@economic/agents 2.3.24 → 2.3.26

package/dist/index.d.mts

@@ -49,6 +49,7 @@ declare abstract class Agent<RequestContext extends Record<string, unknown> = Re
   configureSession(session: Session): Session;
   onConnect(connection: Connection, ctx: ConnectionContext): Promise<void>;
   private _toolsForCurrentTurn;
+  private _authorizedToolsForCurrentTurn;
   private _toolContextForCurrentTurn?;
   private getToolContextForCurrentTurn;
   /**

package/dist/index.mjs

@@ -176,6 +176,7 @@ var Agent = class extends Think {
 		sendConnectionStatus(connection, "connected");
 	}
 	_toolsForCurrentTurn = {};
+	_authorizedToolsForCurrentTurn = {};
 	_toolContextForCurrentTurn;
 	getToolContextForCurrentTurn(requestContext = {}) {
 		const connectionState = getCurrentAgent().connection?.state;
@@ -247,12 +248,18 @@ var Agent = class extends Think {
 		};
 	}
 	async beforeToolCall(ctx) {
+		const toolCtx = this._toolContextForCurrentTurn ?? {};
 		if (ctx.toolName === "activate_skill") {
-			if ((await this.getSkills()).find((source) => source.id === ctx.input["name"])?.authorize?.(this._toolContextForCurrentTurn ?? {}) === false) return {
+			if ((await this.getSkills()).find((source) => source.id === ctx.input["name"])?.authorize?.(toolCtx) === false) return {
 				action: "block",
 				reason: "Unauthorized skill"
 			};
+			return;
 		}
+		if (this._authorizedToolsForCurrentTurn[ctx.toolName]?.authorize?.(toolCtx) === false) return {
+			action: "block",
+			reason: `You do not have permission to use the "${ctx.toolName}" tool. Tell the user they don't have access to this capability, then stop -- do not try other tools to work around it.`
+		};
 	}
 	getTools() {
 		return {};
@@ -271,16 +278,17 @@ var Agent = class extends Think {
 	}
 	async _getAuthorizedTools(availableTools, activeSkillName) {
 		const tools = { ...availableTools };
-		const activeTools = Object.keys(availableTools);
+		const activeTools = Object.keys(tools);
 		const authorizedSkills = (await this.getSkills()).filter((skill) => !skill.authorize || skill.authorize?.(this._toolContextForCurrentTurn) !== false);
 		for (const skill of authorizedSkills) {
 			if (!skill.tools || Object.keys(skill.tools).length === 0) continue;
 			Object.assign(tools, skill.tools);
 			if (skill.id === activeSkillName) activeTools.push(...Object.keys(skill.tools));
 		}
+		this._authorizedToolsForCurrentTurn = tools;
 		return {
 			tools,
-			activeTools: activeTools.filter((toolName) => tools[toolName]?.authorize?.(this._toolContextForCurrentTurn) !== false)
+			activeTools
 		};
 	}
 	_getLastActivatedSkillName(items = []) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@economic/agents",
-  "version": "2.3.24",
+  "version": "2.3.26",
   "description": "A starter for creating a TypeScript package.",
   "license": "MIT",
   "files": [
@@ -36,7 +36,7 @@
   "devDependencies": {
     "@babel/core": "^7.29.7",
     "@babel/plugin-proposal-decorators": "^7.29.7",
-    "@cloudflare/workers-types": "^4.20260701.1",
+    "@cloudflare/workers-types": "^4.20260702.1",
     "@rolldown/plugin-babel": "^0.2.3",
     "@types/node": "^25.6.0",
     "@typescript/native-preview": "7.0.0-dev.20260412.1",
@@ -46,7 +46,7 @@
   },
   "peerDependencies": {
     "@cloudflare/think": "^0.12.1",
-    "@cloudflare/vite-plugin": "^1.42.4",
+    "@cloudflare/vite-plugin": "^1.43.0",
     "@cloudflare/worker-bundler": "^0.2.1",
     "agents": "^0.17.3",
     "vite": ">=8.0.0"