@vellumai/assistant 0.7.3 → 0.8.1

package/src/approvals/guardian-request-resolvers.ts

@@ -13,8 +13,8 @@
 
 import { answerCall } from "../calls/call-domain.js";
 import { findContactChannel } from "../contacts/contact-store.js";
+import { upsertContactChannel } from "../contacts/contacts-write.js";
 import { findConversation } from "../daemon/conversation-store.js";
-import { emitFeedEvent } from "../home/emit-feed-event.js";
 import {
   type CanonicalGuardianRequest,
   getCanonicalGuardianRequest,
@@ -192,28 +192,15 @@ const pendingInteractionResolver: GuardianRequestResolver = {
       return { ok: false, reason: "pending_interaction_not_found" };
     }
 
-    // Resolve the interaction: remove from tracker and get the session.
-    const resolved = pendingInteractions.resolve(request.id);
-    if (!resolved) {
-      // Race condition: interaction was consumed between get() and resolve().
-      log.warn(
-        {
-          event: "resolver_tool_approval_resolve_race",
-          requestId: request.id,
-        },
-        "Tool approval resolver: pending interaction consumed between lookup and resolve",
-      );
-      return { ok: false, reason: "pending_interaction_race" };
-    }
-
     // Map action to the permission system's UserDecision type and notify session.
+    // resolveConfirmation() owns pendingInteractions deregistration.
     const userDecision: UserDecision =
       decision.action === "reject" ? "deny" : "allow";
-    const conversation = findConversation(resolved.conversationId);
+    const conversation = findConversation(interaction.conversationId);
     if (!conversation) {
       return {
         ok: false,
-        reason: `conversation_not_found: ${resolved.conversationId}`,
+        reason: `conversation_not_found: ${interaction.conversationId}`,
       };
     }
     conversation.handleConfirmationResponse(
@@ -225,21 +212,6 @@ const pendingInteractionResolver: GuardianRequestResolver = {
       ctx.emissionContext,
     );
 
-    const approved = decision.action !== "reject";
-    void emitFeedEvent({
-      source: "assistant",
-      title: approved ? "Tool Request Approved" : "Tool Request Denied",
-      summary: `${approved ? "Approved" : "Denied"} access to ${request.toolName ?? "unknown tool"}.`,
-      dedupKey: `guardian-approval:${request.id}`,
-      urgency: approved ? undefined : "medium",
-      detailPanel: { kind: "toolPermission" },
-    }).catch((err) => {
-      log.warn(
-        { err, requestId: request.id },
-        "Failed to emit guardian approval feed event",
-      );
-    });
-
     log.info(
       {
         event: "resolver_tool_approval_applied",
@@ -486,20 +458,6 @@ const accessRequestResolver: GuardianRequestResolver = {
         }
       }
 
-      void emitFeedEvent({
-        source: "assistant",
-        title: "Access Request Denied",
-        summary: `Denied access request.`,
-        dedupKey: `guardian-access:${request.id}`,
-        urgency: "medium",
-        detailPanel: { kind: "permissionChat" },
-      }).catch((err) => {
-        log.warn(
-          { err, requestId: request.id },
-          "Failed to emit access request feed event",
-        );
-      });
-
       return {
         ok: true,
         applied: true,
@@ -515,6 +473,21 @@ const accessRequestResolver: GuardianRequestResolver = {
     // a verification session. The caller is already on the line and the
     // relay server's in-call wait loop will detect the approved status.
     if (channel === "phone") {
+      try {
+        upsertContactChannel({
+          sourceChannel: "phone",
+          externalUserId: requesterExternalUserId,
+          externalChatId: requesterChatId,
+          status: "active",
+          policy: "allow",
+        });
+      } catch (err) {
+        log.error(
+          { err, requesterExternalUserId },
+          "Access request resolver: failed to activate voice caller as trusted contact",
+        );
+      }
+
       log.info(
         {
           event: "resolver_access_request_voice_approved",
@@ -525,20 +498,6 @@ const accessRequestResolver: GuardianRequestResolver = {
         "Access request resolver: voice approval — direct trusted-contact activation (no verification session)",
       );
 
-      void emitFeedEvent({
-        source: "assistant",
-        title: "Access Request Approved",
-        summary: `Granted access request.`,
-        dedupKey: `guardian-access:${request.id}`,
-        urgency: undefined,
-        detailPanel: { kind: "permissionChat" },
-      }).catch((err) => {
-        log.warn(
-          { err, requestId: request.id },
-          "Failed to emit access request feed event",
-        );
-      });
-
       return {
         ok: true,
         applied: true,
@@ -766,20 +725,6 @@ const accessRequestResolver: GuardianRequestResolver = {
       ? `Access approved for ${requesterLabel}. Give them this verification code: \`${session.secret}\`. The code expires in 10 minutes.`
       : `Access approved for ${requesterLabel}. Give them this verification code: \`${session.secret}\`. The code expires in 10 minutes. I could not notify them automatically, so please tell them to send the code manually.`;
 
-    void emitFeedEvent({
-      source: "assistant",
-      title: "Access Request Approved",
-      summary: `Granted access request.`,
-      dedupKey: `guardian-access:${request.id}`,
-      urgency: undefined,
-      detailPanel: { kind: "permissionChat" },
-    }).catch((err) => {
-      log.warn(
-        { err, requestId: request.id },
-        "Failed to emit access request feed event",
-      );
-    });
-
     return {
       ok: true,
       applied: true,
@@ -853,20 +798,6 @@ const toolGrantRequestResolver: GuardianRequestResolver = {
         }
       }
 
-      void emitFeedEvent({
-        source: "assistant",
-        title: "Tool Grant Denied",
-        summary: `Denied grant request for ${request.toolName ?? "unknown tool"}.`,
-        dedupKey: `guardian-grant:${request.id}`,
-        urgency: "medium",
-        detailPanel: { kind: "toolPermission" },
-      }).catch((err) => {
-        log.warn(
-          { err, requestId: request.id },
-          "Failed to emit tool grant denial feed event",
-        );
-      });
-
       return { ok: true, applied: true };
     }
 
@@ -964,20 +895,6 @@ const toolGrantRequestResolver: GuardianRequestResolver = {
       }
     }
 
-    void emitFeedEvent({
-      source: "assistant",
-      title: "Tool Grant Approved",
-      summary: `Approved grant request for ${request.toolName ?? "unknown tool"}.`,
-      dedupKey: `guardian-grant:${request.id}`,
-      urgency: undefined,
-      detailPanel: { kind: "toolPermission" },
-    }).catch((err) => {
-      log.warn(
-        { err, requestId: request.id },
-        "Failed to emit tool grant approval feed event",
-      );
-    });
-
     return { ok: true, applied: true, grantMinted: false };
   },
 };

package/src/calls/call-constants.ts

@@ -1,14 +1,7 @@
 import { getConfig } from "../config/loader.js";
 
 // Emergency/high-risk numbers that should never be called
-const DENIED_NUMBERS = new Set([
-  "911",
-  "112",
-  "999",
-  "000",
-  "110",
-  "119",
-]);
+const DENIED_NUMBERS = new Set(["911", "112", "999", "000", "110", "119"]);
 
 /**
  * Check whether a phone number is a denied emergency number.
@@ -75,3 +68,7 @@ export function getGuardianWaitUpdateSteadyMaxIntervalMs(): number {
 export function getSilenceTimeoutMs(): number {
   return 30 * 1000; // 30 seconds
 }
+
+export function getEndCallListenWindowMs(): number {
+  return 15 * 1000;
+}

package/src/calls/call-controller.ts

@@ -26,6 +26,7 @@ import type { TtsProvider, TtsProviderId } from "../tts/types.js";
 import { getLogger } from "../util/logger.js";
 import { createStreamingEntry } from "./audio-store.js";
 import {
+  getEndCallListenWindowMs,
   getMaxCallDurationMs,
   getSilenceTimeoutMs,
   getUserConsultationTimeoutMs,
@@ -37,6 +38,7 @@ import {
   registerCallController,
   unregisterCallController,
 } from "./call-state.js";
+import { isTerminalState } from "./call-state-machine.js";
 import {
   createPendingQuestion,
   expirePendingQuestions,
@@ -93,6 +95,7 @@ export class CallController {
   private currentTurnPromise: Promise<void> | null = null;
   private destroyed = false;
   private silenceTimer: ReturnType<typeof setTimeout> | null = null;
+  private endCallListenTimer: ReturnType<typeof setTimeout> | null = null;
   private durationTimer: ReturnType<typeof setTimeout> | null = null;
   private durationWarningTimer: ReturnType<typeof setTimeout> | null = null;
   /**
@@ -244,6 +247,8 @@ export class CallController {
     transcript: string,
     speaker?: PromptSpeakerContext,
   ): Promise<void> {
+    this.cancelPendingEndCall();
+
     const interruptedInFlight =
       this.state === "processing" || this.state === "speaking";
     // If we're already processing or speaking, abort the in-flight generation
@@ -295,6 +300,8 @@ export class CallController {
       return false;
     }
 
+    this.cancelPendingEndCall();
+
     // Clear the consultation timeout and record
     clearTimeout(this.pendingGuardianInput.timer);
     this.pendingGuardianInput = null;
@@ -326,6 +333,8 @@ export class CallController {
    * position once the current turn completes.
    */
   async handleUserInstruction(instructionText: string): Promise<void> {
+    this.cancelPendingEndCall();
+
     recordCallEvent(this.callSessionId, "user_instruction_relayed", {
       instruction: instructionText,
     });
@@ -408,6 +417,7 @@ export class CallController {
   destroy(): void {
     this.destroyed = true;
     if (this.silenceTimer) clearTimeout(this.silenceTimer);
+    if (this.endCallListenTimer) clearTimeout(this.endCallListenTimer);
     if (this.durationTimer) clearTimeout(this.durationTimer);
     if (this.durationWarningTimer) clearTimeout(this.durationWarningTimer);
     if (this.pendingGuardianInput) {
@@ -419,6 +429,7 @@ export class CallController {
       this.durationEndTimer = null;
     }
     this.pendingInstructions = [];
+    this.endCallListenTimer = null;
     this.llmRunVersion++;
     this.abortCurrentTurn();
     if (this.activeSynthesisAbort) {
@@ -1075,73 +1086,7 @@ export class CallController {
 
     // Check for END_CALL marker
     if (responseText.includes(END_CALL_MARKER)) {
-      // Clear any pending consultation before completing the call.
-      // Without this, the consultation timeout can fire on an already-ended
-      // call, overwriting 'completed' status back to 'in_progress' and
-      // starting a new LLM turn on a dead conversation. Similarly, a late
-      // handleUserAnswer could be accepted since pendingGuardianInput is
-      // still non-null.
-      if (this.pendingGuardianInput) {
-        clearTimeout(this.pendingGuardianInput.timer);
-
-        // Expire store-side consultation records so clients don't observe
-        // a completed call with a dangling pendingQuestion, and guardian
-        // replies are cleanly rejected instead of hitting answerCall failures.
-        expirePendingQuestions(this.callSessionId);
-        const previousRequest = getPendingCanonicalRequestByCallSessionId(
-          this.callSessionId,
-        );
-        if (previousRequest) {
-          expireCanonicalGuardianRequest(previousRequest.id);
-        }
-
-        this.pendingGuardianInput = null;
-      }
-
-      const currentSession = getCallSession(this.callSessionId);
-      const shouldNotifyCompletion = currentSession
-        ? currentSession.status !== "completed" &&
-          currentSession.status !== "failed" &&
-          currentSession.status !== "cancelled"
-        : false;
-
-      this.transport.endSession("Call completed");
-      updateCallSession(this.callSessionId, {
-        status: "completed",
-        endedAt: Date.now(),
-      });
-      recordCallEvent(this.callSessionId, "call_ended", {
-        reason: "completed",
-      });
-
-      // Notify the voice conversation
-      if (shouldNotifyCompletion && currentSession) {
-        finalizeCall(this.callSessionId, currentSession.conversationId);
-      }
-
-      // Post a pointer message in the initiating conversation
-      if (currentSession?.initiatedFromConversationId) {
-        const durationMs = currentSession.startedAt
-          ? Date.now() - currentSession.startedAt
-          : 0;
-        addPointerMessage(
-          currentSession.initiatedFromConversationId,
-          "completed",
-          currentSession.toNumber,
-          {
-            duration: durationMs > 0 ? formatDuration(durationMs) : undefined,
-          },
-        ).catch((err) => {
-          log.warn(
-            {
-              conversationId: currentSession.initiatedFromConversationId,
-              err,
-            },
-            "Skipping pointer write — origin conversation may no longer exist",
-          );
-        });
-      }
-      this.state = "idle";
+      this.scheduleEndCallAfterListenWindow();
       return;
     }
 
@@ -1153,6 +1098,124 @@ export class CallController {
     this.flushPendingInstructions();
   }
 
+  private scheduleEndCallAfterListenWindow(): void {
+    const currentSession = getCallSession(this.callSessionId);
+    if (currentSession && isTerminalState(currentSession.status)) {
+      this.state = "idle";
+      this.currentTurnHandle = null;
+      return;
+    }
+
+    const clearedPendingGuardianInput =
+      this.clearPendingGuardianInputForCallEnd();
+    this.state = "idle";
+    this.currentTurnHandle = null;
+
+    if (this.endCallListenTimer) {
+      clearTimeout(this.endCallListenTimer);
+      this.endCallListenTimer = null;
+    }
+
+    const listenWindowMs = getEndCallListenWindowMs();
+    const callContinues =
+      this.pendingInstructions.length > 0 || listenWindowMs > 0;
+    if (clearedPendingGuardianInput && callContinues) {
+      updateCallSession(this.callSessionId, { status: "in_progress" });
+    }
+
+    if (this.pendingInstructions.length > 0) {
+      this.flushPendingInstructions();
+      return;
+    }
+
+    if (listenWindowMs <= 0) {
+      this.completeCallFromEndMarker();
+      return;
+    }
+
+    this.resetSilenceTimer();
+    this.endCallListenTimer = setTimeout(() => {
+      this.endCallListenTimer = null;
+      this.completeCallFromEndMarker();
+    }, listenWindowMs);
+  }
+
+  private cancelPendingEndCall(): void {
+    if (!this.endCallListenTimer) return;
+    clearTimeout(this.endCallListenTimer);
+    this.endCallListenTimer = null;
+  }
+
+  private clearPendingGuardianInputForCallEnd(): boolean {
+    if (!this.pendingGuardianInput) return false;
+
+    clearTimeout(this.pendingGuardianInput.timer);
+
+    // Expire store-side consultation records so clients don't observe
+    // a completed call with a dangling pendingQuestion, and guardian
+    // replies are cleanly rejected instead of hitting answerCall failures.
+    expirePendingQuestions(this.callSessionId);
+    const previousRequest = getPendingCanonicalRequestByCallSessionId(
+      this.callSessionId,
+    );
+    if (previousRequest) {
+      expireCanonicalGuardianRequest(previousRequest.id);
+    }
+
+    this.pendingGuardianInput = null;
+    return true;
+  }
+
+  private completeCallFromEndMarker(): void {
+    if (this.destroyed) return;
+
+    const currentSession = getCallSession(this.callSessionId);
+    if (currentSession && isTerminalState(currentSession.status)) {
+      this.state = "idle";
+      return;
+    }
+
+    const shouldNotifyCompletion = !!currentSession;
+
+    this.transport.endSession("Call completed");
+    updateCallSession(this.callSessionId, {
+      status: "completed",
+      endedAt: Date.now(),
+    });
+    recordCallEvent(this.callSessionId, "call_ended", {
+      reason: "completed",
+    });
+
+    // Notify the voice conversation
+    if (shouldNotifyCompletion && currentSession) {
+      finalizeCall(this.callSessionId, currentSession.conversationId);
+    }
+
+    // Post a pointer message in the initiating conversation
+    if (currentSession?.initiatedFromConversationId) {
+      const durationMs = currentSession.startedAt
+        ? Date.now() - currentSession.startedAt
+        : 0;
+      addPointerMessage(
+        currentSession.initiatedFromConversationId,
+        "completed",
+        currentSession.toNumber,
+        {
+          duration: durationMs > 0 ? formatDuration(durationMs) : undefined,
+        },
+      ).catch((err) => {
+        log.warn(
+          {
+            conversationId: currentSession.initiatedFromConversationId,
+            err,
+          },
+          "Skipping pointer write — origin conversation may no longer exist",
+        );
+      });
+    }
+    this.state = "idle";
+  }
+
   private isExpectedAbortError(err: unknown): boolean {
     if (!(err instanceof Error)) return false;
     return err.name === "AbortError" || err.name === "APIUserAbortError";

package/src/calls/relay-server.ts

@@ -66,6 +66,8 @@ import {
 } from "./speaker-identification.js";
 
 const log = getLogger("relay-server");
+const UUID_SHAPED_NAME =
+  /^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$/;
 
 // ── ConversationRelay message types ──────────────────────────────────
 
@@ -610,6 +612,12 @@ export class RelayConnection {
         );
         this.startNameCapture(outcome.assistantId, outcome.fromNumber);
         return;
+      case "unverified_caller":
+        await this.handleUnverifiedCaller(
+          outcome.displayName,
+          outcome.isGuardian,
+        );
+        return;
       case "verification":
         if (this.controller && resolved.actorTrust.trustClass !== "unknown") {
           this.controller.setTrustContext(
@@ -667,6 +675,35 @@ export class RelayConnection {
     });
   }
 
+  /** Speak verification guidance to a known-but-unverified caller, then disconnect. */
+  private async handleUnverifiedCaller(
+    displayName: string,
+    isGuardian: boolean,
+  ): Promise<void> {
+    recordCallEvent(this.callSessionId, "inbound_acl_unverified_caller", {
+      callSessionId: this.callSessionId,
+      isGuardian,
+    });
+    this.connectionState = "disconnecting";
+    updateCallSession(this.callSessionId, {
+      status: "failed",
+      endedAt: Date.now(),
+      lastError: "Inbound voice ACL: caller channel unverified",
+    });
+    const action = isGuardian
+      ? `To verify, open your assistant's contacts page, click Verify next to the phone channel, ` +
+        `and follow the prompts. Then call back once the verification session is active.`
+      : `Please reach out to the account guardian to start a new verification session, ` +
+        `then call back once the verification session is active.`;
+    const message =
+      `This number is registered as ${displayName}'s phone but has not been verified yet. ` +
+      action;
+    await speakSystemPrompt(this, message);
+    setTimeout(() => {
+      this.endSession("Inbound voice ACL: caller channel unverified");
+    }, getTtsPlaybackDelayMs());
+  }
+
   /** Deny an inbound call with a TTS message and schedule disconnect. */
   private async denyInboundCall(
     from: string,
@@ -1615,7 +1652,11 @@ export class RelayConnection {
   private resolveAssistantLabel(): string | null {
     try {
       const name = getAssistantName();
-      return name?.trim() || null;
+      const trimmedName = name?.trim();
+      if (!trimmedName || UUID_SHAPED_NAME.test(trimmedName)) {
+        return null;
+      }
+      return trimmedName;
     } catch {
       return null;
     }

package/src/calls/relay-setup-router.ts

@@ -56,6 +56,13 @@ type SetupOutcome =
       guardianName: string | null;
     }
   | { action: "name_capture"; assistantId: string; fromNumber: string }
+  | {
+      action: "unverified_caller";
+      assistantId: string;
+      fromNumber: string;
+      displayName: string;
+      isGuardian: boolean;
+    }
   | { action: "deny"; message: string; logReason: string };
 
 // ── Resolved context produced alongside the outcome ──────────────────
@@ -234,6 +241,35 @@ export function routeSetup(ctx: SetupContext): {
       };
     }
 
+    // Known caller whose channel hasn't passed verification yet —
+    // mirrors the gateway's pre-intercept (twilio-voice-webhook.ts) so
+    // calls slipping past it (e.g. canonicalization mismatch between
+    // gateway and assistant DBs) still get useful guidance instead of
+    // the "I don't recognize this number" name-capture script.
+    const unverifiedStatuses = new Set(["unverified", "pending"]);
+    const memberChannel = actorTrust.memberRecord?.channel;
+    if (memberChannel && unverifiedStatuses.has(memberChannel.status)) {
+      log.info(
+        {
+          callSessionId: ctx.callSessionId,
+          from: ctx.from,
+          channelId: memberChannel.id,
+          channelStatus: memberChannel.status,
+        },
+        "Inbound voice ACL: known but unverified caller — returning verification guidance",
+      );
+      return {
+        outcome: {
+          action: "unverified_caller",
+          assistantId,
+          fromNumber: ctx.from,
+          displayName: actorTrust.memberRecord!.contact.displayName,
+          isGuardian: actorTrust.memberRecord!.contact.role === "guardian",
+        },
+        resolved,
+      };
+    }
+
     // Unknown caller — name capture flow
     log.info(
       {

package/src/calls/types.ts

@@ -33,6 +33,7 @@ export type CallEventType =
   | "inbound_acl_name_capture_started"
   | "inbound_acl_name_captured"
   | "inbound_acl_name_capture_timeout"
+  | "inbound_acl_unverified_caller"
   | "inbound_acl_access_approved"
   | "inbound_acl_access_denied"
   | "inbound_acl_access_timeout"

package/src/calls/voice-session-bridge.ts

@@ -233,7 +233,7 @@ function buildVoiceCallControlPrompt(opts: {
       );
     } else {
       lines.push(
-        '7. If the latest user turn is "(call connected — deliver opening greeting)", this is an inbound call you are answering (not a call you initiated). Greet the caller warmly and ask how you can help. Introduce yourself once at the start using your assistant name if you know it (for example: "Hey there, this is Ava, Sam\'s assistant. How can I help?"). If your assistant name is not known, skip the name and just identify yourself as the guardian\'s assistant. Do NOT say "I\'m calling" or "I\'m calling on behalf of". Vary the wording; do not use a fixed template.',
+        '7. If the latest user turn is "(call connected — deliver opening greeting)", this is an inbound call you are answering (not a call you initiated). Greet the caller warmly and ask how you can help. Introduce yourself once at the start using your assistant name if you know it (for example: "Hey there, this is Ava, Sam\'s assistant. How can I help?"). If your assistant name is not known, skip the name and just identify yourself as the guardian\'s assistant. Never use a UUID-shaped internal assistant ID as your spoken name. Do NOT say "I\'m calling" or "I\'m calling on behalf of". Vary the wording; do not use a fixed template.',
       );
     }
     lines.push(
@@ -293,7 +293,11 @@ export async function startVoiceTurn(
     onMessageComplete: (msg) => {
       opts.onComplete?.();
       opts.callbacks?.message_complete?.(msg);
-      if (msg.type === "message_complete" && msg.messageId) {
+      if (
+        msg.type === "message_complete" &&
+        msg.messageId &&
+        msg.source !== "aux"
+      ) {
         try {
           opts.callbacks?.persisted_assistant_message_id?.(msg.messageId);
         } catch (err) {
@@ -314,7 +318,8 @@ export async function startVoiceTurn(
 
   // Phone voice has no interactive permission/secret UI, so apply explicit
   // per-role policies by default. Local live voice opts into the normal
-  // client approval path instead.
+  // client approval path instead. Side-effect double-defense is wired
+  // below at the conversation-configure point.
   const trustClass = opts.trustContext?.trustClass;
   const isGuardian = trustClass === "guardian";
   const approvalMode = opts.approvalMode ?? "phone-call";
@@ -386,7 +391,13 @@ export async function startVoiceTurn(
     }
   }
 
-  // Configure conversation for this voice turn
+  // Non-guardian phone voice forces side-effect tools to prompt so the
+  // auto-deny handler below reliably sees a confirmation_request. Without
+  // this, a broad allow trust rule (e.g. wildcard bash) would let
+  // side-effect tools execute without ever emitting an event for the
+  // auto-deny / scoped-grant handler to intercept.
+  conversation.forcePromptSideEffects =
+    !isGuardian && !usesLocalInteractiveApprovals;
   conversation.setAssistantId(opts.assistantId ?? DAEMON_INTERNAL_ASSISTANT_ID);
   conversation.callSessionId = voiceSessionId;
   conversation.setTrustContext(opts.trustContext ?? null);
@@ -528,7 +539,14 @@ export async function startVoiceTurn(
         return;
       }
     } else if (msg.type === "secret_request") {
-      // Voice has no secret-entry UI, so resolve immediately
+      if (usesLocalInteractiveApprovals) {
+        // Local live voice runs alongside the desktop client, which has a
+        // secret-entry UI (SecretPromptManager). Forward the broadcast and
+        // let the prompter's existing registration handle the response.
+        broadcastMessage(msg);
+        return;
+      }
+      // Phone voice has no secret-entry UI, so resolve immediately.
       log.info(
         { turnId, service: msg.service, field: msg.field },
         "Auto-resolving secret request for voice turn (no secret-entry UI)",
@@ -549,6 +567,7 @@ export async function startVoiceTurn(
     conversation.setAssistantId("self");
     conversation.setVoiceCallControlPrompt(null);
     conversation.callSessionId = undefined;
+    conversation.forcePromptSideEffects = false;
     // Reset the conversation's client callback to a no-op so the stale
     // closure doesn't intercept events from future turns on the same conversation.
     conversation.updateClient(() => {}, true);