Plans

Allowlist LGC_DEPLOYMENT_URL's host in isSafeDeploymentUrl; encode lgcDeploymentUrl in page.tsx

Guard the two tool_calls[0] index sites in the Python search_node

Guard the two tool_calls![0] index sites in the TypeScript search_node (parity)

Implement the fact-check tool + graph node (Python agent)

Type resources/logs (and the new citations) with real types instead of any[]

Render citations in the canvas — claim list linked to resources, unsupported claims flagged

Unify the two useCoAgent initialState seeds and include the citations default

Add a Citation type + citations field to AgentState (Python agent + frontend)

End-to-end manual verification across state, node, and UI