@fourier-labs/harbour-contracts 0.71.0 → 0.73.0

package/schema/integration-execute-request.schema.json

@@ -2,79 +2,237 @@
   "$schema": "http://json-schema.org/draft-07/schema#",
   "$id": "https://schemas.harbour.dev/integration-execute-request.schema.json",
   "title": "IntegrationExecuteRequest",
-  "description": "Body of POST /_harbour/integrations/execute (app SDK), forwarded unchanged to the governance development and runtime execute routes. Exactly one declared operation against one declared resource. The identity mode is fixed by the operation for every operation but the declared-mode Slack operations (slack.channel.history, slack.message.post, slack.message.update, slack.message.delete; 0.71.0 widened history), and always enforced from an approved grant; any identity/userId/scope field is rejected by additionalProperties. A declared-mode operation runs as the app (for a post: the IT-approved per-app name from the grant, plus a \"Posted by <app> on Isomorph\" footer) or as the signed-in person (no name, no footer) — the same input either way — and since 0.55.0 the call names which of the app's approved modes it runs under (`mode`): required when IT approved both modes for the app (MODE_REQUIRED otherwise), optional when it approved one (that one is used), and a named mode without an approved grant is refused (MODE_NOT_GRANTED) rather than served under the other, so approval order never decides what a call does. Per-operation input bounds (0.71.0, ADR 0018): slack.channel.history {limit? 1..100, default 15, cursor?, oldest?, latest?}; slack.message.post {text 1..4000 chars, threadId?, format? plain|mrkdwn} and a required idempotencyKey retained across retries of one explicit Send; slack.message.update {messageId, text, format?}; slack.message.delete {messageId}; slack.dm.send {to 1..8 addresses, text, format?} (app mode only) with a required idempotencyKey; slack.user.lookup {email}; gmail.thread.list {limit? 1..50, default 15, q?, labelIds? default [INBOX], pageToken?}; gmail.thread.read {threadId}; gmail.message.read {messageId}; gmail.attachment.read {messageId, attachmentId}; gmail.message.send {to 1..50 addresses (to+cc+bcc <= 50 in total), cc?, bcc?, subject 1..256 chars, text 1..4000 chars, html? <= 64 KiB, attachments? 1..5 of <= 2 MiB each as base64, replyToMessageId?} and a required idempotencyKey like slack.message.post; warehouse.view.read {columns? 1..32, where? 1..16 filters, groupBy? 1..8 columns, aggregates? 1..16, orderBy? 1..8, limit? 1..1000, default 100} (0.70.0: a plain read names columns, an aggregate read names aggregates and optionally groupBy; the cross-field rules — exactly one of columns or aggregates, groupBy needs aggregates, a filter value that fits its op, orderBy naming a returned column, every named column approved — are enforced by governance, not expressible here; ADR 0017). Each operation's then-block is the one statement of its input rules: propertyNames.enum names the fields it accepts, required the ones it needs, and per-field overrides (maximum, default) narrow the shared property. Codegen derives IntegrationExecuteInputRules and validateIntegrationExecuteInput (gen-ts/integration-execute-input-rules.ts, gen-go/integration_execute_input_rules.go) from exactly these blocks, so the governance execute route, the app SDK and the kit's local check refuse the same request with the same message. Transport limits (not expressible here): request <= 16 KiB except a gmail.message.send carrying attachments (governance sizes that route for the attachment bound), total deadline 10 s.",
+  "description": "Body of POST /_harbour/integrations/execute (app SDK), forwarded unchanged to the governance development and runtime execute routes. Exactly one declared operation against one declared resource. The identity mode is fixed by the operation for every operation but the declared-mode Slack operations (slack.channel.history, slack.message.post, slack.message.update, slack.message.delete; 0.71.0 widened history), and always enforced from an approved grant; any identity/userId/scope field is rejected by additionalProperties. A declared-mode operation runs as the app (for a post: the IT-approved per-app name from the grant, plus a \"Posted by <app> on Isomorph\" footer) or as the signed-in person (no name, no footer) \u2014 the same input either way \u2014 and since 0.55.0 the call names which of the app's approved modes it runs under (`mode`): required when IT approved both modes for the app (MODE_REQUIRED otherwise), optional when it approved one (that one is used), and a named mode without an approved grant is refused (MODE_NOT_GRANTED) rather than served under the other, so approval order never decides what a call does. Per-operation input bounds (0.71.0, ADR 0018): slack.channel.history {limit? 1..100, default 15, cursor?, oldest?, latest?}; slack.message.post {text 1..4000 chars, threadId?, format? plain|mrkdwn} and a required idempotencyKey retained across retries of one explicit Send; slack.message.update {messageId, text, format?}; slack.message.delete {messageId}; slack.dm.send {to 1..8 addresses, text, format?} (app mode only) with a required idempotencyKey; slack.user.lookup {email}; gmail.thread.list {limit? 1..50, default 15, q?, labelIds? default [INBOX], pageToken?}; gmail.thread.read {threadId}; gmail.message.read {messageId}; gmail.attachment.read {messageId, attachmentId}; gmail.message.send {to 1..50 addresses (to+cc+bcc <= 50 in total), cc?, bcc?, subject 1..256 chars, text 1..4000 chars, html? <= 64 KiB, attachments? 1..5 of <= 2 MiB each as base64, replyToMessageId?} and a required idempotencyKey like slack.message.post; warehouse.view.read {columns? 1..32, where? 1..16 filters, groupBy? 1..8 columns, aggregates? 1..16, orderBy? 1..8, limit? 1..1000, default 100} (0.70.0: a plain read names columns, an aggregate read names aggregates and optionally groupBy; the cross-field rules \u2014 exactly one of columns or aggregates, groupBy needs aggregates, a filter value that fits its op, orderBy naming a returned column, every named column approved \u2014 are enforced by governance, not expressible here; ADR 0017). Each operation's then-block is the one statement of its input rules: propertyNames.enum names the fields it accepts, required the ones it needs, and per-field overrides (maximum, default) narrow the shared property. Codegen derives IntegrationExecuteInputRules and validateIntegrationExecuteInput (gen-ts/integration-execute-input-rules.ts, gen-go/integration_execute_input_rules.go) from exactly these blocks, so the governance execute route, the app SDK and the kit's local check refuse the same request with the same message. Transport limits (not expressible here): request <= 16 KiB except a gmail.message.send carrying attachments (governance sizes that route for the attachment bound), total deadline 10 s.",
   "type": "object",
   "additionalProperties": false,
-  "required": ["connection", "operation", "resource", "input"],
+  "required": [
+    "connection",
+    "operation",
+    "input"
+  ],
   "properties": {
-    "connection": { "$ref": "app-integrations-declaration.schema.json#/definitions/IntegrationAlias" },
-    "operation": { "$ref": "app-integrations-declaration.schema.json#/definitions/IntegrationOperation" },
-    "resource": { "$ref": "app-integrations-declaration.schema.json#/definitions/IntegrationAlias" },
+    "connection": {
+      "$ref": "app-integrations-declaration.schema.json#/definitions/IntegrationAlias"
+    },
+    "operation": {
+      "$ref": "app-integrations-declaration.schema.json#/definitions/IntegrationOperation"
+    },
+    "resource": {
+      "$ref": "app-integrations-declaration.schema.json#/definitions/IntegrationAlias"
+    },
     "input": {
       "type": "object",
       "additionalProperties": false,
       "properties": {
-        "limit": { "type": "integer", "minimum": 1, "maximum": 1000, "description": "Read operations: how many items to return; the per-operation then-block sets the real ceiling (100 for slack.channel.history, 50 for gmail.thread.list, 1000 for warehouse.view.read) and the default." },
-        "text": { "type": "string", "minLength": 1, "maxLength": 4000, "description": "slack.message.post / slack.message.update / slack.dm.send / gmail.message.send: the body, 1..4000 characters (plain text, or Slack mrkdwn when `format` says so)." },
-        "format": { "$ref": "#/definitions/SlackMessageFormat", "description": "slack.message.post / slack.message.update / slack.dm.send (0.71.0): how Slack renders `text`; plain when absent." },
-        "threadId": { "type": "string", "pattern": "^[A-Za-z0-9._-]{1,64}$", "description": "slack.message.post (0.71.0): the Slack message ts (a slack.channel.history message id) the post replies to, so it lands in that thread. gmail.thread.read: the Gmail thread id a gmail.thread.list result named." },
-        "messageId": { "type": "string", "pattern": "^[A-Za-z0-9._-]{1,64}$", "description": "gmail.message.read / gmail.attachment.read: the Gmail message id a gmail.thread.list or gmail.thread.read result named. slack.message.update / slack.message.delete (0.71.0): the Slack message ts a post or history result named." },
-        "attachmentId": { "type": "string", "minLength": 1, "maxLength": 512, "description": "gmail.attachment.read (0.71.0): the attachment id a gmail.message.read or gmail.thread.read result named." },
-        "cursor": { "type": "string", "minLength": 1, "maxLength": 256, "description": "slack.channel.history (0.71.0): the `nextCursor` of the previous page; absent reads the newest page." },
-        "oldest": { "type": "string", "minLength": 1, "maxLength": 64, "description": "slack.channel.history (0.71.0): only messages after this Slack ts." },
-        "latest": { "type": "string", "minLength": 1, "maxLength": 64, "description": "slack.channel.history (0.71.0): only messages before this Slack ts." },
-        "q": { "type": "string", "minLength": 1, "maxLength": 256, "description": "gmail.thread.list (0.71.0): a Gmail search query (the search-box syntax, e.g. `from:jane newer_than:7d`)." },
-        "labelIds": { "type": "array", "minItems": 1, "maxItems": 5, "uniqueItems": true, "items": { "type": "string", "minLength": 1, "maxLength": 64 }, "default": ["INBOX"], "description": "gmail.thread.list (0.71.0): the Gmail labels a thread must carry (all of them); INBOX when absent." },
-        "pageToken": { "type": "string", "minLength": 1, "maxLength": 256, "description": "gmail.thread.list (0.71.0): the `nextPageToken` of the previous page; absent reads the first page." },
-        "email": { "$ref": "#/definitions/EmailAddress", "description": "slack.user.lookup (0.71.0): the workspace member's email address to resolve to a Slack user id." },
-        "to": { "$ref": "#/definitions/EmailAddressList", "description": "gmail.message.send: primary recipients. slack.dm.send (0.71.0): the workspace members to message, by email, 1..8; several open one group DM." },
-        "cc": { "$ref": "#/definitions/EmailAddressList", "description": "gmail.message.send: carbon-copy recipients." },
-        "bcc": { "$ref": "#/definitions/EmailAddressList", "description": "gmail.message.send: blind-copy recipients." },
-        "subject": { "type": "string", "minLength": 1, "maxLength": 256, "description": "gmail.message.send: one-line subject (no line breaks)." },
-        "replyToMessageId": { "type": "string", "pattern": "^[A-Za-z0-9_-]{1,64}$", "description": "gmail.message.send: a Gmail message id (from gmail.thread.list / gmail.message.read) the email replies to; the send joins that thread." },
-        "html": { "type": "string", "minLength": 1, "maxLength": 65536, "description": "gmail.message.send (0.71.0): an HTML body sent beside `text` (which stays the plain-text alternative), at most 64 KiB." },
+        "limit": {
+          "type": "integer",
+          "minimum": 1,
+          "maximum": 1000,
+          "description": "Read operations: how many items to return; the per-operation then-block sets the real ceiling (100 for slack.channel.history, 50 for gmail.thread.list, 1000 for warehouse.view.read) and the default."
+        },
+        "text": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 4000,
+          "description": "slack.message.post / slack.message.update / slack.dm.send / gmail.message.send: the body, 1..4000 characters (plain text, or Slack mrkdwn when `format` says so)."
+        },
+        "format": {
+          "$ref": "#/definitions/SlackMessageFormat",
+          "description": "slack.message.post / slack.message.update / slack.dm.send (0.71.0): how Slack renders `text`; plain when absent."
+        },
+        "threadId": {
+          "type": "string",
+          "pattern": "^[A-Za-z0-9._-]{1,64}$",
+          "description": "slack.message.post (0.71.0): the Slack message ts (a slack.channel.history message id) the post replies to, so it lands in that thread. gmail.thread.read: the Gmail thread id a gmail.thread.list result named."
+        },
+        "messageId": {
+          "type": "string",
+          "pattern": "^[A-Za-z0-9._-]{1,64}$",
+          "description": "gmail.message.read / gmail.attachment.read: the Gmail message id a gmail.thread.list or gmail.thread.read result named. slack.message.update / slack.message.delete (0.71.0): the Slack message ts a post or history result named."
+        },
+        "attachmentId": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 512,
+          "description": "gmail.attachment.read (0.71.0): the attachment id a gmail.message.read or gmail.thread.read result named."
+        },
+        "cursor": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 256,
+          "description": "slack.channel.history (0.71.0): the `nextCursor` of the previous page; absent reads the newest page."
+        },
+        "oldest": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 64,
+          "description": "slack.channel.history (0.71.0): only messages after this Slack ts."
+        },
+        "latest": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 64,
+          "description": "slack.channel.history (0.71.0): only messages before this Slack ts."
+        },
+        "q": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 256,
+          "description": "gmail.thread.list (0.71.0): a Gmail search query (the search-box syntax, e.g. `from:jane newer_than:7d`)."
+        },
+        "labelIds": {
+          "type": "array",
+          "minItems": 1,
+          "maxItems": 5,
+          "uniqueItems": true,
+          "items": {
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 64
+          },
+          "default": [
+            "INBOX"
+          ],
+          "description": "gmail.thread.list (0.71.0): the Gmail labels a thread must carry (all of them); INBOX when absent."
+        },
+        "pageToken": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 256,
+          "description": "gmail.thread.list (0.71.0): the `nextPageToken` of the previous page; absent reads the first page."
+        },
+        "email": {
+          "$ref": "#/definitions/EmailAddress",
+          "description": "slack.user.lookup (0.71.0): the workspace member's email address to resolve to a Slack user id."
+        },
+        "to": {
+          "$ref": "#/definitions/EmailAddressList",
+          "description": "gmail.message.send: primary recipients. slack.dm.send (0.71.0): the workspace members to message, by email, 1..8; several open one group DM."
+        },
+        "cc": {
+          "$ref": "#/definitions/EmailAddressList",
+          "description": "gmail.message.send: carbon-copy recipients."
+        },
+        "bcc": {
+          "$ref": "#/definitions/EmailAddressList",
+          "description": "gmail.message.send: blind-copy recipients."
+        },
+        "subject": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 256,
+          "description": "gmail.message.send: one-line subject (no line breaks)."
+        },
+        "replyToMessageId": {
+          "type": "string",
+          "pattern": "^[A-Za-z0-9_-]{1,64}$",
+          "description": "gmail.message.send: a Gmail message id (from gmail.thread.list / gmail.message.read) the email replies to; the send joins that thread."
+        },
+        "html": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 65536,
+          "description": "gmail.message.send (0.71.0): an HTML body sent beside `text` (which stays the plain-text alternative), at most 64 KiB."
+        },
         "attachments": {
           "type": "array",
           "minItems": 1,
           "maxItems": 5,
-          "items": { "$ref": "#/definitions/EmailAttachment" },
+          "items": {
+            "$ref": "#/definitions/EmailAttachment"
+          },
           "description": "gmail.message.send (0.71.0): files to attach, 1..5, each at most 2 MiB (2,796,203 base64 characters)."
         },
         "columns": {
           "type": "array",
           "minItems": 1,
           "maxItems": 32,
-          "items": { "$ref": "app-integrations-declaration.schema.json#/definitions/ColumnName" },
-          "not": { "allOf": [{ "contains": { "const": "*" } }, { "minItems": 2 }] },
+          "items": {
+            "$ref": "app-integrations-declaration.schema.json#/definitions/ColumnName"
+          },
+          "not": {
+            "allOf": [
+              {
+                "contains": {
+                  "const": "*"
+                }
+              },
+              {
+                "minItems": 2
+              }
+            ]
+          },
           "description": "warehouse.view.read, a plain read: explicit columns, or `*` alone when the app's approved resource grant allows all current and future columns. An aggregate read names aggregates instead."
         },
         "where": {
           "type": "array",
           "minItems": 1,
           "maxItems": 16,
-          "items": { "$ref": "#/definitions/WarehouseFilter" },
+          "items": {
+            "$ref": "#/definitions/WarehouseFilter"
+          },
           "description": "warehouse.view.read (0.70.0): filters the warehouse applies before it returns, grouping or limits rows. All of them must hold (AND); there is no OR and no LIKE."
         },
         "groupBy": {
           "type": "array",
           "minItems": 1,
           "maxItems": 8,
-          "items": { "type": "string", "pattern": "^[A-Za-z_][A-Za-z0-9_]{0,62}$" },
+          "items": {
+            "type": "string",
+            "pattern": "^[A-Za-z_][A-Za-z0-9_]{0,62}$"
+          },
           "description": "warehouse.view.read (0.70.0): columns (never `*`) that group the rows; needs aggregates. Each returned row is one group: its groupBy columns, then its aggregate aliases."
         },
         "aggregates": {
           "type": "array",
           "minItems": 1,
           "maxItems": 16,
-          "items": { "$ref": "#/definitions/WarehouseAggregate" },
+          "items": {
+            "$ref": "#/definitions/WarehouseAggregate"
+          },
           "description": "warehouse.view.read (0.70.0): what an aggregate read computes, over each group or over every matching row when there is no groupBy."
         },
         "orderBy": {
           "type": "array",
           "minItems": 1,
           "maxItems": 8,
-          "items": { "$ref": "#/definitions/WarehouseOrder" },
+          "items": {
+            "$ref": "#/definitions/WarehouseOrder"
+          },
           "description": "warehouse.view.read (0.70.0): sort keys, first key first. Without orderBy an aggregate read is sorted by its groupBy columns and a plain read is not sorted at all."
+        },
+        "method": {
+          "type": "string",
+          "enum": [
+            "GET",
+            "POST",
+            "PUT",
+            "PATCH",
+            "DELETE",
+            "HEAD",
+            "OPTIONS"
+          ]
+        },
+        "path": {
+          "type": "string",
+          "minLength": 0,
+          "maxLength": 16384
+        },
+        "pathParams": {
+          "type": "object",
+          "additionalProperties": true
+        },
+        "query": {
+          "type": "object",
+          "additionalProperties": true
+        },
+        "headers": {
+          "type": "object",
+          "additionalProperties": true
+        },
+        "body": {
+          "type": "object",
+          "additionalProperties": true
         }
       }
     },
@@ -85,228 +243,699 @@
     },
     "mode": {
       "$ref": "app-integrations-declaration.schema.json#/definitions/IntegrationIdentityMode",
-      "description": "The declared-mode Slack operations only (slack.message.post since 0.55.0; slack.channel.history, slack.message.update and slack.message.delete since 0.71.0): which of the app's IT-approved modes this call runs under — app (the company's Slack app; a post goes out under the grant's per-app name and the footer) or user (the signed-in person, after their consent; no name, no footer). Required when the app holds approved grants for both modes (else MODE_REQUIRED); may be omitted when it holds one, which is then used. A named mode without an approved grant is refused with MODE_NOT_GRANTED; governance never falls back to the other mode. Every other operation's mode is fixed, so the field is refused there."
+      "description": "The declared-mode Slack operations only (slack.message.post since 0.55.0; slack.channel.history, slack.message.update and slack.message.delete since 0.71.0): which of the app's IT-approved modes this call runs under \u2014 app (the company's Slack app; a post goes out under the grant's per-app name and the footer) or user (the signed-in person, after their consent; no name, no footer). Required when the app holds approved grants for both modes (else MODE_REQUIRED); may be omitted when it holds one, which is then used. A named mode without an approved grant is refused with MODE_NOT_GRANTED; governance never falls back to the other mode. Every other operation's mode is fixed, so the field is refused there."
     }
   },
   "allOf": [
     {
-      "if": { "properties": { "operation": { "const": "slack.channel.history" } } },
+      "if": {
+        "properties": {
+          "operation": {
+            "const": "slack.channel.history"
+          }
+        }
+      },
       "then": {
-        "not": { "required": ["idempotencyKey"] },
+        "x-read-only": true,
+        "x-primary-identity": "user",
+        "not": {
+          "required": [
+            "idempotencyKey"
+          ]
+        },
         "properties": {
-          "input": { "propertyNames": { "enum": ["limit", "cursor", "oldest", "latest"] }, "properties": { "limit": { "maximum": 100, "default": 15 } } }
+          "input": {
+            "propertyNames": {
+              "enum": [
+                "limit",
+                "cursor",
+                "oldest",
+                "latest"
+              ]
+            },
+            "properties": {
+              "limit": {
+                "maximum": 100,
+                "default": 15
+              }
+            }
+          }
         }
       }
     },
     {
-      "if": { "properties": { "operation": { "const": "slack.message.post" } } },
+      "if": {
+        "properties": {
+          "operation": {
+            "const": "slack.message.post"
+          }
+        }
+      },
       "then": {
-        "required": ["idempotencyKey"],
+        "x-read-only": false,
+        "required": [
+          "idempotencyKey"
+        ],
         "properties": {
-          "input": { "propertyNames": { "enum": ["text", "threadId", "format"] }, "required": ["text"] }
+          "input": {
+            "propertyNames": {
+              "enum": [
+                "text",
+                "threadId",
+                "format"
+              ]
+            },
+            "required": [
+              "text"
+            ]
+          }
         }
       }
     },
     {
-      "if": { "properties": { "operation": { "const": "slack.message.update" } } },
+      "if": {
+        "properties": {
+          "operation": {
+            "const": "slack.message.update"
+          }
+        }
+      },
       "then": {
-        "not": { "required": ["idempotencyKey"] },
+        "x-read-only": false,
+        "not": {
+          "required": [
+            "idempotencyKey"
+          ]
+        },
         "properties": {
-          "input": { "propertyNames": { "enum": ["messageId", "text", "format"] }, "required": ["messageId", "text"] }
+          "input": {
+            "propertyNames": {
+              "enum": [
+                "messageId",
+                "text",
+                "format"
+              ]
+            },
+            "required": [
+              "messageId",
+              "text"
+            ]
+          }
         }
       }
     },
     {
-      "if": { "properties": { "operation": { "const": "slack.message.delete" } } },
+      "if": {
+        "properties": {
+          "operation": {
+            "const": "slack.message.delete"
+          }
+        }
+      },
       "then": {
-        "not": { "required": ["idempotencyKey"] },
+        "x-read-only": false,
+        "not": {
+          "required": [
+            "idempotencyKey"
+          ]
+        },
         "properties": {
-          "input": { "propertyNames": { "enum": ["messageId"] }, "required": ["messageId"] }
+          "input": {
+            "propertyNames": {
+              "enum": [
+                "messageId"
+              ]
+            },
+            "required": [
+              "messageId"
+            ]
+          }
         }
       }
     },
     {
-      "if": { "properties": { "operation": { "const": "slack.dm.send" } } },
+      "if": {
+        "properties": {
+          "operation": {
+            "const": "slack.dm.send"
+          }
+        }
+      },
+      "then": {
+        "x-read-only": false,
+        "required": [
+          "idempotencyKey"
+        ],
+        "properties": {
+          "mode": false,
+          "input": {
+            "propertyNames": {
+              "enum": [
+                "to",
+                "text",
+                "format"
+              ]
+            },
+            "required": [
+              "to",
+              "text"
+            ],
+            "properties": {
+              "to": {
+                "maxItems": 8
+              }
+            }
+          }
+        }
+      }
+    },
+    {
+      "if": {
+        "properties": {
+          "operation": {
+            "const": "slack.user.lookup"
+          }
+        }
+      },
       "then": {
-        "required": ["idempotencyKey"],
+        "x-read-only": true,
+        "not": {
+          "required": [
+            "idempotencyKey"
+          ]
+        },
         "properties": {
           "mode": false,
-          "input": { "propertyNames": { "enum": ["to", "text", "format"] }, "required": ["to", "text"], "properties": { "to": { "maxItems": 8 } } }
+          "input": {
+            "propertyNames": {
+              "enum": [
+                "email"
+              ]
+            },
+            "required": [
+              "email"
+            ]
+          }
         }
       }
     },
     {
-      "if": { "properties": { "operation": { "const": "slack.user.lookup" } } },
+      "if": {
+        "properties": {
+          "operation": {
+            "const": "warehouse.view.read"
+          }
+        }
+      },
       "then": {
-        "not": { "required": ["idempotencyKey"] },
+        "x-read-only": true,
+        "not": {
+          "required": [
+            "idempotencyKey"
+          ]
+        },
         "properties": {
           "mode": false,
-          "input": { "propertyNames": { "enum": ["email"] }, "required": ["email"] }
+          "input": {
+            "propertyNames": {
+              "enum": [
+                "columns",
+                "where",
+                "groupBy",
+                "aggregates",
+                "orderBy",
+                "limit"
+              ]
+            },
+            "properties": {
+              "limit": {
+                "maximum": 1000,
+                "default": 100
+              }
+            }
+          }
         }
       }
     },
     {
-      "if": { "properties": { "operation": { "const": "warehouse.view.read" } } },
+      "if": {
+        "properties": {
+          "operation": {
+            "const": "gmail.thread.list"
+          }
+        }
+      },
       "then": {
-        "not": { "required": ["idempotencyKey"] },
+        "x-read-only": true,
+        "not": {
+          "required": [
+            "idempotencyKey"
+          ]
+        },
         "properties": {
           "mode": false,
-          "input": { "propertyNames": { "enum": ["columns", "where", "groupBy", "aggregates", "orderBy", "limit"] }, "properties": { "limit": { "maximum": 1000, "default": 100 } } }
+          "input": {
+            "propertyNames": {
+              "enum": [
+                "limit",
+                "q",
+                "labelIds",
+                "pageToken"
+              ]
+            },
+            "properties": {
+              "limit": {
+                "maximum": 50,
+                "default": 15
+              }
+            }
+          }
         }
       }
     },
     {
-      "if": { "properties": { "operation": { "const": "gmail.thread.list" } } },
+      "if": {
+        "properties": {
+          "operation": {
+            "const": "gmail.thread.read"
+          }
+        }
+      },
       "then": {
-        "not": { "required": ["idempotencyKey"] },
+        "x-read-only": true,
+        "not": {
+          "required": [
+            "idempotencyKey"
+          ]
+        },
         "properties": {
           "mode": false,
-          "input": { "propertyNames": { "enum": ["limit", "q", "labelIds", "pageToken"] }, "properties": { "limit": { "maximum": 50, "default": 15 } } }
+          "input": {
+            "propertyNames": {
+              "enum": [
+                "threadId"
+              ]
+            },
+            "required": [
+              "threadId"
+            ]
+          }
         }
       }
     },
     {
-      "if": { "properties": { "operation": { "const": "gmail.thread.read" } } },
+      "if": {
+        "properties": {
+          "operation": {
+            "const": "gmail.message.read"
+          }
+        }
+      },
       "then": {
-        "not": { "required": ["idempotencyKey"] },
+        "x-read-only": true,
+        "not": {
+          "required": [
+            "idempotencyKey"
+          ]
+        },
         "properties": {
           "mode": false,
-          "input": { "propertyNames": { "enum": ["threadId"] }, "required": ["threadId"] }
+          "input": {
+            "propertyNames": {
+              "enum": [
+                "messageId"
+              ]
+            },
+            "required": [
+              "messageId"
+            ]
+          }
         }
       }
     },
     {
-      "if": { "properties": { "operation": { "const": "gmail.message.read" } } },
+      "if": {
+        "properties": {
+          "operation": {
+            "const": "gmail.attachment.read"
+          }
+        }
+      },
       "then": {
-        "not": { "required": ["idempotencyKey"] },
+        "x-read-only": true,
+        "not": {
+          "required": [
+            "idempotencyKey"
+          ]
+        },
         "properties": {
           "mode": false,
-          "input": { "propertyNames": { "enum": ["messageId"] }, "required": ["messageId"] }
+          "input": {
+            "propertyNames": {
+              "enum": [
+                "messageId",
+                "attachmentId"
+              ]
+            },
+            "required": [
+              "messageId",
+              "attachmentId"
+            ]
+          }
         }
       }
     },
     {
-      "if": { "properties": { "operation": { "const": "gmail.attachment.read" } } },
+      "if": {
+        "properties": {
+          "operation": {
+            "const": "gmail.message.send"
+          }
+        }
+      },
       "then": {
-        "not": { "required": ["idempotencyKey"] },
+        "x-read-only": false,
+        "required": [
+          "idempotencyKey"
+        ],
         "properties": {
           "mode": false,
-          "input": { "propertyNames": { "enum": ["messageId", "attachmentId"] }, "required": ["messageId", "attachmentId"] }
+          "input": {
+            "propertyNames": {
+              "enum": [
+                "to",
+                "cc",
+                "bcc",
+                "subject",
+                "text",
+                "html",
+                "attachments",
+                "replyToMessageId"
+              ]
+            },
+            "required": [
+              "to",
+              "subject",
+              "text"
+            ]
+          }
         }
       }
     },
     {
-      "if": { "properties": { "operation": { "const": "gmail.message.send" } } },
+      "if": {
+        "properties": {
+          "operation": {
+            "const": "service.request"
+          }
+        }
+      },
       "then": {
-        "required": ["idempotencyKey"],
+        "x-read-only": false,
         "properties": {
           "mode": false,
-          "input": { "propertyNames": { "enum": ["to", "cc", "bcc", "subject", "text", "html", "attachments", "replyToMessageId"] }, "required": ["to", "subject", "text"] }
+          "resource": false,
+          "input": {
+            "propertyNames": {
+              "enum": [
+                "method",
+                "path",
+                "pathParams",
+                "query",
+                "headers",
+                "body"
+              ]
+            },
+            "required": [
+              "method",
+              "path"
+            ]
+          }
+        },
+        "not": {
+          "required": [
+            "idempotencyKey"
+          ]
         }
+      },
+      "else": {
+        "required": [
+          "resource"
+        ]
       }
     }
   ],
   "definitions": {
-    "EmailAddress": { "type": "string", "minLength": 3, "maxLength": 254, "pattern": "^[^\\s@<>,;\"]+@[^\\s@<>,;\"]+\\.[^\\s@<>,;\"]+$", "description": "One bare email address (no display name)." },
-    "EmailAddressList": { "type": "array", "minItems": 1, "maxItems": 50, "uniqueItems": true, "items": { "$ref": "#/definitions/EmailAddress" } },
+    "EmailAddress": {
+      "type": "string",
+      "minLength": 3,
+      "maxLength": 254,
+      "pattern": "^[^\\s@<>,;\"]+@[^\\s@<>,;\"]+\\.[^\\s@<>,;\"]+$",
+      "description": "One bare email address (no display name)."
+    },
+    "EmailAddressList": {
+      "type": "array",
+      "minItems": 1,
+      "maxItems": 50,
+      "uniqueItems": true,
+      "items": {
+        "$ref": "#/definitions/EmailAddress"
+      }
+    },
     "SlackMessageFormat": {
       "type": "string",
-      "enum": ["plain", "mrkdwn"],
+      "enum": [
+        "plain",
+        "mrkdwn"
+      ],
       "default": "plain",
       "description": "How Slack renders a message body (0.71.0): plain posts the text verbatim; mrkdwn lets Slack interpret its markup (*bold*, links, lists)."
     },
     "EmailAttachment": {
       "type": "object",
       "additionalProperties": false,
-      "required": ["filename", "contentType", "dataBase64"],
+      "required": [
+        "filename",
+        "contentType",
+        "dataBase64"
+      ],
       "description": "One file attached to a gmail.message.send (0.71.0), carried inline as base64. At most 2 MiB of bytes, which is 2,796,203 base64 characters.",
       "properties": {
-        "filename": { "type": "string", "minLength": 1, "maxLength": 255, "description": "The name the recipient sees." },
-        "contentType": { "type": "string", "minLength": 1, "maxLength": 128, "description": "The MIME type, e.g. application/pdf." },
-        "dataBase64": { "type": "string", "minLength": 1, "maxLength": 2796203, "description": "The file bytes, standard base64." }
+        "filename": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 255,
+          "description": "The name the recipient sees."
+        },
+        "contentType": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 128,
+          "description": "The MIME type, e.g. application/pdf."
+        },
+        "dataBase64": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 2796203,
+          "description": "The file bytes, standard base64."
+        }
       }
     },
     "WarehouseFilter": {
       "type": "object",
       "additionalProperties": false,
-      "required": ["column", "op"],
+      "required": [
+        "column",
+        "op"
+      ],
       "description": "One warehouse.view.read filter (0.70.0): <column> <op> <value>. The value is always bound as a query parameter, never written into the SQL. Which value an op takes is a governance rule: isNull/isNotNull take none; in/notIn take a non-empty list of one scalar type; every other op takes one scalar, and a boolean only with eq/ne.",
       "properties": {
-        "column": { "type": "string", "pattern": "^[A-Za-z_][A-Za-z0-9_]{0,62}$", "description": "The filtered column; never `*`." },
-        "op": { "$ref": "#/definitions/WarehouseFilterOp" },
+        "column": {
+          "type": "string",
+          "pattern": "^[A-Za-z_][A-Za-z0-9_]{0,62}$",
+          "description": "The filtered column; never `*`."
+        },
+        "op": {
+          "$ref": "#/definitions/WarehouseFilterOp"
+        },
         "value": {
           "description": "The value compared with: a string (a date or timestamp is its ISO string), a number, a boolean, or a list of strings or numbers for in/notIn. Never null; use isNull or isNotNull.",
           "oneOf": [
-            { "type": "string", "maxLength": 256 },
-            { "type": "number" },
-            { "type": "boolean" },
-            { "type": "array", "minItems": 1, "maxItems": 100, "items": { "oneOf": [{ "type": "string", "maxLength": 256 }, { "type": "number" }] } }
+            {
+              "type": "string",
+              "maxLength": 256
+            },
+            {
+              "type": "number"
+            },
+            {
+              "type": "boolean"
+            },
+            {
+              "type": "array",
+              "minItems": 1,
+              "maxItems": 100,
+              "items": {
+                "oneOf": [
+                  {
+                    "type": "string",
+                    "maxLength": 256
+                  },
+                  {
+                    "type": "number"
+                  }
+                ]
+              }
+            }
           ]
         }
       }
     },
     "WarehouseFilterOp": {
       "type": "string",
-      "enum": ["eq", "ne", "gt", "gte", "lt", "lte", "in", "notIn", "isNull", "isNotNull"],
+      "enum": [
+        "eq",
+        "ne",
+        "gt",
+        "gte",
+        "lt",
+        "lte",
+        "in",
+        "notIn",
+        "isNull",
+        "isNotNull"
+      ],
       "description": "A filter comparison: = <> > >= < <= IN, NOT IN, IS NULL, IS NOT NULL. Word-like so every value is a valid generated constant."
     },
     "WarehouseAggregate": {
       "type": "object",
       "additionalProperties": false,
-      "required": ["fn", "column", "as"],
+      "required": [
+        "fn",
+        "column",
+        "as"
+      ],
       "description": "One computed column of an aggregate warehouse.view.read (0.70.0): fn(column) AS as. `*` is a column only for count (a governance rule). The value follows the read's cell rules, so a 64-bit or decimal result may be a string.",
       "properties": {
-        "fn": { "$ref": "#/definitions/WarehouseAggregateFn" },
-        "column": { "$ref": "app-integrations-declaration.schema.json#/definitions/ColumnName" },
-        "as": { "type": "string", "pattern": "^[a-z_][a-z0-9_]{0,62}$", "description": "The name the computed value is returned under; unique in the read and never a groupBy column (governance rules)." }
+        "fn": {
+          "$ref": "#/definitions/WarehouseAggregateFn"
+        },
+        "column": {
+          "$ref": "app-integrations-declaration.schema.json#/definitions/ColumnName"
+        },
+        "as": {
+          "type": "string",
+          "pattern": "^[a-z_][a-z0-9_]{0,62}$",
+          "description": "The name the computed value is returned under; unique in the read and never a groupBy column (governance rules)."
+        }
       }
     },
     "WarehouseAggregateFn": {
       "type": "string",
-      "enum": ["count", "sum", "avg", "min", "max"],
+      "enum": [
+        "count",
+        "sum",
+        "avg",
+        "min",
+        "max"
+      ],
       "description": "An aggregate function."
     },
     "WarehouseOrder": {
       "type": "object",
       "additionalProperties": false,
-      "required": ["column"],
+      "required": [
+        "column"
+      ],
       "description": "One warehouse.view.read sort key (0.70.0). A plain read sorts by a selected column (any column when it selects `*`); an aggregate read sorts by a groupBy column or an aggregate alias (governance rules).",
       "properties": {
-        "column": { "type": "string", "pattern": "^[A-Za-z_][A-Za-z0-9_]{0,62}$", "description": "A column or an aggregate alias; never `*`." },
-        "direction": { "$ref": "#/definitions/WarehouseOrderDirection" }
+        "column": {
+          "type": "string",
+          "pattern": "^[A-Za-z_][A-Za-z0-9_]{0,62}$",
+          "description": "A column or an aggregate alias; never `*`."
+        },
+        "direction": {
+          "$ref": "#/definitions/WarehouseOrderDirection"
+        }
       }
     },
     "WarehouseOrderDirection": {
       "type": "string",
-      "enum": ["asc", "desc"],
+      "enum": [
+        "asc",
+        "desc"
+      ],
       "default": "asc",
       "description": "Sort direction; asc when absent."
     }
   },
   "examples": [
-    { "connection": "company-slack", "operation": "slack.channel.history", "resource": "team-updates", "input": { "limit": 15 } },
+    {
+      "connection": "company-slack",
+      "operation": "slack.channel.history",
+      "resource": "team-updates",
+      "input": {
+        "limit": 15
+      }
+    },
     {
       "connection": "company-slack",
       "operation": "slack.message.post",
       "resource": "team-updates",
-      "input": { "text": "Weekly update posted." },
+      "input": {
+        "text": "Weekly update posted."
+      },
       "idempotencyKey": "6f1c2c1e-3a1c-4c3e-9f0e-2b6f7d8a9c10"
     },
-    { "connection": "sales-warehouse", "operation": "warehouse.view.read", "resource": "weekly_sales", "input": { "columns": ["week", "total"], "limit": 100 } },
-    { "connection": "gmail", "operation": "gmail.thread.list", "resource": "inbox", "input": { "limit": 15 } },
-    { "connection": "gmail", "operation": "gmail.message.read", "resource": "inbox", "input": { "messageId": "18f2c3a4b5d6e7f8" } },
+    {
+      "connection": "sales-warehouse",
+      "operation": "warehouse.view.read",
+      "resource": "weekly_sales",
+      "input": {
+        "columns": [
+          "week",
+          "total"
+        ],
+        "limit": 100
+      }
+    },
+    {
+      "connection": "gmail",
+      "operation": "gmail.thread.list",
+      "resource": "inbox",
+      "input": {
+        "limit": 15
+      }
+    },
+    {
+      "connection": "gmail",
+      "operation": "gmail.message.read",
+      "resource": "inbox",
+      "input": {
+        "messageId": "18f2c3a4b5d6e7f8"
+      }
+    },
     {
       "connection": "gmail",
       "operation": "gmail.message.send",
       "resource": "inbox",
-      "input": { "to": ["jane@example.com"], "subject": "Weekly report", "text": "Shipped the weekly report.", "replyToMessageId": "18f2c3a4b5d6e7f8" },
+      "input": {
+        "to": [
+          "jane@example.com"
+        ],
+        "subject": "Weekly report",
+        "text": "Shipped the weekly report.",
+        "replyToMessageId": "18f2c3a4b5d6e7f8"
+      },
       "idempotencyKey": "6f1c2c1e-3a1c-4c3e-9f0e-2b6f7d8a9c11"
     },
     {
       "connection": "company-slack",
       "operation": "slack.message.post",
       "resource": "team-updates",
-      "input": { "text": "Lunch is at noon." },
+      "input": {
+        "text": "Lunch is at noon."
+      },
       "idempotencyKey": "6f1c2c1e-3a1c-4c3e-9f0e-2b6f7d8a9c12",
       "mode": "user"
     },
@@ -315,12 +944,34 @@
       "operation": "warehouse.view.read",
       "resource": "invoices",
       "input": {
-        "columns": ["invoice_id", "region_code", "amount_minor"],
+        "columns": [
+          "invoice_id",
+          "region_code",
+          "amount_minor"
+        ],
         "where": [
-          { "column": "status", "op": "eq", "value": "PAID" },
-          { "column": "invoice_date", "op": "gte", "value": "2026-02-01" },
-          { "column": "currency", "op": "in", "value": ["USD", "EUR"] },
-          { "column": "closed_at", "op": "isNull" }
+          {
+            "column": "status",
+            "op": "eq",
+            "value": "PAID"
+          },
+          {
+            "column": "invoice_date",
+            "op": "gte",
+            "value": "2026-02-01"
+          },
+          {
+            "column": "currency",
+            "op": "in",
+            "value": [
+              "USD",
+              "EUR"
+            ]
+          },
+          {
+            "column": "closed_at",
+            "op": "isNull"
+          }
         ],
         "limit": 500
       }
@@ -330,13 +981,34 @@
       "operation": "warehouse.view.read",
       "resource": "invoices",
       "input": {
-        "where": [{ "column": "status", "op": "eq", "value": "PAID" }],
-        "groupBy": ["region_code"],
+        "where": [
+          {
+            "column": "status",
+            "op": "eq",
+            "value": "PAID"
+          }
+        ],
+        "groupBy": [
+          "region_code"
+        ],
         "aggregates": [
-          { "fn": "sum", "column": "amount_minor", "as": "total_minor" },
-          { "fn": "count", "column": "*", "as": "invoices" }
+          {
+            "fn": "sum",
+            "column": "amount_minor",
+            "as": "total_minor"
+          },
+          {
+            "fn": "count",
+            "column": "*",
+            "as": "invoices"
+          }
+        ],
+        "orderBy": [
+          {
+            "column": "total_minor",
+            "direction": "desc"
+          }
         ],
-        "orderBy": [{ "column": "total_minor", "direction": "desc" }],
         "limit": 100
       }
     },
@@ -344,42 +1016,134 @@
       "connection": "company-slack",
       "operation": "slack.message.update",
       "resource": "team-updates",
-      "input": { "messageId": "1725840100.000200", "text": "Weekly update posted *(corrected)*.", "format": "mrkdwn" },
+      "input": {
+        "messageId": "1725840100.000200",
+        "text": "Weekly update posted *(corrected)*.",
+        "format": "mrkdwn"
+      },
       "mode": "app"
     },
-    { "connection": "company-slack", "operation": "slack.message.delete", "resource": "team-updates", "input": { "messageId": "1725840100.000200" } },
+    {
+      "connection": "company-slack",
+      "operation": "slack.message.delete",
+      "resource": "team-updates",
+      "input": {
+        "messageId": "1725840100.000200"
+      }
+    },
     {
       "connection": "company-slack",
       "operation": "slack.dm.send",
       "resource": "workspace",
-      "input": { "to": ["jane@example.com"], "text": "Your expense report was approved." },
+      "input": {
+        "to": [
+          "jane@example.com"
+        ],
+        "text": "Your expense report was approved."
+      },
       "idempotencyKey": "6f1c2c1e-3a1c-4c3e-9f0e-2b6f7d8a9c13"
     },
-    { "connection": "company-slack", "operation": "slack.user.lookup", "resource": "workspace", "input": { "email": "jane@example.com" } },
+    {
+      "connection": "company-slack",
+      "operation": "slack.user.lookup",
+      "resource": "workspace",
+      "input": {
+        "email": "jane@example.com"
+      }
+    },
     {
       "connection": "company-slack",
       "operation": "slack.message.post",
       "resource": "team-updates",
-      "input": { "text": "Thanks, shipped.", "threadId": "1725840000.000100", "format": "plain" },
+      "input": {
+        "text": "Thanks, shipped.",
+        "threadId": "1725840000.000100",
+        "format": "plain"
+      },
       "idempotencyKey": "6f1c2c1e-3a1c-4c3e-9f0e-2b6f7d8a9c14",
       "mode": "user"
     },
-    { "connection": "company-slack", "operation": "slack.channel.history", "resource": "team-updates", "input": { "limit": 100, "cursor": "bmV4dF90czoxNzI1ODQwMDAwMDAwMTAw", "oldest": "1725750000.000000" }, "mode": "app" },
-    { "connection": "gmail", "operation": "gmail.thread.list", "resource": "inbox", "input": { "limit": 50, "q": "from:jane@example.com newer_than:7d", "labelIds": ["INBOX", "IMPORTANT"] } },
-    { "connection": "gmail", "operation": "gmail.thread.read", "resource": "inbox", "input": { "threadId": "18f2c3a4b5d6e7f0" } },
-    { "connection": "gmail", "operation": "gmail.attachment.read", "resource": "inbox", "input": { "messageId": "18f2c3a4b5d6e7f8", "attachmentId": "ANGjdJ8w9h1Q2k3L4m5N6o7P8q9R0s" } },
+    {
+      "connection": "company-slack",
+      "operation": "slack.channel.history",
+      "resource": "team-updates",
+      "input": {
+        "limit": 100,
+        "cursor": "bmV4dF90czoxNzI1ODQwMDAwMDAwMTAw",
+        "oldest": "1725750000.000000"
+      },
+      "mode": "app"
+    },
+    {
+      "connection": "gmail",
+      "operation": "gmail.thread.list",
+      "resource": "inbox",
+      "input": {
+        "limit": 50,
+        "q": "from:jane@example.com newer_than:7d",
+        "labelIds": [
+          "INBOX",
+          "IMPORTANT"
+        ]
+      }
+    },
+    {
+      "connection": "gmail",
+      "operation": "gmail.thread.read",
+      "resource": "inbox",
+      "input": {
+        "threadId": "18f2c3a4b5d6e7f0"
+      }
+    },
+    {
+      "connection": "gmail",
+      "operation": "gmail.attachment.read",
+      "resource": "inbox",
+      "input": {
+        "messageId": "18f2c3a4b5d6e7f8",
+        "attachmentId": "ANGjdJ8w9h1Q2k3L4m5N6o7P8q9R0s"
+      }
+    },
     {
       "connection": "gmail",
       "operation": "gmail.message.send",
       "resource": "inbox",
       "input": {
-        "to": ["jane@example.com"],
+        "to": [
+          "jane@example.com"
+        ],
         "subject": "Weekly report",
         "text": "The weekly report is attached.",
         "html": "<p>The weekly report is <b>attached</b>.</p>",
-        "attachments": [{ "filename": "weekly-report.pdf", "contentType": "application/pdf", "dataBase64": "JVBERi0xLjQKJcOkw7zDtsOfCg==" }]
+        "attachments": [
+          {
+            "filename": "weekly-report.pdf",
+            "contentType": "application/pdf",
+            "dataBase64": "JVBERi0xLjQKJcOkw7zDtsOfCg=="
+          }
+        ]
       },
       "idempotencyKey": "6f1c2c1e-3a1c-4c3e-9f0e-2b6f7d8a9c15"
+    },
+    {
+      "connection": "inventory",
+      "operation": "service.request",
+      "input": {
+        "method": "POST",
+        "path": "orders/{id}",
+        "pathParams": {
+          "id": "42"
+        },
+        "query": {
+          "notify": true
+        },
+        "headers": {
+          "X-Trace": "test"
+        },
+        "body": {
+          "text": "approved"
+        }
+      }
     }
   ]
 }