@voicelayer/sdk 0.4.0 → 0.4.1

package/dist/index.js

@@ -495,9 +495,11 @@ var init_agents = __esm({
     });
     ProcessSchemaDTO = z.object({
       id: z.string().min(1).max(64),
-      // System-prompt fragments compiled from say/confirm nodes. The SDK bridge
-      // composes these into the agent's prompt.
-      prompts: z.array(z.object({ id: z.string().min(1).max(128), text: z.string().max(2e3) })).max(64).optional(),
+      // System-prompt fragments compiled from say/confirm/llm nodes. The SDK bridge
+      // composes these into the agent's prompt. An AI step's instructions are a
+      // system prompt in their own right, so the cap is generous (2,000 refused real
+      // flows — G-27); publish checks it (validateFlowGraph → compiledSchemaIssues).
+      prompts: z.array(z.object({ id: z.string().min(1).max(128), text: z.string().max(16e3) })).max(64).optional(),
       fields: z.array(ProcessFieldDTO).max(64),
       completionGate: z.object({
         requiredFields: z.array(z.string()).max(64),
@@ -1872,28 +1874,17 @@ var init_flow_ports = __esm({
     INCOMPLETE_PORT_ID = "incomplete";
   }
 });
+
+// ../contracts/src/flow-edges.ts
 function isLabelOnlyEdge(edge, sourceType) {
   if (!CONVERSATIONAL_NODE_TYPES.has(sourceType)) return false;
   if (edge.sourceHandle) return false;
   if (typeof edge.condition === "string" && edge.condition.trim()) return false;
   return typeof edge.label === "string" && edge.label.trim().length > 0;
 }
-var FlowIssueSeverity, FlowIssue, CONVERSATIONAL_NODE_TYPES;
-var init_flow_validate = __esm({
-  "../contracts/src/flow-validate.ts"() {
-    init_flow_ports();
-    FlowIssueSeverity = z.enum(["error", "warning"]);
-    FlowIssue = z.object({
-      code: z.string().max(64),
-      severity: FlowIssueSeverity,
-      message: z.string().max(500),
-      nodeId: z.string().max(128).optional(),
-      edgeId: z.string().max(128).optional()
-    });
-    z.object({
-      valid: z.boolean(),
-      issues: z.array(FlowIssue).max(256)
-    });
+var CONVERSATIONAL_NODE_TYPES;
+var init_flow_edges = __esm({
+  "../contracts/src/flow-edges.ts"() {
     CONVERSATIONAL_NODE_TYPES = /* @__PURE__ */ new Set([
       "llm",
       "ask",
@@ -1902,838 +1893,909 @@ var init_flow_validate = __esm({
   }
 });
 
-// ../contracts/src/flow-builtins.ts
-var init_flow_builtins = __esm({
-  "../contracts/src/flow-builtins.ts"() {
-  }
-});
-var ComplianceRule, ComplianceDecision, ComplianceConfig;
-var init_compliance = __esm({
-  "../contracts/src/compliance.ts"() {
-    ComplianceRule = z.enum(["dnc", "consent", "quiet_hours", "frequency_cap"]);
-    ComplianceDecision = z.enum(["allowed", "blocked"]);
-    ComplianceConfig = z.object({
-      // Local calling window for the CALLED party — TCPA default 8am–9pm.
-      quietHoursStartHour: z.number().int().min(0).max(23).default(8),
-      quietHoursEndHour: z.number().int().min(1).max(24).default(21),
-      enforceDnc: z.boolean().default(true),
-      enforceQuietHours: z.boolean().default(true),
-      // Max dial attempts to one number per rolling 24h. 0 = unlimited.
-      maxAttemptsPerDay: z.number().int().min(0).default(0),
-      // Require a recorded consent flag before dialing.
-      requireConsent: z.boolean().default(false),
-      // Fallback IANA tz when the number's region can't be resolved.
-      fallbackTimeZone: z.string().min(1).default("America/New_York")
-    });
-    z.object({
-      phoneE164: z.string().regex(/^\+[1-9]\d{1,14}$/, "must be E.164"),
-      // ISO instant the check is evaluated at (defaults to now server-side).
-      now: z.string().datetime().optional(),
-      // Override the resolved timezone (else derived from the number's area code).
-      timeZone: z.string().optional(),
-      // Recent attempt count in the last 24h (for the frequency cap), if known.
-      recentAttempts: z.number().int().min(0).optional(),
-      // Whether consent is on file (for requireConsent).
-      hasConsent: z.boolean().optional()
-    });
-    z.object({
-      decision: ComplianceDecision,
-      // The first rule that blocked, if any.
-      rule: ComplianceRule.nullable(),
-      reason: z.string().nullable()
-    });
-    z.object({
-      id: z.string().uuid(),
-      projectId: z.string().min(1),
-      phoneE164: z.string(),
-      reason: z.string().nullable(),
-      source: z.string().nullable(),
-      createdAt: z.string().datetime()
-    });
-    z.object({
-      id: z.string().uuid(),
-      projectId: z.string().min(1),
-      phoneE164: z.string(),
-      decision: ComplianceDecision,
-      rule: ComplianceRule.nullable(),
-      reason: z.string().nullable(),
-      checkedAt: z.string().datetime()
-    });
-    z.object({
-      phoneE164: z.string().regex(/^\+[1-9]\d{1,14}$/, "must be E.164"),
-      reason: z.string().max(500).optional(),
-      source: z.string().max(120).optional()
-    });
-    ComplianceConfig.partial();
-  }
-});
-
-// ../contracts/src/sms-keywords.ts
-var init_sms_keywords = __esm({
-  "../contracts/src/sms-keywords.ts"() {
+// ../contracts/src/flow-enrichment.ts
+function planEnrichment(graph) {
+  const ids = graph.nodes.map((n) => n.id);
+  const indeg = new Map(ids.map((id) => [id, 0]));
+  const adj = new Map(ids.map((id) => [id, []]));
+  for (const edge of graph.edges) {
+    if (!adj.has(edge.source) || !indeg.has(edge.target)) continue;
+    adj.get(edge.source).push(edge.target);
+    indeg.set(edge.target, (indeg.get(edge.target) ?? 0) + 1);
   }
-});
-var init_call_recording = __esm({
-  "../contracts/src/call-recording.ts"() {
-    z.object({
-      // When false, the call-event sink skips egress entirely — no recording is made.
-      recordingEnabled: z.boolean().default(true),
-      // Optional consent preamble the agent speaks first on every call. null/empty =
-      // no announcement. Capped so it stays a short notice, not a monologue.
-      consentAnnouncement: z.string().max(1e3).nullable().default(null)
-    });
-    z.object({
-      recordingEnabled: z.boolean().optional(),
-      consentAnnouncement: z.string().max(1e3).nullable().optional()
-    });
+  const queue = ids.filter((id) => (indeg.get(id) ?? 0) === 0);
+  const order = [];
+  while (queue.length > 0) {
+    const id = queue.shift();
+    order.push(id);
+    for (const next of adj.get(id) ?? []) {
+      const left = (indeg.get(next) ?? 0) - 1;
+      indeg.set(next, left);
+      if (left === 0) queue.push(next);
+    }
   }
-});
-var OutboundAmdMode;
-var init_outbound = __esm({
-  "../contracts/src/outbound.ts"() {
-    OutboundAmdMode = z.enum(["off", "detect", "detectMessageEnd"]);
-    z.object({
-      // Callee in E.164 (e.g. +14155551234). call-router re-validates strictly.
-      to: z.string().regex(/^\+[1-9]\d{6,14}$/, "must be E.164, e.g. +14155551234"),
-      // Caller-id phone number (must belong to the calling project).
-      phoneNumberId: z.string().min(1),
-      // Optional agent override; falls back to the number's bound agent.
-      agentId: z.string().min(1).optional(),
-      // Template/context variables forwarded to the agent as dispatch metadata.
-      variables: z.record(z.string(), z.string()).optional(),
-      // Per-call AMD override; takes precedence over the agent's stored outbound.amd.
-      amd: OutboundAmdMode.optional()
-    });
+  return { order, acyclic: order.length === ids.length };
+}
+var init_flow_enrichment = __esm({
+  "../contracts/src/flow-enrichment.ts"() {
   }
 });
-var ConnectionAuthType, ConnectionStatus;
-var init_connection = __esm({
-  "../contracts/src/connection.ts"() {
-    init_providers();
-    ConnectionAuthType = z.enum(["oauth2", "api_key", "bearer", "basic", "none"]);
-    ConnectionStatus = z.enum(["active", "revoked", "error"]);
-    z.object({
-      v: z.number().int(),
-      // Key id (short fingerprint) of the key that encrypted this envelope — lets the
-      // cipher pick the right key from its ring so CREDENTIAL_ENCRYPTION_KEY can rotate
-      // in-band (Tier-1 item 4). Optional/absent on legacy v1 envelopes, which decrypt
-      // with the designated legacy key.
-      kid: z.string().optional(),
-      iv: z.string(),
-      ct: z.string(),
-      tag: z.string()
-    });
-    z.object({
-      id: z.string().uuid(),
-      projectId: z.string().min(1),
-      name: z.string().min(1).max(128),
-      // Open string — customers name providers freely (e.g. 'google_calendar',
-      // 'salesforce', 'n8n', 'http').
-      provider: z.string().min(1).max(120),
-      authType: ConnectionAuthType,
-      status: ConnectionStatus,
-      // Non-secret metadata (scopes, account label, base URL, …).
-      metadata: z.record(z.unknown()),
-      expiresAt: z.string().datetime().nullable(),
-      createdAt: z.string().datetime(),
-      updatedAt: z.string().datetime()
-    });
-    z.object({
-      name: z.string().trim().min(1).max(128),
-      provider: z.string().trim().min(1).max(120),
-      authType: ConnectionAuthType,
-      // The secret material to encrypt at rest. Never stored or returned in plaintext.
-      secret: z.string().min(1).max(8192),
-      metadata: z.record(z.unknown()).optional(),
-      expiresAt: z.string().datetime().optional()
-    });
-    z.object({
-      name: z.string().trim().min(1).max(128).optional(),
-      // New secret material — re-encrypted at rest; the old envelope is replaced.
-      secret: z.string().min(1).max(8192).optional(),
-      // Merged over the existing metadata (top-level keys win).
-      metadata: z.record(z.unknown()).optional()
-    }).refine((v) => v.name !== void 0 || v.secret !== void 0 || v.metadata !== void 0, {
-      message: "nothing to update"
-    });
-    byokProviders().map((p) => ({
-      id: p.id,
-      label: p.label,
-      keyPlaceholder: p.keyPlaceholder ?? "",
-      supportsBaseUrl: p.supportsBaseUrl
-    }));
+
+// ../contracts/src/flow-compile.ts
+function compileConversationFlow(graph, id = "flow") {
+  const fields = [];
+  const prompts = [];
+  const triggers = [];
+  let gateRequired = null;
+  for (const node of graph.nodes) {
+    const data = node.data;
+    switch (node.type) {
+      case "ask": {
+        const name = typeof data.slot === "string" ? data.slot : node.id;
+        const required = data.required !== false;
+        fields.push({
+          name,
+          required,
+          ...typeof data.ask === "string" ? { prompt: data.ask } : {}
+        });
+        break;
+      }
+      case "say":
+      case "confirm": {
+        if (typeof data.text === "string") prompts.push({ id: node.id, text: data.text });
+        break;
+      }
+      case "trigger": {
+        const on = typeof data.on === "string" ? data.on : "";
+        const then = typeof data.then === "string" ? data.then : "handoff";
+        if (on) triggers.push({ on, then });
+        break;
+      }
+      case "gate": {
+        if (Array.isArray(data.requiredFields)) {
+          gateRequired = data.requiredFields.filter((x) => typeof x === "string");
+        }
+        break;
+      }
+    }
   }
-});
-var E164, RoomPrefix, RecordingPrefix, Cidr, TelephonySettings, ProfileSource, EffectiveCallProfile;
-var init_telephony = __esm({
-  "../contracts/src/telephony.ts"() {
-    E164 = z.string().regex(/^\+[1-9]\d{6,14}$/, "must be E.164 (+15551234567)");
-    RoomPrefix = z.string().regex(/^[a-z0-9][a-z0-9-]{0,30}[a-z0-9-]?$/, "lowercase letters, digits, dashes; max 32");
-    RecordingPrefix = z.string().min(1).max(128).refine((v) => !v.startsWith("/") && !v.includes(".."), "relative key prefix only");
-    Cidr = z.string().regex(/^\d{1,3}(\.\d{1,3}){3}\/\d{1,2}$/, "must be IPv4 CIDR (a.b.c.d/nn)");
-    TelephonySettings = z.object({
-      outboundTrunkId: z.string().min(1).max(128).nullable().default(null),
-      defaultFromE164: E164.nullable().default(null),
-      roomPrefix: RoomPrefix.nullable().default(null),
-      sipAllowedCidrs: z.array(Cidr).max(32).nullable().default(null),
-      recordingPrefix: RecordingPrefix.nullable().default(null),
-      strictByok: z.boolean().default(false)
-    });
-    z.object({
-      outboundTrunkId: z.string().min(1).max(128).nullable().optional(),
-      defaultFromE164: E164.nullable().optional(),
-      roomPrefix: RoomPrefix.nullable().optional(),
-      sipAllowedCidrs: z.array(Cidr).max(32).nullable().optional(),
-      recordingPrefix: RecordingPrefix.nullable().optional(),
-      strictByok: z.boolean().optional()
-    }).refine((v) => Object.keys(v).length > 0, { message: "nothing to update" });
-    ProfileSource = z.enum(["org", "platform", "none"]);
-    EffectiveCallProfile = z.object({
-      projectId: z.string(),
-      outboundTrunkId: z.string().nullable(),
-      defaultFromE164: z.string().nullable(),
-      roomPrefix: z.string(),
-      sipAllowedCidrs: z.array(z.string()),
-      recordingPrefix: z.string(),
-      strictByok: z.boolean(),
-      sources: z.object({
-        outboundTrunkId: ProfileSource,
-        defaultFromE164: ProfileSource,
-        roomPrefix: ProfileSource,
-        sipAllowedCidrs: ProfileSource,
-        recordingPrefix: ProfileSource
-      })
+  const requiredFields = gateRequired ?? fields.filter((f) => f.required).map((f) => f.name);
+  return { id, fields, completionGate: { requiredFields }, triggers, prompts };
+}
+function asFieldType(value) {
+  return typeof value === "string" && FIELD_TYPES.includes(value) ? value : "string";
+}
+function asHistoryPolicy(value) {
+  return typeof value === "string" && HISTORY_POLICIES.has(value) ? value : "full";
+}
+function asAdherence(value) {
+  return typeof value === "string" && ADHERENCE_MODES.has(value) ? value : "off";
+}
+function branchesFor(data) {
+  return Array.isArray(data.branches) ? data.branches.filter((b) => b && typeof b.id === "string" && typeof b.label === "string").map((b) => ({
+    id: b.id,
+    label: b.label,
+    ...typeof b.when === "string" && b.when.trim() ? { when: b.when } : {},
+    ...typeof b.digit === "string" && b.digit.trim() ? { digit: b.digit.trim() } : {},
+    ...typeof b.description === "string" && b.description.trim() ? { description: b.description } : {}
+  })) : [];
+}
+function nodeConfigFor(node) {
+  const data = node.data;
+  switch (node.type) {
+    case "start":
+      return {};
+    case "say":
+    case "confirm":
+      return { text: typeof data.text === "string" ? data.text : "" };
+    case "ask":
+      return {
+        slot: typeof data.slot === "string" ? data.slot : node.id,
+        required: data.required !== false,
+        type: asFieldType(data.type),
+        historyPolicy: asHistoryPolicy(data.historyPolicy),
+        ...typeof data.ask === "string" ? { ask: data.ask } : {},
+        ...typeof data.pattern === "string" ? { pattern: data.pattern } : {},
+        ...typeof data.min === "number" ? { min: data.min } : {},
+        ...typeof data.max === "number" ? { max: data.max } : {},
+        ...Array.isArray(data.enum) ? { enum: data.enum.filter((x) => typeof x === "string") } : {}
+      };
+    case "llm":
+      return {
+        instructions: typeof data.instructions === "string" ? data.instructions : typeof data.text === "string" ? data.text : "",
+        // Chat-hub valve: a resident conversational node (entry/return point)
+        // that routes to task subgraphs on its conditional edges and absorbs
+        // off-script turns in place instead of dead-ending. See the interpreter.
+        hub: data.hub === true,
+        historyPolicy: asHistoryPolicy(data.historyPolicy),
+        // Drift-gate (supervisor-lite): verify the reply still localizes to this
+        // node. enforce → reject-and-regenerate, then speak `fallback` verbatim.
+        adherence: asAdherence(data.adherence),
+        ...typeof data.fallback === "string" ? { fallback: data.fallback } : {}
+      };
+    case "tool": {
+      const url = typeof data.url === "string" ? data.url : "";
+      const rawName = typeof data.name === "string" ? data.name : "";
+      const name = /^[a-z][a-z0-9_]*$/.test(rawName) ? rawName : `tool_${node.id.replace(/[^a-z0-9]/gi, "").slice(0, 16).toLowerCase() || "fn"}`;
+      const input = {};
+      if (data.input && typeof data.input === "object") {
+        for (const [key, val] of Object.entries(data.input)) {
+          if (val === "string" || val === "number" || val === "boolean") input[key] = val;
+        }
+      }
+      const headers = {};
+      if (data.headers && typeof data.headers === "object") {
+        for (const [key, val] of Object.entries(data.headers)) {
+          if (typeof val === "string") headers[key] = val;
+        }
+      }
+      return {
+        name,
+        description: typeof data.description === "string" && data.description ? data.description : name,
+        input,
+        url,
+        method: HTTP_METHODS.has(data.method) ? data.method : "POST",
+        ...Object.keys(headers).length ? { headers } : {},
+        auth: data.auth === "connection" ? "connection" : "none",
+        ...typeof data.connectionRef === "string" ? { connectionRef: data.connectionRef } : {},
+        // Registry reference: run the project HTTP tool with this NAME via the
+        // server-side proxy instead of the inline url/method/auth above.
+        ...typeof data.toolRef === "string" && data.toolRef ? { toolRef: data.toolRef } : {},
+        // Promote result fields into NAMED slots on success:
+        // { slotName: "data.path" }. Later nodes then read {{ slotName }}
+        // directly instead of {{ tool.<nodeId>.data.path }} via a set node.
+        ...(() => {
+          if (!data.outputAs || typeof data.outputAs !== "object") return {};
+          const outputAs = {};
+          for (const [slot, path] of Object.entries(data.outputAs)) {
+            if (typeof path === "string" && path.trim() && /^[a-zA-Z_][\w.]*$/.test(slot)) {
+              outputAs[slot] = path.trim();
+            }
+          }
+          return Object.keys(outputAs).length ? { outputAs } : {};
+        })()
+      };
+    }
+    case "gate":
+      return {
+        requiredFields: Array.isArray(data.requiredFields) ? data.requiredFields.filter((x) => typeof x === "string") : []
+      };
+    case "handoff":
+      return {
+        ...typeof data.to === "string" ? { to: data.to } : {},
+        ...typeof data.fallback === "string" ? { fallback: data.fallback } : {},
+        ...typeof data.on === "string" ? { on: data.on } : {},
+        // Per-node warm (conference brief) / cold (blind REFER) override.
+        ...data.mode === "warm" || data.mode === "cold" ? { mode: data.mode } : {},
+        // What the joining human HEARS (warm mode speaks it verbatim once they
+        // answer). {{ }}-interpolated at runtime against the slot scope.
+        ...typeof data.briefing === "string" && data.briefing.trim() ? { briefing: data.briefing } : {}
+      };
+    case "end":
+      return {
+        ...typeof data.on === "string" ? { on: data.on } : {},
+        ...typeof data.voicemail === "boolean" ? { voicemail: data.voicemail } : {},
+        // Optional closing line spoken before hang-up (interpolated at runtime).
+        ...typeof data.endMessage === "string" ? { endMessage: data.endMessage } : {}
+      };
+    case "trigger":
+      return {
+        on: typeof data.on === "string" ? data.on : "",
+        then: typeof data.then === "string" ? data.then : "handoff",
+        ...typeof data.onlyWhile === "string" ? { onlyWhile: data.onlyWhile } : {}
+      };
+    case "decision":
+      return {
+        ...typeof data.condition === "string" ? { condition: data.condition } : {},
+        branches: branchesFor(data)
+      };
+    case "playbook":
+      return {
+        ...typeof data.goal === "string" ? { goal: data.goal } : {},
+        ...typeof data.instructions === "string" ? { instructions: data.instructions } : {},
+        // Optional reference to a reusable library playbook. playbookId is the
+        // rename-safe key (pinned at deploy); playbookRef (name) remains for
+        // display + legacy live resolution.
+        ...typeof data.playbookRef === "string" ? { playbookRef: data.playbookRef } : {},
+        ...typeof data.playbookId === "string" && data.playbookId ? { playbookId: data.playbookId } : {},
+        requiredFields: Array.isArray(data.requiredFields) ? data.requiredFields.filter((x) => typeof x === "string") : [],
+        // Agent loop: scoped registry-tool names + explicit opt-in + model knobs.
+        // With tools (or agentLoop:true) the runtime swaps the plain conversational
+        // turn for the LLM-with-tools runner and the structured exit tool.
+        ...Array.isArray(data.tools) ? { tools: data.tools.filter((x) => typeof x === "string" && x.length > 0) } : {},
+        ...data.agentLoop === true ? { agentLoop: true } : {},
+        ...typeof data.model === "string" && data.model ? { model: data.model } : {},
+        ...typeof data.temperature === "number" ? { temperature: data.temperature } : {},
+        // Spoken close when the turn budget exhausts with required fields missing
+        // and no `incomplete` port is wired (the gate never silently advances).
+        ...typeof data.incompleteMessage === "string" && data.incompleteMessage ? { incompleteMessage: data.incompleteMessage } : {},
+        // Turn policy: agent-generated speech is interruptible by default;
+        // false locks it (verbatim lines are always locked regardless).
+        ...data.interruptible === false ? { interruptible: false } : {},
+        branches: branchesFor(data)
+      };
+    case "menu":
+      return {
+        ...typeof data.prompt === "string" ? { prompt: data.prompt } : {},
+        branches: branchesFor(data)
+      };
+    case "classify":
+      return {
+        ...typeof data.instructions === "string" ? { instructions: data.instructions } : {},
+        branches: branchesFor(data)
+      };
+    case "router":
+      return {
+        hub: true,
+        ...typeof data.instructions === "string" ? { instructions: data.instructions } : {},
+        branches: Array.isArray(data.branches) ? data.branches.filter((b) => b && typeof b.id === "string" && typeof b.label === "string").map((b) => ({
+          id: b.id,
+          label: b.label,
+          ...typeof b.description === "string" && b.description.trim() ? { description: b.description } : {}
+        })) : []
+      };
+    case "rag":
+      return {
+        ...typeof data.query === "string" ? { query: data.query } : {},
+        ...typeof data.topK === "number" ? { topK: data.topK } : {}
+      };
+    case "code":
+      return {
+        ...typeof data.expression === "string" ? { expression: data.expression } : {},
+        ...typeof data.description === "string" ? { description: data.description } : {}
+      };
+    case "set":
+      return {
+        assignments: Array.isArray(data.assignments) ? data.assignments.filter((a) => a && typeof a.name === "string" && a.name.trim() !== "").map((a) => ({
+          name: a.name,
+          value: typeof a.value === "string" ? a.value : ""
+        })) : []
+      };
+    case "subflow":
+      return {
+        ...typeof data.flowRef === "string" ? { flowRef: data.flowRef } : {}
+      };
+    default:
+      return typeof data.label === "string" ? { label: data.label } : {};
+  }
+}
+function compileFlowToProgram(graph, id = "flow") {
+  const stepNodes = graph.nodes.filter(
+    (n) => !CAPABILITY_NODE_TYPES.has(n.type) && !ANNOTATION_NODE_TYPES.has(n.type)
+  );
+  const byId = new Map(stepNodes.map((n) => [n.id, n]));
+  const indeg = new Map(stepNodes.map((n) => [n.id, 0]));
+  const outBySource = /* @__PURE__ */ new Map();
+  const droppedEdges = [];
+  const labelOnlyEdges = [];
+  for (const edge of graph.edges) {
+    const source = byId.get(edge.source);
+    if (!source || !byId.has(edge.target)) {
+      droppedEdges.push(edge.id);
+      continue;
+    }
+    if (isLabelOnlyEdge(edge, source.type)) labelOnlyEdges.push(edge.id);
+    const list = outBySource.get(edge.source) ?? [];
+    list.push({
+      to: edge.target,
+      ...edge.condition ? { condition: edge.condition } : {},
+      ...edge.sourceHandle ? { sourceHandle: edge.sourceHandle } : {},
+      ...edge.label ? { label: edge.label } : {}
+    });
+    outBySource.set(edge.source, list);
+    indeg.set(edge.target, (indeg.get(edge.target) ?? 0) + 1);
+  }
+  const nodes = {};
+  const unsupportedNodes = [];
+  for (const node of stepNodes) {
+    nodes[node.id] = {
+      id: node.id,
+      type: node.type,
+      config: nodeConfigFor(node),
+      // Defensive: the FlowProgram schema caps out[] at 64 — slice rather than
+      // letting an over-wired node fail the read-side parse (which silently
+      // degrades the whole call to the generic base prompt).
+      out: (outBySource.get(node.id) ?? []).slice(0, 64)
+    };
+    if (UNSUPPORTED_NODE_TYPES.has(node.type)) unsupportedNodes.push(node.id);
+  }
+  const startNodes = stepNodes.filter((n) => n.type === "start").map((n) => n.id);
+  let entry2 = startNodes.length ? startNodes : stepNodes.filter((n) => (indeg.get(n.id) ?? 0) === 0).map((n) => n.id);
+  if (entry2.length === 0 && stepNodes.length > 0) entry2 = [stepNodes[0].id];
+  const { acyclic } = planEnrichment(graph);
+  const { completionGate } = compileConversationFlow(graph, id);
+  return {
+    v: 1,
+    id: id.slice(0, 64),
+    entry: entry2.slice(0, 64),
+    nodes,
+    completionGate: { requiredFields: completionGate.requiredFields.slice(0, 64) },
+    // Diagnostics arrays are schema-capped at 256 — slice so a pathological
+    // graph can't fail the read-side parse.
+    diagnostics: {
+      acyclic,
+      droppedEdges: droppedEdges.slice(0, 256),
+      unsupportedNodes: unsupportedNodes.slice(0, 256),
+      labelOnlyEdges: labelOnlyEdges.slice(0, 256)
+    }
+  };
+}
+var FIELD_TYPES, HTTP_METHODS, HISTORY_POLICIES, ADHERENCE_MODES, UNSUPPORTED_NODE_TYPES, CAPABILITY_NODE_TYPES, ANNOTATION_NODE_TYPES;
+var init_flow_compile = __esm({
+  "../contracts/src/flow-compile.ts"() {
+    init_flow_enrichment();
+    init_flow_edges();
+    FIELD_TYPES = [
+      "string",
+      "string[]",
+      "number",
+      "boolean",
+      "datetime",
+      "email",
+      "phone"
+    ];
+    HTTP_METHODS = /* @__PURE__ */ new Set(["GET", "POST", "PUT", "PATCH", "DELETE"]);
+    HISTORY_POLICIES = /* @__PURE__ */ new Set(["full", "last-turn", "slots-only"]);
+    ADHERENCE_MODES = /* @__PURE__ */ new Set(["off", "observe", "enforce"]);
+    UNSUPPORTED_NODE_TYPES = /* @__PURE__ */ new Set([]);
+    CAPABILITY_NODE_TYPES = /* @__PURE__ */ new Set(["memory", "trigger", "speech"]);
+    ANNOTATION_NODE_TYPES = /* @__PURE__ */ new Set(["note"]);
+  }
+});
+
+// ../contracts/src/flow-compile-check.ts
+var init_flow_compile_check = __esm({
+  "../contracts/src/flow-compile-check.ts"() {
+    init_agents();
+    init_flow_compile();
+  }
+});
+var FlowIssueSeverity, FlowIssue;
+var init_flow_validate = __esm({
+  "../contracts/src/flow-validate.ts"() {
+    init_flow_ports();
+    init_flow_edges();
+    init_flow_compile_check();
+    init_flow_edges();
+    FlowIssueSeverity = z.enum(["error", "warning"]);
+    FlowIssue = z.object({
+      code: z.string().max(64),
+      severity: FlowIssueSeverity,
+      message: z.string().max(500),
+      nodeId: z.string().max(128).optional(),
+      edgeId: z.string().max(128).optional()
+    });
+    z.object({
+      valid: z.boolean(),
+      issues: z.array(FlowIssue).max(256)
+    });
+  }
+});
+
+// ../contracts/src/flow-builtins.ts
+var init_flow_builtins = __esm({
+  "../contracts/src/flow-builtins.ts"() {
+  }
+});
+var ComplianceRule, ComplianceDecision, ComplianceConfig;
+var init_compliance = __esm({
+  "../contracts/src/compliance.ts"() {
+    ComplianceRule = z.enum(["dnc", "consent", "quiet_hours", "frequency_cap"]);
+    ComplianceDecision = z.enum(["allowed", "blocked"]);
+    ComplianceConfig = z.object({
+      // Local calling window for the CALLED party — TCPA default 8am–9pm.
+      quietHoursStartHour: z.number().int().min(0).max(23).default(8),
+      quietHoursEndHour: z.number().int().min(1).max(24).default(21),
+      enforceDnc: z.boolean().default(true),
+      enforceQuietHours: z.boolean().default(true),
+      // Max dial attempts to one number per rolling 24h. 0 = unlimited.
+      maxAttemptsPerDay: z.number().int().min(0).default(0),
+      // Require a recorded consent flag before dialing.
+      requireConsent: z.boolean().default(false),
+      // Fallback IANA tz when the number's region can't be resolved.
+      fallbackTimeZone: z.string().min(1).default("America/New_York")
+    });
+    z.object({
+      phoneE164: z.string().regex(/^\+[1-9]\d{1,14}$/, "must be E.164"),
+      // ISO instant the check is evaluated at (defaults to now server-side).
+      now: z.string().datetime().optional(),
+      // Override the resolved timezone (else derived from the number's area code).
+      timeZone: z.string().optional(),
+      // Recent attempt count in the last 24h (for the frequency cap), if known.
+      recentAttempts: z.number().int().min(0).optional(),
+      // Whether consent is on file (for requireConsent).
+      hasConsent: z.boolean().optional()
+    });
+    z.object({
+      decision: ComplianceDecision,
+      // The first rule that blocked, if any.
+      rule: ComplianceRule.nullable(),
+      reason: z.string().nullable()
+    });
+    z.object({
+      id: z.string().uuid(),
+      projectId: z.string().min(1),
+      phoneE164: z.string(),
+      reason: z.string().nullable(),
+      source: z.string().nullable(),
+      createdAt: z.string().datetime()
     });
     z.object({
-      settings: TelephonySettings,
-      profile: EffectiveCallProfile
+      id: z.string().uuid(),
+      projectId: z.string().min(1),
+      phoneE164: z.string(),
+      decision: ComplianceDecision,
+      rule: ComplianceRule.nullable(),
+      reason: z.string().nullable(),
+      checkedAt: z.string().datetime()
+    });
+    z.object({
+      phoneE164: z.string().regex(/^\+[1-9]\d{1,14}$/, "must be E.164"),
+      reason: z.string().max(500).optional(),
+      source: z.string().max(120).optional()
     });
+    ComplianceConfig.partial();
   }
 });
-var SHORTENER_HOSTS, PLACEHOLDER_HOSTS, PublicUrl, A2pBusinessType, A2pBusinessInfo, A2pOptInType, A2pUseCase, A2pMessagingProfile, A2pState;
-var init_a2p = __esm({
-  "../contracts/src/a2p.ts"() {
-    SHORTENER_HOSTS = [
-      "bit.ly",
-      "tinyurl.com",
-      "t.co",
-      "goo.gl",
-      "ow.ly",
-      "is.gd",
-      "buff.ly",
-      "rebrand.ly",
-      "cutt.ly",
-      "shorturl.at",
-      "tiny.cc"
-    ];
-    PLACEHOLDER_HOSTS = ["acme.com", "example.com", "example.org", "test.com", "localhost"];
-    PublicUrl = z.string().url().refine((v) => v.startsWith("https://"), "must be https").refine((v) => {
-      try {
-        const host = new URL(v).hostname.toLowerCase().replace(/^www\./, "");
-        return !SHORTENER_HOSTS.includes(host);
-      } catch {
-        return false;
-      }
-    }, "public URL shorteners are rejected by carriers \u2014 use your own domain").refine((v) => {
-      try {
-        const host = new URL(v).hostname.toLowerCase().replace(/^www\./, "");
-        return !PLACEHOLDER_HOSTS.some((p) => host === p || host.endsWith(`.${p}`));
-      } catch {
-        return false;
-      }
-    }, "placeholder domain \u2014 reviewers will follow this link and reject the campaign");
-    A2pBusinessType = z.enum([
-      "Sole Proprietorship",
-      "Partnership",
-      "Corporation",
-      "Co-operative",
-      "Limited Liability Corporation",
-      "Non-profit Corporation"
-    ]);
-    A2pBusinessInfo = z.object({
-      legalName: z.string().trim().min(2).max(200),
-      /** EIN (US) or equivalent registration number. */
-      registrationNumber: z.string().trim().min(4).max(50),
-      businessType: A2pBusinessType,
-      /** Publicly reachable production site — not staging, not a 404. */
-      website: PublicUrl,
-      industry: z.string().trim().min(2).max(60),
-      address: z.object({
-        street: z.string().trim().min(2).max(200),
-        city: z.string().trim().min(1).max(100),
-        region: z.string().trim().min(1).max(100),
-        postalCode: z.string().trim().min(2).max(20),
-        isoCountry: z.string().trim().length(2)
-      }),
-      authorizedRep: z.object({
-        firstName: z.string().trim().min(1).max(100),
-        lastName: z.string().trim().min(1).max(100),
-        email: z.string().trim().email(),
-        phone: z.string().trim().regex(/^\+[1-9]\d{6,14}$/, "must be E.164"),
-        jobTitle: z.string().trim().min(2).max(100)
-      })
-    });
-    A2pOptInType = z.enum(["WEB_FORM", "PAPER_FORM", "VERBAL", "VIA_TEXT", "MOBILE_QR_CODE"]);
-    A2pUseCase = z.enum([
-      "MIXED",
-      "CUSTOMER_CARE",
-      "MARKETING",
-      "ACCOUNT_NOTIFICATION",
-      "2FA",
-      "DELIVERY_NOTIFICATION",
-      "HIGHER_EDUCATION",
-      "POLLING_VOTING",
-      "PUBLIC_SERVICE_ANNOUNCEMENT",
-      "LOW_VOLUME"
-    ]);
-    A2pMessagingProfile = z.object({
-      useCase: A2pUseCase,
-      /** Specific, not generic. "We send texts" gets rejected; describe the actual
-       *  messages and when they are sent. */
-      description: z.string().trim().min(40).max(4096),
-      /**
-       * The single most-rejected field. Must describe HOW people opt in, state the
-       * message frequency, include the "message and data rates may apply"
-       * disclosure, and link to publicly reachable evidence. Twilio's API bounds it
-       * to 40–2049 characters.
-       */
-      messageFlow: z.string().trim().min(40).max(2049),
-      optInType: A2pOptInType,
-      /** Publicly accessible screenshots/pages showing the opt-in. Reviewers open
-       *  these; anything behind a login fails. */
-      optInEvidenceUrls: z.array(PublicUrl).min(1).max(5),
-      /** Real messages the customer will send. Must reflect the declared use case
-       *  and carry opt-out language. */
-      messageSamples: z.array(z.string().trim().min(10).max(1024)).min(2).max(5),
-      privacyPolicyUrl: PublicUrl,
-      termsAndConditionsUrl: PublicUrl,
-      hasEmbeddedLinks: z.boolean().default(false),
-      hasEmbeddedPhone: z.boolean().default(false)
+
+// ../contracts/src/sms-keywords.ts
+var init_sms_keywords = __esm({
+  "../contracts/src/sms-keywords.ts"() {
+  }
+});
+var init_call_recording = __esm({
+  "../contracts/src/call-recording.ts"() {
+    z.object({
+      // When false, the call-event sink skips egress entirely — no recording is made.
+      recordingEnabled: z.boolean().default(true),
+      // Optional consent preamble the agent speaks first on every call. null/empty =
+      // no announcement. Capped so it stays a short notice, not a monologue.
+      consentAnnouncement: z.string().max(1e3).nullable().default(null)
     });
     z.object({
-      business: A2pBusinessInfo,
-      messaging: A2pMessagingProfile,
-      /** Register against Twilio's mock endpoints — exercises the full pipeline
-       *  with no fees and no real carrier submission. Used in CI and staging. */
-      mock: z.boolean().default(false)
-    }).superRefine((v, ctx) => {
-      const flow = v.messaging.messageFlow.toLowerCase();
-      if (!/(msg|message)\s*(&|and)\s*data rates/.test(flow)) {
-        ctx.addIssue({
-          code: z.ZodIssueCode.custom,
-          path: ["messaging", "messageFlow"],
-          message: 'must include a "Message and data rates may apply" disclosure \u2014 carriers reject without it'
-        });
-      }
-      if (!/\d/.test(flow) || !/(msg|message|text)/.test(flow)) {
-        ctx.addIssue({
-          code: z.ZodIssueCode.custom,
-          path: ["messaging", "messageFlow"],
-          message: 'must state message frequency, e.g. "Up to 4 msgs/month"'
-        });
-      }
-      const hasOptOut = v.messaging.messageSamples.some((s) => /stop/i.test(s));
-      if (!hasOptOut) {
-        ctx.addIssue({
-          code: z.ZodIssueCode.custom,
-          path: ["messaging", "messageSamples"],
-          message: 'at least one sample must include opt-out language (e.g. "Reply STOP to opt out")'
-        });
-      }
+      recordingEnabled: z.boolean().optional(),
+      consentAnnouncement: z.string().max(1e3).nullable().optional()
     });
-    A2pState = z.enum([
-      "none",
-      "profile_pending",
-      "profile_approved",
-      "profile_failed",
-      "brand_pending",
-      "brand_approved",
-      "brand_failed",
-      "campaign_pending",
-      "messaging_ready",
-      "campaign_failed"
-    ]);
+  }
+});
+var OutboundAmdMode;
+var init_outbound = __esm({
+  "../contracts/src/outbound.ts"() {
+    OutboundAmdMode = z.enum(["off", "detect", "detectMessageEnd"]);
     z.object({
-      state: A2pState,
-      customerProfileSid: z.string().nullable(),
-      trustProductSid: z.string().nullable(),
-      brandSid: z.string().nullable(),
-      messagingServiceSid: z.string().nullable(),
-      campaignSid: z.string().nullable(),
-      mock: z.boolean(),
-      /** Carrier/Twilio rejection details, surfaced verbatim so the customer can
-       *  fix the specific field rather than guess. */
-      failures: z.array(z.object({ code: z.number().nullable(), field: z.string().nullable(), message: z.string() })).default([]),
-      /** Plain-language next step for the dashboard. */
-      nextAction: z.string().nullable(),
-      updatedAt: z.string().nullable()
+      // Callee in E.164 (e.g. +14155551234). call-router re-validates strictly.
+      to: z.string().regex(/^\+[1-9]\d{6,14}$/, "must be E.164, e.g. +14155551234"),
+      // Caller-id phone number (must belong to the calling project).
+      phoneNumberId: z.string().min(1),
+      // Optional agent override; falls back to the number's bound agent.
+      agentId: z.string().min(1).optional(),
+      // Template/context variables forwarded to the agent as dispatch metadata.
+      variables: z.record(z.string(), z.string()).optional(),
+      // Per-call AMD override; takes precedence over the agent's stored outbound.amd.
+      amd: OutboundAmdMode.optional()
     });
   }
 });
-var ConnectorMode, ConnectorStatus, ConnectorNormalize;
-var init_connector = __esm({
-  "../contracts/src/connector.ts"() {
-    ConnectorMode = z.enum(["tunnel", "direct"]);
-    ConnectorStatus = z.enum(["online", "degraded", "offline"]);
-    ConnectorNormalize = z.enum(["auto", "on", "off"]);
+var ConnectionAuthType, ConnectionStatus;
+var init_connection = __esm({
+  "../contracts/src/connection.ts"() {
+    init_providers();
+    ConnectionAuthType = z.enum(["oauth2", "api_key", "bearer", "basic", "none"]);
+    ConnectionStatus = z.enum(["active", "revoked", "error"]);
+    z.object({
+      v: z.number().int(),
+      // Key id (short fingerprint) of the key that encrypted this envelope — lets the
+      // cipher pick the right key from its ring so CREDENTIAL_ENCRYPTION_KEY can rotate
+      // in-band (Tier-1 item 4). Optional/absent on legacy v1 envelopes, which decrypt
+      // with the designated legacy key.
+      kid: z.string().optional(),
+      iv: z.string(),
+      ct: z.string(),
+      tag: z.string()
+    });
     z.object({
       id: z.string().uuid(),
       projectId: z.string().min(1),
       name: z.string().min(1).max(128),
-      mode: ConnectorMode,
-      // Tunnel mode: a short non-secret preview of the daemon token. Null for direct.
-      tokenPreview: z.string().nullable(),
-      // Direct mode: the connections-vault row holding the URL + key. Null for tunnel.
-      connectionId: z.string().uuid().nullable(),
-      // Upstream model id / alias. Null → the brain's own default.
-      defaultModel: z.string().nullable(),
-      normalize: ConnectorNormalize,
-      enabled: z.boolean(),
-      status: ConnectorStatus,
-      lastSeenAt: z.string().datetime().nullable(),
+      // Open string — customers name providers freely (e.g. 'google_calendar',
+      // 'salesforce', 'n8n', 'http').
+      provider: z.string().min(1).max(120),
+      authType: ConnectionAuthType,
+      status: ConnectionStatus,
+      // Non-secret metadata (scopes, account label, base URL, …).
       metadata: z.record(z.unknown()),
+      expiresAt: z.string().datetime().nullable(),
       createdAt: z.string().datetime(),
       updatedAt: z.string().datetime()
     });
     z.object({
       name: z.string().trim().min(1).max(128),
-      mode: ConnectorMode,
-      // Required when mode === 'direct': the vault connection holding URL + key.
-      connectionId: z.string().uuid().optional(),
-      defaultModel: z.string().trim().min(1).max(200).optional(),
-      normalize: ConnectorNormalize.optional(),
-      metadata: z.record(z.unknown()).optional()
+      provider: z.string().trim().min(1).max(120),
+      authType: ConnectionAuthType,
+      // The secret material to encrypt at rest. Never stored or returned in plaintext.
+      secret: z.string().min(1).max(8192),
+      metadata: z.record(z.unknown()).optional(),
+      expiresAt: z.string().datetime().optional()
     });
     z.object({
       name: z.string().trim().min(1).max(128).optional(),
-      connectionId: z.string().uuid().nullable().optional(),
-      defaultModel: z.string().trim().min(1).max(200).nullable().optional(),
-      normalize: ConnectorNormalize.optional(),
-      enabled: z.boolean().optional()
-    });
-  }
-});
-var CONNECTOR_REQUEST_CHANNEL, CONNECTOR_REPLY_CHANNEL, BrainWireMessage, HelloFrame, PongFrame, RegisteredFrame, PingFrame, ShutdownFrame, BrainRequestFrame, BrainCancelFrame, BrainDeltaFrame, BrainDoneFrame, BrainErrorFrame, ConnectorUpFrame;
-var init_connector_stream = __esm({
-  "../contracts/src/connector-stream.ts"() {
-    CONNECTOR_REQUEST_CHANNEL = (connectorId) => `brain-req:${connectorId}`;
-    CONNECTOR_REPLY_CHANNEL = (streamId) => `brain-reply:${streamId}`;
-    BrainWireMessage = z.object({
-      role: z.enum(["system", "user", "assistant"]),
-      content: z.string()
-    });
-    HelloFrame = z.object({
-      kind: z.literal("hello"),
-      token: z.string().min(1),
-      replicaId: z.string().min(1),
-      version: z.string().min(1),
-      caps: z.object({ streaming: z.boolean(), tools: z.boolean(), litellm: z.boolean() })
-    });
-    PongFrame = z.object({ kind: z.literal("pong"), ts: z.number().int() });
-    RegisteredFrame = z.object({
-      kind: z.literal("registered"),
-      connectorId: z.string().uuid(),
-      projectId: z.string().min(1)
-    });
-    PingFrame = z.object({ kind: z.literal("ping"), ts: z.number().int() });
-    ShutdownFrame = z.object({ kind: z.literal("shutdown"), reason: z.string().optional() });
-    BrainRequestFrame = z.object({
-      kind: z.literal("brain.request"),
-      streamId: z.string().min(1),
-      model: z.string().optional(),
-      temperature: z.number().optional(),
-      messages: z.array(BrainWireMessage)
+      // New secret material — re-encrypted at rest; the old envelope is replaced.
+      secret: z.string().min(1).max(8192).optional(),
+      // Merged over the existing metadata (top-level keys win).
+      metadata: z.record(z.unknown()).optional()
+    }).refine((v) => v.name !== void 0 || v.secret !== void 0 || v.metadata !== void 0, {
+      message: "nothing to update"
     });
-    BrainCancelFrame = z.object({
-      kind: z.literal("brain.cancel"),
-      streamId: z.string().min(1)
+    byokProviders().map((p) => ({
+      id: p.id,
+      label: p.label,
+      keyPlaceholder: p.keyPlaceholder ?? "",
+      supportsBaseUrl: p.supportsBaseUrl
+    }));
+    z.object({
+      id: z.string().min(1),
+      label: z.string().min(1),
+      /** The vault `provider` the resulting connection is stored under. */
+      vaultProvider: z.string().min(1),
+      category: z.enum(["model", "tool"])
     });
-    BrainDeltaFrame = z.object({
-      kind: z.literal("brain.delta"),
-      streamId: z.string().min(1),
-      content: z.string()
+    z.object({
+      authorizeUrl: z.string().url()
     });
-    BrainDoneFrame = z.object({
-      kind: z.literal("brain.done"),
-      streamId: z.string().min(1),
-      finishReason: z.string()
+    z.object({
+      state: z.string().min(1).max(512),
+      code: z.string().min(1).max(4096)
     });
-    BrainErrorFrame = z.object({
-      kind: z.literal("brain.error"),
-      streamId: z.string().min(1),
-      code: z.enum([
-        "upstream_timeout",
-        "upstream_error",
-        "bad_response",
-        "normalize_failed",
-        "unreachable"
-      ]),
-      message: z.string()
+    z.object({
+      providerId: z.string().min(1),
+      /** The provider's display name ("ChatGPT"). */
+      providerLabel: z.string().min(1),
+      /** What the connection is for — which group the dashboard files it under. */
+      category: z.enum(["model", "tool"]),
+      /** The account's stable id at the provider (OIDC `sub`); reconnecting the same account updates the same row. */
+      subject: z.string().min(1).nullable(),
+      email: z.string().nullable(),
+      displayName: z.string().nullable(),
+      scopes: z.array(z.string()),
+      /**
+       * The workspace user who signed in. A person's model plan (category 'model') serves only them — never teammates or
+       * API keys. Absent on rows connected before it was recorded.
+       */
+      connectedBy: z.string().nullable().optional(),
+      /** Set when a refresh was refused (e.g. `invalid_grant`): the owner must connect again. */
+      reauthRequired: z.boolean().optional()
     });
-    ConnectorUpFrame = z.discriminatedUnion("kind", [
-      HelloFrame,
-      PongFrame,
-      BrainDeltaFrame,
-      BrainDoneFrame,
-      BrainErrorFrame
-    ]);
-    z.discriminatedUnion("kind", [
-      RegisteredFrame,
-      PingFrame,
-      ShutdownFrame,
-      BrainRequestFrame,
-      BrainCancelFrame
-    ]);
-  }
-});
-
-// ../contracts/src/flow-enrichment.ts
-function planEnrichment(graph) {
-  const ids = graph.nodes.map((n) => n.id);
-  const indeg = new Map(ids.map((id) => [id, 0]));
-  const adj = new Map(ids.map((id) => [id, []]));
-  for (const edge of graph.edges) {
-    if (!adj.has(edge.source) || !indeg.has(edge.target)) continue;
-    adj.get(edge.source).push(edge.target);
-    indeg.set(edge.target, (indeg.get(edge.target) ?? 0) + 1);
-  }
-  const queue = ids.filter((id) => (indeg.get(id) ?? 0) === 0);
-  const order = [];
-  while (queue.length > 0) {
-    const id = queue.shift();
-    order.push(id);
-    for (const next of adj.get(id) ?? []) {
-      const left = (indeg.get(next) ?? 0) - 1;
-      indeg.set(next, left);
-      if (left === 0) queue.push(next);
-    }
-  }
-  return { order, acyclic: order.length === ids.length };
-}
-var init_flow_enrichment = __esm({
-  "../contracts/src/flow-enrichment.ts"() {
   }
 });
-
-// ../contracts/src/flow-compile.ts
-function compileConversationFlow(graph, id = "flow") {
-  const fields = [];
-  const prompts = [];
-  const triggers = [];
-  let gateRequired = null;
-  for (const node of graph.nodes) {
-    const data = node.data;
-    switch (node.type) {
-      case "ask": {
-        const name = typeof data.slot === "string" ? data.slot : node.id;
-        const required = data.required !== false;
-        fields.push({
-          name,
-          required,
-          ...typeof data.ask === "string" ? { prompt: data.ask } : {}
-        });
-        break;
-      }
-      case "say":
-      case "confirm": {
-        if (typeof data.text === "string") prompts.push({ id: node.id, text: data.text });
-        break;
-      }
-      case "trigger": {
-        const on = typeof data.on === "string" ? data.on : "";
-        const then = typeof data.then === "string" ? data.then : "handoff";
-        if (on) triggers.push({ on, then });
-        break;
-      }
-      case "gate": {
-        if (Array.isArray(data.requiredFields)) {
-          gateRequired = data.requiredFields.filter((x) => typeof x === "string");
-        }
-        break;
-      }
-    }
-  }
-  const requiredFields = gateRequired ?? fields.filter((f) => f.required).map((f) => f.name);
-  return { id, fields, completionGate: { requiredFields }, triggers, prompts };
-}
-function asFieldType(value) {
-  return typeof value === "string" && FIELD_TYPES.includes(value) ? value : "string";
-}
-function asHistoryPolicy(value) {
-  return typeof value === "string" && HISTORY_POLICIES.has(value) ? value : "full";
-}
-function asAdherence(value) {
-  return typeof value === "string" && ADHERENCE_MODES.has(value) ? value : "off";
-}
-function branchesFor(data) {
-  return Array.isArray(data.branches) ? data.branches.filter((b) => b && typeof b.id === "string" && typeof b.label === "string").map((b) => ({
-    id: b.id,
-    label: b.label,
-    ...typeof b.when === "string" && b.when.trim() ? { when: b.when } : {},
-    ...typeof b.digit === "string" && b.digit.trim() ? { digit: b.digit.trim() } : {},
-    ...typeof b.description === "string" && b.description.trim() ? { description: b.description } : {}
-  })) : [];
-}
-function nodeConfigFor(node) {
-  const data = node.data;
-  switch (node.type) {
-    case "start":
-      return {};
-    case "say":
-    case "confirm":
-      return { text: typeof data.text === "string" ? data.text : "" };
-    case "ask":
-      return {
-        slot: typeof data.slot === "string" ? data.slot : node.id,
-        required: data.required !== false,
-        type: asFieldType(data.type),
-        historyPolicy: asHistoryPolicy(data.historyPolicy),
-        ...typeof data.ask === "string" ? { ask: data.ask } : {},
-        ...typeof data.pattern === "string" ? { pattern: data.pattern } : {},
-        ...typeof data.min === "number" ? { min: data.min } : {},
-        ...typeof data.max === "number" ? { max: data.max } : {},
-        ...Array.isArray(data.enum) ? { enum: data.enum.filter((x) => typeof x === "string") } : {}
-      };
-    case "llm":
-      return {
-        instructions: typeof data.instructions === "string" ? data.instructions : typeof data.text === "string" ? data.text : "",
-        // Chat-hub valve: a resident conversational node (entry/return point)
-        // that routes to task subgraphs on its conditional edges and absorbs
-        // off-script turns in place instead of dead-ending. See the interpreter.
-        hub: data.hub === true,
-        historyPolicy: asHistoryPolicy(data.historyPolicy),
-        // Drift-gate (supervisor-lite): verify the reply still localizes to this
-        // node. enforce → reject-and-regenerate, then speak `fallback` verbatim.
-        adherence: asAdherence(data.adherence),
-        ...typeof data.fallback === "string" ? { fallback: data.fallback } : {}
-      };
-    case "tool": {
-      const url = typeof data.url === "string" ? data.url : "";
-      const rawName = typeof data.name === "string" ? data.name : "";
-      const name = /^[a-z][a-z0-9_]*$/.test(rawName) ? rawName : `tool_${node.id.replace(/[^a-z0-9]/gi, "").slice(0, 16).toLowerCase() || "fn"}`;
-      const input = {};
-      if (data.input && typeof data.input === "object") {
-        for (const [key, val] of Object.entries(data.input)) {
-          if (val === "string" || val === "number" || val === "boolean") input[key] = val;
-        }
+var E164, RoomPrefix, RecordingPrefix, Cidr, TelephonySettings, ProfileSource, EffectiveCallProfile;
+var init_telephony = __esm({
+  "../contracts/src/telephony.ts"() {
+    E164 = z.string().regex(/^\+[1-9]\d{6,14}$/, "must be E.164 (+15551234567)");
+    RoomPrefix = z.string().regex(/^[a-z0-9][a-z0-9-]{0,30}[a-z0-9-]?$/, "lowercase letters, digits, dashes; max 32");
+    RecordingPrefix = z.string().min(1).max(128).refine((v) => !v.startsWith("/") && !v.includes(".."), "relative key prefix only");
+    Cidr = z.string().regex(/^\d{1,3}(\.\d{1,3}){3}\/\d{1,2}$/, "must be IPv4 CIDR (a.b.c.d/nn)");
+    TelephonySettings = z.object({
+      outboundTrunkId: z.string().min(1).max(128).nullable().default(null),
+      defaultFromE164: E164.nullable().default(null),
+      roomPrefix: RoomPrefix.nullable().default(null),
+      sipAllowedCidrs: z.array(Cidr).max(32).nullable().default(null),
+      recordingPrefix: RecordingPrefix.nullable().default(null),
+      strictByok: z.boolean().default(false)
+    });
+    z.object({
+      outboundTrunkId: z.string().min(1).max(128).nullable().optional(),
+      defaultFromE164: E164.nullable().optional(),
+      roomPrefix: RoomPrefix.nullable().optional(),
+      sipAllowedCidrs: z.array(Cidr).max(32).nullable().optional(),
+      recordingPrefix: RecordingPrefix.nullable().optional(),
+      strictByok: z.boolean().optional()
+    }).refine((v) => Object.keys(v).length > 0, { message: "nothing to update" });
+    ProfileSource = z.enum(["org", "platform", "none"]);
+    EffectiveCallProfile = z.object({
+      projectId: z.string(),
+      outboundTrunkId: z.string().nullable(),
+      defaultFromE164: z.string().nullable(),
+      roomPrefix: z.string(),
+      sipAllowedCidrs: z.array(z.string()),
+      recordingPrefix: z.string(),
+      strictByok: z.boolean(),
+      sources: z.object({
+        outboundTrunkId: ProfileSource,
+        defaultFromE164: ProfileSource,
+        roomPrefix: ProfileSource,
+        sipAllowedCidrs: ProfileSource,
+        recordingPrefix: ProfileSource
+      })
+    });
+    z.object({
+      settings: TelephonySettings,
+      profile: EffectiveCallProfile
+    });
+  }
+});
+var SHORTENER_HOSTS, PLACEHOLDER_HOSTS, PublicUrl, A2pBusinessType, A2pBusinessInfo, A2pOptInType, A2pUseCase, A2pMessagingProfile, A2pState;
+var init_a2p = __esm({
+  "../contracts/src/a2p.ts"() {
+    SHORTENER_HOSTS = [
+      "bit.ly",
+      "tinyurl.com",
+      "t.co",
+      "goo.gl",
+      "ow.ly",
+      "is.gd",
+      "buff.ly",
+      "rebrand.ly",
+      "cutt.ly",
+      "shorturl.at",
+      "tiny.cc"
+    ];
+    PLACEHOLDER_HOSTS = ["acme.com", "example.com", "example.org", "test.com", "localhost"];
+    PublicUrl = z.string().url().refine((v) => v.startsWith("https://"), "must be https").refine((v) => {
+      try {
+        const host = new URL(v).hostname.toLowerCase().replace(/^www\./, "");
+        return !SHORTENER_HOSTS.includes(host);
+      } catch {
+        return false;
       }
-      const headers = {};
-      if (data.headers && typeof data.headers === "object") {
-        for (const [key, val] of Object.entries(data.headers)) {
-          if (typeof val === "string") headers[key] = val;
-        }
+    }, "public URL shorteners are rejected by carriers \u2014 use your own domain").refine((v) => {
+      try {
+        const host = new URL(v).hostname.toLowerCase().replace(/^www\./, "");
+        return !PLACEHOLDER_HOSTS.some((p) => host === p || host.endsWith(`.${p}`));
+      } catch {
+        return false;
       }
-      return {
-        name,
-        description: typeof data.description === "string" && data.description ? data.description : name,
-        input,
-        url,
-        method: HTTP_METHODS.has(data.method) ? data.method : "POST",
-        ...Object.keys(headers).length ? { headers } : {},
-        auth: data.auth === "connection" ? "connection" : "none",
-        ...typeof data.connectionRef === "string" ? { connectionRef: data.connectionRef } : {},
-        // Registry reference: run the project HTTP tool with this NAME via the
-        // server-side proxy instead of the inline url/method/auth above.
-        ...typeof data.toolRef === "string" && data.toolRef ? { toolRef: data.toolRef } : {},
-        // Promote result fields into NAMED slots on success:
-        // { slotName: "data.path" }. Later nodes then read {{ slotName }}
-        // directly instead of {{ tool.<nodeId>.data.path }} via a set node.
-        ...(() => {
-          if (!data.outputAs || typeof data.outputAs !== "object") return {};
-          const outputAs = {};
-          for (const [slot, path] of Object.entries(data.outputAs)) {
-            if (typeof path === "string" && path.trim() && /^[a-zA-Z_][\w.]*$/.test(slot)) {
-              outputAs[slot] = path.trim();
-            }
-          }
-          return Object.keys(outputAs).length ? { outputAs } : {};
-        })()
-      };
-    }
-    case "gate":
-      return {
-        requiredFields: Array.isArray(data.requiredFields) ? data.requiredFields.filter((x) => typeof x === "string") : []
-      };
-    case "handoff":
-      return {
-        ...typeof data.to === "string" ? { to: data.to } : {},
-        ...typeof data.fallback === "string" ? { fallback: data.fallback } : {},
-        ...typeof data.on === "string" ? { on: data.on } : {},
-        // Per-node warm (conference brief) / cold (blind REFER) override.
-        ...data.mode === "warm" || data.mode === "cold" ? { mode: data.mode } : {},
-        // What the joining human HEARS (warm mode speaks it verbatim once they
-        // answer). {{ }}-interpolated at runtime against the slot scope.
-        ...typeof data.briefing === "string" && data.briefing.trim() ? { briefing: data.briefing } : {}
-      };
-    case "end":
-      return {
-        ...typeof data.on === "string" ? { on: data.on } : {},
-        ...typeof data.voicemail === "boolean" ? { voicemail: data.voicemail } : {},
-        // Optional closing line spoken before hang-up (interpolated at runtime).
-        ...typeof data.endMessage === "string" ? { endMessage: data.endMessage } : {}
-      };
-    case "trigger":
-      return {
-        on: typeof data.on === "string" ? data.on : "",
-        then: typeof data.then === "string" ? data.then : "handoff",
-        ...typeof data.onlyWhile === "string" ? { onlyWhile: data.onlyWhile } : {}
-      };
-    case "decision":
-      return {
-        ...typeof data.condition === "string" ? { condition: data.condition } : {},
-        branches: branchesFor(data)
-      };
-    case "playbook":
-      return {
-        ...typeof data.goal === "string" ? { goal: data.goal } : {},
-        ...typeof data.instructions === "string" ? { instructions: data.instructions } : {},
-        // Optional reference to a reusable library playbook. playbookId is the
-        // rename-safe key (pinned at deploy); playbookRef (name) remains for
-        // display + legacy live resolution.
-        ...typeof data.playbookRef === "string" ? { playbookRef: data.playbookRef } : {},
-        ...typeof data.playbookId === "string" && data.playbookId ? { playbookId: data.playbookId } : {},
-        requiredFields: Array.isArray(data.requiredFields) ? data.requiredFields.filter((x) => typeof x === "string") : [],
-        // Agent loop: scoped registry-tool names + explicit opt-in + model knobs.
-        // With tools (or agentLoop:true) the runtime swaps the plain conversational
-        // turn for the LLM-with-tools runner and the structured exit tool.
-        ...Array.isArray(data.tools) ? { tools: data.tools.filter((x) => typeof x === "string" && x.length > 0) } : {},
-        ...data.agentLoop === true ? { agentLoop: true } : {},
-        ...typeof data.model === "string" && data.model ? { model: data.model } : {},
-        ...typeof data.temperature === "number" ? { temperature: data.temperature } : {},
-        // Spoken close when the turn budget exhausts with required fields missing
-        // and no `incomplete` port is wired (the gate never silently advances).
-        ...typeof data.incompleteMessage === "string" && data.incompleteMessage ? { incompleteMessage: data.incompleteMessage } : {},
-        // Turn policy: agent-generated speech is interruptible by default;
-        // false locks it (verbatim lines are always locked regardless).
-        ...data.interruptible === false ? { interruptible: false } : {},
-        branches: branchesFor(data)
-      };
-    case "menu":
-      return {
-        ...typeof data.prompt === "string" ? { prompt: data.prompt } : {},
-        branches: branchesFor(data)
-      };
-    case "classify":
-      return {
-        ...typeof data.instructions === "string" ? { instructions: data.instructions } : {},
-        branches: branchesFor(data)
-      };
-    case "router":
-      return {
-        hub: true,
-        ...typeof data.instructions === "string" ? { instructions: data.instructions } : {},
-        branches: Array.isArray(data.branches) ? data.branches.filter((b) => b && typeof b.id === "string" && typeof b.label === "string").map((b) => ({
-          id: b.id,
-          label: b.label,
-          ...typeof b.description === "string" && b.description.trim() ? { description: b.description } : {}
-        })) : []
-      };
-    case "rag":
-      return {
-        ...typeof data.query === "string" ? { query: data.query } : {},
-        ...typeof data.topK === "number" ? { topK: data.topK } : {}
-      };
-    case "code":
-      return {
-        ...typeof data.expression === "string" ? { expression: data.expression } : {},
-        ...typeof data.description === "string" ? { description: data.description } : {}
-      };
-    case "set":
-      return {
-        assignments: Array.isArray(data.assignments) ? data.assignments.filter((a) => a && typeof a.name === "string" && a.name.trim() !== "").map((a) => ({
-          name: a.name,
-          value: typeof a.value === "string" ? a.value : ""
-        })) : []
-      };
-    case "subflow":
-      return {
-        ...typeof data.flowRef === "string" ? { flowRef: data.flowRef } : {}
-      };
-    default:
-      return typeof data.label === "string" ? { label: data.label } : {};
+    }, "placeholder domain \u2014 reviewers will follow this link and reject the campaign");
+    A2pBusinessType = z.enum([
+      "Sole Proprietorship",
+      "Partnership",
+      "Corporation",
+      "Co-operative",
+      "Limited Liability Corporation",
+      "Non-profit Corporation"
+    ]);
+    A2pBusinessInfo = z.object({
+      legalName: z.string().trim().min(2).max(200),
+      /** EIN (US) or equivalent registration number. */
+      registrationNumber: z.string().trim().min(4).max(50),
+      businessType: A2pBusinessType,
+      /** Publicly reachable production site — not staging, not a 404. */
+      website: PublicUrl,
+      industry: z.string().trim().min(2).max(60),
+      address: z.object({
+        street: z.string().trim().min(2).max(200),
+        city: z.string().trim().min(1).max(100),
+        region: z.string().trim().min(1).max(100),
+        postalCode: z.string().trim().min(2).max(20),
+        isoCountry: z.string().trim().length(2)
+      }),
+      authorizedRep: z.object({
+        firstName: z.string().trim().min(1).max(100),
+        lastName: z.string().trim().min(1).max(100),
+        email: z.string().trim().email(),
+        phone: z.string().trim().regex(/^\+[1-9]\d{6,14}$/, "must be E.164"),
+        jobTitle: z.string().trim().min(2).max(100)
+      })
+    });
+    A2pOptInType = z.enum(["WEB_FORM", "PAPER_FORM", "VERBAL", "VIA_TEXT", "MOBILE_QR_CODE"]);
+    A2pUseCase = z.enum([
+      "MIXED",
+      "CUSTOMER_CARE",
+      "MARKETING",
+      "ACCOUNT_NOTIFICATION",
+      "2FA",
+      "DELIVERY_NOTIFICATION",
+      "HIGHER_EDUCATION",
+      "POLLING_VOTING",
+      "PUBLIC_SERVICE_ANNOUNCEMENT",
+      "LOW_VOLUME"
+    ]);
+    A2pMessagingProfile = z.object({
+      useCase: A2pUseCase,
+      /** Specific, not generic. "We send texts" gets rejected; describe the actual
+       *  messages and when they are sent. */
+      description: z.string().trim().min(40).max(4096),
+      /**
+       * The single most-rejected field. Must describe HOW people opt in, state the
+       * message frequency, include the "message and data rates may apply"
+       * disclosure, and link to publicly reachable evidence. Twilio's API bounds it
+       * to 40–2049 characters.
+       */
+      messageFlow: z.string().trim().min(40).max(2049),
+      optInType: A2pOptInType,
+      /** Publicly accessible screenshots/pages showing the opt-in. Reviewers open
+       *  these; anything behind a login fails. */
+      optInEvidenceUrls: z.array(PublicUrl).min(1).max(5),
+      /** Real messages the customer will send. Must reflect the declared use case
+       *  and carry opt-out language. */
+      messageSamples: z.array(z.string().trim().min(10).max(1024)).min(2).max(5),
+      privacyPolicyUrl: PublicUrl,
+      termsAndConditionsUrl: PublicUrl,
+      hasEmbeddedLinks: z.boolean().default(false),
+      hasEmbeddedPhone: z.boolean().default(false)
+    });
+    z.object({
+      business: A2pBusinessInfo,
+      messaging: A2pMessagingProfile,
+      /** Register against Twilio's mock endpoints — exercises the full pipeline
+       *  with no fees and no real carrier submission. Used in CI and staging. */
+      mock: z.boolean().default(false)
+    }).superRefine((v, ctx) => {
+      const flow = v.messaging.messageFlow.toLowerCase();
+      if (!/(msg|message)\s*(&|and)\s*data rates/.test(flow)) {
+        ctx.addIssue({
+          code: z.ZodIssueCode.custom,
+          path: ["messaging", "messageFlow"],
+          message: 'must include a "Message and data rates may apply" disclosure \u2014 carriers reject without it'
+        });
+      }
+      if (!/\d/.test(flow) || !/(msg|message|text)/.test(flow)) {
+        ctx.addIssue({
+          code: z.ZodIssueCode.custom,
+          path: ["messaging", "messageFlow"],
+          message: 'must state message frequency, e.g. "Up to 4 msgs/month"'
+        });
+      }
+      const hasOptOut = v.messaging.messageSamples.some((s) => /stop/i.test(s));
+      if (!hasOptOut) {
+        ctx.addIssue({
+          code: z.ZodIssueCode.custom,
+          path: ["messaging", "messageSamples"],
+          message: 'at least one sample must include opt-out language (e.g. "Reply STOP to opt out")'
+        });
+      }
+    });
+    A2pState = z.enum([
+      "none",
+      "profile_pending",
+      "profile_approved",
+      "profile_failed",
+      "brand_pending",
+      "brand_approved",
+      "brand_failed",
+      "campaign_pending",
+      "messaging_ready",
+      "campaign_failed"
+    ]);
+    z.object({
+      state: A2pState,
+      customerProfileSid: z.string().nullable(),
+      trustProductSid: z.string().nullable(),
+      brandSid: z.string().nullable(),
+      messagingServiceSid: z.string().nullable(),
+      campaignSid: z.string().nullable(),
+      mock: z.boolean(),
+      /** Carrier/Twilio rejection details, surfaced verbatim so the customer can
+       *  fix the specific field rather than guess. */
+      failures: z.array(z.object({ code: z.number().nullable(), field: z.string().nullable(), message: z.string() })).default([]),
+      /** Plain-language next step for the dashboard. */
+      nextAction: z.string().nullable(),
+      updatedAt: z.string().nullable()
+    });
   }
-}
-function compileFlowToProgram(graph, id = "flow") {
-  const stepNodes = graph.nodes.filter(
-    (n) => !CAPABILITY_NODE_TYPES.has(n.type) && !ANNOTATION_NODE_TYPES.has(n.type)
-  );
-  const byId = new Map(stepNodes.map((n) => [n.id, n]));
-  const indeg = new Map(stepNodes.map((n) => [n.id, 0]));
-  const outBySource = /* @__PURE__ */ new Map();
-  const droppedEdges = [];
-  const labelOnlyEdges = [];
-  for (const edge of graph.edges) {
-    const source = byId.get(edge.source);
-    if (!source || !byId.has(edge.target)) {
-      droppedEdges.push(edge.id);
-      continue;
-    }
-    if (isLabelOnlyEdge(edge, source.type)) labelOnlyEdges.push(edge.id);
-    const list = outBySource.get(edge.source) ?? [];
-    list.push({
-      to: edge.target,
-      ...edge.condition ? { condition: edge.condition } : {},
-      ...edge.sourceHandle ? { sourceHandle: edge.sourceHandle } : {},
-      ...edge.label ? { label: edge.label } : {}
+});
+var ConnectorMode, ConnectorStatus, ConnectorNormalize;
+var init_connector = __esm({
+  "../contracts/src/connector.ts"() {
+    ConnectorMode = z.enum(["tunnel", "direct"]);
+    ConnectorStatus = z.enum(["online", "degraded", "offline"]);
+    ConnectorNormalize = z.enum(["auto", "on", "off"]);
+    z.object({
+      id: z.string().uuid(),
+      projectId: z.string().min(1),
+      name: z.string().min(1).max(128),
+      mode: ConnectorMode,
+      // Tunnel mode: a short non-secret preview of the daemon token. Null for direct.
+      tokenPreview: z.string().nullable(),
+      // Direct mode: the connections-vault row holding the URL + key. Null for tunnel.
+      connectionId: z.string().uuid().nullable(),
+      // Upstream model id / alias. Null → the brain's own default.
+      defaultModel: z.string().nullable(),
+      normalize: ConnectorNormalize,
+      enabled: z.boolean(),
+      status: ConnectorStatus,
+      lastSeenAt: z.string().datetime().nullable(),
+      metadata: z.record(z.unknown()),
+      createdAt: z.string().datetime(),
+      updatedAt: z.string().datetime()
+    });
+    z.object({
+      name: z.string().trim().min(1).max(128),
+      mode: ConnectorMode,
+      // Required when mode === 'direct': the vault connection holding URL + key.
+      connectionId: z.string().uuid().optional(),
+      defaultModel: z.string().trim().min(1).max(200).optional(),
+      normalize: ConnectorNormalize.optional(),
+      metadata: z.record(z.unknown()).optional()
+    });
+    z.object({
+      name: z.string().trim().min(1).max(128).optional(),
+      connectionId: z.string().uuid().nullable().optional(),
+      defaultModel: z.string().trim().min(1).max(200).nullable().optional(),
+      normalize: ConnectorNormalize.optional(),
+      enabled: z.boolean().optional()
     });
-    outBySource.set(edge.source, list);
-    indeg.set(edge.target, (indeg.get(edge.target) ?? 0) + 1);
   }
-  const nodes = {};
-  const unsupportedNodes = [];
-  for (const node of stepNodes) {
-    nodes[node.id] = {
-      id: node.id,
-      type: node.type,
-      config: nodeConfigFor(node),
-      // Defensive: the FlowProgram schema caps out[] at 64 — slice rather than
-      // letting an over-wired node fail the read-side parse (which silently
-      // degrades the whole call to the generic base prompt).
-      out: (outBySource.get(node.id) ?? []).slice(0, 64)
-    };
-    if (UNSUPPORTED_NODE_TYPES.has(node.type)) unsupportedNodes.push(node.id);
+});
+var CONNECTOR_REQUEST_CHANNEL, CONNECTOR_REPLY_CHANNEL, BrainWireMessage, HelloFrame, PongFrame, RegisteredFrame, PingFrame, ShutdownFrame, BrainRequestFrame, BrainCancelFrame, BrainDeltaFrame, BrainDoneFrame, BrainErrorFrame, ConnectorUpFrame;
+var init_connector_stream = __esm({
+  "../contracts/src/connector-stream.ts"() {
+    CONNECTOR_REQUEST_CHANNEL = (connectorId) => `brain-req:${connectorId}`;
+    CONNECTOR_REPLY_CHANNEL = (streamId) => `brain-reply:${streamId}`;
+    BrainWireMessage = z.object({
+      role: z.enum(["system", "user", "assistant"]),
+      content: z.string()
+    });
+    HelloFrame = z.object({
+      kind: z.literal("hello"),
+      token: z.string().min(1),
+      replicaId: z.string().min(1),
+      version: z.string().min(1),
+      caps: z.object({ streaming: z.boolean(), tools: z.boolean(), litellm: z.boolean() })
+    });
+    PongFrame = z.object({ kind: z.literal("pong"), ts: z.number().int() });
+    RegisteredFrame = z.object({
+      kind: z.literal("registered"),
+      connectorId: z.string().uuid(),
+      projectId: z.string().min(1)
+    });
+    PingFrame = z.object({ kind: z.literal("ping"), ts: z.number().int() });
+    ShutdownFrame = z.object({ kind: z.literal("shutdown"), reason: z.string().optional() });
+    BrainRequestFrame = z.object({
+      kind: z.literal("brain.request"),
+      streamId: z.string().min(1),
+      model: z.string().optional(),
+      temperature: z.number().optional(),
+      messages: z.array(BrainWireMessage)
+    });
+    BrainCancelFrame = z.object({
+      kind: z.literal("brain.cancel"),
+      streamId: z.string().min(1)
+    });
+    BrainDeltaFrame = z.object({
+      kind: z.literal("brain.delta"),
+      streamId: z.string().min(1),
+      content: z.string()
+    });
+    BrainDoneFrame = z.object({
+      kind: z.literal("brain.done"),
+      streamId: z.string().min(1),
+      finishReason: z.string()
+    });
+    BrainErrorFrame = z.object({
+      kind: z.literal("brain.error"),
+      streamId: z.string().min(1),
+      code: z.enum([
+        "upstream_timeout",
+        "upstream_error",
+        "bad_response",
+        "normalize_failed",
+        "unreachable"
+      ]),
+      message: z.string()
+    });
+    ConnectorUpFrame = z.discriminatedUnion("kind", [
+      HelloFrame,
+      PongFrame,
+      BrainDeltaFrame,
+      BrainDoneFrame,
+      BrainErrorFrame
+    ]);
+    z.discriminatedUnion("kind", [
+      RegisteredFrame,
+      PingFrame,
+      ShutdownFrame,
+      BrainRequestFrame,
+      BrainCancelFrame
+    ]);
   }
-  const startNodes = stepNodes.filter((n) => n.type === "start").map((n) => n.id);
-  let entry2 = startNodes.length ? startNodes : stepNodes.filter((n) => (indeg.get(n.id) ?? 0) === 0).map((n) => n.id);
-  if (entry2.length === 0 && stepNodes.length > 0) entry2 = [stepNodes[0].id];
-  const { acyclic } = planEnrichment(graph);
-  const { completionGate } = compileConversationFlow(graph, id);
-  return {
-    v: 1,
-    id: id.slice(0, 64),
-    entry: entry2.slice(0, 64),
-    nodes,
-    completionGate: { requiredFields: completionGate.requiredFields.slice(0, 64) },
-    // Diagnostics arrays are schema-capped at 256 — slice so a pathological
-    // graph can't fail the read-side parse.
-    diagnostics: {
-      acyclic,
-      droppedEdges: droppedEdges.slice(0, 256),
-      unsupportedNodes: unsupportedNodes.slice(0, 256),
-      labelOnlyEdges: labelOnlyEdges.slice(0, 256)
-    }
-  };
-}
-var FIELD_TYPES, HTTP_METHODS, HISTORY_POLICIES, ADHERENCE_MODES, UNSUPPORTED_NODE_TYPES, CAPABILITY_NODE_TYPES, ANNOTATION_NODE_TYPES;
-var init_flow_compile = __esm({
-  "../contracts/src/flow-compile.ts"() {
-    init_flow_enrichment();
-    init_flow_validate();
-    FIELD_TYPES = [
-      "string",
-      "string[]",
-      "number",
-      "boolean",
-      "datetime",
-      "email",
-      "phone"
-    ];
-    HTTP_METHODS = /* @__PURE__ */ new Set(["GET", "POST", "PUT", "PATCH", "DELETE"]);
-    HISTORY_POLICIES = /* @__PURE__ */ new Set(["full", "last-turn", "slots-only"]);
-    ADHERENCE_MODES = /* @__PURE__ */ new Set(["off", "observe", "enforce"]);
-    UNSUPPORTED_NODE_TYPES = /* @__PURE__ */ new Set([]);
-    CAPABILITY_NODE_TYPES = /* @__PURE__ */ new Set(["memory", "trigger", "speech"]);
-    ANNOTATION_NODE_TYPES = /* @__PURE__ */ new Set(["note"]);
+});
+var FLOW_BOOT_FAILURES;
+var init_call_end_reason = __esm({
+  "../contracts/src/call-end-reason.ts"() {
+    FLOW_BOOT_FAILURES = ["schema_fetch_failed", "no_process_schema", "missing_agent_id", "no_api_key"];
+    z.enum(
+      FLOW_BOOT_FAILURES.map((cause) => `flow_boot:${cause}`)
+    );
   }
 });
 var EnvironmentSpec;
@@ -3972,6 +4034,8 @@ var init_src = __esm({
     init_connector();
     init_connector_stream();
     init_flow_compile();
+    init_flow_compile_check();
+    init_call_end_reason();
     init_flow_enrichment();
     init_environments();
     init_variables();
@@ -9823,7 +9887,8 @@ var CallsClient = class {
         body: {
           ...input.attributes !== void 0 ? { attributes: input.attributes } : {},
           ...input.participants !== void 0 ? { participants: input.participants } : {},
-          ...input.legs !== void 0 ? { legs: input.legs } : {}
+          ...input.legs !== void 0 ? { legs: input.legs } : {},
+          ...input.endReason !== void 0 ? { endReason: input.endReason } : {}
         }
       },
       CallStateSyncResponse
@@ -14433,6 +14498,7 @@ function guardIsActive(opts) {
 }
 
 // src/runtime/call-sync.ts
+var END_REASON_WAIT_MS = 2e3;
 function makeNoopHandle(callId) {
   return {
     callId,
@@ -14441,6 +14507,8 @@ function makeNoopHandle(callId) {
     syncState() {
     },
     publishDtmf() {
+    },
+    async recordEndReason() {
     }
   };
 }
@@ -14481,6 +14549,24 @@ async function createCallSyncHandle(init) {
         });
       });
     },
+    async recordEndReason(reason) {
+      let timer;
+      try {
+        await Promise.race([
+          init.client.calls.syncState(callId, { endReason: reason }),
+          new Promise((resolve) => {
+            timer = setTimeout(resolve, END_REASON_WAIT_MS);
+          })
+        ]);
+      } catch (err) {
+        console.warn("[sdk.call-sync] end reason not recorded", {
+          reason,
+          err: err instanceof Error ? err.message : err
+        });
+      } finally {
+        clearTimeout(timer);
+      }
+    },
     publishDtmf(input) {
       void init.client.calls.appendDtmfEvent(callId, input).catch((err) => {
         console.warn("[sdk.call-sync] dtmf publish failed", {
@@ -15942,6 +16028,7 @@ var Agent = class {
             break;
           } catch (err) {
             fetchError = err;
+            if (err instanceof VoiceLayerValidationError) break;
             await new Promise((resolve) => setTimeout(resolve, 500));
           }
         }
@@ -16756,6 +16843,7 @@ ${callIntent}`
           }
         }
       } else if (flowBootFailure) {
+        const reported = callSync.recordEndReason(`flow_boot:${flowBootFailure}`);
         const apology = this.config.flowRuntime?.bootFailureMessage ?? "Sorry \u2014 we're having a technical issue starting this call. Please try again in a few minutes. Goodbye.";
         try {
           await adapter.generateReply({
@@ -16766,6 +16854,7 @@ ${apology}`
         } catch (err) {
           console.warn("[agent] flow boot apology failed to play", err);
         }
+        await reported;
         await endCallController.hangUp({ trigger: "flow", reason: `flow_boot:${flowBootFailure}` });
       } else if (this.config.onCall) {
         await this.config.onCall(ctx);