@fourier-labs/harbour-contracts 0.69.0 → 0.71.0

package/schema/saas-connection.schema.json

@@ -26,13 +26,17 @@
     "operations": {
       "type": "array",
       "minItems": 1,
-      "maxItems": 5,
+      "maxItems": 11,
       "uniqueItems": true,
       "items": { "$ref": "app-integrations-declaration.schema.json#/definitions/IntegrationOperation" },
       "not": { "contains": { "const": "warehouse.view.read" } },
-      "description": "Operations IT allows apps to request on this connection: the provider's own SaaS operations (Slack: slack.channel.history, slack.message.post; Gmail: gmail.thread.list, gmail.message.read, gmail.message.send). Never warehouse.view.read."
+      "description": "Operations IT allows apps to request on this connection: the provider's own SaaS operations (Slack: slack.channel.history, slack.message.post, slack.message.update, slack.message.delete, slack.dm.send, slack.user.lookup; Gmail: gmail.thread.list, gmail.thread.read, gmail.message.read, gmail.message.send, gmail.attachment.read). Never warehouse.view.read."
     },
     "developmentPreapproval": { "$ref": "#/definitions/DevelopmentPreapproval" },
+    "oauthClient": { "$ref": "#/definitions/SaasOauthClient" },
+    "userModeApproval": { "$ref": "#/definitions/UserModeApproval" },
+    "directMessages": { "$ref": "#/definitions/DirectMessagePolicy" },
+    "externalRecipients": { "$ref": "#/definitions/ExternalRecipientPolicy" },
     "blockedDevelopmentBuilders": {
       "type": "array",
       "maxItems": 256,
@@ -73,7 +77,68 @@
     "SaasProvider": {
       "type": "string",
       "enum": ["slack", "gmail"],
-      "description": "Slack carries an installation and a channel map; Gmail is user-consent only and read-only."
+      "description": "Slack carries an installation and a channel map; Gmail is user-consent only."
+    },
+    "SaasOauthClient": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["clientId", "secretRef", "setAt", "setBy"],
+      "description": "The tenant's own OAuth client for this provider (0.71.0; the ADR 0068 follow-up): when present, installation and user consent run through the company's Slack app or Google Cloud project instead of the platform-owned one, so the tenant's IT sees and controls the app in their own admin console. A reference to the secret, never the secret.",
+      "properties": {
+        "clientId": { "type": "string", "minLength": 1, "maxLength": 255 },
+        "secretRef": { "type": "string", "pattern": "^secretref://[A-Za-z0-9][A-Za-z0-9/_.:-]*$", "description": "Where the client secret lives." },
+        "setAt": { "type": "string", "format": "date-time" },
+        "setBy": { "type": "string", "minLength": 1, "maxLength": 255, "description": "The IT admin who saved it (lower-cased email)." }
+      }
+    },
+    "UserModeApproval": {
+      "type": "string",
+      "enum": ["automatic", "it"],
+      "description": "How a user-mode access request on this connection is approved (0.71.0): automatic — the person's own consent is the approval, since the app only ever acts as them; it — an IT admin reviews it like an app-mode request. Absent means it."
+    },
+    "DirectMessagePolicy": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["allowed", "dailyRecipientCap"],
+      "description": "Whom an app may direct-message through slack.dm.send (0.71.0), set by IT on the connection and enforced by governance on every send.",
+      "properties": {
+        "allowed": { "$ref": "#/definitions/DirectMessageAudience" },
+        "channel": { "$ref": "app-integrations-declaration.schema.json#/definitions/IntegrationAlias", "description": "channel_members only: the alias (a key of `channels`) whose current members may be messaged." },
+        "dailyRecipientCap": { "type": "integer", "minimum": 1, "maximum": 1000, "description": "Distinct recipients one app may message per UTC day on this connection; the cap refuses the send that would exceed it." }
+      },
+      "if": { "properties": { "allowed": { "const": "channel_members" } } },
+      "then": { "required": ["channel"] },
+      "else": { "not": { "required": ["channel"] } }
+    },
+    "DirectMessageAudience": {
+      "type": "string",
+      "enum": ["signed_in_person", "channel_members", "anyone"],
+      "description": "signed_in_person — only the person using the app; channel_members — the members of the named channel; anyone — any workspace member."
+    },
+    "ExternalRecipientPolicy": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["mode"],
+      "description": "Whether a gmail.message.send may address people outside the company (0.71.0). An external recipient is one whose email domain is not one of the tenant's verified domains.",
+      "properties": {
+        "mode": { "$ref": "#/definitions/ExternalRecipientMode" },
+        "allowedDomains": {
+          "type": "array",
+          "minItems": 1,
+          "maxItems": 50,
+          "uniqueItems": true,
+          "items": { "type": "string", "format": "hostname", "maxLength": 253 },
+          "description": "allowlist only: the external domains a send may address; a recipient's domain must equal one of them."
+        }
+      },
+      "if": { "properties": { "mode": { "const": "allowlist" } } },
+      "then": { "required": ["allowedDomains"] },
+      "else": { "not": { "required": ["allowedDomains"] } }
+    },
+    "ExternalRecipientMode": {
+      "type": "string",
+      "enum": ["block", "allowlist", "allow"],
+      "description": "block — every recipient must be internal (the default when absent); allowlist — internal or in `allowedDomains`; allow — any address."
     },
     "SaasConnectionStatus": {
       "type": "string",
@@ -148,8 +213,11 @@
       "version": 3,
       "installation": { "tokenRecordId": "tok_workspace", "workspaceId": "T0WORKSPACE", "botUserId": "U0BOT", "status": "installed", "installedAt": "2026-09-09T08:00:00Z", "scopes": ["channels:read", "chat:write", "chat:write.customize"], "botName": "isomorph_ai" },
       "channels": { "team-updates": "C0123TEAM" },
-      "operations": ["slack.channel.history", "slack.message.post"],
+      "operations": ["slack.channel.history", "slack.message.post", "slack.message.update", "slack.message.delete", "slack.dm.send", "slack.user.lookup"],
       "developmentPreapproval": { "enabled": true, "hours": 24 },
+      "oauthClient": { "clientId": "1234567890.1234567890", "secretRef": "secretref://tenant/fourier/saas/company-slack/oauth-client", "setAt": "2026-10-01T08:00:00Z", "setBy": "it-admin@example.com" },
+      "userModeApproval": "automatic",
+      "directMessages": { "allowed": "channel_members", "channel": "team-updates", "dailyRecipientCap": 50 },
       "createdAt": "2026-09-09T08:00:00Z",
       "updatedAt": "2026-09-09T08:00:00Z"
     },
@@ -163,9 +231,10 @@
       "status": "ACTIVE",
       "version": 1,
       "channels": {},
-      "operations": ["gmail.thread.list", "gmail.message.read", "gmail.message.send"],
+      "operations": ["gmail.thread.list", "gmail.thread.read", "gmail.message.read", "gmail.message.send", "gmail.attachment.read"],
       "developmentPreapproval": { "enabled": false, "hours": 24 },
       "blockedDevelopmentBuilders": ["contractor@example.com"],
+      "externalRecipients": { "mode": "allowlist", "allowedDomains": ["partner.example.com"] },
       "createdAt": "2026-09-11T08:00:00Z",
       "updatedAt": "2026-09-11T08:00:00Z"
     }