@sanctuary-framework/mcp-server 0.5.13 → 0.5.14

package/dist/index.d.cts

@@ -2004,6 +2004,118 @@ declare class ContextGateEnforcer {
     resetStats(): void;
 }
 
+/**
+ * Sanctuary MCP Server — Sovereignty Profile
+ *
+ * Encrypted store for the sovereignty profile configuration.
+ * Controls which Sanctuary features are active and how they behave.
+ *
+ * The profile is stored encrypted in a reserved namespace (_sovereignty_profile)
+ * using AES-256-GCM with HKDF domain separation, following the same pattern
+ * as ContextGatePolicyStore.
+ *
+ * Security invariants:
+ * - Profile is stored in a reserved namespace (underscore-prefixed)
+ * - L1 state tools cannot read or write reserved namespaces
+ * - Profile changes only come through dedicated profile tools (Tier 1)
+ *   or the dashboard
+ * - All changes are audit-logged
+ */
+
+interface SovereigntyProfile {
+    version: 1;
+    features: {
+        audit_logging: {
+            enabled: boolean;
+        };
+        injection_detection: {
+            enabled: boolean;
+            sensitivity?: "low" | "medium" | "high";
+        };
+        context_gating: {
+            enabled: boolean;
+            policy_id?: string;
+        };
+        approval_gate: {
+            enabled: boolean;
+        };
+        zk_proofs: {
+            enabled: boolean;
+        };
+    };
+    updated_at: string;
+}
+/** Partial feature update — all fields optional */
+interface SovereigntyProfileUpdate {
+    audit_logging?: {
+        enabled?: boolean;
+    };
+    injection_detection?: {
+        enabled?: boolean;
+        sensitivity?: "low" | "medium" | "high";
+    };
+    context_gating?: {
+        enabled?: boolean;
+        policy_id?: string;
+    };
+    approval_gate?: {
+        enabled?: boolean;
+    };
+    zk_proofs?: {
+        enabled?: boolean;
+    };
+}
+declare function createDefaultProfile(): SovereigntyProfile;
+/**
+ * Sovereignty profile store — encrypted under L1 sovereignty.
+ *
+ * Stores the active sovereignty profile in a reserved namespace.
+ * On first load, creates the default profile automatically.
+ */
+declare class SovereigntyProfileStore {
+    private storage;
+    private encryptionKey;
+    private profile;
+    constructor(storage: StorageBackend, masterKey: Uint8Array);
+    /**
+     * Load the active sovereignty profile from encrypted storage.
+     * Creates the default profile on first run.
+     */
+    load(): Promise<SovereigntyProfile>;
+    /**
+     * Get the current profile. Must call load() first.
+     */
+    get(): SovereigntyProfile;
+    /**
+     * Apply a partial update to the profile.
+     * Returns the updated profile.
+     */
+    update(updates: SovereigntyProfileUpdate): Promise<SovereigntyProfile>;
+    /**
+     * Persist the current profile to encrypted storage.
+     */
+    private persist;
+}
+
+/**
+ * Sanctuary MCP Server — System Prompt Generator
+ *
+ * Pure function that takes a SovereigntyProfile and generates a concise
+ * system prompt snippet (< 500 tokens) instructing the agent on which
+ * Sanctuary features are active and how to use them.
+ *
+ * The prompt is generic (not harness-specific) and intended to be pasted
+ * into any agent's system configuration.
+ */
+
+/**
+ * Generate a system prompt snippet from the active sovereignty profile.
+ *
+ * The output is a concise, copy-pasteable text block that instructs the
+ * agent on which Sanctuary features are active and how to interact with them.
+ */
+declare function generateSystemPrompt(profile: SovereigntyProfile): string;
+
 /**
  * Sanctuary MCP Server — In-Memory Storage Backend
  *
@@ -2171,6 +2283,7 @@ declare class DashboardApprovalChannel implements ApprovalChannel {
     private handshakeResults;
     private shrOpts;
     private _sanctuaryConfig;
+    private profileStore;
     private dashboardHTML;
     private loginHTML;
     private authToken;
@@ -2197,6 +2310,7 @@ declare class DashboardApprovalChannel implements ApprovalChannel {
         handshakeResults?: Map<string, HandshakeResult>;
         shrOpts?: SHRGeneratorOptions;
         sanctuaryConfig?: SanctuaryConfig;
+        profileStore?: SovereigntyProfileStore;
     }): void;
     /**
      * Mark this dashboard as running in standalone mode.
@@ -2284,6 +2398,8 @@ declare class DashboardApprovalChannel implements ApprovalChannel {
     private handleIdentity;
     private handleHandshakes;
     private handleSHR;
+    private handleSovereigntyProfileGet;
+    private handleSovereigntyProfileUpdate;
     broadcastSSE(event: string, data: unknown): void;
     /**
      * Broadcast an audit entry to connected dashboards.
@@ -2794,4 +2910,4 @@ declare function createSanctuaryServer(options?: {
     storage?: StorageBackend;
 }): Promise<SanctuaryServer>;
 
-export { ATTESTATION_VERSION, ApprovalGate, type AttestationBody, type AttestationVerificationResult, AuditLog, AutoApproveChannel, BaselineTracker, type BridgeAttestationRequest, type BridgeAttestationResult, type BridgeCommitment, type BridgeVerificationResult, TEMPLATES as CONTEXT_GATE_TEMPLATES, CallbackApprovalChannel, CommitmentStore, type ConcordiaOutcome, type ContextAction, type ContextFilterResult, ContextGateEnforcer, type ContextGatePolicy, ContextGatePolicyStore, type ContextGateRule, type ContextGateTemplate, DashboardApprovalChannel, type DashboardConfig, type DetectionResult, type EnforcerConfig, type FederationCapabilities, type FederationPeer, FederationRegistry, type FieldClassification, type FieldFilterResult, FilesystemStorage, type GateResult, type HandshakeChallenge, type HandshakeCompletion, type HandshakeResponse, type HandshakeResult, InMemoryModelProvenanceStore, InjectionDetector, type InjectionDetectorConfig, type InjectionSignal, MODEL_PRESETS, MemoryStorage, type ModelProvenance, type ModelProvenanceStore, type PedersenCommitment, type PeerTrustEvaluation, type PolicyRecommendation, PolicyStore, type PrincipalPolicy, type ProviderCategory, ReputationStore, type SHRBody, type SHRGeneratorOptions, type SHRVerificationResult, type SanctuaryConfig, type SanctuaryServer, type SignedAttestation, type SignedSHR, type SovereigntyTier, StateStore, StderrApprovalChannel, TIER_WEIGHTS, type TierMetadata, type TieredAttestation, WebhookApprovalChannel, type WebhookCallbackPayload, type WebhookConfig, type WebhookPayload, type ZKProofOfKnowledge, type ZKRangeProof, canonicalize, classifyField, completeHandshake, computeWeightedScore, createBridgeCommitment, createPedersenCommitment, createProofOfKnowledge, createRangeProof, createSanctuaryServer, evaluateField, filterContext, generateAttestation, generateSHR, getTemplate, initiateHandshake, listTemplateIds, loadConfig, loadPrincipalPolicy, recommendPolicy, resolveTier, respondToHandshake, signPayload, tierDistribution, verifyAttestation, verifyBridgeCommitment, verifyCompletion, verifyPedersenCommitment, verifyProofOfKnowledge, verifyRangeProof, verifySHR, verifySignature };
+export { ATTESTATION_VERSION, ApprovalGate, type AttestationBody, type AttestationVerificationResult, AuditLog, AutoApproveChannel, BaselineTracker, type BridgeAttestationRequest, type BridgeAttestationResult, type BridgeCommitment, type BridgeVerificationResult, TEMPLATES as CONTEXT_GATE_TEMPLATES, CallbackApprovalChannel, CommitmentStore, type ConcordiaOutcome, type ContextAction, type ContextFilterResult, ContextGateEnforcer, type ContextGatePolicy, ContextGatePolicyStore, type ContextGateRule, type ContextGateTemplate, DashboardApprovalChannel, type DashboardConfig, type DetectionResult, type EnforcerConfig, type FederationCapabilities, type FederationPeer, FederationRegistry, type FieldClassification, type FieldFilterResult, FilesystemStorage, type GateResult, type HandshakeChallenge, type HandshakeCompletion, type HandshakeResponse, type HandshakeResult, InMemoryModelProvenanceStore, InjectionDetector, type InjectionDetectorConfig, type InjectionSignal, MODEL_PRESETS, MemoryStorage, type ModelProvenance, type ModelProvenanceStore, type PedersenCommitment, type PeerTrustEvaluation, type PolicyRecommendation, PolicyStore, type PrincipalPolicy, type ProviderCategory, ReputationStore, type SHRBody, type SHRGeneratorOptions, type SHRVerificationResult, type SanctuaryConfig, type SanctuaryServer, type SignedAttestation, type SignedSHR, type SovereigntyProfile, SovereigntyProfileStore, type SovereigntyProfileUpdate, type SovereigntyTier, StateStore, StderrApprovalChannel, TIER_WEIGHTS, type TierMetadata, type TieredAttestation, WebhookApprovalChannel, type WebhookCallbackPayload, type WebhookConfig, type WebhookPayload, type ZKProofOfKnowledge, type ZKRangeProof, canonicalize, classifyField, completeHandshake, computeWeightedScore, createBridgeCommitment, createDefaultProfile, createPedersenCommitment, createProofOfKnowledge, createRangeProof, createSanctuaryServer, evaluateField, filterContext, generateAttestation, generateSHR, generateSystemPrompt, getTemplate, initiateHandshake, listTemplateIds, loadConfig, loadPrincipalPolicy, recommendPolicy, resolveTier, respondToHandshake, signPayload, tierDistribution, verifyAttestation, verifyBridgeCommitment, verifyCompletion, verifyPedersenCommitment, verifyProofOfKnowledge, verifyRangeProof, verifySHR, verifySignature };

package/dist/index.d.ts

@@ -2004,6 +2004,118 @@ declare class ContextGateEnforcer {
     resetStats(): void;
 }
 
+/**
+ * Sanctuary MCP Server — Sovereignty Profile
+ *
+ * Encrypted store for the sovereignty profile configuration.
+ * Controls which Sanctuary features are active and how they behave.
+ *
+ * The profile is stored encrypted in a reserved namespace (_sovereignty_profile)
+ * using AES-256-GCM with HKDF domain separation, following the same pattern
+ * as ContextGatePolicyStore.
+ *
+ * Security invariants:
+ * - Profile is stored in a reserved namespace (underscore-prefixed)
+ * - L1 state tools cannot read or write reserved namespaces
+ * - Profile changes only come through dedicated profile tools (Tier 1)
+ *   or the dashboard
+ * - All changes are audit-logged
+ */
+
+interface SovereigntyProfile {
+    version: 1;
+    features: {
+        audit_logging: {
+            enabled: boolean;
+        };
+        injection_detection: {
+            enabled: boolean;
+            sensitivity?: "low" | "medium" | "high";
+        };
+        context_gating: {
+            enabled: boolean;
+            policy_id?: string;
+        };
+        approval_gate: {
+            enabled: boolean;
+        };
+        zk_proofs: {
+            enabled: boolean;
+        };
+    };
+    updated_at: string;
+}
+/** Partial feature update — all fields optional */
+interface SovereigntyProfileUpdate {
+    audit_logging?: {
+        enabled?: boolean;
+    };
+    injection_detection?: {
+        enabled?: boolean;
+        sensitivity?: "low" | "medium" | "high";
+    };
+    context_gating?: {
+        enabled?: boolean;
+        policy_id?: string;
+    };
+    approval_gate?: {
+        enabled?: boolean;
+    };
+    zk_proofs?: {
+        enabled?: boolean;
+    };
+}
+declare function createDefaultProfile(): SovereigntyProfile;
+/**
+ * Sovereignty profile store — encrypted under L1 sovereignty.
+ *
+ * Stores the active sovereignty profile in a reserved namespace.
+ * On first load, creates the default profile automatically.
+ */
+declare class SovereigntyProfileStore {
+    private storage;
+    private encryptionKey;
+    private profile;
+    constructor(storage: StorageBackend, masterKey: Uint8Array);
+    /**
+     * Load the active sovereignty profile from encrypted storage.
+     * Creates the default profile on first run.
+     */
+    load(): Promise<SovereigntyProfile>;
+    /**
+     * Get the current profile. Must call load() first.
+     */
+    get(): SovereigntyProfile;
+    /**
+     * Apply a partial update to the profile.
+     * Returns the updated profile.
+     */
+    update(updates: SovereigntyProfileUpdate): Promise<SovereigntyProfile>;
+    /**
+     * Persist the current profile to encrypted storage.
+     */
+    private persist;
+}
+
+/**
+ * Sanctuary MCP Server — System Prompt Generator
+ *
+ * Pure function that takes a SovereigntyProfile and generates a concise
+ * system prompt snippet (< 500 tokens) instructing the agent on which
+ * Sanctuary features are active and how to use them.
+ *
+ * The prompt is generic (not harness-specific) and intended to be pasted
+ * into any agent's system configuration.
+ */
+
+/**
+ * Generate a system prompt snippet from the active sovereignty profile.
+ *
+ * The output is a concise, copy-pasteable text block that instructs the
+ * agent on which Sanctuary features are active and how to interact with them.
+ */
+declare function generateSystemPrompt(profile: SovereigntyProfile): string;
+
 /**
  * Sanctuary MCP Server — In-Memory Storage Backend
  *
@@ -2171,6 +2283,7 @@ declare class DashboardApprovalChannel implements ApprovalChannel {
     private handshakeResults;
     private shrOpts;
     private _sanctuaryConfig;
+    private profileStore;
     private dashboardHTML;
     private loginHTML;
     private authToken;
@@ -2197,6 +2310,7 @@ declare class DashboardApprovalChannel implements ApprovalChannel {
         handshakeResults?: Map<string, HandshakeResult>;
         shrOpts?: SHRGeneratorOptions;
         sanctuaryConfig?: SanctuaryConfig;
+        profileStore?: SovereigntyProfileStore;
     }): void;
     /**
      * Mark this dashboard as running in standalone mode.
@@ -2284,6 +2398,8 @@ declare class DashboardApprovalChannel implements ApprovalChannel {
     private handleIdentity;
     private handleHandshakes;
     private handleSHR;
+    private handleSovereigntyProfileGet;
+    private handleSovereigntyProfileUpdate;
     broadcastSSE(event: string, data: unknown): void;
     /**
      * Broadcast an audit entry to connected dashboards.
@@ -2794,4 +2910,4 @@ declare function createSanctuaryServer(options?: {
     storage?: StorageBackend;
 }): Promise<SanctuaryServer>;
 
-export { ATTESTATION_VERSION, ApprovalGate, type AttestationBody, type AttestationVerificationResult, AuditLog, AutoApproveChannel, BaselineTracker, type BridgeAttestationRequest, type BridgeAttestationResult, type BridgeCommitment, type BridgeVerificationResult, TEMPLATES as CONTEXT_GATE_TEMPLATES, CallbackApprovalChannel, CommitmentStore, type ConcordiaOutcome, type ContextAction, type ContextFilterResult, ContextGateEnforcer, type ContextGatePolicy, ContextGatePolicyStore, type ContextGateRule, type ContextGateTemplate, DashboardApprovalChannel, type DashboardConfig, type DetectionResult, type EnforcerConfig, type FederationCapabilities, type FederationPeer, FederationRegistry, type FieldClassification, type FieldFilterResult, FilesystemStorage, type GateResult, type HandshakeChallenge, type HandshakeCompletion, type HandshakeResponse, type HandshakeResult, InMemoryModelProvenanceStore, InjectionDetector, type InjectionDetectorConfig, type InjectionSignal, MODEL_PRESETS, MemoryStorage, type ModelProvenance, type ModelProvenanceStore, type PedersenCommitment, type PeerTrustEvaluation, type PolicyRecommendation, PolicyStore, type PrincipalPolicy, type ProviderCategory, ReputationStore, type SHRBody, type SHRGeneratorOptions, type SHRVerificationResult, type SanctuaryConfig, type SanctuaryServer, type SignedAttestation, type SignedSHR, type SovereigntyTier, StateStore, StderrApprovalChannel, TIER_WEIGHTS, type TierMetadata, type TieredAttestation, WebhookApprovalChannel, type WebhookCallbackPayload, type WebhookConfig, type WebhookPayload, type ZKProofOfKnowledge, type ZKRangeProof, canonicalize, classifyField, completeHandshake, computeWeightedScore, createBridgeCommitment, createPedersenCommitment, createProofOfKnowledge, createRangeProof, createSanctuaryServer, evaluateField, filterContext, generateAttestation, generateSHR, getTemplate, initiateHandshake, listTemplateIds, loadConfig, loadPrincipalPolicy, recommendPolicy, resolveTier, respondToHandshake, signPayload, tierDistribution, verifyAttestation, verifyBridgeCommitment, verifyCompletion, verifyPedersenCommitment, verifyProofOfKnowledge, verifyRangeProof, verifySHR, verifySignature };
+export { ATTESTATION_VERSION, ApprovalGate, type AttestationBody, type AttestationVerificationResult, AuditLog, AutoApproveChannel, BaselineTracker, type BridgeAttestationRequest, type BridgeAttestationResult, type BridgeCommitment, type BridgeVerificationResult, TEMPLATES as CONTEXT_GATE_TEMPLATES, CallbackApprovalChannel, CommitmentStore, type ConcordiaOutcome, type ContextAction, type ContextFilterResult, ContextGateEnforcer, type ContextGatePolicy, ContextGatePolicyStore, type ContextGateRule, type ContextGateTemplate, DashboardApprovalChannel, type DashboardConfig, type DetectionResult, type EnforcerConfig, type FederationCapabilities, type FederationPeer, FederationRegistry, type FieldClassification, type FieldFilterResult, FilesystemStorage, type GateResult, type HandshakeChallenge, type HandshakeCompletion, type HandshakeResponse, type HandshakeResult, InMemoryModelProvenanceStore, InjectionDetector, type InjectionDetectorConfig, type InjectionSignal, MODEL_PRESETS, MemoryStorage, type ModelProvenance, type ModelProvenanceStore, type PedersenCommitment, type PeerTrustEvaluation, type PolicyRecommendation, PolicyStore, type PrincipalPolicy, type ProviderCategory, ReputationStore, type SHRBody, type SHRGeneratorOptions, type SHRVerificationResult, type SanctuaryConfig, type SanctuaryServer, type SignedAttestation, type SignedSHR, type SovereigntyProfile, SovereigntyProfileStore, type SovereigntyProfileUpdate, type SovereigntyTier, StateStore, StderrApprovalChannel, TIER_WEIGHTS, type TierMetadata, type TieredAttestation, WebhookApprovalChannel, type WebhookCallbackPayload, type WebhookConfig, type WebhookPayload, type ZKProofOfKnowledge, type ZKRangeProof, canonicalize, classifyField, completeHandshake, computeWeightedScore, createBridgeCommitment, createDefaultProfile, createPedersenCommitment, createProofOfKnowledge, createRangeProof, createSanctuaryServer, evaluateField, filterContext, generateAttestation, generateSHR, generateSystemPrompt, getTemplate, initiateHandshake, listTemplateIds, loadConfig, loadPrincipalPolicy, recommendPolicy, resolveTier, respondToHandshake, signPayload, tierDistribution, verifyAttestation, verifyBridgeCommitment, verifyCompletion, verifyPedersenCommitment, verifyProofOfKnowledge, verifyRangeProof, verifySHR, verifySignature };