@voicelayer/sdk 0.1.11 → 0.2.0

package/dist/index.d.ts

@@ -1,8 +1,11 @@
-import { A as AgentDTO, a as AgentStatus, b as AgentEnvironment, P as ProcessSchemaDTO, c as AgentContext, d as Participant, C as CallInfo } from './text-session-D1j8nQac.js';
-export { e as AgentTurnEvent, f as AudioProfile, g as AudioSurface, h as ChannelKind, D as DtmfEvent, i as DtmfHandler, E as EndCallControllerHandle, j as EndCallOutcome, F as FakeSessionAdapter, k as FloorControlConfig, I as InboundOptions, L as LK_AGENT_STATE_MAP, M as MemoryHandle, l as MetricsEvent, N as NON_BUSY_STATES, m as ParticipantId, n as ParticipantKind, o as ParticipantSet, p as ProcessSnapshot, R as RespondOptions, q as Room, r as RouteEntry, s as RoutingRule, t as RoutingSnapshot, u as RunTextSessionOptions, v as RunTextTranscriptOptions, S as SayOptions, w as SendDtmfOptions, x as SessionAdapter, y as SessionCapabilities, z as SessionErrorEvent, B as SessionEvent, G as SessionEventMap, H as SessionFactory, J as SessionFactoryInput, K as SessionOutbound, O as SessionState, Q as SpeechResult, T as SpeechTarget, U as StateChangeEvent, V as TextSession, W as TextTranscriptResult, X as TtsVoiceConfig, Y as TurnEvent, Z as Unsubscribe, _ as UserInputEvent, $ as UserTurn, a0 as applySpeechTurnHandling, a1 as dtmfCodeToDigit, a2 as dtmfDigitToCode, a3 as duck, a4 as mute, a5 as normalizeState, m as participantId, a6 as passthrough, a7 as runTextSession, a8 as runTextTranscript, a9 as transform } from './text-session-D1j8nQac.js';
-import { z, ZodType } from 'zod';
+import { A as AgentDTO, a as AgentStatus, b as AgentEnvironment, c as AgentContext, P as Participant, C as CallInfo, d as ProcessSchemaDTO } from './text-session-BqMWaNsN.js';
+export { e as AgentTurnEvent, f as AudioProfile, g as AudioSurface, h as ChannelKind, D as DtmfEvent, i as DtmfHandler, E as EndCallControllerHandle, j as EndCallOutcome, F as FakeSessionAdapter, k as FloorControlConfig, I as InboundOptions, L as LK_AGENT_STATE_MAP, M as MemoryHandle, l as MetricsEvent, N as NON_BUSY_STATES, m as ParticipantId, n as ParticipantKind, o as ParticipantSet, p as ProcessSnapshot, R as RespondOptions, q as Room, r as RouteEntry, s as RoutingRule, t as RoutingSnapshot, u as RunTextSessionOptions, v as RunTextTranscriptOptions, S as SayOptions, w as SendDtmfOptions, x as SessionAdapter, y as SessionCapabilities, z as SessionErrorEvent, B as SessionEvent, G as SessionEventMap, H as SessionFactory, J as SessionFactoryInput, K as SessionOutbound, O as SessionState, Q as SpeechResult, T as SpeechTarget, U as StateChangeEvent, V as TextSession, W as TextTranscriptResult, X as TtsVoiceConfig, Y as TurnEvent, Z as Unsubscribe, _ as UserInputEvent, $ as UserStateEvent, a0 as UserTurn, a1 as applySpeechTurnHandling, a2 as dtmfCodeToDigit, a3 as dtmfDigitToCode, a4 as duck, a5 as mute, a6 as normalizeState, m as participantId, a7 as passthrough, a8 as runTextSession, a9 as runTextTranscript, aa as transform } from './text-session-BqMWaNsN.js';
 import { llm } from '@livekit/agents';
-import { Redis } from 'ioredis';
+import { z, ZodType } from 'zod';
+import { OnQuery, BrainTransport } from './brain/index.js';
+export { BrainCallMetadata, BrainCapabilities, BrainChunk, BrainConfigError, BrainEndpointConfig, BrainMessage, BrainPubSub, BrainRequest, BrainRequestError, ConnectorChatModel, ConnectorChatModelOptions, ConnectorLLMOptions, IncomingBrainRequest, OnQueryContext, OnQueryResult, RedisBrainPubSub, SseDelta, TunnelBrainTransportOptions, assertPublicHttpsUrl, buildRedisBrainPubSub, callbackTransport, createConnectorLLM, httpBrainTransport, parseChatCompletionSse, runBrainRequest, tunnelBrainTransport } from './brain/index.js';
+import 'openai';
+import 'ioredis';
 
 /**
  * The plan itself. Everything the agent needs to run the call without the
@@ -27,6 +30,60 @@ declare const CallPlan: z.ZodObject<{
         displayName?: string | undefined;
     }>;
     draftConfig: z.ZodDefault<z.ZodObject<{
+        stt: z.ZodOptional<z.ZodOptional<z.ZodObject<{
+            provider: z.ZodEnum<["deepgram", "cartesia", "assemblyai"]>;
+            model: z.ZodOptional<z.ZodString>;
+            language: z.ZodOptional<z.ZodString>;
+            endOfTurnConfidence: z.ZodOptional<z.ZodNumber>;
+            endOfTurnTimeoutMs: z.ZodOptional<z.ZodNumber>;
+            keywords: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        }, "strip", z.ZodTypeAny, {
+            provider: "deepgram" | "cartesia" | "assemblyai";
+            model?: string | undefined;
+            language?: string | undefined;
+            endOfTurnConfidence?: number | undefined;
+            endOfTurnTimeoutMs?: number | undefined;
+            keywords?: string[] | undefined;
+        }, {
+            provider: "deepgram" | "cartesia" | "assemblyai";
+            model?: string | undefined;
+            language?: string | undefined;
+            endOfTurnConfidence?: number | undefined;
+            endOfTurnTimeoutMs?: number | undefined;
+            keywords?: string[] | undefined;
+        }>>>;
+        realtime: z.ZodOptional<z.ZodOptional<z.ZodObject<{
+            provider: z.ZodEnum<["openai", "google"]>;
+            model: z.ZodString;
+            voice: z.ZodOptional<z.ZodString>;
+            temperature: z.ZodOptional<z.ZodNumber>;
+        }, "strip", z.ZodTypeAny, {
+            provider: "openai" | "google";
+            model: string;
+            voice?: string | undefined;
+            temperature?: number | undefined;
+        }, {
+            provider: "openai" | "google";
+            model: string;
+            voice?: string | undefined;
+            temperature?: number | undefined;
+        }>>>;
+        voice: z.ZodOptional<z.ZodObject<{
+            provider: z.ZodEnum<["deepgram", "elevenlabs", "openai", "cartesia"]>;
+            voiceId: z.ZodString;
+            model: z.ZodOptional<z.ZodString>;
+            rate: z.ZodOptional<z.ZodNumber>;
+        }, "strip", z.ZodTypeAny, {
+            provider: "deepgram" | "elevenlabs" | "openai" | "cartesia";
+            voiceId: string;
+            model?: string | undefined;
+            rate?: number | undefined;
+        }, {
+            provider: "deepgram" | "elevenlabs" | "openai" | "cartesia";
+            voiceId: string;
+            model?: string | undefined;
+            rate?: number | undefined;
+        }>>;
         source: z.ZodOptional<z.ZodOptional<z.ZodEnum<["sdk", "flow", "playbook", "connector"]>>>;
         name: z.ZodOptional<z.ZodString>;
         triggers: z.ZodOptional<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
@@ -68,11 +125,11 @@ declare const CallPlan: z.ZodObject<{
                 kind: z.ZodLiteral<"say">;
                 text: z.ZodString;
             }, "strip", z.ZodTypeAny, {
-                kind: "say";
                 text: string;
-            }, {
                 kind: "say";
+            }, {
                 text: string;
+                kind: "say";
             }>]>;
             onlyWhile: z.ZodOptional<z.ZodString>;
         }, "strip", z.ZodTypeAny, {
@@ -81,8 +138,8 @@ declare const CallPlan: z.ZodObject<{
             } | {
                 kind: "endCall";
             } | {
-                kind: "say";
                 text: string;
+                kind: "say";
             };
             on: {
                 kind: "regex";
@@ -99,8 +156,8 @@ declare const CallPlan: z.ZodObject<{
             } | {
                 kind: "endCall";
             } | {
-                kind: "say";
                 text: string;
+                kind: "say";
             };
             on: {
                 kind: "regex";
@@ -143,62 +200,8 @@ declare const CallPlan: z.ZodObject<{
             topP?: number | undefined;
         }>>;
         language: z.ZodOptional<z.ZodDefault<z.ZodString>>;
-        voice: z.ZodOptional<z.ZodObject<{
-            provider: z.ZodEnum<["deepgram", "elevenlabs", "openai", "cartesia"]>;
-            voiceId: z.ZodString;
-            model: z.ZodOptional<z.ZodString>;
-            rate: z.ZodOptional<z.ZodNumber>;
-        }, "strip", z.ZodTypeAny, {
-            provider: "deepgram" | "elevenlabs" | "openai" | "cartesia";
-            voiceId: string;
-            model?: string | undefined;
-            rate?: number | undefined;
-        }, {
-            provider: "deepgram" | "elevenlabs" | "openai" | "cartesia";
-            voiceId: string;
-            model?: string | undefined;
-            rate?: number | undefined;
-        }>>;
-        realtime: z.ZodOptional<z.ZodOptional<z.ZodObject<{
-            provider: z.ZodEnum<["openai", "google"]>;
-            model: z.ZodString;
-            voice: z.ZodOptional<z.ZodString>;
-            temperature: z.ZodOptional<z.ZodNumber>;
-        }, "strip", z.ZodTypeAny, {
-            provider: "openai" | "google";
-            model: string;
-            temperature?: number | undefined;
-            voice?: string | undefined;
-        }, {
-            provider: "openai" | "google";
-            model: string;
-            temperature?: number | undefined;
-            voice?: string | undefined;
-        }>>>;
         systemPrompt: z.ZodOptional<z.ZodOptional<z.ZodString>>;
         routingInstructions: z.ZodOptional<z.ZodOptional<z.ZodString>>;
-        stt: z.ZodOptional<z.ZodOptional<z.ZodObject<{
-            provider: z.ZodEnum<["deepgram", "cartesia", "assemblyai"]>;
-            model: z.ZodOptional<z.ZodString>;
-            language: z.ZodOptional<z.ZodString>;
-            endOfTurnConfidence: z.ZodOptional<z.ZodNumber>;
-            endOfTurnTimeoutMs: z.ZodOptional<z.ZodNumber>;
-            keywords: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-        }, "strip", z.ZodTypeAny, {
-            provider: "deepgram" | "cartesia" | "assemblyai";
-            model?: string | undefined;
-            language?: string | undefined;
-            endOfTurnConfidence?: number | undefined;
-            endOfTurnTimeoutMs?: number | undefined;
-            keywords?: string[] | undefined;
-        }, {
-            provider: "deepgram" | "cartesia" | "assemblyai";
-            model?: string | undefined;
-            language?: string | undefined;
-            endOfTurnConfidence?: number | undefined;
-            endOfTurnTimeoutMs?: number | undefined;
-            keywords?: string[] | undefined;
-        }>>>;
         consultation: z.ZodOptional<z.ZodObject<{
             enabled: z.ZodDefault<z.ZodBoolean>;
             defaultTimeoutMs: z.ZodDefault<z.ZodNumber>;
@@ -348,6 +351,26 @@ declare const CallPlan: z.ZodObject<{
             description?: string | undefined;
         }>, "many">>>;
     }, "strip", z.ZodTypeAny, {
+        stt?: {
+            provider: "deepgram" | "cartesia" | "assemblyai";
+            model?: string | undefined;
+            language?: string | undefined;
+            endOfTurnConfidence?: number | undefined;
+            endOfTurnTimeoutMs?: number | undefined;
+            keywords?: string[] | undefined;
+        } | undefined;
+        realtime?: {
+            provider: "openai" | "google";
+            model: string;
+            voice?: string | undefined;
+            temperature?: number | undefined;
+        } | undefined;
+        voice?: {
+            provider: "deepgram" | "elevenlabs" | "openai" | "cartesia";
+            voiceId: string;
+            model?: string | undefined;
+            rate?: number | undefined;
+        } | undefined;
         source?: "playbook" | "sdk" | "flow" | "connector" | undefined;
         name?: string | undefined;
         triggers?: Record<string, {
@@ -356,8 +379,8 @@ declare const CallPlan: z.ZodObject<{
             } | {
                 kind: "endCall";
             } | {
-                kind: "say";
                 text: string;
+                kind: "say";
             };
             on: {
                 kind: "regex";
@@ -373,7 +396,7 @@ declare const CallPlan: z.ZodObject<{
             toolName: string;
             defaultArgs?: Record<string, unknown> | undefined;
         }[] | undefined;
-        mode?: "cascade" | "realtime" | undefined;
+        mode?: "realtime" | "cascade" | undefined;
         model?: {
             provider: "openai" | "anthropic" | "gemini";
             model: string;
@@ -382,28 +405,8 @@ declare const CallPlan: z.ZodObject<{
             topP?: number | undefined;
         } | undefined;
         language?: string | undefined;
-        voice?: {
-            provider: "deepgram" | "elevenlabs" | "openai" | "cartesia";
-            voiceId: string;
-            model?: string | undefined;
-            rate?: number | undefined;
-        } | undefined;
-        realtime?: {
-            provider: "openai" | "google";
-            model: string;
-            temperature?: number | undefined;
-            voice?: string | undefined;
-        } | undefined;
         systemPrompt?: string | undefined;
         routingInstructions?: string | undefined;
-        stt?: {
-            provider: "deepgram" | "cartesia" | "assemblyai";
-            model?: string | undefined;
-            language?: string | undefined;
-            endOfTurnConfidence?: number | undefined;
-            endOfTurnTimeoutMs?: number | undefined;
-            keywords?: string[] | undefined;
-        } | undefined;
         consultation?: {
             enabled: boolean;
             defaultTimeoutMs: number;
@@ -447,6 +450,26 @@ declare const CallPlan: z.ZodObject<{
             description?: string | undefined;
         }[] | undefined;
     }, {
+        stt?: {
+            provider: "deepgram" | "cartesia" | "assemblyai";
+            model?: string | undefined;
+            language?: string | undefined;
+            endOfTurnConfidence?: number | undefined;
+            endOfTurnTimeoutMs?: number | undefined;
+            keywords?: string[] | undefined;
+        } | undefined;
+        realtime?: {
+            provider: "openai" | "google";
+            model: string;
+            voice?: string | undefined;
+            temperature?: number | undefined;
+        } | undefined;
+        voice?: {
+            provider: "deepgram" | "elevenlabs" | "openai" | "cartesia";
+            voiceId: string;
+            model?: string | undefined;
+            rate?: number | undefined;
+        } | undefined;
         source?: "playbook" | "sdk" | "flow" | "connector" | undefined;
         name?: string | undefined;
         triggers?: Record<string, {
@@ -455,8 +478,8 @@ declare const CallPlan: z.ZodObject<{
             } | {
                 kind: "endCall";
             } | {
-                kind: "say";
                 text: string;
+                kind: "say";
             };
             on: {
                 kind: "regex";
@@ -472,7 +495,7 @@ declare const CallPlan: z.ZodObject<{
             toolName: string;
             defaultArgs?: Record<string, unknown> | undefined;
         }[] | undefined;
-        mode?: "cascade" | "realtime" | undefined;
+        mode?: "realtime" | "cascade" | undefined;
         model?: {
             provider: "openai" | "anthropic" | "gemini";
             model: string;
@@ -481,28 +504,8 @@ declare const CallPlan: z.ZodObject<{
             topP?: number | undefined;
         } | undefined;
         language?: string | undefined;
-        voice?: {
-            provider: "deepgram" | "elevenlabs" | "openai" | "cartesia";
-            voiceId: string;
-            model?: string | undefined;
-            rate?: number | undefined;
-        } | undefined;
-        realtime?: {
-            provider: "openai" | "google";
-            model: string;
-            temperature?: number | undefined;
-            voice?: string | undefined;
-        } | undefined;
         systemPrompt?: string | undefined;
         routingInstructions?: string | undefined;
-        stt?: {
-            provider: "deepgram" | "cartesia" | "assemblyai";
-            model?: string | undefined;
-            language?: string | undefined;
-            endOfTurnConfidence?: number | undefined;
-            endOfTurnTimeoutMs?: number | undefined;
-            keywords?: string[] | undefined;
-        } | undefined;
         consultation?: {
             enabled?: boolean | undefined;
             defaultTimeoutMs?: number | undefined;
@@ -617,6 +620,26 @@ declare const CallPlan: z.ZodObject<{
         displayName?: string | undefined;
     };
     draftConfig: {
+        stt?: {
+            provider: "deepgram" | "cartesia" | "assemblyai";
+            model?: string | undefined;
+            language?: string | undefined;
+            endOfTurnConfidence?: number | undefined;
+            endOfTurnTimeoutMs?: number | undefined;
+            keywords?: string[] | undefined;
+        } | undefined;
+        realtime?: {
+            provider: "openai" | "google";
+            model: string;
+            voice?: string | undefined;
+            temperature?: number | undefined;
+        } | undefined;
+        voice?: {
+            provider: "deepgram" | "elevenlabs" | "openai" | "cartesia";
+            voiceId: string;
+            model?: string | undefined;
+            rate?: number | undefined;
+        } | undefined;
         source?: "playbook" | "sdk" | "flow" | "connector" | undefined;
         name?: string | undefined;
         triggers?: Record<string, {
@@ -625,8 +648,8 @@ declare const CallPlan: z.ZodObject<{
             } | {
                 kind: "endCall";
             } | {
-                kind: "say";
                 text: string;
+                kind: "say";
             };
             on: {
                 kind: "regex";
@@ -642,7 +665,7 @@ declare const CallPlan: z.ZodObject<{
             toolName: string;
             defaultArgs?: Record<string, unknown> | undefined;
         }[] | undefined;
-        mode?: "cascade" | "realtime" | undefined;
+        mode?: "realtime" | "cascade" | undefined;
         model?: {
             provider: "openai" | "anthropic" | "gemini";
             model: string;
@@ -651,28 +674,8 @@ declare const CallPlan: z.ZodObject<{
             topP?: number | undefined;
         } | undefined;
         language?: string | undefined;
-        voice?: {
-            provider: "deepgram" | "elevenlabs" | "openai" | "cartesia";
-            voiceId: string;
-            model?: string | undefined;
-            rate?: number | undefined;
-        } | undefined;
-        realtime?: {
-            provider: "openai" | "google";
-            model: string;
-            temperature?: number | undefined;
-            voice?: string | undefined;
-        } | undefined;
         systemPrompt?: string | undefined;
         routingInstructions?: string | undefined;
-        stt?: {
-            provider: "deepgram" | "cartesia" | "assemblyai";
-            model?: string | undefined;
-            language?: string | undefined;
-            endOfTurnConfidence?: number | undefined;
-            endOfTurnTimeoutMs?: number | undefined;
-            keywords?: string[] | undefined;
-        } | undefined;
         consultation?: {
             enabled: boolean;
             defaultTimeoutMs: number;
@@ -757,18 +760,38 @@ declare const CallPlan: z.ZodObject<{
         secondary?: "ask_callee" | "fallback_phrase" | undefined;
     };
     draftConfig?: {
-        source?: "playbook" | "sdk" | "flow" | "connector" | undefined;
-        name?: string | undefined;
-        triggers?: Record<string, {
-            then: {
-                kind: "handoff";
-            } | {
-                kind: "endCall";
-            } | {
-                kind: "say";
-                text: string;
-            };
-            on: {
+        stt?: {
+            provider: "deepgram" | "cartesia" | "assemblyai";
+            model?: string | undefined;
+            language?: string | undefined;
+            endOfTurnConfidence?: number | undefined;
+            endOfTurnTimeoutMs?: number | undefined;
+            keywords?: string[] | undefined;
+        } | undefined;
+        realtime?: {
+            provider: "openai" | "google";
+            model: string;
+            voice?: string | undefined;
+            temperature?: number | undefined;
+        } | undefined;
+        voice?: {
+            provider: "deepgram" | "elevenlabs" | "openai" | "cartesia";
+            voiceId: string;
+            model?: string | undefined;
+            rate?: number | undefined;
+        } | undefined;
+        source?: "playbook" | "sdk" | "flow" | "connector" | undefined;
+        name?: string | undefined;
+        triggers?: Record<string, {
+            then: {
+                kind: "handoff";
+            } | {
+                kind: "endCall";
+            } | {
+                text: string;
+                kind: "say";
+            };
+            on: {
                 kind: "regex";
                 pattern: string;
                 flags?: string | undefined;
@@ -782,7 +805,7 @@ declare const CallPlan: z.ZodObject<{
             toolName: string;
             defaultArgs?: Record<string, unknown> | undefined;
         }[] | undefined;
-        mode?: "cascade" | "realtime" | undefined;
+        mode?: "realtime" | "cascade" | undefined;
         model?: {
             provider: "openai" | "anthropic" | "gemini";
             model: string;
@@ -791,28 +814,8 @@ declare const CallPlan: z.ZodObject<{
             topP?: number | undefined;
         } | undefined;
         language?: string | undefined;
-        voice?: {
-            provider: "deepgram" | "elevenlabs" | "openai" | "cartesia";
-            voiceId: string;
-            model?: string | undefined;
-            rate?: number | undefined;
-        } | undefined;
-        realtime?: {
-            provider: "openai" | "google";
-            model: string;
-            temperature?: number | undefined;
-            voice?: string | undefined;
-        } | undefined;
         systemPrompt?: string | undefined;
         routingInstructions?: string | undefined;
-        stt?: {
-            provider: "deepgram" | "cartesia" | "assemblyai";
-            model?: string | undefined;
-            language?: string | undefined;
-            endOfTurnConfidence?: number | undefined;
-            endOfTurnTimeoutMs?: number | undefined;
-            keywords?: string[] | undefined;
-        } | undefined;
         consultation?: {
             enabled?: boolean | undefined;
             defaultTimeoutMs?: number | undefined;
@@ -1077,13 +1080,13 @@ declare const AgentConfig$1: z.ZodObject<{
     }, "strip", z.ZodTypeAny, {
         provider: "openai" | "google";
         model: string;
-        temperature?: number | undefined;
         voice?: string | undefined;
+        temperature?: number | undefined;
     }, {
         provider: "openai" | "google";
         model: string;
-        temperature?: number | undefined;
         voice?: string | undefined;
+        temperature?: number | undefined;
     }>>;
     language: z.ZodDefault<z.ZodString>;
     tools: z.ZodDefault<z.ZodArray<z.ZodObject<{
@@ -1261,11 +1264,11 @@ declare const AgentConfig$1: z.ZodObject<{
             kind: z.ZodLiteral<"say">;
             text: z.ZodString;
         }, "strip", z.ZodTypeAny, {
-            kind: "say";
             text: string;
-        }, {
             kind: "say";
+        }, {
             text: string;
+            kind: "say";
         }>]>;
         onlyWhile: z.ZodOptional<z.ZodString>;
     }, "strip", z.ZodTypeAny, {
@@ -1274,8 +1277,8 @@ declare const AgentConfig$1: z.ZodObject<{
         } | {
             kind: "endCall";
         } | {
-            kind: "say";
             text: string;
+            kind: "say";
         };
         on: {
             kind: "regex";
@@ -1292,8 +1295,8 @@ declare const AgentConfig$1: z.ZodObject<{
         } | {
             kind: "endCall";
         } | {
-            kind: "say";
             text: string;
+            kind: "say";
         };
         on: {
             kind: "regex";
@@ -1331,6 +1334,12 @@ declare const AgentConfig$1: z.ZodObject<{
     createdAt: z.ZodString;
     updatedAt: z.ZodString;
 }, "strip", z.ZodTypeAny, {
+    voice: {
+        provider: "deepgram" | "elevenlabs" | "openai" | "cartesia";
+        voiceId: string;
+        model?: string | undefined;
+        rate?: number | undefined;
+    };
     id: string;
     projectId: string;
     name: string;
@@ -1340,7 +1349,7 @@ declare const AgentConfig$1: z.ZodObject<{
         toolName: string;
         defaultArgs?: Record<string, unknown> | undefined;
     }[];
-    mode: "cascade" | "realtime";
+    mode: "realtime" | "cascade";
     model: {
         provider: "openai" | "anthropic" | "gemini";
         model: string;
@@ -1349,12 +1358,6 @@ declare const AgentConfig$1: z.ZodObject<{
         topP?: number | undefined;
     };
     language: string;
-    voice: {
-        provider: "deepgram" | "elevenlabs" | "openai" | "cartesia";
-        voiceId: string;
-        model?: string | undefined;
-        rate?: number | undefined;
-    };
     consultation: {
         enabled: boolean;
         defaultTimeoutMs: number;
@@ -1376,6 +1379,20 @@ declare const AgentConfig$1: z.ZodObject<{
         enum?: string[] | undefined;
         description?: string | undefined;
     }[];
+    stt?: {
+        provider: "deepgram" | "cartesia" | "assemblyai";
+        model?: string | undefined;
+        language?: string | undefined;
+        endOfTurnConfidence?: number | undefined;
+        endOfTurnTimeoutMs?: number | undefined;
+        keywords?: string[] | undefined;
+    } | undefined;
+    realtime?: {
+        provider: "openai" | "google";
+        model: string;
+        voice?: string | undefined;
+        temperature?: number | undefined;
+    } | undefined;
     source?: "playbook" | "sdk" | "flow" | "connector" | undefined;
     triggers?: Record<string, {
         then: {
@@ -1383,8 +1400,8 @@ declare const AgentConfig$1: z.ZodObject<{
         } | {
             kind: "endCall";
         } | {
-            kind: "say";
             text: string;
+            kind: "say";
         };
         on: {
             kind: "regex";
@@ -1396,22 +1413,8 @@ declare const AgentConfig$1: z.ZodObject<{
         };
         onlyWhile?: string | undefined;
     }> | undefined;
-    realtime?: {
-        provider: "openai" | "google";
-        model: string;
-        temperature?: number | undefined;
-        voice?: string | undefined;
-    } | undefined;
     systemPrompt?: string | undefined;
     routingInstructions?: string | undefined;
-    stt?: {
-        provider: "deepgram" | "cartesia" | "assemblyai";
-        model?: string | undefined;
-        language?: string | undefined;
-        endOfTurnConfidence?: number | undefined;
-        endOfTurnTimeoutMs?: number | undefined;
-        keywords?: string[] | undefined;
-    } | undefined;
     process?: {
         collect: Record<string, {
             type: "string" | "number" | "boolean" | "string[]" | "datetime" | "email" | "phone";
@@ -1434,6 +1437,12 @@ declare const AgentConfig$1: z.ZodObject<{
     brainConnectorId?: string | null | undefined;
     modeLocked?: boolean | undefined;
 }, {
+    voice: {
+        provider: "deepgram" | "elevenlabs" | "openai" | "cartesia";
+        voiceId: string;
+        model?: string | undefined;
+        rate?: number | undefined;
+    };
     id: string;
     projectId: string;
     name: string;
@@ -1446,12 +1455,6 @@ declare const AgentConfig$1: z.ZodObject<{
         maxOutputTokens?: number | undefined;
         topP?: number | undefined;
     };
-    voice: {
-        provider: "deepgram" | "elevenlabs" | "openai" | "cartesia";
-        voiceId: string;
-        model?: string | undefined;
-        rate?: number | undefined;
-    };
     consultation: {
         enabled?: boolean | undefined;
         defaultTimeoutMs?: number | undefined;
@@ -1466,6 +1469,20 @@ declare const AgentConfig$1: z.ZodObject<{
             normal?: number | undefined;
         } | undefined;
     };
+    stt?: {
+        provider: "deepgram" | "cartesia" | "assemblyai";
+        model?: string | undefined;
+        language?: string | undefined;
+        endOfTurnConfidence?: number | undefined;
+        endOfTurnTimeoutMs?: number | undefined;
+        keywords?: string[] | undefined;
+    } | undefined;
+    realtime?: {
+        provider: "openai" | "google";
+        model: string;
+        voice?: string | undefined;
+        temperature?: number | undefined;
+    } | undefined;
     source?: "playbook" | "sdk" | "flow" | "connector" | undefined;
     triggers?: Record<string, {
         then: {
@@ -1473,8 +1490,8 @@ declare const AgentConfig$1: z.ZodObject<{
         } | {
             kind: "endCall";
         } | {
-            kind: "say";
             text: string;
+            kind: "say";
         };
         on: {
             kind: "regex";
@@ -1490,24 +1507,10 @@ declare const AgentConfig$1: z.ZodObject<{
         toolName: string;
         defaultArgs?: Record<string, unknown> | undefined;
     }[] | undefined;
-    mode?: "cascade" | "realtime" | undefined;
+    mode?: "realtime" | "cascade" | undefined;
     language?: string | undefined;
-    realtime?: {
-        provider: "openai" | "google";
-        model: string;
-        temperature?: number | undefined;
-        voice?: string | undefined;
-    } | undefined;
     systemPrompt?: string | undefined;
     routingInstructions?: string | undefined;
-    stt?: {
-        provider: "deepgram" | "cartesia" | "assemblyai";
-        model?: string | undefined;
-        language?: string | undefined;
-        endOfTurnConfidence?: number | undefined;
-        endOfTurnTimeoutMs?: number | undefined;
-        keywords?: string[] | undefined;
-    } | undefined;
     process?: {
         backendAck?: {
             url: string;
@@ -1539,124 +1542,6 @@ declare const AgentConfig$1: z.ZodObject<{
 }>;
 type AgentConfig$1 = z.infer<typeof AgentConfig$1>;
 
-/** Frames a daemon sends up to the relay. */
-declare const ConnectorUpFrame: z.ZodDiscriminatedUnion<"kind", [z.ZodObject<{
-    kind: z.ZodLiteral<"hello">;
-    token: z.ZodString;
-    replicaId: z.ZodString;
-    version: z.ZodString;
-    caps: z.ZodObject<{
-        streaming: z.ZodBoolean;
-        tools: z.ZodBoolean;
-        litellm: z.ZodBoolean;
-    }, "strip", z.ZodTypeAny, {
-        tools: boolean;
-        streaming: boolean;
-        litellm: boolean;
-    }, {
-        tools: boolean;
-        streaming: boolean;
-        litellm: boolean;
-    }>;
-}, "strip", z.ZodTypeAny, {
-    kind: "hello";
-    version: string;
-    token: string;
-    replicaId: string;
-    caps: {
-        tools: boolean;
-        streaming: boolean;
-        litellm: boolean;
-    };
-}, {
-    kind: "hello";
-    version: string;
-    token: string;
-    replicaId: string;
-    caps: {
-        tools: boolean;
-        streaming: boolean;
-        litellm: boolean;
-    };
-}>, z.ZodObject<{
-    kind: z.ZodLiteral<"pong">;
-    ts: z.ZodNumber;
-}, "strip", z.ZodTypeAny, {
-    kind: "pong";
-    ts: number;
-}, {
-    kind: "pong";
-    ts: number;
-}>, z.ZodObject<{
-    kind: z.ZodLiteral<"brain.delta">;
-    streamId: z.ZodString;
-    content: z.ZodString;
-}, "strip", z.ZodTypeAny, {
-    kind: "brain.delta";
-    content: string;
-    streamId: string;
-}, {
-    kind: "brain.delta";
-    content: string;
-    streamId: string;
-}>, z.ZodObject<{
-    kind: z.ZodLiteral<"brain.done">;
-    streamId: z.ZodString;
-    finishReason: z.ZodString;
-}, "strip", z.ZodTypeAny, {
-    kind: "brain.done";
-    streamId: string;
-    finishReason: string;
-}, {
-    kind: "brain.done";
-    streamId: string;
-    finishReason: string;
-}>, z.ZodObject<{
-    kind: z.ZodLiteral<"brain.error">;
-    streamId: z.ZodString;
-    code: z.ZodEnum<["upstream_timeout", "upstream_error", "bad_response", "normalize_failed", "unreachable"]>;
-    message: z.ZodString;
-}, "strip", z.ZodTypeAny, {
-    message: string;
-    kind: "brain.error";
-    code: "upstream_timeout" | "upstream_error" | "bad_response" | "normalize_failed" | "unreachable";
-    streamId: string;
-}, {
-    message: string;
-    kind: "brain.error";
-    code: "upstream_timeout" | "upstream_error" | "bad_response" | "normalize_failed" | "unreachable";
-    streamId: string;
-}>]>;
-type ConnectorUpFrame = z.infer<typeof ConnectorUpFrame>;
-
-interface TransportOptions {
-    readonly apiKey: string;
-    readonly baseUrl: string;
-    readonly fetch?: typeof fetch;
-    readonly maxRetries?: number;
-    readonly initialBackoffMs?: number;
-    readonly userAgent?: string;
-}
-interface RequestOptions {
-    readonly method: 'GET' | 'POST' | 'PATCH' | 'PUT' | 'DELETE';
-    readonly path: string;
-    readonly body?: unknown;
-    readonly query?: Record<string, string | undefined>;
-    readonly signal?: AbortSignal;
-    /** Extra request headers, merged on top of the defaults (auth/content-type
-     *  etc). Lowercase keys recommended. */
-    readonly headers?: Record<string, string>;
-}
-declare class Transport {
-    private readonly options;
-    private readonly fetchImpl;
-    private readonly maxRetries;
-    private readonly initialBackoffMs;
-    constructor(options: TransportOptions);
-    request<T>(opts: RequestOptions, schema: ZodType<T>): Promise<T>;
-    private backoffMs;
-}
-
 interface ReadinessResult {
     readonly ok: boolean;
     /** Human-readable explanation when ok=false. Surfaced in metadata. */
@@ -1758,1150 +1643,1441 @@ interface AgentEventEmitter {
     emit(event: AgentLifecycleEvent): void;
 }
 
-interface RegisterInput {
-    readonly name: string;
-    readonly version: string;
-    readonly environment: AgentEnvironment;
-    /** Capability tags (e.g. ['fnol', 'es-MX']). Surfaced in the dashboard. */
-    readonly capabilities?: readonly string[];
-    /**
-     * JSON-serializable process schema for the dashboard "what this agent does"
-     * view. Built by `buildProcessSchemaDTO` from the agent's ProcessDefinition.
-     */
-    readonly processSchema?: ProcessSchemaDTO | null;
-    /**
-     * Opt this agent into MCP exposure. When true, the API upserts a matching
-     * agent_config row keyed by (project_id, name, environment) so MCP /
-     * dashboard / REST can list and inspect this agent. Default false — pure
-     * SDK agents that don't need MCP visibility stay invisible to it. See
-     * docs/architecture/contracts-design.md §2b.
-     */
-    readonly mcpExposed?: boolean;
-    /**
-     * Self-checks run before sending the register request. Each result is
-     * recorded on the agent. See RegisterOptions.requireReady for failure
-     * policy.
-     */
-    readonly readiness?: readonly ReadinessProbe[];
-    /** User metadata. Merged on top of default metadata (user wins on conflict). */
-    readonly metadata?: Record<string, unknown>;
-    /**
-     * Whether to auto-collect host/runtime/build metadata. Default true. Set
-     * false to send exactly what you pass in `metadata`.
-     */
-    readonly collectDefaults?: boolean;
+/** Primitive field types accepted in a process definition. */
+type ProcessFieldType = 'string' | 'string[]' | 'number' | 'boolean' | 'datetime' | 'email' | 'phone';
+interface ProcessField {
+    readonly type: ProcessFieldType;
+    readonly required?: boolean;
+    /** Regex pattern for `string` / `string[]` items. */
+    readonly pattern?: RegExp;
+    /** Inclusive lower bound on a number or array length. */
+    readonly min?: number;
+    /** Inclusive upper bound on a number or array length. */
+    readonly max?: number;
+    /** One of N — restricts the captured value to this set. */
+    readonly enum?: readonly string[];
+    /** Override the auto-generated prompt for capturing this field. */
+    readonly ask?: string;
+    /** Override the field-extraction hint shown to the LLM. */
+    readonly extract?: string;
 }
-interface RegisterOptions {
-    /**
-     * Override server-suggested heartbeat cadence (ms). When omitted, the SDK
-     * uses the value returned by /v1/agents/register, falling back to
-     * AGENT_HEARTBEAT_INTERVAL_MS.
-     */
-    readonly heartbeatIntervalMs?: number;
-    /**
-     * Disable signal handlers (SIGTERM/SIGINT). Useful in tests and in hosts
-     * that own their own shutdown lifecycle.
-     */
-    readonly attachSignalHandlers?: boolean;
-    /**
-     * On SIGTERM/SIGINT, call DELETE /v1/agents/:id before exiting so the
-     * dashboard reflects "gone" immediately instead of waiting for offline
-     * timeout. Default true. Best-effort: errors are swallowed.
+type CompletionStrategy = 'all-required-captured' | 'all-captured' | {
+    custom: (data: Record<string, unknown>, ctx: AgentContext) => boolean | Promise<boolean>;
+};
+interface ProcessBackendAck {
+    /** URL to POST captured data to. The call cannot complete until this 2xx's. */
+    readonly url: string;
+    readonly timeoutMs?: number;
+    readonly headers?: Readonly<Record<string, string>>;
+}
+interface ProcessDefinition<T extends Record<string, ProcessField> = Record<string, ProcessField>> {
+    /** Field schema. Order is preserved when the SDK auto-asks for fields. */
+    readonly collect: T;
+    /** When the call can end. Defaults to 'all-required-captured'. */
+    readonly completeWhen?: CompletionStrategy;
+    /** Optional external system that must ACK before completion. */
+    readonly backendAck?: ProcessBackendAck;
+    /** Fires once all completion conditions are met. */
+    readonly onComplete?: (data: InferProcessData<T>, ctx: AgentContext) => Promise<void> | void;
+    /** Fires whenever a field is captured (good for live CRM updates). */
+    readonly onField?: <K extends keyof T>(field: K, value: InferFieldValue<T[K]>, ctx: AgentContext) => Promise<void> | void;
+}
+/** Inferred TS type for the data bag a process produces. */
+type InferProcessData<T extends Record<string, ProcessField>> = {
+    [K in keyof T]: T[K]['required'] extends true ? InferFieldValue<T[K]> : InferFieldValue<T[K]> | undefined;
+};
+type InferFieldValue<F extends ProcessField> = F['type'] extends 'string' ? string : F['type'] extends 'string[]' ? string[] : F['type'] extends 'number' ? number : F['type'] extends 'boolean' ? boolean : F['type'] extends 'datetime' ? Date : F['type'] extends 'email' ? string : F['type'] extends 'phone' ? string : never;
+type TriggerCondition = RegExp | `signal:${string}` | ((text: string, ctx: AgentContext) => boolean | Promise<boolean>);
+type TriggerAction = 'handoff' | 'endCall' | {
+    say: string;
+} | {
+    run: (ctx: AgentContext) => Promise<void> | void;
+}
+/** Jump the flow-graph cursor to a node id. Only meaningful under the graph
+ *  interpreter (the flat goals+rails path has no cursor and ignores it). */
+ | {
+    goto: string;
+};
+interface TriggerDefinition {
+    readonly on: TriggerCondition;
+    readonly then: TriggerAction;
+    /** If set, the trigger only fires while the named field is uncaptured. */
+    readonly onlyWhile?: string;
+}
+interface HandoffConfig {
+    /** Default human number when a trigger says { then: 'handoff' }. */
+    readonly fallback: string;
+    /** Map signal/trigger names to specific destinations. */
+    readonly routes?: Readonly<Record<string, string>>;
+    /** Build the briefing text passed to the human agent (or PSTN whisper). */
+    readonly briefing?: (args: {
+        readonly data: Record<string, unknown>;
+        readonly transcript: TranscriptHandle;
+        readonly call: AgentContext['call'];
+    }) => string | Promise<string>;
+    /**
+     * 'warm' (default) dials the human into the room as a conference, lets the
+     * agent brief them live, then drops the agent — caller + human stay
+     * connected. 'cold' is a blind SIP REFER: the caller is transferred away
+     * immediately. Warm falls back to cold when no outbound trunk is configured.
      */
-    readonly deregisterOnSignal?: boolean;
+    readonly mode?: 'warm' | 'cold';
+}
+interface TranscriptHandle {
+    /** Last N turns as `speaker: text` lines. */
+    tail(n: number): string;
+    full(): string;
+}
+/**
+ * Memory scope. `'participant'` and `'caller'` are synonyms — `'caller'`
+ * is the historical name from the 1:1 era; new code should prefer
+ * `'participant'`, which makes the multi-party semantics explicit.
+ */
+type MemoryScope = 'call' | 'caller' | 'participant' | 'account' | 'platform';
+interface MemoryConfig {
+    /** Which scope to persist to. Defaults to 'caller'. */
+    readonly scope?: MemoryScope;
+    readonly retentionDays?: number;
+    /** Fields auto-redacted on write. Recognized: ssn, dob, email, phone, ccn. */
+    readonly piiFields?: readonly string[];
+    /** Opt in to cross-tenant aggregate memory (anonymized). */
+    readonly platformOptIn?: boolean;
+}
+/**
+ * Multi-participant configuration. Optional — when omitted, the agent runs
+ * in 1:1 mode (one human + one agent) and the SDK still populates
+ * `ctx.room.participants` so participant-aware code paths work.
+ */
+interface ParticipantsConfig {
     /**
-     * If any readiness probe reports !ok, throw before calling register.
-     * Default false: probes that fail mark the agent as `degraded` instead.
+     * Fires when a human participant joins the room. In 1:1 calls this
+     * fires once at session start for the caller. In multi-party calls it
+     * fires per join.
      */
-    readonly requireReady?: boolean;
+    readonly onJoin?: (participant: Participant, ctx: AgentContext) => Promise<void> | void;
+    /** Fires when a participant disconnects (hangup, transfer, kick). */
+    readonly onLeave?: (participant: Participant, ctx: AgentContext) => Promise<void> | void;
     /**
-     * Listener for lifecycle events. Equivalent to `agent.events.on(fn)` after
-     * register; register-time events (readiness, registered) are also delivered.
+     * Synchronously enrich a participant's attribute bag before `onJoin`
+     * fires. Useful for phone-number → language lookups, etc. The returned
+     * map is merged into `participant.attributes`.
      */
-    readonly onEvent?: (event: AgentLifecycleEvent) => void;
+    readonly attributes?: (participant: Participant) => Readonly<Record<string, string>> | Promise<Readonly<Record<string, string>>>;
+    /**
+     * Reject participants beyond this count. Default: unlimited. The cap
+     * is enforced by the worker when wiring participant lifecycle.
+     */
+    readonly max?: number;
 }
-interface RegisteredAgent {
-    readonly agent: AgentDTO;
-    readonly events: AgentEventEmitter;
-    /** Push a status change immediately (next heartbeat carries it too). */
-    setStatus(status: 'online' | 'degraded', detail?: string): Promise<void>;
-    /** Replace metadata on the next heartbeat. Pass {} to clear. */
-    updateMetadata(metadata: Record<string, unknown>): Promise<void>;
-    /** Best-effort DELETE; safe to call multiple times. */
-    deregister(): Promise<void>;
-    /** Stop the heartbeat ticker without deleting the row. Idempotent. */
-    stop(): Promise<void>;
+/**
+ * A connector instance. Created by per-system factories like `salesforce()`,
+ * `twilio()`, etc. The factory returns an opaque handle that the SDK wires
+ * into `ctx.connectors` and (when `expose: true`) into the LLM tool list.
+ */
+interface ConnectorInstance<TName extends string = string, TApi = unknown> {
+    readonly __connector: true;
+    readonly name: TName;
+    readonly api: TApi;
+    /** If true, every method on `api` becomes an LLM-callable tool. */
+    readonly expose?: boolean;
 }
-interface SchedulerLike {
-    setTimeout(cb: () => void, ms: number): NodeJS.Timeout | number;
-    clearTimeout(handle: NodeJS.Timeout | number | undefined): void;
+type ComplianceTag = 'tcpa' | 'hipaa' | 'pci' | 'gdpr' | 'soc2';
+/**
+ * Duck-typed pipeline component markers. The SDK never inspects these — they
+ * are passed through to LiveKit's AgentSession as-is. Three ways to satisfy:
+ *
+ *   1. SDK factory:    `deepgram.tts({ model: 'aura-2' })`
+ *   2. Wrapped LK:     `wrap(new TTS({...}), { trace: true })`
+ *   3. User-built:     class MyTTS extends BaseTTS { ... }   // BaseTTS
+ *                                                            // re-exported
+ *                                                            // from the SDK
+ *
+ * Anything implementing the duck-type — even a plain object — is accepted.
+ */
+interface STTProvider {
+    readonly __vlPipeline?: 'stt';
 }
-interface AgentsClientOptions {
-    readonly scheduler?: SchedulerLike;
-    readonly attachSignalHandlers?: boolean;
+interface LLMProvider {
+    readonly __vlPipeline?: 'llm';
 }
-declare class AgentsClient {
-    private readonly transport;
-    private readonly options;
-    constructor(transport: Transport, options?: AgentsClientOptions);
+interface TTSProvider {
+    readonly __vlPipeline?: 'tts';
+}
+interface VADProvider {
+    readonly __vlPipeline?: 'vad';
+}
+interface TurnDetectorProvider {
+    readonly __vlPipeline?: 'turn';
+}
+/**
+ * Speech-to-speech / realtime model marker (OpenAI Realtime, Gemini Live).
+ * A realtime model handles STT + LLM + TTS + turn-taking server-side, so when
+ * `models.realtime` is set the SDK builds the AgentSession around it and
+ * ignores the stt/llm/tts slots.
+ */
+interface RealtimeProvider {
+    readonly __vlPipeline?: 'realtime';
+}
+/**
+ * Lazy form so users can pick a provider per call (e.g. by caller locale).
+ * The factory runs once per call, before AgentSession is constructed, so it
+ * receives the call envelope (callerId, to, metadata) rather than the full
+ * AgentContext (which depends on AgentSession existing).
+ */
+type ProviderFactory<T> = (call: CallInfo) => T | Promise<T>;
+interface ModelConfig {
     /**
-     * Fetch a deployed agent's compiled process_schema. A flow-runtime worker
-     * calls this per dispatched call to boot a visually-built flow. Returns
-     * null on 404 or when the agent has no schema.
+     * String form: 'openai/gpt-4o' (resolves via SDK defaults).
+     * Instance form: any LLMProvider (LK plugin, wrap()-ed, or user-built).
+     * Factory form: `(ctx) => provider` for per-call selection.
      */
-    getProcessSchema(agentId: string): Promise<ProcessSchemaDTO | null>;
+    readonly llm?: string | LLMProvider | ProviderFactory<LLMProvider>;
+    readonly stt?: string | STTProvider | ProviderFactory<STTProvider>;
+    readonly tts?: string | TTSProvider | ProviderFactory<TTSProvider>;
+    /** VAD has no string form — always pass an instance or factory. */
+    readonly vad?: VADProvider | ProviderFactory<VADProvider>;
+    readonly turnDetector?: TurnDetectorProvider | ProviderFactory<TurnDetectorProvider>;
     /**
-     * Fetch a deployed agent's stored AgentConfig — the pipeline the dashboard
-     * set (model / voice / stt / mode / realtime). A flow-runtime worker reads
-     * this per call so the no-code agent's runtime matches the builder. Returns
-     * null on 404 (agent not MCP-exposed or absent).
+     * Speech-to-speech / realtime model. When set, the STT→LLM→TTS pipeline is
+     * bypassed: the realtime model drives the whole turn. No string form — pass
+     * an instance (`openai.realtime({ voice: 'alloy' })`) or a per-call factory.
      */
-    getConfig(agentId: string): Promise<AgentConfig$1 | null>;
-    register(input: RegisterInput, opts?: RegisterOptions): Promise<RegisteredAgent>;
-    list(query?: {
-        environment?: AgentEnvironment;
-    }): Promise<{
-        agents: {
-            status: "online" | "offline" | "degraded";
-            id: string;
-            projectId: string;
-            name: string;
-            createdAt: string;
-            updatedAt: string;
-            version: string;
-            environment: "dev" | "stg" | "prd";
-            statusDetail: string | null;
-            capabilities: string[];
-            readiness: {
-                probe: string;
-                ok: boolean;
-                detail?: string | undefined;
-            }[];
-            metadata: Record<string, unknown>;
-            lastSeenAt: string | null;
-            processSchema?: {
-                id: string;
-                completionGate: {
-                    requiredFields: string[];
-                    backendAck?: {
-                        url: string;
-                        timeoutMs: number;
-                    } | undefined;
-                };
-                fields: {
-                    type: "string" | "number" | "boolean" | "string[]" | "datetime" | "email" | "phone";
-                    name: string;
-                    required: boolean;
-                    ask?: string | undefined;
-                    pattern?: string | undefined;
-                    min?: number | undefined;
-                    max?: number | undefined;
-                    enum?: string[] | undefined;
-                }[];
-                handoff?: {
-                    fallback?: string | undefined;
-                    routes?: Record<string, string> | undefined;
-                } | undefined;
-                memory?: {
-                    scope?: "caller" | "call" | "account" | "participant" | "platform" | undefined;
-                    retentionDays?: number | undefined;
-                    piiFields?: string[] | undefined;
-                } | undefined;
-                speech?: {
-                    interruption?: {
-                        enabled?: boolean | undefined;
-                        minWords?: number | undefined;
-                        minDuration?: number | undefined;
-                    } | undefined;
-                    endpointing?: {
-                        minDelay?: number | undefined;
-                        maxDelay?: number | undefined;
-                    } | undefined;
-                } | undefined;
-                prompts?: {
-                    id: string;
-                    text: string;
-                }[] | undefined;
-                triggers?: {
-                    then: string;
-                    name: string;
-                    on: string;
-                    onlyWhile?: string | undefined;
-                }[] | undefined;
-                tools?: {
-                    name: string;
-                    description: string;
-                    input: Record<string, "string" | "number" | "boolean">;
-                    url: string;
-                    method: "GET" | "POST" | "PATCH" | "PUT" | "DELETE";
-                    auth: "none" | "connection";
-                    headers?: Record<string, string> | undefined;
-                    connectionRef?: string | undefined;
-                }[] | undefined;
-                program?: {
-                    v: 1;
-                    id: string;
-                    nodes: Record<string, {
-                        type: "code" | "start" | "say" | "ask" | "confirm" | "tool" | "decision" | "handoff" | "end" | "trigger" | "gate" | "playbook" | "menu" | "set" | "subflow" | "llm" | "rag" | "memory" | "speech" | "classify" | "router" | "note";
-                        id: string;
-                        config: Record<string, unknown>;
-                        out: {
-                            to: string;
-                            sourceHandle?: string | undefined;
-                            label?: string | undefined;
-                            condition?: string | undefined;
-                        }[];
-                    }>;
-                    entry: string[];
-                    completionGate: {
-                        requiredFields: string[];
-                    };
-                    diagnostics?: {
-                        acyclic: boolean;
-                        droppedEdges: string[];
-                        unsupportedNodes: string[];
-                    } | undefined;
-                } | undefined;
-            } | null | undefined;
-        }[];
-    }>;
-    delete(agentId: string): Promise<{
-        ok: true;
-    }>;
+    readonly realtime?: RealtimeProvider | ProviderFactory<RealtimeProvider>;
+    /** Spoken language; defaults to 'en-US'. Used by string-form defaults. */
+    readonly language?: string;
 }
-
-interface ContextInput {
-    readonly callerId: string;
-    readonly scopes?: readonly MemoryScope$1[];
+/**
+ * Answering-machine detection mode for outbound calls. Mirrors
+ * `OutboundConfig.amd` in @voicelayer/agent-spec.
+ *
+ *   'off'              — never run AMD; treat every answer as a human.
+ *   'detect'           — leave the voicemail message (or hang up) the moment
+ *                        a machine greeting is recognised.
+ *   'detectMessageEnd' — recognise the machine, then wait for the greeting to
+ *                        finish (an explicit "after the tone"-style cue or the
+ *                        greeting going quiet) before leaving the message.
+ */
+type AmdMode = 'off' | 'detect' | 'detectMessageEnd';
+/**
+ * Outbound-only behavior. AMD never runs on inbound calls (the runtime gates
+ * on the dispatch-metadata `direction`), so these knobs are inert unless the
+ * call was placed via the outbound path.
+ */
+interface OutboundCallConfig {
+    /** Answering-machine detection mode. Defaults to 'off'. */
+    readonly amd?: AmdMode;
+    /**
+     * Spoken (via TTS) when a machine is detected. When unset, the agent hangs
+     * up on detection instead of leaving a message.
+     */
+    readonly voicemailScript?: string;
 }
-interface WriteInput {
-    readonly scope: MemoryScope$1;
-    readonly callerId: string;
-    readonly delta: Record<string, unknown>;
-    readonly callId?: string;
+/**
+ * Barge-in tuning. The pipeline allows interruptions by default (LK defaults:
+ * any speech ≥500ms cuts the agent off). These knobs tune that behavior per
+ * agent WITHOUT switching to puppet/hostControlled mode — e.g. a senior-living
+ * help desk wants `minWords: 2` so backchannels ("mm-hm", "okay") don't
+ * truncate the agent mid-sentence, while a fast-paced escalation desk keeps
+ * the zero-word default. Set `enabled: false` to make the agent
+ * non-interruptible (kiosk / broadcast announcements).
+ */
+interface InterruptionConfig {
+    /** Allow the caller to barge in over agent speech. Default true. */
+    readonly enabled?: boolean;
+    /** Words the caller must say before it counts as an interruption. Default 0
+     *  (any speech interrupts). 2–3 filters out backchannels. */
+    readonly minWords?: number;
+    /** Minimum caller speech duration (ms) to count as an interruption. Default 500. */
+    readonly minDuration?: number;
 }
-interface SnapshotInput {
-    readonly callId: string;
-    readonly stage: string;
-    readonly snapshot: Record<string, unknown>;
+/**
+ * End-of-turn detection tuning: how long the pipeline waits after the caller
+ * stops speaking before treating the turn as finished. Raise `minDelay` for
+ * callers who pause mid-thought (e.g. elderly speakers); lower it for
+ * fast-paced lines.
+ */
+interface EndpointingConfig {
+    /** Minimum silence (ms) before the caller's turn is considered done. Default 500. */
+    readonly minDelay?: number;
+    /** Hard ceiling (ms) after which the turn ends regardless. Default 3000. */
+    readonly maxDelay?: number;
 }
-interface ResolveInput {
-    readonly externalKey: string;
-    readonly displayName?: string;
-    readonly identifiers?: ReadonlyArray<{
-        type: string;
-        value: string;
-    }>;
+/**
+ * Speech polish. `pronunciations` rewrites brand names / acronyms / jargon to
+ * a spoken form before TTS (e.g. `{ VoiceLayer: 'Voice Layer', API: 'A P I' }`)
+ * via applyPronunciations(). `backgroundAudio` plays ambient room tone under
+ * the agent so silence feels less dead (a URL or a named preset).
+ * `interruption` + `endpointing` tune barge-in and turn-taking per agent.
+ */
+interface SpeechConfig {
+    readonly pronunciations?: Readonly<Record<string, string>>;
+    readonly backgroundAudio?: string | {
+        readonly url?: string;
+        readonly volume?: number;
+    };
+    readonly interruption?: InterruptionConfig;
+    readonly endpointing?: EndpointingConfig;
 }
-declare class MemoryClient {
-    private readonly transport;
-    constructor(transport: Transport);
-    context(input: ContextInput): Promise<RelevantContext>;
-    write(input: WriteInput): Promise<void>;
-    snapshot(input: SnapshotInput): Promise<{
-        id: string;
-    }>;
-    resolveCaller(input: ResolveInput): Promise<ResolveCallerResponse['caller']>;
-    deleteCaller(callerId: string): Promise<DeleteCallerResponse>;
+/** What caused the call to end. Surfaced to `endCall.onEnd` + logs. */
+type EndCallTrigger = 
+/** The LLM invoked the built-in `end_call` tool. */
+'tool'
+/** An external controller (MCP host) sent a `hangup` command. */
+ | 'host'
+/** The dead-air backstop fired (`idleHangupMs` of silence while idle). */
+ | 'idle'
+/** The hard per-call ceiling fired (`maxCallDurationMs` elapsed). */
+ | 'max_duration'
+/** The last non-agent participant left the room. */
+ | 'participant-left'
+/** A flow/graph run finished and asked to hang up. */
+ | 'flow'
+/** The realtime engine closed / disconnected under the session. */
+ | 'engine-closed'
+/** `ctx.endCall()` called directly from user code. */
+ | 'user';
+/** Passed to `endCall.onEnd` describing the teardown about to happen. */
+interface EndCallInfo {
+    /** Why the call is ending (e.g. the `end_call` tool's `reason`). */
+    readonly reason?: string;
+    /** What triggered the hang-up. */
+    readonly trigger: EndCallTrigger;
+    /** The teardown strategy that will run (after the policy is resolved). */
+    readonly teardown: 'room' | 'agent';
 }
-
-type CallStatus = 'in_progress' | 'completed' | 'failed';
-type CallAttributeValue = string | number | boolean;
-type CallParticipantRole = 'caller' | 'agent' | 'callee' | 'supervisor' | 'observer' | 'unknown';
-type CallParticipantKind = 'human' | 'agent' | 'phone' | 'sip' | 'system';
-type CallLegKind = 'sip-inbound' | 'sip-outbound' | 'agent-session' | 'conference' | 'transfer' | 'unknown';
-type CallLegStatus = 'starting' | 'active' | 'ended';
-interface CallSummary {
-    readonly id: string;
-    readonly projectId: string;
-    readonly livekitRoom: string;
-    readonly phoneNumberId: string | null;
-    readonly agentId: string | null;
-    readonly bindingId: string | null;
-    readonly callerE164: string | null;
-    readonly toE164: string | null;
-    readonly status: CallStatus;
-    readonly startedAt: string;
+/**
+ * Controls how the agent ENDS a call. The SDK — not the agent prompt or an
+ * external puppet driver — owns teardown, so a hang-up is reliable even when
+ * the realtime transport has died mid-wrap.
+ *
+ * Defaults are "best case" and active without opt-in: the whole LiveKit room
+ * is deleted (which drops the SIP/PSTN leg too, so the carrier gets a BYE),
+ * a guarantee-watchdog re-attempts teardown if the first try doesn't land, and
+ * a dead-air backstop hangs up after the line has been silent too long. Every
+ * knob is overridable; set a field to `false` to disable that guard.
+ */
+interface EndCallPolicy {
+    /**
+     * Teardown strategy. `'room'` (default) deletes the LiveKit room via the
+     * room service — this removes the SIP participant too, so the call actually
+     * disconnects on the carrier side. `'agent'` only drops the agent's own
+     * participant (leaves any SIP leg up); use it only when something else owns
+     * the room lifecycle.
+     */
+    readonly teardown?: 'room' | 'agent';
+    /**
+     * After a hang-up is requested, keep re-attempting teardown until the room
+     * is actually gone or this many ms elapse. Guards against a teardown call
+     * that silently doesn't land (transport race, transient room-service error).
+     * Default 4000. `false` disables (single best-effort attempt).
+     */
+    readonly guaranteeMs?: number | false;
+    /**
+     * Dead-air backstop: when the agent is idle (waiting on the caller) and the
+     * line stays silent — no agent turn, no caller speech — for this many ms,
+     * end the call. Catches a wedged session whose normal `end_call` never ran.
+     * Only armed while the agent is idle, so it never interrupts agent speech or
+     * a long tool call. Default 20000. `false` disables.
+     */
+    readonly idleHangupMs?: number | false;
+    /**
+     * Hard call ceiling: hang up once the call has run this many ms from when
+     * the session becomes ready, regardless of activity. Catches runaway calls
+     * that never end naturally (stuck loops, hijacked keys dialing premium
+     * numbers). Fires with trigger `'max_duration'`. Default 3600000 (60
+     * minutes). `false` disables.
+     */
+    readonly maxCallDurationMs?: number | false;
+    /**
+     * Hook fired the moment a hang-up is decided, just before teardown — for
+     * every trigger (tool, host, idle, max_duration, engine-closed, …). Return
+     * `false` to take over teardown yourself (the SDK then does nothing — the
+     * call will NOT end unless you end it). Returning anything else (or nothing)
+     * runs the default teardown. Throwing is caught + logged, then the default
+     * teardown still runs (safe by default).
+     *
+     * EXCEPT a host hangup (`trigger: 'host'` — MCP `call_hangup`): the host is
+     * the operator, so the hook is told (with the host's reason) and given 2
+     * seconds, but can't keep the call open; the room is always deleted, even
+     * after an earlier hang-up was vetoed and whatever `teardown` says (0.2.0).
+     */
+    readonly onEnd?: (ctx: AgentContext, info: EndCallInfo) => boolean | void | Promise<boolean | void>;
 }
-interface CallUsageReport {
-    readonly durationMs: number;
-    readonly llm: readonly {
-        readonly provider: string;
-        readonly model: string;
-        readonly inputTokens: number;
-        readonly outputTokens: number;
-    }[];
-    readonly tts: readonly {
-        readonly provider: string;
-        readonly chars: number;
-    }[];
-    readonly stt: readonly {
-        readonly provider: string;
-        readonly seconds: number;
-    }[];
-}
-interface AppendTranscriptInput {
-    readonly speaker: 'caller' | 'agent';
-    readonly text: string;
-    readonly startMs: number;
-    readonly endMs: number;
-    readonly final?: boolean;
-}
-type DtmfDirection = 'received' | 'sent';
-interface AppendDtmfEventInput {
-    readonly direction: DtmfDirection;
-    readonly digit: string;
-    readonly code: number;
-    readonly participantId?: string;
-}
-interface EnsureCallByRoomInput {
-    readonly roomName: string;
-    readonly phoneNumberId?: string;
-    readonly agentId?: string;
-    readonly bindingId?: string;
-    readonly callerE164?: string;
-    readonly toE164?: string;
-    readonly attributes?: Record<string, CallAttributeValue>;
-    readonly participants?: CallParticipantInput[];
-    readonly legs?: CallLegInput[];
-    readonly startedAt?: string;
+type ShorthandPrimitive$1 = 'string' | 'number' | 'boolean';
+type ToolInputShape$1 = Record<string, ShorthandPrimitive$1> | z.ZodTypeAny;
+interface ToolDefinition$1<I = unknown, R = unknown> {
+    readonly description: string;
+    readonly input: ToolInputShape$1;
+    readonly run: (input: I, ctx: AgentContext) => Promise<R> | R;
+    /**
+     * Capability this tool requires. Action Guard hard-blocks the call if not
+     * declared (PRD §B.5 — "no soft failures, ever"). Defaults to
+     * `tool.<name>` when omitted; passing a domain-scoped string
+     * (`crm.write`, `payment.refund`) lets multiple tools share a capability
+     * for centralised policy.
+     */
+    readonly capability?: string;
 }
-interface CallParticipantInput {
-    readonly participantKey: string;
-    readonly role: CallParticipantRole;
-    readonly kind: CallParticipantKind;
-    readonly identity?: string | null;
-    readonly address?: string | null;
-    readonly displayName?: string | null;
-    readonly joinedAt?: string;
-    readonly leftAt?: string | null;
-    readonly metadata?: Record<string, unknown>;
+/**
+ * Optional security adapters. The SDK always enforces the local-only synchronous
+ * guards (PRD §B.2 input regex, §B.3 system seal + PII tokenisation, §B.4
+ * markdown strip + PII partial-mask, §B.5 capability check). Setting any of
+ * these augments the local floor with external services. Each is independently
+ * optional — none has to be live for the floor guards to function.
+ *
+ * URLs can also come from env (`SECURITY_LLM_GUARD_URL`,
+ * `SECURITY_PRESIDIO_ANALYZER_URL`, `SECURITY_PRESIDIO_ANONYMIZER_URL`,
+ * `SECURITY_OPA_URL`, `SECURITY_OPA_DECISION_PATH`); explicit config wins.
+ */
+interface SecurityConfig {
+    /** Disable the primitive entirely. Use only for tests. Production code MUST NOT set this. */
+    readonly disabled?: boolean;
+    /** External LLM-Guard adapter for richer injection detection. */
+    readonly llmGuardUrl?: string;
+    /** Presidio analyzer URL for PII detection beyond local regex. */
+    readonly presidioAnalyzerUrl?: string;
+    /** Presidio anonymizer URL — if set, output is redacted before TTS. */
+    readonly presidioAnonymizerUrl?: string;
+    /** OPA decision API base URL (e.g. `http://opa:8181`). */
+    readonly opaUrl?: string;
+    /** OPA decision path (e.g. `voicelayer/security/decision`). */
+    readonly opaDecisionPath?: string;
+    /** Per-request timeout for security adapter calls. */
+    readonly adapterTimeoutMs?: number;
 }
-interface CallLegInput {
-    readonly legKey: string;
-    readonly kind: CallLegKind;
-    readonly status: CallLegStatus;
-    readonly fromParticipantKey?: string | null;
-    readonly toParticipantKey?: string | null;
-    readonly fromAddress?: string | null;
-    readonly toAddress?: string | null;
-    readonly startedAt?: string;
-    readonly endedAt?: string | null;
-    readonly metadata?: Record<string, unknown>;
+/**
+ * Marks an agent as a *flow-runtime* worker: instead of a fixed process it
+ * resolves the deployed flow from the dispatch metadata (`agentId`) at call
+ * time, fetches that agent's compiled process_schema, and boots from it. One
+ * process serves many flows (the shared pool). See defineFlowRuntime().
+ */
+interface FlowRuntimeConfig {
+    /** Prepended to the flow's compiled say/confirm prompt fragments. */
+    readonly basePrompt?: string;
+    /** Spoken (verbatim) before hanging up when a flow call's schema cannot be
+     *  loaded. A failed flow boot NEVER silently answers as a generic assistant. */
+    readonly bootFailureMessage?: string;
 }
-interface SyncCallStateInput {
-    readonly attributes?: Record<string, CallAttributeValue>;
-    readonly participants?: CallParticipantInput[];
-    readonly legs?: CallLegInput[];
+/** Output content-moderation guard config (P5). Mirrors @voicelayer/plugin-guard's
+ *  GuardConfig; the pure inspector lives in runtime/guard.ts. */
+interface GuardConfig {
+    /** Flag content longer than this many characters. Default 8000. */
+    readonly maxLength?: number;
+    /** Substrings that flag content (case-insensitive). Default none. */
+    readonly bannedSubstrings?: readonly string[];
 }
-declare class CallsClient {
-    private readonly transport;
-    constructor(transport: Transport);
-    getByRoom(roomName: string): Promise<CallSummary>;
-    ensureByRoom(input: EnsureCallByRoomInput): Promise<CallSummary>;
-    syncState(callId: string, input: SyncCallStateInput): Promise<void>;
-    appendTranscriptSegment(callId: string, input: AppendTranscriptInput): Promise<void>;
-    reportUsage(callId: string, report: CallUsageReport): Promise<void>;
-    appendDtmfEvent(callId: string, input: AppendDtmfEventInput): Promise<void>;
+interface AgentConfig<TProcess extends Record<string, ProcessField> = Record<string, ProcessField>> {
+    /** Lowercase, kebab-case identifier. Used for LiveKit dispatch + presence. */
+    readonly name: string;
+    /** System prompt the LLM sees. */
+    readonly prompt: string;
+    /** Fixed opening line, spoken instantly via TTS at the start of the default
+     *  conversation flow — NO LLM. Eliminates the dead air of an LLM-generated
+     *  greeting (the first generateReply must process the whole system prompt).
+     *  Absent → the SDK falls back to an LLM-generated greeting. */
+    readonly greeting?: string;
+    /** Agent-level Instructions (the routing/decision layer): plain-language guidance
+     *  for WHEN the agent acts, appended below the persona under a `# Routing` header.
+     *  Interpolated with {{ }} by the process runtime. Optional. */
+    readonly routingInstructions?: string;
+    /** Capability tags surfaced in the dashboard. */
+    readonly capabilities?: readonly string[];
+    /** Semantic version. Defaults to AGENT_VERSION env or '0.0.0'. */
+    readonly version?: string;
+    /** dev / stg / prd. Defaults to AGENT_ENVIRONMENT env or 'dev'. */
+    readonly environment?: AgentEnvironment;
+    readonly process?: ProcessDefinition<TProcess>;
+    readonly triggers?: Readonly<Record<string, TriggerDefinition>>;
+    readonly handoff?: HandoffConfig;
+    readonly memory?: MemoryConfig;
+    readonly participants?: ParticipantsConfig;
+    readonly connectors?: Readonly<Record<string, ConnectorInstance>>;
+    readonly compliance?: readonly ComplianceTag[];
+    readonly models?: ModelConfig;
+    readonly outbound?: OutboundCallConfig;
+    readonly speech?: SpeechConfig;
+    readonly endCall?: EndCallPolicy;
+    readonly tools?: Readonly<Record<string, ToolDefinition$1>>;
+    /** Per-agent registry-tool scoping (stored ToolBinding names, applied at
+     *  boot). Non-empty → only these dashboard HTTP tools attach; absent/[] →
+     *  every enabled registry tool attaches (the historical default). */
+    readonly toolBindings?: readonly string[];
+    readonly security?: SecurityConfig;
+    /** Output content-moderation guard (P5). When set, each assistant turn is
+     *  inspected and a violation is recorded as an engine.guard.blocked event on
+     *  the call timeline. OBSERVE-ONLY on voice — it audits, it does not unsay a
+     *  spoken turn. Absent → no guard. */
+    readonly guard?: GuardConfig;
     /**
-     * Append a structured call event — consultation lifecycle kinds, or the
-     * operational vocabulary the call-detail Timeline renders between
-     * transcript rows (tool.* / handoff.* / lookup.* / record.* / notify.*).
-     * See apps/api/src/routes/calls.ts AppendEventBody for the accepted shapes.
+     * Per-call ConsultationPolicy used by the built-in `ask_host` tool. When
+     * omitted the SDK uses the contract defaults (30s per-consult, 120s
+     * cumulative). Plan-first calls override this at boot from
+     * `plan.draftConfig.consultation`. See
+     * packages/contracts/src/consultation.ts for the schema + semantics.
+     */
+    readonly consultation?: ConsultationPolicy;
+    /**
+     * Use your existing text agent as the LLM. When set (and `models.llm` is
+     * unset), defineAgent wires the pipeline's LLM slot to this function: the
+     * caller's STT transcript is passed to `onQuery`, and its returned text (or
+     * streamed pieces) is spoken by TTS. The "two lines, keep your stack" path.
      *
-     * The agent SDK's built-in `ask_host` tool calls this on consultation start
-     * / end; the handoff runtime and graph interpreter emit op events through it
-     * so the operational story (dial → answered → briefed → dropped, tool calls)
-     * is visible in the dashboard, not just the spoken transcript.
+     * Equivalent to `models: { llm: connector.llm({ onQuery }) }`. For a remote
+     * brain instead, use `connector.llm({ url })` (direct) or a tunnel transport.
+     * See docs/specs/voice-brain-connector/.
      */
-    appendEvent(callId: string, input: {
-        readonly kind: 'consultation.requested' | 'consultation.resolved' | `tool.${string}` | `handoff.${string}` | `lookup.${string}` | `record.${string}` | `notify.${string}`;
-        readonly payload: Record<string, unknown>;
-    }): Promise<void>;
-}
-
-interface CreateFormSessionInput {
-    readonly formId: string;
-    readonly recipientPhone: string;
-    readonly recipientName?: string;
-    readonly prefill?: Record<string, unknown>;
-    readonly webhookUrl?: string;
-    readonly callbackFromNumber?: string;
-    readonly ttlSeconds?: number;
+    readonly onQuery?: OnQuery;
+    readonly onUtterance?: (text: string, ctx: AgentContext) => Promise<void> | void;
+    readonly onFieldCaptured?: (field: string, value: unknown, ctx: AgentContext) => Promise<void> | void;
+    readonly onCallEnd?: (outcome: CallOutcomeSummary, ctx: AgentContext) => Promise<void> | void;
+    readonly onEvent?: (event: AgentLifecycleEvent) => void;
+    /** Replace the default conversation loop. The SDK does NOT auto-greet. */
+    readonly onCall?: (ctx: AgentContext) => Promise<void>;
+    readonly readiness?: readonly ReadinessProbe[];
     /**
-     * When set, the API will SMS the link from this phone number immediately
-     * after creating the session. This is the common case for agent-led use:
-     * the agent calls sendFormLink during a conversation and the recipient
-     * gets a text right away.
+     * Run as a remote-controlled (puppet) agent: no autonomous LLM loop, no
+     * process/triggers pipeline. STT utterances are still published to
+     * `call-events:{callId}` via the existing transcript-segments sync, and
+     * the SDK subscribes to `call-control:{room}` to receive `say`,
+     * `hangup`, `dtmf` commands from an external driver (typically the MCP
+     * server invoked by a coding agent).
+     *
+     * When this is on, `process`, `triggers`, `onUtterance`, `onCall` are
+     * ignored. `tools`, `connectors`, `memory` still work.
      */
-    readonly sendSms?: {
-        readonly phoneNumberId: string;
-        readonly bodyPrefix?: string;
-    };
+    readonly puppetMode?: boolean;
     /**
-     * When set, the API will email the link to `to` immediately after creating
-     * the session. Independent from sendSms — set both for belt-and-braces
-     * delivery, set neither to just receive the URL back. Use this when SMS is
-     * blocked by toll-fraud / 10DLC registration.
+     * Host-controlled autonomous agent (the "smart puppet"). UNLIKE puppetMode,
+     * the agent keeps its REAL LLM and drives the conversation itself from its
+     * prompt (the per-call `intent` is appended at boot). Since 0.2.0 EVERY
+     * agent listens on its call's control channel (the MCP host can interject
+     * with `say`, `hangup` or send `dtmf`, and answer `ask_host`), so this flag
+     * now only shapes turn handling for a host-driven call. Use this for an agent that takes a customer's
+     * intent and runs the call like a human secretary, asking the host for any
+     * info it's missing. Mutually exclusive in spirit with puppetMode (which is
+     * the older NoOp "dumb mouth").
      */
-    readonly sendEmail?: {
-        readonly to: string;
-        readonly subject?: string;
-        readonly bodyPrefix?: string;
-    };
-}
-interface CreatedFormSession {
-    readonly sessionId: string;
-    readonly token: string;
-    readonly url: string;
-    readonly smsId: string | null;
-    readonly emailId: string | null;
-    readonly expiresAt: string;
-}
-interface PublicFormSessionView {
-    readonly schema: {
-        readonly id: string;
-        readonly version: number;
-        readonly title: string;
-        readonly description?: string | undefined;
-        readonly survey: Record<string, unknown>;
-    };
-    readonly values: Record<string, unknown>;
-    readonly status: 'pending' | 'active' | 'live' | 'submitted' | 'expired';
-    readonly recipientPhoneMasked: string;
-    readonly hasActiveCall: boolean;
-    readonly submittedAt: string | null;
-    readonly expiresAt: string;
+    readonly hostControlled?: boolean;
+    /** When set, this agent boots each call from a deployed flow's process_schema. */
+    readonly flowRuntime?: FlowRuntimeConfig;
+    /**
+     * Opt a hand-coded (non-flow) agent into the dashboard-driven pipeline: on
+     * each call the SDK fetches this agent's PUBLISHED configuration (a saved
+     * dashboard draft applies only once the owner publishes it) and applies
+     * the operator-selected voice / model / STT over the coded defaults. The
+     * pipeline *mode* (cascade vs realtime) stays pinned to what the code
+     * declares — a stale `mode=realtime` in the dashboard can't flip a
+     * cascade-only worker. Flow agents (`flowRuntime`) get this implicitly and
+     * may additionally switch mode; this flag is the SDK opt-in. The agent id is
+     * read from dispatch metadata (the inbound router injects it from
+     * phone_numbers.agentId), so it's a no-op for calls without one.
+     */
+    readonly pipelineFromConfig?: boolean;
+    /**
+     * Opt this agent into MCP-layer visibility. When true, on register the API
+     * also writes an `agent_config` row keyed by (project_id, name,
+     * environment) so MCP / dashboard / REST can list and inspect this agent
+     * (and, post-step-7, drive call_say / call_send_guidance / etc against
+     * its live calls).
+     *
+     * Defaults to true so newly-registered agents show up in dashboards and
+     * MCP-host listings without opt-in. Pass `false` for autonomous-only
+     * agents that should stay invisible to MCP. See
+     * docs/architecture/contracts-design.md §2b.
+     */
+    readonly mcpExposed?: boolean;
 }
-declare class FormsClient {
-    private readonly transport;
-    constructor(transport: Transport);
-    createSession(input: CreateFormSessionInput): Promise<CreatedFormSession>;
-    getByToken(token: string): Promise<PublicFormSessionView>;
-    patchValues(token: string, values: Record<string, unknown>): Promise<{
-        values: Record<string, unknown>;
-        updatedAt: string;
-    }>;
-    submit(token: string, values: Record<string, unknown>): Promise<{
-        responseId: string;
-        submittedAt: string;
-    }>;
+interface CallOutcomeSummary {
+    readonly reason: 'completed' | 'handoff' | 'caller_hung_up' | 'agent_hung_up' | 'error';
+    readonly durationMs: number;
+    readonly processCompleted: boolean;
+    readonly fieldsCaptured: number;
+    readonly handoffOccurred: boolean;
 }
+/**
+ * Identity helper that gives users a typed `defineProcess` entry point with
+ * full inference on `onComplete`'s `data` argument.
+ *
+ *   defineProcess({
+ *     collect: { name: { type: 'string', required: true } },
+ *     onComplete: (data) => { data.name // string },
+ *   })
+ */
+declare function defineProcess<T extends Record<string, ProcessField>>(def: ProcessDefinition<T>): ProcessDefinition<T>;
 
-interface SendEmailInput {
-    readonly to: string;
-    readonly subject: string;
-    readonly text: string;
-    readonly html?: string;
-}
-interface SentEmail {
-    readonly emailId: string;
+interface RunAgentTextTranscriptOptions {
+    /** The agent's system prompt / instructions (its code-defined behavior). */
+    readonly instructions: string;
+    /** The LLM that generates replies — injected so this stays provider-agnostic and
+     *  unit-testable (real inference/openai LLM in prod; a scripted fake in tests). */
+    readonly llm: llm.LLM;
+    /** Scripted caller turns, run in order; each produces the agent's reply turn(s). */
+    readonly messages: readonly string[];
+    /** Optional id surfaced on the Agent (for traceability). */
+    readonly agentId?: string;
 }
-declare class EmailClient {
-    private readonly transport;
-    constructor(transport: Transport);
-    send(input: SendEmailInput): Promise<SentEmail>;
+interface AgentTextTranscriptResult {
+    readonly replies: string[];
 }
-
-declare class PlansClient {
-    private readonly transport;
-    constructor(transport: Transport);
+interface RunLiveAgentTextOptions {
+    /** The agent's system prompt / instructions (its code-defined behavior). */
+    readonly instructions: string;
+    /** The LLM that generates replies (injected — real provider LLM or a fake). */
+    readonly llm: llm.LLM;
+    /** Optional id surfaced on the Agent (for traceability). */
+    readonly agentId?: string;
     /**
-     * Fetch a plan by id. Project scoping is enforced by the API via the
-     * caller's VOICELAYER_API_KEY — a cross-project planId surfaces as 404.
-     * Returns `null` on 404 so the caller can fall back to legacy boot.
+     * Labels for the model usage each turn reports (the surface that owns the reply meters it): which provider and
+     * model this session's LLM is, and whether the workspace's own key (BYOK) serves it. Absent ⇒ turns report no usage.
      */
-    getById(planId: string): Promise<CallPlan | null>;
-}
-
-declare const ProviderCredential: z.ZodObject<{
-    apiKey: z.ZodString;
-    baseUrl: z.ZodOptional<z.ZodString>;
-}, "strip", z.ZodTypeAny, {
-    apiKey: string;
-    baseUrl?: string | undefined;
-}, {
-    apiKey: string;
-    baseUrl?: string | undefined;
-}>;
-type ProviderCredential = z.infer<typeof ProviderCredential>;
-declare const BrainConnectorConfig: z.ZodObject<{
-    connector: z.ZodObject<{
-        id: z.ZodString;
-        mode: z.ZodEnum<["tunnel", "direct"]>;
-        connectionId: z.ZodNullable<z.ZodString>;
-        defaultModel: z.ZodNullable<z.ZodString>;
-        normalize: z.ZodEnum<["auto", "on", "off"]>;
-        enabled: z.ZodBoolean;
-        credential: z.ZodOptional<z.ZodNullable<z.ZodObject<{
-            apiKey: z.ZodString;
-            baseUrl: z.ZodString;
-        }, "strip", z.ZodTypeAny, {
-            apiKey: string;
-            baseUrl: string;
-        }, {
-            apiKey: string;
-            baseUrl: string;
-        }>>>;
-    }, "strip", z.ZodTypeAny, {
-        id: string;
-        enabled: boolean;
-        mode: "tunnel" | "direct";
-        defaultModel: string | null;
-        connectionId: string | null;
-        normalize: "on" | "off" | "auto";
-        credential?: {
-            apiKey: string;
-            baseUrl: string;
-        } | null | undefined;
-    }, {
-        id: string;
-        enabled: boolean;
-        mode: "tunnel" | "direct";
-        defaultModel: string | null;
-        connectionId: string | null;
-        normalize: "on" | "off" | "auto";
-        credential?: {
-            apiKey: string;
-            baseUrl: string;
-        } | null | undefined;
-    }>;
-}, "strip", z.ZodTypeAny, {
-    connector: {
-        id: string;
-        enabled: boolean;
-        mode: "tunnel" | "direct";
-        defaultModel: string | null;
-        connectionId: string | null;
-        normalize: "on" | "off" | "auto";
-        credential?: {
-            apiKey: string;
-            baseUrl: string;
-        } | null | undefined;
-    };
-}, {
-    connector: {
-        id: string;
-        enabled: boolean;
-        mode: "tunnel" | "direct";
-        defaultModel: string | null;
-        connectionId: string | null;
-        normalize: "on" | "off" | "auto";
-        credential?: {
-            apiKey: string;
-            baseUrl: string;
-        } | null | undefined;
+    readonly meter?: {
+        readonly provider: string;
+        readonly model: string;
+        readonly byok: boolean;
     };
-}>;
-type BrainConnectorConfig = z.infer<typeof BrainConnectorConfig>['connector'];
-declare class ConnectionsClient {
-    private readonly transport;
-    constructor(transport: Transport);
-    resolveProviderCredential(provider: string): Promise<ProviderCredential | null>;
-    resolveBrainConnectorConfig(id: string): Promise<BrainConnectorConfig | null>;
 }
+/** Model usage behind one turn (one entry per model request) — the host-sdk `TurnModelUsage` shape, structurally. */
+interface LiveAgentTurnUsage {
+    readonly provider: string;
+    readonly model: string;
+    readonly inputTokens: number;
+    readonly outputTokens: number;
+    readonly byok: boolean;
+}
+/** One live turn of a code-first agent: the assistant text for that turn, and
+ *  whether the conversation ended (code-first sessions stay open until `end`). */
+interface LiveAgentTurn {
+    readonly replies: string[];
+    readonly done: boolean;
+    /** The model requests this turn made (only when the session was given `meter` labels). */
+    readonly usage?: readonly LiveAgentTurnUsage[];
+}
+/** A live, turn-by-turn conversation with a code-first agent — the AgentSession is
+ *  kept alive across turns (it carries chat history internally), so this is the
+ *  code-first analogue of `runLiveTextConversation` (the flow driver). Shape
+ *  matches the engine's AgentConversation so the agent-runner drives both alike. */
+interface LiveAgentTextSession {
+    /** Start the session. Code-first agents don't auto-greet in no-room text mode,
+     *  so the opening turn is empty; the first user turn produces the first reply. */
+    start(): Promise<LiveAgentTurn>;
+    /** Feed one user message; resolves with the agent's replies for that turn. */
+    turn(text: string): Promise<LiveAgentTurn>;
+    /** Close the session. */
+    end(): Promise<void>;
+}
+declare function runLiveAgentTextSession(opts: RunLiveAgentTextOptions): LiveAgentTextSession;
+/** Drive an instruction-based agent over text and collect its replies. Stateless
+ *  batch turn — built on the live driver (start → turn per message → end). */
+declare function runAgentTextTranscript(opts: RunAgentTextTranscriptOptions): Promise<AgentTextTranscriptResult>;
 
-interface BrainMessage {
-    readonly role: 'system' | 'user' | 'assistant';
-    readonly content: string;
-}
-interface BrainCallMetadata {
-    readonly channel: 'voice' | 'text';
-    readonly callId?: string;
-    readonly projectId?: string;
+interface WrapOptions<T> {
+    /** Emit OTel spans around each method call. Default: true. */
+    readonly trace?: boolean;
+    /** Tag spans with `vl.provider.label` for easy filtering. */
+    readonly label?: string;
+    /**
+     * Fallback provider used if the primary throws. Accepts an instance OR a
+     * ProviderFactory (so `deepgram.tts(...)` works directly). The fallback is
+     * resolved lazily on first error.
+     */
+    readonly fallback?: T | ProviderFactory<T>;
+    /**
+     * Methods to instrument. By default the wrapper instruments every method
+     * call. Pass an explicit list to limit overhead on hot paths.
+     */
+    readonly methods?: readonly string[];
 }
-interface BrainRequest {
-    readonly messages: readonly BrainMessage[];
-    /** Upstream model id / alias. Omitted → the brain's own default. */
-    readonly model?: string;
-    readonly temperature?: number;
-    readonly metadata: BrainCallMetadata;
-}
-/** One streamed piece of the brain's reply. */
-interface BrainChunk {
-    readonly content?: string;
-}
-interface BrainCapabilities {
-    readonly reachable: boolean;
-    readonly streaming: boolean;
-}
-interface BrainTransport {
-    readonly kind: 'callback' | 'http' | 'tunnel';
-    /** Stream the reply token-by-token (the voice path: first sentence → TTS ASAP). */
-    stream(req: BrainRequest, signal: AbortSignal): AsyncIterable<BrainChunk>;
-    /** Non-streaming convenience (the text path). */
-    complete(req: BrainRequest, signal: AbortSignal): Promise<string>;
-}
-/** Context handed to a customer's in-process `onQuery` brain. */
-interface OnQueryContext {
-    /** Full conversation so far (system + prior turns + latest user message). */
-    readonly messages: readonly BrainMessage[];
-    /** Aborts when the caller barges in / the turn is cancelled. */
-    readonly signal: AbortSignal;
-}
-type OnQueryResult = string | AsyncIterable<string>;
 /**
- * Bring-your-own brain, in-process. Receives the latest user utterance (and the
- * full history via `ctx.messages`) and returns the reply — either a string or an
- * async-iterable of string pieces for token streaming.
+ * Returns either the wrapped instance directly (when called with one) or a
+ * ProviderFactory that produces the wrapped instance (when called with one of
+ * those). This keeps the lazy import story intact: `wrap(deepgram.tts(...))`
+ * is itself a factory.
  */
-type OnQuery = (text: string, ctx: OnQueryContext) => OnQueryResult | Promise<OnQueryResult>;
+declare function wrap<T extends object>(target: T | ProviderFactory<T>, options?: WrapOptions<T>): T | ProviderFactory<T>;
 
-/** Primitive field types accepted in a process definition. */
-type ProcessFieldType = 'string' | 'string[]' | 'number' | 'boolean' | 'datetime' | 'email' | 'phone';
-interface ProcessField {
-    readonly type: ProcessFieldType;
-    readonly required?: boolean;
-    /** Regex pattern for `string` / `string[]` items. */
-    readonly pattern?: RegExp;
-    /** Inclusive lower bound on a number or array length. */
-    readonly min?: number;
-    /** Inclusive upper bound on a number or array length. */
-    readonly max?: number;
-    /** One of N — restricts the captured value to this set. */
-    readonly enum?: readonly string[];
-    /** Override the auto-generated prompt for capturing this field. */
-    readonly ask?: string;
-    /** Override the field-extraction hint shown to the LLM. */
-    readonly extract?: string;
+interface ProviderCreds {
+    readonly apiKey?: string;
+    readonly baseURL?: string;
 }
-type CompletionStrategy = 'all-required-captured' | 'all-captured' | {
-    custom: (data: Record<string, unknown>, ctx: AgentContext) => boolean | Promise<boolean>;
+declare const deepgram: {
+    stt(options?: {
+        model?: string;
+        language?: string;
+        apiKey?: string;
+        baseURL?: string;
+    }): ProviderFactory<STTProvider>;
+    tts(options?: {
+        model?: string;
+        apiKey?: string;
+        baseURL?: string;
+    }): ProviderFactory<TTSProvider>;
 };
-interface ProcessBackendAck {
-    /** URL to POST captured data to. The call cannot complete until this 2xx's. */
-    readonly url: string;
-    readonly timeoutMs?: number;
-    readonly headers?: Readonly<Record<string, string>>;
-}
-interface ProcessDefinition<T extends Record<string, ProcessField> = Record<string, ProcessField>> {
-    /** Field schema. Order is preserved when the SDK auto-asks for fields. */
-    readonly collect: T;
-    /** When the call can end. Defaults to 'all-required-captured'. */
-    readonly completeWhen?: CompletionStrategy;
-    /** Optional external system that must ACK before completion. */
-    readonly backendAck?: ProcessBackendAck;
-    /** Fires once all completion conditions are met. */
-    readonly onComplete?: (data: InferProcessData<T>, ctx: AgentContext) => Promise<void> | void;
-    /** Fires whenever a field is captured (good for live CRM updates). */
-    readonly onField?: <K extends keyof T>(field: K, value: InferFieldValue<T[K]>, ctx: AgentContext) => Promise<void> | void;
-}
-/** Inferred TS type for the data bag a process produces. */
-type InferProcessData<T extends Record<string, ProcessField>> = {
-    [K in keyof T]: T[K]['required'] extends true ? InferFieldValue<T[K]> : InferFieldValue<T[K]> | undefined;
+declare const openai: {
+    llm(options?: {
+        model?: string;
+        apiKey?: string;
+        baseURL?: string;
+    }): ProviderFactory<LLMProvider>;
+    tts(options?: {
+        model?: string;
+        voice?: string;
+        instructions?: string;
+        apiKey?: string;
+        baseURL?: string;
+    }): ProviderFactory<TTSProvider>;
+    realtime(options?: {
+        model?: string;
+        voice?: string;
+        apiKey?: string;
+        baseURL?: string;
+    }): ProviderFactory<RealtimeProvider>;
 };
-type InferFieldValue<F extends ProcessField> = F['type'] extends 'string' ? string : F['type'] extends 'string[]' ? string[] : F['type'] extends 'number' ? number : F['type'] extends 'boolean' ? boolean : F['type'] extends 'datetime' ? Date : F['type'] extends 'email' ? string : F['type'] extends 'phone' ? string : never;
-type TriggerCondition = RegExp | `signal:${string}` | ((text: string, ctx: AgentContext) => boolean | Promise<boolean>);
-type TriggerAction = 'handoff' | 'endCall' | {
-    say: string;
-} | {
-    run: (ctx: AgentContext) => Promise<void> | void;
-}
-/** Jump the flow-graph cursor to a node id. Only meaningful under the graph
- *  interpreter (the flat goals+rails path has no cursor and ignores it). */
- | {
-    goto: string;
+declare const cartesia: {
+    tts(options?: {
+        voice?: string;
+        model?: string;
+        apiKey?: string;
+        baseURL?: string;
+    }): ProviderFactory<TTSProvider>;
+    stt(options?: {
+        model?: string;
+        language?: string;
+        apiKey?: string;
+        baseURL?: string;
+    }): ProviderFactory<STTProvider>;
 };
-interface TriggerDefinition {
-    readonly on: TriggerCondition;
-    readonly then: TriggerAction;
-    /** If set, the trigger only fires while the named field is uncaptured. */
-    readonly onlyWhile?: string;
+declare const elevenlabs: {
+    tts(options?: {
+        voice?: string;
+        model?: string;
+        apiKey?: string;
+        baseURL?: string;
+    }): ProviderFactory<TTSProvider>;
+};
+declare const assemblyai: {
+    stt(options?: {
+        language?: string;
+        apiKey?: string;
+        baseURL?: string;
+    }): ProviderFactory<STTProvider>;
+};
+declare const google: {
+    llm(options?: {
+        model?: string;
+        apiKey?: string;
+        baseURL?: string;
+    }): ProviderFactory<LLMProvider>;
+    realtime(options?: {
+        model?: string;
+        voice?: string;
+        apiKey?: string;
+        baseURL?: string;
+    }): ProviderFactory<RealtimeProvider>;
+};
+declare const silero: {
+    vad(): ProviderFactory<VADProvider>;
+};
+declare const livekitTurn: {
+    english(): ProviderFactory<TurnDetectorProvider>;
+    multilingual(): ProviderFactory<TurnDetectorProvider>;
+};
+interface ConnectorLLMConfig {
+    /** Upstream model id / alias (defaults to the brain's own default). */
+    readonly model?: string;
+    readonly temperature?: number;
+    /** Spoken instead of dead air when the brain errors before replying. */
+    readonly fallbackText?: string;
+    /** In-process brain. */
+    readonly onQuery?: OnQuery;
+    /** Direct-egress brain — a public OpenAI-compatible base URL. */
+    readonly url?: string;
+    /** API key for the direct-egress endpoint. */
+    readonly apiKey?: string;
+    /** Hostnames that bypass the SSRF IP checks (direct mode). */
+    readonly allowHosts?: readonly string[];
+    /** Advanced: a custom transport (tunnel, etc.). */
+    readonly transport?: BrainTransport;
 }
-interface HandoffConfig {
-    /** Default human number when a trigger says { then: 'handoff' }. */
-    readonly fallback: string;
-    /** Map signal/trigger names to specific destinations. */
-    readonly routes?: Readonly<Record<string, string>>;
-    /** Build the briefing text passed to the human agent (or PSTN whisper). */
-    readonly briefing?: (args: {
-        readonly data: Record<string, unknown>;
-        readonly transcript: TranscriptHandle;
-        readonly call: AgentContext['call'];
-    }) => string | Promise<string>;
-    /**
-     * 'warm' (default) dials the human into the room as a conference, lets the
-     * agent brief them live, then drops the agent — caller + human stay
-     * connected. 'cold' is a blind SIP REFER: the caller is transferred away
-     * immediately. Warm falls back to cold when no outbound trunk is configured.
-     */
-    readonly mode?: 'warm' | 'cold';
+declare const connector: {
+    llm(config?: ConnectorLLMConfig): ProviderFactory<LLMProvider>;
+};
+
+/** The control-plane reads the resolver needs. Structural (not the full
+ *  VoiceLayerClient) so it stays trivially fakeable in tests — a real client
+ *  satisfies it. */
+interface AgentTextRuntimeClient {
+    readonly agents: {
+        getPrompt(agentId: string): Promise<string | null>;
+        getConfig(agentId: string): Promise<{
+            readonly model?: {
+                readonly provider: string;
+                readonly model: string;
+            };
+            readonly routingInstructions?: string | undefined;
+        } | null>;
+    };
+    readonly connections: {
+        resolveProviderCredential(provider: string): Promise<{
+            readonly apiKey: string;
+            readonly baseUrl?: string | undefined;
+        } | null>;
+    };
 }
-interface TranscriptHandle {
-    /** Last N turns as `speaker: text` lines. */
-    tail(n: number): string;
-    full(): string;
+interface ResolvedAgentTextRuntime {
+    /** The composed system prompt (persona + routing), ready for the AgentSession. */
+    readonly instructions: string;
+    /** The concrete provider LLM that generates replies. */
+    readonly llm: llm.LLM;
+    /** Which provider/model resolved — surfaced for traceability/logging. */
+    readonly model: {
+        readonly provider: string;
+        readonly model: string;
+    };
+    /** True when a project BYOK key backed the LLM (vs the platform env key). */
+    readonly byok: boolean;
+}
+/** Builds the concrete provider LLM from (provider, model, BYOK creds). Injectable
+ *  so tests can substitute a fake without loading a provider plugin. */
+type BuildTextLlm = (providerId: string, modelId: string, creds: ProviderCreds | undefined) => Promise<llm.LLM>;
+interface ResolveAgentTextRuntimeOptions {
+    /** Override the LLM build (tests). Defaults to the real provider registry. */
+    readonly buildLlm?: BuildTextLlm;
+}
+/** A code-first agent's resolved text runtime WITHOUT the built LLM — the cheap,
+ *  shareable part (instructions + which provider/model + BYOK creds). Cache THIS
+ *  and build a fresh LLM per session, never the LLM itself (an lk.LLM is a live
+ *  EventEmitter — sharing one across concurrent sessions cross-fires errors). */
+interface AgentTextPlan {
+    readonly instructions: string;
+    readonly provider: string;
+    readonly model: string;
+    readonly creds?: ProviderCreds;
+    readonly byok: boolean;
 }
 /**
- * Memory scope. `'participant'` and `'caller'` are synonyms — `'caller'`
- * is the historical name from the 1:1 era; new code should prefer
- * `'participant'`, which makes the multi-party semantics explicit.
+ * Resolve a code-first agent's text PLAN (instructions + provider/model + BYOK),
+ * or `null` when it isn't code-first-runnable (no synced prompt). No LLM built —
+ * this is the cacheable part. Best-effort on the pipeline: a missing/blank config
+ * falls back to the platform default model, mirroring the live path.
  */
-type MemoryScope = 'call' | 'caller' | 'participant' | 'account' | 'platform';
-interface MemoryConfig {
-    /** Which scope to persist to. Defaults to 'caller'. */
-    readonly scope?: MemoryScope;
-    readonly retentionDays?: number;
-    /** Fields auto-redacted on write. Recognized: ssn, dob, email, phone, ccn. */
-    readonly piiFields?: readonly string[];
-    /** Opt in to cross-tenant aggregate memory (anonymized). */
-    readonly platformOptIn?: boolean;
-}
+declare function resolveAgentTextPlan(agentId: string, client: AgentTextRuntimeClient): Promise<AgentTextPlan | null>;
+/** Build a fresh provider LLM for a plan. Call once PER SESSION so no two live
+ *  sessions ever share an lk.LLM instance. */
+declare function buildTextLlm(plan: AgentTextPlan, buildLlm?: BuildTextLlm): Promise<llm.LLM>;
 /**
- * Multi-participant configuration. Optional — when omitted, the agent runs
- * in 1:1 mode (one human + one agent) and the SDK still populates
- * `ctx.room.participants` so participant-aware code paths work.
+ * Resolve a code-first agent's text runtime (plan + a freshly-built LLM), or
+ * `null` when it isn't runnable. Convenience over resolveAgentTextPlan +
+ * buildTextLlm — kept for callers that want a one-shot runtime (and tests).
  */
-interface ParticipantsConfig {
+declare function resolveAgentTextRuntime(agentId: string, client: AgentTextRuntimeClient, opts?: ResolveAgentTextRuntimeOptions): Promise<ResolvedAgentTextRuntime | null>;
+
+interface TransportOptions {
+    readonly apiKey: string;
+    readonly baseUrl: string;
+    readonly fetch?: typeof fetch;
+    readonly maxRetries?: number;
+    readonly initialBackoffMs?: number;
+    readonly userAgent?: string;
+}
+interface RequestOptions {
+    readonly method: 'GET' | 'POST' | 'PATCH' | 'PUT' | 'DELETE';
+    readonly path: string;
+    readonly body?: unknown;
+    readonly query?: Record<string, string | undefined>;
+    readonly signal?: AbortSignal;
+    /** Extra request headers, merged on top of the defaults (auth/content-type
+     *  etc). Lowercase keys recommended. */
+    readonly headers?: Record<string, string>;
+}
+declare class Transport {
+    private readonly options;
+    private readonly fetchImpl;
+    private readonly maxRetries;
+    private readonly initialBackoffMs;
+    constructor(options: TransportOptions);
+    request<T>(opts: RequestOptions, schema: ZodType<T>): Promise<T>;
+    private backoffMs;
+}
+
+interface RegisterInput {
+    readonly name: string;
+    readonly version: string;
+    readonly environment: AgentEnvironment;
+    /** Capability tags (e.g. ['fnol', 'es-MX']). Surfaced in the dashboard. */
+    readonly capabilities?: readonly string[];
     /**
-     * Fires when a human participant joins the room. In 1:1 calls this
-     * fires once at session start for the caller. In multi-party calls it
-     * fires per join.
+     * JSON-serializable process schema for the dashboard "what this agent does"
+     * view. Built by `buildProcessSchemaDTO` from the agent's ProcessDefinition.
      */
-    readonly onJoin?: (participant: Participant, ctx: AgentContext) => Promise<void> | void;
-    /** Fires when a participant disconnects (hangup, transfer, kick). */
-    readonly onLeave?: (participant: Participant, ctx: AgentContext) => Promise<void> | void;
+    readonly processSchema?: ProcessSchemaDTO | null;
     /**
-     * Synchronously enrich a participant's attribute bag before `onJoin`
-     * fires. Useful for phone-number → language lookups, etc. The returned
-     * map is merged into `participant.attributes`.
+     * A code-first agent's base prompt (its `defineAgent({ prompt })`). Synced to
+     * the agent's record so a generic runner can run it over text by id (P2). Omit
+     * for flow agents (their behavior lives in the compiled program).
      */
-    readonly attributes?: (participant: Participant) => Readonly<Record<string, string>> | Promise<Readonly<Record<string, string>>>;
+    readonly prompt?: string | null;
     /**
-     * Reject participants beyond this count. Default: unlimited. The cap
-     * is enforced by the worker when wiring participant lifecycle.
+     * Opt this agent into MCP exposure. When true, the API upserts a matching
+     * agent_config row keyed by (project_id, name, environment) so MCP /
+     * dashboard / REST can list and inspect this agent. Default false — pure
+     * SDK agents that don't need MCP visibility stay invisible to it. See
+     * docs/architecture/contracts-design.md §2b.
      */
-    readonly max?: number;
-}
-/**
- * A connector instance. Created by per-system factories like `salesforce()`,
- * `twilio()`, etc. The factory returns an opaque handle that the SDK wires
- * into `ctx.connectors` and (when `expose: true`) into the LLM tool list.
- */
-interface ConnectorInstance<TName extends string = string, TApi = unknown> {
-    readonly __connector: true;
-    readonly name: TName;
-    readonly api: TApi;
-    /** If true, every method on `api` becomes an LLM-callable tool. */
-    readonly expose?: boolean;
-}
-type ComplianceTag = 'tcpa' | 'hipaa' | 'pci' | 'gdpr' | 'soc2';
-/**
- * Duck-typed pipeline component markers. The SDK never inspects these — they
- * are passed through to LiveKit's AgentSession as-is. Three ways to satisfy:
- *
- *   1. SDK factory:    `deepgram.tts({ model: 'aura-2' })`
- *   2. Wrapped LK:     `wrap(new TTS({...}), { trace: true })`
- *   3. User-built:     class MyTTS extends BaseTTS { ... }   // BaseTTS
- *                                                            // re-exported
- *                                                            // from the SDK
- *
- * Anything implementing the duck-type — even a plain object — is accepted.
- */
-interface STTProvider {
-    readonly __vlPipeline?: 'stt';
+    readonly mcpExposed?: boolean;
+    /**
+     * Self-checks run before sending the register request. Each result is
+     * recorded on the agent. See RegisterOptions.requireReady for failure
+     * policy.
+     */
+    readonly readiness?: readonly ReadinessProbe[];
+    /** User metadata. Merged on top of default metadata (user wins on conflict). */
+    readonly metadata?: Record<string, unknown>;
+    /**
+     * Whether to auto-collect host/runtime/build metadata. Default true. Set
+     * false to send exactly what you pass in `metadata`.
+     */
+    readonly collectDefaults?: boolean;
 }
-interface LLMProvider {
-    readonly __vlPipeline?: 'llm';
-}
-interface TTSProvider {
-    readonly __vlPipeline?: 'tts';
-}
-interface VADProvider {
-    readonly __vlPipeline?: 'vad';
-}
-interface TurnDetectorProvider {
-    readonly __vlPipeline?: 'turn';
-}
-/**
- * Speech-to-speech / realtime model marker (OpenAI Realtime, Gemini Live).
- * A realtime model handles STT + LLM + TTS + turn-taking server-side, so when
- * `models.realtime` is set the SDK builds the AgentSession around it and
- * ignores the stt/llm/tts slots.
- */
-interface RealtimeProvider {
-    readonly __vlPipeline?: 'realtime';
-}
-/**
- * Lazy form so users can pick a provider per call (e.g. by caller locale).
- * The factory runs once per call, before AgentSession is constructed, so it
- * receives the call envelope (callerId, to, metadata) rather than the full
- * AgentContext (which depends on AgentSession existing).
- */
-type ProviderFactory<T> = (call: CallInfo) => T | Promise<T>;
-interface ModelConfig {
-    /**
-     * String form: 'openai/gpt-4o' (resolves via SDK defaults).
-     * Instance form: any LLMProvider (LK plugin, wrap()-ed, or user-built).
-     * Factory form: `(ctx) => provider` for per-call selection.
-     */
-    readonly llm?: string | LLMProvider | ProviderFactory<LLMProvider>;
-    readonly stt?: string | STTProvider | ProviderFactory<STTProvider>;
-    readonly tts?: string | TTSProvider | ProviderFactory<TTSProvider>;
-    /** VAD has no string form — always pass an instance or factory. */
-    readonly vad?: VADProvider | ProviderFactory<VADProvider>;
-    readonly turnDetector?: TurnDetectorProvider | ProviderFactory<TurnDetectorProvider>;
+interface RegisterOptions {
     /**
-     * Speech-to-speech / realtime model. When set, the STT→LLM→TTS pipeline is
-     * bypassed: the realtime model drives the whole turn. No string form — pass
-     * an instance (`openai.realtime({ voice: 'alloy' })`) or a per-call factory.
+     * Override server-suggested heartbeat cadence (ms). When omitted, the SDK
+     * uses the value returned by /v1/agents/register, falling back to
+     * AGENT_HEARTBEAT_INTERVAL_MS.
      */
-    readonly realtime?: RealtimeProvider | ProviderFactory<RealtimeProvider>;
-    /** Spoken language; defaults to 'en-US'. Used by string-form defaults. */
-    readonly language?: string;
-}
-/**
- * Answering-machine detection mode for outbound calls. Mirrors
- * `OutboundConfig.amd` in @voicelayer/agent-spec.
- *
- *   'off'              — never run AMD; treat every answer as a human.
- *   'detect'           — leave the voicemail message (or hang up) the moment
- *                        a machine greeting is recognised.
- *   'detectMessageEnd' — recognise the machine, then wait for the greeting to
- *                        finish (an explicit "after the tone"-style cue or the
- *                        greeting going quiet) before leaving the message.
- */
-type AmdMode = 'off' | 'detect' | 'detectMessageEnd';
-/**
- * Outbound-only behavior. AMD never runs on inbound calls (the runtime gates
- * on the dispatch-metadata `direction`), so these knobs are inert unless the
- * call was placed via the outbound path.
- */
-interface OutboundCallConfig {
-    /** Answering-machine detection mode. Defaults to 'off'. */
-    readonly amd?: AmdMode;
+    readonly heartbeatIntervalMs?: number;
     /**
-     * Spoken (via TTS) when a machine is detected. When unset, the agent hangs
-     * up on detection instead of leaving a message.
+     * Disable signal handlers (SIGTERM/SIGINT). Useful in tests and in hosts
+     * that own their own shutdown lifecycle.
      */
-    readonly voicemailScript?: string;
-}
-/**
- * Barge-in tuning. The pipeline allows interruptions by default (LK defaults:
- * any speech ≥500ms cuts the agent off). These knobs tune that behavior per
- * agent WITHOUT switching to puppet/hostControlled mode — e.g. a senior-living
- * help desk wants `minWords: 2` so backchannels ("mm-hm", "okay") don't
- * truncate the agent mid-sentence, while a fast-paced escalation desk keeps
- * the zero-word default. Set `enabled: false` to make the agent
- * non-interruptible (kiosk / broadcast announcements).
- */
-interface InterruptionConfig {
-    /** Allow the caller to barge in over agent speech. Default true. */
-    readonly enabled?: boolean;
-    /** Words the caller must say before it counts as an interruption. Default 0
-     *  (any speech interrupts). 2–3 filters out backchannels. */
-    readonly minWords?: number;
-    /** Minimum caller speech duration (ms) to count as an interruption. Default 500. */
-    readonly minDuration?: number;
-}
-/**
- * End-of-turn detection tuning: how long the pipeline waits after the caller
- * stops speaking before treating the turn as finished. Raise `minDelay` for
- * callers who pause mid-thought (e.g. elderly speakers); lower it for
- * fast-paced lines.
- */
-interface EndpointingConfig {
-    /** Minimum silence (ms) before the caller's turn is considered done. Default 500. */
-    readonly minDelay?: number;
-    /** Hard ceiling (ms) after which the turn ends regardless. Default 3000. */
-    readonly maxDelay?: number;
-}
-/**
- * Speech polish. `pronunciations` rewrites brand names / acronyms / jargon to
- * a spoken form before TTS (e.g. `{ VoiceLayer: 'Voice Layer', API: 'A P I' }`)
- * via applyPronunciations(). `backgroundAudio` plays ambient room tone under
- * the agent so silence feels less dead (a URL or a named preset).
- * `interruption` + `endpointing` tune barge-in and turn-taking per agent.
- */
-interface SpeechConfig {
-    readonly pronunciations?: Readonly<Record<string, string>>;
-    readonly backgroundAudio?: string | {
-        readonly url?: string;
-        readonly volume?: number;
-    };
-    readonly interruption?: InterruptionConfig;
-    readonly endpointing?: EndpointingConfig;
-}
-/** What caused the call to end. Surfaced to `endCall.onEnd` + logs. */
-type EndCallTrigger = 
-/** The LLM invoked the built-in `end_call` tool. */
-'tool'
-/** An external controller (MCP host) sent a `hangup` command. */
- | 'host'
-/** The dead-air backstop fired (`idleHangupMs` of silence while idle). */
- | 'idle'
-/** The hard per-call ceiling fired (`maxCallDurationMs` elapsed). */
- | 'max_duration'
-/** The last non-agent participant left the room. */
- | 'participant-left'
-/** A flow/graph run finished and asked to hang up. */
- | 'flow'
-/** The realtime engine closed / disconnected under the session. */
- | 'engine-closed'
-/** `ctx.endCall()` called directly from user code. */
- | 'user';
-/** Passed to `endCall.onEnd` describing the teardown about to happen. */
-interface EndCallInfo {
-    /** Why the call is ending (e.g. the `end_call` tool's `reason`). */
-    readonly reason?: string;
-    /** What triggered the hang-up. */
-    readonly trigger: EndCallTrigger;
-    /** The teardown strategy that will run (after the policy is resolved). */
-    readonly teardown: 'room' | 'agent';
-}
-/**
- * Controls how the agent ENDS a call. The SDK — not the agent prompt or an
- * external puppet driver — owns teardown, so a hang-up is reliable even when
- * the realtime transport has died mid-wrap.
- *
- * Defaults are "best case" and active without opt-in: the whole LiveKit room
- * is deleted (which drops the SIP/PSTN leg too, so the carrier gets a BYE),
- * a guarantee-watchdog re-attempts teardown if the first try doesn't land, and
- * a dead-air backstop hangs up after the line has been silent too long. Every
- * knob is overridable; set a field to `false` to disable that guard.
- */
-interface EndCallPolicy {
+    readonly attachSignalHandlers?: boolean;
     /**
-     * Teardown strategy. `'room'` (default) deletes the LiveKit room via the
-     * room service — this removes the SIP participant too, so the call actually
-     * disconnects on the carrier side. `'agent'` only drops the agent's own
-     * participant (leaves any SIP leg up); use it only when something else owns
-     * the room lifecycle.
+     * On SIGTERM/SIGINT, call DELETE /v1/agents/:id before exiting so the
+     * dashboard reflects "gone" immediately instead of waiting for offline
+     * timeout. Default true. Best-effort: errors are swallowed.
      */
-    readonly teardown?: 'room' | 'agent';
+    readonly deregisterOnSignal?: boolean;
     /**
-     * After a hang-up is requested, keep re-attempting teardown until the room
-     * is actually gone or this many ms elapse. Guards against a teardown call
-     * that silently doesn't land (transport race, transient room-service error).
-     * Default 4000. `false` disables (single best-effort attempt).
+     * If any readiness probe reports !ok, throw before calling register.
+     * Default false: probes that fail mark the agent as `degraded` instead.
      */
-    readonly guaranteeMs?: number | false;
+    readonly requireReady?: boolean;
     /**
-     * Dead-air backstop: when the agent is idle (waiting on the caller) and the
-     * line stays silent — no agent turn, no caller speech — for this many ms,
-     * end the call. Catches a wedged session whose normal `end_call` never ran.
-     * Only armed while the agent is idle, so it never interrupts agent speech or
-     * a long tool call. Default 20000. `false` disables.
+     * Listener for lifecycle events. Equivalent to `agent.events.on(fn)` after
+     * register; register-time events (readiness, registered) are also delivered.
      */
-    readonly idleHangupMs?: number | false;
+    readonly onEvent?: (event: AgentLifecycleEvent) => void;
+}
+interface RegisteredAgent {
+    readonly agent: AgentDTO;
+    readonly events: AgentEventEmitter;
+    /** Push a status change immediately (next heartbeat carries it too). */
+    setStatus(status: 'online' | 'degraded', detail?: string): Promise<void>;
+    /** Replace metadata on the next heartbeat. Pass {} to clear. */
+    updateMetadata(metadata: Record<string, unknown>): Promise<void>;
+    /** Best-effort DELETE; safe to call multiple times. */
+    deregister(): Promise<void>;
+    /** Stop the heartbeat ticker without deleting the row. Idempotent. */
+    stop(): Promise<void>;
+}
+interface SchedulerLike {
+    setTimeout(cb: () => void, ms: number): NodeJS.Timeout | number;
+    clearTimeout(handle: NodeJS.Timeout | number | undefined): void;
+}
+interface AgentsClientOptions {
+    readonly scheduler?: SchedulerLike;
+    readonly attachSignalHandlers?: boolean;
+}
+declare class AgentsClient {
+    private readonly transport;
+    private readonly options;
+    constructor(transport: Transport, options?: AgentsClientOptions);
     /**
-     * Hard call ceiling: hang up once the call has run this many ms from when
-     * the session becomes ready, regardless of activity. Catches runaway calls
-     * that never end naturally (stuck loops, hijacked keys dialing premium
-     * numbers). Fires with trigger `'max_duration'`. Default 3600000 (60
-     * minutes). `false` disables.
+     * Fetch a deployed agent's compiled process_schema. A flow-runtime worker
+     * calls this per dispatched call to boot a visually-built flow. Returns
+     * null on 404 or when the agent has no schema.
      */
-    readonly maxCallDurationMs?: number | false;
+    getProcessSchema(agentId: string): Promise<ProcessSchemaDTO | null>;
     /**
-     * Hook fired the moment a hang-up is decided, just before teardown — for
-     * every trigger (tool, host, idle, max_duration, engine-closed, …). Return
-     * `false` to take over teardown yourself (the SDK then does nothing — the
-     * call will NOT end unless you end it). Returning anything else (or nothing)
-     * runs the default teardown. Throwing is caught + logged, then the default
-     * teardown still runs (safe by default).
+     * Fetch a code-first agent's synced base prompt (its `defineAgent({ prompt })`,
+     * captured on register). The generic text runner reads this to run the agent
+     * through the engine over text. Returns null on 404 or when the agent has no
+     * synced prompt (flow agents, or agents registered before the sync landed).
      */
-    readonly onEnd?: (ctx: AgentContext, info: EndCallInfo) => boolean | void | Promise<boolean | void>;
-}
-type ShorthandPrimitive$1 = 'string' | 'number' | 'boolean';
-type ToolInputShape$1 = Record<string, ShorthandPrimitive$1> | z.ZodTypeAny;
-interface ToolDefinition$1<I = unknown, R = unknown> {
-    readonly description: string;
-    readonly input: ToolInputShape$1;
-    readonly run: (input: I, ctx: AgentContext) => Promise<R> | R;
+    getPrompt(agentId: string): Promise<string | null>;
     /**
-     * Capability this tool requires. Action Guard hard-blocks the call if not
-     * declared (PRD §B.5 — "no soft failures, ever"). Defaults to
-     * `tool.<name>` when omitted; passing a domain-scoped string
-     * (`crm.write`, `payment.refund`) lets multiple tools share a capability
-     * for centralised policy.
+     * Fetch a deployed agent's PUBLISHED AgentConfig — the pipeline the owner
+     * published (model / voice / stt / mode / realtime). A flow-runtime worker
+     * reads this per call so the no-code agent's runtime matches what was
+     * published; a saved-but-unpublished dashboard draft is never returned here
+     * (docs/specs/agents/draft-publish.md). Returns null on 404 (agent absent).
      */
-    readonly capability?: string;
-}
-/**
- * Optional security adapters. The SDK always enforces the local-only synchronous
- * guards (PRD §B.2 input regex, §B.3 system seal + PII tokenisation, §B.4
- * markdown strip + PII partial-mask, §B.5 capability check). Setting any of
- * these augments the local floor with external services. Each is independently
- * optional — none has to be live for the floor guards to function.
- *
- * URLs can also come from env (`SECURITY_LLM_GUARD_URL`,
- * `SECURITY_PRESIDIO_ANALYZER_URL`, `SECURITY_PRESIDIO_ANONYMIZER_URL`,
- * `SECURITY_OPA_URL`, `SECURITY_OPA_DECISION_PATH`); explicit config wins.
- */
-interface SecurityConfig {
-    /** Disable the primitive entirely. Use only for tests. Production code MUST NOT set this. */
-    readonly disabled?: boolean;
-    /** External LLM-Guard adapter for richer injection detection. */
-    readonly llmGuardUrl?: string;
-    /** Presidio analyzer URL for PII detection beyond local regex. */
-    readonly presidioAnalyzerUrl?: string;
-    /** Presidio anonymizer URL — if set, output is redacted before TTS. */
-    readonly presidioAnonymizerUrl?: string;
-    /** OPA decision API base URL (e.g. `http://opa:8181`). */
-    readonly opaUrl?: string;
-    /** OPA decision path (e.g. `voicelayer/security/decision`). */
-    readonly opaDecisionPath?: string;
-    /** Per-request timeout for security adapter calls. */
-    readonly adapterTimeoutMs?: number;
+    getConfig(agentId: string): Promise<AgentConfig$1 | null>;
+    register(input: RegisterInput, opts?: RegisterOptions): Promise<RegisteredAgent>;
+    list(query?: {
+        environment?: AgentEnvironment;
+    }): Promise<{
+        agents: {
+            status: "online" | "offline" | "degraded";
+            id: string;
+            projectId: string;
+            name: string;
+            createdAt: string;
+            updatedAt: string;
+            version: string;
+            environment: "dev" | "stg" | "prd";
+            statusDetail: string | null;
+            capabilities: string[];
+            readiness: {
+                probe: string;
+                ok: boolean;
+                detail?: string | undefined;
+            }[];
+            metadata: Record<string, unknown>;
+            lastSeenAt: string | null;
+            processSchema?: {
+                id: string;
+                completionGate: {
+                    requiredFields: string[];
+                    backendAck?: {
+                        url: string;
+                        timeoutMs: number;
+                    } | undefined;
+                };
+                fields: {
+                    type: "string" | "number" | "boolean" | "string[]" | "datetime" | "email" | "phone";
+                    name: string;
+                    required: boolean;
+                    ask?: string | undefined;
+                    pattern?: string | undefined;
+                    min?: number | undefined;
+                    max?: number | undefined;
+                    enum?: string[] | undefined;
+                }[];
+                handoff?: {
+                    fallback?: string | undefined;
+                    routes?: Record<string, string> | undefined;
+                } | undefined;
+                memory?: {
+                    scope?: "caller" | "call" | "account" | "participant" | "platform" | undefined;
+                    retentionDays?: number | undefined;
+                    piiFields?: string[] | undefined;
+                } | undefined;
+                speech?: {
+                    interruption?: {
+                        enabled?: boolean | undefined;
+                        minWords?: number | undefined;
+                        minDuration?: number | undefined;
+                    } | undefined;
+                    endpointing?: {
+                        minDelay?: number | undefined;
+                        maxDelay?: number | undefined;
+                    } | undefined;
+                } | undefined;
+                prompts?: {
+                    text: string;
+                    id: string;
+                }[] | undefined;
+                triggers?: {
+                    then: string;
+                    name: string;
+                    on: string;
+                    onlyWhile?: string | undefined;
+                }[] | undefined;
+                tools?: {
+                    name: string;
+                    description: string;
+                    input: Record<string, "string" | "number" | "boolean">;
+                    url: string;
+                    method: "GET" | "POST" | "PUT" | "PATCH" | "DELETE";
+                    auth: "none" | "connection";
+                    headers?: Record<string, string> | undefined;
+                    connectionRef?: string | undefined;
+                }[] | undefined;
+                program?: {
+                    id: string;
+                    nodes: Record<string, {
+                        type: "llm" | "code" | "start" | "say" | "ask" | "confirm" | "tool" | "decision" | "handoff" | "end" | "trigger" | "gate" | "playbook" | "menu" | "set" | "subflow" | "rag" | "memory" | "speech" | "classify" | "router" | "note";
+                        id: string;
+                        config: Record<string, unknown>;
+                        out: {
+                            to: string;
+                            sourceHandle?: string | undefined;
+                            label?: string | undefined;
+                            condition?: string | undefined;
+                        }[];
+                    }>;
+                    v: 1;
+                    entry: string[];
+                    completionGate: {
+                        requiredFields: string[];
+                    };
+                    diagnostics?: {
+                        acyclic: boolean;
+                        droppedEdges: string[];
+                        unsupportedNodes: string[];
+                        labelOnlyEdges?: string[] | undefined;
+                    } | undefined;
+                } | undefined;
+            } | null | undefined;
+            textRunnable?: boolean | undefined;
+        }[];
+    }>;
+    delete(agentId: string): Promise<{
+        ok: true;
+    }>;
 }
-/**
- * Marks an agent as a *flow-runtime* worker: instead of a fixed process it
- * resolves the deployed flow from the dispatch metadata (`agentId`) at call
- * time, fetches that agent's compiled process_schema, and boots from it. One
- * process serves many flows (the shared pool). See defineFlowRuntime().
- */
-interface FlowRuntimeConfig {
-    /** Prepended to the flow's compiled say/confirm prompt fragments. */
-    readonly basePrompt?: string;
-    /** Spoken (verbatim) before hanging up when a flow call's schema cannot be
-     *  loaded. A failed flow boot NEVER silently answers as a generic assistant. */
-    readonly bootFailureMessage?: string;
+
+interface ContextInput {
+    readonly callerId: string;
+    readonly scopes?: readonly MemoryScope$1[];
 }
-interface AgentConfig<TProcess extends Record<string, ProcessField> = Record<string, ProcessField>> {
-    /** Lowercase, kebab-case identifier. Used for LiveKit dispatch + presence. */
-    readonly name: string;
-    /** System prompt the LLM sees. */
-    readonly prompt: string;
-    /** Agent-level Instructions (the routing/decision layer): plain-language guidance
-     *  for WHEN the agent acts, appended below the persona under a `# Routing` header.
-     *  Interpolated with {{ }} by the process runtime. Optional. */
-    readonly routingInstructions?: string;
-    /** Capability tags surfaced in the dashboard. */
-    readonly capabilities?: readonly string[];
-    /** Semantic version. Defaults to AGENT_VERSION env or '0.0.0'. */
-    readonly version?: string;
-    /** dev / stg / prd. Defaults to AGENT_ENVIRONMENT env or 'dev'. */
-    readonly environment?: AgentEnvironment;
-    readonly process?: ProcessDefinition<TProcess>;
-    readonly triggers?: Readonly<Record<string, TriggerDefinition>>;
-    readonly handoff?: HandoffConfig;
-    readonly memory?: MemoryConfig;
-    readonly participants?: ParticipantsConfig;
-    readonly connectors?: Readonly<Record<string, ConnectorInstance>>;
-    readonly compliance?: readonly ComplianceTag[];
-    readonly models?: ModelConfig;
-    readonly outbound?: OutboundCallConfig;
-    readonly speech?: SpeechConfig;
-    readonly endCall?: EndCallPolicy;
-    readonly tools?: Readonly<Record<string, ToolDefinition$1>>;
-    /** Per-agent registry-tool scoping (stored ToolBinding names, applied at
-     *  boot). Non-empty → only these dashboard HTTP tools attach; absent/[] →
-     *  every enabled registry tool attaches (the historical default). */
-    readonly toolBindings?: readonly string[];
-    readonly security?: SecurityConfig;
-    /**
-     * Per-call ConsultationPolicy used by the built-in `ask_host` tool. When
-     * omitted the SDK uses the contract defaults (30s per-consult, 120s
-     * cumulative). Plan-first calls override this at boot from
-     * `plan.draftConfig.consultation`. See
-     * packages/contracts/src/consultation.ts for the schema + semantics.
-     */
-    readonly consultation?: ConsultationPolicy;
-    /**
-     * Use your existing text agent as the LLM. When set (and `models.llm` is
-     * unset), defineAgent wires the pipeline's LLM slot to this function: the
-     * caller's STT transcript is passed to `onQuery`, and its returned text (or
-     * streamed pieces) is spoken by TTS. The "two lines, keep your stack" path.
-     *
-     * Equivalent to `models: { llm: connector.llm({ onQuery }) }`. For a remote
-     * brain instead, use `connector.llm({ url })` (direct) or a tunnel transport.
-     * See docs/specs/voice-brain-connector/.
-     */
-    readonly onQuery?: OnQuery;
-    readonly onUtterance?: (text: string, ctx: AgentContext) => Promise<void> | void;
-    readonly onFieldCaptured?: (field: string, value: unknown, ctx: AgentContext) => Promise<void> | void;
-    readonly onCallEnd?: (outcome: CallOutcomeSummary, ctx: AgentContext) => Promise<void> | void;
-    readonly onEvent?: (event: AgentLifecycleEvent) => void;
-    /** Replace the default conversation loop. The SDK does NOT auto-greet. */
-    readonly onCall?: (ctx: AgentContext) => Promise<void>;
-    readonly readiness?: readonly ReadinessProbe[];
+interface WriteInput {
+    readonly scope: MemoryScope$1;
+    readonly callerId: string;
+    readonly delta: Record<string, unknown>;
+    readonly callId?: string;
+}
+interface SnapshotInput {
+    readonly callId: string;
+    readonly stage: string;
+    readonly snapshot: Record<string, unknown>;
+}
+interface ResolveInput {
+    readonly externalKey: string;
+    readonly displayName?: string;
+    readonly identifiers?: ReadonlyArray<{
+        type: string;
+        value: string;
+    }>;
+}
+declare class MemoryClient {
+    private readonly transport;
+    constructor(transport: Transport);
+    context(input: ContextInput): Promise<RelevantContext>;
+    write(input: WriteInput): Promise<void>;
+    snapshot(input: SnapshotInput): Promise<{
+        id: string;
+    }>;
+    resolveCaller(input: ResolveInput): Promise<ResolveCallerResponse['caller']>;
+    deleteCaller(callerId: string): Promise<DeleteCallerResponse>;
+}
+
+type CallStatus = 'in_progress' | 'completed' | 'failed';
+type CallAttributeValue = string | number | boolean;
+type CallParticipantRole = 'caller' | 'agent' | 'callee' | 'supervisor' | 'observer' | 'unknown';
+type CallParticipantKind = 'human' | 'agent' | 'phone' | 'sip' | 'system';
+type CallLegKind = 'sip-inbound' | 'sip-outbound' | 'agent-session' | 'conference' | 'transfer' | 'unknown';
+type CallLegStatus = 'starting' | 'active' | 'ended';
+interface CallSummary {
+    readonly id: string;
+    readonly projectId: string;
+    readonly livekitRoom: string;
+    readonly phoneNumberId: string | null;
+    readonly agentId: string | null;
+    readonly bindingId: string | null;
+    readonly callerE164: string | null;
+    readonly toE164: string | null;
+    readonly status: CallStatus;
+    readonly startedAt: string;
+}
+interface CallUsageReport {
+    readonly durationMs: number;
+    readonly llm: readonly {
+        readonly provider: string;
+        readonly model: string;
+        readonly inputTokens: number;
+        readonly outputTokens: number;
+    }[];
+    readonly tts: readonly {
+        readonly provider: string;
+        readonly chars: number;
+    }[];
+    readonly stt: readonly {
+        readonly provider: string;
+        readonly seconds: number;
+    }[];
+}
+interface AppendTranscriptInput {
+    readonly speaker: 'caller' | 'agent';
+    readonly text: string;
+    readonly startMs: number;
+    readonly endMs: number;
+    readonly final?: boolean;
+}
+type DtmfDirection = 'received' | 'sent';
+interface AppendDtmfEventInput {
+    readonly direction: DtmfDirection;
+    readonly digit: string;
+    readonly code: number;
+    readonly participantId?: string;
+}
+interface EnsureCallByRoomInput {
+    readonly roomName: string;
+    readonly phoneNumberId?: string;
+    readonly agentId?: string;
+    readonly bindingId?: string;
+    readonly callerE164?: string;
+    readonly toE164?: string;
+    readonly attributes?: Record<string, CallAttributeValue>;
+    readonly participants?: CallParticipantInput[];
+    readonly legs?: CallLegInput[];
+    readonly startedAt?: string;
+}
+interface CallParticipantInput {
+    readonly participantKey: string;
+    readonly role: CallParticipantRole;
+    readonly kind: CallParticipantKind;
+    readonly identity?: string | null;
+    readonly address?: string | null;
+    readonly displayName?: string | null;
+    readonly joinedAt?: string;
+    readonly leftAt?: string | null;
+    readonly metadata?: Record<string, unknown>;
+}
+interface CallLegInput {
+    readonly legKey: string;
+    readonly kind: CallLegKind;
+    readonly status: CallLegStatus;
+    readonly fromParticipantKey?: string | null;
+    readonly toParticipantKey?: string | null;
+    readonly fromAddress?: string | null;
+    readonly toAddress?: string | null;
+    readonly startedAt?: string;
+    readonly endedAt?: string | null;
+    readonly metadata?: Record<string, unknown>;
+}
+interface SyncCallStateInput {
+    readonly attributes?: Record<string, CallAttributeValue>;
+    readonly participants?: CallParticipantInput[];
+    readonly legs?: CallLegInput[];
+}
+declare class CallsClient {
+    private readonly transport;
+    constructor(transport: Transport);
+    getByRoom(roomName: string): Promise<CallSummary>;
+    ensureByRoom(input: EnsureCallByRoomInput): Promise<CallSummary>;
+    syncState(callId: string, input: SyncCallStateInput): Promise<void>;
+    appendTranscriptSegment(callId: string, input: AppendTranscriptInput): Promise<void>;
+    reportUsage(callId: string, report: CallUsageReport): Promise<void>;
+    appendDtmfEvent(callId: string, input: AppendDtmfEventInput): Promise<void>;
     /**
-     * Run as a remote-controlled (puppet) agent: no autonomous LLM loop, no
-     * process/triggers pipeline. STT utterances are still published to
-     * `call-events:{callId}` via the existing transcript-segments sync, and
-     * the SDK subscribes to `call-control:{callId}` to receive `say`,
-     * `hangup`, `dtmf` commands from an external driver (typically the MCP
-     * server invoked by a coding agent).
+     * Append a structured call event — consultation lifecycle kinds, or the
+     * operational vocabulary the call-detail Timeline renders between
+     * transcript rows (tool.* / handoff.* / lookup.* / record.* / notify.*).
+     * See apps/api/src/routes/calls.ts AppendEventBody for the accepted shapes.
      *
-     * When this is on, `process`, `triggers`, `onUtterance`, `onCall` are
-     * ignored. `tools`, `connectors`, `memory` still work.
+     * The agent SDK's built-in `ask_host` tool calls this on consultation start
+     * / end; the handoff runtime and graph interpreter emit op events through it
+     * so the operational story (dial → answered → briefed → dropped, tool calls)
+     * is visible in the dashboard, not just the spoken transcript.
      */
-    readonly puppetMode?: boolean;
+    appendEvent(callId: string, input: {
+        readonly kind: 'consultation.requested' | 'consultation.resolved' | `tool.${string}` | `handoff.${string}` | `lookup.${string}` | `record.${string}` | `notify.${string}`;
+        readonly payload: Record<string, unknown>;
+    }): Promise<void>;
+}
+
+interface CreateFormSessionInput {
+    readonly formId: string;
+    readonly recipientPhone: string;
+    readonly recipientName?: string;
+    readonly prefill?: Record<string, unknown>;
+    readonly webhookUrl?: string;
+    readonly callbackFromNumber?: string;
+    readonly ttlSeconds?: number;
     /**
-     * Host-controlled autonomous agent (the "smart puppet"). UNLIKE puppetMode,
-     * the agent keeps its REAL LLM and drives the conversation itself from its
-     * prompt (the per-call `intent` is appended at boot). This flag only wires
-     * the `call-control:{room}` channel so the MCP host can still interject
-     * (`say`), end the call (`hangup`), or send `dtmf` — and answer the agent's
-     * `ask_host` consultations. Use this for an agent that takes a customer's
-     * intent and runs the call like a human secretary, asking the host for any
-     * info it's missing. Mutually exclusive in spirit with puppetMode (which is
-     * the older NoOp "dumb mouth").
+     * When set, the API will SMS the link from this phone number immediately
+     * after creating the session. This is the common case for agent-led use:
+     * the agent calls sendFormLink during a conversation and the recipient
+     * gets a text right away.
      */
-    readonly hostControlled?: boolean;
-    /** When set, this agent boots each call from a deployed flow's process_schema. */
-    readonly flowRuntime?: FlowRuntimeConfig;
+    readonly sendSms?: {
+        readonly phoneNumberId: string;
+        readonly bodyPrefix?: string;
+    };
     /**
-     * Opt a hand-coded (non-flow) agent into the dashboard-driven pipeline: on
-     * each call the SDK fetches this agent's stored `agent_config` and applies
-     * the operator-selected voice / model / STT over the coded defaults. The
-     * pipeline *mode* (cascade vs realtime) stays pinned to what the code
-     * declares — a stale `mode=realtime` in the dashboard can't flip a
-     * cascade-only worker. Flow agents (`flowRuntime`) get this implicitly and
-     * may additionally switch mode; this flag is the SDK opt-in. The agent id is
-     * read from dispatch metadata (the inbound router injects it from
-     * phone_numbers.agentId), so it's a no-op for calls without one.
+     * When set, the API will email the link to `to` immediately after creating
+     * the session. Independent from sendSms — set both for belt-and-braces
+     * delivery, set neither to just receive the URL back. Use this when SMS is
+     * blocked by toll-fraud / 10DLC registration.
      */
-    readonly pipelineFromConfig?: boolean;
+    readonly sendEmail?: {
+        readonly to: string;
+        readonly subject?: string;
+        readonly bodyPrefix?: string;
+    };
+}
+interface CreatedFormSession {
+    readonly sessionId: string;
+    readonly token: string;
+    readonly url: string;
+    readonly smsId: string | null;
+    readonly emailId: string | null;
+    readonly expiresAt: string;
+}
+interface PublicFormSessionView {
+    readonly schema: {
+        readonly id: string;
+        readonly version: number;
+        readonly title: string;
+        readonly description?: string | undefined;
+        readonly survey: Record<string, unknown>;
+    };
+    readonly values: Record<string, unknown>;
+    readonly status: 'pending' | 'active' | 'live' | 'submitted' | 'expired';
+    readonly recipientPhoneMasked: string;
+    readonly hasActiveCall: boolean;
+    readonly submittedAt: string | null;
+    readonly expiresAt: string;
+}
+declare class FormsClient {
+    private readonly transport;
+    constructor(transport: Transport);
+    createSession(input: CreateFormSessionInput): Promise<CreatedFormSession>;
+    getByToken(token: string): Promise<PublicFormSessionView>;
+    patchValues(token: string, values: Record<string, unknown>): Promise<{
+        values: Record<string, unknown>;
+        updatedAt: string;
+    }>;
+    submit(token: string, values: Record<string, unknown>): Promise<{
+        responseId: string;
+        submittedAt: string;
+    }>;
+}
+
+interface SendEmailInput {
+    readonly to: string;
+    readonly subject: string;
+    readonly text: string;
+    readonly html?: string;
+}
+interface SentEmail {
+    readonly emailId: string;
+}
+declare class EmailClient {
+    private readonly transport;
+    constructor(transport: Transport);
+    send(input: SendEmailInput): Promise<SentEmail>;
+}
+
+declare class PlansClient {
+    private readonly transport;
+    constructor(transport: Transport);
     /**
-     * Opt this agent into MCP-layer visibility. When true, on register the API
-     * also writes an `agent_config` row keyed by (project_id, name,
-     * environment) so MCP / dashboard / REST can list and inspect this agent
-     * (and, post-step-7, drive call_say / call_send_guidance / etc against
-     * its live calls).
-     *
-     * Defaults to true so newly-registered agents show up in dashboards and
-     * MCP-host listings without opt-in. Pass `false` for autonomous-only
-     * agents that should stay invisible to MCP. See
-     * docs/architecture/contracts-design.md §2b.
+     * Fetch a plan by id. Project scoping is enforced by the API via the
+     * caller's VOICELAYER_API_KEY — a cross-project planId surfaces as 404.
+     * Returns `null` on 404 so the caller can fall back to legacy boot.
      */
-    readonly mcpExposed?: boolean;
+    getById(planId: string): Promise<CallPlan | null>;
 }
-interface CallOutcomeSummary {
-    readonly reason: 'completed' | 'handoff' | 'caller_hung_up' | 'agent_hung_up' | 'error';
-    readonly durationMs: number;
-    readonly processCompleted: boolean;
-    readonly fieldsCaptured: number;
-    readonly handoffOccurred: boolean;
+
+declare const ProviderCredential: z.ZodObject<{
+    apiKey: z.ZodString;
+    baseUrl: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    apiKey: string;
+    baseUrl?: string | undefined;
+}, {
+    apiKey: string;
+    baseUrl?: string | undefined;
+}>;
+type ProviderCredential = z.infer<typeof ProviderCredential>;
+declare const BrainConnectorConfig: z.ZodObject<{
+    connector: z.ZodObject<{
+        id: z.ZodString;
+        mode: z.ZodEnum<["tunnel", "direct"]>;
+        connectionId: z.ZodNullable<z.ZodString>;
+        defaultModel: z.ZodNullable<z.ZodString>;
+        normalize: z.ZodEnum<["auto", "on", "off"]>;
+        enabled: z.ZodBoolean;
+        credential: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+            apiKey: z.ZodString;
+            baseUrl: z.ZodString;
+        }, "strip", z.ZodTypeAny, {
+            apiKey: string;
+            baseUrl: string;
+        }, {
+            apiKey: string;
+            baseUrl: string;
+        }>>>;
+    }, "strip", z.ZodTypeAny, {
+        enabled: boolean;
+        id: string;
+        mode: "tunnel" | "direct";
+        defaultModel: string | null;
+        connectionId: string | null;
+        normalize: "on" | "off" | "auto";
+        credential?: {
+            apiKey: string;
+            baseUrl: string;
+        } | null | undefined;
+    }, {
+        enabled: boolean;
+        id: string;
+        mode: "tunnel" | "direct";
+        defaultModel: string | null;
+        connectionId: string | null;
+        normalize: "on" | "off" | "auto";
+        credential?: {
+            apiKey: string;
+            baseUrl: string;
+        } | null | undefined;
+    }>;
+}, "strip", z.ZodTypeAny, {
+    connector: {
+        enabled: boolean;
+        id: string;
+        mode: "tunnel" | "direct";
+        defaultModel: string | null;
+        connectionId: string | null;
+        normalize: "on" | "off" | "auto";
+        credential?: {
+            apiKey: string;
+            baseUrl: string;
+        } | null | undefined;
+    };
+}, {
+    connector: {
+        enabled: boolean;
+        id: string;
+        mode: "tunnel" | "direct";
+        defaultModel: string | null;
+        connectionId: string | null;
+        normalize: "on" | "off" | "auto";
+        credential?: {
+            apiKey: string;
+            baseUrl: string;
+        } | null | undefined;
+    };
+}>;
+type BrainConnectorConfig = z.infer<typeof BrainConnectorConfig>['connector'];
+declare class ConnectionsClient {
+    private readonly transport;
+    constructor(transport: Transport);
+    resolveProviderCredential(provider: string): Promise<ProviderCredential | null>;
+    resolveBrainConnectorConfig(id: string): Promise<BrainConnectorConfig | null>;
 }
-/**
- * Identity helper that gives users a typed `defineProcess` entry point with
- * full inference on `onComplete`'s `data` argument.
- *
- *   defineProcess({
- *     collect: { name: { type: 'string', required: true } },
- *     onComplete: (data) => { data.name // string },
- *   })
- */
-declare function defineProcess<T extends Record<string, ProcessField>>(def: ProcessDefinition<T>): ProcessDefinition<T>;
 
-interface RunAgentTextTranscriptOptions {
-    /** The agent's system prompt / instructions (its code-defined behavior). */
-    readonly instructions: string;
-    /** The LLM that generates replies — injected so this stays provider-agnostic and
-     *  unit-testable (real inference/openai LLM in prod; a scripted fake in tests). */
-    readonly llm: llm.LLM;
-    /** Scripted caller turns, run in order; each produces the agent's reply turn(s). */
-    readonly messages: readonly string[];
-    /** Optional id surfaced on the Agent (for traceability). */
-    readonly agentId?: string;
+interface CreateClientOptions {
+    readonly apiKey?: string;
+    readonly baseUrl?: string;
+    readonly fetch?: typeof fetch;
+    readonly maxRetries?: number;
+    readonly initialBackoffMs?: number;
+    readonly userAgent?: string;
+    readonly scheduler?: AgentsClientOptions['scheduler'];
+    readonly attachSignalHandlers?: boolean;
 }
-interface AgentTextTranscriptResult {
-    readonly replies: string[];
+interface VoiceLayerClient {
+    readonly agents: AgentsClient;
+    readonly memory: MemoryClient;
+    readonly calls: CallsClient;
+    readonly forms: FormsClient;
+    readonly email: EmailClient;
+    readonly plans: PlansClient;
+    readonly connections: ConnectionsClient;
 }
-/** Drive an instruction-based agent over text and collect its replies. Stateless
- *  batch turn — the request/response shape the text playground's agent path uses. */
-declare function runAgentTextTranscript(opts: RunAgentTextTranscriptOptions): Promise<AgentTextTranscriptResult>;
+declare function createClient(options?: CreateClientOptions): VoiceLayerClient;
 
 interface DefaultMetadata {
     readonly hostname: string;
@@ -3049,9 +3225,13 @@ interface PuppetControlHandle {
     /** Stop listening for commands and tear down the Redis subscription. */
     close(): Promise<void>;
 }
-/** True if we should run puppet wiring — REDIS_URL must be set. */
+/** @deprecated since 0.2.0 — see startPuppetControl. True if we should run puppet wiring — REDIS_URL must be set. */
 declare function puppetEnvAvailable(): boolean;
 /**
+ * @deprecated since 0.2.0 (burn-down G-5): every agent now listens on its call's control channel and confirms each
+ * command (runtime/call-control.ts + runtime/host-control.ts). This listener never confirms, so the API refuses its
+ * commands. Kept for SDK consumers that call it directly; removed in the next major.
+ *
  * Start a puppet-mode control listener for the given call. Returns a handle
  * the caller invokes when the call ends to release the Redis connection.
  *
@@ -3102,251 +3282,6 @@ declare function webhook(config: WebhookConfig): ConnectorInstance<'webhook', We
 /** Subset of ModelConfig the Agent class converts AgentConfig.models into. */
 type PipelineConfig = ModelConfig;
 
-type ProviderKind = 'tts' | 'stt' | 'llm' | 'vad' | 'turn';
-interface WrapOptions<T> {
-    /** Emit OTel spans around each method call. Default: true. */
-    readonly trace?: boolean;
-    /** Tag spans with `vl.provider.label` for easy filtering. */
-    readonly label?: string;
-    /**
-     * Provider role. When set, the wrapper additionally emits OTel Counters
-     * (vl.tts.chars / vl.llm.input_tokens / vl.stt.seconds) so /v1/calls/:id/
-     * metrics returns real per-call usage. The TTS path is wired today —
-     * chars are counted from the synthesize() text argument. LLM/STT counters
-     * still depend on the underlying adapter exposing usage on its response
-     * shape; see TODO below.
-     */
-    readonly kind?: ProviderKind;
-    /**
-     * Provider name surfaced in metric attributes (deepgram, openai, …).
-     * Falls back to `label` when omitted.
-     */
-    readonly provider?: string;
-    /**
-     * Fallback provider used if the primary throws. Accepts an instance OR a
-     * ProviderFactory (so `deepgram.tts(...)` works directly). The fallback is
-     * resolved lazily on first error.
-     */
-    readonly fallback?: T | ProviderFactory<T>;
-    /**
-     * Methods to instrument. By default the wrapper instruments every method
-     * call. Pass an explicit list to limit overhead on hot paths.
-     */
-    readonly methods?: readonly string[];
-}
-/**
- * Returns either the wrapped instance directly (when called with one) or a
- * ProviderFactory that produces the wrapped instance (when called with one of
- * those). This keeps the lazy import story intact: `wrap(deepgram.tts(...))`
- * is itself a factory.
- */
-declare function wrap<T extends object>(target: T | ProviderFactory<T>, options?: WrapOptions<T>): T | ProviderFactory<T>;
-
-declare const deepgram: {
-    stt(options?: {
-        model?: string;
-        language?: string;
-        apiKey?: string;
-        baseURL?: string;
-    }): ProviderFactory<STTProvider>;
-    tts(options?: {
-        model?: string;
-        apiKey?: string;
-        baseURL?: string;
-    }): ProviderFactory<TTSProvider>;
-};
-declare const openai: {
-    llm(options?: {
-        model?: string;
-        apiKey?: string;
-        baseURL?: string;
-    }): ProviderFactory<LLMProvider>;
-    tts(options?: {
-        model?: string;
-        voice?: string;
-        instructions?: string;
-        apiKey?: string;
-        baseURL?: string;
-    }): ProviderFactory<TTSProvider>;
-    realtime(options?: {
-        model?: string;
-        voice?: string;
-        apiKey?: string;
-        baseURL?: string;
-    }): ProviderFactory<RealtimeProvider>;
-};
-declare const cartesia: {
-    tts(options?: {
-        voice?: string;
-        model?: string;
-        apiKey?: string;
-        baseURL?: string;
-    }): ProviderFactory<TTSProvider>;
-    stt(options?: {
-        model?: string;
-        language?: string;
-        apiKey?: string;
-        baseURL?: string;
-    }): ProviderFactory<STTProvider>;
-};
-declare const elevenlabs: {
-    tts(options?: {
-        voice?: string;
-        model?: string;
-        apiKey?: string;
-        baseURL?: string;
-    }): ProviderFactory<TTSProvider>;
-};
-declare const assemblyai: {
-    stt(options?: {
-        language?: string;
-        apiKey?: string;
-        baseURL?: string;
-    }): ProviderFactory<STTProvider>;
-};
-declare const google: {
-    llm(options?: {
-        model?: string;
-        apiKey?: string;
-        baseURL?: string;
-    }): ProviderFactory<LLMProvider>;
-    realtime(options?: {
-        model?: string;
-        voice?: string;
-        apiKey?: string;
-        baseURL?: string;
-    }): ProviderFactory<RealtimeProvider>;
-};
-declare const silero: {
-    vad(): ProviderFactory<VADProvider>;
-};
-declare const livekitTurn: {
-    english(): ProviderFactory<TurnDetectorProvider>;
-    multilingual(): ProviderFactory<TurnDetectorProvider>;
-};
-interface ConnectorLLMConfig {
-    /** Upstream model id / alias (defaults to the brain's own default). */
-    readonly model?: string;
-    readonly temperature?: number;
-    /** Spoken instead of dead air when the brain errors before replying. */
-    readonly fallbackText?: string;
-    /** In-process brain. */
-    readonly onQuery?: OnQuery;
-    /** Direct-egress brain — a public OpenAI-compatible base URL. */
-    readonly url?: string;
-    /** API key for the direct-egress endpoint. */
-    readonly apiKey?: string;
-    /** Hostnames that bypass the SSRF IP checks (direct mode). */
-    readonly allowHosts?: readonly string[];
-    /** Advanced: a custom transport (tunnel, etc.). */
-    readonly transport?: BrainTransport;
-}
-declare const connector: {
-    llm(config?: ConnectorLLMConfig): ProviderFactory<LLMProvider>;
-};
-
-declare function callbackTransport(onQuery: OnQuery): BrainTransport;
-
-interface ConnectorLLMOptions {
-    readonly model?: string;
-    readonly temperature?: number;
-    readonly callId?: string;
-    readonly projectId?: string;
-    /** Spoken instead of dead air when the brain errors before any reply. */
-    readonly fallbackText?: string;
-}
-/**
- * Build a ConnectorLLM instance for the pipeline's `llm` slot. The returned
- * object's chat() yields the brain reply and exposes close() for barge-in.
- */
-declare function createConnectorLLM(transport: BrainTransport, options?: ConnectorLLMOptions): Promise<unknown>;
-
-interface ConnectorChatModelOptions {
-    readonly model?: string;
-}
-interface ChatModelInput {
-    readonly messages: readonly {
-        readonly role: 'system' | 'user' | 'assistant';
-        readonly content: string;
-    }[];
-    readonly json?: boolean;
-    readonly temperature?: number;
-    readonly model?: string;
-}
-declare class ConnectorChatModel {
-    private readonly transport;
-    private readonly options;
-    constructor(transport: BrainTransport, options?: ConnectorChatModelOptions);
-    complete(input: ChatModelInput): Promise<string>;
-}
-
-declare class BrainConfigError extends Error {
-    constructor(message: string);
-}
-/** Resolve a hostname to a list of IP strings. Injectable for tests. */
-type HostLookup = (host: string) => Promise<readonly string[]>;
-interface AssertUrlOptions {
-    /** Hostnames that bypass IP checks (explicit per-connector allowlist). */
-    readonly allowHosts?: readonly string[];
-    /** Override DNS resolution (tests). */
-    readonly lookup?: HostLookup;
-}
-/**
- * Validate a brain URL for direct egress. Throws BrainConfigError on any
- * violation; returns the parsed URL when safe.
- */
-declare function assertPublicHttpsUrl(raw: string, opts?: AssertUrlOptions): Promise<URL>;
-
-interface BrainPubSub {
-    publish(channel: string, message: string): Promise<void>;
-    /** Subscribe to a channel; returns an unsubscribe handle. */
-    subscribe(channel: string, handler: (raw: string) => void): Promise<() => Promise<void>>;
-}
-interface TunnelBrainTransportOptions {
-    readonly connectorId: string;
-    readonly pubsub: BrainPubSub;
-    /** Fail the turn if the daemon sends nothing within this window. Default 20s. */
-    readonly firstChunkTimeoutMs?: number;
-}
-declare function tunnelBrainTransport(options: TunnelBrainTransportOptions): BrainTransport;
-
-declare class RedisBrainPubSub implements BrainPubSub {
-    private readonly sub;
-    private readonly pub;
-    private readonly listeners;
-    constructor(sub: Redis, pub: Redis);
-    publish(channel: string, message: string): Promise<void>;
-    subscribe(channel: string, handler: (raw: string) => void): Promise<() => Promise<void>>;
-    close(): Promise<void>;
-}
-declare function buildRedisBrainPubSub(redisUrl: string | undefined): RedisBrainPubSub | null;
-
-interface SseDelta {
-    readonly content?: string;
-    readonly finishReason?: string;
-}
-declare function parseChatCompletionSse(source: AsyncIterable<Uint8Array> | ReadableStream<Uint8Array>): AsyncGenerator<SseDelta>;
-
-interface BrainEndpointConfig {
-    /** Base URL of the OpenAI-compatible endpoint, e.g. http://localhost:4000/v1. */
-    readonly brainUrl: string;
-    readonly apiKey?: string;
-    readonly defaultModel?: string;
-    /** Injectable for tests; defaults to global fetch. */
-    readonly fetchImpl?: typeof fetch;
-}
-interface IncomingBrainRequest {
-    readonly streamId: string;
-    readonly model?: string;
-    readonly temperature?: number;
-    readonly messages: ReadonlyArray<{
-        role: 'system' | 'user' | 'assistant';
-        content: string;
-    }>;
-}
-/** Run one brain.request and yield the reply frames. Never throws. */
-declare function runBrainRequest(req: IncomingBrainRequest, cfg: BrainEndpointConfig, signal: AbortSignal): AsyncGenerator<ConnectorUpFrame>;
-
 /**
  * Turn the persisted `agents.process_schema` (or a freshly-compiled flow) into a
  * ProcessDefinition. The completion gate drives the `required` flags so the
@@ -3377,6 +3312,26 @@ declare function processSchemaToAgentParts(schema: ProcessSchemaDTO, opts?: {
     readonly graphNodeIds?: ReadonlySet<string>;
 }): CompiledAgentParts;
 
+interface ExchangeWorkerTokenInput {
+    readonly projectId: string;
+    readonly callId?: string;
+    readonly fetchImpl?: typeof fetch;
+}
+/** One mint per call (cheap in-cluster HMAC mint, ~ms) so every token is
+ *  attributable to a specific call in the API's audit log. Returns null when
+ *  the exchange isn't configured or fails — callers fall back to the env key. */
+declare function exchangeWorkerToken(input: ExchangeWorkerTokenInput): Promise<string | null>;
+/** Build a client directly from a PRE-MINTED worker token (W3-lite control-plane
+ *  mint). The authority (API for text, call-router for voice) minted the token
+ *  from the projectId it already holds and handed it to the worker — so the
+ *  worker never self-mints via /v1/internal/worker-token, closing the master-key
+ *  path where a worker asserts its own projectId. Returns null on a bad token so
+ *  callers can fall back to the self-mint chain (resolveWorkerClient). */
+declare function workerClientFromToken(token: string): VoiceLayerClient | null;
+/** Build the per-call SDK client under the calling project's identity, with
+ *  the env-key fallback chain above. `md` is the parsed dispatch metadata. */
+declare function resolveWorkerClient(md: Record<string, unknown>, fetchImpl?: typeof fetch): Promise<VoiceLayerClient | null>;
+
 /**
  * Extend this to author a tool with the least ceremony. `run` receives the
  * parsed input and the live AgentContext; whatever it returns is handed back to
@@ -3428,25 +3383,4 @@ interface HttpToolSpec {
  */
 declare function httpTool(spec: HttpToolSpec): Record<string, ToolDefinition>;
 
-interface CreateClientOptions {
-    readonly apiKey?: string;
-    readonly baseUrl?: string;
-    readonly fetch?: typeof fetch;
-    readonly maxRetries?: number;
-    readonly initialBackoffMs?: number;
-    readonly userAgent?: string;
-    readonly scheduler?: AgentsClientOptions['scheduler'];
-    readonly attachSignalHandlers?: boolean;
-}
-interface VoiceLayerClient {
-    readonly agents: AgentsClient;
-    readonly memory: MemoryClient;
-    readonly calls: CallsClient;
-    readonly forms: FormsClient;
-    readonly email: EmailClient;
-    readonly plans: PlansClient;
-    readonly connections: ConnectionsClient;
-}
-declare function createClient(options?: CreateClientOptions): VoiceLayerClient;
-
-export { Agent, type AgentConfig, AgentContext, type AgentEventEmitter, type AgentEventListener, type AgentLifecycleEvent, type AgentTextTranscriptResult, type AppendDtmfEventInput, type AppendTranscriptInput, BaseTool, type BrainCallMetadata, type BrainCapabilities, type BrainChunk, BrainConfigError, type BrainEndpointConfig, type BrainMessage, type BrainPubSub, type BrainRequest, type BrainTransport, type CallAttributeValue, CallInfo, type CallLegInput, type CallOutcomeSummary, type CallParticipantInput, type CallStatus, type CallSummary, CallsClient, type CompiledAgentParts, type CompletionStrategy, type ComplianceTag, ConnectorChatModel, type ConnectorChatModelOptions, type ConnectorInstance, type ConnectorLLMConfig, type ConnectorLLMOptions, ConsultationPolicy, type CreateClientOptions, type CreatedFormSession, type DefaultMetadata, type DtmfDirection, EmailClient, type SendEmailInput as EmailSendInput, type EndCallInfo, type EndCallPolicy, type EndCallTrigger, type EndpointingConfig, type EnsureCallByRoomInput, type CreateFormSessionInput as FormCreateInput, type FormToolsOptions, FormsClient, type HandoffConfig, type HttpToolResult, type HttpToolSpec, type IncomingBrainRequest, type InferProcessData, type InterruptionConfig, type LLMProvider, type MemoryConfig, type MemoryScope, type ModelConfig, type OnQuery, type OnQueryContext, type OnQueryResult, Participant, type ParticipantsConfig, type PipelineConfig, PlansClient, type ProcessBackendAck, type ProcessDefinition, type ProcessField, type ProcessFieldType, type PronunciationDict, type ProviderFactory, type PublicFormSessionView, type PuppetControlDeps, type PuppetControlHandle, type ReadinessProbe, type ReadinessReport, type ReadinessResult, type RealtimeProvider, RedisBrainPubSub, type RegisterInput, type RegisterOptions, type RegisteredAgent, type ResendCredentials, type ResendEmailToolOptions, type RunAgentTextTranscriptOptions, type STTProvider, type SecurityConfig, type SentEmail, type ShorthandPrimitive$1 as ShorthandPrimitive, type SpeechConfig, type SseDelta, type SyncCallStateInput, type TTSProvider, type ToolDefinition$1 as ToolDefinition, type ToolInputShape$1 as ToolInputShape, type TriggerAction, type TriggerCondition, type TriggerDefinition, type TunnelBrainTransportOptions, type TurnDetectorProvider, type VADProvider, VoiceLayerAuthError, type VoiceLayerClient, VoiceLayerError, VoiceLayerHttpError, VoiceLayerNetworkError, VoiceLayerValidationError, type WebhookApi, type WebhookConfig, type WrapOptions, applyPronunciations, assemblyai, assertPublicHttpsUrl, asyncProbe, buildRedisBrainPubSub, callbackTransport, cartesia, collectDefaultMetadata, connector, createClient, createConnectorLLM, createNoOpLLM, deepgram, defineAgent, defineFlowRuntime, defineProcess, defineTool, elevenlabs, envProbe, formTools, google, httpTool, livekitTurn, mergeMetadata, openai, parseChatCompletionSse, processSchemaToAgentParts, processSchemaToDefinition, puppetEnvAvailable, resendEmailTool, runAgentTextTranscript, runBrainRequest, runProbes, silero, startPuppetControl, tunnelBrainTransport, urlProbe, webhook, wrap };
+export { Agent, type AgentConfig, AgentContext, type AgentEventEmitter, type AgentEventListener, type AgentLifecycleEvent, type AgentTextPlan, type AgentTextRuntimeClient, type AgentTextTranscriptResult, type AppendDtmfEventInput, type AppendTranscriptInput, BaseTool, BrainTransport, type BuildTextLlm, type CallAttributeValue, CallInfo, type CallLegInput, type CallOutcomeSummary, type CallParticipantInput, type CallStatus, type CallSummary, CallsClient, type CompiledAgentParts, type CompletionStrategy, type ComplianceTag, type ConnectorInstance, type ConnectorLLMConfig, ConsultationPolicy, type CreateClientOptions, type CreatedFormSession, type DefaultMetadata, type DtmfDirection, EmailClient, type SendEmailInput as EmailSendInput, type EndCallInfo, type EndCallPolicy, type EndCallTrigger, type EndpointingConfig, type EnsureCallByRoomInput, type ExchangeWorkerTokenInput, type CreateFormSessionInput as FormCreateInput, type FormToolsOptions, FormsClient, type HandoffConfig, type HttpToolResult, type HttpToolSpec, type InferProcessData, type InterruptionConfig, type LLMProvider, type LiveAgentTextSession, type LiveAgentTurn, type LiveAgentTurnUsage, type MemoryConfig, type MemoryScope, type ModelConfig, OnQuery, Participant, type ParticipantsConfig, type PipelineConfig, PlansClient, type ProcessBackendAck, type ProcessDefinition, type ProcessField, type ProcessFieldType, type PronunciationDict, type ProviderFactory, type PublicFormSessionView, type PuppetControlDeps, type PuppetControlHandle, type ReadinessProbe, type ReadinessReport, type ReadinessResult, type RealtimeProvider, type RegisterInput, type RegisterOptions, type RegisteredAgent, type ResendCredentials, type ResendEmailToolOptions, type ResolveAgentTextRuntimeOptions, type ResolvedAgentTextRuntime, type RunAgentTextTranscriptOptions, type RunLiveAgentTextOptions, type STTProvider, type SecurityConfig, type SentEmail, type ShorthandPrimitive$1 as ShorthandPrimitive, type SpeechConfig, type SyncCallStateInput, type TTSProvider, type ToolDefinition$1 as ToolDefinition, type ToolInputShape$1 as ToolInputShape, type TriggerAction, type TriggerCondition, type TriggerDefinition, type TurnDetectorProvider, type VADProvider, VoiceLayerAuthError, type VoiceLayerClient, VoiceLayerError, VoiceLayerHttpError, VoiceLayerNetworkError, VoiceLayerValidationError, type WebhookApi, type WebhookConfig, type WrapOptions, applyPronunciations, assemblyai, asyncProbe, buildTextLlm, cartesia, collectDefaultMetadata, connector, createClient, createNoOpLLM, deepgram, defineAgent, defineFlowRuntime, defineProcess, defineTool, elevenlabs, envProbe, exchangeWorkerToken, formTools, google, httpTool, livekitTurn, mergeMetadata, openai, processSchemaToAgentParts, processSchemaToDefinition, puppetEnvAvailable, resendEmailTool, resolveAgentTextPlan, resolveAgentTextRuntime, resolveWorkerClient, runAgentTextTranscript, runLiveAgentTextSession, runProbes, silero, startPuppetControl, urlProbe, webhook, workerClientFromToken, wrap };