@economic/agents 2.3.23 → 2.3.25

package/dist/index.d.mts

@@ -49,6 +49,7 @@ declare abstract class Agent<RequestContext extends Record<string, unknown> = Re
   configureSession(session: Session): Session;
   onConnect(connection: Connection, ctx: ConnectionContext): Promise<void>;
   private _toolsForCurrentTurn;
+  private _authorizedToolsForCurrentTurn;
   private _toolContextForCurrentTurn?;
   private getToolContextForCurrentTurn;
   /**
@@ -128,7 +129,7 @@ declare abstract class Agent<RequestContext extends Record<string, unknown> = Re
    * `updated_at`, so instances can be ordered by recency of activity.
    * Best-effort and non-blocking — never allowed to interfere with a turn.
    */
-  protected touchInstance(): Promise<void>;
+  protected registerInstanceActivity(): Promise<void>;
   /**
    * Resolves the analytics/telemetry agent name to the entry-point agent: the
    * top-level DO registered in the `agent` catalog table.

package/dist/index.mjs

@@ -170,17 +170,19 @@ var Agent = class extends Think {
 					return;
 				}
 				const token = extractTokenFromConnectRequest(ctx.request);
-				if (token && this.getUserContext) this.userContext = await this.getUserContext(token);
+				if (token && this.getUserContext) connection.setState({ userContext: await this.getUserContext(token) });
 			}
 		}
 		sendConnectionStatus(connection, "connected");
 	}
 	_toolsForCurrentTurn = {};
+	_authorizedToolsForCurrentTurn = {};
 	_toolContextForCurrentTurn;
 	getToolContextForCurrentTurn(requestContext = {}) {
+		const connectionState = getCurrentAgent().connection?.state;
 		return {
 			...requestContext,
-			_userContext: this.userContext
+			_userContext: connectionState?.userContext
 		};
 	}
 	/**
@@ -191,7 +193,7 @@ var Agent = class extends Think {
 	* `returned.tools` into your own `TurnConfig.tools` if you return tools.
 	*/
 	async beforeTurn(ctx) {
-		this.touchInstance();
+		this.registerInstanceActivity();
 		this._toolContextForCurrentTurn = this.getToolContextForCurrentTurn(ctx.body);
 		this._toolsForCurrentTurn = ctx.tools;
 		const activeSkillName = this._getLastActivatedSkillName(ctx.messages);
@@ -246,12 +248,18 @@ var Agent = class extends Think {
 		};
 	}
 	async beforeToolCall(ctx) {
+		const toolCtx = this._toolContextForCurrentTurn ?? {};
 		if (ctx.toolName === "activate_skill") {
-			if ((await this.getSkills()).find((source) => source.id === ctx.input["name"])?.authorize?.(this._toolContextForCurrentTurn ?? {}) === false) return {
+			if ((await this.getSkills()).find((source) => source.id === ctx.input["name"])?.authorize?.(toolCtx) === false) return {
 				action: "block",
 				reason: "Unauthorized skill"
 			};
+			return;
 		}
+		if (this._authorizedToolsForCurrentTurn[ctx.toolName]?.authorize?.(toolCtx) === false) return {
+			action: "block",
+			reason: `You do not have permission to use the "${ctx.toolName}" tool. Tell the user they don't have access to this capability, then stop -- do not try other tools to work around it.`
+		};
 	}
 	getTools() {
 		return {};
@@ -270,16 +278,17 @@ var Agent = class extends Think {
 	}
 	async _getAuthorizedTools(availableTools, activeSkillName) {
 		const tools = { ...availableTools };
-		const activeTools = Object.keys(availableTools);
+		const activeTools = Object.keys(tools);
 		const authorizedSkills = (await this.getSkills()).filter((skill) => !skill.authorize || skill.authorize?.(this._toolContextForCurrentTurn) !== false);
 		for (const skill of authorizedSkills) {
 			if (!skill.tools || Object.keys(skill.tools).length === 0) continue;
 			Object.assign(tools, skill.tools);
 			if (skill.id === activeSkillName) activeTools.push(...Object.keys(skill.tools));
 		}
+		this._authorizedToolsForCurrentTurn = tools;
 		return {
 			tools,
-			activeTools: activeTools.filter((toolName) => tools[toolName]?.authorize?.(this._toolContextForCurrentTurn) !== false)
+			activeTools
 		};
 	}
 	_getLastActivatedSkillName(items = []) {
@@ -348,7 +357,7 @@ var Agent = class extends Think {
 	* `updated_at`, so instances can be ordered by recency of activity.
 	* Best-effort and non-blocking — never allowed to interfere with a turn.
 	*/
-	async touchInstance() {
+	async registerInstanceActivity() {
 		try {
 			await touchAgentInstance(this.env.AGENTS_DB, {
 				...this.getRegisteredInstanceKey(),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@economic/agents",
-  "version": "2.3.23",
+  "version": "2.3.25",
   "description": "A starter for creating a TypeScript package.",
   "license": "MIT",
   "files": [
@@ -25,10 +25,10 @@
   "dependencies": {
     "@ai-sdk/anthropic": "^3.0.77",
     "@ai-sdk/google": "^3.0.73",
-    "@cloudflare/ai-chat": "^0.8.5",
-    "@cloudflare/think": ">=0.9.0",
+    "@cloudflare/ai-chat": "^0.9.3",
+    "@cloudflare/think": "^0.12.1",
     "@opentelemetry/sdk-trace-base": "^2.8.0",
-    "agents": ">=0.16.0 <1.0.0",
+    "agents": "^0.17.3",
     "ai": "^6.0.197",
     "jose": "^6.2.3",
     "nanoid": "^5.1.11"
@@ -36,7 +36,7 @@
   "devDependencies": {
     "@babel/core": "^7.29.7",
     "@babel/plugin-proposal-decorators": "^7.29.7",
-    "@cloudflare/workers-types": "^4.20260616.1",
+    "@cloudflare/workers-types": "^4.20260701.1",
     "@rolldown/plugin-babel": "^0.2.3",
     "@types/node": "^25.6.0",
     "@typescript/native-preview": "7.0.0-dev.20260412.1",
@@ -45,10 +45,10 @@
     "vitest": "^4.1.4"
   },
   "peerDependencies": {
-    "@cloudflare/think": ">=0.9.0",
-    "@cloudflare/vite-plugin": "^1.42.0",
-    "@cloudflare/worker-bundler": ">=0.2.1",
-    "agents": ">=0.16.0 <1.0.0",
+    "@cloudflare/think": "^0.12.1",
+    "@cloudflare/vite-plugin": "^1.42.4",
+    "@cloudflare/worker-bundler": "^0.2.1",
+    "agents": "^0.17.3",
     "vite": ">=8.0.0"
   }
 }