@antiphony/shared 0.1.0

package/dist/esm/types/records.d.ts

@@ -0,0 +1,840 @@
+import { z } from 'zod';
+
+/**
+ * Reusable http/https scheme allowlist refinement.
+ *
+ * `z.string().url()` accepts any scheme including `javascript:`, `data:`, and
+ * `vbscript:`, which are stored-XSS vectors when values land in an `<a href>`.
+ * Wrap any user-supplied URL field with this helper instead of bare `.url()`.
+ *
+ * Usage:
+ *   website: httpsUrl().nullable().optional()
+ *   url:     httpsUrl()
+ *
+ * Audit ref: M7 — javascript: URLs in profile links.
+ */
+declare function httpsUrl(): z.ZodEffects<z.ZodString, string, string>;
+/**
+ * Firestore Timestamp schema (strict).
+ *
+ * Accepts the shapes Firestore-derived timestamps come back as across our
+ * transports (admin SDK Timestamp object, ISO string, epoch number, native
+ * Date), and produces a `Date`. **The Date is validated** — if the input
+ * coerces to an Invalid Date (e.g. `new Date("")` or a malformed string),
+ * the parse fails loudly via a `ZodIssue` rather than returning a
+ * downstream-crashing value.
+ *
+ * Why strict: PR #425 added defensive coercion in ReplyListItem after the
+ * dashboard was crashing on `formatDistanceToNow(invalid)` calls. The
+ * underlying issue was that `z.string()` here accepted any string and
+ * `new Date(badString)` produces Invalid Date, which Zod returned
+ * successfully. Rejecting at the schema boundary keeps downstream
+ * `formatDistanceToNow` / `.toISOString()` callers safe by construction.
+ */
+declare const FirestoreTimestampSchema: z.ZodEffects<z.ZodUnion<[z.ZodType<unknown, z.ZodTypeDef, unknown>, z.ZodString, z.ZodNumber, z.ZodDate]>, Date, unknown>;
+type FirestoreTimestamp = Date;
+/**
+ * The raw user data stored in Firestore.
+ */
+declare const UserRecordSchema: z.ZodObject<{
+    /** Unique Firebase UID */
+    id: z.ZodString;
+    /** Public handle (e.g. @brad). Optional for Lite Users. */
+    handle: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    /** User stated intent (e.g. "Podcaster", "Listener") */
+    usageIntent: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    /**
+     * Domain for federated handle support.
+     * Defaults to 'voxpop.com'.
+     */
+    domain: z.ZodDefault<z.ZodString>;
+    /**
+     * Display Name (e.g. "Brad Thorson"). Nullable: Firestore stores `null`
+     * when the user clears this field via the settings form, and the schema
+     * must match storage reality or `UserRecordSchema.parse` (in
+     * `getUserRecordByUid`) will throw.
+     */
+    displayName: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    /** Short bio/description — nullable for the same reason as displayName. */
+    bio: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    /** URL to avatar image — nullable for the same reason as displayName. */
+    avatarUrl: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    /** Optional personal website surfaced on the public profile. */
+    website: z.ZodOptional<z.ZodNullable<z.ZodEffects<z.ZodString, string, string>>>;
+    /** Up to 5 additional public links (label + URL) shown under the bio. */
+    links: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        label: z.ZodString;
+        url: z.ZodEffects<z.ZodString, string, string>;
+    }, "strip", z.ZodTypeAny, {
+        label: string;
+        url: string;
+    }, {
+        label: string;
+        url: string;
+    }>, "many">>;
+    /** When true and a Bluesky identity is linked, surfaces it on the public profile. */
+    showBlueskyPublicly: z.ZodOptional<z.ZodBoolean>;
+    /** Server timestamp of creation */
+    createdAt: z.ZodEffects<z.ZodUnion<[z.ZodType<unknown, z.ZodTypeDef, unknown>, z.ZodString, z.ZodNumber, z.ZodDate]>, Date, unknown>;
+    /** Individual account tier — free or creator_pro */
+    tier: z.ZodDefault<z.ZodEnum<["free", "creator_pro"]>>;
+    /** Account status. Deactivated accounts retain data but are excluded from lookups. */
+    status: z.ZodDefault<z.ZodEnum<["active", "deactivated"]>>;
+    /** Timestamp when the account was deactivated (soft deleted) */
+    deactivatedAt: z.ZodOptional<z.ZodEffects<z.ZodUnion<[z.ZodType<unknown, z.ZodTypeDef, unknown>, z.ZodString, z.ZodNumber, z.ZodDate]>, Date, unknown>>;
+    /**
+     * Denormalized org memberships — { orgId: role } for fast lookup.
+     * Source of truth is organizations/{orgId}/members/{userId}.
+     * Kept in sync by Cloud Function trigger.
+     */
+    orgMemberships: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<["owner", "admin", "member"]>>>;
+}, "strip", z.ZodTypeAny, {
+    status: "active" | "deactivated";
+    id: string;
+    domain: string;
+    createdAt: Date;
+    tier: "free" | "creator_pro";
+    handle?: string | null | undefined;
+    usageIntent?: string | null | undefined;
+    displayName?: string | null | undefined;
+    bio?: string | null | undefined;
+    avatarUrl?: string | null | undefined;
+    website?: string | null | undefined;
+    links?: {
+        label: string;
+        url: string;
+    }[] | undefined;
+    showBlueskyPublicly?: boolean | undefined;
+    deactivatedAt?: Date | undefined;
+    orgMemberships?: Record<string, "owner" | "admin" | "member"> | undefined;
+}, {
+    id: string;
+    status?: "active" | "deactivated" | undefined;
+    handle?: string | null | undefined;
+    usageIntent?: string | null | undefined;
+    domain?: string | undefined;
+    displayName?: string | null | undefined;
+    bio?: string | null | undefined;
+    avatarUrl?: string | null | undefined;
+    website?: string | null | undefined;
+    links?: {
+        label: string;
+        url: string;
+    }[] | undefined;
+    showBlueskyPublicly?: boolean | undefined;
+    createdAt?: unknown;
+    tier?: "free" | "creator_pro" | undefined;
+    deactivatedAt?: unknown;
+    orgMemberships?: Record<string, "owner" | "admin" | "member"> | undefined;
+}>;
+type UserRecord = z.infer<typeof UserRecordSchema>;
+/**
+ * The raw prompt data stored in Firestore.
+ */
+declare const PromptRecordSchema: z.ZodObject<{
+    /** Unique Prompt ID */
+    id: z.ZodString;
+    /** ID of the User who created this prompt. Always a user ID, never an org ID. @see UserRecord */
+    authorId: z.ZodString;
+    /** Organization context this prompt belongs to (null = personal/no org) */
+    orgId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    /** The main text of the question/prompt */
+    title: z.ZodString;
+    /** Optional extra context */
+    description: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    /** User who created this prompt (differs from authorId when org-owned) */
+    createdBy: z.ZodOptional<z.ZodString>;
+    /** URL to the recorded audio file (GCS) */
+    audioUrl: z.ZodUnion<[z.ZodString, z.ZodLiteral<"">]>;
+    /** AT Protocol blob reference (future replacement for audioUrl) */
+    audio: z.ZodOptional<z.ZodObject<{
+        $type: z.ZodLiteral<"blob">;
+        ref: z.ZodString;
+        mimeType: z.ZodString;
+        size: z.ZodNumber;
+    }, "strip", z.ZodTypeAny, {
+        $type: "blob";
+        ref: string;
+        mimeType: string;
+        size: number;
+    }, {
+        $type: "blob";
+        ref: string;
+        mimeType: string;
+        size: number;
+    }>>;
+    /**
+     * AT Protocol URI returned by the publisher after a successful
+     * `repo.putRecord` against the author's PDS — e.g.
+     * `at://did:plc:abc123/com.voxpop.audio.prompt/3kj4...`. Optional,
+     * no migration: existing rows leave it unset. Format-validated so
+     * malformed strings surface at the schema-parse boundary rather than
+     * being silently stored.
+     */
+    atprotoUri: z.ZodOptional<z.ZodString>;
+    /** Server timestamp of creation */
+    createdAt: z.ZodEffects<z.ZodUnion<[z.ZodType<unknown, z.ZodTypeDef, unknown>, z.ZodString, z.ZodNumber, z.ZodDate]>, Date, unknown>;
+    /**
+     * Life-cycle status.
+     * - `live`: Visible and accepting replies.
+     * - `archived`: Visible but closed for new replies.
+     * - `deleted`: Soft deleted.
+     */
+    status: z.ZodDefault<z.ZodEnum<["live", "archived", "deleted"]>>;
+    /** AI Enrichment Fields */
+    aiStatus: z.ZodOptional<z.ZodEnum<["pending", "complete", "error"]>>;
+    aiError: z.ZodOptional<z.ZodString>;
+    aiSummary: z.ZodOptional<z.ZodString>;
+    aiLabels: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    transcription: z.ZodOptional<z.ZodString>;
+    /** Pre-computed waveform peaks (normalized 0–1) for instant audio visualization */
+    waveformPeaks: z.ZodOptional<z.ZodArray<z.ZodNumber, "many">>;
+    /** Social Share Video Fields */
+    socialVideoUrl: z.ZodOptional<z.ZodString>;
+    socialVideoStoragePath: z.ZodOptional<z.ZodString>;
+    socialVideoStatus: z.ZodOptional<z.ZodEnum<["pending", "complete", "error"]>>;
+    socialVideoError: z.ZodOptional<z.ZodString>;
+    /** The audio URL/path used to generate the current video (for cache invalidation) */
+    socialVideoSourceAudio: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    status: "live" | "archived" | "deleted";
+    id: string;
+    createdAt: Date;
+    authorId: string;
+    title: string;
+    audioUrl: string;
+    orgId?: string | null | undefined;
+    description?: string | null | undefined;
+    createdBy?: string | undefined;
+    audio?: {
+        $type: "blob";
+        ref: string;
+        mimeType: string;
+        size: number;
+    } | undefined;
+    atprotoUri?: string | undefined;
+    aiStatus?: "pending" | "complete" | "error" | undefined;
+    aiError?: string | undefined;
+    aiSummary?: string | undefined;
+    aiLabels?: string[] | undefined;
+    transcription?: string | undefined;
+    waveformPeaks?: number[] | undefined;
+    socialVideoUrl?: string | undefined;
+    socialVideoStoragePath?: string | undefined;
+    socialVideoStatus?: "pending" | "complete" | "error" | undefined;
+    socialVideoError?: string | undefined;
+    socialVideoSourceAudio?: string | undefined;
+}, {
+    id: string;
+    authorId: string;
+    title: string;
+    audioUrl: string;
+    status?: "live" | "archived" | "deleted" | undefined;
+    createdAt?: unknown;
+    orgId?: string | null | undefined;
+    description?: string | null | undefined;
+    createdBy?: string | undefined;
+    audio?: {
+        $type: "blob";
+        ref: string;
+        mimeType: string;
+        size: number;
+    } | undefined;
+    atprotoUri?: string | undefined;
+    aiStatus?: "pending" | "complete" | "error" | undefined;
+    aiError?: string | undefined;
+    aiSummary?: string | undefined;
+    aiLabels?: string[] | undefined;
+    transcription?: string | undefined;
+    waveformPeaks?: number[] | undefined;
+    socialVideoUrl?: string | undefined;
+    socialVideoStoragePath?: string | undefined;
+    socialVideoStatus?: "pending" | "complete" | "error" | undefined;
+    socialVideoError?: string | undefined;
+    socialVideoSourceAudio?: string | undefined;
+}>;
+type PromptRecord = z.infer<typeof PromptRecordSchema>;
+/**
+ * The raw reply data stored in Firestore.
+ *
+ * AI-derived fields (transcription, sentiment, engagement score, voice
+ * isolation, social-share video, etc.) live on `ReplyEnrichmentRecord`
+ * at `enrichments/replies/items/{id}` — see § 1 of
+ * `specs/ai-enrichment-split.md`. Only ingestion-time outputs that a
+ * self-hoster without paid AI still needs (waveform peaks + audio
+ * duration) remain on the canonical doc.
+ */
+declare const ReplyRecordSchema: z.ZodObject<{
+    /** Unique Reply ID */
+    id: z.ZodString;
+    /** The Prompt being replied to. @see PromptRecord */
+    promptId: z.ZodString;
+    /** The User who replied. @see UserRecord */
+    authorId: z.ZodString;
+    /** URL to the recorded audio file (GCS) */
+    audioUrl: z.ZodString;
+    /** AT Protocol blob reference (future replacement for audioUrl) */
+    audio: z.ZodOptional<z.ZodObject<{
+        $type: z.ZodLiteral<"blob">;
+        ref: z.ZodString;
+        mimeType: z.ZodString;
+        size: z.ZodNumber;
+    }, "strip", z.ZodTypeAny, {
+        $type: "blob";
+        ref: string;
+        mimeType: string;
+        size: number;
+    }, {
+        $type: "blob";
+        ref: string;
+        mimeType: string;
+        size: number;
+    }>>;
+    /** Server timestamp of creation */
+    createdAt: z.ZodEffects<z.ZodUnion<[z.ZodType<unknown, z.ZodTypeDef, unknown>, z.ZodString, z.ZodNumber, z.ZodDate]>, Date, unknown>;
+    /**
+     * Life-cycle status.
+     * - `live`: Visible and accepting replies.
+     * - `archived`: Visible but closed for new replies.
+     * - `deleted`: Soft deleted.
+     */
+    status: z.ZodDefault<z.ZodEnum<["live", "archived", "deleted"]>>;
+    /**
+     * Pre-computed waveform peaks (normalized 0–1) for instant audio
+     * visualization. **Stays on canonical** (does NOT move to the
+     * enrichment doc) — produced by a plain ffmpeg pass at ingestion,
+     * not an AI step; a self-hoster without paid-tier AI still needs
+     * this on every reply for the audio player. See
+     * `specs/ai-enrichment-split.md` § 5.
+     */
+    waveformPeaks: z.ZodOptional<z.ZodArray<z.ZodNumber, "many">>;
+    /**
+     * Duration of the audio in seconds, computed server-side from
+     * ffmpeg. **Stays on canonical** (same reasoning as `waveformPeaks`
+     * above — ingestion ffmpeg output, not an AI enrichment). See
+     * `specs/ai-enrichment-split.md` § 5.
+     */
+    audioDurationSec: z.ZodOptional<z.ZodNumber>;
+}, "strip", z.ZodTypeAny, {
+    status: "live" | "archived" | "deleted";
+    id: string;
+    createdAt: Date;
+    authorId: string;
+    audioUrl: string;
+    promptId: string;
+    audio?: {
+        $type: "blob";
+        ref: string;
+        mimeType: string;
+        size: number;
+    } | undefined;
+    waveformPeaks?: number[] | undefined;
+    audioDurationSec?: number | undefined;
+}, {
+    id: string;
+    authorId: string;
+    audioUrl: string;
+    promptId: string;
+    status?: "live" | "archived" | "deleted" | undefined;
+    createdAt?: unknown;
+    audio?: {
+        $type: "blob";
+        ref: string;
+        mimeType: string;
+        size: number;
+    } | undefined;
+    waveformPeaks?: number[] | undefined;
+    audioDurationSec?: number | undefined;
+}>;
+type ReplyRecord = z.infer<typeof ReplyRecordSchema>;
+/**
+ * Reply Enrichment Record. Per-reply CRM data owned by the prompt-author
+ * (the "viewer" with read/write access). Stored at
+ * `enrichments/replies/{replyId}` — a separate namespace from the canonical
+ * `replies/{replyId}` so self-hosters running just core-api see clean
+ * records without phantom CRM fields. See specs/data-separation.md § 3.
+ *
+ * `id` matches the parent reply's id by convention (same doc id, sibling
+ * collection space).
+ */
+declare const ReplyEnrichmentRecordSchema: z.ZodObject<{
+    id: z.ZodString;
+    /** Private notes by the prompt author about this reply. */
+    notes: z.ZodOptional<z.ZodString>;
+    aiStatus: z.ZodOptional<z.ZodEnum<["pending", "complete", "error", "skipped_too_short"]>>;
+    aiError: z.ZodOptional<z.ZodString>;
+    aiSummary: z.ZodOptional<z.ZodString>;
+    aiLabels: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    transcription: z.ZodOptional<z.ZodString>;
+    sentiment: z.ZodOptional<z.ZodEnum<["Positive", "Negative", "Neutral"]>>;
+    /** Must match the widened enum in `ReplyRecordSchema.energyLevel`. */
+    energyLevel: z.ZodOptional<z.ZodEnum<["High", "Low", "Neutral"]>>;
+    engagementScore: z.ZodOptional<z.ZodNumber>;
+    /** Noise-reduced audio URL — replaces `audioUrl` for downstream players when present. PUBLIC. */
+    enhancedAudioUrl: z.ZodOptional<z.ZodString>;
+    /** Storage path companion to `enhancedAudioUrl` — private. */
+    enhancedStoragePath: z.ZodOptional<z.ZodString>;
+    socialVideoUrl: z.ZodOptional<z.ZodString>;
+    socialVideoStoragePath: z.ZodOptional<z.ZodString>;
+    socialVideoStatus: z.ZodOptional<z.ZodEnum<["pending", "complete", "error"]>>;
+    socialVideoError: z.ZodOptional<z.ZodString>;
+    /** The audio URL/path used to generate the current video (for cache invalidation). */
+    socialVideoSourceAudio: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    id: string;
+    aiStatus?: "pending" | "complete" | "error" | "skipped_too_short" | undefined;
+    aiError?: string | undefined;
+    aiSummary?: string | undefined;
+    aiLabels?: string[] | undefined;
+    transcription?: string | undefined;
+    socialVideoUrl?: string | undefined;
+    socialVideoStoragePath?: string | undefined;
+    socialVideoStatus?: "pending" | "complete" | "error" | undefined;
+    socialVideoError?: string | undefined;
+    socialVideoSourceAudio?: string | undefined;
+    notes?: string | undefined;
+    sentiment?: "Positive" | "Negative" | "Neutral" | undefined;
+    energyLevel?: "Neutral" | "High" | "Low" | undefined;
+    engagementScore?: number | undefined;
+    enhancedAudioUrl?: string | undefined;
+    enhancedStoragePath?: string | undefined;
+}, {
+    id: string;
+    aiStatus?: "pending" | "complete" | "error" | "skipped_too_short" | undefined;
+    aiError?: string | undefined;
+    aiSummary?: string | undefined;
+    aiLabels?: string[] | undefined;
+    transcription?: string | undefined;
+    socialVideoUrl?: string | undefined;
+    socialVideoStoragePath?: string | undefined;
+    socialVideoStatus?: "pending" | "complete" | "error" | undefined;
+    socialVideoError?: string | undefined;
+    socialVideoSourceAudio?: string | undefined;
+    notes?: string | undefined;
+    sentiment?: "Positive" | "Negative" | "Neutral" | undefined;
+    energyLevel?: "Neutral" | "High" | "Low" | undefined;
+    engagementScore?: number | undefined;
+    enhancedAudioUrl?: string | undefined;
+    enhancedStoragePath?: string | undefined;
+}>;
+type ReplyEnrichmentRecord = z.infer<typeof ReplyEnrichmentRecordSchema>;
+/**
+ * Per-viewer CRM enrichment about a target person, owned by the viewing
+ * creator. Stored at `enrichments/people/items/{viewerUid}_{targetUid}` —
+ * the tier-2 enrichment namespace, served by the closed `apps/relationships`
+ * deployable (NOT core-api), so self-hosters running core-api see clean
+ * canonical records without phantom CRM/identity fields. See
+ * `specs/data-separation.md` § 3 and `specs/people-enrichment-split.md`.
+ *
+ * `id` is the composite `${viewerUid}_${targetUid}` (Option D in the split
+ * spec): immutable across handle renames, and per-viewer scoped — Alice's
+ * notes about @bob and Charlie's notes about @bob live in different docs.
+ *
+ * Lifts/replaces the legacy per-handle `users/{viewerUid}/crm/{handle}`
+ * store (migrated by `scripts/migrate-crm-notes-to-enrichments.ts`).
+ */
+declare const PersonEnrichmentRecordSchema: z.ZodObject<{
+    /** Composite key `${viewerUid}_${targetUid}`. */
+    id: z.ZodString;
+    /** Per-viewer CRM notes about the target. */
+    notes: z.ZodOptional<z.ZodString>;
+    /** Per-viewer freeform tags about the target. */
+    tags: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    aliases: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    lastUpdated: z.ZodOptional<z.ZodEffects<z.ZodUnion<[z.ZodType<unknown, z.ZodTypeDef, unknown>, z.ZodString, z.ZodNumber, z.ZodDate]>, Date, unknown>>;
+}, "strip", z.ZodTypeAny, {
+    id: string;
+    notes?: string | undefined;
+    tags?: string[] | undefined;
+    aliases?: string[] | undefined;
+    lastUpdated?: Date | undefined;
+}, {
+    id: string;
+    notes?: string | undefined;
+    tags?: string[] | undefined;
+    aliases?: string[] | undefined;
+    lastUpdated?: unknown;
+}>;
+type PersonEnrichmentRecord = z.infer<typeof PersonEnrichmentRecordSchema>;
+/**
+ * SIP Enrichment data stored in `users/{uid}/enrichment/sip`.
+ */
+declare const SipEnrichmentSchema: z.ZodObject<{
+    sipUri: z.ZodString;
+    sipUsername: z.ZodString;
+    sipSecret: z.ZodString;
+    provider: z.ZodEnum<["twilio", "plivo", "internal"]>;
+}, "strip", z.ZodTypeAny, {
+    sipUri: string;
+    sipUsername: string;
+    sipSecret: string;
+    provider: "twilio" | "plivo" | "internal";
+}, {
+    sipUri: string;
+    sipUsername: string;
+    sipSecret: string;
+    provider: "twilio" | "plivo" | "internal";
+}>;
+type SipEnrichment = z.infer<typeof SipEnrichmentSchema>;
+/**
+ * Call forwarding configuration stored in `users/{uid}/private_data/call_forwarding`.
+ * Tracks the user's PSTN forwarding setup for routing missed calls to VoxPop IVR.
+ */
+declare const CallForwardingConfigSchema: z.ZodObject<{
+    /** User's personal phone number (E.164) */
+    phoneNumber: z.ZodString;
+    /** Line type from Twilio Lookup v2 */
+    lineType: z.ZodNullable<z.ZodString>;
+    /** Carrier name from Twilio Lookup v2 */
+    carrier: z.ZodNullable<z.ZodString>;
+    /** free = shared Twilio number (ForwardedFrom routing), paid = dedicated number */
+    tier: z.ZodEnum<["free", "paid"]>;
+    /** The VoxPop Twilio number calls forward to (E.164) */
+    voxpopNumber: z.ZodString;
+    /** Twilio Phone Number SID (paid tier only) */
+    twilioNumberSid: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    /** Forwarding verification state */
+    verificationStatus: z.ZodDefault<z.ZodEnum<["pending", "verifying", "verified", "failed"]>>;
+    /** Last verification attempt timestamp */
+    lastVerificationAt: z.ZodOptional<z.ZodEffects<z.ZodUnion<[z.ZodType<unknown, z.ZodTypeDef, unknown>, z.ZodString, z.ZodNumber, z.ZodDate]>, Date, unknown>>;
+    /** Number of verification attempts */
+    verificationAttempts: z.ZodDefault<z.ZodNumber>;
+    /** Reason for verification failure */
+    failureReason: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    /** Whether call forwarding is active */
+    enabled: z.ZodDefault<z.ZodBoolean>;
+    createdAt: z.ZodEffects<z.ZodUnion<[z.ZodType<unknown, z.ZodTypeDef, unknown>, z.ZodString, z.ZodNumber, z.ZodDate]>, Date, unknown>;
+    updatedAt: z.ZodEffects<z.ZodUnion<[z.ZodType<unknown, z.ZodTypeDef, unknown>, z.ZodString, z.ZodNumber, z.ZodDate]>, Date, unknown>;
+}, "strip", z.ZodTypeAny, {
+    createdAt: Date;
+    tier: "free" | "paid";
+    phoneNumber: string;
+    lineType: string | null;
+    carrier: string | null;
+    voxpopNumber: string;
+    verificationStatus: "pending" | "verifying" | "verified" | "failed";
+    verificationAttempts: number;
+    enabled: boolean;
+    updatedAt: Date;
+    twilioNumberSid?: string | null | undefined;
+    lastVerificationAt?: Date | undefined;
+    failureReason?: string | null | undefined;
+}, {
+    tier: "free" | "paid";
+    phoneNumber: string;
+    lineType: string | null;
+    carrier: string | null;
+    voxpopNumber: string;
+    createdAt?: unknown;
+    twilioNumberSid?: string | null | undefined;
+    verificationStatus?: "pending" | "verifying" | "verified" | "failed" | undefined;
+    lastVerificationAt?: unknown;
+    verificationAttempts?: number | undefined;
+    failureReason?: string | null | undefined;
+    enabled?: boolean | undefined;
+    updatedAt?: unknown;
+}>;
+type CallForwardingConfig = z.infer<typeof CallForwardingConfigSchema>;
+/**
+ * Connector-config primitive (Plan B). The uniform control-plane record for a
+ * connector's per-owner settings. The core owns the *envelope* (ownership,
+ * enabled, status, timestamps) and treats `settings` as an opaque,
+ * connector-specific blob — the connector app validates its own settings shape
+ * on read. Secrets are never stored here; `secretRef` points into a secret
+ * store. Stored at `connector_configs/{ownerId}/items/{connectorType}`.
+ *
+ * See `specs/plan-b-connector-boundaries.md`.
+ */
+/**
+ * Known connector types. An allowlist (not a free string) so the core can
+ * enforce "connectorType is known" at the envelope boundary. Extend as
+ * connectors are added.
+ */
+declare const ConnectorTypeSchema: z.ZodEnum<["telephony"]>;
+type ConnectorType = z.infer<typeof ConnectorTypeSchema>;
+/**
+ * Connector-reported status. `state` is a coarse lifecycle the control-plane UI
+ * can render generically; `detail` carries a connector-specific human string
+ * (e.g. a verification failure reason).
+ */
+declare const ConnectorStatusSchema: z.ZodObject<{
+    /** Coarse, generic lifecycle the control-plane UI can render without
+     * connector-specific knowledge. */
+    state: z.ZodDefault<z.ZodEnum<["unconfigured", "pending", "active", "error", "disabled"]>>;
+    detail: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    /** Opaque, connector-specific status detail (e.g. telephony's
+     * `{ verificationStatus, verificationAttempts, failureReason }`). Connector-
+     * owned like the rest of `status` — never user-writable. Nullable so a doc
+     * that stored `data: null` round-trips without a parse error. */
+    data: z.ZodOptional<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+    updatedAt: z.ZodOptional<z.ZodEffects<z.ZodUnion<[z.ZodType<unknown, z.ZodTypeDef, unknown>, z.ZodString, z.ZodNumber, z.ZodDate]>, Date, unknown>>;
+}, "strip", z.ZodTypeAny, {
+    state: "active" | "pending" | "error" | "unconfigured" | "disabled";
+    updatedAt?: Date | undefined;
+    detail?: string | null | undefined;
+    data?: Record<string, unknown> | null | undefined;
+}, {
+    updatedAt?: unknown;
+    state?: "active" | "pending" | "error" | "unconfigured" | "disabled" | undefined;
+    detail?: string | null | undefined;
+    data?: Record<string, unknown> | null | undefined;
+}>;
+type ConnectorStatus = z.infer<typeof ConnectorStatusSchema>;
+declare const ConnectorConfigRecordSchema: z.ZodObject<{
+    connectorType: z.ZodEnum<["telephony"]>;
+    /** The owning user. Org-scoping (ownerId as an orgId) is a later step. */
+    ownerId: z.ZodString;
+    /** Opaque, connector-specific blob. Core does not interpret this. */
+    settings: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    /** Reference into a secret store (e.g. Secret Manager key). Never a raw secret. */
+    secretRef: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    enabled: z.ZodDefault<z.ZodBoolean>;
+    status: z.ZodDefault<z.ZodObject<{
+        /** Coarse, generic lifecycle the control-plane UI can render without
+         * connector-specific knowledge. */
+        state: z.ZodDefault<z.ZodEnum<["unconfigured", "pending", "active", "error", "disabled"]>>;
+        detail: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        /** Opaque, connector-specific status detail (e.g. telephony's
+         * `{ verificationStatus, verificationAttempts, failureReason }`). Connector-
+         * owned like the rest of `status` — never user-writable. Nullable so a doc
+         * that stored `data: null` round-trips without a parse error. */
+        data: z.ZodOptional<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+        updatedAt: z.ZodOptional<z.ZodEffects<z.ZodUnion<[z.ZodType<unknown, z.ZodTypeDef, unknown>, z.ZodString, z.ZodNumber, z.ZodDate]>, Date, unknown>>;
+    }, "strip", z.ZodTypeAny, {
+        state: "active" | "pending" | "error" | "unconfigured" | "disabled";
+        updatedAt?: Date | undefined;
+        detail?: string | null | undefined;
+        data?: Record<string, unknown> | null | undefined;
+    }, {
+        updatedAt?: unknown;
+        state?: "active" | "pending" | "error" | "unconfigured" | "disabled" | undefined;
+        detail?: string | null | undefined;
+        data?: Record<string, unknown> | null | undefined;
+    }>>;
+    createdAt: z.ZodEffects<z.ZodUnion<[z.ZodType<unknown, z.ZodTypeDef, unknown>, z.ZodString, z.ZodNumber, z.ZodDate]>, Date, unknown>;
+    updatedAt: z.ZodEffects<z.ZodUnion<[z.ZodType<unknown, z.ZodTypeDef, unknown>, z.ZodString, z.ZodNumber, z.ZodDate]>, Date, unknown>;
+}, "strip", z.ZodTypeAny, {
+    status: {
+        state: "active" | "pending" | "error" | "unconfigured" | "disabled";
+        updatedAt?: Date | undefined;
+        detail?: string | null | undefined;
+        data?: Record<string, unknown> | null | undefined;
+    };
+    createdAt: Date;
+    enabled: boolean;
+    updatedAt: Date;
+    connectorType: "telephony";
+    ownerId: string;
+    settings: Record<string, unknown>;
+    secretRef?: string | null | undefined;
+}, {
+    connectorType: "telephony";
+    ownerId: string;
+    status?: {
+        updatedAt?: unknown;
+        state?: "active" | "pending" | "error" | "unconfigured" | "disabled" | undefined;
+        detail?: string | null | undefined;
+        data?: Record<string, unknown> | null | undefined;
+    } | undefined;
+    createdAt?: unknown;
+    enabled?: boolean | undefined;
+    updatedAt?: unknown;
+    settings?: Record<string, unknown> | undefined;
+    secretRef?: string | null | undefined;
+}>;
+type ConnectorConfigRecord = z.infer<typeof ConnectorConfigRecordSchema>;
+/**
+ * A single screening (allowlist) rule — canonical user-authored config, NOT
+ * derived/enriched, so it's owned by core-api (tier 1) like call-forwarding.
+ * Stored per-user under `users/{uid}/private_data/screening/rules/{ruleId}`.
+ *
+ * "Who gets through": `allow` = ring through, `screen` = go async. A
+ * time-boxed exception is just an `allow` rule with `expiresAt` set (enforced
+ * at read/evaluation time — no scheduler). Under Phase-1 missed-call-only
+ * capture these rules are foundational/editable but not yet gating ring-
+ * through; they become behavioral at capture-all (Phase 2). See
+ * `specs/consumer-call-app.md` § 5.
+ */
+declare const ScreeningRuleRecordSchema: z.ZodObject<{
+    id: z.ZodString;
+    ownerId: z.ZodString;
+    /** The caller number this rule matches (E.164). Format-enforced at the
+     *  record level so any writer (API, future contact-sync/callback) can't
+     *  persist a malformed number. */
+    e164: z.ZodString;
+    /** Display label, e.g. "Mom" / "Delta Airlines". null = unlabeled. */
+    label: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    /** `allow` = ring through; `screen` = async voicemail. */
+    action: z.ZodEnum<["allow", "screen"]>;
+    /** Provenance. `manual` = user-created; the others are future writers. */
+    source: z.ZodEnum<["manual", "contact-sync", "callback"]>;
+    /** null = permanent; a date = self-expiring exception. */
+    expiresAt: z.ZodOptional<z.ZodNullable<z.ZodEffects<z.ZodUnion<[z.ZodType<unknown, z.ZodTypeDef, unknown>, z.ZodString, z.ZodNumber, z.ZodDate]>, Date, unknown>>>;
+    createdAt: z.ZodEffects<z.ZodUnion<[z.ZodType<unknown, z.ZodTypeDef, unknown>, z.ZodString, z.ZodNumber, z.ZodDate]>, Date, unknown>;
+}, "strip", z.ZodTypeAny, {
+    id: string;
+    createdAt: Date;
+    ownerId: string;
+    e164: string;
+    action: "allow" | "screen";
+    source: "manual" | "contact-sync" | "callback";
+    label?: string | null | undefined;
+    expiresAt?: Date | null | undefined;
+}, {
+    id: string;
+    ownerId: string;
+    e164: string;
+    action: "allow" | "screen";
+    source: "manual" | "contact-sync" | "callback";
+    label?: string | null | undefined;
+    createdAt?: unknown;
+    expiresAt?: unknown;
+}>;
+type ScreeningRuleRecord = z.infer<typeof ScreeningRuleRecordSchema>;
+/**
+ * An Organization (Workspace) that users can be members of.
+ */
+declare const OrganizationRecordSchema: z.ZodObject<{
+    id: z.ZodString;
+    /** Display name of the organization */
+    name: z.ZodString;
+    /**
+     * Unique handle for the organization (e.g. voxpop.com/@mypodcast).
+     * Used for public URLs.
+     */
+    slug: z.ZodString;
+    /** URL to avatar/logo */
+    avatarUrl: z.ZodOptional<z.ZodString>;
+    /** URL to the podcast RSS feed */
+    rssFeedUrl: z.ZodOptional<z.ZodString>;
+    /** External website URL */
+    websiteUrl: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+    /** Description or tagline */
+    description: z.ZodOptional<z.ZodString>;
+    /** Owner ID (User ID) */
+    ownerId: z.ZodString;
+    /** Server timestamp of creation */
+    createdAt: z.ZodEffects<z.ZodUnion<[z.ZodType<unknown, z.ZodTypeDef, unknown>, z.ZodString, z.ZodNumber, z.ZodDate]>, Date, unknown>;
+    /** Verified domain (e.g., "acme.com") — enables auto-join, enterprise features */
+    domain: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    /** Whether the domain has been verified via DNS TXT record */
+    domainVerified: z.ZodDefault<z.ZodBoolean>;
+    /** DNS verification token (stored server-side until verification completes) */
+    domainVerificationToken: z.ZodOptional<z.ZodString>;
+    /** Billing email — required for paid orgs, where invoices go */
+    billingEmail: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    /**
+     * Tier determines isolation and feature set. Orgs are meant to be paid
+     * (business or enterprise); free/pro exist on the enum for the individual track.
+     * Default is provisionally `business` (the entry paid tier) — it's assigned at
+     * creation with no subscription behind it yet, so it stays provisional until billing
+     * promotes/reconciles the org. See docs/tech-debt.md "Org tier billing reconciliation".
+     */
+    tier: z.ZodDefault<z.ZodEnum<["free", "pro", "business", "enterprise"]>>;
+    /** Stripe Customer ID */
+    stripeCustomerId: z.ZodOptional<z.ZodString>;
+    /** Subscription Status */
+    subscriptionStatus: z.ZodOptional<z.ZodEnum<["active", "trialing", "past_due", "canceled", "unpaid"]>>;
+}, "strip", z.ZodTypeAny, {
+    id: string;
+    createdAt: Date;
+    tier: "free" | "pro" | "business" | "enterprise";
+    ownerId: string;
+    name: string;
+    slug: string;
+    domainVerified: boolean;
+    domain?: string | null | undefined;
+    avatarUrl?: string | undefined;
+    description?: string | undefined;
+    rssFeedUrl?: string | undefined;
+    websiteUrl?: string | undefined;
+    domainVerificationToken?: string | undefined;
+    billingEmail?: string | null | undefined;
+    stripeCustomerId?: string | undefined;
+    subscriptionStatus?: "active" | "trialing" | "past_due" | "canceled" | "unpaid" | undefined;
+}, {
+    id: string;
+    ownerId: string;
+    name: string;
+    slug: string;
+    domain?: string | null | undefined;
+    avatarUrl?: string | undefined;
+    createdAt?: unknown;
+    tier?: "free" | "pro" | "business" | "enterprise" | undefined;
+    description?: string | undefined;
+    rssFeedUrl?: string | undefined;
+    websiteUrl?: string | undefined;
+    domainVerified?: boolean | undefined;
+    domainVerificationToken?: string | undefined;
+    billingEmail?: string | null | undefined;
+    stripeCustomerId?: string | undefined;
+    subscriptionStatus?: "active" | "trialing" | "past_due" | "canceled" | "unpaid" | undefined;
+}>;
+type OrganizationRecord = z.infer<typeof OrganizationRecordSchema>;
+/**
+ * A member of an Organization.
+ * Stored in `organizations/{orgId}/members/{userId}`
+ */
+declare const OrganizationMemberRecordSchema: z.ZodObject<{
+    orgId: z.ZodString;
+    userId: z.ZodString;
+    /** Role in the organization */
+    role: z.ZodEnum<["owner", "admin", "member"]>;
+    /** Server timestamp of joining */
+    joinedAt: z.ZodEffects<z.ZodUnion<[z.ZodType<unknown, z.ZodTypeDef, unknown>, z.ZodString, z.ZodNumber, z.ZodDate]>, Date, unknown>;
+    invitedBy: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    orgId: string;
+    userId: string;
+    role: "owner" | "admin" | "member";
+    joinedAt: Date;
+    invitedBy?: string | undefined;
+}, {
+    orgId: string;
+    userId: string;
+    role: "owner" | "admin" | "member";
+    joinedAt?: unknown;
+    invitedBy?: string | undefined;
+}>;
+type OrganizationMemberRecord = z.infer<typeof OrganizationMemberRecordSchema>;
+/**
+ * An invite to join an Organization.
+ * Stored in `organizations/{orgId}/invites/{inviteId}`
+ */
+declare const OrgInviteRecordSchema: z.ZodObject<{
+    id: z.ZodString;
+    orgId: z.ZodString;
+    /** Email the invite was sent to */
+    email: z.ZodString;
+    /** Role to assign on acceptance */
+    role: z.ZodEnum<["admin", "member"]>;
+    /** User ID of who sent the invite */
+    invitedBy: z.ZodString;
+    /** Invite lifecycle status */
+    status: z.ZodDefault<z.ZodEnum<["pending", "accepted", "expired", "revoked"]>>;
+    /** Server timestamp of creation */
+    createdAt: z.ZodEffects<z.ZodUnion<[z.ZodType<unknown, z.ZodTypeDef, unknown>, z.ZodString, z.ZodNumber, z.ZodDate]>, Date, unknown>;
+    /** When this invite expires */
+    expiresAt: z.ZodEffects<z.ZodUnion<[z.ZodType<unknown, z.ZodTypeDef, unknown>, z.ZodString, z.ZodNumber, z.ZodDate]>, Date, unknown>;
+}, "strip", z.ZodTypeAny, {
+    status: "pending" | "accepted" | "expired" | "revoked";
+    id: string;
+    createdAt: Date;
+    orgId: string;
+    expiresAt: Date;
+    role: "admin" | "member";
+    invitedBy: string;
+    email: string;
+}, {
+    id: string;
+    orgId: string;
+    role: "admin" | "member";
+    invitedBy: string;
+    email: string;
+    status?: "pending" | "accepted" | "expired" | "revoked" | undefined;
+    createdAt?: unknown;
+    expiresAt?: unknown;
+}>;
+type OrgInviteRecord = z.infer<typeof OrgInviteRecordSchema>;
+
+export { type CallForwardingConfig, CallForwardingConfigSchema, type ConnectorConfigRecord, ConnectorConfigRecordSchema, type ConnectorStatus, ConnectorStatusSchema, type ConnectorType, ConnectorTypeSchema, type FirestoreTimestamp, FirestoreTimestampSchema, type OrgInviteRecord, OrgInviteRecordSchema, type OrganizationMemberRecord, OrganizationMemberRecordSchema, type OrganizationRecord, OrganizationRecordSchema, type PersonEnrichmentRecord, PersonEnrichmentRecordSchema, type PromptRecord, PromptRecordSchema, type ReplyEnrichmentRecord, ReplyEnrichmentRecordSchema, type ReplyRecord, ReplyRecordSchema, type ScreeningRuleRecord, ScreeningRuleRecordSchema, type SipEnrichment, SipEnrichmentSchema, type UserRecord, UserRecordSchema, httpsUrl };