@orangecheck/agent-langgraph 1.1.1 → 1.1.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +2 -2
- package/package.json +3 -3
package/README.md
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
# @orangecheck/agent-langgraph
|
|
2
2
|
|
|
3
|
-
> **Full reference:** [
|
|
3
|
+
> **Full reference:** [ochk.io/docs/sdk/agent-langgraph](https://ochk.io/docs/sdk/agent-langgraph) — auto-generated from the TypeScript source on every release.
|
|
4
4
|
> Hand-written prose below is the high-level overview; the docs site is the source of truth for every export, type, and signature.
|
|
5
5
|
|
|
6
6
|
|
|
@@ -81,7 +81,7 @@ To verify an action against a persisted graph snapshot:
|
|
|
81
81
|
|
|
82
82
|
1. Decode the action envelope's content hash.
|
|
83
83
|
2. Recompute `graphStateHash(persisted_state)` and check it equals the `graph_state_hash` declared in the canonicalized content.
|
|
84
|
-
3. Run
|
|
84
|
+
3. Run `verifyActionAsOfSignedAt()` from `@orangecheck/agent-core` against the action + delegation + revocations + Bitcoin headers. It answers for the time the action was signed, which is what a replay asks. A server deciding whether to run a call now uses `verifyAction()`, which checks as of now, and a replay guard.
|
|
85
85
|
|
|
86
86
|
The replay verifier picks up forks automatically: if the persisted snapshot doesn't match the state at execution time, the `graph_state_hash` differs and the action's content hash won't reproduce.
|
|
87
87
|
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@orangecheck/agent-langgraph",
|
|
3
|
-
"version": "1.1.
|
|
3
|
+
"version": "1.1.3",
|
|
4
4
|
"description": "Wrap LangGraph tool nodes with OC Agent scope enforcement and emit a signed agent-action envelope per execution. Binds the action to the graph-state hash so verifiers replay the audit against the persisted graph snapshot.",
|
|
5
5
|
"keywords": [
|
|
6
6
|
"bitcoin",
|
|
@@ -52,8 +52,8 @@
|
|
|
52
52
|
},
|
|
53
53
|
"dependencies": {
|
|
54
54
|
"@noble/hashes": "^1.5.0",
|
|
55
|
-
"@orangecheck/agent-core": "^2.
|
|
56
|
-
"@orangecheck/agent-signer": "^0.
|
|
55
|
+
"@orangecheck/agent-core": "^2.9.0",
|
|
56
|
+
"@orangecheck/agent-signer": "^0.5.2"
|
|
57
57
|
},
|
|
58
58
|
"devDependencies": {
|
|
59
59
|
"@types/node": "^22.10.2",
|