New:Introducing Socket Scanning for VS Code Marketplace Extensions.Learn more →
Get Started

kineti

Package Overview
Dependencies
Maintainers
1
Versions
15
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

kineti

Kineti: file-bound test receipts, registered rollback, and a spend log with a cap for AI coding agents

Source
npmnpm
Version
0.3.9
Version published
Weekly downloads
277
-72.71%
Maintainers
1
Weekly downloads
 
Created
Source

Kineti OS v0.3.9

npm version crates.io license: MIT

File-bound test receipts and registered rollback for AI coding agents.
Also a spend log with a cap. MIT. Works with Claude Code, Cursor, OpenCode, Codex and Antigravity through MCP.

$ kineti spend status
total $0 of $50; entries 0; tripped=false

$ kineti spend log --stage build --model sonnet --tokens-in 400000 --tokens-out 200000
logged $4.2 (stage build); run total $4.2

$ kineti spend log --stage build --model opus --tokens-in 100000 --tokens-out 60000
kineti: SPEND BREAKER TRIPPED: stage build total $10.2 reached ceiling $9.5 (exit code 3)

$ kineti spend check
kineti: TRIPPED: stage build total $10.2 reached ceiling $9.5 (exit code 3)

$ kineti spend reset
kineti: reset requires --i-am-human (breakers are human-only) (exit code 2)

$ kineti spend reset --i-am-human
breaker reset by human (exit code 0)

Key Pillars

1. Rust core (core-native/)

Rust core with a hash-chained ledger and a commit check. Spend breaker exits with code 3 at 95% of recorded spend.

2. TypeScript Governance Control Plane (bin/, src/)

  • 13-Stage Software Factory: Strict stage-gated lifecycle ensuring specifications, implementations, and test proofs precede release.
  • Transactional SAGA Undo Stack: Newest-first rollback of inverses the agent registered. A failed inverse prints rollback incomplete, exits 1, and that step stays pending.
  • Cryptographic Evidence Binding: Cryptographic SHA-256 receipts bound to exact workspace code fingerprints via kineti-evidence.ts.
  • Apple HIG Visual Companion: Local web dashboard built with Apple Human Interface Guidelines (78 KB HTML, 15 KB gzipped, zero runtime JS frameworks).
  • Universal Model Context Protocol (MCP): 14 native governance tools exposed to Cursor, Claude Code, Antigravity, and Codex.

3. Verified Test Counts & Evaluation Roadmap

  • What is verified today: 191 TypeScript governance tests and 251 native Rust tests (unit plus integration suites), 0 failures (442 total passed tests), bound to workspace code fingerprints through delimited SHA-256 evidence receipts (bin/kineti-evidence.ts).
  • Frontier figures in src/harness/benchmark.ts are design targets, not measured results: the ALE 76.4% pass rate, SWE-bench 4.2 min MTTR, and $0.31 per-outcome numbers are goal constants for the evaluation program. They have not been produced by empirical runs.
  • Planned, not built: a public set of 100 hostile tool calls. Nothing else in this list is shipped.

Quickstart

1. Install via npm

Prerequisite: The CLI is distributed on npm and runs on Node.js (>= 18), but requires Bun (>= 1.1) installed on the system for governance execution (curl -fsSL https://bun.sh/install | bash).

# Install globally (latest)
npm install -g kineti

# Or pin to the current stable release
npm install -g kineti@0.3.9

# Or run directly with npx
npx kineti --help

2. Connect to Your AI Editor or Agent Host

Run Kineti as an MCP server in your editor for test receipts, registered rollback, and a spend log with a cap. The agent reports each model call and its cost. Kineti adds up what is reported. At 95% of $50 ($47.50) the log command exits with code 3. Your agent or hooks need to act on that code. Kineti does not stop the agent itself yet.

Automatic Setup for All Hosts

Run Kineti's auto-configurator in your project directory:

kineti init

This detects your installed hosts (Claude, OpenCode, Codex, Cursor, Antigravity, Gemini, fx.sh), copies the 17 workflow skills into each one, writes the ~/.kineti/repo pointer, and prints the safety-hook block to paste into your host settings. Use kineti init --host <name> to install into a single host, or kineti init --install-root to add the project rule files.

MCP server config is not written automatically. Add it with the manual step below for your editor.

Manual Configuration by Editor

Claude Code (CLI):

claude mcp add kineti npx -y kineti mcp

Cursor: Add to your project's .cursor/mcp.json or Cursor Settings $\to$ Features $\to$ MCP:

{
  "mcpServers": {
    "kineti": {
      "command": "npx",
      "args": ["-y", "kineti", "mcp"]
    }
  }
}

Windsurf uses a different path: ~/.codeium/windsurf/mcp_config.json, with the same mcpServers JSON.

OpenCode:

opencode mcp add kineti -- npx -y kineti mcp

Or add the block below to ~/.config/opencode/opencode.jsonc:

{
  "mcp": {
    "kineti": {
      "type": "local",
      "command": ["npx", "-y", "kineti", "mcp"]
    }
  }
}

Confirm with opencode mcp list.

Codex (CLI): Add to ${CODEX_HOME:-$HOME/.codex}/config.toml:

[mcp_servers.kineti]
command = "npx"
args = ["-y", "kineti", "mcp"]

Confirm Codex sees Kineti:

codex mcp list

Kineti should appear in the list.

Google Antigravity: Install the Kineti skills into Antigravity:

kineti init --host antigravity

Gemini uses the same installer:

kineti init --host gemini

Neither host ships an MCP config block here, so connect the MCP server through your editor's generic MCP settings with the fields in the next section.

Fx.sh: Install skill rules directly to your fx environment:

kineti init --host fx

Claude Desktop: Add to ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows):

{
  "mcpServers": {
    "kineti": {
      "command": "npx",
      "args": ["-y", "kineti", "mcp"]
    }
  }
}

Cline / Roo Code: Add a stdio MCP server in settings (Cline: .clinerules/mcp_settings.json, Roo Code: .roo/mcp_settings.json):

  • Server Name: kineti
  • Command: npx
  • Args: ["-y", "kineti", "mcp"]

3. Core Governance Commands

# Start the visual companion dashboard (Apple HIG)
kineti companion
# Open http://127.0.0.1:8788

# Start the MCP governance server directly
kineti mcp

# Check spend circuit breaker status ($50 default ceiling)
kineti spend check

# Run tests and save cryptographic proof receipt
kineti test -- echo hello

# Verify cryptographic test evidence freshness
kineti test check --label test

# Run stage-agnostic CI verification
kineti ci

4. Native Rust Engine & Crates.io

All 8 native crates are published on crates.io:

# Add native core nervous system to your Rust project
cargo add kineti-core

# Or install the native CLI binary directly
cargo install kineti-cli@0.3.9

# Run all 251 native Rust unit and integration tests locally
cargo test --manifest-path core-native/Cargo.toml

# Run the 5 native verification demo flows
cargo run --package kineti-cli -- test-all

Repository Structure

kineti/
├── bin/                 # TypeScript Governance CLI tools (single router: kineti.js)
│   ├── kineti.ts        # CLI router source (spend, saga, evidence, companion, mcp, ci)
│   ├── kineti-spend.ts  # Self-reported spend circuit breaker ($50 ceiling, exit code 3, trips on recorded totals)
│   ├── kineti-saga.ts   # LIFO undo stack & transactional rollback
│   ├── kineti-evidence.ts # Delimited SHA-256 test proofs bound to git tree hashes
│   ├── kineti-companion.ts # Apple HIG visual companion server (loopback only)
│   └── kineti-mcp.ts    # Model Context Protocol (MCP) server
├── core-native/         # Pure Rust Nervous System Workspace (8 crates, 0 external dependencies)
│   ├── Cargo.toml       # Workspace manifest
│   └── crates/
│       ├── kineti-core/ # Double-buffered snapshots, HLC, Kernel, Commit Gate
│       ├── kineti-memory/ # Epistemic Engine, Multi-scope context, Tombstones
│       ├── kineti-reflex/ # Fast sensory classification & emoji reflexes
│       ├── kineti-connectors/ # Protocolized connectors & permission gating
│       ├── kineti-actions/ # Action execution & confirmation gates
│       ├── kineti-gateway/ # Messaging webhooks & bridge
│       ├── kineti-harness/ # Outcome Verification Tickets (OVT) & Shadow workspaces
│       └── kineti-cli/  # Standalone native CLI binary
├── src/                 # Shared TypeScript libraries (governance, scheduler, security)
├── skills/              # 17 agent workflow skills (installed by setup.sh)
├── hosts/               # 7 editor configurations (Claude, Cursor, Codex, OpenCode, Gemini, Antigravity, fx.sh)
├── hooks/               # 6 hook text blocks for host setup
├── public/              # Static documentation & legal assets
├── website/             # Static landing page (index.html plus video poster assets)
├── docs/                # Architecture specifications & security reports
│   ├── README.md        # Docs index
│   ├── PLAN.md          # Canonical production architecture spec
│   ├── ARCHITECTURE.md  # Rust core internals (not the CLI pitch)
│   ├── research/        # Research notes, not part of the CLI
│   ├── SECURITY_REPORT.md # Security audit & origin gating analysis
│   ├── TUTORIAL-first-run.md # Developer quickstart
│   ├── HOWTO-daily-loop.md # Daily operating loop
│   ├── SWARM_COORDINATION_AND_IDENTITY.md # Multi-agent identity & signing
│   └── MULTI_REPO_FLEET_AND_INTEGRATIONS.md # Fleet and integration design
├── tests/               # 191 TypeScript governance & causal test suites
├── .github/             # GitHub Actions CI, issue forms, PR template, Dependabot
├── AGENTS.md            # Universal rules for AI agents in this repository
├── SECURITY.md          # Vulnerability disclosure policy & SLAs
├── CONTRIBUTING.md      # Development setup, testing, and DCO sign-off
├── LICENSE              # MIT License
└── package.json         # kineti@0.3.9 npm package manifest

Verification & Safety Properties

Today Kineti provides local ledger tooling, spend circuit breakers, and evidence verification that agents invoke during their lifecycle (conventions in hooks/ plus self-reported proofs via kineti-spend.ts and kineti-evidence.ts). An in-line MCP proxy gate with deterministic allow/ask/deny interception is in active sprint.

  • Safe Rust: #![forbid(unsafe_code)] enforced across all critical crates.
  • Spending Ceiling: $50.00 default cap per project, settable at mirror time ($1-$1000); tooling exits with code 3 at 95% of recorded totals.
  • Cryptographic Proof Binding: Test runs recorded as SHA-256 evidence receipts bound to the exact code fingerprint.
  • Clean No over Dirty Yes: Agents report genuine impossibilities clearly rather than silently violating budget or counterparty boundaries.
  • Planned, not built: a public set of 100 hostile tool calls. Nothing else in this list is shipped.

Documentation

For full architecture deep-dives and research treatises, refer to docs/README.md.

Agent rules

If you are an AI agent working in this repo, read AGENTS.md first. It holds all rules, workflows, memory spec, and program references in one file.

License

Distributed under the MIT License. See LICENSE for more information.

Contributing

Humans and agents follow the same steps in CONTRIBUTING.md: setup, tests with proof, money rules, and the ship checklist.

Contact

Keywords

ai-agents

FAQs

Package last updated on 02 Oct 2026

Related posts