SDK beta evaluation
View .mdThe beta evaluation tests whether coding agents can install the package, follow Kismet’s server/browser security boundary, and build against Developer API v0.7 without hand-written HTTP clients.
Prerequisites
Section titled “Prerequisites”- An invitation to the SDK repository, and a local checkout of it. This is the one gated part of the platform.
- Node.js and npm. The repository currently declares Node 18 or newer; the supported public Node/npm matrix is still release work.
- A disposable application for agent testing.
- No production Kismet credential is required or expected.
1. Verify the repository
Section titled “1. Verify the repository”From the repository root:
npm cinpm run sdk:verifyThe verification command:
- builds and type-checks the SDK;
- runs its unit tests;
- packs
@kismet-tech/sdk@0.1.0-beta.0; - installs the tarball into a clean temporary consumer;
- runs
kismet initand verifies it preserves existingAGENTS.mdcontent; - performs a fixture-backed entity read;
- compiles against the installed TypeScript declarations.
Expected artifact:
artifacts/kismet-tech-sdk-0.1.0-beta.0.tgz2. Prepare a disposable local application
Section titled “2. Prepare a disposable local application”mkdir kismet-sdk-evaluationcd kismet-sdk-evaluationnpm init -ynpm install @kismet-tech/sdk@beta# or install the exact locally verified artifactnpm install /absolute/path/to/Kismet-SDK/artifacts/kismet-tech-sdk-0.1.0-beta.0.tgznpx kismet initCommit or save the generated AGENTS.md, Kismet skill, Cursor rule, agent documentation, and conformance workflow before asking an agent to build.
3. Give the builder a constrained task
Section titled “3. Give the builder a constrained task”Use this prompt with Claude Code or Codex:
Build a branded vacation-rental site using the installed Kismet SDK. Read and follow
AGENTS.mdand the Kismet skill. Use@kismet-tech/sdk/serverfor collection and rental reads,@kismet-tech/sdk/nextfor guest-account BFF routes, and@kismet-tech/sdk/reactfor credential-free browser UI. Do not expose the server key or guest tokens, and do not write a raw Kismet fetch helper. Build the project, run Kismet conformance, and record any missing DTO, operation, or documentation.
4. Test with Lovable or another remote builder
Section titled “4. Test with Lovable or another remote builder”Install @kismet-tech/sdk@alpha directly when the builder supports npm dependencies. Copying the verified tarball into a private disposable repository remains a deterministic fallback:
vendor/kismet-tech-sdk-0.1.0-beta.0.tgzReference it from that repository’s package.json:
{ "dependencies": { "@kismet-tech/sdk": "file:vendor/kismet-tech-sdk-0.1.0-beta.0.tgz" }}Run npm install and npx kismet init, commit the generated instructions, and then connect the private repository to the remote builder. Do not place a Kismet secret or production API URL in the repository or builder prompt.
5. Score the result
Section titled “5. Score the result”Record whether the builder:
- discovers
createKismetClientwithout creating raw HTTP helpers; - uses only shipped entity methods;
- injects fixture transport instead of inventing a live service;
- preserves application UI ownership;
- emits schema.org, graph links,
llms.txt, and crawler policy; - understands and fixes
kismet checkdiagnostics; - identifies missing SDK types or documentation precisely;
- describes the npm package as a beta and respects the access-controlled API boundary.
6. Return useful evidence
Section titled “6. Return useful evidence”For each evaluation, capture:
- builder and model version;
- prompt and generated repository commit;
- install, build, test, and conformance output;
- time to first successful build;
- agent retries or manual corrections;
- missing symbol, fixture, instruction, and error-message gaps;
- a short ship/no-ship recommendation for the next alpha iteration.
Current limitations
Section titled “Current limitations”- The beta npm tag is not published until the clean-consumer and live deployment gates pass.
- General credential issuance and public API hosting are not available.
- The docs request console is mocked and must not be treated as API evidence.
- LIVE transaction/payment writes and the public fixture package are not shipped.
- The external support model and compatibility policy are not final.