@vellumai/assistant 0.11.2 → 0.11.3-staging.2

package/node_modules/@vellumai/service-contracts/src/ingress.ts

@@ -20,6 +20,16 @@ export function normalizePublicBaseUrl(value: unknown): string | undefined {
   return normalized.length > 0 ? normalized : undefined;
 }
 
+/**
+ * Application close code the gateway's velay bridge sends to proxied
+ * WebSockets when the tunnel itself is lost (velay disconnect, gateway
+ * shutdown). A dedicated code because the natural 1001 (going away) cannot
+ * be sent through the JS `close()` API (the bridge would remap it to a
+ * misleading 4001), and Bun's WebSocket client drops close reasons, so the
+ * code is the only signal that survives the relay to the daemon.
+ */
+export const GATEWAY_TUNNEL_LOST_WS_CLOSE_CODE = 4801;
+
 export function normalizeHttpPublicBaseUrl(value: unknown): string | undefined {
   if (typeof value !== "string") return undefined;
   const trimmed = value.trim();

package/node_modules/@vellumai/service-contracts/src/remote-web-pairing.ts

@@ -21,6 +21,12 @@
  * `Date#toISOString()`.
  */
 
+/**
+ * Pairing-challenge TTL in milliseconds (10 minutes): the gateway's challenge
+ * store enforces it and the `vellum pair` CLI renders it in user-facing copy.
+ */
+export const REMOTE_WEB_PAIRING_CODE_TTL_MS = 10 * 60 * 1000;
+
 /** `POST /v1/remote-web/pairing-challenge` request body. */
 export interface RemoteWebPairingChallengeRequest {
   /** Public https base URL the scanning device can reach the assistant at. */

package/node_modules/@vellumai/slack-text/src/index.ts

@@ -301,13 +301,27 @@ function sanitizeLabel(label: string | undefined, fallback: string): string {
   return sanitizedFallback || "unknown";
 }
 
-function sanitizeOptionalLabel(label: string | undefined): string | undefined {
-  return label
+/**
+ * Normalize a mention label to the renderer's semantics: strip angle
+ * brackets, collapse whitespace, strip leading `@`/`#` prefixes. Exported as
+ * the single source of truth so persistence-side validation applies exactly
+ * the normalization rendering applies; returns `undefined` when nothing
+ * usable remains.
+ */
+export function sanitizeSlackLabel(
+  label: string | undefined,
+): string | undefined {
+  const sanitized = label
     ?.replace(/[<>]/g, "")
     .replace(/\s+/g, " ")
     .trim()
     .replace(/^[@#]+/, "")
     .trim();
+  return sanitized || undefined;
+}
+
+function sanitizeOptionalLabel(label: string | undefined): string | undefined {
+  return sanitizeSlackLabel(label);
 }
 
 function isSlackUserId(value: string): boolean {