vellum 0.2.14 → 0.3.3

package/bin/vellum.js

@@ -0,0 +1,2 @@
+#!/usr/bin/env bun
+import("@vellumai/cli/src/index.ts");

package/package.json

@@ -1,72 +1,13 @@
 {
   "name": "vellum",
-  "version": "0.2.14",
-  "type": "module",
+  "version": "0.3.3",
+  "description": "Install the full Vellum stack locally",
   "bin": {
-    "vellum": "./src/index.ts"
-  },
-  "scripts": {
-    "dev": "bun run src/index.ts",
-    "daemon:restart:http": "RUNTIME_HTTP_PORT=7821 bun run src/index.ts daemon restart",
-    "db:generate": "drizzle-kit generate",
-    "db:push": "drizzle-kit push",
-    "ipc:inventory": "bun run scripts/ipc/check-contract-inventory.ts",
-    "ipc:inventory:update": "bun run scripts/ipc/check-contract-inventory.ts --update",
-    "generate:ipc": "bun run scripts/ipc/generate-swift.ts",
-    "check:ipc-generated": "bun run scripts/ipc/generate-swift.ts --check",
-    "ipc:check-swift-drift": "bun run scripts/ipc/check-swift-decoder-drift.ts",
-    "lint": "eslint",
-    "typecheck": "bunx tsc --noEmit",
-    "test": "bash scripts/test.sh",
-    "test:stable": "EXCLUDE_EXPERIMENTAL=true bash scripts/test.sh",
-    "test:bench": "find src/__tests__ -maxdepth 1 -type f -name '*.benchmark.test.ts' -print0 | xargs -0 -P 1 -I {} bun test {}",
-    "test:filesystem-tools": "bash scripts/test-filesystem-tools.sh"
+    "vellum": "./bin/vellum.js"
   },
   "dependencies": {
-    "@anthropic-ai/claude-agent-sdk": "^0.2.42",
-    "@anthropic-ai/sdk": "^0.39.0",
-    "@google/genai": "^1.40.0",
-    "@huggingface/transformers": "^3.8.1",
-    "@qdrant/js-client-rest": "^1.16.2",
-    "@sentry/node": "^10.38.0",
-    "@vellumai/cli": "0.1.14",
-    "@vellumai/vellum-gateway": "0.1.10",
-    "agentmail": "^0.1.0",
-    "archiver": "^7.0.1",
-    "commander": "^13.1.0",
-    "croner": "^10.0.1",
-    "dotenv": "^17.3.1",
-    "drizzle-orm": "^0.38.4",
-    "ink": "^6.7.0",
-    "jszip": "^3.10.1",
-    "minimatch": "^10.1.2",
-    "openai": "^6.18.0",
-    "pino": "^9.6.0",
-    "pino-pretty": "^13.1.3",
-    "playwright": "^1.58.2",
-    "postgres": "^3.4.8",
-    "react": "^19.2.4",
-    "rrule": "^2.8.1",
-    "tldts": "^7.0.23",
-    "tree-sitter-bash": "0.25.1",
-    "uuid": "^11.1.0",
-    "web-tree-sitter": "0.26.5",
-    "zod": "^4.3.6"
-  },
-  "devDependencies": {
-    "@pydantic/logfire-node": "^0.13.0",
-    "@types/archiver": "^7.0.0",
-    "@types/bun": "^1.2.4",
-    "@types/node": "^25.2.2",
-    "@types/react": "^19.2.14",
-    "@types/uuid": "^10.0.0",
-    "drizzle-kit": "^0.30.4",
-    "eslint": "^10.0.0",
-    "fast-check": "^4.5.3",
-    "knip": "^5.83.1",
-    "quicktype-core": "^23.2.6",
-    "typescript": "^5.7.3",
-    "typescript-eslint": "^8.54.0",
-    "typescript-json-schema": "^0.67.1"
+    "@vellumai/assistant": "0.3.3",
+    "@vellumai/cli": "0.3.3",
+    "@vellumai/vellum-gateway": "0.3.3"
   }
 }

package/.dockerignore

@@ -1,27 +0,0 @@
-# Dependency directories
-node_modules/
-
-# Log files
-*.log
-npm-debug.log*
-yarn-debug.log*
-yarn-error.log*
-
-# OS files
-.DS_Store
-
-# Version control
-.git/
-.gitignore
-
-# Docker
-.dockerignore
-
-# Local env files
-.env
-.env.*
-
-# Build artifacts
-dist/
-out/
-build/

package/.env.example

@@ -1,22 +0,0 @@
-# AI Provider API Keys
-ANTHROPIC_API_KEY=sk-ant-...
-OPENAI_API_KEY=sk-...
-GEMINI_API_KEY=...
-# Optional for authenticated/proxied Ollama deployments
-OLLAMA_API_KEY=
-# Optional override (defaults to http://127.0.0.1:11434/v1)
-OLLAMA_BASE_URL=
-
-# --- Remote Access ---
-
-# Override the daemon socket path (default: ~/.vellum/vellum.sock).
-# Use this to target a forwarded or remote socket.
-# VELLUM_DAEMON_SOCKET=/path/to/remote/vellum.sock
-
-# Control daemon autostart behavior.
-# When VELLUM_DAEMON_SOCKET is set, autostart is disabled by default.
-# Set to 1 to force autostart even with a custom socket path.
-# VELLUM_DAEMON_AUTOSTART=1
-
-# Enable the runtime HTTP server (required for web local mode).
-# RUNTIME_HTTP_PORT=7821

package/Dockerfile

@@ -1,99 +0,0 @@
-# Use debian as base image
-FROM us-central1-docker.pkg.dev/code-executor-service/base-images/debian:bookworm@sha256:940221f8c2564efc4e7909caba7014dc8bcba7f05b7881eb2b557b4058c41269 AS builder
-
-WORKDIR /app
-
-# Install build dependencies
-RUN apt-get update && apt-get install -y \
-    curl \
-    unzip \
-    python3 \
-    make \
-    g++ \
-    && rm -rf /var/lib/apt/lists/*
-
-# Install bun
-RUN curl -fsSL https://bun.sh/install | bash
-ENV PATH="/root/.bun/bin:${PATH}"
-
-# Copy package files
-COPY package.json bun.lock ./
-
-# Install dependencies
-RUN bun install --frozen-lockfile
-
-# Copy source
-COPY . .
-
-# Final stage
-FROM debian:bookworm AS runner
-
-WORKDIR /app
-
-# Install runtime dependencies for Playwright and tree-sitter
-RUN apt-get update && apt-get install -y \
-    curl \
-    unzip \
-    ca-certificates \
-    python3 \
-    libnss3 \
-    libfreetype6 \
-    libharfbuzz0b \
-    fonts-freefont-ttf \
-    make \
-    g++ \
-    sudo \
-    && rm -rf /var/lib/apt/lists/*
-
-# Copy bun binary from builder instead of re-installing
-COPY --from=builder /root/.bun/bin/bun /usr/local/bin/bun
-
-# Create non-root user that also has sudo access so it can like install stuff
-RUN groupadd --system --gid 1001 assistant && \
-    useradd --system --uid 1001 --gid assistant --create-home --shell /bin/bash assistant && \
-    echo "assistant ALL=(ALL) NOPASSWD:ALL" >> /etc/sudoers
-
-# Copy from builder
-COPY --from=builder /app /app
-
-# Set up data directory
-RUN mkdir -p /home/assistant/.vellum /data && \
-    chown -R assistant:assistant /home/assistant/.vellum /data && \
-    chmod a+rwx /data
-
-# Update PATH for assistant user
-ENV PATH="/home/assistant/.bun/bin:/data/bin:${PATH}"
-
-# Configure package managers to use /data
-ENV BUN_INSTALL="/data/.bun"
-ENV PATH="${BUN_INSTALL}/bin:${PATH}"
-ENV PYTHONUSERBASE="/data/.python"
-ENV PATH="${PYTHONUSERBASE}/bin:${PATH}"
-
-# Configure apt/dpkg to install future packages to /data
-RUN mkdir -p /data/dpkg/info /data/dpkg/updates /data/dpkg/triggers && \
-    mkdir -p /data/usr/bin /data/usr/lib /data/usr/share && \
-    chown -R assistant:assistant /data/dpkg /data/usr
-
-# Create dpkg configuration for using /data as install prefix
-RUN echo 'Dir::State "/data/dpkg";' > /etc/apt/apt.conf.d/99data-dir && \
-    echo 'Dir::State::status "/data/dpkg/status";' >> /etc/apt/apt.conf.d/99data-dir && \
-    echo 'Dir::Cache "/data/apt/cache";' >> /etc/apt/apt.conf.d/99data-dir && \
-    echo 'DPkg::Options {"--instdir=/data/usr";"--admindir=/data/dpkg";"--force-not-root";"--force-bad-path";};' >> /etc/apt/apt.conf.d/99data-dir && \
-    mkdir -p /data/apt/cache && \
-    touch /data/dpkg/status && \
-    chown -R assistant:assistant /data/apt /data/dpkg
-
-ENV PATH="/data/usr/bin:/data/usr/sbin:${PATH}"
-ENV LD_LIBRARY_PATH="/data/usr/lib:/data/usr/lib/x86_64-linux-gnu:${LD_LIBRARY_PATH}"
-
-USER assistant
-
-EXPOSE 3001
-
-ENV RUNTIME_HTTP_PORT=3001
-ENV VELLUM_DAEMON_SOCKET=/home/assistant/.vellum/vellum.sock
-ENV BASE_DATA_DIR=/data
-
-# Run the daemon + http server
-CMD ["bun", "run", "src/daemon/main.ts"]

package/Dockerfile.sandbox

@@ -1,5 +0,0 @@
-FROM node:20-slim
-
-RUN apt-get update \
- && apt-get install -y --no-install-recommends curl ca-certificates bash jq python3 \
- && rm -rf /var/lib/apt/lists/*

package/README.md

@@ -1,201 +0,0 @@
-# Vellum Assistant Runtime
-
-Bun + TypeScript daemon that owns conversation history, attachment storage, and channel delivery state in a local SQLite database. Exposes a Unix domain socket (macOS) and optional TCP listener (iOS) for native clients, plus an HTTP API consumed by the gateway.
-
-## Architecture
-
-```
-CLI / macOS app / iOS app
-        │
-        ▼
-   Unix socket (~/.vellum/vellum.sock)
-        │
-        ▼
-   DaemonServer (IPC)
-        │
-        ├── Session Manager (in-memory pool, stale eviction)
-        │       ├── Anthropic Claude (primary)
-        │       ├── OpenAI (secondary)
-        │       ├── Google Gemini (secondary)
-        │       └── Ollama (local models)
-        │
-        ├── Memory System (FTS5 + Qdrant + Entity Graph)
-        ├── Skill Tool System (bundled + managed + workspace)
-        ├── Swarm Orchestration (DAG scheduler + worker pool)
-        ├── Script Proxy (credential injection + MITM)
-        └── Tracing (per-session event emitter)
-```
-
-## Setup
-
-```bash
-cd assistant
-bun install
-cp .env.example .env
-# Edit .env with your API keys
-```
-
-## Configuration
-
-| Variable | Required | Default | Description |
-|----------|----------|---------|-------------|
-| `ANTHROPIC_API_KEY` | Yes | — | Anthropic Claude API key |
-| `OPENAI_API_KEY` | No | — | OpenAI API key |
-| `GEMINI_API_KEY` | No | — | Google Gemini API key |
-| `OLLAMA_API_KEY` | No | — | API key for authenticated Ollama deployments |
-| `OLLAMA_BASE_URL` | No | `http://127.0.0.1:11434/v1` | Ollama base URL |
-| `RUNTIME_HTTP_PORT` | No | — | Enable the HTTP server (required for gateway/web) |
-| `VELLUM_DAEMON_SOCKET` | No | `~/.vellum/vellum.sock` | Override the daemon socket path |
-
-## Usage
-
-### Start the daemon
-
-```bash
-bun run src/index.ts daemon start
-```
-
-### Interactive CLI
-
-```bash
-bun run src/index.ts
-```
-
-### Dev mode (auto-restart on file changes)
-
-```bash
-bun run src/index.ts dev
-```
-
-### CLI commands
-
-| Command | Description |
-|---------|-------------|
-| `vellum` | Launch interactive CLI session |
-| `vellum daemon start\|stop\|restart\|status` | Manage the daemon process |
-| `vellum dev` | Run daemon with auto-restart on file changes |
-| `vellum sessions list\|new\|export\|clear` | Manage conversation sessions |
-| `vellum config set\|get\|list` | Manage configuration |
-| `vellum keys set\|list\|delete` | Manage API keys in secure storage |
-| `vellum trust list\|remove\|clear` | Manage trust rules |
-| `vellum doctor` | Run diagnostic checks |
-
-## Project Structure
-
-```
-assistant/
-├── src/
-│   ├── index.ts              # CLI entrypoint (commander)
-│   ├── cli.ts                # Interactive REPL client
-│   ├── daemon/               # Daemon server, IPC protocol, session management
-│   ├── agent/                # Agent loop and LLM interaction
-│   ├── providers/            # LLM provider integrations (Anthropic, OpenAI, Gemini, Ollama)
-│   ├── memory/               # Conversation store, memory indexer, recall (FTS5 + Qdrant)
-│   ├── skills/               # Skill catalog, loading, and tool factory
-│   ├── tools/                # Built-in tool definitions
-│   ├── swarm/                # Swarm orchestration (DAG scheduler, worker pool)
-│   ├── permissions/          # Trust rules and permission system
-│   ├── security/             # Secure key storage, credential broker
-│   ├── config/               # Configuration loader and schema
-│   ├── runtime/              # HTTP runtime server
-│   ├── messaging/            # Message processing pipeline
-│   ├── context/              # Context assembly and compaction
-│   ├── playbooks/            # Channel onboarding playbooks
-│   ├── home-base/            # Home Base app-link bootstrap
-│   ├── hooks/                # Git-style lifecycle hooks
-│   ├── media/                # Media processing and attachments
-│   ├── schedule/             # Reminders and recurrence scheduling (cron + RRULE)
-│   ├── tasks/                # Task management
-│   ├── workspace/            # Workspace file operations
-│   ├── events/               # Domain event bus
-│   ├── export/               # Session export (markdown/JSON)
-│   ├── util/                 # Shared utilities
-│   └── __tests__/            # Test suites
-├── drizzle/                  # Database migrations
-├── drizzle.config.ts         # Drizzle ORM config (SQLite)
-├── docs/                     # Internal documentation
-├── scripts/                  # Test runners and IPC codegen
-├── Dockerfile                # Production container image
-├── Dockerfile.sandbox        # Sandbox container for bash tool
-└── package.json
-```
-
-## Channel Approval Flow
-
-When the assistant needs tool-use confirmation during a channel session (e.g., Telegram), the approval flow intercepts the run and surfaces an interactive prompt to the user. This is gated behind the `CHANNEL_APPROVALS_ENABLED=true` environment variable.
-
-### How it works
-
-1. **Detection** — When a channel inbound message triggers an agent loop, the runtime polls the run status. If the run transitions to `needs_confirmation`, the runtime sends an approval prompt to the gateway with inline keyboard metadata.
-2. **Interception** — Subsequent inbound messages on the same conversation are intercepted before normal processing. The handler checks for a pending approval and attempts to extract a decision from either callback data (button clicks) or plain text.
-3. **Decision** — The user's decision is mapped to the permission system (`allow` or `deny`) and applied to the pending run. For `approve_always`, a trust rule is persisted so future invocations of the same tool are auto-approved.
-4. **Reminder** — If the user sends a non-decision message while an approval is pending, a reminder prompt is re-sent with the approval buttons.
-
-### Key modules
-
-| File | Purpose |
-|------|---------|
-| `src/runtime/channel-approvals.ts` | Orchestration: `getChannelApprovalPrompt`, `buildApprovalUIMetadata`, `handleChannelDecision`, `buildReminderPrompt` |
-| `src/runtime/channel-approval-parser.ts` | Plain-text decision parser — matches phrases like `yes`, `approve`, `always`, `no`, `reject`, `deny`, `cancel` (case-insensitive) |
-| `src/runtime/channel-approval-types.ts` | Shared types: `ApprovalAction`, `ChannelApprovalPrompt`, `ApprovalUIMetadata`, `ApprovalDecisionResult` |
-| `src/runtime/routes/channel-routes.ts` | Integration point: `handleApprovalInterception` and `processChannelMessageWithApprovals` in the channel inbound handler |
-| `src/runtime/gateway-client.ts` | `deliverApprovalPrompt()` — sends the approval payload (text + UI metadata) to the gateway for rendering |
-| `src/memory/runs-store.ts` | `getPendingConfirmationsByConversation` — queries runs in `needs_confirmation` state |
-
-### Enabling
-
-Set the environment variable before starting the daemon:
-
-```bash
-CHANNEL_APPROVALS_ENABLED=true
-```
-
-When disabled (the default), channel messages follow the standard fire-and-forget processing path without approval interception.
-
-## Database
-
-SQLite via Drizzle ORM, stored at `~/.vellum/workspace/data/db/assistant.db`. Key tables include conversations, messages, tool invocations, attachments, memory segments (with FTS5), memory items, entities, reminders, and recurrence schedules (cron + RRULE).
-
-> **Compatibility note:** The recurrence schedule system supports both cron expressions and iCalendar RRULE syntax. The legacy field names `cron_expression` and `cronExpression` remain supported in API inputs. New code should use the `expression` field with an explicit `syntax` discriminator. See [`ARCHITECTURE.md`](../ARCHITECTURE.md) for details.
-
-Run migrations:
-
-```bash
-bun run db:generate   # Generate migration SQL
-bun run db:push       # Apply migrations
-```
-
-## Docker
-
-```bash
-# Build production image
-docker build -t vellum-assistant:local assistant
-
-# Run
-docker run --rm -p 3001:3001 \
-  -e ANTHROPIC_API_KEY=... \
-  vellum-assistant:local
-```
-
-The image runs as non-root user `assistant` (uid 1001) and exposes port `3001`.
-
-## Troubleshooting
-
-### Invalid RRULE set expressions
-
-If `schedule_create` rejects an RRULE expression, check the following:
-
-- **Missing DTSTART** — Every RRULE expression must include a `DTSTART` line (e.g., `DTSTART:20250101T090000Z`).
-- **No inclusion rule** — At least one `RRULE:` or `RDATE` line is required. An expression with only `EXDATE` or `EXRULE` lines and no inclusion has no occurrences to schedule.
-- **Unsupported lines** — Only `DTSTART`, `RRULE:`, `RDATE`, `EXDATE`, and `EXRULE` prefixes are recognized. Any other line (e.g., `VTIMEZONE`, `VEVENT`) will be rejected.
-- **Newline encoding** — When passing multi-line RRULE expressions through JSON, use literal `\n` between lines. The engine normalizes escaped newlines automatically.
-
-## Development
-
-```bash
-cd assistant
-bun install
-bun run typecheck   # TypeScript type check (tsc --noEmit)
-bun run lint        # ESLint
-bun run test        # Run test suite
-```