StateKnot
Docs · Start Overview Choose the right entry point and understand the pre-alpha boundary. Docs · Start Getting started Install the pinned toolchain and validate the repository locally. Docs · Start Core contract examples Compile the first Agent, typed Tool, Model stream, and explicit protocol mapping without runtime dependencies. Docs · Start Typed Agent Generate and pin typed schemas, then bind the first-party OpenAI and Anthropic adapters. Docs · Start In-process Agent Run a typed Agent without HTTP while preserving PostgreSQL durability, authorization, recovery, and owned roles. Docs · Start Durable admission Atomically commit authenticated intent, database time, the first event, and the initial checkpoint. Docs · Start Durable runs and results Submit with a durable ingress key, recover the original run, and read a verified public result. Docs · Understand Compile a graph Build a schema-pinned graph, validate its topology, and freeze its canonical digest. Docs · Understand Subgraphs and loops Compose shared-state subgraphs, finite loops, and explicit recovery-safe return paths. Docs · Understand Skill composition Choose capability bundles, shared-state subgraphs, durable child runs, and guarded MCP Skills without creating a second runtime. Docs · Understand Durability model Learn how journal, checkpoint, lease, fence, and recovery evidence fit together. Docs · Understand Durable Graph runtime Register exact executable code, replay noninitial state, and drive deterministic bounded sibling batches under one fence. Docs · Understand Durable Agent Loop Commit lifecycle handoffs and execute one tenant-scoped durable scheduling quantum. Docs · Understand Durable invocations Execute exact model and tool attempts with durable starts, staged ordered Tool coordination, streaming validation, and no-dispatch terminal recovery. Docs · Understand Provider-native Agent Compile and operate the durable multi-turn graph with bounded output repair, ordered parallel read-only Tools, write barriers, policy, accounting, and cancellation evidence. Docs · Integrate Local Rust Tools Generate digest-pinned schemas, register typed local code, and preserve the durable invocation boundary. Docs · Integrate AgentService v1 Authorize and expose exact durable Agent revisions through the versioned embedding boundary. Docs · Integrate Agent HTTP v1 Submit, recover, read and cancel through authenticated bounded JSON HTTP. Docs · Integrate General MCP Tool client Discover and call bounded stateless MCP 2026-07-28 Tools with JSON/SSE, OAuth, custom headers, and mediated MRTR. Docs · Integrate MCP OAuth client Bind one MCP resource to challenge-driven discovery, PKCE, issuer validation, durable credentials, and bounded replay. Docs · Integrate MCP Remote Tool Bind one strict stateless MCP 2026-07-28 Tool with pinned identity, schemas, durable dispatch, and reconciliation. Docs · Integrate MCP Server profile Expose bounded Tools, Resources, Prompts, Completion, and MRTR behind the strict stateless production boundary. Docs · Integrate MCP Skills Publish and activate Final SEP-2640 static Skills with immutable manifests, origin-scoped approval, and verified lazy reads. Docs · Integrate MCP conformance status See the frozen official runner inventory, implemented evidence, and exact boundary of current MCP claims. Docs · Integrate A2A 1.0 Client Discover and pin one agent, call all eleven operations, and reconcile durable unknown sends only through attested remote guarantees. Docs · Integrate Durable artifact storage Materialize terminal A2A parts into immutable PostgreSQL metadata and private integrity-checked object bytes. Docs · Integrate A2A 1.0 Server Expose bounded HTTP+JSON and JSON-RPC/SSE through identity-first policy and a durable service contract. Docs · Integrate A2A conformance status Inspect the frozen official TCK, audited harness patch, exact result, and server-only claim boundary. Docs · Operate Fair scheduling Configure replica-safe weighted tenant selection, exact starvation bounds, rollout, and retention. Docs · Operate PostgreSQL provider Configure, migrate, verify, and test the implemented durability provider. Docs · Operate Host qualification Record bounded capacity, recovery and fault evidence without turning CI into a production SLO claim. Docs · Project Versioning and releases Pin the public alpha exactly and understand compatibility, MSRV, durable-data, and release gates. Docs · Project Implementation status See what is implemented, in progress, and deliberately not claimed. Home Architecture map What exists, what is active, and what remains planned. Home Current cut Implemented slices and explicit gaps. Home Roadmap The path from contracts to a qualified v1. Repository Source code StateKnot/StateKnot on GitHub. Repository RFCs Draft architecture and durable execution contracts. Repository Security policy Private vulnerability reporting and support policy.
↑↓ navigate ↵ open 39 results

Pre-alpha documentation

Serve A2A 1.0 without leaking wire types.

Expose HTTP+JSON and JSON-RPC/SSE through bounded StateKnot contracts, authorization-first policy, explicit admission, and a durable application interface.

Keep identity ahead of parsing

  1. Validate shutdown state, Host, Origin, path, content type, and body ceiling.
  2. Acquire process-local request capacity.
  3. Authenticate Bearer credentials before parsing the request body.
  4. Decode and validate the bounded A2A operation.
  5. Authorize the decoded operation before task or push-config lookup.
  6. Apply caller-owned, replica-wide quota admission.
  7. Execute the durable service and bound the unary response or full stream.

Agent Card discovery is the sole public route. It includes cache validators, and startup fails if its capabilities or interface URLs disagree with the mounted service.

One application contract, two bindings

SurfaceHTTP+JSONJSON-RPCDurable obligation
Send / get / listYesYesIdempotency, tenant-scoped projection, stable cursors
Stream / subscribeSSESSESnapshot then committed ordered events
CancelYesYesDurable intent and race-safe lifecycle fence
Push config CRUDYesYesEncrypted secrets, egress policy, transactional outbox
Extended Agent CardYesYesAuthenticated caller-scoped projection

StateKnot owns and bounds Agent Cards, messages, parts, tasks, artifacts, updates, and push configuration. The pinned official SDK remains a private wire adapter. Unknown fields are ignored as ProtoJSON requires; invalid enums, lifecycle combinations, versions, routes, media, and limits fail closed.

Build once at startup

Rust · production assembly boundary 
let options = A2aServerHttpOptions::new()
    .with_allowed_authorities(["agents.example.com"])?
    .with_allowed_origins(["https://console.example.com"])?
    .with_limits(1_048_576, 1_024, 512)?
    .with_timeouts(Duration::from_secs(30), Duration::from_secs(60))?
    .with_maximum_stream_events(16_384)?
    .with_bearer_challenge("Bearer realm=\"stateknot-a2a\"")?;

let shutdown = CancellationToken::new();
let server = A2aServer::new(
    card,
    authenticator,
    authorizer,
    shared_admission,
    durable_task_service,
    options,
    shutdown.clone(),
)?;

axum::serve(listener, server.router())
    .with_graceful_shutdown(shutdown.cancelled_owned())
    .await?;

Implement A2aServerAuthenticator, A2aServerAuthorizer, A2aServerAdmissionControl, and A2aTaskService with production infrastructure. TLS and trusted proxy termination stay outside this router; configure the exact authority seen by the application.

Do not substitute process memory for durability

A production task service deduplicates message identity durably, maps opaque task IDs within one tenant, pages from a stable snapshot, streams committed journal evidence, commits cancellation intent, encrypts push credentials, rejects unsafe destinations, and delivers from a transactional at-least-once outbox. The repository's in-memory fixture exists only for deterministic TCK scenarios.

Read the full production checklist and the exact conformance boundary before exposing traffic or publishing compatibility claims.