@greatwait/contracts 0.3.0 → 0.3.2

package/dist/tenancy.d.ts

@@ -133,20 +133,19 @@ export declare const provisionedProjectSchema: import("zod").ZodObject<{
     }, import("zod/v4/core").$strip>;
 }, import("zod/v4/core").$strip>;
 export type ProvisionedProject = z.infer<typeof provisionedProjectSchema>;
+/** Exactly what a permanent deletion of the project would destroy now. */
+export declare const projectDeletionCountsSchema: import("zod").ZodObject<{
+    endpoints: import("zod").ZodNumber;
+    keys: import("zod").ZodNumber;
+    runs: import("zod").ZodNumber;
+    schedules: import("zod").ZodNumber;
+}, import("zod/v4/core").$strip>;
 /**
- * What a signed-in member is told about a project they may act in.
+ * One project, with the exact counts a permanent deletion would destroy now.
  *
- * **Not `provisionedProjectSchema`, deliberately.** That shape carries
- * `organization`, `status`, `version` and both environment *identifiers*, and
- * publishing environment ids would make them public names — while nothing on
- * `/v1` takes one: every operation that names an environment names its
- * `kind`. Publishing an identifier no operation accepts invites a client to
- * build on it and then constrains us to keep it.
- *
- * This remains a display aid rather than an authorization control. Whatever the
- * list shows, the authority for a request is re-resolved from the member's
- * organization when the request arrives. Lifecycle state and version make an
- * archived row manageable without making it a valid work target.
+ * Returned by the single-project read (`projects.read`) and by the writes that
+ * answer with the project they changed. Never by the list: see
+ * `projectListItemSchema`.
  */
 export declare const projectSummarySchema: import("zod").ZodObject<{
     createdAt: import("zod").ZodNullable<import("zod").ZodString>;
@@ -169,12 +168,43 @@ export declare const projectSummarySchema: import("zod").ZodObject<{
     version: import("zod").ZodNumber;
 }, import("zod/v4/core").$strip>;
 export type ProjectSummary = z.infer<typeof projectSummarySchema>;
-export declare const projectDeletionCountsSchema: import("zod").ZodObject<{
-    endpoints: import("zod").ZodNumber;
-    keys: import("zod").ZodNumber;
-    runs: import("zod").ZodNumber;
-    schedules: import("zod").ZodNumber;
+/**
+ * What a signed-in member is told about a project they may act in.
+ *
+ * **Not `provisionedProjectSchema`, deliberately.** That shape carries
+ * `organization`, `status`, `version` and both environment *identifiers*, and
+ * publishing environment ids would make them public names — while nothing on
+ * `/v1` takes one: every operation that names an environment names its
+ * `kind`. Publishing an identifier no operation accepts invites a client to
+ * build on it and then constrains us to keep it.
+ *
+ * This remains a display aid rather than an authorization control. Whatever the
+ * list shows, the authority for a request is re-resolved from the member's
+ * organization when the request arrives. Lifecycle state and version make an
+ * archived row manageable without making it a valid work target.
+ *
+ * **No deletion counts (W9-88).** Counting a project's schedules and runs
+ * reads every one of them, so a list that counted every project cost the sum
+ * of the organization's whole history — 2.2 s for an organization with
+ * 290,000 schedules, longer than the API's pool would wait, and the landing
+ * page failed every time. Exact counts are a deletion preview; they belong to
+ * the one project somebody is about to delete: `projectSummarySchema`.
+ */
+export declare const projectListItemSchema: import("zod").ZodObject<{
+    status: import("zod").ZodEnum<{
+        active: "active";
+        archived: "archived";
+    }>;
+    name: import("zod").ZodString;
+    version: import("zod").ZodNumber;
+    id: import("zod").ZodString;
+    createdAt: import("zod").ZodNullable<import("zod").ZodString>;
+    environmentKinds: import("zod").ZodArray<import("zod").ZodEnum<{
+        test: "test";
+        live: "live";
+    }>>;
 }, import("zod/v4/core").$strip>;
+export type ProjectListItem = z.infer<typeof projectListItemSchema>;
 export type ProjectDeletionCounts = z.infer<typeof projectDeletionCountsSchema>;
 /**
  * Every active or archived project the member can access. Administrators see all.
@@ -190,24 +220,18 @@ export type ProjectDeletionCounts = z.infer<typeof projectDeletionCountsSchema>;
 export declare const PROJECT_LIST_LIMIT = 200;
 export declare const projectListSchema: import("zod").ZodObject<{
     data: import("zod").ZodArray<import("zod").ZodObject<{
-        createdAt: import("zod").ZodNullable<import("zod").ZodString>;
-        deletionCounts: import("zod").ZodObject<{
-            endpoints: import("zod").ZodNumber;
-            keys: import("zod").ZodNumber;
-            runs: import("zod").ZodNumber;
-            schedules: import("zod").ZodNumber;
-        }, import("zod/v4/core").$strip>;
-        environmentKinds: import("zod").ZodArray<import("zod").ZodEnum<{
-            test: "test";
-            live: "live";
-        }>>;
-        id: import("zod").ZodString;
-        name: import("zod").ZodString;
         status: import("zod").ZodEnum<{
             active: "active";
             archived: "archived";
         }>;
+        name: import("zod").ZodString;
         version: import("zod").ZodNumber;
+        id: import("zod").ZodString;
+        createdAt: import("zod").ZodNullable<import("zod").ZodString>;
+        environmentKinds: import("zod").ZodArray<import("zod").ZodEnum<{
+            test: "test";
+            live: "live";
+        }>>;
     }, import("zod/v4/core").$strip>>;
     total: import("zod").ZodNumber;
 }, import("zod/v4/core").$strip>;

package/dist/tenancy.js

@@ -116,6 +116,31 @@ export const provisionedProjectSchema = z.object({
         .length(2, "a project has exactly two environments"),
     project: projectSchema,
 });
+/** Exactly what a permanent deletion of the project would destroy now. */
+export const projectDeletionCountsSchema = z.object({
+    endpoints: z.number().int().nonnegative(),
+    keys: z.number().int().nonnegative(),
+    runs: z.number().int().nonnegative(),
+    schedules: z.number().int().nonnegative(),
+});
+/**
+ * One project, with the exact counts a permanent deletion would destroy now.
+ *
+ * Returned by the single-project read (`projects.read`) and by the writes that
+ * answer with the project they changed. Never by the list: see
+ * `projectListItemSchema`.
+ */
+export const projectSummarySchema = z.object({
+    createdAt: timestampSchema.nullable(),
+    deletionCounts: projectDeletionCountsSchema,
+    environmentKinds: z
+        .array(environmentKindSchema)
+        .length(2, "a project has exactly two environments"),
+    id: projectIdSchema,
+    name: projectNameSchema,
+    status: projectStatusSchema.exclude(["deleted"]),
+    version: versionSchema,
+});
 /**
  * What a signed-in member is told about a project they may act in.
  *
@@ -130,24 +155,17 @@ export const provisionedProjectSchema = z.object({
  * list shows, the authority for a request is re-resolved from the member's
  * organization when the request arrives. Lifecycle state and version make an
  * archived row manageable without making it a valid work target.
+ *
+ * **No deletion counts (W9-88).** Counting a project's schedules and runs
+ * reads every one of them, so a list that counted every project cost the sum
+ * of the organization's whole history — 2.2 s for an organization with
+ * 290,000 schedules, longer than the API's pool would wait, and the landing
+ * page failed every time. Exact counts are a deletion preview; they belong to
+ * the one project somebody is about to delete: `projectSummarySchema`.
  */
-export const projectSummarySchema = z.object({
-    createdAt: timestampSchema.nullable(),
-    deletionCounts: z.object({
-        endpoints: z.number().int().nonnegative(),
-        keys: z.number().int().nonnegative(),
-        runs: z.number().int().nonnegative(),
-        schedules: z.number().int().nonnegative(),
-    }),
-    environmentKinds: z
-        .array(environmentKindSchema)
-        .length(2, "a project has exactly two environments"),
-    id: projectIdSchema,
-    name: projectNameSchema,
-    status: projectStatusSchema.exclude(["deleted"]),
-    version: versionSchema,
+export const projectListItemSchema = projectSummarySchema.omit({
+    deletionCounts: true,
 });
-export const projectDeletionCountsSchema = projectSummarySchema.shape.deletionCounts;
 /**
  * Every active or archived project the member can access. Administrators see all.
  *
@@ -162,7 +180,7 @@ export const projectDeletionCountsSchema = projectSummarySchema.shape.deletionCo
 export const PROJECT_LIST_LIMIT = 200;
 export const projectListSchema = z.object({
     data: z
-        .array(projectSummarySchema)
+        .array(projectListItemSchema)
         .max(PROJECT_LIST_LIMIT, "more projects than this response can carry; paging is required"),
     /** Active and archived projects occupy a plan slot; deleted projects do not. */
     total: z.number().int().nonnegative().max(PROJECT_LIST_LIMIT),

package/dist/time.js

@@ -16,7 +16,7 @@ import { z } from "./zod.js";
  * into the instant.
  */
 const RFC3339_UTC_MS = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/u;
-export const timestampSchema = z
+export const timestampSchema = /* @__PURE__ */ (() => z
     .string()
     .regex(RFC3339_UTC_MS, "must be an RFC 3339 UTC timestamp with millisecond precision, e.g. 2026-07-28T15:00:00.000Z")
     // A regex alone is not enough: JavaScript happily "parses" 2026-02-31 and
@@ -28,8 +28,8 @@ export const timestampSchema = z
     const parsed = new Date(value);
     // Guarded because checks still run after the pattern fails, and
     // `toISOString` throws rather than returning NaN on an invalid Date.
-    return !Number.isNaN(parsed.getTime()) && parsed.toISOString() === value;
-}, { message: "must be a real instant on the calendar" });
+    return (!Number.isNaN(parsed.getTime()) && parsed.toISOString() === value);
+}, { message: "must be a real instant on the calendar" }))();
 /** Formats an instant in the one representation the wire accepts. */
 export function toTimestamp(instant) {
     if (Number.isNaN(instant.getTime())) {
@@ -41,10 +41,10 @@ export function toTimestamp(instant) {
  * Durations are whole seconds, never strings. Bounds belong to the resource
  * that uses them; this only fixes the representation.
  */
-export const durationSecondsSchema = z
+export const durationSecondsSchema = /* @__PURE__ */ (() => z
     .number()
     .int("must be a whole number of seconds")
-    .nonnegative("must not be negative");
+    .nonnegative("must not be negative"))();
 let canonicalZones;
 /**
  * The zone identifiers this runtime recognizes, plus `UTC`.
@@ -95,7 +95,7 @@ export function toTimeZone(value) {
     return new Intl.DateTimeFormat("en", { timeZone: value }).resolvedOptions()
         .timeZone;
 }
-export const timeZoneSchema = z
+export const timeZoneSchema = /* @__PURE__ */ (() => z
     .string()
     .min(1)
     .refine((value) => {
@@ -125,4 +125,4 @@ export const timeZoneSchema = z
     // spelling would bump the optimistic version and write a spurious audit
     // diff. Deciding this now is free; after W2 persists the first raw string it
     // is a breaking response change plus a data migration.
-    .transform(toTimeZone);
+    .transform(toTimeZone))();

package/dist/timing.d.ts

@@ -1,4 +1,5 @@
 import { z } from "./zod.js";
+export declare const DELIVERY_TIMING_POLICY_VERSION = "timing-v2-service-bands";
 export declare const DELIVERY_TIMING_TARGETS_MS: readonly [5000, 15000];
 export declare const DELIVERY_TIMING_VERDICTS: readonly ["met", "missed", "unknown"];
 export declare const timingThresholdSummarySchema: import("zod").ZodObject<{
@@ -15,6 +16,26 @@ export declare const timingThresholdSummarySchema: import("zod").ZodObject<{
     withinTargetCount: import("zod").ZodInt;
 }, import("zod/v4/core").$strip>;
 export type TimingThresholdView = z.infer<typeof timingThresholdSummarySchema>;
+/** One concrete band's first-outbound p95 objective, measured from plannedFor. */
+export declare const bandTimingSummarySchema: import("zod").ZodObject<{
+    serviceBand: import("zod").ZodEnum<{
+        short_bulk: "short_bulk";
+        bulk: "bulk";
+        realtime: "realtime";
+    }>;
+    targetMs: import("zod").ZodUnion<readonly [import("zod").ZodLiteral<1000>, import("zod").ZodLiteral<10000>, import("zod").ZodLiteral<60000>]>;
+    breachCount: import("zod").ZodInt;
+    customerBlockedCount: import("zod").ZodInt;
+    eligibleOutstandingBreachCount: import("zod").ZodInt;
+    maturedCount: import("zod").ZodInt;
+    verdict: import("zod").ZodEnum<{
+        unknown: "unknown";
+        met: "met";
+        missed: "missed";
+    }>;
+    withinTargetCount: import("zod").ZodInt;
+}, import("zod/v4/core").$strip>;
+export type BandTimingSummaryView = z.infer<typeof bandTimingSummarySchema>;
 /**
  * Exact rolling 24-hour due-time cohort for one project and timing policy.
  *
@@ -23,6 +44,24 @@ export type TimingThresholdView = z.infer<typeof timingThresholdSummarySchema>;
  * samples only and remain separate from the exact threshold counters.
  */
 export declare const deliveryTimingSummarySchema: import("zod").ZodObject<{
+    bandTargets: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodObject<{
+        serviceBand: import("zod").ZodEnum<{
+            short_bulk: "short_bulk";
+            bulk: "bulk";
+            realtime: "realtime";
+        }>;
+        targetMs: import("zod").ZodUnion<readonly [import("zod").ZodLiteral<1000>, import("zod").ZodLiteral<10000>, import("zod").ZodLiteral<60000>]>;
+        breachCount: import("zod").ZodInt;
+        customerBlockedCount: import("zod").ZodInt;
+        eligibleOutstandingBreachCount: import("zod").ZodInt;
+        maturedCount: import("zod").ZodInt;
+        verdict: import("zod").ZodEnum<{
+            unknown: "unknown";
+            met: "met";
+            missed: "missed";
+        }>;
+        withinTargetCount: import("zod").ZodInt;
+    }, import("zod/v4/core").$strip>>>;
     customerBlockedCount: import("zod").ZodInt;
     deliveredSampleCount: import("zod").ZodInt;
     freshness: import("zod").ZodObject<{

package/dist/timing.js

@@ -1,5 +1,8 @@
 import { z } from "./zod.js";
 import { timestampSchema } from "./time.js";
+import { SERVICE_MODE_POLICY } from "./operational-config.js";
+import { SERVICE_BANDS } from "./service-mode.js";
+export const DELIVERY_TIMING_POLICY_VERSION = "timing-v2-service-bands";
 export const DELIVERY_TIMING_TARGETS_MS = [5_000, 15_000];
 export const DELIVERY_TIMING_VERDICTS = ["met", "missed", "unknown"];
 const integerSchema = z.int();
@@ -49,6 +52,41 @@ export const timingThresholdSummarySchema = z
         });
     }
 });
+/** One concrete band's first-outbound p95 objective, measured from plannedFor. */
+export const bandTimingSummarySchema = z
+    .object({
+    serviceBand: z.enum(SERVICE_BANDS),
+    targetMs: z.union([
+        z.literal(SERVICE_MODE_POLICY.firstOutboundP95TargetMs.realtime),
+        z.literal(SERVICE_MODE_POLICY.firstOutboundP95TargetMs.short_bulk),
+        z.literal(SERVICE_MODE_POLICY.firstOutboundP95TargetMs.bulk),
+    ]),
+    breachCount: countSchema,
+    customerBlockedCount: countSchema,
+    eligibleOutstandingBreachCount: countSchema,
+    maturedCount: countSchema,
+    verdict: z.enum(DELIVERY_TIMING_VERDICTS),
+    withinTargetCount: countSchema,
+})
+    .superRefine((value, context) => {
+    const matured = BigInt(value.maturedCount);
+    const within = BigInt(value.withinTargetCount);
+    const expected = matured === 0n
+        ? "unknown"
+        : within * 100n >= matured * 95n
+            ? "met"
+            : "missed";
+    if (value.targetMs !==
+        SERVICE_MODE_POLICY.firstOutboundP95TargetMs[value.serviceBand] ||
+        within + BigInt(value.breachCount) !== matured ||
+        value.eligibleOutstandingBreachCount > value.breachCount ||
+        value.verdict !== expected) {
+        context.addIssue({
+            code: z.ZodIssueCode.custom,
+            message: "band target and verdict must match the exact service-band counts",
+        });
+    }
+});
 /**
  * Exact rolling 24-hour due-time cohort for one project and timing policy.
  *
@@ -57,6 +95,19 @@ export const timingThresholdSummarySchema = z
  * samples only and remain separate from the exact threshold counters.
  */
 export const deliveryTimingSummarySchema = z.object({
+    /** Present on timing-v2: banded work is judged here, legacy work in targets. */
+    bandTargets: z
+        .array(bandTimingSummarySchema)
+        .length(3)
+        .superRefine((targets, context) => {
+        if (targets.some((target, index) => target.serviceBand !== SERVICE_BANDS[index])) {
+            context.addIssue({
+                code: z.ZodIssueCode.custom,
+                message: "band targets must contain realtime, short_bulk and bulk in order",
+            });
+        }
+    })
+        .optional(),
     customerBlockedCount: countSchema,
     deliveredSampleCount: countSchema,
     freshness: z.object({ kind: z.literal("authoritative") }),

package/dist/zod-values.d.ts

@@ -1,3 +1,3 @@
-/** The exact Zod constructors used by delivery-runtime contract modules. */
+/** The exact Zod constructors the contract modules use. */
 export { ZodError, ZodIssueCode, array, boolean, discriminatedUnion, enum, int, json, literal, number, never, object, partialRecord, record, strictObject, string, toJSONSchema, tuple, union, unknown, url, } from "zod";
 export type { RefinementCtx, ZodType, ZodTypeAny, infer, input } from "zod";

package/dist/zod-values.js

@@ -1,2 +1,2 @@
-/** The exact Zod constructors used by delivery-runtime contract modules. */
+/** The exact Zod constructors the contract modules use. */
 export { ZodError, ZodIssueCode, array, boolean, discriminatedUnion, enum, int, json, literal, number, never, object, partialRecord, record, strictObject, string, toJSONSchema, tuple, union, unknown, url, } from "zod";

package/dist/zod.d.ts

@@ -1,2 +1,2 @@
-/** Tree-shakeable namespace for delivery-runtime contract modules. */
+/** Tree-shakeable Zod namespace for the contract modules. */
 export * as z from "./zod-values.js";

package/dist/zod.js

@@ -1,2 +1,2 @@
-/** Tree-shakeable namespace for delivery-runtime contract modules. */
+/** Tree-shakeable Zod namespace for the contract modules. */
 export * as z from "./zod-values.js";

package/generated/v1/examples/billing.noticesdismiss.request.json

@@ -0,0 +1,3 @@
+{
+  "through": "2026-09-10T12:00:00.000Z"
+}

package/generated/v1/examples/billing.noticesdismiss.response.json

@@ -0,0 +1,6 @@
+{
+  "dismissed": 3,
+  "freshness": {
+    "kind": "authoritative"
+  }
+}

package/generated/v1/examples/billing.reconcile.response.json

@@ -3,6 +3,18 @@
     "boundary": "2026-09-01T00:00:00.000Z",
     "mode": "shadow"
   },
+  "attemptPrice": {
+    "bulk": {
+      "currency": "USD",
+      "microdollars": "10",
+      "scale": 6
+    },
+    "realtime": {
+      "currency": "USD",
+      "microdollars": "10",
+      "scale": 6
+    }
+  },
   "blockingReasons": [],
   "budgetPolicy": {
     "desired": {

package/generated/v1/examples/billing.summary.response.json

@@ -3,6 +3,18 @@
     "boundary": "2026-09-01T00:00:00.000Z",
     "mode": "shadow"
   },
+  "attemptPrice": {
+    "bulk": {
+      "currency": "USD",
+      "microdollars": "10",
+      "scale": 6
+    },
+    "realtime": {
+      "currency": "USD",
+      "microdollars": "10",
+      "scale": 6
+    }
+  },
   "blockingReasons": [],
   "budgetPolicy": {
     "desired": {

package/generated/v1/examples/executions.list.response.json

@@ -6,6 +6,7 @@
       "id": "occ_01h8xyz9k2m4n6p8r0t2v4w6y8",
       "plannedFor": "2026-07-28T15:00:00.000Z",
       "schedule": "sch_01h8xyz9k2m4n6p8r0t2v4w6y8",
+      "scheduleName": "Nightly report",
       "sequence": 1,
       "settledAt": "2026-07-28T15:00:01.000Z",
       "state": "succeeded"

package/generated/v1/examples/limits.read.response.json

@@ -1,6 +1,6 @@
 {
   "limits": {
-    "inlinePayloadBytes": 65536,
+    "inlinePayloadBytes": 8192,
     "forecastHorizonSeconds": 90000,
     "usageWindowDays": 366
   },

package/generated/v1/examples/projectnotifications.rotateSigningKey.response.json

@@ -13,6 +13,7 @@
     "statusWebhook": {
       "url": "https://hooks.example.com/status",
       "events": ["failed"],
+      "endpoint": "ep_01h8xyz9k2m4n6p8r0t2v4w6y8",
       "signingKey": {
         "id": "csk_01h8xyz9k2m4n6p8r0t2v4w6y8"
       },

package/generated/v1/examples/projects.list.response.json

@@ -2,12 +2,6 @@
   "data": [
     {
       "createdAt": "2026-08-14T11:00:00.000Z",
-      "deletionCounts": {
-        "endpoints": 2,
-        "keys": 4,
-        "runs": 37,
-        "schedules": 5
-      },
       "environmentKinds": ["test", "live"],
       "id": "proj_01h8xyz9k2m4n6p8r0t2v4w6y8",
       "name": "Billing reminders",

package/generated/v1/examples/projects.read.response.json

@@ -0,0 +1,14 @@
+{
+  "createdAt": "2026-08-14T11:00:00.000Z",
+  "deletionCounts": {
+    "endpoints": 2,
+    "keys": 4,
+    "runs": 37,
+    "schedules": 5
+  },
+  "environmentKinds": ["test", "live"],
+  "id": "proj_01h8xyz9k2m4n6p8r0t2v4w6y8",
+  "name": "Billing reminders",
+  "status": "archived",
+  "version": 2
+}

package/generated/v1/examples/schedules.list.response.json

@@ -18,9 +18,7 @@
     }
   ],
   "freshness": {
-    "asOf": "2026-07-28T15:00:00.000Z",
-    "kind": "projected",
-    "lagSeconds": 0
+    "kind": "authoritative"
   },
   "nextCursor": "eyJhIjoxNzg1MjUwODAwMDAwLCJpIjoic2NoXzAxaDh4eXo5azJtNG42cDhyMHQydjR3Nnk4IiwiayI6Ijk1MTM1NDZmIn0"
 }