@fonoster/common 0.30.0 → 0.31.0

package/dist/usage/usageId.d.ts

@@ -0,0 +1,6 @@
+import { UsageLine } from "./types";
+/**
+ * The id of a usage line (design D7): derived from what it measures, so reporting the same usage
+ * twice yields the same id. `scope` is the callRef, the eval step key, or workspaceRef + day.
+ */
+export declare function usageId(scope: string, line: Pick<UsageLine, "meter" | "provider" | "model" | "keySource">): string;

package/dist/usage/usageId.js

@@ -0,0 +1,45 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.usageId = usageId;
+/**
+ * Copyright (C) 2025 by Fonoster Inc (https://fonoster.com)
+ * http://github.com/fonoster/fonoster
+ *
+ * This file is part of Fonoster
+ *
+ * Licensed under the MIT License (the "License");
+ * you may not use this file except in compliance with
+ * the License. You may obtain a copy of the License at
+ *
+ *    https://opensource.org/licenses/MIT
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+const node_crypto_1 = require("node:crypto");
+const ALPHABET = "abcdefghijklmnopqrstuvwxyz234567";
+function base32(bytes) {
+    var _a;
+    const bits = Array.from(bytes, (b) => b.toString(2).padStart(8, "0")).join("");
+    return ((_a = bits.match(/.{1,5}/g)) !== null && _a !== void 0 ? _a : [])
+        .map((chunk) => ALPHABET[parseInt(chunk.padEnd(5, "0"), 2)])
+        .join("");
+}
+/**
+ * The id of a usage line (design D7): derived from what it measures, so reporting the same usage
+ * twice yields the same id. `scope` is the callRef, the eval step key, or workspaceRef + day.
+ */
+function usageId(scope, line) {
+    var _a, _b, _c;
+    const key = [
+        scope,
+        line.meter,
+        (_a = line.provider) !== null && _a !== void 0 ? _a : "",
+        (_b = line.model) !== null && _b !== void 0 ? _b : "",
+        (_c = line.keySource) !== null && _c !== void 0 ? _c : ""
+    ].join("|");
+    return ("usg_" + base32((0, node_crypto_1.createHash)("sha256").update(key).digest()).slice(0, 26));
+}

package/dist/utils/index.d.ts

@@ -27,7 +27,5 @@ export * from "./toPascalCase";
 export * from "./withErrorHandling";
 export * from "./withErrorHandlingAndValidation";
 export * from "./withValidation";
-export * from "./types";
-export * from "./createFetchSingleCallByCallId";
 export * from "./sendHttpRequest";
 export * from "./logUnhandledRejections";

package/dist/utils/index.js

@@ -43,7 +43,5 @@ __exportStar(require("./toPascalCase"), exports);
 __exportStar(require("./withErrorHandling"), exports);
 __exportStar(require("./withErrorHandlingAndValidation"), exports);
 __exportStar(require("./withValidation"), exports);
-__exportStar(require("./types"), exports);
-__exportStar(require("./createFetchSingleCallByCallId"), exports);
 __exportStar(require("./sendHttpRequest"), exports);
 __exportStar(require("./logUnhandledRejections"), exports);

package/dist/utils/withErrorHandling.js

@@ -28,7 +28,7 @@ exports.withErrorHandling = withErrorHandling;
  * See the License for the specific language governing permissions and
  * limitations under the License.
  */
-/* eslint-disable @typescript-eslint/ban-types */
+/* eslint-disable @typescript-eslint/no-unsafe-function-type */
 const errors_1 = require("../errors");
 function withErrorHandling(fn) {
     return (call, callback) => __awaiter(this, void 0, void 0, function* () {

package/dist/validators/calls.d.ts

@@ -27,14 +27,14 @@ declare const createCallRequestSchema: z.ZodObject<{
 }, "strip", z.ZodTypeAny, {
     timeout?: number;
     metadata?: Record<string, any>;
-    from?: string;
     to?: string;
+    from?: string;
     appRef?: string;
 }, {
     timeout?: number;
     metadata?: Record<string, any>;
-    from?: string;
     to?: string;
+    from?: string;
     appRef?: string;
 }>;
 declare const getCallRequestSchema: z.ZodObject<{
@@ -50,10 +50,12 @@ declare const listCallsRequestSchema: z.ZodObject<{
     pageSize: z.ZodOptional<z.ZodNumber>;
     type: z.ZodOptional<z.ZodNativeEnum<typeof CallType>>;
     status: z.ZodOptional<z.ZodNativeEnum<typeof CallStatus>>;
+    appRef: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
     pageToken: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
     type?: CallType;
     status?: CallStatus;
+    appRef?: string;
     after?: string;
     before?: string;
     pageSize?: number;
@@ -61,6 +63,7 @@ declare const listCallsRequestSchema: z.ZodObject<{
 }, {
     type?: CallType;
     status?: CallStatus;
+    appRef?: string;
     after?: string;
     before?: string;
     pageSize?: number;

package/dist/validators/calls.js

@@ -24,7 +24,7 @@ const zod_1 = require("zod");
 const messages_1 = require("../messages");
 const sip_1 = require("./sip");
 // `from` is one of the workspace's Numbers (the Calls service checks ownership); it travels as
-// X-Dod-Number and picks the trunk, so it is an E.164 number. `to` is what the media node dials.
+// X-Dod-Number and picks the trunk, so it is an E.164 number. `to` is what the Roomr node dials.
 const createCallRequestSchema = zod_1.z.object({
     from: sip_1.e164Schema,
     to: sip_1.sipTargetSchema,
@@ -60,6 +60,13 @@ const listCallsRequestSchema = zod_1.z.object({
     status: zod_1.z
         .nativeEnum(types_1.CallStatus, { message: "Invalid call status" })
         .optional(),
+    // Empty or unset means no filter (proto3 sends ""); anything else must be an app ref.
+    appRef: zod_1.z
+        .string()
+        .refine((v) => v === "" || zod_1.z.string().uuid().safeParse(v).success, {
+        message: "Invalid application reference"
+    })
+        .optional(),
     pageToken: zod_1.z.string().optional()
 });
 exports.listCallsRequestSchema = listCallsRequestSchema;

package/dist/validators/sip.d.ts

@@ -18,7 +18,7 @@
  */
 import { z } from "zod";
 /**
- * Headers the platform (Routr, the media node, the gateway, the apiserver) sets and trusts: they
+ * Headers the platform (Routr, the Roomr node, AppBridge, the apiserver) sets and trusts: they
  * pick the app, the call, the workspace and the trunk. Callers and apps may never set them.
  */
 export declare const RESERVED_SIP_HEADERS: ReadonlySet<string>;
@@ -34,7 +34,7 @@ export declare const SIP_TARGET: RegExp;
 export declare function sipHeaderProblem(name: string, value: unknown): string | undefined;
 /** Why a set of custom SIP headers may not be sent (undefined: they may). */
 export declare function sipHeadersProblem(headers: unknown): string | undefined;
-/** Whether `to` is a target the media node may dial or refer to. */
+/** Whether `to` is a target the Roomr node may dial or refer to. */
 export declare function isSipTarget(to: unknown): to is string;
 export declare const e164Schema: z.ZodString;
 export declare const sipTargetSchema: z.ZodString;

package/dist/validators/sip.js

@@ -27,7 +27,7 @@ const zod_1 = require("zod");
 // from/to, the `transfer` command's target and headers). sipgo does not escape header values or
 // URI users, so anything that reaches an INVITE or REFER must be safe as-is.
 /**
- * Headers the platform (Routr, the media node, the gateway, the apiserver) sets and trusts: they
+ * Headers the platform (Routr, the Roomr node, AppBridge, the apiserver) sets and trusts: they
  * pick the app, the call, the workspace and the trunk. Callers and apps may never set them.
  */
 exports.RESERVED_SIP_HEADERS = new Set([
@@ -40,7 +40,7 @@ exports.RESERVED_SIP_HEADERS = new Set([
     "X-Is-Api-Originated-Type",
     "X-Connect-Token",
     "X-Edgeport-Ref",
-    "X-Gateway-Auth",
+    "X-AppBridge-Auth",
     "X-Request-Uri",
     "X-Session-Count"
 ].map((h) => h.toLowerCase()));
@@ -87,7 +87,7 @@ function sipHeadersProblem(headers) {
     }
     return undefined;
 }
-/** Whether `to` is a target the media node may dial or refer to. */
+/** Whether `to` is a target the Roomr node may dial or refer to. */
 function isSipTarget(to) {
     return typeof to === "string" && exports.SIP_TARGET.test(to);
 }

package/dist/webhooks/bus.d.ts

@@ -17,18 +17,37 @@ export type BusConnection = {
 export declare function busWebhookPublisher(nc: Pick<BusConnection, "publish">): (event: WebhookEvent) => void;
 /** Parses a bus message; undefined for anything that is not a v1 webhook event. */
 export declare function parseBusEvent(data: Uint8Array): WebhookEvent | undefined;
-/** Where media nodes report calls no gateway claimed (the last token is never a room ref). */
-export declare const NODE_CALL_FAILED_SUBJECT = "media.*.events.call-failed";
-/** The reasons a node may give: it only ever fails a call nobody claimed. */
-export declare const NODE_CALL_FAILED_REASONS: readonly ["node_error"];
+/** Where Roomr nodes publish a call's events (`roomr.events.<call_ref>`; room events have one more token). */
+export declare const ROOMR_CALL_EVENTS_SUBJECT = "roomr.events.*";
 /**
- * The call.failed event for a media node's report on `subject`
- * (`media.<nodeId>.events.call-failed`); undefined for anything else. Only `call.failed` with a
- * node reason is accepted, the report must name the node of its subject, and the workspace is left
- * empty for the fan-out to resolve from the app: a node never chooses the workspace, the event type
- * or extra data. The id depends on the node and the call, so a repeated report is delivered once.
+ * The `call.failed` reasons an unanswered outbound call can end with (the node's `cause`); any
+ * other cause is reported as `node_error`.
  */
-export declare function nodeCallFailedEvent(subject: string, data: Uint8Array, now?: Date): WebhookEvent | undefined;
+export declare const UNANSWERED_CALL_REASONS: readonly ["busy", "no_answer", "rejected", "removed", "node_error"];
+/** An outbound call the callee never answered, as its node's `call.ended` tells it. */
+export type UnansweredCall = {
+    callRef: string;
+    appRef: string;
+    from: string;
+    to: string;
+    reason: (typeof UNANSWERED_CALL_REASONS)[number];
+    sipStatus?: number;
+    nodeRef: string;
+};
+/**
+ * The unanswered outbound call a Roomr node's event on `subject` (`roomr.events.<call_ref>`)
+ * reports, or undefined: only a `call.ended` with `answered: false` of a call the control plane
+ * placed (its `metadata.app_ref`, passed through by the node) for the subject's own call. The
+ * parties come from the metadata the control plane set; the node never chooses the workspace
+ * (left for the fan-out to resolve from the app), the event type or extra data (M6).
+ */
+export declare function unansweredOutboundCall(subject: string, event: Record<string, unknown> | undefined): UnansweredCall | undefined;
+/**
+ * The `call.failed` event for an unanswered outbound call. Its id depends on the call only, so
+ * every replica that sees the node's `call.ended` builds the same event and each endpoint gets one
+ * delivery.
+ */
+export declare function unansweredCallFailed(call: UnansweredCall, now?: Date): WebhookEvent;
 export type FanoutOptions = {
     /** Usually `WebhookDispatcher.publish`: stores one pending delivery per subscribed endpoint. */
     publish(event: WebhookEvent): Delivery[];

package/dist/webhooks/bus.js

@@ -9,10 +9,11 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
     });
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.NODE_CALL_FAILED_REASONS = exports.NODE_CALL_FAILED_SUBJECT = exports.WEBHOOK_EVENTS_SUBJECT = void 0;
+exports.UNANSWERED_CALL_REASONS = exports.ROOMR_CALL_EVENTS_SUBJECT = exports.WEBHOOK_EVENTS_SUBJECT = void 0;
 exports.busWebhookPublisher = busWebhookPublisher;
 exports.parseBusEvent = parseBusEvent;
-exports.nodeCallFailedEvent = nodeCallFailedEvent;
+exports.unansweredOutboundCall = unansweredOutboundCall;
+exports.unansweredCallFailed = unansweredCallFailed;
 exports.resolveWorkspace = resolveWorkspace;
 exports.subscribeWebhookFanout = subscribeWebhookFanout;
 /**
@@ -37,15 +38,15 @@ const crypto_1 = require("crypto");
 const util_1 = require("util");
 const events_1 = require("./events");
 // Event fan-out from the event bus (add-workspace-webhooks task 2.2, build log LO-B1). Producers
-// that have no database (media nodes, gateways in bus mode, other regions) publish events on
+// that have no database (Roomr nodes, appbridges in bus mode, other regions) publish events on
 // `webhooks.events`; one control-plane replica per event (queue group) fans each event out to the
 // workspace's subscribed endpoints. A producer that does not know the workspace leaves
 // `workspaceRef` empty and the fan-out resolves it from `data.appRef`.
 //
-// Media nodes may not publish `webhooks.events` (M6: a node could otherwise forge any event for
-// any workspace). A node reports a call no gateway claimed on its own subject,
-// `media.<nodeId>.events.call-failed`; the control plane builds the call.failed event from it
-// (nodeCallFailedEvent), with the workspace taken from the app and nothing else trusted.
+// Roomr nodes may not publish `webhooks.events` (M6: a node could otherwise forge any event for
+// any workspace). An outbound call that is never answered reaches no AppBridge; the control plane
+// builds its call.failed from the node's own `call.ended` on `roomr.events.<call_ref>`
+// (unansweredOutboundCall), with the workspace taken from the app and nothing else trusted.
 exports.WEBHOOK_EVENTS_SUBJECT = "webhooks.events";
 const encoder = new util_1.TextEncoder();
 const decoder = new util_1.TextDecoder();
@@ -71,63 +72,70 @@ function parseBusEvent(data) {
         return undefined;
     return e;
 }
-/** Where media nodes report calls no gateway claimed (the last token is never a room ref). */
-exports.NODE_CALL_FAILED_SUBJECT = "media.*.events.call-failed";
-/** The reasons a node may give: it only ever fails a call nobody claimed. */
-exports.NODE_CALL_FAILED_REASONS = ["node_error"];
+/** Where Roomr nodes publish a call's events (`roomr.events.<call_ref>`; room events have one more token). */
+exports.ROOMR_CALL_EVENTS_SUBJECT = "roomr.events.*";
+/**
+ * The `call.failed` reasons an unanswered outbound call can end with (the node's `cause`); any
+ * other cause is reported as `node_error`.
+ */
+exports.UNANSWERED_CALL_REASONS = [
+    "busy",
+    "no_answer",
+    "rejected",
+    "removed",
+    "node_error"
+];
 const MAX_FIELD = 256;
 const field = (v, required = false) => typeof v === "string" && v.length <= MAX_FIELD && (!required || v.length > 0)
     ? v
     : undefined;
 /**
- * The call.failed event for a media node's report on `subject`
- * (`media.<nodeId>.events.call-failed`); undefined for anything else. Only `call.failed` with a
- * node reason is accepted, the report must name the node of its subject, and the workspace is left
- * empty for the fan-out to resolve from the app: a node never chooses the workspace, the event type
- * or extra data. The id depends on the node and the call, so a repeated report is delivered once.
+ * The unanswered outbound call a Roomr node's event on `subject` (`roomr.events.<call_ref>`)
+ * reports, or undefined: only a `call.ended` with `answered: false` of a call the control plane
+ * placed (its `metadata.app_ref`, passed through by the node) for the subject's own call. The
+ * parties come from the metadata the control plane set; the node never chooses the workspace
+ * (left for the fan-out to resolve from the app), the event type or extra data (M6).
  */
-function nodeCallFailedEvent(subject, data, now = new Date()) {
-    var _a;
+function unansweredOutboundCall(subject, event) {
+    var _a, _b, _c, _d;
     const tokens = subject.split(".");
-    if (tokens.length !== 4 ||
-        tokens[0] !== "media" ||
-        tokens[2] !== "events" ||
-        tokens[3] !== "call-failed")
+    if (tokens.length !== 3 || tokens[0] !== "roomr" || tokens[1] !== "events")
         return undefined;
-    let r;
-    try {
-        r = JSON.parse(decoder.decode(data));
-    }
-    catch (_b) {
+    if (!event || typeof event !== "object" || event.type !== "call.ended")
         return undefined;
-    }
-    if (!r || typeof r !== "object" || r.type !== "call.failed")
+    if (event.answered !== false)
+        return undefined;
+    const callRef = field(event.call_ref, true);
+    if (!callRef || callRef !== tokens[2])
         return undefined;
-    const nodeId = tokens[1];
-    const callRef = field(r.callRef, true);
-    const appRef = field(r.appRef, true);
-    const from = field(r.from);
-    const to = field(r.to);
-    const reason = field(r.reason);
-    const direction = (_a = r.direction) !== null && _a !== void 0 ? _a : "inbound";
-    if (r.nodeId !== nodeId ||
-        !callRef ||
-        !appRef ||
-        from === undefined ||
-        to === undefined ||
-        !exports.NODE_CALL_FAILED_REASONS.includes(reason !== null && reason !== void 0 ? reason : "") ||
-        (direction !== "inbound" && direction !== "outbound"))
+    const metadata = (event.metadata && typeof event.metadata === "object" ? event.metadata : {});
+    const appRef = field(metadata.app_ref, true);
+    if (!appRef)
         return undefined;
+    const cause = String((_a = event.cause) !== null && _a !== void 0 ? _a : "");
+    const reason = exports.UNANSWERED_CALL_REASONS.includes(cause)
+        ? cause
+        : "node_error";
+    const sipStatus = Number(event.sip_status);
+    return Object.assign(Object.assign({ callRef,
+        appRef, from: (_b = field(metadata.from)) !== null && _b !== void 0 ? _b : "", to: (_c = field(metadata.to)) !== null && _c !== void 0 ? _c : "", reason }, (Number.isInteger(sipStatus) && sipStatus > 0 ? { sipStatus } : {})), { nodeRef: (_d = field(event.node_ref)) !== null && _d !== void 0 ? _d : "" });
+}
+/**
+ * The `call.failed` event for an unanswered outbound call. Its id depends on the call only, so
+ * every replica that sees the node's `call.ended` builds the same event and each endpoint gets one
+ * delivery.
+ */
+function unansweredCallFailed(call, now = new Date()) {
     const event = (0, events_1.callFailed)("", {
-        callRef,
-        appRef,
-        from,
-        to,
-        direction,
-        reason: reason
+        callRef: call.callRef,
+        appRef: call.appRef,
+        from: call.from,
+        to: call.to,
+        direction: "outbound",
+        reason: call.reason
     });
     const digest = (0, crypto_1.createHash)("sha256")
-        .update(`${nodeId}\n${callRef}`)
+        .update(`call.failed\n${call.callRef}`)
         .digest("hex")
         .slice(0, 32);
     return Object.assign(Object.assign({}, event), { id: `evt_node_${digest}`, createdAt: now.toISOString() });

package/dist/webhooks/events.d.ts

@@ -1,7 +1,7 @@
 export declare const WEBHOOK_EVENT_TYPES: readonly ["call.started", "call.ended", "call.failed", "call_record.sealed", "provider.deprecated"];
 export type WebhookEventType = (typeof WEBHOOK_EVENT_TYPES)[number];
 /**
- * Event names of the retired Autopilot assistant webhook (`eventsHook`) and what replaces them
+ * Event names of the retired Autopilot agent webhook (`eventsHook`) and what replaces them
  * (add-call-record 7.3). The record of a conversation (transcript, turns, recording) is in the call
  * record that `call_record.sealed` links to.
  */

package/dist/webhooks/events.js

@@ -30,7 +30,7 @@ exports.WEBHOOK_EVENT_TYPES = [
     "provider.deprecated"
 ];
 /**
- * Event names of the retired Autopilot assistant webhook (`eventsHook`) and what replaces them
+ * Event names of the retired Autopilot agent webhook (`eventsHook`) and what replaces them
  * (add-call-record 7.3). The record of a conversation (transcript, turns, recording) is in the call
  * record that `call_record.sealed` links to.
  */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fonoster/common",
-  "version": "0.30.0",
+  "version": "0.31.0",
   "description": "Common library for Fonoster projects",
   "author": "Pedro Sanders <psanders@fonoster.com>",
   "homepage": "https://github.com/fonoster/fonoster#readme",
@@ -15,15 +15,14 @@
     "prebuild": "rimraf ./dist tsconfig.tsbuildinfo",
     "build": "tsc -b tsconfig.json",
     "postbuild": "cp -a src/protos dist",
-    "clean": "rimraf ./dist node_modules tsconfig.tsbuildinfo",
-    "generate:session-schema": "tsx scripts/export-session-schema.ts"
+    "generate:session-schema": "tsx scripts/export-session-schema.ts",
+    "generate:config-schemas": "tsx scripts/export-config-schemas.ts"
   },
   "dependencies": {
-    "@fonoster/logger": "^0.30.0",
-    "@fonoster/types": "^0.30.0",
+    "@fonoster/logger": "^0.31.0",
+    "@fonoster/types": "^0.31.0",
     "@grpc/grpc-js": "~1.14.6",
     "@grpc/proto-loader": "^0.7.15",
-    "@influxdata/influxdb-client": "^1.35.0",
     "@opentelemetry/api": "^1.9.0",
     "@opentelemetry/resources": "^2.12.0",
     "@opentelemetry/sdk-trace-base": "^2.12.0",
@@ -58,8 +57,10 @@
   "bugs": {
     "url": "https://github.com/fonoster/fonoster/issues"
   },
-  "devDependencies": {},
-  "gitHead": "08c9cfd7932675b6b16111daa4d03f14b4e287d1",
+  "devDependencies": {
+    "@fonoster/roomr": "0.2.5"
+  },
+  "gitHead": "f0a5102dddeea0f70f659234108805bc10690f2e",
   "bin": {
     "fonoster-registry": "dist/registry/cli.js",
     "fonoster-config": "dist/config/cli/index.js"

package/schema/session.v1.json

@@ -4,7 +4,7 @@
   "title": "fonoster.session.v1",
   "description": "Messages of the Fonoster session protocol (a stream with protocol fonoster). Unknown types and fields must be ignored.",
   "protocol": "fonoster.session.v1",
-  "gatewayToApp": {
+  "appBridgeToApp": {
     "session.start": {
       "type": "object",
       "required": [
@@ -63,6 +63,9 @@
             }
           ]
         },
+        "traceparent": {
+          "type": "string"
+        },
         "audio": {
           "type": "object",
           "required": [
@@ -417,6 +420,23 @@
         }
       }
     },
+    "transfer.answered": {
+      "type": "object",
+      "required": [
+        "type",
+        "relatesTo"
+      ],
+      "properties": {
+        "type": {
+          "const": "transfer.answered"
+        },
+        "relatesTo": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 128
+        }
+      }
+    },
     "amd.result": {
       "type": "object",
       "required": [
@@ -461,7 +481,7 @@
       }
     }
   },
-  "appToGateway": {
+  "appToAppBridge": {
     "speak": {
       "type": "object",
       "required": [
@@ -786,6 +806,66 @@
           "type": "object"
         }
       }
+    },
+    "usage.report": {
+      "type": "object",
+      "required": [
+        "type",
+        "lines"
+      ],
+      "properties": {
+        "type": {
+          "const": "usage.report"
+        },
+        "id": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 128
+        },
+        "lines": {
+          "type": "array",
+          "minItems": 1,
+          "maxItems": 64,
+          "items": {
+            "type": "object",
+            "required": [
+              "meter",
+              "quantity",
+              "provider",
+              "keySource"
+            ],
+            "additionalProperties": false,
+            "properties": {
+              "meter": {
+                "enum": [
+                  "llm.tokens.in",
+                  "llm.tokens.out",
+                  "llm.tokens.cached",
+                  "embedding.tokens"
+                ]
+              },
+              "quantity": {
+                "type": "integer",
+                "minimum": 0
+              },
+              "provider": {
+                "type": "string",
+                "minLength": 1
+              },
+              "model": {
+                "type": "string",
+                "minLength": 1
+              },
+              "keySource": {
+                "enum": [
+                  "platform",
+                  "workspace"
+                ]
+              }
+            }
+          }
+        }
+      }
     }
   }
 }

package/dist/config/integrationsSchema.d.ts

@@ -1,32 +0,0 @@
-import { z } from "zod";
-declare const integrationsConfigSchema: z.ZodArray<z.ZodObject<{
-    name: z.ZodString;
-    productRef: z.ZodString;
-    type: z.ZodEnum<["tts", "stt", "llm"]>;
-    credentials: z.ZodRecord<z.ZodString, z.ZodUnknown>;
-}, "strip", z.ZodTypeAny, {
-    type?: "tts" | "stt" | "llm";
-    name?: string;
-    productRef?: string;
-    credentials?: Record<string, unknown>;
-}, {
-    type?: "tts" | "stt" | "llm";
-    name?: string;
-    productRef?: string;
-    credentials?: Record<string, unknown>;
-}>, "many">;
-/** Spelled out so callers get required fields regardless of tsconfig strictness. */
-type IntegrationsConfig = Array<{
-    name: string;
-    productRef: string;
-    type: "tts" | "stt" | "llm";
-    credentials: Record<string, unknown>;
-}>;
-/**
- * Reads and validates the retired integrations file. Only `fonoster-migrate-legacy --integrations`
- * reads it now, to move its keys into operator config by credentialRef (add-provider-registry 5.3).
- * YAML (`.yaml`/`.yml`) or JSON with comments (`.json`/`.jsonc`). Throws with the
- * file path when the file can't be read or doesn't validate.
- */
-declare function getIntegrationsFromFile(pathToIntegrations: string): IntegrationsConfig;
-export { integrationsConfigSchema, IntegrationsConfig, getIntegrationsFromFile };