evo360-types 1.3.570 → 1.3.578

package/dist/apps/evo-telemedicine/zod-schemas.js

@@ -0,0 +1,709 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.zAccessRevokeCommandSchema = exports.zAccessSendCommandSchema = exports.zReassignHostCommandSchema = exports.zWaitingPolicyCommandSchema = exports.zTelemedicineGrantIndexSchema = exports.zTelemedicineTranscriptionConfigSchema = exports.zTelemedicineRolloutSchema = exports.zTelemedicineLegalTextSchema = exports.zTelemedicineEntitlementAuditSchema = exports.zTelemedicineAppointmentIndexSchema = exports.zTeleconsultationAccessGrantSchema = exports.zTeleconsultationWebhookEventSchema = exports.zTeleconsultationEventSchema = exports.zTeleconsultationArtifactSchema = exports.zTeleconsultationConsentSchema = exports.zTeleconsultationConsentEvidenceSchema = exports.zTeleconsultationParticipantSchema = exports.zTeleconsultationPrivateProviderSchema = exports.zTeleconsultationSchema = exports.zTeleconsultationEventActorSchema = exports.zTeleconsultationEntitlementSnapshotSchema = exports.zTeleconsultationEndedBySchema = exports.zTeleconsultationEventMetadataSchema = exports.zTelemedicineErrorCodeSchema = exports.zEntitlementAuditActionSchema = exports.zTranscriptionProviderSchema = exports.zLegalTextStatusSchema = exports.zWebhookEventStatusSchema = exports.zTeleconsultationEventTypeSchema = exports.zTeleconsultationEventSourceSchema = exports.zTeleconsultationEventActorTypeSchema = exports.zEndedByTypeSchema = exports.zAccessSendChannelKindSchema = exports.zAccessGrantStateSchema = exports.zAccessGrantKindSchema = exports.zArtifactStatusSchema = exports.zArtifactTypeSchema = exports.zConsentActorTypeSchema = exports.zConsentDecisionSchema = exports.zConsentSubjectSchema = exports.zTranscriptionStatusSchema = exports.zRecordingStatusSchema = exports.zIdentityLevelSchema = exports.zPresenceStateSchema = exports.zParticipantStateSchema = exports.zParticipantRoleSchema = exports.zTeleconsultationProviderSchema = exports.zTeleconsultationModeSchema = exports.zWaitingPolicySchema = exports.zTeleconsultationStatusSchema = void 0;
+exports.zTelemetryCommandSchema = exports.zRecordingStopCommandSchema = exports.zRecordingConsentCommandSchema = exports.zRecordingRequestCommandSchema = exports.zRejectCommandSchema = exports.zAdmitCommandSchema = exports.zPresenceCommandSchema = exports.zLeaveCommandSchema = exports.zJoinCommandSchema = exports.zConsentCommandSchema = exports.zIdentityVerifyCommandSchema = exports.zExchangeCommandSchema = exports.zEndCommandSchema = void 0;
+const zod_1 = require("zod");
+const zod_schemas_1 = require("../shared/zod-schemas");
+const zod_schemas_2 = require("../evo-tenant/zod-schemas");
+// ======================================================
+// evo-telemedicine (feat-160) — zod schemas
+//
+// Espelhos À MÃO dos enums/interfaces em types/evo-telemedicine/index.ts (o
+// repo não gera um lado a partir do outro). Ao acrescentar um valor no `*Enum`
+// TS, acrescente aqui — e vice-versa. Doc schemas usam `.passthrough()` para
+// tolerar campos aditivos sem republish; command schemas são ESTRITOS (fronteira
+// HTTP) e nunca aceitam `tenant` no body.
+// ======================================================
+// ----- Enums ----------------------------------------------------------------
+/** Espelha `TeleconsultationStatusEnum`. */
+exports.zTeleconsultationStatusSchema = zod_1.z.enum([
+    "scheduled",
+    "open",
+    "live",
+    "reconnecting",
+    "ending",
+    "ended",
+    "cancelled",
+    "expired",
+]);
+/** Espelha `WaitingPolicyEnum`. */
+exports.zWaitingPolicySchema = zod_1.z.enum([
+    "manual_admit",
+    "auto_when_doctor_present",
+]);
+/** Espelha `TeleconsultationModeEnum`. */
+exports.zTeleconsultationModeSchema = zod_1.z.enum([
+    "audio_video",
+    "audio_only_allowed",
+]);
+/** Espelha `TeleconsultationProviderEnum`. */
+exports.zTeleconsultationProviderSchema = zod_1.z.enum(["realtimekit"]);
+/** Espelha `ParticipantRoleEnum`. */
+exports.zParticipantRoleSchema = zod_1.z.enum(["doctor", "patient"]);
+/** Espelha `ParticipantStateEnum`. */
+exports.zParticipantStateSchema = zod_1.z.enum([
+    "invited",
+    "verified",
+    "waiting",
+    "connected",
+    "disconnected",
+    "left",
+]);
+/** Espelha `PresenceStateEnum` (subconjunto reportável pelo cliente). */
+exports.zPresenceStateSchema = zod_1.z.enum([
+    "waiting",
+    "connected",
+    "disconnected",
+    "left",
+]);
+/** Espelha `IdentityLevelEnum`. */
+exports.zIdentityLevelSchema = zod_1.z.enum(["none", "weak", "strong"]);
+/** Espelha `RecordingStatusEnum`. */
+exports.zRecordingStatusSchema = zod_1.z.enum([
+    "idle",
+    "consent_pending",
+    "recording",
+    "stopping",
+    "failed",
+]);
+/** Espelha `TranscriptionStatusEnum`. */
+exports.zTranscriptionStatusSchema = zod_1.z.enum([
+    "not_requested",
+    "queued",
+    "processing",
+    "ready",
+    "failed",
+    "deleted",
+]);
+/** Espelha `ConsentSubjectEnum`. */
+exports.zConsentSubjectSchema = zod_1.z.enum([
+    "terms",
+    "privacy",
+    "recording",
+    "transcription",
+]);
+/** Espelha `ConsentDecisionEnum`. */
+exports.zConsentDecisionSchema = zod_1.z.enum([
+    "accepted",
+    "declined",
+    "withdrawn",
+]);
+/** Espelha `ConsentActorTypeEnum`. */
+exports.zConsentActorTypeSchema = zod_1.z.enum(["patient", "doctor"]);
+/** Espelha `ArtifactTypeEnum`. */
+exports.zArtifactTypeSchema = zod_1.z.enum([
+    "recording_audio_video",
+    "recording_audio",
+    "transcript",
+]);
+/** Espelha `ArtifactStatusEnum`. */
+exports.zArtifactStatusSchema = zod_1.z.enum([
+    "pending",
+    "processing",
+    "ready",
+    "failed",
+    "deleting",
+    "deleted",
+]);
+/** Espelha `AccessGrantKindEnum`. */
+exports.zAccessGrantKindSchema = zod_1.z.enum([
+    "qr_capability",
+    "launch_code",
+    "browser_session",
+    // feat-160 F7: `kind` de uma ENTRADA do `grant-index`, nunca de um grant.
+    "ics_capability",
+]);
+/** Espelha `AccessGrantStateEnum`. */
+exports.zAccessGrantStateSchema = zod_1.z.enum([
+    "active",
+    "consumed",
+    "blocked",
+    "revoked",
+    "expired",
+]);
+/** Espelha `AccessSendChannelKindEnum`. */
+exports.zAccessSendChannelKindSchema = zod_1.z.enum([
+    "whatsapp",
+    "email",
+    "manual",
+]);
+/** Espelha `EndedByTypeEnum`. */
+exports.zEndedByTypeSchema = zod_1.z.enum(["user", "system"]);
+/** Espelha `TeleconsultationEventActorTypeEnum`. */
+exports.zTeleconsultationEventActorTypeSchema = zod_1.z.enum([
+    "user",
+    "patient",
+    "system",
+    "provider",
+]);
+/** Espelha `TeleconsultationEventSourceEnum`. */
+exports.zTeleconsultationEventSourceSchema = zod_1.z.enum([
+    "api",
+    "webhook",
+    "appointment_reconciler",
+    "retention_job",
+    "sweep",
+]);
+/** Espelha `TeleconsultationEventTypeEnum`. ADITIVO: eventos já gravados dependem desta lista. */
+exports.zTeleconsultationEventTypeSchema = zod_1.z.enum([
+    "teleconsultation.created",
+    "teleconsultation.rescheduled",
+    "teleconsultation.cancelled",
+    "teleconsultation.expired",
+    "teleconsultation.diverged",
+    "access.created",
+    "access.link_revealed",
+    "access.revoked",
+    "access.exchanged",
+    "access.verification_failed",
+    "access.blocked",
+    "host.claimed",
+    "host.reassigned",
+    "waiting_policy.changed",
+    "doctor.prepared",
+    "doctor.joined",
+    "doctor.disconnected",
+    "doctor.rejoined",
+    "doctor.left",
+    "patient.verified",
+    "patient.waiting",
+    "patient.admitted",
+    "patient.rejected",
+    "patient.joined",
+    "patient.disconnected",
+    "patient.rejoined",
+    "patient.left",
+    "recording.consent_requested",
+    "recording.consent_accepted",
+    "recording.consent_declined",
+    "recording.consent_withdrawn",
+    "recording.started",
+    "recording.stopped",
+    "recording.failed",
+    "transcription.queued",
+    "transcription.ready",
+    "transcription.failed",
+    "transcription.deleted",
+    "consultation.started",
+    "consultation.reconnecting",
+    "consultation.ended",
+    "artifact.accessed",
+    "artifact.deleted",
+    "entitlement.denied",
+    "rollout.denied",
+    "permission.denied",
+    "webhook.observed",
+]);
+/** Espelha `WebhookEventStatusEnum`. */
+exports.zWebhookEventStatusSchema = zod_1.z.enum([
+    "pending",
+    "claimed",
+    "completed",
+    "failed",
+]);
+/** Espelha `LegalTextStatusEnum`. */
+exports.zLegalTextStatusSchema = zod_1.z.enum(["draft", "published", "retired"]);
+/** Espelha `TranscriptionProviderEnum`. */
+exports.zTranscriptionProviderSchema = zod_1.z.enum(["none", "realtimekit"]);
+/** Espelha `EntitlementAuditActionEnum`. */
+exports.zEntitlementAuditActionSchema = zod_1.z.enum(["set", "override", "revoke"]);
+/** Espelha `TelemedicineErrorCode`. */
+exports.zTelemedicineErrorCodeSchema = zod_1.z.enum([
+    "TENANT_MODULE_DISABLED",
+    "ROLLOUT_DISABLED",
+    "EMERGENCY_KILL",
+    "PERMISSION_DENIED",
+    "CAPABILITY_DISABLED",
+    "NOT_FOUND",
+    "ACCESS_WINDOW_CLOSED",
+    "HOST_CLAIMED_BY_OTHER",
+    "HOST_REQUIRED",
+    "CONSENT_REQUIRED",
+    "IDENTITY_REQUIRED",
+    "IDENTITY_VERIFICATION_FAILED",
+    "GRANT_BLOCKED",
+    "GRANT_INVALID",
+    "SESSION_INVALID",
+    "TELECONSULTATION_TERMINAL",
+    "INVALID_TRANSITION",
+    "VERSION_CONFLICT",
+    "WAITING_POLICY_LOCKED",
+    "RECORDING_ACTIVE",
+    "RECORDING_FAILED",
+    "TRANSCRIPTION_GATE_CLOSED",
+    "ARTIFACT_NOT_READY",
+    "PROVIDER_ERROR",
+    "RATE_LIMITED",
+    "VALIDATION_ERROR",
+]);
+// ----- Value objects ----------------------------------------------------------
+const zDate = zod_schemas_1.zFirestoreDateSchema;
+const zDateNullable = zod_schemas_1.zFirestoreDateSchema.nullable().optional();
+/** Metadata allowlisted (sem PII/conteúdo médico): só primitivos. */
+exports.zTeleconsultationEventMetadataSchema = zod_1.z.record(zod_1.z.string().min(1).max(60), zod_1.z.union([zod_1.z.string().max(500), zod_1.z.number(), zod_1.z.boolean()]));
+exports.zTeleconsultationEndedBySchema = zod_1.z
+    .object({
+    type: exports.zEndedByTypeSchema,
+    id: zod_1.z.string().optional(),
+    reason: zod_1.z.string().min(1).max(120),
+})
+    .passthrough();
+exports.zTeleconsultationEntitlementSnapshotSchema = zod_1.z
+    .object({
+    version: zod_1.z.number().int().min(0),
+    capabilities: zod_1.z.record(zod_1.z.string(), zod_1.z.union([zod_1.z.boolean(), zod_1.z.number(), zod_1.z.string()])),
+})
+    .passthrough();
+exports.zTeleconsultationEventActorSchema = zod_1.z
+    .object({
+    type: exports.zTeleconsultationEventActorTypeSchema,
+    id: zod_1.z.string().optional(),
+})
+    .passthrough();
+// ----- Documentos (por tenant) -------------------------------------------------
+/** Espelha `ITeleconsultation`. */
+exports.zTeleconsultationSchema = zod_schemas_1.zFireDocSchema
+    .extend({
+    calendar_id: zod_1.z.string().min(1),
+    appointment_id: zod_1.z.string().min(1),
+    patient_id: zod_1.z.string().min(1),
+    scheduled_professional_id: zod_1.z.string().optional(),
+    claimed_host_user_id: zod_1.z.string().optional(),
+    claimed_host_at: zDateNullable,
+    mode: exports.zTeleconsultationModeSchema,
+    status: exports.zTeleconsultationStatusSchema,
+    waiting_policy: exports.zWaitingPolicySchema,
+    scheduled_start_at: zDate,
+    scheduled_end_at: zDate,
+    doctor_access_from: zDate,
+    patient_access_from: zDate,
+    unused_expires_at: zDate,
+    reconnect_until: zDateNullable,
+    started_at: zDateNullable,
+    ended_at: zDateNullable,
+    ended_by: exports.zTeleconsultationEndedBySchema.nullable().optional(),
+    provider: exports.zTeleconsultationProviderSchema,
+    provider_meeting_id: zod_1.z.string().optional(),
+    active_provider_session_id: zod_1.z.string().optional(),
+    recording_status: exports.zRecordingStatusSchema,
+    recording_request_id: zod_1.z.string().optional(),
+    recording_terms_version: zod_1.z.string().optional(),
+    recording_requested_at: zDateNullable,
+    recording_requested_by: zod_1.z.string().optional(),
+    recording_started_at: zDateNullable,
+    recording_stopped_at: zDateNullable,
+    recording_failure_code: zod_1.z.string().nullable().optional(),
+    recording_segment: zod_1.z.number().int().min(0).optional(),
+    transcription_status: exports.zTranscriptionStatusSchema,
+    provider_teardown_pending: zod_1.z.boolean().optional(),
+    metadata_retention_until: zDateNullable,
+    entitlement_snapshot: exports.zTeleconsultationEntitlementSnapshotSchema,
+    generation: zod_1.z.number().int().min(0),
+    reschedule_count: zod_1.z.number().int().min(0).optional(),
+    last_reconciled_appointment_version: zod_1.z
+        .union([zod_1.z.number(), zod_1.z.string()])
+        .nullable()
+        .optional(),
+    last_reconciled_at: zDateNullable,
+    usage_metering_due_at: zDateNullable,
+    usage_metered_at: zDateNullable,
+    version: zod_1.z.number().int().min(0),
+})
+    .passthrough();
+/**
+ * Espelha `ITeleconsultationPrivateProvider` (subdoc `private/provider`).
+ *
+ * NÃO estende `zFireDocSchema`: o subdoc não é um IFireDoc (não tem `version`
+ * de concorrência nem `ref`), e é lido sempre pelo backend com `id` do snap.
+ */
+exports.zTeleconsultationPrivateProviderSchema = zod_1.z
+    .object({
+    id: zod_1.z.string(),
+    tenant: zod_1.z.string().min(1),
+    teleconsultation_id: zod_1.z.string().min(1),
+    provider: exports.zTeleconsultationProviderSchema,
+    provider_meeting_id: zod_1.z.string().optional(),
+    active_provider_session_id: zod_1.z.string().optional(),
+    provider_session_ids: zod_1.z.array(zod_1.z.string().min(1)).optional(),
+    provider_participant_ids: zod_1.z.record(zod_1.z.string(), zod_1.z.string()).optional(),
+    active_provider_recording_id: zod_1.z.string().nullable().optional(),
+    created_at: zDateNullable,
+    updated_at: zDateNullable,
+})
+    .passthrough();
+/** Espelha `ITeleconsultationParticipant`. */
+exports.zTeleconsultationParticipantSchema = zod_schemas_1.zFireDocSchema
+    .extend({
+    teleconsultation_id: zod_1.z.string().min(1),
+    role: exports.zParticipantRoleSchema,
+    actor_user_id: zod_1.z.string().optional(),
+    patient_id: zod_1.z.string().optional(),
+    provider_participant_id: zod_1.z.string().optional(),
+    opaque_custom_participant_id: zod_1.z.string().min(1),
+    state: exports.zParticipantStateSchema,
+    identity_level: exports.zIdentityLevelSchema.optional(),
+    admitted_at: zDateNullable,
+    connected_at: zDateNullable,
+    last_seen_at: zDateNullable,
+    disconnected_at: zDateNullable,
+    reconnect_count: zod_1.z.number().int().min(0),
+})
+    .passthrough();
+exports.zTeleconsultationConsentEvidenceSchema = zod_1.z
+    .object({
+    ui_locale: zod_1.z.string().min(2).max(10),
+    session_id_hash: zod_1.z.string().min(1),
+})
+    .passthrough();
+/** Espelha `ITeleconsultationConsent`. */
+exports.zTeleconsultationConsentSchema = zod_schemas_1.zFireDocSchema
+    .extend({
+    teleconsultation_id: zod_1.z.string().min(1),
+    subject: exports.zConsentSubjectSchema,
+    decision: exports.zConsentDecisionSchema,
+    terms_version: zod_1.z.string().min(1).max(40),
+    terms_content_hash: zod_1.z.string().optional(),
+    participant_id: zod_1.z.string().min(1),
+    actor_type: exports.zConsentActorTypeSchema,
+    occurred_at: zDate,
+    correlation_id: zod_1.z.string().min(1),
+    recording_request_id: zod_1.z.string().optional(),
+    evidence: exports.zTeleconsultationConsentEvidenceSchema,
+})
+    .passthrough();
+/** Espelha `ITeleconsultationArtifact`. */
+exports.zTeleconsultationArtifactSchema = zod_schemas_1.zFireDocSchema
+    .extend({
+    teleconsultation_id: zod_1.z.string().min(1),
+    type: exports.zArtifactTypeSchema,
+    segment: zod_1.z.number().int().min(1),
+    status: exports.zArtifactStatusSchema,
+    provider_artifact_id: zod_1.z.string().optional(),
+    provider_session_id: zod_1.z.string().optional(),
+    recording_request_id: zod_1.z.string().optional(),
+    storage_bucket: zod_1.z.string().optional(),
+    storage_object: zod_1.z.string().optional(),
+    content_type: zod_1.z.string().optional(),
+    size_bytes: zod_1.z.number().int().min(0).optional(),
+    checksum: zod_1.z.string().optional(),
+    started_at: zDateNullable,
+    ended_at: zDateNullable,
+    expires_at: zDateNullable,
+    deleted_at: zDateNullable,
+    error_code: zod_1.z.string().optional(),
+})
+    .passthrough();
+/** Espelha `ITeleconsultationEvent` (append-only). */
+exports.zTeleconsultationEventSchema = zod_schemas_1.zFireDocSchema
+    .extend({
+    teleconsultation_id: zod_1.z.string().min(1),
+    type: exports.zTeleconsultationEventTypeSchema,
+    occurred_at: zDate,
+    actor: exports.zTeleconsultationEventActorSchema,
+    source: exports.zTeleconsultationEventSourceSchema,
+    correlation_id: zod_1.z.string().min(1),
+    causation_id: zod_1.z.string().optional(),
+    idempotency_key: zod_1.z.string().optional(),
+    from_status: zod_1.z.string().optional(),
+    to_status: zod_1.z.string().optional(),
+    metadata: exports.zTeleconsultationEventMetadataSchema.optional(),
+})
+    .passthrough();
+/** Espelha `ITeleconsultationWebhookEvent` (dedup + outbox). */
+exports.zTeleconsultationWebhookEventSchema = zod_schemas_1.zFireDocSchema
+    .extend({
+    teleconsultation_id: zod_1.z.string().optional(),
+    provider: exports.zTeleconsultationProviderSchema,
+    provider_event_id: zod_1.z.string().min(1),
+    event_type: zod_1.z.string().min(1),
+    payload_hash: zod_1.z.string().optional(),
+    sanitized_payload: zod_1.z
+        .record(zod_1.z.string(), zod_1.z.union([zod_1.z.string(), zod_1.z.number(), zod_1.z.boolean(), zod_1.z.null()]))
+        .optional(),
+    status: exports.zWebhookEventStatusSchema,
+    received_at: zDate,
+    claimed_at: zDateNullable,
+    claimed_by: zod_1.z.string().optional(),
+    lease_until: zDateNullable,
+    processed_at: zDateNullable,
+    attempt: zod_1.z.number().int().min(0),
+    next_attempt_at: zDateNullable,
+    result: zod_1.z.string().optional(),
+    error_code: zod_1.z.string().optional(),
+    correlation_id: zod_1.z.string().min(1),
+    expires_at: zDate,
+})
+    .passthrough();
+/** Espelha `ITeleconsultationAccessGrant`. `secret_hash` é HMAC — nunca o segredo. */
+exports.zTeleconsultationAccessGrantSchema = zod_schemas_1.zFireDocSchema
+    .extend({
+    teleconsultation_id: zod_1.z.string().min(1),
+    role: exports.zParticipantRoleSchema,
+    kind: exports.zAccessGrantKindSchema,
+    secret_hash: zod_1.z.string().min(1),
+    recipient_ref_hash: zod_1.z.string().optional(),
+    actor_user_id: zod_1.z.string().optional(),
+    participant_id: zod_1.z.string().optional(),
+    state: exports.zAccessGrantStateSchema,
+    expires_at: zDate,
+    consumed_at: zDateNullable,
+    revoked_at: zDateNullable,
+    revoked_by: zod_1.z.string().optional(),
+    last_used_at: zDateNullable,
+    failed_attempts: zod_1.z.number().int().min(0),
+    failed_window_started_at: zDateNullable,
+    blocked_until: zDateNullable,
+    parent_grant_id: zod_1.z.string().optional(),
+    channel_kind: exports.zAccessSendChannelKindSchema.optional(),
+    quick_reply_action_id: zod_1.z.string().optional(),
+    version: zod_1.z.number().int().min(0),
+})
+    .passthrough();
+/** Espelha `ITelemedicineAppointmentIndex`. */
+exports.zTelemedicineAppointmentIndexSchema = zod_schemas_1.zFireDocSchema
+    .extend({
+    calendar_id: zod_1.z.string().min(1),
+    appointment_id: zod_1.z.string().min(1),
+    active_teleconsultation_id: zod_1.z.string().nullable(),
+    generation: zod_1.z.number().int().min(0),
+    last_reconciled_appointment_version: zod_1.z
+        .union([zod_1.z.number(), zod_1.z.string()])
+        .nullable()
+        .optional(),
+    last_reconciled_at: zDateNullable,
+    last_teleconsultation_id: zod_1.z.string().nullable().optional(),
+})
+    .passthrough();
+/** Espelha `ITelemedicineEntitlementAudit`. */
+exports.zTelemedicineEntitlementAuditSchema = zod_schemas_1.zFireDocSchema
+    .extend({
+    module: zod_1.z.string().min(1).max(40),
+    action: exports.zEntitlementAuditActionSchema,
+    before: zod_schemas_2.zTenantModuleEntitlementSchema.nullable().optional(),
+    after: zod_schemas_2.zTenantModuleEntitlementSchema,
+    actor: zod_1.z
+        .object({
+        type: zod_1.z.enum(["user", "system", "script"]),
+        id: zod_1.z.string().optional(),
+    })
+        .passthrough(),
+    reason: zod_1.z.string().min(1).max(500),
+    occurred_at: zDate,
+    correlation_id: zod_1.z.string().optional(),
+})
+    .passthrough();
+// ----- Documentos de plataforma -------------------------------------------------
+// Docs globais (`IFireGlobalDoc`): sem `tenant`.
+const zGlobalDocSchema = zod_1.z.object({
+    id: zod_1.z.string(),
+    ref: zod_1.z.any().optional(),
+    model_ver: zod_1.z.number().optional(),
+    version: zod_1.z.number().optional(),
+    created_at: zDateNullable,
+    updated_at: zDateNullable,
+    deleted_at: zDateNullable,
+});
+/** Espelha `ITelemedicineLegalText` (standalone: `version` aqui é a versão do texto). */
+exports.zTelemedicineLegalTextSchema = zod_1.z
+    .object({
+    id: zod_1.z.string(),
+    subject: exports.zConsentSubjectSchema,
+    locale: zod_1.z.string().min(2).max(10),
+    version: zod_1.z.string().min(1).max(40),
+    title: zod_1.z.string().min(1).max(200),
+    content_html: zod_1.z.string().min(1),
+    content_hash: zod_1.z.string().min(1),
+    published_at: zDateNullable,
+    effective_at: zDateNullable,
+    status: exports.zLegalTextStatusSchema,
+    placeholders: zod_1.z.array(zod_1.z.string().min(1).max(60)).optional(),
+    created_at: zDateNullable,
+    updated_at: zDateNullable,
+})
+    .passthrough();
+/** Espelha `ITelemedicineRollout`. Ausência do doc = deny. */
+exports.zTelemedicineRolloutSchema = zGlobalDocSchema
+    .extend({
+    create_enabled: zod_1.z.boolean(),
+    join_enabled: zod_1.z.boolean(),
+    recording_enabled: zod_1.z.boolean(),
+    transcription_enabled: zod_1.z.boolean(),
+    emergency_kill: zod_1.z.boolean(),
+    updated_at: zDate,
+    updated_by: zod_1.z.string().min(1),
+})
+    .passthrough();
+/** Espelha `ITelemedicineTranscriptionConfig`. */
+exports.zTelemedicineTranscriptionConfigSchema = zGlobalDocSchema
+    .extend({
+    provider: exports.zTranscriptionProviderSchema,
+    production_gate_approved: zod_1.z.boolean(),
+    approved_by: zod_1.z.string().optional(),
+    approved_at: zDateNullable,
+})
+    .passthrough();
+/** Espelha `ITelemedicineGrantIndex`. */
+exports.zTelemedicineGrantIndexSchema = zGlobalDocSchema
+    .extend({
+    tenant: zod_1.z.string().min(1),
+    teleconsultation_id: zod_1.z.string().min(1),
+    grant_id: zod_1.z.string().min(1),
+    kind: exports.zAccessGrantKindSchema.optional(),
+    expires_at: zDate,
+})
+    .passthrough();
+// ----- Comandos (request bodies — fronteira HTTP, estritos) --------------------
+const zExpectedVersion = zod_1.z.number().int().min(0).optional();
+const zReason = zod_1.z.string().trim().min(1).max(500);
+/** `PATCH /waiting-policy` — espelha `IWaitingPolicyCommand`. */
+exports.zWaitingPolicyCommandSchema = zod_1.z
+    .object({
+    waiting_policy: exports.zWaitingPolicySchema,
+    expected_version: zExpectedVersion,
+})
+    .strict();
+/** `POST /reassign-host` — espelha `IReassignHostCommand` (motivo obrigatório, D22). */
+exports.zReassignHostCommandSchema = zod_1.z
+    .object({
+    to_user_id: zod_1.z.string().trim().min(1).max(128),
+    reason: zReason,
+    expected_version: zExpectedVersion,
+})
+    .strict();
+/** `POST /access/send` — espelha `IAccessSendCommand`. */
+exports.zAccessSendCommandSchema = zod_1.z
+    .object({
+    channel_kind: exports.zAccessSendChannelKindSchema,
+    resend: zod_1.z.boolean().optional(),
+})
+    .strict();
+/** `POST /access/revoke` — espelha `IAccessRevokeCommand`. */
+exports.zAccessRevokeCommandSchema = zod_1.z
+    .object({
+    grant_id: zod_1.z.string().trim().min(1).max(128).optional(),
+    reason: zReason,
+})
+    .strict();
+/** `POST /end` — espelha `IEndCommand`. */
+exports.zEndCommandSchema = zod_1.z
+    .object({
+    reason: zod_1.z.string().trim().min(1).max(120).optional(),
+    expected_version: zExpectedVersion,
+})
+    .strict();
+/** `POST /api/room/v1/exchange` — espelha `IExchangeCommand` (code base64url de 128 bits = 22 chars). */
+exports.zExchangeCommandSchema = zod_1.z
+    .object({
+    code: zod_1.z
+        .string()
+        .trim()
+        .min(16)
+        .max(128)
+        .regex(/^[A-Za-z0-9_-]+$/, "code must be base64url"),
+})
+    .strict();
+/** `POST /api/room/v1/identity/verify` — espelha `IIdentityVerifyCommand`. */
+exports.zIdentityVerifyCommandSchema = zod_1.z
+    .object({
+    display_name: zod_1.z.string().trim().min(2).max(120),
+    // Normalizada no cliente para YYYY-MM-DD; o backend normaliza de novo antes
+    // da comparação constant-time. Erro de formato NÃO revela qual campo falhou.
+    birth_date: zod_1.z
+        .string()
+        .trim()
+        .regex(/^\d{4}-\d{2}-\d{2}$/, "birth_date must be YYYY-MM-DD")
+        .optional(),
+})
+    .strict();
+/** `POST /api/room/v1/consents` — espelha `IConsentCommand` (só `accepted|declined`; retirada é rota de gravação). */
+exports.zConsentCommandSchema = zod_1.z
+    .object({
+    subject: exports.zConsentSubjectSchema,
+    terms_version: zod_1.z.string().trim().min(1).max(40),
+    decision: zod_1.z.enum(["accepted", "declined"]),
+})
+    .strict();
+/**
+ * `POST /api/room/v1/join` — espelha `IJoinCommand`.
+ *
+ * `.passthrough()`, não `.strict()`, ao contrário dos outros comandos: o
+ * backend hoje LÊ os dois booleanos à mão e ignora o resto, e o corpo é a
+ * intenção de mídia do preflight. Trocar por `.strict()` faria um campo novo do
+ * SPA derrubar o join inteiro em `400` — alto preço para um corpo que o
+ * servidor pode ignorar por completo.
+ */
+exports.zJoinCommandSchema = zod_1.z
+    .object({
+    audio: zod_1.z.boolean().optional(),
+    video: zod_1.z.boolean().optional(),
+})
+    .passthrough();
+/**
+ * `POST /api/room/v1/leave` — espelha `ILeaveCommand`.
+ *
+ * `.passthrough()` pelo mesmo motivo, agravado: este corpo chega pelo
+ * `pagehide` com `fetch(keepalive)` e é a ÚLTIMA chance de registrar a saída.
+ * Um 400 aqui é uma saída perdida, e o backend já trata corpo ausente
+ * (`reason` default `'temporary'`).
+ */
+exports.zLeaveCommandSchema = zod_1.z
+    .object({
+    reason: zod_1.z.string().trim().min(1).max(60).optional(),
+})
+    .passthrough();
+/** `POST /api/room/v1/presence` — espelha `IPresenceCommand`. */
+exports.zPresenceCommandSchema = zod_1.z
+    .object({
+    state: exports.zPresenceStateSchema,
+    provider_participant_id: zod_1.z.string().trim().min(1).max(128).optional(),
+})
+    .strict();
+/** `POST /api/room/v1/admit` — espelha `IAdmitCommand`. */
+exports.zAdmitCommandSchema = zod_1.z
+    .object({
+    participant_id: zod_1.z.string().trim().min(1).max(128),
+})
+    .strict();
+/** `POST /api/room/v1/reject` — espelha `IRejectCommand`. */
+exports.zRejectCommandSchema = zod_1.z
+    .object({
+    participant_id: zod_1.z.string().trim().min(1).max(128),
+    reason: zod_1.z.string().trim().min(1).max(120).optional(),
+})
+    .strict();
+/** `POST /api/room/v1/recording/request` — espelha `IRecordingRequestCommand`. */
+exports.zRecordingRequestCommandSchema = zod_1.z
+    .object({
+    recording_request_id: zod_1.z.string().trim().min(8).max(128),
+})
+    .strict();
+/** `POST /api/room/v1/recording/accept|decline|withdraw` — espelha `IRecordingConsentCommand`. */
+exports.zRecordingConsentCommandSchema = zod_1.z
+    .object({
+    recording_request_id: zod_1.z.string().trim().min(8).max(128),
+    terms_version: zod_1.z.string().trim().min(1).max(40),
+})
+    .strict();
+/** `POST /api/room/v1/recording/stop` — espelha `IRecordingStopCommand`. */
+exports.zRecordingStopCommandSchema = zod_1.z
+    .object({
+    recording_request_id: zod_1.z.string().trim().min(8).max(128).optional(),
+})
+    .strict();
+/** `POST /api/room/v1/telemetry` — espelha `ITelemetryCommand`; nomes allowlisted no backend. */
+exports.zTelemetryCommandSchema = zod_1.z
+    .object({
+    events: zod_1.z
+        .array(zod_1.z
+        .object({
+        name: zod_1.z.string().trim().min(1).max(60),
+        at: zod_1.z.string().datetime({ offset: true }),
+        attrs: zod_1.z
+            .record(zod_1.z.string().min(1).max(40), zod_1.z.union([zod_1.z.string().max(200), zod_1.z.number(), zod_1.z.boolean()]))
+            .optional(),
+    })
+        .strict())
+        .min(1)
+        .max(50),
+})
+    .strict();