$ whoami

Tarek Kharsa.

Full-stack software engineer. TypeScript by trade, Rust by obsession. I like small tools with sharp edges: CLIs, developer infrastructure, and the plumbing that makes AI agents safe to let loose on a machine.

Selected work

agentstack

Rust

A local control plane for AI coding agents. One manifest defines skills, MCP servers, and settings; agentstack compiles it across 13 agent CLIs, trust-gates every capability, firewalls egress, and audits every tool call. Nothing runs until it's trusted — and nothing trusted runs unobserved.

devsweep

Go

A CLI that hunts down the gigabytes of node_modules, build caches, and stale toolchains that developer machines silently accumulate.

webauthn examples

TypeScript

Working front-end and back-end reference implementations of passkey authentication with WebAuthn, written while figuring out the spec so you don't have to.

Now

Deep in Rust, building agentstack's enforcement layer: sandboxed runtimes, an egress proxy that compiled policy actually governs, and an audit trail you can hand to a security review.

Before that: years of shipping TypeScript — React front-ends, Node back-ends, and the occasional detour through PHP, Java, and Flutter.