@sanctuary-framework/mcp-server 1.1.5 → 1.1.7

package/dist/index.d.cts

@@ -4325,6 +4325,12 @@ interface HubPolicyAndBudgetSources {
  * may persist records to disk or recompute them per call.
  */
 interface HubAgentRegistrySource {
+    /**
+     * Insert or replace a record. Used by wrap-side registration and by
+     * read-side persistence refresh to merge records written after dashboard
+     * boot.
+     */
+    put(record: LocalAgentRecord): void;
     list(filter?: LocalAgentRegistryFilter): LocalAgentRecord[];
     get(agentId: string): LocalAgentRecord | null;
     /**
@@ -4350,6 +4356,12 @@ interface HubServiceDeps {
     fortressId: string;
     /** Local agent registry source. */
     agentRegistry: HubAgentRegistrySource;
+    /**
+     * Optional best-effort persisted agent reader. When supplied, list
+     * operations merge records written after hub construction before
+     * returning the in-memory projection.
+     */
+    readPersistedLocalAgents?: () => LocalAgentRecord[];
     /** Inbox aggregation sources. */
     inboxSources: HubInboxSources;
     /** Activity feed sources. */
@@ -4403,6 +4415,7 @@ declare class HubService {
     constructor(deps: HubServiceDeps);
     private now;
     private nowIso;
+    private refreshPersistedLocalAgents;
     listInbox(): HubInboxItem[];
     resolveInboxItem(itemId: string, action: HubInboxAction): Promise<HubInboxItem>;
     listAgents(filter?: LocalAgentRegistryFilter): LocalAgentRecord[];

package/dist/index.d.ts

@@ -4325,6 +4325,12 @@ interface HubPolicyAndBudgetSources {
  * may persist records to disk or recompute them per call.
  */
 interface HubAgentRegistrySource {
+    /**
+     * Insert or replace a record. Used by wrap-side registration and by
+     * read-side persistence refresh to merge records written after dashboard
+     * boot.
+     */
+    put(record: LocalAgentRecord): void;
     list(filter?: LocalAgentRegistryFilter): LocalAgentRecord[];
     get(agentId: string): LocalAgentRecord | null;
     /**
@@ -4350,6 +4356,12 @@ interface HubServiceDeps {
     fortressId: string;
     /** Local agent registry source. */
     agentRegistry: HubAgentRegistrySource;
+    /**
+     * Optional best-effort persisted agent reader. When supplied, list
+     * operations merge records written after hub construction before
+     * returning the in-memory projection.
+     */
+    readPersistedLocalAgents?: () => LocalAgentRecord[];
     /** Inbox aggregation sources. */
     inboxSources: HubInboxSources;
     /** Activity feed sources. */
@@ -4403,6 +4415,7 @@ declare class HubService {
     constructor(deps: HubServiceDeps);
     private now;
     private nowIso;
+    private refreshPersistedLocalAgents;
     listInbox(): HubInboxItem[];
     resolveInboxItem(itemId: string, action: HubInboxAction): Promise<HubInboxItem>;
     listAgents(filter?: LocalAgentRegistryFilter): LocalAgentRecord[];

package/dist/index.js

@@ -11160,7 +11160,7 @@ async function handleRequest(deps, req, res) {
     writeJSON(res, 200, { ok: true, mode: deps.sources.mode });
     return true;
   }
-  if (method === "GET" && (path === "/" || path === "/index.html")) {
+  if (method === "GET" && (path === "/v1.0" || path === "/v1.0/" || path === "/v1.0/index.html")) {
     const snapshot = await getProtectionSnapshot(deps.sources);
     const html = renderDashboardHTML({ snapshot, authToken: deps.authToken });
     writeText(res, 200, html, "text/html; charset=utf-8");
@@ -12001,7 +12001,7 @@ function renderMain() {
   const main = document.getElementById("main");
   if (!main) return;
   switch (state.route) {
-    case "dashboard": main.innerHTML = renderChatThread(); break;
+    case "dashboard": main.innerHTML = renderDashboardWelcome(); break;
     case "agents": main.innerHTML = renderAgentsList(); break;
     case "agent-detail": main.innerHTML = renderAgentDetail(); break;
     case "policy": main.innerHTML = renderPolicyCenter(); break;
@@ -12013,48 +12013,32 @@ function renderMain() {
   }
 }
 
-// ── Render: chat thread ────────────────────────────────────────────────
-function renderChatThread() {
-  const activeId = state.chatActiveAgentId;
-  const agent = activeId ? state.agents.find(function (a) { return a.agent_id === activeId; }) : null;
-  const header = '<header style="padding:8px 0;border-bottom:1px solid var(--rule);margin-bottom:8px;">' +
-    '<strong>' + escHtml(agent ? agent.agent_id : "Concierge") + '</strong>' +
-    ' <span class="muted">' + (agent ? "agent" : "Sanctuary advisory only. Operator-agent direct command via chat lands in v1.2.") + '</span>' +
-    '</header>';
-
-  // Three message kinds. (1) operator (UI-side suggestions, not backend POST).
-  // (2) agent-initiated approvals from inbox filtered by agent_id. (3) activity
-  // events filtered by agent_id rendered as system-style.
-  const msgs = [];
-  if (!agent) {
-    msgs.push('<div class="chat-msg system"><strong>Concierge:</strong> Pick an agent in the right pane to scope the thread. Tier 1 actions appear here as approve/deny prompts. Free text is advisory only at v1.1.</div>');
-  } else {
-    const pending = state.inbox.filter(function (i) { return i.kind === "approval_pending" && i.agent_id === activeId && !i.resolved; });
-    pending.forEach(function (i) {
-      const text = renderTemplate(i.display_template_id, i.display_template_args);
-      msgs.push(
-        '<div class="chat-msg agent" data-msg-kind="agent-initiated" data-item-id="' + escHtml(i.item_id) + '">' +
-          '<div>' + escHtml(text) + '</div>' +
-          '<div style="margin-top:6px;display:flex;gap:6px;">' +
-            '<button class="btn btn-primary" data-action="inbox-approve" data-item-id="' + escHtml(i.item_id) + '">Approve</button>' +
-            '<button class="btn" data-action="inbox-deny" data-item-id="' + escHtml(i.item_id) + '">Deny</button>' +
-            '<button class="btn" data-action="show-details" data-item-id="' + escHtml(i.item_id) + '">Show details</button>' +
-          '</div>' +
-        '</div>'
-      );
-    });
-    const events = state.activity.filter(function (e) { return e.agent_id === activeId; }).slice(0, 20);
-    events.forEach(function (e) {
-      const text = renderTemplate(e.display_template_id, e.display_template_args);
-      msgs.push('<div class="chat-msg system"><span class="muted">' + escHtml(shortTime(e.emitted_at)) + '</span> ' + escHtml(text) + '</div>');
-    });
-  }
-
-  const composer = '<form class="composer" id="chat-composer">' +
-    '<input type="text" placeholder="Suggestion to concierge. (Direct commands land in v1.2.)" id="chat-input" />' +
-    '<button type="submit" class="btn">Send</button>' +
-    '</form>';
-  return header + '<div class="chat-thread">' + (msgs.length ? msgs.join("\n") : '<p class="muted">No messages yet.</p>') + '</div>' + composer;
+// ── Render: dashboard welcome ──────────────────────────────────────────
+// v1.1.7: replaces the half-built chat surface that v1.1.6 shipped with
+// a "What you can do today" summary card mapping each nav target to
+// the operator action it enables. Direct concierge chat is a v1.2 work
+// package (WP-V1.2-3 + WP-V1.2-4).
+function renderDashboardWelcome() {
+  return [
+    '<h1>What you can do today</h1>',
+    '<div class="card">',
+      '<dl class="kv">',
+        '<dt><a href="#agents">Agents</a></dt>',
+        '<dd>Pause, resume, restart, lockdown, or unwrap any wrapped harness.</dd>',
+        '<dt><a href="#policy">Policy</a></dt>',
+        '<dd>Review the active policy bound to each agent.</dd>',
+        '<dt><a href="#privacy">Privacy</a></dt>',
+        '<dd>See what context is flowing to which provider per channel.</dd>',
+        '<dt><a href="#coordination">Coordination</a></dt>',
+        '<dd>Inspect intra-fortress agent coordination state.</dd>',
+        '<dt><a href="#health">Health</a></dt>',
+        '<dd>Check fortress posture, cocoon status, and dashboard refresh.</dd>',
+        '<dt><a href="#exit-drill">Exit drill</a></dt>',
+        '<dd>Snapshot, verify, and prepare a portable exit bundle.</dd>',
+      '</dl>',
+    '</div>',
+    '<p class="muted">Direct chat with the concierge ships in v1.2.</p>'
+  ].join("");
 }
 
 // ── Render: agents list / detail ───────────────────────────────────────
@@ -12093,8 +12077,10 @@ function renderAgentDetail() {
       '<dt>Status</dt><dd><span class="glyph ' + map.glyph + '"></span> ' + escHtml(map.label) + '</dd>' +
       '</dl>' +
     '</div>' +
-    '<div class="card"><h3>Timeline</h3>' + timeline + '</div>' +
-    '<button class="btn" data-action="set-route" data-route="dashboard">Open chat</button>';
+    '<div class="card"><h3>Timeline</h3>' + timeline + '</div>';
+  // v1.1.7: "Open chat" button removed alongside the half-built chat
+  // surface (Finding EE). The agent-detail timeline + capability buttons
+  // are the operator's interaction surface at v1.1; chat ships in v1.2.
 }
 
 // ── Render: privacy ────────────────────────────────────────────────────
@@ -12264,11 +12250,13 @@ function renderFortress() {
             : "This harness does not support " + mi.label.toLowerCase() + ".";
           return '<button class="btn" data-action="agent-' + mi.action + '" data-agent-id="' + escHtml(a.agent_id) + '"' + (mi.enabled ? '' : ' disabled') + ' title="' + escHtml(tip) + '">' + escHtml(mi.label) + '</button>';
         }).join("");
-        return '<div class="row" data-agent-row="' + escHtml(a.agent_id) + '">' +
-          '<span class="glyph ' + map.glyph + '" title="' + escHtml(REASON_LABELS[a.status_reason_class] || "") + '"></span>' +
-          '<div class="grow"><strong>' + escHtml(a.agent_id) + '</strong></div>' +
-          '<span class="pill">' + escHtml(map.label) + '</span>' +
-          '<div style="display:flex;gap:4px;flex-wrap:wrap;">' + buttons + '</div>' +
+        return '<div class="row agent-row" data-agent-row="' + escHtml(a.agent_id) + '">' +
+          '<div class="agent-row-head">' +
+            '<span class="glyph ' + map.glyph + '" title="' + escHtml(REASON_LABELS[a.status_reason_class] || "") + '"></span>' +
+            '<div class="grow"><strong>' + escHtml(a.agent_id) + '</strong></div>' +
+            '<span class="pill">' + escHtml(map.label) + '</span>' +
+          '</div>' +
+          '<div class="agent-row-actions">' + buttons + '</div>' +
           '</div>';
       }).join("\n")
     : '<p class="muted">No agents wrapped.</p>';
@@ -12512,19 +12500,10 @@ document.addEventListener("click", function (ev) {
   }
 });
 
-document.addEventListener("submit", function (ev) {
-  if (ev.target && ev.target.id === "chat-composer") {
-    ev.preventDefault();
-    const inp = document.getElementById("chat-input");
-    if (!inp) return;
-    const txt = inp.value.trim();
-    inp.value = "";
-    if (!txt) return;
-    // Concierge suggestion engine, NOT a backend command POST.
-    // Operator-typed direct commands land in v1.2.
-    toast("Concierge: I cannot run that as a command at v1.1. Use the inbox or the Agents view to take action.");
-  }
-});
+// v1.1.7: chat composer submit handler removed alongside the half-built
+// chat surface (Finding EE). Direct concierge chat ships in v1.2; until
+// then the dashboard view renders a static welcome card with no form
+// inputs that could be confused for a working command surface.
 
 // Theme: system preference only at v1.1.
 const mq = window.matchMedia ? window.matchMedia("(prefers-color-scheme: dark)") : null;
@@ -12662,6 +12641,10 @@ body {
 .row { display: flex; align-items: center; gap: 8px; padding: 6px 0; border-bottom: 1px dashed var(--rule); }
 .row:last-child { border-bottom: 0; }
 .row .grow { flex: 1; min-width: 0; }
+.agent-row { flex-direction: column; align-items: stretch; gap: 6px; }
+.agent-row-head { display: flex; align-items: center; gap: 8px; min-width: 0; }
+.agent-row-head .grow { flex: 1; min-width: 0; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+.agent-row-actions { display: flex; flex-wrap: wrap; gap: 4px; }
 .kv { display: grid; grid-template-columns: max-content 1fr; gap: 4px 12px; font-size: 12px; }
 .kv dt { color: var(--ink-3); }
 .kv dd { margin: 0; color: var(--ink); }
@@ -12766,12 +12749,8 @@ function renderDashboardV11Html(options = {}) {
 
 // src/dashboard/v1_1/routes.ts
 function handleDashboardV11Route(deps, req, res) {
-  const routePath = deps.routePath ?? "/v1.1";
-  const host = req.headers.host || "localhost";
-  const url = new URL(req.url ?? "/", `http://${host}`);
   const method = (req.method ?? "GET").toUpperCase();
   if (method !== "GET") return false;
-  if (url.pathname !== routePath && url.pathname !== `${routePath}/`) return false;
   const html = renderDashboardV11Html(deps);
   res.writeHead(200, {
     "Content-Type": "text/html; charset=utf-8",
@@ -12784,7 +12763,7 @@ function handleDashboardV11Route(deps, req, res) {
 // src/dashboard/v1_1/dispatch.ts
 async function dispatchV11Request(inputs, req, res, url, method) {
   const { bindings, authToken, loopbackAutoAuth } = inputs;
-  if (method === "GET" && (url.pathname === "/v1.1" || url.pathname === "/v1.1/")) {
+  if (method === "GET" && (url.pathname === "/" || url.pathname === "/dashboard" || url.pathname === "/v1.1" || url.pathname === "/v1.1/")) {
     return handleDashboardV11Route(
       {
         identityId: bindings.identityId,
@@ -12832,7 +12811,7 @@ var RATE_LIMIT_DECISIONS = 20;
 var MAX_RATE_LIMIT_ENTRIES = 1e4;
 function isDashboardViewRoute(method, path) {
   if (method !== "GET") return false;
-  return path === "/" || path === "/dashboard" || path === "/fortress" || path === "/events";
+  return path === "/" || path === "/dashboard" || path === "/v1.0" || path === "/fortress" || path === "/events";
 }
 var DashboardApprovalChannel = class {
   config;
@@ -13336,7 +13315,7 @@ var DashboardApprovalChannel = class {
       }
       return;
     }
-    if (method === "GET" && url.pathname === "/" && this.authToken) {
+    if (method === "GET" && url.pathname === "/v1.0" && this.authToken) {
       if (!this.isAuthenticated(req, url)) {
         this.serveLoginPage(res);
         return;
@@ -13349,7 +13328,7 @@ var DashboardApprovalChannel = class {
     try {
       if (method === "GET" && url.pathname === "/fortress") {
         this.serveFortressView(res);
-      } else if (method === "GET" && (url.pathname === "/" || url.pathname === "/dashboard")) {
+      } else if (method === "GET" && url.pathname === "/v1.0") {
         if (this.fortressHTML) {
           this.serveFortressView(res);
         } else {
@@ -26871,6 +26850,13 @@ var HubService = class {
   nowIso() {
     return this.now().toISOString();
   }
+  refreshPersistedLocalAgents() {
+    const readPersistedLocalAgents2 = this.deps.readPersistedLocalAgents;
+    if (!readPersistedLocalAgents2) return;
+    for (const record of readPersistedLocalAgents2()) {
+      this.deps.agentRegistry.put(record);
+    }
+  }
   // ── Inbox ───────────────────────────────────────────────────────────
   listInbox() {
     const items = aggregateInbox(this.deps.inboxSources, this.inboxStore);
@@ -26882,6 +26868,7 @@ var HubService = class {
   }
   // ── Agents ──────────────────────────────────────────────────────────
   listAgents(filter) {
+    this.refreshPersistedLocalAgents();
     const safeFilter = {
       ...filter ?? {},
       identity_id: this.deps.identityId
@@ -27346,10 +27333,13 @@ var CapabilityErrorAgentController = class {
 function buildV11Bindings(inputs) {
   const seed = inputs.storagePath !== void 0 ? readPersistedLocalAgents(inputs.storagePath) : [];
   const registry = new InMemoryLocalAgentRegistry(seed);
+  const storagePath = inputs.storagePath;
+  const readPersisted = storagePath !== void 0 ? () => readPersistedLocalAgents(storagePath) : void 0;
   const hubService = new HubService({
     identityId: inputs.identityId,
     fortressId: inputs.fortressId,
     agentRegistry: registry,
+    ...readPersisted ? { readPersistedLocalAgents: readPersisted } : {},
     inboxSources: {
       listPendingApprovals: () => [],
       listRecentBlockedEgress: () => [],