@atrib/daemon 0.1.0 → 0.2.1

package/README.md

@@ -1,34 +1,43 @@
 # atribd
 
-Local daemon for atrib. Serves the seven cognitive primitives from one
-stateless-native process over Streamable HTTP or stdio.
-
-atribd mounts the seven primitive MCP servers (`@atrib/emit`,
-`@atrib/annotate`, `@atrib/revise`, `@atrib/recall`, `@atrib/trace`,
-`@atrib/summarize`, `@atrib/verify-mcp`) in process and exposes their fifteen
-physical tools as thin aliases over two internal handlers (write, read). A
-record signed through the daemon is byte-identical to one signed through the
-standalone per-primitive binary: same handler code paths, same
-`_local.producer` sidecar labels, same `resolveChainRoot` chain selection.
-The daemon is the recommended local topology; the standalone binaries keep
-shipping and keep working.
+Local daemon for atrib. Serves the two-verb cognitive surface plus the
+legacy alias tools from one stateless-native process over Streamable HTTP
+or stdio.
+
+Per the attest/recall rename
+([D164](../../DECISIONS.md#d164-attestrecall-verb-rename-and-primitive-surface-collapse)),
+atribd mounts three primitives in process: the `attest` write home
+(`@atrib/attest`), the `recall` read home (`@atrib/recall`), and
+`@atrib/summarize`. Together they serve the seventeen-tool union: the
+fifteen legacy tool names plus `attest` plus `recall`. A record signed
+through the daemon is byte-identical to one signed through the standalone
+per-primitive binary: same handler code paths, same `_local.producer`
+sidecar labels, same `resolveChainRoot` chain selection. The daemon is the
+recommended local topology; the standalone binaries keep shipping and keep
+working.
 
 ## Install
 
-This package is a publish target; first publish is pending an operator
-decision on the final npm name. Until then, run it from the workspace:
+Published as `@atrib/daemon`; the daemon and its binary are named `atribd`:
 
 ```sh
-pnpm --filter atribd... build
-node services/atribd/dist/index.js --help
+npm install -g @atrib/daemon
+atribd --help
 ```
 
-After first publish, the command becomes:
+Or run without installing:
 
 ```sh
 npx --package @atrib/daemon atribd --help
 ```
 
+From the workspace (development):
+
+```sh
+pnpm --filter @atrib/daemon... build
+node services/atribd/dist/index.js --help
+```
+
 ## Quick start
 
 One daemon per profile ([D120](../../DECISIONS.md#d120-local-substrate-coordinator-keeps-startup-spawn-sidecars-wrapper-owned) partition axis). Start the HTTP daemon:
@@ -69,7 +78,9 @@ instance:
   resolve through the spec [§1.5.4](../../atrib-spec.md#154-mcp-transport-params_meta) ladder with the [§1.5.3](../../atrib-spec.md#153-http-fallback-x-atrib-chain) `X-Atrib-Chain`
   fallback.
 - `tools/list` responses carry `ttlMs` and `cacheScope` (SEP-2549) so clients
-  can cache the tool catalogue. Tune with `--tools-list-ttl-ms`.
+  can cache the tool catalogue. The default `ttlMs` is 5 minutes during the
+  alias window (operator-tunable via `--tools-list-ttl-ms` /
+  `ATRIBD_TOOLS_LIST_TTL_MS`).
 
 The transport binding sits behind an adapter
 (`src/transport-adapter.ts`). The current adapter runs the session-era MCP
@@ -97,13 +108,14 @@ open question. The stdio surfaces keep the ambient ladder unchanged.
 
 ## Write serialization
 
-The daemon serializes write-primitive calls per resolved `context_id`:
-read-tail, sign, append runs one writer at a time per context, so concurrent
-writes routed through one daemon yield a linear chain. Writers that append
-to the mirror corpus without routing through the daemon sit outside this
-boundary and can still fork a chain; the
-`spec/conformance/atribd/cases/concurrent-writer-serialization/` family pins
-both sides of that line.
+The daemon serializes calls to any write-union tool name (`attest`, `emit`,
+`atrib-annotate`, `atrib-revise`) per resolved `context_id`: read-tail,
+sign, append runs one writer at a time per context, so concurrent writes
+routed through one daemon, regardless of which tool name the caller used,
+yield a linear chain. Writers that append to the mirror corpus without
+routing through the daemon sit outside this boundary and can still fork a
+chain; the `spec/conformance/atribd/cases/concurrent-writer-serialization/`
+family pins both sides of that line.
 
 ## Degradation
 
@@ -121,9 +133,8 @@ and mirror stay on the host.
   `node scripts/update-primitives-runtime.mjs --runtime atribd`. It discovers
   `com.nader.atribd.*` LaunchAgents running this package's `dist/index.js`,
   builds the dependency closure, restarts, probes health and the direct MCP
-  surface, and gates on the daemon health shape. The topology gate reports
-  skipped until the operator cutover, because the topology scripts still
-  read the legacy shape.
+  surface, and gates on the daemon health shape. All operator profiles now
+  run `@atrib/daemon`; the topology gate validates the daemon shape.
 - **Deprecated session flags.** `--session-idle-ms` and
   `ATRIB_PRIMITIVES_SESSION_IDLE_MS` are accepted and ignored with a
   one-line stderr notice, never a fatal error. The stateless daemon has no
@@ -142,8 +153,8 @@ and mirror stay on the host.
 ## Verify locally
 
 ```sh
-pnpm --filter atribd... build
-pnpm --filter atribd test
+pnpm --filter @atrib/daemon... build
+pnpm --filter @atrib/daemon test
 ```
 
 The test suite includes the reference tests for

package/dist/backend.js

@@ -30,27 +30,16 @@ const HEALTH_PROBE_ABSENT_CONTEXT_ID = 'f'.repeat(32);
 const CONTEXT_ID_PATTERN = /^[0-9a-f]{32}$/;
 const runtimeRequire = createRequire(import.meta.url);
 export const PRIMITIVE_SPECS = [
+    // The attest/recall two-verb surface with the fifteen legacy tool names
+    // mounted as aliases (alias-window rule W1). Three mounts serve the
+    // seventeen-tool union: the write home (@atrib/attest), the read home
+    // (@atrib/recall), and summarize (no successor; relocates to the harness
+    // after the window).
     {
-        name: 'emit',
-        packageName: '@atrib/emit',
+        name: 'attest',
+        packageName: '@atrib/attest',
         kind: 'write',
-        expectedTools: ['emit'],
-        mutatesLogOnCall: true,
-        probeMode: 'package-and-tool-surface',
-    },
-    {
-        name: 'annotate',
-        packageName: '@atrib/annotate',
-        kind: 'write',
-        expectedTools: ['atrib-annotate'],
-        mutatesLogOnCall: true,
-        probeMode: 'package-and-tool-surface',
-    },
-    {
-        name: 'revise',
-        packageName: '@atrib/revise',
-        kind: 'write',
-        expectedTools: ['atrib-revise'],
+        expectedTools: ['atrib-annotate', 'atrib-revise', 'attest', 'emit'],
         mutatesLogOnCall: true,
         probeMode: 'package-and-tool-surface',
     },
@@ -59,6 +48,8 @@ export const PRIMITIVE_SPECS = [
         packageName: '@atrib/recall',
         kind: 'read',
         expectedTools: [
+            'atrib-verify',
+            'recall',
             'recall_annotations',
             'recall_by_content',
             'recall_by_signer',
@@ -67,18 +58,12 @@ export const PRIMITIVE_SPECS = [
             'recall_revisions',
             'recall_session_chain',
             'recall_walk',
+            'trace',
+            'trace_forward',
         ],
         mutatesLogOnCall: false,
         probeMode: 'read-only-behavioral-probe',
     },
-    {
-        name: 'trace',
-        packageName: '@atrib/trace',
-        kind: 'read',
-        expectedTools: ['trace', 'trace_forward'],
-        mutatesLogOnCall: false,
-        probeMode: 'package-and-tool-surface',
-    },
     {
         name: 'summarize',
         packageName: '@atrib/summarize',
@@ -87,27 +72,15 @@ export const PRIMITIVE_SPECS = [
         mutatesLogOnCall: false,
         probeMode: 'package-and-tool-surface',
     },
-    {
-        name: 'verify',
-        packageName: '@atrib/verify-mcp',
-        kind: 'read',
-        expectedTools: ['atrib-verify'],
-        mutatesLogOnCall: false,
-        probeMode: 'package-and-tool-surface',
-    },
 ];
 /** Physical tool names served by the write handler. */
 export const WRITE_TOOL_NAMES = new Set(PRIMITIVE_SPECS.filter((spec) => spec.kind === 'write').flatMap((spec) => [
     ...spec.expectedTools,
 ]));
 const PRIMITIVES = [
-    ['emit', async () => (await import('@atrib/emit')).createAtribEmitServer()],
-    ['annotate', async () => (await import('@atrib/annotate')).createAtribAnnotateServer()],
-    ['revise', async () => (await import('@atrib/revise')).createAtribReviseServer()],
+    ['attest', async () => (await import('@atrib/attest')).createAtribAttestServer()],
     ['recall', async () => (await import('@atrib/recall')).createAtribRecallServer()],
-    ['trace', async () => (await import('@atrib/trace')).createAtribTraceServer()],
     ['summarize', async () => (await import('@atrib/summarize')).createAtribSummarizeServer()],
-    ['verify', async () => (await import('@atrib/verify-mcp')).createAtribVerifyServer()],
 ];
 export function readPackageVersion() {
     try {
@@ -436,6 +409,52 @@ async function probeVerifyBehavior(primitive, spec, timeoutMs) {
         missing_required_record_rejected: true,
     });
 }
+async function probeRecallVerbBehavior(primitive, spec, timeoutMs) {
+    const payload = await callProbeTool(primitive, 'recall', {
+        shape: 'walk',
+        direction: 'backward',
+        start: HEALTH_PROBE_ABSENT_HASH,
+        depth: 0,
+        compact: true,
+    }, timeoutMs);
+    if (payload.start_hash !== HEALTH_PROBE_ABSENT_HASH) {
+        throw new Error(`recall verb returned unexpected start_hash ${String(payload.start_hash)}`);
+    }
+    if (payload.direction !== 'backward') {
+        throw new Error(`recall verb returned unexpected direction ${String(payload.direction)}`);
+    }
+    const dangling = assertArray(payload.dangling, 'recall.dangling');
+    if (!dangling.includes(HEALTH_PROBE_ABSENT_HASH)) {
+        throw new Error('recall verb did not surface the absent probe hash as dangling');
+    }
+    const visited = assertArray(payload.visited, 'recall.visited');
+    if (visited.length !== 0) {
+        throw new Error('recall verb visited records for an absent probe hash');
+    }
+    return behavioralProbePassed(spec, 'read-only', {
+        tool: 'recall',
+        shape: 'walk',
+        absent_hash_dangling: true,
+    });
+}
+/**
+ * The read home mounts the whole read union (recall verb + 8 recall_* +
+ * trace + trace_forward + atrib-verify), so its behavioral probe runs the
+ * per-family probes against one mount and combines them. Any single
+ * failure fails the union probe.
+ */
+async function probeReadUnionBehavior(primitive, spec, timeoutMs) {
+    const recallProbe = await probeRecallBehavior(primitive, spec, timeoutMs);
+    const traceProbe = await probeTraceBehavior(primitive, spec, timeoutMs);
+    const verifyProbe = await probeVerifyBehavior(primitive, spec, timeoutMs);
+    const verbProbe = await probeRecallVerbBehavior(primitive, spec, timeoutMs);
+    return behavioralProbePassed(spec, 'read-only', {
+        recall: recallProbe.observed ?? {},
+        trace: traceProbe.observed ?? {},
+        verify: verifyProbe.observed ?? {},
+        recall_verb: verbProbe.observed ?? {},
+    });
+}
 async function inspectPrimitiveBehavioralProbes(mounted, timeoutMs) {
     const byName = new Map(mounted.map((primitive) => [primitive.name, primitive]));
     const entries = [];
@@ -454,17 +473,11 @@ async function inspectPrimitiveBehavioralProbes(mounted, timeoutMs) {
         }
         try {
             if (spec.name === 'recall') {
-                entries.push([spec.name, await probeRecallBehavior(primitive, spec, timeoutMs)]);
-            }
-            else if (spec.name === 'trace') {
-                entries.push([spec.name, await probeTraceBehavior(primitive, spec, timeoutMs)]);
+                entries.push([spec.name, await probeReadUnionBehavior(primitive, spec, timeoutMs)]);
             }
             else if (spec.name === 'summarize') {
                 entries.push([spec.name, await probeSummarizeBehavior(primitive, spec, timeoutMs)]);
             }
-            else if (spec.name === 'verify') {
-                entries.push([spec.name, await probeVerifyBehavior(primitive, spec, timeoutMs)]);
-            }
             else {
                 entries.push([spec.name, behavioralProbeSkipped(spec, 'no behavioral probe defined')]);
             }
@@ -575,14 +588,18 @@ export async function createAtribdBackend(options = {}) {
     let callsTimedOut = 0;
     let callsSettledAfterTimeout = 0;
     for (const primitive of mounted) {
-        // Unknown mount names default to the read handler; only tools served by
-        // a registered write primitive go through the write handler's lock.
-        const kind = specByName.get(primitive.name)?.kind ?? 'read';
+        // Route kind is per TOOL, not per mount: any tool name the write
+        // handler serves (the write union: attest plus its legacy aliases)
+        // goes through the write lock regardless of which mount exposes it.
+        // Unknown tool names on unknown mounts default to the read handler,
+        // unless the mount is a registered write primitive.
+        const mountKind = specByName.get(primitive.name)?.kind ?? 'read';
         for (const tool of primitive.tools) {
             const existing = routeByTool.get(tool.name);
             if (existing) {
                 throw new Error(`duplicate atrib primitive tool ${tool.name}: ${existing.primitive} and ${primitive.name}`);
             }
+            const kind = WRITE_TOOL_NAMES.has(tool.name) ? 'write' : mountKind;
             routeByTool.set(tool.name, { primitive: primitive.name, kind, client: primitive.client });
             tools.push(tool);
         }

package/dist/http-host.js

@@ -34,7 +34,14 @@ import { createSessionSdkStatelessAdapter, } from './transport-adapter.js';
 export const DEFAULT_HTTP_HOST = '127.0.0.1';
 export const DEFAULT_HTTP_PORT = 8796;
 export const DEFAULT_HTTP_PATH = '/mcp';
-export const DEFAULT_TOOLS_LIST_TTL_MS = 24 * 60 * 60 * 1000;
+// Alias-window rule W2 (attest/recall rename): while legacy tool names are
+// still being retired, every default deployment advertises a short tools/list
+// ttlMs so a rename propagates on cache expiry within minutes, and a name may
+// leave the default list only after the longest ttlMs the deployment ever
+// advertised has elapsed. Operators tune via --tools-list-ttl-ms /
+// ATRIBD_TOOLS_LIST_TTL_MS; the pre-window default was 24 hours and can
+// return once retirement completes.
+export const DEFAULT_TOOLS_LIST_TTL_MS = 5 * 60 * 1000;
 const MAX_JSON_BODY_BYTES = 1024 * 1024;
 function createBackendProvider(factory) {
     const startedAt = Date.now();

package/dist/index.js

@@ -1,11 +1,12 @@
 #!/usr/bin/env node
 // SPDX-License-Identifier: Apache-2.0
 /**
- * atribd: the local daemon for atrib's seven cognitive primitives.
+ * atribd: the local daemon for atrib's cognitive surface.
  *
- * One host-owned process mounts the seven primitive MCP servers in process
- * and serves their fifteen physical tools as thin aliases over two internal
- * handlers (write, read). Transports: stateless Streamable HTTP (the
+ * One host-owned process mounts the attest write home, the recall read
+ * home, and summarize in process and serves the seventeen-tool alias-window
+ * union (fifteen legacy names plus the attest and recall verbs) as thin
+ * aliases over two internal handlers (write, read). Transports: stateless Streamable HTTP (the
  * recommended daemon topology), direct stdio (in-process), and a
  * stdio-to-HTTP proxy shim for startup-spawn harnesses.
  *
@@ -170,7 +171,7 @@ Options:
   --port <port>                  HTTP bind port. Defaults to 8796. Use 0 for ephemeral.
   --path <path>                  HTTP MCP path. Defaults to /mcp.
   --tool-timeout-ms <ms>         Bound each primitive tool call. Defaults to 45000.
-  --tools-list-ttl-ms <ms>       SEP-2549 freshness hint on tools/list. Defaults to 24 hours.
+  --tools-list-ttl-ms <ms>       SEP-2549 freshness hint on tools/list. Defaults to 5 minutes (alias-window W2).
   --ambient-context              Opt the HTTP surface back into ambient context discovery
                                  (D078/D083). Default is explicit-required.
   --session-idle-ms <ms>         Deprecated; ignored (the stateless daemon has no sessions).

package/package.json

@@ -1,7 +1,18 @@
 {
   "name": "@atrib/daemon",
-  "version": "0.1.0",
-  "description": "Local daemon for atrib. Serves the seven cognitive primitives from one stateless-native process over Streamable HTTP or stdio.",
+  "version": "0.2.1",
+  "description": "Local daemon for atrib. Serves the attest/recall verbs plus the legacy alias tools from one stateless-native process over Streamable HTTP or stdio.",
+  "keywords": [
+    "atrib",
+    "mcp",
+    "model-context-protocol",
+    "attribution",
+    "verifiable",
+    "agent",
+    "cognitive-primitive",
+    "daemon",
+    "ed25519"
+  ],
   "author": "Nader Helmy",
   "license": "Apache-2.0",
   "homepage": "https://github.com/creatornader/atrib/tree/main/services/atribd",
@@ -17,7 +28,8 @@
     ".": {
       "types": "./dist/index.d.ts",
       "import": "./dist/index.js"
-    }
+    },
+    "./package.json": "./package.json"
   },
   "bin": {
     "atribd": "./dist/index.js"
@@ -27,14 +39,11 @@
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.29.0",
+    "@atrib/attest": "0.1.0",
     "@atrib/mcp": "0.21.0",
-    "@atrib/emit": "0.17.3",
-    "@atrib/annotate": "0.2.41",
-    "@atrib/recall": "0.14.7",
+    "@atrib/recall": "2.0.0",
     "@atrib/summarize": "0.4.23",
-    "@atrib/trace": "0.5.21",
-    "@atrib/revise": "0.2.41",
-    "@atrib/verify-mcp": "0.2.22"
+    "@atrib/verify": "0.10.0"
   },
   "devDependencies": {
     "@types/node": "^25.9.3",