feat: generate marketplace catalog from manifests

.github/workflows/validate.yml

@@ -38,3 +38,7 @@ jobs:
           python -m pytest tests/test_validate_compatibility.py -q
       - name: Check generated integration index
         run: python scripts/generate_integration_index.py --check
+      - name: Test and check generated Marketplace catalog
+        run: |
+          python -m pytest tests/test_generate_marketplace_catalog.py -q
+          python scripts/generate_marketplace_catalog.py --check

CONTRIBUTING.md

@@ -13,6 +13,11 @@ integrations/<vendor>-<product>/
 
 Start by copying `integrations/_template/`.
 
+The `marketplace` block in `integration.yaml` controls discovery in the public
+[AgenTrust Marketplace](https://agentrust-io.com/marketplace/). After editing a
+manifest, run `python scripts/generate_marketplace_catalog.py`; CI rejects a
+stale catalog so the repository index and public Marketplace cannot silently drift.
+
 ## Hard rules
 
 These come from operating large OSS governance projects. PRs that break them are closed, repeat offenses are banned, and merged integrations that turn out to break them are removed:

claude-code/integration.yaml

@@ -9,6 +9,12 @@ maintainer:
 repository: https://github.com/agentrust-io/integrations
 license: Apache-2.0
 tier: community
+marketplace:
+  display_name: Claude Code
+  category: Developer tools
+  mark: CC
+  featured: 1
+  keywords: [Claude, session, drift]
 trace_conformance_level: 0
 trace_roles:
   - record-producer

integrations/_template/integration.yaml

@@ -11,6 +11,11 @@ maintainer:
 repository: https://github.com/example/example-product
 license: Apache-2.0
 tier: community   # set by maintainers during review; submissions start here
+marketplace:
+  category: Developer tools  # choose the closest category allowed by the schema
+  mark: EX                   # 1-3 letters/numbers shown when no logo is available
+# featured is maintainer-curated; do not add it to new submissions
+# keywords: [framework, use-case]
 # Required if you emit or consume TRACE records:
 # trace_conformance_level: 1
 # trace_roles:

integrations/aeoess-aps/integration.yaml

@@ -11,6 +11,10 @@ repository: https://github.com/aeoess/agent-passport-python
 homepage: https://agent-passport.org
 license: Apache-2.0
 tier: community
+marketplace:
+  category: Identity & trust
+  mark: AP
+  keywords: [passport, identity, policy]
 # Level 0 passes with an explicit TR-SIG-005 UNVERIFIED finding: the graded
 # artifact is the unsigned record, so trace-tests reports it as not
 # cryptographically verified. The signed form is written alongside it and

integrations/comply54/integration.yaml

@@ -12,6 +12,10 @@ repository: https://github.com/comply54/comply54
 homepage: https://comply54.io
 license: Apache-2.0
 tier: community
+marketplace:
+  category: Compliance
+  mark: C5
+  keywords: [Africa, regulation, compliance]
 trace_conformance_level: 0
 trace_roles:
   - record-producer

integrations/decisionassure/integration.yaml

@@ -8,6 +8,10 @@ maintainer:
 repository: https://github.com/a1k7/DecisionAssure-Runtime-Governance
 license: MIT
 tier: community
+marketplace:
+  category: Security & policy
+  mark: DA
+  keywords: [runtime, governance, policy]
 trace_roles:
   - record-producer
 trace_conformance_level: 0

integrations/langchain/integration.yaml

@@ -10,6 +10,11 @@ maintainer:
 repository: https://github.com/agentrust-io/integrations
 license: Apache-2.0
 tier: community
+marketplace:
+  category: Frameworks
+  mark: LC
+  featured: 3
+  keywords: [callback, framework, tools]
 trace_roles:
   - record-producer
 trace_conformance_level: 0

integrations/llamaindex/integration.yaml

@@ -8,6 +8,11 @@ maintainer:
 repository: https://github.com/agentrust-io/integrations
 license: Apache-2.0
 tier: community
+marketplace:
+  category: Frameworks
+  mark: LI
+  featured: 4
+  keywords: [instrumentation, framework, events]
 trace_roles:
   - record-producer
 trace_conformance_level: 0

integrations/nobulex/integration.yaml

@@ -13,5 +13,9 @@ repository: https://github.com/arian-gogani/nobulex
 homepage: https://nobulex.com
 license: MIT
 tier: community
+marketplace:
+  category: Evidence & receipts
+  mark: NX
+  keywords: [receipts, Ed25519, evidence]
 trace_roles:
   - external-evidence-source

integrations/openshell/integration.yaml

@@ -9,6 +9,11 @@ repository: https://github.com/agentrust-io/integrations
 homepage: https://github.com/NVIDIA/OpenShell
 license: Apache-2.0
 tier: community
+marketplace:
+  category: Security & policy
+  mark: OS
+  featured: 5
+  keywords: [OpenShell, NVIDIA, OCSF]
 trace_roles:
   - record-producer
 trace_conformance_level: 0

integrations/otel-genai/integration.yaml

@@ -8,6 +8,11 @@ maintainer:
 repository: https://github.com/agentrust-io/integrations
 license: Apache-2.0
 tier: community
+marketplace:
+  category: Observability
+  mark: OT
+  featured: 6
+  keywords: [OpenTelemetry, spans, telemetry]
 trace_roles:
   - record-producer
 trace_conformance_level: 0

integrations/ramen-ai-cmcp/integration.yaml

@@ -13,6 +13,10 @@ repository: https://github.com/ramen-ai-dev/ramen-ai-integrations
 homepage: https://ramenai.dev
 license: MIT
 tier: community
+marketplace:
+  category: Evidence & receipts
+  mark: RA
+  keywords: [receipts, exporter, verification]
 trace_conformance_level: 0
 trace_roles:
   - record-producer

integrations/sage-agenttrust/integration.yaml

@@ -14,6 +14,10 @@ repository: https://github.com/l33tdawg/sage-agenttrust
 homepage: https://github.com/l33tdawg/sage
 license: Apache-2.0
 tier: community
+marketplace:
+  category: Security & policy
+  mark: SG
+  keywords: [memory, proxy, consensus]
 # Level the cMCP-RuntimeClaim (envelope) path passes; the bare C-2 TRACE record is not graded
 # by agentrust-trace-tests (LoadError), so it carries no conformance level — see README.
 trace_conformance_level: 0

integrations/sentinel/integration.yaml

@@ -9,6 +9,10 @@ maintainer:
 repository: https://github.com/agentrust-io/integrations/tree/main/integrations/sentinel
 license: MIT
 tier: community
+marketplace:
+  category: Security & policy
+  mark: AS
+  keywords: [fleet, enforcement, detection]
 trace_conformance_level: 0
 trace_roles:
   - record-producer

integrations/shadow-ai/integration.yaml

@@ -12,6 +12,10 @@ maintainer:
 repository: https://github.com/agentrust-io/integrations
 license: Apache-2.0
 tier: community
+marketplace:
+  category: Identity & trust
+  mark: SH
+  keywords: [discovery, undeclared, remediation]
 tested_against:
   cmcp-runtime: "0.2.0"
   agent-manifest: "1.0.0"

integrations/spendguard/integration.yaml

@@ -10,6 +10,10 @@ maintainer:
 repository: https://github.com/m24927605/agentic-spendguard
 license: Apache-2.0
 tier: community
+marketplace:
+  category: Security & policy
+  mark: $G
+  keywords: [budget, spend, cost]
 # Level 0 passes with the explicit TR-SIG-005 UNVERIFIED finding: trace-tests
 # 0.1.0 does not grade signatures on plain trace records (see README).
 trace_conformance_level: 0