@suveren/gateway 0.20.1 → 0.20.2

package/dist/mcp-server/http.mjs

@@ -7767,6 +7767,7 @@ app.post("/internal/stop-all-running", internalOnly, async (_req, res) => {
   }
 });
 var sseSessions = /* @__PURE__ */ new Map();
+var SESSION_NOT_FOUND = { jsonrpc: "2.0", error: { code: -32001, message: "Session not found" }, id: null };
 var guardAgent = agentAccess(
   agentToken,
   (req) => req.path === "/sse" && req.method === "GET" || req.path === "/mcp" && req.method === "POST" && !req.headers["mcp-session-id"]
@@ -7790,7 +7791,7 @@ app.post("/messages", guardAgent, async (req, res) => {
   const sessionId = req.query.sessionId;
   const transport = sseSessions.get(sessionId);
   if (!transport) {
-    res.status(400).json({ error: "Unknown session" });
+    res.status(404).json(SESSION_NOT_FOUND);
     return;
   }
   await transport.handlePostMessage(req, res, req.body);
@@ -7826,6 +7827,10 @@ app.all("/mcp", guardAgent, async (req, res) => {
       }
       return;
     }
+    if (sessionId) {
+      res.status(404).json(SESSION_NOT_FOUND);
+      return;
+    }
     res.status(400).json({ error: "Bad request \u2014 missing or invalid session" });
   } else {
     res.status(405).json({ error: "Method not allowed" });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@suveren/gateway",
-  "version": "0.20.1",
+  "version": "0.20.2",
   "description": "Suveren gateway — local agent gateway built in compliance with the Human Agency Protocol (HAP). Runs the UI, control plane, and MCP server in one Node process.",
   "type": "module",
   "main": "server.js",