@suveren/gateway 0.35.0 → 0.35.2

package/content/integrations/crm.json

@@ -6,7 +6,7 @@
   "icon": "users",
   "profile": "customers",
   "npmPackage": "@humanagencyp/crm-mcp",
-  "npmVersion": "1.5.0",
+  "npmVersion": "1.6.0",
   "mcp": {
     "command": "crm-mcp",
     "args": []
@@ -26,17 +26,33 @@
         "type": "text",
         "placeholder": "simulation (default) — live needs an adapter for your CRM",
         "optional": true
+      },
+      {
+        "key": "liveAdapter",
+        "label": "Live adapter (optional)",
+        "type": "text",
+        "placeholder": "local — your own company's CRM data. Leave empty unless Mode is \"live\"",
+        "optional": true
       }
     ],
     "envMapping": {
       "DATABASE_URL": "databaseUrl",
-      "CRM_MODE": "mode"
+      "CRM_MODE": "mode",
+      "CRM_LIVE_ADAPTER": "liveAdapter"
     }
   },
   "simulation": {
     "field": "mode",
     "default": "simulation"
   },
+  "modeLabels": {
+    "simulation": "Test data",
+    "live": { "local": "Local" }
+  },
+  "modeNotes": {
+    "live": { "local": "On this computer — no shared access" }
+  },
+  "adapterField": "liveAdapter",
   "personalDefault": true,
   "oauth": null,
   "context": {

package/content/integrations/erp.json

@@ -6,7 +6,7 @@
   "icon": "briefcase",
   "profile": "sales",
   "npmPackage": "@humanagencyp/erp-mcp",
-  "npmVersion": "0.9.0",
+  "npmVersion": "0.9.1",
   "mcp": {
     "command": "erp-mcp",
     "args": [],
@@ -62,6 +62,14 @@
     "field": "mode",
     "default": "simulation"
   },
+  "modeLabels": {
+    "simulation": "Test data",
+    "live": { "local": "Local" }
+  },
+  "modeNotes": {
+    "live": { "local": "On this computer — no shared access" }
+  },
+  "adapterField": "liveAdapter",
   "personalDefault": true,
   "oauth": null,
   "documents": {

package/content/integrations/mail.json

@@ -1,6 +1,6 @@
 {
   "id": "mail",
-  "name": "Email (simulation)",
+  "name": "Email",
   "version": "1.0.0",
   "description": "Simulated inbox for testing an agent's email replies — nothing leaves the laptop",
   "icon": "mail",
@@ -40,6 +40,9 @@
     "field": "mode",
     "default": "simulation"
   },
+  "modeLabels": {
+    "simulation": "Test mailbox"
+  },
   "personalDefault": false,
   "oauth": null,
   "attachments": {

package/dist/mcp-server/http.mjs

@@ -3530,8 +3530,11 @@ function isSimulationMode() {
   if (policySimulation !== void 0) return policySimulation;
   return process.env.SUVEREN_SIMULATION === "1";
 }
-function manifestIsSimulated(manifest) {
-  return Boolean(manifest?.simulation);
+function connectorCurrentlySimulated(manifest, fields) {
+  const decl = manifest?.simulation;
+  if (!decl) return false;
+  const value = (fields?.[decl.field] ?? "").trim().toLowerCase() || decl.default.trim().toLowerCase();
+  return value === "simulation";
 }
 var SIMULATION_BLOCK_REASON = "blocked: simulation mode \u2014 real systems are off";
 
@@ -4415,6 +4418,39 @@ function invalidManifestReadGateReason(manifest) {
   }
   return null;
 }
+function invalidModeLabelsReason(manifest) {
+  if (!manifest.modeLabels) return null;
+  if (manifest.modeLabels === null || typeof manifest.modeLabels !== "object" || Array.isArray(manifest.modeLabels)) {
+    return "modeLabels must be an object mapping mode values to labels";
+  }
+  if (!manifest.simulation) {
+    return 'modeLabels is set but this manifest declares no "simulation" marker \u2014 mode labels need a mode field to key off';
+  }
+  const fieldKeys = new Set(manifest.credentials?.fields?.map((f) => f.key) ?? []);
+  let needsAdapterField = false;
+  for (const [mode, label] of Object.entries(manifest.modeLabels)) {
+    if (typeof label === "string") {
+      if (label.length === 0) return `modeLabels.${mode} must be a non-empty string`;
+      continue;
+    }
+    if (label === null || typeof label !== "object" || Array.isArray(label)) {
+      return `modeLabels.${mode} must be a non-empty string or an object keyed by adapter value`;
+    }
+    needsAdapterField = true;
+    for (const [adapter, adapterLabel] of Object.entries(label)) {
+      if (typeof adapterLabel !== "string" || adapterLabel.length === 0) {
+        return `modeLabels.${mode}.${adapter} must be a non-empty string`;
+      }
+    }
+  }
+  if (needsAdapterField && !manifest.adapterField) {
+    return 'modeLabels has an adapter-keyed entry but "adapterField" is missing \u2014 name the credential field holding the adapter';
+  }
+  if (manifest.adapterField && !fieldKeys.has(manifest.adapterField)) {
+    return `adapterField "${manifest.adapterField}" does not name a declared credential field`;
+  }
+  return null;
+}
 var manifests = /* @__PURE__ */ new Map();
 function loadManifests(integrationsDir) {
   const dir = resolve(
@@ -4482,6 +4518,11 @@ function loadManifests(integrationsDir) {
         console.error(`[ManifestLoader] Refusing manifest ${id} (${manifestPath}): ${valuesReason}`);
         continue;
       }
+      const modeLabelsReason = invalidModeLabelsReason(manifest) ?? (manifest.modeNotes ? invalidModeLabelsReason({ ...manifest, modeLabels: manifest.modeNotes })?.replace(/modeLabels/g, "modeNotes") ?? null : null);
+      if (modeLabelsReason) {
+        console.error(`[ManifestLoader] Refusing manifest ${id} (${manifestPath}): ${modeLabelsReason}`);
+        continue;
+      }
       manifests.set(id, manifest);
       loaded++;
     } catch (err) {
@@ -4612,7 +4653,7 @@ function isAttachmentSourceAllowed(profileId, profile, allowedSourcesValue, ref)
   if (!attachmentSourcesFieldDeclared(profile)) {
     return {
       allowed: false,
-      reason: `Profile "${profileId}" does not yet declare "${ATTACHMENT_SOURCES_FIELD}" \u2014 no mandate can authorize an attachment until it does. Refusing by default (suveren-invoicing-plan.md \xA76).`
+      reason: `Profile "${profileId}" does not yet declare "${ATTACHMENT_SOURCES_FIELD}" \u2014 no mandate can authorize an attachment \u2014 a mandate on a newer email profile that lists the source is needed.`
     };
   }
   const allowedSet = new Set(
@@ -4627,6 +4668,22 @@ function isAttachmentSourceAllowed(profileId, profile, allowedSourcesValue, ref)
   }
   return { allowed: true, reason: "" };
 }
+function candidatesAllowingAttachments(candidates, refs, profileOf) {
+  if (refs.length === 0) return { allowed: candidates };
+  let refusal;
+  const allowed = candidates.filter((c) => {
+    const value = typeof c.context?.[ATTACHMENT_SOURCES_FIELD] === "string" ? c.context[ATTACHMENT_SOURCES_FIELD] : void 0;
+    for (const ref of refs) {
+      const check = isAttachmentSourceAllowed(c.profileId, profileOf(c.profileId), value, ref);
+      if (!check.allowed) {
+        refusal ??= check.reason;
+        return false;
+      }
+    }
+    return true;
+  });
+  return { allowed, refusal: allowed.length ? void 0 : refusal };
+}
 
 // src/lib/preview.ts
 import { computeContentHash } from "@hap/core";
@@ -5692,18 +5749,19 @@ async function finalizeAttachmentsForExecution(integrationManager2, integrationI
         contentBase64: d.contentBase64
       }));
     } else {
-      const to = toStringArray(outgoing.to);
-      const cc = toStringArray(outgoing.cc);
-      const subject = typeof outgoing.subject === "string" ? outgoing.subject : "";
-      const bodyText = typeof outgoing.body === "string" ? outgoing.body : "";
-      const mime = buildMimeMessage({
-        to,
-        cc,
-        subject,
-        bodyText,
-        attachments: resolvedDocs.map((d) => ({ filename: d.filename, contentType: d.contentType, contentBase64: d.contentBase64 }))
+      const arg = transport.arg;
+      const attachments = resolvedDocs.map((d) => ({ filename: d.filename, contentType: d.contentType, contentBase64: d.contentBase64 }));
+      const withRaw = (a) => ({
+        ...a,
+        [arg]: toBase64Url(buildMimeMessage({
+          to: toStringArray(a.to),
+          cc: toStringArray(a.cc),
+          subject: typeof a.subject === "string" ? a.subject : "",
+          bodyText: typeof a.body === "string" ? a.body : "",
+          attachments
+        }))
       });
-      outgoing[transport.arg] = toBase64Url(mime);
+      return { ok: true, args: withRaw(outgoing), rebuildTransport: withRaw };
     }
   }
   return { ok: true, args: outgoing };
@@ -6632,7 +6690,20 @@ function createGatedToolHandlerInner(tool, integrationManager2, state2) {
       };
     }
     const contextKeys = getProfile5(passers[0].profileId)?.scopeSchema?.keyOrder ?? [];
-    return attemptWithCandidates(passers);
+    let pool = passers;
+    if (tool.gating?.attachmentsArg) {
+      const raw = args[tool.gating.attachmentsArg];
+      const refs = Array.isArray(raw) ? raw.filter((r) => !!r && typeof r === "object" && typeof r.connector === "string" && typeof r.kind === "string") : [];
+      const narrowed = candidatesAllowingAttachments(passers, refs, (id) => getProfile5(id));
+      if (narrowed.allowed.length === 0) {
+        return {
+          content: [{ type: "text", text: `Refused: attachment not allowed by any ${tool.gating.profile ?? ""} mandate. ${narrowed.refusal ?? ""}`.trim() }],
+          isError: true
+        };
+      }
+      pool = narrowed.allowed;
+    }
+    return attemptWithCandidates(pool);
     async function attemptWithCandidates(candidates) {
       const selection = selectAuthorization(
         contextKeys,
@@ -6725,12 +6796,14 @@ Proposal ID: ${proposal.id}. Check status with check-pending-commitments(proposa
         }
       }
       let finalArgs = callArgs;
+      let rebuildTransport;
       if (tool.gating?.attachmentsArg || tool.gating?.insertFields?.length) {
         const finalized = await finalizeAttachmentsForExecution(integrationManager2, tool.integrationId, callArgs);
         if (!finalized.ok) {
           return { content: [{ type: "text", text: finalized.message }], isError: true };
         }
         finalArgs = finalized.args;
+        rebuildTransport = finalized.rebuildTransport;
       }
       let receiptId;
       try {
@@ -6961,6 +7034,7 @@ Proposal ID: ${proposal.id}. Use check-pending-commitments to track status.` + a
       });
       let outgoingArgs = shouldAttachFooter() && receiptId ? appendVerificationFooter(tool, finalArgs, receiptId, auth.subjects?.[0]) : finalArgs;
       if (receiptId) outgoingArgs = attachTicketId(tool, outgoingArgs, receiptId);
+      if (rebuildTransport) outgoingArgs = rebuildTransport(outgoingArgs);
       outgoingArgs = encodeOutgoingArgs(tool, outgoingArgs);
       outgoingArgs = stripSourceLink(outgoingArgs);
       outgoingArgs = stripAttachmentsSealedMeta(outgoingArgs);
@@ -8584,6 +8658,9 @@ function withoutBlockedArgs(schema, blocked) {
   }
   return out;
 }
+function stableEnvKey(env) {
+  return JSON.stringify(Object.keys(env).sort().map((k) => [k, env[k]]));
+}
 var RESPAWN_DELAYS = [2e3, 4e3, 6e3];
 var MAX_RESPAWN_ATTEMPTS = 3;
 var CONNECT_TIMEOUT_MS = 3e4;
@@ -8899,7 +8976,7 @@ var IntegrationManager = class {
       if (opts.skipIfRunning) return existing.tools;
       await this.stopIntegrationLocked(config.id);
     }
-    if (isSimulationMode() && !manifestIsSimulated(getManifest(config.id))) {
+    if (isSimulationMode() && !this.isSimulationSafe(config.id)) {
       throw new Error(`${config.id}: ${SIMULATION_BLOCK_REASON}`);
     }
     if (config.npmPackage) {
@@ -8925,6 +9002,7 @@ var IntegrationManager = class {
       );
     }
     const env = this.resolveEnvKeys(config);
+    const credentialEnv = stableEnvKey(env);
     if (isSimulationMode()) {
       const manifest = getManifest(config.id);
       const simDecl = manifest?.simulation;
@@ -8998,7 +9076,8 @@ var IntegrationManager = class {
       client,
       transport,
       tools,
-      respawnAttempts: 0
+      respawnAttempts: 0,
+      credentialEnv
     };
     this.running.set(config.id, entry);
     transport.onclose = () => {
@@ -9119,13 +9198,24 @@ var IntegrationManager = class {
     return this.builtins.get(id)?.def.alwaysListed === true;
   }
   /**
-   * Whether `id` may run while simulation mode is on: a connector whose manifest
-   * carries the `simulation` marker, or a built-in that declares `simulation: true`.
+   * Whether `id` may run while simulation mode is on: a built-in that
+   * declares `simulation: true`, or a connector whose CURRENT setting (the
+   * credential/setting field its manifest's `simulation.field` names,
+   * defaulting per `simulation.default` when unset) resolves to simulated —
+   * NOT merely a connector whose manifest supports a simulated mode at all.
+   * A connector set to a real mode (e.g. ERP's `mode=live`) is refused here
+   * exactly like one with no simulation capability at all.
+   *
+   * Reads `serviceCredentials` directly, keyed by `id` — the same convention
+   * `resolveEnvKeys`'s manifest-mapping fallback and `getServiceCredentials`
+   * already rely on: a connector's OWN credential fields (mode, liveAdapter,
+   * …) are pushed to this gateway under its own id (control-plane's
+   * `pushServiceCredentials(id, fields)`), never a shared/other service id.
    */
   isSimulationSafe(id) {
     const builtin = this.builtins.get(id);
     if (builtin) return builtin.def.simulation === true;
-    return manifestIsSimulated(getManifest(id));
+    return connectorCurrentlySimulated(getManifest(id), this.serviceCredentials.get(id));
   }
   /**
    * The built-in's own refusal for this call, checked before the gate (no proposal,
@@ -9287,15 +9377,17 @@ var IntegrationManager = class {
             toolCount: 0,
             readAgeDays: readAgeOf(config),
             // Computed fresh, not cached: true whenever simulation mode is on
-            // AND this connector has no manifest `simulation` marker, which is
-            // exactly the condition startIntegrationLocked refuses under — so
-            // the UI always reflects why a real connector never started,
-            // without needing a separate tracking path for this one reason.
-            // This is `paused`, NOT `error`: it is not a problem, it's the
-            // mode working as designed (see IntegrationStatus.paused). Genuine
+            // AND this connector is not currently simulation-safe (see
+            // `isSimulationSafe` — no capability at all, OR capability
+            // declared but currently SET to a real mode), which is exactly
+            // the condition startIntegrationLocked refuses under — so the UI
+            // always reflects why a real connector never started, without
+            // needing a separate tracking path for this one reason. This is
+            // `paused`, NOT `error`: it is not a problem, it's the mode
+            // working as designed (see IntegrationStatus.paused). Genuine
             // start failures still surface via the one-shot `warning` string
             // returned by /internal/add-integration — they never land here.
-            paused: isSimulationMode() && !manifestIsSimulated(getManifest(config.id)) ? "simulation" : void 0
+            paused: isSimulationMode() && !this.isSimulationSafe(config.id) ? "simulation" : void 0
           });
         }
       }
@@ -9308,6 +9400,21 @@ var IntegrationManager = class {
   isRunning(id) {
     return this.running.has(id);
   }
+  /**
+   * True when the integration is running but the vault credentials would now
+   * resolve to a different env than the one its process was started with.
+   *
+   * Why: at boot the gateway starts connectors whose settings are all optional
+   * (ERP, CRM — mode/adapter/company file) BEFORE the vault is unlocked, so they
+   * come up on their defaults (simulation). The settings arrive on unlock, and
+   * without a restart the process keeps running on the wrong mode — the user's
+   * live data silently disappears from view.
+   */
+  credentialsChangedSinceStart(config) {
+    const entry = this.running.get(config.id);
+    if (!entry) return false;
+    return stableEnvKey(this.resolveEnvKeys(config)) !== entry.credentialEnv;
+  }
   /**
    * Check if all required env keys for an integration can be resolved.
    */
@@ -9474,7 +9581,8 @@ var IntegrationManager = class {
           client: null,
           transport: null,
           tools: [],
-          respawnAttempts: attempts + 1
+          respawnAttempts: attempts + 1,
+          credentialEnv: ""
         };
         this.running.set(id, fakeEntry);
         this.handleCrash(id);
@@ -10354,8 +10462,9 @@ function briefRefusal(args) {
 function connectedSystems(im) {
   const byId = /* @__PURE__ */ new Map();
   for (const t of im.getAllTools()) {
-    if (im.isBuiltin(t.integrationId) || !t.gating?.profile || t.gating.category === "disabled") continue;
-    const s = byId.get(t.integrationId) ?? { id: t.integrationId, profile: t.gating.profile, actionTypes: [], writeTools: [], readTools: [] };
+    if (im.isBuiltin(t.integrationId) || t.internal || !t.gating?.profile || t.gating.category === "disabled") continue;
+    const key = `${t.integrationId}|${t.gating.profile}`;
+    const s = byId.get(key) ?? { id: t.integrationId, profile: t.gating.profile, actionTypes: [], writeTools: [], readTools: [] };
     if (t.gating.category === "read") {
       s.readTools.push(t.originalName);
     } else {
@@ -10363,9 +10472,9 @@ function connectedSystems(im) {
       const at = t.gating.staticExecution?.action_type;
       if (typeof at === "string" && !s.actionTypes.includes(at)) s.actionTypes.push(at);
     }
-    byId.set(t.integrationId, s);
+    byId.set(key, s);
   }
-  return [...byId.values()].sort((a, b) => a.id.localeCompare(b.id));
+  return [...byId.values()].sort((a, b) => a.id.localeCompare(b.id) || a.profile.localeCompare(b.profile));
 }
 function shortName(idOrName) {
   const stripped = idOrName.replace(/@.*$/, "").split("/").pop() ?? idOrName;
@@ -10586,7 +10695,7 @@ function setupBuiltin(deps) {
           const guides = loadGuides();
           const systems = connectedSystems(deps.integrationManager);
           const running = new Set(systems.map((s) => s.id));
-          const inactive = getAllManifests().filter((m) => manifestIsSimulated(m) && !running.has(m.id)).map((m) => m.name);
+          const inactive = getAllManifests().filter((m) => deps.integrationManager.isSimulationSafe(m.id) && !running.has(m.id)).map((m) => m.name);
           const header = guideHeader(systems, inactive);
           const topic = typeof args.topic === "string" ? args.topic.trim().toLowerCase() : "";
           if (!topic) {
@@ -11624,11 +11733,16 @@ async function startIntegrationForService(serviceId) {
     (c) => c.id === serviceId || Object.values(c.envKeys ?? {}).some((ref) => typeof ref === "string" && ref.startsWith(`${serviceId}.`))
   );
   for (const config of candidates) {
+    if (integrationManager.isRunning(config.id) && integrationManager.credentialsChangedSinceStart(config)) {
+      console.error(`[Suveren MCP] ${config.id}: credentials changed since start \u2014 restarting`);
+      await startOneIntegration(config, { restart: true });
+      continue;
+    }
     await startOneIntegration(config);
   }
 }
-async function startOneIntegration(config) {
-  if (integrationManager.isRunning(config.id)) return;
+async function startOneIntegration(config, opts = {}) {
+  if (!opts.restart && integrationManager.isRunning(config.id)) return;
   const needsCreds = Object.keys(config.envKeys ?? {}).length > 0;
   if (needsCreds && !integrationManager.canResolveEnvKeys(config)) {
     const missing = [];
@@ -11647,7 +11761,7 @@ async function startOneIntegration(config) {
   const manifest = getManifest(config.id);
   const effectiveConfig = manifest ? { ...config, toolGating: manifest.toolGating, npmPackage: manifest.npmPackage ?? config.npmPackage } : config;
   try {
-    await integrationManager.startIntegration(effectiveConfig, { skipIfRunning: true });
+    await integrationManager.startIntegration(effectiveConfig, { skipIfRunning: !opts.restart });
   } catch (err) {
     console.error(`[Suveren MCP] Failed to start integration ${config.id}:`, err);
   }