v0.5.2 - npm and MCP Registry ready

Publishes the thin MadeForAI connector to npm and prepares official MCP Registry metadata. Install with: npx --yes madeforai-supplychain-connector@0.5.2. This release contains only the public connector; the hosted fulfillment control plane remains private.

v0.5.1 - verified thin connector package

MadeForAI Supply Chain Connector v0.5.1

This release publishes the verified public thin connector for the MadeForAI hosted order intake.

Changes

• Package scope is limited to dist/src; compiled tests are not shipped.
• MCP TypeScript SDK is pinned to ~1.29.0.
• Repository metadata and install guidance are included.
• Unverified fulfillment-capacity statements were removed.
• Public client behavior remains limited to the nine user-side intake and tracking tools.

Verified artifact

• File: madeforai-supplychain-connector-0.5.1.tgz
• Size: 6,069 bytes
• SHA-256: 5A9066CF1CA0D82433FFB0E14BDC5E8407823FC2D650FD86D6447130284AF08F
• Build, ESLint, and 3/3 connector tests passed.

Licensing boundary

Historical MIT-licensed full-prototype releases remain available under their original terms. From v0.5.0 onward, this repository publishes the open connector; newer hosted fulfillment implementation remains separate from the public connector source.

v0.5.0 — open entrance, closed fulfillment

Superseded by v0.5.1. Existing v0.5.0 assets are retained so previous download links remain stable.

MadeForAI v0.5.0 changes the public repository from a self-hosted full-stack prototype into the official thin MCP connector for the MadeForAI hosted fulfillment service.

Open entrance

• Official stdio connector for Codex, Claude, Gemini, Cursor, and other MCP clients
• Fixed upstream endpoint: https://api.madeforai.net/mcp
• Nine public user-side tools for task creation, order confirmation, quote acceptance, and status queries
• Defense-in-depth allowlist that blocks operator tools even if the upstream tool list is misconfigured
• Per-client hosted task identity and isolation

Closed fulfillment

The public package does not contain PostgreSQL models, the Chinese operator workspace, production credentials, supplier records, payment confirmation, quality control, shipment, or completion administration. Those capabilities remain in the private MadeForAI hosted control plane.

Forks may modify the MIT-licensed connector, but they do not gain access to MadeForAI orders, databases, production accounts, credentials, supplier records, or the official brand.

Current fulfillment statement

The service identifies the responsible path as MadeForAI hosted fulfillment. v0.5.0 does not claim that a Reality Operator Network already exists; the founding team is responsible for the first real fulfillment tasks.

Historical note

Version 0.4.0 and earlier remain available under their original MIT terms. They are historical prototype releases and are not the official MadeForAI hosted fulfillment service.

Safety boundaries

MadeForAI still does not generate images, run LLM inference, process real payments, or automatically place supplier orders. Human approval remains required at every irreversible gate.

Verification

• Connector build passed
• Connector lint passed
• Connector tests passed: 3/3
• Hosted control-plane tests passed: 53/53
• Formal-domain full-lifecycle smoke test passed
• Cross-client task reads are blocked
• Cloud Run revision madeforai-00008-h72 serves 100% of traffic

v0.4.0 — hosted order intake

MadeForAI v0.4.0 turns the local execution-control skeleton into a deployable hosted order-intake service while preserving every human approval gate.

Highlights

• Hosted deployment profile for Google Cloud Run and Neon PostgreSQL
• Remote Streamable HTTP MCP endpoint plus stdio transport
• Database readiness checks, security headers, API-key protection, and guarded error handling
• Authenticated Chinese Reality Operator console
• Complete create → quote → confirm → production feedback → mock payment gate → quality check → shipment → completion workflow
• 16 MCP tools and 49 passing automated tests
• Non-root production container and focused Cloud Build ignore rules
• English README and Chinese hosted-deployment runbook for api.madeforai.net

Safety boundaries

MadeForAI still does not generate images, run LLM inference, process real payments, or automatically place supplier orders. Pricing comes from human operators, and irreversible steps remain human-approved.

Verification

• npm run build passed
• npm run lint passed
• npm test passed: 49/49
• Remote Cloud Run + Neon full-lifecycle smoke test passed

v0.3.4 — first public release

First public release of MadeForAI — an open-source execution control
layer between AI agents and China-based manufacturing.

• 16 MCP tools, 16-step human-approval-first workflow
• 9 phase-1 manufacturing categories (corporate identity and
  high-frequency custom goods)
• 48 automated tests passing, TypeScript clean
• Three human gates enforced in code: order draft, quote & risk, payment
• Payment amounts derived server-side from operator quote snapshots;
  callers cannot supply or alter them
• Central transition guard: no shipment without QC, no completion
  without shipment
• English user workspace and Chinese production console
• Runs locally in two commands, no database required

MIT licensed.