@suveren/gateway 0.19.5 → 0.20.0

package/node_modules/@hap/core/src/versions.ts

@@ -0,0 +1,47 @@
+/**
+ * Version negotiation — protocol.md → *Version negotiation (v0.7)*.
+ *
+ * "Gatekeepers and Authority Servers MUST reject unknown or untrusted
+ * versions" is a safety rule, not a transition plan; this module is the
+ * transition plan. A mandate request carries `supported_versions`; the AS
+ * issues at the highest version both sides support, or refuses with
+ * `VERSION_UNSUPPORTED` where there is none. A request without the field is
+ * read as `["0.6"]` (rule 1) — but this package issues and verifies `0.7`
+ * only (CLAUDE.md "Decided by the owner": no backward verify path), so that
+ * default exists to make the refusal message honest, not to accept the
+ * mandate.
+ */
+import { HapError } from './errors';
+
+/** The protocol version this package issues and verifies. */
+export const PROTOCOL_VERSION = '0.7';
+
+/** The protocol versions this package can verify and enforce. */
+export const SUPPORTED_VERSIONS: readonly string[] = ['0.7'];
+
+/**
+ * The highest version both the requester and this implementation support.
+ *
+ * @param requested `supported_versions` from the mandate request. Absent →
+ * read as `["0.6"]` (protocol.md rule 1) — which, against this package's
+ * `SUPPORTED_VERSIONS`, has no overlap and refuses honestly rather than
+ * silently assuming `0.7`.
+ * @throws HapError `VERSION_UNSUPPORTED` when no version is common to both.
+ */
+export function negotiateVersion(
+  requested: readonly string[] | undefined,
+  supported: readonly string[] = SUPPORTED_VERSIONS,
+): string {
+  const requestedVersions = requested ?? ['0.6'];
+  // Highest-first so a requester offering several supported versions gets the
+  // newest one both sides agree on, not merely the first common element.
+  const common = supported.filter((v) => requestedVersions.includes(v)).sort().reverse();
+  if (common.length === 0) {
+    throw new HapError(
+      'VERSION_UNSUPPORTED',
+      `no protocol version in [${requestedVersions.join(', ')}] is supported by this implementation ` +
+        `(supports [${supported.join(', ')}])`,
+    );
+  }
+  return common[0];
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@suveren/gateway",
-  "version": "0.19.5",
+  "version": "0.20.0",
   "description": "Suveren gateway — local agent gateway built in compliance with the Human Agency Protocol (HAP). Runs the UI, control plane, and MCP server in one Node process.",
   "type": "module",
   "main": "server.js",
@@ -24,7 +24,7 @@
     "node": ">=22"
   },
   "dependencies": {
-    "@hap/core": "npm:@humanagencyp/hap-core@^0.11.1",
+    "@hap/core": "npm:@humanagencyp/hap-core@^0.12.0",
     "@hpke/core": "^1.9.0",
     "express": "^4.22.3",
     "http-proxy-middleware": "^3.0.7",

package/profiles/calendar/0.6.profile.json

@@ -0,0 +1,191 @@
+{
+  "id": "github.com/humanagencyprotocol/hap-profiles/calendar@0.6",
+  "name": "Calendar",
+  "version": "0.6",
+  "description": "Calendar authority — governs calendar access: reading, drafting, and booking events",
+  "whatsNew": "Protocol v0.7 wording: the scope schema replaces the context schema, and the required gate is the Mandate Owner. Limits and scope are unchanged.",
+  "boundsSchema": {
+    "actionTypes": [
+      "booking",
+      "delete"
+    ],
+    "keyOrder": [
+      "profile",
+      "booking_daily_max",
+      "booking_duration_max",
+      "lookahead_days_max"
+    ],
+    "fields": {
+      "profile": {
+        "type": "string",
+        "required": true
+      },
+      "booking_daily_max": {
+        "type": "number",
+        "required": true,
+        "displayName": "Daily booking limit",
+        "description": "Maximum new events booked per day",
+        "unit": "count",
+        "boundType": {
+          "kind": "cumulative_count",
+          "window": "daily"
+        },
+        "appliesTo": [
+          "booking"
+        ]
+      },
+      "booking_duration_max": {
+        "type": "number",
+        "required": true,
+        "displayName": "Max event duration",
+        "description": "Maximum duration of a single event",
+        "unit": "minutes",
+        "boundType": {
+          "kind": "per_transaction",
+          "of": "duration"
+        }
+      },
+      "lookahead_days_max": {
+        "type": "number",
+        "required": true,
+        "displayName": "Max lookahead",
+        "description": "Maximum number of days into the future an event can be booked",
+        "unit": "days",
+        "boundType": {
+          "kind": "per_transaction",
+          "of": "lookahead"
+        }
+      }
+    }
+  },
+  "scopeSchema": {
+    "keyOrder": [
+      "allowed_calendars",
+      "allowed_attendees",
+      "allowed_domains"
+    ],
+    "fields": {
+      "allowed_calendars": {
+        "type": "string",
+        "required": false,
+        "displayName": "Allowed calendars",
+        "description": "Comma-separated list of calendar names the agent may access",
+        "constraint": {
+          "type": "string",
+          "enforceable": [
+            "subset"
+          ]
+        }
+      },
+      "allowed_attendees": {
+        "type": "string",
+        "required": false,
+        "displayName": "Allowed attendees",
+        "format": "email",
+        "description": "Comma-separated list of allowed attendee email addresses",
+        "constraint": {
+          "type": "string",
+          "enforceable": [
+            "subset"
+          ]
+        }
+      },
+      "allowed_domains": {
+        "type": "string",
+        "required": false,
+        "displayName": "Allowed domains",
+        "format": "domain",
+        "description": "Comma-separated list of allowed attendee domains (e.g. acme.com,partner.org)",
+        "constraint": {
+          "type": "string",
+          "enforceable": [
+            "subset"
+          ]
+        }
+      }
+    }
+  },
+  "executionContextSchema": {
+    "fields": {
+      "duration": {
+        "source": "declared",
+        "description": "Duration of the event in minutes",
+        "required": true,
+        "constraint": {
+          "type": "number",
+          "enforceable": [
+            "max"
+          ]
+        }
+      },
+      "lookahead": {
+        "source": "declared",
+        "description": "Days from now the event is scheduled",
+        "required": true,
+        "constraint": {
+          "type": "number",
+          "enforceable": [
+            "max"
+          ]
+        }
+      },
+      "allowed_calendars": {
+        "source": "declared",
+        "description": "Calendar being used (checked against authorized calendars)",
+        "required": false,
+        "constraint": {
+          "type": "string",
+          "enforceable": [
+            "subset"
+          ]
+        }
+      },
+      "allowed_attendees": {
+        "source": "declared",
+        "description": "Attendee addresses from this event (checked against authorized attendees)",
+        "required": false,
+        "constraint": {
+          "type": "string",
+          "enforceable": [
+            "subset"
+          ]
+        }
+      },
+      "allowed_domains": {
+        "source": "declared",
+        "description": "Unique attendee domains from this event (checked against authorized domains)",
+        "required": false,
+        "constraint": {
+          "type": "string",
+          "enforceable": [
+            "subset"
+          ]
+        }
+      },
+      "booking_count_daily": {
+        "source": "cumulative",
+        "cumulativeField": "_count",
+        "window": "daily",
+        "description": "Running daily booking count (resolved from execution log)",
+        "required": true,
+        "constraint": {
+          "type": "number",
+          "enforceable": [
+            "max"
+          ]
+        }
+      }
+    }
+  },
+  "requiredGates": [
+    "bounds",
+    "intent",
+    "commitment",
+    "mandate_owner"
+  ],
+  "ttl": {
+    "default": 86400,
+    "max": 31536000
+  },
+  "retention_minimum": 7776000
+}

package/profiles/charge/0.6.profile.json

@@ -0,0 +1,211 @@
+{
+  "id": "github.com/humanagencyprotocol/hap-profiles/charge@0.6",
+  "name": "Charge",
+  "version": "0.6",
+  "description": "Charge authority — governs charging customers: payments, refunds, subscriptions",
+  "whatsNew": "Protocol v0.7 wording: the scope schema replaces the context schema, and the required gate is the Mandate Owner. Limits and scope are unchanged.",
+  "boundsSchema": {
+    "actionTypes": [
+      "charge",
+      "subscribe",
+      "unclassified"
+    ],
+    "keyOrder": [
+      "profile",
+      "amount_max",
+      "amount_daily_max",
+      "amount_monthly_max",
+      "transaction_count_daily_max"
+    ],
+    "fields": {
+      "profile": {
+        "type": "string",
+        "required": true
+      },
+      "amount_max": {
+        "type": "number",
+        "required": true,
+        "displayName": "Max per transaction",
+        "description": "Maximum monetary amount per transaction in currency units",
+        "unit": "currency:EUR",
+        "boundType": {
+          "kind": "per_transaction",
+          "of": "amount"
+        }
+      },
+      "amount_daily_max": {
+        "type": "number",
+        "required": true,
+        "displayName": "Daily charge limit",
+        "description": "Maximum cumulative charges per day in currency units",
+        "unit": "currency:EUR",
+        "boundType": {
+          "kind": "cumulative_sum",
+          "of": "amount",
+          "window": "daily"
+        }
+      },
+      "amount_monthly_max": {
+        "type": "number",
+        "required": true,
+        "displayName": "Monthly charge limit",
+        "description": "Maximum cumulative charges per month in currency units",
+        "unit": "currency:EUR",
+        "boundType": {
+          "kind": "cumulative_sum",
+          "of": "amount",
+          "window": "monthly"
+        }
+      },
+      "transaction_count_daily_max": {
+        "type": "number",
+        "required": true,
+        "displayName": "Daily transaction limit",
+        "description": "Maximum number of transactions per day",
+        "unit": "count",
+        "boundType": {
+          "kind": "cumulative_count",
+          "window": "daily"
+        },
+        "appliesTo": [
+          "charge",
+          "subscribe",
+          "unclassified"
+        ]
+      }
+    }
+  },
+  "scopeSchema": {
+    "keyOrder": [
+      "currency",
+      "action_type"
+    ],
+    "fields": {
+      "currency": {
+        "type": "string",
+        "required": true,
+        "displayName": "Currency",
+        "description": "Permitted currency code",
+        "constraint": {
+          "type": "string",
+          "enforceable": [
+            "enum"
+          ]
+        },
+        "enum": [
+          "USD",
+          "EUR",
+          "GBP",
+          "CHF",
+          "JPY",
+          "CAD",
+          "AUD"
+        ]
+      },
+      "action_type": {
+        "type": "string",
+        "required": true,
+        "displayName": "Action type",
+        "description": "Authorized financial operation",
+        "constraint": {
+          "type": "string",
+          "enforceable": [
+            "enum"
+          ]
+        },
+        "enum": [
+          "charge",
+          "refund",
+          "subscribe"
+        ]
+      }
+    }
+  },
+  "executionContextSchema": {
+    "fields": {
+      "action_type": {
+        "source": "declared",
+        "description": "Financial operation being performed",
+        "required": true,
+        "constraint": {
+          "type": "string",
+          "enforceable": [
+            "enum"
+          ]
+        }
+      },
+      "amount": {
+        "source": "declared",
+        "description": "Monetary amount in currency units",
+        "required": true,
+        "constraint": {
+          "type": "number",
+          "enforceable": [
+            "max"
+          ]
+        }
+      },
+      "currency": {
+        "source": "declared",
+        "description": "Currency code",
+        "required": true,
+        "constraint": {
+          "type": "string",
+          "enforceable": [
+            "enum"
+          ]
+        }
+      },
+      "amount_daily": {
+        "source": "cumulative",
+        "cumulativeField": "amount",
+        "window": "daily",
+        "description": "Running daily charge total (resolved from execution log)",
+        "required": true,
+        "constraint": {
+          "type": "number",
+          "enforceable": [
+            "max"
+          ]
+        }
+      },
+      "amount_monthly": {
+        "source": "cumulative",
+        "cumulativeField": "amount",
+        "window": "monthly",
+        "description": "Running monthly charge total (resolved from execution log)",
+        "required": true,
+        "constraint": {
+          "type": "number",
+          "enforceable": [
+            "max"
+          ]
+        }
+      },
+      "transaction_count_daily": {
+        "source": "cumulative",
+        "cumulativeField": "_count",
+        "window": "daily",
+        "description": "Running daily transaction count (resolved from execution log)",
+        "required": true,
+        "constraint": {
+          "type": "number",
+          "enforceable": [
+            "max"
+          ]
+        }
+      }
+    }
+  },
+  "requiredGates": [
+    "bounds",
+    "intent",
+    "commitment",
+    "mandate_owner"
+  ],
+  "ttl": {
+    "default": 86400,
+    "max": 2592000
+  },
+  "retention_minimum": 7776000
+}

package/profiles/customers/0.9.profile.json

@@ -0,0 +1,182 @@
+{
+  "id": "github.com/humanagencyprotocol/hap-profiles/customers@0.9",
+  "name": "Customer Management",
+  "version": "0.9",
+  "description": "Customer authority — governs CRM operations: contacts, activities, deals, tasks",
+  "whatsNew": "Protocol v0.7 wording: the scope schema replaces the context schema, and the required gate is the Mandate Owner. Limits and scope are unchanged.",
+  "boundsSchema": {
+    "actionTypes": [
+      "delete",
+      "write",
+      "setup"
+    ],
+    "keyOrder": [
+      "profile",
+      "read_access",
+      "export_access",
+      "write_daily_max",
+      "delete_daily_max",
+      "setup_daily_max"
+    ],
+    "fields": {
+      "profile": {
+        "type": "string",
+        "required": true
+      },
+      "read_access": {
+        "type": "string",
+        "required": true,
+        "displayName": "Read access",
+        "description": "Allow the agent to browse contacts, timelines, pipeline and tasks. Bulk export is governed separately by Export access.",
+        "boundType": {
+          "kind": "enum",
+          "values": [
+            "unlimited",
+            "none"
+          ]
+        },
+        "toolsDescription": "find_contacts, get_timeline, get_pipeline, list_tasks",
+        "default": "unlimited"
+      },
+      "export_access": {
+        "type": "string",
+        "required": true,
+        "displayName": "Export access",
+        "description": "Allow the agent to export the ENTIRE CRM in one call. Separate from read access because the risk is different in kind: reading one contact and extracting the whole customer database are not the same decision.",
+        "boundType": {
+          "kind": "enum",
+          "values": [
+            "allowed",
+            "none"
+          ]
+        },
+        "toolsDescription": "export_crm",
+        "default": "none"
+      },
+      "write_daily_max": {
+        "type": "number",
+        "required": true,
+        "displayName": "Daily write limit",
+        "description": "Maximum CRM write operations per day (creates, updates)",
+        "unit": "count",
+        "boundType": {
+          "kind": "cumulative_count",
+          "window": "daily"
+        },
+        "appliesTo": [
+          "write"
+        ]
+      },
+      "delete_daily_max": {
+        "type": "number",
+        "required": true,
+        "displayName": "Daily delete limit",
+        "description": "Maximum CRM delete operations per day",
+        "unit": "count",
+        "boundType": {
+          "kind": "cumulative_count",
+          "window": "daily"
+        },
+        "appliesTo": [
+          "delete"
+        ]
+      },
+      "setup_daily_max": {
+        "type": "number",
+        "required": true,
+        "displayName": "Test-data loads per day",
+        "description": "How many times per day the simulated system may be loaded with a simulation package (load_simulation). Only works while the connector runs in simulation mode, and only into an empty system — a load cannot edit or replace existing test data. 0 = not allowed. Grant it only in a separate setup mandate, never in the mandate the AI uses for its work.",
+        "unit": "count",
+        "boundType": {
+          "kind": "cumulative_count",
+          "window": "daily"
+        },
+        "appliesTo": [
+          "setup"
+        ],
+        "default": 0
+      }
+    }
+  },
+  "scopeSchema": {
+    "keyOrder": [
+      "contact_type"
+    ],
+    "fields": {
+      "contact_type": {
+        "type": "string",
+        "required": true,
+        "displayName": "Contact types the agent may create or modify",
+        "description": "Contact types the agent may create, update or delete. Does NOT restrict reading — reads are governed by read_access.",
+        "enum": [
+          "customer",
+          "lead",
+          "partner",
+          "vendor"
+        ],
+        "constraint": {
+          "type": "string",
+          "enforceable": [
+            "subset"
+          ]
+        }
+      }
+    }
+  },
+  "executionContextSchema": {
+    "fields": {
+      "contact_type": {
+        "source": "declared",
+        "description": "Contact type being accessed",
+        "required": true,
+        "constraint": {
+          "type": "string",
+          "enforceable": [
+            "subset"
+          ]
+        }
+      },
+      "write_count_daily": {
+        "source": "cumulative",
+        "cumulativeField": "_count",
+        "window": "daily",
+        "description": "Running daily write operation count",
+        "required": true,
+        "constraint": {
+          "type": "number",
+          "enforceable": [
+            "max"
+          ]
+        }
+      },
+      "setup_count_daily": {
+        "source": "cumulative",
+        "cumulativeField": "_count",
+        "window": "daily",
+        "description": "Running daily count of test-data loads",
+        "required": true,
+        "constraint": {
+          "type": "number",
+          "enforceable": [
+            "max"
+          ]
+        }
+      }
+    }
+  },
+  "requiredGates": [
+    "bounds",
+    "intent",
+    "commitment",
+    "mandate_owner"
+  ],
+  "ttl": {
+    "default": 86400,
+    "max": 31536000
+  },
+  "retention_minimum": 7776000,
+  "content_binding": {
+    "version": "1",
+    "kind": "jcs"
+  }
+}