@voicelayer/sdk 0.3.1 → 0.4.0

package/dist/runtime/text-session.js

@@ -654,7 +654,7 @@ var init_consultation = __esm({
     });
   }
 });
-var CallEventKind, OP_CALL_EVENT_KIND, OpCallEventKind, commandId, SayCommand, HangupCommand, DtmfCommand, InstructCommand;
+var CallEventKind, OP_CALL_EVENT_KIND, OpCallEventKind, commandId, SayCommand, HangupCommand, DtmfCommand, InstructCommand, InjectContextCommand;
 var init_call_events = __esm({
   "../contracts/src/call-events.ts"() {
     init_consultation();
@@ -677,7 +677,10 @@ var init_call_events = __esm({
       // presses a key on their leg; `dtmf.sent` fires when our agent (or a
       // programmatic caller via /v1/calls/:id/dtmf) emits one outbound.
       "dtmf.received",
-      "dtmf.sent"
+      "dtmf.sent",
+      // A host's runtime intervention (burn-down G-6): call_say / call_send_guidance / call_inject_context / call_instruct,
+      // with masked args and the API key — written by the API only, never through the worker's /events endpoint.
+      "mcp.interaction"
     ]);
     OP_CALL_EVENT_KIND = /^(tool|handoff|lookup|record|notify|engine)\.[a-z0-9_]{1,48}(\.[a-z0-9_]{1,48})?$/;
     OpCallEventKind = z.string().regex(OP_CALL_EVENT_KIND);
@@ -723,7 +726,7 @@ var init_call_events = __esm({
       payload: z.unknown(),
       ts: z.string().datetime()
     });
-    z.enum(["say", "hangup", "dtmf", "instruct", "guidance"]);
+    z.enum(["say", "hangup", "dtmf", "instruct", "inject_context", "guidance"]);
     commandId = z.string().uuid().optional();
     SayCommand = z.object({
       kind: z.literal("say"),
@@ -746,20 +749,26 @@ var init_call_events = __esm({
     InstructCommand = z.object({
       kind: z.literal("instruct"),
       commandId,
-      text: z.string().min(1)
+      text: z.string().min(1).max(4e3)
+    });
+    InjectContextCommand = z.object({
+      kind: z.literal("inject_context"),
+      commandId,
+      text: z.string().min(1).max(4e3)
     });
     z.discriminatedUnion("kind", [
       SayCommand,
       HangupCommand,
       DtmfCommand,
       InstructCommand,
+      InjectContextCommand,
       GuidanceCommand
     ]);
     z.object({
       commandId: z.string().uuid(),
       outcome: z.enum(["applied", "refused", "failed"]),
       // machine code: output_blocked · not_supported · unknown_consultation · no_consultation · invalid_command ·
-      // say_unavailable · dtmf_unavailable
+      // say_unavailable · dtmf_unavailable · context_full · instructions_unavailable
       code: z.string().max(64).optional(),
       detail: z.string().max(500).optional()
     });
@@ -1609,40 +1618,6 @@ var init_call_review = __esm({
     });
   }
 });
-var ToolExposure;
-var init_agent_tools = __esm({
-  "../contracts/src/agent-tools.ts"() {
-    ToolExposure = z.enum(["agent", "mcp"]);
-    z.object({
-      name: z.string().min(1).max(64).regex(/^[a-z][a-z0-9_]*$/, "snake_case"),
-      // The string that routes the LLM/orchestrator to invoke this tool.
-      description: z.string().min(1).max(2e3),
-      // Zod serialized to JSON Schema at registration time. Persisted as
-      // JSON Schema; SDK and dashboard rehydrate to Zod when needed.
-      inputSchema: z.record(z.unknown()),
-      // When present, the runtime validates the handler's return value.
-      outputSchema: z.record(z.unknown()).optional(),
-      exposedVia: z.array(ToolExposure).min(1),
-      // ── Tool/Plugin SDK (PRD P0.2). All optional for back-compat. ──
-      // Latency class (PRD §4.6.3). Runtime defaults to 'in_call' when omitted.
-      mode: z.enum(["in_call", "async_only"]).optional(),
-      // Hard timeout for an in-call tool (ms).
-      timeoutMs: z.number().int().min(50).max(6e4).optional(),
-      // 'connection' resolves a credential from the vault by `connectionRef`.
-      auth: z.enum(["none", "connection"]).optional(),
-      connectionRef: z.string().max(128).optional(),
-      // Retry policy for safe/async verbs.
-      retry: z.object({
-        maxAttempts: z.number().int().min(1).max(5),
-        backoffMs: z.number().int().min(0).max(6e4)
-      }).optional(),
-      // Normalized result kinds the flow/decision layer branches on (result.kind).
-      resultKinds: z.array(z.string().min(1).max(64)).max(24).optional(),
-      // Free-form dashboard metadata (icon, group, etc.). No `category` enum.
-      metadata: z.record(z.unknown()).optional()
-    });
-  }
-});
 var TranscriptTurn, ConsultationAudit, ToolCallAudit, McpInteractionAudit;
 var init_call_result = __esm({
   "../contracts/src/call-result.ts"() {
@@ -1662,24 +1637,28 @@ var init_call_result = __esm({
       latencyMs: z.number().int().min(0)
     });
     ToolCallAudit = z.object({
+      invocationId: z.string(),
       toolName: z.string(),
-      // Verbatim args the LLM produced. May contain PII — see open question O2
-      // in docs/architecture/contracts-design.md §5.
-      args: z.record(z.unknown()),
-      result: z.unknown(),
+      args: z.string(),
+      result: z.string().optional(),
       startedAt: z.string().datetime(),
       durationMs: z.number().int().min(0),
       ok: z.boolean(),
+      // refused by the Action Guard before it ran
+      blocked: z.boolean(),
       errorMessage: z.string().optional()
     });
     McpInteractionAudit = z.object({
       // One of the four runtime tools — closed set, no growth allowed.
       tool: z.enum(["call_say", "call_send_guidance", "call_inject_context", "call_instruct"]),
-      // Args verbatim — see open question O2.
+      // Args with PII masked (burn-down G-6, owner decision: the audit never keeps a raw value).
       args: z.record(z.unknown()),
       ts: z.string().datetime(),
       // Attribution. The API key that drove the orchestrator session.
-      apiKeyId: z.string()
+      apiKeyId: z.string(),
+      // 'applied' = the agent confirmed it; 'unknown' = sent, but no confirmation in time (a 504 to the host — it may have
+      // been applied).
+      outcome: z.enum(["applied", "unknown"])
     });
     z.object({
       callId: z.string().uuid(),
@@ -3512,7 +3491,6 @@ var init_src = __esm({
     init_evaluations();
     init_tests();
     init_call_review();
-    init_agent_tools();
     init_call_result();
     init_numbers();
     init_project_limits();
@@ -4458,7 +4436,10 @@ ${text}`
   await handle.waitForPlayout();
   graphLog("said", { chars: text.length, interrupted: handle.interrupted });
 }
-async function genReply(deps, instructions) {
+async function genReply(deps, nodeInstructions) {
+  const instructions = deps.realtime && deps.live ? `${deps.live.full()}
+
+${nodeInstructions}` : nodeInstructions;
   if (deps.ctx.adapter) {
     await deps.ctx.adapter.generateReply({ instructions });
     return;
@@ -5120,7 +5101,9 @@ ${collected}`);
           let turnResult;
           try {
             turnResult = await runner({
-              instructions: parts.join("\n\n"),
+              // an out-of-band completion: it sees none of the agent's instructions, so the host's layers (and the seal —
+              // the caller's words are in these instructions) ride in front (burn-down G-6)
+              instructions: [deps.live?.additions(), ...parts].filter(Boolean).join("\n\n"),
               transcript,
               tools: agentTools,
               exits: exitOptions,
@@ -5277,6 +5260,7 @@ ${collected}`);
         ...deps.history ? { history: deps.history } : {},
         ...deps.realtime ? { realtime: true } : {},
         ...deps.resolvers ? { resolvers: deps.resolvers } : {},
+        ...deps.live ? { live: deps.live } : {},
         depth: depth + 1
       });
       deps.events.note("subflow.exit", { node: node.id, ref, outcome: outcome.kind });
@@ -5380,7 +5364,8 @@ async function runFlowGraph(program, deps) {
         ...deps.realtime ? { realtime: true } : {},
         ...deps.resolvers ? { resolvers: deps.resolvers } : {},
         ...deps.depth !== void 0 ? { depth: deps.depth } : {},
-        ...deps.busy ? { busy: deps.busy } : {}
+        ...deps.busy ? { busy: deps.busy } : {},
+        ...deps.live ? { live: deps.live } : {}
       });
     } catch (err) {
       const message = err instanceof Error ? err.message : String(err);
@@ -5784,7 +5769,8 @@ async function runFlowProgram(program, ctx, opts) {
       ...opts.maxNodeVisits !== void 0 ? { maxNodeVisits: opts.maxNodeVisits } : {},
       ...opts.realtime ? { realtime: true } : {},
       ...opts.resolvers ? { resolvers: opts.resolvers } : {},
-      ...opts.busy ? { busy: opts.busy } : {}
+      ...opts.busy ? { busy: opts.busy } : {},
+      ...opts.live ? { live: opts.live } : {}
     });
     graphLog("outcome", outcome);
     return outcome;
@@ -6648,7 +6634,9 @@ function createTextSessionAdapter(transport) {
     canBargeIn: false,
     canReceiveDtmf: false,
     canPublishDtmf: false,
-    canResolveSpeaker: true
+    canResolveSpeaker: true,
+    // a text turn has no live session to steer
+    canUpdateInstructions: false
   };
   const adapter = {
     capabilities,
@@ -6691,6 +6679,9 @@ function createTextSessionAdapter(transport) {
       await transport.send(text);
       return { interrupted: false };
     },
+    async setInstructions() {
+      throw new Error("setInstructions unsupported: canUpdateInstructions=false");
+    },
     async enqueueSay(text) {
       fire("agent_turn", { text });
       await transport.send(text);