@antiphony/shared 0.1.0 → 0.3.0

package/dist/cjs/types/audio.cjs

@@ -55,11 +55,8 @@ zod.z.object({
   handle: zod.z.string().min(3).max(20).regex(/^[a-zA-Z0-9_]+$/).nullable().optional(),
   /** User stated intent (e.g. "Podcaster", "Listener") */
   usageIntent: zod.z.string().nullable().optional(),
-  /** 
-   * Domain for federated handle support. 
-   * Defaults to 'voxpop.com'.
-   */
-  domain: zod.z.string().default("voxpop.com"),
+  /** Domain for federated handle support. */
+  domain: zod.z.string().default("antiphony.dev"),
   /**
    * Display Name (e.g. "Brad Thorson"). Nullable: Firestore stores `null`
    * when the user clears this field via the settings form, and the schema
@@ -87,313 +84,14 @@ zod.z.object({
   /** Account status. Deactivated accounts retain data but are excluded from lookups. */
   status: zod.z.enum(["active", "deactivated"]).default("active"),
   /** Timestamp when the account was deactivated (soft deleted) */
-  deactivatedAt: FirestoreTimestampSchema.optional(),
-  /**
-   * Denormalized org memberships — { orgId: role } for fast lookup.
-   * Source of truth is organizations/{orgId}/members/{userId}.
-   * Kept in sync by Cloud Function trigger.
-   */
-  orgMemberships: zod.z.record(zod.z.string(), zod.z.enum(["owner", "admin", "member"])).optional()
-});
-var PromptRecordSchema = zod.z.object({
-  /** Unique Prompt ID */
-  id: zod.z.string(),
-  /** ID of the User who created this prompt. Always a user ID, never an org ID. @see UserRecord */
-  authorId: zod.z.string(),
-  /** Organization context this prompt belongs to (null = personal/no org) */
-  orgId: zod.z.string().nullable().optional(),
-  /** The main text of the question/prompt */
-  title: zod.z.string().min(3),
-  /** Optional extra context */
-  description: zod.z.string().nullable().optional(),
-  /** User who created this prompt (differs from authorId when org-owned) */
-  createdBy: zod.z.string().optional(),
-  /** URL to the recorded audio file (GCS) */
-  audioUrl: zod.z.string().url().or(zod.z.literal("")),
-  /** AT Protocol blob reference (future replacement for audioUrl) */
-  audio: BlobRefSchema.optional(),
-  /**
-   * AT Protocol URI returned by the publisher after a successful
-   * `repo.putRecord` against the author's PDS — e.g.
-   * `at://did:plc:abc123/com.voxpop.audio.prompt/3kj4...`. Optional,
-   * no migration: existing rows leave it unset. Format-validated so
-   * malformed strings surface at the schema-parse boundary rather than
-   * being silently stored.
-   */
-  atprotoUri: zod.z.string().regex(/^at:\/\/.+/).optional(),
-  /** Server timestamp of creation */
-  createdAt: FirestoreTimestampSchema,
-  /**
-   * Life-cycle status.
-   * - `live`: Visible and accepting replies.
-   * - `archived`: Visible but closed for new replies.
-   * - `deleted`: Soft deleted.
-   */
-  status: zod.z.enum(["live", "archived", "deleted"]).default("live"),
-  /** AI Enrichment Fields */
-  aiStatus: zod.z.enum(["pending", "complete", "error"]).optional(),
-  aiError: zod.z.string().optional(),
-  aiSummary: zod.z.string().optional(),
-  aiLabels: zod.z.array(zod.z.string()).optional(),
-  transcription: zod.z.string().optional(),
-  /** Pre-computed waveform peaks (normalized 0–1) for instant audio visualization */
-  waveformPeaks: zod.z.array(zod.z.number()).optional(),
-  /** Social Share Video Fields */
-  socialVideoUrl: zod.z.string().url().optional(),
-  socialVideoStoragePath: zod.z.string().optional(),
-  socialVideoStatus: zod.z.enum(["pending", "complete", "error"]).optional(),
-  socialVideoError: zod.z.string().optional(),
-  /** The audio URL/path used to generate the current video (for cache invalidation) */
-  socialVideoSourceAudio: zod.z.string().optional()
-});
-var ReplyRecordSchema = zod.z.object({
-  /** Unique Reply ID */
-  id: zod.z.string(),
-  /** The Prompt being replied to. @see PromptRecord */
-  promptId: zod.z.string(),
-  /** The User who replied. @see UserRecord */
-  authorId: zod.z.string(),
-  /** URL to the recorded audio file (GCS) */
-  audioUrl: zod.z.string().url(),
-  /** AT Protocol blob reference (future replacement for audioUrl) */
-  audio: BlobRefSchema.optional(),
-  /** Server timestamp of creation */
-  createdAt: FirestoreTimestampSchema,
-  /**
-   * Life-cycle status.
-   * - `live`: Visible and accepting replies.
-   * - `archived`: Visible but closed for new replies.
-   * - `deleted`: Soft deleted.
-   */
-  status: zod.z.enum(["live", "archived", "deleted"]).default("live"),
-  /**
-   * Pre-computed waveform peaks (normalized 0–1) for instant audio
-   * visualization. **Stays on canonical** (does NOT move to the
-   * enrichment doc) — produced by a plain ffmpeg pass at ingestion,
-   * not an AI step; a self-hoster without paid-tier AI still needs
-   * this on every reply for the audio player. See
-   * `specs/ai-enrichment-split.md` § 5.
-   */
-  waveformPeaks: zod.z.array(zod.z.number()).optional(),
-  /**
-   * Duration of the audio in seconds, computed server-side from
-   * ffmpeg. **Stays on canonical** (same reasoning as `waveformPeaks`
-   * above — ingestion ffmpeg output, not an AI enrichment). See
-   * `specs/ai-enrichment-split.md` § 5.
-   */
-  audioDurationSec: zod.z.number().optional()
-});
-zod.z.object({
-  id: zod.z.string(),
-  /** Private notes by the prompt author about this reply. */
-  notes: zod.z.string().optional(),
-  // === AI-enrichment fields (sole source of truth post Stage 4) ===
-  //
-  // These lifted off canonical in Stage 4 of `specs/ai-enrichment-split.md`.
-  // Writers (`functions/`) route AI updates here via the split-write
-  // helper in `functions/src/services/replyEnrichmentDualWrite.ts`;
-  // readers source them via the hydrator's enrichment branch (see
-  // `packages/core/services/hydration.ts`).
-  // --- AI core (Gemini-generated) ---
-  aiStatus: zod.z.enum(["pending", "complete", "error", "skipped_too_short"]).optional(),
-  aiError: zod.z.string().optional(),
-  aiSummary: zod.z.string().optional(),
-  aiLabels: zod.z.array(zod.z.string()).optional(),
-  transcription: zod.z.string().optional(),
-  sentiment: zod.z.enum(["Positive", "Negative", "Neutral"]).optional(),
-  /** Must match the widened enum in `ReplyRecordSchema.energyLevel`. */
-  energyLevel: zod.z.enum(["High", "Low", "Neutral"]).optional(),
-  engagementScore: zod.z.number().min(1).max(10).optional(),
-  // --- Voice isolation (ElevenLabs, paid tier) ---
-  /** Noise-reduced audio URL — replaces `audioUrl` for downstream players when present. PUBLIC. */
-  enhancedAudioUrl: zod.z.string().url().optional(),
-  /** Storage path companion to `enhancedAudioUrl` — private. */
-  enhancedStoragePath: zod.z.string().optional(),
-  // --- Social-share video (paid tier) ---
-  //
-  // All `socialVideo*` fields are creator-only. The URL points at the
-  // generated artifact (a video file the creator can download and post
-  // to social media); the reply detail page does NOT render it.
-  socialVideoUrl: zod.z.string().url().optional(),
-  socialVideoStoragePath: zod.z.string().optional(),
-  socialVideoStatus: zod.z.enum(["pending", "complete", "error"]).optional(),
-  socialVideoError: zod.z.string().optional(),
-  /** The audio URL/path used to generate the current video (for cache invalidation). */
-  socialVideoSourceAudio: zod.z.string().optional()
-});
-zod.z.object({
-  /** Composite key `${viewerUid}_${targetUid}`. */
-  id: zod.z.string(),
-  /** Per-viewer CRM notes about the target. */
-  notes: zod.z.string().optional(),
-  /** Per-viewer freeform tags about the target. */
-  tags: zod.z.array(zod.z.string()).optional(),
-  // === Identity-merge: alias set ===
-  //
-  // Other identifiers the viewer has declared to be the SAME person as
-  // this entry's `targetUid`. vCard/URI-aligned: each entry is a
-  // scheme-prefixed identifier, so one field generalizes across networks
-  // AND across the future contact-sync import (which carries phone/email):
-  //   "uid:<firebaseUid>" | "did:plc:…" | "handle:bob.bsky.social"
-  //   | "tel:+15551234567" | "mailto:x@example.com"
-  // Mirrors vCard 4.0's `UID` + `CLIENTPIDMAP`/`PID` source-tracking
-  // (RFC 6350) — the standard answer to "the same person from multiple
-  // sources". See `specs/people-lexicon-prior-art.md`. The People
-  // read-path collapses any replier whose "uid:<uid>" appears here into
-  // this primary entry. Empty until the merge feature is used.
-  aliases: zod.z.array(zod.z.string()).optional(),
-  lastUpdated: FirestoreTimestampSchema.optional()
-});
-zod.z.object({
-  sipUri: zod.z.string(),
-  sipUsername: zod.z.string(),
-  sipSecret: zod.z.string(),
-  provider: zod.z.enum(["twilio", "plivo", "internal"])
-});
-zod.z.object({
-  /** User's personal phone number (E.164) */
-  phoneNumber: zod.z.string(),
-  /** Line type from Twilio Lookup v2 */
-  lineType: zod.z.string().nullable(),
-  /** Carrier name from Twilio Lookup v2 */
-  carrier: zod.z.string().nullable(),
-  /** free = shared Twilio number (ForwardedFrom routing), paid = dedicated number */
-  tier: zod.z.enum(["free", "paid"]),
-  /** The VoxPop Twilio number calls forward to (E.164) */
-  voxpopNumber: zod.z.string(),
-  /** Twilio Phone Number SID (paid tier only) */
-  twilioNumberSid: zod.z.string().nullable().optional(),
-  /** Forwarding verification state */
-  verificationStatus: zod.z.enum(["pending", "verifying", "verified", "failed"]).default("pending"),
-  /** Last verification attempt timestamp */
-  lastVerificationAt: FirestoreTimestampSchema.optional(),
-  /** Number of verification attempts */
-  verificationAttempts: zod.z.number().default(0),
-  /** Reason for verification failure */
-  failureReason: zod.z.string().nullable().optional(),
-  /** Whether call forwarding is active */
-  enabled: zod.z.boolean().default(false),
-  createdAt: FirestoreTimestampSchema,
-  updatedAt: FirestoreTimestampSchema
-});
-var ConnectorTypeSchema = zod.z.enum(["telephony"]);
-var ConnectorStatusSchema = zod.z.object({
-  /** Coarse, generic lifecycle the control-plane UI can render without
-   * connector-specific knowledge. */
-  state: zod.z.enum(["unconfigured", "pending", "active", "error", "disabled"]).default("unconfigured"),
-  detail: zod.z.string().nullable().optional(),
-  /** Opaque, connector-specific status detail (e.g. telephony's
-   * `{ verificationStatus, verificationAttempts, failureReason }`). Connector-
-   * owned like the rest of `status` — never user-writable. Nullable so a doc
-   * that stored `data: null` round-trips without a parse error. */
-  data: zod.z.record(zod.z.unknown()).nullable().optional(),
-  updatedAt: FirestoreTimestampSchema.optional()
-});
-zod.z.object({
-  connectorType: ConnectorTypeSchema,
-  /** The owning user. Org-scoping (ownerId as an orgId) is a later step. */
-  ownerId: zod.z.string(),
-  /** Opaque, connector-specific blob. Core does not interpret this. */
-  settings: zod.z.record(zod.z.unknown()).default({}),
-  /** Reference into a secret store (e.g. Secret Manager key). Never a raw secret. */
-  secretRef: zod.z.string().nullable().optional(),
-  enabled: zod.z.boolean().default(false),
-  status: ConnectorStatusSchema.default({ state: "unconfigured" }),
-  createdAt: FirestoreTimestampSchema,
-  updatedAt: FirestoreTimestampSchema
-});
-zod.z.object({
-  id: zod.z.string(),
-  ownerId: zod.z.string(),
-  /** The caller number this rule matches (E.164). Format-enforced at the
-   *  record level so any writer (API, future contact-sync/callback) can't
-   *  persist a malformed number. */
-  e164: zod.z.string().regex(/^\+[1-9]\d{6,14}$/, "Must be an E.164 phone number"),
-  /** Display label, e.g. "Mom" / "Delta Airlines". null = unlabeled. */
-  label: zod.z.string().nullable().optional(),
-  /** `allow` = ring through; `screen` = async voicemail. */
-  action: zod.z.enum(["allow", "screen"]),
-  /** Provenance. `manual` = user-created; the others are future writers. */
-  source: zod.z.enum(["manual", "contact-sync", "callback"]),
-  /** null = permanent; a date = self-expiring exception. */
-  expiresAt: FirestoreTimestampSchema.nullable().optional(),
-  createdAt: FirestoreTimestampSchema
-});
-var OrganizationRecordSchema = zod.z.object({
-  id: zod.z.string(),
-  /** Display name of the organization */
-  name: zod.z.string().min(3).max(50),
-  /** 
-   * Unique handle for the organization (e.g. voxpop.com/@mypodcast).
-   * Used for public URLs.
-   */
-  slug: zod.z.string().min(3).max(30).regex(/^[a-z0-9-]+$/),
-  /** URL to avatar/logo */
-  avatarUrl: zod.z.string().url().optional(),
-  /** URL to the podcast RSS feed */
-  rssFeedUrl: zod.z.string().url().optional(),
-  /** External website URL */
-  websiteUrl: httpsUrl().optional(),
-  /** Description or tagline */
-  description: zod.z.string().optional(),
-  /** Owner ID (User ID) */
-  ownerId: zod.z.string(),
-  /** Server timestamp of creation */
-  createdAt: FirestoreTimestampSchema,
-  /** Verified domain (e.g., "acme.com") — enables auto-join, enterprise features */
-  domain: zod.z.string().nullable().optional(),
-  /** Whether the domain has been verified via DNS TXT record */
-  domainVerified: zod.z.boolean().default(false),
-  /** DNS verification token (stored server-side until verification completes) */
-  domainVerificationToken: zod.z.string().optional(),
-  /** Billing email — required for paid orgs, where invoices go */
-  billingEmail: zod.z.string().email().nullable().optional(),
-  /**
-   * Tier determines isolation and feature set. Orgs are meant to be paid
-   * (business or enterprise); free/pro exist on the enum for the individual track.
-   * Default is provisionally `business` (the entry paid tier) — it's assigned at
-   * creation with no subscription behind it yet, so it stays provisional until billing
-   * promotes/reconciles the org. See docs/tech-debt.md "Org tier billing reconciliation".
-   */
-  tier: zod.z.enum(["free", "pro", "business", "enterprise"]).default("business"),
-  /** Stripe Customer ID */
-  stripeCustomerId: zod.z.string().optional(),
-  /** Subscription Status */
-  subscriptionStatus: zod.z.enum(["active", "trialing", "past_due", "canceled", "unpaid"]).optional()
-});
-var OrganizationMemberRecordSchema = zod.z.object({
-  orgId: zod.z.string(),
-  userId: zod.z.string(),
-  /** Role in the organization */
-  role: zod.z.enum(["owner", "admin", "member"]),
-  /** Server timestamp of joining */
-  joinedAt: FirestoreTimestampSchema,
-  invitedBy: zod.z.string().optional()
-});
-var OrgInviteRecordSchema = zod.z.object({
-  id: zod.z.string(),
-  orgId: zod.z.string(),
-  /** Email the invite was sent to */
-  email: zod.z.string().email(),
-  /** Role to assign on acceptance */
-  role: zod.z.enum(["admin", "member"]),
-  /** User ID of who sent the invite */
-  invitedBy: zod.z.string(),
-  /** Invite lifecycle status */
-  status: zod.z.enum(["pending", "accepted", "expired", "revoked"]).default("pending"),
-  /** Server timestamp of creation */
-  createdAt: FirestoreTimestampSchema,
-  /** When this invite expires */
-  expiresAt: FirestoreTimestampSchema
+  deactivatedAt: FirestoreTimestampSchema.optional()
 });
 var ProfileViewBasicSchema = zod.z.object({
   id: zod.z.string(),
   handle: zod.z.string().nullable().optional(),
   // `displayName` and `bio` are `.nullable()` — Firestore stores `null` for
   // empty values on these fields (see users-dependencies.ts), and Zod's
-  // `.optional()` alone rejects `null`. This hit dashboard rendering on the
-  // Phase 3.1 HTTP cutover, when transport-layer Zod validation started
-  // actually exercising the wire shape. Consumers already use truthy
+  // `.optional()` alone rejects `null`. Consumers already use truthy
   // checks / `??` / `||`, so widening the type to include `null` is safe.
   displayName: zod.z.string().nullable().optional(),
   avatarUrl: zod.z.string().nullable().optional(),
@@ -429,24 +127,7 @@ var ProfileViewDetailedSchema = ProfileViewBasicSchema.extend({
     handle: zod.z.string(),
     did: zod.z.string()
   }).optional(),
-  usageIntent: zod.z.string().nullable().optional(),
-  /** Hydrated RSS Data (fetched from sub-collection) */
-  rssSummary: zod.z.object({
-    title: zod.z.string().optional(),
-    description: zod.z.string().optional(),
-    items: zod.z.array(zod.z.object({
-      title: zod.z.string().optional(),
-      link: zod.z.string().optional(),
-      content: zod.z.string().optional(),
-      pubDate: zod.z.string().optional()
-    })).optional(),
-    lastFetchedAt: FirestoreTimestampSchema.optional()
-  }).optional(),
-  promptAudioUrl: zod.z.string().optional(),
-  /** @deprecated Use stats.prompts from ProfileViewBasic instead */
-  totalPrompts: zod.z.number().optional(),
-  totalReplies: zod.z.number().optional(),
-  favoritePromptId: zod.z.string().optional()
+  usageIntent: zod.z.string().nullable().optional()
 });
 var ProfileViewSelfSchema = ProfileViewDetailedSchema.extend({
   phoneNumber: zod.z.string().nullable().optional(),
@@ -457,9 +138,8 @@ var ProfileViewSelfSchema = ProfileViewDetailedSchema.extend({
   newReplierCount: zod.z.number().default(0),
   /**
    * Account tier from UserRecord — surfaced on the self profile so the
-   * client can gate paid features (e.g. the Performance dashboard tab).
-   * Optional for legacy docs without the field; consumers should treat
-   * missing as `'free'`.
+   * client can gate paid features. Optional for legacy docs without the
+   * field; consumers should treat missing as `'free'`.
    */
   tier: zod.z.enum(["free", "creator_pro"]).optional(),
   /**
@@ -473,231 +153,13 @@ var ProfileViewSelfSchema = ProfileViewDetailedSchema.extend({
     theme: zod.z.string().optional()
   }).optional()
 });
-var ProfileViewAdminSchema = ProfileViewSelfSchema.extend({
+ProfileViewSelfSchema.extend({
   blockedUsers: zod.z.array(zod.z.string()).optional(),
   followers: zod.z.array(zod.z.string()).optional(),
   following: zod.z.array(zod.z.string()).optional(),
   reportCount: zod.z.number().optional(),
   isBanned: zod.z.boolean().optional()
 });
-var ProfileViewSchema = ProfileViewAdminSchema;
-var PromptViewSchema = zod.z.object({
-  /** AT Protocol URI (e.g. at://did:plc.../app.../123) */
-  uri: zod.z.string().optional(),
-  /** IPFS Content ID */
-  cid: zod.z.string().optional(),
-  /** The raw prompt data */
-  record: PromptRecordSchema,
-  /** The hydrated author profile */
-  author: ProfileViewSchema,
-  /** Total number of replies */
-  replyCount: zod.z.number().default(0),
-  likeCount: zod.z.number().default(0),
-  updatedAt: FirestoreTimestampSchema.optional(),
-  lastReplyAt: FirestoreTimestampSchema.optional(),
-  tags: zod.z.array(zod.z.string()).optional(),
-  visibility: zod.z.enum(["public", "private", "unlisted", "archived"]).default("public"),
-  analytics: zod.z.object({
-    views: zod.z.number().default(0),
-    listens: zod.z.number().default(0),
-    /**
-     * Mean engagementScore (1–10) across this prompt's `status: 'live'`
-     * replies that completed AI enrichment. `null` when no such replies
-     * exist (0 would alias a valid bottom-of-range score). Derived in
-     * hydration from the prompt doc's `engagementScoreSum / Count`.
-     */
-    avgEngagementScore: zod.z.number().nullable().optional(),
-    /**
-     * Counts of `status: 'live'` AI-enriched replies grouped by sentiment.
-     * Keys lowercase by convention; source enum
-     * (`Positive | Neutral | Negative`) is mapped at the write site.
-     */
-    sentimentBreakdown: zod.z.object({
-      positive: zod.z.number(),
-      neutral: zod.z.number(),
-      negative: zod.z.number()
-    }).optional()
-  }).optional(),
-  moderation: zod.z.object({
-    flagged: zod.z.boolean().default(false),
-    reason: zod.z.string().optional()
-  }).optional(),
-  // AI Enrichment Fields (Hydrated from Record but hidden from Record Schema)
-  aiLabels: zod.z.array(zod.z.string()).optional(),
-  aiSummary: zod.z.string().optional(),
-  aiStatus: zod.z.enum(["pending", "complete", "error"]).optional(),
-  aiError: zod.z.string().optional(),
-  transcription: zod.z.string().optional()
-});
-var PromptViewPublicSchema = PromptViewSchema.omit({
-  analytics: true,
-  moderation: true,
-  aiLabels: true,
-  aiSummary: true,
-  aiStatus: true,
-  aiError: true,
-  transcription: true
-}).extend({
-  author: ProfileViewBasicSchema
-});
-var ReplyViewSchema = zod.z.object({
-  record: ReplyRecordSchema,
-  author: ProfileViewSchema,
-  recipient: ProfileViewSchema,
-  /** GCS Storage Path for audio file */
-  storagePath: zod.z.string().optional(),
-  duration: zod.z.number().optional(),
-  updatedAt: FirestoreTimestampSchema.optional(),
-  isRead: zod.z.boolean(),
-  readBy: zod.z.array(zod.z.string()).default([]),
-  isDeleted: zod.z.boolean().default(false),
-  reactions: zod.z.record(zod.z.string(), zod.z.number()).optional(),
-  moderation: zod.z.object({
-    flagged: zod.z.boolean().default(false),
-    reason: zod.z.string().optional()
-  }).optional(),
-  // AI Enrichment Fields (Hydrated from Record but hidden from Record Schema)
-  aiLabels: zod.z.array(zod.z.string()).optional(),
-  aiSummary: zod.z.string().optional(),
-  aiStatus: zod.z.enum(["pending", "complete", "error", "skipped_too_short"]).optional(),
-  aiError: zod.z.string().optional(),
-  transcription: zod.z.string().optional(),
-  sentiment: zod.z.enum(["Positive", "Negative", "Neutral"]).optional(),
-  /** Must match the widened enum in `ReplyRecordSchema.energyLevel`. */
-  energyLevel: zod.z.enum(["High", "Low", "Neutral"]).optional(),
-  engagementScore: zod.z.number().min(1).max(10).optional(),
-  // === Voice-isolation enrichment (lifted; see specs/ai-enrichment-split.md) ===
-  //
-  // `enhancedAudioUrl` is the only one of these the public view keeps —
-  // it replaces `audioUrl` for downstream players when present.
-  // `enhancedStoragePath` is private (storage paths are server-side
-  // bookkeeping).
-  enhancedAudioUrl: zod.z.string().url().optional(),
-  enhancedStoragePath: zod.z.string().optional(),
-  // === Social-share video enrichment (lifted; creator-only) ===
-  //
-  // All `socialVideo*` fields are stripped by `toReplyViewPublic` —
-  // the URL points at a generated artifact the creator may share to
-  // social media, NOT at content the reply page should render. Status /
-  // error / source-audio are job-tracking state.
-  socialVideoUrl: zod.z.string().url().optional(),
-  socialVideoStoragePath: zod.z.string().optional(),
-  socialVideoStatus: zod.z.enum(["pending", "complete", "error"]).optional(),
-  socialVideoError: zod.z.string().optional(),
-  socialVideoSourceAudio: zod.z.string().optional(),
-  /** @private Confirmed listener phone number (never exposed publicly) */
-  listenerPhoneNumber: zod.z.string().regex(/^\+[1-9]\d{1,14}$/).optional(),
-  /**
-   * @private Per-viewer private notes about this reply (CRM enrichment).
-   * Lifted into the view from `enrichments/replies/{id}.notes` by the
-   * hydrator when the viewer is the prompt author. Never populated for
-   * non-author viewers; defensively stripped by `toReplyViewPublic`.
-   */
-  notes: zod.z.string().optional()
-});
-var ReplyViewPublicSchema = ReplyViewSchema.omit({
-  listenerPhoneNumber: true,
-  notes: true,
-  // AI cluster — only `transcription` survives.
-  aiStatus: true,
-  aiError: true,
-  aiSummary: true,
-  aiLabels: true,
-  sentiment: true,
-  energyLevel: true,
-  engagementScore: true,
-  // Voice isolation — keep enhancedAudioUrl, strip the path.
-  enhancedStoragePath: true,
-  // Social-video — entire cluster is creator-only.
-  socialVideoUrl: true,
-  socialVideoStoragePath: true,
-  socialVideoStatus: true,
-  socialVideoError: true,
-  socialVideoSourceAudio: true
-});
-var OrganizationViewSchema = zod.z.object({
-  record: OrganizationRecordSchema,
-  memberCount: zod.z.number().default(1),
-  currentUserRole: zod.z.enum(["owner", "admin", "member"]).optional()
-});
-zod.z.object({
-  record: OrganizationMemberRecordSchema,
-  profile: ProfileViewBasicSchema
-});
-zod.z.object({
-  record: OrgInviteRecordSchema,
-  /** Display name of the user who sent the invite */
-  inviterName: zod.z.string().optional(),
-  /** Name of the organization */
-  orgName: zod.z.string()
-});
-zod.z.object({
-  promptId: zod.z.string(),
-  repliers: zod.z.record(zod.z.string(), zod.z.object({
-    firstReplyAt: FirestoreTimestampSchema,
-    lastReplyAt: FirestoreTimestampSchema,
-    replyCount: zod.z.number()
-  }))
-});
-PromptViewSchema.extend({
-  replies: zod.z.array(ReplyViewSchema)
-});
-var ReplierSchema = zod.z.object({
-  handle: zod.z.string(),
-  /** ISO date string */
-  lastReplyDate: zod.z.string(),
-  /** ISO date string */
-  firstReplyAt: zod.z.string(),
-  totalReplies: zod.z.number()
-});
-zod.z.discriminatedUnion("type", [
-  // Public endpoint (`GET /resolve/:handle`) — project to the basic shape so
-  // PII/admin fields (email, phoneNumber, settings, blockedUsers, …) never
-  // cross the public API boundary. See `toProfileViewBasic`.
-  zod.z.object({ type: zod.z.literal("user"), profile: ProfileViewBasicSchema }),
-  zod.z.object({ type: zod.z.literal("org"), org: OrganizationViewSchema })
-]);
-zod.z.object({
-  // Public endpoint (`GET /users/:handle/profile`) — basic shape only, so the
-  // owner's PII/admin fields never serialize to anonymous callers.
-  profileUser: ProfileViewBasicSchema,
-  // Each prompt's nested `author` is the profile owner, hydrated from the
-  // wide admin profile (`getPromptsForUser` prefetches via getUserDataByUid).
-  // Use the PUBLIC prompt/reply shapes so that nested author PII (email,
-  // phoneNumber, settings, …) and owner-only prompt enrichment never leak.
-  allPromptsWithReplies: zod.z.array(PromptViewPublicSchema.extend({
-    replies: zod.z.array(ReplyViewPublicSchema)
-  })),
-  repliers: zod.z.array(ReplierSchema)
-});
-var RssSummarySchema = zod.z.object({
-  title: zod.z.string().optional(),
-  description: zod.z.string().optional(),
-  image: zod.z.string().optional(),
-  link: zod.z.string().optional(),
-  items: zod.z.array(zod.z.object({
-    title: zod.z.string().optional(),
-    link: zod.z.string().optional(),
-    content: zod.z.string().optional(),
-    pubDate: zod.z.string().optional()
-  })).optional(),
-  lastFetchedAt: FirestoreTimestampSchema.optional()
-});
-zod.z.object({
-  org: OrganizationViewSchema,
-  prompts: zod.z.array(PromptViewSchema),
-  rssSummary: RssSummarySchema.nullable()
-});
-zod.z.object({
-  profile: ProfileViewBasicSchema,
-  totalReplies: zod.z.number(),
-  /** ISO date string */
-  lastReplyDate: zod.z.string(),
-  /** ISO date string */
-  firstReplyAt: zod.z.string(),
-  /** Phone number for anonymous repliers (from Firebase Auth, only visible to prompt author) */
-  phoneNumber: zod.z.string().optional()
-});
 
 // types/audio.ts
 var StrongRefSchema = zod.z.object({
@@ -756,6 +218,15 @@ var AudioPostRecordSchema = zod.z.object({
   orgId: zod.z.string().nullable().optional(),
   /** Denormalized from `reply` presence: `reply` set ⇒ 'reply', else 'prompt'. */
   kind: zod.z.enum(["prompt", "reply"]),
+  /**
+   * Branch participant pair (author ids) for reply gating — the parties to a
+   * reply's sub-thread: the creator (thread-root author) + the responder who
+   * opened the branch. Set on replies (deduped, 1–2 ids); absent on prompts
+   * (a prompt's repliers are the app's audience policy, not a fixed pair).
+   * Inherited down the branch so reply gating is an O(1) field check, never a
+   * thread walk. See `specs/antiphony-data-model.md` §6 "Reply gating".
+   */
+  threadParticipants: zod.z.array(zod.z.string()).optional(),
   // --- Lexicon fields (public contract) ---
   /** User-authored text (bsky-semantic). May be empty for pure-audio posts. NEVER the transcript. */
   text: zod.z.string().max(3e3),
@@ -799,7 +270,15 @@ var ActorProfileRecordSchema = zod.z.object({
 });
 var ViewerStateSchema = zod.z.object({
   /** True when the authenticated caller authored this post. */
-  isAuthor: zod.z.boolean().default(false)
+  isAuthor: zod.z.boolean().default(false),
+  /**
+   * Whether the caller may reply to this post (reply gating, §6). A prompt is
+   * repliable by any authenticated viewer (the app's audience-policy default);
+   * a reply only by its branch participants (`{ creator, branch responder }`).
+   */
+  canReply: zod.z.boolean().default(false),
+  /** Why `canReply` is false, when it is (omitted when the caller can reply). */
+  replyDisabledReason: zod.z.enum(["unauthenticated", "not_a_participant"]).optional()
 });
 var PostRecordPublicSchema = zod.z.object({
   text: zod.z.string(),