calllint 0.9.2 → 0.9.3

package/dist/index.js

@@ -4473,7 +4473,7 @@ function receiptCommand(args, deps) {
 }
 
 // src/commands/action.ts
-import { readFileSync as readFileSync9 } from "node:fs";
+import { readFileSync as readFileSync9, writeFileSync as writeFileSync6 } from "node:fs";
 import { resolve as resolve5 } from "node:path";
 
 // ../../packages/action-analyzer/src/types.ts
@@ -4963,21 +4963,28 @@ Expected: calllint.action.v0`,
     const policy = loadPolicyOrDefault(policyPath ? resolve5(deps.cwd, policyPath) : void 0);
     const findings = analyzeAction(descriptor);
     const verdict = computeActionVerdict(findings, policy);
+    const actionReport = {
+      schema_version: "calllint.action-report.v0",
+      verdict,
+      findings,
+      target: {
+        type: "action",
+        kind: descriptor.kind,
+        schema_version: descriptor.schema_version
+      },
+      policy_applied: "default",
+      scan_timestamp: deps.generatedAt || (/* @__PURE__ */ new Date()).toISOString(),
+      counts: {
+        SAFE: findings.filter((f) => !f.blocker && f.severity !== "high").length === 0 ? 1 : 0,
+        REVIEW: findings.some((f) => f.severity === "high") ? 1 : 0,
+        BLOCK: findings.some((f) => f.blocker || f.severity === "critical") ? 1 : 0,
+        UNKNOWN: 0
+      },
+      reports: [{ findings }]
+    };
     let stdout = "";
     if (args.flags["json"]) {
-      const report = {
-        schema_version: "calllint.action-report.v0",
-        verdict,
-        findings,
-        target: {
-          type: "action",
-          kind: descriptor.kind,
-          schema_version: descriptor.schema_version
-        },
-        policy_applied: "default",
-        scan_timestamp: (/* @__PURE__ */ new Date()).toISOString()
-      };
-      stdout = JSON.stringify(report, null, 2);
+      stdout = JSON.stringify(actionReport, null, 2);
     } else {
       const header = `
 \u{1F50D} Action: ${descriptor.kind}
@@ -4997,6 +5004,12 @@ Expected: calllint.action.v0`,
       }
       stdout = header + body;
     }
+    if (args.flags["receipt"]) {
+      const receiptError = writeActionReceipt(descriptor, content, actionReport, policy, args, deps);
+      if (receiptError) {
+        return { stdout: "", stderr: receiptError, exitCode: 2 };
+      }
+    }
     return {
       stdout,
       stderr: "",
@@ -5034,11 +5047,14 @@ COMMANDS
 OPTIONS
   --json            Output JSON report
   --policy <file>   Use custom policy file
+  --receipt         Generate a calllint.receipt.v0 file
+  --receipt-out <file>  Receipt output path (default: calllint-action-receipt.json)
   --no-emoji        Disable emoji in output
 
 EXAMPLE
   calllint action inspect payment.json
   calllint action inspect email-reply.json --json
+  calllint action inspect payment.json --receipt
 
 See: https://calllint.com/docs/action-inspect (ADR 0029)
 `;
@@ -5057,6 +5073,31 @@ function computeActionVerdict(findings, policy) {
   }
   return "REVIEW";
 }
+function writeActionReceipt(descriptor, rawContent, actionReport, policy, args, deps) {
+  const toolVersion = deps.toolVersion ?? "0.0.0-dev";
+  const receipt = createReceipt(
+    {
+      toolVersion,
+      subject: { type: "action", target: descriptor.kind },
+      inputForHash: rawContent,
+      effectivePolicyForHash: policy ?? { policy: "default" },
+      scanReport: actionReport,
+      rulesetForHash: { tool: "calllint", version: toolVersion },
+      networkUsed: false
+    },
+    deps.generatedAt || (/* @__PURE__ */ new Date()).toISOString()
+  );
+  const outPath = resolve5(
+    deps.cwd,
+    args.flags["receipt-out"] ?? "calllint-action-receipt.json"
+  );
+  try {
+    writeFileSync6(outPath, JSON.stringify(receipt, null, 2) + "\n", "utf8");
+  } catch (e) {
+    return `Could not write action receipt to ${outPath}: ${e instanceof Error ? e.message : String(e)}`;
+  }
+  return void 0;
+}
 
 // src/run.ts
 function run(argv, deps) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "calllint",
-  "version": "0.9.2",
+  "version": "0.9.3",
   "description": "Evidence-backed security verdicts for MCP servers and agent tools. Lint agent tool-call risk before tools run — SAFE / REVIEW / BLOCK / UNKNOWN, with evidence. Never executes the server it judges.",
   "keywords": [
     "mcp",