@fourier-labs/harbour-contracts 0.80.0 → 0.83.0

package/schema/integration-execute-request.schema.json

@@ -359,13 +359,53 @@
         "body": {
           "type": "object",
           "additionalProperties": true
+        },
+        "rows": {
+          "type": "array",
+          "minItems": 1,
+          "maxItems": 500,
+          "items": {
+            "type": "object",
+            "minProperties": 1,
+            "maxProperties": 64,
+            "additionalProperties": {
+              "oneOf": [
+                {
+                  "type": "string",
+                  "maxLength": 4000
+                },
+                {
+                  "type": "number"
+                },
+                {
+                  "type": "boolean"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "description": "One row keyed by column name, 1..64 columns; each value a string of at most 4000 characters, a number, a boolean or null. Which columns the alias approves, and whether a value fits its column type (the catalog's columnTypes, which only governance holds), is governance's check \u2014 the way warehouse.view.read's cross-field rules are."
+          },
+          "description": "warehouse.table.append (0.82.0): the rows to append, 1..500 of them, every one a record of the approved columns. Governance refuses an unapproved column, a value outside its column type and a request above 1 MB with ROW_VALUE_INVALID; nothing is coerced."
+        },
+        "since": {
+          "type": "string",
+          "minLength": 1,
+          "pattern": "^[0-9]{4}-[0-9]{2}-[0-9]{2}T[0-9]{2}:[0-9]{2}:[0-9]{2}(\\.[0-9]{1,9})?(Z|[+-][0-9]{2}:[0-9]{2})$",
+          "description": "phone.sms.list (0.82.0): the ISO 8601 date-time (with a zone) after which received messages are listed; inclusive. Messages are kept for 30 minutes, so an older `since` lists what is still held."
+        },
+        "from": {
+          "type": "string",
+          "maxLength": 32,
+          "description": "phone.sms.list (0.82.0): only messages from this sender id or number (as the provider reports it, e.g. `VK-GSTNIN` or `+919876543210`); absent lists every sender."
         }
       }
     },
     "idempotencyKey": {
       "type": "string",
       "pattern": "^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$",
-      "description": "UUID of one explicit Send action; required for the sends (slack.message.post, slack.dm.send, gmail.message.send), the receipted Basecamp writes (basecamp.todo.create, basecamp.message.post, basecamp.comment.post, basecamp.campfire.post; 0.76.0) and the receipted SharePoint writes (sharepoint.item.create, sharepoint.file.upload; 0.78.0), refused everywhere else. The same key with the same payload and subject returns the recorded outcome for seven days."
+      "description": "UUID of one explicit Send action; required for the sends (slack.message.post, slack.dm.send, gmail.message.send), the receipted Basecamp writes (basecamp.todo.create, basecamp.message.post, basecamp.comment.post, basecamp.campfire.post; 0.76.0) the receipted SharePoint writes (sharepoint.item.create, sharepoint.file.upload; 0.78.0) and the receipted warehouse append (warehouse.table.append; 0.82.0, where it is also the BigQuery load job id), refused everywhere else. The same key with the same payload and subject returns the recorded outcome for seven days."
     },
     "mode": {
       "$ref": "app-integrations-declaration.schema.json#/definitions/IntegrationIdentityMode",
@@ -1494,6 +1534,89 @@
           "resource"
         ]
       }
+    },
+    {
+      "if": {
+        "properties": {
+          "operation": {
+            "const": "phone.sms.list"
+          }
+        }
+      },
+      "then": {
+        "x-read-only": true,
+        "not": {
+          "required": [
+            "idempotencyKey"
+          ]
+        },
+        "properties": {
+          "mode": false,
+          "input": {
+            "propertyNames": {
+              "enum": [
+                "since",
+                "from"
+              ]
+            },
+            "required": [
+              "since"
+            ]
+          }
+        }
+      }
+    },
+    {
+      "if": {
+        "properties": {
+          "operation": {
+            "const": "phone.number.get"
+          }
+        }
+      },
+      "then": {
+        "x-read-only": true,
+        "not": {
+          "required": [
+            "idempotencyKey"
+          ]
+        },
+        "properties": {
+          "mode": false,
+          "input": {
+            "maxProperties": 0,
+            "description": "phone.number.get (0.83.0) takes no input: `input` is the empty object (the generated validators read an absent input as `{}`). The resource, a number alias, is the whole question; the answer is the E.164 number the phone connection's `channels` map holds for it."
+          }
+        }
+      }
+    },
+    {
+      "if": {
+        "properties": {
+          "operation": {
+            "const": "warehouse.table.append"
+          }
+        }
+      },
+      "then": {
+        "x-read-only": false,
+        "required": [
+          "idempotencyKey"
+        ],
+        "properties": {
+          "mode": false,
+          "input": {
+            "propertyNames": {
+              "enum": [
+                "rows"
+              ]
+            },
+            "required": [
+              "rows"
+            ]
+          }
+        }
+      }
     }
   ],
   "definitions": {
@@ -2193,6 +2316,41 @@
         "conflict": "replace"
       },
       "idempotencyKey": "6f1c2c1e-3a1c-4c3e-9f0e-2b6f7d8a9c21"
+    },
+    {
+      "connection": "company-phone",
+      "operation": "phone.sms.list",
+      "resource": "gstn-line",
+      "input": {
+        "since": "2026-10-17T09:30:00Z",
+        "from": "VK-GSTNIN"
+      }
+    },
+    {
+      "connection": "company-phone",
+      "operation": "phone.number.get",
+      "resource": "gstn-line",
+      "input": {}
+    },
+    {
+      "connection": "sales-warehouse",
+      "operation": "warehouse.table.append",
+      "resource": "esc_filings",
+      "input": {
+        "rows": [
+          {
+            "gstin": "27AAPFU0939F1ZV",
+            "period": "2026-09",
+            "filed_at": "2026-10-17T09:31:12Z"
+          },
+          {
+            "gstin": "29AABCT1332L1ZT",
+            "period": "2026-09",
+            "filed_at": null
+          }
+        ]
+      },
+      "idempotencyKey": "6f1c2c1e-3a1c-4c3e-9f0e-2b6f7d8a9c22"
     }
   ]
 }

package/schema/resolved-app-serving.schema.json

@@ -27,6 +27,17 @@
     "routingStoreArn": {"type": "string", "minLength": 1, "description": "The cell's CloudFront KeyValueStore ARN; equals edge.routingStoreArn unless the cell record names its own."},
     "pageHost": {"type": "string", "format": "hostname", "description": "Bare hostname of frontendUrl."},
     "apiHost": {"type": "string", "format": "hostname", "description": "Bare hostname of apiUrl."},
+    "networkAccess": {
+      "type": "object", "additionalProperties": false,
+      "description": "Present only while the tenant enforces a network access policy (governance ADR 0130): the effective list of client ranges the app's gateway SecurityPolicy allows, the tenant's ranges plus the platform cell's own egress, as textual CIDRs. Absent means every network.",
+      "required": ["clientCidrs"],
+      "properties": {
+        "clientCidrs": {
+          "type": "array", "minItems": 1, "maxItems": 128, "uniqueItems": true,
+          "items": {"type": "string", "pattern": "^(?:(?:25[0-5]|2[0-4][0-9]|1[0-9]{2}|[1-9]?[0-9])(?:\\.(?:25[0-5]|2[0-4][0-9]|1[0-9]{2}|[1-9]?[0-9])){3}/(?:3[0-2]|[12]?[0-9])|(?=[0-9a-fA-F.]*:)[0-9a-fA-F:.]{2,45}/(?:12[0-8]|1[01][0-9]|[1-9]?[0-9]))$", "description": "IPv4 `a.b.c.d/n` or IPv6 `addr/n`, each with an explicit prefix; `/0` is never produced."}
+        }
+      }
+    },
     "companyDomain": {
       "type": "object", "additionalProperties": false,
       "description": "Present only when source is tenant: the ready delegated company zone the page and API hosts live under, and the shared gateway/TLS secret the cell serves it with.",

package/schema/saas-connection.schema.json

@@ -21,17 +21,17 @@
       "type": "object",
       "maxProperties": 64,
       "propertyNames": { "$ref": "app-integrations-declaration.schema.json#/definitions/IntegrationAlias" },
-      "additionalProperties": { "type": "string", "pattern": "^[A-Za-z0-9][A-Za-z0-9.,_:-]{0,255}$", "description": "A Slack channel id (public, non-archived), a Basecamp project id (digits) or a SharePoint site id (0.78.0: the Microsoft Graph composite `hostname,siteCollectionGuid,webGuid`)." },
-      "description": "Logical alias → provider resource id: a Slack channel id, a Basecamp project id or a SharePoint site id. Always empty for Gmail."
+      "additionalProperties": { "type": "string", "pattern": "^[+A-Za-z0-9][A-Za-z0-9.,_:-]{0,255}$", "description": "A Slack channel id (public, non-archived), a Basecamp project id (digits), a SharePoint site id (0.78.0: the Microsoft Graph composite `hostname,siteCollectionGuid,webGuid`) or a phone number (0.82.0: E.164, a leading `+` and digits)." },
+      "description": "Logical alias → provider resource id: a Slack channel id, a Basecamp project id, a SharePoint site id or a phone number. Always empty for Gmail."
     },
     "operations": {
       "type": "array",
       "minItems": 1,
-      "maxItems": 31,
+      "maxItems": 33,
       "uniqueItems": true,
       "items": { "$ref": "app-integrations-declaration.schema.json#/definitions/IntegrationOperation" },
-      "not": { "contains": { "const": "warehouse.view.read" } },
-      "description": "Operations IT allows apps to request on this connection: the provider's own SaaS operations (Slack: slack.channel.history, slack.message.post, slack.message.update, slack.message.delete, slack.dm.send, slack.user.lookup; Gmail: gmail.thread.list, gmail.thread.read, gmail.message.read, gmail.message.send, gmail.attachment.read; Basecamp (0.76.0): basecamp.project.list, basecamp.todolist.list, basecamp.todo.list, basecamp.todo.create, basecamp.todo.complete, basecamp.message.list, basecamp.message.post, basecamp.comment.list, basecamp.comment.post, basecamp.campfire.post, basecamp.people.list; SharePoint (0.78.0): sharepoint.list.list, sharepoint.item.list, sharepoint.item.create, sharepoint.item.update, sharepoint.drive.list, sharepoint.file.list, sharepoint.file.search, sharepoint.file.read, sharepoint.file.upload). Never warehouse.view.read."
+      "not": { "anyOf": [{ "contains": { "const": "warehouse.view.read" } }, { "contains": { "const": "warehouse.table.append" } }] },
+      "description": "Operations IT allows apps to request on this connection: the provider's own SaaS operations (Slack: slack.channel.history, slack.message.post, slack.message.update, slack.message.delete, slack.dm.send, slack.user.lookup; Gmail: gmail.thread.list, gmail.thread.read, gmail.message.read, gmail.message.send, gmail.attachment.read; Basecamp (0.76.0): basecamp.project.list, basecamp.todolist.list, basecamp.todo.list, basecamp.todo.create, basecamp.todo.complete, basecamp.message.list, basecamp.message.post, basecamp.comment.list, basecamp.comment.post, basecamp.campfire.post, basecamp.people.list; SharePoint (0.78.0): sharepoint.list.list, sharepoint.item.list, sharepoint.item.create, sharepoint.item.update, sharepoint.drive.list, sharepoint.file.list, sharepoint.file.search, sharepoint.file.read, sharepoint.file.upload). Never warehouse.view.read. Phone (0.82.0): phone.sms.list; 0.83.0 adds phone.number.get."
     },
     "developmentPreapproval": { "$ref": "#/definitions/DevelopmentPreapproval" },
     "oauthClient": { "$ref": "#/definitions/SaasOauthClient" },
@@ -84,8 +84,8 @@
   "definitions": {
     "SaasProvider": {
       "type": "string",
-      "enum": ["slack", "gmail", "basecamp", "sharepoint"],
-      "description": "Slack carries an installation and a channel map; Gmail is user-consent only; Basecamp is user-consent only with an IT-pinned account and a project map in `channels`; SharePoint (0.78.0) is user-consent only, pinned to the company's Microsoft 365 tenant in `account`, with a site map in `channels`."
+      "enum": ["slack", "gmail", "basecamp", "sharepoint", "phone"],
+      "description": "Slack carries an installation and a channel map; Gmail is user-consent only; Basecamp is user-consent only with an IT-pinned account and a project map in `channels`; SharePoint (0.78.0) is user-consent only, pinned to the company's Microsoft 365 tenant in `account`, with a site map in `channels`. Phone (0.82.0) is app mode only with no installation: the tenant's inbound SMS numbers (E.164) mapped from aliases in `channels`, and the SMS the platform received on them listed by phone.sms.list; since 0.83.0 an app reads the number an alias maps to with phone.number.get."
     },
     "BasecampAccount": {
       "type": "object",
@@ -290,6 +290,21 @@
       "userModeApproval": "automatic",
       "createdAt": "2026-10-11T08:00:00Z",
       "updatedAt": "2026-10-11T08:00:00Z"
+    },
+    {
+      "schema": "harbour.saas-connection/1.0",
+      "tenantId": "fourier",
+      "sourceId": "company-phone",
+      "kind": "saas",
+      "provider": "phone",
+      "displayName": "Agent phone lines",
+      "status": "ACTIVE",
+      "version": 1,
+      "channels": { "gstn-line": "+919876543210" },
+      "operations": ["phone.sms.list", "phone.number.get"],
+      "developmentPreapproval": { "enabled": false, "hours": 24 },
+      "createdAt": "2026-10-17T08:00:00Z",
+      "updatedAt": "2026-10-17T08:00:00Z"
     }
   ]
 }