@vellumai/assistant 0.8.1 → 0.8.2

package/src/runtime/routes/inbound-stages/edit-intercept.ts

@@ -20,7 +20,10 @@ import {
   updateMessageContent,
   updateMessageContentAndMetadata,
 } from "../../../memory/conversation-crud.js";
-import { findMessageBySourceId, recordInbound } from "../../../memory/delivery-crud.js";
+import {
+  findMessageBySourceId,
+  recordInbound,
+} from "../../../memory/delivery-crud.js";
 import {
   mergeSlackMetadata,
   readSlackMetadata,
@@ -39,6 +42,7 @@ export interface EditInterceptParams {
   conversationExternalId: string;
   externalMessageId: string;
   sourceMessageId: string;
+  sourceThreadId?: string;
   canonicalAssistantId: string;
   assistantId: string;
   content: string | undefined;
@@ -61,6 +65,7 @@ export async function handleEditIntercept(
     conversationExternalId,
     externalMessageId,
     sourceMessageId,
+    sourceThreadId,
     canonicalAssistantId,
     assistantId,
     content,
@@ -71,7 +76,7 @@ export async function handleEditIntercept(
     sourceChannel,
     conversationExternalId,
     externalMessageId,
-    { sourceMessageId, assistantId: canonicalAssistantId },
+    { sourceMessageId, sourceThreadId, assistantId: canonicalAssistantId },
   );
 
   if (editResult.duplicate) {
@@ -145,6 +150,7 @@ export async function handleEditIntercept(
         messageId: original.messageId,
         conversationExternalId,
         sourceMessageId,
+        sourceThreadId,
         newContent,
       });
     } else {
@@ -203,10 +209,16 @@ function applySlackEditMetadata(params: {
   messageId: string;
   conversationExternalId: string;
   sourceMessageId: string;
+  sourceThreadId?: string;
   newContent: string;
 }): void {
-  const { messageId, conversationExternalId, sourceMessageId, newContent } =
-    params;
+  const {
+    messageId,
+    conversationExternalId,
+    sourceMessageId,
+    sourceThreadId,
+    newContent,
+  } = params;
 
   const row = getMessageById(messageId);
   const outerMetadata: Record<string, unknown> =
@@ -230,6 +242,7 @@ function applySlackEditMetadata(params: {
           source: "slack" as const,
           channelId: conversationExternalId,
           channelTs: sourceMessageId,
+          ...(sourceThreadId ? { threadTs: sourceThreadId } : {}),
           eventKind: "message" as const,
         }),
     editedAt,

package/src/runtime/routes/index.ts

@@ -25,6 +25,7 @@ import { ROUTES as BROWSER_ROUTES } from "./browser-routes.js";
 import { ROUTES as BTW_ROUTES } from "./btw-routes.js";
 import { ROUTES as CACHE_ROUTES } from "./cache-routes.js";
 import { ROUTES as CALL_ROUTES } from "./call-routes.js";
+import { ROUTES as CHANNEL_AVAILABILITY_ROUTES } from "./channel-availability-routes.js";
 import { ROUTES as CHANNEL_READINESS_ROUTES } from "./channel-readiness-routes.js";
 import { CHANNEL_ROUTES } from "./channel-route-definitions.js";
 import { ROUTES as CHANNEL_VERIFICATION_ROUTES } from "./channel-verification-routes.js";
@@ -90,12 +91,14 @@ import { ROUTES as NOTIFICATION_ROUTES } from "./notification-routes.js";
 import { ROUTES as OAUTH_APPS_ROUTES } from "./oauth-apps.js";
 import { ROUTES as OAUTH_COMMANDS_ROUTES } from "./oauth-commands-routes.js";
 import { ROUTES as OAUTH_CONNECT_ROUTES } from "./oauth-connect-routes.js";
+import { ROUTES as OAUTH_LIFECYCLE_ROUTES } from "./oauth-lifecycle-routes.js";
 import { ROUTES as OAUTH_PROVIDERS_ROUTES } from "./oauth-providers.js";
 import { ROUTES as PLATFORM_ROUTES } from "./platform-routes.js";
 import { ROUTES as PLAYGROUND_ROUTES } from "./playground/index.js";
 import { ROUTES as PROFILER_ROUTES } from "./profiler-routes.js";
 import { ROUTES as PS_ROUTES } from "./ps-routes.js";
 import { ROUTES as PUBLISH_ROUTES } from "./publish-routes.js";
+import { ROUTES as QUESTION_ROUTES } from "./question-routes.js";
 import { ROUTES as RECORDING_ROUTES } from "./recording-routes.js";
 import { ROUTES as RENAME_CONVERSATION_ROUTES } from "./rename-conversation-routes.js";
 import { ROUTES as SCHEDULE_ROUTES } from "./schedule-routes.js";
@@ -144,6 +147,7 @@ export const ROUTES: RouteDefinition[] = [
   ...CALL_ROUTES,
   ...CHANNEL_ROUTES,
   ...CHANNEL_VERIFICATION_ROUTES,
+  ...CHANNEL_AVAILABILITY_ROUTES,
   ...CHANNEL_READINESS_ROUTES,
   ...BROWSER_ROUTES,
   ...BTW_ROUTES,
@@ -204,6 +208,7 @@ export const ROUTES: RouteDefinition[] = [
   ...MIGRATION_ROUTES,
   ...NOTIFICATION_ROUTES,
   ...OAUTH_APPS_ROUTES,
+  ...OAUTH_LIFECYCLE_ROUTES,
   ...OAUTH_COMMANDS_ROUTES,
   ...OAUTH_PROVIDERS_ROUTES,
   ...PLATFORM_ROUTES,
@@ -211,6 +216,7 @@ export const ROUTES: RouteDefinition[] = [
   ...PROFILER_ROUTES,
   ...PS_ROUTES,
   ...PUBLISH_ROUTES,
+  ...QUESTION_ROUTES,
   ...RECORDING_ROUTES,
   ...RENAME_CONVERSATION_ROUTES,
   ...SCHEDULE_ROUTES,

package/src/runtime/routes/inference-profile-session-handler.ts

@@ -21,13 +21,9 @@ import {
   setConversationInferenceProfileSession,
 } from "../../memory/conversation-crud.js";
 import { resolveConversationId } from "../../memory/conversation-key-store.js";
-import { getLogger } from "../../util/logger.js";
-import { buildAssistantEvent } from "../assistant-event.js";
-import { assistantEventHub } from "../assistant-event-hub.js";
+import { publishConversationInferenceProfileChanged } from "../sync/resource-sync-events.js";
 import { BadRequestError, NotFoundError } from "./errors.js";
 
-const log = getLogger("inference-profile-session-handler");
-
 // ---------------------------------------------------------------------------
 // Types
 // ---------------------------------------------------------------------------
@@ -120,25 +116,12 @@ export async function setInferenceProfileSession({
       };
     }
     setConversationInferenceProfileSession(resolvedId, null, null, null);
-    await assistantEventHub
-      .publish(
-        buildAssistantEvent(
-          {
-            type: "conversation_inference_profile_updated",
-            conversationId: resolvedId,
-            profile: null,
-            sessionId: null,
-            expiresAt: null,
-          },
-          resolvedId,
-        ),
-      )
-      .catch((err) => {
-        log.warn(
-          { err, conversationId: resolvedId },
-          "Failed to publish conversation_inference_profile_updated event",
-        );
-      });
+    publishConversationInferenceProfileChanged({
+      conversationId: resolvedId,
+      profile: null,
+      sessionId: null,
+      expiresAt: null,
+    });
     return {
       conversationId: resolvedId,
       profile: null,
@@ -201,25 +184,12 @@ export async function setInferenceProfileSession({
     newExpiresAt ?? null,
   );
 
-  await assistantEventHub
-    .publish(
-      buildAssistantEvent(
-        {
-          type: "conversation_inference_profile_updated",
-          conversationId: resolvedId,
-          profile,
-          sessionId: newSessionId ?? null,
-          expiresAt: newExpiresAt ?? null,
-        },
-        resolvedId,
-      ),
-    )
-    .catch((err) => {
-      log.warn(
-        { err, conversationId: resolvedId },
-        "Failed to publish conversation_inference_profile_updated event",
-      );
-    });
+  publishConversationInferenceProfileChanged({
+    conversationId: resolvedId,
+    profile,
+    sessionId: newSessionId ?? null,
+    expiresAt: newExpiresAt ?? null,
+  });
 
   return {
     conversationId: resolvedId,
@@ -307,6 +277,9 @@ export function listInferenceProfileSessionsWithRemaining(
 }> {
   return listActiveInferenceProfileSessions(conversationId).map((row) => ({
     ...row,
-    remainingSeconds: Math.max(0, Math.floor((row.expiresAt - Date.now()) / 1000)),
+    remainingSeconds: Math.max(
+      0,
+      Math.floor((row.expiresAt - Date.now()) / 1000),
+    ),
   }));
 }

package/src/runtime/routes/inference-profile-session-reaper.ts

@@ -13,8 +13,7 @@
 
 import { clearExpiredInferenceProfiles } from "../../memory/conversation-crud.js";
 import { getLogger } from "../../util/logger.js";
-import { buildAssistantEvent } from "../assistant-event.js";
-import { assistantEventHub } from "../assistant-event-hub.js";
+import { publishConversationInferenceProfileChanged } from "../sync/resource-sync-events.js";
 
 const log = getLogger("inference-profile-session-reaper");
 
@@ -38,25 +37,12 @@ export function tickInferenceProfileReaper(): void {
   const now = Date.now();
   const cleared = clearExpiredInferenceProfiles(now);
   for (const { conversationId } of cleared) {
-    assistantEventHub
-      .publish(
-        buildAssistantEvent(
-          {
-            type: "conversation_inference_profile_updated",
-            conversationId,
-            profile: null,
-            sessionId: null,
-            expiresAt: null,
-          },
-          conversationId,
-        ),
-      )
-      .catch((err) => {
-        log.warn(
-          { err, conversationId },
-          "Failed to publish inference profile expiry event",
-        );
-      });
+    publishConversationInferenceProfileChanged({
+      conversationId,
+      profile: null,
+      sessionId: null,
+      expiresAt: null,
+    });
   }
   if (cleared.length > 0) {
     log.info(

package/src/runtime/routes/inference-provider-connection-routes.ts

@@ -12,7 +12,13 @@ import { z } from "zod";
 
 import { getConfigReadOnly } from "../../config/loader.js";
 import { getDb } from "../../memory/db-connection.js";
-import { AuthSchema, ConnectionProviderSchema, ConnectionStatusSchema, ProviderConnectionSchema, VALID_CONNECTION_PROVIDERS } from "../../providers/inference/auth.js";
+import {
+  AuthSchema,
+  ConnectionProviderSchema,
+  ConnectionStatusSchema,
+  ProviderConnectionSchema,
+  VALID_CONNECTION_PROVIDERS,
+} from "../../providers/inference/auth.js";
 import {
   createConnection,
   deleteConnection,
@@ -21,11 +27,7 @@ import {
   MANAGED_CONNECTION_NAMES,
   updateConnection,
 } from "../../providers/inference/connections.js";
-import {
-  BadRequestError,
-  ConflictError,
-  NotFoundError,
-} from "./errors.js";
+import { BadRequestError, ConflictError, NotFoundError } from "./errors.js";
 import type { RouteDefinition, RouteHandlerArgs } from "./types.js";
 
 // ---------------------------------------------------------------------------
@@ -40,7 +42,10 @@ const providerConnectionResponseSchema = ProviderConnectionSchema;
 
 function handleListConnections({ queryParams = {} }: RouteHandlerArgs) {
   const provider = queryParams.provider;
-  const connections = listConnections(getDb(), provider ? { provider } : undefined);
+  const connections = listConnections(
+    getDb(),
+    provider ? { provider } : undefined,
+  );
   return { connections };
 }
 
@@ -75,14 +80,23 @@ function handleCreateConnection({ body = {} }: RouteHandlerArgs) {
     throw new BadRequestError(`Invalid auth: ${authResult.error.message}`);
   }
 
-  const statusResult = body.status !== undefined ? ConnectionStatusSchema.safeParse(body.status) : null;
+  const statusResult =
+    body.status !== undefined
+      ? ConnectionStatusSchema.safeParse(body.status)
+      : null;
   if (statusResult && !statusResult.success) {
     throw new BadRequestError(`Invalid status: must be "active" or "disabled"`);
   }
 
   const labelRaw = body.label;
-  if (labelRaw !== undefined && labelRaw !== null && (typeof labelRaw !== "string" || labelRaw.length === 0)) {
-    throw new BadRequestError(`Invalid label: must be a non-empty string or null`);
+  if (
+    labelRaw !== undefined &&
+    labelRaw !== null &&
+    (typeof labelRaw !== "string" || labelRaw.length === 0)
+  ) {
+    throw new BadRequestError(
+      `Invalid label: must be a non-empty string or null`,
+    );
   }
 
   const result = createConnection(getDb(), {
@@ -110,7 +124,10 @@ function handleCreateConnection({ body = {} }: RouteHandlerArgs) {
   return result.connection;
 }
 
-function handleUpdateConnection({ pathParams = {}, body = {} }: RouteHandlerArgs) {
+function handleUpdateConnection({
+  pathParams = {},
+  body = {},
+}: RouteHandlerArgs) {
   const { name } = pathParams;
   if (!name) throw new BadRequestError("name is required");
 
@@ -120,21 +137,33 @@ function handleUpdateConnection({ pathParams = {}, body = {} }: RouteHandlerArgs
     throw new BadRequestError(`Invalid auth: ${authResult.error.message}`);
   }
 
-  const statusResult = body.status !== undefined ? ConnectionStatusSchema.safeParse(body.status) : null;
+  const statusResult =
+    body.status !== undefined
+      ? ConnectionStatusSchema.safeParse(body.status)
+      : null;
   if (statusResult && !statusResult.success) {
     throw new BadRequestError(`Invalid status: must be "active" or "disabled"`);
   }
 
   const labelRaw = body.label;
-  if (labelRaw !== undefined && labelRaw !== null && (typeof labelRaw !== "string" || labelRaw.length === 0)) {
-    throw new BadRequestError(`Invalid label: must be a non-empty string or null`);
+  if (
+    labelRaw !== undefined &&
+    labelRaw !== null &&
+    (typeof labelRaw !== "string" || labelRaw.length === 0)
+  ) {
+    throw new BadRequestError(
+      `Invalid label: must be a non-empty string or null`,
+    );
   }
 
   // Managed connections: lock auth to `{type:"platform"}`. The boot upsert in
   // `seedCanonicalConnections` would revert any other value on next restart;
   // reject the write here so the surprise loop never happens. Label and status
   // remain user-editable (the boot upsert leaves those alone).
-  if (MANAGED_CONNECTION_NAMES.has(name) && authResult.data.type !== "platform") {
+  if (
+    MANAGED_CONNECTION_NAMES.has(name) &&
+    authResult.data.type !== "platform"
+  ) {
     throw new BadRequestError(
       `Cannot change auth on managed connection "${name}". Auth is locked to platform.`,
     );
@@ -180,7 +209,10 @@ function handleDeleteConnection({ pathParams = {} }: RouteHandlerArgs) {
   const config = getConfigReadOnly();
 
   // llm.default carries provider_connection (LLMConfigBase).
-  if ((config.llm?.default as Record<string, unknown> | undefined)?.provider_connection === name) {
+  if (
+    (config.llm?.default as Record<string, unknown> | undefined)
+      ?.provider_connection === name
+  ) {
     throw new ConflictError(
       `Connection "${name}" is referenced by llm.default. Update llm.default.provider_connection before deleting.`,
       { referencedBy: ["llm.default"] },
@@ -190,7 +222,9 @@ function handleDeleteConnection({ pathParams = {} }: RouteHandlerArgs) {
   // llm.profiles.*: only ProfileEntry has provider_connection.
   const profiles = config.llm?.profiles ?? {};
   const referencingProfiles = Object.entries(profiles)
-    .filter(([, p]) => (p as Record<string, unknown>).provider_connection === name)
+    .filter(
+      ([, p]) => (p as Record<string, unknown>).provider_connection === name,
+    )
     .map(([profileName]) => profileName);
 
   const result = deleteConnection(getDb(), name, {
@@ -234,7 +268,9 @@ export const ROUTES: RouteDefinition[] = [
         description: `Filter by provider. One of: ${VALID_CONNECTION_PROVIDERS.join(", ")}`,
       },
     ],
-    responseBody: z.object({ connections: z.array(providerConnectionResponseSchema) }),
+    responseBody: z.object({
+      connections: z.array(providerConnectionResponseSchema),
+    }),
     handler: handleListConnections,
   },
   {
@@ -291,7 +327,10 @@ export const ROUTES: RouteDefinition[] = [
     }),
     responseBody: providerConnectionResponseSchema,
     additionalResponses: {
-      "400": { description: "Invalid auth schema, or attempt to change auth on a managed connection" },
+      "400": {
+        description:
+          "Invalid auth schema, or attempt to change auth on a managed connection",
+      },
       "404": { description: "Connection not found" },
     },
     handler: handleUpdateConnection,
@@ -308,9 +347,14 @@ export const ROUTES: RouteDefinition[] = [
     pathParams: [{ name: "name", description: "Connection name" }],
     responseBody: z.object({ ok: z.literal(true) }),
     additionalResponses: {
-      "400": { description: "Connection is a Vellum-managed connection and cannot be deleted" },
+      "400": {
+        description:
+          "Connection is a Vellum-managed connection and cannot be deleted",
+      },
       "404": { description: "Connection not found" },
-      "409": { description: "Connection is referenced by profile(s) or call site(s)" },
+      "409": {
+        description: "Connection is referenced by profile(s) or call site(s)",
+      },
     },
     handler: handleDeleteConnection,
   },

package/src/runtime/routes/integrations/slack/share.ts

@@ -12,9 +12,6 @@ import {
   userInfo,
 } from "../../../../messaging/providers/slack/client.js";
 import type { SlackConversation } from "../../../../messaging/providers/slack/types.js";
-import { getConnectionByProvider } from "../../../../oauth/oauth-store.js";
-import { credentialKey } from "../../../../security/credential-key.js";
-import { getSecureKeyAsync } from "../../../../security/secure-keys.js";
 import { getLogger } from "../../../../util/logger.js";
 import {
   BadRequestError,
@@ -23,50 +20,10 @@ import {
   ServiceUnavailableError,
 } from "../../errors.js";
 import type { RouteDefinition, RouteHandlerArgs } from "../../types.js";
+import { resolveSlackToken } from "./token.js";
 
 const log = getLogger("slack-share");
 
-// ---------------------------------------------------------------------------
-// Shared helpers
-// ---------------------------------------------------------------------------
-
-/**
- * Resolve a Slack token for the Share UI, mirroring the read/write auth split
- * in `messaging/providers/slack/adapter.ts`.
- *
- * For Socket Mode installs (tokens stored under `credential/slack_channel/*`),
- * prefer the user OAuth token (xoxp-) for reads when present — this lets the
- * channel picker surface channels the user belongs to but the bot doesn't.
- * Fall back to the bot token (xoxb-) otherwise.
- *
- * Writes MUST always use the bot token so posted messages come from the bot
- * identity, never the user. Passing `user_token` to chat.postMessage would
- * post as the user — unambiguously wrong for Share UI behavior.
- *
- * For legacy OAuth installs (no Socket Mode tokens), fall back to the OAuth
- * connection's access_token, which is the bot token in Slack's OAuth v2 flow.
- */
-async function resolveSlackToken(
-  mode: "read" | "write",
-): Promise<string | undefined> {
-  const botToken = await getSecureKeyAsync(
-    credentialKey("slack_channel", "bot_token"),
-  );
-  if (botToken) {
-    if (mode === "read") {
-      const userToken = await getSecureKeyAsync(
-        credentialKey("slack_channel", "user_token"),
-      );
-      return userToken ?? botToken;
-    }
-    return botToken;
-  }
-
-  const conn = getConnectionByProvider("slack");
-  if (!conn) return undefined;
-  return await getSecureKeyAsync(`oauth_connection/${conn.id}/access_token`);
-}
-
 // ---------------------------------------------------------------------------
 // GET /v1/slack/channels
 // ---------------------------------------------------------------------------
@@ -179,15 +136,11 @@ export async function handleShareToSlackChannel({
   };
 
   if (!appId || !channelId) {
-    throw new BadRequestError(
-      "Missing required fields: appId, channelId",
-    );
+    throw new BadRequestError("Missing required fields: appId, channelId");
   }
 
   if (typeof appId !== "string" || typeof channelId !== "string") {
-    throw new BadRequestError(
-      "Fields appId and channelId must be strings",
-    );
+    throw new BadRequestError("Fields appId and channelId must be strings");
   }
 
   if (message !== undefined && typeof message !== "string") {
@@ -245,8 +198,7 @@ export const ROUTES: RouteDefinition[] = [
     endpoint: "slack/channels",
     method: "GET",
     summary: "List Slack channels",
-    description:
-      "List Slack channels, groups, and DMs for the channel picker.",
+    description: "List Slack channels, groups, and DMs for the channel picker.",
     tags: ["integrations"],
     requirePolicyEnforcement: true,
     handler: () => handleListSlackChannels(),

package/src/runtime/routes/integrations/slack/token.ts

@@ -0,0 +1,43 @@
+/**
+ * Shared Slack token resolver.
+ *
+ * Resolve a Slack token for the Share UI, mirroring the read/write auth split
+ * in `messaging/providers/slack/adapter.ts`.
+ *
+ * For Socket Mode installs (tokens stored under `credential/slack_channel/*`),
+ * prefer the user OAuth token (xoxp-) for reads when present — this lets the
+ * channel picker surface channels the user belongs to but the bot doesn't.
+ * Fall back to the bot token (xoxb-) otherwise.
+ *
+ * Writes MUST always use the bot token so posted messages come from the bot
+ * identity, never the user. Passing `user_token` to chat.postMessage would
+ * post as the user — unambiguously wrong for Share UI behavior.
+ *
+ * For legacy OAuth installs (no Socket Mode tokens), fall back to the OAuth
+ * connection's access_token, which is the bot token in Slack's OAuth v2 flow.
+ */
+
+import { getConnectionByProvider } from "../../../../oauth/oauth-store.js";
+import { credentialKey } from "../../../../security/credential-key.js";
+import { getSecureKeyAsync } from "../../../../security/secure-keys.js";
+
+export async function resolveSlackToken(
+  mode: "read" | "write",
+): Promise<string | undefined> {
+  const botToken = await getSecureKeyAsync(
+    credentialKey("slack_channel", "bot_token"),
+  );
+  if (botToken) {
+    if (mode === "read") {
+      const userToken = await getSecureKeyAsync(
+        credentialKey("slack_channel", "user_token"),
+      );
+      return userToken ?? botToken;
+    }
+    return botToken;
+  }
+
+  const conn = getConnectionByProvider("slack");
+  if (!conn) return undefined;
+  return await getSecureKeyAsync(`oauth_connection/${conn.id}/access_token`);
+}

package/src/runtime/routes/integrations/twilio.ts

@@ -95,8 +95,7 @@ export async function handleSetTwilioCredentials({
 
   // Validate credentials against Twilio API
   const authHeader =
-    "Basic " +
-    Buffer.from(`${accountSid}:${authToken}`).toString("base64");
+    "Basic " + Buffer.from(`${accountSid}:${authToken}`).toString("base64");
   try {
     const res = await fetch(
       `https://api.twilio.com/2010-04-01/Accounts/${accountSid}.json`,
@@ -121,9 +120,7 @@ export async function handleSetTwilioCredentials({
     accountSid,
   );
   if (!sidStored) {
-    throw new InternalError(
-      "Failed to store Account SID in secure storage",
-    );
+    throw new InternalError("Failed to store Account SID in secure storage");
   }
 
   const tokenStored = await setSecureKeyAsync(
@@ -132,14 +129,13 @@ export async function handleSetTwilioCredentials({
   );
   if (!tokenStored) {
     await deleteSecureKeyAsync(credentialKey("twilio", "account_sid"));
-    throw new InternalError(
-      "Failed to store Auth Token in secure storage",
-    );
+    throw new InternalError("Failed to store Auth Token in secure storage");
   }
 
   const raw = loadRawConfig();
   const twilio = (raw?.twilio ?? {}) as Record<string, unknown>;
   twilio.accountSid = accountSid;
+  twilio.setupStarted = true;
   saveRawConfig({ ...raw, twilio });
 
   upsertCredentialMetadata("twilio", "account_sid", {
@@ -210,9 +206,7 @@ async function handleListTwilioNumbers() {
   return { success: true, hasCredentials: true, numbers };
 }
 
-export async function handleProvisionTwilioNumber({
-  body,
-}: RouteHandlerArgs) {
+export async function handleProvisionTwilioNumber({ body }: RouteHandlerArgs) {
   if (!(await hasTwilioCredentials())) {
     throw new BadRequestError(
       "Twilio credentials not configured. Set credentials first.",
@@ -323,8 +317,7 @@ async function handleReleaseTwilioNumber({ body }: RouteHandlerArgs) {
   };
   const raw = loadRawConfig();
   const twilio = (raw?.twilio ?? {}) as Record<string, unknown>;
-  const phoneNumber =
-    requestedNumber || (twilio.phoneNumber as string) || "";
+  const phoneNumber = requestedNumber || (twilio.phoneNumber as string) || "";
 
   if (!phoneNumber) {
     throw new BadRequestError(

package/src/runtime/routes/notification-routes.ts

@@ -52,7 +52,7 @@ function handleNotificationIntentResult({ body = {} }: RouteHandlerArgs) {
 
 const AttentionHintsSchema = z.object({
   requiresAction: z.boolean(),
-  urgency: z.enum(["low", "medium", "high"]),
+  urgency: z.enum(["low", "medium", "high", "critical"]),
   deadlineAt: z.number().optional(),
   isAsyncBackground: z.boolean(),
   visibleInSourceNow: z.boolean(),