@fonoster/common 0.27.0 → 0.30.0

package/dist/validators/identity.d.ts

@@ -20,10 +20,14 @@ import { Role } from "@fonoster/types";
 import { z } from "zod";
 declare const createWorkspaceRequestSchema: z.ZodObject<{
     name: z.ZodString;
+    /** An offered public region id, or one of the caller's private regions (id or rg_ ref). */
+    region: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
     name?: string;
+    region?: string;
 }, {
     name?: string;
+    region?: string;
 }>;
 declare const createApiKeyRequestSchema: z.ZodObject<{
     role: z.ZodEnum<[Role.WORKSPACE_ADMIN]>;
@@ -50,12 +54,12 @@ declare const exchangeCredentialsRequestSchema: z.ZodObject<{
     password: z.ZodString;
     twoFactorCode: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
-    username?: string;
     password?: string;
+    username?: string;
     twoFactorCode?: string;
 }, {
-    username?: string;
     password?: string;
+    username?: string;
     twoFactorCode?: string;
 }>;
 declare const exchangeOauth2RequestSchema: z.ZodObject<{
@@ -68,6 +72,16 @@ declare const exchangeOauth2RequestSchema: z.ZodObject<{
     code?: string;
     provider?: "GITHUB";
 }>;
+declare const exchangeVerificationCodeRequestSchema: z.ZodObject<{
+    email: z.ZodString;
+    code: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    code?: string;
+    email?: string;
+}, {
+    code?: string;
+    email?: string;
+}>;
 declare const exchangeRefreshTokenRequestSchema: z.ZodObject<{
     refreshToken: z.ZodString;
 }, "strip", z.ZodTypeAny, {
@@ -75,6 +89,13 @@ declare const exchangeRefreshTokenRequestSchema: z.ZodObject<{
 }, {
     refreshToken?: string;
 }>;
+declare const revokeTokenRequestSchema: z.ZodObject<{
+    token: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    token?: string;
+}, {
+    token?: string;
+}>;
 declare const createUserRequestSchema: z.ZodObject<{
     name: z.ZodString;
     email: z.ZodString;
@@ -106,6 +127,7 @@ declare const updateUserRequestSchema: z.ZodObject<{
     name: z.ZodUnion<[z.ZodString, z.ZodOptional<z.ZodString>]>;
     phone: z.ZodOptional<z.ZodString>;
     password: z.ZodUnion<[z.ZodString, z.ZodOptional<z.ZodString>]>;
+    currentPassword: z.ZodOptional<z.ZodString>;
     avatar: z.ZodUnion<[z.ZodString, z.ZodOptional<z.ZodString>]>;
 }, "strip", z.ZodTypeAny, {
     name?: string;
@@ -113,12 +135,14 @@ declare const updateUserRequestSchema: z.ZodObject<{
     password?: string;
     phone?: string;
     avatar?: string;
+    currentPassword?: string;
 }, {
     name?: string;
     ref?: string;
     password?: string;
     phone?: string;
     avatar?: string;
+    currentPassword?: string;
 }>;
 declare const inviteUserToWorkspaceRequestSchema: z.ZodObject<{
     email: z.ZodString;
@@ -128,13 +152,13 @@ declare const inviteUserToWorkspaceRequestSchema: z.ZodObject<{
 }, "strip", z.ZodTypeAny, {
     name?: string;
     email?: string;
-    role?: Role.WORKSPACE_ADMIN | Role.WORKSPACE_MEMBER;
     password?: string;
+    role?: Role.WORKSPACE_ADMIN | Role.WORKSPACE_MEMBER;
 }, {
     name?: string;
     email?: string;
-    role?: Role.WORKSPACE_ADMIN | Role.WORKSPACE_MEMBER;
     password?: string;
+    role?: Role.WORKSPACE_ADMIN | Role.WORKSPACE_MEMBER;
 }>;
 declare const resendWorkspaceMembershipInvitationRequestSchema: z.ZodObject<{
     userRef: z.ZodString;
@@ -145,13 +169,17 @@ declare const resendWorkspaceMembershipInvitationRequestSchema: z.ZodObject<{
 }>;
 declare const updateWorkspaceRequestSchema: z.ZodObject<{
     ref: z.ZodString;
+    /** Only accepted when unchanged: the region is immutable (region_immutable). */
+    region: z.ZodOptional<z.ZodString>;
     name: z.ZodUnion<[z.ZodString, z.ZodOptional<z.ZodString>]>;
 }, "strip", z.ZodTypeAny, {
     name?: string;
     ref?: string;
+    region?: string;
 }, {
     name?: string;
     ref?: string;
+    region?: string;
 }>;
 declare const removeUserFromWorkspaceRequestSchema: z.ZodObject<{
     userRef: z.ZodString;
@@ -188,7 +216,8 @@ declare const verifyCodeRequestSchema: z.ZodObject<{
 }>;
 declare const sendResetPasswordCodeRequestSchema: z.ZodObject<{
     username: z.ZodString;
-    resetPasswordUrl: z.ZodString;
+    /** Ignored: the link is built from Identity's configured reset URL. */
+    resetPasswordUrl: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
     username?: string;
     resetPasswordUrl?: string;
@@ -201,12 +230,12 @@ declare const resetPasswordRequestSchema: z.ZodObject<{
     password: z.ZodString;
     verificationCode: z.ZodString;
 }, "strip", z.ZodTypeAny, {
-    username?: string;
     password?: string;
+    username?: string;
     verificationCode?: string;
 }, {
-    username?: string;
     password?: string;
+    username?: string;
     verificationCode?: string;
 }>;
-export { createApiKeyRequestSchema, createUserRequestSchema, createWorkspaceRequestSchema, exchangeApiKeysRequestSchema, exchangeCredentialsRequestSchema, exchangeOauth2RequestSchema, exchangeRefreshTokenRequestSchema, inviteUserToWorkspaceRequestSchema, removeUserFromWorkspaceRequestSchema, resendWorkspaceMembershipInvitationRequestSchema, sendVerificationCodeRequestSchema, updateUserRequestSchema, updateWorkspaceRequestSchema, verifyCodeRequestSchema, sendResetPasswordCodeRequestSchema, resetPasswordRequestSchema, createUserWithOauth2CodeRequestSchema };
+export { createApiKeyRequestSchema, createUserRequestSchema, createWorkspaceRequestSchema, exchangeApiKeysRequestSchema, exchangeCredentialsRequestSchema, exchangeOauth2RequestSchema, exchangeRefreshTokenRequestSchema, exchangeVerificationCodeRequestSchema, inviteUserToWorkspaceRequestSchema, removeUserFromWorkspaceRequestSchema, resendWorkspaceMembershipInvitationRequestSchema, revokeTokenRequestSchema, sendVerificationCodeRequestSchema, updateUserRequestSchema, updateWorkspaceRequestSchema, verifyCodeRequestSchema, sendResetPasswordCodeRequestSchema, resetPasswordRequestSchema, createUserWithOauth2CodeRequestSchema };

package/dist/validators/identity.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.createUserWithOauth2CodeRequestSchema = exports.resetPasswordRequestSchema = exports.sendResetPasswordCodeRequestSchema = exports.verifyCodeRequestSchema = exports.updateWorkspaceRequestSchema = exports.updateUserRequestSchema = exports.sendVerificationCodeRequestSchema = exports.resendWorkspaceMembershipInvitationRequestSchema = exports.removeUserFromWorkspaceRequestSchema = exports.inviteUserToWorkspaceRequestSchema = exports.exchangeRefreshTokenRequestSchema = exports.exchangeOauth2RequestSchema = exports.exchangeCredentialsRequestSchema = exports.exchangeApiKeysRequestSchema = exports.createWorkspaceRequestSchema = exports.createUserRequestSchema = exports.createApiKeyRequestSchema = void 0;
+exports.createUserWithOauth2CodeRequestSchema = exports.resetPasswordRequestSchema = exports.sendResetPasswordCodeRequestSchema = exports.verifyCodeRequestSchema = exports.updateWorkspaceRequestSchema = exports.updateUserRequestSchema = exports.sendVerificationCodeRequestSchema = exports.revokeTokenRequestSchema = exports.resendWorkspaceMembershipInvitationRequestSchema = exports.removeUserFromWorkspaceRequestSchema = exports.inviteUserToWorkspaceRequestSchema = exports.exchangeVerificationCodeRequestSchema = exports.exchangeRefreshTokenRequestSchema = exports.exchangeOauth2RequestSchema = exports.exchangeCredentialsRequestSchema = exports.exchangeApiKeysRequestSchema = exports.createWorkspaceRequestSchema = exports.createUserRequestSchema = exports.createApiKeyRequestSchema = void 0;
 /**
  * Copyright (C) 2025 by Fonoster Inc (https://fonoster.com)
  * http://github.com/fonoster/fonoster
@@ -32,7 +32,13 @@ const createWorkspaceRequestSchema = zod_1.z.object({
     name: zod_1.z
         .string()
         .min(1, { message: MIN_NAME_MESSAGE })
-        .max(50, { message: MAX_NAME_MESSAGE })
+        .max(50, { message: MAX_NAME_MESSAGE }),
+    /** An offered public region id, or one of the caller's private regions (id or rg_ ref). */
+    region: zod_1.z
+        .string()
+        .max(64)
+        .regex(/^[a-z0-9_-]*$/, { message: "Invalid region" })
+        .optional()
 });
 exports.createWorkspaceRequestSchema = createWorkspaceRequestSchema;
 const createApiKeyRequestSchema = zod_1.z.object({
@@ -62,10 +68,19 @@ const exchangeOauth2RequestSchema = zod_1.z.object({
     code: zod_1.z.string()
 });
 exports.exchangeOauth2RequestSchema = exchangeOauth2RequestSchema;
+const exchangeVerificationCodeRequestSchema = zod_1.z.object({
+    email: zod_1.z.string().email({ message: EMAIL_MESSAGE }),
+    code: zod_1.z.string().regex(/^\d{6}$/, { message: "Must be a 6-digit code" })
+});
+exports.exchangeVerificationCodeRequestSchema = exchangeVerificationCodeRequestSchema;
 const exchangeRefreshTokenRequestSchema = zod_1.z.object({
     refreshToken: zod_1.z.string()
 });
 exports.exchangeRefreshTokenRequestSchema = exchangeRefreshTokenRequestSchema;
+const revokeTokenRequestSchema = zod_1.z.object({
+    token: zod_1.z.string()
+});
+exports.revokeTokenRequestSchema = revokeTokenRequestSchema;
 const createUserRequestSchema = zod_1.z.object({
     name: zod_1.z.string().max(50, { message: MAX_NAME_MESSAGE }),
     email: zod_1.z.string().email({ message: EMAIL_MESSAGE }),
@@ -93,6 +108,7 @@ const updateUserRequestSchema = zod_1.z.object({
         .string()
         .min(8, { message: PASSWORD_MESSAGE })
         .or(zod_1.z.string().optional()),
+    currentPassword: zod_1.z.string().max(1024).optional(),
     avatar: zod_1.z.string().url().or(zod_1.z.string().optional())
 });
 exports.updateUserRequestSchema = updateUserRequestSchema;
@@ -109,6 +125,8 @@ const resendWorkspaceMembershipInvitationRequestSchema = zod_1.z.object({
 exports.resendWorkspaceMembershipInvitationRequestSchema = resendWorkspaceMembershipInvitationRequestSchema;
 const updateWorkspaceRequestSchema = zod_1.z.object({
     ref: zod_1.z.string().uuid({ message: WORKSPACE_REF_MESSAGE }),
+    /** Only accepted when unchanged: the region is immutable (region_immutable). */
+    region: zod_1.z.string().max(64).optional(),
     name: zod_1.z
         .string()
         .min(1, { message: MIN_NAME_MESSAGE })
@@ -136,7 +154,8 @@ const sendResetPasswordCodeRequestSchema = zod_1.z.object({
     username: zod_1.z
         .string()
         .email({ message: "Invalid username. Must be an email address" }),
-    resetPasswordUrl: zod_1.z.string()
+    /** Ignored: the link is built from Identity's configured reset URL. */
+    resetPasswordUrl: zod_1.z.string().optional()
 });
 exports.sendResetPasswordCodeRequestSchema = sendResetPasswordCodeRequestSchema;
 const resetPasswordRequestSchema = zod_1.z.object({

package/dist/validators/index.d.ts

@@ -22,3 +22,4 @@ export * from "./hostOrHostPortSchema";
 export * from "./identity";
 export * from "./secrets";
 export * from "./sipnet";
+export * from "./sip";

package/dist/validators/index.js

@@ -38,3 +38,4 @@ __exportStar(require("./hostOrHostPortSchema"), exports);
 __exportStar(require("./identity"), exports);
 __exportStar(require("./secrets"), exports);
 __exportStar(require("./sipnet"), exports);
+__exportStar(require("./sip"), exports);

package/dist/validators/sip.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Copyright (C) 2025 by Fonoster Inc (https://fonoster.com)
+ * http://github.com/fonoster/fonoster
+ *
+ * This file is part of Fonoster
+ *
+ * Licensed under the MIT License (the "License");
+ * you may not use this file except in compliance with
+ * the License. You may obtain a copy of the License at
+ *
+ *    https://opensource.org/licenses/MIT
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { z } from "zod";
+/**
+ * Headers the platform (Routr, the media node, the gateway, the apiserver) sets and trusts: they
+ * pick the app, the call, the workspace and the trunk. Callers and apps may never set them.
+ */
+export declare const RESERVED_SIP_HEADERS: ReadonlySet<string>;
+/** Custom headers only: `X-` (any case) and up to 64 letters, digits or dashes. */
+export declare const SIP_HEADER_NAME: RegExp;
+export declare const SIP_HEADER_VALUE_MAX = 256;
+export declare const SIP_HEADERS_MAX = 16;
+/** E.164: a leading `+` is optional, up to 15 digits, no leading zero. */
+export declare const E164: RegExp;
+/** A dial target: an E.164 number, a SIP user, or `sip:`/`sips:user@host[:port]`. */
+export declare const SIP_TARGET: RegExp;
+/** Why a custom SIP header may not be sent (undefined: it may). */
+export declare function sipHeaderProblem(name: string, value: unknown): string | undefined;
+/** Why a set of custom SIP headers may not be sent (undefined: they may). */
+export declare function sipHeadersProblem(headers: unknown): string | undefined;
+/** Whether `to` is a target the media node may dial or refer to. */
+export declare function isSipTarget(to: unknown): to is string;
+export declare const e164Schema: z.ZodString;
+export declare const sipTargetSchema: z.ZodString;

package/dist/validators/sip.js

@@ -0,0 +1,99 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sipTargetSchema = exports.e164Schema = exports.SIP_TARGET = exports.E164 = exports.SIP_HEADERS_MAX = exports.SIP_HEADER_VALUE_MAX = exports.SIP_HEADER_NAME = exports.RESERVED_SIP_HEADERS = void 0;
+exports.sipHeaderProblem = sipHeaderProblem;
+exports.sipHeadersProblem = sipHeadersProblem;
+exports.isSipTarget = isSipTarget;
+/**
+ * Copyright (C) 2025 by Fonoster Inc (https://fonoster.com)
+ * http://github.com/fonoster/fonoster
+ *
+ * This file is part of Fonoster
+ *
+ * Licensed under the MIT License (the "License");
+ * you may not use this file except in compliance with
+ * the License. You may obtain a copy of the License at
+ *
+ *    https://opensource.org/licenses/MIT
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+const zod_1 = require("zod");
+// What apps and API callers may put into a SIP request the platform sends (CreateCall's
+// from/to, the `transfer` command's target and headers). sipgo does not escape header values or
+// URI users, so anything that reaches an INVITE or REFER must be safe as-is.
+/**
+ * Headers the platform (Routr, the media node, the gateway, the apiserver) sets and trusts: they
+ * pick the app, the call, the workspace and the trunk. Callers and apps may never set them.
+ */
+exports.RESERVED_SIP_HEADERS = new Set([
+    "X-App-Ref",
+    "X-Call-Ref",
+    "X-Call-Direction",
+    "X-Dod-Number",
+    "X-Dod-Privacy",
+    "X-Access-Key-Id",
+    "X-Is-Api-Originated-Type",
+    "X-Connect-Token",
+    "X-Edgeport-Ref",
+    "X-Gateway-Auth",
+    "X-Request-Uri",
+    "X-Session-Count"
+].map((h) => h.toLowerCase()));
+/** Custom headers only: `X-` (any case) and up to 64 letters, digits or dashes. */
+exports.SIP_HEADER_NAME = /^X-[A-Za-z0-9-]{1,64}$/i;
+exports.SIP_HEADER_VALUE_MAX = 256;
+exports.SIP_HEADERS_MAX = 16;
+/** E.164: a leading `+` is optional, up to 15 digits, no leading zero. */
+exports.E164 = /^\+?[1-9][0-9]{1,14}$/;
+// The user part of a SIP URI as the node dials it (a number, an extension or an agent name).
+const SIP_USER = "[A-Za-z0-9+*#._~-]{1,64}";
+const SIP_HOST = "[A-Za-z0-9](?:[A-Za-z0-9.-]{0,251}[A-Za-z0-9])?(?::[0-9]{1,5})?";
+/** A dial target: an E.164 number, a SIP user, or `sip:`/`sips:user@host[:port]`. */
+exports.SIP_TARGET = new RegExp(`^(?:${SIP_USER}|sips?:${SIP_USER}@${SIP_HOST}|tel:\\+?[0-9*#-]{1,32})$`);
+/** Why a custom SIP header may not be sent (undefined: it may). */
+function sipHeaderProblem(name, value) {
+    if (!exports.SIP_HEADER_NAME.test(name))
+        return `header ${JSON.stringify(name)} is not an X- header name`;
+    if (exports.RESERVED_SIP_HEADERS.has(name.toLowerCase()))
+        return `header ${name} is reserved for the platform`;
+    if (typeof value !== "string")
+        return `header ${name} must be a string`;
+    if (value.length > exports.SIP_HEADER_VALUE_MAX)
+        return `header ${name} is longer than ${exports.SIP_HEADER_VALUE_MAX} characters`;
+    // CR, LF and every other control character (a tab is allowed).
+    // eslint-disable-next-line no-control-regex
+    if (/[\u0000-\u0008\u000a-\u001f\u007f]/.test(value))
+        return `header ${name} has control characters`;
+    return undefined;
+}
+/** Why a set of custom SIP headers may not be sent (undefined: they may). */
+function sipHeadersProblem(headers) {
+    if (headers === undefined || headers === null)
+        return undefined;
+    if (typeof headers !== "object" || Array.isArray(headers))
+        return "headers must be an object";
+    const entries = Object.entries(headers);
+    if (entries.length > exports.SIP_HEADERS_MAX)
+        return `at most ${exports.SIP_HEADERS_MAX} headers`;
+    for (const [name, value] of entries) {
+        const problem = sipHeaderProblem(name, value);
+        if (problem)
+            return problem;
+    }
+    return undefined;
+}
+/** Whether `to` is a target the media node may dial or refer to. */
+function isSipTarget(to) {
+    return typeof to === "string" && exports.SIP_TARGET.test(to);
+}
+exports.e164Schema = zod_1.z
+    .string()
+    .regex(exports.E164, { message: "Must be an E.164 number (e.g. +17853178070)" });
+exports.sipTargetSchema = zod_1.z.string().regex(exports.SIP_TARGET, {
+    message: "Must be an E.164 number, a SIP user or a sip: URI"
+});

package/dist/validators/sipnet/credentials.d.ts

@@ -23,12 +23,12 @@ declare const createCredentialsRequestSchema: z.ZodObject<{
     password: z.ZodString;
 }, "strip", z.ZodTypeAny, {
     name?: string;
-    username?: string;
     password?: string;
+    username?: string;
 }, {
     name?: string;
-    username?: string;
     password?: string;
+    username?: string;
 }>;
 declare const updateCredentialsRequestSchema: z.ZodObject<{
     name: z.ZodString;

package/dist/validators/sipnet/domains.js

@@ -27,14 +27,14 @@ const domainSchema = zod_1.z
     .refine((domain) => {
     const domainRegex = /^[a-zA-Z0-9-]+(\.[a-zA-Z]{2,})+$/;
     return domainRegex.test(domain);
-}, {
-    message: `Invalid domain format. Should be like: "acme.${envs_1.ROOT_DOMAIN}"`
-})
+}, () => ({
+    message: `Invalid domain format. Should be like: "acme.${(0, envs_1.getRootDomain)()}"`
+}))
     .refine((domain) => {
-    return domain.endsWith(envs_1.ROOT_DOMAIN);
-}, {
-    message: `Domain must end with "${envs_1.ROOT_DOMAIN}"`
-});
+    return domain.endsWith((0, envs_1.getRootDomain)());
+}, () => ({
+    message: `Domain must end with "${(0, envs_1.getRootDomain)()}"`
+}));
 const createDomainRequestSchema = zod_1.z.object({
     name: common_1.nameSchema,
     domainUri: domainSchema,

package/dist/validators/sipnet/trunks.d.ts

@@ -20,7 +20,7 @@ import { Transport } from "@fonoster/types";
 import { z } from "zod";
 declare const createTrunkRequestSchema: z.ZodObject<{
     name: z.ZodString;
-    sendRegister: z.ZodBoolean;
+    sendRegister: z.ZodOptional<z.ZodBoolean>;
     inboundUri: z.ZodEffects<z.ZodString, string, string>;
     uris: z.ZodArray<z.ZodObject<{
         host: z.ZodEffects<z.ZodString, string, string>;
@@ -29,49 +29,49 @@ declare const createTrunkRequestSchema: z.ZodObject<{
         user: z.ZodOptional<z.ZodString>;
         weight: z.ZodNumber;
         priority: z.ZodNumber;
-        enabled: z.ZodBoolean;
+        enabled: z.ZodOptional<z.ZodBoolean>;
     }, "strip", z.ZodTypeAny, {
+        transport?: Transport;
         host?: string;
         port?: number;
-        priority?: number;
-        enabled?: boolean;
-        transport?: Transport;
         user?: string;
+        enabled?: boolean;
         weight?: number;
+        priority?: number;
     }, {
+        transport?: Transport;
         host?: string;
         port?: number;
-        priority?: number;
-        enabled?: boolean;
-        transport?: Transport;
         user?: string;
+        enabled?: boolean;
         weight?: number;
+        priority?: number;
     }>, "many">;
 }, "strip", z.ZodTypeAny, {
     name?: string;
     sendRegister?: boolean;
     inboundUri?: string;
     uris?: {
+        transport?: Transport;
         host?: string;
         port?: number;
-        priority?: number;
-        enabled?: boolean;
-        transport?: Transport;
         user?: string;
+        enabled?: boolean;
         weight?: number;
+        priority?: number;
     }[];
 }, {
     name?: string;
     sendRegister?: boolean;
     inboundUri?: string;
     uris?: {
+        transport?: Transport;
         host?: string;
         port?: number;
-        priority?: number;
-        enabled?: boolean;
-        transport?: Transport;
         user?: string;
+        enabled?: boolean;
         weight?: number;
+        priority?: number;
     }[];
 }>;
 declare const updateTrunkRequestSchema: z.ZodObject<{}, "strip", z.ZodTypeAny, {}, {}>;

package/dist/validators/sipnet/trunks.js

@@ -61,9 +61,11 @@ const hostOrIPSchema = zod_1.z
     .refine((host) => Validator.isIP(host, 4) || Validator.isFQDN(host), {
     message: "Must be a valid IP or FQDN"
 });
+// Booleans are optional: the gRPC loader drops proto3 defaults, so `false`
+// arrives as a missing field.
 const createTrunkRequestSchema = zod_1.z.object({
     name: common_1.nameSchema,
-    sendRegister: zod_1.z.boolean(),
+    sendRegister: zod_1.z.boolean().optional(),
     inboundUri: hostOrIPSchema,
     uris: zod_1.z.array(zod_1.z.object({
         host: hostOrIPSchema,
@@ -72,7 +74,7 @@ const createTrunkRequestSchema = zod_1.z.object({
         user: zod_1.z.string().optional(),
         weight: zod_1.z.number(),
         priority: zod_1.z.number(),
-        enabled: zod_1.z.boolean()
+        enabled: zod_1.z.boolean().optional()
     }))
 });
 exports.createTrunkRequestSchema = createTrunkRequestSchema;

package/dist/webhooks/Dispatcher.d.ts

@@ -0,0 +1,87 @@
+import { WebhookEvent, WebhookEventType } from "./events";
+export type WebhookEndpoint = {
+    id: string;
+    workspaceRef: string;
+    url: string;
+    events: WebhookEventType[];
+    secret: string;
+    /** The previous secret stays valid until `previousUntil` (rotation window). */
+    previousSecret?: string;
+    previousUntil?: number;
+};
+export type Delivery = {
+    id: string;
+    endpointId: string;
+    event: WebhookEvent;
+    status: "pending" | "succeeded" | "failed";
+    attempts: number;
+    firstAttemptAt?: number;
+    lastAttemptAt?: number;
+    lastStatus?: number;
+    nextAttemptAt: number;
+};
+export interface WebhookStore {
+    endpoints(workspaceRef?: string): WebhookEndpoint[];
+    putEndpoint(e: WebhookEndpoint): void;
+    deleteEndpoint(id: string): void;
+    deliveries(endpointId?: string): Delivery[];
+    putDelivery(d: Delivery): void;
+}
+export declare class MemoryWebhookStore implements WebhookStore {
+    private e;
+    private d;
+    endpoints(workspaceRef?: string): WebhookEndpoint[];
+    putEndpoint(x: WebhookEndpoint): void;
+    deleteEndpoint(id: string): void;
+    deliveries(endpointId?: string): Delivery[];
+    putDelivery(x: Delivery): void;
+}
+export declare class WebhookError extends Error {
+}
+/**
+ * The id of an event's delivery to one endpoint. It depends only on the two, so the same event
+ * fanned out again (a bus message redelivered after a replica died, or published twice) finds
+ * the delivery it already made instead of making a second one (ST-2).
+ */
+export declare function deliveryId(eventId: string, endpointId: string): string;
+export type DispatcherOptions = {
+    store: WebhookStore;
+    /** Per-attempt timeout (design OQ3 proposal: 10 s). */
+    attemptTimeoutMs?: number;
+    /** First retry delay; each next one doubles, capped at maxDelayMs (OQ2: from 10 s). */
+    firstDelayMs?: number;
+    maxDelayMs?: number;
+    /** Retries stop this long after the first attempt (OQ2: 24 h). */
+    retryPeriodMs?: number;
+    /** Lets tests use plain http:// receivers. Never in production. */
+    allowInsecureUrls?: boolean;
+    /**
+     * Private destinations (host names, IPs, CIDRs) endpoints may use; defaults to
+     * FONOSTER_ALLOWED_DESTINATIONS. Everything else must be public (RV-B2).
+     */
+    allowedDestinations?: string[];
+    now?: () => number;
+};
+export declare class WebhookDispatcher {
+    private readonly options;
+    constructor(options: DispatcherOptions);
+    private policy;
+    private now;
+    /** Registers an endpoint; the returned secret is the only time it is shown. */
+    createEndpoint(input: {
+        workspaceRef: string;
+        url: string;
+        events: WebhookEventType[];
+    }): WebhookEndpoint;
+    /** New secret; the old one keeps verifying for `windowMs`. Returns the new secret. */
+    rotateSecret(endpointId: string, windowMs?: number): string;
+    /** The deliveries an event makes, one per subscribed endpoint of its workspace (not stored). */
+    plan(event: WebhookEvent): Delivery[];
+    /** Fans an event out to every endpoint of its workspace subscribed to its type. */
+    publish(event: WebhookEvent): Delivery[];
+    /** Attempts every pending delivery that is due; returns how many were attempted. */
+    runDue(): Promise<number>;
+    /** Sends a delivery again now, with the original event id and a fresh signature. */
+    resend(deliveryId: string): Promise<Delivery>;
+    private attempt;
+}