@suveren/gateway 0.34.0 → 0.35.1

package/content/integrations/crm.json

@@ -6,7 +6,7 @@
   "icon": "users",
   "profile": "customers",
   "npmPackage": "@humanagencyp/crm-mcp",
-  "npmVersion": "1.5.0",
+  "npmVersion": "1.6.0",
   "mcp": {
     "command": "crm-mcp",
     "args": []
@@ -26,17 +26,33 @@
         "type": "text",
         "placeholder": "simulation (default) — live needs an adapter for your CRM",
         "optional": true
+      },
+      {
+        "key": "liveAdapter",
+        "label": "Live adapter (optional)",
+        "type": "text",
+        "placeholder": "local — your own company's CRM data. Leave empty unless Mode is \"live\"",
+        "optional": true
       }
     ],
     "envMapping": {
       "DATABASE_URL": "databaseUrl",
-      "CRM_MODE": "mode"
+      "CRM_MODE": "mode",
+      "CRM_LIVE_ADAPTER": "liveAdapter"
     }
   },
   "simulation": {
     "field": "mode",
     "default": "simulation"
   },
+  "modeLabels": {
+    "simulation": "Test data",
+    "live": { "local": "Local" }
+  },
+  "modeNotes": {
+    "live": { "local": "On this computer — no shared access" }
+  },
+  "adapterField": "liveAdapter",
   "personalDefault": true,
   "oauth": null,
   "context": {

package/content/integrations/erp.json

@@ -6,7 +6,7 @@
   "icon": "briefcase",
   "profile": "sales",
   "npmPackage": "@humanagencyp/erp-mcp",
-  "npmVersion": "0.7.0",
+  "npmVersion": "0.9.1",
   "mcp": {
     "command": "erp-mcp",
     "args": [],
@@ -27,19 +27,63 @@
         "type": "text",
         "placeholder": "simulation (default) — live needs an adapter for your ERP",
         "optional": true
+      },
+      {
+        "key": "liveAdapter",
+        "label": "Live adapter (optional)",
+        "type": "text",
+        "placeholder": "local — your own company's invoicing. Leave empty unless Mode is \"live\"",
+        "optional": true
+      },
+      {
+        "key": "companyFile",
+        "label": "Company data file (optional)",
+        "type": "text",
+        "placeholder": "Path to your company file (name, address, UID, bank, VAT mode) — required when the live adapter is \"local\"",
+        "optional": true
+      },
+      {
+        "key": "invoiceTemplate",
+        "label": "Invoice template (optional)",
+        "type": "text",
+        "placeholder": "Path to an invoice template file — leave empty for the bundled German template",
+        "optional": true
       }
     ],
     "envMapping": {
       "DATABASE_URL": "databaseUrl",
-      "ERP_MODE": "mode"
+      "ERP_MODE": "mode",
+      "ERP_LIVE_ADAPTER": "liveAdapter",
+      "ERP_LIVE_COMPANY_FILE": "companyFile",
+      "ERP_INVOICE_TEMPLATE": "invoiceTemplate"
     }
   },
   "simulation": {
     "field": "mode",
     "default": "simulation"
   },
+  "modeLabels": {
+    "simulation": "Test data",
+    "live": { "local": "Local" }
+  },
+  "modeNotes": {
+    "live": { "local": "On this computer — no shared access" }
+  },
+  "adapterField": "liveAdapter",
   "personalDefault": true,
   "oauth": null,
+  "documents": {
+    "invoice-pdf": {
+      "tool": "get_document",
+      "args": { "kind": "invoice-pdf", "id": "$id" },
+      "label": "issued invoice {id}"
+    },
+    "credit-note-pdf": {
+      "tool": "get_document",
+      "args": { "kind": "credit-note-pdf", "id": "$id" },
+      "label": "issued credit note {id}"
+    }
+  },
   "context": {
     "recordKeys": {
       "customer": {
@@ -202,7 +246,7 @@
       },
       "create_invoice": {
         "profile": "invoicing",
-        "summary": "Invoice of {net_total|money} net to {customer_id}[ for order {order_id}]",
+        "summary": "Invoice[ {number}] of {net_total|money} net to {customer_id}[ for order {order_id}]",
         "executionMapping": {
           "net_total": "net_total",
           "currency": "currency"
@@ -213,15 +257,33 @@
         "actionLabel": "Invoice issued",
         "contextKeys": { "customer": "customer_id" },
         "preview": [
-          { "tool": "get_customer", "args": { "id": "customer_id" }, "attach": "customer_id" }
+          { "tool": "get_customer", "args": { "id": "customer_id" }, "attach": "customer_id" },
+          {
+            "tool": "preview_invoice",
+            "args": {
+              "customer_id": "customer_id",
+              "number": "number",
+              "document_date": "document_date",
+              "service_period": "service_period",
+              "lines": "lines",
+              "net_total": "net_total",
+              "currency": "currency",
+              "payment_term_days": "payment_term_days",
+              "memo": "memo"
+            },
+            "kind": "document"
+          }
         ],
         "display": {
-          "order": ["customer_id", "order_id", "lines", "net_total", "currency", "payment_term_days", "memo"],
+          "order": ["customer_id", "order_id", "number", "document_date", "service_period", "lines", "net_total", "currency", "payment_term_days", "memo"],
           "money": ["net_total", "customer_id.credit_limit", "customer_id.open_balance", "customer_id.available_credit"],
           "currencyField": "currency",
           "labels": {
             "customer_id": "Customer",
             "order_id": "Order",
+            "number": "Invoice number",
+            "document_date": "Invoice date",
+            "service_period": "Service period",
             "net_total": "Total (net)",
             "payment_term_days": "Payment terms (days)",
             "memo": "Memo",
@@ -233,7 +295,7 @@
       },
       "create_credit_note": {
         "profile": "invoicing",
-        "summary": "Credit note of {credit_total|money} net for invoice {invoice_id}: {reason|short}",
+        "summary": "Credit note[ {number}] of {credit_total|money} net for invoice {invoice_id}: {reason|short}",
         "executionMapping": {
           "credit_total": "credit_total",
           "currency": "currency"
@@ -248,16 +310,29 @@
           "fields": ["number", "customer_id", "net_total", "currency", "status"]
         },
         "display": {
-          "order": ["invoice_id", "credit_total", "currency", "reason", "lines"],
+          "order": ["invoice_id", "number", "document_date", "credit_total", "currency", "reason", "service_period", "lines"],
           "money": ["credit_total"],
           "currencyField": "currency",
           "labels": {
             "invoice_id": "Invoice",
+            "number": "Credit note number",
+            "document_date": "Credit note date",
             "credit_total": "Total (net)",
-            "reason": "Reason"
+            "reason": "Reason",
+            "service_period": "Service period"
           }
         }
       },
+      "preview_invoice": {
+        "profile": "invoicing",
+        "category": "read",
+        "internal": true
+      },
+      "get_document": {
+        "profile": "invoicing",
+        "category": "read",
+        "internal": true
+      },
       "list_invoices": {
         "profile": "invoicing",
         "category": "read",

package/content/integrations/gmail.json

@@ -38,6 +38,10 @@
       "REFRESH_TOKEN": "refreshToken"
     }
   },
+  "attachments": {
+    "transport": "mime-raw",
+    "arg": "raw"
+  },
   "context": {
     "sources": {
       "message": {
@@ -106,7 +110,10 @@
         "argEncoding": {
           "subject": "rfc2047"
         },
-        "actionLabel": "Email sent"
+        "actionLabel": "Email sent",
+        "attachmentsArg": "attachments",
+        "insertFields": ["body"],
+        "display": { "aiText": "body" }
       },
       "create_draft": {
         "summary": "Draft email to {to|list}[: {subject|short}]",

package/content/integrations/mail.json

@@ -1,12 +1,12 @@
 {
   "id": "mail",
-  "name": "Email (simulation)",
+  "name": "Email",
   "version": "1.0.0",
   "description": "Simulated inbox for testing an agent's email replies — nothing leaves the laptop",
   "icon": "mail",
   "profile": "email",
   "npmPackage": "@humanagencyp/email-mcp",
-  "npmVersion": "0.3.0",
+  "npmVersion": "0.4.0",
   "readPolicy": {
     "defaultAgeDays": 30
   },
@@ -40,8 +40,15 @@
     "field": "mode",
     "default": "simulation"
   },
+  "modeLabels": {
+    "simulation": "Test mailbox"
+  },
   "personalDefault": false,
   "oauth": null,
+  "attachments": {
+    "transport": "field",
+    "arg": "attachments"
+  },
   "context": {
     "sources": {
       "message": {
@@ -101,7 +108,10 @@
         },
         "actionLabel": "Email sent",
         "sourceFromArg": { "kind": "message", "arg": "in_reply_to" },
-        "contextKeys": { "email": "to" }
+        "contextKeys": { "email": "to" },
+        "attachmentsArg": "attachments",
+        "insertFields": ["body"],
+        "display": { "aiText": "body" }
       },
       "load_simulation": {
         "executionMapping": {},

package/content/integrations/mollie.json

@@ -29,6 +29,14 @@
     }
   },
   "oauth": null,
+  "values": {
+    "payment-link": {
+      "tool": "GetPaymentLink",
+      "args": { "paymentLinkId": "$id" },
+      "path": "_links.paymentLink.href",
+      "allowedHosts": ["payment-links.mollie.com"]
+    }
+  },
   "toolGating": {
     "default": {
       "executionMapping": {},

package/dist/control-plane/index.mjs

@@ -759,6 +759,25 @@ async function getToolRequestContext(data) {
     clearTimeout(timeout);
   }
 }
+async function getAttachmentPreview(ref) {
+  const controller = new AbortController();
+  const timeout = setTimeout(() => controller.abort(), 12e3);
+  try {
+    const res = await fetch(`${MCP_BASE}/internal/document-preview`, {
+      method: "POST",
+      headers: internalHeaders(),
+      body: JSON.stringify(ref),
+      signal: controller.signal
+    });
+    if (!res.ok) {
+      const err = await res.json().catch(() => ({ error: "Unknown error" }));
+      throw new Error(`MCP document-preview failed: ${err.error ?? res.status}`);
+    }
+    return res.json();
+  } finally {
+    clearTimeout(timeout);
+  }
+}
 async function getAgentContact() {
   const res = await fetch(`${MCP_BASE}/internal/agent-contact`, {
     headers: internalHeaders()
@@ -3713,6 +3732,24 @@ function createEvidenceExportRouter(spUrl, vault2, dataDir, lockAsTlsMismatch2)
 // src/routes/proposal-preview.ts
 import { Router as Router10 } from "express";
 
+// src/lib/attachment-preview-types.ts
+var ATTACHMENTS_SEALED_META_KEY = "_attachmentsSealed";
+function findSealedAttachment(toolArgs, sha256) {
+  if (!toolArgs) return null;
+  const raw = toolArgs[ATTACHMENTS_SEALED_META_KEY];
+  if (raw === null || typeof raw !== "object") return null;
+  const attachments = raw.attachments;
+  if (!Array.isArray(attachments)) return null;
+  for (const a of attachments) {
+    if (a === null || typeof a !== "object") continue;
+    const r = a;
+    if (r.sha256 === sha256 && typeof r.connector === "string" && typeof r.kind === "string" && typeof r.id === "string") {
+      return { connector: r.connector, kind: r.kind, id: r.id, sha256 };
+    }
+  }
+  return null;
+}
+
 // src/lib/content-crypto.ts
 import { createHash as createHash5 } from "crypto";
 import { canonicalize as canonicalize3 } from "@hap/core";
@@ -3911,6 +3948,23 @@ function createProposalStatusRouter(spUrl, vault2, dataDir, lockAsTlsMismatch2,
       res.status(502).json({ error: `MCP server unavailable: ${err instanceof Error ? err.message : String(err)}` });
     }
   });
+  router.get("/:id/attachment-preview/:sha256", async (req, res) => {
+    const proposalId = req.params.id;
+    const sha256 = req.params.sha256;
+    const resolved = await resolveProposalToolArgsForRoute(spUrl, vault2, dataDir, lockAsTlsMismatch2, proposalId, res);
+    if (!resolved) return;
+    const ref = findSealedAttachment(resolved.toolArgs, sha256);
+    if (!ref) {
+      res.status(404).json({ status: "error", message: "No sealed attachment with this fingerprint on this proposal." });
+      return;
+    }
+    try {
+      const result = await getAttachmentPreview(ref);
+      res.json(result);
+    } catch (err) {
+      res.status(502).json({ status: "error", message: `MCP server unavailable: ${err instanceof Error ? err.message : String(err)}` });
+    }
+  });
   router.get("/:id/request-context", async (req, res) => {
     const proposalId = req.params.id;
     const resolved = await resolveProposalToolArgsForRoute(spUrl, vault2, dataDir, lockAsTlsMismatch2, proposalId, res);
@@ -4138,6 +4192,31 @@ function createEvidenceRouter() {
       });
     }
   });
+  router.get("/receipt/:id/attachment-preview/:sha256", async (req, res) => {
+    const id = String(req.params.id);
+    const sha256 = String(req.params.sha256);
+    try {
+      const evidence = await getLocalEvidence();
+      const entry = (evidence.receipts ?? []).find(
+        (r) => r.receipt?.id === id
+      );
+      if (!entry) {
+        res.status(404).json({ status: "error", message: "No local copy of this receipt" });
+        return;
+      }
+      const e = entry;
+      const candidate = e.sentArgs ?? e.proposal?.toolArgs ?? (e.boundContent && typeof e.boundContent === "object" && !Array.isArray(e.boundContent) ? e.boundContent : void 0);
+      const ref = findSealedAttachment(candidate, sha256);
+      if (!ref) {
+        res.status(404).json({ status: "error", message: "No sealed attachment with this fingerprint on this ticket." });
+        return;
+      }
+      const result = await getAttachmentPreview(ref);
+      res.json(result);
+    } catch (err) {
+      res.status(502).json({ status: "error", message: `MCP server unavailable: ${err instanceof Error ? err.message : String(err)}` });
+    }
+  });
   router.get("/headlines", async (_req, res) => {
     try {
       res.json({ headlines: await getTicketHeadlines() });