@suveren/gateway 0.2.7 → 0.2.8

package/dist/mcp-server/http.mjs

@@ -904,6 +904,54 @@ function buildMandateBrief(opts) {
 // src/tools/authorizations.ts
 import { getProfile as getProfile2 } from "@hap/core";
 
+// src/lib/receipt-footer.ts
+var AS_BASE = (process.env.SUVEREN_AS_URL ?? "https://www.suveren.ai").replace(/\/$/, "");
+var FOOTER_PROFILES = /* @__PURE__ */ new Set(["email", "calendar", "publish"]);
+var CONTENT_FIELD_CANDIDATES = ["body", "text", "description"];
+var FOOTER_MARKER = "\u2014 Sent by an AI agent via Suveren";
+function shouldAttachFooter() {
+  return true;
+}
+function verifyUrl(receiptId) {
+  return `${AS_BASE}/r/${receiptId}`;
+}
+function footerText(receiptId) {
+  return `
+
+${FOOTER_MARKER}. Verify: ${verifyUrl(receiptId)}`;
+}
+function isStringType(t) {
+  return t === "string" || Array.isArray(t) && t.includes("string");
+}
+function detectContentField(tool) {
+  const schema = tool.inputSchema;
+  const props = schema?.properties ?? {};
+  for (const candidate of CONTENT_FIELD_CANDIDATES) {
+    const prop = props[candidate];
+    if (prop && isStringType(prop.type)) return candidate;
+  }
+  return null;
+}
+function stripFooter(value) {
+  const i = value.indexOf(FOOTER_MARKER);
+  if (i === -1) return value;
+  return value.slice(0, i).replace(/\n+$/, "");
+}
+function appendVerificationFooter(tool, args, receiptId) {
+  const profile = tool.gating?.profile;
+  if (!profile || !FOOTER_PROFILES.has(profile)) return args;
+  if (typeof args.raw === "string" && args.raw.trim().length > 0) {
+    console.error(
+      `[Suveren MCP] ${tool.namespacedName}: 'raw' message present \u2014 skipping verification footer.`
+    );
+    return args;
+  }
+  const field = detectContentField(tool);
+  if (!field) return args;
+  const current = typeof args[field] === "string" ? args[field] : "";
+  return { ...args, [field]: stripFooter(current) + footerText(receiptId) };
+}
+
 // src/lib/tool-proxy.ts
 import { readFile } from "fs/promises";
 import { extname } from "path";
@@ -1064,6 +1112,7 @@ Proposal ID: ${proposal.id}. Check status with check-pending-commitments(proposa
             };
           }
         }
+        let receiptId;
         try {
           const actionType = typeof execution.action_type === "string" ? execution.action_type : void 0;
           if (!actionType) {
@@ -1071,7 +1120,7 @@ Proposal ID: ${proposal.id}. Check status with check-pending-commitments(proposa
               `[Suveren MCP] Warning: tool ${tool.namespacedName} has no action_type in staticExecution. Bounds check may be skipped. Fix the integration manifest.`
             );
           }
-          await state2.spClient.postReceipt({
+          const { receipt } = await state2.spClient.postReceipt({
             // v0.5: send the bare content address; the AS reconstructs the
             // per-user storage key. Fall back to frameHash only for legacy
             // (pre-v0.4) records that predate bounds_hash.
@@ -1083,6 +1132,7 @@ Proposal ID: ${proposal.id}. Check status with check-pending-commitments(proposa
             amount: typeof execution.amount === "number" ? execution.amount : void 0,
             idempotencyKey: randomUUID()
           });
+          receiptId = typeof receipt?.id === "string" ? receipt.id : void 0;
         } catch (err) {
           if (err instanceof SPReceiptError && err.statusCode === 409) {
             const spBody = err.body;
@@ -1160,7 +1210,8 @@ Proposal ID: ${proposal.id}. Use check-pending-commitments to track status.`
           execution: { ...execution },
           timestamp: Math.floor(Date.now() / 1e3)
         });
-        return integrationManager2.callTool(tool.integrationId, tool.originalName, args);
+        const outgoingArgs = shouldAttachFooter() && receiptId ? appendVerificationFooter(tool, args, receiptId) : args;
+        return integrationManager2.callTool(tool.integrationId, tool.originalName, outgoingArgs);
       }
       const reasons = result.errors.map((e) => {
         if (e.code === "BOUND_EXCEEDED") {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@suveren/gateway",
-  "version": "0.2.7",
+  "version": "0.2.8",
   "description": "Suveren gateway — local agent gateway built in compliance with the Human Agency Protocol (HAP). Runs the UI, control plane, and MCP server in one Node process.",
   "type": "module",
   "main": "server.js",