@suveren/gateway 0.5.0 → 0.6.1

package/node_modules/jose/dist/webapi/lib/options.js

@@ -1,6 +1,6 @@
 import { JOSENotSupported, JWEInvalid, JWSInvalid } from '../util/errors.js';
-export const JWS_RECOGNIZED = new Map([['b64', true]]);
-export const JWE_RECOGNIZED = new Map();
+export const JWS_RECOGNIZED = { __proto__: null, b64: true };
+export const JWE_RECOGNIZED = { __proto__: null };
 export function validateAlgorithms(option, algorithms) {
     if (algorithms !== undefined &&
         (!Array.isArray(algorithms) || algorithms.some((s) => typeof s !== 'string'))) {
@@ -22,30 +22,27 @@ export function validateCrit(Err, recognizedDefault, recognizedOption, protected
         throw new Err('"crit" (Critical) Header Parameter MUST be integrity protected');
     }
     if (!protectedHeader || protectedHeader.crit === undefined) {
-        return new Set();
+        return [];
     }
     if (!Array.isArray(protectedHeader.crit) ||
         protectedHeader.crit.length === 0 ||
         protectedHeader.crit.some((input) => typeof input !== 'string' || input.length === 0)) {
         throw new Err('"crit" (Critical) Header Parameter MUST be an array of non-empty strings when present');
     }
-    let recognized;
-    if (recognizedOption !== undefined) {
-        recognized = new Map([...Object.entries(recognizedOption), ...recognizedDefault.entries()]);
-    }
-    else {
-        recognized = recognizedDefault;
-    }
+    const recognized = recognizedOption === undefined
+        ? recognizedDefault
+        : { __proto__: null, ...recognizedOption, ...recognizedDefault };
     for (const parameter of protectedHeader.crit) {
-        if (!recognized.has(parameter)) {
+        if (!(parameter in recognized)) {
             throw new JOSENotSupported(`Extension Header Parameter "${parameter}" is not recognized`);
         }
-        if (joseHeader[parameter] === undefined) {
+        if (!Object.hasOwn(joseHeader, parameter) || joseHeader[parameter] === undefined) {
             throw new Err(`Extension Header Parameter "${parameter}" is missing`);
         }
-        if (recognized.get(parameter) && protectedHeader[parameter] === undefined) {
+        if (recognized[parameter] &&
+            (!Object.hasOwn(protectedHeader, parameter) || protectedHeader[parameter] === undefined)) {
             throw new Err(`Extension Header Parameter "${parameter}" MUST be integrity protected`);
         }
     }
-    return new Set(protectedHeader.crit);
+    return protectedHeader.crit;
 }

package/node_modules/jose/dist/webapi/lib/signing.js

@@ -1,34 +1,24 @@
-import { checkCryptoKey } from './crypto_key.js';
-export function checkModulusLength(alg, key) {
-    const { modulusLength } = key.algorithm;
-    if (typeof modulusLength !== 'number' || modulusLength < 2048) {
-        throw new TypeError(`${alg} requires key modulusLength to be 2048 bits or larger`);
-    }
-}
-function checkSigCryptoKey(entry, key, usage) {
-    checkCryptoKey(key, entry.subtle, usage);
-    if (entry.minModulusLength) {
-        checkModulusLength(entry.alg, key);
-    }
-}
+import { checkCryptoKey, checkModulusLength } from './crypto_key.js';
 async function getSigKey(entry, key, usage) {
     if (key instanceof Uint8Array) {
         return crypto.subtle.importKey('raw', key, entry.subtle, false, [
             usage,
         ]);
     }
-    checkSigCryptoKey(entry, key, usage);
+    checkCryptoKey(key, entry.subtle, usage);
+    if (entry.minRsaBits)
+        checkModulusLength(entry.alg, key);
     return key;
 }
 export async function sign(entry, key, data) {
     const cryptoKey = await getSigKey(entry, key, 'sign');
-    const signature = await crypto.subtle.sign(entry.operation, cryptoKey, data);
+    const signature = await crypto.subtle.sign(entry.signing, cryptoKey, data);
     return new Uint8Array(signature);
 }
 export async function verify(entry, key, signature, data) {
     const cryptoKey = await getSigKey(entry, key, 'verify');
     try {
-        return await crypto.subtle.verify(entry.operation, cryptoKey, signature, data);
+        return await crypto.subtle.verify(entry.signing, cryptoKey, signature, data);
     }
     catch {
         return false;

package/node_modules/jose/dist/webapi/lib/type_checks.js

@@ -1,34 +1,29 @@
-const isObjectLike = (value) => typeof value === 'object' && value !== null;
 export function isObject(input) {
-    if (!isObjectLike(input) || Object.prototype.toString.call(input) !== '[object Object]') {
+    if (typeof input !== 'object' ||
+        input === null ||
+        Object.prototype.toString.call(input) !== '[object Object]') {
         return false;
     }
-    if (Object.getPrototypeOf(input) === null) {
+    const prototype = Object.getPrototypeOf(input);
+    if (prototype === null) {
         return true;
     }
-    let proto = input;
+    let proto = prototype;
     while (Object.getPrototypeOf(proto) !== null) {
         proto = Object.getPrototypeOf(proto);
     }
-    return Object.getPrototypeOf(input) === proto;
+    return prototype === proto;
 }
 export function isDisjoint(...headers) {
-    const sources = headers.filter(Boolean);
-    if (sources.length === 0 || sources.length === 1) {
-        return true;
-    }
-    let acc;
-    for (const header of sources) {
-        const parameters = Object.keys(header);
-        if (!acc || acc.size === 0) {
-            acc = new Set(parameters);
+    const parameters = new Set();
+    for (const header of headers) {
+        if (!header)
             continue;
-        }
-        for (const parameter of parameters) {
-            if (acc.has(parameter)) {
+        for (const parameter of Object.keys(header)) {
+            if (parameters.has(parameter)) {
                 return false;
             }
-            acc.add(parameter);
+            parameters.add(parameter);
         }
     }
     return true;

package/node_modules/jose/dist/webapi/util/base64url.js

@@ -1,5 +1,6 @@
 import { encoder, decoder } from '../lib/buffer_utils.js';
 import { encodeBase64, decodeBase64 } from '../lib/base64.js';
+const invalid = 'The input to be decoded is not correctly encoded.';
 export function decode(input) {
     if (Uint8Array.fromBase64) {
         try {
@@ -8,7 +9,7 @@ export function decode(input) {
             });
         }
         catch (cause) {
-            throw new TypeError('The input to be decoded is not correctly encoded.', { cause });
+            throw new TypeError(invalid, { cause });
         }
     }
     let encoded = input;
@@ -16,14 +17,14 @@ export function decode(input) {
         encoded = decoder.decode(encoded);
     }
     if (encoded.includes('+') || encoded.includes('/')) {
-        throw new TypeError('The input to be decoded is not correctly encoded.');
+        throw new TypeError(invalid);
     }
     encoded = encoded.replace(/-/g, '+').replace(/_/g, '/');
     try {
         return decodeBase64(encoded);
     }
     catch {
-        throw new TypeError('The input to be decoded is not correctly encoded.');
+        throw new TypeError(invalid);
     }
 }
 export function encode(input) {

package/node_modules/jose/package.json

@@ -1,6 +1,6 @@
 {
   "name": "jose",
-  "version": "6.2.5",
+  "version": "6.2.7",
   "description": "JWA, JWS, JWE, JWT, JWK, JWKS for Node.js, Browser, Cloudflare Workers, Deno, Bun, and other Web-interoperable runtimes",
   "keywords": [
     "akp",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@suveren/gateway",
-  "version": "0.5.0",
+  "version": "0.6.1",
   "description": "Suveren gateway — local agent gateway built in compliance with the Human Agency Protocol (HAP). Runs the UI, control plane, and MCP server in one Node process.",
   "type": "module",
   "main": "server.js",
@@ -24,7 +24,7 @@
     "node": ">=20"
   },
   "dependencies": {
-    "@hap/core": "npm:@humanagencyp/hap-core@^0.7.0",
+    "@hap/core": "npm:@humanagencyp/hap-core@^0.8.0",
     "@hpke/core": "^1.9.0",
     "express": "^4.18.0",
     "http-proxy-middleware": "^3.0.0",

package/profiles/deploy/0.6.profile.json

@@ -0,0 +1,168 @@
+{
+  "id": "github.com/humanagencyprotocol/hap-profiles/deploy@0.6",
+  "name": "Deploy",
+  "version": "0.6",
+  "description": "Authority to put software live. Successor to deploy-gate@0.2, HAP's first profile \u2014 renamed because the old id is bound to a structure (flat frame, disclosure_hash) that no longer exists. Deliberately host-agnostic: every deployment system has something to deploy, somewhere to put it, a rate worth capping and a notion of undo. Provider vocabulary (GitHub 'environment', Vercel 'target', Netlify 'context') lives in the connector manifest, never here.",
+  "boundsSchema": {
+    "keyOrder": [
+      "profile",
+      "deploy_daily_max",
+      "rollback_allowed"
+    ],
+    "fields": {
+      "profile": {
+        "type": "string",
+        "required": true
+      },
+      "deploy_daily_max": {
+        "type": "number",
+        "required": true,
+        "displayName": "Daily deploy limit",
+        "description": "Maximum deployments per day. Counted by the Authority Server, so a compromised gateway cannot exceed it.",
+        "unit": "count",
+        "boundType": {
+          "kind": "cumulative_count",
+          "window": "daily"
+        }
+      },
+      "rollback_allowed": {
+        "type": "string",
+        "required": true,
+        "displayName": "Rollback",
+        "description": "Whether the agent may revert to a previous release. Rollback is a separate action type from deploy: undoing a release carries different risk from making one.",
+        "enum": [
+          "yes",
+          "no"
+        ],
+        "boundType": {
+          "kind": "enum",
+          "values": [
+            "yes",
+            "no"
+          ]
+        }
+      }
+    }
+  },
+  "contextSchema": {
+    "keyOrder": [
+      "allowed_repos",
+      "allowed_environments",
+      "allowed_workflows",
+      "allowed_branches"
+    ],
+    "fields": {
+      "allowed_repos": {
+        "type": "string",
+        "required": true,
+        "displayName": "Allowed repositories",
+        "description": "Repositories the agent may deploy from, e.g. humanagencyprotocol/hap",
+        "constraint": {
+          "type": "string",
+          "enforceable": [
+            "subset"
+          ]
+        }
+      },
+      "allowed_environments": {
+        "type": "string",
+        "required": true,
+        "displayName": "Allowed environments",
+        "description": "Deployment targets the agent may reach. Deliberately NOT an enum: hosts disagree \u2014 GitHub uses names you define, Vercel has production and preview, Netlify has deploy-preview and branch-deploy. The connector discovers the real list.",
+        "constraint": {
+          "type": "string",
+          "enforceable": [
+            "subset"
+          ]
+        }
+      },
+      "allowed_workflows": {
+        "type": "string",
+        "required": true,
+        "displayName": "Allowed pipelines",
+        "description": "Named pipelines the agent may run, e.g. deploy.yml. Scoping by pipeline rather than by 'deploy' means adding CI later \u2014 a migration, an infrastructure apply \u2014 is an edit to this list, not a new profile. The limit of this approach: the grant knows a pipeline is permitted, not what it does. The name has to carry that meaning to the human signing.",
+        "constraint": {
+          "type": "string",
+          "enforceable": [
+            "subset"
+          ]
+        }
+      },
+      "allowed_branches": {
+        "type": "string",
+        "required": false,
+        "displayName": "Allowed branches",
+        "description": "Branches a deployable commit may come from. Optional: a host with no branch concept leaves it empty.",
+        "constraint": {
+          "type": "string",
+          "enforceable": [
+            "subset"
+          ]
+        }
+      }
+    }
+  },
+  "executionContextSchema": {
+    "fields": {
+      "action_type": {
+        "source": "static",
+        "description": "deploy or rollback \u2014 declared by the manifest, never taken from an agent argument",
+        "required": true,
+        "constraint": {
+          "type": "string",
+          "enforceable": [
+            "equals"
+          ]
+        }
+      },
+      "allowed_repos": {
+        "source": "declared",
+        "description": "Repository this action targets, checked against the authorized set",
+        "required": true,
+        "constraint": {
+          "type": "string",
+          "enforceable": [
+            "subset"
+          ]
+        }
+      },
+      "allowed_environments": {
+        "source": "declared",
+        "description": "Environment this action targets, checked against the authorized set. Recorded in the receipt, so the proof names where the release went.",
+        "required": true,
+        "constraint": {
+          "type": "string",
+          "enforceable": [
+            "subset"
+          ]
+        }
+      },
+      "allowed_workflows": {
+        "source": "declared",
+        "description": "Pipeline this action runs, checked against the authorized set. Recorded in the receipt, so the proof names what ran.",
+        "required": true,
+        "constraint": {
+          "type": "string",
+          "enforceable": [
+            "subset"
+          ]
+        }
+      }
+    }
+  },
+  "requiredGates": [
+    "bounds",
+    "intent",
+    "commitment",
+    "decision_owner"
+  ],
+  "ttl": {
+    "default": 2592000,
+    "max": 31536000
+  },
+  "retention_minimum": 7776000,
+  "content_binding": {
+    "version": "1",
+    "kind": "text"
+  }
+}

package/profiles/deploy/0.7.profile.json

@@ -0,0 +1,168 @@
+{
+  "id": "github.com/humanagencyprotocol/hap-profiles/deploy@0.7",
+  "name": "Deploy",
+  "version": "0.7",
+  "description": "Authority to make an already-built version live. Successor to deploy@0.6, which gated 'build and deploy this commit'; this gates the act of putting something in front of real users, because building is not consequential and going live is. The action is a RELEASE: it activates bytes that already exist, so the human can look at the artifact before approving and no rebuild can diverge from what was approved. Host-agnostic — the artifact identifier is a Vercel deployment id, a container image digest, an Azure slot — named by the connector manifest, never here.",
+  "boundsSchema": {
+    "keyOrder": [
+      "profile",
+      "release_daily_max",
+      "rollback_allowed"
+    ],
+    "fields": {
+      "profile": {
+        "type": "string",
+        "required": true
+      },
+      "release_daily_max": {
+        "type": "number",
+        "required": true,
+        "displayName": "Times per day something may go live",
+        "description": "How often the agent may make a build live for real users. Counted by the Authority Server, so a compromised gateway cannot exceed it. Building a preview is NOT counted: previews harm nobody, and charging them against this limit would exhaust it before anything reached anyone.",
+        "unit": "count",
+        "boundType": {
+          "kind": "cumulative_count",
+          "window": "daily"
+        }
+      },
+      "rollback_allowed": {
+        "type": "string",
+        "required": true,
+        "displayName": "May put a previous version back live",
+        "description": "Whether the agent may promote a PREVIOUS artifact back to live. Its own action type: reverting carries different risk from releasing, and the artifact being restored was approved for a moment that has passed.",
+        "enum": [
+          "yes",
+          "no"
+        ],
+        "boundType": {
+          "kind": "enum",
+          "values": [
+            "yes",
+            "no"
+          ]
+        }
+      }
+    }
+  },
+  "contextSchema": {
+    "keyOrder": [
+      "allowed_repos",
+      "allowed_environments",
+      "allowed_workflows",
+      "allowed_branches"
+    ],
+    "fields": {
+      "allowed_repos": {
+        "type": "string",
+        "required": true,
+        "displayName": "Allowed repositories",
+        "description": "Repositories the agent may deploy from, e.g. humanagencyprotocol/hap",
+        "constraint": {
+          "type": "string",
+          "enforceable": [
+            "subset"
+          ]
+        }
+      },
+      "allowed_environments": {
+        "type": "string",
+        "required": true,
+        "displayName": "Allowed environments",
+        "description": "Deployment targets the agent may reach. Deliberately NOT an enum: hosts disagree — GitHub uses names you define, Vercel has production and preview, Netlify has deploy-preview and branch-deploy. The connector discovers the real list.",
+        "constraint": {
+          "type": "string",
+          "enforceable": [
+            "subset"
+          ]
+        }
+      },
+      "allowed_workflows": {
+        "type": "string",
+        "required": true,
+        "displayName": "Allowed pipelines",
+        "description": "Named pipelines the agent may run, e.g. deploy.yml. Scoping by pipeline rather than by 'deploy' means adding CI later — a migration, an infrastructure apply — is an edit to this list, not a new profile. The limit of this approach: the grant knows a pipeline is permitted, not what it does. The name has to carry that meaning to the human signing.",
+        "constraint": {
+          "type": "string",
+          "enforceable": [
+            "subset"
+          ]
+        }
+      },
+      "allowed_branches": {
+        "type": "string",
+        "required": false,
+        "displayName": "Allowed branches",
+        "description": "Branches a deployable commit may come from. Optional: a host with no branch concept leaves it empty.",
+        "constraint": {
+          "type": "string",
+          "enforceable": [
+            "subset"
+          ]
+        }
+      }
+    }
+  },
+  "executionContextSchema": {
+    "fields": {
+      "action_type": {
+        "source": "static",
+        "description": "release or rollback — declared by the manifest, never taken from an agent argument",
+        "required": true,
+        "constraint": {
+          "type": "string",
+          "enforceable": [
+            "equals"
+          ]
+        }
+      },
+      "allowed_repos": {
+        "source": "declared",
+        "description": "Repository this action targets, checked against the authorized set",
+        "required": true,
+        "constraint": {
+          "type": "string",
+          "enforceable": [
+            "subset"
+          ]
+        }
+      },
+      "allowed_environments": {
+        "source": "declared",
+        "description": "Environment this action targets, checked against the authorized set. Recorded in the receipt, so the proof names where the release went.",
+        "required": true,
+        "constraint": {
+          "type": "string",
+          "enforceable": [
+            "subset"
+          ]
+        }
+      },
+      "allowed_workflows": {
+        "source": "declared",
+        "description": "Pipeline this action runs, checked against the authorized set. Recorded in the receipt, so the proof names what ran.",
+        "required": true,
+        "constraint": {
+          "type": "string",
+          "enforceable": [
+            "subset"
+          ]
+        }
+      }
+    }
+  },
+  "requiredGates": [
+    "bounds",
+    "intent",
+    "commitment",
+    "decision_owner"
+  ],
+  "ttl": {
+    "default": 2592000,
+    "max": 31536000
+  },
+  "retention_minimum": 7776000,
+  "content_binding": {
+    "version": "1",
+    "kind": "text"
+  }
+}

package/profiles/email/0.4.profile.json

@@ -2,7 +2,7 @@
   "id": "github.com/humanagencyprotocol/hap-profiles/email@0.4",
   "name": "Email",
   "version": "0.4",
-  "description": "Email authority — governs sending, drafting, and reading email via Gmail",
+  "description": "Email authority \u2014 governs sending, drafting, and reading email via Gmail",
   "boundsSchema": {
     "keyOrder": [
       "profile",
@@ -94,6 +94,9 @@
           "type": "string",
           "enforceable": [
             "subset"
+          ],
+          "requiredFor": [
+            "send"
           ]
         }
       },
@@ -107,6 +110,9 @@
           "type": "string",
           "enforceable": [
             "subset"
+          ],
+          "requiredFor": [
+            "send"
           ]
         }
       }

package/profiles/index.json

@@ -9,6 +9,8 @@
     "github.com/humanagencyprotocol/hap-profiles/customers@0.6": "customers/0.6.profile.json",
     "github.com/humanagencyprotocol/hap-profiles/calendar@0.4": "calendar/0.4.profile.json",
     "github.com/humanagencyprotocol/hap-profiles/publish@0.4": "publish/0.4.profile.json",
-    "github.com/humanagencyprotocol/hap-profiles/records@0.4": "records/0.4.profile.json"
+    "github.com/humanagencyprotocol/hap-profiles/records@0.4": "records/0.4.profile.json",
+    "github.com/humanagencyprotocol/hap-profiles/deploy@0.6": "deploy/0.6.profile.json",
+    "github.com/humanagencyprotocol/hap-profiles/deploy@0.7": "deploy/0.7.profile.json"
   }
 }