@atrib/agent 0.2.22 → 0.3.0

package/README.md

@@ -1,26 +1,34 @@
 # `@atrib/agent`
 
-**Verifiable agent actions, client side. Outbound MCP tool calls carry atrib/W3C context, consume upstream signed records, record local gap nodes, and emit signed fallback transaction records when commerce closes. Works with every major MCP framework. Sits above every major agent payment protocol so commerce-closing evidence can join the same trace.**
+**Client-side middleware for Atrib's verifiable action layer. Outbound MCP tool calls carry atrib/W3C context, consume upstream signed records, record local gap nodes, and emit signed fallback transaction records when commerce closes. Works with major MCP framework surfaces. Sits above every major agent payment protocol so commerce-closing evidence can join the same trace.**
 
-`@atrib/agent` is the client-side half of the [atrib protocol](https://github.com/creatornader/atrib/blob/main/atrib-spec.md). It keeps outbound MCP calls in the atrib session lifecycle: context goes out, upstream atrib tokens come back in, unsigned hops become local gap nodes, and transaction-shaped responses can produce signed agent-side fallback records. Ordinary `tool_call` records are signed at the tool boundary by `@atrib/mcp`, `@atrib/mcp-wrap`, or an instrumented upstream server.
+`@atrib/agent` is the client-side half of the [atrib protocol](https://github.com/creatornader/atrib/blob/main/atrib-spec.md). It keeps outbound MCP calls in the atrib session lifecycle: context goes out, upstream atrib tokens come back in, unsigned hops become local gap nodes, and transaction-shaped responses can produce signed agent-side fallback records. That makes agent work easier to coordinate across calls, handoffs, and later verification. Ordinary `tool_call` records are signed at the tool boundary by `@atrib/mcp`, `@atrib/mcp-wrap`, or an instrumented upstream server.
 
 You set up one `atrib()` interceptor, plug it into your framework's adapter, and every outbound `tools/call` from that point on carries W3C trace context, an atrib chain token, and the full atrib session lifecycle. When a payment completes through a supported commerce protocol, the interceptor can consume an upstream atrib record or emit an agent-side fallback `transaction` record. When commerce never closes the chain, the substrate still serves recall, audit, and cross-agent provenance.
 
 Two coverage surfaces define what you get:
 
+Boundary: this package covers framework middleware and client-side call flow.
+Full host runtime integrations are a separate adapter family. Runtimes such as
+Claude Code, Codex, OpenClaw, Hermes, Cursor, Goose, and hosted agent systems
+own sessions, native tool hooks, approvals, subagents, checkpoints, telemetry,
+and run logs. Those integrations compose `@atrib/mcp-wrap`, host-specific proof
+code, `@atrib/openinference`, `@atrib/runtime-log`, `@atrib/verify`, and
+hook-class producers instead of turning `@atrib/agent` into the harness layer.
+
 ## Coverage Matrix 1: MCP Framework Adapters
 
-| Framework                                  | Package                          | Adapter helper                                                                                                                                                    | Integration shape                                                                                 | Status      |
-| ------------------------------------------ | -------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------- | ----------- |
-| **Raw `@modelcontextprotocol/sdk` Client** | `@modelcontextprotocol/sdk`      | `wrapMcpClient(client, interceptor, { serverUrl? })`                                                                                                              | Proxy-based wrapper, returns new client                                                           | ✅ Shipped  |
-| **Claude Agent SDK**                       | `@anthropic-ai/claude-agent-sdk` | **Case A (in-process tools):** zero code. the SDK's `createSdkMcpServer` returns a real `McpServer` that `@atrib/mcp` wraps directly                             | Reuses `@atrib/mcp`'s `atrib()` middleware on the server side                                     | ✅ Shipped  |
-|                                            |                                  | **Case B (third-party servers):** `createAtribProxy({ upstream, interceptor })` from `@atrib/mcp`. in-process surrogate `McpServer` that forwards to an upstream | Proxy McpServer between SDK and upstream transport                                                | ✅ Shipped  |
-| **Cloudflare Agents**                      | `agents`                         | `attributeCloudflareAgentMcp(agent, { interceptor, serverUrls })`                                                                                                 | Walks `agent.mcp.mcpConnections`, replaces `.client` via `wrapMcpClient`                          | ✅ Shipped  |
-| **Vercel AI SDK MCP**                      | `@ai-sdk/mcp`                    | `attributeVercelAiSdkMcp(mcpClient, { interceptor, serverUrl })`                                                                                                  | Monkey-patches `mcpClient.request()` (custom JSON-RPC, not SDK Client)                            | ✅ Shipped  |
-| **LangChain JS MCP adapters**              | `@langchain/mcp-adapters`        | **High-level:** `attributeLangchainMcp(multiClient, { interceptor, serverUrls })`                                                                                 | Walks `multiClient.config.mcpServers`, monkey-patches `callTool` + `fork` on each internal Client | ✅ Shipped  |
-|                                            |                                  | **Low-level:** `wrapMcpClient(rawClient, interceptor)` passed to `loadMcpTools(name, wrapped)`                                                                    | Reuses raw-SDK wrapper path                                                                       | ✅ Shipped  |
-| **OpenAI Agents SDK**                      | `@openai/agents`                 | _(planned. custom transport architecture, not `@modelcontextprotocol/sdk`)_                                                                                       | Planned: subclass `MCPServerSSE` / `MCPServerStdio` / `MCPServerStreamableHttp`                   | ⏳ Planned  |
-| **Mastra**                                 | `@mastra/mcp`                    | _(planned. receipt proof covers `MCPClient` + `MCPServer` over stdio)_                                                                                            | Adapter pending                                                                                  | 🧪 Proof    |
+| Framework                                  | Package                          | Adapter helper                                                                                                                                                   | Integration shape                                                                                 | Status     |
+| ------------------------------------------ | -------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------- | ---------- |
+| **Raw `@modelcontextprotocol/sdk` Client** | `@modelcontextprotocol/sdk`      | `wrapMcpClient(client, interceptor, { serverUrl? })`                                                                                                             | Proxy-based wrapper, returns new client                                                           | ✅ Shipped |
+| **Claude Agent SDK**                       | `@anthropic-ai/claude-agent-sdk` | **Case A (in-process tools):** zero code. the SDK's `createSdkMcpServer` returns a real `McpServer` that `@atrib/mcp` wraps directly                             | Reuses `@atrib/mcp`'s `atrib()` middleware on the server side                                     | ✅ Shipped |
+|                                            |                                  | **Case B (third-party servers):** `createAtribProxy({ upstream, interceptor })` from `@atrib/mcp`. in-process surrogate `McpServer` that forwards to an upstream | Proxy McpServer between SDK and upstream transport                                                | ✅ Shipped |
+| **Cloudflare Agents**                      | `agents`                         | `attributeCloudflareAgentMcp(agent, { interceptor, serverUrls })`                                                                                                | Walks `agent.mcp.mcpConnections`, replaces `.client` via `wrapMcpClient`                          | ✅ Shipped |
+| **Vercel AI SDK MCP**                      | `@ai-sdk/mcp`                    | `attributeVercelAiSdkMcp(mcpClient, { interceptor, serverUrl })`                                                                                                 | Monkey-patches `mcpClient.request()` (custom JSON-RPC, not SDK Client)                            | ✅ Shipped |
+| **LangChain JS MCP adapters**              | `@langchain/mcp-adapters`        | **High-level:** `attributeLangchainMcp(multiClient, { interceptor, serverUrls })`                                                                                | Walks `multiClient.config.mcpServers`, monkey-patches `callTool` + `fork` on each internal Client | ✅ Shipped |
+|                                            |                                  | **Low-level:** `wrapMcpClient(rawClient, interceptor)` passed to `loadMcpTools(name, wrapped)`                                                                   | Reuses raw-SDK wrapper path                                                                       | ✅ Shipped |
+| **OpenAI Agents SDK**                      | `@openai/agents`                 | _(planned. custom transport architecture, not `@modelcontextprotocol/sdk`)_                                                                                      | Planned: subclass `MCPServerSSE` / `MCPServerStdio` / `MCPServerStreamableHttp`                   | ⏳ Planned |
+| **Mastra**                                 | `@mastra/mcp`                    | _(planned. receipt proof covers `MCPClient` + `MCPServer` over stdio)_                                                                                           | Adapter pending                                                                                   | 🧪 Proof   |
 
 **The pattern across every row is identical:** one `atrib()` interceptor object, one adapter helper call, zero changes to your existing tool invocation code. The name of the helper varies because each host framework exposes a structurally different integration surface, but the `ToolCallInterceptor` type, the options shape, and the observable behavior are uniform.
 
@@ -30,14 +38,14 @@ Two coverage surfaces define what you get:
 
 All detection logic lives in `packages/agent/src/transaction.ts` and runs against unit tests for each protocol's published spec.
 
-| Protocol                              | Sponsor / origin                                            | Detection signal                                                                                                              | Spec reference                       |
-| ------------------------------------- | ----------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------- | ------------------------------------ |
-| **ACP**. Agentic Commerce Protocol   | Stripe / OpenAI; `github.com/agentic-commerce-protocol`    | `status === "completed"` + embedded `order` on `/checkout_sessions/{id}/complete`, or `order_create` / `order_update` webhook | [§1.7.1](https://github.com/creatornader/atrib/blob/main/atrib-spec.md#171-acp-agentic-commerce-protocol)                               |
-| **UCP**. Universal Commerce Protocol | `github.com/universal-commerce-protocol/ucp`                | Same shape as ACP + top-level `ucp.version` envelope                                                                          | [§1.7.2](https://github.com/creatornader/atrib/blob/main/atrib-spec.md#172-ucp-universal-commerce-protocol)                               |
-| **x402**                              | Coinbase. `github.com/coinbase/x402`                       | HTTP `PAYMENT-RESPONSE` header (v2) or legacy `X-PAYMENT-RESPONSE` (v1) on the 200 response                                   | [§1.7.3](https://github.com/creatornader/atrib/blob/main/atrib-spec.md#173-x402)                               |
-| **MPP**. Machine Payments Protocol   | Tempo Labs / Stripe; IETF `draft-ryan-httpauth-payment-01` | HTTP `Payment-Receipt` header on 200 success response                                                                         | [§1.7.4](https://github.com/creatornader/atrib/blob/main/atrib-spec.md#174-mpp-machine-payments-protocol)                               |
-| **AP2**. Agentic Payment Protocol    | Google; `github.com/google-agentic-commerce/AP2`           | Successful AP2 `PaymentReceipt` or `CheckoutReceipt`; v0.1 `ap2.mandates.PaymentMandate` remains a fallback                  | [§1.7.5](https://github.com/creatornader/atrib/blob/main/atrib-spec.md#175-ap2-and-a2a-x402)                               |
-| **a2a-x402**                          | Google. `github.com/google-agentic-commerce/a2a-x402`      | A2A task `status.message.metadata["x402.payment.status"] === "payment-completed"` + `receipts[].success === true`             | [§1.7.5](https://github.com/creatornader/atrib/blob/main/atrib-spec.md#175-ap2-and-a2a-x402) (reported as AP2 crypto path) |
+| Protocol                             | Sponsor / origin                                           | Detection signal                                                                                                              | Spec reference                                                                                                             |
+| ------------------------------------ | ---------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------- |
+| **ACP**. Agentic Commerce Protocol   | Stripe / OpenAI; `github.com/agentic-commerce-protocol`    | `status === "completed"` + embedded `order` on `/checkout_sessions/{id}/complete`, or `order_create` / `order_update` webhook | [§1.7.1](https://github.com/creatornader/atrib/blob/main/atrib-spec.md#171-acp-agentic-commerce-protocol)                  |
+| **UCP**. Universal Commerce Protocol | `github.com/universal-commerce-protocol/ucp`               | Same shape as ACP + top-level `ucp.version` envelope                                                                          | [§1.7.2](https://github.com/creatornader/atrib/blob/main/atrib-spec.md#172-ucp-universal-commerce-protocol)                |
+| **x402**                             | Coinbase. `github.com/coinbase/x402`                       | HTTP `PAYMENT-RESPONSE` header (v2) or legacy `X-PAYMENT-RESPONSE` (v1) on the 200 response                                   | [§1.7.3](https://github.com/creatornader/atrib/blob/main/atrib-spec.md#173-x402)                                           |
+| **MPP**. Machine Payments Protocol   | Tempo Labs / Stripe; IETF `draft-ryan-httpauth-payment-01` | HTTP `Payment-Receipt` header on 200 success response                                                                         | [§1.7.4](https://github.com/creatornader/atrib/blob/main/atrib-spec.md#174-mpp-machine-payments-protocol)                  |
+| **AP2**. Agentic Payment Protocol    | Google; `github.com/google-agentic-commerce/AP2`           | Successful AP2 `PaymentReceipt` or `CheckoutReceipt`; v0.1 `ap2.mandates.PaymentMandate` remains a fallback                   | [§1.7.5](https://github.com/creatornader/atrib/blob/main/atrib-spec.md#175-ap2-and-a2a-x402)                               |
+| **a2a-x402**                         | Google. `github.com/google-agentic-commerce/a2a-x402`      | A2A task `status.message.metadata["x402.payment.status"] === "payment-completed"` + `receipts[].success === true`             | [§1.7.5](https://github.com/creatornader/atrib/blob/main/atrib-spec.md#175-ap2-and-a2a-x402) (reported as AP2 crypto path) |
 
 **The linking mechanism is the same across all six:** the session `context_id` (16-byte anchor, equal to the W3C OTel trace-id by default) travels with the outbound payment request; via `X-atrib-Context` HTTP header for protocols that don't expose a free-form metadata field, or via `params._meta.atrib` for any payment protocol running over MCP transport. When the merchant's side sees the payment-completed signal, atrib writes a transaction record with that `context_id`, and the attribution graph can reconstruct the full chain from contributing tool calls → transaction → settlement.
 
@@ -45,7 +53,7 @@ All detection logic lives in `packages/agent/src/transaction.ts` and runs agains
 
 ### What each detector actually looks for on the wire
 
-These are the exact shapes the production `detectTransaction()` function in [`packages/agent/src/transaction.ts`](https://github.com/creatornader/atrib/blob/main/packages/agent/src/transaction.ts) matches against. Every shape below is covered by a unit test against a real spec fixture in [`packages/agent/test/fixtures/`](https://github.com/creatornader/atrib/blob/main/packages/agent/test/fixtures/), the customer-facing question "what does atrib actually detect" has a one-paragraph answer per protocol.
+These are the exact shapes the production `detectTransaction()` function in [`packages/agent/src/transaction.ts`](https://github.com/creatornader/atrib/blob/main/packages/agent/src/transaction.ts) matches against. Every shape below is covered by a unit test against a real spec fixture in [`packages/agent/test/fixtures/`](https://github.com/creatornader/atrib/blob/main/packages/agent/test/fixtures/), and the verifier question "what does atrib actually detect" has a one-paragraph answer per protocol.
 
 #### ACP: Stripe / OpenAI Agentic Commerce Protocol
 
@@ -333,18 +341,18 @@ The entire atrib integration is wrapped in defensive error handling at every ada
 
 ## Spec references
 
-| Spec section | What it defines                                              |
-| ------------ | ------------------------------------------------------------ |
-| [§1.3](https://github.com/creatornader/atrib/blob/main/atrib-spec.md#13-canonical-serialization)         | JCS canonical serialization of records                       |
-| [§1.4](https://github.com/creatornader/atrib/blob/main/atrib-spec.md#14-signing-and-verification)         | Ed25519 signing and verification                             |
-| [§1.5](https://github.com/creatornader/atrib/blob/main/atrib-spec.md#15-context-propagation)         | Context propagation via `params._meta` and W3C trace context |
-| [§1.7](https://github.com/creatornader/atrib/blob/main/atrib-spec.md#17-transaction-event-hooks)         | Transaction event hooks for all 6 payment protocols          |
-| [§2](https://github.com/creatornader/atrib/blob/main/atrib-spec.md#2-merkle-log-protocol)           | Merkle log protocol (Tessera-backed, tlog-tiles spec)        |
-| [§3](https://github.com/creatornader/atrib/blob/main/atrib-spec.md#3-graph-query-interface)           | Graph query interface (fact layer only)                      |
-| [§4](https://github.com/creatornader/atrib/blob/main/atrib-spec.md#4-attribution-policy-format)           | Policy format (merchant-side value distribution)             |
-| [§5.3](https://github.com/creatornader/atrib/blob/main/atrib-spec.md#53-atribmcp-mcp-server-middleware)         | Agent-side middleware behavior                               |
-| [§5.4](https://github.com/creatornader/atrib/blob/main/atrib-spec.md#54-atribagent-agent-middleware)         | Path 1 / Path 2 transaction detection                        |
-| [§5.8](https://github.com/creatornader/atrib/blob/main/atrib-spec.md#58-degradation-contract)         | Degradation contract; silent failure never breaks the host  |
+| Spec section                                                                                            | What it defines                                              |
+| ------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------ |
+| [§1.3](https://github.com/creatornader/atrib/blob/main/atrib-spec.md#13-canonical-serialization)        | JCS canonical serialization of records                       |
+| [§1.4](https://github.com/creatornader/atrib/blob/main/atrib-spec.md#14-signing-and-verification)       | Ed25519 signing and verification                             |
+| [§1.5](https://github.com/creatornader/atrib/blob/main/atrib-spec.md#15-context-propagation)            | Context propagation via `params._meta` and W3C trace context |
+| [§1.7](https://github.com/creatornader/atrib/blob/main/atrib-spec.md#17-transaction-event-hooks)        | Transaction event hooks for all 6 payment protocols          |
+| [§2](https://github.com/creatornader/atrib/blob/main/atrib-spec.md#2-merkle-log-protocol)               | Merkle log protocol (Tessera-backed, tlog-tiles spec)        |
+| [§3](https://github.com/creatornader/atrib/blob/main/atrib-spec.md#3-graph-query-interface)             | Graph query interface (fact layer only)                      |
+| [§4](https://github.com/creatornader/atrib/blob/main/atrib-spec.md#4-attribution-policy-format)         | Policy format (merchant-side value distribution)             |
+| [§5.3](https://github.com/creatornader/atrib/blob/main/atrib-spec.md#53-atribmcp-mcp-server-middleware) | Agent-side middleware behavior                               |
+| [§5.4](https://github.com/creatornader/atrib/blob/main/atrib-spec.md#54-atribagent-agent-middleware)    | Path 1 / Path 2 transaction detection                        |
+| [§5.8](https://github.com/creatornader/atrib/blob/main/atrib-spec.md#58-degradation-contract)           | Degradation contract; silent failure never breaks the host   |
 
 The full protocol spec is at [`atrib-spec.md`](https://github.com/creatornader/atrib/blob/main/atrib-spec.md).
 

package/dist/extension-attribution.d.ts

@@ -0,0 +1,76 @@
+import type { AtribRecord } from '@atrib/mcp';
+export declare const ATTRIBUTION_EXTENSION_ID = "dev.atrib/attribution";
+export declare const ATTRIBUTION_EXTENSION_VERSION = "0.1";
+export declare const MCP_CLIENT_CAPABILITIES_META_KEY = "io.modelcontextprotocol/clientCapabilities";
+/** Receipt verbosities a client can request (extension spec §4.2 `accept`). */
+export declare const ATTRIBUTION_ACCEPT_VALUES: readonly ["token", "record"];
+export type AttributionAcceptValue = (typeof ATTRIBUTION_ACCEPT_VALUES)[number];
+/** The v0.1 receipt object (extension spec §6.2). */
+export interface AttributionReceipt {
+    record_hash: string;
+    creator_key: string;
+    context_id: string;
+    event_type: string;
+    chain_root: string;
+    /** Queue status at response time — a claim of local signing, never an awaited proof. */
+    log_submission: 'queued' | 'submitted' | 'disabled' | 'failed';
+}
+/** The parsed, consistency-checked result block. */
+export interface AttributionResultBlock {
+    /** Propagation token of the record named by the receipt. */
+    token: string;
+    receipt: AttributionReceipt;
+    /** Full signed record, present only when the server honored `accept: ["record"]`. */
+    record?: AtribRecord;
+}
+/** Options for {@link declareAttributionExtension}. */
+export interface DeclareAttributionExtensionOptions {
+    /**
+     * Receipt verbosity negotiation (extension spec §4.2). Defaults to
+     * `['token']`. Add `'record'` to request the full signed record body in
+     * receipts for immediate signature re-verification.
+     */
+    accept?: readonly AttributionAcceptValue[];
+    /**
+     * Optional §1.5.2 propagation token to carry in the prefixed request
+     * block (extension spec §5). Malformed tokens are dropped with a warning.
+     */
+    token?: string;
+    /**
+     * Optional explicit 32-lowercase-hex context_id to carry in the prefixed
+     * request block. Malformed values are dropped with a warning.
+     */
+    contextId?: string;
+}
+/**
+ * Return a NEW `_meta` object that declares `dev.atrib/attribution` on this
+ * request (per-request client capabilities, stateless MCP model) and — when
+ * `token` / `contextId` are supplied — carries the prefixed request block.
+ *
+ * Non-destructive: existing `_meta` keys, existing `clientCapabilities`
+ * fields, and other declared extensions are preserved; only this extension's
+ * settings entry (and the prefixed block, when requested) are (re)written,
+ * which also makes the helper idempotent. The caller's object is never
+ * mutated. §5.8: any internal failure returns the caller's `_meta` shape
+ * unchanged (a shallow copy) with an `atrib:` warning — never a throw.
+ */
+export declare function declareAttributionExtension(meta?: Record<string, unknown>, options?: DeclareAttributionExtensionOptions): Record<string, unknown>;
+/**
+ * Parse the gated `dev.atrib/attribution` block from a tool result's
+ * `_meta` (extension spec §6). Returns the typed, consistency-checked block,
+ * or `undefined` when:
+ *
+ *   - the block is absent (server pre-extension, or client undeclared) —
+ *     silent, this is the normal legacy path;
+ *   - the block is structurally malformed or internally inconsistent —
+ *     `atrib:`-logged and DISCARDED per extension spec §6.2 ("a consumer
+ *     that detects an internal inconsistency MUST treat the receipt as
+ *     invalid and discard it").
+ *
+ * §5.8: never throws; receipt invalidity never invalidates the tool result.
+ * A valid return is a *claim of local signing*, not a proof: callers wanting
+ * Tier-3 assurance verify the attached record's signature (`verifyRecord`
+ * from @atrib/mcp) and log inclusion independently.
+ */
+export declare function parseAttributionReceipt(resultMeta: unknown): AttributionResultBlock | undefined;
+//# sourceMappingURL=extension-attribution.d.ts.map

package/dist/extension-attribution.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"extension-attribution.d.ts","sourceRoot":"","sources":["../src/extension-attribution.ts"],"names":[],"mappings":"AAiCA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAK7C,eAAO,MAAM,wBAAwB,0BAA0B,CAAA;AAC/D,eAAO,MAAM,6BAA6B,QAAQ,CAAA;AAClD,eAAO,MAAM,gCAAgC,+CAA+C,CAAA;AAE5F,+EAA+E;AAC/E,eAAO,MAAM,yBAAyB,8BAA+B,CAAA;AACrE,MAAM,MAAM,sBAAsB,GAAG,CAAC,OAAO,yBAAyB,CAAC,CAAC,MAAM,CAAC,CAAA;AAU/E,qDAAqD;AACrD,MAAM,WAAW,kBAAkB;IACjC,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,EAAE,MAAM,CAAA;IACnB,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;IAClB,wFAAwF;IACxF,cAAc,EAAE,QAAQ,GAAG,WAAW,GAAG,UAAU,GAAG,QAAQ,CAAA;CAC/D;AAED,oDAAoD;AACpD,MAAM,WAAW,sBAAsB;IACrC,4DAA4D;IAC5D,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,kBAAkB,CAAA;IAC3B,qFAAqF;IACrF,MAAM,CAAC,EAAE,WAAW,CAAA;CACrB;AAED,uDAAuD;AACvD,MAAM,WAAW,kCAAkC;IACjD;;;;OAIG;IACH,MAAM,CAAC,EAAE,SAAS,sBAAsB,EAAE,CAAA;IAC1C;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,CAAA;IACd;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAMD;;;;;;;;;;;GAWG;AACH,wBAAgB,2BAA2B,CACzC,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,EAClC,OAAO,GAAE,kCAAuC,GAC/C,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAmDzB;AA4CD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,uBAAuB,CACrC,UAAU,EAAE,OAAO,GAClB,sBAAsB,GAAG,SAAS,CAkBpC"}

package/dist/extension-attribution.js

@@ -0,0 +1,199 @@
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * `dev.atrib/attribution` MCP extension v0.1 — client-side helpers (D141 /
+ * spec §1.5.4.1; extension spec docs/extensions/dev.atrib-attribution/v0.1.md).
+ *
+ * Two surfaces, both opt-in and §5.8-shaped:
+ *
+ *   - {@link declareAttributionExtension}: return a NEW outbound `_meta`
+ *     that declares the extension per-request under the core-reserved
+ *     `io.modelcontextprotocol/clientCapabilities` key (and optionally
+ *     carries the prefixed request block: propagation token + explicit
+ *     context_id). Never mutates the caller's object; idempotent.
+ *   - {@link parseAttributionReceipt}: read the gated result block from
+ *     `result._meta`, validate its structure and internal consistency per
+ *     extension spec §6.2, and return a typed receipt — or `undefined` with
+ *     an `atrib:`-prefixed warning when the block is absent, malformed, or
+ *     inconsistent. Receipt invalidity never invalidates the tool result.
+ *
+ * Clients using these helpers keep writing the legacy carriers
+ * (`buildOutboundMeta` already emits `atrib`, `tracestate`, `X-Atrib-Chain`)
+ * so non-adopting servers keep chaining: the extension is upside, not a
+ * dependency.
+ */
+import { base64urlEncode, canonicalRecord, decodeToken, encodeToken, hexEncode, sha256, } from '@atrib/mcp';
+// Protocol-frozen strings, mirroring @atrib/mcp's extension-attribution
+// module (the identifier freezes on publication per extension spec §3;
+// breaking changes require a new identifier).
+export const ATTRIBUTION_EXTENSION_ID = 'dev.atrib/attribution';
+export const ATTRIBUTION_EXTENSION_VERSION = '0.1';
+export const MCP_CLIENT_CAPABILITIES_META_KEY = 'io.modelcontextprotocol/clientCapabilities';
+/** Receipt verbosities a client can request (extension spec §4.2 `accept`). */
+export const ATTRIBUTION_ACCEPT_VALUES = ['token', 'record'];
+const LOG_SUBMISSION_STATUSES = new Set([
+    'queued',
+    'submitted',
+    'disabled',
+    'failed',
+]);
+const HEX32 = /^[0-9a-f]{32}$/;
+function isPlainObject(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+/**
+ * Return a NEW `_meta` object that declares `dev.atrib/attribution` on this
+ * request (per-request client capabilities, stateless MCP model) and — when
+ * `token` / `contextId` are supplied — carries the prefixed request block.
+ *
+ * Non-destructive: existing `_meta` keys, existing `clientCapabilities`
+ * fields, and other declared extensions are preserved; only this extension's
+ * settings entry (and the prefixed block, when requested) are (re)written,
+ * which also makes the helper idempotent. The caller's object is never
+ * mutated. §5.8: any internal failure returns the caller's `_meta` shape
+ * unchanged (a shallow copy) with an `atrib:` warning — never a throw.
+ */
+export function declareAttributionExtension(meta = {}, options = {}) {
+    const out = { ...meta };
+    try {
+        // Settings object per extension spec §4.2. Unknown accept values would
+        // be ignored server-side; we only ever emit recognized ones.
+        const accept = (options.accept ?? ['token']).filter((v) => ATTRIBUTION_ACCEPT_VALUES.includes(v));
+        const settings = {
+            version: ATTRIBUTION_EXTENSION_VERSION,
+            accept: accept.length > 0 ? [...new Set(accept)] : ['token'],
+        };
+        const existingCaps = out[MCP_CLIENT_CAPABILITIES_META_KEY];
+        const caps = isPlainObject(existingCaps) ? { ...existingCaps } : {};
+        const existingExtensions = caps.extensions;
+        const extensions = isPlainObject(existingExtensions)
+            ? { ...existingExtensions }
+            : {};
+        extensions[ATTRIBUTION_EXTENSION_ID] = settings;
+        caps.extensions = extensions;
+        out[MCP_CLIENT_CAPABILITIES_META_KEY] = caps;
+        // Prefixed request block (extension spec §5): exactly two fields in
+        // v0.1, both optional; malformed values are dropped, never thrown.
+        const block = {};
+        if (options.token !== undefined) {
+            if (typeof options.token === 'string' && decodeToken(options.token) !== null) {
+                block.token = options.token;
+            }
+            else {
+                console.warn('atrib: malformed propagation token, omitting from extension block');
+            }
+        }
+        if (options.contextId !== undefined) {
+            if (typeof options.contextId === 'string' && HEX32.test(options.contextId)) {
+                block.context_id = options.contextId;
+            }
+            else {
+                console.warn('atrib: malformed context_id, omitting from extension block');
+            }
+        }
+        if (Object.keys(block).length > 0) {
+            const existingBlock = out[ATTRIBUTION_EXTENSION_ID];
+            out[ATTRIBUTION_EXTENSION_ID] = isPlainObject(existingBlock)
+                ? { ...existingBlock, ...block }
+                : block;
+        }
+        return out;
+    }
+    catch (err) {
+        console.warn('atrib: declareAttributionExtension failed, passing meta through', err);
+        return { ...meta };
+    }
+}
+function isStructurallyReceiptBlock(block) {
+    if (!isPlainObject(block))
+        return false;
+    if (typeof block.token !== 'string')
+        return false;
+    const receipt = block.receipt;
+    if (!isPlainObject(receipt))
+        return false;
+    for (const field of [
+        'record_hash',
+        'creator_key',
+        'context_id',
+        'event_type',
+        'chain_root',
+        'log_submission',
+    ]) {
+        if (typeof receipt[field] !== 'string')
+            return false;
+    }
+    if (block.record !== undefined && !isPlainObject(block.record))
+        return false;
+    return true;
+}
+/**
+ * Internal-consistency check per extension spec §6.2: the token,
+ * `record_hash`, and `creator_key` must agree with each other and — when
+ * the full record body is attached — recompute from the record's canonical
+ * bytes. Mirrors `verifyAttributionReceipt` in @atrib/mcp.
+ */
+function receiptIsConsistent(block) {
+    const decoded = decodeToken(block.token);
+    if (!decoded)
+        return false;
+    if (block.receipt.record_hash !== `sha256:${hexEncode(decoded.recordHash)}`)
+        return false;
+    if (block.receipt.creator_key !== base64urlEncode(decoded.creatorKey))
+        return false;
+    if (!LOG_SUBMISSION_STATUSES.has(block.receipt.log_submission))
+        return false;
+    if (block.record) {
+        if (block.token !== encodeToken(block.record))
+            return false;
+        const recordHashHex = hexEncode(sha256(canonicalRecord(block.record)));
+        if (block.receipt.record_hash !== `sha256:${recordHashHex}`)
+            return false;
+        if (block.receipt.creator_key !== block.record.creator_key)
+            return false;
+        if (block.receipt.context_id !== block.record.context_id)
+            return false;
+        if (block.receipt.chain_root !== block.record.chain_root)
+            return false;
+    }
+    return true;
+}
+/**
+ * Parse the gated `dev.atrib/attribution` block from a tool result's
+ * `_meta` (extension spec §6). Returns the typed, consistency-checked block,
+ * or `undefined` when:
+ *
+ *   - the block is absent (server pre-extension, or client undeclared) —
+ *     silent, this is the normal legacy path;
+ *   - the block is structurally malformed or internally inconsistent —
+ *     `atrib:`-logged and DISCARDED per extension spec §6.2 ("a consumer
+ *     that detects an internal inconsistency MUST treat the receipt as
+ *     invalid and discard it").
+ *
+ * §5.8: never throws; receipt invalidity never invalidates the tool result.
+ * A valid return is a *claim of local signing*, not a proof: callers wanting
+ * Tier-3 assurance verify the attached record's signature (`verifyRecord`
+ * from @atrib/mcp) and log inclusion independently.
+ */
+export function parseAttributionReceipt(resultMeta) {
+    try {
+        if (!isPlainObject(resultMeta))
+            return undefined;
+        if (!(ATTRIBUTION_EXTENSION_ID in resultMeta))
+            return undefined;
+        const block = resultMeta[ATTRIBUTION_EXTENSION_ID];
+        if (!isStructurallyReceiptBlock(block)) {
+            console.warn('atrib: malformed dev.atrib/attribution receipt block, discarding');
+            return undefined;
+        }
+        if (!receiptIsConsistent(block)) {
+            console.warn('atrib: inconsistent dev.atrib/attribution receipt, discarding');
+            return undefined;
+        }
+        return block;
+    }
+    catch (err) {
+        console.warn('atrib: failed to parse dev.atrib/attribution receipt, discarding', err);
+        return undefined;
+    }
+}
+//# sourceMappingURL=extension-attribution.js.map

package/dist/extension-attribution.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"extension-attribution.js","sourceRoot":"","sources":["../src/extension-attribution.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAEtC;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EACL,eAAe,EACf,eAAe,EACf,WAAW,EACX,WAAW,EACX,SAAS,EACT,MAAM,GACP,MAAM,YAAY,CAAA;AAGnB,wEAAwE;AACxE,uEAAuE;AACvE,8CAA8C;AAC9C,MAAM,CAAC,MAAM,wBAAwB,GAAG,uBAAuB,CAAA;AAC/D,MAAM,CAAC,MAAM,6BAA6B,GAAG,KAAK,CAAA;AAClD,MAAM,CAAC,MAAM,gCAAgC,GAAG,4CAA4C,CAAA;AAE5F,+EAA+E;AAC/E,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAU,CAAA;AAGrE,MAAM,uBAAuB,GAAwB,IAAI,GAAG,CAAC;IAC3D,QAAQ;IACR,WAAW;IACX,UAAU;IACV,QAAQ;CACT,CAAC,CAAA;AACF,MAAM,KAAK,GAAG,gBAAgB,CAAA;AA0C9B,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;AAC7E,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,2BAA2B,CACzC,OAAgC,EAAE,EAClC,UAA8C,EAAE;IAEhD,MAAM,GAAG,GAA4B,EAAE,GAAG,IAAI,EAAE,CAAA;IAChD,IAAI,CAAC;QACH,uEAAuE;QACvE,6DAA6D;QAC7D,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CACvD,yBAA+C,CAAC,QAAQ,CAAC,CAAC,CAAC,CAC7D,CAAA;QACD,MAAM,QAAQ,GAA4B;YACxC,OAAO,EAAE,6BAA6B;YACtC,MAAM,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;SAC7D,CAAA;QAED,MAAM,YAAY,GAAG,GAAG,CAAC,gCAAgC,CAAC,CAAA;QAC1D,MAAM,IAAI,GAA4B,aAAa,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;QAC5F,MAAM,kBAAkB,GAAG,IAAI,CAAC,UAAU,CAAA;QAC1C,MAAM,UAAU,GAA4B,aAAa,CAAC,kBAAkB,CAAC;YAC3E,CAAC,CAAC,EAAE,GAAG,kBAAkB,EAAE;YAC3B,CAAC,CAAC,EAAE,CAAA;QACN,UAAU,CAAC,wBAAwB,CAAC,GAAG,QAAQ,CAAA;QAC/C,IAAI,CAAC,UAAU,GAAG,UAAU,CAAA;QAC5B,GAAG,CAAC,gCAAgC,CAAC,GAAG,IAAI,CAAA;QAE5C,oEAAoE;QACpE,mEAAmE;QACnE,MAAM,KAAK,GAA4B,EAAE,CAAA;QACzC,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAChC,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,IAAI,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC7E,KAAK,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAA;YAC7B,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,IAAI,CAAC,mEAAmE,CAAC,CAAA;YACnF,CAAC;QACH,CAAC;QACD,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACpC,IAAI,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC3E,KAAK,CAAC,UAAU,GAAG,OAAO,CAAC,SAAS,CAAA;YACtC,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAA;YAC5E,CAAC;QACH,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClC,MAAM,aAAa,GAAG,GAAG,CAAC,wBAAwB,CAAC,CAAA;YACnD,GAAG,CAAC,wBAAwB,CAAC,GAAG,aAAa,CAAC,aAAa,CAAC;gBAC1D,CAAC,CAAC,EAAE,GAAG,aAAa,EAAE,GAAG,KAAK,EAAE;gBAChC,CAAC,CAAC,KAAK,CAAA;QACX,CAAC;QACD,OAAO,GAAG,CAAA;IACZ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CAAC,iEAAiE,EAAE,GAAG,CAAC,CAAA;QACpF,OAAO,EAAE,GAAG,IAAI,EAAE,CAAA;IACpB,CAAC;AACH,CAAC;AAED,SAAS,0BAA0B,CAAC,KAAc;IAChD,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IACvC,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IACjD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAA;IAC7B,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAA;IACzC,KAAK,MAAM,KAAK,IAAI;QAClB,aAAa;QACb,aAAa;QACb,YAAY;QACZ,YAAY;QACZ,YAAY;QACZ,gBAAgB;KACjB,EAAE,CAAC;QACF,IAAI,OAAO,OAAO,CAAC,KAAK,CAAC,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAA;IACtD,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAA;IAC5E,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;GAKG;AACH,SAAS,mBAAmB,CAAC,KAA6B;IACxD,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IACxC,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAA;IAC1B,IAAI,KAAK,CAAC,OAAO,CAAC,WAAW,KAAK,UAAU,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE;QAAE,OAAO,KAAK,CAAA;IACzF,IAAI,KAAK,CAAC,OAAO,CAAC,WAAW,KAAK,eAAe,CAAC,OAAO,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAA;IACnF,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC;QAAE,OAAO,KAAK,CAAA;IAC5E,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjB,IAAI,KAAK,CAAC,KAAK,KAAK,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC;YAAE,OAAO,KAAK,CAAA;QAC3D,MAAM,aAAa,GAAG,SAAS,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;QACtE,IAAI,KAAK,CAAC,OAAO,CAAC,WAAW,KAAK,UAAU,aAAa,EAAE;YAAE,OAAO,KAAK,CAAA;QACzE,IAAI,KAAK,CAAC,OAAO,CAAC,WAAW,KAAK,KAAK,CAAC,MAAM,CAAC,WAAW;YAAE,OAAO,KAAK,CAAA;QACxE,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,KAAK,KAAK,CAAC,MAAM,CAAC,UAAU;YAAE,OAAO,KAAK,CAAA;QACtE,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,KAAK,KAAK,CAAC,MAAM,CAAC,UAAU;YAAE,OAAO,KAAK,CAAA;IACxE,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,uBAAuB,CACrC,UAAmB;IAEnB,IAAI,CAAC;QACH,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC;YAAE,OAAO,SAAS,CAAA;QAChD,IAAI,CAAC,CAAC,wBAAwB,IAAI,UAAU,CAAC;YAAE,OAAO,SAAS,CAAA;QAC/D,MAAM,KAAK,GAAG,UAAU,CAAC,wBAAwB,CAAC,CAAA;QAClD,IAAI,CAAC,0BAA0B,CAAC,KAAK,CAAC,EAAE,CAAC;YACvC,OAAO,CAAC,IAAI,CAAC,kEAAkE,CAAC,CAAA;YAChF,OAAO,SAAS,CAAA;QAClB,CAAC;QACD,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC;YAChC,OAAO,CAAC,IAAI,CAAC,+DAA+D,CAAC,CAAA;YAC7E,OAAO,SAAS,CAAA;QAClB,CAAC;QACD,OAAO,KAAK,CAAA;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CAAC,kEAAkE,EAAE,GAAG,CAAC,CAAA;QACrF,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC"}

package/dist/index.d.ts

@@ -15,4 +15,6 @@ export { attributeVercelAiSdkMcp } from './adapters/vercel-ai-sdk-mcp.js';
 export type { VercelAiSdkMcpClientLike, AttributeVercelAiSdkMcpOptions, } from './adapters/vercel-ai-sdk-mcp.js';
 export { attributeLangchainMcp } from './adapters/langchain-mcp.js';
 export type { LangchainMcpClientLike, LangchainMultiServerMcpClientLike, AttributeLangchainMcpOptions, } from './adapters/langchain-mcp.js';
+export { ATTRIBUTION_ACCEPT_VALUES, ATTRIBUTION_EXTENSION_ID, ATTRIBUTION_EXTENSION_VERSION, MCP_CLIENT_CAPABILITIES_META_KEY, declareAttributionExtension, parseAttributionReceipt, } from './extension-attribution.js';
+export type { AttributionAcceptValue, AttributionReceipt, AttributionResultBlock, DeclareAttributionExtensionOptions, } from './extension-attribution.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAA;AACvC,YAAY,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAA;AAG7E,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAA;AACzF,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAC/D,YAAY,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AAG5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AACpD,YAAY,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAA;AAG5D,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAA;AACrD,YAAY,EAAE,mBAAmB,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AAG1F,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAA;AACxD,YAAY,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAA;AAKtF,OAAO,EAAE,2BAA2B,EAAE,MAAM,gCAAgC,CAAA;AAC5E,YAAY,EACV,mBAAmB,EACnB,kCAAkC,GACnC,MAAM,gCAAgC,CAAA;AAMvC,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAA;AACzE,YAAY,EACV,wBAAwB,EACxB,8BAA8B,GAC/B,MAAM,iCAAiC,CAAA;AAMxC,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAA;AACnE,YAAY,EACV,sBAAsB,EACtB,iCAAiC,EACjC,4BAA4B,GAC7B,MAAM,6BAA6B,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAA;AACvC,YAAY,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAA;AAG7E,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAA;AACzF,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAC/D,YAAY,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AAG5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AACpD,YAAY,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAA;AAG5D,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAA;AACrD,YAAY,EAAE,mBAAmB,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AAG1F,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAA;AACxD,YAAY,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAA;AAKtF,OAAO,EAAE,2BAA2B,EAAE,MAAM,gCAAgC,CAAA;AAC5E,YAAY,EACV,mBAAmB,EACnB,kCAAkC,GACnC,MAAM,gCAAgC,CAAA;AAMvC,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAA;AACzE,YAAY,EACV,wBAAwB,EACxB,8BAA8B,GAC/B,MAAM,iCAAiC,CAAA;AAMxC,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAA;AACnE,YAAY,EACV,sBAAsB,EACtB,iCAAiC,EACjC,4BAA4B,GAC7B,MAAM,6BAA6B,CAAA;AAKpC,OAAO,EACL,yBAAyB,EACzB,wBAAwB,EACxB,6BAA6B,EAC7B,gCAAgC,EAChC,2BAA2B,EAC3B,uBAAuB,GACxB,MAAM,4BAA4B,CAAA;AACnC,YAAY,EACV,sBAAsB,EACtB,kBAAkB,EAClB,sBAAsB,EACtB,kCAAkC,GACnC,MAAM,4BAA4B,CAAA"}

package/dist/index.js

@@ -24,4 +24,8 @@ export { attributeVercelAiSdkMcp } from './adapters/vercel-ai-sdk-mcp.js';
 // outbound `tools/call` (and every forked client from per-call-header
 // workflows) flows through atrib's interceptor.
 export { attributeLangchainMcp } from './adapters/langchain-mcp.js';
+// dev.atrib/attribution MCP extension v0.1, client side (D141 / spec
+// §1.5.4.1). Declare the extension per-request and parse gated receipts
+// from result._meta; both §5.8-safe, both opt-in.
+export { ATTRIBUTION_ACCEPT_VALUES, ATTRIBUTION_EXTENSION_ID, ATTRIBUTION_EXTENSION_VERSION, MCP_CLIENT_CAPABILITIES_META_KEY, declareAttributionExtension, parseAttributionReceipt, } from './extension-attribution.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAEtC,2BAA2B;AAE3B,8BAA8B;AAC9B,OAAO,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAA;AAGvC,qCAAqC;AACrC,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAA;AAIzF,wBAAwB;AACxB,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AAGpD,qBAAqB;AACrB,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAA;AAGrD,qBAAqB;AACrB,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAA;AAGxD,2EAA2E;AAC3E,wEAAwE;AACxE,yCAAyC;AACzC,OAAO,EAAE,2BAA2B,EAAE,MAAM,gCAAgC,CAAA;AAM5E,4EAA4E;AAC5E,2EAA2E;AAC3E,6DAA6D;AAC7D,0EAA0E;AAC1E,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAA;AAMzE,+EAA+E;AAC/E,8EAA8E;AAC9E,sEAAsE;AACtE,gDAAgD;AAChD,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAEtC,2BAA2B;AAE3B,8BAA8B;AAC9B,OAAO,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAA;AAGvC,qCAAqC;AACrC,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAA;AAIzF,wBAAwB;AACxB,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AAGpD,qBAAqB;AACrB,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAA;AAGrD,qBAAqB;AACrB,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAA;AAGxD,2EAA2E;AAC3E,wEAAwE;AACxE,yCAAyC;AACzC,OAAO,EAAE,2BAA2B,EAAE,MAAM,gCAAgC,CAAA;AAM5E,4EAA4E;AAC5E,2EAA2E;AAC3E,6DAA6D;AAC7D,0EAA0E;AAC1E,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAA;AAMzE,+EAA+E;AAC/E,8EAA8E;AAC9E,sEAAsE;AACtE,gDAAgD;AAChD,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAA;AAOnE,qEAAqE;AACrE,wEAAwE;AACxE,kDAAkD;AAClD,OAAO,EACL,yBAAyB,EACzB,wBAAwB,EACxB,6BAA6B,EAC7B,gCAAgC,EAChC,2BAA2B,EAC3B,uBAAuB,GACxB,MAAM,4BAA4B,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@atrib/agent",
-  "version": "0.2.22",
+  "version": "0.3.0",
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -13,7 +13,7 @@
   "files": [
     "dist"
   ],
-  "description": "Agent middleware for atrib. Interceptor plus framework adapters for MCP attribution. Supports raw SDK, Claude Agent SDK, Cloudflare Agents, Vercel AI SDK, LangChain JS.",
+  "description": "Client-side middleware for Atrib's verifiable action layer. Adds chain context, gap records, and transaction fallback records across MCP framework adapters.",
   "author": "atrib <hello@atrib.dev>",
   "license": "Apache-2.0",
   "homepage": "https://atrib.dev",
@@ -33,11 +33,11 @@
     "@noble/ed25519": "^3.1.0",
     "@noble/hashes": "^2.2.0",
     "canonicalize": "^3.0.0",
-    "@atrib/mcp": "0.18.0",
-    "@atrib/verify": "0.7.9"
+    "@atrib/mcp": "0.19.0",
+    "@atrib/verify": "0.8.0"
   },
   "devDependencies": {
-    "@types/node": "^25.9.2",
+    "@types/node": "^25.9.3",
     "typescript": "^6.0.3",
     "vitest": "^4.1.8"
   },