agent-wait
Get a LangGraph interrupt out of the process, and the answer back in.
When a node calls interrupt(), the graph pauses and the interrupt is handed to whatever
called invoke() — and that is where LangGraph stops. There is no built-in way to tell
anyone else that a question was asked, and no built-in way for anyone else to answer
it. The moment the question has to reach a person on Slack, an approvals dashboard, a
ticket queue or another service, you are writing that code yourself — whether your agent
is a server that runs for a year or a Lambda that is gone in seconds.
agent-wait is that code. It takes the interrupt and puts it somewhere people can see it —
a topic, a queue, a webhook, a database row — with everything needed to answer it in one
envelope, and documents the shape of the answer so the return leg is one if.
pip install agent-wait langgraph-wait # core + LangGraph
pip install agent-wait-aws # SNS / SQS / EventBridge / DynamoDB announcers
The whole thing
In the graph — one line, where the decision belongs:
from agent_wait import WaitPolicy
from langgraph_wait import ask
def review(state):
decision = ask(
{"kind": "refund_approval", "order_id": state["order_id"], "amount": state["amount"]},
policy=WaitPolicy(
timeout="P3D",
default={"action": "reject"},
allowed_actions=("approve", "reject"),
tags={"approver_group": "finance"},
),
)
return {"decision": decision} # exactly what the approver sent
ask() is a thin wrapper over interrupt(); the policy rides along inside the
interrupt value. A plain interrupt(value) works too, with the default policy.
After the run — one call:
from agent_wait_aws import SnsAnnounce
from langgraph_wait import publish_interrupts
result = graph.invoke(value, {"configurable": {"thread_id": thread_id}})
publish_interrupts(result, thread_id, announce=[SnsAnnounce(topic_arn)])
It reads result["__interrupt__"] — Interrupt.id and Interrupt.value, nothing else —
and hands one envelope per question to the announcers. No graph handle, no get_state(),
no checkpointer. If nothing interrupted, it does nothing.
When the answer comes back — the one if you write:
from langgraph.types import Command
if "question_id" in message: # an answer
value = Command(resume={message["question_id"]: message["answer"]})
else: # a start
value = message["input"]
result = graph.invoke(value, {"configurable": {"thread_id": message["thread_id"]}})
publish_interrupts(result, message["thread_id"], announce)
That is the complete integration. A duplicate answer runs nothing — LangGraph ignores a resume for a question the thread has moved past — so there is nothing to check.
Or tag the tool
from langgraph_wait import hitl
@tool
@hitl(WaitPolicy(timeout="P1D", default={"action": "reject"}, tags={"approver_group": "finance"}))
def issue_refund(order_id: str, amount: int) -> str: ...
@hitl calls ask() with {tool, args} before the tool runs. {"action": "approve"}
runs it (optionally with edited args); anything else is returned to the model as the
tool's result. It also registers the policy by tool name, so questions raised by
LangChain's HumanInTheLoopMiddleware — which batches several tool calls into one
interrupt — are published with it.
Async mode — the thread does not park:
@tool
@hitl(FINANCE, mode="async", announce=[SnsAnnounce(topic_arn), DynamoDbAnnounce(table)])
def issue_refund(order_id: str, amount: int) -> str: ...
The decorator is the publisher: the tool call announces the question and returns
{"status": "pending_approval", "question_id": ...} without running. The graph carries
on; nothing is parked; nothing to call after the run. The decision arrives later as a new
message and your graph acts on it. This is the mode for a single-thread channel like
WhatsApp, where the approver is not the person on the thread.
What goes out
{
"type": "wait.created",
"thread_id": "order-4471",
"question_id": "a1b2c3d4e5f60718",
"question": { "kind": "refund_approval", "amount": 41000 },
"allowed_actions": ["approve", "reject"],
"expires_at": "2026-09-14T09:00:00Z",
"default": { "action": "reject" },
"source": { "tool": "issue_refund" },
"reply_with": { "thread_id": "order-4471", "question_id": "a1b2c3d4e5f60718", "answer": null }
}
reply_with is a filled-in stub: copy it, set answer, send it back. Whatever goes in
answer is what ask() returns — verbatim.
Full schema, the recommended answer shape, and how to deduplicate: Message formats.
Announcers
Subclass BaseAnnounce, write one method:
from agent_wait import BaseAnnounce
class RedisAnnounce(BaseAnnounce):
name = "redis"
def __init__(self, client, **kw):
super().__init__(**kw)
self.client = client
def deliver(self, envelope, transition):
self.client.set(envelope.dedupe_key, envelope.to_json())
A raise inside deliver() becomes a log line; the run completes. Shipped:
| Adapter | Package | Where the question lands |
|---|---|---|
WebhookAnnounce |
agent-wait |
A URL. JSON POST, optional HMAC-SHA256 signature. Stdlib only. |
LogAnnounce |
agent-wait |
A structured log line. The question never reaches INFO. |
InMemoryAnnounce |
agent-wait |
A list. For tests. |
SnsAnnounce |
agent-wait-aws |
A topic; tags become message attributes for subscription filters. |
SqsAnnounce |
agent-wait-aws |
A queue; on FIFO, grouped by thread, deduplicated on the stable key. |
EventBridgeAnnounce |
agent-wait-aws |
A bus. Notices partial failures behind a 200. |
DynamoDbAnnounce |
agent-wait-aws |
A row, status=open, with a GSI an approvals UI can query. Write-only. |
What the library does not do
- Receive answers. No endpoint, no validation, no ledger reads. The
ifabove is yours. - Enforce anything.
expires_at,default,answer_ttl,allowed_actionsare published so the consumer has the asker's intent. Acting on them is the consumer's. - Store anything. LangGraph's checkpoint is the only state in interrupt mode; in async mode there is none unless you keep one.
One LangGraph 1.2.x behaviour to know
Two tools that each call interrupt(), dispatched by one ToolNode, get the same
interrupt id (#6626), and only
one surfaces per run (#6624).
A different question under an identical id defeats deduplication. Use one interrupting
tool per node, or HumanInTheLoopMiddleware, which batches them into one interrupt.
Pinned by a test that fails if LangGraph changes it.
Layout
packages/agent-wait core: Question, WaitPolicy, the envelope, publish(), announcers. No deps.
packages/langgraph-wait ask(), @hitl, publish_interrupts(). The only LangGraph import.
packages/agent-wait-aws four announce adapters, and a CDK stack for the example.
examples/refund_agent a graph and a host, deployed to Lambda behind SQS.
docs/ message contract, architecture, announcer guide, consumer guide.
MIT. Issues and PRs at github.com/skamalj/agent-wait.
Metadata
Release files for agent-wait 0.3.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | |
|---|---|---|---|---|
| agent_wait-0.3.0.tar.gz | 15.1 kB | Without provenance | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| agent_wait-0.3.0-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 35.5 kB
Release files / agent_wait-0.3.0.tar.gz
| Download URL | agent_wait-0.3.0.tar.gz |
|---|---|
| Size | 15.1 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
84f1242c08bcd10e1b56cceaa7d4c6e2300a4ae2b2c609064768f0143dc90be1
|
|
BLAKE2b-256 checksum How to use checksums |
d643dad6f8be735acdb77b8c81336d6b0102a123b0b3494449d382b142eaaf5e
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
uv/0.11.23 {"installer":{"name":"uv","version":"0.11.23","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":null}
|
Release files / agent_wait-0.3.0-py3-none-any.whl
| Download URL | agent_wait-0.3.0-py3-none-any.whl |
|---|---|
| Size | 20.3 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
e70db84171705498ff354c01f72545110f88693a79d37766abca7efa517b53a0
|
|
BLAKE2b-256 checksum How to use checksums |
51a521ff80e585d0e0bcee129b4f72239b04a76040f824777fe25aba649898c1
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
uv/0.11.23 {"installer":{"name":"uv","version":"0.11.23","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":null}
|
Security for agent-wait 0.3.0
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.