@fourier-labs/harbour-contracts 0.47.0 → 0.51.0

package/README.md

@@ -25,7 +25,7 @@ exist here first.
 | `error-envelope.schema.json` | The failure envelope emitted once per FAILED transition | §2.1 |
 | `error-category.enum.json` | Closed failure-category enum + per-category `retryable` registry | §2.2 |
 | `artifact-contract.schema.json` | Build output contract (the provider-portability seam), including the digest-pinned well-defined app manifest reference | §3 |
-| `well-defined-app-manifest.schema.json` | Versioned runtime wiring for static, full-stack, and browser-first apps: workloads, schedules, queues, and service bindings | Well-defined apps P0 |
+| `well-defined-app-manifest.schema.json` | Versioned runtime wiring for static, full-stack, and browser-first apps: workloads, schedules, queues, service bindings, language runtime, browser capabilities, and route authentication | Well-defined apps P0 |
 | `version-state.schema.json` | State machine T1a — states, legal transitions, versionId format | §1 |
 | `env-bindings.schema.json` | `EnvBindings` / `Target` / `Binding` (BYOC-complete) | §4.2.2 |
 | `kvs-routing-entry.schema.json` | CloudFront KVS routing value (`{static, api}`) | §8 |
@@ -42,6 +42,32 @@ exist here first.
 | `integration-execute-request`, `integration-execute-result`, `integration-connect-result`, `integration-error-details` | App SDK integrations wire contract on `/_harbour/integrations/*`: per-operation input bounds, the five result shapes, consent states and the closed `details.code` reason set | Dev kit §4, §8 |
 | `saas-connection.schema.json`, `data-grant-v2.schema.json` | Tenant SaaS connection record (one installation and channel map per tenant and provider) and the additive `harbour.data-grant/2.0` grant record with structured resources and provisioning lease/cleanup (status machine generated; legacy `data-grant` untouched) | Dev kit §5 |
 | `kit-bundle-manifest.schema.json`, `kit-lock.schema.json` | Published kit bundle identity (SDK tarball digest plus optional `sdk.version` and https `sdk.url` download location) and the committed `.harbour/kit.lock.json` the CodeBuild SDK-vendoring gate compares against | Dev kit §3 |
+| `deploy-response.schema.json` | 202 Accepted body for `POST /v1/tenants/{tenant}/apps/{app}/deployments`, returned only after the authoritative QUEUED version exists and its SQS message is accepted | — |
+| `deployment-source.schema.json` | Credential-free GitHub source in the `DeployRequest` body; credentials are resolved internally by MaterializeSource | — |
+| `deployment-environment.schema.json` | Public environment accepted by the preview APIs (`preview` only; production is reachable only through promotion) | — |
+| `api-error-response.schema.json` | Safe JSON error body for Deploy/Status Lambda 4xx/5xx responses; distinct from the internal `ErrorEnvelope` | — |
+| `deployment-status-request.schema.json` | Validated path parameters for `GET /v1/tenants/{tenant}/apps/{app}/deployments/{versionId}` | — |
+| `deployment-status-response.schema.json` | 200 OK body for GET status: that exact immutable version, with the `progress` trail, `deployTarget` and `diagnosticRef` | — |
+| `deployment-status-failure.schema.json` | Frontend-safe failure projection nested in a failed status response; a digest-bound `diagnosticRef` locates the redacted diagnostic | — |
+| `promotion-request.schema.json` | Body for `POST /v1/tenants/{tenant}/apps/{app}/promotions`; repository identity comes from stored records, not the caller | ADR 0003 |
+| `promotion-response.schema.json` | 202 Accepted body returned once the production version and its durable idempotency binding exist | ADR 0003 |
+| `transform-report.schema.json` | Structured output an agent must return from one transformation attempt; handed to the agent as its output schema and re-validated by the control plane | — |
+| `transform-parked-result.schema.json` | Sequential-preview result after a durable checkpoint when builder input is required; not a successful report | — |
+| `builder-input-proposal.schema.json` | Value-free proposal emitted when sequential preview cannot continue without builder-owned input | — |
+| `deployment-continuation.schema.json` | Immutable reference admitting one child deployment from a parked input request; never credential values | — |
+| `security-scan-input.schema.json` | Input to the Security Assurance machine: SOURCE (M1) scans an ingested commit, ARTIFACT (M2) scans built outputs | Security Assurance §2 |
+| `security-verdict.schema.json` | Security Assurance decision; `BLOCKED` surfaces as the non-retryable `gate.security-scan` category | Security Assurance §2 |
+| `data-source.schema.json` | Admin-registered external data source; `credentialRef` is a secretref URI and the credential never crosses this boundary | Data-Access MVP |
+| `data-dependency.schema.json` | One external data dependency of an app, declared or detected, classified against the tenant's data-source inventory | Data-Access MVP |
+| `secret-reference.schema.json` | Named secret slot an app depends on; only the reference and its lifecycle cross, never the value | Secret-Manager MVP |
+| `ai-callsite-inventory.schema.json` | Immutable, sanitized AI call-site discovery for one exact deployment version (detection only) | AI governance |
+| `ai-runtime-contract.schema.json` | Immutable runtime contract derived by an AI Governance PLAN decision; scoped configuration plus a Secrets Manager reference | AI governance |
+| `ai-policy-snapshot.schema.json` | Immutable, content-addressed AI policy snapshot consumed by the AI Gateway | AI governance |
+| `ai-gateway-key-lookup.schema.json` | Value-free Gateway authentication metadata for one version-scoped Harbour key | AI governance |
+| `ai-trace-event.schema.json` | Value-free asynchronous AI Gateway trace metadata (v1); raw prompts and responses never enter the queue | AI governance |
+| `ai-transform-event.schema.json` | Checksum-bound deterministic AI interception task input carrying the ordered PLAN interception plan | AI governance |
+| `ai-transform-result.schema.json` | Bounded deterministic interception result: descriptors and digest evidence only | AI governance |
+| `ai-verification-evidence.schema.json` | Bounded, value-free evidence submitted by deployment verification for one governed version | AI governance |
 
 Runtime resource profiles are a closed contract shared by transformation, artifacts, and
 well-defined application manifests. The supported profiles are `standard`, `memory-1g`, and
@@ -58,6 +84,12 @@ Two schemas carry logic beyond structural types, generated into helpers:
 - **`binding-classification-subject.schema.json`** and **`sanitized-binding-evidence.schema.json`**
   → canonical length-prefixed SHA-256 preimage/digest helpers plus exact-name,
   requested-mapping and allocation-receipt validators in Go and TypeScript.
+- **`integration-execute-request.schema.json`** → `IntegrationExecuteInputRules` +
+  `validateIntegrationExecuteInput(operation, input)` (TS) / `ValidateIntegrationExecuteInput` (Go),
+  derived from each operation's `then`-block (`propertyNames.enum`, `required`, per-field
+  `maximum`/`default`). The governance execute route, the app SDK and the kit's local check all
+  refuse a request with the same sentence (`limit must be an integer between 1 and 15`); the
+  SDK vendors the TypeScript file because it ships with no dependencies.
 
 ## Workflow
 
@@ -111,7 +143,7 @@ consumer cutover evidence.
 
 ## Consuming
 
-- **Go:** `go get github.com/Fourier-Labs-AI/harbour-contracts/gen-go@v0.1.0`
+- **Go:** `go get github.com/Fourier-Labs-AI/harbour-contracts/gen-go@v0.50.0`
 
   Two things make this work, and the second is not the obvious one.
 
@@ -148,7 +180,7 @@ consumer cutover evidence.
   Without the above, `go get` fails with `Repository not found` — which reads as a
   missing tag, not as missing access.
 
-- **TS:** `npm i @fourier-labs/harbour-contracts` — published from the tag by CI.
+- **TS:** `npm i @fourier-labs/harbour-contracts` — published from the tag by CI. The hand-written AI policy resolver (`resolver/index.ts`) ships in the same package as the `@fourier-labs/harbour-contracts/resolver` subpath export (`package.json` `exports`).
 
 ## Notes
 

package/contract-release.json

@@ -1,12 +1,12 @@
 {
   "schema": "harbour.contract-release/1.0",
-  "repositoryVersion": "0.47.0.0",
-  "publishVersion": "0.47.0",
-  "publishTag": "v0.47.0",
-  "schemasDigest": "sha256:9d059261d1fbe550fbd4e265287397d6913912c3d5ea6570b2b29d2e6619de4f",
+  "repositoryVersion": "0.51.0.0",
+  "publishVersion": "0.51.0",
+  "publishTag": "v0.51.0",
+  "schemasDigest": "sha256:018bf3078087a18b07990772c94669f658159bc84b0c8accedc7dd5daa38bee5",
   "aiFixturesDigest": "sha256:edac31c92e146ca1c40130f2fb5649db82e24b8cd1ac758153b90612052fddb6",
-  "generatedGoDigest": "sha256:5892b40bfbac4c9a86f671a0eb54ef530f65ba97e5abc0b3713495bbbdfbf4e2",
-  "generatedTypeScriptDigest": "sha256:0bb0c87edaa9399cac1c927ba80dc25ff96f7364678e7f0a17599a34a26c170b",
+  "generatedGoDigest": "sha256:98bb6999738be926c36fd8d0735a17defdad590ced57e94bc431bb9bba53c9ad",
+  "generatedTypeScriptDigest": "sha256:1d83b04e4899777f2963177e39e7ac99852cae80ffb8c03b6a294f5fb19d3600",
   "generatedExclusions": {
     "gen-go/contract_release.go": "contains the generated aggregate digests (self-reference)",
     "gen-ts/contract-release.ts": "contains the generated aggregate digests (self-reference)"
@@ -31,7 +31,7 @@
     "schema/ai-transform-result.schema.json": "sha256:244e380a36957ab2dcb526ea22aaecb56b53664ce1fda6934d0021c084c99133",
     "schema/ai-verification-evidence.schema.json": "sha256:bdbc762df256d2a8dd0bdda60d4d13915ce40034cd756af9515871d145f10ad9",
     "schema/api-error-response.schema.json": "sha256:3d43d5bdf0b59c944e20509d832e6776c3ecdba4d6c245a9118bbe52062a8304",
-    "schema/app-integrations-declaration.schema.json": "sha256:931c63d6a473be29e74ee7fd657649172966d483c0448f4dcaa5512dce9d06bb",
+    "schema/app-integrations-declaration.schema.json": "sha256:1a6ac2e7d77a4d4dcbce8b937747f125081413f819ffee9e27e8b950a436cb22",
     "schema/artifact-contract.schema.json": "sha256:8047b461a1c6d07bbe867a259c57bdf5cc0fdf282cf842ec7b683a9e93713b10",
     "schema/binding-classification-subject.schema.json": "sha256:a8825ce652e7e00a18759c4249bd5bcd0cae552dd58440513f867e87f685133c",
     "schema/builder-input-proposal.schema.json": "sha256:fe85cffa6d76b1e1effe1f5d75525f8fe0e1eaa3be4a304e491aa23ad72c0e72",
@@ -52,22 +52,22 @@
     "schema/error-envelope.schema.json": "sha256:75dccda7dd16fdf8435deda53fc7dbcdc109b65114617a17f11763010c656f90",
     "schema/integration-connect-result.schema.json": "sha256:3f254b67ef739dc1fa395bdc8c4dc93359b16d481dba2a2d777aa5b6f34b7af8",
     "schema/integration-error-details.schema.json": "sha256:09cebaddb7f88e63cbebaa1cada5f91057ae4dc4370e973ef38f7f11c6323284",
-    "schema/integration-execute-request.schema.json": "sha256:da9a701c931edf5f955495f1542f37423ae2bab030034cf90feb0f5f18d094f6",
-    "schema/integration-execute-result.schema.json": "sha256:232d3710c8e550d2946b5ab817b90b538fd0928db9b10b02b166623c59cb0240",
+    "schema/integration-execute-request.schema.json": "sha256:18613bab7c233d1e2d52b960f5fe6ae4409171fa03a3aebf415cf86ae66e2866",
+    "schema/integration-execute-result.schema.json": "sha256:766146779c01ee1dbdd2161c5dc594f43ccaf322762352bb0dc5b80bcb3275b5",
     "schema/kit-bundle-manifest.schema.json": "sha256:c15e28ae028dbd1c262427b9c797142e19b1f38fa36b4ecfe187e32c20a174ec",
     "schema/kit-lock.schema.json": "sha256:5e24b76660f83990af7a6c037af350c3850ee439ef956f65a0360facbdcdd997",
     "schema/kvs-routing-entry.schema.json": "sha256:b75f3a5dfa93a428b2764e03222b66b6ef2bed980f8bac8ffac54afdf3526bc5",
     "schema/promotion-request.schema.json": "sha256:00e96dfd8ddbdba88ea222941d43f3609ff6c815a79e34f6705cab458101c969",
     "schema/promotion-response.schema.json": "sha256:4129712d2e29d6ef21d93d4bd0bacfd60ada3f2ee0ade852824e64346b817634",
-    "schema/saas-connection.schema.json": "sha256:78913c3221166cfecea01c807f0c6e291469501926483fa3e229b8b7b0fdd201",
+    "schema/saas-connection.schema.json": "sha256:fa62fc6e28124120c71ebc36e257263ba8820d48b7d505d54ac53bd812fdd9ee",
     "schema/sanitized-binding-evidence.schema.json": "sha256:1191ab88e2764df927e5f17837674cebebe068d480da2b2fdb390e589f96b51f",
     "schema/secret-reference.schema.json": "sha256:db4e3c2c6a2dbd72d7ea0f9c91cb3b2343a7e67b601996c6818b2ef08e440895",
     "schema/security-scan-input.schema.json": "sha256:83502dffb3c07ac2e0698928e6dc123f454fc667d4aacd336bcad6944ef2ac3d",
     "schema/security-verdict.schema.json": "sha256:ec3c2d5c9df3601aeed0909b36c7f427469c7f0eeb3295c5809b96d09bf3fc26",
     "schema/transform-parked-result.schema.json": "sha256:11729980d4c89d4a9e18f5f213232cd3359739c85626b36c20c2a37ba794c9af",
-    "schema/transform-report.schema.json": "sha256:5943c90ad7a8b473119dde5879c59ed384d5dc19253b90bc3507dd1ff4dd9abe",
+    "schema/transform-report.schema.json": "sha256:858da48fa7fe97d8d06267bb3435d71ba307133b246cb020f5b473bb488c445a",
     "schema/version-state.schema.json": "sha256:3b190007e2f8e3821c41ef11c6f5b226da7d5a18d34d4077f4618004846fd444",
-    "schema/well-defined-app-manifest.schema.json": "sha256:75a06690411880e670f133066a7a469150b53560b9dafa2f066a04485e4b50a0"
+    "schema/well-defined-app-manifest.schema.json": "sha256:40f1bfea912dd85a05a0a3be2f6becadaf8ae3c5de9d5782ff1c8dd1bd83485f"
   },
   "aiFixtures": {
     "fixtures/ai/adversarial-binding-classification-value.json": "sha256:ca009f3f6162a9d93b4ab416d52c1fba12a8a15aca5aed956c5fdcf2171b1e28",
@@ -105,8 +105,10 @@
     "gen-go/contracts_test.go": "sha256:56376287cb1548be1b35ab4c65d6f0b558c5d34885f7a47cb3d9e8d786607bf5",
     "gen-go/doc.go": "sha256:c17bc2d39ed175ce7105c68305f8ae7152f659eb7cd187ecceee7698eb3a65dd",
     "gen-go/error_category.go": "sha256:b2ddea22dcfa030f1a45e721e635485b0bd816cf1f38e7654628a653f5ed4583",
-    "gen-go/schema_documents.go": "sha256:bc8a5119241953827affa45588a1492fdf1e74bb9119564202baf424596d0d86",
-    "gen-go/types.go": "sha256:bd8da0367179571b44a1a1705d1e7628d38d06eef9fc0a50d5908363210fbebe",
+    "gen-go/integration_execute_input_rules.go": "sha256:224fb490a5f936b30927e6637e698093e1e42a695cbc1bcf9a39bc70db9f2172",
+    "gen-go/integration_execute_input_rules_test.go": "sha256:c437a8406a2f062a0173b9419e4cb176fc6eb54e569506225d5162323f55b40b",
+    "gen-go/schema_documents.go": "sha256:66055e0d4354f73d922ee17984de8df065db665f93182b87fcd8a6a94ae94300",
+    "gen-go/types.go": "sha256:c94b302d560efb7d8a8f6a4387a22a2f0321489e04d9d126d561cd921ff07eec",
     "gen-go/version_state.go": "sha256:4ef8abb126414c0025cf2c59bc9c79a74ef4a2ff89e8f316cbf05acc872371c1"
   },
   "generatedTypeScript": {
@@ -131,13 +133,13 @@
     "gen-ts/ai-transform-result.ts": "sha256:208c66b2aeb425c0cbcc18b7191f6e8989443f2b2c1690648e0e06cc1448ce25",
     "gen-ts/ai-verification-evidence.ts": "sha256:979439d77f8b47631d1eb3b6c3c54ea6fec41089d2a51dc815fd370b1c4917fc",
     "gen-ts/api-error-response.ts": "sha256:0fd73be282e7a5d72d6c343a4e64d09c232556b16161167f0cffd6278ed7e3d3",
-    "gen-ts/app-integrations-declaration.ts": "sha256:9d31f54867d0aec2cada067da3b77ce44ee4f838e367929422a9669e0828497e",
+    "gen-ts/app-integrations-declaration.ts": "sha256:aabebdbffc70dd87017f1c72e0b8713f9cef506ba5258279b3a1405185875141",
     "gen-ts/artifact-contract.ts": "sha256:4a6dc6d2caaeed4bb2066cc8a333e6e09e5a0d4745e0b1038293d54ab9403aeb",
     "gen-ts/binding-classification-digest-helper.ts": "sha256:40fc7d85b4c3f3ffc5caf7d7950c62d013c83ee42058c7453b2100d95817f167",
     "gen-ts/binding-classification-subject.ts": "sha256:c409a3fd7b942b50419632c51d9a79474fb30d6374bdc79c0e25c73618e800c3",
     "gen-ts/builder-input-proposal.ts": "sha256:b0108c3787873d3cf1a39f00967379418a6766275d3474cfa55f5a9d93ead174",
     "gen-ts/data-dependency.ts": "sha256:0572c31d7ae9088eccc104eee1a205bf176d1d6dacfaf0f290d666024e284966",
-    "gen-ts/data-grant-v2.ts": "sha256:06ff153d3cf551a7f9a49a01e766f084e4cf51d981299e12f7ef1dedd824c937",
+    "gen-ts/data-grant-v2.ts": "sha256:d55491e8d1a73d8999a43904344760de9c6eb2ce500b1e942d49261a9c67808f",
     "gen-ts/data-grant.ts": "sha256:2358579d8aa1e57b01a6f2b0eacce5531e7f21ef226404c9809925365e0d6155",
     "gen-ts/data-source.ts": "sha256:77d6bb3b0eaa355789c5d97dd1f548734add6950329dc69549350b8d17c8d582",
     "gen-ts/deploy-request.ts": "sha256:0214faa8be6680f0bfc117d5ce67c1a59fcc18bd0ea4bc840e03e7d051fa9ab6",
@@ -152,26 +154,27 @@
     "gen-ts/error-category-registry.ts": "sha256:7466a502c0723a77db825cdeaa9556a244201b55d9b7acbf2c098e9e84351df1",
     "gen-ts/error-category.ts": "sha256:9bda89180c3b740c9aa8be466216592e8ca9d0d368c274333edf6ea5c45afd8e",
     "gen-ts/error-envelope.ts": "sha256:4457309be794f9d4fc0cf62530cc2d442c007bac9ae84aff66df099cc9e40310",
-    "gen-ts/index.ts": "sha256:982599819309370072af19f1c248a033c13b17a6ee9006272d3436ab87b0db21",
+    "gen-ts/index.ts": "sha256:1fa78bbfd85f29f777f9018d110b70388af35ab2e428c07f75f6701ff3eaba22",
     "gen-ts/integration-connect-result.ts": "sha256:4b10f169b6e1af364e9b418de21caa9fadbfb77b43cbff77d741cfae0b52180c",
     "gen-ts/integration-error-details.ts": "sha256:8243f5871f376d1cab4d90e07f3151d148fb03c704168dbccdfe6c9fe76bce83",
-    "gen-ts/integration-execute-request.ts": "sha256:b8b5e271453064a6a1b62d172b2c9a48b2753b3778e29e78ee751cf5d7446cb9",
-    "gen-ts/integration-execute-result.ts": "sha256:bf33b23c6bb121d8e43ea486cf80922d6010919676f0f6206045a2750dda39b4",
+    "gen-ts/integration-execute-input-rules.ts": "sha256:a779c872c44bb892dec7b28173d961696d95e5b6e1fa14e2ba67dd78344cdc5b",
+    "gen-ts/integration-execute-request.ts": "sha256:06056ac8ca4a649560189ee78b40a9d5ad5ca5089d967e5708cbc082aa21ba95",
+    "gen-ts/integration-execute-result.ts": "sha256:4aaf6a9688f9dfdbc87a408556b62f822518acf5b76548076adb55393c0863b4",
     "gen-ts/kit-bundle-manifest.ts": "sha256:9041b32af3df781ca6800bc14c3719e5e54c81dff370633454ac3ad27432eb58",
     "gen-ts/kit-lock.ts": "sha256:de4ae82bac7bd234a3230ae671962e80eed6542d695a032a442673659dc6be5e",
     "gen-ts/kvs-routing-entry.ts": "sha256:d92e85ee9f257d77850d1d3aac9438e2055f38084ff84a48fcedae239d47d4ca",
     "gen-ts/promotion-request.ts": "sha256:9db88cef67f777a16bac628039ec3f582acb9e8cfff6fb592b30d0a0e55abc68",
     "gen-ts/promotion-response.ts": "sha256:f1c9cafac96faeb02a443a31786f67714e818f38d90108e7af41958396524d6f",
-    "gen-ts/saas-connection.ts": "sha256:c7d80c9ef0c6c93232fbcc2d79143e5dcb3ab0b1c81ee48dcf0a01e5a3907dcf",
+    "gen-ts/saas-connection.ts": "sha256:62b5c5ffd125099bae46142013461c9ac3f75c2d27ab72cd4842a937f3e2f308",
     "gen-ts/sanitized-binding-digest-helper.ts": "sha256:c47d7fdc20500e2e72c23fe39ecdd610fc397c47fcba51335ebec3c380fe6872",
     "gen-ts/sanitized-binding-evidence.ts": "sha256:f3fb7b1d7d2e0929eb0ea981eaf32db3104010647185f6ae59f67167d42538a9",
     "gen-ts/secret-reference.ts": "sha256:731fbcde7315cb4128d5b01bdbe6e6f248f13c7ad8dea04a3a4e927ac4890198",
     "gen-ts/security-scan-input.ts": "sha256:b31f048be04c34b40f49d3b3ba53277e473cd435ae9216ba3a3b4dac69fb5685",
     "gen-ts/security-verdict.ts": "sha256:fea950cddbd12fe0218e2573c9a29c6748d56612a464559f1e6d688fa97f68c7",
     "gen-ts/transform-parked-result.ts": "sha256:6279e27cee8d75c29f3ede45580fef1daa0ca300867a78e43ead8a7689ec613f",
-    "gen-ts/transform-report.ts": "sha256:a4f7f895342cd63048b2add63393a1251abb3e97f057b00e3ebd3f96fd1a510e",
+    "gen-ts/transform-report.ts": "sha256:005a10b34b89f055c3aae4bf54c095bbca7a9e15bd9b406b61a9eaafffc37a61",
     "gen-ts/version-state-machine.ts": "sha256:c67af3e86ac306743345b850dfd3ae5201c19d10c40e2c149cf8c38258320d5f",
     "gen-ts/version-state.ts": "sha256:a835112930299e7b593a1b8810b7414f6c9e809da2092306c743128170a3b702",
-    "gen-ts/well-defined-app-manifest.ts": "sha256:f29f8f2d0783e9e49d0546d65c2bedee2a6c2cebba0ec291ad52d9b67cb3a2fa"
+    "gen-ts/well-defined-app-manifest.ts": "sha256:2b72a39c2fa8e76239634d0478dc0da05446e74e944950eacf999b78876455c6"
   }
 }

package/dist/gen-ts/app-integrations-declaration.d.ts

@@ -28,6 +28,7 @@ export interface DeclaredConnection {
         'slack.message.post'?: AppModeChannelOperation;
         'gmail.thread.list'?: UserModeChannelOperation;
         'gmail.message.read'?: UserModeChannelOperation;
+        'gmail.message.send'?: UserModeChannelOperation;
         'warehouse.view.read'?: AppModeViewOperation;
     };
 }

package/dist/gen-ts/contract-release.d.ts

@@ -1,7 +1,7 @@
-export declare const ContractRepositoryVersion: "0.47.0.0";
-export declare const ContractPublishVersion: "0.47.0";
-export declare const ContractPublishTag: "v0.47.0";
-export declare const ContractSchemasDigest: "sha256:9d059261d1fbe550fbd4e265287397d6913912c3d5ea6570b2b29d2e6619de4f";
+export declare const ContractRepositoryVersion: "0.51.0.0";
+export declare const ContractPublishVersion: "0.51.0";
+export declare const ContractPublishTag: "v0.51.0";
+export declare const ContractSchemasDigest: "sha256:018bf3078087a18b07990772c94669f658159bc84b0c8accedc7dd5daa38bee5";
 export declare const ContractAiFixturesDigest: "sha256:edac31c92e146ca1c40130f2fb5649db82e24b8cd1ac758153b90612052fddb6";
-export declare const ContractGeneratedGoDigest: "sha256:5892b40bfbac4c9a86f671a0eb54ef530f65ba97e5abc0b3713495bbbdfbf4e2";
-export declare const ContractGeneratedTypeScriptDigest: "sha256:0bb0c87edaa9399cac1c927ba80dc25ff96f7364678e7f0a17599a34a26c170b";
+export declare const ContractGeneratedGoDigest: "sha256:98bb6999738be926c36fd8d0735a17defdad590ced57e94bc431bb9bba53c9ad";
+export declare const ContractGeneratedTypeScriptDigest: "sha256:1d83b04e4899777f2963177e39e7ac99852cae80ffb8c03b6a294f5fb19d3600";

package/dist/gen-ts/contract-release.js

@@ -1,9 +1,9 @@
 /* eslint-disable */
 // Code generated by tools/gen/gen.mjs from schema/*.json. DO NOT EDIT.
-export const ContractRepositoryVersion = "0.47.0.0";
-export const ContractPublishVersion = "0.47.0";
-export const ContractPublishTag = "v0.47.0";
-export const ContractSchemasDigest = "sha256:9d059261d1fbe550fbd4e265287397d6913912c3d5ea6570b2b29d2e6619de4f";
+export const ContractRepositoryVersion = "0.51.0.0";
+export const ContractPublishVersion = "0.51.0";
+export const ContractPublishTag = "v0.51.0";
+export const ContractSchemasDigest = "sha256:018bf3078087a18b07990772c94669f658159bc84b0c8accedc7dd5daa38bee5";
 export const ContractAiFixturesDigest = "sha256:edac31c92e146ca1c40130f2fb5649db82e24b8cd1ac758153b90612052fddb6";
-export const ContractGeneratedGoDigest = "sha256:5892b40bfbac4c9a86f671a0eb54ef530f65ba97e5abc0b3713495bbbdfbf4e2";
-export const ContractGeneratedTypeScriptDigest = "sha256:0bb0c87edaa9399cac1c927ba80dc25ff96f7364678e7f0a17599a34a26c170b";
+export const ContractGeneratedGoDigest = "sha256:98bb6999738be926c36fd8d0735a17defdad590ced57e94bc431bb9bba53c9ad";
+export const ContractGeneratedTypeScriptDigest = "sha256:1d83b04e4899777f2963177e39e7ac99852cae80ffb8c03b6a294f5fb19d3600";

package/dist/gen-ts/data-grant-v2.d.ts

@@ -33,7 +33,7 @@ export interface DataGrantV2 {
      *
      * @maxItems 5
      */
-    operations: ('slack.channel.history' | 'slack.message.post' | 'gmail.thread.list' | 'gmail.message.read' | 'warehouse.view.read')[];
+    operations: ('slack.channel.history' | 'slack.message.post' | 'gmail.thread.list' | 'gmail.message.read' | 'gmail.message.send' | 'warehouse.view.read')[];
     /**
      * Approved logical resources. Never inherited by wildcard. Empty until the first approval.
      *

package/dist/gen-ts/index.d.ts

@@ -43,6 +43,7 @@ export * from './error-category.js';
 export * from './error-envelope.js';
 export * from './integration-connect-result.js';
 export * from './integration-error-details.js';
+export * from './integration-execute-input-rules.js';
 export * from './integration-execute-request.js';
 export * from './integration-execute-result.js';
 export * from './kit-bundle-manifest.js';

package/dist/gen-ts/index.js

@@ -45,6 +45,7 @@ export * from './error-category.js';
 export * from './error-envelope.js';
 export * from './integration-connect-result.js';
 export * from './integration-error-details.js';
+export * from './integration-execute-input-rules.js';
 export * from './integration-execute-request.js';
 export * from './integration-execute-result.js';
 export * from './kit-bundle-manifest.js';

package/dist/gen-ts/integration-execute-input-rules.d.ts

@@ -0,0 +1,187 @@
+/**
+ * Per-operation input rules of integration-execute-request: derived from each
+ * operation's then-block (propertyNames.enum, required, per-field overrides).
+ * The governance execute route, the app SDK and the kit's local check validate
+ * with validateIntegrationExecuteInput below, so a request is refused with the
+ * same message wherever it is made.
+ */
+export type IntegrationExecuteInputFieldRule = {
+    kind: 'integer';
+    required: boolean;
+    minimum: number;
+    maximum: number;
+    default?: number;
+} | {
+    kind: 'string';
+    required: boolean;
+    minLength: number;
+    maxLength?: number;
+    pattern?: string;
+} | {
+    kind: 'string[]';
+    required: boolean;
+    minItems: number;
+    maxItems: number;
+    uniqueItems: boolean;
+    item: {
+        minLength: number;
+        maxLength?: number;
+        pattern?: string;
+    };
+};
+export type IntegrationExecuteOperationRule = {
+    idempotencyKey: boolean;
+    fields: Record<string, IntegrationExecuteInputFieldRule>;
+};
+export declare const IntegrationExecuteInputRules: {
+    readonly "slack.channel.history": {
+        readonly idempotencyKey: false;
+        readonly fields: {
+            readonly limit: {
+                readonly kind: "integer";
+                readonly required: false;
+                readonly minimum: 1;
+                readonly maximum: 15;
+                readonly default: 15;
+            };
+        };
+    };
+    readonly "slack.message.post": {
+        readonly idempotencyKey: true;
+        readonly fields: {
+            readonly text: {
+                readonly kind: "string";
+                readonly required: true;
+                readonly minLength: 1;
+                readonly maxLength: 4000;
+            };
+        };
+    };
+    readonly "gmail.thread.list": {
+        readonly idempotencyKey: false;
+        readonly fields: {
+            readonly limit: {
+                readonly kind: "integer";
+                readonly required: false;
+                readonly minimum: 1;
+                readonly maximum: 15;
+                readonly default: 15;
+            };
+        };
+    };
+    readonly "gmail.message.read": {
+        readonly idempotencyKey: false;
+        readonly fields: {
+            readonly messageId: {
+                readonly kind: "string";
+                readonly required: true;
+                readonly minLength: 0;
+                readonly pattern: "^[A-Za-z0-9_-]{1,64}$";
+            };
+        };
+    };
+    readonly "gmail.message.send": {
+        readonly idempotencyKey: true;
+        readonly fields: {
+            readonly to: {
+                readonly kind: "string[]";
+                readonly required: true;
+                readonly minItems: 1;
+                readonly maxItems: 50;
+                readonly uniqueItems: true;
+                readonly item: {
+                    readonly minLength: 3;
+                    readonly maxLength: 254;
+                    readonly pattern: "^[^\\s@<>,;\"]+@[^\\s@<>,;\"]+\\.[^\\s@<>,;\"]+$";
+                };
+            };
+            readonly cc: {
+                readonly kind: "string[]";
+                readonly required: false;
+                readonly minItems: 1;
+                readonly maxItems: 50;
+                readonly uniqueItems: true;
+                readonly item: {
+                    readonly minLength: 3;
+                    readonly maxLength: 254;
+                    readonly pattern: "^[^\\s@<>,;\"]+@[^\\s@<>,;\"]+\\.[^\\s@<>,;\"]+$";
+                };
+            };
+            readonly bcc: {
+                readonly kind: "string[]";
+                readonly required: false;
+                readonly minItems: 1;
+                readonly maxItems: 50;
+                readonly uniqueItems: true;
+                readonly item: {
+                    readonly minLength: 3;
+                    readonly maxLength: 254;
+                    readonly pattern: "^[^\\s@<>,;\"]+@[^\\s@<>,;\"]+\\.[^\\s@<>,;\"]+$";
+                };
+            };
+            readonly subject: {
+                readonly kind: "string";
+                readonly required: true;
+                readonly minLength: 1;
+                readonly maxLength: 256;
+            };
+            readonly text: {
+                readonly kind: "string";
+                readonly required: true;
+                readonly minLength: 1;
+                readonly maxLength: 4000;
+            };
+            readonly replyToMessageId: {
+                readonly kind: "string";
+                readonly required: false;
+                readonly minLength: 0;
+                readonly pattern: "^[A-Za-z0-9_-]{1,64}$";
+            };
+        };
+    };
+    readonly "warehouse.view.read": {
+        readonly idempotencyKey: false;
+        readonly fields: {
+            readonly columns: {
+                readonly kind: "string[]";
+                readonly required: true;
+                readonly minItems: 1;
+                readonly maxItems: 32;
+                readonly uniqueItems: false;
+                readonly item: {
+                    readonly minLength: 0;
+                    readonly pattern: "^[A-Za-z_][A-Za-z0-9_]{0,62}$";
+                };
+            };
+            readonly limit: {
+                readonly kind: "integer";
+                readonly required: false;
+                readonly minimum: 1;
+                readonly maximum: 1000;
+                readonly default: 100;
+            };
+        };
+    };
+};
+export type IntegrationExecuteOperation = keyof typeof IntegrationExecuteInputRules;
+/** The upper bound of one integer input as a literal type: integrationExecuteInputMaximum('slack.channel.history', 'limit') is 15. */
+export declare function integrationExecuteInputMaximum<O extends IntegrationExecuteOperation, F extends keyof (typeof IntegrationExecuteInputRules)[O]['fields']>(operation: O, field: F): Extract<(typeof IntegrationExecuteInputRules)[O]['fields'][F], {
+    maximum: number;
+}>['maximum'];
+export type IntegrationExecuteInputProblem = {
+    field: string;
+    message: string;
+};
+export type IntegrationExecuteInputValidation = {
+    ok: true;
+    input: Record<string, unknown>;
+} | {
+    ok: false;
+    problem: IntegrationExecuteInputProblem;
+};
+/**
+ * Validates one operation's input against the contract and returns it with the
+ * contract's defaults applied. The message names the field and its allowed
+ * range; it is the sentence the platform answers with, so a caller may show it.
+ */
+export declare function validateIntegrationExecuteInput(operation: string, input: unknown): IntegrationExecuteInputValidation;

package/dist/gen-ts/integration-execute-input-rules.js

@@ -0,0 +1,114 @@
+/* eslint-disable */
+// Code generated by tools/gen/gen.mjs from schema/*.json. DO NOT EDIT.
+export const IntegrationExecuteInputRules = {
+    "slack.channel.history": {
+        idempotencyKey: false,
+        fields: {
+            limit: { kind: "integer", required: false, minimum: 1, maximum: 15, default: 15 },
+        },
+    },
+    "slack.message.post": {
+        idempotencyKey: true,
+        fields: {
+            text: { kind: "string", required: true, minLength: 1, maxLength: 4000 },
+        },
+    },
+    "gmail.thread.list": {
+        idempotencyKey: false,
+        fields: {
+            limit: { kind: "integer", required: false, minimum: 1, maximum: 15, default: 15 },
+        },
+    },
+    "gmail.message.read": {
+        idempotencyKey: false,
+        fields: {
+            messageId: { kind: "string", required: true, minLength: 0, pattern: "^[A-Za-z0-9_-]{1,64}$" },
+        },
+    },
+    "gmail.message.send": {
+        idempotencyKey: true,
+        fields: {
+            to: { kind: "string[]", required: true, minItems: 1, maxItems: 50, uniqueItems: true, item: { minLength: 3, maxLength: 254, pattern: "^[^\\s@<>,;\"]+@[^\\s@<>,;\"]+\\.[^\\s@<>,;\"]+$" } },
+            cc: { kind: "string[]", required: false, minItems: 1, maxItems: 50, uniqueItems: true, item: { minLength: 3, maxLength: 254, pattern: "^[^\\s@<>,;\"]+@[^\\s@<>,;\"]+\\.[^\\s@<>,;\"]+$" } },
+            bcc: { kind: "string[]", required: false, minItems: 1, maxItems: 50, uniqueItems: true, item: { minLength: 3, maxLength: 254, pattern: "^[^\\s@<>,;\"]+@[^\\s@<>,;\"]+\\.[^\\s@<>,;\"]+$" } },
+            subject: { kind: "string", required: true, minLength: 1, maxLength: 256 },
+            text: { kind: "string", required: true, minLength: 1, maxLength: 4000 },
+            replyToMessageId: { kind: "string", required: false, minLength: 0, pattern: "^[A-Za-z0-9_-]{1,64}$" },
+        },
+    },
+    "warehouse.view.read": {
+        idempotencyKey: false,
+        fields: {
+            columns: { kind: "string[]", required: true, minItems: 1, maxItems: 32, uniqueItems: false, item: { minLength: 0, pattern: "^[A-Za-z_][A-Za-z0-9_]{0,62}$" } },
+            limit: { kind: "integer", required: false, minimum: 1, maximum: 1000, default: 100 },
+        },
+    },
+};
+/** The upper bound of one integer input as a literal type: integrationExecuteInputMaximum('slack.channel.history', 'limit') is 15. */
+export function integrationExecuteInputMaximum(operation, field) {
+    const rule = IntegrationExecuteInputRules[operation].fields[field];
+    if (!rule || rule.kind !== 'integer')
+        throw new Error(`${String(operation)}.input.${String(field)} has no integer bound`);
+    return rule.maximum;
+}
+const patterns = new Map();
+function matches(pattern, value) {
+    let compiled = patterns.get(pattern);
+    if (!compiled) {
+        compiled = new RegExp(pattern, 'u');
+        patterns.set(pattern, compiled);
+    }
+    return compiled.test(value);
+}
+/**
+ * Validates one operation's input against the contract and returns it with the
+ * contract's defaults applied. The message names the field and its allowed
+ * range; it is the sentence the platform answers with, so a caller may show it.
+ */
+export function validateIntegrationExecuteInput(operation, input) {
+    const rule = IntegrationExecuteInputRules[operation];
+    if (!rule)
+        return { ok: false, problem: { field: 'operation', message: `${operation} is not a declared integration operation` } };
+    const raw = input === undefined ? {} : input;
+    if (raw === null || typeof raw !== 'object' || Array.isArray(raw))
+        return { ok: false, problem: { field: 'input', message: 'input must be an object' } };
+    const given = raw;
+    for (const name of Object.keys(given))
+        if (!Object.prototype.hasOwnProperty.call(rule.fields, name))
+            return { ok: false, problem: { field: name, message: `${name} is not an input of ${operation}` } };
+    const out = {};
+    for (const [name, field] of Object.entries(rule.fields)) {
+        const value = given[name];
+        if (value === undefined || value === null) {
+            if (field.required)
+                return { ok: false, problem: { field: name, message: `${name} is required for ${operation}` } };
+            if (field.kind === 'integer' && field.default !== undefined)
+                out[name] = field.default;
+            continue;
+        }
+        if (field.kind === 'integer') {
+            if (typeof value !== 'number' || !Number.isInteger(value) || value < field.minimum || value > field.maximum)
+                return { ok: false, problem: { field: name, message: `${name} must be an integer between ${field.minimum} and ${field.maximum}` } };
+        }
+        else if (field.kind === 'string') {
+            if (typeof value !== 'string' || value.length < field.minLength || (field.maxLength !== undefined && value.length > field.maxLength))
+                return { ok: false, problem: { field: name, message: field.maxLength !== undefined ? `${name} must be ${field.minLength} to ${field.maxLength} characters` : `${name} must be a string of at least ${field.minLength} characters` } };
+            if (field.pattern && !matches(field.pattern, value))
+                return { ok: false, problem: { field: name, message: `${name} must match ${field.pattern}` } };
+        }
+        else {
+            if (!Array.isArray(value) || value.length < field.minItems || value.length > field.maxItems)
+                return { ok: false, problem: { field: name, message: `${name} must list ${field.minItems} to ${field.maxItems} items` } };
+            const seen = new Set();
+            for (const [index, item] of value.entries()) {
+                if (typeof item !== 'string' || item.length < field.item.minLength || (field.item.maxLength !== undefined && item.length > field.item.maxLength) || (field.item.pattern !== undefined && !matches(field.item.pattern, item)))
+                    return { ok: false, problem: { field: name, message: `${name}[${index}] is not a valid ${name} entry` } };
+                if (field.uniqueItems && seen.has(item))
+                    return { ok: false, problem: { field: name, message: `${name} must not repeat an entry` } };
+                seen.add(item);
+            }
+        }
+        out[name] = value;
+    }
+    return { ok: true, input: out };
+}