@atbash/atbash-langgraph 0.0.5-dev.1 → 0.0.5-dev.3

package/dist/index.d.ts

@@ -1,7 +1,7 @@
 import * as _langchain_core_messages from '@langchain/core/messages';
 import * as _langchain_langgraph from '@langchain/langgraph';
 import { StateGraph } from '@langchain/langgraph';
-import { AtbashClient, AgentAuth, ClientOpts } from '@atbash/sdk';
+import { Atbash } from '@atbash/sdk';
 import * as _langchain_core_tools from '@langchain/core/tools';
 import { z } from 'zod';
 
@@ -15,18 +15,16 @@ declare const AtbashStateAnnotation: _langchain_langgraph.AnnotationRoot<{
 type AtbashState = typeof AtbashStateAnnotation.State;
 
 interface GuardNodeOptions {
-    client: AtbashClient;
+    client: Atbash;
 }
 declare function createGuardNode(opts: GuardNodeOptions): (state: AtbashState) => Promise<Partial<AtbashState>>;
 
 interface AuditNodeOptions {
-    agent: AgentAuth;
-    clientOpts?: ClientOpts;
+    client: Atbash;
 }
 declare function createAuditNode(opts: AuditNodeOptions): (state: AtbashState) => Promise<Partial<AtbashState>>;
 
 interface AtbashSafetyOptions {
-    agent?: AgentAuth;
     privkey?: string;
     endpoint?: string;
     toolsNode?: string;
@@ -52,7 +50,7 @@ declare function addAtbashSafety(builder: StateGraph<AtbashState>, opts: AtbashS
     messages: _langchain_langgraph.BaseChannel<_langchain_core_messages.BaseMessage<_langchain_core_messages.MessageStructure<_langchain_core_messages.MessageToolSet>, _langchain_core_messages.MessageType>[], _langchain_langgraph.OverwriteValue<_langchain_core_messages.BaseMessage<_langchain_core_messages.MessageStructure<_langchain_core_messages.MessageToolSet>, _langchain_core_messages.MessageType>[]> | _langchain_langgraph.Messages, unknown>;
 }>>, "__start__", _langchain_langgraph.StateDefinition, _langchain_langgraph.StateDefinition, _langchain_langgraph.StateDefinition, unknown, unknown, unknown>;
 
-declare function createJudgeTool(agent: AgentAuth, endpoint?: string): _langchain_core_tools.DynamicStructuredTool<z.ZodObject<{
+declare function createJudgeTool(client: Atbash): _langchain_core_tools.DynamicStructuredTool<z.ZodObject<{
     action: z.ZodString;
     context: z.ZodString;
 }, "strip", z.ZodTypeAny, {

package/dist/index.js

@@ -54,6 +54,26 @@ function createGuardNode(opts) {
           atbashConfidence: null
         };
       }
+      if (decision.verdict === "HOLD") {
+        const holdParts = [
+          "Action held for operator review. The agent will not be jailed \u2014 please approve or reject this request from the Atbash dashboard, then ask the agent to try again.",
+          `Reason: ${decision.reason ?? ""}`
+        ];
+        if (decision.toolCallId) holdParts.push(`Tool Call ID: ${decision.toolCallId}`);
+        const holdMessage = holdParts.join("\n");
+        return {
+          messages: toolCalls.map(
+            (toolCall) => new ToolMessage({
+              tool_call_id: toolCall.id,
+              content: holdMessage
+            })
+          ),
+          atbashVerdict: "HOLD",
+          atbashReason: decision.reason ?? "held for review",
+          atbashToolCallId: decision.toolCallId,
+          atbashConfidence: null
+        };
+      }
       return {
         atbashVerdict: "ALLOW",
         atbashReason: decision.reason,
@@ -81,9 +101,6 @@ function createGuardNode(opts) {
   };
 }
 
-// src/nodes/auditNode.ts
-import { judgeAction } from "@atbash/sdk";
-
 // src/utils.ts
 function truncateText(value, max = 500) {
   return value.length <= max ? value : `${value.slice(0, max - 3)}...`;
@@ -91,15 +108,14 @@ function truncateText(value, max = 500) {
 
 // src/nodes/auditNode.ts
 function createAuditNode(opts) {
+  const { client } = opts;
   return async (state) => {
     const lastMessage = state.messages[state.messages.length - 1];
     const content = typeof lastMessage?.content === "string" ? lastMessage.content : JSON.stringify(lastMessage?.content ?? "");
     try {
-      await judgeAction(
+      await client.logToolCall(
         truncateText(content, 500),
-        "LangGraph tool execution completed",
-        opts.agent,
-        opts.clientOpts
+        "LangGraph tool execution completed"
       );
     } catch {
     }
@@ -109,8 +125,7 @@ function createAuditNode(opts) {
 
 // src/builder.ts
 import {
-  createAtbashClient,
-  loadAgent,
+  Atbash,
   setupTelemetry,
   shutdownTelemetry
 } from "@atbash/sdk";
@@ -119,18 +134,15 @@ function addAtbashSafety(builder, opts) {
   process.once("beforeExit", () => shutdownTelemetry());
   process.once("SIGINT", () => shutdownTelemetry().finally(() => process.exit(0)));
   process.once("SIGTERM", () => shutdownTelemetry().finally(() => process.exit(0)));
-  const privkey = opts.privkey ?? process.env.ATBASH_AGENT_PRIVKEY;
-  const agent = opts.agent ?? loadAgent(privkey ?? "");
-  const clientOpts = opts.endpoint ? { endpoint: opts.endpoint } : void 0;
-  const client = createAtbashClient({
-    keyPair: { privKey: agent.privkey, pubKey: agent.pubkey },
-    judge: opts.endpoint ? { endpoint: opts.endpoint } : void 0
-  });
+  const privkey = opts.privkey ?? process.env.ATBASH_AGENT_PRIVKEY ?? "";
+  const clientOpts = {};
+  if (opts.endpoint) clientOpts.endpoint = opts.endpoint;
+  const client = new Atbash(privkey, clientOpts);
   const graph = builder;
   const toolsNode = opts.toolsNode ?? "tools";
   const agentNode = opts.agentNode ?? "agent";
   graph.addNode("atbash_guard", createGuardNode({ client }));
-  graph.addNode("atbash_audit", createAuditNode({ agent, clientOpts }));
+  graph.addNode("atbash_audit", createAuditNode({ client }));
   graph.addConditionalEdges("atbash_guard", (state) => {
     return state.atbashVerdict === "ALLOW" ? toolsNode : agentNode;
   });
@@ -140,23 +152,21 @@ function addAtbashSafety(builder, opts) {
 }
 
 // src/tools/judgeTool.ts
-import { judgeAction as judgeAction2 } from "@atbash/sdk";
 import { tool } from "@langchain/core/tools";
 import { z } from "zod";
-function createJudgeTool(agent, endpoint) {
+function createJudgeTool(client) {
   return tool(
     async ({ action, context }) => {
-      const result = await judgeAction2(
-        action,
-        context,
-        agent,
-        endpoint ? { endpoint } : void 0
-      );
+      const decision = await client.auditToolCall({
+        toolName: "atbash_safety_check",
+        args: { action },
+        context
+      });
       return JSON.stringify({
-        verdict: result.verdict,
-        reason: result.reason,
-        confidence: result.confidence,
-        tool_call_id: result.tool_call_id
+        verdict: decision.verdict,
+        allow: decision.allow,
+        reason: decision.reason,
+        tool_call_id: decision.toolCallId
       });
     },
     {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@atbash/atbash-langgraph",
-  "version": "0.0.5-dev.1",
+  "version": "0.0.5-dev.3",
   "description": "Atbash safety guard and audit nodes for LangGraph workflows",
   "type": "module",
   "main": "dist/index.js",
@@ -34,12 +34,10 @@
   },
   "scripts": {
     "build": "tsup src/index.ts --format esm --dts --clean",
-    "prepublishOnly": "npm run build",
-    "publish:prod": "npm publish --tag latest --access public",
-    "publish:dev": "node scripts/publish-dev.mjs"
+    "prepublishOnly": "npm run build"
   },
   "dependencies": {
-    "@atbash/sdk": "*",
+    "@atbash/sdk": "0.5.3-dev.0",
     "zod": "^3.25.76"
   },
   "peerDependencies": {