AgentSmith 0.3.1

AgentSmith 0.3.1 adds safe, evidence-backed integration validation and hardens durable recovery.

Highlights

• A conditional MCP/integration checkpoint records discovery versus exact pins; configured, authenticated, read-tested, and least-privilege states; auto-start, capability listing, and actual invocation; named consumers and credential classes; response minimization; persistent state; shared-store causality; and exact child-process cleanup.
• agentsmith validate-integration statically inspects structured JSON with credential values redacted. It never installs packages or launches integrations.
• The validator rejects unpinned executable package specifications, missing Playwright profile/cache isolation, and unjustified --no-sandbox use. It deliberately does not infer runtime authority, harmless-call semantics, least privilege, invocation, response minimization, or cleanup.
• Verification receipts identify whether a clean clone, disposable fixture, linked worktree, or operator worktree was tested. Clean-checkout validity and operator-local byte preservation remain separate assertions.
• Existing handoff artifacts now carry a compact recovery checkpoint for external waits and irreversible gates.
• False-absence search guidance is bounded to the dynamic writing-rules skill rather than always-loaded instructions.
• Shipped MCP examples use exact executable package pins.
• Windows atomic state reads retry only bounded sharing violations, preventing transient replace/read races without hiding other errors.

Scope

This is not a generic MCP framework. No project hooks were added, and generated Claude/Codex adapters remain outputs rather than source edits. Project-specific CI-runner repair authority was not generalized.

Install or update

git clone --depth 1 --branch v0.3.1 https://github.com/PromptPartner/agentsmith.git
cd agentsmith
python3 agentsmith.py update plan --global --from https://github.com/PromptPartner/agentsmith.git --version v0.3.1 --save /tmp/agentsmith-global-v0.3.1-plan.json
python3 agentsmith.py update apply --plan /tmp/agentsmith-global-v0.3.1-plan.json

Inspect the saved plan before applying it.

Verification

• Full local 22-phase canonical verifier passed.
• Feature PR #32 and release PR #33 passed guardrail, Ubuntu, macOS, and Windows CI.
• Post-merge master run 33879586913 passed the same matrix at commit eddce5e1f4a8df3eb28b2f3c1356f55a48eaba6c.
• Fixture coverage includes non-launching validation, secret suppression, persistent-state preservation, exact PID lifecycle checks, clean/disposable tree provenance, generated Claude and Codex adapters, and install/update rollback.
• Tracked and staged secret scans passed; final diff review found no credentials or generated-adapter source edits.