@fourier-labs/harbour-contracts 0.45.0 → 0.47.0

package/README.md

@@ -38,10 +38,10 @@ exist here first.
 | `binding-classification-subject.schema.json` | Complete value-free binding-name classification before version allocation | AI governance §5.7 / SEC-UP-01 |
 | `sanitized-binding-evidence.schema.json` | Exact-version sanitized runtime-binding allocation receipt | AI governance §5.7 / SEC-UP-02 |
 | `ai-pricing-revision`, `ai-metering-policy`, `ai-budget-ledger-event`, `ai-trace-event-v2` | Additive metering v2 records, including media dimensions and P5 trace attribution; v1 records remain readable | AI governance §9 |
-| `app-integrations-declaration.schema.json` | Committed `.harbour/integrations.json` (`harbour.app-integrations/2.0`): closed three-operation set with fixed identity modes; owns the shared operation/identity/environment enums | Dev kit §4 |
-| `integration-execute-request`, `integration-execute-result`, `integration-connect-result`, `integration-error-details` | App SDK integrations wire contract on `/_harbour/integrations/*`: per-operation input bounds, the three result shapes, consent states and the closed `details.code` reason set | Dev kit §4, §8 |
-| `saas-connection.schema.json`, `data-grant-v2.schema.json` | Tenant SaaS connection record and the additive `harbour.data-grant/2.0` grant record (status machine generated; legacy `data-grant` untouched) | Dev kit §5 |
-| `kit-bundle-manifest.schema.json`, `kit-lock.schema.json` | Published kit bundle identity and the committed `.harbour/kit.lock.json` the CodeBuild SDK-vendoring gate compares against | Dev kit §3 |
+| `app-integrations-declaration.schema.json` | Committed `.harbour/integrations.json` (`harbour.app-integrations/2.0`): closed five-operation set (Slack read/post, Gmail read-only, warehouse view read) with fixed identity modes; owns the shared operation/identity/environment enums | Dev kit §4 |
+| `integration-execute-request`, `integration-execute-result`, `integration-connect-result`, `integration-error-details` | App SDK integrations wire contract on `/_harbour/integrations/*`: per-operation input bounds, the five result shapes, consent states and the closed `details.code` reason set | Dev kit §4, §8 |
+| `saas-connection.schema.json`, `data-grant-v2.schema.json` | Tenant SaaS connection record (one installation and channel map per tenant and provider) and the additive `harbour.data-grant/2.0` grant record with structured resources and provisioning lease/cleanup (status machine generated; legacy `data-grant` untouched) | Dev kit §5 |
+| `kit-bundle-manifest.schema.json`, `kit-lock.schema.json` | Published kit bundle identity (SDK tarball digest plus optional `sdk.version` and https `sdk.url` download location) and the committed `.harbour/kit.lock.json` the CodeBuild SDK-vendoring gate compares against | Dev kit §3 |
 
 Runtime resource profiles are a closed contract shared by transformation, artifacts, and
 well-defined application manifests. The supported profiles are `standard`, `memory-1g`, and

package/contract-release.json

@@ -1,12 +1,12 @@
 {
   "schema": "harbour.contract-release/1.0",
-  "repositoryVersion": "0.45.0.0",
-  "publishVersion": "0.45.0",
-  "publishTag": "v0.45.0",
-  "schemasDigest": "sha256:4cef9cebaaa623a613cb8c748558a9ac5d3622aeca31138f17c983cd8cfb6eb3",
+  "repositoryVersion": "0.47.0.0",
+  "publishVersion": "0.47.0",
+  "publishTag": "v0.47.0",
+  "schemasDigest": "sha256:9d059261d1fbe550fbd4e265287397d6913912c3d5ea6570b2b29d2e6619de4f",
   "aiFixturesDigest": "sha256:edac31c92e146ca1c40130f2fb5649db82e24b8cd1ac758153b90612052fddb6",
-  "generatedGoDigest": "sha256:4134b582754e02f9248bcb579a4ec335da3ab1d87d92b3720d9ac8ee3cb1eec1",
-  "generatedTypeScriptDigest": "sha256:a57c25fdfbb06518e95bade4dd57441d39a2bb3f11fbbd8d78df5e8773d0ca9b",
+  "generatedGoDigest": "sha256:5892b40bfbac4c9a86f671a0eb54ef530f65ba97e5abc0b3713495bbbdfbf4e2",
+  "generatedTypeScriptDigest": "sha256:0bb0c87edaa9399cac1c927ba80dc25ff96f7364678e7f0a17599a34a26c170b",
   "generatedExclusions": {
     "gen-go/contract_release.go": "contains the generated aggregate digests (self-reference)",
     "gen-ts/contract-release.ts": "contains the generated aggregate digests (self-reference)"
@@ -21,22 +21,22 @@
     "schema/ai-gateway-key-lookup.schema.json": "sha256:e994d4782c9bc4f14d3a1c35c9ac1e7a5ec84284cde5b3af7e3e6022130ddbb3",
     "schema/ai-governance-decision.schema.json": "sha256:d650762a428350748deafd6b251cbd4a03ba564650e74204f1a77bbe923e145f",
     "schema/ai-metering-policy.schema.json": "sha256:044115938d254d914feac162219d20ee48f741cd7ad32df4613b45f9c862fe8c",
-    "schema/ai-policy-snapshot.schema.json": "sha256:8229b855861e029c7792c4c43d42c209055f175af747f437570d42c5008f70d8",
+    "schema/ai-policy-snapshot.schema.json": "sha256:55cabb3cdd833d66d5d4d30d3e1b41dfc981f473725db2e64983930995424fc3",
     "schema/ai-pricing-revision.schema.json": "sha256:5ddb40c23712c0cec37b733678e4bb34811f5db44a233773c21a7dfaec188375",
     "schema/ai-runtime-binding.schema.json": "sha256:e86cac2f70a474997bdef1577ca15f22982ec0ce866921df3f763c4d7f7fa191",
-    "schema/ai-runtime-contract.schema.json": "sha256:338fbf576d67934592648aff9a9c8ae05a54993e8080c90172b00f346a15db02",
+    "schema/ai-runtime-contract.schema.json": "sha256:bfa2f8968b1c0678b328c178c7b9c6563f7a363ae04bf74a1078a1cd9679fa14",
     "schema/ai-trace-event-v2.schema.json": "sha256:b479199bb6e44ea23a1da53f69943cb8f3886c433914fdb9bf9e9bdbc3dd767d",
-    "schema/ai-trace-event.schema.json": "sha256:313af995b72dd19d3d33997ba2d270bd163ce3752000fd7d8a6c18bff137af32",
+    "schema/ai-trace-event.schema.json": "sha256:96d095805ce35ceac2a4cb76ebcca9188f5dd8689ed6c67e93f33c5412d2a78b",
     "schema/ai-transform-event.schema.json": "sha256:b845762e653b19afdaf959f7bd1624db490cd10c760daa9aaa61fb83f2a86b6e",
     "schema/ai-transform-result.schema.json": "sha256:244e380a36957ab2dcb526ea22aaecb56b53664ce1fda6934d0021c084c99133",
     "schema/ai-verification-evidence.schema.json": "sha256:bdbc762df256d2a8dd0bdda60d4d13915ce40034cd756af9515871d145f10ad9",
     "schema/api-error-response.schema.json": "sha256:3d43d5bdf0b59c944e20509d832e6776c3ecdba4d6c245a9118bbe52062a8304",
-    "schema/app-integrations-declaration.schema.json": "sha256:ed289e461a44f24099ed19286e08f8703b7e71c2478a46969579ae1bf4face9d",
+    "schema/app-integrations-declaration.schema.json": "sha256:931c63d6a473be29e74ee7fd657649172966d483c0448f4dcaa5512dce9d06bb",
     "schema/artifact-contract.schema.json": "sha256:8047b461a1c6d07bbe867a259c57bdf5cc0fdf282cf842ec7b683a9e93713b10",
     "schema/binding-classification-subject.schema.json": "sha256:a8825ce652e7e00a18759c4249bd5bcd0cae552dd58440513f867e87f685133c",
     "schema/builder-input-proposal.schema.json": "sha256:fe85cffa6d76b1e1effe1f5d75525f8fe0e1eaa3be4a304e491aa23ad72c0e72",
     "schema/data-dependency.schema.json": "sha256:89ba8481ccabc935e7dab5d13871c985839a751ad1586710d8382a15e1f3340c",
-    "schema/data-grant-v2.schema.json": "sha256:167abdda40c62119d9f19d9a4b6485acbde15aea4754cfb3093f57a7a00219b7",
+    "schema/data-grant-v2.schema.json": "sha256:6d639745e7a00f5f6383fa9034e3b04b6772cb29a60a6db1a3c517dc7a6c26ba",
     "schema/data-grant.schema.json": "sha256:e640553831ecc1c01cc9a37fe388b84d0ffeaa0d0050e63712b48f65fa437c8a",
     "schema/data-source.schema.json": "sha256:aec8d2497dae9a91886a3df9f6fbbdb3d3fcab44b14fbcacc3f5e99b827f1bba",
     "schema/deploy-request.schema.json": "sha256:32531e21983cdfeec511f8b4cddd4dad6530cd90e4e9fe147225d78d138b6198",
@@ -51,15 +51,15 @@
     "schema/error-category.enum.json": "sha256:2268b8a00dfa1f1ab6db7650c117028247fca980d4a23aa5969ce30b76692be9",
     "schema/error-envelope.schema.json": "sha256:75dccda7dd16fdf8435deda53fc7dbcdc109b65114617a17f11763010c656f90",
     "schema/integration-connect-result.schema.json": "sha256:3f254b67ef739dc1fa395bdc8c4dc93359b16d481dba2a2d777aa5b6f34b7af8",
-    "schema/integration-error-details.schema.json": "sha256:d4cf0c175a109c985a46d1ee5b47fa98b72cab93c2bfebb4e7c29cedaefff7a4",
-    "schema/integration-execute-request.schema.json": "sha256:9b7a169432853e6bd640bf61b9eed6287a76f5b303820c77d037f48b7ec99411",
-    "schema/integration-execute-result.schema.json": "sha256:d28a22556c54f9ac6a9bd318e815acc8db487a1e51f6310bceadb41442016930",
-    "schema/kit-bundle-manifest.schema.json": "sha256:3e67c3dd790383e4b6e7e06aee2a332c1961b773e2da9d50f1ee12f5c81fbc33",
+    "schema/integration-error-details.schema.json": "sha256:09cebaddb7f88e63cbebaa1cada5f91057ae4dc4370e973ef38f7f11c6323284",
+    "schema/integration-execute-request.schema.json": "sha256:da9a701c931edf5f955495f1542f37423ae2bab030034cf90feb0f5f18d094f6",
+    "schema/integration-execute-result.schema.json": "sha256:232d3710c8e550d2946b5ab817b90b538fd0928db9b10b02b166623c59cb0240",
+    "schema/kit-bundle-manifest.schema.json": "sha256:c15e28ae028dbd1c262427b9c797142e19b1f38fa36b4ecfe187e32c20a174ec",
     "schema/kit-lock.schema.json": "sha256:5e24b76660f83990af7a6c037af350c3850ee439ef956f65a0360facbdcdd997",
     "schema/kvs-routing-entry.schema.json": "sha256:b75f3a5dfa93a428b2764e03222b66b6ef2bed980f8bac8ffac54afdf3526bc5",
     "schema/promotion-request.schema.json": "sha256:00e96dfd8ddbdba88ea222941d43f3609ff6c815a79e34f6705cab458101c969",
     "schema/promotion-response.schema.json": "sha256:4129712d2e29d6ef21d93d4bd0bacfd60ada3f2ee0ade852824e64346b817634",
-    "schema/saas-connection.schema.json": "sha256:2e35c907b3c470fdf7d451eba504c2875b830e97853d99078aaac61cc56e5ba0",
+    "schema/saas-connection.schema.json": "sha256:78913c3221166cfecea01c807f0c6e291469501926483fa3e229b8b7b0fdd201",
     "schema/sanitized-binding-evidence.schema.json": "sha256:1191ab88e2764df927e5f17837674cebebe068d480da2b2fdb390e589f96b51f",
     "schema/secret-reference.schema.json": "sha256:db4e3c2c6a2dbd72d7ea0f9c91cb3b2343a7e67b601996c6818b2ef08e440895",
     "schema/security-scan-input.schema.json": "sha256:83502dffb3c07ac2e0698928e6dc123f454fc667d4aacd336bcad6944ef2ac3d",
@@ -106,7 +106,7 @@
     "gen-go/doc.go": "sha256:c17bc2d39ed175ce7105c68305f8ae7152f659eb7cd187ecceee7698eb3a65dd",
     "gen-go/error_category.go": "sha256:b2ddea22dcfa030f1a45e721e635485b0bd816cf1f38e7654628a653f5ed4583",
     "gen-go/schema_documents.go": "sha256:bc8a5119241953827affa45588a1492fdf1e74bb9119564202baf424596d0d86",
-    "gen-go/types.go": "sha256:d72ec54a61b79619280fc28315281b682598ca8119c693edae054acb64305905",
+    "gen-go/types.go": "sha256:bd8da0367179571b44a1a1705d1e7628d38d06eef9fc0a50d5908363210fbebe",
     "gen-go/version_state.go": "sha256:4ef8abb126414c0025cf2c59bc9c79a74ef4a2ff89e8f316cbf05acc872371c1"
   },
   "generatedTypeScript": {
@@ -121,23 +121,23 @@
     "gen-ts/ai-gateway-key-token.ts": "sha256:ff6551ad3332cc665878d7ec93f42ce185c375e637531b2fbc82c697b877e784",
     "gen-ts/ai-governance-decision.ts": "sha256:4a04e116f2ec281104e616a8ba414f23a9d34d398f850888d27510173e39c5c3",
     "gen-ts/ai-metering-policy.ts": "sha256:dd261d57646a509cd46efaefac4aad58d018c7f7da98326dd8859e4ce951c56a",
-    "gen-ts/ai-policy-snapshot.ts": "sha256:05f5cea100e43a5cc6c1e8c7c07edea974ea0e6785730f622e824e40128f1ebc",
+    "gen-ts/ai-policy-snapshot.ts": "sha256:d79223055a03dfabfff3b09800dfb4c50ad6316ee2b97c840d141ef816f4544f",
     "gen-ts/ai-pricing-revision.ts": "sha256:48afdea7fb09b9a392147a0a62bcee013157a9d536c07e0782ef28781a3000de",
     "gen-ts/ai-runtime-binding.ts": "sha256:176c830d400ce44c508f8d249bb3c9724b2d595b78262615487cdafc4790263e",
-    "gen-ts/ai-runtime-contract.ts": "sha256:f34533728dfcf7ce8d2e959b55379650f317a06e29e316caf86e131667891ddc",
+    "gen-ts/ai-runtime-contract.ts": "sha256:6ed3bde6ab7a3f7e2e298c2904eb52d35e06699c5e284f98fb39abfc76858beb",
     "gen-ts/ai-trace-event-v2.ts": "sha256:8c994355f290864da1cf42850c3eceb0e4a1567b45ed989de865213430d3ce0e",
-    "gen-ts/ai-trace-event.ts": "sha256:657b144e6bc258c465850130a299c0f6d13fd2d0c2920c6667fc4eea39df77c4",
+    "gen-ts/ai-trace-event.ts": "sha256:53a74d014c59c059256ea855a100a209d9d4e83c5f95ae8e639073e1182c62dd",
     "gen-ts/ai-transform-event.ts": "sha256:c8b520e01ce12b0e3a5ebe03a3ca63cc83368f26e1eef933de732c4fc1c504f9",
     "gen-ts/ai-transform-result.ts": "sha256:208c66b2aeb425c0cbcc18b7191f6e8989443f2b2c1690648e0e06cc1448ce25",
     "gen-ts/ai-verification-evidence.ts": "sha256:979439d77f8b47631d1eb3b6c3c54ea6fec41089d2a51dc815fd370b1c4917fc",
     "gen-ts/api-error-response.ts": "sha256:0fd73be282e7a5d72d6c343a4e64d09c232556b16161167f0cffd6278ed7e3d3",
-    "gen-ts/app-integrations-declaration.ts": "sha256:5d7dac0705de33dbdc926c98caacd277b3a9698c132abeef01700077e961812e",
+    "gen-ts/app-integrations-declaration.ts": "sha256:9d31f54867d0aec2cada067da3b77ce44ee4f838e367929422a9669e0828497e",
     "gen-ts/artifact-contract.ts": "sha256:4a6dc6d2caaeed4bb2066cc8a333e6e09e5a0d4745e0b1038293d54ab9403aeb",
     "gen-ts/binding-classification-digest-helper.ts": "sha256:40fc7d85b4c3f3ffc5caf7d7950c62d013c83ee42058c7453b2100d95817f167",
     "gen-ts/binding-classification-subject.ts": "sha256:c409a3fd7b942b50419632c51d9a79474fb30d6374bdc79c0e25c73618e800c3",
     "gen-ts/builder-input-proposal.ts": "sha256:b0108c3787873d3cf1a39f00967379418a6766275d3474cfa55f5a9d93ead174",
     "gen-ts/data-dependency.ts": "sha256:0572c31d7ae9088eccc104eee1a205bf176d1d6dacfaf0f290d666024e284966",
-    "gen-ts/data-grant-v2.ts": "sha256:e804821a3a4931e22387719ba3865a9a8c7f60d6e1b6ce37d6305cb867ccecb3",
+    "gen-ts/data-grant-v2.ts": "sha256:06ff153d3cf551a7f9a49a01e766f084e4cf51d981299e12f7ef1dedd824c937",
     "gen-ts/data-grant.ts": "sha256:2358579d8aa1e57b01a6f2b0eacce5531e7f21ef226404c9809925365e0d6155",
     "gen-ts/data-source.ts": "sha256:77d6bb3b0eaa355789c5d97dd1f548734add6950329dc69549350b8d17c8d582",
     "gen-ts/deploy-request.ts": "sha256:0214faa8be6680f0bfc117d5ce67c1a59fcc18bd0ea4bc840e03e7d051fa9ab6",
@@ -154,15 +154,15 @@
     "gen-ts/error-envelope.ts": "sha256:4457309be794f9d4fc0cf62530cc2d442c007bac9ae84aff66df099cc9e40310",
     "gen-ts/index.ts": "sha256:982599819309370072af19f1c248a033c13b17a6ee9006272d3436ab87b0db21",
     "gen-ts/integration-connect-result.ts": "sha256:4b10f169b6e1af364e9b418de21caa9fadbfb77b43cbff77d741cfae0b52180c",
-    "gen-ts/integration-error-details.ts": "sha256:ef0ede67e2fc9e7894604f63f807d43a54987f0e942753de94243bb5320ccf6c",
-    "gen-ts/integration-execute-request.ts": "sha256:da53eecf99da25c74b07d426adb8473795ebe2df4d8bd539894a6eda050f6c07",
-    "gen-ts/integration-execute-result.ts": "sha256:c0b8449b442f8286c3ade51667039c71410dd9d53ef8b6a28611af4ba45c1357",
-    "gen-ts/kit-bundle-manifest.ts": "sha256:8d37545ca2b9b87616ab378dcc63cf1c52ae365d8006857c84873d75b54d9100",
-    "gen-ts/kit-lock.ts": "sha256:320176ee638d0006d6ec2976bdd11a3ff49cac633392808998cc3e90106472b2",
+    "gen-ts/integration-error-details.ts": "sha256:8243f5871f376d1cab4d90e07f3151d148fb03c704168dbccdfe6c9fe76bce83",
+    "gen-ts/integration-execute-request.ts": "sha256:b8b5e271453064a6a1b62d172b2c9a48b2753b3778e29e78ee751cf5d7446cb9",
+    "gen-ts/integration-execute-result.ts": "sha256:bf33b23c6bb121d8e43ea486cf80922d6010919676f0f6206045a2750dda39b4",
+    "gen-ts/kit-bundle-manifest.ts": "sha256:9041b32af3df781ca6800bc14c3719e5e54c81dff370633454ac3ad27432eb58",
+    "gen-ts/kit-lock.ts": "sha256:de4ae82bac7bd234a3230ae671962e80eed6542d695a032a442673659dc6be5e",
     "gen-ts/kvs-routing-entry.ts": "sha256:d92e85ee9f257d77850d1d3aac9438e2055f38084ff84a48fcedae239d47d4ca",
     "gen-ts/promotion-request.ts": "sha256:9db88cef67f777a16bac628039ec3f582acb9e8cfff6fb592b30d0a0e55abc68",
     "gen-ts/promotion-response.ts": "sha256:f1c9cafac96faeb02a443a31786f67714e818f38d90108e7af41958396524d6f",
-    "gen-ts/saas-connection.ts": "sha256:6813e6cc0e4c0a3b4fb8181fe95b53a96bbf2953aa6ea0b6f3b6a5744cd0878b",
+    "gen-ts/saas-connection.ts": "sha256:c7d80c9ef0c6c93232fbcc2d79143e5dcb3ab0b1c81ee48dcf0a01e5a3907dcf",
     "gen-ts/sanitized-binding-digest-helper.ts": "sha256:c47d7fdc20500e2e72c23fe39ecdd610fc397c47fcba51335ebec3c380fe6872",
     "gen-ts/sanitized-binding-evidence.ts": "sha256:f3fb7b1d7d2e0929eb0ea981eaf32db3104010647185f6ae59f67167d42538a9",
     "gen-ts/secret-reference.ts": "sha256:731fbcde7315cb4128d5b01bdbe6e6f248f13c7ad8dea04a3a4e927ac4890198",

package/dist/gen-ts/ai-policy-snapshot.d.ts

@@ -82,6 +82,7 @@ export interface AiPolicySnapshot {
      */
     limits: AiPolicyLimit[];
     retention: AiPolicyRetention;
+    assignments?: AiPolicyAssignments;
 }
 export interface AiPolicyClassificationMinimum {
     classification: 'Green' | 'Yellow' | 'Orange' | 'Red';
@@ -198,3 +199,21 @@ export interface AiPolicyRetention {
      */
     revealRoles: AiPolicyIdentifier[];
 }
+/**
+ * Application-scope only: the tenant resources this application/environment snapshot pins BY NAME (D-8/D-9). A scope without assignments keeps the default rule (the whole merge-narrowed set is the assignment). Every name must exist in the same snapshot's own family; empty route and budget selections are legal (tenant-scoped limits bind regardless).
+ */
+export interface AiPolicyAssignments {
+    /**
+     * @maxItems 256
+     */
+    routes: AiPolicyIdentifier[];
+    /**
+     * @minItems 1
+     * @maxItems 256
+     */
+    policies: AiPolicyIdentifier[];
+    /**
+     * @maxItems 128
+     */
+    budgets: AiPolicyIdentifier[];
+}

package/dist/gen-ts/ai-runtime-contract.d.ts

@@ -49,7 +49,7 @@ export interface AiRuntimeContract {
 export interface AiConfigurationMappingDescriptor {
     mappingId: string;
     version: string;
-    protocol: 'openai-chat';
+    protocol: 'openai-chat' | 'openai-images';
     providerId: string;
     apiKeyEnvironmentName: string;
     baseUrlEnvironmentName: string;

package/dist/gen-ts/ai-trace-event.d.ts

@@ -17,7 +17,10 @@ export type AiTraceEvent = {
     provider?: 'openai' | 'anthropic' | 'gemini' | 'openrouter' | 'deepseek' | 'elevenlabs' | 'deepgram' | 'higgsfield';
     providerModel?: string;
     outcome: 'succeeded' | 'blocked' | 'failed' | 'cancelled';
-    usage?: AiTraceUsage;
+    /**
+     * Trace-level provider-reported usage, or null when no attempt reported any (the reservation stays committed rather than reconciled against invented zero usage).
+     */
+    usage?: AiTraceUsage | null;
     priceRevision?: AiTraceIdentifier;
     costMicroUsd: number;
     latencyMs: number;

package/dist/gen-ts/app-integrations-declaration.d.ts

@@ -9,7 +9,11 @@ export type IntegrationAlias = string;
  */
 export type ResourceNames = IntegrationAlias[];
 /**
- * Committed `.harbour/integrations.json`: the app's declared use of tenant-wide integration connections. Keys are logical connection aliases (the governance sourceId); resources are logical names (Slack channel alias, warehouse view name), never IDs, tokens or URLs. The operation set is closed (three operations) and each operation carries a fixed identity mode: slack.channel.history=user, slack.message.post=app, warehouse.view.read=app. A `saas` connection may declare only the Slack operations and a `database` connection only warehouse.view.read. This file also owns the shared IntegrationOperation / IntegrationIdentityMode / IntegrationEnvironment / IntegrationConnectionKind enums referenced by the other integration schemas.
+ * A plain column identifier of a warehouse view.
+ */
+export type ColumnName = string;
+/**
+ * Committed `.harbour/integrations.json`: the app's declared use of tenant-wide integration connections. Keys are logical connection aliases (the governance sourceId); resources are logical names (Slack channel alias, warehouse view name), never IDs, tokens or URLs. The operation set is closed (five operations) and each operation carries a fixed identity mode: slack.channel.history=user, slack.message.post=app, gmail.thread.list=user, gmail.message.read=user, warehouse.view.read=app. A `saas` connection may declare only the Slack and Gmail operations and a `database` connection only warehouse.view.read. Gmail is read-only and user-mode only; its single resource is the fixed `inbox` alias. This file also owns the shared IntegrationOperation / IntegrationIdentityMode / IntegrationEnvironment / IntegrationConnectionKind enums referenced by the other integration schemas.
  */
 export interface AppIntegrationsDeclaration {
     schema: 'harbour.app-integrations/2.0';
@@ -22,6 +26,8 @@ export interface DeclaredConnection {
     operations: {
         'slack.channel.history'?: UserModeChannelOperation;
         'slack.message.post'?: AppModeChannelOperation;
+        'gmail.thread.list'?: UserModeChannelOperation;
+        'gmail.message.read'?: UserModeChannelOperation;
         'warehouse.view.read'?: AppModeViewOperation;
     };
 }
@@ -44,5 +50,5 @@ export interface ViewResource {
      * @minItems 1
      * @maxItems 32
      */
-    columns: string[];
+    columns: ColumnName[];
 }

package/dist/gen-ts/contract-release.d.ts

@@ -1,7 +1,7 @@
-export declare const ContractRepositoryVersion: "0.45.0.0";
-export declare const ContractPublishVersion: "0.45.0";
-export declare const ContractPublishTag: "v0.45.0";
-export declare const ContractSchemasDigest: "sha256:4cef9cebaaa623a613cb8c748558a9ac5d3622aeca31138f17c983cd8cfb6eb3";
+export declare const ContractRepositoryVersion: "0.47.0.0";
+export declare const ContractPublishVersion: "0.47.0";
+export declare const ContractPublishTag: "v0.47.0";
+export declare const ContractSchemasDigest: "sha256:9d059261d1fbe550fbd4e265287397d6913912c3d5ea6570b2b29d2e6619de4f";
 export declare const ContractAiFixturesDigest: "sha256:edac31c92e146ca1c40130f2fb5649db82e24b8cd1ac758153b90612052fddb6";
-export declare const ContractGeneratedGoDigest: "sha256:4134b582754e02f9248bcb579a4ec335da3ab1d87d92b3720d9ac8ee3cb1eec1";
-export declare const ContractGeneratedTypeScriptDigest: "sha256:a57c25fdfbb06518e95bade4dd57441d39a2bb3f11fbbd8d78df5e8773d0ca9b";
+export declare const ContractGeneratedGoDigest: "sha256:5892b40bfbac4c9a86f671a0eb54ef530f65ba97e5abc0b3713495bbbdfbf4e2";
+export declare const ContractGeneratedTypeScriptDigest: "sha256:0bb0c87edaa9399cac1c927ba80dc25ff96f7364678e7f0a17599a34a26c170b";

package/dist/gen-ts/contract-release.js

@@ -1,9 +1,9 @@
 /* eslint-disable */
 // Code generated by tools/gen/gen.mjs from schema/*.json. DO NOT EDIT.
-export const ContractRepositoryVersion = "0.45.0.0";
-export const ContractPublishVersion = "0.45.0";
-export const ContractPublishTag = "v0.45.0";
-export const ContractSchemasDigest = "sha256:4cef9cebaaa623a613cb8c748558a9ac5d3622aeca31138f17c983cd8cfb6eb3";
+export const ContractRepositoryVersion = "0.47.0.0";
+export const ContractPublishVersion = "0.47.0";
+export const ContractPublishTag = "v0.47.0";
+export const ContractSchemasDigest = "sha256:9d059261d1fbe550fbd4e265287397d6913912c3d5ea6570b2b29d2e6619de4f";
 export const ContractAiFixturesDigest = "sha256:edac31c92e146ca1c40130f2fb5649db82e24b8cd1ac758153b90612052fddb6";
-export const ContractGeneratedGoDigest = "sha256:4134b582754e02f9248bcb579a4ec335da3ab1d87d92b3720d9ac8ee3cb1eec1";
-export const ContractGeneratedTypeScriptDigest = "sha256:a57c25fdfbb06518e95bade4dd57441d39a2bb3f11fbbd8d78df5e8773d0ca9b";
+export const ContractGeneratedGoDigest = "sha256:5892b40bfbac4c9a86f671a0eb54ef530f65ba97e5abc0b3713495bbbdfbf4e2";
+export const ContractGeneratedTypeScriptDigest = "sha256:0bb0c87edaa9399cac1c927ba80dc25ff96f7364678e7f0a17599a34a26c170b";

package/dist/gen-ts/data-grant-v2.d.ts

@@ -6,45 +6,50 @@ export type DataGrantV2Status = 'REQUESTED' | 'GRANTED' | 'DENIED' | 'REVOKED';
  * Provider-side work for the current approved scope (credential mint, cleanup, installation check).
  */
 export type DataGrantV2ProvisioningStatus = 'NONE' | 'PENDING' | 'FAILED' | 'DONE';
+export type DataGrantV2CleanupStatus = 'PENDING' | 'FAILED' | 'DONE';
 /**
- * An app's integration grant for one connection, environment and identity mode (control table sk APP#<appId>#IGRANT#<environment>#<sourceId>#<mode>; grantId = base64url(JSON ["v2",appId,environment,sourceId,mode])). Additive to the legacy DataGrant (data-grant.schema.json), which is never consulted by v2 paths. Expiry is enforced from UTC time on every call and SDK calls never extend it. Status edges live in x-transitions; DENIED and REVOKED are terminal (a regrant after revocation is a new REQUESTED record once cleanup is DONE). Database grants add credentialRef/mintedPrincipal, SaaS grants add installation; both hold references only.
+ * An app's integration grant for one connection, environment and identity mode (control table sk APP#<appId>#IGRANT#<environment>#<sourceId>#<mode>; grantId = base64url(JSON ["v2",appId,environment,sourceId,mode])). Additive to the legacy DataGrant (data-grant.schema.json), which is never consulted by v2 paths. A fresh REQUESTED record carries empty `operations`/`resources` until the attached request is approved; approved resources are structured `{name, columns?}` entries (a Slack channel alias, the fixed Gmail `inbox` alias, or a warehouse view alias with its approved columns). Expiry is enforced from UTC time on every call and SDK calls never extend it; `expiredAt` is stamped by the recovery sweep afterwards. Status edges live in x-transitions; DENIED and REVOKED are terminal (a regrant after revocation is a new REQUESTED record once cleanup is DONE). Database grants add credentialRef/mintedPrincipal; both hold references only. `identityMode` and `installation` are the deprecated 0.45.0 spellings: the record carries `mode`, and a SaaS grant runs on the connection's single installation.
  */
 export interface DataGrantV2 {
     schema: 'harbour.data-grant/2.0';
+    tenantId: string;
     appId: string;
-    /**
-     * Tenant-wide logical alias of a connection (governance sourceId) or of a resource under it.
-     */
-    sourceId: string;
-    kind: 'saas' | 'database';
     /**
      * development is the CLI/local kit; preview and production are hosted.
      */
     environment: 'development' | 'preview' | 'production';
+    /**
+     * Tenant-wide logical alias of a connection (governance sourceId) or of a resource under it.
+     */
+    sourceId: string;
     /**
      * Whose authority an operation runs under. Fixed per operation; callers never choose it.
      */
-    identityMode: 'app' | 'user';
+    mode: 'app' | 'user';
+    kind: 'saas' | 'database';
     status: DataGrantV2Status;
     /**
-     * Approved operations; each must match this grant's identityMode.
+     * Approved operations; each must match this grant's mode. Empty until the first approval.
      *
-     * @minItems 1
-     * @maxItems 3
+     * @maxItems 5
      */
-    operations: ('slack.channel.history' | 'slack.message.post' | 'warehouse.view.read')[];
+    operations: ('slack.channel.history' | 'slack.message.post' | 'gmail.thread.list' | 'gmail.message.read' | 'warehouse.view.read')[];
     /**
-     * Approved logical resource names (channel aliases or view names). Never inherited by wildcard.
+     * Approved logical resources. Never inherited by wildcard. Empty until the first approval.
      *
-     * @minItems 1
      * @maxItems 64
      */
-    resources: string[];
+    resources: IntegrationResource[];
     /**
      * Absent only for explicitly approved ongoing production access.
      */
     expiresAt?: string;
+    /**
+     * Set by the recovery sweep once expiry has passed; enforcement itself is the UTC check on every call.
+     */
+    expiredAt?: string;
     approvedBy?: string;
+    approvedAt?: string;
     /**
      * Optimistic-concurrency version; approvals compare it with the reviewed value.
      */
@@ -55,18 +60,42 @@ export interface DataGrantV2 {
     pendingRequestId?: string;
     provisioning: DataGrantV2Provisioning;
     /**
-     * Database grants: secretref://tenant/{t}/app/{a}/env/{env}/source/{s}.
+     * Database grants: secretref://tenant/{t}/app/{a}/env/{env}/source/{s}. Set only by a successful publish and removed by cleanup.
      */
     credentialRef?: string;
     /**
      * Database grants: the deterministic per tenant/app/environment/source principal.
      */
     mintedPrincipal?: string;
+    createdAt: string;
+    updatedAt: string;
     /**
-     * SaaS grants: the connection installation this environment maps to.
+     * @deprecated
+     * Whose authority an operation runs under. Fixed per operation; callers never choose it.
+     */
+    identityMode?: 'app' | 'user';
+    /**
+     * @deprecated
+     * Deprecated: a SaaS grant runs on the connection's single installation; the control plane never writes it.
      */
     installation?: string;
 }
+/**
+ * One approved logical resource: a channel alias, the fixed Gmail `inbox` alias, or a warehouse view alias with the approved columns.
+ */
+export interface IntegrationResource {
+    /**
+     * Tenant-wide logical alias of a connection (governance sourceId) or of a resource under it.
+     */
+    name: string;
+    /**
+     * warehouse.view.read only: the approved columns of the view.
+     *
+     * @minItems 1
+     * @maxItems 32
+     */
+    columns?: string[];
+}
 export interface DataGrantV2Provisioning {
     status: DataGrantV2ProvisioningStatus;
     /**
@@ -77,6 +106,21 @@ export interface DataGrantV2Provisioning {
      * Sanitized reason; never a provider error body.
      */
     lastError?: string;
+    /**
+     * Conditional worker lease serialising database mutations (120 s).
+     */
+    lease?: {
+        until: string;
+        owner: string;
+    };
+    /**
+     * Provider-side cleanup after revocation or expiry; a FAILED cleanup waits for an admin retry-cleanup.
+     */
+    cleanup?: {
+        status: DataGrantV2CleanupStatus;
+        attempts: number;
+        lastError?: string;
+    };
 }
 /** True iff from→to is a legal DataGrantV2Status edge (schema x-transitions). */
 export declare function canTransitionDataGrantV2Status(from: string, to: string): boolean;

package/dist/gen-ts/integration-error-details.d.ts

@@ -3,9 +3,9 @@
  */
 export type IntegrationErrorCategory = 'AUTH_REQUIRED' | 'FORBIDDEN' | 'NOT_FOUND' | 'CONFLICT' | 'VALIDATION_FAILED' | 'RATE_LIMITED' | 'UNAVAILABLE';
 /**
- * Stable reason codes. SEND_OUTCOME_UNKNOWN: dispatch happened but the outcome is unknown; never re-post automatically. SEND_KEY_REUSED: the idempotency key was seen with a different payload or subject. GRANT_DENIED: IT denied the request. TOKEN_REFRESH_PENDING: another call holds the refresh lease; retry shortly. REQUEST_PENDING: a different request for this grant is still open.
+ * Stable reason codes. SEND_OUTCOME_UNKNOWN: dispatch happened but the outcome is unknown; never re-post automatically. SEND_KEY_REUSED: the idempotency key was seen with a different payload or subject. GRANT_DENIED: IT denied the request. TOKEN_REFRESH_PENDING: another call holds the refresh lease; retry shortly. REQUEST_PENDING: a different request for this grant is still open. INPUT_INVALID: the operation input failed its bounds. IDEMPOTENCY_KEY_REQUIRED: a send without a UUID idempotencyKey. SEND_IN_PROGRESS: a retry arrived while the first send of that key is still running. CONNECTION_NOT_FOUND / APP_NOT_FOUND / GRANT_NOT_FOUND: the named record does not exist. AUTH_REQUIRED: no verified caller. UNAVAILABLE: the governance dependency (store, provider seam) is unreachable.
  */
-export type IntegrationErrorCode = 'USER_CONNECTION_REQUIRED' | 'USER_RECONNECT_REQUIRED' | 'GRANT_NOT_READY' | 'GRANT_EXPIRED' | 'GRANT_REVOKED' | 'CONNECTION_DISABLED' | 'OPERATION_NOT_DECLARED' | 'RESOURCE_NOT_APPROVED' | 'IDENTITY_MODE_MISMATCH' | 'SEND_OUTCOME_UNKNOWN' | 'SEND_KEY_REUSED' | 'PROVIDER_RATE_LIMITED' | 'PROVIDER_UNAVAILABLE' | 'REQUEST_TOO_LARGE' | 'RESULT_TOO_LARGE' | 'DEADLINE_EXCEEDED' | 'APP_ACCESS_REQUIRED' | 'GRANT_DENIED' | 'TOKEN_REFRESH_PENDING' | 'REQUEST_PENDING';
+export type IntegrationErrorCode = 'USER_CONNECTION_REQUIRED' | 'USER_RECONNECT_REQUIRED' | 'GRANT_NOT_READY' | 'GRANT_EXPIRED' | 'GRANT_REVOKED' | 'CONNECTION_DISABLED' | 'OPERATION_NOT_DECLARED' | 'RESOURCE_NOT_APPROVED' | 'IDENTITY_MODE_MISMATCH' | 'SEND_OUTCOME_UNKNOWN' | 'SEND_KEY_REUSED' | 'PROVIDER_RATE_LIMITED' | 'PROVIDER_UNAVAILABLE' | 'REQUEST_TOO_LARGE' | 'RESULT_TOO_LARGE' | 'DEADLINE_EXCEEDED' | 'APP_ACCESS_REQUIRED' | 'GRANT_DENIED' | 'TOKEN_REFRESH_PENDING' | 'REQUEST_PENDING' | 'INPUT_INVALID' | 'IDEMPOTENCY_KEY_REQUIRED' | 'SEND_IN_PROGRESS' | 'CONNECTION_NOT_FOUND' | 'APP_NOT_FOUND' | 'GRANT_NOT_FOUND' | 'AUTH_REQUIRED' | 'UNAVAILABLE';
 /**
  * The `error` member of an integration failure response `{error, requestId}` on the execute/connect routes; the SDK maps it onto HarbourError(category, message, details). `category` is the app-SDK HarbourErrorCategory (not the deployment pipeline's dot-path error-category registry), with the HTTP status fixed per category: 401 AUTH_REQUIRED, 403 FORBIDDEN (denied/revoked/expired), 404 NOT_FOUND (unknown app/connection/resource), 409 CONFLICT (pending provisioning/consent/concurrent request), 400 or 413 VALIDATION_FAILED (invalid input / size overflow), 429 RATE_LIMITED (+ Retry-After header), 503 UNAVAILABLE. `details.code` is the closed stable reason set; `message` is human-facing and never carries provider error bodies, tokens or SQL.
  */

package/dist/gen-ts/integration-execute-request.d.ts

@@ -1,5 +1,5 @@
 /**
- * Body of POST /_harbour/integrations/execute (app SDK), forwarded unchanged to the governance development and runtime execute routes. Exactly one declared operation against one declared resource. The identity mode is NOT a caller field: it is fixed by the operation and enforced from the approved grant; any identity/userId/scope field is rejected by additionalProperties. Per-operation input bounds: slack.channel.history {limit? 1..15, default 15}; slack.message.post {text 1..4000 chars} and a required idempotencyKey retained across retries of one explicit Send; warehouse.view.read {columns 1..32, limit? 1..1000, default 100}. Transport limits (not expressible here): request <= 16 KiB, total deadline 10 s.
+ * Body of POST /_harbour/integrations/execute (app SDK), forwarded unchanged to the governance development and runtime execute routes. Exactly one declared operation against one declared resource. The identity mode is NOT a caller field: it is fixed by the operation and enforced from the approved grant; any identity/userId/scope field is rejected by additionalProperties. Per-operation input bounds: slack.channel.history {limit? 1..15, default 15}; slack.message.post {text 1..4000 chars} and a required idempotencyKey retained across retries of one explicit Send; gmail.thread.list {limit? 1..15, default 15}; gmail.message.read {messageId}; warehouse.view.read {columns 1..32, limit? 1..1000, default 100}. Transport limits (not expressible here): request <= 16 KiB, total deadline 10 s.
  */
 export type IntegrationExecuteRequest = {
     /**
@@ -9,7 +9,7 @@ export type IntegrationExecuteRequest = {
     /**
      * Closed operation set. Extending it is a contracts change.
      */
-    operation: 'slack.channel.history' | 'slack.message.post' | 'warehouse.view.read';
+    operation: 'slack.channel.history' | 'slack.message.post' | 'gmail.thread.list' | 'gmail.message.read' | 'warehouse.view.read';
     /**
      * Tenant-wide logical alias of a connection (governance sourceId) or of a resource under it.
      */
@@ -17,6 +17,10 @@ export type IntegrationExecuteRequest = {
     input: {
         limit?: number;
         text?: string;
+        /**
+         * gmail.message.read: the Gmail message id a gmail.thread.list result named.
+         */
+        messageId?: string;
         /**
          * @minItems 1
          * @maxItems 32

package/dist/gen-ts/integration-execute-result.d.ts

@@ -1,5 +1,5 @@
 /**
- * The `data` member of a successful execute response `{data, requestId}`; the SDK unwraps `data`. Exactly one of the three operation results: slack.channel.history -> {messages, hasMore} (plain text/IDs/time only, never the provider payload); slack.message.post -> {messageId}; warehouse.view.read -> {rows} (decimal/64-bit values as strings, dates as ISO strings). An unknown send outcome is never a result; it is an error with details.code SEND_OUTCOME_UNKNOWN. Results over 1 MiB are rejected, not truncated.
+ * The `data` member of a successful execute response `{data, requestId}`; the SDK unwraps `data`. Exactly one of the five operation results: slack.channel.history -> {messages, hasMore} (plain text/IDs/time only, never the provider payload); slack.message.post -> {messageId}; gmail.thread.list -> {threads, hasMore} (newest inbox threads; each `messageId` is the thread's newest message, what gmail.message.read takes); gmail.message.read -> {id, threadId, subject, from, to, date, text, truncated} (headers plus the plain text with html stripped, cut at 16 KiB with `truncated` set); warehouse.view.read -> {rows} (decimal/64-bit values as strings, dates as ISO strings). An unknown send outcome is never a result; it is an error with details.code SEND_OUTCOME_UNKNOWN. Results over 1 MiB are rejected, not truncated.
  */
 export type IntegrationExecuteResult = {
     /**
@@ -8,6 +8,18 @@ export type IntegrationExecuteResult = {
     messages?: ChannelMessage[];
     hasMore?: boolean;
     messageId?: string;
+    /**
+     * @maxItems 15
+     */
+    threads?: GmailThread[];
+    id?: string;
+    threadId?: string;
+    subject?: string;
+    from?: string;
+    to?: string;
+    date?: string;
+    text?: string;
+    truncated?: boolean;
     /**
      * @maxItems 1000
      */
@@ -21,3 +33,11 @@ export interface ChannelMessage {
     authorId: string;
     createdAt: string;
 }
+export interface GmailThread {
+    id: string;
+    messageId: string;
+    subject: string;
+    from: string;
+    date: string;
+    snippet: string;
+}

package/dist/gen-ts/kit-bundle-manifest.d.ts

@@ -13,10 +13,18 @@ export interface KitBundleManifest {
     kitVersion: string;
     sdk: {
         package: '@harbour/app-sdk';
+        /**
+         * The SDK package version the tarball was packed from (informational; compatibility is decided by tarballSha256).
+         */
+        version?: string;
         /**
          * SHA-256 of the SDK tarball baked into this bundle; the CodeBuild gate compares it with the pipeline's own tarball.
          */
         tarballSha256: string;
+        /**
+         * Where the CLI downloads the SDK tarball from when it is not shipped inline; the bytes are verified against tarballSha256 before install. The publisher may name the location by content address (for example an OCI blob whose path ends in sha256:<tarballSha256>).
+         */
+        url?: string;
     };
     images: {
         appGateway: ImageDigestReference;

package/dist/gen-ts/kit-lock.d.ts

@@ -20,10 +20,18 @@ interface KitBundleManifest {
     kitVersion: string;
     sdk: {
         package: '@harbour/app-sdk';
+        /**
+         * The SDK package version the tarball was packed from (informational; compatibility is decided by tarballSha256).
+         */
+        version?: string;
         /**
          * SHA-256 of the SDK tarball baked into this bundle; the CodeBuild gate compares it with the pipeline's own tarball.
          */
         tarballSha256: string;
+        /**
+         * Where the CLI downloads the SDK tarball from when it is not shipped inline; the bytes are verified against tarballSha256 before install. The publisher may name the location by content address (for example an OCI blob whose path ends in sha256:<tarballSha256>).
+         */
+        url?: string;
     };
     images: {
         /**