@vellumai/assistant 0.4.50 → 0.4.51

package/src/calls/twilio-provider.ts

@@ -1,7 +1,7 @@
 import { createHmac, timingSafeEqual } from "node:crypto";
 
 import { credentialKey } from "../security/credential-key.js";
-import { getSecureKey } from "../security/secure-keys.js";
+import { getSecureKeyAsync } from "../security/secure-keys.js";
 import { ProviderError } from "../util/errors.js";
 import { getLogger } from "../util/logger.js";
 import {
@@ -24,8 +24,11 @@ export class TwilioConversationRelayProvider implements VoiceProvider {
 
   // ── Credential helpers ──────────────────────────────────────────────
 
-  private getCredentials(): { accountSid: string; authToken: string } {
-    return getTwilioCredentials();
+  private async getCredentials(): Promise<{
+    accountSid: string;
+    authToken: string;
+  }> {
+    return await getTwilioCredentials();
   }
 
   private authHeader(accountSid: string, authToken: string): string {
@@ -39,7 +42,7 @@ export class TwilioConversationRelayProvider implements VoiceProvider {
   // ── VoiceProvider interface ─────────────────────────────────────────
 
   async initiateCall(opts: InitiateCallOptions): Promise<{ callSid: string }> {
-    const { accountSid, authToken } = this.getCredentials();
+    const { accountSid, authToken } = await this.getCredentials();
 
     const body = new URLSearchParams({
       From: opts.from,
@@ -104,7 +107,7 @@ export class TwilioConversationRelayProvider implements VoiceProvider {
   }
 
   async endCall(callSid: string): Promise<void> {
-    const { accountSid, authToken } = this.getCredentials();
+    const { accountSid, authToken } = await this.getCredentials();
 
     log.info({ callSid }, "Ending Twilio call");
 
@@ -139,7 +142,7 @@ export class TwilioConversationRelayProvider implements VoiceProvider {
   }
 
   async getCallStatus(callSid: string): Promise<string> {
-    const { accountSid, authToken } = this.getCredentials();
+    const { accountSid, authToken } = await this.getCredentials();
 
     const res = await fetch(
       `${this.baseUrl(accountSid)}/Calls/${callSid}.json`,
@@ -179,7 +182,7 @@ export class TwilioConversationRelayProvider implements VoiceProvider {
   async checkCallerIdEligibility(
     phoneNumber: string,
   ): Promise<{ eligible: boolean; reason?: string }> {
-    const { accountSid, authToken } = this.getCredentials();
+    const { accountSid, authToken } = await this.getCredentials();
     const encodedNumber = encodeURIComponent(phoneNumber);
 
     let incomingOk = false;
@@ -280,8 +283,10 @@ export class TwilioConversationRelayProvider implements VoiceProvider {
    * Exposed as a static method so callers (e.g. the HTTP server webhook
    * middleware) can check availability independently.
    */
-  static getAuthToken(): string | null {
-    return getSecureKey(credentialKey("twilio", "auth_token")) || null;
+  static async getAuthToken(): Promise<string | null> {
+    return (
+      (await getSecureKeyAsync(credentialKey("twilio", "auth_token"))) || null
+    );
   }
 
   /**

package/src/calls/twilio-rest.ts

@@ -8,7 +8,7 @@
 
 import { loadConfig } from "../config/loader.js";
 import { credentialKey } from "../security/credential-key.js";
-import { getSecureKey } from "../security/secure-keys.js";
+import { getSecureKeyAsync } from "../security/secure-keys.js";
 import { ConfigError, ProviderError } from "../util/errors.js";
 
 export interface TwilioCredentials {
@@ -28,14 +28,17 @@ function resolveAccountSid(): string | undefined {
 }
 
 /** Resolve the Twilio Auth Token from the credential store. */
-function resolveAuthToken(): string | undefined {
-  return getSecureKey(credentialKey("twilio", "auth_token")) || undefined;
+async function resolveAuthToken(): Promise<string | undefined> {
+  return (
+    (await getSecureKeyAsync(credentialKey("twilio", "auth_token"))) ||
+    undefined
+  );
 }
 
 /** Resolve Twilio credentials from config (SID) and credential store (token). Throws if not configured. */
-export function getTwilioCredentials(): TwilioCredentials {
+export async function getTwilioCredentials(): Promise<TwilioCredentials> {
   const accountSid = resolveAccountSid();
-  const authToken = resolveAuthToken();
+  const authToken = await resolveAuthToken();
   if (!accountSid || !authToken) {
     throw new ConfigError(
       "Twilio credentials not configured. Set twilio.accountSid via config and store auth token via credential store.",
@@ -45,9 +48,9 @@ export function getTwilioCredentials(): TwilioCredentials {
 }
 
 /** Check whether Twilio credentials are present (non-throwing). */
-export function hasTwilioCredentials(): boolean {
+export async function hasTwilioCredentials(): Promise<boolean> {
   try {
-    return !!resolveAccountSid() && !!resolveAuthToken();
+    return !!resolveAccountSid() && !!(await resolveAuthToken());
   } catch {
     return false;
   }

package/src/cli/commands/config.ts

@@ -39,10 +39,13 @@ export function registerConfigCommand(program: Command): void {
     "after",
     `
 Configuration is stored in config.json in the assistant workspace directory.
-Keys support dotted paths for nested values (e.g. calls.enabled, apiKeys.anthropic).
+Keys support dotted paths for nested values (e.g. calls.enabled, twilio.accountSid).
 Values are auto-parsed as JSON (booleans, numbers, objects) with fallback to
 plain string if parsing fails.
 
+API keys are managed separately via secure storage. Use "assistant keys list"
+and "assistant keys set <provider> <key>" to view and manage API keys.
+
 Examples:
   $ assistant config list
   $ assistant config get provider
@@ -53,14 +56,14 @@ Examples:
   config
     .command("set <key> <value>")
     .description(
-      "Set a config value (supports dotted paths like apiKeys.anthropic)",
+      "Set a config value (supports dotted paths like calls.enabled)",
     )
     .addHelpText(
       "after",
       `
 Arguments:
   key     Dotted path to the config key (e.g. provider, calls.enabled,
-          apiKeys.anthropic). Intermediate objects are created automatically.
+          twilio.accountSid). Intermediate objects are created automatically.
   value   The value to store. Parsed as JSON first (so "true" becomes boolean
           true, "42" becomes number 42). Falls back to plain string if JSON
           parsing fails.
@@ -68,10 +71,11 @@ Arguments:
 After writing the value to config.json, the lockfile is automatically synced
 to reflect the updated configuration.
 
+To manage API keys, use "assistant keys set <provider> <key>" instead.
+
 Examples:
   $ assistant config set provider anthropic
-  $ assistant config set calls.enabled true
-  $ assistant config set apiKeys.anthropic sk-ant-abc123`,
+  $ assistant config set calls.enabled true`,
     )
     .action((key: string, value: string) => {
       const raw = loadRawConfig();
@@ -100,10 +104,11 @@ Arguments:
 Prints the value at the given key path. If the key is not set, prints
 "(not set)". Object values are pretty-printed as indented JSON.
 
+To view API keys, use "assistant keys list" instead.
+
 Examples:
   $ assistant config get provider
-  $ assistant config get calls.enabled
-  $ assistant config get apiKeys`,
+  $ assistant config get calls.enabled`,
     )
     .action((key: string) => {
       const raw = loadRawConfig();
@@ -133,8 +138,8 @@ Dumps the full raw configuration from config.json as pretty-printed JSON.
 If no configuration has been set, prints "No configuration set".
 
 The --search flag filters results by case-insensitive substring match against
-flattened dotted key paths. For example, --search api matches apiKeys.anthropic,
-apiKeys.openai, and any other key containing "api".
+flattened dotted key paths. For example, --search calls matches calls.enabled,
+calls.recordingEnabled, and any other key containing "calls".
 
 Examples:
   $ assistant config list

package/src/cli/commands/contacts.ts

@@ -497,6 +497,7 @@ Examples:
       "--guardian-name <name>",
       "Guardian name (required for voice invites)",
     )
+    .requiredOption("--contact-id <id>", "Contact ID to bind the invite to")
     .addHelpText(
       "after",
       `
@@ -529,6 +530,7 @@ Examples:
           expectedExternalUserId?: string;
           friendName?: string;
           guardianName?: string;
+          contactId: string;
         },
         cmd: Command,
       ) => {
@@ -563,6 +565,7 @@ Examples:
             expectedExternalUserId: opts.expectedExternalUserId,
             friendName: opts.friendName,
             guardianName: opts.guardianName,
+            contactId: opts.contactId,
           });
           if (result.ok) {
             writeOutput(cmd, { ok: true, invite: result.data });