@suveren/gateway 0.18.1 → 0.18.2

package/dist/mcp-server/{chunk-JUFH4SKS.mjs → chunk-QOKPECVY.mjs}

@@ -42,7 +42,7 @@ function isExportBundle(v) {
 
 // src/lib/report/verify-export.ts
 import { Parser as Parser2 } from "htmlparser2";
-import { verifyReceiptSignature as verifyReceiptSignature2, verifyAttestationSignature as verifyAttestationSignature2, decodeAttestationBlob as decodeAttestationBlob2 } from "@hap/core";
+import { verifyReceiptSignature as verifyReceiptSignature2, verifyAttestationSignature as verifyAttestationSignature3, decodeAttestationBlob as decodeAttestationBlob3 } from "@hap/core";
 
 // src/lib/report/parse-elements.ts
 import { Parser } from "htmlparser2";
@@ -66,7 +66,7 @@ function parseElements(html) {
 }
 
 // src/lib/report/ticket-resolvers.ts
-import { verifyReceiptSignature, verifyAttestationSignature, decodeAttestationBlob } from "@hap/core";
+import { verifyReceiptSignature, verifyAttestationSignature as verifyAttestationSignature2, decodeAttestationBlob as decodeAttestationBlob2 } from "@hap/core";
 
 // src/lib/report/format.ts
 import { getProfile } from "@hap/core";
@@ -162,9 +162,58 @@ var ACTION_LABELS = {
   delete_event: "Event deleted",
   publish_post: "Post published"
 };
+var IRREGULAR_PAST = {
+  write: "written",
+  rewrite: "rewritten",
+  send: "sent",
+  resend: "resent",
+  run: "run",
+  rerun: "rerun",
+  set: "set",
+  reset: "reset",
+  put: "put",
+  make: "made",
+  build: "built",
+  rebuild: "rebuilt",
+  begin: "begun",
+  take: "taken",
+  give: "given",
+  do: "done",
+  redo: "redone",
+  read: "read",
+  find: "found",
+  get: "retrieved",
+  buy: "bought",
+  pay: "paid",
+  sell: "sold",
+  hold: "held",
+  keep: "kept",
+  leave: "left",
+  draw: "drawn",
+  withdraw: "withdrawn",
+  forbid: "forbidden",
+  choose: "chosen",
+  speak: "spoken",
+  meet: "met",
+  lead: "led",
+  split: "split",
+  cut: "cut",
+  upload: "uploaded",
+  forward: "forwarded",
+  bring: "brought",
+  tell: "told",
+  show: "shown",
+  drive: "driven",
+  break: "broken"
+};
+var DOUBLE_FINAL = /* @__PURE__ */ new Set(["stop", "plan", "ship", "tag", "log", "submit", "drop", "flag", "pin", "unpin", "map", "wrap", "chat", "admit", "commit", "permit", "refer", "transfer"]);
 function pastTense(verb) {
   if (!verb) return verb;
+  const lower = verb.toLowerCase();
+  if (IRREGULAR_PAST[lower]) return IRREGULAR_PAST[lower];
+  if (DOUBLE_FINAL.has(lower)) return `${verb}${verb.slice(-1)}ed`;
   if (/e$/.test(verb)) return `${verb}d`;
+  if (/[^aeiou]y$/i.test(verb)) return `${verb.slice(0, -1)}ied`;
   return `${verb}ed`;
 }
 function capitalize(s) {
@@ -201,6 +250,59 @@ function formatMetricValue(kind, value) {
   return String(value);
 }
 
+// src/lib/report/identity.ts
+import { decodeAttestationBlob, verifyAttestationSignature } from "@hap/core";
+var cache = /* @__PURE__ */ new WeakMap();
+function cacheKey(archive) {
+  const auths = archive.getAuthorizations();
+  return `${auths.length}:${auths.map((a) => `${a.authorizationId}/${a.attestations.length}`).join(",")}:${archive.getReceipts().length}`;
+}
+async function build(archive) {
+  const names = /* @__PURE__ */ new Map();
+  const domainDids = /* @__PURE__ */ new Map();
+  const receipts = archive.getReceipts();
+  for (const auth of archive.getAuthorizations()) {
+    const key = receipts.find((r) => r.authorizationId === auth.authorizationId && r.asPublicKey)?.asPublicKey;
+    if (!key) continue;
+    for (const att of auth.attestations) {
+      try {
+        const attestation = decodeAttestationBlob(att.blob);
+        await verifyAttestationSignature(attestation, key);
+        for (const s of attestation.payload.subjects ?? []) {
+          if (s.assurance === "high" && s.disclose?.name && !names.has(s.did)) names.set(s.did, s.disclose.name);
+        }
+        for (const rd of attestation.payload.resolved_domains ?? []) {
+          if (rd?.domain && rd?.did && !domainDids.has(rd.domain)) domainDids.set(rd.domain, rd.did);
+        }
+      } catch {
+      }
+    }
+  }
+  return { names, domainDids };
+}
+function getIdentityDirectory(archive) {
+  const key = cacheKey(archive);
+  const hit = cache.get(archive);
+  if (hit && hit.key === key) return hit.dir;
+  const dir = build(archive);
+  cache.set(archive, { key, dir });
+  return dir;
+}
+function ownerLabel(dir, did) {
+  return dir.names.get(did) ?? formatOwnerLabel(did);
+}
+function accountTail(id) {
+  const head = id.split("-")[0] || id;
+  return head.length > 6 ? head.slice(-6) : head;
+}
+function approverLabel(dir, domainKey, userId) {
+  const did = dir.domainDids.get(domainKey) ?? dir.domainDids.get(userId);
+  const name = did ? dir.names.get(did) : void 0;
+  if (name) return name;
+  if (!userId) return "a person (unknown account)";
+  return `a person (account \u2026${accountTail(userId)})`;
+}
+
 // src/lib/report/ticket-resolvers.ts
 function findReceiptEntry(archive, ticketId2) {
   return archive.getReceipts().find((r) => r.receipt.id === ticketId2);
@@ -262,17 +364,20 @@ async function resolveApprovalElement(archive, ticketRef) {
     };
   }
   const committedBy = proposal.committedBy ?? {};
-  const approvers = Object.values(committedBy);
+  const approverEntries = Object.entries(committedBy);
+  const approvers = approverEntries.map(([, a]) => a);
   const createdAt = typeof proposal.createdAt === "number" ? proposal.createdAt : void 0;
   const decidedAt = approvers.length > 0 ? Math.max(...approvers.map((a) => a.at)) : void 0;
   const waitSeconds = createdAt !== void 0 && decidedAt !== void 0 ? decidedAt - createdAt : void 0;
   const who = approvers.map((a) => a.userId);
+  const dir = await getIdentityDirectory(archive);
+  const whoLabels = approverEntries.map(([domain, a]) => approverLabel(dir, domain, String(a.userId ?? "")));
   return {
     status: "verified",
     data: {
       ticketId: ticketRef,
       who,
-      whoLabel: who.length > 0 ? who.join(", ") : "unknown",
+      whoLabel: whoLabels.length > 0 ? whoLabels.join(", ") : "unknown",
       createdAt,
       createdAtLabel: createdAt !== void 0 ? formatDateTime(createdAt) : "unknown",
       decidedAt,
@@ -307,15 +412,16 @@ async function resolveMandateElement(archive, ticketRef) {
   const firstBlob = auth.attestations[0]?.blob;
   if (firstBlob && check.entry.asPublicKey) {
     try {
-      const attestation = decodeAttestationBlob(firstBlob);
-      await verifyAttestationSignature(attestation, check.entry.asPublicKey);
+      const attestation = decodeAttestationBlob2(firstBlob);
+      await verifyAttestationSignature2(attestation, check.entry.asPublicKey);
       mode = attestation.payload.commitment_mode;
       const dids = attestation.payload.resolved_owners ?? [];
       const subjects = attestation.payload.subjects ?? [];
       ownersRaw = dids;
+      const dir = await getIdentityDirectory(archive);
       owners = dids.map((did) => {
         const subject = subjects.find((s) => s.did === did);
-        return subject?.assurance === "high" && subject.disclose?.name ? subject.disclose.name : formatOwnerLabel(did);
+        return subject?.assurance === "high" && subject.disclose?.name ? subject.disclose.name : ownerLabel(dir, did);
       });
     } catch {
     }
@@ -377,6 +483,7 @@ function parseCaseAttrs(attrs) {
     stepIds: parseStepRefs(attrs.steps)
   };
 }
+var CASE_TIME_UNKNOWN_REASON = "Not verifiable: the time the test data was loaded is unknown, and the email's own date may be set by the test package.";
 async function resolveCaseElement(archive, emailExport, attrs) {
   const start = parseRef(attrs.start);
   const startMessage = emailExport.inbox.find((m) => m.id === start.id);
@@ -384,10 +491,13 @@ async function resolveCaseElement(archive, emailExport, attrs) {
     return { status: "unverifiable", reason: `start "${attrs.start ?? ""}" is not a loaded case email with a case_id.` };
   }
   const startCaseId = startMessage.case_id;
-  const startTime = parseTimestampSeconds(startMessage.received_at);
-  if (startTime === void 0) {
+  const emailTime = parseTimestampSeconds(startMessage.received_at);
+  if (emailTime === void 0) {
     return { status: "unverifiable", reason: `start message "${start.id}" has an unparseable received_at.`, startCaseId };
   }
+  const loadedAt = parseTimestampSeconds(emailExport.simulation_load?.loaded_at);
+  const startTime = loadedAt !== void 0 ? Math.max(emailTime, loadedAt) : emailTime;
+  const basis = loadedAt === void 0 ? "load-unknown" : emailTime >= loadedAt ? "email" : "loaded";
   const goal = parseRef(attrs.goal);
   const goalCheck = await checkTicket(archive, goal.id);
   if (!goalCheck.ok) {
@@ -413,7 +523,7 @@ async function resolveCaseElement(archive, emailExport, attrs) {
     if (stepTime === void 0 || stepTime < startTime || stepTime > goalTime) {
       return { status: "unverifiable", reason: `step ticket "${stepId}" is outside the case window [${startTime}, ${goalTime}].`, startCaseId };
     }
-    steps.push({ ticketId: stepId, time: stepTime, action: stepReceipt.action });
+    steps.push({ ticketId: stepId, time: stepTime, action: stepReceipt.action, actionLabel: formatActionLabel(stepReceipt.action) });
   }
   let warningReason;
   const sentForGoal = emailExport.sent.find((m) => m.receipt_id === goal.id);
@@ -444,12 +554,13 @@ async function resolveCaseElement(archive, emailExport, attrs) {
     startCaseId,
     data: {
       caseId: startCaseId,
-      start: { id: start.id, time: startTime, sender: startMessage.from_email },
-      goal: { ticketId: goal.id, time: goalTime, action: goalReceipt.action },
+      start: { id: start.id, time: startTime, sender: startMessage.from_email, emailTime, basis },
+      goal: { ticketId: goal.id, time: goalTime, action: goalReceipt.action, actionLabel: formatActionLabel(goalReceipt.action) },
       steps,
       approvals,
       timeline,
-      totalDurationSeconds: goalTime - startTime
+      totalDurationSeconds: basis === "load-unknown" ? null : goalTime - startTime,
+      ...basis === "load-unknown" ? { timeUnverifiableReason: CASE_TIME_UNKNOWN_REASON } : {}
     }
   };
 }
@@ -523,8 +634,8 @@ async function checkAttestations(auth, publicKeyHex) {
   }
   for (const att of auth.attestations) {
     try {
-      const attestation = decodeAttestationBlob2(att.blob);
-      await verifyAttestationSignature2(attestation, publicKeyHex);
+      const attestation = decodeAttestationBlob3(att.blob);
+      await verifyAttestationSignature3(attestation, publicKeyHex);
     } catch (err) {
       return { valid: false, error: err instanceof Error ? err.message : String(err) };
     }
@@ -633,6 +744,7 @@ export {
   resolveMandateElement,
   parseTimestampSeconds,
   parseCaseAttrs,
+  CASE_TIME_UNKNOWN_REASON,
   resolveCaseElement,
   isExportBundle,
   verifyExportBundle

package/dist/mcp-server/http.mjs

@@ -1,5 +1,6 @@
 #!/usr/bin/env node
 import {
+  CASE_TIME_UNKNOWN_REASON,
   METRIC_LABELS,
   fingerprintOf,
   formatActionLabel,
@@ -16,7 +17,7 @@ import {
   resolveCaseElement,
   resolveMandateElement,
   resolveTicketElement
-} from "./chunk-JUFH4SKS.mjs";
+} from "./chunk-QOKPECVY.mjs";
 
 // bin/http.ts
 import { randomUUID as randomUUID2 } from "crypto";
@@ -2113,8 +2114,8 @@ What you cannot write yourself: facts that need proof. Place these elements inst
 
 Rules:
 1. Define every case you worked on with sv-case \u2014 also the ones that did not reach their goal (omit goal, or say why in your text). The gateway shows management how many of the loaded cases your report covers and names the missing ones \u2014 and lists every ticket from the test period that your report does not reference, so name every step.
-2. Use sv-metric for every headline number. Numbers you compute yourself are shown as "AI analysis \u2014 not verified".
-3. A case's goal must be what actually completed it \u2014 for an email reply, the reply to the start email. The gateway checks this link.
+2. Use sv-metric for every headline number. Everything you write yourself \u2014 text, tables, charts, numbers you compute \u2014 sits under the gateway's label "AI analysis \u2014 not verified"; only the drawn elements carry the gateway's green check. Do not imitate them: class names starting with "sv-" are removed from your HTML.
+3. A case's goal must be what actually completed it \u2014 for an email reply, the reply to the start email. The gateway checks this link. A case is timed from when its email reached the test (the test data may date its emails earlier \u2014 the gateway uses the later of the two), so steps from before that moment do not belong to it.
 4. A wrong or unknown reference is shown as "not verifiable". Do not guess IDs \u2014 read them first.
 5. Never claim more than the elements prove. Say plainly what went wrong or waited for a person.
 
@@ -2140,6 +2141,9 @@ function isAllowedUrl(value) {
   if (/^data:image\//i.test(v)) return true;
   return false;
 }
+function stripGatewayClasses(value) {
+  return value.split(/\s+/).filter((c) => c && !/^sv-/i.test(c)).join(" ");
+}
 function sanitizeReportHtml(html) {
   return sanitizeHtmlLib(html, {
     // Allow every tag/attribute by default — see module doc comment for why
@@ -2182,8 +2186,15 @@ function sanitizeReportHtml(html) {
       "*": (tagName, attribs) => {
         const kept = {};
         for (const [name, value] of Object.entries(attribs)) {
-          if (name.toLowerCase().startsWith("on")) continue;
+          const lower = name.toLowerCase();
+          if (lower.startsWith("on")) continue;
           if (isUrlAttribute(name) && !isAllowedUrl(value)) continue;
+          if (lower.startsWith("data-sv")) continue;
+          if (lower === "class") {
+            const classes = stripGatewayClasses(value);
+            if (classes) kept[name] = classes;
+            continue;
+          }
           kept[name] = value;
         }
         return { tagName, attribs: kept };
@@ -2257,6 +2268,7 @@ var UnknownMetricKindError = class extends Error {
     this.name = "UnknownMetricKindError";
   }
 };
+var START_TIME_METRICS = /* @__PURE__ */ new Set(["median-time", "average-time", "refusals"]);
 function median(values) {
   if (values.length === 0) return 0;
   const sorted = [...values].sort((a, b) => a - b);
@@ -2268,6 +2280,9 @@ function average(values) {
   return values.reduce((a, b) => a + b, 0) / values.length;
 }
 function computeMetric(kind, cases, refusalTimes = []) {
+  if (START_TIME_METRICS.has(kind) && cases.some((c) => c.totalDurationSeconds === null)) {
+    throw new Error("Case start times are not verifiable.");
+  }
   switch (kind) {
     case "completed":
       return cases.length;
@@ -2435,6 +2450,10 @@ async function verifyReport(html, sources) {
         });
         continue;
       }
+      if (START_TIME_METRICS.has(kind) && caseInputs.some((c) => c.totalDurationSeconds === null)) {
+        elements.push({ id: p.id, kind: p.kind, attrs: p.attrs, status: "unverifiable", reason: CASE_TIME_UNKNOWN_REASON });
+        continue;
+      }
       const refusalTimes = kind === "refusals" ? await collectRefusalTimes(getExport) : [];
       const value = computeMetric(kind, caseInputs, refusalTimes);
       const data = { kind, cases: casesAttr, value, caseCount: verifiedCount };
@@ -2493,7 +2512,8 @@ function summarize(el) {
       return `${String(d.kind ?? "record")} record checked`;
     case "sv-case": {
       const steps = d.steps?.length ?? 0;
-      return `Case ${String(d.caseId)}: ${steps} ${steps === 1 ? "step" : "steps"}, ${formatDuration(d.totalDurationSeconds)}`;
+      const time = typeof d.totalDurationSeconds === "number" ? formatDuration(d.totalDurationSeconds) : "time not verifiable";
+      return `Case ${String(d.caseId)}: ${steps} ${steps === 1 ? "step" : "steps"}, ${time}`;
     }
     case "sv-metric": {
       const kind = String(d.kind ?? "");
@@ -6294,10 +6314,6 @@ function findElementSpans(html) {
 function escapeHtml(value) {
   return String(value ?? "").replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#39;");
 }
-function detailLink(id, ticketId) {
-  const qs = ticketId ? `?element=${encodeURIComponent(id)}&ticket=${encodeURIComponent(ticketId)}` : `?element=${encodeURIComponent(id)}`;
-  return `/reports${qs}`;
-}
 function badge(status, okLabel) {
   if (status === "verified") return `<span class="sv-badge sv-badge-ok">\u2713 ${escapeHtml(okLabel)}</span>`;
   if (status === "warning") return `<span class="sv-badge sv-badge-warn">\u26A0 verified with a note</span>`;
@@ -6306,7 +6322,7 @@ function badge(status, okLabel) {
 function unverifiableCard(el) {
   return `<div class="sv-el sv-el-unverifiable" data-sv-id="${escapeHtml(el.id)}"><div class="sv-el-row"><b>Not verifiable</b>${badge("unverifiable", "")}</div><div class="sv-el-reason">${escapeHtml(el.reason ?? "This reference could not be checked.")}</div></div>`;
 }
-function renderTicket(el, interactive) {
+function renderTicket(el) {
   if (el.status === "unverifiable" || !el.data) return unverifiableCard(el);
   const d = el.data;
   const href = typeof d.checkUrl === "string" ? d.checkUrl : void 0;
@@ -6314,27 +6330,26 @@ function renderTicket(el, interactive) {
   const timeLabel = typeof d.timeLabel === "string" ? d.timeLabel : formatDateTime(d.time);
   const profileLabel = typeof d.profileLabel === "string" ? d.profileLabel : escapeHtml(d.profile ?? "");
   const links = [
-    href ? `<a href="${escapeHtml(href)}" target="_blank" rel="noopener noreferrer">Check on suveren.ai \u2197</a>` : "",
-    interactive ? `<a href="${escapeHtml(detailLink(el.id))}" target="_top">Details</a>` : ""
+    href ? `<a href="${escapeHtml(href)}" target="_blank" rel="noopener noreferrer">Check on suveren.ai \u2197</a>` : ""
   ].filter(Boolean);
   return `<div class="sv-el sv-el-${el.status}" data-sv-id="${escapeHtml(el.id)}"><div class="sv-el-row"><b>${escapeHtml(actionLabel)}</b>${badge(el.status, "signature valid")}</div><div class="sv-el-row"><span>${escapeHtml(profileLabel)} \xB7 ${escapeHtml(timeLabel)}</span></div>` + (links.length > 0 ? `<div class="sv-el-row"><span>${links.join(" \xB7 ")}</span></div>` : "") + `</div>`;
 }
-function renderApproval(el, interactive) {
+function renderApproval(el) {
   if (el.status === "unverifiable" || !el.data) return unverifiableCard(el);
   const d = el.data;
   const who = typeof d.whoLabel === "string" ? d.whoLabel : Array.isArray(d.who) ? d.who.join(", ") : "unknown";
   const asked = typeof d.createdAtLabel === "string" ? d.createdAtLabel : "unknown";
   const approved = typeof d.decidedAtLabel === "string" ? d.decidedAtLabel : "unknown";
   const waited = typeof d.waitLabel === "string" ? d.waitLabel : "unknown";
-  return `<div class="sv-el sv-el-${el.status}" data-sv-id="${escapeHtml(el.id)}"><div class="sv-el-row"><b>Approval</b>${badge(el.status, "from ticket archive")}</div><div class="sv-el-row"><span>asked ${escapeHtml(asked)} \xB7 approved ${escapeHtml(approved)} by ${escapeHtml(who)} (${escapeHtml(waited)})</span></div>` + (interactive ? `<div class="sv-el-row"><a href="${escapeHtml(detailLink(el.id, String(d.ticketId ?? "")))}" target="_top">Details</a></div>` : "") + `</div>`;
+  return `<div class="sv-el sv-el-${el.status}" data-sv-id="${escapeHtml(el.id)}"><div class="sv-el-row"><b>Approval</b>${badge(el.status, "from ticket archive")}</div><div class="sv-el-row"><span>asked ${escapeHtml(asked)} \xB7 approved ${escapeHtml(approved)} by ${escapeHtml(who)} (${escapeHtml(waited)})</span></div></div>`;
 }
-function renderMandate(el, interactive) {
+function renderMandate(el) {
   if (el.status === "unverifiable" || !el.data) return unverifiableCard(el);
   const d = el.data;
   const profileLabel = typeof d.profileLabel === "string" ? d.profileLabel : String(d.profile ?? "");
   const owners = Array.isArray(d.owners) && d.owners.length > 0 ? d.owners.join(", ") : "unknown owner";
   const limits = Array.isArray(d.limits) && d.limits.length > 0 ? d.limits.join(" \xB7 ") : "";
-  return `<div class="sv-el sv-el-${el.status}" data-sv-id="${escapeHtml(el.id)}"><div class="sv-el-row"><b>${escapeHtml(profileLabel)} \xB7 ${escapeHtml(owners)}</b>${badge(el.status, "matches ticket")}</div>` + (limits ? `<div class="sv-el-row">${escapeHtml(limits)}${d.mode ? ` \xB7 ${escapeHtml(d.mode)}` : ""}</div>` : "") + (d.intent ? `<div class="sv-el-intent">Intent: \u201C${escapeHtml(d.intent)}\u201D</div>` : "") + (interactive ? `<div class="sv-el-row"><a href="${escapeHtml(detailLink(el.id))}" target="_top">Details</a></div>` : "") + `</div>`;
+  return `<div class="sv-el sv-el-${el.status}" data-sv-id="${escapeHtml(el.id)}"><div class="sv-el-row"><b>${escapeHtml(profileLabel)} \xB7 ${escapeHtml(owners)}</b>${badge(el.status, "matches ticket")}</div>` + (limits ? `<div class="sv-el-row">${escapeHtml(limits)}${d.mode ? ` \xB7 ${escapeHtml(d.mode)}` : ""}</div>` : "") + (d.intent ? `<div class="sv-el-intent">Intent: \u201C${escapeHtml(d.intent)}\u201D</div>` : "") + `</div>`;
 }
 var RECORD_FIELD_ORDER = [
   "subject",
@@ -6369,12 +6384,11 @@ function renderRecord(el) {
   const rows = RECORD_FIELD_ORDER.filter((k) => d[k] !== void 0 && d[k] !== null && d[k] !== "").slice(0, 5).map((k) => renderRecordField(k, d)).join("");
   return `<div class="sv-el sv-el-${el.status}" data-sv-id="${escapeHtml(el.id)}"><div class="sv-el-row"><b>${escapeHtml(kind)} record</b>${badge(el.status, "in simulator database")}</div>` + rows + `</div>`;
 }
-function renderCaseTicketStep(caseElementId, node, isGoal, interactive) {
+function renderCaseTicketStep(node, isGoal) {
   const cls = isGoal ? "sv-step sv-step-goal" : "sv-step";
   const kind = isGoal ? "goal" : "ticket";
   const inner = `<div class="sv-step-k">${kind}</div><div class="sv-step-t">${escapeHtml(formatActionLabel(node.action))}</div>${formatDateTime(node.time)}`;
-  if (!interactive) return `<div class="${cls}">${inner}</div>`;
-  return `<a class="${cls}" href="${escapeHtml(detailLink(caseElementId, node.ticketId))}" target="_top">${inner}</a>`;
+  return `<div class="${cls}">${inner}</div>`;
 }
 function renderCaseApprovalStep(approval) {
   const who = approval.whoLabel ?? (Array.isArray(approval.who) ? approval.who.join(", ") : "unknown");
@@ -6383,7 +6397,17 @@ function renderCaseApprovalStep(approval) {
   const waited = approval.waitLabel ?? "unknown";
   return `<div class="sv-step sv-step-approval"><div class="sv-step-k">approval</div><div class="sv-step-t">Approval</div><div class="sv-step-sub">asked ${escapeHtml(asked)} \xB7 approved ${escapeHtml(decided)} by ${escapeHtml(who)} (${escapeHtml(waited)})</div></div>`;
 }
-function renderCase(el, interactive) {
+function renderCaseStartStep(start) {
+  let sub = "";
+  if (start.basis === "loaded" && typeof start.emailTime === "number") {
+    sub = `<div class="sv-step-sub">Email dated ${escapeHtml(formatDateTime(start.emailTime))} \xB7 timed from when the test data was loaded</div>`;
+  } else if (start.basis === "load-unknown") {
+    sub = `<div class="sv-step-sub">Email dated ${escapeHtml(formatDateTime(start.emailTime ?? start.time))} \xB7 start time not verifiable</div>`;
+  }
+  const time = start.basis === "load-unknown" ? "" : escapeHtml(formatDateTime(start.time));
+  return `<div class="sv-step sv-step-start"><div class="sv-step-k">start</div><div class="sv-step-t">Email in</div>${time}${sub}</div>`;
+}
+function renderCase(el) {
   if (el.status === "unverifiable" || !el.data) return unverifiableCard(el);
   const d = el.data;
   const steps = Array.isArray(d.steps) ? d.steps : [];
@@ -6395,7 +6419,7 @@ function renderCase(el, interactive) {
     }
   }
   const start = d.start;
-  const startStep = start ? { time: start.time, html: `<div class="sv-step"><div class="sv-step-k">start</div><div class="sv-step-t">Email in</div>${formatDateTime(start.time)}</div>` } : void 0;
+  const startStep = start ? { time: start.time, html: renderCaseStartStep(start) } : void 0;
   const ticketNodes = [
     ...steps.map((s) => ({ node: s, isGoal: false })),
     ...goal ? [{ node: goal, isGoal: true }] : []
@@ -6408,11 +6432,11 @@ function renderCase(el, interactive) {
       const approvalTime = Math.min(approval.decidedAt ?? approval.createdAt ?? node.time, node.time);
       items.push({ time: approvalTime, html: renderCaseApprovalStep(approval) });
     }
-    items.push({ time: node.time, html: renderCaseTicketStep(el.id, node, isGoal, interactive) });
+    items.push({ time: node.time, html: renderCaseTicketStep(node, isGoal) });
   }
   items.sort((a, b) => a.time - b.time);
   const stepHtml = items.map((i) => i.html).join("");
-  return `<div class="sv-el sv-el-${el.status}" data-sv-id="${escapeHtml(el.id)}"><div class="sv-el-row"><b>Case ${escapeHtml(d.caseId)} \xB7 ${formatDuration(d.totalDurationSeconds)}</b>${badge(el.status, "assembled by gateway")}</div>` + (el.status === "warning" && el.reason ? `<div class="sv-el-warn">${escapeHtml(el.reason)}</div>` : "") + `<div class="sv-tl">${stepHtml}</div>` + (interactive ? `<div class="sv-el-row"><a href="${escapeHtml(detailLink(el.id))}" target="_top">Case details</a></div>` : "") + `</div>`;
+  return `<div class="sv-el sv-el-${el.status}" data-sv-id="${escapeHtml(el.id)}"><div class="sv-el-row"><b>Case ${escapeHtml(d.caseId)} \xB7 ${typeof d.totalDurationSeconds === "number" ? formatDuration(d.totalDurationSeconds) : "time not verifiable"}</b>${badge(el.status, "assembled by gateway")}</div>` + (el.status === "warning" && el.reason ? `<div class="sv-el-warn">${escapeHtml(el.reason)}</div>` : "") + (typeof d.totalDurationSeconds !== "number" ? `<div class="sv-el-warn">${escapeHtml(d.timeUnverifiableReason ?? "Case time not verifiable.")}</div>` : "") + `<div class="sv-tl">${stepHtml}</div></div>`;
 }
 function renderMetric(el) {
   if (el.status === "unverifiable" || !el.data) return unverifiableCard(el);
@@ -6422,18 +6446,18 @@ function renderMetric(el) {
   const display = formatMetricValue(kind, d.value);
   return `<div class="sv-el sv-el-${el.status} sv-el-metric" data-sv-id="${escapeHtml(el.id)}"><div class="sv-big">${escapeHtml(display)}</div><div class="sv-el-row"><span>${escapeHtml(label)} (${escapeHtml(d.caseCount ?? 0)} case${d.caseCount === 1 ? "" : "s"})</span>${badge(el.status, "computed by gateway")}</div>` + (el.status === "warning" && el.reason ? `<div class="sv-el-warn">${escapeHtml(el.reason)}</div>` : "") + `</div>`;
 }
-function renderElement(el, interactive) {
+function renderElement(el) {
   switch (el.kind) {
     case "sv-ticket":
-      return renderTicket(el, interactive);
+      return renderTicket(el);
     case "sv-approval":
-      return renderApproval(el, interactive);
+      return renderApproval(el);
     case "sv-mandate":
-      return renderMandate(el, interactive);
+      return renderMandate(el);
     case "sv-record":
       return renderRecord(el);
     case "sv-case":
-      return renderCase(el, interactive);
+      return renderCase(el);
     case "sv-metric":
       return renderMetric(el);
     default:
@@ -6463,14 +6487,24 @@ var DRAWN_ELEMENT_STYLES = `
  * wrapping, which reads as the text being cut off at the container's visible
  * edge (polish 2026-10-05, second pass). */
 .sv-step-approval { max-width:240px; white-space:normal; }
+.sv-step-start { max-width:240px; white-space:normal; }
 @media (max-width: 480px) {
   .sv-tl { flex-direction:column; overflow-x:visible; }
   .sv-step { min-width:0; }
   .sv-step-approval { max-width:none; }
+  .sv-step-start { max-width:none; }
   .sv-el-row { flex-direction:column; gap:2px; }
 }
 `;
-function renderReportHtml(html, elements, interactive = true) {
+var AI_ANALYSIS_LABEL = "AI analysis \u2014 not verified";
+var AI_LEGEND_TEXT = "Boxes with a green \u2713 are drawn and checked by the gateway, and each one is listed under \u201CChecked values\u201D. Everything else is the AI's own analysis and is not verified.";
+function aiLegendBanner() {
+  const box = "display:block !important;visibility:visible !important;opacity:1 !important;position:relative !important;transform:none !important;clip-path:none !important;filter:none !important;z-index:2147483647 !important;margin:0 0 12px 0 !important;padding:8px 12px !important;border:1px solid #d4d4d8 !important;border-left:4px solid #a1a1aa !important;border-radius:8px !important;background:#f4f4f5 !important;color:#3f3f46 !important;font:12.5px/1.45 system-ui, sans-serif !important;text-align:left !important;max-width:none !important;width:auto !important;height:auto !important;";
+  const strong = "display:inline !important;visibility:visible !important;font-weight:700 !important;color:#18181b !important;font-size:inherit !important;";
+  return `<div class="sv-ai-legend" role="note" style="${box}"><b style="${strong}">${escapeHtml(AI_ANALYSIS_LABEL)}.</b> ${escapeHtml(AI_LEGEND_TEXT)}</div>`;
+}
+function renderReportHtml(rawHtml, elements) {
+  const html = sanitizeReportHtml(rawHtml);
   const byId = new Map(elements.map((e) => [e.id, e]));
   const spans = findElementSpans(html);
   let out = "";
@@ -6478,11 +6512,11 @@ function renderReportHtml(html, elements, interactive = true) {
   for (const span of spans) {
     out += html.slice(cursor, span.start);
     const el = byId.get(span.id) ?? { id: span.id, kind: span.kind, attrs: {}, status: "unverifiable", reason: "No verification result for this element." };
-    out += renderElement(el, interactive);
+    out += renderElement(el);
     cursor = span.end;
   }
   out += html.slice(cursor);
-  const styleTag = `<style data-sv-drawn-styles="1">${DRAWN_ELEMENT_STYLES}</style>`;
+  const styleTag = `<style data-sv-drawn-styles="1">${DRAWN_ELEMENT_STYLES}</style>${aiLegendBanner()}`;
   if (/<body[^>]*>/i.test(out)) {
     return out.replace(/<body([^>]*)>/i, (m) => `${m}${styleTag}`);
   }
@@ -6598,7 +6632,7 @@ function buildExportDocument(params) {
   const exportedLabel = formatDateTimeWithYear(bundle.exportedAt);
   const checkedLabel = formatDateTime(bundle.report.checkedAt);
   const tzLabel = utcOffsetLabel(bundle.exportedAt);
-  const headerHtml = `<div class="sv-export-header"><p class="sv-export-meta">Suveren Gateway ${escapeHtml(bundle.gatewayVersion)} \u2014 exported ${escapeHtml(exportedLabel)} &middot; checked ${escapeHtml(checkedLabel)} (times in ${escapeHtml(tzLabel)})</p><p class="sv-export-howto">How to check this report: each ticket below links to its public record on suveren.ai ("Check on suveren.ai \u2197"). To verify this entire file offline (including every signature), run <code>suveren-gateway verify-report ${escapeHtml(suggestedFilename(bundle))}</code> from a terminal with the Suveren gateway CLI installed.</p></div>`;
+  const headerHtml = `<div class="sv-export-header"><p class="sv-export-meta">Suveren Gateway ${escapeHtml(bundle.gatewayVersion)} \u2014 exported ${escapeHtml(exportedLabel)} &middot; checked ${escapeHtml(checkedLabel)} (times in ${escapeHtml(tzLabel)})</p><p class="sv-export-howto">How to check this report: each ticket below links to its public record on suveren.ai ("Check on suveren.ai \u2197"). To verify this entire file offline (including every signature), run <code>suveren-gateway verify-report ${escapeHtml(suggestedFilename(bundle))}</code> from a terminal with the Suveren gateway CLI installed.</p><p class="sv-export-legend" role="note" style="display:block !important;visibility:visible !important;opacity:1 !important;margin:6px 0 0 0 !important;color:#3f3f46 !important;font:12.5px/1.45 system-ui, sans-serif !important;"><b style="display:inline !important;visibility:visible !important;color:#18181b !important;">${escapeHtml(AI_ANALYSIS_LABEL)}:</b> ${escapeHtml(AI_LEGEND_TEXT)}</p></div>`;
   const proofScriptJson = JSON.stringify(bundle).replace(/<\//g, "<\\/");
   const proofScript = `<script type="application/json" id="suveren-proof">${proofScriptJson}</script>`;
   let doc = ensureHtmlDocument(renderedHtml);
@@ -7830,7 +7864,7 @@ app.get("/internal/report/export", internalOnly, async (req, res) => {
     authorityServer,
     gatewayVersion
   });
-  const renderedHtml = renderReportHtml(stored.result.html, stored.result.elements, false);
+  const renderedHtml = renderReportHtml(stored.result.html, stored.result.elements);
   const document = buildExportDocument({ bundle, renderedHtml });
   res.setHeader("Content-Type", "text/html; charset=utf-8").setHeader("Content-Disposition", `attachment; filename="${suggestedFilename(bundle)}"`).setHeader("Cache-Control", "no-store").send(document);
 });

package/dist/mcp-server/report-verify-cli.mjs

@@ -1,7 +1,7 @@
 import {
   isExportBundle,
   verifyExportBundle
-} from "./chunk-JUFH4SKS.mjs";
+} from "./chunk-QOKPECVY.mjs";
 
 // bin/report-verify-cli.ts
 import { readFileSync } from "fs";