@xema/omni-protocol 0.1.4 → 0.1.6

package/README.md

@@ -59,6 +59,35 @@ assignments, break denial and retry, command idempotency, wrap timeout, browser
 > conforming one. A suite that only asserts "this conforming case does not throw" passes unchanged
 > if the helper is gutted, so pair every positive case with the violating twin.
 
+## Two things TypeScript will not catch for you
+
+Both found by adapters against this contract, and both produce a green build over a wrong shape.
+
+**Conditional spreads are the blind spot on a task literal.** A key inside
+`...(cond ? { … } : {})` is never checked against the task type, and `satisfies Task<C>` on the
+surrounding literal does not reach it. Put the check on the spread operand itself:
+
+```ts
+const task = {
+  id, title, channel: "voice", taskType, capabilities, browsers, phase, completionMode,
+  ...(contact ? { contact } satisfies Partial<Task<"voice">> : {}),
+};
+```
+
+**The blind transfer arm is `action?: never`.** Switch on `command.action` with `case undefined`
+for it, never a `default`: a `default` turns a future action into a silent blind transfer, and
+switching on `command.action ?? "blind"` loses the narrowing that lets you read `destination`
+without a cast. Dropping an arm then fails the build — indirectly, as a missing return.
+
+```ts
+switch (command.action) {
+  case undefined:  return blindTransfer(command.destination);
+  case "consult":  return consultTransfer(command.destination);
+  case "complete": return completeConsultation();
+  case "cancel":   return cancelConsultation();
+}
+```
+
 ## Building
 
 ```

package/guide.md

@@ -1673,7 +1673,7 @@ time. Runtime conformance checks also require the task channel to match its prov
 | `completionAllowance` | Fixed time allowed to complete the task after primary handling ends. For real-time media, it begins after `task-media-ended`. Required under `provider-automatic`, where the provider acts on it. Optional under `agent-command`: omitted says the provider imposes no deadline, and Omni counts nothing down. |
 | `attributes` | Optional ordered, typed `TaskAttribute` entries with keys unique within the task. Each contact or timestamp is a separate array item; new attribute shapes require new union members. |
 | `handlingHistory` | Optional ordered handling history for this currently open task. It is live task data, not a permanent archive. |
-| `consultation` | Voice only. Present while the agent is consulting a transfer destination: who is being consulted, and since when where the provider records it. Its presence is what makes `transfer` `complete` and `cancel` issuable. See **Consult transfer**. |
+| `consultation` | Voice only. Present while the agent is consulting a transfer destination: who is being consulted, and since when where the provider records it. Its presence is what makes `transfer` `complete` and `cancel` issuable. `label` is a name for the destination -- a person, a queue -- not a phrase; the host supplies the verb. See **Consult transfer**. |
 | `lead` | Voice only. Present from the agent's request for a lead until the lead leaves or the request ends: `requested` while nobody has joined, `joined` with the lead's `leadId` once somebody has. See **Consulting a lead**. |
 | `assisting` | Voice only, on the lead's own task for a call they joined: which member asked, with their note. Its presence is what makes `lead` `take-over` and `leave` issuable. See **Consulting a lead**. |
 
@@ -2630,6 +2630,10 @@ trigger it; but from then on it is an outstanding task the provider counts again
 stated ceiling like any other, nothing more is allocated to the lead while it stands, and a
 provider whose lead is already at the ceiling answers the join `failed`.
 
+**A lead assists one call at a time.** A `join` from a lead already on a call -- their own or one
+they joined -- is answered `failed`, whatever their ceiling; the request stands for another lead,
+or until it is withdrawn or declined.
+
 **On `decline`, or a request the agent withdraws with `{ type: "lead", action: "cancel" }`, the
 provider clears `lead` from the agent's task** and drops the request from every roster. Nothing
 else changes; the agent is still on the call.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xema/omni-protocol",
-  "version": "0.1.4",
+  "version": "0.1.6",
   "description": "The Omni protocol: the contract every provider adapter implements",
   "type": "module",
   "license": "MIT",