@suveren/gateway 0.18.2 → 0.19.1

package/README.md

@@ -142,7 +142,22 @@ For laptops managed by a company's IT: no admin rights, no Node.js and no access
 
 **The installer is not signed by us.** IT checks where it comes from (`sha256sum -c SHA256SUMS` and `gh attestation verify <file> -R suverenai/suveren-gateway`, which shows the exact commit it was built from), signs it, and distributes it, e.g. with Intune. IT can preset the Authority Server, simulation mode, proxy and certificate centrally; the employee cannot change them, and updates come from IT. Step by step: [Windows IT guide](docs/windows-it-guide.md) · settings: [Managed settings](docs/managed-settings.md).
 
-Open `http://localhost:3400` (Start menu: *Suveren Gateway*). The MCP server is at `http://localhost:3430`.
+Open `http://localhost:3400` (Start menu: *Suveren Gateway*). The MCP server is at `http://localhost:3430`. Other ports or another data folder: `msiexec /i suveren-gateway.msi PORT=3500 MCP_PORT=3530 DATA_DIR="D:\Suveren"`, or the "Gateway settings" page of a double-click install — see the [IT guide](docs/windows-it-guide.md#port-and-data-folder-optional).
+
+### Ports and data folder
+
+npm and the Windows installer default to port 3400 (app), 3430 (AI assistants) and the data folder `~/.suveren`. To change them for good — kept across restarts, upgrades and autostart:
+
+```bash
+suveren-gateway stop                          # if you started it with --detach
+suveren-gateway config set port 3500
+suveren-gateway config set mcp-port 3530
+suveren-gateway config set data-dir /Volumes/Data/suveren
+suveren-gateway config get                    # shows each value and where it comes from
+suveren-gateway config unset port             # back to the default
+```
+
+Changing the data folder **does not move** existing data — copy the old folder yourself first if you want to keep it. After changing `mcp-port`, update the MCP address in every AI assistant you connected. Environment variables (`SUVEREN_CP_PORT`, `SUVEREN_MCP_PORT`, `SUVEREN_DATA_DIR`) still win over saved values; IT policy wins over both ([Managed settings](docs/managed-settings.md)).
 
 ### Connecting an MCP client
 

package/bin/suveren-gateway.js

@@ -12,7 +12,7 @@
 
 import { spawn, spawnSync } from 'node:child_process';
 import { createConnection } from 'node:net';
-import { existsSync, mkdirSync, openSync, readFileSync, writeFileSync, unlinkSync, statSync } from 'node:fs';
+import { existsSync, mkdirSync, openSync, readFileSync, readdirSync, writeFileSync, unlinkSync, statSync } from 'node:fs';
 import { homedir, platform, userInfo } from 'node:os';
 import { dirname, join, resolve } from 'node:path';
 import { fileURLToPath, pathToFileURL } from 'node:url';
@@ -22,6 +22,7 @@ import { createInterface } from 'node:readline/promises';
 import { readPairing as readAsPairing, recordTlsPin, formatFingerprint, normalizeFingerprint } from '../lib/as-pairing.mjs';
 import { unsupportedNodeReason } from '../lib/node-version.mjs';
 import { readPolicy, isPolicyLocked } from '../lib/policy.mjs';
+import { resolveInstallSettings, describeSource, installSettingsLocation, validatePort, validateDataDir, writeInstallSettings } from '../lib/install-settings.mjs';
 
 // Before any command: on an unsupported Node the connectors cannot run (see
 // lib/node-version.mjs), so refuse with the reason instead of starting.
@@ -35,11 +36,29 @@ const __dirname = dirname(fileURLToPath(import.meta.url));
 const PKG_ROOT = resolve(__dirname, '..');
 const SERVER_ENTRY = join(PKG_ROOT, 'server.js');
 
-const DATA_DIR = process.env.SUVEREN_DATA_DIR ?? join(homedir(), '.suveren');
+// Ports + data folder: IT policy > env > saved install setting > default
+// (lib/install-settings.mjs — the same resolver server.js uses, so the CLI
+// and the running gateway always agree). An invalid value stops every
+// command except `config` and `help`, which stay usable so the person can
+// see and fix it.
+const COMMAND = process.argv[2] ?? 'help';
+const TOLERANT = ['config', 'help', '--help', '-h'].includes(COMMAND);
+let INSTALL;
+try {
+  INSTALL = resolveInstallSettings({ tolerant: TOLERANT });
+} catch (err) {
+  console.error(err instanceof Error ? err.message : String(err));
+  console.error('Fix it with `suveren-gateway config set …` — see `suveren-gateway config help`.');
+  process.exit(1);
+}
+for (const warning of INSTALL.errors) console.error(`Warning: ${warning}`);
+
+const DATA_DIR = INSTALL.dataDir;
 const PID_FILE = join(DATA_DIR, 'gateway.pid');
 const LOG_FILE = join(DATA_DIR, 'gateway.log');
 
-const SUVEREN_PORT = process.env.SUVEREN_CP_PORT ?? '3400';
+const SUVEREN_PORT = String(INSTALL.cpPort);
+const MCP_PORT = String(INSTALL.mcpPort);
 
 /** Version of THIS CLI (the binary on disk). Compared against the
  *  running gateway's version inside `status` so users see a mismatch
@@ -267,11 +286,21 @@ async function start(args) {
       console.error(`another terminal, which leaves no PID file for this CLI to find.`);
       console.error(``);
       console.error(`  Check what it is:      suveren-gateway status`);
-      console.error(`  Or use another port:   SUVEREN_CP_PORT=3410 suveren-gateway start`);
+      console.error(`  Or use another port:   suveren-gateway config set port 3410`);
     }
     process.exit(1);
   }
 
+  // The MCP port too: before this check, a taken MCP port let the gateway
+  // "start", then its MCP server died on EADDRINUSE and took the rest down
+  // with it — reported only in the log.
+  if (await isPortListening(MCP_PORT)) {
+    console.error(`Port ${MCP_PORT} (for AI assistants, MCP) is already in use.`);
+    console.error(``);
+    console.error(`  Use another port:   suveren-gateway config set mcp-port 3440`);
+    process.exit(1);
+  }
+
   ensureDataDir();
 
   // NOW save — a start we know is actually going to happen. Also override
@@ -543,15 +572,26 @@ function printConfigHelp() {
   console.log(`suveren-gateway config — read or save gateway settings
 
 Usage:
-  suveren-gateway config get [as-url|ca-file|pin-tls|proxy]  Print the resolved value(s)
+  suveren-gateway config get [as-url|ca-file|pin-tls|proxy|port|mcp-port|data-dir]
+                                                        Print the resolved value(s)
   suveren-gateway config set as-url <url>              Save the Authority Server URL
   suveren-gateway config set ca-file <path>            Save a CA bundle for internal TLS
   suveren-gateway config set pin-tls on --expect-fingerprint <sha256-hex>
                                                         Pin the Authority Server's TLS certificate
   suveren-gateway config set pin-tls off               Stop enforcing the TLS certificate pin
   suveren-gateway config set proxy <url>               Save an HTTP(S) proxy (http(s)://host:port)
-
-Saved in ${join(DATA_DIR, 'config.json')}.
+  suveren-gateway config set port <port>               Port for the gateway app in the browser (default 3400)
+  suveren-gateway config set mcp-port <port>           Port AI assistants connect to (default 3430)
+  suveren-gateway config set data-dir <folder>         Folder for the vault, mandates and logs (default ~/.suveren)
+  suveren-gateway config unset port|mcp-port|data-dir  Back to the default
+
+Saved in ${join(DATA_DIR, 'config.json')} — except port, mcp-port and
+data-dir, which live outside the data folder, in ${installSettingsLocation()}.
+They are kept across restarts and autostart. Ports must be 1024–65535 and
+differ from each other; the data folder must be a full path. Changing the
+data folder does NOT move existing data. Precedence: IT policy > env var
+(SUVEREN_CP_PORT / SUVEREN_MCP_PORT / SUVEREN_DATA_DIR) > saved > default.
+Stop a gateway started with --detach before changing them.
 Precedence at start: IT policy > --as-url flag > env SUVEREN_AS_URL > saved
 as-url > default (${DEFAULT_AS_URL}).
 
@@ -631,6 +671,106 @@ function refuseIfLockedByPolicy(key, humanName, display) {
   process.exit(1);
 }
 
+// ─── config: ports + data folder (lib/install-settings.mjs) ─────────────
+
+/** `config` key → resolved-settings field, policy key and env var. */
+const INSTALL_KEYS = {
+  port: { field: 'cpPort', policyKey: 'port', env: 'SUVEREN_CP_PORT', name: 'The gateway port' },
+  'mcp-port': { field: 'mcpPort', policyKey: 'mcpPort', env: 'SUVEREN_MCP_PORT', name: 'The MCP port' },
+  'data-dir': { field: 'dataDir', policyKey: 'dataDir', env: 'SUVEREN_DATA_DIR', name: 'The data folder' },
+};
+
+/**
+ * `config set port|mcp-port|data-dir <value>` and `config unset <key>`
+ * (`value` null). Saved outside the data folder — see install-settings.mjs.
+ */
+async function setInstallSetting(key, value) {
+  const { field, policyKey, env, name } = INSTALL_KEYS[key];
+  refuseIfLockedByPolicy(policyKey, key);
+  const clearing = value === null;
+
+  let next;
+  if (!clearing) {
+    if (!value) {
+      console.error(`Usage: suveren-gateway config set ${key} <${key === 'data-dir' ? 'folder' : 'port'}>`);
+      process.exit(2);
+    }
+    const v = field === 'dataDir' ? validateDataDir(value) : validatePort(value);
+    if (!v.ok) {
+      console.error(`Invalid ${key}: ${v.error}`);
+      process.exit(1);
+    }
+    next = field === 'dataDir' ? v.path : v.port;
+    const other = field === 'cpPort' ? 'mcpPort' : field === 'mcpPort' ? 'cpPort' : null;
+    if (other && INSTALL[other] === next) {
+      console.error(`Invalid ${key}: ${next} is already the ${other === 'cpPort' ? 'gateway port' : 'MCP port'} — the two must differ.`);
+      process.exit(1);
+    }
+  }
+
+  // A gateway this CLI started with --detach keeps its PID file in the
+  // CURRENT data folder and listens on the CURRENT ports. Changing either
+  // underneath it leaves `stop`/`restart` unable to find it, and a second
+  // gateway fighting it for the port. Stop first. (A login-service gateway
+  // is fine: `restart` finds that one through the service manager.)
+  if (await isAlreadyRunning()) {
+    console.error(`The gateway is running (pid ${readPid()}). Stop it first, then change ${key}:`);
+    console.error('  suveren-gateway stop');
+    process.exit(1);
+  }
+
+  try {
+    writeInstallSettings({ [field]: clearing ? null : next });
+  } catch (err) {
+    console.error(err instanceof Error ? err.message : String(err));
+    process.exit(1);
+  }
+
+  const shown = clearing ? `back to the default` : `${next}`;
+  console.log(`Saved ${key}: ${shown}  (in ${installSettingsLocation()})`);
+
+  if (process.env[env]) {
+    console.log(``);
+    console.log(`  Note: ${env} is set in this shell (${process.env[env]}) and wins over the saved value.`);
+  }
+
+  if (field === 'mcpPort') {
+    const port = clearing ? 3430 : next;
+    console.log(``);
+    console.log(`  AI assistants connect to the new address from the next start:`);
+    console.log(`    http://localhost:${port}/mcp   (SSE: http://localhost:${port}/sse)`);
+    console.log(`  Update the MCP settings of every assistant you connected before.`);
+  }
+
+  if (field === 'dataDir') {
+    const newDir = clearing ? join(homedir(), '.suveren') : next;
+    const oldDir = INSTALL.dataDir;
+    let oldHasData = false;
+    try { oldHasData = resolve(newDir) !== resolve(oldDir) && readdirSync(oldDir).length > 0; } catch { /* no old folder */ }
+    if (oldHasData) {
+      console.log(``);
+      console.log(`  Your existing data stays in ${oldDir} — nothing is moved or deleted.`);
+      console.log(`  The gateway starts EMPTY in ${newDir}: you sign in and set up again.`);
+      console.log(`  To keep your data instead, copy the folder there yourself before the next start.`);
+    }
+    // An autostart registered from a shell that had SUVEREN_DATA_DIR set
+    // carries it in the service definition, where it wins over this setting.
+    const unit = platform() === 'darwin' ? launchAgentPath() : platform() === 'linux' ? systemdUnitPath() : null;
+    try {
+      if (unit && existsSync(unit) && readFileSync(unit, 'utf8').includes('SUVEREN_DATA_DIR')) {
+        console.log(``);
+        console.log(`  Your login service still sets SUVEREN_DATA_DIR itself (${unit}).`);
+        console.log(`  Register it again from a shell without that variable:  suveren-gateway service install`);
+      }
+    } catch { /* unreadable — nothing to warn about */ }
+  }
+
+  console.log(``);
+  console.log(serviceRunning()
+    ? '  Restart to apply it:  suveren-gateway restart'
+    : '  It applies from the next start.');
+}
+
 async function config(args) {
   const sub = args[0];
 
@@ -644,6 +784,14 @@ async function config(args) {
       console.log(`ca-file: ${(policyCaFile ?? saved.caFile) ?? '(not set)'}${policySuffix('caFile')}`);
       console.log(`pin-tls: ${resolvePinTls(DATA_DIR) ? 'on' : 'off'}${policySuffix('pinTls')}`);
       console.log(`proxy:   ${(policyProxy ?? saved.proxyUrl) ?? '(not set)'}${policySuffix('proxy')}`);
+      console.log(`port:     ${INSTALL.cpPort}  (${describeSource(INSTALL.source.cpPort, 'cpPort')})`);
+      console.log(`mcp-port: ${INSTALL.mcpPort}  (${describeSource(INSTALL.source.mcpPort, 'mcpPort')})`);
+      console.log(`data-dir: ${INSTALL.dataDir}  (${describeSource(INSTALL.source.dataDir, 'dataDir')})`);
+      return;
+    }
+    const install = INSTALL_KEYS[key];
+    if (install) {
+      console.log(`${INSTALL[install.field]}  (${describeSource(INSTALL.source[install.field], install.field)})`);
       return;
     }
     if (key === 'as-url') { console.log(`${resolveAsUrl(DATA_DIR)}${policySuffix('asUrl')}`); return; }
@@ -655,9 +803,18 @@ async function config(args) {
     process.exit(2);
   }
 
-  if (sub === 'set') {
+  if (sub === 'set' || sub === 'unset') {
     const key = args[1];
     const value = args[2];
+    if (INSTALL_KEYS[key]) {
+      await setInstallSetting(key, sub === 'unset' ? null : value);
+      return;
+    }
+    if (sub === 'unset') {
+      console.error(`config unset works for port, mcp-port and data-dir only.\n`);
+      printConfigHelp();
+      process.exit(2);
+    }
     if (key === 'as-url') {
       refuseIfLockedByPolicy('asUrl', 'as-url');
       if (!value) {
@@ -1368,6 +1525,9 @@ function sleep(ms) {
  * Delegates entirely to the compiled `dist/mcp-server/report-verify-cli.mjs`
  * (built from apps/mcp-server's OWN tsup entry, next to dist/mcp-server/
  * http.mjs) — this script never reimplements the signature-checking logic.
+ * It checks the signatures AND every value the page shows (RR7: the page
+ * must re-draw from the bundle byte for byte; each drawn field is checked
+ * against its signed source, recomputed, or listed as not checkable offline).
  * Exit codes are documented there (`--help`): 0 valid+key confirmed,
  * 1 invalid, 2 valid but key unconfirmed.
  */
@@ -1383,6 +1543,29 @@ async function verifyReport(args) {
   process.exitCode = await mod.runVerifyReportCli(args);
 }
 
+/**
+ * `suveren-gateway open` — open the UI in the default browser, on whatever
+ * port is configured. The Windows Start Menu entry and the installer's
+ * Finish checkbox use this (via launcher.cmd) instead of a hard-coded port.
+ */
+function openUi() {
+  const url = `http://localhost:${SUVEREN_PORT}`;
+  const os = platform();
+  let child;
+  if (os === 'win32') {
+    // `start ""` — the empty title is required before a quoted target.
+    // Verbatim, or Node escapes those quotes into something cmd misreads.
+    child = spawn('cmd.exe', ['/d', '/s', '/c', `start "" "${url}"`], {
+      detached: true, stdio: 'ignore', windowsHide: true, windowsVerbatimArguments: true,
+    });
+  } else {
+    child = spawn(os === 'darwin' ? 'open' : 'xdg-open', [url], { detached: true, stdio: 'ignore' });
+  }
+  child.on('error', () => { console.log(`Open ${url} in your browser.`); });
+  child.unref();
+  console.log(`Opening ${url}`);
+}
+
 function printHelp() {
   console.log(`suveren-gateway — Suveren gateway (Human Agency Protocol)
 
@@ -1396,13 +1579,19 @@ Usage:
   suveren-gateway stop                       Stop a detached gateway
   suveren-gateway restart                    Stop, then start --detach
   suveren-gateway status                     Show running state + health (incl. simulation mode)
+  suveren-gateway open                       Open the gateway in your browser
   suveren-gateway logs [--tail]               Print or tail ~/.suveren/gateway.log
   suveren-gateway service <cmd>               Run as a login service that survives reboot
                                               (install | uninstall | status)
-  suveren-gateway config get [as-url|ca-file|pin-tls|proxy]  Print the resolved value(s)
+  suveren-gateway config get [as-url|ca-file|pin-tls|proxy|port|mcp-port|data-dir]
+                                              Print the resolved value(s)
   suveren-gateway config set as-url <url>     Save the Authority Server URL
   suveren-gateway config set ca-file <path>   Save a CA bundle for internal TLS
   suveren-gateway config set proxy <url>      Save an HTTP(S) proxy (see below)
+  suveren-gateway config set port <port>      Save the gateway port (default 3400)
+  suveren-gateway config set mcp-port <port>  Save the port AI assistants connect to (default 3430)
+  suveren-gateway config set data-dir <folder>
+                                              Save the data folder (default ~/.suveren)
   suveren-gateway config set pin-tls on --expect-fingerprint <hex>
                                               Pin the Authority Server's TLS certificate
                                               (see \`suveren-gateway config help\` for the fingerprint check)
@@ -1410,14 +1599,15 @@ Usage:
   suveren-gateway simulation on|off|status    Block (or unblock) every real system
                                               (see \`suveren-gateway simulation help\`)
   suveren-gateway verify-report <file> [--key <hex>] [--online]
-                                              Verify an "Export with proof" report file offline
+                                              Verify an "Export with proof" report file offline —
+                                              every signature and every value the page shows
                                               (see \`suveren-gateway verify-report --help\`)
   suveren-gateway help                        Print this help
 
 Environment:
-  SUVEREN_CP_PORT     UI + API port  (default 3400)
-  SUVEREN_MCP_PORT    MCP server port (default 3430)
-  SUVEREN_DATA_DIR    Data directory (default ~/.suveren)
+  SUVEREN_CP_PORT     UI + API port  (default 3400) — overrides a saved \`config set port\`
+  SUVEREN_MCP_PORT    MCP server port (default 3430) — overrides a saved \`config set mcp-port\`
+  SUVEREN_DATA_DIR    Data directory (default ~/.suveren) — overrides a saved \`config set data-dir\`
   SUVEREN_AS_URL      Authority Server URL — overrides the saved as-url
   SUVEREN_SIMULATION  1 to force simulation mode for this run — overrides the saved setting
   HTTP_PROXY / HTTPS_PROXY / NO_PROXY (upper or lower case)
@@ -1446,6 +1636,7 @@ async function main() {
     case 'stop':    await stop(); break;
     case 'status':  await status(); break;
     case 'restart': await restart(); break;
+    case 'open':    openUi(); break;
     case 'logs':    await logs(argv.slice(1)); break;
     case 'service': await service(argv.slice(1)); break;
     case 'config':  await config(argv.slice(1)); break;

package/dist/control-plane/index.mjs

@@ -2786,6 +2786,21 @@ function requireAllowedHost(req, res, next) {
   next();
 }
 
+// src/lib/mcp-public-port.ts
+function mcpPublicPort(env = process.env, internalUrl) {
+  for (const raw of [env.SUVEREN_MCP_PUBLIC_PORT, env.SUVEREN_MCP_PORT]) {
+    const n = Number(raw);
+    if (raw && Number.isInteger(n) && n > 0 && n <= 65535) return n;
+  }
+  try {
+    const url = new URL(internalUrl ?? env.SUVEREN_MCP_INTERNAL_URL ?? "");
+    const n = Number(url.port);
+    if (Number.isInteger(n) && n > 0) return n;
+  } catch {
+  }
+  return null;
+}
+
 // src/lib/read-policy-defaults.ts
 async function backfillReadPolicyDefaults(data) {
   const defaults = /* @__PURE__ */ new Map();
@@ -3976,6 +3991,10 @@ async function planMandate(req, deps) {
     if (bt?.kind === "enum" && Array.isArray(bt.values) && !bt.values.includes(String(value))) {
       errors.push(`Field "${field}" must be one of ${bt.values.join(", ")}.`);
     }
+    const maximum = profile.boundsSchema?.fields[field]?.maximum;
+    if (typeof maximum === "number" && typeof value === "number" && value > maximum) {
+      errors.push(`Field "${field}" may be at most ${maximum}.`);
+    }
   }
   const context = scalarRecord("scope", req.scope);
   errors.push(...validateContextParams(context, profile).errors);
@@ -4997,6 +5016,9 @@ app.get("/health", async (req, res) => {
     // purely so Settings can render "set by your IT" instead of controls
     // that would silently do nothing.
     policyLocked: POLICY_LOCKED,
+    // Where AI assistants connect (the UI's setup snippet) — see
+    // lib/mcp-public-port.ts for why the UI must not guess it.
+    mcpPort: mcpPublicPort(process.env, MCP_BASE),
     session: buildSessionHealth(vault),
     security: {
       note: "Gateway secures tool execution. Agent host isolation is the user's responsibility."