@fourier-labs/harbour-contracts 0.9.0 → 0.10.0

package/fixtures/ai/adversarial-binding-classification-value.json

@@ -0,0 +1,28 @@
+{
+  "schema": "harbour.binding-classification-subject/1.0",
+  "status": "COMPLETE",
+  "tenantId": "fourier",
+  "appId": "support-copilot",
+  "environment": "preview",
+  "sourceRef": "https://github.com/Fourier-Labs-AI/support-copilot",
+  "sourceRevision": "git-sha1:0123456789abcdef0123456789abcdef01234567",
+  "sourceRevisionDigest": "sha256:79520355eb30e88bb0c6656008dd301d8f3d7cef6c14a96882557f13f7c512d9",
+  "classifierRevision": "secret-name-classifier-2.0",
+  "classifications": {
+    "OPENAI_API_KEY": {
+      "kind": "provider_credential",
+      "confidence": "high",
+      "providerId": "openai",
+      "category": "api_key",
+      "requestedAiMappingId": "openai-responses-v1",
+      "value": "must-never-cross-this-boundary"
+    }
+  },
+  "requestedAiMappings": {
+    "openai-responses-v1": {
+      "mappingVersion": "1.0.0",
+      "providerId": "openai"
+    }
+  },
+  "classificationDigest": "sha256:0000000000000000000000000000000000000000000000000000000000000000"
+}

package/fixtures/ai/adversarial-sanitized-binding-relabel.json

@@ -0,0 +1,32 @@
+{
+  "schema": "harbour.sanitized-binding-evidence/1.0",
+  "tenantId": "fourier",
+  "appId": "support-copilot",
+  "environment": "preview",
+  "versionId": "fourier#support-copilot#preview#654321",
+  "sourceRef": "https://github.com/Fourier-Labs-AI/support-copilot",
+  "sourceRevision": "git-sha1:0123456789abcdef0123456789abcdef01234567",
+  "sourceRevisionDigest": "sha256:79520355eb30e88bb0c6656008dd301d8f3d7cef6c14a96882557f13f7c512d9",
+  "classificationDigest": "sha256:43622df1d8bc3660a160a120f9af896cfc9c98009547869895b47d4c61a29688",
+  "bindings": {
+    "LOG_LEVEL": {
+      "kind": "configuration",
+      "value": "debug"
+    },
+    "STRIPE_API_KEY": {
+      "kind": "secret",
+      "secretRef": "secretref://tenant/fourier/app/support-copilot/secret/STRIPE_API_KEY"
+    }
+  },
+  "requiredAiMappings": {
+    "anthropic-messages-v1": {
+      "mappingVersion": "1.0.0",
+      "providerId": "anthropic"
+    },
+    "openai-responses-v1": {
+      "mappingVersion": "1.0.0",
+      "providerId": "openai"
+    }
+  },
+  "sanitizedBindingDigest": "sha256:2cc57565f45a645f96060c046d27e313531f34ff7d8dc24732b5f85572ca12a8"
+}

package/fixtures/ai/valid-binding-classification-subject.json

@@ -0,0 +1,46 @@
+{
+  "schema": "harbour.binding-classification-subject/1.0",
+  "status": "COMPLETE",
+  "tenantId": "fourier",
+  "appId": "support-copilot",
+  "environment": "preview",
+  "sourceRef": "https://github.com/Fourier-Labs-AI/support-copilot",
+  "sourceRevision": "git-sha1:0123456789abcdef0123456789abcdef01234567",
+  "sourceRevisionDigest": "sha256:79520355eb30e88bb0c6656008dd301d8f3d7cef6c14a96882557f13f7c512d9",
+  "classifierRevision": "secret-name-classifier-2.0",
+  "classifications": {
+    "ANTHROPIC_API_KEY": {
+      "kind": "provider_credential",
+      "confidence": "high",
+      "providerId": "anthropic",
+      "category": "api_key",
+      "requestedAiMappingId": "anthropic-messages-v1"
+    },
+    "LOG_LEVEL": {
+      "kind": "configuration",
+      "confidence": "high"
+    },
+    "OPENAI_API_KEY": {
+      "kind": "provider_credential",
+      "confidence": "high",
+      "providerId": "openai",
+      "category": "api_key",
+      "requestedAiMappingId": "openai-responses-v1"
+    },
+    "STRIPE_API_KEY": {
+      "kind": "secret",
+      "confidence": "high"
+    }
+  },
+  "requestedAiMappings": {
+    "anthropic-messages-v1": {
+      "mappingVersion": "1.0.0",
+      "providerId": "anthropic"
+    },
+    "openai-responses-v1": {
+      "mappingVersion": "1.0.0",
+      "providerId": "openai"
+    }
+  },
+  "classificationDigest": "sha256:43622df1d8bc3660a160a120f9af896cfc9c98009547869895b47d4c61a29688"
+}

package/fixtures/ai/valid-sanitized-binding-evidence.json

@@ -0,0 +1,32 @@
+{
+  "schema": "harbour.sanitized-binding-evidence/1.0",
+  "tenantId": "fourier",
+  "appId": "support-copilot",
+  "environment": "preview",
+  "versionId": "fourier#support-copilot#preview#123456",
+  "sourceRef": "https://github.com/Fourier-Labs-AI/support-copilot",
+  "sourceRevision": "git-sha1:0123456789abcdef0123456789abcdef01234567",
+  "sourceRevisionDigest": "sha256:79520355eb30e88bb0c6656008dd301d8f3d7cef6c14a96882557f13f7c512d9",
+  "classificationDigest": "sha256:43622df1d8bc3660a160a120f9af896cfc9c98009547869895b47d4c61a29688",
+  "bindings": {
+    "LOG_LEVEL": {
+      "kind": "configuration",
+      "value": "debug"
+    },
+    "STRIPE_API_KEY": {
+      "kind": "secret",
+      "secretRef": "secretref://tenant/fourier/app/support-copilot/secret/STRIPE_API_KEY"
+    }
+  },
+  "requiredAiMappings": {
+    "anthropic-messages-v1": {
+      "mappingVersion": "1.0.0",
+      "providerId": "anthropic"
+    },
+    "openai-responses-v1": {
+      "mappingVersion": "1.0.0",
+      "providerId": "openai"
+    }
+  },
+  "sanitizedBindingDigest": "sha256:2cc57565f45a645f96060c046d27e313531f34ff7d8dc24732b5f85572ca12a8"
+}

package/fixtures/ai/valid-source-revision-digest.json

@@ -0,0 +1,6 @@
+{
+  "sourceRef": "https://github.com/Fourier-Labs-AI/support-copilot",
+  "sourceRevision": "git-sha1:0123456789abcdef0123456789abcdef01234567",
+  "preimage": "D27:harbour.source-revision/1.0\nS50:https://github.com/Fourier-Labs-AI/support-copilot49:git-sha1:0123456789abcdef0123456789abcdef01234567",
+  "digest": "sha256:79520355eb30e88bb0c6656008dd301d8f3d7cef6c14a96882557f13f7c512d9"
+}

package/gen-ts/binding-classification-digest-helper.ts

@@ -0,0 +1,44 @@
+/* eslint-disable */
+// Code generated by tools/gen/gen.mjs from schema/*.json. DO NOT EDIT.
+
+import { createHash } from 'node:crypto';
+import type { BindingClassificationSubject } from './binding-classification-subject.js';
+
+const domain = 'harbour.binding-classification-subject/1.0';
+const token = (value: string): string => Buffer.byteLength(value, 'utf8') + ':' + value;
+const record = (tag: string, values: string[]): string => tag + values.map(token).join('');
+
+/** Exact source-revision digest preimage shared by the producer and DCP. */
+export function sourceRevisionPreimage(sourceRef: string, sourceRevision: string): string { return [record('D', ['harbour.source-revision/1.0']), record('S', [sourceRef, sourceRevision])].join('\n'); }
+
+export function computeSourceRevisionDigest(sourceRef: string, sourceRevision: string): string { return 'sha256:' + createHash('sha256').update(sourceRevisionPreimage(sourceRef, sourceRevision), 'utf8').digest('hex'); }
+
+/** Rejects an unknown or provider-mismatched requested AI mapping. JSON Schema owns field presence and bounds. */
+export function assertBindingClassificationMappings(input: BindingClassificationSubject): void {
+  if (input.sourceRevisionDigest !== computeSourceRevisionDigest(input.sourceRef, input.sourceRevision)) throw new Error('sourceRevisionDigest mismatch');
+  for (const [name, entry] of Object.entries(input.classifications)) {
+    if (entry.kind !== 'provider_credential') continue;
+    const mapping = entry.requestedAiMappingId ? input.requestedAiMappings[entry.requestedAiMappingId] : undefined;
+    if (!mapping) throw new Error('unknown requestedAiMappingId for ' + name);
+    if (mapping.providerId !== entry.providerId) throw new Error('providerId mismatch for ' + name);
+  }
+}
+
+/** Proves the subject classifies every declared binding exactly once and no undeclared name. */
+export function assertBindingClassificationCoverage(input: BindingClassificationSubject, bindingNames: readonly string[]): void {
+  const expected = [...bindingNames].sort();
+  if (new Set(expected).size !== expected.length) throw new Error('duplicate declared binding name');
+  const actual = Object.keys(input.classifications).sort();
+  if (expected.length !== actual.length || expected.some((name, index) => name !== actual[index])) throw new Error('binding classification coverage mismatch');
+}
+
+/** Exact UTF-8 length-prefixed preimage. Maps are sorted by key; classificationDigest is excluded. */
+export function bindingClassificationPreimage(input: BindingClassificationSubject): string {
+  assertBindingClassificationMappings(input);
+  const rows = [record('D', [domain]), record('H', [input.schema, input.status, input.tenantId, input.appId, input.environment, input.sourceRef, input.sourceRevision, input.sourceRevisionDigest, input.classifierRevision])];
+  for (const name of Object.keys(input.classifications).sort()) { const entry = input.classifications[name]!; rows.push(record('C', [name, entry.kind, entry.confidence, entry.providerId ?? '', entry.category ?? '', entry.requestedAiMappingId ?? ''])); }
+  for (const mappingId of Object.keys(input.requestedAiMappings).sort()) { const mapping = input.requestedAiMappings[mappingId]!; rows.push(record('M', [mappingId, mapping.mappingVersion, mapping.providerId])); }
+  return rows.join('\n');
+}
+
+export function computeBindingClassificationDigest(input: BindingClassificationSubject): string { return 'sha256:' + createHash('sha256').update(bindingClassificationPreimage(input), 'utf8').digest('hex'); }

package/gen-ts/binding-classification-subject.ts

@@ -0,0 +1,60 @@
+/* eslint-disable */
+// Code generated by tools/gen/gen.mjs from schema/*.json. DO NOT EDIT.
+
+export type BindingClassificationIdentifier = string;
+/**
+ * Provider-neutral, normalized and credential-free source repository reference. Current GitHub HTTPS references and future SCM adapters use the same safe hierarchical grammar; userinfo, ports, percent encoding, query strings and fragments are unrepresentable.
+ */
+export type BindingClassificationSourceRef = string;
+/**
+ * Provider-neutral exact revision identifier expressed as algorithm:value. Current Git adapters use git-sha1:<40 lowercase hex>; another SCM or Git hash algorithm does not require a shape change.
+ */
+export type BindingClassificationSourceRevision = string;
+export type BindingClassificationDigest = string;
+export type BindingClassificationEntry = {
+  kind: 'configuration' | 'secret' | 'provider_credential';
+  confidence: 'high' | 'low';
+  providerId?: BindingClassificationProviderId;
+  category?: BindingClassificationCredentialCategory;
+  requestedAiMappingId?: BindingClassificationIdentifier;
+};
+export type BindingClassificationProviderId = 'openai' | 'anthropic' | 'gemini' | 'openrouter';
+/**
+ * Closed current credential category. Add a reviewed contract version before supporting another credential mechanism.
+ */
+export type BindingClassificationCredentialCategory = 'api_key';
+
+/**
+ * Complete, immutable and value-free classification of the exact declared environment-binding names for one provider-neutral normalized source revision before DCP allocates a version. The caller never guesses a versionId. DCP validates this subject, allocates the sole versionId and chains classificationDigest into separately persisted SanitizedBindingEvidence; it must never relabel this source-bound evidence.
+ */
+export interface BindingClassificationSubject {
+  schema: 'harbour.binding-classification-subject/1.0';
+  /**
+   * Partial or unavailable classification cannot be represented as an admissible subject.
+   */
+  status: 'COMPLETE';
+  tenantId: BindingClassificationIdentifier;
+  appId: BindingClassificationIdentifier;
+  environment: 'preview' | 'prod';
+  sourceRef: BindingClassificationSourceRef;
+  sourceRevision: BindingClassificationSourceRevision;
+  sourceRevisionDigest: BindingClassificationDigest;
+  classifierRevision: string;
+  /**
+   * Exact classification set keyed by every declared environment-binding name. Object keys make missing duplication tricks and two classifications for one name unrepresentable. Literal values and secret references are intentionally unrepresentable. DCP additionally requires these keys to equal the names in the request's environmentBindings before allocation.
+   */
+  classifications: {
+    [k: string]: BindingClassificationEntry;
+  };
+  /**
+   * Exact set keyed by requested AI mapping ID of supported mappings intended to own provider-client credentials for this source revision. This is pre-PLAN request evidence, not a claim that enforcement already exists. Provider-credential classifications reference one of these exact mapping IDs.
+   */
+  requestedAiMappings: {
+    [k: string]: BindingClassificationAiMapping;
+  };
+  classificationDigest: BindingClassificationDigest;
+}
+export interface BindingClassificationAiMapping {
+  mappingVersion: string;
+  providerId: BindingClassificationProviderId;
+}

package/gen-ts/contract-release.ts

@@ -1,10 +1,10 @@
 /* eslint-disable */
 // Code generated by tools/gen/gen.mjs from schema/*.json. DO NOT EDIT.
 
-export const ContractRepositoryVersion = "0.9.0.0" as const;
-export const ContractPublishVersion = "0.9.0" as const;
-export const ContractPublishTag = "v0.9.0" as const;
-export const ContractSchemasDigest = "sha256:df73090b9fbbac8a39d0ec92e929f4d687bd7920de583fb2463bf8570dc68ebb" as const;
-export const ContractAiFixturesDigest = "sha256:180a5f30cf0b6d93fa4c812a217d2365ffe22ac54d11626e71f8072fcf8f67c6" as const;
-export const ContractGeneratedGoDigest = "sha256:be376911aec8ee6359a38fdafebf343ce157255e19c544617b7bcccd4329e5de" as const;
-export const ContractGeneratedTypeScriptDigest = "sha256:857288e60b476b42dce0304ec05aff6af1f2719278959ed03740ef88af5e736b" as const;
+export const ContractRepositoryVersion = "0.10.0.0" as const;
+export const ContractPublishVersion = "0.10.0" as const;
+export const ContractPublishTag = "v0.10.0" as const;
+export const ContractSchemasDigest = "sha256:e22fd6329b9064a3d653dbc6bc3ee0c2033ee6d8d279f06532a355c9285aa7fe" as const;
+export const ContractAiFixturesDigest = "sha256:8355039f14457087d36aee52ae1a0a93096bf12f34bd8af0d948c605b6dff226" as const;
+export const ContractGeneratedGoDigest = "sha256:d1a57e9b7b414bc239af4dd897c444bfac08e3bfbb24426d525faad6878d6a26" as const;
+export const ContractGeneratedTypeScriptDigest = "sha256:e455c76468808b1191a3d2d774786bb18dc435785d9fa31a559f6b93f3e160c9" as const;

package/gen-ts/deploy-request.ts

@@ -21,6 +21,16 @@ export type DeployRequestEnvironmentBinding = {
 export type DeployRequestEnvironmentBinding1 = {
   [k: string]: unknown;
 };
+type BindingClassificationEntry = {
+  kind: 'configuration' | 'secret' | 'provider_credential';
+  confidence: 'high' | 'low';
+  providerId?: 'openai' | 'anthropic' | 'gemini' | 'openrouter';
+  /**
+   * Closed current credential category. Add a reviewed contract version before supporting another credential mechanism.
+   */
+  category?: 'api_key';
+  requestedAiMappingId?: string;
+};
 
 /**
  * JSON body for POST /v1/tenants/{tenant}/apps/{app}/deployments. tenant and app come from path parameters and are not body fields. The preview MVP requires environment=preview. Every accepted POST is a new deployment intent; idempotencyKey is retained only as request correlation.
@@ -44,6 +54,7 @@ export interface DeployRequest {
    */
   idempotencyKey?: string;
   environmentBindings?: DeployRequestEnvironmentBindings;
+  bindingClassification: BindingClassificationSubject;
 }
 export interface DeployRequestSource {
   /**
@@ -64,3 +75,43 @@ export interface DeployRequestEnvironmentBindings {
    */
   bindings: DeployRequestEnvironmentBinding[];
 }
+/**
+ * Complete pre-allocation, value-free binding-name classification. DCP verifies its tenant/app/environment/source identity and exact name coverage before minting the versionId.
+ */
+interface BindingClassificationSubject {
+  schema: 'harbour.binding-classification-subject/1.0';
+  /**
+   * Partial or unavailable classification cannot be represented as an admissible subject.
+   */
+  status: 'COMPLETE';
+  tenantId: string;
+  appId: string;
+  environment: 'preview' | 'prod';
+  /**
+   * Provider-neutral, normalized and credential-free source repository reference. Current GitHub HTTPS references and future SCM adapters use the same safe hierarchical grammar; userinfo, ports, percent encoding, query strings and fragments are unrepresentable.
+   */
+  sourceRef: string;
+  /**
+   * Provider-neutral exact revision identifier expressed as algorithm:value. Current Git adapters use git-sha1:<40 lowercase hex>; another SCM or Git hash algorithm does not require a shape change.
+   */
+  sourceRevision: string;
+  sourceRevisionDigest: string;
+  classifierRevision: string;
+  /**
+   * Exact classification set keyed by every declared environment-binding name. Object keys make missing duplication tricks and two classifications for one name unrepresentable. Literal values and secret references are intentionally unrepresentable. DCP additionally requires these keys to equal the names in the request's environmentBindings before allocation.
+   */
+  classifications: {
+    [k: string]: BindingClassificationEntry;
+  };
+  /**
+   * Exact set keyed by requested AI mapping ID of supported mappings intended to own provider-client credentials for this source revision. This is pre-PLAN request evidence, not a claim that enforcement already exists. Provider-credential classifications reference one of these exact mapping IDs.
+   */
+  requestedAiMappings: {
+    [k: string]: BindingClassificationAiMapping;
+  };
+  classificationDigest: string;
+}
+interface BindingClassificationAiMapping {
+  mappingVersion: string;
+  providerId: 'openai' | 'anthropic' | 'gemini' | 'openrouter';
+}

package/gen-ts/deploy-response.ts

@@ -17,6 +17,14 @@ export interface DeployResponse {
   app: string;
   environment: 'preview';
   status: 'QUEUED';
+  /**
+   * Digest of the validated pre-allocation BindingClassificationSubject.
+   */
+  classificationDigest: string;
+  /**
+   * Digest of the exact version-bound SanitizedBindingEvidence persisted atomically before this response.
+   */
+  sanitizedBindingDigest: string;
   acceptedAt: string;
   /**
    * Relative URL for exact-version Status. The versionId path segment is URL encoded.

package/gen-ts/index.ts

@@ -23,6 +23,8 @@ export * from './ai-transform-result.js';
 export * from './ai-verification-evidence.js';
 export * from './api-error-response.js';
 export * from './artifact-contract.js';
+export * from './binding-classification-digest-helper.js';
+export * from './binding-classification-subject.js';
 export * from './contract-release.js';
 export * from './data-dependency.js';
 export * from './data-grant.js';
@@ -41,6 +43,8 @@ export * from './error-envelope.js';
 export * from './kvs-routing-entry.js';
 export * from './promotion-request.js';
 export * from './promotion-response.js';
+export * from './sanitized-binding-digest-helper.js';
+export * from './sanitized-binding-evidence.js';
 export * from './secret-reference.js';
 export * from './transform-report.js';
 export * from './version-state-machine.js';

package/gen-ts/promotion-request.ts

@@ -1,6 +1,17 @@
 /* eslint-disable */
 // Code generated by tools/gen/gen.mjs from schema/*.json. DO NOT EDIT.
 
+type BindingClassificationEntry = {
+  kind: 'configuration' | 'secret' | 'provider_credential';
+  confidence: 'high' | 'low';
+  providerId?: 'openai' | 'anthropic' | 'gemini' | 'openrouter';
+  /**
+   * Closed current credential category. Add a reviewed contract version before supporting another credential mechanism.
+   */
+  category?: 'api_key';
+  requestedAiMappingId?: string;
+};
+
 /**
  * JSON body for POST /v1/tenants/{tenant}/apps/{app}/promotions. Repository identity is loaded from stored application and preview records, not supplied by the caller.
  */
@@ -18,6 +29,7 @@ export interface PromotionRequest {
    */
   idempotencyKey: string;
   environmentBindings?: PromotionRequestEnvironmentBindings;
+  bindingClassification: BindingClassificationSubject;
 }
 /**
  * Optional secret bindings for the production version. Additive: promotions without it remain valid, and a deployment plane that ignores the field behaves exactly as before. Named environmentBindings to match deploy-request.schema.json, whose preview counterpart this mirrors.
@@ -41,3 +53,43 @@ export interface PromotionRequestSecretBinding {
    */
   secretRef: string;
 }
+/**
+ * Complete pre-allocation, value-free classification for the exact production source revision and declared production binding names. It intentionally has no production versionId; DCP allocates that identity atomically.
+ */
+interface BindingClassificationSubject {
+  schema: 'harbour.binding-classification-subject/1.0';
+  /**
+   * Partial or unavailable classification cannot be represented as an admissible subject.
+   */
+  status: 'COMPLETE';
+  tenantId: string;
+  appId: string;
+  environment: 'preview' | 'prod';
+  /**
+   * Provider-neutral, normalized and credential-free source repository reference. Current GitHub HTTPS references and future SCM adapters use the same safe hierarchical grammar; userinfo, ports, percent encoding, query strings and fragments are unrepresentable.
+   */
+  sourceRef: string;
+  /**
+   * Provider-neutral exact revision identifier expressed as algorithm:value. Current Git adapters use git-sha1:<40 lowercase hex>; another SCM or Git hash algorithm does not require a shape change.
+   */
+  sourceRevision: string;
+  sourceRevisionDigest: string;
+  classifierRevision: string;
+  /**
+   * Exact classification set keyed by every declared environment-binding name. Object keys make missing duplication tricks and two classifications for one name unrepresentable. Literal values and secret references are intentionally unrepresentable. DCP additionally requires these keys to equal the names in the request's environmentBindings before allocation.
+   */
+  classifications: {
+    [k: string]: BindingClassificationEntry;
+  };
+  /**
+   * Exact set keyed by requested AI mapping ID of supported mappings intended to own provider-client credentials for this source revision. This is pre-PLAN request evidence, not a claim that enforcement already exists. Provider-credential classifications reference one of these exact mapping IDs.
+   */
+  requestedAiMappings: {
+    [k: string]: BindingClassificationAiMapping;
+  };
+  classificationDigest: string;
+}
+interface BindingClassificationAiMapping {
+  mappingVersion: string;
+  providerId: 'openai' | 'anthropic' | 'gemini' | 'openrouter';
+}

package/gen-ts/promotion-response.ts

@@ -15,6 +15,14 @@ export interface PromotionResponse {
   app: string;
   environment: 'prod';
   status: 'QUEUED';
+  /**
+   * Digest of the validated production BindingClassificationSubject.
+   */
+  classificationDigest: string;
+  /**
+   * Digest of the exact production-version SanitizedBindingEvidence persisted atomically before this response.
+   */
+  sanitizedBindingDigest: string;
   acceptedAt: string;
   statusUrl: string;
 }

package/gen-ts/sanitized-binding-digest-helper.ts

@@ -0,0 +1,33 @@
+/* eslint-disable */
+// Code generated by tools/gen/gen.mjs from schema/*.json. DO NOT EDIT.
+
+import { createHash } from 'node:crypto';
+import type { BindingClassificationSubject } from './binding-classification-subject.js';
+import type { SanitizedBindingEvidence } from './sanitized-binding-evidence.js';
+
+const domain = 'harbour.sanitized-binding-evidence/1.0';
+const token = (value: string): string => Buffer.byteLength(value, 'utf8') + ':' + value;
+const record = (tag: string, values: string[]): string => tag + values.map(token).join('');
+
+function classificationDigestForReceipt(input: BindingClassificationSubject): string { const sourcePreimage = [record('D', ['harbour.source-revision/1.0']), record('S', [input.sourceRef, input.sourceRevision])].join('\n'); if (input.sourceRevisionDigest !== 'sha256:' + createHash('sha256').update(sourcePreimage, 'utf8').digest('hex')) throw new Error('sourceRevisionDigest mismatch'); const rows = [record('D', ['harbour.binding-classification-subject/1.0']), record('H', [input.schema, input.status, input.tenantId, input.appId, input.environment, input.sourceRef, input.sourceRevision, input.sourceRevisionDigest, input.classifierRevision])]; for (const name of Object.keys(input.classifications).sort()) { const entry = input.classifications[name]!; const mapping = entry.requestedAiMappingId ? input.requestedAiMappings[entry.requestedAiMappingId] : undefined; if (entry.kind === 'provider_credential' && (!mapping || mapping.providerId !== entry.providerId)) throw new Error('requested AI mapping mismatch for ' + name); rows.push(record('C', [name, entry.kind, entry.confidence, entry.providerId ?? '', entry.category ?? '', entry.requestedAiMappingId ?? ''])); } for (const mappingId of Object.keys(input.requestedAiMappings).sort()) { const mapping = input.requestedAiMappings[mappingId]!; rows.push(record('M', [mappingId, mapping.mappingVersion, mapping.providerId])); } return 'sha256:' + createHash('sha256').update(rows.join('\n'), 'utf8').digest('hex'); }
+
+/** Exact UTF-8 length-prefixed preimage. Maps are sorted by key; sanitizedBindingDigest is excluded. */
+export function sanitizedBindingPreimage(input: SanitizedBindingEvidence): string {
+  const rows = [record('D', [domain]), record('H', [input.schema, input.tenantId, input.appId, input.environment, input.versionId, input.sourceRef, input.sourceRevision, input.sourceRevisionDigest, input.classificationDigest])];
+  for (const name of Object.keys(input.bindings).sort()) { const binding = input.bindings[name]!; if (binding.kind === 'configuration' && binding.value === undefined) throw new Error('configuration value missing for ' + name); if (binding.kind === 'secret' && binding.secretRef === undefined) throw new Error('secretRef missing for ' + name); rows.push(record('B', [name, binding.kind, binding.value ?? '', binding.secretRef ?? ''])); }
+  for (const mappingId of Object.keys(input.requiredAiMappings).sort()) { const mapping = input.requiredAiMappings[mappingId]!; rows.push(record('M', [mappingId, mapping.mappingVersion, mapping.providerId])); }
+  return rows.join('\n');
+}
+
+export function computeSanitizedBindingDigest(input: SanitizedBindingEvidence): string { return 'sha256:' + createHash('sha256').update(sanitizedBindingPreimage(input), 'utf8').digest('hex'); }
+
+/** Verifies the atomic allocation receipt cannot relabel source/classification/mappings or retain a provider credential. */
+export function assertSanitizedBindingEvidence(subject: BindingClassificationSubject, evidence: SanitizedBindingEvidence, allocatedVersionId: string): void {
+  for (const field of ['tenantId', 'appId', 'environment', 'sourceRef', 'sourceRevision', 'sourceRevisionDigest'] as const) if (subject[field] !== evidence[field]) throw new Error(field + ' mismatch');
+  if (evidence.versionId !== allocatedVersionId) throw new Error('versionId mismatch');
+  if (subject.classificationDigest !== classificationDigestForReceipt(subject) || evidence.classificationDigest !== subject.classificationDigest) throw new Error('classificationDigest mismatch');
+  const requested = Object.keys(subject.requestedAiMappings).sort(); const required = Object.keys(evidence.requiredAiMappings).sort(); if (requested.length !== required.length || requested.some((id, index) => { const a = subject.requestedAiMappings[id]!; const b = evidence.requiredAiMappings[id]; return id !== required[index] || !b || a.mappingVersion !== b.mappingVersion || a.providerId !== b.providerId; })) throw new Error('requiredAiMappings mismatch');
+  const expectedNames = Object.keys(subject.classifications).filter(name => subject.classifications[name]!.kind !== 'provider_credential').sort(); const actualNames = Object.keys(evidence.bindings).sort(); if (expectedNames.length !== actualNames.length || expectedNames.some((name, index) => name !== actualNames[index])) throw new Error('sanitized binding coverage mismatch');
+  for (const name of expectedNames) if (subject.classifications[name]!.kind !== evidence.bindings[name]!.kind) throw new Error('sanitized binding kind mismatch for ' + name);
+  if (evidence.sanitizedBindingDigest !== computeSanitizedBindingDigest(evidence)) throw new Error('sanitizedBindingDigest mismatch');
+}

package/gen-ts/sanitized-binding-evidence.ts

@@ -0,0 +1,51 @@
+/* eslint-disable */
+// Code generated by tools/gen/gen.mjs from schema/*.json. DO NOT EDIT.
+
+export type SanitizedBindingIdentifier = string;
+export type SanitizedBindingSourceRef = string;
+export type SanitizedBindingSourceRevision = string;
+export type SanitizedBindingDigest = string;
+export type SanitizedRuntimeBinding = {
+  kind: 'configuration' | 'secret';
+  /**
+   * Approved non-secret configuration literal. Provider-credential values are never approved or persisted here.
+   */
+  value?: string;
+  /**
+   * Value-free app-secret reference; tenant integration and provider credential references are outside this contract.
+   */
+  secretRef?: string;
+};
+export type SanitizedBindingProviderId = 'openai' | 'anthropic' | 'gemini' | 'openrouter';
+
+/**
+ * Immutable DCP allocation receipt and sanitized runtime-binding set for one exact allocated version and normalized source revision. DCP persists this evidence atomically with version admission before publish or provisioning. classificationDigest chains to the caller's pre-allocation BindingClassificationSubject; bindings contain only approved configuration or app-secret bindings and never an AI-mapping-owned provider credential.
+ */
+export interface SanitizedBindingEvidence {
+  schema: 'harbour.sanitized-binding-evidence/1.0';
+  tenantId: SanitizedBindingIdentifier;
+  appId: SanitizedBindingIdentifier;
+  environment: 'preview' | 'prod';
+  versionId: string;
+  sourceRef: SanitizedBindingSourceRef;
+  sourceRevision: SanitizedBindingSourceRevision;
+  sourceRevisionDigest: SanitizedBindingDigest;
+  classificationDigest: SanitizedBindingDigest;
+  /**
+   * Exact approved runtime-binding set keyed by environment name. Object keys make duplicate bindings unrepresentable. A provider_credential kind and rejected binding metadata/value are unrepresentable.
+   */
+  bindings: {
+    [k: string]: SanitizedRuntimeBinding;
+  };
+  /**
+   * DCP-validated supported AI mapping requirements keyed by mapping ID. This records what later PLAN/provisioning milestones must enforce; it does not claim those later controls are already active.
+   */
+  requiredAiMappings: {
+    [k: string]: SanitizedBindingAiMapping;
+  };
+  sanitizedBindingDigest: SanitizedBindingDigest;
+}
+export interface SanitizedBindingAiMapping {
+  mappingVersion: string;
+  providerId: SanitizedBindingProviderId;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fourier-labs/harbour-contracts",
-  "version": "0.9.0",
+  "version": "0.10.0",
   "description": "Single source of truth for every data shape that crosses a boundary between Harbour components.",
   "license": "UNLICENSED",
   "private": false,