@atbash/atbash-langgraph 0.0.5-dev.1 → 0.0.5-dev.2

package/dist/index.d.ts

@@ -1,7 +1,7 @@
 import * as _langchain_core_messages from '@langchain/core/messages';
 import * as _langchain_langgraph from '@langchain/langgraph';
 import { StateGraph } from '@langchain/langgraph';
-import { AtbashClient, AgentAuth, ClientOpts } from '@atbash/sdk';
+import { Atbash, AgentAuth, AtbashOptions } from '@atbash/sdk';
 import * as _langchain_core_tools from '@langchain/core/tools';
 import { z } from 'zod';
 
@@ -15,13 +15,13 @@ declare const AtbashStateAnnotation: _langchain_langgraph.AnnotationRoot<{
 type AtbashState = typeof AtbashStateAnnotation.State;
 
 interface GuardNodeOptions {
-    client: AtbashClient;
+    client: Atbash;
 }
 declare function createGuardNode(opts: GuardNodeOptions): (state: AtbashState) => Promise<Partial<AtbashState>>;
 
 interface AuditNodeOptions {
     agent: AgentAuth;
-    clientOpts?: ClientOpts;
+    clientOpts?: AtbashOptions;
 }
 declare function createAuditNode(opts: AuditNodeOptions): (state: AtbashState) => Promise<Partial<AtbashState>>;
 

package/dist/index.js

@@ -54,6 +54,26 @@ function createGuardNode(opts) {
           atbashConfidence: null
         };
       }
+      if (decision.verdict === "HOLD") {
+        const holdParts = [
+          "Action held for operator review. The agent will not be jailed \u2014 please approve or reject this request from the Atbash dashboard, then ask the agent to try again.",
+          `Reason: ${decision.reason ?? ""}`
+        ];
+        if (decision.toolCallId) holdParts.push(`Tool Call ID: ${decision.toolCallId}`);
+        const holdMessage = holdParts.join("\n");
+        return {
+          messages: toolCalls.map(
+            (toolCall) => new ToolMessage({
+              tool_call_id: toolCall.id,
+              content: holdMessage
+            })
+          ),
+          atbashVerdict: "HOLD",
+          atbashReason: decision.reason ?? "held for review",
+          atbashToolCallId: decision.toolCallId,
+          atbashConfidence: null
+        };
+      }
       return {
         atbashVerdict: "ALLOW",
         atbashReason: decision.reason,
@@ -82,7 +102,7 @@ function createGuardNode(opts) {
 }
 
 // src/nodes/auditNode.ts
-import { judgeAction } from "@atbash/sdk";
+import { Atbash } from "@atbash/sdk";
 
 // src/utils.ts
 function truncateText(value, max = 500) {
@@ -95,11 +115,10 @@ function createAuditNode(opts) {
     const lastMessage = state.messages[state.messages.length - 1];
     const content = typeof lastMessage?.content === "string" ? lastMessage.content : JSON.stringify(lastMessage?.content ?? "");
     try {
-      await judgeAction(
+      const client = new Atbash(opts.agent.privkey, opts.clientOpts);
+      await client.judgeAction(
         truncateText(content, 500),
-        "LangGraph tool execution completed",
-        opts.agent,
-        opts.clientOpts
+        "LangGraph tool execution completed"
       );
     } catch {
     }
@@ -109,7 +128,7 @@ function createAuditNode(opts) {
 
 // src/builder.ts
 import {
-  createAtbashClient,
+  Atbash as Atbash2,
   loadAgent,
   setupTelemetry,
   shutdownTelemetry
@@ -122,10 +141,7 @@ function addAtbashSafety(builder, opts) {
   const privkey = opts.privkey ?? process.env.ATBASH_AGENT_PRIVKEY;
   const agent = opts.agent ?? loadAgent(privkey ?? "");
   const clientOpts = opts.endpoint ? { endpoint: opts.endpoint } : void 0;
-  const client = createAtbashClient({
-    keyPair: { privKey: agent.privkey, pubKey: agent.pubkey },
-    judge: opts.endpoint ? { endpoint: opts.endpoint } : void 0
-  });
+  const client = new Atbash2(agent.privkey, clientOpts);
   const graph = builder;
   const toolsNode = opts.toolsNode ?? "tools";
   const agentNode = opts.agentNode ?? "agent";
@@ -140,23 +156,19 @@ function addAtbashSafety(builder, opts) {
 }
 
 // src/tools/judgeTool.ts
-import { judgeAction as judgeAction2 } from "@atbash/sdk";
+import { Atbash as Atbash3 } from "@atbash/sdk";
 import { tool } from "@langchain/core/tools";
 import { z } from "zod";
 function createJudgeTool(agent, endpoint) {
   return tool(
     async ({ action, context }) => {
-      const result = await judgeAction2(
-        action,
-        context,
-        agent,
-        endpoint ? { endpoint } : void 0
-      );
+      const client = new Atbash3(agent.privkey, endpoint ? { endpoint } : void 0);
+      const result = await client.judgeAction(action, context);
       return JSON.stringify({
         verdict: result.verdict,
         reason: result.reason,
         confidence: result.confidence,
-        tool_call_id: result.tool_call_id
+        tool_call_id: result.toolCallId
       });
     },
     {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@atbash/atbash-langgraph",
-  "version": "0.0.5-dev.1",
+  "version": "0.0.5-dev.2",
   "description": "Atbash safety guard and audit nodes for LangGraph workflows",
   "type": "module",
   "main": "dist/index.js",
@@ -34,12 +34,10 @@
   },
   "scripts": {
     "build": "tsup src/index.ts --format esm --dts --clean",
-    "prepublishOnly": "npm run build",
-    "publish:prod": "npm publish --tag latest --access public",
-    "publish:dev": "node scripts/publish-dev.mjs"
+    "prepublishOnly": "npm run build"
   },
   "dependencies": {
-    "@atbash/sdk": "*",
+    "@atbash/sdk": "0.5.3-dev.0",
     "zod": "^3.25.76"
   },
   "peerDependencies": {