@treeship/mcp 0.2.1 → 0.3.1

package/dist/attest.d.ts

@@ -1,2 +1,3 @@
-import type { AttestParams } from './types.js';
+import type { AttestParams, AttestReceiptParams } from './types.js';
 export declare function attestAction(params: AttestParams): Promise<string | undefined>;
+export declare function attestReceipt(params: AttestReceiptParams): Promise<string | undefined>;

package/dist/attest.js

@@ -11,6 +11,9 @@ export async function attestAction(params) {
     if (params.parentId) {
         args.push('--parent', params.parentId);
     }
+    if (params.approvalNonce) {
+        args.push('--approval-nonce', params.approvalNonce);
+    }
     const cleanMeta = {};
     for (const [k, v] of Object.entries(params.meta ?? {})) {
         if (v !== undefined && v !== null)
@@ -31,3 +34,28 @@ export async function attestAction(params) {
         return undefined;
     }
 }
+export async function attestReceipt(params) {
+    const args = [
+        'attest', 'receipt',
+        '--system', params.system,
+        '--kind', params.kind,
+        '--format', 'json',
+    ];
+    if (params.subject) {
+        args.push('--subject', params.subject);
+    }
+    if (params.payload && Object.keys(params.payload).length > 0) {
+        args.push('--payload', JSON.stringify(params.payload));
+    }
+    try {
+        const { stdout } = await exec('treeship', args, { timeout: 5000 });
+        const result = JSON.parse(stdout);
+        return result.id || result.artifact_id;
+    }
+    catch (e) {
+        if (process.env.TREESHIP_DEBUG === '1') {
+            process.stderr.write(`[treeship] attestReceipt failed: ${params.kind}\n`);
+        }
+        return undefined;
+    }
+}

package/dist/client.js

@@ -1,5 +1,5 @@
 import { Client } from '@modelcontextprotocol/sdk/client/index.js';
-import { attestAction } from './attest.js';
+import { attestAction, attestReceipt } from './attest.js';
 import { hashPayload } from './utils.js';
 export class TreeshipMCPClient extends Client {
     _actor;
@@ -27,16 +27,26 @@ export class TreeshipMCPClient extends Client {
         }
         finally {
             const elapsedMs = Date.now() - startMs;
-            // Attest RECEIPT after the call (fire-and-forget -- never blocks response)
-            this._attestReceipt(params, result, intentId, elapsedMs, error).catch(() => { });
-        }
-        // Attach treeship metadata to result
-        if (intentId && result) {
-            result._treeship = {
-                intent: intentId,
-                tool: params.name,
-                actor: this._actor,
-            };
+            // Attach treeship metadata to result immediately (receipt comes async)
+            if (result) {
+                const receipt = { resolve: (_id) => { } };
+                const receiptPromise = new Promise(r => { receipt.resolve = r; });
+                result._treeship = {
+                    intent: intentId,
+                    receipt: undefined,
+                    receiptReady: receiptPromise,
+                    tool: params.name,
+                    actor: this._actor,
+                };
+                // Fire-and-forget: receipt attestation happens off the hot path.
+                // Callers who need the receipt ID can await result._treeship.receiptReady.
+                this._attestReceipt(params, result, intentId, elapsedMs, error)
+                    .then(id => {
+                    result._treeship.receipt = id;
+                    receipt.resolve(id);
+                })
+                    .catch(() => receipt.resolve(undefined));
+            }
         }
         return result;
     }
@@ -44,29 +54,35 @@ export class TreeshipMCPClient extends Client {
         return attestAction({
             actor: this._actor,
             action: `mcp.tool.${params.name}.intent`,
+            approvalNonce: process.env.TREESHIP_APPROVAL_NONCE || undefined,
             meta: {
                 tool: params.name,
                 server: 'mcp',
                 args_digest: hashPayload(JSON.stringify(params.arguments ?? {})),
-                approval_nonce: process.env.TREESHIP_APPROVAL_NONCE || undefined,
             },
         });
     }
     async _attestReceipt(params, result, intentId, elapsedMs, error) {
-        await attestAction({
-            actor: this._actor,
-            action: `mcp.tool.${params.name}.receipt`,
-            parentId: intentId,
-            meta: {
-                tool: params.name,
-                elapsed_ms: elapsedMs,
-                exit_code: error ? 1 : 0,
-                is_error: result?.isError ?? !!error,
-                output_digest: result
-                    ? hashPayload(JSON.stringify(result.content ?? result))
-                    : undefined,
-                error_message: error?.message,
-            },
-        }).catch(() => { });
+        try {
+            return await attestReceipt({
+                system: this._actor,
+                kind: 'tool.result',
+                subject: intentId,
+                payload: {
+                    tool: params.name,
+                    elapsed_ms: elapsedMs,
+                    exit_code: error ? 1 : 0,
+                    is_error: result?.isError ?? !!error,
+                    output_digest: result
+                        ? hashPayload(JSON.stringify(result.content ?? result))
+                        : undefined,
+                    error_message: error?.message,
+                },
+            });
+        }
+        catch (e) {
+            process.stderr.write(`[treeship] attestReceipt failed for ${params.name}: ${e.message}\n`);
+            return undefined;
+        }
     }
 }

package/dist/types.d.ts

@@ -1,6 +1,8 @@
 export interface ToolReceipt {
     intent?: string;
     receipt?: string;
+    /** Resolves with the receipt artifact ID once attestation completes (async). */
+    receiptReady?: Promise<string | undefined>;
     tool: string;
     actor: string;
 }
@@ -8,5 +10,12 @@ export interface AttestParams {
     actor: string;
     action: string;
     parentId?: string;
+    approvalNonce?: string;
     meta?: Record<string, unknown>;
 }
+export interface AttestReceiptParams {
+    system: string;
+    kind: string;
+    subject?: string;
+    payload?: Record<string, unknown>;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@treeship/mcp",
-  "version": "0.2.1",
+  "version": "0.3.1",
   "description": "Drop-in Treeship attestation for MCP tool calls",
   "license": "Apache-2.0",
   "repository": {