@suveren/gateway 0.2.8 → 0.2.9

package/dist/mcp-server/http.mjs

@@ -2244,7 +2244,7 @@ function loadProfiles(profilesDir) {
   const dir = resolve(profilesDir ?? process.env.SUVEREN_PROFILES_DIR ?? join6(import.meta.dirname ?? __dirname, "..", "..", "..", "..", "..", "hap-profiles"));
   const indexPath = join6(dir, "index.json");
   if (!existsSync6(indexPath)) {
-    console.error(`[ProfileLoader] No index.json found at ${indexPath}, skipping profile loading`);
+    warnNoProfiles(`No index.json at ${indexPath}`);
     return 0;
   }
   let index;
@@ -2269,9 +2269,26 @@ function loadProfiles(profilesDir) {
       console.error(`[ProfileLoader] Failed to load profile ${profileId} from ${profilePath}:`, err);
     }
   }
-  console.error(`[ProfileLoader] Loaded ${loaded} profile(s) from ${dir}`);
+  if (loaded === 0) {
+    warnNoProfiles(`index.json at ${indexPath} registered 0 profiles`);
+  } else {
+    console.error(`[ProfileLoader] Loaded ${loaded} profile(s) from ${dir}`);
+  }
   return loaded;
 }
+function warnNoProfiles(reason) {
+  console.error(
+    `
+\u2554\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2557
+\u2551  \u26A0  NO PROFILES LOADED \u2014 every gated action will be REJECTED with   \u2551
+\u2551     "Unknown profile". This gateway is misconfigured.               \u2551
+\u2551     Reason: ${reason}
+\u2551     Fix: install a build that bundles profiles, or set              \u2551
+\u2551     SUVEREN_PROFILES_DIR to a hap-profiles checkout, then restart.  \u2551
+\u255A\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u255D
+`
+  );
+}
 
 // src/lib/manifest-loader.ts
 import { readFileSync as readFileSync6, existsSync as existsSync7 } from "fs";
@@ -2605,11 +2622,13 @@ app.all("/mcp", async (req, res) => {
     res.status(405).json({ error: "Method not allowed" });
   }
 });
+var profilesLoaded = 0;
 app.get("/health", (_req, res) => {
   res.json({
     status: "ok",
     transports: ["sse", "streamable-http"],
     sp: spUrl,
+    profilesLoaded,
     activeSessions: activeSessions.size,
     storedGates: state.gateStore.getAll().length,
     serviceCredentials: Array.from(serviceCredentials.keys()),
@@ -2699,7 +2718,7 @@ app.listen(port, "0.0.0.0", () => {
   console.error(`[Suveren MCP]   SSE:        http://0.0.0.0:${port}/sse`);
   console.error(`[Suveren MCP]   Streamable: http://0.0.0.0:${port}/mcp`);
   console.error(`[Suveren MCP]   SP server:  ${spUrl}`);
-  loadProfiles();
+  profilesLoaded = loadProfiles();
   loadManifests();
   if (integrationRegistry.getEnabled().length === 0) {
     const personalManifests = getAllManifests().filter((m) => m.personalDefault);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@suveren/gateway",
-  "version": "0.2.8",
+  "version": "0.2.9",
   "description": "Suveren gateway — local agent gateway built in compliance with the Human Agency Protocol (HAP). Runs the UI, control plane, and MCP server in one Node process.",
   "type": "module",
   "main": "server.js",

package/profiles/README.md

@@ -0,0 +1,209 @@
+# HAP Authority Profiles
+
+Authorization templates for the [Human Agency Protocol](https://humanagencyprotocol.org). Each profile defines what an AI agent is allowed to do within a specific domain — the bounds a human sets, and the Gatekeeper enforces.
+
+> **Version 0.4** — March 2026
+
+---
+
+## What Profiles Define
+
+A profile is a complete authorization schema. It specifies:
+
+- **Bounds schema** — the limits a human commits to (e.g., max amount, allowed currencies)
+- **Context schema** — local parameters that stay encrypted (e.g., allowed services, environment)
+- **Execution context** — what the Gatekeeper checks at runtime, including cumulative limits
+- **Execution paths** — governance tiers with required domain owners and TTLs
+- **Gates** — the structured questions a human must answer before authorization
+
+Profiles are referenced by ID (e.g., `charge@0.4`) and are immutable once published.
+
+---
+
+## Profiles
+
+### charge — Charge Authority
+
+Governs charging customers: payments, refunds, subscriptions.
+
+| Bound | Type | Purpose |
+|-------|------|---------|
+| `amount_max` | per-transaction | Maximum monetary amount |
+| `amount_daily_max` | cumulative | Daily charge cap |
+| `amount_monthly_max` | cumulative | Monthly charge cap |
+| `transaction_count_daily_max` | cumulative | Daily transaction limit |
+
+| Context | Type | Purpose |
+|---------|------|---------|
+| `currency` | enum | Permitted currencies |
+| `action_type` | enum | charge, refund, subscribe |
+
+| Path | Default TTL |
+|------|-------------|
+| `charge-routine` | 24h |
+| `charge-reviewed` | 4h |
+
+---
+
+### purchase — Purchase Authority
+
+Governs spending company money: subscriptions, supplies, services, advertising.
+
+| Bound | Type | Purpose |
+|-------|------|---------|
+| `spend_max` | per-transaction | Maximum spend amount |
+| `spend_daily_max` | cumulative | Daily spend cap |
+| `spend_monthly_max` | cumulative | Monthly spend cap |
+| `transaction_count_daily_max` | cumulative | Daily transaction limit |
+
+| Context | Type | Purpose |
+|---------|------|---------|
+| `currency` | enum | Permitted currencies |
+| `category` | enum | subscription, supply, service, advertising |
+| `allowed_vendors` | subset | Approved vendor names |
+
+| Path | Default TTL |
+|------|-------------|
+| `purchase-routine` | 24h |
+| `purchase-reviewed` | 4h |
+
+---
+
+### email — Email Authority
+
+Governs sending, drafting, and reading email via Gmail.
+
+| Bound | Type | Purpose |
+|-------|------|---------|
+| `recipient_max` | per-email | Maximum recipients |
+| `send_daily_max` | cumulative | Daily send/draft limit |
+| `read_max_age_days` | per-query | Max email age for search |
+| `read_daily_max` | cumulative | Daily read limit |
+
+| Context | Type | Purpose |
+|---------|------|---------|
+| `allowed_recipients` | subset | Permitted email addresses |
+| `allowed_domains` | subset | Permitted recipient domains |
+
+| Path | Default TTL |
+|------|-------------|
+| `email-draft` | 24h |
+| `email-send` | 4h |
+| `email-read` | 24h |
+
+---
+
+### customers — Customer Management
+
+Governs CRM operations: contacts, activities, deals, tasks.
+
+| Bound | Type | Purpose |
+|-------|------|---------|
+| `write_daily_max` | cumulative | Daily write operations |
+
+| Context | Type | Purpose |
+|---------|------|---------|
+| `contact_type` | subset | customer, lead, partner, vendor |
+
+| Path | Default TTL |
+|------|-------------|
+| `customers-read` | 24h |
+| `customers-write` | 8h |
+| `customers-delete` | 2h |
+
+---
+
+### schedule — Scheduling Authority
+
+Governs calendar access: reading, drafting, and booking events.
+
+| Bound | Type | Purpose |
+|-------|------|---------|
+| `booking_daily_max` | cumulative | Daily new bookings |
+| `booking_duration_max` | per-event | Max event duration (minutes) |
+| `lookahead_days_max` | per-event | Max days into the future |
+
+| Context | Type | Purpose |
+|---------|------|---------|
+| `allowed_calendars` | subset | Permitted calendar names |
+| `allowed_attendees` | subset | Permitted attendee emails |
+| `allowed_domains` | subset | Permitted attendee domains |
+
+| Path | Default TTL |
+|------|-------------|
+| `schedule-read` | 24h |
+| `schedule-draft` | 24h |
+| `schedule-book` | 4h |
+
+---
+
+### publish — Content Publishing
+
+Governs posting public content to social media, blogs, and other platforms.
+
+| Bound | Type | Purpose |
+|-------|------|---------|
+| `post_daily_max` | cumulative | Daily post limit |
+| `post_monthly_max` | cumulative | Monthly post limit |
+
+| Context | Type | Purpose |
+|---------|------|---------|
+| `allowed_platforms` | subset | twitter, linkedin, instagram, blog, medium |
+| `content_type` | enum | text, image, link, thread |
+| `audience` | enum | public, followers, connections |
+
+| Path | Default TTL |
+|------|-------------|
+| `publish-draft` | 24h |
+| `publish-post` | 4h |
+
+---
+
+### records — Records Authority
+
+Governs accessing and modifying personal structured data: queries, schema changes, exports. Renamed from `data` — for personal databases and spreadsheet replacements, not shared CRM data.
+
+| Bound | Type | Purpose |
+|-------|------|---------|
+| `row_limit_max` | per-query | Maximum rows returned |
+| `query_count_daily_max` | cumulative | Daily query limit |
+| `export_row_count_daily_max` | cumulative | Daily exported row limit |
+
+| Context | Type | Purpose |
+|---------|------|---------|
+| `access_level` | enum | read, write, admin |
+| `data_scope` | enum | public, internal, pii |
+| `scope` | enum | external (production), internal (sandbox) |
+
+| Path | Default TTL |
+|------|-------------|
+| `records-read` | 8h |
+| `records-write` | 2h |
+| `records-export` | 1h |
+
+---
+
+## How Profiles Work
+
+A human creates an authorization by selecting a profile and execution path, setting the bounds, and answering the gate questions. Domain owners cryptographically attest to the bounds. The Gatekeeper then enforces those bounds on every tool call:
+
+```
+Human sets bounds          Agent requests execution        Gatekeeper checks
+amount_max: 80 EUR    ->   amount: 5 EUR              ->  5 <= 80, approved
+action_type: [charge]      action_type: "charge"          "charge" in [charge], approved
+amount_daily_max: 500      amount_daily: 423 (from log)   423 + 5 <= 500, approved
+```
+
+If any bound is exceeded, the Gatekeeper blocks execution.
+
+All profiles require the same six gates: bounds, problem, objective, tradeoff, commitment, and decision owner.
+
+---
+
+## Community Profiles
+
+Anyone can create and publish profiles through the [HAP Service Provider](https://humanagencyprotocol.com). Published profiles are immutable and versioned. There is no approval process — trust decisions are local.
+
+---
+
+See [humanagencyprotocol.org](https://humanagencyprotocol.org) for the full protocol specification.

package/profiles/calendar/0.4.profile.json

@@ -0,0 +1,183 @@
+{
+  "id": "github.com/humanagencyprotocol/hap-profiles/calendar@0.4",
+  "name": "Calendar",
+  "version": "0.4",
+  "description": "Calendar authority \u2014 governs calendar access: reading, drafting, and booking events",
+  "boundsSchema": {
+    "keyOrder": [
+      "profile",
+      "booking_daily_max",
+      "booking_duration_max",
+      "lookahead_days_max"
+    ],
+    "fields": {
+      "profile": {
+        "type": "string",
+        "required": true
+      },
+      "booking_daily_max": {
+        "type": "number",
+        "required": true,
+        "displayName": "Daily booking limit",
+        "description": "Maximum new events booked per day",
+        "unit": "count",
+        "boundType": {
+          "kind": "cumulative_count",
+          "window": "daily"
+        }
+      },
+      "booking_duration_max": {
+        "type": "number",
+        "required": true,
+        "displayName": "Max event duration",
+        "description": "Maximum duration of a single event",
+        "unit": "minutes",
+        "boundType": {
+          "kind": "per_transaction",
+          "of": "duration"
+        }
+      },
+      "lookahead_days_max": {
+        "type": "number",
+        "required": true,
+        "displayName": "Max lookahead",
+        "description": "Maximum number of days into the future an event can be booked",
+        "unit": "days",
+        "boundType": {
+          "kind": "per_transaction",
+          "of": "lookahead"
+        }
+      }
+    }
+  },
+  "contextSchema": {
+    "keyOrder": [
+      "allowed_calendars",
+      "allowed_attendees",
+      "allowed_domains"
+    ],
+    "fields": {
+      "allowed_calendars": {
+        "type": "string",
+        "required": false,
+        "displayName": "Allowed calendars",
+        "description": "Comma-separated list of calendar names the agent may access",
+        "constraint": {
+          "type": "string",
+          "enforceable": [
+            "subset"
+          ]
+        }
+      },
+      "allowed_attendees": {
+        "type": "string",
+        "required": false,
+        "displayName": "Allowed attendees",
+        "format": "email",
+        "description": "Comma-separated list of allowed attendee email addresses",
+        "constraint": {
+          "type": "string",
+          "enforceable": [
+            "subset"
+          ]
+        }
+      },
+      "allowed_domains": {
+        "type": "string",
+        "required": false,
+        "displayName": "Allowed domains",
+        "format": "domain",
+        "description": "Comma-separated list of allowed attendee domains (e.g. acme.com,partner.org)",
+        "constraint": {
+          "type": "string",
+          "enforceable": [
+            "subset"
+          ]
+        }
+      }
+    }
+  },
+  "executionContextSchema": {
+    "fields": {
+      "duration": {
+        "source": "declared",
+        "description": "Duration of the event in minutes",
+        "required": true,
+        "constraint": {
+          "type": "number",
+          "enforceable": [
+            "max"
+          ]
+        }
+      },
+      "lookahead": {
+        "source": "declared",
+        "description": "Days from now the event is scheduled",
+        "required": true,
+        "constraint": {
+          "type": "number",
+          "enforceable": [
+            "max"
+          ]
+        }
+      },
+      "allowed_calendars": {
+        "source": "declared",
+        "description": "Calendar being used (checked against authorized calendars)",
+        "required": false,
+        "constraint": {
+          "type": "string",
+          "enforceable": [
+            "subset"
+          ]
+        }
+      },
+      "allowed_attendees": {
+        "source": "declared",
+        "description": "Attendee addresses from this event (checked against authorized attendees)",
+        "required": false,
+        "constraint": {
+          "type": "string",
+          "enforceable": [
+            "subset"
+          ]
+        }
+      },
+      "allowed_domains": {
+        "source": "declared",
+        "description": "Unique attendee domains from this event (checked against authorized domains)",
+        "required": false,
+        "constraint": {
+          "type": "string",
+          "enforceable": [
+            "subset"
+          ]
+        }
+      },
+      "booking_count_daily": {
+        "source": "cumulative",
+        "cumulativeField": "_count",
+        "window": "daily",
+        "description": "Running daily booking count (resolved from execution log)",
+        "required": true,
+        "constraint": {
+          "type": "number",
+          "enforceable": [
+            "max"
+          ]
+        }
+      }
+    }
+  },
+  "requiredGates": [
+    "bounds",
+    "intent",
+    "commitment",
+    "decision_owner"
+  ],
+  "ttl": {
+    "default": 86400,
+    "max": 31536000
+  },
+  "retention_minimum": 7776000
+}

package/profiles/charge/0.3.profile.json

@@ -0,0 +1,173 @@
+{
+  "id": "github.com/humanagencyprotocol/hap-profiles/charge@0.3",
+  "version": "0.3",
+  "name": "Charge",
+  "description": "Charge authority — governs charging customers: payments, refunds, subscriptions",
+
+  "frameSchema": {
+    "keyOrder": ["profile", "path", "amount_max", "currency", "action_type"],
+    "fields": {
+      "profile": { "type": "string", "required": true },
+      "path": { "type": "string", "required": true },
+      "amount_max": {
+        "type": "number",
+        "required": true,
+        "description": "Maximum monetary amount per transaction in currency units",
+        "constraint": { "type": "number", "enforceable": ["max"] }
+      },
+      "currency": {
+        "type": "string",
+        "required": true,
+        "description": "Permitted currency code",
+        "constraint": { "type": "string", "enforceable": ["enum"] }
+      },
+      "action_type": {
+        "type": "string",
+        "required": true,
+        "description": "Authorized financial operation (charge, refund, subscribe)",
+        "constraint": { "type": "string", "enforceable": ["enum"] }
+      },
+      "amount_daily_max": {
+        "type": "number",
+        "required": true,
+        "description": "Maximum cumulative charges per day in currency units",
+        "constraint": { "type": "number", "enforceable": ["max"] }
+      },
+      "amount_monthly_max": {
+        "type": "number",
+        "required": true,
+        "description": "Maximum cumulative charges per month in currency units",
+        "constraint": { "type": "number", "enforceable": ["max"] }
+      },
+      "transaction_count_daily_max": {
+        "type": "number",
+        "required": true,
+        "description": "Maximum number of transactions per day",
+        "constraint": { "type": "number", "enforceable": ["max"] }
+      }
+    }
+  },
+
+  "executionContextSchema": {
+    "fields": {
+      "action_type": {
+        "source": "declared",
+        "description": "Financial operation being performed",
+        "required": true,
+        "constraint": { "type": "string", "enforceable": ["enum"] }
+      },
+      "amount": {
+        "source": "declared",
+        "description": "Monetary amount in currency units",
+        "required": true,
+        "constraint": { "type": "number", "enforceable": ["max"] }
+      },
+      "currency": {
+        "source": "declared",
+        "description": "Currency code",
+        "required": true,
+        "constraint": { "type": "string", "enforceable": ["enum"] }
+      },
+      "amount_daily": {
+        "source": "cumulative",
+        "cumulativeField": "amount",
+        "window": "daily",
+        "description": "Running daily charge total (resolved from execution log)",
+        "required": true,
+        "constraint": { "type": "number", "enforceable": ["max"] }
+      },
+      "amount_monthly": {
+        "source": "cumulative",
+        "cumulativeField": "amount",
+        "window": "monthly",
+        "description": "Running monthly charge total (resolved from execution log)",
+        "required": true,
+        "constraint": { "type": "number", "enforceable": ["max"] }
+      },
+      "transaction_count_daily": {
+        "source": "cumulative",
+        "cumulativeField": "_count",
+        "window": "daily",
+        "description": "Running daily transaction count (resolved from execution log)",
+        "required": true,
+        "constraint": { "type": "number", "enforceable": ["max"] }
+      }
+    }
+  },
+
+  "executionPaths": {
+    "charge-routine": {
+      "description": "Day-to-day financial transactions within authorized bounds",
+      "requiredDomains": ["finance"],
+      "ttl": { "default": 86400, "max": 86400 }
+    },
+    "charge-reviewed": {
+      "description": "Large or unusual transactions requiring dual authorization",
+      "requiredDomains": ["finance", "compliance"],
+      "ttl": { "default": 14400, "max": 86400 }
+    }
+  },
+
+  "requiredGates": ["frame", "problem", "objective", "tradeoff", "commitment", "decision_owner"],
+
+  "gateQuestions": {
+    "problem": { "question": "What problem does this charge authority address?", "required": true },
+    "objective": { "question": "What outcome should this charge authority enable?", "required": true },
+    "tradeoffs": { "question": "What financial risks do you accept with this authority?", "required": true }
+  },
+
+  "ttl": { "default": 86400, "max": 86400 },
+  "retention_minimum": 7776000,
+
+  "toolGating": {
+    "default": {
+      "executionMapping": {},
+      "staticExecution": { "action_type": "read" }
+    },
+    "overrides": {
+      "create_payment_link": {
+        "executionMapping": {
+          "unit_amount": { "field": "amount", "divisor": 100 },
+          "currency": "currency"
+        },
+        "staticExecution": { "action_type": "charge" }
+      },
+      "create_price": {
+        "executionMapping": {
+          "unit_amount": { "field": "amount", "divisor": 100 },
+          "currency": "currency"
+        },
+        "staticExecution": { "action_type": "charge" }
+      },
+      "create_invoice_item": {
+        "executionMapping": {
+          "amount": { "field": "amount", "divisor": 100 },
+          "currency": "currency"
+        },
+        "staticExecution": { "action_type": "charge" }
+      },
+      "create_refund": {
+        "executionMapping": {
+          "amount": { "field": "amount", "divisor": 100 }
+        },
+        "staticExecution": { "action_type": "refund" }
+      },
+      "create_subscription": {
+        "executionMapping": {},
+        "staticExecution": { "action_type": "subscribe" }
+      },
+      "cancel_subscription": {
+        "executionMapping": {},
+        "staticExecution": { "action_type": "subscribe" }
+      },
+      "update_subscription": {
+        "executionMapping": {},
+        "staticExecution": { "action_type": "subscribe" }
+      },
+      "retrieve_balance": null,
+      "list_invoices": null,
+      "list_subscriptions": null,
+      "list_payment_methods": null
+    }
+  }
+}