@suveren/gateway 0.8.7 → 0.9.0

package/node_modules/hono/package.json

@@ -1,6 +1,6 @@
 {
   "name": "hono",
-  "version": "4.13.9",
+  "version": "4.13.12",
   "description": "Web framework built on Web Standards",
   "main": "dist/cjs/index.js",
   "type": "module",
@@ -11,29 +11,31 @@
     "!dist/**/*.tsbuildinfo"
   ],
   "scripts": {
-    "test": "tsc -p tsconfig.spec.json && vitest --run",
-    "test:watch": "vitest --watch",
+    "test": "tsc -p tsconfig.spec.json && vp test --run",
+    "test:watch": "vp test --watch",
     "test:deno": "deno test --allow-read --allow-env --allow-write --allow-net -c runtime-tests/deno/deno.json runtime-tests/deno && deno test --no-lock -c runtime-tests/deno-jsx/deno.precompile.json runtime-tests/deno-jsx && deno test --no-lock -c runtime-tests/deno-jsx/deno.react-jsx.json runtime-tests/deno-jsx",
-    "test:bun": "bun test --jsx-import-source ../../src/jsx runtime-tests/bun/*",
-    "test:fastly": "vitest --run --project fastly",
-    "test:node": "vitest --run --project node",
-    "test:workerd": "vitest --run --project workerd",
-    "test:lambda": "vitest --run --project lambda",
-    "test:lambda-edge": "vitest --run --project lambda-edge",
-    "test:all": "bun run test && bun test:deno && bun test:bun",
-    "lint": "eslint src runtime-tests build perf-measures benchmarks",
-    "lint:fix": "eslint src runtime-tests build perf-measures benchmarks --fix",
-    "format": "prettier --check --cache \"src/**/*.{js,ts,tsx}\" \"runtime-tests/**/*.{js,ts,tsx}\" \"build/**/*.{js,ts,tsx}\" \"perf-measures/**/*.{js,ts,tsx}\" \"benchmarks/**/*.{js,ts,tsx}\"",
-    "format:fix": "prettier --write --cache --cache-strategy metadata \"src/**/*.{js,ts,tsx}\" \"runtime-tests/**/*.{js,ts,tsx}\" \"build/**/*.{js,ts,tsx}\" \"perf-measures/**/*.{js,ts,tsx}\" \"benchmarks/**/*.{js,ts,tsx}\"",
+    "test:bun": "bun test --jsx-import-source ../../src/jsx runtime-tests/bun",
+    "test:fastly": "vp test --run --project fastly",
+    "test:node": "vp test --run --project node",
+    "test:workerd": "vp test --run --project workerd",
+    "test:all": "pnpm run test && pnpm run test:deno && pnpm run test:bun",
+    "check": "vp check",
+    "check:fix": "vp check --fix",
+    "lint": "vp lint src runtime-tests build perf-measures benchmarks adapters",
+    "lint:fix": "vp lint --fix src runtime-tests build perf-measures benchmarks adapters",
+    "format": "vp fmt --check \"src/**/*.{js,ts,tsx}\" \"runtime-tests/**/*.{js,ts,tsx}\" \"build/**/*.{js,ts,tsx}\" \"perf-measures/**/*.{js,ts,tsx}\" \"benchmarks/**/*.{js,ts,tsx}\" \"adapters/**/*.{js,ts,tsx}\"",
+    "format:fix": "vp fmt \"src/**/*.{js,ts,tsx}\" \"runtime-tests/**/*.{js,ts,tsx}\" \"build/**/*.{js,ts,tsx}\" \"perf-measures/**/*.{js,ts,tsx}\" \"benchmarks/**/*.{js,ts,tsx}\" \"adapters/**/*.{js,ts,tsx}\"",
     "editorconfig-checker": "editorconfig-checker",
     "copy:package.cjs.json": "cp ./package.cjs.json ./dist/cjs/package.json && cp ./package.cjs.json ./dist/types/package.json",
-    "build": "bun run --shell bun remove-dist && bun ./build/build.ts && bun run copy:package.cjs.json",
-    "postbuild": "publint",
-    "watch": "bun run --shell bun remove-dist && bun ./build/build.ts --watch && bun run copy:package.cjs.json",
-    "coverage": "vitest --run --coverage",
-    "prerelease": "bun test:deno && bun run build",
+    "build": "pnpm run remove-dist && vp pack && pnpm run copy:package.cjs.json && publint",
+    "watch": "pnpm run remove-dist && vp pack --watch && pnpm run copy:package.cjs.json",
+    "coverage": "vp test --run --coverage",
+    "prerelease": "pnpm run test:deno && pnpm run build",
     "release": "np --no-publish",
-    "remove-dist": "rm -rf dist"
+    "remove-dist": "rm -rf dist",
+    "build:adapters": "pnpm -r --filter \"./adapters/*\" run build",
+    "test:adapters": "pnpm -r --filter \"./adapters/*\" run test",
+    "release:adapter": "node ./build/release-adapter.ts"
   },
   "exports": {
     ".": {
@@ -674,32 +676,30 @@
     "nodejs"
   ],
   "devDependencies": {
-    "@hono/eslint-config": "^2.1.1",
     "@hono/node-server": "^2.0.12",
     "@types/jsdom": "^21.1.7",
     "@types/node": "^24.3.0",
     "@types/ws": "^8.18.1",
     "@typescript/native-preview": "7.0.0-dev.20260210.1",
-    "@vitest/coverage-v8": "^4.1.7",
+    "@vitest/coverage-v8": "5.0.1",
     "bun-types": "^1.2.20",
     "editorconfig-checker": "6.2.0",
     "esbuild": "^0.27.1",
-    "eslint": "^9.39.3",
     "jsdom": "22.1.0",
     "msw": "^2.6.0",
     "np": "11.2.1",
-    "oxc-parser": "^0.96.0",
     "pkg-pr-new": "^0.0.53",
-    "prettier": "3.7.4",
     "publint": "0.3.15",
+    "rolldown": "^1.2.10",
     "typescript": "^6.0.3",
     "vite-plugin-fastly-js-compute": "^0.4.2",
-    "vitest": "^4.1.9",
+    "vite-plus": "1.0.0",
+    "vitest": "5.0.1",
     "wrangler": "4.107.0",
     "ws": "^8.21.0",
     "zod": "^3.23.8"
   },
-  "packageManager": "bun@1.2.20",
+  "packageManager": "pnpm@12.6.0",
   "engines": {
     "node": ">=16.9.0"
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@suveren/gateway",
-  "version": "0.8.7",
+  "version": "0.9.0",
   "description": "Suveren gateway — local agent gateway built in compliance with the Human Agency Protocol (HAP). Runs the UI, control plane, and MCP server in one Node process.",
   "type": "module",
   "main": "server.js",
@@ -24,7 +24,7 @@
     "node": ">=20"
   },
   "dependencies": {
-    "@hap/core": "npm:@humanagencyp/hap-core@^0.10.0",
+    "@hap/core": "npm:@humanagencyp/hap-core@^0.10.1",
     "@hpke/core": "^1.9.0",
     "express": "^4.18.0",
     "http-proxy-middleware": "^3.0.0",

package/profiles/README.md

@@ -183,6 +183,26 @@ Governs accessing and modifying personal structured data: queries, schema change
 
 ---
 
+### sales — Sales
+
+Governs quote-to-order in an ERP: draft quotes, send quotes to customers (a binding offer), convert quotes to orders (reserves stock, commits a delivery date). No invoicing, delivery, payments or master data. Reference connector: `@humanagencyp/erp-mcp`, which re-derives the declared value and discount from the document and refuses a mismatch.
+
+| Bound | Type | Purpose |
+|-------|------|---------|
+| `read_access` | enum | Look up items, stock, prices, customers, quotes, orders |
+| `value_max` | per-transaction | Maximum net value of one quote or order |
+| `discount_max` | per-transaction | Maximum discount against list price (percent) |
+| `order_value_daily_max` | cumulative | Daily order value cap (orders only) |
+| `quote_daily_max` | cumulative | Draft quotes per day |
+| `send_daily_max` | cumulative | Quotes sent per day |
+| `order_daily_max` | cumulative | Orders per day |
+
+| Context | Type | Purpose |
+|---------|------|---------|
+| `currency` | enum | Permitted document currency |
+
+---
+
 ## How Profiles Work
 
 A human creates an authorization by selecting a profile and execution path, setting the bounds, and answering the gate questions. Domain owners cryptographically attest to the bounds. The Gatekeeper then enforces those bounds on every tool call:

package/profiles/index.json

@@ -22,6 +22,7 @@
     "github.com/humanagencyprotocol/hap-profiles/customers@0.7": "customers/0.7.profile.json",
     "github.com/humanagencyprotocol/hap-profiles/deploy@0.9": "deploy/0.9.profile.json",
     "github.com/humanagencyprotocol/hap-profiles/deploy@0.10": "deploy/0.10.profile.json",
-    "github.com/humanagencyprotocol/hap-profiles/charge@0.5": "charge/0.5.profile.json"
+    "github.com/humanagencyprotocol/hap-profiles/charge@0.5": "charge/0.5.profile.json",
+    "github.com/humanagencyprotocol/hap-profiles/sales@0.1": "sales/0.1.profile.json"
   }
 }

package/profiles/sales/0.1.profile.json

@@ -0,0 +1,252 @@
+{
+  "id": "github.com/humanagencyprotocol/hap-profiles/sales@0.1",
+  "name": "Sales",
+  "version": "0.1",
+  "description": "Sales authority — governs quote-to-order in an ERP: draft quotes, send quotes to customers, convert quotes to orders. No invoicing, delivery, payments or master data.",
+  "boundsSchema": {
+    "actionTypes": [
+      "quote",
+      "send",
+      "order"
+    ],
+    "keyOrder": [
+      "profile",
+      "read_access",
+      "value_max",
+      "discount_max",
+      "order_value_daily_max",
+      "quote_daily_max",
+      "send_daily_max",
+      "order_daily_max"
+    ],
+    "fields": {
+      "profile": {
+        "type": "string",
+        "required": true
+      },
+      "read_access": {
+        "type": "string",
+        "required": true,
+        "displayName": "Read access",
+        "description": "Allow the agent to look up items, stock, list prices, customers (incl. credit limit and open balance), quotes and orders.",
+        "boundType": {
+          "kind": "enum",
+          "values": [
+            "unlimited",
+            "none"
+          ]
+        },
+        "toolsDescription": "list_items, get_item, find_customers, get_customer, list_quotes, get_quote, list_orders, get_order",
+        "default": "unlimited"
+      },
+      "value_max": {
+        "type": "number",
+        "required": true,
+        "displayName": "Max value per quote or order",
+        "description": "Maximum net document total of a single quote or order, in currency units. The connector recalculates the total from the lines and refuses a call whose declared value does not match.",
+        "unit": "currency:EUR",
+        "boundType": {
+          "kind": "per_transaction",
+          "of": "value"
+        }
+      },
+      "discount_max": {
+        "type": "number",
+        "required": true,
+        "displayName": "Max discount",
+        "description": "Maximum document discount against list price, in percent. 0 means list price only. The connector recalculates the discount from list prices and refuses a call whose declared discount does not match.",
+        "unit": "percent",
+        "boundType": {
+          "kind": "per_transaction",
+          "of": "discount_pct"
+        }
+      },
+      "order_value_daily_max": {
+        "type": "number",
+        "required": true,
+        "displayName": "Daily order value",
+        "description": "Maximum cumulative net value of orders created per day, in currency units.",
+        "unit": "currency:EUR",
+        "boundType": {
+          "kind": "cumulative_sum",
+          "of": "value",
+          "window": "daily"
+        },
+        "appliesTo": [
+          "order"
+        ]
+      },
+      "quote_daily_max": {
+        "type": "number",
+        "required": true,
+        "displayName": "Quotes per day",
+        "description": "Maximum draft quotes created or edited per day",
+        "unit": "count",
+        "boundType": {
+          "kind": "cumulative_count",
+          "window": "daily"
+        },
+        "appliesTo": [
+          "quote"
+        ]
+      },
+      "send_daily_max": {
+        "type": "number",
+        "required": true,
+        "displayName": "Quotes sent per day",
+        "description": "Maximum quotes sent to customers per day. Sending a quote is a binding offer.",
+        "unit": "count",
+        "boundType": {
+          "kind": "cumulative_count",
+          "window": "daily"
+        },
+        "appliesTo": [
+          "send"
+        ]
+      },
+      "order_daily_max": {
+        "type": "number",
+        "required": true,
+        "displayName": "Orders per day",
+        "description": "Maximum quotes converted to orders per day. An order reserves stock and commits a delivery date.",
+        "unit": "count",
+        "boundType": {
+          "kind": "cumulative_count",
+          "window": "daily"
+        },
+        "appliesTo": [
+          "order"
+        ]
+      }
+    }
+  },
+  "contextSchema": {
+    "keyOrder": [
+      "currency"
+    ],
+    "fields": {
+      "currency": {
+        "type": "string",
+        "required": true,
+        "displayName": "Currency",
+        "description": "Permitted document currency",
+        "constraint": {
+          "type": "string",
+          "enforceable": [
+            "enum"
+          ]
+        },
+        "enum": [
+          "EUR",
+          "CHF",
+          "USD",
+          "GBP"
+        ]
+      }
+    }
+  },
+  "executionContextSchema": {
+    "fields": {
+      "value": {
+        "source": "declared",
+        "description": "Net document total in currency units (verified by the connector against the lines)",
+        "required": true,
+        "constraint": {
+          "type": "number",
+          "enforceable": [
+            "max"
+          ]
+        }
+      },
+      "discount_pct": {
+        "source": "declared",
+        "description": "Document discount against list price in percent (verified by the connector against list prices)",
+        "required": true,
+        "constraint": {
+          "type": "number",
+          "enforceable": [
+            "max"
+          ]
+        }
+      },
+      "currency": {
+        "source": "declared",
+        "description": "Document currency",
+        "required": true,
+        "constraint": {
+          "type": "string",
+          "enforceable": [
+            "enum"
+          ]
+        }
+      },
+      "order_value_daily": {
+        "source": "cumulative",
+        "description": "Running daily order value (resolved from execution log)",
+        "required": true,
+        "constraint": {
+          "type": "number",
+          "enforceable": [
+            "max"
+          ]
+        },
+        "cumulativeField": "value",
+        "window": "daily"
+      },
+      "quote_count_daily": {
+        "source": "cumulative",
+        "description": "Running daily quote count",
+        "required": true,
+        "constraint": {
+          "type": "number",
+          "enforceable": [
+            "max"
+          ]
+        },
+        "cumulativeField": "_count",
+        "window": "daily"
+      },
+      "send_count_daily": {
+        "source": "cumulative",
+        "description": "Running daily send count",
+        "required": true,
+        "constraint": {
+          "type": "number",
+          "enforceable": [
+            "max"
+          ]
+        },
+        "cumulativeField": "_count",
+        "window": "daily"
+      },
+      "order_count_daily": {
+        "source": "cumulative",
+        "description": "Running daily order count",
+        "required": true,
+        "constraint": {
+          "type": "number",
+          "enforceable": [
+            "max"
+          ]
+        },
+        "cumulativeField": "_count",
+        "window": "daily"
+      }
+    }
+  },
+  "requiredGates": [
+    "bounds",
+    "intent",
+    "commitment",
+    "decision_owner"
+  ],
+  "ttl": {
+    "default": 86400,
+    "max": 2592000
+  },
+  "retention_minimum": 7776000,
+  "content_binding": {
+    "version": "1",
+    "kind": "jcs"
+  }
+}

package/server.js

@@ -10,8 +10,107 @@
 import { spawn } from 'node:child_process';
 import { dirname, join } from 'node:path';
 import { fileURLToPath } from 'node:url';
+import { homedir, tmpdir, constants as osConstants } from 'node:os';
+import { existsSync, mkdtempSync, readFileSync, writeFileSync, rmSync } from 'node:fs';
+import { resolveCaFile } from './lib/config.mjs';
 
 const __dirname = dirname(fileURLToPath(import.meta.url));
+const THIS_FILE = fileURLToPath(import.meta.url);
+
+/** Exit this process the way a shell reports a signal-terminated child: 128
+ *  plus the signal number, so a caller (or a test) can tell "exited cleanly
+ *  with code N" from "was killed by signal N" instead of both collapsing to
+ *  a bare exit(1). */
+function exitLikeChild(code, signal) {
+  if (signal) {
+    const num = osConstants.signals?.[signal];
+    process.exit(128 + (typeof num === 'number' ? num : 0));
+  }
+  process.exit(code ?? 0);
+}
+
+// ─── Internal CA bundle (--ca-file / `config set ca-file`) ─────────────────
+//
+// `NODE_EXTRA_CA_CERTS` is read by Node ONLY at process start, before any of
+// our own code runs — setting `process.env.NODE_EXTRA_CA_CERTS` here would be
+// too late to affect THIS process's own TLS. It still needs to reach the
+// control-plane and MCP-server children below (those are fresh processes, so
+// setting it in the `env` object we spawn them with DOES work), but this
+// process itself also makes its own outbound calls in a few paths.
+//
+// This is the ONE place that has to handle it for every way the gateway can
+// start: `suveren-gateway start` (the CLI just spawns this same file),
+// autostart (launchd/systemd/Task Scheduler spawn this file DIRECTLY,
+// bypassing the CLI's own flag handling), and Docker (`CMD node server.js`).
+// Re-exec once, here, before anything network-related happens, rather than
+// have three separate top-level entry points each remember to do it.
+//
+// Guarded by SUVEREN_CA_REEXEC_DONE, not by comparing NODE_EXTRA_CA_CERTS to
+// the saved path: when the caller's shell already has its OWN
+// NODE_EXTRA_CA_CERTS set (a corporate proxy CA, say), overwriting it would
+// silently break trust for everything else this process does (npm registry
+// fetches for on-demand integrations, other HTTPS calls) — so the two are
+// MERGED into one combined PEM file instead. Comparing against that combined
+// path would never match the saved path alone, so the guard has to be a
+// dedicated marker, not a value comparison (which would also re-exec forever).
+const DATA_DIR = process.env.SUVEREN_DATA_DIR ?? join(homedir(), '.suveren');
+const savedCaFile = resolveCaFile(DATA_DIR);
+if (savedCaFile && !process.env.SUVEREN_CA_REEXEC_DONE) {
+  let effectiveCaFile = savedCaFile;
+  /** Set only when a combined-CA temp dir was actually created, so it can be
+   *  cleaned up on exit rather than left behind on every restart. */
+  let combinedDirToClean = null;
+  const existingCaFile = process.env.NODE_EXTRA_CA_CERTS;
+  if (existingCaFile && existingCaFile !== savedCaFile && existsSync(existingCaFile)) {
+    try {
+      const combined =
+        readFileSync(existingCaFile, 'utf8').trimEnd() + '\n' + readFileSync(savedCaFile, 'utf8').trimEnd() + '\n';
+      const combinedDir = mkdtempSync(join(tmpdir(), 'suveren-ca-'));
+      const combinedPath = join(combinedDir, 'combined-ca-certs.pem');
+      writeFileSync(combinedPath, combined, 'utf8');
+      effectiveCaFile = combinedPath;
+      combinedDirToClean = combinedDir;
+      console.error(
+        `[suveren-gateway] Merged --ca-file with the existing NODE_EXTRA_CA_CERTS (${existingCaFile}) ` +
+          `so neither trust source is lost.`,
+      );
+    } catch (err) {
+      console.error(
+        `[suveren-gateway] Could not merge NODE_EXTRA_CA_CERTS with the saved --ca-file (${err.message}); ` +
+          `using the saved --ca-file alone, which may break other HTTPS calls that relied on the existing one.`,
+      );
+    }
+  }
+
+  const child = spawn(
+    process.execPath,
+    [THIS_FILE, ...process.argv.slice(2)],
+    { env: { ...process.env, NODE_EXTRA_CA_CERTS: effectiveCaFile, SUVEREN_CA_REEXEC_DONE: '1' }, stdio: 'inherit' },
+  );
+  child.on('exit', (code, signal) => {
+    if (combinedDirToClean) {
+      try { rmSync(combinedDirToClean, { recursive: true, force: true }); } catch { /* best-effort */ }
+    }
+    exitLikeChild(code, signal);
+  });
+  for (const sig of ['SIGINT', 'SIGTERM']) {
+    process.on(sig, () => child.kill(sig));
+  }
+  // Stop here — the re-executed child (which now has NODE_EXTRA_CA_CERTS set
+  // from its own start) is the one that spawns control-plane + mcp-server;
+  // this parent's only job from here is to relay its exit code and signals,
+  // both wired above. Top-level await pauses the rest of THIS module's
+  // evaluation (the spawns below) until that promise settles, which only
+  // happens via the exit handler calling process.exit().
+  await new Promise(() => {});
+}
+
+// Reached only in the re-executed child (or when no --ca-file is set at
+// all). SUVEREN_CA_REEXEC_DONE is bookkeeping for the block above — internal
+// to this file, and meaningless (worse, confusing) to anything downstream —
+// so it must not ride along in the env every child process below inherits
+// via `...process.env`, all the way down to individual integrations.
+delete process.env.SUVEREN_CA_REEXEC_DONE;
 
 const CP_PORT = process.env.SUVEREN_CP_PORT ?? '3400';
 const MCP_PORT = process.env.SUVEREN_MCP_PORT ?? '3430';