@mindburn/helm-ai-kernel
v0.5.17
Published
TypeScript SDK for HELM — fail-closed tool calling for AI agents
Maintainers
Readme
HELM SDK - TypeScript
Typed TypeScript client for the retained HELM kernel API.
Local Install
cd sdk/ts
npm ci
npm run buildPackage metadata declares version 0.5.17 in package.json; this README does
not claim that a registry package has been published.
Local Development
npm ci
npm test -- --run
npm run buildSource Layout
src/client.tsis the hand-maintained HTTP wrapper.src/types.gen.tscontains OpenAPI-derived model types.src/adapters/agent-frameworks.tscontains the source-backed framework adapter helpers.- Protobuf bindings under
src/generated/are generated fromprotocols/proto/withts-protowhen codegen has been run.
Usage
import { HelmClient } from "@mindburn/helm-ai-kernel";
const client = new HelmClient({ baseUrl: "http://127.0.0.1:7715" });
const decision = await client.evaluateDecision({
principal: "example-agent",
action: "read-ticket",
resource: "ticket:123",
});
console.log(decision.verdict); // ALLOW, DENY, or ESCALATERun the first-class local example with make sdk-examples-smoke or directly
from examples/ts_sdk/.
Agent Framework Adapters
The TypeScript SDK includes lightweight adapter helpers for LangGraph, CrewAI, OpenAI Agents SDK, PydanticAI, and LlamaIndex tool-call events. These helpers normalize each framework event into a HELM governance request and submit it through chatCompletionsWithReceipt, preserving the kernel receipt returned in X-Helm-* headers.
import { HelmClient, createAgentFrameworkAdapter, fromOpenAIAgentsToolCall } from "@mindburn/helm-ai-kernel";
const helm = new HelmClient({ baseUrl: "http://127.0.0.1:7714" });
const adapter = createAgentFrameworkAdapter(helm, { model: "helm-governance" });
const result = await adapter.submit(
fromOpenAIAgentsToolCall({
id: "call_123",
function: {
name: "crm.update_customer",
arguments: '{"customer_id":"cus_123","tier":"enterprise"}',
},
}),
);
console.log(result.governance.receiptId);The helpers do not add Microsoft Agent Governance Toolkit as a dependency and do not claim Microsoft certification. They cover the same framework families so HELM can sit behind AGT or another orchestrator as the receipt-bearing enforcement boundary.
Execution Boundary Methods
The client also exposes methods for proof-bearing boundary operations: evidence envelope manifests, boundary records and checkpoints, conformance vectors, MCP quarantine and authorization profiles, sandbox profiles and grants, authz snapshots, approvals, budgets, telemetry export, and coexistence capabilities. These methods keep external envelopes, MCP quarantine decisions, and sandbox grants attached to HELM-native receipts and EvidencePacks.
Release Notes
0.5.17 is the release-hardening patch with the retained OpenAPI client surface and protobuf message bindings.
