@vellumai/vellum-gateway 0.10.8-staging.1 → 0.10.8

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vellumai/vellum-gateway",
-  "version": "0.10.8-staging.1",
+  "version": "0.10.8",
   "license": "MIT",
   "type": "module",
   "exports": {

package/src/__tests__/twilio-webhooks.test.ts

@@ -1,10 +1,15 @@
-import { describe, test, expect, mock, afterEach } from "bun:test";
+import { describe, test, expect, mock, afterEach, beforeEach } from "bun:test";
 import { createHmac } from "node:crypto";
 import type { GatewayConfig } from "../config.js";
 import type { CredentialCache } from "../credential-cache.js";
 import type { ConfigFileCache } from "../config-file-cache.js";
 import { credentialKey } from "../credential-key.js";
 import { initSigningKey } from "../auth/token-service.js";
+import {
+  initAdmissionPolicyCache,
+  resetAdmissionPolicyCache,
+} from "../risk/admission-policy-cache.js";
+import { initGatewayDb, resetGatewayDb } from "../db/connection.js";
 
 const TEST_SIGNING_KEY = Buffer.from("test-signing-key-at-least-32-bytes-long");
 initSigningKey(TEST_SIGNING_KEY);
@@ -52,9 +57,21 @@ const { createTwilioStatusWebhookHandler } =
 
 const AUTH_TOKEN = "test-twilio-auth-token";
 
+beforeEach(async () => {
+  // The voice webhook resolves the phone admission floor (channel-trust-floors
+  // is on by default); init the cache fresh per test like the other webhook
+  // handler tests.
+  resetGatewayDb();
+  resetAdmissionPolicyCache();
+  await initGatewayDb();
+  initAdmissionPolicyCache();
+});
+
 afterEach(() => {
   fetchMock = mock(async () => new Response());
   logCalls.length = 0;
+  resetAdmissionPolicyCache();
+  resetGatewayDb();
 });
 
 function findLogCall(message: string): {

package/src/feature-flag-registry.json

@@ -343,8 +343,8 @@
       "scope": "assistant",
       "key": "channel-trust-floors",
       "label": "Channel Trust Floors",
-      "description": "Expose the Channel Trust Floors settings card (per-channel inbound admission policy) on the Privacy settings page. When off, the card is hidden and channels fall back to their default admission floors. Off by default while the feature is in development.",
-      "defaultEnabled": false
+      "description": "Expose the Channel Trust Floors settings card (per-channel inbound admission policy) on the Privacy settings page. When off, the card is hidden and channels fall back to their default admission floors. On by default; disable to hide the card.",
+      "defaultEnabled": true
     },
     {
       "id": "mcp-add-server",