@fourier-labs/harbour-contracts 0.42.0 → 0.44.0

package/contract-release.json

@@ -1,12 +1,12 @@
 {
   "schema": "harbour.contract-release/1.0",
-  "repositoryVersion": "0.42.0.0",
-  "publishVersion": "0.42.0",
-  "publishTag": "v0.42.0",
-  "schemasDigest": "sha256:41d814f34ed6312921ca93d8421cadf9f9c0209bc77a98f7d9761fd659eea505",
+  "repositoryVersion": "0.44.0.0",
+  "publishVersion": "0.44.0",
+  "publishTag": "v0.44.0",
+  "schemasDigest": "sha256:a83a5d65514b34668ba1aea770f626585b24d07c7bfcc5bb68cf6382a8b6ff6c",
   "aiFixturesDigest": "sha256:edac31c92e146ca1c40130f2fb5649db82e24b8cd1ac758153b90612052fddb6",
-  "generatedGoDigest": "sha256:42a3ac3f628b252930572ae8dd3dd7bf51b5c5176daec6df8fdcc82eb73c718c",
-  "generatedTypeScriptDigest": "sha256:30fba235330644792f77657373e9187a1937c6709b3dfc7a75f08807ea673cdb",
+  "generatedGoDigest": "sha256:95f1e5ec97ac5883d529af6442fa58ae3a59bb3e00d4b5852d03049e23cb7f4d",
+  "generatedTypeScriptDigest": "sha256:49048cdb1c9ec15433f6cb7d4fa42d6f39a5fc5da48c9d2c3b4b2ef0c2b39b3d",
   "generatedExclusions": {
     "gen-go/contract_release.go": "contains the generated aggregate digests (self-reference)",
     "gen-ts/contract-release.ts": "contains the generated aggregate digests (self-reference)"
@@ -33,26 +33,29 @@
     "schema/api-error-response.schema.json": "sha256:3d43d5bdf0b59c944e20509d832e6776c3ecdba4d6c245a9118bbe52062a8304",
     "schema/artifact-contract.schema.json": "sha256:8047b461a1c6d07bbe867a259c57bdf5cc0fdf282cf842ec7b683a9e93713b10",
     "schema/binding-classification-subject.schema.json": "sha256:a8825ce652e7e00a18759c4249bd5bcd0cae552dd58440513f867e87f685133c",
+    "schema/builder-input-proposal.schema.json": "sha256:fe85cffa6d76b1e1effe1f5d75525f8fe0e1eaa3be4a304e491aa23ad72c0e72",
     "schema/data-dependency.schema.json": "sha256:89ba8481ccabc935e7dab5d13871c985839a751ad1586710d8382a15e1f3340c",
     "schema/data-grant.schema.json": "sha256:e640553831ecc1c01cc9a37fe388b84d0ffeaa0d0050e63712b48f65fa437c8a",
     "schema/data-source.schema.json": "sha256:aec8d2497dae9a91886a3df9f6fbbdb3d3fcab44b14fbcacc3f5e99b827f1bba",
-    "schema/deploy-request.schema.json": "sha256:bfcef417bd76dc64ff97264fa42994d7f5856578ba1a0c4feac5349c280abf12",
+    "schema/deploy-request.schema.json": "sha256:32531e21983cdfeec511f8b4cddd4dad6530cd90e4e9fe147225d78d138b6198",
     "schema/deploy-response.schema.json": "sha256:09064948abdbba7022738285d802ed44648a16ddc2a5b8c2eeb170ae19a66aeb",
+    "schema/deployment-continuation.schema.json": "sha256:55b6945439f2c91cd851dfe4bc9484e67a64091b7763b2d8267354b4a8bfae8c",
     "schema/deployment-environment.schema.json": "sha256:3f1325d5579b3fc47d02c83b6ac0657108909b1dfb901f68203c9c8b668c2ef4",
     "schema/deployment-source.schema.json": "sha256:256988b1efbfc90bd0e1ae31a2c5d69b20ef1e4471dc24c9f9aa759278270fbe",
     "schema/deployment-status-failure.schema.json": "sha256:7cc021d53a07c63b66eb48146d33e8875b64faf77ee927b235795469eb9a1559",
     "schema/deployment-status-request.schema.json": "sha256:1f9f87adc947a252b53b61f71ae17f8c1b8fbc1166f31301a043d11ac257dc66",
-    "schema/deployment-status-response.schema.json": "sha256:9a49f6a5db4e06e0965a536d6080a6155e539c1105e1625338d7f3a53583b2b8",
+    "schema/deployment-status-response.schema.json": "sha256:e591edf08d9dcfce7551b69b449be13927668309b2ebc3b064370f3cfef0385b",
     "schema/env-bindings.schema.json": "sha256:ae09bc4ca5508afa698ef854a59153c4c6f99b07017b48cb9b07ce05abad12f2",
     "schema/error-category.enum.json": "sha256:2268b8a00dfa1f1ab6db7650c117028247fca980d4a23aa5969ce30b76692be9",
     "schema/error-envelope.schema.json": "sha256:75dccda7dd16fdf8435deda53fc7dbcdc109b65114617a17f11763010c656f90",
     "schema/kvs-routing-entry.schema.json": "sha256:b75f3a5dfa93a428b2764e03222b66b6ef2bed980f8bac8ffac54afdf3526bc5",
     "schema/promotion-request.schema.json": "sha256:00e96dfd8ddbdba88ea222941d43f3609ff6c815a79e34f6705cab458101c969",
     "schema/promotion-response.schema.json": "sha256:4129712d2e29d6ef21d93d4bd0bacfd60ada3f2ee0ade852824e64346b817634",
-    "schema/sanitized-binding-evidence.schema.json": "sha256:b03bcc1911c99c69fda50eb656fc3e115f88fe2990c1708fbb5cd3542f4b8bba",
-    "schema/secret-reference.schema.json": "sha256:966f7a6d2575b46a4b54804d06dc05c6229ebbcbd9200fe6a6c8d3b4ffb90f9f",
+    "schema/sanitized-binding-evidence.schema.json": "sha256:1191ab88e2764df927e5f17837674cebebe068d480da2b2fdb390e589f96b51f",
+    "schema/secret-reference.schema.json": "sha256:db4e3c2c6a2dbd72d7ea0f9c91cb3b2343a7e67b601996c6818b2ef08e440895",
     "schema/security-scan-input.schema.json": "sha256:83502dffb3c07ac2e0698928e6dc123f454fc667d4aacd336bcad6944ef2ac3d",
     "schema/security-verdict.schema.json": "sha256:ec3c2d5c9df3601aeed0909b36c7f427469c7f0eeb3295c5809b96d09bf3fc26",
+    "schema/transform-parked-result.schema.json": "sha256:11729980d4c89d4a9e18f5f213232cd3359739c85626b36c20c2a37ba794c9af",
     "schema/transform-report.schema.json": "sha256:5943c90ad7a8b473119dde5879c59ed384d5dc19253b90bc3507dd1ff4dd9abe",
     "schema/version-state.schema.json": "sha256:3b190007e2f8e3821c41ef11c6f5b226da7d5a18d34d4077f4618004846fd444",
     "schema/well-defined-app-manifest.schema.json": "sha256:75a06690411880e670f133066a7a469150b53560b9dafa2f066a04485e4b50a0"
@@ -93,8 +96,8 @@
     "gen-go/contracts_test.go": "sha256:56376287cb1548be1b35ab4c65d6f0b558c5d34885f7a47cb3d9e8d786607bf5",
     "gen-go/doc.go": "sha256:c17bc2d39ed175ce7105c68305f8ae7152f659eb7cd187ecceee7698eb3a65dd",
     "gen-go/error_category.go": "sha256:b2ddea22dcfa030f1a45e721e635485b0bd816cf1f38e7654628a653f5ed4583",
-    "gen-go/schema_documents.go": "sha256:b6973afc9e72713062421f4bcc9dee136a971cf998daff4e0724f8be4a2b5051",
-    "gen-go/types.go": "sha256:8f6ccab9a9fbef3f3f3e676c94288ea1cdd8fa1dcc131354bbec6b0533c073ca",
+    "gen-go/schema_documents.go": "sha256:bc8a5119241953827affa45588a1492fdf1e74bb9119564202baf424596d0d86",
+    "gen-go/types.go": "sha256:94c0936e557e6d43d9468793428fe5f2fc737668f51fe0fc058755c219be0c9f",
     "gen-go/version_state.go": "sha256:4ef8abb126414c0025cf2c59bc9c79a74ef4a2ff89e8f316cbf05acc872371c1"
   },
   "generatedTypeScript": {
@@ -122,29 +125,32 @@
     "gen-ts/artifact-contract.ts": "sha256:4a6dc6d2caaeed4bb2066cc8a333e6e09e5a0d4745e0b1038293d54ab9403aeb",
     "gen-ts/binding-classification-digest-helper.ts": "sha256:40fc7d85b4c3f3ffc5caf7d7950c62d013c83ee42058c7453b2100d95817f167",
     "gen-ts/binding-classification-subject.ts": "sha256:c409a3fd7b942b50419632c51d9a79474fb30d6374bdc79c0e25c73618e800c3",
+    "gen-ts/builder-input-proposal.ts": "sha256:b0108c3787873d3cf1a39f00967379418a6766275d3474cfa55f5a9d93ead174",
     "gen-ts/data-dependency.ts": "sha256:0572c31d7ae9088eccc104eee1a205bf176d1d6dacfaf0f290d666024e284966",
     "gen-ts/data-grant.ts": "sha256:2358579d8aa1e57b01a6f2b0eacce5531e7f21ef226404c9809925365e0d6155",
     "gen-ts/data-source.ts": "sha256:77d6bb3b0eaa355789c5d97dd1f548734add6950329dc69549350b8d17c8d582",
-    "gen-ts/deploy-request.ts": "sha256:f685210f3f4e48a04e64983d3e040d6601477df404b4f890d6ea49c91c475256",
+    "gen-ts/deploy-request.ts": "sha256:0214faa8be6680f0bfc117d5ce67c1a59fcc18bd0ea4bc840e03e7d051fa9ab6",
     "gen-ts/deploy-response.ts": "sha256:364d9f1acf32e491498237cdd3f402d5f8e102f208db7748034f4ec68c6a6137",
+    "gen-ts/deployment-continuation.ts": "sha256:cc9f63af4d0da5086a79103789e4f043783b75b4ed11c6512f044439a551a79c",
     "gen-ts/deployment-environment.ts": "sha256:bbd6eec3a1631b13a8de6e6b95081696f7be01d0bd2bf1b7a9e3a1db809a727c",
     "gen-ts/deployment-source.ts": "sha256:8ccb55aaa7260eb6d19a00987d6a20a4b514e343564da13f27cd7fee8013500a",
     "gen-ts/deployment-status-failure.ts": "sha256:6da2e6eb2f708efa51d416a1ec50f71ea7967cf9be9f93e7ce2e4760dae2cfe3",
     "gen-ts/deployment-status-request.ts": "sha256:7ddccd07ab9f6d0821903a291ab35f903bb055727e03a058b99165ec048f6483",
-    "gen-ts/deployment-status-response.ts": "sha256:70a75c801613a85ebf1946c31d3f5c051451cc99684b352e35b6fd1ccf444f24",
+    "gen-ts/deployment-status-response.ts": "sha256:91f99eaa875968934bf9f920aa2bb3f7e8d4b0c24b18536a1e5c7bb739608a51",
     "gen-ts/env-bindings.ts": "sha256:a167cfe9842352c9fec6412ff0d82bda9c5f5c3a1af541bd5c27a57f54fd0941",
     "gen-ts/error-category-registry.ts": "sha256:7466a502c0723a77db825cdeaa9556a244201b55d9b7acbf2c098e9e84351df1",
     "gen-ts/error-category.ts": "sha256:9bda89180c3b740c9aa8be466216592e8ca9d0d368c274333edf6ea5c45afd8e",
     "gen-ts/error-envelope.ts": "sha256:4457309be794f9d4fc0cf62530cc2d442c007bac9ae84aff66df099cc9e40310",
-    "gen-ts/index.ts": "sha256:4aecbb1044a210bf5813deb645c623eefa7bb6af2a8e2557b76ed9ba1d95eba9",
+    "gen-ts/index.ts": "sha256:2e8ea8a7b31e5db66cc733c286b18ac4589fdf712f5ca0f481dfbbce9f425b4e",
     "gen-ts/kvs-routing-entry.ts": "sha256:d92e85ee9f257d77850d1d3aac9438e2055f38084ff84a48fcedae239d47d4ca",
     "gen-ts/promotion-request.ts": "sha256:9db88cef67f777a16bac628039ec3f582acb9e8cfff6fb592b30d0a0e55abc68",
     "gen-ts/promotion-response.ts": "sha256:f1c9cafac96faeb02a443a31786f67714e818f38d90108e7af41958396524d6f",
     "gen-ts/sanitized-binding-digest-helper.ts": "sha256:c47d7fdc20500e2e72c23fe39ecdd610fc397c47fcba51335ebec3c380fe6872",
-    "gen-ts/sanitized-binding-evidence.ts": "sha256:4db7e9ed83f563a46e337815a55bbd6433864c41d9ec8e8a80810a16e3095ebb",
-    "gen-ts/secret-reference.ts": "sha256:a8b65de72705b6f51f57cd8ca58881483108005b1fa4d19106c3e9cf1fa877e7",
+    "gen-ts/sanitized-binding-evidence.ts": "sha256:f3fb7b1d7d2e0929eb0ea981eaf32db3104010647185f6ae59f67167d42538a9",
+    "gen-ts/secret-reference.ts": "sha256:731fbcde7315cb4128d5b01bdbe6e6f248f13c7ad8dea04a3a4e927ac4890198",
     "gen-ts/security-scan-input.ts": "sha256:b31f048be04c34b40f49d3b3ba53277e473cd435ae9216ba3a3b4dac69fb5685",
     "gen-ts/security-verdict.ts": "sha256:fea950cddbd12fe0218e2573c9a29c6748d56612a464559f1e6d688fa97f68c7",
+    "gen-ts/transform-parked-result.ts": "sha256:6279e27cee8d75c29f3ede45580fef1daa0ca300867a78e43ead8a7689ec613f",
     "gen-ts/transform-report.ts": "sha256:a4f7f895342cd63048b2add63393a1251abb3e97f057b00e3ebd3f96fd1a510e",
     "gen-ts/version-state-machine.ts": "sha256:c67af3e86ac306743345b850dfd3ae5201c19d10c40e2c149cf8c38258320d5f",
     "gen-ts/version-state.ts": "sha256:a835112930299e7b593a1b8810b7414f6c9e809da2092306c743128170a3b702",

package/dist/gen-ts/builder-input-proposal.d.ts

@@ -0,0 +1,36 @@
+export type BuilderInputQuestion = {
+    id: string;
+    kind: 'secret' | 'text' | 'choice';
+    format?: 'plain' | 'email' | 'url' | 'integer';
+    prompt: string;
+    whyNeeded: string;
+    effect: string;
+    secretName?: string;
+    /**
+     * @minItems 2
+     * @maxItems 5
+     */
+    options?: string[];
+    /**
+     * @minItems 1
+     * @maxItems 8
+     */
+    evidence: {
+        path: string;
+        line?: number;
+        finding: string;
+    }[];
+};
+/**
+ * Bounded, value-free proposal emitted when sequential preview transformation cannot continue without builder-owned input. The deployment control plane remains authoritative and applies eligibility checks before exposing it.
+ */
+export interface BuilderInputProposal {
+    outcome: 'needs_input';
+    summary: string;
+    outstandingWork: string;
+    /**
+     * @minItems 1
+     * @maxItems 5
+     */
+    questions: BuilderInputQuestion[];
+}

package/dist/gen-ts/builder-input-proposal.js

@@ -0,0 +1,3 @@
+/* eslint-disable */
+// Code generated by tools/gen/gen.mjs from schema/*.json. DO NOT EDIT.
+export {};

package/dist/gen-ts/contract-release.d.ts

@@ -1,7 +1,7 @@
-export declare const ContractRepositoryVersion: "0.42.0.0";
-export declare const ContractPublishVersion: "0.42.0";
-export declare const ContractPublishTag: "v0.42.0";
-export declare const ContractSchemasDigest: "sha256:41d814f34ed6312921ca93d8421cadf9f9c0209bc77a98f7d9761fd659eea505";
+export declare const ContractRepositoryVersion: "0.44.0.0";
+export declare const ContractPublishVersion: "0.44.0";
+export declare const ContractPublishTag: "v0.44.0";
+export declare const ContractSchemasDigest: "sha256:a83a5d65514b34668ba1aea770f626585b24d07c7bfcc5bb68cf6382a8b6ff6c";
 export declare const ContractAiFixturesDigest: "sha256:edac31c92e146ca1c40130f2fb5649db82e24b8cd1ac758153b90612052fddb6";
-export declare const ContractGeneratedGoDigest: "sha256:42a3ac3f628b252930572ae8dd3dd7bf51b5c5176daec6df8fdcc82eb73c718c";
-export declare const ContractGeneratedTypeScriptDigest: "sha256:30fba235330644792f77657373e9187a1937c6709b3dfc7a75f08807ea673cdb";
+export declare const ContractGeneratedGoDigest: "sha256:95f1e5ec97ac5883d529af6442fa58ae3a59bb3e00d4b5852d03049e23cb7f4d";
+export declare const ContractGeneratedTypeScriptDigest: "sha256:49048cdb1c9ec15433f6cb7d4fa42d6f39a5fc5da48c9d2c3b4b2ef0c2b39b3d";

package/dist/gen-ts/contract-release.js

@@ -1,9 +1,9 @@
 /* eslint-disable */
 // Code generated by tools/gen/gen.mjs from schema/*.json. DO NOT EDIT.
-export const ContractRepositoryVersion = "0.42.0.0";
-export const ContractPublishVersion = "0.42.0";
-export const ContractPublishTag = "v0.42.0";
-export const ContractSchemasDigest = "sha256:41d814f34ed6312921ca93d8421cadf9f9c0209bc77a98f7d9761fd659eea505";
+export const ContractRepositoryVersion = "0.44.0.0";
+export const ContractPublishVersion = "0.44.0";
+export const ContractPublishTag = "v0.44.0";
+export const ContractSchemasDigest = "sha256:a83a5d65514b34668ba1aea770f626585b24d07c7bfcc5bb68cf6382a8b6ff6c";
 export const ContractAiFixturesDigest = "sha256:edac31c92e146ca1c40130f2fb5649db82e24b8cd1ac758153b90612052fddb6";
-export const ContractGeneratedGoDigest = "sha256:42a3ac3f628b252930572ae8dd3dd7bf51b5c5176daec6df8fdcc82eb73c718c";
-export const ContractGeneratedTypeScriptDigest = "sha256:30fba235330644792f77657373e9187a1937c6709b3dfc7a75f08807ea673cdb";
+export const ContractGeneratedGoDigest = "sha256:95f1e5ec97ac5883d529af6442fa58ae3a59bb3e00d4b5852d03049e23cb7f4d";
+export const ContractGeneratedTypeScriptDigest = "sha256:49048cdb1c9ec15433f6cb7d4fa42d6f39a5fc5da48c9d2c3b4b2ef0c2b39b3d";

package/dist/gen-ts/deploy-request.d.ts

@@ -7,7 +7,7 @@ export type DeployRequestEnvironmentBinding = {
      */
     name: string;
     /**
-     * secretref URI resolved at runtime; the value never appears in the request.
+     * secretref URI resolved at runtime; the value never appears in the request. Multiple unique names may point to the same app-owned secret-bundle reference; each name selects its exact JSON key.
      */
     secretRef?: string;
     /**

package/dist/gen-ts/deployment-continuation.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Internal immutable reference admitting one child deployment from a parked sequential-preview input request. It contains references and accepted non-secret answers, never credential values.
+ */
+export interface DeploymentContinuation {
+    resumeFrom: {
+        parentVersionId: string;
+        requestId: string;
+        checkpointKey: string;
+        checkpointSha256: string;
+        answerRevision: number;
+        /**
+         * @minItems 1
+         * @maxItems 5
+         */
+        answers: {
+            [k: string]: unknown;
+        }[];
+    };
+}

package/dist/gen-ts/deployment-continuation.js

@@ -0,0 +1,3 @@
+/* eslint-disable */
+// Code generated by tools/gen/gen.mjs from schema/*.json. DO NOT EDIT.
+export {};

package/dist/gen-ts/deployment-status-response.d.ts

@@ -1,3 +1,17 @@
+export type StatusInputQuestion = {
+    id: string;
+    kind: 'secret' | 'text' | 'choice';
+    format?: 'plain' | 'email' | 'url' | 'integer';
+    prompt: string;
+    whyNeeded: string;
+    effect: string;
+    secretName?: string;
+    /**
+     * @minItems 2
+     * @maxItems 5
+     */
+    options?: string[];
+};
 /**
  * 200 OK body returned by GET /v1/tenants/{tenant}/apps/{app}/deployments/{versionId}. It describes that exact immutable version; newer deployments cannot change which record this response represents.
  */
@@ -7,7 +21,7 @@ export interface DeploymentStatusResponse {
     tenant: string;
     app: string;
     environment: 'preview' | 'prod';
-    status: 'QUEUED' | 'ANALYZING' | 'TRANSFORMING' | 'VALIDATING' | 'BUILDING' | 'VERIFYING' | 'GATING' | 'LIVE' | 'AWAITING-PROMOTION' | 'PROMOTING' | 'FAILED' | 'STALE';
+    status: 'QUEUED' | 'ANALYZING' | 'TRANSFORMING' | 'WAITING_INPUT' | 'VALIDATING' | 'BUILDING' | 'VERIFYING' | 'GATING' | 'LIVE' | 'AWAITING-PROMOTION' | 'PROMOTING' | 'FAILED' | 'STALE';
     message: string;
     branch: string;
     commit: string;
@@ -26,6 +40,7 @@ export interface DeploymentStatusResponse {
      */
     progress?: StatusProgressEvent[];
     deployTarget?: StatusDeployTarget;
+    pendingInput?: StatusPendingInput;
 }
 export interface StatusFailureProjection {
     category: string;
@@ -83,3 +98,17 @@ export interface StatusDeployTarget {
      */
     region: string;
 }
+export interface StatusPendingInput {
+    requestId: string;
+    revision: number;
+    /**
+     * @minItems 1
+     * @maxItems 5
+     */
+    questions: StatusInputQuestion[];
+    waitMode: 'active' | 'parking' | 'parked';
+    warmUntil?: string;
+    createdAt: string;
+    continuationVersionId?: string;
+    statusUrl?: string;
+}

package/dist/gen-ts/index.d.ts

@@ -22,12 +22,14 @@ export * from './api-error-response.js';
 export * from './artifact-contract.js';
 export * from './binding-classification-digest-helper.js';
 export * from './binding-classification-subject.js';
+export * from './builder-input-proposal.js';
 export * from './contract-release.js';
 export * from './data-dependency.js';
 export * from './data-grant.js';
 export * from './data-source.js';
 export * from './deploy-request.js';
 export * from './deploy-response.js';
+export * from './deployment-continuation.js';
 export * from './deployment-environment.js';
 export * from './deployment-source.js';
 export * from './deployment-status-failure.js';
@@ -45,6 +47,7 @@ export * from './sanitized-binding-evidence.js';
 export * from './secret-reference.js';
 export * from './security-scan-input.js';
 export * from './security-verdict.js';
+export * from './transform-parked-result.js';
 export * from './transform-report.js';
 export * from './version-state-machine.js';
 export * from './version-state.js';

package/dist/gen-ts/index.js

@@ -24,12 +24,14 @@ export * from './api-error-response.js';
 export * from './artifact-contract.js';
 export * from './binding-classification-digest-helper.js';
 export * from './binding-classification-subject.js';
+export * from './builder-input-proposal.js';
 export * from './contract-release.js';
 export * from './data-dependency.js';
 export * from './data-grant.js';
 export * from './data-source.js';
 export * from './deploy-request.js';
 export * from './deploy-response.js';
+export * from './deployment-continuation.js';
 export * from './deployment-environment.js';
 export * from './deployment-source.js';
 export * from './deployment-status-failure.js';
@@ -47,6 +49,7 @@ export * from './sanitized-binding-evidence.js';
 export * from './secret-reference.js';
 export * from './security-scan-input.js';
 export * from './security-verdict.js';
+export * from './transform-parked-result.js';
 export * from './transform-report.js';
 export * from './version-state-machine.js';
 export * from './version-state.js';

package/dist/gen-ts/sanitized-binding-evidence.d.ts

@@ -9,7 +9,7 @@ export type SanitizedRuntimeBinding = {
      */
     value?: string;
     /**
-     * Value-free app secret, app-scoped minted data-source credential, or approved tenant-source credential reference. Integration and provider credential references are outside this contract.
+     * Value-free app secret, shared app-secret bundle, app-scoped minted data-source credential, or approved tenant-source credential reference. A binding name selects the same-named JSON field when this is an app secret-bundle reference. Integration and provider credential references are outside this contract.
      */
     secretRef?: string;
 };

package/dist/gen-ts/secret-reference.d.ts

@@ -28,7 +28,7 @@ export interface SecretReference {
      */
     ownerBuilderId?: string;
     /**
-     * secretref URI of the stored value. The value itself never crosses this boundary.
+     * secretref URI of the stored value. Builder app-secret rows may share one app-owned secret-bundle reference; each row's name selects its JSON key. The value itself never crosses this boundary.
      */
     secretRef: string;
     status: SecretReferenceStatus;

package/dist/gen-ts/transform-parked-result.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Discriminated result returned by sequential preview after it has durably checkpointed settled transformation work and must stop for builder input. It is not a successful transformation report.
+ */
+export interface TransformParkedResult {
+    outcome: 'parked';
+    requestId: string;
+    checkpoint: {
+        schema: 'harbour.transform-checkpoint/1.0';
+        key: string;
+        sha256: string;
+    };
+    answerRevision: number;
+    remainingActiveMs: number;
+    outstandingWork: string;
+}

package/dist/gen-ts/transform-parked-result.js

@@ -0,0 +1,3 @@
+/* eslint-disable */
+// Code generated by tools/gen/gen.mjs from schema/*.json. DO NOT EDIT.
+export {};

package/gen-ts/builder-input-proposal.ts

@@ -0,0 +1,40 @@
+/* eslint-disable */
+// Code generated by tools/gen/gen.mjs from schema/*.json. DO NOT EDIT.
+
+export type BuilderInputQuestion = {
+  id: string;
+  kind: 'secret' | 'text' | 'choice';
+  format?: 'plain' | 'email' | 'url' | 'integer';
+  prompt: string;
+  whyNeeded: string;
+  effect: string;
+  secretName?: string;
+  /**
+   * @minItems 2
+   * @maxItems 5
+   */
+  options?: string[];
+  /**
+   * @minItems 1
+   * @maxItems 8
+   */
+  evidence: {
+    path: string;
+    line?: number;
+    finding: string;
+  }[];
+};
+
+/**
+ * Bounded, value-free proposal emitted when sequential preview transformation cannot continue without builder-owned input. The deployment control plane remains authoritative and applies eligibility checks before exposing it.
+ */
+export interface BuilderInputProposal {
+  outcome: 'needs_input';
+  summary: string;
+  outstandingWork: string;
+  /**
+   * @minItems 1
+   * @maxItems 5
+   */
+  questions: BuilderInputQuestion[];
+}

package/gen-ts/contract-release.ts

@@ -1,10 +1,10 @@
 /* eslint-disable */
 // Code generated by tools/gen/gen.mjs from schema/*.json. DO NOT EDIT.
 
-export const ContractRepositoryVersion = "0.42.0.0" as const;
-export const ContractPublishVersion = "0.42.0" as const;
-export const ContractPublishTag = "v0.42.0" as const;
-export const ContractSchemasDigest = "sha256:41d814f34ed6312921ca93d8421cadf9f9c0209bc77a98f7d9761fd659eea505" as const;
+export const ContractRepositoryVersion = "0.44.0.0" as const;
+export const ContractPublishVersion = "0.44.0" as const;
+export const ContractPublishTag = "v0.44.0" as const;
+export const ContractSchemasDigest = "sha256:a83a5d65514b34668ba1aea770f626585b24d07c7bfcc5bb68cf6382a8b6ff6c" as const;
 export const ContractAiFixturesDigest = "sha256:edac31c92e146ca1c40130f2fb5649db82e24b8cd1ac758153b90612052fddb6" as const;
-export const ContractGeneratedGoDigest = "sha256:42a3ac3f628b252930572ae8dd3dd7bf51b5c5176daec6df8fdcc82eb73c718c" as const;
-export const ContractGeneratedTypeScriptDigest = "sha256:30fba235330644792f77657373e9187a1937c6709b3dfc7a75f08807ea673cdb" as const;
+export const ContractGeneratedGoDigest = "sha256:95f1e5ec97ac5883d529af6442fa58ae3a59bb3e00d4b5852d03049e23cb7f4d" as const;
+export const ContractGeneratedTypeScriptDigest = "sha256:49048cdb1c9ec15433f6cb7d4fa42d6f39a5fc5da48c9d2c3b4b2ef0c2b39b3d" as const;

package/gen-ts/deploy-request.ts

@@ -10,7 +10,7 @@ export type DeployRequestEnvironmentBinding = {
    */
   name: string;
   /**
-   * secretref URI resolved at runtime; the value never appears in the request.
+   * secretref URI resolved at runtime; the value never appears in the request. Multiple unique names may point to the same app-owned secret-bundle reference; each name selects its exact JSON key.
    */
   secretRef?: string;
   /**

package/gen-ts/deployment-continuation.ts

@@ -0,0 +1,22 @@
+/* eslint-disable */
+// Code generated by tools/gen/gen.mjs from schema/*.json. DO NOT EDIT.
+
+/**
+ * Internal immutable reference admitting one child deployment from a parked sequential-preview input request. It contains references and accepted non-secret answers, never credential values.
+ */
+export interface DeploymentContinuation {
+  resumeFrom: {
+    parentVersionId: string;
+    requestId: string;
+    checkpointKey: string;
+    checkpointSha256: string;
+    answerRevision: number;
+    /**
+     * @minItems 1
+     * @maxItems 5
+     */
+    answers: {
+      [k: string]: unknown;
+    }[];
+  };
+}

package/gen-ts/deployment-status-response.ts

@@ -1,6 +1,21 @@
 /* eslint-disable */
 // Code generated by tools/gen/gen.mjs from schema/*.json. DO NOT EDIT.
 
+export type StatusInputQuestion = {
+  id: string;
+  kind: 'secret' | 'text' | 'choice';
+  format?: 'plain' | 'email' | 'url' | 'integer';
+  prompt: string;
+  whyNeeded: string;
+  effect: string;
+  secretName?: string;
+  /**
+   * @minItems 2
+   * @maxItems 5
+   */
+  options?: string[];
+};
+
 /**
  * 200 OK body returned by GET /v1/tenants/{tenant}/apps/{app}/deployments/{versionId}. It describes that exact immutable version; newer deployments cannot change which record this response represents.
  */
@@ -14,6 +29,7 @@ export interface DeploymentStatusResponse {
     | 'QUEUED'
     | 'ANALYZING'
     | 'TRANSFORMING'
+    | 'WAITING_INPUT'
     | 'VALIDATING'
     | 'BUILDING'
     | 'VERIFYING'
@@ -41,6 +57,7 @@ export interface DeploymentStatusResponse {
    */
   progress?: StatusProgressEvent[];
   deployTarget?: StatusDeployTarget;
+  pendingInput?: StatusPendingInput;
 }
 export interface StatusFailureProjection {
   category: string;
@@ -98,3 +115,17 @@ export interface StatusDeployTarget {
    */
   region: string;
 }
+export interface StatusPendingInput {
+  requestId: string;
+  revision: number;
+  /**
+   * @minItems 1
+   * @maxItems 5
+   */
+  questions: StatusInputQuestion[];
+  waitMode: 'active' | 'parking' | 'parked';
+  warmUntil?: string;
+  createdAt: string;
+  continuationVersionId?: string;
+  statusUrl?: string;
+}

package/gen-ts/index.ts

@@ -25,12 +25,14 @@ export * from './api-error-response.js';
 export * from './artifact-contract.js';
 export * from './binding-classification-digest-helper.js';
 export * from './binding-classification-subject.js';
+export * from './builder-input-proposal.js';
 export * from './contract-release.js';
 export * from './data-dependency.js';
 export * from './data-grant.js';
 export * from './data-source.js';
 export * from './deploy-request.js';
 export * from './deploy-response.js';
+export * from './deployment-continuation.js';
 export * from './deployment-environment.js';
 export * from './deployment-source.js';
 export * from './deployment-status-failure.js';
@@ -48,6 +50,7 @@ export * from './sanitized-binding-evidence.js';
 export * from './secret-reference.js';
 export * from './security-scan-input.js';
 export * from './security-verdict.js';
+export * from './transform-parked-result.js';
 export * from './transform-report.js';
 export * from './version-state-machine.js';
 export * from './version-state.js';

package/gen-ts/sanitized-binding-evidence.ts

@@ -12,7 +12,7 @@ export type SanitizedRuntimeBinding = {
    */
   value?: string;
   /**
-   * Value-free app secret, app-scoped minted data-source credential, or approved tenant-source credential reference. Integration and provider credential references are outside this contract.
+   * Value-free app secret, shared app-secret bundle, app-scoped minted data-source credential, or approved tenant-source credential reference. A binding name selects the same-named JSON field when this is an app secret-bundle reference. Integration and provider credential references are outside this contract.
    */
   secretRef?: string;
 };

package/gen-ts/secret-reference.ts

@@ -32,7 +32,7 @@ export interface SecretReference {
    */
   ownerBuilderId?: string;
   /**
-   * secretref URI of the stored value. The value itself never crosses this boundary.
+   * secretref URI of the stored value. Builder app-secret rows may share one app-owned secret-bundle reference; each row's name selects its JSON key. The value itself never crosses this boundary.
    */
   secretRef: string;
   status: SecretReferenceStatus;

package/gen-ts/transform-parked-result.ts

@@ -0,0 +1,18 @@
+/* eslint-disable */
+// Code generated by tools/gen/gen.mjs from schema/*.json. DO NOT EDIT.
+
+/**
+ * Discriminated result returned by sequential preview after it has durably checkpointed settled transformation work and must stop for builder input. It is not a successful transformation report.
+ */
+export interface TransformParkedResult {
+  outcome: 'parked';
+  requestId: string;
+  checkpoint: {
+    schema: 'harbour.transform-checkpoint/1.0';
+    key: string;
+    sha256: string;
+  };
+  answerRevision: number;
+  remainingActiveMs: number;
+  outstandingWork: string;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fourier-labs/harbour-contracts",
-  "version": "0.42.0",
+  "version": "0.44.0",
   "description": "Single source of truth for every data shape that crosses a boundary between Harbour components.",
   "license": "UNLICENSED",
   "private": false,

package/schema/builder-input-proposal.schema.json

@@ -0,0 +1,73 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "https://schemas.harbour.dev/builder-input-proposal.schema.json",
+  "title": "BuilderInputProposal",
+  "description": "Bounded, value-free proposal emitted when sequential preview transformation cannot continue without builder-owned input. The deployment control plane remains authoritative and applies eligibility checks before exposing it.",
+  "x-go-embed": true,
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["outcome", "summary", "outstandingWork", "questions"],
+  "properties": {
+    "outcome": { "const": "needs_input" },
+    "summary": { "type": "string", "minLength": 1, "maxLength": 500 },
+    "outstandingWork": { "type": "string", "minLength": 1, "maxLength": 2000 },
+    "questions": {
+      "type": "array",
+      "minItems": 1,
+      "maxItems": 5,
+      "items": { "$ref": "#/definitions/BuilderInputQuestion" }
+    }
+  },
+  "definitions": {
+    "BuilderInputQuestion": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["id", "kind", "prompt", "whyNeeded", "effect", "evidence"],
+      "properties": {
+        "id": { "type": "string", "pattern": "^[a-z][a-z0-9-]{0,63}$" },
+        "kind": { "type": "string", "enum": ["secret", "text", "choice"] },
+        "format": { "type": "string", "enum": ["plain", "email", "url", "integer"] },
+        "prompt": { "type": "string", "minLength": 1, "maxLength": 300 },
+        "whyNeeded": { "type": "string", "minLength": 1, "maxLength": 500 },
+        "effect": { "type": "string", "minLength": 1, "maxLength": 500 },
+        "secretName": { "type": "string", "pattern": "^[A-Za-z_][A-Za-z0-9_]{0,254}$" },
+        "options": {
+          "type": "array",
+          "minItems": 2,
+          "maxItems": 5,
+          "uniqueItems": true,
+          "items": { "type": "string", "minLength": 1, "maxLength": 200 }
+        },
+        "evidence": {
+          "type": "array",
+          "minItems": 1,
+          "maxItems": 8,
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": ["path", "finding"],
+            "properties": {
+              "path": { "type": "string", "minLength": 1, "maxLength": 512 },
+              "line": { "type": "integer", "minimum": 1 },
+              "finding": { "type": "string", "minLength": 1, "maxLength": 500 }
+            }
+          }
+        }
+      },
+      "allOf": [
+        {
+          "if": { "properties": { "kind": { "const": "secret" } } },
+          "then": { "required": ["secretName"], "not": { "required": ["options"] } }
+        },
+        {
+          "if": { "properties": { "kind": { "const": "choice" } } },
+          "then": { "required": ["options"], "not": { "required": ["secretName"] } }
+        },
+        {
+          "if": { "properties": { "kind": { "const": "text" } } },
+          "then": { "not": { "anyOf": [{ "required": ["secretName"] }, { "required": ["options"] }] } }
+        }
+      ]
+    }
+  }
+}

package/schema/deploy-request.schema.json

@@ -95,7 +95,7 @@
         "secretRef": {
           "type": "string",
           "pattern": "^secretref://[A-Za-z0-9][A-Za-z0-9/_.:-]*$",
-          "description": "secretref URI resolved at runtime; the value never appears in the request."
+          "description": "secretref URI resolved at runtime; the value never appears in the request. Multiple unique names may point to the same app-owned secret-bundle reference; each name selects its exact JSON key."
         },
         "value": {
           "type": "string",

package/schema/deployment-continuation.schema.json

@@ -0,0 +1,39 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "https://schemas.harbour.dev/deployment-continuation.schema.json",
+  "title": "DeploymentContinuation",
+  "description": "Internal immutable reference admitting one child deployment from a parked sequential-preview input request. It contains references and accepted non-secret answers, never credential values.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["resumeFrom"],
+  "properties": {
+    "resumeFrom": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["parentVersionId", "requestId", "checkpointKey", "checkpointSha256", "answerRevision", "answers"],
+      "properties": {
+        "parentVersionId": { "type": "string", "pattern": "^[^#]+#[^#]+#preview#[0-9]{6,}$" },
+        "requestId": { "type": "string", "minLength": 1, "maxLength": 128 },
+        "checkpointKey": { "type": "string", "minLength": 1, "maxLength": 1024 },
+        "checkpointSha256": { "type": "string", "pattern": "^sha256:[0-9a-f]{64}$" },
+        "answerRevision": { "type": "integer", "minimum": 1 },
+        "answers": {
+          "type": "array",
+          "minItems": 1,
+          "maxItems": 5,
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": ["questionId"],
+            "properties": {
+              "questionId": { "type": "string", "pattern": "^[a-z][a-z0-9-]{0,63}$" },
+              "value": { "type": "string", "maxLength": 2000 },
+              "secretRef": { "type": "string", "pattern": "^secretref://[A-Za-z0-9][A-Za-z0-9/_.:-]*$" }
+            },
+            "oneOf": [{ "required": ["value"] }, { "required": ["secretRef"] }]
+          }
+        }
+      }
+    }
+  }
+}

package/schema/deployment-status-response.schema.json

@@ -25,7 +25,7 @@
     },
     "status": {
       "type": "string",
-      "enum": ["QUEUED", "ANALYZING", "TRANSFORMING", "VALIDATING", "BUILDING", "VERIFYING", "GATING", "LIVE", "AWAITING-PROMOTION", "PROMOTING", "FAILED", "STALE"]
+      "enum": ["QUEUED", "ANALYZING", "TRANSFORMING", "WAITING_INPUT", "VALIDATING", "BUILDING", "VERIFYING", "GATING", "LIVE", "AWAITING-PROMOTION", "PROMOTING", "FAILED", "STALE"]
     },
     "message": {
       "type": "string",
@@ -66,9 +66,58 @@
     },
     "deployTarget": {
       "$ref": "#/definitions/StatusDeployTarget"
+    },
+    "pendingInput": {
+      "$ref": "#/definitions/StatusPendingInput"
     }
   },
   "definitions": {
+    "StatusPendingInput": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["requestId", "revision", "questions", "waitMode", "createdAt"],
+      "properties": {
+        "requestId": { "type": "string", "minLength": 1, "maxLength": 128 },
+        "revision": { "type": "integer", "minimum": 0 },
+        "questions": {
+          "type": "array",
+          "minItems": 1,
+          "maxItems": 5,
+          "items": { "$ref": "#/definitions/StatusInputQuestion" }
+        },
+        "waitMode": { "type": "string", "enum": ["active", "parking", "parked"] },
+        "warmUntil": { "type": "string", "format": "date-time" },
+        "createdAt": { "type": "string", "format": "date-time" },
+        "continuationVersionId": { "type": "string", "pattern": "^[^#]+#[^#]+#preview#[0-9]{6,}$" },
+        "statusUrl": { "type": "string", "pattern": "^/v1/tenants/[^/]+/apps/[^/]+/deployments/[^/]+$" }
+      }
+    },
+    "StatusInputQuestion": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["id", "kind", "prompt", "whyNeeded", "effect"],
+      "properties": {
+        "id": { "type": "string", "pattern": "^[a-z][a-z0-9-]{0,63}$" },
+        "kind": { "type": "string", "enum": ["secret", "text", "choice"] },
+        "format": { "type": "string", "enum": ["plain", "email", "url", "integer"] },
+        "prompt": { "type": "string", "minLength": 1, "maxLength": 300 },
+        "whyNeeded": { "type": "string", "minLength": 1, "maxLength": 500 },
+        "effect": { "type": "string", "minLength": 1, "maxLength": 500 },
+        "secretName": { "type": "string", "pattern": "^[A-Za-z_][A-Za-z0-9_]{0,254}$" },
+        "options": {
+          "type": "array",
+          "minItems": 2,
+          "maxItems": 5,
+          "uniqueItems": true,
+          "items": { "type": "string", "minLength": 1, "maxLength": 200 }
+        }
+      },
+      "allOf": [
+        { "if": { "properties": { "kind": { "const": "secret" } } }, "then": { "required": ["secretName"], "not": { "required": ["options"] } } },
+        { "if": { "properties": { "kind": { "const": "choice" } } }, "then": { "required": ["options"], "not": { "required": ["secretName"] } } },
+        { "if": { "properties": { "kind": { "const": "text" } } }, "then": { "not": { "anyOf": [{ "required": ["secretName"] }, { "required": ["options"] }] } } }
+      ]
+    },
     "StatusDeployTarget": {
       "type": "object",
       "additionalProperties": false,

package/schema/sanitized-binding-evidence.schema.json

@@ -80,7 +80,7 @@
       "properties": {
         "kind": { "type": "string", "enum": ["configuration", "secret"] },
         "value": { "type": "string", "minLength": 1, "maxLength": 4096, "description": "Approved non-secret configuration literal. Provider-credential values are never approved or persisted here." },
-        "secretRef": { "type": "string", "pattern": "^secretref://tenant/[A-Za-z0-9._-]+/(?:app/[A-Za-z0-9._-]+/(?:secret/[A-Z][A-Z0-9_]{0,127}|source/[a-z0-9][a-z0-9._-]{0,63})|source/[a-z0-9][a-z0-9._-]{0,63})$", "description": "Value-free app secret, app-scoped minted data-source credential, or approved tenant-source credential reference. Integration and provider credential references are outside this contract." }
+        "secretRef": { "type": "string", "pattern": "^secretref://tenant/[A-Za-z0-9._-]+/(?:app/[A-Za-z0-9._-]+/(?:secret/[A-Z][A-Z0-9_]{0,127}|secret-bundle|source/[a-z0-9][a-z0-9._-]{0,63})|source/[a-z0-9][a-z0-9._-]{0,63})$", "description": "Value-free app secret, shared app-secret bundle, app-scoped minted data-source credential, or approved tenant-source credential reference. A binding name selects the same-named JSON field when this is an app secret-bundle reference. Integration and provider credential references are outside this contract." }
       },
       "allOf": [
         {

package/schema/secret-reference.schema.json

@@ -31,7 +31,7 @@
     "secretRef": {
       "type": "string",
       "pattern": "^secretref://[A-Za-z0-9][A-Za-z0-9/_.:-]*$",
-      "description": "secretref URI of the stored value. The value itself never crosses this boundary."
+      "description": "secretref URI of the stored value. Builder app-secret rows may share one app-owned secret-bundle reference; each row's name selects its JSON key. The value itself never crosses this boundary."
     },
     "status": {
       "$ref": "#/definitions/SecretReferenceStatus"

package/schema/transform-parked-result.schema.json

@@ -0,0 +1,26 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "https://schemas.harbour.dev/transform-parked-result.schema.json",
+  "title": "TransformParkedResult",
+  "description": "Discriminated result returned by sequential preview after it has durably checkpointed settled transformation work and must stop for builder input. It is not a successful transformation report.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["outcome", "requestId", "checkpoint", "answerRevision", "remainingActiveMs", "outstandingWork"],
+  "properties": {
+    "outcome": { "const": "parked" },
+    "requestId": { "type": "string", "minLength": 1, "maxLength": 128 },
+    "checkpoint": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["schema", "key", "sha256"],
+      "properties": {
+        "schema": { "const": "harbour.transform-checkpoint/1.0" },
+        "key": { "type": "string", "minLength": 1, "maxLength": 1024 },
+        "sha256": { "type": "string", "pattern": "^sha256:[0-9a-f]{64}$" }
+      }
+    },
+    "answerRevision": { "type": "integer", "minimum": 0 },
+    "remainingActiveMs": { "type": "integer", "minimum": 0, "maximum": 86400000 },
+    "outstandingWork": { "type": "string", "minLength": 1, "maxLength": 2000 }
+  }
+}