@suveren/gateway 0.21.0 → 0.23.0

package/dist/ui/index.html

@@ -14,8 +14,8 @@
     <meta name="apple-mobile-web-app-title" content="Suveren" />
     <meta name="theme-color" content="#111111" />
     <title>Suveren</title>
-    <script type="module" crossorigin src="/assets/index-BBjT8ue7.js"></script>
-    <link rel="stylesheet" crossorigin href="/assets/index-D5hgQ_8Z.css">
+    <script type="module" crossorigin src="/assets/index-C98JiZLb.js"></script>
+    <link rel="stylesheet" crossorigin href="/assets/index-C604QQYJ.css">
   </head>
   <body>
     <div id="root"></div>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@suveren/gateway",
-  "version": "0.21.0",
+  "version": "0.23.0",
   "description": "Suveren gateway — local agent gateway built in compliance with the Human Agency Protocol (HAP). Runs the UI, control plane, and MCP server in one Node process.",
   "type": "module",
   "main": "server.js",

package/profiles/customers/0.10.profile.json

@@ -0,0 +1,186 @@
+{
+  "id": "github.com/humanagencyprotocol/hap-profiles/customers@0.10",
+  "name": "Customer Management",
+  "version": "0.10",
+  "description": "Customer authority — governs CRM operations: contacts, activities, deals, tasks",
+  "whatsNew": "The contact type is now required for write and delete actions: a call that does not say which contact type it changes is refused, so a mandate limited to some contact types cannot touch others by leaving the type out. Limits are unchanged.",
+  "boundsSchema": {
+    "actionTypes": [
+      "delete",
+      "write",
+      "setup"
+    ],
+    "keyOrder": [
+      "profile",
+      "read_access",
+      "export_access",
+      "write_daily_max",
+      "delete_daily_max",
+      "setup_daily_max"
+    ],
+    "fields": {
+      "profile": {
+        "type": "string",
+        "required": true
+      },
+      "read_access": {
+        "type": "string",
+        "required": true,
+        "displayName": "Read access",
+        "description": "Allow the agent to browse contacts, timelines, pipeline and tasks. Bulk export is governed separately by Export access.",
+        "boundType": {
+          "kind": "enum",
+          "values": [
+            "unlimited",
+            "none"
+          ]
+        },
+        "toolsDescription": "find_contacts, get_timeline, get_pipeline, list_tasks",
+        "default": "unlimited"
+      },
+      "export_access": {
+        "type": "string",
+        "required": true,
+        "displayName": "Export access",
+        "description": "Allow the agent to export the ENTIRE CRM in one call. Separate from read access because the risk is different in kind: reading one contact and extracting the whole customer database are not the same decision.",
+        "boundType": {
+          "kind": "enum",
+          "values": [
+            "allowed",
+            "none"
+          ]
+        },
+        "toolsDescription": "export_crm",
+        "default": "none"
+      },
+      "write_daily_max": {
+        "type": "number",
+        "required": true,
+        "displayName": "Daily write limit",
+        "description": "Maximum CRM write operations per day (creates, updates)",
+        "unit": "count",
+        "boundType": {
+          "kind": "cumulative_count",
+          "window": "daily"
+        },
+        "appliesTo": [
+          "write"
+        ]
+      },
+      "delete_daily_max": {
+        "type": "number",
+        "required": true,
+        "displayName": "Daily delete limit",
+        "description": "Maximum CRM delete operations per day",
+        "unit": "count",
+        "boundType": {
+          "kind": "cumulative_count",
+          "window": "daily"
+        },
+        "appliesTo": [
+          "delete"
+        ]
+      },
+      "setup_daily_max": {
+        "type": "number",
+        "required": true,
+        "displayName": "Test-data loads per day",
+        "description": "How many times per day the simulated system may be loaded with a simulation package (load_simulation). Only works while the connector runs in simulation mode, and only into an empty system — a load cannot edit or replace existing test data. 0 = not allowed. Grant it only in a separate setup mandate, never in the mandate the AI uses for its work.",
+        "unit": "count",
+        "boundType": {
+          "kind": "cumulative_count",
+          "window": "daily"
+        },
+        "appliesTo": [
+          "setup"
+        ],
+        "default": 0
+      }
+    }
+  },
+  "scopeSchema": {
+    "keyOrder": [
+      "contact_type"
+    ],
+    "fields": {
+      "contact_type": {
+        "type": "string",
+        "required": true,
+        "displayName": "Contact types the agent may create or modify",
+        "description": "Contact types the agent may create, update or delete. Does NOT restrict reading — reads are governed by read_access.",
+        "enum": [
+          "customer",
+          "lead",
+          "partner",
+          "vendor"
+        ],
+        "constraint": {
+          "type": "string",
+          "enforceable": [
+            "subset"
+          ],
+          "requiredFor": [
+            "write",
+            "delete"
+          ]
+        }
+      }
+    }
+  },
+  "executionContextSchema": {
+    "fields": {
+      "contact_type": {
+        "source": "declared",
+        "description": "Contact type being accessed",
+        "required": true,
+        "constraint": {
+          "type": "string",
+          "enforceable": [
+            "subset"
+          ]
+        }
+      },
+      "write_count_daily": {
+        "source": "cumulative",
+        "cumulativeField": "_count",
+        "window": "daily",
+        "description": "Running daily write operation count",
+        "required": true,
+        "constraint": {
+          "type": "number",
+          "enforceable": [
+            "max"
+          ]
+        }
+      },
+      "setup_count_daily": {
+        "source": "cumulative",
+        "cumulativeField": "_count",
+        "window": "daily",
+        "description": "Running daily count of test-data loads",
+        "required": true,
+        "constraint": {
+          "type": "number",
+          "enforceable": [
+            "max"
+          ]
+        }
+      }
+    }
+  },
+  "requiredGates": [
+    "bounds",
+    "intent",
+    "commitment",
+    "mandate_owner"
+  ],
+  "ttl": {
+    "default": 86400,
+    "max": 31536000
+  },
+  "retention_minimum": 7776000,
+  "content_binding": {
+    "version": "1",
+    "kind": "jcs"
+  }
+}

package/profiles/index.json

@@ -43,6 +43,7 @@
     "github.com/humanagencyprotocol/hap-profiles/purchase@0.7": "purchase/0.7.profile.json",
     "github.com/humanagencyprotocol/hap-profiles/records@0.6": "records/0.6.profile.json",
     "github.com/humanagencyprotocol/hap-profiles/reporting@0.3": "reporting/0.3.profile.json",
-    "github.com/humanagencyprotocol/hap-profiles/sales@0.4": "sales/0.4.profile.json"
+    "github.com/humanagencyprotocol/hap-profiles/sales@0.4": "sales/0.4.profile.json",
+    "github.com/humanagencyprotocol/hap-profiles/customers@0.10": "customers/0.10.profile.json"
   }
 }