@noetic-tools/context 1.2.2 → 1.3.0

package/dist/context/layer-lifecycle.d.ts

@@ -104,6 +104,7 @@ interface BeforeToolCallLayersParams {
     layers: ContextLayer[];
     toolName: string;
     toolArgs: unknown;
+    callId?: string;
     ctx: ExecutionContext;
     store: LayerStateStore;
 }
@@ -209,7 +210,7 @@ export declare function spawnLayers({ layers, parentCtx, childCtx, store, itemSc
 }[]>;
 export declare function returnLayers<T>({ layers, parentCtx, childCtx, childLog, result, store, }: ReturnLayersParams<T>): Promise<T>;
 export declare function completeLayers({ layers, ctx, log, outcome, store, }: CompleteLayersParams): Promise<void>;
-export declare function beforeToolCallLayers({ layers, toolName, toolArgs, ctx, store, }: BeforeToolCallLayersParams): Promise<SteeringDecision>;
+export declare function beforeToolCallLayers({ layers, toolName, toolArgs, callId, ctx, store, }: BeforeToolCallLayersParams): Promise<SteeringDecision>;
 export declare function afterModelCallLayers({ layers, response, ctx, store, }: AfterModelCallLayersParams): Promise<SteeringDecision>;
 /**
  * Run history items through every layer's `projectHistory` hook in slot order.

package/dist/context/layer-lifecycle.js

@@ -566,7 +566,7 @@ export async function completeLayers({ layers, ctx, log, outcome, store, }) {
     }
     await store.flush?.(ctx.executionId);
 }
-export async function beforeToolCallLayers({ layers, toolName, toolArgs, ctx, store, }) {
+export async function beforeToolCallLayers({ layers, toolName, toolArgs, callId, ctx, store, }) {
     const sorted = [
         ...layers,
     ].sort((a, b) => a.slot - b.slot);
@@ -589,6 +589,7 @@ export async function beforeToolCallLayers({ layers, toolName, toolArgs, ctx, st
             const result = await withTimeout(layer.hooks.beforeToolCall({
                 toolName,
                 toolArgs,
+                callId,
                 ctx,
                 state,
             }), timeout);
@@ -605,6 +606,15 @@ export async function beforeToolCallLayers({ layers, toolName, toolArgs, ctx, st
                 throw e;
             }
             store.diagnostic(layer.id, 'beforeToolCall', e);
+            // A permission GATE must fail closed: a hook that threw or timed out is
+            // a check that did not run, and for a gating layer that means deny, not
+            // the silent approval an abstention would collapse into.
+            if (layer.onBeforeToolCallError === 'deny') {
+                return {
+                    action: SteeringAction.Deny,
+                    guidance: `tool call denied: gating layer '${layer.id}' failed (${e instanceof Error ? e.message : String(e)})`,
+                };
+            }
         }
     }
     return mostRestrictive(decisions);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@noetic-tools/context",
-  "version": "1.2.2",
+  "version": "1.3.0",
   "type": "module",
   "description": "Context layer system for Noetic agents: the ContextLayer contract, lifecycle, budget/projection machinery, and built-in layer implementations.",
   "license": "Apache-2.0",
@@ -44,7 +44,7 @@
     "zod": "^4.0.0"
   },
   "dependencies": {
-    "@noetic-tools/types": "^3.2.2",
+    "@noetic-tools/types": "^3.3.0",
     "zod": "^4.0.0"
   },
   "scripts": {