@agentforge-io/core 2.0.11 → 2.0.14

package/dist/services/agent.service.js

@@ -171,7 +171,9 @@ class AgentService {
         // resolved agent declares one (e.g. a public-chat agent reusing the
         // owner's Gmail authorization); otherwise they fall back to the
         // caller's userId, which is the historical personal-agent path.
-        const extraTools = await this.resolveExtraTools(agent.connectorOwnerUserId ?? params.userId);
+        const resolvedExtras = await this.resolveExtraTools(agent.connectorOwnerUserId ?? params.userId);
+        const filter = params.overrides?.extraToolsFilter;
+        const extraTools = filter && resolvedExtras ? filter(resolvedExtras) : resolvedExtras;
         const response = await this.runner.run(agent, messages, {
             userId: params.userId,
             conversationId: params.conversationId,
@@ -235,7 +237,9 @@ class AgentService {
         // Same precedence as sendMessage — agent.connectorOwnerUserId takes
         // priority so a public-chat agent always uses the owner's connector
         // toolbelt regardless of which visitor session is streaming.
-        const extraTools = await this.resolveExtraTools(agent.connectorOwnerUserId ?? params.userId);
+        const resolvedExtras = await this.resolveExtraTools(agent.connectorOwnerUserId ?? params.userId);
+        const filter = params.overrides?.extraToolsFilter;
+        const extraTools = filter && resolvedExtras ? filter(resolvedExtras) : resolvedExtras;
         for await (const chunk of this.runner.stream(agent, messages, {
             userId: params.userId,
             conversationId: params.conversationId,

package/dist/types/agent.types.d.ts

@@ -45,6 +45,28 @@ export interface AgentOverrides {
      * routed through a per-call map (the registry doesn't see them).
      */
     extraTools?: AgentToolDefinition[];
+    /**
+     * Optional post-resolution filter applied to the tools that
+     * `AgentService` derives from the connector registry (the
+     * `resolveExtraTools(userId)` output). The caller receives the full
+     * list and returns the subset that should actually be exposed to the
+     * model for this turn.
+     *
+     * Use cases:
+     *   - The prompt-designer assistant exposes ONLY read-only tools to
+     *     itself even though the operator's tenant has write tools
+     *     authorized (see PROMPT_DESIGNER_TOOL_USE_SDD §4.2).
+     *   - A throttling layer dropping tools that have hit a rate limit.
+     *
+     * If omitted, the resolved list passes through unchanged — the
+     * historical behavior.
+     *
+     * Note: this filter runs AFTER `resolveExtraTools` and BEFORE the
+     * shallow merge with `overrides.extraTools`. Tools explicitly
+     * provided via `extraTools` are NOT filtered; the caller is
+     * responsible for vetting those.
+     */
+    extraToolsFilter?: (tools: AgentToolDefinition[]) => AgentToolDefinition[];
 }
 export interface AgentResponse {
     messageId: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentforge-io/core",
-  "version": "2.0.11",
+  "version": "2.0.14",
   "description": "Framework-free AI runtime SDK. Owns: agent loop (Anthropic), conversations, tools, streaming, agent-job queue, SdkHooks. Identity, billing, infra (email/uploads/secrets) live in the host's modules — not here.",
   "license": "MIT",
   "main": "dist/index.js",