Important
Community Preview Release — All packages published from this repository (PyPI, npm, NuGet) are community preview releases for testing and evaluation purposes only. They are not official Microsoft-signed releases. Official Microsoft-signed packages published via ESRP Release will be available in a future release.
This release establishes the compliant publishing infrastructure required for future official Microsoft-signed package releases:
- PyPI publishing migrated from GitHub Actions Trusted Publishers to Azure DevOps pipeline
using
EsrpRelease@11(pipelines/pypi-publish.yml) - npm publishing pipeline created using
EsrpRelease@11with@microsoftscope (pipelines/npm-publish.yml) - GitHub Actions (
publish.yml) now builds and attests packages only — actual publishing is done exclusively through ESRP Release ADO pipelines
All package metadata has been updated to align with Microsoft Python team and npm publishing policies:
Python (PyPI) — 7 packages:
- Author updated to
Microsoft Corporationwith team distribution list email Agent Governance Toolkit Teamadded as maintainer across all packages- License classifier (
License :: OSI Approved :: MIT License) added where missing Community Editionprefix added to all package descriptionsagent-runtimebuild fixed (proper re-export wrapper foragent-hypervisor)
npm — 7 packages:
- All scoped packages renamed to
@microsoft(from@agentmesh,@agent-os, unscoped) - Author set to
Microsoft Corporationacross all packages - License corrected to MIT where mismatched (2 packages had
Apache-2.0) - Repository URLs corrected to
microsoft/agent-governance-toolkit Community Editionprefix added to all package descriptions
NuGet — 1 package:
- Existing ESRP signing configuration retained
Prominent disclaimers have been added to all user-facing documentation:
- Root README, CHANGELOG, PUBLISHING guide
- All 7 Python package READMEs
- All 3 npm package READMEs with user docs
- Both release notes (v1.0.0 and v2.1.0)
- PyPI and npm package descriptions (visible on registry pages)
- New
PUBLISHING.mdat repo root — public-facing guide covering PyPI, npm, and NuGet publishing requirements, metadata standards, and naming conventions - ADO pipeline configurations with placeholder ESRP values ready for onboarding
| Package | Version | Status |
|---|---|---|
agent-os-kernel |
2.2.0 | Community Preview |
agentmesh-platform |
2.2.0 | Community Preview |
agent-hypervisor |
2.2.0 | Community Preview |
agent-runtime |
2.2.0 | Community Preview |
agent-sre |
2.2.0 | Community Preview |
agent-governance-toolkit |
2.2.0 | Community Preview |
agent-lightning |
2.2.0 | Community Preview |
| Package | Version | Status |
|---|---|---|
@microsoft/agentmesh-sdk |
1.0.0 | Community Preview |
@microsoft/agentmesh-mcp-proxy |
1.0.0 | Community Preview |
@microsoft/agentos-mcp-server |
1.0.1 | Community Preview |
@microsoft/agentmesh-copilot-governance |
0.1.0 | Community Preview |
@microsoft/agentmesh-mastra |
0.1.0 | Community Preview |
@microsoft/agentmesh-api |
0.1.0 | Community Preview |
@microsoft/agent-os-copilot-extension |
1.0.0 | Community Preview |
| Package | Version | Status |
|---|---|---|
Microsoft.AgentGovernance |
2.2.0 | Community Preview |
- Official Microsoft-signed releases via ESRP Release (pending onboarding approval)
- PyPI package ownership transfer to
microsoftaccount - npm
@microsoftscope activation via ESRP - NuGet Authenticode + NuGet package signing
See CHANGELOG.md for the complete list of changes.