@sanctuary-framework/mcp-server 0.4.0 → 0.4.2

package/dist/index.d.cts

@@ -1,10 +1,5 @@
 import { Server } from '@modelcontextprotocol/sdk/server/index.js';
 
-/**
- * Sanctuary MCP Server — Configuration
- *
- * Loads and validates server configuration from file or environment variables.
- */
 interface SanctuaryConfig {
     version: string;
     storage_path: string;
@@ -670,6 +665,11 @@ interface SHRCapabilities {
  */
 interface SHRBody {
     shr_version: "1.0";
+    implementation: {
+        sanctuary_version: string;
+        node_version: string;
+        generated_by: string;
+    };
     instance_id: string;
     generated_at: string;
     expires_at: string;

package/dist/index.d.ts

@@ -1,10 +1,5 @@
 import { Server } from '@modelcontextprotocol/sdk/server/index.js';
 
-/**
- * Sanctuary MCP Server — Configuration
- *
- * Loads and validates server configuration from file or environment variables.
- */
 interface SanctuaryConfig {
     version: string;
     storage_path: string;
@@ -670,6 +665,11 @@ interface SHRCapabilities {
  */
 interface SHRBody {
     shr_version: "1.0";
+    implementation: {
+        sanctuary_version: string;
+        node_version: string;
+        generated_by: string;
+    };
     instance_id: string;
     generated_at: string;
     expires_at: string;

package/dist/index.js

@@ -206,6 +206,7 @@ var init_hashing = __esm({
 });
 var require2 = createRequire(import.meta.url);
 var { version: PKG_VERSION } = require2("../package.json");
+var SANCTUARY_VERSION = PKG_VERSION;
 function defaultConfig() {
   return {
     version: PKG_VERSION,
@@ -3636,7 +3637,12 @@ var DEFAULT_POLICY = {
     "context_gate_filter",
     "context_gate_list_policies",
     "l2_hardening_status",
-    "l2_verify_isolation"
+    "l2_verify_isolation",
+    "sovereignty_audit",
+    "shr_gateway_export",
+    "bridge_commit",
+    "bridge_verify",
+    "bridge_attest"
   ],
   approval_channel: DEFAULT_CHANNEL
 };
@@ -3703,6 +3709,10 @@ function parseScalar(value) {
   return value.replace(/^["']|["']$/g, "");
 }
 function validatePolicy(raw) {
+  const userTier3 = raw.tier3_always_allow ?? [];
+  const mergedTier3 = [
+    .../* @__PURE__ */ new Set([...userTier3, ...DEFAULT_POLICY.tier3_always_allow])
+  ];
   return {
     version: raw.version ?? 1,
     tier1_always_approve: raw.tier1_always_approve ?? DEFAULT_POLICY.tier1_always_approve,
@@ -3710,7 +3720,7 @@ function validatePolicy(raw) {
       ...DEFAULT_TIER2,
       ...raw.tier2_anomaly ?? {}
     },
-    tier3_always_allow: raw.tier3_always_allow ?? DEFAULT_POLICY.tier3_always_allow,
+    tier3_always_allow: mergedTier3,
     approval_channel: (() => {
       const merged = {
         ...DEFAULT_CHANNEL,
@@ -3795,6 +3805,11 @@ tier3_always_allow:
   - context_gate_recommend
   - context_gate_filter
   - context_gate_list_policies
+  - sovereignty_audit
+  - shr_gateway_export
+  - bridge_commit
+  - bridge_verify
+  - bridge_attest
 
 # \u2500\u2500\u2500 Approval Channel \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
 # How Sanctuary reaches you when approval is needed.
@@ -4589,8 +4604,6 @@ function generateDashboardHTML(options) {
 }
 
 // src/principal-policy/dashboard.ts
-var require4 = createRequire(import.meta.url);
-var { version: PKG_VERSION3 } = require4("../../package.json");
 var SESSION_TTL_MS = 5 * 60 * 1e3;
 var MAX_SESSIONS = 1e3;
 var RATE_LIMIT_WINDOW_MS = 6e4;
@@ -4619,7 +4632,7 @@ var DashboardApprovalChannel = class {
     this.useTLS = !!(config.tls?.cert_path && config.tls?.key_path);
     this.dashboardHTML = generateDashboardHTML({
       timeoutSeconds: config.timeout_seconds,
-      serverVersion: PKG_VERSION3,
+      serverVersion: SANCTUARY_VERSION,
       authToken: this.authToken
     });
     this.sessionCleanupTimer = setInterval(() => this.cleanupSessions(), 6e4);
@@ -5682,6 +5695,11 @@ function generateSHR(identityId, opts) {
   }
   const body = {
     shr_version: "1.0",
+    implementation: {
+      sanctuary_version: config.version,
+      node_version: process.versions.node,
+      generated_by: "sanctuary-mcp-server"
+    },
     instance_id: identity.identity_id,
     generated_at: now.toISOString(),
     expires_at: expiresAt.toISOString(),