file-write-tool.test.ts +113 -0
  105. package/src/__tests__/fixtures/credential-security-fixtures.ts +181 -0
  106. package/src/__tests__/fixtures/media-reuse-fixtures.ts +126 -0
  107. package/src/__tests__/fixtures/mock-signup-server.ts +387 -0
  108. package/src/__tests__/fixtures/proxy-fixtures.ts +147 -0
  109. package/src/__tests__/fuzzy-match-property.test.ts +216 -0
  110. package/src/__tests__/fuzzy-match.test.ts +138 -0
  111. package/src/__tests__/gemini-image-service.test.ts +261 -0
  112. package/src/__tests__/gemini-provider.test.ts +651 -0
  113. package/src/__tests__/get-weather.test.ts +318 -0
  114. package/src/__tests__/gmail-integration.test.ts +73 -0
  115. package/src/__tests__/handlers-cu-observation-blob.test.ts +351 -0
  116. package/src/__tests__/handlers-ipc-blob-probe.test.ts +190 -0
  117. package/src/__tests__/handlers-slack-config.test.ts +199 -0
  118. package/src/__tests__/handlers-task-submit-slash.test.ts +38 -0
  119. package/src/__tests__/headless-browser-interactions.test.ts +536 -0
  120. package/src/__tests__/headless-browser-navigate.test.ts +211 -0
  121. package/src/__tests__/headless-browser-read-tools.test.ts +261 -0
  122. package/src/__tests__/headless-browser-snapshot.test.ts +185 -0
  123. package/src/__tests__/history-repair-observability.test.ts +56 -0
  124. package/src/__tests__/history-repair.test.ts +510 -0
  125. package/src/__tests__/home-base-bootstrap.test.ts +77 -0
  126. package/src/__tests__/hooks-blocking.test.ts +128 -0
  127. package/src/__tests__/hooks-cli.test.ts +144 -0
  128. package/src/__tests__/hooks-config.test.ts +93 -0
  129. package/src/__tests__/hooks-discovery.test.ts +199 -0
  130. package/src/__tests__/hooks-integration.test.ts +189 -0
  131. package/src/__tests__/hooks-manager.test.ts +187 -0
  132. package/src/__tests__/hooks-runner.test.ts +178 -0
  133. package/src/__tests__/hooks-settings.test.ts +154 -0
  134. package/src/__tests__/hooks-templates.test.ts +137 -0
  135. package/src/__tests__/hooks-ts-runner.test.ts +125 -0
  136. package/src/__tests__/hooks-watch.test.ts +100 -0
  137. package/src/__tests__/host-file-edit-tool.test.ts +104 -0
  138. package/src/__tests__/host-file-read-tool.test.ts +61 -0
  139. package/src/__tests__/host-file-write-tool.test.ts +77 -0
  140. package/src/__tests__/host-shell-tool.test.ts +311 -0
  141. package/src/__tests__/intent-routing.test.ts +255 -0
  142. package/src/__tests__/ipc-blob-store.test.ts +315 -0
  143. package/src/__tests__/ipc-contract-inventory.test.ts +54 -0
  144. package/src/__tests__/ipc-contract.test.ts +74 -0
  145. package/src/__tests__/ipc-protocol.test.ts +113 -0
  146. package/src/__tests__/ipc-snapshot.test.ts +1560 -0
  147. package/src/__tests__/ipc-validate.test.ts +357 -0
  148. package/src/__tests__/key-migration.test.ts +183 -0
  149. package/src/__tests__/keychain.test.ts +258 -0
  150. package/src/__tests__/llm-usage-store.test.ts +226 -0
  151. package/src/__tests__/managed-skill-lifecycle.test.ts +257 -0
  152. package/src/__tests__/managed-store.test.ts +608 -0
  153. package/src/__tests__/media-generate-image.test.ts +238 -0
  154. package/src/__tests__/media-reuse-story.e2e.test.ts +676 -0
  155. package/src/__tests__/media-visibility-policy.test.ts +141 -0
  156. package/src/__tests__/memory-context-benchmark.test.ts +235 -0
  157. package/src/__tests__/memory-lifecycle-e2e.test.ts +481 -0
  158. package/src/__tests__/memory-query-builder.test.ts +59 -0
  159. package/src/__tests__/memory-recall-quality.test.ts +846 -0
  160. package/src/__tests__/memory-regressions.experimental.test.ts +538 -0
  161. package/src/__tests__/memory-regressions.test.ts +4238 -0
  162. package/src/__tests__/memory-retrieval-budget.test.ts +49 -0
  163. package/src/__tests__/migration-cli-flows.test.ts +169 -0
  164. package/src/__tests__/migration-ordering.test.ts +249 -0
  165. package/src/__tests__/mock-signup-server.test.ts +528 -0
  166. package/src/__tests__/onboarding-starter-tasks.test.ts +166 -0
  167. package/src/__tests__/onboarding-template-contract.test.ts +58 -0
  168. package/src/__tests__/openai-provider.test.ts +753 -0
  169. package/src/__tests__/parser.test.ts +472 -0
  170. package/src/__tests__/path-classifier.test.ts +73 -0
  171. package/src/__tests__/path-policy.test.ts +435 -0
  172. package/src/__tests__/platform-move-helper.test.ts +99 -0
  173. package/src/__tests__/platform-socket-path.test.ts +52 -0
  174. package/src/__tests__/platform-workspace-migration.test.ts +1000 -0
  175. package/src/__tests__/platform.test.ts +131 -0
  176. package/src/__tests__/prebuilt-home-base-seed.test.ts +71 -0
  177. package/src/__tests__/pricing.test.ts +256 -0
  178. package/src/__tests__/profile-compiler.test.ts +373 -0
  179. package/src/__tests__/provider-registry-ollama.test.ts +16 -0
  180. package/src/__tests__/proxy-approval-callback.test.ts +601 -0
  181. package/src/__tests__/ratelimit.test.ts +297 -0
  182. package/src/__tests__/registry.test.ts +487 -0
  183. package/src/__tests__/reminder-store.test.ts +220 -0
  184. package/src/__tests__/reminder.test.ts +263 -0
  185. package/src/__tests__/request-file-tool.test.ts +158 -0
  186. package/src/__tests__/run-orchestrator.test.ts +200 -0
  187. package/src/__tests__/runtime-attachment-metadata.test.ts +190 -0
  188. package/src/__tests__/runtime-runs-http.test.ts +451 -0
  189. package/src/__tests__/runtime-runs.test.ts +273 -0
  190. package/src/__tests__/sandbox-diagnostics.test.ts +408 -0
  191. package/src/__tests__/sandbox-host-parity.test.ts +950 -0
  192. package/src/__tests__/scaffold-managed-skill-tool.test.ts +253 -0
  193. package/src/__tests__/script-proxy-certs.test.ts +90 -0
  194. package/src/__tests__/script-proxy-connect-tunnel.test.ts +177 -0
  195. package/src/__tests__/script-proxy-decision-trace.test.ts +156 -0
  196. package/src/__tests__/script-proxy-http-forwarder.test.ts +281 -0
  197. package/src/__tests__/script-proxy-injection-runtime.test.ts +401 -0
  198. package/src/__tests__/script-proxy-mitm-handler.test.ts +407 -0
  199. package/src/__tests__/script-proxy-policy-runtime.test.ts +287 -0
  200. package/src/__tests__/script-proxy-policy.test.ts +310 -0
  201. package/src/__tests__/script-proxy-rewrite-specificity.test.ts +135 -0
  202. package/src/__tests__/script-proxy-router.test.ts +180 -0
  203. package/src/__tests__/script-proxy-session-manager.test.ts +382 -0
  204. package/src/__tests__/script-proxy-session-runtime.test.ts +113 -0
  205. package/src/__tests__/secret-allowlist.test.ts +229 -0
  206. package/src/__tests__/secret-ingress-handler.test.ts +99 -0
  207. package/src/__tests__/secret-onetime-send.test.ts +130 -0
  208. package/src/__tests__/secret-prompt-log-hygiene.test.ts +106 -0
  209. package/src/__tests__/secret-response-routing.test.ts +93 -0
  210. package/src/__tests__/secret-scanner-executor.test.ts +348 -0
  211. package/src/__tests__/secret-scanner.test.ts +857 -0
  212. package/src/__tests__/secure-keys.test.ts +323 -0
  213. package/src/__tests__/server-history-render.test.ts +430 -0
  214. package/src/__tests__/session-abort-tool-results.test.ts +240 -0
  215. package/src/__tests__/session-conflict-gate.test.ts +697 -0
  216. package/src/__tests__/session-error.test.ts +341 -0
  217. package/src/__tests__/session-evictor.test.ts +188 -0
  218. package/src/__tests__/session-load-history-repair.test.ts +222 -0
  219. package/src/__tests__/session-pre-run-repair.test.ts +213 -0
  220. package/src/__tests__/session-profile-injection.test.ts +444 -0
  221. package/src/__tests__/session-provider-retry-repair.test.ts +306 -0
  222. package/src/__tests__/session-queue.test.ts +1462 -0
  223. package/src/__tests__/session-runtime-assembly.test.ts +315 -0
  224. package/src/__tests__/session-runtime-workspace.test.ts +183 -0
  225. package/src/__tests__/session-skill-tools.test.ts +2431 -0
  226. package/src/__tests__/session-slash-known.test.ts +368 -0
  227. package/src/__tests__/session-slash-queue.test.ts +288 -0
  228. package/src/__tests__/session-slash-unknown.test.ts +271 -0
  229. package/src/__tests__/session-tool-setup-app-refresh.test.ts +473 -0
  230. package/src/__tests__/session-tool-setup-memory-scope.test.ts +140 -0
  231. package/src/__tests__/session-tool-setup-side-effect-flag.test.ts +140 -0
  232. package/src/__tests__/session-undo.test.ts +75 -0
  233. package/src/__tests__/session-workspace-cache-state.test.ts +246 -0
  234. package/src/__tests__/session-workspace-injection.test.ts +327 -0
  235. package/src/__tests__/session-workspace-tool-tracking.test.ts +240 -0
  236. package/src/__tests__/shared-filesystem-errors.test.ts +78 -0
  237. package/src/__tests__/shell-credential-ref.test.ts +187 -0
  238. package/src/__tests__/shell-parser-fuzz.test.ts +544 -0
  239. package/src/__tests__/shell-parser-property.test.ts +433 -0
  240. package/src/__tests__/shell-tool-proxy-mode.test.ts +272 -0
  241. package/src/__tests__/signup-e2e.test.ts +352 -0
  242. package/src/__tests__/size-guard.test.ts +117 -0
  243. package/src/__tests__/skill-include-graph.test.ts +303 -0
  244. package/src/__tests__/skill-load-tool.test.ts +409 -0
  245. package/src/__tests__/skill-script-runner-host.test.ts +489 -0
  246. package/src/__tests__/skill-script-runner-sandbox.test.ts +349 -0
  247. package/src/__tests__/skill-tool-factory.test.ts +252 -0
  248. package/src/__tests__/skill-tool-manifest.test.ts +658 -0
  249. package/src/__tests__/skill-version-hash.test.ts +182 -0
  250. package/src/__tests__/skills.test.ts +597 -0
  251. package/src/__tests__/slash-commands-catalog.test.ts +86 -0
  252. package/src/__tests__/slash-commands-parser.test.ts +119 -0
  253. package/src/__tests__/slash-commands-resolver.test.ts +193 -0
  254. package/src/__tests__/slash-commands-rewrite.test.ts +39 -0
  255. package/src/__tests__/starter-bundle.test.ts +136 -0
  256. package/src/__tests__/starter-task-flow.test.ts +143 -0
  257. package/src/__tests__/subagent-manager-notify.test.ts +372 -0
  258. package/src/__tests__/subagent-tools.test.ts +118 -0
  259. package/src/__tests__/subagent-types.test.ts +78 -0
  260. package/src/__tests__/swarm-orchestrator.test.ts +428 -0
  261. package/src/__tests__/swarm-plan-validator.test.ts +330 -0
  262. package/src/__tests__/swarm-recursion.test.ts +165 -0
  263. package/src/__tests__/swarm-router-planner.test.ts +208 -0
  264. package/src/__tests__/swarm-session-integration.test.ts +274 -0
  265. package/src/__tests__/swarm-tool.test.ts +145 -0
  266. package/src/__tests__/swarm-worker-backend.test.ts +129 -0
  267. package/src/__tests__/swarm-worker-runner.test.ts +272 -0
  268. package/src/__tests__/system-prompt.test.ts +461 -0
  269. package/src/__tests__/task-compiler.test.ts +283 -0
  270. package/src/__tests__/task-runner.test.ts +215 -0
  271. package/src/__tests__/task-scheduler.test.ts +216 -0
  272. package/src/__tests__/task-tools.test.ts +602 -0
  273. package/src/__tests__/terminal-sandbox-docker.test.ts +1064 -0
  274. package/src/__tests__/terminal-sandbox.integration.test.ts +178 -0
  275. package/src/__tests__/terminal-sandbox.test.ts +202 -0
  276. package/src/__tests__/test-support/browser-skill-harness.ts +90 -0
  277. package/src/__tests__/test-support/computer-use-skill-harness.ts +45 -0
  278. package/src/__tests__/tool-audit-listener.test.ts +112 -0
  279. package/src/__tests__/tool-domain-event-publisher.test.ts +251 -0
  280. package/src/__tests__/tool-executor-lifecycle-events.test.ts +516 -0
  281. package/src/__tests__/tool-executor-redaction.test.ts +289 -0
  282. package/src/__tests__/tool-executor.test.ts +1971 -0
  283. package/src/__tests__/tool-metrics-listener.test.ts +225 -0
  284. package/src/__tests__/tool-notification-listener.test.ts +49 -0
  285. package/src/__tests__/tool-policy.test.ts +54 -0
  286. package/src/__tests__/tool-profiling-listener.test.ts +268 -0
  287. package/src/__tests__/tool-result-truncation.test.ts +217 -0
  288. package/src/__tests__/tool-trace-listener.test.ts +226 -0
  289. package/src/__tests__/top-level-renderer.test.ts +121 -0
  290. package/src/__tests__/top-level-scanner.test.ts +141 -0
  291. package/src/__tests__/trace-emitter.test.ts +173 -0
  292. package/src/__tests__/trust-store.test.ts +2030 -0
  293. package/src/__tests__/turn-commit.test.ts +219 -0
  294. package/src/__tests__/url-safety.test.ts +418 -0
  295. package/src/__tests__/weather-skill-regression.test.ts +225 -0
  296. package/src/__tests__/web-fetch.test.ts +869 -0
  297. package/src/__tests__/web-search.test.ts +584 -0
  298. package/src/__tests__/workspace-git-service.test.ts +750 -0
  299. package/src/__tests__/workspace-heartbeat-service.test.ts +347 -0
  300. package/src/__tests__/workspace-lifecycle.test.ts +292 -0
  301. package/src/agent/attachments.ts +35 -0
  302. package/src/agent/loop.ts +500 -0
  303. package/src/agent/message-types.ts +17 -0
  304. package/src/autonomy/autonomy-resolver.ts +60 -0
  305. package/src/autonomy/autonomy-store.ts +122 -0
  306. package/src/autonomy/disposition-mapper.ts +31 -0
  307. package/src/autonomy/index.ts +11 -0
  308. package/src/autonomy/types.ts +39 -0
  309. package/src/bundler/app-bundler.ts +274 -0
  310. package/src/bundler/bundle-scanner.ts +535 -0
  311. package/src/bundler/bundle-signer.ts +124 -0
  312. package/src/bundler/manifest.ts +21 -0
  313. package/src/bundler/signature-verifier.ts +184 -0
  314. package/src/cli/autonomy.ts +188 -0
  315. package/src/cli/contacts.ts +149 -0
  316. package/src/cli/doordash.ts +824 -0
  317. package/src/cli/email-guardrails.ts +200 -0
  318. package/src/cli/email.ts +405 -0
  319. package/src/cli/main-screen.tsx +155 -0
  320. package/src/cli.ts +935 -0
  321. package/src/config/bundled-skills/.gitkeep +0 -0
  322. package/src/config/bundled-skills/agentmail/SKILL.md +128 -0
  323. package/src/config/bundled-skills/agentmail/icon.svg +21 -0
  324. package/src/config/bundled-skills/app-builder/SKILL.md +1348 -0
  325. package/src/config/bundled-skills/app-builder/TOOLS.json +279 -0
  326. package/src/config/bundled-skills/app-builder/icon.svg +9 -0
  327. package/src/config/bundled-skills/app-builder/tools/app-create.ts +15 -0
  328. package/src/config/bundled-skills/app-builder/tools/app-delete.ts +10 -0
  329. package/src/config/bundled-skills/app-builder/tools/app-file-edit.ts +11 -0
  330. package/src/config/bundled-skills/app-builder/tools/app-file-list.ts +10 -0
  331. package/src/config/bundled-skills/app-builder/tools/app-file-read.ts +18 -0
  332. package/src/config/bundled-skills/app-builder/tools/app-file-write.ts +11 -0
  333. package/src/config/bundled-skills/app-builder/tools/app-list.ts +10 -0
  334. package/src/config/bundled-skills/app-builder/tools/app-query.ts +10 -0
  335. package/src/config/bundled-skills/app-builder/tools/app-update.ts +20 -0
  336. package/src/config/bundled-skills/browser/SKILL.md +28 -0
  337. package/src/config/bundled-skills/browser/TOOLS.json +234 -0
  338. package/src/config/bundled-skills/browser/tools/browser-click.ts +9 -0
  339. package/src/config/bundled-skills/browser/tools/browser-close.ts +9 -0
  340. package/src/config/bundled-skills/browser/tools/browser-extract.ts +9 -0
  341. package/src/config/bundled-skills/browser/tools/browser-fill-credential.ts +9 -0
  342. package/src/config/bundled-skills/browser/tools/browser-navigate.ts +9 -0
  343. package/src/config/bundled-skills/browser/tools/browser-press-key.ts +9 -0
  344. package/src/config/bundled-skills/browser/tools/browser-screenshot.ts +9 -0
  345. package/src/config/bundled-skills/browser/tools/browser-snapshot.ts +9 -0
  346. package/src/config/bundled-skills/browser/tools/browser-type.ts +9 -0
  347. package/src/config/bundled-skills/browser/tools/browser-wait-for.ts +9 -0
  348. package/src/config/bundled-skills/claude-code/SKILL.md +50 -0
  349. package/src/config/bundled-skills/claude-code/TOOLS.json +40 -0
  350. package/src/config/bundled-skills/claude-code/tools/claude-code.ts +9 -0
  351. package/src/config/bundled-skills/computer-use/SKILL.md +17 -0
  352. package/src/config/bundled-skills/computer-use/TOOLS.json +326 -0
  353. package/src/config/bundled-skills/computer-use/tools/computer-use-click.ts +9 -0
  354. package/src/config/bundled-skills/computer-use/tools/computer-use-done.ts +9 -0
  355. package/src/config/bundled-skills/computer-use/tools/computer-use-double-click.ts +9 -0
  356. package/src/config/bundled-skills/computer-use/tools/computer-use-drag.ts +9 -0
  357. package/src/config/bundled-skills/computer-use/tools/computer-use-key.ts +9 -0
  358. package/src/config/bundled-skills/computer-use/tools/computer-use-open-app.ts +9 -0
  359. package/src/config/bundled-skills/computer-use/tools/computer-use-request-control.ts +9 -0
  360. package/src/config/bundled-skills/computer-use/tools/computer-use-respond.ts +9 -0
  361. package/src/config/bundled-skills/computer-use/tools/computer-use-right-click.ts +9 -0
  362. package/src/config/bundled-skills/computer-use/tools/computer-use-run-applescript.ts +9 -0
  363. package/src/config/bundled-skills/computer-use/tools/computer-use-scroll.ts +9 -0
  364. package/src/config/bundled-skills/computer-use/tools/computer-use-type-text.ts +9 -0
  365. package/src/config/bundled-skills/computer-use/tools/computer-use-wait.ts +9 -0
  366. package/src/config/bundled-skills/google-calendar/SKILL.md +51 -0
  367. package/src/config/bundled-skills/google-calendar/TOOLS.json +108 -0
  368. package/src/config/bundled-skills/google-calendar/calendar-client.ts +165 -0
  369. package/src/config/bundled-skills/google-calendar/tools/calendar-check-availability.ts +21 -0
  370. package/src/config/bundled-skills/google-calendar/tools/calendar-create-event.ts +42 -0
  371. package/src/config/bundled-skills/google-calendar/tools/calendar-get-event.ts +13 -0
  372. package/src/config/bundled-skills/google-calendar/tools/calendar-list-events.ts +30 -0
  373. package/src/config/bundled-skills/google-calendar/tools/calendar-rsvp.ts +41 -0
  374. package/src/config/bundled-skills/google-calendar/tools/shared.ts +18 -0
  375. package/src/config/bundled-skills/google-calendar/types.ts +97 -0
  376. package/src/config/bundled-skills/image-studio/SKILL.md +32 -0
  377. package/src/config/bundled-skills/image-studio/TOOLS.json +42 -0
  378. package/src/config/bundled-skills/image-studio/tools/media-generate-image.ts +137 -0
  379. package/src/config/bundled-skills/messaging/SKILL.md +126 -0
  380. package/src/config/bundled-skills/messaging/TOOLS.json +357 -0
  381. package/src/config/bundled-skills/messaging/tools/gmail-archive.ts +23 -0
  382. package/src/config/bundled-skills/messaging/tools/gmail-batch-archive.ts +23 -0
  383. package/src/config/bundled-skills/messaging/tools/gmail-batch-label.ts +25 -0
  384. package/src/config/bundled-skills/messaging/tools/gmail-draft.ts +26 -0
  385. package/src/config/bundled-skills/messaging/tools/gmail-label.ts +25 -0
  386. package/src/config/bundled-skills/messaging/tools/gmail-trash.ts +23 -0
  387. package/src/config/bundled-skills/messaging/tools/gmail-unsubscribe.ts +84 -0
  388. package/src/config/bundled-skills/messaging/tools/messaging-analyze-activity.ts +18 -0
  389. package/src/config/bundled-skills/messaging/tools/messaging-analyze-style.ts +124 -0
  390. package/src/config/bundled-skills/messaging/tools/messaging-auth-test.ts +16 -0
  391. package/src/config/bundled-skills/messaging/tools/messaging-draft.ts +49 -0
  392. package/src/config/bundled-skills/messaging/tools/messaging-list-conversations.ts +21 -0
  393. package/src/config/bundled-skills/messaging/tools/messaging-mark-read.ts +25 -0
  394. package/src/config/bundled-skills/messaging/tools/messaging-read.ts +28 -0
  395. package/src/config/bundled-skills/messaging/tools/messaging-reply.ts +29 -0
  396. package/src/config/bundled-skills/messaging/tools/messaging-search.ts +22 -0
  397. package/src/config/bundled-skills/messaging/tools/messaging-send.ts +27 -0
  398. package/src/config/bundled-skills/messaging/tools/shared.ts +71 -0
  399. package/src/config/bundled-skills/messaging/tools/slack-add-reaction.ts +25 -0
  400. package/src/config/bundled-skills/messaging/tools/slack-leave-channel.ts +23 -0
  401. package/src/config/bundled-skills/self-upgrade/SKILL.md +74 -0
  402. package/src/config/bundled-skills/start-the-day/SKILL.md +70 -0
  403. package/src/config/bundled-skills/start-the-day/icon.svg +13 -0
  404. package/src/config/bundled-skills/weather/SKILL.md +37 -0
  405. package/src/config/bundled-skills/weather/TOOLS.json +32 -0
  406. package/src/config/bundled-skills/weather/icon.svg +24 -0
  407. package/src/config/bundled-skills/weather/tools/get-weather.ts +9 -0
  408. package/src/config/computer-use-prompt.ts +97 -0
  409. package/src/config/defaults.ts +186 -0
  410. package/src/config/loader.ts +336 -0
  411. package/src/config/schema.ts +1004 -0
  412. package/src/config/skill-state.ts +95 -0
  413. package/src/config/skills.ts +972 -0
  414. package/src/config/system-prompt.ts +927 -0
  415. package/src/config/templates/BOOTSTRAP.md +70 -0
  416. package/src/config/templates/IDENTITY.md +18 -0
  417. package/src/config/templates/LOOKS.md +25 -0
  418. package/src/config/templates/SOUL.md +37 -0
  419. package/src/config/templates/USER.md +19 -0
  420. package/src/config/types.ts +32 -0
  421. package/src/config/vellum-skills/deploy-fullstack-vercel/SKILL.md +179 -0
  422. package/src/config/vellum-skills/document-writer/SKILL.md +195 -0
  423. package/src/config/vellum-skills/google-oauth-setup/SKILL.md +194 -0
  424. package/src/config/vellum-skills/slack-oauth-setup/SKILL.md +147 -0
  425. package/src/config/vellum-skills/telegram-setup/SKILL.md +105 -0
  426. package/src/contacts/contact-store.ts +410 -0
  427. package/src/contacts/index.ts +11 -0
  428. package/src/contacts/types.ts +28 -0
  429. package/src/context/token-estimator.ts +108 -0
  430. package/src/context/tool-result-truncation.ts +128 -0
  431. package/src/context/window-manager.ts +531 -0
  432. package/src/daemon/assistant-attachments.ts +679 -0
  433. package/src/daemon/classifier.ts +108 -0
  434. package/src/daemon/computer-use-session.ts +900 -0
  435. package/src/daemon/connection-policy.ts +41 -0
  436. package/src/daemon/handlers/apps.ts +446 -0
  437. package/src/daemon/handlers/computer-use.ts +181 -0
  438. package/src/daemon/handlers/config.ts +434 -0
  439. package/src/daemon/handlers/diagnostics.ts +334 -0
  440. package/src/daemon/handlers/documents.ts +184 -0
  441. package/src/daemon/handlers/home-base.ts +73 -0
  442. package/src/daemon/handlers/index.ts +355 -0
  443. package/src/daemon/handlers/misc.ts +323 -0
  444. package/src/daemon/handlers/open-bundle-handler.ts +80 -0
  445. package/src/daemon/handlers/publish.ts +182 -0
  446. package/src/daemon/handlers/sessions.ts +486 -0
  447. package/src/daemon/handlers/shared.ts +533 -0
  448. package/src/daemon/handlers/skills.ts +487 -0
  449. package/src/daemon/handlers/subagents.ts +122 -0
  450. package/src/daemon/handlers/work-items.ts +176 -0
  451. package/src/daemon/handlers.ts +17 -0
  452. package/src/daemon/history-repair.ts +214 -0
  453. package/src/daemon/ipc-blob-store.ts +231 -0
  454. package/src/daemon/ipc-contract-inventory.json +407 -0
  455. package/src/daemon/ipc-contract-inventory.ts +126 -0
  456. package/src/daemon/ipc-contract.ts +2102 -0
  457. package/src/daemon/ipc-protocol.ts +70 -0
  458. package/src/daemon/ipc-validate.ts +171 -0
  459. package/src/daemon/lifecycle.ts +503 -0
  460. package/src/daemon/main.ts +15 -0
  461. package/src/daemon/media-visibility-policy.ts +57 -0
  462. package/src/daemon/ride-shotgun-handler.ts +244 -0
  463. package/src/daemon/server.ts +1085 -0
  464. package/src/daemon/session-attachments.ts +173 -0
  465. package/src/daemon/session-conflict-gate.ts +219 -0
  466. package/src/daemon/session-dynamic-profile.ts +63 -0
  467. package/src/daemon/session-error.ts +269 -0
  468. package/src/daemon/session-evictor.ts +196 -0
  469. package/src/daemon/session-history.ts +437 -0
  470. package/src/daemon/session-memory.ts +212 -0
  471. package/src/daemon/session-process.ts +264 -0
  472. package/src/daemon/session-queue-manager.ts +81 -0
  473. package/src/daemon/session-runtime-assembly.ts +395 -0
  474. package/src/daemon/session-skill-tools.ts +237 -0
  475. package/src/daemon/session-slash.ts +302 -0
  476. package/src/daemon/session-surfaces.ts +624 -0
  477. package/src/daemon/session-tool-setup.ts +286 -0
  478. package/src/daemon/session-usage.ts +74 -0
  479. package/src/daemon/session-workspace.ts +19 -0
  480. package/src/daemon/session.ts +1651 -0
  481. package/src/daemon/trace-emitter.ts +82 -0
  482. package/src/daemon/watch-handler.ts +274 -0
  483. package/src/doordash/client.ts +905 -0
  484. package/src/doordash/queries.ts +1312 -0
  485. package/src/doordash/query-extractor.ts +93 -0
  486. package/src/doordash/session.ts +82 -0
  487. package/src/email/provider.ts +117 -0
  488. package/src/email/providers/agentmail.ts +317 -0
  489. package/src/email/providers/index.ts +58 -0
  490. package/src/email/service.ts +303 -0
  491. package/src/email/types.ts +126 -0
  492. package/src/events/bus.ts +157 -0
  493. package/src/events/domain-events.ts +83 -0
  494. package/src/events/index.ts +18 -0
  495. package/src/events/tool-audit-listener.ts +80 -0
  496. package/src/events/tool-domain-event-publisher.ts +111 -0
  497. package/src/events/tool-metrics-listener.ts +159 -0
  498. package/src/events/tool-notification-listener.ts +17 -0
  499. package/src/events/tool-profiling-listener.ts +158 -0
  500. package/src/events/tool-trace-listener.ts +75 -0
  501. package/src/export/formatter.ts +96 -0
  502. package/src/followups/followup-store.ts +166 -0
  503. package/src/followups/index.ts +10 -0
  504. package/src/followups/types.ts +23 -0
  505. package/src/gallery/default-gallery.ts +795 -0
  506. package/src/gallery/gallery-manifest.ts +24 -0
  507. package/src/home-base/app-link-store.ts +82 -0
  508. package/src/home-base/bootstrap.ts +66 -0
  509. package/src/home-base/prebuilt/index.html +662 -0
  510. package/src/home-base/prebuilt/seed-metadata.json +21 -0
  511. package/src/home-base/prebuilt/seed.ts +101 -0
  512. package/src/home-base/prebuilt-home-base-updater.ts +30 -0
  513. package/src/hooks/cli.ts +163 -0
  514. package/src/hooks/config.ts +88 -0
  515. package/src/hooks/discovery.ts +110 -0
  516. package/src/hooks/manager.ts +128 -0
  517. package/src/hooks/runner.ts +123 -0
  518. package/src/hooks/templates.ts +52 -0
  519. package/src/hooks/types.ts +72 -0
  520. package/src/index.ts +1194 -0
  521. package/src/instrument.ts +60 -0
  522. package/src/logfire.ts +99 -0
  523. package/src/media/gemini-image-service.ts +136 -0
  524. package/src/memory/account-store.ts +108 -0
  525. package/src/memory/admin.ts +211 -0
  526. package/src/memory/app-store.ts +556 -0
  527. package/src/memory/attachments-store.ts +453 -0
  528. package/src/memory/channel-delivery-store.ts +368 -0
  529. package/src/memory/checkpoints.ts +52 -0
  530. package/src/memory/clarification-resolver.ts +297 -0
  531. package/src/memory/conflict-store.ts +342 -0
  532. package/src/memory/contradiction-checker.ts +329 -0
  533. package/src/memory/conversation-key-store.ts +127 -0
  534. package/src/memory/conversation-store.ts +469 -0
  535. package/src/memory/db.ts +1105 -0
  536. package/src/memory/embedding-backend.ts +229 -0
  537. package/src/memory/embedding-gemini.ts +52 -0
  538. package/src/memory/embedding-local.ts +75 -0
  539. package/src/memory/embedding-ollama.ts +55 -0
  540. package/src/memory/embedding-openai.ts +25 -0
  541. package/src/memory/entity-extractor.ts +471 -0
  542. package/src/memory/fingerprint.ts +20 -0
  543. package/src/memory/indexer.ts +156 -0
  544. package/src/memory/items-extractor.ts +460 -0
  545. package/src/memory/job-handlers/backfill.ts +139 -0
  546. package/src/memory/job-handlers/cleanup.ts +58 -0
  547. package/src/memory/job-handlers/conflict.ts +99 -0
  548. package/src/memory/job-handlers/embedding.ts +61 -0
  549. package/src/memory/job-handlers/extraction.ts +123 -0
  550. package/src/memory/job-handlers/index-maintenance.ts +54 -0
  551. package/src/memory/job-handlers/summarization.ts +286 -0
  552. package/src/memory/job-utils.ts +170 -0
  553. package/src/memory/jobs-store.ts +400 -0
  554. package/src/memory/jobs-worker.ts +274 -0
  555. package/src/memory/llm-request-log-store.ts +45 -0
  556. package/src/memory/llm-usage-store.ts +62 -0
  557. package/src/memory/message-content.ts +54 -0
  558. package/src/memory/profile-compiler.ts +160 -0
  559. package/src/memory/published-pages-store.ts +137 -0
  560. package/src/memory/qdrant-client.ts +366 -0
  561. package/src/memory/qdrant-manager.ts +242 -0
  562. package/src/memory/query-builder.ts +45 -0
  563. package/src/memory/retrieval-budget.ts +30 -0
  564. package/src/memory/retriever.ts +653 -0
  565. package/src/memory/runs-store.ts +211 -0
  566. package/src/memory/schema.ts +529 -0
  567. package/src/memory/search/entity.ts +298 -0
  568. package/src/memory/search/formatting.ts +207 -0
  569. package/src/memory/search/lexical.ts +227 -0
  570. package/src/memory/search/ranking.ts +401 -0
  571. package/src/memory/search/semantic.ts +121 -0
  572. package/src/memory/search/types.ts +137 -0
  573. package/src/memory/segmenter.ts +68 -0
  574. package/src/memory/shared-app-links-store.ts +138 -0
  575. package/src/memory/tool-usage-store.ts +62 -0
  576. package/src/messaging/activity-analyzer.ts +76 -0
  577. package/src/messaging/draft-store.ts +88 -0
  578. package/src/messaging/index.ts +3 -0
  579. package/src/messaging/provider-types.ts +80 -0
  580. package/src/messaging/provider.ts +43 -0
  581. package/src/messaging/providers/gmail/adapter.ts +193 -0
  582. package/src/messaging/providers/gmail/client.ts +204 -0
  583. package/src/messaging/providers/gmail/types.ts +90 -0
  584. package/src/messaging/providers/slack/adapter.ts +202 -0
  585. package/src/messaging/providers/slack/client.ts +198 -0
  586. package/src/messaging/providers/slack/types.ts +119 -0
  587. package/src/messaging/registry.ts +34 -0
  588. package/src/messaging/style-analyzer.ts +158 -0
  589. package/src/messaging/thread-summarizer.ts +310 -0
  590. package/src/messaging/triage-engine.ts +321 -0
  591. package/src/messaging/types.ts +55 -0
  592. package/src/permissions/checker.ts +636 -0
  593. package/src/permissions/defaults.ts +243 -0
  594. package/src/permissions/prompter.ts +102 -0
  595. package/src/permissions/secret-prompter.ts +114 -0
  596. package/src/permissions/trust-store.ts +584 -0
  597. package/src/permissions/types.ts +62 -0
  598. package/src/playbooks/index.ts +2 -0
  599. package/src/playbooks/playbook-compiler.ts +90 -0
  600. package/src/playbooks/types.ts +55 -0
  601. package/src/providers/anthropic/client.ts +751 -0
  602. package/src/providers/failover.ts +129 -0
  603. package/src/providers/fireworks/client.ts +20 -0
  604. package/src/providers/gemini/client.ts +285 -0
  605. package/src/providers/ollama/client.ts +30 -0
  606. package/src/providers/openai/client.ts +337 -0
  607. package/src/providers/ratelimit.ts +93 -0
  608. package/src/providers/registry.ts +138 -0
  609. package/src/providers/retry.ts +106 -0
  610. package/src/providers/stream-timeout.ts +38 -0
  611. package/src/providers/types.ts +109 -0
  612. package/src/runtime/assistant-event-hub.ts +120 -0
  613. package/src/runtime/assistant-event.ts +82 -0
  614. package/src/runtime/http-server.ts +478 -0
  615. package/src/runtime/http-types.ts +68 -0
  616. package/src/runtime/routes/app-routes.ts +174 -0
  617. package/src/runtime/routes/attachment-routes.ts +134 -0
  618. package/src/runtime/routes/channel-routes.ts +342 -0
  619. package/src/runtime/routes/conversation-routes.ts +349 -0
  620. package/src/runtime/routes/run-routes.ts +223 -0
  621. package/src/runtime/routes/secret-routes.ts +76 -0
  622. package/src/runtime/run-orchestrator.ts +206 -0
  623. package/src/schedule/schedule-store.ts +452 -0
  624. package/src/schedule/scheduler.ts +168 -0
  625. package/src/security/encrypted-store.ts +238 -0
  626. package/src/security/keychain.ts +252 -0
  627. package/src/security/oauth2.ts +241 -0
  628. package/src/security/redaction.ts +89 -0
  629. package/src/security/secret-allowlist.ts +118 -0
  630. package/src/security/secret-ingress.ts +57 -0
  631. package/src/security/secret-scanner.ts +543 -0
  632. package/src/security/secure-keys.ts +180 -0
  633. package/src/security/token-manager.ts +141 -0
  634. package/src/services/published-app-updater.ts +69 -0
  635. package/src/services/vercel-deploy.ts +73 -0
  636. package/src/skills/active-skill-tools.ts +81 -0
  637. package/src/skills/clawhub.ts +414 -0
  638. package/src/skills/include-graph.ts +146 -0
  639. package/src/skills/managed-store.ts +233 -0
  640. package/src/skills/path-classifier.ts +128 -0
  641. package/src/skills/slash-commands.ts +174 -0
  642. package/src/skills/tool-manifest.ts +165 -0
  643. package/src/skills/version-hash.ts +110 -0
  644. package/src/slack/slack-webhook.ts +61 -0
  645. package/src/subagent/index.ts +19 -0
  646. package/src/subagent/manager.ts +477 -0
  647. package/src/subagent/types.ts +69 -0
  648. package/src/swarm/backend-claude-code.ts +90 -0
  649. package/src/swarm/index.ts +44 -0
  650. package/src/swarm/limits.ts +37 -0
  651. package/src/swarm/orchestrator.ts +279 -0
  652. package/src/swarm/plan-validator.ts +151 -0
  653. package/src/swarm/router-planner.ts +100 -0
  654. package/src/swarm/router-prompts.ts +36 -0
  655. package/src/swarm/synthesizer.ts +62 -0
  656. package/src/swarm/types.ts +62 -0
  657. package/src/swarm/worker-backend.ts +121 -0
  658. package/src/swarm/worker-prompts.ts +78 -0
  659. package/src/swarm/worker-runner.ts +164 -0
  660. package/src/tasks/SPEC.md +133 -0
  661. package/src/tasks/candidate-store.ts +86 -0
  662. package/src/tasks/ephemeral-permissions.ts +41 -0
  663. package/src/tasks/task-compiler.ts +198 -0
  664. package/src/tasks/task-runner.ts +85 -0
  665. package/src/tasks/task-scheduler.ts +20 -0
  666. package/src/tasks/task-store.ts +127 -0
  667. package/src/tools/apps/definitions.ts +59 -0
  668. package/src/tools/apps/executors.ts +313 -0
  669. package/src/tools/apps/open-proxy.ts +43 -0
  670. package/src/tools/apps/registry.ts +16 -0
  671. package/src/tools/assets/materialize.ts +218 -0
  672. package/src/tools/assets/search.ts +396 -0
  673. package/src/tools/browser/__tests__/auth-cache.test.ts +219 -0
  674. package/src/tools/browser/__tests__/auth-detector.test.ts +362 -0
  675. package/src/tools/browser/__tests__/jit-auth.test.ts +189 -0
  676. package/src/tools/browser/auth-cache.ts +149 -0
  677. package/src/tools/browser/auth-detector.ts +347 -0
  678. package/src/tools/browser/browser-execution.ts +979 -0
  679. package/src/tools/browser/browser-handoff.ts +79 -0
  680. package/src/tools/browser/browser-manager.ts +715 -0
  681. package/src/tools/browser/browser-screencast.ts +217 -0
  682. package/src/tools/browser/headless-browser.ts +450 -0
  683. package/src/tools/browser/jit-auth.ts +51 -0
  684. package/src/tools/browser/network-recorder.ts +348 -0
  685. package/src/tools/browser/network-recording-types.ts +49 -0
  686. package/src/tools/browser/recording-store.ts +49 -0
  687. package/src/tools/browser/runtime-check.ts +43 -0
  688. package/src/tools/claude-code/claude-code.ts +232 -0
  689. package/src/tools/computer-use/definitions.ts +443 -0
  690. package/src/tools/computer-use/registry.ts +22 -0
  691. package/src/tools/computer-use/request-computer-control.ts +53 -0
  692. package/src/tools/computer-use/skill-proxy-bridge.ts +28 -0
  693. package/src/tools/contacts/contact-merge.ts +87 -0
  694. package/src/tools/contacts/contact-search.ts +102 -0
  695. package/src/tools/contacts/contact-upsert.ts +137 -0
  696. package/src/tools/contacts/index.ts +4 -0
  697. package/src/tools/credentials/account-registry.ts +127 -0
  698. package/src/tools/credentials/broker-types.ts +107 -0
  699. package/src/tools/credentials/broker.ts +372 -0
  700. package/src/tools/credentials/domain-policy.ts +51 -0
  701. package/src/tools/credentials/host-pattern-match.ts +60 -0
  702. package/src/tools/credentials/metadata-store.ts +335 -0
  703. package/src/tools/credentials/policy-types.ts +52 -0
  704. package/src/tools/credentials/policy-validate.ts +80 -0
  705. package/src/tools/credentials/resolve.ts +122 -0
  706. package/src/tools/credentials/selection.ts +159 -0
  707. package/src/tools/credentials/tool-policy.ts +25 -0
  708. package/src/tools/credentials/vault.ts +641 -0
  709. package/src/tools/document/document-tool.ts +165 -0
  710. package/src/tools/document/editor-template.ts +237 -0
  711. package/src/tools/document/index.ts +5 -0
  712. package/src/tools/executor.ts +825 -0
  713. package/src/tools/filesystem/edit.ts +127 -0
  714. package/src/tools/filesystem/fuzzy-match.ts +202 -0
  715. package/src/tools/filesystem/read.ts +71 -0
  716. package/src/tools/filesystem/view-image.ts +199 -0
  717. package/src/tools/filesystem/write.ts +79 -0
  718. package/src/tools/followups/followup_create.ts +118 -0
  719. package/src/tools/followups/followup_list.ts +100 -0
  720. package/src/tools/followups/followup_resolve.ts +91 -0
  721. package/src/tools/followups/index.ts +3 -0
  722. package/src/tools/host-filesystem/edit.ts +125 -0
  723. package/src/tools/host-filesystem/read.ts +80 -0
  724. package/src/tools/host-filesystem/write.ts +76 -0
  725. package/src/tools/host-terminal/cli-discover.ts +179 -0
  726. package/src/tools/host-terminal/host-shell.ts +181 -0
  727. package/src/tools/memory/definitions.ts +69 -0
  728. package/src/tools/memory/handlers.ts +245 -0
  729. package/src/tools/memory/register.ts +66 -0
  730. package/src/tools/network/domain-normalize.ts +85 -0
  731. package/src/tools/network/script-proxy/certs.ts +237 -0
  732. package/src/tools/network/script-proxy/connect-tunnel.ts +82 -0
  733. package/src/tools/network/script-proxy/http-forwarder.ts +151 -0
  734. package/src/tools/network/script-proxy/index.ts +28 -0
  735. package/src/tools/network/script-proxy/logging.ts +196 -0
  736. package/src/tools/network/script-proxy/mitm-handler.ts +269 -0
  737. package/src/tools/network/script-proxy/policy.ts +152 -0
  738. package/src/tools/network/script-proxy/router.ts +60 -0
  739. package/src/tools/network/script-proxy/server.ts +136 -0
  740. package/src/tools/network/script-proxy/session-manager.ts +534 -0
  741. package/src/tools/network/script-proxy/types.ts +125 -0
  742. package/src/tools/network/url-safety.ts +227 -0
  743. package/src/tools/network/web-fetch.ts +701 -0
  744. package/src/tools/network/web-search.ts +319 -0
  745. package/src/tools/playbooks/index.ts +5 -0
  746. package/src/tools/playbooks/playbook-create.ts +140 -0
  747. package/src/tools/playbooks/playbook-delete.ts +76 -0
  748. package/src/tools/playbooks/playbook-list.ts +101 -0
  749. package/src/tools/playbooks/playbook-update.ts +159 -0
  750. package/src/tools/registry.ts +297 -0
  751. package/src/tools/reminder/reminder-store.ts +148 -0
  752. package/src/tools/reminder/reminder.ts +153 -0
  753. package/src/tools/schedule/create.ts +86 -0
  754. package/src/tools/schedule/delete.ts +54 -0
  755. package/src/tools/schedule/list.ts +88 -0
  756. package/src/tools/schedule/update.ts +97 -0
  757. package/src/tools/shared/filesystem/edit-engine.ts +56 -0
  758. package/src/tools/shared/filesystem/errors.ts +85 -0
  759. package/src/tools/shared/filesystem/file-ops-service.ts +215 -0
  760. package/src/tools/shared/filesystem/format-diff.ts +35 -0
  761. package/src/tools/shared/filesystem/path-policy.ts +125 -0
  762. package/src/tools/shared/filesystem/size-guard.ts +41 -0
  763. package/src/tools/shared/filesystem/types.ts +80 -0
  764. package/src/tools/shared/shell-output.ts +52 -0
  765. package/src/tools/skills/delete-managed.ts +60 -0
  766. package/src/tools/skills/load.ts +139 -0
  767. package/src/tools/skills/sandbox-runner.ts +279 -0
  768. package/src/tools/skills/scaffold-managed.ts +150 -0
  769. package/src/tools/skills/script-contract.ts +6 -0
  770. package/src/tools/skills/skill-script-runner.ts +86 -0
  771. package/src/tools/skills/skill-tool-factory.ts +64 -0
  772. package/src/tools/skills/vellum-catalog.ts +217 -0
  773. package/src/tools/subagent/abort.ts +62 -0
  774. package/src/tools/subagent/index.ts +5 -0
  775. package/src/tools/subagent/message.ts +72 -0
  776. package/src/tools/subagent/read.ts +98 -0
  777. package/src/tools/subagent/spawn.ts +85 -0
  778. package/src/tools/subagent/status.ts +74 -0
  779. package/src/tools/swarm/delegate.ts +182 -0
  780. package/src/tools/system/request-permission.ts +98 -0
  781. package/src/tools/tasks/index.ts +25 -0
  782. package/src/tools/tasks/task-delete.ts +69 -0
  783. package/src/tools/tasks/task-list.ts +65 -0
  784. package/src/tools/tasks/task-run.ts +125 -0
  785. package/src/tools/tasks/task-save.ts +79 -0
  786. package/src/tools/tasks/work-item-enqueue.ts +176 -0
  787. package/src/tools/tasks/work-item-list.ts +86 -0
  788. package/src/tools/terminal/backends/docker.ts +372 -0
  789. package/src/tools/terminal/backends/native.ts +188 -0
  790. package/src/tools/terminal/backends/types.ts +26 -0
  791. package/src/tools/terminal/evaluate-typescript.ts +275 -0
  792. package/src/tools/terminal/parser.ts +393 -0
  793. package/src/tools/terminal/safe-env.ts +37 -0
  794. package/src/tools/terminal/sandbox-diagnostics.ts +149 -0
  795. package/src/tools/terminal/sandbox.ts +44 -0
  796. package/src/tools/terminal/shell.ts +257 -0
  797. package/src/tools/tool-manifest.ts +250 -0
  798. package/src/tools/types.ts +177 -0
  799. package/src/tools/ui-surface/definitions.ts +232 -0
  800. package/src/tools/ui-surface/registry.ts +14 -0
  801. package/src/tools/watch/screen-watch.ts +128 -0
  802. package/src/tools/watch/watch-state.ts +119 -0
  803. package/src/tools/watcher/create.ts +110 -0
  804. package/src/tools/watcher/delete.ts +53 -0
  805. package/src/tools/watcher/digest.ts +84 -0
  806. package/src/tools/watcher/list.ts +90 -0
  807. package/src/tools/watcher/update.ts +102 -0
  808. package/src/tools/weather/service.ts +551 -0
  809. package/src/usage/actors.ts +24 -0
  810. package/src/usage/types.ts +38 -0
  811. package/src/util/clipboard.ts +33 -0
  812. package/src/util/content-id.ts +16 -0
  813. package/src/util/diff.ts +181 -0
  814. package/src/util/errors.ts +129 -0
  815. package/src/util/logger.ts +243 -0
  816. package/src/util/platform.ts +607 -0
  817. package/src/util/pricing.ts +150 -0
  818. package/src/util/spinner.ts +51 -0
  819. package/src/util/time.ts +16 -0
  820. package/src/util/xml.ts +4 -0
  821. package/src/version.ts +3 -0
  822. package/src/watcher/constants.ts +11 -0
  823. package/src/watcher/engine.ts +199 -0
  824. package/src/watcher/provider-registry.ts +15 -0
  825. package/src/watcher/provider-types.ts +48 -0
  826. package/src/watcher/providers/gmail.ts +198 -0
  827. package/src/watcher/providers/google-calendar.ts +228 -0
  828. package/src/watcher/providers/slack.ts +128 -0
  829. package/src/watcher/watcher-store.ts +418 -0
  830. package/src/work-items/work-item-store.ts +91 -0
  831. package/src/workspace/git-service.ts +620 -0
  832. package/src/workspace/heartbeat-service.ts +288 -0
  833. package/src/workspace/top-level-renderer.ts +19 -0
  834. package/src/workspace/top-level-scanner.ts +41 -0
  835. package/src/workspace/turn-commit.ts +122 -0
  836. package/tsconfig.json +21 -0
  837. package/LICENSE +0 -674
  838. package/dist/cli.js +0 -569
@@ -0,0 +1,824 @@
1
+ /**
2
+ * CLI command group: `vellum doordash`
3
+ *
4
+ * Order food from DoorDash via the command line.
5
+ * All commands output JSON to stdout. Use --json for machine-readable output.
6
+ */
7
+
8
+ import * as net from 'node:net';
9
+ import { Command } from 'commander';
10
+ import {
11
+ loadSession,
12
+ importFromRecording,
13
+ clearSession,
14
+ } from '../doordash/session.js';
15
+ import {
16
+ extractQueries,
17
+ saveQueries,
18
+ } from '../doordash/query-extractor.js';
19
+ import { NetworkRecorder } from '../tools/browser/network-recorder.js';
20
+ import {
21
+ saveRecording,
22
+ loadRecording,
23
+ } from '../tools/browser/recording-store.js';
24
+ import type { SessionRecording } from '../tools/browser/network-recording-types.js';
25
+ import {
26
+ search,
27
+ searchItems,
28
+ retailSearch,
29
+ getStoreMenu,
30
+ getItemDetails,
31
+ addToCart,
32
+ removeFromCart,
33
+ viewCart,
34
+ listCarts,
35
+ getDropoffOptions,
36
+ getPaymentMethods,
37
+ placeOrder,
38
+ SessionExpiredError,
39
+ } from '../doordash/client.js';
40
+ import { getSocketPath, readSessionToken } from '../util/platform.js';
41
+ import {
42
+ serialize,
43
+ createMessageParser,
44
+ } from '../daemon/ipc-protocol.js';
45
+
46
+ // ---------------------------------------------------------------------------
47
+ // Helpers
48
+ // ---------------------------------------------------------------------------
49
+
50
+ function output(data: unknown, json: boolean): void {
51
+ process.stdout.write(
52
+ json ? JSON.stringify(data) + '\n' : JSON.stringify(data, null, 2) + '\n',
53
+ );
54
+ }
55
+
56
+ function outputError(message: string, code = 1): void {
57
+ output({ ok: false, error: message }, true);
58
+ process.exitCode = code;
59
+ }
60
+
61
+ function getJson(cmd: Command): boolean {
62
+ let c: Command | null = cmd;
63
+ while (c) {
64
+ if ((c.opts() as { json?: boolean }).json) return true;
65
+ c = c.parent;
66
+ }
67
+ return false;
68
+ }
69
+
70
+ const SESSION_EXPIRED_MSG =
71
+ 'Your DoorDash session has expired. Please sign in to DoorDash in Chrome — ' +
72
+ 'the assistant will use Ride Shotgun to capture your session automatically.';
73
+
74
+ async function run(cmd: Command, fn: () => Promise<unknown>): Promise<void> {
75
+ try {
76
+ const result = await fn();
77
+ output(
78
+ { ok: true, ...(result as Record<string, unknown>) },
79
+ getJson(cmd),
80
+ );
81
+ } catch (err) {
82
+ if (err instanceof SessionExpiredError) {
83
+ output(
84
+ { ok: false, error: 'session_expired', message: SESSION_EXPIRED_MSG },
85
+ getJson(cmd),
86
+ );
87
+ process.exitCode = 1;
88
+ return;
89
+ }
90
+ outputError(err instanceof Error ? err.message : String(err));
91
+ }
92
+ }
93
+
94
+ // ---------------------------------------------------------------------------
95
+ // Command registration
96
+ // ---------------------------------------------------------------------------
97
+
98
+ export function registerDoordashCommand(program: Command): void {
99
+ const dd = program
100
+ .command('doordash')
101
+ .description(
102
+ 'Order food from DoorDash. Requires a session imported from a Ride Shotgun recording.',
103
+ )
104
+ .option('--json', 'Machine-readable JSON output');
105
+
106
+ // =========================================================================
107
+ // login — import session from a recording
108
+ // =========================================================================
109
+ dd.command('login')
110
+ .description('Import a DoorDash session from a Ride Shotgun recording')
111
+ .requiredOption(
112
+ '--recording <path>',
113
+ 'Path to the recording JSON file',
114
+ )
115
+ .action(async (opts: { recording: string }, cmd: Command) => {
116
+ await run(cmd, async () => {
117
+ const session = importFromRecording(opts.recording);
118
+ return {
119
+ message: 'Session imported successfully',
120
+ cookieCount: session.cookies.length,
121
+ recordingId: session.recordingId,
122
+ };
123
+ });
124
+ });
125
+
126
+ // =========================================================================
127
+ // logout — clear saved session
128
+ // =========================================================================
129
+ dd.command('logout')
130
+ .description('Clear the saved DoorDash session')
131
+ .action((_opts: unknown, cmd: Command) => {
132
+ clearSession();
133
+ output({ ok: true, message: 'Session cleared' }, getJson(cmd));
134
+ });
135
+
136
+ // =========================================================================
137
+ // refresh — start Ride Shotgun learn to capture fresh cookies
138
+ // =========================================================================
139
+ dd.command('refresh')
140
+ .description(
141
+ 'Start a Ride Shotgun learn session to capture fresh DoorDash cookies. ' +
142
+ 'Opens doordash.com in Chrome — sign in when prompted. ' +
143
+ 'NOTE: Chrome will restart with debugging enabled; your tabs will be restored.',
144
+ )
145
+ .option('--duration <seconds>', 'Recording duration in seconds', '180')
146
+ .action(async (opts: { duration: string }, cmd: Command) => {
147
+ const json = getJson(cmd);
148
+ const duration = parseInt(opts.duration, 10);
149
+
150
+ try {
151
+ const result = await startLearnSession(duration);
152
+ if (result.recordingPath) {
153
+ const session = importFromRecording(result.recordingPath);
154
+
155
+ // Also extract and save captured queries for self-healing
156
+ let queriesCaptured = 0;
157
+ try {
158
+ const recording = loadRecording(result.recordingId ?? '');
159
+ if (recording) {
160
+ const queries = extractQueries(recording);
161
+ if (queries.length > 0) {
162
+ saveQueries(queries);
163
+ queriesCaptured = queries.length;
164
+ }
165
+ }
166
+ } catch {
167
+ // Non-fatal: query extraction is best-effort
168
+ }
169
+
170
+ output(
171
+ {
172
+ ok: true,
173
+ message: 'Session refreshed successfully',
174
+ cookieCount: session.cookies.length,
175
+ recordingId: result.recordingId,
176
+ queriesCaptured,
177
+ },
178
+ json,
179
+ );
180
+ } else {
181
+ output(
182
+ {
183
+ ok: false,
184
+ error: 'Recording completed but no recording path returned',
185
+ recordingId: result.recordingId,
186
+ },
187
+ json,
188
+ );
189
+ process.exitCode = 1;
190
+ }
191
+ } catch (err) {
192
+ outputError(err instanceof Error ? err.message : String(err));
193
+ }
194
+ });
195
+
196
+ // =========================================================================
197
+ // record — standalone CDP network recording
198
+ // =========================================================================
199
+ dd.command('record')
200
+ .description(
201
+ 'Record DoorDash network traffic via CDP. ' +
202
+ 'Opens Chrome with CDP debugging, captures GraphQL operations, ' +
203
+ 'and saves captured queries for self-healing API support.',
204
+ )
205
+ .option('--duration <seconds>', 'Max recording duration in seconds', '120')
206
+ .option('--stop-on <operationName>', 'Auto-stop when this GraphQL operation is captured (e.g. addCartItem)')
207
+ .action(async (opts: { duration: string; stopOn?: string }, cmd: Command) => {
208
+ const json = getJson(cmd);
209
+ const duration = parseInt(opts.duration, 10);
210
+
211
+ try {
212
+ await ensureChromeWithCDP();
213
+
214
+ const startTime = Date.now() / 1000;
215
+ const recorder = new NetworkRecorder('doordash.com');
216
+ await recorder.startDirect('http://localhost:9222');
217
+
218
+ process.stderr.write('Recording DoorDash network traffic...\n');
219
+ if (opts.stopOn) {
220
+ process.stderr.write(`Will auto-stop when "${opts.stopOn}" operation is detected.\n`);
221
+ }
222
+ process.stderr.write(`Timeout: ${duration}s. Press Ctrl+C to stop early.\n`);
223
+
224
+ const finishRecording = async () => {
225
+ process.stderr.write('\nStopping recording...\n');
226
+ const cookies = await recorder.extractCookies('doordash.com');
227
+ const entries = await recorder.stop();
228
+
229
+ const recording: SessionRecording = {
230
+ id: crypto.randomUUID(),
231
+ startedAt: startTime,
232
+ endedAt: Date.now() / 1000,
233
+ targetDomain: 'doordash.com',
234
+ networkEntries: entries,
235
+ cookies,
236
+ observations: [],
237
+ };
238
+
239
+ const recordingPath = saveRecording(recording);
240
+
241
+ // Extract and save queries
242
+ const queries = extractQueries(recording);
243
+ let queriesPath: string | undefined;
244
+ if (queries.length > 0) {
245
+ queriesPath = saveQueries(queries);
246
+ }
247
+
248
+ process.stderr.write(`\nRecording saved: ${recordingPath}\n`);
249
+ process.stderr.write(`Network entries: ${entries.length}\n`);
250
+ process.stderr.write(`GraphQL operations captured: ${queries.length}\n`);
251
+ if (queries.length > 0) {
252
+ process.stderr.write('Operations:\n');
253
+ for (const q of queries) {
254
+ const varsKeys = q.exampleVariables && typeof q.exampleVariables === 'object'
255
+ ? Object.keys(q.exampleVariables as Record<string, unknown>).join(', ')
256
+ : '(none)';
257
+ process.stderr.write(` - ${q.operationName} [vars: ${varsKeys}]\n`);
258
+ }
259
+ process.stderr.write(`Queries saved: ${queriesPath}\n`);
260
+ }
261
+
262
+ output(
263
+ {
264
+ ok: true,
265
+ recordingId: recording.id,
266
+ recordingPath,
267
+ networkEntries: entries.length,
268
+ queriesCaptured: queries.length,
269
+ operations: queries.map(q => q.operationName),
270
+ queriesPath,
271
+ },
272
+ json,
273
+ );
274
+ };
275
+
276
+ await new Promise<void>((resolve) => {
277
+ let poll: ReturnType<typeof setInterval> | undefined;
278
+
279
+ // Timeout
280
+ const timer = setTimeout(() => {
281
+ if (poll) clearInterval(poll);
282
+ process.stderr.write(`\nTimeout reached (${duration}s).\n`);
283
+ resolve();
284
+ }, duration * 1000);
285
+
286
+ // Ctrl+C
287
+ process.on('SIGINT', () => {
288
+ if (poll) clearInterval(poll);
289
+ clearTimeout(timer);
290
+ resolve();
291
+ });
292
+
293
+ // --stop-on: poll entries for the target operation
294
+ if (opts.stopOn) {
295
+ const target = opts.stopOn;
296
+ poll = setInterval(() => {
297
+ const entries = recorder.getEntries();
298
+ const found = entries.some(e => {
299
+ if (!e.request.postData) return false;
300
+ try {
301
+ const body = JSON.parse(e.request.postData) as { operationName?: string };
302
+ return body.operationName === target;
303
+ } catch { return false; }
304
+ });
305
+ if (found) {
306
+ clearInterval(poll);
307
+ clearTimeout(timer);
308
+ process.stderr.write(`\nDetected "${target}" operation.\n`);
309
+ // Small delay to let the response come back
310
+ setTimeout(() => resolve(), 3000);
311
+ }
312
+ }, 500);
313
+ }
314
+ });
315
+
316
+ await finishRecording();
317
+ } catch (err) {
318
+ outputError(err instanceof Error ? err.message : String(err));
319
+ }
320
+ });
321
+
322
+ // =========================================================================
323
+ // inspect — inspect a recording's GraphQL operations
324
+ // =========================================================================
325
+ dd.command('inspect')
326
+ .description('Inspect GraphQL operations in a recording')
327
+ .argument('<recordingId>', 'Recording ID or path to recording JSON file')
328
+ .option('--op <operationName>', 'Filter to a specific operation name')
329
+ .action(async (recordingIdOrPath: string, opts: { op?: string }, cmd: Command) => {
330
+ const json = getJson(cmd);
331
+
332
+ try {
333
+ let recording: SessionRecording | null = null;
334
+
335
+ // Try as path first, then as recording ID
336
+ if (recordingIdOrPath.includes('/') || recordingIdOrPath.endsWith('.json')) {
337
+ try {
338
+ const { readFileSync } = await import('node:fs');
339
+ recording = JSON.parse(readFileSync(recordingIdOrPath, 'utf-8')) as SessionRecording;
340
+ } catch {
341
+ // Fall through to try as ID
342
+ }
343
+ }
344
+ if (!recording) {
345
+ recording = loadRecording(recordingIdOrPath);
346
+ }
347
+
348
+ if (!recording) {
349
+ outputError(`Recording not found: ${recordingIdOrPath}`);
350
+ return;
351
+ }
352
+
353
+ const queries = extractQueries(recording);
354
+
355
+ if (opts.op) {
356
+ const match = queries.find(q => q.operationName === opts.op);
357
+ if (!match) {
358
+ outputError(`Operation "${opts.op}" not found. Available: ${queries.map(q => q.operationName).join(', ')}`);
359
+ return;
360
+ }
361
+
362
+ if (json) {
363
+ output({ ok: true, operation: match }, true);
364
+ } else {
365
+ process.stderr.write(`Operation: ${match.operationName}\n`);
366
+ process.stderr.write(`Captured at: ${new Date(match.capturedAt * 1000).toISOString()}\n\n`);
367
+ process.stderr.write('--- Query ---\n');
368
+ process.stderr.write(match.query + '\n\n');
369
+ process.stderr.write('--- Variables ---\n');
370
+ process.stderr.write(JSON.stringify(match.exampleVariables, null, 2) + '\n');
371
+ }
372
+ } else {
373
+ if (json) {
374
+ output({ ok: true, operations: queries, count: queries.length }, true);
375
+ } else {
376
+ process.stderr.write(`Recording: ${recording.id}\n`);
377
+ process.stderr.write(`Total network entries: ${recording.networkEntries.length}\n`);
378
+ process.stderr.write(`GraphQL operations: ${queries.length}\n\n`);
379
+
380
+ for (const q of queries) {
381
+ const varsKeys = q.exampleVariables && typeof q.exampleVariables === 'object'
382
+ ? Object.keys(q.exampleVariables as Record<string, unknown>).join(', ')
383
+ : '(none)';
384
+ process.stderr.write(` ${q.operationName}\n`);
385
+ process.stderr.write(` Variables: ${varsKeys}\n`);
386
+ process.stderr.write(` Captured: ${new Date(q.capturedAt * 1000).toISOString()}\n`);
387
+ }
388
+ }
389
+ }
390
+ } catch (err) {
391
+ outputError(err instanceof Error ? err.message : String(err));
392
+ }
393
+ });
394
+
395
+ // =========================================================================
396
+ // status — check session status
397
+ // =========================================================================
398
+ dd.command('status')
399
+ .description('Check if a DoorDash session is active')
400
+ .action((_opts: unknown, cmd: Command) => {
401
+ const session = loadSession();
402
+ if (session) {
403
+ output(
404
+ {
405
+ ok: true,
406
+ loggedIn: true,
407
+ cookieCount: session.cookies.length,
408
+ importedAt: session.importedAt,
409
+ recordingId: session.recordingId,
410
+ },
411
+ getJson(cmd),
412
+ );
413
+ } else {
414
+ output({ ok: true, loggedIn: false }, getJson(cmd));
415
+ }
416
+ });
417
+
418
+ // =========================================================================
419
+ // search — search for restaurants/stores
420
+ // =========================================================================
421
+ dd.command('search')
422
+ .description('Search for restaurants on DoorDash')
423
+ .argument('<query>', 'Search query (e.g. "pizza", "thai food")')
424
+ .action(async (query: string, _opts: unknown, cmd: Command) => {
425
+ await run(cmd, async () => {
426
+ const results = await search(query);
427
+ return { results, count: results.length };
428
+ });
429
+ });
430
+
431
+ // =========================================================================
432
+ // store-search — search for items within a specific retail/convenience store
433
+ // =========================================================================
434
+ dd.command('store-search')
435
+ .description('Search for items within a specific store (best for convenience/pharmacy stores)')
436
+ .argument('<storeId>', 'DoorDash store ID')
437
+ .argument('<query>', 'Search query (e.g. "tylenol", "advil")')
438
+ .option('--limit <n>', 'Max results', '30')
439
+ .action(async (storeId: string, query: string, opts: { limit: string }, cmd: Command) => {
440
+ await run(cmd, async () => {
441
+ const result = await retailSearch(storeId, query, { limit: parseInt(opts.limit, 10) });
442
+ return result;
443
+ });
444
+ });
445
+
446
+ // =========================================================================
447
+ // search-items — search for items across all stores (works for convenience/retail)
448
+ // =========================================================================
449
+ dd.command('search-items')
450
+ .description('Search for items across all stores (works for convenience/retail stores)')
451
+ .argument('<query>', 'Search query (e.g. "tylenol", "advil")')
452
+ .option('--debug', 'Print raw response to stderr')
453
+ .action(async (query: string, opts: { debug?: boolean }, cmd: Command) => {
454
+ await run(cmd, async () => {
455
+ const results = await searchItems(query, { debug: opts.debug });
456
+ return { results, count: results.length };
457
+ });
458
+ });
459
+
460
+ // =========================================================================
461
+ // menu — get a store's menu
462
+ // =========================================================================
463
+ dd.command('menu')
464
+ .description("Get a restaurant's menu by store ID")
465
+ .argument('<storeId>', 'DoorDash store ID')
466
+ .option('--menu-id <menuId>', 'Specific menu ID (optional)')
467
+ .option('--debug', 'Print raw response structure to stderr')
468
+ .action(
469
+ async (
470
+ storeId: string,
471
+ opts: { menuId?: string; debug?: boolean },
472
+ cmd: Command,
473
+ ) => {
474
+ await run(cmd, async () => {
475
+ const store = await getStoreMenu(storeId, opts.menuId, { debug: opts.debug });
476
+ return { store };
477
+ });
478
+ },
479
+ );
480
+
481
+ // =========================================================================
482
+ // item — get item details
483
+ // =========================================================================
484
+ dd.command('item')
485
+ .description('Get details for a specific menu item')
486
+ .argument('<storeId>', 'DoorDash store ID')
487
+ .argument('<itemId>', 'Menu item ID')
488
+ .action(
489
+ async (storeId: string, itemId: string, _opts: unknown, cmd: Command) => {
490
+ await run(cmd, async () => {
491
+ const item = await getItemDetails(storeId, itemId);
492
+ return { item };
493
+ });
494
+ },
495
+ );
496
+
497
+ // =========================================================================
498
+ // cart — cart operations (subcommand group)
499
+ // =========================================================================
500
+ const cart = dd.command('cart').description('Cart operations');
501
+
502
+ // cart add
503
+ cart
504
+ .command('add')
505
+ .description('Add an item to your cart')
506
+ .requiredOption('--store-id <storeId>', 'Store ID')
507
+ .requiredOption('--menu-id <menuId>', 'Menu ID')
508
+ .requiredOption('--item-id <itemId>', 'Item ID')
509
+ .requiredOption('--item-name <name>', 'Item name')
510
+ .requiredOption('--unit-price <cents>', 'Unit price in cents')
511
+ .option('--quantity <n>', 'Quantity', '1')
512
+ .option('--cart-id <cartId>', 'Existing cart ID (creates new if omitted)')
513
+ .option('--special-instructions <text>', 'Special instructions')
514
+ .action(
515
+ async (
516
+ opts: {
517
+ storeId: string;
518
+ menuId: string;
519
+ itemId: string;
520
+ itemName: string;
521
+ unitPrice: string;
522
+ quantity: string;
523
+ cartId?: string;
524
+ specialInstructions?: string;
525
+ },
526
+ cmd: Command,
527
+ ) => {
528
+ await run(cmd, async () => {
529
+ const result = await addToCart({
530
+ storeId: opts.storeId,
531
+ menuId: opts.menuId,
532
+ itemId: opts.itemId,
533
+ itemName: opts.itemName,
534
+ unitPrice: parseInt(opts.unitPrice, 10),
535
+ quantity: parseInt(opts.quantity, 10),
536
+ cartId: opts.cartId,
537
+ specialInstructions: opts.specialInstructions,
538
+ });
539
+ return { cart: result };
540
+ });
541
+ },
542
+ );
543
+
544
+ // cart remove
545
+ cart
546
+ .command('remove')
547
+ .description('Remove an item from your cart')
548
+ .requiredOption('--cart-id <cartId>', 'Cart ID')
549
+ .requiredOption('--item-id <itemId>', 'Order item ID (from cart view)')
550
+ .action(
551
+ async (opts: { cartId: string; itemId: string }, cmd: Command) => {
552
+ await run(cmd, async () => {
553
+ const result = await removeFromCart(opts.cartId, opts.itemId);
554
+ return { cart: result };
555
+ });
556
+ },
557
+ );
558
+
559
+ // cart view
560
+ cart
561
+ .command('view')
562
+ .description('View cart contents')
563
+ .argument('<cartId>', 'Cart ID')
564
+ .action(async (cartId: string, _opts: unknown, cmd: Command) => {
565
+ await run(cmd, async () => {
566
+ const result = await viewCart(cartId);
567
+ return { cart: result };
568
+ });
569
+ });
570
+
571
+ // cart list
572
+ cart
573
+ .command('list')
574
+ .description('List all active carts')
575
+ .option('--store-id <storeId>', 'Filter by store ID')
576
+ .action(async (opts: { storeId?: string }, cmd: Command) => {
577
+ await run(cmd, async () => {
578
+ const carts = await listCarts(opts.storeId);
579
+ return { carts, count: carts.length };
580
+ });
581
+ });
582
+
583
+ // =========================================================================
584
+ // checkout — get checkout / dropoff options
585
+ // =========================================================================
586
+ dd.command('checkout')
587
+ .description('Get delivery/dropoff options for a cart')
588
+ .argument('<cartId>', 'Cart ID')
589
+ .option('--address-id <addressId>', 'Delivery address ID')
590
+ .action(
591
+ async (
592
+ cartId: string,
593
+ opts: { addressId?: string },
594
+ cmd: Command,
595
+ ) => {
596
+ await run(cmd, async () => {
597
+ const options = await getDropoffOptions(cartId, opts.addressId);
598
+ return { dropoffOptions: options };
599
+ });
600
+ },
601
+ );
602
+
603
+ // =========================================================================
604
+ // order — order operations (subcommand group)
605
+ // =========================================================================
606
+ const order = dd.command('order').description('Order operations');
607
+
608
+ // order place
609
+ order
610
+ .command('place')
611
+ .description('Place an order from a cart')
612
+ .requiredOption('--cart-id <cartId>', 'Cart ID')
613
+ .requiredOption('--store-id <storeId>', 'Store ID')
614
+ .requiredOption('--total <cents>', 'Order total in cents')
615
+ .option('--tip <cents>', 'Tip amount in cents', '0')
616
+ .option('--delivery-option <type>', 'Delivery option type', 'STANDARD')
617
+ .option('--dropoff-option <id>', 'Dropoff option ID (from checkout command)')
618
+ .option('--payment-uuid <uuid>', 'Payment method UUID (uses default if omitted)')
619
+ .option('--payment-type <type>', 'Payment method type', 'Card')
620
+ .action(
621
+ async (
622
+ opts: {
623
+ cartId: string;
624
+ storeId: string;
625
+ total: string;
626
+ tip: string;
627
+ deliveryOption: string;
628
+ dropoffOption?: string;
629
+ paymentUuid?: string;
630
+ paymentType: string;
631
+ },
632
+ cmd: Command,
633
+ ) => {
634
+ await run(cmd, async () => {
635
+ const result = await placeOrder({
636
+ cartId: opts.cartId,
637
+ storeId: opts.storeId,
638
+ total: parseInt(opts.total, 10),
639
+ tipAmount: parseInt(opts.tip, 10),
640
+ deliveryOptionType: opts.deliveryOption,
641
+ dropoffOptionId: opts.dropoffOption,
642
+ paymentMethodUuid: opts.paymentUuid,
643
+ paymentMethodType: opts.paymentType,
644
+ });
645
+ return { order: result };
646
+ });
647
+ },
648
+ );
649
+
650
+ // =========================================================================
651
+ // payment-methods — list saved payment methods
652
+ // =========================================================================
653
+ dd.command('payment-methods')
654
+ .description('List saved payment methods')
655
+ .action(async (_opts: unknown, cmd: Command) => {
656
+ await run(cmd, async () => {
657
+ const methods = await getPaymentMethods();
658
+ return { methods, count: methods.length };
659
+ });
660
+ });
661
+ }
662
+
663
+ // ---------------------------------------------------------------------------
664
+ // Chrome CDP restart helper
665
+ // ---------------------------------------------------------------------------
666
+
667
+ import { execSync, spawn as spawnChild } from 'node:child_process';
668
+ import { homedir } from 'node:os';
669
+ import { join as pathJoin } from 'node:path';
670
+
671
+ const CDP_BASE = 'http://localhost:9222';
672
+ const CHROME_DATA_DIR = pathJoin(
673
+ homedir(),
674
+ 'Library/Application Support/Google/Chrome-CDP',
675
+ );
676
+
677
+ async function isCdpReady(): Promise<boolean> {
678
+ try {
679
+ const res = await fetch(`${CDP_BASE}/json/version`);
680
+ return res.ok;
681
+ } catch {
682
+ return false;
683
+ }
684
+ }
685
+
686
+ async function ensureChromeWithCDP(): Promise<void> {
687
+ // Already running with CDP?
688
+ if (await isCdpReady()) return;
689
+
690
+ // Kill existing Chrome gracefully
691
+ try {
692
+ execSync('osascript -e \'tell application "Google Chrome" to quit\'', {
693
+ timeout: 5000,
694
+ stdio: 'ignore',
695
+ });
696
+ } catch {
697
+ // Chrome might not be running
698
+ }
699
+
700
+ // Wait for Chrome to quit
701
+ for (let i = 0; i < 30; i++) {
702
+ try {
703
+ execSync('pgrep -x "Google Chrome"', { stdio: 'ignore' });
704
+ await new Promise(r => setTimeout(r, 200));
705
+ } catch {
706
+ break; // Not running
707
+ }
708
+ }
709
+
710
+ // Relaunch Chrome with CDP flags
711
+ const chromeApp =
712
+ '/Applications/Google Chrome.app/Contents/MacOS/Google Chrome';
713
+ spawnChild(chromeApp, [
714
+ `--remote-debugging-port=9222`,
715
+ `--force-renderer-accessibility`,
716
+ `--user-data-dir=${CHROME_DATA_DIR}`,
717
+ ], {
718
+ detached: true,
719
+ stdio: 'ignore',
720
+ }).unref();
721
+
722
+ // Wait for CDP to be ready
723
+ for (let i = 0; i < 30; i++) {
724
+ await new Promise(r => setTimeout(r, 500));
725
+ if (await isCdpReady()) return;
726
+ }
727
+ throw new Error('Chrome started but CDP endpoint not responding after 15s');
728
+ }
729
+
730
+ // ---------------------------------------------------------------------------
731
+ // Ride Shotgun learn session helper
732
+ // ---------------------------------------------------------------------------
733
+
734
+ interface LearnResult {
735
+ recordingId?: string;
736
+ recordingPath?: string;
737
+ }
738
+
739
+ async function startLearnSession(durationSeconds: number): Promise<LearnResult> {
740
+ // Step 1: Ensure Chrome is running with CDP
741
+ await ensureChromeWithCDP();
742
+
743
+ // Step 2: Connect to daemon and start recording
744
+ return new Promise((resolve, reject) => {
745
+ const socketPath = getSocketPath();
746
+ const sessionToken = readSessionToken();
747
+ const socket = net.createConnection(socketPath);
748
+ const parser = createMessageParser();
749
+
750
+ socket.on('error', (err) => {
751
+ reject(new Error(`Cannot connect to daemon: ${err.message}. Is the daemon running?`));
752
+ });
753
+
754
+ // Timeout safety — unref so it doesn't keep process alive
755
+ const timeoutHandle = setTimeout(() => {
756
+ socket.destroy();
757
+ reject(new Error(`Learn session timed out after ${durationSeconds + 30}s`));
758
+ }, (durationSeconds + 30) * 1000);
759
+ timeoutHandle.unref();
760
+
761
+ let authenticated = !sessionToken; // If no token needed, consider already authenticated
762
+
763
+ const sendStartCommand = () => {
764
+ socket.write(
765
+ serialize({
766
+ type: 'ride_shotgun_start',
767
+ durationSeconds,
768
+ intervalSeconds: 5,
769
+ mode: 'learn',
770
+ targetDomain: 'doordash.com',
771
+ } as unknown as import('../daemon/ipc-protocol.js').ClientMessage),
772
+ );
773
+ };
774
+
775
+ socket.on('data', (chunk) => {
776
+ const messages = parser.feed(chunk.toString('utf-8'));
777
+ for (const msg of messages) {
778
+ const m = msg as unknown as Record<string, unknown>;
779
+
780
+ // Handle auth handshake
781
+ if (!authenticated && m.type === 'auth_result') {
782
+ if ((m as { success: boolean }).success) {
783
+ authenticated = true;
784
+ sendStartCommand();
785
+ } else {
786
+ clearTimeout(timeoutHandle);
787
+ socket.destroy();
788
+ reject(new Error('Daemon authentication failed'));
789
+ }
790
+ continue;
791
+ }
792
+
793
+ // Skip duplicate auth_result after already authenticated
794
+ if (m.type === 'auth_result') {
795
+ continue;
796
+ }
797
+
798
+ if (m.type === 'ride_shotgun_result') {
799
+ clearTimeout(timeoutHandle);
800
+ socket.destroy();
801
+ resolve({
802
+ recordingId: m.recordingId as string | undefined,
803
+ recordingPath: m.recordingPath as string | undefined,
804
+ });
805
+ }
806
+ }
807
+ });
808
+
809
+ socket.on('connect', () => {
810
+ if (sessionToken) {
811
+ // Send auth and wait for auth_result before sending the command
812
+ socket.write(
813
+ serialize({
814
+ type: 'auth',
815
+ token: sessionToken,
816
+ } as unknown as import('../daemon/ipc-protocol.js').ClientMessage),
817
+ );
818
+ } else {
819
+ // No auth needed, send command immediately
820
+ sendStartCommand();
821
+ }
822
+ });
823
+ });
824
+ }