@sanctuary-framework/mcp-server 0.10.0 → 0.10.1

package/dist/cli.js

@@ -2037,6 +2037,7 @@ var init_audit_log = __esm({
       maxTotalSizeBytes;
       maxEntries;
       rotationInFlight = false;
+      pendingWrites = /* @__PURE__ */ new Set();
       constructor(storage, masterKey, config) {
         this.storage = storage;
         this.encryptionKey = derivePurposeKey(masterKey, "audit-log");
@@ -2045,6 +2046,15 @@ var init_audit_log = __esm({
       }
       /**
        * Append an audit entry.
+       *
+       * The on-disk persist is async and tracked via `pendingWrites`. Long-lived
+       * callers (the main MCP server) can ignore that tracking and let writes
+       * drain naturally. Short-lived callers — the `sanctuary secrets` CLI which
+       * `process.exit()`s immediately after returning from a broker mutation —
+       * MUST await `flush()` before exiting, or in-flight writes get killed
+       * with the event loop and the entry is silently lost. That was the
+       * v0.10.0-rc.2 soak failure mode where `secrets audit` returned empty
+       * after a clean 7-verb lifecycle.
        */
       append(layer, operation, identityId, details, result = "success") {
         const entry = {
@@ -2056,8 +2066,22 @@ var init_audit_log = __esm({
           details
         };
         this.entries.push(entry);
-        this.persistEntry(entry).catch(() => {
+        const writePromise = this.persistEntry(entry).catch(() => {
         });
+        this.pendingWrites.add(writePromise);
+        void writePromise.finally(() => this.pendingWrites.delete(writePromise));
+      }
+      /**
+       * Wait for every in-flight `append()` persist (and its rotation pass) to
+       * settle. Safe to call multiple times — newly-appended entries during a
+       * flush are also awaited. Re-entrant only at the granularity of "drain
+       * everything queued so far". Short-lived CLIs MUST call this before
+       * `process.exit()` to keep audit writes durable.
+       */
+      async flush() {
+        while (this.pendingWrites.size > 0) {
+          await Promise.allSettled([...this.pendingWrites]);
+        }
       }
       async persistEntry(entry) {
         const key = `${Date.now()}-${this.counter++}`;
@@ -2068,7 +2092,7 @@ var init_audit_log = __esm({
           key,
           stringToBytes(JSON.stringify(encrypted))
         );
-        this.maybeRotate().catch(() => {
+        await this.maybeRotate().catch(() => {
         });
       }
       /**
@@ -24128,11 +24152,13 @@ var init_runtime = __esm({
 var cli_exports = {};
 __export(cli_exports, {
   COCOON_GOVERNOR_DEFAULTS: () => COCOON_GOVERNOR_DEFAULTS,
+  PORT_FALLBACK_ATTEMPTS: () => PORT_FALLBACK_ATTEMPTS,
   formatWrapSuccess: () => formatWrapSuccess,
   parseCocoonArgs: () => parseCocoonArgs,
   parseWrapArgs: () => parseWrapArgs,
   runCocoon: () => runCocoon,
-  runWrap: () => runWrap
+  runWrap: () => runWrap,
+  startDashboardWithFallback: () => startDashboardWithFallback
 });
 async function runWrap(options, deps = {}) {
   if (options.unwrap) {
@@ -24376,7 +24402,8 @@ async function runCocoon(options) {
 }
 async function startDashboardWithFallback(startFn, preferredPort, authToken, serverVersion) {
   let lastErr;
-  for (let port = preferredPort; port <= MAX_PORT; port++) {
+  for (let i = 0; i < PORT_FALLBACK_ATTEMPTS; i++) {
+    const port = preferredPort + i;
     try {
       const handle = await startFn({
         port,
@@ -24395,8 +24422,9 @@ async function startDashboardWithFallback(startFn, preferredPort, authToken, ser
       if (!isAddressInUse(err)) throw err;
     }
   }
+  const lastPort = preferredPort + PORT_FALLBACK_ATTEMPTS - 1;
   throw new Error(
-    `No free dashboard port in range ${preferredPort}-${MAX_PORT}: ${lastErr?.message ?? "unknown"}`
+    `No free dashboard port in the ${PORT_FALLBACK_ATTEMPTS} ports starting at ${preferredPort} (tried ${preferredPort}-${lastPort}): ${lastErr?.message ?? "unknown"}`
   );
 }
 function isAddressInUse(err) {
@@ -24644,7 +24672,7 @@ function printWrapHelp() {
     5. Every tool call is logged, scanned, and tier-gated
 `);
 }
-var COCOON_GOVERNOR_DEFAULTS, MAX_PORT, parseCocoonArgs;
+var COCOON_GOVERNOR_DEFAULTS, PORT_FALLBACK_ATTEMPTS, parseCocoonArgs;
 var init_cli = __esm({
   "src/cocoon/cli.ts"() {
     init_config_reader();
@@ -24658,7 +24686,7 @@ var init_cli = __esm({
       rate_limit_per_tool: 20,
       lifetime_limit: 1e3
     };
-    MAX_PORT = 3510;
+    PORT_FALLBACK_ATTEMPTS = 20;
     parseCocoonArgs = parseWrapArgs;
   }
 });
@@ -26162,6 +26190,7 @@ async function openBroker(opts = {}) {
   return {
     broker,
     close: async () => {
+      await auditLog.flush();
     }
   };
 }
@@ -27186,12 +27215,12 @@ function optionalNumber(args, key) {
   const v = args[key];
   return typeof v === "number" && Number.isFinite(v) ? v : void 0;
 }
-var require4, PKG_VERSION3;
+var PKG_VERSION3;
 var init_broker_server = __esm({
   "src/mcp/broker-server.ts"() {
+    init_config();
     init_token_issuer();
-    require4 = createRequire(import.meta.url);
-    ({ version: PKG_VERSION3 } = require4("../../package.json"));
+    PKG_VERSION3 = SANCTUARY_VERSION;
   }
 });
 
@@ -27610,8 +27639,8 @@ async function checkForUpdate(currentVersion) {
   } catch {
   }
 }
-var require5 = createRequire(import.meta.url);
-var { version: PKG_VERSION4 } = require5("../package.json");
+var require4 = createRequire(import.meta.url);
+var { version: PKG_VERSION4 } = require4("../package.json");
 async function main() {
   const args = process.argv.slice(2);
   let passphrase = process.env.SANCTUARY_PASSPHRASE;