npm - @voicelayer/sdk - Versions diffs - 0.5.0 → 0.6.0 - Mend

@voicelayer/sdk 0.5.0 → 0.6.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (8) hide show

package/dist/brain/index.d.ts +2 -2
package/dist/brain/index.js +122 -16
package/dist/index.d.ts +338 -320
package/dist/index.js +3034 -1791
package/dist/runtime/text-session.d.ts +1 -1
package/dist/runtime/text-session.js +655 -101
package/dist/{text-session-Bf4Jni7H.d.ts → text-session-CoyEcdmg.d.ts} +238 -124
package/package.json +8 -4

package/dist/{text-session-Bf4Jni7H.d.ts → text-session-CoyEcdmg.d.ts} RENAMED Viewed

@@ -354,11 +354,11 @@ declare const ProcessSchemaDTO: z.ZodObject<{
         id: z.ZodString;
         text: z.ZodString;
     }, "strip", z.ZodTypeAny, {
-        id: string;
         text: string;
-    }, {
         id: string;
+    }, {
         text: string;
+        id: string;
     }>, "many">>;
     fields: z.ZodArray<z.ZodObject<{
         name: z.ZodString;
@@ -373,7 +373,7 @@ declare const ProcessSchemaDTO: z.ZodObject<{
          *  doesn't extract it from their words. Absent ⇒ the caller may say it. */
         fromCaller: z.ZodOptional<z.ZodBoolean>;
     }, "strip", z.ZodTypeAny, {
-        type: "string" | "number" | "boolean" | "string[]" | "datetime" | "email" | "phone";
+        type: "string" | "number" | "boolean" | "email" | "string[]" | "datetime" | "phone";
         name: string;
         required: boolean;
         ask?: string | undefined;
@@ -383,7 +383,7 @@ declare const ProcessSchemaDTO: z.ZodObject<{
         enum?: string[] | undefined;
         fromCaller?: boolean | undefined;
     }, {
-        type: "string" | "number" | "boolean" | "string[]" | "datetime" | "email" | "phone";
+        type: "string" | "number" | "boolean" | "email" | "string[]" | "datetime" | "phone";
         name: string;
         required: boolean;
         ask?: string | undefined;
@@ -454,11 +454,11 @@ declare const ProcessSchemaDTO: z.ZodObject<{
         retentionDays: z.ZodOptional<z.ZodNumber>;
         piiFields: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
     }, "strip", z.ZodTypeAny, {
-        scope?: "call" | "caller" | "participant" | "account" | "platform" | undefined;
+        scope?: "caller" | "call" | "account" | "participant" | "platform" | undefined;
         retentionDays?: number | undefined;
         piiFields?: string[] | undefined;
     }, {
-        scope?: "call" | "caller" | "participant" | "account" | "platform" | undefined;
+        scope?: "caller" | "call" | "account" | "participant" | "platform" | undefined;
         retentionDays?: number | undefined;
         piiFields?: string[] | undefined;
     }>>;
@@ -476,26 +476,36 @@ declare const ProcessSchemaDTO: z.ZodObject<{
          * worker (it holds the internal service token) never honours it.
          */
         allowPrivateNetwork: z.ZodOptional<z.ZodBoolean>;
+        /**
+         * Burn-down G-33: the model reads the caller's PII as tokens (`<PII_PHONE_1>`). `true` — this tool's arguments carry
+         * the caller's real values instead, when its URL fixes the host (publish refuses it on a host the call fills in).
+         * Absent — real values only when it signs in with a connection; otherwise the endpoint gets the tokens. `false` —
+         * always the tokens.
+         * (packages/sdk/test/tool-detokenise.test.ts)
+         */
+        sendRealValues: z.ZodOptional<z.ZodBoolean>;
     }, "strip", z.ZodTypeAny, {
         name: string;
-        url: string;
         description: string;
         input: Record<string, "string" | "number" | "boolean">;
+        url: string;
         method: "GET" | "POST" | "PUT" | "PATCH" | "DELETE";
         auth: "none" | "connection";
-        allowPrivateNetwork?: boolean | undefined;
         headers?: Record<string, string> | undefined;
         connectionRef?: string | undefined;
+        allowPrivateNetwork?: boolean | undefined;
+        sendRealValues?: boolean | undefined;
     }, {
         name: string;
-        url: string;
         description: string;
         input: Record<string, "string" | "number" | "boolean">;
+        url: string;
         method: "GET" | "POST" | "PUT" | "PATCH" | "DELETE";
         auth: "none" | "connection";
-        allowPrivateNetwork?: boolean | undefined;
         headers?: Record<string, string> | undefined;
         connectionRef?: string | undefined;
+        allowPrivateNetwork?: boolean | undefined;
+        sendRealValues?: boolean | undefined;
     }>, "many">>;
     displayName: z.ZodOptional<z.ZodString>;
     speech: z.ZodOptional<z.ZodObject<{
@@ -549,7 +559,7 @@ declare const ProcessSchemaDTO: z.ZodObject<{
         entry: z.ZodArray<z.ZodString, "many">;
         nodes: z.ZodRecord<z.ZodString, z.ZodObject<{
             id: z.ZodString;
-            type: z.ZodEnum<["start", "say", "ask", "confirm", "tool", "decision", "handoff", "end", "trigger", "gate", "playbook", "menu", "code", "set", "subflow", "llm", "rag", "memory", "speech", "classify", "router", "note"]>;
+            type: z.ZodEnum<["start", "say", "ask", "confirm", "tool", "email", "decision", "handoff", "end", "trigger", "gate", "playbook", "menu", "code", "set", "subflow", "llm", "rag", "memory", "speech", "classify", "router", "note"]>;
             config: z.ZodRecord<z.ZodString, z.ZodUnknown>;
             out: z.ZodArray<z.ZodObject<{
                 to: z.ZodString;
@@ -558,34 +568,34 @@ declare const ProcessSchemaDTO: z.ZodObject<{
                 label: z.ZodOptional<z.ZodString>;
             }, "strip", z.ZodTypeAny, {
                 to: string;
-                condition?: string | undefined;
                 sourceHandle?: string | undefined;
                 label?: string | undefined;
+                condition?: string | undefined;
             }, {
                 to: string;
-                condition?: string | undefined;
                 sourceHandle?: string | undefined;
                 label?: string | undefined;
+                condition?: string | undefined;
             }>, "many">;
         }, "strip", z.ZodTypeAny, {
-            type: "code" | "set" | "start" | "say" | "ask" | "confirm" | "tool" | "decision" | "handoff" | "end" | "trigger" | "gate" | "playbook" | "menu" | "subflow" | "llm" | "rag" | "memory" | "speech" | "classify" | "router" | "note";
+            type: "llm" | "code" | "start" | "say" | "ask" | "confirm" | "tool" | "email" | "decision" | "handoff" | "end" | "trigger" | "gate" | "playbook" | "menu" | "set" | "subflow" | "rag" | "memory" | "speech" | "classify" | "router" | "note";
             id: string;
             config: Record<string, unknown>;
             out: {
                 to: string;
-                condition?: string | undefined;
                 sourceHandle?: string | undefined;
                 label?: string | undefined;
+                condition?: string | undefined;
             }[];
         }, {
-            type: "code" | "set" | "start" | "say" | "ask" | "confirm" | "tool" | "decision" | "handoff" | "end" | "trigger" | "gate" | "playbook" | "menu" | "subflow" | "llm" | "rag" | "memory" | "speech" | "classify" | "router" | "note";
+            type: "llm" | "code" | "start" | "say" | "ask" | "confirm" | "tool" | "email" | "decision" | "handoff" | "end" | "trigger" | "gate" | "playbook" | "menu" | "set" | "subflow" | "rag" | "memory" | "speech" | "classify" | "router" | "note";
             id: string;
             config: Record<string, unknown>;
             out: {
                 to: string;
-                condition?: string | undefined;
                 sourceHandle?: string | undefined;
                 label?: string | undefined;
+                condition?: string | undefined;
             }[];
         }>>;
         completionGate: z.ZodObject<{
@@ -612,20 +622,20 @@ declare const ProcessSchemaDTO: z.ZodObject<{
             labelOnlyEdges?: string[] | undefined;
         }>>;
     }, "strip", z.ZodTypeAny, {
-        v: 1;
         id: string;
-        entry: string[];
         nodes: Record<string, {
-            type: "code" | "set" | "start" | "say" | "ask" | "confirm" | "tool" | "decision" | "handoff" | "end" | "trigger" | "gate" | "playbook" | "menu" | "subflow" | "llm" | "rag" | "memory" | "speech" | "classify" | "router" | "note";
+            type: "llm" | "code" | "start" | "say" | "ask" | "confirm" | "tool" | "email" | "decision" | "handoff" | "end" | "trigger" | "gate" | "playbook" | "menu" | "set" | "subflow" | "rag" | "memory" | "speech" | "classify" | "router" | "note";
             id: string;
             config: Record<string, unknown>;
             out: {
                 to: string;
-                condition?: string | undefined;
                 sourceHandle?: string | undefined;
                 label?: string | undefined;
+                condition?: string | undefined;
             }[];
         }>;
+        v: 1;
+        entry: string[];
         completionGate: {
             requiredFields: string[];
         };
@@ -636,20 +646,20 @@ declare const ProcessSchemaDTO: z.ZodObject<{
             labelOnlyEdges?: string[] | undefined;
         } | undefined;
     }, {
-        v: 1;
         id: string;
-        entry: string[];
         nodes: Record<string, {
-            type: "code" | "set" | "start" | "say" | "ask" | "confirm" | "tool" | "decision" | "handoff" | "end" | "trigger" | "gate" | "playbook" | "menu" | "subflow" | "llm" | "rag" | "memory" | "speech" | "classify" | "router" | "note";
+            type: "llm" | "code" | "start" | "say" | "ask" | "confirm" | "tool" | "email" | "decision" | "handoff" | "end" | "trigger" | "gate" | "playbook" | "menu" | "set" | "subflow" | "rag" | "memory" | "speech" | "classify" | "router" | "note";
             id: string;
             config: Record<string, unknown>;
             out: {
                 to: string;
-                condition?: string | undefined;
                 sourceHandle?: string | undefined;
                 label?: string | undefined;
+                condition?: string | undefined;
             }[];
         }>;
+        v: 1;
+        entry: string[];
         completionGate: {
             requiredFields: string[];
         };
@@ -671,7 +681,7 @@ declare const ProcessSchemaDTO: z.ZodObject<{
         } | undefined;
     };
     fields: {
-        type: "string" | "number" | "boolean" | "string[]" | "datetime" | "email" | "phone";
+        type: "string" | "number" | "boolean" | "email" | "string[]" | "datetime" | "phone";
         name: string;
         required: boolean;
         ask?: string | undefined;
@@ -686,7 +696,7 @@ declare const ProcessSchemaDTO: z.ZodObject<{
         routes?: Record<string, string> | undefined;
     } | undefined;
     memory?: {
-        scope?: "call" | "caller" | "participant" | "account" | "platform" | undefined;
+        scope?: "caller" | "call" | "account" | "participant" | "platform" | undefined;
         retentionDays?: number | undefined;
         piiFields?: string[] | undefined;
     } | undefined;
@@ -702,8 +712,8 @@ declare const ProcessSchemaDTO: z.ZodObject<{
         } | undefined;
     } | undefined;
     prompts?: {
-        id: string;
         text: string;
+        id: string;
     }[] | undefined;
     triggers?: {
         then: string;
@@ -713,31 +723,32 @@ declare const ProcessSchemaDTO: z.ZodObject<{
     }[] | undefined;
     tools?: {
         name: string;
-        url: string;
         description: string;
         input: Record<string, "string" | "number" | "boolean">;
+        url: string;
         method: "GET" | "POST" | "PUT" | "PATCH" | "DELETE";
         auth: "none" | "connection";
-        allowPrivateNetwork?: boolean | undefined;
         headers?: Record<string, string> | undefined;
         connectionRef?: string | undefined;
+        allowPrivateNetwork?: boolean | undefined;
+        sendRealValues?: boolean | undefined;
     }[] | undefined;
     displayName?: string | undefined;
     program?: {
-        v: 1;
         id: string;
-        entry: string[];
         nodes: Record<string, {
-            type: "code" | "set" | "start" | "say" | "ask" | "confirm" | "tool" | "decision" | "handoff" | "end" | "trigger" | "gate" | "playbook" | "menu" | "subflow" | "llm" | "rag" | "memory" | "speech" | "classify" | "router" | "note";
+            type: "llm" | "code" | "start" | "say" | "ask" | "confirm" | "tool" | "email" | "decision" | "handoff" | "end" | "trigger" | "gate" | "playbook" | "menu" | "set" | "subflow" | "rag" | "memory" | "speech" | "classify" | "router" | "note";
             id: string;
             config: Record<string, unknown>;
             out: {
                 to: string;
-                condition?: string | undefined;
                 sourceHandle?: string | undefined;
                 label?: string | undefined;
+                condition?: string | undefined;
             }[];
         }>;
+        v: 1;
+        entry: string[];
         completionGate: {
             requiredFields: string[];
         };
@@ -759,7 +770,7 @@ declare const ProcessSchemaDTO: z.ZodObject<{
         } | undefined;
     };
     fields: {
-        type: "string" | "number" | "boolean" | "string[]" | "datetime" | "email" | "phone";
+        type: "string" | "number" | "boolean" | "email" | "string[]" | "datetime" | "phone";
         name: string;
         required: boolean;
         ask?: string | undefined;
@@ -774,7 +785,7 @@ declare const ProcessSchemaDTO: z.ZodObject<{
         routes?: Record<string, string> | undefined;
     } | undefined;
     memory?: {
-        scope?: "call" | "caller" | "participant" | "account" | "platform" | undefined;
+        scope?: "caller" | "call" | "account" | "participant" | "platform" | undefined;
         retentionDays?: number | undefined;
         piiFields?: string[] | undefined;
     } | undefined;
@@ -790,8 +801,8 @@ declare const ProcessSchemaDTO: z.ZodObject<{
         } | undefined;
     } | undefined;
     prompts?: {
-        id: string;
         text: string;
+        id: string;
     }[] | undefined;
     triggers?: {
         then: string;
@@ -801,31 +812,32 @@ declare const ProcessSchemaDTO: z.ZodObject<{
     }[] | undefined;
     tools?: {
         name: string;
-        url: string;
         description: string;
         input: Record<string, "string" | "number" | "boolean">;
+        url: string;
         method: "GET" | "POST" | "PUT" | "PATCH" | "DELETE";
         auth: "none" | "connection";
-        allowPrivateNetwork?: boolean | undefined;
         headers?: Record<string, string> | undefined;
         connectionRef?: string | undefined;
+        allowPrivateNetwork?: boolean | undefined;
+        sendRealValues?: boolean | undefined;
     }[] | undefined;
     displayName?: string | undefined;
     program?: {
-        v: 1;
         id: string;
-        entry: string[];
         nodes: Record<string, {
-            type: "code" | "set" | "start" | "say" | "ask" | "confirm" | "tool" | "decision" | "handoff" | "end" | "trigger" | "gate" | "playbook" | "menu" | "subflow" | "llm" | "rag" | "memory" | "speech" | "classify" | "router" | "note";
+            type: "llm" | "code" | "start" | "say" | "ask" | "confirm" | "tool" | "email" | "decision" | "handoff" | "end" | "trigger" | "gate" | "playbook" | "menu" | "set" | "subflow" | "rag" | "memory" | "speech" | "classify" | "router" | "note";
             id: string;
             config: Record<string, unknown>;
             out: {
                 to: string;
-                condition?: string | undefined;
                 sourceHandle?: string | undefined;
                 label?: string | undefined;
+                condition?: string | undefined;
             }[];
         }>;
+        v: 1;
+        entry: string[];
         completionGate: {
             requiredFields: string[];
         };
@@ -868,11 +880,11 @@ declare const AgentDTO: z.ZodObject<{
             id: z.ZodString;
             text: z.ZodString;
         }, "strip", z.ZodTypeAny, {
-            id: string;
             text: string;
-        }, {
             id: string;
+        }, {
             text: string;
+            id: string;
         }>, "many">>;
         fields: z.ZodArray<z.ZodObject<{
             name: z.ZodString;
@@ -887,7 +899,7 @@ declare const AgentDTO: z.ZodObject<{
              *  doesn't extract it from their words. Absent ⇒ the caller may say it. */
             fromCaller: z.ZodOptional<z.ZodBoolean>;
         }, "strip", z.ZodTypeAny, {
-            type: "string" | "number" | "boolean" | "string[]" | "datetime" | "email" | "phone";
+            type: "string" | "number" | "boolean" | "email" | "string[]" | "datetime" | "phone";
             name: string;
             required: boolean;
             ask?: string | undefined;
@@ -897,7 +909,7 @@ declare const AgentDTO: z.ZodObject<{
             enum?: string[] | undefined;
             fromCaller?: boolean | undefined;
         }, {
-            type: "string" | "number" | "boolean" | "string[]" | "datetime" | "email" | "phone";
+            type: "string" | "number" | "boolean" | "email" | "string[]" | "datetime" | "phone";
             name: string;
             required: boolean;
             ask?: string | undefined;
@@ -968,11 +980,11 @@ declare const AgentDTO: z.ZodObject<{
             retentionDays: z.ZodOptional<z.ZodNumber>;
             piiFields: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
         }, "strip", z.ZodTypeAny, {
-            scope?: "call" | "caller" | "participant" | "account" | "platform" | undefined;
+            scope?: "caller" | "call" | "account" | "participant" | "platform" | undefined;
             retentionDays?: number | undefined;
             piiFields?: string[] | undefined;
         }, {
-            scope?: "call" | "caller" | "participant" | "account" | "platform" | undefined;
+            scope?: "caller" | "call" | "account" | "participant" | "platform" | undefined;
             retentionDays?: number | undefined;
             piiFields?: string[] | undefined;
         }>>;
@@ -990,26 +1002,36 @@ declare const AgentDTO: z.ZodObject<{
              * worker (it holds the internal service token) never honours it.
              */
             allowPrivateNetwork: z.ZodOptional<z.ZodBoolean>;
+            /**
+             * Burn-down G-33: the model reads the caller's PII as tokens (`<PII_PHONE_1>`). `true` — this tool's arguments carry
+             * the caller's real values instead, when its URL fixes the host (publish refuses it on a host the call fills in).
+             * Absent — real values only when it signs in with a connection; otherwise the endpoint gets the tokens. `false` —
+             * always the tokens.
+             * (packages/sdk/test/tool-detokenise.test.ts)
+             */
+            sendRealValues: z.ZodOptional<z.ZodBoolean>;
         }, "strip", z.ZodTypeAny, {
             name: string;
-            url: string;
             description: string;
             input: Record<string, "string" | "number" | "boolean">;
+            url: string;
             method: "GET" | "POST" | "PUT" | "PATCH" | "DELETE";
             auth: "none" | "connection";
-            allowPrivateNetwork?: boolean | undefined;
             headers?: Record<string, string> | undefined;
             connectionRef?: string | undefined;
+            allowPrivateNetwork?: boolean | undefined;
+            sendRealValues?: boolean | undefined;
         }, {
             name: string;
-            url: string;
             description: string;
             input: Record<string, "string" | "number" | "boolean">;
+            url: string;
             method: "GET" | "POST" | "PUT" | "PATCH" | "DELETE";
             auth: "none" | "connection";
-            allowPrivateNetwork?: boolean | undefined;
             headers?: Record<string, string> | undefined;
             connectionRef?: string | undefined;
+            allowPrivateNetwork?: boolean | undefined;
+            sendRealValues?: boolean | undefined;
         }>, "many">>;
         displayName: z.ZodOptional<z.ZodString>;
         speech: z.ZodOptional<z.ZodObject<{
@@ -1063,7 +1085,7 @@ declare const AgentDTO: z.ZodObject<{
             entry: z.ZodArray<z.ZodString, "many">;
             nodes: z.ZodRecord<z.ZodString, z.ZodObject<{
                 id: z.ZodString;
-                type: z.ZodEnum<["start", "say", "ask", "confirm", "tool", "decision", "handoff", "end", "trigger", "gate", "playbook", "menu", "code", "set", "subflow", "llm", "rag", "memory", "speech", "classify", "router", "note"]>;
+                type: z.ZodEnum<["start", "say", "ask", "confirm", "tool", "email", "decision", "handoff", "end", "trigger", "gate", "playbook", "menu", "code", "set", "subflow", "llm", "rag", "memory", "speech", "classify", "router", "note"]>;
                 config: z.ZodRecord<z.ZodString, z.ZodUnknown>;
                 out: z.ZodArray<z.ZodObject<{
                     to: z.ZodString;
@@ -1072,34 +1094,34 @@ declare const AgentDTO: z.ZodObject<{
                     label: z.ZodOptional<z.ZodString>;
                 }, "strip", z.ZodTypeAny, {
                     to: string;
-                    condition?: string | undefined;
                     sourceHandle?: string | undefined;
                     label?: string | undefined;
+                    condition?: string | undefined;
                 }, {
                     to: string;
-                    condition?: string | undefined;
                     sourceHandle?: string | undefined;
                     label?: string | undefined;
+                    condition?: string | undefined;
                 }>, "many">;
             }, "strip", z.ZodTypeAny, {
-                type: "code" | "set" | "start" | "say" | "ask" | "confirm" | "tool" | "decision" | "handoff" | "end" | "trigger" | "gate" | "playbook" | "menu" | "subflow" | "llm" | "rag" | "memory" | "speech" | "classify" | "router" | "note";
+                type: "llm" | "code" | "start" | "say" | "ask" | "confirm" | "tool" | "email" | "decision" | "handoff" | "end" | "trigger" | "gate" | "playbook" | "menu" | "set" | "subflow" | "rag" | "memory" | "speech" | "classify" | "router" | "note";
                 id: string;
                 config: Record<string, unknown>;
                 out: {
                     to: string;
-                    condition?: string | undefined;
                     sourceHandle?: string | undefined;
                     label?: string | undefined;
+                    condition?: string | undefined;
                 }[];
             }, {
-                type: "code" | "set" | "start" | "say" | "ask" | "confirm" | "tool" | "decision" | "handoff" | "end" | "trigger" | "gate" | "playbook" | "menu" | "subflow" | "llm" | "rag" | "memory" | "speech" | "classify" | "router" | "note";
+                type: "llm" | "code" | "start" | "say" | "ask" | "confirm" | "tool" | "email" | "decision" | "handoff" | "end" | "trigger" | "gate" | "playbook" | "menu" | "set" | "subflow" | "rag" | "memory" | "speech" | "classify" | "router" | "note";
                 id: string;
                 config: Record<string, unknown>;
                 out: {
                     to: string;
-                    condition?: string | undefined;
                     sourceHandle?: string | undefined;
                     label?: string | undefined;
+                    condition?: string | undefined;
                 }[];
             }>>;
             completionGate: z.ZodObject<{
@@ -1126,20 +1148,20 @@ declare const AgentDTO: z.ZodObject<{
                 labelOnlyEdges?: string[] | undefined;
             }>>;
         }, "strip", z.ZodTypeAny, {
-            v: 1;
             id: string;
-            entry: string[];
             nodes: Record<string, {
-                type: "code" | "set" | "start" | "say" | "ask" | "confirm" | "tool" | "decision" | "handoff" | "end" | "trigger" | "gate" | "playbook" | "menu" | "subflow" | "llm" | "rag" | "memory" | "speech" | "classify" | "router" | "note";
+                type: "llm" | "code" | "start" | "say" | "ask" | "confirm" | "tool" | "email" | "decision" | "handoff" | "end" | "trigger" | "gate" | "playbook" | "menu" | "set" | "subflow" | "rag" | "memory" | "speech" | "classify" | "router" | "note";
                 id: string;
                 config: Record<string, unknown>;
                 out: {
                     to: string;
-                    condition?: string | undefined;
                     sourceHandle?: string | undefined;
                     label?: string | undefined;
+                    condition?: string | undefined;
                 }[];
             }>;
+            v: 1;
+            entry: string[];
             completionGate: {
                 requiredFields: string[];
             };
@@ -1150,20 +1172,20 @@ declare const AgentDTO: z.ZodObject<{
                 labelOnlyEdges?: string[] | undefined;
             } | undefined;
         }, {
-            v: 1;
             id: string;
-            entry: string[];
             nodes: Record<string, {
-                type: "code" | "set" | "start" | "say" | "ask" | "confirm" | "tool" | "decision" | "handoff" | "end" | "trigger" | "gate" | "playbook" | "menu" | "subflow" | "llm" | "rag" | "memory" | "speech" | "classify" | "router" | "note";
+                type: "llm" | "code" | "start" | "say" | "ask" | "confirm" | "tool" | "email" | "decision" | "handoff" | "end" | "trigger" | "gate" | "playbook" | "menu" | "set" | "subflow" | "rag" | "memory" | "speech" | "classify" | "router" | "note";
                 id: string;
                 config: Record<string, unknown>;
                 out: {
                     to: string;
-                    condition?: string | undefined;
                     sourceHandle?: string | undefined;
                     label?: string | undefined;
+                    condition?: string | undefined;
                 }[];
             }>;
+            v: 1;
+            entry: string[];
             completionGate: {
                 requiredFields: string[];
             };
@@ -1185,7 +1207,7 @@ declare const AgentDTO: z.ZodObject<{
             } | undefined;
         };
         fields: {
-            type: "string" | "number" | "boolean" | "string[]" | "datetime" | "email" | "phone";
+            type: "string" | "number" | "boolean" | "email" | "string[]" | "datetime" | "phone";
             name: string;
             required: boolean;
             ask?: string | undefined;
@@ -1200,7 +1222,7 @@ declare const AgentDTO: z.ZodObject<{
             routes?: Record<string, string> | undefined;
         } | undefined;
         memory?: {
-            scope?: "call" | "caller" | "participant" | "account" | "platform" | undefined;
+            scope?: "caller" | "call" | "account" | "participant" | "platform" | undefined;
             retentionDays?: number | undefined;
             piiFields?: string[] | undefined;
         } | undefined;
@@ -1216,8 +1238,8 @@ declare const AgentDTO: z.ZodObject<{
             } | undefined;
         } | undefined;
         prompts?: {
-            id: string;
             text: string;
+            id: string;
         }[] | undefined;
         triggers?: {
             then: string;
@@ -1227,31 +1249,32 @@ declare const AgentDTO: z.ZodObject<{
         }[] | undefined;
         tools?: {
             name: string;
-            url: string;
             description: string;
             input: Record<string, "string" | "number" | "boolean">;
+            url: string;
             method: "GET" | "POST" | "PUT" | "PATCH" | "DELETE";
             auth: "none" | "connection";
-            allowPrivateNetwork?: boolean | undefined;
             headers?: Record<string, string> | undefined;
             connectionRef?: string | undefined;
+            allowPrivateNetwork?: boolean | undefined;
+            sendRealValues?: boolean | undefined;
         }[] | undefined;
         displayName?: string | undefined;
         program?: {
-            v: 1;
             id: string;
-            entry: string[];
             nodes: Record<string, {
-                type: "code" | "set" | "start" | "say" | "ask" | "confirm" | "tool" | "decision" | "handoff" | "end" | "trigger" | "gate" | "playbook" | "menu" | "subflow" | "llm" | "rag" | "memory" | "speech" | "classify" | "router" | "note";
+                type: "llm" | "code" | "start" | "say" | "ask" | "confirm" | "tool" | "email" | "decision" | "handoff" | "end" | "trigger" | "gate" | "playbook" | "menu" | "set" | "subflow" | "rag" | "memory" | "speech" | "classify" | "router" | "note";
                 id: string;
                 config: Record<string, unknown>;
                 out: {
                     to: string;
-                    condition?: string | undefined;
                     sourceHandle?: string | undefined;
                     label?: string | undefined;
+                    condition?: string | undefined;
                 }[];
             }>;
+            v: 1;
+            entry: string[];
             completionGate: {
                 requiredFields: string[];
             };
@@ -1273,7 +1296,7 @@ declare const AgentDTO: z.ZodObject<{
             } | undefined;
         };
         fields: {
-            type: "string" | "number" | "boolean" | "string[]" | "datetime" | "email" | "phone";
+            type: "string" | "number" | "boolean" | "email" | "string[]" | "datetime" | "phone";
             name: string;
             required: boolean;
             ask?: string | undefined;
@@ -1288,7 +1311,7 @@ declare const AgentDTO: z.ZodObject<{
             routes?: Record<string, string> | undefined;
         } | undefined;
         memory?: {
-            scope?: "call" | "caller" | "participant" | "account" | "platform" | undefined;
+            scope?: "caller" | "call" | "account" | "participant" | "platform" | undefined;
             retentionDays?: number | undefined;
             piiFields?: string[] | undefined;
         } | undefined;
@@ -1304,8 +1327,8 @@ declare const AgentDTO: z.ZodObject<{
             } | undefined;
         } | undefined;
         prompts?: {
-            id: string;
             text: string;
+            id: string;
         }[] | undefined;
         triggers?: {
             then: string;
@@ -1315,31 +1338,32 @@ declare const AgentDTO: z.ZodObject<{
         }[] | undefined;
         tools?: {
             name: string;
-            url: string;
             description: string;
             input: Record<string, "string" | "number" | "boolean">;
+            url: string;
             method: "GET" | "POST" | "PUT" | "PATCH" | "DELETE";
             auth: "none" | "connection";
-            allowPrivateNetwork?: boolean | undefined;
             headers?: Record<string, string> | undefined;
             connectionRef?: string | undefined;
+            allowPrivateNetwork?: boolean | undefined;
+            sendRealValues?: boolean | undefined;
         }[] | undefined;
         displayName?: string | undefined;
         program?: {
-            v: 1;
             id: string;
-            entry: string[];
             nodes: Record<string, {
-                type: "code" | "set" | "start" | "say" | "ask" | "confirm" | "tool" | "decision" | "handoff" | "end" | "trigger" | "gate" | "playbook" | "menu" | "subflow" | "llm" | "rag" | "memory" | "speech" | "classify" | "router" | "note";
+                type: "llm" | "code" | "start" | "say" | "ask" | "confirm" | "tool" | "email" | "decision" | "handoff" | "end" | "trigger" | "gate" | "playbook" | "menu" | "set" | "subflow" | "rag" | "memory" | "speech" | "classify" | "router" | "note";
                 id: string;
                 config: Record<string, unknown>;
                 out: {
                     to: string;
-                    condition?: string | undefined;
                     sourceHandle?: string | undefined;
                     label?: string | undefined;
+                    condition?: string | undefined;
                 }[];
             }>;
+            v: 1;
+            entry: string[];
             completionGate: {
                 requiredFields: string[];
             };
@@ -1357,8 +1381,8 @@ declare const AgentDTO: z.ZodObject<{
 }, "strip", z.ZodTypeAny, {
     status: "online" | "offline" | "degraded";
     id: string;
-    name: string;
     projectId: string;
+    name: string;
     createdAt: string;
     updatedAt: string;
     version: string;
@@ -1383,7 +1407,7 @@ declare const AgentDTO: z.ZodObject<{
             } | undefined;
         };
         fields: {
-            type: "string" | "number" | "boolean" | "string[]" | "datetime" | "email" | "phone";
+            type: "string" | "number" | "boolean" | "email" | "string[]" | "datetime" | "phone";
             name: string;
             required: boolean;
             ask?: string | undefined;
@@ -1398,7 +1422,7 @@ declare const AgentDTO: z.ZodObject<{
             routes?: Record<string, string> | undefined;
         } | undefined;
         memory?: {
-            scope?: "call" | "caller" | "participant" | "account" | "platform" | undefined;
+            scope?: "caller" | "call" | "account" | "participant" | "platform" | undefined;
             retentionDays?: number | undefined;
             piiFields?: string[] | undefined;
         } | undefined;
@@ -1414,8 +1438,8 @@ declare const AgentDTO: z.ZodObject<{
             } | undefined;
         } | undefined;
         prompts?: {
-            id: string;
             text: string;
+            id: string;
         }[] | undefined;
         triggers?: {
             then: string;
@@ -1425,31 +1449,32 @@ declare const AgentDTO: z.ZodObject<{
         }[] | undefined;
         tools?: {
             name: string;
-            url: string;
             description: string;
             input: Record<string, "string" | "number" | "boolean">;
+            url: string;
             method: "GET" | "POST" | "PUT" | "PATCH" | "DELETE";
             auth: "none" | "connection";
-            allowPrivateNetwork?: boolean | undefined;
             headers?: Record<string, string> | undefined;
             connectionRef?: string | undefined;
+            allowPrivateNetwork?: boolean | undefined;
+            sendRealValues?: boolean | undefined;
         }[] | undefined;
         displayName?: string | undefined;
         program?: {
-            v: 1;
             id: string;
-            entry: string[];
             nodes: Record<string, {
-                type: "code" | "set" | "start" | "say" | "ask" | "confirm" | "tool" | "decision" | "handoff" | "end" | "trigger" | "gate" | "playbook" | "menu" | "subflow" | "llm" | "rag" | "memory" | "speech" | "classify" | "router" | "note";
+                type: "llm" | "code" | "start" | "say" | "ask" | "confirm" | "tool" | "email" | "decision" | "handoff" | "end" | "trigger" | "gate" | "playbook" | "menu" | "set" | "subflow" | "rag" | "memory" | "speech" | "classify" | "router" | "note";
                 id: string;
                 config: Record<string, unknown>;
                 out: {
                     to: string;
-                    condition?: string | undefined;
                     sourceHandle?: string | undefined;
                     label?: string | undefined;
+                    condition?: string | undefined;
                 }[];
             }>;
+            v: 1;
+            entry: string[];
             completionGate: {
                 requiredFields: string[];
             };
@@ -1465,8 +1490,8 @@ declare const AgentDTO: z.ZodObject<{
 }, {
     status: "online" | "offline" | "degraded";
     id: string;
-    name: string;
     projectId: string;
+    name: string;
     createdAt: string;
     updatedAt: string;
     version: string;
@@ -1491,7 +1516,7 @@ declare const AgentDTO: z.ZodObject<{
             } | undefined;
         };
         fields: {
-            type: "string" | "number" | "boolean" | "string[]" | "datetime" | "email" | "phone";
+            type: "string" | "number" | "boolean" | "email" | "string[]" | "datetime" | "phone";
             name: string;
             required: boolean;
             ask?: string | undefined;
@@ -1506,7 +1531,7 @@ declare const AgentDTO: z.ZodObject<{
             routes?: Record<string, string> | undefined;
         } | undefined;
         memory?: {
-            scope?: "call" | "caller" | "participant" | "account" | "platform" | undefined;
+            scope?: "caller" | "call" | "account" | "participant" | "platform" | undefined;
             retentionDays?: number | undefined;
             piiFields?: string[] | undefined;
         } | undefined;
@@ -1522,8 +1547,8 @@ declare const AgentDTO: z.ZodObject<{
             } | undefined;
         } | undefined;
         prompts?: {
-            id: string;
             text: string;
+            id: string;
         }[] | undefined;
         triggers?: {
             then: string;
@@ -1533,31 +1558,32 @@ declare const AgentDTO: z.ZodObject<{
         }[] | undefined;
         tools?: {
             name: string;
-            url: string;
             description: string;
             input: Record<string, "string" | "number" | "boolean">;
+            url: string;
             method: "GET" | "POST" | "PUT" | "PATCH" | "DELETE";
             auth: "none" | "connection";
-            allowPrivateNetwork?: boolean | undefined;
             headers?: Record<string, string> | undefined;
             connectionRef?: string | undefined;
+            allowPrivateNetwork?: boolean | undefined;
+            sendRealValues?: boolean | undefined;
         }[] | undefined;
         displayName?: string | undefined;
         program?: {
-            v: 1;
             id: string;
-            entry: string[];
             nodes: Record<string, {
-                type: "code" | "set" | "start" | "say" | "ask" | "confirm" | "tool" | "decision" | "handoff" | "end" | "trigger" | "gate" | "playbook" | "menu" | "subflow" | "llm" | "rag" | "memory" | "speech" | "classify" | "router" | "note";
+                type: "llm" | "code" | "start" | "say" | "ask" | "confirm" | "tool" | "email" | "decision" | "handoff" | "end" | "trigger" | "gate" | "playbook" | "menu" | "set" | "subflow" | "rag" | "memory" | "speech" | "classify" | "router" | "note";
                 id: string;
                 config: Record<string, unknown>;
                 out: {
                     to: string;
-                    condition?: string | undefined;
                     sourceHandle?: string | undefined;
                     label?: string | undefined;
+                    condition?: string | undefined;
                 }[];
             }>;
+            v: 1;
+            entry: string[];
             completionGate: {
                 requiredFields: string[];
             };
@@ -1630,7 +1656,7 @@ declare const FlowProgram: z.ZodObject<{
     entry: z.ZodArray<z.ZodString, "many">;
     nodes: z.ZodRecord<z.ZodString, z.ZodObject<{
         id: z.ZodString;
-        type: z.ZodEnum<["start", "say", "ask", "confirm", "tool", "decision", "handoff", "end", "trigger", "gate", "playbook", "menu", "code", "set", "subflow", "llm", "rag", "memory", "speech", "classify", "router", "note"]>;
+        type: z.ZodEnum<["start", "say", "ask", "confirm", "tool", "email", "decision", "handoff", "end", "trigger", "gate", "playbook", "menu", "code", "set", "subflow", "llm", "rag", "memory", "speech", "classify", "router", "note"]>;
         config: z.ZodRecord<z.ZodString, z.ZodUnknown>;
         out: z.ZodArray<z.ZodObject<{
             to: z.ZodString;
@@ -1639,34 +1665,34 @@ declare const FlowProgram: z.ZodObject<{
             label: z.ZodOptional<z.ZodString>;
         }, "strip", z.ZodTypeAny, {
             to: string;
-            condition?: string | undefined;
             sourceHandle?: string | undefined;
             label?: string | undefined;
+            condition?: string | undefined;
         }, {
             to: string;
-            condition?: string | undefined;
             sourceHandle?: string | undefined;
             label?: string | undefined;
+            condition?: string | undefined;
         }>, "many">;
     }, "strip", z.ZodTypeAny, {
-        type: "code" | "set" | "start" | "say" | "ask" | "confirm" | "tool" | "decision" | "handoff" | "end" | "trigger" | "gate" | "playbook" | "menu" | "subflow" | "llm" | "rag" | "memory" | "speech" | "classify" | "router" | "note";
+        type: "llm" | "code" | "start" | "say" | "ask" | "confirm" | "tool" | "email" | "decision" | "handoff" | "end" | "trigger" | "gate" | "playbook" | "menu" | "set" | "subflow" | "rag" | "memory" | "speech" | "classify" | "router" | "note";
         id: string;
         config: Record<string, unknown>;
         out: {
             to: string;
-            condition?: string | undefined;
             sourceHandle?: string | undefined;
             label?: string | undefined;
+            condition?: string | undefined;
         }[];
     }, {
-        type: "code" | "set" | "start" | "say" | "ask" | "confirm" | "tool" | "decision" | "handoff" | "end" | "trigger" | "gate" | "playbook" | "menu" | "subflow" | "llm" | "rag" | "memory" | "speech" | "classify" | "router" | "note";
+        type: "llm" | "code" | "start" | "say" | "ask" | "confirm" | "tool" | "email" | "decision" | "handoff" | "end" | "trigger" | "gate" | "playbook" | "menu" | "set" | "subflow" | "rag" | "memory" | "speech" | "classify" | "router" | "note";
         id: string;
         config: Record<string, unknown>;
         out: {
             to: string;
-            condition?: string | undefined;
             sourceHandle?: string | undefined;
             label?: string | undefined;
+            condition?: string | undefined;
         }[];
     }>>;
     completionGate: z.ZodObject<{
@@ -1693,20 +1719,20 @@ declare const FlowProgram: z.ZodObject<{
         labelOnlyEdges?: string[] | undefined;
     }>>;
 }, "strip", z.ZodTypeAny, {
-    v: 1;
     id: string;
-    entry: string[];
     nodes: Record<string, {
-        type: "code" | "set" | "start" | "say" | "ask" | "confirm" | "tool" | "decision" | "handoff" | "end" | "trigger" | "gate" | "playbook" | "menu" | "subflow" | "llm" | "rag" | "memory" | "speech" | "classify" | "router" | "note";
+        type: "llm" | "code" | "start" | "say" | "ask" | "confirm" | "tool" | "email" | "decision" | "handoff" | "end" | "trigger" | "gate" | "playbook" | "menu" | "set" | "subflow" | "rag" | "memory" | "speech" | "classify" | "router" | "note";
         id: string;
         config: Record<string, unknown>;
         out: {
             to: string;
-            condition?: string | undefined;
             sourceHandle?: string | undefined;
             label?: string | undefined;
+            condition?: string | undefined;
         }[];
     }>;
+    v: 1;
+    entry: string[];
     completionGate: {
         requiredFields: string[];
     };
@@ -1717,20 +1743,20 @@ declare const FlowProgram: z.ZodObject<{
         labelOnlyEdges?: string[] | undefined;
     } | undefined;
 }, {
-    v: 1;
     id: string;
-    entry: string[];
     nodes: Record<string, {
-        type: "code" | "set" | "start" | "say" | "ask" | "confirm" | "tool" | "decision" | "handoff" | "end" | "trigger" | "gate" | "playbook" | "menu" | "subflow" | "llm" | "rag" | "memory" | "speech" | "classify" | "router" | "note";
+        type: "llm" | "code" | "start" | "say" | "ask" | "confirm" | "tool" | "email" | "decision" | "handoff" | "end" | "trigger" | "gate" | "playbook" | "menu" | "set" | "subflow" | "rag" | "memory" | "speech" | "classify" | "router" | "note";
         id: string;
         config: Record<string, unknown>;
         out: {
             to: string;
-            condition?: string | undefined;
             sourceHandle?: string | undefined;
             label?: string | undefined;
+            condition?: string | undefined;
         }[];
     }>;
+    v: 1;
+    entry: string[];
     completionGate: {
         requiredFields: string[];
     };
@@ -2154,6 +2180,18 @@ interface AgentEventEmitter {
     emit(event: AgentLifecycleEvent): void;
 }
+/** Where a tool's arguments go — what decides whether it gets the caller's real values or the call's tokens. */
+interface ToolDestination {
+    /** `code`: the agent's own code, in its own worker. `http`: a request to `host`. */
+    readonly kind: 'code' | 'http';
+    /** The host the request goes to when its URL fixes it; null when a placeholder picks it. Audited; never a value. */
+    readonly host?: string | null;
+    /** It signs in with a vault connection. */
+    readonly connection?: boolean;
+    /** Explicit: true — real values (an HTTP tool: only to a host its URL fixes); false — the tokens, whatever else holds. */
+    readonly sendRealValues?: boolean;
+}
 /** Primitive field types accepted in a process definition. */
 type ProcessFieldType = 'string' | 'string[]' | 'number' | 'boolean' | 'datetime' | 'email' | 'phone';
 interface ProcessField {
@@ -2300,6 +2338,11 @@ interface ConnectorInstance<TName extends string = string, TApi = unknown> {
     readonly api: TApi;
     /** If true, every method on `api` becomes an LLM-callable tool. */
     readonly expose?: boolean;
+    /**
+     * Its exposed tools get the caller's real values in place of the call's PII tokens (`<PII_PHONE_1>`) — a connector
+     * is your code. `false` keeps the tokens. (burn-down G-33 — test/tool-detokenise.test.ts)
+     */
+    readonly sendRealValues?: boolean;
 }
 type ComplianceTag = 'tcpa' | 'hipaa' | 'pci' | 'gdpr' | 'soc2';
 /**
@@ -2525,10 +2568,16 @@ interface EndCallPolicy {
 }
 type ShorthandPrimitive = 'string' | 'number' | 'boolean';
 type ToolInputShape = Record<string, ShorthandPrimitive> | z.ZodTypeAny;
+/** What the runtime tells a tool about the input it hands it (burn-down G-33). */
+interface ToolRunInfo {
+    /** The call's PII tokens in the input were swapped for the caller's real values: a request built from it is
+     *  sensitive — never let a redirect carry it to another origin (`httpTool` refuses one). */
+    readonly carriesRealValues: boolean;
+}
 interface ToolDefinition<I = unknown, R = unknown> {
     readonly description: string;
     readonly input: ToolInputShape;
-    readonly run: (input: I, ctx: AgentContext) => Promise<R> | R;
+    readonly run: (input: I, ctx: AgentContext, info?: ToolRunInfo) => Promise<R> | R;
     /**
      * Capability this tool requires. Action Guard hard-blocks the call if not
      * declared (PRD §B.5 — "no soft failures, ever"). Defaults to
@@ -2537,6 +2586,19 @@ interface ToolDefinition<I = unknown, R = unknown> {
      * for centralised policy.
      */
     readonly capability?: string;
+    /**
+     * The model reads the caller's PII as tokens (`<PII_PHONE_1>`); the platform swaps them back for the real values in a
+     * tool's arguments right before it runs, only where the destination is trusted (burn-down G-33). A code tool — this
+     * one, run in your worker — gets the real values by default; `false` keeps the tokens. An HTTP tool gets tokens
+     * unless it signs in with a vault connection or is `true` — and `true` counts only when its URL fixes the host.
+     * (test/tool-detokenise.test.ts)
+     */
+    readonly sendRealValues?: boolean;
+    /**
+     * Where the arguments go, for the trust rule above — set by the SDK's own builders (`httpTool`, dashboard registry
+     * tools, a flow's tools). Unset: the tool is your code.
+     */
+    readonly destination?: ToolDestination;
 }
 /**
  * Optional security adapters. The SDK always enforces the local-only synchronous
@@ -2792,6 +2854,8 @@ interface AgentToolSpec {
     readonly name: string;
     readonly description: string;
     readonly input: Record<string, 'string' | 'number' | 'boolean'>;
+    /** Where its arguments go — for the tool boundary's trust rule (burn-down G-33); never shown to the model. */
+    readonly destination?: ToolDestination;
 }
 interface AgentToolCall {
     readonly name: string;
@@ -2895,11 +2959,34 @@ type ToolExecutor = (req: {
     readonly input?: Record<string, unknown>;
     readonly auth?: 'connection';
     readonly connectionRef?: string;
+    /** The input holds the caller's real values (G-33): the executor refuses a redirect to another origin. */
+    readonly carriesRealValues?: boolean;
 }) => Promise<{
     readonly ok: boolean;
     readonly status: number;
     readonly data: unknown;
 }>;
+/** Send an email step's email through the workspace's email (burn-down G-22): From checked against the workspace's
+ *  verified sending domains, wallet-admitted, metered. Never a send from the worker itself — on voice it is
+ *  POST /v1/email/send under the call's own project identity; on text, the API's in-process funnel. */
+type EmailResolver = (req: {
+    readonly to: string;
+    readonly subject: string;
+    readonly text: string;
+    readonly from?: string;
+    readonly fromName?: string;
+    readonly replyTo?: string;
+}, opts?: {
+    /** Aborted when the step stops waiting (its timeout): the request is cancelled, not left running. */
+    readonly signal?: AbortSignal;
+}) => Promise<{
+    readonly ok: true;
+    readonly emailId: string;
+} | {
+    readonly ok: false;
+    readonly error: string;
+    readonly detail?: string;
+}>;
 /** Evaluate a sandboxed code/expression node (server-side; never on the call path). */
 type CodeResolver = (src: {
     readonly expression: string;
@@ -2943,7 +3030,11 @@ type PlaybookResolver = (name: string) => Promise<{
  *  the server-side endpoint, so the URL/credential never reach this worker. */
 interface RegistryToolsResolver {
     catalog(): Promise<ReadonlyArray<AgentToolSpec>>;
-    run(name: string, args: Record<string, unknown>): Promise<{
+    run(name: string, args: Record<string, unknown>,
+    /** carriesRealValues: the args hold the caller's real values (G-33) — the server refuses a cross-origin redirect. */
+    opts?: {
+        readonly carriesRealValues?: boolean;
+    }): Promise<{
         ok: boolean;
         status: number;
         data: unknown;
@@ -2953,6 +3044,13 @@ interface RegistryToolsResolver {
  *  interpreter can run inline. null when the referenced flow isn't found / unpublished
  *  (the subflow executor then degrades to a recorded no-op and advances). */
 type FlowResolver = (ref: string) => Promise<FlowProgram | null>;
+/** The tool boundary's rule for a graph tool step's inputs (G-33, #18): `params` as `destination` may receive them, and
+ *  whether they carry the caller's real values (the request then refuses a redirect to another origin). */
+type ToolInputsPolicy = (params: Record<string, unknown>, destination: ToolDestination) => {
+    readonly params: Record<string, unknown>;
+    readonly carriesRealValues: boolean;
+    readonly trusted: boolean;
+};
 /** Side-effect surface injected once by runFlowProgram. Every member is optional;
  *  a missing resolver makes its executor degrade to a recorded no-op (never throws,
  *  never blocks the call). Kept off AgentContext so the contract stays small and
@@ -2963,6 +3061,8 @@ interface GraphResolvers {
     /** Server-side SSRF-guarded HTTP tool executor (tool node). When present the
      *  tool executor routes through it instead of fetching locally. */
     readonly toolExecutor?: ToolExecutor;
+    /** The workspace's email (email node). Absent → the step takes Couldn't send. */
+    readonly email?: EmailResolver;
     readonly code?: CodeResolver;
     readonly classify?: ClassifyResolver;
     readonly playbooks?: PlaybookResolver;
@@ -2971,8 +3071,22 @@ interface GraphResolvers {
     readonly agentRunner?: AgentRunner;
     /** Name-referenced project tool registry (catalog + server-side execute). */
     readonly registryTools?: RegistryToolsResolver;
+    /** The tool boundary's rule for a graph tool step's inputs where the run has no SecurityPrimitive of its own (a flow
+     *  over text in the API — one destination, one treatment, on every surface: #18). A call's own guard wins. */
+    readonly toolInputs?: ToolInputsPolicy;
+    /** What the caller said, fed by the text driver on every caller message — the boundary tokenises for an untrusted
+     *  tool only values the caller said (`SecurityPrimitive.noteCallerText`, G-33 final review). */
+    readonly noteCallerText?: (text: string) => void;
 }
+/**
+ * One conversation's Email-step sends, never sent twice (burn-down G-22): an exact repeat (same recipient, subject and
+ * body — a caller looping the flow, or a retry edge after a timeout) gets the first send's result, or waits for it
+ * while it's in flight. A send whose outcome is unknown (timed out) stays recorded; only a refusal that sent nothing
+ * lets the same email be tried again. Build one per conversation. How MANY a conversation may send (3) is the API's
+ * cap, kept in Valkey by the conversation id, so it survives a worker restart.
+ */
+declare function dedupeConversationEmails(resolver: EmailResolver): EmailResolver;
 /** A library playbook as GET /v1/playbooks (and the API's PlaybooksService) lists it — the fields a flow reads. */
 interface PlaybookLibraryEntry {
     readonly name: string;
@@ -3130,4 +3244,4 @@ type RunLiveTextOptions = Omit<RunTextSessionOptions, 'onAgentText' | 'onAwaitIn
  *  interpreter blocks for the next message, or the flow ends. */
 declare function runLiveTextConversation(opts: RunLiveTextOptions): LiveTextConversation;
-export { NON_BUSY_STATES as $, AgentEnvironment as A, type DtmfHandler as B, type ConnectorInstance as C, type DtmfEvent as D, type EndCallControllerHandle as E, type EndCallInfo as F, type EndCallOutcome as G, type HandoffConfig as H, type EndCallPolicy as I, type EndCallTrigger as J, type EndpointingConfig as K, type LLMProvider as L, type ModelConfig as M, type FakeSessionAdapter as N, type FloorControlConfig as O, ProcessSchemaDTO as P, type InboundOptions as Q, type ReadinessProbe as R, type STTProvider as S, type TTSProvider as T, type InferProcessData as U, type VADProvider as V, type InterruptionConfig as W, LK_AGENT_STATE_MAP as X, type MemoryHandle as Y, type MemoryScope as Z, type MetricsEvent as _, type AgentLifecycleEvent as a, urlProbe as a$, type Participant as a0, ParticipantId as a1, type ParticipantKind as a2, type ParticipantSet as a3, type ParticipantsConfig as a4, type ProcessBackendAck as a5, type ProcessFieldType as a6, type ProcessSnapshot as a7, type ReadinessReport as a8, type ReadinessResult as a9, type TriggerAction as aA, type TriggerCondition as aB, type TtsVoiceConfig as aC, type TurnEvent as aD, type Unsubscribe as aE, type UserInputEvent as aF, type UserStateEvent as aG, type UserTurn as aH, VoiceLayerAuthError as aI, VoiceLayerError as aJ, VoiceLayerHttpError as aK, VoiceLayerNetworkError as aL, VoiceLayerValidationError as aM, applySpeechTurnHandling as aN, asyncProbe as aO, defineProcess as aP, dtmfCodeToDigit as aQ, dtmfDigitToCode as aR, duck as aS, envProbe as aT, mute as aU, normalizeState as aV, passthrough as aW, runProbes as aX, runTextSession as aY, runTextTranscript as aZ, transform as a_, type RespondOptions as aa, type Room as ab, type RouteEntry as ac, type RoutingRule as ad, type RoutingSnapshot as ae, type RunTextSessionOptions as af, type RunTextTranscriptOptions as ag, type SayOptions as ah, type SecurityConfig as ai, type SendDtmfOptions as aj, type SessionAdapter as ak, type SessionCapabilities as al, type SessionErrorEvent as am, type SessionEvent as an, type SessionEventMap as ao, type SessionFactory as ap, type SessionFactoryInput as aq, type SessionOutbound as ar, type SessionState as as, type ShorthandPrimitive as at, type SpeechResult as au, type SpeechTarget as av, type StateChangeEvent as aw, type TextSession as ax, type TextTranscriptResult as ay, type ToolInputShape as az, AgentDTO as b, type FlowResolver as b0, type GraphResolvers as b1, type GraphTraceEvent as b2, type KnowledgeResolver as b3, type LiveTextConversation as b4, type LiveTurnResult as b5, type PlaybookLibraryEntry as b6, type PlaybookResolver as b7, type RegistryToolsResolver as b8, type RunLiveTextOptions as b9, denyPrivateNetwork as ba, privateNetworkOptInHonoured as bb, runLiveTextConversation as bc, runWithOpenAIScope as bd, toPlaybookResolution as be, type AgentEventEmitter as c, type AgentContext as d, type AgentConfig as e, type ProcessField as f, type ProviderFactory as g, type RealtimeProvider as h, type TurnDetectorProvider as i, type ProcessDefinition as j, type TriggerDefinition as k, type MemoryConfig as l, type ToolDefinition as m, type SpeechConfig as n, type ToolExecutor as o, type HostLookup as p, type AgentEventListener as q, type AgentTurnEvent as r, type AudioProfile as s, type AudioSurface as t, type CallInfo as u, type CallOutcomeSummary as v, type ChannelKind as w, type CompletionStrategy as x, type ComplianceTag as y, ConsultationPolicy as z };
+export { type MetricsEvent as $, AgentEnvironment as A, ConsultationPolicy as B, type ConnectorInstance as C, type DtmfEvent as D, type DtmfHandler as E, type EndCallControllerHandle as F, type EndCallInfo as G, type HandoffConfig as H, type EndCallOutcome as I, type EndCallPolicy as J, type EndCallTrigger as K, type LLMProvider as L, type ModelConfig as M, type EndpointingConfig as N, type FakeSessionAdapter as O, ProcessSchemaDTO as P, type FloorControlConfig as Q, type ReadinessProbe as R, type STTProvider as S, type ToolDefinition as T, type InboundOptions as U, type VADProvider as V, type InferProcessData as W, type InterruptionConfig as X, LK_AGENT_STATE_MAP as Y, type MemoryHandle as Z, type MemoryScope as _, type AgentLifecycleEvent as a, transform as a$, NON_BUSY_STATES as a0, type Participant as a1, ParticipantId as a2, type ParticipantKind as a3, type ParticipantSet as a4, type ParticipantsConfig as a5, type ProcessBackendAck as a6, type ProcessFieldType as a7, type ProcessSnapshot as a8, type ReadinessReport as a9, type ToolInputShape as aA, type TriggerAction as aB, type TriggerCondition as aC, type TtsVoiceConfig as aD, type TurnEvent as aE, type Unsubscribe as aF, type UserInputEvent as aG, type UserStateEvent as aH, type UserTurn as aI, VoiceLayerAuthError as aJ, VoiceLayerError as aK, VoiceLayerHttpError as aL, VoiceLayerNetworkError as aM, VoiceLayerValidationError as aN, applySpeechTurnHandling as aO, asyncProbe as aP, defineProcess as aQ, dtmfCodeToDigit as aR, dtmfDigitToCode as aS, duck as aT, envProbe as aU, mute as aV, normalizeState as aW, passthrough as aX, runProbes as aY, runTextSession as aZ, runTextTranscript as a_, type ReadinessResult as aa, type RespondOptions as ab, type Room as ac, type RouteEntry as ad, type RoutingRule as ae, type RoutingSnapshot as af, type RunTextSessionOptions as ag, type RunTextTranscriptOptions as ah, type SayOptions as ai, type SecurityConfig as aj, type SendDtmfOptions as ak, type SessionAdapter as al, type SessionCapabilities as am, type SessionErrorEvent as an, type SessionEvent as ao, type SessionEventMap as ap, type SessionFactory as aq, type SessionFactoryInput as ar, type SessionOutbound as as, type SessionState as at, type ShorthandPrimitive as au, type SpeechResult as av, type SpeechTarget as aw, type StateChangeEvent as ax, type TextSession as ay, type TextTranscriptResult as az, AgentDTO as b, urlProbe as b0, type EmailResolver as b1, type FlowResolver as b2, type GraphResolvers as b3, type GraphTraceEvent as b4, type KnowledgeResolver as b5, type LiveTextConversation as b6, type LiveTurnResult as b7, type PlaybookLibraryEntry as b8, type PlaybookResolver as b9, type RegistryToolsResolver as ba, type RunLiveTextOptions as bb, dedupeConversationEmails as bc, denyPrivateNetwork as bd, privateNetworkOptInHonoured as be, runLiveTextConversation as bf, runWithOpenAIScope as bg, toPlaybookResolution as bh, type AgentEventEmitter as c, type AgentConfig as d, type ProcessField as e, type ProviderFactory as f, type TTSProvider as g, type RealtimeProvider as h, type TurnDetectorProvider as i, type ProcessDefinition as j, type TriggerDefinition as k, type MemoryConfig as l, type SpeechConfig as m, type ToolExecutor as n, type AgentContext as o, type ToolRunInfo as p, type HostLookup as q, type AgentEventListener as r, type AgentTurnEvent as s, type AudioProfile as t, type AudioSurface as u, type CallInfo as v, type CallOutcomeSummary as w, type ChannelKind as x, type CompletionStrategy as y, type ComplianceTag as z };