@greatwait/contracts 0.1.0-alpha.6 → 0.1.0-alpha.8

package/README.md

@@ -4,7 +4,7 @@ The public contracts for [GreatWait](https://greatwait.dev): the schemas every
 response is parsed with, the stable refusal catalog, the operation registry, and
 the generated OpenAPI documents.
 
-> **Invited alpha.** This package publishes on the `alpha` dist-tag and has no
+> **Alpha.** This package publishes on the `alpha` dist-tag and has no
 > `latest`. Install it explicitly, and pin the exact version in anything you
 > care about.
 

package/dist/attempt-diagnostics.d.ts

@@ -0,0 +1,8 @@
+import type { Attempt, AttemptResponse } from "./scheduling.js";
+/** Render customer-controlled text without terminal escapes, controls or bidi overrides. */
+export declare function sanitizedDiagnosticText(value: string): string;
+export declare function responseBodySentence(state: AttemptResponse["bodyState"], noServerResponse?: boolean): string;
+export declare function requestCaptureSentence(state: Attempt["requestState"], inProgress?: boolean): string;
+export declare function attemptStatusGuidance(status: number | undefined): string | undefined;
+/** A safe text preview, independently of the exact retained/download bytes. */
+export declare function diagnosticBodyText(body: NonNullable<AttemptResponse["body"]>): string | undefined;

package/dist/attempt-diagnostics.js

@@ -0,0 +1,68 @@
+/** Render customer-controlled text without terminal escapes, controls or bidi overrides. */
+export function sanitizedDiagnosticText(value) {
+    return Array.from(value.replace(/\r\n/gu, "\n"), (c) => {
+        const n = c.codePointAt(0);
+        return c === "\n" ||
+            c === "\t" ||
+            c === "\u200C" ||
+            c === "\u200D" ||
+            c === "\uFEFF" ||
+            (!/\p{Cc}|\p{Cf}/u.test(c) && n !== 0x7f)
+            ? c
+            : "�";
+    }).join("");
+}
+export function responseBodySentence(state, noServerResponse = false) {
+    switch (state) {
+        case "empty":
+            return "The server answered with an empty body.";
+        case "expired":
+            return "The response has expired after 7 days.";
+        case "not_captured":
+            return noServerResponse
+                ? "No server response was received for this attempt."
+                : "The response body was not captured.";
+        case "captured":
+            return "What the server answered:";
+    }
+}
+export function requestCaptureSentence(state, inProgress = false) {
+    return state === "expired"
+        ? "The request body has expired. Request evidence is kept for at most 3 days and never beyond payload retention."
+        : inProgress
+            ? "The request is still in progress; sent-request evidence is not available yet."
+            : "The request was not captured.";
+}
+export function attemptStatusGuidance(status) {
+    if (status === 401 || status === 403)
+        return "Your server rejected the credentials we sent. Check the Authorization header on this endpoint.";
+    if (status === 404 || status === 410)
+        return "The server could not find this endpoint. Check the URL we sent.";
+    if (status === 405)
+        return "The server refused this HTTP method. Check the method we sent.";
+    if (status === 429)
+        return "The server asked us to slow down. Check its Retry-After header.";
+    if (status === 408)
+        return "The server timed out while receiving the request. Check its response and timeout settings.";
+    if (status !== undefined && status >= 500)
+        return "The server reported an error. Use its response to diagnose the failure.";
+    if (status !== undefined && status >= 300 && status < 400)
+        return "The server redirected the request. Call the final HTTPS URL directly; redirects are disabled.";
+    if (status !== undefined && status >= 400)
+        return "The server refused this request. Check its response against what we sent.";
+    return undefined;
+}
+/** A safe text preview, independently of the exact retained/download bytes. */
+export function diagnosticBodyText(body) {
+    if (body.encoding === "utf8")
+        return body.content;
+    const media = (body.contentType.split(";")[0] ?? "").trim().toLowerCase();
+    if (!/^(?:text\/[a-z0-9.+-]+|application\/(?:[a-z0-9.+-]+\+)?(?:json|xml)|application\/javascript)$/u.test(media))
+        return undefined;
+    try {
+        return new TextDecoder().decode(Uint8Array.from(atob(body.content), (c) => c.charCodeAt(0)));
+    }
+    catch {
+        return undefined;
+    }
+}

package/dist/billing.d.ts

@@ -110,6 +110,7 @@ export declare const billingPurchaseRequestSchema: import("zod").ZodObject<{
     confirmed: import("zod").ZodLiteral<true>;
     expectedRevision: import("zod").ZodNumber;
     quote: import("zod").ZodString;
+    savePaymentMethod: import("zod").ZodOptional<import("zod").ZodBoolean>;
 }, import("zod/v4/core").$strict>;
 export declare const billingCeilingUpdateRequestSchema: import("zod").ZodObject<{
     automaticExecutionTopUpCeiling: import("zod").ZodNullable<import("zod").ZodObject<{
@@ -253,16 +254,16 @@ export declare const billingPaymentOperationSchema: import("zod").ZodObject<{
     }, import("zod/v4/core").$strip>>;
     id: import("zod").ZodString;
     kind: import("zod").ZodEnum<{
-        manual: "manual";
         automatic: "automatic";
+        manual: "manual";
     }>;
     paymentUrl: import("zod").ZodOptional<import("zod").ZodString>;
     reason: import("zod").ZodOptional<import("zod").ZodString>;
     receiptUrl: import("zod").ZodOptional<import("zod").ZodString>;
     state: import("zod").ZodEnum<{
+        failed: "failed";
         pending: "pending";
         paid: "paid";
-        failed: "failed";
         "authentication-required": "authentication-required";
         "action-required": "action-required";
         canceled: "canceled";
@@ -393,16 +394,16 @@ export declare const billingFundingViewSchema: import("zod").ZodObject<{
         }, import("zod/v4/core").$strip>>;
         id: import("zod").ZodString;
         kind: import("zod").ZodEnum<{
-            manual: "manual";
             automatic: "automatic";
+            manual: "manual";
         }>;
         paymentUrl: import("zod").ZodOptional<import("zod").ZodString>;
         reason: import("zod").ZodOptional<import("zod").ZodString>;
         receiptUrl: import("zod").ZodOptional<import("zod").ZodString>;
         state: import("zod").ZodEnum<{
+            failed: "failed";
             pending: "pending";
             paid: "paid";
-            failed: "failed";
             "authentication-required": "authentication-required";
             "action-required": "action-required";
             canceled: "canceled";
@@ -427,7 +428,7 @@ export declare const billingFundingViewSchema: import("zod").ZodObject<{
         scale: import("zod").ZodLiteral<6>;
     }, import("zod/v4/core").$strip>;
 }, import("zod/v4/core").$strict>;
-export declare const BILLING_NOTICE_KINDS: readonly ["budget-warning", "budget-exhausted", "low-credit", "automatic-top-up-cap-reached", "funding-blocked", "payment-pending", "payment-succeeded", "payment-failed", "payment-authentication-required", "payment-outcome-unresolved", "service-restored"];
+export declare const BILLING_NOTICE_KINDS: readonly ["budget-warning", "budget-exhausted", "low-credit", "automatic-top-up-cap-reached", "funding-blocked", "payment-pending", "payment-succeeded", "payment-failed", "payment-authentication-required", "payment-outcome-unresolved", "service-restored", "schedule-auto-paused", "delivery-failed"];
 type BillingNoticeMoney = z.infer<typeof nonnegativeExactMoneySchema>;
 export interface BillingNotice {
     readonly amounts: {
@@ -450,7 +451,8 @@ export interface BillingNotice {
         readonly operation: string;
         readonly state: (typeof BILLING_PAYMENT_STATES)[number];
     } | null;
-    readonly recoveryPath: "#billing" | "#billing-funding" | "#billing-notification-settings";
+    /** A fixed billing anchor or a scoped schedule recovery route. */
+    readonly recoveryPath: string;
     readonly resolvedAt: string | null;
     readonly scope: {
         readonly kind: "organization";
@@ -493,11 +495,11 @@ export interface BillingNotificationSettingsUpdateRequest {
     readonly lowCreditThreshold?: z.infer<typeof exactCentMoneySchema> | null | undefined;
     readonly noncriticalEmail: boolean;
 }
-export declare const billingNoticeRecoveryPathSchema: import("zod").ZodEnum<{
+export declare const billingNoticeRecoveryPathSchema: import("zod").ZodUnion<readonly [import("zod").ZodEnum<{
     "#billing": "#billing";
     "#billing-funding": "#billing-funding";
     "#billing-notification-settings": "#billing-notification-settings";
-}>;
+}>, import("zod").ZodString]>;
 export declare const billingNoticeSchema: z.ZodType<BillingNotice>;
 export declare const billingNoticePageSchema: z.ZodType<BillingNoticePage>;
 export declare const billingNotificationSettingsSchema: z.ZodType<BillingNotificationSettings>;
@@ -1118,16 +1120,16 @@ export declare const billingPaymentHistoryPageSchema: import("zod").ZodObject<{
         }, import("zod/v4/core").$strip>>;
         id: import("zod").ZodString;
         kind: import("zod").ZodEnum<{
-            manual: "manual";
             automatic: "automatic";
+            manual: "manual";
         }>;
         paymentUrl: import("zod").ZodOptional<import("zod").ZodString>;
         reason: import("zod").ZodOptional<import("zod").ZodString>;
         receiptUrl: import("zod").ZodOptional<import("zod").ZodString>;
         state: import("zod").ZodEnum<{
+            failed: "failed";
             pending: "pending";
             paid: "paid";
-            failed: "failed";
             "authentication-required": "authentication-required";
             "action-required": "action-required";
             canceled: "canceled";

package/dist/billing.js

@@ -208,6 +208,12 @@ export const billingPurchaseRequestSchema = z
     confirmed: z.literal(true),
     expectedRevision: z.number().int().nonnegative(),
     quote: z.string().min(1).max(128),
+    savePaymentMethod: z
+        .boolean()
+        .meta({
+        description: "true: the customer also asks to keep the payment method they pay with, for automatic top-up and for projects past the free one. The hosted payment then saves it for later charges made without the customer present (it offers every method the account enables except Klarna, which cannot be charged that way), and once the provider confirms this payment paid, that method becomes the organization's saved payment method if it has none. An existing saved payment method is never replaced, and saving one never turns automatic top-up on. Omitted or false: the purchase does exactly what it always did.",
+    })
+        .optional(),
 })
     .strict();
 export const billingCeilingUpdateRequestSchema = z
@@ -406,11 +412,15 @@ export const BILLING_NOTICE_KINDS = [
     "payment-authentication-required",
     "payment-outcome-unresolved",
     "service-restored",
+    "schedule-auto-paused",
+    "delivery-failed",
 ];
-export const billingNoticeRecoveryPathSchema = z.enum([
-    "#billing",
-    "#billing-funding",
-    "#billing-notification-settings",
+export const billingNoticeRecoveryPathSchema = z.union([
+    z.enum(["#billing", "#billing-funding", "#billing-notification-settings"]),
+    z
+        .string()
+        .max(1024)
+        .regex(/^\/o\/[A-Za-z0-9_%.-]+\/p\/proj_[0-9abcdefghjkmnpqrstvwxyz]{26}\/(?:live|test)\/schedules(?:\/sch_[0-9abcdefghjkmnpqrstvwxyz]{26}(?:\/occurrences\/occ_[0-9abcdefghjkmnpqrstvwxyz]{26})?)?$/u, "must be a scoped schedule recovery route"),
 ]);
 export const billingNoticeSchema = z
     .object({

package/dist/delivery.d.ts

@@ -252,41 +252,17 @@ export declare function effectiveCompletionDeadlineMs(requestedMs: number | unde
 export declare const CALLBACK_ATTEMPT_DIAGNOSTICS: readonly ["completion_timed_out", "delivered", "duplicate_inflight", "endpoint_unavailable", "endpoint_unsafe", "http_refused", "http_retryable", "http_terminal", "identity_conflict", "network_ambiguous", "payload_unavailable", "rate_limited"];
 export type CallbackAttemptDiagnostic = (typeof CALLBACK_ATTEMPT_DIAGNOSTICS)[number];
 /**
- * Statuses where the receiver is refusing *this delivery, right now* rather
- * than objecting to the message it carries.
+ * Receiver refusals that retain the ordinary five-failure retry budget.
  *
- * **The line is whether resending the identical bytes could ever get a
- * different answer.** Every callback attempt re-sends the same signed envelope,
- * so a receiver that rejects the message itself — malformed, too large, wrong
- * media type, gone, refused for legal reasons — will reject it identically for
- * as long as the occurrence lives, and retrying is pure cost on the population
- * least likely to recover. A receiver that refuses *us* has a cause someone
- * fixes: an expired or rotated credential, a WAF rule that started matching, a
- * deploy window where the route is briefly absent.
+ * W9-50 reverses FXO-1596 for 401/403/404/405: credentials, permissions,
+ * missing routes and unsupported methods need a customer change, so an
+ * automatic retry bills another attempt without fixing them. They now end
+ * the occurrence immediately; manual redelivery remains available.
  *
- * | Status | Why it is here |
- * | ------ | -------------- |
- * | 401    | credential expired, rotated, or not yet deployed |
- * | 402    | receiver's own service suspended, restored on payment |
- * | 403    | WAF or bot rule, revoked permission, IP block |
- * | 404    | route absent during a deploy or a partial rollout |
- * | 405    | method absent during a deploy or a partial rollout |
- * | 407    | an egress proxy in front of the receiver wants credentials |
- * | 421    | misdirected during a routing or certificate change |
- * | 423    | the target resource is temporarily locked |
- * | 424    | the receiver's own dependency failed |
- * | 425    | the receiver asked us not to risk a replay yet — literally "retry later" |
- *
- * **409 is deliberately not here**, though it is a refusal in the plain
- * reading. From a callback receiver a conflict overwhelmingly means "I already
- * have this delivery", which the identical retry cannot resolve and which is
- * the receiver's idempotency working rather than failing.
- *
- * **An unrecognised 4xx is not here either.** RFC 7231 says an unknown 4xx must
- * be treated as a 400, so the default is terminal and this list is the whole of
- * the exception. Adding to it is a product decision, not a lookup.
+ * 402, 407, 421, 423, 424 and 425 retain the budget. 408, 429 and 5xx are
+ * retryable separately. Other responses outside 2xx are terminal.
  */
-export declare const CALLBACK_REFUSAL_STATUSES: readonly [401, 402, 403, 404, 405, 407, 421, 423, 424, 425];
+export declare const CALLBACK_REFUSAL_STATUSES: readonly [402, 407, 421, 423, 424, 425];
 /** Whether a receiver refused this delivery in a way that may recover. */
 export declare function isCallbackRefusalStatus(status: number): boolean;
 /** Stable outcome of the one network attempt an executor invocation may run. */
@@ -339,18 +315,17 @@ export declare const CALLBACK_RESPONSE_HEADER_MAX_BYTES = 256;
 /**
  * How much of a failed response body may be retained, in bytes.
  *
- * Four kibibytes of the *start* of the body, read as a bounded prefix and with
+ * Ten kibibytes of the *start* of any media type, read as a bounded prefix and with
  * the rest of the stream cancelled rather than buffered. It is enough for a
  * stack trace's first frames or a validation error list, which is what makes a
  * failing receiver diagnosable without turning this product into a log store.
  */
-export declare const CALLBACK_FAILURE_SNIPPET_MAX_BYTES = 4096;
+export declare const CALLBACK_FAILURE_SNIPPET_MAX_BYTES = 10240;
 /**
  * Media types whose body may be retained as a failure snippet.
  *
- * Text and JSON only. A binary body has nothing a person reads in its first
- * four kibibytes, and retaining one would mean storing an arbitrary fragment
- * of an arbitrary file because a receiver set a header.
+ * Legacy text detection, also used as a hint for decoding invalid UTF-8.
+ * Full failed-response capture accepts every media type.
  */
 export declare const CALLBACK_FAILURE_SNIPPET_CONTENT_TYPES: readonly ["application/json", "application/problem+json", "application/xml", "text/"];
 /** One retained response header, already bounded and lowercased by name. */
@@ -373,14 +348,16 @@ export interface CallbackFailureSnippet {
 /**
  * Bounded evidence about one HTTP response.
  *
- * Deliberately not "the response": there is no body for a success, no header
- * outside the allowlist, and no representation at all for a transport failure
- * that produced no response.
+ * Failed responses retain every header and bounded body before encryption.
+ * Success and pending responses keep only legacy diagnostic headers.
+ * The sent request is independent of whether a response arrived.
  */
 export interface CallbackResponseEvidence {
     readonly headers: readonly CallbackResponseHeader[];
     /** Absent for a success, a pending acknowledgement, and a non-text body. */
     readonly snippet?: CallbackFailureSnippet;
+    readonly response?: import("./scheduling.js").AttemptResponse;
+    readonly request?: import("./scheduling.js").AttemptRequest;
 }
 /**
  * What one network attempt did, including the answer that is not an outcome.

package/dist/delivery.js

@@ -208,42 +208,18 @@ export const CALLBACK_ATTEMPT_DIAGNOSTICS = [
     "rate_limited",
 ];
 /**
- * Statuses where the receiver is refusing *this delivery, right now* rather
- * than objecting to the message it carries.
+ * Receiver refusals that retain the ordinary five-failure retry budget.
  *
- * **The line is whether resending the identical bytes could ever get a
- * different answer.** Every callback attempt re-sends the same signed envelope,
- * so a receiver that rejects the message itself — malformed, too large, wrong
- * media type, gone, refused for legal reasons — will reject it identically for
- * as long as the occurrence lives, and retrying is pure cost on the population
- * least likely to recover. A receiver that refuses *us* has a cause someone
- * fixes: an expired or rotated credential, a WAF rule that started matching, a
- * deploy window where the route is briefly absent.
+ * W9-50 reverses FXO-1596 for 401/403/404/405: credentials, permissions,
+ * missing routes and unsupported methods need a customer change, so an
+ * automatic retry bills another attempt without fixing them. They now end
+ * the occurrence immediately; manual redelivery remains available.
  *
- * | Status | Why it is here |
- * | ------ | -------------- |
- * | 401    | credential expired, rotated, or not yet deployed |
- * | 402    | receiver's own service suspended, restored on payment |
- * | 403    | WAF or bot rule, revoked permission, IP block |
- * | 404    | route absent during a deploy or a partial rollout |
- * | 405    | method absent during a deploy or a partial rollout |
- * | 407    | an egress proxy in front of the receiver wants credentials |
- * | 421    | misdirected during a routing or certificate change |
- * | 423    | the target resource is temporarily locked |
- * | 424    | the receiver's own dependency failed |
- * | 425    | the receiver asked us not to risk a replay yet — literally "retry later" |
- *
- * **409 is deliberately not here**, though it is a refusal in the plain
- * reading. From a callback receiver a conflict overwhelmingly means "I already
- * have this delivery", which the identical retry cannot resolve and which is
- * the receiver's idempotency working rather than failing.
- *
- * **An unrecognised 4xx is not here either.** RFC 7231 says an unknown 4xx must
- * be treated as a 400, so the default is terminal and this list is the whole of
- * the exception. Adding to it is a product decision, not a lookup.
+ * 402, 407, 421, 423, 424 and 425 retain the budget. 408, 429 and 5xx are
+ * retryable separately. Other responses outside 2xx are terminal.
  */
 export const CALLBACK_REFUSAL_STATUSES = [
-    401, 402, 403, 404, 405, 407, 421, 423, 424, 425,
+    402, 407, 421, 423, 424, 425,
 ];
 /** Whether a receiver refused this delivery in a way that may recover. */
 export function isCallbackRefusalStatus(status) {
@@ -288,18 +264,17 @@ export const CALLBACK_RESPONSE_HEADER_MAX_BYTES = 256;
 /**
  * How much of a failed response body may be retained, in bytes.
  *
- * Four kibibytes of the *start* of the body, read as a bounded prefix and with
+ * Ten kibibytes of the *start* of any media type, read as a bounded prefix and with
  * the rest of the stream cancelled rather than buffered. It is enough for a
  * stack trace's first frames or a validation error list, which is what makes a
  * failing receiver diagnosable without turning this product into a log store.
  */
-export const CALLBACK_FAILURE_SNIPPET_MAX_BYTES = 4_096;
+export const CALLBACK_FAILURE_SNIPPET_MAX_BYTES = 10_240;
 /**
  * Media types whose body may be retained as a failure snippet.
  *
- * Text and JSON only. A binary body has nothing a person reads in its first
- * four kibibytes, and retaining one would mean storing an arbitrary fragment
- * of an arbitrary file because a receiver set a header.
+ * Legacy text detection, also used as a hint for decoding invalid UTF-8.
+ * Full failed-response capture accepts every media type.
  */
 export const CALLBACK_FAILURE_SNIPPET_CONTENT_TYPES = [
     "application/json",

package/dist/effective-limits.d.ts

@@ -8,26 +8,26 @@ export declare const effectiveCustomerLimitsSchema: import("zod").ZodObject<{
     }, import("zod/v4/core").$strict>;
     provenance: import("zod").ZodObject<{
         inlinePayloadBytes: import("zod").ZodEnum<{
-            organization: "organization";
             default: "default";
+            organization: "organization";
             global: "global";
             deployment: "deployment";
         }>;
         partitionKeyCeiling: import("zod").ZodOptional<import("zod").ZodEnum<{
-            organization: "organization";
             default: "default";
+            organization: "organization";
             global: "global";
             deployment: "deployment";
         }>>;
         forecastHorizonSeconds: import("zod").ZodEnum<{
-            organization: "organization";
             default: "default";
+            organization: "organization";
             global: "global";
             deployment: "deployment";
         }>;
         usageWindowDays: import("zod").ZodEnum<{
-            organization: "organization";
             default: "default";
+            organization: "organization";
             global: "global";
             deployment: "deployment";
         }>;

package/dist/endpoints.d.ts

@@ -15,8 +15,8 @@ import { z } from "./zod.js";
  */
 export declare const CALLBACK_ENDPOINT_STATUSES: readonly ["active", "disabled"];
 export declare const callbackEndpointStatusSchema: import("zod").ZodEnum<{
-    disabled: "disabled";
     active: "active";
+    disabled: "disabled";
 }>;
 export type CallbackEndpointStatus = z.infer<typeof callbackEndpointStatusSchema>;
 /**
@@ -114,8 +114,8 @@ export declare const callbackEndpointSchema: import("zod").ZodObject<{
         }, import("zod/v4/core").$strip>>;
     }, import("zod/v4/core").$strip>;
     status: import("zod").ZodEnum<{
-        disabled: "disabled";
         active: "active";
+        disabled: "disabled";
     }>;
     updatedAt: import("zod").ZodString;
     url: import("zod").ZodString;
@@ -155,8 +155,8 @@ export declare const callbackEndpointPageSchema: import("zod").ZodObject<{
             }, import("zod/v4/core").$strip>>;
         }, import("zod/v4/core").$strip>;
         status: import("zod").ZodEnum<{
-            disabled: "disabled";
             active: "active";
+            disabled: "disabled";
         }>;
         updatedAt: import("zod").ZodString;
         url: import("zod").ZodString;
@@ -205,8 +205,8 @@ export declare const callbackEndpointCreatedSchema: import("zod").ZodObject<{
         }, import("zod/v4/core").$strip>>;
     }, import("zod/v4/core").$strip>;
     status: import("zod").ZodEnum<{
-        disabled: "disabled";
         active: "active";
+        disabled: "disabled";
     }>;
     updatedAt: import("zod").ZodString;
     url: import("zod").ZodString;
@@ -253,8 +253,8 @@ export declare const callbackEndpointRotatedSchema: import("zod").ZodObject<{
             }, import("zod/v4/core").$strip>>;
         }, import("zod/v4/core").$strip>;
         status: import("zod").ZodEnum<{
-            disabled: "disabled";
             active: "active";
+            disabled: "disabled";
         }>;
         updatedAt: import("zod").ZodString;
         url: import("zod").ZodString;
@@ -372,8 +372,8 @@ export declare const callbackEndpointEnsuredSchema: import("zod").ZodObject<{
         }, import("zod/v4/core").$strip>>;
     }, import("zod/v4/core").$strip>;
     status: import("zod").ZodEnum<{
-        disabled: "disabled";
         active: "active";
+        disabled: "disabled";
     }>;
     updatedAt: import("zod").ZodString;
     url: import("zod").ZodString;

package/dist/first-value-journey.js

@@ -109,7 +109,7 @@ export const CURL_JOURNEY_TOOLS = [
 ];
 export const FIRST_VALUE_PREREQUISITES = [
     {
-        action: "Accept your GreatWait invitation, sign in, and create a project in the dashboard.",
+        action: "Sign up at https://app.greatwait.dev/sign-up and name your organization, or sign in. Then create a project in the dashboard, or pick an existing one.",
         because: "projects.create accepts only a signed-in member, so a project is created by a person rather than by an API credential.",
         id: "project",
         title: "A project",
@@ -121,10 +121,10 @@ export const FIRST_VALUE_PREREQUISITES = [
         title: "An API credential",
     },
     {
-        action: "Have an HTTPS URL of your own that answers POST with a 2xx status, and can be reached from the public internet.",
-        because: "GreatWait delivers your callback to an address you control. It does not offer a shared receiver to try, and it will not send your payload to a third-party inspection service on your behalf.",
+        action: "Get a test URL from webhook.site, which shows every request it receives, or use your own app's HTTPS URL. It must answer with a 2xx status and be reachable from the public internet.",
+        because: "GreatWait calls the URL you give it. Don't send real data to a public tester.",
         id: "receiver",
-        title: "An HTTPS receiver you control",
+        title: "A URL to call",
     },
 ];
 export const FIRST_VALUE_VARIABLES = [

package/dist/identity.d.ts

@@ -71,8 +71,8 @@ export type MembershipRole = z.infer<typeof membershipRoleSchema>;
  */
 export declare const MEMBERSHIP_STATUSES: readonly ["active", "suspended", "removed"];
 export declare const membershipStatusSchema: import("zod").ZodEnum<{
-    active: "active";
     removed: "removed";
+    active: "active";
     suspended: "suspended";
 }>;
 export type MembershipStatus = z.infer<typeof membershipStatusSchema>;
@@ -105,8 +105,8 @@ export declare const membershipSchema: import("zod").ZodObject<{
         billing: "billing";
     }>;
     status: import("zod").ZodEnum<{
-        active: "active";
         removed: "removed";
+        active: "active";
         suspended: "suspended";
     }>;
     user: import("zod").ZodString;
@@ -147,8 +147,8 @@ export declare const membershipChangeSchema: import("zod").ZodObject<{
         billing: "billing";
     }>;
     status: import("zod").ZodEnum<{
-        active: "active";
         removed: "removed";
+        active: "active";
         suspended: "suspended";
     }>;
     user: import("zod").ZodString;

package/dist/index.d.ts

@@ -14,7 +14,7 @@ export { CHANGE_KINDS, CHANGE_OPERATIONS, CHANGE_SUBJECTS, CONTRACT_VERSION, ass
 export { WORKSPACE_LAYERS, scaffoldProblemSchema, scaffoldVersionSchema, toolDescriptorSchema, toolListSchema, workspaceIdentitySchema, workspaceLayerSchema, workspaceScaffoldSchema, type ScaffoldProblem, type ScaffoldVersion, type ToolDescriptor, type ToolList, type WorkspaceIdentity, type WorkspaceLayer, type WorkspaceScaffold, } from "./workspace.js";
 export { MOCK_BEHAVIORS, MOCK_HEADERS, OPERATIONS, UNIVERSAL_PROBLEMS, AUTHENTICATED_PROBLEMS, SCOPED_PROBLEMS, findOperation, fixtureListSchema, mockBehaviorSchema, mockScenarioRequestSchema, mockScenarioResponseSchema, operationsFor, problemsFor, requestSchemaFor, responseSchemaFor, successStatusFor, type FixtureList, type McpDisposition, type MockBehavior, type MockScenarioRequest, type MockScenarioResponse, type OperationDefinition, type OperationId, type OperationRequestBody, type OperationSurface, } from "./operations.js";
 export { PROJECT_LIST_LIMIT, PROJECT_STATUSES, environmentSchema, organizationSchema, projectCreateRequestSchema, projectArchiveRequestSchema, projectDeletedSchema, projectDeletionCountsSchema, projectListSchema, projectNameKey, projectNameSchema, projectSchema, projectStatusSchema, projectSummarySchema, projectUpdateRequestSchema, provisionedProjectSchema, type Environment, type Organization, type Project, type ProjectCreateRequest, type ProjectArchiveRequest, type ProjectDeleted, type ProjectDeletionCounts, type ProjectList, type ProjectStatus, type ProjectSummary, type ProjectUpdateRequest, type ProvisionedProject, } from "./tenancy.js";
-export { ATTEMPT_DURATION_MAX_MS, ATTEMPT_FAILURE_SNIPPET_MAX_LENGTH, ATTEMPT_REMEDIATIONS, ATTEMPT_RESPONSE_HEADER_MAX_LENGTH, ATTEMPT_STATES, CRON_EXPRESSION_MAX_LENGTH, LATENCY_CLASSES, OCCURRENCE_STATES, PARTITION_KEY_MAX_LENGTH, RECURRENCE_REQUEST_FIELDS, SCHEDULE_STATUSES, SCHEDULING_BOUNDS, TERMINAL_OCCURRENCE_STATES, TERMINAL_SCHEDULE_STATUSES, attemptFailureSnippetSchema, attemptResponseHeaderSchema, attemptSchema, attemptDiagnosticSchema, attemptPageSchema, attemptRemediationSchema, attemptStateForResponse, attemptStateSchema, attemptTriggerSchema, attemptViewSchema, cronExpressionSchema, DELIVERY_COMPLETION_MODES, DELIVERY_DURATION_TIERS, MAX_DELIVERY_DURATION_SECONDS, RESPONSE_DELIVERY_MAX_DURATION_SECONDS, DELIVERY_OVERLAP_POLICIES, DEFAULT_DELIVERY_DURATION_SECONDS, DEFAULT_DELIVERY_OVERLAP_POLICY, FREE_DELIVERY_DURATION_SECONDS, DEFAULT_ONE_SHOT_MAX_STALENESS_SECONDS, LATENESS_POLICIES, isLongRunningDuration, deliveryCompletionModeSchema, deliveryDurationSecondsSchema, deliveryOverlapPolicySchema, type DeliveryCompletionMode, type DeliveryOverlapPolicy, deriveDeliverySettings, deriveLatencyClass, deriveLatenessSettings, defaultLatenessPolicyForRecurrence, generationSchema, isTerminalOccurrenceState, isTerminalScheduleStatus, latencyClassSchema, latenessPolicySchema, occurrenceSchema, occurrencePageSchema, parseProjectOccurrenceListRequest, projectOccurrenceCursorBinding, projectOccurrenceListRequestSchema, projectOccurrencePageSchema, occurrenceStateSchema, occurrenceViewSchema, partitionKeySchema, remediationForAttempt, recurrenceSchema, scheduleNameSchema, scheduleLatenessRequestSchema, scheduleLatenessSchema, schedulePageSchema, scheduleRequestSchema, scheduleSchema, scheduleStatusSchema, scheduleViewSchema, scheduleWrittenViewSchema, type Attempt, type AttemptFailureSnippet, type AttemptResponseHeader, type AttemptDiagnostic, type AttemptPage, type AttemptRemediation, type AttemptState, type AttemptTrigger, type AttemptView, type CronExpression, type Generation, type DeliverySettings, type LatencyClass, type LatenessPolicy, type LatenessSettings, type Occurrence, type OccurrencePage, type ProjectOccurrenceListRequest, type ProjectOccurrenceListRequestParse, type ProjectOccurrencePage, type OccurrenceState, type OccurrenceView, type PartitionKey, type Recurrence, type Schedule, type ScheduleLatenessRequest, type SchedulePage, type ScheduleRequest, type ScheduleStatus, type ScheduleView, type ScheduleWrittenView, } from "./scheduling.js";
+export { ATTEMPT_DURATION_MAX_MS, ATTEMPT_FAILURE_SNIPPET_MAX_LENGTH, ATTEMPT_REMEDIATIONS, ATTEMPT_RESPONSE_HEADER_MAX_LENGTH, ATTEMPT_STATES, CRON_EXPRESSION_MAX_LENGTH, LATENCY_CLASSES, OCCURRENCE_STATES, PARTITION_KEY_MAX_LENGTH, RECURRENCE_REQUEST_FIELDS, SCHEDULE_STATUSES, SCHEDULING_BOUNDS, TERMINAL_OCCURRENCE_STATES, TERMINAL_SCHEDULE_STATUSES, attemptFailureSnippetSchema, attemptResponseHeaderSchema, attemptSchema, attemptResponseSchema, attemptRequestSchema, type AttemptResponse, type AttemptRequest, attemptDiagnosticSchema, attemptPageSchema, attemptRemediationSchema, attemptStateForResponse, attemptStateSchema, attemptTriggerSchema, attemptViewSchema, cronExpressionSchema, DELIVERY_COMPLETION_MODES, DELIVERY_DURATION_TIERS, MAX_DELIVERY_DURATION_SECONDS, RESPONSE_DELIVERY_MAX_DURATION_SECONDS, DELIVERY_OVERLAP_POLICIES, DEFAULT_DELIVERY_DURATION_SECONDS, DEFAULT_DELIVERY_OVERLAP_POLICY, FREE_DELIVERY_DURATION_SECONDS, DEFAULT_ONE_SHOT_MAX_STALENESS_SECONDS, LATENESS_POLICIES, isLongRunningDuration, deliveryCompletionModeSchema, deliveryDurationSecondsSchema, deliveryOverlapPolicySchema, type DeliveryCompletionMode, type DeliveryOverlapPolicy, deriveDeliverySettings, deriveLatencyClass, deriveLatenessSettings, defaultLatenessPolicyForRecurrence, generationSchema, isTerminalOccurrenceState, isTerminalScheduleStatus, latencyClassSchema, latenessPolicySchema, occurrenceSchema, occurrencePageSchema, parseProjectOccurrenceListRequest, projectOccurrenceCursorBinding, projectOccurrenceListRequestSchema, projectOccurrencePageSchema, occurrenceStateSchema, occurrenceViewSchema, partitionKeySchema, remediationForAttempt, recurrenceSchema, DEFAULT_AUTO_PAUSE_AFTER_FAILURES, autoPauseAfterFailuresSchema, autoPauseReasonSchema, type AutoPauseAfterFailures, type AutoPauseReason, scheduleNameSchema, scheduleLatenessRequestSchema, scheduleLatenessSchema, schedulePageSchema, scheduleRequestSchema, scheduleSchema, scheduleStatusSchema, scheduleViewSchema, scheduleWrittenViewSchema, type Attempt, type AttemptFailureSnippet, type AttemptResponseHeader, type AttemptDiagnostic, type AttemptPage, type AttemptRemediation, type AttemptState, type AttemptTrigger, type AttemptView, type CronExpression, type Generation, type DeliverySettings, type LatencyClass, type LatenessPolicy, type LatenessSettings, type Occurrence, type OccurrencePage, type ProjectOccurrenceListRequest, type ProjectOccurrenceListRequestParse, type ProjectOccurrencePage, type OccurrenceState, type OccurrenceView, type PartitionKey, type Recurrence, type Schedule, type ScheduleLatenessRequest, type SchedulePage, type ScheduleRequest, type ScheduleStatus, type ScheduleView, type ScheduleWrittenView, } from "./scheduling.js";
 export { portableAttemptRecordSchema, portableEncryptedPayloadRecordSchema, portableOccurrenceRecordSchema, portableReceiptRecordSchema, portableScheduleRecordSchema, portableSchedulingRecordSetSchema, type PortableAttemptRecord, type PortableEncryptedPayloadRecord, type PortableOccurrenceRecord, type PortableReceiptRecord, type PortableScheduleRecord, type PortableSchedulingRecordSet, } from "./scheduling-records.js";
 export { ROLE_SCOPE_CEILINGS, capScopesToRole, ceilingForRole, credentialScopes, grantableScopes, policyMatrix, roleAllows, roleCanPerform, type PolicyMatrixRow, } from "./policy.js";
 export { ACCESS_TOKEN_PATTERN, ACCESS_TOKEN_TTL_SECONDS, AUTHORIZATION_CODE_PATTERN, AUTHORIZATION_CODE_TTL_SECONDS, AUTHORIZATION_REQUEST_TTL_SECONDS, MAX_REDIRECT_URIS, OAUTH_ERRORS, OAUTH_ERROR_STATUS, OAUTH_GRANT_STATUSES, OAUTH_GRANT_TYPES, OAUTH_RESPONSE_TYPES, OAUTH_REVOCATION_REASONS, OAUTH_ROUTES, OAUTH_SECRET_PATTERN, OAUTH_TOKEN_NAMESPACE_LENGTH, OAUTH_TOKEN_SECRET_LENGTH, PKCE_CHALLENGE_PATTERN, PKCE_METHODS, PKCE_VERIFIER_PATTERN, REFRESH_TOKEN_PATTERN, REFRESH_TOKEN_TTL_SECONDS, TOKEN_ENDPOINT_AUTH_METHODS, authorizationParametersSchema, authorizationServerMetadataSchema, bearerChallenge, clientRegistrationRequestSchema, clientRegistrationSchema, consentDecisionSchema, consentOutcomeSchema, consentPromptSchema, formatScopeString, isLoopbackRedirect, oauthError, oauthErrorCodeSchema, oauthErrorSchema, oauthGrantListSchema, oauthGrantRevokedSchema, oauthGrantSchema, oauthGrantStatusSchema, oauthGrantTypeSchema, oauthRevocationReasonSchema, parseScopeString, pkceMethodSchema, protectedResourceMetadataSchema, redirectUriSchema, revocationRequestSchema, tokenRequestSchema, tokenResponseSchema, type AuthorizationParameters, type AuthorizationServerMetadata, type ClientRegistration, type ClientRegistrationRequest, type ConsentDecision, type ConsentOutcome, type ConsentPrompt, type OAuthErrorBody, type OAuthErrorCode, type OAuthGrant, type OAuthGrantList, type OAuthGrantRevoked, type OAuthGrantStatus, type OAuthGrantType, type OAuthRevocationReason, type ProtectedResourceMetadata, type RevocationRequest, type TokenRequest, type TokenResponse, } from "./oauth.js";
@@ -32,3 +32,5 @@ export { PROJECT_BILLING_ACTIONS, projectBillingQuoteRequestSchema, projectBilli
 export { effectiveCustomerLimitsSchema, type EffectiveCustomerLimits, } from "./effective-limits.js";
 export * from "./members.js";
 export * from "./http-request.js";
+export { sanitizedDiagnosticText, diagnosticBodyText, responseBodySentence, requestCaptureSentence, attemptStatusGuidance, } from "./attempt-diagnostics.js";
+export { PROJECT_NOTIFICATION_OPERATIONS, notificationEmailRecipientsSchema, notificationEmailSettingsSchema, statusWebhookEventSchema, statusWebhookConfigurationSchema, projectNotificationSettingsSchema, projectNotificationSettingsUpdateRequestSchema, statusSigningKeyRequestSchema, statusSigningKeyCreatedSchema, statusWebhookPayloadSchema, statusWebhookDeliverySchema, statusWebhookDeliveryPageSchema, type ProjectNotificationSettings, type ProjectNotificationSettingsUpdateRequest, type StatusSigningKeyCreated, type StatusWebhookEvent, type StatusWebhookPayload, type StatusWebhookDelivery, type StatusWebhookDeliveryPage, } from "./project-notifications.js";

package/dist/index.js

@@ -14,7 +14,7 @@ export { CHANGE_KINDS, CHANGE_OPERATIONS, CHANGE_SUBJECTS, CONTRACT_VERSION, ass
 export { WORKSPACE_LAYERS, scaffoldProblemSchema, scaffoldVersionSchema, toolDescriptorSchema, toolListSchema, workspaceIdentitySchema, workspaceLayerSchema, workspaceScaffoldSchema, } from "./workspace.js";
 export { MOCK_BEHAVIORS, MOCK_HEADERS, OPERATIONS, UNIVERSAL_PROBLEMS, AUTHENTICATED_PROBLEMS, SCOPED_PROBLEMS, findOperation, fixtureListSchema, mockBehaviorSchema, mockScenarioRequestSchema, mockScenarioResponseSchema, operationsFor, problemsFor, requestSchemaFor, responseSchemaFor, successStatusFor, } from "./operations.js";
 export { PROJECT_LIST_LIMIT, PROJECT_STATUSES, environmentSchema, organizationSchema, projectCreateRequestSchema, projectArchiveRequestSchema, projectDeletedSchema, projectDeletionCountsSchema, projectListSchema, projectNameKey, projectNameSchema, projectSchema, projectStatusSchema, projectSummarySchema, projectUpdateRequestSchema, provisionedProjectSchema, } from "./tenancy.js";
-export { ATTEMPT_DURATION_MAX_MS, ATTEMPT_FAILURE_SNIPPET_MAX_LENGTH, ATTEMPT_REMEDIATIONS, ATTEMPT_RESPONSE_HEADER_MAX_LENGTH, ATTEMPT_STATES, CRON_EXPRESSION_MAX_LENGTH, LATENCY_CLASSES, OCCURRENCE_STATES, PARTITION_KEY_MAX_LENGTH, RECURRENCE_REQUEST_FIELDS, SCHEDULE_STATUSES, SCHEDULING_BOUNDS, TERMINAL_OCCURRENCE_STATES, TERMINAL_SCHEDULE_STATUSES, attemptFailureSnippetSchema, attemptResponseHeaderSchema, attemptSchema, attemptDiagnosticSchema, attemptPageSchema, attemptRemediationSchema, attemptStateForResponse, attemptStateSchema, attemptTriggerSchema, attemptViewSchema, cronExpressionSchema, DELIVERY_COMPLETION_MODES, DELIVERY_DURATION_TIERS, MAX_DELIVERY_DURATION_SECONDS, RESPONSE_DELIVERY_MAX_DURATION_SECONDS, DELIVERY_OVERLAP_POLICIES, DEFAULT_DELIVERY_DURATION_SECONDS, DEFAULT_DELIVERY_OVERLAP_POLICY, FREE_DELIVERY_DURATION_SECONDS, DEFAULT_ONE_SHOT_MAX_STALENESS_SECONDS, LATENESS_POLICIES, isLongRunningDuration, deliveryCompletionModeSchema, deliveryDurationSecondsSchema, deliveryOverlapPolicySchema, deriveDeliverySettings, deriveLatencyClass, deriveLatenessSettings, defaultLatenessPolicyForRecurrence, generationSchema, isTerminalOccurrenceState, isTerminalScheduleStatus, latencyClassSchema, latenessPolicySchema, occurrenceSchema, occurrencePageSchema, parseProjectOccurrenceListRequest, projectOccurrenceCursorBinding, projectOccurrenceListRequestSchema, projectOccurrencePageSchema, occurrenceStateSchema, occurrenceViewSchema, partitionKeySchema, remediationForAttempt, recurrenceSchema, scheduleNameSchema, scheduleLatenessRequestSchema, scheduleLatenessSchema, schedulePageSchema, scheduleRequestSchema, scheduleSchema, scheduleStatusSchema, scheduleViewSchema, scheduleWrittenViewSchema, } from "./scheduling.js";
+export { ATTEMPT_DURATION_MAX_MS, ATTEMPT_FAILURE_SNIPPET_MAX_LENGTH, ATTEMPT_REMEDIATIONS, ATTEMPT_RESPONSE_HEADER_MAX_LENGTH, ATTEMPT_STATES, CRON_EXPRESSION_MAX_LENGTH, LATENCY_CLASSES, OCCURRENCE_STATES, PARTITION_KEY_MAX_LENGTH, RECURRENCE_REQUEST_FIELDS, SCHEDULE_STATUSES, SCHEDULING_BOUNDS, TERMINAL_OCCURRENCE_STATES, TERMINAL_SCHEDULE_STATUSES, attemptFailureSnippetSchema, attemptResponseHeaderSchema, attemptSchema, attemptResponseSchema, attemptRequestSchema, attemptDiagnosticSchema, attemptPageSchema, attemptRemediationSchema, attemptStateForResponse, attemptStateSchema, attemptTriggerSchema, attemptViewSchema, cronExpressionSchema, DELIVERY_COMPLETION_MODES, DELIVERY_DURATION_TIERS, MAX_DELIVERY_DURATION_SECONDS, RESPONSE_DELIVERY_MAX_DURATION_SECONDS, DELIVERY_OVERLAP_POLICIES, DEFAULT_DELIVERY_DURATION_SECONDS, DEFAULT_DELIVERY_OVERLAP_POLICY, FREE_DELIVERY_DURATION_SECONDS, DEFAULT_ONE_SHOT_MAX_STALENESS_SECONDS, LATENESS_POLICIES, isLongRunningDuration, deliveryCompletionModeSchema, deliveryDurationSecondsSchema, deliveryOverlapPolicySchema, deriveDeliverySettings, deriveLatencyClass, deriveLatenessSettings, defaultLatenessPolicyForRecurrence, generationSchema, isTerminalOccurrenceState, isTerminalScheduleStatus, latencyClassSchema, latenessPolicySchema, occurrenceSchema, occurrencePageSchema, parseProjectOccurrenceListRequest, projectOccurrenceCursorBinding, projectOccurrenceListRequestSchema, projectOccurrencePageSchema, occurrenceStateSchema, occurrenceViewSchema, partitionKeySchema, remediationForAttempt, recurrenceSchema, DEFAULT_AUTO_PAUSE_AFTER_FAILURES, autoPauseAfterFailuresSchema, autoPauseReasonSchema, scheduleNameSchema, scheduleLatenessRequestSchema, scheduleLatenessSchema, schedulePageSchema, scheduleRequestSchema, scheduleSchema, scheduleStatusSchema, scheduleViewSchema, scheduleWrittenViewSchema, } from "./scheduling.js";
 export { portableAttemptRecordSchema, portableEncryptedPayloadRecordSchema, portableOccurrenceRecordSchema, portableReceiptRecordSchema, portableScheduleRecordSchema, portableSchedulingRecordSetSchema, } from "./scheduling-records.js";
 export { ROLE_SCOPE_CEILINGS, capScopesToRole, ceilingForRole, credentialScopes, grantableScopes, policyMatrix, roleAllows, roleCanPerform, } from "./policy.js";
 export { ACCESS_TOKEN_PATTERN, ACCESS_TOKEN_TTL_SECONDS, AUTHORIZATION_CODE_PATTERN, AUTHORIZATION_CODE_TTL_SECONDS, AUTHORIZATION_REQUEST_TTL_SECONDS, MAX_REDIRECT_URIS, OAUTH_ERRORS, OAUTH_ERROR_STATUS, OAUTH_GRANT_STATUSES, OAUTH_GRANT_TYPES, OAUTH_RESPONSE_TYPES, OAUTH_REVOCATION_REASONS, OAUTH_ROUTES, OAUTH_SECRET_PATTERN, OAUTH_TOKEN_NAMESPACE_LENGTH, OAUTH_TOKEN_SECRET_LENGTH, PKCE_CHALLENGE_PATTERN, PKCE_METHODS, PKCE_VERIFIER_PATTERN, REFRESH_TOKEN_PATTERN, REFRESH_TOKEN_TTL_SECONDS, TOKEN_ENDPOINT_AUTH_METHODS, authorizationParametersSchema, authorizationServerMetadataSchema, bearerChallenge, clientRegistrationRequestSchema, clientRegistrationSchema, consentDecisionSchema, consentOutcomeSchema, consentPromptSchema, formatScopeString, isLoopbackRedirect, oauthError, oauthErrorCodeSchema, oauthErrorSchema, oauthGrantListSchema, oauthGrantRevokedSchema, oauthGrantSchema, oauthGrantStatusSchema, oauthGrantTypeSchema, oauthRevocationReasonSchema, parseScopeString, pkceMethodSchema, protectedResourceMetadataSchema, redirectUriSchema, revocationRequestSchema, tokenRequestSchema, tokenResponseSchema, } from "./oauth.js";
@@ -32,3 +32,5 @@ export { PROJECT_BILLING_ACTIONS, projectBillingQuoteRequestSchema, projectBilli
 export { effectiveCustomerLimitsSchema, } from "./effective-limits.js";
 export * from "./members.js";
 export * from "./http-request.js";
+export { sanitizedDiagnosticText, diagnosticBodyText, responseBodySentence, requestCaptureSentence, attemptStatusGuidance, } from "./attempt-diagnostics.js";
+export { PROJECT_NOTIFICATION_OPERATIONS, notificationEmailRecipientsSchema, notificationEmailSettingsSchema, statusWebhookEventSchema, statusWebhookConfigurationSchema, projectNotificationSettingsSchema, projectNotificationSettingsUpdateRequestSchema, statusSigningKeyRequestSchema, statusSigningKeyCreatedSchema, statusWebhookPayloadSchema, statusWebhookDeliverySchema, statusWebhookDeliveryPageSchema, } from "./project-notifications.js";

package/dist/mcp.d.ts

@@ -116,8 +116,8 @@ export declare const mcpConnectionSchema: import("zod").ZodObject<{
         "usage:read": "usage:read";
     }>>;
     state: import("zod").ZodEnum<{
-        revoked: "revoked";
         expired: "expired";
+        revoked: "revoked";
         usable: "usable";
     }>;
     tools: import("zod").ZodArray<import("zod").ZodString>;