@orangecheck/agent-openai 1.1.2 → 1.1.4

package/README.md

@@ -56,7 +56,7 @@ The stamp's `content.hash` is a SHA-256 of the RFC-8785-canonicalized JSON:
 }
 ```
 
-The action's `scope_exercised` defaults to `openai:function(name=<name>)`. Override via `scopeExercised`.
+The action's `scope_exercised` defaults to `openai:function(name="<name>")` (the name quoted, so it is read as written). Override via `scopeExercised`.
 
 ## API
 

package/dist/index.js

@@ -63,7 +63,12 @@ function functionCallActionId(agentAddress, signedAt, delegationId, scopeExercis
 }
 async function stampFunctionCall(input) {
   const fc = typeof input.call === "object" && input.call !== null && "arguments" in input.call && typeof input.call.arguments !== "string" ? input.call : parseFunctionCall(input.call);
-  const scopeExercised = input.scopeExercised ?? `openai:function(name=${fc.name})`;
+  const scopeExercised = input.scopeExercised ?? agentCore.canonicalizeScope({
+    product: "openai",
+    verb: "function",
+    // A quoted value, read as written: a tool called "*" is that tool.
+    constraints: [{ key: "name", op: "=", value: fc.name, quoted: true }]
+  });
   agentCore.assertScopeGranted(input.delegation, scopeExercised, "stampFunctionCall");
   const bytes = canonicalizeFunctionCall(fc);
   return agentSigner.signAsAgent({

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts"],"names":["canonicalize","hexEncode","sha256","computeActionId","assertScopeGranted","signAsAgent"],"mappings":";;;;;;;AAoDO,SAAS,kBAAkB,GAAA,EAAkC;AAChE,EAAA,IAAI,GAAA,IAAO,IAAA,IAAQ,OAAO,GAAA,KAAQ,QAAA,EAAU;AACxC,IAAA,MAAM,IAAI,UAAU,2CAA2C,CAAA;AAAA,EACnE;AACA,EAAA,MAAM,CAAA,GAAI,GAAA;AAGV,EAAA,IAAI,CAAA,CAAE,QAAA,IAAY,OAAO,CAAA,CAAE,aAAa,QAAA,EAAU;AAC9C,IAAA,MAAM,IAAI,CAAA,CAAE,QAAA;AACZ,IAAA,OAAO;AAAA,MACH,EAAA,EAAI,MAAA,CAAO,CAAA,CAAE,EAAA,IAAM,EAAE,CAAA;AAAA,MACrB,IAAA,EAAM,MAAA,CAAO,CAAA,CAAE,IAAA,IAAQ,EAAE,CAAA;AAAA,MACzB,SAAA,EAAW,SAAA,CAAU,CAAA,CAAE,SAAS;AAAA,KACpC;AAAA,EACJ;AAGA,EAAA,OAAO;AAAA,IACH,IAAI,MAAA,CAAO,CAAA,CAAE,EAAA,IAAM,CAAA,CAAE,WAAW,EAAE,CAAA;AAAA,IAClC,IAAA,EAAM,MAAA,CAAO,CAAA,CAAE,IAAA,IAAQ,EAAE,CAAA;AAAA,IACzB,SAAA,EAAW,SAAA,CAAU,CAAA,CAAE,SAAS;AAAA,GACpC;AACJ;AAEA,SAAS,UAAU,IAAA,EAAwC;AACvD,EAAA,IAAI,IAAA,IAAQ,IAAA,EAAM,OAAO,EAAC;AAC1B,EAAA,IAAI,OAAO,IAAA,KAAS,QAAA,EAAU,OAAO,IAAA;AACrC,EAAA,IAAI,OAAO,SAAS,QAAA,EAAU;AAC1B,IAAA,IAAI;AACA,MAAA,MAAM,CAAA,GAAI,IAAA,CAAK,KAAA,CAAM,IAAI,CAAA;AACzB,MAAA,IAAI,CAAA,IAAK,OAAO,CAAA,KAAM,QAAA,EAAU,OAAO,CAAA;AACvC,MAAA,OAAO,EAAE,MAAM,IAAA,EAAK;AAAA,IACxB,CAAA,CAAA,MAAQ;AACJ,MAAA,OAAO,EAAE,MAAM,IAAA,EAAK;AAAA,IACxB;AAAA,EACJ;AACA,EAAA,OAAO,EAAE,IAAA,EAAM,MAAA,CAAO,IAAI,CAAA,EAAE;AAChC;AAiBO,SAAS,yBAAyB,CAAA,EAAmC;AACxE,EAAA,MAAM,KAAA,GAAQ;AAAA,IACV,WAAW,CAAA,CAAE,SAAA;AAAA,IACb,IAAI,CAAA,CAAE,EAAA;AAAA,IACN,MAAM,CAAA,CAAE;AAAA,GACZ;AACA,EAAA,MAAM,GAAA,GAAMA,uBAAa,KAAsD,CAAA;AAC/E,EAAA,OAAO,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,MAAM,IAAI,CAAA;AAC9C;AAEO,SAAS,iBAAiB,CAAA,EAA+B;AAC5D,EAAA,OAAO,YAAYC,mBAAA,CAAUC,aAAA,CAAO,wBAAA,CAAyB,CAAC,CAAC,CAAC,CAAA;AACpE;AAEO,SAAS,oBAAA,CACZ,YAAA,EACA,QAAA,EACA,YAAA,EACA,gBACA,CAAA,EACM;AACN,EAAA,OAAOC,yBAAA,CAAgB;AAAA,IACnB,OAAA,EAAS,YAAA;AAAA,IACT,YAAA,EAAc,iBAAiB,CAAC,CAAA;AAAA,IAChC,cAAA,EAAgB,wBAAA,CAAyB,CAAC,CAAA,CAAE,UAAA;AAAA,IAC5C,YAAA,EAAc,oDAAA;AAAA,IACd,SAAA,EAAW,QAAA;AAAA,IACX,aAAA,EAAe,YAAA;AAAA,IACf,eAAA,EAAiB;AAAA,GACpB,CAAA;AACL;AAgBA,eAAsB,kBAClB,KAAA,EACuB;AACvB,EAAA,MAAM,EAAA,GACF,OAAO,KAAA,CAAM,IAAA,KAAS,YACtB,KAAA,CAAM,IAAA,KAAS,QACf,WAAA,IAAgB,KAAA,CAAM,QACtB,OAAQ,KAAA,CAAM,KAAiC,SAAA,KAAc,QAAA,GACtD,MAAM,IAAA,GACP,iBAAA,CAAkB,MAAM,IAAI,CAAA;AAEtC,EAAA,MAAM,cAAA,GACF,KAAA,CAAM,cAAA,IAAkB,CAAA,qBAAA,EAAwB,GAAG,IAAI,CAAA,CAAA,CAAA;AAE3D,EAAAC,4BAAA,CAAmB,KAAA,CAAM,UAAA,EAAY,cAAA,EAAgB,mBAAmB,CAAA;AAExE,EAAA,MAAM,KAAA,GAAQ,yBAAyB,EAAE,CAAA;AACzC,EAAA,OAAOC,uBAAA,CAAY;AAAA,IACf,OAAO,KAAA,CAAM,KAAA;AAAA,IACb,YAAY,KAAA,CAAM,UAAA;AAAA,IAClB,OAAA,EAAS,EAAE,IAAA,EAAM,gBAAA,CAAiB,EAAE,CAAA,EAAG,MAAA,EAAQ,MAAM,UAAA,EAAW;AAAA,IAChE,IAAA,EAAM,oDAAA;AAAA,IACN,cAAA;AAAA,IACA,UAAU,KAAA,CAAM;AAAA,GACnB,CAAA;AACL;AAaA,eAAsB,gBAClB,KAAA,EACiC;AACjC,EAAA,MAAM,MAAA,GAAS,MAAM,iBAAA,CAAkB,KAAK,CAAA;AAC5C,EAAA,MAAM,EAAA,GAAK,iBAAA,CAAkB,KAAA,CAAM,IAAI,CAAA;AACvC,EAAA,MAAM,MAAA,GAAS,MAAM,KAAA,CAAM,OAAA,CAAQ,EAAE,CAAA;AACrC,EAAA,OAAO,EAAE,MAAA,EAAQ,MAAA,EAAQ,IAAA,EAAM,EAAA,EAAG;AACtC","file":"index.js","sourcesContent":["// @orangecheck/agent-openai — wrap OpenAI function calls in OC Agent\n// action envelopes.\n//\n// Covers both surfaces:\n//   - Responses API:        response.output → tool_call items with\n//                            { type: 'function_call', name, arguments, call_id }\n//                            (`arguments` is a JSON string)\n//   - Chat Completions:     message.tool_calls[i] = { id, function: { name, arguments } }\n//                            (`arguments` is also a JSON string)\n//\n// Both shapes normalize through `parseFunctionCall()` to the canonical\n// {id, name, arguments} form before hashing.\n\nimport { sha256 } from '@noble/hashes/sha256';\nimport {\n    assertScopeGranted,\n    canonicalize,\n    computeActionId,\n    hexEncode,\n    type DelegationEnvelope,\n} from '@orangecheck/agent-core';\nimport {\n    signAsAgent,\n    type ActionEnvelope,\n    type SignerRef,\n} from '@orangecheck/agent-signer';\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Shape normalization\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport interface OpenAiFunctionCall {\n    /** OpenAI's `id` for this call (Chat Completions: `tool_call.id`; Responses: `call_id`). */\n    id: string;\n    /** The function name. */\n    name: string;\n    /** The (already-parsed) function arguments. */\n    arguments: Record<string, unknown>;\n}\n\n/**\n * Normalize either a Chat Completions `tool_call` or a Responses\n * `function_call` item into our canonical {id, name, arguments} shape.\n *\n * Accepts:\n *   - { id, function: { name, arguments } }                      (Chat Completions)\n *   - { call_id, name, arguments }                               (Responses, function_call)\n *   - { id, name, arguments }                                    (already normalized)\n *\n * `arguments` may be either a JSON string (OpenAI's wire shape) or an\n * already-parsed object (your post-processing). Both work.\n */\nexport function parseFunctionCall(raw: unknown): OpenAiFunctionCall {\n    if (raw == null || typeof raw !== 'object') {\n        throw new TypeError('parseFunctionCall: input is not an object');\n    }\n    const r = raw as Record<string, unknown>;\n\n    // Chat Completions shape\n    if (r.function && typeof r.function === 'object') {\n        const f = r.function as Record<string, unknown>;\n        return {\n            id: String(r.id ?? ''),\n            name: String(f.name ?? ''),\n            arguments: parseArgs(f.arguments),\n        };\n    }\n\n    // Responses API or already-normalized\n    return {\n        id: String(r.id ?? r.call_id ?? ''),\n        name: String(r.name ?? ''),\n        arguments: parseArgs(r.arguments),\n    };\n}\n\nfunction parseArgs(args: unknown): Record<string, unknown> {\n    if (args == null) return {};\n    if (typeof args === 'object') return args as Record<string, unknown>;\n    if (typeof args === 'string') {\n        try {\n            const v = JSON.parse(args);\n            if (v && typeof v === 'object') return v as Record<string, unknown>;\n            return { _raw: args };\n        } catch {\n            return { _raw: args };\n        }\n    }\n    return { _raw: String(args) };\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Canonicalization\n// ─────────────────────────────────────────────────────────────────────────────\n\n/**\n * Produce the canonical bytes for an OpenAI function call. The bytes are\n * what the agent-action envelope's `content.hash` is a SHA-256 of.\n *\n * Shape (RFC 8785 canonical JSON, then trailing LF):\n *   {\n *     \"arguments\": <canonical JSON of arguments>,\n *     \"id\":        <call id>,\n *     \"name\":      <function name>\n *   }\n */\nexport function canonicalizeFunctionCall(c: OpenAiFunctionCall): Uint8Array {\n    const canon = {\n        arguments: c.arguments,\n        id: c.id,\n        name: c.name,\n    };\n    const str = canonicalize(canon as unknown as Parameters<typeof canonicalize>[0]);\n    return new TextEncoder().encode(str + '\\n');\n}\n\nexport function functionCallHash(c: OpenAiFunctionCall): string {\n    return 'sha256:' + hexEncode(sha256(canonicalizeFunctionCall(c)));\n}\n\nexport function functionCallActionId(\n    agentAddress: string,\n    signedAt: string,\n    delegationId: string,\n    scopeExercised: string,\n    c: OpenAiFunctionCall\n): string {\n    return computeActionId({\n        address: agentAddress,\n        content_hash: functionCallHash(c),\n        content_length: canonicalizeFunctionCall(c).byteLength,\n        content_mime: 'application/vnd.oc-agent.openai-function-call+json',\n        signed_at: signedAt,\n        delegation_id: delegationId,\n        scope_exercised: scopeExercised,\n    });\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Stamping + invocation\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport interface StampFunctionCallInput {\n    agent: SignerRef;\n    delegation: DelegationEnvelope;\n    /** Either a normalized `OpenAiFunctionCall` or a raw OpenAI tool_call / function_call object. */\n    call: OpenAiFunctionCall | unknown;\n    /** Defaults to `openai:function(name=<name>)` — the tightest admissible sub-scope. */\n    scopeExercised?: string;\n    signedAt?: Date;\n}\n\nexport async function stampFunctionCall(\n    input: StampFunctionCallInput\n): Promise<ActionEnvelope> {\n    const fc =\n        typeof input.call === 'object' &&\n        input.call !== null &&\n        'arguments' in (input.call as Record<string, unknown>) &&\n        typeof (input.call as Record<string, unknown>).arguments !== 'string'\n            ? (input.call as OpenAiFunctionCall)\n            : parseFunctionCall(input.call);\n\n    const scopeExercised =\n        input.scopeExercised ?? `openai:function(name=${fc.name})`;\n\n    assertScopeGranted(input.delegation, scopeExercised, 'stampFunctionCall');\n\n    const bytes = canonicalizeFunctionCall(fc);\n    return signAsAgent({\n        agent: input.agent,\n        delegation: input.delegation as never,\n        content: { hash: functionCallHash(fc), length: bytes.byteLength },\n        mime: 'application/vnd.oc-agent.openai-function-call+json',\n        scopeExercised,\n        signedAt: input.signedAt,\n    });\n}\n\nexport interface InvokeWithStampInput<T> extends StampFunctionCallInput {\n    /** Your handler. Receives the normalized OpenAiFunctionCall. */\n    execute: (call: OpenAiFunctionCall) => Promise<T>;\n}\n\nexport interface InvokeWithStampResult<T> {\n    result: T;\n    action: ActionEnvelope;\n    call: OpenAiFunctionCall;\n}\n\nexport async function invokeWithStamp<T>(\n    input: InvokeWithStampInput<T>\n): Promise<InvokeWithStampResult<T>> {\n    const action = await stampFunctionCall(input);\n    const fc = parseFunctionCall(input.call);\n    const result = await input.execute(fc);\n    return { result, action, call: fc };\n}\n"]}
+{"version":3,"sources":["../src/index.ts"],"names":["canonicalize","hexEncode","sha256","computeActionId","canonicalizeScope","assertScopeGranted","signAsAgent"],"mappings":";;;;;;;AAqDO,SAAS,kBAAkB,GAAA,EAAkC;AAChE,EAAA,IAAI,GAAA,IAAO,IAAA,IAAQ,OAAO,GAAA,KAAQ,QAAA,EAAU;AACxC,IAAA,MAAM,IAAI,UAAU,2CAA2C,CAAA;AAAA,EACnE;AACA,EAAA,MAAM,CAAA,GAAI,GAAA;AAGV,EAAA,IAAI,CAAA,CAAE,QAAA,IAAY,OAAO,CAAA,CAAE,aAAa,QAAA,EAAU;AAC9C,IAAA,MAAM,IAAI,CAAA,CAAE,QAAA;AACZ,IAAA,OAAO;AAAA,MACH,EAAA,EAAI,MAAA,CAAO,CAAA,CAAE,EAAA,IAAM,EAAE,CAAA;AAAA,MACrB,IAAA,EAAM,MAAA,CAAO,CAAA,CAAE,IAAA,IAAQ,EAAE,CAAA;AAAA,MACzB,SAAA,EAAW,SAAA,CAAU,CAAA,CAAE,SAAS;AAAA,KACpC;AAAA,EACJ;AAGA,EAAA,OAAO;AAAA,IACH,IAAI,MAAA,CAAO,CAAA,CAAE,EAAA,IAAM,CAAA,CAAE,WAAW,EAAE,CAAA;AAAA,IAClC,IAAA,EAAM,MAAA,CAAO,CAAA,CAAE,IAAA,IAAQ,EAAE,CAAA;AAAA,IACzB,SAAA,EAAW,SAAA,CAAU,CAAA,CAAE,SAAS;AAAA,GACpC;AACJ;AAEA,SAAS,UAAU,IAAA,EAAwC;AACvD,EAAA,IAAI,IAAA,IAAQ,IAAA,EAAM,OAAO,EAAC;AAC1B,EAAA,IAAI,OAAO,IAAA,KAAS,QAAA,EAAU,OAAO,IAAA;AACrC,EAAA,IAAI,OAAO,SAAS,QAAA,EAAU;AAC1B,IAAA,IAAI;AACA,MAAA,MAAM,CAAA,GAAI,IAAA,CAAK,KAAA,CAAM,IAAI,CAAA;AACzB,MAAA,IAAI,CAAA,IAAK,OAAO,CAAA,KAAM,QAAA,EAAU,OAAO,CAAA;AACvC,MAAA,OAAO,EAAE,MAAM,IAAA,EAAK;AAAA,IACxB,CAAA,CAAA,MAAQ;AACJ,MAAA,OAAO,EAAE,MAAM,IAAA,EAAK;AAAA,IACxB;AAAA,EACJ;AACA,EAAA,OAAO,EAAE,IAAA,EAAM,MAAA,CAAO,IAAI,CAAA,EAAE;AAChC;AAiBO,SAAS,yBAAyB,CAAA,EAAmC;AACxE,EAAA,MAAM,KAAA,GAAQ;AAAA,IACV,WAAW,CAAA,CAAE,SAAA;AAAA,IACb,IAAI,CAAA,CAAE,EAAA;AAAA,IACN,MAAM,CAAA,CAAE;AAAA,GACZ;AACA,EAAA,MAAM,GAAA,GAAMA,uBAAa,KAAsD,CAAA;AAC/E,EAAA,OAAO,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,MAAM,IAAI,CAAA;AAC9C;AAEO,SAAS,iBAAiB,CAAA,EAA+B;AAC5D,EAAA,OAAO,YAAYC,mBAAA,CAAUC,aAAA,CAAO,wBAAA,CAAyB,CAAC,CAAC,CAAC,CAAA;AACpE;AAEO,SAAS,oBAAA,CACZ,YAAA,EACA,QAAA,EACA,YAAA,EACA,gBACA,CAAA,EACM;AACN,EAAA,OAAOC,yBAAA,CAAgB;AAAA,IACnB,OAAA,EAAS,YAAA;AAAA,IACT,YAAA,EAAc,iBAAiB,CAAC,CAAA;AAAA,IAChC,cAAA,EAAgB,wBAAA,CAAyB,CAAC,CAAA,CAAE,UAAA;AAAA,IAC5C,YAAA,EAAc,oDAAA;AAAA,IACd,SAAA,EAAW,QAAA;AAAA,IACX,aAAA,EAAe,YAAA;AAAA,IACf,eAAA,EAAiB;AAAA,GACpB,CAAA;AACL;AAgBA,eAAsB,kBAClB,KAAA,EACuB;AACvB,EAAA,MAAM,EAAA,GACF,OAAO,KAAA,CAAM,IAAA,KAAS,YACtB,KAAA,CAAM,IAAA,KAAS,QACf,WAAA,IAAgB,KAAA,CAAM,QACtB,OAAQ,KAAA,CAAM,KAAiC,SAAA,KAAc,QAAA,GACtD,MAAM,IAAA,GACP,iBAAA,CAAkB,MAAM,IAAI,CAAA;AAEtC,EAAA,MAAM,cAAA,GACF,KAAA,CAAM,cAAA,IAAkBC,2BAAA,CAAkB;AAAA,IACtC,OAAA,EAAS,QAAA;AAAA,IACT,IAAA,EAAM,UAAA;AAAA;AAAA,IAEN,WAAA,EAAa,CAAC,EAAE,GAAA,EAAK,MAAA,EAAQ,EAAA,EAAI,GAAA,EAAK,KAAA,EAAO,EAAA,CAAG,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM;AAAA,GACvE,CAAA;AAEL,EAAAC,4BAAA,CAAmB,KAAA,CAAM,UAAA,EAAY,cAAA,EAAgB,mBAAmB,CAAA;AAExE,EAAA,MAAM,KAAA,GAAQ,yBAAyB,EAAE,CAAA;AACzC,EAAA,OAAOC,uBAAA,CAAY;AAAA,IACf,OAAO,KAAA,CAAM,KAAA;AAAA,IACb,YAAY,KAAA,CAAM,UAAA;AAAA,IAClB,OAAA,EAAS,EAAE,IAAA,EAAM,gBAAA,CAAiB,EAAE,CAAA,EAAG,MAAA,EAAQ,MAAM,UAAA,EAAW;AAAA,IAChE,IAAA,EAAM,oDAAA;AAAA,IACN,cAAA;AAAA,IACA,UAAU,KAAA,CAAM;AAAA,GACnB,CAAA;AACL;AAaA,eAAsB,gBAClB,KAAA,EACiC;AACjC,EAAA,MAAM,MAAA,GAAS,MAAM,iBAAA,CAAkB,KAAK,CAAA;AAC5C,EAAA,MAAM,EAAA,GAAK,iBAAA,CAAkB,KAAA,CAAM,IAAI,CAAA;AACvC,EAAA,MAAM,MAAA,GAAS,MAAM,KAAA,CAAM,OAAA,CAAQ,EAAE,CAAA;AACrC,EAAA,OAAO,EAAE,MAAA,EAAQ,MAAA,EAAQ,IAAA,EAAM,EAAA,EAAG;AACtC","file":"index.js","sourcesContent":["// @orangecheck/agent-openai — wrap OpenAI function calls in OC Agent\n// action envelopes.\n//\n// Covers both surfaces:\n//   - Responses API:        response.output → tool_call items with\n//                            { type: 'function_call', name, arguments, call_id }\n//                            (`arguments` is a JSON string)\n//   - Chat Completions:     message.tool_calls[i] = { id, function: { name, arguments } }\n//                            (`arguments` is also a JSON string)\n//\n// Both shapes normalize through `parseFunctionCall()` to the canonical\n// {id, name, arguments} form before hashing.\n\nimport { sha256 } from '@noble/hashes/sha256';\nimport {\n    assertScopeGranted,\n    canonicalize,\n    canonicalizeScope,\n    computeActionId,\n    hexEncode,\n    type DelegationEnvelope,\n} from '@orangecheck/agent-core';\nimport {\n    signAsAgent,\n    type ActionEnvelope,\n    type SignerRef,\n} from '@orangecheck/agent-signer';\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Shape normalization\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport interface OpenAiFunctionCall {\n    /** OpenAI's `id` for this call (Chat Completions: `tool_call.id`; Responses: `call_id`). */\n    id: string;\n    /** The function name. */\n    name: string;\n    /** The (already-parsed) function arguments. */\n    arguments: Record<string, unknown>;\n}\n\n/**\n * Normalize either a Chat Completions `tool_call` or a Responses\n * `function_call` item into our canonical {id, name, arguments} shape.\n *\n * Accepts:\n *   - { id, function: { name, arguments } }                      (Chat Completions)\n *   - { call_id, name, arguments }                               (Responses, function_call)\n *   - { id, name, arguments }                                    (already normalized)\n *\n * `arguments` may be either a JSON string (OpenAI's wire shape) or an\n * already-parsed object (your post-processing). Both work.\n */\nexport function parseFunctionCall(raw: unknown): OpenAiFunctionCall {\n    if (raw == null || typeof raw !== 'object') {\n        throw new TypeError('parseFunctionCall: input is not an object');\n    }\n    const r = raw as Record<string, unknown>;\n\n    // Chat Completions shape\n    if (r.function && typeof r.function === 'object') {\n        const f = r.function as Record<string, unknown>;\n        return {\n            id: String(r.id ?? ''),\n            name: String(f.name ?? ''),\n            arguments: parseArgs(f.arguments),\n        };\n    }\n\n    // Responses API or already-normalized\n    return {\n        id: String(r.id ?? r.call_id ?? ''),\n        name: String(r.name ?? ''),\n        arguments: parseArgs(r.arguments),\n    };\n}\n\nfunction parseArgs(args: unknown): Record<string, unknown> {\n    if (args == null) return {};\n    if (typeof args === 'object') return args as Record<string, unknown>;\n    if (typeof args === 'string') {\n        try {\n            const v = JSON.parse(args);\n            if (v && typeof v === 'object') return v as Record<string, unknown>;\n            return { _raw: args };\n        } catch {\n            return { _raw: args };\n        }\n    }\n    return { _raw: String(args) };\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Canonicalization\n// ─────────────────────────────────────────────────────────────────────────────\n\n/**\n * Produce the canonical bytes for an OpenAI function call. The bytes are\n * what the agent-action envelope's `content.hash` is a SHA-256 of.\n *\n * Shape (RFC 8785 canonical JSON, then trailing LF):\n *   {\n *     \"arguments\": <canonical JSON of arguments>,\n *     \"id\":        <call id>,\n *     \"name\":      <function name>\n *   }\n */\nexport function canonicalizeFunctionCall(c: OpenAiFunctionCall): Uint8Array {\n    const canon = {\n        arguments: c.arguments,\n        id: c.id,\n        name: c.name,\n    };\n    const str = canonicalize(canon as unknown as Parameters<typeof canonicalize>[0]);\n    return new TextEncoder().encode(str + '\\n');\n}\n\nexport function functionCallHash(c: OpenAiFunctionCall): string {\n    return 'sha256:' + hexEncode(sha256(canonicalizeFunctionCall(c)));\n}\n\nexport function functionCallActionId(\n    agentAddress: string,\n    signedAt: string,\n    delegationId: string,\n    scopeExercised: string,\n    c: OpenAiFunctionCall\n): string {\n    return computeActionId({\n        address: agentAddress,\n        content_hash: functionCallHash(c),\n        content_length: canonicalizeFunctionCall(c).byteLength,\n        content_mime: 'application/vnd.oc-agent.openai-function-call+json',\n        signed_at: signedAt,\n        delegation_id: delegationId,\n        scope_exercised: scopeExercised,\n    });\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Stamping + invocation\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport interface StampFunctionCallInput {\n    agent: SignerRef;\n    delegation: DelegationEnvelope;\n    /** Either a normalized `OpenAiFunctionCall` or a raw OpenAI tool_call / function_call object. */\n    call: OpenAiFunctionCall | unknown;\n    /** Defaults to `openai:function(name=\"<name>\")` — the tightest admissible sub-scope. */\n    scopeExercised?: string;\n    signedAt?: Date;\n}\n\nexport async function stampFunctionCall(\n    input: StampFunctionCallInput\n): Promise<ActionEnvelope> {\n    const fc =\n        typeof input.call === 'object' &&\n        input.call !== null &&\n        'arguments' in (input.call as Record<string, unknown>) &&\n        typeof (input.call as Record<string, unknown>).arguments !== 'string'\n            ? (input.call as OpenAiFunctionCall)\n            : parseFunctionCall(input.call);\n\n    const scopeExercised =\n        input.scopeExercised ?? canonicalizeScope({\n            product: 'openai',\n            verb: 'function',\n            // A quoted value, read as written: a tool called \"*\" is that tool.\n            constraints: [{ key: 'name', op: '=', value: fc.name, quoted: true }],\n        });\n\n    assertScopeGranted(input.delegation, scopeExercised, 'stampFunctionCall');\n\n    const bytes = canonicalizeFunctionCall(fc);\n    return signAsAgent({\n        agent: input.agent,\n        delegation: input.delegation as never,\n        content: { hash: functionCallHash(fc), length: bytes.byteLength },\n        mime: 'application/vnd.oc-agent.openai-function-call+json',\n        scopeExercised,\n        signedAt: input.signedAt,\n    });\n}\n\nexport interface InvokeWithStampInput<T> extends StampFunctionCallInput {\n    /** Your handler. Receives the normalized OpenAiFunctionCall. */\n    execute: (call: OpenAiFunctionCall) => Promise<T>;\n}\n\nexport interface InvokeWithStampResult<T> {\n    result: T;\n    action: ActionEnvelope;\n    call: OpenAiFunctionCall;\n}\n\nexport async function invokeWithStamp<T>(\n    input: InvokeWithStampInput<T>\n): Promise<InvokeWithStampResult<T>> {\n    const action = await stampFunctionCall(input);\n    const fc = parseFunctionCall(input.call);\n    const result = await input.execute(fc);\n    return { result, action, call: fc };\n}\n"]}

package/dist/index.mjs

@@ -1,5 +1,5 @@
 import { sha256 } from '@noble/hashes/sha256';
-import { canonicalize, hexEncode, computeActionId, assertScopeGranted } from '@orangecheck/agent-core';
+import { canonicalize, hexEncode, computeActionId, canonicalizeScope, assertScopeGranted } from '@orangecheck/agent-core';
 import { signAsAgent } from '@orangecheck/agent-signer';
 
 // src/index.ts
@@ -61,7 +61,12 @@ function functionCallActionId(agentAddress, signedAt, delegationId, scopeExercis
 }
 async function stampFunctionCall(input) {
   const fc = typeof input.call === "object" && input.call !== null && "arguments" in input.call && typeof input.call.arguments !== "string" ? input.call : parseFunctionCall(input.call);
-  const scopeExercised = input.scopeExercised ?? `openai:function(name=${fc.name})`;
+  const scopeExercised = input.scopeExercised ?? canonicalizeScope({
+    product: "openai",
+    verb: "function",
+    // A quoted value, read as written: a tool called "*" is that tool.
+    constraints: [{ key: "name", op: "=", value: fc.name, quoted: true }]
+  });
   assertScopeGranted(input.delegation, scopeExercised, "stampFunctionCall");
   const bytes = canonicalizeFunctionCall(fc);
   return signAsAgent({

package/dist/index.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts"],"names":[],"mappings":";;;;;AAoDO,SAAS,kBAAkB,GAAA,EAAkC;AAChE,EAAA,IAAI,GAAA,IAAO,IAAA,IAAQ,OAAO,GAAA,KAAQ,QAAA,EAAU;AACxC,IAAA,MAAM,IAAI,UAAU,2CAA2C,CAAA;AAAA,EACnE;AACA,EAAA,MAAM,CAAA,GAAI,GAAA;AAGV,EAAA,IAAI,CAAA,CAAE,QAAA,IAAY,OAAO,CAAA,CAAE,aAAa,QAAA,EAAU;AAC9C,IAAA,MAAM,IAAI,CAAA,CAAE,QAAA;AACZ,IAAA,OAAO;AAAA,MACH,EAAA,EAAI,MAAA,CAAO,CAAA,CAAE,EAAA,IAAM,EAAE,CAAA;AAAA,MACrB,IAAA,EAAM,MAAA,CAAO,CAAA,CAAE,IAAA,IAAQ,EAAE,CAAA;AAAA,MACzB,SAAA,EAAW,SAAA,CAAU,CAAA,CAAE,SAAS;AAAA,KACpC;AAAA,EACJ;AAGA,EAAA,OAAO;AAAA,IACH,IAAI,MAAA,CAAO,CAAA,CAAE,EAAA,IAAM,CAAA,CAAE,WAAW,EAAE,CAAA;AAAA,IAClC,IAAA,EAAM,MAAA,CAAO,CAAA,CAAE,IAAA,IAAQ,EAAE,CAAA;AAAA,IACzB,SAAA,EAAW,SAAA,CAAU,CAAA,CAAE,SAAS;AAAA,GACpC;AACJ;AAEA,SAAS,UAAU,IAAA,EAAwC;AACvD,EAAA,IAAI,IAAA,IAAQ,IAAA,EAAM,OAAO,EAAC;AAC1B,EAAA,IAAI,OAAO,IAAA,KAAS,QAAA,EAAU,OAAO,IAAA;AACrC,EAAA,IAAI,OAAO,SAAS,QAAA,EAAU;AAC1B,IAAA,IAAI;AACA,MAAA,MAAM,CAAA,GAAI,IAAA,CAAK,KAAA,CAAM,IAAI,CAAA;AACzB,MAAA,IAAI,CAAA,IAAK,OAAO,CAAA,KAAM,QAAA,EAAU,OAAO,CAAA;AACvC,MAAA,OAAO,EAAE,MAAM,IAAA,EAAK;AAAA,IACxB,CAAA,CAAA,MAAQ;AACJ,MAAA,OAAO,EAAE,MAAM,IAAA,EAAK;AAAA,IACxB;AAAA,EACJ;AACA,EAAA,OAAO,EAAE,IAAA,EAAM,MAAA,CAAO,IAAI,CAAA,EAAE;AAChC;AAiBO,SAAS,yBAAyB,CAAA,EAAmC;AACxE,EAAA,MAAM,KAAA,GAAQ;AAAA,IACV,WAAW,CAAA,CAAE,SAAA;AAAA,IACb,IAAI,CAAA,CAAE,EAAA;AAAA,IACN,MAAM,CAAA,CAAE;AAAA,GACZ;AACA,EAAA,MAAM,GAAA,GAAM,aAAa,KAAsD,CAAA;AAC/E,EAAA,OAAO,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,MAAM,IAAI,CAAA;AAC9C;AAEO,SAAS,iBAAiB,CAAA,EAA+B;AAC5D,EAAA,OAAO,YAAY,SAAA,CAAU,MAAA,CAAO,wBAAA,CAAyB,CAAC,CAAC,CAAC,CAAA;AACpE;AAEO,SAAS,oBAAA,CACZ,YAAA,EACA,QAAA,EACA,YAAA,EACA,gBACA,CAAA,EACM;AACN,EAAA,OAAO,eAAA,CAAgB;AAAA,IACnB,OAAA,EAAS,YAAA;AAAA,IACT,YAAA,EAAc,iBAAiB,CAAC,CAAA;AAAA,IAChC,cAAA,EAAgB,wBAAA,CAAyB,CAAC,CAAA,CAAE,UAAA;AAAA,IAC5C,YAAA,EAAc,oDAAA;AAAA,IACd,SAAA,EAAW,QAAA;AAAA,IACX,aAAA,EAAe,YAAA;AAAA,IACf,eAAA,EAAiB;AAAA,GACpB,CAAA;AACL;AAgBA,eAAsB,kBAClB,KAAA,EACuB;AACvB,EAAA,MAAM,EAAA,GACF,OAAO,KAAA,CAAM,IAAA,KAAS,YACtB,KAAA,CAAM,IAAA,KAAS,QACf,WAAA,IAAgB,KAAA,CAAM,QACtB,OAAQ,KAAA,CAAM,KAAiC,SAAA,KAAc,QAAA,GACtD,MAAM,IAAA,GACP,iBAAA,CAAkB,MAAM,IAAI,CAAA;AAEtC,EAAA,MAAM,cAAA,GACF,KAAA,CAAM,cAAA,IAAkB,CAAA,qBAAA,EAAwB,GAAG,IAAI,CAAA,CAAA,CAAA;AAE3D,EAAA,kBAAA,CAAmB,KAAA,CAAM,UAAA,EAAY,cAAA,EAAgB,mBAAmB,CAAA;AAExE,EAAA,MAAM,KAAA,GAAQ,yBAAyB,EAAE,CAAA;AACzC,EAAA,OAAO,WAAA,CAAY;AAAA,IACf,OAAO,KAAA,CAAM,KAAA;AAAA,IACb,YAAY,KAAA,CAAM,UAAA;AAAA,IAClB,OAAA,EAAS,EAAE,IAAA,EAAM,gBAAA,CAAiB,EAAE,CAAA,EAAG,MAAA,EAAQ,MAAM,UAAA,EAAW;AAAA,IAChE,IAAA,EAAM,oDAAA;AAAA,IACN,cAAA;AAAA,IACA,UAAU,KAAA,CAAM;AAAA,GACnB,CAAA;AACL;AAaA,eAAsB,gBAClB,KAAA,EACiC;AACjC,EAAA,MAAM,MAAA,GAAS,MAAM,iBAAA,CAAkB,KAAK,CAAA;AAC5C,EAAA,MAAM,EAAA,GAAK,iBAAA,CAAkB,KAAA,CAAM,IAAI,CAAA;AACvC,EAAA,MAAM,MAAA,GAAS,MAAM,KAAA,CAAM,OAAA,CAAQ,EAAE,CAAA;AACrC,EAAA,OAAO,EAAE,MAAA,EAAQ,MAAA,EAAQ,IAAA,EAAM,EAAA,EAAG;AACtC","file":"index.mjs","sourcesContent":["// @orangecheck/agent-openai — wrap OpenAI function calls in OC Agent\n// action envelopes.\n//\n// Covers both surfaces:\n//   - Responses API:        response.output → tool_call items with\n//                            { type: 'function_call', name, arguments, call_id }\n//                            (`arguments` is a JSON string)\n//   - Chat Completions:     message.tool_calls[i] = { id, function: { name, arguments } }\n//                            (`arguments` is also a JSON string)\n//\n// Both shapes normalize through `parseFunctionCall()` to the canonical\n// {id, name, arguments} form before hashing.\n\nimport { sha256 } from '@noble/hashes/sha256';\nimport {\n    assertScopeGranted,\n    canonicalize,\n    computeActionId,\n    hexEncode,\n    type DelegationEnvelope,\n} from '@orangecheck/agent-core';\nimport {\n    signAsAgent,\n    type ActionEnvelope,\n    type SignerRef,\n} from '@orangecheck/agent-signer';\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Shape normalization\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport interface OpenAiFunctionCall {\n    /** OpenAI's `id` for this call (Chat Completions: `tool_call.id`; Responses: `call_id`). */\n    id: string;\n    /** The function name. */\n    name: string;\n    /** The (already-parsed) function arguments. */\n    arguments: Record<string, unknown>;\n}\n\n/**\n * Normalize either a Chat Completions `tool_call` or a Responses\n * `function_call` item into our canonical {id, name, arguments} shape.\n *\n * Accepts:\n *   - { id, function: { name, arguments } }                      (Chat Completions)\n *   - { call_id, name, arguments }                               (Responses, function_call)\n *   - { id, name, arguments }                                    (already normalized)\n *\n * `arguments` may be either a JSON string (OpenAI's wire shape) or an\n * already-parsed object (your post-processing). Both work.\n */\nexport function parseFunctionCall(raw: unknown): OpenAiFunctionCall {\n    if (raw == null || typeof raw !== 'object') {\n        throw new TypeError('parseFunctionCall: input is not an object');\n    }\n    const r = raw as Record<string, unknown>;\n\n    // Chat Completions shape\n    if (r.function && typeof r.function === 'object') {\n        const f = r.function as Record<string, unknown>;\n        return {\n            id: String(r.id ?? ''),\n            name: String(f.name ?? ''),\n            arguments: parseArgs(f.arguments),\n        };\n    }\n\n    // Responses API or already-normalized\n    return {\n        id: String(r.id ?? r.call_id ?? ''),\n        name: String(r.name ?? ''),\n        arguments: parseArgs(r.arguments),\n    };\n}\n\nfunction parseArgs(args: unknown): Record<string, unknown> {\n    if (args == null) return {};\n    if (typeof args === 'object') return args as Record<string, unknown>;\n    if (typeof args === 'string') {\n        try {\n            const v = JSON.parse(args);\n            if (v && typeof v === 'object') return v as Record<string, unknown>;\n            return { _raw: args };\n        } catch {\n            return { _raw: args };\n        }\n    }\n    return { _raw: String(args) };\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Canonicalization\n// ─────────────────────────────────────────────────────────────────────────────\n\n/**\n * Produce the canonical bytes for an OpenAI function call. The bytes are\n * what the agent-action envelope's `content.hash` is a SHA-256 of.\n *\n * Shape (RFC 8785 canonical JSON, then trailing LF):\n *   {\n *     \"arguments\": <canonical JSON of arguments>,\n *     \"id\":        <call id>,\n *     \"name\":      <function name>\n *   }\n */\nexport function canonicalizeFunctionCall(c: OpenAiFunctionCall): Uint8Array {\n    const canon = {\n        arguments: c.arguments,\n        id: c.id,\n        name: c.name,\n    };\n    const str = canonicalize(canon as unknown as Parameters<typeof canonicalize>[0]);\n    return new TextEncoder().encode(str + '\\n');\n}\n\nexport function functionCallHash(c: OpenAiFunctionCall): string {\n    return 'sha256:' + hexEncode(sha256(canonicalizeFunctionCall(c)));\n}\n\nexport function functionCallActionId(\n    agentAddress: string,\n    signedAt: string,\n    delegationId: string,\n    scopeExercised: string,\n    c: OpenAiFunctionCall\n): string {\n    return computeActionId({\n        address: agentAddress,\n        content_hash: functionCallHash(c),\n        content_length: canonicalizeFunctionCall(c).byteLength,\n        content_mime: 'application/vnd.oc-agent.openai-function-call+json',\n        signed_at: signedAt,\n        delegation_id: delegationId,\n        scope_exercised: scopeExercised,\n    });\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Stamping + invocation\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport interface StampFunctionCallInput {\n    agent: SignerRef;\n    delegation: DelegationEnvelope;\n    /** Either a normalized `OpenAiFunctionCall` or a raw OpenAI tool_call / function_call object. */\n    call: OpenAiFunctionCall | unknown;\n    /** Defaults to `openai:function(name=<name>)` — the tightest admissible sub-scope. */\n    scopeExercised?: string;\n    signedAt?: Date;\n}\n\nexport async function stampFunctionCall(\n    input: StampFunctionCallInput\n): Promise<ActionEnvelope> {\n    const fc =\n        typeof input.call === 'object' &&\n        input.call !== null &&\n        'arguments' in (input.call as Record<string, unknown>) &&\n        typeof (input.call as Record<string, unknown>).arguments !== 'string'\n            ? (input.call as OpenAiFunctionCall)\n            : parseFunctionCall(input.call);\n\n    const scopeExercised =\n        input.scopeExercised ?? `openai:function(name=${fc.name})`;\n\n    assertScopeGranted(input.delegation, scopeExercised, 'stampFunctionCall');\n\n    const bytes = canonicalizeFunctionCall(fc);\n    return signAsAgent({\n        agent: input.agent,\n        delegation: input.delegation as never,\n        content: { hash: functionCallHash(fc), length: bytes.byteLength },\n        mime: 'application/vnd.oc-agent.openai-function-call+json',\n        scopeExercised,\n        signedAt: input.signedAt,\n    });\n}\n\nexport interface InvokeWithStampInput<T> extends StampFunctionCallInput {\n    /** Your handler. Receives the normalized OpenAiFunctionCall. */\n    execute: (call: OpenAiFunctionCall) => Promise<T>;\n}\n\nexport interface InvokeWithStampResult<T> {\n    result: T;\n    action: ActionEnvelope;\n    call: OpenAiFunctionCall;\n}\n\nexport async function invokeWithStamp<T>(\n    input: InvokeWithStampInput<T>\n): Promise<InvokeWithStampResult<T>> {\n    const action = await stampFunctionCall(input);\n    const fc = parseFunctionCall(input.call);\n    const result = await input.execute(fc);\n    return { result, action, call: fc };\n}\n"]}
+{"version":3,"sources":["../src/index.ts"],"names":[],"mappings":";;;;;AAqDO,SAAS,kBAAkB,GAAA,EAAkC;AAChE,EAAA,IAAI,GAAA,IAAO,IAAA,IAAQ,OAAO,GAAA,KAAQ,QAAA,EAAU;AACxC,IAAA,MAAM,IAAI,UAAU,2CAA2C,CAAA;AAAA,EACnE;AACA,EAAA,MAAM,CAAA,GAAI,GAAA;AAGV,EAAA,IAAI,CAAA,CAAE,QAAA,IAAY,OAAO,CAAA,CAAE,aAAa,QAAA,EAAU;AAC9C,IAAA,MAAM,IAAI,CAAA,CAAE,QAAA;AACZ,IAAA,OAAO;AAAA,MACH,EAAA,EAAI,MAAA,CAAO,CAAA,CAAE,EAAA,IAAM,EAAE,CAAA;AAAA,MACrB,IAAA,EAAM,MAAA,CAAO,CAAA,CAAE,IAAA,IAAQ,EAAE,CAAA;AAAA,MACzB,SAAA,EAAW,SAAA,CAAU,CAAA,CAAE,SAAS;AAAA,KACpC;AAAA,EACJ;AAGA,EAAA,OAAO;AAAA,IACH,IAAI,MAAA,CAAO,CAAA,CAAE,EAAA,IAAM,CAAA,CAAE,WAAW,EAAE,CAAA;AAAA,IAClC,IAAA,EAAM,MAAA,CAAO,CAAA,CAAE,IAAA,IAAQ,EAAE,CAAA;AAAA,IACzB,SAAA,EAAW,SAAA,CAAU,CAAA,CAAE,SAAS;AAAA,GACpC;AACJ;AAEA,SAAS,UAAU,IAAA,EAAwC;AACvD,EAAA,IAAI,IAAA,IAAQ,IAAA,EAAM,OAAO,EAAC;AAC1B,EAAA,IAAI,OAAO,IAAA,KAAS,QAAA,EAAU,OAAO,IAAA;AACrC,EAAA,IAAI,OAAO,SAAS,QAAA,EAAU;AAC1B,IAAA,IAAI;AACA,MAAA,MAAM,CAAA,GAAI,IAAA,CAAK,KAAA,CAAM,IAAI,CAAA;AACzB,MAAA,IAAI,CAAA,IAAK,OAAO,CAAA,KAAM,QAAA,EAAU,OAAO,CAAA;AACvC,MAAA,OAAO,EAAE,MAAM,IAAA,EAAK;AAAA,IACxB,CAAA,CAAA,MAAQ;AACJ,MAAA,OAAO,EAAE,MAAM,IAAA,EAAK;AAAA,IACxB;AAAA,EACJ;AACA,EAAA,OAAO,EAAE,IAAA,EAAM,MAAA,CAAO,IAAI,CAAA,EAAE;AAChC;AAiBO,SAAS,yBAAyB,CAAA,EAAmC;AACxE,EAAA,MAAM,KAAA,GAAQ;AAAA,IACV,WAAW,CAAA,CAAE,SAAA;AAAA,IACb,IAAI,CAAA,CAAE,EAAA;AAAA,IACN,MAAM,CAAA,CAAE;AAAA,GACZ;AACA,EAAA,MAAM,GAAA,GAAM,aAAa,KAAsD,CAAA;AAC/E,EAAA,OAAO,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,MAAM,IAAI,CAAA;AAC9C;AAEO,SAAS,iBAAiB,CAAA,EAA+B;AAC5D,EAAA,OAAO,YAAY,SAAA,CAAU,MAAA,CAAO,wBAAA,CAAyB,CAAC,CAAC,CAAC,CAAA;AACpE;AAEO,SAAS,oBAAA,CACZ,YAAA,EACA,QAAA,EACA,YAAA,EACA,gBACA,CAAA,EACM;AACN,EAAA,OAAO,eAAA,CAAgB;AAAA,IACnB,OAAA,EAAS,YAAA;AAAA,IACT,YAAA,EAAc,iBAAiB,CAAC,CAAA;AAAA,IAChC,cAAA,EAAgB,wBAAA,CAAyB,CAAC,CAAA,CAAE,UAAA;AAAA,IAC5C,YAAA,EAAc,oDAAA;AAAA,IACd,SAAA,EAAW,QAAA;AAAA,IACX,aAAA,EAAe,YAAA;AAAA,IACf,eAAA,EAAiB;AAAA,GACpB,CAAA;AACL;AAgBA,eAAsB,kBAClB,KAAA,EACuB;AACvB,EAAA,MAAM,EAAA,GACF,OAAO,KAAA,CAAM,IAAA,KAAS,YACtB,KAAA,CAAM,IAAA,KAAS,QACf,WAAA,IAAgB,KAAA,CAAM,QACtB,OAAQ,KAAA,CAAM,KAAiC,SAAA,KAAc,QAAA,GACtD,MAAM,IAAA,GACP,iBAAA,CAAkB,MAAM,IAAI,CAAA;AAEtC,EAAA,MAAM,cAAA,GACF,KAAA,CAAM,cAAA,IAAkB,iBAAA,CAAkB;AAAA,IACtC,OAAA,EAAS,QAAA;AAAA,IACT,IAAA,EAAM,UAAA;AAAA;AAAA,IAEN,WAAA,EAAa,CAAC,EAAE,GAAA,EAAK,MAAA,EAAQ,EAAA,EAAI,GAAA,EAAK,KAAA,EAAO,EAAA,CAAG,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM;AAAA,GACvE,CAAA;AAEL,EAAA,kBAAA,CAAmB,KAAA,CAAM,UAAA,EAAY,cAAA,EAAgB,mBAAmB,CAAA;AAExE,EAAA,MAAM,KAAA,GAAQ,yBAAyB,EAAE,CAAA;AACzC,EAAA,OAAO,WAAA,CAAY;AAAA,IACf,OAAO,KAAA,CAAM,KAAA;AAAA,IACb,YAAY,KAAA,CAAM,UAAA;AAAA,IAClB,OAAA,EAAS,EAAE,IAAA,EAAM,gBAAA,CAAiB,EAAE,CAAA,EAAG,MAAA,EAAQ,MAAM,UAAA,EAAW;AAAA,IAChE,IAAA,EAAM,oDAAA;AAAA,IACN,cAAA;AAAA,IACA,UAAU,KAAA,CAAM;AAAA,GACnB,CAAA;AACL;AAaA,eAAsB,gBAClB,KAAA,EACiC;AACjC,EAAA,MAAM,MAAA,GAAS,MAAM,iBAAA,CAAkB,KAAK,CAAA;AAC5C,EAAA,MAAM,EAAA,GAAK,iBAAA,CAAkB,KAAA,CAAM,IAAI,CAAA;AACvC,EAAA,MAAM,MAAA,GAAS,MAAM,KAAA,CAAM,OAAA,CAAQ,EAAE,CAAA;AACrC,EAAA,OAAO,EAAE,MAAA,EAAQ,MAAA,EAAQ,IAAA,EAAM,EAAA,EAAG;AACtC","file":"index.mjs","sourcesContent":["// @orangecheck/agent-openai — wrap OpenAI function calls in OC Agent\n// action envelopes.\n//\n// Covers both surfaces:\n//   - Responses API:        response.output → tool_call items with\n//                            { type: 'function_call', name, arguments, call_id }\n//                            (`arguments` is a JSON string)\n//   - Chat Completions:     message.tool_calls[i] = { id, function: { name, arguments } }\n//                            (`arguments` is also a JSON string)\n//\n// Both shapes normalize through `parseFunctionCall()` to the canonical\n// {id, name, arguments} form before hashing.\n\nimport { sha256 } from '@noble/hashes/sha256';\nimport {\n    assertScopeGranted,\n    canonicalize,\n    canonicalizeScope,\n    computeActionId,\n    hexEncode,\n    type DelegationEnvelope,\n} from '@orangecheck/agent-core';\nimport {\n    signAsAgent,\n    type ActionEnvelope,\n    type SignerRef,\n} from '@orangecheck/agent-signer';\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Shape normalization\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport interface OpenAiFunctionCall {\n    /** OpenAI's `id` for this call (Chat Completions: `tool_call.id`; Responses: `call_id`). */\n    id: string;\n    /** The function name. */\n    name: string;\n    /** The (already-parsed) function arguments. */\n    arguments: Record<string, unknown>;\n}\n\n/**\n * Normalize either a Chat Completions `tool_call` or a Responses\n * `function_call` item into our canonical {id, name, arguments} shape.\n *\n * Accepts:\n *   - { id, function: { name, arguments } }                      (Chat Completions)\n *   - { call_id, name, arguments }                               (Responses, function_call)\n *   - { id, name, arguments }                                    (already normalized)\n *\n * `arguments` may be either a JSON string (OpenAI's wire shape) or an\n * already-parsed object (your post-processing). Both work.\n */\nexport function parseFunctionCall(raw: unknown): OpenAiFunctionCall {\n    if (raw == null || typeof raw !== 'object') {\n        throw new TypeError('parseFunctionCall: input is not an object');\n    }\n    const r = raw as Record<string, unknown>;\n\n    // Chat Completions shape\n    if (r.function && typeof r.function === 'object') {\n        const f = r.function as Record<string, unknown>;\n        return {\n            id: String(r.id ?? ''),\n            name: String(f.name ?? ''),\n            arguments: parseArgs(f.arguments),\n        };\n    }\n\n    // Responses API or already-normalized\n    return {\n        id: String(r.id ?? r.call_id ?? ''),\n        name: String(r.name ?? ''),\n        arguments: parseArgs(r.arguments),\n    };\n}\n\nfunction parseArgs(args: unknown): Record<string, unknown> {\n    if (args == null) return {};\n    if (typeof args === 'object') return args as Record<string, unknown>;\n    if (typeof args === 'string') {\n        try {\n            const v = JSON.parse(args);\n            if (v && typeof v === 'object') return v as Record<string, unknown>;\n            return { _raw: args };\n        } catch {\n            return { _raw: args };\n        }\n    }\n    return { _raw: String(args) };\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Canonicalization\n// ─────────────────────────────────────────────────────────────────────────────\n\n/**\n * Produce the canonical bytes for an OpenAI function call. The bytes are\n * what the agent-action envelope's `content.hash` is a SHA-256 of.\n *\n * Shape (RFC 8785 canonical JSON, then trailing LF):\n *   {\n *     \"arguments\": <canonical JSON of arguments>,\n *     \"id\":        <call id>,\n *     \"name\":      <function name>\n *   }\n */\nexport function canonicalizeFunctionCall(c: OpenAiFunctionCall): Uint8Array {\n    const canon = {\n        arguments: c.arguments,\n        id: c.id,\n        name: c.name,\n    };\n    const str = canonicalize(canon as unknown as Parameters<typeof canonicalize>[0]);\n    return new TextEncoder().encode(str + '\\n');\n}\n\nexport function functionCallHash(c: OpenAiFunctionCall): string {\n    return 'sha256:' + hexEncode(sha256(canonicalizeFunctionCall(c)));\n}\n\nexport function functionCallActionId(\n    agentAddress: string,\n    signedAt: string,\n    delegationId: string,\n    scopeExercised: string,\n    c: OpenAiFunctionCall\n): string {\n    return computeActionId({\n        address: agentAddress,\n        content_hash: functionCallHash(c),\n        content_length: canonicalizeFunctionCall(c).byteLength,\n        content_mime: 'application/vnd.oc-agent.openai-function-call+json',\n        signed_at: signedAt,\n        delegation_id: delegationId,\n        scope_exercised: scopeExercised,\n    });\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Stamping + invocation\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport interface StampFunctionCallInput {\n    agent: SignerRef;\n    delegation: DelegationEnvelope;\n    /** Either a normalized `OpenAiFunctionCall` or a raw OpenAI tool_call / function_call object. */\n    call: OpenAiFunctionCall | unknown;\n    /** Defaults to `openai:function(name=\"<name>\")` — the tightest admissible sub-scope. */\n    scopeExercised?: string;\n    signedAt?: Date;\n}\n\nexport async function stampFunctionCall(\n    input: StampFunctionCallInput\n): Promise<ActionEnvelope> {\n    const fc =\n        typeof input.call === 'object' &&\n        input.call !== null &&\n        'arguments' in (input.call as Record<string, unknown>) &&\n        typeof (input.call as Record<string, unknown>).arguments !== 'string'\n            ? (input.call as OpenAiFunctionCall)\n            : parseFunctionCall(input.call);\n\n    const scopeExercised =\n        input.scopeExercised ?? canonicalizeScope({\n            product: 'openai',\n            verb: 'function',\n            // A quoted value, read as written: a tool called \"*\" is that tool.\n            constraints: [{ key: 'name', op: '=', value: fc.name, quoted: true }],\n        });\n\n    assertScopeGranted(input.delegation, scopeExercised, 'stampFunctionCall');\n\n    const bytes = canonicalizeFunctionCall(fc);\n    return signAsAgent({\n        agent: input.agent,\n        delegation: input.delegation as never,\n        content: { hash: functionCallHash(fc), length: bytes.byteLength },\n        mime: 'application/vnd.oc-agent.openai-function-call+json',\n        scopeExercised,\n        signedAt: input.signedAt,\n    });\n}\n\nexport interface InvokeWithStampInput<T> extends StampFunctionCallInput {\n    /** Your handler. Receives the normalized OpenAiFunctionCall. */\n    execute: (call: OpenAiFunctionCall) => Promise<T>;\n}\n\nexport interface InvokeWithStampResult<T> {\n    result: T;\n    action: ActionEnvelope;\n    call: OpenAiFunctionCall;\n}\n\nexport async function invokeWithStamp<T>(\n    input: InvokeWithStampInput<T>\n): Promise<InvokeWithStampResult<T>> {\n    const action = await stampFunctionCall(input);\n    const fc = parseFunctionCall(input.call);\n    const result = await input.execute(fc);\n    return { result, action, call: fc };\n}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@orangecheck/agent-openai",
-  "version": "1.1.2",
+  "version": "1.1.4",
   "description": "Wrap OpenAI function-calling (Responses API + Chat Completions tool path) with OC Agent scope enforcement and emit a signed agent-action envelope per function invocation.",
   "keywords": [
     "bitcoin",
@@ -52,8 +52,8 @@
   },
   "dependencies": {
     "@noble/hashes": "^1.5.0",
-    "@orangecheck/agent-core": "^2.7.1",
-    "@orangecheck/agent-signer": "^0.5.1"
+    "@orangecheck/agent-core": "^2.10.0",
+    "@orangecheck/agent-signer": "^0.5.2"
   },
   "devDependencies": {
     "@types/node": "^22.10.2",

package/src/default-scope.test.ts

@@ -0,0 +1,52 @@
+// The default exercised scope names the tool as a quoted value, so the name is
+// read as written: a tool called "*" is that tool, not every tool.
+import { describe, expect, it } from 'vitest';
+
+import { parseScope, verifyAction } from '@orangecheck/agent-core';
+import { createDelegation } from '@orangecheck/agent-signer';
+
+import { stampFunctionCall } from './index.js';
+
+const PRINCIPAL = 'bc1qprincipal000000000000000000000000000000';
+const AGENT = 'bc1qagent0000000000000000000000000000000000';
+const fakeSign = (address: string) => async (msg: string) =>
+    Buffer.from(`sig:${address}:${msg}`, 'utf8').toString('base64');
+const fakeVerify = async (msg: string, sig: string, address: string) =>
+    sig === Buffer.from(`sig:${address}:${msg}`, 'utf8').toString('base64');
+
+const stamp = async (scope: string, name: string) => {
+    const delegation = await createDelegation({
+        principal: { address: PRINCIPAL, signMessage: fakeSign(PRINCIPAL) },
+        agentAddress: AGENT,
+        scopes: [scope],
+        ttlMs: 60 * 60 * 1000,
+    });
+    const action = await stampFunctionCall({
+        agent: { address: AGENT, signMessage: fakeSign(AGENT) },
+        delegation,
+        call: { id: 'c1', name, arguments: {} },
+    });
+    const r = await verifyAction({ action, delegation, verifyBip322: fakeVerify, skipRevocationCheck: true });
+    return { action, ok: r.ok };
+};
+
+describe('the default exercised scope', () => {
+    it('quotes the name', async () => {
+        const { action, ok } = await stamp('openai:function(name=search)', 'search');
+        expect(action.scope_exercised).toBe('openai:function(name="search")');
+        expect(ok).toBe(true);
+    });
+
+    it('stamps a tool called "*" as that tool, not every tool', async () => {
+        const { action, ok } = await stamp('openai:function(name="*")', '*');
+        expect(action.scope_exercised).toBe('openai:function(name="*")');
+        expect(ok).toBe(true);
+    });
+
+    it('keeps scope punctuation in a name as part of the name', async () => {
+        const { action, ok } = await stamp('openai:function(name="a,b")', 'a,b');
+        const c = parseScope(action.scope_exercised).constraints[0];
+        expect(c).toEqual({ key: 'name', op: '=', value: 'a,b', quoted: true });
+        expect(ok).toBe(true);
+    });
+});

package/src/index.ts

@@ -15,6 +15,7 @@ import { sha256 } from '@noble/hashes/sha256';
 import {
     assertScopeGranted,
     canonicalize,
+    canonicalizeScope,
     computeActionId,
     hexEncode,
     type DelegationEnvelope,
@@ -145,7 +146,7 @@ export interface StampFunctionCallInput {
     delegation: DelegationEnvelope;
     /** Either a normalized `OpenAiFunctionCall` or a raw OpenAI tool_call / function_call object. */
     call: OpenAiFunctionCall | unknown;
-    /** Defaults to `openai:function(name=<name>)` — the tightest admissible sub-scope. */
+    /** Defaults to `openai:function(name="<name>")` — the tightest admissible sub-scope. */
     scopeExercised?: string;
     signedAt?: Date;
 }
@@ -162,7 +163,12 @@ export async function stampFunctionCall(
             : parseFunctionCall(input.call);
 
     const scopeExercised =
-        input.scopeExercised ?? `openai:function(name=${fc.name})`;
+        input.scopeExercised ?? canonicalizeScope({
+            product: 'openai',
+            verb: 'function',
+            // A quoted value, read as written: a tool called "*" is that tool.
+            constraints: [{ key: 'name', op: '=', value: fc.name, quoted: true }],
+        });
 
     assertScopeGranted(input.delegation, scopeExercised, 'stampFunctionCall');