@suveren/gateway 0.32.0 → 0.34.0

package/dist/mcp-server/http.mjs

@@ -1917,6 +1917,13 @@ var ArchiveWriteError = class extends Error {
   }
 };
 var DEFAULT_DIR4 = process.env.SUVEREN_DATA_DIR ?? join7(homedir4(), ".suveren");
+var SENT_ARGS_MAX_BYTES = 64 * 1024;
+function sentArgsFields(args) {
+  if (args === void 0) return {};
+  const json = JSON.stringify(args);
+  if (Buffer.byteLength(json, "utf8") > SENT_ARGS_MAX_BYTES) return { sentArgsOmitted: "too_large" };
+  return { sentArgs: JSON.parse(json) };
+}
 function stripPreviews(proposal) {
   const args = proposal.toolArgs;
   if (!args || typeof args !== "object") return proposal;
@@ -1977,7 +1984,8 @@ var ReceiptArchive = class {
         asPublicKey: entry.asPublicKey,
         receipt: entry.receipt,
         ...entry.proposal ? { proposal: stripPreviews(entry.proposal) } : {},
-        ...entry.boundContent !== void 0 ? { boundContent: entry.boundContent } : {}
+        ...entry.boundContent !== void 0 ? { boundContent: entry.boundContent } : {},
+        ...sentArgsFields(entry.sentArgs)
       });
       changed = true;
     }
@@ -2289,12 +2297,16 @@ var ExecutionResultStore = class {
   isLocked() {
     return this.vaultKey === null && existsSync9(this.encryptedFilePath);
   }
-  /** Record the outcome of one execution. Replaces any prior entry for the same proposal. */
+  /**
+   * Record the outcome of one execution. Replaces any prior entry for the
+   * same proposal — or, for an automatic execution (no proposalId), for the
+   * same ticket.
+   */
   record(input, now = nowSec2()) {
     const capped = capResult(input.text, input.structuredContent);
-    this.entries = this.entries.filter((e) => e.proposalId !== input.proposalId);
+    this.entries = input.proposalId !== void 0 ? this.entries.filter((e) => e.proposalId !== input.proposalId) : this.entries.filter((e) => e.proposalId !== void 0 || e.ticketId !== input.ticketId);
     this.entries.push({
-      proposalId: input.proposalId,
+      ...input.proposalId !== void 0 ? { proposalId: input.proposalId } : {},
       ticketId: input.ticketId,
       ok: input.ok,
       text: capped.text,
@@ -2309,6 +2321,13 @@ var ExecutionResultStore = class {
   get(proposalId) {
     return this.entries.find((e) => e.proposalId === proposalId);
   }
+  /** The retained outcome of the execution under a ticket (either path), newest first. */
+  getByTicket(ticketId) {
+    for (let i = this.entries.length - 1; i >= 0; i--) {
+      if (this.entries[i].ticketId === ticketId) return this.entries[i];
+    }
+    return void 0;
+  }
   /** Diagnostic / tests. */
   get size() {
     return this.entries.length;
@@ -3334,6 +3353,7 @@ var SharedState = class {
         asPublicKey,
         proposal: opts.proposal,
         boundContent: opts.boundContent,
+        sentArgs: opts.sentArgs,
         authorization: opts.profileId ? {
           profileId: opts.profileId,
           boundsHash: opts.boundsHash,
@@ -4296,11 +4316,45 @@ function invalidManifestContextReason(manifest) {
   }
   return null;
 }
-function invalidManifestReadGateReason(manifest) {
-  const profileDef = getProfile2(manifest.profile);
-  if (!profileDef) return null;
+function overrideProfile(entry) {
+  if (entry === null || typeof entry !== "object") return void 0;
+  const p = entry.profile;
+  return typeof p === "string" ? p : void 0;
+}
+function distinctProfilesOf(manifest) {
+  const out = [manifest.profile];
+  for (const entry of Object.values(manifest.toolGating?.overrides ?? {})) {
+    const p = overrideProfile(entry);
+    if (p && !out.includes(p)) out.push(p);
+  }
+  return out;
+}
+function invalidManifestOverrideProfilesReason(manifest) {
   const overrides = manifest.toolGating?.overrides ?? {};
-  return uncoveredReadSwitchReason(overrides, profileDef.boundsSchema);
+  for (const [toolName, entry] of Object.entries(overrides)) {
+    const profile = overrideProfile(entry);
+    if (!profile) continue;
+    if (!getProfile2(manifest.profile) && !getProfile2(profile)) continue;
+    if (!getProfile2(profile)) {
+      return `override "${toolName}".profile "${profile}" does not resolve to a known profile (full id or short name) \u2014 area-per-tool overrides must name a real profile, same as the manifest's own "profile"`;
+    }
+  }
+  return null;
+}
+function invalidManifestReadGateReason(manifest) {
+  const allOverrides = manifest.toolGating?.overrides ?? {};
+  for (const profileId of distinctProfilesOf(manifest)) {
+    const profileDef = getProfile2(profileId);
+    if (!profileDef) continue;
+    const ownOverrides = {};
+    for (const [toolName, entry] of Object.entries(allOverrides)) {
+      const resolved = overrideProfile(entry) ?? manifest.profile;
+      if (resolved === profileId) ownOverrides[toolName] = entry;
+    }
+    const reason = uncoveredReadSwitchReason(ownOverrides, profileDef.boundsSchema);
+    if (reason) return reason;
+  }
+  return null;
 }
 var manifests = /* @__PURE__ */ new Map();
 function loadManifests(integrationsDir) {
@@ -4339,6 +4393,11 @@ function loadManifests(integrationsDir) {
         console.error(`[ManifestLoader] Refusing manifest ${id} (${manifestPath}): ${contextReason}`);
         continue;
       }
+      const overrideProfilesReason = invalidManifestOverrideProfilesReason(manifest);
+      if (overrideProfilesReason) {
+        console.error(`[ManifestLoader] Refusing manifest ${id} (${manifestPath}): ${overrideProfilesReason}`);
+        continue;
+      }
       const readGateReason = invalidManifestReadGateReason(manifest);
       if (readGateReason) {
         console.error(`[ManifestLoader] Refusing manifest ${id} (${manifestPath}): ${readGateReason}`);
@@ -6016,7 +6075,12 @@ Proposal ID: ${proposal.id}. Check status with check-pending-commitments(proposa
           attestations: auth.attestations,
           // Automatic path has no proposal, so without this the archive
           // would hold a hash of content it cannot reproduce.
-          boundContent: binding?.boundContent
+          boundContent: binding?.boundContent,
+          // UI spec §14 — what this call sends, exactly the object the
+          // journal's argsHash is computed from below (`hashToolArgs(args)`),
+          // so the ticket view can show it and check it. Same write, so it
+          // is as fail-closed and as encrypted as the rest of the entry.
+          sentArgs: args
         });
       } catch (err) {
         if (err instanceof AsKeyMismatchError || err instanceof TicketBindingMismatchError) {
@@ -6214,9 +6278,11 @@ Proposal ID: ${proposal.id}. Use check-pending-commitments to track status.` + a
         try {
           const result = await integrationManager2.callTool(tool.integrationId, tool.originalName, outgoingArgs);
           state2.executionJournal.complete(receiptId, "done");
+          recordAutomaticOutcome(state2, receiptId, result);
           return result;
         } catch (err) {
           state2.executionJournal.complete(receiptId, "failed");
+          recordAutomaticOutcome(state2, receiptId, void 0, err);
           throw err;
         }
       }
@@ -6224,6 +6290,20 @@ Proposal ID: ${proposal.id}. Use check-pending-commitments to track status.` + a
     }
   });
 }
+function recordAutomaticOutcome(state2, ticketId, result, thrown) {
+  try {
+    if (!result) {
+      const msg = thrown instanceof Error ? thrown.message : String(thrown);
+      state2.executionResults?.record({ ticketId, ok: false, text: `The tool call threw: ${msg}` });
+      return;
+    }
+    const text = result.content?.[0]?.text ?? JSON.stringify(result);
+    const structured = result.structuredContent && typeof result.structuredContent === "object" && !Array.isArray(result.structuredContent) ? result.structuredContent : void 0;
+    state2.executionResults?.record({ ticketId, ok: result.isError !== true, text, structuredContent: structured });
+  } catch (err) {
+    console.error(`[Suveren MCP] Could not record the execution result for ticket ${ticketId}:`, err);
+  }
+}
 function noMandateRefusal(toolName, profile) {
   return `Refused: no mandate covers ${toolName} (${shortProfile(profile)}). Nothing was done. Ask the person to grant a ${shortProfile(profile)} mandate in the gateway, then try again. No ticket was requested.`;
 }
@@ -6675,29 +6755,30 @@ function listIntegrationsHandler(state2, integrationManager2) {
     }
     const auths = state2.getEnrichedAuthorizations();
     const statuses = integrationManager2.getStatus();
-    const integrations = statuses.filter((s) => s.running).map((s) => {
+    const integrations = statuses.filter((s) => s.running).flatMap((s) => {
       const tools = integrationManager2.getAllTools().filter((t) => t.integrationId === s.id);
-      const profile = tools[0]?.gating?.profile ?? null;
-      const matchingAuths = profile ? auths.filter((a) => a.complete && profileMatches(a.profileId, profile)) : [];
-      let status;
-      if (matchingAuths.length > 0) {
-        const soonestExpiry = Math.min(
-          ...matchingAuths.flatMap(
-            (a) => a.attestations.map((att) => att.expiresAt)
-          )
-        );
-        const remainingMs = soonestExpiry * 1e3 - Date.now();
-        const remainingMin = Math.ceil(remainingMs / 6e4);
-        status = `authorized (${matchingAuths.length} path${matchingAuths.length > 1 ? "s" : ""}, ${remainingMin} min remaining)`;
-      } else {
-        const allProfileAuths = profile ? auths.filter((a) => profileMatches(a.profileId, profile)) : [];
-        status = allProfileAuths.length > 0 ? "expired" : "no authorization";
-      }
-      return {
-        id: s.id,
-        profile: profile ? shortProfileName3(profile) : null,
-        status
-      };
+      const profiles = [...new Set(tools.map((t) => t.gating?.profile).filter((p) => !!p))];
+      if (profiles.length === 0) {
+        return [{ id: s.id, profile: null, status: "no authorization" }];
+      }
+      return profiles.map((profile) => {
+        const matchingAuths = auths.filter((a) => a.complete && profileMatches(a.profileId, profile));
+        let status;
+        if (matchingAuths.length > 0) {
+          const soonestExpiry = Math.min(
+            ...matchingAuths.flatMap(
+              (a) => a.attestations.map((att) => att.expiresAt)
+            )
+          );
+          const remainingMs = soonestExpiry * 1e3 - Date.now();
+          const remainingMin = Math.ceil(remainingMs / 6e4);
+          status = `authorized (${matchingAuths.length} path${matchingAuths.length > 1 ? "s" : ""}, ${remainingMin} min remaining)`;
+        } else {
+          const allProfileAuths = auths.filter((a) => profileMatches(a.profileId, profile));
+          status = allProfileAuths.length > 0 ? "expired" : "no authorization";
+        }
+        return { id: s.id, profile: shortProfileName3(profile), status };
+      });
     });
     const text = integrations.length === 0 ? "No integrations running." : integrations.map(
       (i) => `${i.id} [${i.profile ?? "ungated"}] \u2014 ${i.status}`
@@ -8274,7 +8355,14 @@ var IntegrationManager = class {
   getToolDisplay() {
     const out = {};
     for (const t of this.getAllTools()) {
-      out[t.namespacedName] = { inputSchema: t.inputSchema, ...t.gating?.approvalView ? { approvalView: t.gating.approvalView } : {} };
+      const mapping = t.gating?.executionMapping;
+      out[t.namespacedName] = {
+        inputSchema: t.inputSchema,
+        ...t.gating?.approvalView ? { approvalView: t.gating.approvalView } : {},
+        // UI spec §14.1 — which sent values the signed ticket also carries
+        // (arg → executionContext field), for the "in the ticket" tag.
+        ...mapping && Object.keys(mapping).length > 0 ? { executionMapping: mapping } : {}
+      };
     }
     return out;
   }
@@ -8553,18 +8641,26 @@ var IntegrationManager = class {
   /**
    * Resolve gating config for a tool from the profile's toolGating section.
    * Returns the runtime ToolGatingConfig that tool-proxy.ts consumes.
+   *
+   * Area per tool: an override may declare its OWN `profile`, gating that
+   * one tool under a different area than the rest of the connector (e.g.
+   * an ERP's `create_invoice` under `invoicing` while `create_quote` stays
+   * under the manifest's own `sales`). `resolvedProfile` below is what every
+   * downstream consumer reads as this tool's governing profile — falling
+   * back to the manifest-level `profileId` when the override doesn't say.
    */
   resolveToolGating(profileId, profileGating, toolName) {
     if (!profileId || !profileGating) return null;
     if (profileGating.overrides && toolName in profileGating.overrides) {
       const override = profileGating.overrides[toolName];
       const ext = override ?? {};
+      const resolvedProfile = ext.profile ?? profileId;
       if (ext.category === "disabled") {
-        return { profile: profileId, executionMapping: {}, category: "disabled" };
+        return { profile: resolvedProfile, executionMapping: {}, category: "disabled" };
       }
       if (override === null || ext.category === "read") {
         return {
-          profile: profileId,
+          profile: resolvedProfile,
           executionMapping: {},
           category: "read",
           boundField: ext.boundField,
@@ -8579,7 +8675,7 @@ var IntegrationManager = class {
         };
       }
       return {
-        profile: profileId,
+        profile: resolvedProfile,
         executionMapping: override.executionMapping,
         staticExecution: override.staticExecution,
         // Which argument the receipt binds to. This resolver is an explicit
@@ -9999,6 +10095,52 @@ function isAlive(pid) {
   }
 }
 
+// src/lib/ticket-content.ts
+function archivedArgs(entry) {
+  if (entry.sentArgs && typeof entry.sentArgs === "object") return { args: entry.sentArgs, source: "sent" };
+  const toolArgs = entry.proposal?.toolArgs;
+  if (toolArgs && typeof toolArgs === "object" && !Array.isArray(toolArgs)) {
+    return { args: toolArgs, source: "proposal" };
+  }
+  return void 0;
+}
+function checkSentArgs(entry, journalRow) {
+  const found = archivedArgs(entry);
+  if (!found || !journalRow?.argsHash) return "unchecked";
+  if (hashToolArgs(found.args) === journalRow.argsHash) return "match";
+  if (found.source === "proposal" && typeof found.args.imagePath === "string") return "unchecked";
+  return "mismatch";
+}
+function resultView(entry) {
+  if (!entry) return null;
+  return {
+    ok: entry.ok,
+    text: entry.text,
+    ...entry.structuredContent ? { structuredContent: entry.structuredContent } : {},
+    ...entry.truncated ? { truncated: true } : {}
+  };
+}
+function trimForHeadline(value, max = 200) {
+  if (typeof value === "string") return value.length > max ? value.slice(0, max) : value;
+  if (Array.isArray(value)) return value.map((v) => trimForHeadline(v, max));
+  if (value && typeof value === "object") {
+    const out = {};
+    for (const [k, v] of Object.entries(value)) out[k] = trimForHeadline(v, max);
+    return out;
+  }
+  return value;
+}
+function headlineArgs(entries) {
+  const out = {};
+  for (const e of entries) {
+    const id = e.receipt?.id;
+    if (typeof id !== "string" || e.proposal) continue;
+    const src = e.sentArgs ?? (e.boundContent && typeof e.boundContent === "object" ? e.boundContent : void 0);
+    if (src) out[id] = trimForHeadline(src);
+  }
+  return out;
+}
+
 // bin/http.ts
 import { homedir as homedir14 } from "os";
 import { join as join23 } from "path";
@@ -10535,6 +10677,35 @@ app.get("/internal/evidence", internalOnly, (_req, res) => {
     gates: state.gateStore.getAll()
   });
 });
+app.get("/internal/evidence/ticket/:id", internalOnly, (req, res) => {
+  if (state.receiptArchive.isLocked() || state.executionResults.isLocked()) {
+    res.status(503).json({ error: "Vault locked \u2014 the evidence archive is encrypted until sign-in." });
+    return;
+  }
+  const id = String(req.params.id);
+  const entry = state.receiptArchive.getReceipts().find((r) => r.receipt.id === id);
+  if (!entry) {
+    res.status(404).json({ error: "No local copy of this ticket" });
+    return;
+  }
+  let journalRow;
+  try {
+    journalRow = state.executionJournal.get(id);
+  } catch {
+    journalRow = void 0;
+  }
+  res.json({
+    sentArgsCheck: checkSentArgs(entry, journalRow),
+    result: resultView(state.executionResults.getByTicket(id))
+  });
+});
+app.get("/internal/evidence/headlines", internalOnly, (_req, res) => {
+  if (state.receiptArchive.isLocked()) {
+    res.status(503).json({ error: "Vault locked \u2014 the evidence archive is encrypted until sign-in." });
+    return;
+  }
+  res.json({ headlines: headlineArgs(state.receiptArchive.getReceipts()) });
+});
 function reportScope() {
   return scopeReportSources(reportSources, {
     authorizations: state.getEnrichedAuthorizations(),