vellum-ai/vellum-assistant v0.1.6

on GitHub

0329989 Automate GitHub Releases from assistant/package.json version changes (#1660)
cc2aca9 feat: add hardcoded starter skill to Available Skills tab (#1682)
2baa574 Add .qdrant-initialized to .gitignore (#1687)
c6abb27 Escape XML-like tags in recalled memory text to prevent delimiter injection (#1685)
5b8adec Replace bracket-style formatting with XML tags in prompt messages (#1684)
cfc7ae6 Tighten fence detection in stripCommentLines to match CommonMark spec (#1683)
ab8229f Add typing indicator to Telegram webhook handler (#1304)
ce7f646 Add CI checks and re-review comments to safe-check-review command (#1681)
d31d739 Include absolute timestamps alongside relative times in memory lines (#1679)
4d81aab Add non-authoritative framing to memory recall injection (#1678)
4431fde Fix YAML syntax error in gateway CD workflow (#1677)
67266fd Update macOS writers for new slim IDENTITY and structured SOUL format (#1676)
2a5cfbb Remove SQLite semantic fallback from memory retriever (#1675)
f7f2af1 Remove Chat label and merge panel buttons into ThreadTabBar for single-row layout (#1670)
bd768ca Improve buildMemoryQuery summary truncation with head+tail approach (#1674)
9fb5bd6 Handle file content blocks in memory ingestion (#1673)
cfe51e5 Remove outdated memory-v2-architecture.md design doc (#1672)
3f9f8eb Update IDENTITY.md and SOUL.md templates with slim identity and evolution guardrails (#1671)
fbe725d Fix stripCommentLines to preserve _-prefixed lines inside code blocks and handle CRLF (#1666)
5c0cb77 Add comment syntax explanation to prompt template files (#1665)
dbf272f Strip underscore-prefixed comment lines from prompt .md files (#1663)
fe72aef Add comments guideline to AGENTS.md: focus on why, not what (#1662)
7dcee47 Redesign ControlPanel with horizontal tabs and add VSidePanel pinned content support (#1661)
daa15dc Fix lint errors: replace require() imports and remove unused imports (#1659)
30d01bb Publish macOS releases to vellum-ai/velly as well (#1658)
d4ec4d1 Fix spacer condition mismatch with close button overlay in VTab and ThreadTab (#1657)
84d1013 Consult trust store before prompting for Claude Code sub-tool approvals (#1656)
4f64f14 Propagate SDK failure results as isError in claude_code tool (#1655)
5daad46 Fix tab padding areas not clickable for selection in VTab and ThreadTab (#1654)
6d5a58d Add /safe-do to README.md and AGENTS.md slash command tables (#1653)
96c6905 Add ROLLBACK handling to migrateJobDeferrals transaction (#1652)
db5e25f Fix skills IPC: add id field to list response and prevent dot-corruption in config paths (#1651)
d02daed Fix ClaWHub CLI integration review issues (#1626) (#1650)
5f98654 Persist trust rules for Claude Code sub-tool confirmations (#1649)
45f2776 Fix tab close/select gesture conflict by using sibling Buttons (#1648)
7170ed7 Fix VButton: use Violet instead of Indigo, suppress hover on disabled (#1647)
de64710 Fix AgentPanel header font to use VFont.panelTitle (#1645)
6addf2d Register claude_code in tool registry (#1634) (#1644)
edd07af Add safe-do command for review-before-merge workflow (#1642)
0ffd75e Create claude_code tool implementation (#1643)
d0f1132 Install @anthropic-ai/claude-agent-sdk dependency (#1641)
327d83b Add requestConfirmation to ToolContext and wire in Session (#1631) (#1640)
b3478d9 Fix skillIcon to render emoji as Text instead of parsing as SVG (#1639)
c4f3d98 Fix skill state resolution: env merge, extraDirs source, degraded state (#1638)
eaf83e3 Fix workspace skills loading: use correct root path and forward workspaceSkillsDir (#1637)
6bfdb7f Add skill id to catalog XML and update skill_load guidance to use id (#1636)
efdb90a Make deferral migration atomic and race-safe (#1635)
e53e825 Add Skills Manager settings view (#1613) (#1629)
5134e15 Add Skills submenu to menu bar status item menu (#1614) (#1628)
e3782cd Add Swift IPC types and DaemonClient methods for skills management (#1612) (#1627)
7a25267 ClaWHub CLI integration for skill install/update/search (#1610) (#1626)
78c8170 Add skills IPC protocol extensions and handlers (#1609) (#1625)
fc4c109 Make deferral migration one-shot via memory_checkpoints (#1624)
649f60e Progressive disclosure system prompt, {baseDir} resolution, and skill env injection (#1623)
acf2466 Add skills config schema and state resolution (#1622)
3499c21 Fix deferral migration to handle jobs with mixed fail/defer history (#1621)
321a1eb Extend skill data model with metadata.vellum namespace and source tracking (#1620)
b7d9eb1 Narrow deferral migration to exclude legitimately-retried jobs (#1619)
858566d Normalize backslashes in hook path traversal check for defense in depth (#1618)
ac4fbd7 Clean up orphaned memory items when deleting blocked message (#1617)
4485097 Add one-time migration to reconcile old deferrals into new column (#1616)
6515e15 Track deferrals separately from retry attempts in memory jobs (#1615)
660e046 Delete blocked user message from DB without cascading to run record (#1605)
e1bb799 Prevent embed job starvation during backend outage (#1604)
1a23d1a Fix dd redirect ordering in debug-prompt-logger (#1603)
b9f33f7 Fail fast in resolveBunPath when bun runtime is not found (#1602)
7c86e4c Defer embedding jobs when backend unavailable instead of failing (#1601)
d684716 Fix trust rule test and CLI error handling for default rules (#1600)
54868b7 Avoid cascading run deletion when pre-message hook blocks (#1599)
d17ed42 Avoid SIGPIPE in debug prompt logger truncation (#1598)
e0fb26f Wait for timed-out hook child to exit before resolving (#1597)
4e62877 Fix path traversal check to allow filenames starting with .. (#1596)
ed03ef5 Remove secret references from gateway CD summary step (#1584) (#1595)
75ee4bc Fix .ts hook execution in compiled daemon binary (#1594)
fb0b730 Make hook manifest description and version optional for discovery (#1593)
dec7383 Add workflow_dispatch to gateway CD and skip latest tag on non-main branches (#1592)
4ed19b0 Throw on unavailable embedding backend to prevent silent job completion (#1591)
85eb560 Fix updateRule null handling to prevent trust rule corruption (#1589)
2150d30 Guard default deny trust rules against modification and deletion (#1590)
328eeb4 Roll back persisted user message when pre-message hook blocks (#1588)
bb0a02d Fix debug prompt logger to use head -c for total output truncation (#1587)
bd6bcea Fix hook timeout race condition in close handler (#1586)
cee0be7 Fix cross-platform path containment check in hook discovery (#1585)
3b380ee Fix empty state icon size inconsistency across side panels (#1557)
15dd13c Use secrets instead of vars for GCP config in gateway CD workflow (#1584)
ff623a1 Add hover/pressed/disabled states with style-specific shadows to all button components (#1583)
42c7635 Fix QdrantManager defaulting to external mode when binary not yet installed (#1582)
eeefed2 Require Qdrant on daemon startup with auto-install (#1581)
30f1c36 Add trust rules editor UI to macOS Settings (#1580)
558517d Skip embedding upsert when Qdrant client is not initialized (#1579)
09334cf Add macOS IPC extensions for trust rule management (#1577)
60de84c Use process.execPath for .ts hooks instead of external bun lookup (#1576)
ddd9a5d Add trust rule list/remove/update IPC messages and handlers (#1575)
178cc48 Fix command preview: use correct key for file_edit and consistent default fallback (#1574)
2501844 Fix file_edit command preview key and inconsistent default fallback (#1573)
8bf0d5b Resolve bun binary path for .ts hook execution (#1572)
8cc5236 Fix FSWatcher and debounce timer leaks in HookManager (#1571)
08992d2 Fix path traversal and strengthen manifest validation in hooks install (#1570)
cd1dd73 Fix writeIdentityFile to only replace the first Name metadata line (#1569)
ae74cf0 Replace raw system font with VFont.monoSmall design token in ToolConfirmationManager (#1568)
85a0dcb Clean up partial template copy and guard debug hook against missing jq (#1566)
c33cc85 Honor blocking outcome for pre-message hooks (#1565)
85652b0 Fix force-exit timer ordering and missing post-tool-execute hooks (#1564)
d6a6aa9 Fix hook runner: stdin error handling, timeout race, and event override (#1562)
c7a986d Fix hooks config null check, manifest validation, and path traversal (#1561)
64b10e1 Remove gateway/deploy directory (#1558)
46c8532 Limit proxy timeout to connection phase only (#1556)
0d8cdf4 Remove unused GatewayInboundEventV1 import (#1555)
272abc8 Show full command in permission prompt on desktop app (#1554)
6f53db1 Count non-2xx responses as failures in load-test harness (#1553)
f2b4ebd Load Buildx image into Docker daemon to avoid double build in CI (#1552)
724e820 Remove noisy attachment log from Telegram webhook (#1545)
c268913 Honor runtime timeout in runtime-proxy fetches (#1551)
8462b18 Use production routing path in telegram-only gateway test (#1550)
0b49ca4 Use byte length for webhook payload size fallback check (#1549)
7fc81e5 Cap GATEWAY_SHUTDOWN_DRAIN_MS to setTimeout max range (#1548)
35d72d8 Support TypeScript hooks via bun run (#1547)
2940c82 Add hooks watch mode for hot reload on file changes (#1546)
06e9f98 Add vellum hooks CLI subcommands (#1544)
99adb8e Create GitHub Action to push gateway image to GCP registry on merge to main (#1543)
558f216 Add per-hook configurable settings (#1542)
f85d45f Add starter Kubernetes manifests for gateway deployment (#1540)
dc7162d Add blocking hooks for pre-* events (#1541)
e00355a Add hook template system and debug-prompt-logger template (#1539)
090373c Build gateway Docker image in PR CI (no push) (#1538)
b45a17b Wire all 13 hook events into daemon, session, agent loop, and tool executor (#1537)
436f5a3 Add gateway load-test harness and performance runbook (#1536)
b03a49e Show concrete pattern labels in trust-rule picker instead of generic descriptions (#1535)
006d19c Preserve user-edited IDENTITY.md when updating name (#1534)
04aedd1 Fix button and tab hit areas to cover full padded surface (#1533)
305dff5 Write IDENTITY.md with assistant name during onboarding (#1531)
02610d3 Add request size limits and attachment processing guardrails (#1532)
69d82d4 Add hook execution engine and manager (#1530)
3b355d6 Add hooks infrastructure: types, discovery, and config (#1529)
30c087a Add configurable upstream timeouts and retry controls (#1528)
a38ac5f Write IDENTITY.md with user-chosen name on hatch (#1527)
c7d01ea Add /healthz, /readyz, and graceful shutdown behavior (#1526)
11246be Replace dock icon popover with Docker-style status menu (#1512)
da06c56 Rename Primitives/ to Core/, move ThreadTab to Features, add panelTitle/sectionTitle tokens (#1525)
c235383 Lock Telegram-only default behavior with explicit tests/docs (#1524)
c5acb82 Add production Dockerfile and dockerignore for gateway (#1523)
6d42a23 Add gateway PR checks (typecheck + tests) (#1522)
b5242ff Use Slate._900 token for chatBackground instead of raw hex (#1521)
e6dc3af Add release management documentation to README (#1519)
74ce86c Switch DMG background to light purple and reposition Applications icon (#1518)
2952044 Add human-readable descriptions to allowlist pattern options (#1517)
6ccd216 Add background wallpaper to chat view (#1516)
438dd83 Add workflow_dispatch to publish-velly action and bump version to 0.1.5 (#1513)
c2b394f Add DM Mono font and expand Silkscreen to all headings (#1511)
ed4de9d Add GitHub Action to publish assistant directory to npm on release (#1472)
687cd40 Fix onAddTrustRule returning true when self is nil (#1509)
079be92 Toggle skill button label between View and Hide based on expanded state (#1507)
920b972 Add DMG test script and fix blurry icon labels (#1505)
15d4155 Add Configuration section to system prompt (#1504)
8e62cd5 Fix missing Applications folder icon in DMG installer (#1503)
701937c Fix floating panel early dismissal and optional chaining in confirmation flow (#1502)
b6d92af Fix path resolution security bug and unknown version overwrite (#1501)
67a7547 Make migration-resilience test deterministic with spyOn (#1500)
7c9c8c5 Fix tool confirmation panel not retrying on IPC failure (#1499)
2809091 Fix default deny rule bypass via relative paths, error fallthrough, and clearAllRules (#1498)
8506aaa Add run ownership check to trust-rule HTTP endpoint (#1497)
4765d64 Guard trust-file migration writes from crashing reads (#1496)
7f20f96 Apply 50-char length check after extracting first line in generateLlmSuggestion (#1495)
436587b Fix awk section counting in Slack release notification (#1494)
ec52b4b Redesign Slack release notification with threaded changelog (#1493)
3fa4c2d Add fallback values for manual dispatch in Slack release notification (#1492)