FE-1630: Optimize and measure the Brunch Voice relay

.gitattributes

@@ -1,6 +1,7 @@
 **/docs/dependency-diagram.mmd linguist-generated=true
 **/*.snap linguist-generated=true
 **/*.snap.* linguist-generated=true
+.yarn/patches/*.patch whitespace=-space-before-tab
 apps/petrinaut-opt/openapi/openapi.json linguist-generated=true
 libs/@hashintel/petrinaut-core/docs/architecture/*.d2 linguist-generated=true
 libs/@hashintel/petrinaut-core/docs/architecture/*.svg linguist-generated=true

.yarn/patches/@flue-runtime-npm-2.0.3-192c31f50c.patch

@@ -0,0 +1,144 @@
+diff --git a/dist/agent-execution-store-DvID6-b8.d.mts b/dist/agent-execution-store-DvID6-b8.d.mts
+index 46517de611a8c67a143bfc093847696f780486d2..da5b13d594a2a7ae723e4633a91133ba1dfe83dd 100644
+--- a/dist/agent-execution-store-DvID6-b8.d.mts
++++ b/dist/agent-execution-store-DvID6-b8.d.mts
+@@ -21,6 +21,8 @@ interface ReducedEntryBase {
+ interface ReducedMessageEntry extends ReducedEntryBase {
+   type: 'message';
+   message: AgentMessage;
++  /** FE-1630: private delivery cursor metadata, not model/public content. */
++  deliveryContext?: unknown;
+   attachmentRefs?: Map<string, AttachmentRef>;
+   /**
+    * Validated structured tool output for tool-result entries, distinct from the
+diff --git a/dist/attachment-store-CukHsFkd.d.mts b/dist/attachment-store-CukHsFkd.d.mts
+index 962a56a83c6ccd249dc4741e1c226b6801f2ff23..574b768df7b9ad8489cb79cf8c874dabc3104c36 100644
+--- a/dist/attachment-store-CukHsFkd.d.mts
++++ b/dist/attachment-store-CukHsFkd.d.mts
+@@ -138,6 +138,7 @@ interface UserMessageRecord extends ConversationRecordEnvelope {
+   messageId: string;
+   parentId: string | null;
+   content: CanonicalUserContent[];
++  context?: unknown;
+ }
+ interface SignalRecord extends ConversationRecordEnvelope {
+   type: 'signal';
+@@ -147,6 +148,7 @@ interface SignalRecord extends ConversationRecordEnvelope {
+   tagName?: string;
+   content: string;
+   attributes?: Record<string, string>;
++  context?: unknown;
+ }
+ type AssistantModelInfo = Omit<AssistantMessage, 'role' | 'content' | 'stopReason' | 'errorMessage' | 'timestamp' | 'usage'>;
+ interface AssistantMessageStartedRecord extends ConversationRecordEnvelope {
+diff --git a/dist/conversation-stream-store-CXwRWonS.mjs b/dist/conversation-stream-store-CXwRWonS.mjs
+index 3fa342b27631ffcf2a05f0f8dcf571fc2236e2cd..709ed17cdee9540bb30c82105af3316fd34d0f96 100644
+--- a/dist/conversation-stream-store-CXwRWonS.mjs
++++ b/dist/conversation-stream-store-CXwRWonS.mjs
+@@ -1871,6 +1871,7 @@ var Session = class {
+ 					kind: "signal",
+ 					type: message.type,
+ 					body: message.content,
++					...entry.deliveryContext !== void 0 ? { context: entry.deliveryContext } : {},
+ 					...message.attributes ? { attributes: message.attributes } : {},
+ 					...message.tagName ? { tagName: message.tagName } : {}
+ 				});
+@@ -1883,6 +1884,7 @@ var Session = class {
+ 			this.advanceDelivery({
+ 				kind: "user",
+ 				body,
++				...entry.deliveryContext !== void 0 ? { context: entry.deliveryContext } : {},
+ 				...attachments?.length ? { attachments } : {}
+ 			});
+ 			return;
+@@ -4299,6 +4301,7 @@ var Session = class {
+ 				type: "user_message",
+ 				messageId,
+ 				parentId,
++				...message.context !== void 0 ? { context: message.context } : {},
+ 				content: [{
+ 					type: "text",
+ 					text: message.body
+@@ -4314,6 +4317,7 @@ var Session = class {
+ 			type: "signal",
+ 			messageId,
+ 			parentId,
++			...message.context !== void 0 ? { context: message.context } : {},
+ 			signalType: message.type,
+ 			...message.tagName ? { tagName: message.tagName } : {},
+ 			content: message.body,
+diff --git a/dist/dispatch-nU3cIlT-.mjs b/dist/dispatch-nU3cIlT-.mjs
+index c661b214b2c1e0e33c5fe696e23f44e3ac96a474..abf1d372ef4a9ecbf3121ac698898b3a0d03df42 100644
+--- a/dist/dispatch-nU3cIlT-.mjs
++++ b/dist/dispatch-nU3cIlT-.mjs
+@@ -365,6 +365,7 @@ function applyConversationRecord(state, record) {
+ 				timestamp: record.timestamp,
+ 				submissionId: record.submissionId,
+ 				turnId: record.turnId,
++				...record.context !== void 0 ? { deliveryContext: record.context } : {},
+ 				message: userMessage(record.content, record.timestamp),
+ 				attachmentRefs: attachmentRefs(record.content)
+ 			});
+@@ -377,6 +378,7 @@ function applyConversationRecord(state, record) {
+ 				timestamp: record.timestamp,
+ 				submissionId: record.submissionId,
+ 				turnId: record.turnId,
++				...record.context !== void 0 ? { deliveryContext: record.context } : {},
+ 				message: {
+ 					role: "signal",
+ 					type: record.signalType,
+@@ -2927,15 +2929,33 @@ const DeliveredAttachmentSchema = v.object({
+ 	mimeType: v.string(),
+ 	filename: v.optional(v.string())
+ });
++// FE-1630 local extension: code-facing JSON context, never model content.
++const DeliveredContextSchema = v.pipe(v.unknown(), v.check((input) => {
++	const ancestors = new Set();
++	const isJson = (value) => {
++		if (value === null || typeof value === "string" || typeof value === "boolean") return true;
++		if (typeof value === "number") return Number.isFinite(value);
++		if (typeof value !== "object" || ancestors.has(value)) return false;
++		if (!Array.isArray(value) && Object.getPrototypeOf(value) !== Object.prototype && Object.getPrototypeOf(value) !== null) return false;
++		if (Object.getOwnPropertySymbols(value).length > 0) return false;
++		ancestors.add(value);
++		const valid = (Array.isArray(value) ? [...value] : Object.values(value)).every(isJson);
++		ancestors.delete(value);
++		return valid;
++	};
++	try { return isJson(input); } catch { return false; }
++}, "Delivered message context must contain only finite, acyclic JSON values."));
+ const DeliveredUserMessageSchema = v.object({
+ 	kind: v.literal("user"),
+ 	body: v.string(),
++	context: v.optional(DeliveredContextSchema),
+ 	attachments: v.optional(v.array(DeliveredAttachmentSchema))
+ });
+ const DeliveredSignalMessageSchema = v.object({
+ 	kind: v.literal("signal"),
+ 	type: v.pipe(v.string(), v.nonEmpty("Signal message \"type\" must not be empty."), v.check((type) => !RESERVED_SIGNAL_TYPES.has(type), (issue) => `Signal type "${issue.input}" is framework-reserved vocabulary (the runtime's own narration and recovery signals) — use an application-specific type.`)),
+ 	body: v.string(),
++	context: v.optional(DeliveredContextSchema),
+ 	attributes: v.optional(v.record(v.string(), v.string())),
+ 	tagName: v.optional(v.pipe(v.string(), v.regex(/^[A-Za-z_][A-Za-z0-9_.-]*$/, "Signal message \"tagName\" must be a valid XML tag name (letters, digits, \"_\", \"-\", \".\"; must not start with a digit, \"-\", or \".\").")))
+ });
+diff --git a/dist/types-CVx9SjIx.d.mts b/dist/types-CVx9SjIx.d.mts
+index 0c9ab2477d44e4df8b60c007f5e04c327abb20c3..78499db37c9e25562aea4b67c1050a197e925421 100644
+--- a/dist/types-CVx9SjIx.d.mts
++++ b/dist/types-CVx9SjIx.d.mts
+@@ -224,12 +224,16 @@ type DeliveredAttachment = PromptImage & {
+ type DeliveredMessage = {
+   kind: 'user';
+   body: string;
++  /** FE-1630 local extension: JSON-only code-facing context; never model text. */
++  context?: unknown;
+   attachments?: DeliveredAttachment[];
+ } | {
+   kind: 'signal';
+   /** Caller-defined event/signal type, e.g. `'slack.message'`. */
+   type: string;
+   body: string;
++  /** FE-1630 local extension: JSON-only code-facing context; never model text. */
++  context?: unknown;
+   attributes?: Record<string, string>;
+   tagName?: string;
+ };

.yarn/patches/@flue-sdk-npm-2.0.3-delivery-context.patch

@@ -0,0 +1,20 @@
+diff --git a/dist/index.d.mts b/dist/index.d.mts
+index f7292215b2ac4ca3ba27554f316f6b43c0440015..e171bb7bbf4e2e6ae97c622fa19ea4edf95e4c53 100644
+--- a/dist/index.d.mts
++++ b/dist/index.d.mts
+@@ -473,11 +473,15 @@ interface DeliveredAttachment {
+ type DeliveredMessage = {
+   kind: 'user';
+   body: string;
++  /** FE-1630 local extension: JSON-only code-facing context; never model text. */
++  context?: unknown;
+   attachments?: DeliveredAttachment[];
+ } | {
+   kind: 'signal';
+   type: string;
+   body: string;
++  /** FE-1630 local extension: JSON-only code-facing context; never model text. */
++  context?: unknown;
+   attributes?: Record<string, string>;
+   tagName?: string;
+ };

apps/brunch-agent/src/agents/chat-agent/agent.ts

@@ -7,7 +7,7 @@
  * deployment diagnostics and transport-specific instructions.
  */
 
-import { useInstruction, useTool } from "@flue/runtime";
+import { useDelivery, useInstruction, useTool } from "@flue/runtime";
 
 import {
   SDCPN_MODELLING_SKILL_NAME,
@@ -29,6 +29,23 @@ export function ChatAgent() {
   const coreSystemPrompt = useBrunchAgent(`anthropic/${CHAT_MODEL_ID}`);
   useSdcpnPlugin();
 
+  // FE-1630 local Flue 2.0.3 patch: a per-delivery presentation preference,
+  // not provenance or permission. Never interpolate caller-supplied instructions.
+  const context = useDelivery().context;
+  if (
+    typeof context === "object" &&
+    context !== null &&
+    "responseMode" in context &&
+    context.responseMode === "voice"
+  ) {
+    useInstruction(`Voice response style for this delivery only:
+Respond conversationally and concisely. Put the necessary question or conclusion first.
+Avoid unnecessary preambles and repetition; preserve consequential qualifications.
+For a short clarification, prefer one or two spoken sentences, with any consequential qualification, rather than an unsolicited report or a repeated summary. Expand only when the question requires it.
+When a detailed report is needed, keep it complete in the visible canonical response; the application offers to read long responses on request.
+These are presentation instructions only. Retain all domain, evidence, workpiece, and tool obligations.`);
+  }
+
   useInstruction(
     `
 Call ping when you need to confirm the server tool path.

apps/brunch-agent/test/architecture/boundaries.integration.ts

@@ -429,6 +429,8 @@ describe("the HASH smoke is runnable without a model key or a network (spec §12
       "Types the Flue logger and calls the core marker tool with a mocked data-part writer and logger; no runtime boot, provider, key or socket.",
     "apps/brunch-agent/test/brunch-turn.test.ts":
       "Types Flue's client, admission, and conversation snapshot and constructs FlueExecutionError so the persona bridge can be unit-tested against a stubbed client — no provider key, no socket, no model call, no runtime boot.",
+    "apps/brunch-agent/test/flue-delivery-context.test.ts":
+      "Tests the owner-approved local Flue 2.0.3 delivery-context patch through router.fetch, faux provider, disposable SQLite restart, and pinned private recovery seams — no provider key, socket, or network model call.",
     "apps/brunch-agent/test/flue-transcript.test.ts":
       "Types Flue's public conversation snapshot so the transcript projector can be unit-tested; the import is type-only — no provider key, no socket, no model call, no runtime boot.",
     "apps/brunch-agent/test/petrinaut-chat.integration.ts":
@@ -445,6 +447,8 @@ describe("the HASH smoke is runnable without a model key or a network (spec §12
       "Boots the built Flue ChatAgent with pi-ai's faux provider and a headless Petrinaut client to prove validated construct-only tool flow without a provider key, socket, or network model call.",
     "apps/brunch-agent/test/telemetry.test.ts":
       "Constructs Flue's content-free OpenTelemetry instrumentation with an injected exporter setup to prove disposal order; it registers no global instrumentation, opens no socket, and makes no provider call.",
+    "apps/brunch-agent/test/voice-context.test.ts":
+      "Boots the production ChatAgent with a faux provider to compare effective system prompts across typed, Voice, and browser-result deliveries — no provider key, socket, or network model call.",
     "apps/brunch-agent/test/workpiece.test.ts":
       "Types Flue's public conversation snapshot so the substrate-neutral workpiece selector and app-owned SHA-256 projection can be unit-tested against in-memory messages — no provider key, no socket, no model call, no runtime boot.",
     "libs/@hashintel/brunch-agent/packages/transport-aisdk/test/chat-transport.test.ts":