@fourier-labs/harbour-contracts 0.63.0 → 0.65.0

package/contract-release.json

@@ -1,12 +1,12 @@
 {
   "schema": "harbour.contract-release/1.0",
-  "repositoryVersion": "0.63.0.0",
-  "publishVersion": "0.63.0",
-  "publishTag": "v0.63.0",
-  "schemasDigest": "sha256:1cfd1fddb8f2620bbf8648784ae1454c44c211b5c4836574fc4d917f3d3a613d",
+  "repositoryVersion": "0.65.0.0",
+  "publishVersion": "0.65.0",
+  "publishTag": "v0.65.0",
+  "schemasDigest": "sha256:80c014af364c39472dc57ca097f4994daa0e8d57d094a3e4ca5631985246093e",
   "aiFixturesDigest": "sha256:edac31c92e146ca1c40130f2fb5649db82e24b8cd1ac758153b90612052fddb6",
-  "generatedGoDigest": "sha256:47b9abc825fcdfa2794e55cd056703ef262134767cfa7d86792d570b1f3e988b",
-  "generatedTypeScriptDigest": "sha256:96db6b8ebf81b3677c48f26d10e56fc5948470b68133c087b8326b261a0b2bf0",
+  "generatedGoDigest": "sha256:2af05118fbdbb3d3e16a506074f50338d4646288d4ce530a60765028221041b2",
+  "generatedTypeScriptDigest": "sha256:39dcf887d9d5b39603eee342a27029feff32e505bb9d8ba79c8607f87d2bca1e",
   "generatedExclusions": {
     "gen-go/contract_release.go": "contains the generated aggregate digests (self-reference)",
     "gen-ts/contract-release.ts": "contains the generated aggregate digests (self-reference)"
@@ -44,6 +44,7 @@
     "schema/deployment-app-registration.schema.json": "sha256:50bc8e308fca14d014a50d96ef1cf403eeeca5c3caea4a204fe15f0080efed32",
     "schema/deployment-continuation.schema.json": "sha256:55b6945439f2c91cd851dfe4bc9484e67a64091b7763b2d8267354b4a8bfae8c",
     "schema/deployment-environment.schema.json": "sha256:35b26cae07da9ee375a842b5e87c4570c8eca06775e9fd6dd46eb9eb8aa0df6c",
+    "schema/deployment-preview-retirement.schema.json": "sha256:4f945253c3af015f31d6857ec13661f2239e87f2b9dc76cc0a5109d6d40f2a1a",
     "schema/deployment-source.schema.json": "sha256:256988b1efbfc90bd0e1ae31a2c5d69b20ef1e4471dc24c9f9aa759278270fbe",
     "schema/deployment-status-failure.schema.json": "sha256:7cc021d53a07c63b66eb48146d33e8875b64faf77ee927b235795469eb9a1559",
     "schema/deployment-status-request.schema.json": "sha256:1f9f87adc947a252b53b61f71ae17f8c1b8fbc1166f31301a043d11ac257dc66",
@@ -55,13 +56,13 @@
     "schema/integration-error-details.schema.json": "sha256:47ad7621c34b092c7e40f912a21e7ccbdc000b974cfb7fa0c9200463e029f8fb",
     "schema/integration-execute-request.schema.json": "sha256:7a3ebd7a9992a9390d05c9eea6b66762e437655afdca79b64ec992967172c325",
     "schema/integration-execute-result.schema.json": "sha256:de87c35fb4dfb16f7334cab111f247281fc2300dc27738871ed1f8397ece6753",
-    "schema/internal-configuration-request.schema.json": "sha256:79bf3b7fa0ffa76d751584bc6b2362ef75855efce210b157ea71b62f4cdd9dc5",
+    "schema/internal-configuration-request.schema.json": "sha256:229d44a3458f68dceddfba802e5c1adcd95523a45af29b93b972706b88461a7d",
     "schema/kit-bundle-manifest.schema.json": "sha256:4a9fcdd52ba0d55718ef4dbdab112b145ef90471d9356d4d3fb41e50fe9e400d",
     "schema/kit-lock.schema.json": "sha256:a48154d9471e49a893d928f7b0e1e0bc77708a4a7edce4fdf14073203e0e8987",
     "schema/kvs-routing-entry.schema.json": "sha256:b75f3a5dfa93a428b2764e03222b66b6ef2bed980f8bac8ffac54afdf3526bc5",
     "schema/promotion-request.schema.json": "sha256:00e96dfd8ddbdba88ea222941d43f3609ff6c815a79e34f6705cab458101c969",
     "schema/promotion-response.schema.json": "sha256:4129712d2e29d6ef21d93d4bd0bacfd60ada3f2ee0ade852824e64346b817634",
-    "schema/resolved-app-serving.schema.json": "sha256:efa71abcdab2d183faa3fd349d81560fa74b26c1735102751fcce5ce62e5b7c1",
+    "schema/resolved-app-serving.schema.json": "sha256:260e30ca16831ddd96b15f44eadc7daa2a5f87a0025588bd6318b236f349ec6b",
     "schema/saas-connection.schema.json": "sha256:82ed8018201800a95aa792bde1d22568e86b55b3be926aa094a260c8c78a58d7",
     "schema/sanitized-binding-evidence.schema.json": "sha256:1191ab88e2764df927e5f17837674cebebe068d480da2b2fdb390e589f96b51f",
     "schema/secret-reference.schema.json": "sha256:db4e3c2c6a2dbd72d7ea0f9c91cb3b2343a7e67b601996c6818b2ef08e440895",
@@ -111,7 +112,7 @@
     "gen-go/integration_execute_input_rules.go": "sha256:52a405aa7a97f7b4e2ed3c314a7bd28b7698cc7883ee72ad4c027637be602ab9",
     "gen-go/integration_execute_input_rules_test.go": "sha256:c437a8406a2f062a0173b9419e4cb176fc6eb54e569506225d5162323f55b40b",
     "gen-go/schema_documents.go": "sha256:c19c0d540f602ee997a84b90e20702d9bc63ed7d27aec267e76c04655fc182e0",
-    "gen-go/types.go": "sha256:dc6d4497bdac7ddf8b6cb2d5ff58e1408ecabb8e54c4b31bd8cf1a5abb4ba06f",
+    "gen-go/types.go": "sha256:11c13bc1f8f9d953eacd5cff4c5a08ed1b1126b3606a16e0b350af4c5b15dced",
     "gen-go/version_state.go": "sha256:4ef8abb126414c0025cf2c59bc9c79a74ef4a2ff89e8f316cbf05acc872371c1"
   },
   "generatedTypeScript": {
@@ -150,6 +151,7 @@
     "gen-ts/deployment-app-registration.ts": "sha256:07f840a82dddd770e54e1020a034cdbfc84e226a94131e3f5a4cdd5da8acc2f0",
     "gen-ts/deployment-continuation.ts": "sha256:cc9f63af4d0da5086a79103789e4f043783b75b4ed11c6512f044439a551a79c",
     "gen-ts/deployment-environment.ts": "sha256:fc08cabe2e52ebb93cfe84d2019994260f71734c33d0e50e7c63e40ef5b17cef",
+    "gen-ts/deployment-preview-retirement.ts": "sha256:0b30339d6f1d14a9d4a14fa4b59c4c476a5d8aa534be71f7d750c677bb9a2d44",
     "gen-ts/deployment-source.ts": "sha256:8ccb55aaa7260eb6d19a00987d6a20a4b514e343564da13f27cd7fee8013500a",
     "gen-ts/deployment-status-failure.ts": "sha256:6da2e6eb2f708efa51d416a1ec50f71ea7967cf9be9f93e7ce2e4760dae2cfe3",
     "gen-ts/deployment-status-request.ts": "sha256:7ddccd07ab9f6d0821903a291ab35f903bb055727e03a058b99165ec048f6483",
@@ -158,19 +160,19 @@
     "gen-ts/error-category-registry.ts": "sha256:7466a502c0723a77db825cdeaa9556a244201b55d9b7acbf2c098e9e84351df1",
     "gen-ts/error-category.ts": "sha256:9bda89180c3b740c9aa8be466216592e8ca9d0d368c274333edf6ea5c45afd8e",
     "gen-ts/error-envelope.ts": "sha256:4457309be794f9d4fc0cf62530cc2d442c007bac9ae84aff66df099cc9e40310",
-    "gen-ts/index.ts": "sha256:c260e665bada040c8f1cb29dccc48fbdd33d11fd77ae5583450c1d3430ad1ed4",
+    "gen-ts/index.ts": "sha256:01441fefa9a5df07a12663f83444cafca89f28e82567aa80566e8fb9de4af4aa",
     "gen-ts/integration-connect-result.ts": "sha256:4b10f169b6e1af364e9b418de21caa9fadbfb77b43cbff77d741cfae0b52180c",
     "gen-ts/integration-error-details.ts": "sha256:ad7ecec9dd4533a6e86b3508886a7d69937052f52105497285797f77106bcc6f",
     "gen-ts/integration-execute-input-rules.ts": "sha256:0da117ac9f3109462e5862d658edf0f50e4b71fdcbb675d3a9dcb08489bcadd0",
     "gen-ts/integration-execute-request.ts": "sha256:1008bc1c8b8fec41dd7241a9f6ccb31233473e34c5cf538c0125f4ee6f45d2db",
     "gen-ts/integration-execute-result.ts": "sha256:b7c9270abb0c12888e651aeb1a9927a658faa135ad6197be6dfbd46d942f2a0a",
-    "gen-ts/internal-configuration-request.ts": "sha256:945ca34f771664423a34c9bfa3b7bf8909373989356f05bfe7f34ce4f5d6e39d",
+    "gen-ts/internal-configuration-request.ts": "sha256:7032437797473fa1c581d134adef2f3d4b4f4132f482cd17743e9d47097886bc",
     "gen-ts/kit-bundle-manifest.ts": "sha256:2777a268aef8787b81e71d154a7d05f6f5ded09d66f378211ff5493ddb885171",
     "gen-ts/kit-lock.ts": "sha256:00ceeb97e9b7d0187bec00728f5099fd34e775e9cc44c85c4714f7a3a4118ef6",
     "gen-ts/kvs-routing-entry.ts": "sha256:d92e85ee9f257d77850d1d3aac9438e2055f38084ff84a48fcedae239d47d4ca",
     "gen-ts/promotion-request.ts": "sha256:9db88cef67f777a16bac628039ec3f582acb9e8cfff6fb592b30d0a0e55abc68",
     "gen-ts/promotion-response.ts": "sha256:f1c9cafac96faeb02a443a31786f67714e818f38d90108e7af41958396524d6f",
-    "gen-ts/resolved-app-serving.ts": "sha256:b5b3f09b29780e285d9aa5f27d2957ffdbc819eb9c0f7eba00f5fa4b883466c1",
+    "gen-ts/resolved-app-serving.ts": "sha256:6131a6cc5f784f0d101081d2ce1b96b76b2f904b2c5e7b2809f9ede5878ada1f",
     "gen-ts/saas-connection.ts": "sha256:a4b7a9b37db0cf747ca1c40db5b1459ade2a86cc067146154c3c42484b76e07a",
     "gen-ts/sanitized-binding-digest-helper.ts": "sha256:c47d7fdc20500e2e72c23fe39ecdd610fc397c47fcba51335ebec3c380fe6872",
     "gen-ts/sanitized-binding-evidence.ts": "sha256:f3fb7b1d7d2e0929eb0ea981eaf32db3104010647185f6ae59f67167d42538a9",

package/dist/gen-ts/contract-release.d.ts

@@ -1,7 +1,7 @@
-export declare const ContractRepositoryVersion: "0.63.0.0";
-export declare const ContractPublishVersion: "0.63.0";
-export declare const ContractPublishTag: "v0.63.0";
-export declare const ContractSchemasDigest: "sha256:1cfd1fddb8f2620bbf8648784ae1454c44c211b5c4836574fc4d917f3d3a613d";
+export declare const ContractRepositoryVersion: "0.65.0.0";
+export declare const ContractPublishVersion: "0.65.0";
+export declare const ContractPublishTag: "v0.65.0";
+export declare const ContractSchemasDigest: "sha256:80c014af364c39472dc57ca097f4994daa0e8d57d094a3e4ca5631985246093e";
 export declare const ContractAiFixturesDigest: "sha256:edac31c92e146ca1c40130f2fb5649db82e24b8cd1ac758153b90612052fddb6";
-export declare const ContractGeneratedGoDigest: "sha256:47b9abc825fcdfa2794e55cd056703ef262134767cfa7d86792d570b1f3e988b";
-export declare const ContractGeneratedTypeScriptDigest: "sha256:96db6b8ebf81b3677c48f26d10e56fc5948470b68133c087b8326b261a0b2bf0";
+export declare const ContractGeneratedGoDigest: "sha256:2af05118fbdbb3d3e16a506074f50338d4646288d4ce530a60765028221041b2";
+export declare const ContractGeneratedTypeScriptDigest: "sha256:39dcf887d9d5b39603eee342a27029feff32e505bb9d8ba79c8607f87d2bca1e";

package/dist/gen-ts/contract-release.js

@@ -1,9 +1,9 @@
 /* eslint-disable */
 // Code generated by tools/gen/gen.mjs from schema/*.json. DO NOT EDIT.
-export const ContractRepositoryVersion = "0.63.0.0";
-export const ContractPublishVersion = "0.63.0";
-export const ContractPublishTag = "v0.63.0";
-export const ContractSchemasDigest = "sha256:1cfd1fddb8f2620bbf8648784ae1454c44c211b5c4836574fc4d917f3d3a613d";
+export const ContractRepositoryVersion = "0.65.0.0";
+export const ContractPublishVersion = "0.65.0";
+export const ContractPublishTag = "v0.65.0";
+export const ContractSchemasDigest = "sha256:80c014af364c39472dc57ca097f4994daa0e8d57d094a3e4ca5631985246093e";
 export const ContractAiFixturesDigest = "sha256:edac31c92e146ca1c40130f2fb5649db82e24b8cd1ac758153b90612052fddb6";
-export const ContractGeneratedGoDigest = "sha256:47b9abc825fcdfa2794e55cd056703ef262134767cfa7d86792d570b1f3e988b";
-export const ContractGeneratedTypeScriptDigest = "sha256:96db6b8ebf81b3677c48f26d10e56fc5948470b68133c087b8326b261a0b2bf0";
+export const ContractGeneratedGoDigest = "sha256:2af05118fbdbb3d3e16a506074f50338d4646288d4ce530a60765028221041b2";
+export const ContractGeneratedTypeScriptDigest = "sha256:39dcf887d9d5b39603eee342a27029feff32e505bb9d8ba79c8607f87d2bca1e";

package/dist/gen-ts/deployment-preview-retirement.d.ts

@@ -0,0 +1,8 @@
+/**
+ * IAM-protected POST /v1/deployment/apps/retire-preview request after production is LIVE and the deployment plane holds the preview retirement reservation. Disables only the registered preview version's serving routes and workload authority.
+ */
+export interface DeploymentPreviewRetirement {
+    tenantId: string;
+    appId: string;
+    previewVersionId: string;
+}

package/dist/gen-ts/deployment-preview-retirement.js

@@ -0,0 +1,3 @@
+/* eslint-disable */
+// Code generated by tools/gen/gen.mjs from schema/*.json. DO NOT EDIT.
+export {};

package/dist/gen-ts/index.d.ts

@@ -34,6 +34,7 @@ export * from './deploy-response.js';
 export * from './deployment-app-registration.js';
 export * from './deployment-continuation.js';
 export * from './deployment-environment.js';
+export * from './deployment-preview-retirement.js';
 export * from './deployment-source.js';
 export * from './deployment-status-failure.js';
 export * from './deployment-status-request.js';

package/dist/gen-ts/index.js

@@ -36,6 +36,7 @@ export * from './deploy-response.js';
 export * from './deployment-app-registration.js';
 export * from './deployment-continuation.js';
 export * from './deployment-environment.js';
+export * from './deployment-preview-retirement.js';
 export * from './deployment-source.js';
 export * from './deployment-status-failure.js';
 export * from './deployment-status-request.js';

package/dist/gen-ts/internal-configuration-request.d.ts

@@ -1,5 +1,5 @@
 /**
- * Existing IAM-protected configuration resolver request. appId and preview environment request resolved serving alongside deployment-destination environments, using a ready tenant binding or the platform default.
+ * Existing IAM-protected configuration resolver request. appId and environment request resolved serving alongside deployment-destination environments, using a ready tenant binding or the platform default.
  */
 export interface InternalConfigurationRequest {
     tenantId: string;
@@ -8,5 +8,5 @@ export interface InternalConfigurationRequest {
      */
     scopes: ('source-control' | 'identity' | 'deployment' | 'custom-domains' | 'deployment-destination')[];
     appId?: string;
-    environment?: 'preview';
+    environment?: 'preview' | 'production';
 }

package/dist/gen-ts/resolved-app-serving.d.ts

@@ -1,10 +1,10 @@
 /**
- * Governance-selected V2 preview serving facts. Admission resolves once and passes these unchanged to build/provision/publish. Pending tenant bindings cannot supply these facts.
+ * Governance-selected V2 preview or production serving facts. Admission resolves once and passes these unchanged to build/provision/publish. Pending tenant bindings cannot supply these facts.
  */
 export interface ResolvedAppServing {
     tenantId: string;
     appId: string;
-    environment: 'preview';
+    environment: 'preview' | 'production';
     frontendUrl: string;
     apiUrl: string;
     loginHost: string;
@@ -15,4 +15,31 @@ export interface ResolvedAppServing {
         routingStoreArn: string;
         distributionId: string;
     };
+    /**
+     * The platform cell (LLD §3.7) whose routing store and template distribution serve this app.
+     */
+    cellId?: string;
+    /**
+     * The cell's CloudFront KeyValueStore ARN; equals edge.routingStoreArn unless the cell record names its own.
+     */
+    routingStoreArn?: string;
+    /**
+     * Bare hostname of frontendUrl.
+     */
+    pageHost?: string;
+    /**
+     * Bare hostname of apiUrl.
+     */
+    apiHost?: string;
+    /**
+     * Present only when source is tenant: the ready delegated company zone the page and API hosts live under, and the shared gateway/TLS secret the cell serves it with.
+     */
+    companyDomain?: {
+        tenantId: string;
+        zone: string;
+        pageSuffix: string;
+        apiSuffix: string;
+        gatewayName: string;
+        tlsSecretName: string;
+    };
 }

package/gen-ts/contract-release.ts

@@ -1,10 +1,10 @@
 /* eslint-disable */
 // Code generated by tools/gen/gen.mjs from schema/*.json. DO NOT EDIT.
 
-export const ContractRepositoryVersion = "0.63.0.0" as const;
-export const ContractPublishVersion = "0.63.0" as const;
-export const ContractPublishTag = "v0.63.0" as const;
-export const ContractSchemasDigest = "sha256:1cfd1fddb8f2620bbf8648784ae1454c44c211b5c4836574fc4d917f3d3a613d" as const;
+export const ContractRepositoryVersion = "0.65.0.0" as const;
+export const ContractPublishVersion = "0.65.0" as const;
+export const ContractPublishTag = "v0.65.0" as const;
+export const ContractSchemasDigest = "sha256:80c014af364c39472dc57ca097f4994daa0e8d57d094a3e4ca5631985246093e" as const;
 export const ContractAiFixturesDigest = "sha256:edac31c92e146ca1c40130f2fb5649db82e24b8cd1ac758153b90612052fddb6" as const;
-export const ContractGeneratedGoDigest = "sha256:47b9abc825fcdfa2794e55cd056703ef262134767cfa7d86792d570b1f3e988b" as const;
-export const ContractGeneratedTypeScriptDigest = "sha256:96db6b8ebf81b3677c48f26d10e56fc5948470b68133c087b8326b261a0b2bf0" as const;
+export const ContractGeneratedGoDigest = "sha256:2af05118fbdbb3d3e16a506074f50338d4646288d4ce530a60765028221041b2" as const;
+export const ContractGeneratedTypeScriptDigest = "sha256:39dcf887d9d5b39603eee342a27029feff32e505bb9d8ba79c8607f87d2bca1e" as const;

package/gen-ts/deployment-preview-retirement.ts

@@ -0,0 +1,11 @@
+/* eslint-disable */
+// Code generated by tools/gen/gen.mjs from schema/*.json. DO NOT EDIT.
+
+/**
+ * IAM-protected POST /v1/deployment/apps/retire-preview request after production is LIVE and the deployment plane holds the preview retirement reservation. Disables only the registered preview version's serving routes and workload authority.
+ */
+export interface DeploymentPreviewRetirement {
+  tenantId: string;
+  appId: string;
+  previewVersionId: string;
+}

package/gen-ts/index.ts

@@ -37,6 +37,7 @@ export * from './deploy-response.js';
 export * from './deployment-app-registration.js';
 export * from './deployment-continuation.js';
 export * from './deployment-environment.js';
+export * from './deployment-preview-retirement.js';
 export * from './deployment-source.js';
 export * from './deployment-status-failure.js';
 export * from './deployment-status-request.js';

package/gen-ts/internal-configuration-request.ts

@@ -2,7 +2,7 @@
 // Code generated by tools/gen/gen.mjs from schema/*.json. DO NOT EDIT.
 
 /**
- * Existing IAM-protected configuration resolver request. appId and preview environment request resolved serving alongside deployment-destination environments, using a ready tenant binding or the platform default.
+ * Existing IAM-protected configuration resolver request. appId and environment request resolved serving alongside deployment-destination environments, using a ready tenant binding or the platform default.
  */
 export interface InternalConfigurationRequest {
   tenantId: string;
@@ -11,5 +11,5 @@ export interface InternalConfigurationRequest {
    */
   scopes: ('source-control' | 'identity' | 'deployment' | 'custom-domains' | 'deployment-destination')[];
   appId?: string;
-  environment?: 'preview';
+  environment?: 'preview' | 'production';
 }

package/gen-ts/resolved-app-serving.ts

@@ -2,12 +2,12 @@
 // Code generated by tools/gen/gen.mjs from schema/*.json. DO NOT EDIT.
 
 /**
- * Governance-selected V2 preview serving facts. Admission resolves once and passes these unchanged to build/provision/publish. Pending tenant bindings cannot supply these facts.
+ * Governance-selected V2 preview or production serving facts. Admission resolves once and passes these unchanged to build/provision/publish. Pending tenant bindings cannot supply these facts.
  */
 export interface ResolvedAppServing {
   tenantId: string;
   appId: string;
-  environment: 'preview';
+  environment: 'preview' | 'production';
   frontendUrl: string;
   apiUrl: string;
   loginHost: string;
@@ -18,4 +18,31 @@ export interface ResolvedAppServing {
     routingStoreArn: string;
     distributionId: string;
   };
+  /**
+   * The platform cell (LLD §3.7) whose routing store and template distribution serve this app.
+   */
+  cellId?: string;
+  /**
+   * The cell's CloudFront KeyValueStore ARN; equals edge.routingStoreArn unless the cell record names its own.
+   */
+  routingStoreArn?: string;
+  /**
+   * Bare hostname of frontendUrl.
+   */
+  pageHost?: string;
+  /**
+   * Bare hostname of apiUrl.
+   */
+  apiHost?: string;
+  /**
+   * Present only when source is tenant: the ready delegated company zone the page and API hosts live under, and the shared gateway/TLS secret the cell serves it with.
+   */
+  companyDomain?: {
+    tenantId: string;
+    zone: string;
+    pageSuffix: string;
+    apiSuffix: string;
+    gatewayName: string;
+    tlsSecretName: string;
+  };
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fourier-labs/harbour-contracts",
-  "version": "0.63.0",
+  "version": "0.65.0",
   "description": "Single source of truth for every data shape that crosses a boundary between Isomorph components.",
   "license": "UNLICENSED",
   "private": false,

package/schema/deployment-preview-retirement.schema.json

@@ -0,0 +1,14 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "https://contracts.harbour.dev/deployment-preview-retirement.schema.json",
+  "title": "DeploymentPreviewRetirement",
+  "description": "IAM-protected POST /v1/deployment/apps/retire-preview request after production is LIVE and the deployment plane holds the preview retirement reservation. Disables only the registered preview version's serving routes and workload authority.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["tenantId", "appId", "previewVersionId"],
+  "properties": {
+    "tenantId": { "type": "string", "minLength": 1 },
+    "appId": { "type": "string", "minLength": 1 },
+    "previewVersionId": { "type": "string", "minLength": 1 }
+  }
+}

package/schema/internal-configuration-request.schema.json

@@ -2,14 +2,14 @@
   "$schema": "http://json-schema.org/draft-07/schema#",
   "$id": "https://contracts.harbour.dev/internal-configuration-request.schema.json",
   "title": "InternalConfigurationRequest",
-  "description": "Existing IAM-protected configuration resolver request. appId and preview environment request resolved serving alongside deployment-destination environments, using a ready tenant binding or the platform default.",
+  "description": "Existing IAM-protected configuration resolver request. appId and environment request resolved serving alongside deployment-destination environments, using a ready tenant binding or the platform default.",
   "type": "object", "additionalProperties": false,
   "required": ["tenantId", "scopes"],
   "properties": {
     "tenantId": {"type": "string", "minLength": 1},
     "scopes": {"type": "array", "minItems": 1, "uniqueItems": true, "items": {"type": "string", "enum": ["source-control", "identity", "deployment", "custom-domains", "deployment-destination"]}},
     "appId": {"type": "string", "minLength": 1},
-    "environment": {"const": "preview"}
+    "environment": {"type": "string", "enum": ["preview", "production"]}
   },
   "dependencies": {"appId": ["environment"], "environment": ["appId"]}
 }

package/schema/resolved-app-serving.schema.json

@@ -2,13 +2,13 @@
   "$schema": "http://json-schema.org/draft-07/schema#",
   "$id": "https://contracts.harbour.dev/resolved-app-serving.schema.json",
   "title": "ResolvedAppServing",
-  "description": "Governance-selected V2 preview serving facts. Admission resolves once and passes these unchanged to build/provision/publish. Pending tenant bindings cannot supply these facts.",
+  "description": "Governance-selected V2 preview or production serving facts. Admission resolves once and passes these unchanged to build/provision/publish. Pending tenant bindings cannot supply these facts.",
   "type": "object", "additionalProperties": false,
   "required": ["tenantId", "appId", "environment", "frontendUrl", "apiUrl", "loginHost", "bindingVersion", "source", "edge"],
   "properties": {
     "tenantId": {"type": "string", "minLength": 1},
     "appId": {"type": "string", "minLength": 1},
-    "environment": {"const": "preview"},
+    "environment": {"type": "string", "enum": ["preview", "production"]},
     "frontendUrl": {"type": "string", "format": "uri", "pattern": "^https://"},
     "apiUrl": {"type": "string", "format": "uri", "pattern": "^https://"},
     "loginHost": {"type": "string", "format": "hostname"},
@@ -22,6 +22,23 @@
         "routingStoreArn": {"type": "string", "minLength": 1},
         "distributionId": {"type": "string", "minLength": 1}
       }
+    },
+    "cellId": {"type": "string", "minLength": 1, "description": "The platform cell (LLD §3.7) whose routing store and template distribution serve this app."},
+    "routingStoreArn": {"type": "string", "minLength": 1, "description": "The cell's CloudFront KeyValueStore ARN; equals edge.routingStoreArn unless the cell record names its own."},
+    "pageHost": {"type": "string", "format": "hostname", "description": "Bare hostname of frontendUrl."},
+    "apiHost": {"type": "string", "format": "hostname", "description": "Bare hostname of apiUrl."},
+    "companyDomain": {
+      "type": "object", "additionalProperties": false,
+      "description": "Present only when source is tenant: the ready delegated company zone the page and API hosts live under, and the shared gateway/TLS secret the cell serves it with.",
+      "required": ["tenantId", "zone", "pageSuffix", "apiSuffix", "gatewayName", "tlsSecretName"],
+      "properties": {
+        "tenantId": {"type": "string", "minLength": 1},
+        "zone": {"type": "string", "format": "hostname"},
+        "pageSuffix": {"type": "string", "format": "hostname"},
+        "apiSuffix": {"type": "string", "format": "hostname"},
+        "gatewayName": {"type": "string", "minLength": 1},
+        "tlsSecretName": {"type": "string", "minLength": 1}
+      }
     }
   }
 }