@fourier-labs/harbour-contracts 0.74.0 → 0.76.0

package/README.md

@@ -38,9 +38,9 @@ exist here first.
 | `binding-classification-subject.schema.json` | Complete value-free binding-name classification before version allocation | AI governance §5.7 / SEC-UP-01 |
 | `sanitized-binding-evidence.schema.json` | Exact-version sanitized runtime-binding allocation receipt | AI governance §5.7 / SEC-UP-02 |
 | `ai-pricing-revision`, `ai-metering-policy`, `ai-budget-ledger-event`, `ai-trace-event-v2` | Additive metering v2 records, including media dimensions and P5 trace attribution; v1 records remain readable | AI governance §9 |
-| `app-integrations-declaration.schema.json` | Committed `.isomorph/integrations.json` (`isomorph.app-integrations/2.0`): closed twelve-operation set (Slack read/post/update/delete/DM/lookup, Gmail list/thread/read/send/attachment, warehouse view read — ADR 0018) with fixed or declared identity modes; owns the shared operation/identity/environment enums | Dev kit §4 |
-| `integration-execute-request`, `integration-execute-result`, `integration-connect-result`, `integration-error-details` | App SDK integrations wire contract on `/_harbour/integrations/*`: per-operation input bounds (a warehouse read filters, groups, aggregates and sorts in the warehouse and says when it was `truncated` — ADR 0017; Slack and Gmail reads page, posts thread, mail carries HTML and attachments — ADR 0018; a development warehouse read may carry the app's `sampleRows` and the result says `sample` — ADR 0021), the per-operation result shapes, consent states and the closed `details.code` reason set | Dev kit §4, §8 |
-| `saas-connection.schema.json`, `data-grant-v2.schema.json` | Tenant SaaS connection record (one installation and channel map per tenant and provider; IT's optional `oauthClient`, `userModeApproval`, `directMessages`, `externalRecipients` — ADR 0018) and the additive `harbour.data-grant/2.0` grant record with structured resources and provisioning lease/cleanup (status machine generated; legacy `data-grant` untouched) | Dev kit §5 |
+| `app-integrations-declaration.schema.json` | Committed `.isomorph/integrations.json` (`isomorph.app-integrations/2.0`): closed twenty-four-operation set (Slack read/post/update/delete/DM/lookup, Gmail list/thread/read/send/attachment — ADR 0018; Basecamp project/to-do list/to-do/message/comment/people lists, to-do create and complete, message, comment and Campfire posts — ADR 0022; warehouse view read; service request) with fixed or declared identity modes; owns the shared operation/identity/environment enums | Dev kit §4 |
+| `integration-execute-request`, `integration-execute-result`, `integration-connect-result`, `integration-error-details` | App SDK integrations wire contract on `/_harbour/integrations/*`: per-operation input bounds (a warehouse read filters, groups, aggregates and sorts in the warehouse and says when it was `truncated` — ADR 0017; Slack and Gmail reads page, posts thread, mail carries HTML and attachments — ADR 0018; a development warehouse read may carry the app's `sampleRows` and the result says `sample` — ADR 0021; Basecamp lists page by `pageToken`, ids are digit strings, writes answer `{id, appUrl}` — ADR 0022), the per-operation result shapes, consent states and the closed `details.code` reason set | Dev kit §4, §8 |
+| `saas-connection.schema.json`, `data-grant-v2.schema.json` | Tenant SaaS connection record (one installation and channel map per tenant and provider; IT's optional `oauthClient`, `userModeApproval`, `directMessages`, `externalRecipients` — ADR 0018; a Basecamp connection's pinned `account` and project ids in `channels` — ADR 0022) and the additive `harbour.data-grant/2.0` grant record with structured resources and provisioning lease/cleanup (status machine generated; legacy `data-grant` untouched) | Dev kit §5 |
 | `kit-bundle-manifest.schema.json`, `kit-lock.schema.json` | Published kit bundle identity (SDK tarball digest plus optional `sdk.version` and https `sdk.url` download location) and the committed `.isomorph/kit.lock.json` the CodeBuild SDK-vendoring gate compares against | Dev kit §3 |
 | `deploy-response.schema.json` | 202 Accepted body for `POST /v1/tenants/{tenant}/apps/{app}/deployments`, returned only after the authoritative QUEUED version exists and its SQS message is accepted | — |
 | `deployment-source.schema.json` | Credential-free GitHub source in the `DeployRequest` body; credentials are resolved internally by MaterializeSource | — |

package/contract-release.json

@@ -1,12 +1,12 @@
 {
   "schema": "harbour.contract-release/1.0",
-  "repositoryVersion": "0.74.0.0",
-  "publishVersion": "0.74.0",
-  "publishTag": "v0.74.0",
-  "schemasDigest": "sha256:340d7f930a6cea6292f6ec20a02ca37ed5b78b42f4f4ec6e4c15057b44c6c3ff",
+  "repositoryVersion": "0.76.0.0",
+  "publishVersion": "0.76.0",
+  "publishTag": "v0.76.0",
+  "schemasDigest": "sha256:20ed0df1c63b7aec22d74c3582b1e6c5d36a974005bfe656f03f8f746b371fa7",
   "aiFixturesDigest": "sha256:edac31c92e146ca1c40130f2fb5649db82e24b8cd1ac758153b90612052fddb6",
-  "generatedGoDigest": "sha256:639a4832d8301e197caefe8d9b0fb2bd21cf20f9b580861a04bdce8d5411624a",
-  "generatedTypeScriptDigest": "sha256:ab6a5dd30f09a9604d34f5a994fb8a3491a092d1fb77232b1165e02a5e217939",
+  "generatedGoDigest": "sha256:db5f27b48a5e6b3706ac0173ebe37ec26deed375be46646b592da35a3aebcce4",
+  "generatedTypeScriptDigest": "sha256:9467bd533c557df0b263789b8585f0201abd9f536506ec28400e245be18dae42",
   "generatedExclusions": {
     "gen-go/contract_release.go": "contains the generated aggregate digests (self-reference)",
     "gen-ts/contract-release.ts": "contains the generated aggregate digests (self-reference)"
@@ -31,12 +31,12 @@
     "schema/ai-transform-result.schema.json": "sha256:244e380a36957ab2dcb526ea22aaecb56b53664ce1fda6934d0021c084c99133",
     "schema/ai-verification-evidence.schema.json": "sha256:bdbc762df256d2a8dd0bdda60d4d13915ce40034cd756af9515871d145f10ad9",
     "schema/api-error-response.schema.json": "sha256:3d43d5bdf0b59c944e20509d832e6776c3ecdba4d6c245a9118bbe52062a8304",
-    "schema/app-integrations-declaration.schema.json": "sha256:2647af515f9291ea02bed363d535f36ac3d0b1cf012466a25937cf4e41c4dedd",
+    "schema/app-integrations-declaration.schema.json": "sha256:83d3e2bd38fbdb2e4a0da2f222405faa28c4c5b2e7d639a377f0cf7a631318ba",
     "schema/artifact-contract.schema.json": "sha256:8047b461a1c6d07bbe867a259c57bdf5cc0fdf282cf842ec7b683a9e93713b10",
     "schema/binding-classification-subject.schema.json": "sha256:a8825ce652e7e00a18759c4249bd5bcd0cae552dd58440513f867e87f685133c",
     "schema/builder-input-proposal.schema.json": "sha256:fe85cffa6d76b1e1effe1f5d75525f8fe0e1eaa3be4a304e491aa23ad72c0e72",
     "schema/data-dependency.schema.json": "sha256:b4cc2b2484e982cfed64c0f56b8f1e9d1363c71854cd71f845b24fbe7d85c971",
-    "schema/data-grant-v2.schema.json": "sha256:576db6f17bbd3c6d700628bb5b93dcb4ade536ab868085634d05ff06476b6272",
+    "schema/data-grant-v2.schema.json": "sha256:b843703ff1a8091c726fee3a5ce07e06dfed684326318163ba7dd070273aada3",
     "schema/data-grant.schema.json": "sha256:e640553831ecc1c01cc9a37fe388b84d0ffeaa0d0050e63712b48f65fa437c8a",
     "schema/data-source.schema.json": "sha256:46ef4ace5fce612fce055813bf4f99956423b46c929993fbbc5dfec497087bad",
     "schema/deploy-request.schema.json": "sha256:32531e21983cdfeec511f8b4cddd4dad6530cd90e4e9fe147225d78d138b6198",
@@ -54,8 +54,8 @@
     "schema/error-envelope.schema.json": "sha256:75dccda7dd16fdf8435deda53fc7dbcdc109b65114617a17f11763010c656f90",
     "schema/integration-connect-result.schema.json": "sha256:3f254b67ef739dc1fa395bdc8c4dc93359b16d481dba2a2d777aa5b6f34b7af8",
     "schema/integration-error-details.schema.json": "sha256:5a290584b1542b2b8cdd4966869126180ce29c1f0dd250dca7fb68c05e76b8e9",
-    "schema/integration-execute-request.schema.json": "sha256:601b5a72a99bdfb8e7b1ee0948bdda4bd1d3d694c66bb013431e927cddebfa58",
-    "schema/integration-execute-result.schema.json": "sha256:1b625e69a805b5b9e2a99ed9c60699372ab09793874bb98149f43b6d3ba11947",
+    "schema/integration-execute-request.schema.json": "sha256:01eaac5d1a7272eec2aed3547a08313ac9ed314ec8996a39c2c7ee28c90f5145",
+    "schema/integration-execute-result.schema.json": "sha256:38afef6aebc81e875c7a246f01de2d5a04392bda455c17da08146d953c4ceb4b",
     "schema/internal-configuration-request.schema.json": "sha256:229d44a3458f68dceddfba802e5c1adcd95523a45af29b93b972706b88461a7d",
     "schema/kit-bundle-manifest.schema.json": "sha256:4a9fcdd52ba0d55718ef4dbdab112b145ef90471d9356d4d3fb41e50fe9e400d",
     "schema/kit-lock.schema.json": "sha256:a48154d9471e49a893d928f7b0e1e0bc77708a4a7edce4fdf14073203e0e8987",
@@ -63,7 +63,7 @@
     "schema/promotion-request.schema.json": "sha256:00e96dfd8ddbdba88ea222941d43f3609ff6c815a79e34f6705cab458101c969",
     "schema/promotion-response.schema.json": "sha256:4129712d2e29d6ef21d93d4bd0bacfd60ada3f2ee0ade852824e64346b817634",
     "schema/resolved-app-serving.schema.json": "sha256:260e30ca16831ddd96b15f44eadc7daa2a5f87a0025588bd6318b236f349ec6b",
-    "schema/saas-connection.schema.json": "sha256:6720b906b89293eebd8c5a6cb8ac6bc14dfca9b13d822e3026641f935b637892",
+    "schema/saas-connection.schema.json": "sha256:695d075f0237682f26c9a4005ee165c871d0327edea9675858d3fd6b53badfb0",
     "schema/sanitized-binding-evidence.schema.json": "sha256:1191ab88e2764df927e5f17837674cebebe068d480da2b2fdb390e589f96b51f",
     "schema/secret-reference.schema.json": "sha256:db4e3c2c6a2dbd72d7ea0f9c91cb3b2343a7e67b601996c6818b2ef08e440895",
     "schema/security-scan-input-v2.schema.json": "sha256:0d418342078c9b5046ea6f4bef3c2c57539285dfee99cc0850d4f0d03739ee13",
@@ -109,11 +109,11 @@
     "gen-go/contracts_test.go": "sha256:56376287cb1548be1b35ab4c65d6f0b558c5d34885f7a47cb3d9e8d786607bf5",
     "gen-go/doc.go": "sha256:316d610ce568597a2ce6f38e9782e34fa5920f6f51ab0866e6d061b8a41cd822",
     "gen-go/error_category.go": "sha256:b2ddea22dcfa030f1a45e721e635485b0bd816cf1f38e7654628a653f5ed4583",
-    "gen-go/integration_execute_input_rules.go": "sha256:f319996ec5ec3df38f357a84901680df15f80e982a3cbaec4956b3ef1f13548b",
-    "gen-go/integration_execute_input_rules_test.go": "sha256:17830fe9bc76d55d95e4e1959363c35ac595064972ac5c6eea3c2fae1efcaff9",
-    "gen-go/integration_operations.go": "sha256:e2871c9df4c07068753256f0549aebe1ca6009495cdef8dab1168efd2894b77c",
+    "gen-go/integration_execute_input_rules.go": "sha256:814ff2c29672565b0d1a2092e3b2c564a902f2627411860c94251ff7dedcb152",
+    "gen-go/integration_execute_input_rules_test.go": "sha256:607de6367fff4ab8cdfba2c68ed0adedd26f0d56fecc409b953d8d5acb885b58",
+    "gen-go/integration_operations.go": "sha256:05824e16c898c91952a374929082dd06e80ff3a271e3dfeff49beba7e459bf20",
     "gen-go/schema_documents.go": "sha256:c19c0d540f602ee997a84b90e20702d9bc63ed7d27aec267e76c04655fc182e0",
-    "gen-go/types.go": "sha256:01f7a573b1e0ca4366ec3dc1bf74ff6fc7d66274dec5ffb36c0332251188d4cc",
+    "gen-go/types.go": "sha256:d8bfe22533a1c3bad12b868068d43397dd2f1a9008521c132f13b3d4b8ab5dd4",
     "gen-go/version_state.go": "sha256:4ef8abb126414c0025cf2c59bc9c79a74ef4a2ff89e8f316cbf05acc872371c1"
   },
   "generatedTypeScript": {
@@ -138,13 +138,13 @@
     "gen-ts/ai-transform-result.ts": "sha256:208c66b2aeb425c0cbcc18b7191f6e8989443f2b2c1690648e0e06cc1448ce25",
     "gen-ts/ai-verification-evidence.ts": "sha256:979439d77f8b47631d1eb3b6c3c54ea6fec41089d2a51dc815fd370b1c4917fc",
     "gen-ts/api-error-response.ts": "sha256:0fd73be282e7a5d72d6c343a4e64d09c232556b16161167f0cffd6278ed7e3d3",
-    "gen-ts/app-integrations-declaration.ts": "sha256:18c495f22f4501e8f425688f5294cc7e2bba48bc6c7faba7e35d169da540f77b",
+    "gen-ts/app-integrations-declaration.ts": "sha256:2e2038c9b0279154d91e94cae23fad7e1ce7dad01293651cc5a121cacfea755b",
     "gen-ts/artifact-contract.ts": "sha256:4a6dc6d2caaeed4bb2066cc8a333e6e09e5a0d4745e0b1038293d54ab9403aeb",
     "gen-ts/binding-classification-digest-helper.ts": "sha256:40fc7d85b4c3f3ffc5caf7d7950c62d013c83ee42058c7453b2100d95817f167",
     "gen-ts/binding-classification-subject.ts": "sha256:c409a3fd7b942b50419632c51d9a79474fb30d6374bdc79c0e25c73618e800c3",
     "gen-ts/builder-input-proposal.ts": "sha256:b0108c3787873d3cf1a39f00967379418a6766275d3474cfa55f5a9d93ead174",
     "gen-ts/data-dependency.ts": "sha256:259f19e2759395d72ead90b8ed74a6dcef0c2641124f4f182823138cfd19bedf",
-    "gen-ts/data-grant-v2.ts": "sha256:cce15e51813fd693850391f12602a4436d869c75fc286b24cca539cfc5e27789",
+    "gen-ts/data-grant-v2.ts": "sha256:311bee6359ab57a01d8652c432c3616d2c441e708a29f079d83432cf83e2a940",
     "gen-ts/data-grant.ts": "sha256:2358579d8aa1e57b01a6f2b0eacce5531e7f21ef226404c9809925365e0d6155",
     "gen-ts/data-source.ts": "sha256:f30d4c14c15afbb9530d30af9235844198765984ce1579fa25961d7f07bcfb1f",
     "gen-ts/deploy-request.ts": "sha256:0214faa8be6680f0bfc117d5ce67c1a59fcc18bd0ea4bc840e03e7d051fa9ab6",
@@ -164,10 +164,10 @@
     "gen-ts/index.ts": "sha256:57927b9fcddf506785671bbd44cced9f729373e4dd3e3480bc6c37fd05fb59e8",
     "gen-ts/integration-connect-result.ts": "sha256:4b10f169b6e1af364e9b418de21caa9fadbfb77b43cbff77d741cfae0b52180c",
     "gen-ts/integration-error-details.ts": "sha256:e73cb5942373ef88b2d8e03a1de56d5a69e71069ecd14e68396f7edba1f60780",
-    "gen-ts/integration-execute-input-rules.ts": "sha256:1127c321720cb9bde63a6d20dadd177c923fef1c8c8f37e0b106a2488fe079de",
-    "gen-ts/integration-execute-request.ts": "sha256:f95ec137982a9d774828998fcde76b2ac08a9261dc4f6988fe222f77ecdd00ba",
-    "gen-ts/integration-execute-result.ts": "sha256:1ac69edc6db8641c4fefe6e4ef86bc8855c95006089af279b15e8d6daf978252",
-    "gen-ts/integration-operations.ts": "sha256:f4ddc2dc5776557d20dbf92a1e20cec63198c7d008426773c2e0fc3f509cd460",
+    "gen-ts/integration-execute-input-rules.ts": "sha256:7480d9a6c27a432ceab65eeee26873b0986f9f6ff7415cf72a4563972b649c30",
+    "gen-ts/integration-execute-request.ts": "sha256:09e9e58918c027b318350b9d4b03c8ba1c76dc32f756d5c8627c57f190606ed6",
+    "gen-ts/integration-execute-result.ts": "sha256:45cd672f02b604905b3e8b4e16f2a10b3ff06fe05c2bdd01d9eba53452d156c5",
+    "gen-ts/integration-operations.ts": "sha256:460b0f44d68488c7f4cb84c564b87b4a011aa2931efb606a778d239a0bd011ab",
     "gen-ts/internal-configuration-request.ts": "sha256:7032437797473fa1c581d134adef2f3d4b4f4132f482cd17743e9d47097886bc",
     "gen-ts/kit-bundle-manifest.ts": "sha256:2777a268aef8787b81e71d154a7d05f6f5ded09d66f378211ff5493ddb885171",
     "gen-ts/kit-lock.ts": "sha256:00ceeb97e9b7d0187bec00728f5099fd34e775e9cc44c85c4714f7a3a4118ef6",
@@ -175,7 +175,7 @@
     "gen-ts/promotion-request.ts": "sha256:9db88cef67f777a16bac628039ec3f582acb9e8cfff6fb592b30d0a0e55abc68",
     "gen-ts/promotion-response.ts": "sha256:f1c9cafac96faeb02a443a31786f67714e818f38d90108e7af41958396524d6f",
     "gen-ts/resolved-app-serving.ts": "sha256:6131a6cc5f784f0d101081d2ce1b96b76b2f904b2c5e7b2809f9ede5878ada1f",
-    "gen-ts/saas-connection.ts": "sha256:807554f7e4bd3629fff4d05778e56b71096ba70a6dda9e1645ebdc8c40a5d3a8",
+    "gen-ts/saas-connection.ts": "sha256:d65689c51add42233744b037da88dd3110449e2d3fa8afbae7bd21bee6c4f16e",
     "gen-ts/sanitized-binding-digest-helper.ts": "sha256:c47d7fdc20500e2e72c23fe39ecdd610fc397c47fcba51335ebec3c380fe6872",
     "gen-ts/sanitized-binding-evidence.ts": "sha256:f3fb7b1d7d2e0929eb0ea981eaf32db3104010647185f6ae59f67167d42538a9",
     "gen-ts/secret-reference.ts": "sha256:731fbcde7315cb4128d5b01bdbe6e6f248f13c7ad8dea04a3a4e927ac4890198",

package/dist/gen-ts/app-integrations-declaration.d.ts

@@ -13,6 +13,17 @@ export type DeclaredConnection = {
         'gmail.message.read'?: UserModeChannelOperation;
         'gmail.message.send'?: UserModeChannelOperation;
         'gmail.attachment.read'?: UserModeChannelOperation;
+        'basecamp.project.list'?: UserModeChannelOperation;
+        'basecamp.todolist.list'?: UserModeChannelOperation;
+        'basecamp.todo.list'?: UserModeChannelOperation;
+        'basecamp.todo.create'?: UserModeChannelOperation;
+        'basecamp.todo.complete'?: UserModeChannelOperation;
+        'basecamp.message.list'?: UserModeChannelOperation;
+        'basecamp.message.post'?: UserModeChannelOperation;
+        'basecamp.comment.list'?: UserModeChannelOperation;
+        'basecamp.comment.post'?: UserModeChannelOperation;
+        'basecamp.campfire.post'?: UserModeChannelOperation;
+        'basecamp.people.list'?: UserModeChannelOperation;
         'warehouse.view.read'?: AppModeViewOperation;
         'service.request'?: ServiceOperation;
     };
@@ -36,7 +47,7 @@ export type ResourceNames = IntegrationAlias[];
  */
 export type ColumnName = string;
 /**
- * Committed `.isomorph/integrations.json`: the app's declared use of tenant-wide integration connections. Keys are logical connection aliases (the governance sourceId); resources are logical names (Slack channel alias, warehouse view name), never IDs, tokens or URLs. The operation set is closed (thirteen operations since 0.73.0, ADR 0018). Each operation carries a fixed identity mode — slack.dm.send=app, slack.user.lookup=app, every gmail.* operation=user, warehouse.view.read=app — except the declared-mode Slack operations (slack.message.post, and since 0.71.0 slack.channel.history, slack.message.update and slack.message.delete), whose mode the app DECLARES: `app` acts as the company's Slack app (the one audited bot identity; a post goes out under the IT-approved per-app display name when the connection declares `presentation`), `user` acts as the signed-in person after their own consent (reads what they can read, edits what they wrote). The declared mode is the one the app requests access for; an app may hold approved grants for both modes after two requests, and each declared-mode call names which approved mode it runs under (`mode` on the execute request, 0.55.0) — a mode IT did not approve is refused, never swapped for the other. A `saas` connection may declare only the Slack and Gmail operations and a `database` connection only warehouse.view.read; `presentation` is a `saas` connection's optional per-app display name and icon for app-mode Slack posts, shown to IT at approval time and applied only from the approved grant. Gmail is user-mode only (reads, one send); its single resource is the fixed `inbox` alias. slack.dm.send and slack.user.lookup address people by email rather than a channel, so their single resource is the fixed `workspace` alias (the connection's installed workspace), the way Gmail's is `inbox`. This file also owns the shared IntegrationOperation / IntegrationIdentityMode / IntegrationEnvironment / IntegrationConnectionKind / IntegrationPresentation definitions referenced by the other integration schemas.
+ * Committed `.isomorph/integrations.json`: the app's declared use of tenant-wide integration connections. Keys are logical connection aliases (the governance sourceId); resources are logical names (Slack channel alias, warehouse view name), never IDs, tokens or URLs. The operation set is closed (twenty-four operations since 0.76.0, ADR 0018 and ADR 0022). Each operation carries a fixed identity mode — slack.dm.send=app, slack.user.lookup=app, every gmail.* operation=user, every basecamp.* operation=user, warehouse.view.read=app, service.request=app — except the declared-mode Slack operations (slack.message.post, and since 0.71.0 slack.channel.history, slack.message.update and slack.message.delete), whose mode the app DECLARES: `app` acts as the company's Slack app (the one audited bot identity; a post goes out under the IT-approved per-app display name when the connection declares `presentation`), `user` acts as the signed-in person after their own consent (reads what they can read, edits what they wrote). The declared mode is the one the app requests access for; an app may hold approved grants for both modes after two requests, and each declared-mode call names which approved mode it runs under (`mode` on the execute request, 0.55.0) — a mode IT did not approve is refused, never swapped for the other. A `saas` connection may declare only the Slack, Gmail and Basecamp operations and a `database` connection only warehouse.view.read; `presentation` is a `saas` connection's optional per-app display name and icon for app-mode Slack posts, shown to IT at approval time and applied only from the approved grant. Gmail is user-mode only (reads, one send); its single resource is the fixed `inbox` alias. Basecamp (0.76.0, ADR 0022) is user-mode only too: basecamp.project.list runs on the fixed `account` alias (the company's pinned Basecamp account) and every other basecamp.* operation on a project alias IT mapped in the connection's `channels` map, so Basecamp itself refuses an id outside that project. slack.dm.send and slack.user.lookup address people by email rather than a channel, so their single resource is the fixed `workspace` alias (the connection's installed workspace), the way Gmail's is `inbox`. This file also owns the shared IntegrationOperation / IntegrationIdentityMode / IntegrationEnvironment / IntegrationConnectionKind / IntegrationPresentation definitions referenced by the other integration schemas.
  */
 export interface AppIntegrationsDeclaration {
     schema: 'isomorph.app-integrations/2.0';
@@ -71,6 +82,9 @@ export interface AppModeChannelOperation {
     identity: 'app';
     resources: ResourceNames;
 }
+/**
+ * Every gmail.* operation (resource: the fixed `inbox` alias) and, since 0.76.0, every basecamp.* operation (resource: a project alias from the connection's `channels` map, or the fixed `account` alias for basecamp.project.list): user mode only — the app acts as the signed-in person after their own consent.
+ */
 export interface UserModeChannelOperation {
     identity: 'user';
     resources: ResourceNames;

package/dist/gen-ts/contract-release.d.ts

@@ -1,7 +1,7 @@
-export declare const ContractRepositoryVersion: "0.74.0.0";
-export declare const ContractPublishVersion: "0.74.0";
-export declare const ContractPublishTag: "v0.74.0";
-export declare const ContractSchemasDigest: "sha256:340d7f930a6cea6292f6ec20a02ca37ed5b78b42f4f4ec6e4c15057b44c6c3ff";
+export declare const ContractRepositoryVersion: "0.76.0.0";
+export declare const ContractPublishVersion: "0.76.0";
+export declare const ContractPublishTag: "v0.76.0";
+export declare const ContractSchemasDigest: "sha256:20ed0df1c63b7aec22d74c3582b1e6c5d36a974005bfe656f03f8f746b371fa7";
 export declare const ContractAiFixturesDigest: "sha256:edac31c92e146ca1c40130f2fb5649db82e24b8cd1ac758153b90612052fddb6";
-export declare const ContractGeneratedGoDigest: "sha256:639a4832d8301e197caefe8d9b0fb2bd21cf20f9b580861a04bdce8d5411624a";
-export declare const ContractGeneratedTypeScriptDigest: "sha256:ab6a5dd30f09a9604d34f5a994fb8a3491a092d1fb77232b1165e02a5e217939";
+export declare const ContractGeneratedGoDigest: "sha256:db5f27b48a5e6b3706ac0173ebe37ec26deed375be46646b592da35a3aebcce4";
+export declare const ContractGeneratedTypeScriptDigest: "sha256:9467bd533c557df0b263789b8585f0201abd9f536506ec28400e245be18dae42";

package/dist/gen-ts/contract-release.js

@@ -1,9 +1,9 @@
 /* eslint-disable */
 // Code generated by tools/gen/gen.mjs from schema/*.json. DO NOT EDIT.
-export const ContractRepositoryVersion = "0.74.0.0";
-export const ContractPublishVersion = "0.74.0";
-export const ContractPublishTag = "v0.74.0";
-export const ContractSchemasDigest = "sha256:340d7f930a6cea6292f6ec20a02ca37ed5b78b42f4f4ec6e4c15057b44c6c3ff";
+export const ContractRepositoryVersion = "0.76.0.0";
+export const ContractPublishVersion = "0.76.0";
+export const ContractPublishTag = "v0.76.0";
+export const ContractSchemasDigest = "sha256:20ed0df1c63b7aec22d74c3582b1e6c5d36a974005bfe656f03f8f746b371fa7";
 export const ContractAiFixturesDigest = "sha256:edac31c92e146ca1c40130f2fb5649db82e24b8cd1ac758153b90612052fddb6";
-export const ContractGeneratedGoDigest = "sha256:639a4832d8301e197caefe8d9b0fb2bd21cf20f9b580861a04bdce8d5411624a";
-export const ContractGeneratedTypeScriptDigest = "sha256:ab6a5dd30f09a9604d34f5a994fb8a3491a092d1fb77232b1165e02a5e217939";
+export const ContractGeneratedGoDigest = "sha256:db5f27b48a5e6b3706ac0173ebe37ec26deed375be46646b592da35a3aebcce4";
+export const ContractGeneratedTypeScriptDigest = "sha256:9467bd533c557df0b263789b8585f0201abd9f536506ec28400e245be18dae42";

package/dist/gen-ts/data-grant-v2.d.ts

@@ -8,7 +8,7 @@ export type DataGrantV2Status = 'REQUESTED' | 'GRANTED' | 'DENIED' | 'REVOKED';
 export type DataGrantV2ProvisioningStatus = 'NONE' | 'PENDING' | 'FAILED' | 'DONE';
 export type DataGrantV2CleanupStatus = 'PENDING' | 'FAILED' | 'DONE';
 /**
- * An app's integration grant for one connection, environment and identity mode (control table sk APP#<appId>#IGRANT#<environment>#<sourceId>#<mode>; grantId = base64url(JSON ["v2",appId,environment,sourceId,mode])). Additive to the legacy DataGrant (data-grant.schema.json), which is never consulted by v2 paths. A fresh REQUESTED record carries empty `operations`/`resources` until the attached request is approved; approved resources are structured `{name, columns?}` entries (a Slack channel alias, the fixed Gmail `inbox` alias, or a warehouse view alias with its approved columns). Expiry is enforced from UTC time on every call and SDK calls never extend it; `expiredAt` is stamped by the recovery sweep afterwards. Status edges live in x-transitions; DENIED and REVOKED are terminal (a regrant after revocation is a new REQUESTED record once cleanup is DONE). Database grants add credentialRef/mintedPrincipal; both hold references only. An app-mode Slack grant may carry `presentation` (0.53.0): the IT-approved display name and icon the app's posts go out under, copied from the approved request and read by every post — never from the call. `identityMode` and `installation` are the deprecated 0.45.0 spellings: the record carries `mode`, and a SaaS grant runs on the connection's single installation.
+ * An app's integration grant for one connection, environment and identity mode (control table sk APP#<appId>#IGRANT#<environment>#<sourceId>#<mode>; grantId = base64url(JSON ["v2",appId,environment,sourceId,mode])). Additive to the legacy DataGrant (data-grant.schema.json), which is never consulted by v2 paths. A fresh REQUESTED record carries empty `operations`/`resources` until the attached request is approved; approved resources are structured `{name, columns?}` entries (a Slack channel alias, the fixed Gmail `inbox` alias, a Basecamp project alias or the fixed Basecamp `account` alias, or a warehouse view alias with its approved columns). Expiry is enforced from UTC time on every call and SDK calls never extend it; `expiredAt` is stamped by the recovery sweep afterwards. Status edges live in x-transitions; DENIED and REVOKED are terminal (a regrant after revocation is a new REQUESTED record once cleanup is DONE). Database grants add credentialRef/mintedPrincipal; both hold references only. An app-mode Slack grant may carry `presentation` (0.53.0): the IT-approved display name and icon the app's posts go out under, copied from the approved request and read by every post — never from the call. `identityMode` and `installation` are the deprecated 0.45.0 spellings: the record carries `mode`, and a SaaS grant runs on the connection's single installation.
  */
 export interface DataGrantV2 {
     schema: 'harbour.data-grant/2.0';
@@ -29,11 +29,11 @@ export interface DataGrantV2 {
     kind: 'saas' | 'database' | 'service';
     status: DataGrantV2Status;
     /**
-     * Approved operations; each must match this grant's mode. Empty until the first approval. At most the eleven SaaS operations (0.71.0); a database grant holds one.
+     * Approved operations; each must match this grant's mode. Empty until the first approval. At most the twenty-two SaaS operations (0.76.0: eleven Slack and Gmail, eleven Basecamp); a database grant holds one.
      *
-     * @maxItems 11
+     * @maxItems 22
      */
-    operations: ('slack.channel.history' | 'slack.message.post' | 'slack.message.update' | 'slack.message.delete' | 'slack.dm.send' | 'slack.user.lookup' | 'gmail.thread.list' | 'gmail.thread.read' | 'gmail.message.read' | 'gmail.message.send' | 'gmail.attachment.read' | 'warehouse.view.read' | 'service.request')[];
+    operations: ('slack.channel.history' | 'slack.message.post' | 'slack.message.update' | 'slack.message.delete' | 'slack.dm.send' | 'slack.user.lookup' | 'gmail.thread.list' | 'gmail.thread.read' | 'gmail.message.read' | 'gmail.message.send' | 'gmail.attachment.read' | 'basecamp.project.list' | 'basecamp.todolist.list' | 'basecamp.todo.list' | 'basecamp.todo.create' | 'basecamp.todo.complete' | 'basecamp.message.list' | 'basecamp.message.post' | 'basecamp.comment.list' | 'basecamp.comment.post' | 'basecamp.campfire.post' | 'basecamp.people.list' | 'warehouse.view.read' | 'service.request')[];
     /**
      * Approved logical resources. Never inherited by wildcard. Empty until the first approval.
      *
@@ -82,7 +82,7 @@ export interface DataGrantV2 {
     installation?: string;
 }
 /**
- * One approved logical resource: a channel alias, the fixed Gmail `inbox` alias, or a warehouse view alias with the approved columns.
+ * One approved logical resource: a Slack channel alias, the fixed Gmail `inbox` alias, a Basecamp project alias or the fixed Basecamp `account` alias (0.76.0), or a warehouse view alias with the approved columns.
  */
 export interface IntegrationResource {
     /**

package/dist/gen-ts/integration-execute-input-rules.d.ts

@@ -53,6 +53,9 @@ export type IntegrationExecuteInputFieldRule = {
         maxItems: number;
         types: readonly IntegrationExecuteInputValueType[];
     };
+} | {
+    kind: 'boolean';
+    required: boolean;
 };
 /** The scalar types a `value` input accepts, alone or in its list form. */
 export type IntegrationExecuteInputValueType = 'string' | 'number' | 'boolean';
@@ -355,6 +358,217 @@ export declare const IntegrationExecuteInputRules: {
             };
         };
     };
+    readonly "basecamp.project.list": {
+        readonly idempotencyKey: false;
+        readonly fields: {
+            readonly pageToken: {
+                readonly kind: "string";
+                readonly required: false;
+                readonly minLength: 1;
+                readonly maxLength: 256;
+            };
+            readonly projectStatus: {
+                readonly kind: "enum";
+                readonly required: false;
+                readonly values: readonly ["active", "archived"];
+            };
+        };
+    };
+    readonly "basecamp.todolist.list": {
+        readonly idempotencyKey: false;
+        readonly fields: {
+            readonly pageToken: {
+                readonly kind: "string";
+                readonly required: false;
+                readonly minLength: 1;
+                readonly maxLength: 256;
+            };
+        };
+    };
+    readonly "basecamp.todo.list": {
+        readonly idempotencyKey: false;
+        readonly fields: {
+            readonly todolistId: {
+                readonly kind: "string";
+                readonly required: true;
+                readonly minLength: 0;
+                readonly pattern: "^[0-9]{1,20}$";
+            };
+            readonly completed: {
+                readonly kind: "boolean";
+                readonly required: false;
+            };
+            readonly pageToken: {
+                readonly kind: "string";
+                readonly required: false;
+                readonly minLength: 1;
+                readonly maxLength: 256;
+            };
+        };
+    };
+    readonly "basecamp.todo.create": {
+        readonly idempotencyKey: true;
+        readonly fields: {
+            readonly todolistId: {
+                readonly kind: "string";
+                readonly required: true;
+                readonly minLength: 0;
+                readonly pattern: "^[0-9]{1,20}$";
+            };
+            readonly content: {
+                readonly kind: "string";
+                readonly required: true;
+                readonly minLength: 1;
+                readonly maxLength: 1000;
+            };
+            readonly description: {
+                readonly kind: "string";
+                readonly required: false;
+                readonly minLength: 1;
+                readonly maxLength: 16384;
+            };
+            readonly contentFormat: {
+                readonly kind: "enum";
+                readonly required: false;
+                readonly values: readonly ["plain", "html"];
+                readonly default: "plain";
+            };
+            readonly dueOn: {
+                readonly kind: "string";
+                readonly required: false;
+                readonly minLength: 0;
+                readonly pattern: "^\\d{4}-\\d{2}-\\d{2}$";
+            };
+            readonly assigneeIds: {
+                readonly kind: "string[]";
+                readonly required: false;
+                readonly minItems: 1;
+                readonly maxItems: 20;
+                readonly uniqueItems: true;
+                readonly item: {
+                    readonly minLength: 0;
+                    readonly pattern: "^[0-9]{1,20}$";
+                };
+            };
+            readonly notify: {
+                readonly kind: "boolean";
+                readonly required: false;
+            };
+        };
+    };
+    readonly "basecamp.todo.complete": {
+        readonly idempotencyKey: false;
+        readonly fields: {
+            readonly todoId: {
+                readonly kind: "string";
+                readonly required: true;
+                readonly minLength: 0;
+                readonly pattern: "^[0-9]{1,20}$";
+            };
+        };
+    };
+    readonly "basecamp.message.list": {
+        readonly idempotencyKey: false;
+        readonly fields: {
+            readonly pageToken: {
+                readonly kind: "string";
+                readonly required: false;
+                readonly minLength: 1;
+                readonly maxLength: 256;
+            };
+        };
+    };
+    readonly "basecamp.message.post": {
+        readonly idempotencyKey: true;
+        readonly fields: {
+            readonly subject: {
+                readonly kind: "string";
+                readonly required: true;
+                readonly minLength: 1;
+                readonly maxLength: 256;
+            };
+            readonly content: {
+                readonly kind: "string";
+                readonly required: true;
+                readonly minLength: 1;
+                readonly maxLength: 65536;
+            };
+            readonly contentFormat: {
+                readonly kind: "enum";
+                readonly required: false;
+                readonly values: readonly ["plain", "html"];
+                readonly default: "plain";
+            };
+        };
+    };
+    readonly "basecamp.comment.list": {
+        readonly idempotencyKey: false;
+        readonly fields: {
+            readonly recordingId: {
+                readonly kind: "string";
+                readonly required: true;
+                readonly minLength: 0;
+                readonly pattern: "^[0-9]{1,20}$";
+            };
+            readonly pageToken: {
+                readonly kind: "string";
+                readonly required: false;
+                readonly minLength: 1;
+                readonly maxLength: 256;
+            };
+        };
+    };
+    readonly "basecamp.comment.post": {
+        readonly idempotencyKey: true;
+        readonly fields: {
+            readonly recordingId: {
+                readonly kind: "string";
+                readonly required: true;
+                readonly minLength: 0;
+                readonly pattern: "^[0-9]{1,20}$";
+            };
+            readonly content: {
+                readonly kind: "string";
+                readonly required: true;
+                readonly minLength: 1;
+                readonly maxLength: 16384;
+            };
+            readonly contentFormat: {
+                readonly kind: "enum";
+                readonly required: false;
+                readonly values: readonly ["plain", "html"];
+                readonly default: "plain";
+            };
+        };
+    };
+    readonly "basecamp.campfire.post": {
+        readonly idempotencyKey: true;
+        readonly fields: {
+            readonly content: {
+                readonly kind: "string";
+                readonly required: true;
+                readonly minLength: 1;
+                readonly maxLength: 4000;
+            };
+            readonly contentFormat: {
+                readonly kind: "enum";
+                readonly required: false;
+                readonly values: readonly ["plain", "html"];
+                readonly default: "plain";
+            };
+        };
+    };
+    readonly "basecamp.people.list": {
+        readonly idempotencyKey: false;
+        readonly fields: {
+            readonly pageToken: {
+                readonly kind: "string";
+                readonly required: false;
+                readonly minLength: 1;
+                readonly maxLength: 256;
+            };
+        };
+    };
     readonly "warehouse.view.read": {
         readonly idempotencyKey: false;
         readonly fields: {

package/dist/gen-ts/integration-execute-input-rules.js

@@ -91,6 +91,87 @@ export const IntegrationExecuteInputRules = {
             attachmentId: { kind: "string", required: true, minLength: 1, maxLength: 512 },
         },
     },
+    "basecamp.project.list": {
+        idempotencyKey: false,
+        fields: {
+            pageToken: { kind: "string", required: false, minLength: 1, maxLength: 256 },
+            projectStatus: { kind: "enum", required: false, values: ["active", "archived"] },
+        },
+    },
+    "basecamp.todolist.list": {
+        idempotencyKey: false,
+        fields: {
+            pageToken: { kind: "string", required: false, minLength: 1, maxLength: 256 },
+        },
+    },
+    "basecamp.todo.list": {
+        idempotencyKey: false,
+        fields: {
+            todolistId: { kind: "string", required: true, minLength: 0, pattern: "^[0-9]{1,20}$" },
+            completed: { kind: "boolean", required: false },
+            pageToken: { kind: "string", required: false, minLength: 1, maxLength: 256 },
+        },
+    },
+    "basecamp.todo.create": {
+        idempotencyKey: true,
+        fields: {
+            todolistId: { kind: "string", required: true, minLength: 0, pattern: "^[0-9]{1,20}$" },
+            content: { kind: "string", required: true, minLength: 1, maxLength: 1000 },
+            description: { kind: "string", required: false, minLength: 1, maxLength: 16384 },
+            contentFormat: { kind: "enum", required: false, values: ["plain", "html"], default: "plain" },
+            dueOn: { kind: "string", required: false, minLength: 0, pattern: "^\\d{4}-\\d{2}-\\d{2}$" },
+            assigneeIds: { kind: "string[]", required: false, minItems: 1, maxItems: 20, uniqueItems: true, item: { minLength: 0, pattern: "^[0-9]{1,20}$" } },
+            notify: { kind: "boolean", required: false },
+        },
+    },
+    "basecamp.todo.complete": {
+        idempotencyKey: false,
+        fields: {
+            todoId: { kind: "string", required: true, minLength: 0, pattern: "^[0-9]{1,20}$" },
+        },
+    },
+    "basecamp.message.list": {
+        idempotencyKey: false,
+        fields: {
+            pageToken: { kind: "string", required: false, minLength: 1, maxLength: 256 },
+        },
+    },
+    "basecamp.message.post": {
+        idempotencyKey: true,
+        fields: {
+            subject: { kind: "string", required: true, minLength: 1, maxLength: 256 },
+            content: { kind: "string", required: true, minLength: 1, maxLength: 65536 },
+            contentFormat: { kind: "enum", required: false, values: ["plain", "html"], default: "plain" },
+        },
+    },
+    "basecamp.comment.list": {
+        idempotencyKey: false,
+        fields: {
+            recordingId: { kind: "string", required: true, minLength: 0, pattern: "^[0-9]{1,20}$" },
+            pageToken: { kind: "string", required: false, minLength: 1, maxLength: 256 },
+        },
+    },
+    "basecamp.comment.post": {
+        idempotencyKey: true,
+        fields: {
+            recordingId: { kind: "string", required: true, minLength: 0, pattern: "^[0-9]{1,20}$" },
+            content: { kind: "string", required: true, minLength: 1, maxLength: 16384 },
+            contentFormat: { kind: "enum", required: false, values: ["plain", "html"], default: "plain" },
+        },
+    },
+    "basecamp.campfire.post": {
+        idempotencyKey: true,
+        fields: {
+            content: { kind: "string", required: true, minLength: 1, maxLength: 4000 },
+            contentFormat: { kind: "enum", required: false, values: ["plain", "html"], default: "plain" },
+        },
+    },
+    "basecamp.people.list": {
+        idempotencyKey: false,
+        fields: {
+            pageToken: { kind: "string", required: false, minLength: 1, maxLength: 256 },
+        },
+    },
     "warehouse.view.read": {
         idempotencyKey: false,
         fields: {
@@ -188,6 +269,10 @@ function checkField(operation, path, name, field, value) {
             if (value === null || typeof value !== 'object' || Array.isArray(value))
                 return refuse(path, `${path} must be a JSON object`);
             return { ok: true, value };
+        case 'boolean':
+            if (typeof value !== 'boolean')
+                return refuse(path, `${path} must be a boolean`);
+            return { ok: true, value };
         case 'integer':
             if (typeof value !== 'number' || !Number.isInteger(value) || value < field.minimum || value > field.maximum)
                 return refuse(path, `${path} must be an integer between ${field.minimum} and ${field.maximum}`);