@odingard/guardian-langchain 0.1.0 → 0.2.0

package/README.md

@@ -47,7 +47,7 @@ import {
 } from "@odingard/guardian-langchain";
 
 const guardian = createGuardianClient({
-  baseUrl: "https://api.guardian.odingard.com",
+  baseUrl: "https://guardian-api.odingard.com",
   credential: process.env.GUARDIAN_AGENT_CREDENTIAL!,
 });
 

package/dist/index.js

@@ -23,14 +23,21 @@ var GuardianExecutionFailed = class extends Error {
   toolName;
   requestId;
   reasonCode;
+  /**
+   * inProcess only: the local tool already ran before Guardian's final
+   * redemption refused it. The effect happened without a recorded receipt;
+   * treat it as an incident, never as a successful governed action.
+   */
+  localEffectRan;
   constructor(args) {
     super(
-      `Guardian execution of "${args.toolName}" failed (requestId=${args.requestId}, reasonCode=${args.reasonCode})`
+      `Guardian execution of "${args.toolName}" failed (requestId=${args.requestId}, reasonCode=${args.reasonCode}${args.localEffectRan ? ", localEffectRan=true" : ""})`
     );
     this.name = "GuardianExecutionFailed";
     this.toolName = args.toolName;
     this.requestId = args.requestId;
     this.reasonCode = args.reasonCode;
+    this.localEffectRan = args.localEffectRan ?? false;
   }
 };
 var GuardianRecordTransportRequired = class extends Error {
@@ -219,6 +226,21 @@ async function settle(ctx, toolName, input, result, runTool) {
   const { options } = ctx;
   const mode = toolModeFor(options, toolName);
   if (!result.ok) {
+    const heldRequestId = result.requestId;
+    if (result.reasonCode === "APPROVAL_REQUIRED" && typeof heldRequestId === "string" && heldRequestId.length > 0) {
+      return settle(
+        ctx,
+        toolName,
+        input,
+        {
+          ok: true,
+          requestId: heldRequestId,
+          decision: "ASK",
+          reasonCode: result.reasonCode
+        },
+        runTool
+      );
+    }
     return deny(options, toolName, result.reasonCode, void 0);
   }
   if (result.decision === "ALLOW" && result.capabilityToken) {
@@ -258,7 +280,8 @@ async function settle(ctx, toolName, input, result, runTool) {
       throw new GuardianExecutionFailed({
         toolName,
         requestId,
-        reasonCode: executed.reasonCode
+        reasonCode: executed.reasonCode,
+        localEffectRan: true
       });
     }
     await options.onReceipt?.({ toolName, requestId, receipt: executed.receipt });

package/dist-dts/core.d.ts

@@ -32,10 +32,17 @@ export declare class GuardianExecutionFailed extends Error {
     readonly toolName: string;
     readonly requestId: string;
     readonly reasonCode: string;
+    /**
+     * inProcess only: the local tool already ran before Guardian's final
+     * redemption refused it. The effect happened without a recorded receipt;
+     * treat it as an incident, never as a successful governed action.
+     */
+    readonly localEffectRan: boolean;
     constructor(args: {
         toolName: string;
         requestId: string;
         reasonCode: string;
+        localEffectRan?: boolean;
     });
 }
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@odingard/guardian-langchain",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "LangChain.js adapter — route an agent's tool calls through Guardian for a deterministic ALLOW/ASK/DENY decision before anything executes.",
   "license": "Apache-2.0",
   "type": "module",
@@ -27,11 +27,11 @@
   },
   "peerDependencies": {
     "@langchain/core": ">=0.3.58 <2.0.0",
-    "@odingard/guardian-sdk": "^0.1.0"
+    "@odingard/guardian-sdk": "^0.2.0"
   },
   "devDependencies": {
     "@langchain/core": "^1.3.2",
-    "@odingard/guardian-sdk": "^0.1.0",
+    "@odingard/guardian-sdk": "^0.2.0",
     "@types/node": "^22.20.5",
     "esbuild": "^0.28.2",
     "typescript": "^5.9.3",
@@ -39,7 +39,7 @@
     "zod": "^4.6.7"
   },
   "engines": {
-    "node": ">=20"
+    "node": ">=22"
   },
   "keywords": [
     "guardian",