@suveren/gateway 0.7.0 → 0.7.1

package/dist/control-plane/index.mjs

@@ -2067,6 +2067,37 @@ function createGatewaySettingsRouter() {
   return router;
 }
 
+// src/routes/internal-events.ts
+import { Router as Router11 } from "express";
+import { timingSafeEqual as timingSafeEqual2 } from "crypto";
+var ALLOWED = ["proposal-added", "action-approval-needed"];
+function secretMatches(provided, expected) {
+  if (!expected) return false;
+  if (!provided) return false;
+  const a = Buffer.from(provided);
+  const b = Buffer.from(expected);
+  if (a.length !== b.length) return false;
+  return timingSafeEqual2(a, b);
+}
+function createInternalEventsRouter(getSecret) {
+  const router = Router11();
+  router.post("/event", (req, res) => {
+    if (!secretMatches(req.headers["x-internal-secret"], getSecret())) {
+      res.status(401).json({ error: "Unauthorized" });
+      return;
+    }
+    const type = (req.body ?? {}).type;
+    if (typeof type !== "string" || !ALLOWED.includes(type)) {
+      res.status(400).json({ error: "Unsupported event type" });
+      return;
+    }
+    console.error(`[Control Plane] Internal event received: ${type}`);
+    eventBus.emit(type);
+    res.json({ ok: true });
+  });
+  return router;
+}
+
 // src/lib/notification-dispatcher.ts
 var TRIGGER_EVENTS = ["proposal-added", "action-approval-needed"];
 var TITLE = "Suveren";
@@ -2132,6 +2163,9 @@ var NotificationDispatcher = class {
     } catch {
       enabled = true;
     }
+    console.error(
+      `[Control Plane] Review pending \u2014 desktop notification ${enabled ? "sent" : "suppressed (turned off)"}`
+    );
     if (enabled) {
       const message = count >= FLOOD_THRESHOLD ? floodMessage(count) : WAITING_MESSAGE;
       this.notifyFn(TITLE, message, process.platform, this.url);
@@ -2420,6 +2454,7 @@ app.get("/auth/oauth/:integrationId/health", authGuard, async (req, res) => {
   }
 });
 app.get("/events", requireAllowedHost, requireAuthQueryOrHeader(vault), createEventsHandler());
+app.use("/internal", jsonParser, createInternalEventsRouter(() => internalSecret2));
 app.use("/vault", jsonParser, authGuard, createVaultRouter(vault));
 app.use("/ai", jsonParser, authGuard, createAIRouter(vault));
 app.use("/ai-prompts", jsonParser, authGuard, createAIPromptsRouter());

package/dist/mcp-server/http.mjs

@@ -6,6 +6,33 @@ import express from "express";
 import { SSEServerTransport } from "@modelcontextprotocol/sdk/server/sse.js";
 import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
 
+// src/lib/cp-notify.ts
+var CP_PORT = process.env.SUVEREN_CP_PORT ?? "3402";
+var CP_BASE = process.env.SUVEREN_CP_INTERNAL_URL ?? `http://127.0.0.1:${CP_PORT}`;
+var TIMEOUT_MS = 2e3;
+async function notifyControlPlane(type) {
+  const secret = process.env.SUVEREN_INTERNAL_SECRET ?? "";
+  if (!secret) return;
+  try {
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), TIMEOUT_MS);
+    try {
+      await fetch(`${CP_BASE}/internal/event`, {
+        method: "POST",
+        headers: {
+          "Content-Type": "application/json",
+          "X-Internal-Secret": secret
+        },
+        body: JSON.stringify({ type }),
+        signal: controller.signal
+      });
+    } finally {
+      clearTimeout(timer);
+    }
+  } catch {
+  }
+}
+
 // src/lib/sp-client.ts
 var SPReceiptError = class extends Error {
   constructor(message, statusCode, body) {
@@ -167,6 +194,7 @@ var SPClient = class {
       const body = await res.json().catch(() => ({}));
       throw new Error(body.error ?? `SP proposal submission failed: ${res.status}`);
     }
+    void notifyControlPlane("proposal-added");
     return res.json();
   }
   /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@suveren/gateway",
-  "version": "0.7.0",
+  "version": "0.7.1",
   "description": "Suveren gateway — local agent gateway built in compliance with the Human Agency Protocol (HAP). Runs the UI, control plane, and MCP server in one Node process.",
   "type": "module",
   "main": "server.js",