attenu-guard 0.3.0 → 0.4.0

package/CHANGELOG.md

@@ -6,6 +6,68 @@ follows [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 ## [Unreleased]
 
+## [0.4.0] — 2026-08-31
+
+### Added
+- **Execution binding**, opt-in per chain via `Guard.issue(agentId, authority, {schemaVersion: 2})`
+  (schema version 1 is unchanged and remains the default): `check`/`recordDenial` now allocate a
+  `callId` (fail-closed, with meters restored, if `crypto.randomBytes` throws) and return it on
+  `Decision.callId`; `check` gains `authorizedParams`/`capture`/`adapter` options and refuses
+  further calls once the node is `complete()`d (`ReasonCode.NODE_FINALIZED`).
+  `Guard.recordOutcome(callId, bodyState, options)` binds what a body-owning wrapper observed
+  afterwards — `returned`/`raised`/`abandoned`/`deferred`, with `errorCode` required exactly when
+  raised. `complete()` returns a plain `boolean` on a `schemaVersion: 1` chain (byte-and-type
+  unchanged from every prior release) and a `CompletionResult` on `schemaVersion: 2` only — see
+  its doc comment for the JavaScript limits of its truthiness bridge, since unlike Python's
+  `__bool__`, `if (guard.complete())` cannot be made to read `false` there — and refuses on v2
+  while calls are pending; `revoke`/`revokeAgent` snapshot still-pending callIds onto the `kill`
+  entry as `pending_at_kill` without clearing them, so a late `recordOutcome` after a kill is
+  still accepted. `check`/`recordOutcome` roll back meters and re-throw on ANY pre-commit failure
+  (not only a `crypto.randomBytes` failure), and `recordOutcome` marks a call outcomed only after
+  its append actually commits, so a pre-commit failure leaves the call retryable. `Guard.issue`
+  refuses `{schemaVersion: 2, auditOverwrite: true}` — the restart rule has no escape hatch on v2.
+  Arguments are committed via `params_c14n_v1` (`params.ts`): `SHA-256(rawSalt || JCS(params))`,
+  never the raw value; validated against the language-neutral vector file also published for
+  Python (`test/fixtures/params_c14n_v1.json`). `verifyBundle` gains `execution_binding`: per-call
+  observed/unobserved/unaccounted (an outcome must be bound correctly — right node, right order —
+  to count as observed), per-node finalized/in_progress/revoked/revoked_with_pending, an aggregate
+  clean/incomplete/failed, and `params_coverage` (computed over every valid allow) as its own axis
+  — `{status: "not applicable"}` for a schema-version-1 bundle. `verifyBundle` also gains
+  `root_version_mismatch`/`mixed_entry_versions` checks (a chain is created at one schema version
+  and never mixes), requires exactly one root event (`checks.root`), does strict, null-aware,
+  type-checked schema validation on every conditional field (`capture`/`adapter` are now
+  REQUIRED, not merely paired, on every v2 allow — a bare `check()` with no `capture` supplied
+  gets a truthful guard-attributed `pre_hook_only` default rather than leaving the ledger silent;
+  any allow-only field on a `deny`, or any v2-only field on a `schemaVersion: 1` entry
+  — `v2_field_on_v1` — is invalid), and accepts an optional `expectedAnchor`/`expectedHead` to
+  verify against an independently retained reference point instead of only the bundle's own
+  enclosed anchor. `AuditLog` gains `CommittedAuditError` (a
+  post-commit persistence failure after the entry is already in the in-memory chain) and
+  overwrite protection (constructing over a `path` that already names a non-empty ledger now
+  throws unless `overwrite: true`). The LangGraph adapter (`adapters/langgraph`) is the reference
+  wiring: `guardNode`/`guardTool` snapshot a call's arguments once, immutably, before invocation
+  and call `recordOutcome` on a `schemaVersion: 2` guard, sync and async, reporting a
+  generator/promise-like result as `deferred` and an `AbortController`-driven cancellation as
+  `abandoned`; wrapping an async callable on a `schemaVersion: 1` guard stays byte-and-type
+  unchanged (never itself becomes an async function). Mirrors attenu-guard (Python) 0.9.0's
+  execution-binding layer plus its post-review merge-gate hardening, byte-for-byte on every
+  reason-code string; ported test suite: `test/execution-binding.test.ts` (82 cases),
+  `test/params-c14n-vectors.test.ts` (the shared parity vectors), plus adapter and evidence
+  coverage in `test/adapter-langgraph.test.ts`/`test/evidence.test.ts`.
+
+## [0.3.1] — 2026-08-30
+
+### Fixed
+- Integers beyond the RFC 8785 safe range (±(2**53-1)) are now rejected — at canonicalization, at
+  `RowLimit`/`SpendCap`/`CallLimit` construction, and by `load` (as `malformed`) — instead of
+  silently colliding with a neighbouring integer once serialized as a double. The interop suite
+  will show 20 vectors, and `valid_jcs_big_integer`/`valid_jcs_exponent_form` will pin different
+  values, once the Python package ships them; until then the affected interop assertions are a
+  known, expected failure (see the README note on `npm run fixtures`).
+- `verifyBundle` and `AuditLog.verifyAnchor` now check the bundle/anchor schema version and chain
+  identity instead of ignoring them, so a bundle for the wrong version or the wrong chain no
+  longer verifies.
+
 ## [0.3.0] — 2026-08-29
 
 ### Changed

package/README.md

@@ -66,6 +66,12 @@ run; the anchor is reported as `not checked`, and `ok` then means *consistent*
 rather than *verified* — a consistent full rewrite by someone holding the signing
 key cannot be excluded without the key.
 
+> **Want to try this before wiring it in?** The repo ships a sample: from a clone,
+> `npx attenu-guard@latest verify test/fixtures/clean_ed25519.bundle.json --pubkey d75a980182b10ab7d54bfed3c964073a0ee172f3daa62325af021a68f707511a`
+> prints the same `anchor=verified` / `OK` result shown above. For the three-bundle
+> version — clean, tampered, widened, each a different kind of failure — see the
+> [Python library's walkthrough](https://github.com/attenu-io/attenu-guard/blob/main/examples/verify/README.md).
+
 ## Guard a delegation chain
 
 ```ts
@@ -159,7 +165,7 @@ ledger, and one bundle per tamper mode with the report Python produces for each.
 The suite reproduces all of it, and a separate test writes a ledger and bundle
 here and has the Python CLI verify them, so both directions are covered.
 
-Version 0.2 uses [RFC 8785 JCS](https://www.rfc-editor.org/rfc/rfc8785) for every
+Versions 0.2 and later use [RFC 8785 JCS](https://www.rfc-editor.org/rfc/rfc8785) for every
 signed or hashed JSON surface: Delegation Tokens, ledger entries, anchors and
 evidence bundles. Tokens, ledger entries, anchors and bundles emit
 `"c14n":"JCS"` as an informational label. Verifiers enforce JCS from canonical
@@ -168,7 +174,7 @@ numbers, lone UTF-16 surrogates and non-canonical spellings are rejected instead
 of being normalized after verification.
 
 This is the only supported format. There is no 0.1 compatibility reader or
-dual-signing mode. The 17 committed interop vectors include the separating cases
+dual-signing mode. The 19 committed interop vectors include the separating cases
 for number spelling, raw Unicode, UTF-16 member ordering, large integers,
 duplicates, non-finite values and an unmarked canonical header.
 

package/dist/cjs/adapters/langgraph.d.ts

@@ -35,6 +35,22 @@
  * this adapter does not prescribe which. It guarantees only that the tool body
  * never executes on a denial.
  *
+ * ## Execution binding (0.9.0, reference wiring for this adapter)
+ *
+ * When `guard`'s chain was issued with `schemaVersion: 2` (see `Guard.issue`), `guardNode` also
+ * passes `capture`/`adapter`/`authorizedParams` to `check` and calls `guard.recordOutcome` once
+ * the wrapped callable finishes — `Capture.WRAPPER_ASYNC` when `fn` is a genuine `async function`
+ * (`fn.constructor.name === "AsyncFunction"`, the same test Python's `inspect.iscoroutinefunction`
+ * makes), `Capture.WRAPPER_SYNC` otherwise. `authorizedParams`/`invokedParams` are
+ * `{args: [...]}` built from exactly what the wrapped callable is called with — JavaScript has no
+ * separate `kwargs`, so unlike the Python adapter's `{args, kwargs}` this carries only `args`; a
+ * LangGraph.js node in any case receives one state object, not Python's `(*args, **kwargs)`. They
+ * are unchanged between the two observations here, since this decorator itself never mutates
+ * them; a framework that DOES mutate arguments between authorization and invocation is where a
+ * real substitution would become visible. On a `schemaVersion: 1` chain (the default), this
+ * adapter behaves exactly as it did before 0.9.0: no `capture`/`authorizedParams`, no
+ * `recordOutcome` call. Every other framework adapter is unchanged in this release.
+ *
  * ## Delegation
  *
  * Handing work to a sub-agent is the delegation moment. `delegateTo` mints the
@@ -52,7 +68,7 @@
 import { type Guard } from "../guard.js";
 import type { Authority } from "../authority.js";
 import type { Context } from "../ceilings.js";
-import type { Decision } from "../reasons.js";
+import { type Decision } from "../reasons.js";
 /** Options shared by every guarded wrapper. */
 export interface GuardOptions {
     /**
@@ -81,7 +97,9 @@ export type GuardedNode<F extends (...args: any[]) => any> = F & {
  * `guard.check(toolScope, {context, tool})`. On a denial this throws
  * `AuthorityDenied` and the wrapped callable is NEVER invoked. Otherwise it
  * calls through with the original arguments and returns the result unchanged —
- * including a promise, which is passed along untouched.
+ * including a promise, which is passed along untouched. On a `schemaVersion: 2`
+ * guard, also binds the call's outcome via `guard.recordOutcome` — see the
+ * module doc comment's "Execution binding" section.
  *
  * Use the Guard for the SPECIFIC agent this callable belongs to, not the
  * orchestrator's broader one, so a denial reflects that node's real, narrowed
@@ -125,7 +143,13 @@ export interface GuardToolOptions extends GuardOptions {
  * The context function receives the raw invoke arguments. `ToolNode` passes a
  * tool call object, so the arguments the model proposed are at `input.args`;
  * a direct `tool.invoke({...})` passes them at the top level. `toolArgs` below
- * reads either shape.
+ * reads either shape — and, on a `schemaVersion: 2` guard, feeds a single
+ * IMMUTABLE snapshot taken BEFORE `tool.invoke` runs, reused for both
+ * `authorizedParams` and `invokedParams`: this adapter's closest analogue of "the
+ * exact tool-call JSON object" the execution-binding spec names (see the module
+ * doc comment's "Execution binding" section; this is the one construct in this
+ * adapter that wraps a tool BODY, so it is the reference wiring for
+ * `recordOutcome`, mirroring `guardNode` above).
  */
 export declare function guardTool<T extends ToolLike>(guard: Guard, tool: T, options?: GuardToolOptions): T;
 /** Marker properties, so a caller can tell a guarded tool from a bare one. */

package/dist/cjs/adapters/langgraph.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"langgraph.d.ts","sourceRoot":"","sources":["../../../src/adapters/langgraph.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkDG;AAEH,OAAO,EAAmB,KAAK,KAAK,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAE9C,+CAA+C;AAC/C,MAAM,WAAW,YAAY;IAC3B;;;;OAIG;IACH,SAAS,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,OAAO,CAAC;IACxC,gFAAgF;IAChF,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,kEAAkE;IAClE,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,sDAAsD;IACtD,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,8EAA8E;AAC9E,MAAM,MAAM,WAAW,CAAC,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,IAAI,CAAC,GAAG;IAC/D,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC;CACvB,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,wBAAgB,SAAS,CAAC,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,EACzD,KAAK,EAAE,KAAK,EACZ,SAAS,EAAE,MAAM,EACjB,EAAE,EAAE,CAAC,EACL,OAAO,GAAE,YAAiB,GACzB,WAAW,CAAC,CAAC,CAAC,CAsBhB;AAED,6EAA6E;AAC7E,MAAM,WAAW,SAAS;IACxB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC;CACjF;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,EAC9D,KAAK,EAAE,SAAS,EAChB,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,KAAK,EACZ,SAAS,EAAE,MAAM,EACjB,EAAE,EAAE,CAAC,EACL,OAAO,GAAE,YAAiB,GACzB,WAAW,CAAC,CAAC,CAAC,CAIhB;AAED,uEAAuE;AACvE,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,GAAG,GAAG,GAAG,CAAC;IACtC,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;CACpB;AAED,MAAM,WAAW,gBAAiB,SAAQ,YAAY;IACpD,kEAAkE;IAClE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,KAAK,GAAG,CAAC;CACpD;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,SAAS,CAAC,CAAC,SAAS,QAAQ,EAC1C,KAAK,EAAE,KAAK,EACZ,IAAI,EAAE,CAAC,EACP,OAAO,GAAE,gBAAqB,GAC7B,CAAC,CA4BH;AAED,8EAA8E;AAC9E,eAAO,MAAM,YAAY,kBAAkB,CAAC;AAC5C,eAAO,MAAM,YAAY,kBAAkB,CAAC;AAE5C,MAAM,WAAW,iBAAkB,SAAQ,YAAY;IACrD,wEAAwE;IACxE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,wEAAwE;IACxE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,GAAG,KAAK,OAAO,CAAC,CAAC;IACjE,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,KAAK,GAAG,CAAC;CACpD;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,CAAC,SAAS,QAAQ,EAC3C,KAAK,EAAE,KAAK,EACZ,KAAK,EAAE,SAAS,CAAC,EAAE,EACnB,OAAO,GAAE,iBAAsB,GAC9B,CAAC,EAAE,CAUL;AAED;;;;GAIG;AACH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,GAAG,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAMxD;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,SAAS,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;;;;;;GASG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,eAAe,GAAG,KAAK,CAEzE;AAED;;;;GAIG;AACH,wBAAsB,oBAAoB,IAAI,OAAO,CAAC,OAAO,CAAC,CAQ7D"}
+{"version":3,"file":"langgraph.d.ts","sourceRoot":"","sources":["../../../src/adapters/langgraph.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkEG;AAEH,OAAO,EAAqC,KAAK,KAAK,EAAE,MAAM,aAAa,CAAC;AAC5E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEjD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAsB,KAAK,QAAQ,EAAE,MAAM,eAAe,CAAC;AAGlE,+CAA+C;AAC/C,MAAM,WAAW,YAAY;IAC3B;;;;OAIG;IACH,SAAS,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,OAAO,CAAC;IACxC,gFAAgF;IAChF,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,kEAAkE;IAClE,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,sDAAsD;IACtD,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,8EAA8E;AAC9E,MAAM,MAAM,WAAW,CAAC,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,IAAI,CAAC,GAAG;IAC/D,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC;CACvB,CAAC;AAgEF;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,SAAS,CAAC,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,EACzD,KAAK,EAAE,KAAK,EACZ,SAAS,EAAE,MAAM,EACjB,EAAE,EAAE,CAAC,EACL,OAAO,GAAE,YAAiB,GACzB,WAAW,CAAC,CAAC,CAAC,CAsGhB;AAED,6EAA6E;AAC7E,MAAM,WAAW,SAAS;IACxB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC;CACjF;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,EAC9D,KAAK,EAAE,SAAS,EAChB,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,KAAK,EACZ,SAAS,EAAE,MAAM,EACjB,EAAE,EAAE,CAAC,EACL,OAAO,GAAE,YAAiB,GACzB,WAAW,CAAC,CAAC,CAAC,CAIhB;AAED,uEAAuE;AACvE,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,GAAG,GAAG,GAAG,CAAC;IACtC,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;CACpB;AAED,MAAM,WAAW,gBAAiB,SAAQ,YAAY;IACpD,kEAAkE;IAClE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,KAAK,GAAG,CAAC;CACpD;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,SAAS,CAAC,CAAC,SAAS,QAAQ,EAC1C,KAAK,EAAE,KAAK,EACZ,IAAI,EAAE,CAAC,EACP,OAAO,GAAE,gBAAqB,GAC7B,CAAC,CAkIH;AAED,8EAA8E;AAC9E,eAAO,MAAM,YAAY,kBAAkB,CAAC;AAC5C,eAAO,MAAM,YAAY,kBAAkB,CAAC;AAE5C,MAAM,WAAW,iBAAkB,SAAQ,YAAY;IACrD,wEAAwE;IACxE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,wEAAwE;IACxE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,GAAG,KAAK,OAAO,CAAC,CAAC;IACjE,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,KAAK,GAAG,CAAC;CACpD;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,CAAC,SAAS,QAAQ,EAC3C,KAAK,EAAE,KAAK,EACZ,KAAK,EAAE,SAAS,CAAC,EAAE,EACnB,OAAO,GAAE,iBAAsB,GAC9B,CAAC,EAAE,CAUL;AAED;;;;GAIG;AACH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,GAAG,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAMxD;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,SAAS,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;;;;;;GASG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,eAAe,GAAG,KAAK,CAEzE;AAED;;;;GAIG;AACH,wBAAsB,oBAAoB,IAAI,OAAO,CAAC,OAAO,CAAC,CAQ7D"}

package/dist/cjs/adapters/langgraph.js

@@ -36,6 +36,22 @@
  * this adapter does not prescribe which. It guarantees only that the tool body
  * never executes on a denial.
  *
+ * ## Execution binding (0.9.0, reference wiring for this adapter)
+ *
+ * When `guard`'s chain was issued with `schemaVersion: 2` (see `Guard.issue`), `guardNode` also
+ * passes `capture`/`adapter`/`authorizedParams` to `check` and calls `guard.recordOutcome` once
+ * the wrapped callable finishes — `Capture.WRAPPER_ASYNC` when `fn` is a genuine `async function`
+ * (`fn.constructor.name === "AsyncFunction"`, the same test Python's `inspect.iscoroutinefunction`
+ * makes), `Capture.WRAPPER_SYNC` otherwise. `authorizedParams`/`invokedParams` are
+ * `{args: [...]}` built from exactly what the wrapped callable is called with — JavaScript has no
+ * separate `kwargs`, so unlike the Python adapter's `{args, kwargs}` this carries only `args`; a
+ * LangGraph.js node in any case receives one state object, not Python's `(*args, **kwargs)`. They
+ * are unchanged between the two observations here, since this decorator itself never mutates
+ * them; a framework that DOES mutate arguments between authorization and invocation is where a
+ * real substitution would become visible. On a `schemaVersion: 1` chain (the default), this
+ * adapter behaves exactly as it did before 0.9.0: no `capture`/`authorizedParams`, no
+ * `recordOutcome` call. Every other framework adapter is unchanged in this release.
+ *
  * ## Delegation
  *
  * Handing work to a sub-agent is the delegation moment. `delegateTo` mints the
@@ -93,6 +109,71 @@ exports.toolArgs = toolArgs;
 exports.delegateTo = delegateTo;
 exports.isLangGraphAvailable = isLangGraphAvailable;
 const guard_js_1 = require("../guard.js");
+const reasons_js_1 = require("../reasons.js");
+const version_js_1 = require("../version.js");
+/**
+ * An IMMUTABLE snapshot of the call's arguments, taken BEFORE the wrapped callable runs and
+ * reused for BOTH `authorizedParams` (`check`) and `invokedParams` (`recordOutcome`) — so a
+ * callable that mutates its own inputs in place cannot make this adapter observe two different
+ * values for what was actually one call's arguments (see the module doc comment's "Execution
+ * binding" section; no `kwargs` — JavaScript has no separate keyword-argument bag).
+ */
+function snapshotParams(args) {
+    const raw = { args: [...args] };
+    try {
+        return structuredClone(raw);
+    }
+    catch {
+        // Best-effort: something in here isn't structured-cloneable (a live socket, a function, ...).
+        // Fall back to the shallow copy — a residual risk only if THAT specific object is later
+        // mutated in place, a rare edge case documented here rather than silently claimed away.
+        return raw;
+    }
+}
+/**
+ * `true` if `result` is a generator/async-generator/promise-like value whose consumption this
+ * wrapper does not itself observe — spec's `deferred`: "the record covers the call, not the
+ * eventual exhaustion." A promise counts too (the closest JavaScript analogue of Python's
+ * `asyncio.Future`/`concurrent.futures.Future`): the async branch here already `await`s `fn`
+ * itself, so a bare promise surfacing as `result` there means `fn` returned ANOTHER promise
+ * without awaiting it, which is exactly the same "not actually consumed" situation.
+ */
+function isDeferredResult(result) {
+    if (result === null || typeof result !== "object")
+        return false;
+    const r = result;
+    if (typeof r["next"] === "function" && typeof r[Symbol.iterator] === "function")
+        return true;
+    if (typeof r["next"] === "function" && typeof r[Symbol.asyncIterator] === "function")
+        return true;
+    if (typeof r["then"] === "function")
+        return true;
+    return false;
+}
+function bodyStateFor(result) {
+    return isDeferredResult(result) ? reasons_js_1.BodyState.DEFERRED : reasons_js_1.BodyState.RETURNED;
+}
+/**
+ * `true` for the JavaScript analogue of Python's `asyncio.CancelledError`: an `AbortController`/
+ * `AbortSignal`-driven abort, surfaced as a `DOMException`/`Error` named `"AbortError"` — the
+ * standard shape Node and the Fetch/Web platform both use. There is no single universal async
+ * cancellation exception type in JavaScript the way `asyncio.CancelledError` is in Python, so this
+ * is the best-grounded, most widely applicable translation rather than a exact 1:1 port.
+ */
+function isAbortError(exc) {
+    return exc instanceof Error && exc.name === "AbortError";
+}
+/** The class/constructor name of a thrown value — JavaScript's nearest analogue of Python's `type(exc).__name__`. */
+function errorCodeOf(exc) {
+    if (exc instanceof Error)
+        return exc.constructor.name || "Error";
+    if (exc === null)
+        return "null";
+    return typeof exc === "object" ? "object" : typeof exc;
+}
+function elapsedMs(start) {
+    return Math.round(performance.now() - start);
+}
 /**
  * Wrap a callable so every call is authorized through `guard` first.
  *
@@ -100,7 +181,9 @@ const guard_js_1 = require("../guard.js");
  * `guard.check(toolScope, {context, tool})`. On a denial this throws
  * `AuthorityDenied` and the wrapped callable is NEVER invoked. Otherwise it
  * calls through with the original arguments and returns the result unchanged —
- * including a promise, which is passed along untouched.
+ * including a promise, which is passed along untouched. On a `schemaVersion: 2`
+ * guard, also binds the call's outcome via `guard.recordOutcome` — see the
+ * module doc comment's "Execution binding" section.
  *
  * Use the Guard for the SPECIFIC agent this callable belongs to, not the
  * orchestrator's broader one, so a denial reflects that node's real, narrowed
@@ -108,18 +191,102 @@ const guard_js_1 = require("../guard.js");
  */
 function guardNode(guard, toolScope, fn, options = {}) {
     const resolvedTool = options.tool !== undefined ? options.tool : (fn.name || null);
-    const wrapped = function (...args) {
+    const isAsyncFn = fn.constructor.name === "AsyncFunction";
+    // guard.schemaVersion never changes for a guard's lifetime, so it is safe (and correct: a
+    // wrapper's sync-vs-async SHAPE must be fixed at definition time, not per-call) to decide it
+    // once, here, at decoration time.
+    const v2 = guard.schemaVersion === 2;
+    const capture = isAsyncFn ? reasons_js_1.Capture.WRAPPER_ASYNC : reasons_js_1.Capture.WRAPPER_SYNC;
+    const adapterInfo = {
+        module: "attenu-guard/adapters/langgraph",
+        version: version_js_1.VERSION,
+        hookPath: `guardNode:${fn.name || toolScope}`,
+    };
+    function authorize(args, snapshot) {
         const context = options.contextFn ? options.contextFn(...args) : {};
+        const extra = v2 ? { capture, adapter: adapterInfo, authorizedParams: snapshot ?? undefined } : {};
         const decision = guard.check(toolScope, {
             context,
             tool: resolvedTool,
             disposition: options.disposition ?? null,
             metered: options.metered ?? false,
+            ...extra,
         });
         if (!decision.allowed)
             throw new guard_js_1.AuthorityDenied(decision);
-        return fn.apply(this, args);
-    };
+        return decision;
+    }
+    let wrapped;
+    if (isAsyncFn && v2) {
+        wrapped = (async function (...args) {
+            const snapshot = snapshotParams(args);
+            const decision = authorize(args, snapshot);
+            const start = performance.now();
+            try {
+                const result = await fn.apply(this, args);
+                guard.recordOutcome(decision.callId, bodyStateFor(result), {
+                    invokedParams: snapshot,
+                    durationMs: elapsedMs(start),
+                });
+                return result;
+            }
+            catch (exc) {
+                // The wrapper stopped observing while the body may still run — exactly spec's
+                // `abandoned`, not `raised`. Still re-thrown: cancellation must propagate normally.
+                if (isAbortError(exc)) {
+                    guard.recordOutcome(decision.callId, reasons_js_1.BodyState.ABANDONED, {
+                        invokedParams: snapshot,
+                        durationMs: elapsedMs(start),
+                    });
+                }
+                else {
+                    guard.recordOutcome(decision.callId, reasons_js_1.BodyState.RAISED, {
+                        errorCode: errorCodeOf(exc),
+                        invokedParams: snapshot,
+                        durationMs: elapsedMs(start),
+                    });
+                }
+                throw exc;
+            }
+        });
+    }
+    else if (isAsyncFn) {
+        // v1 (schemaVersion: 1, the default): EXACTLY the pre-0.9.0 shape — a plain SYNC wrapper
+        // that authorizes, then returns fn(...args) UNAWAITED. The caller awaits the returned
+        // promise itself, as it always has; `wrapped` is never itself an async function on v1, even
+        // when `fn` is.
+        wrapped = (function (...args) {
+            authorize(args, null);
+            return fn.apply(this, args);
+        });
+    }
+    else {
+        wrapped = (function (...args) {
+            if (!v2) {
+                authorize(args, null);
+                return fn.apply(this, args);
+            }
+            const snapshot = snapshotParams(args);
+            const decision = authorize(args, snapshot);
+            const start = performance.now();
+            try {
+                const result = fn.apply(this, args);
+                guard.recordOutcome(decision.callId, bodyStateFor(result), {
+                    invokedParams: snapshot,
+                    durationMs: elapsedMs(start),
+                });
+                return result;
+            }
+            catch (exc) {
+                guard.recordOutcome(decision.callId, reasons_js_1.BodyState.RAISED, {
+                    errorCode: errorCodeOf(exc),
+                    invokedParams: snapshot,
+                    durationMs: elapsedMs(start),
+                });
+                throw exc;
+            }
+        });
+    }
     Object.defineProperties(wrapped, {
         name: { value: fn.name, configurable: true },
         guard: { value: guard, enumerable: true },
@@ -149,26 +316,138 @@ function addGuardedNode(graph, name, guard, toolScope, fn, options = {}) {
  * The context function receives the raw invoke arguments. `ToolNode` passes a
  * tool call object, so the arguments the model proposed are at `input.args`;
  * a direct `tool.invoke({...})` passes them at the top level. `toolArgs` below
- * reads either shape.
+ * reads either shape — and, on a `schemaVersion: 2` guard, feeds a single
+ * IMMUTABLE snapshot taken BEFORE `tool.invoke` runs, reused for both
+ * `authorizedParams` and `invokedParams`: this adapter's closest analogue of "the
+ * exact tool-call JSON object" the execution-binding spec names (see the module
+ * doc comment's "Execution binding" section; this is the one construct in this
+ * adapter that wraps a tool BODY, so it is the reference wiring for
+ * `recordOutcome`, mirroring `guardNode` above).
  */
 function guardTool(guard, tool, options = {}) {
     const scope = options.scope ?? tool.name;
     const label = options.tool !== undefined ? options.tool : tool.name;
-    const guardedInvoke = (input, config) => {
+    const isAsyncInvoke = tool.invoke.constructor.name === "AsyncFunction";
+    // guard.schemaVersion never changes for a guard's lifetime — decided once, at wrap time, same
+    // as guardNode.
+    const v2 = guard.schemaVersion === 2;
+    const capture = isAsyncInvoke ? reasons_js_1.Capture.WRAPPER_ASYNC : reasons_js_1.Capture.WRAPPER_SYNC;
+    const adapterInfo = {
+        module: "attenu-guard/adapters/langgraph",
+        version: version_js_1.VERSION,
+        hookPath: `guardTool:${tool.name}`,
+    };
+    function snapshotToolParams(input) {
+        const raw = toolArgs(input);
+        try {
+            return structuredClone(raw);
+        }
+        catch {
+            return raw;
+        }
+    }
+    function authorize(input, config, snapshot) {
         const context = options.contextFn ? options.contextFn(input, config) : {};
+        const extra = v2 ? { capture, adapter: adapterInfo, authorizedParams: snapshot ?? undefined } : {};
         const decision = guard.check(scope, {
             context,
             tool: label,
             disposition: options.disposition ?? null,
             metered: options.metered ?? false,
+            ...extra,
         });
-        if (!decision.allowed) {
-            if (options.onDenied)
-                return options.onDenied(decision, input);
+        if (!decision.allowed)
             throw new guard_js_1.AuthorityDenied(decision);
+        return decision;
+    }
+    /** `authorize`, but returns `{denied: ...}` instead of throwing when `onDenied` is set. */
+    function authorizeOrDenied(input, config, snapshot) {
+        try {
+            return { decision: authorize(input, config, snapshot) };
         }
-        return tool.invoke(input, config);
-    };
+        catch (exc) {
+            if (exc instanceof guard_js_1.AuthorityDenied && options.onDenied) {
+                return { denied: options.onDenied(exc.decision, input) };
+            }
+            throw exc;
+        }
+    }
+    let guardedInvoke;
+    if (isAsyncInvoke && v2) {
+        guardedInvoke = async (input, config) => {
+            const snapshot = snapshotToolParams(input);
+            const outcome = authorizeOrDenied(input, config, snapshot);
+            if ("denied" in outcome)
+                return outcome.denied;
+            const start = performance.now();
+            try {
+                const result = await tool.invoke(input, config);
+                guard.recordOutcome(outcome.decision.callId, bodyStateFor(result), {
+                    invokedParams: snapshot,
+                    durationMs: elapsedMs(start),
+                });
+                return result;
+            }
+            catch (exc) {
+                if (isAbortError(exc)) {
+                    guard.recordOutcome(outcome.decision.callId, reasons_js_1.BodyState.ABANDONED, {
+                        invokedParams: snapshot,
+                        durationMs: elapsedMs(start),
+                    });
+                }
+                else {
+                    guard.recordOutcome(outcome.decision.callId, reasons_js_1.BodyState.RAISED, {
+                        errorCode: errorCodeOf(exc),
+                        invokedParams: snapshot,
+                        durationMs: elapsedMs(start),
+                    });
+                }
+                throw exc;
+            }
+        };
+    }
+    else if (isAsyncInvoke) {
+        // v1: EXACTLY the pre-0.9.0 shape — a plain SYNC function that authorizes, then returns
+        // tool.invoke(...) UNAWAITED (the caller — typically ToolNode's own `await` — consumes the
+        // returned promise itself, as it always has).
+        guardedInvoke = (input, config) => {
+            const outcome = authorizeOrDenied(input, config, null);
+            if ("denied" in outcome)
+                return outcome.denied;
+            return tool.invoke(input, config);
+        };
+    }
+    else {
+        guardedInvoke = (input, config) => {
+            if (!v2) {
+                const outcome = authorizeOrDenied(input, config, null);
+                if ("denied" in outcome)
+                    return outcome.denied;
+                return tool.invoke(input, config);
+            }
+            const snapshot = snapshotToolParams(input);
+            const outcome = authorizeOrDenied(input, config, snapshot);
+            if ("denied" in outcome)
+                return outcome.denied;
+            const start = performance.now();
+            try {
+                const result = tool.invoke(input, config);
+                guard.recordOutcome(outcome.decision.callId, bodyStateFor(result), {
+                    invokedParams: snapshot,
+                    durationMs: elapsedMs(start),
+                });
+                return result;
+            }
+            catch (exc) {
+                guard.recordOutcome(outcome.decision.callId, reasons_js_1.BodyState.RAISED, {
+                    errorCode: errorCodeOf(exc),
+                    invokedParams: snapshot,
+                    durationMs: elapsedMs(start),
+                });
+                throw exc;
+            }
+        };
+    }
     return new Proxy(tool, {
         get(target, prop, receiver) {
             if (prop === "invoke")

package/dist/cjs/adapters/langgraph.js.map

@@ -1 +1 @@
-{"version":3,"file":"langgraph.js","sourceRoot":"","sources":["../../../src/adapters/langgraph.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkDG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA2CH,8BA2BC;AAcD,wCAWC;AA+BD,8BAgCC;AAkBD,gCAcC;AAOD,4BAMC;AAkBD,gCAEC;AAOD,oDAQC;AA5OD,0CAA0D;AA4B1D;;;;;;;;;;;;GAYG;AACH,SAAgB,SAAS,CACvB,KAAY,EACZ,SAAiB,EACjB,EAAK,EACL,UAAwB,EAAE;IAE1B,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC;IAEnF,MAAM,OAAO,GAAG,UAAyB,GAAG,IAAW;QACrD,MAAM,OAAO,GAAY,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE;YACtC,OAAO;YACP,IAAI,EAAE,YAAY;YAClB,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,IAAI;YACxC,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,KAAK;SAClC,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,OAAO;YAAE,MAAM,IAAI,0BAAe,CAAC,QAAQ,CAAC,CAAC;QAC3D,OAAO,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC9B,CAAmB,CAAC;IAEpB,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE;QAC/B,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE;QAC5C,KAAK,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE;QACzC,SAAS,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE;QACjD,SAAS,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE;KAC3C,CAAC,CAAC;IACH,OAAO,OAAO,CAAC;AACjB,CAAC;AAOD;;;;;;GAMG;AACH,SAAgB,cAAc,CAC5B,KAAgB,EAChB,IAAY,EACZ,KAAY,EACZ,SAAiB,EACjB,EAAK,EACL,UAAwB,EAAE;IAE1B,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;IACtD,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC1B,OAAO,IAAI,CAAC;AACd,CAAC;AAoBD;;;;;;;;;;GAUG;AACH,SAAgB,SAAS,CACvB,KAAY,EACZ,IAAO,EACP,UAA4B,EAAE;IAE9B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC;IACzC,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;IAEpE,MAAM,aAAa,GAAG,CAAC,KAAU,EAAE,MAAY,EAAE,EAAE;QACjD,MAAM,OAAO,GAAY,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACnF,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE;YAClC,OAAO;YACP,IAAI,EAAE,KAAK;YACX,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,IAAI;YACxC,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,KAAK;SAClC,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;YACtB,IAAI,OAAO,CAAC,QAAQ;gBAAE,OAAO,OAAO,CAAC,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YAC/D,MAAM,IAAI,0BAAe,CAAC,QAAQ,CAAC,CAAC;QACtC,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACpC,CAAC,CAAC;IAEF,OAAO,IAAI,KAAK,CAAC,IAAI,EAAE;QACrB,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ;YACxB,IAAI,IAAI,KAAK,QAAQ;gBAAE,OAAO,aAAa,CAAC;YAC5C,IAAI,IAAI,KAAK,oBAAY;gBAAE,OAAO,KAAK,CAAC;YACxC,IAAI,IAAI,KAAK,oBAAY;gBAAE,OAAO,KAAK,CAAC;YACxC,MAAM,KAAK,GAAY,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;YAC3D,OAAO,OAAO,KAAK,KAAK,UAAU,CAAC,CAAC,CAAE,KAA8B,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QAC5F,CAAC;KACF,CAAM,CAAC;AACV,CAAC;AAED,8EAA8E;AACjE,QAAA,YAAY,GAAG,eAAe,CAAC;AAC/B,QAAA,YAAY,GAAG,eAAe,CAAC;AAU5C;;;GAGG;AACH,SAAgB,UAAU,CACxB,KAAY,EACZ,KAAmB,EACnB,UAA6B,EAAE;IAE/B,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACrB,SAAS,CAAC,KAAK,EAAE,CAAC,EAAE;QAClB,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI;QACzC,SAAS,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,SAAS;QAC1D,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,IAAI;QACxC,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,KAAK;QACjC,QAAQ,EAAE,OAAO,CAAC,QAAQ;KAC3B,CAAC,CACH,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAgB,QAAQ,CAAC,KAAU;IACjC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5F,MAAM,IAAI,GAAI,KAA2B,CAAC,IAAI,CAAC;QAC/C,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO,IAA2B,CAAC;IACpF,CAAC;IACD,OAAO,CAAC,KAAK,IAAI,EAAE,CAAwB,CAAC;AAC9C,CAAC;AAQD;;;;;;;;;GASG;AACH,SAAgB,UAAU,CAAC,MAAa,EAAE,OAAwB;IAChE,OAAO,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;AACzE,CAAC;AAED;;;;GAIG;AACI,KAAK,UAAU,oBAAoB;IACxC,MAAM,SAAS,GAAG,sBAAsB,CAAC;IACzC,IAAI,CAAC;QACH,yBAAa,SAAS,uCAAC,CAAC;QACxB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}
+{"version":3,"file":"langgraph.js","sourceRoot":"","sources":["../../../src/adapters/langgraph.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkEG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA6GH,8BA2GC;AAcD,wCAWC;AAqCD,8BAsIC;AAkBD,gCAcC;AAOD,4BAMC;AAkBD,gCAEC;AAOD,oDAQC;AA1eD,0CAA4E;AAI5E,8CAAkE;AAClE,8CAAwC;AAyBxC;;;;;;GAMG;AACH,SAAS,cAAc,CAAC,IAAwB;IAC9C,MAAM,GAAG,GAAG,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC;IAChC,IAAI,CAAC;QACH,OAAO,eAAe,CAAC,GAAG,CAAoB,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,8FAA8F;QAC9F,wFAAwF;QACxF,wFAAwF;QACxF,OAAO,GAAsB,CAAC;IAChC,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,gBAAgB,CAAC,MAAe;IACvC,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAChE,MAAM,CAAC,GAAG,MAAsC,CAAC;IACjD,IAAI,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,UAAU,IAAI,OAAO,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,UAAU;QAAE,OAAO,IAAI,CAAC;IAC7F,IAAI,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,UAAU,IAAI,OAAO,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,UAAU;QAAE,OAAO,IAAI,CAAC;IAClG,IAAI,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,UAAU;QAAE,OAAO,IAAI,CAAC;IACjD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,YAAY,CAAC,MAAe;IACnC,OAAO,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,sBAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,sBAAS,CAAC,QAAQ,CAAC;AAC5E,CAAC;AAED;;;;;;GAMG;AACH,SAAS,YAAY,CAAC,GAAY;IAChC,OAAO,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,CAAC;AAC3D,CAAC;AAED,qHAAqH;AACrH,SAAS,WAAW,CAAC,GAAY;IAC/B,IAAI,GAAG,YAAY,KAAK;QAAE,OAAO,GAAG,CAAC,WAAW,CAAC,IAAI,IAAI,OAAO,CAAC;IACjE,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IAChC,OAAO,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC;AACzD,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC;AAC/C,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,SAAgB,SAAS,CACvB,KAAY,EACZ,SAAiB,EACjB,EAAK,EACL,UAAwB,EAAE;IAE1B,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC;IACnF,MAAM,SAAS,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,KAAK,eAAe,CAAC;IAC1D,0FAA0F;IAC1F,6FAA6F;IAC7F,kCAAkC;IAClC,MAAM,EAAE,GAAG,KAAK,CAAC,aAAa,KAAK,CAAC,CAAC;IACrC,MAAM,OAAO,GAAG,SAAS,CAAC,CAAC,CAAC,oBAAO,CAAC,aAAa,CAAC,CAAC,CAAC,oBAAO,CAAC,YAAY,CAAC;IACzE,MAAM,WAAW,GAAgB;QAC/B,MAAM,EAAE,iCAAiC;QACzC,OAAO,EAAE,oBAAO;QAChB,QAAQ,EAAE,aAAa,EAAE,CAAC,IAAI,IAAI,SAAS,EAAE;KAC9C,CAAC;IAEF,SAAS,SAAS,CAAC,IAAe,EAAE,QAAqB;QACvD,MAAM,OAAO,GAAY,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,MAAM,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,QAAQ,IAAI,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnG,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE;YACtC,OAAO;YACP,IAAI,EAAE,YAAY;YAClB,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,IAAI;YACxC,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,KAAK;YACjC,GAAG,KAAK;SACT,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,OAAO;YAAE,MAAM,IAAI,0BAAe,CAAC,QAAQ,CAAC,CAAC;QAC3D,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,IAAI,OAAuB,CAAC;IAC5B,IAAI,SAAS,IAAI,EAAE,EAAE,CAAC;QACpB,OAAO,GAAG,CAAC,KAAK,WAA0B,GAAG,IAAW;YACtD,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;YACtC,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YAC3C,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;YAChC,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBAC1C,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAO,EAAE,YAAY,CAAC,MAAM,CAAC,EAAE;oBAC1D,aAAa,EAAE,QAAQ;oBACvB,UAAU,EAAE,SAAS,CAAC,KAAK,CAAC;iBAC7B,CAAC,CAAC;gBACH,OAAO,MAAM,CAAC;YAChB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,8EAA8E;gBAC9E,oFAAoF;gBACpF,IAAI,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;oBACtB,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAO,EAAE,sBAAS,CAAC,SAAS,EAAE;wBACzD,aAAa,EAAE,QAAQ;wBACvB,UAAU,EAAE,SAAS,CAAC,KAAK,CAAC;qBAC7B,CAAC,CAAC;gBACL,CAAC;qBAAM,CAAC;oBACN,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAO,EAAE,sBAAS,CAAC,MAAM,EAAE;wBACtD,SAAS,EAAE,WAAW,CAAC,GAAG,CAAC;wBAC3B,aAAa,EAAE,QAAQ;wBACvB,UAAU,EAAE,SAAS,CAAC,KAAK,CAAC;qBAC7B,CAAC,CAAC;gBACL,CAAC;gBACD,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC,CAA8B,CAAC;IAClC,CAAC;SAAM,IAAI,SAAS,EAAE,CAAC;QACrB,yFAAyF;QACzF,sFAAsF;QACtF,4FAA4F;QAC5F,gBAAgB;QAChB,OAAO,GAAG,CAAC,UAAyB,GAAG,IAAW;YAChD,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACtB,OAAO,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC9B,CAAC,CAA8B,CAAC;IAClC,CAAC;SAAM,CAAC;QACN,OAAO,GAAG,CAAC,UAAyB,GAAG,IAAW;YAChD,IAAI,CAAC,EAAE,EAAE,CAAC;gBACR,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBACtB,OAAO,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC9B,CAAC;YACD,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;YACtC,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YAC3C,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;YAChC,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBACpC,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAO,EAAE,YAAY,CAAC,MAAM,CAAC,EAAE;oBAC1D,aAAa,EAAE,QAAQ;oBACvB,UAAU,EAAE,SAAS,CAAC,KAAK,CAAC;iBAC7B,CAAC,CAAC;gBACH,OAAO,MAAM,CAAC;YAChB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAO,EAAE,sBAAS,CAAC,MAAM,EAAE;oBACtD,SAAS,EAAE,WAAW,CAAC,GAAG,CAAC;oBAC3B,aAAa,EAAE,QAAQ;oBACvB,UAAU,EAAE,SAAS,CAAC,KAAK,CAAC;iBAC7B,CAAC,CAAC;gBACH,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC,CAA8B,CAAC;IAClC,CAAC;IAED,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE;QAC/B,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE;QAC5C,KAAK,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE;QACzC,SAAS,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE;QACjD,SAAS,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE;KAC3C,CAAC,CAAC;IACH,OAAO,OAAO,CAAC;AACjB,CAAC;AAOD;;;;;;GAMG;AACH,SAAgB,cAAc,CAC5B,KAAgB,EAChB,IAAY,EACZ,KAAY,EACZ,SAAiB,EACjB,EAAK,EACL,UAAwB,EAAE;IAE1B,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;IACtD,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC1B,OAAO,IAAI,CAAC;AACd,CAAC;AAoBD;;;;;;;;;;;;;;;;GAgBG;AACH,SAAgB,SAAS,CACvB,KAAY,EACZ,IAAO,EACP,UAA4B,EAAE;IAE9B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC;IACzC,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;IACpE,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,KAAK,eAAe,CAAC;IACvE,8FAA8F;IAC9F,gBAAgB;IAChB,MAAM,EAAE,GAAG,KAAK,CAAC,aAAa,KAAK,CAAC,CAAC;IACrC,MAAM,OAAO,GAAG,aAAa,CAAC,CAAC,CAAC,oBAAO,CAAC,aAAa,CAAC,CAAC,CAAC,oBAAO,CAAC,YAAY,CAAC;IAC7E,MAAM,WAAW,GAAgB;QAC/B,MAAM,EAAE,iCAAiC;QACzC,OAAO,EAAE,oBAAO;QAChB,QAAQ,EAAE,aAAa,IAAI,CAAC,IAAI,EAAE;KACnC,CAAC;IAEF,SAAS,kBAAkB,CAAC,KAAU;QACpC,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC5B,IAAI,CAAC;YACH,OAAO,eAAe,CAAC,GAAG,CAAoB,CAAC;QACjD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,GAAsB,CAAC;QAChC,CAAC;IACH,CAAC;IAED,SAAS,SAAS,CAAC,KAAU,EAAE,MAAW,EAAE,QAAqB;QAC/D,MAAM,OAAO,GAAY,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACnF,MAAM,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,QAAQ,IAAI,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnG,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE;YAClC,OAAO;YACP,IAAI,EAAE,KAAK;YACX,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,IAAI;YACxC,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,KAAK;YACjC,GAAG,KAAK;SACT,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,OAAO;YAAE,MAAM,IAAI,0BAAe,CAAC,QAAQ,CAAC,CAAC;QAC3D,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,2FAA2F;IAC3F,SAAS,iBAAiB,CACxB,KAAU,EACV,MAAW,EACX,QAAqB;QAErB,IAAI,CAAC;YACH,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;QAC1D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,0BAAe,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACvD,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC;YAC3D,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,IAAI,aAAgD,CAAC;IACrD,IAAI,aAAa,IAAI,EAAE,EAAE,CAAC;QACxB,aAAa,GAAG,KAAK,EAAE,KAAU,EAAE,MAAY,EAAE,EAAE;YACjD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;YAC3C,MAAM,OAAO,GAAG,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;YAC3D,IAAI,QAAQ,IAAI,OAAO;gBAAE,OAAO,OAAO,CAAC,MAAM,CAAC;YAC/C,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;YAChC,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;gBAChD,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAO,EAAE,YAAY,CAAC,MAAM,CAAC,EAAE;oBAClE,aAAa,EAAE,QAAQ;oBACvB,UAAU,EAAE,SAAS,CAAC,KAAK,CAAC;iBAC7B,CAAC,CAAC;gBACH,OAAO,MAAM,CAAC;YAChB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;oBACtB,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAO,EAAE,sBAAS,CAAC,SAAS,EAAE;wBACjE,aAAa,EAAE,QAAQ;wBACvB,UAAU,EAAE,SAAS,CAAC,KAAK,CAAC;qBAC7B,CAAC,CAAC;gBACL,CAAC;qBAAM,CAAC;oBACN,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAO,EAAE,sBAAS,CAAC,MAAM,EAAE;wBAC9D,SAAS,EAAE,WAAW,CAAC,GAAG,CAAC;wBAC3B,aAAa,EAAE,QAAQ;wBACvB,UAAU,EAAE,SAAS,CAAC,KAAK,CAAC;qBAC7B,CAAC,CAAC;gBACL,CAAC;gBACD,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC,CAAC;IACJ,CAAC;SAAM,IAAI,aAAa,EAAE,CAAC;QACzB,wFAAwF;QACxF,2FAA2F;QAC3F,8CAA8C;QAC9C,aAAa,GAAG,CAAC,KAAU,EAAE,MAAY,EAAE,EAAE;YAC3C,MAAM,OAAO,GAAG,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;YACvD,IAAI,QAAQ,IAAI,OAAO;gBAAE,OAAO,OAAO,CAAC,MAAM,CAAC;YAC/C,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACpC,CAAC,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,aAAa,GAAG,CAAC,KAAU,EAAE,MAAY,EAAE,EAAE;YAC3C,IAAI,CAAC,EAAE,EAAE,CAAC;gBACR,MAAM,OAAO,GAAG,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;gBACvD,IAAI,QAAQ,IAAI,OAAO;oBAAE,OAAO,OAAO,CAAC,MAAM,CAAC;gBAC/C,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YACpC,CAAC;YACD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;YAC3C,MAAM,OAAO,GAAG,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;YAC3D,IAAI,QAAQ,IAAI,OAAO;gBAAE,OAAO,OAAO,CAAC,MAAM,CAAC;YAC/C,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;YAChC,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;gBAC1C,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAO,EAAE,YAAY,CAAC,MAAM,CAAC,EAAE;oBAClE,aAAa,EAAE,QAAQ;oBACvB,UAAU,EAAE,SAAS,CAAC,KAAK,CAAC;iBAC7B,CAAC,CAAC;gBACH,OAAO,MAAM,CAAC;YAChB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAO,EAAE,sBAAS,CAAC,MAAM,EAAE;oBAC9D,SAAS,EAAE,WAAW,CAAC,GAAG,CAAC;oBAC3B,aAAa,EAAE,QAAQ;oBACvB,UAAU,EAAE,SAAS,CAAC,KAAK,CAAC;iBAC7B,CAAC,CAAC;gBACH,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,KAAK,CAAC,IAAI,EAAE;QACrB,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ;YACxB,IAAI,IAAI,KAAK,QAAQ;gBAAE,OAAO,aAAa,CAAC;YAC5C,IAAI,IAAI,KAAK,oBAAY;gBAAE,OAAO,KAAK,CAAC;YACxC,IAAI,IAAI,KAAK,oBAAY;gBAAE,OAAO,KAAK,CAAC;YACxC,MAAM,KAAK,GAAY,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;YAC3D,OAAO,OAAO,KAAK,KAAK,UAAU,CAAC,CAAC,CAAE,KAA8B,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QAC5F,CAAC;KACF,CAAM,CAAC;AACV,CAAC;AAED,8EAA8E;AACjE,QAAA,YAAY,GAAG,eAAe,CAAC;AAC/B,QAAA,YAAY,GAAG,eAAe,CAAC;AAU5C;;;GAGG;AACH,SAAgB,UAAU,CACxB,KAAY,EACZ,KAAmB,EACnB,UAA6B,EAAE;IAE/B,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACrB,SAAS,CAAC,KAAK,EAAE,CAAC,EAAE;QAClB,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI;QACzC,SAAS,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,SAAS;QAC1D,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,IAAI;QACxC,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,KAAK;QACjC,QAAQ,EAAE,OAAO,CAAC,QAAQ;KAC3B,CAAC,CACH,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAgB,QAAQ,CAAC,KAAU;IACjC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5F,MAAM,IAAI,GAAI,KAA2B,CAAC,IAAI,CAAC;QAC/C,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO,IAA2B,CAAC;IACpF,CAAC;IACD,OAAO,CAAC,KAAK,IAAI,EAAE,CAAwB,CAAC;AAC9C,CAAC;AAQD;;;;;;;;;GASG;AACH,SAAgB,UAAU,CAAC,MAAa,EAAE,OAAwB;IAChE,OAAO,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;AACzE,CAAC;AAED;;;;GAIG;AACI,KAAK,UAAU,oBAAoB;IACxC,MAAM,SAAS,GAAG,sBAAsB,CAAC;IACzC,IAAI,CAAC;QACH,yBAAa,SAAS,uCAAC,CAAC;QACxB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/cjs/audit.d.ts

@@ -11,6 +11,7 @@
  * identical content — see `canonical.ts` for how that is guaranteed.
  */
 import { type CJson } from "./canonical.js";
+import type { Decision } from "./reasons.js";
 import type { Signer } from "./wire.js";
 export declare const SCHEMA_VERSION = 1;
 export declare const GENESIS: string;
@@ -36,16 +37,52 @@ export interface Anchor {
 }
 /** `sha256(prev_hash || canonical(event-without-hash))`, as hex. */
 export declare function hashEntry(prevHash: string, payload: LedgerEntry): string;
+/**
+ * Thrown by `AuditLog.append` when the entry was committed to the in-memory chain but persisting
+ * it afterward (the audit-path file write, or a sink) threw.
+ *
+ * The entry IS committed — it is in `.entries`/`.head()` and every later `hash`/`prev_hash` is
+ * computed on top of it. Callers must not retry the operation that produced this entry merely
+ * because this was thrown: retrying would record it a second time. The original error is chained
+ * as `.cause` (the standard `Error` cause, same as Python's `__cause__`).
+ */
+export declare class CommittedAuditError extends Error {
+    readonly entry: LedgerEntry;
+    /**
+     * Set by `Guard.check`/`Guard.recordDenial` before this propagates out of them (0.9.0
+     * execution binding — spec section 1: "carries the committed entry and the decision"). Absent
+     * for a `CommittedAuditError` raised by an `AuditLog` used directly, without a `Guard`.
+     */
+    decision?: Decision;
+    constructor(entry: LedgerEntry, cause: unknown);
+}
 export interface AuditLogInit {
     /** Where to append the `.jsonl` ledger. Omit for an in-memory log. */
     path?: string | null;
     /** Local sinks; each gets every entry after the file write. */
     sinks?: readonly Sink[];
+    /**
+     * 0.9.0: the schema version this WHOLE chain is created at (1, the default and unchanged
+     * behaviour, or 2 — execution binding). Stated once, on `v` of every entry (see
+     * `Guard.issue({schemaVersion})`); a chain never mixes schema versions.
+     */
+    schemaVersion?: number;
+    /**
+     * Allow constructing over a `path` that already names a non-empty file, replacing it. Default
+     * `false`: refuse (`Error`) rather than silently truncate a pre-existing ledger.
+     */
+    overwrite?: boolean;
 }
 /** Append-only, hash-chained decision log. */
 export declare class AuditLog {
     readonly path: string | null;
-    private readonly sinks;
+    readonly schemaVersion: number;
+    /**
+     * Local sinks; each gets every entry after the file write. Public and mutable (not just
+     * constructor-supplied) so a caller — or a test simulating a post-commit persistence failure —
+     * can swap them in after construction.
+     */
+    sinks: readonly Sink[];
     private prev;
     private seq;
     private readonly _entries;

package/dist/cjs/audit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../src/audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAMH,OAAO,EAKL,KAAK,KAAK,EACX,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAExC,eAAO,MAAM,cAAc,IAAI,CAAC;AAChC,eAAO,MAAM,OAAO,QAAiB,CAAC;AAEtC,8BAA8B;AAC9B,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AAEhD,0EAA0E;AAC1E,MAAM,WAAW,IAAI;IACnB,KAAK,CAAC,KAAK,EAAE,WAAW,GAAG,IAAI,CAAC;CACjC;AAED,oDAAoD;AACpD,MAAM,WAAW,MAAM;IACrB,CAAC,EAAE,MAAM,CAAC;IACV,IAAI,EAAE,KAAK,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,GAAG,MAAM,CAAC;IACpB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;IACZ,0DAA0D;IAC1D,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,CAAC,GAAG,EAAE,MAAM,GAAG,KAAK,GAAG,SAAS,CAAC;CAClC;AAED,oEAAoE;AACpE,wBAAgB,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,GAAG,MAAM,CAKxE;AAeD,MAAM,WAAW,YAAY;IAC3B,sEAAsE;IACtE,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,+DAA+D;IAC/D,KAAK,CAAC,EAAE,SAAS,IAAI,EAAE,CAAC;CACzB;AAED,8CAA8C;AAC9C,qBAAa,QAAQ;IACnB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAkB;IACxC,OAAO,CAAC,IAAI,CAAW;IACvB,OAAO,CAAC,GAAG,CAAK;IAChB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAqB;IAE9C;;;;OAIG;gBACS,IAAI,GAAE,YAAY,GAAG,MAAM,GAAG,IAAS;IAUnD,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,EAAE,MAAM,GAAE,WAAgB,GAAG,WAAW;IAqBjF,IAAI,OAAO,IAAI,WAAW,EAAE,CAE3B;IAED,IAAI,MAAM,IAAI,MAAM,CAEnB;IAED,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,WAAW,CAAC;IAM1C,kFAAkF;IAClF,IAAI,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC;IAMxB,OAAO,CAAC,WAAW;IAInB;;;;;OAKG;IACH,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,GAAE,MAAM,GAAG,MAAU,GAAG,MAAM;IAUvD,iEAAiE;IACjE,MAAM,CAAC,YAAY,CACjB,OAAO,EAAE,SAAS,WAAW,EAAE,EAC/B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,IAAI,GAAG,SAAS,EAChD,MAAM,EAAE,MAAM,GACb,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IA0B3B,2DAA2D;IAC3D,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,WAAW,EAAE,GAAG,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAsBxE,uEAAuE;IACvE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,EAAE;IAIxC,iEAAiE;IACjE,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,EAAE;CAM/C;AAOD,4DAA4D;AAC5D,wBAAgB,SAAS,CAAC,OAAO,EAAE,SAAS,WAAW,EAAE,GAAG,MAAM,CAMjE"}
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../src/audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAMH,OAAO,EAKL,KAAK,KAAK,EACX,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAExC,eAAO,MAAM,cAAc,IAAI,CAAC;AAChC,eAAO,MAAM,OAAO,QAAiB,CAAC;AAEtC,8BAA8B;AAC9B,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AAEhD,0EAA0E;AAC1E,MAAM,WAAW,IAAI;IACnB,KAAK,CAAC,KAAK,EAAE,WAAW,GAAG,IAAI,CAAC;CACjC;AAED,oDAAoD;AACpD,MAAM,WAAW,MAAM;IACrB,CAAC,EAAE,MAAM,CAAC;IACV,IAAI,EAAE,KAAK,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,GAAG,MAAM,CAAC;IACpB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;IACZ,0DAA0D;IAC1D,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,CAAC,GAAG,EAAE,MAAM,GAAG,KAAK,GAAG,SAAS,CAAC;CAClC;AAED,oEAAoE;AACpE,wBAAgB,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,GAAG,MAAM,CAKxE;AAeD;;;;;;;;GAQG;AACH,qBAAa,mBAAoB,SAAQ,KAAK;IAS1C,QAAQ,CAAC,KAAK,EAAE,WAAW;IAR7B;;;;OAIG;IACH,QAAQ,CAAC,EAAE,QAAQ,CAAC;gBAGT,KAAK,EAAE,WAAW,EAC3B,KAAK,EAAE,OAAO;CASjB;AAED,MAAM,WAAW,YAAY;IAC3B,sEAAsE;IACtE,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,+DAA+D;IAC/D,KAAK,CAAC,EAAE,SAAS,IAAI,EAAE,CAAC;IACxB;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;OAGG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,8CAA8C;AAC9C,qBAAa,QAAQ;IACnB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B;;;;OAIG;IACH,KAAK,EAAE,SAAS,IAAI,EAAE,CAAC;IACvB,OAAO,CAAC,IAAI,CAAW;IACvB,OAAO,CAAC,GAAG,CAAK;IAChB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAqB;IAE9C;;;;OAIG;gBACS,IAAI,GAAE,YAAY,GAAG,MAAM,GAAG,IAAS;IAoBnD,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,EAAE,MAAM,GAAE,WAAgB,GAAG,WAAW;IAyBjF,IAAI,OAAO,IAAI,WAAW,EAAE,CAE3B;IAED,IAAI,MAAM,IAAI,MAAM,CAEnB;IAED,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,WAAW,CAAC;IAM1C,kFAAkF;IAClF,IAAI,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC;IAMxB,OAAO,CAAC,WAAW;IAInB;;;;;OAKG;IACH,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,GAAE,MAAM,GAAG,MAAU,GAAG,MAAM;IAUvD,iEAAiE;IACjE,MAAM,CAAC,YAAY,CACjB,OAAO,EAAE,SAAS,WAAW,EAAE,EAC/B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,IAAI,GAAG,SAAS,EAChD,MAAM,EAAE,MAAM,GACb,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IA6B3B,2DAA2D;IAC3D,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,WAAW,EAAE,GAAG,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAsBxE,uEAAuE;IACvE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,EAAE;IAIxC,iEAAiE;IACjE,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,EAAE;CAM/C;AAOD,4DAA4D;AAC5D,wBAAgB,SAAS,CAAC,OAAO,EAAE,SAAS,WAAW,EAAE,GAAG,MAAM,CAMjE"}