npm - @suveren/gateway - Versions diffs - 0.3.2 → 0.3.4 - Mend

@suveren/gateway 0.3.2 → 0.3.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (42) hide show

package/dist/ui/index.html CHANGED Viewed

@@ -4,7 +4,7 @@
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
     <title>Suveren</title>
-    <script type="module" crossorigin src="/assets/index-RkZBhIxU.js"></script>
+    <script type="module" crossorigin src="/assets/index-mg8gMTzG.js"></script>
     <link rel="stylesheet" crossorigin href="/assets/index-BUgn3e63.css">
   </head>
   <body>

package/node_modules/@hap/core/dist/index.d.mts CHANGED Viewed

@@ -652,8 +652,13 @@ declare function validateSubject(subject: Subject): SubjectValidation;
  * The name appears only at `high` with a disclosed name; otherwise no name.
  *
  *  - low / no disclosure → "Sent by an AI agent via «operator»"
- *  - high / as_vouched   → "Sent by an AI agent of «name» — verified by «operator»"
- *  - high / eudi         → "Sent by an AI agent of «name» — identity verified (EUDI)"
+ *  - high / as_vouched   → "Sent by an AI agent of «name», verified by «operator»"
+ *  - high / eudi         → "Sent by an AI agent of «name», identity verified (EUDI)"
+ *
+ * Punctuation is ASCII (comma, not em-dash) so the line survives header and
+ * plain-text encoding intact across email, calendar, and publishing channels.
+ * The leading verb ("Sent") is the default; presentation layers may swap it
+ * (e.g. the gateway uses "Published" for the publish profile).
  *
  * `operatorName` is the rendered AS operator (e.g. "Suveren") — never hardcode it
  * upstream; a different operator self-vouches under its own name.

package/node_modules/@hap/core/dist/index.d.ts CHANGED Viewed

@@ -652,8 +652,13 @@ declare function validateSubject(subject: Subject): SubjectValidation;
  * The name appears only at `high` with a disclosed name; otherwise no name.
  *
  *  - low / no disclosure → "Sent by an AI agent via «operator»"
- *  - high / as_vouched   → "Sent by an AI agent of «name» — verified by «operator»"
- *  - high / eudi         → "Sent by an AI agent of «name» — identity verified (EUDI)"
+ *  - high / as_vouched   → "Sent by an AI agent of «name», verified by «operator»"
+ *  - high / eudi         → "Sent by an AI agent of «name», identity verified (EUDI)"
+ *
+ * Punctuation is ASCII (comma, not em-dash) so the line survives header and
+ * plain-text encoding intact across email, calendar, and publishing channels.
+ * The leading verb ("Sent") is the default; presentation layers may swap it
+ * (e.g. the gateway uses "Published" for the publish profile).
  *
  * `operatorName` is the rendered AS operator (e.g. "Suveren") — never hardcode it
  * upstream; a different operator self-vouches under its own name.

package/node_modules/@hap/core/dist/index.js CHANGED Viewed

@@ -170,9 +170,9 @@ function deriveIdentityLine(subject, { operatorName }) {
     return `Sent by an AI agent via ${operatorName}`;
   }
   if (subject.method === "eudi") {
-    return `Sent by an AI agent of ${name} \u2014 identity verified (EUDI)`;
+    return `Sent by an AI agent of ${name}, identity verified (EUDI)`;
   }
-  return `Sent by an AI agent of ${name} \u2014 verified by ${operatorName}`;
+  return `Sent by an AI agent of ${name}, verified by ${operatorName}`;
 }
 // src/frame.ts

package/node_modules/@hap/core/dist/index.mjs CHANGED Viewed

@@ -99,9 +99,9 @@ function deriveIdentityLine(subject, { operatorName }) {
     return `Sent by an AI agent via ${operatorName}`;
   }
   if (subject.method === "eudi") {
-    return `Sent by an AI agent of ${name} \u2014 identity verified (EUDI)`;
+    return `Sent by an AI agent of ${name}, identity verified (EUDI)`;
   }
-  return `Sent by an AI agent of ${name} \u2014 verified by ${operatorName}`;
+  return `Sent by an AI agent of ${name}, verified by ${operatorName}`;
 }
 // src/frame.ts

package/node_modules/@hap/core/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@humanagencyp/hap-core",
-  "version": "0.6.0",
+  "version": "0.6.1",
   "description": "Core types, cryptographic primitives, and verification logic for the Human Agency Protocol",
   "license": "MIT",
   "repository": {

package/node_modules/@hap/core/src/identity.ts CHANGED Viewed

@@ -56,8 +56,13 @@ export function validateSubject(subject: Subject): SubjectValidation {
  * The name appears only at `high` with a disclosed name; otherwise no name.
  *
  *  - low / no disclosure → "Sent by an AI agent via «operator»"
- *  - high / as_vouched   → "Sent by an AI agent of «name» — verified by «operator»"
- *  - high / eudi         → "Sent by an AI agent of «name» — identity verified (EUDI)"
+ *  - high / as_vouched   → "Sent by an AI agent of «name», verified by «operator»"
+ *  - high / eudi         → "Sent by an AI agent of «name», identity verified (EUDI)"
+ *
+ * Punctuation is ASCII (comma, not em-dash) so the line survives header and
+ * plain-text encoding intact across email, calendar, and publishing channels.
+ * The leading verb ("Sent") is the default; presentation layers may swap it
+ * (e.g. the gateway uses "Published" for the publish profile).
  *
  * `operatorName` is the rendered AS operator (e.g. "Suveren") — never hardcode it
  * upstream; a different operator self-vouches under its own name.
@@ -71,7 +76,7 @@ export function deriveIdentityLine(
     return `Sent by an AI agent via ${operatorName}`;
   }
   if (subject!.method === 'eudi') {
-    return `Sent by an AI agent of ${name} — identity verified (EUDI)`;
+    return `Sent by an AI agent of ${name}, identity verified (EUDI)`;
   }
-  return `Sent by an AI agent of ${name} — verified by ${operatorName}`;
+  return `Sent by an AI agent of ${name}, verified by ${operatorName}`;
 }

package/node_modules/@modelcontextprotocol/sdk/node_modules/iconv-lite/encodings/sbcs-data.js CHANGED Viewed

@@ -109,6 +109,8 @@ module.exports = {
   hebrew: "iso88598",
   hebrew8: "iso88598",
+  iso88598i: "iso88598",
+  iso88598e: "iso88598",
   turkish: "iso88599",
   turkish8: "iso88599",

package/node_modules/@modelcontextprotocol/sdk/node_modules/iconv-lite/encodings/utf32.js CHANGED Viewed

@@ -31,7 +31,9 @@ function Utf32Encoder (options, codec) {
 Utf32Encoder.prototype.write = function (str) {
   var src = Buffer.from(str, "ucs2")
-  var dst = Buffer.alloc(src.length * 2)
+  // src.length * 2 covers this chunk's code units (4 bytes each); the extra 4 bytes leave room for a
+  // high surrogate held over from a previous chunk, which is flushed ahead of this chunk's units.
+  var dst = Buffer.alloc(src.length * 2 + 4)
   var write32 = this.isLE ? dst.writeUInt32LE : dst.writeUInt32BE
   var offset = 0
@@ -113,9 +115,9 @@ Utf32Decoder.prototype.write = function (src) {
       // NOTE: codepoint is a signed int32 and can be negative.
       // NOTE: We copied this block from below to help V8 optimize it (it works with array, not buffer).
       if (isLE) {
-        codepoint = overflow[i] | (overflow[i + 1] << 8) | (overflow[i + 2] << 16) | (overflow[i + 3] << 24)
+        codepoint = overflow[0] | (overflow[1] << 8) | (overflow[2] << 16) | (overflow[3] << 24)
       } else {
-        codepoint = overflow[i + 3] | (overflow[i + 2] << 8) | (overflow[i + 1] << 16) | (overflow[i] << 24)
+        codepoint = overflow[3] | (overflow[2] << 8) | (overflow[1] << 16) | (overflow[0] << 24)
       }
       overflow.length = 0
@@ -169,7 +171,12 @@ function _writeCodepoint (dst, offset, codepoint, badChar) {
 };
 Utf32Decoder.prototype.end = function () {
+  if (this.overflow.length === 0) { return }
+  // A leftover, incomplete 4-byte code unit at the end of the input is ill-formed. Substitute a
+  // single U+FFFD (Unicode Standard conformance clause C10) instead of silently dropping the bytes.
   this.overflow.length = 0
+  return String.fromCharCode(this.badChar)
 }
 // == UTF-32 Auto codec =============================================================

package/node_modules/@modelcontextprotocol/sdk/node_modules/iconv-lite/package.json CHANGED Viewed

@@ -1,7 +1,7 @@
 {
     "name": "iconv-lite",
     "description": "Convert character encodings in pure javascript.",
-    "version": "0.7.2",
+    "version": "0.7.3",
     "license": "MIT",
     "keywords": [
         "iconv",
@@ -46,7 +46,7 @@
         "stream": false
     },
     "devDependencies": {
-        "@arethetypeswrong/cli": "^0.17.4",
+        "@arethetypeswrong/cli": "^0.18.4",
         "@stylistic/eslint-plugin": "^5.1.0",
         "@stylistic/eslint-plugin-js": "^4.1.0",
         "@types/node": "^24.0.12",

package/node_modules/@modelcontextprotocol/sdk/node_modules/iconv-lite/types/encodings.d.ts CHANGED Viewed

@@ -276,6 +276,8 @@ export type Encoding =
   | "iso88596"
   | "iso88597"
   | "iso88598"
+  | "iso88598e"
+  | "iso88598i"
   | "iso88599"
   | "isoceltic"
   | "isoir100"

package/node_modules/@types/node/README.md CHANGED Viewed

@@ -8,7 +8,7 @@ This package contains type definitions for node (https://nodejs.org/).
 Files were exported from https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node.
 ### Additional Details
- * Last updated: Wed, 24 Jun 2026 20:32:59 GMT
+ * Last updated: Wed, 01 Jul 2026 11:03:38 GMT
  * Dependencies: [undici-types](https://npmjs.com/package/undici-types)
 # Credits

package/node_modules/@types/node/buffer.d.ts CHANGED Viewed

@@ -1550,11 +1550,12 @@ declare module "node:buffer" {
             /**
              * If `value` is:
              *
-             * * a string, `value` is interpreted according to the character encoding in `encoding`.
-             * * a `Buffer` or [`Uint8Array`](https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Uint8Array), `value` will be used in its entirety.
-             * To compare a partial `Buffer`, use `buf.subarray`.
+             * * a string, `value` is interpreted according to the character encoding in
+             *   `encoding`.
+             * * a `Buffer` or `Uint8Array`, `value` will be used in its entirety.
+             *   To compare a partial `Buffer`, use `buf.subarray`.
              * * a number, `value` will be interpreted as an unsigned 8-bit integer
-             * value between `0` and `255`.
+             *   value between `0` and `255`.
              *
              * ```js
              * import { Buffer } from 'node:buffer';
@@ -1582,12 +1583,13 @@ declare module "node:buffer" {
              * // Prints: 6
              * ```
              *
-             * If `value` is not a string, number, or `Buffer`, this method will throw a `TypeError`. If `value` is a number, it will be coerced to a valid byte value,
+             * If `value` is not a string, number, or `Buffer`, this method will throw a
+             * `TypeError`. If `value` is a number, it will be coerced to a valid byte value,
              * an integer between 0 and 255.
              *
              * If `byteOffset` is not a number, it will be coerced to a number. If the result
              * of coercion is `NaN` or `0`, then the entire buffer will be searched. This
-             * behavior matches [`String.prototype.indexOf()`](https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/String/indexOf).
+             * behavior matches `String.prototype.indexOf()`.
              *
              * ```js
              * import { Buffer } from 'node:buffer';
@@ -1608,14 +1610,27 @@ declare module "node:buffer" {
              * ```
              *
              * If `value` is an empty string or empty `Buffer` and `byteOffset` is less
-             * than `buf.length`, `byteOffset` will be returned. If `value` is empty and`byteOffset` is at least `buf.length`, `buf.length` will be returned.
+             * than `buf.length`, `byteOffset` will be returned. If `value` is empty and
+             * `byteOffset` is at least `buf.length`, `buf.length` will be returned.
              * @since v1.5.0
              * @param value What to search for.
-             * @param [byteOffset=0] Where to begin searching in `buf`. If negative, then offset is calculated from the end of `buf`.
-             * @param [encoding='utf8'] If `value` is a string, this is the encoding used to determine the binary representation of the string that will be searched for in `buf`.
-             * @return The index of the first occurrence of `value` in `buf`, or `-1` if `buf` does not contain `value`.
-             */
-            indexOf(value: string | number | Uint8Array, byteOffset?: number, encoding?: BufferEncoding): number;
+             * @param start Where to begin searching in `buf`. If negative, then
+             * offset is calculated from the end of `buf`. **Default:** `0`.
+             * @param end Where to stop searching in `buf` (exclusive). **Default:**
+             * `buf.length`.
+             * @param encoding If `value` is a string, this is the encoding used to
+             * determine the binary representation of the string that will be searched for in
+             * `buf`. **Default:** `'utf8'`.
+             * @returns The index of the first occurrence of `value` in `buf`, or
+             * `-1` if `buf` does not contain `value`.
+             */
+            indexOf(
+                value: string | number | Uint8Array,
+                start?: number,
+                end?: number,
+                encoding?: BufferEncoding,
+            ): number;
+            indexOf(value: string | number | Uint8Array, start: number, encoding: BufferEncoding): number;
             indexOf(value: string | number | Uint8Array, encoding: BufferEncoding): number;
             /**
              * Identical to `buf.indexOf()`, except the last occurrence of `value` is found
@@ -1649,12 +1664,13 @@ declare module "node:buffer" {
              * // Prints: 4
              * ```
              *
-             * If `value` is not a string, number, or `Buffer`, this method will throw a `TypeError`. If `value` is a number, it will be coerced to a valid byte value,
+             * If `value` is not a string, number, or `Buffer`, this method will throw a
+             * `TypeError`. If `value` is a number, it will be coerced to a valid byte value,
              * an integer between 0 and 255.
              *
              * If `byteOffset` is not a number, it will be coerced to a number. Any arguments
              * that coerce to `NaN`, like `{}` or `undefined`, will search the whole buffer.
-             * This behavior matches [`String.prototype.lastIndexOf()`](https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/String/lastIndexOf).
+             * This behavior matches `String.prototype.lastIndexOf()`.
              *
              * ```js
              * import { Buffer } from 'node:buffer';
@@ -1680,11 +1696,24 @@ declare module "node:buffer" {
              * If `value` is an empty string or empty `Buffer`, `byteOffset` will be returned.
              * @since v6.0.0
              * @param value What to search for.
-             * @param [byteOffset=buf.length - 1] Where to begin searching in `buf`. If negative, then offset is calculated from the end of `buf`.
-             * @param [encoding='utf8'] If `value` is a string, this is the encoding used to determine the binary representation of the string that will be searched for in `buf`.
-             * @return The index of the last occurrence of `value` in `buf`, or `-1` if `buf` does not contain `value`.
-             */
-            lastIndexOf(value: string | number | Uint8Array, byteOffset?: number, encoding?: BufferEncoding): number;
+             * @param start Where to begin searching in `buf`. If negative, then
+             * offset is calculated from the end of `buf`. **Default:**
+             * `buf.length - 1`.
+             * @param end Where to stop searching in `buf` (exclusive). **Default:**
+             * `buf.length`.
+             * @param encoding If `value` is a string, this is the encoding used to
+             * determine the binary representation of the string that will be searched for in
+             * `buf`. **Default:** `'utf8'`.
+             * @returns The index of the last occurrence of `value` in `buf`, or
+             * `-1` if `buf` does not contain `value`.
+             */
+            lastIndexOf(
+                value: string | number | Uint8Array,
+                start?: number,
+                end?: number,
+                encoding?: BufferEncoding,
+            ): number;
+            lastIndexOf(value: string | number | Uint8Array, start: number, encoding: BufferEncoding): number;
             lastIndexOf(value: string | number | Uint8Array, encoding: BufferEncoding): number;
             /**
              * Equivalent to `buf.indexOf() !== -1`.
@@ -1711,12 +1740,22 @@ declare module "node:buffer" {
              * ```
              * @since v5.3.0
              * @param value What to search for.
-             * @param [byteOffset=0] Where to begin searching in `buf`. If negative, then offset is calculated from the end of `buf`.
-             * @param [encoding='utf8'] If `value` is a string, this is its encoding.
-             * @return `true` if `value` was found in `buf`, `false` otherwise.
-             */
-            includes(value: string | number | Buffer, byteOffset?: number, encoding?: BufferEncoding): boolean;
-            includes(value: string | number | Buffer, encoding: BufferEncoding): boolean;
+             * @param start Where to begin searching in `buf`. If negative, then
+             * offset is calculated from the end of `buf`. **Default:** `0`.
+             * @param end Where to stop searching in `buf` (exclusive). **Default:**
+             * `buf.length`.
+             * @param encoding If `value` is a string, this is its encoding.
+             * **Default:** `'utf8'`.
+             * @returns `true` if `value` was found in `buf`, `false` otherwise.
+             */
+            includes(
+                value: string | number | Uint8Array,
+                start?: number,
+                end?: number,
+                encoding?: BufferEncoding,
+            ): boolean;
+            includes(value: string | number | Uint8Array, start: number, encoding: BufferEncoding): boolean;
+            includes(value: string | number | Uint8Array, encoding: BufferEncoding): boolean;
         }
         var Buffer: BufferConstructor;
     }

package/node_modules/@types/node/crypto.d.ts CHANGED Viewed

@@ -1373,9 +1373,9 @@ declare module "node:crypto" {
          */
         update(data: string | NodeJS.ArrayBufferView, inputEncoding?: BufferEncoding): Verify;
         /**
-         * Verifies the provided data using the given `object` and `signature`.
+         * Verifies the provided data using the given `key` and `signature`.
          *
-         * If `object` is not a `KeyObject`, this function behaves as if `object` had been passed to {@link createPublicKey}. If it is an
+         * If `key` is not a `KeyObject`, this function behaves as if `key` had been passed to {@link createPublicKey}. If it is an
          * object, the following additional properties can be passed:
          *
          * The `signature` argument is the previously calculated signature for the data, in
@@ -1392,7 +1392,7 @@ declare module "node:crypto" {
          * @since v0.1.92
          */
         verify(
-            object:
+            key:
                 | KeyLike
                 | VerifyKeyObjectInput
                 | VerifyPublicKeyInput
@@ -1470,8 +1470,10 @@ declare module "node:crypto" {
          * If `encoding` is provided a string is returned; otherwise a `Buffer` is returned.
          *
          * This function is a thin wrapper around [`DH_generate_key()`](https://www.openssl.org/docs/man3.0/man3/DH_generate_key.html). In particular,
-         * once a private key has been generated or set, calling this function only updates
-         * the public key but does not generate a new private key.
+         * once a private key has been generated or set, calling this function only
+         * recomputes the public key from the existing private key. Since the public key is
+         * determined by the private key, the result will be the same unless the private key
+         * has been changed via `diffieHellman.setPrivateKey()`.
          * @since v0.5.0
          * @param encoding The `encoding` of the return value.
          */
@@ -2997,6 +2999,7 @@ declare module "node:crypto" {
          */
         disableEntropyCache?: boolean | undefined;
     }
+    interface RandomUUIDV7Options extends RandomUUIDOptions {}
     type UUID = `${string}-${string}-${string}-${string}-${string}`;
     /**
      * Generates a random [RFC 4122](https://www.rfc-editor.org/rfc/rfc4122.txt) version 4 UUID. The UUID is generated using a
@@ -3004,6 +3007,16 @@ declare module "node:crypto" {
      * @since v15.6.0, v14.17.0
      */
     function randomUUID(options?: RandomUUIDOptions): UUID;
+    /**
+     * Generates a random [RFC 9562](https://www.rfc-editor.org/rfc/rfc9562.txt) version 7 UUID. The UUID contains a millisecond
+     * precision Unix timestamp in the most significant 48 bits, followed by
+     * cryptographically secure random bits for the remaining fields, making it
+     * suitable for use as a database key with time-based sorting. The embedded
+     * timestamp relies on a non-monotonic clock and is not guaranteed to be strictly
+     * increasing.
+     * @since v26.1.0
+     */
+    function randomUUIDv7(options?: RandomUUIDV7Options): UUID;
     interface X509CheckOptions {
         subject?: "always" | "default" | "never" | undefined;
         wildcards?: boolean | undefined;