@voicelayer/sdk 0.5.1 → 0.6.0

package/dist/brain/index.js

@@ -628,7 +628,15 @@ var ProcessToolDTO = z.object({
    * Self-hosted workers only: allow a private / loopback address (a localhost service of your own). A platform
    * worker (it holds the internal service token) never honours it.
    */
-  allowPrivateNetwork: z.boolean().optional()
+  allowPrivateNetwork: z.boolean().optional(),
+  /**
+   * Burn-down G-33: the model reads the caller's PII as tokens (`<PII_PHONE_1>`). `true` — this tool's arguments carry
+   * the caller's real values instead, when its URL fixes the host (publish refuses it on a host the call fills in).
+   * Absent — real values only when it signs in with a connection; otherwise the endpoint gets the tokens. `false` —
+   * always the tokens.
+   * (packages/sdk/test/tool-detokenise.test.ts)
+   */
+  sendRealValues: z.boolean().optional()
 });
 var ProcessSchemaDTO = z.object({
   id: z.string().min(1).max(64),
@@ -1188,8 +1196,14 @@ var AgentConfig = z.object({
   // collects nothing structured. DERIVED from the agents row; read-only.
   requiredInfo: z.array(RequiredInfoField).max(64).default([]),
   createdAt: z.string().datetime(),
-  // Optimistic-lock token. PATCH must echo this in If-Match.
-  updatedAt: z.string().datetime()
+  // On the draft view: when the draft row last changed. On the published view (GET /config's default): when what runs
+  // last changed — the published version's createdAt. Only the draft's is the PATCH lock token: send draftUpdatedAt.
+  updatedAt: z.string().datetime(),
+  // The optimistic-lock token PATCH /v1/agents/:id/config checks (If-Match; also sent, quoted, as the ETag): the DRAFT
+  // row's updatedAt. Always on the draft view; on the published view only while the draft equals what's published —
+  // otherwise absent, and an editor reads ?view=draft, so it never writes over unpublished changes it didn't see
+  // (burn-down G-37). A projection of the existing column, not a stored field (agents DECISIONS A-7 stands).
+  draftUpdatedAt: z.string().datetime().optional()
 });
 
 // ../contracts/src/call-plan.ts
@@ -1522,21 +1536,27 @@ z.object({
 
 // ../contracts/src/providers.ts
 var PROVIDERS = {
-  openai: { id: "openai", label: "OpenAI", capabilities: ["llm", "tts", "realtime"], byok: true, supportsBaseUrl: true, keyPlaceholder: "sk-..." },
-  anthropic: { id: "anthropic", label: "Anthropic", capabilities: ["llm"], byok: true, supportsBaseUrl: true, keyPlaceholder: "sk-ant-..." },
-  deepgram: { id: "deepgram", label: "Deepgram", capabilities: ["stt", "tts"], byok: true, supportsBaseUrl: false, keyPlaceholder: "Deepgram API key" },
-  elevenlabs: { id: "elevenlabs", label: "ElevenLabs", capabilities: ["tts"], byok: true, supportsBaseUrl: false, keyPlaceholder: "ElevenLabs API key" },
-  cartesia: { id: "cartesia", label: "Cartesia", capabilities: ["stt", "tts"], byok: true, supportsBaseUrl: false, keyPlaceholder: "Cartesia API key" },
-  assemblyai: { id: "assemblyai", label: "AssemblyAI", capabilities: ["stt"], byok: true, supportsBaseUrl: false, keyPlaceholder: "AssemblyAI API key" },
-  google: { id: "google", label: "Google (Gemini)", capabilities: ["llm", "realtime"], byok: true, supportsBaseUrl: false, keyPlaceholder: "AIza..." },
-  groq: { id: "groq", label: "Groq", capabilities: ["llm"], byok: true, supportsBaseUrl: true, keyPlaceholder: "gsk_..." },
+  openai: { id: "openai", label: "OpenAI", capabilities: ["llm", "tts", "realtime"], byok: true, supportsBaseUrl: true, keyPlaceholder: "sk-...", runsOn: { llm: ["voice", "text"], tts: ["voice"], realtime: ["voice"] }, platformKeyEnv: "OPENAI_API_KEY" },
+  // No platform runtime: LiveKit's anthropic plugin needs @livekit/agents >= 1.5 (the workers pin 1.4.0 — the 1.7 audio
+  // regression), and the API's text replies run OpenAI only (burn-down G-9).
+  anthropic: { id: "anthropic", label: "Anthropic", capabilities: ["llm"], byok: true, supportsBaseUrl: true, keyPlaceholder: "sk-ant-...", runsOn: { llm: [] }, platformKeyEnv: "ANTHROPIC_API_KEY" },
+  deepgram: { id: "deepgram", label: "Deepgram", capabilities: ["stt", "tts"], byok: true, supportsBaseUrl: false, keyPlaceholder: "Deepgram API key", runsOn: { stt: ["voice"], tts: ["voice"] }, platformKeyEnv: "DEEPGRAM_API_KEY" },
+  elevenlabs: { id: "elevenlabs", label: "ElevenLabs", capabilities: ["tts"], byok: true, supportsBaseUrl: false, keyPlaceholder: "ElevenLabs API key", runsOn: { tts: ["voice"] }, platformKeyEnv: "ELEVEN_API_KEY" },
+  // Cartesia's LiveKit plugin (1.4.0) ships TTS only: its speech-to-text has no runtime.
+  cartesia: { id: "cartesia", label: "Cartesia", capabilities: ["stt", "tts"], byok: true, supportsBaseUrl: false, keyPlaceholder: "Cartesia API key", runsOn: { stt: [], tts: ["voice"] }, platformKeyEnv: "CARTESIA_API_KEY" },
+  assemblyai: { id: "assemblyai", label: "AssemblyAI", capabilities: ["stt"], byok: true, supportsBaseUrl: false, keyPlaceholder: "AssemblyAI API key", runsOn: { stt: ["voice"] }, platformKeyEnv: "ASSEMBLYAI_API_KEY" },
+  // Gemini on text waits on burn-down G-9 (the API's text replies run OpenAI only).
+  google: { id: "google", label: "Google (Gemini)", capabilities: ["llm", "realtime"], byok: true, supportsBaseUrl: false, keyPlaceholder: "AIza...", runsOn: { llm: ["voice"], realtime: ["voice"] }, platformKeyEnv: "GOOGLE_API_KEY" },
+  groq: { id: "groq", label: "Groq", capabilities: ["llm"], byok: true, supportsBaseUrl: true, keyPlaceholder: "gsk_...", runsOn: { llm: [] }, platformKeyEnv: "GROQ_API_KEY" },
   // Runtime-only providers (no external key): local VAD.
-  silero: { id: "silero", label: "Silero", capabilities: ["vad"], byok: false, supportsBaseUrl: false }
+  silero: { id: "silero", label: "Silero", capabilities: ["vad"], byok: false, supportsBaseUrl: false, runsOn: { vad: ["voice"] } }
 };
 function byokProviders() {
   return Object.values(PROVIDERS).filter((p) => p.byok);
 }
 var ProviderKind = z.enum(["llm", "stt", "tts", "realtime"]);
+var ModelSurface = z.enum(["voice", "text"]);
+var ProviderKeySource = z.enum(["workspace", "platform", "none"]);
 var CatalogVoice = z.object({
   id: z.string().min(1).max(128),
   label: z.string().min(1).max(128),
@@ -1570,7 +1590,12 @@ var CatalogProvider = z.object({
   // Populated for tts / realtime providers.
   voices: z.array(CatalogVoice).optional(),
   // Pre-selected when the provider is chosen.
-  defaultModel: z.string().max(128).optional()
+  defaultModel: z.string().max(128).optional(),
+  // The surfaces the platform runs this provider's models on (contracts PROVIDERS `runsOn`). A picker offers the
+  // provider only for a surface listed here; absent means none, so an unrunnable provider is never offered by default.
+  surfaces: z.array(ModelSurface).default([]),
+  // Whose key this provider would run on for the requesting workspace; unknown means none.
+  key: ProviderKeySource.default("none")
 });
 z.object({
   llm: z.array(CatalogProvider).default([]),
@@ -1625,8 +1650,26 @@ z.object({
   // The assumptions actually used (after defaults) — drives the UI footnote.
   assumptions: CostEstimateAssumptions.required()
 });
+
+// ../contracts/src/openai-models.ts
+function categorizeOpenAiModel(id) {
+  const s = id.toLowerCase();
+  if (s.includes("realtime")) return "realtime";
+  if (s.includes("transcribe") || s.includes("whisper")) return "stt";
+  if (s.includes("tts") || s.includes("audio-speech")) return "tts";
+  if (/embedding|moderation|dall-e|image|^omni-|^text-|search|rerank|babbage|davinci|codex/.test(s)) {
+    return null;
+  }
+  if (/-pro\b|deep-research|computer-use/.test(s)) return null;
+  if (/^(gpt|o[0-9]|chatgpt)/.test(s)) return "llm";
+  return null;
+}
+function isOpenAiChatModel(id) {
+  return categorizeOpenAiModel(id) === "llm";
+}
 var EvaluationMetric = z.enum(["rating", "binary", "options", "text"]);
 var EvaluationStatus = z.enum(["pending", "scored", "failed"]);
+var EvaluationJudgeModel = z.string().min(1).max(128).refine(isOpenAiChatModel, { message: "The judge runs OpenAI chat models only (e.g. gpt-4o-mini)." });
 var EvaluationOption = z.object({
   value: z.string().min(1).max(64),
   label: z.string().min(1).max(120),
@@ -1638,6 +1681,7 @@ z.object({
   name: z.string().min(1).max(120),
   criteria: z.string().max(4e3),
   metric: EvaluationMetric,
+  // a stored row may predate the judge-model rule; it is judged on the default (EVALUATION_JUDGE_SUGGESTIONS)
   model: z.string().min(1).max(128),
   minValue: z.number().int().nullable(),
   minLabel: z.string().nullable(),
@@ -1653,7 +1697,7 @@ var EvaluationInput = z.object({
   name: z.string().min(1).max(120),
   criteria: z.string().max(4e3).default(""),
   metric: EvaluationMetric.default("rating"),
-  model: z.string().min(1).max(128).default("gpt-4o-mini"),
+  model: EvaluationJudgeModel.default("gpt-4o-mini"),
   minValue: z.number().int().nullable().optional(),
   minLabel: z.string().max(200).nullable().optional(),
   maxValue: z.number().int().nullable().optional(),
@@ -1815,7 +1859,10 @@ var ToolCallAudit = z.object({
   ok: z.boolean(),
   // refused by the Action Guard before it ran
   blocked: z.boolean(),
-  errorMessage: z.string().optional()
+  errorMessage: z.string().optional(),
+  // Burn-down G-33: the call's PII tokens swapped back for the caller's real values in this tool's arguments (it went to
+  // a trusted destination) — how many, and the host they went to (null: the agent's own code). Never a value.
+  detokenized: z.object({ count: z.number().int().min(1), destinationHost: z.string().nullable() }).optional()
 });
 var McpInteractionAudit = z.object({
   // One of the four runtime tools — closed set, no growth allowed.
@@ -2481,7 +2528,14 @@ z.discriminatedUnion("kind", [
   BrainRequestFrame,
   BrainCancelFrame
 ]);
-var FLOW_BOOT_FAILURES = ["schema_fetch_failed", "no_process_schema", "missing_agent_id", "no_api_key", "worker_identity_refused"];
+var FLOW_BOOT_FAILURES = [
+  "schema_fetch_failed",
+  "no_process_schema",
+  "missing_agent_id",
+  "no_api_key",
+  "worker_identity_refused",
+  "provider_unavailable"
+];
 z.enum(
   FLOW_BOOT_FAILURES.map((cause) => `flow_boot:${cause}`)
 );

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { A as AgentEnvironment, P as ProcessSchemaDTO, R as ReadinessProbe, a as AgentLifecycleEvent, b as AgentDTO, c as AgentEventEmitter, d as AgentContext, e as AgentConfig$1, f as ProcessField, M as ModelConfig, C as ConnectorInstance, g as ProviderFactory, S as STTProvider, T as TTSProvider, L as LLMProvider, h as RealtimeProvider, i as TurnDetectorProvider, V as VADProvider, j as ProcessDefinition, k as TriggerDefinition, H as HandoffConfig, l as MemoryConfig, m as ToolDefinition$1, n as SpeechConfig, o as ToolExecutor, p as HostLookup } from './text-session-BbG3VG50.js';
-export { q as AgentEventListener, r as AgentTurnEvent, s as AudioProfile, t as AudioSurface, u as CallInfo, v as CallOutcomeSummary, w as ChannelKind, x as CompletionStrategy, y as ComplianceTag, z as ConsultationPolicy, D as DtmfEvent, B as DtmfHandler, E as EndCallControllerHandle, F as EndCallInfo, G as EndCallOutcome, I as EndCallPolicy, J as EndCallTrigger, K as EndpointingConfig, N as FakeSessionAdapter, O as FloorControlConfig, Q as InboundOptions, U as InferProcessData, W as InterruptionConfig, X as LK_AGENT_STATE_MAP, Y as MemoryHandle, Z as MemoryScope, _ as MetricsEvent, $ as NON_BUSY_STATES, a0 as Participant, a1 as ParticipantId, a2 as ParticipantKind, a3 as ParticipantSet, a4 as ParticipantsConfig, a5 as ProcessBackendAck, a6 as ProcessFieldType, a7 as ProcessSnapshot, a8 as ReadinessReport, a9 as ReadinessResult, aa as RespondOptions, ab as Room, ac as RouteEntry, ad as RoutingRule, ae as RoutingSnapshot, af as RunTextSessionOptions, ag as RunTextTranscriptOptions, ah as SayOptions, ai as SecurityConfig, aj as SendDtmfOptions, ak as SessionAdapter, al as SessionCapabilities, am as SessionErrorEvent, an as SessionEvent, ao as SessionEventMap, ap as SessionFactory, aq as SessionFactoryInput, ar as SessionOutbound, as as SessionState, at as ShorthandPrimitive, au as SpeechResult, av as SpeechTarget, aw as StateChangeEvent, ax as TextSession, ay as TextTranscriptResult, az as ToolInputShape, aA as TriggerAction, aB as TriggerCondition, aC as TtsVoiceConfig, aD as TurnEvent, aE as Unsubscribe, aF as UserInputEvent, aG as UserStateEvent, aH as UserTurn, aI as VoiceLayerAuthError, aJ as VoiceLayerError, aK as VoiceLayerHttpError, aL as VoiceLayerNetworkError, aM as VoiceLayerValidationError, aN as applySpeechTurnHandling, aO as asyncProbe, aP as defineProcess, aQ as dtmfCodeToDigit, aR as dtmfDigitToCode, aS as duck, aT as envProbe, aU as mute, aV as normalizeState, a1 as participantId, aW as passthrough, aX as runProbes, aY as runTextSession, aZ as runTextTranscript, a_ as transform, a$ as urlProbe } from './text-session-BbG3VG50.js';
+import { A as AgentEnvironment, P as ProcessSchemaDTO, R as ReadinessProbe, a as AgentLifecycleEvent, b as AgentDTO, c as AgentEventEmitter, T as ToolDefinition, d as AgentConfig$1, e as ProcessField, M as ModelConfig, C as ConnectorInstance, f as ProviderFactory, S as STTProvider, g as TTSProvider, L as LLMProvider, h as RealtimeProvider, i as TurnDetectorProvider, V as VADProvider, j as ProcessDefinition, k as TriggerDefinition, H as HandoffConfig, l as MemoryConfig, m as SpeechConfig, n as ToolExecutor, o as AgentContext, p as ToolRunInfo, q as HostLookup } from './text-session-CoyEcdmg.js';
+export { r as AgentEventListener, s as AgentTurnEvent, t as AudioProfile, u as AudioSurface, v as CallInfo, w as CallOutcomeSummary, x as ChannelKind, y as CompletionStrategy, z as ComplianceTag, B as ConsultationPolicy, D as DtmfEvent, E as DtmfHandler, F as EndCallControllerHandle, G as EndCallInfo, I as EndCallOutcome, J as EndCallPolicy, K as EndCallTrigger, N as EndpointingConfig, O as FakeSessionAdapter, Q as FloorControlConfig, U as InboundOptions, W as InferProcessData, X as InterruptionConfig, Y as LK_AGENT_STATE_MAP, Z as MemoryHandle, _ as MemoryScope, $ as MetricsEvent, a0 as NON_BUSY_STATES, a1 as Participant, a2 as ParticipantId, a3 as ParticipantKind, a4 as ParticipantSet, a5 as ParticipantsConfig, a6 as ProcessBackendAck, a7 as ProcessFieldType, a8 as ProcessSnapshot, a9 as ReadinessReport, aa as ReadinessResult, ab as RespondOptions, ac as Room, ad as RouteEntry, ae as RoutingRule, af as RoutingSnapshot, ag as RunTextSessionOptions, ah as RunTextTranscriptOptions, ai as SayOptions, aj as SecurityConfig, ak as SendDtmfOptions, al as SessionAdapter, am as SessionCapabilities, an as SessionErrorEvent, ao as SessionEvent, ap as SessionEventMap, aq as SessionFactory, ar as SessionFactoryInput, as as SessionOutbound, at as SessionState, au as ShorthandPrimitive, av as SpeechResult, aw as SpeechTarget, ax as StateChangeEvent, ay as TextSession, az as TextTranscriptResult, aA as ToolInputShape, aB as TriggerAction, aC as TriggerCondition, aD as TtsVoiceConfig, aE as TurnEvent, aF as Unsubscribe, aG as UserInputEvent, aH as UserStateEvent, aI as UserTurn, aJ as VoiceLayerAuthError, aK as VoiceLayerError, aL as VoiceLayerHttpError, aM as VoiceLayerNetworkError, aN as VoiceLayerValidationError, aO as applySpeechTurnHandling, aP as asyncProbe, aQ as defineProcess, aR as dtmfCodeToDigit, aS as dtmfDigitToCode, aT as duck, aU as envProbe, aV as mute, aW as normalizeState, a2 as participantId, aX as passthrough, aY as runProbes, aZ as runTextSession, a_ as runTextTranscript, a$ as transform, b0 as urlProbe } from './text-session-CoyEcdmg.js';
 import { z, ZodType } from 'zod';
 import { O as OnQuery, B as BrainTransport } from './types-KqrAfY85.js';
 export { a as BrainCallMetadata, b as BrainCapabilities, c as BrainChunk, d as BrainMessage, e as BrainRequest, f as OnQueryContext, g as OnQueryResult } from './types-KqrAfY85.js';
@@ -470,6 +470,7 @@ declare const CallPlan: z.ZodObject<{
             enum?: string[] | undefined;
             description?: string | undefined;
         }>, "many">>>;
+        draftUpdatedAt: z.ZodOptional<z.ZodOptional<z.ZodString>>;
     }, "strip", z.ZodTypeAny, {
         stt?: {
             provider: "deepgram" | "cartesia" | "assemblyai";
@@ -569,6 +570,7 @@ declare const CallPlan: z.ZodObject<{
             enum?: string[] | undefined;
             description?: string | undefined;
         }[] | undefined;
+        draftUpdatedAt?: string | undefined;
     }, {
         stt?: {
             provider: "deepgram" | "cartesia" | "assemblyai";
@@ -668,6 +670,7 @@ declare const CallPlan: z.ZodObject<{
             enum?: string[] | undefined;
             description?: string | undefined;
         }[] | undefined;
+        draftUpdatedAt?: string | undefined;
     }>>;
     openQuestions: z.ZodDefault<z.ZodArray<z.ZodObject<{
         id: z.ZodString;
@@ -838,6 +841,7 @@ declare const CallPlan: z.ZodObject<{
             enum?: string[] | undefined;
             description?: string | undefined;
         }[] | undefined;
+        draftUpdatedAt?: string | undefined;
     };
     openQuestions: {
         kind: "decision" | "auth" | "fact";
@@ -978,6 +982,7 @@ declare const CallPlan: z.ZodObject<{
             enum?: string[] | undefined;
             description?: string | undefined;
         }[] | undefined;
+        draftUpdatedAt?: string | undefined;
     } | undefined;
     openQuestions?: {
         kind: "decision" | "auth" | "fact";
@@ -1402,6 +1407,7 @@ declare const AgentConfig: z.ZodObject<{
     }>, "many">>;
     createdAt: z.ZodString;
     updatedAt: z.ZodString;
+    draftUpdatedAt: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
     voice: {
         provider: "deepgram" | "elevenlabs" | "openai" | "cartesia";
@@ -1505,6 +1511,7 @@ declare const AgentConfig: z.ZodObject<{
     tags?: string[] | undefined;
     brainConnectorId?: string | null | undefined;
     modeLocked?: boolean | undefined;
+    draftUpdatedAt?: string | undefined;
 }, {
     voice: {
         provider: "deepgram" | "elevenlabs" | "openai" | "cartesia";
@@ -1608,10 +1615,11 @@ declare const AgentConfig: z.ZodObject<{
         enum?: string[] | undefined;
         description?: string | undefined;
     }[] | undefined;
+    draftUpdatedAt?: string | undefined;
 }>;
 type AgentConfig = z.infer<typeof AgentConfig>;
 
-declare const AgentEndReason: z.ZodEnum<["flow_boot:schema_fetch_failed" | "flow_boot:no_process_schema" | "flow_boot:missing_agent_id" | "flow_boot:no_api_key" | "flow_boot:worker_identity_refused", ...("flow_boot:schema_fetch_failed" | "flow_boot:no_process_schema" | "flow_boot:missing_agent_id" | "flow_boot:no_api_key" | "flow_boot:worker_identity_refused")[]]>;
+declare const AgentEndReason: z.ZodEnum<["flow_boot:schema_fetch_failed" | "flow_boot:no_process_schema" | "flow_boot:missing_agent_id" | "flow_boot:no_api_key" | "flow_boot:worker_identity_refused" | "flow_boot:provider_unavailable", ...("flow_boot:schema_fetch_failed" | "flow_boot:no_process_schema" | "flow_boot:missing_agent_id" | "flow_boot:no_api_key" | "flow_boot:worker_identity_refused" | "flow_boot:provider_unavailable")[]]>;
 type AgentEndReason = z.infer<typeof AgentEndReason>;
 
 interface ApiCredential {
@@ -1886,6 +1894,7 @@ declare class AgentsClient {
                     headers?: Record<string, string> | undefined;
                     connectionRef?: string | undefined;
                     allowPrivateNetwork?: boolean | undefined;
+                    sendRealValues?: boolean | undefined;
                 }[] | undefined;
                 displayName?: string | undefined;
                 program?: {
@@ -2284,14 +2293,6 @@ declare function mergeMetadata(user: Record<string, unknown> | undefined, defaul
 type ShorthandPrimitive = 'string' | 'number' | 'boolean';
 /** What the user passes for a tool's input shape. */
 type ToolInputShape = Record<string, ShorthandPrimitive> | z.ZodTypeAny;
-interface ToolDefinition<I = unknown, R = unknown> {
-    readonly description: string;
-    readonly input: ToolInputShape;
-    /** Implementation. Receives parsed input and the agent context. */
-    readonly run: (input: I, ctx: AgentContext) => Promise<R> | R;
-    /** Capability required for Action Guard. Defaults to `tool.<name>`. */
-    readonly capability?: string;
-}
 
 interface ResendCredentials {
     /** Resend API key — find under "API Keys" in the Resend dashboard. */
@@ -2574,7 +2575,7 @@ interface CompiledAgentParts {
     readonly triggers?: Record<string, TriggerDefinition>;
     readonly handoff?: HandoffConfig;
     readonly memory?: MemoryConfig;
-    readonly tools?: Record<string, ToolDefinition$1>;
+    readonly tools?: Record<string, ToolDefinition>;
     /** Voice turn-taking from the flow's speech capability (schema.speech →
      *  AgentConfig.speech → applySpeechTurnHandling). */
     readonly speech?: SpeechConfig;
@@ -2720,7 +2721,9 @@ declare abstract class BaseTool<I = unknown, R = unknown> {
     abstract readonly description: string;
     abstract readonly input: ToolInputShape;
     readonly capability?: string;
-    abstract run(input: I, ctx: AgentContext): Promise<R> | R;
+    /** `false`: this tool gets the call's PII tokens, not the caller's real values (see ToolDefinition.sendRealValues). */
+    readonly sendRealValues?: boolean;
+    abstract run(input: I, ctx: AgentContext, info?: ToolRunInfo): Promise<R> | R;
     /** The ToolDefinition the runtime consumes. */
     toDefinition(): ToolDefinition<I, R>;
     /** `{ [name]: definition }` — spread straight into `defineAgent({ tools })`. */
@@ -2732,7 +2735,9 @@ declare function defineTool<I = unknown, R = unknown>(spec: {
     readonly description: string;
     readonly input: ToolInputShape;
     readonly capability?: string;
-    readonly run: (input: I, ctx: AgentContext) => Promise<R> | R;
+    /** `false`: this tool gets the call's PII tokens, not the caller's real values (see ToolDefinition.sendRealValues). */
+    readonly sendRealValues?: boolean;
+    readonly run: (input: I, ctx: AgentContext, info?: ToolRunInfo) => Promise<R> | R;
 }): Record<string, ToolDefinition>;
 interface HttpToolResult {
     readonly ok: boolean;
@@ -2763,17 +2768,13 @@ interface HttpToolSpec {
      * sets it, and its server-side executor has no such switch.
      */
     readonly allowPrivateNetwork?: boolean;
+    /**
+     * The model reads the caller's PII as tokens (`<PII_PHONE_1>`). `true`: this endpoint gets the caller's real values
+     * instead — only when `url` fixes the host (a `{placeholder}` in the host keeps the tokens), and a redirect to another
+     * origin is then refused. Otherwise it gets the tokens. (burn-down G-33 — test/tool-detokenise.test.ts)
+     */
+    readonly sendRealValues?: boolean;
 }
-/**
- * A config-only HTTP tool — no subclass needed for the common "call an API"
- * case. Use this for public/no-auth endpoints (e.g. an n8n webhook). Secrets
- * should NOT be inlined here; vault-backed credentials resolve server-side.
- *
- * Safe by default (runtime/safe-fetch.ts): http(s) only, never a private /
- * loopback / link-local / metadata address (checked again after DNS and on every
- * redirect hop), a timeout, and a capped body. A refused request is a failed
- * result `{ ok: false, status: 0, data: { kind: 'blocked', reason } }`, never a throw.
- */
 declare function httpTool(spec: HttpToolSpec): Record<string, ToolDefinition>;
 
-export { Agent, AgentConfig$1 as AgentConfig, AgentContext, AgentEventEmitter, AgentLifecycleEvent, type ApiCredential, type AppendDtmfEventInput, type AppendTranscriptInput, BaseTool, BrainTransport, type CallAttributeValue, type CallLegInput, type CallParticipantInput, type CallStatus, type CallSummary, CallsClient, type CompiledAgentParts, ConnectorInstance, type ConnectorLLMConfig, type CreateClientOptions, type CreatedFormSession, type DefaultMetadata, type DtmfDirection, EmailClient, type SendEmailInput as EmailSendInput, type EnsureCallByRoomInput, type ExchangeWorkerTokenInput, type CreateFormSessionInput as FormCreateInput, type FormToolsOptions, FormsClient, HandoffConfig, type HttpToolResult, type HttpToolSpec, LLMProvider, MemoryConfig, ModelConfig, OnQuery, type PipelineConfig, PlansClient, ProcessDefinition, ProcessField, type PronunciationDict, ProviderFactory, type PublicFormSessionView, ReadinessProbe, RealtimeProvider, type RegisterInput, type RegisterOptions, type RegisteredAgent, type ResendCredentials, type ResendEmailToolOptions, STTProvider, type SentEmail, SpeechConfig, StaleRouteError, type SyncCallStateInput, TTSProvider, ToolDefinition$1 as ToolDefinition, TriggerDefinition, TurnDetectorProvider, VADProvider, type VoiceLayerClient, type WebhookApi, type WebhookConfig, type WorkerIdentity, type WorkerIdentityResolution, type WrapOptions, admitCallIdentity, applyPronunciations, assemblyai, cartesia, collectDefaultMetadata, connector, createClient, createNoOpLLM, deepgram, defineAgent, defineFlowRuntime, defineTool, elevenlabs, exchangeWorkerToken, formTools, google, httpTool, livekitTurn, mergeMetadata, openai, processSchemaToAgentParts, processSchemaToDefinition, resendEmailTool, resolveWorkerClient, resolveWorkerIdentity, silero, webhook, wrap };
+export { Agent, AgentConfig$1 as AgentConfig, AgentContext, AgentEventEmitter, AgentLifecycleEvent, type ApiCredential, type AppendDtmfEventInput, type AppendTranscriptInput, BaseTool, BrainTransport, type CallAttributeValue, type CallLegInput, type CallParticipantInput, type CallStatus, type CallSummary, CallsClient, type CompiledAgentParts, ConnectorInstance, type ConnectorLLMConfig, type CreateClientOptions, type CreatedFormSession, type DefaultMetadata, type DtmfDirection, EmailClient, type SendEmailInput as EmailSendInput, type EnsureCallByRoomInput, type ExchangeWorkerTokenInput, type CreateFormSessionInput as FormCreateInput, type FormToolsOptions, FormsClient, HandoffConfig, type HttpToolResult, type HttpToolSpec, LLMProvider, MemoryConfig, ModelConfig, OnQuery, type PipelineConfig, PlansClient, ProcessDefinition, ProcessField, type PronunciationDict, ProviderFactory, type PublicFormSessionView, ReadinessProbe, RealtimeProvider, type RegisterInput, type RegisterOptions, type RegisteredAgent, type ResendCredentials, type ResendEmailToolOptions, STTProvider, type SentEmail, SpeechConfig, StaleRouteError, type SyncCallStateInput, TTSProvider, ToolDefinition, ToolRunInfo, TriggerDefinition, TurnDetectorProvider, VADProvider, type VoiceLayerClient, type WebhookApi, type WebhookConfig, type WorkerIdentity, type WorkerIdentityResolution, type WrapOptions, admitCallIdentity, applyPronunciations, assemblyai, cartesia, collectDefaultMetadata, connector, createClient, createNoOpLLM, deepgram, defineAgent, defineFlowRuntime, defineTool, elevenlabs, exchangeWorkerToken, formTools, google, httpTool, livekitTurn, mergeMetadata, openai, processSchemaToAgentParts, processSchemaToDefinition, resendEmailTool, resolveWorkerClient, resolveWorkerIdentity, silero, webhook, wrap };