@fourier-labs/harbour-contracts 0.91.0 → 0.93.0

package/contract-release.json

@@ -1,12 +1,12 @@
 {
   "schema": "harbour.contract-release/1.0",
-  "repositoryVersion": "0.91.0.0",
-  "publishVersion": "0.91.0",
-  "publishTag": "v0.91.0",
-  "schemasDigest": "sha256:b6ef945b91544184715900ca739d16f3ad8a40d5307a3b04d71cf7ac39c4fb39",
+  "repositoryVersion": "0.93.0.0",
+  "publishVersion": "0.93.0",
+  "publishTag": "v0.93.0",
+  "schemasDigest": "sha256:9fe4dd0a739805bd2029674641576a428d728fa4cd17667e1f87538ab08e14e5",
   "aiFixturesDigest": "sha256:edac31c92e146ca1c40130f2fb5649db82e24b8cd1ac758153b90612052fddb6",
-  "generatedGoDigest": "sha256:7dc23154d2d8cc3a50733c32bc005d71afa877ab327d89a3c3a7dc8dbec7dc5b",
-  "generatedTypeScriptDigest": "sha256:ae301b3932627690ffc23da6368dac812e5e33968dbe65fed52716c4896cbfcb",
+  "generatedGoDigest": "sha256:ba1a5b846bd8b5352b117601634df3d7fdb0e66782a3bac220b2574254407102",
+  "generatedTypeScriptDigest": "sha256:68bd763bc5f48338e257c1f48d72542fb73a70f0b26758faaaebb546dc5752e3",
   "generatedExclusions": {
     "gen-go/contract_release.go": "contains the generated aggregate digests (self-reference)",
     "gen-ts/contract-release.ts": "contains the generated aggregate digests (self-reference)"
@@ -42,7 +42,7 @@
     "schema/data-source.schema.json": "sha256:f32b2b4312bc06e023f4e1da60eed52ddfade59b74c1a1cc8e4b740a6f9c930b",
     "schema/deploy-request.schema.json": "sha256:c978406c273fa430db262888f0a8646b14e3057f64b0633780fcd6cfa646bc67",
     "schema/deploy-response.schema.json": "sha256:09064948abdbba7022738285d802ed44648a16ddc2a5b8c2eeb170ae19a66aeb",
-    "schema/deployment-app-registration.schema.json": "sha256:f1deb15a467065a20f540649aac3713e6c8afe68f03b43969ef103356b7baa13",
+    "schema/deployment-app-registration.schema.json": "sha256:4386dfd6f5ac2604214ab161cbb37146245baf7e70b63773c9702bd3270c3ca5",
     "schema/deployment-continuation.schema.json": "sha256:55b6945439f2c91cd851dfe4bc9484e67a64091b7763b2d8267354b4a8bfae8c",
     "schema/deployment-environment.schema.json": "sha256:35b26cae07da9ee375a842b5e87c4570c8eca06775e9fd6dd46eb9eb8aa0df6c",
     "schema/deployment-preview-retirement.schema.json": "sha256:ccf6b971b7853ca98530272f280fe62cd3aab5425b10b81ae6b717cc949e014f",
@@ -57,12 +57,13 @@
     "schema/identity-context.schema.json": "sha256:a0be3d3499b70f1641887ec66ab5b21ca5ab71063e9209290905738943a36e59",
     "schema/integration-connect-result.schema.json": "sha256:3f254b67ef739dc1fa395bdc8c4dc93359b16d481dba2a2d777aa5b6f34b7af8",
     "schema/integration-error-details.schema.json": "sha256:5a290584b1542b2b8cdd4966869126180ce29c1f0dd250dca7fb68c05e76b8e9",
-    "schema/integration-execute-request.schema.json": "sha256:c2475e7161b32d128bc0a6d67c0c34c9cb7e6baa56bb4b70000eae12a5c705d7",
-    "schema/integration-execute-result.schema.json": "sha256:ec4bd04064b0d999636304eba9e89f2254b423c944d4ca352c9fd6229c5114e1",
+    "schema/integration-execute-request.schema.json": "sha256:52afdb416c37d4fd911eafec3e63831ff7778dd70bc756102e44f8c6bb099fc0",
+    "schema/integration-execute-result.schema.json": "sha256:d85f135e8ba43e82e08bf13f720e3cc7988c6fa99da2bd727642a48342404b8f",
     "schema/internal-configuration-request.schema.json": "sha256:229d44a3458f68dceddfba802e5c1adcd95523a45af29b93b972706b88461a7d",
     "schema/kit-bundle-manifest.schema.json": "sha256:d8fc6ca9c30d791e785b021687e084e9171c0ea1a3a176d0f1582fcccf2c0e19",
     "schema/kit-lock.schema.json": "sha256:a48154d9471e49a893d928f7b0e1e0bc77708a4a7edce4fdf14073203e0e8987",
     "schema/kvs-routing-entry.schema.json": "sha256:b75f3a5dfa93a428b2764e03222b66b6ef2bed980f8bac8ffac54afdf3526bc5",
+    "schema/mail-arrival-event.schema.json": "sha256:b4fee8777a7e09ee223919330ca772e35b0e617ecfb3d5a197bfe0ee1effe4f5",
     "schema/promotion-request.schema.json": "sha256:00e96dfd8ddbdba88ea222941d43f3609ff6c815a79e34f6705cab458101c969",
     "schema/promotion-response.schema.json": "sha256:4129712d2e29d6ef21d93d4bd0bacfd60ada3f2ee0ade852824e64346b817634",
     "schema/resolved-app-serving.schema.json": "sha256:3b49268e189429310c2a5dcfd45e9d2187c80b6dbb9d329a0177e96e065c31c0",
@@ -112,11 +113,11 @@
     "gen-go/contracts_test.go": "sha256:56376287cb1548be1b35ab4c65d6f0b558c5d34885f7a47cb3d9e8d786607bf5",
     "gen-go/doc.go": "sha256:316d610ce568597a2ce6f38e9782e34fa5920f6f51ab0866e6d061b8a41cd822",
     "gen-go/error_category.go": "sha256:b2ddea22dcfa030f1a45e721e635485b0bd816cf1f38e7654628a653f5ed4583",
-    "gen-go/integration_execute_input_rules.go": "sha256:2f12620e797a82c6f6218133e26bacf225df33a10649cc1f4ea9b409b2f8e9f1",
+    "gen-go/integration_execute_input_rules.go": "sha256:6dbb58be21c9f92256cbaee4be35322ef27372d8ec49abb8d6be719af01f9237",
     "gen-go/integration_execute_input_rules_test.go": "sha256:6db850bbdfc31f60ac7ce6ec5cade4f5260b1836e56b2727efbfeee56db7a706",
     "gen-go/integration_operations.go": "sha256:1ba7ea4e118a2c4c8dd735b460b18d8658fbd7fd74e601ae372aff2844322f35",
     "gen-go/schema_documents.go": "sha256:c19c0d540f602ee997a84b90e20702d9bc63ed7d27aec267e76c04655fc182e0",
-    "gen-go/types.go": "sha256:48c35f5c3652388be74d374c22178650065e4ac669addf8a89aa31923b134e33",
+    "gen-go/types.go": "sha256:2a522bd0dac6904ac36bf6b6c0050c269e554a45b27c1d2becb9a002047de896",
     "gen-go/version_state.go": "sha256:4ef8abb126414c0025cf2c59bc9c79a74ef4a2ff89e8f316cbf05acc872371c1"
   },
   "generatedTypeScript": {
@@ -153,7 +154,7 @@
     "gen-ts/data-source.ts": "sha256:2566f0d5c72e44278869f55211cf3d433aeb3552e57ae0ace0ff0b85e769dde6",
     "gen-ts/deploy-request.ts": "sha256:913245577a95354849d3a8cb43fbaedbf895efe7b653c8502d25edfa22b7a864",
     "gen-ts/deploy-response.ts": "sha256:364d9f1acf32e491498237cdd3f402d5f8e102f208db7748034f4ec68c6a6137",
-    "gen-ts/deployment-app-registration.ts": "sha256:8c2d55983e33449ecfbaceaa41aac3e2905f1970f5514f0dbc3b611fad7beefb",
+    "gen-ts/deployment-app-registration.ts": "sha256:cb02a7e54a1733fb0865802215235c0f9d532229fffca2dc26677bee5e5e950e",
     "gen-ts/deployment-continuation.ts": "sha256:cc9f63af4d0da5086a79103789e4f043783b75b4ed11c6512f044439a551a79c",
     "gen-ts/deployment-environment.ts": "sha256:fc08cabe2e52ebb93cfe84d2019994260f71734c33d0e50e7c63e40ef5b17cef",
     "gen-ts/deployment-preview-retirement.ts": "sha256:309421d08daf0ade163b6457ed0e5410ec6573c40a59423a6cce14780d9c38db",
@@ -167,17 +168,18 @@
     "gen-ts/error-envelope.ts": "sha256:4457309be794f9d4fc0cf62530cc2d442c007bac9ae84aff66df099cc9e40310",
     "gen-ts/external-sign-in.ts": "sha256:393ef74d72e37d33e374e3226f34ab3e854fdb0c1129a367997cbb690bf253a6",
     "gen-ts/identity-context.ts": "sha256:4b8151a321e224229250d214ef3e17f2ac986bb54ff0aadbb4509481724f6883",
-    "gen-ts/index.ts": "sha256:8f0b03bc46f0f24489e6a3f7a3ddee23c86dacc8ab2058b3b131c3d9dd75ab29",
+    "gen-ts/index.ts": "sha256:258bdcaa0d8d26dd2bb996d3ddb0b4bf4533db83d1b7f0d35a2a2af85c728117",
     "gen-ts/integration-connect-result.ts": "sha256:4b10f169b6e1af364e9b418de21caa9fadbfb77b43cbff77d741cfae0b52180c",
     "gen-ts/integration-error-details.ts": "sha256:e73cb5942373ef88b2d8e03a1de56d5a69e71069ecd14e68396f7edba1f60780",
-    "gen-ts/integration-execute-input-rules.ts": "sha256:40e59de0d0977071e6438ad2149dc0513395adf7201aad95ab3d61e25a6c4e1d",
-    "gen-ts/integration-execute-request.ts": "sha256:8c42d88cf9a553e0f3b24b8b2763a26a4e3ed81592f6540e274ef3e9e1caa9c8",
-    "gen-ts/integration-execute-result.ts": "sha256:dd4e235b1a9d8201c8e2ce65088097d7bf9c1079f5b06f56501f2621bc654415",
+    "gen-ts/integration-execute-input-rules.ts": "sha256:f340553858e61476e0c20a2c9b607adfaa6d0a8aa7f5e42279e9fc477e624425",
+    "gen-ts/integration-execute-request.ts": "sha256:df8a4eff42cd1a51ba084e4eaa9bf541bc39499844b861d11125a940a927b32b",
+    "gen-ts/integration-execute-result.ts": "sha256:ebc136b0da21100319bf8201cc5688295844702d40384c07435461fa4a90be0f",
     "gen-ts/integration-operations.ts": "sha256:9e1f0b330a86eb63b7999b7f78b1da08dcefa0582325917581d98879fa25899f",
     "gen-ts/internal-configuration-request.ts": "sha256:7032437797473fa1c581d134adef2f3d4b4f4132f482cd17743e9d47097886bc",
     "gen-ts/kit-bundle-manifest.ts": "sha256:73f5271d2eb3b5ce91e28933c5ab6883615c72a3808aa386f860f58f6df8edf6",
     "gen-ts/kit-lock.ts": "sha256:06bddeaf1e2c449c9cc0dbbc696210355a9005349c604d4050eb22385fb4c22e",
     "gen-ts/kvs-routing-entry.ts": "sha256:d92e85ee9f257d77850d1d3aac9438e2055f38084ff84a48fcedae239d47d4ca",
+    "gen-ts/mail-arrival-event.ts": "sha256:deb342c7f930a2c7bf66a46e4c0973e3b9047cd9725e714ccaeab8c64a89d25f",
     "gen-ts/promotion-request.ts": "sha256:9db88cef67f777a16bac628039ec3f582acb9e8cfff6fb592b30d0a0e55abc68",
     "gen-ts/promotion-response.ts": "sha256:f1c9cafac96faeb02a443a31786f67714e818f38d90108e7af41958396524d6f",
     "gen-ts/resolved-app-serving.ts": "sha256:3264e85827be47bf391781cb13a1e58318d356f7bee8c2ff3e5b00a062253b23",

package/dist/gen-ts/contract-release.d.ts

@@ -1,7 +1,7 @@
-export declare const ContractRepositoryVersion: "0.91.0.0";
-export declare const ContractPublishVersion: "0.91.0";
-export declare const ContractPublishTag: "v0.91.0";
-export declare const ContractSchemasDigest: "sha256:b6ef945b91544184715900ca739d16f3ad8a40d5307a3b04d71cf7ac39c4fb39";
+export declare const ContractRepositoryVersion: "0.93.0.0";
+export declare const ContractPublishVersion: "0.93.0";
+export declare const ContractPublishTag: "v0.93.0";
+export declare const ContractSchemasDigest: "sha256:9fe4dd0a739805bd2029674641576a428d728fa4cd17667e1f87538ab08e14e5";
 export declare const ContractAiFixturesDigest: "sha256:edac31c92e146ca1c40130f2fb5649db82e24b8cd1ac758153b90612052fddb6";
-export declare const ContractGeneratedGoDigest: "sha256:7dc23154d2d8cc3a50733c32bc005d71afa877ab327d89a3c3a7dc8dbec7dc5b";
-export declare const ContractGeneratedTypeScriptDigest: "sha256:ae301b3932627690ffc23da6368dac812e5e33968dbe65fed52716c4896cbfcb";
+export declare const ContractGeneratedGoDigest: "sha256:ba1a5b846bd8b5352b117601634df3d7fdb0e66782a3bac220b2574254407102";
+export declare const ContractGeneratedTypeScriptDigest: "sha256:68bd763bc5f48338e257c1f48d72542fb73a70f0b26758faaaebb546dc5752e3";

package/dist/gen-ts/contract-release.js

@@ -1,9 +1,9 @@
 /* eslint-disable */
 // Code generated by tools/gen/gen.mjs from schema/*.json. DO NOT EDIT.
-export const ContractRepositoryVersion = "0.91.0.0";
-export const ContractPublishVersion = "0.91.0";
-export const ContractPublishTag = "v0.91.0";
-export const ContractSchemasDigest = "sha256:b6ef945b91544184715900ca739d16f3ad8a40d5307a3b04d71cf7ac39c4fb39";
+export const ContractRepositoryVersion = "0.93.0.0";
+export const ContractPublishVersion = "0.93.0";
+export const ContractPublishTag = "v0.93.0";
+export const ContractSchemasDigest = "sha256:9fe4dd0a739805bd2029674641576a428d728fa4cd17667e1f87538ab08e14e5";
 export const ContractAiFixturesDigest = "sha256:edac31c92e146ca1c40130f2fb5649db82e24b8cd1ac758153b90612052fddb6";
-export const ContractGeneratedGoDigest = "sha256:7dc23154d2d8cc3a50733c32bc005d71afa877ab327d89a3c3a7dc8dbec7dc5b";
-export const ContractGeneratedTypeScriptDigest = "sha256:ae301b3932627690ffc23da6368dac812e5e33968dbe65fed52716c4896cbfcb";
+export const ContractGeneratedGoDigest = "sha256:ba1a5b846bd8b5352b117601634df3d7fdb0e66782a3bac220b2574254407102";
+export const ContractGeneratedTypeScriptDigest = "sha256:68bd763bc5f48338e257c1f48d72542fb73a70f0b26758faaaebb546dc5752e3";

package/dist/gen-ts/deployment-app-registration.d.ts

@@ -21,4 +21,24 @@ export type DeploymentAppRegistration = {
      * @maxItems 1
      */
     signInMethods?: ('phone' | 'email')[];
+    mailArrivalTarget?: {
+        functionArn: string;
+        versionId: string;
+        /**
+         * @minItems 1
+         * @maxItems 100
+         */
+        jobs: {
+            name: string;
+            trigger: {
+                type: 'email.arrived';
+                connection: string;
+                resource: 'inbox';
+                filter?: {
+                    from?: string;
+                    subjectContains?: string;
+                };
+            };
+        }[];
+    };
 };

package/dist/gen-ts/index.d.ts

@@ -56,6 +56,7 @@ export * from './internal-configuration-request.js';
 export * from './kit-bundle-manifest.js';
 export * from './kit-lock.js';
 export * from './kvs-routing-entry.js';
+export * from './mail-arrival-event.js';
 export * from './promotion-request.js';
 export * from './promotion-response.js';
 export * from './resolved-app-serving.js';

package/dist/gen-ts/index.js

@@ -58,6 +58,7 @@ export * from './internal-configuration-request.js';
 export * from './kit-bundle-manifest.js';
 export * from './kit-lock.js';
 export * from './kvs-routing-entry.js';
+export * from './mail-arrival-event.js';
 export * from './promotion-request.js';
 export * from './promotion-response.js';
 export * from './resolved-app-serving.js';

package/dist/gen-ts/integration-execute-input-rules.d.ts

@@ -2268,6 +2268,13 @@ export declare const IntegrationExecuteInputRules: {
                         readonly minLength: 0;
                         readonly maxLength: 2000;
                     };
+                    readonly purchaseOrderItemId: {
+                        readonly kind: "string";
+                        readonly required: false;
+                        readonly minLength: 0;
+                        readonly maxLength: 32;
+                        readonly pattern: "^[0-9]{1,32}$";
+                    };
                 };
             };
         };

package/dist/gen-ts/integration-execute-input-rules.js

@@ -701,6 +701,7 @@ export const IntegrationExecuteInputRules = {
                     rate: { kind: "string", required: true, minLength: 0, maxLength: 17, pattern: "^[0-9]{1,10}(\\.[0-9]{1,6})?$" },
                     taxId: { kind: "string", required: false, minLength: 0, maxLength: 32, pattern: "^[0-9]{1,32}$" },
                     description: { kind: "string", required: false, minLength: 0, maxLength: 2000 },
+                    purchaseOrderItemId: { kind: "string", required: false, minLength: 0, maxLength: 32, pattern: "^[0-9]{1,32}$" },
                 } },
         },
     },

package/dist/gen-ts/integration-execute-request.d.ts

@@ -375,6 +375,7 @@ export type IntegrationExecuteRequest = {
             rate: string;
             taxId?: string;
             description?: string;
+            purchaseOrderItemId?: string;
         }[];
     };
     /**

package/dist/gen-ts/integration-execute-result.d.ts

@@ -303,6 +303,8 @@ export type IntegrationExecuteResult = {
             rate: string;
             total: string;
             description?: string;
+            lineItemId?: string;
+            purchaseOrderItemId?: string;
         }[];
     };
     /**
@@ -333,6 +335,8 @@ export type IntegrationExecuteResult = {
             rate: string;
             total: string;
             description?: string;
+            lineItemId?: string;
+            purchaseOrderItemId?: string;
         }[];
     }[];
 };

package/dist/gen-ts/mail-arrival-event.d.ts

@@ -0,0 +1,17 @@
+/**
+ * IAM-authorized invocation of a deployed app Event Function. The delivery ID is stable across notification retries; runtime deduplicates before running the declared job. No tokens or message bodies.
+ */
+export interface MailArrivalEvent {
+    mailArrival: {
+        deliveryId: string;
+        job: string;
+        owner: string;
+        input: {
+            provider: 'gmail' | 'outlook';
+            sourceId: string;
+            messageId: string;
+            threadId: string;
+            receivedAt: string;
+        };
+    };
+}

package/dist/gen-ts/mail-arrival-event.js

@@ -0,0 +1,3 @@
+/* eslint-disable */
+// Code generated by tools/gen/gen.mjs from schema/*.json. DO NOT EDIT.
+export {};

package/gen-ts/contract-release.ts

@@ -1,10 +1,10 @@
 /* eslint-disable */
 // Code generated by tools/gen/gen.mjs from schema/*.json. DO NOT EDIT.
 
-export const ContractRepositoryVersion = "0.91.0.0" as const;
-export const ContractPublishVersion = "0.91.0" as const;
-export const ContractPublishTag = "v0.91.0" as const;
-export const ContractSchemasDigest = "sha256:b6ef945b91544184715900ca739d16f3ad8a40d5307a3b04d71cf7ac39c4fb39" as const;
+export const ContractRepositoryVersion = "0.93.0.0" as const;
+export const ContractPublishVersion = "0.93.0" as const;
+export const ContractPublishTag = "v0.93.0" as const;
+export const ContractSchemasDigest = "sha256:9fe4dd0a739805bd2029674641576a428d728fa4cd17667e1f87538ab08e14e5" as const;
 export const ContractAiFixturesDigest = "sha256:edac31c92e146ca1c40130f2fb5649db82e24b8cd1ac758153b90612052fddb6" as const;
-export const ContractGeneratedGoDigest = "sha256:7dc23154d2d8cc3a50733c32bc005d71afa877ab327d89a3c3a7dc8dbec7dc5b" as const;
-export const ContractGeneratedTypeScriptDigest = "sha256:ae301b3932627690ffc23da6368dac812e5e33968dbe65fed52716c4896cbfcb" as const;
+export const ContractGeneratedGoDigest = "sha256:ba1a5b846bd8b5352b117601634df3d7fdb0e66782a3bac220b2574254407102" as const;
+export const ContractGeneratedTypeScriptDigest = "sha256:68bd763bc5f48338e257c1f48d72542fb73a70f0b26758faaaebb546dc5752e3" as const;

package/gen-ts/deployment-app-registration.ts

@@ -24,4 +24,24 @@ export type DeploymentAppRegistration = {
    * @maxItems 1
    */
   signInMethods?: ('phone' | 'email')[];
+  mailArrivalTarget?: {
+    functionArn: string;
+    versionId: string;
+    /**
+     * @minItems 1
+     * @maxItems 100
+     */
+    jobs: {
+      name: string;
+      trigger: {
+        type: 'email.arrived';
+        connection: string;
+        resource: 'inbox';
+        filter?: {
+          from?: string;
+          subjectContains?: string;
+        };
+      };
+    }[];
+  };
 };

package/gen-ts/index.ts

@@ -59,6 +59,7 @@ export * from './internal-configuration-request.js';
 export * from './kit-bundle-manifest.js';
 export * from './kit-lock.js';
 export * from './kvs-routing-entry.js';
+export * from './mail-arrival-event.js';
 export * from './promotion-request.js';
 export * from './promotion-response.js';
 export * from './resolved-app-serving.js';

package/gen-ts/integration-execute-input-rules.ts

@@ -730,6 +730,7 @@ export const IntegrationExecuteInputRules = {
         rate: { kind: "string", required: true, minLength: 0, maxLength: 17, pattern: "^[0-9]{1,10}(\\.[0-9]{1,6})?$" },
         taxId: { kind: "string", required: false, minLength: 0, maxLength: 32, pattern: "^[0-9]{1,32}$" },
         description: { kind: "string", required: false, minLength: 0, maxLength: 2000 },
+        purchaseOrderItemId: { kind: "string", required: false, minLength: 0, maxLength: 32, pattern: "^[0-9]{1,32}$" },
       } },
     },
   },

package/gen-ts/integration-execute-request.ts

@@ -467,6 +467,7 @@ export type IntegrationExecuteRequest = {
       rate: string;
       taxId?: string;
       description?: string;
+      purchaseOrderItemId?: string;
     }[];
   };
   /**

package/gen-ts/integration-execute-result.ts

@@ -306,6 +306,8 @@ export type IntegrationExecuteResult = {
       rate: string;
       total: string;
       description?: string;
+      lineItemId?: string;
+      purchaseOrderItemId?: string;
     }[];
   };
   /**
@@ -336,6 +338,8 @@ export type IntegrationExecuteResult = {
       rate: string;
       total: string;
       description?: string;
+      lineItemId?: string;
+      purchaseOrderItemId?: string;
     }[];
   }[];
 };

package/gen-ts/mail-arrival-event.ts

@@ -0,0 +1,20 @@
+/* eslint-disable */
+// Code generated by tools/gen/gen.mjs from schema/*.json. DO NOT EDIT.
+
+/**
+ * IAM-authorized invocation of a deployed app Event Function. The delivery ID is stable across notification retries; runtime deduplicates before running the declared job. No tokens or message bodies.
+ */
+export interface MailArrivalEvent {
+  mailArrival: {
+    deliveryId: string;
+    job: string;
+    owner: string;
+    input: {
+      provider: 'gmail' | 'outlook';
+      sourceId: string;
+      messageId: string;
+      threadId: string;
+      receivedAt: string;
+    };
+  };
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fourier-labs/harbour-contracts",
-  "version": "0.91.0",
+  "version": "0.93.0",
   "description": "Single source of truth for every data shape that crosses a boundary between Isomorph components.",
   "license": "UNLICENSED",
   "private": false,

package/schema/deployment-app-registration.schema.json

@@ -5,23 +5,205 @@
   "description": "IAM/SigV4 POST /v1/internal/deployment/apps/{appId}/register (Internal API) or POST /v1/deployment/apps/register body. Governance derives tenant identity-provider configuration; no identity secrets are supplied. apiHostnames explicitly identifies API hosts among backendHostnames; runtime validates that subset. Omission preserves legacy .api. inference during the coordinated V2 auth migration.",
   "type": "object",
   "additionalProperties": false,
-  "required": ["tenantId", "appId", "origin"],
+  "required": [
+    "tenantId",
+    "appId",
+    "origin"
+  ],
   "properties": {
-    "tenantId": {"type": "string", "minLength": 1},
-    "appId": {"type": "string", "minLength": 1},
-    "origin": {"type": "string", "format": "uri"},
-    "publicHostname": {"type": "string", "format": "hostname"},
-    "backendHostnames": {"type": "array", "uniqueItems": true, "items": {"type": "string", "format": "hostname"}},
-    "apiHostnames": {"type": "array", "uniqueItems": true, "items": {"type": "string", "format": "hostname"}},
-    "pathPrefix": {"type": "string", "pattern": "^/"},
-    "environment": {"type": "string", "enum": ["preview", "production"]},
-    "allowedDomains": {"type": "array", "items": {"type": "string"}},
-    "allowedUsers": {"type": "array", "items": {"type": "string"}},
-    "allowedGroups": {"type": "array", "items": {"type": "string"}},
-    "enabled": {"type": "boolean"},
-    "workloadPrincipalArn": {"type": "string", "pattern": "^arn:aws:(iam|sts)::[0-9]+:"},
-    "signIn": {"type": "string", "enum": ["company", "external"]},
-    "signInMethods": {"type": "array", "items": {"type": "string", "enum": ["phone", "email"]}, "minItems": 1, "maxItems": 1}
+    "tenantId": {
+      "type": "string",
+      "minLength": 1
+    },
+    "appId": {
+      "type": "string",
+      "minLength": 1
+    },
+    "origin": {
+      "type": "string",
+      "format": "uri"
+    },
+    "publicHostname": {
+      "type": "string",
+      "format": "hostname"
+    },
+    "backendHostnames": {
+      "type": "array",
+      "uniqueItems": true,
+      "items": {
+        "type": "string",
+        "format": "hostname"
+      }
+    },
+    "apiHostnames": {
+      "type": "array",
+      "uniqueItems": true,
+      "items": {
+        "type": "string",
+        "format": "hostname"
+      }
+    },
+    "pathPrefix": {
+      "type": "string",
+      "pattern": "^/"
+    },
+    "environment": {
+      "type": "string",
+      "enum": [
+        "preview",
+        "production"
+      ]
+    },
+    "allowedDomains": {
+      "type": "array",
+      "items": {
+        "type": "string"
+      }
+    },
+    "allowedUsers": {
+      "type": "array",
+      "items": {
+        "type": "string"
+      }
+    },
+    "allowedGroups": {
+      "type": "array",
+      "items": {
+        "type": "string"
+      }
+    },
+    "enabled": {
+      "type": "boolean"
+    },
+    "workloadPrincipalArn": {
+      "type": "string",
+      "pattern": "^arn:aws:(iam|sts)::[0-9]+:"
+    },
+    "signIn": {
+      "type": "string",
+      "enum": [
+        "company",
+        "external"
+      ]
+    },
+    "signInMethods": {
+      "type": "array",
+      "items": {
+        "type": "string",
+        "enum": [
+          "phone",
+          "email"
+        ]
+      },
+      "minItems": 1,
+      "maxItems": 1
+    },
+    "mailArrivalTarget": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "functionArn",
+        "versionId",
+        "jobs"
+      ],
+      "properties": {
+        "functionArn": {
+          "type": "string",
+          "pattern": "^arn:aws:lambda:[a-z0-9-]+:[0-9]{12}:function:[A-Za-z0-9-_]+$"
+        },
+        "versionId": {
+          "type": "string",
+          "minLength": 1
+        },
+        "jobs": {
+          "type": "array",
+          "minItems": 1,
+          "maxItems": 100,
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+              "name",
+              "trigger"
+            ],
+            "properties": {
+              "name": {
+                "type": "string",
+                "pattern": "^[a-z0-9][a-z0-9_-]{0,63}$"
+              },
+              "trigger": {
+                "type": "object",
+                "additionalProperties": false,
+                "required": [
+                  "type",
+                  "connection",
+                  "resource"
+                ],
+                "properties": {
+                  "type": {
+                    "const": "email.arrived"
+                  },
+                  "connection": {
+                    "type": "string",
+                    "pattern": "^[a-z0-9][a-z0-9_-]{0,63}$"
+                  },
+                  "resource": {
+                    "const": "inbox"
+                  },
+                  "filter": {
+                    "type": "object",
+                    "additionalProperties": false,
+                    "properties": {
+                      "from": {
+                        "type": "string",
+                        "minLength": 1,
+                        "maxLength": 320
+                      },
+                      "subjectContains": {
+                        "type": "string",
+                        "minLength": 1,
+                        "maxLength": 320
+                      }
+                    }
+                  }
+                }
+              }
+            }
+          }
+        }
+      }
+    }
   },
-  "allOf": [{"if": {"properties": {"signIn": {"const": "external"}}, "required": ["signIn"]}, "then": {"required": ["signInMethods"]}}]
+  "allOf": [
+    {
+      "if": {
+        "properties": {
+          "signIn": {
+            "const": "external"
+          }
+        },
+        "required": [
+          "signIn"
+        ]
+      },
+      "then": {
+        "required": [
+          "signInMethods"
+        ]
+      }
+    },
+    {
+      "if": {
+        "required": [
+          "mailArrivalTarget"
+        ]
+      },
+      "then": {
+        "required": [
+          "environment",
+          "workloadPrincipalArn"
+        ]
+      }
+    }
+  ]
 }

package/schema/integration-execute-request.schema.json

@@ -638,6 +638,11 @@
               "description": {
                 "type": "string",
                 "maxLength": 2000
+              },
+              "purchaseOrderItemId": {
+                "type": "string",
+                "pattern": "^[0-9]{1,32}$",
+                "maxLength": 32
               }
             }
           }
@@ -3561,6 +3566,26 @@
               "documentNumber",
               "documentDate",
               "lineItems"
+            ],
+            "allOf": [
+              {
+                "if": {
+                  "required": [
+                    "purchaseOrderId"
+                  ]
+                },
+                "then": {
+                  "properties": {
+                    "lineItems": {
+                      "items": {
+                        "required": [
+                          "purchaseOrderItemId"
+                        ]
+                      }
+                    }
+                  }
+                }
+              }
             ]
           }
         },
@@ -3633,7 +3658,49 @@
               "customerId",
               "documentDate",
               "lineItems"
-            ]
+            ],
+            "properties": {
+              "lineItems": {
+                "type": "array",
+                "minItems": 1,
+                "maxItems": 100,
+                "items": {
+                  "type": "object",
+                  "additionalProperties": false,
+                  "required": [
+                    "itemId",
+                    "quantity",
+                    "rate"
+                  ],
+                  "properties": {
+                    "itemId": {
+                      "type": "string",
+                      "pattern": "^[0-9]{1,32}$",
+                      "maxLength": 32
+                    },
+                    "quantity": {
+                      "type": "string",
+                      "pattern": "^[0-9]{1,10}(\\.[0-9]{1,6})?$",
+                      "maxLength": 17
+                    },
+                    "rate": {
+                      "type": "string",
+                      "pattern": "^[0-9]{1,10}(\\.[0-9]{1,6})?$",
+                      "maxLength": 17
+                    },
+                    "taxId": {
+                      "type": "string",
+                      "pattern": "^[0-9]{1,32}$",
+                      "maxLength": 32
+                    },
+                    "description": {
+                      "type": "string",
+                      "maxLength": 2000
+                    }
+                  }
+                }
+              }
+            }
           }
         },
         "required": [

package/schema/integration-execute-result.schema.json

@@ -2,7 +2,7 @@
   "$schema": "http://json-schema.org/draft-07/schema#",
   "$id": "https://schemas.harbour.dev/integration-execute-result.schema.json",
   "title": "IntegrationExecuteResult",
-  "description": "The `data` member of a successful execute response `{data, requestId}`; the SDK unwraps `data`. Exactly one of the operation results (eighty-one operations since 0.86.0, ADR 0018, ADR 0022, ADR 0024, ADR 0028, ADR 0029 and ADR 0032): slack.channel.history -> {messages, hasMore, nextCursor?} (plain text/IDs/time, plus the display name and emoji icon a per-app-named app post carries — authorName/authorIcon, 0.55.0 — never the provider payload; `nextCursor` when hasMore, to pass as the next read's `cursor`); slack.message.post, slack.message.update, slack.message.delete -> {messageId} (the Slack ts); slack.dm.send -> {messageId, channelId} (the ts and the DM channel it went to); slack.user.lookup -> {userId, displayName}; gmail.thread.list -> {threads, hasMore, nextPageToken?} (newest matching threads; each `messageId` is the thread's newest message, what gmail.message.read takes; `nextPageToken` when hasMore); gmail.thread.read -> {id, emails} (every message of the thread, oldest first, each shaped like a gmail.message.read result); gmail.message.read -> {id, threadId, subject, from, to, date, text, truncated, attachments?} (headers plus the plain text with html stripped, cut at 16 KiB with `truncated` set; `attachments` lists the files without their bytes, which gmail.attachment.read fetches by id); gmail.attachment.read -> {filename, mimeType, size, dataBase64}; gmail.message.send -> {messageId, threadId} (the Gmail ids of the sent message and its thread); warehouse.view.read -> {rows, truncated} (rows keyed by the selected columns, or for an aggregate read by the groupBy columns then the aggregate aliases; decimal/64-bit values as strings, dates as ISO strings; since 0.70.0 every server sends `truncated`, true when more rows matched than `limit` — the server reads limit+1 rows to know — so the rows are incomplete and must not be totalled or averaged; a server before 0.70.0 omitted it). Basecamp (0.76.0, ADR 0022; every id a string of digits, every page at most 100 items, `nextPageToken` only when hasMore, text cut at 16 KiB like Gmail): basecamp.project.list -> {projects, hasMore, nextPageToken?}; basecamp.todolist.list -> {todolists, hasMore, nextPageToken?}; basecamp.todo.list -> {todos, hasMore, nextPageToken?}; basecamp.message.list -> {boardMessages, hasMore, nextPageToken?} (`boardMessages`, not `messages`, which is the Slack history shape); basecamp.comment.list -> {comments, hasMore, nextPageToken?}; basecamp.people.list -> {people, hasMore, nextPageToken?}; basecamp.todo.create, basecamp.message.post, basecamp.comment.post, basecamp.campfire.post -> {id, appUrl} (the new recording and its Basecamp page); basecamp.todo.complete -> {id, completed} with completed always true. SharePoint (0.78.0, ADR 0024; every id a Microsoft Graph id, `nextPageToken` only when hasMore and up to 2048 characters for a Graph `$skiptoken`): sharepoint.list.list -> {lists, hasMore, nextPageToken?} (at most 100, hidden lists dropped); sharepoint.item.list -> {items, hasMore, nextPageToken?} (at most 50; each item's `fields` are the column values as Graph returns them with the system columns dropped, the whole object cut at 16 KiB); sharepoint.drive.list -> {drives, hasMore, nextPageToken?}; sharepoint.file.list and sharepoint.file.search -> {files, hasMore, nextPageToken?} (at most 100 entries, folders included with isFolder); sharepoint.file.read -> {id, filename, mimeType, size, dataBase64} (the Gmail attachment shape plus the file's id; at most 2 MiB of bytes); sharepoint.item.create -> {id, webUrl} (the new item and its SharePoint page); sharepoint.item.update -> {id}; sharepoint.file.upload -> {id, filename, webUrl} (the stored file, under the name `conflict` rename may have given it). Google Workspace and Microsoft 365 (0.86.0, ADR 0032; every page at most 100 items, `nextPageToken` only when hasMore, up to 2048 characters): calendar.calendar.list -> {calendars, hasMore, nextPageToken?}; calendar.event.list and outlook.event.list -> {events, hasMore, nextPageToken?}; calendar.event.read and outlook.event.read -> the event itself, {id, title, start, end, allDay, timeZone?, location?, description?, attendees, organizer?, webUrl, eventStatus} (the CalendarEvent shape spread at the top level, the way gmail.message.read spreads GmailMessage; `eventStatus`, because `status` is the HTTP status of a service.request result); calendar.event.create and outlook.event.create -> {id, webUrl}; calendar.event.update, calendar.event.cancel, outlook.event.update, outlook.event.cancel -> {id}; drive.file.list, drive.file.search, onedrive.file.list, onedrive.file.search -> {files, hasMore, nextPageToken?} (the SharePoint entry shape); drive.file.read and onedrive.file.read -> {id, filename, mimeType, size, dataBase64} (the sharepoint.file.read shape; `filename` and `mimeType` are the stored or exported name and type); drive.file.upload and onedrive.file.upload -> {id, filename, webUrl}; drive.folder.create and onedrive.folder.create -> {id, webUrl}; docs.document.read -> {id, title, text, revisionId, webUrl, truncated} (the body as plain text cut at 64 KiB); docs.document.create -> {id, webUrl}; docs.document.append -> {id, revisionId}; docs.text.replace -> {id, replaced} (how many occurrences changed); sheets.spreadsheet.read -> {id, title, sheets, webUrl}; sheets.values.read -> {range, values} (the range Google answered with and the cells as rows; a trailing empty row or cell is dropped by Google); sheets.values.append -> {range, updatedRows}; sheets.values.update -> {range, updatedCells}; sheets.values.clear -> {range}; sheets.spreadsheet.create -> {id, webUrl}; outlook.message.list -> {mailMessages, hasMore, nextPageToken?} (`mailMessages`, not `messages`, which is the Slack history shape); outlook.message.read -> the gmail.message.read shape {id, threadId, subject, from, to, date, text, truncated, attachments?} with `threadId` the Graph conversationId; outlook.attachment.read -> {id, filename, mimeType, size, dataBase64}; outlook.message.send and outlook.message.reply -> {id} (the sent message's id, which Graph does not return for a send: governance's own internetMessageId); excel.worksheet.list -> {worksheets}; excel.range.read -> {address, values}; excel.range.update -> {address, updatedCells}; excel.table.list -> {tables}; excel.row.add -> {index, updatedRows} (the index of the first added row); excel.worksheet.add -> {id, name}; teams.message.list -> {teamsMessages, hasMore, nextPageToken?} (`teamsMessages`, apart from Slack's `messages`); teams.message.post and teams.reply.post -> {id, webUrl}. An unknown send outcome is never a result; it is an error with details.code SEND_OUTCOME_UNKNOWN. A whole result over 1 MiB is rejected, never cut down to fit — except a gmail.attachment.read, a sharepoint.file.read, a drive.file.read, an onedrive.file.read or an outlook.attachment.read, whose single file is bounded by its own 2 MiB.",
+  "description": "The `data` member of a successful execute response `{data, requestId}`; the SDK unwraps `data`. Exactly one of the operation results (eighty-one operations since 0.86.0, ADR 0018, ADR 0022, ADR 0024, ADR 0028, ADR 0029 and ADR 0032): slack.channel.history -> {messages, hasMore, nextCursor?} (plain text/IDs/time, plus the display name and emoji icon a per-app-named app post carries \u2014 authorName/authorIcon, 0.55.0 \u2014 never the provider payload; `nextCursor` when hasMore, to pass as the next read's `cursor`); slack.message.post, slack.message.update, slack.message.delete -> {messageId} (the Slack ts); slack.dm.send -> {messageId, channelId} (the ts and the DM channel it went to); slack.user.lookup -> {userId, displayName}; gmail.thread.list -> {threads, hasMore, nextPageToken?} (newest matching threads; each `messageId` is the thread's newest message, what gmail.message.read takes; `nextPageToken` when hasMore); gmail.thread.read -> {id, emails} (every message of the thread, oldest first, each shaped like a gmail.message.read result); gmail.message.read -> {id, threadId, subject, from, to, date, text, truncated, attachments?} (headers plus the plain text with html stripped, cut at 16 KiB with `truncated` set; `attachments` lists the files without their bytes, which gmail.attachment.read fetches by id); gmail.attachment.read -> {filename, mimeType, size, dataBase64}; gmail.message.send -> {messageId, threadId} (the Gmail ids of the sent message and its thread); warehouse.view.read -> {rows, truncated} (rows keyed by the selected columns, or for an aggregate read by the groupBy columns then the aggregate aliases; decimal/64-bit values as strings, dates as ISO strings; since 0.70.0 every server sends `truncated`, true when more rows matched than `limit` \u2014 the server reads limit+1 rows to know \u2014 so the rows are incomplete and must not be totalled or averaged; a server before 0.70.0 omitted it). Basecamp (0.76.0, ADR 0022; every id a string of digits, every page at most 100 items, `nextPageToken` only when hasMore, text cut at 16 KiB like Gmail): basecamp.project.list -> {projects, hasMore, nextPageToken?}; basecamp.todolist.list -> {todolists, hasMore, nextPageToken?}; basecamp.todo.list -> {todos, hasMore, nextPageToken?}; basecamp.message.list -> {boardMessages, hasMore, nextPageToken?} (`boardMessages`, not `messages`, which is the Slack history shape); basecamp.comment.list -> {comments, hasMore, nextPageToken?}; basecamp.people.list -> {people, hasMore, nextPageToken?}; basecamp.todo.create, basecamp.message.post, basecamp.comment.post, basecamp.campfire.post -> {id, appUrl} (the new recording and its Basecamp page); basecamp.todo.complete -> {id, completed} with completed always true. SharePoint (0.78.0, ADR 0024; every id a Microsoft Graph id, `nextPageToken` only when hasMore and up to 2048 characters for a Graph `$skiptoken`): sharepoint.list.list -> {lists, hasMore, nextPageToken?} (at most 100, hidden lists dropped); sharepoint.item.list -> {items, hasMore, nextPageToken?} (at most 50; each item's `fields` are the column values as Graph returns them with the system columns dropped, the whole object cut at 16 KiB); sharepoint.drive.list -> {drives, hasMore, nextPageToken?}; sharepoint.file.list and sharepoint.file.search -> {files, hasMore, nextPageToken?} (at most 100 entries, folders included with isFolder); sharepoint.file.read -> {id, filename, mimeType, size, dataBase64} (the Gmail attachment shape plus the file's id; at most 2 MiB of bytes); sharepoint.item.create -> {id, webUrl} (the new item and its SharePoint page); sharepoint.item.update -> {id}; sharepoint.file.upload -> {id, filename, webUrl} (the stored file, under the name `conflict` rename may have given it). Google Workspace and Microsoft 365 (0.86.0, ADR 0032; every page at most 100 items, `nextPageToken` only when hasMore, up to 2048 characters): calendar.calendar.list -> {calendars, hasMore, nextPageToken?}; calendar.event.list and outlook.event.list -> {events, hasMore, nextPageToken?}; calendar.event.read and outlook.event.read -> the event itself, {id, title, start, end, allDay, timeZone?, location?, description?, attendees, organizer?, webUrl, eventStatus} (the CalendarEvent shape spread at the top level, the way gmail.message.read spreads GmailMessage; `eventStatus`, because `status` is the HTTP status of a service.request result); calendar.event.create and outlook.event.create -> {id, webUrl}; calendar.event.update, calendar.event.cancel, outlook.event.update, outlook.event.cancel -> {id}; drive.file.list, drive.file.search, onedrive.file.list, onedrive.file.search -> {files, hasMore, nextPageToken?} (the SharePoint entry shape); drive.file.read and onedrive.file.read -> {id, filename, mimeType, size, dataBase64} (the sharepoint.file.read shape; `filename` and `mimeType` are the stored or exported name and type); drive.file.upload and onedrive.file.upload -> {id, filename, webUrl}; drive.folder.create and onedrive.folder.create -> {id, webUrl}; docs.document.read -> {id, title, text, revisionId, webUrl, truncated} (the body as plain text cut at 64 KiB); docs.document.create -> {id, webUrl}; docs.document.append -> {id, revisionId}; docs.text.replace -> {id, replaced} (how many occurrences changed); sheets.spreadsheet.read -> {id, title, sheets, webUrl}; sheets.values.read -> {range, values} (the range Google answered with and the cells as rows; a trailing empty row or cell is dropped by Google); sheets.values.append -> {range, updatedRows}; sheets.values.update -> {range, updatedCells}; sheets.values.clear -> {range}; sheets.spreadsheet.create -> {id, webUrl}; outlook.message.list -> {mailMessages, hasMore, nextPageToken?} (`mailMessages`, not `messages`, which is the Slack history shape); outlook.message.read -> the gmail.message.read shape {id, threadId, subject, from, to, date, text, truncated, attachments?} with `threadId` the Graph conversationId; outlook.attachment.read -> {id, filename, mimeType, size, dataBase64}; outlook.message.send and outlook.message.reply -> {id} (the sent message's id, which Graph does not return for a send: governance's own internetMessageId); excel.worksheet.list -> {worksheets}; excel.range.read -> {address, values}; excel.range.update -> {address, updatedCells}; excel.table.list -> {tables}; excel.row.add -> {index, updatedRows} (the index of the first added row); excel.worksheet.add -> {id, name}; teams.message.list -> {teamsMessages, hasMore, nextPageToken?} (`teamsMessages`, apart from Slack's `messages`); teams.message.post and teams.reply.post -> {id, webUrl}. An unknown send outcome is never a result; it is an error with details.code SEND_OUTCOME_UNKNOWN. A whole result over 1 MiB is rejected, never cut down to fit \u2014 except a gmail.attachment.read, a sharepoint.file.read, a drive.file.read, an onedrive.file.read or an outlook.attachment.read, whose single file is bounded by its own 2 MiB.",
   "type": "object",
   "additionalProperties": false,
   "properties": {
@@ -506,6 +506,14 @@
               "description": {
                 "type": "string",
                 "maxLength": 2000
+              },
+              "lineItemId": {
+                "type": "string",
+                "maxLength": 32
+              },
+              "purchaseOrderItemId": {
+                "type": "string",
+                "maxLength": 32
               }
             }
           }
@@ -619,6 +627,14 @@
                 "description": {
                   "type": "string",
                   "maxLength": 2000
+                },
+                "lineItemId": {
+                  "type": "string",
+                  "maxLength": 32
+                },
+                "purchaseOrderItemId": {
+                  "type": "string",
+                  "maxLength": 32
                 }
               }
             }

package/schema/mail-arrival-event.schema.json

@@ -0,0 +1,75 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "https://contracts.harbour.dev/mail-arrival-event.schema.json",
+  "title": "MailArrivalEvent",
+  "description": "IAM-authorized invocation of a deployed app Event Function. The delivery ID is stable across notification retries; runtime deduplicates before running the declared job. No tokens or message bodies.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "mailArrival"
+  ],
+  "properties": {
+    "mailArrival": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "deliveryId",
+        "job",
+        "owner",
+        "input"
+      ],
+      "properties": {
+        "deliveryId": {
+          "type": "string",
+          "pattern": "^[a-f0-9]{64}$"
+        },
+        "job": {
+          "type": "string",
+          "pattern": "^[a-z0-9][a-z0-9_-]{0,63}$"
+        },
+        "owner": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 320
+        },
+        "input": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": [
+            "provider",
+            "sourceId",
+            "messageId",
+            "threadId",
+            "receivedAt"
+          ],
+          "properties": {
+            "provider": {
+              "enum": [
+                "gmail",
+                "outlook"
+              ]
+            },
+            "sourceId": {
+              "type": "string",
+              "minLength": 1,
+              "maxLength": 64
+            },
+            "messageId": {
+              "type": "string",
+              "minLength": 1,
+              "maxLength": 2048
+            },
+            "threadId": {
+              "type": "string",
+              "maxLength": 2048
+            },
+            "receivedAt": {
+              "type": "string",
+              "format": "date-time"
+            }
+          }
+        }
+      }
+    }
+  }
+}