@fourier-labs/harbour-contracts 0.10.0 → 0.12.0

package/README.md

@@ -35,7 +35,7 @@ exist here first.
 | `ai-runtime-binding.schema.json` | Platform-neutral workload identity/secret binding | AI governance §5.8 |
 | `binding-classification-subject.schema.json` | Complete value-free binding-name classification before version allocation | AI governance §5.7 / SEC-UP-01 |
 | `sanitized-binding-evidence.schema.json` | Exact-version sanitized runtime-binding allocation receipt | AI governance §5.7 / SEC-UP-02 |
-| `ai-pricing-revision`, `ai-metering-policy`, `ai-budget-ledger-event`, `ai-trace-event-v2` | Additive metering v2 records; v1 records remain readable | AI governance §9 |
+| `ai-pricing-revision`, `ai-metering-policy`, `ai-budget-ledger-event`, `ai-trace-event-v2` | Additive metering v2 records, including media dimensions and P5 trace attribution; v1 records remain readable | AI governance §9 |
 
 Two schemas carry logic beyond structural types, generated into helpers:
 

package/contract-release.json

@@ -1,18 +1,18 @@
 {
   "schema": "harbour.contract-release/1.0",
-  "repositoryVersion": "0.10.0.0",
-  "publishVersion": "0.10.0",
-  "publishTag": "v0.10.0",
-  "schemasDigest": "sha256:e22fd6329b9064a3d653dbc6bc3ee0c2033ee6d8d279f06532a355c9285aa7fe",
-  "aiFixturesDigest": "sha256:8355039f14457087d36aee52ae1a0a93096bf12f34bd8af0d948c605b6dff226",
-  "generatedGoDigest": "sha256:d1a57e9b7b414bc239af4dd897c444bfac08e3bfbb24426d525faad6878d6a26",
-  "generatedTypeScriptDigest": "sha256:e455c76468808b1191a3d2d774786bb18dc435785d9fa31a559f6b93f3e160c9",
+  "repositoryVersion": "0.12.0.0",
+  "publishVersion": "0.12.0",
+  "publishTag": "v0.12.0",
+  "schemasDigest": "sha256:0e90bbd74c5b1df2e0123ec75d8bec1296e9647b95c4aa88a9e9bb2452872bf4",
+  "aiFixturesDigest": "sha256:8c406c269e909c028e35eca1321c18de95457ddd6731db8f3fb4cd90726758a8",
+  "generatedGoDigest": "sha256:b42e736e80decef8ac00823a1e9a2e6ffe21dc9de43c5c9e1c53ebf467d34e2c",
+  "generatedTypeScriptDigest": "sha256:03ed593ff19141cb265436d6d069b86e0a75f3290d74b76689d48c5b37a52e5b",
   "generatedExclusions": {
     "gen-go/contract_release.go": "contains the generated aggregate digests (self-reference)",
     "gen-ts/contract-release.ts": "contains the generated aggregate digests (self-reference)"
   },
   "schemas": {
-    "schema/ai-budget-ledger-event.schema.json": "sha256:8396a1b3457bed3496dc7b60fb7fb30f76bbe3c60a20501823a61c75f2fdbafa",
+    "schema/ai-budget-ledger-event.schema.json": "sha256:92770bc5358e03a3aae6cd261dad02dfcbbb06a6203566da2c6c7a5e63dd671c",
     "schema/ai-callsite-inventory.schema.json": "sha256:b15899a97cf108e4cd1bfd31ec40c57b341590ddb9c118fdaa904215dbe01859",
     "schema/ai-classification-stamp.schema.json": "sha256:ad7f01dc8bb9a1cd619fce470227914aa3ef2ad57d34bfeaa0c6ef753aa6781d",
     "schema/ai-composite-policy-digest.schema.json": "sha256:3efccc249327e59f67a37fd954b524ee727a3e28a3c557a46d6ec1f15d69b34e",
@@ -20,12 +20,12 @@
     "schema/ai-gateway-key-lifecycle-event.schema.json": "sha256:ba5cb862abe73227bee714b25247b4cacb34f11fdd1476bb5f920923fd75e2a9",
     "schema/ai-gateway-key-lookup.schema.json": "sha256:e994d4782c9bc4f14d3a1c35c9ac1e7a5ec84284cde5b3af7e3e6022130ddbb3",
     "schema/ai-governance-decision.schema.json": "sha256:4d45c8540908bebb68456c45077c0cd453b416a3b955cc710de270950e090f50",
-    "schema/ai-metering-policy.schema.json": "sha256:e036885c170ce654740353aaaa01b2a7bcff714e73629123d7865af98c1cf303",
-    "schema/ai-policy-snapshot.schema.json": "sha256:dde70f30f4a501cfa65fc4d8da954d902e1c4cc966573fbe654eaea7bdeefca9",
-    "schema/ai-pricing-revision.schema.json": "sha256:75ccb847ac090821d817e92dc98dff49e29620018f8dc465b47f3617585d5b21",
+    "schema/ai-metering-policy.schema.json": "sha256:044115938d254d914feac162219d20ee48f741cd7ad32df4613b45f9c862fe8c",
+    "schema/ai-policy-snapshot.schema.json": "sha256:1778de5f1a5f6b034e2e767bd8189ad50daa03194107a05e090efafb5dce0cc1",
+    "schema/ai-pricing-revision.schema.json": "sha256:847fc3abf93ace82a188b028b067f3c3c1e7452e02a3c9ebba9bfbf3af749fd6",
     "schema/ai-runtime-binding.schema.json": "sha256:e86cac2f70a474997bdef1577ca15f22982ec0ce866921df3f763c4d7f7fa191",
     "schema/ai-runtime-contract.schema.json": "sha256:694cf8900ebe07a37ba0f12f50d2eed76e6608dc809e2b65969043e548dc4bba",
-    "schema/ai-trace-event-v2.schema.json": "sha256:946489fe9d58de5acf4a265d250800b4ad7b08aaacc50b00ef39feabe7aae94e",
+    "schema/ai-trace-event-v2.schema.json": "sha256:b479199bb6e44ea23a1da53f69943cb8f3886c433914fdb9bf9e9bdbc3dd767d",
     "schema/ai-trace-event.schema.json": "sha256:47c2268c9b8dbcf6e7908aeef43e71210f8a309bf4be4acc02139f9b59e7c717",
     "schema/ai-transform-event.schema.json": "sha256:b845762e653b19afdaf959f7bd1624db490cd10c760daa9aaa61fb83f2a86b6e",
     "schema/ai-transform-result.schema.json": "sha256:244e380a36957ab2dcb526ea22aaecb56b53664ce1fda6934d0021c084c99133",
@@ -47,19 +47,19 @@
     "schema/error-category.enum.json": "sha256:e215fe3dc254cf7fca6785f3a12aaeee9d28811b6625916630adda1ed5fc1a14",
     "schema/error-envelope.schema.json": "sha256:75dccda7dd16fdf8435deda53fc7dbcdc109b65114617a17f11763010c656f90",
     "schema/kvs-routing-entry.schema.json": "sha256:b75f3a5dfa93a428b2764e03222b66b6ef2bed980f8bac8ffac54afdf3526bc5",
-    "schema/promotion-request.schema.json": "sha256:6efb55d2b3af8de70829ff9945a2dda6312ff23ce3474fce2fa33ed846681aa6",
+    "schema/promotion-request.schema.json": "sha256:560460b57fc639d248fa657a2a1e3d88d27ab9139faf17ee58633b671f8b5072",
     "schema/promotion-response.schema.json": "sha256:4129712d2e29d6ef21d93d4bd0bacfd60ada3f2ee0ade852824e64346b817634",
-    "schema/sanitized-binding-evidence.schema.json": "sha256:ddd9c35fc7b9e74f6683e241e4f1fe13bd681143161e1fb3d3011827ecb8809b",
+    "schema/sanitized-binding-evidence.schema.json": "sha256:e5ae90ea18950deaefb21c2f05cc28af705cbab447b784dbaf7235b8bcfc9fd6",
     "schema/secret-reference.schema.json": "sha256:966f7a6d2575b46a4b54804d06dc05c6229ebbcbd9200fe6a6c8d3b4ffb90f9f",
     "schema/transform-report.schema.json": "sha256:10ba5faa915b3a9327909b0444a163f8e31f51b9f1b3d049ea341e8cedc521e1",
     "schema/version-state.schema.json": "sha256:e7c4b2e7b615ebb07f36d0df22ded51b2c9688ef9e9bfe79de1d5cd94de9ae40"
   },
   "aiFixtures": {
     "fixtures/ai/adversarial-binding-classification-value.json": "sha256:ca009f3f6162a9d93b4ab416d52c1fba12a8a15aca5aed956c5fdcf2171b1e28",
-    "fixtures/ai/adversarial-sanitized-binding-relabel.json": "sha256:adee92ca1ed009dd2107bcf66551b5d525b960a12d23251d3b4521a103ea8c40",
-    "fixtures/ai/valid-binding-classification-subject.json": "sha256:19e9a2ae9496471e2c25c0b210d7ed1e6d3d65286bbf25df0feaab1430ab2172",
+    "fixtures/ai/adversarial-sanitized-binding-relabel.json": "sha256:5deba053e91be027588e0a921bc7fcd75363044587b651b9fbb3f986b3a8bc85",
+    "fixtures/ai/valid-binding-classification-subject.json": "sha256:ca40d605f3351d44a4b37b598d033d129861443b65044fc056ca4406f07717c6",
     "fixtures/ai/valid-blocked-trace-event.json": "sha256:c72e753f5ed805d97b47af5cc57ea2fe9034f27b133bf0f5c6565fbc0c6693c1",
-    "fixtures/ai/valid-budget-ledger-event.json": "sha256:f56ee5339e549da44be1a30ac9ab08e209ff06749910bedfd66f47ef37c92877",
+    "fixtures/ai/valid-budget-ledger-event.json": "sha256:a2c1aea4f96fb28c61aa522bd5f5dfb2e1321b003f40fbcbac162d5404685760",
     "fixtures/ai/valid-classification-stamp.json": "sha256:bf8256cec5626031b4cf5acfe9ffde73100150ba19259c36b274e1be0820bb73",
     "fixtures/ai/valid-composite-policy-digest.json": "sha256:d13f2d022f9a29230103845b8af42b4f90c0d818ee64e6efaa31f5a547d9eeb7",
     "fixtures/ai/valid-deployment-gate-decision.json": "sha256:cf070be5b6b4b4363d72aba448c1f23c1eef288e930a7f0a2807598a30a7e0af",
@@ -68,14 +68,15 @@
     "fixtures/ai/valid-gateway-key-lookup.json": "sha256:a577cbdd019a7f39631e7efdb12dccb4377e3184d626a79979bfc426d04a50f4",
     "fixtures/ai/valid-governance-decision.json": "sha256:0cd3ffc5244e177af00670c6d839814a93048157cf11ccb738ed13b10d875c55",
     "fixtures/ai/valid-inventory.json": "sha256:3bb29df5525c3a69f6c13c203fbd08bb3d493ae5416fdd2f99125c74bbc11759",
-    "fixtures/ai/valid-metering-policy.json": "sha256:791892d2b70b999b6b4eb37ba0db6df579bb4a7dc31411c1edd5fc41f9f10600",
-    "fixtures/ai/valid-policy-snapshot.json": "sha256:862fb81b2a77f152c5f0d9f04542b8a93e5d0a3d88a518263a550c4ca0047f60",
-    "fixtures/ai/valid-pricing-revision.json": "sha256:ff7bfdccc1fd4173cf0cf0800fb953e60de55286b0bba557fac9c6a4e5984f81",
+    "fixtures/ai/valid-metering-policy.json": "sha256:73d10929f0232a09d31b263c5bf61f8985c9c629e1e78ea5c867dd919ff95c96",
+    "fixtures/ai/valid-policy-snapshot.json": "sha256:5ce6df9c261989f7a279eb772ead47d19e425a3e1df78d3a3eeb9043dee04318",
+    "fixtures/ai/valid-pricing-revision.json": "sha256:b8a89816a332397257fa0c40e5142ad9f05c9c6cbb92c37ae700f9b61c31fbce",
     "fixtures/ai/valid-runtime-binding.json": "sha256:df971a518b8e680bb5260e801e7a0b03dd05076aeb11258205ec5ec205719f53",
     "fixtures/ai/valid-runtime-contract.json": "sha256:a6af61297f2612679112675e9d401685966e58b891720014e3a5176426850006",
-    "fixtures/ai/valid-sanitized-binding-evidence.json": "sha256:04d4cf233e3ba4d364bdc8a9a191629ff420924947bc4e4509c835e3b263f64a",
+    "fixtures/ai/valid-sanitized-binding-evidence-byo-source.json": "sha256:77f258fdb6cb7232b78a62fc035e293c6d604bed438ca35c54ab398064bc053a",
+    "fixtures/ai/valid-sanitized-binding-evidence.json": "sha256:19a4994b9a562305854945643a588f4f7c098db4bc3653da26df6e4284b00190",
     "fixtures/ai/valid-source-revision-digest.json": "sha256:ec32021dbb636de9a1e47d560bfe59c21451e88f67d647387968aba48691409d",
-    "fixtures/ai/valid-trace-event-v2.json": "sha256:001bc0bfb64bb2c161e10e49347727887302fba067c7a1ced511f17457867451",
+    "fixtures/ai/valid-trace-event-v2.json": "sha256:cdf33ae74b9113f0525fc6702aa3f8070605ce0d6352f82040f5bd354ff3c0f3",
     "fixtures/ai/valid-trace-event.json": "sha256:42451ebfb0dc0c475baf6bc1acc3d1006cc2294df37174764e936519b7d64100",
     "fixtures/ai/valid-transform-event.json": "sha256:6d99d5f34c010b39b194ff49a4c279d88bc7f05c697bacf088791352ca2d6330",
     "fixtures/ai/valid-transform-result.json": "sha256:406f6deae648837f7610fda38f6b4c1a1a73b83b7a96f9f427fcf4e2061dee50",
@@ -83,18 +84,18 @@
   },
   "generatedGo": {
     "gen-go/ai_composite_policy_digest_helper.go": "sha256:31b4d9b4afd965b9869acbd3a58527949402f6711f624f2a4f02b3c6e406f71f",
-    "gen-go/ai_contracts_test.go": "sha256:36da010f3bda80b4c17e8529bc2ae60ff1c44fe6e86411c591ccb14cf899cd2f",
+    "gen-go/ai_contracts_test.go": "sha256:5b5aaa331155958ce21d540e9c77a9ef4ca7d072c4ef6f7d9061add1449a7541",
     "gen-go/ai_gateway_key_token.go": "sha256:859c34383955f21c22589158214df074b74de6907a54bee7c781acfa9dad8679",
     "gen-go/binding_digest_helpers.go": "sha256:50462ba2beb16c7931dfc7e10302c12c90bf8111788991f74f08a718125dfbfb",
     "gen-go/contracts_test.go": "sha256:f15c34da8758ab4f81c4ea3f03382010a1a5a83159dd0dc18abc9c543d77951e",
     "gen-go/doc.go": "sha256:c17bc2d39ed175ce7105c68305f8ae7152f659eb7cd187ecceee7698eb3a65dd",
     "gen-go/error_category.go": "sha256:e36745796e32f753cf153a76c5f77c4bdf37a6a228e6607abcf95cac6f4a934b",
     "gen-go/schema_documents.go": "sha256:c0399930c719b93d850847b257186f08d69a527f3ac1286ed0c49b66327b315a",
-    "gen-go/types.go": "sha256:5e96b744017a6c084e331828c143f1c824e573bca919564ea96d96f78a4fb1d5",
+    "gen-go/types.go": "sha256:6e5c65527e748482a9fa44ebdcd4c8122dbb503d8c006b58baa0c18c360dfed7",
     "gen-go/version_state.go": "sha256:827f8768359998409b86ea02d9ba1a149981928bae7161e4dc95fe0520ce7410"
   },
   "generatedTypeScript": {
-    "gen-ts/ai-budget-ledger-event.ts": "sha256:26454e6adc34b7c202cfb2888753b164b22dcd2d9f7a0b10c835a0db9132f36f",
+    "gen-ts/ai-budget-ledger-event.ts": "sha256:64448d98a394e6eb103927cd35ce8a33e30176c0d5ee5afcdd8444f8aa051809",
     "gen-ts/ai-callsite-inventory.ts": "sha256:2665ffe965056b85a7f03db22071d56ce6d21d306a82a876908d0727ef2315dc",
     "gen-ts/ai-classification-stamp.ts": "sha256:dce78efba03df86a0986a16fd54c52066d322ff515d2463dbc45cafad82ecb44",
     "gen-ts/ai-composite-policy-digest-helper.ts": "sha256:d6c51d0c35599ee4f81d605b71773f4fff41a0bb46499ff0c6185072fedf53ce",
@@ -104,12 +105,12 @@
     "gen-ts/ai-gateway-key-lookup.ts": "sha256:e55fc9a2252d5e7e1a383a58c8b92f22d8147ee4862a893a6cfe815b4225fc00",
     "gen-ts/ai-gateway-key-token.ts": "sha256:ff6551ad3332cc665878d7ec93f42ce185c375e637531b2fbc82c697b877e784",
     "gen-ts/ai-governance-decision.ts": "sha256:efc422971a06d741e048c81f299ce258d7fdd4b7f036a2b9dda7aaca0679e950",
-    "gen-ts/ai-metering-policy.ts": "sha256:7dc951dbc208721de6c881219524c6075c92523e7884e31d934899c36b43f24e",
-    "gen-ts/ai-policy-snapshot.ts": "sha256:58e53c5468e65b6a229905c21cd05a34935242c4c55564cf292da675a44b3afa",
-    "gen-ts/ai-pricing-revision.ts": "sha256:87ee18e16ae5fa10f64ceed52e07bb05a4860f4b6303ad678cb0d35d23fdb1d5",
+    "gen-ts/ai-metering-policy.ts": "sha256:dd261d57646a509cd46efaefac4aad58d018c7f7da98326dd8859e4ce951c56a",
+    "gen-ts/ai-policy-snapshot.ts": "sha256:9a8c65936674a957979048a2a0c6d08c887c87f2c4d5e7e8127dcf31d33eccbc",
+    "gen-ts/ai-pricing-revision.ts": "sha256:6e09e8354025dc859023295753ecc3674b5bc198b77317413654f1b7d2327a39",
     "gen-ts/ai-runtime-binding.ts": "sha256:176c830d400ce44c508f8d249bb3c9724b2d595b78262615487cdafc4790263e",
     "gen-ts/ai-runtime-contract.ts": "sha256:fc60f5c45edfee7d6f37e99ed9a60e4e5c22bba5793593aa259f028e1c7d0c6e",
-    "gen-ts/ai-trace-event-v2.ts": "sha256:9c453805316d471eb8acac04f33f931d5a441560a249bef990ec8451606d86b8",
+    "gen-ts/ai-trace-event-v2.ts": "sha256:8c994355f290864da1cf42850c3eceb0e4a1567b45ed989de865213430d3ce0e",
     "gen-ts/ai-trace-event.ts": "sha256:1e714996dc4622e94c6ae144a7bdb09147306940db47ae788aafd6f7f8311b0c",
     "gen-ts/ai-transform-event.ts": "sha256:c8b520e01ce12b0e3a5ebe03a3ca63cc83368f26e1eef933de732c4fc1c504f9",
     "gen-ts/ai-transform-result.ts": "sha256:208c66b2aeb425c0cbcc18b7191f6e8989443f2b2c1690648e0e06cc1448ce25",
@@ -134,10 +135,10 @@
     "gen-ts/error-envelope.ts": "sha256:4457309be794f9d4fc0cf62530cc2d442c007bac9ae84aff66df099cc9e40310",
     "gen-ts/index.ts": "sha256:cf2c63faf3af73a0b4fb7bac7f51f18b4c72d854a78aef8e4c7625dfc96a27f7",
     "gen-ts/kvs-routing-entry.ts": "sha256:d92e85ee9f257d77850d1d3aac9438e2055f38084ff84a48fcedae239d47d4ca",
-    "gen-ts/promotion-request.ts": "sha256:1088cc4244b83a48d9f87c38a63f13ca084ef794f0e9424134c642d82394cd57",
+    "gen-ts/promotion-request.ts": "sha256:d0f08925341c4a36d8b049be95682037cb6ee6daaf589a191f6731af4eca17ae",
     "gen-ts/promotion-response.ts": "sha256:f1c9cafac96faeb02a443a31786f67714e818f38d90108e7af41958396524d6f",
     "gen-ts/sanitized-binding-digest-helper.ts": "sha256:c47d7fdc20500e2e72c23fe39ecdd610fc397c47fcba51335ebec3c380fe6872",
-    "gen-ts/sanitized-binding-evidence.ts": "sha256:60744d3377aa336ea7b641e8b2790c25aee7d8e557b7273f57201c6fc4acac18",
+    "gen-ts/sanitized-binding-evidence.ts": "sha256:f4b6c31dd9454350da00f443a8a4563e28d21cab6507fbc647cb33118155224c",
     "gen-ts/secret-reference.ts": "sha256:a8b65de72705b6f51f57cd8ca58881483108005b1fa4d19106c3e9cf1fa877e7",
     "gen-ts/transform-report.ts": "sha256:154617c0bc4b8e36d7edd07640454c89fad8ec34b02aa85c904c9acd9855a6c3",
     "gen-ts/version-state-machine.ts": "sha256:4371bc7e2bde86b0447f5242104c576cc160dfd7dae1885acbfb63540f230bdd",

package/dist/gen-ts/ai-budget-ledger-event.d.ts

@@ -14,6 +14,10 @@ export interface AiBudgetLedgerEvent {
     requestId?: AiBudgetIdentifier;
     amountMicroUsd: number;
     committedMicroUsdAfter: number;
+    holdMicroUsd?: number;
+    actualMicroUsd?: number;
+    expiresAt?: string;
+    pricingRevision?: AiBudgetIdentifier;
     pricingRevisionDigest?: AiBudgetDigest;
     supersedesEventId?: AiBudgetIdentifier;
     eventDigest: AiBudgetDigest;

package/dist/gen-ts/ai-metering-policy.d.ts

@@ -1,4 +1,14 @@
 export type AiMeteringPolicyDigest = string;
+export type AiDimensionLimit = AiDimensionLimit1 & {
+    dimension: AiMeteringIdentifier;
+    unit: AiMeteringIdentifier;
+    maxPerRequest?: number;
+    maxPerMinute?: number;
+};
+export type AiDimensionLimit1 = {
+    [k: string]: unknown;
+};
+export type AiMeteringIdentifier = string;
 /**
  * Additive v2 metering-policy binding. It binds a composite policy to immutable pricing revisions without changing the v1 policy snapshot.
  */
@@ -11,6 +21,10 @@ export interface AiMeteringPolicy {
      */
     pricingRevisionDigests: AiMeteringPolicyDigest[];
     reservationMode: 'committed_exposure';
+    /**
+     * @maxItems 64
+     */
+    dimensionLimits?: AiDimensionLimit[];
     policyDigestV2: AiMeteringPolicyDigest;
     publishedAt: string;
 }

package/dist/gen-ts/ai-policy-snapshot.d.ts

@@ -41,6 +41,15 @@ export type AiPolicyEmbeddedJsonSchema = {
     minItems?: number;
     maxItems?: number;
 };
+export type AiPolicyDimensionLimit = AiPolicyDimensionLimit1 & {
+    dimension: AiPolicyIdentifier;
+    unit: AiPolicyIdentifier;
+    maxPerRequest?: number;
+    maxPerMinute?: number;
+};
+export type AiPolicyDimensionLimit1 = {
+    [k: string]: unknown;
+};
 /**
  * Immutable, content-addressed AI policy snapshot consumed by the Harbour AI Gateway. Provider credentials are represented only by Secrets Manager references.
  */
@@ -93,19 +102,25 @@ export interface AiPolicyModel {
      * @minItems 1
      * @maxItems 2
      */
-    capabilities: ('generation' | 'embeddings')[];
+    capabilities: ('generation' | 'embeddings' | 'transcription' | 'translation' | 'speech' | 'image' | 'realtime')[];
     approved: boolean;
     pricing: AiPolicyPricing;
 }
 export interface AiPolicyPricing {
     revision: AiPolicyIdentifier;
+    revisionDigest?: AiPolicyDigest;
     inputMicroUsdPerMillion: number;
     outputMicroUsdPerMillion: number;
+    mediaMicroUsdPerUnit?: {
+        audio_seconds?: number;
+        image_count?: number;
+        video_seconds?: number;
+    };
 }
 export interface AiPolicyRoute {
     alias: AiPolicyIdentifier;
     version: number;
-    capability: 'generation' | 'embeddings';
+    capability: 'generation' | 'embeddings' | 'transcription' | 'translation' | 'speech' | 'image' | 'realtime';
     /**
      * @minItems 1
      * @maxItems 16
@@ -154,6 +169,10 @@ export interface AiPolicyLimit {
     requestsPerMinute: number;
     tokensPerMinute: number;
     monthlyBudgetMicroUsd: number;
+    /**
+     * @maxItems 64
+     */
+    dimensionLimits?: AiPolicyDimensionLimit[];
 }
 export interface AiPolicyRetention {
     captureMode: 'OFF' | 'BEST_EFFORT' | 'REQUIRED';

package/dist/gen-ts/ai-pricing-revision.d.ts

@@ -1,7 +1,7 @@
 export type AiPricingIdentifier = string;
 export type AiPricingDigest = string;
 /**
- * Immutable v2 line-item pricing revision. A correction is a new revision; published records are never edited.
+ * Immutable v2 line-item pricing revision for token and media dimensions. A correction is a new revision; published records are never edited.
  */
 export interface AiPricingRevision {
     schema: 'harbour.ai-pricing-revision/2.0';

package/dist/gen-ts/ai-trace-event-v2.d.ts

@@ -1,7 +1,7 @@
 export type AiTraceV2Digest = string;
 export type AiTraceV2Identifier = string;
 /**
- * Additive metering projection linked to a readable v1 trace. It carries dimension-level reported or estimated usage without changing the v1 event.
+ * Additive metering projection linked to a readable v1 trace. It carries dimension-level reported or estimated usage (including audio, image and input-video media) without changing the v1 event.
  */
 export interface AiTraceEventV2 {
     schema: 'harbour.ai-trace-event/2.0';
@@ -16,6 +16,10 @@ export interface AiTraceEventV2 {
     totalCostMicroUsd: number;
     reservationId?: string;
     meteringStatus: 'settled' | 'reserved' | 'unknown' | 'repaired';
+    servedModel?: string;
+    ingressFormat?: 'openai' | 'gemini';
+    identityFastPath?: boolean;
+    versionOrdinalVerified?: boolean;
     occurredAt: string;
 }
 export interface UsageLineItem {
@@ -24,6 +28,7 @@ export interface UsageLineItem {
     direction: 'input' | 'output';
     quantity: number;
     unit: AiTraceV2Identifier;
+    priceRevision?: AiTraceV2Identifier;
     priceRevisionDigest: AiTraceV2Digest;
     scale: number;
     costMicroUsd: number;

package/dist/gen-ts/contract-release.d.ts

@@ -1,7 +1,7 @@
-export declare const ContractRepositoryVersion: "0.10.0.0";
-export declare const ContractPublishVersion: "0.10.0";
-export declare const ContractPublishTag: "v0.10.0";
-export declare const ContractSchemasDigest: "sha256:e22fd6329b9064a3d653dbc6bc3ee0c2033ee6d8d279f06532a355c9285aa7fe";
-export declare const ContractAiFixturesDigest: "sha256:8355039f14457087d36aee52ae1a0a93096bf12f34bd8af0d948c605b6dff226";
-export declare const ContractGeneratedGoDigest: "sha256:d1a57e9b7b414bc239af4dd897c444bfac08e3bfbb24426d525faad6878d6a26";
-export declare const ContractGeneratedTypeScriptDigest: "sha256:e455c76468808b1191a3d2d774786bb18dc435785d9fa31a559f6b93f3e160c9";
+export declare const ContractRepositoryVersion: "0.12.0.0";
+export declare const ContractPublishVersion: "0.12.0";
+export declare const ContractPublishTag: "v0.12.0";
+export declare const ContractSchemasDigest: "sha256:0e90bbd74c5b1df2e0123ec75d8bec1296e9647b95c4aa88a9e9bb2452872bf4";
+export declare const ContractAiFixturesDigest: "sha256:8c406c269e909c028e35eca1321c18de95457ddd6731db8f3fb4cd90726758a8";
+export declare const ContractGeneratedGoDigest: "sha256:b42e736e80decef8ac00823a1e9a2e6ffe21dc9de43c5c9e1c53ebf467d34e2c";
+export declare const ContractGeneratedTypeScriptDigest: "sha256:03ed593ff19141cb265436d6d069b86e0a75f3290d74b76689d48c5b37a52e5b";

package/dist/gen-ts/contract-release.js

@@ -1,9 +1,9 @@
 /* eslint-disable */
 // Code generated by tools/gen/gen.mjs from schema/*.json. DO NOT EDIT.
-export const ContractRepositoryVersion = "0.10.0.0";
-export const ContractPublishVersion = "0.10.0";
-export const ContractPublishTag = "v0.10.0";
-export const ContractSchemasDigest = "sha256:e22fd6329b9064a3d653dbc6bc3ee0c2033ee6d8d279f06532a355c9285aa7fe";
-export const ContractAiFixturesDigest = "sha256:8355039f14457087d36aee52ae1a0a93096bf12f34bd8af0d948c605b6dff226";
-export const ContractGeneratedGoDigest = "sha256:d1a57e9b7b414bc239af4dd897c444bfac08e3bfbb24426d525faad6878d6a26";
-export const ContractGeneratedTypeScriptDigest = "sha256:e455c76468808b1191a3d2d774786bb18dc435785d9fa31a559f6b93f3e160c9";
+export const ContractRepositoryVersion = "0.12.0.0";
+export const ContractPublishVersion = "0.12.0";
+export const ContractPublishTag = "v0.12.0";
+export const ContractSchemasDigest = "sha256:0e90bbd74c5b1df2e0123ec75d8bec1296e9647b95c4aa88a9e9bb2452872bf4";
+export const ContractAiFixturesDigest = "sha256:8c406c269e909c028e35eca1321c18de95457ddd6731db8f3fb4cd90726758a8";
+export const ContractGeneratedGoDigest = "sha256:b42e736e80decef8ac00823a1e9a2e6ffe21dc9de43c5c9e1c53ebf467d34e2c";
+export const ContractGeneratedTypeScriptDigest = "sha256:03ed593ff19141cb265436d6d069b86e0a75f3290d74b76689d48c5b37a52e5b";

package/dist/gen-ts/promotion-request.d.ts

@@ -37,7 +37,7 @@ export interface PromotionRequestEnvironmentBindings {
     bindings: PromotionRequestSecretBinding[];
 }
 /**
- * One secret binding. Unlike the preview counterpart there is no `value` member and `secretRef` is required, so a plain literal is unrepresentable on the promotion path rather than merely refused by the handler. The secretRef pattern admits only the app-secret shape, which is what keeps a promotion from naming a tenant integration credential.
+ * One secret binding. Unlike the preview counterpart there is no `value` member and `secretRef` is required, so a plain literal is unrepresentable on the promotion path rather than merely refused by the handler. The secretRef pattern admits only app secrets, app-scoped minted data-source credentials and tenant-scoped source credentials from an approved BYO grant; integration and provider credentials remain unrepresentable.
  */
 export interface PromotionRequestSecretBinding {
     /**
@@ -45,7 +45,7 @@ export interface PromotionRequestSecretBinding {
      */
     name: string;
     /**
-     * Governance reference the deployment plane resolves. The value never appears in the request, in this schema, or in any record derived from it.
+     * Governance app secret, app-scoped minted data-source credential, or approved tenant-source credential reference the deployment plane resolves. The value never appears in the request, in this schema, or in any record derived from it.
      */
     secretRef: string;
 }

package/dist/gen-ts/sanitized-binding-evidence.d.ts

@@ -9,13 +9,13 @@ export type SanitizedRuntimeBinding = {
      */
     value?: string;
     /**
-     * Value-free app-secret reference; tenant integration and provider credential references are outside this contract.
+     * Value-free app secret, app-scoped minted data-source credential, or approved tenant-source credential reference. Integration and provider credential references are outside this contract.
      */
     secretRef?: string;
 };
 export type SanitizedBindingProviderId = 'openai' | 'anthropic' | 'gemini' | 'openrouter';
 /**
- * Immutable DCP allocation receipt and sanitized runtime-binding set for one exact allocated version and normalized source revision. DCP persists this evidence atomically with version admission before publish or provisioning. classificationDigest chains to the caller's pre-allocation BindingClassificationSubject; bindings contain only approved configuration or app-secret bindings and never an AI-mapping-owned provider credential.
+ * Immutable DCP allocation receipt and sanitized runtime-binding set for one exact allocated version and normalized source revision. DCP persists this evidence atomically with version admission before publish or provisioning. classificationDigest chains to the caller's pre-allocation BindingClassificationSubject; bindings contain only approved configuration, app secrets or approved data-source credential references and never an AI-mapping-owned provider credential.
  */
 export interface SanitizedBindingEvidence {
     schema: 'harbour.sanitized-binding-evidence/1.0';

package/fixtures/ai/adversarial-sanitized-binding-relabel.json

@@ -7,8 +7,12 @@
   "sourceRef": "https://github.com/Fourier-Labs-AI/support-copilot",
   "sourceRevision": "git-sha1:0123456789abcdef0123456789abcdef01234567",
   "sourceRevisionDigest": "sha256:79520355eb30e88bb0c6656008dd301d8f3d7cef6c14a96882557f13f7c512d9",
-  "classificationDigest": "sha256:43622df1d8bc3660a160a120f9af896cfc9c98009547869895b47d4c61a29688",
+  "classificationDigest": "sha256:7964fa768ff21ffa49336ee7a205efd6fdb72b6a888e165e1facbff24dfd8b24",
   "bindings": {
+    "DATABASE_URL": {
+      "kind": "secret",
+      "secretRef": "secretref://tenant/fourier/app/support-copilot/source/warehouse"
+    },
     "LOG_LEVEL": {
       "kind": "configuration",
       "value": "debug"
@@ -28,5 +32,5 @@
       "providerId": "openai"
     }
   },
-  "sanitizedBindingDigest": "sha256:2cc57565f45a645f96060c046d27e313531f34ff7d8dc24732b5f85572ca12a8"
+  "sanitizedBindingDigest": "sha256:c5e6463a88949e6693a2c398a27e4eb48434654d9136f9a8c589d244102ec600"
 }

package/fixtures/ai/valid-binding-classification-subject.json

@@ -16,6 +16,10 @@
       "category": "api_key",
       "requestedAiMappingId": "anthropic-messages-v1"
     },
+    "DATABASE_URL": {
+      "kind": "secret",
+      "confidence": "high"
+    },
     "LOG_LEVEL": {
       "kind": "configuration",
       "confidence": "high"
@@ -42,5 +46,5 @@
       "providerId": "openai"
     }
   },
-  "classificationDigest": "sha256:43622df1d8bc3660a160a120f9af896cfc9c98009547869895b47d4c61a29688"
+  "classificationDigest": "sha256:7964fa768ff21ffa49336ee7a205efd6fdb72b6a888e165e1facbff24dfd8b24"
 }

package/fixtures/ai/valid-budget-ledger-event.json

@@ -9,6 +9,10 @@
   "requestId": "req_example123",
   "amountMicroUsd": 500,
   "committedMicroUsdAfter": 10500,
+  "holdMicroUsd": 500,
+  "actualMicroUsd": 0,
+  "expiresAt": "2026-08-10T10:15:00Z",
+  "pricingRevision": "gemini-flash-2026-08-10",
   "pricingRevisionDigest": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
   "eventDigest": "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
   "occurredAt": "2026-08-10T10:00:00Z"

package/fixtures/ai/valid-metering-policy.json

@@ -3,6 +3,11 @@
   "policyDigest": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
   "pricingRevisionDigests": ["sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"],
   "reservationMode": "committed_exposure",
+  "dimensionLimits": [
+    { "dimension": "audio_in", "unit": "seconds", "maxPerRequest": 3600, "maxPerMinute": 7200 },
+    { "dimension": "image_in", "unit": "count", "maxPerRequest": 16 },
+    { "dimension": "video_in", "unit": "seconds", "maxPerRequest": 300 }
+  ],
   "policyDigestV2": "sha256:cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc",
   "publishedAt": "2026-08-10T09:00:00Z"
 }

package/fixtures/ai/valid-policy-snapshot.json

@@ -28,12 +28,18 @@
       "id": "openai-gpt-4.1-mini",
       "providerId": "openai-primary",
       "providerModel": "gpt-4.1-mini",
-      "capabilities": ["generation"],
+      "capabilities": ["generation", "image"],
       "approved": true,
       "pricing": {
         "revision": "openai-gpt-4.1-mini-2026-08-01",
+        "revisionDigest": "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
         "inputMicroUsdPerMillion": 400000,
-        "outputMicroUsdPerMillion": 1600000
+        "outputMicroUsdPerMillion": 1600000,
+        "mediaMicroUsdPerUnit": {
+          "audio_seconds": 4,
+          "image_count": 40,
+          "video_seconds": 5
+        }
       }
     }
   ],
@@ -106,7 +112,12 @@
       "scope": "application",
       "requestsPerMinute": 60,
       "tokensPerMinute": 100000,
-      "monthlyBudgetMicroUsd": 100000000
+      "monthlyBudgetMicroUsd": 100000000,
+      "dimensionLimits": [
+        { "dimension": "audio_in", "unit": "seconds", "maxPerRequest": 3600 },
+        { "dimension": "image_in", "unit": "count", "maxPerRequest": 16 },
+        { "dimension": "video_in", "unit": "seconds", "maxPerRequest": 300 }
+      ]
     }
   ],
   "retention": {

package/fixtures/ai/valid-pricing-revision.json

@@ -5,8 +5,11 @@
   "providerModel": "gpt-test",
   "currency": "USD",
   "dimensions": [
-    { "dimension": "tokens", "direction": "input", "unit": "token", "scale": 1000000, "microUsdPerScale": 100000 },
-    { "dimension": "tokens", "direction": "output", "unit": "token", "scale": 1000000, "microUsdPerScale": 200000 }
+    { "dimension": "input_tokens", "direction": "input", "unit": "tokens", "scale": 1000000, "microUsdPerScale": 100000 },
+    { "dimension": "output_tokens", "direction": "output", "unit": "tokens", "scale": 1000000, "microUsdPerScale": 200000 },
+    { "dimension": "audio_in", "direction": "input", "unit": "seconds", "scale": 1, "microUsdPerScale": 4 },
+    { "dimension": "image_in", "direction": "input", "unit": "count", "scale": 1, "microUsdPerScale": 40 },
+    { "dimension": "video_in", "direction": "input", "unit": "seconds", "scale": 1, "microUsdPerScale": 5 }
   ],
   "revisionDigest": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
   "effectiveAt": "2026-08-10T00:00:00Z",

package/fixtures/ai/valid-sanitized-binding-evidence-byo-source.json

@@ -0,0 +1,36 @@
+{
+  "schema": "harbour.sanitized-binding-evidence/1.0",
+  "tenantId": "fourier",
+  "appId": "support-copilot",
+  "environment": "preview",
+  "versionId": "fourier#support-copilot#preview#123456",
+  "sourceRef": "https://github.com/Fourier-Labs-AI/support-copilot",
+  "sourceRevision": "git-sha1:0123456789abcdef0123456789abcdef01234567",
+  "sourceRevisionDigest": "sha256:79520355eb30e88bb0c6656008dd301d8f3d7cef6c14a96882557f13f7c512d9",
+  "classificationDigest": "sha256:7964fa768ff21ffa49336ee7a205efd6fdb72b6a888e165e1facbff24dfd8b24",
+  "bindings": {
+    "DATABASE_URL": {
+      "kind": "secret",
+      "secretRef": "secretref://tenant/fourier/source/warehouse"
+    },
+    "LOG_LEVEL": {
+      "kind": "configuration",
+      "value": "debug"
+    },
+    "STRIPE_API_KEY": {
+      "kind": "secret",
+      "secretRef": "secretref://tenant/fourier/app/support-copilot/secret/STRIPE_API_KEY"
+    }
+  },
+  "requiredAiMappings": {
+    "anthropic-messages-v1": {
+      "mappingVersion": "1.0.0",
+      "providerId": "anthropic"
+    },
+    "openai-responses-v1": {
+      "mappingVersion": "1.0.0",
+      "providerId": "openai"
+    }
+  },
+  "sanitizedBindingDigest": "sha256:181ecf7a3bab337755da186c04a3d5dcacb47efb8a01559f53242a3c66132aa5"
+}

package/fixtures/ai/valid-sanitized-binding-evidence.json

@@ -7,8 +7,12 @@
   "sourceRef": "https://github.com/Fourier-Labs-AI/support-copilot",
   "sourceRevision": "git-sha1:0123456789abcdef0123456789abcdef01234567",
   "sourceRevisionDigest": "sha256:79520355eb30e88bb0c6656008dd301d8f3d7cef6c14a96882557f13f7c512d9",
-  "classificationDigest": "sha256:43622df1d8bc3660a160a120f9af896cfc9c98009547869895b47d4c61a29688",
+  "classificationDigest": "sha256:7964fa768ff21ffa49336ee7a205efd6fdb72b6a888e165e1facbff24dfd8b24",
   "bindings": {
+    "DATABASE_URL": {
+      "kind": "secret",
+      "secretRef": "secretref://tenant/fourier/app/support-copilot/source/warehouse"
+    },
     "LOG_LEVEL": {
       "kind": "configuration",
       "value": "debug"
@@ -28,5 +32,5 @@
       "providerId": "openai"
     }
   },
-  "sanitizedBindingDigest": "sha256:2cc57565f45a645f96060c046d27e313531f34ff7d8dc24732b5f85572ca12a8"
+  "sanitizedBindingDigest": "sha256:c5e6463a88949e6693a2c398a27e4eb48434654d9136f9a8c589d244102ec600"
 }

package/fixtures/ai/valid-trace-event-v2.json

@@ -7,18 +7,59 @@
   "usageLineItems": [
     {
       "attempt": 1,
-      "dimension": "tokens",
+      "dimension": "input_tokens",
       "direction": "input",
       "quantity": 120,
-      "unit": "token",
+      "unit": "tokens",
+      "priceRevision": "gemini-flash-2026-08-10",
       "priceRevisionDigest": "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
       "scale": 1000000,
       "costMicroUsd": 12,
       "provenance": "reported"
+    },
+    {
+      "attempt": 1,
+      "dimension": "audio_in",
+      "direction": "input",
+      "quantity": 30,
+      "unit": "seconds",
+      "priceRevision": "gemini-flash-2026-08-10",
+      "priceRevisionDigest": "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+      "scale": 1,
+      "costMicroUsd": 120,
+      "provenance": "reported"
+    },
+    {
+      "attempt": 1,
+      "dimension": "image_in",
+      "direction": "input",
+      "quantity": 2,
+      "unit": "count",
+      "priceRevision": "gemini-flash-2026-08-10",
+      "priceRevisionDigest": "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+      "scale": 1,
+      "costMicroUsd": 80,
+      "provenance": "reported"
+    },
+    {
+      "attempt": 1,
+      "dimension": "video_in",
+      "direction": "input",
+      "quantity": 12,
+      "unit": "seconds",
+      "priceRevision": "gemini-flash-2026-08-10",
+      "priceRevisionDigest": "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+      "scale": 1,
+      "costMicroUsd": 60,
+      "provenance": "estimated"
     }
   ],
-  "totalCostMicroUsd": 12,
+  "totalCostMicroUsd": 272,
   "reservationId": "req_example123#budget",
   "meteringStatus": "settled",
+  "servedModel": "gemini-2.5-flash",
+  "ingressFormat": "gemini",
+  "identityFastPath": true,
+  "versionOrdinalVerified": true,
   "occurredAt": "2026-08-10T10:00:00Z"
 }

package/gen-ts/ai-budget-ledger-event.ts

@@ -18,6 +18,10 @@ export interface AiBudgetLedgerEvent {
   requestId?: AiBudgetIdentifier;
   amountMicroUsd: number;
   committedMicroUsdAfter: number;
+  holdMicroUsd?: number;
+  actualMicroUsd?: number;
+  expiresAt?: string;
+  pricingRevision?: AiBudgetIdentifier;
   pricingRevisionDigest?: AiBudgetDigest;
   supersedesEventId?: AiBudgetIdentifier;
   eventDigest: AiBudgetDigest;

package/gen-ts/ai-metering-policy.ts

@@ -2,6 +2,16 @@
 // Code generated by tools/gen/gen.mjs from schema/*.json. DO NOT EDIT.
 
 export type AiMeteringPolicyDigest = string;
+export type AiDimensionLimit = AiDimensionLimit1 & {
+  dimension: AiMeteringIdentifier;
+  unit: AiMeteringIdentifier;
+  maxPerRequest?: number;
+  maxPerMinute?: number;
+};
+export type AiDimensionLimit1 = {
+  [k: string]: unknown;
+};
+export type AiMeteringIdentifier = string;
 
 /**
  * Additive v2 metering-policy binding. It binds a composite policy to immutable pricing revisions without changing the v1 policy snapshot.
@@ -15,6 +25,10 @@ export interface AiMeteringPolicy {
    */
   pricingRevisionDigests: AiMeteringPolicyDigest[];
   reservationMode: 'committed_exposure';
+  /**
+   * @maxItems 64
+   */
+  dimensionLimits?: AiDimensionLimit[];
   policyDigestV2: AiMeteringPolicyDigest;
   publishedAt: string;
 }

package/gen-ts/ai-policy-snapshot.ts

@@ -44,6 +44,15 @@ export type AiPolicyEmbeddedJsonSchema = {
   minItems?: number;
   maxItems?: number;
 };
+export type AiPolicyDimensionLimit = AiPolicyDimensionLimit1 & {
+  dimension: AiPolicyIdentifier;
+  unit: AiPolicyIdentifier;
+  maxPerRequest?: number;
+  maxPerMinute?: number;
+};
+export type AiPolicyDimensionLimit1 = {
+  [k: string]: unknown;
+};
 
 /**
  * Immutable, content-addressed AI policy snapshot consumed by the Harbour AI Gateway. Provider credentials are represented only by Secrets Manager references.
@@ -97,19 +106,25 @@ export interface AiPolicyModel {
    * @minItems 1
    * @maxItems 2
    */
-  capabilities: ('generation' | 'embeddings')[];
+  capabilities: ('generation' | 'embeddings' | 'transcription' | 'translation' | 'speech' | 'image' | 'realtime')[];
   approved: boolean;
   pricing: AiPolicyPricing;
 }
 export interface AiPolicyPricing {
   revision: AiPolicyIdentifier;
+  revisionDigest?: AiPolicyDigest;
   inputMicroUsdPerMillion: number;
   outputMicroUsdPerMillion: number;
+  mediaMicroUsdPerUnit?: {
+    audio_seconds?: number;
+    image_count?: number;
+    video_seconds?: number;
+  };
 }
 export interface AiPolicyRoute {
   alias: AiPolicyIdentifier;
   version: number;
-  capability: 'generation' | 'embeddings';
+  capability: 'generation' | 'embeddings' | 'transcription' | 'translation' | 'speech' | 'image' | 'realtime';
   /**
    * @minItems 1
    * @maxItems 16
@@ -158,6 +173,10 @@ export interface AiPolicyLimit {
   requestsPerMinute: number;
   tokensPerMinute: number;
   monthlyBudgetMicroUsd: number;
+  /**
+   * @maxItems 64
+   */
+  dimensionLimits?: AiPolicyDimensionLimit[];
 }
 export interface AiPolicyRetention {
   captureMode: 'OFF' | 'BEST_EFFORT' | 'REQUIRED';

package/gen-ts/ai-pricing-revision.ts

@@ -5,7 +5,7 @@ export type AiPricingIdentifier = string;
 export type AiPricingDigest = string;
 
 /**
- * Immutable v2 line-item pricing revision. A correction is a new revision; published records are never edited.
+ * Immutable v2 line-item pricing revision for token and media dimensions. A correction is a new revision; published records are never edited.
  */
 export interface AiPricingRevision {
   schema: 'harbour.ai-pricing-revision/2.0';

package/gen-ts/ai-trace-event-v2.ts

@@ -5,7 +5,7 @@ export type AiTraceV2Digest = string;
 export type AiTraceV2Identifier = string;
 
 /**
- * Additive metering projection linked to a readable v1 trace. It carries dimension-level reported or estimated usage without changing the v1 event.
+ * Additive metering projection linked to a readable v1 trace. It carries dimension-level reported or estimated usage (including audio, image and input-video media) without changing the v1 event.
  */
 export interface AiTraceEventV2 {
   schema: 'harbour.ai-trace-event/2.0';
@@ -20,6 +20,10 @@ export interface AiTraceEventV2 {
   totalCostMicroUsd: number;
   reservationId?: string;
   meteringStatus: 'settled' | 'reserved' | 'unknown' | 'repaired';
+  servedModel?: string;
+  ingressFormat?: 'openai' | 'gemini';
+  identityFastPath?: boolean;
+  versionOrdinalVerified?: boolean;
   occurredAt: string;
 }
 export interface UsageLineItem {
@@ -28,6 +32,7 @@ export interface UsageLineItem {
   direction: 'input' | 'output';
   quantity: number;
   unit: AiTraceV2Identifier;
+  priceRevision?: AiTraceV2Identifier;
   priceRevisionDigest: AiTraceV2Digest;
   scale: number;
   costMicroUsd: number;

package/gen-ts/contract-release.ts

@@ -1,10 +1,10 @@
 /* eslint-disable */
 // Code generated by tools/gen/gen.mjs from schema/*.json. DO NOT EDIT.
 
-export const ContractRepositoryVersion = "0.10.0.0" as const;
-export const ContractPublishVersion = "0.10.0" as const;
-export const ContractPublishTag = "v0.10.0" as const;
-export const ContractSchemasDigest = "sha256:e22fd6329b9064a3d653dbc6bc3ee0c2033ee6d8d279f06532a355c9285aa7fe" as const;
-export const ContractAiFixturesDigest = "sha256:8355039f14457087d36aee52ae1a0a93096bf12f34bd8af0d948c605b6dff226" as const;
-export const ContractGeneratedGoDigest = "sha256:d1a57e9b7b414bc239af4dd897c444bfac08e3bfbb24426d525faad6878d6a26" as const;
-export const ContractGeneratedTypeScriptDigest = "sha256:e455c76468808b1191a3d2d774786bb18dc435785d9fa31a559f6b93f3e160c9" as const;
+export const ContractRepositoryVersion = "0.12.0.0" as const;
+export const ContractPublishVersion = "0.12.0" as const;
+export const ContractPublishTag = "v0.12.0" as const;
+export const ContractSchemasDigest = "sha256:0e90bbd74c5b1df2e0123ec75d8bec1296e9647b95c4aa88a9e9bb2452872bf4" as const;
+export const ContractAiFixturesDigest = "sha256:8c406c269e909c028e35eca1321c18de95457ddd6731db8f3fb4cd90726758a8" as const;
+export const ContractGeneratedGoDigest = "sha256:b42e736e80decef8ac00823a1e9a2e6ffe21dc9de43c5c9e1c53ebf467d34e2c" as const;
+export const ContractGeneratedTypeScriptDigest = "sha256:03ed593ff19141cb265436d6d069b86e0a75f3290d74b76689d48c5b37a52e5b" as const;

package/gen-ts/promotion-request.ts

@@ -41,7 +41,7 @@ export interface PromotionRequestEnvironmentBindings {
   bindings: PromotionRequestSecretBinding[];
 }
 /**
- * One secret binding. Unlike the preview counterpart there is no `value` member and `secretRef` is required, so a plain literal is unrepresentable on the promotion path rather than merely refused by the handler. The secretRef pattern admits only the app-secret shape, which is what keeps a promotion from naming a tenant integration credential.
+ * One secret binding. Unlike the preview counterpart there is no `value` member and `secretRef` is required, so a plain literal is unrepresentable on the promotion path rather than merely refused by the handler. The secretRef pattern admits only app secrets, app-scoped minted data-source credentials and tenant-scoped source credentials from an approved BYO grant; integration and provider credentials remain unrepresentable.
  */
 export interface PromotionRequestSecretBinding {
   /**
@@ -49,7 +49,7 @@ export interface PromotionRequestSecretBinding {
    */
   name: string;
   /**
-   * Governance reference the deployment plane resolves. The value never appears in the request, in this schema, or in any record derived from it.
+   * Governance app secret, app-scoped minted data-source credential, or approved tenant-source credential reference the deployment plane resolves. The value never appears in the request, in this schema, or in any record derived from it.
    */
   secretRef: string;
 }

package/gen-ts/sanitized-binding-evidence.ts

@@ -12,14 +12,14 @@ export type SanitizedRuntimeBinding = {
    */
   value?: string;
   /**
-   * Value-free app-secret reference; tenant integration and provider credential references are outside this contract.
+   * Value-free app secret, app-scoped minted data-source credential, or approved tenant-source credential reference. Integration and provider credential references are outside this contract.
    */
   secretRef?: string;
 };
 export type SanitizedBindingProviderId = 'openai' | 'anthropic' | 'gemini' | 'openrouter';
 
 /**
- * Immutable DCP allocation receipt and sanitized runtime-binding set for one exact allocated version and normalized source revision. DCP persists this evidence atomically with version admission before publish or provisioning. classificationDigest chains to the caller's pre-allocation BindingClassificationSubject; bindings contain only approved configuration or app-secret bindings and never an AI-mapping-owned provider credential.
+ * Immutable DCP allocation receipt and sanitized runtime-binding set for one exact allocated version and normalized source revision. DCP persists this evidence atomically with version admission before publish or provisioning. classificationDigest chains to the caller's pre-allocation BindingClassificationSubject; bindings contain only approved configuration, app secrets or approved data-source credential references and never an AI-mapping-owned provider credential.
  */
 export interface SanitizedBindingEvidence {
   schema: 'harbour.sanitized-binding-evidence/1.0';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fourier-labs/harbour-contracts",
-  "version": "0.10.0",
+  "version": "0.12.0",
   "description": "Single source of truth for every data shape that crosses a boundary between Harbour components.",
   "license": "UNLICENSED",
   "private": false,

package/schema/ai-budget-ledger-event.schema.json

@@ -17,6 +17,10 @@
     "requestId": { "$ref": "#/definitions/AiBudgetIdentifier" },
     "amountMicroUsd": { "type": "integer" },
     "committedMicroUsdAfter": { "type": "integer", "minimum": 0 },
+    "holdMicroUsd": { "type": "integer", "minimum": 0 },
+    "actualMicroUsd": { "type": "integer", "minimum": 0 },
+    "expiresAt": { "type": "string", "format": "date-time" },
+    "pricingRevision": { "$ref": "#/definitions/AiBudgetIdentifier" },
     "pricingRevisionDigest": { "$ref": "#/definitions/AiBudgetDigest" },
     "supersedesEventId": { "$ref": "#/definitions/AiBudgetIdentifier" },
     "eventDigest": { "$ref": "#/definitions/AiBudgetDigest" },

package/schema/ai-metering-policy.schema.json

@@ -11,8 +11,24 @@
     "policyDigest": { "$ref": "#/definitions/AiMeteringPolicyDigest" },
     "pricingRevisionDigests": { "type": "array", "minItems": 1, "maxItems": 512, "uniqueItems": true, "items": { "$ref": "#/definitions/AiMeteringPolicyDigest" } },
     "reservationMode": { "type": "string", "const": "committed_exposure" },
+    "dimensionLimits": { "type": "array", "maxItems": 64, "items": { "$ref": "#/definitions/AiDimensionLimit" } },
     "policyDigestV2": { "$ref": "#/definitions/AiMeteringPolicyDigest" },
     "publishedAt": { "type": "string", "format": "date-time" }
   },
-  "definitions": { "AiMeteringPolicyDigest": { "type": "string", "pattern": "^sha256:[0-9a-f]{64}$" } }
+  "definitions": {
+    "AiMeteringPolicyDigest": { "type": "string", "pattern": "^sha256:[0-9a-f]{64}$" },
+    "AiMeteringIdentifier": { "type": "string", "minLength": 1, "maxLength": 160, "pattern": "^[A-Za-z0-9][A-Za-z0-9_.@/-]*$" },
+    "AiDimensionLimit": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["dimension", "unit"],
+      "properties": {
+        "dimension": { "$ref": "#/definitions/AiMeteringIdentifier" },
+        "unit": { "$ref": "#/definitions/AiMeteringIdentifier" },
+        "maxPerRequest": { "type": "integer", "minimum": 0 },
+        "maxPerMinute": { "type": "integer", "minimum": 0 }
+      },
+      "anyOf": [{ "required": ["maxPerRequest"] }, { "required": ["maxPerMinute"] }]
+    }
+  }
 }

package/schema/ai-policy-snapshot.schema.json

@@ -124,8 +124,18 @@
       "required": ["revision", "inputMicroUsdPerMillion", "outputMicroUsdPerMillion"],
       "properties": {
         "revision": { "$ref": "#/definitions/AiPolicyIdentifier" },
+        "revisionDigest": { "$ref": "#/definitions/AiPolicyDigest" },
         "inputMicroUsdPerMillion": { "type": "integer", "minimum": 0 },
-        "outputMicroUsdPerMillion": { "type": "integer", "minimum": 0 }
+        "outputMicroUsdPerMillion": { "type": "integer", "minimum": 0 },
+        "mediaMicroUsdPerUnit": {
+          "type": "object",
+          "additionalProperties": false,
+          "properties": {
+            "audio_seconds": { "type": "integer", "minimum": 0 },
+            "image_count": { "type": "integer", "minimum": 0 },
+            "video_seconds": { "type": "integer", "minimum": 0 }
+          }
+        }
       }
     },
     "AiPolicyModel": {
@@ -141,7 +151,7 @@
           "minItems": 1,
           "maxItems": 2,
           "uniqueItems": true,
-          "items": { "type": "string", "enum": ["generation", "embeddings"] }
+          "items": { "type": "string", "enum": ["generation", "embeddings", "transcription", "translation", "speech", "image", "realtime"] }
         },
         "approved": { "type": "boolean" },
         "pricing": { "$ref": "#/definitions/AiPolicyPricing" }
@@ -164,7 +174,7 @@
       "properties": {
         "alias": { "$ref": "#/definitions/AiPolicyIdentifier" },
         "version": { "type": "integer", "minimum": 1 },
-        "capability": { "type": "string", "enum": ["generation", "embeddings"] },
+        "capability": { "type": "string", "enum": ["generation", "embeddings", "transcription", "translation", "speech", "image", "realtime"] },
         "targets": {
           "type": "array",
           "minItems": 1,
@@ -318,9 +328,26 @@
         "scope": { "type": "string", "enum": ["tenant", "application"] },
         "requestsPerMinute": { "type": "integer", "minimum": 1 },
         "tokensPerMinute": { "type": "integer", "minimum": 1 },
-        "monthlyBudgetMicroUsd": { "type": "integer", "minimum": 0 }
+        "monthlyBudgetMicroUsd": { "type": "integer", "minimum": 0 },
+        "dimensionLimits": {
+          "type": "array",
+          "maxItems": 64,
+          "items": { "$ref": "#/definitions/AiPolicyDimensionLimit" }
+        }
       }
     },
+    "AiPolicyDimensionLimit": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["dimension", "unit"],
+      "properties": {
+        "dimension": { "$ref": "#/definitions/AiPolicyIdentifier" },
+        "unit": { "$ref": "#/definitions/AiPolicyIdentifier" },
+        "maxPerRequest": { "type": "integer", "minimum": 0 },
+        "maxPerMinute": { "type": "integer", "minimum": 0 }
+      },
+      "anyOf": [{ "required": ["maxPerRequest"] }, { "required": ["maxPerMinute"] }]
+    },
     "AiPolicyRetention": {
       "type": "object",
       "additionalProperties": false,

package/schema/ai-pricing-revision.schema.json

@@ -2,7 +2,7 @@
   "$schema": "http://json-schema.org/draft-07/schema#",
   "$id": "https://schemas.harbour.dev/ai-pricing-revision.schema.json",
   "title": "AiPricingRevision",
-  "description": "Immutable v2 line-item pricing revision. A correction is a new revision; published records are never edited.",
+  "description": "Immutable v2 line-item pricing revision for token and media dimensions. A correction is a new revision; published records are never edited.",
   "type": "object",
   "additionalProperties": false,
   "required": ["schema", "revisionId", "provider", "providerModel", "currency", "dimensions", "revisionDigest", "effectiveAt", "publishedAt"],

package/schema/ai-trace-event-v2.schema.json

@@ -2,7 +2,7 @@
   "$schema": "http://json-schema.org/draft-07/schema#",
   "$id": "https://schemas.harbour.dev/ai-trace-event-v2.schema.json",
   "title": "AiTraceEventV2",
-  "description": "Additive metering projection linked to a readable v1 trace. It carries dimension-level reported or estimated usage without changing the v1 event.",
+  "description": "Additive metering projection linked to a readable v1 trace. It carries dimension-level reported or estimated usage (including audio, image and input-video media) without changing the v1 event.",
   "type": "object",
   "additionalProperties": false,
   "required": ["schema", "traceId", "requestId", "policyDigest", "outcome", "usageLineItems", "totalCostMicroUsd", "meteringStatus", "occurredAt"],
@@ -16,6 +16,10 @@
     "totalCostMicroUsd": { "type": "integer", "minimum": 0 },
     "reservationId": { "type": "string", "minLength": 1, "maxLength": 256 },
     "meteringStatus": { "type": "string", "enum": ["settled", "reserved", "unknown", "repaired"] },
+    "servedModel": { "type": "string", "minLength": 1, "maxLength": 256 },
+    "ingressFormat": { "type": "string", "enum": ["openai", "gemini"] },
+    "identityFastPath": { "type": "boolean" },
+    "versionOrdinalVerified": { "type": "boolean" },
     "occurredAt": { "type": "string", "format": "date-time" }
   },
   "definitions": {
@@ -31,6 +35,7 @@
         "direction": { "type": "string", "enum": ["input", "output"] },
         "quantity": { "type": "integer", "minimum": 0 },
         "unit": { "$ref": "#/definitions/AiTraceV2Identifier" },
+        "priceRevision": { "$ref": "#/definitions/AiTraceV2Identifier" },
         "priceRevisionDigest": { "$ref": "#/definitions/AiTraceV2Digest" },
         "scale": { "type": "integer", "minimum": 1 },
         "costMicroUsd": { "type": "integer", "minimum": 0 },

package/schema/promotion-request.schema.json

@@ -58,11 +58,11 @@
         },
         "secretRef": {
           "type": "string",
-          "pattern": "^secretref://tenant/[A-Za-z0-9._-]+/app/[A-Za-z0-9._-]+/secret/[A-Z][A-Z0-9_]{0,127}$",
-          "description": "Governance reference the deployment plane resolves. The value never appears in the request, in this schema, or in any record derived from it."
+          "pattern": "^secretref://tenant/[A-Za-z0-9._-]+/(?:app/[A-Za-z0-9._-]+/(?:secret/[A-Z][A-Z0-9_]{0,127}|source/[a-z0-9][a-z0-9._-]{0,63})|source/[a-z0-9][a-z0-9._-]{0,63})$",
+          "description": "Governance app secret, app-scoped minted data-source credential, or approved tenant-source credential reference the deployment plane resolves. The value never appears in the request, in this schema, or in any record derived from it."
         }
       },
-      "description": "One secret binding. Unlike the preview counterpart there is no `value` member and `secretRef` is required, so a plain literal is unrepresentable on the promotion path rather than merely refused by the handler. The secretRef pattern admits only the app-secret shape, which is what keeps a promotion from naming a tenant integration credential."
+      "description": "One secret binding. Unlike the preview counterpart there is no `value` member and `secretRef` is required, so a plain literal is unrepresentable on the promotion path rather than merely refused by the handler. The secretRef pattern admits only app secrets, app-scoped minted data-source credentials and tenant-scoped source credentials from an approved BYO grant; integration and provider credentials remain unrepresentable."
     }
   }
 }

package/schema/sanitized-binding-evidence.schema.json

@@ -2,7 +2,7 @@
   "$schema": "http://json-schema.org/draft-07/schema#",
   "$id": "https://schemas.harbour.dev/sanitized-binding-evidence.schema.json",
   "title": "SanitizedBindingEvidence",
-  "description": "Immutable DCP allocation receipt and sanitized runtime-binding set for one exact allocated version and normalized source revision. DCP persists this evidence atomically with version admission before publish or provisioning. classificationDigest chains to the caller's pre-allocation BindingClassificationSubject; bindings contain only approved configuration or app-secret bindings and never an AI-mapping-owned provider credential.",
+  "description": "Immutable DCP allocation receipt and sanitized runtime-binding set for one exact allocated version and normalized source revision. DCP persists this evidence atomically with version admission before publish or provisioning. classificationDigest chains to the caller's pre-allocation BindingClassificationSubject; bindings contain only approved configuration, app secrets or approved data-source credential references and never an AI-mapping-owned provider credential.",
   "type": "object",
   "additionalProperties": false,
   "required": ["schema", "tenantId", "appId", "environment", "versionId", "sourceRef", "sourceRevision", "sourceRevisionDigest", "classificationDigest", "bindings", "requiredAiMappings", "sanitizedBindingDigest"],
@@ -80,7 +80,7 @@
       "properties": {
         "kind": { "type": "string", "enum": ["configuration", "secret"] },
         "value": { "type": "string", "minLength": 1, "maxLength": 4096, "description": "Approved non-secret configuration literal. Provider-credential values are never approved or persisted here." },
-        "secretRef": { "type": "string", "pattern": "^secretref://tenant/[A-Za-z0-9._-]+/app/[A-Za-z0-9._-]+/secret/[A-Z][A-Z0-9_]{0,127}$", "description": "Value-free app-secret reference; tenant integration and provider credential references are outside this contract." }
+        "secretRef": { "type": "string", "pattern": "^secretref://tenant/[A-Za-z0-9._-]+/(?:app/[A-Za-z0-9._-]+/(?:secret/[A-Z][A-Z0-9_]{0,127}|source/[a-z0-9][a-z0-9._-]{0,63})|source/[a-z0-9][a-z0-9._-]{0,63})$", "description": "Value-free app secret, app-scoped minted data-source credential, or approved tenant-source credential reference. Integration and provider credential references are outside this contract." }
       },
       "allOf": [
         {