@greatwait/contracts 0.3.0 → 0.3.1

package/dist/attempt-search.js

@@ -3,9 +3,9 @@ import { pageRequestSchema, pageSchema } from "./protocol.js";
 import { endpointIdSchema, scheduleIdSchema } from "./identifiers.js";
 import { externalIdentifierSchema, scheduleTagSchema, scheduleTagsSchema, } from "./host-correlation.js";
 import { timestampSchema } from "./time.js";
-import { attemptSchema, attemptStateSchema, attemptDiagnosticSchema, occurrenceSchema, scheduleNameSchema, } from "./scheduling.js";
+import { attemptSearchSummaryShape, attemptStateSchema, attemptDiagnosticSchema, occurrenceSchema, scheduleNameSchema, } from "./scheduling.js";
 /** Actual attempt start, never occurrence planned time. Boundaries are [start, end). */
-export const projectAttemptSearchRequestSchema = pageRequestSchema
+export const projectAttemptSearchRequestSchema = /* @__PURE__ */ (() => pageRequestSchema
     .extend({
     startedFrom: timestampSchema,
     startedBefore: timestampSchema,
@@ -21,7 +21,7 @@ export const projectAttemptSearchRequestSchema = pageRequestSchema
     .refine((value) => Date.parse(value.startedFrom) < Date.parse(value.startedBefore), {
     message: "must be later than startedFrom",
     path: ["startedBefore"],
-});
+}))();
 export function normalizeAttemptSelection(request) {
     return Object.fromEntries(Object.entries(request).filter(([key, value]) => key !== "cursor" && key !== "limit" && value !== undefined));
 }
@@ -68,19 +68,19 @@ export function parseProjectAttemptSearchRequest(query) {
         };
 }
 /** Safe search summary: content and secret-bearing HTTP evidence is detail-only. */
-export const projectAttemptSearchResultSchema = z.object({
+export const projectAttemptSearchResultSchema = /* @__PURE__ */ (() => z.object({
     attempt: z.object({
-        id: attemptSchema.shape.id,
-        attemptNumber: attemptSchema.shape.attemptNumber,
-        occurrence: attemptSchema.shape.occurrence,
-        startedAt: attemptSchema.shape.startedAt,
-        state: attemptSchema.shape.state,
-        classifiedAt: attemptSchema.shape.classifiedAt,
-        durationMs: attemptSchema.shape.durationMs,
-        responseStatus: attemptSchema.shape.responseStatus,
-        diagnostic: attemptSchema.shape.diagnostic,
-        remediation: attemptSchema.shape.remediation,
-        trigger: attemptSchema.shape.trigger,
+        id: attemptSearchSummaryShape.id,
+        attemptNumber: attemptSearchSummaryShape.attemptNumber,
+        occurrence: attemptSearchSummaryShape.occurrence,
+        startedAt: attemptSearchSummaryShape.startedAt,
+        state: attemptSearchSummaryShape.state,
+        classifiedAt: attemptSearchSummaryShape.classifiedAt,
+        durationMs: attemptSearchSummaryShape.durationMs,
+        responseStatus: attemptSearchSummaryShape.responseStatus,
+        diagnostic: attemptSearchSummaryShape.diagnostic,
+        remediation: attemptSearchSummaryShape.remediation,
+        trigger: attemptSearchSummaryShape.trigger,
     }),
     occurrence: occurrenceSchema,
     schedule: z.object({
@@ -90,9 +90,12 @@ export const projectAttemptSearchResultSchema = z.object({
         external_identifier: externalIdentifierSchema.optional(),
         tags: scheduleTagsSchema.optional(),
     }),
-});
-export const projectAttemptPageSchema = pageSchema(projectAttemptSearchResultSchema).extend({
+}))();
+export const projectAttemptPageSchema = /* @__PURE__ */ (() => pageSchema(projectAttemptSearchResultSchema).extend({
     freshness: z.object({ kind: z.literal("authoritative") }),
     /** Normal plan horizons; older live/retained records may still be returned. */
-    retention: z.object({ from: timestampSchema, detailsFrom: timestampSchema }),
-});
+    retention: z.object({
+        from: timestampSchema,
+        detailsFrom: timestampSchema,
+    }),
+}))();

package/dist/authority.js

@@ -26,13 +26,13 @@ import { environmentIdSchema, organizationIdSchema, projectIdSchema, } from "./i
  * third if one is ever added.
  */
 export const ENVIRONMENT_KINDS_IN_ORDER = ["test", "live"];
-export const environmentKindSchema = z.enum(ENVIRONMENT_KINDS_IN_ORDER);
-export const authoritySchema = z.object({
+export const environmentKindSchema = /* @__PURE__ */ (() => z.enum(ENVIRONMENT_KINDS_IN_ORDER))();
+export const authoritySchema = /* @__PURE__ */ (() => z.object({
     environment: environmentIdSchema,
     environmentKind: environmentKindSchema,
     organization: organizationIdSchema,
     project: projectIdSchema,
-});
+}))();
 /**
  * The initial scope vocabulary. Scopes are `resource:action`, lower case, and
  * additive — a new scope is a compatible change, removing or narrowing one is
@@ -126,7 +126,7 @@ export const SCOPES = [
      */
     "usage:read",
 ];
-export const scopeSchema = z.enum(SCOPES);
+export const scopeSchema = /* @__PURE__ */ (() => z.enum(SCOPES))();
 /** Read scopes implied by the matching write scope. */
 const IMPLIED_BY_WRITE = {
     "credentials:write": "credentials:read",
@@ -170,13 +170,13 @@ export function effectiveScopes(granted) {
  *   gives for one that does not exist.
  */
 export const PRINCIPAL_KINDS = ["api-credential", "oauth", "session"];
-export const principalKindSchema = z.enum(PRINCIPAL_KINDS);
-export const principalSchema = z.object({
+export const principalKindSchema = /* @__PURE__ */ (() => z.enum(PRINCIPAL_KINDS))();
+export const principalSchema = /* @__PURE__ */ (() => z.object({
     authority: authoritySchema,
     scopes: z.array(scopeSchema).min(1),
     /** How the principal was established, for audit and refusal messages. */
     via: principalKindSchema,
-});
+}))();
 /**
  * Whether a principal may act on an already-resolved resource.
  *
@@ -298,10 +298,10 @@ export const SESSION_AUTHORITY_HEADERS = {
  * know whether a scope is implied can apply the same published expansion the
  * service does.
  */
-export const credentialContextSchema = z.object({
+export const credentialContextSchema = /* @__PURE__ */ (() => z.object({
     environmentKind: environmentKindSchema,
     /** How this credential authenticated. Never `session`: see the operation. */
     principal: z.enum(["api-credential", "oauth"]),
     project: projectIdSchema,
     scopes: z.array(scopeSchema).min(1),
-});
+}))();

package/dist/configuration.d.ts

@@ -51,6 +51,10 @@ export interface ConfigurationSetting {
     readonly exhaustion: string;
     readonly visibility: "customer";
 }
+/** Bounds and edit authority shared by validation and the descriptive catalog. */
+export type ConfigurationRule = Pick<ConfigurationSetting, "key" | "unit" | "minimum" | "maximum" | "layers">;
+export declare const CONFIGURATION_RULES: readonly ConfigurationRule[];
+/** Descriptive metadata is only initialized by catalog consumers. */
 export declare const CONFIGURATION_CATALOG: readonly ConfigurationSetting[];
 export declare function validateConfigurationValues(value: unknown, scope: ConfigurationScope): ConfigurationValues;
 export interface EffectiveConfiguration {

package/dist/configuration.js

@@ -24,7 +24,7 @@ export const CONFIGURATION_DEFAULTS = Object.freeze({
 });
 const allowanceLayers = ["default", "global", "organization"];
 const deploymentLayers = ["default", "deployment"];
-export const CONFIGURATION_CATALOG = Object.freeze([
+export const CONFIGURATION_RULES = Object.freeze([
     ...[
         "bulkMaxTargets",
         "bulkExecutionLifetimeSeconds",
@@ -37,72 +37,38 @@ export const CONFIGURATION_CATALOG = Object.freeze([
         "bulkCarrierBatchSize",
     ].map((key) => ({
         key,
-        type: "integer",
         unit: key.endsWith("Seconds") ? "seconds" : "count",
-        default: CONFIGURATION_DEFAULTS[key],
         minimum: 1,
         maximum: BULK_CONFIGURATION_MAXIMA[key],
         layers: allowanceLayers,
-        change: "live",
-        visibility: "customer",
-        rationale: "Owner-approved bounded bulk preparation and execution. Backlog limits do not increase in-flight work or ordinary delivery quotas; result retention is additionally capped by effective history retention.",
-        enforcement: ["bulk-operations"],
-        exhaustion: "Oversized selections refuse; deadlines expire remaining work; durable checkpoints preserve completed effects.",
     })),
     {
         key: "inlinePayloadBytes",
-        type: "integer",
         unit: "bytes",
-        default: CONFIGURATION_DEFAULTS.inlinePayloadBytes,
         minimum: 0,
         maximum: MAX_INLINE_PAYLOAD_BYTES,
         layers: allowanceLayers,
-        change: "live",
-        rationale: "The operator removed the lower storage allowance. Default is the existing public payload envelope; a deliberate override may narrow it. Unbounded bodies would exceed the existing SQL and receiver representations.",
-        enforcement: ["authority-service", "schedule-draft"],
-        exhaustion: "Local validation and authoritative plan-limit-reached",
-        visibility: "customer",
     },
     {
         key: "partitionKeyCeiling",
-        type: "integer",
         unit: "count",
         minimum: 1,
         maximum: MAX_PARTITION_KEY_CEILING,
         layers: allowanceLayers,
-        change: "live",
-        rationale: "No inherited count cap. A deliberate override uses indexed successor seeks bounded to ceiling plus one; its supported bound preserves the existing transaction work envelope.",
-        enforcement: ["authority-service", "postgres-repository"],
-        exhaustion: "New keys refused; existing keys and committed schedules preserved",
-        visibility: "customer",
     },
     {
         key: "forecastHorizonSeconds",
-        type: "integer",
         unit: "seconds",
-        default: CONFIGURATION_DEFAULTS.forecastHorizonSeconds,
         minimum: 60,
         maximum: MAX_FORECAST_HORIZON_SECONDS,
         layers: allowanceLayers,
-        change: "live",
-        rationale: "The operator removed the six-hour allowance. Default is the existing public forecast horizon; explicit work exhaustion cannot masquerade as complete coverage.",
-        enforcement: ["authority-reads"],
-        exhaustion: "Window clipped; exhausted work returns explicit incomplete refusal",
-        visibility: "customer",
     },
     {
         key: "usageWindowDays",
-        type: "integer",
         unit: "days",
-        default: CONFIGURATION_DEFAULTS.usageWindowDays,
         minimum: 1,
         maximum: MAX_USAGE_WINDOW_DAYS,
         layers: allowanceLayers,
-        change: "live",
-        rationale: "The operator removed the 31-day allowance. Default is the existing public usage envelope; it does not extend retention or restore purged data.",
-        enforcement: ["authority-reads"],
-        exhaustion: "Read window constrained to effective policy",
-        visibility: "customer",
     },
     ...[
         "attemptDetailRetentionSeconds",
@@ -110,32 +76,104 @@ export const CONFIGURATION_CATALOG = Object.freeze([
         "payloadRetentionSeconds",
     ].map((key) => ({
         key,
-        type: "integer",
         unit: "seconds",
-        default: CONFIGURATION_DEFAULTS[key],
         minimum: 0,
         maximum: 9_007_199_254_740,
         layers: deploymentLayers,
-        change: "deployment",
-        rationale: "Accepted retention policy, separately governed. Stored schedule durations preserve committed policy; increases cannot restore purged data.",
-        enforcement: ["authority-service", "authority-reads", "retention"],
-        exhaustion: "Read cutoff and bounded purge; no organization override",
-        visibility: "customer",
     })),
     {
         key: "pageLimit",
-        type: "integer",
         unit: "count",
         minimum: PUBLIC_PAGE_SIZE.min,
         maximum: PUBLIC_PAGE_SIZE.max,
         layers: deploymentLayers,
-        change: "deployment",
-        rationale: "Public page protocol maximum; continuation preserves completeness.",
-        enforcement: ["authority-reads"],
-        exhaustion: "Bounded page with continuation",
-        visibility: "customer",
     },
 ]);
+/** Descriptive metadata is only initialized by catalog consumers. */
+export const CONFIGURATION_CATALOG = 
+/* @__PURE__ */ (() => {
+    const metadata = [
+        ...[
+            "bulkMaxTargets",
+            "bulkExecutionLifetimeSeconds",
+            "bulkPreviewLifetimeSeconds",
+            "bulkResultRetentionSeconds",
+            "bulkBatchSize",
+            "bulkWorkerConcurrency",
+            "bulkActiveJobLimit",
+            "bulkWorkBudgetSeconds",
+            "bulkCarrierBatchSize",
+        ].map((key) => ({
+            key,
+            change: "live",
+            visibility: "customer",
+            rationale: "Owner-approved bounded bulk preparation and execution. Backlog limits do not increase in-flight work or ordinary delivery quotas; result retention is additionally capped by effective history retention.",
+            enforcement: ["bulk-operations"],
+            exhaustion: "Oversized selections refuse; deadlines expire remaining work; durable checkpoints preserve completed effects.",
+        })),
+        {
+            key: "inlinePayloadBytes",
+            change: "live",
+            rationale: "The operator removed the lower storage allowance. Default is the existing public payload envelope; a deliberate override may narrow it. Unbounded bodies would exceed the existing SQL and receiver representations.",
+            enforcement: ["authority-service", "schedule-draft"],
+            exhaustion: "Local validation and authoritative plan-limit-reached",
+            visibility: "customer",
+        },
+        {
+            key: "partitionKeyCeiling",
+            change: "live",
+            rationale: "No inherited count cap. A deliberate override uses indexed successor seeks bounded to ceiling plus one; its supported bound preserves the existing transaction work envelope.",
+            enforcement: ["authority-service", "postgres-repository"],
+            exhaustion: "New keys refused; existing keys and committed schedules preserved",
+            visibility: "customer",
+        },
+        {
+            key: "forecastHorizonSeconds",
+            change: "live",
+            rationale: "The operator removed the six-hour allowance. Default is the existing public forecast horizon; explicit work exhaustion cannot masquerade as complete coverage.",
+            enforcement: ["authority-reads"],
+            exhaustion: "Window clipped; exhausted work returns explicit incomplete refusal",
+            visibility: "customer",
+        },
+        {
+            key: "usageWindowDays",
+            change: "live",
+            rationale: "The operator removed the 31-day allowance. Default is the existing public usage envelope; it does not extend retention or restore purged data.",
+            enforcement: ["authority-reads"],
+            exhaustion: "Read window constrained to effective policy",
+            visibility: "customer",
+        },
+        ...[
+            "attemptDetailRetentionSeconds",
+            "historyRetentionSeconds",
+            "payloadRetentionSeconds",
+        ].map((key) => ({
+            key,
+            change: "deployment",
+            rationale: "Accepted retention policy, separately governed. Stored schedule durations preserve committed policy; increases cannot restore purged data.",
+            enforcement: ["authority-service", "authority-reads", "retention"],
+            exhaustion: "Read cutoff and bounded purge; no organization override",
+            visibility: "customer",
+        })),
+        {
+            key: "pageLimit",
+            change: "deployment",
+            rationale: "Public page protocol maximum; continuation preserves completeness.",
+            enforcement: ["authority-reads"],
+            exhaustion: "Bounded page with continuation",
+            visibility: "customer",
+        },
+    ];
+    const defaults = CONFIGURATION_DEFAULTS;
+    return Object.freeze(metadata.map((entry) => ({
+        ...CONFIGURATION_RULES.find((rule) => rule.key === entry.key),
+        type: "integer",
+        ...(defaults[entry.key] === undefined
+            ? {}
+            : { default: defaults[entry.key] }),
+        ...entry,
+    })));
+})();
 export function validateConfigurationValues(value, scope) {
     if (value === null || typeof value !== "object" || Array.isArray(value))
         throw new TypeError("configuration values must be an object");
@@ -143,7 +181,7 @@ export function validateConfigurationValues(value, scope) {
         throw new TypeError("unsupported configuration scope");
     const parsed = {};
     for (const [key, candidate] of Object.entries(value)) {
-        const definition = CONFIGURATION_CATALOG.find((entry) => entry.key === key);
+        const definition = CONFIGURATION_RULES.find((entry) => entry.key === key);
         if (definition === undefined || !definition.layers.includes(scope))
             throw new TypeError(`configuration setting ${key} does not support ${scope} edits`);
         if (typeof candidate !== "number" ||
@@ -170,7 +208,7 @@ export function resolveEffectiveConfiguration(input) {
     };
     if (input.baseline !== undefined) {
         for (const [key, candidate] of Object.entries(input.baseline)) {
-            const setting = CONFIGURATION_CATALOG.find((entry) => entry.key === key);
+            const setting = CONFIGURATION_RULES.find((entry) => entry.key === key);
             if (setting === undefined ||
                 typeof candidate !== "number" ||
                 !Number.isSafeInteger(candidate) ||

package/dist/delivery.d.ts

@@ -45,6 +45,7 @@ export interface StoredHttpRequest {
     readonly encryptedTemplate?: EncryptedSchedulePayload;
 }
 export declare const HTTP_HEADER_AAD_VERSION: "greatwait.http-header.v1";
+export { mergeStoredHttpHeaders, validScheduleHttp, validStoredHttpHeaders, } from "./stored-http.js";
 export declare const HTTP_TEMPLATE_AAD_VERSION: "greatwait.http-template.v1";
 /**
  * One immutable delivery attempt, minted by the Scheduler Partition from its

package/dist/delivery.js

@@ -8,6 +8,7 @@
  */
 export const SCHEDULE_PAYLOAD_AAD_VERSION = "greatwait.schedule-payload.v1";
 export const HTTP_HEADER_AAD_VERSION = "greatwait.http-header.v1";
+export { mergeStoredHttpHeaders, validScheduleHttp, validStoredHttpHeaders, } from "./stored-http.js";
 export const HTTP_TEMPLATE_AAD_VERSION = "greatwait.http-template.v1";
 /**
  * What a receiver says about work it acknowledged and then finished.

package/dist/endpoints.js

@@ -20,7 +20,7 @@ import { timestampSchema } from "./time.js";
  * nothing to prove.
  */
 export const CALLBACK_ENDPOINT_STATUSES = ["active", "disabled"];
-export const callbackEndpointStatusSchema = z.enum(CALLBACK_ENDPOINT_STATUSES);
+export const callbackEndpointStatusSchema = /* @__PURE__ */ (() => z.enum(CALLBACK_ENDPOINT_STATUSES))();
 /**
  * Why an address could not be resolved or reached: the classification the
  * DNS inspection at create and update, and the delivery egress, share. It
@@ -37,7 +37,7 @@ export const CALLBACK_EGRESS_FAILURES = [
     "timed_out",
     "unexpected_status",
 ];
-export const callbackEgressFailureSchema = z.enum(CALLBACK_EGRESS_FAILURES);
+export const callbackEgressFailureSchema = /* @__PURE__ */ (() => z.enum(CALLBACK_EGRESS_FAILURES))();
 /**
  * @deprecated The former retained endpoint count ceiling. W0-15 removes count
  * enforcement after the operator's decision; DNS/mutation admission and paged
@@ -56,7 +56,7 @@ export const CALLBACK_ADMISSION_RATE_LIMITS = {
 };
 /** Longest period during which a receiver may accept current and next keys. */
 export const CALLBACK_SIGNING_KEY_ROTATION_OVERLAP_SECONDS = 86_400;
-export const callbackSigningKeysSchema = z.object({
+export const callbackSigningKeysSchema = /* @__PURE__ */ (() => z.object({
     current: callbackSigningKeyIdSchema,
     next: z
         .object({
@@ -66,7 +66,7 @@ export const callbackSigningKeysSchema = z.object({
         overlapEndsAt: timestampSchema,
     })
         .optional(),
-});
+}))();
 /**
  * An endpoint's name: unique within its project and environment, compared
  * exactly (W4-14, FXO-2255).
@@ -80,16 +80,16 @@ export const callbackSigningKeysSchema = z.object({
  * "Prod receiver" and "prod receiver" are both allowed. Deliberately unlike a
  * project's name, which ignores case and spacing.
  */
-export const callbackEndpointNameSchema = z
+export const callbackEndpointNameSchema = /* @__PURE__ */ (() => z
     .string()
     .trim()
     .min(1, "must not be blank")
-    .max(2_048, "must be at most 2048 characters");
+    .max(2_048, "must be at most 2048 characters"))();
 /**
  * A metadata-only endpoint shape. The sealed signing secret has no public
  * field, so list/get/update/disable/enable cannot accidentally recover it.
  */
-export const callbackEndpointSchema = z.object({
+export const callbackEndpointSchema = /* @__PURE__ */ (() => z.object({
     headers: z.array(publicHttpHeaderSchema).optional(),
     createdAt: timestampSchema,
     disabledAt: timestampSchema.optional(),
@@ -107,33 +107,33 @@ export const callbackEndpointSchema = z.object({
     updatedAt: timestampSchema,
     url: z.string().url(),
     version: z.number().int().positive(),
-});
-export const callbackEndpointPageSchema = pageSchema(callbackEndpointSchema);
+}))();
+export const callbackEndpointPageSchema = /* @__PURE__ */ (() => pageSchema(callbackEndpointSchema))();
 /** The one response that carries the per-endpoint secret. */
-export const callbackEndpointCreatedSchema = callbackEndpointSchema.extend({
+export const callbackEndpointCreatedSchema = /* @__PURE__ */ (() => callbackEndpointSchema.extend({
     keyId: callbackSigningKeyIdSchema,
     secret: z.string().min(1),
     shownOnce: z.literal(true),
-});
-export const callbackSigningKeyRotationRequestSchema = z.object({
+}))();
+export const callbackSigningKeyRotationRequestSchema = /* @__PURE__ */ (() => z.object({
     overlapSeconds: z
         .number()
         .int()
         .min(0)
         .max(CALLBACK_SIGNING_KEY_ROTATION_OVERLAP_SECONDS, "must not exceed the maximum endpoint-key overlap")
         .optional(),
-});
-export const callbackEndpointRotatedSchema = z.object({
+}))();
+export const callbackEndpointRotatedSchema = /* @__PURE__ */ (() => z.object({
     endpoint: callbackEndpointSchema,
     keyId: callbackSigningKeyIdSchema,
     secret: z.string().min(1),
     shownOnce: z.literal(true),
-});
+}))();
 /** One signing key and the secret behind it, as a signed-in person may see it. */
-export const callbackEndpointSigningSecretSchema = z.object({
+export const callbackEndpointSigningSecretSchema = /* @__PURE__ */ (() => z.object({
     keyId: callbackSigningKeyIdSchema,
     secret: z.string().min(1),
-});
+}))();
 /**
  * What `endpoints.revealSigningSecret` answers (FXO-2244).
  *
@@ -142,14 +142,14 @@ export const callbackEndpointSigningSecretSchema = z.object({
  * rotation both keys are here, with the instant the overlap ends, because a
  * receiver being moved to the new key needs both until then.
  */
-export const callbackEndpointSigningSecretsSchema = z.object({
+export const callbackEndpointSigningSecretsSchema = /* @__PURE__ */ (() => z.object({
     current: callbackEndpointSigningSecretSchema,
     /** The endpoint these belong to, so an answer names what it is about. */
     id: endpointIdSchema,
     next: callbackEndpointSigningSecretSchema
         .extend({ overlapEndsAt: timestampSchema })
         .optional(),
-});
+}))();
 /**
  * Where an endpoint's signing secret is, for a result that does not carry it
  * (W9-44, FXO-2907).
@@ -166,7 +166,7 @@ export const callbackEndpointSigningSecretsSchema = z.object({
  * reader deciding whether it holds a secret should be told so, not left to
  * infer it from what is missing.
  */
-export const signingSecretNoticeSchema = z.object({
+export const signingSecretNoticeSchema = /* @__PURE__ */ (() => z.object({
     /** One sentence an agent can relay to the person it is working for. */
     guidance: z.string().min(1),
     /** Never `true`: these results do not carry the secret. */
@@ -176,7 +176,7 @@ export const signingSecretNoticeSchema = z.object({
      * reveals the secret. Absent only where this deployment has no dashboard.
      */
     revealUrl: z.string().url().optional(),
-});
+}))();
 /**
  * The dashboard path of one endpoint's page, beneath the project and
  * environment it belongs to. The dashboard's router serves it; a test there
@@ -208,11 +208,11 @@ export function signingSecretNotice(target, dashboardOrigin) {
  * Metadata only, like every endpoint read. There is no `secret` field to fill
  * by mistake; the shape is what keeps it out of an agent's history.
  */
-export const callbackEndpointEnsuredSchema = callbackEndpointSchema.extend({
+export const callbackEndpointEnsuredSchema = /* @__PURE__ */ (() => callbackEndpointSchema.extend({
     /** Whether this call created the endpoint, or found one already there. */
     created: z.boolean(),
     signingSecret: signingSecretNoticeSchema,
-});
+}))();
 /**
  * A callback destination as a caller types it: HTTPS on port 443, no
  * credentials or fragment, a public name or address. The DNS half of the
@@ -233,7 +233,7 @@ export function callbackUrlSchema() {
         }
     });
 }
-export const callbackEndpointRequestSchema = z.object({
+export const callbackEndpointRequestSchema = /* @__PURE__ */ (() => z.object({
     headers: endpointHeaderChangesSchema.optional(),
     /**
      * A name for people (W4-14, FXO-2255). Omitted on a create, the endpoint
@@ -243,4 +243,4 @@ export const callbackEndpointRequestSchema = z.object({
      */
     name: callbackEndpointNameSchema.optional(),
     url: callbackUrlSchema(),
-});
+}))();