@orangecheck/agent-vercel 0.2.0 → 0.3.0

package/README.md

@@ -1,5 +1,9 @@
 # @orangecheck/agent-vercel
 
+> **Full reference:** [docs.ochk.io/sdk/agent-vercel](https://docs.ochk.io/sdk/agent-vercel) — auto-generated from the TypeScript source on every release.
+> Hand-written prose below is the high-level overview; the docs site is the source of truth for every export, type, and signature.
+
+
 Wrap [Vercel AI SDK](https://sdk.vercel.ai/) `tool()` invocations with [OC Agent](https://github.com/orangecheck/oc-agent-protocol) scope enforcement and emit a signed `agent-action` envelope per tool execution. Provider-agnostic — works under Anthropic, OpenAI, Cohere, or any other model the AI SDK speaks.
 
 ## Why

package/dist/index.js

@@ -30,13 +30,7 @@ function toolCallActionId(agentAddress, signedAt, delegationId, scopeExercised,
 }
 async function stampToolCall(input) {
   const scopeExercised = input.scopeExercised ?? `vercel:tool(verb=${input.call.verb})`;
-  const granted = (input.delegation.scopes ?? []).map(agentCore.parseScope);
-  const exercisedParsed = agentCore.parseScope(scopeExercised);
-  if (!granted.some((g) => agentCore.isSubScope(exercisedParsed, g))) {
-    throw new Error(
-      `stampToolCall: scope_exercised (${scopeExercised}) is not a sub-scope of any granted scope`
-    );
-  }
+  agentCore.assertScopeGranted(input.delegation, scopeExercised, "stampToolCall");
   const bytes = canonicalizeToolCall(input.call);
   return agentSigner.signAsAgent({
     agent: input.agent,

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts"],"names":["canonicalize","hexEncode","sha256","computeActionId","parseScope","isSubScope","signAsAgent","j"],"mappings":";;;;;;;AA8DO,SAAS,qBAAqB,CAAA,EAA+B;AAChE,EAAA,MAAM,KAAA,GAAQ;AAAA,IACV,MAAM,CAAA,CAAE,IAAA;AAAA,IACR,SAAS,CAAA,CAAE,MAAA;AAAA,IACX,MAAM,CAAA,CAAE;AAAA,GACZ;AACA,EAAA,MAAM,GAAA,GAAMA,uBAAa,KAAsD,CAAA;AAC/E,EAAA,OAAO,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,MAAM,IAAI,CAAA;AAC9C;AAEO,SAAS,aAAa,CAAA,EAA2B;AACpD,EAAA,OAAO,YAAYC,mBAAA,CAAUC,aAAA,CAAO,oBAAA,CAAqB,CAAC,CAAC,CAAC,CAAA;AAChE;AAEO,SAAS,gBAAA,CACZ,YAAA,EACA,QAAA,EACA,YAAA,EACA,gBACA,CAAA,EACM;AACN,EAAA,OAAOC,yBAAA,CAAgB;AAAA,IACnB,OAAA,EAAS,YAAA;AAAA,IACT,YAAA,EAAc,aAAa,CAAC,CAAA;AAAA,IAC5B,cAAA,EAAgB,oBAAA,CAAqB,CAAC,CAAA,CAAE,UAAA;AAAA,IACxC,YAAA,EAAc,gDAAA;AAAA,IACd,SAAA,EAAW,QAAA;AAAA,IACX,aAAA,EAAe,YAAA;AAAA,IACf,eAAA,EAAiB;AAAA,GACpB,CAAA;AACL;AAkBA,eAAsB,cAAc,KAAA,EAAoD;AACpF,EAAA,MAAM,iBACF,KAAA,CAAM,cAAA,IAAkB,CAAA,iBAAA,EAAoB,KAAA,CAAM,KAAK,IAAI,CAAA,CAAA,CAAA;AAE/D,EAAA,MAAM,WAAW,KAAA,CAAM,UAAA,CAAW,UAAU,EAAC,EAAG,IAAIC,oBAAU,CAAA;AAC9D,EAAA,MAAM,eAAA,GAAkBA,qBAAW,cAAc,CAAA;AACjD,EAAA,IAAI,CAAC,QAAQ,IAAA,CAAK,CAAC,MAAMC,oBAAA,CAAW,eAAA,EAAiB,CAAC,CAAC,CAAA,EAAG;AACtD,IAAA,MAAM,IAAI,KAAA;AAAA,MACN,mCAAmC,cAAc,CAAA,yCAAA;AAAA,KACrD;AAAA,EACJ;AAEA,EAAA,MAAM,KAAA,GAAQ,oBAAA,CAAqB,KAAA,CAAM,IAAI,CAAA;AAC7C,EAAA,OAAOC,uBAAA,CAAY;AAAA,IACf,OAAO,KAAA,CAAM,KAAA;AAAA,IACb,YAAY,KAAA,CAAM,UAAA;AAAA,IAClB,OAAA,EAAS,EAAE,IAAA,EAAM,YAAA,CAAa,MAAM,IAAI,CAAA,EAAG,MAAA,EAAQ,KAAA,CAAM,UAAA,EAAW;AAAA,IACpE,IAAA,EAAM,gDAAA;AAAA,IACN,cAAA;AAAA,IACA,UAAU,KAAA,CAAM;AAAA,GACnB,CAAA;AACL;AAmEO,SAAS,OACZ,KAAA,EAC6B;AAC7B,EAAA,OAAO;AAAA,IACH,MAAM,KAAA,CAAM,IAAA;AAAA,IACZ,YAAY,KAAA,CAAM,UAAA;AAAA,IAClB,aAAa,KAAA,CAAM,WAAA;AAAA,IACnB,OAAA,EAAS,OAAO,IAAA,EAAM,GAAA,KAAQ;AAC1B,MAAA,MAAM,IAAA,GAAuB;AAAA,QACzB,QAAQ,GAAA,CAAI,MAAA;AAAA,QACZ,MAAM,KAAA,CAAM,IAAA;AAAA,QACZ;AAAA,OACJ;AACA,MAAA,MAAM,MAAA,GAAS,MAAM,aAAA,CAAc;AAAA,QAC/B,OAAO,GAAA,CAAI,KAAA;AAAA,QACX,YAAY,GAAA,CAAI,UAAA;AAAA,QAChB;AAAA,OACH,CAAA;AACD,MAAA,MAAM,MAAA,GAAS,MAAM,KAAA,CAAM,OAAA,CAAQ,IAAI,CAAA;AACvC,MAAA,IAAI,MAAA,GAAkC,IAAA;AACtC,MAAA,IAAI,IAAI,KAAA,EAAO;AACX,QAAA,IAAI;AACA,UAAA,MAAA,GAAS,MAAM,iBAAA,CAAkB,MAAA,EAAQ,GAAA,CAAI,KAAK,CAAA;AAAA,QACtD,SAAS,GAAA,EAAK;AAEV,UAAA,OAAA,CAAQ,KAAA,CAAM,+CAA+C,GAAG,CAAA;AAAA,QACpE;AAAA,MACJ;AACA,MAAA,OAAO,EAAE,MAAA,EAAQ,MAAA,EAAQ,MAAA,EAAO;AAAA,IACpC;AAAA,GACJ;AACJ;AA8BA,eAAsB,iBAAA,CAClB,QACA,MAAA,EACyB;AACzB,EAAA,MAAM,OAAA,GAAU,OAAO,OAAA,IAAW,uBAAA;AAClC,EAAA,MAAM,CAAA,GAAI,OAAO,KAAA,IAAS,KAAA;AAC1B,EAAA,MAAM,IAAA,GAAO;AAAA,IACT,YAAY,MAAA,CAAO,SAAA;AAAA,IACnB,eAAe,MAAA,CAAO,aAAA;AAAA,IACtB,aAAA,EAAe,OAAO,MAAA,CAAO,OAAA;AAAA,IAC7B,iBAAiB,MAAA,CAAO,eAAA;AAAA,IACxB,YAAA,EAAc,OAAO,OAAA,CAAQ,IAAA;AAAA,IAC7B,cAAA,EAAgB,OAAO,OAAA,CAAQ,MAAA;AAAA,IAC/B,YAAA,EAAc,OAAO,OAAA,CAAQ,IAAA;AAAA,IAC7B,WAAW,MAAA,CAAO,SAAA;AAAA,IAClB,SAAA,EAAW,OAAO,GAAA,CAAI,KAAA;AAAA,IACtB,IAAI,MAAA,CAAO;AAAA,GACf;AACA,EAAA,MAAM,CAAA,GAAI,MAAM,CAAA,CAAE,CAAA,EAAG,OAAO,CAAA,YAAA,CAAA,EAAgB;AAAA,IACxC,MAAA,EAAQ,MAAA;AAAA,IACR,OAAA,EAAS;AAAA,MACL,cAAA,EAAgB,kBAAA;AAAA,MAChB,aAAA,EAAe,CAAA,OAAA,EAAU,MAAA,CAAO,QAAQ,CAAA;AAAA,KAC5C;AAAA,IACA,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,IAAI;AAAA,GAC5B,CAAA;AACD,EAAA,IAAI,CAAC,EAAE,EAAA,EAAI;AACP,IAAA,IAAI,MAAA,GAAS,CAAA,KAAA,EAAQ,CAAA,CAAE,MAAM,CAAA,CAAA;AAC7B,IAAA,IAAI;AACA,MAAA,MAAMC,EAAAA,GAAK,MAAM,CAAA,CAAE,IAAA,EAAK;AACxB,MAAA,IAAIA,EAAAA,CAAE,MAAA,EAAQ,MAAA,GAASA,EAAAA,CAAE,MAAA;AAAA,IAC7B,CAAA,CAAA,MAAQ;AAAA,IAER;AACA,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,0BAAA,EAA6B,MAAM,CAAA,CAAE,CAAA;AAAA,EACzD;AACA,EAAA,MAAM,CAAA,GAAK,MAAM,CAAA,CAAE,IAAA,EAAK;AACxB,EAAA,OAAO,CAAA,CAAE,MAAA;AACb","file":"index.js","sourcesContent":["// @orangecheck/agent-vercel — wrap Vercel AI SDK `tool()` invocations in\n// OC Agent action envelopes.\n//\n// Provider-agnostic: the AI SDK is the abstraction layer. Whatever model\n// you use underneath (Anthropic, OpenAI, Cohere, …) the tool primitive is\n// the same {description, parameters, execute} shape. This adapter wraps\n// `execute` so every successful call produces a signed agent-action\n// envelope citing the active delegation.\n//\n// Two integration shapes:\n//\n//   1. ocTool({verb, parameters, execute})\n//      A drop-in replacement for `tool()`. The wrapped execute runs the\n//      scope check, signs the canonical (verb, args, callId) tuple,\n//      then runs your real handler.\n//\n//   2. stampToolCall(input)\n//      Lower-level stamping helper for cases where you have your own\n//      tool-execution loop and want to emit envelopes manually.\n//\n// The agent + delegation are passed via a per-request context object\n// (or threaded through closures) — we don't depend on AsyncLocalStorage\n// to keep edge-runtime compatibility maximal.\n\nimport { sha256 } from '@noble/hashes/sha256';\nimport {\n    canonicalize,\n    computeActionId,\n    hexEncode,\n    isSubScope,\n    parseScope,\n    type DelegationEnvelope,\n} from '@orangecheck/agent-core';\nimport {\n    signAsAgent,\n    type ActionEnvelope,\n    type SignerRef,\n} from '@orangecheck/agent-signer';\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Canonicalization of a tool call\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport interface VercelToolCall {\n    /** Unique id assigned by the AI SDK for this tool invocation. */\n    callId: string;\n    /** Tool verb / name — passed in via ocTool() or set per-call by your wrapper. */\n    verb: string;\n    /** JSON-serializable arguments produced by the model. */\n    args: Record<string, unknown>;\n}\n\n/**\n * Produce the canonical bytes for a Vercel AI SDK tool call.\n *\n * Shape (RFC 8785 canonical JSON, then trailing LF):\n *   {\n *     \"args\":    <canonical JSON of args>,\n *     \"call_id\": <callId>,\n *     \"verb\":    <verb>\n *   }\n */\nexport function canonicalizeToolCall(c: VercelToolCall): Uint8Array {\n    const canon = {\n        args: c.args,\n        call_id: c.callId,\n        verb: c.verb,\n    };\n    const str = canonicalize(canon as unknown as Parameters<typeof canonicalize>[0]);\n    return new TextEncoder().encode(str + '\\n');\n}\n\nexport function toolCallHash(c: VercelToolCall): string {\n    return 'sha256:' + hexEncode(sha256(canonicalizeToolCall(c)));\n}\n\nexport function toolCallActionId(\n    agentAddress: string,\n    signedAt: string,\n    delegationId: string,\n    scopeExercised: string,\n    c: VercelToolCall\n): string {\n    return computeActionId({\n        address: agentAddress,\n        content_hash: toolCallHash(c),\n        content_length: canonicalizeToolCall(c).byteLength,\n        content_mime: 'application/vnd.oc-agent.vercel-tool-call+json',\n        signed_at: signedAt,\n        delegation_id: delegationId,\n        scope_exercised: scopeExercised,\n    });\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Stamping primitive\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport interface AgentContext {\n    agent: SignerRef;\n    delegation: DelegationEnvelope;\n}\n\nexport interface StampToolCallInput extends AgentContext {\n    call: VercelToolCall;\n    /** Defaults to `vercel:tool(verb=<verb>)` — the tightest admissible sub-scope. */\n    scopeExercised?: string;\n    signedAt?: Date;\n}\n\nexport async function stampToolCall(input: StampToolCallInput): Promise<ActionEnvelope> {\n    const scopeExercised =\n        input.scopeExercised ?? `vercel:tool(verb=${input.call.verb})`;\n\n    const granted = (input.delegation.scopes ?? []).map(parseScope);\n    const exercisedParsed = parseScope(scopeExercised);\n    if (!granted.some((g) => isSubScope(exercisedParsed, g))) {\n        throw new Error(\n            `stampToolCall: scope_exercised (${scopeExercised}) is not a sub-scope of any granted scope`\n        );\n    }\n\n    const bytes = canonicalizeToolCall(input.call);\n    return signAsAgent({\n        agent: input.agent,\n        delegation: input.delegation as never,\n        content: { hash: toolCallHash(input.call), length: bytes.byteLength },\n        mime: 'application/vnd.oc-agent.vercel-tool-call+json',\n        scopeExercised,\n        signedAt: input.signedAt,\n    });\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// ocTool — drop-in tool() replacement\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport interface OcToolInput<TArgs extends Record<string, unknown>, TResult> {\n    /** OC Agent verb under which this tool is exercised. */\n    verb: string;\n    /** Pass-through to AI SDK's `tool()` — the JSON Schema for inputs. */\n    parameters?: unknown;\n    /** Pass-through description shown to the model. */\n    description?: string;\n    /** Your real handler. Returns whatever the tool returns. */\n    execute: (args: TArgs) => Promise<TResult>;\n}\n\nexport interface OcToolWrapped<TArgs extends Record<string, unknown>, TResult> {\n    verb: string;\n    parameters?: unknown;\n    description?: string;\n    /**\n     * The execute fn the AI SDK calls. Receives args + a callId (the AI\n     * SDK passes its own callId through — adapter glue passes it via\n     * context). Optional `fleet` field on the context tells the\n     * wrapper to fire-and-forget POST the stamped action to fleet.\n     * ochk.io/api/actions after the underlying execute() returns.\n     */\n    execute: (\n        args: TArgs,\n        ctx: AgentContext & { callId: string; fleet?: FleetClient }\n    ) => Promise<{\n        result: TResult;\n        action: ActionEnvelope;\n        posted: PostActionResult | null;\n    }>;\n}\n\n/**\n * Wrap a tool() definition so its execute path is scope-checked and\n * envelope-emitting. The exact glue depends on which AI-SDK release you're\n * on — the typical pattern is:\n *\n *   const tools = {\n *     'invoice.create': tool({\n *       description: '…',\n *       parameters:  schema,\n *       execute:     async (args, { toolCallId }) => {\n *         const { result, action } = await invoiceCreate.execute(args, {\n *           agent, delegation, callId: toolCallId,\n *         });\n *         await yourAuditPipeline.append(action);\n *         return result;\n *       },\n *     }),\n *   };\n *\n *   const invoiceCreate = ocTool({\n *     verb: 'invoice.create',\n *     parameters: schema,\n *     execute: async (args) => myInvoiceCreateImpl(args),\n *   });\n *\n * The `ocTool` value is provider/SDK-agnostic — bring your own glue around\n * it. v1 of the adapter intentionally does not import `ai` so it works on\n * any release.\n */\nexport function ocTool<TArgs extends Record<string, unknown>, TResult>(\n    input: OcToolInput<TArgs, TResult>\n): OcToolWrapped<TArgs, TResult> {\n    return {\n        verb: input.verb,\n        parameters: input.parameters,\n        description: input.description,\n        execute: async (args, ctx) => {\n            const call: VercelToolCall = {\n                callId: ctx.callId,\n                verb: input.verb,\n                args,\n            };\n            const action = await stampToolCall({\n                agent: ctx.agent,\n                delegation: ctx.delegation,\n                call,\n            });\n            const result = await input.execute(args);\n            let posted: PostActionResult | null = null;\n            if (ctx.fleet) {\n                try {\n                    posted = await postActionToFleet(action, ctx.fleet);\n                } catch (err) {\n                    // eslint-disable-next-line no-console\n                    console.error('[oc-agent-vercel] postActionToFleet failed:', err);\n                }\n            }\n            return { result, action, posted };\n        },\n    };\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Fleet integration: POST stamped actions to fleet.ochk.io/api/actions\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport interface FleetClient {\n    /** Defaults to https://fleet.ochk.io. */\n    baseUrl?: string;\n    /** Bearer token from /settings § 03 (`ock_<hex>`). */\n    apiToken: string;\n    /** Project the action belongs to (proj_*). */\n    projectId: string;\n    /** Optional fetch override for runtimes that need it. */\n    fetch?: typeof fetch;\n}\n\nexport interface PostActionResult {\n    id: string;\n    project_id: string;\n    delegation_id: string;\n}\n\n/**\n * POST a stamped action envelope to fleet.ochk.io/api/actions. The\n * fleet re-derives the action id, validates agent-must-match-\n * delegation, persists, fans out to Nostr (kind 30084), submits to\n * OC Stamp, and triggers any subscribed webhooks. Throws on non-2xx\n * with the server's reason string.\n */\nexport async function postActionToFleet(\n    action: ActionEnvelope,\n    client: FleetClient\n): Promise<PostActionResult> {\n    const baseUrl = client.baseUrl ?? 'https://fleet.ochk.io';\n    const f = client.fetch ?? fetch;\n    const body = {\n        project_id: client.projectId,\n        delegation_id: action.delegation_id,\n        agent_address: action.signer.address,\n        scope_exercised: action.scope_exercised,\n        content_hash: action.content.hash,\n        content_length: action.content.length,\n        content_mime: action.content.mime,\n        signed_at: action.signed_at,\n        signature: action.sig.value,\n        id: action.id,\n    };\n    const r = await f(`${baseUrl}/api/actions`, {\n        method: 'POST',\n        headers: {\n            'Content-Type': 'application/json',\n            Authorization: `Bearer ${client.apiToken}`,\n        },\n        body: JSON.stringify(body),\n    });\n    if (!r.ok) {\n        let reason = `http_${r.status}`;\n        try {\n            const j = (await r.json()) as { reason?: string };\n            if (j.reason) reason = j.reason;\n        } catch {\n            // body wasn't json\n        }\n        throw new Error(`postActionToFleet failed: ${reason}`);\n    }\n    const j = (await r.json()) as { ok: true; action: PostActionResult };\n    return j.action;\n}\n"]}
+{"version":3,"sources":["../src/index.ts"],"names":["canonicalize","hexEncode","sha256","computeActionId","assertScopeGranted","signAsAgent","j"],"mappings":";;;;;;;AA6DO,SAAS,qBAAqB,CAAA,EAA+B;AAChE,EAAA,MAAM,KAAA,GAAQ;AAAA,IACV,MAAM,CAAA,CAAE,IAAA;AAAA,IACR,SAAS,CAAA,CAAE,MAAA;AAAA,IACX,MAAM,CAAA,CAAE;AAAA,GACZ;AACA,EAAA,MAAM,GAAA,GAAMA,uBAAa,KAAsD,CAAA;AAC/E,EAAA,OAAO,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,MAAM,IAAI,CAAA;AAC9C;AAEO,SAAS,aAAa,CAAA,EAA2B;AACpD,EAAA,OAAO,YAAYC,mBAAA,CAAUC,aAAA,CAAO,oBAAA,CAAqB,CAAC,CAAC,CAAC,CAAA;AAChE;AAEO,SAAS,gBAAA,CACZ,YAAA,EACA,QAAA,EACA,YAAA,EACA,gBACA,CAAA,EACM;AACN,EAAA,OAAOC,yBAAA,CAAgB;AAAA,IACnB,OAAA,EAAS,YAAA;AAAA,IACT,YAAA,EAAc,aAAa,CAAC,CAAA;AAAA,IAC5B,cAAA,EAAgB,oBAAA,CAAqB,CAAC,CAAA,CAAE,UAAA;AAAA,IACxC,YAAA,EAAc,gDAAA;AAAA,IACd,SAAA,EAAW,QAAA;AAAA,IACX,aAAA,EAAe,YAAA;AAAA,IACf,eAAA,EAAiB;AAAA,GACpB,CAAA;AACL;AAkBA,eAAsB,cAAc,KAAA,EAAoD;AACpF,EAAA,MAAM,iBACF,KAAA,CAAM,cAAA,IAAkB,CAAA,iBAAA,EAAoB,KAAA,CAAM,KAAK,IAAI,CAAA,CAAA,CAAA;AAE/D,EAAAC,4BAAA,CAAmB,KAAA,CAAM,UAAA,EAAY,cAAA,EAAgB,eAAe,CAAA;AAEpE,EAAA,MAAM,KAAA,GAAQ,oBAAA,CAAqB,KAAA,CAAM,IAAI,CAAA;AAC7C,EAAA,OAAOC,uBAAA,CAAY;AAAA,IACf,OAAO,KAAA,CAAM,KAAA;AAAA,IACb,YAAY,KAAA,CAAM,UAAA;AAAA,IAClB,OAAA,EAAS,EAAE,IAAA,EAAM,YAAA,CAAa,MAAM,IAAI,CAAA,EAAG,MAAA,EAAQ,KAAA,CAAM,UAAA,EAAW;AAAA,IACpE,IAAA,EAAM,gDAAA;AAAA,IACN,cAAA;AAAA,IACA,UAAU,KAAA,CAAM;AAAA,GACnB,CAAA;AACL;AAmEO,SAAS,OACZ,KAAA,EAC6B;AAC7B,EAAA,OAAO;AAAA,IACH,MAAM,KAAA,CAAM,IAAA;AAAA,IACZ,YAAY,KAAA,CAAM,UAAA;AAAA,IAClB,aAAa,KAAA,CAAM,WAAA;AAAA,IACnB,OAAA,EAAS,OAAO,IAAA,EAAM,GAAA,KAAQ;AAC1B,MAAA,MAAM,IAAA,GAAuB;AAAA,QACzB,QAAQ,GAAA,CAAI,MAAA;AAAA,QACZ,MAAM,KAAA,CAAM,IAAA;AAAA,QACZ;AAAA,OACJ;AACA,MAAA,MAAM,MAAA,GAAS,MAAM,aAAA,CAAc;AAAA,QAC/B,OAAO,GAAA,CAAI,KAAA;AAAA,QACX,YAAY,GAAA,CAAI,UAAA;AAAA,QAChB;AAAA,OACH,CAAA;AACD,MAAA,MAAM,MAAA,GAAS,MAAM,KAAA,CAAM,OAAA,CAAQ,IAAI,CAAA;AACvC,MAAA,IAAI,MAAA,GAAkC,IAAA;AACtC,MAAA,IAAI,IAAI,KAAA,EAAO;AACX,QAAA,IAAI;AACA,UAAA,MAAA,GAAS,MAAM,iBAAA,CAAkB,MAAA,EAAQ,GAAA,CAAI,KAAK,CAAA;AAAA,QACtD,SAAS,GAAA,EAAK;AAEV,UAAA,OAAA,CAAQ,KAAA,CAAM,+CAA+C,GAAG,CAAA;AAAA,QACpE;AAAA,MACJ;AACA,MAAA,OAAO,EAAE,MAAA,EAAQ,MAAA,EAAQ,MAAA,EAAO;AAAA,IACpC;AAAA,GACJ;AACJ;AA8BA,eAAsB,iBAAA,CAClB,QACA,MAAA,EACyB;AACzB,EAAA,MAAM,OAAA,GAAU,OAAO,OAAA,IAAW,uBAAA;AAClC,EAAA,MAAM,CAAA,GAAI,OAAO,KAAA,IAAS,KAAA;AAC1B,EAAA,MAAM,IAAA,GAAO;AAAA,IACT,YAAY,MAAA,CAAO,SAAA;AAAA,IACnB,eAAe,MAAA,CAAO,aAAA;AAAA,IACtB,aAAA,EAAe,OAAO,MAAA,CAAO,OAAA;AAAA,IAC7B,iBAAiB,MAAA,CAAO,eAAA;AAAA,IACxB,YAAA,EAAc,OAAO,OAAA,CAAQ,IAAA;AAAA,IAC7B,cAAA,EAAgB,OAAO,OAAA,CAAQ,MAAA;AAAA,IAC/B,YAAA,EAAc,OAAO,OAAA,CAAQ,IAAA;AAAA,IAC7B,WAAW,MAAA,CAAO,SAAA;AAAA,IAClB,SAAA,EAAW,OAAO,GAAA,CAAI,KAAA;AAAA,IACtB,IAAI,MAAA,CAAO;AAAA,GACf;AACA,EAAA,MAAM,CAAA,GAAI,MAAM,CAAA,CAAE,CAAA,EAAG,OAAO,CAAA,YAAA,CAAA,EAAgB;AAAA,IACxC,MAAA,EAAQ,MAAA;AAAA,IACR,OAAA,EAAS;AAAA,MACL,cAAA,EAAgB,kBAAA;AAAA,MAChB,aAAA,EAAe,CAAA,OAAA,EAAU,MAAA,CAAO,QAAQ,CAAA;AAAA,KAC5C;AAAA,IACA,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,IAAI;AAAA,GAC5B,CAAA;AACD,EAAA,IAAI,CAAC,EAAE,EAAA,EAAI;AACP,IAAA,IAAI,MAAA,GAAS,CAAA,KAAA,EAAQ,CAAA,CAAE,MAAM,CAAA,CAAA;AAC7B,IAAA,IAAI;AACA,MAAA,MAAMC,EAAAA,GAAK,MAAM,CAAA,CAAE,IAAA,EAAK;AACxB,MAAA,IAAIA,EAAAA,CAAE,MAAA,EAAQ,MAAA,GAASA,EAAAA,CAAE,MAAA;AAAA,IAC7B,CAAA,CAAA,MAAQ;AAAA,IAER;AACA,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,0BAAA,EAA6B,MAAM,CAAA,CAAE,CAAA;AAAA,EACzD;AACA,EAAA,MAAM,CAAA,GAAK,MAAM,CAAA,CAAE,IAAA,EAAK;AACxB,EAAA,OAAO,CAAA,CAAE,MAAA;AACb","file":"index.js","sourcesContent":["// @orangecheck/agent-vercel — wrap Vercel AI SDK `tool()` invocations in\n// OC Agent action envelopes.\n//\n// Provider-agnostic: the AI SDK is the abstraction layer. Whatever model\n// you use underneath (Anthropic, OpenAI, Cohere, …) the tool primitive is\n// the same {description, parameters, execute} shape. This adapter wraps\n// `execute` so every successful call produces a signed agent-action\n// envelope citing the active delegation.\n//\n// Two integration shapes:\n//\n//   1. ocTool({verb, parameters, execute})\n//      A drop-in replacement for `tool()`. The wrapped execute runs the\n//      scope check, signs the canonical (verb, args, callId) tuple,\n//      then runs your real handler.\n//\n//   2. stampToolCall(input)\n//      Lower-level stamping helper for cases where you have your own\n//      tool-execution loop and want to emit envelopes manually.\n//\n// The agent + delegation are passed via a per-request context object\n// (or threaded through closures) — we don't depend on AsyncLocalStorage\n// to keep edge-runtime compatibility maximal.\n\nimport { sha256 } from '@noble/hashes/sha256';\nimport {\n    assertScopeGranted,\n    canonicalize,\n    computeActionId,\n    hexEncode,\n    type DelegationEnvelope,\n} from '@orangecheck/agent-core';\nimport {\n    signAsAgent,\n    type ActionEnvelope,\n    type SignerRef,\n} from '@orangecheck/agent-signer';\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Canonicalization of a tool call\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport interface VercelToolCall {\n    /** Unique id assigned by the AI SDK for this tool invocation. */\n    callId: string;\n    /** Tool verb / name — passed in via ocTool() or set per-call by your wrapper. */\n    verb: string;\n    /** JSON-serializable arguments produced by the model. */\n    args: Record<string, unknown>;\n}\n\n/**\n * Produce the canonical bytes for a Vercel AI SDK tool call.\n *\n * Shape (RFC 8785 canonical JSON, then trailing LF):\n *   {\n *     \"args\":    <canonical JSON of args>,\n *     \"call_id\": <callId>,\n *     \"verb\":    <verb>\n *   }\n */\nexport function canonicalizeToolCall(c: VercelToolCall): Uint8Array {\n    const canon = {\n        args: c.args,\n        call_id: c.callId,\n        verb: c.verb,\n    };\n    const str = canonicalize(canon as unknown as Parameters<typeof canonicalize>[0]);\n    return new TextEncoder().encode(str + '\\n');\n}\n\nexport function toolCallHash(c: VercelToolCall): string {\n    return 'sha256:' + hexEncode(sha256(canonicalizeToolCall(c)));\n}\n\nexport function toolCallActionId(\n    agentAddress: string,\n    signedAt: string,\n    delegationId: string,\n    scopeExercised: string,\n    c: VercelToolCall\n): string {\n    return computeActionId({\n        address: agentAddress,\n        content_hash: toolCallHash(c),\n        content_length: canonicalizeToolCall(c).byteLength,\n        content_mime: 'application/vnd.oc-agent.vercel-tool-call+json',\n        signed_at: signedAt,\n        delegation_id: delegationId,\n        scope_exercised: scopeExercised,\n    });\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Stamping primitive\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport interface AgentContext {\n    agent: SignerRef;\n    delegation: DelegationEnvelope;\n}\n\nexport interface StampToolCallInput extends AgentContext {\n    call: VercelToolCall;\n    /** Defaults to `vercel:tool(verb=<verb>)` — the tightest admissible sub-scope. */\n    scopeExercised?: string;\n    signedAt?: Date;\n}\n\nexport async function stampToolCall(input: StampToolCallInput): Promise<ActionEnvelope> {\n    const scopeExercised =\n        input.scopeExercised ?? `vercel:tool(verb=${input.call.verb})`;\n\n    assertScopeGranted(input.delegation, scopeExercised, 'stampToolCall');\n\n    const bytes = canonicalizeToolCall(input.call);\n    return signAsAgent({\n        agent: input.agent,\n        delegation: input.delegation as never,\n        content: { hash: toolCallHash(input.call), length: bytes.byteLength },\n        mime: 'application/vnd.oc-agent.vercel-tool-call+json',\n        scopeExercised,\n        signedAt: input.signedAt,\n    });\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// ocTool — drop-in tool() replacement\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport interface OcToolInput<TArgs extends Record<string, unknown>, TResult> {\n    /** OC Agent verb under which this tool is exercised. */\n    verb: string;\n    /** Pass-through to AI SDK's `tool()` — the JSON Schema for inputs. */\n    parameters?: unknown;\n    /** Pass-through description shown to the model. */\n    description?: string;\n    /** Your real handler. Returns whatever the tool returns. */\n    execute: (args: TArgs) => Promise<TResult>;\n}\n\nexport interface OcToolWrapped<TArgs extends Record<string, unknown>, TResult> {\n    verb: string;\n    parameters?: unknown;\n    description?: string;\n    /**\n     * The execute fn the AI SDK calls. Receives args + a callId (the AI\n     * SDK passes its own callId through — adapter glue passes it via\n     * context). Optional `fleet` field on the context tells the\n     * wrapper to fire-and-forget POST the stamped action to fleet.\n     * ochk.io/api/actions after the underlying execute() returns.\n     */\n    execute: (\n        args: TArgs,\n        ctx: AgentContext & { callId: string; fleet?: FleetClient }\n    ) => Promise<{\n        result: TResult;\n        action: ActionEnvelope;\n        posted: PostActionResult | null;\n    }>;\n}\n\n/**\n * Wrap a tool() definition so its execute path is scope-checked and\n * envelope-emitting. The exact glue depends on which AI-SDK release you're\n * on — the typical pattern is:\n *\n *   const tools = {\n *     'invoice.create': tool({\n *       description: '…',\n *       parameters:  schema,\n *       execute:     async (args, { toolCallId }) => {\n *         const { result, action } = await invoiceCreate.execute(args, {\n *           agent, delegation, callId: toolCallId,\n *         });\n *         await yourAuditPipeline.append(action);\n *         return result;\n *       },\n *     }),\n *   };\n *\n *   const invoiceCreate = ocTool({\n *     verb: 'invoice.create',\n *     parameters: schema,\n *     execute: async (args) => myInvoiceCreateImpl(args),\n *   });\n *\n * The `ocTool` value is provider/SDK-agnostic — bring your own glue around\n * it. v1 of the adapter intentionally does not import `ai` so it works on\n * any release.\n */\nexport function ocTool<TArgs extends Record<string, unknown>, TResult>(\n    input: OcToolInput<TArgs, TResult>\n): OcToolWrapped<TArgs, TResult> {\n    return {\n        verb: input.verb,\n        parameters: input.parameters,\n        description: input.description,\n        execute: async (args, ctx) => {\n            const call: VercelToolCall = {\n                callId: ctx.callId,\n                verb: input.verb,\n                args,\n            };\n            const action = await stampToolCall({\n                agent: ctx.agent,\n                delegation: ctx.delegation,\n                call,\n            });\n            const result = await input.execute(args);\n            let posted: PostActionResult | null = null;\n            if (ctx.fleet) {\n                try {\n                    posted = await postActionToFleet(action, ctx.fleet);\n                } catch (err) {\n                    // eslint-disable-next-line no-console\n                    console.error('[oc-agent-vercel] postActionToFleet failed:', err);\n                }\n            }\n            return { result, action, posted };\n        },\n    };\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Fleet integration: POST stamped actions to fleet.ochk.io/api/actions\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport interface FleetClient {\n    /** Defaults to https://fleet.ochk.io. */\n    baseUrl?: string;\n    /** Bearer token from /settings § 03 (`ock_<hex>`). */\n    apiToken: string;\n    /** Project the action belongs to (proj_*). */\n    projectId: string;\n    /** Optional fetch override for runtimes that need it. */\n    fetch?: typeof fetch;\n}\n\nexport interface PostActionResult {\n    id: string;\n    project_id: string;\n    delegation_id: string;\n}\n\n/**\n * POST a stamped action envelope to fleet.ochk.io/api/actions. The\n * fleet re-derives the action id, validates agent-must-match-\n * delegation, persists, fans out to Nostr (kind 30084), submits to\n * OC Stamp, and triggers any subscribed webhooks. Throws on non-2xx\n * with the server's reason string.\n */\nexport async function postActionToFleet(\n    action: ActionEnvelope,\n    client: FleetClient\n): Promise<PostActionResult> {\n    const baseUrl = client.baseUrl ?? 'https://fleet.ochk.io';\n    const f = client.fetch ?? fetch;\n    const body = {\n        project_id: client.projectId,\n        delegation_id: action.delegation_id,\n        agent_address: action.signer.address,\n        scope_exercised: action.scope_exercised,\n        content_hash: action.content.hash,\n        content_length: action.content.length,\n        content_mime: action.content.mime,\n        signed_at: action.signed_at,\n        signature: action.sig.value,\n        id: action.id,\n    };\n    const r = await f(`${baseUrl}/api/actions`, {\n        method: 'POST',\n        headers: {\n            'Content-Type': 'application/json',\n            Authorization: `Bearer ${client.apiToken}`,\n        },\n        body: JSON.stringify(body),\n    });\n    if (!r.ok) {\n        let reason = `http_${r.status}`;\n        try {\n            const j = (await r.json()) as { reason?: string };\n            if (j.reason) reason = j.reason;\n        } catch {\n            // body wasn't json\n        }\n        throw new Error(`postActionToFleet failed: ${reason}`);\n    }\n    const j = (await r.json()) as { ok: true; action: PostActionResult };\n    return j.action;\n}\n"]}

package/dist/index.mjs

@@ -1,5 +1,5 @@
 import { sha256 } from '@noble/hashes/sha256';
-import { canonicalize, hexEncode, computeActionId, parseScope, isSubScope } from '@orangecheck/agent-core';
+import { canonicalize, hexEncode, computeActionId, assertScopeGranted } from '@orangecheck/agent-core';
 import { signAsAgent } from '@orangecheck/agent-signer';
 
 // src/index.ts
@@ -28,13 +28,7 @@ function toolCallActionId(agentAddress, signedAt, delegationId, scopeExercised,
 }
 async function stampToolCall(input) {
   const scopeExercised = input.scopeExercised ?? `vercel:tool(verb=${input.call.verb})`;
-  const granted = (input.delegation.scopes ?? []).map(parseScope);
-  const exercisedParsed = parseScope(scopeExercised);
-  if (!granted.some((g) => isSubScope(exercisedParsed, g))) {
-    throw new Error(
-      `stampToolCall: scope_exercised (${scopeExercised}) is not a sub-scope of any granted scope`
-    );
-  }
+  assertScopeGranted(input.delegation, scopeExercised, "stampToolCall");
   const bytes = canonicalizeToolCall(input.call);
   return signAsAgent({
     agent: input.agent,

package/dist/index.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts"],"names":["j"],"mappings":";;;;;AA8DO,SAAS,qBAAqB,CAAA,EAA+B;AAChE,EAAA,MAAM,KAAA,GAAQ;AAAA,IACV,MAAM,CAAA,CAAE,IAAA;AAAA,IACR,SAAS,CAAA,CAAE,MAAA;AAAA,IACX,MAAM,CAAA,CAAE;AAAA,GACZ;AACA,EAAA,MAAM,GAAA,GAAM,aAAa,KAAsD,CAAA;AAC/E,EAAA,OAAO,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,MAAM,IAAI,CAAA;AAC9C;AAEO,SAAS,aAAa,CAAA,EAA2B;AACpD,EAAA,OAAO,YAAY,SAAA,CAAU,MAAA,CAAO,oBAAA,CAAqB,CAAC,CAAC,CAAC,CAAA;AAChE;AAEO,SAAS,gBAAA,CACZ,YAAA,EACA,QAAA,EACA,YAAA,EACA,gBACA,CAAA,EACM;AACN,EAAA,OAAO,eAAA,CAAgB;AAAA,IACnB,OAAA,EAAS,YAAA;AAAA,IACT,YAAA,EAAc,aAAa,CAAC,CAAA;AAAA,IAC5B,cAAA,EAAgB,oBAAA,CAAqB,CAAC,CAAA,CAAE,UAAA;AAAA,IACxC,YAAA,EAAc,gDAAA;AAAA,IACd,SAAA,EAAW,QAAA;AAAA,IACX,aAAA,EAAe,YAAA;AAAA,IACf,eAAA,EAAiB;AAAA,GACpB,CAAA;AACL;AAkBA,eAAsB,cAAc,KAAA,EAAoD;AACpF,EAAA,MAAM,iBACF,KAAA,CAAM,cAAA,IAAkB,CAAA,iBAAA,EAAoB,KAAA,CAAM,KAAK,IAAI,CAAA,CAAA,CAAA;AAE/D,EAAA,MAAM,WAAW,KAAA,CAAM,UAAA,CAAW,UAAU,EAAC,EAAG,IAAI,UAAU,CAAA;AAC9D,EAAA,MAAM,eAAA,GAAkB,WAAW,cAAc,CAAA;AACjD,EAAA,IAAI,CAAC,QAAQ,IAAA,CAAK,CAAC,MAAM,UAAA,CAAW,eAAA,EAAiB,CAAC,CAAC,CAAA,EAAG;AACtD,IAAA,MAAM,IAAI,KAAA;AAAA,MACN,mCAAmC,cAAc,CAAA,yCAAA;AAAA,KACrD;AAAA,EACJ;AAEA,EAAA,MAAM,KAAA,GAAQ,oBAAA,CAAqB,KAAA,CAAM,IAAI,CAAA;AAC7C,EAAA,OAAO,WAAA,CAAY;AAAA,IACf,OAAO,KAAA,CAAM,KAAA;AAAA,IACb,YAAY,KAAA,CAAM,UAAA;AAAA,IAClB,OAAA,EAAS,EAAE,IAAA,EAAM,YAAA,CAAa,MAAM,IAAI,CAAA,EAAG,MAAA,EAAQ,KAAA,CAAM,UAAA,EAAW;AAAA,IACpE,IAAA,EAAM,gDAAA;AAAA,IACN,cAAA;AAAA,IACA,UAAU,KAAA,CAAM;AAAA,GACnB,CAAA;AACL;AAmEO,SAAS,OACZ,KAAA,EAC6B;AAC7B,EAAA,OAAO;AAAA,IACH,MAAM,KAAA,CAAM,IAAA;AAAA,IACZ,YAAY,KAAA,CAAM,UAAA;AAAA,IAClB,aAAa,KAAA,CAAM,WAAA;AAAA,IACnB,OAAA,EAAS,OAAO,IAAA,EAAM,GAAA,KAAQ;AAC1B,MAAA,MAAM,IAAA,GAAuB;AAAA,QACzB,QAAQ,GAAA,CAAI,MAAA;AAAA,QACZ,MAAM,KAAA,CAAM,IAAA;AAAA,QACZ;AAAA,OACJ;AACA,MAAA,MAAM,MAAA,GAAS,MAAM,aAAA,CAAc;AAAA,QAC/B,OAAO,GAAA,CAAI,KAAA;AAAA,QACX,YAAY,GAAA,CAAI,UAAA;AAAA,QAChB;AAAA,OACH,CAAA;AACD,MAAA,MAAM,MAAA,GAAS,MAAM,KAAA,CAAM,OAAA,CAAQ,IAAI,CAAA;AACvC,MAAA,IAAI,MAAA,GAAkC,IAAA;AACtC,MAAA,IAAI,IAAI,KAAA,EAAO;AACX,QAAA,IAAI;AACA,UAAA,MAAA,GAAS,MAAM,iBAAA,CAAkB,MAAA,EAAQ,GAAA,CAAI,KAAK,CAAA;AAAA,QACtD,SAAS,GAAA,EAAK;AAEV,UAAA,OAAA,CAAQ,KAAA,CAAM,+CAA+C,GAAG,CAAA;AAAA,QACpE;AAAA,MACJ;AACA,MAAA,OAAO,EAAE,MAAA,EAAQ,MAAA,EAAQ,MAAA,EAAO;AAAA,IACpC;AAAA,GACJ;AACJ;AA8BA,eAAsB,iBAAA,CAClB,QACA,MAAA,EACyB;AACzB,EAAA,MAAM,OAAA,GAAU,OAAO,OAAA,IAAW,uBAAA;AAClC,EAAA,MAAM,CAAA,GAAI,OAAO,KAAA,IAAS,KAAA;AAC1B,EAAA,MAAM,IAAA,GAAO;AAAA,IACT,YAAY,MAAA,CAAO,SAAA;AAAA,IACnB,eAAe,MAAA,CAAO,aAAA;AAAA,IACtB,aAAA,EAAe,OAAO,MAAA,CAAO,OAAA;AAAA,IAC7B,iBAAiB,MAAA,CAAO,eAAA;AAAA,IACxB,YAAA,EAAc,OAAO,OAAA,CAAQ,IAAA;AAAA,IAC7B,cAAA,EAAgB,OAAO,OAAA,CAAQ,MAAA;AAAA,IAC/B,YAAA,EAAc,OAAO,OAAA,CAAQ,IAAA;AAAA,IAC7B,WAAW,MAAA,CAAO,SAAA;AAAA,IAClB,SAAA,EAAW,OAAO,GAAA,CAAI,KAAA;AAAA,IACtB,IAAI,MAAA,CAAO;AAAA,GACf;AACA,EAAA,MAAM,CAAA,GAAI,MAAM,CAAA,CAAE,CAAA,EAAG,OAAO,CAAA,YAAA,CAAA,EAAgB;AAAA,IACxC,MAAA,EAAQ,MAAA;AAAA,IACR,OAAA,EAAS;AAAA,MACL,cAAA,EAAgB,kBAAA;AAAA,MAChB,aAAA,EAAe,CAAA,OAAA,EAAU,MAAA,CAAO,QAAQ,CAAA;AAAA,KAC5C;AAAA,IACA,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,IAAI;AAAA,GAC5B,CAAA;AACD,EAAA,IAAI,CAAC,EAAE,EAAA,EAAI;AACP,IAAA,IAAI,MAAA,GAAS,CAAA,KAAA,EAAQ,CAAA,CAAE,MAAM,CAAA,CAAA;AAC7B,IAAA,IAAI;AACA,MAAA,MAAMA,EAAAA,GAAK,MAAM,CAAA,CAAE,IAAA,EAAK;AACxB,MAAA,IAAIA,EAAAA,CAAE,MAAA,EAAQ,MAAA,GAASA,EAAAA,CAAE,MAAA;AAAA,IAC7B,CAAA,CAAA,MAAQ;AAAA,IAER;AACA,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,0BAAA,EAA6B,MAAM,CAAA,CAAE,CAAA;AAAA,EACzD;AACA,EAAA,MAAM,CAAA,GAAK,MAAM,CAAA,CAAE,IAAA,EAAK;AACxB,EAAA,OAAO,CAAA,CAAE,MAAA;AACb","file":"index.mjs","sourcesContent":["// @orangecheck/agent-vercel — wrap Vercel AI SDK `tool()` invocations in\n// OC Agent action envelopes.\n//\n// Provider-agnostic: the AI SDK is the abstraction layer. Whatever model\n// you use underneath (Anthropic, OpenAI, Cohere, …) the tool primitive is\n// the same {description, parameters, execute} shape. This adapter wraps\n// `execute` so every successful call produces a signed agent-action\n// envelope citing the active delegation.\n//\n// Two integration shapes:\n//\n//   1. ocTool({verb, parameters, execute})\n//      A drop-in replacement for `tool()`. The wrapped execute runs the\n//      scope check, signs the canonical (verb, args, callId) tuple,\n//      then runs your real handler.\n//\n//   2. stampToolCall(input)\n//      Lower-level stamping helper for cases where you have your own\n//      tool-execution loop and want to emit envelopes manually.\n//\n// The agent + delegation are passed via a per-request context object\n// (or threaded through closures) — we don't depend on AsyncLocalStorage\n// to keep edge-runtime compatibility maximal.\n\nimport { sha256 } from '@noble/hashes/sha256';\nimport {\n    canonicalize,\n    computeActionId,\n    hexEncode,\n    isSubScope,\n    parseScope,\n    type DelegationEnvelope,\n} from '@orangecheck/agent-core';\nimport {\n    signAsAgent,\n    type ActionEnvelope,\n    type SignerRef,\n} from '@orangecheck/agent-signer';\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Canonicalization of a tool call\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport interface VercelToolCall {\n    /** Unique id assigned by the AI SDK for this tool invocation. */\n    callId: string;\n    /** Tool verb / name — passed in via ocTool() or set per-call by your wrapper. */\n    verb: string;\n    /** JSON-serializable arguments produced by the model. */\n    args: Record<string, unknown>;\n}\n\n/**\n * Produce the canonical bytes for a Vercel AI SDK tool call.\n *\n * Shape (RFC 8785 canonical JSON, then trailing LF):\n *   {\n *     \"args\":    <canonical JSON of args>,\n *     \"call_id\": <callId>,\n *     \"verb\":    <verb>\n *   }\n */\nexport function canonicalizeToolCall(c: VercelToolCall): Uint8Array {\n    const canon = {\n        args: c.args,\n        call_id: c.callId,\n        verb: c.verb,\n    };\n    const str = canonicalize(canon as unknown as Parameters<typeof canonicalize>[0]);\n    return new TextEncoder().encode(str + '\\n');\n}\n\nexport function toolCallHash(c: VercelToolCall): string {\n    return 'sha256:' + hexEncode(sha256(canonicalizeToolCall(c)));\n}\n\nexport function toolCallActionId(\n    agentAddress: string,\n    signedAt: string,\n    delegationId: string,\n    scopeExercised: string,\n    c: VercelToolCall\n): string {\n    return computeActionId({\n        address: agentAddress,\n        content_hash: toolCallHash(c),\n        content_length: canonicalizeToolCall(c).byteLength,\n        content_mime: 'application/vnd.oc-agent.vercel-tool-call+json',\n        signed_at: signedAt,\n        delegation_id: delegationId,\n        scope_exercised: scopeExercised,\n    });\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Stamping primitive\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport interface AgentContext {\n    agent: SignerRef;\n    delegation: DelegationEnvelope;\n}\n\nexport interface StampToolCallInput extends AgentContext {\n    call: VercelToolCall;\n    /** Defaults to `vercel:tool(verb=<verb>)` — the tightest admissible sub-scope. */\n    scopeExercised?: string;\n    signedAt?: Date;\n}\n\nexport async function stampToolCall(input: StampToolCallInput): Promise<ActionEnvelope> {\n    const scopeExercised =\n        input.scopeExercised ?? `vercel:tool(verb=${input.call.verb})`;\n\n    const granted = (input.delegation.scopes ?? []).map(parseScope);\n    const exercisedParsed = parseScope(scopeExercised);\n    if (!granted.some((g) => isSubScope(exercisedParsed, g))) {\n        throw new Error(\n            `stampToolCall: scope_exercised (${scopeExercised}) is not a sub-scope of any granted scope`\n        );\n    }\n\n    const bytes = canonicalizeToolCall(input.call);\n    return signAsAgent({\n        agent: input.agent,\n        delegation: input.delegation as never,\n        content: { hash: toolCallHash(input.call), length: bytes.byteLength },\n        mime: 'application/vnd.oc-agent.vercel-tool-call+json',\n        scopeExercised,\n        signedAt: input.signedAt,\n    });\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// ocTool — drop-in tool() replacement\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport interface OcToolInput<TArgs extends Record<string, unknown>, TResult> {\n    /** OC Agent verb under which this tool is exercised. */\n    verb: string;\n    /** Pass-through to AI SDK's `tool()` — the JSON Schema for inputs. */\n    parameters?: unknown;\n    /** Pass-through description shown to the model. */\n    description?: string;\n    /** Your real handler. Returns whatever the tool returns. */\n    execute: (args: TArgs) => Promise<TResult>;\n}\n\nexport interface OcToolWrapped<TArgs extends Record<string, unknown>, TResult> {\n    verb: string;\n    parameters?: unknown;\n    description?: string;\n    /**\n     * The execute fn the AI SDK calls. Receives args + a callId (the AI\n     * SDK passes its own callId through — adapter glue passes it via\n     * context). Optional `fleet` field on the context tells the\n     * wrapper to fire-and-forget POST the stamped action to fleet.\n     * ochk.io/api/actions after the underlying execute() returns.\n     */\n    execute: (\n        args: TArgs,\n        ctx: AgentContext & { callId: string; fleet?: FleetClient }\n    ) => Promise<{\n        result: TResult;\n        action: ActionEnvelope;\n        posted: PostActionResult | null;\n    }>;\n}\n\n/**\n * Wrap a tool() definition so its execute path is scope-checked and\n * envelope-emitting. The exact glue depends on which AI-SDK release you're\n * on — the typical pattern is:\n *\n *   const tools = {\n *     'invoice.create': tool({\n *       description: '…',\n *       parameters:  schema,\n *       execute:     async (args, { toolCallId }) => {\n *         const { result, action } = await invoiceCreate.execute(args, {\n *           agent, delegation, callId: toolCallId,\n *         });\n *         await yourAuditPipeline.append(action);\n *         return result;\n *       },\n *     }),\n *   };\n *\n *   const invoiceCreate = ocTool({\n *     verb: 'invoice.create',\n *     parameters: schema,\n *     execute: async (args) => myInvoiceCreateImpl(args),\n *   });\n *\n * The `ocTool` value is provider/SDK-agnostic — bring your own glue around\n * it. v1 of the adapter intentionally does not import `ai` so it works on\n * any release.\n */\nexport function ocTool<TArgs extends Record<string, unknown>, TResult>(\n    input: OcToolInput<TArgs, TResult>\n): OcToolWrapped<TArgs, TResult> {\n    return {\n        verb: input.verb,\n        parameters: input.parameters,\n        description: input.description,\n        execute: async (args, ctx) => {\n            const call: VercelToolCall = {\n                callId: ctx.callId,\n                verb: input.verb,\n                args,\n            };\n            const action = await stampToolCall({\n                agent: ctx.agent,\n                delegation: ctx.delegation,\n                call,\n            });\n            const result = await input.execute(args);\n            let posted: PostActionResult | null = null;\n            if (ctx.fleet) {\n                try {\n                    posted = await postActionToFleet(action, ctx.fleet);\n                } catch (err) {\n                    // eslint-disable-next-line no-console\n                    console.error('[oc-agent-vercel] postActionToFleet failed:', err);\n                }\n            }\n            return { result, action, posted };\n        },\n    };\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Fleet integration: POST stamped actions to fleet.ochk.io/api/actions\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport interface FleetClient {\n    /** Defaults to https://fleet.ochk.io. */\n    baseUrl?: string;\n    /** Bearer token from /settings § 03 (`ock_<hex>`). */\n    apiToken: string;\n    /** Project the action belongs to (proj_*). */\n    projectId: string;\n    /** Optional fetch override for runtimes that need it. */\n    fetch?: typeof fetch;\n}\n\nexport interface PostActionResult {\n    id: string;\n    project_id: string;\n    delegation_id: string;\n}\n\n/**\n * POST a stamped action envelope to fleet.ochk.io/api/actions. The\n * fleet re-derives the action id, validates agent-must-match-\n * delegation, persists, fans out to Nostr (kind 30084), submits to\n * OC Stamp, and triggers any subscribed webhooks. Throws on non-2xx\n * with the server's reason string.\n */\nexport async function postActionToFleet(\n    action: ActionEnvelope,\n    client: FleetClient\n): Promise<PostActionResult> {\n    const baseUrl = client.baseUrl ?? 'https://fleet.ochk.io';\n    const f = client.fetch ?? fetch;\n    const body = {\n        project_id: client.projectId,\n        delegation_id: action.delegation_id,\n        agent_address: action.signer.address,\n        scope_exercised: action.scope_exercised,\n        content_hash: action.content.hash,\n        content_length: action.content.length,\n        content_mime: action.content.mime,\n        signed_at: action.signed_at,\n        signature: action.sig.value,\n        id: action.id,\n    };\n    const r = await f(`${baseUrl}/api/actions`, {\n        method: 'POST',\n        headers: {\n            'Content-Type': 'application/json',\n            Authorization: `Bearer ${client.apiToken}`,\n        },\n        body: JSON.stringify(body),\n    });\n    if (!r.ok) {\n        let reason = `http_${r.status}`;\n        try {\n            const j = (await r.json()) as { reason?: string };\n            if (j.reason) reason = j.reason;\n        } catch {\n            // body wasn't json\n        }\n        throw new Error(`postActionToFleet failed: ${reason}`);\n    }\n    const j = (await r.json()) as { ok: true; action: PostActionResult };\n    return j.action;\n}\n"]}
+{"version":3,"sources":["../src/index.ts"],"names":["j"],"mappings":";;;;;AA6DO,SAAS,qBAAqB,CAAA,EAA+B;AAChE,EAAA,MAAM,KAAA,GAAQ;AAAA,IACV,MAAM,CAAA,CAAE,IAAA;AAAA,IACR,SAAS,CAAA,CAAE,MAAA;AAAA,IACX,MAAM,CAAA,CAAE;AAAA,GACZ;AACA,EAAA,MAAM,GAAA,GAAM,aAAa,KAAsD,CAAA;AAC/E,EAAA,OAAO,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,MAAM,IAAI,CAAA;AAC9C;AAEO,SAAS,aAAa,CAAA,EAA2B;AACpD,EAAA,OAAO,YAAY,SAAA,CAAU,MAAA,CAAO,oBAAA,CAAqB,CAAC,CAAC,CAAC,CAAA;AAChE;AAEO,SAAS,gBAAA,CACZ,YAAA,EACA,QAAA,EACA,YAAA,EACA,gBACA,CAAA,EACM;AACN,EAAA,OAAO,eAAA,CAAgB;AAAA,IACnB,OAAA,EAAS,YAAA;AAAA,IACT,YAAA,EAAc,aAAa,CAAC,CAAA;AAAA,IAC5B,cAAA,EAAgB,oBAAA,CAAqB,CAAC,CAAA,CAAE,UAAA;AAAA,IACxC,YAAA,EAAc,gDAAA;AAAA,IACd,SAAA,EAAW,QAAA;AAAA,IACX,aAAA,EAAe,YAAA;AAAA,IACf,eAAA,EAAiB;AAAA,GACpB,CAAA;AACL;AAkBA,eAAsB,cAAc,KAAA,EAAoD;AACpF,EAAA,MAAM,iBACF,KAAA,CAAM,cAAA,IAAkB,CAAA,iBAAA,EAAoB,KAAA,CAAM,KAAK,IAAI,CAAA,CAAA,CAAA;AAE/D,EAAA,kBAAA,CAAmB,KAAA,CAAM,UAAA,EAAY,cAAA,EAAgB,eAAe,CAAA;AAEpE,EAAA,MAAM,KAAA,GAAQ,oBAAA,CAAqB,KAAA,CAAM,IAAI,CAAA;AAC7C,EAAA,OAAO,WAAA,CAAY;AAAA,IACf,OAAO,KAAA,CAAM,KAAA;AAAA,IACb,YAAY,KAAA,CAAM,UAAA;AAAA,IAClB,OAAA,EAAS,EAAE,IAAA,EAAM,YAAA,CAAa,MAAM,IAAI,CAAA,EAAG,MAAA,EAAQ,KAAA,CAAM,UAAA,EAAW;AAAA,IACpE,IAAA,EAAM,gDAAA;AAAA,IACN,cAAA;AAAA,IACA,UAAU,KAAA,CAAM;AAAA,GACnB,CAAA;AACL;AAmEO,SAAS,OACZ,KAAA,EAC6B;AAC7B,EAAA,OAAO;AAAA,IACH,MAAM,KAAA,CAAM,IAAA;AAAA,IACZ,YAAY,KAAA,CAAM,UAAA;AAAA,IAClB,aAAa,KAAA,CAAM,WAAA;AAAA,IACnB,OAAA,EAAS,OAAO,IAAA,EAAM,GAAA,KAAQ;AAC1B,MAAA,MAAM,IAAA,GAAuB;AAAA,QACzB,QAAQ,GAAA,CAAI,MAAA;AAAA,QACZ,MAAM,KAAA,CAAM,IAAA;AAAA,QACZ;AAAA,OACJ;AACA,MAAA,MAAM,MAAA,GAAS,MAAM,aAAA,CAAc;AAAA,QAC/B,OAAO,GAAA,CAAI,KAAA;AAAA,QACX,YAAY,GAAA,CAAI,UAAA;AAAA,QAChB;AAAA,OACH,CAAA;AACD,MAAA,MAAM,MAAA,GAAS,MAAM,KAAA,CAAM,OAAA,CAAQ,IAAI,CAAA;AACvC,MAAA,IAAI,MAAA,GAAkC,IAAA;AACtC,MAAA,IAAI,IAAI,KAAA,EAAO;AACX,QAAA,IAAI;AACA,UAAA,MAAA,GAAS,MAAM,iBAAA,CAAkB,MAAA,EAAQ,GAAA,CAAI,KAAK,CAAA;AAAA,QACtD,SAAS,GAAA,EAAK;AAEV,UAAA,OAAA,CAAQ,KAAA,CAAM,+CAA+C,GAAG,CAAA;AAAA,QACpE;AAAA,MACJ;AACA,MAAA,OAAO,EAAE,MAAA,EAAQ,MAAA,EAAQ,MAAA,EAAO;AAAA,IACpC;AAAA,GACJ;AACJ;AA8BA,eAAsB,iBAAA,CAClB,QACA,MAAA,EACyB;AACzB,EAAA,MAAM,OAAA,GAAU,OAAO,OAAA,IAAW,uBAAA;AAClC,EAAA,MAAM,CAAA,GAAI,OAAO,KAAA,IAAS,KAAA;AAC1B,EAAA,MAAM,IAAA,GAAO;AAAA,IACT,YAAY,MAAA,CAAO,SAAA;AAAA,IACnB,eAAe,MAAA,CAAO,aAAA;AAAA,IACtB,aAAA,EAAe,OAAO,MAAA,CAAO,OAAA;AAAA,IAC7B,iBAAiB,MAAA,CAAO,eAAA;AAAA,IACxB,YAAA,EAAc,OAAO,OAAA,CAAQ,IAAA;AAAA,IAC7B,cAAA,EAAgB,OAAO,OAAA,CAAQ,MAAA;AAAA,IAC/B,YAAA,EAAc,OAAO,OAAA,CAAQ,IAAA;AAAA,IAC7B,WAAW,MAAA,CAAO,SAAA;AAAA,IAClB,SAAA,EAAW,OAAO,GAAA,CAAI,KAAA;AAAA,IACtB,IAAI,MAAA,CAAO;AAAA,GACf;AACA,EAAA,MAAM,CAAA,GAAI,MAAM,CAAA,CAAE,CAAA,EAAG,OAAO,CAAA,YAAA,CAAA,EAAgB;AAAA,IACxC,MAAA,EAAQ,MAAA;AAAA,IACR,OAAA,EAAS;AAAA,MACL,cAAA,EAAgB,kBAAA;AAAA,MAChB,aAAA,EAAe,CAAA,OAAA,EAAU,MAAA,CAAO,QAAQ,CAAA;AAAA,KAC5C;AAAA,IACA,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,IAAI;AAAA,GAC5B,CAAA;AACD,EAAA,IAAI,CAAC,EAAE,EAAA,EAAI;AACP,IAAA,IAAI,MAAA,GAAS,CAAA,KAAA,EAAQ,CAAA,CAAE,MAAM,CAAA,CAAA;AAC7B,IAAA,IAAI;AACA,MAAA,MAAMA,EAAAA,GAAK,MAAM,CAAA,CAAE,IAAA,EAAK;AACxB,MAAA,IAAIA,EAAAA,CAAE,MAAA,EAAQ,MAAA,GAASA,EAAAA,CAAE,MAAA;AAAA,IAC7B,CAAA,CAAA,MAAQ;AAAA,IAER;AACA,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,0BAAA,EAA6B,MAAM,CAAA,CAAE,CAAA;AAAA,EACzD;AACA,EAAA,MAAM,CAAA,GAAK,MAAM,CAAA,CAAE,IAAA,EAAK;AACxB,EAAA,OAAO,CAAA,CAAE,MAAA;AACb","file":"index.mjs","sourcesContent":["// @orangecheck/agent-vercel — wrap Vercel AI SDK `tool()` invocations in\n// OC Agent action envelopes.\n//\n// Provider-agnostic: the AI SDK is the abstraction layer. Whatever model\n// you use underneath (Anthropic, OpenAI, Cohere, …) the tool primitive is\n// the same {description, parameters, execute} shape. This adapter wraps\n// `execute` so every successful call produces a signed agent-action\n// envelope citing the active delegation.\n//\n// Two integration shapes:\n//\n//   1. ocTool({verb, parameters, execute})\n//      A drop-in replacement for `tool()`. The wrapped execute runs the\n//      scope check, signs the canonical (verb, args, callId) tuple,\n//      then runs your real handler.\n//\n//   2. stampToolCall(input)\n//      Lower-level stamping helper for cases where you have your own\n//      tool-execution loop and want to emit envelopes manually.\n//\n// The agent + delegation are passed via a per-request context object\n// (or threaded through closures) — we don't depend on AsyncLocalStorage\n// to keep edge-runtime compatibility maximal.\n\nimport { sha256 } from '@noble/hashes/sha256';\nimport {\n    assertScopeGranted,\n    canonicalize,\n    computeActionId,\n    hexEncode,\n    type DelegationEnvelope,\n} from '@orangecheck/agent-core';\nimport {\n    signAsAgent,\n    type ActionEnvelope,\n    type SignerRef,\n} from '@orangecheck/agent-signer';\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Canonicalization of a tool call\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport interface VercelToolCall {\n    /** Unique id assigned by the AI SDK for this tool invocation. */\n    callId: string;\n    /** Tool verb / name — passed in via ocTool() or set per-call by your wrapper. */\n    verb: string;\n    /** JSON-serializable arguments produced by the model. */\n    args: Record<string, unknown>;\n}\n\n/**\n * Produce the canonical bytes for a Vercel AI SDK tool call.\n *\n * Shape (RFC 8785 canonical JSON, then trailing LF):\n *   {\n *     \"args\":    <canonical JSON of args>,\n *     \"call_id\": <callId>,\n *     \"verb\":    <verb>\n *   }\n */\nexport function canonicalizeToolCall(c: VercelToolCall): Uint8Array {\n    const canon = {\n        args: c.args,\n        call_id: c.callId,\n        verb: c.verb,\n    };\n    const str = canonicalize(canon as unknown as Parameters<typeof canonicalize>[0]);\n    return new TextEncoder().encode(str + '\\n');\n}\n\nexport function toolCallHash(c: VercelToolCall): string {\n    return 'sha256:' + hexEncode(sha256(canonicalizeToolCall(c)));\n}\n\nexport function toolCallActionId(\n    agentAddress: string,\n    signedAt: string,\n    delegationId: string,\n    scopeExercised: string,\n    c: VercelToolCall\n): string {\n    return computeActionId({\n        address: agentAddress,\n        content_hash: toolCallHash(c),\n        content_length: canonicalizeToolCall(c).byteLength,\n        content_mime: 'application/vnd.oc-agent.vercel-tool-call+json',\n        signed_at: signedAt,\n        delegation_id: delegationId,\n        scope_exercised: scopeExercised,\n    });\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Stamping primitive\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport interface AgentContext {\n    agent: SignerRef;\n    delegation: DelegationEnvelope;\n}\n\nexport interface StampToolCallInput extends AgentContext {\n    call: VercelToolCall;\n    /** Defaults to `vercel:tool(verb=<verb>)` — the tightest admissible sub-scope. */\n    scopeExercised?: string;\n    signedAt?: Date;\n}\n\nexport async function stampToolCall(input: StampToolCallInput): Promise<ActionEnvelope> {\n    const scopeExercised =\n        input.scopeExercised ?? `vercel:tool(verb=${input.call.verb})`;\n\n    assertScopeGranted(input.delegation, scopeExercised, 'stampToolCall');\n\n    const bytes = canonicalizeToolCall(input.call);\n    return signAsAgent({\n        agent: input.agent,\n        delegation: input.delegation as never,\n        content: { hash: toolCallHash(input.call), length: bytes.byteLength },\n        mime: 'application/vnd.oc-agent.vercel-tool-call+json',\n        scopeExercised,\n        signedAt: input.signedAt,\n    });\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// ocTool — drop-in tool() replacement\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport interface OcToolInput<TArgs extends Record<string, unknown>, TResult> {\n    /** OC Agent verb under which this tool is exercised. */\n    verb: string;\n    /** Pass-through to AI SDK's `tool()` — the JSON Schema for inputs. */\n    parameters?: unknown;\n    /** Pass-through description shown to the model. */\n    description?: string;\n    /** Your real handler. Returns whatever the tool returns. */\n    execute: (args: TArgs) => Promise<TResult>;\n}\n\nexport interface OcToolWrapped<TArgs extends Record<string, unknown>, TResult> {\n    verb: string;\n    parameters?: unknown;\n    description?: string;\n    /**\n     * The execute fn the AI SDK calls. Receives args + a callId (the AI\n     * SDK passes its own callId through — adapter glue passes it via\n     * context). Optional `fleet` field on the context tells the\n     * wrapper to fire-and-forget POST the stamped action to fleet.\n     * ochk.io/api/actions after the underlying execute() returns.\n     */\n    execute: (\n        args: TArgs,\n        ctx: AgentContext & { callId: string; fleet?: FleetClient }\n    ) => Promise<{\n        result: TResult;\n        action: ActionEnvelope;\n        posted: PostActionResult | null;\n    }>;\n}\n\n/**\n * Wrap a tool() definition so its execute path is scope-checked and\n * envelope-emitting. The exact glue depends on which AI-SDK release you're\n * on — the typical pattern is:\n *\n *   const tools = {\n *     'invoice.create': tool({\n *       description: '…',\n *       parameters:  schema,\n *       execute:     async (args, { toolCallId }) => {\n *         const { result, action } = await invoiceCreate.execute(args, {\n *           agent, delegation, callId: toolCallId,\n *         });\n *         await yourAuditPipeline.append(action);\n *         return result;\n *       },\n *     }),\n *   };\n *\n *   const invoiceCreate = ocTool({\n *     verb: 'invoice.create',\n *     parameters: schema,\n *     execute: async (args) => myInvoiceCreateImpl(args),\n *   });\n *\n * The `ocTool` value is provider/SDK-agnostic — bring your own glue around\n * it. v1 of the adapter intentionally does not import `ai` so it works on\n * any release.\n */\nexport function ocTool<TArgs extends Record<string, unknown>, TResult>(\n    input: OcToolInput<TArgs, TResult>\n): OcToolWrapped<TArgs, TResult> {\n    return {\n        verb: input.verb,\n        parameters: input.parameters,\n        description: input.description,\n        execute: async (args, ctx) => {\n            const call: VercelToolCall = {\n                callId: ctx.callId,\n                verb: input.verb,\n                args,\n            };\n            const action = await stampToolCall({\n                agent: ctx.agent,\n                delegation: ctx.delegation,\n                call,\n            });\n            const result = await input.execute(args);\n            let posted: PostActionResult | null = null;\n            if (ctx.fleet) {\n                try {\n                    posted = await postActionToFleet(action, ctx.fleet);\n                } catch (err) {\n                    // eslint-disable-next-line no-console\n                    console.error('[oc-agent-vercel] postActionToFleet failed:', err);\n                }\n            }\n            return { result, action, posted };\n        },\n    };\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Fleet integration: POST stamped actions to fleet.ochk.io/api/actions\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport interface FleetClient {\n    /** Defaults to https://fleet.ochk.io. */\n    baseUrl?: string;\n    /** Bearer token from /settings § 03 (`ock_<hex>`). */\n    apiToken: string;\n    /** Project the action belongs to (proj_*). */\n    projectId: string;\n    /** Optional fetch override for runtimes that need it. */\n    fetch?: typeof fetch;\n}\n\nexport interface PostActionResult {\n    id: string;\n    project_id: string;\n    delegation_id: string;\n}\n\n/**\n * POST a stamped action envelope to fleet.ochk.io/api/actions. The\n * fleet re-derives the action id, validates agent-must-match-\n * delegation, persists, fans out to Nostr (kind 30084), submits to\n * OC Stamp, and triggers any subscribed webhooks. Throws on non-2xx\n * with the server's reason string.\n */\nexport async function postActionToFleet(\n    action: ActionEnvelope,\n    client: FleetClient\n): Promise<PostActionResult> {\n    const baseUrl = client.baseUrl ?? 'https://fleet.ochk.io';\n    const f = client.fetch ?? fetch;\n    const body = {\n        project_id: client.projectId,\n        delegation_id: action.delegation_id,\n        agent_address: action.signer.address,\n        scope_exercised: action.scope_exercised,\n        content_hash: action.content.hash,\n        content_length: action.content.length,\n        content_mime: action.content.mime,\n        signed_at: action.signed_at,\n        signature: action.sig.value,\n        id: action.id,\n    };\n    const r = await f(`${baseUrl}/api/actions`, {\n        method: 'POST',\n        headers: {\n            'Content-Type': 'application/json',\n            Authorization: `Bearer ${client.apiToken}`,\n        },\n        body: JSON.stringify(body),\n    });\n    if (!r.ok) {\n        let reason = `http_${r.status}`;\n        try {\n            const j = (await r.json()) as { reason?: string };\n            if (j.reason) reason = j.reason;\n        } catch {\n            // body wasn't json\n        }\n        throw new Error(`postActionToFleet failed: ${reason}`);\n    }\n    const j = (await r.json()) as { ok: true; action: PostActionResult };\n    return j.action;\n}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@orangecheck/agent-vercel",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "description": "Wrap Vercel AI SDK tool() invocations with OC Agent scope enforcement and emit a signed agent-action envelope per tool execution. Provider-agnostic — works under Anthropic, OpenAI, Cohere, etc.",
   "keywords": [
     "bitcoin",
@@ -51,8 +51,8 @@
   },
   "dependencies": {
     "@noble/hashes": "^1.5.0",
-    "@orangecheck/agent-core": "^0.3.0",
-    "@orangecheck/agent-signer": "^0.1.0"
+    "@orangecheck/agent-core": "^1.2.0",
+    "@orangecheck/agent-signer": "^0.3.0"
   },
   "devDependencies": {
     "@types/node": "^22.10.2",

package/src/index.ts

@@ -24,11 +24,10 @@
 
 import { sha256 } from '@noble/hashes/sha256';
 import {
+    assertScopeGranted,
     canonicalize,
     computeActionId,
     hexEncode,
-    isSubScope,
-    parseScope,
     type DelegationEnvelope,
 } from '@orangecheck/agent-core';
 import {
@@ -112,13 +111,7 @@ export async function stampToolCall(input: StampToolCallInput): Promise<ActionEn
     const scopeExercised =
         input.scopeExercised ?? `vercel:tool(verb=${input.call.verb})`;
 
-    const granted = (input.delegation.scopes ?? []).map(parseScope);
-    const exercisedParsed = parseScope(scopeExercised);
-    if (!granted.some((g) => isSubScope(exercisedParsed, g))) {
-        throw new Error(
-            `stampToolCall: scope_exercised (${scopeExercised}) is not a sub-scope of any granted scope`
-        );
-    }
+    assertScopeGranted(input.delegation, scopeExercised, 'stampToolCall');
 
     const bytes = canonicalizeToolCall(input.call);
     return signAsAgent({

package/src/scope-preflight.test.ts

@@ -0,0 +1,55 @@
+import { describe, expect, it } from 'vitest';
+
+import { ScopeNotGrantedError } from '@orangecheck/agent-core';
+
+import { stampToolCall } from './index.js';
+
+const AGENT = 'bc1qagent0000000000000000000000000000000000';
+const sign = () => async (msg: string) => Buffer.from(msg, 'utf8').toString('base64');
+
+const SEALED = {
+    v: 1,
+    alg: 'x25519-xchacha20poly1305',
+    recipients: [{ device_id: 'dev1', ct: 'AA' }],
+    ct: 'BB',
+    nonce: 'CC',
+} as never;
+
+/**
+ * This adapter used to open-code the pre-flight scope check. It now routes to
+ * agent-core's `assertScopeGranted`, and these assert the routing rather than
+ * the check — agent-core owns testing the check itself.
+ *
+ * The case that matters is the encrypted one: a v1.2 private delegation has no
+ * readable `scopes`, and the old `?? []` reported that as "not a sub-scope of
+ * any granted scope" — pointing the integrator at a scope string that was
+ * probably fine, when the actual need was to decrypt the grant.
+ */
+describe('stampToolCall scope pre-flight', () => {
+    const base = {
+        agent: { address: AGENT, sign: sign() },
+        toolCall: { toolCallId: 't1', toolName: 'search', args: { q: 'x' } },
+    } as never;
+
+    it('names encrypted scopes rather than blaming the scope string', async () => {
+        const err = await stampToolCall({
+            ...(base as object),
+            delegation: { scopes_encrypted: SEALED },
+            scopeExercised: 'vercel:tool(name=search)',
+        } as never).catch((e: unknown) => e);
+
+        expect(err).toBeInstanceOf(ScopeNotGrantedError);
+        expect((err as ScopeNotGrantedError).reason).toBe('scopes_encrypted');
+        expect((err as Error).message).toMatch(/decryptPrivateScopes/);
+    });
+
+    it('treats an absent grant as granting nothing', async () => {
+        const err = await stampToolCall({
+            ...(base as object),
+            delegation: {},
+            scopeExercised: 'vercel:tool(name=search)',
+        } as never).catch((e: unknown) => e);
+
+        expect((err as ScopeNotGrantedError).reason).toBe('no_scopes');
+    });
+});