protect-mcp 0.9.4 → 0.9.5

package/CHANGELOG.md

@@ -1,5 +1,27 @@
 # Changelog
 
+## 0.9.5: replayable from scratch
+
+The public demo film (legate.scopeblind.com/record) is now reproducible by
+anyone in 60 seconds, and the CLI answers the first two commands every new
+user types.
+
+- **`sample`.** Seeds a clearly-labeled sample record (fresh Ed25519 keypair,
+  kid `sample-demo`): 8 decisions including one BLOCKED network call and two
+  payments ($0.02 x402-style per-call, $12.50 invoice), plus
+  `demo-tampered.jsonl` with one decision flipped after signing. The receipts
+  are real signed artifacts (same envelope and canonical-JSON preimage as the
+  gate's signer), so `record`, `claim --payment-under`, `verify-claim`, and
+  `anchor-record` work on the folder immediately. Refuses to touch an existing
+  record or signing key; `--force` overrides.
+- **`--version` / `version` / `-V`.** Prints the installed version. Previously
+  these fell through to wrap-mode parsing and errored demanding a `--`
+  separator, which was the first thing many new users saw.
+- **`help` word.** `npx protect-mcp help` prints usage (previously errored).
+  Help and version flags are now only recognized BEFORE the `--` separator, so
+  `protect-mcp -- node server.js --version` wraps that command as intended
+  instead of printing our help.
+
 ## 0.9.4: agent payments get receipts, records get heartbeats, anchors get names
 
 The provenance layer reaches the agentic economy's payment rails (x402), the

package/README.md

@@ -185,6 +185,24 @@ npx protect-mcp claim --no net.egress --anchor
 This is an accountable, position-blind attestation, not full zero-knowledge: it
 reveals the shape, not the content.
 
+## Try it in 60 seconds (no agent required)
+
+Watch the two-minute film at [legate.scopeblind.com/record](https://legate.scopeblind.com/record), then replay it against your own copy:
+
+```bash
+npx protect-mcp sample     # seed a labeled sample record (8 decisions: 1 blocked, 2 payments)
+npx protect-mcp record     # open it: signatures verified in your browser
+
+npx protect-mcp claim --payment-under 100 --anchor --output payments-under-100.json
+npx protect-mcp verify-claim payments-under-100.json
+npx protect-mcp anchor-record
+```
+
+Drop the generated `demo-tampered.jsonl` into the record page to watch a
+post-signing edit get caught. `sample` refuses to touch an existing record, so
+run it in an empty folder. When you are ready for the real thing, wire the gate
+below and the same commands run against your agent's own record.
+
 ## Claude Code hook quickstart
 
 ```bash
@@ -368,6 +386,7 @@ To report a vulnerability, see [SECURITY.md](./SECURITY.md).
 |---------|-------------|
 | `serve` | Start the HTTP hook server for Claude Code (port 9377). `--enforce` runs the restraint self-test first; `--cedar <dir>` and `--policy <path>` select the policy. |
 | `init` | Generate an Ed25519 keypair (`keys/gateway.json`), a config template, and a sample policy. |
+| `sample` | Seed a clearly-labeled sample record (8 decisions: one blocked call, two payments; kid `sample-demo`) plus a tampered copy, so `record`, `claim`, `verify-claim`, and `anchor-record` are replayable from scratch before wiring an agent. Refuses to touch an existing record; `--force` overrides. |
 | `wrap` | Print a protected MCP command or patch Claude Desktop MCP servers. Dry-run by default; use `--write` to update Claude Desktop config. |
 | `dashboard` | Start a local-only dashboard on `127.0.0.1` showing tool inventory, risk, policy coverage, exact-action approvals, receipt chains, and audit export. |
 | `recommend` | Draft a reviewable JSON policy from observed local calls. Dry-run by default; use `--write` to create `protect-mcp.recommended.json`. |