@orangecheck/agent-langgraph 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 OrangeCheck
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,93 @@
+# @orangecheck/agent-langgraph
+
+Wrap [LangGraph](https://langchain-ai.github.io/langgraph/) tool-node executions in [OC Agent](https://github.com/orangecheck/oc-agent-protocol) action envelopes. Binds each action to the **graph-state hash** at execution time — so verifiers replaying the audit against a persisted graph snapshot can confirm the action fired against the expected state, not a divergent fork.
+
+## Why
+
+LangGraph composes long-running stateful agents from typed nodes. The compliance question is harder than for stateless adapters: at *what graph state* did this agent take this action? Without a state-bound action receipt, "the model called this tool" loses its temporal grounding the moment the graph forks, retries, or replays.
+
+This adapter canonicalizes `(verb, args, callId, graph_state_hash)` — one extra field over the stateless adapters in this family — so the action envelope binds the agent's signature to the exact state snapshot at execution time. Two verifiers re-deriving the action from a persisted graph snapshot get the same envelope id only when the snapshot's state-hash matches.
+
+## Status
+
+**v0.0.1 · in design.** API shape is stable; the canonicalization layout (`{args, call_id, graph_state_hash, verb}` lexicographic, RFC 8785 canonical JSON, trailing LF) is locked. Production wiring with specific LangGraph release lines is intentionally not baked in — `ocToolNode()` is provider/version-agnostic so you can call it from any release of `@langchain/langgraph` you're already on.
+
+## Install
+
+```bash
+npm i @orangecheck/agent-langgraph
+# peer deps:
+npm i @orangecheck/agent-core @orangecheck/agent-signer
+```
+
+## Quickstart
+
+```ts
+import { StateGraph } from '@langchain/langgraph';
+import { ocToolNode } from '@orangecheck/agent-langgraph';
+
+const createInvoice = ocToolNode({
+    verb:    'invoice.create',
+    execute: async (args) => myInvoiceCreateImpl(args),
+});
+
+const graph = new StateGraph(MyState).addNode('createInvoice', async (state) => {
+    const args   = pickToolArgs(state);
+    const callId = state.lastToolCallId;
+
+    const { result, action } = await createInvoice.execute(args, {
+        agent, delegation, callId, graphState: state,
+    });
+
+    await yourAuditPipeline.append(action);
+    return mergeResultIntoState(state, result);
+});
+```
+
+The pattern: `ocToolNode` defines the OC-Agent-shaped wrapper; your LangGraph node glue passes the live `graphState` so the wrapper hashes it inline.
+
+## What gets stamped
+
+Stamp's `content.hash` is a SHA-256 of:
+
+```json
+{
+  "args":             <canonical JSON of args>,
+  "call_id":          "<sdk-assigned tool call id>",
+  "graph_state_hash": "sha256:<64-hex>",
+  "verb":             "<verb>"
+}
+```
+
+The `graph_state_hash` is itself a `sha256:<64-hex>` over the canonicalized graph state object. Two replays against the same persisted state produce the same hash; a divergent state (extra messages, mutated step counter, anything) produces a different hash and the action envelope will not match.
+
+Default `scope_exercised` is `langgraph:tool(verb=<verb>)`. Override via `scopeExercised`.
+
+## API
+
+- `graphStateHash(state)` — stable `sha256:<64-hex>` of a LangGraph state object.
+- `canonicalizeToolCall(call)` — RFC 8785 canonical bytes.
+- `toolCallHash(call)` — `sha256:<64-hex>` for `content.hash`.
+- `stampToolCall(input)` — sign without executing.
+- `ocToolNode({verb, execute})` — wrapped tool node with state-aware canonicalization.
+
+## Replay verification
+
+To verify an action against a persisted graph snapshot:
+
+1. Decode the action envelope's content hash.
+2. Recompute `graphStateHash(persisted_state)` and check it equals the `graph_state_hash` declared in the canonicalized content.
+3. Run the standard `verifyAction()` from `@orangecheck/agent-core` against the action + delegation + Bitcoin headers.
+
+The replay verifier picks up forks automatically: if the persisted snapshot doesn't match the state at execution time, the `graph_state_hash` differs and the action's content hash won't reproduce.
+
+## License
+
+MIT.
+
+## Related
+
+- [oc-agent-protocol](https://github.com/orangecheck/oc-agent-protocol) — normative wire format.
+- [@orangecheck/agent-core](https://www.npmjs.com/package/@orangecheck/agent-core) — verifier library.
+- [@orangecheck/agent-mcp](https://www.npmjs.com/package/@orangecheck/agent-mcp) / [-anthropic](https://www.npmjs.com/package/@orangecheck/agent-anthropic) / [-openai](https://www.npmjs.com/package/@orangecheck/agent-openai) / [-vercel](https://www.npmjs.com/package/@orangecheck/agent-vercel) — sibling adapters, all stateless.
+- [console.ochk.io/integrations/langgraph](https://console.ochk.io/integrations/langgraph) — managed-tier story.

package/dist/index.d.mts

@@ -0,0 +1,54 @@
+import { DelegationEnvelope } from '@orangecheck/agent-core';
+import { SignerRef, ActionEnvelope } from '@orangecheck/agent-signer';
+
+declare function graphStateHash(state: Record<string, unknown>): string;
+interface LangGraphToolCall {
+    callId: string;
+    verb: string;
+    args: Record<string, unknown>;
+    graphStateHash: string;
+}
+declare function canonicalizeToolCall(c: LangGraphToolCall): Uint8Array;
+declare function toolCallHash(c: LangGraphToolCall): string;
+declare function toolCallActionId(agentAddress: string, signedAt: string, delegationId: string, scopeExercised: string, c: LangGraphToolCall): string;
+interface AgentContext {
+    agent: SignerRef;
+    delegation: DelegationEnvelope;
+}
+interface StampToolCallInput extends AgentContext {
+    call: LangGraphToolCall;
+    scopeExercised?: string;
+    signedAt?: Date;
+}
+declare function stampToolCall(input: StampToolCallInput): Promise<ActionEnvelope>;
+interface OcToolNodeInput<TArgs extends Record<string, unknown>, TResult> {
+    verb: string;
+    execute: (args: TArgs) => Promise<TResult>;
+}
+interface OcToolNodeWrapped<TArgs extends Record<string, unknown>, TResult> {
+    verb: string;
+    execute: (args: TArgs, ctx: AgentContext & {
+        callId: string;
+        graphState: Record<string, unknown>;
+        console?: ConsoleClient;
+    }) => Promise<{
+        result: TResult;
+        action: ActionEnvelope;
+        posted: PostActionResult | null;
+    }>;
+}
+declare function ocToolNode<TArgs extends Record<string, unknown>, TResult>(input: OcToolNodeInput<TArgs, TResult>): OcToolNodeWrapped<TArgs, TResult>;
+interface ConsoleClient {
+    baseUrl?: string;
+    apiToken: string;
+    projectId: string;
+    fetch?: typeof fetch;
+}
+interface PostActionResult {
+    id: string;
+    project_id: string;
+    delegation_id: string;
+}
+declare function postActionToConsole(action: ActionEnvelope, client: ConsoleClient): Promise<PostActionResult>;
+
+export { type AgentContext, type ConsoleClient, type LangGraphToolCall, type OcToolNodeInput, type OcToolNodeWrapped, type PostActionResult, type StampToolCallInput, canonicalizeToolCall, graphStateHash, ocToolNode, postActionToConsole, stampToolCall, toolCallActionId, toolCallHash };

package/dist/index.d.ts

@@ -0,0 +1,54 @@
+import { DelegationEnvelope } from '@orangecheck/agent-core';
+import { SignerRef, ActionEnvelope } from '@orangecheck/agent-signer';
+
+declare function graphStateHash(state: Record<string, unknown>): string;
+interface LangGraphToolCall {
+    callId: string;
+    verb: string;
+    args: Record<string, unknown>;
+    graphStateHash: string;
+}
+declare function canonicalizeToolCall(c: LangGraphToolCall): Uint8Array;
+declare function toolCallHash(c: LangGraphToolCall): string;
+declare function toolCallActionId(agentAddress: string, signedAt: string, delegationId: string, scopeExercised: string, c: LangGraphToolCall): string;
+interface AgentContext {
+    agent: SignerRef;
+    delegation: DelegationEnvelope;
+}
+interface StampToolCallInput extends AgentContext {
+    call: LangGraphToolCall;
+    scopeExercised?: string;
+    signedAt?: Date;
+}
+declare function stampToolCall(input: StampToolCallInput): Promise<ActionEnvelope>;
+interface OcToolNodeInput<TArgs extends Record<string, unknown>, TResult> {
+    verb: string;
+    execute: (args: TArgs) => Promise<TResult>;
+}
+interface OcToolNodeWrapped<TArgs extends Record<string, unknown>, TResult> {
+    verb: string;
+    execute: (args: TArgs, ctx: AgentContext & {
+        callId: string;
+        graphState: Record<string, unknown>;
+        console?: ConsoleClient;
+    }) => Promise<{
+        result: TResult;
+        action: ActionEnvelope;
+        posted: PostActionResult | null;
+    }>;
+}
+declare function ocToolNode<TArgs extends Record<string, unknown>, TResult>(input: OcToolNodeInput<TArgs, TResult>): OcToolNodeWrapped<TArgs, TResult>;
+interface ConsoleClient {
+    baseUrl?: string;
+    apiToken: string;
+    projectId: string;
+    fetch?: typeof fetch;
+}
+interface PostActionResult {
+    id: string;
+    project_id: string;
+    delegation_id: string;
+}
+declare function postActionToConsole(action: ActionEnvelope, client: ConsoleClient): Promise<PostActionResult>;
+
+export { type AgentContext, type ConsoleClient, type LangGraphToolCall, type OcToolNodeInput, type OcToolNodeWrapped, type PostActionResult, type StampToolCallInput, canonicalizeToolCall, graphStateHash, ocToolNode, postActionToConsole, stampToolCall, toolCallActionId, toolCallHash };

package/dist/index.js

@@ -0,0 +1,127 @@
+'use strict';
+
+var sha256 = require('@noble/hashes/sha256');
+var agentCore = require('@orangecheck/agent-core');
+var agentSigner = require('@orangecheck/agent-signer');
+
+// src/index.ts
+function graphStateHash(state) {
+  const str = agentCore.canonicalize(state);
+  return "sha256:" + agentCore.hexEncode(sha256.sha256(new TextEncoder().encode(str + "\n")));
+}
+function canonicalizeToolCall(c) {
+  const canon = {
+    args: c.args,
+    call_id: c.callId,
+    graph_state_hash: c.graphStateHash,
+    verb: c.verb
+  };
+  const str = agentCore.canonicalize(canon);
+  return new TextEncoder().encode(str + "\n");
+}
+function toolCallHash(c) {
+  return "sha256:" + agentCore.hexEncode(sha256.sha256(canonicalizeToolCall(c)));
+}
+function toolCallActionId(agentAddress, signedAt, delegationId, scopeExercised, c) {
+  return agentCore.computeActionId({
+    address: agentAddress,
+    content_hash: toolCallHash(c),
+    content_length: canonicalizeToolCall(c).byteLength,
+    content_mime: "application/vnd.oc-agent.langgraph-tool-call+json",
+    signed_at: signedAt,
+    delegation_id: delegationId,
+    scope_exercised: scopeExercised
+  });
+}
+async function stampToolCall(input) {
+  const scopeExercised = input.scopeExercised ?? `langgraph:tool(verb=${input.call.verb})`;
+  const granted = (input.delegation.scopes ?? []).map(agentCore.parseScope);
+  const exercisedParsed = agentCore.parseScope(scopeExercised);
+  if (!granted.some((g) => agentCore.isSubScope(exercisedParsed, g))) {
+    throw new Error(
+      `stampToolCall: scope_exercised (${scopeExercised}) is not a sub-scope of any granted scope`
+    );
+  }
+  const bytes = canonicalizeToolCall(input.call);
+  return agentSigner.signAsAgent({
+    agent: input.agent,
+    delegation: input.delegation,
+    content: { hash: toolCallHash(input.call), length: bytes.byteLength },
+    mime: "application/vnd.oc-agent.langgraph-tool-call+json",
+    scopeExercised,
+    signedAt: input.signedAt
+  });
+}
+function ocToolNode(input) {
+  return {
+    verb: input.verb,
+    execute: async (args, ctx) => {
+      const call = {
+        callId: ctx.callId,
+        verb: input.verb,
+        args,
+        graphStateHash: graphStateHash(ctx.graphState)
+      };
+      const action = await stampToolCall({
+        agent: ctx.agent,
+        delegation: ctx.delegation,
+        call
+      });
+      const result = await input.execute(args);
+      let posted = null;
+      if (ctx.console) {
+        try {
+          posted = await postActionToConsole(action, ctx.console);
+        } catch (err) {
+          console.error("[oc-agent-langgraph] postActionToConsole failed:", err);
+        }
+      }
+      return { result, action, posted };
+    }
+  };
+}
+async function postActionToConsole(action, client) {
+  const baseUrl = client.baseUrl ?? "https://console.ochk.io";
+  const f = client.fetch ?? fetch;
+  const body = {
+    project_id: client.projectId,
+    delegation_id: action.delegation_id,
+    agent_address: action.signer.address,
+    scope_exercised: action.scope_exercised,
+    content_hash: action.content.hash,
+    content_length: action.content.length,
+    content_mime: action.content.mime,
+    signed_at: action.signed_at,
+    signature: action.sig.value,
+    id: action.id
+  };
+  const r = await f(`${baseUrl}/api/actions`, {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/json",
+      Authorization: `Bearer ${client.apiToken}`
+    },
+    body: JSON.stringify(body)
+  });
+  if (!r.ok) {
+    let reason = `http_${r.status}`;
+    try {
+      const j2 = await r.json();
+      if (j2.reason) reason = j2.reason;
+    } catch {
+    }
+    throw new Error(`postActionToConsole failed: ${reason}`);
+  }
+  const j = await r.json();
+  return j.action;
+}
+
+exports.canonicalizeToolCall = canonicalizeToolCall;
+exports.graphStateHash = graphStateHash;
+exports.ocToolNode = ocToolNode;
+exports.postActionToConsole = postActionToConsole;
+exports.stampToolCall = stampToolCall;
+exports.toolCallActionId = toolCallActionId;
+exports.toolCallHash = toolCallHash;
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts"],"names":["canonicalize","hexEncode","sha256","computeActionId","parseScope","isSubScope","signAsAgent","j"],"mappings":";;;;;;;AA2CO,SAAS,eAAe,KAAA,EAAwC;AACnE,EAAA,MAAM,GAAA,GAAMA,uBAAa,KAAsD,CAAA;AAC/E,EAAA,OAAO,SAAA,GAAYC,mBAAA,CAAUC,aAAA,CAAO,IAAI,WAAA,GAAc,MAAA,CAAO,GAAA,GAAM,IAAI,CAAC,CAAC,CAAA;AAC7E;AA4BO,SAAS,qBAAqB,CAAA,EAAkC;AACnE,EAAA,MAAM,KAAA,GAAQ;AAAA,IACV,MAAM,CAAA,CAAE,IAAA;AAAA,IACR,SAAS,CAAA,CAAE,MAAA;AAAA,IACX,kBAAkB,CAAA,CAAE,cAAA;AAAA,IACpB,MAAM,CAAA,CAAE;AAAA,GACZ;AACA,EAAA,MAAM,GAAA,GAAMF,uBAAa,KAAsD,CAAA;AAC/E,EAAA,OAAO,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,MAAM,IAAI,CAAA;AAC9C;AAEO,SAAS,aAAa,CAAA,EAA8B;AACvD,EAAA,OAAO,YAAYC,mBAAA,CAAUC,aAAA,CAAO,oBAAA,CAAqB,CAAC,CAAC,CAAC,CAAA;AAChE;AAEO,SAAS,gBAAA,CACZ,YAAA,EACA,QAAA,EACA,YAAA,EACA,gBACA,CAAA,EACM;AACN,EAAA,OAAOC,yBAAA,CAAgB;AAAA,IACnB,OAAA,EAAS,YAAA;AAAA,IACT,YAAA,EAAc,aAAa,CAAC,CAAA;AAAA,IAC5B,cAAA,EAAgB,oBAAA,CAAqB,CAAC,CAAA,CAAE,UAAA;AAAA,IACxC,YAAA,EAAc,mDAAA;AAAA,IACd,SAAA,EAAW,QAAA;AAAA,IACX,aAAA,EAAe,YAAA;AAAA,IACf,eAAA,EAAiB;AAAA,GACpB,CAAA;AACL;AAkBA,eAAsB,cAAc,KAAA,EAAoD;AACpF,EAAA,MAAM,iBACF,KAAA,CAAM,cAAA,IAAkB,CAAA,oBAAA,EAAuB,KAAA,CAAM,KAAK,IAAI,CAAA,CAAA,CAAA;AAElE,EAAA,MAAM,WAAW,KAAA,CAAM,UAAA,CAAW,UAAU,EAAC,EAAG,IAAIC,oBAAU,CAAA;AAC9D,EAAA,MAAM,eAAA,GAAkBA,qBAAW,cAAc,CAAA;AACjD,EAAA,IAAI,CAAC,QAAQ,IAAA,CAAK,CAAC,MAAMC,oBAAA,CAAW,eAAA,EAAiB,CAAC,CAAC,CAAA,EAAG;AACtD,IAAA,MAAM,IAAI,KAAA;AAAA,MACN,mCAAmC,cAAc,CAAA,yCAAA;AAAA,KACrD;AAAA,EACJ;AAEA,EAAA,MAAM,KAAA,GAAQ,oBAAA,CAAqB,KAAA,CAAM,IAAI,CAAA;AAC7C,EAAA,OAAOC,uBAAA,CAAY;AAAA,IACf,OAAO,KAAA,CAAM,KAAA;AAAA,IACb,YAAY,KAAA,CAAM,UAAA;AAAA,IAClB,OAAA,EAAS,EAAE,IAAA,EAAM,YAAA,CAAa,MAAM,IAAI,CAAA,EAAG,MAAA,EAAQ,KAAA,CAAM,UAAA,EAAW;AAAA,IACpE,IAAA,EAAM,mDAAA;AAAA,IACN,cAAA;AAAA,IACA,UAAU,KAAA,CAAM;AAAA,GACnB,CAAA;AACL;AA2DO,SAAS,WACZ,KAAA,EACiC;AACjC,EAAA,OAAO;AAAA,IACH,MAAM,KAAA,CAAM,IAAA;AAAA,IACZ,OAAA,EAAS,OAAO,IAAA,EAAM,GAAA,KAAQ;AAC1B,MAAA,MAAM,IAAA,GAA0B;AAAA,QAC5B,QAAQ,GAAA,CAAI,MAAA;AAAA,QACZ,MAAM,KAAA,CAAM,IAAA;AAAA,QACZ,IAAA;AAAA,QACA,cAAA,EAAgB,cAAA,CAAe,GAAA,CAAI,UAAU;AAAA,OACjD;AACA,MAAA,MAAM,MAAA,GAAS,MAAM,aAAA,CAAc;AAAA,QAC/B,OAAO,GAAA,CAAI,KAAA;AAAA,QACX,YAAY,GAAA,CAAI,UAAA;AAAA,QAChB;AAAA,OACH,CAAA;AACD,MAAA,MAAM,MAAA,GAAS,MAAM,KAAA,CAAM,OAAA,CAAQ,IAAI,CAAA;AACvC,MAAA,IAAI,MAAA,GAAkC,IAAA;AACtC,MAAA,IAAI,IAAI,OAAA,EAAS;AACb,QAAA,IAAI;AACA,UAAA,MAAA,GAAS,MAAM,mBAAA,CAAoB,MAAA,EAAQ,GAAA,CAAI,OAAO,CAAA;AAAA,QAC1D,SAAS,GAAA,EAAK;AAEV,UAAA,OAAA,CAAQ,KAAA,CAAM,oDAAoD,GAAG,CAAA;AAAA,QACzE;AAAA,MACJ;AACA,MAAA,OAAO,EAAE,MAAA,EAAQ,MAAA,EAAQ,MAAA,EAAO;AAAA,IACpC;AAAA,GACJ;AACJ;AAuBA,eAAsB,mBAAA,CAClB,QACA,MAAA,EACyB;AACzB,EAAA,MAAM,OAAA,GAAU,OAAO,OAAA,IAAW,yBAAA;AAClC,EAAA,MAAM,CAAA,GAAI,OAAO,KAAA,IAAS,KAAA;AAC1B,EAAA,MAAM,IAAA,GAAO;AAAA,IACT,YAAY,MAAA,CAAO,SAAA;AAAA,IACnB,eAAe,MAAA,CAAO,aAAA;AAAA,IACtB,aAAA,EAAe,OAAO,MAAA,CAAO,OAAA;AAAA,IAC7B,iBAAiB,MAAA,CAAO,eAAA;AAAA,IACxB,YAAA,EAAc,OAAO,OAAA,CAAQ,IAAA;AAAA,IAC7B,cAAA,EAAgB,OAAO,OAAA,CAAQ,MAAA;AAAA,IAC/B,YAAA,EAAc,OAAO,OAAA,CAAQ,IAAA;AAAA,IAC7B,WAAW,MAAA,CAAO,SAAA;AAAA,IAClB,SAAA,EAAW,OAAO,GAAA,CAAI,KAAA;AAAA,IACtB,IAAI,MAAA,CAAO;AAAA,GACf;AACA,EAAA,MAAM,CAAA,GAAI,MAAM,CAAA,CAAE,CAAA,EAAG,OAAO,CAAA,YAAA,CAAA,EAAgB;AAAA,IACxC,MAAA,EAAQ,MAAA;AAAA,IACR,OAAA,EAAS;AAAA,MACL,cAAA,EAAgB,kBAAA;AAAA,MAChB,aAAA,EAAe,CAAA,OAAA,EAAU,MAAA,CAAO,QAAQ,CAAA;AAAA,KAC5C;AAAA,IACA,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,IAAI;AAAA,GAC5B,CAAA;AACD,EAAA,IAAI,CAAC,EAAE,EAAA,EAAI;AACP,IAAA,IAAI,MAAA,GAAS,CAAA,KAAA,EAAQ,CAAA,CAAE,MAAM,CAAA,CAAA;AAC7B,IAAA,IAAI;AACA,MAAA,MAAMC,EAAAA,GAAK,MAAM,CAAA,CAAE,IAAA,EAAK;AACxB,MAAA,IAAIA,EAAAA,CAAE,MAAA,EAAQ,MAAA,GAASA,EAAAA,CAAE,MAAA;AAAA,IAC7B,CAAA,CAAA,MAAQ;AAAA,IAER;AACA,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,4BAAA,EAA+B,MAAM,CAAA,CAAE,CAAA;AAAA,EAC3D;AACA,EAAA,MAAM,CAAA,GAAK,MAAM,CAAA,CAAE,IAAA,EAAK;AACxB,EAAA,OAAO,CAAA,CAAE,MAAA;AACb","file":"index.js","sourcesContent":["// @orangecheck/agent-langgraph — wrap LangGraph tool-node executions in\n// OC Agent action envelopes.\n//\n// LangGraph's distinguishing feature is graph state: stateful agents\n// composed of typed nodes that share a persisted state object. The\n// compliance-relevant question becomes \"at what graph state did this\n// agent take this action?\" — and the answer must be cryptographically\n// bound to the action receipt.\n//\n// This adapter therefore canonicalizes (verb, args, callId, graph_state_hash)\n// — one extra field over the agent-mcp / agent-anthropic / agent-openai /\n// agent-vercel canonicalization. Two verifiers re-deriving the action from\n// a persisted graph snapshot compute the same envelope id only when the\n// snapshot's state-hash matches; tampered or out-of-order replay fails.\n\nimport { sha256 } from '@noble/hashes/sha256';\nimport {\n    canonicalize,\n    computeActionId,\n    hexEncode,\n    isSubScope,\n    parseScope,\n    type DelegationEnvelope,\n} from '@orangecheck/agent-core';\nimport {\n    signAsAgent,\n    type ActionEnvelope,\n    type SignerRef,\n} from '@orangecheck/agent-signer';\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Graph state hashing\n// ─────────────────────────────────────────────────────────────────────────────\n\n/**\n * Compute a stable hash of a LangGraph state object. Use canonical JSON\n * (RFC 8785) so reordered keys / repeated serializations produce the same\n * hash. Returns `sha256:<64-hex>`.\n *\n * Most LangGraph deployments persist the state object via a checkpointer\n * (in-memory, postgres, redis, etc.). The state-hash here is over the\n * checkpointer's serialized state at the moment the tool node fires.\n */\nexport function graphStateHash(state: Record<string, unknown>): string {\n    const str = canonicalize(state as unknown as Parameters<typeof canonicalize>[0]);\n    return 'sha256:' + hexEncode(sha256(new TextEncoder().encode(str + '\\n')));\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Tool-call canonicalization\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport interface LangGraphToolCall {\n    /** Stable id assigned by your graph runtime for this tool invocation. */\n    callId: string;\n    /** Tool verb — typically the node name. */\n    verb: string;\n    /** JSON-serializable arguments to the tool node. */\n    args: Record<string, unknown>;\n    /** sha256:<64-hex> of the graph state at the moment of execution. */\n    graphStateHash: string;\n}\n\n/**\n * Produce the canonical bytes for a LangGraph tool call.\n *\n * Shape (RFC 8785 canonical JSON, then trailing LF):\n *   {\n *     \"args\":              <canonical JSON of args>,\n *     \"call_id\":           <callId>,\n *     \"graph_state_hash\":  <state hash>,\n *     \"verb\":              <verb>\n *   }\n */\nexport function canonicalizeToolCall(c: LangGraphToolCall): Uint8Array {\n    const canon = {\n        args: c.args,\n        call_id: c.callId,\n        graph_state_hash: c.graphStateHash,\n        verb: c.verb,\n    };\n    const str = canonicalize(canon as unknown as Parameters<typeof canonicalize>[0]);\n    return new TextEncoder().encode(str + '\\n');\n}\n\nexport function toolCallHash(c: LangGraphToolCall): string {\n    return 'sha256:' + hexEncode(sha256(canonicalizeToolCall(c)));\n}\n\nexport function toolCallActionId(\n    agentAddress: string,\n    signedAt: string,\n    delegationId: string,\n    scopeExercised: string,\n    c: LangGraphToolCall\n): string {\n    return computeActionId({\n        address: agentAddress,\n        content_hash: toolCallHash(c),\n        content_length: canonicalizeToolCall(c).byteLength,\n        content_mime: 'application/vnd.oc-agent.langgraph-tool-call+json',\n        signed_at: signedAt,\n        delegation_id: delegationId,\n        scope_exercised: scopeExercised,\n    });\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Stamping primitive\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport interface AgentContext {\n    agent: SignerRef;\n    delegation: DelegationEnvelope;\n}\n\nexport interface StampToolCallInput extends AgentContext {\n    call: LangGraphToolCall;\n    /** Defaults to `langgraph:tool(verb=<verb>)` — the tightest admissible sub-scope. */\n    scopeExercised?: string;\n    signedAt?: Date;\n}\n\nexport async function stampToolCall(input: StampToolCallInput): Promise<ActionEnvelope> {\n    const scopeExercised =\n        input.scopeExercised ?? `langgraph:tool(verb=${input.call.verb})`;\n\n    const granted = (input.delegation.scopes ?? []).map(parseScope);\n    const exercisedParsed = parseScope(scopeExercised);\n    if (!granted.some((g) => isSubScope(exercisedParsed, g))) {\n        throw new Error(\n            `stampToolCall: scope_exercised (${scopeExercised}) is not a sub-scope of any granted scope`\n        );\n    }\n\n    const bytes = canonicalizeToolCall(input.call);\n    return signAsAgent({\n        agent: input.agent,\n        delegation: input.delegation as never,\n        content: { hash: toolCallHash(input.call), length: bytes.byteLength },\n        mime: 'application/vnd.oc-agent.langgraph-tool-call+json',\n        scopeExercised,\n        signedAt: input.signedAt,\n    });\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// ocToolNode — convenience wrapper\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport interface OcToolNodeInput<TArgs extends Record<string, unknown>, TResult> {\n    /** OC Agent verb under which this tool is exercised. */\n    verb: string;\n    /** Your real handler. Receives the same args your LangGraph tool node receives. */\n    execute: (args: TArgs) => Promise<TResult>;\n}\n\nexport interface OcToolNodeWrapped<TArgs extends Record<string, unknown>, TResult> {\n    verb: string;\n    /**\n     * The execute fn your LangGraph node calls. Receives args + a context\n     * object with the agent ref, delegation, callId, current graph state,\n     * and an optional `console` field that triggers fire-and-forget POST\n     * to console.ochk.io/api/actions after the underlying execute returns.\n     */\n    execute: (\n        args: TArgs,\n        ctx: AgentContext & {\n            callId: string;\n            graphState: Record<string, unknown>;\n            console?: ConsoleClient;\n        }\n    ) => Promise<{\n        result: TResult;\n        action: ActionEnvelope;\n        posted: PostActionResult | null;\n    }>;\n}\n\n/**\n * Wrap a LangGraph tool-node execute path so it produces an OC Agent\n * action envelope per call. The wrapper computes the graph_state_hash\n * inline from the supplied state object, so the verifier replaying the\n * graph against a persisted snapshot gets the same hash deterministically.\n *\n * Typical shape:\n *\n *   const createInvoice = ocToolNode({\n *     verb: 'invoice.create',\n *     execute: async (args) => myInvoiceCreateImpl(args),\n *   });\n *\n *   const graph = new StateGraph(MyState)\n *     .addNode('createInvoice', async (state) => {\n *       const args = pickToolArgs(state);\n *       const callId = state.lastToolCallId;\n *       const { result, action } = await createInvoice.execute(args, {\n *         agent, delegation, callId, graphState: state,\n *       });\n *       await audit.append(action);\n *       return mergeResultIntoState(state, result);\n *     });\n */\nexport function ocToolNode<TArgs extends Record<string, unknown>, TResult>(\n    input: OcToolNodeInput<TArgs, TResult>\n): OcToolNodeWrapped<TArgs, TResult> {\n    return {\n        verb: input.verb,\n        execute: async (args, ctx) => {\n            const call: LangGraphToolCall = {\n                callId: ctx.callId,\n                verb: input.verb,\n                args,\n                graphStateHash: graphStateHash(ctx.graphState),\n            };\n            const action = await stampToolCall({\n                agent: ctx.agent,\n                delegation: ctx.delegation,\n                call,\n            });\n            const result = await input.execute(args);\n            let posted: PostActionResult | null = null;\n            if (ctx.console) {\n                try {\n                    posted = await postActionToConsole(action, ctx.console);\n                } catch (err) {\n                    // eslint-disable-next-line no-console\n                    console.error('[oc-agent-langgraph] postActionToConsole failed:', err);\n                }\n            }\n            return { result, action, posted };\n        },\n    };\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Console integration: POST stamped actions to console.ochk.io/api/actions\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport interface ConsoleClient {\n    /** Defaults to https://console.ochk.io. */\n    baseUrl?: string;\n    /** Bearer token from /settings § 03 (`ock_<hex>`). */\n    apiToken: string;\n    /** Project the action belongs to (proj_*). */\n    projectId: string;\n    /** Optional fetch override for runtimes that need it. */\n    fetch?: typeof fetch;\n}\n\nexport interface PostActionResult {\n    id: string;\n    project_id: string;\n    delegation_id: string;\n}\n\nexport async function postActionToConsole(\n    action: ActionEnvelope,\n    client: ConsoleClient\n): Promise<PostActionResult> {\n    const baseUrl = client.baseUrl ?? 'https://console.ochk.io';\n    const f = client.fetch ?? fetch;\n    const body = {\n        project_id: client.projectId,\n        delegation_id: action.delegation_id,\n        agent_address: action.signer.address,\n        scope_exercised: action.scope_exercised,\n        content_hash: action.content.hash,\n        content_length: action.content.length,\n        content_mime: action.content.mime,\n        signed_at: action.signed_at,\n        signature: action.sig.value,\n        id: action.id,\n    };\n    const r = await f(`${baseUrl}/api/actions`, {\n        method: 'POST',\n        headers: {\n            'Content-Type': 'application/json',\n            Authorization: `Bearer ${client.apiToken}`,\n        },\n        body: JSON.stringify(body),\n    });\n    if (!r.ok) {\n        let reason = `http_${r.status}`;\n        try {\n            const j = (await r.json()) as { reason?: string };\n            if (j.reason) reason = j.reason;\n        } catch {\n            // body wasn't json\n        }\n        throw new Error(`postActionToConsole failed: ${reason}`);\n    }\n    const j = (await r.json()) as { ok: true; action: PostActionResult };\n    return j.action;\n}\n"]}

package/dist/index.mjs

@@ -0,0 +1,119 @@
+import { sha256 } from '@noble/hashes/sha256';
+import { canonicalize, hexEncode, computeActionId, parseScope, isSubScope } from '@orangecheck/agent-core';
+import { signAsAgent } from '@orangecheck/agent-signer';
+
+// src/index.ts
+function graphStateHash(state) {
+  const str = canonicalize(state);
+  return "sha256:" + hexEncode(sha256(new TextEncoder().encode(str + "\n")));
+}
+function canonicalizeToolCall(c) {
+  const canon = {
+    args: c.args,
+    call_id: c.callId,
+    graph_state_hash: c.graphStateHash,
+    verb: c.verb
+  };
+  const str = canonicalize(canon);
+  return new TextEncoder().encode(str + "\n");
+}
+function toolCallHash(c) {
+  return "sha256:" + hexEncode(sha256(canonicalizeToolCall(c)));
+}
+function toolCallActionId(agentAddress, signedAt, delegationId, scopeExercised, c) {
+  return computeActionId({
+    address: agentAddress,
+    content_hash: toolCallHash(c),
+    content_length: canonicalizeToolCall(c).byteLength,
+    content_mime: "application/vnd.oc-agent.langgraph-tool-call+json",
+    signed_at: signedAt,
+    delegation_id: delegationId,
+    scope_exercised: scopeExercised
+  });
+}
+async function stampToolCall(input) {
+  const scopeExercised = input.scopeExercised ?? `langgraph:tool(verb=${input.call.verb})`;
+  const granted = (input.delegation.scopes ?? []).map(parseScope);
+  const exercisedParsed = parseScope(scopeExercised);
+  if (!granted.some((g) => isSubScope(exercisedParsed, g))) {
+    throw new Error(
+      `stampToolCall: scope_exercised (${scopeExercised}) is not a sub-scope of any granted scope`
+    );
+  }
+  const bytes = canonicalizeToolCall(input.call);
+  return signAsAgent({
+    agent: input.agent,
+    delegation: input.delegation,
+    content: { hash: toolCallHash(input.call), length: bytes.byteLength },
+    mime: "application/vnd.oc-agent.langgraph-tool-call+json",
+    scopeExercised,
+    signedAt: input.signedAt
+  });
+}
+function ocToolNode(input) {
+  return {
+    verb: input.verb,
+    execute: async (args, ctx) => {
+      const call = {
+        callId: ctx.callId,
+        verb: input.verb,
+        args,
+        graphStateHash: graphStateHash(ctx.graphState)
+      };
+      const action = await stampToolCall({
+        agent: ctx.agent,
+        delegation: ctx.delegation,
+        call
+      });
+      const result = await input.execute(args);
+      let posted = null;
+      if (ctx.console) {
+        try {
+          posted = await postActionToConsole(action, ctx.console);
+        } catch (err) {
+          console.error("[oc-agent-langgraph] postActionToConsole failed:", err);
+        }
+      }
+      return { result, action, posted };
+    }
+  };
+}
+async function postActionToConsole(action, client) {
+  const baseUrl = client.baseUrl ?? "https://console.ochk.io";
+  const f = client.fetch ?? fetch;
+  const body = {
+    project_id: client.projectId,
+    delegation_id: action.delegation_id,
+    agent_address: action.signer.address,
+    scope_exercised: action.scope_exercised,
+    content_hash: action.content.hash,
+    content_length: action.content.length,
+    content_mime: action.content.mime,
+    signed_at: action.signed_at,
+    signature: action.sig.value,
+    id: action.id
+  };
+  const r = await f(`${baseUrl}/api/actions`, {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/json",
+      Authorization: `Bearer ${client.apiToken}`
+    },
+    body: JSON.stringify(body)
+  });
+  if (!r.ok) {
+    let reason = `http_${r.status}`;
+    try {
+      const j2 = await r.json();
+      if (j2.reason) reason = j2.reason;
+    } catch {
+    }
+    throw new Error(`postActionToConsole failed: ${reason}`);
+  }
+  const j = await r.json();
+  return j.action;
+}
+
+export { canonicalizeToolCall, graphStateHash, ocToolNode, postActionToConsole, stampToolCall, toolCallActionId, toolCallHash };
+//# sourceMappingURL=index.mjs.map
+//# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts"],"names":["j"],"mappings":";;;;;AA2CO,SAAS,eAAe,KAAA,EAAwC;AACnE,EAAA,MAAM,GAAA,GAAM,aAAa,KAAsD,CAAA;AAC/E,EAAA,OAAO,SAAA,GAAY,SAAA,CAAU,MAAA,CAAO,IAAI,WAAA,GAAc,MAAA,CAAO,GAAA,GAAM,IAAI,CAAC,CAAC,CAAA;AAC7E;AA4BO,SAAS,qBAAqB,CAAA,EAAkC;AACnE,EAAA,MAAM,KAAA,GAAQ;AAAA,IACV,MAAM,CAAA,CAAE,IAAA;AAAA,IACR,SAAS,CAAA,CAAE,MAAA;AAAA,IACX,kBAAkB,CAAA,CAAE,cAAA;AAAA,IACpB,MAAM,CAAA,CAAE;AAAA,GACZ;AACA,EAAA,MAAM,GAAA,GAAM,aAAa,KAAsD,CAAA;AAC/E,EAAA,OAAO,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,MAAM,IAAI,CAAA;AAC9C;AAEO,SAAS,aAAa,CAAA,EAA8B;AACvD,EAAA,OAAO,YAAY,SAAA,CAAU,MAAA,CAAO,oBAAA,CAAqB,CAAC,CAAC,CAAC,CAAA;AAChE;AAEO,SAAS,gBAAA,CACZ,YAAA,EACA,QAAA,EACA,YAAA,EACA,gBACA,CAAA,EACM;AACN,EAAA,OAAO,eAAA,CAAgB;AAAA,IACnB,OAAA,EAAS,YAAA;AAAA,IACT,YAAA,EAAc,aAAa,CAAC,CAAA;AAAA,IAC5B,cAAA,EAAgB,oBAAA,CAAqB,CAAC,CAAA,CAAE,UAAA;AAAA,IACxC,YAAA,EAAc,mDAAA;AAAA,IACd,SAAA,EAAW,QAAA;AAAA,IACX,aAAA,EAAe,YAAA;AAAA,IACf,eAAA,EAAiB;AAAA,GACpB,CAAA;AACL;AAkBA,eAAsB,cAAc,KAAA,EAAoD;AACpF,EAAA,MAAM,iBACF,KAAA,CAAM,cAAA,IAAkB,CAAA,oBAAA,EAAuB,KAAA,CAAM,KAAK,IAAI,CAAA,CAAA,CAAA;AAElE,EAAA,MAAM,WAAW,KAAA,CAAM,UAAA,CAAW,UAAU,EAAC,EAAG,IAAI,UAAU,CAAA;AAC9D,EAAA,MAAM,eAAA,GAAkB,WAAW,cAAc,CAAA;AACjD,EAAA,IAAI,CAAC,QAAQ,IAAA,CAAK,CAAC,MAAM,UAAA,CAAW,eAAA,EAAiB,CAAC,CAAC,CAAA,EAAG;AACtD,IAAA,MAAM,IAAI,KAAA;AAAA,MACN,mCAAmC,cAAc,CAAA,yCAAA;AAAA,KACrD;AAAA,EACJ;AAEA,EAAA,MAAM,KAAA,GAAQ,oBAAA,CAAqB,KAAA,CAAM,IAAI,CAAA;AAC7C,EAAA,OAAO,WAAA,CAAY;AAAA,IACf,OAAO,KAAA,CAAM,KAAA;AAAA,IACb,YAAY,KAAA,CAAM,UAAA;AAAA,IAClB,OAAA,EAAS,EAAE,IAAA,EAAM,YAAA,CAAa,MAAM,IAAI,CAAA,EAAG,MAAA,EAAQ,KAAA,CAAM,UAAA,EAAW;AAAA,IACpE,IAAA,EAAM,mDAAA;AAAA,IACN,cAAA;AAAA,IACA,UAAU,KAAA,CAAM;AAAA,GACnB,CAAA;AACL;AA2DO,SAAS,WACZ,KAAA,EACiC;AACjC,EAAA,OAAO;AAAA,IACH,MAAM,KAAA,CAAM,IAAA;AAAA,IACZ,OAAA,EAAS,OAAO,IAAA,EAAM,GAAA,KAAQ;AAC1B,MAAA,MAAM,IAAA,GAA0B;AAAA,QAC5B,QAAQ,GAAA,CAAI,MAAA;AAAA,QACZ,MAAM,KAAA,CAAM,IAAA;AAAA,QACZ,IAAA;AAAA,QACA,cAAA,EAAgB,cAAA,CAAe,GAAA,CAAI,UAAU;AAAA,OACjD;AACA,MAAA,MAAM,MAAA,GAAS,MAAM,aAAA,CAAc;AAAA,QAC/B,OAAO,GAAA,CAAI,KAAA;AAAA,QACX,YAAY,GAAA,CAAI,UAAA;AAAA,QAChB;AAAA,OACH,CAAA;AACD,MAAA,MAAM,MAAA,GAAS,MAAM,KAAA,CAAM,OAAA,CAAQ,IAAI,CAAA;AACvC,MAAA,IAAI,MAAA,GAAkC,IAAA;AACtC,MAAA,IAAI,IAAI,OAAA,EAAS;AACb,QAAA,IAAI;AACA,UAAA,MAAA,GAAS,MAAM,mBAAA,CAAoB,MAAA,EAAQ,GAAA,CAAI,OAAO,CAAA;AAAA,QAC1D,SAAS,GAAA,EAAK;AAEV,UAAA,OAAA,CAAQ,KAAA,CAAM,oDAAoD,GAAG,CAAA;AAAA,QACzE;AAAA,MACJ;AACA,MAAA,OAAO,EAAE,MAAA,EAAQ,MAAA,EAAQ,MAAA,EAAO;AAAA,IACpC;AAAA,GACJ;AACJ;AAuBA,eAAsB,mBAAA,CAClB,QACA,MAAA,EACyB;AACzB,EAAA,MAAM,OAAA,GAAU,OAAO,OAAA,IAAW,yBAAA;AAClC,EAAA,MAAM,CAAA,GAAI,OAAO,KAAA,IAAS,KAAA;AAC1B,EAAA,MAAM,IAAA,GAAO;AAAA,IACT,YAAY,MAAA,CAAO,SAAA;AAAA,IACnB,eAAe,MAAA,CAAO,aAAA;AAAA,IACtB,aAAA,EAAe,OAAO,MAAA,CAAO,OAAA;AAAA,IAC7B,iBAAiB,MAAA,CAAO,eAAA;AAAA,IACxB,YAAA,EAAc,OAAO,OAAA,CAAQ,IAAA;AAAA,IAC7B,cAAA,EAAgB,OAAO,OAAA,CAAQ,MAAA;AAAA,IAC/B,YAAA,EAAc,OAAO,OAAA,CAAQ,IAAA;AAAA,IAC7B,WAAW,MAAA,CAAO,SAAA;AAAA,IAClB,SAAA,EAAW,OAAO,GAAA,CAAI,KAAA;AAAA,IACtB,IAAI,MAAA,CAAO;AAAA,GACf;AACA,EAAA,MAAM,CAAA,GAAI,MAAM,CAAA,CAAE,CAAA,EAAG,OAAO,CAAA,YAAA,CAAA,EAAgB;AAAA,IACxC,MAAA,EAAQ,MAAA;AAAA,IACR,OAAA,EAAS;AAAA,MACL,cAAA,EAAgB,kBAAA;AAAA,MAChB,aAAA,EAAe,CAAA,OAAA,EAAU,MAAA,CAAO,QAAQ,CAAA;AAAA,KAC5C;AAAA,IACA,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,IAAI;AAAA,GAC5B,CAAA;AACD,EAAA,IAAI,CAAC,EAAE,EAAA,EAAI;AACP,IAAA,IAAI,MAAA,GAAS,CAAA,KAAA,EAAQ,CAAA,CAAE,MAAM,CAAA,CAAA;AAC7B,IAAA,IAAI;AACA,MAAA,MAAMA,EAAAA,GAAK,MAAM,CAAA,CAAE,IAAA,EAAK;AACxB,MAAA,IAAIA,EAAAA,CAAE,MAAA,EAAQ,MAAA,GAASA,EAAAA,CAAE,MAAA;AAAA,IAC7B,CAAA,CAAA,MAAQ;AAAA,IAER;AACA,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,4BAAA,EAA+B,MAAM,CAAA,CAAE,CAAA;AAAA,EAC3D;AACA,EAAA,MAAM,CAAA,GAAK,MAAM,CAAA,CAAE,IAAA,EAAK;AACxB,EAAA,OAAO,CAAA,CAAE,MAAA;AACb","file":"index.mjs","sourcesContent":["// @orangecheck/agent-langgraph — wrap LangGraph tool-node executions in\n// OC Agent action envelopes.\n//\n// LangGraph's distinguishing feature is graph state: stateful agents\n// composed of typed nodes that share a persisted state object. The\n// compliance-relevant question becomes \"at what graph state did this\n// agent take this action?\" — and the answer must be cryptographically\n// bound to the action receipt.\n//\n// This adapter therefore canonicalizes (verb, args, callId, graph_state_hash)\n// — one extra field over the agent-mcp / agent-anthropic / agent-openai /\n// agent-vercel canonicalization. Two verifiers re-deriving the action from\n// a persisted graph snapshot compute the same envelope id only when the\n// snapshot's state-hash matches; tampered or out-of-order replay fails.\n\nimport { sha256 } from '@noble/hashes/sha256';\nimport {\n    canonicalize,\n    computeActionId,\n    hexEncode,\n    isSubScope,\n    parseScope,\n    type DelegationEnvelope,\n} from '@orangecheck/agent-core';\nimport {\n    signAsAgent,\n    type ActionEnvelope,\n    type SignerRef,\n} from '@orangecheck/agent-signer';\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Graph state hashing\n// ─────────────────────────────────────────────────────────────────────────────\n\n/**\n * Compute a stable hash of a LangGraph state object. Use canonical JSON\n * (RFC 8785) so reordered keys / repeated serializations produce the same\n * hash. Returns `sha256:<64-hex>`.\n *\n * Most LangGraph deployments persist the state object via a checkpointer\n * (in-memory, postgres, redis, etc.). The state-hash here is over the\n * checkpointer's serialized state at the moment the tool node fires.\n */\nexport function graphStateHash(state: Record<string, unknown>): string {\n    const str = canonicalize(state as unknown as Parameters<typeof canonicalize>[0]);\n    return 'sha256:' + hexEncode(sha256(new TextEncoder().encode(str + '\\n')));\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Tool-call canonicalization\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport interface LangGraphToolCall {\n    /** Stable id assigned by your graph runtime for this tool invocation. */\n    callId: string;\n    /** Tool verb — typically the node name. */\n    verb: string;\n    /** JSON-serializable arguments to the tool node. */\n    args: Record<string, unknown>;\n    /** sha256:<64-hex> of the graph state at the moment of execution. */\n    graphStateHash: string;\n}\n\n/**\n * Produce the canonical bytes for a LangGraph tool call.\n *\n * Shape (RFC 8785 canonical JSON, then trailing LF):\n *   {\n *     \"args\":              <canonical JSON of args>,\n *     \"call_id\":           <callId>,\n *     \"graph_state_hash\":  <state hash>,\n *     \"verb\":              <verb>\n *   }\n */\nexport function canonicalizeToolCall(c: LangGraphToolCall): Uint8Array {\n    const canon = {\n        args: c.args,\n        call_id: c.callId,\n        graph_state_hash: c.graphStateHash,\n        verb: c.verb,\n    };\n    const str = canonicalize(canon as unknown as Parameters<typeof canonicalize>[0]);\n    return new TextEncoder().encode(str + '\\n');\n}\n\nexport function toolCallHash(c: LangGraphToolCall): string {\n    return 'sha256:' + hexEncode(sha256(canonicalizeToolCall(c)));\n}\n\nexport function toolCallActionId(\n    agentAddress: string,\n    signedAt: string,\n    delegationId: string,\n    scopeExercised: string,\n    c: LangGraphToolCall\n): string {\n    return computeActionId({\n        address: agentAddress,\n        content_hash: toolCallHash(c),\n        content_length: canonicalizeToolCall(c).byteLength,\n        content_mime: 'application/vnd.oc-agent.langgraph-tool-call+json',\n        signed_at: signedAt,\n        delegation_id: delegationId,\n        scope_exercised: scopeExercised,\n    });\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Stamping primitive\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport interface AgentContext {\n    agent: SignerRef;\n    delegation: DelegationEnvelope;\n}\n\nexport interface StampToolCallInput extends AgentContext {\n    call: LangGraphToolCall;\n    /** Defaults to `langgraph:tool(verb=<verb>)` — the tightest admissible sub-scope. */\n    scopeExercised?: string;\n    signedAt?: Date;\n}\n\nexport async function stampToolCall(input: StampToolCallInput): Promise<ActionEnvelope> {\n    const scopeExercised =\n        input.scopeExercised ?? `langgraph:tool(verb=${input.call.verb})`;\n\n    const granted = (input.delegation.scopes ?? []).map(parseScope);\n    const exercisedParsed = parseScope(scopeExercised);\n    if (!granted.some((g) => isSubScope(exercisedParsed, g))) {\n        throw new Error(\n            `stampToolCall: scope_exercised (${scopeExercised}) is not a sub-scope of any granted scope`\n        );\n    }\n\n    const bytes = canonicalizeToolCall(input.call);\n    return signAsAgent({\n        agent: input.agent,\n        delegation: input.delegation as never,\n        content: { hash: toolCallHash(input.call), length: bytes.byteLength },\n        mime: 'application/vnd.oc-agent.langgraph-tool-call+json',\n        scopeExercised,\n        signedAt: input.signedAt,\n    });\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// ocToolNode — convenience wrapper\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport interface OcToolNodeInput<TArgs extends Record<string, unknown>, TResult> {\n    /** OC Agent verb under which this tool is exercised. */\n    verb: string;\n    /** Your real handler. Receives the same args your LangGraph tool node receives. */\n    execute: (args: TArgs) => Promise<TResult>;\n}\n\nexport interface OcToolNodeWrapped<TArgs extends Record<string, unknown>, TResult> {\n    verb: string;\n    /**\n     * The execute fn your LangGraph node calls. Receives args + a context\n     * object with the agent ref, delegation, callId, current graph state,\n     * and an optional `console` field that triggers fire-and-forget POST\n     * to console.ochk.io/api/actions after the underlying execute returns.\n     */\n    execute: (\n        args: TArgs,\n        ctx: AgentContext & {\n            callId: string;\n            graphState: Record<string, unknown>;\n            console?: ConsoleClient;\n        }\n    ) => Promise<{\n        result: TResult;\n        action: ActionEnvelope;\n        posted: PostActionResult | null;\n    }>;\n}\n\n/**\n * Wrap a LangGraph tool-node execute path so it produces an OC Agent\n * action envelope per call. The wrapper computes the graph_state_hash\n * inline from the supplied state object, so the verifier replaying the\n * graph against a persisted snapshot gets the same hash deterministically.\n *\n * Typical shape:\n *\n *   const createInvoice = ocToolNode({\n *     verb: 'invoice.create',\n *     execute: async (args) => myInvoiceCreateImpl(args),\n *   });\n *\n *   const graph = new StateGraph(MyState)\n *     .addNode('createInvoice', async (state) => {\n *       const args = pickToolArgs(state);\n *       const callId = state.lastToolCallId;\n *       const { result, action } = await createInvoice.execute(args, {\n *         agent, delegation, callId, graphState: state,\n *       });\n *       await audit.append(action);\n *       return mergeResultIntoState(state, result);\n *     });\n */\nexport function ocToolNode<TArgs extends Record<string, unknown>, TResult>(\n    input: OcToolNodeInput<TArgs, TResult>\n): OcToolNodeWrapped<TArgs, TResult> {\n    return {\n        verb: input.verb,\n        execute: async (args, ctx) => {\n            const call: LangGraphToolCall = {\n                callId: ctx.callId,\n                verb: input.verb,\n                args,\n                graphStateHash: graphStateHash(ctx.graphState),\n            };\n            const action = await stampToolCall({\n                agent: ctx.agent,\n                delegation: ctx.delegation,\n                call,\n            });\n            const result = await input.execute(args);\n            let posted: PostActionResult | null = null;\n            if (ctx.console) {\n                try {\n                    posted = await postActionToConsole(action, ctx.console);\n                } catch (err) {\n                    // eslint-disable-next-line no-console\n                    console.error('[oc-agent-langgraph] postActionToConsole failed:', err);\n                }\n            }\n            return { result, action, posted };\n        },\n    };\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Console integration: POST stamped actions to console.ochk.io/api/actions\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport interface ConsoleClient {\n    /** Defaults to https://console.ochk.io. */\n    baseUrl?: string;\n    /** Bearer token from /settings § 03 (`ock_<hex>`). */\n    apiToken: string;\n    /** Project the action belongs to (proj_*). */\n    projectId: string;\n    /** Optional fetch override for runtimes that need it. */\n    fetch?: typeof fetch;\n}\n\nexport interface PostActionResult {\n    id: string;\n    project_id: string;\n    delegation_id: string;\n}\n\nexport async function postActionToConsole(\n    action: ActionEnvelope,\n    client: ConsoleClient\n): Promise<PostActionResult> {\n    const baseUrl = client.baseUrl ?? 'https://console.ochk.io';\n    const f = client.fetch ?? fetch;\n    const body = {\n        project_id: client.projectId,\n        delegation_id: action.delegation_id,\n        agent_address: action.signer.address,\n        scope_exercised: action.scope_exercised,\n        content_hash: action.content.hash,\n        content_length: action.content.length,\n        content_mime: action.content.mime,\n        signed_at: action.signed_at,\n        signature: action.sig.value,\n        id: action.id,\n    };\n    const r = await f(`${baseUrl}/api/actions`, {\n        method: 'POST',\n        headers: {\n            'Content-Type': 'application/json',\n            Authorization: `Bearer ${client.apiToken}`,\n        },\n        body: JSON.stringify(body),\n    });\n    if (!r.ok) {\n        let reason = `http_${r.status}`;\n        try {\n            const j = (await r.json()) as { reason?: string };\n            if (j.reason) reason = j.reason;\n        } catch {\n            // body wasn't json\n        }\n        throw new Error(`postActionToConsole failed: ${reason}`);\n    }\n    const j = (await r.json()) as { ok: true; action: PostActionResult };\n    return j.action;\n}\n"]}

package/package.json

@@ -0,0 +1,67 @@
+{
+  "name": "@orangecheck/agent-langgraph",
+  "version": "0.1.0",
+  "description": "Wrap LangGraph tool nodes with OC Agent scope enforcement and emit a signed agent-action envelope per execution. Binds the action to the graph-state hash so verifiers replay the audit against the persisted graph snapshot.",
+  "keywords": [
+    "bitcoin",
+    "agent",
+    "authority",
+    "langgraph",
+    "langchain",
+    "graph",
+    "tool-calls",
+    "bip322",
+    "oc-agent",
+    "orangecheck"
+  ],
+  "author": "OrangeCheck",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/orangecheck/oc-packages.git",
+    "directory": "agent-langgraph"
+  },
+  "homepage": "https://github.com/orangecheck/oc-agent-protocol",
+  "bugs": {
+    "url": "https://github.com/orangecheck/oc-agent-protocol/issues"
+  },
+  "main": "./dist/index.js",
+  "module": "./dist/index.mjs",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.mjs",
+      "require": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "src",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "tsup",
+    "dev": "tsup --watch",
+    "type-check": "tsc --noEmit",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "clean": "rm -rf dist",
+    "prepublishOnly": "npm run clean && npm run build"
+  },
+  "dependencies": {
+    "@noble/hashes": "^1.5.0",
+    "@orangecheck/agent-core": "^0.3.0",
+    "@orangecheck/agent-signer": "^0.1.0"
+  },
+  "devDependencies": {
+    "@types/node": "^22.10.2",
+    "tsup": "^8.3.5",
+    "typescript": "^5.7.2",
+    "vitest": "^3.2.4"
+  },
+  "publishConfig": {
+    "access": "public"
+  }
+}

package/src/index.test.ts

@@ -0,0 +1,63 @@
+import { describe, expect, it } from 'vitest';
+
+import {
+    canonicalizeToolCall,
+    graphStateHash,
+    toolCallHash,
+} from './index.js';
+
+describe('graphStateHash', () => {
+    it('produces the same hash for key-reordered state', () => {
+        const a = graphStateHash({ messages: [], step: 1, user: 'alice' });
+        const b = graphStateHash({ user: 'alice', messages: [], step: 1 });
+        expect(a).toEqual(b);
+    });
+
+    it('changes when state changes', () => {
+        const a = graphStateHash({ step: 1 });
+        const b = graphStateHash({ step: 2 });
+        expect(a).not.toBe(b);
+    });
+});
+
+describe('canonicalizeToolCall', () => {
+    it('produces byte-identical output for identical inputs (key reorder)', () => {
+        const stateHash = graphStateHash({ step: 1 });
+        const a = canonicalizeToolCall({
+            callId: 'tc_1',
+            verb: 'invoice.create',
+            args: { customer: 'acme', amount: 14.2 },
+            graphStateHash: stateHash,
+        });
+        const b = canonicalizeToolCall({
+            graphStateHash: stateHash,
+            verb: 'invoice.create',
+            callId: 'tc_1',
+            args: { amount: 14.2, customer: 'acme' },
+        });
+        expect(a).toEqual(b);
+    });
+
+    it('hash changes when graph state changes', () => {
+        const a = toolCallHash({
+            callId: 't',
+            verb: 'x',
+            args: {},
+            graphStateHash: graphStateHash({ step: 1 }),
+        });
+        const b = toolCallHash({
+            callId: 't',
+            verb: 'x',
+            args: {},
+            graphStateHash: graphStateHash({ step: 2 }),
+        });
+        expect(a).not.toBe(b);
+    });
+
+    it('hash changes when args change', () => {
+        const stateHash = graphStateHash({ step: 1 });
+        const a = toolCallHash({ callId: 't', verb: 'x', args: { a: 1 }, graphStateHash: stateHash });
+        const b = toolCallHash({ callId: 't', verb: 'x', args: { a: 2 }, graphStateHash: stateHash });
+        expect(a).not.toBe(b);
+    });
+});

package/src/index.ts

@@ -0,0 +1,295 @@
+// @orangecheck/agent-langgraph — wrap LangGraph tool-node executions in
+// OC Agent action envelopes.
+//
+// LangGraph's distinguishing feature is graph state: stateful agents
+// composed of typed nodes that share a persisted state object. The
+// compliance-relevant question becomes "at what graph state did this
+// agent take this action?" — and the answer must be cryptographically
+// bound to the action receipt.
+//
+// This adapter therefore canonicalizes (verb, args, callId, graph_state_hash)
+// — one extra field over the agent-mcp / agent-anthropic / agent-openai /
+// agent-vercel canonicalization. Two verifiers re-deriving the action from
+// a persisted graph snapshot compute the same envelope id only when the
+// snapshot's state-hash matches; tampered or out-of-order replay fails.
+
+import { sha256 } from '@noble/hashes/sha256';
+import {
+    canonicalize,
+    computeActionId,
+    hexEncode,
+    isSubScope,
+    parseScope,
+    type DelegationEnvelope,
+} from '@orangecheck/agent-core';
+import {
+    signAsAgent,
+    type ActionEnvelope,
+    type SignerRef,
+} from '@orangecheck/agent-signer';
+
+// ─────────────────────────────────────────────────────────────────────────────
+// Graph state hashing
+// ─────────────────────────────────────────────────────────────────────────────
+
+/**
+ * Compute a stable hash of a LangGraph state object. Use canonical JSON
+ * (RFC 8785) so reordered keys / repeated serializations produce the same
+ * hash. Returns `sha256:<64-hex>`.
+ *
+ * Most LangGraph deployments persist the state object via a checkpointer
+ * (in-memory, postgres, redis, etc.). The state-hash here is over the
+ * checkpointer's serialized state at the moment the tool node fires.
+ */
+export function graphStateHash(state: Record<string, unknown>): string {
+    const str = canonicalize(state as unknown as Parameters<typeof canonicalize>[0]);
+    return 'sha256:' + hexEncode(sha256(new TextEncoder().encode(str + '\n')));
+}
+
+// ─────────────────────────────────────────────────────────────────────────────
+// Tool-call canonicalization
+// ─────────────────────────────────────────────────────────────────────────────
+
+export interface LangGraphToolCall {
+    /** Stable id assigned by your graph runtime for this tool invocation. */
+    callId: string;
+    /** Tool verb — typically the node name. */
+    verb: string;
+    /** JSON-serializable arguments to the tool node. */
+    args: Record<string, unknown>;
+    /** sha256:<64-hex> of the graph state at the moment of execution. */
+    graphStateHash: string;
+}
+
+/**
+ * Produce the canonical bytes for a LangGraph tool call.
+ *
+ * Shape (RFC 8785 canonical JSON, then trailing LF):
+ *   {
+ *     "args":              <canonical JSON of args>,
+ *     "call_id":           <callId>,
+ *     "graph_state_hash":  <state hash>,
+ *     "verb":              <verb>
+ *   }
+ */
+export function canonicalizeToolCall(c: LangGraphToolCall): Uint8Array {
+    const canon = {
+        args: c.args,
+        call_id: c.callId,
+        graph_state_hash: c.graphStateHash,
+        verb: c.verb,
+    };
+    const str = canonicalize(canon as unknown as Parameters<typeof canonicalize>[0]);
+    return new TextEncoder().encode(str + '\n');
+}
+
+export function toolCallHash(c: LangGraphToolCall): string {
+    return 'sha256:' + hexEncode(sha256(canonicalizeToolCall(c)));
+}
+
+export function toolCallActionId(
+    agentAddress: string,
+    signedAt: string,
+    delegationId: string,
+    scopeExercised: string,
+    c: LangGraphToolCall
+): string {
+    return computeActionId({
+        address: agentAddress,
+        content_hash: toolCallHash(c),
+        content_length: canonicalizeToolCall(c).byteLength,
+        content_mime: 'application/vnd.oc-agent.langgraph-tool-call+json',
+        signed_at: signedAt,
+        delegation_id: delegationId,
+        scope_exercised: scopeExercised,
+    });
+}
+
+// ─────────────────────────────────────────────────────────────────────────────
+// Stamping primitive
+// ─────────────────────────────────────────────────────────────────────────────
+
+export interface AgentContext {
+    agent: SignerRef;
+    delegation: DelegationEnvelope;
+}
+
+export interface StampToolCallInput extends AgentContext {
+    call: LangGraphToolCall;
+    /** Defaults to `langgraph:tool(verb=<verb>)` — the tightest admissible sub-scope. */
+    scopeExercised?: string;
+    signedAt?: Date;
+}
+
+export async function stampToolCall(input: StampToolCallInput): Promise<ActionEnvelope> {
+    const scopeExercised =
+        input.scopeExercised ?? `langgraph:tool(verb=${input.call.verb})`;
+
+    const granted = (input.delegation.scopes ?? []).map(parseScope);
+    const exercisedParsed = parseScope(scopeExercised);
+    if (!granted.some((g) => isSubScope(exercisedParsed, g))) {
+        throw new Error(
+            `stampToolCall: scope_exercised (${scopeExercised}) is not a sub-scope of any granted scope`
+        );
+    }
+
+    const bytes = canonicalizeToolCall(input.call);
+    return signAsAgent({
+        agent: input.agent,
+        delegation: input.delegation as never,
+        content: { hash: toolCallHash(input.call), length: bytes.byteLength },
+        mime: 'application/vnd.oc-agent.langgraph-tool-call+json',
+        scopeExercised,
+        signedAt: input.signedAt,
+    });
+}
+
+// ─────────────────────────────────────────────────────────────────────────────
+// ocToolNode — convenience wrapper
+// ─────────────────────────────────────────────────────────────────────────────
+
+export interface OcToolNodeInput<TArgs extends Record<string, unknown>, TResult> {
+    /** OC Agent verb under which this tool is exercised. */
+    verb: string;
+    /** Your real handler. Receives the same args your LangGraph tool node receives. */
+    execute: (args: TArgs) => Promise<TResult>;
+}
+
+export interface OcToolNodeWrapped<TArgs extends Record<string, unknown>, TResult> {
+    verb: string;
+    /**
+     * The execute fn your LangGraph node calls. Receives args + a context
+     * object with the agent ref, delegation, callId, current graph state,
+     * and an optional `console` field that triggers fire-and-forget POST
+     * to console.ochk.io/api/actions after the underlying execute returns.
+     */
+    execute: (
+        args: TArgs,
+        ctx: AgentContext & {
+            callId: string;
+            graphState: Record<string, unknown>;
+            console?: ConsoleClient;
+        }
+    ) => Promise<{
+        result: TResult;
+        action: ActionEnvelope;
+        posted: PostActionResult | null;
+    }>;
+}
+
+/**
+ * Wrap a LangGraph tool-node execute path so it produces an OC Agent
+ * action envelope per call. The wrapper computes the graph_state_hash
+ * inline from the supplied state object, so the verifier replaying the
+ * graph against a persisted snapshot gets the same hash deterministically.
+ *
+ * Typical shape:
+ *
+ *   const createInvoice = ocToolNode({
+ *     verb: 'invoice.create',
+ *     execute: async (args) => myInvoiceCreateImpl(args),
+ *   });
+ *
+ *   const graph = new StateGraph(MyState)
+ *     .addNode('createInvoice', async (state) => {
+ *       const args = pickToolArgs(state);
+ *       const callId = state.lastToolCallId;
+ *       const { result, action } = await createInvoice.execute(args, {
+ *         agent, delegation, callId, graphState: state,
+ *       });
+ *       await audit.append(action);
+ *       return mergeResultIntoState(state, result);
+ *     });
+ */
+export function ocToolNode<TArgs extends Record<string, unknown>, TResult>(
+    input: OcToolNodeInput<TArgs, TResult>
+): OcToolNodeWrapped<TArgs, TResult> {
+    return {
+        verb: input.verb,
+        execute: async (args, ctx) => {
+            const call: LangGraphToolCall = {
+                callId: ctx.callId,
+                verb: input.verb,
+                args,
+                graphStateHash: graphStateHash(ctx.graphState),
+            };
+            const action = await stampToolCall({
+                agent: ctx.agent,
+                delegation: ctx.delegation,
+                call,
+            });
+            const result = await input.execute(args);
+            let posted: PostActionResult | null = null;
+            if (ctx.console) {
+                try {
+                    posted = await postActionToConsole(action, ctx.console);
+                } catch (err) {
+                    // eslint-disable-next-line no-console
+                    console.error('[oc-agent-langgraph] postActionToConsole failed:', err);
+                }
+            }
+            return { result, action, posted };
+        },
+    };
+}
+
+// ─────────────────────────────────────────────────────────────────────────────
+// Console integration: POST stamped actions to console.ochk.io/api/actions
+// ─────────────────────────────────────────────────────────────────────────────
+
+export interface ConsoleClient {
+    /** Defaults to https://console.ochk.io. */
+    baseUrl?: string;
+    /** Bearer token from /settings § 03 (`ock_<hex>`). */
+    apiToken: string;
+    /** Project the action belongs to (proj_*). */
+    projectId: string;
+    /** Optional fetch override for runtimes that need it. */
+    fetch?: typeof fetch;
+}
+
+export interface PostActionResult {
+    id: string;
+    project_id: string;
+    delegation_id: string;
+}
+
+export async function postActionToConsole(
+    action: ActionEnvelope,
+    client: ConsoleClient
+): Promise<PostActionResult> {
+    const baseUrl = client.baseUrl ?? 'https://console.ochk.io';
+    const f = client.fetch ?? fetch;
+    const body = {
+        project_id: client.projectId,
+        delegation_id: action.delegation_id,
+        agent_address: action.signer.address,
+        scope_exercised: action.scope_exercised,
+        content_hash: action.content.hash,
+        content_length: action.content.length,
+        content_mime: action.content.mime,
+        signed_at: action.signed_at,
+        signature: action.sig.value,
+        id: action.id,
+    };
+    const r = await f(`${baseUrl}/api/actions`, {
+        method: 'POST',
+        headers: {
+            'Content-Type': 'application/json',
+            Authorization: `Bearer ${client.apiToken}`,
+        },
+        body: JSON.stringify(body),
+    });
+    if (!r.ok) {
+        let reason = `http_${r.status}`;
+        try {
+            const j = (await r.json()) as { reason?: string };
+            if (j.reason) reason = j.reason;
+        } catch {
+            // body wasn't json
+        }
+        throw new Error(`postActionToConsole failed: ${reason}`);
+    }
+    const j = (await r.json()) as { ok: true; action: PostActionResult };
+    return j.action;
+}