@fourier-labs/harbour-contracts 0.71.0 → 0.73.0

package/dist/gen-ts/integration-operations.js

@@ -0,0 +1,126 @@
+/* eslint-disable */
+// Code generated by tools/gen/gen.mjs from schema/*.json. DO NOT EDIT.
+/** Declaration and execute metadata from the contract schemas. */
+export const IntegrationOperations = {
+    "slack.channel.history": {
+        "kind": "saas",
+        "identities": [
+            "user",
+            "app"
+        ],
+        "readOnly": true,
+        "declaredMode": true,
+        "idempotencyKey": false
+    },
+    "slack.message.post": {
+        "kind": "saas",
+        "identities": [
+            "app",
+            "user"
+        ],
+        "readOnly": false,
+        "declaredMode": true,
+        "idempotencyKey": true
+    },
+    "slack.message.update": {
+        "kind": "saas",
+        "identities": [
+            "app",
+            "user"
+        ],
+        "readOnly": false,
+        "declaredMode": true,
+        "idempotencyKey": false
+    },
+    "slack.message.delete": {
+        "kind": "saas",
+        "identities": [
+            "app",
+            "user"
+        ],
+        "readOnly": false,
+        "declaredMode": true,
+        "idempotencyKey": false
+    },
+    "slack.dm.send": {
+        "kind": "saas",
+        "identities": [
+            "app"
+        ],
+        "readOnly": false,
+        "declaredMode": false,
+        "idempotencyKey": true
+    },
+    "slack.user.lookup": {
+        "kind": "saas",
+        "identities": [
+            "app"
+        ],
+        "readOnly": true,
+        "declaredMode": false,
+        "idempotencyKey": false
+    },
+    "gmail.thread.list": {
+        "kind": "saas",
+        "identities": [
+            "user"
+        ],
+        "readOnly": true,
+        "declaredMode": false,
+        "idempotencyKey": false
+    },
+    "gmail.thread.read": {
+        "kind": "saas",
+        "identities": [
+            "user"
+        ],
+        "readOnly": true,
+        "declaredMode": false,
+        "idempotencyKey": false
+    },
+    "gmail.message.read": {
+        "kind": "saas",
+        "identities": [
+            "user"
+        ],
+        "readOnly": true,
+        "declaredMode": false,
+        "idempotencyKey": false
+    },
+    "gmail.message.send": {
+        "kind": "saas",
+        "identities": [
+            "user"
+        ],
+        "readOnly": false,
+        "declaredMode": false,
+        "idempotencyKey": true
+    },
+    "gmail.attachment.read": {
+        "kind": "saas",
+        "identities": [
+            "user"
+        ],
+        "readOnly": true,
+        "declaredMode": false,
+        "idempotencyKey": false
+    },
+    "warehouse.view.read": {
+        "kind": "database",
+        "identities": [
+            "app"
+        ],
+        "readOnly": true,
+        "declaredMode": false,
+        "idempotencyKey": false
+    },
+    "service.request": {
+        "kind": "service",
+        "identities": [
+            "app"
+        ],
+        "readOnly": false,
+        "declaredMode": false,
+        "idempotencyKey": false
+    }
+};

package/dist/gen-ts/saas-connection.d.ts

@@ -16,7 +16,7 @@ export type UserModeApproval = 'automatic' | 'it';
  */
 export type DirectMessageAudience = 'signed_in_person' | 'channel_members' | 'anyone';
 /**
- * block — every recipient must be internal (the default when absent); allowlist — internal or in `allowedDomains`; allow — any address.
+ * block — every recipient must be internal (what a new Gmail connection is given; a connection stored without a policy reads as allow); allowlist — internal or in `allowedDomains`; allow — any address.
  */
 export type ExternalRecipientMode = 'block' | 'allowlist' | 'allow';
 /**
@@ -56,7 +56,7 @@ export interface SaasConnection {
      * @minItems 1
      * @maxItems 11
      */
-    operations: ('slack.channel.history' | 'slack.message.post' | 'slack.message.update' | 'slack.message.delete' | 'slack.dm.send' | 'slack.user.lookup' | 'gmail.thread.list' | 'gmail.thread.read' | 'gmail.message.read' | 'gmail.message.send' | 'gmail.attachment.read' | 'warehouse.view.read')[];
+    operations: ('slack.channel.history' | 'slack.message.post' | 'slack.message.update' | 'slack.message.delete' | 'slack.dm.send' | 'slack.user.lookup' | 'gmail.thread.list' | 'gmail.thread.read' | 'gmail.message.read' | 'gmail.message.send' | 'gmail.attachment.read' | 'warehouse.view.read' | 'service.request')[];
     developmentPreapproval: DevelopmentPreapproval;
     oauthClient?: SaasOauthClient;
     userModeApproval?: UserModeApproval;

package/gen-ts/app-integrations-declaration.ts

@@ -1,7 +1,26 @@
 /* eslint-disable */
 // Code generated by tools/gen/gen.mjs from schema/*.json. DO NOT EDIT.
 
-export type IntegrationConnectionKind = 'saas' | 'database';
+export type DeclaredConnection = {
+  kind: IntegrationConnectionKind;
+  presentation?: IntegrationPresentation;
+  operations: {
+    'slack.channel.history'?: DeclaredModeChannelOperation;
+    'slack.message.post'?: DeclaredModeChannelOperation;
+    'slack.message.update'?: DeclaredModeChannelOperation;
+    'slack.message.delete'?: DeclaredModeChannelOperation;
+    'slack.dm.send'?: AppModeChannelOperation;
+    'slack.user.lookup'?: AppModeChannelOperation;
+    'gmail.thread.list'?: UserModeChannelOperation;
+    'gmail.thread.read'?: UserModeChannelOperation;
+    'gmail.message.read'?: UserModeChannelOperation;
+    'gmail.message.send'?: UserModeChannelOperation;
+    'gmail.attachment.read'?: UserModeChannelOperation;
+    'warehouse.view.read'?: AppModeViewOperation;
+    'service.request'?: ServiceOperation;
+  };
+};
+export type IntegrationConnectionKind = 'saas' | 'database' | 'service';
 /**
  * Whose authority an operation runs under. Fixed per operation, except the declared-mode Slack operations (slack.message.post; since 0.71.0 also slack.channel.history, slack.message.update, slack.message.delete): declared per app for the access request, and named per call among the app's approved modes (execute request `mode`, 0.55.0).
  */
@@ -21,7 +40,7 @@ export type ResourceNames = IntegrationAlias[];
 export type ColumnName = string;
 
 /**
- * Committed `.isomorph/integrations.json`: the app's declared use of tenant-wide integration connections. Keys are logical connection aliases (the governance sourceId); resources are logical names (Slack channel alias, warehouse view name), never IDs, tokens or URLs. The operation set is closed (twelve operations since 0.71.0, ADR 0018). Each operation carries a fixed identity mode — slack.dm.send=app, slack.user.lookup=app, every gmail.* operation=user, warehouse.view.read=app — except the declared-mode Slack operations (slack.message.post, and since 0.71.0 slack.channel.history, slack.message.update and slack.message.delete), whose mode the app DECLARES: `app` acts as the company's Slack app (the one audited bot identity; a post goes out under the IT-approved per-app display name when the connection declares `presentation`), `user` acts as the signed-in person after their own consent (reads what they can read, edits what they wrote). The declared mode is the one the app requests access for; an app may hold approved grants for both modes after two requests, and each declared-mode call names which approved mode it runs under (`mode` on the execute request, 0.55.0) — a mode IT did not approve is refused, never swapped for the other. A `saas` connection may declare only the Slack and Gmail operations and a `database` connection only warehouse.view.read; `presentation` is a `saas` connection's optional per-app display name and icon for app-mode Slack posts, shown to IT at approval time and applied only from the approved grant. Gmail is user-mode only (reads, one send); its single resource is the fixed `inbox` alias. slack.dm.send and slack.user.lookup address people by email rather than a channel, so their single resource is the fixed `workspace` alias (the connection's installed workspace), the way Gmail's is `inbox`. This file also owns the shared IntegrationOperation / IntegrationIdentityMode / IntegrationEnvironment / IntegrationConnectionKind / IntegrationPresentation definitions referenced by the other integration schemas.
+ * Committed `.isomorph/integrations.json`: the app's declared use of tenant-wide integration connections. Keys are logical connection aliases (the governance sourceId); resources are logical names (Slack channel alias, warehouse view name), never IDs, tokens or URLs. The operation set is closed (thirteen operations since 0.73.0, ADR 0018). Each operation carries a fixed identity mode — slack.dm.send=app, slack.user.lookup=app, every gmail.* operation=user, warehouse.view.read=app — except the declared-mode Slack operations (slack.message.post, and since 0.71.0 slack.channel.history, slack.message.update and slack.message.delete), whose mode the app DECLARES: `app` acts as the company's Slack app (the one audited bot identity; a post goes out under the IT-approved per-app display name when the connection declares `presentation`), `user` acts as the signed-in person after their own consent (reads what they can read, edits what they wrote). The declared mode is the one the app requests access for; an app may hold approved grants for both modes after two requests, and each declared-mode call names which approved mode it runs under (`mode` on the execute request, 0.55.0) — a mode IT did not approve is refused, never swapped for the other. A `saas` connection may declare only the Slack and Gmail operations and a `database` connection only warehouse.view.read; `presentation` is a `saas` connection's optional per-app display name and icon for app-mode Slack posts, shown to IT at approval time and applied only from the approved grant. Gmail is user-mode only (reads, one send); its single resource is the fixed `inbox` alias. slack.dm.send and slack.user.lookup address people by email rather than a channel, so their single resource is the fixed `workspace` alias (the connection's installed workspace), the way Gmail's is `inbox`. This file also owns the shared IntegrationOperation / IntegrationIdentityMode / IntegrationEnvironment / IntegrationConnectionKind / IntegrationPresentation definitions referenced by the other integration schemas.
  */
 export interface AppIntegrationsDeclaration {
   schema: 'isomorph.app-integrations/2.0';
@@ -29,24 +48,6 @@ export interface AppIntegrationsDeclaration {
     [k: string]: DeclaredConnection;
   };
 }
-export interface DeclaredConnection {
-  kind: IntegrationConnectionKind;
-  presentation?: IntegrationPresentation;
-  operations: {
-    'slack.channel.history'?: DeclaredModeChannelOperation;
-    'slack.message.post'?: DeclaredModeChannelOperation;
-    'slack.message.update'?: DeclaredModeChannelOperation;
-    'slack.message.delete'?: DeclaredModeChannelOperation;
-    'slack.dm.send'?: AppModeChannelOperation;
-    'slack.user.lookup'?: AppModeChannelOperation;
-    'gmail.thread.list'?: UserModeChannelOperation;
-    'gmail.thread.read'?: UserModeChannelOperation;
-    'gmail.message.read'?: UserModeChannelOperation;
-    'gmail.message.send'?: UserModeChannelOperation;
-    'gmail.attachment.read'?: UserModeChannelOperation;
-    'warehouse.view.read'?: AppModeViewOperation;
-  };
-}
 /**
  * saas connections only (Slack): how this app's app-mode posts are presented; meaningless for every other operation.
  */
@@ -91,3 +92,11 @@ export interface ViewResource {
    */
   columns: ColumnName[];
 }
+export interface ServiceOperation {
+  identity: 'app';
+  /**
+   * @minItems 1
+   * @maxItems 1
+   */
+  resources: 'api'[];
+}

package/gen-ts/contract-release.ts

@@ -1,10 +1,10 @@
 /* eslint-disable */
 // Code generated by tools/gen/gen.mjs from schema/*.json. DO NOT EDIT.
 
-export const ContractRepositoryVersion = "0.71.0.0" as const;
-export const ContractPublishVersion = "0.71.0" as const;
-export const ContractPublishTag = "v0.71.0" as const;
-export const ContractSchemasDigest = "sha256:25c5de2ee9586c6280dca7c733a7063f46bd5d400112fe60f928cf6db1a627c3" as const;
+export const ContractRepositoryVersion = "0.73.0.0" as const;
+export const ContractPublishVersion = "0.73.0" as const;
+export const ContractPublishTag = "v0.73.0" as const;
+export const ContractSchemasDigest = "sha256:c0f37c59c7c2decb4fb62d96596b787628483bdcdb09756c3ea286385d31a5f5" as const;
 export const ContractAiFixturesDigest = "sha256:edac31c92e146ca1c40130f2fb5649db82e24b8cd1ac758153b90612052fddb6" as const;
-export const ContractGeneratedGoDigest = "sha256:09bd95f079e733af9bf594a157d7396a645cc6c9866d48b7aee6b00a9762ac62" as const;
-export const ContractGeneratedTypeScriptDigest = "sha256:7fa5c1e4d8fdb68855b5e10208ee6c0a210f3595f7e74174efbf6bfa4c3673ce" as const;
+export const ContractGeneratedGoDigest = "sha256:eb98ee80133c91e8562b95d92388c5bb637a06ae8d97a0827f528cd6decde8c9" as const;
+export const ContractGeneratedTypeScriptDigest = "sha256:ad539efcc9e4a7521f9526dd6304215f6b764be64bd40cd598ec023f6bbb4583" as const;

package/gen-ts/data-grant-v2.ts

@@ -30,7 +30,7 @@ export interface DataGrantV2 {
    * Whose authority an operation runs under. Fixed per operation, except the declared-mode Slack operations (slack.message.post; since 0.71.0 also slack.channel.history, slack.message.update, slack.message.delete): declared per app for the access request, and named per call among the app's approved modes (execute request `mode`, 0.55.0).
    */
   mode: 'app' | 'user';
-  kind: 'saas' | 'database';
+  kind: 'saas' | 'database' | 'service';
   status: DataGrantV2Status;
   /**
    * Approved operations; each must match this grant's mode. Empty until the first approval. At most the eleven SaaS operations (0.71.0); a database grant holds one.
@@ -50,6 +50,7 @@ export interface DataGrantV2 {
     | 'gmail.message.send'
     | 'gmail.attachment.read'
     | 'warehouse.view.read'
+    | 'service.request'
   )[];
   /**
    * Approved logical resources. Never inherited by wildcard. Empty until the first approval.

package/gen-ts/deployment-app-registration.ts

@@ -2,7 +2,7 @@
 // Code generated by tools/gen/gen.mjs from schema/*.json. DO NOT EDIT.
 
 /**
- * IAM/SigV4 POST /v1/deployment/apps/register body. Governance derives tenant identity-provider configuration; no identity secrets are supplied. apiHostnames explicitly identifies API hosts among backendHostnames; runtime validates that subset. Omission preserves legacy .api. inference during the coordinated V2 auth migration.
+ * IAM/SigV4 POST /v1/internal/deployment/apps/{appId}/register (Internal API) or POST /v1/deployment/apps/register body. Governance derives tenant identity-provider configuration; no identity secrets are supplied. apiHostnames explicitly identifies API hosts among backendHostnames; runtime validates that subset. Omission preserves legacy .api. inference during the coordinated V2 auth migration.
  */
 export interface DeploymentAppRegistration {
   tenantId: string;

package/gen-ts/deployment-preview-retirement.ts

@@ -2,7 +2,7 @@
 // Code generated by tools/gen/gen.mjs from schema/*.json. DO NOT EDIT.
 
 /**
- * IAM-protected POST /v1/deployment/apps/retire-preview request after production is LIVE and the deployment plane holds the preview retirement reservation. Disables only the registered preview version's serving routes and workload authority.
+ * IAM-protected POST /v1/internal/deployment/apps/{appId}/retire-preview (Internal API) or POST /v1/deployment/apps/retire-preview request after production is LIVE and the deployment plane holds the preview retirement reservation. Disables only the registered preview version's serving routes and workload authority.
  */
 export interface DeploymentPreviewRetirement {
   tenantId: string;

package/gen-ts/index.ts

@@ -51,6 +51,7 @@ export * from './integration-error-details.js';
 export * from './integration-execute-input-rules.js';
 export * from './integration-execute-request.js';
 export * from './integration-execute-result.js';
+export * from './integration-operations.js';
 export * from './internal-configuration-request.js';
 export * from './kit-bundle-manifest.js';
 export * from './kit-lock.js';

package/gen-ts/integration-execute-input-rules.ts

@@ -9,6 +9,7 @@
  * same message wherever it is made.
  */
 export type IntegrationExecuteInputFieldRule =
+  | { kind: 'object'; required: boolean }
   | { kind: 'integer'; required: boolean; minimum: number; maximum: number; default?: number }
   | { kind: 'string'; required: boolean; minLength: number; maxLength?: number; pattern?: string }
   | { kind: 'string[]'; required: boolean; minItems: number; maxItems: number; uniqueItems: boolean; item: { minLength: number; maxLength?: number; pattern?: string }; default?: readonly string[] }
@@ -134,6 +135,17 @@ export const IntegrationExecuteInputRules = {
       limit: { kind: "integer", required: false, minimum: 1, maximum: 1000, default: 100 },
     },
   },
+  "service.request": {
+    idempotencyKey: false,
+    fields: {
+      method: { kind: "enum", required: true, values: ["GET", "POST", "PUT", "PATCH", "DELETE", "HEAD", "OPTIONS"] },
+      path: { kind: "string", required: true, minLength: 0, maxLength: 16384 },
+      pathParams: { kind: "object", required: false },
+      query: { kind: "object", required: false },
+      headers: { kind: "object", required: false },
+      body: { kind: "object", required: false },
+    },
+  },
 } as const satisfies Record<string, IntegrationExecuteOperationRule>;
 
 export type IntegrationExecuteOperation = keyof typeof IntegrationExecuteInputRules;
@@ -194,6 +206,9 @@ function checkFields(operation: string, prefix: string, fields: Readonly<Record<
 
 function checkField(operation: string, path: string, name: string, field: IntegrationExecuteInputFieldRule, value: unknown): { ok: true; value: unknown } | Refusal {
   switch (field.kind) {
+    case 'object':
+      if (value === null || typeof value !== 'object' || Array.isArray(value)) return refuse(path, `${path} must be a JSON object`);
+      return { ok: true, value };
     case 'integer':
       if (typeof value !== 'number' || !Number.isInteger(value) || value < field.minimum || value > field.maximum) return refuse(path, `${path} must be an integer between ${field.minimum} and ${field.maximum}`);
       return { ok: true, value };

package/gen-ts/integration-execute-request.ts

@@ -24,11 +24,12 @@ export type IntegrationExecuteRequest = {
     | 'gmail.message.read'
     | 'gmail.message.send'
     | 'gmail.attachment.read'
-    | 'warehouse.view.read';
+    | 'warehouse.view.read'
+    | 'service.request';
   /**
    * Tenant-wide logical alias of a connection (governance sourceId) or of a resource under it.
    */
-  resource: string;
+  resource?: string;
   input: {
     /**
      * Read operations: how many items to return; the per-operation then-block sets the real ceiling (100 for slack.channel.history, 50 for gmail.thread.list, 1000 for warehouse.view.read) and the default.
@@ -142,6 +143,20 @@ export type IntegrationExecuteRequest = {
      * @maxItems 8
      */
     orderBy?: WarehouseOrder[];
+    method?: 'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE' | 'HEAD' | 'OPTIONS';
+    path?: string;
+    pathParams?: {
+      [k: string]: unknown;
+    };
+    query?: {
+      [k: string]: unknown;
+    };
+    headers?: {
+      [k: string]: unknown;
+    };
+    body?: {
+      [k: string]: unknown;
+    };
   };
   /**
    * UUID of one explicit Send action; required for slack.message.post and gmail.message.send only. The same key with the same payload and subject returns the recorded outcome for seven days.

package/gen-ts/integration-execute-result.ts

@@ -74,6 +74,11 @@ export type IntegrationExecuteResult = {
   rows?: {
     [k: string]: unknown;
   }[];
+  status?: number;
+  headers?: {
+    [k: string]: string;
+  };
+  body?: unknown;
 };
 
 export interface ChannelMessage {

package/gen-ts/integration-operations.ts

@@ -0,0 +1,127 @@
+/* eslint-disable */
+// Code generated by tools/gen/gen.mjs from schema/*.json. DO NOT EDIT.
+
+/** Declaration and execute metadata from the contract schemas. */
+export const IntegrationOperations = {
+  "slack.channel.history": {
+    "kind": "saas",
+    "identities": [
+      "user",
+      "app"
+    ],
+    "readOnly": true,
+    "declaredMode": true,
+    "idempotencyKey": false
+  },
+  "slack.message.post": {
+    "kind": "saas",
+    "identities": [
+      "app",
+      "user"
+    ],
+    "readOnly": false,
+    "declaredMode": true,
+    "idempotencyKey": true
+  },
+  "slack.message.update": {
+    "kind": "saas",
+    "identities": [
+      "app",
+      "user"
+    ],
+    "readOnly": false,
+    "declaredMode": true,
+    "idempotencyKey": false
+  },
+  "slack.message.delete": {
+    "kind": "saas",
+    "identities": [
+      "app",
+      "user"
+    ],
+    "readOnly": false,
+    "declaredMode": true,
+    "idempotencyKey": false
+  },
+  "slack.dm.send": {
+    "kind": "saas",
+    "identities": [
+      "app"
+    ],
+    "readOnly": false,
+    "declaredMode": false,
+    "idempotencyKey": true
+  },
+  "slack.user.lookup": {
+    "kind": "saas",
+    "identities": [
+      "app"
+    ],
+    "readOnly": true,
+    "declaredMode": false,
+    "idempotencyKey": false
+  },
+  "gmail.thread.list": {
+    "kind": "saas",
+    "identities": [
+      "user"
+    ],
+    "readOnly": true,
+    "declaredMode": false,
+    "idempotencyKey": false
+  },
+  "gmail.thread.read": {
+    "kind": "saas",
+    "identities": [
+      "user"
+    ],
+    "readOnly": true,
+    "declaredMode": false,
+    "idempotencyKey": false
+  },
+  "gmail.message.read": {
+    "kind": "saas",
+    "identities": [
+      "user"
+    ],
+    "readOnly": true,
+    "declaredMode": false,
+    "idempotencyKey": false
+  },
+  "gmail.message.send": {
+    "kind": "saas",
+    "identities": [
+      "user"
+    ],
+    "readOnly": false,
+    "declaredMode": false,
+    "idempotencyKey": true
+  },
+  "gmail.attachment.read": {
+    "kind": "saas",
+    "identities": [
+      "user"
+    ],
+    "readOnly": true,
+    "declaredMode": false,
+    "idempotencyKey": false
+  },
+  "warehouse.view.read": {
+    "kind": "database",
+    "identities": [
+      "app"
+    ],
+    "readOnly": true,
+    "declaredMode": false,
+    "idempotencyKey": false
+  },
+  "service.request": {
+    "kind": "service",
+    "identities": [
+      "app"
+    ],
+    "readOnly": false,
+    "declaredMode": false,
+    "idempotencyKey": false
+  }
+} as const;

package/gen-ts/saas-connection.ts

@@ -19,7 +19,7 @@ export type UserModeApproval = 'automatic' | 'it';
  */
 export type DirectMessageAudience = 'signed_in_person' | 'channel_members' | 'anyone';
 /**
- * block — every recipient must be internal (the default when absent); allowlist — internal or in `allowedDomains`; allow — any address.
+ * block — every recipient must be internal (what a new Gmail connection is given; a connection stored without a policy reads as allow); allowlist — internal or in `allowedDomains`; allow — any address.
  */
 export type ExternalRecipientMode = 'block' | 'allowlist' | 'allow';
 /**
@@ -73,6 +73,7 @@ export interface SaasConnection {
     | 'gmail.message.send'
     | 'gmail.attachment.read'
     | 'warehouse.view.read'
+    | 'service.request'
   )[];
   developmentPreapproval: DevelopmentPreapproval;
   oauthClient?: SaasOauthClient;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fourier-labs/harbour-contracts",
-  "version": "0.71.0",
+  "version": "0.73.0",
   "description": "Single source of truth for every data shape that crosses a boundary between Isomorph components.",
   "license": "UNLICENSED",
   "private": false,