hotsheet 0.20.0-beta.5 → 0.20.0-beta.7

package/dist/channel.js

@@ -10476,10 +10476,46 @@ var GlobalConfigSchema = z2.object({
   // `Model` is the concrete local model name (e.g. `llama3.1`). Both global.
   announcerLocalEndpoint: z2.string().optional(),
   announcerLocalModel: z2.string().optional(),
+  // HS-8891 — optional fallback model used ONLY when the primary is Apple
+  // Foundation Models and it fails at inference (the HS-8883 "code 4" class). A
+  // non-apple id: a `claude-*` model (cloud backup, spends on the user's key) or
+  // the local pseudo-id. Empty string / unset = no fallback (Apple failure → no
+  // narration, the pre-HS-8891 behavior). The auto-selected-on-device fallback
+  // (HS-8805) is separate and unaffected.
+  announcerFallbackModel: z2.string().refine(
+    (v) => v === "" || v === LOCAL_MODEL_ID || v.startsWith("claude-"),
+    { message: "must be empty, the local provider id, or a claude-* model id" }
+  ).optional(),
   // HS-8781 — verbally announce permission checks (TTS only, no API cost).
   // Global; default ON, so `undefined`/unset is treated as enabled by the
   // client (`announcerSpeakPermissions !== false`).
-  announcerSpeakPermissions: z2.boolean().optional()
+  announcerSpeakPermissions: z2.boolean().optional(),
+  // HS-8874 — one-time marker that the per-project telemetry migration
+  // (`migratePerProjectTelemetry`) has run. Set after a successful, non-
+  // destructive copy of legacy launch-default telemetry rows into each row's
+  // owning project DB / the central store. Skipped on subsequent startups.
+  telemetryMigratedV1: z2.boolean().optional(),
+  // HS-8874 (migration efficiency) — per-source-DB resumability for the
+  // telemetry migration. Each source project dir is appended here once all its
+  // foreign rows have been copied, so a crash/quit mid-migration resumes at the
+  // first incomplete DB instead of restarting from zero (the boot-loop the
+  // end-only `telemetryMigratedV1` flag caused). Cleared when migration completes.
+  telemetryMigrationV1DoneDirs: z2.array(z2.string()).optional(),
+  // HS-8877 — retention window (days) for the centralized non-project telemetry
+  // store (`~/.hotsheet/telemetry`). Projects have a per-project
+  // `telemetry_retention_days`; central isn't a project, so its sweep window
+  // lives here. Unset → the §67.6 default (30 days). `0` keeps central forever.
+  centralTelemetryRetentionDays: z2.number().int().min(0).optional(),
+  // HS-8890 (§85.2.2) — retention window (days) for `otel_spans` in the central
+  // store. Spans (§68 enhanced tracing) are high-volume, so they age out faster
+  // than metrics/events: unset → the §85 default of 7 days (vs 30 for
+  // metrics/events via `centralTelemetryRetentionDays`); `0` keeps spans forever.
+  centralSpanRetentionDays: z2.number().int().min(0).optional(),
+  // HS-8884 — last time a `VACUUM FULL` reclaim ran per telemetry DB dir
+  // (`<dataDir>/db` or the central store), keyed by that dir's absolute path →
+  // ISO timestamp. Throttles the heavy, exclusive-lock full reclaim to at most
+  // once per `FULL_VACUUM_THROTTLE_DAYS`; routine plain VACUUMs aren't tracked.
+  telemetryVacuumFullAt: z2.record(z2.string(), z2.string()).optional()
 }).strict();
 var PluginActionSchema = z2.object({
   actionId: z2.string(),