@fourier-labs/harbour-contracts 0.47.0 → 0.50.0

package/README.md

@@ -25,7 +25,7 @@ exist here first.
 | `error-envelope.schema.json` | The failure envelope emitted once per FAILED transition | §2.1 |
 | `error-category.enum.json` | Closed failure-category enum + per-category `retryable` registry | §2.2 |
 | `artifact-contract.schema.json` | Build output contract (the provider-portability seam), including the digest-pinned well-defined app manifest reference | §3 |
-| `well-defined-app-manifest.schema.json` | Versioned runtime wiring for static, full-stack, and browser-first apps: workloads, schedules, queues, and service bindings | Well-defined apps P0 |
+| `well-defined-app-manifest.schema.json` | Versioned runtime wiring for static, full-stack, and browser-first apps: workloads, schedules, queues, service bindings, language runtime, browser capabilities, and route authentication | Well-defined apps P0 |
 | `version-state.schema.json` | State machine T1a — states, legal transitions, versionId format | §1 |
 | `env-bindings.schema.json` | `EnvBindings` / `Target` / `Binding` (BYOC-complete) | §4.2.2 |
 | `kvs-routing-entry.schema.json` | CloudFront KVS routing value (`{static, api}`) | §8 |
@@ -42,6 +42,32 @@ exist here first.
 | `integration-execute-request`, `integration-execute-result`, `integration-connect-result`, `integration-error-details` | App SDK integrations wire contract on `/_harbour/integrations/*`: per-operation input bounds, the five result shapes, consent states and the closed `details.code` reason set | Dev kit §4, §8 |
 | `saas-connection.schema.json`, `data-grant-v2.schema.json` | Tenant SaaS connection record (one installation and channel map per tenant and provider) and the additive `harbour.data-grant/2.0` grant record with structured resources and provisioning lease/cleanup (status machine generated; legacy `data-grant` untouched) | Dev kit §5 |
 | `kit-bundle-manifest.schema.json`, `kit-lock.schema.json` | Published kit bundle identity (SDK tarball digest plus optional `sdk.version` and https `sdk.url` download location) and the committed `.harbour/kit.lock.json` the CodeBuild SDK-vendoring gate compares against | Dev kit §3 |
+| `deploy-response.schema.json` | 202 Accepted body for `POST /v1/tenants/{tenant}/apps/{app}/deployments`, returned only after the authoritative QUEUED version exists and its SQS message is accepted | — |
+| `deployment-source.schema.json` | Credential-free GitHub source in the `DeployRequest` body; credentials are resolved internally by MaterializeSource | — |
+| `deployment-environment.schema.json` | Public environment accepted by the preview APIs (`preview` only; production is reachable only through promotion) | — |
+| `api-error-response.schema.json` | Safe JSON error body for Deploy/Status Lambda 4xx/5xx responses; distinct from the internal `ErrorEnvelope` | — |
+| `deployment-status-request.schema.json` | Validated path parameters for `GET /v1/tenants/{tenant}/apps/{app}/deployments/{versionId}` | — |
+| `deployment-status-response.schema.json` | 200 OK body for GET status: that exact immutable version, with the `progress` trail, `deployTarget` and `diagnosticRef` | — |
+| `deployment-status-failure.schema.json` | Frontend-safe failure projection nested in a failed status response; a digest-bound `diagnosticRef` locates the redacted diagnostic | — |
+| `promotion-request.schema.json` | Body for `POST /v1/tenants/{tenant}/apps/{app}/promotions`; repository identity comes from stored records, not the caller | ADR 0003 |
+| `promotion-response.schema.json` | 202 Accepted body returned once the production version and its durable idempotency binding exist | ADR 0003 |
+| `transform-report.schema.json` | Structured output an agent must return from one transformation attempt; handed to the agent as its output schema and re-validated by the control plane | — |
+| `transform-parked-result.schema.json` | Sequential-preview result after a durable checkpoint when builder input is required; not a successful report | — |
+| `builder-input-proposal.schema.json` | Value-free proposal emitted when sequential preview cannot continue without builder-owned input | — |
+| `deployment-continuation.schema.json` | Immutable reference admitting one child deployment from a parked input request; never credential values | — |
+| `security-scan-input.schema.json` | Input to the Security Assurance machine: SOURCE (M1) scans an ingested commit, ARTIFACT (M2) scans built outputs | Security Assurance §2 |
+| `security-verdict.schema.json` | Security Assurance decision; `BLOCKED` surfaces as the non-retryable `gate.security-scan` category | Security Assurance §2 |
+| `data-source.schema.json` | Admin-registered external data source; `credentialRef` is a secretref URI and the credential never crosses this boundary | Data-Access MVP |
+| `data-dependency.schema.json` | One external data dependency of an app, declared or detected, classified against the tenant's data-source inventory | Data-Access MVP |
+| `secret-reference.schema.json` | Named secret slot an app depends on; only the reference and its lifecycle cross, never the value | Secret-Manager MVP |
+| `ai-callsite-inventory.schema.json` | Immutable, sanitized AI call-site discovery for one exact deployment version (detection only) | AI governance |
+| `ai-runtime-contract.schema.json` | Immutable runtime contract derived by an AI Governance PLAN decision; scoped configuration plus a Secrets Manager reference | AI governance |
+| `ai-policy-snapshot.schema.json` | Immutable, content-addressed AI policy snapshot consumed by the AI Gateway | AI governance |
+| `ai-gateway-key-lookup.schema.json` | Value-free Gateway authentication metadata for one version-scoped Harbour key | AI governance |
+| `ai-trace-event.schema.json` | Value-free asynchronous AI Gateway trace metadata (v1); raw prompts and responses never enter the queue | AI governance |
+| `ai-transform-event.schema.json` | Checksum-bound deterministic AI interception task input carrying the ordered PLAN interception plan | AI governance |
+| `ai-transform-result.schema.json` | Bounded deterministic interception result: descriptors and digest evidence only | AI governance |
+| `ai-verification-evidence.schema.json` | Bounded, value-free evidence submitted by deployment verification for one governed version | AI governance |
 
 Runtime resource profiles are a closed contract shared by transformation, artifacts, and
 well-defined application manifests. The supported profiles are `standard`, `memory-1g`, and
@@ -111,7 +137,7 @@ consumer cutover evidence.
 
 ## Consuming
 
-- **Go:** `go get github.com/Fourier-Labs-AI/harbour-contracts/gen-go@v0.1.0`
+- **Go:** `go get github.com/Fourier-Labs-AI/harbour-contracts/gen-go@v0.50.0`
 
   Two things make this work, and the second is not the obvious one.
 
@@ -148,7 +174,7 @@ consumer cutover evidence.
   Without the above, `go get` fails with `Repository not found` — which reads as a
   missing tag, not as missing access.
 
-- **TS:** `npm i @fourier-labs/harbour-contracts` — published from the tag by CI.
+- **TS:** `npm i @fourier-labs/harbour-contracts` — published from the tag by CI. The hand-written AI policy resolver (`resolver/index.ts`) ships in the same package as the `@fourier-labs/harbour-contracts/resolver` subpath export (`package.json` `exports`).
 
 ## Notes
 

package/contract-release.json

@@ -1,12 +1,12 @@
 {
   "schema": "harbour.contract-release/1.0",
-  "repositoryVersion": "0.47.0.0",
-  "publishVersion": "0.47.0",
-  "publishTag": "v0.47.0",
-  "schemasDigest": "sha256:9d059261d1fbe550fbd4e265287397d6913912c3d5ea6570b2b29d2e6619de4f",
+  "repositoryVersion": "0.50.0.0",
+  "publishVersion": "0.50.0",
+  "publishTag": "v0.50.0",
+  "schemasDigest": "sha256:c77dcbf9daad9c66141e9cb8215760a098afd1bf3e665e247f6a4df8db2bcd4f",
   "aiFixturesDigest": "sha256:edac31c92e146ca1c40130f2fb5649db82e24b8cd1ac758153b90612052fddb6",
-  "generatedGoDigest": "sha256:5892b40bfbac4c9a86f671a0eb54ef530f65ba97e5abc0b3713495bbbdfbf4e2",
-  "generatedTypeScriptDigest": "sha256:0bb0c87edaa9399cac1c927ba80dc25ff96f7364678e7f0a17599a34a26c170b",
+  "generatedGoDigest": "sha256:545d8b23ab712e75285ea962851bcf8f08f5baeb018bea6f7ba4e1ca2fe80ed0",
+  "generatedTypeScriptDigest": "sha256:1e47c3956a3468531690693ff50ff7947a798af01e01d25659401f727cb934c4",
   "generatedExclusions": {
     "gen-go/contract_release.go": "contains the generated aggregate digests (self-reference)",
     "gen-ts/contract-release.ts": "contains the generated aggregate digests (self-reference)"
@@ -31,7 +31,7 @@
     "schema/ai-transform-result.schema.json": "sha256:244e380a36957ab2dcb526ea22aaecb56b53664ce1fda6934d0021c084c99133",
     "schema/ai-verification-evidence.schema.json": "sha256:bdbc762df256d2a8dd0bdda60d4d13915ce40034cd756af9515871d145f10ad9",
     "schema/api-error-response.schema.json": "sha256:3d43d5bdf0b59c944e20509d832e6776c3ecdba4d6c245a9118bbe52062a8304",
-    "schema/app-integrations-declaration.schema.json": "sha256:931c63d6a473be29e74ee7fd657649172966d483c0448f4dcaa5512dce9d06bb",
+    "schema/app-integrations-declaration.schema.json": "sha256:1a6ac2e7d77a4d4dcbce8b937747f125081413f819ffee9e27e8b950a436cb22",
     "schema/artifact-contract.schema.json": "sha256:8047b461a1c6d07bbe867a259c57bdf5cc0fdf282cf842ec7b683a9e93713b10",
     "schema/binding-classification-subject.schema.json": "sha256:a8825ce652e7e00a18759c4249bd5bcd0cae552dd58440513f867e87f685133c",
     "schema/builder-input-proposal.schema.json": "sha256:fe85cffa6d76b1e1effe1f5d75525f8fe0e1eaa3be4a304e491aa23ad72c0e72",
@@ -52,22 +52,22 @@
     "schema/error-envelope.schema.json": "sha256:75dccda7dd16fdf8435deda53fc7dbcdc109b65114617a17f11763010c656f90",
     "schema/integration-connect-result.schema.json": "sha256:3f254b67ef739dc1fa395bdc8c4dc93359b16d481dba2a2d777aa5b6f34b7af8",
     "schema/integration-error-details.schema.json": "sha256:09cebaddb7f88e63cbebaa1cada5f91057ae4dc4370e973ef38f7f11c6323284",
-    "schema/integration-execute-request.schema.json": "sha256:da9a701c931edf5f955495f1542f37423ae2bab030034cf90feb0f5f18d094f6",
-    "schema/integration-execute-result.schema.json": "sha256:232d3710c8e550d2946b5ab817b90b538fd0928db9b10b02b166623c59cb0240",
+    "schema/integration-execute-request.schema.json": "sha256:658eb66a15bba4fc81eec208c713d5d141d159a6429306909304d5182f728bec",
+    "schema/integration-execute-result.schema.json": "sha256:766146779c01ee1dbdd2161c5dc594f43ccaf322762352bb0dc5b80bcb3275b5",
     "schema/kit-bundle-manifest.schema.json": "sha256:c15e28ae028dbd1c262427b9c797142e19b1f38fa36b4ecfe187e32c20a174ec",
     "schema/kit-lock.schema.json": "sha256:5e24b76660f83990af7a6c037af350c3850ee439ef956f65a0360facbdcdd997",
     "schema/kvs-routing-entry.schema.json": "sha256:b75f3a5dfa93a428b2764e03222b66b6ef2bed980f8bac8ffac54afdf3526bc5",
     "schema/promotion-request.schema.json": "sha256:00e96dfd8ddbdba88ea222941d43f3609ff6c815a79e34f6705cab458101c969",
     "schema/promotion-response.schema.json": "sha256:4129712d2e29d6ef21d93d4bd0bacfd60ada3f2ee0ade852824e64346b817634",
-    "schema/saas-connection.schema.json": "sha256:78913c3221166cfecea01c807f0c6e291469501926483fa3e229b8b7b0fdd201",
+    "schema/saas-connection.schema.json": "sha256:fa62fc6e28124120c71ebc36e257263ba8820d48b7d505d54ac53bd812fdd9ee",
     "schema/sanitized-binding-evidence.schema.json": "sha256:1191ab88e2764df927e5f17837674cebebe068d480da2b2fdb390e589f96b51f",
     "schema/secret-reference.schema.json": "sha256:db4e3c2c6a2dbd72d7ea0f9c91cb3b2343a7e67b601996c6818b2ef08e440895",
     "schema/security-scan-input.schema.json": "sha256:83502dffb3c07ac2e0698928e6dc123f454fc667d4aacd336bcad6944ef2ac3d",
     "schema/security-verdict.schema.json": "sha256:ec3c2d5c9df3601aeed0909b36c7f427469c7f0eeb3295c5809b96d09bf3fc26",
     "schema/transform-parked-result.schema.json": "sha256:11729980d4c89d4a9e18f5f213232cd3359739c85626b36c20c2a37ba794c9af",
-    "schema/transform-report.schema.json": "sha256:5943c90ad7a8b473119dde5879c59ed384d5dc19253b90bc3507dd1ff4dd9abe",
+    "schema/transform-report.schema.json": "sha256:858da48fa7fe97d8d06267bb3435d71ba307133b246cb020f5b473bb488c445a",
     "schema/version-state.schema.json": "sha256:3b190007e2f8e3821c41ef11c6f5b226da7d5a18d34d4077f4618004846fd444",
-    "schema/well-defined-app-manifest.schema.json": "sha256:75a06690411880e670f133066a7a469150b53560b9dafa2f066a04485e4b50a0"
+    "schema/well-defined-app-manifest.schema.json": "sha256:40f1bfea912dd85a05a0a3be2f6becadaf8ae3c5de9d5782ff1c8dd1bd83485f"
   },
   "aiFixtures": {
     "fixtures/ai/adversarial-binding-classification-value.json": "sha256:ca009f3f6162a9d93b4ab416d52c1fba12a8a15aca5aed956c5fdcf2171b1e28",
@@ -105,8 +105,8 @@
     "gen-go/contracts_test.go": "sha256:56376287cb1548be1b35ab4c65d6f0b558c5d34885f7a47cb3d9e8d786607bf5",
     "gen-go/doc.go": "sha256:c17bc2d39ed175ce7105c68305f8ae7152f659eb7cd187ecceee7698eb3a65dd",
     "gen-go/error_category.go": "sha256:b2ddea22dcfa030f1a45e721e635485b0bd816cf1f38e7654628a653f5ed4583",
-    "gen-go/schema_documents.go": "sha256:bc8a5119241953827affa45588a1492fdf1e74bb9119564202baf424596d0d86",
-    "gen-go/types.go": "sha256:bd8da0367179571b44a1a1705d1e7628d38d06eef9fc0a50d5908363210fbebe",
+    "gen-go/schema_documents.go": "sha256:66055e0d4354f73d922ee17984de8df065db665f93182b87fcd8a6a94ae94300",
+    "gen-go/types.go": "sha256:07429b30905aacfdb95ca9ddea5ae04e3cc7fcc89e69b84f05f2833f4b8339be",
     "gen-go/version_state.go": "sha256:4ef8abb126414c0025cf2c59bc9c79a74ef4a2ff89e8f316cbf05acc872371c1"
   },
   "generatedTypeScript": {
@@ -131,13 +131,13 @@
     "gen-ts/ai-transform-result.ts": "sha256:208c66b2aeb425c0cbcc18b7191f6e8989443f2b2c1690648e0e06cc1448ce25",
     "gen-ts/ai-verification-evidence.ts": "sha256:979439d77f8b47631d1eb3b6c3c54ea6fec41089d2a51dc815fd370b1c4917fc",
     "gen-ts/api-error-response.ts": "sha256:0fd73be282e7a5d72d6c343a4e64d09c232556b16161167f0cffd6278ed7e3d3",
-    "gen-ts/app-integrations-declaration.ts": "sha256:9d31f54867d0aec2cada067da3b77ce44ee4f838e367929422a9669e0828497e",
+    "gen-ts/app-integrations-declaration.ts": "sha256:aabebdbffc70dd87017f1c72e0b8713f9cef506ba5258279b3a1405185875141",
     "gen-ts/artifact-contract.ts": "sha256:4a6dc6d2caaeed4bb2066cc8a333e6e09e5a0d4745e0b1038293d54ab9403aeb",
     "gen-ts/binding-classification-digest-helper.ts": "sha256:40fc7d85b4c3f3ffc5caf7d7950c62d013c83ee42058c7453b2100d95817f167",
     "gen-ts/binding-classification-subject.ts": "sha256:c409a3fd7b942b50419632c51d9a79474fb30d6374bdc79c0e25c73618e800c3",
     "gen-ts/builder-input-proposal.ts": "sha256:b0108c3787873d3cf1a39f00967379418a6766275d3474cfa55f5a9d93ead174",
     "gen-ts/data-dependency.ts": "sha256:0572c31d7ae9088eccc104eee1a205bf176d1d6dacfaf0f290d666024e284966",
-    "gen-ts/data-grant-v2.ts": "sha256:06ff153d3cf551a7f9a49a01e766f084e4cf51d981299e12f7ef1dedd824c937",
+    "gen-ts/data-grant-v2.ts": "sha256:d55491e8d1a73d8999a43904344760de9c6eb2ce500b1e942d49261a9c67808f",
     "gen-ts/data-grant.ts": "sha256:2358579d8aa1e57b01a6f2b0eacce5531e7f21ef226404c9809925365e0d6155",
     "gen-ts/data-source.ts": "sha256:77d6bb3b0eaa355789c5d97dd1f548734add6950329dc69549350b8d17c8d582",
     "gen-ts/deploy-request.ts": "sha256:0214faa8be6680f0bfc117d5ce67c1a59fcc18bd0ea4bc840e03e7d051fa9ab6",
@@ -155,23 +155,23 @@
     "gen-ts/index.ts": "sha256:982599819309370072af19f1c248a033c13b17a6ee9006272d3436ab87b0db21",
     "gen-ts/integration-connect-result.ts": "sha256:4b10f169b6e1af364e9b418de21caa9fadbfb77b43cbff77d741cfae0b52180c",
     "gen-ts/integration-error-details.ts": "sha256:8243f5871f376d1cab4d90e07f3151d148fb03c704168dbccdfe6c9fe76bce83",
-    "gen-ts/integration-execute-request.ts": "sha256:b8b5e271453064a6a1b62d172b2c9a48b2753b3778e29e78ee751cf5d7446cb9",
-    "gen-ts/integration-execute-result.ts": "sha256:bf33b23c6bb121d8e43ea486cf80922d6010919676f0f6206045a2750dda39b4",
+    "gen-ts/integration-execute-request.ts": "sha256:d884e8368a5c4b8495312733fac3d28870a2cd48453c8f69e92a5d50273df516",
+    "gen-ts/integration-execute-result.ts": "sha256:4aaf6a9688f9dfdbc87a408556b62f822518acf5b76548076adb55393c0863b4",
     "gen-ts/kit-bundle-manifest.ts": "sha256:9041b32af3df781ca6800bc14c3719e5e54c81dff370633454ac3ad27432eb58",
     "gen-ts/kit-lock.ts": "sha256:de4ae82bac7bd234a3230ae671962e80eed6542d695a032a442673659dc6be5e",
     "gen-ts/kvs-routing-entry.ts": "sha256:d92e85ee9f257d77850d1d3aac9438e2055f38084ff84a48fcedae239d47d4ca",
     "gen-ts/promotion-request.ts": "sha256:9db88cef67f777a16bac628039ec3f582acb9e8cfff6fb592b30d0a0e55abc68",
     "gen-ts/promotion-response.ts": "sha256:f1c9cafac96faeb02a443a31786f67714e818f38d90108e7af41958396524d6f",
-    "gen-ts/saas-connection.ts": "sha256:c7d80c9ef0c6c93232fbcc2d79143e5dcb3ab0b1c81ee48dcf0a01e5a3907dcf",
+    "gen-ts/saas-connection.ts": "sha256:62b5c5ffd125099bae46142013461c9ac3f75c2d27ab72cd4842a937f3e2f308",
     "gen-ts/sanitized-binding-digest-helper.ts": "sha256:c47d7fdc20500e2e72c23fe39ecdd610fc397c47fcba51335ebec3c380fe6872",
     "gen-ts/sanitized-binding-evidence.ts": "sha256:f3fb7b1d7d2e0929eb0ea981eaf32db3104010647185f6ae59f67167d42538a9",
     "gen-ts/secret-reference.ts": "sha256:731fbcde7315cb4128d5b01bdbe6e6f248f13c7ad8dea04a3a4e927ac4890198",
     "gen-ts/security-scan-input.ts": "sha256:b31f048be04c34b40f49d3b3ba53277e473cd435ae9216ba3a3b4dac69fb5685",
     "gen-ts/security-verdict.ts": "sha256:fea950cddbd12fe0218e2573c9a29c6748d56612a464559f1e6d688fa97f68c7",
     "gen-ts/transform-parked-result.ts": "sha256:6279e27cee8d75c29f3ede45580fef1daa0ca300867a78e43ead8a7689ec613f",
-    "gen-ts/transform-report.ts": "sha256:a4f7f895342cd63048b2add63393a1251abb3e97f057b00e3ebd3f96fd1a510e",
+    "gen-ts/transform-report.ts": "sha256:005a10b34b89f055c3aae4bf54c095bbca7a9e15bd9b406b61a9eaafffc37a61",
     "gen-ts/version-state-machine.ts": "sha256:c67af3e86ac306743345b850dfd3ae5201c19d10c40e2c149cf8c38258320d5f",
     "gen-ts/version-state.ts": "sha256:a835112930299e7b593a1b8810b7414f6c9e809da2092306c743128170a3b702",
-    "gen-ts/well-defined-app-manifest.ts": "sha256:f29f8f2d0783e9e49d0546d65c2bedee2a6c2cebba0ec291ad52d9b67cb3a2fa"
+    "gen-ts/well-defined-app-manifest.ts": "sha256:2b72a39c2fa8e76239634d0478dc0da05446e74e944950eacf999b78876455c6"
   }
 }

package/dist/gen-ts/app-integrations-declaration.d.ts

@@ -28,6 +28,7 @@ export interface DeclaredConnection {
         'slack.message.post'?: AppModeChannelOperation;
         'gmail.thread.list'?: UserModeChannelOperation;
         'gmail.message.read'?: UserModeChannelOperation;
+        'gmail.message.send'?: UserModeChannelOperation;
         'warehouse.view.read'?: AppModeViewOperation;
     };
 }

package/dist/gen-ts/contract-release.d.ts

@@ -1,7 +1,7 @@
-export declare const ContractRepositoryVersion: "0.47.0.0";
-export declare const ContractPublishVersion: "0.47.0";
-export declare const ContractPublishTag: "v0.47.0";
-export declare const ContractSchemasDigest: "sha256:9d059261d1fbe550fbd4e265287397d6913912c3d5ea6570b2b29d2e6619de4f";
+export declare const ContractRepositoryVersion: "0.50.0.0";
+export declare const ContractPublishVersion: "0.50.0";
+export declare const ContractPublishTag: "v0.50.0";
+export declare const ContractSchemasDigest: "sha256:c77dcbf9daad9c66141e9cb8215760a098afd1bf3e665e247f6a4df8db2bcd4f";
 export declare const ContractAiFixturesDigest: "sha256:edac31c92e146ca1c40130f2fb5649db82e24b8cd1ac758153b90612052fddb6";
-export declare const ContractGeneratedGoDigest: "sha256:5892b40bfbac4c9a86f671a0eb54ef530f65ba97e5abc0b3713495bbbdfbf4e2";
-export declare const ContractGeneratedTypeScriptDigest: "sha256:0bb0c87edaa9399cac1c927ba80dc25ff96f7364678e7f0a17599a34a26c170b";
+export declare const ContractGeneratedGoDigest: "sha256:545d8b23ab712e75285ea962851bcf8f08f5baeb018bea6f7ba4e1ca2fe80ed0";
+export declare const ContractGeneratedTypeScriptDigest: "sha256:1e47c3956a3468531690693ff50ff7947a798af01e01d25659401f727cb934c4";

package/dist/gen-ts/contract-release.js

@@ -1,9 +1,9 @@
 /* eslint-disable */
 // Code generated by tools/gen/gen.mjs from schema/*.json. DO NOT EDIT.
-export const ContractRepositoryVersion = "0.47.0.0";
-export const ContractPublishVersion = "0.47.0";
-export const ContractPublishTag = "v0.47.0";
-export const ContractSchemasDigest = "sha256:9d059261d1fbe550fbd4e265287397d6913912c3d5ea6570b2b29d2e6619de4f";
+export const ContractRepositoryVersion = "0.50.0.0";
+export const ContractPublishVersion = "0.50.0";
+export const ContractPublishTag = "v0.50.0";
+export const ContractSchemasDigest = "sha256:c77dcbf9daad9c66141e9cb8215760a098afd1bf3e665e247f6a4df8db2bcd4f";
 export const ContractAiFixturesDigest = "sha256:edac31c92e146ca1c40130f2fb5649db82e24b8cd1ac758153b90612052fddb6";
-export const ContractGeneratedGoDigest = "sha256:5892b40bfbac4c9a86f671a0eb54ef530f65ba97e5abc0b3713495bbbdfbf4e2";
-export const ContractGeneratedTypeScriptDigest = "sha256:0bb0c87edaa9399cac1c927ba80dc25ff96f7364678e7f0a17599a34a26c170b";
+export const ContractGeneratedGoDigest = "sha256:545d8b23ab712e75285ea962851bcf8f08f5baeb018bea6f7ba4e1ca2fe80ed0";
+export const ContractGeneratedTypeScriptDigest = "sha256:1e47c3956a3468531690693ff50ff7947a798af01e01d25659401f727cb934c4";

package/dist/gen-ts/data-grant-v2.d.ts

@@ -33,7 +33,7 @@ export interface DataGrantV2 {
      *
      * @maxItems 5
      */
-    operations: ('slack.channel.history' | 'slack.message.post' | 'gmail.thread.list' | 'gmail.message.read' | 'warehouse.view.read')[];
+    operations: ('slack.channel.history' | 'slack.message.post' | 'gmail.thread.list' | 'gmail.message.read' | 'gmail.message.send' | 'warehouse.view.read')[];
     /**
      * Approved logical resources. Never inherited by wildcard. Empty until the first approval.
      *

package/dist/gen-ts/integration-execute-request.d.ts

@@ -1,5 +1,5 @@
 /**
- * Body of POST /_harbour/integrations/execute (app SDK), forwarded unchanged to the governance development and runtime execute routes. Exactly one declared operation against one declared resource. The identity mode is NOT a caller field: it is fixed by the operation and enforced from the approved grant; any identity/userId/scope field is rejected by additionalProperties. Per-operation input bounds: slack.channel.history {limit? 1..15, default 15}; slack.message.post {text 1..4000 chars} and a required idempotencyKey retained across retries of one explicit Send; gmail.thread.list {limit? 1..15, default 15}; gmail.message.read {messageId}; warehouse.view.read {columns 1..32, limit? 1..1000, default 100}. Transport limits (not expressible here): request <= 16 KiB, total deadline 10 s.
+ * Body of POST /_harbour/integrations/execute (app SDK), forwarded unchanged to the governance development and runtime execute routes. Exactly one declared operation against one declared resource. The identity mode is NOT a caller field: it is fixed by the operation and enforced from the approved grant; any identity/userId/scope field is rejected by additionalProperties. Per-operation input bounds: slack.channel.history {limit? 1..15, default 15}; slack.message.post {text 1..4000 chars} and a required idempotencyKey retained across retries of one explicit Send; gmail.thread.list {limit? 1..15, default 15}; gmail.message.read {messageId}; gmail.message.send {to 1..50 addresses (to+cc+bcc <= 50 in total), cc?, bcc?, subject 1..256 chars, text 1..4000 chars, replyToMessageId?} and a required idempotencyKey like slack.message.post (plain text only, no attachments); warehouse.view.read {columns 1..32, limit? 1..1000, default 100}. Transport limits (not expressible here): request <= 16 KiB, total deadline 10 s.
  */
 export type IntegrationExecuteRequest = {
     /**
@@ -7,9 +7,9 @@ export type IntegrationExecuteRequest = {
      */
     connection: string;
     /**
-     * Closed operation set. Extending it is a contracts change.
+     * Closed operation set. Extending it is a contracts change. gmail.message.send (0.50.0) sends one plain-text email as the signed-in person: a send like slack.message.post (explicit Send, idempotencyKey, write receipt) under user identity.
      */
-    operation: 'slack.channel.history' | 'slack.message.post' | 'gmail.thread.list' | 'gmail.message.read' | 'warehouse.view.read';
+    operation: 'slack.channel.history' | 'slack.message.post' | 'gmail.thread.list' | 'gmail.message.read' | 'gmail.message.send' | 'warehouse.view.read';
     /**
      * Tenant-wide logical alias of a connection (governance sourceId) or of a resource under it.
      */
@@ -21,6 +21,17 @@ export type IntegrationExecuteRequest = {
          * gmail.message.read: the Gmail message id a gmail.thread.list result named.
          */
         messageId?: string;
+        to?: EmailAddressList;
+        cc?: EmailAddressList1;
+        bcc?: EmailAddressList2;
+        /**
+         * gmail.message.send: one-line subject (no line breaks).
+         */
+        subject?: string;
+        /**
+         * gmail.message.send: a Gmail message id (from gmail.thread.list / gmail.message.read) the email replies to; the send joins that thread.
+         */
+        replyToMessageId?: string;
         /**
          * @minItems 1
          * @maxItems 32
@@ -28,7 +39,32 @@ export type IntegrationExecuteRequest = {
         columns?: string[];
     };
     /**
-     * UUID of one explicit Send action; required for slack.message.post only. The same key with the same payload and subject returns the recorded outcome for seven days.
+     * UUID of one explicit Send action; required for slack.message.post and gmail.message.send only. The same key with the same payload and subject returns the recorded outcome for seven days.
      */
     idempotencyKey?: string;
 };
+/**
+ * One bare email address (no display name).
+ */
+export type EmailAddress = string;
+/**
+ * gmail.message.send: primary recipients.
+ *
+ * @minItems 1
+ * @maxItems 50
+ */
+export type EmailAddressList = EmailAddress[];
+/**
+ * gmail.message.send: carbon-copy recipients.
+ *
+ * @minItems 1
+ * @maxItems 50
+ */
+export type EmailAddressList1 = EmailAddress[];
+/**
+ * gmail.message.send: blind-copy recipients.
+ *
+ * @minItems 1
+ * @maxItems 50
+ */
+export type EmailAddressList2 = EmailAddress[];

package/dist/gen-ts/integration-execute-result.d.ts

@@ -1,5 +1,5 @@
 /**
- * The `data` member of a successful execute response `{data, requestId}`; the SDK unwraps `data`. Exactly one of the five operation results: slack.channel.history -> {messages, hasMore} (plain text/IDs/time only, never the provider payload); slack.message.post -> {messageId}; gmail.thread.list -> {threads, hasMore} (newest inbox threads; each `messageId` is the thread's newest message, what gmail.message.read takes); gmail.message.read -> {id, threadId, subject, from, to, date, text, truncated} (headers plus the plain text with html stripped, cut at 16 KiB with `truncated` set); warehouse.view.read -> {rows} (decimal/64-bit values as strings, dates as ISO strings). An unknown send outcome is never a result; it is an error with details.code SEND_OUTCOME_UNKNOWN. Results over 1 MiB are rejected, not truncated.
+ * The `data` member of a successful execute response `{data, requestId}`; the SDK unwraps `data`. Exactly one of the six operation results: slack.channel.history -> {messages, hasMore} (plain text/IDs/time only, never the provider payload); slack.message.post -> {messageId}; gmail.thread.list -> {threads, hasMore} (newest inbox threads; each `messageId` is the thread's newest message, what gmail.message.read takes); gmail.message.read -> {id, threadId, subject, from, to, date, text, truncated} (headers plus the plain text with html stripped, cut at 16 KiB with `truncated` set); gmail.message.send -> {messageId, threadId} (the Gmail ids of the sent message and its thread); warehouse.view.read -> {rows} (decimal/64-bit values as strings, dates as ISO strings). An unknown send outcome is never a result; it is an error with details.code SEND_OUTCOME_UNKNOWN. Results over 1 MiB are rejected, not truncated.
  */
 export type IntegrationExecuteResult = {
     /**

package/dist/gen-ts/saas-connection.d.ts

@@ -39,12 +39,12 @@ export interface SaasConnection {
         [k: string]: string;
     };
     /**
-     * Operations IT allows apps to request on this connection: the provider's own SaaS operations (Slack: slack.channel.history, slack.message.post; Gmail: gmail.thread.list, gmail.message.read). Never warehouse.view.read.
+     * Operations IT allows apps to request on this connection: the provider's own SaaS operations (Slack: slack.channel.history, slack.message.post; Gmail: gmail.thread.list, gmail.message.read, gmail.message.send). Never warehouse.view.read.
      *
      * @minItems 1
-     * @maxItems 4
+     * @maxItems 5
      */
-    operations: ('slack.channel.history' | 'slack.message.post' | 'gmail.thread.list' | 'gmail.message.read' | 'warehouse.view.read')[];
+    operations: ('slack.channel.history' | 'slack.message.post' | 'gmail.thread.list' | 'gmail.message.read' | 'gmail.message.send' | 'warehouse.view.read')[];
     developmentPreapproval: DevelopmentPreapproval;
     /**
      * Lower-cased builder emails excluded from development preapproval.

package/dist/gen-ts/transform-report.d.ts

@@ -3,6 +3,8 @@
  */
 export type TransformReport = {
     /**
+     * Optional self-report of the playbooks the agent says it applied. A claim about its own behaviour is not evidence, so nothing validates it; a deployable report may omit it, and one that still carries it stays valid.
+     *
      * @minItems 1
      */
     applied_playbooks?: string[];

package/dist/gen-ts/well-defined-app-manifest.d.ts

@@ -15,6 +15,7 @@ export type Workload = {
  */
 export type Command = string[];
 export type ResourceProfile = 'standard' | 'memory-1g' | 'memory-2g';
+export type Capability = 'data' | 'files' | 'actions' | 'realtime' | 'telemetry';
 /**
  * Versioned provisioning input emitted by Harbour Transform. It describes runtime wiring and workload lifecycle only; PostgreSQL grants and RLS remain the database authorization authority.
  */
@@ -33,6 +34,17 @@ export interface WellDefinedAppManifest {
      * @maxItems 128
      */
     bindings: WorkloadBinding[];
+    /**
+     * Optional language runtime the application container is built on, spelled exactly as transform-report.application.runtime does (nodejs22, python3.11). Optional so a manifest written before the producer emits it still validates.
+     */
+    runtime?: string;
+    /**
+     * Optional declaration of the Harbour browser capabilities the application uses. Same closed set as the app-capabilities document; this is the declaration, not a source scan.
+     *
+     * @maxItems 5
+     */
+    capabilities?: Capability[];
+    routeAuth?: RouteAuth;
 }
 export interface QueueConsumer {
     logicalName: string;
@@ -64,3 +76,22 @@ export interface WorkloadBinding {
      */
     reference?: string;
 }
+/**
+ * Optional method/path authentication policy. Omitted means every route requires Harbour SSO, the same default the policy states explicitly.
+ */
+export interface RouteAuth {
+    default: 'sso_required';
+    /**
+     * @maxItems 64
+     */
+    public: PublicRoute[];
+}
+export interface PublicRoute {
+    path: string;
+    /**
+     * @minItems 1
+     * @maxItems 7
+     */
+    methods: ('GET' | 'HEAD' | 'POST' | 'PUT' | 'PATCH' | 'DELETE' | 'OPTIONS')[];
+    mode: 'application_authorized';
+}

package/gen-ts/app-integrations-declaration.ts

@@ -32,6 +32,7 @@ export interface DeclaredConnection {
     'slack.message.post'?: AppModeChannelOperation;
     'gmail.thread.list'?: UserModeChannelOperation;
     'gmail.message.read'?: UserModeChannelOperation;
+    'gmail.message.send'?: UserModeChannelOperation;
     'warehouse.view.read'?: AppModeViewOperation;
   };
 }

package/gen-ts/contract-release.ts

@@ -1,10 +1,10 @@
 /* eslint-disable */
 // Code generated by tools/gen/gen.mjs from schema/*.json. DO NOT EDIT.
 
-export const ContractRepositoryVersion = "0.47.0.0" as const;
-export const ContractPublishVersion = "0.47.0" as const;
-export const ContractPublishTag = "v0.47.0" as const;
-export const ContractSchemasDigest = "sha256:9d059261d1fbe550fbd4e265287397d6913912c3d5ea6570b2b29d2e6619de4f" as const;
+export const ContractRepositoryVersion = "0.50.0.0" as const;
+export const ContractPublishVersion = "0.50.0" as const;
+export const ContractPublishTag = "v0.50.0" as const;
+export const ContractSchemasDigest = "sha256:c77dcbf9daad9c66141e9cb8215760a098afd1bf3e665e247f6a4df8db2bcd4f" as const;
 export const ContractAiFixturesDigest = "sha256:edac31c92e146ca1c40130f2fb5649db82e24b8cd1ac758153b90612052fddb6" as const;
-export const ContractGeneratedGoDigest = "sha256:5892b40bfbac4c9a86f671a0eb54ef530f65ba97e5abc0b3713495bbbdfbf4e2" as const;
-export const ContractGeneratedTypeScriptDigest = "sha256:0bb0c87edaa9399cac1c927ba80dc25ff96f7364678e7f0a17599a34a26c170b" as const;
+export const ContractGeneratedGoDigest = "sha256:545d8b23ab712e75285ea962851bcf8f08f5baeb018bea6f7ba4e1ca2fe80ed0" as const;
+export const ContractGeneratedTypeScriptDigest = "sha256:1e47c3956a3468531690693ff50ff7947a798af01e01d25659401f727cb934c4" as const;

package/gen-ts/data-grant-v2.ts

@@ -38,7 +38,12 @@ export interface DataGrantV2 {
    * @maxItems 5
    */
   operations: (
-    'slack.channel.history' | 'slack.message.post' | 'gmail.thread.list' | 'gmail.message.read' | 'warehouse.view.read'
+    | 'slack.channel.history'
+    | 'slack.message.post'
+    | 'gmail.thread.list'
+    | 'gmail.message.read'
+    | 'gmail.message.send'
+    | 'warehouse.view.read'
   )[];
   /**
    * Approved logical resources. Never inherited by wildcard. Empty until the first approval.

package/gen-ts/integration-execute-request.ts

@@ -2,7 +2,7 @@
 // Code generated by tools/gen/gen.mjs from schema/*.json. DO NOT EDIT.
 
 /**
- * Body of POST /_harbour/integrations/execute (app SDK), forwarded unchanged to the governance development and runtime execute routes. Exactly one declared operation against one declared resource. The identity mode is NOT a caller field: it is fixed by the operation and enforced from the approved grant; any identity/userId/scope field is rejected by additionalProperties. Per-operation input bounds: slack.channel.history {limit? 1..15, default 15}; slack.message.post {text 1..4000 chars} and a required idempotencyKey retained across retries of one explicit Send; gmail.thread.list {limit? 1..15, default 15}; gmail.message.read {messageId}; warehouse.view.read {columns 1..32, limit? 1..1000, default 100}. Transport limits (not expressible here): request <= 16 KiB, total deadline 10 s.
+ * Body of POST /_harbour/integrations/execute (app SDK), forwarded unchanged to the governance development and runtime execute routes. Exactly one declared operation against one declared resource. The identity mode is NOT a caller field: it is fixed by the operation and enforced from the approved grant; any identity/userId/scope field is rejected by additionalProperties. Per-operation input bounds: slack.channel.history {limit? 1..15, default 15}; slack.message.post {text 1..4000 chars} and a required idempotencyKey retained across retries of one explicit Send; gmail.thread.list {limit? 1..15, default 15}; gmail.message.read {messageId}; gmail.message.send {to 1..50 addresses (to+cc+bcc <= 50 in total), cc?, bcc?, subject 1..256 chars, text 1..4000 chars, replyToMessageId?} and a required idempotencyKey like slack.message.post (plain text only, no attachments); warehouse.view.read {columns 1..32, limit? 1..1000, default 100}. Transport limits (not expressible here): request <= 16 KiB, total deadline 10 s.
  */
 export type IntegrationExecuteRequest = {
   /**
@@ -10,10 +10,15 @@ export type IntegrationExecuteRequest = {
    */
   connection: string;
   /**
-   * Closed operation set. Extending it is a contracts change.
+   * Closed operation set. Extending it is a contracts change. gmail.message.send (0.50.0) sends one plain-text email as the signed-in person: a send like slack.message.post (explicit Send, idempotencyKey, write receipt) under user identity.
    */
   operation:
-    'slack.channel.history' | 'slack.message.post' | 'gmail.thread.list' | 'gmail.message.read' | 'warehouse.view.read';
+    | 'slack.channel.history'
+    | 'slack.message.post'
+    | 'gmail.thread.list'
+    | 'gmail.message.read'
+    | 'gmail.message.send'
+    | 'warehouse.view.read';
   /**
    * Tenant-wide logical alias of a connection (governance sourceId) or of a resource under it.
    */
@@ -25,6 +30,17 @@ export type IntegrationExecuteRequest = {
      * gmail.message.read: the Gmail message id a gmail.thread.list result named.
      */
     messageId?: string;
+    to?: EmailAddressList;
+    cc?: EmailAddressList1;
+    bcc?: EmailAddressList2;
+    /**
+     * gmail.message.send: one-line subject (no line breaks).
+     */
+    subject?: string;
+    /**
+     * gmail.message.send: a Gmail message id (from gmail.thread.list / gmail.message.read) the email replies to; the send joins that thread.
+     */
+    replyToMessageId?: string;
     /**
      * @minItems 1
      * @maxItems 32
@@ -32,7 +48,32 @@ export type IntegrationExecuteRequest = {
     columns?: string[];
   };
   /**
-   * UUID of one explicit Send action; required for slack.message.post only. The same key with the same payload and subject returns the recorded outcome for seven days.
+   * UUID of one explicit Send action; required for slack.message.post and gmail.message.send only. The same key with the same payload and subject returns the recorded outcome for seven days.
    */
   idempotencyKey?: string;
 };
+/**
+ * One bare email address (no display name).
+ */
+export type EmailAddress = string;
+/**
+ * gmail.message.send: primary recipients.
+ *
+ * @minItems 1
+ * @maxItems 50
+ */
+export type EmailAddressList = EmailAddress[];
+/**
+ * gmail.message.send: carbon-copy recipients.
+ *
+ * @minItems 1
+ * @maxItems 50
+ */
+export type EmailAddressList1 = EmailAddress[];
+/**
+ * gmail.message.send: blind-copy recipients.
+ *
+ * @minItems 1
+ * @maxItems 50
+ */
+export type EmailAddressList2 = EmailAddress[];

package/gen-ts/integration-execute-result.ts

@@ -2,7 +2,7 @@
 // Code generated by tools/gen/gen.mjs from schema/*.json. DO NOT EDIT.
 
 /**
- * The `data` member of a successful execute response `{data, requestId}`; the SDK unwraps `data`. Exactly one of the five operation results: slack.channel.history -> {messages, hasMore} (plain text/IDs/time only, never the provider payload); slack.message.post -> {messageId}; gmail.thread.list -> {threads, hasMore} (newest inbox threads; each `messageId` is the thread's newest message, what gmail.message.read takes); gmail.message.read -> {id, threadId, subject, from, to, date, text, truncated} (headers plus the plain text with html stripped, cut at 16 KiB with `truncated` set); warehouse.view.read -> {rows} (decimal/64-bit values as strings, dates as ISO strings). An unknown send outcome is never a result; it is an error with details.code SEND_OUTCOME_UNKNOWN. Results over 1 MiB are rejected, not truncated.
+ * The `data` member of a successful execute response `{data, requestId}`; the SDK unwraps `data`. Exactly one of the six operation results: slack.channel.history -> {messages, hasMore} (plain text/IDs/time only, never the provider payload); slack.message.post -> {messageId}; gmail.thread.list -> {threads, hasMore} (newest inbox threads; each `messageId` is the thread's newest message, what gmail.message.read takes); gmail.message.read -> {id, threadId, subject, from, to, date, text, truncated} (headers plus the plain text with html stripped, cut at 16 KiB with `truncated` set); gmail.message.send -> {messageId, threadId} (the Gmail ids of the sent message and its thread); warehouse.view.read -> {rows} (decimal/64-bit values as strings, dates as ISO strings). An unknown send outcome is never a result; it is an error with details.code SEND_OUTCOME_UNKNOWN. Results over 1 MiB are rejected, not truncated.
  */
 export type IntegrationExecuteResult = {
   /**

package/gen-ts/saas-connection.ts

@@ -43,13 +43,18 @@ export interface SaasConnection {
     [k: string]: string;
   };
   /**
-   * Operations IT allows apps to request on this connection: the provider's own SaaS operations (Slack: slack.channel.history, slack.message.post; Gmail: gmail.thread.list, gmail.message.read). Never warehouse.view.read.
+   * Operations IT allows apps to request on this connection: the provider's own SaaS operations (Slack: slack.channel.history, slack.message.post; Gmail: gmail.thread.list, gmail.message.read, gmail.message.send). Never warehouse.view.read.
    *
    * @minItems 1
-   * @maxItems 4
+   * @maxItems 5
    */
   operations: (
-    'slack.channel.history' | 'slack.message.post' | 'gmail.thread.list' | 'gmail.message.read' | 'warehouse.view.read'
+    | 'slack.channel.history'
+    | 'slack.message.post'
+    | 'gmail.thread.list'
+    | 'gmail.message.read'
+    | 'gmail.message.send'
+    | 'warehouse.view.read'
   )[];
   developmentPreapproval: DevelopmentPreapproval;
   /**

package/gen-ts/transform-report.ts

@@ -6,6 +6,8 @@
  */
 export type TransformReport = {
   /**
+   * Optional self-report of the playbooks the agent says it applied. A claim about its own behaviour is not evidence, so nothing validates it; a deployable report may omit it, and one that still carries it stays valid.
+   *
    * @minItems 1
    */
   applied_playbooks?: string[];

package/gen-ts/well-defined-app-manifest.ts

@@ -18,6 +18,7 @@ export type Workload = {
  */
 export type Command = string[];
 export type ResourceProfile = 'standard' | 'memory-1g' | 'memory-2g';
+export type Capability = 'data' | 'files' | 'actions' | 'realtime' | 'telemetry';
 
 /**
  * Versioned provisioning input emitted by Harbour Transform. It describes runtime wiring and workload lifecycle only; PostgreSQL grants and RLS remain the database authorization authority.
@@ -37,6 +38,17 @@ export interface WellDefinedAppManifest {
    * @maxItems 128
    */
   bindings: WorkloadBinding[];
+  /**
+   * Optional language runtime the application container is built on, spelled exactly as transform-report.application.runtime does (nodejs22, python3.11). Optional so a manifest written before the producer emits it still validates.
+   */
+  runtime?: string;
+  /**
+   * Optional declaration of the Harbour browser capabilities the application uses. Same closed set as the app-capabilities document; this is the declaration, not a source scan.
+   *
+   * @maxItems 5
+   */
+  capabilities?: Capability[];
+  routeAuth?: RouteAuth;
 }
 export interface QueueConsumer {
   logicalName: string;
@@ -68,3 +80,22 @@ export interface WorkloadBinding {
    */
   reference?: string;
 }
+/**
+ * Optional method/path authentication policy. Omitted means every route requires Harbour SSO, the same default the policy states explicitly.
+ */
+export interface RouteAuth {
+  default: 'sso_required';
+  /**
+   * @maxItems 64
+   */
+  public: PublicRoute[];
+}
+export interface PublicRoute {
+  path: string;
+  /**
+   * @minItems 1
+   * @maxItems 7
+   */
+  methods: ('GET' | 'HEAD' | 'POST' | 'PUT' | 'PATCH' | 'DELETE' | 'OPTIONS')[];
+  mode: 'application_authorized';
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fourier-labs/harbour-contracts",
-  "version": "0.47.0",
+  "version": "0.50.0",
   "description": "Single source of truth for every data shape that crosses a boundary between Harbour components.",
   "license": "UNLICENSED",
   "private": false,

package/schema/app-integrations-declaration.schema.json

@@ -25,8 +25,8 @@
     "IntegrationConnectionKind": { "type": "string", "enum": ["saas", "database"] },
     "IntegrationOperation": {
       "type": "string",
-      "enum": ["slack.channel.history", "slack.message.post", "gmail.thread.list", "gmail.message.read", "warehouse.view.read"],
-      "description": "Closed operation set. Extending it is a contracts change."
+      "enum": ["slack.channel.history", "slack.message.post", "gmail.thread.list", "gmail.message.read", "gmail.message.send", "warehouse.view.read"],
+      "description": "Closed operation set. Extending it is a contracts change. gmail.message.send (0.50.0) sends one plain-text email as the signed-in person: a send like slack.message.post (explicit Send, idempotencyKey, write receipt) under user identity."
     },
     "IntegrationIdentityMode": {
       "type": "string",
@@ -110,6 +110,7 @@
             "slack.message.post": { "$ref": "#/definitions/AppModeChannelOperation" },
             "gmail.thread.list": { "$ref": "#/definitions/UserModeChannelOperation" },
             "gmail.message.read": { "$ref": "#/definitions/UserModeChannelOperation" },
+            "gmail.message.send": { "$ref": "#/definitions/UserModeChannelOperation" },
             "warehouse.view.read": { "$ref": "#/definitions/AppModeViewOperation" }
           }
         }
@@ -119,7 +120,7 @@
       "else": {
         "properties": {
           "operations": {
-            "not": { "anyOf": [{ "required": ["slack.channel.history"] }, { "required": ["slack.message.post"] }, { "required": ["gmail.thread.list"] }, { "required": ["gmail.message.read"] }] }
+            "not": { "anyOf": [{ "required": ["slack.channel.history"] }, { "required": ["slack.message.post"] }, { "required": ["gmail.thread.list"] }, { "required": ["gmail.message.read"] }, { "required": ["gmail.message.send"] }] }
           }
         }
       }
@@ -140,7 +141,8 @@
           "kind": "saas",
           "operations": {
             "gmail.thread.list": { "identity": "user", "resources": ["inbox"] },
-            "gmail.message.read": { "identity": "user", "resources": ["inbox"] }
+            "gmail.message.read": { "identity": "user", "resources": ["inbox"] },
+            "gmail.message.send": { "identity": "user", "resources": ["inbox"] }
           }
         },
         "sales-warehouse": {

package/schema/integration-execute-request.schema.json

@@ -2,7 +2,7 @@
   "$schema": "http://json-schema.org/draft-07/schema#",
   "$id": "https://schemas.harbour.dev/integration-execute-request.schema.json",
   "title": "IntegrationExecuteRequest",
-  "description": "Body of POST /_harbour/integrations/execute (app SDK), forwarded unchanged to the governance development and runtime execute routes. Exactly one declared operation against one declared resource. The identity mode is NOT a caller field: it is fixed by the operation and enforced from the approved grant; any identity/userId/scope field is rejected by additionalProperties. Per-operation input bounds: slack.channel.history {limit? 1..15, default 15}; slack.message.post {text 1..4000 chars} and a required idempotencyKey retained across retries of one explicit Send; gmail.thread.list {limit? 1..15, default 15}; gmail.message.read {messageId}; warehouse.view.read {columns 1..32, limit? 1..1000, default 100}. Transport limits (not expressible here): request <= 16 KiB, total deadline 10 s.",
+  "description": "Body of POST /_harbour/integrations/execute (app SDK), forwarded unchanged to the governance development and runtime execute routes. Exactly one declared operation against one declared resource. The identity mode is NOT a caller field: it is fixed by the operation and enforced from the approved grant; any identity/userId/scope field is rejected by additionalProperties. Per-operation input bounds: slack.channel.history {limit? 1..15, default 15}; slack.message.post {text 1..4000 chars} and a required idempotencyKey retained across retries of one explicit Send; gmail.thread.list {limit? 1..15, default 15}; gmail.message.read {messageId}; gmail.message.send {to 1..50 addresses (to+cc+bcc <= 50 in total), cc?, bcc?, subject 1..256 chars, text 1..4000 chars, replyToMessageId?} and a required idempotencyKey like slack.message.post (plain text only, no attachments); warehouse.view.read {columns 1..32, limit? 1..1000, default 100}. Transport limits (not expressible here): request <= 16 KiB, total deadline 10 s.",
   "type": "object",
   "additionalProperties": false,
   "required": ["connection", "operation", "resource", "input"],
@@ -17,6 +17,11 @@
         "limit": { "type": "integer", "minimum": 1, "maximum": 1000 },
         "text": { "type": "string", "minLength": 1, "maxLength": 4000 },
         "messageId": { "type": "string", "pattern": "^[A-Za-z0-9_-]{1,64}$", "description": "gmail.message.read: the Gmail message id a gmail.thread.list result named." },
+        "to": { "$ref": "#/definitions/EmailAddressList", "description": "gmail.message.send: primary recipients." },
+        "cc": { "$ref": "#/definitions/EmailAddressList", "description": "gmail.message.send: carbon-copy recipients." },
+        "bcc": { "$ref": "#/definitions/EmailAddressList", "description": "gmail.message.send: blind-copy recipients." },
+        "subject": { "type": "string", "minLength": 1, "maxLength": 256, "description": "gmail.message.send: one-line subject (no line breaks)." },
+        "replyToMessageId": { "type": "string", "pattern": "^[A-Za-z0-9_-]{1,64}$", "description": "gmail.message.send: a Gmail message id (from gmail.thread.list / gmail.message.read) the email replies to; the send joins that thread." },
         "columns": {
           "type": "array",
           "minItems": 1,
@@ -28,7 +33,7 @@
     "idempotencyKey": {
       "type": "string",
       "pattern": "^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$",
-      "description": "UUID of one explicit Send action; required for slack.message.post only. The same key with the same payload and subject returns the recorded outcome for seven days."
+      "description": "UUID of one explicit Send action; required for slack.message.post and gmail.message.send only. The same key with the same payload and subject returns the recorded outcome for seven days."
     }
   },
   "allOf": [
@@ -37,7 +42,7 @@
       "then": {
         "not": { "required": ["idempotencyKey"] },
         "properties": {
-          "input": { "properties": { "limit": { "maximum": 15 } }, "not": { "anyOf": [{ "required": ["text"] }, { "required": ["columns"] }, { "required": ["messageId"] }] } }
+          "input": { "properties": { "limit": { "maximum": 15 } }, "not": { "anyOf": [{ "required": ["text"] }, { "required": ["columns"] }, { "required": ["messageId"] }, { "required": ["to"] }, { "required": ["subject"] }] } }
         }
       }
     },
@@ -46,7 +51,7 @@
       "then": {
         "required": ["idempotencyKey"],
         "properties": {
-          "input": { "required": ["text"], "not": { "anyOf": [{ "required": ["limit"] }, { "required": ["columns"] }, { "required": ["messageId"] }] } }
+          "input": { "required": ["text"], "not": { "anyOf": [{ "required": ["limit"] }, { "required": ["columns"] }, { "required": ["messageId"] }, { "required": ["to"] }, { "required": ["subject"] }] } }
         }
       }
     },
@@ -55,7 +60,7 @@
       "then": {
         "not": { "required": ["idempotencyKey"] },
         "properties": {
-          "input": { "required": ["columns"], "not": { "anyOf": [{ "required": ["text"] }, { "required": ["messageId"] }] } }
+          "input": { "required": ["columns"], "not": { "anyOf": [{ "required": ["text"] }, { "required": ["messageId"] }, { "required": ["to"] }, { "required": ["subject"] }] } }
         }
       }
     },
@@ -64,7 +69,7 @@
       "then": {
         "not": { "required": ["idempotencyKey"] },
         "properties": {
-          "input": { "properties": { "limit": { "maximum": 15 } }, "not": { "anyOf": [{ "required": ["text"] }, { "required": ["columns"] }, { "required": ["messageId"] }] } }
+          "input": { "properties": { "limit": { "maximum": 15 } }, "not": { "anyOf": [{ "required": ["text"] }, { "required": ["columns"] }, { "required": ["messageId"] }, { "required": ["to"] }, { "required": ["subject"] }] } }
         }
       }
     },
@@ -73,11 +78,24 @@
       "then": {
         "not": { "required": ["idempotencyKey"] },
         "properties": {
-          "input": { "required": ["messageId"], "not": { "anyOf": [{ "required": ["text"] }, { "required": ["columns"] }, { "required": ["limit"] }] } }
+          "input": { "required": ["messageId"], "not": { "anyOf": [{ "required": ["text"] }, { "required": ["columns"] }, { "required": ["limit"] }, { "required": ["to"] }, { "required": ["subject"] }] } }
+        }
+      }
+    },
+    {
+      "if": { "properties": { "operation": { "const": "gmail.message.send" } } },
+      "then": {
+        "required": ["idempotencyKey"],
+        "properties": {
+          "input": { "required": ["to", "subject", "text"], "not": { "anyOf": [{ "required": ["limit"] }, { "required": ["columns"] }, { "required": ["messageId"] }] } }
         }
       }
     }
   ],
+  "definitions": {
+    "EmailAddress": { "type": "string", "minLength": 3, "maxLength": 254, "pattern": "^[^\\s@<>,;\"]+@[^\\s@<>,;\"]+\\.[^\\s@<>,;\"]+$", "description": "One bare email address (no display name)." },
+    "EmailAddressList": { "type": "array", "minItems": 1, "maxItems": 50, "uniqueItems": true, "items": { "$ref": "#/definitions/EmailAddress" } }
+  },
   "examples": [
     { "connection": "company-slack", "operation": "slack.channel.history", "resource": "team-updates", "input": { "limit": 15 } },
     {
@@ -89,6 +107,13 @@
     },
     { "connection": "sales-warehouse", "operation": "warehouse.view.read", "resource": "weekly_sales", "input": { "columns": ["week", "total"], "limit": 100 } },
     { "connection": "gmail", "operation": "gmail.thread.list", "resource": "inbox", "input": { "limit": 15 } },
-    { "connection": "gmail", "operation": "gmail.message.read", "resource": "inbox", "input": { "messageId": "18f2c3a4b5d6e7f8" } }
+    { "connection": "gmail", "operation": "gmail.message.read", "resource": "inbox", "input": { "messageId": "18f2c3a4b5d6e7f8" } },
+    {
+      "connection": "gmail",
+      "operation": "gmail.message.send",
+      "resource": "inbox",
+      "input": { "to": ["jane@example.com"], "subject": "Weekly report", "text": "Shipped the weekly report.", "replyToMessageId": "18f2c3a4b5d6e7f8" },
+      "idempotencyKey": "6f1c2c1e-3a1c-4c3e-9f0e-2b6f7d8a9c11"
+    }
   ]
 }

package/schema/integration-execute-result.schema.json

@@ -2,7 +2,7 @@
   "$schema": "http://json-schema.org/draft-07/schema#",
   "$id": "https://schemas.harbour.dev/integration-execute-result.schema.json",
   "title": "IntegrationExecuteResult",
-  "description": "The `data` member of a successful execute response `{data, requestId}`; the SDK unwraps `data`. Exactly one of the five operation results: slack.channel.history -> {messages, hasMore} (plain text/IDs/time only, never the provider payload); slack.message.post -> {messageId}; gmail.thread.list -> {threads, hasMore} (newest inbox threads; each `messageId` is the thread's newest message, what gmail.message.read takes); gmail.message.read -> {id, threadId, subject, from, to, date, text, truncated} (headers plus the plain text with html stripped, cut at 16 KiB with `truncated` set); warehouse.view.read -> {rows} (decimal/64-bit values as strings, dates as ISO strings). An unknown send outcome is never a result; it is an error with details.code SEND_OUTCOME_UNKNOWN. Results over 1 MiB are rejected, not truncated.",
+  "description": "The `data` member of a successful execute response `{data, requestId}`; the SDK unwraps `data`. Exactly one of the six operation results: slack.channel.history -> {messages, hasMore} (plain text/IDs/time only, never the provider payload); slack.message.post -> {messageId}; gmail.thread.list -> {threads, hasMore} (newest inbox threads; each `messageId` is the thread's newest message, what gmail.message.read takes); gmail.message.read -> {id, threadId, subject, from, to, date, text, truncated} (headers plus the plain text with html stripped, cut at 16 KiB with `truncated` set); gmail.message.send -> {messageId, threadId} (the Gmail ids of the sent message and its thread); warehouse.view.read -> {rows} (decimal/64-bit values as strings, dates as ISO strings). An unknown send outcome is never a result; it is an error with details.code SEND_OUTCOME_UNKNOWN. Results over 1 MiB are rejected, not truncated.",
   "type": "object",
   "additionalProperties": false,
   "properties": {
@@ -35,6 +35,7 @@
   "oneOf": [
     { "required": ["messages", "hasMore"], "maxProperties": 2 },
     { "required": ["messageId"], "maxProperties": 1 },
+    { "required": ["messageId", "threadId"], "maxProperties": 2 },
     { "required": ["threads", "hasMore"], "maxProperties": 2 },
     { "required": ["id", "threadId", "subject", "from", "to", "date", "text", "truncated"], "maxProperties": 8 },
     { "required": ["rows"], "maxProperties": 1 }
@@ -71,6 +72,7 @@
       "hasMore": false
     },
     { "messageId": "1725840100.000200" },
+    { "messageId": "18f2c3a4b5d6e7f9", "threadId": "18f2c3a4b5d6e7f0" },
     {
       "threads": [{ "id": "18f2c3a4b5d6e7f0", "messageId": "18f2c3a4b5d6e7f8", "subject": "Weekly report", "from": "Jane <jane@example.com>", "date": "2026-09-11T08:00:00Z", "snippet": "Shipped the weekly report." }],
       "hasMore": false

package/schema/saas-connection.schema.json

@@ -26,11 +26,11 @@
     "operations": {
       "type": "array",
       "minItems": 1,
-      "maxItems": 4,
+      "maxItems": 5,
       "uniqueItems": true,
       "items": { "$ref": "app-integrations-declaration.schema.json#/definitions/IntegrationOperation" },
       "not": { "contains": { "const": "warehouse.view.read" } },
-      "description": "Operations IT allows apps to request on this connection: the provider's own SaaS operations (Slack: slack.channel.history, slack.message.post; Gmail: gmail.thread.list, gmail.message.read). Never warehouse.view.read."
+      "description": "Operations IT allows apps to request on this connection: the provider's own SaaS operations (Slack: slack.channel.history, slack.message.post; Gmail: gmail.thread.list, gmail.message.read, gmail.message.send). Never warehouse.view.read."
     },
     "developmentPreapproval": { "$ref": "#/definitions/DevelopmentPreapproval" },
     "blockedDevelopmentBuilders": {
@@ -161,7 +161,7 @@
       "status": "ACTIVE",
       "version": 1,
       "channels": {},
-      "operations": ["gmail.thread.list", "gmail.message.read"],
+      "operations": ["gmail.thread.list", "gmail.message.read", "gmail.message.send"],
       "developmentPreapproval": { "enabled": false, "hours": 24 },
       "blockedDevelopmentBuilders": ["contractor@example.com"],
       "createdAt": "2026-09-11T08:00:00Z",

package/schema/transform-report.schema.json

@@ -9,6 +9,7 @@
   "required": ["application"],
   "properties": {
     "applied_playbooks": {
+      "description": "Optional self-report of the playbooks the agent says it applied. A claim about its own behaviour is not evidence, so nothing validates it; a deployable report may omit it, and one that still carries it stays valid.",
       "type": "array",
       "minItems": 1,
       "items": { "type": "string", "minLength": 1 }
@@ -666,7 +667,7 @@
   ],
   "oneOf": [
     {
-      "required": ["applied_playbooks", "static_rebuild_required", "analysis", "database", "preservation_plan", "validation_fixtures", "application"],
+      "required": ["static_rebuild_required", "analysis", "database", "preservation_plan", "validation_fixtures", "application"],
       "properties": {
         "application": {
           "required": ["runtime", "buildKind", "topology", "entrypoint", "build", "basePath", "evidence", "unsupportedFeatures"],

package/schema/well-defined-app-manifest.schema.json

@@ -26,9 +26,70 @@
       "type": "array",
       "maxItems": 128,
       "items": { "$ref": "#/definitions/WorkloadBinding" }
+    },
+    "runtime": {
+      "type": "string",
+      "pattern": "^(?:nodejs|python)[0-9]+(?:\\.[0-9]+)?$",
+      "description": "Optional language runtime the application container is built on, spelled exactly as transform-report.application.runtime does (nodejs22, python3.11). Optional so a manifest written before the producer emits it still validates."
+    },
+    "capabilities": {
+      "type": "array",
+      "maxItems": 5,
+      "uniqueItems": true,
+      "items": { "$ref": "#/definitions/Capability" },
+      "description": "Optional declaration of the Harbour browser capabilities the application uses. Same closed set as the app-capabilities document; this is the declaration, not a source scan."
+    },
+    "routeAuth": {
+      "$ref": "#/definitions/RouteAuth",
+      "description": "Optional method/path authentication policy. Omitted means every route requires Harbour SSO, the same default the policy states explicitly."
     }
   },
   "definitions": {
+    "Capability": {
+      "type": "string",
+      "enum": ["data", "files", "actions", "realtime", "telemetry"]
+    },
+    "RouteAuth": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["default", "public"],
+      "description": "Harbour SSO is required by default; the public list is the only way a route escapes it, and each entry names the methods and the application-authorized mode so the artifact contract's route_auth can be built from this document alone.",
+      "properties": {
+        "default": {
+          "type": "string",
+          "const": "sso_required",
+          "default": "sso_required"
+        },
+        "public": {
+          "type": "array",
+          "maxItems": 64,
+          "default": [],
+          "items": { "$ref": "#/definitions/PublicRoute" }
+        }
+      }
+    },
+    "PublicRoute": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["path", "methods", "mode"],
+      "properties": {
+        "path": {
+          "type": "string",
+          "pattern": "^/(?:[A-Za-z0-9._~-]+/)*(?:[A-Za-z0-9._~-]+|\\*)$"
+        },
+        "methods": {
+          "type": "array",
+          "minItems": 1,
+          "maxItems": 7,
+          "uniqueItems": true,
+          "items": {
+            "type": "string",
+            "enum": ["GET", "HEAD", "POST", "PUT", "PATCH", "DELETE", "OPTIONS"]
+          }
+        },
+        "mode": { "type": "string", "const": "application_authorized" }
+      }
+    },
     "ResourceProfile": {
       "type": "string",
       "enum": ["standard", "memory-1g", "memory-2g"]