@fourier-labs/harbour-contracts 0.90.0 → 0.91.0

package/schema/saas-connection.schema.json

@@ -5,68 +5,187 @@
   "description": "Tenant-wide SaaS connection record (control table sk SAASCONN#<sourceId>, same tenant partition as database sources; alias uniqueness is enforced across both). One connection per tenant and provider: a single bot installation of the platform-owned provider app and a single logical channel map shared by every app environment (grants, requests and user consent links stay per environment). A Gmail connection has neither installation nor channels: user consent is the only step and its one resource is the fixed `inbox` alias. A Basecamp connection (0.76.0, ADR 0022) has no installation either: IT pins the company's Basecamp `account` (chosen from the accounts IT's own Basecamp sign-in belongs to) and maps project aliases to project ids in `channels`; basecamp.project.list runs on the fixed `account` alias. A SharePoint connection (0.78.0, ADR 0024) is shaped the same way: IT pins the company's Microsoft 365 tenant in `account` (the Entra tenant id and the organisation's display name, from IT's own Microsoft sign-in) and maps site aliases to Microsoft Graph site ids (`hostname,siteCollectionGuid,webGuid`) in `channels`; every sharepoint.* operation runs on a site alias. The eight Google Workspace and Microsoft 365 connections (0.86.0, ADR 0032) are Gmail-shaped: user consent only, one connection per provider (calendar, drive, docs, sheets on the Google client; outlook, onedrive, excel, teams on the Microsoft client), no installation. Seven of them carry no `account` and empty `channels`, acting on the signed-in person's own data through one fixed alias; a Teams connection pins the Microsoft 365 tenant in `account` like SharePoint and maps channel aliases to `<teamId>/<channelId>` in `channels`. Contains references, never secrets: installation tokens live under their own token records. The pre-T25 per-environment shape (`clientId`, `clientSecretRef`, `environments`, `installations`) is deprecated: the control plane normalises such a stored record on read and never writes it.",
   "type": "object",
   "additionalProperties": false,
-  "required": ["schema", "tenantId", "sourceId", "kind", "provider", "displayName", "status", "version", "channels", "operations", "developmentPreapproval", "createdAt", "updatedAt"],
+  "required": [
+    "schema",
+    "tenantId",
+    "sourceId",
+    "kind",
+    "provider",
+    "displayName",
+    "status",
+    "version",
+    "channels",
+    "operations",
+    "developmentPreapproval",
+    "createdAt",
+    "updatedAt"
+  ],
   "properties": {
-    "schema": { "type": "string", "const": "harbour.saas-connection/1.0" },
-    "tenantId": { "type": "string", "minLength": 1, "maxLength": 255 },
-    "sourceId": { "$ref": "app-integrations-declaration.schema.json#/definitions/IntegrationAlias" },
-    "kind": { "type": "string", "const": "saas" },
-    "provider": { "$ref": "#/definitions/SaasProvider" },
-    "displayName": { "type": "string", "minLength": 1, "maxLength": 120 },
-    "status": { "$ref": "#/definitions/SaasConnectionStatus" },
-    "version": { "type": "integer", "minimum": 1, "description": "Optimistic-concurrency version; every write is conditional on it." },
-    "installation": { "$ref": "#/definitions/SaasInstallation" },
-    "account": { "$ref": "#/definitions/BasecampAccount" },
+    "schema": {
+      "type": "string",
+      "const": "harbour.saas-connection/1.0"
+    },
+    "tenantId": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 255
+    },
+    "sourceId": {
+      "$ref": "app-integrations-declaration.schema.json#/definitions/IntegrationAlias"
+    },
+    "kind": {
+      "type": "string",
+      "const": "saas"
+    },
+    "provider": {
+      "$ref": "#/definitions/SaasProvider"
+    },
+    "displayName": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 120
+    },
+    "status": {
+      "$ref": "#/definitions/SaasConnectionStatus"
+    },
+    "version": {
+      "type": "integer",
+      "minimum": 1,
+      "description": "Optimistic-concurrency version; every write is conditional on it."
+    },
+    "installation": {
+      "$ref": "#/definitions/SaasInstallation"
+    },
+    "account": {
+      "$ref": "#/definitions/BasecampAccount"
+    },
     "channels": {
       "type": "object",
       "maxProperties": 64,
-      "propertyNames": { "$ref": "app-integrations-declaration.schema.json#/definitions/IntegrationAlias" },
-      "additionalProperties": { "type": "string", "pattern": "^[+A-Za-z0-9][A-Za-z0-9.,_:@!/-]{0,255}$", "description": "A Slack channel id (public, non-archived), a Basecamp project id (digits), a SharePoint site id (0.78.0: the Microsoft Graph composite `hostname,siteCollectionGuid,webGuid`), a phone number (0.82.0: E.164, a leading `+` and digits) or a Teams channel (0.86.0: `<teamId>/<channelId>`, the team's GUID and the channel id `19:...@thread.tacv2`, so the alphabet admits `@`, `!` and `/`)." },
+      "propertyNames": {
+        "$ref": "app-integrations-declaration.schema.json#/definitions/IntegrationAlias"
+      },
+      "additionalProperties": {
+        "type": "string",
+        "pattern": "^[+A-Za-z0-9][A-Za-z0-9.,_:@!/-]{0,255}$",
+        "description": "A Slack channel id (public, non-archived), a Basecamp project id (digits), a SharePoint site id (0.78.0: the Microsoft Graph composite `hostname,siteCollectionGuid,webGuid`), a phone number (0.82.0: E.164, a leading `+` and digits) or a Teams channel (0.86.0: `<teamId>/<channelId>`, the team's GUID and the channel id `19:...@thread.tacv2`, so the alphabet admits `@`, `!` and `/`)."
+      },
       "description": "Logical alias → provider resource id: a Slack channel id, a Basecamp project id, a SharePoint site id, a phone number or a Teams channel. Always empty for Gmail and for the seven personal Google Workspace and Microsoft 365 providers (0.86.0: calendar, drive, docs, sheets, outlook, onedrive, excel), whose one fixed alias governance resolves."
     },
     "operations": {
       "type": "array",
       "minItems": 1,
-      "maxItems": 78,
+      "maxItems": 86,
       "uniqueItems": true,
-      "items": { "$ref": "app-integrations-declaration.schema.json#/definitions/IntegrationOperation" },
-      "not": { "anyOf": [{ "contains": { "const": "warehouse.view.read" } }, { "contains": { "const": "warehouse.table.append" } }] },
+      "items": {
+        "$ref": "app-integrations-declaration.schema.json#/definitions/IntegrationOperation"
+      },
+      "not": {
+        "anyOf": [
+          {
+            "contains": {
+              "const": "warehouse.view.read"
+            }
+          },
+          {
+            "contains": {
+              "const": "warehouse.table.append"
+            }
+          }
+        ]
+      },
       "description": "Operations IT allows apps to request on this connection: the provider's own SaaS operations (Slack: slack.channel.history, slack.message.post, slack.message.update, slack.message.delete, slack.dm.send, slack.user.lookup; Gmail: gmail.thread.list, gmail.thread.read, gmail.message.read, gmail.message.send, gmail.attachment.read; Basecamp (0.76.0): basecamp.project.list, basecamp.todolist.list, basecamp.todo.list, basecamp.todo.create, basecamp.todo.complete, basecamp.message.list, basecamp.message.post, basecamp.comment.list, basecamp.comment.post, basecamp.campfire.post, basecamp.people.list; SharePoint (0.78.0): sharepoint.list.list, sharepoint.item.list, sharepoint.item.create, sharepoint.item.update, sharepoint.drive.list, sharepoint.file.list, sharepoint.file.search, sharepoint.file.read, sharepoint.file.upload; Google Workspace and Microsoft 365 (0.86.0): the calendar.*, drive.*, docs.*, sheets.*, outlook.*, onedrive.*, excel.* and teams.* operations of the connection's provider). Never warehouse.view.read. Phone (0.82.0): phone.sms.list; 0.83.0 adds phone.number.get. Seventy-eight SaaS operations in all since 0.86.0."
     },
     "automaticUserOperations": {
-      "type": "array", "maxItems": 78, "uniqueItems": true,
-      "items": { "$ref": "app-integrations-declaration.schema.json#/definitions/IntegrationOperation" },
-      "not": { "anyOf": [{ "contains": { "const": "warehouse.view.read" } }, { "contains": { "const": "warehouse.table.append" } }, { "contains": { "const": "service.request" } }] },
+      "type": "array",
+      "maxItems": 86,
+      "uniqueItems": true,
+      "items": {
+        "$ref": "app-integrations-declaration.schema.json#/definitions/IntegrationOperation"
+      },
+      "not": {
+        "anyOf": [
+          {
+            "contains": {
+              "const": "warehouse.view.read"
+            }
+          },
+          {
+            "contains": {
+              "const": "warehouse.table.append"
+            }
+          },
+          {
+            "contains": {
+              "const": "service.request"
+            }
+          }
+        ]
+      },
       "description": "Explicit user-mode operations eligible for automatic app access, subject to the connection operation ceiling and personal consent. Empty means review all; absent inherits company defaults or the existing userModeApproval migration rule. Governance validates provider and mode compatibility. Background execution still requires personal background consent, not a separate admin grant."
     },
     "reusableAccess": {
-      "type": "array", "maxItems": 128, "uniqueItems": true,
-      "items": { "$ref": "#/definitions/ReusableSaasAccess" },
+      "type": "array",
+      "maxItems": 128,
+      "uniqueItems": true,
+      "items": {
+        "$ref": "#/definitions/ReusableSaasAccess"
+      },
       "description": "Reusable permissions for admitted builders on explicit shared SaaS resources. Governance checks registered resources, provider/mode compatibility and the connection operation ceiling. Connection version and audit record changes; no per-entry approval metadata."
     },
-    "developmentPreapproval": { "$ref": "#/definitions/DevelopmentPreapproval" },
-    "oauthClient": { "$ref": "#/definitions/SaasOauthClient" },
-    "userModeApproval": { "$ref": "#/definitions/UserModeApproval" },
-    "directMessages": { "$ref": "#/definitions/DirectMessagePolicy" },
-    "externalRecipients": { "$ref": "#/definitions/ExternalRecipientPolicy" },
+    "developmentPreapproval": {
+      "$ref": "#/definitions/DevelopmentPreapproval"
+    },
+    "oauthClient": {
+      "$ref": "#/definitions/SaasOauthClient"
+    },
+    "userModeApproval": {
+      "$ref": "#/definitions/UserModeApproval"
+    },
+    "directMessages": {
+      "$ref": "#/definitions/DirectMessagePolicy"
+    },
+    "externalRecipients": {
+      "$ref": "#/definitions/ExternalRecipientPolicy"
+    },
     "blockedDevelopmentBuilders": {
       "type": "array",
       "maxItems": 256,
       "uniqueItems": true,
-      "items": { "type": "string", "minLength": 1, "maxLength": 255 },
+      "items": {
+        "type": "string",
+        "minLength": 1,
+        "maxLength": 255
+      },
       "description": "Lower-cased builder emails excluded from development preapproval."
     },
     "approvers": {
       "type": "array",
       "maxItems": 20,
       "uniqueItems": true,
-      "items": { "$ref": "integration-execute-request.schema.json#/definitions/EmailAddress" },
+      "items": {
+        "$ref": "integration-execute-request.schema.json#/definitions/EmailAddress"
+      },
       "description": "Lower-cased emails who may approve an app's access requests for this connection, besides tenant admins. Empty or absent means tenant admins only."
     },
-    "startedBy": { "$ref": "#/definitions/StartedBy" },
-    "createdAt": { "type": "string", "format": "date-time" },
-    "updatedAt": { "type": "string", "format": "date-time" },
-    "clientId": { "type": "string", "minLength": 1, "maxLength": 255, "deprecated": true, "description": "Deprecated (pre-T25 tenant-owned provider client). Dropped on read; never written." },
+    "startedBy": {
+      "$ref": "#/definitions/StartedBy"
+    },
+    "createdAt": {
+      "type": "string",
+      "format": "date-time"
+    },
+    "updatedAt": {
+      "type": "string",
+      "format": "date-time"
+    },
+    "clientId": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 255,
+      "deprecated": true,
+      "description": "Deprecated (pre-T25 tenant-owned provider client). Dropped on read; never written."
+    },
     "clientSecretRef": {
       "type": "string",
       "pattern": "^secretref://[A-Za-z0-9][A-Za-z0-9/_.:-]*$",
@@ -80,166 +199,419 @@
       "deprecated": true,
       "description": "Deprecated pre-T25 per-environment mapping. On read the development entry's channels become `channels`; never written.",
       "properties": {
-        "development": { "$ref": "#/definitions/SaasEnvironmentMapping" },
-        "preview": { "$ref": "#/definitions/SaasEnvironmentMapping" },
-        "production": { "$ref": "#/definitions/SaasEnvironmentMapping" }
+        "development": {
+          "$ref": "#/definitions/SaasEnvironmentMapping"
+        },
+        "preview": {
+          "$ref": "#/definitions/SaasEnvironmentMapping"
+        },
+        "production": {
+          "$ref": "#/definitions/SaasEnvironmentMapping"
+        }
       }
     },
     "installations": {
       "type": "object",
-      "propertyNames": { "$ref": "#/definitions/InstallationName" },
-      "additionalProperties": { "$ref": "#/definitions/LegacySaasInstallation" },
+      "propertyNames": {
+        "$ref": "#/definitions/InstallationName"
+      },
+      "additionalProperties": {
+        "$ref": "#/definitions/LegacySaasInstallation"
+      },
       "deprecated": true,
       "description": "Deprecated pre-T25 named installations. On read the `nonprod` entry (or the development mapping's) becomes `installation`; never written."
+    },
+    "region": {
+      "type": "string",
+      "enum": [
+        "us",
+        "in",
+        "eu",
+        "au",
+        "jp",
+        "ca",
+        "sa",
+        "cn",
+        "ae"
+      ],
+      "description": "Zoho data center. Chosen by the connection administrator, never by an app call."
     }
   },
   "definitions": {
     "ReusableSaasAccess": {
-      "type": "object", "additionalProperties": false,
-      "required": ["resource", "mode", "operations"],
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "resource",
+        "mode",
+        "operations"
+      ],
       "properties": {
-        "resource": { "$ref": "app-integrations-declaration.schema.json#/definitions/IntegrationAlias" },
-        "mode": { "$ref": "app-integrations-declaration.schema.json#/definitions/IntegrationIdentityMode" },
+        "resource": {
+          "$ref": "app-integrations-declaration.schema.json#/definitions/IntegrationAlias"
+        },
+        "mode": {
+          "$ref": "app-integrations-declaration.schema.json#/definitions/IntegrationIdentityMode"
+        },
         "operations": {
-          "type": "array", "minItems": 1, "maxItems": 78, "uniqueItems": true,
-          "items": { "$ref": "app-integrations-declaration.schema.json#/definitions/IntegrationOperation" },
-          "not": { "anyOf": [{ "contains": { "const": "warehouse.view.read" } }, { "contains": { "const": "warehouse.table.append" } }, { "contains": { "const": "service.request" } }] }
+          "type": "array",
+          "minItems": 1,
+          "maxItems": 86,
+          "uniqueItems": true,
+          "items": {
+            "$ref": "app-integrations-declaration.schema.json#/definitions/IntegrationOperation"
+          },
+          "not": {
+            "anyOf": [
+              {
+                "contains": {
+                  "const": "warehouse.view.read"
+                }
+              },
+              {
+                "contains": {
+                  "const": "warehouse.table.append"
+                }
+              },
+              {
+                "contains": {
+                  "const": "service.request"
+                }
+              }
+            ]
+          }
         }
       }
     },
     "SaasProvider": {
       "type": "string",
-      "enum": ["slack", "gmail", "basecamp", "sharepoint", "phone", "calendar", "drive", "docs", "sheets", "outlook", "onedrive", "excel", "teams"],
+      "enum": [
+        "slack",
+        "gmail",
+        "basecamp",
+        "sharepoint",
+        "phone",
+        "calendar",
+        "drive",
+        "docs",
+        "sheets",
+        "outlook",
+        "onedrive",
+        "excel",
+        "teams",
+        "zohobooks"
+      ],
       "description": "Slack carries an installation and a channel map; Gmail is user-consent only; Basecamp is user-consent only with an IT-pinned account and a project map in `channels`; SharePoint (0.78.0) is user-consent only, pinned to the company's Microsoft 365 tenant in `account`, with a site map in `channels`. Phone (0.82.0) is app mode only with no installation: the tenant's inbound SMS numbers (E.164) mapped from aliases in `channels`, and the SMS the platform received on them listed by phone.sms.list; since 0.83.0 an app reads the number an alias maps to with phone.number.get. Google Workspace (0.86.0, ADR 0032: calendar, drive, docs, sheets on the Google OAuth client) and Microsoft 365 (outlook, onedrive, excel, teams on the Microsoft client) are user-consent only like Gmail, one connection per provider with its own consent and scopes; the seven personal providers have no `account` and empty `channels` (their one fixed alias is the signed-in person's own calendar, drive, documents, spreadsheets, mailbox or workbooks); teams is pinned to the Microsoft 365 tenant in `account` like SharePoint and maps channel aliases in `channels`."
     },
     "StartedBy": {
       "type": "object",
       "additionalProperties": false,
-      "required": ["email", "at"],
+      "required": [
+        "email",
+        "at"
+      ],
       "description": "Set when a builder's first access request created this connection instead of IT (0.88.0, ADR 0034): who, when, and the app that asked. Such a connection is an ordinary ACTIVE connection whose `userModeApproval` starts as `it`, so development is granted by the development preapproval and production waits for IT's one decision; IT may relax the switch afterwards. Absent on connections IT created.",
       "properties": {
-        "email": { "$ref": "integration-execute-request.schema.json#/definitions/EmailAddress", "description": "The builder's lower-cased company email." },
-        "at": { "type": "string", "format": "date-time" },
-        "appId": { "type": "string", "minLength": 1, "maxLength": 128, "description": "The app whose request created the connection, when known." }
+        "email": {
+          "$ref": "integration-execute-request.schema.json#/definitions/EmailAddress",
+          "description": "The builder's lower-cased company email."
+        },
+        "at": {
+          "type": "string",
+          "format": "date-time"
+        },
+        "appId": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 128,
+          "description": "The app whose request created the connection, when known."
+        }
       }
     },
     "BasecampAccount": {
       "type": "object",
       "additionalProperties": false,
-      "required": ["id", "name"],
+      "required": [
+        "id",
+        "name"
+      ],
       "description": "The pinned provider account (0.76.0, Basecamp; 0.78.0, SharePoint; 0.86.0, Teams — the name keeps its 0.76.0 spelling so consumers need not move): the one account, among those IT's own provider sign-in belongs to, that every user token on this connection must also belong to and that every resource id in `channels` lives in. For Basecamp the account (digits); for SharePoint and Teams the Microsoft 365 tenant (the Entra tenant GUID). Absent until IT chooses it; governance refuses every basecamp.*, sharepoint.* and teams.* call until then. The seven personal Google Workspace and Microsoft 365 providers carry none.",
       "properties": {
-        "id": { "type": "string", "pattern": "^[A-Za-z0-9-]{1,64}$", "description": "The Basecamp account id (digits, the first path segment of the API base URL) or the Microsoft Entra tenant id (a GUID, the `tid` claim)." },
-        "name": { "type": "string", "minLength": 1, "maxLength": 120, "description": "The account's name as the provider shows it (a Basecamp account name, a Microsoft 365 organisation display name), for IT to recognise." }
+        "id": {
+          "type": "string",
+          "pattern": "^[A-Za-z0-9-]{1,64}$",
+          "description": "The Basecamp account id (digits, the first path segment of the API base URL) or the Microsoft Entra tenant id (a GUID, the `tid` claim)."
+        },
+        "name": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 120,
+          "description": "The account's name as the provider shows it (a Basecamp account name, a Microsoft 365 organisation display name), for IT to recognise."
+        }
       }
     },
     "SaasOauthClient": {
       "type": "object",
       "additionalProperties": false,
-      "required": ["clientId", "secretRef", "setAt", "setBy"],
+      "required": [
+        "clientId",
+        "secretRef",
+        "setAt",
+        "setBy"
+      ],
       "description": "The tenant's own OAuth client for this provider (0.71.0; the ADR 0068 follow-up): when present, installation and user consent run through the company's Slack app or Google Cloud project instead of the platform-owned one, so the tenant's IT sees and controls the app in their own admin console. A reference to the secret, never the secret.",
       "properties": {
-        "clientId": { "type": "string", "minLength": 1, "maxLength": 255 },
-        "secretRef": { "type": "string", "pattern": "^secretref://[A-Za-z0-9][A-Za-z0-9/_.:-]*$", "description": "Where the client secret lives." },
-        "setAt": { "type": "string", "format": "date-time" },
-        "setBy": { "type": "string", "minLength": 1, "maxLength": 255, "description": "The IT admin who saved it (lower-cased email)." }
+        "clientId": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 255
+        },
+        "secretRef": {
+          "type": "string",
+          "pattern": "^secretref://[A-Za-z0-9][A-Za-z0-9/_.:-]*$",
+          "description": "Where the client secret lives."
+        },
+        "setAt": {
+          "type": "string",
+          "format": "date-time"
+        },
+        "setBy": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 255,
+          "description": "The IT admin who saved it (lower-cased email)."
+        }
       }
     },
     "UserModeApproval": {
       "type": "string",
-      "enum": ["automatic", "it"],
+      "enum": [
+        "automatic",
+        "it"
+      ],
       "description": "How a user-mode access request on this connection is approved (0.71.0): automatic — the person's own consent is the approval, since the app only ever acts as them; it — an IT admin reviews it like an app-mode request. Absent means it."
     },
     "DirectMessagePolicy": {
       "type": "object",
       "additionalProperties": false,
-      "required": ["allowed", "dailyRecipientCap"],
+      "required": [
+        "allowed",
+        "dailyRecipientCap"
+      ],
       "description": "Whom an app may direct-message through slack.dm.send (0.71.0), set by IT on the connection and enforced by governance on every send.",
       "properties": {
-        "allowed": { "$ref": "#/definitions/DirectMessageAudience" },
-        "channel": { "$ref": "app-integrations-declaration.schema.json#/definitions/IntegrationAlias", "description": "channel_members only: the alias (a key of `channels`) whose current members may be messaged." },
-        "dailyRecipientCap": { "type": "integer", "minimum": 1, "maximum": 1000, "description": "Distinct recipients one app may message per UTC day on this connection; the cap refuses the send that would exceed it." }
+        "allowed": {
+          "$ref": "#/definitions/DirectMessageAudience"
+        },
+        "channel": {
+          "$ref": "app-integrations-declaration.schema.json#/definitions/IntegrationAlias",
+          "description": "channel_members only: the alias (a key of `channels`) whose current members may be messaged."
+        },
+        "dailyRecipientCap": {
+          "type": "integer",
+          "minimum": 1,
+          "maximum": 1000,
+          "description": "Distinct recipients one app may message per UTC day on this connection; the cap refuses the send that would exceed it."
+        }
+      },
+      "if": {
+        "properties": {
+          "allowed": {
+            "const": "channel_members"
+          }
+        }
+      },
+      "then": {
+        "required": [
+          "channel"
+        ]
       },
-      "if": { "properties": { "allowed": { "const": "channel_members" } } },
-      "then": { "required": ["channel"] },
-      "else": { "not": { "required": ["channel"] } }
+      "else": {
+        "not": {
+          "required": [
+            "channel"
+          ]
+        }
+      }
     },
     "DirectMessageAudience": {
       "type": "string",
-      "enum": ["signed_in_person", "channel_members", "anyone"],
+      "enum": [
+        "signed_in_person",
+        "channel_members",
+        "anyone"
+      ],
       "description": "signed_in_person — only the person using the app; channel_members — the members of the named channel; anyone — any workspace member."
     },
     "ExternalRecipientPolicy": {
       "type": "object",
       "additionalProperties": false,
-      "required": ["mode"],
+      "required": [
+        "mode"
+      ],
       "description": "Whether a gmail.message.send may address people outside the company (0.71.0). An external recipient is one whose email domain is not one of the tenant's verified domains.",
       "properties": {
-        "mode": { "$ref": "#/definitions/ExternalRecipientMode" },
+        "mode": {
+          "$ref": "#/definitions/ExternalRecipientMode"
+        },
         "allowedDomains": {
           "type": "array",
           "minItems": 1,
           "maxItems": 50,
           "uniqueItems": true,
-          "items": { "type": "string", "format": "hostname", "maxLength": 253 },
+          "items": {
+            "type": "string",
+            "format": "hostname",
+            "maxLength": 253
+          },
           "description": "allowlist only: the external domains a send may address; a recipient's domain must equal one of them."
         }
       },
-      "if": { "properties": { "mode": { "const": "allowlist" } } },
-      "then": { "required": ["allowedDomains"] },
-      "else": { "not": { "required": ["allowedDomains"] } }
+      "if": {
+        "properties": {
+          "mode": {
+            "const": "allowlist"
+          }
+        }
+      },
+      "then": {
+        "required": [
+          "allowedDomains"
+        ]
+      },
+      "else": {
+        "not": {
+          "required": [
+            "allowedDomains"
+          ]
+        }
+      }
     },
     "ExternalRecipientMode": {
       "type": "string",
-      "enum": ["block", "allowlist", "allow"],
+      "enum": [
+        "block",
+        "allowlist",
+        "allow"
+      ],
       "description": "block — every recipient must be internal (what a new Gmail connection is given; a connection stored without a policy reads as allow); allowlist — internal or in `allowedDomains`; allow — any address."
     },
     "SaasConnectionStatus": {
       "type": "string",
-      "enum": ["ACTIVE", "DISABLED"],
+      "enum": [
+        "ACTIVE",
+        "DISABLED"
+      ],
       "description": "DISABLED stops every app call immediately (details.code CONNECTION_DISABLED)."
     },
     "SaasInstallationStatus": {
       "type": "string",
-      "enum": ["installed", "reconnect_required", "revoked"]
+      "enum": [
+        "installed",
+        "reconnect_required",
+        "revoked"
+      ]
     },
     "SaasInstallation": {
       "type": "object",
       "additionalProperties": false,
-      "required": ["tokenRecordId", "workspaceId", "botUserId", "status", "installedAt"],
+      "required": [
+        "tokenRecordId",
+        "workspaceId",
+        "botUserId",
+        "status",
+        "installedAt"
+      ],
       "description": "The one bot installation of the platform-owned provider app in this tenant's workspace.",
       "properties": {
-        "tokenRecordId": { "type": "string", "minLength": 1, "maxLength": 128 },
-        "workspaceId": { "type": "string", "minLength": 1, "maxLength": 128 },
-        "botUserId": { "type": "string", "maxLength": 128, "description": "Empty only for a legacy record normalised without one." },
-        "status": { "$ref": "#/definitions/SaasInstallationStatus" },
-        "installedAt": { "type": "string", "format": "date-time" },
-        "scopes": { "type": "array", "maxItems": 64, "uniqueItems": true, "items": { "type": "string", "minLength": 1, "maxLength": 64 }, "description": "The bot scopes Slack granted at installation (0.53.0). Absent on installations recorded before it, which therefore lack chat:write.customize: per-app display names need a reinstall." },
-        "botName": { "type": "string", "minLength": 1, "maxLength": 128, "description": "The installed bot user's Slack username as auth.test reported it at installation (0.54.0), e.g. `isomorph_ai` — what a person types after /invite. Absent on installations recorded before it." }
+        "tokenRecordId": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 128
+        },
+        "workspaceId": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 128
+        },
+        "botUserId": {
+          "type": "string",
+          "maxLength": 128,
+          "description": "Empty only for a legacy record normalised without one."
+        },
+        "status": {
+          "$ref": "#/definitions/SaasInstallationStatus"
+        },
+        "installedAt": {
+          "type": "string",
+          "format": "date-time"
+        },
+        "scopes": {
+          "type": "array",
+          "maxItems": 64,
+          "uniqueItems": true,
+          "items": {
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 64
+          },
+          "description": "The bot scopes Slack granted at installation (0.53.0). Absent on installations recorded before it, which therefore lack chat:write.customize: per-app display names need a reinstall."
+        },
+        "botName": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 128,
+          "description": "The installed bot user's Slack username as auth.test reported it at installation (0.54.0), e.g. `isomorph_ai` — what a person types after /invite. Absent on installations recorded before it."
+        }
       }
     },
     "DevelopmentPreapproval": {
       "type": "object",
       "additionalProperties": false,
-      "required": ["enabled", "hours"],
+      "required": [
+        "enabled",
+        "hours"
+      ],
       "properties": {
-        "enabled": { "type": "boolean", "description": "Auto-approve development requests within the allowlist." },
-        "hours": { "type": "integer", "minimum": 1, "maximum": 168, "description": "Development grant duration; default 24." }
+        "enabled": {
+          "type": "boolean",
+          "description": "Auto-approve development requests within the allowlist."
+        },
+        "hours": {
+          "type": "integer",
+          "minimum": 1,
+          "maximum": 168,
+          "description": "Development grant duration; default 24."
+        }
       }
     },
-    "InstallationName": { "type": "string", "pattern": "^[a-z][a-z0-9_-]{0,62}$", "deprecated": true },
+    "InstallationName": {
+      "type": "string",
+      "pattern": "^[a-z][a-z0-9_-]{0,62}$",
+      "deprecated": true
+    },
     "SaasEnvironmentMapping": {
       "type": "object",
       "additionalProperties": false,
-      "required": ["installation", "channels"],
+      "required": [
+        "installation",
+        "channels"
+      ],
       "deprecated": true,
       "properties": {
-        "installation": { "$ref": "#/definitions/InstallationName" },
+        "installation": {
+          "$ref": "#/definitions/InstallationName"
+        },
         "channels": {
           "type": "object",
           "maxProperties": 64,
-          "propertyNames": { "$ref": "app-integrations-declaration.schema.json#/definitions/IntegrationAlias" },
-          "additionalProperties": { "type": "string", "pattern": "^[A-Z0-9]{1,32}$" }
+          "propertyNames": {
+            "$ref": "app-integrations-declaration.schema.json#/definitions/IntegrationAlias"
+          },
+          "additionalProperties": {
+            "type": "string",
+            "pattern": "^[A-Z0-9]{1,32}$"
+          }
         }
       }
     },
@@ -248,10 +620,29 @@
       "additionalProperties": false,
       "deprecated": true,
       "properties": {
-        "tokenRecordId": { "type": "string", "minLength": 1, "maxLength": 128 },
-        "workspaceId": { "type": "string", "minLength": 1, "maxLength": 128 },
-        "botUserId": { "type": "string", "minLength": 1, "maxLength": 128 },
-        "status": { "type": "string", "enum": ["ACTIVE", "RECONNECT_REQUIRED", "REVOKED"] }
+        "tokenRecordId": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 128
+        },
+        "workspaceId": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 128
+        },
+        "botUserId": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 128
+        },
+        "status": {
+          "type": "string",
+          "enum": [
+            "ACTIVE",
+            "RECONNECT_REQUIRED",
+            "REVOKED"
+          ]
+        }
       }
     }
   },
@@ -265,14 +656,50 @@
       "displayName": "Company Slack",
       "status": "ACTIVE",
       "version": 3,
-      "installation": { "tokenRecordId": "tok_workspace", "workspaceId": "T0WORKSPACE", "botUserId": "U0BOT", "status": "installed", "installedAt": "2026-09-09T08:00:00Z", "scopes": ["channels:read", "chat:write", "chat:write.customize"], "botName": "isomorph_ai" },
-      "channels": { "team-updates": "C0123TEAM" },
-      "operations": ["slack.channel.history", "slack.message.post", "slack.message.update", "slack.message.delete", "slack.dm.send", "slack.user.lookup"],
-      "developmentPreapproval": { "enabled": true, "hours": 24 },
-      "oauthClient": { "clientId": "1234567890.1234567890", "secretRef": "secretref://tenant/fourier/saas/company-slack/oauth-client", "setAt": "2026-10-01T08:00:00Z", "setBy": "it-admin@example.com" },
+      "installation": {
+        "tokenRecordId": "tok_workspace",
+        "workspaceId": "T0WORKSPACE",
+        "botUserId": "U0BOT",
+        "status": "installed",
+        "installedAt": "2026-09-09T08:00:00Z",
+        "scopes": [
+          "channels:read",
+          "chat:write",
+          "chat:write.customize"
+        ],
+        "botName": "isomorph_ai"
+      },
+      "channels": {
+        "team-updates": "C0123TEAM"
+      },
+      "operations": [
+        "slack.channel.history",
+        "slack.message.post",
+        "slack.message.update",
+        "slack.message.delete",
+        "slack.dm.send",
+        "slack.user.lookup"
+      ],
+      "developmentPreapproval": {
+        "enabled": true,
+        "hours": 24
+      },
+      "oauthClient": {
+        "clientId": "1234567890.1234567890",
+        "secretRef": "secretref://tenant/fourier/saas/company-slack/oauth-client",
+        "setAt": "2026-10-01T08:00:00Z",
+        "setBy": "it-admin@example.com"
+      },
       "userModeApproval": "automatic",
-      "directMessages": { "allowed": "channel_members", "channel": "team-updates", "dailyRecipientCap": 50 },
-      "approvers": ["slack-owner@example.com", "it-lead@example.com"],
+      "directMessages": {
+        "allowed": "channel_members",
+        "channel": "team-updates",
+        "dailyRecipientCap": 50
+      },
+      "approvers": [
+        "slack-owner@example.com",
+        "it-lead@example.com"
+      ],
       "createdAt": "2026-09-09T08:00:00Z",
       "updatedAt": "2026-09-09T08:00:00Z"
     },
@@ -286,10 +713,26 @@
       "status": "ACTIVE",
       "version": 1,
       "channels": {},
-      "operations": ["gmail.thread.list", "gmail.thread.read", "gmail.message.read", "gmail.message.send", "gmail.attachment.read"],
-      "developmentPreapproval": { "enabled": false, "hours": 24 },
-      "blockedDevelopmentBuilders": ["contractor@example.com"],
-      "externalRecipients": { "mode": "allowlist", "allowedDomains": ["partner.example.com"] },
+      "operations": [
+        "gmail.thread.list",
+        "gmail.thread.read",
+        "gmail.message.read",
+        "gmail.message.send",
+        "gmail.attachment.read"
+      ],
+      "developmentPreapproval": {
+        "enabled": false,
+        "hours": 24
+      },
+      "blockedDevelopmentBuilders": [
+        "contractor@example.com"
+      ],
+      "externalRecipients": {
+        "mode": "allowlist",
+        "allowedDomains": [
+          "partner.example.com"
+        ]
+      },
       "createdAt": "2026-09-11T08:00:00Z",
       "updatedAt": "2026-09-11T08:00:00Z"
     },
@@ -302,10 +745,30 @@
       "displayName": "Company Basecamp",
       "status": "ACTIVE",
       "version": 2,
-      "account": { "id": "195539477", "name": "Fourier Labs" },
-      "channels": { "launch": "2085958499" },
-      "operations": ["basecamp.project.list", "basecamp.todolist.list", "basecamp.todo.list", "basecamp.todo.create", "basecamp.todo.complete", "basecamp.message.list", "basecamp.message.post", "basecamp.comment.list", "basecamp.comment.post", "basecamp.campfire.post", "basecamp.people.list"],
-      "developmentPreapproval": { "enabled": true, "hours": 24 },
+      "account": {
+        "id": "195539477",
+        "name": "Fourier Labs"
+      },
+      "channels": {
+        "launch": "2085958499"
+      },
+      "operations": [
+        "basecamp.project.list",
+        "basecamp.todolist.list",
+        "basecamp.todo.list",
+        "basecamp.todo.create",
+        "basecamp.todo.complete",
+        "basecamp.message.list",
+        "basecamp.message.post",
+        "basecamp.comment.list",
+        "basecamp.comment.post",
+        "basecamp.campfire.post",
+        "basecamp.people.list"
+      ],
+      "developmentPreapproval": {
+        "enabled": true,
+        "hours": 24
+      },
       "userModeApproval": "automatic",
       "createdAt": "2026-10-11T08:00:00Z",
       "updatedAt": "2026-10-11T08:00:00Z"
@@ -319,10 +782,28 @@
       "displayName": "Company SharePoint",
       "status": "ACTIVE",
       "version": 2,
-      "account": { "id": "3f2c9b1e-7d4a-4c6b-9e8f-0a1b2c3d4e5f", "name": "Fourier Labs" },
-      "channels": { "intranet": "fourier.sharepoint.com,8a1c6f2e-3b4d-4e5f-9a0b-1c2d3e4f5a6b,0f1e2d3c-4b5a-4968-8776-655443322110" },
-      "operations": ["sharepoint.list.list", "sharepoint.item.list", "sharepoint.item.create", "sharepoint.item.update", "sharepoint.drive.list", "sharepoint.file.list", "sharepoint.file.search", "sharepoint.file.read", "sharepoint.file.upload"],
-      "developmentPreapproval": { "enabled": true, "hours": 24 },
+      "account": {
+        "id": "3f2c9b1e-7d4a-4c6b-9e8f-0a1b2c3d4e5f",
+        "name": "Fourier Labs"
+      },
+      "channels": {
+        "intranet": "fourier.sharepoint.com,8a1c6f2e-3b4d-4e5f-9a0b-1c2d3e4f5a6b,0f1e2d3c-4b5a-4968-8776-655443322110"
+      },
+      "operations": [
+        "sharepoint.list.list",
+        "sharepoint.item.list",
+        "sharepoint.item.create",
+        "sharepoint.item.update",
+        "sharepoint.drive.list",
+        "sharepoint.file.list",
+        "sharepoint.file.search",
+        "sharepoint.file.read",
+        "sharepoint.file.upload"
+      ],
+      "developmentPreapproval": {
+        "enabled": true,
+        "hours": 24
+      },
       "userModeApproval": "automatic",
       "createdAt": "2026-10-11T08:00:00Z",
       "updatedAt": "2026-10-11T08:00:00Z"
@@ -336,9 +817,17 @@
       "displayName": "Agent phone lines",
       "status": "ACTIVE",
       "version": 1,
-      "channels": { "gstn-line": "+919876543210" },
-      "operations": ["phone.sms.list", "phone.number.get"],
-      "developmentPreapproval": { "enabled": false, "hours": 24 },
+      "channels": {
+        "gstn-line": "+919876543210"
+      },
+      "operations": [
+        "phone.sms.list",
+        "phone.number.get"
+      ],
+      "developmentPreapproval": {
+        "enabled": false,
+        "hours": 24
+      },
       "createdAt": "2026-10-17T08:00:00Z",
       "updatedAt": "2026-10-17T08:00:00Z"
     },
@@ -352,8 +841,18 @@
       "status": "ACTIVE",
       "version": 1,
       "channels": {},
-      "operations": ["calendar.calendar.list", "calendar.event.list", "calendar.event.read", "calendar.event.create", "calendar.event.update", "calendar.event.cancel"],
-      "developmentPreapproval": { "enabled": true, "hours": 24 },
+      "operations": [
+        "calendar.calendar.list",
+        "calendar.event.list",
+        "calendar.event.read",
+        "calendar.event.create",
+        "calendar.event.update",
+        "calendar.event.cancel"
+      ],
+      "developmentPreapproval": {
+        "enabled": true,
+        "hours": 24
+      },
       "userModeApproval": "automatic",
       "createdAt": "2026-10-17T08:00:00Z",
       "updatedAt": "2026-10-17T08:00:00Z"
@@ -368,9 +867,23 @@
       "status": "ACTIVE",
       "version": 2,
       "channels": {},
-      "operations": ["drive.file.list", "drive.file.search", "drive.file.read", "drive.file.upload", "drive.folder.create"],
-      "developmentPreapproval": { "enabled": true, "hours": 24 },
-      "oauthClient": { "clientId": "987334312340-abc123def456.apps.googleusercontent.com", "secretRef": "secretref://tenant/fourier/saas/company-drive/oauth-client", "setAt": "2026-10-17T08:00:00Z", "setBy": "it-admin@example.com" },
+      "operations": [
+        "drive.file.list",
+        "drive.file.search",
+        "drive.file.read",
+        "drive.file.upload",
+        "drive.folder.create"
+      ],
+      "developmentPreapproval": {
+        "enabled": true,
+        "hours": 24
+      },
+      "oauthClient": {
+        "clientId": "987334312340-abc123def456.apps.googleusercontent.com",
+        "secretRef": "secretref://tenant/fourier/saas/company-drive/oauth-client",
+        "setAt": "2026-10-17T08:00:00Z",
+        "setBy": "it-admin@example.com"
+      },
       "userModeApproval": "it",
       "createdAt": "2026-10-17T08:00:00Z",
       "updatedAt": "2026-10-17T08:00:00Z"
@@ -385,8 +898,16 @@
       "status": "ACTIVE",
       "version": 1,
       "channels": {},
-      "operations": ["docs.document.read", "docs.document.create", "docs.document.append", "docs.text.replace"],
-      "developmentPreapproval": { "enabled": true, "hours": 24 },
+      "operations": [
+        "docs.document.read",
+        "docs.document.create",
+        "docs.document.append",
+        "docs.text.replace"
+      ],
+      "developmentPreapproval": {
+        "enabled": true,
+        "hours": 24
+      },
       "userModeApproval": "automatic",
       "createdAt": "2026-10-17T08:00:00Z",
       "updatedAt": "2026-10-17T08:00:00Z"
@@ -401,10 +922,24 @@
       "status": "ACTIVE",
       "version": 1,
       "channels": {},
-      "operations": ["sheets.spreadsheet.read", "sheets.values.read", "sheets.values.append", "sheets.values.update", "sheets.values.clear", "sheets.spreadsheet.create"],
-      "developmentPreapproval": { "enabled": true, "hours": 24 },
+      "operations": [
+        "sheets.spreadsheet.read",
+        "sheets.values.read",
+        "sheets.values.append",
+        "sheets.values.update",
+        "sheets.values.clear",
+        "sheets.spreadsheet.create"
+      ],
+      "developmentPreapproval": {
+        "enabled": true,
+        "hours": 24
+      },
       "userModeApproval": "it",
-      "startedBy": { "email": "builder@example.com", "at": "2026-10-17T08:00:00Z", "appId": "app-7f3a2c91" },
+      "startedBy": {
+        "email": "builder@example.com",
+        "at": "2026-10-17T08:00:00Z",
+        "appId": "app-7f3a2c91"
+      },
       "createdAt": "2026-10-17T08:00:00Z",
       "updatedAt": "2026-10-17T08:00:00Z"
     },
@@ -418,10 +953,26 @@
       "status": "ACTIVE",
       "version": 1,
       "channels": {},
-      "operations": ["outlook.message.list", "outlook.message.read", "outlook.attachment.read", "outlook.message.send", "outlook.message.reply", "outlook.event.list", "outlook.event.read", "outlook.event.create", "outlook.event.update", "outlook.event.cancel"],
-      "developmentPreapproval": { "enabled": false, "hours": 24 },
+      "operations": [
+        "outlook.message.list",
+        "outlook.message.read",
+        "outlook.attachment.read",
+        "outlook.message.send",
+        "outlook.message.reply",
+        "outlook.event.list",
+        "outlook.event.read",
+        "outlook.event.create",
+        "outlook.event.update",
+        "outlook.event.cancel"
+      ],
+      "developmentPreapproval": {
+        "enabled": false,
+        "hours": 24
+      },
       "userModeApproval": "it",
-      "externalRecipients": { "mode": "block" },
+      "externalRecipients": {
+        "mode": "block"
+      },
       "createdAt": "2026-10-17T08:00:00Z",
       "updatedAt": "2026-10-17T08:00:00Z"
     },
@@ -435,8 +986,17 @@
       "status": "ACTIVE",
       "version": 1,
       "channels": {},
-      "operations": ["onedrive.file.list", "onedrive.file.search", "onedrive.file.read", "onedrive.file.upload", "onedrive.folder.create"],
-      "developmentPreapproval": { "enabled": true, "hours": 24 },
+      "operations": [
+        "onedrive.file.list",
+        "onedrive.file.search",
+        "onedrive.file.read",
+        "onedrive.file.upload",
+        "onedrive.folder.create"
+      ],
+      "developmentPreapproval": {
+        "enabled": true,
+        "hours": 24
+      },
       "userModeApproval": "automatic",
       "createdAt": "2026-10-17T08:00:00Z",
       "updatedAt": "2026-10-17T08:00:00Z"
@@ -451,8 +1011,18 @@
       "status": "ACTIVE",
       "version": 1,
       "channels": {},
-      "operations": ["excel.worksheet.list", "excel.range.read", "excel.range.update", "excel.table.list", "excel.row.add", "excel.worksheet.add"],
-      "developmentPreapproval": { "enabled": true, "hours": 24 },
+      "operations": [
+        "excel.worksheet.list",
+        "excel.range.read",
+        "excel.range.update",
+        "excel.table.list",
+        "excel.row.add",
+        "excel.worksheet.add"
+      ],
+      "developmentPreapproval": {
+        "enabled": true,
+        "hours": 24
+      },
       "userModeApproval": "automatic",
       "createdAt": "2026-10-17T08:00:00Z",
       "updatedAt": "2026-10-17T08:00:00Z"
@@ -466,10 +1036,22 @@
       "displayName": "Company Teams",
       "status": "ACTIVE",
       "version": 2,
-      "account": { "id": "3f2c9b1e-7d4a-4c6b-9e8f-0a1b2c3d4e5f", "name": "Fourier Labs" },
-      "channels": { "engineering": "0f1e2d3c-4b5a-4968-8776-655443322110/19:a1b2c3d4e5f6a7b8c9d0e1f2a3b4c5d6@thread.tacv2" },
-      "operations": ["teams.message.list", "teams.message.post", "teams.reply.post"],
-      "developmentPreapproval": { "enabled": true, "hours": 24 },
+      "account": {
+        "id": "3f2c9b1e-7d4a-4c6b-9e8f-0a1b2c3d4e5f",
+        "name": "Fourier Labs"
+      },
+      "channels": {
+        "engineering": "0f1e2d3c-4b5a-4968-8776-655443322110/19:a1b2c3d4e5f6a7b8c9d0e1f2a3b4c5d6@thread.tacv2"
+      },
+      "operations": [
+        "teams.message.list",
+        "teams.message.post",
+        "teams.reply.post"
+      ],
+      "developmentPreapproval": {
+        "enabled": true,
+        "hours": 24
+      },
       "userModeApproval": "automatic",
       "createdAt": "2026-10-17T08:00:00Z",
       "updatedAt": "2026-10-17T08:00:00Z"