@suveren/gateway 0.31.0 → 0.31.2

package/content/integrations/crm.json

@@ -216,6 +216,7 @@
       },
       "log_activity": {
         "summary": "Log {type}: {summary|short}",
+        "actionLabel": "Activity logged",
         "executionMapping": {
           "contact_type": "contact_type"
         },
@@ -236,6 +237,7 @@
       },
       "create_deal": {
         "summary": "Create deal: {title|short}[ — {value|money}]",
+        "actionLabel": "Deal created",
         "executionMapping": {
           "contact_type": "contact_type"
         },
@@ -256,6 +258,7 @@
       },
       "update_deal": {
         "summary": "Update deal[: {title|short}][ — {value|money}]",
+        "actionLabel": "Deal updated",
         "executionMapping": {
           "contact_type": "contact_type"
         },
@@ -285,6 +288,7 @@
       },
       "create_task": {
         "summary": "Create task: {title|short}[ (due {due_date|date})]",
+        "actionLabel": "Task created",
         "executionMapping": {
           "contact_type": "contact_type"
         },
@@ -305,6 +309,7 @@
       },
       "complete_task": {
         "summary": "Complete a task",
+        "actionLabel": "Task completed",
         "executionMapping": {
           "contact_type": "contact_type"
         },

package/content/integrations/mollie.json

@@ -39,6 +39,7 @@
     "overrides": {
       "CreatePayment": {
         "summary": "Payment of {amount|money}: {description|short}",
+        "actionLabel": "Payment created",
         "executionMapping": {
           "amount": "amount",
           "currency": "currency"
@@ -58,6 +59,7 @@
       },
       "CreatePaymentLink": {
         "summary": "Payment link[ of {amount|money}]: {description|short}",
+        "actionLabel": "Payment link created",
         "executionMapping": {
           "amount": "amount",
           "currency": "currency"
@@ -92,6 +94,7 @@
       },
       "CancelSubscription": {
         "summary": "Cancel a subscription",
+        "actionLabel": "Subscription cancelled",
         "executionMapping": {},
         "staticExecution": {
           "action_type": "subscribe"
@@ -99,6 +102,7 @@
       },
       "CreateCustomer": {
         "summary": "Create payment customer[ {name}]",
+        "actionLabel": "Payment customer created",
         "executionMapping": {},
         "staticExecution": {
           "action_type": "charge"
@@ -118,6 +122,7 @@
       },
       "RevokeMandate": {
         "summary": "Revoke a payment mandate",
+        "actionLabel": "Payment mandate revoked",
         "executionMapping": {},
         "staticExecution": {
           "action_type": "charge"

package/dist/control-plane/index.mjs

@@ -5,9 +5,9 @@ import {
 
 // src/index.ts
 import { randomBytes as randomBytes3 } from "crypto";
-import { existsSync as existsSync13, readFileSync as readFileSync17, renameSync as renameSync5 } from "fs";
-import { dirname as dirname12, join as join17 } from "path";
-import { homedir as homedir10 } from "os";
+import { existsSync as existsSync13, readFileSync as readFileSync18, renameSync as renameSync6 } from "fs";
+import { dirname as dirname13, join as join18 } from "path";
+import { homedir as homedir11 } from "os";
 import express from "express";
 import { createProxyMiddleware } from "http-proxy-middleware";
 
@@ -3384,15 +3384,15 @@ import { promisify } from "util";
 var run = promisify(execFile);
 var SUPPORTED = /* @__PURE__ */ new Set(["darwin", "win32", "linux"]);
 var MODULE_DIR = pathDirname(fileURLToPath(import.meta.url));
-function findCli(dirname13 = MODULE_DIR) {
+function findCli(dirname14 = MODULE_DIR) {
   const candidates = [
     // Bundled (the shipped layout): dist/control-plane → dist → root → bin
-    resolve(dirname13, "..", "..", "bin", "suveren-gateway.js"),
+    resolve(dirname14, "..", "..", "bin", "suveren-gateway.js"),
     // Bundled, were the routes/ directory ever preserved.
-    resolve(dirname13, "..", "..", "..", "bin", "suveren-gateway.js"),
+    resolve(dirname14, "..", "..", "..", "bin", "suveren-gateway.js"),
     // Dev, running from source: the repo's own bundle directory.
-    resolve(dirname13, "..", "..", "..", "..", "bundle", "bin", "suveren-gateway.js"),
-    resolve(dirname13, "..", "..", "..", "..", "..", "bundle", "bin", "suveren-gateway.js")
+    resolve(dirname14, "..", "..", "..", "..", "bundle", "bin", "suveren-gateway.js"),
+    resolve(dirname14, "..", "..", "..", "..", "..", "bundle", "bin", "suveren-gateway.js")
     // Deliberately NO process.cwd() fallback: it makes the result depend on
     // where the process happened to be launched from, so the same install
     // resolves differently between a shell and a login service — and it would
@@ -4724,15 +4724,63 @@ function createTicketsSeenRouter(dataDir) {
   return router;
 }
 
-// src/routes/internal-events.ts
+// src/routes/report-seen.ts
 import { Router as Router21 } from "express";
+
+// src/lib/report-seen-store.ts
+import { readFileSync as readFileSync16, writeFileSync as writeFileSync11, mkdirSync as mkdirSync11, renameSync as renameSync5 } from "fs";
+import { homedir as homedir10 } from "os";
+import { join as join16, dirname as dirname12 } from "path";
+function storePath4(dataDir) {
+  const dir = dataDir ?? process.env.SUVEREN_DATA_DIR ?? join16(homedir10(), ".suveren");
+  return join16(dir, "report-seen.json");
+}
+function readLastSeenReportAt(dataDir) {
+  try {
+    const raw = JSON.parse(readFileSync16(storePath4(dataDir), "utf8"));
+    return typeof raw.lastSeenReportAt === "number" && Number.isFinite(raw.lastSeenReportAt) ? raw.lastSeenReportAt : 0;
+  } catch {
+    return 0;
+  }
+}
+function markReportSeen(ts, dataDir) {
+  const safeTs = typeof ts === "number" && Number.isFinite(ts) ? ts : Date.now();
+  const path = storePath4(dataDir);
+  mkdirSync11(dirname12(path), { recursive: true });
+  const tmp = `${path}.tmp`;
+  writeFileSync11(tmp, JSON.stringify({ lastSeenReportAt: safeTs }, null, 2) + "\n", "utf8");
+  renameSync5(tmp, path);
+  return safeTs;
+}
+
+// src/routes/report-seen.ts
+function createReportSeenRouter(dataDir) {
+  const router = Router21();
+  router.get("/", (_req, res) => {
+    res.json({ lastSeenReportAt: readLastSeenReportAt(dataDir) });
+  });
+  router.post("/", (req, res) => {
+    const body = req.body;
+    const ts = typeof body?.ts === "number" && Number.isFinite(body.ts) ? body.ts : Date.now();
+    try {
+      res.json({ lastSeenReportAt: markReportSeen(ts, dataDir) });
+    } catch (err) {
+      res.status(500).json({ error: `Could not save: ${err.message}` });
+    }
+  });
+  return router;
+}
+
+// src/routes/internal-events.ts
+import { Router as Router22 } from "express";
 import { timingSafeEqual as timingSafeEqual3 } from "crypto";
 var ALLOWED = [
   "proposal-added",
   "action-approval-needed",
   "execution-failed",
   "denial-recorded",
-  "ticket-recorded"
+  "ticket-recorded",
+  "report-written"
 ];
 var SESSION_EXPIRED = "session-expired";
 var AS_KEY_MISMATCH = "as-key-mismatch";
@@ -4746,7 +4794,7 @@ function secretMatches2(provided, expected) {
   return timingSafeEqual3(a, b);
 }
 function createInternalEventsRouter(getSecret, onSessionExpired, onAsKeyMismatch, onAsTlsMismatch) {
-  const router = Router21();
+  const router = Router22();
   router.post("/event", (req, res) => {
     if (!secretMatches2(req.headers["x-internal-secret"], getSecret())) {
       res.status(401).json({ error: "Unauthorized" });
@@ -4780,7 +4828,7 @@ function createInternalEventsRouter(getSecret, onSessionExpired, onAsKeyMismatch
 }
 
 // src/routes/internal-mandate.ts
-import { Router as Router22 } from "express";
+import { Router as Router23 } from "express";
 import { timingSafeEqual as timingSafeEqual4, randomUUID } from "crypto";
 
 // src/lib/mandate-ceremony.ts
@@ -4962,7 +5010,7 @@ function secretMatches3(provided, expected) {
   return a.length === b.length && timingSafeEqual4(a, b);
 }
 function createInternalMandateRouter(getSecret, deps) {
-  const router = Router22();
+  const router = Router23();
   router.post("/mandate", async (req, res) => {
     if (!secretMatches3(req.header("X-Internal-Secret") ?? void 0, getSecret())) {
       res.status(401).json({ error: "unauthorized" });
@@ -5165,17 +5213,17 @@ function buildSessionHealth(vault2) {
 }
 
 // src/lib/denials-reader.ts
-import { existsSync as existsSync12, readFileSync as readFileSync16 } from "fs";
-import { join as join16 } from "path";
+import { existsSync as existsSync12, readFileSync as readFileSync17 } from "fs";
+import { join as join17 } from "path";
 function loadDenials(dataDir, decrypt) {
-  const encPath = join16(dataDir, "denials.enc.json");
-  const plainPath = join16(dataDir, "denials.json");
+  const encPath = join17(dataDir, "denials.enc.json");
+  const plainPath = join17(dataDir, "denials.json");
   if (existsSync12(encPath)) {
-    const { blob } = JSON.parse(readFileSync16(encPath, "utf-8"));
+    const { blob } = JSON.parse(readFileSync17(encPath, "utf-8"));
     return JSON.parse(decrypt(blob)).records ?? [];
   }
   if (existsSync12(plainPath)) {
-    return JSON.parse(readFileSync16(plainPath, "utf-8")).records ?? [];
+    return JSON.parse(readFileSync17(plainPath, "utf-8")).records ?? [];
   }
   return [];
 }
@@ -5199,11 +5247,11 @@ function isSimulationMode() {
 // src/index.ts
 (function migrateDataDir() {
   if (process.env.SUVEREN_DATA_DIR) return;
-  const oldDir = join17(homedir10(), ".hap");
-  const newDir = join17(homedir10(), ".suveren");
+  const oldDir = join18(homedir11(), ".hap");
+  const newDir = join18(homedir11(), ".suveren");
   if (!existsSync13(newDir) && existsSync13(oldDir)) {
     try {
-      renameSync5(oldDir, newDir);
+      renameSync6(oldDir, newDir);
       console.error(`[Control Plane] Migrated data directory: ${oldDir} \u2192 ${newDir}`);
     } catch (err) {
       console.error(`[Control Plane] FATAL: could not migrate data directory ${oldDir} \u2192 ${newDir}:`, err);
@@ -5211,7 +5259,7 @@ function isSimulationMode() {
     }
   }
 })();
-var DATA_DIR = process.env.SUVEREN_DATA_DIR ?? join17(homedir10(), ".suveren");
+var DATA_DIR = process.env.SUVEREN_DATA_DIR ?? join18(homedir11(), ".suveren");
 var SP_URL = resolveAsUrl(DATA_DIR);
 validatePinTlsForUrl(resolvePinTls(DATA_DIR), SP_URL);
 var POLICY_LOCKED = [...readPolicy().locked];
@@ -5219,7 +5267,7 @@ var POLICY_LOCKED_INSTALL_METHOD = readPolicy().policy.installMethod;
 var POLICY_LOCKED_TEAM = readPolicy().policy.team;
 var port = parseInt(process.env.SUVEREN_CP_PORT ?? "3402", 10);
 var HAP_MODE = process.env.HAP_MODE ?? "personal";
-var UI_DIST = process.env.HAP_UI_DIST ?? join17(import.meta.dirname ?? __dirname, "../../ui/dist");
+var UI_DIST = process.env.HAP_UI_DIST ?? join18(import.meta.dirname ?? __dirname, "../../ui/dist");
 var vault = new Vault(DATA_DIR);
 var shownSnapshotStore = new ShownSnapshotStore(DATA_DIR);
 (function repairIfAsUrlChanged() {
@@ -5530,6 +5578,7 @@ app.use("/api/gateway-settings", jsonParser, authGuard, createGatewaySettingsRou
 app.use("/api/archived-mandates", jsonParser, authGuard, createArchivedMandatesRouter());
 app.use("/api/blocked-seen", jsonParser, authGuard, createBlockedSeenRouter());
 app.use("/api/tickets-seen", jsonParser, authGuard, createTicketsSeenRouter());
+app.use("/api/report-seen", jsonParser, authGuard, createReportSeenRouter());
 app.use("/api/encrypt-intent", jsonParser, authGuard, createEncryptIntentRouter());
 app.use("/api/evidence-export", authGuard, createEvidenceExportRouter(SP_URL, vault, DATA_DIR, lockAsTlsMismatch));
 app.use("/proposal-status", jsonParser, authGuard, createProposalStatusRouter(SP_URL, vault, DATA_DIR, lockAsTlsMismatch, shownSnapshotStore));
@@ -5706,7 +5755,7 @@ app.get("/as-pairing", authGuard, (_req, res) => {
 });
 app.get("/denials", authGuard, (req, res) => {
   try {
-    const dataDir = process.env.SUVEREN_DATA_DIR ?? join17(homedir10(), ".suveren");
+    const dataDir = process.env.SUVEREN_DATA_DIR ?? join18(homedir11(), ".suveren");
     const all = loadDenials(dataDir, (blob) => vault.decrypt(blob));
     const since = Number(req.query.since);
     const limit = Number(req.query.limit);
@@ -5765,12 +5814,12 @@ app.put("/agent-brief/context", jsonParser, authGuard, async (req, res) => {
       res.status(413).json({ error: `Context exceeds ${AGENT_CONTEXT_MAX_BYTES}-byte cap` });
       return;
     }
-    const { mkdirSync: mkdirSync11, writeFileSync: writeFileSync11, renameSync: renameSync6 } = await import("fs");
+    const { mkdirSync: mkdirSync12, writeFileSync: writeFileSync12, renameSync: renameSync7 } = await import("fs");
     const filePath = agentBriefPath();
-    mkdirSync11(dirname12(filePath), { recursive: true });
+    mkdirSync12(dirname13(filePath), { recursive: true });
     const tmpPath = `${filePath}.tmp`;
-    writeFileSync11(tmpPath, content, "utf-8");
-    renameSync6(tmpPath, filePath);
+    writeFileSync12(tmpPath, content, "utf-8");
+    renameSync7(tmpPath, filePath);
     res.json({ ok: true });
   } catch (err) {
     console.error("[Control Plane] agent-brief/context PUT failed:", err);
@@ -5862,10 +5911,10 @@ function detectRunningVersion() {
     return process.env.HAP_BUILD_SHA ?? "dev";
   }
   const dir = import.meta.dirname ?? __dirname;
-  const bundlePkg = join17(dir, "..", "..", "package.json");
+  const bundlePkg = join18(dir, "..", "..", "package.json");
   if (existsSync13(bundlePkg)) {
     try {
-      const pkg = JSON.parse(readFileSync17(bundlePkg, "utf8"));
+      const pkg = JSON.parse(readFileSync18(bundlePkg, "utf8"));
       if (pkg.name === "@suveren/gateway" && typeof pkg.version === "string") {
         return pkg.version;
       }
@@ -5917,7 +5966,7 @@ if (existsSync13(UI_DIST)) {
   }));
   app.get("*", (_req, res) => {
     res.setHeader("Cache-Control", "no-store, must-revalidate");
-    res.sendFile(join17(UI_DIST, "index.html"));
+    res.sendFile(join18(UI_DIST, "index.html"));
   });
 } else {
   app.get("/", (_req, res) => {

package/dist/mcp-server/http.mjs

@@ -3113,6 +3113,7 @@ var ReportStore = class {
     const result = await verifyReport(html, sources);
     this.report = { html: result.html, savedAt: now, checkedAt: now, result };
     this.persist();
+    void notifyControlPlane("report-written");
     return this.report;
   }
   /**
@@ -5373,10 +5374,10 @@ function zeroCappedBound(profileId, bounds, actionType) {
   }
   return null;
 }
-function toolAlwaysListed(tool, isBuiltin) {
+function toolAlwaysListed(tool, isBuiltin, builtinAlwaysListed = () => false) {
   if (tool.internal || !tool.gating?.profile) return false;
   if (tool.gating.category === "disabled") return false;
-  if (isBuiltin(tool.integrationId)) return false;
+  if (isBuiltin(tool.integrationId) && !builtinAlwaysListed(tool.integrationId)) return false;
   if (!tool.gating.hideUnlessAuthorized) return true;
   return Boolean(tool.gating.simulationOnly) && isSimulationMode();
 }
@@ -6441,9 +6442,10 @@ function buildCapabilityMap(profileId, integrationManager2) {
 function listedWithoutMandate(authorizations, integrationManager2) {
   if (!integrationManager2) return [];
   const isBuiltin = (id) => integrationManager2.isBuiltin?.(id) ?? false;
+  const builtinAlwaysListed = (id) => integrationManager2.builtinAlwaysListed?.(id) ?? false;
   const byProfile = /* @__PURE__ */ new Map();
   for (const tool of integrationManager2.getAllTools()) {
-    if (!toolAlwaysListed(tool, isBuiltin)) continue;
+    if (!toolAlwaysListed(tool, isBuiltin, builtinAlwaysListed)) continue;
     const profile = tool.gating.profile;
     if (authorizations.some((a) => a.complete && profileMatches(a.profileId, profile))) continue;
     const short = shortProfileName2(profile);
@@ -7418,8 +7420,9 @@ function createMcpServer(state2, integrationManager2) {
   function refreshTools() {
     const auths = state2.getEnrichedAuthorizations();
     const isBuiltin = (id) => integrationManager2?.isBuiltin?.(id) ?? false;
+    const builtinAlwaysListed = (id) => integrationManager2?.builtinAlwaysListed?.(id) ?? false;
     for (const [, { tool, registered }] of proxiedTools) {
-      if (toolAlwaysListed(tool, isBuiltin)) {
+      if (toolAlwaysListed(tool, isBuiltin, builtinAlwaysListed)) {
         registered.enable();
       } else if (tool.gating?.profile) {
         const matchingAuths = auths.filter(
@@ -8268,6 +8271,25 @@ var IntegrationManager = class {
   isBuiltin(id) {
     return this.builtins.has(id);
   }
+  /**
+   * Names only, for the UI's labels ("Report written", system "Reports"):
+   * id, display name and per-tool action labels. Kept apart from the
+   * connector manifests so a built-in never shows up as a connector card.
+   */
+  getBuiltinLabels() {
+    return [...this.builtins.values()].map(({ def }) => {
+      const overrides = {};
+      for (const [tool, o] of Object.entries(def.toolGating?.overrides ?? {})) {
+        const label = o?.actionLabel;
+        if (typeof label === "string") overrides[tool] = { actionLabel: label };
+      }
+      return { id: def.id, name: def.name, toolGating: { overrides } };
+    });
+  }
+  /** A built-in that declares `alwaysListed` (see builtin-integration.ts). */
+  builtinAlwaysListed(id) {
+    return this.builtins.get(id)?.def.alwaysListed === true;
+  }
   /**
    * Whether `id` may run while simulation mode is on: a connector whose manifest
    * carries the `simulation` marker, or a built-in that declares `simulation: true`.
@@ -9191,6 +9213,14 @@ function writeReportRefusal(args) {
   if (bytes > MAX_REPORT_HTML_BYTES) {
     return `the report is ${bytes} bytes, over the ${MAX_REPORT_HTML_BYTES}-byte limit. Shorten it (the gateway draws the verifiable elements for you \u2014 you do not need to inline their data) and write again.`;
   }
+  const { html: kept, notes } = sanitizeReport(html);
+  if (!/<sv-(ai|ticket|approval|mandate|record|case|metric|row)\b/i.test(kept)) {
+    const lost = [];
+    if (notes.droppedBlocks > 0) lost.push(`${notes.droppedBlocks} block(s) outside sv-ai`);
+    if (notes.droppedSvInsideAi > 0) lost.push(`${notes.droppedSvInsideAi} sv-* element(s) inside sv-ai`);
+    if (notes.droppedStyles > 0) lost.push(`${notes.droppedStyles} <style> block(s)`);
+    return `nothing in this report would be shown${lost.length ? ` (dropped: ${lost.join(", ")})` : ""}. A report is a flat sequence of top-level blocks: your own content inside <sv-ai>\u2026</sv-ai>, gateway elements (sv-ticket, sv-approval, sv-mandate, sv-record, sv-case, sv-metric, optionally in sv-row) and at most one sv-glossary. Write it again in that form; nothing was stored and no ticket was used.`;
+  }
   return void 0;
 }
 function writeReportTool(deps) {
@@ -9244,6 +9274,11 @@ var reportBuiltin = (deps) => ({
   // read-only export CLI; writes only the local, vault-encrypted report file)
   // — safe during a simulation-mode test.
   simulation: true,
+  // Listed without a mandate, like connector tools: an AI client that ignores
+  // tools/list_changed (ChatGPT) otherwise never sees report__* after the
+  // reporting mandate is signed mid-chat (simulation finding, 2026-10-16).
+  // Listing authorizes nothing — the gate still refuses a call without one.
+  alwaysListed: true,
   // The same predicate the reporting window uses to refuse a mandate
   // (reporting@0.1, or no window set): the gate never selects such a mandate
   // for ANY report tool — so write_report is never ticketed under (and never
@@ -9255,7 +9290,7 @@ var reportBuiltin = (deps) => ({
       get_ticket: READ_GATE,
       list_cases: READ_GATE,
       get_records: READ_GATE,
-      write_report: { executionMapping: {}, staticExecution: { action_type: "report" } }
+      write_report: { executionMapping: {}, staticExecution: { action_type: "report" }, actionLabel: "Report written" }
     }
   },
   tools: [
@@ -9654,6 +9689,7 @@ function setupBuiltin(deps) {
         set_agent_brief: {
           executionMapping: {},
           staticExecution: { action_type: "brief" },
+          actionLabel: "Agent brief set",
           hideUnlessAuthorized: true,
           approvalView: { content: { label: "New agent brief", kind: "markdown" } },
           // AU3 — the approval card's preview of this pending proposal (DL1
@@ -9668,6 +9704,7 @@ function setupBuiltin(deps) {
         create_mandate: {
           executionMapping: { profile: "allowed_profiles", mode: "allowed_modes" },
           staticExecution: { action_type: "mandate" },
+          actionLabel: "Mandate proposed",
           hideUnlessAuthorized: true,
           // Shown like the mandate screen: limits and scope by the profile's own names.
           approvalView: {
@@ -10437,7 +10474,7 @@ app.get("/internal/authorizations", internalOnly, (_req, res) => {
   res.json({ authorizations });
 });
 app.get("/internal/manifests", internalOnly, (_req, res) => {
-  res.json({ manifests: getAllManifests() });
+  res.json({ manifests: getAllManifests(), builtins: integrationManager?.getBuiltinLabels?.() ?? [] });
 });
 app.get("/internal/skipped-commitments", internalOnly, async (_req, res) => {
   try {