@fourier-labs/harbour-contracts 0.30.0 → 0.32.0

package/contract-release.json

@@ -1,12 +1,12 @@
 {
   "schema": "harbour.contract-release/1.0",
-  "repositoryVersion": "0.30.0.0",
-  "publishVersion": "0.30.0",
-  "publishTag": "v0.30.0",
-  "schemasDigest": "sha256:f2fac98b4ea48578a3a7cc15008b0bc2db5c771fd46c68613159b5c8ac000887",
+  "repositoryVersion": "0.32.0.0",
+  "publishVersion": "0.32.0",
+  "publishTag": "v0.32.0",
+  "schemasDigest": "sha256:0476a253b6fe583fefeca0766502fbdb4f94987265c86268a489eb6ddfab4d29",
   "aiFixturesDigest": "sha256:edac31c92e146ca1c40130f2fb5649db82e24b8cd1ac758153b90612052fddb6",
-  "generatedGoDigest": "sha256:da46f772799e1eb8fd530c3eb34937a8cfbf218f5ea6288f6614fe69cd3b3bc3",
-  "generatedTypeScriptDigest": "sha256:5e6ce1d6fb4b8dbcbab57b4495707fe323abd8d8a0433438aee16f57a000932c",
+  "generatedGoDigest": "sha256:6bb7567f6e0a753136c8389ce8e3a0f8357d360c94ef6f3da3768e63d6562822",
+  "generatedTypeScriptDigest": "sha256:1f8c32cbe5fbf605bdcaeb73152977a92c488ebd1ab96fb4234a56eb9fc5cee7",
   "generatedExclusions": {
     "gen-go/contract_release.go": "contains the generated aggregate digests (self-reference)",
     "gen-ts/contract-release.ts": "contains the generated aggregate digests (self-reference)"
@@ -42,7 +42,7 @@
     "schema/deployment-source.schema.json": "sha256:256988b1efbfc90bd0e1ae31a2c5d69b20ef1e4471dc24c9f9aa759278270fbe",
     "schema/deployment-status-failure.schema.json": "sha256:1a182e603d22467a4be507a37fd10698f6f3178d314d33eaf5de2c7f687c9412",
     "schema/deployment-status-request.schema.json": "sha256:1f9f87adc947a252b53b61f71ae17f8c1b8fbc1166f31301a043d11ac257dc66",
-    "schema/deployment-status-response.schema.json": "sha256:f3e3fb919279095e3f1b35302c549972537bfe9d4f3b305f14b1391f71e66e2c",
+    "schema/deployment-status-response.schema.json": "sha256:ce6b4e10a4302dff75c8958a3555f3a323e407e8cd2d2dce58550e7cb6cff1c8",
     "schema/env-bindings.schema.json": "sha256:ae09bc4ca5508afa698ef854a59153c4c6f99b07017b48cb9b07ce05abad12f2",
     "schema/error-category.enum.json": "sha256:693f8ce67d5554358f89b76132024cb8a082216f192d80a66bc4dc64e8983332",
     "schema/error-envelope.schema.json": "sha256:75dccda7dd16fdf8435deda53fc7dbcdc109b65114617a17f11763010c656f90",
@@ -54,7 +54,7 @@
     "schema/security-scan-input.schema.json": "sha256:83502dffb3c07ac2e0698928e6dc123f454fc667d4aacd336bcad6944ef2ac3d",
     "schema/security-verdict.schema.json": "sha256:ec3c2d5c9df3601aeed0909b36c7f427469c7f0eeb3295c5809b96d09bf3fc26",
     "schema/transform-report.schema.json": "sha256:815e764445fb41b912d0c0468f00621ad61f941fb4c7b9364e3f204ad47cdf7f",
-    "schema/version-state.schema.json": "sha256:e7c4b2e7b615ebb07f36d0df22ded51b2c9688ef9e9bfe79de1d5cd94de9ae40"
+    "schema/version-state.schema.json": "sha256:3b190007e2f8e3821c41ef11c6f5b226da7d5a18d34d4077f4618004846fd444"
   },
   "aiFixtures": {
     "fixtures/ai/adversarial-binding-classification-value.json": "sha256:ca009f3f6162a9d93b4ab416d52c1fba12a8a15aca5aed956c5fdcf2171b1e28",
@@ -89,12 +89,12 @@
     "gen-go/ai_contracts_test.go": "sha256:17ce967139e39c291ee7ebad3f66cc0495324abc4e56885279f7e5cc74994036",
     "gen-go/ai_gateway_key_token.go": "sha256:859c34383955f21c22589158214df074b74de6907a54bee7c781acfa9dad8679",
     "gen-go/binding_digest_helpers.go": "sha256:50462ba2beb16c7931dfc7e10302c12c90bf8111788991f74f08a718125dfbfb",
-    "gen-go/contracts_test.go": "sha256:7c7ee46f2b4277e22b1ee21af9f17d201eb83067c613b049749f932706ed24f8",
+    "gen-go/contracts_test.go": "sha256:28d6bf1bdc57eb4297b45d542adbdca420c943f02166c5889824e81f530a8ad4",
     "gen-go/doc.go": "sha256:c17bc2d39ed175ce7105c68305f8ae7152f659eb7cd187ecceee7698eb3a65dd",
     "gen-go/error_category.go": "sha256:a8b64524be3716e62ca6016e56f2332a56fa5e16e42647421e516aa01a7d6806",
     "gen-go/schema_documents.go": "sha256:4b9094aaf0acc4bae4b65784954853f0888572a53fa1a1dc354f97c88ded805f",
-    "gen-go/types.go": "sha256:fccee4956ef19c796aae7c9f6ed346b6ccdedbb35f4d801f5970ff8ecb96a2c3",
-    "gen-go/version_state.go": "sha256:827f8768359998409b86ea02d9ba1a149981928bae7161e4dc95fe0520ce7410"
+    "gen-go/types.go": "sha256:07642ccb5251d921d801e75b686143ddc23d8e82f03c2f15a175935927a47fc5",
+    "gen-go/version_state.go": "sha256:4ef8abb126414c0025cf2c59bc9c79a74ef4a2ff89e8f316cbf05acc872371c1"
   },
   "generatedTypeScript": {
     "gen-ts/ai-budget-ledger-event.ts": "sha256:64448d98a394e6eb103927cd35ce8a33e30176c0d5ee5afcdd8444f8aa051809",
@@ -130,7 +130,7 @@
     "gen-ts/deployment-source.ts": "sha256:8ccb55aaa7260eb6d19a00987d6a20a4b514e343564da13f27cd7fee8013500a",
     "gen-ts/deployment-status-failure.ts": "sha256:3ffe268e32240f9da3172b161b8e99e06aa2d21d8c37b30f340506a337c64047",
     "gen-ts/deployment-status-request.ts": "sha256:7ddccd07ab9f6d0821903a291ab35f903bb055727e03a058b99165ec048f6483",
-    "gen-ts/deployment-status-response.ts": "sha256:40ec6a03d8b287465007ff35d6abfbae3541a7beea503e02a2ed5aa391f447c2",
+    "gen-ts/deployment-status-response.ts": "sha256:1a082b43663b9d7e6f2377c91713bf0792d52060beed5f2bad7879d0ac718bd3",
     "gen-ts/env-bindings.ts": "sha256:a167cfe9842352c9fec6412ff0d82bda9c5f5c3a1af541bd5c27a57f54fd0941",
     "gen-ts/error-category-registry.ts": "sha256:280a12aecc8aea8e6e2f2a54d2e968ff7807b522cc0c4036e6e41c065edcf3b7",
     "gen-ts/error-category.ts": "sha256:9bda89180c3b740c9aa8be466216592e8ca9d0d368c274333edf6ea5c45afd8e",
@@ -145,7 +145,7 @@
     "gen-ts/security-scan-input.ts": "sha256:b31f048be04c34b40f49d3b3ba53277e473cd435ae9216ba3a3b4dac69fb5685",
     "gen-ts/security-verdict.ts": "sha256:fea950cddbd12fe0218e2573c9a29c6748d56612a464559f1e6d688fa97f68c7",
     "gen-ts/transform-report.ts": "sha256:6c54b579884d98135d73945d00980820b136f269622db27fa56a1c4c0e57d3b6",
-    "gen-ts/version-state-machine.ts": "sha256:4371bc7e2bde86b0447f5242104c576cc160dfd7dae1885acbfb63540f230bdd",
+    "gen-ts/version-state-machine.ts": "sha256:c67af3e86ac306743345b850dfd3ae5201c19d10c40e2c149cf8c38258320d5f",
     "gen-ts/version-state.ts": "sha256:a835112930299e7b593a1b8810b7414f6c9e809da2092306c743128170a3b702"
   }
 }

package/dist/gen-ts/contract-release.d.ts

@@ -1,7 +1,7 @@
-export declare const ContractRepositoryVersion: "0.30.0.0";
-export declare const ContractPublishVersion: "0.30.0";
-export declare const ContractPublishTag: "v0.30.0";
-export declare const ContractSchemasDigest: "sha256:f2fac98b4ea48578a3a7cc15008b0bc2db5c771fd46c68613159b5c8ac000887";
+export declare const ContractRepositoryVersion: "0.32.0.0";
+export declare const ContractPublishVersion: "0.32.0";
+export declare const ContractPublishTag: "v0.32.0";
+export declare const ContractSchemasDigest: "sha256:0476a253b6fe583fefeca0766502fbdb4f94987265c86268a489eb6ddfab4d29";
 export declare const ContractAiFixturesDigest: "sha256:edac31c92e146ca1c40130f2fb5649db82e24b8cd1ac758153b90612052fddb6";
-export declare const ContractGeneratedGoDigest: "sha256:da46f772799e1eb8fd530c3eb34937a8cfbf218f5ea6288f6614fe69cd3b3bc3";
-export declare const ContractGeneratedTypeScriptDigest: "sha256:5e6ce1d6fb4b8dbcbab57b4495707fe323abd8d8a0433438aee16f57a000932c";
+export declare const ContractGeneratedGoDigest: "sha256:6bb7567f6e0a753136c8389ce8e3a0f8357d360c94ef6f3da3768e63d6562822";
+export declare const ContractGeneratedTypeScriptDigest: "sha256:1f8c32cbe5fbf605bdcaeb73152977a92c488ebd1ab96fb4234a56eb9fc5cee7";

package/dist/gen-ts/contract-release.js

@@ -1,9 +1,9 @@
 /* eslint-disable */
 // Code generated by tools/gen/gen.mjs from schema/*.json. DO NOT EDIT.
-export const ContractRepositoryVersion = "0.30.0.0";
-export const ContractPublishVersion = "0.30.0";
-export const ContractPublishTag = "v0.30.0";
-export const ContractSchemasDigest = "sha256:f2fac98b4ea48578a3a7cc15008b0bc2db5c771fd46c68613159b5c8ac000887";
+export const ContractRepositoryVersion = "0.32.0.0";
+export const ContractPublishVersion = "0.32.0";
+export const ContractPublishTag = "v0.32.0";
+export const ContractSchemasDigest = "sha256:0476a253b6fe583fefeca0766502fbdb4f94987265c86268a489eb6ddfab4d29";
 export const ContractAiFixturesDigest = "sha256:edac31c92e146ca1c40130f2fb5649db82e24b8cd1ac758153b90612052fddb6";
-export const ContractGeneratedGoDigest = "sha256:da46f772799e1eb8fd530c3eb34937a8cfbf218f5ea6288f6614fe69cd3b3bc3";
-export const ContractGeneratedTypeScriptDigest = "sha256:5e6ce1d6fb4b8dbcbab57b4495707fe323abd8d8a0433438aee16f57a000932c";
+export const ContractGeneratedGoDigest = "sha256:6bb7567f6e0a753136c8389ce8e3a0f8357d360c94ef6f3da3768e63d6562822";
+export const ContractGeneratedTypeScriptDigest = "sha256:1f8c32cbe5fbf605bdcaeb73152977a92c488ebd1ab96fb4234a56eb9fc5cee7";

package/dist/gen-ts/deployment-status-response.d.ts

@@ -25,6 +25,7 @@ export interface DeploymentStatusResponse {
      * @maxItems 50
      */
     progress?: StatusProgressEvent[];
+    deployTarget?: StatusDeployTarget;
 }
 export interface StatusFailureProjection {
     category: string;
@@ -64,3 +65,16 @@ export interface StatusProgressEvent {
     remainingMs?: number;
     origin?: 'initial' | 'widen';
 }
+/**
+ * The customer account and region this version deploys into, stamped on the version record at admission for customer-account (BYOC) tenants. Absent means harbour-managed — the same convention the record itself uses — so every pre-destination version simply omits it. Deliberately only account and region: the record's roleArn/externalId are how the pipeline gets into the account, not where the deploy landed, and no status consumer needs them.
+ */
+export interface StatusDeployTarget {
+    /**
+     * AWS account id the version deploys into.
+     */
+    account: string;
+    /**
+     * AWS region the version deploys into, e.g. eu-west-1.
+     */
+    region: string;
+}

package/dist/gen-ts/version-state-machine.js

@@ -32,7 +32,8 @@ const legalTransitions = {
         "PROMOTING": { "LIVE": true, "FAILED": true },
     },
     "prod": {
-        "QUEUED": { "PROMOTING": true, "FAILED": true },
+        "QUEUED": { "PROMOTING": true, "GATING": true, "FAILED": true },
+        "GATING": { "PROMOTING": true, "FAILED": true, "STALE": true },
         "PROMOTING": { "LIVE": true, "FAILED": true },
     },
 };

package/gen-ts/contract-release.ts

@@ -1,10 +1,10 @@
 /* eslint-disable */
 // Code generated by tools/gen/gen.mjs from schema/*.json. DO NOT EDIT.
 
-export const ContractRepositoryVersion = "0.30.0.0" as const;
-export const ContractPublishVersion = "0.30.0" as const;
-export const ContractPublishTag = "v0.30.0" as const;
-export const ContractSchemasDigest = "sha256:f2fac98b4ea48578a3a7cc15008b0bc2db5c771fd46c68613159b5c8ac000887" as const;
+export const ContractRepositoryVersion = "0.32.0.0" as const;
+export const ContractPublishVersion = "0.32.0" as const;
+export const ContractPublishTag = "v0.32.0" as const;
+export const ContractSchemasDigest = "sha256:0476a253b6fe583fefeca0766502fbdb4f94987265c86268a489eb6ddfab4d29" as const;
 export const ContractAiFixturesDigest = "sha256:edac31c92e146ca1c40130f2fb5649db82e24b8cd1ac758153b90612052fddb6" as const;
-export const ContractGeneratedGoDigest = "sha256:da46f772799e1eb8fd530c3eb34937a8cfbf218f5ea6288f6614fe69cd3b3bc3" as const;
-export const ContractGeneratedTypeScriptDigest = "sha256:5e6ce1d6fb4b8dbcbab57b4495707fe323abd8d8a0433438aee16f57a000932c" as const;
+export const ContractGeneratedGoDigest = "sha256:6bb7567f6e0a753136c8389ce8e3a0f8357d360c94ef6f3da3768e63d6562822" as const;
+export const ContractGeneratedTypeScriptDigest = "sha256:1f8c32cbe5fbf605bdcaeb73152977a92c488ebd1ab96fb4234a56eb9fc5cee7" as const;

package/gen-ts/deployment-status-response.ts

@@ -40,6 +40,7 @@ export interface DeploymentStatusResponse {
    * @maxItems 50
    */
   progress?: StatusProgressEvent[];
+  deployTarget?: StatusDeployTarget;
 }
 export interface StatusFailureProjection {
   category: string;
@@ -79,3 +80,16 @@ export interface StatusProgressEvent {
   remainingMs?: number;
   origin?: 'initial' | 'widen';
 }
+/**
+ * The customer account and region this version deploys into, stamped on the version record at admission for customer-account (BYOC) tenants. Absent means harbour-managed — the same convention the record itself uses — so every pre-destination version simply omits it. Deliberately only account and region: the record's roleArn/externalId are how the pipeline gets into the account, not where the deploy landed, and no status consumer needs them.
+ */
+export interface StatusDeployTarget {
+  /**
+   * AWS account id the version deploys into.
+   */
+  account: string;
+  /**
+   * AWS region the version deploys into, e.g. eu-west-1.
+   */
+  region: string;
+}

package/gen-ts/version-state-machine.ts

@@ -37,7 +37,8 @@ const legalTransitions: Record<string, Record<string, Record<string, true>>> = {
     "PROMOTING": { "LIVE": true, "FAILED": true },
   },
   "prod": {
-    "QUEUED": { "PROMOTING": true, "FAILED": true },
+    "QUEUED": { "PROMOTING": true, "GATING": true, "FAILED": true },
+    "GATING": { "PROMOTING": true, "FAILED": true, "STALE": true },
     "PROMOTING": { "LIVE": true, "FAILED": true },
   },
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fourier-labs/harbour-contracts",
-  "version": "0.30.0",
+  "version": "0.32.0",
   "description": "Single source of truth for every data shape that crosses a boundary between Harbour components.",
   "license": "UNLICENSED",
   "private": false,

package/schema/deployment-status-response.schema.json

@@ -63,9 +63,31 @@
       "maxItems": 50,
       "description": "Bounded chronological trail (oldest first) of human-renderable progress moments observed while this version deployed. Ephemeral and best-effort: a deploy that recorded none — including every deploy that predates this field — simply omits it, so absence means 'no progress view available', never failure.",
       "items": { "$ref": "#/definitions/StatusProgressEvent" }
+    },
+    "deployTarget": {
+      "$ref": "#/definitions/StatusDeployTarget"
     }
   },
   "definitions": {
+    "StatusDeployTarget": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["account", "region"],
+      "description": "The customer account and region this version deploys into, stamped on the version record at admission for customer-account (BYOC) tenants. Absent means harbour-managed — the same convention the record itself uses — so every pre-destination version simply omits it. Deliberately only account and region: the record's roleArn/externalId are how the pipeline gets into the account, not where the deploy landed, and no status consumer needs them.",
+      "properties": {
+        "account": {
+          "type": "string",
+          "pattern": "^[0-9]{12}$",
+          "description": "AWS account id the version deploys into."
+        },
+        "region": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 32,
+          "description": "AWS region the version deploys into, e.g. eu-west-1."
+        }
+      }
+    },
     "StatusFailureProjection": {
       "type": "object",
       "additionalProperties": false,

package/schema/version-state.schema.json

@@ -36,7 +36,11 @@
   "x-terminalStable": ["LIVE", "AWAITING-PROMOTION"],
   "x-transitions": [
     { "from": "QUEUED", "to": "ANALYZING", "environments": ["preview"], "trigger": "admission: slot free AND commit reachable from branch" },
-    { "from": "QUEUED", "to": "PROMOTING", "environments": ["prod"], "trigger": "production promotion admission: stored preview and source-fidelity guards pass" },
+    { "from": "QUEUED", "to": "PROMOTING", "environments": ["prod"], "trigger": "production promotion admission: stored preview and source-fidelity guards pass (direct path — pipelines not yet opted into security gating)" },
+    { "from": "QUEUED", "to": "GATING", "environments": ["prod"], "trigger": "production promotion admission with security gating enabled: guards pass -> evaluate gates before promoting (M3 security assurance, opt-in)" },
+    { "from": "GATING", "to": "PROMOTING", "environments": ["prod"], "trigger": "all blocking security gates pass -> proceed to promotion" },
+    { "from": "GATING", "to": "FAILED", "environments": ["prod"], "trigger": "a blocking security gate fails; prod alias never moved" },
+    { "from": "GATING", "to": "STALE", "environments": ["prod"], "trigger": "newer promotion request passes its guard while gating" },
     { "from": "QUEUED", "to": "FAILED", "trigger": "admission validation fails — commit not reachable from branch" },
     { "from": "ANALYZING", "to": "BUILDING", "environments": ["preview"], "trigger": "nothing to transform (fast path)" },
     { "from": "ANALYZING", "to": "TRANSFORMING", "environments": ["preview"], "trigger": "transform-relevant findings; 15-min wall deadline stamped" },