@vellumai/vellum-gateway 0.12.2-staging.1 → 0.12.2-staging.2

package/node_modules/@vellumai/slack-text/src/index.ts

@@ -113,7 +113,7 @@ export async function buildSlackUserLabelMap(
       // that label directly; only queue a lookup when the label is missing,
       // empty, or ID-shaped. Mirrors the channel builder below.
       const [, embeddedLabel] = splitSlackLabel(match[0].slice(1, -1));
-      const sanitizedEmbeddedLabel = sanitizeOptionalLabel(embeddedLabel);
+      const sanitizedEmbeddedLabel = sanitizeEmbeddedSlackLabel(embeddedLabel);
       if (sanitizedEmbeddedLabel && sanitizedEmbeddedLabel !== id) continue;
       if (seen.has(id)) continue;
       seen.add(id);
@@ -151,7 +151,7 @@ export async function buildSlackChannelLabelMap(
     for (const match of text.matchAll(SLACK_CHANNEL_REFERENCE_RE)) {
       const id = match[1];
       const [, embeddedLabel] = splitSlackLabel(match[0].slice(1, -1));
-      const sanitizedEmbeddedLabel = sanitizeOptionalLabel(embeddedLabel);
+      const sanitizedEmbeddedLabel = sanitizeEmbeddedSlackLabel(embeddedLabel);
       if (sanitizedEmbeddedLabel && sanitizedEmbeddedLabel !== id) continue;
       if (!seen.has(id)) {
         seen.add(id);
@@ -192,9 +192,7 @@ function renderUserMention(
   // prefer it over a lookup, mirroring renderChannelReference. The embedded
   // label is Slack-sourced (part of the token), so entities decode before
   // sanitization; the caller-resolved label below is not.
-  const embeddedLabel = sanitizeOptionalLabel(
-    label === undefined ? undefined : decodeSlackHtmlEntities(label),
-  );
+  const embeddedLabel = sanitizeEmbeddedSlackLabel(label);
   if (embeddedLabel && embeddedLabel !== id) {
     return `@${embeddedLabel}`;
   }
@@ -219,9 +217,7 @@ function renderChannelReference(
   );
   // The embedded label is Slack-sourced (part of the token), so entities
   // decode before sanitization; the caller-resolved label below is not.
-  const embeddedLabel = sanitizeOptionalLabel(
-    label === undefined ? undefined : decodeSlackHtmlEntities(label),
-  );
+  const embeddedLabel = sanitizeEmbeddedSlackLabel(label);
   if (embeddedLabel && embeddedLabel !== channelId) {
     return `#${embeddedLabel}`;
   }
@@ -320,6 +316,15 @@ export function sanitizeSlackLabel(
   return sanitized || undefined;
 }
 
+// Slack-sourced labels are decoded before validation in both lookup and render.
+function sanitizeEmbeddedSlackLabel(
+  label: string | undefined,
+): string | undefined {
+  return sanitizeOptionalLabel(
+    label === undefined ? undefined : decodeSlackHtmlEntities(label),
+  );
+}
+
 function sanitizeOptionalLabel(label: string | undefined): string | undefined {
   return sanitizeSlackLabel(label);
 }

package/node_modules/@vellumai/slack-text/src/label-resolution-entities.test.ts

@@ -0,0 +1,95 @@
+import assert from "node:assert/strict";
+import { describe, test } from "bun:test";
+import {
+  buildSlackChannelLabelMap,
+  buildSlackUserLabelMap,
+  renderSlackTextForModel,
+} from "./index.js";
+
+describe("Slack embedded-label lookup parity", () => {
+  const cases = [
+    { id: "U123", prefix: "@", build: buildSlackUserLabelMap, mapKey: "userLabels" },
+    {
+      id: "C123",
+      prefix: "#",
+      build: buildSlackChannelLabelMap,
+      mapKey: "channelLabels",
+    },
+  ] as const;
+
+  for (const { id, prefix, build, mapKey } of cases) {
+    for (const label of ["<>", `<${id}>`, "< @# >"]) {
+      test(`${prefix} resolves label ${label} after Slack entity decoding`, async () => {
+        const text = `<${prefix}${id}|${label}>`;
+        const requested: string[] = [];
+        const labels = await build([text], async (value) => {
+          requested.push(value);
+          return "Example Name";
+        });
+        assert.deepEqual(requested, [id]);
+        assert.equal(
+          renderSlackTextForModel(text, { [mapKey]: labels }),
+          `${prefix}Example Name`,
+        );
+      });
+    }
+
+    for (const label of ["&lt;Example&gt;", "R&amp;D", "&amp;lt;&amp;gt;"]) {
+      test(`${prefix} keeps usable embedded label ${label} without lookup`, async () => {
+        const requested: string[] = [];
+        const text = `<${prefix}${id}|${label}>`;
+        const labels = await build([text], async (value) => {
+          requested.push(value);
+          return "Wrong Label";
+        });
+        assert.deepEqual(requested, []);
+        assert.deepEqual(labels, {});
+        const expected =
+          label === "&lt;Example&gt;"
+            ? "Example"
+            : label === "R&amp;D"
+              ? "R&D"
+              : "&lt;&gt;";
+        assert.equal(
+          renderSlackTextForModel(text, { [mapKey]: labels }),
+          `${prefix}${expected}`,
+        );
+      });
+    }
+
+    test(`${prefix} deduplicates required lookups across encoded and bare mentions`, async () => {
+      const requested: string[] = [];
+      const labels = await build(
+        [`<${prefix}${id}|&lt;&gt;>`, `<${prefix}${id}>`],
+        async (value) => {
+          requested.push(value);
+          return "Example";
+        },
+      );
+      assert.deepEqual(requested, [id]);
+      assert.deepEqual(labels, { [id]: "Example" });
+    });
+
+    test(`${prefix} does not decode caller-resolved entity text`, async () => {
+      const text = `<${prefix}${id}|&lt;&gt;>`;
+      const labels = await build([text], async () => "&lt;Example&gt;");
+      assert.equal(
+        renderSlackTextForModel(text, { [mapKey]: labels }),
+        `${prefix}&lt;Example&gt;`,
+      );
+    });
+
+    test(`${prefix} preserves unknown fallback after a failed required lookup`, async () => {
+      let attempts = 0;
+      const text = `<${prefix}${id}|&lt;&gt;>`;
+      const labels = await build([text], async () => {
+        attempts++;
+        throw new Error("unavailable");
+      });
+      assert.equal(attempts, 1);
+      assert.deepEqual(labels, {});
+      const expected = prefix === "@" ? "@unknown-user" : "#unknown-channel";
+      assert.equal(renderSlackTextForModel(text, { [mapKey]: labels }), expected);
+    });
+  }
+});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vellumai/vellum-gateway",
-  "version": "0.12.2-staging.1",
+  "version": "0.12.2-staging.2",
   "license": "MIT",
   "type": "module",
   "exports": {

package/src/feature-flag-registry.json

@@ -175,7 +175,7 @@
       "scope": "client",
       "key": "teleport",
       "label": "Teleport",
-      "description": "Enable teleport UI in General settings for moving assistants between hosting environments",
+      "description": "Enable the local-to-platform teleport UI in General settings. Platform-to-local teleport is GA and not gated by this flag",
       "defaultEnabled": false
     },
     {
@@ -474,6 +474,14 @@
       "description": "Gates the seeded Figma OAuth provider. When off, the provider is hidden from GET /v1/oauth/providers, its get-by-id route, and the connect/update routes, so it cannot be listed or connected from the CLI, gateway, or web integrations list. The row is still seeded into oauth_providers on startup, and existing connections keep injecting credentials; only its visibility changes.",
       "defaultEnabled": false
     },
+    {
+      "id": "quickbooks-oauth",
+      "scope": "assistant",
+      "key": "quickbooks-oauth",
+      "label": "QuickBooks Integration",
+      "description": "Gates the seeded QuickBooks OAuth provider. When off, the provider is hidden from GET /v1/oauth/providers, its get-by-id route, and the connect/update routes, so it cannot be listed or connected from the CLI, gateway, or web integrations list. The row is still seeded into oauth_providers on startup, and existing connections keep injecting credentials; only its visibility changes.",
+      "defaultEnabled": false
+    },
     {
       "id": "shopify-oauth",
       "scope": "assistant",