@pouchy_ai/companion-sdk 0.25.0 → 0.26.1

package/CHANGELOG.md

@@ -12,6 +12,39 @@ a protocol bump is always called out explicitly here.
 
 ## [Unreleased]
 
+## [0.26.1] - 2026-07-12
+
+### Changed
+
+- **Docs: `/api/stt` now requires auth.** The audio-transcription relay the
+  `ingestKnowledge` guidance points at is no longer an open endpoint — send
+  your `pchy_…` access token as the bearer (any valid token works; the call
+  is metered like other companion ops). No SDK code paths changed; this
+  release updates the inline JSDoc guidance only.
+- Server-side hardening (no client change needed): concurrent `input` posts
+  on one session now lose cleanly with the existing 409 `turn_pending` code
+  instead of double-running a turn — retry after the in-flight reply lands.
+
+## [0.26.0] - 2026-07-11
+
+### Fixed
+
+- **Voice-call connect failures now honor the typed-error contract.** The
+  call helpers (`connectCall` / `startCall` / `openCompanionCall`) used to
+  reject with plain `Error`s for the connect-step failures, so they carried
+  no `.code` and couldn't be `switch`ed like every other SDK rejection.
+  They now reject with `CompanionError` and three new client-synthesized
+  codes: `call_unsupported` (non-browser environment — no WebRTC/mic),
+  `call_connect_failed` (mic-permission timeout, SDP exchange failed or
+  timed out; `status` carries the HTTP status when the exchange answered
+  non-2xx), and `call_dependency_missing` (the optional
+  `@elevenlabs/client` peer dependency isn't installed). Like
+  `reply_timeout`/`stream_unauthorized` these are SDK-synthesized and
+  deliberately NOT part of the server-mirrored `COMPANION_ERROR_CODES`
+  HTTP vocabulary. Browser-native `getUserMedia` rejections (e.g.
+  `NotAllowedError` on permission denial) still propagate untouched.
+  `CompanionError` itself is unchanged and keeps its import path.
+
 ## [0.25.0] - 2026-07-11
 
 ### Added

package/README.md

@@ -147,7 +147,13 @@ HTTP `code` vocabulary behind `CompanionError.code`, e.g. `missing_scope` /
 `session_not_found` / `turn_pending`) — so you can assert the version, validate
 the event vocabulary, or switch on error codes without hard-coding strings.
 Every helper populates `CompanionError.code` when the server names a cause
-(0.24.0 — previously only the POST-backed calls did). Every
+(0.24.0 — previously only the POST-backed calls did). The SDK also synthesizes
+a few client-side codes outside that HTTP vocabulary: `reply_timeout`
+(awaitReply fallback gave up), `stream_unauthorized` (event-stream 401
+exhausted reconnects), and — 0.26.0 — the voice connect-step codes
+`call_unsupported` (no WebRTC/mic in this environment), `call_connect_failed`
+(mic timeout / SDP exchange failed) and `call_dependency_missing`
+(`@elevenlabs/client` not installed). Every
 outbound payload has a named type; `ToolCallPayload` (`{ id, name, args }`) types
 the `companion.tool_call` event, and `onToolCall`'s callback receives
 `ToolCallEvent` — the payload plus `argsJson` (pre-parsed args).

package/dist/call.js

@@ -10,6 +10,7 @@
 //
 // Browser-only (needs WebRTC + getUserMedia). Returns a handle to hang up and to
 // inject live context mid-call (the bridge the server uses for voiceRelevant).
+import { CompanionError } from './errors.js';
 /** Universal "host control" verbs the companion can call on ANY surface (web /
  *  game / app / hardware), regardless of provider. They're generic on purpose —
  *  the SPECIFIC intent rides in the string params, which YOUR surface interprets
@@ -147,7 +148,7 @@ const OPENAI_REALTIME_CALLS = 'https://api.openai.com/v1/realtime/calls';
 /** Open a live call from pre-minted credentials. */
 export async function openCompanionCall(creds, opts = {}, bridge) {
     if (typeof navigator === 'undefined' || !navigator.mediaDevices) {
-        throw new Error('connectCall is browser-only (needs WebRTC + microphone access)');
+        throw new CompanionError('connectCall is browser-only (needs WebRTC + microphone access)', 0, 'call_unsupported');
     }
     return creds.provider === 'openai-realtime'
         ? openOpenAICall(creds, opts, bridge)
@@ -176,7 +177,7 @@ async function getMicWithTimeout() {
         .catch(() => { });
     const timeout = new Promise((_, reject) => setTimeout(() => {
         timedOut = true;
-        reject(new Error('microphone request timed out'));
+        reject(new CompanionError('microphone request timed out', 0, 'call_connect_failed'));
     }, GUM_TIMEOUT_MS));
     return Promise.race([micPromise, timeout]);
 }
@@ -343,14 +344,14 @@ async function openOpenAICall(creds, opts, bridge) {
     catch {
         clearTimeout(sdpTimer);
         cleanupPartial();
-        throw new Error(sdpAbort.signal.aborted
+        throw new CompanionError(sdpAbort.signal.aborted
             ? 'OpenAI Realtime SDP exchange timed out'
-            : 'OpenAI Realtime SDP exchange failed');
+            : 'OpenAI Realtime SDP exchange failed', 0, 'call_connect_failed');
     }
     clearTimeout(sdpTimer);
     if (!res.ok) {
         cleanupPartial();
-        throw new Error(`OpenAI Realtime SDP exchange failed (${res.status})`);
+        throw new CompanionError(`OpenAI Realtime SDP exchange failed (${res.status})`, res.status, 'call_connect_failed');
     }
     await pc.setRemoteDescription({ type: 'answer', sdp: await res.text() });
     let closed = false;
@@ -458,7 +459,7 @@ async function openConvaiCall(creds, opts, bridge) {
         mod = await import('@elevenlabs/client');
     }
     catch {
-        throw new Error("elevenlabs-convai call needs the optional peer dependency '@elevenlabs/client' — install it (npm i @elevenlabs/client)");
+        throw new CompanionError("elevenlabs-convai call needs the optional peer dependency '@elevenlabs/client' — install it (npm i @elevenlabs/client)", 0, 'call_dependency_missing');
     }
     // App tools → EL client tools. NOTE: ElevenLabs only CALLS a client tool the
     // agent already knows (declared on the agent config); a shared Convai agent

package/dist/client.d.ts

@@ -166,12 +166,10 @@ export declare function pouchyBrandIconUrl(baseUrl: string, size?: BrandIconSize
  *  a method before `connect()`). `code` is a stable machine-readable tag you can
  *  switch on, shared with the `control.error` stream event vocabulary:
  *  `'not_connected'`, `'missing_option'`, `'not_representative'`, or the server's
- *  own error code for an HTTP failure (when it sends one). */
-export declare class CompanionError extends Error {
-    status: number;
-    code?: string;
-    constructor(message: string, status: number, code?: string);
-}
+ *  own error code for an HTTP failure (when it sends one). Defined in errors.ts
+ *  (so call.ts shares it cycle-free); re-exported here so the public import
+ *  path is unchanged. */
+export { CompanionError } from './errors.js';
 /** The server's memory-consolidation diagnostic from `endSession()` / `close()`.
  *  `ok` is whether consolidation ran; `facts` is how many memories it wrote;
  *  `skipped` (when present) says why nothing was written
@@ -434,7 +432,8 @@ export declare class CompanionClient {
      *  materials" list with source attribution, exactly like a first-party upload.
      *  So the materials entry point can live in YOUR app, not just Pouchy's.
      *
-     *  Extract the text yourself (your own parser, or Pouchy's /api/stt for audio)
+     *  Extract the text yourself (your own parser, or Pouchy's /api/stt for audio —
+     *  send your pchy_ token as the bearer; the relay is auth-gated and metered)
      *  and pass it here. Writes the user's SHARED knowledge, so the token must
      *  hold `memory.write:core` (the user's consent) — otherwise 403. Embeddings
      *  are computed on the user's next first-party open (eventually-consistent
@@ -581,4 +580,3 @@ export declare class CompanionClient {
     private consume;
     private sleep;
 }
-export {};

package/dist/client.js

@@ -14,6 +14,7 @@
 // kept in lockstep by protocol.drift.test.ts.
 import { PROTOCOL_VERSION } from './protocol.js';
 import { parseSse } from './sse.js';
+import { CompanionError } from './errors.js';
 import { openCompanionCall, HOST_CONTROL_TOOLS, HOST_CONTROL_TOOL_NAMES, AVATAR_VISUAL_TOOLS, AVATAR_VISUAL_TOOL_NAMES } from './call.js';
 /** Model tool arguments are model output — tolerate junk without throwing. */
 function parseArgsJson(args) {
@@ -37,18 +38,10 @@ export function pouchyBrandIconUrl(baseUrl, size = 512) {
  *  a method before `connect()`). `code` is a stable machine-readable tag you can
  *  switch on, shared with the `control.error` stream event vocabulary:
  *  `'not_connected'`, `'missing_option'`, `'not_representative'`, or the server's
- *  own error code for an HTTP failure (when it sends one). */
-export class CompanionError extends Error {
-    status;
-    code;
-    constructor(message, status, code) {
-        super(message);
-        this.name = 'CompanionError';
-        this.status = status;
-        if (code)
-            this.code = code;
-    }
-}
+ *  own error code for an HTTP failure (when it sends one). Defined in errors.ts
+ *  (so call.ts shares it cycle-free); re-exported here so the public import
+ *  path is unchanged. */
+export { CompanionError } from './errors.js';
 const SEEN_CAP = 512;
 export class CompanionClient {
     opts;
@@ -649,7 +642,8 @@ export class CompanionClient {
      *  materials" list with source attribution, exactly like a first-party upload.
      *  So the materials entry point can live in YOUR app, not just Pouchy's.
      *
-     *  Extract the text yourself (your own parser, or Pouchy's /api/stt for audio)
+     *  Extract the text yourself (your own parser, or Pouchy's /api/stt for audio —
+     *  send your pchy_ token as the bearer; the relay is auth-gated and metered)
      *  and pass it here. Writes the user's SHARED knowledge, so the token must
      *  hold `memory.write:core` (the user's consent) — otherwise 403. Embeddings
      *  are computed on the user's next first-party open (eventually-consistent

package/dist/errors.d.ts

@@ -0,0 +1,9 @@
+/** Thrown by every helper on an HTTP or client-side failure. `status` is the
+ *  HTTP status (0 for client-synthesized failures — timeouts, unsupported
+ *  environments, missing optional deps); `code` is machine-switchable when
+ *  the server (or the SDK itself) names a cause. */
+export declare class CompanionError extends Error {
+    status: number;
+    code?: string;
+    constructor(message: string, status: number, code?: string);
+}

package/dist/errors.js

@@ -0,0 +1,20 @@
+// CompanionError — the one error type every SDK helper rejects with (README
+// contract: consumers `switch` on `.code` instead of string-matching prose).
+// Lives in its own module so call.ts can use it without a runtime cycle
+// through client.ts (client.ts re-exports it, keeping the public import path
+// `@pouchy_ai/companion-sdk` → `CompanionError` unchanged).
+/** Thrown by every helper on an HTTP or client-side failure. `status` is the
+ *  HTTP status (0 for client-synthesized failures — timeouts, unsupported
+ *  environments, missing optional deps); `code` is machine-switchable when
+ *  the server (or the SDK itself) names a cause. */
+export class CompanionError extends Error {
+    status;
+    code;
+    constructor(message, status, code) {
+        super(message);
+        this.name = 'CompanionError';
+        this.status = status;
+        if (code)
+            this.code = code;
+    }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pouchy_ai/companion-sdk",
-  "version": "0.25.0",
+  "version": "0.26.1",
   "description": "Embed the Pouchy companion — chat, voice, tools, memory, live world-state, instant UI, and agent-to-agent messaging — in any app, game, or site.",
   "type": "module",
   "license": "SEE LICENSE IN LICENSE",