@suveren/gateway 0.8.1 → 0.8.3

package/content/integrations/deploy-github.json

@@ -103,8 +103,7 @@
       "risk": "low",
       "mode": "automatic",
       "bounds": {
-        "release_daily_max": "0",
-        "rollback_allowed": "no"
+        "release_daily_max": "0"
       },
       "context": {
         "allowed_repos": "",
@@ -121,12 +120,11 @@
     },
     {
       "name": "Release to production, review",
-      "description": "Make an existing build live after approval. Three a day, no rollback.",
+      "description": "Make an existing build live after approval. Three a day.",
       "risk": "high",
       "mode": "review",
       "bounds": {
-        "release_daily_max": "3",
-        "rollback_allowed": "no"
+        "release_daily_max": "3"
       },
       "context": {
         "allowed_repos": "",

package/dist/mcp-server/http.mjs

@@ -3416,31 +3416,74 @@ var IntegrationRegistry = class {
 
 // src/lib/integration-manager.ts
 import { homedir as homedir8 } from "os";
-import { join as join9, delimiter } from "path";
-import { existsSync as existsSync9, writeFileSync as writeFileSync7, mkdirSync as mkdirSync7, readFileSync as readFileSync9, rmSync } from "fs";
+import { join as join10, delimiter } from "path";
+import { existsSync as existsSync10, writeFileSync as writeFileSync7, mkdirSync as mkdirSync7, readFileSync as readFileSync10, rmSync } from "fs";
 import { execFile } from "child_process";
 import { Client } from "@modelcontextprotocol/sdk/client/index.js";
 import { StdioClientTransport } from "@modelcontextprotocol/sdk/client/stdio.js";
 import { getProfile as getProfile5 } from "@hap/core";
-var DEFAULT_DATA_DIR2 = process.env.SUVEREN_DATA_DIR ?? join9(homedir8(), ".suveren");
-var INTEGRATIONS_DIR = process.env.SUVEREN_INTEGRATIONS_DIR ?? join9(DEFAULT_DATA_DIR2, "integrations");
+
+// src/lib/manifest-loader.ts
+import { readFileSync as readFileSync9, existsSync as existsSync9 } from "fs";
+import { join as join9, resolve } from "path";
+var manifests = /* @__PURE__ */ new Map();
+function loadManifests(integrationsDir) {
+  const dir = resolve(
+    integrationsDir ?? process.env.SUVEREN_MANIFESTS_DIR ?? join9(import.meta.dirname ?? __dirname, "..", "..", "..", "..", "content", "integrations")
+  );
+  const indexPath = join9(dir, "index.json");
+  if (!existsSync9(indexPath)) {
+    console.error(`[ManifestLoader] No index.json found at ${indexPath}, skipping manifest loading`);
+    return 0;
+  }
+  let index;
+  try {
+    index = JSON.parse(readFileSync9(indexPath, "utf-8"));
+  } catch (err) {
+    console.error(`[ManifestLoader] Failed to parse ${indexPath}:`, err);
+    return 0;
+  }
+  let loaded = 0;
+  for (const [id, relativePath] of Object.entries(index.integrations)) {
+    const manifestPath = join9(dir, relativePath);
+    try {
+      const manifest = JSON.parse(readFileSync9(manifestPath, "utf-8"));
+      manifests.set(id, manifest);
+      loaded++;
+    } catch (err) {
+      console.error(`[ManifestLoader] Failed to load manifest ${id} from ${manifestPath}:`, err);
+    }
+  }
+  console.error(`[ManifestLoader] Loaded ${loaded} integration manifest(s) from ${dir}`);
+  return loaded;
+}
+function getManifest(id) {
+  return manifests.get(id);
+}
+function getAllManifests() {
+  return Array.from(manifests.values());
+}
+
+// src/lib/integration-manager.ts
+var DEFAULT_DATA_DIR2 = process.env.SUVEREN_DATA_DIR ?? join10(homedir8(), ".suveren");
+var INTEGRATIONS_DIR = process.env.SUVEREN_INTEGRATIONS_DIR ?? join10(DEFAULT_DATA_DIR2, "integrations");
 var installLock = Promise.resolve();
 function withInstallLock(task) {
   const run = installLock.then(task, task);
   installLock = run.then(() => void 0, () => void 0);
   return run;
 }
-var INTEGRATIONS_BIN = join9(INTEGRATIONS_DIR, "node_modules", ".bin");
+var INTEGRATIONS_BIN = join10(INTEGRATIONS_DIR, "node_modules", ".bin");
 function buildPath() {
   const base = process.env.PATH ?? "";
   return [INTEGRATIONS_BIN, base].join(delimiter);
 }
 function ensureIntegrationsDir() {
-  if (!existsSync9(INTEGRATIONS_DIR)) {
+  if (!existsSync10(INTEGRATIONS_DIR)) {
     mkdirSync7(INTEGRATIONS_DIR, { recursive: true });
   }
-  const pkgPath = join9(INTEGRATIONS_DIR, "package.json");
-  if (!existsSync9(pkgPath)) {
+  const pkgPath = join10(INTEGRATIONS_DIR, "package.json");
+  if (!existsSync10(pkgPath)) {
     writeFileSync7(pkgPath, JSON.stringify({ name: "suveren-integrations", version: "1.0.0", private: true }, null, 2));
   }
 }
@@ -3507,19 +3550,19 @@ var IntegrationManager = class {
    * exist, and treat anything else as not-installed (and reinstallable).
    */
   isUsableInstall(npmPackage) {
-    const pkgDir = join9(INTEGRATIONS_DIR, "node_modules", ...npmPackage.split("/"));
-    const pkgJson = join9(pkgDir, "package.json");
-    if (!existsSync9(pkgDir) || !existsSync9(pkgJson)) return false;
+    const pkgDir = join10(INTEGRATIONS_DIR, "node_modules", ...npmPackage.split("/"));
+    const pkgJson = join10(pkgDir, "package.json");
+    if (!existsSync10(pkgDir) || !existsSync10(pkgJson)) return false;
     try {
-      const pkg = JSON.parse(readFileSync9(pkgJson, "utf8"));
+      const pkg = JSON.parse(readFileSync10(pkgJson, "utf8"));
       const defaultBinName = (pkg.name ?? npmPackage).split("/").pop() ?? "";
       const binMap = typeof pkg.bin === "string" ? { [defaultBinName]: pkg.bin } : pkg.bin ?? {};
       const binEntries = Object.entries(binMap);
       for (const [binName, target] of binEntries) {
-        if (!existsSync9(join9(pkgDir, target))) return false;
+        if (!existsSync10(join10(pkgDir, target))) return false;
         if (!this.binShimExists(binName)) return false;
       }
-      if (binEntries.length === 0 && pkg.main && !existsSync9(join9(pkgDir, pkg.main))) return false;
+      if (binEntries.length === 0 && pkg.main && !existsSync10(join10(pkgDir, pkg.main))) return false;
       return true;
     } catch {
       return false;
@@ -3533,7 +3576,7 @@ var IntegrationManager = class {
   binShimExists(binName) {
     if (!binName) return false;
     const candidates = process.platform === "win32" ? [binName, `${binName}.cmd`, `${binName}.CMD`, `${binName}.ps1`] : [binName];
-    return candidates.some((c) => existsSync9(join9(INTEGRATIONS_BIN, c)));
+    return candidates.some((c) => existsSync10(join10(INTEGRATIONS_BIN, c)));
   }
   /**
    * Install an npm package into the managed integrations directory if not
@@ -3557,8 +3600,8 @@ var IntegrationManager = class {
   }
   /** The actual install. Callers MUST hold the install lock. */
   async installNow(npmPackage) {
-    const pkgDir = join9(INTEGRATIONS_DIR, "node_modules", ...npmPackage.split("/"));
-    if (existsSync9(pkgDir)) {
+    const pkgDir = join10(INTEGRATIONS_DIR, "node_modules", ...npmPackage.split("/"));
+    if (existsSync10(pkgDir)) {
       console.error(`[IntegrationManager] Removing unusable install of ${npmPackage}`);
       try {
         rmSync(pkgDir, { recursive: true, force: true });
@@ -3887,6 +3930,15 @@ var IntegrationManager = class {
         env[envVar] = creds[key];
       }
     }
+    const manifest = getManifest(config.id);
+    for (const [envVar, credKey] of Object.entries(manifest?.credentials?.envMapping ?? {})) {
+      if (envVar in env) continue;
+      if (envVar in config.envKeys || envVar in (config.optionalEnvKeys ?? {})) continue;
+      const creds = this.serviceCredentials.get(config.id);
+      if (creds && credKey in creds) {
+        env[envVar] = creds[credKey];
+      }
+    }
     return env;
   }
   /**
@@ -3974,28 +4026,28 @@ var IntegrationManager = class {
 };
 
 // src/lib/profile-loader.ts
-import { readFileSync as readFileSync10, existsSync as existsSync10 } from "fs";
-import { join as join10, resolve } from "path";
+import { readFileSync as readFileSync11, existsSync as existsSync11 } from "fs";
+import { join as join11, resolve as resolve2 } from "path";
 import { registerProfile } from "@hap/core";
 function loadProfiles(profilesDir) {
-  const dir = resolve(profilesDir ?? process.env.SUVEREN_PROFILES_DIR ?? join10(import.meta.dirname ?? __dirname, "..", "..", "..", "..", "..", "hap-profiles"));
-  const indexPath = join10(dir, "index.json");
-  if (!existsSync10(indexPath)) {
+  const dir = resolve2(profilesDir ?? process.env.SUVEREN_PROFILES_DIR ?? join11(import.meta.dirname ?? __dirname, "..", "..", "..", "..", "..", "hap-profiles"));
+  const indexPath = join11(dir, "index.json");
+  if (!existsSync11(indexPath)) {
     warnNoProfiles(`No index.json at ${indexPath}`);
     return 0;
   }
   let index;
   try {
-    index = JSON.parse(readFileSync10(indexPath, "utf-8"));
+    index = JSON.parse(readFileSync11(indexPath, "utf-8"));
   } catch (err) {
     console.error(`[ProfileLoader] Failed to parse ${indexPath}:`, err);
     return 0;
   }
   let loaded = 0;
   for (const [profileId, relativePath] of Object.entries(index.profiles)) {
-    const profilePath = join10(dir, relativePath);
+    const profilePath = join11(dir, relativePath);
     try {
-      const profile = JSON.parse(readFileSync10(profilePath, "utf-8"));
+      const profile = JSON.parse(readFileSync11(profilePath, "utf-8"));
       registerProfile(profileId, profile);
       const shortName = profileId.split("/").pop()?.replace(/@.*$/, "");
       if (shortName && shortName !== profileId) {
@@ -4027,47 +4079,6 @@ function warnNoProfiles(reason) {
   );
 }
 
-// src/lib/manifest-loader.ts
-import { readFileSync as readFileSync11, existsSync as existsSync11 } from "fs";
-import { join as join11, resolve as resolve2 } from "path";
-var manifests = /* @__PURE__ */ new Map();
-function loadManifests(integrationsDir) {
-  const dir = resolve2(
-    integrationsDir ?? process.env.SUVEREN_MANIFESTS_DIR ?? join11(import.meta.dirname ?? __dirname, "..", "..", "..", "..", "content", "integrations")
-  );
-  const indexPath = join11(dir, "index.json");
-  if (!existsSync11(indexPath)) {
-    console.error(`[ManifestLoader] No index.json found at ${indexPath}, skipping manifest loading`);
-    return 0;
-  }
-  let index;
-  try {
-    index = JSON.parse(readFileSync11(indexPath, "utf-8"));
-  } catch (err) {
-    console.error(`[ManifestLoader] Failed to parse ${indexPath}:`, err);
-    return 0;
-  }
-  let loaded = 0;
-  for (const [id, relativePath] of Object.entries(index.integrations)) {
-    const manifestPath = join11(dir, relativePath);
-    try {
-      const manifest = JSON.parse(readFileSync11(manifestPath, "utf-8"));
-      manifests.set(id, manifest);
-      loaded++;
-    } catch (err) {
-      console.error(`[ManifestLoader] Failed to load manifest ${id} from ${manifestPath}:`, err);
-    }
-  }
-  console.error(`[ManifestLoader] Loaded ${loaded} integration manifest(s) from ${dir}`);
-  return loaded;
-}
-function getManifest(id) {
-  return manifests.get(id);
-}
-function getAllManifests() {
-  return Array.from(manifests.values());
-}
-
 // bin/http.ts
 import { decodeAttestationBlob as decodeAttestationBlob3 } from "@hap/core";