@suveren/gateway 0.19.1 → 0.19.3

package/bin/suveren-gateway.js

@@ -1610,6 +1610,10 @@ Environment:
   SUVEREN_DATA_DIR    Data directory (default ~/.suveren) — overrides a saved \`config set data-dir\`
   SUVEREN_AS_URL      Authority Server URL — overrides the saved as-url
   SUVEREN_SIMULATION  1 to force simulation mode for this run — overrides the saved setting
+  SUVEREN_BIND_HOST   Listen address (default 127.0.0.1 — this machine only). Anything
+                      else lets other machines connect as your agent, so it needs:
+  SUVEREN_MCP_TOKEN   Token an AI assistant must send to open a session
+                      (Authorization: Bearer <token>, or ?token=<token>)
   HTTP_PROXY / HTTPS_PROXY / NO_PROXY (upper or lower case)
                       Corporate proxy — honoured for every outbound call to the Authority
                       Server, the update checker, and a remote AI assistant endpoint. A

package/content/integrations/erp.json

@@ -9,7 +9,8 @@
   "npmVersion": "0.4.0",
   "mcp": {
     "command": "erp-mcp",
-    "args": []
+    "args": [],
+    "passEnv": ["ERP_COMPANY_FILE"]
   },
   "credentials": {
     "fields": [

package/dist/control-plane/index.mjs

@@ -599,6 +599,13 @@ async function exportReport(gatewayVersion) {
   const filename = /filename="([^"]+)"/.exec(res.headers.get("content-disposition") ?? "")?.[1] ?? "suveren-report.html";
   return { html, filename };
 }
+async function getAgentContact() {
+  const res = await fetch(`${MCP_BASE}/internal/agent-contact`, {
+    headers: internalHeaders()
+  });
+  if (!res.ok) throw new Error("Failed to fetch agent contact");
+  return res.json();
+}
 async function getMcpHealth() {
   const res = await fetch(`${MCP_BASE}/health`);
   if (!res.ok) throw new Error("MCP server unreachable");
@@ -2870,6 +2877,13 @@ function createMCPRouter() {
       res.status(502).json({ error: "MCP server unreachable" });
     }
   });
+  router.get("/agent-contact", async (_req, res) => {
+    try {
+      res.json(await getAgentContact());
+    } catch {
+      res.status(502).json({ error: "MCP server unreachable" });
+    }
+  });
   router.get("/integrations", async (_req, res) => {
     try {
       const data = await getIntegrations();
@@ -5045,8 +5059,9 @@ if (existsSync11(UI_DIST)) {
     });
   });
 }
-app.listen(port, "0.0.0.0", () => {
-  console.error(`[Control Plane] Listening on http://0.0.0.0:${port}`);
+var bindHost = process.env.SUVEREN_BIND_HOST?.trim() || "127.0.0.1";
+app.listen(port, bindHost, () => {
+  console.error(`[Control Plane] Listening on http://${bindHost}:${port}`);
   if (process.env.SUVEREN_AUTOSTART === "1" && !vault.isUnlocked()) {
     const { title, message, url } = lockedNotification(port);
     notify(title, message, process.platform, url);