I build production AI agents and contribute to open-source AI infrastructure, MCP servers and SDKs, agent frameworks, and Python tooling.

Open source contributions

Active:

• kagent-dev/doc2vec#94: mcp: run image as numeric non-root user open
• DalgoT4D/webapp#1705 — fix: drop empty reader_options from source config open
• sktime/sktime-mcp#347 — map NaN/Inf to null in sanitize_for_json to keep tool responses JSON-safe open
• shap/shap — type-annotation migration for #3730 (check_untyped_defs): #4445 tf_utils with TFModel Protocol, #4760 plots/_force, #4761 maskers/_image, #4772 plots/_force_matplotlib 4 PRs open
• pgmpy/pgmpy#2225 — timeseries conversion utilities bridging pgmpy ↔ sktime open
• DalgoT4D/DDP_backend#1037 — Airbyte integration test suite open
• avantifellows/portal-backend#84 — feat(rate-limit): SlowAPI rate limiting for critical routes (fixes #62) open
• avantifellows/portal-backend#83 — fix(auth): raise HTTPException in create-access-token (fixes #60) open

Merged / adopted:

• Leeroo-AI/kapso#137: fix: a horizontal rule in a card body no longer ends the body (fixes #133, merged 2026-10-16 by leeroo-coder) merged
• Lamatic/AgentKit#390: feat: add terraform-plan-gate kit, a Lamatic flow that reviews a terraform plan and returns allow, needs-approval or block per resource (merged 2026-09-23 by akshatvirmani) merged
• ag2ai/faststream#2874 — fix(cli): surface YAML and AsyncAPI errors from docs serve (Sehat1137-invited redo of #2858, merged 2026-09-19 by Lancetnik) merged
• sktime/sktime-mcp#515 — guard sanitize_for_json against circular references (fixes #189, squash-merged to main by Shashankss1205 on 2026-09-06 as a26e3d1, so GitHub shows the PR as closed) landed on main as a26e3d1
• dapr/durabletask-go#113 — fix: reset ParentTraceContext on ContinueAsNew to bound per-generation traces (mints fresh W3C root when traced, honors opt-out when not; refs dapr/dapr#10064 with maintainer greenlight, merged 2026-08-03 by JoshVanL) merged
• hyperledger-cello/cello#788 — ci: bump CI to Python 3.11 and refresh deprecated GitHub Actions (merged 2026-07-18 by yeasy) merged
• meshery/meshery — utils.IsClosed cleanup + Broadcast race fixes (#19572, #19580, #19585, #19643); the same fixes landed on master via the maintainer's rewrite a03fd9a0 (#20375) fix adopted in maintainer's rewrite
• msgspec/msgspec#1028 — place null last in anyOf for optional unions in JSON schema (merged 2026-07-09 by Siyet) merged
• modelcontextprotocol/rust-sdk#949 — fix(auth): preserve refresh_token when refresh response omits it (matches python-sdk#2270 fix; fixes #921, merged 2026-07-02 by @DaleSeo) merged
• 0xPlaygrounds/rig#1990 — fix(ollama): omit think when unset so the model default applies (fixes #1970, merged 2026-07-01 by @gold-silver-copper) merged
• vllm-project/aibrix#2296 — fix(runtime): validate lora_name in ArtifactDelegationService to prevent path traversal in artifact loader (merged 2026-06-09 by Jeffwan) merged
• Kuadrant/mcp-gateway#925 — fix(mcp-router) make ExtProcServer.RoutingConfig swap race-free with atomic.Pointer (merged 2026-06-30 by Patryk-Stefanski) merged
• Kuadrant/mcp-gateway#924 — fix(session) bound JWTManager.Terminate cache deletion with a 5s timeout (merged 2026-06-11 by jasonmadigan) merged
• kagent-dev/kagent#1791 — fix(controller): return error instead of panicking on unknown auth mode merged
• pepperoni21/ollama-rs#336 — feat: add OllamaBuilder; deprecate host+port constructors merged
• pepperoni21/ollama-rs#337 — Relax Tool::call future bound to Send merged
• sktime/sktime-mcp#273 — cap MCP data-handle accumulation with LRU eviction (fixes #191) merged
• kagent-dev/kagent#1814 — fix(cli): correct MCP secrets sync apply behavior and thread cobra ctx merged
• kagent-dev/kagent#1787 — fix(app): wire signal-aware context through controller startup merged
• shap/shap#4436 — type annotations for _random (first step of #3730 check_untyped_defs migration) merged
• python-poetry/poetry#10908 — fix(add): include pyproject.toml path in "already present" message merged
• python-poetry/poetry#10909 — fix(init): validate version constraint in interactive prompt merged
• ag2ai/ag2#2872 — docs: add Gemini and Azure OpenAI tabs to Quick Start merged
• aaif-goose/goose#9123 — fix: omit max_tokens for OpenAI-compatible requests when unset merged
• PrefectHQ/fastmcp#4118 — fix(http): terminate active streamable-HTTP transports before lifespan shutdown merged
• ag2ai/ag2#2794 — fix: align optional-extras pins so uv sync resolves merged
• PrefectHQ/fastmcp#4101 — fix(tool_transform): hoist $defs to schema root when ArgTransform introduces them merged
• PrefectHQ/fastmcp#4100 — fix(auth): silence authlib.jose DeprecationWarning at JWT import merged
• ag2ai/ag2#2782 — Fix LLMConfig for 5 notebooks (6th in the migration series) merged
• aaif-goose/goose#9035 — fix(openai): accept null tool_call arguments in streaming chunks merged
• GitoxideLabs/gitoxide#2607 — gix-command: pass shell name (not --) as $0 to <shell> -c merged
• GitoxideLabs/gitoxide#2575 — document why each fixture archive is .gitignored merged
• python-poetry/poetry#10835 — docs: VCS ignore interaction with packages config merged
• tattle-made/feluda#588 — UMAP dimension reduction merged
• tattle-made/feluda#589 — unit tests for core operator merged
• Noethys/Noethys#84 — SQL injection vulnerability fix fixes adopted manually
• 0xPlaygrounds/rig#1556 — Chat trait &mut Vec<Message> round-trip (issue closed by maintainer's #1733) fix adopted in maintainer's PR
• OpenHands/OpenHands#14307 — fix(frontend): use onSelectionChange for Language dropdown dirty-flag (maintainers shipped the same fix in #14812 after reviewing this PR) fix adopted in maintainer-merged PR

Issues reported (recognized):

• nirholas/XActions#35: [bug] CLI crashes at load: await in non-async SIGINT handler (owner confirmed the diagnosis, credited it and closed as resolved)
• sktime/sktime-mcp#189: [BUG] sanitize_for_json crashes on circular references (RecursionError) (maintainer reproduced it on main, fixed by my #515, landed as a26e3d1)
• hyperledger-cello/cello#787: ci: bump CI to Python 3.11 and refresh deprecated action versions (closed as completed by my #788, merged by yeasy)
• Noethys/Noethys#83: Correction des vulnérabilités d'injection SQL dans GestionDB.py (owner integrated the fixes manually, see #84)
• sktime/sktime-mcp#191: [BUG] Unlimited data handle accumulation: no size limit or eviction (closed as completed by my #273)
• shap/shap#4480: [BUG] Same type(x) is tuple anti-pattern as #4372 in gradient/deep explainers and partial_dependence plot (fixed by @neha222222's #4508, merged 2026-05-27 by CloseChoice)
• sktime/sktime-mcp#190: [BUG] Inconsistent response format: validate_pipeline and catch-all missing success field (fixed in #217, closed as completed by Shashankss1205)

Past contributions:

• aaif-goose/goose#10365 — feat(acp): paginate replayed messages in load_session (ACP-path successor to #9473, which died when the REST session endpoint was removed) closed by DOsinga: the linked issue targeted the removed REST endpoint, and ACP load_session replay needs its own design
• modelcontextprotocol/inspector#1296 — fix(server): redact sensitive env vars and headers from connection logs closed by cliffhall after three review rounds: the leak was confirmed as legitimate, but deprecated v1 only takes high-severity security fixes
• sktime/sktime-mcp#114 — seasonality detection + structural break diagnostics for sktime's MCP layer closed by Shashankss1205: the server was consolidated to 26 tools (#270) and maintainers prefer exposing sktime's own estimators over task-specific tools
• aaif-goose/goose#10094 — feat(hooks): emit ToolDefinitionChanged on MCP tool schema drift + TOFU fingerprinting closed by DOsinga — goose tracks the official agent-builders hooks standard; classifier belongs as a skill/plugin (see #9126)
• Kuadrant/mcp-gateway#923 — fix(broker) take RLock in findServerByName and use MCPName() in log; closed 2026-06-11 because Aman-Cool's parallel fix had already landed on main. Same root cause; hardening direction acknowledged.
• kagent-dev/kagent#1786 — fix(skills-init): install openssh-client so ssh-keyscan is available closed unmerged
• kagent-dev/kagent#1825 — test(migrations): add data-preserving upgrade test for workload_type backfill closed-stale by github-actions after 20 days inactivity
• GitoxideLabs/gitoxide#2606 — gix-url: accept impl Into<&BStr> in parse closed by author — signature widening broke 34 downstream .into() callers; awaiting maintainer guidance on preferred shape
• PrefectHQ/fastmcp#4172 — wrap pydantic ValidationError as fastmcp ValidationError closed by maintainer — discussion-on-issue required first
• PrefectHQ/fastmcp#4171 — event_store concurrent eviction guard closed by maintainer — preferred fix is upstream in py-key-value-aio
• ag2ai/faststream#2858 — feat(cli): pluggable yaml parser for docs serve closed by maintainer — over-scoped (see #2874 redo)
• ag2ai/faststream#2864 — re-export BrokerUsecase from top-level package closed by maintainer
• hynek/structlog#810 — LogRecord.args timing in ProcessorFormatter closed — supported path is pass_foreign_args=True
• avantifellows/portal-backend#73 — fix create-access-token route bug closed — not reviewed
• proteanhq/protean#504 — FastAPI server integration closed — superseded by maintainer's version
• dbt-labs/dbt#12815 — warn when load_result returns None during parse phase closed by author — dbt-core's main moved to a Rust rewrite; the Python file this touched no longer exists on any actively-merged branch
• sktime/sktime#9876 — proposed MCP-native agentic estimator for forecasting pipeline selection closed by author — AutoResearchForecaster shipped via a separate issue thread, covering the same scope
• sktime/sktime#9846 — proposed agentic model selection benchmark closed by author — same reasoning, AutoResearchForecaster shipped
• aaif-goose/goose#9289 — fix(desktop): reuse existing window for recipe deep links closed by maintainer — a follow-up bug report sat unaddressed for 2 weeks after several rounds of rebases/retests; real bug, successor PR not yet opened
• modelcontextprotocol/inspector#1295 — fix(client): fully collapse Output Schema and Meta panels in ToolsTab closed by maintainer — full v1-backlog security triage (125 PRs), v1 now frozen except genuine security fixes; not a rejection of the work
• modelcontextprotocol/inspector#1580 — feat(client): add credentials: 'include' toggle for cookie-authenticated MCP servers (fixes #1454) closed by maintainer — same v1-backlog triage sweep, declined on security grounds
• PlanetRead/Video-Watch-Timer#6 — dark mode theme support closed by author — pinged reviewers twice over a year with no response, merge conflicts piled up; reopen invited
• myhealthconnectsociety/project-healthcare#178 — interface protocol fix (C4GT) closed by author — 15 months of zero maintainer engagement beyond bots; reopen invited
• kagent-dev/kagent#2134 — fix(helm): unpin runAsUser/runAsGroup in grafana-mcp/querydoc subcharts (fixes #2079) closed by stalebot — work was complete (safe pinned defaults kept, override documented, upstream issue opened for the real fix); asked maintainers to reopen

Get in touch: sarthak.bhardwaj21b@iiitg.ac.in