@suveren/gateway 0.29.0 → 0.29.1

package/content/integrations/gmail.json

@@ -145,6 +145,8 @@
       },
       "list_messages": {
         "category": "read",
+        "boundField": "read_access",
+        "requiredValue": "unlimited",
         "read": {
           "ageField": "read_age_days",
           "queryArg": "q",
@@ -158,6 +160,8 @@
       },
       "get_message": {
         "category": "read",
+        "boundField": "read_access",
+        "requiredValue": "unlimited",
         "read": {
           "ageField": "read_age_days",
           "resultDatePath": "internalDate",
@@ -175,6 +179,8 @@
       },
       "list_drafts": {
         "category": "read",
+        "boundField": "read_access",
+        "requiredValue": "unlimited",
         "read": {
           "ageField": "read_age_days",
           "queryArg": "q",
@@ -187,6 +193,8 @@
       },
       "get_draft": {
         "category": "read",
+        "boundField": "read_access",
+        "requiredValue": "unlimited",
         "read": {
           "ageField": "read_age_days",
           "resultDatePath": "message.internalDate",
@@ -207,8 +215,11 @@
       },
       "get_attachment": {
         "category": "read",
-        "readGovernance": "none",
-        "readGovernanceReason": "Transitively age-gated: an attachmentId is only obtainable from get_message, which enforces the read-age window. No independently addressable content."
+        "boundField": "read_access",
+        "requiredValue": "unlimited",
+        "read": {
+          "ageField": "read_age_days"
+        }
       },
       "list_labels": {
         "category": "read",

package/content/integrations/mail.json

@@ -7,6 +7,9 @@
   "profile": "email",
   "npmPackage": "@humanagencyp/email-mcp",
   "npmVersion": "0.3.0",
+  "readPolicy": {
+    "defaultAgeDays": 30
+  },
   "mcp": {
     "command": "email-mcp",
     "args": []
@@ -61,12 +64,19 @@
       "list_messages": {
         "category": "read",
         "boundField": "read_access",
-        "requiredValue": "unlimited"
+        "requiredValue": "unlimited",
+        "read": {
+          "ageField": "read_age_days"
+        }
       },
       "get_message": {
         "category": "read",
         "boundField": "read_access",
-        "requiredValue": "unlimited"
+        "requiredValue": "unlimited",
+        "read": {
+          "ageField": "read_age_days",
+          "resultDatePath": "received_at"
+        }
       },
       "send_message": {
         "executionMapping": {

package/content/integrations/mollie.json

@@ -129,6 +129,16 @@
         "staticExecution": {
           "action_type": "charge"
         }
+      },
+      "ListProfiles": {
+        "category": "read",
+        "readGovernance": "none",
+        "readGovernanceReason": "Returns the organisation's own payment profile configuration (names, websites, status) — no customer or payment data."
+      },
+      "GetOrganizationDetails": {
+        "category": "read",
+        "readGovernance": "none",
+        "readGovernanceReason": "Returns the connected Mollie organisation's own name/registration details — no customer or payment data."
       }
     }
   },

package/dist/control-plane/index.mjs

@@ -4625,7 +4625,7 @@ function createArchivedMandatesRouter(dataDir) {
 // src/routes/internal-events.ts
 import { Router as Router19 } from "express";
 import { timingSafeEqual as timingSafeEqual3 } from "crypto";
-var ALLOWED = ["proposal-added", "action-approval-needed"];
+var ALLOWED = ["proposal-added", "action-approval-needed", "execution-failed"];
 var SESSION_EXPIRED = "session-expired";
 var AS_KEY_MISMATCH = "as-key-mismatch";
 var AS_TLS_MISMATCH = "as-tls-mismatch";
@@ -4887,9 +4887,13 @@ function createInternalMandateRouter(getSecret, deps) {
 }
 
 // src/lib/notification-dispatcher.ts
-var TRIGGER_EVENTS = ["proposal-added", "action-approval-needed"];
+var REVIEW_EVENTS = ["proposal-added", "action-approval-needed"];
+var FAILURE_EVENTS = ["execution-failed"];
+var TRIGGER_EVENTS = [...REVIEW_EVENTS, ...FAILURE_EVENTS];
 var TITLE = "Suveren";
 var WAITING_MESSAGE = "Something is waiting for your review.";
+var FAILURE_MESSAGE = "An approved action failed.";
+var MIXED_MESSAGE = "Something needs your attention.";
 var FLOOD_THRESHOLD = 10;
 var floodMessage = (n) => `Unusual volume: ${n} requests in the last minute.`;
 var DEBOUNCE_MS = 5e3;
@@ -4900,6 +4904,9 @@ var NotificationDispatcher = class {
   pendingWhileCoolingDown = false;
   /** Events observed since the current window opened — the flood signal only. */
   observedInWindow = 0;
+  /** Which kinds were observed since the current window opened — selects the message. */
+  reviewSeenInWindow = false;
+  failureSeenInWindow = false;
   unsubscribe = null;
   now;
   setTimeoutFn;
@@ -4917,7 +4924,8 @@ var NotificationDispatcher = class {
   start() {
     if (this.unsubscribe) return this.unsubscribe;
     const off = eventBus.subscribe((event) => {
-      if (TRIGGER_EVENTS.includes(event.type)) this.onTrigger();
+      if (FAILURE_EVENTS.includes(event.type)) this.onTrigger("failure");
+      else if (REVIEW_EVENTS.includes(event.type)) this.onTrigger("review");
     });
     this.unsubscribe = () => {
       off();
@@ -4929,9 +4937,15 @@ var NotificationDispatcher = class {
     };
     return this.unsubscribe;
   }
-  /** Exposed for tests; the bus subscription calls this. */
-  onTrigger() {
+  /**
+   * Exposed for tests; the bus subscription calls this. `kind` defaults to
+   * 'review' so every existing call site/test (written before FAILURE_EVENTS
+   * existed) keeps its exact behaviour.
+   */
+  onTrigger(kind = "review") {
     this.observedInWindow += 1;
+    if (kind === "failure") this.failureSeenInWindow = true;
+    else this.reviewSeenInWindow = true;
     if (this.cooldownTimer) {
       this.pendingWhileCoolingDown = true;
       return;
@@ -4944,7 +4958,11 @@ var NotificationDispatcher = class {
   }
   fire() {
     const count = this.observedInWindow;
+    const sawReview = this.reviewSeenInWindow;
+    const sawFailure = this.failureSeenInWindow;
     this.observedInWindow = 0;
+    this.reviewSeenInWindow = false;
+    this.failureSeenInWindow = false;
     let enabled = true;
     try {
       enabled = this.settingsFn().desktopNotifications;
@@ -4955,7 +4973,7 @@ var NotificationDispatcher = class {
       `[Control Plane] Review pending \u2014 desktop notification ${enabled ? "sent" : "suppressed (turned off)"}`
     );
     if (enabled) {
-      const message = count >= FLOOD_THRESHOLD ? floodMessage(count) : WAITING_MESSAGE;
+      const message = count >= FLOOD_THRESHOLD ? floodMessage(count) : sawReview && sawFailure ? MIXED_MESSAGE : sawFailure ? FAILURE_MESSAGE : WAITING_MESSAGE;
       this.notifyFn(TITLE, message, process.platform, this.url);
     }
     this.cooldownTimer = this.setTimeoutFn(() => {