@fourier-labs/harbour-contracts 0.47.0 → 0.51.0

package/dist/gen-ts/integration-execute-request.d.ts

@@ -1,5 +1,5 @@
 /**
- * Body of POST /_harbour/integrations/execute (app SDK), forwarded unchanged to the governance development and runtime execute routes. Exactly one declared operation against one declared resource. The identity mode is NOT a caller field: it is fixed by the operation and enforced from the approved grant; any identity/userId/scope field is rejected by additionalProperties. Per-operation input bounds: slack.channel.history {limit? 1..15, default 15}; slack.message.post {text 1..4000 chars} and a required idempotencyKey retained across retries of one explicit Send; gmail.thread.list {limit? 1..15, default 15}; gmail.message.read {messageId}; warehouse.view.read {columns 1..32, limit? 1..1000, default 100}. Transport limits (not expressible here): request <= 16 KiB, total deadline 10 s.
+ * Body of POST /_harbour/integrations/execute (app SDK), forwarded unchanged to the governance development and runtime execute routes. Exactly one declared operation against one declared resource. The identity mode is NOT a caller field: it is fixed by the operation and enforced from the approved grant; any identity/userId/scope field is rejected by additionalProperties. Per-operation input bounds: slack.channel.history {limit? 1..15, default 15}; slack.message.post {text 1..4000 chars} and a required idempotencyKey retained across retries of one explicit Send; gmail.thread.list {limit? 1..15, default 15}; gmail.message.read {messageId}; gmail.message.send {to 1..50 addresses (to+cc+bcc <= 50 in total), cc?, bcc?, subject 1..256 chars, text 1..4000 chars, replyToMessageId?} and a required idempotencyKey like slack.message.post (plain text only, no attachments); warehouse.view.read {columns 1..32, limit? 1..1000, default 100}. Each operation's then-block is the one statement of its input rules: propertyNames.enum names the fields it accepts, required the ones it needs, and per-field overrides (maximum, default) narrow the shared property. Codegen derives IntegrationExecuteInputRules and validateIntegrationExecuteInput (gen-ts/integration-execute-input-rules.ts, gen-go/integration_execute_input_rules.go) from exactly these blocks, so the governance execute route, the app SDK and the kit's local check refuse the same request with the same message. Transport limits (not expressible here): request <= 16 KiB, total deadline 10 s.
  */
 export type IntegrationExecuteRequest = {
     /**
@@ -7,20 +7,37 @@ export type IntegrationExecuteRequest = {
      */
     connection: string;
     /**
-     * Closed operation set. Extending it is a contracts change.
+     * Closed operation set. Extending it is a contracts change. gmail.message.send (0.50.0) sends one plain-text email as the signed-in person: a send like slack.message.post (explicit Send, idempotencyKey, write receipt) under user identity.
      */
-    operation: 'slack.channel.history' | 'slack.message.post' | 'gmail.thread.list' | 'gmail.message.read' | 'warehouse.view.read';
+    operation: 'slack.channel.history' | 'slack.message.post' | 'gmail.thread.list' | 'gmail.message.read' | 'gmail.message.send' | 'warehouse.view.read';
     /**
      * Tenant-wide logical alias of a connection (governance sourceId) or of a resource under it.
      */
     resource: string;
     input: {
+        /**
+         * Read operations: how many items to return; the per-operation then-block sets the real ceiling (15 for slack.channel.history and gmail.thread.list, 1000 for warehouse.view.read) and the default.
+         */
         limit?: number;
+        /**
+         * slack.message.post / gmail.message.send: the plain-text body, 1..4000 characters.
+         */
         text?: string;
         /**
          * gmail.message.read: the Gmail message id a gmail.thread.list result named.
          */
         messageId?: string;
+        to?: EmailAddressList;
+        cc?: EmailAddressList1;
+        bcc?: EmailAddressList2;
+        /**
+         * gmail.message.send: one-line subject (no line breaks).
+         */
+        subject?: string;
+        /**
+         * gmail.message.send: a Gmail message id (from gmail.thread.list / gmail.message.read) the email replies to; the send joins that thread.
+         */
+        replyToMessageId?: string;
         /**
          * @minItems 1
          * @maxItems 32
@@ -28,7 +45,32 @@ export type IntegrationExecuteRequest = {
         columns?: string[];
     };
     /**
-     * UUID of one explicit Send action; required for slack.message.post only. The same key with the same payload and subject returns the recorded outcome for seven days.
+     * UUID of one explicit Send action; required for slack.message.post and gmail.message.send only. The same key with the same payload and subject returns the recorded outcome for seven days.
      */
     idempotencyKey?: string;
 };
+/**
+ * One bare email address (no display name).
+ */
+export type EmailAddress = string;
+/**
+ * gmail.message.send: primary recipients.
+ *
+ * @minItems 1
+ * @maxItems 50
+ */
+export type EmailAddressList = EmailAddress[];
+/**
+ * gmail.message.send: carbon-copy recipients.
+ *
+ * @minItems 1
+ * @maxItems 50
+ */
+export type EmailAddressList1 = EmailAddress[];
+/**
+ * gmail.message.send: blind-copy recipients.
+ *
+ * @minItems 1
+ * @maxItems 50
+ */
+export type EmailAddressList2 = EmailAddress[];

package/dist/gen-ts/integration-execute-result.d.ts

@@ -1,5 +1,5 @@
 /**
- * The `data` member of a successful execute response `{data, requestId}`; the SDK unwraps `data`. Exactly one of the five operation results: slack.channel.history -> {messages, hasMore} (plain text/IDs/time only, never the provider payload); slack.message.post -> {messageId}; gmail.thread.list -> {threads, hasMore} (newest inbox threads; each `messageId` is the thread's newest message, what gmail.message.read takes); gmail.message.read -> {id, threadId, subject, from, to, date, text, truncated} (headers plus the plain text with html stripped, cut at 16 KiB with `truncated` set); warehouse.view.read -> {rows} (decimal/64-bit values as strings, dates as ISO strings). An unknown send outcome is never a result; it is an error with details.code SEND_OUTCOME_UNKNOWN. Results over 1 MiB are rejected, not truncated.
+ * The `data` member of a successful execute response `{data, requestId}`; the SDK unwraps `data`. Exactly one of the six operation results: slack.channel.history -> {messages, hasMore} (plain text/IDs/time only, never the provider payload); slack.message.post -> {messageId}; gmail.thread.list -> {threads, hasMore} (newest inbox threads; each `messageId` is the thread's newest message, what gmail.message.read takes); gmail.message.read -> {id, threadId, subject, from, to, date, text, truncated} (headers plus the plain text with html stripped, cut at 16 KiB with `truncated` set); gmail.message.send -> {messageId, threadId} (the Gmail ids of the sent message and its thread); warehouse.view.read -> {rows} (decimal/64-bit values as strings, dates as ISO strings). An unknown send outcome is never a result; it is an error with details.code SEND_OUTCOME_UNKNOWN. Results over 1 MiB are rejected, not truncated.
  */
 export type IntegrationExecuteResult = {
     /**

package/dist/gen-ts/saas-connection.d.ts

@@ -39,12 +39,12 @@ export interface SaasConnection {
         [k: string]: string;
     };
     /**
-     * Operations IT allows apps to request on this connection: the provider's own SaaS operations (Slack: slack.channel.history, slack.message.post; Gmail: gmail.thread.list, gmail.message.read). Never warehouse.view.read.
+     * Operations IT allows apps to request on this connection: the provider's own SaaS operations (Slack: slack.channel.history, slack.message.post; Gmail: gmail.thread.list, gmail.message.read, gmail.message.send). Never warehouse.view.read.
      *
      * @minItems 1
-     * @maxItems 4
+     * @maxItems 5
      */
-    operations: ('slack.channel.history' | 'slack.message.post' | 'gmail.thread.list' | 'gmail.message.read' | 'warehouse.view.read')[];
+    operations: ('slack.channel.history' | 'slack.message.post' | 'gmail.thread.list' | 'gmail.message.read' | 'gmail.message.send' | 'warehouse.view.read')[];
     developmentPreapproval: DevelopmentPreapproval;
     /**
      * Lower-cased builder emails excluded from development preapproval.

package/dist/gen-ts/transform-report.d.ts

@@ -3,6 +3,8 @@
  */
 export type TransformReport = {
     /**
+     * Optional self-report of the playbooks the agent says it applied. A claim about its own behaviour is not evidence, so nothing validates it; a deployable report may omit it, and one that still carries it stays valid.
+     *
      * @minItems 1
      */
     applied_playbooks?: string[];

package/dist/gen-ts/well-defined-app-manifest.d.ts

@@ -15,6 +15,7 @@ export type Workload = {
  */
 export type Command = string[];
 export type ResourceProfile = 'standard' | 'memory-1g' | 'memory-2g';
+export type Capability = 'data' | 'files' | 'actions' | 'realtime' | 'telemetry';
 /**
  * Versioned provisioning input emitted by Harbour Transform. It describes runtime wiring and workload lifecycle only; PostgreSQL grants and RLS remain the database authorization authority.
  */
@@ -33,6 +34,17 @@ export interface WellDefinedAppManifest {
      * @maxItems 128
      */
     bindings: WorkloadBinding[];
+    /**
+     * Optional language runtime the application container is built on, spelled exactly as transform-report.application.runtime does (nodejs22, python3.11). Optional so a manifest written before the producer emits it still validates.
+     */
+    runtime?: string;
+    /**
+     * Optional declaration of the Harbour browser capabilities the application uses. Same closed set as the app-capabilities document; this is the declaration, not a source scan.
+     *
+     * @maxItems 5
+     */
+    capabilities?: Capability[];
+    routeAuth?: RouteAuth;
 }
 export interface QueueConsumer {
     logicalName: string;
@@ -64,3 +76,22 @@ export interface WorkloadBinding {
      */
     reference?: string;
 }
+/**
+ * Optional method/path authentication policy. Omitted means every route requires Harbour SSO, the same default the policy states explicitly.
+ */
+export interface RouteAuth {
+    default: 'sso_required';
+    /**
+     * @maxItems 64
+     */
+    public: PublicRoute[];
+}
+export interface PublicRoute {
+    path: string;
+    /**
+     * @minItems 1
+     * @maxItems 7
+     */
+    methods: ('GET' | 'HEAD' | 'POST' | 'PUT' | 'PATCH' | 'DELETE' | 'OPTIONS')[];
+    mode: 'application_authorized';
+}

package/gen-ts/app-integrations-declaration.ts

@@ -32,6 +32,7 @@ export interface DeclaredConnection {
     'slack.message.post'?: AppModeChannelOperation;
     'gmail.thread.list'?: UserModeChannelOperation;
     'gmail.message.read'?: UserModeChannelOperation;
+    'gmail.message.send'?: UserModeChannelOperation;
     'warehouse.view.read'?: AppModeViewOperation;
   };
 }

package/gen-ts/contract-release.ts

@@ -1,10 +1,10 @@
 /* eslint-disable */
 // Code generated by tools/gen/gen.mjs from schema/*.json. DO NOT EDIT.
 
-export const ContractRepositoryVersion = "0.47.0.0" as const;
-export const ContractPublishVersion = "0.47.0" as const;
-export const ContractPublishTag = "v0.47.0" as const;
-export const ContractSchemasDigest = "sha256:9d059261d1fbe550fbd4e265287397d6913912c3d5ea6570b2b29d2e6619de4f" as const;
+export const ContractRepositoryVersion = "0.51.0.0" as const;
+export const ContractPublishVersion = "0.51.0" as const;
+export const ContractPublishTag = "v0.51.0" as const;
+export const ContractSchemasDigest = "sha256:018bf3078087a18b07990772c94669f658159bc84b0c8accedc7dd5daa38bee5" as const;
 export const ContractAiFixturesDigest = "sha256:edac31c92e146ca1c40130f2fb5649db82e24b8cd1ac758153b90612052fddb6" as const;
-export const ContractGeneratedGoDigest = "sha256:5892b40bfbac4c9a86f671a0eb54ef530f65ba97e5abc0b3713495bbbdfbf4e2" as const;
-export const ContractGeneratedTypeScriptDigest = "sha256:0bb0c87edaa9399cac1c927ba80dc25ff96f7364678e7f0a17599a34a26c170b" as const;
+export const ContractGeneratedGoDigest = "sha256:98bb6999738be926c36fd8d0735a17defdad590ced57e94bc431bb9bba53c9ad" as const;
+export const ContractGeneratedTypeScriptDigest = "sha256:1d83b04e4899777f2963177e39e7ac99852cae80ffb8c03b6a294f5fb19d3600" as const;

package/gen-ts/data-grant-v2.ts

@@ -38,7 +38,12 @@ export interface DataGrantV2 {
    * @maxItems 5
    */
   operations: (
-    'slack.channel.history' | 'slack.message.post' | 'gmail.thread.list' | 'gmail.message.read' | 'warehouse.view.read'
+    | 'slack.channel.history'
+    | 'slack.message.post'
+    | 'gmail.thread.list'
+    | 'gmail.message.read'
+    | 'gmail.message.send'
+    | 'warehouse.view.read'
   )[];
   /**
    * Approved logical resources. Never inherited by wildcard. Empty until the first approval.

package/gen-ts/index.ts

@@ -46,6 +46,7 @@ export * from './error-category.js';
 export * from './error-envelope.js';
 export * from './integration-connect-result.js';
 export * from './integration-error-details.js';
+export * from './integration-execute-input-rules.js';
 export * from './integration-execute-request.js';
 export * from './integration-execute-result.js';
 export * from './kit-bundle-manifest.js';

package/gen-ts/integration-execute-input-rules.ts

@@ -0,0 +1,119 @@
+/* eslint-disable */
+// Code generated by tools/gen/gen.mjs from schema/*.json. DO NOT EDIT.
+
+/**
+ * Per-operation input rules of integration-execute-request: derived from each
+ * operation's then-block (propertyNames.enum, required, per-field overrides).
+ * The governance execute route, the app SDK and the kit's local check validate
+ * with validateIntegrationExecuteInput below, so a request is refused with the
+ * same message wherever it is made.
+ */
+export type IntegrationExecuteInputFieldRule =
+  | { kind: 'integer'; required: boolean; minimum: number; maximum: number; default?: number }
+  | { kind: 'string'; required: boolean; minLength: number; maxLength?: number; pattern?: string }
+  | { kind: 'string[]'; required: boolean; minItems: number; maxItems: number; uniqueItems: boolean; item: { minLength: number; maxLength?: number; pattern?: string } };
+
+export type IntegrationExecuteOperationRule = { idempotencyKey: boolean; fields: Record<string, IntegrationExecuteInputFieldRule> };
+
+export const IntegrationExecuteInputRules = {
+  "slack.channel.history": {
+    idempotencyKey: false,
+    fields: {
+      limit: { kind: "integer", required: false, minimum: 1, maximum: 15, default: 15 },
+    },
+  },
+  "slack.message.post": {
+    idempotencyKey: true,
+    fields: {
+      text: { kind: "string", required: true, minLength: 1, maxLength: 4000 },
+    },
+  },
+  "gmail.thread.list": {
+    idempotencyKey: false,
+    fields: {
+      limit: { kind: "integer", required: false, minimum: 1, maximum: 15, default: 15 },
+    },
+  },
+  "gmail.message.read": {
+    idempotencyKey: false,
+    fields: {
+      messageId: { kind: "string", required: true, minLength: 0, pattern: "^[A-Za-z0-9_-]{1,64}$" },
+    },
+  },
+  "gmail.message.send": {
+    idempotencyKey: true,
+    fields: {
+      to: { kind: "string[]", required: true, minItems: 1, maxItems: 50, uniqueItems: true, item: { minLength: 3, maxLength: 254, pattern: "^[^\\s@<>,;\"]+@[^\\s@<>,;\"]+\\.[^\\s@<>,;\"]+$" } },
+      cc: { kind: "string[]", required: false, minItems: 1, maxItems: 50, uniqueItems: true, item: { minLength: 3, maxLength: 254, pattern: "^[^\\s@<>,;\"]+@[^\\s@<>,;\"]+\\.[^\\s@<>,;\"]+$" } },
+      bcc: { kind: "string[]", required: false, minItems: 1, maxItems: 50, uniqueItems: true, item: { minLength: 3, maxLength: 254, pattern: "^[^\\s@<>,;\"]+@[^\\s@<>,;\"]+\\.[^\\s@<>,;\"]+$" } },
+      subject: { kind: "string", required: true, minLength: 1, maxLength: 256 },
+      text: { kind: "string", required: true, minLength: 1, maxLength: 4000 },
+      replyToMessageId: { kind: "string", required: false, minLength: 0, pattern: "^[A-Za-z0-9_-]{1,64}$" },
+    },
+  },
+  "warehouse.view.read": {
+    idempotencyKey: false,
+    fields: {
+      columns: { kind: "string[]", required: true, minItems: 1, maxItems: 32, uniqueItems: false, item: { minLength: 0, pattern: "^[A-Za-z_][A-Za-z0-9_]{0,62}$" } },
+      limit: { kind: "integer", required: false, minimum: 1, maximum: 1000, default: 100 },
+    },
+  },
+} as const satisfies Record<string, IntegrationExecuteOperationRule>;
+
+export type IntegrationExecuteOperation = keyof typeof IntegrationExecuteInputRules;
+
+/** The upper bound of one integer input as a literal type: integrationExecuteInputMaximum('slack.channel.history', 'limit') is 15. */
+export function integrationExecuteInputMaximum<O extends IntegrationExecuteOperation, F extends keyof (typeof IntegrationExecuteInputRules)[O]['fields']>(operation: O, field: F): Extract<(typeof IntegrationExecuteInputRules)[O]['fields'][F], { maximum: number }>['maximum'] {
+  const rule = (IntegrationExecuteInputRules[operation].fields as Record<string, IntegrationExecuteInputFieldRule>)[field as string];
+  if (!rule || rule.kind !== 'integer') throw new Error(`${String(operation)}.input.${String(field)} has no integer bound`);
+  return rule.maximum as never;
+}
+
+export type IntegrationExecuteInputProblem = { field: string; message: string };
+export type IntegrationExecuteInputValidation = { ok: true; input: Record<string, unknown> } | { ok: false; problem: IntegrationExecuteInputProblem };
+
+const patterns = new Map<string, RegExp>();
+function matches(pattern: string, value: string): boolean {
+  let compiled = patterns.get(pattern);
+  if (!compiled) { compiled = new RegExp(pattern, 'u'); patterns.set(pattern, compiled); }
+  return compiled.test(value);
+}
+
+/**
+ * Validates one operation's input against the contract and returns it with the
+ * contract's defaults applied. The message names the field and its allowed
+ * range; it is the sentence the platform answers with, so a caller may show it.
+ */
+export function validateIntegrationExecuteInput(operation: string, input: unknown): IntegrationExecuteInputValidation {
+  const rule = (IntegrationExecuteInputRules as Record<string, IntegrationExecuteOperationRule>)[operation];
+  if (!rule) return { ok: false, problem: { field: 'operation', message: `${operation} is not a declared integration operation` } };
+  const raw = input === undefined ? {} : input;
+  if (raw === null || typeof raw !== 'object' || Array.isArray(raw)) return { ok: false, problem: { field: 'input', message: 'input must be an object' } };
+  const given = raw as Record<string, unknown>;
+  for (const name of Object.keys(given)) if (!Object.prototype.hasOwnProperty.call(rule.fields, name)) return { ok: false, problem: { field: name, message: `${name} is not an input of ${operation}` } };
+  const out: Record<string, unknown> = {};
+  for (const [name, field] of Object.entries(rule.fields)) {
+    const value = given[name];
+    if (value === undefined || value === null) {
+      if (field.required) return { ok: false, problem: { field: name, message: `${name} is required for ${operation}` } };
+      if (field.kind === 'integer' && field.default !== undefined) out[name] = field.default;
+      continue;
+    }
+    if (field.kind === 'integer') {
+      if (typeof value !== 'number' || !Number.isInteger(value) || value < field.minimum || value > field.maximum) return { ok: false, problem: { field: name, message: `${name} must be an integer between ${field.minimum} and ${field.maximum}` } };
+    } else if (field.kind === 'string') {
+      if (typeof value !== 'string' || value.length < field.minLength || (field.maxLength !== undefined && value.length > field.maxLength)) return { ok: false, problem: { field: name, message: field.maxLength !== undefined ? `${name} must be ${field.minLength} to ${field.maxLength} characters` : `${name} must be a string of at least ${field.minLength} characters` } };
+      if (field.pattern && !matches(field.pattern, value)) return { ok: false, problem: { field: name, message: `${name} must match ${field.pattern}` } };
+    } else {
+      if (!Array.isArray(value) || value.length < field.minItems || value.length > field.maxItems) return { ok: false, problem: { field: name, message: `${name} must list ${field.minItems} to ${field.maxItems} items` } };
+      const seen = new Set<string>();
+      for (const [index, item] of value.entries()) {
+        if (typeof item !== 'string' || item.length < field.item.minLength || (field.item.maxLength !== undefined && item.length > field.item.maxLength) || (field.item.pattern !== undefined && !matches(field.item.pattern, item))) return { ok: false, problem: { field: name, message: `${name}[${index}] is not a valid ${name} entry` } };
+        if (field.uniqueItems && seen.has(item)) return { ok: false, problem: { field: name, message: `${name} must not repeat an entry` } };
+        seen.add(item);
+      }
+    }
+    out[name] = value;
+  }
+  return { ok: true, input: out };
+}

package/gen-ts/integration-execute-request.ts

@@ -2,7 +2,7 @@
 // Code generated by tools/gen/gen.mjs from schema/*.json. DO NOT EDIT.
 
 /**
- * Body of POST /_harbour/integrations/execute (app SDK), forwarded unchanged to the governance development and runtime execute routes. Exactly one declared operation against one declared resource. The identity mode is NOT a caller field: it is fixed by the operation and enforced from the approved grant; any identity/userId/scope field is rejected by additionalProperties. Per-operation input bounds: slack.channel.history {limit? 1..15, default 15}; slack.message.post {text 1..4000 chars} and a required idempotencyKey retained across retries of one explicit Send; gmail.thread.list {limit? 1..15, default 15}; gmail.message.read {messageId}; warehouse.view.read {columns 1..32, limit? 1..1000, default 100}. Transport limits (not expressible here): request <= 16 KiB, total deadline 10 s.
+ * Body of POST /_harbour/integrations/execute (app SDK), forwarded unchanged to the governance development and runtime execute routes. Exactly one declared operation against one declared resource. The identity mode is NOT a caller field: it is fixed by the operation and enforced from the approved grant; any identity/userId/scope field is rejected by additionalProperties. Per-operation input bounds: slack.channel.history {limit? 1..15, default 15}; slack.message.post {text 1..4000 chars} and a required idempotencyKey retained across retries of one explicit Send; gmail.thread.list {limit? 1..15, default 15}; gmail.message.read {messageId}; gmail.message.send {to 1..50 addresses (to+cc+bcc <= 50 in total), cc?, bcc?, subject 1..256 chars, text 1..4000 chars, replyToMessageId?} and a required idempotencyKey like slack.message.post (plain text only, no attachments); warehouse.view.read {columns 1..32, limit? 1..1000, default 100}. Each operation's then-block is the one statement of its input rules: propertyNames.enum names the fields it accepts, required the ones it needs, and per-field overrides (maximum, default) narrow the shared property. Codegen derives IntegrationExecuteInputRules and validateIntegrationExecuteInput (gen-ts/integration-execute-input-rules.ts, gen-go/integration_execute_input_rules.go) from exactly these blocks, so the governance execute route, the app SDK and the kit's local check refuse the same request with the same message. Transport limits (not expressible here): request <= 16 KiB, total deadline 10 s.
  */
 export type IntegrationExecuteRequest = {
   /**
@@ -10,21 +10,43 @@ export type IntegrationExecuteRequest = {
    */
   connection: string;
   /**
-   * Closed operation set. Extending it is a contracts change.
+   * Closed operation set. Extending it is a contracts change. gmail.message.send (0.50.0) sends one plain-text email as the signed-in person: a send like slack.message.post (explicit Send, idempotencyKey, write receipt) under user identity.
    */
   operation:
-    'slack.channel.history' | 'slack.message.post' | 'gmail.thread.list' | 'gmail.message.read' | 'warehouse.view.read';
+    | 'slack.channel.history'
+    | 'slack.message.post'
+    | 'gmail.thread.list'
+    | 'gmail.message.read'
+    | 'gmail.message.send'
+    | 'warehouse.view.read';
   /**
    * Tenant-wide logical alias of a connection (governance sourceId) or of a resource under it.
    */
   resource: string;
   input: {
+    /**
+     * Read operations: how many items to return; the per-operation then-block sets the real ceiling (15 for slack.channel.history and gmail.thread.list, 1000 for warehouse.view.read) and the default.
+     */
     limit?: number;
+    /**
+     * slack.message.post / gmail.message.send: the plain-text body, 1..4000 characters.
+     */
     text?: string;
     /**
      * gmail.message.read: the Gmail message id a gmail.thread.list result named.
      */
     messageId?: string;
+    to?: EmailAddressList;
+    cc?: EmailAddressList1;
+    bcc?: EmailAddressList2;
+    /**
+     * gmail.message.send: one-line subject (no line breaks).
+     */
+    subject?: string;
+    /**
+     * gmail.message.send: a Gmail message id (from gmail.thread.list / gmail.message.read) the email replies to; the send joins that thread.
+     */
+    replyToMessageId?: string;
     /**
      * @minItems 1
      * @maxItems 32
@@ -32,7 +54,32 @@ export type IntegrationExecuteRequest = {
     columns?: string[];
   };
   /**
-   * UUID of one explicit Send action; required for slack.message.post only. The same key with the same payload and subject returns the recorded outcome for seven days.
+   * UUID of one explicit Send action; required for slack.message.post and gmail.message.send only. The same key with the same payload and subject returns the recorded outcome for seven days.
    */
   idempotencyKey?: string;
 };
+/**
+ * One bare email address (no display name).
+ */
+export type EmailAddress = string;
+/**
+ * gmail.message.send: primary recipients.
+ *
+ * @minItems 1
+ * @maxItems 50
+ */
+export type EmailAddressList = EmailAddress[];
+/**
+ * gmail.message.send: carbon-copy recipients.
+ *
+ * @minItems 1
+ * @maxItems 50
+ */
+export type EmailAddressList1 = EmailAddress[];
+/**
+ * gmail.message.send: blind-copy recipients.
+ *
+ * @minItems 1
+ * @maxItems 50
+ */
+export type EmailAddressList2 = EmailAddress[];

package/gen-ts/integration-execute-result.ts

@@ -2,7 +2,7 @@
 // Code generated by tools/gen/gen.mjs from schema/*.json. DO NOT EDIT.
 
 /**
- * The `data` member of a successful execute response `{data, requestId}`; the SDK unwraps `data`. Exactly one of the five operation results: slack.channel.history -> {messages, hasMore} (plain text/IDs/time only, never the provider payload); slack.message.post -> {messageId}; gmail.thread.list -> {threads, hasMore} (newest inbox threads; each `messageId` is the thread's newest message, what gmail.message.read takes); gmail.message.read -> {id, threadId, subject, from, to, date, text, truncated} (headers plus the plain text with html stripped, cut at 16 KiB with `truncated` set); warehouse.view.read -> {rows} (decimal/64-bit values as strings, dates as ISO strings). An unknown send outcome is never a result; it is an error with details.code SEND_OUTCOME_UNKNOWN. Results over 1 MiB are rejected, not truncated.
+ * The `data` member of a successful execute response `{data, requestId}`; the SDK unwraps `data`. Exactly one of the six operation results: slack.channel.history -> {messages, hasMore} (plain text/IDs/time only, never the provider payload); slack.message.post -> {messageId}; gmail.thread.list -> {threads, hasMore} (newest inbox threads; each `messageId` is the thread's newest message, what gmail.message.read takes); gmail.message.read -> {id, threadId, subject, from, to, date, text, truncated} (headers plus the plain text with html stripped, cut at 16 KiB with `truncated` set); gmail.message.send -> {messageId, threadId} (the Gmail ids of the sent message and its thread); warehouse.view.read -> {rows} (decimal/64-bit values as strings, dates as ISO strings). An unknown send outcome is never a result; it is an error with details.code SEND_OUTCOME_UNKNOWN. Results over 1 MiB are rejected, not truncated.
  */
 export type IntegrationExecuteResult = {
   /**

package/gen-ts/saas-connection.ts

@@ -43,13 +43,18 @@ export interface SaasConnection {
     [k: string]: string;
   };
   /**
-   * Operations IT allows apps to request on this connection: the provider's own SaaS operations (Slack: slack.channel.history, slack.message.post; Gmail: gmail.thread.list, gmail.message.read). Never warehouse.view.read.
+   * Operations IT allows apps to request on this connection: the provider's own SaaS operations (Slack: slack.channel.history, slack.message.post; Gmail: gmail.thread.list, gmail.message.read, gmail.message.send). Never warehouse.view.read.
    *
    * @minItems 1
-   * @maxItems 4
+   * @maxItems 5
    */
   operations: (
-    'slack.channel.history' | 'slack.message.post' | 'gmail.thread.list' | 'gmail.message.read' | 'warehouse.view.read'
+    | 'slack.channel.history'
+    | 'slack.message.post'
+    | 'gmail.thread.list'
+    | 'gmail.message.read'
+    | 'gmail.message.send'
+    | 'warehouse.view.read'
   )[];
   developmentPreapproval: DevelopmentPreapproval;
   /**

package/gen-ts/transform-report.ts

@@ -6,6 +6,8 @@
  */
 export type TransformReport = {
   /**
+   * Optional self-report of the playbooks the agent says it applied. A claim about its own behaviour is not evidence, so nothing validates it; a deployable report may omit it, and one that still carries it stays valid.
+   *
    * @minItems 1
    */
   applied_playbooks?: string[];

package/gen-ts/well-defined-app-manifest.ts

@@ -18,6 +18,7 @@ export type Workload = {
  */
 export type Command = string[];
 export type ResourceProfile = 'standard' | 'memory-1g' | 'memory-2g';
+export type Capability = 'data' | 'files' | 'actions' | 'realtime' | 'telemetry';
 
 /**
  * Versioned provisioning input emitted by Harbour Transform. It describes runtime wiring and workload lifecycle only; PostgreSQL grants and RLS remain the database authorization authority.
@@ -37,6 +38,17 @@ export interface WellDefinedAppManifest {
    * @maxItems 128
    */
   bindings: WorkloadBinding[];
+  /**
+   * Optional language runtime the application container is built on, spelled exactly as transform-report.application.runtime does (nodejs22, python3.11). Optional so a manifest written before the producer emits it still validates.
+   */
+  runtime?: string;
+  /**
+   * Optional declaration of the Harbour browser capabilities the application uses. Same closed set as the app-capabilities document; this is the declaration, not a source scan.
+   *
+   * @maxItems 5
+   */
+  capabilities?: Capability[];
+  routeAuth?: RouteAuth;
 }
 export interface QueueConsumer {
   logicalName: string;
@@ -68,3 +80,22 @@ export interface WorkloadBinding {
    */
   reference?: string;
 }
+/**
+ * Optional method/path authentication policy. Omitted means every route requires Harbour SSO, the same default the policy states explicitly.
+ */
+export interface RouteAuth {
+  default: 'sso_required';
+  /**
+   * @maxItems 64
+   */
+  public: PublicRoute[];
+}
+export interface PublicRoute {
+  path: string;
+  /**
+   * @minItems 1
+   * @maxItems 7
+   */
+  methods: ('GET' | 'HEAD' | 'POST' | 'PUT' | 'PATCH' | 'DELETE' | 'OPTIONS')[];
+  mode: 'application_authorized';
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fourier-labs/harbour-contracts",
-  "version": "0.47.0",
+  "version": "0.51.0",
   "description": "Single source of truth for every data shape that crosses a boundary between Harbour components.",
   "license": "UNLICENSED",
   "private": false,

package/schema/app-integrations-declaration.schema.json

@@ -25,8 +25,8 @@
     "IntegrationConnectionKind": { "type": "string", "enum": ["saas", "database"] },
     "IntegrationOperation": {
       "type": "string",
-      "enum": ["slack.channel.history", "slack.message.post", "gmail.thread.list", "gmail.message.read", "warehouse.view.read"],
-      "description": "Closed operation set. Extending it is a contracts change."
+      "enum": ["slack.channel.history", "slack.message.post", "gmail.thread.list", "gmail.message.read", "gmail.message.send", "warehouse.view.read"],
+      "description": "Closed operation set. Extending it is a contracts change. gmail.message.send (0.50.0) sends one plain-text email as the signed-in person: a send like slack.message.post (explicit Send, idempotencyKey, write receipt) under user identity."
     },
     "IntegrationIdentityMode": {
       "type": "string",
@@ -110,6 +110,7 @@
             "slack.message.post": { "$ref": "#/definitions/AppModeChannelOperation" },
             "gmail.thread.list": { "$ref": "#/definitions/UserModeChannelOperation" },
             "gmail.message.read": { "$ref": "#/definitions/UserModeChannelOperation" },
+            "gmail.message.send": { "$ref": "#/definitions/UserModeChannelOperation" },
             "warehouse.view.read": { "$ref": "#/definitions/AppModeViewOperation" }
           }
         }
@@ -119,7 +120,7 @@
       "else": {
         "properties": {
           "operations": {
-            "not": { "anyOf": [{ "required": ["slack.channel.history"] }, { "required": ["slack.message.post"] }, { "required": ["gmail.thread.list"] }, { "required": ["gmail.message.read"] }] }
+            "not": { "anyOf": [{ "required": ["slack.channel.history"] }, { "required": ["slack.message.post"] }, { "required": ["gmail.thread.list"] }, { "required": ["gmail.message.read"] }, { "required": ["gmail.message.send"] }] }
           }
         }
       }
@@ -140,7 +141,8 @@
           "kind": "saas",
           "operations": {
             "gmail.thread.list": { "identity": "user", "resources": ["inbox"] },
-            "gmail.message.read": { "identity": "user", "resources": ["inbox"] }
+            "gmail.message.read": { "identity": "user", "resources": ["inbox"] },
+            "gmail.message.send": { "identity": "user", "resources": ["inbox"] }
           }
         },
         "sales-warehouse": {