@greatwait/contracts 0.1.0-alpha.1

package/generated/v1/callback-delivery-signature.json

@@ -0,0 +1,467 @@
+{
+  "envelope": {
+    "propertyOrder": [
+      "version",
+      "type",
+      "scheduleId",
+      "occurrenceId",
+      "plannedFor",
+      "attempt",
+      "completion",
+      "trigger",
+      "data"
+    ],
+    "completionPropertyOrder": ["token", "url", "deadline"],
+    "propertyOrder_2026_08_08": [
+      "version",
+      "type",
+      "scheduleId",
+      "occurrenceId",
+      "plannedFor",
+      "attempt",
+      "completion",
+      "trigger",
+      "data"
+    ],
+    "propertyOrder_2026_07_01": [
+      "version",
+      "type",
+      "scheduleId",
+      "occurrenceId",
+      "plannedFor",
+      "attempt",
+      "data"
+    ],
+    "serialization": "compact UTF-8 JSON with the stated top-level property order",
+    "trigger": {
+      "automatic": "A first attempt or a retry the system chose. Nobody asked for it, it may repeat work already done, and a receiver must run the occurrence at most once.",
+      "default": "An envelope with no trigger field is automatic. Only 2026-07-01 can omit it.",
+      "propertyOrder": ["kind", "sourceAttemptId"],
+      "ordinal": "attempt. It only ever increases within an occurrence and every copy of one redelivery carries the same value, so a receiver recognises a repeat by keeping the highest it has run to completion rather than by keeping them all.",
+      "redelivery": "A person ordered this delivery under the occurrences:redeliver scope. sourceAttemptId names the retained attempt they chose to follow and is there to show them, not to decide whether the work runs — attempt is what decides that. It is a request for the work to happen again, and a receiver that suppresses it as a duplicate answers a deliberate instruction with silence.",
+      "requirement": "run the handler again for a redelivery whose attempt is above the highest this receiver has run to completion for the occurrence, keep suppressing every automatic delivery of a completed occurrence, and suppress every redelivery at or below that high-water mark"
+    },
+    "version": "2026-08-23",
+    "versions": ["2026-07-01", "2026-08-08", "2026-08-23"]
+  },
+  "headers": {
+    "contentType": "application/json",
+    "required": [
+      "Content-Type",
+      "Callback-Delivery-Id",
+      "Callback-Occurrence-Id",
+      "Callback-Timestamp",
+      "Callback-Key-Id",
+      "Callback-Signature"
+    ]
+  },
+  "replay": {
+    "identity": "Callback-Delivery-Id",
+    "requirement": "atomically reject a previously accepted delivery id before parsing"
+  },
+  "signature": {
+    "algorithm": "HMAC-SHA-256",
+    "format": "v1=<64 lowercase hexadecimal characters>",
+    "input": "ASCII <Callback-Timestamp>.<Callback-Delivery-Id>. followed by the exact raw request body bytes",
+    "scheme": "v1",
+    "timestampToleranceSeconds": 300
+  },
+  "legacyTestVector": {
+    "envelope": {
+      "attempt": 1,
+      "data": {},
+      "occurrenceId": "occ_0123456789abcdefghjkmnpqrs",
+      "plannedFor": "2026-07-28T15:00:00.000Z",
+      "scheduleId": "sch_0123456789abcdefghjkmnpqrs",
+      "type": "schedule.occurrence",
+      "version": "2026-07-01"
+    },
+    "exactBodyBase64": "eyJ2ZXJzaW9uIjoiMjAyNi0wNy0wMSIsInR5cGUiOiJzY2hlZHVsZS5vY2N1cnJlbmNlIiwic2NoZWR1bGVJZCI6InNjaF8wMTIzNDU2Nzg5YWJjZGVmZ2hqa21ucHFycyIsIm9jY3VycmVuY2VJZCI6Im9jY18wMTIzNDU2Nzg5YWJjZGVmZ2hqa21ucHFycyIsInBsYW5uZWRGb3IiOiIyMDI2LTA3LTI4VDE1OjAwOjAwLjAwMFoiLCJhdHRlbXB0IjoxLCJkYXRhIjp7fX0=",
+    "exactBodyUtf8": "{\"version\":\"2026-07-01\",\"type\":\"schedule.occurrence\",\"scheduleId\":\"sch_0123456789abcdefghjkmnpqrs\",\"occurrenceId\":\"occ_0123456789abcdefghjkmnpqrs\",\"plannedFor\":\"2026-07-28T15:00:00.000Z\",\"attempt\":1,\"data\":{}}",
+    "headers": {
+      "Callback-Delivery-Id": "dlv_0123456789abcdefghjkmnpqrs",
+      "Callback-Key-Id": "csk_0123456789abcdefghjkmnpqrs",
+      "Callback-Occurrence-Id": "occ_0123456789abcdefghjkmnpqrs",
+      "Callback-Signature": "v1=11135fdfc0bc5d49ebcc9d3a0d8df1116179097cefe961c6eca281339e5cfab3",
+      "Callback-Timestamp": "2026-07-28T15:00:00.000Z",
+      "Content-Type": "application/json"
+    },
+    "secret": "greatwait-signature-vector-key-not-a-credential",
+    "signingInputBase64": "MjAyNi0wNy0yOFQxNTowMDowMC4wMDBaLmRsdl8wMTIzNDU2Nzg5YWJjZGVmZ2hqa21ucHFycy57InZlcnNpb24iOiIyMDI2LTA3LTAxIiwidHlwZSI6InNjaGVkdWxlLm9jY3VycmVuY2UiLCJzY2hlZHVsZUlkIjoic2NoXzAxMjM0NTY3ODlhYmNkZWZnaGprbW5wcXJzIiwib2NjdXJyZW5jZUlkIjoib2NjXzAxMjM0NTY3ODlhYmNkZWZnaGprbW5wcXJzIiwicGxhbm5lZEZvciI6IjIwMjYtMDctMjhUMTU6MDA6MDAuMDAwWiIsImF0dGVtcHQiOjEsImRhdGEiOnt9fQ==",
+    "signingInputUtf8": "2026-07-28T15:00:00.000Z.dlv_0123456789abcdefghjkmnpqrs.{\"version\":\"2026-07-01\",\"type\":\"schedule.occurrence\",\"scheduleId\":\"sch_0123456789abcdefghjkmnpqrs\",\"occurrenceId\":\"occ_0123456789abcdefghjkmnpqrs\",\"plannedFor\":\"2026-07-28T15:00:00.000Z\",\"attempt\":1,\"data\":{}}"
+  },
+  "triggerTestVector": {
+    "envelope": {
+      "attempt": 1,
+      "data": {},
+      "occurrenceId": "occ_0123456789abcdefghjkmnpqrs",
+      "plannedFor": "2026-07-28T15:00:00.000Z",
+      "scheduleId": "sch_0123456789abcdefghjkmnpqrs",
+      "trigger": {
+        "kind": "automatic"
+      },
+      "type": "schedule.occurrence",
+      "version": "2026-08-08"
+    },
+    "exactBodyBase64": "eyJ2ZXJzaW9uIjoiMjAyNi0wOC0wOCIsInR5cGUiOiJzY2hlZHVsZS5vY2N1cnJlbmNlIiwic2NoZWR1bGVJZCI6InNjaF8wMTIzNDU2Nzg5YWJjZGVmZ2hqa21ucHFycyIsIm9jY3VycmVuY2VJZCI6Im9jY18wMTIzNDU2Nzg5YWJjZGVmZ2hqa21ucHFycyIsInBsYW5uZWRGb3IiOiIyMDI2LTA3LTI4VDE1OjAwOjAwLjAwMFoiLCJhdHRlbXB0IjoxLCJ0cmlnZ2VyIjp7ImtpbmQiOiJhdXRvbWF0aWMifSwiZGF0YSI6e319",
+    "exactBodyUtf8": "{\"version\":\"2026-08-08\",\"type\":\"schedule.occurrence\",\"scheduleId\":\"sch_0123456789abcdefghjkmnpqrs\",\"occurrenceId\":\"occ_0123456789abcdefghjkmnpqrs\",\"plannedFor\":\"2026-07-28T15:00:00.000Z\",\"attempt\":1,\"trigger\":{\"kind\":\"automatic\"},\"data\":{}}",
+    "headers": {
+      "Callback-Delivery-Id": "dlv_0123456789abcdefghjkmnpqrs",
+      "Callback-Key-Id": "csk_0123456789abcdefghjkmnpqrs",
+      "Callback-Occurrence-Id": "occ_0123456789abcdefghjkmnpqrs",
+      "Callback-Signature": "v1=bd96c6d68a5c0521c18600d92913ce4dcf32036f2c930d0f9db9de55da9280e7",
+      "Callback-Timestamp": "2026-07-28T15:00:00.000Z",
+      "Content-Type": "application/json"
+    },
+    "secret": "greatwait-signature-vector-key-not-a-credential",
+    "signingInputBase64": "MjAyNi0wNy0yOFQxNTowMDowMC4wMDBaLmRsdl8wMTIzNDU2Nzg5YWJjZGVmZ2hqa21ucHFycy57InZlcnNpb24iOiIyMDI2LTA4LTA4IiwidHlwZSI6InNjaGVkdWxlLm9jY3VycmVuY2UiLCJzY2hlZHVsZUlkIjoic2NoXzAxMjM0NTY3ODlhYmNkZWZnaGprbW5wcXJzIiwib2NjdXJyZW5jZUlkIjoib2NjXzAxMjM0NTY3ODlhYmNkZWZnaGprbW5wcXJzIiwicGxhbm5lZEZvciI6IjIwMjYtMDctMjhUMTU6MDA6MDAuMDAwWiIsImF0dGVtcHQiOjEsInRyaWdnZXIiOnsia2luZCI6ImF1dG9tYXRpYyJ9LCJkYXRhIjp7fX0=",
+    "signingInputUtf8": "2026-07-28T15:00:00.000Z.dlv_0123456789abcdefghjkmnpqrs.{\"version\":\"2026-08-08\",\"type\":\"schedule.occurrence\",\"scheduleId\":\"sch_0123456789abcdefghjkmnpqrs\",\"occurrenceId\":\"occ_0123456789abcdefghjkmnpqrs\",\"plannedFor\":\"2026-07-28T15:00:00.000Z\",\"attempt\":1,\"trigger\":{\"kind\":\"automatic\"},\"data\":{}}"
+  },
+  "completionTestVector": {
+    "envelope": {
+      "attempt": 1,
+      "completion": {
+        "token": "v1.example-claim-not-a-real-token.example-mac",
+        "url": "https://greatwait-scheduler.example/callbacks/completion"
+      },
+      "data": {},
+      "occurrenceId": "occ_0123456789abcdefghjkmnpqrs",
+      "plannedFor": "2026-07-28T15:00:00.000Z",
+      "scheduleId": "sch_0123456789abcdefghjkmnpqrs",
+      "trigger": {
+        "kind": "automatic"
+      },
+      "type": "schedule.occurrence",
+      "version": "2026-08-08"
+    },
+    "exactBodyBase64": "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",
+    "exactBodyUtf8": "{\"version\":\"2026-08-08\",\"type\":\"schedule.occurrence\",\"scheduleId\":\"sch_0123456789abcdefghjkmnpqrs\",\"occurrenceId\":\"occ_0123456789abcdefghjkmnpqrs\",\"plannedFor\":\"2026-07-28T15:00:00.000Z\",\"attempt\":1,\"completion\":{\"token\":\"v1.example-claim-not-a-real-token.example-mac\",\"url\":\"https://greatwait-scheduler.example/callbacks/completion\"},\"trigger\":{\"kind\":\"automatic\"},\"data\":{}}",
+    "headers": {
+      "Callback-Delivery-Id": "dlv_0123456789abcdefghjkmnpqrs",
+      "Callback-Key-Id": "csk_0123456789abcdefghjkmnpqrs",
+      "Callback-Occurrence-Id": "occ_0123456789abcdefghjkmnpqrs",
+      "Callback-Signature": "v1=38c6d854051087ed408a5f6252d90375859f305aeb0bca1c3f3a5bb63135e138",
+      "Callback-Timestamp": "2026-07-28T15:00:00.000Z",
+      "Content-Type": "application/json"
+    },
+    "secret": "greatwait-signature-vector-key-not-a-credential",
+    "signingInputBase64": "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",
+    "signingInputUtf8": "2026-07-28T15:00:00.000Z.dlv_0123456789abcdefghjkmnpqrs.{\"version\":\"2026-08-08\",\"type\":\"schedule.occurrence\",\"scheduleId\":\"sch_0123456789abcdefghjkmnpqrs\",\"occurrenceId\":\"occ_0123456789abcdefghjkmnpqrs\",\"plannedFor\":\"2026-07-28T15:00:00.000Z\",\"attempt\":1,\"completion\":{\"token\":\"v1.example-claim-not-a-real-token.example-mac\",\"url\":\"https://greatwait-scheduler.example/callbacks/completion\"},\"trigger\":{\"kind\":\"automatic\"},\"data\":{}}"
+  },
+  "redeliveryTestVector": {
+    "envelope": {
+      "attempt": 2,
+      "completion": {
+        "deadline": "2026-07-28T15:00:05.000Z",
+        "token": "v2.example-claim-not-a-real-token.example-mac",
+        "url": "https://greatwait-scheduler.example/callbacks/completion"
+      },
+      "data": {},
+      "occurrenceId": "occ_0123456789abcdefghjkmnpqrs",
+      "plannedFor": "2026-07-28T15:00:00.000Z",
+      "scheduleId": "sch_0123456789abcdefghjkmnpqrs",
+      "trigger": {
+        "kind": "redelivery",
+        "sourceAttemptId": "att_0123456789abcdefghjkmnpqrs"
+      },
+      "type": "schedule.occurrence",
+      "version": "2026-08-23"
+    },
+    "exactBodyBase64": "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",
+    "exactBodyUtf8": "{\"version\":\"2026-08-23\",\"type\":\"schedule.occurrence\",\"scheduleId\":\"sch_0123456789abcdefghjkmnpqrs\",\"occurrenceId\":\"occ_0123456789abcdefghjkmnpqrs\",\"plannedFor\":\"2026-07-28T15:00:00.000Z\",\"attempt\":2,\"completion\":{\"token\":\"v2.example-claim-not-a-real-token.example-mac\",\"url\":\"https://greatwait-scheduler.example/callbacks/completion\",\"deadline\":\"2026-07-28T15:00:05.000Z\"},\"trigger\":{\"kind\":\"redelivery\",\"sourceAttemptId\":\"att_0123456789abcdefghjkmnpqrs\"},\"data\":{}}",
+    "headers": {
+      "Callback-Delivery-Id": "dlv_0123456789abcdefghjkmnpqrs",
+      "Callback-Key-Id": "csk_0123456789abcdefghjkmnpqrs",
+      "Callback-Occurrence-Id": "occ_0123456789abcdefghjkmnpqrs",
+      "Callback-Signature": "v1=9d698aed6d05dcd964f00d6e6796aab238f4f50e6f5cfeb61751fd7850778a04",
+      "Callback-Timestamp": "2026-07-28T15:00:00.000Z",
+      "Content-Type": "application/json"
+    },
+    "secret": "greatwait-signature-vector-key-not-a-credential",
+    "signingInputBase64": "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",
+    "signingInputUtf8": "2026-07-28T15:00:00.000Z.dlv_0123456789abcdefghjkmnpqrs.{\"version\":\"2026-08-23\",\"type\":\"schedule.occurrence\",\"scheduleId\":\"sch_0123456789abcdefghjkmnpqrs\",\"occurrenceId\":\"occ_0123456789abcdefghjkmnpqrs\",\"plannedFor\":\"2026-07-28T15:00:00.000Z\",\"attempt\":2,\"completion\":{\"token\":\"v2.example-claim-not-a-real-token.example-mac\",\"url\":\"https://greatwait-scheduler.example/callbacks/completion\",\"deadline\":\"2026-07-28T15:00:05.000Z\"},\"trigger\":{\"kind\":\"redelivery\",\"sourceAttemptId\":\"att_0123456789abcdefghjkmnpqrs\"},\"data\":{}}"
+  },
+  "testVector": {
+    "envelope": {
+      "attempt": 1,
+      "completion": {
+        "deadline": "2026-07-28T15:00:05.000Z",
+        "token": "v2.example-claim-not-a-real-token.example-mac",
+        "url": "https://greatwait-scheduler.example/callbacks/completion"
+      },
+      "data": {},
+      "occurrenceId": "occ_0123456789abcdefghjkmnpqrs",
+      "plannedFor": "2026-07-28T15:00:00.000Z",
+      "scheduleId": "sch_0123456789abcdefghjkmnpqrs",
+      "trigger": {
+        "kind": "automatic"
+      },
+      "type": "schedule.occurrence",
+      "version": "2026-08-23"
+    },
+    "exactBodyBase64": "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",
+    "exactBodyUtf8": "{\"version\":\"2026-08-23\",\"type\":\"schedule.occurrence\",\"scheduleId\":\"sch_0123456789abcdefghjkmnpqrs\",\"occurrenceId\":\"occ_0123456789abcdefghjkmnpqrs\",\"plannedFor\":\"2026-07-28T15:00:00.000Z\",\"attempt\":1,\"completion\":{\"token\":\"v2.example-claim-not-a-real-token.example-mac\",\"url\":\"https://greatwait-scheduler.example/callbacks/completion\",\"deadline\":\"2026-07-28T15:00:05.000Z\"},\"trigger\":{\"kind\":\"automatic\"},\"data\":{}}",
+    "headers": {
+      "Callback-Delivery-Id": "dlv_0123456789abcdefghjkmnpqrs",
+      "Callback-Key-Id": "csk_0123456789abcdefghjkmnpqrs",
+      "Callback-Occurrence-Id": "occ_0123456789abcdefghjkmnpqrs",
+      "Callback-Signature": "v1=5bf68b786fbac1afa7e3474ae5039ad27900b0185bca43a3e45185d56315a312",
+      "Callback-Timestamp": "2026-07-28T15:00:00.000Z",
+      "Content-Type": "application/json"
+    },
+    "secret": "greatwait-signature-vector-key-not-a-credential",
+    "signingInputBase64": "MjAyNi0wNy0yOFQxNTowMDowMC4wMDBaLmRsdl8wMTIzNDU2Nzg5YWJjZGVmZ2hqa21ucHFycy57InZlcnNpb24iOiIyMDI2LTA4LTIzIiwidHlwZSI6InNjaGVkdWxlLm9jY3VycmVuY2UiLCJzY2hlZHVsZUlkIjoic2NoXzAxMjM0NTY3ODlhYmNkZWZnaGprbW5wcXJzIiwib2NjdXJyZW5jZUlkIjoib2NjXzAxMjM0NTY3ODlhYmNkZWZnaGprbW5wcXJzIiwicGxhbm5lZEZvciI6IjIwMjYtMDctMjhUMTU6MDA6MDAuMDAwWiIsImF0dGVtcHQiOjEsImNvbXBsZXRpb24iOnsidG9rZW4iOiJ2Mi5leGFtcGxlLWNsYWltLW5vdC1hLXJlYWwtdG9rZW4uZXhhbXBsZS1tYWMiLCJ1cmwiOiJodHRwczovL2dyZWF0d2FpdC1zY2hlZHVsZXIuZXhhbXBsZS9jYWxsYmFja3MvY29tcGxldGlvbiIsImRlYWRsaW5lIjoiMjAyNi0wNy0yOFQxNTowMDowNS4wMDBaIn0sInRyaWdnZXIiOnsia2luZCI6ImF1dG9tYXRpYyJ9LCJkYXRhIjp7fX0=",
+    "signingInputUtf8": "2026-07-28T15:00:00.000Z.dlv_0123456789abcdefghjkmnpqrs.{\"version\":\"2026-08-23\",\"type\":\"schedule.occurrence\",\"scheduleId\":\"sch_0123456789abcdefghjkmnpqrs\",\"occurrenceId\":\"occ_0123456789abcdefghjkmnpqrs\",\"plannedFor\":\"2026-07-28T15:00:00.000Z\",\"attempt\":1,\"completion\":{\"token\":\"v2.example-claim-not-a-real-token.example-mac\",\"url\":\"https://greatwait-scheduler.example/callbacks/completion\",\"deadline\":\"2026-07-28T15:00:05.000Z\"},\"trigger\":{\"kind\":\"automatic\"},\"data\":{}}"
+  },
+  "unicodeTestVector": {
+    "envelope": {
+      "attempt": 1,
+      "completion": {
+        "deadline": "2026-07-28T15:00:05.000Z",
+        "token": "v2.example-claim-not-a-real-token.example-mac",
+        "url": "https://greatwait-scheduler.example/callbacks/completion"
+      },
+      "data": {
+        "note": "café ☃"
+      },
+      "occurrenceId": "occ_0123456789abcdefghjkmnpqrs",
+      "plannedFor": "2026-07-28T15:00:00.000Z",
+      "scheduleId": "sch_0123456789abcdefghjkmnpqrs",
+      "trigger": {
+        "kind": "automatic"
+      },
+      "type": "schedule.occurrence",
+      "version": "2026-08-23"
+    },
+    "exactBodyBase64": "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",
+    "exactBodyUtf8": "{\"version\":\"2026-08-23\",\"type\":\"schedule.occurrence\",\"scheduleId\":\"sch_0123456789abcdefghjkmnpqrs\",\"occurrenceId\":\"occ_0123456789abcdefghjkmnpqrs\",\"plannedFor\":\"2026-07-28T15:00:00.000Z\",\"attempt\":1,\"completion\":{\"token\":\"v2.example-claim-not-a-real-token.example-mac\",\"url\":\"https://greatwait-scheduler.example/callbacks/completion\",\"deadline\":\"2026-07-28T15:00:05.000Z\"},\"trigger\":{\"kind\":\"automatic\"},\"data\":{\"note\":\"café ☃\"}}",
+    "headers": {
+      "Callback-Delivery-Id": "dlv_0123456789abcdefghjkmnpqrs",
+      "Callback-Key-Id": "csk_0123456789abcdefghjkmnpqrs",
+      "Callback-Occurrence-Id": "occ_0123456789abcdefghjkmnpqrs",
+      "Callback-Signature": "v1=18a8d1c50ea54bd0a5ec27abe80d1c98e44a7f358ecf8f06615c174075100e72",
+      "Callback-Timestamp": "2026-07-28T15:00:00.000Z",
+      "Content-Type": "application/json"
+    },
+    "secret": "greatwait-signature-vector-key-not-a-credential",
+    "signingInputBase64": "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",
+    "signingInputUtf8": "2026-07-28T15:00:00.000Z.dlv_0123456789abcdefghjkmnpqrs.{\"version\":\"2026-08-23\",\"type\":\"schedule.occurrence\",\"scheduleId\":\"sch_0123456789abcdefghjkmnpqrs\",\"occurrenceId\":\"occ_0123456789abcdefghjkmnpqrs\",\"plannedFor\":\"2026-07-28T15:00:00.000Z\",\"attempt\":1,\"completion\":{\"token\":\"v2.example-claim-not-a-real-token.example-mac\",\"url\":\"https://greatwait-scheduler.example/callbacks/completion\",\"deadline\":\"2026-07-28T15:00:05.000Z\"},\"trigger\":{\"kind\":\"automatic\"},\"data\":{\"note\":\"café ☃\"}}"
+  },
+  "version": "2026-08-23",
+  "envelopeSchema": {
+    "$schema": "https://json-schema.org/draft/2020-12/schema",
+    "oneOf": [
+      {
+        "type": "object",
+        "properties": {
+          "attempt": {
+            "type": "integer",
+            "exclusiveMinimum": 0,
+            "maximum": 9007199254740991
+          },
+          "data": {},
+          "occurrenceId": {
+            "type": "string",
+            "pattern": "^occ_[0-9abcdefghjkmnpqrstvwxyz]{26}$"
+          },
+          "plannedFor": {
+            "type": "string",
+            "pattern": "^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}Z$"
+          },
+          "scheduleId": {
+            "type": "string",
+            "pattern": "^sch_[0-9abcdefghjkmnpqrstvwxyz]{26}$"
+          },
+          "type": {
+            "type": "string",
+            "const": "schedule.occurrence"
+          },
+          "version": {
+            "type": "string",
+            "const": "2026-07-01"
+          }
+        },
+        "required": [
+          "attempt",
+          "data",
+          "occurrenceId",
+          "plannedFor",
+          "scheduleId",
+          "type",
+          "version"
+        ]
+      },
+      {
+        "type": "object",
+        "properties": {
+          "attempt": {
+            "type": "integer",
+            "exclusiveMinimum": 0,
+            "maximum": 9007199254740991
+          },
+          "data": {},
+          "occurrenceId": {
+            "type": "string",
+            "pattern": "^occ_[0-9abcdefghjkmnpqrstvwxyz]{26}$"
+          },
+          "plannedFor": {
+            "type": "string",
+            "pattern": "^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}Z$"
+          },
+          "scheduleId": {
+            "type": "string",
+            "pattern": "^sch_[0-9abcdefghjkmnpqrstvwxyz]{26}$"
+          },
+          "type": {
+            "type": "string",
+            "const": "schedule.occurrence"
+          },
+          "completion": {
+            "type": "object",
+            "properties": {
+              "token": {
+                "type": "string",
+                "minLength": 1
+              },
+              "url": {
+                "type": "string",
+                "format": "uri"
+              }
+            },
+            "required": ["token", "url"]
+          },
+          "trigger": {
+            "oneOf": [
+              {
+                "type": "object",
+                "properties": {
+                  "kind": {
+                    "type": "string",
+                    "const": "automatic"
+                  }
+                },
+                "required": ["kind"]
+              },
+              {
+                "type": "object",
+                "properties": {
+                  "kind": {
+                    "type": "string",
+                    "const": "redelivery"
+                  },
+                  "sourceAttemptId": {
+                    "type": "string",
+                    "pattern": "^att_[0-9abcdefghjkmnpqrstvwxyz]{26}$"
+                  }
+                },
+                "required": ["kind", "sourceAttemptId"]
+              }
+            ]
+          },
+          "version": {
+            "type": "string",
+            "const": "2026-08-08"
+          }
+        },
+        "required": [
+          "attempt",
+          "data",
+          "occurrenceId",
+          "plannedFor",
+          "scheduleId",
+          "type",
+          "trigger",
+          "version"
+        ]
+      },
+      {
+        "type": "object",
+        "properties": {
+          "attempt": {
+            "type": "integer",
+            "exclusiveMinimum": 0,
+            "maximum": 9007199254740991
+          },
+          "data": {},
+          "occurrenceId": {
+            "type": "string",
+            "pattern": "^occ_[0-9abcdefghjkmnpqrstvwxyz]{26}$"
+          },
+          "plannedFor": {
+            "type": "string",
+            "pattern": "^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}Z$"
+          },
+          "scheduleId": {
+            "type": "string",
+            "pattern": "^sch_[0-9abcdefghjkmnpqrstvwxyz]{26}$"
+          },
+          "type": {
+            "type": "string",
+            "const": "schedule.occurrence"
+          },
+          "completion": {
+            "type": "object",
+            "properties": {
+              "deadline": {
+                "type": "string",
+                "pattern": "^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}Z$"
+              },
+              "token": {
+                "type": "string",
+                "minLength": 1
+              },
+              "url": {
+                "type": "string",
+                "format": "uri"
+              }
+            },
+            "required": ["deadline", "token", "url"]
+          },
+          "trigger": {
+            "oneOf": [
+              {
+                "type": "object",
+                "properties": {
+                  "kind": {
+                    "type": "string",
+                    "const": "automatic"
+                  }
+                },
+                "required": ["kind"]
+              },
+              {
+                "type": "object",
+                "properties": {
+                  "kind": {
+                    "type": "string",
+                    "const": "redelivery"
+                  },
+                  "sourceAttemptId": {
+                    "type": "string",
+                    "pattern": "^att_[0-9abcdefghjkmnpqrstvwxyz]{26}$"
+                  }
+                },
+                "required": ["kind", "sourceAttemptId"]
+              }
+            ]
+          },
+          "version": {
+            "type": "string",
+            "const": "2026-08-23"
+          }
+        },
+        "required": [
+          "attempt",
+          "data",
+          "occurrenceId",
+          "plannedFor",
+          "scheduleId",
+          "type",
+          "completion",
+          "trigger",
+          "version"
+        ]
+      }
+    ]
+  }
+}

package/generated/v1/callback-endpoint-verification.json

@@ -0,0 +1,59 @@
+{
+  "purpose": "Prove that the receiver possesses the one-time endpoint secret before Greatwait marks the endpoint verified.",
+  "request": {
+    "bodyEncoding": "UTF-8 bytes of the compact JSON object in schema property order: challenge, endpointId, type, version.",
+    "contentType": "application/json",
+    "method": "POST",
+    "redirectPolicy": "manual; every 3xx response is refused",
+    "signature": {
+      "algorithm": "HMAC-SHA-256",
+      "format": "v1=<64 lowercase hexadecimal characters>",
+      "header": "Callback-Verification-Signature",
+      "input": "the exact request body bytes",
+      "key": "the one-time endpoint secret returned by REST endpoint creation"
+    }
+  },
+  "response": {
+    "body": "ignored after enforcing the 1024-byte response limit; return an empty body",
+    "proof": {
+      "algorithm": "HMAC-SHA-256",
+      "format": "v1=<64 lowercase hexadecimal characters>",
+      "header": "Callback-Verification-Response",
+      "input": "the UTF-8 bytes of the challenge string",
+      "key": "the same endpoint secret"
+    },
+    "status": "any 2xx status"
+  },
+  "testVector": {
+    "challenge": "cvc_AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
+    "endpointId": "ep_00000000000000000000000000",
+    "exactBodyBase64": "eyJjaGFsbGVuZ2UiOiJjdmNfQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQSIsImVuZHBvaW50SWQiOiJlcF8wMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMCIsInR5cGUiOiJjYWxsYmFjay5lbmRwb2ludC52ZXJpZmljYXRpb24iLCJ2ZXJzaW9uIjoiMjAyNi0wOC0wNSJ9",
+    "requestSignature": "v1=0d24c7fed4d752411b88025a9923627b329e0eb9d53978a6ebcf92c0678c731e",
+    "responseSignature": "v1=efc690a23f1870930ff3388313162c0e06406902a7a4d3f9273ffe0abcef86bd",
+    "secret": "verification-vector-secret"
+  },
+  "version": "2026-08-05",
+  "challengeSchema": {
+    "$schema": "https://json-schema.org/draft/2020-12/schema",
+    "type": "object",
+    "properties": {
+      "challenge": {
+        "type": "string",
+        "pattern": "^cvc_[A-Za-z0-9_-]{43}$"
+      },
+      "endpointId": {
+        "type": "string",
+        "pattern": "^ep_[0-9abcdefghjkmnpqrstvwxyz]{26}$"
+      },
+      "type": {
+        "type": "string",
+        "const": "callback.endpoint.verification"
+      },
+      "version": {
+        "type": "string",
+        "const": "2026-08-05"
+      }
+    },
+    "required": ["challenge", "endpointId", "type", "version"]
+  }
+}