@suveren/gateway 0.35.2 → 0.36.1

package/bin/suveren-gateway.js

@@ -16,7 +16,7 @@ import { existsSync, mkdirSync, openSync, readFileSync, readdirSync, writeFileSy
 import { homedir, platform, userInfo } from 'node:os';
 import { dirname, join, resolve } from 'node:path';
 import { fileURLToPath, pathToFileURL } from 'node:url';
-import { buildLaunchAgentPlist, buildMacLauncher, buildSystemdUnit, buildWindowsTaskXml } from '../lib/autostart-templates.mjs';
+import { buildLaunchAgentPlist, buildMacLauncher, buildSystemdUnit, buildWindowsTaskXml, serviceOwnsInstall } from '../lib/autostart-templates.mjs';
 import { DEFAULT_AS_URL, readConfig, writeConfig, validateAsUrl, validateCaFile, validateProxyUrl, validatePinTls, resolveAsUrl, resolvePinTls, resolvePinTlsExpectedFingerprint, resolveSimulation } from '../lib/config.mjs';
 import { createInterface } from 'node:readline/promises';
 import { readPairing as readAsPairing, recordTlsPin, formatFingerprint, normalizeFingerprint } from '../lib/as-pairing.mjs';
@@ -1038,7 +1038,27 @@ const LAUNCH_AGENT_LABEL = 'ai.suveren.gateway';
  * it could not see. Every command has to know about the service the same CLI
  * installs.
  */
+function serviceDefinitionText() {
+  const os = platform();
+  const file = os === 'darwin' ? launchAgentPath() : os === 'linux' ? systemdUnitPath() : null;
+  if (!file) return null;
+  try { return existsSync(file) ? readFileSync(file, 'utf8') : null; } catch { return null; }
+}
+
+/** The login service runs this CLI's installation — see serviceOwnsInstall. */
+function serviceIsOurs() {
+  return serviceOwnsInstall({
+    definitionText: serviceDefinitionText(),
+    dataDir: DATA_DIR,
+    envDataDir: process.env.SUVEREN_DATA_DIR,
+    same: (a, b) => resolve(a) === resolve(b),
+  });
+}
+
 function serviceRunning() {
+  // Another installation's service (a second gateway under this OS user) is
+  // not "running" for this CLI — never stop, restart or report it as ours.
+  if (!serviceIsOurs()) return false;
   const os = platform();
   if (os === 'darwin') {
     const p = runQuiet('launchctl', ['print', `gui/${process.getuid()}/${LAUNCH_AGENT_LABEL}`]);
@@ -1104,6 +1124,13 @@ async function service(args) {
     process.exit(2);
   }
 
+  if ((sub === 'install' || sub === 'uninstall') && !serviceIsOurs()) {
+    console.error('The login service on this account belongs to another Suveren gateway installation');
+    console.error(`(a different data folder than ${DATA_DIR}). Refusing to change it.`);
+    console.error('Run this installation in the background with:  suveren-gateway start --detach');
+    process.exit(2);
+  }
+
   switch (sub) {
     case 'install':   await impl.install(); break;
     case 'uninstall': await impl.uninstall(); break;

package/content/integrations/calendar.json

@@ -122,6 +122,7 @@
         }
       },
       "create_event": {
+        "message": { "text": "description", "verb": "Sent" },
         "summary": "Event: {summary|short}[ on {start.dateTime,start.date|date}]",
         "executionMapping": {
           "duration_minutes": "duration",
@@ -144,6 +145,7 @@
         "actionLabel": "Event created"
       },
       "update_event": {
+        "message": { "text": "description", "verb": "Sent" },
         "summary": "Update event[: {summary|short}]",
         "executionMapping": {
           "attendees": [

package/content/integrations/erp.json

@@ -6,7 +6,7 @@
   "icon": "briefcase",
   "profile": "sales",
   "npmPackage": "@humanagencyp/erp-mcp",
-  "npmVersion": "0.9.1",
+  "npmVersion": "0.9.4",
   "mcp": {
     "command": "erp-mcp",
     "args": [],
@@ -113,11 +113,13 @@
         "requiredValue": "unlimited"
       },
       "find_customers": {
+        "readAlsoUnder": ["invoicing"],
         "category": "read",
         "boundField": "read_access",
         "requiredValue": "unlimited"
       },
       "get_customer": {
+        "readAlsoUnder": ["invoicing"],
         "category": "read",
         "boundField": "read_access",
         "requiredValue": "unlimited"
@@ -276,7 +278,7 @@
         ],
         "display": {
           "order": ["customer_id", "order_id", "number", "document_date", "service_period", "lines", "net_total", "currency", "payment_term_days", "memo"],
-          "money": ["net_total", "customer_id.credit_limit", "customer_id.open_balance", "customer_id.available_credit"],
+          "money": ["net_total", "lines[].unit_price", "customer_id.credit_limit", "customer_id.open_balance", "customer_id.available_credit"],
           "currencyField": "currency",
           "labels": {
             "customer_id": "Customer",
@@ -311,7 +313,7 @@
         },
         "display": {
           "order": ["invoice_id", "number", "document_date", "credit_total", "currency", "reason", "service_period", "lines"],
-          "money": ["credit_total"],
+          "money": ["credit_total", "lines[].unit_price"],
           "currencyField": "currency",
           "labels": {
             "invoice_id": "Invoice",

package/content/integrations/gmail.json

@@ -84,6 +84,7 @@
     },
     "overrides": {
       "send_message": {
+        "message": { "text": "body", "to": "to", "cc": "cc", "subject": "subject", "verb": "Sent" },
         "summary": "Email to {to|list}: {subject|short}",
         "executionMapping": {
           "to": [
@@ -116,6 +117,7 @@
         "display": { "aiText": "body" }
       },
       "create_draft": {
+        "message": { "text": "body", "to": "to", "cc": "cc", "subject": "subject", "verb": "Sent" },
         "summary": "Draft email to {to|list}[: {subject|short}]",
         "executionMapping": {
           "to": [

package/content/integrations/linkedin.json

@@ -62,6 +62,7 @@
     },
     "overrides": {
       "create_post": {
+        "message": { "text": "text", "verb": "Published" },
         "summary": "LinkedIn post: {text|short}",
         "executionMapping": {
           "visibility": "audience"
@@ -74,6 +75,7 @@
         "actionLabel": "Post published"
       },
       "create_image_post": {
+        "message": { "text": "text", "verb": "Published" },
         "summary": "LinkedIn image post: {text|short}",
         "executionMapping": {
           "visibility": "audience"
@@ -86,6 +88,7 @@
         "actionLabel": "Image post published"
       },
       "create_article_post": {
+        "message": { "text": "text", "verb": "Published" },
         "summary": "LinkedIn article: {title,articleUrl|short}",
         "executionMapping": {
           "visibility": "audience"

package/content/integrations/mail.json

@@ -85,7 +85,16 @@
           "resultDatePath": "received_at"
         }
       },
+      "get_attachment": {
+        "category": "read",
+        "boundField": "read_access",
+        "requiredValue": "unlimited",
+        "read": {
+          "ageField": "read_age_days"
+        }
+      },
       "send_message": {
+        "message": { "text": "body", "to": "to", "cc": "cc", "subject": "subject", "verb": "Sent" },
         "summary": "Email to {to|list}: {subject|short}",
         "executionMapping": {
           "to": [

package/dist/control-plane/index.mjs

@@ -3,6 +3,13 @@ import {
   setPromptOverride
 } from "./chunk-3BNWN6VP.mjs";
 
+// src/lib/no-foreign-framing.ts
+function noForeignFraming(_req, res, next) {
+  res.setHeader("X-Frame-Options", "SAMEORIGIN");
+  res.setHeader("Content-Security-Policy", "frame-ancestors 'self'");
+  next();
+}
+
 // src/index.ts
 import { randomBytes as randomBytes3 } from "crypto";
 import { existsSync as existsSync13, readFileSync as readFileSync18, renameSync as renameSync6 } from "fs";
@@ -5398,6 +5405,7 @@ var shownSnapshotStore = new ShownSnapshotStore(DATA_DIR);
 var internalSecret2 = process.env.SUVEREN_INTERNAL_SECRET ?? randomBytes3(32).toString("hex");
 setInternalSecret(internalSecret2);
 var app = express();
+app.use(noForeignFraming);
 var jsonParser = express.json();
 var loginAttempts = /* @__PURE__ */ new Map();
 var LOGIN_WINDOW_MS = 6e4;

package/dist/mcp-server/http.mjs

@@ -3601,8 +3601,6 @@ function setAsBaseUrl(url) {
 }
 var OPERATOR_NAME = process.env.SUVEREN_OPERATOR_NAME ?? "Suveren";
 var HAP_URL = "https://www.humanagencyprotocol.org/";
-var FOOTER_PROFILES = /* @__PURE__ */ new Set(["email", "calendar", "publish"]);
-var CONTENT_FIELD_CANDIDATES = ["body", "text", "description", "content"];
 var FOOTER_RE = /\n*(?:—|--) (?:Sent|Published) by (?:an AI agent|[^\n]+?'s AI agent)[\s\S]*$/;
 function shouldAttachFooter() {
   return true;
@@ -3610,9 +3608,6 @@ function shouldAttachFooter() {
 function receiptUrl(receiptId) {
   return `${AS_BASE}/t/${receiptId}`;
 }
-function verbForProfile(profile) {
-  return profile === "publish" ? "Published" : "Sent";
-}
 function hapLine() {
   return `-- ${OPERATOR_NAME} implements HAP, the open Human Agency Protocol: ${HAP_URL}`;
 }
@@ -3620,32 +3615,22 @@ function footerText(receiptId, verb, subject) {
   const identity = deriveIdentityLine(subject, { operatorName: OPERATOR_NAME }).replace(/^Sent\b/, verb);
   return `
 
--- ${identity}. Receipt: ${receiptUrl(receiptId)}
+-- ${identity}. Ticket: ${receiptUrl(receiptId)}
 
 ${hapLine()}`;
 }
-function isStringType(t) {
-  return t === "string" || Array.isArray(t) && t.includes("string");
-}
 function detectContentField(tool) {
-  const schema = tool.inputSchema;
-  const props = schema?.properties ?? {};
-  for (const candidate of CONTENT_FIELD_CANDIDATES) {
-    const prop = props[candidate];
-    if (prop && isStringType(prop.type)) return candidate;
-  }
-  return null;
+  return tool.gating?.message?.text ?? null;
 }
 function stripFooter(value) {
   return value.replace(FOOTER_RE, "").replace(/\n+$/, "");
 }
 function appendVerificationFooter(tool, args, receiptId, subject) {
-  const profile = tool.gating?.profile;
-  if (!profile || !FOOTER_PROFILES.has(profile)) return args;
-  const field = detectContentField(tool);
-  if (!field) return args;
+  const message = tool.gating?.message;
+  if (!message) return args;
+  const field = message.text;
   const current = typeof args[field] === "string" ? args[field] : "";
-  return { ...args, [field]: stripFooter(current) + footerText(receiptId, verbForProfile(profile), subject) };
+  return { ...args, [field]: stripFooter(current) + footerText(receiptId, message.verb, subject) };
 }
 
 // src/lib/content-binding.ts
@@ -4059,6 +4044,51 @@ function invalidManifestInternalReason(manifest) {
   }
   return null;
 }
+var VALID_MESSAGE_VERBS = ["Sent", "Published"];
+function invalidMessageReason(toolName, entry) {
+  if (entry === null || typeof entry !== "object") return null;
+  const message = entry.message;
+  if (message === void 0) return null;
+  if (message === null || typeof message !== "object") {
+    return `override "${toolName}".message must be an object`;
+  }
+  const m = message;
+  const at = `override "${toolName}".message`;
+  if (typeof m.text !== "string" || m.text.length === 0) {
+    return `${at}.text must be a non-empty string`;
+  }
+  if (typeof m.verb !== "string" || !VALID_MESSAGE_VERBS.includes(m.verb)) {
+    return `${at}.verb must be one of ${VALID_MESSAGE_VERBS.join(", ")}`;
+  }
+  for (const key of ["to", "cc", "subject"]) {
+    if (m[key] !== void 0 && (typeof m[key] !== "string" || m[key].length === 0)) {
+      return `${at}.${key} must be a non-empty string`;
+    }
+  }
+  return null;
+}
+function invalidManifestReadAlsoUnderReason(manifest) {
+  const overrides = manifest.toolGating?.overrides ?? {};
+  for (const [toolName, entry] of Object.entries(overrides)) {
+    const extra = entry?.readAlsoUnder;
+    if (extra === void 0) continue;
+    const at = `override "${toolName}".readAlsoUnder`;
+    if (!Array.isArray(extra) || extra.length === 0 || !extra.every((p) => typeof p === "string" && p.length > 0)) {
+      return `${at} must be a non-empty list of area names`;
+    }
+    if (entry?.category !== "read") return `${at} is allowed on read tools only (category "read")`;
+    if (entry?.read !== void 0) return `${at} cannot be combined with a read adapter (age window)`;
+  }
+  return null;
+}
+function invalidManifestMessageReason(manifest) {
+  const overrides = manifest.toolGating?.overrides ?? {};
+  for (const [toolName, entry] of Object.entries(overrides)) {
+    const reason = invalidMessageReason(toolName, entry);
+    if (reason) return reason;
+  }
+  return null;
+}
 function invalidManifestPreviewReason(manifest) {
   const overrides = manifest.toolGating?.overrides ?? {};
   for (const [toolName, entry] of Object.entries(overrides)) {
@@ -4488,6 +4518,16 @@ function loadManifests(integrationsDir) {
         console.error(`[ManifestLoader] Refusing manifest ${id} (${manifestPath}): ${internalReason}`);
         continue;
       }
+      const readAlsoReason = invalidManifestReadAlsoUnderReason(manifest);
+      if (readAlsoReason) {
+        console.error(`[ManifestLoader] Refusing manifest ${id} (${manifestPath}): ${readAlsoReason}`);
+        continue;
+      }
+      const messageReason = invalidManifestMessageReason(manifest);
+      if (messageReason) {
+        console.error(`[ManifestLoader] Refusing manifest ${id} (${manifestPath}): ${messageReason}`);
+        continue;
+      }
       const contextReason = invalidManifestContextReason(manifest);
       if (contextReason) {
         console.error(`[ManifestLoader] Refusing manifest ${id} (${manifestPath}): ${contextReason}`);
@@ -5698,7 +5738,7 @@ function toStringArray(value) {
   if (typeof value === "string" && value) return [value];
   return [];
 }
-async function finalizeAttachmentsForExecution(integrationManager2, integrationId, args) {
+async function finalizeAttachmentsForExecution(integrationManager2, integrationId, args, message) {
   const sealed = args[ATTACHMENTS_SEALED_META_KEY];
   if (!sealed || sealed.attachments.length === 0 && sealed.inserts.length === 0) {
     return { ok: true, args };
@@ -5749,15 +5789,23 @@ async function finalizeAttachmentsForExecution(integrationManager2, integrationI
         contentBase64: d.contentBase64
       }));
     } else {
+      if (!message?.to) {
+        return {
+          ok: false,
+          message: `Refused: "${integrationId}" sends attachments as one built message, but this tool declares no message fields (manifest \`message.text\` and \`message.to\`) \u2014 nothing was sent.`
+        };
+      }
+      const decl = message;
       const arg = transport.arg;
       const attachments = resolvedDocs.map((d) => ({ filename: d.filename, contentType: d.contentType, contentBase64: d.contentBase64 }));
+      const str = (a, name) => name && typeof a[name] === "string" ? a[name] : "";
       const withRaw = (a) => ({
         ...a,
         [arg]: toBase64Url(buildMimeMessage({
-          to: toStringArray(a.to),
-          cc: toStringArray(a.cc),
-          subject: typeof a.subject === "string" ? a.subject : "",
-          bodyText: typeof a.body === "string" ? a.body : "",
+          to: toStringArray(a[decl.to]),
+          cc: decl.cc ? toStringArray(a[decl.cc]) : [],
+          subject: str(a, decl.subject),
+          bodyText: str(a, decl.text),
           attachments
         }))
       });
@@ -5790,10 +5838,11 @@ function computeContentBinding(profileId, tool, toolArgs, actionType) {
       return void 0;
     }
     let effectiveArgs = toolArgs;
-    if (binding.fields?.includes("attachments")) {
+    const attachmentsArg = tool?.gating?.attachmentsArg;
+    if (attachmentsArg && binding.fields?.includes(attachmentsArg)) {
       const sealed = toolArgs[ATTACHMENTS_SEALED_META_KEY];
       const fingerprints = (sealed?.attachments ?? []).map((a) => ({ filename: a.filename, sha256: a.sha256 }));
-      effectiveArgs = { ...toolArgs, attachments: fingerprints };
+      effectiveArgs = { ...toolArgs, [attachmentsArg]: fingerprints };
     }
     const bound = selectBoundFields(binding, effectiveArgs);
     return {
@@ -6324,9 +6373,10 @@ function createGatedToolHandlerInner(tool, integrationManager2, state2) {
     };
   }
   const { profile, executionMapping, staticExecution, category, boundField: toolBoundField, requiredValue: toolRequiredValue } = tool.gating;
+  const toolAreas = category === "read" ? [profile, ...tool.gating.readAlsoUnder ?? []] : [profile];
   const eligibleMandates = () => {
     const refusals = [];
-    const matching = state2.getEnrichedAuthorizations().filter((a) => a.complete && profileMatches(a.profileId, profile)).filter((a) => {
+    const matching = state2.getEnrichedAuthorizations().filter((a) => a.complete && toolAreas.some((p) => profileMatches(a.profileId, p))).filter((a) => {
       const refusal = integrationManager2.mandateRefusal?.(tool, a) ?? null;
       if (refusal) refusals.push(refusal);
       return !refusal;
@@ -6798,7 +6848,7 @@ Proposal ID: ${proposal.id}. Check status with check-pending-commitments(proposa
       let finalArgs = callArgs;
       let rebuildTransport;
       if (tool.gating?.attachmentsArg || tool.gating?.insertFields?.length) {
-        const finalized = await finalizeAttachmentsForExecution(integrationManager2, tool.integrationId, callArgs);
+        const finalized = await finalizeAttachmentsForExecution(integrationManager2, tool.integrationId, callArgs, tool.gating?.message);
         if (!finalized.ok) {
           return { content: [{ type: "text", text: finalized.message }], isError: true };
         }
@@ -7094,7 +7144,8 @@ function buildProxiedToolDescription(tool) {
     return `[Suveren: no gating config] ${tool.description}`;
   }
   const profile = tool.gating.profile;
-  const condition = `works only under a ${shortProfile(profile)} mandate, check list-authorizations`;
+  const areas = tool.gating.category === "read" ? [shortProfile(profile), ...(tool.gating.readAlsoUnder ?? []).map(shortProfile)] : [shortProfile(profile)];
+  const condition = `works only under a ${areas.join(" or ")} mandate, check list-authorizations`;
   if (tool.gating.category === "read") {
     return `[Suveren: ${profile} \u2014 read; ${condition}] ${tool.description}`;
   }
@@ -7312,7 +7363,8 @@ function listedWithoutMandate(authorizations, integrationManager2) {
   for (const tool of integrationManager2.getAllTools()) {
     if (!toolAlwaysListed(tool, isBuiltin, builtinAlwaysListed)) continue;
     const profile = tool.gating.profile;
-    if (authorizations.some((a) => a.complete && profileMatches(a.profileId, profile))) continue;
+    const areas = tool.gating.category === "read" ? [profile, ...tool.gating.readAlsoUnder ?? []] : [profile];
+    if (authorizations.some((a) => a.complete && areas.some((p) => profileMatches(a.profileId, p)))) continue;
     const short = shortProfileName2(profile);
     byProfile.set(short, [...byProfile.get(short) ?? [], tool.namespacedName]);
   }
@@ -7887,8 +7939,9 @@ async function executeCommitted(proposal, state2, integrationManager2) {
     }
   }
   let finalToolArgs = toolArgs;
+  let rebuildTransport;
   {
-    const finalized = await finalizeAttachmentsForExecution(integrationManager2, integrationId, toolArgs);
+    const finalized = await finalizeAttachmentsForExecution(integrationManager2, integrationId, toolArgs, discovered?.gating?.message);
     if (!finalized.ok) {
       state2.executionJournal.complete(receiptId, "failed", "changed", finalized.message);
       recordExecutionOutcome(state2, proposal.id, receiptId, false, finalized.message);
@@ -7900,6 +7953,7 @@ async function executeCommitted(proposal, state2, integrationManager2) {
       };
     }
     finalToolArgs = finalized.args;
+    rebuildTransport = finalized.rebuildTransport;
   }
   try {
     let outgoingArgs = finalToolArgs;
@@ -7908,6 +7962,7 @@ async function executeCommitted(proposal, state2, integrationManager2) {
         outgoingArgs = appendVerificationFooter(discovered, outgoingArgs, receiptId, cachedAuth?.subjects?.[0]);
       }
       outgoingArgs = attachTicketId(discovered, outgoingArgs, receiptId);
+      if (rebuildTransport) outgoingArgs = rebuildTransport(outgoingArgs);
       outgoingArgs = encodeOutgoingArgs(discovered, outgoingArgs);
     }
     outgoingArgs = stripSourceLink(outgoingArgs);
@@ -9508,7 +9563,9 @@ var IntegrationManager = class {
           hideUnlessAuthorized: ext.hideUnlessAuthorized,
           simulationOnly: ext.simulationOnly,
           approvalView: ext.approvalView,
-          internal: ext.internal
+          internal: ext.internal,
+          // Further areas whose mandates may authorize this read (manifest).
+          readAlsoUnder: ext.readAlsoUnder
         };
       }
       return {
@@ -9542,7 +9599,8 @@ var IntegrationManager = class {
         internal: ext.internal,
         attachmentsArg: ext.attachmentsArg,
         insertFields: ext.insertFields,
-        aiTextArg: ext.display?.aiText
+        aiTextArg: ext.display?.aiText,
+        message: ext.message
       };
     }
     return {
@@ -11733,12 +11791,11 @@ async function startIntegrationForService(serviceId) {
     (c) => c.id === serviceId || Object.values(c.envKeys ?? {}).some((ref) => typeof ref === "string" && ref.startsWith(`${serviceId}.`))
   );
   for (const config of candidates) {
+    await startOneIntegration(config);
     if (integrationManager.isRunning(config.id) && integrationManager.credentialsChangedSinceStart(config)) {
       console.error(`[Suveren MCP] ${config.id}: credentials changed since start \u2014 restarting`);
       await startOneIntegration(config, { restart: true });
-      continue;
     }
-    await startOneIntegration(config);
   }
 }
 async function startOneIntegration(config, opts = {}) {