@suveren/gateway 0.36.0 → 0.36.1

package/content/integrations/erp.json

@@ -6,7 +6,7 @@
   "icon": "briefcase",
   "profile": "sales",
   "npmPackage": "@humanagencyp/erp-mcp",
-  "npmVersion": "0.9.2",
+  "npmVersion": "0.9.4",
   "mcp": {
     "command": "erp-mcp",
     "args": [],
@@ -113,11 +113,13 @@
         "requiredValue": "unlimited"
       },
       "find_customers": {
+        "readAlsoUnder": ["invoicing"],
         "category": "read",
         "boundField": "read_access",
         "requiredValue": "unlimited"
       },
       "get_customer": {
+        "readAlsoUnder": ["invoicing"],
         "category": "read",
         "boundField": "read_access",
         "requiredValue": "unlimited"

package/dist/control-plane/index.mjs

@@ -3,6 +3,13 @@ import {
   setPromptOverride
 } from "./chunk-3BNWN6VP.mjs";
 
+// src/lib/no-foreign-framing.ts
+function noForeignFraming(_req, res, next) {
+  res.setHeader("X-Frame-Options", "SAMEORIGIN");
+  res.setHeader("Content-Security-Policy", "frame-ancestors 'self'");
+  next();
+}
+
 // src/index.ts
 import { randomBytes as randomBytes3 } from "crypto";
 import { existsSync as existsSync13, readFileSync as readFileSync18, renameSync as renameSync6 } from "fs";
@@ -5398,6 +5405,7 @@ var shownSnapshotStore = new ShownSnapshotStore(DATA_DIR);
 var internalSecret2 = process.env.SUVEREN_INTERNAL_SECRET ?? randomBytes3(32).toString("hex");
 setInternalSecret(internalSecret2);
 var app = express();
+app.use(noForeignFraming);
 var jsonParser = express.json();
 var loginAttempts = /* @__PURE__ */ new Map();
 var LOGIN_WINDOW_MS = 6e4;

package/dist/mcp-server/http.mjs

@@ -4067,6 +4067,20 @@ function invalidMessageReason(toolName, entry) {
   }
   return null;
 }
+function invalidManifestReadAlsoUnderReason(manifest) {
+  const overrides = manifest.toolGating?.overrides ?? {};
+  for (const [toolName, entry] of Object.entries(overrides)) {
+    const extra = entry?.readAlsoUnder;
+    if (extra === void 0) continue;
+    const at = `override "${toolName}".readAlsoUnder`;
+    if (!Array.isArray(extra) || extra.length === 0 || !extra.every((p) => typeof p === "string" && p.length > 0)) {
+      return `${at} must be a non-empty list of area names`;
+    }
+    if (entry?.category !== "read") return `${at} is allowed on read tools only (category "read")`;
+    if (entry?.read !== void 0) return `${at} cannot be combined with a read adapter (age window)`;
+  }
+  return null;
+}
 function invalidManifestMessageReason(manifest) {
   const overrides = manifest.toolGating?.overrides ?? {};
   for (const [toolName, entry] of Object.entries(overrides)) {
@@ -4504,6 +4518,11 @@ function loadManifests(integrationsDir) {
         console.error(`[ManifestLoader] Refusing manifest ${id} (${manifestPath}): ${internalReason}`);
         continue;
       }
+      const readAlsoReason = invalidManifestReadAlsoUnderReason(manifest);
+      if (readAlsoReason) {
+        console.error(`[ManifestLoader] Refusing manifest ${id} (${manifestPath}): ${readAlsoReason}`);
+        continue;
+      }
       const messageReason = invalidManifestMessageReason(manifest);
       if (messageReason) {
         console.error(`[ManifestLoader] Refusing manifest ${id} (${manifestPath}): ${messageReason}`);
@@ -6354,9 +6373,10 @@ function createGatedToolHandlerInner(tool, integrationManager2, state2) {
     };
   }
   const { profile, executionMapping, staticExecution, category, boundField: toolBoundField, requiredValue: toolRequiredValue } = tool.gating;
+  const toolAreas = category === "read" ? [profile, ...tool.gating.readAlsoUnder ?? []] : [profile];
   const eligibleMandates = () => {
     const refusals = [];
-    const matching = state2.getEnrichedAuthorizations().filter((a) => a.complete && profileMatches(a.profileId, profile)).filter((a) => {
+    const matching = state2.getEnrichedAuthorizations().filter((a) => a.complete && toolAreas.some((p) => profileMatches(a.profileId, p))).filter((a) => {
       const refusal = integrationManager2.mandateRefusal?.(tool, a) ?? null;
       if (refusal) refusals.push(refusal);
       return !refusal;
@@ -7124,7 +7144,8 @@ function buildProxiedToolDescription(tool) {
     return `[Suveren: no gating config] ${tool.description}`;
   }
   const profile = tool.gating.profile;
-  const condition = `works only under a ${shortProfile(profile)} mandate, check list-authorizations`;
+  const areas = tool.gating.category === "read" ? [shortProfile(profile), ...(tool.gating.readAlsoUnder ?? []).map(shortProfile)] : [shortProfile(profile)];
+  const condition = `works only under a ${areas.join(" or ")} mandate, check list-authorizations`;
   if (tool.gating.category === "read") {
     return `[Suveren: ${profile} \u2014 read; ${condition}] ${tool.description}`;
   }
@@ -7342,7 +7363,8 @@ function listedWithoutMandate(authorizations, integrationManager2) {
   for (const tool of integrationManager2.getAllTools()) {
     if (!toolAlwaysListed(tool, isBuiltin, builtinAlwaysListed)) continue;
     const profile = tool.gating.profile;
-    if (authorizations.some((a) => a.complete && profileMatches(a.profileId, profile))) continue;
+    const areas = tool.gating.category === "read" ? [profile, ...tool.gating.readAlsoUnder ?? []] : [profile];
+    if (authorizations.some((a) => a.complete && areas.some((p) => profileMatches(a.profileId, p)))) continue;
     const short = shortProfileName2(profile);
     byProfile.set(short, [...byProfile.get(short) ?? [], tool.namespacedName]);
   }
@@ -9541,7 +9563,9 @@ var IntegrationManager = class {
           hideUnlessAuthorized: ext.hideUnlessAuthorized,
           simulationOnly: ext.simulationOnly,
           approvalView: ext.approvalView,
-          internal: ext.internal
+          internal: ext.internal,
+          // Further areas whose mandates may authorize this read (manifest).
+          readAlsoUnder: ext.readAlsoUnder
         };
       }
       return {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@suveren/gateway",
-  "version": "0.36.0",
+  "version": "0.36.1",
   "description": "Suveren gateway — local agent gateway built in compliance with the Human Agency Protocol (HAP). Runs the UI, control plane, and MCP server in one Node process.",
   "type": "module",
   "main": "server.js",