Skip to content

feat(typescript): Full SDK parity — PolicyEngine + Identity + tests#269

Merged
imran-siddique merged 3 commits intomainfrom
pr-265
Mar 15, 2026
Merged

feat(typescript): Full SDK parity — PolicyEngine + Identity + tests#269
imran-siddique merged 3 commits intomainfrom
pr-265

Conversation

@imran-siddique
Copy link
Member

TypeScript SDK Full Parity (closes #229)

Brings the @agentmesh/sdk\ TypeScript package to full feature parity with the Python and .NET SDKs.

PolicyEngine Parity

  • Rich Policy document model — apiVersion, scope, default_action, agents targeting
  • Expression conditions — equality, inequality, numeric comparisons, \in/
    ot in, boolean, compound \�nd/\or, nested dot paths
  • Conflict resolution — 4 strategies: deny-overrides, allow-overrides, priority-first-match, most-specific-wins
  • PolicyConflictResolver class with full strategy dispatch
  • Rich PolicyDecisionResult — matchedRule, policyName, timing, approvers, rateLimited
  • Rate limiting — e.g. \100/hour\
  • Policy scoping — agent, agents list, wildcard
  • 100% backward compatible with v0.1 flat rules API

AgentIdentity Parity

  • Lifecycle — active/suspended/revoked with state transition guards
  • Capability wildcards — *, \prefix:*\
  • Delegation chains — capability narrowing, depth tracking, parent DID
  • JWK/JWKS — import/export per RFC 7517
  • W3C DID Document export
  • Metadata — name, description, sponsor, organization, expiresAt
  • IdentityRegistry — register, revoke (cascading), query by sponsor, list active

Tests

  • 136 total (57 existing + 79 new parity tests)
  • All passing, zero type errors

Copilot AI and others added 3 commits March 15, 2026 11:55
Replace generic tagline 'Application-level security middleware for autonomous AI agents'
with Option B: 'Runtime governance for AI agents — the only toolkit covering all 10
OWASP Agentic risks with 6,100+ tests'

Also update subtitle to highlight all three key differentiators:
- Agent ACTIONS (not LLM outputs): 'Governs what agents DO, not just what they say'
- OWASP 10/10 coverage (unique to this toolkit)
- One pip install full stack

Resolves: Update repo tagline and positioning for discoverability

Co-authored-by: imran-siddique <45405841+imran-siddique@users.noreply.github.com>
PolicyEngine parity:
- Rich Policy document model (apiVersion, scope, default_action)
- Expression-based conditions (equality, comparison, in/not-in, and/or)
- Configurable conflict resolution (deny-overrides, allow-overrides,
  priority-first-match, most-specific-wins)
- PolicyConflictResolver with full strategy dispatch
- Rich PolicyDecisionResult (matchedRule, policyName, timing, approvers)
- Rate limiting support (e.g., '100/hour')
- Policy scoping (agent, agents, wildcard)
- Backward compatible with v0.1 flat rules API

AgentIdentity parity:
- Lifecycle management (active/suspended/revoked) with state transitions
- Capability wildcards (*, prefix:*)
- Delegation chains with capability narrowing
- JWK/JWKS import/export (RFC 7517)
- W3C DID Document export
- Metadata (name, description, sponsor, organization, expiresAt)
- IdentityRegistry with sponsor indexing and cascade revocation

Tests: 136 total (57 existing + 79 new parity tests), all passing
Types: clean compile, zero errors

Closes #229

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@github-actions github-actions bot added documentation Improvements or additions to documentation tests agent-mesh agent-mesh package size/XL Extra large PR (500+ lines) labels Mar 15, 2026
@imran-siddique imran-siddique merged commit 6992c8c into main Mar 15, 2026
45 checks passed
@github-actions
Copy link

Dependency Review

The following issues were found:

  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 1 package(s) with unknown licenses.
  • ⚠️ 53 packages with OpenSSF Scorecard issues.

View full job summary

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

agent-mesh agent-mesh package documentation Improvements or additions to documentation size/XL Extra large PR (500+ lines) tests

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[High] TypeScript is a first-class gap - cuts out half enterprise market

2 participants