@suveren/gateway 0.7.0 → 0.7.2

package/bin/suveren-gateway.js

@@ -323,8 +323,14 @@ function serviceRunning() {
     return p.status === 0 && /state = running/.test(p.stdout || '');
   }
   if (os === 'win32') {
-    const p = runQuiet('schtasks', ['/Query', '/TN', WIN_TASK_NAME, '/FO', 'LIST']);
-    return p.status === 0 && /Status:\s+Running/i.test(p.stdout || '');
+    // NOT schtasks /Query: its LIST output is localized — a German Windows
+    // prints "Wird ausgeführt", so matching the English word "Running" reports
+    // every non-English machine as stopped, and restart silently falls back to
+    // the manual path. Get-ScheduledTask's State is a .NET enum; its name is
+    // English on every locale.
+    const p = runQuiet('powershell', ['-NoProfile', '-NonInteractive', '-Command',
+      `(Get-ScheduledTask -TaskName '${WIN_TASK_NAME}' -ErrorAction Stop).State`]);
+    return p.status === 0 && /^Running/m.test((p.stdout || '').trim());
   }
   const p = runQuiet('systemctl', ['--user', 'is-active', SYSTEMD_UNIT]);
   return (p.stdout || '').trim() === 'active';
@@ -344,7 +350,16 @@ function serviceRestart() {
   if (os === 'darwin') {
     runQuiet('launchctl', ['kickstart', '-k', `gui/${process.getuid()}/${LAUNCH_AGENT_LABEL}`]);
   } else if (os === 'win32') {
-    runQuiet('schtasks', ['/End', '/TN', WIN_TASK_NAME]);
+    // NOT schtasks /End: it TerminateProcess()es only the task's ROOT process
+    // (node server.js). No signal is delivered, so the shutdown handlers never
+    // run and the control-plane / MCP children survive — still holding ports
+    // 3400/3430, which makes the relaunched instance die on EADDRINUSE and
+    // "restart" quietly become "stop". taskkill /T takes the whole tree.
+    const like = SERVER_ENTRY.replace(/'/g, "''").replace(/([\[\]*?])/g, '`$1');
+    runQuiet('powershell', ['-NoProfile', '-NonInteractive', '-Command',
+      `Get-CimInstance Win32_Process -Filter "Name='node.exe'" | ` +
+      `Where-Object { $_.CommandLine -like '*${like}*' } | ` +
+      `ForEach-Object { taskkill.exe /PID $_.ProcessId /T /F } | Out-Null`]);
     runQuiet('schtasks', ['/Run', '/TN', WIN_TASK_NAME]);
   } else {
     runQuiet('systemctl', ['--user', 'restart', SYSTEMD_UNIT]);
@@ -573,8 +588,12 @@ async function serviceStatusWindows() {
   console.log(`Login service: ${installed ? 'installed' : 'not installed'}`);
   if (installed) {
     console.log(`  Task:   ${WIN_TASK_NAME}`);
-    const state = /Status:\s*(\S+)/.exec(r.stdout || '');
-    if (state) console.log(`  State:  ${state[1]}`);
+    // Locale-independent state (see serviceRunning): the schtasks LIST value
+    // is localized; the PowerShell enum name is not.
+    const st = runQuiet('powershell', ['-NoProfile', '-NonInteractive', '-Command',
+      `(Get-ScheduledTask -TaskName '${WIN_TASK_NAME}' -ErrorAction Stop).State`]);
+    const state = (st.stdout || '').trim();
+    if (st.status === 0 && state) console.log(`  State:  ${state}`);
   }
 }
 

package/dist/control-plane/index.mjs

@@ -5,9 +5,9 @@ import {
 
 // src/index.ts
 import { randomBytes as randomBytes2 } from "crypto";
-import { existsSync as existsSync5, readFileSync as readFileSync5, renameSync } from "fs";
-import { dirname as dirname4, join as join5 } from "path";
-import { homedir as homedir4 } from "os";
+import { existsSync as existsSync6, readFileSync as readFileSync5, renameSync } from "fs";
+import { dirname as dirname5, join as join6 } from "path";
+import { homedir as homedir5 } from "os";
 import express from "express";
 import { createProxyMiddleware } from "http-proxy-middleware";
 
@@ -1540,15 +1540,15 @@ import { promisify } from "util";
 var run = promisify(execFile);
 var SUPPORTED = /* @__PURE__ */ new Set(["darwin", "win32", "linux"]);
 var MODULE_DIR = pathDirname(fileURLToPath(import.meta.url));
-function findCli(dirname5 = MODULE_DIR) {
+function findCli(dirname6 = MODULE_DIR) {
   const candidates = [
     // Bundled (the shipped layout): dist/control-plane → dist → root → bin
-    resolve(dirname5, "..", "..", "bin", "suveren-gateway.js"),
+    resolve(dirname6, "..", "..", "bin", "suveren-gateway.js"),
     // Bundled, were the routes/ directory ever preserved.
-    resolve(dirname5, "..", "..", "..", "bin", "suveren-gateway.js"),
+    resolve(dirname6, "..", "..", "..", "bin", "suveren-gateway.js"),
     // Dev, running from source: the repo's own bundle directory.
-    resolve(dirname5, "..", "..", "..", "..", "bundle", "bin", "suveren-gateway.js"),
-    resolve(dirname5, "..", "..", "..", "..", "..", "bundle", "bin", "suveren-gateway.js")
+    resolve(dirname6, "..", "..", "..", "..", "bundle", "bin", "suveren-gateway.js"),
+    resolve(dirname6, "..", "..", "..", "..", "..", "bundle", "bin", "suveren-gateway.js")
     // Deliberately NO process.cwd() fallback: it makes the result depend on
     // where the process happened to be launched from, so the same install
     // resolves differently between a shell and a login service — and it would
@@ -1633,38 +1633,86 @@ function createAutostartRouter() {
 
 // src/lib/desktop-notify.ts
 import { spawn, spawnSync } from "child_process";
+
+// src/lib/notifier-icon.ts
+import { writeFileSync as writeFileSync2, mkdirSync as mkdirSync2, existsSync as existsSync3 } from "fs";
+import { homedir as homedir2 } from "os";
+import { join as join2, dirname as dirname2 } from "path";
+var ICON_BASE64 = "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";
+function ensureNotifierIcon(dataDir) {
+  try {
+    const dir = dataDir ?? process.env.SUVEREN_DATA_DIR ?? join2(homedir2(), ".suveren");
+    const path = join2(dir, "notifier-icon.png");
+    if (!existsSync3(path)) {
+      mkdirSync2(dirname2(path), { recursive: true });
+      writeFileSync2(path, Buffer.from(ICON_BASE64, "base64"));
+    }
+    return path;
+  } catch {
+    return null;
+  }
+}
+
+// src/lib/desktop-notify.ts
 function osaQuote(value) {
   return `"${value.replace(/\\/g, "\\\\").replace(/"/g, '\\"')}"`;
 }
 function psQuote(value) {
   return `'${value.replace(/'/g, "''")}'`;
 }
+function xmlEscape(value) {
+  return value.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&apos;");
+}
+var WINDOWS_AUMID = "Suveren.Gateway";
+function windowsToastScript(title, message, url, iconPath) {
+  const toastXml = `<toast${url ? ` activationType="protocol" launch="${xmlEscape(url)}"` : ""}><visual><binding template="ToastGeneric"><text>${xmlEscape(title)}</text><text>${xmlEscape(message)}</text>` + (iconPath ? `<image placement="appLogoOverride" src="${xmlEscape(iconPath)}"/>` : "") + `</binding></visual><audio src="ms-winsoundevent:Notification.Default"/></toast>`;
+  return `$ErrorActionPreference='SilentlyContinue'; $aumid=${psQuote(WINDOWS_AUMID)}; $reg="HKCU:\\Software\\Classes\\AppUserModelId\\$aumid"; if (-not (Test-Path $reg)) { New-Item -Path $reg -Force | Out-Null }; New-ItemProperty -Path $reg -Name DisplayName -Value 'Suveren' -PropertyType String -Force | Out-Null; ` + (iconPath ? `New-ItemProperty -Path $reg -Name IconUri -Value ${psQuote(iconPath)} -PropertyType String -Force | Out-Null; ` : "") + `[Windows.UI.Notifications.ToastNotificationManager, Windows.UI.Notifications, ContentType=WindowsRuntime] | Out-Null; [Windows.Data.Xml.Dom.XmlDocument, Windows.Data.Xml.Dom, ContentType=WindowsRuntime] | Out-Null; $doc = New-Object Windows.Data.Xml.Dom.XmlDocument; $doc.LoadXml(${psQuote(toastXml)}); $toast = New-Object Windows.UI.Notifications.ToastNotification $doc; [Windows.UI.Notifications.ToastNotificationManager]::CreateToastNotifier($aumid).Show($toast)`;
+}
+var MAC_SOUND = "Glass";
 function buildNotifyCommand(platform, title, message, options = {}) {
-  const { url, hasTerminalNotifier: hasTerminalNotifier2 = false } = options;
+  const { url, hasTerminalNotifier: hasTerminalNotifier2 = false, iconPath } = options;
   switch (platform) {
     case "darwin":
       if (url && hasTerminalNotifier2) {
         return {
           cmd: "terminal-notifier",
-          args: ["-title", title, "-message", message, "-open", url, "-group", "ai.suveren.gateway"]
+          args: [
+            "-title",
+            title,
+            "-message",
+            message,
+            "-open",
+            url,
+            "-sound",
+            MAC_SOUND,
+            ...iconPath ? ["-appIcon", iconPath] : [],
+            "-group",
+            "ai.suveren.gateway"
+          ]
         };
       }
       return {
         cmd: "osascript",
-        args: ["-e", `display notification ${osaQuote(message)} with title ${osaQuote(title)}`]
+        args: [
+          "-e",
+          `display notification ${osaQuote(message)} with title ${osaQuote(title)} sound name ${osaQuote(MAC_SOUND)}`
+        ]
       };
     case "win32":
       return {
         cmd: "powershell",
+        args: ["-NoProfile", "-NonInteractive", "-Command", windowsToastScript(title, message, url, iconPath)]
+      };
+    case "linux":
+      return {
+        cmd: "notify-send",
         args: [
-          "-NoProfile",
-          "-NonInteractive",
-          "-Command",
-          `Add-Type -AssemblyName System.Windows.Forms; $n = New-Object System.Windows.Forms.NotifyIcon; $n.Icon = [System.Drawing.SystemIcons]::Information; $n.BalloonTipTitle = ${psQuote(title)}; $n.BalloonTipText = ${psQuote(message)}; $n.Visible = $true; $n.ShowBalloonTip(15000); Start-Sleep -Seconds 16; $n.Dispose()`
+          "--app-name=Suveren",
+          ...iconPath ? ["-i", iconPath] : [],
+          title,
+          message
         ]
       };
-    case "linux":
-      return { cmd: "notify-send", args: ["--app-name=Suveren", title, message] };
     default:
       return null;
   }
@@ -1688,15 +1736,32 @@ function hasTerminalNotifier() {
   }
   return terminalNotifierCache;
 }
+function notifySpawnOptions(platform) {
+  return {
+    detached: platform !== "win32",
+    stdio: ["ignore", "ignore", "pipe"]
+  };
+}
 function notify(title, message, platform = process.platform, url) {
   const command = buildNotifyCommand(platform, title, message, {
     url,
-    // Only probe when a URL could actually be attached.
-    hasTerminalNotifier: url !== void 0 && platform === "darwin" ? hasTerminalNotifier() : false
+    hasTerminalNotifier: platform === "darwin" ? hasTerminalNotifier() : false,
+    // Windows and Linux show it on the toast itself; macOS only via
+    // terminal-notifier. Failure to write it must never block the sound.
+    iconPath: ensureNotifierIcon()
   });
   if (!command) return;
   try {
-    const child = spawn(command.cmd, command.args, { detached: true, stdio: "ignore" });
+    const child = spawn(command.cmd, command.args, notifySpawnOptions(platform));
+    let stderr = "";
+    child.stderr?.on("data", (d) => {
+      stderr += d.toString().slice(0, 500);
+    });
+    child.on("close", (code) => {
+      if (code !== 0) {
+        console.error(`[notify] ${command.cmd} exited ${code}${stderr ? `: ${stderr.trim()}` : ""}`);
+      }
+    });
     child.on("error", () => {
     });
     child.unref();
@@ -1812,13 +1877,13 @@ function createDecryptIntentRouter(vault2) {
 
 // src/routes/approved-intents.ts
 import { Router as Router9 } from "express";
-import { readFileSync as readFileSync2, writeFileSync as writeFileSync2, existsSync as existsSync3, mkdirSync as mkdirSync2 } from "fs";
-import { homedir as homedir2 } from "os";
-import { join as join2 } from "path";
-var SUVEREN_DATA_DIR = process.env.SUVEREN_DATA_DIR ?? join2(homedir2(), ".suveren");
-var FILE_PATH = join2(SUVEREN_DATA_DIR, "approved-intents.enc.json");
+import { readFileSync as readFileSync2, writeFileSync as writeFileSync3, existsSync as existsSync4, mkdirSync as mkdirSync3 } from "fs";
+import { homedir as homedir3 } from "os";
+import { join as join3 } from "path";
+var SUVEREN_DATA_DIR = process.env.SUVEREN_DATA_DIR ?? join3(homedir3(), ".suveren");
+var FILE_PATH = join3(SUVEREN_DATA_DIR, "approved-intents.enc.json");
 function readFile() {
-  if (!existsSync3(FILE_PATH)) {
+  if (!existsSync4(FILE_PATH)) {
     return { version: 1, entries: {} };
   }
   try {
@@ -1828,8 +1893,8 @@ function readFile() {
   }
 }
 function writeFile(data) {
-  mkdirSync2(SUVEREN_DATA_DIR, { recursive: true });
-  writeFileSync2(FILE_PATH, JSON.stringify(data, null, 2), "utf-8");
+  mkdirSync3(SUVEREN_DATA_DIR, { recursive: true });
+  writeFileSync3(FILE_PATH, JSON.stringify(data, null, 2), "utf-8");
 }
 function createApprovedIntentsRouter(vault2) {
   const router = Router9();
@@ -1875,7 +1940,7 @@ function createApprovedIntentsRouter(vault2) {
 
 // src/lib/update-checker.ts
 import { execSync } from "child_process";
-import { dirname as dirname2 } from "path";
+import { dirname as dirname3 } from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
 var GHCR_IMAGE = "suverenai/suveren-gateway";
 var NPM_PACKAGE = "@suveren/gateway";
@@ -1941,7 +2006,7 @@ function compareSemver(a, b) {
   return 0;
 }
 function checkDev() {
-  const cwd = dirname2(fileURLToPath2(import.meta.url));
+  const cwd = dirname3(fileURLToPath2(import.meta.url));
   try {
     execSync("git fetch origin --quiet", { cwd, stdio: "ignore", timeout: 15e3 });
     const out = execSync("git rev-list HEAD..origin/main --count", {
@@ -2012,15 +2077,15 @@ data: null
 import { Router as Router10 } from "express";
 
 // src/lib/gateway-settings.ts
-import { readFileSync as readFileSync3, writeFileSync as writeFileSync3, mkdirSync as mkdirSync3 } from "fs";
-import { homedir as homedir3 } from "os";
-import { join as join3, dirname as dirname3 } from "path";
+import { readFileSync as readFileSync3, writeFileSync as writeFileSync4, mkdirSync as mkdirSync4 } from "fs";
+import { homedir as homedir4 } from "os";
+import { join as join4, dirname as dirname4 } from "path";
 var DEFAULT_SETTINGS = {
   desktopNotifications: true
 };
 function settingsPath(dataDir) {
-  const dir = dataDir ?? process.env.SUVEREN_DATA_DIR ?? join3(homedir3(), ".suveren");
-  return join3(dir, "settings.json");
+  const dir = dataDir ?? process.env.SUVEREN_DATA_DIR ?? join4(homedir4(), ".suveren");
+  return join4(dir, "settings.json");
 }
 function readSettings(dataDir) {
   try {
@@ -2038,8 +2103,8 @@ function writeSettings(patch, dataDir) {
     ...typeof patch.desktopNotifications === "boolean" ? { desktopNotifications: patch.desktopNotifications } : {}
   };
   const path = settingsPath(dataDir);
-  mkdirSync3(dirname3(path), { recursive: true });
-  writeFileSync3(path, JSON.stringify(next, null, 2) + "\n", "utf8");
+  mkdirSync4(dirname4(path), { recursive: true });
+  writeFileSync4(path, JSON.stringify(next, null, 2) + "\n", "utf8");
   return next;
 }
 
@@ -2067,6 +2132,37 @@ function createGatewaySettingsRouter() {
   return router;
 }
 
+// src/routes/internal-events.ts
+import { Router as Router11 } from "express";
+import { timingSafeEqual as timingSafeEqual2 } from "crypto";
+var ALLOWED = ["proposal-added", "action-approval-needed"];
+function secretMatches(provided, expected) {
+  if (!expected) return false;
+  if (!provided) return false;
+  const a = Buffer.from(provided);
+  const b = Buffer.from(expected);
+  if (a.length !== b.length) return false;
+  return timingSafeEqual2(a, b);
+}
+function createInternalEventsRouter(getSecret) {
+  const router = Router11();
+  router.post("/event", (req, res) => {
+    if (!secretMatches(req.headers["x-internal-secret"], getSecret())) {
+      res.status(401).json({ error: "Unauthorized" });
+      return;
+    }
+    const type = (req.body ?? {}).type;
+    if (typeof type !== "string" || !ALLOWED.includes(type)) {
+      res.status(400).json({ error: "Unsupported event type" });
+      return;
+    }
+    console.error(`[Control Plane] Internal event received: ${type}`);
+    eventBus.emit(type);
+    res.json({ ok: true });
+  });
+  return router;
+}
+
 // src/lib/notification-dispatcher.ts
 var TRIGGER_EVENTS = ["proposal-added", "action-approval-needed"];
 var TITLE = "Suveren";
@@ -2132,6 +2228,9 @@ var NotificationDispatcher = class {
     } catch {
       enabled = true;
     }
+    console.error(
+      `[Control Plane] Review pending \u2014 desktop notification ${enabled ? "sent" : "suppressed (turned off)"}`
+    );
     if (enabled) {
       const message = count >= FLOOD_THRESHOLD ? floodMessage(count) : WAITING_MESSAGE;
       this.notifyFn(TITLE, message, process.platform, this.url);
@@ -2150,16 +2249,16 @@ function startNotificationDispatcher(opts = {}) {
 }
 
 // src/lib/denials-reader.ts
-import { existsSync as existsSync4, readFileSync as readFileSync4 } from "fs";
-import { join as join4 } from "path";
+import { existsSync as existsSync5, readFileSync as readFileSync4 } from "fs";
+import { join as join5 } from "path";
 function loadDenials(dataDir, decrypt) {
-  const encPath = join4(dataDir, "denials.enc.json");
-  const plainPath = join4(dataDir, "denials.json");
-  if (existsSync4(encPath)) {
+  const encPath = join5(dataDir, "denials.enc.json");
+  const plainPath = join5(dataDir, "denials.json");
+  if (existsSync5(encPath)) {
     const { blob } = JSON.parse(readFileSync4(encPath, "utf-8"));
     return JSON.parse(decrypt(blob)).records ?? [];
   }
-  if (existsSync4(plainPath)) {
+  if (existsSync5(plainPath)) {
     return JSON.parse(readFileSync4(plainPath, "utf-8")).records ?? [];
   }
   return [];
@@ -2175,9 +2274,9 @@ function selectDenials(records, opts = {}) {
 // src/index.ts
 (function migrateDataDir() {
   if (process.env.SUVEREN_DATA_DIR) return;
-  const oldDir = join5(homedir4(), ".hap");
-  const newDir = join5(homedir4(), ".suveren");
-  if (!existsSync5(newDir) && existsSync5(oldDir)) {
+  const oldDir = join6(homedir5(), ".hap");
+  const newDir = join6(homedir5(), ".suveren");
+  if (!existsSync6(newDir) && existsSync6(oldDir)) {
     try {
       renameSync(oldDir, newDir);
       console.error(`[Control Plane] Migrated data directory: ${oldDir} \u2192 ${newDir}`);
@@ -2190,7 +2289,7 @@ function selectDenials(records, opts = {}) {
 var SP_URL2 = process.env.SUVEREN_AS_URL ?? "https://www.suveren.ai";
 var port = parseInt(process.env.SUVEREN_CP_PORT ?? "3402", 10);
 var HAP_MODE = process.env.HAP_MODE ?? "personal";
-var UI_DIST = process.env.HAP_UI_DIST ?? join5(import.meta.dirname ?? __dirname, "../../ui/dist");
+var UI_DIST = process.env.HAP_UI_DIST ?? join6(import.meta.dirname ?? __dirname, "../../ui/dist");
 var vault = new Vault();
 var internalSecret2 = process.env.SUVEREN_INTERNAL_SECRET ?? randomBytes2(32).toString("hex");
 setInternalSecret(internalSecret2);
@@ -2420,6 +2519,7 @@ app.get("/auth/oauth/:integrationId/health", authGuard, async (req, res) => {
   }
 });
 app.get("/events", requireAllowedHost, requireAuthQueryOrHeader(vault), createEventsHandler());
+app.use("/internal", jsonParser, createInternalEventsRouter(() => internalSecret2));
 app.use("/vault", jsonParser, authGuard, createVaultRouter(vault));
 app.use("/ai", jsonParser, authGuard, createAIRouter(vault));
 app.use("/ai-prompts", jsonParser, authGuard, createAIPromptsRouter());
@@ -2557,7 +2657,7 @@ app.get("/active-authorizations", authGuard, async (_req, res) => {
 });
 app.get("/denials", authGuard, (req, res) => {
   try {
-    const dataDir = process.env.SUVEREN_DATA_DIR ?? join5(homedir4(), ".suveren");
+    const dataDir = process.env.SUVEREN_DATA_DIR ?? join6(homedir5(), ".suveren");
     const all = loadDenials(dataDir, (blob) => vault.decrypt(blob));
     const since = Number(req.query.since);
     const limit = Number(req.query.limit);
@@ -2590,11 +2690,11 @@ app.post("/resync-gates", authGuard, async (_req, res) => {
   }
 });
 var AGENT_CONTEXT_MAX_BYTES = 16 * 1024;
-var SUVEREN_DATA_DIR2 = process.env.SUVEREN_DATA_DIR ?? join5(homedir4(), ".suveren");
+var SUVEREN_DATA_DIR2 = process.env.SUVEREN_DATA_DIR ?? join6(homedir5(), ".suveren");
 app.get("/agent-brief/context", authGuard, async (_req, res) => {
   try {
     const { readFileSync: readFileSync6, existsSync: fileExists } = await import("fs");
-    const filePath = join5(SUVEREN_DATA_DIR2, "context.md");
+    const filePath = join6(SUVEREN_DATA_DIR2, "context.md");
     if (!fileExists(filePath)) {
       res.json({ content: "" });
       return;
@@ -2617,11 +2717,11 @@ app.put("/agent-brief/context", jsonParser, authGuard, async (req, res) => {
       res.status(413).json({ error: `Context exceeds ${AGENT_CONTEXT_MAX_BYTES}-byte cap` });
       return;
     }
-    const { mkdirSync: mkdirSync4, writeFileSync: writeFileSync4, renameSync: renameSync2 } = await import("fs");
-    mkdirSync4(SUVEREN_DATA_DIR2, { recursive: true });
-    const filePath = join5(SUVEREN_DATA_DIR2, "context.md");
+    const { mkdirSync: mkdirSync5, writeFileSync: writeFileSync5, renameSync: renameSync2 } = await import("fs");
+    mkdirSync5(SUVEREN_DATA_DIR2, { recursive: true });
+    const filePath = join6(SUVEREN_DATA_DIR2, "context.md");
     const tmpPath = `${filePath}.tmp`;
-    writeFileSync4(tmpPath, content, "utf-8");
+    writeFileSync5(tmpPath, content, "utf-8");
     renameSync2(tmpPath, filePath);
     res.json({ ok: true });
   } catch (err) {
@@ -2671,13 +2771,13 @@ app.use(
   })
 );
 function detectInstallMethod() {
-  if (existsSync5("/.dockerenv")) return "docker";
+  if (existsSync6("/.dockerenv")) return "docker";
   const dir = import.meta.dirname ?? __dirname;
   if (dir.includes("/node_modules/@suveren/gateway/")) return "npm";
   let cursor = dir;
   for (let i = 0; i < 8; i++) {
-    if (existsSync5(join5(cursor, ".git"))) return "dev";
-    const parent = dirname4(cursor);
+    if (existsSync6(join6(cursor, ".git"))) return "dev";
+    const parent = dirname5(cursor);
     if (parent === cursor) break;
     cursor = parent;
   }
@@ -2689,8 +2789,8 @@ function detectRunningVersion() {
     return process.env.HAP_BUILD_SHA ?? "dev";
   }
   const dir = import.meta.dirname ?? __dirname;
-  const bundlePkg = join5(dir, "..", "..", "package.json");
-  if (existsSync5(bundlePkg)) {
+  const bundlePkg = join6(dir, "..", "..", "package.json");
+  if (existsSync6(bundlePkg)) {
     try {
       const pkg = JSON.parse(readFileSync5(bundlePkg, "utf8"));
       if (pkg.name === "@suveren/gateway" && typeof pkg.version === "string") {
@@ -2720,7 +2820,7 @@ app.get("/health", async (req, res) => {
     }
   });
 });
-if (existsSync5(UI_DIST)) {
+if (existsSync6(UI_DIST)) {
   app.use(express.static(UI_DIST, {
     setHeaders: (res, filePath) => {
       if (filePath.endsWith("index.html")) {
@@ -2730,7 +2830,7 @@ if (existsSync5(UI_DIST)) {
   }));
   app.get("*", (_req, res) => {
     res.setHeader("Cache-Control", "no-store, must-revalidate");
-    res.sendFile(join5(UI_DIST, "index.html"));
+    res.sendFile(join6(UI_DIST, "index.html"));
   });
 } else {
   app.get("/", (_req, res) => {

package/dist/mcp-server/http.mjs

@@ -6,6 +6,33 @@ import express from "express";
 import { SSEServerTransport } from "@modelcontextprotocol/sdk/server/sse.js";
 import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
 
+// src/lib/cp-notify.ts
+var CP_PORT = process.env.SUVEREN_CP_PORT ?? "3402";
+var CP_BASE = process.env.SUVEREN_CP_INTERNAL_URL ?? `http://127.0.0.1:${CP_PORT}`;
+var TIMEOUT_MS = 2e3;
+async function notifyControlPlane(type) {
+  const secret = process.env.SUVEREN_INTERNAL_SECRET ?? "";
+  if (!secret) return;
+  try {
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), TIMEOUT_MS);
+    try {
+      await fetch(`${CP_BASE}/internal/event`, {
+        method: "POST",
+        headers: {
+          "Content-Type": "application/json",
+          "X-Internal-Secret": secret
+        },
+        body: JSON.stringify({ type }),
+        signal: controller.signal
+      });
+    } finally {
+      clearTimeout(timer);
+    }
+  } catch {
+  }
+}
+
 // src/lib/sp-client.ts
 var SPReceiptError = class extends Error {
   constructor(message, statusCode, body) {
@@ -167,6 +194,7 @@ var SPClient = class {
       const body = await res.json().catch(() => ({}));
       throw new Error(body.error ?? `SP proposal submission failed: ${res.status}`);
     }
+    void notifyControlPlane("proposal-added");
     return res.json();
   }
   /**

package/node_modules/@types/node/README.md

@@ -8,7 +8,7 @@ This package contains type definitions for node (https://nodejs.org/).
 Files were exported from https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node.
 
 ### Additional Details
- * Last updated: Mon, 27 Jul 2026 17:32:10 GMT
+ * Last updated: Fri, 07 Aug 2026 17:46:44 GMT
  * Dependencies: [undici-types](https://npmjs.com/package/undici-types)
 
 # Credits

package/node_modules/@types/node/child_process.d.ts

@@ -227,7 +227,6 @@ declare module "node:child_process" {
          * new process in a shell or with the use of the `shell` option of `ChildProcess`:
          *
          * ```js
-         * 'use strict';
          * import { spawn } from 'node:child_process';
          *
          * const subprocess = spawn(

package/node_modules/@types/node/crypto.d.ts

@@ -2698,12 +2698,12 @@ declare module "node:crypto" {
      */
     function sign(
         algorithm: string | null | undefined,
-        data: ArrayBufferLike | NodeJS.ArrayBufferView,
+        data: BinaryLike,
         key: KeyLike | SignKeyObjectInput | SignPrivateKeyInput | SignJsonWebKeyInput,
     ): NonSharedBuffer;
     function sign(
         algorithm: string | null | undefined,
-        data: ArrayBufferLike | NodeJS.ArrayBufferView,
+        data: BinaryLike,
         key: KeyLike | SignKeyObjectInput | SignPrivateKeyInput | SignJsonWebKeyInput,
         callback: (error: Error | null, data: NonSharedBuffer) => void,
     ): void;
@@ -2729,15 +2729,15 @@ declare module "node:crypto" {
      */
     function verify(
         algorithm: string | null | undefined,
-        data: ArrayBufferLike | NodeJS.ArrayBufferView,
+        data: BinaryLike,
         key: KeyLike | VerifyKeyObjectInput | VerifyPublicKeyInput | VerifyJsonWebKeyInput,
-        signature: ArrayBufferLike | NodeJS.ArrayBufferView,
+        signature: BinaryLike,
     ): boolean;
     function verify(
         algorithm: string | null | undefined,
-        data: ArrayBufferLike | NodeJS.ArrayBufferView,
+        data: BinaryLike,
         key: KeyLike | VerifyKeyObjectInput | VerifyPublicKeyInput | VerifyJsonWebKeyInput,
-        signature: ArrayBufferLike | NodeJS.ArrayBufferView,
+        signature: BinaryLike,
         callback: (error: Error | null, result: boolean) => void,
     ): void;
     /**

package/node_modules/@types/node/dns/promises.d.ts

@@ -183,7 +183,7 @@ declare module "node:dns/promises" {
      *     refresh: 900,
      *     retry: 900,
      *     expire: 1800,
-     *     minttl: 60 } ]
+     *     minttl: 60 } ];
      * ```
      * @since v10.6.0
      */
@@ -226,7 +226,7 @@ declare module "node:dns/promises" {
      *   regexp: '',
      *   replacement: '_sip._udp.example.com',
      *   order: 30,
-     *   preference: 100
+     *   preference: 100,
      * }
      * ```
      * @since v10.6.0
@@ -265,7 +265,7 @@ declare module "node:dns/promises" {
      *   refresh: 10000,
      *   retry: 2400,
      *   expire: 604800,
-     *   minttl: 3600
+     *   minttl: 3600,
      * }
      * ```
      * @since v10.6.0
@@ -285,7 +285,7 @@ declare module "node:dns/promises" {
      *   priority: 10,
      *   weight: 5,
      *   port: 21223,
-     *   name: 'service.example.com'
+     *   name: 'service.example.com',
      * }
      * ```
      * @since v10.6.0
@@ -306,7 +306,7 @@ declare module "node:dns/promises" {
      *   certUsage: 3,
      *   selector: 1,
      *   match: 1,
-     *   data: [ArrayBuffer]
+     *   data: [ArrayBuffer],
      * }
      * ```
      * @since v23.9.0, v22.15.0