@suveren/gateway 0.2.8 → 0.2.10

package/dist/mcp-server/http.mjs

@@ -1553,9 +1553,10 @@ async function executeCommitted(proposal, state2, integrationManager2) {
       `[Suveren MCP] Warning: proposal ${proposal.id} has no action_type in executionContext. Bounds check may be skipped. Fix the integration manifest for ${proposal.tool}.`
     );
   }
+  let receiptId;
   try {
     const boundsHash = proposal.frameHash.split(":").slice(0, 2).join(":");
-    await state2.spClient.postReceipt({
+    const { receipt } = await state2.spClient.postReceipt({
       boundsHash,
       profileId: proposal.profileId,
       action: proposal.tool,
@@ -1565,6 +1566,7 @@ async function executeCommitted(proposal, state2, integrationManager2) {
       proposalId: proposal.id,
       toolArgs: proposal.toolArgs
     });
+    receiptId = typeof receipt?.id === "string" ? receipt.id : void 0;
   } catch (err) {
     if (err instanceof SPReceiptError) {
       const code = err.body.errors?.[0]?.code;
@@ -1584,7 +1586,20 @@ async function executeCommitted(proposal, state2, integrationManager2) {
     };
   }
   try {
-    const result = await integrationManager2.callTool(integrationId, toolName, proposal.toolArgs);
+    let outgoingArgs = proposal.toolArgs;
+    if (shouldAttachFooter() && receiptId) {
+      const discovered = integrationManager2.getAllTools().find((t) => t.integrationId === integrationId && t.originalName === toolName);
+      if (discovered) {
+        outgoingArgs = appendVerificationFooter(discovered, proposal.toolArgs, receiptId);
+      }
+    }
+    const result = await integrationManager2.callTool(integrationId, toolName, outgoingArgs);
+    state2.executionLog.record({
+      profileId: proposal.profileId,
+      path: proposal.path,
+      execution: proposal.executionContext,
+      timestamp: Math.floor(Date.now() / 1e3)
+    });
     const resultText = result.content?.[0]?.text ?? JSON.stringify(result);
     return { text: `Proposal ${proposal.id} committed and executed.
 Result: ${resultText}` };
@@ -2244,7 +2259,7 @@ function loadProfiles(profilesDir) {
   const dir = resolve(profilesDir ?? process.env.SUVEREN_PROFILES_DIR ?? join6(import.meta.dirname ?? __dirname, "..", "..", "..", "..", "..", "hap-profiles"));
   const indexPath = join6(dir, "index.json");
   if (!existsSync6(indexPath)) {
-    console.error(`[ProfileLoader] No index.json found at ${indexPath}, skipping profile loading`);
+    warnNoProfiles(`No index.json at ${indexPath}`);
     return 0;
   }
   let index;
@@ -2269,9 +2284,26 @@ function loadProfiles(profilesDir) {
       console.error(`[ProfileLoader] Failed to load profile ${profileId} from ${profilePath}:`, err);
     }
   }
-  console.error(`[ProfileLoader] Loaded ${loaded} profile(s) from ${dir}`);
+  if (loaded === 0) {
+    warnNoProfiles(`index.json at ${indexPath} registered 0 profiles`);
+  } else {
+    console.error(`[ProfileLoader] Loaded ${loaded} profile(s) from ${dir}`);
+  }
   return loaded;
 }
+function warnNoProfiles(reason) {
+  console.error(
+    `
+\u2554\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2557
+\u2551  \u26A0  NO PROFILES LOADED \u2014 every gated action will be REJECTED with   \u2551
+\u2551     "Unknown profile". This gateway is misconfigured.               \u2551
+\u2551     Reason: ${reason}
+\u2551     Fix: install a build that bundles profiles, or set              \u2551
+\u2551     SUVEREN_PROFILES_DIR to a hap-profiles checkout, then restart.  \u2551
+\u255A\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u255D
+`
+  );
+}
 
 // src/lib/manifest-loader.ts
 import { readFileSync as readFileSync6, existsSync as existsSync7 } from "fs";
@@ -2605,11 +2637,13 @@ app.all("/mcp", async (req, res) => {
     res.status(405).json({ error: "Method not allowed" });
   }
 });
+var profilesLoaded = 0;
 app.get("/health", (_req, res) => {
   res.json({
     status: "ok",
     transports: ["sse", "streamable-http"],
     sp: spUrl,
+    profilesLoaded,
     activeSessions: activeSessions.size,
     storedGates: state.gateStore.getAll().length,
     serviceCredentials: Array.from(serviceCredentials.keys()),
@@ -2699,7 +2733,7 @@ app.listen(port, "0.0.0.0", () => {
   console.error(`[Suveren MCP]   SSE:        http://0.0.0.0:${port}/sse`);
   console.error(`[Suveren MCP]   Streamable: http://0.0.0.0:${port}/mcp`);
   console.error(`[Suveren MCP]   SP server:  ${spUrl}`);
-  loadProfiles();
+  profilesLoaded = loadProfiles();
   loadManifests();
   if (integrationRegistry.getEnabled().length === 0) {
     const personalManifests = getAllManifests().filter((m) => m.personalDefault);
@@ -2744,59 +2778,10 @@ app.listen(port, "0.0.0.0", () => {
       const committed = await state.spClient.getCommittedProposals();
       for (const proposal of committed) {
         try {
-          let integrationId;
-          let toolName;
-          if (proposal.tool.includes("___")) {
-            const parts = proposal.tool.split("___");
-            if (parts.length !== 2) {
-              console.error(`[Suveren MCP] Invalid tool name in proposal ${proposal.id}: ${proposal.tool}`);
-              continue;
-            }
-            [integrationId, toolName] = parts;
-          } else {
-            const sep = proposal.tool.indexOf("__");
-            if (sep < 0) {
-              console.error(`[Suveren MCP] Invalid tool name in proposal ${proposal.id}: ${proposal.tool}`);
-              continue;
-            }
-            integrationId = proposal.tool.slice(0, sep);
-            toolName = proposal.tool.slice(sep + 2);
-          }
-          const proposalActionType = typeof proposal.executionContext.action_type === "string" ? proposal.executionContext.action_type : void 0;
-          if (!proposalActionType) {
-            console.error(
-              `[Suveren MCP] Warning: proposal ${proposal.id} has no action_type in executionContext. Bounds check may be skipped. Fix the integration manifest for ${proposal.tool}.`
-            );
-          }
-          try {
-            await state.spClient.postReceipt({
-              attestationHash: proposal.frameHash,
-              profileId: proposal.profileId,
-              path: proposal.path,
-              action: proposal.tool,
-              actionType: proposalActionType,
-              executionContext: proposal.executionContext,
-              amount: typeof proposal.executionContext.amount === "number" ? proposal.executionContext.amount : void 0,
-              proposalId: proposal.id,
-              toolArgs: proposal.toolArgs
-            });
-          } catch (err) {
-            console.error(`[Suveren MCP] Receipt failed for proposal ${proposal.id}:`, err instanceof Error ? err.message : err);
-            continue;
-          }
-          try {
-            await integrationManager.callTool(integrationId, toolName, proposal.toolArgs);
-          } catch (err) {
-            console.error(`[Suveren MCP] Tool execution failed for proposal ${proposal.id} after receipt issued:`, err);
-            continue;
-          }
-          state.executionLog.record({
-            profileId: proposal.profileId,
-            path: proposal.path,
-            execution: proposal.executionContext,
-            timestamp: Math.floor(Date.now() / 1e3)
-          });
-          console.error(`[Suveren MCP] Auto-executed proposal ${proposal.id}: ${proposal.tool}`);
+          const { text, isError } = await executeCommitted(proposal, state, integrationManager);
+          console.error(
+            isError ? `[Suveren MCP] Auto-exec proposal ${proposal.id}: ${text}` : `[Suveren MCP] Auto-executed proposal ${proposal.id}: ${proposal.tool}`
+          );
         } catch (err) {
           console.error(`[Suveren MCP] Failed to execute proposal ${proposal.id}:`, err);
         }