@suveren/gateway 0.14.0 → 0.15.0

package/dist/ui/index.html

@@ -14,7 +14,7 @@
     <meta name="apple-mobile-web-app-title" content="Suveren" />
     <meta name="theme-color" content="#111111" />
     <title>Suveren</title>
-    <script type="module" crossorigin src="/assets/index-Cg6VaGKb.js"></script>
+    <script type="module" crossorigin src="/assets/index-Bu58Y583.js"></script>
     <link rel="stylesheet" crossorigin href="/assets/index-y1OFeYnS.css">
   </head>
   <body>

package/node_modules/@hap/core/dist/index.d.mts

@@ -467,6 +467,11 @@ interface ExecutionPath {
  *
  * Supports both v0.3 (frameSchema) and v0.4 (boundsSchema + contextSchema).
  */
+/**
+ * A commitment mode a person can choose when signing a mandate. (`review_above_cap`
+ * is not chosen by the signer — it follows from team caps.)
+ */
+type SignableCommitmentMode = 'automatic' | 'review';
 interface AgentProfile {
     id: string;
     name?: string;
@@ -508,6 +513,18 @@ interface AgentProfile {
      * a forwarded message has usually lost the footer that carried it.
      */
     receipt_lookup?: boolean;
+    /**
+     * The commitment modes a mandate under this profile may be signed with.
+     * Absent → every mode (`automatic`, `review`), as before this field existed.
+     *
+     * Lets a profile be review-only: every action it governs then needs a
+     * person's approval, whatever the signer would have picked. The Authority
+     * Server refuses to sign a mandate whose `commitment_mode` is not listed;
+     * a mandate screen offers only the listed modes. Fail-closed: a declared
+     * list with no valid entry allows nothing — a malformed declaration never
+     * widens what a profile allows. See {@link allowedCommitmentModes}.
+     */
+    commitment_modes?: readonly SignableCommitmentMode[];
     /**
      * v0.3 frame schema (deprecated, kept for backward compat).
      * Used when boundsSchema is not present.
@@ -1081,6 +1098,31 @@ declare function computeBoundsHash(params: AgentBoundsParams, profile: AgentProf
  */
 declare function computeContextHash(params: AgentContextParams, profile: AgentProfile): string;
 
+/**
+ * Which commitment modes a profile allows its mandates to be signed with
+ * (`AgentProfile.commitment_modes`). One source for the Authority Server's
+ * refusal and the mandate screen's choice, so the two cannot disagree.
+ */
+
+/** Every mode a signer can choose, in the order a mandate screen shows them. */
+declare const SIGNABLE_COMMITMENT_MODES: readonly SignableCommitmentMode[];
+/**
+ * The modes a mandate under this profile may carry, in display order.
+ * No declaration → all of them. A declaration is read fail-closed: entries
+ * that are not a signable mode are dropped, so a malformed list can only
+ * narrow — `[]`, `"review"` (not a list) or `["reveiw"]` allow nothing.
+ */
+declare function allowedCommitmentModes(profile: AgentProfile): readonly SignableCommitmentMode[];
+/** Whether a mandate under this profile may be signed with `mode`. */
+declare function isCommitmentModeAllowed(profile: AgentProfile, mode: string): boolean;
+/**
+ * Authoring check for a profile's `commitment_modes` declaration — for
+ * hap-profiles CI, an authoring tool or a test. Like `validateBoundsRequiredFor`
+ * it is not wired into profile loading; enforcement reads the declaration
+ * fail-closed through `allowedCommitmentModes`. Empty array = nothing to fix.
+ */
+declare function validateCommitmentModes(profile: AgentProfile): string[];
+
 /**
  * Attestation Encoding, Decoding, and Verification
  *
@@ -1401,4 +1443,4 @@ interface ReceiptPayload {
  */
 declare function verifyReceiptSignature(receipt: ReceiptPayload, publicKeyHex: string): Promise<void>;
 
-export { type AgentBoundsParams, type AgentContextParams, type AgentFrameParams, type AgentProfile, type ApprovalObject, type Attestation, type AttestationHeader, type AttestationPayload, type BoundType, CanonicalValueError, type ContentBinding, ContentBindingError, type ContentBindingErrorCode, type CumulativeFieldDef, type CumulativeWindow, type DeclaredFieldDef, type ExecutionContextFieldDef, type ExecutionLogEntry, type ExecutionLogQuery, type ExecutionMappingTransform, type ExecutionMappingValue, type ExecutionPath, type FieldConstraint, type FieldUnit, type GateQuestion, type GatekeeperError, type GatekeeperRequest, type GatekeeperResult, type MandateBinding, MandateError, type MandateProjection, type OwnerMandate, type ProfileBoundsField, type ProfileContextField, type ProfileFrameField, type ProfileToolGating, type ProfileToolGatingEntry, type ReceiptPayload, type ResolvedDomain, type SigningSurface, type Subject, type SubjectValidation, approvalSigningBytes, attestationId, bindingAppliesTo, boundActionTypes, buildMandateProjection, canonicalBounds, canonicalContext, canonicalFrame, canonicalize, canonicalizeText, checkAttestationExpiry, clearProfiles, computeBoundsHash, computeContentHash, computeContextHash, computeFieldsContentHash, computeFrameHash, computeIntentDisclosureHash, computeIntentHash, contentCanonicalBytes, decodeAttestationBlob, decodeDidKey, deriveIdentityLine, encodeAttestationBlob, encodeDidKey, frameHash, getAllProfiles, getProfile, intentDisclosureCanonicalBytes, isFieldBinding, isKeyBearingDid, isV4Attestation, listProfiles, mandateSigningBytes, registerProfile, selectBoundFields, signApproval, signMandateProjection, validateBoundsParams, validateBoundsRequiredFor, validateContextParams, validateFrameParams, validateSubject, verify, verifyApproval, verifyAttestation, verifyAttestationSignature, verifyAttestationV4, verifyBoundsHash, verifyContextHash, verifyFrameHash, verifyOwnerMandate, verifyOwnerMandates, verifyReceiptSignature };
+export { type AgentBoundsParams, type AgentContextParams, type AgentFrameParams, type AgentProfile, type ApprovalObject, type Attestation, type AttestationHeader, type AttestationPayload, type BoundType, CanonicalValueError, type ContentBinding, ContentBindingError, type ContentBindingErrorCode, type CumulativeFieldDef, type CumulativeWindow, type DeclaredFieldDef, type ExecutionContextFieldDef, type ExecutionLogEntry, type ExecutionLogQuery, type ExecutionMappingTransform, type ExecutionMappingValue, type ExecutionPath, type FieldConstraint, type FieldUnit, type GateQuestion, type GatekeeperError, type GatekeeperRequest, type GatekeeperResult, type MandateBinding, MandateError, type MandateProjection, type OwnerMandate, type ProfileBoundsField, type ProfileContextField, type ProfileFrameField, type ProfileToolGating, type ProfileToolGatingEntry, type ReceiptPayload, type ResolvedDomain, SIGNABLE_COMMITMENT_MODES, type SignableCommitmentMode, type SigningSurface, type Subject, type SubjectValidation, allowedCommitmentModes, approvalSigningBytes, attestationId, bindingAppliesTo, boundActionTypes, buildMandateProjection, canonicalBounds, canonicalContext, canonicalFrame, canonicalize, canonicalizeText, checkAttestationExpiry, clearProfiles, computeBoundsHash, computeContentHash, computeContextHash, computeFieldsContentHash, computeFrameHash, computeIntentDisclosureHash, computeIntentHash, contentCanonicalBytes, decodeAttestationBlob, decodeDidKey, deriveIdentityLine, encodeAttestationBlob, encodeDidKey, frameHash, getAllProfiles, getProfile, intentDisclosureCanonicalBytes, isCommitmentModeAllowed, isFieldBinding, isKeyBearingDid, isV4Attestation, listProfiles, mandateSigningBytes, registerProfile, selectBoundFields, signApproval, signMandateProjection, validateBoundsParams, validateBoundsRequiredFor, validateCommitmentModes, validateContextParams, validateFrameParams, validateSubject, verify, verifyApproval, verifyAttestation, verifyAttestationSignature, verifyAttestationV4, verifyBoundsHash, verifyContextHash, verifyFrameHash, verifyOwnerMandate, verifyOwnerMandates, verifyReceiptSignature };

package/node_modules/@hap/core/dist/index.d.ts

@@ -467,6 +467,11 @@ interface ExecutionPath {
  *
  * Supports both v0.3 (frameSchema) and v0.4 (boundsSchema + contextSchema).
  */
+/**
+ * A commitment mode a person can choose when signing a mandate. (`review_above_cap`
+ * is not chosen by the signer — it follows from team caps.)
+ */
+type SignableCommitmentMode = 'automatic' | 'review';
 interface AgentProfile {
     id: string;
     name?: string;
@@ -508,6 +513,18 @@ interface AgentProfile {
      * a forwarded message has usually lost the footer that carried it.
      */
     receipt_lookup?: boolean;
+    /**
+     * The commitment modes a mandate under this profile may be signed with.
+     * Absent → every mode (`automatic`, `review`), as before this field existed.
+     *
+     * Lets a profile be review-only: every action it governs then needs a
+     * person's approval, whatever the signer would have picked. The Authority
+     * Server refuses to sign a mandate whose `commitment_mode` is not listed;
+     * a mandate screen offers only the listed modes. Fail-closed: a declared
+     * list with no valid entry allows nothing — a malformed declaration never
+     * widens what a profile allows. See {@link allowedCommitmentModes}.
+     */
+    commitment_modes?: readonly SignableCommitmentMode[];
     /**
      * v0.3 frame schema (deprecated, kept for backward compat).
      * Used when boundsSchema is not present.
@@ -1081,6 +1098,31 @@ declare function computeBoundsHash(params: AgentBoundsParams, profile: AgentProf
  */
 declare function computeContextHash(params: AgentContextParams, profile: AgentProfile): string;
 
+/**
+ * Which commitment modes a profile allows its mandates to be signed with
+ * (`AgentProfile.commitment_modes`). One source for the Authority Server's
+ * refusal and the mandate screen's choice, so the two cannot disagree.
+ */
+
+/** Every mode a signer can choose, in the order a mandate screen shows them. */
+declare const SIGNABLE_COMMITMENT_MODES: readonly SignableCommitmentMode[];
+/**
+ * The modes a mandate under this profile may carry, in display order.
+ * No declaration → all of them. A declaration is read fail-closed: entries
+ * that are not a signable mode are dropped, so a malformed list can only
+ * narrow — `[]`, `"review"` (not a list) or `["reveiw"]` allow nothing.
+ */
+declare function allowedCommitmentModes(profile: AgentProfile): readonly SignableCommitmentMode[];
+/** Whether a mandate under this profile may be signed with `mode`. */
+declare function isCommitmentModeAllowed(profile: AgentProfile, mode: string): boolean;
+/**
+ * Authoring check for a profile's `commitment_modes` declaration — for
+ * hap-profiles CI, an authoring tool or a test. Like `validateBoundsRequiredFor`
+ * it is not wired into profile loading; enforcement reads the declaration
+ * fail-closed through `allowedCommitmentModes`. Empty array = nothing to fix.
+ */
+declare function validateCommitmentModes(profile: AgentProfile): string[];
+
 /**
  * Attestation Encoding, Decoding, and Verification
  *
@@ -1401,4 +1443,4 @@ interface ReceiptPayload {
  */
 declare function verifyReceiptSignature(receipt: ReceiptPayload, publicKeyHex: string): Promise<void>;
 
-export { type AgentBoundsParams, type AgentContextParams, type AgentFrameParams, type AgentProfile, type ApprovalObject, type Attestation, type AttestationHeader, type AttestationPayload, type BoundType, CanonicalValueError, type ContentBinding, ContentBindingError, type ContentBindingErrorCode, type CumulativeFieldDef, type CumulativeWindow, type DeclaredFieldDef, type ExecutionContextFieldDef, type ExecutionLogEntry, type ExecutionLogQuery, type ExecutionMappingTransform, type ExecutionMappingValue, type ExecutionPath, type FieldConstraint, type FieldUnit, type GateQuestion, type GatekeeperError, type GatekeeperRequest, type GatekeeperResult, type MandateBinding, MandateError, type MandateProjection, type OwnerMandate, type ProfileBoundsField, type ProfileContextField, type ProfileFrameField, type ProfileToolGating, type ProfileToolGatingEntry, type ReceiptPayload, type ResolvedDomain, type SigningSurface, type Subject, type SubjectValidation, approvalSigningBytes, attestationId, bindingAppliesTo, boundActionTypes, buildMandateProjection, canonicalBounds, canonicalContext, canonicalFrame, canonicalize, canonicalizeText, checkAttestationExpiry, clearProfiles, computeBoundsHash, computeContentHash, computeContextHash, computeFieldsContentHash, computeFrameHash, computeIntentDisclosureHash, computeIntentHash, contentCanonicalBytes, decodeAttestationBlob, decodeDidKey, deriveIdentityLine, encodeAttestationBlob, encodeDidKey, frameHash, getAllProfiles, getProfile, intentDisclosureCanonicalBytes, isFieldBinding, isKeyBearingDid, isV4Attestation, listProfiles, mandateSigningBytes, registerProfile, selectBoundFields, signApproval, signMandateProjection, validateBoundsParams, validateBoundsRequiredFor, validateContextParams, validateFrameParams, validateSubject, verify, verifyApproval, verifyAttestation, verifyAttestationSignature, verifyAttestationV4, verifyBoundsHash, verifyContextHash, verifyFrameHash, verifyOwnerMandate, verifyOwnerMandates, verifyReceiptSignature };
+export { type AgentBoundsParams, type AgentContextParams, type AgentFrameParams, type AgentProfile, type ApprovalObject, type Attestation, type AttestationHeader, type AttestationPayload, type BoundType, CanonicalValueError, type ContentBinding, ContentBindingError, type ContentBindingErrorCode, type CumulativeFieldDef, type CumulativeWindow, type DeclaredFieldDef, type ExecutionContextFieldDef, type ExecutionLogEntry, type ExecutionLogQuery, type ExecutionMappingTransform, type ExecutionMappingValue, type ExecutionPath, type FieldConstraint, type FieldUnit, type GateQuestion, type GatekeeperError, type GatekeeperRequest, type GatekeeperResult, type MandateBinding, MandateError, type MandateProjection, type OwnerMandate, type ProfileBoundsField, type ProfileContextField, type ProfileFrameField, type ProfileToolGating, type ProfileToolGatingEntry, type ReceiptPayload, type ResolvedDomain, SIGNABLE_COMMITMENT_MODES, type SignableCommitmentMode, type SigningSurface, type Subject, type SubjectValidation, allowedCommitmentModes, approvalSigningBytes, attestationId, bindingAppliesTo, boundActionTypes, buildMandateProjection, canonicalBounds, canonicalContext, canonicalFrame, canonicalize, canonicalizeText, checkAttestationExpiry, clearProfiles, computeBoundsHash, computeContentHash, computeContextHash, computeFieldsContentHash, computeFrameHash, computeIntentDisclosureHash, computeIntentHash, contentCanonicalBytes, decodeAttestationBlob, decodeDidKey, deriveIdentityLine, encodeAttestationBlob, encodeDidKey, frameHash, getAllProfiles, getProfile, intentDisclosureCanonicalBytes, isCommitmentModeAllowed, isFieldBinding, isKeyBearingDid, isV4Attestation, listProfiles, mandateSigningBytes, registerProfile, selectBoundFields, signApproval, signMandateProjection, validateBoundsParams, validateBoundsRequiredFor, validateCommitmentModes, validateContextParams, validateFrameParams, validateSubject, verify, verifyApproval, verifyAttestation, verifyAttestationSignature, verifyAttestationV4, verifyBoundsHash, verifyContextHash, verifyFrameHash, verifyOwnerMandate, verifyOwnerMandates, verifyReceiptSignature };

package/node_modules/@hap/core/dist/index.js

@@ -33,6 +33,8 @@ __export(index_exports, {
   CanonicalValueError: () => CanonicalValueError,
   ContentBindingError: () => ContentBindingError,
   MandateError: () => MandateError,
+  SIGNABLE_COMMITMENT_MODES: () => SIGNABLE_COMMITMENT_MODES,
+  allowedCommitmentModes: () => allowedCommitmentModes,
   approvalSigningBytes: () => approvalSigningBytes,
   attestationId: () => attestationId,
   bindingAppliesTo: () => bindingAppliesTo,
@@ -62,6 +64,7 @@ __export(index_exports, {
   getAllProfiles: () => getAllProfiles,
   getProfile: () => getProfile,
   intentDisclosureCanonicalBytes: () => intentDisclosureCanonicalBytes,
+  isCommitmentModeAllowed: () => isCommitmentModeAllowed,
   isFieldBinding: () => isFieldBinding,
   isKeyBearingDid: () => isKeyBearingDid,
   isV4Attestation: () => isV4Attestation,
@@ -73,6 +76,7 @@ __export(index_exports, {
   signMandateProjection: () => signMandateProjection,
   validateBoundsParams: () => validateBoundsParams,
   validateBoundsRequiredFor: () => validateBoundsRequiredFor,
+  validateCommitmentModes: () => validateCommitmentModes,
   validateContextParams: () => validateContextParams,
   validateFrameParams: () => validateFrameParams,
   validateSubject: () => validateSubject,
@@ -478,6 +482,33 @@ function computeContextHash(params, profile) {
   return `sha256:${hash}`;
 }
 
+// src/commitment-modes.ts
+var SIGNABLE_COMMITMENT_MODES = ["review", "automatic"];
+var isSignable = (v) => typeof v === "string" && SIGNABLE_COMMITMENT_MODES.includes(v);
+function allowedCommitmentModes(profile) {
+  const declared = profile.commitment_modes;
+  if (declared === void 0) return SIGNABLE_COMMITMENT_MODES;
+  if (!Array.isArray(declared)) return [];
+  return SIGNABLE_COMMITMENT_MODES.filter((m) => declared.includes(m));
+}
+function isCommitmentModeAllowed(profile, mode) {
+  return isSignable(mode) && allowedCommitmentModes(profile).includes(mode);
+}
+function validateCommitmentModes(profile) {
+  const declared = profile.commitment_modes;
+  if (declared === void 0) return [];
+  if (!Array.isArray(declared)) return ["commitment_modes must be a list of modes."];
+  const errors = [];
+  if (declared.length === 0) errors.push("commitment_modes is empty \u2014 no mandate could ever be signed under this profile.");
+  const seen = /* @__PURE__ */ new Set();
+  for (const m of declared) {
+    if (!isSignable(m)) errors.push(`commitment_modes: "${String(m)}" is not a mode a signer can choose (${SIGNABLE_COMMITMENT_MODES.join(", ")}).`);
+    if (seen.has(m)) errors.push(`commitment_modes: "${String(m)}" appears twice.`);
+    seen.add(m);
+  }
+  return errors;
+}
+
 // src/attestation.ts
 var import_crypto4 = require("crypto");
 var ed = __toESM(require("@noble/ed25519"));
@@ -1276,6 +1307,8 @@ async function verifyReceiptSignature(receipt, publicKeyHex) {
   CanonicalValueError,
   ContentBindingError,
   MandateError,
+  SIGNABLE_COMMITMENT_MODES,
+  allowedCommitmentModes,
   approvalSigningBytes,
   attestationId,
   bindingAppliesTo,
@@ -1305,6 +1338,7 @@ async function verifyReceiptSignature(receipt, publicKeyHex) {
   getAllProfiles,
   getProfile,
   intentDisclosureCanonicalBytes,
+  isCommitmentModeAllowed,
   isFieldBinding,
   isKeyBearingDid,
   isV4Attestation,
@@ -1316,6 +1350,7 @@ async function verifyReceiptSignature(receipt, publicKeyHex) {
   signMandateProjection,
   validateBoundsParams,
   validateBoundsRequiredFor,
+  validateCommitmentModes,
   validateContextParams,
   validateFrameParams,
   validateSubject,

package/node_modules/@hap/core/dist/index.mjs

@@ -386,6 +386,33 @@ function computeContextHash(params, profile) {
   return `sha256:${hash}`;
 }
 
+// src/commitment-modes.ts
+var SIGNABLE_COMMITMENT_MODES = ["review", "automatic"];
+var isSignable = (v) => typeof v === "string" && SIGNABLE_COMMITMENT_MODES.includes(v);
+function allowedCommitmentModes(profile) {
+  const declared = profile.commitment_modes;
+  if (declared === void 0) return SIGNABLE_COMMITMENT_MODES;
+  if (!Array.isArray(declared)) return [];
+  return SIGNABLE_COMMITMENT_MODES.filter((m) => declared.includes(m));
+}
+function isCommitmentModeAllowed(profile, mode) {
+  return isSignable(mode) && allowedCommitmentModes(profile).includes(mode);
+}
+function validateCommitmentModes(profile) {
+  const declared = profile.commitment_modes;
+  if (declared === void 0) return [];
+  if (!Array.isArray(declared)) return ["commitment_modes must be a list of modes."];
+  const errors = [];
+  if (declared.length === 0) errors.push("commitment_modes is empty \u2014 no mandate could ever be signed under this profile.");
+  const seen = /* @__PURE__ */ new Set();
+  for (const m of declared) {
+    if (!isSignable(m)) errors.push(`commitment_modes: "${String(m)}" is not a mode a signer can choose (${SIGNABLE_COMMITMENT_MODES.join(", ")}).`);
+    if (seen.has(m)) errors.push(`commitment_modes: "${String(m)}" appears twice.`);
+    seen.add(m);
+  }
+  return errors;
+}
+
 // src/attestation.ts
 import { createHash as createHash4 } from "crypto";
 import * as ed from "@noble/ed25519";
@@ -1183,6 +1210,8 @@ export {
   CanonicalValueError,
   ContentBindingError,
   MandateError,
+  SIGNABLE_COMMITMENT_MODES,
+  allowedCommitmentModes,
   approvalSigningBytes,
   attestationId,
   bindingAppliesTo,
@@ -1212,6 +1241,7 @@ export {
   getAllProfiles,
   getProfile,
   intentDisclosureCanonicalBytes,
+  isCommitmentModeAllowed,
   isFieldBinding,
   isKeyBearingDid,
   isV4Attestation,
@@ -1223,6 +1253,7 @@ export {
   signMandateProjection,
   validateBoundsParams,
   validateBoundsRequiredFor,
+  validateCommitmentModes,
   validateContextParams,
   validateFrameParams,
   validateSubject,

package/node_modules/@hap/core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@humanagencyp/hap-core",
-  "version": "0.11.0",
+  "version": "0.11.1",
   "description": "Core types, cryptographic primitives, and verification logic for the Human Agency Protocol",
   "license": "MIT",
   "repository": {

package/node_modules/@hap/core/src/commitment-modes.ts

@@ -0,0 +1,51 @@
+/**
+ * Which commitment modes a profile allows its mandates to be signed with
+ * (`AgentProfile.commitment_modes`). One source for the Authority Server's
+ * refusal and the mandate screen's choice, so the two cannot disagree.
+ */
+import type { AgentProfile, SignableCommitmentMode } from './types';
+
+/** Every mode a signer can choose, in the order a mandate screen shows them. */
+export const SIGNABLE_COMMITMENT_MODES: readonly SignableCommitmentMode[] = ['review', 'automatic'];
+
+const isSignable = (v: unknown): v is SignableCommitmentMode =>
+  typeof v === 'string' && (SIGNABLE_COMMITMENT_MODES as readonly string[]).includes(v);
+
+/**
+ * The modes a mandate under this profile may carry, in display order.
+ * No declaration → all of them. A declaration is read fail-closed: entries
+ * that are not a signable mode are dropped, so a malformed list can only
+ * narrow — `[]`, `"review"` (not a list) or `["reveiw"]` allow nothing.
+ */
+export function allowedCommitmentModes(profile: AgentProfile): readonly SignableCommitmentMode[] {
+  const declared = (profile as { commitment_modes?: unknown }).commitment_modes;
+  if (declared === undefined) return SIGNABLE_COMMITMENT_MODES;
+  if (!Array.isArray(declared)) return [];
+  return SIGNABLE_COMMITMENT_MODES.filter((m) => declared.includes(m));
+}
+
+/** Whether a mandate under this profile may be signed with `mode`. */
+export function isCommitmentModeAllowed(profile: AgentProfile, mode: string): boolean {
+  return isSignable(mode) && allowedCommitmentModes(profile).includes(mode);
+}
+
+/**
+ * Authoring check for a profile's `commitment_modes` declaration — for
+ * hap-profiles CI, an authoring tool or a test. Like `validateBoundsRequiredFor`
+ * it is not wired into profile loading; enforcement reads the declaration
+ * fail-closed through `allowedCommitmentModes`. Empty array = nothing to fix.
+ */
+export function validateCommitmentModes(profile: AgentProfile): string[] {
+  const declared = (profile as { commitment_modes?: unknown }).commitment_modes;
+  if (declared === undefined) return [];
+  if (!Array.isArray(declared)) return ['commitment_modes must be a list of modes.'];
+  const errors: string[] = [];
+  if (declared.length === 0) errors.push('commitment_modes is empty — no mandate could ever be signed under this profile.');
+  const seen = new Set<unknown>();
+  for (const m of declared) {
+    if (!isSignable(m)) errors.push(`commitment_modes: "${String(m)}" is not a mode a signer can choose (${SIGNABLE_COMMITMENT_MODES.join(', ')}).`);
+    if (seen.has(m)) errors.push(`commitment_modes: "${String(m)}" appears twice.`);
+    seen.add(m);
+  }
+  return errors;
+}

package/node_modules/@hap/core/src/index.ts

@@ -10,6 +10,7 @@ export * from './content-binding';
 export * from './intent-disclosure';
 export * from './identity';
 export * from './frame';
+export * from './commitment-modes';
 export * from './attestation';
 export * from './gatekeeper';
 export * from './profiles';

package/node_modules/@hap/core/src/types.ts

@@ -479,6 +479,12 @@ export interface ExecutionPath {
  *
  * Supports both v0.3 (frameSchema) and v0.4 (boundsSchema + contextSchema).
  */
+/**
+ * A commitment mode a person can choose when signing a mandate. (`review_above_cap`
+ * is not chosen by the signer — it follows from team caps.)
+ */
+export type SignableCommitmentMode = 'automatic' | 'review';
+
 export interface AgentProfile {
   id: string;
   name?: string;
@@ -523,6 +529,19 @@ export interface AgentProfile {
    */
   receipt_lookup?: boolean;
 
+  /**
+   * The commitment modes a mandate under this profile may be signed with.
+   * Absent → every mode (`automatic`, `review`), as before this field existed.
+   *
+   * Lets a profile be review-only: every action it governs then needs a
+   * person's approval, whatever the signer would have picked. The Authority
+   * Server refuses to sign a mandate whose `commitment_mode` is not listed;
+   * a mandate screen offers only the listed modes. Fail-closed: a declared
+   * list with no valid entry allows nothing — a malformed declaration never
+   * widens what a profile allows. See {@link allowedCommitmentModes}.
+   */
+  commitment_modes?: readonly SignableCommitmentMode[];
+
   /**
    * v0.3 frame schema (deprecated, kept for backward compat).
    * Used when boundsSchema is not present.

package/node_modules/@modelcontextprotocol/sdk/README.md

@@ -1,4 +1,10 @@
-# MCP TypeScript SDK [![NPM Version](https://img.shields.io/npm/v/%40modelcontextprotocol%2Fsdk)](https://www.npmjs.com/package/@modelcontextprotocol/sdk) [![MIT licensed](https://img.shields.io/npm/l/%40modelcontextprotocol%2Fsdk)](https://github.com/modelcontextprotocol/typescript-sdk/blob/main/LICENSE)
+# MCP TypeScript SDK [![NPM Version](https://img.shields.io/npm/v/%40modelcontextprotocol%2Fsdk)](https://www.npmjs.com/package/@modelcontextprotocol/sdk) [![MIT licensed](https://img.shields.io/npm/l/%40modelcontextprotocol%2Fsdk)](https://github.com/modelcontextprotocol/typescript-sdk/blob/v1.x/LICENSE)
+
+> **This is v1.x of the MCP TypeScript SDK, the maintenance line.** It implements the MCP spec up to 2025-11-25. Support for the [2026-07-28 spec](https://modelcontextprotocol.io/specification/2026-07-28) is not planned for v1.x: it is in v2, the current stable release, which
+> ships as separate packages, [`@modelcontextprotocol/server`](https://www.npmjs.com/package/@modelcontextprotocol/server) and [`@modelcontextprotocol/client`](https://www.npmjs.com/package/@modelcontextprotocol/client). See the
+> [v2 documentation](https://ts.sdk.modelcontextprotocol.io/v2/) and the [migration guide](https://ts.sdk.modelcontextprotocol.io/v2/migration/upgrade-to-v2).
+>
+> **Staying on v1.x?** It continues to receive bug fixes and security updates for at least six months after the v2 release (2026-07-27). The v1 documentation is at <https://ts.sdk.modelcontextprotocol.io/>.
 
 <details>
 <summary>Table of Contents</summary>
@@ -17,7 +23,7 @@
 ## Overview
 
 The Model Context Protocol allows applications to provide context for LLMs in a standardized way, separating the concerns of providing context from the actual LLM interaction. This TypeScript SDK implements
-[the full MCP specification](https://modelcontextprotocol.io/specification/draft), making it easy to:
+[the 2025-11-25 MCP specification](https://modelcontextprotocol.io/specification/2025-11-25), making it easy to:
 
 - Create MCP servers that expose resources, prompts and tools
 - Build MCP clients that can connect to any MCP server

package/node_modules/@modelcontextprotocol/sdk/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@modelcontextprotocol/sdk",
-    "version": "1.32.0",
+    "version": "1.32.1",
     "description": "Model Context Protocol implementation for TypeScript",
     "license": "MIT",
     "author": "Anthropic, PBC (https://anthropic.com)",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@suveren/gateway",
-  "version": "0.14.0",
+  "version": "0.15.0",
   "description": "Suveren gateway — local agent gateway built in compliance with the Human Agency Protocol (HAP). Runs the UI, control plane, and MCP server in one Node process.",
   "type": "module",
   "main": "server.js",
@@ -24,7 +24,7 @@
     "node": ">=22"
   },
   "dependencies": {
-    "@hap/core": "npm:@humanagencyp/hap-core@^0.11.0",
+    "@hap/core": "npm:@humanagencyp/hap-core@^0.11.1",
     "@hpke/core": "^1.9.0",
     "express": "^4.18.0",
     "http-proxy-middleware": "^3.0.0",

package/profiles/index.json

@@ -28,6 +28,7 @@
     "github.com/humanagencyprotocol/hap-profiles/customers@0.8": "customers/0.8.profile.json",
     "github.com/humanagencyprotocol/hap-profiles/email@0.7": "email/0.7.profile.json",
     "github.com/humanagencyprotocol/hap-profiles/sales@0.3": "sales/0.3.profile.json",
-    "github.com/humanagencyprotocol/hap-profiles/purchase@0.6": "purchase/0.6.profile.json"
+    "github.com/humanagencyprotocol/hap-profiles/purchase@0.6": "purchase/0.6.profile.json",
+    "github.com/humanagencyprotocol/hap-profiles/reporting@0.1": "reporting/0.1.profile.json"
   }
 }

package/profiles/reporting/0.1.profile.json

@@ -0,0 +1,83 @@
+{
+  "id": "github.com/humanagencyprotocol/hap-profiles/reporting@0.1",
+  "name": "Reporting",
+  "version": "0.1",
+  "description": "Reporting authority — lets an agent read the evidence a gateway holds (tickets, approvals, mandates, records in the systems it connects) and write one report stored on that machine. Changes no system.",
+  "boundsSchema": {
+    "actionTypes": [
+      "report"
+    ],
+    "keyOrder": [
+      "profile",
+      "read_access",
+      "report_daily_max"
+    ],
+    "fields": {
+      "profile": {
+        "type": "string",
+        "required": true
+      },
+      "read_access": {
+        "type": "string",
+        "required": true,
+        "displayName": "Read evidence",
+        "description": "Allow the agent to read tickets, approvals, mandates and the records in connected systems, to build a report",
+        "boundType": {
+          "kind": "enum",
+          "values": [
+            "unlimited",
+            "none"
+          ]
+        },
+        "toolsDescription": "tickets, approvals, mandates, system records",
+        "default": "unlimited"
+      },
+      "report_daily_max": {
+        "type": "number",
+        "required": true,
+        "displayName": "Report updates per day",
+        "description": "Maximum times per day the agent may write or replace the report",
+        "unit": "count",
+        "boundType": {
+          "kind": "cumulative_count",
+          "window": "daily"
+        },
+        "appliesTo": [
+          "report"
+        ]
+      }
+    }
+  },
+  "executionContextSchema": {
+    "fields": {
+      "report_count_daily": {
+        "source": "cumulative",
+        "cumulativeField": "_count",
+        "window": "daily",
+        "description": "Running daily count of report writes",
+        "required": true,
+        "constraint": {
+          "type": "number",
+          "enforceable": [
+            "max"
+          ]
+        }
+      }
+    }
+  },
+  "requiredGates": [
+    "bounds",
+    "intent",
+    "commitment",
+    "decision_owner"
+  ],
+  "ttl": {
+    "default": 86400,
+    "max": 2592000
+  },
+  "retention_minimum": 7776000,
+  "content_binding": {
+    "version": "1",
+    "kind": "jcs"
+  }
+}