@voicelayer/sdk 0.3.1 → 0.4.0

package/dist/brain/index.d.ts

@@ -79,14 +79,14 @@ declare const ConnectorUpFrame: z.ZodDiscriminatedUnion<"kind", [z.ZodObject<{
     code: z.ZodEnum<["upstream_timeout", "upstream_error", "bad_response", "normalize_failed", "unreachable"]>;
     message: z.ZodString;
 }, "strip", z.ZodTypeAny, {
-    kind: "brain.error";
     code: "upstream_timeout" | "upstream_error" | "bad_response" | "normalize_failed" | "unreachable";
     message: string;
+    kind: "brain.error";
     streamId: string;
 }, {
-    kind: "brain.error";
     code: "upstream_timeout" | "upstream_error" | "bad_response" | "normalize_failed" | "unreachable";
     message: string;
+    kind: "brain.error";
     streamId: string;
 }>]>;
 type ConnectorUpFrame = z.infer<typeof ConnectorUpFrame>;

package/dist/brain/index.js

@@ -855,7 +855,10 @@ var CallEventKind = z.enum([
   // presses a key on their leg; `dtmf.sent` fires when our agent (or a
   // programmatic caller via /v1/calls/:id/dtmf) emits one outbound.
   "dtmf.received",
-  "dtmf.sent"
+  "dtmf.sent",
+  // A host's runtime intervention (burn-down G-6): call_say / call_send_guidance / call_inject_context / call_instruct,
+  // with masked args and the API key — written by the API only, never through the worker's /events endpoint.
+  "mcp.interaction"
 ]);
 var OP_CALL_EVENT_KIND = /^(tool|handoff|lookup|record|notify|engine)\.[a-z0-9_]{1,48}(\.[a-z0-9_]{1,48})?$/;
 var OpCallEventKind = z.string().regex(OP_CALL_EVENT_KIND);
@@ -901,7 +904,7 @@ z.object({
   payload: z.unknown(),
   ts: z.string().datetime()
 });
-z.enum(["say", "hangup", "dtmf", "instruct", "guidance"]);
+z.enum(["say", "hangup", "dtmf", "instruct", "inject_context", "guidance"]);
 var commandId = z.string().uuid().optional();
 var SayCommand = z.object({
   kind: z.literal("say"),
@@ -924,20 +927,26 @@ var DtmfCommand = z.object({
 var InstructCommand = z.object({
   kind: z.literal("instruct"),
   commandId,
-  text: z.string().min(1)
+  text: z.string().min(1).max(4e3)
+});
+var InjectContextCommand = z.object({
+  kind: z.literal("inject_context"),
+  commandId,
+  text: z.string().min(1).max(4e3)
 });
 z.discriminatedUnion("kind", [
   SayCommand,
   HangupCommand,
   DtmfCommand,
   InstructCommand,
+  InjectContextCommand,
   GuidanceCommand
 ]);
 z.object({
   commandId: z.string().uuid(),
   outcome: z.enum(["applied", "refused", "failed"]),
   // machine code: output_blocked · not_supported · unknown_consultation · no_consultation · invalid_command ·
-  // say_unavailable · dtmf_unavailable
+  // say_unavailable · dtmf_unavailable · context_full · instructions_unavailable
   code: z.string().max(64).optional(),
   detail: z.string().max(500).optional()
 });
@@ -1714,35 +1723,6 @@ z.object({
   note: z.string().max(2e3).nullable().optional(),
   reviewed: z.boolean().optional()
 });
-var ToolExposure = z.enum(["agent", "mcp"]);
-z.object({
-  name: z.string().min(1).max(64).regex(/^[a-z][a-z0-9_]*$/, "snake_case"),
-  // The string that routes the LLM/orchestrator to invoke this tool.
-  description: z.string().min(1).max(2e3),
-  // Zod serialized to JSON Schema at registration time. Persisted as
-  // JSON Schema; SDK and dashboard rehydrate to Zod when needed.
-  inputSchema: z.record(z.unknown()),
-  // When present, the runtime validates the handler's return value.
-  outputSchema: z.record(z.unknown()).optional(),
-  exposedVia: z.array(ToolExposure).min(1),
-  // ── Tool/Plugin SDK (PRD P0.2). All optional for back-compat. ──
-  // Latency class (PRD §4.6.3). Runtime defaults to 'in_call' when omitted.
-  mode: z.enum(["in_call", "async_only"]).optional(),
-  // Hard timeout for an in-call tool (ms).
-  timeoutMs: z.number().int().min(50).max(6e4).optional(),
-  // 'connection' resolves a credential from the vault by `connectionRef`.
-  auth: z.enum(["none", "connection"]).optional(),
-  connectionRef: z.string().max(128).optional(),
-  // Retry policy for safe/async verbs.
-  retry: z.object({
-    maxAttempts: z.number().int().min(1).max(5),
-    backoffMs: z.number().int().min(0).max(6e4)
-  }).optional(),
-  // Normalized result kinds the flow/decision layer branches on (result.kind).
-  resultKinds: z.array(z.string().min(1).max(64)).max(24).optional(),
-  // Free-form dashboard metadata (icon, group, etc.). No `category` enum.
-  metadata: z.record(z.unknown()).optional()
-});
 var TranscriptTurn = z.object({
   speaker: z.enum(["caller", "agent"]),
   text: z.string(),
@@ -1759,24 +1739,28 @@ var ConsultationAudit = z.object({
   latencyMs: z.number().int().min(0)
 });
 var ToolCallAudit = z.object({
+  invocationId: z.string(),
   toolName: z.string(),
-  // Verbatim args the LLM produced. May contain PII — see open question O2
-  // in docs/architecture/contracts-design.md §5.
-  args: z.record(z.unknown()),
-  result: z.unknown(),
+  args: z.string(),
+  result: z.string().optional(),
   startedAt: z.string().datetime(),
   durationMs: z.number().int().min(0),
   ok: z.boolean(),
+  // refused by the Action Guard before it ran
+  blocked: z.boolean(),
   errorMessage: z.string().optional()
 });
 var McpInteractionAudit = z.object({
   // One of the four runtime tools — closed set, no growth allowed.
   tool: z.enum(["call_say", "call_send_guidance", "call_inject_context", "call_instruct"]),
-  // Args verbatim — see open question O2.
+  // Args with PII masked (burn-down G-6, owner decision: the audit never keeps a raw value).
   args: z.record(z.unknown()),
   ts: z.string().datetime(),
   // Attribution. The API key that drove the orchestrator session.
-  apiKeyId: z.string()
+  apiKeyId: z.string(),
+  // 'applied' = the agent confirmed it; 'unknown' = sent, but no confirmation in time (a 504 to the host — it may have
+  // been applied).
+  outcome: z.enum(["applied", "unknown"])
 });
 z.object({
   callId: z.string().uuid(),