Add TypeScript gateway client

Author: dinpd

.github/workflows/agentid-check.yml

@@ -43,3 +43,26 @@ jobs:
         with:
           manifests: "examples/*.yaml"
           max-risk: "75"
+
+  typescript-sdk:
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        working-directory: sdk/typescript
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: "22"
+          cache: npm
+          cache-dependency-path: sdk/typescript/package-lock.json
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Build SDK
+        run: npm run build
+
+      - name: Test SDK
+        run: npm test

README.md

@@ -92,6 +92,10 @@ jobs:
           max-risk: "75"
 ```
 
+For SaaS runtime integration, see the TypeScript helper in
+[`sdk/typescript/`](sdk/typescript/). It provides `authorizeToolCall`,
+`requestJitGrant`, and `assertAllowed` wrappers for the gateway API.
+
 `gateway` starts a lightweight HTTP authorization gateway for SaaS integration. The gateway exposes:
 
 | Endpoint | Purpose |

sdk/typescript/README.md

@@ -0,0 +1,38 @@
+# AgentID TypeScript Client
+
+Small helper client for calling an AgentID gateway from a SaaS app or agent
+runtime.
+
+```ts
+import { AgentIdClient } from "@agentid/client";
+
+const agentid = new AgentIdClient({
+  baseUrl: "https://agentid-gateway.example.com",
+  token: async () => getAccessTokenFromYourIdP(),
+});
+
+await agentid.assertAllowed("tenant-a", {
+  agent_id: "refund-agent",
+  tool: "zendesk.search_tickets",
+  action: "read",
+  data_from: "zendesk",
+  data_to: "agent_context",
+});
+
+const grant = await agentid.requestJitGrant("tenant-a", {
+  tool: "stripe.create_refund",
+  action: "write",
+  resource: "refund/case-1042",
+  approval_id: "approval-123",
+  user_id: "support-rep-17",
+});
+
+await agentid.assertAllowed("tenant-a", {
+  agent_id: "refund-agent",
+  tool: "stripe.create_refund",
+  action: "write",
+  resource: "refund/case-1042",
+  approved: true,
+  jit_grant_id: grant.jit_grant_id,
+});
+```