@sanctuary-framework/mcp-server 1.2.9 → 1.2.10

package/dist/index.d.cts

@@ -7129,6 +7129,72 @@ declare class ApprovalAggregator {
     private hydrate;
 }
 
+/**
+ * Sanctuary v1.3 WP-V1.3-1 Sentinel Finding Store.
+ *
+ * Encrypted at-rest persistence for sentinel findings. Sibling to the
+ * Upsilon-3 aggregator-store: same fortress-master-key-derived HKDF
+ * subkey shape, AAD-bound to the finding_id, retention-aware.
+ *
+ * Storage layout:
+ *   namespace: `_sentinel_findings`
+ *   key:       `finding.{finding_id}` (one record per finding)
+ *   payload:   AES-256-GCM ciphertext of the JSON-serialized record.
+ *   key:       `l2-sentinel-finding-v1` HKDF subkey of fortress master.
+ *   AAD:       UTF-8 bytes of `finding_id`.
+ *
+ * Multi-fortress isolation: HKDF subkey derives from the fortress
+ * master key. Two fortresses never produce identical encryption keys
+ * for identical finding_ids.
+ *
+ * Retention: 30 days default, mirroring the audit-log envelope and the
+ * aggregator payload store.
+ */
+
+interface SentinelFindingStoreOptions {
+    storage: StorageBackend;
+    masterKey: Uint8Array;
+    fortressId: string;
+    /** Operator-tunable retention window. Default 30 days. */
+    retentionDays?: number;
+    /** Wall-clock provider for deterministic tests. */
+    now?: () => Date;
+}
+declare class SentinelFindingStore {
+    private readonly storage;
+    private readonly encryptionKey;
+    private readonly fortressId;
+    private readonly retentionDays;
+    private readonly now;
+    constructor(opts: SentinelFindingStoreOptions);
+    /**
+     * Persist a finding. Truncates the operator-visible summary to
+     * SENTINEL_SUMMARY_MAX_CHARS so the dashboard render stays bounded.
+     * Returns the retention deadline so callers can audit it.
+     */
+    saveFinding(finding: SentinelFinding): Promise<string>;
+    /** Load a single finding by id, or null when absent / corrupted. */
+    loadFinding(findingId: string): Promise<SentinelFinding | null>;
+    /**
+     * List findings, newest first. Optional filters: since (ISO 8601),
+     * severity, sentinel_id, agent_id, limit. Default limit 100.
+     */
+    listFindings(opts?: {
+        since?: string;
+        severity?: SentinelSeverity;
+        sentinelId?: string;
+        agentId?: string;
+        limit?: number;
+    }): Promise<SentinelFinding[]>;
+    /**
+     * Drop expired findings. Returns the count removed.
+     */
+    pruneExpired(now?: Date): Promise<{
+        pruned: number;
+    }>;
+    private decode;
+}
+
 /**
  * Sanctuary v1.3 WP-V1.3-1 Sentinel Baseline Pack (Castle Layer 2 anchor)
  *
@@ -7166,6 +7232,22 @@ interface SentinelContext {
     substrateSelector?: SubstrateSelector;
     /** Wall-clock provider. Tests inject a deterministic clock. */
     now: () => Date;
+    /**
+     * Optional read view of the per-fortress sentinel finding store
+     * (Phi-1 surface). First-order sentinels (Phi-1/2/3/4) do not need
+     * this; the Phi-5 meta-sentinel reads it to detect patterns ACROSS
+     * other sentinels' findings (compound finding, fortress-wide count
+     * spikes, novel sentinel-ID combinations). The dispatcher attaches
+     * the store automatically on `subscribeSentinel`; tests can omit it
+     * when constructing a context literal for a first-order watcher.
+     *
+     * Multi-fortress isolation rides on the store's existing key shape:
+     * the store is constructed per-fortress from the fortress master
+     * key, so two fortresses' stores produce distinct ciphertext for
+     * identical finding-ids and one fortress's read cannot decode
+     * another fortress's findings.
+     */
+    findingStore?: SentinelFindingStore;
 }
 /**
  * One observation a sentinel produced. Persisted under the sentinel
@@ -7331,72 +7413,6 @@ declare class SentinelRegistry {
     unsubscribeAll(): Promise<void>;
 }
 
-/**
- * Sanctuary v1.3 WP-V1.3-1 Sentinel Finding Store.
- *
- * Encrypted at-rest persistence for sentinel findings. Sibling to the
- * Upsilon-3 aggregator-store: same fortress-master-key-derived HKDF
- * subkey shape, AAD-bound to the finding_id, retention-aware.
- *
- * Storage layout:
- *   namespace: `_sentinel_findings`
- *   key:       `finding.{finding_id}` (one record per finding)
- *   payload:   AES-256-GCM ciphertext of the JSON-serialized record.
- *   key:       `l2-sentinel-finding-v1` HKDF subkey of fortress master.
- *   AAD:       UTF-8 bytes of `finding_id`.
- *
- * Multi-fortress isolation: HKDF subkey derives from the fortress
- * master key. Two fortresses never produce identical encryption keys
- * for identical finding_ids.
- *
- * Retention: 30 days default, mirroring the audit-log envelope and the
- * aggregator payload store.
- */
-
-interface SentinelFindingStoreOptions {
-    storage: StorageBackend;
-    masterKey: Uint8Array;
-    fortressId: string;
-    /** Operator-tunable retention window. Default 30 days. */
-    retentionDays?: number;
-    /** Wall-clock provider for deterministic tests. */
-    now?: () => Date;
-}
-declare class SentinelFindingStore {
-    private readonly storage;
-    private readonly encryptionKey;
-    private readonly fortressId;
-    private readonly retentionDays;
-    private readonly now;
-    constructor(opts: SentinelFindingStoreOptions);
-    /**
-     * Persist a finding. Truncates the operator-visible summary to
-     * SENTINEL_SUMMARY_MAX_CHARS so the dashboard render stays bounded.
-     * Returns the retention deadline so callers can audit it.
-     */
-    saveFinding(finding: SentinelFinding): Promise<string>;
-    /** Load a single finding by id, or null when absent / corrupted. */
-    loadFinding(findingId: string): Promise<SentinelFinding | null>;
-    /**
-     * List findings, newest first. Optional filters: since (ISO 8601),
-     * severity, sentinel_id, agent_id, limit. Default limit 100.
-     */
-    listFindings(opts?: {
-        since?: string;
-        severity?: SentinelSeverity;
-        sentinelId?: string;
-        agentId?: string;
-        limit?: number;
-    }): Promise<SentinelFinding[]>;
-    /**
-     * Drop expired findings. Returns the count removed.
-     */
-    pruneExpired(now?: Date): Promise<{
-        pruned: number;
-    }>;
-    private decode;
-}
-
 /**
  * Sanctuary v1.3 WP-V1.3-1 Sentinel Dispatcher.
  *

package/dist/index.d.ts

@@ -7129,6 +7129,72 @@ declare class ApprovalAggregator {
     private hydrate;
 }
 
+/**
+ * Sanctuary v1.3 WP-V1.3-1 Sentinel Finding Store.
+ *
+ * Encrypted at-rest persistence for sentinel findings. Sibling to the
+ * Upsilon-3 aggregator-store: same fortress-master-key-derived HKDF
+ * subkey shape, AAD-bound to the finding_id, retention-aware.
+ *
+ * Storage layout:
+ *   namespace: `_sentinel_findings`
+ *   key:       `finding.{finding_id}` (one record per finding)
+ *   payload:   AES-256-GCM ciphertext of the JSON-serialized record.
+ *   key:       `l2-sentinel-finding-v1` HKDF subkey of fortress master.
+ *   AAD:       UTF-8 bytes of `finding_id`.
+ *
+ * Multi-fortress isolation: HKDF subkey derives from the fortress
+ * master key. Two fortresses never produce identical encryption keys
+ * for identical finding_ids.
+ *
+ * Retention: 30 days default, mirroring the audit-log envelope and the
+ * aggregator payload store.
+ */
+
+interface SentinelFindingStoreOptions {
+    storage: StorageBackend;
+    masterKey: Uint8Array;
+    fortressId: string;
+    /** Operator-tunable retention window. Default 30 days. */
+    retentionDays?: number;
+    /** Wall-clock provider for deterministic tests. */
+    now?: () => Date;
+}
+declare class SentinelFindingStore {
+    private readonly storage;
+    private readonly encryptionKey;
+    private readonly fortressId;
+    private readonly retentionDays;
+    private readonly now;
+    constructor(opts: SentinelFindingStoreOptions);
+    /**
+     * Persist a finding. Truncates the operator-visible summary to
+     * SENTINEL_SUMMARY_MAX_CHARS so the dashboard render stays bounded.
+     * Returns the retention deadline so callers can audit it.
+     */
+    saveFinding(finding: SentinelFinding): Promise<string>;
+    /** Load a single finding by id, or null when absent / corrupted. */
+    loadFinding(findingId: string): Promise<SentinelFinding | null>;
+    /**
+     * List findings, newest first. Optional filters: since (ISO 8601),
+     * severity, sentinel_id, agent_id, limit. Default limit 100.
+     */
+    listFindings(opts?: {
+        since?: string;
+        severity?: SentinelSeverity;
+        sentinelId?: string;
+        agentId?: string;
+        limit?: number;
+    }): Promise<SentinelFinding[]>;
+    /**
+     * Drop expired findings. Returns the count removed.
+     */
+    pruneExpired(now?: Date): Promise<{
+        pruned: number;
+    }>;
+    private decode;
+}
+
 /**
  * Sanctuary v1.3 WP-V1.3-1 Sentinel Baseline Pack (Castle Layer 2 anchor)
  *
@@ -7166,6 +7232,22 @@ interface SentinelContext {
     substrateSelector?: SubstrateSelector;
     /** Wall-clock provider. Tests inject a deterministic clock. */
     now: () => Date;
+    /**
+     * Optional read view of the per-fortress sentinel finding store
+     * (Phi-1 surface). First-order sentinels (Phi-1/2/3/4) do not need
+     * this; the Phi-5 meta-sentinel reads it to detect patterns ACROSS
+     * other sentinels' findings (compound finding, fortress-wide count
+     * spikes, novel sentinel-ID combinations). The dispatcher attaches
+     * the store automatically on `subscribeSentinel`; tests can omit it
+     * when constructing a context literal for a first-order watcher.
+     *
+     * Multi-fortress isolation rides on the store's existing key shape:
+     * the store is constructed per-fortress from the fortress master
+     * key, so two fortresses' stores produce distinct ciphertext for
+     * identical finding-ids and one fortress's read cannot decode
+     * another fortress's findings.
+     */
+    findingStore?: SentinelFindingStore;
 }
 /**
  * One observation a sentinel produced. Persisted under the sentinel
@@ -7331,72 +7413,6 @@ declare class SentinelRegistry {
     unsubscribeAll(): Promise<void>;
 }
 
-/**
- * Sanctuary v1.3 WP-V1.3-1 Sentinel Finding Store.
- *
- * Encrypted at-rest persistence for sentinel findings. Sibling to the
- * Upsilon-3 aggregator-store: same fortress-master-key-derived HKDF
- * subkey shape, AAD-bound to the finding_id, retention-aware.
- *
- * Storage layout:
- *   namespace: `_sentinel_findings`
- *   key:       `finding.{finding_id}` (one record per finding)
- *   payload:   AES-256-GCM ciphertext of the JSON-serialized record.
- *   key:       `l2-sentinel-finding-v1` HKDF subkey of fortress master.
- *   AAD:       UTF-8 bytes of `finding_id`.
- *
- * Multi-fortress isolation: HKDF subkey derives from the fortress
- * master key. Two fortresses never produce identical encryption keys
- * for identical finding_ids.
- *
- * Retention: 30 days default, mirroring the audit-log envelope and the
- * aggregator payload store.
- */
-
-interface SentinelFindingStoreOptions {
-    storage: StorageBackend;
-    masterKey: Uint8Array;
-    fortressId: string;
-    /** Operator-tunable retention window. Default 30 days. */
-    retentionDays?: number;
-    /** Wall-clock provider for deterministic tests. */
-    now?: () => Date;
-}
-declare class SentinelFindingStore {
-    private readonly storage;
-    private readonly encryptionKey;
-    private readonly fortressId;
-    private readonly retentionDays;
-    private readonly now;
-    constructor(opts: SentinelFindingStoreOptions);
-    /**
-     * Persist a finding. Truncates the operator-visible summary to
-     * SENTINEL_SUMMARY_MAX_CHARS so the dashboard render stays bounded.
-     * Returns the retention deadline so callers can audit it.
-     */
-    saveFinding(finding: SentinelFinding): Promise<string>;
-    /** Load a single finding by id, or null when absent / corrupted. */
-    loadFinding(findingId: string): Promise<SentinelFinding | null>;
-    /**
-     * List findings, newest first. Optional filters: since (ISO 8601),
-     * severity, sentinel_id, agent_id, limit. Default limit 100.
-     */
-    listFindings(opts?: {
-        since?: string;
-        severity?: SentinelSeverity;
-        sentinelId?: string;
-        agentId?: string;
-        limit?: number;
-    }): Promise<SentinelFinding[]>;
-    /**
-     * Drop expired findings. Returns the count removed.
-     */
-    pruneExpired(now?: Date): Promise<{
-        pruned: number;
-    }>;
-    private decode;
-}
-
 /**
  * Sanctuary v1.3 WP-V1.3-1 Sentinel Dispatcher.
  *