@fourier-labs/harbour-contracts 0.80.0 → 0.82.0

package/gen-ts/data-grant-v2.ts

@@ -33,9 +33,9 @@ export interface DataGrantV2 {
   kind: 'saas' | 'database' | 'service';
   status: DataGrantV2Status;
   /**
-   * Approved operations; each must match this grant's mode. Empty until the first approval. At most the thirty-one SaaS operations (0.78.0: eleven Slack and Gmail, eleven Basecamp, nine SharePoint); a database grant holds one.
+   * Approved operations; each must match this grant's mode. Empty until the first approval. At most the thirty-two SaaS operations (0.82.0: eleven Slack and Gmail, eleven Basecamp, nine SharePoint, one phone); a database grant holds up to two (warehouse.view.read, warehouse.table.append).
    *
-   * @maxItems 31
+   * @maxItems 32
    */
   operations: (
     | 'slack.channel.history'
@@ -69,7 +69,9 @@ export interface DataGrantV2 {
     | 'sharepoint.file.search'
     | 'sharepoint.file.read'
     | 'sharepoint.file.upload'
+    | 'phone.sms.list'
     | 'warehouse.view.read'
+    | 'warehouse.table.append'
     | 'service.request'
   )[];
   /**
@@ -120,7 +122,7 @@ export interface DataGrantV2 {
   installation?: string;
 }
 /**
- * One approved logical resource: a Slack channel alias, the fixed Gmail `inbox` alias, a Basecamp project alias or the fixed Basecamp `account` alias (0.76.0), a SharePoint site alias (0.78.0), or a warehouse view alias with the approved columns.
+ * One approved logical resource: a Slack channel alias, the fixed Gmail `inbox` alias, a Basecamp project alias or the fixed Basecamp `account` alias (0.76.0), a SharePoint site alias (0.78.0), a phone number alias (0.82.0), or a warehouse view alias with the approved columns.
  */
 export interface IntegrationResource {
   /**
@@ -128,7 +130,7 @@ export interface IntegrationResource {
    */
   name: string;
   /**
-   * warehouse.view.read only: the approved columns of the view.
+   * warehouse.view.read and warehouse.table.append only: the approved columns of the view.
    *
    * @minItems 1
    * @maxItems 32

package/gen-ts/integration-execute-input-rules.ts

@@ -17,7 +17,8 @@ export type IntegrationExecuteInputFieldRule =
   | { kind: 'object[]'; required: boolean; minItems: number; maxItems: number; fields: Readonly<Record<string, IntegrationExecuteInputFieldRule>> }
   | { kind: 'value'; required: boolean; types: readonly IntegrationExecuteInputValueType[]; maxLength?: number; list?: { minItems: number; maxItems: number; types: readonly IntegrationExecuteInputValueType[] } }
   | { kind: 'boolean'; required: boolean }
-  | { kind: 'record'; required: boolean; minProperties: number; maxProperties: number; types: readonly IntegrationExecuteInputRecordValueType[]; maxLength?: number };
+  | { kind: 'record'; required: boolean; minProperties: number; maxProperties: number; types: readonly IntegrationExecuteInputRecordValueType[]; maxLength?: number }
+  | { kind: 'record[]'; required: boolean; minItems: number; maxItems: number; minProperties: number; maxProperties: number; types: readonly IntegrationExecuteInputRecordValueType[]; maxLength?: number };
 
 /** The scalar types a `value` input accepts, alone or in its list form. */
 export type IntegrationExecuteInputValueType = 'string' | 'number' | 'boolean';
@@ -268,6 +269,13 @@ export const IntegrationExecuteInputRules = {
       conflict: { kind: "enum", required: false, values: ["rename", "replace", "fail"], default: "rename" },
     },
   },
+  "phone.sms.list": {
+    idempotencyKey: false,
+    fields: {
+      since: { kind: "string", required: true, minLength: 1, pattern: "^[0-9]{4}-[0-9]{2}-[0-9]{2}T[0-9]{2}:[0-9]{2}:[0-9]{2}(\\.[0-9]{1,9})?(Z|[+-][0-9]{2}:[0-9]{2})$" },
+      from: { kind: "string", required: false, minLength: 0, maxLength: 32 },
+    },
+  },
   "warehouse.view.read": {
     idempotencyKey: false,
     fields: {
@@ -290,6 +298,12 @@ export const IntegrationExecuteInputRules = {
       limit: { kind: "integer", required: false, minimum: 1, maximum: 1000, default: 100 },
     },
   },
+  "warehouse.table.append": {
+    idempotencyKey: true,
+    fields: {
+      rows: { kind: "record[]", required: true, minItems: 1, maxItems: 500, minProperties: 1, maxProperties: 64, types: ["string", "number", "boolean", "null"], maxLength: 4000 },
+    },
+  },
   "service.request": {
     idempotencyKey: false,
     fields: {
@@ -363,6 +377,17 @@ function checkFields(operation: string, prefix: string, fields: Readonly<Record<
   return { ok: true, value: out };
 }
 
+/** One record: a bounded count of free keys, every value one of the record's scalar types. */
+function checkRecord(path: string, field: { minProperties: number; maxProperties: number; types: readonly IntegrationExecuteInputRecordValueType[]; maxLength?: number }, value: unknown): { ok: true; value: unknown } | Refusal {
+  if (value === null || typeof value !== 'object' || Array.isArray(value)) return refuse(path, `${path} must be a JSON object`);
+  const keys = Object.keys(value);
+  if (keys.length < field.minProperties || keys.length > field.maxProperties) return refuse(path, `${path} must have ${field.minProperties} to ${field.maxProperties} properties`);
+  for (const key of keys) {
+    if (!isScalar(field.types, field.maxLength, (value as Record<string, unknown>)[key])) return refuse(`${path}.${key}`, `${path}.${key} must be ${either(scalarShapes(field.types, field.maxLength))}`);
+  }
+  return { ok: true, value };
+}
+
 function checkField(operation: string, path: string, name: string, field: IntegrationExecuteInputFieldRule, value: unknown): { ok: true; value: unknown } | Refusal {
   switch (field.kind) {
     case 'object':
@@ -371,12 +396,14 @@ function checkField(operation: string, path: string, name: string, field: Integr
     case 'boolean':
       if (typeof value !== 'boolean') return refuse(path, `${path} must be a boolean`);
       return { ok: true, value };
-    case 'record': {
-      if (value === null || typeof value !== 'object' || Array.isArray(value)) return refuse(path, `${path} must be a JSON object`);
-      const keys = Object.keys(value);
-      if (keys.length < field.minProperties || keys.length > field.maxProperties) return refuse(path, `${path} must have ${field.minProperties} to ${field.maxProperties} properties`);
-      for (const key of keys) {
-        if (!isScalar(field.types, field.maxLength, (value as Record<string, unknown>)[key])) return refuse(`${path}.${key}`, `${path}.${key} must be ${either(scalarShapes(field.types, field.maxLength))}`);
+    case 'record':
+      return checkRecord(path, field, value);
+    case 'record[]': {
+      if (!Array.isArray(value) || value.length < field.minItems || value.length > field.maxItems) return refuse(path, `${path} must list ${field.minItems} to ${field.maxItems} items`);
+      for (const [index, item] of value.entries()) {
+        if (item === null || typeof item !== 'object' || Array.isArray(item)) return refuse(path, `${path}[${index}] is not a valid ${name} entry`);
+        const entry = checkRecord(`${path}[${index}]`, field, item);
+        if (!entry.ok) return entry;
       }
       return { ok: true, value };
     }

package/gen-ts/integration-execute-request.ts

@@ -10,7 +10,7 @@ export type IntegrationExecuteRequest = {
    */
   connection: string;
   /**
-   * Closed operation set. Extending it is a contracts change. 0.78.0 (ADR 0024) adds the nine SharePoint operations, every one user mode only on a site alias (a key of the connection's `channels` map, holding a Microsoft Graph site id): sharepoint.list.list, sharepoint.item.list, sharepoint.item.create (a receipted write: explicit action, idempotencyKey), sharepoint.item.update (a PATCH, idempotent at Graph, no key), sharepoint.drive.list, sharepoint.file.list, sharepoint.file.search, sharepoint.file.read and sharepoint.file.upload (a receipted write). 0.76.0 (ADR 0022) adds the eleven Basecamp operations, every one user mode only like gmail.*: basecamp.project.list (the projects of the company's pinned Basecamp account; its resource is the fixed `account` alias), and on one mapped project (the resource is a project alias, a key of the connection's `channels` map) basecamp.todolist.list, basecamp.todo.list, basecamp.todo.create (a receipted write: explicit action, idempotencyKey), basecamp.todo.complete (idempotent at Basecamp, no key), basecamp.message.list, basecamp.message.post, basecamp.comment.list, basecamp.comment.post, basecamp.campfire.post (the three posts are receipted writes) and basecamp.people.list. gmail.message.send (0.50.0) sends one email as the signed-in person: a send like slack.message.post (explicit Send, idempotencyKey, write receipt) under user identity; since 0.71.0 it may carry an HTML body and attachments. slack.message.post (0.53.0) runs in the mode the app declares: app (the company's Slack app, under the IT-approved per-app name) or user (the signed-in person, after their consent); since 0.55.0 each call names which of the approved modes it runs under. 0.71.0 (ADR 0018) adds slack.message.update and slack.message.delete (declared mode, like post), slack.dm.send (app mode: a direct message to 1..8 workspace members named by email), slack.user.lookup (app mode: email to Slack user id), gmail.thread.read (every message of one thread) and gmail.attachment.read (one attachment's bytes), and lets slack.channel.history run in app mode as well as user mode.
+   * Closed operation set. Extending it is a contracts change. 0.78.0 (ADR 0024) adds the nine SharePoint operations, every one user mode only on a site alias (a key of the connection's `channels` map, holding a Microsoft Graph site id): sharepoint.list.list, sharepoint.item.list, sharepoint.item.create (a receipted write: explicit action, idempotencyKey), sharepoint.item.update (a PATCH, idempotent at Graph, no key), sharepoint.drive.list, sharepoint.file.list, sharepoint.file.search, sharepoint.file.read and sharepoint.file.upload (a receipted write). 0.76.0 (ADR 0022) adds the eleven Basecamp operations, every one user mode only like gmail.*: basecamp.project.list (the projects of the company's pinned Basecamp account; its resource is the fixed `account` alias), and on one mapped project (the resource is a project alias, a key of the connection's `channels` map) basecamp.todolist.list, basecamp.todo.list, basecamp.todo.create (a receipted write: explicit action, idempotencyKey), basecamp.todo.complete (idempotent at Basecamp, no key), basecamp.message.list, basecamp.message.post, basecamp.comment.list, basecamp.comment.post, basecamp.campfire.post (the three posts are receipted writes) and basecamp.people.list. gmail.message.send (0.50.0) sends one email as the signed-in person: a send like slack.message.post (explicit Send, idempotencyKey, write receipt) under user identity; since 0.71.0 it may carry an HTML body and attachments. slack.message.post (0.53.0) runs in the mode the app declares: app (the company's Slack app, under the IT-approved per-app name) or user (the signed-in person, after their consent); since 0.55.0 each call names which of the approved modes it runs under. 0.71.0 (ADR 0018) adds slack.message.update and slack.message.delete (declared mode, like post), slack.dm.send (app mode: a direct message to 1..8 workspace members named by email), slack.user.lookup (app mode: email to Slack user id), gmail.thread.read (every message of one thread) and gmail.attachment.read (one attachment's bytes), and lets slack.channel.history run in app mode as well as user mode. 0.82.0 (ADR 0028) adds phone.sms.list (app mode only, a number alias from a phone connection's `channels` map: the SMS received on that number since a time) and warehouse.table.append (app mode only on a database connection, a receipted write with idempotencyKey: rows appended to a view alias whose mapping says `access: append`).
    */
   operation:
     | 'slack.channel.history'
@@ -44,7 +44,9 @@ export type IntegrationExecuteRequest = {
     | 'sharepoint.file.search'
     | 'sharepoint.file.read'
     | 'sharepoint.file.upload'
+    | 'phone.sms.list'
     | 'warehouse.view.read'
+    | 'warehouse.table.append'
     | 'service.request';
   /**
    * Tenant-wide logical alias of a connection (governance sourceId) or of a resource under it.
@@ -270,9 +272,26 @@ export type IntegrationExecuteRequest = {
     body?: {
       [k: string]: unknown;
     };
+    /**
+     * warehouse.table.append (0.82.0): the rows to append, 1..500 of them, every one a record of the approved columns. Governance refuses an unapproved column, a value outside its column type and a request above 1 MB with ROW_VALUE_INVALID; nothing is coerced.
+     *
+     * @minItems 1
+     * @maxItems 500
+     */
+    rows?: {
+      [k: string]: string | number | boolean | null;
+    }[];
+    /**
+     * phone.sms.list (0.82.0): the ISO 8601 date-time (with a zone) after which received messages are listed; inclusive. Messages are kept for 30 minutes, so an older `since` lists what is still held.
+     */
+    since?: string;
+    /**
+     * phone.sms.list (0.82.0): only messages from this sender id or number (as the provider reports it, e.g. `VK-GSTNIN` or `+919876543210`); absent lists every sender.
+     */
+    from?: string;
   };
   /**
-   * UUID of one explicit Send action; required for the sends (slack.message.post, slack.dm.send, gmail.message.send), the receipted Basecamp writes (basecamp.todo.create, basecamp.message.post, basecamp.comment.post, basecamp.campfire.post; 0.76.0) and the receipted SharePoint writes (sharepoint.item.create, sharepoint.file.upload; 0.78.0), refused everywhere else. The same key with the same payload and subject returns the recorded outcome for seven days.
+   * UUID of one explicit Send action; required for the sends (slack.message.post, slack.dm.send, gmail.message.send), the receipted Basecamp writes (basecamp.todo.create, basecamp.message.post, basecamp.comment.post, basecamp.campfire.post; 0.76.0) the receipted SharePoint writes (sharepoint.item.create, sharepoint.file.upload; 0.78.0) and the receipted warehouse append (warehouse.table.append; 0.82.0, where it is also the BigQuery load job id), refused everywhere else. The same key with the same payload and subject returns the recorded outcome for seven days.
    */
   idempotencyKey?: string;
   /**

package/gen-ts/integration-operations.ts

@@ -286,6 +286,15 @@ export const IntegrationOperations = {
     "declaredMode": false,
     "idempotencyKey": true
   },
+  "phone.sms.list": {
+    "kind": "saas",
+    "identities": [
+      "app"
+    ],
+    "readOnly": true,
+    "declaredMode": false,
+    "idempotencyKey": false
+  },
   "warehouse.view.read": {
     "kind": "database",
     "identities": [
@@ -295,6 +304,15 @@ export const IntegrationOperations = {
     "declaredMode": false,
     "idempotencyKey": false
   },
+  "warehouse.table.append": {
+    "kind": "database",
+    "identities": [
+      "app"
+    ],
+    "readOnly": false,
+    "declaredMode": false,
+    "idempotencyKey": true
+  },
   "service.request": {
     "kind": "service",
     "identities": [

package/gen-ts/resolved-app-serving.ts

@@ -34,6 +34,16 @@ export interface ResolvedAppServing {
    * Bare hostname of apiUrl.
    */
   apiHost?: string;
+  /**
+   * Present only while the tenant enforces a network access policy (governance ADR 0130): the effective list of client ranges the app's gateway SecurityPolicy allows, the tenant's ranges plus the platform cell's own egress, as textual CIDRs. Absent means every network.
+   */
+  networkAccess?: {
+    /**
+     * @minItems 1
+     * @maxItems 128
+     */
+    clientCidrs: string[];
+  };
   /**
    * Present only when source is tenant: the ready delegated company zone the page and API hosts live under, and the shared gateway/TLS secret the cell serves it with.
    */

package/gen-ts/saas-connection.ts

@@ -2,9 +2,9 @@
 // Code generated by tools/gen/gen.mjs from schema/*.json. DO NOT EDIT.
 
 /**
- * Slack carries an installation and a channel map; Gmail is user-consent only; Basecamp is user-consent only with an IT-pinned account and a project map in `channels`; SharePoint (0.78.0) is user-consent only, pinned to the company's Microsoft 365 tenant in `account`, with a site map in `channels`.
+ * Slack carries an installation and a channel map; Gmail is user-consent only; Basecamp is user-consent only with an IT-pinned account and a project map in `channels`; SharePoint (0.78.0) is user-consent only, pinned to the company's Microsoft 365 tenant in `account`, with a site map in `channels`. Phone (0.82.0) is app mode only with no installation: the tenant's inbound SMS numbers (E.164) mapped from aliases in `channels`, and the SMS the platform received on them listed by phone.sms.list.
  */
-export type SaasProvider = 'slack' | 'gmail' | 'basecamp' | 'sharepoint';
+export type SaasProvider = 'slack' | 'gmail' | 'basecamp' | 'sharepoint' | 'phone';
 /**
  * DISABLED stops every app call immediately (details.code CONNECTION_DISABLED).
  */
@@ -47,19 +47,19 @@ export interface SaasConnection {
   installation?: SaasInstallation;
   account?: BasecampAccount;
   /**
-   * Logical alias → provider resource id: a Slack channel id, a Basecamp project id or a SharePoint site id. Always empty for Gmail.
+   * Logical alias → provider resource id: a Slack channel id, a Basecamp project id, a SharePoint site id or a phone number. Always empty for Gmail.
    */
   channels: {
     /**
-     * A Slack channel id (public, non-archived), a Basecamp project id (digits) or a SharePoint site id (0.78.0: the Microsoft Graph composite `hostname,siteCollectionGuid,webGuid`).
+     * A Slack channel id (public, non-archived), a Basecamp project id (digits), a SharePoint site id (0.78.0: the Microsoft Graph composite `hostname,siteCollectionGuid,webGuid`) or a phone number (0.82.0: E.164, a leading `+` and digits).
      */
     [k: string]: string;
   };
   /**
-   * Operations IT allows apps to request on this connection: the provider's own SaaS operations (Slack: slack.channel.history, slack.message.post, slack.message.update, slack.message.delete, slack.dm.send, slack.user.lookup; Gmail: gmail.thread.list, gmail.thread.read, gmail.message.read, gmail.message.send, gmail.attachment.read; Basecamp (0.76.0): basecamp.project.list, basecamp.todolist.list, basecamp.todo.list, basecamp.todo.create, basecamp.todo.complete, basecamp.message.list, basecamp.message.post, basecamp.comment.list, basecamp.comment.post, basecamp.campfire.post, basecamp.people.list; SharePoint (0.78.0): sharepoint.list.list, sharepoint.item.list, sharepoint.item.create, sharepoint.item.update, sharepoint.drive.list, sharepoint.file.list, sharepoint.file.search, sharepoint.file.read, sharepoint.file.upload). Never warehouse.view.read.
+   * Operations IT allows apps to request on this connection: the provider's own SaaS operations (Slack: slack.channel.history, slack.message.post, slack.message.update, slack.message.delete, slack.dm.send, slack.user.lookup; Gmail: gmail.thread.list, gmail.thread.read, gmail.message.read, gmail.message.send, gmail.attachment.read; Basecamp (0.76.0): basecamp.project.list, basecamp.todolist.list, basecamp.todo.list, basecamp.todo.create, basecamp.todo.complete, basecamp.message.list, basecamp.message.post, basecamp.comment.list, basecamp.comment.post, basecamp.campfire.post, basecamp.people.list; SharePoint (0.78.0): sharepoint.list.list, sharepoint.item.list, sharepoint.item.create, sharepoint.item.update, sharepoint.drive.list, sharepoint.file.list, sharepoint.file.search, sharepoint.file.read, sharepoint.file.upload). Never warehouse.view.read. Phone (0.82.0): phone.sms.list.
    *
    * @minItems 1
-   * @maxItems 31
+   * @maxItems 32
    */
   operations: (
     | 'slack.channel.history'
@@ -93,7 +93,9 @@ export interface SaasConnection {
     | 'sharepoint.file.search'
     | 'sharepoint.file.read'
     | 'sharepoint.file.upload'
+    | 'phone.sms.list'
     | 'warehouse.view.read'
+    | 'warehouse.table.append'
     | 'service.request'
   )[];
   developmentPreapproval: DevelopmentPreapproval;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fourier-labs/harbour-contracts",
-  "version": "0.80.0",
+  "version": "0.82.0",
   "description": "Single source of truth for every data shape that crosses a boundary between Isomorph components.",
   "license": "UNLICENSED",
   "private": false,

package/schema/app-integrations-declaration.schema.json

@@ -84,10 +84,12 @@
         "sharepoint.file.search",
         "sharepoint.file.read",
         "sharepoint.file.upload",
+        "phone.sms.list",
         "warehouse.view.read",
+        "warehouse.table.append",
         "service.request"
       ],
-      "description": "Closed operation set. Extending it is a contracts change. 0.78.0 (ADR 0024) adds the nine SharePoint operations, every one user mode only on a site alias (a key of the connection's `channels` map, holding a Microsoft Graph site id): sharepoint.list.list, sharepoint.item.list, sharepoint.item.create (a receipted write: explicit action, idempotencyKey), sharepoint.item.update (a PATCH, idempotent at Graph, no key), sharepoint.drive.list, sharepoint.file.list, sharepoint.file.search, sharepoint.file.read and sharepoint.file.upload (a receipted write). 0.76.0 (ADR 0022) adds the eleven Basecamp operations, every one user mode only like gmail.*: basecamp.project.list (the projects of the company's pinned Basecamp account; its resource is the fixed `account` alias), and on one mapped project (the resource is a project alias, a key of the connection's `channels` map) basecamp.todolist.list, basecamp.todo.list, basecamp.todo.create (a receipted write: explicit action, idempotencyKey), basecamp.todo.complete (idempotent at Basecamp, no key), basecamp.message.list, basecamp.message.post, basecamp.comment.list, basecamp.comment.post, basecamp.campfire.post (the three posts are receipted writes) and basecamp.people.list. gmail.message.send (0.50.0) sends one email as the signed-in person: a send like slack.message.post (explicit Send, idempotencyKey, write receipt) under user identity; since 0.71.0 it may carry an HTML body and attachments. slack.message.post (0.53.0) runs in the mode the app declares: app (the company's Slack app, under the IT-approved per-app name) or user (the signed-in person, after their consent); since 0.55.0 each call names which of the approved modes it runs under. 0.71.0 (ADR 0018) adds slack.message.update and slack.message.delete (declared mode, like post), slack.dm.send (app mode: a direct message to 1..8 workspace members named by email), slack.user.lookup (app mode: email to Slack user id), gmail.thread.read (every message of one thread) and gmail.attachment.read (one attachment's bytes), and lets slack.channel.history run in app mode as well as user mode."
+      "description": "Closed operation set. Extending it is a contracts change. 0.78.0 (ADR 0024) adds the nine SharePoint operations, every one user mode only on a site alias (a key of the connection's `channels` map, holding a Microsoft Graph site id): sharepoint.list.list, sharepoint.item.list, sharepoint.item.create (a receipted write: explicit action, idempotencyKey), sharepoint.item.update (a PATCH, idempotent at Graph, no key), sharepoint.drive.list, sharepoint.file.list, sharepoint.file.search, sharepoint.file.read and sharepoint.file.upload (a receipted write). 0.76.0 (ADR 0022) adds the eleven Basecamp operations, every one user mode only like gmail.*: basecamp.project.list (the projects of the company's pinned Basecamp account; its resource is the fixed `account` alias), and on one mapped project (the resource is a project alias, a key of the connection's `channels` map) basecamp.todolist.list, basecamp.todo.list, basecamp.todo.create (a receipted write: explicit action, idempotencyKey), basecamp.todo.complete (idempotent at Basecamp, no key), basecamp.message.list, basecamp.message.post, basecamp.comment.list, basecamp.comment.post, basecamp.campfire.post (the three posts are receipted writes) and basecamp.people.list. gmail.message.send (0.50.0) sends one email as the signed-in person: a send like slack.message.post (explicit Send, idempotencyKey, write receipt) under user identity; since 0.71.0 it may carry an HTML body and attachments. slack.message.post (0.53.0) runs in the mode the app declares: app (the company's Slack app, under the IT-approved per-app name) or user (the signed-in person, after their consent); since 0.55.0 each call names which of the approved modes it runs under. 0.71.0 (ADR 0018) adds slack.message.update and slack.message.delete (declared mode, like post), slack.dm.send (app mode: a direct message to 1..8 workspace members named by email), slack.user.lookup (app mode: email to Slack user id), gmail.thread.read (every message of one thread) and gmail.attachment.read (one attachment's bytes), and lets slack.channel.history run in app mode as well as user mode. 0.82.0 (ADR 0028) adds phone.sms.list (app mode only, a number alias from a phone connection's `channels` map: the SMS received on that number since a time) and warehouse.table.append (app mode only on a database connection, a receipted write with idempotencyKey: rows appended to a view alias whose mapping says `access: append`)."
     },
     "IntegrationIdentityMode": {
       "type": "string",
@@ -147,7 +149,16 @@
       "required": [
         "columns"
       ],
+      "description": "One declared warehouse alias: the columns the app uses and, since 0.82.0, how it uses them. `access` is read (warehouse.view.read, the default when absent, so every existing declaration and stored mapping is unchanged) or append (warehouse.table.append: the app writes rows with these columns and never reads). Governance refuses an append on a read alias and a read on an append alias with RESOURCE_NOT_APPROVED.",
       "properties": {
+        "access": {
+          "type": "string",
+          "enum": [
+            "read",
+            "append"
+          ],
+          "default": "read"
+        },
         "columns": {
           "type": "array",
           "minItems": 1,
@@ -361,9 +372,15 @@
             "sharepoint.file.upload": {
               "$ref": "#/definitions/UserModeChannelOperation"
             },
+            "phone.sms.list": {
+              "$ref": "#/definitions/AppModeChannelOperation"
+            },
             "warehouse.view.read": {
               "$ref": "#/definitions/AppModeViewOperation"
             },
+            "warehouse.table.append": {
+              "$ref": "#/definitions/AppModeViewOperation"
+            },
             "service.request": {
               "$ref": "#/definitions/ServiceOperation"
             }
@@ -389,6 +406,11 @@
                         "warehouse.view.read"
                       ]
                     },
+                    {
+                      "required": [
+                        "warehouse.table.append"
+                      ]
+                    },
                     {
                       "required": [
                         "service.request"
@@ -568,6 +590,11 @@
                         "sharepoint.file.upload"
                       ]
                     },
+                    {
+                      "required": [
+                        "phone.sms.list"
+                      ]
+                    },
                     {
                       "required": [
                         "service.request"
@@ -752,10 +779,20 @@
                         "sharepoint.file.upload"
                       ]
                     },
+                    {
+                      "required": [
+                        "phone.sms.list"
+                      ]
+                    },
                     {
                       "required": [
                         "warehouse.view.read"
                       ]
+                    },
+                    {
+                      "required": [
+                        "warehouse.table.append"
+                      ]
                     }
                   ]
                 }
@@ -1008,6 +1045,17 @@
             }
           }
         },
+        "company-phone": {
+          "kind": "saas",
+          "operations": {
+            "phone.sms.list": {
+              "identity": "app",
+              "resources": [
+                "gstn-line"
+              ]
+            }
+          }
+        },
         "sales-warehouse": {
           "kind": "database",
           "operations": {
@@ -1021,6 +1069,19 @@
                   ]
                 }
               }
+            },
+            "warehouse.table.append": {
+              "identity": "app",
+              "resources": {
+                "esc_filings": {
+                  "access": "append",
+                  "columns": [
+                    "gstin",
+                    "period",
+                    "filed_at"
+                  ]
+                }
+              }
             }
           }
         }

package/schema/data-grant-v2.schema.json

@@ -17,10 +17,10 @@
     "status": { "$ref": "#/definitions/DataGrantV2Status" },
     "operations": {
       "type": "array",
-      "maxItems": 31,
+      "maxItems": 32,
       "uniqueItems": true,
       "items": { "$ref": "app-integrations-declaration.schema.json#/definitions/IntegrationOperation" },
-      "description": "Approved operations; each must match this grant's mode. Empty until the first approval. At most the thirty-one SaaS operations (0.78.0: eleven Slack and Gmail, eleven Basecamp, nine SharePoint); a database grant holds one."
+      "description": "Approved operations; each must match this grant's mode. Empty until the first approval. At most the thirty-two SaaS operations (0.82.0: eleven Slack and Gmail, eleven Basecamp, nine SharePoint, one phone); a database grant holds up to two (warehouse.view.read, warehouse.table.append)."
     },
     "resources": {
       "type": "array",
@@ -62,7 +62,7 @@
       "type": "object",
       "additionalProperties": false,
       "required": ["name"],
-      "description": "One approved logical resource: a Slack channel alias, the fixed Gmail `inbox` alias, a Basecamp project alias or the fixed Basecamp `account` alias (0.76.0), a SharePoint site alias (0.78.0), or a warehouse view alias with the approved columns.",
+      "description": "One approved logical resource: a Slack channel alias, the fixed Gmail `inbox` alias, a Basecamp project alias or the fixed Basecamp `account` alias (0.76.0), a SharePoint site alias (0.78.0), a phone number alias (0.82.0), or a warehouse view alias with the approved columns.",
       "properties": {
         "name": { "$ref": "app-integrations-declaration.schema.json#/definitions/IntegrationAlias" },
         "columns": {
@@ -71,7 +71,7 @@
           "maxItems": 32,
           "uniqueItems": true,
           "items": { "$ref": "app-integrations-declaration.schema.json#/definitions/ColumnName" },
-          "description": "warehouse.view.read only: the approved columns of the view."
+          "description": "warehouse.view.read and warehouse.table.append only: the approved columns of the view."
         }
       }
     },

package/schema/integration-execute-request.schema.json

@@ -359,13 +359,53 @@
         "body": {
           "type": "object",
           "additionalProperties": true
+        },
+        "rows": {
+          "type": "array",
+          "minItems": 1,
+          "maxItems": 500,
+          "items": {
+            "type": "object",
+            "minProperties": 1,
+            "maxProperties": 64,
+            "additionalProperties": {
+              "oneOf": [
+                {
+                  "type": "string",
+                  "maxLength": 4000
+                },
+                {
+                  "type": "number"
+                },
+                {
+                  "type": "boolean"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "description": "One row keyed by column name, 1..64 columns; each value a string of at most 4000 characters, a number, a boolean or null. Which columns the alias approves, and whether a value fits its column type (the catalog's columnTypes, which only governance holds), is governance's check \u2014 the way warehouse.view.read's cross-field rules are."
+          },
+          "description": "warehouse.table.append (0.82.0): the rows to append, 1..500 of them, every one a record of the approved columns. Governance refuses an unapproved column, a value outside its column type and a request above 1 MB with ROW_VALUE_INVALID; nothing is coerced."
+        },
+        "since": {
+          "type": "string",
+          "minLength": 1,
+          "pattern": "^[0-9]{4}-[0-9]{2}-[0-9]{2}T[0-9]{2}:[0-9]{2}:[0-9]{2}(\\.[0-9]{1,9})?(Z|[+-][0-9]{2}:[0-9]{2})$",
+          "description": "phone.sms.list (0.82.0): the ISO 8601 date-time (with a zone) after which received messages are listed; inclusive. Messages are kept for 30 minutes, so an older `since` lists what is still held."
+        },
+        "from": {
+          "type": "string",
+          "maxLength": 32,
+          "description": "phone.sms.list (0.82.0): only messages from this sender id or number (as the provider reports it, e.g. `VK-GSTNIN` or `+919876543210`); absent lists every sender."
         }
       }
     },
     "idempotencyKey": {
       "type": "string",
       "pattern": "^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$",
-      "description": "UUID of one explicit Send action; required for the sends (slack.message.post, slack.dm.send, gmail.message.send), the receipted Basecamp writes (basecamp.todo.create, basecamp.message.post, basecamp.comment.post, basecamp.campfire.post; 0.76.0) and the receipted SharePoint writes (sharepoint.item.create, sharepoint.file.upload; 0.78.0), refused everywhere else. The same key with the same payload and subject returns the recorded outcome for seven days."
+      "description": "UUID of one explicit Send action; required for the sends (slack.message.post, slack.dm.send, gmail.message.send), the receipted Basecamp writes (basecamp.todo.create, basecamp.message.post, basecamp.comment.post, basecamp.campfire.post; 0.76.0) the receipted SharePoint writes (sharepoint.item.create, sharepoint.file.upload; 0.78.0) and the receipted warehouse append (warehouse.table.append; 0.82.0, where it is also the BigQuery load job id), refused everywhere else. The same key with the same payload and subject returns the recorded outcome for seven days."
     },
     "mode": {
       "$ref": "app-integrations-declaration.schema.json#/definitions/IntegrationIdentityMode",
@@ -1494,6 +1534,65 @@
           "resource"
         ]
       }
+    },
+    {
+      "if": {
+        "properties": {
+          "operation": {
+            "const": "phone.sms.list"
+          }
+        }
+      },
+      "then": {
+        "x-read-only": true,
+        "not": {
+          "required": [
+            "idempotencyKey"
+          ]
+        },
+        "properties": {
+          "mode": false,
+          "input": {
+            "propertyNames": {
+              "enum": [
+                "since",
+                "from"
+              ]
+            },
+            "required": [
+              "since"
+            ]
+          }
+        }
+      }
+    },
+    {
+      "if": {
+        "properties": {
+          "operation": {
+            "const": "warehouse.table.append"
+          }
+        }
+      },
+      "then": {
+        "x-read-only": false,
+        "required": [
+          "idempotencyKey"
+        ],
+        "properties": {
+          "mode": false,
+          "input": {
+            "propertyNames": {
+              "enum": [
+                "rows"
+              ]
+            },
+            "required": [
+              "rows"
+            ]
+          }
+        }
+      }
     }
   ],
   "definitions": {
@@ -2193,6 +2292,35 @@
         "conflict": "replace"
       },
       "idempotencyKey": "6f1c2c1e-3a1c-4c3e-9f0e-2b6f7d8a9c21"
+    },
+    {
+      "connection": "company-phone",
+      "operation": "phone.sms.list",
+      "resource": "gstn-line",
+      "input": {
+        "since": "2026-10-17T09:30:00Z",
+        "from": "VK-GSTNIN"
+      }
+    },
+    {
+      "connection": "sales-warehouse",
+      "operation": "warehouse.table.append",
+      "resource": "esc_filings",
+      "input": {
+        "rows": [
+          {
+            "gstin": "27AAPFU0939F1ZV",
+            "period": "2026-09",
+            "filed_at": "2026-10-17T09:31:12Z"
+          },
+          {
+            "gstin": "29AABCT1332L1ZT",
+            "period": "2026-09",
+            "filed_at": null
+          }
+        ]
+      },
+      "idempotencyKey": "6f1c2c1e-3a1c-4c3e-9f0e-2b6f7d8a9c22"
     }
   ]
 }

package/schema/resolved-app-serving.schema.json

@@ -27,6 +27,17 @@
     "routingStoreArn": {"type": "string", "minLength": 1, "description": "The cell's CloudFront KeyValueStore ARN; equals edge.routingStoreArn unless the cell record names its own."},
     "pageHost": {"type": "string", "format": "hostname", "description": "Bare hostname of frontendUrl."},
     "apiHost": {"type": "string", "format": "hostname", "description": "Bare hostname of apiUrl."},
+    "networkAccess": {
+      "type": "object", "additionalProperties": false,
+      "description": "Present only while the tenant enforces a network access policy (governance ADR 0130): the effective list of client ranges the app's gateway SecurityPolicy allows, the tenant's ranges plus the platform cell's own egress, as textual CIDRs. Absent means every network.",
+      "required": ["clientCidrs"],
+      "properties": {
+        "clientCidrs": {
+          "type": "array", "minItems": 1, "maxItems": 128, "uniqueItems": true,
+          "items": {"type": "string", "pattern": "^(?:(?:25[0-5]|2[0-4][0-9]|1[0-9]{2}|[1-9]?[0-9])(?:\\.(?:25[0-5]|2[0-4][0-9]|1[0-9]{2}|[1-9]?[0-9])){3}/(?:3[0-2]|[12]?[0-9])|(?=[0-9a-fA-F.]*:)[0-9a-fA-F:.]{2,45}/(?:12[0-8]|1[01][0-9]|[1-9]?[0-9]))$", "description": "IPv4 `a.b.c.d/n` or IPv6 `addr/n`, each with an explicit prefix; `/0` is never produced."}
+        }
+      }
+    },
     "companyDomain": {
       "type": "object", "additionalProperties": false,
       "description": "Present only when source is tenant: the ready delegated company zone the page and API hosts live under, and the shared gateway/TLS secret the cell serves it with.",