voicey 0.0.0.dev0__tar.gz

voicey-0.0.0.dev0/.coveragerc-managed

@@ -0,0 +1,5 @@
+[run]
+branch = True
+
+[report]
+show_missing = True

voicey-0.0.0.dev0/.editorconfig

@@ -0,0 +1,15 @@
+root = true
+
+[*]
+charset = utf-8
+end_of_line = lf
+insert_final_newline = true
+indent_style = space
+indent_size = 2
+trim_trailing_whitespace = true
+
+[*.py]
+indent_size = 4
+
+[Makefile]
+indent_style = tab

voicey-0.0.0.dev0/.gitattributes

@@ -0,0 +1 @@
+src/voicey/_frontend/** linguist-generated=true -diff -whitespace

voicey-0.0.0.dev0/.github/actionlint.yaml

@@ -0,0 +1,3 @@
+self-hosted-runner:
+  labels:
+    - voicey-soak

voicey-0.0.0.dev0/.github/dependabot.yml

@@ -0,0 +1,13 @@
+version: 2
+updates:
+  - package-ecosystem: pip
+    directory: /
+    schedule:
+      interval: weekly
+    groups:
+      python:
+        patterns: ["*"]
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: weekly

voicey-0.0.0.dev0/.github/workflows/ci.yml

@@ -0,0 +1,393 @@
+name: CI
+
+on:
+  pull_request:
+  push:
+    branches: [main]
+
+permissions:
+  contents: read
+
+jobs:
+  playground:
+    name: Playground web
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: "22"
+          cache: npm
+          cache-dependency-path: playground-web/package-lock.json
+      - name: Install locked web dependencies
+        working-directory: playground-web
+        run: npm ci --ignore-scripts
+      - name: Typecheck playground
+        working-directory: playground-web
+        run: npm run typecheck
+      - name: Test playground
+        working-directory: playground-web
+        run: npm test
+      - name: Build playground
+        working-directory: playground-web
+        run: npm run build
+      - name: Audit playground dependencies
+        working-directory: playground-web
+        run: npm audit --audit-level=high
+
+  quality:
+    name: Python ${{ matrix.python }}
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        python: ["3.11", "3.12", "3.13", "3.14"]
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v6
+        with:
+          python-version: ${{ matrix.python }}
+      - name: Install uv
+        run: python -m pip install uv==0.11.7
+      - name: Sync locked environment
+        run: uv sync --frozen --extra pipecat --extra livekit --extra twilio --extra cloud
+      - name: Lint
+        run: uv run ruff check .
+      - name: Format
+        run: uv run ruff format --check .
+      - name: Typecheck
+        run: uv run pyright
+      - name: Unit tests
+        run: uv run pytest -m "not integration and not live and not slow"
+
+  public-contract:
+    name: Public API snapshots and docs
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - uses: actions/setup-python@v6
+        with:
+          python-version: "3.11"
+      - name: Install uv
+        run: python -m pip install uv==0.11.7
+      - name: Sync locked environment
+        run: uv sync --frozen --extra pipecat --extra livekit
+      - name: Reject uncommitted public API drift
+        run: |
+          uv run python scripts/update_public_snapshots.py --check
+          uv run python scripts/update_api_reference.py --check
+      - name: Require release notes and docs for public changes
+        if: github.event_name == 'pull_request'
+        run: |
+          uv run python scripts/check_public_surface_docs.py \
+            --base "origin/${{ github.base_ref }}"
+
+  integration-edges:
+    name: Integration Python ${{ matrix.python }}
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        python: ["3.11", "3.14"]
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v6
+        with:
+          python-version: ${{ matrix.python }}
+      - name: Install uv
+        run: python -m pip install uv==0.11.7
+      - name: Sync locked environment
+        run: uv sync --frozen --extra pipecat --extra livekit --extra twilio --extra cloud
+      - name: Mocked integration tests
+        run: uv run pytest -m integration --no-cov
+      - name: Unified native scenario compiler gate
+        run: |
+          uv run pytest --no-cov \
+            tests/unit/test_testing.py \
+            tests/unit/test_recipe_appointment.py
+
+  managed-storage:
+    name: Managed storage / Postgres 17
+    runs-on: ubuntu-latest
+    services:
+      postgres:
+        image: postgres:17-alpine
+        env:
+          POSTGRES_USER: voicey
+          POSTGRES_PASSWORD: voicey-test # pragma: allowlist secret
+          POSTGRES_DB: voicey
+        ports:
+          - 5432:5432
+        options: >-
+          --health-cmd "pg_isready -U voicey -d voicey"
+          --health-interval 5s
+          --health-timeout 5s
+          --health-retries 12
+    env:
+      VOICEY_TEST_POSTGRES_DSN: postgresql://voicey:voicey-test@127.0.0.1:5432/voicey # pragma: allowlist secret
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v6
+        with:
+          python-version: "3.11"
+      - name: Install uv
+        run: python -m pip install uv==0.11.7
+      - name: Sync locked managed-backend environment
+        run: uv sync --frozen --extra companion
+      - name: Managed backend and results-service strict coverage
+        run: |
+          uv run pytest -q -o addopts='' \
+            --strict-config --strict-markers \
+            --cov=voicey.deploy.managed \
+            --cov=voicey.deploy.results_service \
+            --cov=voicey.storage.postgres \
+            --cov=voicey.relay.postgres \
+            --cov=voicey.storage.s3 \
+            --cov-config=.coveragerc-managed \
+            --cov-branch \
+            --cov-report=term-missing \
+            --cov-fail-under=90 \
+            tests/unit/test_results_service_runtime.py \
+            tests/integration/test_managed_results_service.py \
+            tests/integration/test_postgres_repository.py \
+            tests/integration/test_repository_backends.py \
+            tests/unit/test_s3_artifacts.py
+
+  p1-gate:
+    name: P1 local phase gate
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v6
+        with:
+          python-version: "3.11"
+      - uses: actions/setup-node@v4
+        with:
+          node-version: "22"
+          cache: npm
+          cache-dependency-path: playground-web/package-lock.json
+      - name: Install uv
+        run: python -m pip install uv==0.11.7
+      - name: Sync locked gate environment
+        run: uv sync --frozen --extra pipecat --extra livekit --extra twilio
+      - name: Build release-shaped wheel
+        run: uv build --wheel --out-dir dist
+      - name: Run local P1 phase gate
+        run: |
+          uv run python tests/verification/run_p1_gate.py \
+            --wheel dist/voicey-0.0.0.dev0-py3-none-any.whl \
+            --report p1-gate-report.json
+      - name: Upload truthful phase report
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: p1-gate-report
+          path: p1-gate-report.json
+          if-no-files-found: error
+
+  p2-gate:
+    name: P2 local phase gate
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v6
+        with:
+          python-version: "3.11"
+      - uses: actions/setup-node@v4
+        with:
+          node-version: "22"
+          cache: npm
+          cache-dependency-path: playground-web/package-lock.json
+      - name: Install uv
+        run: python -m pip install uv==0.11.7
+      - name: Sync locked gate environment
+        run: uv sync --frozen --extra pipecat --extra livekit --extra twilio --extra telnyx
+      - name: Build release-shaped wheel
+        run: uv build --wheel --out-dir dist
+      - name: Run local P2 phase gate
+        run: |
+          uv run python tests/verification/run_p2_gate.py \
+            --wheel dist/voicey-0.0.0.dev0-py3-none-any.whl \
+            --report p2-gate-report.json
+      - name: Upload truthful phase reports
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: p2-gate-reports
+          path: |
+            p2-gate-report.json
+            p1-from-p2-report.json
+          if-no-files-found: error
+
+  p3-gate:
+    name: P3 local phase gate
+    runs-on: ubuntu-latest
+    services:
+      postgres:
+        image: postgres:17-alpine
+        env:
+          POSTGRES_USER: voicey
+          POSTGRES_PASSWORD: voicey-test # pragma: allowlist secret
+          POSTGRES_DB: voicey
+        ports:
+          - 5432:5432
+        options: >-
+          --health-cmd "pg_isready -U voicey -d voicey"
+          --health-interval 5s
+          --health-timeout 5s
+          --health-retries 12
+    env:
+      VOICEY_TEST_POSTGRES_DSN: postgresql://voicey:voicey-test@127.0.0.1:5432/voicey # pragma: allowlist secret
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v6
+        with:
+          python-version: "3.11"
+      - uses: actions/setup-node@v4
+        with:
+          node-version: "22"
+          cache: npm
+          cache-dependency-path: playground-web/package-lock.json
+      - name: Install uv
+        run: python -m pip install uv==0.11.7
+      - name: Sync complete locked P3 environment
+        run: |
+          uv sync --frozen \
+            --extra pipecat \
+            --extra livekit \
+            --extra twilio \
+            --extra telnyx \
+            --extra vobiz \
+            --extra plivo \
+            --extra tunnel \
+            --extra cloud \
+            --extra companion
+      - name: Build release-shaped wheel
+        run: uv build --wheel --out-dir dist
+      - name: Run local P3 phase gate
+        run: |
+          uv run python tests/verification/run_p3_gate.py \
+            --wheel dist/voicey-0.0.0.dev0-py3-none-any.whl \
+            --report p3-gate-report.json
+      - name: Upload truthful phase reports
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: p3-gate-reports
+          path: |
+            p3-gate-report.json
+            p2-from-p3-report.json
+          if-no-files-found: error
+
+  p4-hardening:
+    name: P4 hardening / observability / Railway
+    runs-on: ubuntu-latest
+    services:
+      postgres:
+        image: postgres:17-alpine
+        env:
+          POSTGRES_USER: voicey
+          POSTGRES_PASSWORD: voicey-test # pragma: allowlist secret
+          POSTGRES_DB: voicey
+        ports:
+          - 5432:5432
+        options: >-
+          --health-cmd "pg_isready -U voicey -d voicey"
+          --health-interval 5s
+          --health-timeout 5s
+          --health-retries 12
+    env:
+      VOICEY_TEST_POSTGRES_DSN: postgresql://voicey:voicey-test@127.0.0.1:5432/voicey # pragma: allowlist secret
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v6
+        with:
+          python-version: "3.11"
+      - uses: actions/setup-node@v4
+        with:
+          node-version: "22"
+      - name: Install uv
+        run: python -m pip install uv==0.11.7
+      - name: Sync complete hardening environment
+        run: |
+          uv sync --frozen \
+            --extra pipecat \
+            --extra livekit \
+            --extra twilio \
+            --extra cloud \
+            --extra companion
+      - name: Run chaos, drain, and bounded soak gates
+        run: |
+          uv run python tests/verification/run_p4_hardening_gate.py \
+            --short-soak-s 30 \
+            --max-concurrent 8 \
+            --report p4-hardening-report.json
+      - name: Run Prometheus and actual OTLP HTTP gate
+        run: |
+          uv run python tests/verification/run_p4_observability_gate.py \
+            --report p4-observability-report.json
+      - name: Run Railway CLI, artifact, and managed-storage gate
+        run: |
+          uv run python tests/verification/run_p4_railway_gate.py \
+            --report p4-railway-report.json
+      - name: Run safe upgrade and recipe-drift gate
+        run: |
+          uv run python tests/verification/run_p4_upgrade_gate.py \
+            --report p4-upgrade-report.json
+      - name: Build and validate the local canary artifact
+        run: |
+          uv build --wheel --out-dir dist
+          uv run python tests/verification/run_p4_release_gate.py \
+            --wheel dist/voicey-0.0.0.dev0-py3-none-any.whl \
+            --channel canary \
+            --report p4-release-report.json
+      - name: Run source-derived docs and fresh-wheel quickstarts
+        run: |
+          uv run python tests/verification/run_p4_docs_gate.py \
+            --wheel dist/voicey-0.0.0.dev0-py3-none-any.whl \
+            --report p4-docs-report.json
+      - name: Upload truthful hardening reports
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: p4-hardening-reports
+          path: |
+            p4-hardening-report.json
+            p4-short-soak-report.json
+            p4-observability-report.json
+            p4-railway-report.json
+            p4-upgrade-report.json
+            p4-release-report.json
+            p4-docs-report.json
+            p4-docs-quickstarts.json
+          if-no-files-found: error
+
+  webhook-interop:
+    name: Standard Webhooks interop
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: "22"
+      - uses: actions/setup-go@v6
+        with:
+          go-version: "1.25"
+      - name: Install official JavaScript verifier
+        run: npm install --prefix "$RUNNER_TEMP/webhook-node" --ignore-scripts standardwebhooks@1.0.0
+      - name: Verify JavaScript vector
+        run: node tests/interop/verify_node.mjs tests/interop/standard_webhooks_vector.json "$RUNNER_TEMP/webhook-node"
+      - name: Clone pinned official Go verifier
+        run: git clone https://github.com/standard-webhooks/standard-webhooks.git "$RUNNER_TEMP/standard-webhooks"
+      - name: Pin official Go verifier commit
+        run: git -C "$RUNNER_TEMP/standard-webhooks" checkout 01d6eb75702229a0927c07d52fda7223e201c03d
+      - name: Install voicey vector test
+        run: cp tests/interop/voicey_vector_test.go "$RUNNER_TEMP/standard-webhooks/libraries/go/"
+      - name: Verify Go vector
+        working-directory: ${{ runner.temp }}/standard-webhooks/libraries/go
+        env:
+          GO111MODULE: "off"
+          VOICEY_VECTOR_PATH: ${{ github.workspace }}/tests/interop/standard_webhooks_vector.json
+        run: go test webhook.go voicey_vector_test.go

voicey-0.0.0.dev0/.github/workflows/live-pstn.yml

@@ -0,0 +1,88 @@
+name: Paid PSTN loopback
+
+on:
+  workflow_dispatch:
+  schedule:
+    - cron: "41 4 * * *"
+
+permissions:
+  contents: read
+
+concurrency:
+  group: paid-pstn-loopback
+  cancel-in-progress: false
+
+jobs:
+  pipecat-twilio:
+    if: ${{ vars.VOICEY_LIVE_PSTN_ENABLED == 'true' }}
+    environment: paid-pstn
+    runs-on: ubuntu-latest
+    timeout-minutes: 20
+    env:
+      VOICEY_LIVE_PSTN_ACK: ${{ vars.VOICEY_LIVE_PSTN_ACK }}
+      VOICEY_LIVE_PSTN_MAX_CALLS: "4"
+      VOICEY_LIVE_TARGET_NUMBER: ${{ secrets.VOICEY_LIVE_TARGET_NUMBER }}
+      VOICEY_LIVE_TWILIO_FROM: ${{ secrets.VOICEY_LIVE_TWILIO_FROM }}
+      TWILIO_ACCOUNT_SID: ${{ secrets.TWILIO_ACCOUNT_SID }}
+      TWILIO_AUTH_TOKEN: ${{ secrets.TWILIO_AUTH_TOKEN }}
+      NGROK_AUTHTOKEN: ${{ secrets.NGROK_AUTHTOKEN }}
+      DEEPGRAM_API_KEY: ${{ secrets.DEEPGRAM_API_KEY }}
+      ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
+      CARTESIA_API_KEY: ${{ secrets.CARTESIA_API_KEY }}
+      OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v6
+        with:
+          python-version: "3.11"
+      - name: Install uv
+        run: python -m pip install uv==0.11.7
+      - name: Sync locked live-caller dependencies
+        run: uv sync --frozen --extra pipecat --extra twilio --extra tunnel
+      - name: Run acknowledged Pipecat → Twilio → PSTN loopback
+        working-directory: tests/fixtures/live-pstn-pipecat
+        run: ../../../.venv/bin/voicey test --live --report junit
+      - name: Upload secret-free carrier evidence
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: pipecat-twilio-pstn-junit
+          path: tests/fixtures/live-pstn-pipecat/.voicey/test-results.xml
+          if-no-files-found: warn
+
+  livekit-sip:
+    if: ${{ vars.VOICEY_LIVE_PSTN_ENABLED == 'true' }}
+    environment: paid-pstn
+    runs-on: ubuntu-latest
+    timeout-minutes: 20
+    env:
+      VOICEY_LIVE_PSTN_ACK: ${{ vars.VOICEY_LIVE_PSTN_ACK }}
+      VOICEY_LIVE_PSTN_MAX_CALLS: "4"
+      VOICEY_LIVE_TARGET_NUMBER: ${{ secrets.VOICEY_LIVE_TARGET_NUMBER }}
+      VOICEY_LIVEKIT_OUTBOUND_TRUNK_ID: ${{ secrets.VOICEY_LIVEKIT_OUTBOUND_TRUNK_ID }}
+      LIVEKIT_URL: ${{ secrets.LIVEKIT_URL }}
+      LIVEKIT_API_KEY: ${{ secrets.LIVEKIT_API_KEY }}
+      LIVEKIT_API_SECRET: ${{ secrets.LIVEKIT_API_SECRET }}
+      DEEPGRAM_API_KEY: ${{ secrets.DEEPGRAM_API_KEY }}
+      ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
+      CARTESIA_API_KEY: ${{ secrets.CARTESIA_API_KEY }}
+      OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v6
+        with:
+          python-version: "3.11"
+      - name: Install uv
+        run: python -m pip install uv==0.11.7
+      - name: Sync locked live-caller dependencies
+        run: uv sync --frozen --extra livekit
+      - name: Run acknowledged LiveKit SIP → PSTN loopback
+        working-directory: tests/fixtures/live-pstn-livekit
+        run: ../../../.venv/bin/voicey test --live --report junit
+      - name: Upload secret-free carrier evidence
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: livekit-sip-pstn-junit
+          path: tests/fixtures/live-pstn-livekit/.voicey/test-results.xml
+          if-no-files-found: warn

voicey-0.0.0.dev0/.github/workflows/p4-aggregate.yml

@@ -0,0 +1,75 @@
+name: P4 Aggregate
+
+on:
+  push:
+    branches: [main]
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  local-aggregate:
+    name: Complete credential-free P0-P4 regression
+    runs-on: ubuntu-latest
+    services:
+      postgres:
+        image: postgres:17-alpine
+        env:
+          POSTGRES_USER: voicey
+          POSTGRES_PASSWORD: voicey-test # pragma: allowlist secret
+          POSTGRES_DB: voicey
+        ports:
+          - 5432:5432
+        options: >-
+          --health-cmd "pg_isready -U voicey -d voicey"
+          --health-interval 5s
+          --health-timeout 5s
+          --health-retries 12
+    env:
+      VOICEY_TEST_POSTGRES_DSN: postgresql://voicey:voicey-test@127.0.0.1:5432/voicey # pragma: allowlist secret
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - uses: actions/setup-python@v6
+        with:
+          python-version: "3.11"
+      - uses: actions/setup-node@v4
+        with:
+          node-version: "22"
+      - name: Install uv
+        run: python -m pip install uv==0.11.7
+      - name: Sync complete locked environment
+        run: uv sync --frozen --all-extras
+      - name: Install pinned Trivy
+        uses: aquasecurity/setup-trivy@e07451d2e059ed86c2870430ea286b3a9e0bf241
+        with:
+          version: v0.72.0
+      - name: Build release-shaped wheel
+        run: uv build --wheel --out-dir dist
+      - name: Run truthful aggregate
+        run: |
+          uv run python tests/verification/run_p4_gate.py \
+            --wheel dist/voicey-0.0.0.dev0-py3-none-any.whl \
+            --short-soak-s 30 \
+            --max-concurrent 8 \
+            --report p4-gate-report.json
+      - name: Upload every child report
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: p4-aggregate-reports
+          path: |
+            p4-gate-report.json
+            p3-from-p4-report.json
+            p4-hardening-report.json
+            p4-short-soak-report.json
+            p4-observability-report.json
+            p4-railway-report.json
+            p4-upgrade-report.json
+            p4-release-report.json
+            p4-docs-report.json
+            p4-docs-quickstarts.json
+            p4-security-report.json
+          if-no-files-found: warn

voicey-0.0.0.dev0/.github/workflows/release.yml

@@ -0,0 +1,81 @@
+name: Prepare release artifacts
+
+on:
+  workflow_dispatch:
+    inputs:
+      channel:
+        description: "Artifact channel; stable requires a prior green canary run"
+        required: true
+        type: choice
+        options:
+          - canary
+          - stable
+      ref:
+        description: "Exact tag, branch, or commit to build"
+        required: true
+        type: string
+      canary_run_id:
+        description: "Required for stable: workflow run id containing canary evidence"
+        required: false
+        type: string
+
+permissions:
+  contents: read
+  actions: read
+
+jobs:
+  prepare:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          ref: ${{ inputs.ref }}
+          fetch-depth: 0
+      - uses: actions/setup-python@v6
+        with:
+          python-version: "3.11"
+      - name: Install uv
+        run: python -m pip install uv==0.11.7
+      - name: Sync locked release environment
+        run: uv sync --frozen --extra pipecat --extra livekit
+      - name: Build wheel and source distribution
+        run: uv build --out-dir dist
+      - name: Resolve the one wheel
+        id: artifact
+        run: |
+          wheel_count="$(find dist -maxdepth 1 -name '*.whl' -type f | wc -l | tr -d ' ')"
+          test "$wheel_count" = "1"
+          echo "wheel=$(find dist -maxdepth 1 -name '*.whl' -type f)" >> "$GITHUB_OUTPUT"
+      - name: Download prior canary evidence
+        if: inputs.channel == 'stable'
+        uses: actions/download-artifact@v4
+        with:
+          pattern: voicey-canary-*
+          path: canary-evidence
+          merge-multiple: true
+          run-id: ${{ inputs.canary_run_id }}
+          github-token: ${{ github.token }}
+      - name: Validate canary artifact
+        if: inputs.channel == 'canary'
+        run: |
+          uv run python tests/verification/run_p4_release_gate.py \
+            --wheel "${{ steps.artifact.outputs.wheel }}" \
+            --channel canary \
+            --report p4-release-report.json
+      - name: Validate stable promotion against canary evidence
+        if: inputs.channel == 'stable'
+        run: |
+          test -n "${{ inputs.canary_run_id }}"
+          uv run python tests/verification/run_p4_release_gate.py \
+            --wheel "${{ steps.artifact.outputs.wheel }}" \
+            --channel stable \
+            --canary-report canary-evidence/p4-release-report.json \
+            --report p4-release-report.json
+      - name: Upload verified artifacts without publishing
+        uses: actions/upload-artifact@v4
+        with:
+          name: voicey-${{ inputs.channel }}-${{ github.run_id }}
+          path: |
+            dist/*
+            p4-release-report.json
+          if-no-files-found: error