@voicelayer/sdk 0.3.1 → 0.4.1

package/dist/brain/index.d.ts

@@ -79,14 +79,14 @@ declare const ConnectorUpFrame: z.ZodDiscriminatedUnion<"kind", [z.ZodObject<{
     code: z.ZodEnum<["upstream_timeout", "upstream_error", "bad_response", "normalize_failed", "unreachable"]>;
     message: z.ZodString;
 }, "strip", z.ZodTypeAny, {
-    kind: "brain.error";
     code: "upstream_timeout" | "upstream_error" | "bad_response" | "normalize_failed" | "unreachable";
     message: string;
+    kind: "brain.error";
     streamId: string;
 }, {
-    kind: "brain.error";
     code: "upstream_timeout" | "upstream_error" | "bad_response" | "normalize_failed" | "unreachable";
     message: string;
+    kind: "brain.error";
     streamId: string;
 }>]>;
 type ConnectorUpFrame = z.infer<typeof ConnectorUpFrame>;

package/dist/brain/index.js

@@ -622,9 +622,11 @@ var ProcessToolDTO = z.object({
 });
 var ProcessSchemaDTO = z.object({
   id: z.string().min(1).max(64),
-  // System-prompt fragments compiled from say/confirm nodes. The SDK bridge
-  // composes these into the agent's prompt.
-  prompts: z.array(z.object({ id: z.string().min(1).max(128), text: z.string().max(2e3) })).max(64).optional(),
+  // System-prompt fragments compiled from say/confirm/llm nodes. The SDK bridge
+  // composes these into the agent's prompt. An AI step's instructions are a
+  // system prompt in their own right, so the cap is generous (2,000 refused real
+  // flows — G-27); publish checks it (validateFlowGraph → compiledSchemaIssues).
+  prompts: z.array(z.object({ id: z.string().min(1).max(128), text: z.string().max(16e3) })).max(64).optional(),
   fields: z.array(ProcessFieldDTO).max(64),
   completionGate: z.object({
     requiredFields: z.array(z.string()).max(64),
@@ -855,7 +857,10 @@ var CallEventKind = z.enum([
   // presses a key on their leg; `dtmf.sent` fires when our agent (or a
   // programmatic caller via /v1/calls/:id/dtmf) emits one outbound.
   "dtmf.received",
-  "dtmf.sent"
+  "dtmf.sent",
+  // A host's runtime intervention (burn-down G-6): call_say / call_send_guidance / call_inject_context / call_instruct,
+  // with masked args and the API key — written by the API only, never through the worker's /events endpoint.
+  "mcp.interaction"
 ]);
 var OP_CALL_EVENT_KIND = /^(tool|handoff|lookup|record|notify|engine)\.[a-z0-9_]{1,48}(\.[a-z0-9_]{1,48})?$/;
 var OpCallEventKind = z.string().regex(OP_CALL_EVENT_KIND);
@@ -901,7 +906,7 @@ z.object({
   payload: z.unknown(),
   ts: z.string().datetime()
 });
-z.enum(["say", "hangup", "dtmf", "instruct", "guidance"]);
+z.enum(["say", "hangup", "dtmf", "instruct", "inject_context", "guidance"]);
 var commandId = z.string().uuid().optional();
 var SayCommand = z.object({
   kind: z.literal("say"),
@@ -924,20 +929,26 @@ var DtmfCommand = z.object({
 var InstructCommand = z.object({
   kind: z.literal("instruct"),
   commandId,
-  text: z.string().min(1)
+  text: z.string().min(1).max(4e3)
+});
+var InjectContextCommand = z.object({
+  kind: z.literal("inject_context"),
+  commandId,
+  text: z.string().min(1).max(4e3)
 });
 z.discriminatedUnion("kind", [
   SayCommand,
   HangupCommand,
   DtmfCommand,
   InstructCommand,
+  InjectContextCommand,
   GuidanceCommand
 ]);
 z.object({
   commandId: z.string().uuid(),
   outcome: z.enum(["applied", "refused", "failed"]),
   // machine code: output_blocked · not_supported · unknown_consultation · no_consultation · invalid_command ·
-  // say_unavailable · dtmf_unavailable
+  // say_unavailable · dtmf_unavailable · context_full · instructions_unavailable
   code: z.string().max(64).optional(),
   detail: z.string().max(500).optional()
 });
@@ -1714,35 +1725,6 @@ z.object({
   note: z.string().max(2e3).nullable().optional(),
   reviewed: z.boolean().optional()
 });
-var ToolExposure = z.enum(["agent", "mcp"]);
-z.object({
-  name: z.string().min(1).max(64).regex(/^[a-z][a-z0-9_]*$/, "snake_case"),
-  // The string that routes the LLM/orchestrator to invoke this tool.
-  description: z.string().min(1).max(2e3),
-  // Zod serialized to JSON Schema at registration time. Persisted as
-  // JSON Schema; SDK and dashboard rehydrate to Zod when needed.
-  inputSchema: z.record(z.unknown()),
-  // When present, the runtime validates the handler's return value.
-  outputSchema: z.record(z.unknown()).optional(),
-  exposedVia: z.array(ToolExposure).min(1),
-  // ── Tool/Plugin SDK (PRD P0.2). All optional for back-compat. ──
-  // Latency class (PRD §4.6.3). Runtime defaults to 'in_call' when omitted.
-  mode: z.enum(["in_call", "async_only"]).optional(),
-  // Hard timeout for an in-call tool (ms).
-  timeoutMs: z.number().int().min(50).max(6e4).optional(),
-  // 'connection' resolves a credential from the vault by `connectionRef`.
-  auth: z.enum(["none", "connection"]).optional(),
-  connectionRef: z.string().max(128).optional(),
-  // Retry policy for safe/async verbs.
-  retry: z.object({
-    maxAttempts: z.number().int().min(1).max(5),
-    backoffMs: z.number().int().min(0).max(6e4)
-  }).optional(),
-  // Normalized result kinds the flow/decision layer branches on (result.kind).
-  resultKinds: z.array(z.string().min(1).max(64)).max(24).optional(),
-  // Free-form dashboard metadata (icon, group, etc.). No `category` enum.
-  metadata: z.record(z.unknown()).optional()
-});
 var TranscriptTurn = z.object({
   speaker: z.enum(["caller", "agent"]),
   text: z.string(),
@@ -1759,24 +1741,28 @@ var ConsultationAudit = z.object({
   latencyMs: z.number().int().min(0)
 });
 var ToolCallAudit = z.object({
+  invocationId: z.string(),
   toolName: z.string(),
-  // Verbatim args the LLM produced. May contain PII — see open question O2
-  // in docs/architecture/contracts-design.md §5.
-  args: z.record(z.unknown()),
-  result: z.unknown(),
+  args: z.string(),
+  result: z.string().optional(),
   startedAt: z.string().datetime(),
   durationMs: z.number().int().min(0),
   ok: z.boolean(),
+  // refused by the Action Guard before it ran
+  blocked: z.boolean(),
   errorMessage: z.string().optional()
 });
 var McpInteractionAudit = z.object({
   // One of the four runtime tools — closed set, no growth allowed.
   tool: z.enum(["call_say", "call_send_guidance", "call_inject_context", "call_instruct"]),
-  // Args verbatim — see open question O2.
+  // Args with PII masked (burn-down G-6, owner decision: the audit never keeps a raw value).
   args: z.record(z.unknown()),
   ts: z.string().datetime(),
   // Attribution. The API key that drove the orchestrator session.
-  apiKeyId: z.string()
+  apiKeyId: z.string(),
+  // 'applied' = the agent confirmed it; 'unknown' = sent, but no confirmation in time (a 504 to the host — it may have
+  // been applied).
+  outcome: z.enum(["applied", "unknown"])
 });
 z.object({
   callId: z.string().uuid(),
@@ -2000,6 +1986,39 @@ byokProviders().map((p) => ({
   keyPlaceholder: p.keyPlaceholder ?? "",
   supportsBaseUrl: p.supportsBaseUrl
 }));
+z.object({
+  id: z.string().min(1),
+  label: z.string().min(1),
+  /** The vault `provider` the resulting connection is stored under. */
+  vaultProvider: z.string().min(1),
+  category: z.enum(["model", "tool"])
+});
+z.object({
+  authorizeUrl: z.string().url()
+});
+z.object({
+  state: z.string().min(1).max(512),
+  code: z.string().min(1).max(4096)
+});
+z.object({
+  providerId: z.string().min(1),
+  /** The provider's display name ("ChatGPT"). */
+  providerLabel: z.string().min(1),
+  /** What the connection is for — which group the dashboard files it under. */
+  category: z.enum(["model", "tool"]),
+  /** The account's stable id at the provider (OIDC `sub`); reconnecting the same account updates the same row. */
+  subject: z.string().min(1).nullable(),
+  email: z.string().nullable(),
+  displayName: z.string().nullable(),
+  scopes: z.array(z.string()),
+  /**
+   * The workspace user who signed in. A person's model plan (category 'model') serves only them — never teammates or
+   * API keys. Absent on rows connected before it was recorded.
+   */
+  connectedBy: z.string().nullable().optional(),
+  /** Set when a refresh was refused (e.g. `invalid_grant`): the owner must connect again. */
+  reauthRequired: z.boolean().optional()
+});
 var E164 = z.string().regex(/^\+[1-9]\d{6,14}$/, "must be E.164 (+15551234567)");
 var RoomPrefix = z.string().regex(/^[a-z0-9][a-z0-9-]{0,30}[a-z0-9-]?$/, "lowercase letters, digits, dashes; max 32");
 var RecordingPrefix = z.string().min(1).max(128).refine((v) => !v.startsWith("/") && !v.includes(".."), "relative key prefix only");
@@ -2302,6 +2321,10 @@ z.discriminatedUnion("kind", [
   BrainRequestFrame,
   BrainCancelFrame
 ]);
+var FLOW_BOOT_FAILURES = ["schema_fetch_failed", "no_process_schema", "missing_agent_id", "no_api_key"];
+z.enum(
+  FLOW_BOOT_FAILURES.map((cause) => `flow_boot:${cause}`)
+);
 var EnvironmentSpec = z.enum(["draft", "live"]);
 z.object({
   agentName: z.string().min(1),