@suveren/gateway 0.4.1 → 0.6.0

package/dist/control-plane/index.mjs

@@ -356,6 +356,7 @@ async function activateIntegration(manifest) {
     profile: manifest.profile,
     toolGating: manifest.toolGating,
     npmPackage: manifest.npmPackage,
+    ...typeof manifest.readPolicy?.defaultAgeDays === "number" ? { readAgeDays: manifest.readPolicy.defaultAgeDays } : {},
     enabled: true
   });
 }
@@ -391,6 +392,18 @@ async function removeIntegration(id) {
   }
   return res.json();
 }
+async function setReadPolicy(id, readAgeDays) {
+  const res = await fetch(`${MCP_BASE}/internal/integration/${encodeURIComponent(id)}/read-policy`, {
+    method: "PATCH",
+    headers: { ...internalHeaders(), "Content-Type": "application/json" },
+    body: JSON.stringify({ readAgeDays })
+  });
+  if (!res.ok) {
+    const err = await res.json().catch(() => ({ error: "Unknown error" }));
+    throw new Error(err.error);
+  }
+  return res.json();
+}
 async function getGateContent(path) {
   const qs = path ? `?path=${encodeURIComponent(path)}` : "";
   const res = await fetch(`${MCP_BASE}/internal/gate-content${qs}`, {
@@ -1364,6 +1377,30 @@ function requireAuthQueryOrHeader(vault2) {
   };
 }
 
+// src/lib/read-policy-defaults.ts
+async function backfillReadPolicyDefaults(data) {
+  const defaults = /* @__PURE__ */ new Map();
+  for (const m of data.manifests ?? []) {
+    const days = m.readPolicy?.defaultAgeDays;
+    if (typeof m.id === "string" && typeof days === "number" && Number.isInteger(days) && days >= 0) {
+      defaults.set(m.id, days);
+    }
+  }
+  if (defaults.size === 0) return;
+  try {
+    const current = await getIntegrations();
+    for (const integration of current.integrations ?? []) {
+      const fallback = defaults.get(integration.id);
+      if (fallback === void 0) continue;
+      if (integration.readAgeDays != null) continue;
+      await setReadPolicy(integration.id, fallback);
+      console.error(`[Control Plane]   Read policy default applied: ${integration.id} \u2192 ${fallback}d`);
+    }
+  } catch (err) {
+    console.error(`[Control Plane] \u26A0 Could not apply read-policy defaults: ${err instanceof Error ? err.message : err}`);
+  }
+}
+
 // src/routes/mcp.ts
 import { Router as Router5 } from "express";
 
@@ -1563,16 +1600,23 @@ function createAutostartRouter() {
 }
 
 // src/lib/desktop-notify.ts
-import { spawn } from "child_process";
+import { spawn, spawnSync } from "child_process";
 function osaQuote(value) {
   return `"${value.replace(/\\/g, "\\\\").replace(/"/g, '\\"')}"`;
 }
 function psQuote(value) {
   return `'${value.replace(/'/g, "''")}'`;
 }
-function buildNotifyCommand(platform, title, message) {
+function buildNotifyCommand(platform, title, message, options = {}) {
+  const { url, hasTerminalNotifier: hasTerminalNotifier2 = false } = options;
   switch (platform) {
     case "darwin":
+      if (url && hasTerminalNotifier2) {
+        return {
+          cmd: "terminal-notifier",
+          args: ["-title", title, "-message", message, "-open", url, "-group", "ai.suveren.gateway"]
+        };
+      }
       return {
         cmd: "osascript",
         args: ["-e", `display notification ${osaQuote(message)} with title ${osaQuote(title)}`]
@@ -1594,13 +1638,30 @@ function buildNotifyCommand(platform, title, message) {
   }
 }
 function lockedNotification(port2) {
+  const url = `http://localhost:${port2}`;
   return {
     title: "Suveren is running but locked",
-    message: `Your agent has no authority until you unlock it. Open http://localhost:${port2} and enter your API key.`
+    message: `Your agent has no authority until you unlock it. Open ${url} and enter your API key.`,
+    url
   };
 }
-function notify(title, message, platform = process.platform) {
-  const command = buildNotifyCommand(platform, title, message);
+var terminalNotifierCache = null;
+function hasTerminalNotifier() {
+  if (terminalNotifierCache !== null) return terminalNotifierCache;
+  try {
+    const probe = spawnSync("terminal-notifier", ["-help"], { stdio: "ignore" });
+    terminalNotifierCache = probe.error === void 0;
+  } catch {
+    terminalNotifierCache = false;
+  }
+  return terminalNotifierCache;
+}
+function notify(title, message, platform = process.platform, url) {
+  const command = buildNotifyCommand(platform, title, message, {
+    url,
+    // Only probe when a URL could actually be attached.
+    hasTerminalNotifier: url !== void 0 && platform === "darwin" ? hasTerminalNotifier() : false
+  });
   if (!command) return;
   try {
     const child = spawn(command.cmd, command.args, { detached: true, stdio: "ignore" });
@@ -2195,6 +2256,21 @@ app.use("/autostart", jsonParser, authGuard, createAutostartRouter());
 app.use("/api/encrypt-intent", jsonParser, authGuard, createEncryptIntentRouter());
 app.use("/api/decrypt-intent", jsonParser, authGuard, createDecryptIntentRouter(vault));
 app.use("/api/approved-intents", jsonParser, authGuard, createApprovedIntentsRouter(vault));
+app.put("/integrations/:id/read-policy", jsonParser, authGuard, async (req, res) => {
+  const id = req.params.id;
+  const { readAgeDays } = req.body ?? {};
+  if (readAgeDays !== null && !(typeof readAgeDays === "number" && Number.isInteger(readAgeDays) && readAgeDays >= 0)) {
+    res.status(400).json({ error: "readAgeDays must be a non-negative integer, or null to clear it" });
+    return;
+  }
+  try {
+    const result = await setReadPolicy(id, readAgeDays);
+    res.json(result);
+  } catch (err) {
+    const message = err instanceof Error ? err.message : "Unknown error";
+    res.status(502).json({ error: `Could not set read policy: ${message}` });
+  }
+});
 app.get("/integrations/:id/discover/:field", authGuard, async (req, res) => {
   const integrationId = req.params.id;
   const fieldName = req.params.field;
@@ -2494,8 +2570,8 @@ if (existsSync5(UI_DIST)) {
 app.listen(port, "0.0.0.0", () => {
   console.error(`[Control Plane] Listening on http://0.0.0.0:${port}`);
   if (process.env.SUVEREN_AUTOSTART === "1" && !vault.isUnlocked()) {
-    const { title, message } = lockedNotification(port);
-    notify(title, message);
+    const { title, message, url } = lockedNotification(port);
+    notify(title, message, process.platform, url);
   }
   console.error(`[Control Plane]   SP proxy: ${SP_URL2}`);
   console.error(`[Control Plane]   UI dist:  ${UI_DIST}`);
@@ -2507,6 +2583,7 @@ app.listen(port, "0.0.0.0", () => {
       console.error(`[Control Plane] \u26A0 MCP server at ${MCP_BASE} returned 0 integration manifests \u2014 wrong SUVEREN_MCP_INTERNAL_URL? (dev MCP is :3431, npm is :3430)`);
     } else {
       console.error(`[Control Plane]   Integrations: ${n} manifests loaded from ${MCP_BASE}`);
+      void backfillReadPolicyDefaults(d);
     }
   }).catch((err) => {
     console.error(`[Control Plane] \u26A0 Could not reach MCP server at ${MCP_BASE} for manifests \u2014 wrong SUVEREN_MCP_INTERNAL_URL? (dev=:3431, npm=:3430). ${err instanceof Error ? err.message : err}`);

package/dist/mcp-server/http.mjs

@@ -1157,9 +1157,11 @@ function computeContentBinding(profileId, tool, toolArgs) {
   if (binding.kind === "jcs") {
     contentHash = computeContentHash(binding, toolArgs);
   } else {
-    const field = tool ? detectContentField(tool) : null;
+    const declared = tool?.gating?.contentField;
+    const field = declared ?? (tool ? detectContentField(tool) : null);
     if (!field) return void 0;
     const raw = typeof toolArgs[field] === "string" ? toolArgs[field] : "";
+    if (raw === "") return void 0;
     contentHash = computeContentHash(binding, raw);
   }
   return {
@@ -1332,6 +1334,29 @@ function getByDottedPath(obj, path) {
     obj
   );
 }
+function firstParsableDate(obj, paths) {
+  for (const path of Array.isArray(paths) ? paths : [paths]) {
+    const parsed = parseMessageTimestamp(getByDottedPath(obj, path));
+    if (parsed !== null) return parsed;
+  }
+  return null;
+}
+function renderAgeConstraint(template, maxAgeDays, nowMs) {
+  const floorIso = new Date(nowMs - maxAgeDays * MS_PER_DAY).toISOString();
+  return template.replace(/\{days\}/g, String(maxAgeDays)).replace(/\{date\}/g, floorIso.slice(0, 10));
+}
+function ageFloorValue(maxAgeDays, nowMs, format = "iso") {
+  const floorMs = nowMs - maxAgeDays * MS_PER_DAY;
+  if (format === "epoch_ms") return floorMs;
+  if (format === "epoch_s") return String(Math.floor(floorMs / 1e3));
+  return new Date(floorMs).toISOString();
+}
+function clampAgeFloor(requested, maxAgeDays, nowMs, format = "iso") {
+  const floorMs = nowMs - maxAgeDays * MS_PER_DAY;
+  const asked = parseMessageTimestamp(requested);
+  if (asked !== null && asked >= floorMs) return requested;
+  return ageFloorValue(maxAgeDays, nowMs, format);
+}
 
 // src/lib/tool-proxy.ts
 import { getProfile as getProfile3 } from "@hap/core";
@@ -1422,6 +1447,22 @@ function denyRead(state2, tool, reason, detail, target) {
   return { content: [{ type: "text", text: `Read blocked by Gatekeeper: ${detail}` }], isError: true };
 }
 function createGatedToolHandler(tool, integrationManager2, state2) {
+  const inner = createGatedToolHandlerInner(tool, integrationManager2, state2);
+  const blocked = tool.gating?.blockedArgs ?? [];
+  if (blocked.length === 0) return inner;
+  return async (args) => {
+    const present = blocked.filter((a) => a in (args ?? {}));
+    if (present.length === 0) return inner(args);
+    return {
+      content: [{
+        type: "text",
+        text: `Refused: "${tool.namespacedName}" was called with ${present.map((b) => `"${b}"`).join(", ")}, which the integration manifest blocks. That argument carries the whole request in one opaque value, so the recipients, the content and the limits on this authorization cannot be read from it \u2014 the call could not be shown to stay in scope, and could not be shown to a human for approval in any form they could judge. Use the individual arguments instead.`
+      }],
+      isError: true
+    };
+  };
+}
+function createGatedToolHandlerInner(tool, integrationManager2, state2) {
   if (!tool.gating || !tool.gating.profile) {
     return async () => {
       return {
@@ -1494,18 +1535,20 @@ function createGatedToolHandler(tool, integrationManager2, state2) {
       const readProfile = readAdapter ? getProfile3(matchingAuths[0].profileId) : void 0;
       const boundsSchema = readProfile?.boundsSchema;
       const ageBoundField = readAdapter?.ageField ? resolveAgeBoundField(boundsSchema, readAdapter.ageField) : null;
+      const hasAgeDimension = Boolean(readAdapter?.ageField);
       let readMaxAge = null;
-      if (ageBoundField) {
-        readMaxAge = maxReadAgeDays(
+      if (hasAgeDimension) {
+        const localAge = integrationManager2.getReadAgeDays(tool.integrationId);
+        readMaxAge = localAge ?? (ageBoundField ? maxReadAgeDays(
           matchingAuths.map((a) => a.bounds ?? a.frame),
           ageBoundField
-        );
+        ) : null);
         if (readMaxAge === null) {
           return denyRead(
             state2,
             tool,
             "unset_age",
-            `no read-age window is set on your authorization (${ageBoundField}). Reads are not permitted with an unbounded window \u2014 set how far back the agent may read, then try again. Nothing was read.`
+            `no read-age window is set for this integration${ageBoundField ? ` (or on your authorization's ${ageBoundField})` : ""}. Reads are not permitted with an unbounded window \u2014 set how far back the agent may read under the integration's Read policy, then try again. Nothing was read.`
           );
         }
       }
@@ -1540,10 +1583,21 @@ function createGatedToolHandler(tool, integrationManager2, state2) {
       if (readAdapter?.pinnedArgs) {
         outgoing = { ...outgoing, ...readAdapter.pinnedArgs };
       }
+      if (readAdapter?.ageFloorArg && hasAgeDimension && readMaxAge !== null) {
+        outgoing = {
+          ...outgoing,
+          [readAdapter.ageFloorArg]: clampAgeFloor(
+            outgoing[readAdapter.ageFloorArg],
+            readMaxAge,
+            Date.now(),
+            readAdapter.ageFloorFormat
+          )
+        };
+      }
       if (readAdapter?.queryArg) {
         const clauses = [];
-        if (ageBoundField && readAdapter.ageConstraint && readMaxAge !== null) {
-          clauses.push(readAdapter.ageConstraint.replace("{days}", String(readMaxAge)));
+        if (hasAgeDimension && readAdapter.ageConstraint && readMaxAge !== null) {
+          clauses.push(renderAgeConstraint(readAdapter.ageConstraint, readMaxAge, Date.now()));
         }
         if (clauses.length > 0) {
           const base = typeof args[readAdapter.queryArg] === "string" ? args[readAdapter.queryArg] : "";
@@ -1581,10 +1635,10 @@ function createGatedToolHandler(tool, integrationManager2, state2) {
           );
         }
       }
-      if (readAdapter && ageBoundField && readAdapter.resultDatePath && readMaxAge !== null) {
+      if (readAdapter && hasAgeDimension && readAdapter.resultDatePath && readMaxAge !== null) {
         const parsed = parseFirstJson(result);
-        const rawDate = parsed === void 0 ? void 0 : getByDottedPath(parsed, readAdapter.resultDatePath);
-        if (isOlderThanMaxAge(parseMessageTimestamp(rawDate), readMaxAge, Date.now())) {
+        const itemDate = parsed === void 0 ? null : firstParsableDate(parsed, readAdapter.resultDatePath);
+        if (isOlderThanMaxAge(itemDate, readMaxAge, Date.now())) {
           return denyRead(
             state2,
             tool,
@@ -2571,6 +2625,23 @@ function ensureIntegrationsDir() {
     writeFileSync5(pkgPath, JSON.stringify({ name: "suveren-integrations", version: "1.0.0", private: true }, null, 2));
   }
 }
+function readAgeOf(config) {
+  const days = config.readAgeDays;
+  return typeof days === "number" && Number.isFinite(days) && days >= 0 ? days : null;
+}
+function withoutBlockedArgs(schema, blocked) {
+  if (!blocked?.length) return schema;
+  const props = schema.properties;
+  if (!props) return schema;
+  const kept = Object.fromEntries(Object.entries(props).filter(([k]) => !blocked.includes(k)));
+  const out = { ...schema, properties: kept };
+  if (Array.isArray(schema.required)) {
+    out.required = schema.required.filter(
+      (r) => typeof r !== "string" || !blocked.includes(r)
+    );
+  }
+  return out;
+}
 var RESPAWN_DELAYS = [2e3, 4e3, 6e3];
 var MAX_RESPAWN_ATTEMPTS = 3;
 var CONNECT_TIMEOUT_MS = 3e4;
@@ -2766,7 +2837,14 @@ var IntegrationManager = class {
         namespacedName: `${config.id}__${tool.name}`,
         integrationId: config.id,
         description: tool.description ?? "",
-        inputSchema: tool.inputSchema ?? {},
+        // A downstream schema otherwise reaches the agent verbatim, so a
+        // connector can offer a control-bypassing argument and we would pass it
+        // straight on. Anything the manifest blocks is removed here, before the
+        // agent ever sees it exists.
+        inputSchema: withoutBlockedArgs(
+          tool.inputSchema ?? {},
+          gating?.blockedArgs
+        ),
         gating
       };
     });
@@ -2838,14 +2916,32 @@ var IntegrationManager = class {
     return tools;
   }
   /**
-   * RESERVED / NOT YET WIRED (see IntegrationConfig.readAgeDays). The local
-   * read-age window (days) for a running integration, for a deferred feature
-   * that moves the read age off the signed grant. The read path does NOT call
-   * this yet — it still enforces the signed `read_max_age_days` bound.
+   * The LOCAL read-age window (days) for a running integration, or null when
+   * none is set here (the read path then falls back to the signed grant bound
+   * — see `IntegrationConfig.readAgeDays`).
+   *
+   * 0 is a real value ("read nothing") and MUST survive this call, so the
+   * guard tests the type, never truthiness.
    */
   getReadAgeDays(integrationId) {
-    const days = this.running.get(integrationId)?.config.readAgeDays;
-    return typeof days === "number" && Number.isFinite(days) ? days : null;
+    const config = this.running.get(integrationId)?.config;
+    return config ? readAgeOf(config) : null;
+  }
+  /**
+   * Apply a new local read-age window to the RUNNING snapshot, so the change
+   * takes effect on the next read without restarting the subprocess. Read
+   * policy is enforced gateway-side and never reaches the downstream MCP
+   * server, so nothing has to be re-spawned.
+   *
+   * Persistence is the registry's job — callers update both. Returns false if
+   * the integration is not running (registry-only update still applies).
+   */
+  setReadAgeDays(integrationId, days) {
+    const entry = this.running.get(integrationId);
+    if (!entry) return false;
+    if (days === null) delete entry.config.readAgeDays;
+    else entry.config.readAgeDays = days;
+    return true;
   }
   /**
    * Get status info for all known integrations.
@@ -2857,7 +2953,8 @@ var IntegrationManager = class {
         id: entry.config.id,
         name: entry.config.name,
         running: true,
-        toolCount: entry.tools.length
+        toolCount: entry.tools.length,
+        readAgeDays: readAgeOf(entry.config)
       });
     }
     if (allConfigs) {
@@ -2867,7 +2964,8 @@ var IntegrationManager = class {
             id: config.id,
             name: config.name,
             running: false,
-            toolCount: 0
+            toolCount: 0,
+            readAgeDays: readAgeOf(config)
           });
         }
       }
@@ -2951,13 +3049,20 @@ var IntegrationManager = class {
           requiredValue: ext.requiredValue,
           read: ext.read,
           readGovernance: ext.readGovernance,
-          readGovernanceReason: ext.readGovernanceReason
+          readGovernanceReason: ext.readGovernanceReason,
+          blockedArgs: ext.blockedArgs
         };
       }
       return {
         profile: profileId,
         executionMapping: override.executionMapping,
-        staticExecution: override.staticExecution
+        staticExecution: override.staticExecution,
+        // Which argument the receipt binds to. This resolver is an explicit
+        // whitelist, so a field added to the manifest and the type but not
+        // copied here is silently dropped — the receipt is still issued and
+        // simply carries no binding, which only surfaces when a verifier asks.
+        contentField: ext.contentField,
+        blockedArgs: ext.blockedArgs
       };
     }
     return {
@@ -3325,6 +3430,27 @@ app.delete("/internal/remove-integration/:id", internalOnly, async (req, res) =>
   console.error(`[Suveren MCP] Integration ${id} removed`);
   res.json({ ok: true, id });
 });
+app.patch("/internal/integration/:id/read-policy", internalOnly, (req, res) => {
+  const id = req.params.id;
+  const raw = req.body.readAgeDays;
+  let readAgeDays;
+  if (raw === null) {
+    readAgeDays = null;
+  } else if (typeof raw === "number" && Number.isInteger(raw) && raw >= 0) {
+    readAgeDays = raw;
+  } else {
+    res.status(400).json({ error: "readAgeDays must be a non-negative integer, or null to clear it" });
+    return;
+  }
+  const updated = integrationRegistry.update(id, { readAgeDays: readAgeDays ?? void 0 });
+  if (!updated) {
+    res.status(404).json({ error: `Integration "${id}" not found` });
+    return;
+  }
+  integrationManager.setReadAgeDays(id, readAgeDays);
+  console.error(`[Suveren MCP] Read policy for ${id}: ${readAgeDays === null ? "cleared" : `${readAgeDays}d`}`);
+  res.json({ ok: true, id, readAgeDays });
+});
 app.get("/internal/integrations", internalOnly, (_req, res) => {
   const configs = integrationRegistry.getAll();
   const statuses = integrationManager.getStatus(configs);