@fourier-labs/harbour-contracts 0.43.0 → 0.45.0

package/README.md

@@ -38,6 +38,10 @@ exist here first.
 | `binding-classification-subject.schema.json` | Complete value-free binding-name classification before version allocation | AI governance §5.7 / SEC-UP-01 |
 | `sanitized-binding-evidence.schema.json` | Exact-version sanitized runtime-binding allocation receipt | AI governance §5.7 / SEC-UP-02 |
 | `ai-pricing-revision`, `ai-metering-policy`, `ai-budget-ledger-event`, `ai-trace-event-v2` | Additive metering v2 records, including media dimensions and P5 trace attribution; v1 records remain readable | AI governance §9 |
+| `app-integrations-declaration.schema.json` | Committed `.harbour/integrations.json` (`harbour.app-integrations/2.0`): closed three-operation set with fixed identity modes; owns the shared operation/identity/environment enums | Dev kit §4 |
+| `integration-execute-request`, `integration-execute-result`, `integration-connect-result`, `integration-error-details` | App SDK integrations wire contract on `/_harbour/integrations/*`: per-operation input bounds, the three result shapes, consent states and the closed `details.code` reason set | Dev kit §4, §8 |
+| `saas-connection.schema.json`, `data-grant-v2.schema.json` | Tenant SaaS connection record and the additive `harbour.data-grant/2.0` grant record (status machine generated; legacy `data-grant` untouched) | Dev kit §5 |
+| `kit-bundle-manifest.schema.json`, `kit-lock.schema.json` | Published kit bundle identity and the committed `.harbour/kit.lock.json` the CodeBuild SDK-vendoring gate compares against | Dev kit §3 |
 
 Runtime resource profiles are a closed contract shared by transformation, artifacts, and
 well-defined application manifests. The supported profiles are `standard`, `memory-1g`, and

package/contract-release.json

@@ -1,12 +1,12 @@
 {
   "schema": "harbour.contract-release/1.0",
-  "repositoryVersion": "0.43.0.0",
-  "publishVersion": "0.43.0",
-  "publishTag": "v0.43.0",
-  "schemasDigest": "sha256:edf9f584487d94b99e35bbc08f3df1e33cb7329e76baa1938dfb7f3f02b97149",
+  "repositoryVersion": "0.45.0.0",
+  "publishVersion": "0.45.0",
+  "publishTag": "v0.45.0",
+  "schemasDigest": "sha256:4cef9cebaaa623a613cb8c748558a9ac5d3622aeca31138f17c983cd8cfb6eb3",
   "aiFixturesDigest": "sha256:edac31c92e146ca1c40130f2fb5649db82e24b8cd1ac758153b90612052fddb6",
-  "generatedGoDigest": "sha256:91de8005eea148fa555ee3a0abb42eed255863ec282740b5cf191727c35cb7ef",
-  "generatedTypeScriptDigest": "sha256:c4bbb442e46e22531586b380689e04448a8c4e04aa7c03d66aceed50754a09c9",
+  "generatedGoDigest": "sha256:4134b582754e02f9248bcb579a4ec335da3ab1d87d92b3720d9ac8ee3cb1eec1",
+  "generatedTypeScriptDigest": "sha256:a57c25fdfbb06518e95bade4dd57441d39a2bb3f11fbbd8d78df5e8773d0ca9b",
   "generatedExclusions": {
     "gen-go/contract_release.go": "contains the generated aggregate digests (self-reference)",
     "gen-ts/contract-release.ts": "contains the generated aggregate digests (self-reference)"
@@ -31,28 +31,40 @@
     "schema/ai-transform-result.schema.json": "sha256:244e380a36957ab2dcb526ea22aaecb56b53664ce1fda6934d0021c084c99133",
     "schema/ai-verification-evidence.schema.json": "sha256:bdbc762df256d2a8dd0bdda60d4d13915ce40034cd756af9515871d145f10ad9",
     "schema/api-error-response.schema.json": "sha256:3d43d5bdf0b59c944e20509d832e6776c3ecdba4d6c245a9118bbe52062a8304",
+    "schema/app-integrations-declaration.schema.json": "sha256:ed289e461a44f24099ed19286e08f8703b7e71c2478a46969579ae1bf4face9d",
     "schema/artifact-contract.schema.json": "sha256:8047b461a1c6d07bbe867a259c57bdf5cc0fdf282cf842ec7b683a9e93713b10",
     "schema/binding-classification-subject.schema.json": "sha256:a8825ce652e7e00a18759c4249bd5bcd0cae552dd58440513f867e87f685133c",
+    "schema/builder-input-proposal.schema.json": "sha256:fe85cffa6d76b1e1effe1f5d75525f8fe0e1eaa3be4a304e491aa23ad72c0e72",
     "schema/data-dependency.schema.json": "sha256:89ba8481ccabc935e7dab5d13871c985839a751ad1586710d8382a15e1f3340c",
+    "schema/data-grant-v2.schema.json": "sha256:167abdda40c62119d9f19d9a4b6485acbde15aea4754cfb3093f57a7a00219b7",
     "schema/data-grant.schema.json": "sha256:e640553831ecc1c01cc9a37fe388b84d0ffeaa0d0050e63712b48f65fa437c8a",
     "schema/data-source.schema.json": "sha256:aec8d2497dae9a91886a3df9f6fbbdb3d3fcab44b14fbcacc3f5e99b827f1bba",
     "schema/deploy-request.schema.json": "sha256:32531e21983cdfeec511f8b4cddd4dad6530cd90e4e9fe147225d78d138b6198",
     "schema/deploy-response.schema.json": "sha256:09064948abdbba7022738285d802ed44648a16ddc2a5b8c2eeb170ae19a66aeb",
+    "schema/deployment-continuation.schema.json": "sha256:55b6945439f2c91cd851dfe4bc9484e67a64091b7763b2d8267354b4a8bfae8c",
     "schema/deployment-environment.schema.json": "sha256:3f1325d5579b3fc47d02c83b6ac0657108909b1dfb901f68203c9c8b668c2ef4",
     "schema/deployment-source.schema.json": "sha256:256988b1efbfc90bd0e1ae31a2c5d69b20ef1e4471dc24c9f9aa759278270fbe",
     "schema/deployment-status-failure.schema.json": "sha256:7cc021d53a07c63b66eb48146d33e8875b64faf77ee927b235795469eb9a1559",
     "schema/deployment-status-request.schema.json": "sha256:1f9f87adc947a252b53b61f71ae17f8c1b8fbc1166f31301a043d11ac257dc66",
-    "schema/deployment-status-response.schema.json": "sha256:9a49f6a5db4e06e0965a536d6080a6155e539c1105e1625338d7f3a53583b2b8",
+    "schema/deployment-status-response.schema.json": "sha256:e591edf08d9dcfce7551b69b449be13927668309b2ebc3b064370f3cfef0385b",
     "schema/env-bindings.schema.json": "sha256:ae09bc4ca5508afa698ef854a59153c4c6f99b07017b48cb9b07ce05abad12f2",
     "schema/error-category.enum.json": "sha256:2268b8a00dfa1f1ab6db7650c117028247fca980d4a23aa5969ce30b76692be9",
     "schema/error-envelope.schema.json": "sha256:75dccda7dd16fdf8435deda53fc7dbcdc109b65114617a17f11763010c656f90",
+    "schema/integration-connect-result.schema.json": "sha256:3f254b67ef739dc1fa395bdc8c4dc93359b16d481dba2a2d777aa5b6f34b7af8",
+    "schema/integration-error-details.schema.json": "sha256:d4cf0c175a109c985a46d1ee5b47fa98b72cab93c2bfebb4e7c29cedaefff7a4",
+    "schema/integration-execute-request.schema.json": "sha256:9b7a169432853e6bd640bf61b9eed6287a76f5b303820c77d037f48b7ec99411",
+    "schema/integration-execute-result.schema.json": "sha256:d28a22556c54f9ac6a9bd318e815acc8db487a1e51f6310bceadb41442016930",
+    "schema/kit-bundle-manifest.schema.json": "sha256:3e67c3dd790383e4b6e7e06aee2a332c1961b773e2da9d50f1ee12f5c81fbc33",
+    "schema/kit-lock.schema.json": "sha256:5e24b76660f83990af7a6c037af350c3850ee439ef956f65a0360facbdcdd997",
     "schema/kvs-routing-entry.schema.json": "sha256:b75f3a5dfa93a428b2764e03222b66b6ef2bed980f8bac8ffac54afdf3526bc5",
     "schema/promotion-request.schema.json": "sha256:00e96dfd8ddbdba88ea222941d43f3609ff6c815a79e34f6705cab458101c969",
     "schema/promotion-response.schema.json": "sha256:4129712d2e29d6ef21d93d4bd0bacfd60ada3f2ee0ade852824e64346b817634",
+    "schema/saas-connection.schema.json": "sha256:2e35c907b3c470fdf7d451eba504c2875b830e97853d99078aaac61cc56e5ba0",
     "schema/sanitized-binding-evidence.schema.json": "sha256:1191ab88e2764df927e5f17837674cebebe068d480da2b2fdb390e589f96b51f",
     "schema/secret-reference.schema.json": "sha256:db4e3c2c6a2dbd72d7ea0f9c91cb3b2343a7e67b601996c6818b2ef08e440895",
     "schema/security-scan-input.schema.json": "sha256:83502dffb3c07ac2e0698928e6dc123f454fc667d4aacd336bcad6944ef2ac3d",
     "schema/security-verdict.schema.json": "sha256:ec3c2d5c9df3601aeed0909b36c7f427469c7f0eeb3295c5809b96d09bf3fc26",
+    "schema/transform-parked-result.schema.json": "sha256:11729980d4c89d4a9e18f5f213232cd3359739c85626b36c20c2a37ba794c9af",
     "schema/transform-report.schema.json": "sha256:5943c90ad7a8b473119dde5879c59ed384d5dc19253b90bc3507dd1ff4dd9abe",
     "schema/version-state.schema.json": "sha256:3b190007e2f8e3821c41ef11c6f5b226da7d5a18d34d4077f4618004846fd444",
     "schema/well-defined-app-manifest.schema.json": "sha256:75a06690411880e670f133066a7a469150b53560b9dafa2f066a04485e4b50a0"
@@ -93,8 +105,8 @@
     "gen-go/contracts_test.go": "sha256:56376287cb1548be1b35ab4c65d6f0b558c5d34885f7a47cb3d9e8d786607bf5",
     "gen-go/doc.go": "sha256:c17bc2d39ed175ce7105c68305f8ae7152f659eb7cd187ecceee7698eb3a65dd",
     "gen-go/error_category.go": "sha256:b2ddea22dcfa030f1a45e721e635485b0bd816cf1f38e7654628a653f5ed4583",
-    "gen-go/schema_documents.go": "sha256:b6973afc9e72713062421f4bcc9dee136a971cf998daff4e0724f8be4a2b5051",
-    "gen-go/types.go": "sha256:b064ad533a736bef735bdf9629237b0b635d138cbb099d6d3f23adb679fc3cff",
+    "gen-go/schema_documents.go": "sha256:bc8a5119241953827affa45588a1492fdf1e74bb9119564202baf424596d0d86",
+    "gen-go/types.go": "sha256:d72ec54a61b79619280fc28315281b682598ca8119c693edae054acb64305905",
     "gen-go/version_state.go": "sha256:4ef8abb126414c0025cf2c59bc9c79a74ef4a2ff89e8f316cbf05acc872371c1"
   },
   "generatedTypeScript": {
@@ -119,32 +131,44 @@
     "gen-ts/ai-transform-result.ts": "sha256:208c66b2aeb425c0cbcc18b7191f6e8989443f2b2c1690648e0e06cc1448ce25",
     "gen-ts/ai-verification-evidence.ts": "sha256:979439d77f8b47631d1eb3b6c3c54ea6fec41089d2a51dc815fd370b1c4917fc",
     "gen-ts/api-error-response.ts": "sha256:0fd73be282e7a5d72d6c343a4e64d09c232556b16161167f0cffd6278ed7e3d3",
+    "gen-ts/app-integrations-declaration.ts": "sha256:5d7dac0705de33dbdc926c98caacd277b3a9698c132abeef01700077e961812e",
     "gen-ts/artifact-contract.ts": "sha256:4a6dc6d2caaeed4bb2066cc8a333e6e09e5a0d4745e0b1038293d54ab9403aeb",
     "gen-ts/binding-classification-digest-helper.ts": "sha256:40fc7d85b4c3f3ffc5caf7d7950c62d013c83ee42058c7453b2100d95817f167",
     "gen-ts/binding-classification-subject.ts": "sha256:c409a3fd7b942b50419632c51d9a79474fb30d6374bdc79c0e25c73618e800c3",
+    "gen-ts/builder-input-proposal.ts": "sha256:b0108c3787873d3cf1a39f00967379418a6766275d3474cfa55f5a9d93ead174",
     "gen-ts/data-dependency.ts": "sha256:0572c31d7ae9088eccc104eee1a205bf176d1d6dacfaf0f290d666024e284966",
+    "gen-ts/data-grant-v2.ts": "sha256:e804821a3a4931e22387719ba3865a9a8c7f60d6e1b6ce37d6305cb867ccecb3",
     "gen-ts/data-grant.ts": "sha256:2358579d8aa1e57b01a6f2b0eacce5531e7f21ef226404c9809925365e0d6155",
     "gen-ts/data-source.ts": "sha256:77d6bb3b0eaa355789c5d97dd1f548734add6950329dc69549350b8d17c8d582",
     "gen-ts/deploy-request.ts": "sha256:0214faa8be6680f0bfc117d5ce67c1a59fcc18bd0ea4bc840e03e7d051fa9ab6",
     "gen-ts/deploy-response.ts": "sha256:364d9f1acf32e491498237cdd3f402d5f8e102f208db7748034f4ec68c6a6137",
+    "gen-ts/deployment-continuation.ts": "sha256:cc9f63af4d0da5086a79103789e4f043783b75b4ed11c6512f044439a551a79c",
     "gen-ts/deployment-environment.ts": "sha256:bbd6eec3a1631b13a8de6e6b95081696f7be01d0bd2bf1b7a9e3a1db809a727c",
     "gen-ts/deployment-source.ts": "sha256:8ccb55aaa7260eb6d19a00987d6a20a4b514e343564da13f27cd7fee8013500a",
     "gen-ts/deployment-status-failure.ts": "sha256:6da2e6eb2f708efa51d416a1ec50f71ea7967cf9be9f93e7ce2e4760dae2cfe3",
     "gen-ts/deployment-status-request.ts": "sha256:7ddccd07ab9f6d0821903a291ab35f903bb055727e03a058b99165ec048f6483",
-    "gen-ts/deployment-status-response.ts": "sha256:70a75c801613a85ebf1946c31d3f5c051451cc99684b352e35b6fd1ccf444f24",
+    "gen-ts/deployment-status-response.ts": "sha256:91f99eaa875968934bf9f920aa2bb3f7e8d4b0c24b18536a1e5c7bb739608a51",
     "gen-ts/env-bindings.ts": "sha256:a167cfe9842352c9fec6412ff0d82bda9c5f5c3a1af541bd5c27a57f54fd0941",
     "gen-ts/error-category-registry.ts": "sha256:7466a502c0723a77db825cdeaa9556a244201b55d9b7acbf2c098e9e84351df1",
     "gen-ts/error-category.ts": "sha256:9bda89180c3b740c9aa8be466216592e8ca9d0d368c274333edf6ea5c45afd8e",
     "gen-ts/error-envelope.ts": "sha256:4457309be794f9d4fc0cf62530cc2d442c007bac9ae84aff66df099cc9e40310",
-    "gen-ts/index.ts": "sha256:4aecbb1044a210bf5813deb645c623eefa7bb6af2a8e2557b76ed9ba1d95eba9",
+    "gen-ts/index.ts": "sha256:982599819309370072af19f1c248a033c13b17a6ee9006272d3436ab87b0db21",
+    "gen-ts/integration-connect-result.ts": "sha256:4b10f169b6e1af364e9b418de21caa9fadbfb77b43cbff77d741cfae0b52180c",
+    "gen-ts/integration-error-details.ts": "sha256:ef0ede67e2fc9e7894604f63f807d43a54987f0e942753de94243bb5320ccf6c",
+    "gen-ts/integration-execute-request.ts": "sha256:da53eecf99da25c74b07d426adb8473795ebe2df4d8bd539894a6eda050f6c07",
+    "gen-ts/integration-execute-result.ts": "sha256:c0b8449b442f8286c3ade51667039c71410dd9d53ef8b6a28611af4ba45c1357",
+    "gen-ts/kit-bundle-manifest.ts": "sha256:8d37545ca2b9b87616ab378dcc63cf1c52ae365d8006857c84873d75b54d9100",
+    "gen-ts/kit-lock.ts": "sha256:320176ee638d0006d6ec2976bdd11a3ff49cac633392808998cc3e90106472b2",
     "gen-ts/kvs-routing-entry.ts": "sha256:d92e85ee9f257d77850d1d3aac9438e2055f38084ff84a48fcedae239d47d4ca",
     "gen-ts/promotion-request.ts": "sha256:9db88cef67f777a16bac628039ec3f582acb9e8cfff6fb592b30d0a0e55abc68",
     "gen-ts/promotion-response.ts": "sha256:f1c9cafac96faeb02a443a31786f67714e818f38d90108e7af41958396524d6f",
+    "gen-ts/saas-connection.ts": "sha256:6813e6cc0e4c0a3b4fb8181fe95b53a96bbf2953aa6ea0b6f3b6a5744cd0878b",
     "gen-ts/sanitized-binding-digest-helper.ts": "sha256:c47d7fdc20500e2e72c23fe39ecdd610fc397c47fcba51335ebec3c380fe6872",
     "gen-ts/sanitized-binding-evidence.ts": "sha256:f3fb7b1d7d2e0929eb0ea981eaf32db3104010647185f6ae59f67167d42538a9",
     "gen-ts/secret-reference.ts": "sha256:731fbcde7315cb4128d5b01bdbe6e6f248f13c7ad8dea04a3a4e927ac4890198",
     "gen-ts/security-scan-input.ts": "sha256:b31f048be04c34b40f49d3b3ba53277e473cd435ae9216ba3a3b4dac69fb5685",
     "gen-ts/security-verdict.ts": "sha256:fea950cddbd12fe0218e2573c9a29c6748d56612a464559f1e6d688fa97f68c7",
+    "gen-ts/transform-parked-result.ts": "sha256:6279e27cee8d75c29f3ede45580fef1daa0ca300867a78e43ead8a7689ec613f",
     "gen-ts/transform-report.ts": "sha256:a4f7f895342cd63048b2add63393a1251abb3e97f057b00e3ebd3f96fd1a510e",
     "gen-ts/version-state-machine.ts": "sha256:c67af3e86ac306743345b850dfd3ae5201c19d10c40e2c149cf8c38258320d5f",
     "gen-ts/version-state.ts": "sha256:a835112930299e7b593a1b8810b7414f6c9e809da2092306c743128170a3b702",

package/dist/gen-ts/app-integrations-declaration.d.ts

@@ -0,0 +1,48 @@
+export type IntegrationConnectionKind = 'saas' | 'database';
+/**
+ * Tenant-wide logical alias of a connection (governance sourceId) or of a resource under it.
+ */
+export type IntegrationAlias = string;
+/**
+ * @minItems 1
+ * @maxItems 64
+ */
+export type ResourceNames = IntegrationAlias[];
+/**
+ * Committed `.harbour/integrations.json`: the app's declared use of tenant-wide integration connections. Keys are logical connection aliases (the governance sourceId); resources are logical names (Slack channel alias, warehouse view name), never IDs, tokens or URLs. The operation set is closed (three operations) and each operation carries a fixed identity mode: slack.channel.history=user, slack.message.post=app, warehouse.view.read=app. A `saas` connection may declare only the Slack operations and a `database` connection only warehouse.view.read. This file also owns the shared IntegrationOperation / IntegrationIdentityMode / IntegrationEnvironment / IntegrationConnectionKind enums referenced by the other integration schemas.
+ */
+export interface AppIntegrationsDeclaration {
+    schema: 'harbour.app-integrations/2.0';
+    connections: {
+        [k: string]: DeclaredConnection;
+    };
+}
+export interface DeclaredConnection {
+    kind: IntegrationConnectionKind;
+    operations: {
+        'slack.channel.history'?: UserModeChannelOperation;
+        'slack.message.post'?: AppModeChannelOperation;
+        'warehouse.view.read'?: AppModeViewOperation;
+    };
+}
+export interface UserModeChannelOperation {
+    identity: 'user';
+    resources: ResourceNames;
+}
+export interface AppModeChannelOperation {
+    identity: 'app';
+    resources: ResourceNames;
+}
+export interface AppModeViewOperation {
+    identity: 'app';
+    resources: {
+        [k: string]: ViewResource;
+    };
+}
+export interface ViewResource {
+    /**
+     * @minItems 1
+     * @maxItems 32
+     */
+    columns: string[];
+}

package/dist/gen-ts/app-integrations-declaration.js

@@ -0,0 +1,3 @@
+/* eslint-disable */
+// Code generated by tools/gen/gen.mjs from schema/*.json. DO NOT EDIT.
+export {};

package/dist/gen-ts/builder-input-proposal.d.ts

@@ -0,0 +1,36 @@
+export type BuilderInputQuestion = {
+    id: string;
+    kind: 'secret' | 'text' | 'choice';
+    format?: 'plain' | 'email' | 'url' | 'integer';
+    prompt: string;
+    whyNeeded: string;
+    effect: string;
+    secretName?: string;
+    /**
+     * @minItems 2
+     * @maxItems 5
+     */
+    options?: string[];
+    /**
+     * @minItems 1
+     * @maxItems 8
+     */
+    evidence: {
+        path: string;
+        line?: number;
+        finding: string;
+    }[];
+};
+/**
+ * Bounded, value-free proposal emitted when sequential preview transformation cannot continue without builder-owned input. The deployment control plane remains authoritative and applies eligibility checks before exposing it.
+ */
+export interface BuilderInputProposal {
+    outcome: 'needs_input';
+    summary: string;
+    outstandingWork: string;
+    /**
+     * @minItems 1
+     * @maxItems 5
+     */
+    questions: BuilderInputQuestion[];
+}

package/dist/gen-ts/builder-input-proposal.js

@@ -0,0 +1,3 @@
+/* eslint-disable */
+// Code generated by tools/gen/gen.mjs from schema/*.json. DO NOT EDIT.
+export {};

package/dist/gen-ts/contract-release.d.ts

@@ -1,7 +1,7 @@
-export declare const ContractRepositoryVersion: "0.43.0.0";
-export declare const ContractPublishVersion: "0.43.0";
-export declare const ContractPublishTag: "v0.43.0";
-export declare const ContractSchemasDigest: "sha256:edf9f584487d94b99e35bbc08f3df1e33cb7329e76baa1938dfb7f3f02b97149";
+export declare const ContractRepositoryVersion: "0.45.0.0";
+export declare const ContractPublishVersion: "0.45.0";
+export declare const ContractPublishTag: "v0.45.0";
+export declare const ContractSchemasDigest: "sha256:4cef9cebaaa623a613cb8c748558a9ac5d3622aeca31138f17c983cd8cfb6eb3";
 export declare const ContractAiFixturesDigest: "sha256:edac31c92e146ca1c40130f2fb5649db82e24b8cd1ac758153b90612052fddb6";
-export declare const ContractGeneratedGoDigest: "sha256:91de8005eea148fa555ee3a0abb42eed255863ec282740b5cf191727c35cb7ef";
-export declare const ContractGeneratedTypeScriptDigest: "sha256:c4bbb442e46e22531586b380689e04448a8c4e04aa7c03d66aceed50754a09c9";
+export declare const ContractGeneratedGoDigest: "sha256:4134b582754e02f9248bcb579a4ec335da3ab1d87d92b3720d9ac8ee3cb1eec1";
+export declare const ContractGeneratedTypeScriptDigest: "sha256:a57c25fdfbb06518e95bade4dd57441d39a2bb3f11fbbd8d78df5e8773d0ca9b";

package/dist/gen-ts/contract-release.js

@@ -1,9 +1,9 @@
 /* eslint-disable */
 // Code generated by tools/gen/gen.mjs from schema/*.json. DO NOT EDIT.
-export const ContractRepositoryVersion = "0.43.0.0";
-export const ContractPublishVersion = "0.43.0";
-export const ContractPublishTag = "v0.43.0";
-export const ContractSchemasDigest = "sha256:edf9f584487d94b99e35bbc08f3df1e33cb7329e76baa1938dfb7f3f02b97149";
+export const ContractRepositoryVersion = "0.45.0.0";
+export const ContractPublishVersion = "0.45.0";
+export const ContractPublishTag = "v0.45.0";
+export const ContractSchemasDigest = "sha256:4cef9cebaaa623a613cb8c748558a9ac5d3622aeca31138f17c983cd8cfb6eb3";
 export const ContractAiFixturesDigest = "sha256:edac31c92e146ca1c40130f2fb5649db82e24b8cd1ac758153b90612052fddb6";
-export const ContractGeneratedGoDigest = "sha256:91de8005eea148fa555ee3a0abb42eed255863ec282740b5cf191727c35cb7ef";
-export const ContractGeneratedTypeScriptDigest = "sha256:c4bbb442e46e22531586b380689e04448a8c4e04aa7c03d66aceed50754a09c9";
+export const ContractGeneratedGoDigest = "sha256:4134b582754e02f9248bcb579a4ec335da3ab1d87d92b3720d9ac8ee3cb1eec1";
+export const ContractGeneratedTypeScriptDigest = "sha256:a57c25fdfbb06518e95bade4dd57441d39a2bb3f11fbbd8d78df5e8773d0ca9b";

package/dist/gen-ts/data-grant-v2.d.ts

@@ -0,0 +1,84 @@
+/**
+ * Grant lifecycle state. Legal edges live in x-transitions; DENIED and REVOKED are terminal.
+ */
+export type DataGrantV2Status = 'REQUESTED' | 'GRANTED' | 'DENIED' | 'REVOKED';
+/**
+ * Provider-side work for the current approved scope (credential mint, cleanup, installation check).
+ */
+export type DataGrantV2ProvisioningStatus = 'NONE' | 'PENDING' | 'FAILED' | 'DONE';
+/**
+ * An app's integration grant for one connection, environment and identity mode (control table sk APP#<appId>#IGRANT#<environment>#<sourceId>#<mode>; grantId = base64url(JSON ["v2",appId,environment,sourceId,mode])). Additive to the legacy DataGrant (data-grant.schema.json), which is never consulted by v2 paths. Expiry is enforced from UTC time on every call and SDK calls never extend it. Status edges live in x-transitions; DENIED and REVOKED are terminal (a regrant after revocation is a new REQUESTED record once cleanup is DONE). Database grants add credentialRef/mintedPrincipal, SaaS grants add installation; both hold references only.
+ */
+export interface DataGrantV2 {
+    schema: 'harbour.data-grant/2.0';
+    appId: string;
+    /**
+     * Tenant-wide logical alias of a connection (governance sourceId) or of a resource under it.
+     */
+    sourceId: string;
+    kind: 'saas' | 'database';
+    /**
+     * development is the CLI/local kit; preview and production are hosted.
+     */
+    environment: 'development' | 'preview' | 'production';
+    /**
+     * Whose authority an operation runs under. Fixed per operation; callers never choose it.
+     */
+    identityMode: 'app' | 'user';
+    status: DataGrantV2Status;
+    /**
+     * Approved operations; each must match this grant's identityMode.
+     *
+     * @minItems 1
+     * @maxItems 3
+     */
+    operations: ('slack.channel.history' | 'slack.message.post' | 'warehouse.view.read')[];
+    /**
+     * Approved logical resource names (channel aliases or view names). Never inherited by wildcard.
+     *
+     * @minItems 1
+     * @maxItems 64
+     */
+    resources: string[];
+    /**
+     * Absent only for explicitly approved ongoing production access.
+     */
+    expiresAt?: string;
+    approvedBy?: string;
+    /**
+     * Optimistic-concurrency version; approvals compare it with the reviewed value.
+     */
+    version: number;
+    /**
+     * The one open access request attached to this grant, if any.
+     */
+    pendingRequestId?: string;
+    provisioning: DataGrantV2Provisioning;
+    /**
+     * Database grants: secretref://tenant/{t}/app/{a}/env/{env}/source/{s}.
+     */
+    credentialRef?: string;
+    /**
+     * Database grants: the deterministic per tenant/app/environment/source principal.
+     */
+    mintedPrincipal?: string;
+    /**
+     * SaaS grants: the connection installation this environment maps to.
+     */
+    installation?: string;
+}
+export interface DataGrantV2Provisioning {
+    status: DataGrantV2ProvisioningStatus;
+    /**
+     * Failed attempts; three requires an admin retry.
+     */
+    attempts: number;
+    /**
+     * Sanitized reason; never a provider error body.
+     */
+    lastError?: string;
+}
+/** True iff from→to is a legal DataGrantV2Status edge (schema x-transitions). */
+export declare function canTransitionDataGrantV2Status(from: string, to: string): boolean;
+/** True iff the DataGrantV2Status is terminal (DENIED, REVOKED). */
+export declare function isTerminalDataGrantV2Status(state: string): boolean;

package/dist/gen-ts/data-grant-v2.js

@@ -0,0 +1,13 @@
+/* eslint-disable */
+// Code generated by tools/gen/gen.mjs from schema/*.json. DO NOT EDIT.
+const legalDataGrantV2StatusTransitions = {
+    "REQUESTED": { "GRANTED": true, "DENIED": true },
+    "GRANTED": { "REVOKED": true },
+};
+const terminalDataGrantV2StatusStates = new Set(["DENIED", "REVOKED"]);
+/** True iff from→to is a legal DataGrantV2Status edge (schema x-transitions). */
+export function canTransitionDataGrantV2Status(from, to) {
+    return Boolean(legalDataGrantV2StatusTransitions[from]?.[to]);
+}
+/** True iff the DataGrantV2Status is terminal (DENIED, REVOKED). */
+export function isTerminalDataGrantV2Status(state) { return terminalDataGrantV2StatusStates.has(state); }

package/dist/gen-ts/deployment-continuation.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Internal immutable reference admitting one child deployment from a parked sequential-preview input request. It contains references and accepted non-secret answers, never credential values.
+ */
+export interface DeploymentContinuation {
+    resumeFrom: {
+        parentVersionId: string;
+        requestId: string;
+        checkpointKey: string;
+        checkpointSha256: string;
+        answerRevision: number;
+        /**
+         * @minItems 1
+         * @maxItems 5
+         */
+        answers: {
+            [k: string]: unknown;
+        }[];
+    };
+}

package/dist/gen-ts/deployment-continuation.js

@@ -0,0 +1,3 @@
+/* eslint-disable */
+// Code generated by tools/gen/gen.mjs from schema/*.json. DO NOT EDIT.
+export {};

package/dist/gen-ts/deployment-status-response.d.ts

@@ -1,3 +1,17 @@
+export type StatusInputQuestion = {
+    id: string;
+    kind: 'secret' | 'text' | 'choice';
+    format?: 'plain' | 'email' | 'url' | 'integer';
+    prompt: string;
+    whyNeeded: string;
+    effect: string;
+    secretName?: string;
+    /**
+     * @minItems 2
+     * @maxItems 5
+     */
+    options?: string[];
+};
 /**
  * 200 OK body returned by GET /v1/tenants/{tenant}/apps/{app}/deployments/{versionId}. It describes that exact immutable version; newer deployments cannot change which record this response represents.
  */
@@ -7,7 +21,7 @@ export interface DeploymentStatusResponse {
     tenant: string;
     app: string;
     environment: 'preview' | 'prod';
-    status: 'QUEUED' | 'ANALYZING' | 'TRANSFORMING' | 'VALIDATING' | 'BUILDING' | 'VERIFYING' | 'GATING' | 'LIVE' | 'AWAITING-PROMOTION' | 'PROMOTING' | 'FAILED' | 'STALE';
+    status: 'QUEUED' | 'ANALYZING' | 'TRANSFORMING' | 'WAITING_INPUT' | 'VALIDATING' | 'BUILDING' | 'VERIFYING' | 'GATING' | 'LIVE' | 'AWAITING-PROMOTION' | 'PROMOTING' | 'FAILED' | 'STALE';
     message: string;
     branch: string;
     commit: string;
@@ -26,6 +40,7 @@ export interface DeploymentStatusResponse {
      */
     progress?: StatusProgressEvent[];
     deployTarget?: StatusDeployTarget;
+    pendingInput?: StatusPendingInput;
 }
 export interface StatusFailureProjection {
     category: string;
@@ -83,3 +98,17 @@ export interface StatusDeployTarget {
      */
     region: string;
 }
+export interface StatusPendingInput {
+    requestId: string;
+    revision: number;
+    /**
+     * @minItems 1
+     * @maxItems 5
+     */
+    questions: StatusInputQuestion[];
+    waitMode: 'active' | 'parking' | 'parked';
+    warmUntil?: string;
+    createdAt: string;
+    continuationVersionId?: string;
+    statusUrl?: string;
+}

package/dist/gen-ts/index.d.ts

@@ -19,15 +19,19 @@ export * from './ai-transform-event.js';
 export * from './ai-transform-result.js';
 export * from './ai-verification-evidence.js';
 export * from './api-error-response.js';
+export * from './app-integrations-declaration.js';
 export * from './artifact-contract.js';
 export * from './binding-classification-digest-helper.js';
 export * from './binding-classification-subject.js';
+export * from './builder-input-proposal.js';
 export * from './contract-release.js';
 export * from './data-dependency.js';
+export * from './data-grant-v2.js';
 export * from './data-grant.js';
 export * from './data-source.js';
 export * from './deploy-request.js';
 export * from './deploy-response.js';
+export * from './deployment-continuation.js';
 export * from './deployment-environment.js';
 export * from './deployment-source.js';
 export * from './deployment-status-failure.js';
@@ -37,14 +41,22 @@ export * from './env-bindings.js';
 export * from './error-category-registry.js';
 export * from './error-category.js';
 export * from './error-envelope.js';
+export * from './integration-connect-result.js';
+export * from './integration-error-details.js';
+export * from './integration-execute-request.js';
+export * from './integration-execute-result.js';
+export * from './kit-bundle-manifest.js';
+export * from './kit-lock.js';
 export * from './kvs-routing-entry.js';
 export * from './promotion-request.js';
 export * from './promotion-response.js';
+export * from './saas-connection.js';
 export * from './sanitized-binding-digest-helper.js';
 export * from './sanitized-binding-evidence.js';
 export * from './secret-reference.js';
 export * from './security-scan-input.js';
 export * from './security-verdict.js';
+export * from './transform-parked-result.js';
 export * from './transform-report.js';
 export * from './version-state-machine.js';
 export * from './version-state.js';

package/dist/gen-ts/index.js

@@ -21,15 +21,19 @@ export * from './ai-transform-event.js';
 export * from './ai-transform-result.js';
 export * from './ai-verification-evidence.js';
 export * from './api-error-response.js';
+export * from './app-integrations-declaration.js';
 export * from './artifact-contract.js';
 export * from './binding-classification-digest-helper.js';
 export * from './binding-classification-subject.js';
+export * from './builder-input-proposal.js';
 export * from './contract-release.js';
 export * from './data-dependency.js';
+export * from './data-grant-v2.js';
 export * from './data-grant.js';
 export * from './data-source.js';
 export * from './deploy-request.js';
 export * from './deploy-response.js';
+export * from './deployment-continuation.js';
 export * from './deployment-environment.js';
 export * from './deployment-source.js';
 export * from './deployment-status-failure.js';
@@ -39,14 +43,22 @@ export * from './env-bindings.js';
 export * from './error-category-registry.js';
 export * from './error-category.js';
 export * from './error-envelope.js';
+export * from './integration-connect-result.js';
+export * from './integration-error-details.js';
+export * from './integration-execute-request.js';
+export * from './integration-execute-result.js';
+export * from './kit-bundle-manifest.js';
+export * from './kit-lock.js';
 export * from './kvs-routing-entry.js';
 export * from './promotion-request.js';
 export * from './promotion-response.js';
+export * from './saas-connection.js';
 export * from './sanitized-binding-digest-helper.js';
 export * from './sanitized-binding-evidence.js';
 export * from './secret-reference.js';
 export * from './security-scan-input.js';
 export * from './security-verdict.js';
+export * from './transform-parked-result.js';
 export * from './transform-report.js';
 export * from './version-state-machine.js';
 export * from './version-state.js';

package/dist/gen-ts/integration-connect-result.d.ts

@@ -0,0 +1,14 @@
+/**
+ * The `data` member of the connect (POST) and disconnect (DELETE) responses on /_harbour/integrations/connect. connected: this user's consent link for the app/environment/connection is ACTIVE (accountLabel is a display label, never an ID or token); consent_required: the user must follow authorizationUrl (governance OAuth start with an opaque ticket); disconnected: only this user's consent for this app/environment was revoked. Connect is a user action and never requests IT app approval.
+ */
+export type IntegrationConnectResult = {
+    status: 'connected' | 'consent_required' | 'disconnected';
+    accountLabel?: string;
+    authorizationUrl?: string;
+} & ({
+    status?: 'connected';
+} | {
+    status?: 'consent_required';
+} | {
+    status?: 'disconnected';
+});

package/dist/gen-ts/integration-connect-result.js

@@ -0,0 +1,3 @@
+/* eslint-disable */
+// Code generated by tools/gen/gen.mjs from schema/*.json. DO NOT EDIT.
+export {};

package/dist/gen-ts/integration-error-details.d.ts

@@ -0,0 +1,22 @@
+/**
+ * App-SDK HarbourErrorCategory values an integration route may emit; INTERNAL is reserved for the transport.
+ */
+export type IntegrationErrorCategory = 'AUTH_REQUIRED' | 'FORBIDDEN' | 'NOT_FOUND' | 'CONFLICT' | 'VALIDATION_FAILED' | 'RATE_LIMITED' | 'UNAVAILABLE';
+/**
+ * Stable reason codes. SEND_OUTCOME_UNKNOWN: dispatch happened but the outcome is unknown; never re-post automatically. SEND_KEY_REUSED: the idempotency key was seen with a different payload or subject. GRANT_DENIED: IT denied the request. TOKEN_REFRESH_PENDING: another call holds the refresh lease; retry shortly. REQUEST_PENDING: a different request for this grant is still open.
+ */
+export type IntegrationErrorCode = 'USER_CONNECTION_REQUIRED' | 'USER_RECONNECT_REQUIRED' | 'GRANT_NOT_READY' | 'GRANT_EXPIRED' | 'GRANT_REVOKED' | 'CONNECTION_DISABLED' | 'OPERATION_NOT_DECLARED' | 'RESOURCE_NOT_APPROVED' | 'IDENTITY_MODE_MISMATCH' | 'SEND_OUTCOME_UNKNOWN' | 'SEND_KEY_REUSED' | 'PROVIDER_RATE_LIMITED' | 'PROVIDER_UNAVAILABLE' | 'REQUEST_TOO_LARGE' | 'RESULT_TOO_LARGE' | 'DEADLINE_EXCEEDED' | 'APP_ACCESS_REQUIRED' | 'GRANT_DENIED' | 'TOKEN_REFRESH_PENDING' | 'REQUEST_PENDING';
+/**
+ * The `error` member of an integration failure response `{error, requestId}` on the execute/connect routes; the SDK maps it onto HarbourError(category, message, details). `category` is the app-SDK HarbourErrorCategory (not the deployment pipeline's dot-path error-category registry), with the HTTP status fixed per category: 401 AUTH_REQUIRED, 403 FORBIDDEN (denied/revoked/expired), 404 NOT_FOUND (unknown app/connection/resource), 409 CONFLICT (pending provisioning/consent/concurrent request), 400 or 413 VALIDATION_FAILED (invalid input / size overflow), 429 RATE_LIMITED (+ Retry-After header), 503 UNAVAILABLE. `details.code` is the closed stable reason set; `message` is human-facing and never carries provider error bodies, tokens or SQL.
+ */
+export interface IntegrationErrorDetails {
+    category: IntegrationErrorCategory;
+    message: string;
+    details: {
+        code: IntegrationErrorCode;
+        /**
+         * Mirrors the Retry-After header on RATE_LIMITED responses.
+         */
+        retryAfterSeconds?: number;
+    };
+}

package/dist/gen-ts/integration-error-details.js

@@ -0,0 +1,3 @@
+/* eslint-disable */
+// Code generated by tools/gen/gen.mjs from schema/*.json. DO NOT EDIT.
+export {};

package/dist/gen-ts/integration-execute-request.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Body of POST /_harbour/integrations/execute (app SDK), forwarded unchanged to the governance development and runtime execute routes. Exactly one declared operation against one declared resource. The identity mode is NOT a caller field: it is fixed by the operation and enforced from the approved grant; any identity/userId/scope field is rejected by additionalProperties. Per-operation input bounds: slack.channel.history {limit? 1..15, default 15}; slack.message.post {text 1..4000 chars} and a required idempotencyKey retained across retries of one explicit Send; warehouse.view.read {columns 1..32, limit? 1..1000, default 100}. Transport limits (not expressible here): request <= 16 KiB, total deadline 10 s.
+ */
+export type IntegrationExecuteRequest = {
+    /**
+     * Tenant-wide logical alias of a connection (governance sourceId) or of a resource under it.
+     */
+    connection: string;
+    /**
+     * Closed operation set. Extending it is a contracts change.
+     */
+    operation: 'slack.channel.history' | 'slack.message.post' | 'warehouse.view.read';
+    /**
+     * Tenant-wide logical alias of a connection (governance sourceId) or of a resource under it.
+     */
+    resource: string;
+    input: {
+        limit?: number;
+        text?: string;
+        /**
+         * @minItems 1
+         * @maxItems 32
+         */
+        columns?: string[];
+    };
+    /**
+     * UUID of one explicit Send action; required for slack.message.post only. The same key with the same payload and subject returns the recorded outcome for seven days.
+     */
+    idempotencyKey?: string;
+};

package/dist/gen-ts/integration-execute-request.js

@@ -0,0 +1,3 @@
+/* eslint-disable */
+// Code generated by tools/gen/gen.mjs from schema/*.json. DO NOT EDIT.
+export {};