@greatwait/contracts 0.3.0 → 0.3.2

package/dist/operations.js

@@ -1,6 +1,7 @@
 import { projectAttemptPageSchema, projectAttemptSearchRequestSchema, } from "./attempt-search.js";
 import { BULK_API_OPERATIONS } from "./bulk-operations.js";
 import { effectiveCustomerLimitsSchema } from "./effective-limits.js";
+import { CONFIGURATION_DEFAULTS } from "./configuration.js";
 import { z } from "./zod.js";
 import { MEMBER_OPERATIONS } from "./members.js";
 import { PROJECT_NOTIFICATION_OPERATIONS } from "./project-notifications.js";
@@ -8,15 +9,15 @@ import { DATA_EXPORT_OPERATIONS } from "./data-export.js";
 import { ORGANIZATION_LIFECYCLE_OPERATIONS } from "./organization-lifecycle.js";
 import { API_UNUSED_RESPONSE_SCHEMA } from "./operation-definitions.js";
 import { credentialContextSchema } from "./authority.js";
-import { callbackEndpointCreatedSchema, callbackEndpointEnsuredSchema, callbackEndpointPageSchema, callbackEndpointRequestSchema, callbackEndpointRotatedSchema, callbackEndpointSchema, callbackEndpointSigningSecretsSchema, callbackSigningKeyRotationRequestSchema, } from "./endpoints.js";
+import { callbackEndpointCreatedSchema, callbackEndpointEnsuredSchema, callbackEndpointListRequestSchema, callbackEndpointPageSchema, callbackEndpointRequestSchema, callbackEndpointRotatedSchema, callbackEndpointSchema, callbackEndpointSigningSecretsSchema, callbackSigningKeyRotationRequestSchema, } from "./endpoints.js";
 import { FORECAST_WINDOW_VERSION, forecastRequestSchema, forecastSchema, forecastRequestHeadersSchema, forecastWindowsSchema, } from "./forecast.js";
 import { usageRequestSchema, usageSchema } from "./usage.js";
 import { deliveryTimingSummarySchema } from "./timing.js";
-import { billingAutoTopUpApplyRequestSchema, billingAutoTopUpPreviewRequestSchema, billingAutoTopUpPreviewSchema, billingCeilingUpdateRequestSchema, billingFundingQuoteRequestSchema, billingFundingQuoteSchema, billingFundingViewSchema, billingNoticePageSchema, billingNotificationSettingsSchema, billingNotificationSettingsUpdateRequestSchema, billingLedgerPageSchema, billingLedgerRequestSchema, billingBudgetUpdateRequestHeadersSchema, billingBudgetUpdateRequestSchema, billingBudgetUpdateResponseSchema, billingPurchaseRequestSchema, billingRefundRequestCreateSchema, billingRefundResolutionRequestSchema, billingRefundRequestViewSchema, billingSummarySchema, billingPromotionsSchema, billingRedeemRequestSchema, billingRedeemResponseSchema, projectBillingStateSchema, projectBillingQuoteSchema, projectBillingQuoteRequestSchema, projectBillingChangeRequestSchema, billingPortalSchema, billingInvoiceListSchema, billingPaymentHistoryPageSchema, billingInvoiceHistoryPageSchema, billingPaymentMethodSchema, billingPaymentMethodSetupRequestSchema, billingPaymentMethodConfirmRequestSchema, billingPaymentMethodRemoveRequestSchema, } from "./billing.js";
+import { billingAutoTopUpApplyRequestSchema, billingAutoTopUpPreviewRequestSchema, billingAutoTopUpPreviewSchema, billingCeilingUpdateRequestSchema, billingFundingQuoteRequestSchema, billingFundingQuoteSchema, billingFundingViewSchema, billingNoticeDismissRequestSchema, billingNoticeDismissResultSchema, billingNoticeListRequestSchema, billingNoticePageSchema, billingNotificationSettingsSchema, billingNotificationSettingsUpdateRequestSchema, billingLedgerPageSchema, billingLedgerRequestSchema, billingBudgetUpdateRequestHeadersSchema, billingBudgetUpdateRequestSchema, billingBudgetUpdateResponseSchema, billingPurchaseRequestSchema, billingRefundRequestCreateSchema, billingRefundResolutionRequestSchema, billingRefundRequestViewSchema, billingSummarySchema, billingPromotionsSchema, billingRedeemRequestSchema, billingRedeemResponseSchema, projectBillingStateSchema, projectBillingQuoteSchema, projectBillingQuoteRequestSchema, projectBillingChangeRequestSchema, billingPortalSchema, billingInvoiceListSchema, billingPaymentHistoryPageSchema, billingInvoiceHistoryPageSchema, billingPaymentMethodSchema, billingPaymentMethodSetupRequestSchema, billingPaymentMethodConfirmRequestSchema, billingPaymentMethodRemoveRequestSchema, } from "./billing.js";
 import { conditionalRequestHeaderSchema, idempotencyReplayResponseHeaderSchema, idempotencyRequestHeaderSchema, historyPageRequestSchema, pageRequestSchema, scheduleListRequestSchema, replayedResponseHeaderSchema, requiredConditionalRequestHeaderSchema, requiredIdempotencyRequestHeaderSchema, versionResponseHeaderSchema, } from "./protocol.js";
 import { oauthGrantListSchema, oauthGrantRevokedSchema } from "./oauth.js";
 import { credentialCreatedSchema, credentialPageSchema, credentialRequestSchema, credentialRevokedSchema, credentialRotatedSchema, credentialRotationRequestSchema, } from "./secrets.js";
-import { attemptPageSchema, attemptViewSchema, occurrencePageSchema, projectOccurrenceListRequestSchema, projectOccurrencePageSchema, occurrenceViewSchema, schedulePageSchema, scheduleRequestSchema, scheduleViewSchema, scheduleWrittenViewSchema, } from "./scheduling.js";
+import { attemptPageSchema, attemptViewSchema, occurrencePageSchema, projectOccurrenceListRequestSchema, projectOccurrencePageSchema, occurrenceViewSchema, schedulePageSchema, scheduleRequestSchema, scheduleSummaryRequestSchema, scheduleSummarySchema, scheduleViewSchema, scheduleWrittenViewSchema, } from "./scheduling.js";
 import { testSinkCreateRequestSchema, testSinkDeliveryBodySchema, testSinkDeliveryPageSchema, testSinkPageSchema, testSinkProgramSchema, testSinkSchema, } from "./test-sink.js";
 import { projectArchiveRequestSchema, projectCreateRequestSchema, projectDeletedSchema, projectListSchema, projectSummarySchema, projectUpdateRequestSchema, } from "./tenancy.js";
 import { mcpConnectionSchema } from "./mcp.js";
@@ -101,6 +102,10 @@ const BILLING_SUMMARY_EXAMPLE = {
         boundary: "2026-09-01T00:00:00.000Z",
         mode: "shadow",
     },
+    attemptPrice: {
+        bulk: { currency: "USD", microdollars: "10", scale: 6 },
+        realtime: { currency: "USD", microdollars: "10", scale: 6 },
+    },
     blockingReasons: [],
     budgetPolicy: {
         desired: { advisoryBudget: null, hardCap: null },
@@ -307,7 +312,7 @@ const BILLING_NOTICE_LIST_OPERATION = {
     path: "/v1/billing/notices",
     principals: ["api-credential", "oauth", "session"],
     problems: ["invalid_request", "service_unavailable"],
-    query: pageRequestSchema,
+    query: billingNoticeListRequestSchema,
     response: globalThis.GREATWAIT_API_REQUEST_REGISTRY
         ? API_UNUSED_RESPONSE_SCHEMA
         : billingNoticePageSchema,
@@ -318,6 +323,42 @@ const BILLING_NOTICE_LIST_OPERATION = {
         : "List persistent billing notices",
     surfaces: ["api", "mock"],
 };
+const BILLING_NOTICE_DISMISS_OPERATION = {
+    creates: false,
+    description: globalThis.GREATWAIT_RUNTIME_CONTRACTS_ONLY
+        ? ""
+        : "Dismisses this project's delivery-failure notices (`delivery-failed` and `schedule-auto-paused`) in the verified environment: every one still active that occurred at or before `through` is resolved for every member at once, and stays listed as resolved. Pass the `occurredAt` of the newest notice you saw, so a failure that arrives later stays open. Emails already owed are still sent. Billing notices are never dismissed. Repeating the request changes nothing and reports 0.",
+    example: globalThis.GREATWAIT_RUNTIME_WITHOUT_EXAMPLES
+        ? {}
+        : { dismissed: 3, freshness: { kind: "authoritative" } },
+    id: "billing.noticesdismiss",
+    idempotent: true,
+    // Not destructive: the notices stay listed, as resolved, and nothing
+    // about a schedule, a run or an email changes.
+    mcp: { destructive: false, kind: "tool", openWorld: false },
+    method: "POST",
+    mutates: true,
+    path: "/v1/billing/notices/dismiss",
+    principals: ["api-credential", "oauth", "session"],
+    problems: ["invalid_request", "service_unavailable"],
+    request: billingNoticeDismissRequestSchema,
+    requestExample: globalThis
+        .GREATWAIT_RUNTIME_WITHOUT_EXAMPLES
+        ? {}
+        : { through: "2026-09-10T12:00:00.000Z" },
+    response: globalThis.GREATWAIT_API_REQUEST_REGISTRY
+        ? API_UNUSED_RESPONSE_SCHEMA
+        : billingNoticeDismissResultSchema,
+    // The read's scope, plus schedules:write: a delivery-failure notice is
+    // visible with schedules:read, and dismissing it changes what every
+    // member sees, so a credential needs the write. Every role holds both.
+    scopes: ["usage:read", "schedules:write"],
+    sessionAuthority: "headers",
+    summary: globalThis.GREATWAIT_API_REQUEST_REGISTRY
+        ? ""
+        : "Dismiss delivery-failure notices",
+    surfaces: ["api", "mock"],
+};
 const BILLING_NOTIFICATION_SETTINGS_OPERATION = {
     creates: false,
     description: globalThis.GREATWAIT_RUNTIME_CONTRACTS_ONLY
@@ -797,7 +838,7 @@ export const OPERATIONS = [
         creates: false,
         description: globalThis.GREATWAIT_RUNTIME_CONTRACTS_ONLY
             ? ""
-            : "Lists the caller's callback endpoints for exactly its own project and environment. The result is authoritative and metadata-only: no signing secret or sealed key material has a field in this shape.",
+            : "Lists the caller's callback endpoints for exactly its own project and environment, oldest first, one page at a time (default 25, at most 100): follow `nextCursor` until it is absent before counting endpoints or concluding one does not exist. Optional `text` (case-insensitive substring of the name, address or identifier), `status` and `rotation=unacknowledged` filters intersect before paging, so a match on any page is found on the first; a cursor continues only under the filters that issued it. Metadata only: no signing secret or sealed key material has a field in this shape.",
         example: globalThis.GREATWAIT_RUNTIME_WITHOUT_EXAMPLES
             ? {}
             : {
@@ -824,7 +865,7 @@ export const OPERATIONS = [
         path: "/v1/endpoints",
         principals: ["api-credential", "oauth", "session"],
         problems: ["invalid_request"],
-        query: pageRequestSchema,
+        query: callbackEndpointListRequestSchema,
         response: globalThis.GREATWAIT_API_REQUEST_REGISTRY
             ? API_UNUSED_RESPONSE_SCHEMA
             : callbackEndpointPageSchema,
@@ -1742,19 +1783,13 @@ export const OPERATIONS = [
         creates: false,
         description: globalThis.GREATWAIT_RUNTIME_CONTRACTS_ONLY
             ? ""
-            : "Lists the active and archived projects in the signed-in member's organization, with the environment kinds, lifecycle state, version and deletion-preview counts each one has. Active and archived rows both occupy a plan slot; deleted projects are absent. Archived rows are management targets rather than projects work may run inside, so a picker must not offer them as switch targets. The result is a display aid rather than an authorization control — naming a project on a later request re-resolves it against the member's own organization, and a project that is not theirs answers exactly as one that does not exist.",
+            : "Lists the active and archived projects in the signed-in member's organization, with the environment kinds, lifecycle state and version each one has. It carries no deletion counts: counting reads a project's whole history, so the exact counts a permanent deletion would destroy come from `projects.read`, one project at a time. Active and archived rows both occupy a plan slot; deleted projects are absent. Archived rows are management targets rather than projects work may run inside, so a picker must not offer them as switch targets. The result is a display aid rather than an authorization control — naming a project on a later request re-resolves it against the member's own organization, and a project that is not theirs answers exactly as one that does not exist.",
         example: globalThis.GREATWAIT_RUNTIME_WITHOUT_EXAMPLES
             ? {}
             : {
                 data: [
                     {
                         createdAt: "2026-08-14T11:00:00.000Z",
-                        deletionCounts: {
-                            endpoints: 2,
-                            keys: 4,
-                            runs: 37,
-                            schedules: 5,
-                        },
                         environmentKinds: ["test", "live"],
                         id: "proj_01h8xyz9k2m4n6p8r0t2v4w6y8",
                         name: "Billing reminders",
@@ -1787,6 +1822,53 @@ export const OPERATIONS = [
             : "List the member's projects",
         surfaces: ["api", "mock"],
     },
+    {
+        creates: false,
+        description: globalThis.GREATWAIT_RUNTIME_CONTRACTS_ONLY
+            ? ""
+            : "Reads one active or archived project in the signed-in member's organization, with the exact counts of the schedules, endpoints, keys and runs a permanent deletion would destroy now. Counting reads the project's whole history, which is why the list does not carry these counts and why this is the read a deletion confirmation makes. A project the member cannot see answers exactly as one that does not exist.",
+        example: globalThis.GREATWAIT_RUNTIME_WITHOUT_EXAMPLES
+            ? {}
+            : {
+                createdAt: "2026-08-14T11:00:00.000Z",
+                deletionCounts: { endpoints: 2, keys: 4, runs: 37, schedules: 5 },
+                environmentKinds: ["test", "live"],
+                id: "proj_01h8xyz9k2m4n6p8r0t2v4w6y8",
+                name: "Billing reminders",
+                status: "archived",
+                version: 2,
+            },
+        id: "projects.read",
+        idempotent: true,
+        // Withheld from MCP, and accepted from a signed-in member only. The exact
+        // counts are the deletion preview Project General shows before somebody
+        // deletes a project; counting reads every schedule and run the project
+        // has, so publishing it as an automation read would invite a polling
+        // client to pay that on every call. Rename, archive and delete each answer
+        // with the project they changed, counts included, so automation that acts
+        // on a project already learns its version and counts from the act.
+        mcp: {
+            kind: "unavailable",
+            reason: "The counted read is the deletion preview a signed-in member sees before deleting a project. Counting reads the project's whole history, so it is not offered as an agent tool; rename, archive and delete each answer with the project they changed.",
+        },
+        method: "GET",
+        mutates: false,
+        path: "/v1/projects/{projectId}",
+        principals: ["session"],
+        problems: ["not_found"],
+        response: globalThis.GREATWAIT_API_REQUEST_REGISTRY
+            ? API_UNUSED_RESPONSE_SCHEMA
+            : projectSummarySchema,
+        ...(globalThis.GREATWAIT_API_REQUEST_REGISTRY
+            ? {}
+            : { responseHeaders: versionResponseHeaderSchema }),
+        scopes: ["projects:read"],
+        sessionAuthority: "headers",
+        summary: globalThis.GREATWAIT_API_REQUEST_REGISTRY
+            ? ""
+            : "Read a project with its deletion counts",
+        surfaces: ["api", "mock"],
+    },
     {
         creates: true,
         description: globalThis.GREATWAIT_RUNTIME_CONTRACTS_ONLY
@@ -2324,7 +2406,7 @@ export const OPERATIONS = [
         creates: false,
         description: globalThis.GREATWAIT_RUNTIME_CONTRACTS_ONLY
             ? ""
-            : "Lists the caller's own schedules, oldest first, one page at a time. Archived schedules are left out: archiving is how a schedule leaves the working set, and a listing that still carried them would make the operation pointless. Give `endpoint` to keep the page to the schedules that deliver to that endpoint — the way back from a destination to everything pointed at it, which is what somebody who disabled or is about to move an endpoint needs to see. Items are schedules rather than schedules-with-occurrences, because a cross-partition listing is served from a projection that holds a summary; read a schedule to get its authoritative next occurrence. Every page states whether it is authoritative or projected.",
+            : "Lists the caller's own schedules one page at a time (default 25, at most 100); follow `nextCursor` until it is absent before counting or ranking schedules, or use schedules.summary for whole-project counts. `order=created` (the default) walks creation order and includes every unarchived schedule; `order=due` walks next-due order and includes only schedules with an occurrence on the books, so cancelled, completed and paused schedules with nothing upcoming are not in it. Giving `dueBefore` or `dueAfter` forces due order. `direction=desc` reverses either order: newest-created first, or latest-due first. Due-order paging is not stable while schedules fire: a schedule's next-due instant moves as it runs, so across pages it can appear twice or be skipped; read again from the first page, or de-duplicate by id, when exactness matters. Archived schedules are left out. Give `endpoint` to keep the page to the schedules that deliver to that endpoint, or `text`, `status`, `recurrence`, `tag` or `external_identifier` to filter; filters intersect before paging, and a cursor continues only under the order, direction and filters that issued it. Creation order examines a bounded number of schedules per page, so a page filtered by `status`, or one crossing many archived schedules, can come back short, or empty, and still carry `nextCursor`: keep following it. Every page is authoritative.",
         example: globalThis.GREATWAIT_RUNTIME_WITHOUT_EXAMPLES
             ? {}
             : {
@@ -2342,16 +2424,9 @@ export const OPERATIONS = [
                         version: 1,
                     },
                 ],
-                // `projected` since W2-06 served this listing from the control-plane
-                // directory. `asOf` is the instant the projection was last known to hold
-                // everything every partition had handed over, and `lagSeconds` is how long
-                // ago that was — so a page states how far behind it may be rather than
-                // implying it is current.
-                freshness: {
-                    asOf: "2026-07-28T15:00:00.000Z",
-                    kind: "projected",
-                    lagSeconds: 0,
-                },
+                // `authoritative` since W9-80: the page is read from the committed
+                // scheduling tables the timer moves, not from a lagging projection.
+                freshness: { kind: "authoritative" },
                 nextCursor: "eyJhIjoxNzg1MjUwODAwMDAwLCJpIjoic2NoXzAxaDh4eXo5azJtNG42cDhyMHQydjR3Nnk4IiwiayI6Ijk1MTM1NDZmIn0",
             },
         id: "schedules.list",
@@ -2373,6 +2448,58 @@ export const OPERATIONS = [
             : "List schedules",
         surfaces: ["api", "mock"],
     },
+    {
+        creates: false,
+        description: globalThis.GREATWAIT_RUNTIME_CONTRACTS_ONLY
+            ? ""
+            : "Summarizes every retained, unarchived schedule in the caller's project and environment: exact counts by status (active, paused, completed, cancelled), how many paused schedules paused themselves after repeated failures with up to five of them, and per-day created and finished counts for the last 30 days (today included, zero days included) in `timeZone` (default UTC). Use this rather than counting schedules_list pages. The answer is computed on read and reused for up to five minutes per project, environment and time zone: `freshness` is projected, with `asOf` the instant the counts were taken and `lagSeconds` their age. Counts cover retained schedules only; retention removes cancelled schedules and one-offs that ran once their history horizon passes.",
+        example: globalThis.GREATWAIT_RUNTIME_WITHOUT_EXAMPLES
+            ? {}
+            : {
+                counts: {
+                    active: 4863,
+                    cancelled: 212,
+                    completed: 148738,
+                    paused: 3,
+                },
+                days: Array.from({ length: 30 }, (_, index) => ({
+                    created: index === 29 ? 5 : 0,
+                    date: new Date(Date.UTC(2026, 9, 24 - 29 + index))
+                        .toISOString()
+                        .slice(0, 10),
+                    finished: index === 29 ? 2 : 0,
+                })),
+                freshness: {
+                    asOf: "2026-10-24T14:58:00.000Z",
+                    kind: "projected",
+                    lagSeconds: 120,
+                },
+                pausedAfterFailures: { count: 0, schedules: [] },
+                window: {
+                    from: "2026-09-25",
+                    timeZone: "America/Chicago",
+                    to: "2026-10-24",
+                },
+            },
+        id: "schedules.summary",
+        idempotent: true,
+        mcp: { destructive: false, kind: "tool", openWorld: false },
+        method: "GET",
+        mutates: false,
+        path: "/v1/schedule-summary",
+        principals: ["api-credential", "oauth", "session"],
+        problems: ["invalid_request"],
+        query: scheduleSummaryRequestSchema,
+        response: globalThis.GREATWAIT_API_REQUEST_REGISTRY
+            ? API_UNUSED_RESPONSE_SCHEMA
+            : scheduleSummarySchema,
+        scopes: ["schedules:read"],
+        sessionAuthority: "headers",
+        summary: globalThis.GREATWAIT_API_REQUEST_REGISTRY
+            ? ""
+            : "Summarize schedules",
+        surfaces: ["api", "mock"],
+    },
     {
         creates: false,
         description: globalThis.GREATWAIT_RUNTIME_CONTRACTS_ONLY
@@ -2523,13 +2650,14 @@ export const OPERATIONS = [
         surfaces: ["api", "mock"],
     },
     BILLING_NOTICE_LIST_OPERATION,
+    BILLING_NOTICE_DISMISS_OPERATION,
     BILLING_NOTIFICATION_SETTINGS_OPERATION,
     BILLING_NOTIFICATION_SETTINGS_UPDATE_OPERATION,
     withBillingFundingContract({
         creates: false,
         description: globalThis.GREATWAIT_RUNTIME_CONTRACTS_ONLY
             ? ""
-            : "Reads the verified principal's authoritative execution-funding position, including available and reserved credit, amount owed, recurring project fees, the current UTC month's automatic-charge ceiling and its settled, pending and remaining gross authority, and bounded payment history. Manual purchases and project subscriptions are separately authorized and never consume the automatic ceiling. Pending gross charges include applicable tax; refunds never restore monthly automatic purchasing authority. Receipt and payment links are limited to supported provider-hosted HTTPS URLs.",
+            : "Reads the verified principal's authoritative execution-funding position, including available and reserved credit, amount owed, recurring project fees, the current UTC month's automatic-charge ceiling and its settled, pending and remaining gross authority, and bounded recent payment history in `paymentOperations` (billing.paymenthistory pages through the full history with a cursor). Manual purchases and project subscriptions are separately authorized and never consume the automatic ceiling. Pending gross charges include applicable tax; refunds never restore monthly automatic purchasing authority. Receipt and payment links are limited to supported provider-hosted HTTPS URLs.",
         id: "billing.funding",
         idempotent: true,
         mcp: { destructive: false, kind: "tool", openWorld: false },
@@ -2995,7 +3123,7 @@ export const OPERATIONS = [
         creates: false,
         description: globalThis.GREATWAIT_RUNTIME_CONTRACTS_ONLY
             ? ""
-            : "Lists the verified organization's project subscription charges: the payment provider's invoices for its project subscription, read by authenticated provider call, most recent first and at most 24. Execution-credit purchases are not listed here; billing.funding reports them. Draft and zero-amount invoices are omitted. Each amount is the invoice total including tax, and the receipt link, when present, is the provider-hosted invoice page. An organization that has never been billed has an empty list; reading it creates nothing and changes nothing.",
+            : "Lists the verified organization's project subscription charges: the payment provider's invoices for its project subscription, read by authenticated provider call, most recent first and at most 24; billing.invoicehistory pages through the full history with a cursor. Execution-credit purchases are not listed here; billing.paymenthistory pages through them. Draft and zero-amount invoices are omitted. Each amount is the invoice total including tax, and the receipt link, when present, is the provider-hosted invoice page. An organization that has never been billed has an empty list; reading it creates nothing and changes nothing.",
         example: globalThis.GREATWAIT_RUNTIME_WITHOUT_EXAMPLES
             ? {}
             : {
@@ -3319,7 +3447,7 @@ export const OPERATIONS = [
             ? {}
             : {
                 limits: {
-                    inlinePayloadBytes: 65536,
+                    inlinePayloadBytes: CONFIGURATION_DEFAULTS.inlinePayloadBytes,
                     forecastHorizonSeconds: 90000,
                     usageWindowDays: 366,
                 },
@@ -3394,10 +3522,42 @@ export const OPERATIONS = [
         creates: false,
         description: globalThis.GREATWAIT_RUNTIME_CONTRACTS_ONLY
             ? ""
-            : "Reads the verified principal's project timing cohort over the authoritative rolling 24-hour due-time window. Exact 5,000ms and 15,000ms counters include eligible work that has not fired; customer blocks, platform blocks, skipped work and missing evidence stay visible beside the verdict. Values equal to a target meet it, and a threshold with no matured population is unknown. Delivered-sample p95 and p99 lateness are separate observations, including negative early-delivery defects. These are internal operating objectives, not a contractual SLA or service-credit promise.",
+            : "Reads the verified principal's project timing cohort over the authoritative rolling 24-hour due-time window. Policy timing-v2-service-bands judges each run from its original plannedFor against its occurrence service band's p95 first-outbound target: realtime 1,000ms, short_bulk 10,000ms, bulk 60,000ms. bandTargets contains the exact per-band counts and 95% verdicts; targets retains the 5,000ms (95%) and 15,000ms (99%) counters for legacy rows with no band only. All counters include eligible work that has not fired; customer blocks, platform blocks, skipped work and missing evidence stay visible beside the verdict. Values equal to a target meet it, and a threshold with no matured population is unknown. Delivered-sample p95 and p99 lateness are separate observations, including negative early-delivery defects. These are internal operating objectives, not a contractual SLA or service-credit promise.",
         example: globalThis.GREATWAIT_RUNTIME_WITHOUT_EXAMPLES
             ? {}
             : {
+                bandTargets: [
+                    {
+                        serviceBand: "realtime",
+                        targetMs: 1_000,
+                        breachCount: 0,
+                        customerBlockedCount: 0,
+                        eligibleOutstandingBreachCount: 0,
+                        maturedCount: 0,
+                        verdict: "unknown",
+                        withinTargetCount: 0,
+                    },
+                    {
+                        serviceBand: "short_bulk",
+                        targetMs: 10_000,
+                        breachCount: 0,
+                        customerBlockedCount: 0,
+                        eligibleOutstandingBreachCount: 0,
+                        maturedCount: 0,
+                        verdict: "unknown",
+                        withinTargetCount: 0,
+                    },
+                    {
+                        serviceBand: "bulk",
+                        targetMs: 60_000,
+                        breachCount: 0,
+                        customerBlockedCount: 0,
+                        eligibleOutstandingBreachCount: 0,
+                        maturedCount: 0,
+                        verdict: "unknown",
+                        withinTargetCount: 0,
+                    },
+                ],
                 customerBlockedCount: 2,
                 deliveredSampleCount: 98,
                 freshness: { kind: "authoritative" },
@@ -3405,7 +3565,7 @@ export const OPERATIONS = [
                 p95LatenessMs: 4_200,
                 p99LatenessMs: 12_000,
                 platformBlockedCount: 1,
-                policyVersion: "timing-v1",
+                policyVersion: "timing-v2-service-bands",
                 skippedCount: 3,
                 targets: [
                     {
@@ -3545,7 +3705,7 @@ export const OPERATIONS = [
         creates: false,
         description: globalThis.GREATWAIT_RUNTIME_CONTRACTS_ONLY
             ? ""
-            : "Lists every retained occurrence in the verified principal's project and environment, newest first by planned instant with the occurrence identifier breaking millisecond ties. Optional endpoint, schedule, half-open date-range and outcome filters may be combined; the endpoint is resolved through the schedules that belong to the same authority. The opaque cursor belongs to this operation and the exact normalized filters that issued it, so it cannot be replayed under another view. Every page publishes the authoritative earliest retained instant for the caller's effective plan. Each item is metadata only: callback payloads, destinations, response bodies and signing material have no field in the response.",
+            : "Lists retained occurrences in the verified principal's project and environment one page at a time, newest first by planned instant with the occurrence identifier breaking millisecond ties; follow `nextCursor` until it is absent before counting or ranking. The `outcome` filter is applied after a bounded read, so a page can come back short, or empty, and still carry `nextCursor`: keep following it. Optional endpoint, schedule, half-open date-range and outcome filters may be combined; the endpoint is resolved through the schedules that belong to the same authority. The opaque cursor belongs to this operation and the exact normalized filters that issued it, so it cannot be replayed under another view. Every page publishes the authoritative earliest retained instant for the caller's effective plan. Each item carries its schedule's name as `scheduleName`, so a page of runs needs no schedule read per row. Each item is metadata only: callback payloads, destinations, response bodies and signing material have no field in the response.",
         example: globalThis.GREATWAIT_RUNTIME_WITHOUT_EXAMPLES
             ? {}
             : {
@@ -3556,6 +3716,7 @@ export const OPERATIONS = [
                         id: "occ_01h8xyz9k2m4n6p8r0t2v4w6y8",
                         plannedFor: "2026-07-28T15:00:00.000Z",
                         schedule: "sch_01h8xyz9k2m4n6p8r0t2v4w6y8",
+                        scheduleName: "Nightly report",
                         sequence: 1,
                         settledAt: "2026-07-28T15:00:01.000Z",
                         state: "succeeded",
@@ -3587,7 +3748,7 @@ export const OPERATIONS = [
         creates: false,
         description: globalThis.GREATWAIT_RUNTIME_CONTRACTS_ONLY
             ? ""
-            : "Reads one retained occurrence from the PostgreSQL authority that owns its schedule. Trusted first-outbound timing is optional for records that predate substantiation; when present, firstAttemptLatenessMs is signed and a negative value exposes an early-delivery defect rather than being clamped to zero. Timing eligibility states whether a customer restriction excluded the occurrence from the internal target cohort. An identifier outside the verified principal's organization, project or environment is indistinguishable from an absent occurrence.",
+            : "Reads one retained occurrence from the PostgreSQL authority that owns its schedule. Trusted first-outbound timing is optional for records that predate substantiation; when present, firstAttemptLatenessMs is signed and a negative value exposes an early-delivery defect rather than being clamped to zero. Timing eligibility states whether a customer restriction excluded the occurrence from the internal target cohort. An identifier outside the verified principal's organization, project or environment is indistinguishable from an absent occurrence. timingPolicyVersion is timing-v2-service-bands when first-outbound evidence is recorded for a banded occurrence; legacy null-band occurrences retain their recorded policy (including payg-v1) and the 5,000ms/15,000ms thresholds.",
         example: globalThis.GREATWAIT_RUNTIME_WITHOUT_EXAMPLES
             ? {}
             : {
@@ -3629,7 +3790,7 @@ export const OPERATIONS = [
         creates: false,
         description: globalThis.GREATWAIT_RUNTIME_CONTRACTS_ONLY
             ? ""
-            : "Search all retained delivery attempts by actual startedAt in the required UTC interval [startedFrom, startedBefore), newest first with attempt ID breaking ties. Combine HTTP responseStatus, statusClass, attempt outcome or diagnostic, endpoint, schedule and exact host identifier/tag filters. The matched attempt outcome remains searchable after recovery; occurrence.state is its current outcome. Follow schedule and occurrence IDs to retained details and attempts.list for the complete retry chain. Only safe metadata is returned. Retention horizons describe normal plan history and attempt-detail limits; absence after expiry is not evidence that a delivery never happened. Unavailable queries fail explicitly. Cursors are bound to the verified authority and every selected filter.",
+            : "Search retained delivery attempts one page at a time by actual startedAt in the required UTC interval [startedFrom, startedBefore), newest first with attempt ID breaking ties; follow `nextCursor` until it is absent before counting. The `outcome` and `diagnostic` filters are applied after a bounded read, so a page can come back short, or empty, and still carry `nextCursor`: keep following it. Combine HTTP responseStatus, statusClass, attempt outcome or diagnostic, endpoint, schedule and exact host identifier/tag filters. The matched attempt outcome remains searchable after recovery; occurrence.state is its current outcome. Follow schedule and occurrence IDs to retained details and attempts.list for the complete retry chain. Only safe metadata is returned. Retention horizons describe normal plan history and attempt-detail limits; absence after expiry is not evidence that a delivery never happened. Unavailable queries fail explicitly. Cursors are bound to the verified authority and every selected filter.",
         example: globalThis.GREATWAIT_RUNTIME_WITHOUT_EXAMPLES
             ? {}
             : {
@@ -3693,7 +3854,7 @@ export const OPERATIONS = [
         creates: false,
         description: globalThis.GREATWAIT_RUNTIME_CONTRACTS_ONLY
             ? ""
-            : "Lists the immutable attempts retained under one occurrence, ordered by start instant and attempt identifier so equal timestamps have a stable position. The PostgreSQL authority answers every page. Optional first-outbound fields carry trusted occurrence timing and its pinned policy; absence means unknown, never zero. Results expose only bounded outcome, response-status, duration, timing, diagnostic, remediation and redelivery-cause metadata; callback payloads, response bodies, destinations, signing material, secrets and transport traces are structurally absent.",
+            : "Lists the immutable attempts retained under one occurrence, ordered by start instant and attempt identifier so equal timestamps have a stable position. The PostgreSQL authority answers every page. Optional first-outbound fields carry trusted occurrence timing and its pinned policy; absence means unknown, never zero. Results expose only bounded outcome, response-status, duration, timing, diagnostic, remediation and redelivery-cause metadata; callback payloads, response bodies, destinations, signing material, secrets and transport traces are structurally absent. timingPolicyVersion is timing-v2-service-bands when first-outbound evidence is recorded for a banded occurrence; legacy null-band occurrences retain their recorded policy (including payg-v1) and the 5,000ms/15,000ms thresholds.",
         example: globalThis.GREATWAIT_RUNTIME_WITHOUT_EXAMPLES
             ? {}
             : {
@@ -3745,7 +3906,7 @@ export const OPERATIONS = [
         creates: false,
         description: globalThis.GREATWAIT_RUNTIME_CONTRACTS_ONLY
             ? ""
-            : "Reads one immutable delivery attempt from its occurrence's PostgreSQL authority. Ambiguous means the receiver may have acted and is never rewritten into certainty without durable result evidence. Optional first-outbound fields come only from trusted transport evidence and absence means unknown, never zero. The bounded response omits callback payloads, response bodies, destinations, signing material, secrets and raw transport failures by construction.",
+            : "Reads one immutable delivery attempt from its occurrence's PostgreSQL authority. Ambiguous means the receiver may have acted and is never rewritten into certainty without durable result evidence. Optional first-outbound fields come only from trusted transport evidence and absence means unknown, never zero. The bounded response omits callback payloads, response bodies, destinations, signing material, secrets and raw transport failures by construction. timingPolicyVersion is timing-v2-service-bands when first-outbound evidence is recorded for a banded occurrence; legacy null-band occurrences retain their recorded policy (including payg-v1) and the 5,000ms/15,000ms thresholds.",
         example: globalThis.GREATWAIT_RUNTIME_WITHOUT_EXAMPLES
             ? {}
             : {

package/dist/project-notifications.d.ts

@@ -15,21 +15,35 @@ export declare const notificationEmailSettingsSchema: import("zod").ZodObject<{
         memberIds: import("zod").ZodArray<import("zod").ZodString>;
     }, import("zod/v4/core").$strict>], "kind">;
     scheduleKinds: import("zod").ZodEnum<{
+        recurring: "recurring";
         both: "both";
         "one-shot": "one-shot";
-        recurring: "recurring";
     }>;
 }, import("zod/v4/core").$strict>;
 export declare const statusWebhookEventSchema: import("zod").ZodEnum<{
     failed: "failed";
 }>;
 export type StatusWebhookEvent = z.infer<typeof statusWebhookEventSchema>;
+/**
+ * The earlier configuration: a bare URL. Still accepted (W9-84): the endpoint
+ * at that URL is found or created, as endpoints.ensure does, and linked.
+ */
 export declare const statusWebhookConfigurationSchema: import("zod").ZodObject<{
     url: import("zod").ZodString;
     events: import("zod").ZodArray<import("zod").ZodEnum<{
         failed: "failed";
     }>>;
 }, import("zod/v4/core").$strict>;
+/**
+ * The status webhook's destination (W9-84): a callback endpoint in this
+ * project and environment, whose URL, headers and signing keys apply.
+ */
+export declare const statusWebhookEndpointConfigurationSchema: import("zod").ZodObject<{
+    endpoint: import("zod").ZodString;
+    events: import("zod").ZodArray<import("zod").ZodEnum<{
+        failed: "failed";
+    }>>;
+}, import("zod/v4/core").$strict>;
 export declare const projectNotificationSettingsSchema: import("zod").ZodObject<{
     project: import("zod").ZodString;
     environmentKind: import("zod").ZodEnum<{
@@ -46,9 +60,9 @@ export declare const projectNotificationSettingsSchema: import("zod").ZodObject<
             memberIds: import("zod").ZodArray<import("zod").ZodString>;
         }, import("zod/v4/core").$strict>], "kind">;
         scheduleKinds: import("zod").ZodEnum<{
+            recurring: "recurring";
             both: "both";
             "one-shot": "one-shot";
-            recurring: "recurring";
         }>;
     }, import("zod/v4/core").$strict>;
     statusWebhook: import("zod").ZodOptional<import("zod").ZodObject<{
@@ -56,6 +70,7 @@ export declare const projectNotificationSettingsSchema: import("zod").ZodObject<
         events: import("zod").ZodArray<import("zod").ZodEnum<{
             failed: "failed";
         }>>;
+        endpoint: import("zod").ZodOptional<import("zod").ZodString>;
         signingKey: import("zod").ZodOptional<import("zod").ZodObject<{
             id: import("zod").ZodString;
         }, import("zod/v4/core").$strict>>;
@@ -74,17 +89,22 @@ export declare const projectNotificationSettingsUpdateRequestSchema: import("zod
             memberIds: import("zod").ZodArray<import("zod").ZodString>;
         }, import("zod/v4/core").$strict>], "kind">;
         scheduleKinds: import("zod").ZodEnum<{
+            recurring: "recurring";
             both: "both";
             "one-shot": "one-shot";
-            recurring: "recurring";
         }>;
     }, import("zod/v4/core").$strict>>;
-    statusWebhook: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodObject<{
+    statusWebhook: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodUnion<readonly [import("zod").ZodObject<{
+        endpoint: import("zod").ZodString;
+        events: import("zod").ZodArray<import("zod").ZodEnum<{
+            failed: "failed";
+        }>>;
+    }, import("zod/v4/core").$strict>, import("zod").ZodObject<{
         url: import("zod").ZodString;
         events: import("zod").ZodArray<import("zod").ZodEnum<{
             failed: "failed";
         }>>;
-    }, import("zod/v4/core").$strict>>>;
+    }, import("zod/v4/core").$strict>]>>>;
 }, import("zod/v4/core").$strict>;
 export type ProjectNotificationSettingsUpdateRequest = z.infer<typeof projectNotificationSettingsUpdateRequestSchema>;
 export declare const statusSigningKeyRequestSchema: import("zod").ZodObject<{
@@ -107,9 +127,9 @@ export declare const statusSigningKeyCreatedSchema: import("zod").ZodObject<{
                 memberIds: import("zod").ZodArray<import("zod").ZodString>;
             }, import("zod/v4/core").$strict>], "kind">;
             scheduleKinds: import("zod").ZodEnum<{
+                recurring: "recurring";
                 both: "both";
                 "one-shot": "one-shot";
-                recurring: "recurring";
             }>;
         }, import("zod/v4/core").$strict>;
         statusWebhook: import("zod").ZodOptional<import("zod").ZodObject<{
@@ -117,6 +137,7 @@ export declare const statusSigningKeyCreatedSchema: import("zod").ZodObject<{
             events: import("zod").ZodArray<import("zod").ZodEnum<{
                 failed: "failed";
             }>>;
+            endpoint: import("zod").ZodOptional<import("zod").ZodString>;
             signingKey: import("zod").ZodOptional<import("zod").ZodObject<{
                 id: import("zod").ZodString;
             }, import("zod/v4/core").$strict>>;
@@ -215,17 +236,22 @@ export declare const PROJECT_NOTIFICATION_OPERATIONS: readonly [import("./operat
                 memberIds: import("zod").ZodArray<import("zod").ZodString>;
             }, import("zod/v4/core").$strict>], "kind">;
             scheduleKinds: import("zod").ZodEnum<{
+                recurring: "recurring";
                 both: "both";
                 "one-shot": "one-shot";
-                recurring: "recurring";
             }>;
         }, import("zod/v4/core").$strict>>;
-        statusWebhook: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodObject<{
+        statusWebhook: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodUnion<readonly [import("zod").ZodObject<{
+            endpoint: import("zod").ZodString;
+            events: import("zod").ZodArray<import("zod").ZodEnum<{
+                failed: "failed";
+            }>>;
+        }, import("zod/v4/core").$strict>, import("zod").ZodObject<{
             url: import("zod").ZodString;
             events: import("zod").ZodArray<import("zod").ZodEnum<{
                 failed: "failed";
             }>>;
-        }, import("zod/v4/core").$strict>>>;
+        }, import("zod/v4/core").$strict>]>>>;
     }, import("zod/v4/core").$strict>;
 }, import("./operations.js").OperationDefinition & {
     readonly id: "projectnotifications.rotateSigningKey";