@suveren/gateway 0.28.1 → 0.29.0

package/dist/control-plane/index.mjs

@@ -5,9 +5,9 @@ import {
 
 // src/index.ts
 import { randomBytes as randomBytes3 } from "crypto";
-import { existsSync as existsSync12, readFileSync as readFileSync14, renameSync as renameSync2 } from "fs";
-import { dirname as dirname9, join as join14 } from "path";
-import { homedir as homedir7 } from "os";
+import { existsSync as existsSync13, readFileSync as readFileSync15, renameSync as renameSync3 } from "fs";
+import { dirname as dirname10, join as join15 } from "path";
+import { homedir as homedir8 } from "os";
 import express from "express";
 import { createProxyMiddleware } from "http-proxy-middleware";
 
@@ -309,15 +309,109 @@ var Vault = class {
   }
 };
 
-// src/lib/install-method.ts
-import { existsSync as existsSync2, readFileSync as readFileSync2 } from "fs";
+// src/lib/shown-snapshot.ts
+import { createHash as createHash2 } from "crypto";
+import { mkdirSync as mkdirSync2, readFileSync as readFileSync2, writeFileSync as writeFileSync2, existsSync as existsSync2, renameSync } from "fs";
+import { homedir as homedir2 } from "os";
 import { dirname as dirname2, join as join2 } from "path";
+import { canonicalize } from "@hap/core";
+function computeShownHash(snapshot) {
+  return `sha256:${createHash2("sha256").update(canonicalize(snapshot)).digest("hex")}`;
+}
+var DEFAULT_DIR = process.env.SUVEREN_DATA_DIR ?? join2(homedir2(), ".suveren");
+var FILE_NAME = "shown-snapshots.enc.json";
+var SHOWN_SNAPSHOT_MAX_AGE_SECONDS = 90 * 24 * 60 * 60;
+var ShownSnapshotStore = class {
+  filePath;
+  constructor(dataDir) {
+    this.filePath = join2(dataDir ?? DEFAULT_DIR, FILE_NAME);
+  }
+  /** Hashes + stores `snapshot` for `proposalId`, returning the hash to send
+   *  with the decision. Requires an unlocked vault — callers already require
+   *  an AS session (and therefore an unlocked vault) to reach this path.
+   *  Opportunistically prunes expired entries first (doc §8.4's retention —
+   *  this store has no in-memory cache to prune on every write the way
+   *  `ExecutionLog` does, so a decision call is the one guaranteed moment
+   *  the vault key is in hand). */
+  save(proposalId, snapshot, vault2) {
+    this.pruneWithVault(vault2);
+    const shownHash = computeShownHash(snapshot);
+    const entry = { shownHash, snapshot, storedAt: Math.floor(Date.now() / 1e3) };
+    const file = this.load();
+    file.entries[proposalId] = vault2.encrypt(JSON.stringify(entry));
+    this.persist(file);
+    return shownHash;
+  }
+  /** Returns the stored entry, or null if none exists (off-device / never
+   *  approved on this gateway — doc §8.4's "only on the approving gateway"). */
+  get(proposalId, vault2) {
+    const file = this.load();
+    const blob = file.entries[proposalId];
+    if (!blob) return null;
+    try {
+      return JSON.parse(vault2.decrypt(blob));
+    } catch {
+      return null;
+    }
+  }
+  remove(proposalId) {
+    const file = this.load();
+    if (!(proposalId in file.entries)) return;
+    delete file.entries[proposalId];
+    this.persist(file);
+  }
+  /**
+   * Drops entries older than {@link SHOWN_SNAPSHOT_MAX_AGE_SECONDS}. `storedAt`
+   * lives INSIDE each encrypted blob, so this needs the vault key — called
+   * once per unlock (same trigger as `ExecutionLog`'s own migration-on-
+   * unlock), not on a timer while locked.
+   */
+  pruneWithVault(vault2, now = Math.floor(Date.now() / 1e3)) {
+    const file = this.load();
+    const cutoff = now - SHOWN_SNAPSHOT_MAX_AGE_SECONDS;
+    let changed = false;
+    for (const [proposalId, blob] of Object.entries(file.entries)) {
+      try {
+        const entry = JSON.parse(vault2.decrypt(blob));
+        if (entry.storedAt < cutoff) {
+          delete file.entries[proposalId];
+          changed = true;
+        }
+      } catch {
+      }
+    }
+    if (changed) this.persist(file);
+  }
+  // ─── Persistence ────────────────────────────────────────────────────────
+  load() {
+    if (!existsSync2(this.filePath)) return { version: 1, entries: {} };
+    try {
+      const parsed = JSON.parse(readFileSync2(this.filePath, "utf8"));
+      if (parsed?.version !== 1 || typeof parsed.entries !== "object" || parsed.entries === null) {
+        return { version: 1, entries: {} };
+      }
+      return parsed;
+    } catch {
+      return { version: 1, entries: {} };
+    }
+  }
+  persist(file) {
+    mkdirSync2(dirname2(this.filePath), { recursive: true, mode: 448 });
+    const tmp = `${this.filePath}.tmp`;
+    writeFileSync2(tmp, JSON.stringify(file, null, 2), { mode: 384 });
+    renameSync(tmp, this.filePath);
+  }
+};
+
+// src/lib/install-method.ts
+import { existsSync as existsSync3, readFileSync as readFileSync3 } from "fs";
+import { dirname as dirname3, join as join3 } from "path";
 var INSTALL_MARKER = "install-method.json";
 function readInstallMarker(bundleRoot) {
-  const file = join2(bundleRoot, INSTALL_MARKER);
-  if (!existsSync2(file)) return null;
+  const file = join3(bundleRoot, INSTALL_MARKER);
+  if (!existsSync3(file)) return null;
   try {
-    const parsed = JSON.parse(readFileSync2(file, "utf8"));
+    const parsed = JSON.parse(readFileSync3(file, "utf8"));
     return typeof parsed.method === "string" ? parsed.method : null;
   } catch {
     return null;
@@ -325,13 +419,13 @@ function readInstallMarker(bundleRoot) {
 }
 function detectInstallMethod({ dir, dockerEnv, managed }) {
   if (managed) return "managed";
-  if (readInstallMarker(dirname2(dirname2(dir))) === "msi") return "msi";
+  if (readInstallMarker(dirname3(dirname3(dir))) === "msi") return "msi";
   if (dockerEnv) return "docker";
   if (dir.includes("/node_modules/@suveren/gateway/")) return "npm";
   let cursor = dir;
   for (let i = 0; i < 8; i++) {
-    if (existsSync2(join2(cursor, ".git"))) return "dev";
-    const parent = dirname2(cursor);
+    if (existsSync3(join3(cursor, ".git"))) return "dev";
+    const parent = dirname3(cursor);
     if (parent === cursor) break;
     cursor = parent;
   }
@@ -625,6 +719,25 @@ async function getToolPreview(data) {
     clearTimeout(timeout);
   }
 }
+async function getToolRequestContext(data) {
+  const controller = new AbortController();
+  const timeout = setTimeout(() => controller.abort(), 12e3);
+  try {
+    const res = await fetch(`${MCP_BASE}/internal/request-context`, {
+      method: "POST",
+      headers: internalHeaders(),
+      body: JSON.stringify(data),
+      signal: controller.signal
+    });
+    if (!res.ok) {
+      const err = await res.json().catch(() => ({ error: "Unknown error" }));
+      throw new Error(`MCP request-context failed: ${err.error ?? res.status}`);
+    }
+    return res.json();
+  } finally {
+    clearTimeout(timeout);
+  }
+}
 async function getAgentContact() {
   const res = await fetch(`${MCP_BASE}/internal/agent-contact`, {
     headers: internalHeaders()
@@ -759,12 +872,12 @@ async function loadOrGenerateKeyPair(vault2) {
 }
 
 // src/lib/client-version.ts
-import { readFileSync as readFileSync3 } from "fs";
-import { join as join3 } from "path";
+import { readFileSync as readFileSync4 } from "fs";
+import { join as join4 } from "path";
 var UNKNOWN = "unknown";
 function readJson(path) {
   try {
-    return JSON.parse(readFileSync3(path, "utf8"));
+    return JSON.parse(readFileSync4(path, "utf8"));
   } catch {
     return null;
   }
@@ -775,13 +888,13 @@ function detectGatewayVersion() {
   const start = import.meta.dirname ?? process.cwd();
   let dir = start;
   for (let up = 0; up < 6; up++) {
-    const pkg = readJson(join3(dir, "package.json"));
+    const pkg = readJson(join4(dir, "package.json"));
     const name = pkg?.name;
     const version = pkg?.version;
     if (typeof version === "string" && (name === "@suveren/gateway" || name === "suveren-gateway")) {
       return version;
     }
-    const parent = join3(dir, "..");
+    const parent = join4(dir, "..");
     if (parent === dir) break;
     dir = parent;
   }
@@ -795,17 +908,17 @@ function clientVersionHeaders() {
 }
 
 // src/lib/as-pairing.ts
-import { createHash as createHash2 } from "crypto";
-import { existsSync as existsSync3, mkdirSync as mkdirSync2, readFileSync as readFileSync4, unlinkSync, writeFileSync as writeFileSync2 } from "fs";
-import { dirname as dirname3, join as join4 } from "path";
+import { createHash as createHash3 } from "crypto";
+import { existsSync as existsSync4, mkdirSync as mkdirSync3, readFileSync as readFileSync5, unlinkSync, writeFileSync as writeFileSync3 } from "fs";
+import { dirname as dirname4, join as join5 } from "path";
 function pairingPath(dataDir) {
-  return join4(dataDir, "as-pairing.json");
+  return join5(dataDir, "as-pairing.json");
 }
 function readPairing(dataDir) {
   const path = pairingPath(dataDir);
-  if (!existsSync3(path)) return null;
+  if (!existsSync4(path)) return null;
   try {
-    const data = JSON.parse(readFileSync4(path, "utf-8"));
+    const data = JSON.parse(readFileSync5(path, "utf-8"));
     if (typeof data.asUrl !== "string" || typeof data.publicKeyHex !== "string") return null;
     return {
       asUrl: data.asUrl,
@@ -825,15 +938,15 @@ function writePairing(dataDir, asUrl, publicKeyHex, opts = {}) {
     ...opts.tlsSpkiPinHex ? { tlsSpkiPinHex: opts.tlsSpkiPinHex } : {}
   };
   const path = pairingPath(dataDir);
-  mkdirSync2(dirname3(path), { recursive: true, mode: 448 });
-  writeFileSync2(path, JSON.stringify(pairing, null, 2), { encoding: "utf-8", mode: 384 });
+  mkdirSync3(dirname4(path), { recursive: true, mode: 448 });
+  writeFileSync3(path, JSON.stringify(pairing, null, 2), { encoding: "utf-8", mode: 384 });
   return pairing;
 }
 function recordTlsPin(dataDir, asUrl, tlsSpkiPinHex) {
   const existing = readPairing(dataDir);
   if (!existing || existing.asUrl !== asUrl) return;
   const path = pairingPath(dataDir);
-  writeFileSync2(
+  writeFileSync3(
     path,
     JSON.stringify({ ...existing, tlsSpkiPinHex }, null, 2),
     { encoding: "utf-8", mode: 384 }
@@ -842,25 +955,25 @@ function recordTlsPin(dataDir, asUrl, tlsSpkiPinHex) {
 function clearPairing(dataDir) {
   const path = pairingPath(dataDir);
   try {
-    if (existsSync3(path)) unlinkSync(path);
+    if (existsSync4(path)) unlinkSync(path);
   } catch {
   }
 }
 function fingerprintOf(publicKeyHex) {
   const raw = Buffer.from(publicKeyHex, "hex");
-  const digest = createHash2("sha256").update(raw).digest("hex").toUpperCase();
+  const digest = createHash3("sha256").update(raw).digest("hex").toUpperCase();
   return digest.match(/.{1,4}/g)?.join(":") ?? digest;
 }
 
 // src/lib/as-challenge.ts
 import { createPublicKey, randomBytes as randomBytes2, verify as cryptoVerify } from "crypto";
-import { canonicalize } from "@hap/core";
+import { canonicalize as canonicalize2 } from "@hap/core";
 
 // src/lib/as-tls-pin.ts
-import { createHash as createHash3 } from "crypto";
+import { createHash as createHash4 } from "crypto";
 import { checkServerIdentity as defaultCheckServerIdentity, rootCertificates } from "tls";
 import { Agent as HttpsAgent2 } from "https";
-import { readFileSync as readFileSync5 } from "fs";
+import { readFileSync as readFileSync6 } from "fs";
 import { Agent, ProxyAgent, fetch as undiciFetch } from "undici";
 
 // src/lib/proxy-env.ts
@@ -995,7 +1108,7 @@ function effectiveCa() {
   const path = process.env.NODE_EXTRA_CA_CERTS;
   if (!path) return void 0;
   try {
-    return [...rootCertificates, readFileSync5(path, "utf-8")];
+    return [...rootCertificates, readFileSync6(path, "utf-8")];
   } catch {
     return void 0;
   }
@@ -1023,7 +1136,7 @@ function spkiSha256Hex(cert) {
   if (!cert.pubkey) {
     throw new Error("peer certificate carries no pubkey (expected the detailed certificate object)");
   }
-  return createHash3("sha256").update(cert.pubkey).digest("hex");
+  return createHash4("sha256").update(cert.pubkey).digest("hex");
 }
 function formatPinFingerprint(hex) {
   const upper = hex.toUpperCase();
@@ -1216,7 +1329,7 @@ var CHALLENGE_DOMAIN_PREFIX = "hap-as-challenge\0";
 function challengeSigningBytes(unsigned) {
   return Buffer.concat([
     Buffer.from(CHALLENGE_DOMAIN_PREFIX, "utf-8"),
-    Buffer.from(canonicalize({ typ: unsigned.typ, nonce: unsigned.nonce, issuedAt: unsigned.issuedAt }), "utf-8")
+    Buffer.from(canonicalize2({ typ: unsigned.typ, nonce: unsigned.nonce, issuedAt: unsigned.issuedAt }), "utf-8")
   ]);
 }
 function publicKeyFromHex(publicKeyHex) {
@@ -1299,12 +1412,12 @@ async function verifyAsHoldsKey(asUrl, publicKeyHex, pinning = { enforce: false,
 }
 
 // src/lib/as-config.ts
-import { existsSync as existsSync5, mkdirSync as mkdirSync3, readFileSync as readFileSync7, writeFileSync as writeFileSync3 } from "fs";
-import { dirname as dirname4, join as join6 } from "path";
+import { existsSync as existsSync6, mkdirSync as mkdirSync4, readFileSync as readFileSync8, writeFileSync as writeFileSync4 } from "fs";
+import { dirname as dirname5, join as join7 } from "path";
 
 // src/lib/policy.ts
-import { existsSync as existsSync4, readFileSync as readFileSync6 } from "fs";
-import { join as join5 } from "path";
+import { existsSync as existsSync5, readFileSync as readFileSync7 } from "fs";
+import { join as join6 } from "path";
 import { spawnSync } from "child_process";
 var POLICY_KEYS = ["AsUrl", "CaFile", "PinTls", "Proxy", "NoProxy", "Simulation", "InstallMethod", "Team"];
 var DEFAULT_REGISTRY_BASE_KEY = "SOFTWARE\\Policies\\Suveren\\Gateway";
@@ -1339,7 +1452,7 @@ function validateAsUrl(candidate) {
 function validateCaFile(candidate) {
   const trimmed = candidate.trim();
   if (!trimmed) return { ok: false, error: "The CA file path is empty." };
-  if (!existsSync4(trimmed)) return { ok: false, error: `No file at "${trimmed}".` };
+  if (!existsSync5(trimmed)) return { ok: false, error: `No file at "${trimmed}".` };
   return { ok: true, path: trimmed };
 }
 function validateTeamId(candidate) {
@@ -1410,7 +1523,7 @@ function policyFilePath() {
   if (process.env.SUVEREN_POLICY_FILE) return process.env.SUVEREN_POLICY_FILE;
   if (process.platform === "win32") {
     const programData = process.env.ProgramData || process.env.PROGRAMDATA || "C:\\ProgramData";
-    return join5(programData, "Suveren", "gateway-policy.json");
+    return join6(programData, "Suveren", "gateway-policy.json");
   }
   if (process.platform === "darwin") {
     return "/Library/Application Support/Suveren/gateway-policy.json";
@@ -1420,10 +1533,10 @@ function policyFilePath() {
 function readPolicyFile() {
   const path = policyFilePath();
   const source = `the policy file (${path})`;
-  if (!existsSync4(path)) return { values: {}, source };
+  if (!existsSync5(path)) return { values: {}, source };
   let data;
   try {
-    data = JSON.parse(readFileSync6(path, "utf8"));
+    data = JSON.parse(readFileSync7(path, "utf8"));
   } catch (err) {
     throw new Error(`Could not parse policy file ${path}: ${err instanceof Error ? err.message : String(err)}`);
   }
@@ -1535,14 +1648,14 @@ function readPolicy() {
 // src/lib/as-config.ts
 var DEFAULT_AS_URL = "https://www.suveren.ai";
 function configPath(dataDir) {
-  return join6(dataDir, "config.json");
+  return join7(dataDir, "config.json");
 }
 function readAsConfigStrict(dataDir) {
   const path = configPath(dataDir);
-  if (!existsSync5(path)) return {};
+  if (!existsSync6(path)) return {};
   let data;
   try {
-    data = JSON.parse(readFileSync7(path, "utf-8"));
+    data = JSON.parse(readFileSync8(path, "utf-8"));
   } catch (err) {
     throw new Error(
       `Could not parse ${path}: ${err instanceof Error ? err.message : String(err)}`
@@ -1557,9 +1670,9 @@ function readAsConfigStrict(dataDir) {
 }
 function readAsConfig(dataDir) {
   const path = configPath(dataDir);
-  if (!existsSync5(path)) return {};
+  if (!existsSync6(path)) return {};
   try {
-    const data = JSON.parse(readFileSync7(path, "utf-8"));
+    const data = JSON.parse(readFileSync8(path, "utf-8"));
     const out = {};
     if (typeof data.asUrl === "string") out.asUrl = data.asUrl;
     if (typeof data.caFile === "string") out.caFile = data.caFile;
@@ -1573,8 +1686,8 @@ function readAsConfig(dataDir) {
 function writeAsConfig(dataDir, patch) {
   const merged = { ...readAsConfig(dataDir), ...patch };
   const path = configPath(dataDir);
-  mkdirSync3(dirname4(path), { recursive: true, mode: 448 });
-  writeFileSync3(path, JSON.stringify(merged, null, 2), { encoding: "utf-8", mode: 384 });
+  mkdirSync4(dirname5(path), { recursive: true, mode: 448 });
+  writeFileSync4(path, JSON.stringify(merged, null, 2), { encoding: "utf-8", mode: 384 });
   return merged;
 }
 function validateAsUrl2(candidate) {
@@ -1717,17 +1830,17 @@ var eventBus = new EventBus();
 import { spawn, spawnSync as spawnSync2 } from "child_process";
 
 // src/lib/notifier-icon.ts
-import { writeFileSync as writeFileSync4, mkdirSync as mkdirSync4, existsSync as existsSync6 } from "fs";
-import { homedir as homedir2 } from "os";
-import { join as join7, dirname as dirname5 } from "path";
+import { writeFileSync as writeFileSync5, mkdirSync as mkdirSync5, existsSync as existsSync7 } from "fs";
+import { homedir as homedir3 } from "os";
+import { join as join8, dirname as dirname6 } from "path";
 var ICON_BASE64 = "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";
 function ensureNotifierIcon(dataDir) {
   try {
-    const dir = dataDir ?? process.env.SUVEREN_DATA_DIR ?? join7(homedir2(), ".suveren");
-    const path = join7(dir, "notifier-icon.png");
-    if (!existsSync6(path)) {
-      mkdirSync4(dirname5(path), { recursive: true });
-      writeFileSync4(path, Buffer.from(ICON_BASE64, "base64"));
+    const dir = dataDir ?? process.env.SUVEREN_DATA_DIR ?? join8(homedir3(), ".suveren");
+    const path = join8(dir, "notifier-icon.png");
+    if (!existsSync7(path)) {
+      mkdirSync5(dirname6(path), { recursive: true });
+      writeFileSync5(path, Buffer.from(ICON_BASE64, "base64"));
     }
     return path;
   } catch {
@@ -2892,18 +3005,18 @@ async function testAIConnectivity(config) {
 }
 
 // src/lib/agent-brief-store.ts
-import { existsSync as existsSync7, readFileSync as readFileSync8 } from "fs";
-import { homedir as homedir3 } from "os";
-import { join as join8 } from "path";
+import { existsSync as existsSync8, readFileSync as readFileSync9 } from "fs";
+import { homedir as homedir4 } from "os";
+import { join as join9 } from "path";
 var AGENT_CONTEXT_MAX_BYTES = 16 * 1024;
 function agentBriefPath() {
-  const dataDir = process.env.SUVEREN_DATA_DIR ?? join8(homedir3(), ".suveren");
-  return join8(dataDir, "context.md");
+  const dataDir = process.env.SUVEREN_DATA_DIR ?? join9(homedir4(), ".suveren");
+  return join9(dataDir, "context.md");
 }
 function readAgentBrief() {
   const filePath = agentBriefPath();
-  if (!existsSync7(filePath)) return "";
-  return readFileSync8(filePath, "utf-8");
+  if (!existsSync8(filePath)) return "";
+  return readFileSync9(filePath, "utf-8");
 }
 
 // src/routes/ai.ts
@@ -3256,28 +3369,28 @@ function createMCPRouter() {
 // src/routes/autostart.ts
 import { Router as Router6 } from "express";
 import { execFile } from "child_process";
-import { existsSync as existsSync8 } from "fs";
+import { existsSync as existsSync9 } from "fs";
 import { dirname as pathDirname, resolve } from "path";
 import { fileURLToPath } from "url";
 import { promisify } from "util";
 var run = promisify(execFile);
 var SUPPORTED = /* @__PURE__ */ new Set(["darwin", "win32", "linux"]);
 var MODULE_DIR = pathDirname(fileURLToPath(import.meta.url));
-function findCli(dirname10 = MODULE_DIR) {
+function findCli(dirname11 = MODULE_DIR) {
   const candidates = [
     // Bundled (the shipped layout): dist/control-plane → dist → root → bin
-    resolve(dirname10, "..", "..", "bin", "suveren-gateway.js"),
+    resolve(dirname11, "..", "..", "bin", "suveren-gateway.js"),
     // Bundled, were the routes/ directory ever preserved.
-    resolve(dirname10, "..", "..", "..", "bin", "suveren-gateway.js"),
+    resolve(dirname11, "..", "..", "..", "bin", "suveren-gateway.js"),
     // Dev, running from source: the repo's own bundle directory.
-    resolve(dirname10, "..", "..", "..", "..", "bundle", "bin", "suveren-gateway.js"),
-    resolve(dirname10, "..", "..", "..", "..", "..", "bundle", "bin", "suveren-gateway.js")
+    resolve(dirname11, "..", "..", "..", "..", "bundle", "bin", "suveren-gateway.js"),
+    resolve(dirname11, "..", "..", "..", "..", "..", "bundle", "bin", "suveren-gateway.js")
     // Deliberately NO process.cwd() fallback: it makes the result depend on
     // where the process happened to be launched from, so the same install
     // resolves differently between a shell and a login service — and it would
     // mask a genuinely missing CLI whenever the cwd happened to be the repo.
   ];
-  return candidates.find(existsSync8) ?? null;
+  return candidates.find(existsSync9) ?? null;
 }
 async function cli(args) {
   const bin = findCli();
@@ -3430,24 +3543,24 @@ import { Router as Router9 } from "express";
 
 // src/routes/approved-intents.ts
 import { Router as Router8 } from "express";
-import { readFileSync as readFileSync9, writeFileSync as writeFileSync5, existsSync as existsSync9, mkdirSync as mkdirSync5 } from "fs";
-import { homedir as homedir4 } from "os";
-import { join as join9 } from "path";
-var SUVEREN_DATA_DIR = process.env.SUVEREN_DATA_DIR ?? join9(homedir4(), ".suveren");
-var FILE_PATH = join9(SUVEREN_DATA_DIR, "approved-intents.enc.json");
+import { readFileSync as readFileSync10, writeFileSync as writeFileSync6, existsSync as existsSync10, mkdirSync as mkdirSync6 } from "fs";
+import { homedir as homedir5 } from "os";
+import { join as join10 } from "path";
+var SUVEREN_DATA_DIR = process.env.SUVEREN_DATA_DIR ?? join10(homedir5(), ".suveren");
+var FILE_PATH = join10(SUVEREN_DATA_DIR, "approved-intents.enc.json");
 function readFile() {
-  if (!existsSync9(FILE_PATH)) {
+  if (!existsSync10(FILE_PATH)) {
     return { version: 1, entries: {} };
   }
   try {
-    return JSON.parse(readFileSync9(FILE_PATH, "utf-8"));
+    return JSON.parse(readFileSync10(FILE_PATH, "utf-8"));
   } catch {
     return { version: 1, entries: {} };
   }
 }
 function writeFile(data) {
-  mkdirSync5(SUVEREN_DATA_DIR, { recursive: true });
-  writeFileSync5(FILE_PATH, JSON.stringify(data, null, 2), "utf-8");
+  mkdirSync6(SUVEREN_DATA_DIR, { recursive: true });
+  writeFileSync6(FILE_PATH, JSON.stringify(data, null, 2), "utf-8");
 }
 function readApprovedIntents(vault2) {
   const file = readFile();
@@ -3579,11 +3692,11 @@ function createEvidenceExportRouter(spUrl, vault2, dataDir, lockAsTlsMismatch2)
 import { Router as Router10 } from "express";
 
 // src/lib/content-crypto.ts
-import { createHash as createHash4 } from "crypto";
-import { canonicalize as canonicalize2 } from "@hap/core";
+import { createHash as createHash5 } from "crypto";
+import { canonicalize as canonicalize3 } from "@hap/core";
 var CONTENT_ALG = "HPKE-X25519-HKDF-SHA256-AES256GCM";
 function computeProposalContentHash(toolArgs) {
-  return `sha256:${createHash4("sha256").update(canonicalize2(toolArgs)).digest("hex")}`;
+  return `sha256:${createHash5("sha256").update(canonicalize3(toolArgs)).digest("hex")}`;
 }
 function toB64(bytes) {
   return Buffer.from(bytes).toString("base64");
@@ -3638,7 +3751,7 @@ async function resolveRecipientPubkeys(recipientUserIds, deps) {
   return { resolved, unreadableFor };
 }
 async function encryptProposalContent(toolArgs, recipientUserIds, deps) {
-  const canonical = canonicalize2(toolArgs);
+  const canonical = canonicalize3(toolArgs);
   const hash = computeProposalContentHash(toolArgs);
   const { resolved, unreadableFor } = await resolveRecipientPubkeys(recipientUserIds, deps);
   if (resolved.length === 0) {
@@ -3679,13 +3792,13 @@ async function decryptProposalContent(wire, myUserId, myPrivateKey) {
 }
 
 // src/lib/execution-journal-reader.ts
-import { existsSync as existsSync10, readFileSync as readFileSync10 } from "fs";
-import { join as join10 } from "path";
+import { existsSync as existsSync11, readFileSync as readFileSync11 } from "fs";
+import { join as join11 } from "path";
 function loadJournalEntries(dataDir) {
-  const path = join10(dataDir, "execution-journal.json");
-  if (!existsSync10(path)) return [];
+  const path = join11(dataDir, "execution-journal.json");
+  if (!existsSync11(path)) return [];
   try {
-    const parsed = JSON.parse(readFileSync10(path, "utf-8"));
+    const parsed = JSON.parse(readFileSync11(path, "utf-8"));
     return parsed.entries ?? [];
   } catch {
     return [];
@@ -3698,71 +3811,74 @@ function findLatestByProposal(dataDir, proposalId) {
 
 // src/routes/proposal-preview.ts
 var AS_FETCH_TIMEOUT_MS2 = 1e4;
-function createProposalStatusRouter(spUrl, vault2, dataDir, lockAsTlsMismatch2) {
-  const router = Router10();
-  router.get("/:id/preview", async (req, res) => {
-    const proposalId = req.params.id;
-    const cookie = vault2.getSpCookie();
-    if (!cookie) {
-      res.status(401).json({ error: "No Authority Server session \u2014 sign in to preview this proposal." });
-      return;
+async function resolveProposalToolArgsForRoute(spUrl, vault2, dataDir, lockAsTlsMismatch2, proposalId, res) {
+  const cookie = vault2.getSpCookie();
+  if (!cookie) {
+    res.status(401).json({ error: "No Authority Server session \u2014 sign in to preview this proposal." });
+    return void 0;
+  }
+  let proposal;
+  try {
+    const controller = new AbortController();
+    const timeout = setTimeout(() => controller.abort(), AS_FETCH_TIMEOUT_MS2);
+    const pin = readPairing(dataDir);
+    let asStatus;
+    let asBody;
+    try {
+      const { res: asRes } = await fetchAs(
+        `${spUrl}/api/proposals/${encodeURIComponent(proposalId)}`,
+        { headers: { Cookie: cookie }, signal: controller.signal },
+        {
+          enforce: resolvePinTls(dataDir),
+          pinnedSpkiHex: pin && pin.asUrl === spUrl ? pin.tlsSpkiPinHex : void 0
+        }
+      );
+      asStatus = asRes.status;
+      asBody = await asRes.json().catch(() => ({}));
+    } finally {
+      clearTimeout(timeout);
+    }
+    if (asStatus < 200 || asStatus >= 300 || !asBody.proposal) {
+      res.status(asStatus >= 400 ? asStatus : 502).json({
+        error: asBody.error ?? `Could not fetch proposal ${proposalId} (${asStatus})`
+      });
+      return void 0;
+    }
+    proposal = asBody.proposal;
+  } catch (err) {
+    if (err instanceof AsTlsMismatchError) {
+      lockAsTlsMismatch2();
+      res.status(502).json({ error: err.message });
+      return void 0;
     }
-    let proposal;
+    res.status(502).json({ error: `Authority Server unreachable: ${err instanceof Error ? err.message : String(err)}` });
+    return void 0;
+  }
+  if (proposal.toolArgs) {
+    return { tool: proposal.tool, toolArgs: proposal.toolArgs };
+  }
+  if (proposal.content) {
     try {
-      const controller = new AbortController();
-      const timeout = setTimeout(() => controller.abort(), AS_FETCH_TIMEOUT_MS2);
-      const pin = readPairing(dataDir);
-      let asStatus;
-      let asBody;
-      try {
-        const { res: asRes } = await fetchAs(
-          `${spUrl}/api/proposals/${encodeURIComponent(proposalId)}`,
-          { headers: { Cookie: cookie }, signal: controller.signal },
-          {
-            enforce: resolvePinTls(dataDir),
-            pinnedSpkiHex: pin && pin.asUrl === spUrl ? pin.tlsSpkiPinHex : void 0
-          }
-        );
-        asStatus = asRes.status;
-        asBody = await asRes.json().catch(() => ({}));
-      } finally {
-        clearTimeout(timeout);
-      }
-      if (asStatus < 200 || asStatus >= 300 || !asBody.proposal) {
-        res.status(asStatus >= 400 ? asStatus : 502).json({
-          error: asBody.error ?? `Could not fetch proposal ${proposalId} (${asStatus})`
-        });
-        return;
-      }
-      proposal = asBody.proposal;
+      const kp = await loadOrGenerateKeyPair(vault2);
+      const me = vault2.getSessionUser();
+      const plaintext = await decryptProposalContent(proposal.content, me?.id ?? "", kp.privateKey);
+      return { tool: proposal.tool, toolArgs: JSON.parse(plaintext) };
     } catch (err) {
-      if (err instanceof AsTlsMismatchError) {
-        lockAsTlsMismatch2();
-        res.status(502).json({ error: err.message });
-        return;
-      }
-      res.status(502).json({ error: `Authority Server unreachable: ${err instanceof Error ? err.message : String(err)}` });
-      return;
-    }
-    let toolArgs;
-    if (proposal.toolArgs) {
-      toolArgs = proposal.toolArgs;
-    } else if (proposal.content) {
-      try {
-        const kp = await loadOrGenerateKeyPair(vault2);
-        const me = vault2.getSessionUser();
-        const plaintext = await decryptProposalContent(proposal.content, me?.id ?? "", kp.privateKey);
-        toolArgs = JSON.parse(plaintext);
-      } catch (err) {
-        res.json({ status: "unavailable", reason: "connector_error", message: `Could not decrypt this proposal's content on this device: ${err instanceof Error ? err.message : String(err)}` });
-        return;
-      }
-    } else {
-      res.status(502).json({ error: `Proposal ${proposalId} carries neither tool_args nor content.` });
-      return;
+      res.json({ status: "unavailable", reason: "connector_error", message: `Could not decrypt this proposal's content on this device: ${err instanceof Error ? err.message : String(err)}` });
+      return void 0;
     }
+  }
+  res.status(502).json({ error: `Proposal ${proposalId} carries neither tool_args nor content.` });
+  return void 0;
+}
+function createProposalStatusRouter(spUrl, vault2, dataDir, lockAsTlsMismatch2, shownSnapshotStore2) {
+  const router = Router10();
+  router.get("/:id/preview", async (req, res) => {
+    const proposalId = req.params.id;
+    const resolved = await resolveProposalToolArgsForRoute(spUrl, vault2, dataDir, lockAsTlsMismatch2, proposalId, res);
+    if (!resolved) return;
     try {
-      const result = await getToolPreview({ proposalId, tool: proposal.tool, toolArgs });
+      const result = await getToolPreview({ proposalId, tool: resolved.tool, toolArgs: resolved.toolArgs });
       if (result.status !== "ok") {
         res.json(result);
         return;
@@ -3773,6 +3889,17 @@ function createProposalStatusRouter(spUrl, vault2, dataDir, lockAsTlsMismatch2)
       res.status(502).json({ error: `MCP server unavailable: ${err instanceof Error ? err.message : String(err)}` });
     }
   });
+  router.get("/:id/request-context", async (req, res) => {
+    const proposalId = req.params.id;
+    const resolved = await resolveProposalToolArgsForRoute(spUrl, vault2, dataDir, lockAsTlsMismatch2, proposalId, res);
+    if (!resolved) return;
+    try {
+      const result = await getToolRequestContext({ tool: resolved.tool, toolArgs: resolved.toolArgs });
+      res.json(result);
+    } catch (err) {
+      res.status(502).json({ error: `MCP server unavailable: ${err instanceof Error ? err.message : String(err)}` });
+    }
+  });
   router.get("/:id/outcome", (req, res) => {
     try {
       const entry = findLatestByProposal(dataDir, req.params.id);
@@ -3802,13 +3929,53 @@ function createProposalStatusRouter(spUrl, vault2, dataDir, lockAsTlsMismatch2)
       res.status(500).json({ error: `Could not read the execution journal: ${err instanceof Error ? err.message : String(err)}` });
     }
   });
+  router.post("/:id/shown-snapshot", (req, res) => {
+    if (!vault2.isUnlocked()) {
+      res.status(401).json({ error: "Vault is locked." });
+      return;
+    }
+    const snapshot = req.body;
+    if (snapshot === void 0 || snapshot === null || typeof snapshot !== "object") {
+      res.status(400).json({ error: "Request body must be the rendered snapshot (an object)." });
+      return;
+    }
+    try {
+      const shownHash = shownSnapshotStore2.save(req.params.id, snapshot, vault2);
+      res.json({ shownHash });
+    } catch (err) {
+      res.status(500).json({ error: `Could not store the snapshot: ${err instanceof Error ? err.message : String(err)}` });
+    }
+  });
+  router.get("/:id/shown-snapshot", (req, res) => {
+    if (!vault2.isUnlocked()) {
+      res.status(401).json({ error: "Vault is locked." });
+      return;
+    }
+    try {
+      const entry = shownSnapshotStore2.get(req.params.id, vault2);
+      if (!entry) {
+        res.json({ status: "off_device" });
+        return;
+      }
+      const recomputed = computeShownHash(entry.snapshot);
+      res.json({
+        status: "ok",
+        snapshot: entry.snapshot,
+        shownHash: entry.shownHash,
+        storedAt: entry.storedAt,
+        verifiedLocally: recomputed === entry.shownHash
+      });
+    } catch (err) {
+      res.status(500).json({ error: `Could not read the snapshot: ${err instanceof Error ? err.message : String(err)}` });
+    }
+  });
   return router;
 }
 
 // src/routes/evidence.ts
 import { Router as Router11 } from "express";
 import { createPublicKey as createPublicKey2, verify as verifyEd25519 } from "crypto";
-import { verifyTicketSignature, encodeDidKey, canonicalize as canonicalize3 } from "@hap/core";
+import { verifyTicketSignature, encodeDidKey, canonicalize as canonicalize4 } from "@hap/core";
 function issuerFromPublicKeyHex(publicKeyHex) {
   return encodeDidKey(Buffer.from(publicKeyHex, "hex"));
 }
@@ -3827,7 +3994,7 @@ function verifyPreV07TicketSignature(receipt, asPublicKeyHex) {
     });
     const sig = Buffer.from(signature, "base64");
     if (sig.length !== 64) return false;
-    return verifyEd25519(null, Buffer.from(canonicalize3(signed), "utf8"), key, sig);
+    return verifyEd25519(null, Buffer.from(canonicalize4(signed), "utf8"), key, sig);
   } catch {
     return false;
   }
@@ -4196,7 +4363,7 @@ function createInternalContentCryptoRouter(getSecret, vault2, spUrl, dataDir) {
 
 // src/lib/update-checker.ts
 import { execSync } from "child_process";
-import { dirname as dirname6 } from "path";
+import { dirname as dirname7 } from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
 var GHCR_IMAGE = "suverenai/suveren-gateway";
 var NPM_PACKAGE = "@suveren/gateway";
@@ -4262,7 +4429,7 @@ function compareSemver(a, b) {
   return 0;
 }
 function checkDev() {
-  const cwd = dirname6(fileURLToPath2(import.meta.url));
+  const cwd = dirname7(fileURLToPath2(import.meta.url));
   try {
     execSync("git fetch origin --quiet", { cwd, stdio: "ignore", timeout: 15e3 });
     const out = execSync("git rev-list HEAD..origin/main --count", {
@@ -4335,19 +4502,19 @@ data: ${data}
 import { Router as Router17 } from "express";
 
 // src/lib/gateway-settings.ts
-import { readFileSync as readFileSync11, writeFileSync as writeFileSync6, mkdirSync as mkdirSync6 } from "fs";
-import { homedir as homedir5 } from "os";
-import { join as join11, dirname as dirname7 } from "path";
+import { readFileSync as readFileSync12, writeFileSync as writeFileSync7, mkdirSync as mkdirSync7 } from "fs";
+import { homedir as homedir6 } from "os";
+import { join as join12, dirname as dirname8 } from "path";
 var DEFAULT_SETTINGS = {
   desktopNotifications: true
 };
 function settingsPath(dataDir) {
-  const dir = dataDir ?? process.env.SUVEREN_DATA_DIR ?? join11(homedir5(), ".suveren");
-  return join11(dir, "settings.json");
+  const dir = dataDir ?? process.env.SUVEREN_DATA_DIR ?? join12(homedir6(), ".suveren");
+  return join12(dir, "settings.json");
 }
 function readSettings(dataDir) {
   try {
-    const raw = JSON.parse(readFileSync11(settingsPath(dataDir), "utf8"));
+    const raw = JSON.parse(readFileSync12(settingsPath(dataDir), "utf8"));
     return {
       desktopNotifications: typeof raw.desktopNotifications === "boolean" ? raw.desktopNotifications : DEFAULT_SETTINGS.desktopNotifications
     };
@@ -4361,8 +4528,8 @@ function writeSettings(patch, dataDir) {
     ...typeof patch.desktopNotifications === "boolean" ? { desktopNotifications: patch.desktopNotifications } : {}
   };
   const path = settingsPath(dataDir);
-  mkdirSync6(dirname7(path), { recursive: true });
-  writeFileSync6(path, JSON.stringify(next, null, 2) + "\n", "utf8");
+  mkdirSync7(dirname8(path), { recursive: true });
+  writeFileSync7(path, JSON.stringify(next, null, 2) + "\n", "utf8");
   return next;
 }
 
@@ -4394,20 +4561,20 @@ function createGatewaySettingsRouter() {
 import { Router as Router18 } from "express";
 
 // src/lib/archived-mandates-store.ts
-import { readFileSync as readFileSync12, writeFileSync as writeFileSync7, mkdirSync as mkdirSync7, renameSync } from "fs";
-import { homedir as homedir6 } from "os";
-import { join as join12, dirname as dirname8 } from "path";
+import { readFileSync as readFileSync13, writeFileSync as writeFileSync8, mkdirSync as mkdirSync8, renameSync as renameSync2 } from "fs";
+import { homedir as homedir7 } from "os";
+import { join as join13, dirname as dirname9 } from "path";
 var ID_PATTERN = /^[A-Za-z0-9_.:-]{1,200}$/;
 function isValidMandateId(id) {
   return typeof id === "string" && ID_PATTERN.test(id);
 }
 function storePath(dataDir) {
-  const dir = dataDir ?? process.env.SUVEREN_DATA_DIR ?? join12(homedir6(), ".suveren");
-  return join12(dir, "archived-mandates.json");
+  const dir = dataDir ?? process.env.SUVEREN_DATA_DIR ?? join13(homedir7(), ".suveren");
+  return join13(dir, "archived-mandates.json");
 }
 function readArchived(dataDir) {
   try {
-    const raw = JSON.parse(readFileSync12(storePath(dataDir), "utf8"));
+    const raw = JSON.parse(readFileSync13(storePath(dataDir), "utf8"));
     if (!Array.isArray(raw.archived)) return [];
     return [...new Set(raw.archived.filter(isValidMandateId))];
   } catch {
@@ -4417,10 +4584,10 @@ function readArchived(dataDir) {
 function writeArchived(ids, dataDir) {
   const next = [...new Set(ids.filter(isValidMandateId))].sort();
   const path = storePath(dataDir);
-  mkdirSync7(dirname8(path), { recursive: true });
+  mkdirSync8(dirname9(path), { recursive: true });
   const tmp = `${path}.tmp`;
-  writeFileSync7(tmp, JSON.stringify({ archived: next }, null, 2) + "\n", "utf8");
-  renameSync(tmp, path);
+  writeFileSync8(tmp, JSON.stringify({ archived: next }, null, 2) + "\n", "utf8");
+  renameSync2(tmp, path);
   return next;
 }
 function archiveMandate(id, dataDir) {
@@ -4872,17 +5039,17 @@ function buildSessionHealth(vault2) {
 }
 
 // src/lib/denials-reader.ts
-import { existsSync as existsSync11, readFileSync as readFileSync13 } from "fs";
-import { join as join13 } from "path";
+import { existsSync as existsSync12, readFileSync as readFileSync14 } from "fs";
+import { join as join14 } from "path";
 function loadDenials(dataDir, decrypt) {
-  const encPath = join13(dataDir, "denials.enc.json");
-  const plainPath = join13(dataDir, "denials.json");
-  if (existsSync11(encPath)) {
-    const { blob } = JSON.parse(readFileSync13(encPath, "utf-8"));
+  const encPath = join14(dataDir, "denials.enc.json");
+  const plainPath = join14(dataDir, "denials.json");
+  if (existsSync12(encPath)) {
+    const { blob } = JSON.parse(readFileSync14(encPath, "utf-8"));
     return JSON.parse(decrypt(blob)).records ?? [];
   }
-  if (existsSync11(plainPath)) {
-    return JSON.parse(readFileSync13(plainPath, "utf-8")).records ?? [];
+  if (existsSync12(plainPath)) {
+    return JSON.parse(readFileSync14(plainPath, "utf-8")).records ?? [];
   }
   return [];
 }
@@ -4906,11 +5073,11 @@ function isSimulationMode() {
 // src/index.ts
 (function migrateDataDir() {
   if (process.env.SUVEREN_DATA_DIR) return;
-  const oldDir = join14(homedir7(), ".hap");
-  const newDir = join14(homedir7(), ".suveren");
-  if (!existsSync12(newDir) && existsSync12(oldDir)) {
+  const oldDir = join15(homedir8(), ".hap");
+  const newDir = join15(homedir8(), ".suveren");
+  if (!existsSync13(newDir) && existsSync13(oldDir)) {
     try {
-      renameSync2(oldDir, newDir);
+      renameSync3(oldDir, newDir);
       console.error(`[Control Plane] Migrated data directory: ${oldDir} \u2192 ${newDir}`);
     } catch (err) {
       console.error(`[Control Plane] FATAL: could not migrate data directory ${oldDir} \u2192 ${newDir}:`, err);
@@ -4918,7 +5085,7 @@ function isSimulationMode() {
     }
   }
 })();
-var DATA_DIR = process.env.SUVEREN_DATA_DIR ?? join14(homedir7(), ".suveren");
+var DATA_DIR = process.env.SUVEREN_DATA_DIR ?? join15(homedir8(), ".suveren");
 var SP_URL = resolveAsUrl(DATA_DIR);
 validatePinTlsForUrl(resolvePinTls(DATA_DIR), SP_URL);
 var POLICY_LOCKED = [...readPolicy().locked];
@@ -4926,8 +5093,9 @@ var POLICY_LOCKED_INSTALL_METHOD = readPolicy().policy.installMethod;
 var POLICY_LOCKED_TEAM = readPolicy().policy.team;
 var port = parseInt(process.env.SUVEREN_CP_PORT ?? "3402", 10);
 var HAP_MODE = process.env.HAP_MODE ?? "personal";
-var UI_DIST = process.env.HAP_UI_DIST ?? join14(import.meta.dirname ?? __dirname, "../../ui/dist");
+var UI_DIST = process.env.HAP_UI_DIST ?? join15(import.meta.dirname ?? __dirname, "../../ui/dist");
 var vault = new Vault(DATA_DIR);
+var shownSnapshotStore = new ShownSnapshotStore(DATA_DIR);
 (function repairIfAsUrlChanged() {
   const pairing = readPairing(DATA_DIR);
   if (pairing && pairing.asUrl !== SP_URL) {
@@ -5236,7 +5404,7 @@ app.use("/api/gateway-settings", jsonParser, authGuard, createGatewaySettingsRou
 app.use("/api/archived-mandates", jsonParser, authGuard, createArchivedMandatesRouter());
 app.use("/api/encrypt-intent", jsonParser, authGuard, createEncryptIntentRouter());
 app.use("/api/evidence-export", authGuard, createEvidenceExportRouter(SP_URL, vault, DATA_DIR, lockAsTlsMismatch));
-app.use("/proposal-status", authGuard, createProposalStatusRouter(SP_URL, vault, DATA_DIR, lockAsTlsMismatch));
+app.use("/proposal-status", jsonParser, authGuard, createProposalStatusRouter(SP_URL, vault, DATA_DIR, lockAsTlsMismatch, shownSnapshotStore));
 app.use("/api/evidence", authGuard, createEvidenceRouter());
 app.use("/api/report", jsonParser, authGuard, createReportRouter(() => RUNNING_VERSION));
 app.use("/api/decrypt-intent", jsonParser, authGuard, createDecryptIntentRouter(vault));
@@ -5401,7 +5569,7 @@ app.get("/as-pairing", authGuard, (_req, res) => {
 });
 app.get("/denials", authGuard, (req, res) => {
   try {
-    const dataDir = process.env.SUVEREN_DATA_DIR ?? join14(homedir7(), ".suveren");
+    const dataDir = process.env.SUVEREN_DATA_DIR ?? join15(homedir8(), ".suveren");
     const all = loadDenials(dataDir, (blob) => vault.decrypt(blob));
     const since = Number(req.query.since);
     const limit = Number(req.query.limit);
@@ -5460,12 +5628,12 @@ app.put("/agent-brief/context", jsonParser, authGuard, async (req, res) => {
       res.status(413).json({ error: `Context exceeds ${AGENT_CONTEXT_MAX_BYTES}-byte cap` });
       return;
     }
-    const { mkdirSync: mkdirSync8, writeFileSync: writeFileSync8, renameSync: renameSync3 } = await import("fs");
+    const { mkdirSync: mkdirSync9, writeFileSync: writeFileSync9, renameSync: renameSync4 } = await import("fs");
     const filePath = agentBriefPath();
-    mkdirSync8(dirname9(filePath), { recursive: true });
+    mkdirSync9(dirname10(filePath), { recursive: true });
     const tmpPath = `${filePath}.tmp`;
-    writeFileSync8(tmpPath, content, "utf-8");
-    renameSync3(tmpPath, filePath);
+    writeFileSync9(tmpPath, content, "utf-8");
+    renameSync4(tmpPath, filePath);
     res.json({ ok: true });
   } catch (err) {
     console.error("[Control Plane] agent-brief/context PUT failed:", err);
@@ -5547,7 +5715,7 @@ app.use(
 function detectInstallMethod2() {
   return detectInstallMethod({
     dir: import.meta.dirname ?? __dirname,
-    dockerEnv: existsSync12("/.dockerenv"),
+    dockerEnv: existsSync13("/.dockerenv"),
     managed: process.env.SUVEREN_INSTALL_METHOD === "managed" || POLICY_LOCKED_INSTALL_METHOD === "managed"
   });
 }
@@ -5557,10 +5725,10 @@ function detectRunningVersion() {
     return process.env.HAP_BUILD_SHA ?? "dev";
   }
   const dir = import.meta.dirname ?? __dirname;
-  const bundlePkg = join14(dir, "..", "..", "package.json");
-  if (existsSync12(bundlePkg)) {
+  const bundlePkg = join15(dir, "..", "..", "package.json");
+  if (existsSync13(bundlePkg)) {
     try {
-      const pkg = JSON.parse(readFileSync14(bundlePkg, "utf8"));
+      const pkg = JSON.parse(readFileSync15(bundlePkg, "utf8"));
       if (pkg.name === "@suveren/gateway" && typeof pkg.version === "string") {
         return pkg.version;
       }
@@ -5602,7 +5770,7 @@ app.get("/health", async (req, res) => {
     }
   });
 });
-if (existsSync12(UI_DIST)) {
+if (existsSync13(UI_DIST)) {
   app.use(express.static(UI_DIST, {
     setHeaders: (res, filePath) => {
       if (filePath.endsWith("index.html")) {
@@ -5612,7 +5780,7 @@ if (existsSync12(UI_DIST)) {
   }));
   app.get("*", (_req, res) => {
     res.setHeader("Cache-Control", "no-store, must-revalidate");
-    res.sendFile(join14(UI_DIST, "index.html"));
+    res.sendFile(join15(UI_DIST, "index.html"));
   });
 } else {
   app.get("/", (_req, res) => {