@fourier-labs/harbour-contracts 0.72.0 → 0.74.0

package/schema/data-source.schema.json

@@ -77,13 +77,42 @@
     },
     "status": {
       "$ref": "#/definitions/DataSourceStatus"
+    },
+    "environments": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "development": {
+          "$ref": "#/definitions/DataSourceEnvironmentCopy"
+        },
+        "preview": {
+          "$ref": "#/definitions/DataSourceEnvironmentCopy"
+        }
+      },
+      "description": "0.74.0: per-environment copies of the source. A read for an environment that has a copy here uses that copy's endpoint and credentialRef; production always uses the top-level endpoint and credentialRef. A development read with no development copy is answered from the app's sample rows (integration-execute-request.sampleRows), never from the source; a preview read with no preview copy uses the production endpoint. A laptop never reads the production endpoint."
     }
   },
   "definitions": {
     "DataSourceConnector": {
       "type": "string",
-      "enum": ["postgres", "redshift", "bigquery", "databricks", "mysql"],
-      "description": "Closed connector set for the Data-Access MVP."
+      "enum": ["postgres", "redshift", "bigquery", "databricks", "mysql", "trino"],
+      "description": "Closed connector set for the Data-Access MVP. trino (0.74.0): Trino/Presto-compatible engines (Trino, Presto, Starburst, Galaxy) over the Trino HTTP statement protocol; the endpoint reuses host, port and database (as the Trino catalog) with no connector-specific fields."
+    },
+    "DataSourceEnvironmentCopy": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["endpoint", "credentialRef"],
+      "properties": {
+        "endpoint": {
+          "$ref": "#/definitions/DataSourceEndpoint"
+        },
+        "credentialRef": {
+          "type": "string",
+          "pattern": "^secretref://[A-Za-z0-9][A-Za-z0-9/_.:-]*$",
+          "description": "secretref URI naming the platform-held credential for this copy. The referenced value never crosses this boundary."
+        }
+      },
+      "description": "One environment's copy of a source: the same endpoint and credentialRef shapes as the top-level fields, for the same connector."
     },
     "DataSourceEndpoint": {
       "type": "object",
@@ -152,6 +181,32 @@
       "requestableByBuilders": true,
       "allowValidation": false,
       "status": "ACTIVE"
+    },
+    {
+      "tenantId": "pocketfm",
+      "sourceId": "lakehouse",
+      "connector": "trino",
+      "displayName": "Lakehouse (Trino)",
+      "endpoint": {
+        "host": "trino.internal.example.com",
+        "port": 8443,
+        "database": "hive"
+      },
+      "credentialRef": "secretref://tenants/pocketfm/sources/lakehouse/reader",
+      "environments": {
+        "development": {
+          "endpoint": {
+            "host": "trino-dev.internal.example.com",
+            "port": 8443,
+            "database": "hive_dev"
+          },
+          "credentialRef": "secretref://tenants/pocketfm/sources/lakehouse/reader-dev"
+        }
+      },
+      "provisioningMode": "byo",
+      "allowedScope": ["analytics.episode_plays"],
+      "requestableByBuilders": true,
+      "status": "ACTIVE"
     }
   ]
 }

package/schema/integration-error-details.schema.json

@@ -62,9 +62,10 @@
         "AUTH_REQUIRED",
         "UNAVAILABLE",
         "MODE_NOT_GRANTED",
-        "MODE_REQUIRED"
+        "MODE_REQUIRED",
+        "SAMPLE_ROWS_NOT_ALLOWED"
       ],
-      "description": "Stable reason codes. SEND_OUTCOME_UNKNOWN: dispatch happened but the outcome is unknown; never re-post automatically. SEND_KEY_REUSED: the idempotency key was seen with a different payload or subject. GRANT_DENIED: IT denied the request. TOKEN_REFRESH_PENDING: another call holds the refresh lease; retry shortly. REQUEST_PENDING: a different request for this grant is still open. INPUT_INVALID: the operation input failed its bounds. IDEMPOTENCY_KEY_REQUIRED: a send without a UUID idempotencyKey. SEND_IN_PROGRESS: a retry arrived while the first send of that key is still running. CONNECTION_NOT_FOUND / APP_NOT_FOUND / GRANT_NOT_FOUND: the named record does not exist. AUTH_REQUIRED: no verified caller. UNAVAILABLE: the governance dependency (store, provider seam) is unreachable. MODE_NOT_GRANTED (403 FORBIDDEN, 0.55.0): a slack.message.post named a mode (app or user) IT has not approved for this app; the post is never served under the other mode. MODE_REQUIRED (400 VALIDATION_FAILED, 0.55.0): the app holds approved grants for both modes and the post named neither."
+      "description": "Stable reason codes. SEND_OUTCOME_UNKNOWN: dispatch happened but the outcome is unknown; never re-post automatically. SEND_KEY_REUSED: the idempotency key was seen with a different payload or subject. GRANT_DENIED: IT denied the request. TOKEN_REFRESH_PENDING: another call holds the refresh lease; retry shortly. REQUEST_PENDING: a different request for this grant is still open. INPUT_INVALID: the operation input failed its bounds. IDEMPOTENCY_KEY_REQUIRED: a send without a UUID idempotencyKey. SEND_IN_PROGRESS: a retry arrived while the first send of that key is still running. CONNECTION_NOT_FOUND / APP_NOT_FOUND / GRANT_NOT_FOUND: the named record does not exist. AUTH_REQUIRED: no verified caller. UNAVAILABLE: the governance dependency (store, provider seam) is unreachable. MODE_NOT_GRANTED (403 FORBIDDEN, 0.55.0): a slack.message.post named a mode (app or user) IT has not approved for this app; the post is never served under the other mode. MODE_REQUIRED (400 VALIDATION_FAILED, 0.55.0): the app holds approved grants for both modes and the post named neither. SAMPLE_ROWS_NOT_ALLOWED (400 VALIDATION_FAILED, 0.74.0): an execute request carried sampleRows on any route but the development one. A sample value that does not parse as the column's recorded type is INPUT_INVALID, naming the column and the row."
     }
   },
   "examples": [