evo360-types 1.3.709 → 1.3.713

package/dist/apps/evo-csq/zod-schemas.js

@@ -1,7 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.zCsqAppointmentEventKindSchema = exports.zCsqTriageDecisionSchema = exports.zCsqTriageReasonSchema = exports.zCsqTriageModeSchema = exports.zCsqReviewSchema = exports.zCsqReviewCriterionDisagreementSchema = exports.zCsqReviewMissedAlertSchema = exports.zCsqDataQualitySchema = exports.zCsqCoverageSchema = exports.zCsqContributorSchema = exports.zCsqEvaluationSchema = exports.zCsqPillarScoreSchema = exports.zCsqPillarCoverageSchema = exports.zCsqCriterionScoreSchema = exports.zCsqCrossCheckSchema = exports.zCsqClaimTypeSchema = exports.zCsqClaimSchema = exports.zCsqClaimPriceInformedSchema = exports.zCsqClaimPatientStatusSchema = exports.zCsqClaimFirstConcreteOfferSchema = exports.zCsqClaimQuestionRequiresAnswerSchema = exports.zCsqClaimOutcomeSchema = exports.zCsqClaimRequiredDataSchema = exports.zCsqClaimDataCollectedSchema = exports.zCsqClaimPromiseSchema = exports.zCsqClaimAppointmentInformedSchema = exports.zCsqLeadStateSchema = exports.zCsqLeadStateListFieldSchema = exports.zCsqLeadStateFieldSchema = exports.zCsqIndicatorsSchema = exports.zCsqIndicatorsSetSchema = exports.zCsqAlertSchema = exports.zCsqEvidenceSchema = exports.zCsqAlertSubtypeSchema = exports.zCsqAlertCodeSchema = exports.zCsqPillarCodeSchema = exports.zCsqCriterionScoreValueSchema = exports.zCsqAuthorKindSchema = exports.zCsqReviewVerdictSchema = exports.zCsqLlmConnectionSourceSchema = exports.zCsqPhaseSchema = exports.zCsqRunStatusSchema = exports.zCsqVerificationStateSchema = exports.zCsqAlertResolvedReasonSchema = exports.zCsqAlertLifecycleSchema = exports.zCsqAlertScopeSchema = exports.zCsqAlertSourceSchema = exports.zCsqSeveritySchema = exports.zCsqStatusSchema = exports.zCsqModeSchema = void 0;
-exports.zCsqLeadReportSchema = exports.zCsqRunSchema = exports.zCsqAlertCountsSchema = exports.zCsqEligibilitySchema = exports.zCsqEvaluatedForSchema = exports.zCsqReportHeaderSchema = exports.zCsqReportAttendantSchema = exports.zCsqReportPatientSchema = exports.zCsqReportLeadSchema = exports.zCsqSystemFactsSchema = exports.zCsqBillingFactSchema = exports.zCsqPreviousTicketFactSchema = exports.zCsqOverlapFactSchema = exports.zCsqOverlapFamilyHintsSchema = exports.zCsqOverlapAppointmentFactSchema = exports.zCsqAppointmentFactSchema = exports.zCsqJudgeOutputSchema = exports.zCsqJudgeResolvedAlertSchema = exports.zCsqJudgeRevalidationSchema = exports.zCsqLlmUsageSchema = exports.zCsqTranscriptMessageSchema = exports.zCsqTicketSummarySchema = exports.zCsqTrailEntrySchema = exports.zCsqPromptBlockUsageSchema = exports.zCsqDetectorReportSchema = exports.zCsqDetectorLlmSchema = exports.zCsqDetectorModeSchema = exports.zCsqAppointmentEventSchema = void 0;
+exports.zCsqTriageDecisionSchema = exports.zCsqTriageReasonSchema = exports.zCsqTriageModeSchema = exports.zCsqReviewSchema = exports.zCsqReviewCriterionDisagreementSchema = exports.zCsqReviewMissedAlertSchema = exports.zCsqDataQualitySchema = exports.zCsqCoverageSchema = exports.zCsqContributorSchema = exports.zCsqEvaluationSchema = exports.zCsqPillarScoreSchema = exports.zCsqPillarCoverageSchema = exports.zCsqCriterionScoreSchema = exports.zCsqCrossCheckSchema = exports.zCsqClaimTypeSchema = exports.zCsqClaimSchema = exports.zCsqClaimPriceInformedSchema = exports.zCsqClaimPatientStatusSchema = exports.zCsqClaimFirstConcreteOfferSchema = exports.zCsqClaimQuestionRequiresAnswerSchema = exports.zCsqClaimOutcomeSchema = exports.zCsqClaimRequiredDataSchema = exports.zCsqClaimDataCollectedSchema = exports.zCsqClaimPromiseSchema = exports.zCsqClaimAppointmentInformedSchema = exports.zCsqLeadStateSchema = exports.zCsqLeadStateListFieldSchema = exports.zCsqLeadStateFieldSchema = exports.zCsqIndicatorsSchema = exports.zCsqIndicatorsSetSchema = exports.zCsqAlertSchema = exports.zCsqEvidenceSchema = exports.zCsqAlertSubtypeSchema = exports.zCsqAlertCodeSchema = exports.zCsqPillarCodeSchema = exports.zCsqCriterionScoreValueSchema = exports.zCsqAuthorKindSchema = exports.zCsqReviewSourceSchema = exports.zCsqReviewVerdictSchema = exports.zCsqLlmConnectionSourceSchema = exports.zCsqPhaseSchema = exports.zCsqRunStatusSchema = exports.zCsqVerificationStateSchema = exports.zCsqAlertResolvedReasonSchema = exports.zCsqAlertLifecycleSchema = exports.zCsqAlertScopeSchema = exports.zCsqAlertSourceSchema = exports.zCsqSeveritySchema = exports.zCsqStatusSchema = exports.zCsqModeSchema = void 0;
+exports.zCsqDryRunResultSchema = exports.zCsqDryRunRequestSchema = exports.zCsqLeadReportSchema = exports.zCsqRunSchema = exports.zCsqAlertCountsSchema = exports.zCsqEligibilitySchema = exports.zCsqEvaluatedForSchema = exports.zCsqReportHeaderSchema = exports.zCsqReportAttendantSchema = exports.zCsqReportPatientSchema = exports.zCsqReportLeadSchema = exports.zCsqSystemFactsSchema = exports.zCsqBillingFactSchema = exports.zCsqPreviousTicketFactSchema = exports.zCsqOverlapFactSchema = exports.zCsqOverlapFamilyHintsSchema = exports.zCsqOverlapAppointmentFactSchema = exports.zCsqAppointmentFactSchema = exports.zCsqJudgeOutputSchema = exports.zCsqJudgeResolvedAlertSchema = exports.zCsqJudgeRevalidationSchema = exports.zCsqLlmUsageSchema = exports.zCsqTranscriptMessageSchema = exports.zCsqTicketSummarySchema = exports.zCsqTrailEntrySchema = exports.zCsqPromptBlockUsageSchema = exports.zCsqDetectorReportSchema = exports.zCsqDetectorLlmSchema = exports.zCsqPlatformLlmConfigPatchSchema = exports.zCsqPlatformLlmConfigPatchFieldsSchema = exports.zCsqPlatformLlmConfigSchema = exports.zCsqTransportKillSwitchSchema = exports.zCsqDetectorModeSchema = exports.zCsqAppointmentEventSchema = exports.zCsqAppointmentEventKindSchema = void 0;
 const zod_1 = require("zod");
 const zod_schemas_1 = require("../shared/zod-schemas");
 // Schemas zod do CSQ 2.0 (feat-154). As interfaces TS equivalentes ficam em
@@ -54,6 +54,8 @@ exports.zCsqLlmConnectionSourceSchema = zod_1.z.enum([
     "kill_switch",
 ]);
 exports.zCsqReviewVerdictSchema = zod_1.z.enum(["agree", "disagree"]);
+/** feat-280: origem da revisao (espelho de `CSQ_REVIEW_SOURCES`). */
+exports.zCsqReviewSourceSchema = zod_1.z.enum(["nexus", "mcp"]);
 exports.zCsqAuthorKindSchema = zod_1.z.enum([
     "lead",
     "human",
@@ -381,6 +383,10 @@ exports.zCsqReviewSchema = zod_1.z.object({
         .optional(),
     reviewer_login_id: zod_1.z.string(),
     reviewed_at: zod_schemas_1.zFirestoreDateSchema,
+    /** feat-280: ausente = `nexus` (revisoes anteriores). */
+    source: exports.zCsqReviewSourceSchema.optional(),
+    /** feat-280: `client_id` OAuth quando `source = 'mcp'`. */
+    client_id: zod_1.z.string().optional(),
 });
 // ───────── Trilha e denormalizacao ─────────
 // ───────── Triagem sem LLM (feat-206 F1) ─────────
@@ -419,6 +425,34 @@ exports.zCsqAppointmentEventSchema = zod_1.z.object({
     supersedes: zod_1.z.string().optional(),
 });
 exports.zCsqDetectorModeSchema = zod_1.z.enum(["off", "shadow", "on"]);
+exports.zCsqTransportKillSwitchSchema = zod_1.z.enum([
+    "vertex",
+    "anthropic_direct",
+]);
+/** feat-280: `/platform/evo-csq.llm` como lido (todos opcionais/nulos). */
+exports.zCsqPlatformLlmConfigSchema = zod_1.z.object({
+    default_connection_id: zod_1.z.string().nullable().optional(),
+    extractor_connection_id: zod_1.z.string().nullable().optional(),
+    detector_mode: exports.zCsqDetectorModeSchema.nullable().optional(),
+    transport_kill_switch: exports.zCsqTransportKillSwitchSchema.nullable().optional(),
+    service_account: zod_1.z.string().nullable().optional(),
+});
+/**
+ * feat-280: patch da config de plataforma gravado pelo MCP do Nexus
+ * (`chat.csq_admin`). `null` = apagar o campo (volta ao default do pacote).
+ * `service_account` NAO entra (so leitura): `.strict()` recusa a chave.
+ */
+exports.zCsqPlatformLlmConfigPatchFieldsSchema = zod_1.z
+    .object({
+    default_connection_id: zod_1.z.string().min(1).nullable().optional(),
+    extractor_connection_id: zod_1.z.string().min(1).nullable().optional(),
+    detector_mode: exports.zCsqDetectorModeSchema.nullable().optional(),
+    transport_kill_switch: exports.zCsqTransportKillSwitchSchema.nullable().optional(),
+})
+    .strict();
+/** Patch completo: campos acima + "ao menos um campo". Para `inputSchema` de
+ *  tool MCP use `zCsqPlatformLlmConfigPatchFieldsSchema.shape`. */
+exports.zCsqPlatformLlmConfigPatchSchema = exports.zCsqPlatformLlmConfigPatchFieldsSchema.refine((v) => Object.keys(v).some((k) => v[k] !== undefined), { message: "Informe ao menos um campo da config de plataforma." });
 exports.zCsqDetectorLlmSchema = zod_1.z.object({
     provider: zod_1.z.string(),
     model: zod_1.z.string(),
@@ -714,3 +748,40 @@ exports.zCsqLeadReportSchema = zod_schemas_1.zFireDocSchema
     detector: exports.zCsqDetectorReportSchema.optional(),
 })
     .passthrough();
+// ───────── Reavaliacao sob demanda (feat-280 F4) ─────────
+/** Contrato nexus -> hubia (`hubia_csq_dry_run`). Ids sem `/` (viram caminho de doc). */
+const zCsqDryRunIdSchema = zod_1.z
+    .string()
+    .min(1)
+    .max(200)
+    .refine((v) => v.indexOf("/") < 0, { message: "id nao pode conter /" });
+exports.zCsqDryRunRequestSchema = zod_1.z
+    .object({
+    tenant: zCsqDryRunIdSchema,
+    ticket_id: zCsqDryRunIdSchema,
+    channel_id: zCsqDryRunIdSchema.nullable().optional(),
+    lead_id: zCsqDryRunIdSchema.nullable().optional(),
+    connection_id: zCsqDryRunIdSchema.nullable().optional(),
+    force_review: zod_1.z.boolean().optional(),
+    requested_by: zod_1.z
+        .object({ login_id: zod_1.z.string().min(1), client_id: zod_1.z.string().nullable().optional() })
+        .nullable()
+        .optional(),
+})
+    .strict();
+exports.zCsqDryRunResultSchema = zod_1.z.object({
+    outcome: zod_1.z.string(),
+    detail: zod_1.z.string().nullable(),
+    evaluation_id: zod_1.z.string().nullable(),
+    lead_id: zod_1.z.string().nullable(),
+    channel_id: zod_1.z.string(),
+    report: zod_1.z.record(zod_1.z.unknown()).nullable(),
+    detector: exports.zCsqDetectorReportSchema.passthrough().nullable(),
+    model: zod_1.z.string().nullable(),
+    llm_provider: zod_1.z.string().nullable(),
+    llm_connection_id: zod_1.z.string().nullable(),
+    llm_connection_source: exports.zCsqLlmConnectionSourceSchema.nullable(),
+    triage_mode: exports.zCsqTriageModeSchema.nullable(),
+    cost_usd_est: zod_1.z.number().nullable(),
+    duration_ms: zod_1.z.number(),
+});

package/dist/apps/evo-csq/zod-schemas.ts

@@ -66,6 +66,9 @@ export const zCsqLlmConnectionSourceSchema = z.enum([
 
 export const zCsqReviewVerdictSchema = z.enum(["agree", "disagree"]);
 
+/** feat-280: origem da revisao (espelho de `CSQ_REVIEW_SOURCES`). */
+export const zCsqReviewSourceSchema = z.enum(["nexus", "mcp"]);
+
 export const zCsqAuthorKindSchema = z.enum([
   "lead",
   "human",
@@ -434,6 +437,10 @@ export const zCsqReviewSchema = z.object({
     .optional(),
   reviewer_login_id: z.string(),
   reviewed_at: zFirestoreDateSchema,
+  /** feat-280: ausente = `nexus` (revisoes anteriores). */
+  source: zCsqReviewSourceSchema.optional(),
+  /** feat-280: `client_id` OAuth quando `source = 'mcp'`. */
+  client_id: z.string().optional(),
 });
 
 // ───────── Trilha e denormalizacao ─────────
@@ -482,6 +489,45 @@ export const zCsqAppointmentEventSchema = z.object({
 
 export const zCsqDetectorModeSchema = z.enum(["off", "shadow", "on"]);
 
+export const zCsqTransportKillSwitchSchema = z.enum([
+  "vertex",
+  "anthropic_direct",
+]);
+
+/** feat-280: `/platform/evo-csq.llm` como lido (todos opcionais/nulos). */
+export const zCsqPlatformLlmConfigSchema = z.object({
+  default_connection_id: z.string().nullable().optional(),
+  extractor_connection_id: z.string().nullable().optional(),
+  detector_mode: zCsqDetectorModeSchema.nullable().optional(),
+  transport_kill_switch: zCsqTransportKillSwitchSchema.nullable().optional(),
+  service_account: z.string().nullable().optional(),
+});
+
+/**
+ * feat-280: patch da config de plataforma gravado pelo MCP do Nexus
+ * (`chat.csq_admin`). `null` = apagar o campo (volta ao default do pacote).
+ * `service_account` NAO entra (so leitura): `.strict()` recusa a chave.
+ */
+export const zCsqPlatformLlmConfigPatchFieldsSchema = z
+  .object({
+    default_connection_id: z.string().min(1).nullable().optional(),
+    extractor_connection_id: z.string().min(1).nullable().optional(),
+    detector_mode: zCsqDetectorModeSchema.nullable().optional(),
+    transport_kill_switch: zCsqTransportKillSwitchSchema.nullable().optional(),
+  })
+  .strict();
+
+/** Patch completo: campos acima + "ao menos um campo". Para `inputSchema` de
+ *  tool MCP use `zCsqPlatformLlmConfigPatchFieldsSchema.shape`. */
+export const zCsqPlatformLlmConfigPatchSchema =
+  zCsqPlatformLlmConfigPatchFieldsSchema.refine(
+    (v) =>
+      Object.keys(v).some(
+        (k) => (v as Record<string, unknown>)[k] !== undefined,
+      ),
+    { message: "Informe ao menos um campo da config de plataforma." },
+  );
+
 export const zCsqDetectorLlmSchema = z.object({
   provider: z.string(),
   model: z.string(),
@@ -814,3 +860,44 @@ export const zCsqLeadReportSchema = zFireDocSchema
     detector: zCsqDetectorReportSchema.optional(),
   })
   .passthrough();
+
+// ───────── Reavaliacao sob demanda (feat-280 F4) ─────────
+
+/** Contrato nexus -> hubia (`hubia_csq_dry_run`). Ids sem `/` (viram caminho de doc). */
+const zCsqDryRunIdSchema = z
+  .string()
+  .min(1)
+  .max(200)
+  .refine((v) => v.indexOf("/") < 0, { message: "id nao pode conter /" });
+
+export const zCsqDryRunRequestSchema = z
+  .object({
+    tenant: zCsqDryRunIdSchema,
+    ticket_id: zCsqDryRunIdSchema,
+    channel_id: zCsqDryRunIdSchema.nullable().optional(),
+    lead_id: zCsqDryRunIdSchema.nullable().optional(),
+    connection_id: zCsqDryRunIdSchema.nullable().optional(),
+    force_review: z.boolean().optional(),
+    requested_by: z
+      .object({ login_id: z.string().min(1), client_id: z.string().nullable().optional() })
+      .nullable()
+      .optional(),
+  })
+  .strict();
+
+export const zCsqDryRunResultSchema = z.object({
+  outcome: z.string(),
+  detail: z.string().nullable(),
+  evaluation_id: z.string().nullable(),
+  lead_id: z.string().nullable(),
+  channel_id: z.string(),
+  report: z.record(z.unknown()).nullable(),
+  detector: zCsqDetectorReportSchema.passthrough().nullable(),
+  model: z.string().nullable(),
+  llm_provider: z.string().nullable(),
+  llm_connection_id: z.string().nullable(),
+  llm_connection_source: zCsqLlmConnectionSourceSchema.nullable(),
+  triage_mode: zCsqTriageModeSchema.nullable(),
+  cost_usd_est: z.number().nullable(),
+  duration_ms: z.number(),
+});

package/dist/apps/evo-notifications/zod-schemas.d.ts

@@ -1021,6 +1021,61 @@ export declare const zNotificationAttachmentSchema: z.ZodObject<{
     content_type: z.ZodString;
     content_base64: z.ZodString;
 }, z.ZodTypeAny, "passthrough">>;
+export declare const NOTIFICATION_EMAIL_ATTACHMENT_MAX_COUNT = 10;
+export declare const NOTIFICATION_EMAIL_ATTACHMENT_MAX_BYTES: number;
+/** Inline (base64) continua limitado a 1 por mensagem: ele vive no doc da task e da mensagem. */
+export declare const NOTIFICATION_ATTACHMENT_MAX_INLINE_COUNT = 1;
+export declare const zNotificationAttachmentRefSchema: z.ZodObject<{
+    filename: z.ZodString;
+    content_type: z.ZodString;
+    size_bytes: z.ZodOptional<z.ZodNumber>;
+    gcs_uri: z.ZodString;
+}, "strict", z.ZodTypeAny, {
+    filename: string;
+    gcs_uri: string;
+    content_type: string;
+    size_bytes?: number | undefined;
+}, {
+    filename: string;
+    gcs_uri: string;
+    content_type: string;
+    size_bytes?: number | undefined;
+}>;
+/** Item de `attachments[]` do envio: inline legado OU referência (`gcs_uri`). */
+export declare const zNotificationAttachmentInputSchema: z.ZodUnion<[z.ZodObject<{
+    filename: z.ZodString;
+    content_type: z.ZodString;
+    size_bytes: z.ZodOptional<z.ZodNumber>;
+    gcs_uri: z.ZodString;
+}, "strict", z.ZodTypeAny, {
+    filename: string;
+    gcs_uri: string;
+    content_type: string;
+    size_bytes?: number | undefined;
+}, {
+    filename: string;
+    gcs_uri: string;
+    content_type: string;
+    size_bytes?: number | undefined;
+}>, z.ZodObject<{
+    filename: z.ZodString;
+    content_type: z.ZodString;
+    content_base64: z.ZodString;
+} & {
+    gcs_uri: z.ZodOptional<z.ZodUndefined>;
+}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+    filename: z.ZodString;
+    content_type: z.ZodString;
+    content_base64: z.ZodString;
+} & {
+    gcs_uri: z.ZodOptional<z.ZodUndefined>;
+}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+    filename: z.ZodString;
+    content_type: z.ZodString;
+    content_base64: z.ZodString;
+} & {
+    gcs_uri: z.ZodOptional<z.ZodUndefined>;
+}, z.ZodTypeAny, "passthrough">>]>;
 export declare const zDirectSendPayloadSchema: z.ZodEffects<z.ZodObject<{
     tenant: z.ZodString;
     kind: z.ZodLiteral<"notification.send">;
@@ -1245,19 +1300,40 @@ export declare const zDirectSendPayloadSchema: z.ZodEffects<z.ZodObject<{
         expires_at: z.ZodOptional<z.ZodDate>;
         url_secret: z.ZodOptional<z.ZodString>;
     }, z.ZodTypeAny, "passthrough">>, "many">>;
-    attachments: z.ZodOptional<z.ZodArray<z.ZodObject<{
+    attachments: z.ZodOptional<z.ZodArray<z.ZodUnion<[z.ZodObject<{
+        filename: z.ZodString;
+        content_type: z.ZodString;
+        size_bytes: z.ZodOptional<z.ZodNumber>;
+        gcs_uri: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        filename: string;
+        gcs_uri: string;
+        content_type: string;
+        size_bytes?: number | undefined;
+    }, {
+        filename: string;
+        gcs_uri: string;
+        content_type: string;
+        size_bytes?: number | undefined;
+    }>, z.ZodObject<{
         filename: z.ZodString;
         content_type: z.ZodString;
         content_base64: z.ZodString;
+    } & {
+        gcs_uri: z.ZodOptional<z.ZodUndefined>;
     }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
         filename: z.ZodString;
         content_type: z.ZodString;
         content_base64: z.ZodString;
+    } & {
+        gcs_uri: z.ZodOptional<z.ZodUndefined>;
     }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
         filename: z.ZodString;
         content_type: z.ZodString;
         content_base64: z.ZodString;
-    }, z.ZodTypeAny, "passthrough">>, "many">>;
+    } & {
+        gcs_uri: z.ZodOptional<z.ZodUndefined>;
+    }, z.ZodTypeAny, "passthrough">>]>, "many">>;
 }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
     tenant: z.ZodString;
     kind: z.ZodLiteral<"notification.send">;
@@ -1482,19 +1558,40 @@ export declare const zDirectSendPayloadSchema: z.ZodEffects<z.ZodObject<{
         expires_at: z.ZodOptional<z.ZodDate>;
         url_secret: z.ZodOptional<z.ZodString>;
     }, z.ZodTypeAny, "passthrough">>, "many">>;
-    attachments: z.ZodOptional<z.ZodArray<z.ZodObject<{
+    attachments: z.ZodOptional<z.ZodArray<z.ZodUnion<[z.ZodObject<{
+        filename: z.ZodString;
+        content_type: z.ZodString;
+        size_bytes: z.ZodOptional<z.ZodNumber>;
+        gcs_uri: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        filename: string;
+        gcs_uri: string;
+        content_type: string;
+        size_bytes?: number | undefined;
+    }, {
+        filename: string;
+        gcs_uri: string;
+        content_type: string;
+        size_bytes?: number | undefined;
+    }>, z.ZodObject<{
         filename: z.ZodString;
         content_type: z.ZodString;
         content_base64: z.ZodString;
+    } & {
+        gcs_uri: z.ZodOptional<z.ZodUndefined>;
     }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
         filename: z.ZodString;
         content_type: z.ZodString;
         content_base64: z.ZodString;
+    } & {
+        gcs_uri: z.ZodOptional<z.ZodUndefined>;
     }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
         filename: z.ZodString;
         content_type: z.ZodString;
         content_base64: z.ZodString;
-    }, z.ZodTypeAny, "passthrough">>, "many">>;
+    } & {
+        gcs_uri: z.ZodOptional<z.ZodUndefined>;
+    }, z.ZodTypeAny, "passthrough">>]>, "many">>;
 }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
     tenant: z.ZodString;
     kind: z.ZodLiteral<"notification.send">;
@@ -1719,19 +1816,40 @@ export declare const zDirectSendPayloadSchema: z.ZodEffects<z.ZodObject<{
         expires_at: z.ZodOptional<z.ZodDate>;
         url_secret: z.ZodOptional<z.ZodString>;
     }, z.ZodTypeAny, "passthrough">>, "many">>;
-    attachments: z.ZodOptional<z.ZodArray<z.ZodObject<{
+    attachments: z.ZodOptional<z.ZodArray<z.ZodUnion<[z.ZodObject<{
+        filename: z.ZodString;
+        content_type: z.ZodString;
+        size_bytes: z.ZodOptional<z.ZodNumber>;
+        gcs_uri: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        filename: string;
+        gcs_uri: string;
+        content_type: string;
+        size_bytes?: number | undefined;
+    }, {
+        filename: string;
+        gcs_uri: string;
+        content_type: string;
+        size_bytes?: number | undefined;
+    }>, z.ZodObject<{
         filename: z.ZodString;
         content_type: z.ZodString;
         content_base64: z.ZodString;
+    } & {
+        gcs_uri: z.ZodOptional<z.ZodUndefined>;
     }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
         filename: z.ZodString;
         content_type: z.ZodString;
         content_base64: z.ZodString;
+    } & {
+        gcs_uri: z.ZodOptional<z.ZodUndefined>;
     }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
         filename: z.ZodString;
         content_type: z.ZodString;
         content_base64: z.ZodString;
-    }, z.ZodTypeAny, "passthrough">>, "many">>;
+    } & {
+        gcs_uri: z.ZodOptional<z.ZodUndefined>;
+    }, z.ZodTypeAny, "passthrough">>]>, "many">>;
 }, z.ZodTypeAny, "passthrough">>, z.objectOutputType<{
     tenant: z.ZodString;
     kind: z.ZodLiteral<"notification.send">;
@@ -1956,19 +2074,40 @@ export declare const zDirectSendPayloadSchema: z.ZodEffects<z.ZodObject<{
         expires_at: z.ZodOptional<z.ZodDate>;
         url_secret: z.ZodOptional<z.ZodString>;
     }, z.ZodTypeAny, "passthrough">>, "many">>;
-    attachments: z.ZodOptional<z.ZodArray<z.ZodObject<{
+    attachments: z.ZodOptional<z.ZodArray<z.ZodUnion<[z.ZodObject<{
+        filename: z.ZodString;
+        content_type: z.ZodString;
+        size_bytes: z.ZodOptional<z.ZodNumber>;
+        gcs_uri: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        filename: string;
+        gcs_uri: string;
+        content_type: string;
+        size_bytes?: number | undefined;
+    }, {
+        filename: string;
+        gcs_uri: string;
+        content_type: string;
+        size_bytes?: number | undefined;
+    }>, z.ZodObject<{
         filename: z.ZodString;
         content_type: z.ZodString;
         content_base64: z.ZodString;
+    } & {
+        gcs_uri: z.ZodOptional<z.ZodUndefined>;
     }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
         filename: z.ZodString;
         content_type: z.ZodString;
         content_base64: z.ZodString;
+    } & {
+        gcs_uri: z.ZodOptional<z.ZodUndefined>;
     }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
         filename: z.ZodString;
         content_type: z.ZodString;
         content_base64: z.ZodString;
-    }, z.ZodTypeAny, "passthrough">>, "many">>;
+    } & {
+        gcs_uri: z.ZodOptional<z.ZodUndefined>;
+    }, z.ZodTypeAny, "passthrough">>]>, "many">>;
 }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
     tenant: z.ZodString;
     kind: z.ZodLiteral<"notification.send">;
@@ -2193,19 +2332,40 @@ export declare const zDirectSendPayloadSchema: z.ZodEffects<z.ZodObject<{
         expires_at: z.ZodOptional<z.ZodDate>;
         url_secret: z.ZodOptional<z.ZodString>;
     }, z.ZodTypeAny, "passthrough">>, "many">>;
-    attachments: z.ZodOptional<z.ZodArray<z.ZodObject<{
+    attachments: z.ZodOptional<z.ZodArray<z.ZodUnion<[z.ZodObject<{
+        filename: z.ZodString;
+        content_type: z.ZodString;
+        size_bytes: z.ZodOptional<z.ZodNumber>;
+        gcs_uri: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        filename: string;
+        gcs_uri: string;
+        content_type: string;
+        size_bytes?: number | undefined;
+    }, {
+        filename: string;
+        gcs_uri: string;
+        content_type: string;
+        size_bytes?: number | undefined;
+    }>, z.ZodObject<{
         filename: z.ZodString;
         content_type: z.ZodString;
         content_base64: z.ZodString;
+    } & {
+        gcs_uri: z.ZodOptional<z.ZodUndefined>;
     }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
         filename: z.ZodString;
         content_type: z.ZodString;
         content_base64: z.ZodString;
+    } & {
+        gcs_uri: z.ZodOptional<z.ZodUndefined>;
     }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
         filename: z.ZodString;
         content_type: z.ZodString;
         content_base64: z.ZodString;
-    }, z.ZodTypeAny, "passthrough">>, "many">>;
+    } & {
+        gcs_uri: z.ZodOptional<z.ZodUndefined>;
+    }, z.ZodTypeAny, "passthrough">>]>, "many">>;
 }, z.ZodTypeAny, "passthrough">>;
 export declare const zNexusDirectSendPayloadSchema: z.ZodEffects<z.ZodObject<{
     kind: z.ZodLiteral<"notification.send">;

package/dist/apps/evo-notifications/zod-schemas.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.zNexusDirectSendPayloadSchema = exports.zDirectSendPayloadSchema = exports.zNotificationAttachmentSchema = exports.NOTIFICATION_ATTACHMENT_MAX_BASE64_BYTES = exports.zNotificationDirectSendSchema = exports.zNotificationLogSchema = exports.zNotificationAttemptSchema = exports.zNotificationMessageSchema = exports.zEmailSmtpConfigSchema = exports.EMAIL_ATTACHMENT_TOTAL_MAX_BYTES = exports.zNotificationEmailContentSchema = exports.zNotificationErrorSchema = exports.zNotificationProviderMetaSchema = exports.zNotificationTemplateRefSchema = exports.zNotificationChannelRefSchema = exports.zNotificationRecipientSchema = exports.zNotificationLogLevelSchema = exports.zNotificationRecipientKindSchema = exports.zNotificationAttemptStatusSchema = exports.zNotificationMessageStatusSchema = exports.zNotificationChannelTypeSchema = void 0;
+exports.zNexusDirectSendPayloadSchema = exports.zDirectSendPayloadSchema = exports.zNotificationAttachmentInputSchema = exports.zNotificationAttachmentRefSchema = exports.NOTIFICATION_ATTACHMENT_MAX_INLINE_COUNT = exports.NOTIFICATION_EMAIL_ATTACHMENT_MAX_BYTES = exports.NOTIFICATION_EMAIL_ATTACHMENT_MAX_COUNT = exports.zNotificationAttachmentSchema = exports.NOTIFICATION_ATTACHMENT_MAX_BASE64_BYTES = exports.zNotificationDirectSendSchema = exports.zNotificationLogSchema = exports.zNotificationAttemptSchema = exports.zNotificationMessageSchema = exports.zEmailSmtpConfigSchema = exports.EMAIL_ATTACHMENT_TOTAL_MAX_BYTES = exports.zNotificationEmailContentSchema = exports.zNotificationErrorSchema = exports.zNotificationProviderMetaSchema = exports.zNotificationTemplateRefSchema = exports.zNotificationChannelRefSchema = exports.zNotificationRecipientSchema = exports.zNotificationLogLevelSchema = exports.zNotificationRecipientKindSchema = exports.zNotificationAttemptStatusSchema = exports.zNotificationMessageStatusSchema = exports.zNotificationChannelTypeSchema = void 0;
 const zod_1 = require("zod");
 const zod_schemas_1 = require("../shared/zod-schemas");
 const zod_schemas_2 = require("../evo-task/zod-schemas");
@@ -186,6 +186,37 @@ exports.zNotificationAttachmentSchema = zod_1.z
     content_base64: zod_1.z.string().min(1).max(exports.NOTIFICATION_ATTACHMENT_MAX_BASE64_BYTES),
 })
     .passthrough();
+// ---- feat-254 B1: anexo de e-mail por referência (gcs_uri) ----
+//
+// O front sobe o arquivo pelo `POST /media/upload` do hub-waba (mesmo caminho
+// da mídia do WhatsApp) e manda só a referência. O backend baixa do bucket de
+// mídia do tenant (`gs://<bucket>/tenants/<tenant>/...`), valida tipo/extensão
+// contra a allowlist do e-mail e aplica os limites abaixo. O formato é
+// discriminado pela presença de `gcs_uri`; o inline legado continua valendo.
+exports.NOTIFICATION_EMAIL_ATTACHMENT_MAX_COUNT = 10;
+exports.NOTIFICATION_EMAIL_ATTACHMENT_MAX_BYTES = 10 * 1024 * 1024;
+/** Inline (base64) continua limitado a 1 por mensagem: ele vive no doc da task e da mensagem. */
+exports.NOTIFICATION_ATTACHMENT_MAX_INLINE_COUNT = 1;
+exports.zNotificationAttachmentRefSchema = zod_1.z
+    .object({
+    filename: zod_1.z.string().min(1).max(200),
+    content_type: zod_1.z.string().min(1).max(200),
+    size_bytes: zod_1.z.number().int().positive().max(exports.NOTIFICATION_EMAIL_ATTACHMENT_MAX_BYTES).optional(),
+    gcs_uri: zod_1.z
+        .string()
+        .max(1024)
+        .regex(/^gs:\/\/[^/]+\/.+$/u, "gcs_uri deve ter o formato gs://<bucket>/<caminho>"),
+})
+    .strict();
+/** Inline legado sem `gcs_uri`: um item com os dois formatos ao mesmo tempo é ambíguo. */
+const zNotificationAttachmentInlineOnlySchema = exports.zNotificationAttachmentSchema.extend({
+    gcs_uri: zod_1.z.undefined().optional(),
+});
+/** Item de `attachments[]` do envio: inline legado OU referência (`gcs_uri`). */
+exports.zNotificationAttachmentInputSchema = zod_1.z.union([
+    exports.zNotificationAttachmentRefSchema,
+    zNotificationAttachmentInlineOnlySchema,
+]);
 // ---- HTTP direct send (INotificationSendPayload + tenant + externalLinks) ----
 exports.zDirectSendPayloadSchema = zod_1.z
     .object({
@@ -216,11 +247,33 @@ exports.zDirectSendPayloadSchema = zod_1.z
     force_send: zod_1.z.boolean().optional(),
     externalLinks: zod_1.z.array(zod_schemas_2.zExternalLinkSchema).optional(),
     quick_reply_actions: zod_1.z.array(zod_schemas_3.zQuickReplyActionIntentSchema).optional(),
-    // feat-160 R6 / F31 — só o canal de e-mail honra; 1 anexo por mensagem.
-    attachments: zod_1.z.array(exports.zNotificationAttachmentSchema).max(1).optional(),
+    // feat-160 R6 / F31 — só o canal de e-mail honra.
+    // feat-254 B1 — até 10 itens no e-mail (por referência `gcs_uri`); inline
+    // continua no máximo 1 e os demais canais continuam com 1 (ignorado).
+    // Tamanho real e total do canal são validados no backend ao baixar.
+    attachments: zod_1.z
+        .array(exports.zNotificationAttachmentInputSchema)
+        .max(exports.NOTIFICATION_EMAIL_ATTACHMENT_MAX_COUNT)
+        .optional(),
 })
     .passthrough()
     .superRefine((data, ctx) => {
+    const attachments = data.attachments ?? [];
+    if (data.channel.type !== "email" && attachments.length > 1) {
+        ctx.addIssue({
+            code: zod_1.z.ZodIssueCode.custom,
+            message: "Só o canal de e-mail aceita mais de um anexo.",
+            path: ["attachments"],
+        });
+    }
+    const inlineCount = attachments.filter((a) => !a.gcs_uri).length;
+    if (inlineCount > exports.NOTIFICATION_ATTACHMENT_MAX_INLINE_COUNT) {
+        ctx.addIssue({
+            code: zod_1.z.ZodIssueCode.custom,
+            message: `No máximo ${exports.NOTIFICATION_ATTACHMENT_MAX_INLINE_COUNT} anexo inline (base64); envie os demais por referência (gcs_uri).`,
+            path: ["attachments"],
+        });
+    }
     if (data.channel.type !== "whatsapp")
         return;
     const hasTemplate = Boolean(data.template?.template_id?.trim());

package/dist/apps/evo-notifications/zod-schemas.ts

@@ -207,6 +207,41 @@ export const zNotificationAttachmentSchema = z
   })
   .passthrough();
 
+// ---- feat-254 B1: anexo de e-mail por referência (gcs_uri) ----
+//
+// O front sobe o arquivo pelo `POST /media/upload` do hub-waba (mesmo caminho
+// da mídia do WhatsApp) e manda só a referência. O backend baixa do bucket de
+// mídia do tenant (`gs://<bucket>/tenants/<tenant>/...`), valida tipo/extensão
+// contra a allowlist do e-mail e aplica os limites abaixo. O formato é
+// discriminado pela presença de `gcs_uri`; o inline legado continua valendo.
+export const NOTIFICATION_EMAIL_ATTACHMENT_MAX_COUNT = 10;
+export const NOTIFICATION_EMAIL_ATTACHMENT_MAX_BYTES = 10 * 1024 * 1024;
+/** Inline (base64) continua limitado a 1 por mensagem: ele vive no doc da task e da mensagem. */
+export const NOTIFICATION_ATTACHMENT_MAX_INLINE_COUNT = 1;
+
+export const zNotificationAttachmentRefSchema = z
+  .object({
+    filename: z.string().min(1).max(200),
+    content_type: z.string().min(1).max(200),
+    size_bytes: z.number().int().positive().max(NOTIFICATION_EMAIL_ATTACHMENT_MAX_BYTES).optional(),
+    gcs_uri: z
+      .string()
+      .max(1024)
+      .regex(/^gs:\/\/[^/]+\/.+$/u, "gcs_uri deve ter o formato gs://<bucket>/<caminho>"),
+  })
+  .strict();
+
+/** Inline legado sem `gcs_uri`: um item com os dois formatos ao mesmo tempo é ambíguo. */
+const zNotificationAttachmentInlineOnlySchema = zNotificationAttachmentSchema.extend({
+  gcs_uri: z.undefined().optional(),
+});
+
+/** Item de `attachments[]` do envio: inline legado OU referência (`gcs_uri`). */
+export const zNotificationAttachmentInputSchema = z.union([
+  zNotificationAttachmentRefSchema,
+  zNotificationAttachmentInlineOnlySchema,
+]);
+
 // ---- HTTP direct send (INotificationSendPayload + tenant + externalLinks) ----
 
 export const zDirectSendPayloadSchema = z
@@ -238,11 +273,33 @@ export const zDirectSendPayloadSchema = z
     force_send: z.boolean().optional(),
     externalLinks: z.array(zExternalLinkSchema).optional(),
     quick_reply_actions: z.array(zQuickReplyActionIntentSchema).optional(),
-    // feat-160 R6 / F31 — só o canal de e-mail honra; 1 anexo por mensagem.
-    attachments: z.array(zNotificationAttachmentSchema).max(1).optional(),
+    // feat-160 R6 / F31 — só o canal de e-mail honra.
+    // feat-254 B1 — até 10 itens no e-mail (por referência `gcs_uri`); inline
+    // continua no máximo 1 e os demais canais continuam com 1 (ignorado).
+    // Tamanho real e total do canal são validados no backend ao baixar.
+    attachments: z
+      .array(zNotificationAttachmentInputSchema)
+      .max(NOTIFICATION_EMAIL_ATTACHMENT_MAX_COUNT)
+      .optional(),
   })
   .passthrough()
   .superRefine((data, ctx) => {
+    const attachments = data.attachments ?? [];
+    if (data.channel.type !== "email" && attachments.length > 1) {
+      ctx.addIssue({
+        code: z.ZodIssueCode.custom,
+        message: "Só o canal de e-mail aceita mais de um anexo.",
+        path: ["attachments"],
+      });
+    }
+    const inlineCount = attachments.filter((a) => !a.gcs_uri).length;
+    if (inlineCount > NOTIFICATION_ATTACHMENT_MAX_INLINE_COUNT) {
+      ctx.addIssue({
+        code: z.ZodIssueCode.custom,
+        message: `No máximo ${NOTIFICATION_ATTACHMENT_MAX_INLINE_COUNT} anexo inline (base64); envie os demais por referência (gcs_uri).`,
+        path: ["attachments"],
+      });
+    }
     if (data.channel.type !== "whatsapp") return;
     const hasTemplate = Boolean(data.template?.template_id?.trim());
     /** Texto de sessão sem HSM: campo dedicado ou `variables.text` (string) quando não há template. */

package/dist/index.d.ts

@@ -39,6 +39,7 @@ export * from "./types/evo-telemedicine";
 export * from "./types/evo-modules";
 export * from "./apps/shared/zod-schemas";
 export * from "./apps/evo-core/zod-schemas";
+export * from "./apps/evo-core/nexus-claims";
 export * from "./apps/evo-tenant/zod-schemas";
 export * from "./apps/evo-activity/zod-schemas";
 export * from "./apps/evo-people/zod-schemas";