@rymi/mcp 2.8.1 → 2.9.0

package/README.md

@@ -104,6 +104,10 @@ Run the server on your own machine — it speaks **stdio** by default and talks
 <td><code>create_call</code> · <code>batch_call</code> · <code>end_call</code> · <code>add_call_participant</code></td>
 </tr>
 <tr>
+<td><b>Task calls</b></td>
+<td><code>place_task_call</code> · <code>wait_for_call</code></td>
+</tr>
+<tr>
 <td><b>Numbers</b></td>
 <td><code>list_numbers</code> · <code>register_number</code> · <code>attach_number</code> · <code>remove_number</code></td>
 </tr>
@@ -151,7 +155,7 @@ Run the server on your own machine — it speaks **stdio** by default and talks
 
 ### ⚠️ Gated tools
 
-`create_call` and `batch_call` place **real, billable** outbound calls; `publish_agent` flips an agent **live** to end users.
+`place_task_call`, `create_call` and `batch_call` place **real, billable** outbound calls; `publish_agent` flips an agent **live** to end users.
 
 What restrains them depends on which server you're talking to.
 

package/dist/index.js

@@ -153,6 +153,7 @@ var init_studioCatalog = __esm({
         "gpt-realtime-2.1-mini",
         "gpt-live-1",
         "gemini-3.8-live",
+        "gemini-3.8-live-extended-thinking",
         "grok-voice-3.0",
         "grok-voice-think-fast-2.0",
         "ultravox-v0.7",
@@ -176,10 +177,6 @@ var init_studioCatalog = __esm({
         "gemini-2.5-flash-native-audio-preview-12-2025",
         "nova-sonic-1",
         "nova-sonic-2",
-        "llama-3.1-8b-instant",
-        "llama-3.3-70b-versatile",
-        "meta-llama/llama-4-scout-17b-16e-instruct",
-        "qwen/qwen3-32b",
         "openai/gpt-oss-20b",
         "openai/gpt-oss-120b",
         "openai/gpt-oss-safeguard-20b",
@@ -190,6 +187,7 @@ var init_studioCatalog = __esm({
         "llama-4-scout",
         "deepseek-v4-flash",
         "deepseek-v4-pro",
+        "grok-4.7",
         "grok-4-1-fast",
         "grok-3-mini",
         "grok-3-mini-fast",
@@ -253,6 +251,7 @@ var init_studioCatalog = __esm({
       ],
       tts: [
         "aura-2",
+        "flux-tts",
         "gemini-2.5-pro-preview-tts",
         "sonic-3.5",
         "sonic-turbo",
@@ -263,6 +262,7 @@ var init_studioCatalog = __esm({
         "gemini-3.1-flash-tts-preview",
         "tts-1",
         "bulbul:v3",
+        "bulbul:v4-flash",
         "gpt-4o-mini-tts",
         "eleven_multilingual_v2",
         // Additional TTS
@@ -1218,6 +1218,80 @@ var init_variables = __esm({
   }
 });
 
+// ../shared-types/dist/safeUrl.js
+var safeUrl_exports = {};
+__export(safeUrl_exports, {
+  isSafeAudioUrl: () => isSafeAudioUrl,
+  isSafeUrl: () => isSafeUrl
+});
+function unmapIpv4(v6) {
+  const dotted = /^::ffff:(\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})$/.exec(v6);
+  if (dotted)
+    return dotted[1];
+  const hex = /^::ffff:([0-9a-f]{1,4}):([0-9a-f]{1,4})$/.exec(v6);
+  if (!hex)
+    return null;
+  const high = parseInt(hex[1], 16);
+  const low = parseInt(hex[2], 16);
+  return [high >> 8, high & 255, low >> 8, low & 255].join(".");
+}
+function isBlockedHost(host) {
+  const bare = host.startsWith("[") && host.endsWith("]") ? host.slice(1, -1) : host;
+  if (bare === "localhost" || bare === "0.0.0.0" || bare === "::")
+    return true;
+  if (bare.endsWith(".local") || bare.endsWith(".internal") || bare.endsWith(".localhost"))
+    return true;
+  if (/^127\./.test(bare))
+    return true;
+  if (/^10\./.test(bare))
+    return true;
+  if (/^192\.168\./.test(bare))
+    return true;
+  if (/^172\.(1[6-9]|2\d|3[01])\./.test(bare))
+    return true;
+  if (/^169\.254\./.test(bare))
+    return true;
+  const v6 = bare.toLowerCase();
+  if (v6 === "::1")
+    return true;
+  if (/^f[cd][0-9a-f]{2}:/.test(v6))
+    return true;
+  if (/^fe[89ab][0-9a-f]:/.test(v6))
+    return true;
+  const mapped = unmapIpv4(v6);
+  if (mapped)
+    return isBlockedHost(mapped);
+  return false;
+}
+function isSafeUrl(raw, options = {}) {
+  const protocols = options.protocols ?? ["http:", "https:"];
+  let url;
+  try {
+    url = new URL(raw);
+  } catch {
+    return false;
+  }
+  if (!protocols.includes(url.protocol))
+    return false;
+  return !isBlockedHost(url.hostname.toLowerCase());
+}
+function isSafeAudioUrl(raw) {
+  if (!isSafeUrl(raw, { protocols: ["https:"] }))
+    return false;
+  try {
+    const parsed = new URL(raw.trim());
+    const path = parsed.pathname.toLowerCase();
+    return path.endsWith(".wav") || path.endsWith(".mp3");
+  } catch {
+    return false;
+  }
+}
+var init_safeUrl = __esm({
+  "../shared-types/dist/safeUrl.js"() {
+    "use strict";
+  }
+});
+
 // ../../node_modules/.pnpm/dlv@1.1.3/node_modules/dlv/dist/dlv.es.js
 function dlv_es_default(t, e, l, n, r) {
   for (e = e.split ? e.split(".") : e, n = 0; n < e.length; n++) t = t ? t[e[n]] : r;
@@ -1407,9 +1481,10 @@ var AGENT_CONFIG_SCHEMA_VERSION, CHANGE_SET_VALIDATORS, DERIVED_SERIALIZE_RULES,
 var init_agentConfigSchema = __esm({
   "../shared-types/dist/agentConfigSchema.js"() {
     "use strict";
+    init_safeUrl();
     init_dlv_es();
     init_dist();
-    AGENT_CONFIG_SCHEMA_VERSION = "2026-05-20";
+    AGENT_CONFIG_SCHEMA_VERSION = "2026-10-23";
     CHANGE_SET_VALIDATORS = [
       // Catalog validation for enum-catalog model + language fields.
       // Skips silently when no catalogs are wired (legacy callers / tests).
@@ -1453,6 +1528,21 @@ var init_agentConfigSchema = __esm({
           }
         }
         return errors.length === 0 ? { valid: true } : { valid: false, errors };
+      },
+      (cfg, changes) => {
+        if (!changes.some((c) => c.key === "background_sound" || c.key === "background_sound_url"))
+          return { valid: true };
+        const errors = [];
+        const url = cfg.background_sound_url;
+        const mode = cfg.background_sound;
+        const hasUrl = typeof url === "string" && url.trim() !== "";
+        if (hasUrl && (url.length > 512 || !isSafeAudioUrl(url))) {
+          errors.push({ field: "background_sound_url", error: "Use a public https:// link to a .wav or .mp3 file (up to 512 characters)." });
+        }
+        if (mode === "custom" && !hasUrl) {
+          errors.push({ field: "background_sound_url", error: "Custom background sound needs a link to a .wav or .mp3 file." });
+        }
+        return errors.length === 0 ? { valid: true } : { valid: false, errors };
       }
     ];
     DERIVED_SERIALIZE_RULES = [
@@ -1718,6 +1808,7 @@ var init_agentConfigSchema = __esm({
       // ── Features ────────────────────────────────────────────────────────────
       { key: "transcriptionEnabled", label: "Transcription", description: "Generate text transcripts of calls.", default: true, type: { kind: "boolean" }, apiPath: "features.transcription_enabled", section: "features", editableIn: "both" },
       { key: "requireConsent", label: "Require Consent", description: "Ask caller for recording consent before proceeding.", default: true, type: { kind: "boolean" }, apiPath: "features.require_consent", section: "features", editableIn: "both" },
+      { key: "taskCallsEnabled", label: "Allow Task Calls", description: "Outside AI agents (MCP/API) can place one-off calls through this agent.", default: false, type: { kind: "boolean" }, apiPath: "features.task_calls_enabled", section: "features", editableIn: "both" },
       { key: "postCallSummaryEnabled", label: "Post-Call Summary", description: "Generate an AI summary after each call.", default: true, type: { kind: "boolean" }, apiPath: "post_call.summary.enabled", section: "features", editableIn: "both" },
       { key: "postCallSummaryPrompt", label: "Summary Prompt", description: "Custom prompt for post-call summary generation.", default: "Summarize the call in a few sentences: the caller's main reason for calling, what was discussed or resolved, and any agreed next steps.", type: { kind: "string", maxLength: 2e3 }, apiPath: "post_call.summary.prompt", section: "features", editableIn: "both" },
       { key: "postCallExtractionEnabled", label: "Post-Call Extraction", description: "Extract structured data from call transcripts.", default: false, type: { kind: "boolean" }, apiPath: "post_call.structured_extraction.prompt", section: "features", editableIn: "both" },
@@ -1748,7 +1839,7 @@ var init_agentConfigSchema = __esm({
       },
       // ── Runtime Timing ──────────────────────────────────────────────────────
       { key: "maxTurnLength", label: "Max Turn Length", description: "Maximum number of conversational turns.", default: 50, type: { kind: "number", min: 1, max: 200 }, apiPath: "advanced.maxTurnLength", section: "advanced", editableIn: "both" },
-      { key: "postSilenceHangup", label: "Post-Silence Hangup", description: "Hang up after this many seconds of silence.", default: 30, type: { kind: "number", min: 1, max: 6e4, unit: "s" }, apiPath: "advanced.postSilenceHangup", section: "advanced", editableIn: "both" },
+      { key: "postSilenceHangup", label: "Post-Silence Hangup", description: "Hang up after this many seconds of silence.", default: 60, type: { kind: "number", min: 1, max: 6e4, unit: "s" }, apiPath: "advanced.postSilenceHangup", section: "advanced", editableIn: "both" },
       { key: "silencePromptMaxCount", label: "Silence Check-ins", description: "How many times the agent checks on a silent caller before the silence goodbye.", default: 2, type: { kind: "number", min: 1, max: 3 }, apiPath: "advanced.silencePromptMaxCount", section: "advanced", editableIn: "both" },
       { key: "silenceHangupMessage", label: "Silence Goodbye", description: "Exact line spoken before a silence hangup. Leave empty to let the agent say a short goodbye in the caller's language.", default: "", type: { kind: "string", maxLength: 200 }, apiPath: "advanced.silenceHangupMessage", section: "advanced", editableIn: "both" },
       { key: "maxCallDuration", label: "Max Call Duration", description: "Hard limit on call length.", default: 600, type: { kind: "number", min: 30, max: 7200, unit: "s" }, apiPath: "advanced.maxCallDuration", section: "advanced", editableIn: "both" },
@@ -1773,7 +1864,10 @@ var init_agentConfigSchema = __esm({
       { key: "stt_keywords", label: "STT Keywords", description: "Comma-separated keywords to boost STT accuracy.", default: "", type: { kind: "string", maxLength: 1e3 }, apiPath: "advanced.stt_keywords", section: "advanced", editableIn: "both" },
       { key: "pronunciations", label: "Pronunciations", aliases: ["pronunciation", "pronounce", "say as", "how to say"], description: "Words the agent should say a specific way: each word with how to say it, plus optional IPA where the voice engine reads it.", default: [], type: { kind: "list-object", itemShape: [{ key: "word", type: { kind: "string", maxLength: 64 }, required: true }, { key: "say_as", type: { kind: "string", maxLength: 128 }, required: true }, { key: "ipa", type: { kind: "string", maxLength: 128 }, required: false }] }, apiPath: "advanced.pronunciations", section: "advanced", editableIn: "both" },
       { key: "stt_background_denoising", label: "Background Denoising", aliases: ["denoise", "noise suppression", "background noise"], description: "Server-side noise suppression on the inbound audio (Deepgram smart-format).", default: true, type: { kind: "boolean" }, apiPath: "advanced.stt_background_denoising", section: "advanced", editableIn: "both" },
-      { key: "noise_cancellation_krisp", label: "Krisp Noise Cancellation", aliases: ["krisp", "noise cancellation", "inbound denoising", "background voice"], description: "Transport-level inbound noise + background-voice cancellation (LiveKit Krisp). On by default for cloud calls; turn off to feed the raw caller audio to the recognizer.", default: true, type: { kind: "boolean" }, apiPath: "advanced.noise_cancellation_krisp", section: "advanced", editableIn: "both" },
+      { key: "voice_focus", label: "Voice Focus", aliases: ["krisp", "noise cancellation", "inbound denoising", "background voice", "voice focus", "noise_cancellation_krisp"], description: "Transport-level inbound speech isolation (RNNoise). Suppresses steady room noise before VAD and speech recognition; off by default.", default: "off", type: { kind: "enum", options: [{ value: "off", label: "Off" }, { value: "standard", label: "Standard" }] }, apiPath: "advanced.voice_focus", section: "advanced", editableIn: "both" },
+      { key: "background_sound", label: "Background Sound", aliases: ["ambience", "background audio", "office sound", "call ambience"], description: "Continuous low-volume ambient audio mixed under the agent voice on the outbound call track (`off`, built-in `office`, or `custom` URL).", default: "off", type: { kind: "enum", options: [{ value: "off", label: "Off" }, { value: "office", label: "Office" }, { value: "custom", label: "Custom URL" }] }, apiPath: "advanced.background_sound", section: "advanced", editableIn: "both" },
+      { key: "background_sound_volume", label: "Background Sound Volume", aliases: ["ambience volume", "office sound volume"], description: "Base linear gain for outbound background sound (0.00 to 0.40, default 0.15). Ducks automatically by 8 dB while the agent speaks.", default: 0.15, type: { kind: "number", min: 0, max: 0.4 }, apiPath: "advanced.background_sound_volume", section: "advanced", editableIn: "both" },
+      { key: "background_sound_url", label: "Background Sound URL", aliases: ["ambience url", "custom background sound url"], description: "Public HTTPS URL to a mono/stereo .wav or .mp3 file (3\u2013120 s, max 15 MB) used when background_sound is set to custom.", default: "", type: { kind: "string", maxLength: 512 }, apiPath: "advanced.background_sound_url", section: "advanced", editableIn: "both" },
       { key: "stt_eot_confidence", label: "End-of-Turn Confidence", description: "Deepgram Flux: how sure the model must be before deciding you finished speaking.", default: 0.7, type: { kind: "number", min: 0.5, max: 0.9 }, apiPath: "advanced.stt_eot_confidence", section: "advanced", editableIn: "both" },
       { key: "stt_eot_timeout_ms", label: "End-of-Turn Timeout", description: "Deepgram Flux: max silence before end-of-turn is forced.", default: 5e3, type: { kind: "number", min: 500, max: 1e4, unit: "ms" }, apiPath: "advanced.stt_eot_timeout_ms", section: "advanced", editableIn: "both" },
       { key: "stt_min_turn_silence_ms", label: "Min Turn Silence", description: "AssemblyAI: minimum silence before detecting end-of-turn when confident.", default: 160, type: { kind: "number", min: 0, max: 3e3, unit: "ms" }, apiPath: "advanced.stt_min_turn_silence_ms", section: "advanced", editableIn: "both" },
@@ -2151,6 +2245,8 @@ var init_flatDiff = __esm({
       "features.transcription_enabled": "transcriptionEnabled",
       "features.requireConsent": "requireConsent",
       "features.require_consent": "requireConsent",
+      "features.taskCallsEnabled": "taskCallsEnabled",
+      "features.task_calls_enabled": "taskCallsEnabled",
       "features.postCallSummaryEnabled": "postCallSummaryEnabled",
       "features.post_call_summary_enabled": "postCallSummaryEnabled",
       "features.postCallExtractionEnabled": "postCallExtractionEnabled",
@@ -2174,6 +2270,12 @@ var init_flatDiff = __esm({
       "stt.stt_keywords": "stt_keywords",
       "stt.background_denoising": "stt_background_denoising",
       "stt.stt_background_denoising": "stt_background_denoising",
+      "noise_cancellation_krisp": "voice_focus",
+      "advanced.noise_cancellation_krisp": "voice_focus",
+      "stt.voice_focus": "voice_focus",
+      "tts.background_sound": "background_sound",
+      "tts.background_sound_volume": "background_sound_volume",
+      "tts.background_sound_url": "background_sound_url",
       "stt.eot_confidence": "stt_eot_confidence",
       "stt.stt_eot_confidence": "stt_eot_confidence",
       "stt.eot_timeout_ms": "stt_eot_timeout_ms",
@@ -2310,6 +2412,8 @@ var init_pricing = __esm({
       "gpt-realtime-2.1": 0.096,
       "gpt-realtime-2.1-mini": 0.03,
       "gemini-3.8-live": 0.035,
+      "gemini-3.8-live-extended-thinking": 0.035,
+      // provisional: same list rates, thinking tokens extra
       "gpt-live-1": 0.06,
       // 0.05 voice layer + ~0.01 gpt-5.4-mini delegation backend
       "grok-voice-think-fast-2.0": 0.08,
@@ -2400,6 +2504,7 @@ var init_pricing = __esm({
       "llama-4-scout": 56e-5,
       "deepseek-v4-flash": 34e-5,
       "deepseek-v4-pro": 418e-5,
+      "grok-4.7": 64e-4,
       "grok-4-1-fast": 56e-5,
       "grok-3-mini": 64e-5,
       "grok-3-mini-fast": 48e-5,
@@ -2429,10 +2534,12 @@ var init_pricing = __esm({
       "Qwen/Qwen2.5-72B-Instruct": 22e-4,
       "deepseek-ai/DeepSeek-V3": 14e-4,
       "sarvam-30b": 10526e-8,
-      "sarvam-105b": 77053e-8,
-      "sarvam-105b-conversations": 77053e-8,
+      "sarvam-105b": 0.01024,
+      // measured 2026-10-25, see rates.py
+      "sarvam-105b-conversations": 0.01024,
       // TTS
       "aura-2": 0.027,
+      "flux-tts": 0.0405,
       "gemini-2.5-flash-preview-tts": 0.015,
       "gemini-3.1-flash-tts-preview": 0.015,
       "gpt-4o-mini-tts": 0.015,
@@ -2446,6 +2553,7 @@ var init_pricing = __esm({
       "inworld-tts-1": 5e-3,
       "speech-1.6": 0.015,
       "s2.1-pro": 0.020833,
+      "drama-3": 0.069444,
       "polly-neural": 0.012,
       "sonic-3.5": 0.037594,
       "sonic-3.6": 0.037594,
@@ -2466,7 +2574,9 @@ var init_pricing = __esm({
       "PlayDialogTurbo": 0.06,
       "speech-02-turbo": 0.024,
       "speech-02-hd": 0.04,
-      "bulbul:v3": 0.02842105
+      "bulbul:v3": 0.02842105,
+      // ₹2.00/1K chars PAYG, WebSocket (sarvam.ai/api-pricing, 2026-10-17) at ₹95/$, 900 chars/min.
+      "bulbul:v4-flash": 0.01894737
     };
   }
 });
@@ -2488,68 +2598,6 @@ var init_knowledge = __esm({
   }
 });
 
-// ../shared-types/dist/safeUrl.js
-var safeUrl_exports = {};
-__export(safeUrl_exports, {
-  isSafeUrl: () => isSafeUrl
-});
-function unmapIpv4(v6) {
-  const dotted = /^::ffff:(\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})$/.exec(v6);
-  if (dotted)
-    return dotted[1];
-  const hex = /^::ffff:([0-9a-f]{1,4}):([0-9a-f]{1,4})$/.exec(v6);
-  if (!hex)
-    return null;
-  const high = parseInt(hex[1], 16);
-  const low = parseInt(hex[2], 16);
-  return [high >> 8, high & 255, low >> 8, low & 255].join(".");
-}
-function isBlockedHost(host) {
-  const bare = host.startsWith("[") && host.endsWith("]") ? host.slice(1, -1) : host;
-  if (bare === "localhost" || bare === "0.0.0.0" || bare === "::")
-    return true;
-  if (bare.endsWith(".local") || bare.endsWith(".internal") || bare.endsWith(".localhost"))
-    return true;
-  if (/^127\./.test(bare))
-    return true;
-  if (/^10\./.test(bare))
-    return true;
-  if (/^192\.168\./.test(bare))
-    return true;
-  if (/^172\.(1[6-9]|2\d|3[01])\./.test(bare))
-    return true;
-  if (/^169\.254\./.test(bare))
-    return true;
-  const v6 = bare.toLowerCase();
-  if (v6 === "::1")
-    return true;
-  if (/^f[cd][0-9a-f]{2}:/.test(v6))
-    return true;
-  if (/^fe[89ab][0-9a-f]:/.test(v6))
-    return true;
-  const mapped = unmapIpv4(v6);
-  if (mapped)
-    return isBlockedHost(mapped);
-  return false;
-}
-function isSafeUrl(raw, options = {}) {
-  const protocols = options.protocols ?? ["http:", "https:"];
-  let url;
-  try {
-    url = new URL(raw);
-  } catch {
-    return false;
-  }
-  if (!protocols.includes(url.protocol))
-    return false;
-  return !isBlockedHost(url.hostname.toLowerCase());
-}
-var init_safeUrl = __esm({
-  "../shared-types/dist/safeUrl.js"() {
-    "use strict";
-  }
-});
-
 // ../shared-types/dist/agentTools.js
 var agentTools_exports = {};
 __export(agentTools_exports, {
@@ -3736,6 +3784,20 @@ var init_sttCapabilities = __esm({
 function resolveManagedPricePerMin(sku) {
   return sku.pricePerMin ?? 0;
 }
+function skuAllowsCountry(sku, country, strict) {
+  const allowed = sku.allowedCountries;
+  if (!allowed || allowed.length === 0)
+    return true;
+  if (!country)
+    return !strict;
+  return allowed.includes(country.toUpperCase());
+}
+function skuFeaturedInCountry(sku, country) {
+  const featured = sku.featuredCountries;
+  if (!featured || featured.length === 0)
+    return true;
+  return !!country && featured.includes(country.toUpperCase());
+}
 var init_managedAgentSkus = __esm({
   "../shared-types/dist/managedAgentSkus.js"() {
     "use strict";
@@ -7011,6 +7073,7 @@ __export(dist_exports, {
   isE164: () => isE164,
   isKnownSessionEndReason: () => isKnownSessionEndReason,
   isRealtimeModel: () => isRealtimeModel,
+  isSafeAudioUrl: () => isSafeAudioUrl,
   isSafeUrl: () => isSafeUrl,
   isSupportedCountry: () => isSupportedCountry2,
   isSupportedPhoneNumber: () => isSupportedPhoneNumber,
@@ -7034,6 +7097,7 @@ __export(dist_exports, {
   populatedFocusedStudioSections: () => populatedFocusedStudioSections,
   pronunciationSupport: () => pronunciationSupport,
   providerIdsForTool: () => providerIdsForTool,
+  providerRequiresExplicitVoice: () => providerRequiresExplicitVoice,
   publishRequiredKeys: () => publishRequiredKeys,
   readFocusedSectionField: () => readFocusedSectionField,
   readFromPayload: () => readFromPayload,
@@ -7047,6 +7111,8 @@ __export(dist_exports, {
   sanitizeTranscriptText: () => sanitizeTranscriptText,
   scalarContextKeys: () => scalarContextKeys,
   serializeSection: () => serializeSection,
+  skuAllowsCountry: () => skuAllowsCountry,
+  skuFeaturedInCountry: () => skuFeaturedInCountry,
   stackCostPerMin: () => stackCostPerMin,
   supportedCountry: () => supportedCountry,
   toSupportedE164: () => toSupportedE164,
@@ -7142,6 +7208,7 @@ var require_dist = __commonJS({
       keyAllowsTool: () => keyAllowsTool2,
       opsToolCatalog: () => opsToolCatalog2,
       resolveToolDisposition: () => resolveToolDisposition,
+      toolAnnotations: () => toolAnnotations2,
       withWorkspaceParam: () => withWorkspaceParam2
     });
     module2.exports = __toCommonJS2(index_exports);
@@ -7179,20 +7246,20 @@ var require_dist = __commonJS({
     var agentConfigFields = {
       system_prompt: import_zod.z.string().optional().describe("Full system prompt for the agent. If given without persona/playbook, the server auto-structures it."),
       voice: import_zod.z.string().optional().describe('Voice ID (e.g. "Aoede", "Charon"). Call list_llm_options for valid values. Leave empty for realtime LLMs and Deepgram TTS, which carry their own voice.'),
-      language: import_zod.z.string().optional().describe('Primary BCP-47 language tag (e.g. "hi-IN", "en-US").'),
-      supported_languages: import_zod.z.array(import_zod.z.string()).optional().describe('All BCP-47 languages the agent should handle, e.g. ["hi-IN","en-US"] for a bilingual agent. The primary `language` is added automatically if omitted here.'),
-      llm_provider: import_zod.z.enum(import_shared_types.AGENT_LLM_PROVIDERS).optional(),
-      llm_model: import_zod.z.string().optional().describe('LLM model id from list_llm_options (e.g. "gemini-2.5-flash", "sarvam-105b").'),
-      llm_fallback_provider: import_zod.z.string().nullable().optional().describe("Fallback LLM provider; null clears it."),
-      llm_fallback_model: import_zod.z.string().nullable().optional().describe("Fallback LLM model; null clears it."),
-      stt_provider: import_zod.z.string().optional().describe('Speech-to-text provider (e.g. "deepgram", "sarvam").'),
-      stt_model: import_zod.z.string().optional(),
-      stt_fallback_provider: import_zod.z.string().nullable().optional(),
-      stt_fallback_model: import_zod.z.string().nullable().optional(),
-      tts_provider: import_zod.z.string().optional().describe('Text-to-speech provider (e.g. "elevenlabs", "sarvam", "cartesia").'),
-      tts_model: import_zod.z.string().optional(),
-      tts_fallback_provider: import_zod.z.string().nullable().optional(),
-      tts_fallback_model: import_zod.z.string().nullable().optional(),
+      language: import_zod.z.string().optional().describe('Primary BCP-47 language tag (e.g. "hi-IN", "en-US"). For managed agents, must belong to the SKU\u2019s supported_languages.'),
+      supported_languages: import_zod.z.array(import_zod.z.string()).optional().describe('All BCP-47 languages the agent should handle, e.g. ["hi-IN","en-US"] for a bilingual custom agent. Fixed to [language] by the plan for managed agents.'),
+      llm_provider: import_zod.z.enum(import_shared_types.AGENT_LLM_PROVIDERS).optional().describe("LLM provider (custom agents only; fixed by the plan for managed agents)."),
+      llm_model: import_zod.z.string().optional().describe('LLM model id from list_llm_options (e.g. "gemini-2.5-flash", "sarvam-105b"). Fixed by the plan for managed agents.'),
+      llm_fallback_provider: import_zod.z.string().nullable().optional().describe("Fallback LLM provider; null clears it. Fixed by the plan for managed agents."),
+      llm_fallback_model: import_zod.z.string().nullable().optional().describe("Fallback LLM model; null clears it. Fixed by the plan for managed agents."),
+      stt_provider: import_zod.z.string().optional().describe('Speech-to-text provider (e.g. "deepgram", "sarvam"). Fixed by the plan for managed agents.'),
+      stt_model: import_zod.z.string().optional().describe("Speech-to-text model id. Fixed by the plan for managed agents."),
+      stt_fallback_provider: import_zod.z.string().nullable().optional().describe("Fallback STT provider. Fixed by the plan for managed agents."),
+      stt_fallback_model: import_zod.z.string().nullable().optional().describe("Fallback STT model. Fixed by the plan for managed agents."),
+      tts_provider: import_zod.z.string().optional().describe('Text-to-speech provider (e.g. "elevenlabs", "sarvam", "cartesia"). Fixed by the plan for managed agents.'),
+      tts_model: import_zod.z.string().optional().describe("Text-to-speech model id. Fixed by the plan for managed agents."),
+      tts_fallback_provider: import_zod.z.string().nullable().optional().describe("Fallback TTS provider. Fixed by the plan for managed agents."),
+      tts_fallback_model: import_zod.z.string().nullable().optional().describe("Fallback TTS model. Fixed by the plan for managed agents."),
       custom_llm_url: import_zod.z.string().nullable().optional().describe("Self-hosted LLM endpoint (https:// or wss://). Enterprise only; null clears."),
       custom_voice_url: import_zod.z.string().nullable().optional().describe("Self-hosted TTS endpoint (https:// or wss://). Enterprise only; null clears."),
       custom_voice_mode: import_zod.z.enum(["rymi", "openai-compat"]).optional().describe("Wire format for custom_voice_url."),
@@ -8255,7 +8322,7 @@ var require_dist = __commonJS({
     ];
     var import_zod11 = require("zod");
     var import_agentTools = (init_agentTools(), __toCommonJS(agentTools_exports));
-    var import_safeUrl2 = (init_safeUrl(), __toCommonJS(safeUrl_exports));
+    var import_safeUrl3 = (init_safeUrl(), __toCommonJS(safeUrl_exports));
     var DEFAULT_NAME = "call_webhook";
     var METHODS = ["GET", "POST", "PUT", "PATCH"];
     var FIELD_NAME = /^[a-zA-Z_][a-zA-Z0-9_]*$/;
@@ -8293,7 +8360,7 @@ var require_dist = __commonJS({
       const url = typeof s.url === "string" ? s.url.trim() : "";
       if (!url) errors.push("url is required.");
       else if (!/^https:\/\//i.test(url)) errors.push("url must be https \u2014 the request carries caller details.");
-      else if (!(0, import_safeUrl2.isSafeUrl)(url, { protocols: ["https:"] })) errors.push("url must be a valid public host; private and loopback addresses are refused at call time.");
+      else if (!(0, import_safeUrl3.isSafeUrl)(url, { protocols: ["https:"] })) errors.push("url must be a valid public host; private and loopback addresses are refused at call time.");
       if (!METHODS.includes(s.method)) errors.push(`method must be one of ${METHODS.join(", ")}.`);
       if (!Number.isInteger(b.timeout_ms) || b.timeout_ms < 1e3 || b.timeout_ms > 1e4) errors.push("timeout_ms must be an integer from 1000 to 10000.");
       const seen = /* @__PURE__ */ new Set();
@@ -8768,6 +8835,98 @@ var require_dist = __commonJS({
         run: (client, { account_id, user_id }) => client.accounts.members.remove(account_id, user_id)
       })
     ];
+    var import_zod16 = require("zod");
+    var returnField = import_zod16.z.object({
+      name: import_zod16.z.string().regex(/^[a-z][a-z0-9_]{0,39}$/).describe('snake_case field name, e.g. "booked"'),
+      description: import_zod16.z.string().min(1).max(300).describe("What the value means, for the extractor"),
+      type: import_zod16.z.enum(["string", "number", "boolean"]).optional().describe('Default "string"')
+    });
+    var IN_FLIGHT = /* @__PURE__ */ new Set(["queued", "initiated", "ringing", "in_progress", "active", "pending", "dialing"]);
+    var INTEL_DONE = /* @__PURE__ */ new Set(["completed", "partial", "skipped", "failed"]);
+    function isCallDone(call) {
+      if (!call.status || IN_FLIGHT.has(call.status)) return false;
+      if (call.status !== "completed") return true;
+      return INTEL_DONE.has(call.intelligence?.status ?? "");
+    }
+    var POLL_MS = 3e3;
+    var sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+    var taskCallTools = [
+      defineTool({
+        name: "place_task_call",
+        description: "WARNING: places a real, billable phone call. Places a real, billable call through an agent with task calls enabled. Use list_agents to find one (features.task_calls_enabled: true), then call wait_for_call with the returned call_id to get the results.",
+        scope: "agent",
+        risk: "sensitive",
+        routes: ["POST /v1/agents/:id/task-calls"],
+        keyScopes: ["calls:write"],
+        input: {
+          agent_id: import_zod16.z.string().describe("Agent with task calls enabled; find one with list_agents (features.task_calls_enabled: true)"),
+          to: import_zod16.z.string().regex(/^\+[1-9]\d{6,14}$/).describe("Number to call, strict E.164, e.g. +919812345678"),
+          on_behalf_of: import_zod16.z.string().min(1).max(120).describe("Business or person the call is for; spoken in the opener"),
+          instructions: import_zod16.z.string().min(1).max(4e3).describe("What the call must do, in plain words"),
+          return_fields: import_zod16.z.array(returnField).min(1).max(20).refine((fs) => new Set(fs.map((f) => f.name)).size === fs.length, "return_fields names must be unique").describe("Fields to extract from the call and return via wait_for_call"),
+          opening_line: import_zod16.z.string().min(1).max(300).optional().describe("First line spoken; defaults to the agent opener or an AI disclosure"),
+          from_number: import_zod16.z.string().optional().describe("Caller ID registered to the workspace; omit to use the agent's attached number")
+        },
+        run: async (client, p) => {
+          const res = await client.agents.placeTaskCall(p.agent_id, {
+            to: p.to,
+            on_behalf_of: p.on_behalf_of,
+            instructions: p.instructions,
+            return_fields: p.return_fields,
+            ...p.opening_line ? { opening_line: p.opening_line } : {},
+            ...p.from_number ? { from_number: p.from_number } : {}
+          });
+          return {
+            call_id: res?.call_id ?? res?.id,
+            agent_id: res?.agent_id ?? p.agent_id,
+            status: res?.status,
+            next: "Call wait_for_call with this call_id to get the summary and fields."
+          };
+        }
+      }),
+      defineTool({
+        name: "wait_for_call",
+        description: "Wait (up to timeout_s, default 90) for a call to finish and its post-call results to be ready, then return status, summary and the extracted fields. Returns done:false if still running \u2014 just call it again.",
+        scope: "agent",
+        risk: "read",
+        routes: ["GET /v1/calls/:id"],
+        keyScopes: ["calls:read"],
+        input: {
+          call_id: import_zod16.z.string().describe("The call ID from place_task_call or create_call"),
+          timeout_s: import_zod16.z.number().int().min(5).max(240).optional().describe("Max seconds to wait (5\u2013240, default 90)")
+        },
+        run: async (client, { call_id, timeout_s }) => {
+          const deadline = Date.now() + (timeout_s ?? 90) * 1e3;
+          let call = null;
+          for (; ; ) {
+            try {
+              call = await client.calls.retrieve(call_id);
+            } catch {
+            }
+            if (call && isCallDone(call)) {
+              return {
+                done: true,
+                call_id,
+                status: call.status,
+                end_reason: call.end_reason ?? null,
+                duration_seconds: call.bill_duration ?? call.duration_seconds ?? null,
+                summary: call.intelligence?.summary ?? null,
+                fields: call.intelligence?.structured_data ?? null,
+                intelligence_status: call.intelligence?.status ?? null
+              };
+            }
+            if (Date.now() + POLL_MS > deadline) break;
+            await sleep(POLL_MS);
+          }
+          return {
+            done: false,
+            call_id,
+            status: call?.status ?? "unknown",
+            note: "Still running \u2014 call wait_for_call again with the same call_id."
+          };
+        }
+      })
+    ];
     var import_agentTools2 = (init_agentTools(), __toCommonJS(agentTools_exports));
     var REDACTED = "[redacted]";
     function redactToolSecrets(value) {
@@ -8810,15 +8969,16 @@ var require_dist = __commonJS({
       ...publish(shareLinkTools),
       ...publish(workspaceTools),
       ...publish(complianceTools),
-      ...publish(accountTools)
+      ...publish(accountTools),
+      ...publish(taskCallTools)
     ];
     var names = /* @__PURE__ */ new Set();
     for (const tool of opsToolCatalog2) {
       if (names.has(tool.name)) throw new Error(`Duplicate ops tool name: ${tool.name}`);
       names.add(tool.name);
     }
-    var import_zod16 = require("zod");
-    var WORKSPACE = import_zod16.z.string().optional().describe("Act in this workspace, e.g. one of your client workspaces (id from list_workspaces). Default: the workspace this connection uses.");
+    var import_zod17 = require("zod");
+    var WORKSPACE = import_zod17.z.string().optional().describe("Act in this workspace, e.g. one of your client workspaces (id from list_workspaces). Default: the workspace this connection uses.");
     function withWorkspaceParam2(tool) {
       return {
         ...tool,
@@ -8829,6 +8989,26 @@ var require_dist = __commonJS({
         }
       };
     }
+    var DESTRUCTIVE_NAMES = /* @__PURE__ */ new Set([
+      "end_call",
+      "undo_agent_change",
+      "regenerate_share_link",
+      "rotate_campaign_intake"
+    ]);
+    var ACRONYMS = { dnc: "DNC", llm: "LLM" };
+    function titleOf(name) {
+      const words = name.split("_").map((w) => ACRONYMS[w] ?? w);
+      return words.join(" ").replace(/^./, (c) => c.toUpperCase());
+    }
+    function toolAnnotations2(tool) {
+      const readOnly = tool.risk === "read";
+      return {
+        title: titleOf(tool.name),
+        readOnlyHint: readOnly,
+        destructiveHint: !readOnly && (DESTRUCTIVE_NAMES.has(tool.name) || tool.routes.some((r) => r.startsWith("DELETE "))),
+        openWorldHint: !readOnly
+      };
+    }
   }
 });
 
@@ -8858,7 +9038,8 @@ function withToolErrors(handler) {
 // package.json
 var package_default = {
   name: "@rymi/mcp",
-  version: "2.8.1",
+  mcpName: "io.github.rymi-live/rymi-mcp",
+  version: "2.9.0",
   description: "Rymi MCP server \u2014 manage AI voice agents via Model Context Protocol",
   license: "MIT",
   author: "Rymi AI <engineering@rymi.live>",
@@ -8954,6 +9135,7 @@ async function createServer(apiKey2, options = {}) {
       tool.name,
       tool.description,
       tool.input,
+      (0, import_ops_tools.toolAnnotations)(tool),
       withToolErrors(async (params) => {
         const result2 = await tool.run(rymi, params);
         return { content: [{ type: "text", text: JSON.stringify(result2, null, 2) }] };

package/package.json

@@ -1,6 +1,7 @@
 {
   "name": "@rymi/mcp",
-  "version": "2.8.1",
+  "mcpName": "io.github.rymi-live/rymi-mcp",
+  "version": "2.9.0",
   "description": "Rymi MCP server — manage AI voice agents via Model Context Protocol",
   "license": "MIT",
   "author": "Rymi AI <engineering@rymi.live>",
@@ -44,7 +45,7 @@
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.11.1",
-    "@rymi/node": "^2.7.1",
+    "@rymi/node": "^2.7.2",
     "zod": "^3.23.0"
   },
   "devDependencies": {