@fourier-labs/harbour-contracts 0.22.0 → 0.26.0

package/contract-release.json

@@ -1,19 +1,19 @@
 {
   "schema": "harbour.contract-release/1.0",
-  "repositoryVersion": "0.22.0.0",
-  "publishVersion": "0.22.0",
-  "publishTag": "v0.22.0",
-  "schemasDigest": "sha256:2b762d34e5f5549a90b78f304a47f98b6165cf938a2ca776b1c055db8f04fce1",
+  "repositoryVersion": "0.26.0.0",
+  "publishVersion": "0.26.0",
+  "publishTag": "v0.26.0",
+  "schemasDigest": "sha256:510b57798fd632a4fd34ea7701106b03285c491ab1eddbdef7d1ec0f82d7f70c",
   "aiFixturesDigest": "sha256:5d68828a1364dc63cafbb3c2d3f5c5f6c232d5333e7668a9c79e7652e5144b42",
-  "generatedGoDigest": "sha256:0541904aad85c418a20de003bef68a42c8876d6cf8fe9f165472a5e77f81e045",
-  "generatedTypeScriptDigest": "sha256:bbbba7c14c480030e9a44b94a746a0978efe7f008788817d31e137007bf89c38",
+  "generatedGoDigest": "sha256:02a598e4606a1d24bbfdd881e548128ce9b60c090db7ff98dcee5bfe94b74ad3",
+  "generatedTypeScriptDigest": "sha256:72865190987cb97215b1db19d46e5c54579f2c01677e5b8e5c735df1d669b74b",
   "generatedExclusions": {
     "gen-go/contract_release.go": "contains the generated aggregate digests (self-reference)",
     "gen-ts/contract-release.ts": "contains the generated aggregate digests (self-reference)"
   },
   "schemas": {
     "schema/ai-budget-ledger-event.schema.json": "sha256:92770bc5358e03a3aae6cd261dad02dfcbbb06a6203566da2c6c7a5e63dd671c",
-    "schema/ai-callsite-inventory.schema.json": "sha256:dda9251352a1c28e95927f75e5ed4d78cf863806bdac29238de03f79c7229082",
+    "schema/ai-callsite-inventory.schema.json": "sha256:dc607b008336add7ff41b414987a961f89440fb46e1c655bf116a937451c7cf7",
     "schema/ai-classification-stamp.schema.json": "sha256:ad7f01dc8bb9a1cd619fce470227914aa3ef2ad57d34bfeaa0c6ef753aa6781d",
     "schema/ai-composite-policy-digest.schema.json": "sha256:3efccc249327e59f67a37fd954b524ee727a3e28a3c557a46d6ec1f15d69b34e",
     "schema/ai-deployment-gate-decision.schema.json": "sha256:bae1bdf91777b9a78f8da5a29f06b5de7f1e235789cf16b1bb507e85ad0243ff",
@@ -36,22 +36,24 @@
     "schema/data-dependency.schema.json": "sha256:89ba8481ccabc935e7dab5d13871c985839a751ad1586710d8382a15e1f3340c",
     "schema/data-grant.schema.json": "sha256:e640553831ecc1c01cc9a37fe388b84d0ffeaa0d0050e63712b48f65fa437c8a",
     "schema/data-source.schema.json": "sha256:5a809171cc97f5778ca37db300d454098ce1c2d9071d2380550707b049899a75",
-    "schema/deploy-request.schema.json": "sha256:2018aa710a46bc694e0ceb628028faea6c31223f9d9b8d2db66809814f63ea8d",
+    "schema/deploy-request.schema.json": "sha256:5a1326271f88575719a24f39d14c34959764f6eb8efef71a1f140e30c6c235c7",
     "schema/deploy-response.schema.json": "sha256:09064948abdbba7022738285d802ed44648a16ddc2a5b8c2eeb170ae19a66aeb",
     "schema/deployment-environment.schema.json": "sha256:3f1325d5579b3fc47d02c83b6ac0657108909b1dfb901f68203c9c8b668c2ef4",
     "schema/deployment-source.schema.json": "sha256:256988b1efbfc90bd0e1ae31a2c5d69b20ef1e4471dc24c9f9aa759278270fbe",
     "schema/deployment-status-failure.schema.json": "sha256:1a182e603d22467a4be507a37fd10698f6f3178d314d33eaf5de2c7f687c9412",
     "schema/deployment-status-request.schema.json": "sha256:1f9f87adc947a252b53b61f71ae17f8c1b8fbc1166f31301a043d11ac257dc66",
-    "schema/deployment-status-response.schema.json": "sha256:075a9ae537f5e0822828069417d6222c61f04ea6ed5e28f71b29523a4fcaa67b",
+    "schema/deployment-status-response.schema.json": "sha256:f3e3fb919279095e3f1b35302c549972537bfe9d4f3b305f14b1391f71e66e2c",
     "schema/env-bindings.schema.json": "sha256:ae09bc4ca5508afa698ef854a59153c4c6f99b07017b48cb9b07ce05abad12f2",
-    "schema/error-category.enum.json": "sha256:e215fe3dc254cf7fca6785f3a12aaeee9d28811b6625916630adda1ed5fc1a14",
+    "schema/error-category.enum.json": "sha256:693f8ce67d5554358f89b76132024cb8a082216f192d80a66bc4dc64e8983332",
     "schema/error-envelope.schema.json": "sha256:75dccda7dd16fdf8435deda53fc7dbcdc109b65114617a17f11763010c656f90",
     "schema/kvs-routing-entry.schema.json": "sha256:b75f3a5dfa93a428b2764e03222b66b6ef2bed980f8bac8ffac54afdf3526bc5",
     "schema/promotion-request.schema.json": "sha256:560460b57fc639d248fa657a2a1e3d88d27ab9139faf17ee58633b671f8b5072",
     "schema/promotion-response.schema.json": "sha256:4129712d2e29d6ef21d93d4bd0bacfd60ada3f2ee0ade852824e64346b817634",
     "schema/sanitized-binding-evidence.schema.json": "sha256:b03bcc1911c99c69fda50eb656fc3e115f88fe2990c1708fbb5cd3542f4b8bba",
     "schema/secret-reference.schema.json": "sha256:966f7a6d2575b46a4b54804d06dc05c6229ebbcbd9200fe6a6c8d3b4ffb90f9f",
-    "schema/transform-report.schema.json": "sha256:afbcb940d8e6cb32fd6199c03236bc1717d4ad6adb2e334f3e54d436d5349778",
+    "schema/security-scan-input.schema.json": "sha256:9f9c9e6131c1abee454320b77e4332e3780c0c63f108f54f75c93194a32ccff7",
+    "schema/security-verdict.schema.json": "sha256:ec3c2d5c9df3601aeed0909b36c7f427469c7f0eeb3295c5809b96d09bf3fc26",
+    "schema/transform-report.schema.json": "sha256:821755a9d13be24139b168cc11d494c080194eb5a85950dd4878049a59557cea",
     "schema/version-state.schema.json": "sha256:e7c4b2e7b615ebb07f36d0df22ded51b2c9688ef9e9bfe79de1d5cd94de9ae40"
   },
   "aiFixtures": {
@@ -87,16 +89,16 @@
     "gen-go/ai_contracts_test.go": "sha256:17ce967139e39c291ee7ebad3f66cc0495324abc4e56885279f7e5cc74994036",
     "gen-go/ai_gateway_key_token.go": "sha256:859c34383955f21c22589158214df074b74de6907a54bee7c781acfa9dad8679",
     "gen-go/binding_digest_helpers.go": "sha256:50462ba2beb16c7931dfc7e10302c12c90bf8111788991f74f08a718125dfbfb",
-    "gen-go/contracts_test.go": "sha256:105f72ed711a34778d875b5a957bae3d8afbe67ed006e4809b8031b4cc303ec0",
+    "gen-go/contracts_test.go": "sha256:7c7ee46f2b4277e22b1ee21af9f17d201eb83067c613b049749f932706ed24f8",
     "gen-go/doc.go": "sha256:c17bc2d39ed175ce7105c68305f8ae7152f659eb7cd187ecceee7698eb3a65dd",
-    "gen-go/error_category.go": "sha256:e36745796e32f753cf153a76c5f77c4bdf37a6a228e6607abcf95cac6f4a934b",
-    "gen-go/schema_documents.go": "sha256:e4b7d0b819a6b9e4b4c37be14caad4586bab3a7cbfd6b716d072635295295fc2",
-    "gen-go/types.go": "sha256:63aa621cecfe32867c6fab014ce68e11d2c98ff76d4c96c04ba72b0e197ef0c0",
+    "gen-go/error_category.go": "sha256:a8b64524be3716e62ca6016e56f2332a56fa5e16e42647421e516aa01a7d6806",
+    "gen-go/schema_documents.go": "sha256:10fcbf0966bca7d81fc1456afe8744a94d4ebf7d2863b49e6f4f179cbfb69f7e",
+    "gen-go/types.go": "sha256:4df0d1c9ba000cad237c3bb37c66ed646b4fc7d0cd41037b49c7264ad4934186",
     "gen-go/version_state.go": "sha256:827f8768359998409b86ea02d9ba1a149981928bae7161e4dc95fe0520ce7410"
   },
   "generatedTypeScript": {
     "gen-ts/ai-budget-ledger-event.ts": "sha256:64448d98a394e6eb103927cd35ce8a33e30176c0d5ee5afcdd8444f8aa051809",
-    "gen-ts/ai-callsite-inventory.ts": "sha256:350a1aca0e60f678a780d02c21d5a8dad13e1442662bb9f66aceb6b76a24f87e",
+    "gen-ts/ai-callsite-inventory.ts": "sha256:f6ea0fd19a8cde08b92567255a8fa89bf599bab6dbcf007e484474c3ab28f637",
     "gen-ts/ai-classification-stamp.ts": "sha256:dce78efba03df86a0986a16fd54c52066d322ff515d2463dbc45cafad82ecb44",
     "gen-ts/ai-composite-policy-digest-helper.ts": "sha256:d6c51d0c35599ee4f81d605b71773f4fff41a0bb46499ff0c6185072fedf53ce",
     "gen-ts/ai-composite-policy-digest.ts": "sha256:26b72227ca511d744c0f27fa0c85eb1ba6451ee380e38371e58a810898cfae96",
@@ -122,25 +124,27 @@
     "gen-ts/data-dependency.ts": "sha256:0572c31d7ae9088eccc104eee1a205bf176d1d6dacfaf0f290d666024e284966",
     "gen-ts/data-grant.ts": "sha256:2358579d8aa1e57b01a6f2b0eacce5531e7f21ef226404c9809925365e0d6155",
     "gen-ts/data-source.ts": "sha256:71be83b050468c2ea8c5830d28f1837c2b5929d23b4fdf6661bc5bfe8999904c",
-    "gen-ts/deploy-request.ts": "sha256:4d4c28a97249089712449b9632dcfef9217cd35200fec59c10afcaa17e178a9b",
+    "gen-ts/deploy-request.ts": "sha256:959fbb7c4c055aed7f5f3201612b5e0bb664883220c47019c101532adb1375fc",
     "gen-ts/deploy-response.ts": "sha256:364d9f1acf32e491498237cdd3f402d5f8e102f208db7748034f4ec68c6a6137",
     "gen-ts/deployment-environment.ts": "sha256:bbd6eec3a1631b13a8de6e6b95081696f7be01d0bd2bf1b7a9e3a1db809a727c",
     "gen-ts/deployment-source.ts": "sha256:8ccb55aaa7260eb6d19a00987d6a20a4b514e343564da13f27cd7fee8013500a",
     "gen-ts/deployment-status-failure.ts": "sha256:3ffe268e32240f9da3172b161b8e99e06aa2d21d8c37b30f340506a337c64047",
     "gen-ts/deployment-status-request.ts": "sha256:7ddccd07ab9f6d0821903a291ab35f903bb055727e03a058b99165ec048f6483",
-    "gen-ts/deployment-status-response.ts": "sha256:b35822ccfcedec8f83306e636eb27e0fdde6390aea40b6da97881ac5e6bda26e",
+    "gen-ts/deployment-status-response.ts": "sha256:40ec6a03d8b287465007ff35d6abfbae3541a7beea503e02a2ed5aa391f447c2",
     "gen-ts/env-bindings.ts": "sha256:a167cfe9842352c9fec6412ff0d82bda9c5f5c3a1af541bd5c27a57f54fd0941",
-    "gen-ts/error-category-registry.ts": "sha256:327a75153684b161f07ed3f5321048ff928147acdde6b52db9cafd59c48b17c4",
+    "gen-ts/error-category-registry.ts": "sha256:280a12aecc8aea8e6e2f2a54d2e968ff7807b522cc0c4036e6e41c065edcf3b7",
     "gen-ts/error-category.ts": "sha256:9bda89180c3b740c9aa8be466216592e8ca9d0d368c274333edf6ea5c45afd8e",
     "gen-ts/error-envelope.ts": "sha256:4457309be794f9d4fc0cf62530cc2d442c007bac9ae84aff66df099cc9e40310",
-    "gen-ts/index.ts": "sha256:cf2c63faf3af73a0b4fb7bac7f51f18b4c72d854a78aef8e4c7625dfc96a27f7",
+    "gen-ts/index.ts": "sha256:bb37bf7838034dcf410562855582ae3bfbf24ee43d506bbc514ad512557016b5",
     "gen-ts/kvs-routing-entry.ts": "sha256:d92e85ee9f257d77850d1d3aac9438e2055f38084ff84a48fcedae239d47d4ca",
     "gen-ts/promotion-request.ts": "sha256:6ef4612172202bca918a6260d40f2a1a8739845c6c0f747dd1ce5e520e081011",
     "gen-ts/promotion-response.ts": "sha256:f1c9cafac96faeb02a443a31786f67714e818f38d90108e7af41958396524d6f",
     "gen-ts/sanitized-binding-digest-helper.ts": "sha256:c47d7fdc20500e2e72c23fe39ecdd610fc397c47fcba51335ebec3c380fe6872",
     "gen-ts/sanitized-binding-evidence.ts": "sha256:4db7e9ed83f563a46e337815a55bbd6433864c41d9ec8e8a80810a16e3095ebb",
     "gen-ts/secret-reference.ts": "sha256:a8b65de72705b6f51f57cd8ca58881483108005b1fa4d19106c3e9cf1fa877e7",
-    "gen-ts/transform-report.ts": "sha256:407d7cf1ddf78868c14d91cad10d8df17d61d973a923c613d2bb094af20dbfeb",
+    "gen-ts/security-scan-input.ts": "sha256:5d9bde7394d8b34cca1d36b51ce17bf73cfccd9cfd7cab810f83d4de58f22285",
+    "gen-ts/security-verdict.ts": "sha256:fea950cddbd12fe0218e2573c9a29c6748d56612a464559f1e6d688fa97f68c7",
+    "gen-ts/transform-report.ts": "sha256:c59e2e3c91c8ef6727a030a0e0763e3b57aa0c80f1873ddcf1a34a3c82cd0f99",
     "gen-ts/version-state-machine.ts": "sha256:4371bc7e2bde86b0447f5242104c576cc160dfd7dae1885acbfb63540f230bdd",
     "gen-ts/version-state.ts": "sha256:a835112930299e7b593a1b8810b7414f6c9e809da2092306c743128170a3b702"
   }

package/dist/gen-ts/ai-callsite-inventory.d.ts

@@ -29,7 +29,7 @@ export interface AiInventoryCallsite {
     sourceFileSha256: AiInventoryDigest;
     line: number;
     language: 'javascript' | 'typescript' | 'python' | 'go' | 'unknown';
-    sdk: 'openai' | 'openai-compatible' | 'anthropic' | 'google-genai' | 'mistral' | 'bedrock' | 'cohere' | 'ollama' | 'legacy-gemini' | 'direct-provider-rest' | 'deepgram' | 'unknown';
+    sdk: 'openai' | 'openai-compatible' | 'anthropic' | 'google-genai' | 'mistral' | 'bedrock' | 'cohere' | 'ollama' | 'legacy-gemini' | 'external-provider-cli' | 'direct-provider-rest' | 'deepgram' | 'unknown';
     method: string;
     requestedModel?: string;
     strategy: 'deployment_injection' | 'deterministic_adapter' | 'unsupported';

package/dist/gen-ts/contract-release.d.ts

@@ -1,7 +1,7 @@
-export declare const ContractRepositoryVersion: "0.22.0.0";
-export declare const ContractPublishVersion: "0.22.0";
-export declare const ContractPublishTag: "v0.22.0";
-export declare const ContractSchemasDigest: "sha256:2b762d34e5f5549a90b78f304a47f98b6165cf938a2ca776b1c055db8f04fce1";
+export declare const ContractRepositoryVersion: "0.26.0.0";
+export declare const ContractPublishVersion: "0.26.0";
+export declare const ContractPublishTag: "v0.26.0";
+export declare const ContractSchemasDigest: "sha256:510b57798fd632a4fd34ea7701106b03285c491ab1eddbdef7d1ec0f82d7f70c";
 export declare const ContractAiFixturesDigest: "sha256:5d68828a1364dc63cafbb3c2d3f5c5f6c232d5333e7668a9c79e7652e5144b42";
-export declare const ContractGeneratedGoDigest: "sha256:0541904aad85c418a20de003bef68a42c8876d6cf8fe9f165472a5e77f81e045";
-export declare const ContractGeneratedTypeScriptDigest: "sha256:bbbba7c14c480030e9a44b94a746a0978efe7f008788817d31e137007bf89c38";
+export declare const ContractGeneratedGoDigest: "sha256:02a598e4606a1d24bbfdd881e548128ce9b60c090db7ff98dcee5bfe94b74ad3";
+export declare const ContractGeneratedTypeScriptDigest: "sha256:72865190987cb97215b1db19d46e5c54579f2c01677e5b8e5c735df1d669b74b";

package/dist/gen-ts/contract-release.js

@@ -1,9 +1,9 @@
 /* eslint-disable */
 // Code generated by tools/gen/gen.mjs from schema/*.json. DO NOT EDIT.
-export const ContractRepositoryVersion = "0.22.0.0";
-export const ContractPublishVersion = "0.22.0";
-export const ContractPublishTag = "v0.22.0";
-export const ContractSchemasDigest = "sha256:2b762d34e5f5549a90b78f304a47f98b6165cf938a2ca776b1c055db8f04fce1";
+export const ContractRepositoryVersion = "0.26.0.0";
+export const ContractPublishVersion = "0.26.0";
+export const ContractPublishTag = "v0.26.0";
+export const ContractSchemasDigest = "sha256:510b57798fd632a4fd34ea7701106b03285c491ab1eddbdef7d1ec0f82d7f70c";
 export const ContractAiFixturesDigest = "sha256:5d68828a1364dc63cafbb3c2d3f5c5f6c232d5333e7668a9c79e7652e5144b42";
-export const ContractGeneratedGoDigest = "sha256:0541904aad85c418a20de003bef68a42c8876d6cf8fe9f165472a5e77f81e045";
-export const ContractGeneratedTypeScriptDigest = "sha256:bbbba7c14c480030e9a44b94a746a0978efe7f008788817d31e137007bf89c38";
+export const ContractGeneratedGoDigest = "sha256:02a598e4606a1d24bbfdd881e548128ce9b60c090db7ff98dcee5bfe94b74ad3";
+export const ContractGeneratedTypeScriptDigest = "sha256:72865190987cb97215b1db19d46e5c54579f2c01677e5b8e5c735df1d669b74b";

package/dist/gen-ts/deploy-request.d.ts

@@ -54,6 +54,7 @@ export interface DeployRequest {
      * Preview-only. When true, the transformed code is NOT committed back to the source branch (benchmark deploys). Ignored outside preview.
      */
     benchRun?: boolean;
+    transform?: DeployRequestTransform;
     bindingClassification: BindingClassificationSubject;
 }
 export interface DeployRequestSource {
@@ -75,6 +76,15 @@ export interface DeployRequestEnvironmentBindings {
      */
     bindings: DeployRequestEnvironmentBinding[];
 }
+/**
+ * Optional transformation-engine selection. Absence preserves the existing sequential engine.
+ */
+export interface DeployRequestTransform {
+    /**
+     * Transformation engine. Omit to preserve the existing sequential default.
+     */
+    strategy?: 'sequential' | 'branch_select';
+}
 /**
  * Complete pre-allocation, value-free binding-name classification. DCP verifies its tenant/app/environment/source identity and exact name coverage before minting the versionId.
  */

package/dist/gen-ts/deployment-status-response.d.ts

@@ -13,6 +13,10 @@ export interface DeploymentStatusResponse {
     commit: string;
     requestedAt: string;
     updatedAt: string;
+    /**
+     * Transformation engine persisted for this immutable version. Older stored versions are projected as sequential.
+     */
+    transformStrategy: 'sequential' | 'branch_select';
     url?: string;
     failure?: StatusFailureProjection;
     /**
@@ -49,4 +53,14 @@ export interface StatusProgressEvent {
      * Short frontend-safe detail. Like the failure projection, it carries no internal identifiers, raw provider errors or secrets.
      */
     detail?: string;
+    strategy?: 'branch_select';
+    knowledgeVersion?: string;
+    branchId?: string;
+    action?: 'continue' | 'widen' | 'kill' | 'unsupported';
+    planConfidence?: 'high' | 'medium' | 'low';
+    optionCount?: number;
+    depth?: number;
+    failureCategory?: string;
+    remainingMs?: number;
+    origin?: 'initial' | 'widen';
 }

package/dist/gen-ts/error-category-registry.d.ts

@@ -9,6 +9,7 @@ export declare const ErrorCategories: {
     readonly SecretsLeakedInArtifact: "secrets.leaked-in-artifact";
     readonly StorageSqliteMisclassified: "storage.sqlite-misclassified";
     readonly StorageMappingDrift: "storage.mapping-drift";
+    readonly StorageUnavailable: "storage.unavailable";
     readonly TransformDeadlineExceeded: "transform.deadline-exceeded";
     readonly TransformValidationFailed: "transform.validation-failed";
     readonly FrontendEnvInlinedUnfixable: "frontend.env-inlined-unfixable";

package/dist/gen-ts/error-category-registry.js

@@ -11,6 +11,7 @@ export const ErrorCategories = {
     SecretsLeakedInArtifact: "secrets.leaked-in-artifact",
     StorageSqliteMisclassified: "storage.sqlite-misclassified",
     StorageMappingDrift: "storage.mapping-drift",
+    StorageUnavailable: "storage.unavailable",
     TransformDeadlineExceeded: "transform.deadline-exceeded",
     TransformValidationFailed: "transform.validation-failed",
     FrontendEnvInlinedUnfixable: "frontend.env-inlined-unfixable",
@@ -54,6 +55,7 @@ const retryableExact = {
     "secrets.leaked-in-artifact": false,
     "storage.sqlite-misclassified": false,
     "storage.mapping-drift": false,
+    "storage.unavailable": true,
     "transform.deadline-exceeded": false,
     "transform.validation-failed": true,
     "frontend.env-inlined-unfixable": false,

package/dist/gen-ts/index.d.ts

@@ -43,6 +43,8 @@ export * from './promotion-response.js';
 export * from './sanitized-binding-digest-helper.js';
 export * from './sanitized-binding-evidence.js';
 export * from './secret-reference.js';
+export * from './security-scan-input.js';
+export * from './security-verdict.js';
 export * from './transform-report.js';
 export * from './version-state-machine.js';
 export * from './version-state.js';

package/dist/gen-ts/index.js

@@ -45,6 +45,8 @@ export * from './promotion-response.js';
 export * from './sanitized-binding-digest-helper.js';
 export * from './sanitized-binding-evidence.js';
 export * from './secret-reference.js';
+export * from './security-scan-input.js';
+export * from './security-verdict.js';
 export * from './transform-report.js';
 export * from './version-state-machine.js';
 export * from './version-state.js';

package/dist/gen-ts/security-scan-input.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Input to the Harbour Security Assurance machine (Security Assurance LLD §2). M1 runs the SOURCE phase only; ARTIFACT is reserved in the enum so the contract is stable through M2. `commit` is the identity being scanned; `org/app/env` locate the snapshot (the control-state table has no commit GSI, so a bare commit is not resolvable); `branch` is caller-supplied provenance.
+ */
+export interface SecurityScanInput {
+    /**
+     * Scan phase. M1 implements SOURCE only; ARTIFACT is reserved for M2 (image scan against an ECR digest) and is rejected by the machine until then.
+     */
+    phase: 'SOURCE' | 'ARTIFACT';
+    /**
+     * Harbour organization id, e.g. fourier.
+     */
+    org: string;
+    /**
+     * Harbour app id within the org, e.g. focuslist.
+     */
+    app: string;
+    /**
+     * Environment whose ingested snapshots are searched for the commit. M1 deploys preview-only; prod is contract-stable for M3.
+     */
+    env: 'preview' | 'prod';
+    /**
+     * GitHub owner/name of the source repository, e.g. Fourier-Labs-AI/focus-list.
+     */
+    repo: string;
+    /**
+     * Full 40-hex lowercase commit SHA — the identity being scanned.
+     */
+    commit: string;
+    /**
+     * Branch name, supplied authoritatively by the caller in v1 (provenance only — never used for resolution).
+     */
+    branch: string;
+    /**
+     * Data classification of the app. Optional in v1 (decided 2026-08-27): when ABSENT the machine assumes the STANDARD profile and stamps classificationDefaulted: true in the verdict provenance. An invalid value still fails closed — only absence defaults. No classifier exists until M4; until then callers state it or accept the default.
+     */
+    classification?: 'GREEN' | 'YELLOW' | 'ORANGE' | 'RED';
+}

package/dist/gen-ts/security-scan-input.js

@@ -0,0 +1,3 @@
+/* eslint-disable */
+// Code generated by tools/gen/gen.mjs from schema/*.json. DO NOT EDIT.
+export {};

package/dist/gen-ts/security-verdict.d.ts

@@ -0,0 +1,99 @@
+/**
+ * Decision produced by the Harbour Security Assurance machine (Security Assurance LLD §2). `outcome: BLOCKED` surfaces to callers as the registered non-retryable `gate.security-scan` error category; `reason` is present exactly when BLOCKED. The S3 evidence object named by `evidenceRef` is the full record — in-payload findings may be truncated.
+ */
+export interface SecurityVerdict {
+    /**
+     * Fail-closed decision: any missing or UNAVAILABLE required evidence is BLOCKED, never PASS.
+     */
+    outcome: 'PASS' | 'BLOCKED';
+    /**
+     * Policy profile the evidence was evaluated against (derived from the input classification; STANDARD when the classification was absent).
+     */
+    profile: 'BASELINE' | 'STANDARD' | 'HIGH' | 'CRITICAL';
+    /**
+     * Human-readable cause, present when outcome is BLOCKED; becomes the Fail-state cause of HarbourSecurityBlocked.
+     */
+    reason?: string;
+    /**
+     * Map of scan-category (e.g. source-secrets, dependency-sca) to its evidence. Kept as an open map so new categories (M2+) are additive, not a schema change.
+     */
+    evidence: {
+        [k: string]: ScanEvidence;
+    };
+    evidenceRef: EvidenceRef;
+    provenance: Provenance;
+}
+export interface ScanEvidence {
+    /**
+     * UNAVAILABLE means the tool did not run or did not produce parseable output; policy treats it as blocking for required categories.
+     */
+    status: 'PASS' | 'FAIL' | 'UNAVAILABLE';
+    /**
+     * Normalized, deduplicated findings. May be truncated in-payload; the S3 evidence object is complete.
+     */
+    findings: Finding[];
+}
+export interface Finding {
+    /**
+     * Producing tool, e.g. gitleaks, trivy.
+     */
+    tool: string;
+    /**
+     * Tool-native rule or vulnerability id, e.g. aws-access-key-id, CVE-2024-12345.
+     */
+    ruleId: string;
+    /**
+     * Tool-native severity, normalized upper-case, e.g. CRITICAL, HIGH.
+     */
+    severity: string;
+    /**
+     * Repository-relative file path, when the finding is file-anchored.
+     */
+    path?: string;
+    /**
+     * 1-based line number, when the finding is line-anchored.
+     */
+    line?: number;
+    /**
+     * Human-readable finding description. Secret values are never included — only locations.
+     */
+    message: string;
+    /**
+     * Suggested fix, when the tool provides one.
+     */
+    remediation?: string;
+}
+export interface EvidenceRef {
+    /**
+     * S3 bucket holding the full evidence object.
+     */
+    bucket: string;
+    /**
+     * S3 key of the full evidence object, e.g. security-evidence/<org>/<app>/<env>/<commit>/<scannedAt>.json.
+     */
+    key: string;
+}
+export interface Provenance {
+    org: string;
+    app: string;
+    env: 'preview' | 'prod';
+    repo: string;
+    commit: string;
+    branch: string;
+    /**
+     * SHA-256 of the exact source snapshot tarball that was scanned, verified before extraction.
+     */
+    snapshotSha256: string;
+    /**
+     * UTC timestamp the scan completed.
+     */
+    scannedAt: string;
+    /**
+     * Digest of the runner image's tool-manifest.json — pins which tool versions produced this evidence.
+     */
+    toolManifestDigest: string;
+    /**
+     * True iff the input omitted classification and the machine assumed STANDARD (decision 2026-08-27). An invalid classification fails closed and never reaches a verdict.
+     */
+    classificationDefaulted: boolean;
+}

package/dist/gen-ts/security-verdict.js

@@ -0,0 +1,3 @@
+/* eslint-disable */
+// Code generated by tools/gen/gen.mjs from schema/*.json. DO NOT EDIT.
+export {};

package/dist/gen-ts/transform-report.d.ts

@@ -1,13 +1,13 @@
 /**
  * Structured output an agent must return from one Harbour transformation attempt. Handed to the agent as its output schema, then decoded and semantically re-validated by the control plane, which remains the authority. The enum on applied_playbooks.items is the one dynamic part: the adapter injects the names of the playbooks supplied for that invocation before writing the document, so the model is structurally prevented from naming a playbook it was not given. Application-secret handling was removed platform-wide, so this document carries no redactions and no secrets fields.
  */
-export interface TransformReport {
+export type TransformReport = {
     /**
      * @minItems 1
      */
-    applied_playbooks: string[];
-    static_rebuild_required: boolean;
-    analysis: {
+    applied_playbooks?: string[];
+    static_rebuild_required?: boolean;
+    analysis?: {
         deployable: boolean;
         needsTransformation: boolean;
         /**
@@ -28,7 +28,7 @@ export interface TransformReport {
             reason: string;
         }[];
     };
-    database: {
+    database?: {
         mode: 'none' | 'sql' | 'unsupported';
         changeType: 'none' | 'code_only' | 'schema_only' | 'code_and_schema';
         requiresCodeChanges: boolean;
@@ -56,15 +56,20 @@ export interface TransformReport {
         unsupportedFeatures: string[];
     };
     application: {
-        runtime: string;
+        unsupported?: {
+            capability: string;
+            constraint: string;
+            reason: string;
+        };
+        runtime?: string;
         /**
          * Optional reviewed runtime features selected for the standard application image. The first release supports Chromium for Node runtimes only.
          */
         runtimeFeatures?: 'chromium'[];
-        buildKind: 'container' | 'static';
-        topology: 'static' | 'backend' | 'frontend_and_backend';
-        entrypoint: string;
-        build: {
+        buildKind?: 'container' | 'static';
+        topology?: 'static' | 'backend' | 'frontend_and_backend';
+        entrypoint?: string;
+        build?: {
             /**
              * @minItems 1
              * @maxItems 64
@@ -85,7 +90,7 @@ export interface TransformReport {
                 route: string;
             }[];
         };
-        basePath: {
+        basePath?: {
             required: boolean;
             environmentVariable: 'HARBOUR_BASE_PATH';
         };
@@ -93,7 +98,7 @@ export interface TransformReport {
          * @minItems 1
          * @maxItems 64
          */
-        evidence: {
+        evidence?: {
             path: string;
             line: number;
             reason: string;
@@ -101,6 +106,14 @@ export interface TransformReport {
         /**
          * @maxItems 64
          */
-        unsupportedFeatures: string[];
+        unsupportedFeatures?: string[];
+    };
+} & ({
+    application: {
+        [k: string]: unknown;
+    };
+} | {
+    application?: {
+        [k: string]: unknown;
     };
-}
+});

package/gen-ts/ai-callsite-inventory.ts

@@ -43,6 +43,7 @@ export interface AiInventoryCallsite {
     | 'cohere'
     | 'ollama'
     | 'legacy-gemini'
+    | 'external-provider-cli'
     | 'direct-provider-rest'
     | 'deepgram'
     | 'unknown';

package/gen-ts/contract-release.ts

@@ -1,10 +1,10 @@
 /* eslint-disable */
 // Code generated by tools/gen/gen.mjs from schema/*.json. DO NOT EDIT.
 
-export const ContractRepositoryVersion = "0.22.0.0" as const;
-export const ContractPublishVersion = "0.22.0" as const;
-export const ContractPublishTag = "v0.22.0" as const;
-export const ContractSchemasDigest = "sha256:2b762d34e5f5549a90b78f304a47f98b6165cf938a2ca776b1c055db8f04fce1" as const;
+export const ContractRepositoryVersion = "0.26.0.0" as const;
+export const ContractPublishVersion = "0.26.0" as const;
+export const ContractPublishTag = "v0.26.0" as const;
+export const ContractSchemasDigest = "sha256:510b57798fd632a4fd34ea7701106b03285c491ab1eddbdef7d1ec0f82d7f70c" as const;
 export const ContractAiFixturesDigest = "sha256:5d68828a1364dc63cafbb3c2d3f5c5f6c232d5333e7668a9c79e7652e5144b42" as const;
-export const ContractGeneratedGoDigest = "sha256:0541904aad85c418a20de003bef68a42c8876d6cf8fe9f165472a5e77f81e045" as const;
-export const ContractGeneratedTypeScriptDigest = "sha256:bbbba7c14c480030e9a44b94a746a0978efe7f008788817d31e137007bf89c38" as const;
+export const ContractGeneratedGoDigest = "sha256:02a598e4606a1d24bbfdd881e548128ce9b60c090db7ff98dcee5bfe94b74ad3" as const;
+export const ContractGeneratedTypeScriptDigest = "sha256:72865190987cb97215b1db19d46e5c54579f2c01677e5b8e5c735df1d669b74b" as const;

package/gen-ts/deploy-request.ts

@@ -58,6 +58,7 @@ export interface DeployRequest {
    * Preview-only. When true, the transformed code is NOT committed back to the source branch (benchmark deploys). Ignored outside preview.
    */
   benchRun?: boolean;
+  transform?: DeployRequestTransform;
   bindingClassification: BindingClassificationSubject;
 }
 export interface DeployRequestSource {
@@ -79,6 +80,15 @@ export interface DeployRequestEnvironmentBindings {
    */
   bindings: DeployRequestEnvironmentBinding[];
 }
+/**
+ * Optional transformation-engine selection. Absence preserves the existing sequential engine.
+ */
+export interface DeployRequestTransform {
+  /**
+   * Transformation engine. Omit to preserve the existing sequential default.
+   */
+  strategy?: 'sequential' | 'branch_select';
+}
 /**
  * Complete pre-allocation, value-free binding-name classification. DCP verifies its tenant/app/environment/source identity and exact name coverage before minting the versionId.
  */

package/gen-ts/deployment-status-response.ts

@@ -28,6 +28,10 @@ export interface DeploymentStatusResponse {
   commit: string;
   requestedAt: string;
   updatedAt: string;
+  /**
+   * Transformation engine persisted for this immutable version. Older stored versions are projected as sequential.
+   */
+  transformStrategy: 'sequential' | 'branch_select';
   url?: string;
   failure?: StatusFailureProjection;
   /**
@@ -64,4 +68,14 @@ export interface StatusProgressEvent {
    * Short frontend-safe detail. Like the failure projection, it carries no internal identifiers, raw provider errors or secrets.
    */
   detail?: string;
+  strategy?: 'branch_select';
+  knowledgeVersion?: string;
+  branchId?: string;
+  action?: 'continue' | 'widen' | 'kill' | 'unsupported';
+  planConfidence?: 'high' | 'medium' | 'low';
+  optionCount?: number;
+  depth?: number;
+  failureCategory?: string;
+  remainingMs?: number;
+  origin?: 'initial' | 'widen';
 }

package/gen-ts/error-category-registry.ts

@@ -12,6 +12,7 @@ export const ErrorCategories = {
   SecretsLeakedInArtifact: "secrets.leaked-in-artifact",
   StorageSqliteMisclassified: "storage.sqlite-misclassified",
   StorageMappingDrift: "storage.mapping-drift",
+  StorageUnavailable: "storage.unavailable",
   TransformDeadlineExceeded: "transform.deadline-exceeded",
   TransformValidationFailed: "transform.validation-failed",
   FrontendEnvInlinedUnfixable: "frontend.env-inlined-unfixable",
@@ -56,6 +57,7 @@ const retryableExact: Record<string, boolean> = {
   "secrets.leaked-in-artifact": false,
   "storage.sqlite-misclassified": false,
   "storage.mapping-drift": false,
+  "storage.unavailable": true,
   "transform.deadline-exceeded": false,
   "transform.validation-failed": true,
   "frontend.env-inlined-unfixable": false,

package/gen-ts/index.ts

@@ -46,6 +46,8 @@ export * from './promotion-response.js';
 export * from './sanitized-binding-digest-helper.js';
 export * from './sanitized-binding-evidence.js';
 export * from './secret-reference.js';
+export * from './security-scan-input.js';
+export * from './security-verdict.js';
 export * from './transform-report.js';
 export * from './version-state-machine.js';
 export * from './version-state.js';

package/gen-ts/security-scan-input.ts

@@ -0,0 +1,40 @@
+/* eslint-disable */
+// Code generated by tools/gen/gen.mjs from schema/*.json. DO NOT EDIT.
+
+/**
+ * Input to the Harbour Security Assurance machine (Security Assurance LLD §2). M1 runs the SOURCE phase only; ARTIFACT is reserved in the enum so the contract is stable through M2. `commit` is the identity being scanned; `org/app/env` locate the snapshot (the control-state table has no commit GSI, so a bare commit is not resolvable); `branch` is caller-supplied provenance.
+ */
+export interface SecurityScanInput {
+  /**
+   * Scan phase. M1 implements SOURCE only; ARTIFACT is reserved for M2 (image scan against an ECR digest) and is rejected by the machine until then.
+   */
+  phase: 'SOURCE' | 'ARTIFACT';
+  /**
+   * Harbour organization id, e.g. fourier.
+   */
+  org: string;
+  /**
+   * Harbour app id within the org, e.g. focuslist.
+   */
+  app: string;
+  /**
+   * Environment whose ingested snapshots are searched for the commit. M1 deploys preview-only; prod is contract-stable for M3.
+   */
+  env: 'preview' | 'prod';
+  /**
+   * GitHub owner/name of the source repository, e.g. Fourier-Labs-AI/focus-list.
+   */
+  repo: string;
+  /**
+   * Full 40-hex lowercase commit SHA — the identity being scanned.
+   */
+  commit: string;
+  /**
+   * Branch name, supplied authoritatively by the caller in v1 (provenance only — never used for resolution).
+   */
+  branch: string;
+  /**
+   * Data classification of the app. Optional in v1 (decided 2026-08-27): when ABSENT the machine assumes the STANDARD profile and stamps classificationDefaulted: true in the verdict provenance. An invalid value still fails closed — only absence defaults. No classifier exists until M4; until then callers state it or accept the default.
+   */
+  classification?: 'GREEN' | 'YELLOW' | 'ORANGE' | 'RED';
+}

package/gen-ts/security-verdict.ts

@@ -0,0 +1,102 @@
+/* eslint-disable */
+// Code generated by tools/gen/gen.mjs from schema/*.json. DO NOT EDIT.
+
+/**
+ * Decision produced by the Harbour Security Assurance machine (Security Assurance LLD §2). `outcome: BLOCKED` surfaces to callers as the registered non-retryable `gate.security-scan` error category; `reason` is present exactly when BLOCKED. The S3 evidence object named by `evidenceRef` is the full record — in-payload findings may be truncated.
+ */
+export interface SecurityVerdict {
+  /**
+   * Fail-closed decision: any missing or UNAVAILABLE required evidence is BLOCKED, never PASS.
+   */
+  outcome: 'PASS' | 'BLOCKED';
+  /**
+   * Policy profile the evidence was evaluated against (derived from the input classification; STANDARD when the classification was absent).
+   */
+  profile: 'BASELINE' | 'STANDARD' | 'HIGH' | 'CRITICAL';
+  /**
+   * Human-readable cause, present when outcome is BLOCKED; becomes the Fail-state cause of HarbourSecurityBlocked.
+   */
+  reason?: string;
+  /**
+   * Map of scan-category (e.g. source-secrets, dependency-sca) to its evidence. Kept as an open map so new categories (M2+) are additive, not a schema change.
+   */
+  evidence: {
+    [k: string]: ScanEvidence;
+  };
+  evidenceRef: EvidenceRef;
+  provenance: Provenance;
+}
+export interface ScanEvidence {
+  /**
+   * UNAVAILABLE means the tool did not run or did not produce parseable output; policy treats it as blocking for required categories.
+   */
+  status: 'PASS' | 'FAIL' | 'UNAVAILABLE';
+  /**
+   * Normalized, deduplicated findings. May be truncated in-payload; the S3 evidence object is complete.
+   */
+  findings: Finding[];
+}
+export interface Finding {
+  /**
+   * Producing tool, e.g. gitleaks, trivy.
+   */
+  tool: string;
+  /**
+   * Tool-native rule or vulnerability id, e.g. aws-access-key-id, CVE-2024-12345.
+   */
+  ruleId: string;
+  /**
+   * Tool-native severity, normalized upper-case, e.g. CRITICAL, HIGH.
+   */
+  severity: string;
+  /**
+   * Repository-relative file path, when the finding is file-anchored.
+   */
+  path?: string;
+  /**
+   * 1-based line number, when the finding is line-anchored.
+   */
+  line?: number;
+  /**
+   * Human-readable finding description. Secret values are never included — only locations.
+   */
+  message: string;
+  /**
+   * Suggested fix, when the tool provides one.
+   */
+  remediation?: string;
+}
+export interface EvidenceRef {
+  /**
+   * S3 bucket holding the full evidence object.
+   */
+  bucket: string;
+  /**
+   * S3 key of the full evidence object, e.g. security-evidence/<org>/<app>/<env>/<commit>/<scannedAt>.json.
+   */
+  key: string;
+}
+export interface Provenance {
+  org: string;
+  app: string;
+  env: 'preview' | 'prod';
+  repo: string;
+  commit: string;
+  branch: string;
+  /**
+   * SHA-256 of the exact source snapshot tarball that was scanned, verified before extraction.
+   */
+  snapshotSha256: string;
+  /**
+   * UTC timestamp the scan completed.
+   */
+  scannedAt: string;
+  /**
+   * Digest of the runner image's tool-manifest.json — pins which tool versions produced this evidence.
+   */
+  toolManifestDigest: string;
+  /**
+   * True iff the input omitted classification and the machine assumed STANDARD (decision 2026-08-27). An invalid classification fails closed and never reaches a verdict.
+   */
+  classificationDefaulted: boolean;
+}

package/gen-ts/transform-report.ts

@@ -4,13 +4,13 @@
 /**
  * Structured output an agent must return from one Harbour transformation attempt. Handed to the agent as its output schema, then decoded and semantically re-validated by the control plane, which remains the authority. The enum on applied_playbooks.items is the one dynamic part: the adapter injects the names of the playbooks supplied for that invocation before writing the document, so the model is structurally prevented from naming a playbook it was not given. Application-secret handling was removed platform-wide, so this document carries no redactions and no secrets fields.
  */
-export interface TransformReport {
+export type TransformReport = {
   /**
    * @minItems 1
    */
-  applied_playbooks: string[];
-  static_rebuild_required: boolean;
-  analysis: {
+  applied_playbooks?: string[];
+  static_rebuild_required?: boolean;
+  analysis?: {
     deployable: boolean;
     needsTransformation: boolean;
     /**
@@ -31,7 +31,7 @@ export interface TransformReport {
       reason: string;
     }[];
   };
-  database: {
+  database?: {
     mode: 'none' | 'sql' | 'unsupported';
     changeType: 'none' | 'code_only' | 'schema_only' | 'code_and_schema';
     requiresCodeChanges: boolean;
@@ -59,15 +59,20 @@ export interface TransformReport {
     unsupportedFeatures: string[];
   };
   application: {
-    runtime: string;
+    unsupported?: {
+      capability: string;
+      constraint: string;
+      reason: string;
+    };
+    runtime?: string;
     /**
      * Optional reviewed runtime features selected for the standard application image. The first release supports Chromium for Node runtimes only.
      */
     runtimeFeatures?: 'chromium'[];
-    buildKind: 'container' | 'static';
-    topology: 'static' | 'backend' | 'frontend_and_backend';
-    entrypoint: string;
-    build: {
+    buildKind?: 'container' | 'static';
+    topology?: 'static' | 'backend' | 'frontend_and_backend';
+    entrypoint?: string;
+    build?: {
       /**
        * @minItems 1
        * @maxItems 64
@@ -88,7 +93,7 @@ export interface TransformReport {
         route: string;
       }[];
     };
-    basePath: {
+    basePath?: {
       required: boolean;
       environmentVariable: 'HARBOUR_BASE_PATH';
     };
@@ -96,7 +101,7 @@ export interface TransformReport {
      * @minItems 1
      * @maxItems 64
      */
-    evidence: {
+    evidence?: {
       path: string;
       line: number;
       reason: string;
@@ -104,6 +109,17 @@ export interface TransformReport {
     /**
      * @maxItems 64
      */
-    unsupportedFeatures: string[];
+    unsupportedFeatures?: string[];
   };
-}
+} & (
+  | {
+      application: {
+        [k: string]: unknown;
+      };
+    }
+  | {
+      application?: {
+        [k: string]: unknown;
+      };
+    }
+);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fourier-labs/harbour-contracts",
-  "version": "0.22.0",
+  "version": "0.26.0",
   "description": "Single source of truth for every data shape that crosses a boundary between Harbour components.",
   "license": "UNLICENSED",
   "private": false,

package/schema/ai-callsite-inventory.schema.json

@@ -114,6 +114,7 @@
             "cohere",
             "ollama",
             "legacy-gemini",
+            "external-provider-cli",
             "direct-provider-rest",
             "deepgram",
             "unknown"

package/schema/deploy-request.schema.json

@@ -39,12 +39,27 @@
       "default": false,
       "description": "Preview-only. When true, the transformed code is NOT committed back to the source branch (benchmark deploys). Ignored outside preview."
     },
+    "transform": {
+      "$ref": "#/definitions/DeployRequestTransform",
+      "description": "Optional transformation-engine selection. Absence preserves the existing sequential engine."
+    },
     "bindingClassification": {
       "$ref": "binding-classification-subject.schema.json",
       "description": "Complete pre-allocation, value-free binding-name classification. DCP verifies its tenant/app/environment/source identity and exact name coverage before minting the versionId."
     }
   },
   "definitions": {
+    "DeployRequestTransform": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "strategy": {
+          "type": "string",
+          "enum": ["sequential", "branch_select"],
+          "description": "Transformation engine. Omit to preserve the existing sequential default."
+        }
+      }
+    },
     "DeployRequestEnvironmentBindings": {
       "type": "object",
       "additionalProperties": false,

package/schema/deployment-status-response.schema.json

@@ -5,7 +5,7 @@
   "description": "200 OK body returned by GET /v1/tenants/{tenant}/apps/{app}/deployments/{versionId}. It describes that exact immutable version; newer deployments cannot change which record this response represents.",
   "type": "object",
   "additionalProperties": false,
-  "required": ["requestId", "versionId", "tenant", "app", "environment", "status", "message", "branch", "commit", "requestedAt", "updatedAt"],
+  "required": ["requestId", "versionId", "tenant", "app", "environment", "status", "message", "branch", "commit", "requestedAt", "updatedAt", "transformStrategy"],
   "properties": {
     "requestId": {
       "type": "string"
@@ -46,6 +46,11 @@
       "type": "string",
       "format": "date-time"
     },
+    "transformStrategy": {
+      "type": "string",
+      "enum": ["sequential", "branch_select"],
+      "description": "Transformation engine persisted for this immutable version. Older stored versions are projected as sequential."
+    },
     "url": {
       "type": "string",
       "format": "uri"
@@ -113,7 +118,17 @@
           "type": "string",
           "maxLength": 256,
           "description": "Short frontend-safe detail. Like the failure projection, it carries no internal identifiers, raw provider errors or secrets."
-        }
+        },
+        "strategy": { "type": "string", "enum": ["branch_select"] },
+        "knowledgeVersion": { "type": "string", "pattern": "^v[0-9]+$" },
+        "branchId": { "type": "string", "minLength": 1, "maxLength": 128, "pattern": "^[a-z0-9][a-z0-9.-]*$" },
+        "action": { "type": "string", "enum": ["continue", "widen", "kill", "unsupported"] },
+        "planConfidence": { "type": "string", "enum": ["high", "medium", "low"] },
+        "optionCount": { "type": "integer", "minimum": 1, "maximum": 64 },
+        "depth": { "type": "integer", "minimum": 1, "maximum": 10000 },
+        "failureCategory": { "type": "string", "minLength": 1, "maxLength": 128, "pattern": "^[a-z0-9][a-z0-9.-]*$" },
+        "remainingMs": { "type": "integer", "minimum": 1, "maximum": 86400000 },
+        "origin": { "type": "string", "enum": ["initial", "widen"] }
       }
     }
   }

package/schema/error-category.enum.json

@@ -23,6 +23,7 @@
     { "id": "storage.sqlite-misclassified", "retryable": false, "description": "SQLite usage not resolvable to a managed binding." },
     { "id": "storage.unsupported-engine", "retryable": false, "family": true, "description": "Storage engine with no Harbour mapping; concrete token names the engine, e.g. storage.unsupported-engine.mongodb." },
     { "id": "storage.mapping-drift", "retryable": false, "description": "Declared storage binding diverged from detected usage." },
+    { "id": "storage.unavailable", "retryable": true, "description": "The platform's shared application database could not be reached while preparing or provisioning the deploy — e.g. the Aurora cluster dial timing out during a scale-from-zero cold start. Says nothing about the app, so it IS retryable: the same deploy submitted again is expected to succeed once the database is awake. Previously surfaced as uncategorized.deploy (errorType wrapError)." },
     { "id": "transform.deadline-exceeded", "retryable": false, "description": "The 15-minute transform wall deadline was reached." },
     { "id": "transform.non-retryable", "retryable": false, "family": true, "description": "Agent declared the app unconvertible or hit an unsupported construct; fails immediately without burning remaining budget. Concrete token names the reason." },
     { "id": "transform.validation-failed", "retryable": true, "description": "Transform candidate failed validation with iterable feedback; re-enters TRANSFORMING while deadline remains." },

package/schema/security-scan-input.schema.json

@@ -0,0 +1,52 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "https://schemas.harbour.dev/security-scan-input.schema.json",
+  "title": "SecurityScanInput",
+  "description": "Input to the Harbour Security Assurance machine (Security Assurance LLD §2). M1 runs the SOURCE phase only; ARTIFACT is reserved in the enum so the contract is stable through M2. `commit` is the identity being scanned; `org/app/env` locate the snapshot (the control-state table has no commit GSI, so a bare commit is not resolvable); `branch` is caller-supplied provenance.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["phase", "org", "app", "env", "repo", "commit", "branch"],
+  "properties": {
+    "phase": {
+      "type": "string",
+      "enum": ["SOURCE", "ARTIFACT"],
+      "description": "Scan phase. M1 implements SOURCE only; ARTIFACT is reserved for M2 (image scan against an ECR digest) and is rejected by the machine until then."
+    },
+    "org": {
+      "type": "string",
+      "minLength": 1,
+      "description": "Harbour organization id, e.g. fourier."
+    },
+    "app": {
+      "type": "string",
+      "minLength": 1,
+      "description": "Harbour app id within the org, e.g. focuslist."
+    },
+    "env": {
+      "type": "string",
+      "enum": ["preview", "prod"],
+      "description": "Environment whose ingested snapshots are searched for the commit. M1 deploys preview-only; prod is contract-stable for M3."
+    },
+    "repo": {
+      "type": "string",
+      "minLength": 1,
+      "pattern": "^[^/\\s]+/[^/\\s]+$",
+      "description": "GitHub owner/name of the source repository, e.g. Fourier-Labs-AI/focus-list."
+    },
+    "commit": {
+      "type": "string",
+      "pattern": "^[0-9a-f]{40}$",
+      "description": "Full 40-hex lowercase commit SHA — the identity being scanned."
+    },
+    "branch": {
+      "type": "string",
+      "minLength": 1,
+      "description": "Branch name, supplied authoritatively by the caller in v1 (provenance only — never used for resolution)."
+    },
+    "classification": {
+      "type": "string",
+      "enum": ["GREEN", "YELLOW", "ORANGE", "RED"],
+      "description": "Data classification of the app. Optional in v1 (decided 2026-08-27): when ABSENT the machine assumes the STANDARD profile and stamps classificationDefaulted: true in the verdict provenance. An invalid value still fails closed — only absence defaults. No classifier exists until M4; until then callers state it or accept the default."
+    }
+  }
+}

package/schema/security-verdict.schema.json

@@ -0,0 +1,102 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "https://schemas.harbour.dev/security-verdict.schema.json",
+  "title": "SecurityVerdict",
+  "description": "Decision produced by the Harbour Security Assurance machine (Security Assurance LLD §2). `outcome: BLOCKED` surfaces to callers as the registered non-retryable `gate.security-scan` error category; `reason` is present exactly when BLOCKED. The S3 evidence object named by `evidenceRef` is the full record — in-payload findings may be truncated.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["outcome", "profile", "evidence", "evidenceRef", "provenance"],
+  "properties": {
+    "outcome": {
+      "type": "string",
+      "enum": ["PASS", "BLOCKED"],
+      "description": "Fail-closed decision: any missing or UNAVAILABLE required evidence is BLOCKED, never PASS."
+    },
+    "profile": {
+      "type": "string",
+      "enum": ["BASELINE", "STANDARD", "HIGH", "CRITICAL"],
+      "description": "Policy profile the evidence was evaluated against (derived from the input classification; STANDARD when the classification was absent)."
+    },
+    "reason": {
+      "type": "string",
+      "minLength": 1,
+      "description": "Human-readable cause, present when outcome is BLOCKED; becomes the Fail-state cause of HarbourSecurityBlocked."
+    },
+    "evidence": {
+      "type": "object",
+      "additionalProperties": { "$ref": "#/definitions/ScanEvidence" },
+      "description": "Map of scan-category (e.g. source-secrets, dependency-sca) to its evidence. Kept as an open map so new categories (M2+) are additive, not a schema change."
+    },
+    "evidenceRef": { "$ref": "#/definitions/EvidenceRef" },
+    "provenance": { "$ref": "#/definitions/Provenance" }
+  },
+  "definitions": {
+    "ScanEvidence": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["status", "findings"],
+      "properties": {
+        "status": {
+          "type": "string",
+          "enum": ["PASS", "FAIL", "UNAVAILABLE"],
+          "description": "UNAVAILABLE means the tool did not run or did not produce parseable output; policy treats it as blocking for required categories."
+        },
+        "findings": {
+          "type": "array",
+          "items": { "$ref": "#/definitions/Finding" },
+          "description": "Normalized, deduplicated findings. May be truncated in-payload; the S3 evidence object is complete."
+        }
+      }
+    },
+    "Finding": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["tool", "ruleId", "severity", "message"],
+      "properties": {
+        "tool": { "type": "string", "minLength": 1, "description": "Producing tool, e.g. gitleaks, trivy." },
+        "ruleId": { "type": "string", "minLength": 1, "description": "Tool-native rule or vulnerability id, e.g. aws-access-key-id, CVE-2024-12345." },
+        "severity": { "type": "string", "minLength": 1, "description": "Tool-native severity, normalized upper-case, e.g. CRITICAL, HIGH." },
+        "path": { "type": "string", "description": "Repository-relative file path, when the finding is file-anchored." },
+        "line": { "type": "integer", "minimum": 1, "description": "1-based line number, when the finding is line-anchored." },
+        "message": { "type": "string", "minLength": 1, "description": "Human-readable finding description. Secret values are never included — only locations." },
+        "remediation": { "type": "string", "description": "Suggested fix, when the tool provides one." }
+      }
+    },
+    "EvidenceRef": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["bucket", "key"],
+      "properties": {
+        "bucket": { "type": "string", "minLength": 1, "description": "S3 bucket holding the full evidence object." },
+        "key": { "type": "string", "minLength": 1, "description": "S3 key of the full evidence object, e.g. security-evidence/<org>/<app>/<env>/<commit>/<scannedAt>.json." }
+      }
+    },
+    "Provenance": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["org", "app", "env", "repo", "commit", "branch", "snapshotSha256", "scannedAt", "toolManifestDigest", "classificationDefaulted"],
+      "properties": {
+        "org": { "type": "string", "minLength": 1 },
+        "app": { "type": "string", "minLength": 1 },
+        "env": { "type": "string", "enum": ["preview", "prod"] },
+        "repo": { "type": "string", "minLength": 1, "pattern": "^[^/\\s]+/[^/\\s]+$" },
+        "commit": { "type": "string", "pattern": "^[0-9a-f]{40}$" },
+        "branch": { "type": "string", "minLength": 1 },
+        "snapshotSha256": {
+          "type": "string",
+          "pattern": "^[0-9a-f]{64}$",
+          "description": "SHA-256 of the exact source snapshot tarball that was scanned, verified before extraction."
+        },
+        "scannedAt": { "type": "string", "format": "date-time", "description": "UTC timestamp the scan completed." },
+        "toolManifestDigest": {
+          "type": "string",
+          "description": "Digest of the runner image's tool-manifest.json — pins which tool versions produced this evidence."
+        },
+        "classificationDefaulted": {
+          "type": "boolean",
+          "description": "True iff the input omitted classification and the machine assumed STANDARD (decision 2026-08-27). An invalid classification fails closed and never reaches a verdict."
+        }
+      }
+    }
+  }
+}

package/schema/transform-report.schema.json

@@ -6,13 +6,7 @@
   "x-go-embed": true,
   "type": "object",
   "additionalProperties": false,
-  "required": [
-    "applied_playbooks",
-    "static_rebuild_required",
-    "analysis",
-    "database",
-    "application"
-  ],
+  "required": ["application"],
   "properties": {
     "applied_playbooks": {
       "type": "array",
@@ -111,17 +105,17 @@
     "application": {
       "type": "object",
       "additionalProperties": false,
-      "required": [
-        "runtime",
-        "buildKind",
-        "topology",
-        "entrypoint",
-        "build",
-        "basePath",
-        "evidence",
-        "unsupportedFeatures"
-      ],
       "properties": {
+        "unsupported": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["capability", "constraint", "reason"],
+          "properties": {
+            "capability": { "type": "string", "minLength": 1, "maxLength": 512 },
+            "constraint": { "type": "string", "minLength": 1, "maxLength": 512 },
+            "reason": { "type": "string", "minLength": 1, "maxLength": 2048 }
+          }
+        },
         "runtime": {
           "type": "string",
           "pattern": "^(?:nodejs|python)[0-9]+(?:\\.[0-9]+)?$"
@@ -209,5 +203,25 @@
         }
       }
     }
-  }
+  },
+  "oneOf": [
+    {
+      "required": ["applied_playbooks", "static_rebuild_required", "analysis", "database", "application"],
+      "properties": {
+        "application": {
+          "required": ["runtime", "buildKind", "topology", "entrypoint", "build", "basePath", "evidence", "unsupportedFeatures"],
+          "not": { "required": ["unsupported"] }
+        }
+      }
+    },
+    {
+      "maxProperties": 1,
+      "properties": {
+        "application": {
+          "required": ["unsupported"],
+          "maxProperties": 1
+        }
+      }
+    }
+  ]
 }