@fourier-labs/harbour-contracts 0.50.0 → 0.53.0

package/README.md

@@ -84,6 +84,12 @@ Two schemas carry logic beyond structural types, generated into helpers:
 - **`binding-classification-subject.schema.json`** and **`sanitized-binding-evidence.schema.json`**
   → canonical length-prefixed SHA-256 preimage/digest helpers plus exact-name,
   requested-mapping and allocation-receipt validators in Go and TypeScript.
+- **`integration-execute-request.schema.json`** → `IntegrationExecuteInputRules` +
+  `validateIntegrationExecuteInput(operation, input)` (TS) / `ValidateIntegrationExecuteInput` (Go),
+  derived from each operation's `then`-block (`propertyNames.enum`, `required`, per-field
+  `maximum`/`default`). The governance execute route, the app SDK and the kit's local check all
+  refuse a request with the same sentence (`limit must be an integer between 1 and 15`); the
+  SDK vendors the TypeScript file because it ships with no dependencies.
 
 ## Workflow
 

package/contract-release.json

@@ -1,12 +1,12 @@
 {
   "schema": "harbour.contract-release/1.0",
-  "repositoryVersion": "0.50.0.0",
-  "publishVersion": "0.50.0",
-  "publishTag": "v0.50.0",
-  "schemasDigest": "sha256:c77dcbf9daad9c66141e9cb8215760a098afd1bf3e665e247f6a4df8db2bcd4f",
+  "repositoryVersion": "0.53.0.0",
+  "publishVersion": "0.53.0",
+  "publishTag": "v0.53.0",
+  "schemasDigest": "sha256:c4d7c9642842bf3709003f447fb22429ce3573acabaa2da8279e0fc399e8d237",
   "aiFixturesDigest": "sha256:edac31c92e146ca1c40130f2fb5649db82e24b8cd1ac758153b90612052fddb6",
-  "generatedGoDigest": "sha256:545d8b23ab712e75285ea962851bcf8f08f5baeb018bea6f7ba4e1ca2fe80ed0",
-  "generatedTypeScriptDigest": "sha256:1e47c3956a3468531690693ff50ff7947a798af01e01d25659401f727cb934c4",
+  "generatedGoDigest": "sha256:8f3c3281a76792a9480ca1f7bcbad820db1908efffb29072fcdb0a8f99dbd208",
+  "generatedTypeScriptDigest": "sha256:82a083862e500a06df3550e694221cff9dcb98461d5174889c374713f961040c",
   "generatedExclusions": {
     "gen-go/contract_release.go": "contains the generated aggregate digests (self-reference)",
     "gen-ts/contract-release.ts": "contains the generated aggregate digests (self-reference)"
@@ -31,12 +31,12 @@
     "schema/ai-transform-result.schema.json": "sha256:244e380a36957ab2dcb526ea22aaecb56b53664ce1fda6934d0021c084c99133",
     "schema/ai-verification-evidence.schema.json": "sha256:bdbc762df256d2a8dd0bdda60d4d13915ce40034cd756af9515871d145f10ad9",
     "schema/api-error-response.schema.json": "sha256:3d43d5bdf0b59c944e20509d832e6776c3ecdba4d6c245a9118bbe52062a8304",
-    "schema/app-integrations-declaration.schema.json": "sha256:1a6ac2e7d77a4d4dcbce8b937747f125081413f819ffee9e27e8b950a436cb22",
+    "schema/app-integrations-declaration.schema.json": "sha256:5d43c31719c93c9c8235b6c03dbe55a42ebdb2efb78225ad14222bd1086dcf6a",
     "schema/artifact-contract.schema.json": "sha256:8047b461a1c6d07bbe867a259c57bdf5cc0fdf282cf842ec7b683a9e93713b10",
     "schema/binding-classification-subject.schema.json": "sha256:a8825ce652e7e00a18759c4249bd5bcd0cae552dd58440513f867e87f685133c",
     "schema/builder-input-proposal.schema.json": "sha256:fe85cffa6d76b1e1effe1f5d75525f8fe0e1eaa3be4a304e491aa23ad72c0e72",
     "schema/data-dependency.schema.json": "sha256:89ba8481ccabc935e7dab5d13871c985839a751ad1586710d8382a15e1f3340c",
-    "schema/data-grant-v2.schema.json": "sha256:6d639745e7a00f5f6383fa9034e3b04b6772cb29a60a6db1a3c517dc7a6c26ba",
+    "schema/data-grant-v2.schema.json": "sha256:7fa6022aa2fcfd3c94bb969315155ea24e5a1aa25a25cb718df4465397076e07",
     "schema/data-grant.schema.json": "sha256:e640553831ecc1c01cc9a37fe388b84d0ffeaa0d0050e63712b48f65fa437c8a",
     "schema/data-source.schema.json": "sha256:aec8d2497dae9a91886a3df9f6fbbdb3d3fcab44b14fbcacc3f5e99b827f1bba",
     "schema/deploy-request.schema.json": "sha256:32531e21983cdfeec511f8b4cddd4dad6530cd90e4e9fe147225d78d138b6198",
@@ -52,20 +52,20 @@
     "schema/error-envelope.schema.json": "sha256:75dccda7dd16fdf8435deda53fc7dbcdc109b65114617a17f11763010c656f90",
     "schema/integration-connect-result.schema.json": "sha256:3f254b67ef739dc1fa395bdc8c4dc93359b16d481dba2a2d777aa5b6f34b7af8",
     "schema/integration-error-details.schema.json": "sha256:09cebaddb7f88e63cbebaa1cada5f91057ae4dc4370e973ef38f7f11c6323284",
-    "schema/integration-execute-request.schema.json": "sha256:658eb66a15bba4fc81eec208c713d5d141d159a6429306909304d5182f728bec",
+    "schema/integration-execute-request.schema.json": "sha256:efbf25e2c01ccafec6e5c8023d891daa51e8b8c29a1735afe0f0eb33c4615834",
     "schema/integration-execute-result.schema.json": "sha256:766146779c01ee1dbdd2161c5dc594f43ccaf322762352bb0dc5b80bcb3275b5",
     "schema/kit-bundle-manifest.schema.json": "sha256:c15e28ae028dbd1c262427b9c797142e19b1f38fa36b4ecfe187e32c20a174ec",
     "schema/kit-lock.schema.json": "sha256:5e24b76660f83990af7a6c037af350c3850ee439ef956f65a0360facbdcdd997",
     "schema/kvs-routing-entry.schema.json": "sha256:b75f3a5dfa93a428b2764e03222b66b6ef2bed980f8bac8ffac54afdf3526bc5",
     "schema/promotion-request.schema.json": "sha256:00e96dfd8ddbdba88ea222941d43f3609ff6c815a79e34f6705cab458101c969",
     "schema/promotion-response.schema.json": "sha256:4129712d2e29d6ef21d93d4bd0bacfd60ada3f2ee0ade852824e64346b817634",
-    "schema/saas-connection.schema.json": "sha256:fa62fc6e28124120c71ebc36e257263ba8820d48b7d505d54ac53bd812fdd9ee",
+    "schema/saas-connection.schema.json": "sha256:1fcb1a3ee922e49d8f846db6bd6284f6de483b26cb1ae03da0381b396bb8132d",
     "schema/sanitized-binding-evidence.schema.json": "sha256:1191ab88e2764df927e5f17837674cebebe068d480da2b2fdb390e589f96b51f",
     "schema/secret-reference.schema.json": "sha256:db4e3c2c6a2dbd72d7ea0f9c91cb3b2343a7e67b601996c6818b2ef08e440895",
     "schema/security-scan-input.schema.json": "sha256:83502dffb3c07ac2e0698928e6dc123f454fc667d4aacd336bcad6944ef2ac3d",
     "schema/security-verdict.schema.json": "sha256:ec3c2d5c9df3601aeed0909b36c7f427469c7f0eeb3295c5809b96d09bf3fc26",
     "schema/transform-parked-result.schema.json": "sha256:11729980d4c89d4a9e18f5f213232cd3359739c85626b36c20c2a37ba794c9af",
-    "schema/transform-report.schema.json": "sha256:858da48fa7fe97d8d06267bb3435d71ba307133b246cb020f5b473bb488c445a",
+    "schema/transform-report.schema.json": "sha256:62c8f3aa3ac748cb54d78cb729bdfbaaccf1c03574ea92841eb23b2557eff3cf",
     "schema/version-state.schema.json": "sha256:3b190007e2f8e3821c41ef11c6f5b226da7d5a18d34d4077f4618004846fd444",
     "schema/well-defined-app-manifest.schema.json": "sha256:40f1bfea912dd85a05a0a3be2f6becadaf8ae3c5de9d5782ff1c8dd1bd83485f"
   },
@@ -105,8 +105,10 @@
     "gen-go/contracts_test.go": "sha256:56376287cb1548be1b35ab4c65d6f0b558c5d34885f7a47cb3d9e8d786607bf5",
     "gen-go/doc.go": "sha256:c17bc2d39ed175ce7105c68305f8ae7152f659eb7cd187ecceee7698eb3a65dd",
     "gen-go/error_category.go": "sha256:b2ddea22dcfa030f1a45e721e635485b0bd816cf1f38e7654628a653f5ed4583",
-    "gen-go/schema_documents.go": "sha256:66055e0d4354f73d922ee17984de8df065db665f93182b87fcd8a6a94ae94300",
-    "gen-go/types.go": "sha256:07429b30905aacfdb95ca9ddea5ae04e3cc7fcc89e69b84f05f2833f4b8339be",
+    "gen-go/integration_execute_input_rules.go": "sha256:224fb490a5f936b30927e6637e698093e1e42a695cbc1bcf9a39bc70db9f2172",
+    "gen-go/integration_execute_input_rules_test.go": "sha256:c437a8406a2f062a0173b9419e4cb176fc6eb54e569506225d5162323f55b40b",
+    "gen-go/schema_documents.go": "sha256:a01b157658d23e2585e64ff101ed720942856626676b50c83efbd8b044a050d6",
+    "gen-go/types.go": "sha256:819a27018a274c83233993a0c54359219ebbd0b11523f68c3c34ba0223d9e5ba",
     "gen-go/version_state.go": "sha256:4ef8abb126414c0025cf2c59bc9c79a74ef4a2ff89e8f316cbf05acc872371c1"
   },
   "generatedTypeScript": {
@@ -131,13 +133,13 @@
     "gen-ts/ai-transform-result.ts": "sha256:208c66b2aeb425c0cbcc18b7191f6e8989443f2b2c1690648e0e06cc1448ce25",
     "gen-ts/ai-verification-evidence.ts": "sha256:979439d77f8b47631d1eb3b6c3c54ea6fec41089d2a51dc815fd370b1c4917fc",
     "gen-ts/api-error-response.ts": "sha256:0fd73be282e7a5d72d6c343a4e64d09c232556b16161167f0cffd6278ed7e3d3",
-    "gen-ts/app-integrations-declaration.ts": "sha256:aabebdbffc70dd87017f1c72e0b8713f9cef506ba5258279b3a1405185875141",
+    "gen-ts/app-integrations-declaration.ts": "sha256:c2edea82c2c80d15dc233499ef289ea310e59b61b1e4428ea9e4fed85168d2a4",
     "gen-ts/artifact-contract.ts": "sha256:4a6dc6d2caaeed4bb2066cc8a333e6e09e5a0d4745e0b1038293d54ab9403aeb",
     "gen-ts/binding-classification-digest-helper.ts": "sha256:40fc7d85b4c3f3ffc5caf7d7950c62d013c83ee42058c7453b2100d95817f167",
     "gen-ts/binding-classification-subject.ts": "sha256:c409a3fd7b942b50419632c51d9a79474fb30d6374bdc79c0e25c73618e800c3",
     "gen-ts/builder-input-proposal.ts": "sha256:b0108c3787873d3cf1a39f00967379418a6766275d3474cfa55f5a9d93ead174",
     "gen-ts/data-dependency.ts": "sha256:0572c31d7ae9088eccc104eee1a205bf176d1d6dacfaf0f290d666024e284966",
-    "gen-ts/data-grant-v2.ts": "sha256:d55491e8d1a73d8999a43904344760de9c6eb2ce500b1e942d49261a9c67808f",
+    "gen-ts/data-grant-v2.ts": "sha256:d7c78866dfbad6c852bdbf470057a7b926edcadf5563e6ea4da3da9ae96cf699",
     "gen-ts/data-grant.ts": "sha256:2358579d8aa1e57b01a6f2b0eacce5531e7f21ef226404c9809925365e0d6155",
     "gen-ts/data-source.ts": "sha256:77d6bb3b0eaa355789c5d97dd1f548734add6950329dc69549350b8d17c8d582",
     "gen-ts/deploy-request.ts": "sha256:0214faa8be6680f0bfc117d5ce67c1a59fcc18bd0ea4bc840e03e7d051fa9ab6",
@@ -152,24 +154,25 @@
     "gen-ts/error-category-registry.ts": "sha256:7466a502c0723a77db825cdeaa9556a244201b55d9b7acbf2c098e9e84351df1",
     "gen-ts/error-category.ts": "sha256:9bda89180c3b740c9aa8be466216592e8ca9d0d368c274333edf6ea5c45afd8e",
     "gen-ts/error-envelope.ts": "sha256:4457309be794f9d4fc0cf62530cc2d442c007bac9ae84aff66df099cc9e40310",
-    "gen-ts/index.ts": "sha256:982599819309370072af19f1c248a033c13b17a6ee9006272d3436ab87b0db21",
+    "gen-ts/index.ts": "sha256:1fa78bbfd85f29f777f9018d110b70388af35ab2e428c07f75f6701ff3eaba22",
     "gen-ts/integration-connect-result.ts": "sha256:4b10f169b6e1af364e9b418de21caa9fadbfb77b43cbff77d741cfae0b52180c",
     "gen-ts/integration-error-details.ts": "sha256:8243f5871f376d1cab4d90e07f3151d148fb03c704168dbccdfe6c9fe76bce83",
-    "gen-ts/integration-execute-request.ts": "sha256:d884e8368a5c4b8495312733fac3d28870a2cd48453c8f69e92a5d50273df516",
+    "gen-ts/integration-execute-input-rules.ts": "sha256:a779c872c44bb892dec7b28173d961696d95e5b6e1fa14e2ba67dd78344cdc5b",
+    "gen-ts/integration-execute-request.ts": "sha256:b80260f8cca8da13692a6e0fa5de62b82c6eb48b0f3f3664f44f086441a519db",
     "gen-ts/integration-execute-result.ts": "sha256:4aaf6a9688f9dfdbc87a408556b62f822518acf5b76548076adb55393c0863b4",
     "gen-ts/kit-bundle-manifest.ts": "sha256:9041b32af3df781ca6800bc14c3719e5e54c81dff370633454ac3ad27432eb58",
     "gen-ts/kit-lock.ts": "sha256:de4ae82bac7bd234a3230ae671962e80eed6542d695a032a442673659dc6be5e",
     "gen-ts/kvs-routing-entry.ts": "sha256:d92e85ee9f257d77850d1d3aac9438e2055f38084ff84a48fcedae239d47d4ca",
     "gen-ts/promotion-request.ts": "sha256:9db88cef67f777a16bac628039ec3f582acb9e8cfff6fb592b30d0a0e55abc68",
     "gen-ts/promotion-response.ts": "sha256:f1c9cafac96faeb02a443a31786f67714e818f38d90108e7af41958396524d6f",
-    "gen-ts/saas-connection.ts": "sha256:62b5c5ffd125099bae46142013461c9ac3f75c2d27ab72cd4842a937f3e2f308",
+    "gen-ts/saas-connection.ts": "sha256:b60ab802c73edfe805d59d55a70ecd54fe569646d238f5ff213d26ab34b717f1",
     "gen-ts/sanitized-binding-digest-helper.ts": "sha256:c47d7fdc20500e2e72c23fe39ecdd610fc397c47fcba51335ebec3c380fe6872",
     "gen-ts/sanitized-binding-evidence.ts": "sha256:f3fb7b1d7d2e0929eb0ea981eaf32db3104010647185f6ae59f67167d42538a9",
     "gen-ts/secret-reference.ts": "sha256:731fbcde7315cb4128d5b01bdbe6e6f248f13c7ad8dea04a3a4e927ac4890198",
     "gen-ts/security-scan-input.ts": "sha256:b31f048be04c34b40f49d3b3ba53277e473cd435ae9216ba3a3b4dac69fb5685",
     "gen-ts/security-verdict.ts": "sha256:fea950cddbd12fe0218e2573c9a29c6748d56612a464559f1e6d688fa97f68c7",
     "gen-ts/transform-parked-result.ts": "sha256:6279e27cee8d75c29f3ede45580fef1daa0ca300867a78e43ead8a7689ec613f",
-    "gen-ts/transform-report.ts": "sha256:005a10b34b89f055c3aae4bf54c095bbca7a9e15bd9b406b61a9eaafffc37a61",
+    "gen-ts/transform-report.ts": "sha256:2f42c94644b0f4e2d03e339d0b9d333254555746f74d362d820522156e964ef9",
     "gen-ts/version-state-machine.ts": "sha256:c67af3e86ac306743345b850dfd3ae5201c19d10c40e2c149cf8c38258320d5f",
     "gen-ts/version-state.ts": "sha256:a835112930299e7b593a1b8810b7414f6c9e809da2092306c743128170a3b702",
     "gen-ts/well-defined-app-manifest.ts": "sha256:2b72a39c2fa8e76239634d0478dc0da05446e74e944950eacf999b78876455c6"

package/dist/gen-ts/app-integrations-declaration.d.ts

@@ -8,12 +8,16 @@ export type IntegrationAlias = string;
  * @maxItems 64
  */
 export type ResourceNames = IntegrationAlias[];
+/**
+ * Whose authority an operation runs under. Fixed per operation (slack.message.post: declared per app); never chosen at call time.
+ */
+export type IntegrationIdentityMode = 'app' | 'user';
 /**
  * A plain column identifier of a warehouse view.
  */
 export type ColumnName = string;
 /**
- * Committed `.harbour/integrations.json`: the app's declared use of tenant-wide integration connections. Keys are logical connection aliases (the governance sourceId); resources are logical names (Slack channel alias, warehouse view name), never IDs, tokens or URLs. The operation set is closed (five operations) and each operation carries a fixed identity mode: slack.channel.history=user, slack.message.post=app, gmail.thread.list=user, gmail.message.read=user, warehouse.view.read=app. A `saas` connection may declare only the Slack and Gmail operations and a `database` connection only warehouse.view.read. Gmail is read-only and user-mode only; its single resource is the fixed `inbox` alias. This file also owns the shared IntegrationOperation / IntegrationIdentityMode / IntegrationEnvironment / IntegrationConnectionKind enums referenced by the other integration schemas.
+ * Committed `.harbour/integrations.json`: the app's declared use of tenant-wide integration connections. Keys are logical connection aliases (the governance sourceId); resources are logical names (Slack channel alias, warehouse view name), never IDs, tokens or URLs. The operation set is closed (six operations). Each operation carries a fixed identity mode — slack.channel.history=user, gmail.thread.list=user, gmail.message.read=user, gmail.message.send=user, warehouse.view.read=app — except slack.message.post, whose mode the app DECLARES: `app` posts as the company's Slack app (the one audited bot identity, under the IT-approved per-app display name when the connection declares `presentation`), `user` posts as the signed-in person after their own consent. The mode is never chosen at call time: governance runs the call under the approved grant of the declared mode. A `saas` connection may declare only the Slack and Gmail operations and a `database` connection only warehouse.view.read; `presentation` is a `saas` connection's optional per-app display name and icon for app-mode Slack posts, shown to IT at approval time and applied only from the approved grant. Gmail is user-mode only (reads plus one send); its single resource is the fixed `inbox` alias. This file also owns the shared IntegrationOperation / IntegrationIdentityMode / IntegrationEnvironment / IntegrationConnectionKind / IntegrationPresentation definitions referenced by the other integration schemas.
  */
 export interface AppIntegrationsDeclaration {
     schema: 'harbour.app-integrations/2.0';
@@ -23,21 +27,38 @@ export interface AppIntegrationsDeclaration {
 }
 export interface DeclaredConnection {
     kind: IntegrationConnectionKind;
+    presentation?: IntegrationPresentation;
     operations: {
         'slack.channel.history'?: UserModeChannelOperation;
-        'slack.message.post'?: AppModeChannelOperation;
+        'slack.message.post'?: DeclaredModeChannelOperation;
         'gmail.thread.list'?: UserModeChannelOperation;
         'gmail.message.read'?: UserModeChannelOperation;
         'gmail.message.send'?: UserModeChannelOperation;
         'warehouse.view.read'?: AppModeViewOperation;
     };
 }
+/**
+ * saas connections only (Slack): how this app's app-mode posts are presented; meaningless for every other operation.
+ */
+export interface IntegrationPresentation {
+    /**
+     * 1..80 characters of plain text: not blank, no control characters, no @-mentions (`@name`, `<@id>`). Must not impersonate a person: IT sees it before approving.
+     */
+    displayName: string;
+    /**
+     * A Slack emoji shortcode such as `:sandwich:`; absent keeps the bot's own icon.
+     */
+    iconEmoji?: string;
+}
 export interface UserModeChannelOperation {
     identity: 'user';
     resources: ResourceNames;
 }
-export interface AppModeChannelOperation {
-    identity: 'app';
+/**
+ * slack.message.post: the app declares the mode — app (posts as the company's Slack app) or user (posts as the signed-in person).
+ */
+export interface DeclaredModeChannelOperation {
+    identity: IntegrationIdentityMode;
     resources: ResourceNames;
 }
 export interface AppModeViewOperation {

package/dist/gen-ts/contract-release.d.ts

@@ -1,7 +1,7 @@
-export declare const ContractRepositoryVersion: "0.50.0.0";
-export declare const ContractPublishVersion: "0.50.0";
-export declare const ContractPublishTag: "v0.50.0";
-export declare const ContractSchemasDigest: "sha256:c77dcbf9daad9c66141e9cb8215760a098afd1bf3e665e247f6a4df8db2bcd4f";
+export declare const ContractRepositoryVersion: "0.53.0.0";
+export declare const ContractPublishVersion: "0.53.0";
+export declare const ContractPublishTag: "v0.53.0";
+export declare const ContractSchemasDigest: "sha256:c4d7c9642842bf3709003f447fb22429ce3573acabaa2da8279e0fc399e8d237";
 export declare const ContractAiFixturesDigest: "sha256:edac31c92e146ca1c40130f2fb5649db82e24b8cd1ac758153b90612052fddb6";
-export declare const ContractGeneratedGoDigest: "sha256:545d8b23ab712e75285ea962851bcf8f08f5baeb018bea6f7ba4e1ca2fe80ed0";
-export declare const ContractGeneratedTypeScriptDigest: "sha256:1e47c3956a3468531690693ff50ff7947a798af01e01d25659401f727cb934c4";
+export declare const ContractGeneratedGoDigest: "sha256:8f3c3281a76792a9480ca1f7bcbad820db1908efffb29072fcdb0a8f99dbd208";
+export declare const ContractGeneratedTypeScriptDigest: "sha256:82a083862e500a06df3550e694221cff9dcb98461d5174889c374713f961040c";

package/dist/gen-ts/contract-release.js

@@ -1,9 +1,9 @@
 /* eslint-disable */
 // Code generated by tools/gen/gen.mjs from schema/*.json. DO NOT EDIT.
-export const ContractRepositoryVersion = "0.50.0.0";
-export const ContractPublishVersion = "0.50.0";
-export const ContractPublishTag = "v0.50.0";
-export const ContractSchemasDigest = "sha256:c77dcbf9daad9c66141e9cb8215760a098afd1bf3e665e247f6a4df8db2bcd4f";
+export const ContractRepositoryVersion = "0.53.0.0";
+export const ContractPublishVersion = "0.53.0";
+export const ContractPublishTag = "v0.53.0";
+export const ContractSchemasDigest = "sha256:c4d7c9642842bf3709003f447fb22429ce3573acabaa2da8279e0fc399e8d237";
 export const ContractAiFixturesDigest = "sha256:edac31c92e146ca1c40130f2fb5649db82e24b8cd1ac758153b90612052fddb6";
-export const ContractGeneratedGoDigest = "sha256:545d8b23ab712e75285ea962851bcf8f08f5baeb018bea6f7ba4e1ca2fe80ed0";
-export const ContractGeneratedTypeScriptDigest = "sha256:1e47c3956a3468531690693ff50ff7947a798af01e01d25659401f727cb934c4";
+export const ContractGeneratedGoDigest = "sha256:8f3c3281a76792a9480ca1f7bcbad820db1908efffb29072fcdb0a8f99dbd208";
+export const ContractGeneratedTypeScriptDigest = "sha256:82a083862e500a06df3550e694221cff9dcb98461d5174889c374713f961040c";

package/dist/gen-ts/data-grant-v2.d.ts

@@ -8,7 +8,7 @@ export type DataGrantV2Status = 'REQUESTED' | 'GRANTED' | 'DENIED' | 'REVOKED';
 export type DataGrantV2ProvisioningStatus = 'NONE' | 'PENDING' | 'FAILED' | 'DONE';
 export type DataGrantV2CleanupStatus = 'PENDING' | 'FAILED' | 'DONE';
 /**
- * An app's integration grant for one connection, environment and identity mode (control table sk APP#<appId>#IGRANT#<environment>#<sourceId>#<mode>; grantId = base64url(JSON ["v2",appId,environment,sourceId,mode])). Additive to the legacy DataGrant (data-grant.schema.json), which is never consulted by v2 paths. A fresh REQUESTED record carries empty `operations`/`resources` until the attached request is approved; approved resources are structured `{name, columns?}` entries (a Slack channel alias, the fixed Gmail `inbox` alias, or a warehouse view alias with its approved columns). Expiry is enforced from UTC time on every call and SDK calls never extend it; `expiredAt` is stamped by the recovery sweep afterwards. Status edges live in x-transitions; DENIED and REVOKED are terminal (a regrant after revocation is a new REQUESTED record once cleanup is DONE). Database grants add credentialRef/mintedPrincipal; both hold references only. `identityMode` and `installation` are the deprecated 0.45.0 spellings: the record carries `mode`, and a SaaS grant runs on the connection's single installation.
+ * An app's integration grant for one connection, environment and identity mode (control table sk APP#<appId>#IGRANT#<environment>#<sourceId>#<mode>; grantId = base64url(JSON ["v2",appId,environment,sourceId,mode])). Additive to the legacy DataGrant (data-grant.schema.json), which is never consulted by v2 paths. A fresh REQUESTED record carries empty `operations`/`resources` until the attached request is approved; approved resources are structured `{name, columns?}` entries (a Slack channel alias, the fixed Gmail `inbox` alias, or a warehouse view alias with its approved columns). Expiry is enforced from UTC time on every call and SDK calls never extend it; `expiredAt` is stamped by the recovery sweep afterwards. Status edges live in x-transitions; DENIED and REVOKED are terminal (a regrant after revocation is a new REQUESTED record once cleanup is DONE). Database grants add credentialRef/mintedPrincipal; both hold references only. An app-mode Slack grant may carry `presentation` (0.53.0): the IT-approved display name and icon the app's posts go out under, copied from the approved request and read by every post — never from the call. `identityMode` and `installation` are the deprecated 0.45.0 spellings: the record carries `mode`, and a SaaS grant runs on the connection's single installation.
  */
 export interface DataGrantV2 {
     schema: 'harbour.data-grant/2.0';
@@ -23,7 +23,7 @@ export interface DataGrantV2 {
      */
     sourceId: string;
     /**
-     * Whose authority an operation runs under. Fixed per operation; callers never choose it.
+     * Whose authority an operation runs under. Fixed per operation (slack.message.post: declared per app); never chosen at call time.
      */
     mode: 'app' | 'user';
     kind: 'saas' | 'database';
@@ -58,6 +58,7 @@ export interface DataGrantV2 {
      * The one open access request attached to this grant, if any.
      */
     pendingRequestId?: string;
+    presentation?: IntegrationPresentation;
     provisioning: DataGrantV2Provisioning;
     /**
      * Database grants: secretref://tenant/{t}/app/{a}/env/{env}/source/{s}. Set only by a successful publish and removed by cleanup.
@@ -71,7 +72,7 @@ export interface DataGrantV2 {
     updatedAt: string;
     /**
      * @deprecated
-     * Whose authority an operation runs under. Fixed per operation; callers never choose it.
+     * Whose authority an operation runs under. Fixed per operation (slack.message.post: declared per app); never chosen at call time.
      */
     identityMode?: 'app' | 'user';
     /**
@@ -96,6 +97,19 @@ export interface IntegrationResource {
      */
     columns?: string[];
 }
+/**
+ * App-mode Slack grants only: how the app's posts are presented, as IT approved it. Absent means the posts carry the bot's own name.
+ */
+interface IntegrationPresentation {
+    /**
+     * 1..80 characters of plain text: not blank, no control characters, no @-mentions (`@name`, `<@id>`). Must not impersonate a person: IT sees it before approving.
+     */
+    displayName: string;
+    /**
+     * A Slack emoji shortcode such as `:sandwich:`; absent keeps the bot's own icon.
+     */
+    iconEmoji?: string;
+}
 export interface DataGrantV2Provisioning {
     status: DataGrantV2ProvisioningStatus;
     /**
@@ -126,3 +140,4 @@ export interface DataGrantV2Provisioning {
 export declare function canTransitionDataGrantV2Status(from: string, to: string): boolean;
 /** True iff the DataGrantV2Status is terminal (DENIED, REVOKED). */
 export declare function isTerminalDataGrantV2Status(state: string): boolean;
+export {};

package/dist/gen-ts/index.d.ts

@@ -43,6 +43,7 @@ export * from './error-category.js';
 export * from './error-envelope.js';
 export * from './integration-connect-result.js';
 export * from './integration-error-details.js';
+export * from './integration-execute-input-rules.js';
 export * from './integration-execute-request.js';
 export * from './integration-execute-result.js';
 export * from './kit-bundle-manifest.js';

package/dist/gen-ts/index.js

@@ -45,6 +45,7 @@ export * from './error-category.js';
 export * from './error-envelope.js';
 export * from './integration-connect-result.js';
 export * from './integration-error-details.js';
+export * from './integration-execute-input-rules.js';
 export * from './integration-execute-request.js';
 export * from './integration-execute-result.js';
 export * from './kit-bundle-manifest.js';

package/dist/gen-ts/integration-execute-input-rules.d.ts

@@ -0,0 +1,187 @@
+/**
+ * Per-operation input rules of integration-execute-request: derived from each
+ * operation's then-block (propertyNames.enum, required, per-field overrides).
+ * The governance execute route, the app SDK and the kit's local check validate
+ * with validateIntegrationExecuteInput below, so a request is refused with the
+ * same message wherever it is made.
+ */
+export type IntegrationExecuteInputFieldRule = {
+    kind: 'integer';
+    required: boolean;
+    minimum: number;
+    maximum: number;
+    default?: number;
+} | {
+    kind: 'string';
+    required: boolean;
+    minLength: number;
+    maxLength?: number;
+    pattern?: string;
+} | {
+    kind: 'string[]';
+    required: boolean;
+    minItems: number;
+    maxItems: number;
+    uniqueItems: boolean;
+    item: {
+        minLength: number;
+        maxLength?: number;
+        pattern?: string;
+    };
+};
+export type IntegrationExecuteOperationRule = {
+    idempotencyKey: boolean;
+    fields: Record<string, IntegrationExecuteInputFieldRule>;
+};
+export declare const IntegrationExecuteInputRules: {
+    readonly "slack.channel.history": {
+        readonly idempotencyKey: false;
+        readonly fields: {
+            readonly limit: {
+                readonly kind: "integer";
+                readonly required: false;
+                readonly minimum: 1;
+                readonly maximum: 15;
+                readonly default: 15;
+            };
+        };
+    };
+    readonly "slack.message.post": {
+        readonly idempotencyKey: true;
+        readonly fields: {
+            readonly text: {
+                readonly kind: "string";
+                readonly required: true;
+                readonly minLength: 1;
+                readonly maxLength: 4000;
+            };
+        };
+    };
+    readonly "gmail.thread.list": {
+        readonly idempotencyKey: false;
+        readonly fields: {
+            readonly limit: {
+                readonly kind: "integer";
+                readonly required: false;
+                readonly minimum: 1;
+                readonly maximum: 15;
+                readonly default: 15;
+            };
+        };
+    };
+    readonly "gmail.message.read": {
+        readonly idempotencyKey: false;
+        readonly fields: {
+            readonly messageId: {
+                readonly kind: "string";
+                readonly required: true;
+                readonly minLength: 0;
+                readonly pattern: "^[A-Za-z0-9_-]{1,64}$";
+            };
+        };
+    };
+    readonly "gmail.message.send": {
+        readonly idempotencyKey: true;
+        readonly fields: {
+            readonly to: {
+                readonly kind: "string[]";
+                readonly required: true;
+                readonly minItems: 1;
+                readonly maxItems: 50;
+                readonly uniqueItems: true;
+                readonly item: {
+                    readonly minLength: 3;
+                    readonly maxLength: 254;
+                    readonly pattern: "^[^\\s@<>,;\"]+@[^\\s@<>,;\"]+\\.[^\\s@<>,;\"]+$";
+                };
+            };
+            readonly cc: {
+                readonly kind: "string[]";
+                readonly required: false;
+                readonly minItems: 1;
+                readonly maxItems: 50;
+                readonly uniqueItems: true;
+                readonly item: {
+                    readonly minLength: 3;
+                    readonly maxLength: 254;
+                    readonly pattern: "^[^\\s@<>,;\"]+@[^\\s@<>,;\"]+\\.[^\\s@<>,;\"]+$";
+                };
+            };
+            readonly bcc: {
+                readonly kind: "string[]";
+                readonly required: false;
+                readonly minItems: 1;
+                readonly maxItems: 50;
+                readonly uniqueItems: true;
+                readonly item: {
+                    readonly minLength: 3;
+                    readonly maxLength: 254;
+                    readonly pattern: "^[^\\s@<>,;\"]+@[^\\s@<>,;\"]+\\.[^\\s@<>,;\"]+$";
+                };
+            };
+            readonly subject: {
+                readonly kind: "string";
+                readonly required: true;
+                readonly minLength: 1;
+                readonly maxLength: 256;
+            };
+            readonly text: {
+                readonly kind: "string";
+                readonly required: true;
+                readonly minLength: 1;
+                readonly maxLength: 4000;
+            };
+            readonly replyToMessageId: {
+                readonly kind: "string";
+                readonly required: false;
+                readonly minLength: 0;
+                readonly pattern: "^[A-Za-z0-9_-]{1,64}$";
+            };
+        };
+    };
+    readonly "warehouse.view.read": {
+        readonly idempotencyKey: false;
+        readonly fields: {
+            readonly columns: {
+                readonly kind: "string[]";
+                readonly required: true;
+                readonly minItems: 1;
+                readonly maxItems: 32;
+                readonly uniqueItems: false;
+                readonly item: {
+                    readonly minLength: 0;
+                    readonly pattern: "^[A-Za-z_][A-Za-z0-9_]{0,62}$";
+                };
+            };
+            readonly limit: {
+                readonly kind: "integer";
+                readonly required: false;
+                readonly minimum: 1;
+                readonly maximum: 1000;
+                readonly default: 100;
+            };
+        };
+    };
+};
+export type IntegrationExecuteOperation = keyof typeof IntegrationExecuteInputRules;
+/** The upper bound of one integer input as a literal type: integrationExecuteInputMaximum('slack.channel.history', 'limit') is 15. */
+export declare function integrationExecuteInputMaximum<O extends IntegrationExecuteOperation, F extends keyof (typeof IntegrationExecuteInputRules)[O]['fields']>(operation: O, field: F): Extract<(typeof IntegrationExecuteInputRules)[O]['fields'][F], {
+    maximum: number;
+}>['maximum'];
+export type IntegrationExecuteInputProblem = {
+    field: string;
+    message: string;
+};
+export type IntegrationExecuteInputValidation = {
+    ok: true;
+    input: Record<string, unknown>;
+} | {
+    ok: false;
+    problem: IntegrationExecuteInputProblem;
+};
+/**
+ * Validates one operation's input against the contract and returns it with the
+ * contract's defaults applied. The message names the field and its allowed
+ * range; it is the sentence the platform answers with, so a caller may show it.
+ */
+export declare function validateIntegrationExecuteInput(operation: string, input: unknown): IntegrationExecuteInputValidation;

package/dist/gen-ts/integration-execute-input-rules.js

@@ -0,0 +1,114 @@
+/* eslint-disable */
+// Code generated by tools/gen/gen.mjs from schema/*.json. DO NOT EDIT.
+export const IntegrationExecuteInputRules = {
+    "slack.channel.history": {
+        idempotencyKey: false,
+        fields: {
+            limit: { kind: "integer", required: false, minimum: 1, maximum: 15, default: 15 },
+        },
+    },
+    "slack.message.post": {
+        idempotencyKey: true,
+        fields: {
+            text: { kind: "string", required: true, minLength: 1, maxLength: 4000 },
+        },
+    },
+    "gmail.thread.list": {
+        idempotencyKey: false,
+        fields: {
+            limit: { kind: "integer", required: false, minimum: 1, maximum: 15, default: 15 },
+        },
+    },
+    "gmail.message.read": {
+        idempotencyKey: false,
+        fields: {
+            messageId: { kind: "string", required: true, minLength: 0, pattern: "^[A-Za-z0-9_-]{1,64}$" },
+        },
+    },
+    "gmail.message.send": {
+        idempotencyKey: true,
+        fields: {
+            to: { kind: "string[]", required: true, minItems: 1, maxItems: 50, uniqueItems: true, item: { minLength: 3, maxLength: 254, pattern: "^[^\\s@<>,;\"]+@[^\\s@<>,;\"]+\\.[^\\s@<>,;\"]+$" } },
+            cc: { kind: "string[]", required: false, minItems: 1, maxItems: 50, uniqueItems: true, item: { minLength: 3, maxLength: 254, pattern: "^[^\\s@<>,;\"]+@[^\\s@<>,;\"]+\\.[^\\s@<>,;\"]+$" } },
+            bcc: { kind: "string[]", required: false, minItems: 1, maxItems: 50, uniqueItems: true, item: { minLength: 3, maxLength: 254, pattern: "^[^\\s@<>,;\"]+@[^\\s@<>,;\"]+\\.[^\\s@<>,;\"]+$" } },
+            subject: { kind: "string", required: true, minLength: 1, maxLength: 256 },
+            text: { kind: "string", required: true, minLength: 1, maxLength: 4000 },
+            replyToMessageId: { kind: "string", required: false, minLength: 0, pattern: "^[A-Za-z0-9_-]{1,64}$" },
+        },
+    },
+    "warehouse.view.read": {
+        idempotencyKey: false,
+        fields: {
+            columns: { kind: "string[]", required: true, minItems: 1, maxItems: 32, uniqueItems: false, item: { minLength: 0, pattern: "^[A-Za-z_][A-Za-z0-9_]{0,62}$" } },
+            limit: { kind: "integer", required: false, minimum: 1, maximum: 1000, default: 100 },
+        },
+    },
+};
+/** The upper bound of one integer input as a literal type: integrationExecuteInputMaximum('slack.channel.history', 'limit') is 15. */
+export function integrationExecuteInputMaximum(operation, field) {
+    const rule = IntegrationExecuteInputRules[operation].fields[field];
+    if (!rule || rule.kind !== 'integer')
+        throw new Error(`${String(operation)}.input.${String(field)} has no integer bound`);
+    return rule.maximum;
+}
+const patterns = new Map();
+function matches(pattern, value) {
+    let compiled = patterns.get(pattern);
+    if (!compiled) {
+        compiled = new RegExp(pattern, 'u');
+        patterns.set(pattern, compiled);
+    }
+    return compiled.test(value);
+}
+/**
+ * Validates one operation's input against the contract and returns it with the
+ * contract's defaults applied. The message names the field and its allowed
+ * range; it is the sentence the platform answers with, so a caller may show it.
+ */
+export function validateIntegrationExecuteInput(operation, input) {
+    const rule = IntegrationExecuteInputRules[operation];
+    if (!rule)
+        return { ok: false, problem: { field: 'operation', message: `${operation} is not a declared integration operation` } };
+    const raw = input === undefined ? {} : input;
+    if (raw === null || typeof raw !== 'object' || Array.isArray(raw))
+        return { ok: false, problem: { field: 'input', message: 'input must be an object' } };
+    const given = raw;
+    for (const name of Object.keys(given))
+        if (!Object.prototype.hasOwnProperty.call(rule.fields, name))
+            return { ok: false, problem: { field: name, message: `${name} is not an input of ${operation}` } };
+    const out = {};
+    for (const [name, field] of Object.entries(rule.fields)) {
+        const value = given[name];
+        if (value === undefined || value === null) {
+            if (field.required)
+                return { ok: false, problem: { field: name, message: `${name} is required for ${operation}` } };
+            if (field.kind === 'integer' && field.default !== undefined)
+                out[name] = field.default;
+            continue;
+        }
+        if (field.kind === 'integer') {
+            if (typeof value !== 'number' || !Number.isInteger(value) || value < field.minimum || value > field.maximum)
+                return { ok: false, problem: { field: name, message: `${name} must be an integer between ${field.minimum} and ${field.maximum}` } };
+        }
+        else if (field.kind === 'string') {
+            if (typeof value !== 'string' || value.length < field.minLength || (field.maxLength !== undefined && value.length > field.maxLength))
+                return { ok: false, problem: { field: name, message: field.maxLength !== undefined ? `${name} must be ${field.minLength} to ${field.maxLength} characters` : `${name} must be a string of at least ${field.minLength} characters` } };
+            if (field.pattern && !matches(field.pattern, value))
+                return { ok: false, problem: { field: name, message: `${name} must match ${field.pattern}` } };
+        }
+        else {
+            if (!Array.isArray(value) || value.length < field.minItems || value.length > field.maxItems)
+                return { ok: false, problem: { field: name, message: `${name} must list ${field.minItems} to ${field.maxItems} items` } };
+            const seen = new Set();
+            for (const [index, item] of value.entries()) {
+                if (typeof item !== 'string' || item.length < field.item.minLength || (field.item.maxLength !== undefined && item.length > field.item.maxLength) || (field.item.pattern !== undefined && !matches(field.item.pattern, item)))
+                    return { ok: false, problem: { field: name, message: `${name}[${index}] is not a valid ${name} entry` } };
+                if (field.uniqueItems && seen.has(item))
+                    return { ok: false, problem: { field: name, message: `${name} must not repeat an entry` } };
+                seen.add(item);
+            }
+        }
+        out[name] = value;
+    }
+    return { ok: true, input: out };
+}