@suveren/gateway 0.18.2 → 0.19.0

package/dist/mcp-server/http.mjs

@@ -1,23 +1,36 @@
 #!/usr/bin/env node
 import {
   CASE_TIME_UNKNOWN_REASON,
-  METRIC_LABELS,
+  REPORT_BRIEF,
+  REPORT_ELEMENTS,
+  START_TIME_METRICS,
+  agentApproval,
+  agentMandate,
+  agentTicket,
+  agentTicketRow,
+  approvalFields,
+  buildExportBundle,
+  buildExportDocument,
+  checkedValueLine,
+  computeMetric,
   fingerprintOf,
-  formatActionLabel,
-  formatCurrency,
   formatDateTime,
-  formatDuration,
-  formatMetricValue,
+  glossaryUsage,
+  mandateFields,
   parseCaseAttrs,
   parseElements,
   parseTimestampSeconds,
   profileShortLabel,
   readPairing,
+  renderReportHtml,
   resolveApprovalElement,
   resolveCaseElement,
   resolveMandateElement,
-  resolveTicketElement
-} from "./chunk-QOKPECVY.mjs";
+  resolveTicketElement,
+  sanitizeReport,
+  suggestedFilename,
+  ticketFields
+} from "./chunk-ZRRZFGRL.mjs";
 
 // bin/http.ts
 import { randomUUID as randomUUID2 } from "crypto";
@@ -1678,8 +1691,8 @@ var ReceiptArchive = class {
    */
   record(entry, now = Math.floor(Date.now() / 1e3)) {
     let changed = false;
-    const receiptId2 = typeof entry.receipt?.id === "string" ? entry.receipt.id : void 0;
-    const alreadyArchived = receiptId2 !== void 0 && this.data.receipts.some((r) => r.receipt.id === receiptId2);
+    const receiptId = typeof entry.receipt?.id === "string" ? entry.receipt.id : void 0;
+    const alreadyArchived = receiptId !== void 0 && this.data.receipts.some((r) => r.receipt.id === receiptId);
     if (!alreadyArchived) {
       this.data.receipts.push({
         archivedAt: now,
@@ -2084,125 +2097,6 @@ import { homedir as homedir7 } from "os";
 import { dirname as dirname8, join as join10 } from "path";
 import { createCipheriv as createCipheriv5, createDecipheriv as createDecipheriv5, randomBytes as randomBytes5 } from "crypto";
 
-// src/lib/report-brief.ts
-var REPORT_ELEMENTS = [
-  "sv-ticket",
-  "sv-approval",
-  "sv-mandate",
-  "sv-record",
-  "sv-case",
-  "sv-metric"
-];
-var REPORT_BRIEF = `How to write the report
-
-Purpose: show the company's management what the AI achieved in this test \u2014 case by case, from the request that started it to the goal that completed it \u2014 with proof for every fact that matters.
-
-Who reads it: managers who are not technical. Plain words, short sentences, the result first.
-
-What you write: one HTML page (HTML, CSS and inline SVG only \u2014 no JavaScript, no external files or links except the check links the gateway adds). The layout, headings, charts, tables and your assessment are yours.
-
-It must read well everywhere: on a phone, in a narrow side panel (about 360 pixels wide) and on a large screen. Use fluid widths (no fixed page widths), let columns stack on narrow screens (CSS grid/flex with wrapping, or media queries), make wide tables scroll horizontally or turn into stacked rows, give SVG charts a viewBox so they scale, and keep text at a readable size.
-
-What you cannot write yourself: facts that need proof. Place these elements instead; the gateway looks the data up, checks it and draws the element. You give references, never the content:
-
-- <sv-ticket ref="TICKET_ID"></sv-ticket> \u2014 one action you took, with its signed ticket.
-- <sv-approval ticket="TICKET_ID"></sv-approval> \u2014 who approved that action, when, and how long it waited.
-- <sv-mandate ticket="TICKET_ID"></sv-mandate> \u2014 the authority the action ran under: limits, mode, intent.
-- <sv-record system="email|crm|erp" ref="RECORD_ID"></sv-record> \u2014 an email, CRM entry, quote or order.
-- <sv-case start="email:MESSAGE_ID" goal="ticket:TICKET_ID" steps="TICKET_ID TICKET_ID"></sv-case> \u2014 one business case: the incoming email that started it, the ticket that completed it, and the tickets in between.
-- <sv-metric kind="KIND" cases="all"></sv-metric> \u2014 a number the gateway computes over the cases you defined. KIND: completed, median-time, average-time, without-approval, approvals, median-approval-wait, tickets, refusals. cases is "all" or a space-separated list of case ids, e.g. cases="C1 C3".
-
-Rules:
-1. Define every case you worked on with sv-case \u2014 also the ones that did not reach their goal (omit goal, or say why in your text). The gateway shows management how many of the loaded cases your report covers and names the missing ones \u2014 and lists every ticket from the test period that your report does not reference, so name every step.
-2. Use sv-metric for every headline number. Everything you write yourself \u2014 text, tables, charts, numbers you compute \u2014 sits under the gateway's label "AI analysis \u2014 not verified"; only the drawn elements carry the gateway's green check. Do not imitate them: class names starting with "sv-" are removed from your HTML.
-3. A case's goal must be what actually completed it \u2014 for an email reply, the reply to the start email. The gateway checks this link. A case is timed from when its email reached the test (the test data may date its emails earlier \u2014 the gateway uses the later of the two), so steps from before that moment do not belong to it.
-4. A wrong or unknown reference is shown as "not verifiable". Do not guess IDs \u2014 read them first.
-5. Never claim more than the elements prove. Say plainly what went wrong or waited for a person.
-
-Suggested structure:
-1. The result in one sentence, then 3\u20134 sv-metric figures (completed, median time, share without approval, approvals).
-2. All cases at a glance \u2014 a table with one row per case, linked to its sv-case below.
-3. Each case: sv-case, then the sv-ticket and sv-approval elements that explain it.
-4. What was stopped or needed a person, and why (sv-approval, refusals).
-5. Your assessment: what worked, what slowed things down, what a different mandate would change \u2014 marked as your view.
-
-Update the report whenever cases progress; each write replaces the previous report.`;
-
-// src/lib/report/sanitize.ts
-import sanitizeHtmlLib from "sanitize-html";
-var FORBIDDEN_TAGS = /* @__PURE__ */ new Set(["script", "iframe", "object", "embed", "link"]);
-function isUrlAttribute(name) {
-  const n = name.toLowerCase();
-  return n === "href" || n === "src" || n === "xlink:href" || n.endsWith(":href");
-}
-function isAllowedUrl(value) {
-  const v = value.trim();
-  if (v.startsWith("#")) return true;
-  if (/^data:image\//i.test(v)) return true;
-  return false;
-}
-function stripGatewayClasses(value) {
-  return value.split(/\s+/).filter((c) => c && !/^sv-/i.test(c)).join(" ");
-}
-function sanitizeReportHtml(html) {
-  return sanitizeHtmlLib(html, {
-    // Allow every tag/attribute by default — see module doc comment for why
-    // this is deny-by-name rather than allow-by-name. `transformTags['*']`
-    // below is then the ONLY attribute filter (allowedAttributes: false
-    // skips sanitize-html's own, so there is exactly one place attributes
-    // are decided, not two that could disagree). Logs a harmless warning for
-    // "script"/"style" on every call (sanitize-html's own vulnerable-tag
-    // notice, fired from its internal tag list even though we pass `false`,
-    // not an array containing them) — `allowVulnerableTags` is the
-    // documented way to accept that, and <script> is still removed, by
-    // `exclusiveFilter` below, regardless of this flag.
-    allowedTags: false,
-    allowedAttributes: false,
-    allowVulnerableTags: true,
-    // sanitize-html's OWN scheme check (independent of transformTags, and
-    // applied to it/src/cite only — NOT xlink:href, which is why the
-    // transformTags filter above is the one actually relied on for SVG) uses
-    // this list; it has no "data" scheme by default, which would undo our
-    // own decision to keep `data:image/*` sources. Nothing wider is opened:
-    // transformTags has already removed every href/src that isn't a
-    // fragment link or a data:image/* URI by the time this check runs.
-    allowedSchemes: [...sanitizeHtmlLib.defaults.allowedSchemes, "data"],
-    // Preserve attribute name casing — inline SVG uses camelCase attributes
-    // (viewBox, preserveAspectRatio, …) that lowercasing would silently
-    // break. Safe for the `on*`/url checks below: both compare case-folded.
-    parser: { lowerCaseAttributeNames: false },
-    // Removes the named tag AND all of its children/text — the only correct
-    // behaviour for <script>: dropping just the tag would leave its JS as
-    // visible text, but the content must not survive either.
-    exclusiveFilter: (frame) => {
-      const tag = frame.tag.toLowerCase();
-      if (FORBIDDEN_TAGS.has(tag)) return true;
-      if (tag === "meta" && Object.keys(frame.attribs).some((a) => a.toLowerCase() === "http-equiv")) {
-        return true;
-      }
-      return false;
-    },
-    transformTags: {
-      "*": (tagName, attribs) => {
-        const kept = {};
-        for (const [name, value] of Object.entries(attribs)) {
-          const lower = name.toLowerCase();
-          if (lower.startsWith("on")) continue;
-          if (isUrlAttribute(name) && !isAllowedUrl(value)) continue;
-          if (lower.startsWith("data-sv")) continue;
-          if (lower === "class") {
-            const classes = stripGatewayClasses(value);
-            if (classes) kept[name] = classes;
-            continue;
-          }
-          kept[name] = value;
-        }
-        return { tagName, attribs: kept };
-      }
-    }
-  });
-}
-
 // src/lib/report/record-resolvers.ts
 function findById(rows, id) {
   return rows.find((r) => r.id === id);
@@ -2251,68 +2145,6 @@ function resolveRecord(system, exportData, ref) {
   return resolveCrmRecord(exportData, ref);
 }
 
-// src/lib/report/metric-resolvers.ts
-var METRIC_KINDS = [
-  "completed",
-  "median-time",
-  "average-time",
-  "without-approval",
-  "approvals",
-  "median-approval-wait",
-  "tickets",
-  "refusals"
-];
-var UnknownMetricKindError = class extends Error {
-  constructor(kind) {
-    super(`Unknown sv-metric kind "${kind}" \u2014 expected one of: ${METRIC_KINDS.join(", ")}.`);
-    this.name = "UnknownMetricKindError";
-  }
-};
-var START_TIME_METRICS = /* @__PURE__ */ new Set(["median-time", "average-time", "refusals"]);
-function median(values) {
-  if (values.length === 0) return 0;
-  const sorted = [...values].sort((a, b) => a - b);
-  const mid = Math.floor(sorted.length / 2);
-  return sorted.length % 2 === 0 ? (sorted[mid - 1] + sorted[mid]) / 2 : sorted[mid];
-}
-function average(values) {
-  if (values.length === 0) return 0;
-  return values.reduce((a, b) => a + b, 0) / values.length;
-}
-function computeMetric(kind, cases, refusalTimes = []) {
-  if (START_TIME_METRICS.has(kind) && cases.some((c) => c.totalDurationSeconds === null)) {
-    throw new Error("Case start times are not verifiable.");
-  }
-  switch (kind) {
-    case "completed":
-      return cases.length;
-    case "median-time":
-      return median(cases.map((c) => c.totalDurationSeconds));
-    case "average-time":
-      return average(cases.map((c) => c.totalDurationSeconds));
-    case "without-approval": {
-      if (cases.length === 0) return 0;
-      const withoutApproval = cases.filter((c) => c.approvals.length === 0).length;
-      return withoutApproval / cases.length;
-    }
-    case "approvals":
-      return cases.reduce((sum, c) => sum + c.approvals.length, 0);
-    case "median-approval-wait":
-      return median(cases.flatMap((c) => c.approvals.map((a) => a.waitSeconds).filter((w) => typeof w === "number")));
-    case "tickets": {
-      const ids = new Set(cases.flatMap((c) => c.ticketIds));
-      return ids.size;
-    }
-    case "refusals":
-      return cases.reduce(
-        (sum, c) => sum + refusalTimes.filter((t) => t >= c.startTime && t <= c.goalTime).length,
-        0
-      );
-    default:
-      throw new UnknownMetricKindError(kind);
-  }
-}
-
 // src/lib/report/types.ts
 function isEmailExport(v) {
   const o = v;
@@ -2330,7 +2162,7 @@ function isCrmExport(v) {
 // src/lib/report/verify-report.ts
 var KNOWN_KINDS = new Set(REPORT_ELEMENTS);
 async function verifyReport(html, sources) {
-  const sanitized = sanitizeReportHtml(html);
+  const { html: sanitized, notes: sanitizeNotes } = sanitizeReport(html);
   const parsed = parseElements(sanitized);
   const exportCache = /* @__PURE__ */ new Map();
   function getExport(system) {
@@ -2351,7 +2183,16 @@ async function verifyReport(html, sources) {
     try {
       switch (p.kind) {
         case "sv-ticket": {
-          const r = await resolveTicketElement(sources.archive, p.attrs.ref ?? "");
+          const ref = p.attrs.ref ?? "";
+          const r = await resolveTicketElement(sources.archive, ref);
+          if (r.status === "verified" && (p.attrs.variant ?? "").trim().toLowerCase() === "full") {
+            const m = await resolveMandateElement(sources.archive, ref);
+            const a = await resolveApprovalElement(sources.archive, ref);
+            const data = { ...r.data };
+            if (m.status === "verified") data.mandate = m.data;
+            if (a.status === "verified") data.approval = a.data;
+            return { id: p.id, kind: p.kind, attrs: p.attrs, status: r.status, data };
+          }
           return { id: p.id, kind: p.kind, attrs: p.attrs, ...r };
         }
         case "sv-approval": {
@@ -2456,7 +2297,7 @@ async function verifyReport(html, sources) {
       }
       const refusalTimes = kind === "refusals" ? await collectRefusalTimes(getExport) : [];
       const value = computeMetric(kind, caseInputs, refusalTimes);
-      const data = { kind, cases: casesAttr, value, caseCount: verifiedCount };
+      const data = { kind, cases: casesAttr, value, caseCount: verifiedCount, caseIds: caseInputs.map((c) => c.caseId) };
       if (verifiedCount < requestedCount) {
         elements.push({
           id: p.id,
@@ -2474,8 +2315,8 @@ async function verifyReport(html, sources) {
     }
   }
   const proof = buildProof(elements, caseElements);
-  const coverage = await buildCoverage(caseElements, getExport, sources.archive, proof.ticketsReferenced);
-  return { html: sanitized, elements, proof, coverage };
+  const coverage = await buildCoverage(caseElements, getExport, sources.archive, proof.ticketsReferenced, sources.window);
+  return { html: sanitized, elements, proof, coverage, sanitizeNotes };
 }
 async function collectRefusalTimes(getExport) {
   const times = [];
@@ -2491,38 +2332,7 @@ async function collectRefusalTimes(getExport) {
   return times;
 }
 function summarize(el) {
-  const d = el.data ?? {};
-  switch (el.kind) {
-    case "sv-ticket": {
-      const actionLabel = typeof d.actionLabel === "string" ? d.actionLabel : formatActionLabel(d.action);
-      const timeLabel = typeof d.timeLabel === "string" ? d.timeLabel : formatDateTime(d.time);
-      return `${actionLabel} \u2014 ${timeLabel}`;
-    }
-    case "sv-approval": {
-      const who = typeof d.whoLabel === "string" ? d.whoLabel : d.who?.join(", ") ?? "unknown";
-      const waitLabel = typeof d.waitLabel === "string" ? d.waitLabel : typeof d.waitSeconds === "number" ? formatDuration(d.waitSeconds) : "unknown";
-      return `Approval by ${who} \u2014 waited ${waitLabel}`;
-    }
-    case "sv-mandate": {
-      const profileLabel = typeof d.profileLabel === "string" ? d.profileLabel : profileShortLabel(typeof d.profile === "string" ? d.profile : void 0);
-      const owners = Array.isArray(d.owners) && d.owners.length > 0 ? d.owners.join(", ") : "unknown owner";
-      return `Mandate: ${profileLabel} \xB7 ${owners}`;
-    }
-    case "sv-record":
-      return `${String(d.kind ?? "record")} record checked`;
-    case "sv-case": {
-      const steps = d.steps?.length ?? 0;
-      const time = typeof d.totalDurationSeconds === "number" ? formatDuration(d.totalDurationSeconds) : "time not verifiable";
-      return `Case ${String(d.caseId)}: ${steps} ${steps === 1 ? "step" : "steps"}, ${time}`;
-    }
-    case "sv-metric": {
-      const kind = String(d.kind ?? "");
-      const label = METRIC_LABELS[kind] ?? kind;
-      return `${label} = ${formatMetricValue(kind, d.value)}`;
-    }
-    default:
-      return el.id;
-  }
+  return checkedValueLine(el);
 }
 function buildProof(elements, caseElements) {
   const ticketsReferenced = /* @__PURE__ */ new Set();
@@ -2563,7 +2373,7 @@ function buildProof(elements, caseElements) {
     verifiedValues
   };
 }
-async function buildCoverage(caseElements, getExport, archive, referenced) {
+async function buildCoverage(caseElements, getExport, archive, referenced, window) {
   const exp = await getExport("email");
   const emailExportError = !exp.ok ? exp.reason : !isEmailExport(exp.data) ? "Email simulator export had an unexpected shape." : void 0;
   const loadedCases = exp.ok && isEmailExport(exp.data) ? [...new Set(exp.data.inbox.map((m) => m.case_id).filter((c) => !!c))] : [];
@@ -2573,7 +2383,8 @@ async function buildCoverage(caseElements, getExport, archive, referenced) {
   const coveredCases = loadedCases.filter((c) => covered.has(c));
   const missingCases = loadedCases.filter((c) => !covered.has(c));
   const loadedAt = exp.ok && isEmailExport(exp.data) ? exp.data.simulation_load?.loaded_at : void 0;
-  const periodStart = loadedAt !== void 0 ? parseTimestampSeconds(loadedAt) ?? null : null;
+  const loadedAtSeconds = loadedAt !== void 0 ? parseTimestampSeconds(loadedAt) ?? null : null;
+  const periodStart = window ? loadedAtSeconds !== null ? Math.max(window.start, loadedAtSeconds) : window.start : loadedAtSeconds;
   const inPeriod = archive.getReceipts().map((r) => ({ id: String(r.receipt.id ?? ""), time: Number(r.receipt.timestamp ?? r.archivedAt) })).filter((t) => t.id && (periodStart === null || t.time >= periodStart)).sort((a, b) => a.time - b.time).map((t) => t.id);
   const referencedSet = new Set(referenced);
   const ticketsReferenced = inPeriod.filter((id) => referencedSet.has(id));
@@ -2584,6 +2395,7 @@ async function buildCoverage(caseElements, getExport, archive, referenced) {
     coveredCases,
     missingCases,
     periodStart,
+    ...window ? { window: { start: window.start, end: window.end, days: window.days, label: window.label } } : {},
     ticketsInPeriod: inPeriod,
     ticketsReferenced,
     ticketsNotReferenced
@@ -3035,8 +2847,8 @@ var FOOTER_RE = /\n*(?:—|--) (?:Sent|Published) by (?:an AI agent|[^\n]+?'s AI
 function shouldAttachFooter() {
   return true;
 }
-function receiptUrl(receiptId2) {
-  return `${AS_BASE}/r/${receiptId2}`;
+function receiptUrl(receiptId) {
+  return `${AS_BASE}/r/${receiptId}`;
 }
 function verbForProfile(profile) {
   return profile === "publish" ? "Published" : "Sent";
@@ -3044,11 +2856,11 @@ function verbForProfile(profile) {
 function hapLine() {
   return `-- ${OPERATOR_NAME} implements HAP, the open Human Agency Protocol: ${HAP_URL}`;
 }
-function footerText(receiptId2, verb, subject) {
+function footerText(receiptId, verb, subject) {
   const identity = deriveIdentityLine(subject, { operatorName: OPERATOR_NAME }).replace(/^Sent\b/, verb);
   return `
 
--- ${identity}. Receipt: ${receiptUrl(receiptId2)}
+-- ${identity}. Receipt: ${receiptUrl(receiptId)}
 
 ${hapLine()}`;
 }
@@ -3067,13 +2879,13 @@ function detectContentField(tool) {
 function stripFooter(value) {
   return value.replace(FOOTER_RE, "").replace(/\n+$/, "");
 }
-function appendVerificationFooter(tool, args, receiptId2, subject) {
+function appendVerificationFooter(tool, args, receiptId, subject) {
   const profile = tool.gating?.profile;
   if (!profile || !FOOTER_PROFILES.has(profile)) return args;
   const field = detectContentField(tool);
   if (!field) return args;
   const current = typeof args[field] === "string" ? args[field] : "";
-  return { ...args, [field]: stripFooter(current) + footerText(receiptId2, verbForProfile(profile), subject) };
+  return { ...args, [field]: stripFooter(current) + footerText(receiptId, verbForProfile(profile), subject) };
 }
 
 // src/lib/content-binding.ts
@@ -3126,10 +2938,10 @@ function computeContentBinding(profileId, tool, toolArgs, actionType) {
     boundContent
   };
 }
-function attachReceiptId(tool, args, receiptId2) {
+function attachReceiptId(tool, args, receiptId) {
   const schema = tool.inputSchema;
   if (!schema?.properties || !("receipt_id" in schema.properties)) return args;
-  return { ...args, receipt_id: receiptId2 };
+  return { ...args, receipt_id: receiptId };
 }
 
 // src/lib/ticket-verify.ts
@@ -3680,6 +3492,25 @@ function createGatedToolHandlerInner(tool, integrationManager2, state2) {
     };
   }
   const { profile, executionMapping, staticExecution, category } = tool.gating;
+  const eligibleMandates = () => {
+    const refusals = [];
+    const matching = state2.getEnrichedAuthorizations().filter((a) => a.complete && profileMatches(a.profileId, profile)).filter((a) => {
+      const refusal = integrationManager2.mandateRefusal?.(tool, a) ?? null;
+      if (refusal) refusals.push(refusal);
+      return !refusal;
+    });
+    return { matching, refusals };
+  };
+  const noEligibleMandate = (refusals) => {
+    const reasons = [...new Set(refusals)].join(" ");
+    return {
+      content: [{
+        type: "text",
+        text: refusals.length > 0 ? `Refused: ${reasons.charAt(0).toUpperCase() + reasons.slice(1)} No ticket was requested.` : `No active authorization matching profile "${profile}". A decision owner must grant authority via the Authority UI before this tool can be used.`
+      }],
+      isError: true
+    };
+  };
   const lockedGuard = (inner) => async (args) => {
     if (!state2.spClient.isUnlocked()) {
       return {
@@ -3712,19 +3543,8 @@ function createGatedToolHandlerInner(tool, integrationManager2, state2) {
           `${tool.originalName} declares no read governance (no static gate, no read adapter, no explicit exemption), so the gateway cannot bound what it returns. This is a manifest defect \u2014 the tool must declare how its reads are limited before it can be used.`
         );
       }
-      const auths = state2.getEnrichedAuthorizations();
-      const matchingAuths = auths.filter(
-        (a) => a.complete && profileMatches(a.profileId, profile)
-      );
-      if (matchingAuths.length === 0) {
-        return {
-          content: [{
-            type: "text",
-            text: `No active authorization matching profile "${profile}". A decision owner must grant authority via the Authority UI before this tool can be used.`
-          }],
-          isError: true
-        };
-      }
+      const { matching: matchingAuths, refusals } = eligibleMandates();
+      if (matchingAuths.length === 0) return noEligibleMandate(refusals);
       if (readGate.boundField) {
         const permitted = matchingAuths.some(
           (a) => boundsSatisfyReadGate(a.bounds ?? a.frame, readGate)
@@ -3906,19 +3726,8 @@ function createGatedToolHandlerInner(tool, integrationManager2, state2) {
         };
       }
     }
-    const auths = state2.getEnrichedAuthorizations();
-    const matchingAuths = auths.filter(
-      (a) => a.complete && profileMatches(a.profileId, profile)
-    );
-    if (matchingAuths.length === 0) {
-      return {
-        content: [{
-          type: "text",
-          text: `No active authorization matching profile "${profile}". A decision owner must grant authority via the Authority UI before this tool can be used.`
-        }],
-        isError: true
-      };
-    }
+    const { matching: matchingAuths, refusals } = eligibleMandates();
+    if (matchingAuths.length === 0) return noEligibleMandate(refusals);
     const errors = [];
     const passers = [];
     for (const candidate of matchingAuths) {
@@ -4019,7 +3828,7 @@ Proposal ID: ${proposal.id}. Check status with check-pending-commitments(proposa
           };
         }
       }
-      let receiptId2;
+      let receiptId;
       try {
         const actionType = declaredActionType;
         const binding = computeContentBinding(auth.profileId, tool, args, actionType);
@@ -4041,7 +3850,7 @@ Proposal ID: ${proposal.id}. Check status with check-pending-commitments(proposa
           // field by field rather than spread.
           ...binding ? { contentHash: binding.contentHash, contentBinding: binding.contentBinding } : {}
         });
-        receiptId2 = typeof receipt?.id === "string" ? receipt.id : void 0;
+        receiptId = typeof receipt?.id === "string" ? receipt.id : void 0;
         await verifyTicket(state2.cache, receipt, {
           action: tool.namespacedName,
           executionContext: { ...execution },
@@ -4195,12 +4004,12 @@ Proposal ID: ${proposal.id}. Use check-pending-commitments to track status.`
         execution: { ...execution },
         timestamp: Math.floor(Date.now() / 1e3)
       });
-      let outgoingArgs = shouldAttachFooter() && receiptId2 ? appendVerificationFooter(tool, args, receiptId2, auth.subjects?.[0]) : args;
-      if (receiptId2) outgoingArgs = attachReceiptId(tool, outgoingArgs, receiptId2);
+      let outgoingArgs = shouldAttachFooter() && receiptId ? appendVerificationFooter(tool, args, receiptId, auth.subjects?.[0]) : args;
+      if (receiptId) outgoingArgs = attachReceiptId(tool, outgoingArgs, receiptId);
       outgoingArgs = encodeOutgoingArgs(tool, outgoingArgs);
-      if (receiptId2) {
+      if (receiptId) {
         const begun = state2.executionJournal.begin({
-          ticketId: receiptId2,
+          ticketId: receiptId,
           tool: tool.namespacedName,
           argsHash: hashToolArgs(args)
         });
@@ -4208,17 +4017,17 @@ Proposal ID: ${proposal.id}. Use check-pending-commitments to track status.`
           return {
             content: [{
               type: "text",
-              text: `Blocked: ticket ${receiptId2} was already used to execute ${tool.namespacedName} (state: ${begun.existing.state}). Not running it again.`
+              text: `Blocked: ticket ${receiptId} was already used to execute ${tool.namespacedName} (state: ${begun.existing.state}). Not running it again.`
             }],
             isError: true
           };
         }
         try {
           const result = await integrationManager2.callTool(tool.integrationId, tool.originalName, outgoingArgs);
-          state2.executionJournal.complete(receiptId2, "done");
+          state2.executionJournal.complete(receiptId, "done");
           return result;
         } catch (err) {
-          state2.executionJournal.complete(receiptId2, "failed");
+          state2.executionJournal.complete(receiptId, "failed");
           throw err;
         }
       }
@@ -4699,7 +4508,7 @@ async function executeCommitted(proposal, state2, integrationManager2) {
       };
     }
   }
-  let receiptId2;
+  let receiptId;
   let replayed = false;
   try {
     const binding = computeContentBinding(
@@ -4732,7 +4541,7 @@ async function executeCommitted(proposal, state2, integrationManager2) {
       // this machine — see the archive call below.
       ...binding ? { contentHash: binding.contentHash, contentBinding: binding.contentBinding } : {}
     });
-    receiptId2 = typeof receipt?.id === "string" ? receipt.id : void 0;
+    receiptId = typeof receipt?.id === "string" ? receipt.id : void 0;
     replayed = idempotent;
     await verifyTicket(state2.cache, receipt, {
       action: proposal.tool,
@@ -4787,14 +4596,14 @@ async function executeCommitted(proposal, state2, integrationManager2) {
       isError: true
     };
   }
-  if (!receiptId2) {
+  if (!receiptId) {
     return {
       text: `Proposal ${proposal.id}: the ticket carries no id \u2014 refusing to execute an action that could not be recorded.`,
       isError: true
     };
   }
   const begun = state2.executionJournal.begin({
-    ticketId: receiptId2,
+    ticketId: receiptId,
     proposalId: proposal.id,
     tool: proposal.tool,
     argsHash: hashToolArgs(proposal.toolArgs)
@@ -4804,36 +4613,36 @@ async function executeCommitted(proposal, state2, integrationManager2) {
     const when = new Date(prior.startedAt * 1e3).toISOString();
     if (prior.state === "done") {
       return {
-        text: `Proposal ${proposal.id} was already executed under ticket ${receiptId2} at ${when}. Not running it again.`
+        text: `Proposal ${proposal.id} was already executed under ticket ${receiptId} at ${when}. Not running it again.`
       };
     }
     return {
-      text: `Proposal ${proposal.id}: an execution under ticket ${receiptId2} started at ${when} (pid ${prior.pid}) and ${prior.state === "failed" ? "reported failure" : "never reported completion"}. Not re-running: the action may already have taken effect. Check the downstream system before deciding.`,
+      text: `Proposal ${proposal.id}: an execution under ticket ${receiptId} started at ${when} (pid ${prior.pid}) and ${prior.state === "failed" ? "reported failure" : "never reported completion"}. Not re-running: the action may already have taken effect. Check the downstream system before deciding.`,
       isError: true
     };
   }
   if (replayed) {
     console.error(
-      `[Suveren MCP] Proposal ${proposal.id}: ticket ${receiptId2} was replayed by the AS with no local execution record \u2014 executing once (lost-response recovery).`
+      `[Suveren MCP] Proposal ${proposal.id}: ticket ${receiptId} was replayed by the AS with no local execution record \u2014 executing once (lost-response recovery).`
     );
   }
   try {
     let outgoingArgs = proposal.toolArgs;
-    if (discovered && receiptId2) {
+    if (discovered && receiptId) {
       if (shouldAttachFooter()) {
-        outgoingArgs = appendVerificationFooter(discovered, outgoingArgs, receiptId2, cachedAuth?.subjects?.[0]);
+        outgoingArgs = appendVerificationFooter(discovered, outgoingArgs, receiptId, cachedAuth?.subjects?.[0]);
       }
-      outgoingArgs = attachReceiptId(discovered, outgoingArgs, receiptId2);
+      outgoingArgs = attachReceiptId(discovered, outgoingArgs, receiptId);
       outgoingArgs = encodeOutgoingArgs(discovered, outgoingArgs);
     }
     let result;
     try {
       result = await integrationManager2.callTool(integrationId, toolName, outgoingArgs);
     } catch (err) {
-      state2.executionJournal.complete(receiptId2, "failed");
+      state2.executionJournal.complete(receiptId, "failed");
       throw err;
     }
-    state2.executionJournal.complete(receiptId2, "done");
+    state2.executionJournal.complete(receiptId, "done");
     state2.executionLog.record({
       profileId: proposal.profileId,
       path: proposal.path,
@@ -5945,6 +5754,15 @@ var IntegrationManager = class {
     const refusal = await def?.validate?.(args);
     return refusal ? `Refused: ${refusal} No ticket was requested.` : null;
   }
+  /**
+   * Why this tool's integration refuses the held mandate `auth`, or null when
+   * it accepts it (always null for connectors and built-ins that declare no
+   * `mandateRefusal`). tool-proxy.ts drops refused mandates before selection.
+   */
+  mandateRefusal(tool, auth) {
+    const builtin = this.builtins.get(tool.integrationId);
+    return builtin?.def.mandateRefusal?.(auth) ?? null;
+  }
   /**
    * Proxy a tool call to a downstream MCP server (or a built-in's handler).
    */
@@ -6278,252 +6096,11 @@ function createConnectorExportRunner(config) {
   };
 }
 
-// src/lib/report/render-report.ts
-import { Parser } from "htmlparser2";
-function findElementSpans(html) {
-  const spans = [];
-  const seenCount = /* @__PURE__ */ new Map();
-  const openStack = [];
-  let parserRef;
-  const parser = new Parser(
-    {
-      onparserinit(p) {
-        parserRef = p;
-      },
-      onopentag(name) {
-        if (!name.startsWith("sv-") || !parserRef) return;
-        const n = seenCount.get(name) ?? 0;
-        seenCount.set(name, n + 1);
-        openStack.push({ tag: name, id: `${name}-${n}`, start: parserRef.startIndex });
-      },
-      onclosetag(name) {
-        if (!name.startsWith("sv-") || !parserRef) return;
-        const idx = [...openStack].reverse().findIndex((o) => o.tag === name);
-        if (idx === -1) return;
-        const realIdx = openStack.length - 1 - idx;
-        const [open] = openStack.splice(realIdx, 1);
-        spans.push({ id: open.id, kind: open.tag, start: open.start, end: parserRef.endIndex + 1 });
-      }
-    },
-    { decodeEntities: true, recognizeSelfClosing: true }
-  );
-  parser.write(html);
-  parser.end();
-  return spans.sort((a, b) => a.start - b.start);
-}
-function escapeHtml(value) {
-  return String(value ?? "").replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#39;");
-}
-function badge(status, okLabel) {
-  if (status === "verified") return `<span class="sv-badge sv-badge-ok">\u2713 ${escapeHtml(okLabel)}</span>`;
-  if (status === "warning") return `<span class="sv-badge sv-badge-warn">\u26A0 verified with a note</span>`;
-  return `<span class="sv-badge sv-badge-bad">\u2717 not verifiable</span>`;
-}
-function unverifiableCard(el) {
-  return `<div class="sv-el sv-el-unverifiable" data-sv-id="${escapeHtml(el.id)}"><div class="sv-el-row"><b>Not verifiable</b>${badge("unverifiable", "")}</div><div class="sv-el-reason">${escapeHtml(el.reason ?? "This reference could not be checked.")}</div></div>`;
-}
-function renderTicket(el) {
-  if (el.status === "unverifiable" || !el.data) return unverifiableCard(el);
-  const d = el.data;
-  const href = typeof d.checkUrl === "string" ? d.checkUrl : void 0;
-  const actionLabel = typeof d.actionLabel === "string" ? d.actionLabel : formatActionLabel(d.action);
-  const timeLabel = typeof d.timeLabel === "string" ? d.timeLabel : formatDateTime(d.time);
-  const profileLabel = typeof d.profileLabel === "string" ? d.profileLabel : escapeHtml(d.profile ?? "");
-  const links = [
-    href ? `<a href="${escapeHtml(href)}" target="_blank" rel="noopener noreferrer">Check on suveren.ai \u2197</a>` : ""
-  ].filter(Boolean);
-  return `<div class="sv-el sv-el-${el.status}" data-sv-id="${escapeHtml(el.id)}"><div class="sv-el-row"><b>${escapeHtml(actionLabel)}</b>${badge(el.status, "signature valid")}</div><div class="sv-el-row"><span>${escapeHtml(profileLabel)} \xB7 ${escapeHtml(timeLabel)}</span></div>` + (links.length > 0 ? `<div class="sv-el-row"><span>${links.join(" \xB7 ")}</span></div>` : "") + `</div>`;
-}
-function renderApproval(el) {
-  if (el.status === "unverifiable" || !el.data) return unverifiableCard(el);
-  const d = el.data;
-  const who = typeof d.whoLabel === "string" ? d.whoLabel : Array.isArray(d.who) ? d.who.join(", ") : "unknown";
-  const asked = typeof d.createdAtLabel === "string" ? d.createdAtLabel : "unknown";
-  const approved = typeof d.decidedAtLabel === "string" ? d.decidedAtLabel : "unknown";
-  const waited = typeof d.waitLabel === "string" ? d.waitLabel : "unknown";
-  return `<div class="sv-el sv-el-${el.status}" data-sv-id="${escapeHtml(el.id)}"><div class="sv-el-row"><b>Approval</b>${badge(el.status, "from ticket archive")}</div><div class="sv-el-row"><span>asked ${escapeHtml(asked)} \xB7 approved ${escapeHtml(approved)} by ${escapeHtml(who)} (${escapeHtml(waited)})</span></div></div>`;
-}
-function renderMandate(el) {
-  if (el.status === "unverifiable" || !el.data) return unverifiableCard(el);
-  const d = el.data;
-  const profileLabel = typeof d.profileLabel === "string" ? d.profileLabel : String(d.profile ?? "");
-  const owners = Array.isArray(d.owners) && d.owners.length > 0 ? d.owners.join(", ") : "unknown owner";
-  const limits = Array.isArray(d.limits) && d.limits.length > 0 ? d.limits.join(" \xB7 ") : "";
-  return `<div class="sv-el sv-el-${el.status}" data-sv-id="${escapeHtml(el.id)}"><div class="sv-el-row"><b>${escapeHtml(profileLabel)} \xB7 ${escapeHtml(owners)}</b>${badge(el.status, "matches ticket")}</div>` + (limits ? `<div class="sv-el-row">${escapeHtml(limits)}${d.mode ? ` \xB7 ${escapeHtml(d.mode)}` : ""}</div>` : "") + (d.intent ? `<div class="sv-el-intent">Intent: \u201C${escapeHtml(d.intent)}\u201D</div>` : "") + `</div>`;
-}
-var RECORD_FIELD_ORDER = [
-  "subject",
-  "from_email",
-  "from_name",
-  "to_json",
-  "received_at",
-  "number",
-  "status",
-  "net_total",
-  "customer_id",
-  "causingReceiptId",
-  "message"
-];
-var RECORD_TIME_FIELDS = /* @__PURE__ */ new Set(["received_at", "created_at", "sent_at"]);
-function renderRecordField(key, d) {
-  if (key === "net_total") {
-    const currency = typeof d.currency === "string" ? d.currency : void 0;
-    return `<div class="sv-el-row"><span>Value</span><span>${escapeHtml(formatCurrency(d.net_total, currency))}</span></div>`;
-  }
-  if (RECORD_TIME_FIELDS.has(key)) {
-    const t = parseTimestampSeconds(d[key]);
-    const display = t !== void 0 ? formatDateTime(t) : d[key];
-    return `<div class="sv-el-row"><span>${escapeHtml(key)}</span><span>${escapeHtml(display)}</span></div>`;
-  }
-  return `<div class="sv-el-row"><span>${escapeHtml(key)}</span><span>${escapeHtml(d[key])}</span></div>`;
-}
-function renderRecord(el) {
-  if (el.status === "unverifiable" || !el.data) return unverifiableCard(el);
-  const d = el.data;
-  const kind = String(d.kind ?? "record");
-  const rows = RECORD_FIELD_ORDER.filter((k) => d[k] !== void 0 && d[k] !== null && d[k] !== "").slice(0, 5).map((k) => renderRecordField(k, d)).join("");
-  return `<div class="sv-el sv-el-${el.status}" data-sv-id="${escapeHtml(el.id)}"><div class="sv-el-row"><b>${escapeHtml(kind)} record</b>${badge(el.status, "in simulator database")}</div>` + rows + `</div>`;
-}
-function renderCaseTicketStep(node, isGoal) {
-  const cls = isGoal ? "sv-step sv-step-goal" : "sv-step";
-  const kind = isGoal ? "goal" : "ticket";
-  const inner = `<div class="sv-step-k">${kind}</div><div class="sv-step-t">${escapeHtml(formatActionLabel(node.action))}</div>${formatDateTime(node.time)}`;
-  return `<div class="${cls}">${inner}</div>`;
-}
-function renderCaseApprovalStep(approval) {
-  const who = approval.whoLabel ?? (Array.isArray(approval.who) ? approval.who.join(", ") : "unknown");
-  const asked = approval.createdAtLabel ?? "unknown";
-  const decided = approval.decidedAtLabel ?? "unknown";
-  const waited = approval.waitLabel ?? "unknown";
-  return `<div class="sv-step sv-step-approval"><div class="sv-step-k">approval</div><div class="sv-step-t">Approval</div><div class="sv-step-sub">asked ${escapeHtml(asked)} \xB7 approved ${escapeHtml(decided)} by ${escapeHtml(who)} (${escapeHtml(waited)})</div></div>`;
-}
-function renderCaseStartStep(start) {
-  let sub = "";
-  if (start.basis === "loaded" && typeof start.emailTime === "number") {
-    sub = `<div class="sv-step-sub">Email dated ${escapeHtml(formatDateTime(start.emailTime))} \xB7 timed from when the test data was loaded</div>`;
-  } else if (start.basis === "load-unknown") {
-    sub = `<div class="sv-step-sub">Email dated ${escapeHtml(formatDateTime(start.emailTime ?? start.time))} \xB7 start time not verifiable</div>`;
-  }
-  const time = start.basis === "load-unknown" ? "" : escapeHtml(formatDateTime(start.time));
-  return `<div class="sv-step sv-step-start"><div class="sv-step-k">start</div><div class="sv-step-t">Email in</div>${time}${sub}</div>`;
-}
-function renderCase(el) {
-  if (el.status === "unverifiable" || !el.data) return unverifiableCard(el);
-  const d = el.data;
-  const steps = Array.isArray(d.steps) ? d.steps : [];
-  const goal = d.goal;
-  const approvalsByTicket = /* @__PURE__ */ new Map();
-  if (Array.isArray(d.approvals)) {
-    for (const a of d.approvals) {
-      approvalsByTicket.set(a.ticketId, a);
-    }
-  }
-  const start = d.start;
-  const startStep = start ? { time: start.time, html: renderCaseStartStep(start) } : void 0;
-  const ticketNodes = [
-    ...steps.map((s) => ({ node: s, isGoal: false })),
-    ...goal ? [{ node: goal, isGoal: true }] : []
-  ];
-  const items = [];
-  if (startStep) items.push(startStep);
-  for (const { node, isGoal } of ticketNodes) {
-    const approval = approvalsByTicket.get(node.ticketId);
-    if (approval) {
-      const approvalTime = Math.min(approval.decidedAt ?? approval.createdAt ?? node.time, node.time);
-      items.push({ time: approvalTime, html: renderCaseApprovalStep(approval) });
-    }
-    items.push({ time: node.time, html: renderCaseTicketStep(node, isGoal) });
-  }
-  items.sort((a, b) => a.time - b.time);
-  const stepHtml = items.map((i) => i.html).join("");
-  return `<div class="sv-el sv-el-${el.status}" data-sv-id="${escapeHtml(el.id)}"><div class="sv-el-row"><b>Case ${escapeHtml(d.caseId)} \xB7 ${typeof d.totalDurationSeconds === "number" ? formatDuration(d.totalDurationSeconds) : "time not verifiable"}</b>${badge(el.status, "assembled by gateway")}</div>` + (el.status === "warning" && el.reason ? `<div class="sv-el-warn">${escapeHtml(el.reason)}</div>` : "") + (typeof d.totalDurationSeconds !== "number" ? `<div class="sv-el-warn">${escapeHtml(d.timeUnverifiableReason ?? "Case time not verifiable.")}</div>` : "") + `<div class="sv-tl">${stepHtml}</div></div>`;
-}
-function renderMetric(el) {
-  if (el.status === "unverifiable" || !el.data) return unverifiableCard(el);
-  const d = el.data;
-  const kind = String(d.kind ?? "");
-  const label = METRIC_LABELS[kind] ?? kind;
-  const display = formatMetricValue(kind, d.value);
-  return `<div class="sv-el sv-el-${el.status} sv-el-metric" data-sv-id="${escapeHtml(el.id)}"><div class="sv-big">${escapeHtml(display)}</div><div class="sv-el-row"><span>${escapeHtml(label)} (${escapeHtml(d.caseCount ?? 0)} case${d.caseCount === 1 ? "" : "s"})</span>${badge(el.status, "computed by gateway")}</div>` + (el.status === "warning" && el.reason ? `<div class="sv-el-warn">${escapeHtml(el.reason)}</div>` : "") + `</div>`;
-}
-function renderElement(el) {
-  switch (el.kind) {
-    case "sv-ticket":
-      return renderTicket(el);
-    case "sv-approval":
-      return renderApproval(el);
-    case "sv-mandate":
-      return renderMandate(el);
-    case "sv-record":
-      return renderRecord(el);
-    case "sv-case":
-      return renderCase(el);
-    case "sv-metric":
-      return renderMetric(el);
-    default:
-      return unverifiableCard(el);
-  }
-}
-var DRAWN_ELEMENT_STYLES = `
-.sv-el { border:1px solid #e5e5e5; border-radius:10px; padding:10px 12px; margin:10px 0; font:13px/1.5 system-ui, sans-serif; background:#fff; }
-.sv-el-unverifiable { outline:2px solid #b91c1c; outline-offset:2px; }
-.sv-el-verified, .sv-el-warning { outline:2px solid #15803d; outline-offset:2px; }
-.sv-el-row { display:flex; justify-content:space-between; gap:10px; flex-wrap:wrap; margin:2px 0; }
-.sv-el-reason, .sv-el-warn { color:#b45309; font-size:12px; margin-top:4px; }
-.sv-el-intent { color:#666; font-size:12px; margin-top:4px; }
-.sv-badge { display:inline-flex; gap:4px; font-size:10.5px; font-weight:600; padding:1px 7px; border-radius:999px; white-space:nowrap; }
-.sv-badge-ok { color:#15803d; background:#ecfdf3; }
-.sv-badge-warn { color:#b45309; background:#fff7e6; }
-.sv-badge-bad { color:#b91c1c; background:#fdecea; }
-.sv-big { font-size:24px; font-weight:700; }
-.sv-tl { display:flex; flex-wrap:wrap; gap:10px 16px; padding:6px 0; }
-.sv-step { min-width:100px; border:1px solid #e5e5e5; border-radius:8px; padding:6px 8px; font-size:11.5px; text-decoration:none; color:inherit; flex-shrink:0; }
-.sv-step-k { font-size:9.5px; text-transform:uppercase; color:#666; }
-.sv-step-t { font-weight:600; font-size:12px; }
-.sv-step-sub { color:#666; white-space:normal; }
-/* The approval step's text ("asked ... approved ... by ... (duration)") is
- * longer than a ticket step's \u2014 without a width to wrap against, a
- * flex item with flex-shrink:0 takes its one-line content width instead of
- * wrapping, which reads as the text being cut off at the container's visible
- * edge (polish 2026-10-05, second pass). */
-.sv-step-approval { max-width:240px; white-space:normal; }
-.sv-step-start { max-width:240px; white-space:normal; }
-@media (max-width: 480px) {
-  .sv-tl { flex-direction:column; overflow-x:visible; }
-  .sv-step { min-width:0; }
-  .sv-step-approval { max-width:none; }
-  .sv-step-start { max-width:none; }
-  .sv-el-row { flex-direction:column; gap:2px; }
-}
-`;
-var AI_ANALYSIS_LABEL = "AI analysis \u2014 not verified";
-var AI_LEGEND_TEXT = "Boxes with a green \u2713 are drawn and checked by the gateway, and each one is listed under \u201CChecked values\u201D. Everything else is the AI's own analysis and is not verified.";
-function aiLegendBanner() {
-  const box = "display:block !important;visibility:visible !important;opacity:1 !important;position:relative !important;transform:none !important;clip-path:none !important;filter:none !important;z-index:2147483647 !important;margin:0 0 12px 0 !important;padding:8px 12px !important;border:1px solid #d4d4d8 !important;border-left:4px solid #a1a1aa !important;border-radius:8px !important;background:#f4f4f5 !important;color:#3f3f46 !important;font:12.5px/1.45 system-ui, sans-serif !important;text-align:left !important;max-width:none !important;width:auto !important;height:auto !important;";
-  const strong = "display:inline !important;visibility:visible !important;font-weight:700 !important;color:#18181b !important;font-size:inherit !important;";
-  return `<div class="sv-ai-legend" role="note" style="${box}"><b style="${strong}">${escapeHtml(AI_ANALYSIS_LABEL)}.</b> ${escapeHtml(AI_LEGEND_TEXT)}</div>`;
-}
-function renderReportHtml(rawHtml, elements) {
-  const html = sanitizeReportHtml(rawHtml);
-  const byId = new Map(elements.map((e) => [e.id, e]));
-  const spans = findElementSpans(html);
-  let out = "";
-  let cursor = 0;
-  for (const span of spans) {
-    out += html.slice(cursor, span.start);
-    const el = byId.get(span.id) ?? { id: span.id, kind: span.kind, attrs: {}, status: "unverifiable", reason: "No verification result for this element." };
-    out += renderElement(el);
-    cursor = span.end;
-  }
-  out += html.slice(cursor);
-  const styleTag = `<style data-sv-drawn-styles="1">${DRAWN_ELEMENT_STYLES}</style>${aiLegendBanner()}`;
-  if (/<body[^>]*>/i.test(out)) {
-    return out.replace(/<body([^>]*)>/i, (m) => `${m}${styleTag}`);
-  }
-  return styleTag + out;
-}
-
 // src/lib/report/ticket-details.ts
+function withFields(fact, build) {
+  if (fact.status !== "verified" || !fact.data) return fact;
+  return { ...fact, data: { ...fact.data, fields: build(fact.data) } };
+}
 async function buildTicketDetails(archive, ticketIds) {
   const out = {};
   for (const id of ticketIds) {
@@ -6532,118 +6109,170 @@ async function buildTicketDetails(archive, ticketIds) {
       resolveApprovalElement(archive, id),
       resolveMandateElement(archive, id)
     ]);
-    out[id] = { ticket, approval, mandate };
+    out[id] = {
+      ticket: withFields(ticket, ticketFields),
+      approval: withFields(approval, approvalFields),
+      mandate: withFields(mandate, mandateFields)
+    };
   }
   return out;
 }
 
-// src/lib/report/export-report.ts
-function receiptId(receipt) {
-  return typeof receipt.id === "string" ? receipt.id : "";
-}
-function buildExportBundle(params) {
-  const { stored, archive, authorityServer, gatewayVersion, now = Math.floor(Date.now() / 1e3) } = params;
-  const proof = stored.result.proof;
-  const coverage = stored.result.coverage;
-  const ticketIdSet = /* @__PURE__ */ new Set([...proof.ticketsReferenced, ...coverage.ticketsInPeriod]);
-  const entries = archive.getReceipts().filter((r) => ticketIdSet.has(receiptId(r.receipt)));
-  const tickets = entries.map((r) => r.receipt);
-  const authorizationIds = new Set(entries.map((r) => r.authorizationId));
-  const authorizations = {};
-  for (const a of archive.getAuthorizations()) {
-    if (authorizationIds.has(a.authorizationId)) authorizations[a.authorizationId] = a;
+// src/lib/report/window.ts
+import { getProfile as getProfile6 } from "@hap/core";
+var REPORT_AGE_FIELD = "read_age_days";
+var REPORTING_PROFILE = "reporting";
+var END_SKEW_SECONDS = 120;
+var OLD_PROFILE_REFUSAL = "this reporting mandate is from an older profile version \u2014 create a new reporting mandate (reporting@0.2).";
+var DAY = 86400;
+function boundsOf(a) {
+  return a.bounds ?? a.frame;
+}
+function windowLabel(start, days, loadedAt) {
+  const since = `since ${formatDateTime(start)}`;
+  if (loadedAt !== null && loadedAt === start) return `${since} (when the test data was loaded)`;
+  return `${since} (the last ${days} ${days === 1 ? "day" : "days"})`;
+}
+var defaultLookup = (id) => getProfile6(id);
+function reportingMandateRefusal(m, lookup = defaultLookup) {
+  const schema = lookup(m.profileId)?.boundsSchema;
+  const field = resolveAgeBoundField(schema, REPORT_AGE_FIELD);
+  if (!field) return OLD_PROFILE_REFUSAL;
+  if (maxReadAgeDays([boundsOf(m)], field) === null) {
+    return `the reporting mandate does not set ${field} (the reporting window), so nothing can be shown \u2014 create a new reporting mandate.`;
   }
+  return void 0;
+}
+function resolveReportWindow(input) {
+  const lookup = input.lookupProfile ?? defaultLookup;
+  const mandates = input.authorizations.filter((a) => a.complete && profileMatches(a.profileId, REPORTING_PROFILE));
+  if (mandates.length === 0) {
+    return { ok: false, reason: "No active reporting mandate \u2014 the reporting window comes from it, so no evidence can be shown." };
+  }
+  const candidates = [];
+  const refusals = [];
+  for (const m of mandates) {
+    const refusal = reportingMandateRefusal(m, lookup);
+    if (refusal) {
+      refusals.push(refusal);
+      continue;
+    }
+    const schema = lookup(m.profileId)?.boundsSchema;
+    const field = resolveAgeBoundField(schema, REPORT_AGE_FIELD);
+    const declared = maxReadAgeDays([boundsOf(m)], field);
+    const def = schema?.fields?.[field] ?? {};
+    const maximum = typeof def.maximum === "number" && Number.isFinite(def.maximum) ? def.maximum : null;
+    const days = Math.max(0, maximum !== null ? Math.min(declared, maximum) : declared);
+    let start = input.now - days * DAY;
+    let clampedBy = null;
+    if (input.simulation && input.loadedAt !== null && input.loadedAt > start) {
+      start = input.loadedAt;
+      clampedBy = input.loadedAt;
+    }
+    candidates.push({ start, days, loadedAt: clampedBy });
+  }
+  if (candidates.length === 0) {
+    const reason = [...new Set(refusals)].join(" ");
+    return { ok: false, reason: reason.charAt(0).toUpperCase() + reason.slice(1) };
+  }
+  const best = candidates.reduce((a, b) => b.start < a.start ? b : a);
   return {
-    format: "suveren-report-export",
-    version: 1,
-    exportedAt: now,
-    gatewayVersion,
-    report: { html: stored.html, savedAt: stored.savedAt, checkedAt: stored.checkedAt },
-    proof,
-    coverage,
-    authorityServer,
-    tickets,
-    authorizations
+    ok: true,
+    window: {
+      start: best.start,
+      end: input.now,
+      days: best.days,
+      loadedAt: best.loadedAt,
+      label: windowLabel(best.start, best.days, best.loadedAt)
+    }
   };
 }
-function countLine(count, noneText = "none in this report") {
-  return count > 0 ? `${count} \u2713` : noneText;
-}
-function renderProofCoveragePanels(proof, coverage) {
-  const casesLine = coverage.emailExportError ? "unknown \u2014 the email simulator could not be read" : `${coverage.coveredCases.length} of ${coverage.loadedCases.length}`;
-  const periodNote = coverage.periodStart === null ? `<p class="sv-export-note">${coverage.emailExportError ? "Test period start unknown \u2014 the email simulator could not be read. All saved tickets were counted." : "Test period start unknown \u2014 all saved tickets were counted."}</p>` : "";
-  const missingParts = [];
-  if (coverage.missingCases.length > 0) missingParts.push(`cases ${coverage.missingCases.map(escapeHtml).join(", ")}`);
-  if (coverage.ticketsNotReferenced.length > 0) missingParts.push(`${coverage.ticketsNotReferenced.length} ticket${coverage.ticketsNotReferenced.length === 1 ? "" : "s"}`);
-  const missingLine = missingParts.length > 0 ? `<p class="sv-export-missing">Not in the report: ${missingParts.join(" \xB7 ")}</p>` : "";
-  const checkedValues = proof.verifiedValues.length > 0 ? `<div class="sv-export-card"><div class="sv-export-card-title">Checked values</div>${proof.verifiedValues.map((v) => `<div class="sv-export-row"><span>${escapeHtml(v.summary)}</span></div>`).join("")}</div>` : "";
-  return `<aside class="sv-export-side"><div class="sv-export-card"><div class="sv-export-card-title">Proof</div><div class="sv-export-row"><span>Tickets referenced</span><b>${proof.ticketsReferenced.length}</b></div><div class="sv-export-row"><span>Signatures valid</span><b>${escapeHtml(countLine(proof.signaturesValid))}</b></div><div class="sv-export-row"><span>Records checked</span><b>${escapeHtml(countLine(proof.recordsChecked))}</b></div><div class="sv-export-row"><span>Not verifiable</span><b>${proof.unverifiableCount}</b></div></div><div class="sv-export-card"><div class="sv-export-card-title">Coverage</div><div class="sv-export-row"><span>Cases</span><b>${casesLine}</b></div><div class="sv-export-row"><span>Tickets in test period</span><b>${coverage.ticketsReferenced.length} of ${coverage.ticketsInPeriod.length}</b></div>` + periodNote + missingLine + `</div>` + checkedValues + `</aside>`;
-}
-function ensureHtmlDocument(html) {
-  if (/<html[^>]*>/i.test(html)) return html;
-  return `<!doctype html><html><head><meta charset="utf-8"></head><body>${html}</body></html>`;
-}
-function injectIntoHead(html, insert) {
-  if (/<head[^>]*>/i.test(html)) return html.replace(/<head([^>]*)>/i, (m) => `${m}${insert}`);
-  if (/<html[^>]*>/i.test(html)) return html.replace(/<html([^>]*)>/i, (m) => `${m}<head>${insert}</head>`);
-  return `<head>${insert}</head>${html}`;
-}
-function injectAfterBodyOpen(html, insert) {
-  if (/<body[^>]*>/i.test(html)) return html.replace(/<body([^>]*)>/i, (m) => `${m}${insert}`);
-  return `${insert}${html}`;
-}
-function injectBeforeBodyClose(html, insert) {
-  if (/<\/body>/i.test(html)) return html.replace(/<\/body>/i, `${insert}</body>`);
-  return `${html}${insert}`;
-}
-var EXPORT_PAGE_STYLES = `
-.sv-export-header { font:13px/1.5 system-ui, sans-serif; background:#f6f6f4; border-bottom:1px solid #e5e5e5; padding:14px 20px; }
-.sv-export-meta { margin:0 0 6px 0; font-weight:600; }
-.sv-export-howto { margin:0; color:#444; }
-.sv-export-howto code { background:#eee; border-radius:4px; padding:1px 5px; font-size:12px; }
-.sv-export-layout { display:flex; gap:20px; align-items:flex-start; padding:20px; font:13px/1.5 system-ui, sans-serif; }
-.sv-export-main { flex:1 1 auto; min-width:0; }
-.sv-export-side { flex:0 0 260px; }
-.sv-export-card { border:1px solid #e5e5e5; border-radius:10px; padding:10px 12px; margin-bottom:12px; background:#fff; }
-.sv-export-card-title { font-weight:700; margin-bottom:6px; }
-.sv-export-row { display:flex; justify-content:space-between; gap:10px; margin:2px 0; }
-.sv-export-note, .sv-export-missing { color:#b45309; font-size:12px; margin:4px 0 0 0; }
-@media (max-width: 720px) {
-  .sv-export-layout { flex-direction:column; }
-  .sv-export-side { flex:1 1 auto; width:100%; }
-}
-`;
-function formatDateTimeWithYear(value) {
-  const base = formatDateTime(value);
-  const year = new Date(value * 1e3).getFullYear();
-  return base.replace(",", ` ${year},`);
-}
-function utcOffsetLabel(value) {
-  const offsetMin = -new Date(value * 1e3).getTimezoneOffset();
-  const sign = offsetMin >= 0 ? "+" : "-";
-  const abs = Math.abs(offsetMin);
-  const hh = Math.floor(abs / 60);
-  const mm = abs % 60;
-  return `UTC${sign}${hh}${mm ? ":" + String(mm).padStart(2, "0") : ""}`;
-}
-function buildExportDocument(params) {
-  const { bundle, renderedHtml } = params;
-  const exportedDate = new Date(bundle.exportedAt * 1e3).toISOString().slice(0, 10);
-  const exportedLabel = formatDateTimeWithYear(bundle.exportedAt);
-  const checkedLabel = formatDateTime(bundle.report.checkedAt);
-  const tzLabel = utcOffsetLabel(bundle.exportedAt);
-  const headerHtml = `<div class="sv-export-header"><p class="sv-export-meta">Suveren Gateway ${escapeHtml(bundle.gatewayVersion)} \u2014 exported ${escapeHtml(exportedLabel)} &middot; checked ${escapeHtml(checkedLabel)} (times in ${escapeHtml(tzLabel)})</p><p class="sv-export-howto">How to check this report: each ticket below links to its public record on suveren.ai ("Check on suveren.ai \u2197"). To verify this entire file offline (including every signature), run <code>suveren-gateway verify-report ${escapeHtml(suggestedFilename(bundle))}</code> from a terminal with the Suveren gateway CLI installed.</p><p class="sv-export-legend" role="note" style="display:block !important;visibility:visible !important;opacity:1 !important;margin:6px 0 0 0 !important;color:#3f3f46 !important;font:12.5px/1.45 system-ui, sans-serif !important;"><b style="display:inline !important;visibility:visible !important;color:#18181b !important;">${escapeHtml(AI_ANALYSIS_LABEL)}:</b> ${escapeHtml(AI_LEGEND_TEXT)}</p></div>`;
-  const proofScriptJson = JSON.stringify(bundle).replace(/<\//g, "<\\/");
-  const proofScript = `<script type="application/json" id="suveren-proof">${proofScriptJson}</script>`;
-  let doc = ensureHtmlDocument(renderedHtml);
-  doc = injectIntoHead(doc, `<meta charset="utf-8"><title>Suveren report export \u2014 ${escapeHtml(exportedDate)}</title><style>${DRAWN_ELEMENT_STYLES}${EXPORT_PAGE_STYLES}</style>`);
-  doc = injectAfterBodyOpen(doc, headerHtml + `<div class="sv-export-layout"><div class="sv-export-main">`);
-  doc = injectBeforeBodyClose(doc, `</div>${renderProofCoveragePanels(bundle.proof, bundle.coverage)}</div>${proofScript}`);
-  return doc;
-}
-function suggestedFilename(bundle) {
-  const date = new Date(bundle.exportedAt * 1e3).toISOString().slice(0, 10);
-  return `suveren-report-${date}.html`;
+function isInWindow(time, window) {
+  return time !== void 0 && Number.isFinite(time) && time >= window.start && time <= window.end + END_SKEW_SECONDS;
+}
+function ticketTime(entry) {
+  const t = entry.receipt.timestamp;
+  return typeof t === "number" && Number.isFinite(t) ? t : void 0;
+}
+var OUTSIDE_WINDOW_PREFIX = "not verifiable \u2014 outside the reporting window";
+function windowArchive(base, window) {
+  const inWindow = (r) => isInWindow(ticketTime(r), window);
+  return {
+    getReceipts() {
+      return base.getReceipts().filter(inWindow);
+    },
+    getAuthorizations() {
+      const used = new Set(base.getReceipts().filter(inWindow).map((r) => r.authorizationId));
+      return base.getAuthorizations().filter((a) => used.has(a.authorizationId));
+    },
+    outsideWindowReason(ticketId) {
+      const entry = base.getReceipts().find((r) => r.receipt.id === ticketId);
+      if (!entry || inWindow(entry)) return void 0;
+      return `${OUTSIDE_WINDOW_PREFIX} (${window.label}).`;
+    }
+  };
+}
+var RECORD_TIME_COLUMNS = ["received_at", "created_at", "at", "date"];
+function recordTime(row, loadedAt, ticketTimes) {
+  if (!row || typeof row !== "object") return void 0;
+  const r = row;
+  if (typeof r.receipt_id === "string" && ticketTimes.has(r.receipt_id)) return ticketTimes.get(r.receipt_id);
+  for (const col of RECORD_TIME_COLUMNS) {
+    const t = parseTimestampSeconds(r[col]);
+    if (t !== void 0) {
+      return loadedAt !== null ? Math.max(t, loadedAt) : t;
+    }
+  }
+  return void 0;
+}
+function windowExport(exported, window, loadedAt, ticketTimes = /* @__PURE__ */ new Map()) {
+  if (!exported || typeof exported !== "object" || Array.isArray(exported)) return exported;
+  const out = {};
+  for (const [key, value] of Object.entries(exported)) {
+    out[key] = Array.isArray(value) ? value.filter((row) => isInWindow(recordTime(row, loadedAt, ticketTimes), window)) : value;
+  }
+  return out;
+}
+async function readLoadedAt(runExport) {
+  try {
+    const exp = await runExport("email");
+    if (!isEmailExport(exp)) return null;
+    return parseTimestampSeconds(exp.simulation_load?.loaded_at) ?? null;
+  } catch {
+    return null;
+  }
+}
+async function scopeReportSources(base, opts) {
+  const now = opts.now ?? Math.floor(Date.now() / 1e3);
+  const hasReporting = opts.authorizations.some((a) => a.complete && profileMatches(a.profileId, REPORTING_PROFILE));
+  const loadedAt = hasReporting && opts.simulation ? await readLoadedAt(base.runExport) : null;
+  const resolved = resolveReportWindow({
+    authorizations: opts.authorizations,
+    simulation: opts.simulation,
+    loadedAt,
+    now,
+    lookupProfile: opts.lookupProfile
+  });
+  if (!resolved.ok) return resolved;
+  return { ok: true, window: resolved.window, sources: scopedSources(base, resolved.window, loadedAt) };
+}
+function scopedSources(base, window, loadedAt) {
+  const runExport = async (system) => {
+    const ticketTimes = /* @__PURE__ */ new Map();
+    for (const r of base.archive.getReceipts()) {
+      const id = r.receipt.id;
+      const t = ticketTime(r);
+      if (typeof id === "string" && t !== void 0) ticketTimes.set(id, t);
+    }
+    return windowExport(await base.runExport(system), window, loadedAt, ticketTimes);
+  };
+  return { archive: windowArchive(base.archive, window), runExport, window };
+}
+async function scopeReportSourcesToStoredWindow(base, stored, opts) {
+  const now = opts.now ?? Math.floor(Date.now() / 1e3);
+  const loadedAt = opts.simulation ? await readLoadedAt(base.runExport) : null;
+  const window = { start: stored.start, end: now, days: stored.days, loadedAt: null, label: stored.label };
+  return { ok: true, window, sources: scopedSources(base, window, loadedAt) };
 }
 
 // src/lib/profile-loader.ts
@@ -6714,10 +6343,19 @@ var CRM_RECORD_KINDS = ["contacts", "deals", "tasks", "activities", "changes", "
 function errorText(text) {
   return { content: [{ type: "text", text }], isError: true };
 }
+function scope(deps) {
+  return scopeReportSources(deps.reportSources, {
+    authorizations: deps.state.getEnrichedAuthorizations(),
+    simulation: isSimulationMode()
+  });
+}
+function windowInfo(w) {
+  return { since: w.label, start: w.start, end: w.end };
+}
 function listTicketsTool(deps) {
   return {
     name: "list_tickets",
-    description: "List tickets (signed executions) from the local receipt archive: id, time, action, action type, profile, authorizationId, the limits used, and whether an approval was archived for it. Optionally filter by since/until (unix seconds). Use the ids with get_ticket for full detail, and with <sv-ticket>, <sv-approval>, <sv-mandate> and <sv-case> in the report.",
+    description: "List tickets (signed executions) from the local receipt archive inside your reporting window (the number of days back your reporting mandate allows): id, time, action, action type, profile, the limits used, and whether an approval was archived for it. Older tickets are not shown and cannot be used in the report. Optionally narrow further by since/until (unix seconds). Use the ids with get_ticket for full detail, and with <sv-ticket>, <sv-approval>, <sv-mandate> and <sv-case> in the report.",
     inputSchema: {
       type: "object",
       properties: {
@@ -6726,30 +6364,22 @@ function listTicketsTool(deps) {
       }
     },
     handler: async (args) => {
+      const scoped = await scope(deps);
+      if (!scoped.ok) return errorText(scoped.reason);
       const since = typeof args.since === "number" ? args.since : void 0;
       const until = typeof args.until === "number" ? args.until : void 0;
-      const tickets = deps.reportSources.archive.getReceipts().map((entry) => {
+      const tickets = scoped.sources.archive.getReceipts().map((entry) => {
         const r = entry.receipt;
-        const time = typeof r.timestamp === "number" ? r.timestamp : void 0;
-        return {
-          id: typeof r.id === "string" ? r.id : String(r.id ?? ""),
-          time,
-          action: r.action,
-          actionType: r.actionType ?? null,
-          profile: r.profileId,
-          authorizationId: r.authorizationId,
-          limitsUsed: r.limits ?? r.executionContext ?? {},
-          hasApproval: Boolean(entry.proposal)
-        };
-      }).filter((t) => t.id !== "").filter((t) => since === void 0 || t.time !== void 0 && t.time >= since).filter((t) => until === void 0 || t.time !== void 0 && t.time <= until).sort((a, b) => (a.time ?? 0) - (b.time ?? 0));
-      return builtinText(JSON.stringify({ tickets }, null, 2));
+        return agentTicketRow(r, Boolean(entry.proposal), profileShortLabel(typeof r.profileId === "string" ? r.profileId : void 0));
+      }).filter((t) => t.id !== "").filter((t) => since === void 0 || typeof t.time === "number" && t.time >= since).filter((t) => until === void 0 || typeof t.time === "number" && t.time <= until).sort((a, b) => (a.time ?? 0) - (b.time ?? 0));
+      return builtinText(JSON.stringify({ window: windowInfo(scoped.window), tickets }, null, 2));
     }
   };
 }
 function getTicketTool(deps) {
   return {
     name: "get_ticket",
-    description: 'Full detail for one ticket: the ticket itself (action, time, limits used, public-check link), its archived approval (who approved it, when it was requested and decided, how long it waited), and the mandate it ran under (limits, commitment mode, intent). Each part reports "unverifiable" on its own if it could not be checked \u2014 e.g. an automatic-mode ticket has no approval. Use this to decide what a ticket actually proves before referencing it in the report.',
+    description: 'Full detail for one ticket: the ticket itself (action, time, limits used, public-check link), its archived approval (who approved it, when it was requested and decided, how long it waited), and the mandate it ran under (limits, commitment mode, intent). Each part reports "unverifiable" on its own if it could not be checked \u2014 e.g. an automatic-mode ticket has no approval. Only tickets inside your reporting window can be opened. Use this to decide what a ticket actually proves before referencing it in the report.',
     inputSchema: {
       type: "object",
       properties: { id: { type: "string", description: "The ticket id, as listed by list_tickets." } },
@@ -6758,15 +6388,17 @@ function getTicketTool(deps) {
     handler: async (args) => {
       const id = typeof args.id === "string" ? args.id.trim() : "";
       if (!id) return errorText("id is required.");
-      const details = await buildTicketDetails(deps.reportSources.archive, [id]);
+      const scoped = await scope(deps);
+      if (!scoped.ok) return errorText(scoped.reason);
+      const details = await buildTicketDetails(scoped.sources.archive, [id]);
       const detail = details[id];
       if (!detail || detail.ticket.status !== "verified") {
         return errorText(detail?.ticket.reason ?? `No ticket "${id}" in the local archive.`);
       }
       return builtinText(JSON.stringify({
-        ticket: detail.ticket.data,
-        approval: detail.approval.status === "verified" ? { verified: true, ...detail.approval.data } : { verified: false, reason: detail.approval.reason },
-        mandate: detail.mandate.status === "verified" ? { verified: true, ...detail.mandate.data } : { verified: false, reason: detail.mandate.reason }
+        ticket: agentTicket(detail.ticket.data),
+        approval: detail.approval.status === "verified" ? { verified: true, ...agentApproval(detail.approval.data) } : { verified: false, reason: detail.approval.reason },
+        mandate: detail.mandate.status === "verified" ? { verified: true, ...agentMandate(detail.mandate.data) } : { verified: false, reason: detail.mandate.reason }
       }, null, 2));
     }
   };
@@ -6774,12 +6406,14 @@ function getTicketTool(deps) {
 function listCasesTool(deps) {
   return {
     name: "list_cases",
-    description: "Loaded business cases from the connected email system, plus every sent mail \u2014 so you can define sv-case elements without guessing ids. Returns: when the test data was loaded (testDataLoadedAt); cases (caseId, the starting inbox message id, sender, subject, received time); and sent mails (id, inReplyTo, the receiptId of the ticket that sent it, subject, sentAt) so you can confirm which ticket closed which case. Never includes the team's own reference replies \u2014 those are not part of this report.",
+    description: "Loaded business cases from the connected email system, plus every sent mail \u2014 so you can define sv-case elements without guessing ids. Returns: when the test data was loaded (testDataLoadedAt); cases (caseId, the starting inbox message id, sender, subject, received time); and sent mails (id, inReplyTo, the receiptId of the ticket that sent it, subject, sentAt) so you can confirm which ticket closed which case. Only records inside your reporting window. Never includes the team's own reference replies \u2014 those are not part of this report.",
     inputSchema: { type: "object", properties: {} },
     handler: async () => {
+      const scoped = await scope(deps);
+      if (!scoped.ok) return errorText(scoped.reason);
       let exported;
       try {
-        exported = await deps.reportSources.runExport("email");
+        exported = await scoped.sources.runExport("email");
       } catch (err) {
         return errorText(`Could not read email records: ${err instanceof Error ? err.message : String(err)}`);
       }
@@ -6800,6 +6434,7 @@ function listCasesTool(deps) {
         sentAt: m.received_at
       }));
       return builtinText(JSON.stringify({
+        window: windowInfo(scoped.window),
         testDataLoadedAt: exp.simulation_load?.loaded_at ?? null,
         cases,
         sent
@@ -6815,7 +6450,7 @@ function recordKindsFor(system) {
 function getRecordsTool(deps) {
   return {
     name: "get_records",
-    description: `Rows from one connected system (email, erp or crm) that you may reference with <sv-record system="..." ref="...">. Optionally narrow to one table via "kind" (email: inbox/sent/changes/refusals; erp: quotes/orders/changes/refusals; crm: contacts/deals/tasks/activities/changes/refusals) \u2014 omit it to get every table for that system. Never returns the team's own reference replies.`,
+    description: `Rows from one connected system (email, erp or crm) that you may reference with <sv-record system="..." ref="...">. Optionally narrow to one table via "kind" (email: inbox/sent/changes/refusals; erp: quotes/orders/changes/refusals; crm: contacts/deals/tasks/activities/changes/refusals) \u2014 omit it to get every table for that system. Only rows inside your reporting window. Never returns the team's own reference replies.`,
     inputSchema: {
       type: "object",
       properties: {
@@ -6829,9 +6464,11 @@ function getRecordsTool(deps) {
       if (system !== "email" && system !== "erp" && system !== "crm") {
         return errorText('system must be one of "email", "erp", "crm".');
       }
+      const scoped = await scope(deps);
+      if (!scoped.ok) return errorText(scoped.reason);
       let exported;
       try {
-        exported = await deps.reportSources.runExport(system);
+        exported = await scoped.sources.runExport(system);
       } catch (err) {
         return errorText(`Could not read ${system} records: ${err instanceof Error ? err.message : String(err)}`);
       }
@@ -6848,11 +6485,11 @@ function getRecordsTool(deps) {
       for (const kind of kinds) {
         records[kind] = exp[kind] ?? [];
       }
-      return builtinText(JSON.stringify({ system, records }, null, 2));
+      return builtinText(JSON.stringify({ system, window: windowInfo(scoped.window), records }, null, 2));
     }
   };
 }
-function summarizeWrite(result) {
+function summarizeWrite(result, rawHtml) {
   const verified = result.elements.filter((e) => e.status === "verified");
   const warnings = result.elements.filter((e) => e.status === "warning");
   const unverifiable = result.elements.filter((e) => e.status === "unverifiable");
@@ -6868,7 +6505,20 @@ function summarizeWrite(result) {
     lines.push("Not verifiable \u2014 fix these references and write again:");
     for (const u of unverifiable) lines.push(`  - ${u.kind} (${u.id}): ${u.reason ?? "unspecified"}`);
   }
+  const n = result.sanitizeNotes;
+  if (n) {
+    if (n.droppedBlocks > 0) lines.push(`dropped: ${n.droppedBlocks} block(s) outside sv-ai \u2014 put your own content inside <sv-ai>\u2026</sv-ai>; only gateway elements, sv-row and one sv-glossary may stand outside it.`);
+    if (n.droppedSvInsideAi > 0) lines.push(`dropped: ${n.droppedSvInsideAi} sv-* element(s) inside sv-ai \u2014 place gateway elements outside sv-ai blocks.`);
+    if (n.droppedStyles > 0) lines.push(`dropped: ${n.droppedStyles} <style> block(s) \u2014 use inline style="\u2026" attributes inside sv-ai.`);
+    if (n.extraGlossaries > 0) lines.push(`dropped: ${n.extraGlossaries} extra sv-glossary \u2014 one per report.`);
+  }
+  const g = glossaryUsage(rawHtml, result.elements);
+  if (g) {
+    lines.push(`Glossary: ${g.applied.length} term(s) shown as translation (when the reader switches it on).`);
+    for (const r of g.rejected) lines.push(`  - ignored "${r.key}": ${r.reason}`);
+  }
   const cov = result.coverage;
+  if (cov.window) lines.push(`Reporting window: ${cov.window.label}. Evidence from before it is not verifiable in this report.`);
   if (cov.emailExportError) {
     lines.push(`Coverage could not be checked: ${cov.emailExportError}`);
   } else {
@@ -6903,9 +6553,15 @@ function writeReportTool(deps) {
       },
       required: ["html"]
     },
-    // Empty/oversize html is refused here, BEFORE the gate requests a ticket
-    // (precheckBuiltin) — a refused write must not consume report_daily_max.
-    validate: writeReportRefusal,
+    // Empty/oversize html, or no reporting window to check it against, is
+    // refused here, BEFORE the gate requests a ticket (precheckBuiltin) — a
+    // refused write must not consume report_daily_max.
+    validate: async (args) => {
+      const refusal = writeReportRefusal(args);
+      if (refusal) return refusal;
+      const scoped = await scope(deps);
+      return scoped.ok ? void 0 : scoped.reason;
+    },
     handler: async (args) => {
       const refusal = writeReportRefusal(args);
       if (refusal) return errorText(`Refused: ${refusal}`);
@@ -6913,9 +6569,11 @@ function writeReportTool(deps) {
       if (deps.state.reportStore.isLocked()) {
         return errorText("The report store is locked (the vault is not unlocked) \u2014 cannot save a report right now.");
       }
+      const scoped = await scope(deps);
+      if (!scoped.ok) return errorText(`Refused: ${scoped.reason}`);
       try {
-        const stored = await deps.state.reportStore.saveReport(html, deps.reportSources);
-        return builtinText(summarizeWrite(stored.result));
+        const stored = await deps.state.reportStore.saveReport(html, scoped.sources);
+        return builtinText(summarizeWrite(stored.result, html));
       } catch (err) {
         return errorText(`Could not verify and store the report: ${err instanceof Error ? err.message : String(err)}`);
       }
@@ -6932,6 +6590,11 @@ var reportBuiltin = (deps) => ({
   // read-only export CLI; writes only the local, vault-encrypted report file)
   // — safe during a simulation-mode test.
   simulation: true,
+  // The same predicate the reporting window uses to refuse a mandate
+  // (reporting@0.1, or no window set): the gate never selects such a mandate
+  // for ANY report tool — so write_report is never ticketed under (and never
+  // charges report_daily_max of) a mandate every read tool refuses (RR7).
+  mandateRefusal: (auth) => reportingMandateRefusal(auth),
   toolGating: {
     overrides: {
       list_tickets: READ_GATE,
@@ -7767,12 +7430,36 @@ app.get("/internal/evidence", internalOnly, (_req, res) => {
     gates: state.gateStore.getAll()
   });
 });
-async function reportResponsePayload(stored) {
-  const ticketDetails = await buildTicketDetails(state.receiptArchive, stored.result.proof.ticketsReferenced);
+function reportScope() {
+  return scopeReportSources(reportSources, {
+    authorizations: state.getEnrichedAuthorizations(),
+    simulation: isSimulationMode()
+  });
+}
+function storedReportScope(stored) {
+  const w = stored?.result.coverage.window;
+  if (w) return scopeReportSourcesToStoredWindow(reportSources, w, { simulation: isSimulationMode() });
+  return reportScope();
+}
+async function reportResponsePayload(stored, archive) {
+  let detailArchive = state.receiptArchive;
+  if (archive) {
+    detailArchive = archive;
+  } else {
+    const scoped = await storedReportScope(stored);
+    if (scoped.ok) detailArchive = scoped.sources.archive;
+  }
+  const ticketDetails = await buildTicketDetails(detailArchive, stored.result.proof.ticketsReferenced);
+  const glossary = glossaryUsage(stored.result.html, stored.result.elements);
+  const dropped = sanitizeReport(stored.html).notes;
+  const notShown = dropped.droppedBlocks + dropped.droppedSvInsideAi + dropped.droppedStyles;
   return {
     savedAt: stored.savedAt,
     checkedAt: stored.checkedAt,
     renderedHtml: renderReportHtml(stored.result.html, stored.result.elements),
+    ...glossary && glossary.applied.length > 0 ? { renderedHtmlGloss: renderReportHtml(stored.result.html, stored.result.elements, { gloss: "on" }) } : {},
+    ...glossary ? { glossary } : {},
+    ...notShown > 0 ? { formatNotice: { blocksNotShown: notShown } } : {},
     proof: stored.result.proof,
     coverage: stored.result.coverage,
     elements: stored.result.elements,
@@ -7801,9 +7488,14 @@ app.post("/internal/report", internalOnly, async (req, res) => {
     res.status(400).json({ error: "Missing required field: html (non-empty string)" });
     return;
   }
+  const scoped = await reportScope();
+  if (!scoped.ok) {
+    res.status(409).json({ error: scoped.reason });
+    return;
+  }
   try {
-    const stored = await state.reportStore.saveReport(html, reportSources);
-    res.json({ report: await reportResponsePayload(stored) });
+    const stored = await state.reportStore.saveReport(html, scoped.sources);
+    res.json({ report: await reportResponsePayload(stored, scoped.sources.archive) });
   } catch (err) {
     console.error("[Suveren MCP] /internal/report save failed:", err);
     res.status(500).json({ error: err instanceof Error ? err.message : "Report verification failed" });
@@ -7814,13 +7506,23 @@ app.post("/internal/report/recheck", internalOnly, async (_req, res) => {
     res.status(503).json({ error: "Vault locked \u2014 cannot recheck until sign-in." });
     return;
   }
+  const current = state.reportStore.getReport();
+  if (!current) {
+    res.json({ report: null });
+    return;
+  }
+  const scoped = await storedReportScope(current);
+  if (!scoped.ok) {
+    res.status(409).json({ error: scoped.reason });
+    return;
+  }
   try {
-    const stored = await state.reportStore.recheck(reportSources);
+    const stored = await state.reportStore.recheck(scoped.sources);
     if (!stored) {
       res.json({ report: null });
       return;
     }
-    res.json({ report: await reportResponsePayload(stored) });
+    res.json({ report: await reportResponsePayload(stored, scoped.sources.archive) });
   } catch (err) {
     console.error("[Suveren MCP] /internal/report/recheck failed:", err);
     res.status(500).json({ error: err instanceof Error ? err.message : "Recheck failed" });
@@ -7838,9 +7540,19 @@ app.get("/internal/report/export", internalOnly, async (req, res) => {
     res.status(503).json({ error: "Vault locked \u2014 the report is encrypted until sign-in." });
     return;
   }
+  const current = state.reportStore.getReport();
+  if (!current) {
+    res.status(404).json({ error: "No report to export yet \u2014 the AI writes it with the Reporting mandate." });
+    return;
+  }
+  const scoped = await storedReportScope(current);
+  if (!scoped.ok) {
+    res.status(409).json({ error: scoped.reason });
+    return;
+  }
   let stored;
   try {
-    stored = await state.reportStore.recheck(reportSources);
+    stored = await state.reportStore.recheck(scoped.sources);
   } catch (err) {
     console.error("[Suveren MCP] /internal/report/export recheck failed:", err);
     res.status(500).json({ error: err instanceof Error ? err.message : "Recheck failed" });
@@ -7860,12 +7572,11 @@ app.get("/internal/report/export", internalOnly, async (req, res) => {
   const gatewayVersion = typeof req.query.gatewayVersion === "string" ? req.query.gatewayVersion : "unknown";
   const bundle = buildExportBundle({
     stored,
-    archive: state.receiptArchive,
+    archive: scoped.sources.archive,
     authorityServer,
     gatewayVersion
   });
-  const renderedHtml = renderReportHtml(stored.result.html, stored.result.elements);
-  const document = buildExportDocument({ bundle, renderedHtml });
+  const document = buildExportDocument({ bundle });
   res.setHeader("Content-Type", "text/html; charset=utf-8").setHeader("Content-Disposition", `attachment; filename="${suggestedFilename(bundle)}"`).setHeader("Cache-Control", "no-store").send(document);
 });
 app.get("/internal/brief", internalOnly, (_req, res) => {