[ralyodio]

Outbound alert calls bypassed the line's recording preference, leaving no audio in the inbox. Answered alerts now start MP3 recording for enabled lines and announce it. Recording-saved events update the call message, and playback/download resolves both incoming and alert session IDs. Lines with recording disabled keep their existing behavior.

Validation: 369 tests pass; TypeScript passes; lint has no errors (4 existing warnings). Added coverage for enabled/disabled alert recording, recording duration, and outbound recording playback.

[github-actions]

ThreatCrush Security Scan

14 finding(s)

HIGH/CRITICAL: 2 | MEDIUM: 4 | LOW: 8

Severity	Rule	Location
HIGH	sh-unquoted-expansion-destructive	public/install.sh:67
HIGH	sh-remote-script-execution	public/install.sh:89
MEDIUM	sh-remote-script-execution	public/install.sh:133
MEDIUM	js-open-redirect	src/app/numbers/page.tsx:180
MEDIUM	js-open-redirect	src/components/inbox-client.tsx:35
MEDIUM	js-unescaped-html-sink	src/components/pit-footer.tsx:17
LOW	secret-generic-credential	src/lib/providers/__tests__/twilio.test.ts:24
LOW	secret-generic-credential	src/lib/providers/__tests__/twilio.test.ts:46
LOW	secret-generic-credential	src/lib/providers/__tests__/twilio.test.ts:60
LOW	secret-generic-credential	src/lib/providers/__tests__/twilio.test.ts:78
LOW	secret-generic-credential	src/lib/vault/__tests__/vault.test.ts:117
LOW	secret-generic-credential	src/lib/webhooks/__tests__/supabase-store.test.ts:11
LOW	secret-generic-credential	supabase/config.toml:287
LOW	secret-generic-credential	supabase/config.toml:319

Snippets are redacted; ThreatCrush never prints matched credential material.