@xema/omni-protocol 0.1.24 → 0.1.26

package/README.md

@@ -65,7 +65,7 @@ clean result is read for what it covers and not for the whole contract; `assertR
 subjects)` is the paired assertion.
 
 ```ts
-const context = { protocolVersion: OMNI_PROTOCOL_VERSION, sessionId: "session-1", host: stillHost(report) };
+const context = { protocolVersion: OMNI_PROTOCOL_VERSION, loginId: "session-1", host: stillHost(report) };
 const result = await exerciseAdapter(adapter, context, { collectOnly: true });
 expect(result.violations).toEqual([]);
 expect(result.disconnectWasClean).toBe(true);

package/dist/index.d.ts

@@ -54,19 +54,19 @@ export interface ProtocolViolation {
     message: string;
 }
 export type AuthenticationMethod = "browser-sso" | "credentials";
-export interface BrowserAccessPolicy {
+export interface BrowserAccess {
     /** The decision when no list entry matches. */
     mode: "allow-all" | "block-all";
     allowList?: string[];
     blockList?: string[];
 }
 export interface PersonalBrowserCapability {
-    access: BrowserAccessPolicy;
+    access: BrowserAccess;
     accessPolicyScope?: "initial-url" | "all-navigation";
 }
-export type DialDestinationPolicy = "contacts-only" | "any-number";
+export type DialDestinations = "contacts-only" | "any-number";
 export interface DialCapability {
-    destinationPolicy: DialDestinationPolicy;
+    destinations: DialDestinations;
 }
 /** Every idle capability a provider may declare. Only voice may `dial`; the channel arm says so. */
 export declare const IDLE_CAPABILITIES: readonly ["dial", "personalBrowser", "calendar", "contacts"];
@@ -111,8 +111,8 @@ export interface Manifest<C extends Channel = Channel> {
     phaseLabels?: TaskPhaseLabels;
     /** Keyed by `taskType`. An entry replaces the channel default outright rather than merging. */
     taskTypePresentation?: Record<string, TaskTypePresentation>;
-    /** The organisation's whole ladder, stated outright, `person` included. Omitted for the typical four, `DEFAULT_TIERS`. */
-    orgTiers?: TierDeclaration[];
+    /** The organisation's whole ladder, stated outright, `person` included. Omitted for the typical four, `DEFAULT_LEVELS`. */
+    orgLevels?: LevelDeclaration[];
 }
 export interface SecretStore {
     get(key: string): Promise<string | undefined>;
@@ -121,8 +121,8 @@ export interface SecretStore {
 }
 export interface AuthenticationContext {
     protocolVersion: number;
-    /** Omni's identity for this login. The same value arrives later as `ConnectContext.sessionId`. */
-    sessionId: string;
+    /** Omni's identity for this login. The same value arrives later as `ConnectContext.loginId`. */
+    loginId: string;
     /** Scoped to this provider's manifest id. */
     secrets: SecretStore;
     signal?: AbortSignal;
@@ -155,7 +155,7 @@ export interface TeamCapabilities {
  * of who the agent is on this provider: the provider knows the roles and says so at sign-in.
  * Current as of the latest `authenticated` state, never fixed for the login.
  */
-export interface SessionCapabilities {
+export interface UserCapabilities {
     /** This login may request a break. Requires the four break methods. */
     breaks?: true;
     /** The choices the team left to this person, with where each stands. Omitted when there are none. Requires `setPreference`. */
@@ -175,12 +175,12 @@ export type AuthenticationState = {
 } | {
     status: "authenticated";
     identity: User;
-    capabilities: SessionCapabilities;
+    capabilities: UserCapabilities;
     expiresAt?: IsoTimestamp;
 } | {
     status: "refreshing";
     identity: User;
-    capabilities: SessionCapabilities;
+    capabilities: UserCapabilities;
 } | {
     status: "expired";
     identity?: User;
@@ -230,7 +230,7 @@ export type CompleteAuthenticationRequest = {
 export type CompleteAuthenticationResult = {
     status: "authenticated";
     identity: User;
-    capabilities: SessionCapabilities;
+    capabilities: UserCapabilities;
     expiresAt?: IsoTimestamp;
 } | {
     status: "rejected";
@@ -295,10 +295,6 @@ export type HostAudioOutput = {
 /** What Omni's own chrome shows of a task browser's URL: nothing, the domain, or all of it. */
 export type UrlVisibility = "full" | "domain" | "hidden";
 export interface HostReport {
-    /** What the agent can see of a task browser's URL in Omni's chrome. Task browsers only; the personal browser is the agent's. */
-    browsers: {
-        urlVisibility: UrlVisibility;
-    };
     /** Whether the host has a network interface up. Not a claim that anything is reachable: the adapter knows its own platform's reachability better than the host does. */
     online: boolean;
     audio?: {
@@ -314,7 +310,7 @@ export interface Host {
 export interface ConnectContext {
     protocolVersion: number;
     /** The session that authenticated this connection. */
-    sessionId: string;
+    loginId: string;
     /** Omni-side policy: whether the agent's tasks are accepted without asking them. */
     autoAcceptTasks?: boolean;
     /**
@@ -325,13 +321,13 @@ export interface ConnectContext {
     signal?: AbortSignal;
     log?: (entry: unknown) => void;
 }
-export type ConnectionStatus = "connecting" | "active" | "error";
+export type TransportStatus = "connecting" | "active" | "error";
 /**
  * What revives a connection that reported `error`: `reconnect` -- the login is good, dispose this
  * connection and call `connect()` again -- or `reauthenticate` -- run the authentication flow
  * first. The adapter knows which; the host acts on its word.
  */
-export type ConnectionRecovery = "reconnect" | "reauthenticate";
+export type TransportRecovery = "reconnect" | "reauthenticate";
 /** Every field is optional: a provider sends what it knows and omits what it does not. */
 export interface Contact {
     name?: string;
@@ -354,7 +350,7 @@ export interface DispositionCode {
     label: string;
     group?: string;
 }
-export interface DispositionPolicy {
+export interface DispositionRules {
     required?: boolean;
     notes?: "required" | "optional" | "hidden";
     codes?: DispositionCode[];
@@ -373,7 +369,7 @@ export interface DestinationDirectory {
 export interface CustomCapability {
     id: string;
     ui: {
-        kind: "button" | "toggle" | "menu-item";
+        control: "button" | "toggle" | "menu-item";
         label: string;
         placement: "primary" | "secondary" | "overflow";
         /** Where the control's work renders: inline in the workspace, or as a page of its own. Inline when absent. */
@@ -386,7 +382,7 @@ export interface CustomCapability {
 }
 export interface SharedTaskCapabilities {
     browsers?: true;
-    dispositions?: true | DispositionPolicy;
+    dispositions?: true | DispositionRules;
     custom?: CustomCapability[];
 }
 /**
@@ -429,24 +425,32 @@ export declare const BROWSER_ISOLATION_SCHEMES: {
     readonly TASK_TYPE_NAME__TAB_NAME: "TaskTypeName.TabName";
 };
 export type BrowserIsolationScheme = (typeof BROWSER_ISOLATION_SCHEMES)[keyof typeof BROWSER_ISOLATION_SCHEMES];
-export interface TaskBrowserBase {
+/** One tab, in either workspace. */
+export interface Browser {
     id: string;
     name: string;
-    purpose: string;
     /** `http:` or `https:` only. */
     url: string;
 }
 /**
- * The union is what makes a reusing browser with no scheme fail to compile rather than inherit
- * a default -- which is how two tasks end up sharing a session nobody intended.
+ * A tab the task brought: fixed at the task's definition -- count and details -- with why it is
+ * there, whether its session is shared across tasks, and whether the agent may read its URL. The
+ * union is what makes a reusing browser with no scheme fail to compile rather than inherit a
+ * default -- which is how two tasks end up sharing a session nobody intended.
  */
-export type TaskBrowser = TaskBrowserBase & ({
+export type TaskBrowser = Browser & {
+    purpose: string;
+    /** Hide this tab's URL from the agent in Omni's chrome. Omitted, the URL shows as any browser's does; a provider says `hidden` where the URL carries what the agent may not read. */
+    urlVisibility?: UrlVisibility;
+} & ({
     reuse: false;
     isolationScheme?: never;
 } | {
     reuse: true;
     isolationScheme: BrowserIsolationScheme;
 });
+/** A tab the agent opened in the personal workspace: theirs, as many as they like, and never on the wire. */
+export type PersonalBrowser = Browser;
 export declare const ALLOWED_BROWSER_URL_SCHEMES: readonly ["http:", "https:"];
 export declare function isAllowedBrowserUrl(url: string): boolean;
 export type TaskPhase = 
@@ -500,10 +504,10 @@ export interface TaskHandlingStep {
  */
 export type TaskCompletion = {
     completionMode: "agent-command";
-    completionAllowance?: DurationSeconds;
+    wrapAllowance?: DurationSeconds;
 } | {
     completionMode: "provider-automatic";
-    completionAllowance: DurationSeconds;
+    wrapAllowance: DurationSeconds;
 };
 /**
  * A consultation in progress on a task: who is being consulted, and since when where the provider
@@ -520,7 +524,7 @@ export interface TaskConsultation {
  * `requested` while nobody has joined; `joined`, with `leadId`, once somebody has.
  */
 export interface TaskLead {
-    status: "requested" | "joined";
+    stage: "requested" | "joined";
     leadId?: UserId;
     note?: string;
     since: IsoTimestamp;
@@ -535,21 +539,21 @@ export interface TaskAssisting {
     since: IsoTimestamp;
 }
 /**
- * A tier of the organisation's structure, by the id its manifest declares -- or one of the four
- * a typical organisation has, `DEFAULT_TIERS`, when the manifest declares no ladder. The protocol
- * never describes the chain: which tiers a person passes through is the structure's to know.
+ * A level of the organisation's structure, by the id its manifest declares -- or one of the four
+ * a typical organisation has, `DEFAULT_LEVELS`, when the manifest declares no ladder. The protocol
+ * never describes the chain: which levels a person passes through is the structure's to know.
  */
-export type Tier = string;
-/** A tier the structure has, with the label a desk shows for "who decided". */
-export interface TierDeclaration {
-    id: Tier;
+export type Level = string;
+/** A level the structure has, with the label a desk shows for "who decided". */
+export interface LevelDeclaration {
+    id: Level;
     label: string;
 }
 /**
- * The tiers a typical organisation has: the ladder in force when a manifest declares no
- * `orgTiers`. A manifest that declares any states its whole ladder outright.
+ * The levels a typical organisation has: the ladder in force when a manifest declares no
+ * `orgLevels`. A manifest that declares any states its whole ladder outright.
  */
-export declare const DEFAULT_TIERS: readonly [{
+export declare const DEFAULT_LEVELS: readonly [{
     readonly id: "org";
     readonly label: "Your organisation";
 }, {
@@ -563,14 +567,14 @@ export declare const DEFAULT_TIERS: readonly [{
     readonly label: "You";
 }];
 /** The ladder in force for a manifest: exactly what it declares, or the defaults when it declares none. */
-export declare function effectiveTiers(declared: readonly TierDeclaration[] | undefined): TierDeclaration[];
+export declare function effectiveLevels(declared: readonly LevelDeclaration[] | undefined): LevelDeclaration[];
 /**
- * Something the queue could allow, locked above the person: the tier that made it unchangeable,
- * and why if they said. `person` never locks their own value, and the queue is not a tier --
+ * Something the queue could allow, locked above the person: the level that made it unchangeable,
+ * and why if they said. `person` never locks their own value, and the queue is not a level --
  * what the queue does not allow at all is simply absent.
  */
 export interface Locked {
-    lockedBy: Tier;
+    lockedBy: Level;
     reason?: string;
 }
 /**
@@ -782,7 +786,7 @@ export interface BreakReason {
     label: string;
     group?: string;
     kind?: BreakKind;
-    /** Survives `accepting: false`: a mandatory rest is not something a busy hour can cancel. */
+    /** Survives `mayAsk: false`: a mandatory rest is not something a busy hour can cancel. */
     alwaysAvailable?: true;
 }
 export interface BreakRequest {
@@ -809,8 +813,8 @@ export type ImposedBreak = {
 export interface BreakState {
     approval: BreakApproval;
     /** Whether the agent may ask at all. Distinct from the fate of a request already made. */
-    accepting: boolean;
-    /** Shown when `accepting` is false, such as "Busy hours". */
+    mayAsk: boolean;
+    /** Shown when `mayAsk` is false, such as "Busy hours". */
     refusedReason?: string;
     decisionReason?: string;
     retryAfterMs?: number;
@@ -883,7 +887,7 @@ export interface TeamRoster {
 export type PolicyKey = Exclude<keyof TaskCapabilities<"voice">, keyof SharedTaskCapabilities> | Exclude<keyof TaskCapabilities<"chat">, keyof SharedTaskCapabilities> | Exclude<keyof TaskCapabilities<"email">, keyof SharedTaskCapabilities> | "dial" | `skill:${string}`;
 /** On for everyone, off for everyone, or the agent's own choice. Only `hold`, `mute` and skills may be `agent`. */
 export type TeamPolicySetting = "on" | "off" | "agent";
-/** One policy as the lead sees it: the setting, who set it, and `lockedBy` when a tier above the team made it theirs to keep. */
+/** One policy as the lead sees it: the setting, who set it, and `lockedBy` when a level above the team made it theirs to keep. */
 export interface TeamPolicy extends Resolved {
     setting: TeamPolicySetting;
 }
@@ -937,7 +941,7 @@ export interface TeamBreakCommandRequest {
  * `ended` once primary handling's audio ended, and the field omitted while none should be. The
  * provider's word -- a desk attaches and renders audio from it, never from its own senses.
  */
-export type TaskMediaState = "ready" | "ended";
+export type TaskMediaState = "started" | "ended";
 export interface VoiceMediaSession {
     remoteAudio: MediaStream;
     setMuted(muted: boolean): void;
@@ -959,27 +963,27 @@ export type OpenMediaResult = {
 /**
  * What the team may leave to the person: a capability by its own name -- `hold`, `mute` -- or a
  * skill by its provider id. The same key as in `Task.capabilities`, because it is the same
- * capability seen at another tier. Callback and new call are never the person's; they are the
+ * capability seen at another level. Callback and new call are never the person's; they are the
  * team's, on or off, within what the queue allows.
  */
 export type PreferenceId = "hold" | "mute" | `skill:${string}`;
 /**
- * Who stated a value as it stands: a tier -- `person` among them -- or `provisioning`, the
- * protocol's own word for "no tier has said anything and the provider's default applies".
+ * Who stated a value as it stands: a level -- `person` among them -- or `provisioning`, the
+ * protocol's own word for "no level has said anything and the provider's default applies".
  * Nothing is hidden for want of a row.
  */
-export type SetBy = Tier | "provisioning";
+export type SetBy = Level | "provider";
 /** What every resolved value carries: who set it, and who locked it if anyone did. */
 export interface Resolved {
     setBy: SetBy;
-    lockedBy?: Tier;
+    lockedBy?: Level;
     /** Given with `lockedBy`, where whoever locked it said why. */
     reason?: string;
 }
 /**
  * One choice the team may leave to the person, with where it stands and who set it. The provider
  * keeps it: it is the person's across sessions, written through `setPreference`. Listed whether
- * or not anyone has stated it, and even when a tier above has since locked it.
+ * or not anyone has stated it, and even when a level above has since locked it.
  */
 export interface AgentPreference extends Resolved {
     id: PreferenceId;
@@ -1001,11 +1005,13 @@ export type PreferenceResult = {
     failure: ProtocolFailure;
 };
 export interface Snapshot<C extends Channel = Channel> {
-    status: ConnectionStatus;
-    sessionId: string;
+    transport: TransportStatus;
+    loginId: string;
     break: BreakState;
     /** Every task currently owned by this agent for this provider. */
     tasks: Task<C>[];
+    /** The provider's own count of those tasks, stated rather than inferred: it must equal `tasks.length`, so a blank or unanswered state can never pass as a confirmed empty. */
+    taskCount: number;
     contacts?: Contact[];
     scheduledActivities?: ScheduledActivity[];
     team?: TeamRoster;
@@ -1037,13 +1043,13 @@ export type ProviderEvent<C extends Channel = Channel> = {
     reason: "reconnected" | "provider-requested";
     snapshot: Snapshot<C>;
 } | {
-    type: "provider-status";
+    type: "transport-status";
     status: "connecting" | "active";
     message?: string;
 } | {
-    type: "provider-status";
+    type: "transport-status";
     status: "error";
-    recovery: ConnectionRecovery;
+    recovery: TransportRecovery;
     message?: string;
 } | {
     type: "break-state";
@@ -1058,7 +1064,7 @@ export type ProviderEvent<C extends Channel = Channel> = {
     type: "task-updated";
     task: Task<C>;
 } | {
-    type: "task-media-ready";
+    type: "task-media-started";
     taskId: TaskId;
 } | {
     type: "task-media-ended";
@@ -1094,7 +1100,7 @@ export type ProviderEvent<C extends Channel = Channel> = {
 export interface ProviderEventEnvelope<C extends Channel = Channel> {
     id: string;
     /** The login this belongs to. */
-    sessionId: string;
+    loginId: string;
     occurredAt: IsoTimestamp;
     event: ProviderEvent<C>;
 }
@@ -1219,7 +1225,7 @@ export interface BrowserSessionKeyInput {
  * guard -- comparing the identity -- never fires on a demotion, because the thing that changed is
  * not the thing being compared. Key order does not matter, and `team: {}` is not `team` absent.
  */
-export declare function sameCapabilities(a: SessionCapabilities, b: SessionCapabilities): boolean;
+export declare function sameCapabilities(a: UserCapabilities, b: UserCapabilities): boolean;
 /**
  * The storage-profile key a reusing browser shares, or `undefined` where it shares nothing.
  *

package/dist/index.js

@@ -51,18 +51,18 @@ export function isAllowedBrowserUrl(url) {
     }
 }
 /**
- * The tiers a typical organisation has: the ladder in force when a manifest declares no
- * `orgTiers`. A manifest that declares any states its whole ladder outright.
+ * The levels a typical organisation has: the ladder in force when a manifest declares no
+ * `orgLevels`. A manifest that declares any states its whole ladder outright.
  */
-export const DEFAULT_TIERS = [
+export const DEFAULT_LEVELS = [
     { id: "org", label: "Your organisation" },
     { id: "site", label: "Your site" },
     { id: "team", label: "Your team" },
     { id: "person", label: "You" },
 ];
 /** The ladder in force for a manifest: exactly what it declares, or the defaults when it declares none. */
-export function effectiveTiers(declared) {
-    return [...(declared ?? DEFAULT_TIERS)];
+export function effectiveLevels(declared) {
+    return [...(declared ?? DEFAULT_LEVELS)];
 }
 // ---------------------------------------------------------------------------
 // Task commands.

package/dist/testing.d.ts

@@ -120,7 +120,7 @@ export declare class BreakStream {
 export declare function assertBreakFollowsItsRequests(envelopes: readonly ProviderEventEnvelope[], snapshot?: Snapshot): void;
 /**
  * The media follows the task and never decides it. Given a provider's stream -- optionally seeded
- * with the snapshot it began from -- every task is introduced once, `task-media-ready` and
+ * with the snapshot it began from -- every task is introduced once, `task-media-started` and
  * `task-media-ended` alternate on work that has begun, media ends only where it arrived, and what
  * follows the media ending is `completing` or `task-ended`.
  */
@@ -162,7 +162,7 @@ export declare function assertBreakBeginsAfterTask(steps: readonly BreakOnTaskSt
  * nothing down when the provider set a clock. `toleranceMs` absorbs scheduler jitter in a real
  * implementation; pass 0 to demand an exact match.
  */
-export declare function assertWrapTimeout(task: Pick<TaskCompletion, "completionMode" | "completionAllowance">, mediaEndedAt: string, observedDeadline: string | undefined, toleranceMs?: number): void;
+export declare function assertWrapTimeout(task: Pick<TaskCompletion, "completionMode" | "wrapAllowance">, mediaEndedAt: string, observedDeadline: string | undefined, toleranceMs?: number): void;
 /** One browser in one task of one provider. `providerId` is `Manifest.id`, never `displayName`. */
 export type BrowserIsolationScenario = BrowserSessionKeyInput;
 /** Validates whether two task-browser definitions should share one browser session. */

package/dist/testing.js

@@ -1,4 +1,4 @@
-import { browserSessionKey, effectiveTiers, sameCapabilities, } from "./index.js";
+import { browserSessionKey, effectiveLevels, sameCapabilities, } from "./index.js";
 import { assertNoViolations, validateAuthenticationState, validateEventEnvelope, validateHostReport, validateManifest, validateResult, validateSnapshot, } from "./validation.js";
 export { ProtocolConformanceError, assertNoViolations } from "./validation.js";
 /**
@@ -31,8 +31,8 @@ const STATE_SUBJECTS = [
 // Pinned to the event union the way validation pins its closed sets: a type added to
 // `ProviderEvent` without a row here, or a row it lacks, is a compile error.
 const EVENT_TYPES = {
-    snapshot: true, "provider-status": true, "break-state": true, "task-offered": true, "task-updated": true,
-    "task-media-ready": true, "task-media-ended": true, "task-ended": true, announcement: true, "provider-summary": true,
+    snapshot: true, "transport-status": true, "break-state": true, "task-offered": true, "task-updated": true,
+    "task-media-started": true, "task-media-ended": true, "task-ended": true, announcement: true, "provider-summary": true,
     "team-updated": true, "contacts-updated": true, "calendar-updated": true,
 };
 const CONTRACT_SUBJECTS = [
@@ -172,8 +172,8 @@ export async function exerciseAdapter(adapter, context, options = {}) {
     let disconnectWasClean = false;
     try {
         authenticationState = await authentication.state();
-        const tiers = effectiveTiers(adapter.manifest.orgTiers).map(tier => tier.id);
-        violations.push(...validateAuthenticationState(authenticationState, "authentication", { tiers }));
+        const levels = effectiveLevels(adapter.manifest.orgLevels).map(level => level.id);
+        violations.push(...validateAuthenticationState(authenticationState, "authentication", { levels }));
         if (authenticationState.status !== "authenticated") {
             throw new Error(`Adapter contract exercise requires authenticated test state, received ${authenticationState.status}`);
         }
@@ -193,7 +193,7 @@ export async function exerciseAdapter(adapter, context, options = {}) {
         const reader = () => ({
             self: current().identity.id,
             capabilities: current().capabilities,
-            sessionId: context.sessionId,
+            loginId: context.loginId,
             autoAcceptTasks: context.autoAcceptTasks ?? true,
         });
         // The optional methods are optional only until something declares a need for them. Each
@@ -228,7 +228,7 @@ export async function exerciseAdapter(adapter, context, options = {}) {
                 requireMethod(on, "setPreference", "the login declares capabilities.preferences");
         };
         unsubscribeAuthentication = authentication.subscribe(state => {
-            const own = validateAuthenticationState(state, "authentication", { tiers });
+            const own = validateAuthenticationState(state, "authentication", { levels });
             violations.push(...own);
             if (own.length > 0)
                 return;
@@ -590,7 +590,7 @@ const WORK_BEGUN = new Set(["in-progress", "paused", "completing"]);
 export class TaskStream {
     tasks = new Map();
     static stated(task) {
-        const media = isRecord(task) && (task.media === "ready" || task.media === "ended") ? task.media : "none";
+        const media = isRecord(task) && (task.media === "started" || task.media === "ended") ? task.media : "none";
         return { phase: String(isRecord(task) ? task.phase : undefined), media };
     }
     /** Replaces what is known with a snapshot's tasks, as a snapshot replaces Omni's state. */
@@ -637,23 +637,31 @@ export class TaskStream {
                         refuse("stream.taskMediaEnded.follow", `${at}.task.phase`, `after its media ended, ${id} completes or ends; ${phase} is a phase the audio does not decide`);
                     }
                 }
-                // A task replaces the task: the update's own media field is the state now stated.
-                this.tasks.set(id, TaskStream.stated(event.task));
+                // A task replaces the task, and an update re-states media without moving it: the
+                // transitions belong to task-media-started and task-media-ended. Releasing ended is the
+                // one move an update may make, since wrapped audio has nothing left to end.
+                {
+                    const next = TaskStream.stated(event.task);
+                    if (known.media !== next.media && !(known.media === "ended" && next.media === "none")) {
+                        refuse("stream.taskUpdated.media", `${at}.task.media`, `a task-updated re-states media, it does not move it: ${id} held ${known.media} and the update says ${next.media}; audio arrives on task-media-started and ends on task-media-ended`);
+                    }
+                    this.tasks.set(id, next);
+                }
                 break;
-            case "task-media-ready":
+            case "task-media-started":
                 if (id === undefined)
                     break;
                 if (known === undefined) {
-                    refuse("stream.taskMediaReady.unknown", `${at}.taskId`, `${id} was never offered or carried on a snapshot`);
+                    refuse("stream.taskMediaStarted.unknown", `${at}.taskId`, `${id} was never offered or carried on a snapshot`);
                     break;
                 }
                 if (!WORK_BEGUN.has(known.phase)) {
-                    refuse("stream.taskMediaReady.beforeWork", `${at}.taskId`, `media cannot arrive on ${id} while it is ${known.phase}: a task is never its audio, and its work has not begun`);
+                    refuse("stream.taskMediaStarted.beforeWork", `${at}.taskId`, `media cannot arrive on ${id} while it is ${known.phase}: a task is never its audio, and its work has not begun`);
                 }
-                if (known.media === "ready") {
-                    refuse("stream.taskMediaReady.duplicate", `${at}.taskId`, `media is already ready on ${id}; ready and ended alternate`);
+                if (known.media === "started") {
+                    refuse("stream.taskMediaStarted.duplicate", `${at}.taskId`, `media already started on ${id}; started and ended alternate`);
                 }
-                known.media = "ready";
+                known.media = "started";
                 break;
             case "task-media-ended":
                 if (id === undefined)
@@ -665,8 +673,8 @@ export class TaskStream {
                 if (!WORK_BEGUN.has(known.phase)) {
                     refuse("stream.taskMediaEnded.beforeWork", `${at}.taskId`, `media cannot end on ${id} while it is ${known.phase}: a task is never its audio, and its work has not begun`);
                 }
-                if (known.media !== "ready") {
-                    refuse("stream.taskMediaEnded.silent", `${at}.taskId`, `media cannot end on ${id} where none arrived: audio attaches on task-media-ready, or on a task carried with media ready`);
+                if (known.media !== "started") {
+                    refuse("stream.taskMediaEnded.silent", `${at}.taskId`, `media cannot end on ${id} where none arrived: audio attaches on task-media-started, or on a task carried with media started`);
                 }
                 known.media = "ended";
                 break;
@@ -748,7 +756,7 @@ export function assertBreakFollowsItsRequests(envelopes, snapshot) {
 }
 /**
  * The media follows the task and never decides it. Given a provider's stream -- optionally seeded
- * with the snapshot it began from -- every task is introduced once, `task-media-ready` and
+ * with the snapshot it began from -- every task is introduced once, `task-media-started` and
  * `task-media-ended` alternate on work that has begun, media ends only where it arrived, and what
  * follows the media ending is `completing` or `task-ended`.
  */
@@ -761,7 +769,7 @@ export function assertMediaFollowsTheTask(envelopes, snapshot) {
     assertNoViolations(found, "The media follows the task");
 }
 /** A host that reports one thing and never changes: what most adapter tests hand `exerciseAdapter`. */
-export function stillHost(report = { online: true, browsers: { urlVisibility: "hidden" } }) {
+export function stillHost(report = { online: true }) {
     return { report: () => report, subscribe: () => () => undefined };
 }
 const usableLogin = (status) => status === "authenticated" || status === "refreshing";
@@ -825,20 +833,20 @@ export function assertBreakBeginsAfterTask(steps) {
  * implementation; pass 0 to demand an exact match.
  */
 export function assertWrapTimeout(task, mediaEndedAt, observedDeadline, toleranceMs = 1_000) {
-    if (task.completionAllowance === undefined) {
+    if (task.wrapAllowance === undefined) {
         if (observedDeadline !== undefined) {
             throw new Error(`Wrap deadline mismatch: the task states no allowance, so there is no deadline, received ${observedDeadline}`);
         }
         return;
     }
     if (observedDeadline === undefined) {
-        throw new Error(`Wrap deadline mismatch: the task allows ${task.completionAllowance}s, but no deadline was observed`);
+        throw new Error(`Wrap deadline mismatch: the task allows ${task.wrapAllowance}s, but no deadline was observed`);
     }
     const ended = Date.parse(mediaEndedAt);
     const deadline = Date.parse(observedDeadline);
     if (Number.isNaN(ended) || Number.isNaN(deadline))
         throw new Error("Wrap scenario requires valid ISO-8601 times");
-    const expected = ended + task.completionAllowance * 1_000;
+    const expected = ended + task.wrapAllowance * 1_000;
     if (Math.abs(deadline - expected) > toleranceMs) {
         throw new Error(`Wrap deadline mismatch: expected ${new Date(expected).toISOString()} within ${toleranceMs}ms, received ${observedDeadline}`);
     }

package/dist/validation.d.ts

@@ -1,4 +1,4 @@
-import { type ProtocolViolation, type SessionCapabilities, type UserId } from "./index.js";
+import { type ProtocolViolation, type UserCapabilities, type UserId } from "./index.js";
 export type { ProtocolViolation } from "./index.js";
 export declare class ProtocolConformanceError extends Error {
     readonly violations: readonly ProtocolViolation[];
@@ -13,8 +13,8 @@ export declare function validateManifest(manifest: unknown, path?: string): Prot
 export interface TaskValidationContext {
     /** The provider's channel, from its manifest. A task must agree with it. */
     channel: string;
-    /** The tier ids in force, from the manifest. The defaults when absent. */
-    tiers?: readonly string[];
+    /** The level ids in force, from the manifest. The defaults when absent. */
+    levels?: readonly string[];
 }
 export declare function validateTask(task: unknown, context: TaskValidationContext, path?: string): ProtocolViolation[];
 /**
@@ -31,11 +31,11 @@ export interface ReaderContext {
      * The login's `AuthenticationState.capabilities`. The login is the permission: a lead's
      * snapshot carries a roster, nobody else's does, and `requests` need `team.consultControl`.
      */
-    capabilities?: SessionCapabilities;
-    /** The tier ids in force. Filled from the manifest by `validateSnapshot` and `validateEventEnvelope`; the defaults otherwise. */
-    tiers?: readonly string[];
-    /** The login's `sessionId`. A snapshot or event naming another belongs to a login that is gone. */
-    sessionId?: string;
+    capabilities?: UserCapabilities;
+    /** The level ids in force. Filled from the manifest by `validateSnapshot` and `validateEventEnvelope`; the defaults otherwise. */
+    levels?: readonly string[];
+    /** The login's `loginId`. A snapshot or event naming another belongs to a login that is gone. */
+    loginId?: string;
     /** `ConnectContext.autoAcceptTasks` as sent, absent meaning `true`: whether `task-offered` carries an `acceptanceMode`. */
     autoAcceptTasks?: boolean;
 }
@@ -59,7 +59,7 @@ export type ResultMethod = "execute" | "dial" | "setCapacity" | "requestBreak" |
 export declare function validateResult(result: unknown, method: ResultMethod, path?: string): ProtocolViolation[];
 /** What a login is validated against beyond its own shape. */
 export interface LoginValidationContext {
-    /** The tier ids in force, from the manifest. The defaults when absent. */
-    tiers?: readonly string[];
+    /** The level ids in force, from the manifest. The defaults when absent. */
+    levels?: readonly string[];
 }
 export declare function validateAuthenticationState(state: unknown, path?: string, context?: LoginValidationContext): ProtocolViolation[];