@suveren/gateway 0.4.1 → 0.6.0

package/node_modules/jose/dist/webapi/util/base64url.js

@@ -1,21 +1,30 @@
 import { encoder, decoder } from '../lib/buffer_utils.js';
 import { encodeBase64, decodeBase64 } from '../lib/base64.js';
+const invalid = 'The input to be decoded is not correctly encoded.';
 export function decode(input) {
     if (Uint8Array.fromBase64) {
-        return Uint8Array.fromBase64(typeof input === 'string' ? input : decoder.decode(input), {
-            alphabet: 'base64url',
-        });
+        try {
+            return Uint8Array.fromBase64(typeof input === 'string' ? input : decoder.decode(input), {
+                alphabet: 'base64url',
+            });
+        }
+        catch (cause) {
+            throw new TypeError(invalid, { cause });
+        }
     }
     let encoded = input;
     if (encoded instanceof Uint8Array) {
         encoded = decoder.decode(encoded);
     }
+    if (encoded.includes('+') || encoded.includes('/')) {
+        throw new TypeError(invalid);
+    }
     encoded = encoded.replace(/-/g, '+').replace(/_/g, '/');
     try {
         return decodeBase64(encoded);
     }
     catch {
-        throw new TypeError('The input to be decoded is not correctly encoded.');
+        throw new TypeError(invalid);
     }
 }
 export function encode(input) {

package/node_modules/jose/dist/webapi/util/decode_jwt.js

@@ -1,5 +1,5 @@
 import { decode as b64u } from './base64url.js';
-import { decoder } from '../lib/buffer_utils.js';
+import { strictDecoder } from '../lib/buffer_utils.js';
 import { isObject } from '../lib/type_checks.js';
 import { JWTInvalid } from './errors.js';
 export function decodeJwt(jwt) {
@@ -21,7 +21,7 @@ export function decodeJwt(jwt) {
     }
     let result;
     try {
-        result = JSON.parse(decoder.decode(decoded));
+        result = JSON.parse(strictDecoder.decode(decoded));
     }
     catch {
         throw new JWTInvalid('Failed to parse the decoded payload as JSON');

package/node_modules/jose/dist/webapi/util/decode_protected_header.js

@@ -1,6 +1,4 @@
-import { decode as b64u } from './base64url.js';
-import { decoder } from '../lib/buffer_utils.js';
-import { isObject } from '../lib/type_checks.js';
+import { parseJoseHeader } from '../lib/helpers.js';
 export function decodeProtectedHeader(token) {
     let protectedB64u;
     if (typeof token === 'string') {
@@ -18,17 +16,9 @@ export function decodeProtectedHeader(token) {
             throw new TypeError('Token does not contain a Protected Header');
         }
     }
-    try {
-        if (typeof protectedB64u !== 'string' || !protectedB64u) {
-            throw new Error();
-        }
-        const result = JSON.parse(decoder.decode(b64u(protectedB64u)));
-        if (!isObject(result)) {
-            throw new Error();
-        }
-        return result;
-    }
-    catch {
-        throw new TypeError('Invalid Token or Protected Header formatting');
+    const invalid = 'Invalid Token or Protected Header formatting';
+    if (typeof protectedB64u !== 'string' || !protectedB64u) {
+        throw new TypeError(invalid);
     }
+    return parseJoseHeader(protectedB64u, TypeError, invalid);
 }

package/node_modules/jose/dist/webapi/util/errors.js

@@ -76,7 +76,7 @@ export class JWKSNoMatchingKey extends JOSEError {
     }
 }
 export class JWKSMultipleMatchingKeys extends JOSEError {
-    [Symbol.asyncIterator];
+    [Symbol.asyncIterator] = async function* () { };
     static code = 'ERR_JWKS_MULTIPLE_MATCHING_KEYS';
     code = 'ERR_JWKS_MULTIPLE_MATCHING_KEYS';
     constructor(message = 'multiple matching keys found in the JSON Web Key Set', options) {

package/node_modules/jose/package.json

@@ -1,6 +1,6 @@
 {
   "name": "jose",
-  "version": "6.2.4",
+  "version": "6.2.7",
   "description": "JWA, JWS, JWE, JWT, JWK, JWKS for Node.js, Browser, Cloudflare Workers, Deno, Bun, and other Web-interoperable runtimes",
   "keywords": [
     "akp",
@@ -193,8 +193,6 @@
     "!dist/**/*.bundle.js",
     "!dist/**/*.umd.js",
     "!dist/**/*.min.js",
-    "!dist/types/runtime/*",
-    "!dist/types/lib/*",
-    "!dist/deno/**/*"
+    "!dist/types/lib/**"
   ]
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@suveren/gateway",
-  "version": "0.4.1",
+  "version": "0.6.0",
   "description": "Suveren gateway — local agent gateway built in compliance with the Human Agency Protocol (HAP). Runs the UI, control plane, and MCP server in one Node process.",
   "type": "module",
   "main": "server.js",
@@ -24,7 +24,7 @@
     "node": ">=20"
   },
   "dependencies": {
-    "@hap/core": "npm:@humanagencyp/hap-core@^0.7.0",
+    "@hap/core": "npm:@humanagencyp/hap-core@^0.8.0",
     "@hpke/core": "^1.9.0",
     "express": "^4.18.0",
     "http-proxy-middleware": "^3.0.0",

package/profiles/deploy/0.6.profile.json

@@ -0,0 +1,168 @@
+{
+  "id": "github.com/humanagencyprotocol/hap-profiles/deploy@0.6",
+  "name": "Deploy",
+  "version": "0.6",
+  "description": "Authority to put software live. Successor to deploy-gate@0.2, HAP's first profile \u2014 renamed because the old id is bound to a structure (flat frame, disclosure_hash) that no longer exists. Deliberately host-agnostic: every deployment system has something to deploy, somewhere to put it, a rate worth capping and a notion of undo. Provider vocabulary (GitHub 'environment', Vercel 'target', Netlify 'context') lives in the connector manifest, never here.",
+  "boundsSchema": {
+    "keyOrder": [
+      "profile",
+      "deploy_daily_max",
+      "rollback_allowed"
+    ],
+    "fields": {
+      "profile": {
+        "type": "string",
+        "required": true
+      },
+      "deploy_daily_max": {
+        "type": "number",
+        "required": true,
+        "displayName": "Daily deploy limit",
+        "description": "Maximum deployments per day. Counted by the Authority Server, so a compromised gateway cannot exceed it.",
+        "unit": "count",
+        "boundType": {
+          "kind": "cumulative_count",
+          "window": "daily"
+        }
+      },
+      "rollback_allowed": {
+        "type": "string",
+        "required": true,
+        "displayName": "Rollback",
+        "description": "Whether the agent may revert to a previous release. Rollback is a separate action type from deploy: undoing a release carries different risk from making one.",
+        "enum": [
+          "yes",
+          "no"
+        ],
+        "boundType": {
+          "kind": "enum",
+          "values": [
+            "yes",
+            "no"
+          ]
+        }
+      }
+    }
+  },
+  "contextSchema": {
+    "keyOrder": [
+      "allowed_repos",
+      "allowed_environments",
+      "allowed_workflows",
+      "allowed_branches"
+    ],
+    "fields": {
+      "allowed_repos": {
+        "type": "string",
+        "required": true,
+        "displayName": "Allowed repositories",
+        "description": "Repositories the agent may deploy from, e.g. humanagencyprotocol/hap",
+        "constraint": {
+          "type": "string",
+          "enforceable": [
+            "subset"
+          ]
+        }
+      },
+      "allowed_environments": {
+        "type": "string",
+        "required": true,
+        "displayName": "Allowed environments",
+        "description": "Deployment targets the agent may reach. Deliberately NOT an enum: hosts disagree \u2014 GitHub uses names you define, Vercel has production and preview, Netlify has deploy-preview and branch-deploy. The connector discovers the real list.",
+        "constraint": {
+          "type": "string",
+          "enforceable": [
+            "subset"
+          ]
+        }
+      },
+      "allowed_workflows": {
+        "type": "string",
+        "required": true,
+        "displayName": "Allowed pipelines",
+        "description": "Named pipelines the agent may run, e.g. deploy.yml. Scoping by pipeline rather than by 'deploy' means adding CI later \u2014 a migration, an infrastructure apply \u2014 is an edit to this list, not a new profile. The limit of this approach: the grant knows a pipeline is permitted, not what it does. The name has to carry that meaning to the human signing.",
+        "constraint": {
+          "type": "string",
+          "enforceable": [
+            "subset"
+          ]
+        }
+      },
+      "allowed_branches": {
+        "type": "string",
+        "required": false,
+        "displayName": "Allowed branches",
+        "description": "Branches a deployable commit may come from. Optional: a host with no branch concept leaves it empty.",
+        "constraint": {
+          "type": "string",
+          "enforceable": [
+            "subset"
+          ]
+        }
+      }
+    }
+  },
+  "executionContextSchema": {
+    "fields": {
+      "action_type": {
+        "source": "static",
+        "description": "deploy or rollback \u2014 declared by the manifest, never taken from an agent argument",
+        "required": true,
+        "constraint": {
+          "type": "string",
+          "enforceable": [
+            "equals"
+          ]
+        }
+      },
+      "allowed_repos": {
+        "source": "declared",
+        "description": "Repository this action targets, checked against the authorized set",
+        "required": true,
+        "constraint": {
+          "type": "string",
+          "enforceable": [
+            "subset"
+          ]
+        }
+      },
+      "allowed_environments": {
+        "source": "declared",
+        "description": "Environment this action targets, checked against the authorized set. Recorded in the receipt, so the proof names where the release went.",
+        "required": true,
+        "constraint": {
+          "type": "string",
+          "enforceable": [
+            "subset"
+          ]
+        }
+      },
+      "allowed_workflows": {
+        "source": "declared",
+        "description": "Pipeline this action runs, checked against the authorized set. Recorded in the receipt, so the proof names what ran.",
+        "required": true,
+        "constraint": {
+          "type": "string",
+          "enforceable": [
+            "subset"
+          ]
+        }
+      }
+    }
+  },
+  "requiredGates": [
+    "bounds",
+    "intent",
+    "commitment",
+    "decision_owner"
+  ],
+  "ttl": {
+    "default": 2592000,
+    "max": 31536000
+  },
+  "retention_minimum": 7776000,
+  "content_binding": {
+    "version": "1",
+    "kind": "text"
+  }
+}

package/profiles/deploy/0.7.profile.json

@@ -0,0 +1,168 @@
+{
+  "id": "github.com/humanagencyprotocol/hap-profiles/deploy@0.7",
+  "name": "Deploy",
+  "version": "0.7",
+  "description": "Authority to make an already-built version live. Successor to deploy@0.6, which gated 'build and deploy this commit'; this gates the act of putting something in front of real users, because building is not consequential and going live is. The action is a RELEASE: it activates bytes that already exist, so the human can look at the artifact before approving and no rebuild can diverge from what was approved. Host-agnostic — the artifact identifier is a Vercel deployment id, a container image digest, an Azure slot — named by the connector manifest, never here.",
+  "boundsSchema": {
+    "keyOrder": [
+      "profile",
+      "release_daily_max",
+      "rollback_allowed"
+    ],
+    "fields": {
+      "profile": {
+        "type": "string",
+        "required": true
+      },
+      "release_daily_max": {
+        "type": "number",
+        "required": true,
+        "displayName": "Times per day something may go live",
+        "description": "How often the agent may make a build live for real users. Counted by the Authority Server, so a compromised gateway cannot exceed it. Building a preview is NOT counted: previews harm nobody, and charging them against this limit would exhaust it before anything reached anyone.",
+        "unit": "count",
+        "boundType": {
+          "kind": "cumulative_count",
+          "window": "daily"
+        }
+      },
+      "rollback_allowed": {
+        "type": "string",
+        "required": true,
+        "displayName": "May put a previous version back live",
+        "description": "Whether the agent may promote a PREVIOUS artifact back to live. Its own action type: reverting carries different risk from releasing, and the artifact being restored was approved for a moment that has passed.",
+        "enum": [
+          "yes",
+          "no"
+        ],
+        "boundType": {
+          "kind": "enum",
+          "values": [
+            "yes",
+            "no"
+          ]
+        }
+      }
+    }
+  },
+  "contextSchema": {
+    "keyOrder": [
+      "allowed_repos",
+      "allowed_environments",
+      "allowed_workflows",
+      "allowed_branches"
+    ],
+    "fields": {
+      "allowed_repos": {
+        "type": "string",
+        "required": true,
+        "displayName": "Allowed repositories",
+        "description": "Repositories the agent may deploy from, e.g. humanagencyprotocol/hap",
+        "constraint": {
+          "type": "string",
+          "enforceable": [
+            "subset"
+          ]
+        }
+      },
+      "allowed_environments": {
+        "type": "string",
+        "required": true,
+        "displayName": "Allowed environments",
+        "description": "Deployment targets the agent may reach. Deliberately NOT an enum: hosts disagree — GitHub uses names you define, Vercel has production and preview, Netlify has deploy-preview and branch-deploy. The connector discovers the real list.",
+        "constraint": {
+          "type": "string",
+          "enforceable": [
+            "subset"
+          ]
+        }
+      },
+      "allowed_workflows": {
+        "type": "string",
+        "required": true,
+        "displayName": "Allowed pipelines",
+        "description": "Named pipelines the agent may run, e.g. deploy.yml. Scoping by pipeline rather than by 'deploy' means adding CI later — a migration, an infrastructure apply — is an edit to this list, not a new profile. The limit of this approach: the grant knows a pipeline is permitted, not what it does. The name has to carry that meaning to the human signing.",
+        "constraint": {
+          "type": "string",
+          "enforceable": [
+            "subset"
+          ]
+        }
+      },
+      "allowed_branches": {
+        "type": "string",
+        "required": false,
+        "displayName": "Allowed branches",
+        "description": "Branches a deployable commit may come from. Optional: a host with no branch concept leaves it empty.",
+        "constraint": {
+          "type": "string",
+          "enforceable": [
+            "subset"
+          ]
+        }
+      }
+    }
+  },
+  "executionContextSchema": {
+    "fields": {
+      "action_type": {
+        "source": "static",
+        "description": "release or rollback — declared by the manifest, never taken from an agent argument",
+        "required": true,
+        "constraint": {
+          "type": "string",
+          "enforceable": [
+            "equals"
+          ]
+        }
+      },
+      "allowed_repos": {
+        "source": "declared",
+        "description": "Repository this action targets, checked against the authorized set",
+        "required": true,
+        "constraint": {
+          "type": "string",
+          "enforceable": [
+            "subset"
+          ]
+        }
+      },
+      "allowed_environments": {
+        "source": "declared",
+        "description": "Environment this action targets, checked against the authorized set. Recorded in the receipt, so the proof names where the release went.",
+        "required": true,
+        "constraint": {
+          "type": "string",
+          "enforceable": [
+            "subset"
+          ]
+        }
+      },
+      "allowed_workflows": {
+        "source": "declared",
+        "description": "Pipeline this action runs, checked against the authorized set. Recorded in the receipt, so the proof names what ran.",
+        "required": true,
+        "constraint": {
+          "type": "string",
+          "enforceable": [
+            "subset"
+          ]
+        }
+      }
+    }
+  },
+  "requiredGates": [
+    "bounds",
+    "intent",
+    "commitment",
+    "decision_owner"
+  ],
+  "ttl": {
+    "default": 2592000,
+    "max": 31536000
+  },
+  "retention_minimum": 7776000,
+  "content_binding": {
+    "version": "1",
+    "kind": "text"
+  }
+}

package/profiles/email/0.4.profile.json

@@ -2,7 +2,7 @@
   "id": "github.com/humanagencyprotocol/hap-profiles/email@0.4",
   "name": "Email",
   "version": "0.4",
-  "description": "Email authority — governs sending, drafting, and reading email via Gmail",
+  "description": "Email authority \u2014 governs sending, drafting, and reading email via Gmail",
   "boundsSchema": {
     "keyOrder": [
       "profile",
@@ -50,8 +50,9 @@
         "type": "number",
         "required": false,
         "displayName": "Max email age (days)",
-        "description": "Maximum age in days for email search",
+        "description": "Maximum age in days for email search. Enforced locally by the Gatekeeper, never by the Authority Server: reads carry no receipt, so no signed check ever reads this value. Set it on the integration instead, where it is live-editable. Kept in the schema as the fallback for grants issued before that setting existed.",
         "unit": "days",
+        "enforcedBy": "gatekeeper",
         "boundType": {
           "kind": "per_transaction",
           "of": "read_age_days"
@@ -93,6 +94,9 @@
           "type": "string",
           "enforceable": [
             "subset"
+          ],
+          "requiredFor": [
+            "send"
           ]
         }
       },
@@ -106,6 +110,9 @@
           "type": "string",
           "enforceable": [
             "subset"
+          ],
+          "requiredFor": [
+            "send"
           ]
         }
       }

package/profiles/index.json

@@ -9,6 +9,8 @@
     "github.com/humanagencyprotocol/hap-profiles/customers@0.6": "customers/0.6.profile.json",
     "github.com/humanagencyprotocol/hap-profiles/calendar@0.4": "calendar/0.4.profile.json",
     "github.com/humanagencyprotocol/hap-profiles/publish@0.4": "publish/0.4.profile.json",
-    "github.com/humanagencyprotocol/hap-profiles/records@0.4": "records/0.4.profile.json"
+    "github.com/humanagencyprotocol/hap-profiles/records@0.4": "records/0.4.profile.json",
+    "github.com/humanagencyprotocol/hap-profiles/deploy@0.6": "deploy/0.6.profile.json",
+    "github.com/humanagencyprotocol/hap-profiles/deploy@0.7": "deploy/0.7.profile.json"
   }
 }