@greatwait/contracts 0.1.0-alpha.4 → 0.1.0-alpha.6

package/dist/scheduling.d.ts

@@ -42,6 +42,33 @@ export declare const scheduleStatusSchema: import("zod").ZodEnum<{
     cancelled: "cancelled";
 }>;
 export type ScheduleStatus = z.infer<typeof scheduleStatusSchema>;
+/**
+ * The statuses a schedule never leaves, and from which it never fires again on
+ * its own.
+ *
+ * **"Never fires again on its own" rather than "never delivers again", and the
+ * distinction is real.** A member can still press Redeliver on a completed
+ * occurrence, and the repository admits that for a `completed` schedule as well
+ * as an `active` one. What is terminal here is the schedule's own timetable, not
+ * every possible future delivery.
+ *
+ * Exported for the same reason as {@link TERMINAL_OCCURRENCE_STATES}: so a
+ * caller enumerates them rather than writing the list out and quietly missing
+ * one if another is ever added. Three places had already written it out — the
+ * `archivedAt` validator in `scheduling-records.ts`, the dashboard's schedule
+ * controls, and the dashboard's pending-action rules — and the third had missed
+ * it entirely, which is the defect this list was extracted for.
+ */
+export declare const TERMINAL_SCHEDULE_STATUSES: readonly ["cancelled", "completed"];
+/**
+ * Whether this schedule has finished, either on its own or because somebody
+ * stopped it.
+ *
+ * `paused` is deliberately not terminal: it is reversible, so a paused schedule
+ * pointed at a broken destination is still a problem worth telling somebody
+ * about.
+ */
+export declare function isTerminalScheduleStatus(status: ScheduleStatus): boolean;
 /**
  * How promptly an occurrence expects to be dispatched.
  *
@@ -682,6 +709,34 @@ export declare function defaultLatenessPolicyForRecurrence(kind: Recurrence["kin
 export declare const SCHEDULE_NAME_MAX_LENGTH = 120;
 export declare const scheduleNameSchema: import("zod").ZodString;
 export declare const scheduleSchema: import("zod").ZodObject<{
+    http: import("zod").ZodOptional<import("zod").ZodObject<{
+        method: import("zod").ZodEnum<{
+            POST: "POST";
+            PUT: "PUT";
+            GET: "GET";
+        }>;
+        body: import("zod").ZodDiscriminatedUnion<[import("zod").ZodObject<{
+            mode: import("zod").ZodLiteral<"envelope">;
+        }, import("zod/v4/core").$strict>, import("zod").ZodObject<{
+            mode: import("zod").ZodLiteral<"none">;
+        }, import("zod/v4/core").$strict>, import("zod").ZodObject<{
+            mode: import("zod").ZodLiteral<"json">;
+            value: import("zod").ZodOptional<import("zod").ZodJSONSchema>;
+        }, import("zod/v4/core").$strict>], "mode">;
+        headers: import("zod").ZodArray<import("zod").ZodUnion<readonly [import("zod").ZodObject<{
+            name: import("zod").ZodString;
+            secret: import("zod").ZodLiteral<false>;
+            value: import("zod").ZodString;
+        }, import("zod/v4/core").$strict>, import("zod").ZodObject<{
+            name: import("zod").ZodString;
+            secret: import("zod").ZodLiteral<true>;
+            configured: import("zod").ZodLiteral<true>;
+            value: import("zod").ZodOptional<import("zod").ZodNever>;
+        }, import("zod/v4/core").$strict>, import("zod").ZodObject<{
+            name: import("zod").ZodString;
+            suppressed: import("zod").ZodLiteral<true>;
+        }, import("zod/v4/core").$strict>]>>;
+    }, import("zod/v4/core").$strict>>;
     archivedAt: import("zod").ZodOptional<import("zod").ZodString>;
     data: import("zod").ZodOptional<import("zod").ZodJSONSchema>;
     createdAt: import("zod").ZodString;
@@ -738,7 +793,7 @@ export type Schedule = z.infer<typeof scheduleSchema>;
  * A page of schedules.
  *
  * Items are schedules rather than schedule *views*. A cross-partition listing is
- * served from the D1 projection W2-06 built, and that projection holds a route
+ * served from the control-plane projection W2-06 built, and that projection holds a route
  * and a summary rather than every partition's live occurrence — so a page that
  * promised an occurrence would either lie about its freshness or force the
  * listing back through every partition it spans. Detail is where the occurrence
@@ -746,6 +801,34 @@ export type Schedule = z.infer<typeof scheduleSchema>;
  */
 export declare const schedulePageSchema: import("zod").ZodObject<{
     data: import("zod").ZodArray<import("zod").ZodObject<{
+        http: import("zod").ZodOptional<import("zod").ZodObject<{
+            method: import("zod").ZodEnum<{
+                POST: "POST";
+                PUT: "PUT";
+                GET: "GET";
+            }>;
+            body: import("zod").ZodDiscriminatedUnion<[import("zod").ZodObject<{
+                mode: import("zod").ZodLiteral<"envelope">;
+            }, import("zod/v4/core").$strict>, import("zod").ZodObject<{
+                mode: import("zod").ZodLiteral<"none">;
+            }, import("zod/v4/core").$strict>, import("zod").ZodObject<{
+                mode: import("zod").ZodLiteral<"json">;
+                value: import("zod").ZodOptional<import("zod").ZodJSONSchema>;
+            }, import("zod/v4/core").$strict>], "mode">;
+            headers: import("zod").ZodArray<import("zod").ZodUnion<readonly [import("zod").ZodObject<{
+                name: import("zod").ZodString;
+                secret: import("zod").ZodLiteral<false>;
+                value: import("zod").ZodString;
+            }, import("zod/v4/core").$strict>, import("zod").ZodObject<{
+                name: import("zod").ZodString;
+                secret: import("zod").ZodLiteral<true>;
+                configured: import("zod").ZodLiteral<true>;
+                value: import("zod").ZodOptional<import("zod").ZodNever>;
+            }, import("zod/v4/core").$strict>, import("zod").ZodObject<{
+                name: import("zod").ZodString;
+                suppressed: import("zod").ZodLiteral<true>;
+            }, import("zod/v4/core").$strict>]>>;
+        }, import("zod/v4/core").$strict>>;
         archivedAt: import("zod").ZodOptional<import("zod").ZodString>;
         data: import("zod").ZodOptional<import("zod").ZodJSONSchema>;
         createdAt: import("zod").ZodString;
@@ -895,7 +978,9 @@ export declare const attemptFailureSnippetSchema: import("zod").ZodObject<{
 export type AttemptFailureSnippet = z.infer<typeof attemptFailureSnippetSchema>;
 export declare const attemptSchema: import("zod").ZodObject<{
     id: import("zod").ZodString;
+    localReceiptRecoveries: import("zod").ZodOptional<import("zod").ZodInt>;
     occurrence: import("zod").ZodString;
+    rescues: import("zod").ZodOptional<import("zod").ZodInt>;
     remediation: import("zod").ZodOptional<import("zod").ZodEnum<{
         none: "none";
         review_retry_policy: "review_retry_policy";
@@ -954,6 +1039,7 @@ export declare const attemptSchema: import("zod").ZodObject<{
         network_ambiguous: "network_ambiguous";
         payload_unavailable: "payload_unavailable";
     }>>;
+    dispatchRecoveries: import("zod").ZodOptional<import("zod").ZodInt>;
     durationMs: import("zod").ZodOptional<import("zod").ZodNumber>;
 }, import("zod/v4/core").$strip>;
 export type Attempt = z.infer<typeof attemptSchema>;
@@ -1074,7 +1160,9 @@ export type OccurrenceView = z.infer<typeof occurrenceViewSchema>;
 export declare const attemptPageSchema: import("zod").ZodObject<{
     data: import("zod").ZodArray<import("zod").ZodObject<{
         id: import("zod").ZodString;
+        localReceiptRecoveries: import("zod").ZodOptional<import("zod").ZodInt>;
         occurrence: import("zod").ZodString;
+        rescues: import("zod").ZodOptional<import("zod").ZodInt>;
         remediation: import("zod").ZodOptional<import("zod").ZodEnum<{
             none: "none";
             review_retry_policy: "review_retry_policy";
@@ -1133,6 +1221,7 @@ export declare const attemptPageSchema: import("zod").ZodObject<{
             network_ambiguous: "network_ambiguous";
             payload_unavailable: "payload_unavailable";
         }>>;
+        dispatchRecoveries: import("zod").ZodOptional<import("zod").ZodInt>;
         durationMs: import("zod").ZodOptional<import("zod").ZodNumber>;
     }, import("zod/v4/core").$strip>>;
     nextCursor: import("zod").ZodOptional<import("zod").ZodString>;
@@ -1145,7 +1234,9 @@ export type AttemptPage = z.infer<typeof attemptPageSchema>;
 export declare const attemptViewSchema: import("zod").ZodObject<{
     attempt: import("zod").ZodObject<{
         id: import("zod").ZodString;
+        localReceiptRecoveries: import("zod").ZodOptional<import("zod").ZodInt>;
         occurrence: import("zod").ZodString;
+        rescues: import("zod").ZodOptional<import("zod").ZodInt>;
         remediation: import("zod").ZodOptional<import("zod").ZodEnum<{
             none: "none";
             review_retry_policy: "review_retry_policy";
@@ -1204,6 +1295,7 @@ export declare const attemptViewSchema: import("zod").ZodObject<{
             network_ambiguous: "network_ambiguous";
             payload_unavailable: "payload_unavailable";
         }>>;
+        dispatchRecoveries: import("zod").ZodOptional<import("zod").ZodInt>;
         durationMs: import("zod").ZodOptional<import("zod").ZodNumber>;
     }, import("zod/v4/core").$strip>;
     freshness: import("zod").ZodObject<{
@@ -1250,6 +1342,34 @@ export declare const scheduleViewSchema: import("zod").ZodObject<{
         attemptCount: import("zod").ZodNumber;
     }, import("zod/v4/core").$strip>;
     schedule: import("zod").ZodObject<{
+        http: import("zod").ZodOptional<import("zod").ZodObject<{
+            method: import("zod").ZodEnum<{
+                POST: "POST";
+                PUT: "PUT";
+                GET: "GET";
+            }>;
+            body: import("zod").ZodDiscriminatedUnion<[import("zod").ZodObject<{
+                mode: import("zod").ZodLiteral<"envelope">;
+            }, import("zod/v4/core").$strict>, import("zod").ZodObject<{
+                mode: import("zod").ZodLiteral<"none">;
+            }, import("zod/v4/core").$strict>, import("zod").ZodObject<{
+                mode: import("zod").ZodLiteral<"json">;
+                value: import("zod").ZodOptional<import("zod").ZodJSONSchema>;
+            }, import("zod/v4/core").$strict>], "mode">;
+            headers: import("zod").ZodArray<import("zod").ZodUnion<readonly [import("zod").ZodObject<{
+                name: import("zod").ZodString;
+                secret: import("zod").ZodLiteral<false>;
+                value: import("zod").ZodString;
+            }, import("zod/v4/core").$strict>, import("zod").ZodObject<{
+                name: import("zod").ZodString;
+                secret: import("zod").ZodLiteral<true>;
+                configured: import("zod").ZodLiteral<true>;
+                value: import("zod").ZodOptional<import("zod").ZodNever>;
+            }, import("zod/v4/core").$strict>, import("zod").ZodObject<{
+                name: import("zod").ZodString;
+                suppressed: import("zod").ZodLiteral<true>;
+            }, import("zod/v4/core").$strict>]>>;
+        }, import("zod/v4/core").$strict>>;
         archivedAt: import("zod").ZodOptional<import("zod").ZodString>;
         data: import("zod").ZodOptional<import("zod").ZodJSONSchema>;
         createdAt: import("zod").ZodString;
@@ -1303,6 +1423,129 @@ export declare const scheduleViewSchema: import("zod").ZodObject<{
     }, import("zod/v4/core").$strip>;
 }, import("zod/v4/core").$strip>;
 export type ScheduleView = z.infer<typeof scheduleViewSchema>;
+/**
+ * What a schedule create or replace answers: the schedule view, and — when the
+ * request named its destination by `url` — where that endpoint's signing
+ * secret is (W9-44). Present only then, because only then can the caller have
+ * an endpoint whose secret it never held.
+ */
+export declare const scheduleWrittenViewSchema: import("zod").ZodObject<{
+    occurrence: import("zod").ZodObject<{
+        generation: import("zod").ZodNumber;
+        id: import("zod").ZodString;
+        plannedFor: import("zod").ZodString;
+        schedule: import("zod").ZodString;
+        sequence: import("zod").ZodNumber;
+        settledAt: import("zod").ZodOptional<import("zod").ZodString>;
+        state: import("zod").ZodEnum<{
+            due: "due";
+            succeeded: "succeeded";
+            ambiguous: "ambiguous";
+            cancelled: "cancelled";
+            planned: "planned";
+            dispatching: "dispatching";
+            retry_wait: "retry_wait";
+            terminal_failed: "terminal_failed";
+            skipped_stale: "skipped_stale";
+        }>;
+        firstAttemptLatenessMs: import("zod").ZodOptional<import("zod").ZodInt>;
+        firstAttemptStartedAt: import("zod").ZodOptional<import("zod").ZodString>;
+        timingEligibility: import("zod").ZodOptional<import("zod").ZodEnum<{
+            customer_blocked: "customer_blocked";
+            eligible: "eligible";
+            platform_blocked: "platform_blocked";
+        }>>;
+        timingEligibilityReason: import("zod").ZodOptional<import("zod").ZodString>;
+        timingPolicyVersion: import("zod").ZodOptional<import("zod").ZodString>;
+        attemptCount: import("zod").ZodNumber;
+    }, import("zod/v4/core").$strip>;
+    schedule: import("zod").ZodObject<{
+        http: import("zod").ZodOptional<import("zod").ZodObject<{
+            method: import("zod").ZodEnum<{
+                POST: "POST";
+                PUT: "PUT";
+                GET: "GET";
+            }>;
+            body: import("zod").ZodDiscriminatedUnion<[import("zod").ZodObject<{
+                mode: import("zod").ZodLiteral<"envelope">;
+            }, import("zod/v4/core").$strict>, import("zod").ZodObject<{
+                mode: import("zod").ZodLiteral<"none">;
+            }, import("zod/v4/core").$strict>, import("zod").ZodObject<{
+                mode: import("zod").ZodLiteral<"json">;
+                value: import("zod").ZodOptional<import("zod").ZodJSONSchema>;
+            }, import("zod/v4/core").$strict>], "mode">;
+            headers: import("zod").ZodArray<import("zod").ZodUnion<readonly [import("zod").ZodObject<{
+                name: import("zod").ZodString;
+                secret: import("zod").ZodLiteral<false>;
+                value: import("zod").ZodString;
+            }, import("zod/v4/core").$strict>, import("zod").ZodObject<{
+                name: import("zod").ZodString;
+                secret: import("zod").ZodLiteral<true>;
+                configured: import("zod").ZodLiteral<true>;
+                value: import("zod").ZodOptional<import("zod").ZodNever>;
+            }, import("zod/v4/core").$strict>, import("zod").ZodObject<{
+                name: import("zod").ZodString;
+                suppressed: import("zod").ZodLiteral<true>;
+            }, import("zod/v4/core").$strict>]>>;
+        }, import("zod/v4/core").$strict>>;
+        archivedAt: import("zod").ZodOptional<import("zod").ZodString>;
+        data: import("zod").ZodOptional<import("zod").ZodJSONSchema>;
+        createdAt: import("zod").ZodString;
+        delivery: import("zod").ZodOptional<import("zod").ZodObject<{
+            completion: import("zod").ZodEnum<{
+                response: "response";
+                callback: "callback";
+            }>;
+            maxDurationSeconds: import("zod").ZodNumber;
+            onOverlap: import("zod").ZodEnum<{
+                skip: "skip";
+                queue: "queue";
+            }>;
+        }, import("zod/v4/core").$strip>>;
+        endpoint: import("zod").ZodOptional<import("zod").ZodString>;
+        endpointUrl: import("zod").ZodOptional<import("zod").ZodString>;
+        generation: import("zod").ZodNumber;
+        id: import("zod").ZodString;
+        latencyClass: import("zod").ZodEnum<{
+            realtime: "realtime";
+            bulk: "bulk";
+        }>;
+        lateness: import("zod").ZodObject<{
+            maxStalenessSeconds: import("zod").ZodOptional<import("zod").ZodNumber>;
+            policy: import("zod").ZodEnum<{
+                skipAhead: "skipAhead";
+                catchUp: "catchUp";
+            }>;
+        }, import("zod/v4/core").$strict>;
+        name: import("zod").ZodOptional<import("zod").ZodString>;
+        partitionKey: import("zod").ZodOptional<import("zod").ZodString>;
+        nextDueAt: import("zod").ZodOptional<import("zod").ZodString>;
+        recurrence: import("zod").ZodDiscriminatedUnion<[import("zod").ZodObject<{
+            kind: import("zod").ZodLiteral<"at">;
+        }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+            everySeconds: import("zod").ZodNumber;
+            kind: import("zod").ZodLiteral<"every">;
+        }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+            cron: import("zod").ZodString;
+            kind: import("zod").ZodLiteral<"cron">;
+            timeZone: import("zod").ZodPipe<import("zod").ZodString, import("zod").ZodTransform<string, string>>;
+        }, import("zod/v4/core").$strip>], "kind">;
+        status: import("zod").ZodEnum<{
+            active: "active";
+            completed: "completed";
+            paused: "paused";
+            cancelled: "cancelled";
+        }>;
+        updatedAt: import("zod").ZodString;
+        version: import("zod").ZodNumber;
+    }, import("zod/v4/core").$strip>;
+    endpointSigningSecret: import("zod").ZodOptional<import("zod").ZodObject<{
+        guidance: import("zod").ZodString;
+        returned: import("zod").ZodLiteral<false>;
+        revealUrl: import("zod").ZodOptional<import("zod").ZodString>;
+    }, import("zod/v4/core").$strip>>;
+}, import("zod/v4/core").$strip>;
+export type ScheduleWrittenView = z.infer<typeof scheduleWrittenViewSchema>;
 /**
  * The four ways a caller may say when a schedule happens.
  *
@@ -1328,6 +1571,34 @@ export declare const RECURRENCE_REQUEST_FIELDS: readonly ["at", "cron", "delaySe
  * a customer named is the worst kind of helpful.
  */
 export declare const scheduleRequestSchema: import("zod").ZodObject<{
+    http: import("zod").ZodOptional<import("zod").ZodObject<{
+        method: import("zod").ZodOptional<import("zod").ZodEnum<{
+            POST: "POST";
+            PUT: "PUT";
+            GET: "GET";
+        }>>;
+        body: import("zod").ZodOptional<import("zod").ZodDiscriminatedUnion<[import("zod").ZodObject<{
+            mode: import("zod").ZodLiteral<"envelope">;
+        }, import("zod/v4/core").$strict>, import("zod").ZodObject<{
+            mode: import("zod").ZodLiteral<"json">;
+            value: import("zod").ZodJSONSchema;
+        }, import("zod/v4/core").$strict>], "mode">>;
+        headers: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodDiscriminatedUnion<[import("zod").ZodObject<{
+            action: import("zod").ZodLiteral<"set">;
+            name: import("zod").ZodString;
+            value: import("zod").ZodString;
+            secret: import("zod").ZodOptional<import("zod").ZodBoolean>;
+        }, import("zod/v4/core").$strict>, import("zod").ZodObject<{
+            action: import("zod").ZodLiteral<"keep">;
+            name: import("zod").ZodString;
+        }, import("zod/v4/core").$strict>, import("zod").ZodObject<{
+            action: import("zod").ZodLiteral<"remove">;
+            name: import("zod").ZodString;
+        }, import("zod/v4/core").$strict>, import("zod").ZodObject<{
+            action: import("zod").ZodLiteral<"suppress">;
+            name: import("zod").ZodString;
+        }, import("zod/v4/core").$strict>], "action">>>;
+    }, import("zod/v4/core").$strict>>;
     at: import("zod").ZodOptional<import("zod").ZodString>;
     cron: import("zod").ZodOptional<import("zod").ZodString>;
     data: import("zod").ZodOptional<import("zod").ZodJSONSchema>;
@@ -1345,6 +1616,7 @@ export declare const scheduleRequestSchema: import("zod").ZodObject<{
     }, import("zod/v4/core").$strict>>;
     everySeconds: import("zod").ZodOptional<import("zod").ZodNumber>;
     endpoint: import("zod").ZodOptional<import("zod").ZodString>;
+    url: import("zod").ZodOptional<import("zod").ZodString>;
     latencyClass: import("zod").ZodOptional<import("zod").ZodEnum<{
         realtime: "realtime";
         bulk: "bulk";

package/dist/scheduling.js

@@ -1,6 +1,9 @@
+import { httpRequestSchema, publicHttpRequestSchema } from "./http-request.js";
+import { FIXED_INTERVAL_MIN_SECONDS, FIXED_INTERVAL_MAX_SECONDS, MAX_INLINE_PAYLOAD_BYTES, } from "./configuration-bounds.js";
 import { z } from "./zod.js";
 import { attemptIdSchema, deliveryIdSchema, endpointIdSchema, occurrenceIdSchema, scheduleIdSchema, } from "./identifiers.js";
 import { CALLBACK_ATTEMPT_DIAGNOSTICS } from "./delivery.js";
+import { callbackUrlSchema, signingSecretNoticeSchema } from "./endpoints.js";
 import { pageRequestSchema, pageSchema, versionSchema, } from "./protocol.js";
 import { callbackTriggerSchema, } from "./signatures.js";
 import { durationSecondsSchema, timeZoneSchema, timestampSchema } from "./time.js";
@@ -46,6 +49,38 @@ export const SCHEDULE_STATUSES = [
     "completed",
 ];
 export const scheduleStatusSchema = z.enum(SCHEDULE_STATUSES);
+/**
+ * The statuses a schedule never leaves, and from which it never fires again on
+ * its own.
+ *
+ * **"Never fires again on its own" rather than "never delivers again", and the
+ * distinction is real.** A member can still press Redeliver on a completed
+ * occurrence, and the repository admits that for a `completed` schedule as well
+ * as an `active` one. What is terminal here is the schedule's own timetable, not
+ * every possible future delivery.
+ *
+ * Exported for the same reason as {@link TERMINAL_OCCURRENCE_STATES}: so a
+ * caller enumerates them rather than writing the list out and quietly missing
+ * one if another is ever added. Three places had already written it out — the
+ * `archivedAt` validator in `scheduling-records.ts`, the dashboard's schedule
+ * controls, and the dashboard's pending-action rules — and the third had missed
+ * it entirely, which is the defect this list was extracted for.
+ */
+export const TERMINAL_SCHEDULE_STATUSES = [
+    "cancelled",
+    "completed",
+];
+/**
+ * Whether this schedule has finished, either on its own or because somebody
+ * stopped it.
+ *
+ * `paused` is deliberately not terminal: it is reversible, so a paused schedule
+ * pointed at a broken destination is still a problem worth telling somebody
+ * about.
+ */
+export function isTerminalScheduleStatus(status) {
+    return TERMINAL_SCHEDULE_STATUSES.includes(status);
+}
 /**
  * How promptly an occurrence expects to be dispatched.
  *
@@ -598,7 +633,7 @@ export const SCHEDULING_BOUNDS = {
      * Widening a bound is additive by `classifyChange` and narrowing it is
      * breaking, so this direction is the safe one to move in.
      */
-    everySecondsMax: 365 * 24 * 60 * 60,
+    everySecondsMax: FIXED_INTERVAL_MAX_SECONDS,
     /**
      * The shortest fixed interval a recurring schedule may ask for, in seconds.
      *
@@ -610,7 +645,7 @@ export const SCHEDULING_BOUNDS = {
      * `classifyChange` and narrowing it is breaking, which is the direction to be
      * conservative in.
      */
-    everySecondsMin: 60,
+    everySecondsMin: FIXED_INTERVAL_MIN_SECONDS,
     /**
      * How long an idempotency receipt is honoured. A client retrying a create for
      * longer than a day is not retrying, it is making a new request; keeping
@@ -662,7 +697,7 @@ export const SCHEDULING_BOUNDS = {
      * command-shaped payloads this product is for, and refuses the ones that are
      * really a file transfer.
      */
-    payloadBytes: 65_536,
+    payloadBytes: MAX_INLINE_PAYLOAD_BYTES,
     /**
      * How soon a one-shot has to be for `realtime` to be the class it gets by
      * default, in seconds.
@@ -785,6 +820,7 @@ export const scheduleNameSchema = z
     .min(1, "must not be blank")
     .max(SCHEDULE_NAME_MAX_LENGTH, `must be at most ${String(SCHEDULE_NAME_MAX_LENGTH)} characters`);
 export const scheduleSchema = z.object({
+    http: publicHttpRequestSchema.optional(),
     /**
      * When the schedule was filed away, and absent until it is.
      *
@@ -908,7 +944,7 @@ export const scheduleSchema = z.object({
  * A page of schedules.
  *
  * Items are schedules rather than schedule *views*. A cross-partition listing is
- * served from the D1 projection W2-06 built, and that projection holds a route
+ * served from the control-plane projection W2-06 built, and that projection holds a route
  * and a summary rather than every partition's live occurrence — so a page that
  * promised an occurrence would either lie about its freshness or force the
  * listing back through every partition it spans. Detail is where the occurrence
@@ -1037,6 +1073,12 @@ export const attemptSchema = z
     delivery: deliveryIdSchema,
     /** Safe classifier code; absent when durable evidence predates diagnostics. */
     diagnostic: attemptDiagnosticSchema.optional(),
+    /**
+     * Instrumented re-drives of the same dispatching occurrence under a new
+     * dispatch epoch. Includes deliberate admission deferrals; this is not a
+     * count of database failures or callback sends. Absent on older responses.
+     */
+    dispatchRecoveries: z.int().nonnegative().optional(),
     /** Executor-observed elapsed time; absent when no durable timing survived. */
     durationMs: z
         .number()
@@ -1046,7 +1088,24 @@ export const attemptSchema = z
         .optional(),
     ...timingEvidenceShape,
     id: attemptIdSchema,
+    /**
+     * Instrumented send authorizations granted after a later local alarm
+     * replayed the original wake receipt. Preserves the attempt and delivery
+     * identity; excludes synchronous receipt hedges and repeated authorization
+     * acknowledgements. A grant does not prove a callback left. Absent on
+     * older responses.
+     */
+    localReceiptRecoveries: z.int().nonnegative().optional(),
     occurrence: occurrenceIdSchema,
+    /**
+     * How many times the watchdog took this attempt's send back and sent it
+     * again: the send was authorized, and its outcome was never recorded
+     * before its lease expired. Each re-send uses this attempt's `delivery` id,
+     * so the receiver may have got the attempt more than once. `state` is the
+     * outcome that was recorded. The timing evidence is the earliest send
+     * known to have left. Absent when nothing was re-sent.
+     */
+    rescues: z.int().positive().optional(),
     /** Stable next-action code paired with a diagnostic when one is known. */
     remediation: attemptRemediationSchema.optional(),
     /**
@@ -1138,6 +1197,15 @@ export const scheduleViewSchema = z.object({
     occurrence: occurrenceSchema,
     schedule: scheduleSchema,
 });
+/**
+ * What a schedule create or replace answers: the schedule view, and — when the
+ * request named its destination by `url` — where that endpoint's signing
+ * secret is (W9-44). Present only then, because only then can the caller have
+ * an endpoint whose secret it never held.
+ */
+export const scheduleWrittenViewSchema = scheduleViewSchema.extend({
+    endpointSigningSecret: signingSecretNoticeSchema.optional(),
+});
 /**
  * The four ways a caller may say when a schedule happens.
  *
@@ -1169,6 +1237,7 @@ export const RECURRENCE_REQUEST_FIELDS = [
  */
 export const scheduleRequestSchema = z
     .object({
+    http: httpRequestSchema.optional(),
     /** The instant the first occurrence is planned for. */
     at: timestampSchema.optional(),
     /**
@@ -1257,6 +1326,15 @@ export const scheduleRequestSchema = z
      * valid only when the stored schedule already has an endpoint.
      */
     endpoint: endpointIdSchema.optional(),
+    /**
+     * A callback destination named by its address instead of by an endpoint
+     * id (W9-44, FXO-2907). The service uses the project's existing endpoint
+     * at exactly this address, or creates one silently and returns no signing
+     * secret — the response's `endpointSigningSecret` says where a person
+     * reveals it. Reusing needs only `schedules:write`; creating also needs
+     * `endpoints:write`. Give this or `endpoint`, not both.
+     */
+    url: callbackUrlSchema().optional(),
     /**
      * How promptly this schedule's occurrences expect to be served.
      *
@@ -1344,6 +1422,15 @@ export const scheduleRequestSchema = z
             });
         }
     }
+    if (request.url !== undefined && request.endpoint !== undefined) {
+        for (const path of ["endpoint", "url"]) {
+            context.addIssue({
+                code: "custom",
+                message: "give `endpoint` or `url`, not both; `url` finds or creates the endpoint at that address",
+                path: [path],
+            });
+        }
+    }
     if (request.timeZone !== undefined && request.cron === undefined) {
         context.addIssue({
             code: "custom",

package/dist/secrets.d.ts

@@ -47,6 +47,7 @@ export declare const credentialMetadataSchema: import("zod").ZodObject<{
     revokedAt: import("zod").ZodOptional<import("zod").ZodString>;
     supersededBy: import("zod").ZodOptional<import("zod").ZodString>;
     scopes: import("zod").ZodArray<import("zod").ZodEnum<{
+        "members:manage": "members:manage";
         "credentials:administer": "credentials:administer";
         "billing:write": "billing:write";
         "credentials:read": "credentials:read";
@@ -95,6 +96,7 @@ export declare const credentialPageSchema: import("zod").ZodObject<{
         revokedAt: import("zod").ZodOptional<import("zod").ZodString>;
         supersededBy: import("zod").ZodOptional<import("zod").ZodString>;
         scopes: import("zod").ZodArray<import("zod").ZodEnum<{
+            "members:manage": "members:manage";
             "credentials:administer": "credentials:administer";
             "billing:write": "billing:write";
             "credentials:read": "credentials:read";
@@ -143,6 +145,7 @@ export declare const credentialCreatedSchema: import("zod").ZodObject<{
     revokedAt: import("zod").ZodOptional<import("zod").ZodString>;
     supersededBy: import("zod").ZodOptional<import("zod").ZodString>;
     scopes: import("zod").ZodArray<import("zod").ZodEnum<{
+        "members:manage": "members:manage";
         "credentials:administer": "credentials:administer";
         "billing:write": "billing:write";
         "credentials:read": "credentials:read";
@@ -181,6 +184,7 @@ export declare const credentialRequestSchema: import("zod").ZodObject<{
     }>;
     project: import("zod").ZodString;
     scopes: import("zod").ZodArray<import("zod").ZodEnum<{
+        "members:manage": "members:manage";
         "credentials:administer": "credentials:administer";
         "billing:write": "billing:write";
         "credentials:read": "credentials:read";
@@ -250,6 +254,7 @@ export declare const credentialRotatedSchema: import("zod").ZodObject<{
         revokedAt: import("zod").ZodOptional<import("zod").ZodString>;
         supersededBy: import("zod").ZodOptional<import("zod").ZodString>;
         scopes: import("zod").ZodArray<import("zod").ZodEnum<{
+            "members:manage": "members:manage";
             "credentials:administer": "credentials:administer";
             "billing:write": "billing:write";
             "credentials:read": "credentials:read";
@@ -286,6 +291,7 @@ export declare const credentialRotatedSchema: import("zod").ZodObject<{
         revokedAt: import("zod").ZodOptional<import("zod").ZodString>;
         supersededBy: import("zod").ZodOptional<import("zod").ZodString>;
         scopes: import("zod").ZodArray<import("zod").ZodEnum<{
+            "members:manage": "members:manage";
             "credentials:administer": "credentials:administer";
             "billing:write": "billing:write";
             "credentials:read": "credentials:read";
@@ -333,6 +339,7 @@ export declare const credentialRevokedSchema: import("zod").ZodObject<{
         revokedAt: import("zod").ZodOptional<import("zod").ZodString>;
         supersededBy: import("zod").ZodOptional<import("zod").ZodString>;
         scopes: import("zod").ZodArray<import("zod").ZodEnum<{
+            "members:manage": "members:manage";
             "credentials:administer": "credentials:administer";
             "billing:write": "billing:write";
             "credentials:read": "credentials:read";

package/dist/tenancy.d.ts

@@ -177,7 +177,7 @@ export declare const projectDeletionCountsSchema: import("zod").ZodObject<{
 }, import("zod/v4/core").$strip>;
 export type ProjectDeletionCounts = z.infer<typeof projectDeletionCountsSchema>;
 /**
- * Every active or archived project in the member's organization.
+ * Every active or archived project the member can access. Administrators see all.
  *
  * **Unpaged, with a stated ceiling, because the store beneath it is.**
  * `listProjects` reads an organization's projects in one go; declaring a page

package/dist/tenancy.js

@@ -149,7 +149,7 @@ export const projectSummarySchema = z.object({
 });
 export const projectDeletionCountsSchema = projectSummarySchema.shape.deletionCounts;
 /**
- * Every active or archived project in the member's organization.
+ * Every active or archived project the member can access. Administrators see all.
  *
  * **Unpaged, with a stated ceiling, because the store beneath it is.**
  * `listProjects` reads an organization's projects in one go; declaring a page