@atrib/attest 0.0.0

package/dist/storage.d.ts

@@ -0,0 +1,27 @@
+import type { AtribRecord } from '@atrib/mcp';
+import type { ProofBundle } from '@atrib/mcp';
+/**
+ * Pre-sign payload preserved locally. For atrib-emit, this is the original
+ * `content: { what, why_noted, topics, ... }` object the caller passed.
+ * Free-form per event_type (the same way `content` is on the input schema).
+ */
+export type LocalSidecar = {
+    /** Original pre-sign content payload as supplied by the caller. */
+    content?: Record<string, unknown>;
+    /** Producer that emitted this record, for cross-source disambiguation. */
+    producer?: string;
+};
+export interface MirrorLine {
+    record: AtribRecord;
+    proof: ProofBundle | null;
+    written_at: number;
+    /** Optional local-only sidecar; absent on legacy entries. */
+    _local?: LocalSidecar;
+}
+/**
+ * Append one record + optional proof + optional local sidecar to the
+ * mirror file. Failures log with the atrib-emit prefix and otherwise
+ * no-op, per §5.8 the mirror is best-effort and never blocks the
+ * agent.
+ */
+export declare function mirrorRecord(record: AtribRecord, proof: ProofBundle | null, localSidecar?: LocalSidecar): Promise<void>;

package/dist/storage.js

@@ -0,0 +1,59 @@
+// Local JSONL mirror, same convention as the wrapper, so atrib-recall
+// surfaces emit-signed records identically to wrapper-signed ones. Each
+// line is one envelope around a signed AtribRecord plus optional proof
+// and an OPTIONAL `_local` sidecar carrying pre-sign payload content.
+//
+// The `_local` sidecar is the local-only complement to the public log.
+// Public log gets only the signed AtribRecord. For explicit emits, args_hash
+// commits to the original content by default, while the local mirror keeps
+// the pre-sign content so consumers (recall, trace, summarize) can surface
+// semantic context, `topics`, `what`, `why_noted`, alongside the
+// cryptographic evidence. Without the sidecar, mirror readers see only
+// event_type + hashes and must guess at semantics.
+//
+// Sidecar shape rules:
+//   - Lives at the ENVELOPE level (not inside `record`). Never affects
+//     the signature, the signed bytes only ever contain the canonical
+//     AtribRecord fields.
+//   - Marked with underscore prefix (`_local`) per Python/etc. convention
+//     for "private to this layer".
+//   - Stripped at submission time by construction: the submission queue
+//     only ever sees the bare AtribRecord, so the sidecar can never
+//     leak to the public log.
+//   - Backward-compatible: existing mirror entries with no `_local`
+//     parse identically; readers must tolerate its absence.
+//
+// v1 keeps this minimal: append-only, no rotation, no compression. Path
+// defaults to ATRIB_MIRROR_FILE, then to a per-agent file under
+// ~/.atrib/records.
+import { appendFile, mkdir } from 'node:fs/promises';
+import { homedir } from 'node:os';
+import { dirname, join } from 'node:path';
+let ensuredDirs = new Set();
+function mirrorPath() {
+    return (process.env['ATRIB_MIRROR_FILE'] ??
+        join(homedir(), '.atrib', 'records', `atrib-emit-${process.env['ATRIB_AGENT'] ?? 'claude-code'}.jsonl`));
+}
+/**
+ * Append one record + optional proof + optional local sidecar to the
+ * mirror file. Failures log with the atrib-emit prefix and otherwise
+ * no-op, per §5.8 the mirror is best-effort and never blocks the
+ * agent.
+ */
+export async function mirrorRecord(record, proof, localSidecar) {
+    const path = mirrorPath();
+    const line = { record, proof, written_at: Date.now() };
+    if (localSidecar) {
+        line._local = localSidecar;
+    }
+    try {
+        if (!ensuredDirs.has(path)) {
+            await mkdir(dirname(path), { recursive: true });
+            ensuredDirs.add(path);
+        }
+        await appendFile(path, JSON.stringify(line) + '\n', 'utf-8');
+    }
+    catch (e) {
+        console.warn('atrib-emit: mirror append failed', e instanceof Error ? e.message : String(e));
+    }
+}

package/package.json

@@ -0,0 +1,72 @@
+{
+  "name": "@atrib/attest",
+  "version": "0.0.0",
+  "description": "MCP server for atrib's write verb. One attest tool signs observations, annotations, and revisions; the legacy emit, atrib-annotate, and atrib-revise tool names stay mounted as aliases over the same handler.",
+  "keywords": [
+    "atrib",
+    "mcp",
+    "model-context-protocol",
+    "attribution",
+    "verifiable",
+    "agent",
+    "cognitive-primitive",
+    "ed25519",
+    "signed-records",
+    "attest"
+  ],
+  "author": "Nader Helmy",
+  "homepage": "https://github.com/creatornader/atrib/tree/main/services/atrib-attest",
+  "license": "Apache-2.0",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./cli": {
+      "types": "./dist/cli.d.ts",
+      "import": "./dist/cli.js"
+    },
+    "./local-substrate-host": {
+      "types": "./dist/local-substrate-host.d.ts",
+      "import": "./dist/local-substrate-host.js"
+    }
+  },
+  "bin": {
+    "atrib-attest": "./dist/main.js",
+    "atrib-attest-cli": "./dist/cli.js"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.29.0",
+    "@noble/ed25519": "^3.1.0",
+    "@noble/hashes": "^2.2.0",
+    "canonicalize": "^3.0.0",
+    "zod": "^3.25.76",
+    "@atrib/mcp": "0.21.0"
+  },
+  "devDependencies": {
+    "@types/node": "^25.9.3",
+    "tsx": "^4.22.4",
+    "typescript": "^6.0.3",
+    "vitest": "^4.1.8"
+  },
+  "files": [
+    "dist"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/creatornader/atrib.git",
+    "directory": "services/atrib-attest"
+  },
+  "scripts": {
+    "build": "rm -rf dist && tsc && chmod +x dist/main.js dist/cli.js dist/local-substrate-host.js",
+    "start": "node dist/main.js",
+    "dev": "tsx src/main.ts",
+    "test": "vitest run"
+  }
+}