@suveren/gateway 0.7.6 → 0.8.0

package/profiles/deploy/0.9.profile.json

@@ -0,0 +1,176 @@
+{
+  "id": "github.com/humanagencyprotocol/hap-profiles/deploy@0.9",
+  "name": "Deploy",
+  "version": "0.9",
+  "description": "Authority to make an already-built version live. Successor to deploy@0.6, which gated 'build and deploy this commit'; this gates the act of putting something in front of real users, because building is not consequential and going live is. The action is a RELEASE: it activates bytes that already exist, so the human can look at the artifact before approving and no rebuild can diverge from what was approved. Host-agnostic — the artifact identifier is a Vercel deployment id, a container image digest, an Azure slot — named by the connector manifest, never here.",
+  "boundsSchema": {
+    "actionTypes": [
+      "release"
+    ],
+    "keyOrder": [
+      "profile",
+      "release_daily_max",
+      "rollback_allowed"
+    ],
+    "fields": {
+      "profile": {
+        "type": "string",
+        "required": true
+      },
+      "release_daily_max": {
+        "type": "number",
+        "required": true,
+        "displayName": "Times per day something may go live",
+        "description": "How often the agent may make a build live for real users. Counted by the Authority Server, so a compromised gateway cannot exceed it. Building a preview is NOT counted: previews harm nobody, and charging them against this limit would exhaust it before anything reached anyone.",
+        "unit": "count",
+        "boundType": {
+          "kind": "cumulative_count",
+          "window": "daily"
+        },
+        "appliesTo": [
+          "release"
+        ]
+      },
+      "rollback_allowed": {
+        "type": "string",
+        "required": true,
+        "displayName": "May put a previous version back live",
+        "description": "Whether the agent may promote a PREVIOUS artifact back to live. Its own action type: reverting carries different risk from releasing, and the artifact being restored was approved for a moment that has passed.",
+        "enum": [
+          "yes",
+          "no"
+        ],
+        "boundType": {
+          "kind": "enum",
+          "values": [
+            "yes",
+            "no"
+          ]
+        }
+      }
+    }
+  },
+  "contextSchema": {
+    "keyOrder": [
+      "allowed_repos",
+      "allowed_environments",
+      "allowed_workflows",
+      "allowed_branches"
+    ],
+    "fields": {
+      "allowed_repos": {
+        "type": "string",
+        "required": true,
+        "displayName": "Allowed repositories",
+        "description": "Repositories the agent may deploy from, e.g. humanagencyprotocol/hap",
+        "constraint": {
+          "type": "string",
+          "enforceable": [
+            "subset"
+          ]
+        }
+      },
+      "allowed_environments": {
+        "type": "string",
+        "required": true,
+        "displayName": "Allowed environments",
+        "description": "Deployment targets the agent may reach. Deliberately NOT an enum: hosts disagree — GitHub uses names you define, Vercel has production and preview, Netlify has deploy-preview and branch-deploy. The connector discovers the real list.",
+        "constraint": {
+          "type": "string",
+          "enforceable": [
+            "subset"
+          ]
+        }
+      },
+      "allowed_workflows": {
+        "type": "string",
+        "required": true,
+        "displayName": "Allowed pipelines",
+        "description": "Named pipelines the agent may run, e.g. deploy.yml. Scoping by pipeline rather than by 'deploy' means adding CI later — a migration, an infrastructure apply — is an edit to this list, not a new profile. The limit of this approach: the grant knows a pipeline is permitted, not what it does. The name has to carry that meaning to the human signing.",
+        "constraint": {
+          "type": "string",
+          "enforceable": [
+            "subset"
+          ]
+        }
+      },
+      "allowed_branches": {
+        "type": "string",
+        "required": false,
+        "displayName": "Allowed branches",
+        "description": "Branches a deployable commit may come from. Optional: a host with no branch concept leaves it empty.",
+        "constraint": {
+          "type": "string",
+          "enforceable": [
+            "subset"
+          ]
+        }
+      }
+    }
+  },
+  "executionContextSchema": {
+    "fields": {
+      "action_type": {
+        "source": "static",
+        "description": "release or rollback — declared by the manifest, never taken from an agent argument",
+        "required": true,
+        "constraint": {
+          "type": "string",
+          "enforceable": [
+            "equals"
+          ]
+        }
+      },
+      "allowed_repos": {
+        "source": "declared",
+        "description": "Repository this action targets, checked against the authorized set",
+        "required": true,
+        "constraint": {
+          "type": "string",
+          "enforceable": [
+            "subset"
+          ]
+        }
+      },
+      "allowed_environments": {
+        "source": "declared",
+        "description": "Environment this action targets, checked against the authorized set. Recorded in the receipt, so the proof names where the release went.",
+        "required": true,
+        "constraint": {
+          "type": "string",
+          "enforceable": [
+            "subset"
+          ]
+        }
+      },
+      "allowed_workflows": {
+        "source": "declared",
+        "description": "Pipeline this action runs, checked against the authorized set. Recorded in the receipt, so the proof names what ran.",
+        "required": true,
+        "constraint": {
+          "type": "string",
+          "enforceable": [
+            "subset"
+          ]
+        }
+      }
+    }
+  },
+  "requiredGates": [
+    "bounds",
+    "intent",
+    "commitment",
+    "decision_owner"
+  ],
+  "ttl": {
+    "default": 2592000,
+    "max": 31536000
+  },
+  "retention_minimum": 7776000,
+  "content_binding": {
+    "version": "1",
+    "kind": "text"
+  },
+  "receipt_lookup": true,
+  "whatsNew": "Binds the source commit the build came from, not only the artifact address. A released page can show its commit but never its own deployment URL, so this is what lets a reader tie the page they are on to the approval that put it there."
+}

package/profiles/email/0.6.profile.json

@@ -0,0 +1,208 @@
+{
+  "id": "github.com/humanagencyprotocol/hap-profiles/email@0.6",
+  "name": "Email",
+  "version": "0.6",
+  "description": "Email authority — governs sending, drafting, and reading email via Gmail",
+  "whatsNew": "Binds the recipients to the receipt, not only the message body — an approved message can no longer be delivered to someone else without breaking the proof.",
+  "boundsSchema": {
+    "actionTypes": [
+      "delete",
+      "send"
+    ],
+    "keyOrder": [
+      "profile",
+      "recipient_max",
+      "send_daily_max",
+      "read_max_age_days",
+      "read_daily_max"
+    ],
+    "fields": {
+      "profile": {
+        "type": "string",
+        "required": true
+      },
+      "recipient_max": {
+        "type": "number",
+        "required": false,
+        "displayName": "Recipients per email",
+        "description": "Maximum recipients per email",
+        "unit": "count",
+        "boundType": {
+          "kind": "per_transaction",
+          "of": "recipient_count"
+        },
+        "paths": [
+          "email-send",
+          "email-draft"
+        ]
+      },
+      "send_daily_max": {
+        "type": "number",
+        "required": false,
+        "displayName": "Daily send limit",
+        "description": "Maximum emails sent or drafted per day",
+        "unit": "count",
+        "boundType": {
+          "kind": "cumulative_count",
+          "window": "daily"
+        },
+        "paths": [
+          "email-send",
+          "email-draft"
+        ],
+        "appliesTo": [
+          "send"
+        ]
+      },
+      "read_max_age_days": {
+        "type": "number",
+        "required": false,
+        "displayName": "Max email age (days)",
+        "description": "Maximum age in days for email search. Enforced locally by the Gatekeeper, never by the Authority Server: reads carry no receipt, so no signed check ever reads this value. Set it on the integration instead, where it is live-editable. Kept in the schema as the fallback for grants issued before that setting existed.",
+        "unit": "days",
+        "enforcedBy": "gatekeeper",
+        "boundType": {
+          "kind": "per_transaction",
+          "of": "read_age_days"
+        },
+        "paths": [
+          "email-read"
+        ]
+      },
+      "read_daily_max": {
+        "type": "number",
+        "required": false,
+        "displayName": "Daily read limit",
+        "description": "Not currently enforced: reads carry no receipt, so no component counts them. Hidden from the authorization editor until enforcement exists.",
+        "unit": "count",
+        "boundType": {
+          "kind": "cumulative_count",
+          "window": "daily"
+        },
+        "paths": [
+          "email-read"
+        ],
+        "enforced": false,
+        "appliesTo": []
+      }
+    }
+  },
+  "contextSchema": {
+    "keyOrder": [
+      "allowed_recipients",
+      "allowed_domains"
+    ],
+    "fields": {
+      "allowed_recipients": {
+        "type": "string",
+        "required": false,
+        "displayName": "Allowed recipients",
+        "format": "email",
+        "description": "Comma-separated list of allowed email addresses",
+        "constraint": {
+          "type": "string",
+          "enforceable": [
+            "subset"
+          ],
+          "requiredFor": [
+            "send"
+          ]
+        }
+      },
+      "allowed_domains": {
+        "type": "string",
+        "required": false,
+        "displayName": "Allowed domains",
+        "format": "domain",
+        "description": "Comma-separated list of allowed recipient domains (e.g. acme.com,partner.org)",
+        "constraint": {
+          "type": "string",
+          "enforceable": [
+            "subset"
+          ],
+          "requiredFor": [
+            "send"
+          ]
+        }
+      }
+    }
+  },
+  "executionContextSchema": {
+    "fields": {
+      "recipient_count": {
+        "source": "declared",
+        "description": "Number of recipients in this email",
+        "required": true,
+        "constraint": {
+          "type": "number",
+          "enforceable": [
+            "max"
+          ]
+        }
+      },
+      "allowed_recipients": {
+        "source": "declared",
+        "description": "Comma-separated recipient addresses from this call (checked against context)",
+        "required": false,
+        "constraint": {
+          "type": "string",
+          "enforceable": [
+            "subset"
+          ]
+        }
+      },
+      "allowed_domains": {
+        "source": "declared",
+        "description": "Comma-separated unique recipient domains from this call (checked against context)",
+        "required": false,
+        "constraint": {
+          "type": "string",
+          "enforceable": [
+            "subset"
+          ]
+        }
+      },
+      "send_count_daily": {
+        "source": "cumulative",
+        "cumulativeField": "_count",
+        "window": "daily",
+        "description": "Running daily send/draft count (resolved from execution log)",
+        "required": true,
+        "constraint": {
+          "type": "number",
+          "enforceable": [
+            "max"
+          ]
+        }
+      }
+    }
+  },
+  "requiredGates": [
+    "bounds",
+    "intent",
+    "commitment",
+    "decision_owner"
+  ],
+  "ttl": {
+    "default": 86400,
+    "max": 31536000
+  },
+  "retention_minimum": 7776000,
+  "content_binding": {
+    "version": "2",
+    "kind": "jcs",
+    "fields": [
+      "to",
+      "cc",
+      "subject",
+      "body"
+    ],
+    "required_fields": [
+      "to",
+      "body"
+    ],
+    "appliesTo": [
+      "send"
+    ]
+  }
+}

package/profiles/index.json

@@ -13,6 +13,14 @@
     "github.com/humanagencyprotocol/hap-profiles/records@0.4": "records/0.4.profile.json",
     "github.com/humanagencyprotocol/hap-profiles/deploy@0.6": "deploy/0.6.profile.json",
     "github.com/humanagencyprotocol/hap-profiles/deploy@0.7": "deploy/0.7.profile.json",
-    "github.com/humanagencyprotocol/hap-profiles/deploy@0.8": "deploy/0.8.profile.json"
+    "github.com/humanagencyprotocol/hap-profiles/deploy@0.8": "deploy/0.8.profile.json",
+    "github.com/humanagencyprotocol/hap-profiles/calendar@0.5": "calendar/0.5.profile.json",
+    "github.com/humanagencyprotocol/hap-profiles/records@0.5": "records/0.5.profile.json",
+    "github.com/humanagencyprotocol/hap-profiles/publish@0.5": "publish/0.5.profile.json",
+    "github.com/humanagencyprotocol/hap-profiles/purchase@0.5": "purchase/0.5.profile.json",
+    "github.com/humanagencyprotocol/hap-profiles/email@0.6": "email/0.6.profile.json",
+    "github.com/humanagencyprotocol/hap-profiles/customers@0.7": "customers/0.7.profile.json",
+    "github.com/humanagencyprotocol/hap-profiles/deploy@0.9": "deploy/0.9.profile.json",
+    "github.com/humanagencyprotocol/hap-profiles/charge@0.5": "charge/0.5.profile.json"
   }
 }

package/profiles/publish/0.5.profile.json

@@ -0,0 +1,186 @@
+{
+  "id": "github.com/humanagencyprotocol/hap-profiles/publish@0.5",
+  "name": "Content Publishing",
+  "version": "0.5",
+  "description": "Publishing authority — governs posting public content to social media, blogs, and other platforms",
+  "boundsSchema": {
+    "actionTypes": [
+      "delete",
+      "post"
+    ],
+    "keyOrder": [
+      "profile",
+      "post_daily_max",
+      "post_monthly_max"
+    ],
+    "fields": {
+      "profile": {
+        "type": "string",
+        "required": true
+      },
+      "post_daily_max": {
+        "type": "number",
+        "required": true,
+        "displayName": "Daily post limit",
+        "description": "Maximum posts published per day",
+        "unit": "count",
+        "boundType": {
+          "kind": "cumulative_count",
+          "window": "daily"
+        },
+        "appliesTo": [
+          "post"
+        ]
+      },
+      "post_monthly_max": {
+        "type": "number",
+        "required": true,
+        "displayName": "Monthly post limit",
+        "description": "Maximum posts published per month",
+        "unit": "count",
+        "boundType": {
+          "kind": "cumulative_count",
+          "window": "monthly"
+        },
+        "appliesTo": [
+          "post"
+        ]
+      }
+    }
+  },
+  "contextSchema": {
+    "keyOrder": [
+      "allowed_platforms",
+      "content_type",
+      "audience"
+    ],
+    "fields": {
+      "allowed_platforms": {
+        "type": "string",
+        "required": true,
+        "displayName": "Platforms",
+        "description": "Authorized publishing platforms",
+        "enum": [
+          "linkedin"
+        ],
+        "constraint": {
+          "type": "string",
+          "enforceable": [
+            "subset"
+          ]
+        }
+      },
+      "content_type": {
+        "type": "string",
+        "required": true,
+        "displayName": "Content types",
+        "description": "Authorized content formats",
+        "enum": [
+          "text",
+          "image",
+          "article"
+        ],
+        "constraint": {
+          "type": "string",
+          "enforceable": [
+            "subset"
+          ]
+        }
+      },
+      "audience": {
+        "type": "string",
+        "required": true,
+        "displayName": "Audience",
+        "description": "Authorized audience visibility",
+        "enum": [
+          "public",
+          "connections"
+        ],
+        "constraint": {
+          "type": "string",
+          "enforceable": [
+            "subset"
+          ]
+        }
+      }
+    }
+  },
+  "executionContextSchema": {
+    "fields": {
+      "allowed_platforms": {
+        "source": "declared",
+        "description": "Platform being published to (checked against authorized platforms)",
+        "required": true,
+        "constraint": {
+          "type": "string",
+          "enforceable": [
+            "subset"
+          ]
+        }
+      },
+      "content_type": {
+        "source": "declared",
+        "description": "Content format being published",
+        "required": true,
+        "constraint": {
+          "type": "string",
+          "enforceable": [
+            "subset"
+          ]
+        }
+      },
+      "audience": {
+        "source": "declared",
+        "description": "Audience visibility for this post",
+        "required": true,
+        "constraint": {
+          "type": "string",
+          "enforceable": [
+            "subset"
+          ]
+        }
+      },
+      "post_count_daily": {
+        "source": "cumulative",
+        "cumulativeField": "_count",
+        "window": "daily",
+        "description": "Running daily post count (resolved from execution log)",
+        "required": true,
+        "constraint": {
+          "type": "number",
+          "enforceable": [
+            "max"
+          ]
+        }
+      },
+      "post_count_monthly": {
+        "source": "cumulative",
+        "cumulativeField": "_count",
+        "window": "monthly",
+        "description": "Running monthly post count (resolved from execution log)",
+        "required": true,
+        "constraint": {
+          "type": "number",
+          "enforceable": [
+            "max"
+          ]
+        }
+      }
+    }
+  },
+  "requiredGates": [
+    "bounds",
+    "intent",
+    "commitment",
+    "decision_owner"
+  ],
+  "ttl": {
+    "default": 86400,
+    "max": 31536000
+  },
+  "retention_minimum": 7776000,
+  "content_binding": {
+    "version": "1",
+    "kind": "text"
+  }
+}