@suveren/gateway 0.30.0 → 0.31.1

package/content/integrations/calendar.json

@@ -122,6 +122,7 @@
         }
       },
       "create_event": {
+        "summary": "Event: {summary|short}[ on {start.dateTime,start.date|date}]",
         "executionMapping": {
           "duration_minutes": "duration",
           "lookahead_days": "lookahead",
@@ -143,6 +144,7 @@
         "actionLabel": "Event created"
       },
       "update_event": {
+        "summary": "Update event[: {summary|short}]",
         "executionMapping": {
           "attendees": [
             {
@@ -164,6 +166,7 @@
         "actionLabel": "Event updated"
       },
       "delete_event": {
+        "summary": "Delete an event",
         "executionMapping": {
           "calendarId": "allowed_calendars"
         },

package/content/integrations/crm.json

@@ -74,6 +74,7 @@
     },
     "overrides": {
       "create_contact": {
+        "summary": "Create contact {name}[ ({company})]",
         "executionMapping": {
           "type": "contact_type"
         },
@@ -94,6 +95,7 @@
         }
       },
       "update_contact": {
+        "summary": "Update contact {name,id}",
         "executionMapping": {
           "contact_type": "contact_type"
         },
@@ -123,6 +125,7 @@
         }
       },
       "delete_contact": {
+        "summary": "Archive a {contact_type} contact",
         "executionMapping": {
           "contact_type": "contact_type"
         },
@@ -152,6 +155,7 @@
         }
       },
       "restore_contact": {
+        "summary": "Restore a {contact_type} contact",
         "executionMapping": {
           "contact_type": "contact_type"
         },
@@ -181,6 +185,7 @@
         }
       },
       "convert_contact": {
+        "summary": "Convert a contact to {to_type}",
         "executionMapping": {
           "contact_type": "contact_type"
         },
@@ -210,6 +215,7 @@
         }
       },
       "log_activity": {
+        "summary": "Log {type}: {summary|short}",
         "executionMapping": {
           "contact_type": "contact_type"
         },
@@ -229,6 +235,7 @@
         }
       },
       "create_deal": {
+        "summary": "Create deal: {title|short}[ — {value|money}]",
         "executionMapping": {
           "contact_type": "contact_type"
         },
@@ -248,6 +255,7 @@
         }
       },
       "update_deal": {
+        "summary": "Update deal[: {title|short}][ — {value|money}]",
         "executionMapping": {
           "contact_type": "contact_type"
         },
@@ -276,6 +284,7 @@
         }
       },
       "create_task": {
+        "summary": "Create task: {title|short}[ (due {due_date|date})]",
         "executionMapping": {
           "contact_type": "contact_type"
         },
@@ -295,6 +304,7 @@
         }
       },
       "complete_task": {
+        "summary": "Complete a task",
         "executionMapping": {
           "contact_type": "contact_type"
         },

package/content/integrations/deploy-github.json

@@ -78,6 +78,7 @@
         }
       },
       "release": {
+        "summary": "Release {repo} to {environment}",
         "executionMapping": {
           "repo": "allowed_repos",
           "environment": "allowed_environments",

package/content/integrations/erp.json

@@ -99,6 +99,7 @@
         "requiredValue": "unlimited"
       },
       "create_quote": {
+        "summary": "Quote of {value|money} net[ — {discount_pct|percent} discount]",
         "executionMapping": {
           "value": "value",
           "discount_pct": "discount_pct",
@@ -133,6 +134,7 @@
         }
       },
       "update_quote": {
+        "summary": "Update quote to {value|money} net[ — {discount_pct|percent} discount]",
         "executionMapping": {
           "value": "value",
           "discount_pct": "discount_pct",
@@ -161,6 +163,7 @@
         }
       },
       "send_quote": {
+        "summary": "Send quote of {value|money} net[ — {discount_pct|percent} discount]",
         "executionMapping": {
           "value": "value",
           "discount_pct": "discount_pct",
@@ -179,6 +182,7 @@
         }
       },
       "convert_quote_to_order": {
+        "summary": "Order of {value|money} net from a quote",
         "executionMapping": {
           "value": "value",
           "discount_pct": "discount_pct",

package/content/integrations/gmail.json

@@ -80,6 +80,7 @@
     },
     "overrides": {
       "send_message": {
+        "summary": "Email to {to|list}: {subject|short}",
         "executionMapping": {
           "to": [
             {
@@ -108,6 +109,7 @@
         "actionLabel": "Email sent"
       },
       "create_draft": {
+        "summary": "Draft email to {to|list}[: {subject|short}]",
         "executionMapping": {
           "to": [
             {
@@ -136,6 +138,7 @@
         "actionLabel": "Email drafted"
       },
       "send_draft": {
+        "summary": "Send a draft email",
         "executionMapping": {},
         "staticExecution": {
           "recipient_count": 1,
@@ -206,6 +209,7 @@
         }
       },
       "delete_draft": {
+        "summary": "Delete a draft email",
         "executionMapping": {},
         "staticExecution": {
           "recipient_count": 0,

package/content/integrations/linkedin.json

@@ -62,6 +62,7 @@
     },
     "overrides": {
       "create_post": {
+        "summary": "LinkedIn post: {text|short}",
         "executionMapping": {
           "visibility": "audience"
         },
@@ -73,6 +74,7 @@
         "actionLabel": "Post published"
       },
       "create_image_post": {
+        "summary": "LinkedIn image post: {text|short}",
         "executionMapping": {
           "visibility": "audience"
         },
@@ -84,6 +86,7 @@
         "actionLabel": "Image post published"
       },
       "create_article_post": {
+        "summary": "LinkedIn article: {title,articleUrl|short}",
         "executionMapping": {
           "visibility": "audience"
         },
@@ -95,6 +98,7 @@
         "actionLabel": "Article published"
       },
       "delete_post": {
+        "summary": "Delete a LinkedIn post",
         "executionMapping": {},
         "staticExecution": {
           "allowed_platforms": "linkedin",

package/content/integrations/mail.json

@@ -79,6 +79,7 @@
         }
       },
       "send_message": {
+        "summary": "Email to {to|list}: {subject|short}",
         "executionMapping": {
           "to": [
             {

package/content/integrations/mollie.json

@@ -38,6 +38,7 @@
     },
     "overrides": {
       "CreatePayment": {
+        "summary": "Payment of {amount|money}: {description|short}",
         "executionMapping": {
           "amount": "amount",
           "currency": "currency"
@@ -56,6 +57,7 @@
         }
       },
       "CreatePaymentLink": {
+        "summary": "Payment link[ of {amount|money}]: {description|short}",
         "executionMapping": {
           "amount": "amount",
           "currency": "currency"
@@ -89,12 +91,14 @@
         }
       },
       "CancelSubscription": {
+        "summary": "Cancel a subscription",
         "executionMapping": {},
         "staticExecution": {
           "action_type": "subscribe"
         }
       },
       "CreateCustomer": {
+        "summary": "Create payment customer[ {name}]",
         "executionMapping": {},
         "staticExecution": {
           "action_type": "charge"
@@ -113,6 +117,7 @@
         }
       },
       "RevokeMandate": {
+        "summary": "Revoke a payment mandate",
         "executionMapping": {},
         "staticExecution": {
           "action_type": "charge"

package/content/integrations/records.json

@@ -52,6 +52,7 @@
         "category": "disabled"
       },
       "create_record": {
+        "summary": "Create {type}: {title|short}",
         "executionMapping": {},
         "staticExecution": {
           "action_type": "write"
@@ -59,6 +60,7 @@
         "actionLabel": "Record created"
       },
       "archive_record": {
+        "summary": "Archive a record",
         "boundField": "archive_access",
         "requiredValue": "allowed",
         "executionMapping": {},
@@ -68,10 +70,12 @@
         "actionLabel": "Record archived"
       },
       "update_record": {
+        "summary": "Update record[: {title|short}]",
         "category": "disabled",
         "actionLabel": "Record updated"
       },
       "delete_record": {
+        "summary": "Delete a record",
         "boundField": "delete_access",
         "requiredValue": "allowed",
         "executionMapping": {},

package/dist/control-plane/index.mjs

@@ -5,9 +5,9 @@ import {
 
 // src/index.ts
 import { randomBytes as randomBytes3 } from "crypto";
-import { existsSync as existsSync13, readFileSync as readFileSync16, renameSync as renameSync4 } from "fs";
-import { dirname as dirname11, join as join16 } from "path";
-import { homedir as homedir9 } from "os";
+import { existsSync as existsSync13, readFileSync as readFileSync17, renameSync as renameSync5 } from "fs";
+import { dirname as dirname12, join as join17 } from "path";
+import { homedir as homedir10 } from "os";
 import express from "express";
 import { createProxyMiddleware } from "http-proxy-middleware";
 
@@ -3384,15 +3384,15 @@ import { promisify } from "util";
 var run = promisify(execFile);
 var SUPPORTED = /* @__PURE__ */ new Set(["darwin", "win32", "linux"]);
 var MODULE_DIR = pathDirname(fileURLToPath(import.meta.url));
-function findCli(dirname12 = MODULE_DIR) {
+function findCli(dirname13 = MODULE_DIR) {
   const candidates = [
     // Bundled (the shipped layout): dist/control-plane → dist → root → bin
-    resolve(dirname12, "..", "..", "bin", "suveren-gateway.js"),
+    resolve(dirname13, "..", "..", "bin", "suveren-gateway.js"),
     // Bundled, were the routes/ directory ever preserved.
-    resolve(dirname12, "..", "..", "..", "bin", "suveren-gateway.js"),
+    resolve(dirname13, "..", "..", "..", "bin", "suveren-gateway.js"),
     // Dev, running from source: the repo's own bundle directory.
-    resolve(dirname12, "..", "..", "..", "..", "bundle", "bin", "suveren-gateway.js"),
-    resolve(dirname12, "..", "..", "..", "..", "..", "bundle", "bin", "suveren-gateway.js")
+    resolve(dirname13, "..", "..", "..", "..", "bundle", "bin", "suveren-gateway.js"),
+    resolve(dirname13, "..", "..", "..", "..", "..", "bundle", "bin", "suveren-gateway.js")
     // Deliberately NO process.cwd() fallback: it makes the result depend on
     // where the process happened to be launched from, so the same install
     // resolves differently between a shell and a login service — and it would
@@ -4677,14 +4677,62 @@ function createBlockedSeenRouter(dataDir) {
   return router;
 }
 
-// src/routes/internal-events.ts
+// src/routes/tickets-seen.ts
 import { Router as Router20 } from "express";
+
+// src/lib/tickets-seen-store.ts
+import { readFileSync as readFileSync15, writeFileSync as writeFileSync10, mkdirSync as mkdirSync10, renameSync as renameSync4 } from "fs";
+import { homedir as homedir9 } from "os";
+import { join as join15, dirname as dirname11 } from "path";
+function storePath3(dataDir) {
+  const dir = dataDir ?? process.env.SUVEREN_DATA_DIR ?? join15(homedir9(), ".suveren");
+  return join15(dir, "tickets-seen.json");
+}
+function readLastSeenTicketsAt(dataDir) {
+  try {
+    const raw = JSON.parse(readFileSync15(storePath3(dataDir), "utf8"));
+    return typeof raw.lastSeenTicketsAt === "number" && Number.isFinite(raw.lastSeenTicketsAt) ? raw.lastSeenTicketsAt : 0;
+  } catch {
+    return 0;
+  }
+}
+function markTicketsSeen(ts, dataDir) {
+  const safeTs = typeof ts === "number" && Number.isFinite(ts) ? ts : Date.now();
+  const path = storePath3(dataDir);
+  mkdirSync10(dirname11(path), { recursive: true });
+  const tmp = `${path}.tmp`;
+  writeFileSync10(tmp, JSON.stringify({ lastSeenTicketsAt: safeTs }, null, 2) + "\n", "utf8");
+  renameSync4(tmp, path);
+  return safeTs;
+}
+
+// src/routes/tickets-seen.ts
+function createTicketsSeenRouter(dataDir) {
+  const router = Router20();
+  router.get("/", (_req, res) => {
+    res.json({ lastSeenTicketsAt: readLastSeenTicketsAt(dataDir) });
+  });
+  router.post("/", (req, res) => {
+    const body = req.body;
+    const ts = typeof body?.ts === "number" && Number.isFinite(body.ts) ? body.ts : Date.now();
+    try {
+      res.json({ lastSeenTicketsAt: markTicketsSeen(ts, dataDir) });
+    } catch (err) {
+      res.status(500).json({ error: `Could not save: ${err.message}` });
+    }
+  });
+  return router;
+}
+
+// src/routes/internal-events.ts
+import { Router as Router21 } from "express";
 import { timingSafeEqual as timingSafeEqual3 } from "crypto";
 var ALLOWED = [
   "proposal-added",
   "action-approval-needed",
   "execution-failed",
-  "denial-recorded"
+  "denial-recorded",
+  "ticket-recorded"
 ];
 var SESSION_EXPIRED = "session-expired";
 var AS_KEY_MISMATCH = "as-key-mismatch";
@@ -4698,7 +4746,7 @@ function secretMatches2(provided, expected) {
   return timingSafeEqual3(a, b);
 }
 function createInternalEventsRouter(getSecret, onSessionExpired, onAsKeyMismatch, onAsTlsMismatch) {
-  const router = Router20();
+  const router = Router21();
   router.post("/event", (req, res) => {
     if (!secretMatches2(req.headers["x-internal-secret"], getSecret())) {
       res.status(401).json({ error: "Unauthorized" });
@@ -4732,7 +4780,7 @@ function createInternalEventsRouter(getSecret, onSessionExpired, onAsKeyMismatch
 }
 
 // src/routes/internal-mandate.ts
-import { Router as Router21 } from "express";
+import { Router as Router22 } from "express";
 import { timingSafeEqual as timingSafeEqual4, randomUUID } from "crypto";
 
 // src/lib/mandate-ceremony.ts
@@ -4914,7 +4962,7 @@ function secretMatches3(provided, expected) {
   return a.length === b.length && timingSafeEqual4(a, b);
 }
 function createInternalMandateRouter(getSecret, deps) {
-  const router = Router21();
+  const router = Router22();
   router.post("/mandate", async (req, res) => {
     if (!secretMatches3(req.header("X-Internal-Secret") ?? void 0, getSecret())) {
       res.status(401).json({ error: "unauthorized" });
@@ -5117,17 +5165,17 @@ function buildSessionHealth(vault2) {
 }
 
 // src/lib/denials-reader.ts
-import { existsSync as existsSync12, readFileSync as readFileSync15 } from "fs";
-import { join as join15 } from "path";
+import { existsSync as existsSync12, readFileSync as readFileSync16 } from "fs";
+import { join as join16 } from "path";
 function loadDenials(dataDir, decrypt) {
-  const encPath = join15(dataDir, "denials.enc.json");
-  const plainPath = join15(dataDir, "denials.json");
+  const encPath = join16(dataDir, "denials.enc.json");
+  const plainPath = join16(dataDir, "denials.json");
   if (existsSync12(encPath)) {
-    const { blob } = JSON.parse(readFileSync15(encPath, "utf-8"));
+    const { blob } = JSON.parse(readFileSync16(encPath, "utf-8"));
     return JSON.parse(decrypt(blob)).records ?? [];
   }
   if (existsSync12(plainPath)) {
-    return JSON.parse(readFileSync15(plainPath, "utf-8")).records ?? [];
+    return JSON.parse(readFileSync16(plainPath, "utf-8")).records ?? [];
   }
   return [];
 }
@@ -5151,11 +5199,11 @@ function isSimulationMode() {
 // src/index.ts
 (function migrateDataDir() {
   if (process.env.SUVEREN_DATA_DIR) return;
-  const oldDir = join16(homedir9(), ".hap");
-  const newDir = join16(homedir9(), ".suveren");
+  const oldDir = join17(homedir10(), ".hap");
+  const newDir = join17(homedir10(), ".suveren");
   if (!existsSync13(newDir) && existsSync13(oldDir)) {
     try {
-      renameSync4(oldDir, newDir);
+      renameSync5(oldDir, newDir);
       console.error(`[Control Plane] Migrated data directory: ${oldDir} \u2192 ${newDir}`);
     } catch (err) {
       console.error(`[Control Plane] FATAL: could not migrate data directory ${oldDir} \u2192 ${newDir}:`, err);
@@ -5163,7 +5211,7 @@ function isSimulationMode() {
     }
   }
 })();
-var DATA_DIR = process.env.SUVEREN_DATA_DIR ?? join16(homedir9(), ".suveren");
+var DATA_DIR = process.env.SUVEREN_DATA_DIR ?? join17(homedir10(), ".suveren");
 var SP_URL = resolveAsUrl(DATA_DIR);
 validatePinTlsForUrl(resolvePinTls(DATA_DIR), SP_URL);
 var POLICY_LOCKED = [...readPolicy().locked];
@@ -5171,7 +5219,7 @@ var POLICY_LOCKED_INSTALL_METHOD = readPolicy().policy.installMethod;
 var POLICY_LOCKED_TEAM = readPolicy().policy.team;
 var port = parseInt(process.env.SUVEREN_CP_PORT ?? "3402", 10);
 var HAP_MODE = process.env.HAP_MODE ?? "personal";
-var UI_DIST = process.env.HAP_UI_DIST ?? join16(import.meta.dirname ?? __dirname, "../../ui/dist");
+var UI_DIST = process.env.HAP_UI_DIST ?? join17(import.meta.dirname ?? __dirname, "../../ui/dist");
 var vault = new Vault(DATA_DIR);
 var shownSnapshotStore = new ShownSnapshotStore(DATA_DIR);
 (function repairIfAsUrlChanged() {
@@ -5481,6 +5529,7 @@ app.use("/autostart", jsonParser, authGuard, createAutostartRouter());
 app.use("/api/gateway-settings", jsonParser, authGuard, createGatewaySettingsRouter());
 app.use("/api/archived-mandates", jsonParser, authGuard, createArchivedMandatesRouter());
 app.use("/api/blocked-seen", jsonParser, authGuard, createBlockedSeenRouter());
+app.use("/api/tickets-seen", jsonParser, authGuard, createTicketsSeenRouter());
 app.use("/api/encrypt-intent", jsonParser, authGuard, createEncryptIntentRouter());
 app.use("/api/evidence-export", authGuard, createEvidenceExportRouter(SP_URL, vault, DATA_DIR, lockAsTlsMismatch));
 app.use("/proposal-status", jsonParser, authGuard, createProposalStatusRouter(SP_URL, vault, DATA_DIR, lockAsTlsMismatch, shownSnapshotStore));
@@ -5657,7 +5706,7 @@ app.get("/as-pairing", authGuard, (_req, res) => {
 });
 app.get("/denials", authGuard, (req, res) => {
   try {
-    const dataDir = process.env.SUVEREN_DATA_DIR ?? join16(homedir9(), ".suveren");
+    const dataDir = process.env.SUVEREN_DATA_DIR ?? join17(homedir10(), ".suveren");
     const all = loadDenials(dataDir, (blob) => vault.decrypt(blob));
     const since = Number(req.query.since);
     const limit = Number(req.query.limit);
@@ -5716,12 +5765,12 @@ app.put("/agent-brief/context", jsonParser, authGuard, async (req, res) => {
       res.status(413).json({ error: `Context exceeds ${AGENT_CONTEXT_MAX_BYTES}-byte cap` });
       return;
     }
-    const { mkdirSync: mkdirSync10, writeFileSync: writeFileSync10, renameSync: renameSync5 } = await import("fs");
+    const { mkdirSync: mkdirSync11, writeFileSync: writeFileSync11, renameSync: renameSync6 } = await import("fs");
     const filePath = agentBriefPath();
-    mkdirSync10(dirname11(filePath), { recursive: true });
+    mkdirSync11(dirname12(filePath), { recursive: true });
     const tmpPath = `${filePath}.tmp`;
-    writeFileSync10(tmpPath, content, "utf-8");
-    renameSync5(tmpPath, filePath);
+    writeFileSync11(tmpPath, content, "utf-8");
+    renameSync6(tmpPath, filePath);
     res.json({ ok: true });
   } catch (err) {
     console.error("[Control Plane] agent-brief/context PUT failed:", err);
@@ -5813,10 +5862,10 @@ function detectRunningVersion() {
     return process.env.HAP_BUILD_SHA ?? "dev";
   }
   const dir = import.meta.dirname ?? __dirname;
-  const bundlePkg = join16(dir, "..", "..", "package.json");
+  const bundlePkg = join17(dir, "..", "..", "package.json");
   if (existsSync13(bundlePkg)) {
     try {
-      const pkg = JSON.parse(readFileSync16(bundlePkg, "utf8"));
+      const pkg = JSON.parse(readFileSync17(bundlePkg, "utf8"));
       if (pkg.name === "@suveren/gateway" && typeof pkg.version === "string") {
         return pkg.version;
       }
@@ -5868,7 +5917,7 @@ if (existsSync13(UI_DIST)) {
   }));
   app.get("*", (_req, res) => {
     res.setHeader("Cache-Control", "no-store, must-revalidate");
-    res.sendFile(join16(UI_DIST, "index.html"));
+    res.sendFile(join17(UI_DIST, "index.html"));
   });
 } else {
   app.get("/", (_req, res) => {

package/dist/mcp-server/http.mjs

@@ -3348,6 +3348,7 @@ var SharedState = class {
     } catch (err) {
       throw new ArchiveWriteError(`Receipt archive write failed: ${err instanceof Error ? err.message : String(err)}`);
     }
+    void notifyControlPlane("ticket-recorded");
   }
   setGateContent(path, authorizationId, profileId, content, opts) {
     this.gateStore.set(authorizationId, {
@@ -4020,10 +4021,44 @@ function invalidDisplayHintsReason(toolName, entry) {
   }
   return null;
 }
+var SUMMARY_FORMATS = ["money", "percent", "list", "short", "date"];
+function invalidSummaryReason(toolName, entry) {
+  if (entry === null || typeof entry !== "object") return null;
+  const summary = entry.summary;
+  if (summary === void 0) return null;
+  const at = `override "${toolName}".summary`;
+  if (typeof summary !== "string" || summary.trim().length === 0) return `${at} must be a non-empty string`;
+  if (summary.length > 200) return `${at} must be at most 200 characters`;
+  const balanced = (open, close) => {
+    let d = 0;
+    for (const ch of summary) {
+      if (ch === open) {
+        d += 1;
+        if (d > 1) return false;
+      }
+      if (ch === close) {
+        d -= 1;
+        if (d < 0) return false;
+      }
+    }
+    return d === 0;
+  };
+  if (!balanced("{", "}")) return `${at} has unbalanced or nested { }`;
+  if (!balanced("[", "]")) return `${at} has unbalanced or nested [ ]`;
+  for (const m of summary.matchAll(/\{([^{}]+)\}/g)) {
+    const [paths, fmt, extra] = m[1].split("|").map((x) => x.trim());
+    if (extra !== void 0) return `${at} {${m[1]}} has more than one format`;
+    if (!paths.split(",").every((p) => /^[A-Za-z_][\w-]*(\.[A-Za-z_][\w-]*)*$/.test(p.trim()))) {
+      return `${at} {${m[1]}} has an invalid field path`;
+    }
+    if (fmt !== void 0 && !SUMMARY_FORMATS.includes(fmt)) return `${at} {${m[1]}} has unknown format "${fmt}"`;
+  }
+  return null;
+}
 function invalidManifestPreviewReason(manifest) {
   const overrides = manifest.toolGating?.overrides ?? {};
   for (const [toolName, entry] of Object.entries(overrides)) {
-    const reason = invalidPreviewReason(toolName, entry) ?? invalidDisplayHintsReason(toolName, entry);
+    const reason = invalidPreviewReason(toolName, entry) ?? invalidDisplayHintsReason(toolName, entry) ?? invalidSummaryReason(toolName, entry);
     if (reason) return reason;
   }
   return null;
@@ -5338,10 +5373,10 @@ function zeroCappedBound(profileId, bounds, actionType) {
   }
   return null;
 }
-function toolAlwaysListed(tool, isBuiltin) {
+function toolAlwaysListed(tool, isBuiltin, builtinAlwaysListed = () => false) {
   if (tool.internal || !tool.gating?.profile) return false;
   if (tool.gating.category === "disabled") return false;
-  if (isBuiltin(tool.integrationId)) return false;
+  if (isBuiltin(tool.integrationId) && !builtinAlwaysListed(tool.integrationId)) return false;
   if (!tool.gating.hideUnlessAuthorized) return true;
   return Boolean(tool.gating.simulationOnly) && isSimulationMode();
 }
@@ -6406,9 +6441,10 @@ function buildCapabilityMap(profileId, integrationManager2) {
 function listedWithoutMandate(authorizations, integrationManager2) {
   if (!integrationManager2) return [];
   const isBuiltin = (id) => integrationManager2.isBuiltin?.(id) ?? false;
+  const builtinAlwaysListed = (id) => integrationManager2.builtinAlwaysListed?.(id) ?? false;
   const byProfile = /* @__PURE__ */ new Map();
   for (const tool of integrationManager2.getAllTools()) {
-    if (!toolAlwaysListed(tool, isBuiltin)) continue;
+    if (!toolAlwaysListed(tool, isBuiltin, builtinAlwaysListed)) continue;
     const profile = tool.gating.profile;
     if (authorizations.some((a) => a.complete && profileMatches(a.profileId, profile))) continue;
     const short = shortProfileName2(profile);
@@ -7383,8 +7419,9 @@ function createMcpServer(state2, integrationManager2) {
   function refreshTools() {
     const auths = state2.getEnrichedAuthorizations();
     const isBuiltin = (id) => integrationManager2?.isBuiltin?.(id) ?? false;
+    const builtinAlwaysListed = (id) => integrationManager2?.builtinAlwaysListed?.(id) ?? false;
     for (const [, { tool, registered }] of proxiedTools) {
-      if (toolAlwaysListed(tool, isBuiltin)) {
+      if (toolAlwaysListed(tool, isBuiltin, builtinAlwaysListed)) {
         registered.enable();
       } else if (tool.gating?.profile) {
         const matchingAuths = auths.filter(
@@ -8233,6 +8270,10 @@ var IntegrationManager = class {
   isBuiltin(id) {
     return this.builtins.has(id);
   }
+  /** A built-in that declares `alwaysListed` (see builtin-integration.ts). */
+  builtinAlwaysListed(id) {
+    return this.builtins.get(id)?.def.alwaysListed === true;
+  }
   /**
    * Whether `id` may run while simulation mode is on: a connector whose manifest
    * carries the `simulation` marker, or a built-in that declares `simulation: true`.
@@ -9209,6 +9250,11 @@ var reportBuiltin = (deps) => ({
   // read-only export CLI; writes only the local, vault-encrypted report file)
   // — safe during a simulation-mode test.
   simulation: true,
+  // Listed without a mandate, like connector tools: an AI client that ignores
+  // tools/list_changed (ChatGPT) otherwise never sees report__* after the
+  // reporting mandate is signed mid-chat (simulation finding, 2026-10-16).
+  // Listing authorizes nothing — the gate still refuses a call without one.
+  alwaysListed: true,
   // The same predicate the reporting window uses to refuse a mandate
   // (reporting@0.1, or no window set): the gate never selects such a mandate
   // for ANY report tool — so write_report is never ticketed under (and never