@suveren/gateway 0.35.0 → 0.35.1

package/content/integrations/crm.json

@@ -6,7 +6,7 @@
   "icon": "users",
   "profile": "customers",
   "npmPackage": "@humanagencyp/crm-mcp",
-  "npmVersion": "1.5.0",
+  "npmVersion": "1.6.0",
   "mcp": {
     "command": "crm-mcp",
     "args": []
@@ -26,17 +26,33 @@
         "type": "text",
         "placeholder": "simulation (default) — live needs an adapter for your CRM",
         "optional": true
+      },
+      {
+        "key": "liveAdapter",
+        "label": "Live adapter (optional)",
+        "type": "text",
+        "placeholder": "local — your own company's CRM data. Leave empty unless Mode is \"live\"",
+        "optional": true
       }
     ],
     "envMapping": {
       "DATABASE_URL": "databaseUrl",
-      "CRM_MODE": "mode"
+      "CRM_MODE": "mode",
+      "CRM_LIVE_ADAPTER": "liveAdapter"
     }
   },
   "simulation": {
     "field": "mode",
     "default": "simulation"
   },
+  "modeLabels": {
+    "simulation": "Test data",
+    "live": { "local": "Local" }
+  },
+  "modeNotes": {
+    "live": { "local": "On this computer — no shared access" }
+  },
+  "adapterField": "liveAdapter",
   "personalDefault": true,
   "oauth": null,
   "context": {

package/content/integrations/erp.json

@@ -6,7 +6,7 @@
   "icon": "briefcase",
   "profile": "sales",
   "npmPackage": "@humanagencyp/erp-mcp",
-  "npmVersion": "0.9.0",
+  "npmVersion": "0.9.1",
   "mcp": {
     "command": "erp-mcp",
     "args": [],
@@ -62,6 +62,14 @@
     "field": "mode",
     "default": "simulation"
   },
+  "modeLabels": {
+    "simulation": "Test data",
+    "live": { "local": "Local" }
+  },
+  "modeNotes": {
+    "live": { "local": "On this computer — no shared access" }
+  },
+  "adapterField": "liveAdapter",
   "personalDefault": true,
   "oauth": null,
   "documents": {

package/content/integrations/mail.json

@@ -1,6 +1,6 @@
 {
   "id": "mail",
-  "name": "Email (simulation)",
+  "name": "Email",
   "version": "1.0.0",
   "description": "Simulated inbox for testing an agent's email replies — nothing leaves the laptop",
   "icon": "mail",
@@ -40,6 +40,9 @@
     "field": "mode",
     "default": "simulation"
   },
+  "modeLabels": {
+    "simulation": "Test mailbox"
+  },
   "personalDefault": false,
   "oauth": null,
   "attachments": {

package/dist/mcp-server/http.mjs

@@ -3530,8 +3530,11 @@ function isSimulationMode() {
   if (policySimulation !== void 0) return policySimulation;
   return process.env.SUVEREN_SIMULATION === "1";
 }
-function manifestIsSimulated(manifest) {
-  return Boolean(manifest?.simulation);
+function connectorCurrentlySimulated(manifest, fields) {
+  const decl = manifest?.simulation;
+  if (!decl) return false;
+  const value = (fields?.[decl.field] ?? "").trim().toLowerCase() || decl.default.trim().toLowerCase();
+  return value === "simulation";
 }
 var SIMULATION_BLOCK_REASON = "blocked: simulation mode \u2014 real systems are off";
 
@@ -4415,6 +4418,39 @@ function invalidManifestReadGateReason(manifest) {
   }
   return null;
 }
+function invalidModeLabelsReason(manifest) {
+  if (!manifest.modeLabels) return null;
+  if (manifest.modeLabels === null || typeof manifest.modeLabels !== "object" || Array.isArray(manifest.modeLabels)) {
+    return "modeLabels must be an object mapping mode values to labels";
+  }
+  if (!manifest.simulation) {
+    return 'modeLabels is set but this manifest declares no "simulation" marker \u2014 mode labels need a mode field to key off';
+  }
+  const fieldKeys = new Set(manifest.credentials?.fields?.map((f) => f.key) ?? []);
+  let needsAdapterField = false;
+  for (const [mode, label] of Object.entries(manifest.modeLabels)) {
+    if (typeof label === "string") {
+      if (label.length === 0) return `modeLabels.${mode} must be a non-empty string`;
+      continue;
+    }
+    if (label === null || typeof label !== "object" || Array.isArray(label)) {
+      return `modeLabels.${mode} must be a non-empty string or an object keyed by adapter value`;
+    }
+    needsAdapterField = true;
+    for (const [adapter, adapterLabel] of Object.entries(label)) {
+      if (typeof adapterLabel !== "string" || adapterLabel.length === 0) {
+        return `modeLabels.${mode}.${adapter} must be a non-empty string`;
+      }
+    }
+  }
+  if (needsAdapterField && !manifest.adapterField) {
+    return 'modeLabels has an adapter-keyed entry but "adapterField" is missing \u2014 name the credential field holding the adapter';
+  }
+  if (manifest.adapterField && !fieldKeys.has(manifest.adapterField)) {
+    return `adapterField "${manifest.adapterField}" does not name a declared credential field`;
+  }
+  return null;
+}
 var manifests = /* @__PURE__ */ new Map();
 function loadManifests(integrationsDir) {
   const dir = resolve(
@@ -4482,6 +4518,11 @@ function loadManifests(integrationsDir) {
         console.error(`[ManifestLoader] Refusing manifest ${id} (${manifestPath}): ${valuesReason}`);
         continue;
       }
+      const modeLabelsReason = invalidModeLabelsReason(manifest) ?? (manifest.modeNotes ? invalidModeLabelsReason({ ...manifest, modeLabels: manifest.modeNotes })?.replace(/modeLabels/g, "modeNotes") ?? null : null);
+      if (modeLabelsReason) {
+        console.error(`[ManifestLoader] Refusing manifest ${id} (${manifestPath}): ${modeLabelsReason}`);
+        continue;
+      }
       manifests.set(id, manifest);
       loaded++;
     } catch (err) {
@@ -4612,7 +4653,7 @@ function isAttachmentSourceAllowed(profileId, profile, allowedSourcesValue, ref)
   if (!attachmentSourcesFieldDeclared(profile)) {
     return {
       allowed: false,
-      reason: `Profile "${profileId}" does not yet declare "${ATTACHMENT_SOURCES_FIELD}" \u2014 no mandate can authorize an attachment until it does. Refusing by default (suveren-invoicing-plan.md \xA76).`
+      reason: `Profile "${profileId}" does not yet declare "${ATTACHMENT_SOURCES_FIELD}" \u2014 no mandate can authorize an attachment \u2014 a mandate on a newer email profile that lists the source is needed.`
     };
   }
   const allowedSet = new Set(
@@ -4627,6 +4668,22 @@ function isAttachmentSourceAllowed(profileId, profile, allowedSourcesValue, ref)
   }
   return { allowed: true, reason: "" };
 }
+function candidatesAllowingAttachments(candidates, refs, profileOf) {
+  if (refs.length === 0) return { allowed: candidates };
+  let refusal;
+  const allowed = candidates.filter((c) => {
+    const value = typeof c.context?.[ATTACHMENT_SOURCES_FIELD] === "string" ? c.context[ATTACHMENT_SOURCES_FIELD] : void 0;
+    for (const ref of refs) {
+      const check = isAttachmentSourceAllowed(c.profileId, profileOf(c.profileId), value, ref);
+      if (!check.allowed) {
+        refusal ??= check.reason;
+        return false;
+      }
+    }
+    return true;
+  });
+  return { allowed, refusal: allowed.length ? void 0 : refusal };
+}
 
 // src/lib/preview.ts
 import { computeContentHash } from "@hap/core";
@@ -6632,7 +6689,20 @@ function createGatedToolHandlerInner(tool, integrationManager2, state2) {
       };
     }
     const contextKeys = getProfile5(passers[0].profileId)?.scopeSchema?.keyOrder ?? [];
-    return attemptWithCandidates(passers);
+    let pool = passers;
+    if (tool.gating?.attachmentsArg) {
+      const raw = args[tool.gating.attachmentsArg];
+      const refs = Array.isArray(raw) ? raw.filter((r) => !!r && typeof r === "object" && typeof r.connector === "string" && typeof r.kind === "string") : [];
+      const narrowed = candidatesAllowingAttachments(passers, refs, (id) => getProfile5(id));
+      if (narrowed.allowed.length === 0) {
+        return {
+          content: [{ type: "text", text: `Refused: attachment not allowed by any ${tool.gating.profile ?? ""} mandate. ${narrowed.refusal ?? ""}`.trim() }],
+          isError: true
+        };
+      }
+      pool = narrowed.allowed;
+    }
+    return attemptWithCandidates(pool);
     async function attemptWithCandidates(candidates) {
       const selection = selectAuthorization(
         contextKeys,
@@ -8899,7 +8969,7 @@ var IntegrationManager = class {
       if (opts.skipIfRunning) return existing.tools;
       await this.stopIntegrationLocked(config.id);
     }
-    if (isSimulationMode() && !manifestIsSimulated(getManifest(config.id))) {
+    if (isSimulationMode() && !this.isSimulationSafe(config.id)) {
       throw new Error(`${config.id}: ${SIMULATION_BLOCK_REASON}`);
     }
     if (config.npmPackage) {
@@ -9119,13 +9189,24 @@ var IntegrationManager = class {
     return this.builtins.get(id)?.def.alwaysListed === true;
   }
   /**
-   * Whether `id` may run while simulation mode is on: a connector whose manifest
-   * carries the `simulation` marker, or a built-in that declares `simulation: true`.
+   * Whether `id` may run while simulation mode is on: a built-in that
+   * declares `simulation: true`, or a connector whose CURRENT setting (the
+   * credential/setting field its manifest's `simulation.field` names,
+   * defaulting per `simulation.default` when unset) resolves to simulated —
+   * NOT merely a connector whose manifest supports a simulated mode at all.
+   * A connector set to a real mode (e.g. ERP's `mode=live`) is refused here
+   * exactly like one with no simulation capability at all.
+   *
+   * Reads `serviceCredentials` directly, keyed by `id` — the same convention
+   * `resolveEnvKeys`'s manifest-mapping fallback and `getServiceCredentials`
+   * already rely on: a connector's OWN credential fields (mode, liveAdapter,
+   * …) are pushed to this gateway under its own id (control-plane's
+   * `pushServiceCredentials(id, fields)`), never a shared/other service id.
    */
   isSimulationSafe(id) {
     const builtin = this.builtins.get(id);
     if (builtin) return builtin.def.simulation === true;
-    return manifestIsSimulated(getManifest(id));
+    return connectorCurrentlySimulated(getManifest(id), this.serviceCredentials.get(id));
   }
   /**
    * The built-in's own refusal for this call, checked before the gate (no proposal,
@@ -9287,15 +9368,17 @@ var IntegrationManager = class {
             toolCount: 0,
             readAgeDays: readAgeOf(config),
             // Computed fresh, not cached: true whenever simulation mode is on
-            // AND this connector has no manifest `simulation` marker, which is
-            // exactly the condition startIntegrationLocked refuses under — so
-            // the UI always reflects why a real connector never started,
-            // without needing a separate tracking path for this one reason.
-            // This is `paused`, NOT `error`: it is not a problem, it's the
-            // mode working as designed (see IntegrationStatus.paused). Genuine
+            // AND this connector is not currently simulation-safe (see
+            // `isSimulationSafe` — no capability at all, OR capability
+            // declared but currently SET to a real mode), which is exactly
+            // the condition startIntegrationLocked refuses under — so the UI
+            // always reflects why a real connector never started, without
+            // needing a separate tracking path for this one reason. This is
+            // `paused`, NOT `error`: it is not a problem, it's the mode
+            // working as designed (see IntegrationStatus.paused). Genuine
             // start failures still surface via the one-shot `warning` string
             // returned by /internal/add-integration — they never land here.
-            paused: isSimulationMode() && !manifestIsSimulated(getManifest(config.id)) ? "simulation" : void 0
+            paused: isSimulationMode() && !this.isSimulationSafe(config.id) ? "simulation" : void 0
           });
         }
       }
@@ -10354,8 +10437,9 @@ function briefRefusal(args) {
 function connectedSystems(im) {
   const byId = /* @__PURE__ */ new Map();
   for (const t of im.getAllTools()) {
-    if (im.isBuiltin(t.integrationId) || !t.gating?.profile || t.gating.category === "disabled") continue;
-    const s = byId.get(t.integrationId) ?? { id: t.integrationId, profile: t.gating.profile, actionTypes: [], writeTools: [], readTools: [] };
+    if (im.isBuiltin(t.integrationId) || t.internal || !t.gating?.profile || t.gating.category === "disabled") continue;
+    const key = `${t.integrationId}|${t.gating.profile}`;
+    const s = byId.get(key) ?? { id: t.integrationId, profile: t.gating.profile, actionTypes: [], writeTools: [], readTools: [] };
     if (t.gating.category === "read") {
       s.readTools.push(t.originalName);
     } else {
@@ -10363,9 +10447,9 @@ function connectedSystems(im) {
       const at = t.gating.staticExecution?.action_type;
       if (typeof at === "string" && !s.actionTypes.includes(at)) s.actionTypes.push(at);
     }
-    byId.set(t.integrationId, s);
+    byId.set(key, s);
   }
-  return [...byId.values()].sort((a, b) => a.id.localeCompare(b.id));
+  return [...byId.values()].sort((a, b) => a.id.localeCompare(b.id) || a.profile.localeCompare(b.profile));
 }
 function shortName(idOrName) {
   const stripped = idOrName.replace(/@.*$/, "").split("/").pop() ?? idOrName;
@@ -10586,7 +10670,7 @@ function setupBuiltin(deps) {
           const guides = loadGuides();
           const systems = connectedSystems(deps.integrationManager);
           const running = new Set(systems.map((s) => s.id));
-          const inactive = getAllManifests().filter((m) => manifestIsSimulated(m) && !running.has(m.id)).map((m) => m.name);
+          const inactive = getAllManifests().filter((m) => deps.integrationManager.isSimulationSafe(m.id) && !running.has(m.id)).map((m) => m.name);
           const header = guideHeader(systems, inactive);
           const topic = typeof args.topic === "string" ? args.topic.trim().toLowerCase() : "";
           if (!topic) {