@xema/omni-protocol 0.1.51 → 0.1.52

package/dist/validation.js

@@ -956,6 +956,12 @@ function validateTaskInto(task, context, path, into) {
     validateTaskAttributes(task.attributes, `${path}.attributes`, into);
     validateHandlingHistory(task.handlingHistory, `${path}.handlingHistory`, into);
     validateOnCall(task.onCall, context.channel, `${path}.onCall`, into);
+    // The room is who is on the call now, and a task outlives its call by the whole of wrap-up: a
+    // task whose call has ended -- completing, or media ended -- carries nobody, or the last thing the
+    // wire said about the call stays true for ever. Empty and absent both say nobody.
+    if (Array.isArray(task.onCall) && task.onCall.length > 0 && (task.phase === "completing" || task.media === "ended")) {
+        into.add("task.onCall.ended", `${path}.onCall`, `the call has ended (${task.phase === "completing" ? "the task is completing" : "its media ended"}) and onCall still names people on it: the room is who is on the call now, and now nobody is`);
+    }
     validateTaskMedia(task.media, context.channel, `${path}.media`, into);
     validateLeadAssist(task.leadAssist, context.channel, `${path}.leadAssist`, into);
     validateAssisting(task.assisting, context.channel, `${path}.assisting`, into);

package/guide.md

@@ -2994,6 +2994,26 @@ the platform added itself carries none. `held: true` is presence as claim. A sna
 after a transfer reads the room from here rather than inferring it from a sequence of outcomes it
 never saw.
 
+**`onCall` is who is on the call now, and a task outlives its call.** Wrap-up is not an ending:
+the task is alive, the agent is working, and nothing arrives to say the call ended until they
+dispose. So the room must not be the last word about a call that has ended. Once the call is over
+-- the task `completing`, or its `media` ended -- `onCall` is empty, or absent only where the
+provider never publishes the room at all, and a task carrying people on a call that has ended is
+refused (`task.onCall.ended`). Empty says nobody is on the call; absent says the provider does not
+say who is, which is a different claim, so a provider that publishes the room publishes one last
+change: the empty room.
+
+**A field that describes the present is cleared by the transition that ends it.** `onCall`,
+`previewEndsAt` and `atDeadline` are three instances of one shape, and there will be more: each
+describes a state that is true now, and each is carried past the moment it stops being true by the
+most natural implementation there is, building the next task by spreading the last one. The
+provider's own state looks right, the claim on the wire is stale, and only the host sees it. An
+adapter that builds each transition from what is true after it, rather than from what was true
+before, needs none of these rules named. Two agents were
+once shown on calls for the better part of an hour while callers queued, because the last message
+describing the room live was never followed by one saying it had emptied, and every consumer that
+derived anything from it was wrong in a way that looked like its own bug.
+
 **A dialled entry is listed from the moment the dial is placed, not from the answer.** The entry is
 what makes `transfer` `cancel` issuable and what `conference` `remove` names, and a destination the
 agent cannot call off while it rings is a parked customer with no way back -- which is the very case

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xema/omni-protocol",
-  "version": "0.1.51",
+  "version": "0.1.52",
   "description": "The Omni protocol: the contract every provider adapter implements",
   "type": "module",
   "license": "MIT",