Skip to content

feat(distribution): agent guardrails quickstarts and registry listings - #123

Merged
domsteil merged 1 commit into
masterfrom
feat/agent-distribution
Aug 31, 2026
Merged

feat(distribution): agent guardrails quickstarts and registry listings#123
domsteil merged 1 commit into
masterfrom
feat/agent-distribution

Conversation

@domsteil

Copy link
Copy Markdown
Contributor

Why

Issue #30: the engine is built but agent developers can't find it. This PR puts StateSet where they look and gives them a 60-second proof of the core property.

Summary

  • server.json for the official MCP registry (validated against the 2025-12-11 schema); cli/package.json gains the matching mcpName for npm ownership validation. Publishing needs a one-time mcp-publisher GitHub auth.
  • Claude Desktop extension manifest (extensions/mcpb/manifest.json) wrapping stateset-mcp via npx with user-configurable db path and tool profile.
  • smithery.yaml now starts on the focused core tool profile.
  • npm discovery keywords for @stateset/cli and @stateset/embedded (mcp, ai-agents, vercel-ai, langchain, …).
  • Four guardrails quickstarts in examples/agents/: a kernel-governed agent attempts to refund $250 of a $100 payment and gets a sealed receipt with commerce.refund.exceeds_captured; a legitimate $40 refund then succeeds. Vercel AI SDK, LangChain, OpenAI tool calls, and generic/custom-runtime surfaces.
  • Quickstarts are asserted in scripts/ci/check_engine_examples.mjs (Node Bindings job), including the exact invariant code.
  • README and docs/src/ai-agents.md link the quickstarts.

Verification

  • node scripts/ci/check_engine_examples.mjs --js-only → all examples incl. 4 guardrails pass
  • server.json validates against the registry schema (ajv)
  • All four demos verified to leave the payment untouched after the blocked attempt

🤖 Generated with Claude Code

https://claude.ai/code/session_01Mqdi6x4EceXLbvDnVko4Qb

Get agent developers to the engine where they already look:

- server.json for the official MCP registry (validated against the
  2025-12-11 schema; cli/package.json gains the matching mcpName)
- Claude Desktop extension manifest (extensions/mcpb)
- smithery.yaml starts on the focused core tool profile
- npm discovery keywords for @stateset/cli and @stateset/embedded
- four runnable guardrails quickstarts (Vercel AI SDK, LangChain,
  OpenAI tool calls, custom runtime): a governed agent attempts a
  $250 refund of a $100 payment and receives a sealed kernel receipt
  with commerce.refund.exceeds_captured, then a legitimate refund
  succeeds; wired into scripts/ci/check_engine_examples.mjs
- README + docs/src/ai-agents.md point at the quickstarts

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Mqdi6x4EceXLbvDnVko4Qb
@domsteil
domsteil merged commit c94c2b0 into master Aug 31, 2026
96 checks passed
@domsteil
domsteil deleted the feat/agent-distribution branch August 31, 2026 17:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant