@greatwait/contracts 0.3.1 → 0.3.3

package/dist/index.js

@@ -4,7 +4,7 @@ export { ANY_ID_PATTERN, ID_ALPHABET, ID_PREFIXES, apiCredentialEventIdSchema, a
 export { durationSecondsSchema, timeZoneSchema, timestampSchema, toTimestamp, } from "./time.js";
 export { ENVIRONMENT_KINDS_IN_ORDER, PRINCIPAL_KINDS, SCOPES, SESSION_AUTHORITY_HEADERS, authoritySchema, credentialContextSchema, decideAccess, decideEnvironmentIntent, effectiveScopes, problemCodeForRefusal, environmentKindSchema, principalKindSchema, principalSchema, scopeSchema, } from "./authority.js";
 export { PROBLEM_CATEGORIES, PROBLEM_CODES, fieldErrorSchema, isRetryable, problem, problemCategorySchema, problemCodeSchema, problemSchema, } from "./problems.js";
-export { CONCURRENCY_HEADERS, PAGE_SIZE, canonicalRequest, classifyIdempotency, conditionalRequestHeaderSchema, decodeCursor, encodeCursor, etagSchema, freshnessSchema, projectedFreshnessSchema, requiredConditionalRequestHeaderSchema, fromETag, idempotencyKeySchema, idempotencyReplayResponseHeaderSchema, idempotencyRequestHeaderSchema, idempotencyReceiptSchema, idempotencyScopeSchema, HISTORY_ORDERS, historyPageRequestSchema, pageRequestSchema, scheduleListRequestSchema, parseHistoryPageRequest, pageSchema, parsePageRequest, parseScheduleListRequest, replayedResponseHeaderSchema, requiredIdempotencyRequestHeaderSchema, requestFingerprint, toETag, versionResponseHeaderSchema, versionSchema, SCHEDULE_ORDERS, } from "./protocol.js";
+export { CONCURRENCY_HEADERS, PAGE_SIZE, canonicalRequest, classifyIdempotency, conditionalRequestHeaderSchema, decodeCursor, encodeCursor, etagSchema, freshnessSchema, projectedFreshnessSchema, requiredConditionalRequestHeaderSchema, fromETag, idempotencyKeySchema, idempotencyReplayResponseHeaderSchema, idempotencyRequestHeaderSchema, idempotencyReceiptSchema, idempotencyScopeSchema, HISTORY_ORDERS, historyPageRequestSchema, pageRequestSchema, scheduleListRequestSchema, parseHistoryPageRequest, pageSchema, parsePageRequest, parseScheduleListRequest, parseListingRequest, replayedResponseHeaderSchema, requiredIdempotencyRequestHeaderSchema, requestFingerprint, toETag, versionResponseHeaderSchema, versionSchema, SCHEDULE_ORDERS, SCHEDULE_DIRECTIONS, } from "./protocol.js";
 export { CALLBACK_CONTENT_TYPE, CALLBACK_DELIVERY_PROTOCOL, CALLBACK_DELIVERY_PROTOCOL_VERSION, CALLBACK_ENVELOPE_VERSION, CALLBACK_ENVELOPE_VERSION_2026_07_01, CALLBACK_ENVELOPE_VERSION_2026_08_08, CALLBACK_ENVELOPE_VERSION_CHANGE, CALLBACK_ENVELOPE_VERSIONS, CALLBACK_HEADERS, SIGNATURE_SCHEME, SIGNATURE_TOLERANCE_SECONDS, callbackDeferredCompletionSchema, callbackDeliveryTestVectors, callbackEnvelopeSchema, callbackEnvelopeTrigger, callbackHeadersSchema, callbackRun, callbackTriggerSchema, classifyOutcome, classifyStatus, formatSignature, extractCanonicalEnvelopeIds, isTimestampFresh, signatureHeaderSchema, serializeCallbackEnvelope, signingInput, trySigningInput, } from "./signatures.js";
 export { CREDENTIAL_PREFIX_LENGTH, CREDENTIAL_PREFIX_PATTERN, CREDENTIAL_ROTATION_OVERLAP_SECONDS, CREDENTIAL_SECRET_LENGTH, CREDENTIAL_SECRET_PATTERN, NEVER_REDACTED, REDACTED_FIELDS_EXACT, REDACTED_FIELD_FRAGMENTS, credentialCreatedSchema, credentialMetadataSchema, credentialPageSchema, credentialRequestSchema, credentialRevokedSchema, credentialRotatedSchema, credentialRotationRequestSchema, redact, } from "./secrets.js";
 export { MAX_PARTITION_SHARDS, PROJECTION_DRAIN_LIMIT, SINGLE_SHARD, partitionInstanceName, partitionShardCount, partitionShardFor, partitionShardForIdempotencyKey, } from "./partition.js";
@@ -13,30 +13,31 @@ export { MEMBERSHIP_ROLES, MEMBERSHIP_STATUSES, externalMembershipIdSchema, exte
 export { CHANGE_KINDS, CHANGE_OPERATIONS, CHANGE_SUBJECTS, CONTRACT_VERSION, assess, changeKindSchema, classifyChange, contractVersionSchema, } from "./compatibility.js";
 export { WORKSPACE_LAYERS, scaffoldProblemSchema, scaffoldVersionSchema, toolDescriptorSchema, toolListSchema, workspaceIdentitySchema, workspaceLayerSchema, workspaceScaffoldSchema, } from "./workspace.js";
 export { MOCK_BEHAVIORS, MOCK_HEADERS, OPERATIONS, UNIVERSAL_PROBLEMS, AUTHENTICATED_PROBLEMS, SCOPED_PROBLEMS, findOperation, fixtureListSchema, mockBehaviorSchema, mockScenarioRequestSchema, mockScenarioResponseSchema, operationsFor, problemsFor, requestSchemaFor, responseSchemaFor, successStatusFor, } from "./operations.js";
-export { PROJECT_LIST_LIMIT, PROJECT_STATUSES, environmentSchema, organizationSchema, projectCreateRequestSchema, projectArchiveRequestSchema, projectDeletedSchema, projectDeletionCountsSchema, projectListSchema, projectNameKey, projectNameSchema, projectSchema, projectStatusSchema, projectSummarySchema, projectUpdateRequestSchema, provisionedProjectSchema, } from "./tenancy.js";
-export { ATTEMPT_DURATION_MAX_MS, ATTEMPT_FAILURE_SNIPPET_MAX_LENGTH, ATTEMPT_REMEDIATIONS, ATTEMPT_RESPONSE_HEADER_MAX_LENGTH, ATTEMPT_STATES, CRON_EXPRESSION_MAX_LENGTH, LATENCY_CLASSES, OCCURRENCE_STATES, PARTITION_KEY_MAX_LENGTH, RECURRENCE_REQUEST_FIELDS, SCHEDULE_STATUSES, SCHEDULING_BOUNDS, TERMINAL_OCCURRENCE_STATES, TERMINAL_SCHEDULE_STATUSES, attemptFailureSnippetSchema, attemptResponseHeaderSchema, attemptSchema, attemptResponseSchema, attemptRequestSchema, attemptDiagnosticSchema, attemptPageSchema, attemptRemediationSchema, attemptStateForResponse, attemptStateSchema, attemptTriggerSchema, attemptViewSchema, cronExpressionSchema, DELIVERY_COMPLETION_MODES, DELIVERY_DURATION_TIERS, MAX_DELIVERY_DURATION_SECONDS, RESPONSE_DELIVERY_MAX_DURATION_SECONDS, DELIVERY_OVERLAP_POLICIES, DEFAULT_DELIVERY_DURATION_SECONDS, DEFAULT_DELIVERY_OVERLAP_POLICY, FREE_DELIVERY_DURATION_SECONDS, DEFAULT_ONE_SHOT_MAX_STALENESS_SECONDS, LATENESS_POLICIES, isLongRunningDuration, deliveryCompletionModeSchema, deliveryDurationSecondsSchema, deliveryOverlapPolicySchema, deriveDeliverySettings, deriveLatencyClass, deriveLatenessSettings, defaultLatenessPolicyForRecurrence, generationSchema, isTerminalOccurrenceState, isTerminalScheduleStatus, latencyClassSchema, latenessPolicySchema, occurrenceSchema, occurrencePageSchema, parseProjectOccurrenceListRequest, projectOccurrenceCursorBinding, projectOccurrenceListRequestSchema, projectOccurrencePageSchema, occurrenceStateSchema, occurrenceViewSchema, partitionKeySchema, remediationForAttempt, recurrenceSchema, DEFAULT_AUTO_PAUSE_AFTER_FAILURES, autoPauseAfterFailuresSchema, autoPauseReasonSchema, scheduleNameSchema, scheduleLatenessRequestSchema, scheduleLatenessSchema, schedulePageSchema, scheduleRequestSchema, scheduleSchema, scheduleStatusSchema, scheduleViewSchema, scheduleWrittenViewSchema, } from "./scheduling.js";
+export { PROJECT_LIST_LIMIT, PROJECT_STATUSES, environmentSchema, organizationSchema, projectCreateRequestSchema, projectArchiveRequestSchema, projectDeletedSchema, projectDeletionCountsSchema, projectListItemSchema, projectListSchema, projectNameKey, projectNameSchema, projectSchema, projectStatusSchema, projectSummarySchema, projectUpdateRequestSchema, provisionedProjectSchema, } from "./tenancy.js";
+export { ATTEMPT_DURATION_MAX_MS, ATTEMPT_FAILURE_SNIPPET_MAX_LENGTH, ATTEMPT_REMEDIATIONS, ATTEMPT_RESPONSE_HEADER_MAX_LENGTH, ATTEMPT_STATES, CRON_EXPRESSION_MAX_LENGTH, LATENCY_CLASSES, OCCURRENCE_STATES, PARTITION_KEY_MAX_LENGTH, RECURRENCE_REQUEST_FIELDS, SCHEDULE_STATUSES, SCHEDULING_BOUNDS, TERMINAL_OCCURRENCE_STATES, TERMINAL_SCHEDULE_STATUSES, attemptFailureSnippetSchema, attemptResponseHeaderSchema, attemptSchema, attemptResponseSchema, attemptRequestSchema, attemptDiagnosticSchema, attemptPageSchema, attemptRemediationSchema, attemptStateForResponse, attemptStateSchema, attemptTriggerSchema, attemptViewSchema, cronExpressionSchema, DELIVERY_COMPLETION_MODES, DELIVERY_DURATION_TIERS, MAX_DELIVERY_DURATION_SECONDS, RESPONSE_DELIVERY_MAX_DURATION_SECONDS, DELIVERY_OVERLAP_POLICIES, DEFAULT_DELIVERY_DURATION_SECONDS, DEFAULT_DELIVERY_OVERLAP_POLICY, FREE_DELIVERY_DURATION_SECONDS, DEFAULT_ONE_SHOT_MAX_STALENESS_SECONDS, LATENESS_POLICIES, isLongRunningDuration, deliveryCompletionModeSchema, deliveryDurationSecondsSchema, deliveryOverlapPolicySchema, deriveDeliverySettings, deriveLatencyClass, deriveLatenessSettings, fingerprintedScheduleRequest, defaultLatenessPolicyForRecurrence, generationSchema, isTerminalOccurrenceState, isTerminalScheduleStatus, latencyClassSchema, requestedLatencyClassSchema, latenessPolicySchema, occurrenceSchema, occurrencePageSchema, parseProjectOccurrenceListRequest, projectOccurrenceCursorBinding, projectOccurrenceListRequestSchema, projectOccurrencePageSchema, occurrenceStateSchema, occurrenceViewSchema, partitionKeySchema, remediationForAttempt, recurrenceSchema, DEFAULT_AUTO_PAUSE_AFTER_FAILURES, autoPauseAfterFailuresSchema, autoPauseReasonSchema, scheduleNameSchema, scheduleLatenessRequestSchema, scheduleLatenessSchema, schedulePageSchema, SCHEDULE_SUMMARY_DAYS, SCHEDULE_SUMMARY_MAX_AGE_SECONDS, SCHEDULE_SUMMARY_PAUSED_SAMPLE, scheduleSummaryRequestSchema, scheduleSummarySchema, scheduleRequestSchema, scheduleSchema, scheduleStatusSchema, scheduleViewSchema, scheduleWrittenViewSchema, } from "./scheduling.js";
 export { portableAttemptRecordSchema, portableEncryptedPayloadRecordSchema, portableOccurrenceRecordSchema, portableReceiptRecordSchema, portableScheduleRecordSchema, portableSchedulingRecordSetSchema, } from "./scheduling-records.js";
 export { ROLE_SCOPE_CEILINGS, capScopesToRole, ceilingForRole, credentialScopes, grantableScopes, policyMatrix, roleAllows, roleCanPerform, } from "./policy.js";
 export { ACCESS_TOKEN_PATTERN, ACCESS_TOKEN_TTL_SECONDS, AUTHORIZATION_CODE_PATTERN, AUTHORIZATION_CODE_TTL_SECONDS, AUTHORIZATION_REQUEST_TTL_SECONDS, MAX_REDIRECT_URIS, OAUTH_ERRORS, OAUTH_ERROR_STATUS, OAUTH_GRANT_STATUSES, OAUTH_GRANT_TYPES, OAUTH_RESPONSE_TYPES, OAUTH_REVOCATION_REASONS, OAUTH_ROUTES, OAUTH_SECRET_PATTERN, OAUTH_TOKEN_NAMESPACE_LENGTH, OAUTH_TOKEN_SECRET_LENGTH, PKCE_CHALLENGE_PATTERN, PKCE_METHODS, PKCE_VERIFIER_PATTERN, REFRESH_TOKEN_PATTERN, REFRESH_TOKEN_TTL_SECONDS, TOKEN_ENDPOINT_AUTH_METHODS, authorizationParametersSchema, authorizationServerMetadataSchema, bearerChallenge, clientRegistrationRequestSchema, clientRegistrationSchema, consentDecisionSchema, consentOutcomeSchema, consentPromptSchema, formatScopeString, isLoopbackRedirect, oauthError, oauthErrorCodeSchema, oauthErrorSchema, oauthGrantListSchema, oauthGrantRevokedSchema, oauthGrantSchema, oauthGrantStatusSchema, oauthGrantTypeSchema, oauthRevocationReasonSchema, parseScopeString, pkceMethodSchema, protectedResourceMetadataSchema, redirectUriSchema, revocationRequestSchema, tokenRequestSchema, tokenResponseSchema, } from "./oauth.js";
 export { CALLBACK_ENVELOPE_HEADROOM_BYTES, CALLBACK_RECEIVER_MAX_BODY_BYTES, } from "./callback-receiver.js";
 export { CALLBACK_ENDPOINT_SECRET_PATTERN, CALLBACK_URL_REJECTION_REASONS, evaluateCallbackUrl, isPublicCallbackAddress, } from "./callback-safety.js";
-export { CALLBACK_ENDPOINT_LIMIT_PER_ENVIRONMENT, CALLBACK_ENDPOINT_STATUSES, CALLBACK_SIGNING_KEY_ROTATION_OVERLAP_SECONDS, CALLBACK_EGRESS_FAILURES, CALLBACK_ADMISSION_RATE_LIMITS, callbackEndpointCreatedSchema, callbackEndpointEnsuredSchema, callbackEndpointNameSchema, callbackEndpointPageSchema, callbackEndpointRequestSchema, callbackEndpointRotatedSchema, callbackEndpointSchema, callbackEndpointSigningSecretsSchema, callbackEndpointStatusSchema, callbackSigningKeyRotationRequestSchema, callbackSigningKeysSchema, callbackEgressFailureSchema, callbackUrlSchema, endpointDashboardPath, signingSecretNotice, signingSecretNoticeSchema, } from "./endpoints.js";
+export { CALLBACK_ENDPOINT_LIMIT_PER_ENVIRONMENT, CALLBACK_ENDPOINT_STATUSES, CALLBACK_SIGNING_KEY_ROTATION_OVERLAP_SECONDS, CALLBACK_EGRESS_FAILURES, CALLBACK_ADMISSION_RATE_LIMITS, callbackEndpointCreatedSchema, callbackEndpointEnsuredSchema, callbackEndpointNameSchema, callbackEndpointPageSchema, CALLBACK_ENDPOINT_ROTATION_FILTERS, callbackEndpointListRequestSchema, callbackEndpointRequestSchema, callbackEndpointRotatedSchema, callbackEndpointSchema, callbackEndpointSigningSecretsSchema, callbackEndpointStatusSchema, callbackSigningKeyRotationRequestSchema, callbackSigningKeysSchema, callbackEgressFailureSchema, callbackUrlSchema, endpointDashboardPath, signingSecretNotice, signingSecretNoticeSchema, } from "./endpoints.js";
 export { compactInterval, cronWords, generatedEndpointName, generatedScheduleName, periodWords, targetDomain, } from "./naming.js";
 export { FORECAST_BOUNDS, FORECAST_PARTIAL_ACCEPT_HEADER, forecastRequestHeadersSchema, forecastCoverageSchema, FORECAST_BREAKDOWNS, FORECAST_COMPATIBILITY, FORECAST_RULES, FORECAST_WINDOW_VERSION, decideForecastAnswer, forecastBreakdownSchema, forecastBucketSchema, forecastBucketStartMs, forecastLatencyCountsSchema, forecastRequestSchema, forecastSchema, forecastViolations, forecastWindowBucketSchema, forecastWindowViolations, forecastWindowsSchema, mergeForecastBuckets, parseForecastRequest, resolveForecastWindow, topPartitionKeys, } from "./forecast.js";
 export { CURL_JOURNEY_TOOLS, FIRST_VALUE_JOURNEY, FIRST_VALUE_PREREQUISITES, FIRST_VALUE_STEPS, FIRST_VALUE_VARIABLES, JOURNEY_ACTIVATION_DURATIONS, JOURNEY_ACTIVATION_OUTCOMES, JOURNEY_CONDITIONS, MINIMUM_CURL_VERSION, WEBSITE_JOURNEY_STEPS, WEBSITE_JOURNEY_STEP_KEYS, journeyActivationDuration, journeyCapturedVariables, journeyPathVariables, journeyPoll, journeyPrerequisite, journeyReferences, journeyStepSchema, journeyStepVariables, journeyVariable, journeyVariableName, journeyVariableSchema, parseWebsiteActivationEvent, pathParameterNames, resolveJourneyReferences, websiteActivationEventSchema, websiteJourneySteps, } from "./first-value-journey.js";
 export { BILLABLE_TERMINAL_STATES, USAGE_BOUNDS, USAGE_WINDOW_REASONS, billableTerminalStateSchema, parseUsageRequest, resolveUsageWindow, usageDaySchema, usageRequestSchema, usageSchema, utcMidnightMs, } from "./usage.js";
-export { BILLING_ACTIVATION_MODES, BILLING_AMOUNT_SCALE, BILLING_BLOCK_REASONS, BILLING_CURRENCY, BILLING_ENTRY_KINDS, BILLING_LEDGER_ENTRY_NOTES, BILLING_PAYMENT_KINDS, BILLING_PAYMENT_STATES, BILLING_NOTICE_KINDS, billingAutoTopUpApplyRequestSchema, billingAutoTopUpConfigurationSchema, billingAutoTopUpPreviewRequestSchema, billingAutoTopUpPreviewSchema, billingAutoTopUpRuleSchema, billingBudgetPolicySchema, billingBudgetUpdateRequestHeadersSchema, billingBudgetUpdateRequestSchema, billingBudgetUpdateResponseSchema, billingCeilingUpdateRequestSchema, billingFundingQuoteRequestSchema, billingFundingQuoteSchema, billingFundingViewSchema, billingNoticePageSchema, billingNoticeRecoveryPathSchema, billingNoticeSchema, billingNotificationSettingsSchema, billingNotificationSettingsUpdateRequestSchema, billingLedgerEntrySchema, billingLedgerPageSchema, billingLedgerRequestSchema, billingPaymentOperationSchema, billingPeriodSummarySchema, billingPurchaseRequestSchema, billingRefundRequestCreateSchema, billingRefundResolutionRequestSchema, billingRefundRequestViewSchema, billingSummarySchema, exactCentMoneySchema, manualFundingCreditSchema, microdollarAmountSchema, nonnegativeMicrodollarAmountSchema, } from "./billing.js";
-export { DELIVERY_TIMING_TARGETS_MS, DELIVERY_TIMING_VERDICTS, deliveryTimingSummarySchema, timingThresholdSummarySchema, } from "./timing.js";
+export { BILLING_ACTIVATION_MODES, BILLING_AMOUNT_SCALE, BILLING_BLOCK_REASONS, BILLING_CURRENCY, BILLING_ENTRY_KINDS, BILLING_LEDGER_ENTRY_NOTES, BILLING_PAYMENT_KINDS, BILLING_PAYMENT_STATES, BILLING_NOTICE_KINDS, DELIVERY_FAILURE_NOTICE_KINDS, billingAutoTopUpApplyRequestSchema, billingAutoTopUpConfigurationSchema, billingAutoTopUpPreviewRequestSchema, billingAutoTopUpPreviewSchema, billingAutoTopUpRuleSchema, billingBudgetPolicySchema, billingBudgetUpdateRequestHeadersSchema, billingBudgetUpdateRequestSchema, billingBudgetUpdateResponseSchema, billingCeilingUpdateRequestSchema, billingFundingQuoteRequestSchema, billingFundingQuoteSchema, billingFundingViewSchema, billingNoticeDismissRequestSchema, billingNoticeDismissResultSchema, billingNoticeListRequestSchema, billingNoticePageSchema, billingNoticeRecoveryPathSchema, billingNoticeSchema, billingNotificationSettingsSchema, billingNotificationSettingsUpdateRequestSchema, billingLedgerEntrySchema, billingLedgerPageSchema, billingLedgerRequestSchema, billingPaymentOperationSchema, billingPeriodSummarySchema, billingPurchaseRequestSchema, billingRefundRequestCreateSchema, billingRefundResolutionRequestSchema, billingRefundRequestViewSchema, billingSummarySchema, exactCentMoneySchema, manualFundingCreditSchema, microdollarAmountSchema, nonnegativeMicrodollarAmountSchema, } from "./billing.js";
+export { DELIVERY_TIMING_POLICY_VERSION, DELIVERY_TIMING_TARGETS_MS, bandTimingSummarySchema, DELIVERY_TIMING_VERDICTS, deliveryTimingSummarySchema, timingThresholdSummarySchema, } from "./timing.js";
 export { CALLBACK_RECEIVER_DISPOSITIONS, CALLBACK_RECEIVER_PROTOCOL, CALLBACK_RECEIVER_STATUS, TEST_SINK_BEHAVIORS, TEST_SINK_BEHAVIOR_FACTS, TEST_SINK_BOUNDS, TEST_SINK_CLIENT_ERROR_STATUSES, TEST_SINK_DISPOSITIONS, TEST_SINK_PROTOCOL_VERSION, TEST_SINK_SERVER_ERROR_STATUSES, callbackReceiverAcknowledgementSchema, callbackReceiverDispositionSchema, resolveTestSinkAction, testSinkBehaviorSchema, testSinkCreateRequestSchema, testSinkDeliveryBodySchema, testSinkDispositionSchema, testSinkDeliveryPageSchema, testSinkDeliverySchema, testSinkPageSchema, testSinkProgramSchema, testSinkSchema, } from "./test-sink.js";
 export { PROMOTION_BENEFIT_KINDS, billingPromotionsSchema, billingRedeemRequestSchema, billingRedeemResponseSchema, promotionCodeSchema, promotionGrantViewSchema, PROJECT_BILLING_ACTIONS, projectBillingQuoteRequestSchema, projectBillingQuoteSchema, projectBillingChangeRequestSchema, projectBillingStateSchema, billingPortalSchema, BILLING_PAYMENT_METHOD_REQUIRED_TITLE, billingPaymentMethodSchema, billingPaymentMethodSetupRequestSchema, billingPaymentMethodConfirmRequestSchema, billingPaymentMethodRemoveRequestSchema, billingInvoiceSchema, billingInvoiceListSchema, billingPaymentHistoryPageSchema, billingInvoiceHistoryPageSchema, } from "./billing.js";
 export { effectiveCustomerLimitsSchema, } from "./effective-limits.js";
 export * from "./members.js";
 export * from "./http-request.js";
 export { sanitizedDiagnosticText, diagnosticBodyText, responseBodySentence, requestCaptureSentence, attemptStatusGuidance, } from "./attempt-diagnostics.js";
-export { PROJECT_NOTIFICATION_OPERATIONS, notificationEmailRecipientsSchema, notificationEmailSettingsSchema, statusWebhookEventSchema, statusWebhookConfigurationSchema, projectNotificationSettingsSchema, projectNotificationSettingsUpdateRequestSchema, statusSigningKeyRequestSchema, statusSigningKeyCreatedSchema, statusWebhookPayloadSchema, statusWebhookDeliverySchema, statusWebhookDeliveryPageSchema, } from "./project-notifications.js";
+export { PROJECT_NOTIFICATION_OPERATIONS, notificationEmailRecipientsSchema, notificationEmailSettingsSchema, statusWebhookEventSchema, statusWebhookConfigurationSchema, statusWebhookEndpointConfigurationSchema, projectNotificationSettingsSchema, projectNotificationSettingsUpdateRequestSchema, statusSigningKeyRequestSchema, statusSigningKeyCreatedSchema, statusWebhookPayloadSchema, statusWebhookDeliverySchema, statusWebhookDeliveryPageSchema, } from "./project-notifications.js";
 export { externalIdentifierSchema, scheduleTagSchema, scheduleTagsSchema, } from "./host-correlation.js";
 export { scheduleSelectionSchema, normalizeScheduleSelection, } from "./schedule-selection.js";
 export * from "./bulk-operations.js";
 export { executionSelectionSchema, normalizeExecutionSelection, } from "./execution-selection.js";
 export { bulkJobIdSchema } from "./identifiers.js";
 export * from "./attempt-search.js";
+export { REQUESTED_LATENCY_CLASSES, SERVICE_BANDS, bandLatencyClass, oneOffSpacingMs, recurrenceSpacingMs, replacementMode, resolveOccurrence, resolveService, roundEligibilityMs, } from "./service-mode.js";

package/dist/mcp.js

@@ -56,6 +56,7 @@ export const MCP_INSTRUCTIONS = [
     "GreatWait schedules work and delivers it to an endpoint at the time asked for.",
     "Every tool acts inside one organization, project and environment, fixed by the credential this connection was authorized with; no argument can name another, and there is no tool that moves between them.",
     "Reads are safe to repeat. Writes are annotated, and the ones marked destructive settle or discard an occurrence that would otherwise have fired.",
+    "List tools return one page (25 items by default, at most 100) and a `nextCursor` while more remain: follow `nextCursor` until it is absent before counting, ranking or concluding something does not exist, and use schedules_summary for whole-project schedule counts.",
     "A refusal comes back as a problem document with a stable `code`: act on the code, not on the wording.",
 ].join(" ");
 /**

package/dist/operational-config.d.ts

@@ -31,27 +31,8 @@ export declare const OPERATIONAL_TIMING: Readonly<{
     claimReclaimWindowMs: 1200;
     controlPlaneBackoffCeilingMs: 200;
     controlPlaneConnectMs: 5000;
-    conclusionReplayDelaysMs: readonly [250, 1000, 2000, 4000];
-    hostFullRetryMs: 1000;
     deliveryRetryBaseMs: readonly [2000, 5000, 15000, 60000];
     deliveryRetryAfterMaximumMs: 3600000;
-    wakeReceiptRetryMs: 5000;
-    wakeReceiptRecoveryLifetimeMs: number;
-    repairOverdueGraceSeconds: 10;
-    admissionWindowMs: 1000;
-    admissionLookaheadMs: 60000;
-    admissionHedgeAfterMs: 250;
-    admissionRpcBudgetMs: 2999;
-    unreachableRetryMs: 5000;
-    heldResponseStepMarginMs: 20000;
-    sendLeaseMarginSeconds: 12;
-    sendSettlementReserveMs: 7000;
-    exhaustedClaimRetryMs: 250;
-    retentionCadenceMs: number;
-    retentionBacklogCadenceMs: number;
-    retentionRetryHandoffCount: 5;
-    timerSignalRetryDelaysMs: readonly number[];
-    dispatchWarmHorizonMs: 10000;
     sdkAutoRetryCount: 3;
     sdkAutoRetryBaseMs: 250;
     sdkAutoRetryMaximumWaitMs: 30000;
@@ -85,13 +66,108 @@ export declare const OPERATIONAL_TIMING: Readonly<{
     forecastRefreshMaximumMs: 300000;
     forecastCoverageSlackMs: 120000;
 }>;
+/**
+ * The approved service-mode policy (W12-02, FXO-3171; owner decision
+ * 2026-10-14, docs/archive/warm-worker-scheduling/project-spec.md § Customer
+ * contract). Product decisions, not tuning: a change is a change to what
+ * customers were promised, and `service-mode.test.ts` holds the approved values.
+ *
+ * - `auto` resolves a one-off planned below `autoRealtimeBelowMs` after its
+ *   acceptance to `realtime`; exactly at the threshold it is bulk.
+ * - Bulk work below `shortBulkBelowMs` (one-off lead, or a recurrence's shorter
+ *   adjacent gap) uses the short-bulk band; at and above it, ordinary bulk.
+ * - Each band's first eligibility rounds up to its quantum; an instant already
+ *   on a boundary is unchanged.
+ * - The p95 first-outbound lateness targets are engineering targets, never an
+ *   SLA, and nothing in the send path reads them.
+ */
+export declare const SERVICE_MODE_POLICY: Readonly<{
+    autoRealtimeBelowMs: 60000;
+    shortBulkBelowMs: 300000;
+    quantumMs: Readonly<{
+        readonly realtime: 250;
+        readonly short_bulk: 5000;
+        readonly bulk: 50000;
+    }>;
+    firstOutboundP95TargetMs: Readonly<{
+        readonly realtime: 1000;
+        readonly short_bulk: 10000;
+        readonly bulk: 60000;
+    }>;
+}>;
+/**
+ * W12-03: bounded approximate warm API abuse controls. These are estimated
+ * safety settings, independent of exact plan/accounting limits. API topology
+ * is a required deployment input, never inferred from execution-only nodes.
+ * Pure local-object initializers let Worker bundles omit unused warm settings;
+ * referenced settings still freeze at runtime.
+ */
+export declare const WARM_API_ADMISSION: Readonly<{
+    maximumEntries: 100000;
+    minimumBurst: 1;
+    expirySweepLimit: 100;
+    failureLogIntervalMs: 60000;
+    maximumApiNodes: 10000;
+}>;
+/**
+ * The warm claim path's starting settings
+ * (docs/archive/warm-worker-scheduling/implementation-guide.md § Boundaries
+ * and parameter ownership, § Bounded discovery and fairness). **Estimated**:
+ * bounded-work settings, not measured capacity, a fairness SLA or a customer
+ * promise. Tune one only after an observation shows it is the limit, and record
+ * the observation in the handoff.
+ *
+ * - A claim takes at most `claimTarget` occurrences, never more than
+ *   `claimMaximum`, and never more than the worker's free local capacity.
+ * - One claim transaction inspects at most `inspectionCap` narrow occurrence
+ *   rows across all its probes, and walks at most that many catalog scopes.
+ * - The catalog is read `catalogPageScopes` scopes at a time; each eligible
+ *   scope's due probe returns at most `perScopeProbe` rows per pass. Refill
+ *   passes after the catalog walk may take more from a scope that filled its
+ *   share, within the same inspection cap.
+ * - An empty realtime lane polls again after `realtimeEmptyPollMs`. The bulk
+ *   lanes poll at their band's next boundary
+ *   (`SERVICE_MODE_POLICY.quantumMs`), the instant their work becomes eligible.
+ */
+export declare const WARM_CLAIM_SETTINGS: Readonly<{
+    claimTarget: 100;
+    claimMaximum: 500;
+    inspectionCap: 2000;
+    catalogPageScopes: 64;
+    perScopeProbe: 25;
+    realtimeEmptyPollMs: 250;
+}>;
+/** W12-05 estimated bounded-work settings, not capacity or customer promises. */
+export declare const WARM_SEND_SETTINGS: Readonly<{
+    pacingRequestBudgetMs: 100;
+    pacingOwnerBudgetMs: 80;
+    pacingClockSkewMs: 2000;
+    pacingMaxBatch: 100;
+    pacingHardMaxBatch: 500;
+    pacingMaxBytes: number;
+    activationRefreshMs: 1000;
+    activationPageSize: 256;
+    activationCacheBytes: number;
+    reactiveActivationMs: 30000;
+    settlementTarget: 100;
+    settlementHardMax: 500;
+    settlementMaxBytes: number;
+    settlementMaxAgeMs: 50;
+}>;
+/** W12-06 billing cadence and bounded shared-loop polling. Not permission timeouts. */
+export declare const WARM_BILLING_SETTINGS: Readonly<{
+    quietMs: 1000;
+    oldestPendingMs: 30000;
+    detailMs: 60000;
+    idlePollMs: 1000;
+}>;
 export type OperationalTimingKey = keyof typeof OPERATIONAL_TIMING;
 export declare const OPERATIONAL_TIMING_ENFORCEMENT: Readonly<Record<OperationalTimingKey, readonly string[]>>;
 /** Catalog metadata derives its defaults from the numeric owner above. */
 export declare const OPERATIONAL_TIMING_CATALOG: readonly Readonly<{
-    key: "operational.projectBillingConflictRetryCount" | "operational.projectBillingConflictRetryBaseMs" | "operational.billingNoticeBackoffBaseMs" | "operational.automaticFundingBackoffBaseMs" | "operational.controlPlaneBackoffBaseMs" | "operational.postgresConnectionAcquisitionMs" | "operational.postgresLockMs" | "operational.postgresStatementMs" | "operational.postgresTransactionBudgetMs" | "operational.postgresTransactionMaximumMs" | "operational.apiMutationStatementMs" | "operational.apiMutationBudgetMs" | "operational.apiMutationMaximumMs" | "operational.controlPlaneWriteStatementMs" | "operational.controlPlaneWriteBudgetMs" | "operational.dispatchHedgeAfterMs" | "operational.dispatchHedgeThirdLegMs" | "operational.apiHedgeAfterMs" | "operational.authorizationReplayDelaysMs" | "operational.claimProbeCount" | "operational.claimReclaimCount" | "operational.claimReclaimWindowMs" | "operational.controlPlaneBackoffCeilingMs" | "operational.controlPlaneConnectMs" | "operational.conclusionReplayDelaysMs" | "operational.hostFullRetryMs" | "operational.deliveryRetryBaseMs" | "operational.deliveryRetryAfterMaximumMs" | "operational.wakeReceiptRetryMs" | "operational.wakeReceiptRecoveryLifetimeMs" | "operational.repairOverdueGraceSeconds" | "operational.admissionWindowMs" | "operational.admissionLookaheadMs" | "operational.admissionHedgeAfterMs" | "operational.admissionRpcBudgetMs" | "operational.unreachableRetryMs" | "operational.heldResponseStepMarginMs" | "operational.sendLeaseMarginSeconds" | "operational.sendSettlementReserveMs" | "operational.exhaustedClaimRetryMs" | "operational.retentionCadenceMs" | "operational.retentionBacklogCadenceMs" | "operational.retentionRetryHandoffCount" | "operational.timerSignalRetryDelaysMs" | "operational.dispatchWarmHorizonMs" | "operational.sdkAutoRetryCount" | "operational.sdkAutoRetryBaseMs" | "operational.sdkAutoRetryMaximumWaitMs" | "operational.callbackMiddlewareLeaseMs" | "operational.automaticFundingSuccessCooldownMs" | "operational.automaticFundingClaimLeaseMs" | "operational.automaticFundingBackoffMaximumMs" | "operational.providerCreateFenceMs" | "operational.fundingUnresolvedAfterMs" | "operational.fundingRepairMs" | "operational.fundingActionRequiredRepairMs" | "operational.fundingDisputeRepairMs" | "operational.billingNoticeBackoffMaximumMs" | "operational.billingNoticeClaimMaximumMs" | "operational.billingNoticeRetryMaximumMs" | "operational.billingNoticeCatchUpRetryCount" | "operational.billingNoticeClaimSeconds" | "operational.fundingDiscoveryClaimMs" | "operational.fundingDiscoveryRetryMaximumMs" | "operational.fundingDiscoveryClaimMaximumMs" | "operational.fundingAbandonedAfterMs" | "operational.checkoutDiscoverySkewSeconds" | "operational.checkoutDiscoveryWindowSeconds" | "operational.fundingQuoteLifetimeMs" | "operational.automaticFundingPreviewLifetimeMs" | "operational.testSinkRefreshMs" | "operational.payloadLintDelayMs" | "operational.payloadParseBudgetMs" | "operational.dashboardQueryStaleMs" | "operational.forecastRefreshFloorMs" | "operational.forecastRefreshMaximumMs" | "operational.forecastCoverageSlackMs";
-    default: number | readonly number[] | readonly [500, 1500, 4000] | readonly [250, 1000, 2000, 4000] | readonly [2000, 5000, 15000, 60000];
-    unit: "count" | "seconds" | "milliseconds";
+    key: "operational.projectBillingConflictRetryCount" | "operational.projectBillingConflictRetryBaseMs" | "operational.billingNoticeBackoffBaseMs" | "operational.automaticFundingBackoffBaseMs" | "operational.controlPlaneBackoffBaseMs" | "operational.postgresConnectionAcquisitionMs" | "operational.postgresLockMs" | "operational.postgresStatementMs" | "operational.postgresTransactionBudgetMs" | "operational.postgresTransactionMaximumMs" | "operational.apiMutationStatementMs" | "operational.apiMutationBudgetMs" | "operational.apiMutationMaximumMs" | "operational.controlPlaneWriteStatementMs" | "operational.controlPlaneWriteBudgetMs" | "operational.dispatchHedgeAfterMs" | "operational.dispatchHedgeThirdLegMs" | "operational.apiHedgeAfterMs" | "operational.authorizationReplayDelaysMs" | "operational.claimProbeCount" | "operational.claimReclaimCount" | "operational.claimReclaimWindowMs" | "operational.controlPlaneBackoffCeilingMs" | "operational.controlPlaneConnectMs" | "operational.deliveryRetryBaseMs" | "operational.deliveryRetryAfterMaximumMs" | "operational.sdkAutoRetryCount" | "operational.sdkAutoRetryBaseMs" | "operational.sdkAutoRetryMaximumWaitMs" | "operational.callbackMiddlewareLeaseMs" | "operational.automaticFundingSuccessCooldownMs" | "operational.automaticFundingClaimLeaseMs" | "operational.automaticFundingBackoffMaximumMs" | "operational.providerCreateFenceMs" | "operational.fundingUnresolvedAfterMs" | "operational.fundingRepairMs" | "operational.fundingActionRequiredRepairMs" | "operational.fundingDisputeRepairMs" | "operational.billingNoticeBackoffMaximumMs" | "operational.billingNoticeClaimMaximumMs" | "operational.billingNoticeRetryMaximumMs" | "operational.billingNoticeCatchUpRetryCount" | "operational.billingNoticeClaimSeconds" | "operational.fundingDiscoveryClaimMs" | "operational.fundingDiscoveryRetryMaximumMs" | "operational.fundingDiscoveryClaimMaximumMs" | "operational.fundingAbandonedAfterMs" | "operational.checkoutDiscoverySkewSeconds" | "operational.checkoutDiscoveryWindowSeconds" | "operational.fundingQuoteLifetimeMs" | "operational.automaticFundingPreviewLifetimeMs" | "operational.testSinkRefreshMs" | "operational.payloadLintDelayMs" | "operational.payloadParseBudgetMs" | "operational.dashboardQueryStaleMs" | "operational.forecastRefreshFloorMs" | "operational.forecastRefreshMaximumMs" | "operational.forecastCoverageSlackMs";
+    default: number | readonly [500, 1500, 4000] | readonly [2000, 5000, 15000, 60000];
+    unit: "seconds" | "count" | "milliseconds";
     scope: "deployment";
     permittedLayers: readonly ["deployment"];
     visibility: "operator";
@@ -99,3 +175,79 @@ export declare const OPERATIONAL_TIMING_CATALOG: readonly Readonly<{
     rationale: "Retain the existing measured or copied operating policy; the enforcement owner documents its evidence";
     enforcement: readonly string[];
 }>[];
+/** Estimated CPU/storage policy; writes stay off until readers and rollback agree. */
+export declare const PAYLOAD_COMPRESSION_POLICY: Readonly<{
+    newEnvelopeWrites: false;
+    minimumBodyBytes: 1024;
+    gzipLevel: 1;
+    minimumSavingsBytes: 128;
+    minimumSavingsRatio: 0.1;
+    maximumConcurrentJobs: 2;
+}>;
+/** Explicit rollout switch: unset/off preserves every legacy rollback image. */
+export declare function readPayloadEnvelopeWrites(raw: string | undefined): boolean;
+/**
+ * W10 scaling signals, dedicated-pool fallback and forecast herd hints
+ * (docs/archive/warm-worker-scheduling/implementation-guide.md § W10 and
+ * scaling-signals-contract.md). **Estimated** starting settings, not measured
+ * capacity, a controller tick or a customer promise. Fleet size and database
+ * tier remain operator deployment inputs (apps/api/src/node/control-settings.ts).
+ *
+ * - Every process writes one registry heartbeat per `heartbeatMs`; a heartbeat
+ *   older than `heartbeatStaleMs` is reported stale, never as proof that its
+ *   connections are released. A cleanly stopped row is deleted after
+ *   `workerRetentionMs`; a stale row that never reported a stop is kept and
+ *   reported as unconfirmed for `unconfirmedRetentionMs`. Deletion runs
+ *   `workerRetentionBatch` rows at a time.
+ * - A dedicated pool with members but no live serving process for
+ *   `dedicatedFallbackGraceMs` is served by shared workers for new claims.
+ * - The forecast sweep reads at most `forecastCatalogScopes` scopes in pages of
+ *   `forecastCatalogPageScopes`, at most `forecastScopeRows` due-or-upcoming rows
+ *   per scope and band, and at most `forecastRowBudget` rows in all, over
+ *   `forecastHorizonMs`, aggregated by `forecastBucketMs` of rounded
+ *   eligibility. Snapshot windows aggregate those buckets by `forecastWindowMs`.
+ * - One leased node runs the herd tick every `forecastTickMs`; its lease lasts
+ *   `forecastLeaseMs`. A herd hint starts two hint refresh periods plus the
+ *   pacing request budget before the herd and lasts through its predicted drain
+ *   plus `herdTailMs`. Each owner gets one bounded touch on detection and one
+ *   more inside `prewarmLeadMs` only if the first fell outside it; at most
+ *   `prewarmMaxOwners` owners are touched per tick.
+ */
+export declare const WARM_SCALING_SETTINGS: Readonly<{
+    heartbeatMs: 10000;
+    heartbeatStaleMs: 30000;
+    dedicatedFallbackGraceMs: 60000;
+    workerRetentionMs: number;
+    unconfirmedRetentionMs: number;
+    workerRetentionBatch: 100;
+    registryReadLimit: 1000;
+    poolReadLimit: 256;
+    poolMemberCountLimit: 10000;
+    forecastTickMs: 10000;
+    forecastLeaseMs: 30000;
+    forecastHorizonMs: number;
+    forecastBucketMs: 1000;
+    forecastWindowMs: 10000;
+    forecastCatalogPageScopes: 64;
+    forecastCatalogScopes: 256;
+    forecastScopeRows: 256;
+    forecastRowBudget: 16384;
+    herdTailMs: 30000;
+    prewarmLeadMs: 10000;
+    prewarmMaxOwners: 100;
+}>;
+/** W07 estimated bounded maintenance cadence. Domain retention/backoff horizons
+ * retain their existing owners; these values only schedule discovery. */
+export declare const WARM_BACKGROUND_SETTINGS: Readonly<{
+    recoveryPollMs: 1000;
+    repairPollMs: 60000;
+    maintenanceObservationMs: 60000;
+    batchLimit: 100;
+    statusClaimLimit: 8;
+}>;
+/** Internal diagnostic/rebuild copies only; financial-ledger retention is separate. */
+export declare const BILLING_OUTBOX_HISTORY_MS: number;
+/** Deployment controls for a coordinated stop/drain/switch, never tenant routing. */
+export declare function readLegacyRuntimeState(raw: unknown): "active" | "draining" | "stopped";
+export declare function readIntakePaused(raw: unknown): boolean;
+export declare function readWarmOwnersEnabled(raw: unknown): boolean;

package/dist/operational-config.js

@@ -31,27 +31,8 @@ export const OPERATIONAL_TIMING = Object.freeze({
     claimReclaimWindowMs: 1_200,
     controlPlaneBackoffCeilingMs: 200,
     controlPlaneConnectMs: 5_000,
-    conclusionReplayDelaysMs: Object.freeze([250, 1_000, 2_000, 4_000]),
-    hostFullRetryMs: 1_000,
     deliveryRetryBaseMs: Object.freeze([2_000, 5_000, 15_000, 60_000]),
     deliveryRetryAfterMaximumMs: 3_600_000,
-    wakeReceiptRetryMs: 5_000,
-    wakeReceiptRecoveryLifetimeMs: 9 * 60_000,
-    repairOverdueGraceSeconds: 10,
-    admissionWindowMs: 1_000,
-    admissionLookaheadMs: 60_000,
-    admissionHedgeAfterMs: 250,
-    admissionRpcBudgetMs: 2_999,
-    unreachableRetryMs: 5_000,
-    heldResponseStepMarginMs: 20_000,
-    sendLeaseMarginSeconds: 12,
-    sendSettlementReserveMs: 7_000,
-    exhaustedClaimRetryMs: 250,
-    retentionCadenceMs: 60 * 60 * 1_000,
-    retentionBacklogCadenceMs: 60 * 1_000,
-    retentionRetryHandoffCount: 5,
-    timerSignalRetryDelaysMs: Object.freeze([250, 1_000]),
-    dispatchWarmHorizonMs: 10_000,
     sdkAutoRetryCount: 3,
     sdkAutoRetryBaseMs: 250,
     sdkAutoRetryMaximumWaitMs: 30_000,
@@ -85,6 +66,109 @@ export const OPERATIONAL_TIMING = Object.freeze({
     forecastRefreshMaximumMs: 300_000,
     forecastCoverageSlackMs: 120_000,
 });
+// Share the literal without a cross-object property read: that read prevents
+// Workers from tree-shaking the otherwise unused warm claim settings.
+const REALTIME_ELIGIBILITY_QUANTUM_MS = 250;
+/**
+ * The approved service-mode policy (W12-02, FXO-3171; owner decision
+ * 2026-10-14, docs/archive/warm-worker-scheduling/project-spec.md § Customer
+ * contract). Product decisions, not tuning: a change is a change to what
+ * customers were promised, and `service-mode.test.ts` holds the approved values.
+ *
+ * - `auto` resolves a one-off planned below `autoRealtimeBelowMs` after its
+ *   acceptance to `realtime`; exactly at the threshold it is bulk.
+ * - Bulk work below `shortBulkBelowMs` (one-off lead, or a recurrence's shorter
+ *   adjacent gap) uses the short-bulk band; at and above it, ordinary bulk.
+ * - Each band's first eligibility rounds up to its quantum; an instant already
+ *   on a boundary is unchanged.
+ * - The p95 first-outbound lateness targets are engineering targets, never an
+ *   SLA, and nothing in the send path reads them.
+ */
+export const SERVICE_MODE_POLICY = Object.freeze({
+    autoRealtimeBelowMs: 60_000,
+    shortBulkBelowMs: 300_000,
+    quantumMs: Object.freeze({
+        realtime: REALTIME_ELIGIBILITY_QUANTUM_MS,
+        short_bulk: 5_000,
+        bulk: 50_000,
+    }),
+    firstOutboundP95TargetMs: Object.freeze({
+        realtime: 1_000,
+        short_bulk: 10_000,
+        bulk: 60_000,
+    }),
+});
+/**
+ * W12-03: bounded approximate warm API abuse controls. These are estimated
+ * safety settings, independent of exact plan/accounting limits. API topology
+ * is a required deployment input, never inferred from execution-only nodes.
+ * Pure local-object initializers let Worker bundles omit unused warm settings;
+ * referenced settings still freeze at runtime.
+ */
+export const WARM_API_ADMISSION = /* @__PURE__ */ Object.freeze({
+    maximumEntries: 100_000,
+    minimumBurst: 1,
+    expirySweepLimit: 100,
+    failureLogIntervalMs: 60_000,
+    maximumApiNodes: 10_000,
+});
+// ---- W12-04 (FXO-3173) warm claim settings: begin ----
+/**
+ * The warm claim path's starting settings
+ * (docs/archive/warm-worker-scheduling/implementation-guide.md § Boundaries
+ * and parameter ownership, § Bounded discovery and fairness). **Estimated**:
+ * bounded-work settings, not measured capacity, a fairness SLA or a customer
+ * promise. Tune one only after an observation shows it is the limit, and record
+ * the observation in the handoff.
+ *
+ * - A claim takes at most `claimTarget` occurrences, never more than
+ *   `claimMaximum`, and never more than the worker's free local capacity.
+ * - One claim transaction inspects at most `inspectionCap` narrow occurrence
+ *   rows across all its probes, and walks at most that many catalog scopes.
+ * - The catalog is read `catalogPageScopes` scopes at a time; each eligible
+ *   scope's due probe returns at most `perScopeProbe` rows per pass. Refill
+ *   passes after the catalog walk may take more from a scope that filled its
+ *   share, within the same inspection cap.
+ * - An empty realtime lane polls again after `realtimeEmptyPollMs`. The bulk
+ *   lanes poll at their band's next boundary
+ *   (`SERVICE_MODE_POLICY.quantumMs`), the instant their work becomes eligible.
+ */
+export const WARM_CLAIM_SETTINGS = /* @__PURE__ */ Object.freeze({
+    claimTarget: 100,
+    claimMaximum: 500,
+    inspectionCap: 2_000,
+    catalogPageScopes: 64,
+    perScopeProbe: 25,
+    // An empty lane needs at most one look per eligibility quantum. Productive
+    // catalog passes still drain immediately, without waiting to fill a batch.
+    realtimeEmptyPollMs: REALTIME_ELIGIBILITY_QUANTUM_MS,
+});
+// ---- W12-04 (FXO-3173) warm claim settings: end ----
+/** W12-05 estimated bounded-work settings, not capacity or customer promises. */
+export const WARM_SEND_SETTINGS = /* @__PURE__ */ Object.freeze({
+    pacingRequestBudgetMs: 100,
+    // Leave response transit room inside the Node caller's whole request budget.
+    pacingOwnerBudgetMs: 80,
+    pacingClockSkewMs: 2_000,
+    pacingMaxBatch: 100,
+    pacingHardMaxBatch: 500,
+    pacingMaxBytes: 256 * 1024,
+    activationRefreshMs: 1_000,
+    activationPageSize: 256,
+    activationCacheBytes: 4 * 1024 * 1024,
+    reactiveActivationMs: 30_000,
+    settlementTarget: 100,
+    settlementHardMax: 500,
+    settlementMaxBytes: 256 * 1024,
+    settlementMaxAgeMs: 50,
+});
+/** W12-06 billing cadence and bounded shared-loop polling. Not permission timeouts. */
+export const WARM_BILLING_SETTINGS = /* @__PURE__ */ Object.freeze({
+    quietMs: 1_000,
+    oldestPendingMs: 30_000,
+    detailMs: 60_000,
+    idlePollMs: 1_000,
+});
 export const OPERATIONAL_TIMING_ENFORCEMENT = /* @__PURE__ */ (() => Object.freeze({
     forecastRefreshFloorMs: [
         "packages/contracts/src/forecast.ts#OPERATIONAL_TIMING.forecastRefreshFloorMs",
@@ -155,67 +239,12 @@ export const OPERATIONAL_TIMING_ENFORCEMENT = /* @__PURE__ */ (() => Object.free
     controlPlaneConnectMs: [
         "packages/postgres-scheduling/src/control-plane-database.ts#CONTROL_PLANE_CONNECT_TIMEOUT_MS",
     ],
-    conclusionReplayDelaysMs: [
-        "packages/application/src/dialer.ts#DEFAULT_CONCLUSION_RETRY_DELAYS_MS",
-    ],
-    hostFullRetryMs: [
-        "packages/application/src/dialer.ts#DEFAULT_HOST_FULL_RETRY_MS",
-    ],
     deliveryRetryBaseMs: [
         "packages/application/src/schedule-series.ts#RETRY_BASE_MS",
     ],
     deliveryRetryAfterMaximumMs: [
         "packages/application/src/schedule-series.ts#MAX_RETRY_AFTER_MS",
     ],
-    wakeReceiptRetryMs: [
-        "packages/application/src/timer-bucket.ts#WAKE_RECEIPT_RETRY_MS",
-    ],
-    wakeReceiptRecoveryLifetimeMs: [
-        "packages/application/src/timer-bucket.ts#WAKE_RECEIPT_RECOVERY_LIFETIME_MS",
-    ],
-    repairOverdueGraceSeconds: [
-        "packages/application/src/timer-bucket-repair.ts#REPAIR_OVERDUE_GRACE_SECONDS",
-    ],
-    admissionWindowMs: [
-        "packages/application/src/admission-window.ts#ADMISSION_WINDOW_MS",
-    ],
-    admissionLookaheadMs: [
-        "packages/application/src/admission-window.ts#ADMISSION_WINDOW_MAX_LOOKAHEAD_MS",
-    ],
-    admissionHedgeAfterMs: [
-        "packages/delivery-runtime/src/admission-hedge.ts#ADMISSION_HEDGE_AFTER_MS",
-    ],
-    admissionRpcBudgetMs: [
-        "packages/delivery-runtime/src/admission-hedge.ts#ADMISSION_RPC_BUDGET_MS",
-    ],
-    unreachableRetryMs: [
-        "packages/delivery-runtime/src/dispatch-admission.ts#UNREACHABLE_RETRY_MS",
-    ],
-    heldResponseStepMarginMs: [
-        "packages/delivery-runtime/src/held-response-carrier.ts#HELD_RESPONSE_STEP_MARGIN_MS",
-    ],
-    sendLeaseMarginSeconds: [
-        "packages/delivery-runtime/src/held-response-carrier.ts#SEND_LEASE_MARGIN_SECONDS",
-    ],
-    sendSettlementReserveMs: [
-        "packages/delivery-runtime/src/held-response-carrier.ts#SEND_SETTLEMENT_RESERVE_MS",
-    ],
-    exhaustedClaimRetryMs: [
-        "packages/timer-bucket/src/durable-object.ts#EXHAUSTED_CLAIM_RETRY_MS",
-    ],
-    retentionCadenceMs: [
-        "packages/retention-worker/src/worker.ts#RETENTION_CADENCE_MS",
-    ],
-    retentionBacklogCadenceMs: [
-        "packages/retention-worker/src/worker.ts#RETENTION_BACKLOG_CADENCE_MS",
-    ],
-    retentionRetryHandoffCount: [
-        "packages/retention-worker/src/worker.ts#RETENTION_RETRY_HANDOFF_COUNT",
-    ],
-    timerSignalRetryDelaysMs: [
-        "apps/api/src/detached-signal.ts#TIMER_SIGNAL_RETRY_DELAYS_MS",
-    ],
-    dispatchWarmHorizonMs: ["apps/api/src/worker.ts#DISPATCH_WARM_HORIZON_MS"],
     sdkAutoRetryCount: [
         "packages/api-client/src/client.ts#SDK_AUTO_RETRY_LIMIT",
     ],
@@ -340,3 +369,107 @@ export const OPERATIONAL_TIMING_CATALOG = /* @__PURE__ */ (() => Object.freeze(O
     rationale: "Retain the existing measured or copied operating policy; the enforcement owner documents its evidence",
     enforcement: OPERATIONAL_TIMING_ENFORCEMENT[key],
 }))))();
+// ---- W12-08 (FXO-3177) payload compression begin ----
+/** Estimated CPU/storage policy; writes stay off until readers and rollback agree. */
+export const PAYLOAD_COMPRESSION_POLICY = /* @__PURE__ */ Object.freeze({
+    newEnvelopeWrites: false,
+    minimumBodyBytes: 1_024,
+    gzipLevel: 1,
+    minimumSavingsBytes: 128,
+    minimumSavingsRatio: 0.1,
+    maximumConcurrentJobs: 2,
+});
+/** Explicit rollout switch: unset/off preserves every legacy rollback image. */
+export function readPayloadEnvelopeWrites(raw) {
+    if (raw === undefined || raw === "off")
+        return false;
+    if (raw === "on")
+        return true;
+    throw new Error("GREATWAIT_PAYLOAD_ENVELOPE_WRITES must be on or off");
+}
+// ---- W12-08 (FXO-3177) payload compression end ----
+// ---- W12-10 (FXO-3179) scaling signals: begin ----
+/**
+ * W10 scaling signals, dedicated-pool fallback and forecast herd hints
+ * (docs/archive/warm-worker-scheduling/implementation-guide.md § W10 and
+ * scaling-signals-contract.md). **Estimated** starting settings, not measured
+ * capacity, a controller tick or a customer promise. Fleet size and database
+ * tier remain operator deployment inputs (apps/api/src/node/control-settings.ts).
+ *
+ * - Every process writes one registry heartbeat per `heartbeatMs`; a heartbeat
+ *   older than `heartbeatStaleMs` is reported stale, never as proof that its
+ *   connections are released. A cleanly stopped row is deleted after
+ *   `workerRetentionMs`; a stale row that never reported a stop is kept and
+ *   reported as unconfirmed for `unconfirmedRetentionMs`. Deletion runs
+ *   `workerRetentionBatch` rows at a time.
+ * - A dedicated pool with members but no live serving process for
+ *   `dedicatedFallbackGraceMs` is served by shared workers for new claims.
+ * - The forecast sweep reads at most `forecastCatalogScopes` scopes in pages of
+ *   `forecastCatalogPageScopes`, at most `forecastScopeRows` due-or-upcoming rows
+ *   per scope and band, and at most `forecastRowBudget` rows in all, over
+ *   `forecastHorizonMs`, aggregated by `forecastBucketMs` of rounded
+ *   eligibility. Snapshot windows aggregate those buckets by `forecastWindowMs`.
+ * - One leased node runs the herd tick every `forecastTickMs`; its lease lasts
+ *   `forecastLeaseMs`. A herd hint starts two hint refresh periods plus the
+ *   pacing request budget before the herd and lasts through its predicted drain
+ *   plus `herdTailMs`. Each owner gets one bounded touch on detection and one
+ *   more inside `prewarmLeadMs` only if the first fell outside it; at most
+ *   `prewarmMaxOwners` owners are touched per tick.
+ */
+export const WARM_SCALING_SETTINGS = /* @__PURE__ */ Object.freeze({
+    heartbeatMs: 10_000,
+    heartbeatStaleMs: 30_000,
+    dedicatedFallbackGraceMs: 60_000,
+    workerRetentionMs: 24 * 60 * 60_000,
+    unconfirmedRetentionMs: 7 * 24 * 60 * 60_000,
+    workerRetentionBatch: 100,
+    registryReadLimit: 1_000,
+    poolReadLimit: 256,
+    poolMemberCountLimit: 10_000,
+    forecastTickMs: 10_000,
+    forecastLeaseMs: 30_000,
+    forecastHorizonMs: 10 * 60_000,
+    forecastBucketMs: 1_000,
+    forecastWindowMs: 10_000,
+    forecastCatalogPageScopes: 64,
+    forecastCatalogScopes: 256,
+    forecastScopeRows: 256,
+    forecastRowBudget: 16_384,
+    herdTailMs: 30_000,
+    prewarmLeadMs: 10_000,
+    prewarmMaxOwners: 100,
+});
+// ---- W12-10 (FXO-3179) scaling signals: end ----
+/** W07 estimated bounded maintenance cadence. Domain retention/backoff horizons
+ * retain their existing owners; these values only schedule discovery. */
+export const WARM_BACKGROUND_SETTINGS = /* @__PURE__ */ Object.freeze({
+    recoveryPollMs: 1_000,
+    repairPollMs: 60_000,
+    maintenanceObservationMs: 60_000,
+    batchLimit: 100,
+    statusClaimLimit: 8,
+});
+/** Internal diagnostic/rebuild copies only; financial-ledger retention is separate. */
+export const BILLING_OUTBOX_HISTORY_MS = 90 * 24 * 60 * 60_000;
+/** Deployment controls for a coordinated stop/drain/switch, never tenant routing. */
+export function readLegacyRuntimeState(raw) {
+    if (raw === undefined || raw === "active")
+        return "active";
+    if (raw === "draining" || raw === "stopped")
+        return raw;
+    throw new Error("GREATWAIT_LEGACY_RUNTIME_STATE must be active, draining or stopped");
+}
+export function readIntakePaused(raw) {
+    if (raw === undefined || raw === "off")
+        return false;
+    if (raw === "on")
+        return true;
+    throw new Error("GREATWAIT_INTAKE_PAUSED must be on or off");
+}
+export function readWarmOwnersEnabled(raw) {
+    if (raw === undefined || raw === "on")
+        return true;
+    if (raw === "off")
+        return false;
+    throw new Error("GREATWAIT_WARM_OWNERS must be on or off");
+}