@zuora/agent-toolkit 0.1.0-alpha.0 → 0.1.0-alpha.1

package/README.md

@@ -34,6 +34,19 @@ Set `ZUORA_BASE_URL`, `ZUORA_CLIENT_ID`, and `ZUORA_CLIENT_SECRET` in your envir
 | `@zuora/agent-toolkit/vercel-ai` | `createZuoraVercelAIToolkit` | ✅ Implemented |
 | `@zuora/agent-toolkit/mcp` | — | 🚧 Coming soon |
 
+## Changelog
+
+### [0.1.0-alpha.1]
+
+- Fixed HITL approval policy handling with correct `request.environment` usage
+- Improved tool name resolution
+- Removed deprecated `CLI_AGENT_SPLIT_OPERATIONS` references
+- Test and documentation updates
+
+### [0.1.0-alpha.0]
+
+Initial alpha release.
+
 ## Installation
 
 Requires **Node.js 18** or later.
@@ -495,6 +508,7 @@ Working examples are available in the source repository:
 | `examples/openai/advanced.ts` | Observability, hooks, async jobs, discovery |
 | `examples/openai/hitl.ts` | Human-in-the-loop (HITL) approval |
 | `examples/openai-agents/index.ts` | OpenAI Agents SDK agent |
-| `examples/openai-agents-cli/` | Interactive CLI agent + planner |
+| `examples/openai-agents-cli/` | Interactive CLI agent + planner + dual-layer approval (HITL + toolkit) |
+| `examples/langchain-agents-cli/` | Interactive LangChain CLI agent + planner + dual-layer approval (HITL + toolkit) |
 | `examples/langchain/index.ts` | LangChain ReactAgent with Zuora tools |
 | `examples/vercel-ai/index.ts` | Vercel AI SDK `streamText` agent |

package/dist/langchain/index.js

@@ -4175,8 +4175,17 @@ var createHttpMcpClientConfig = (config) => {
 };
 var isTenantAuthConnection = (connection) => connection?.tenantAuth?.enabled === true;
 var filterCatalogTools = (tools, policy) => tools.filter((tool2) => {
-  if (policy.mode === SafetyMode.ReadOnly && tool2.meta.access === "write") {
-    return false;
+  if (policy.mode === SafetyMode.ReadOnly) {
+    if (tool2.meta.operationAccess) {
+      const hasReadOperation = Object.values(tool2.meta.operationAccess).some(
+        (access) => access === "read"
+      );
+      if (!hasReadOperation) {
+        return false;
+      }
+    } else if (tool2.meta.access === "write") {
+      return false;
+    }
   }
   if (policy.bundles.size > 0 && !policy.bundles.has(tool2.meta.bundle)) {
     return false;
@@ -4338,18 +4347,18 @@ var ToolkitCore = class {
       });
     }
     const mode = this.config.configuration?.mode ?? SafetyMode.ReadOnly;
-    if (mode === SafetyMode.ReadOnly && tool2.meta.access === "write") {
-      throw new ZuoraAgentToolkitError({
-        code: "TOOL_EXECUTION_ERROR",
-        message: `Write tool "${operationName}" is disabled in readOnly mode.`,
-        category: "tool_execution"
-      });
-    }
     const nativeRuntimeTool = this.nativeToolRegistry?.get(operationName);
     const nativeApprovalMetadata = nativeRuntimeTool?.approvalMetadata(input);
     const invokedOperation = tool2.meta.operationSelector ? String(input[tool2.meta.operationSelector] ?? "") : void 0;
     const effectiveAccess = (invokedOperation ? tool2.meta.operationAccess?.[invokedOperation] : void 0) ?? tool2.meta.access;
     const effectiveRiskLevel = (invokedOperation ? tool2.meta.operationRiskLevel?.[invokedOperation] : void 0) ?? tool2.meta.riskLevel;
+    if (mode === SafetyMode.ReadOnly && effectiveAccess === "write") {
+      throw new ZuoraAgentToolkitError({
+        code: "TOOL_EXECUTION_ERROR",
+        message: `Write operation "${invokedOperation ?? operationName}" is disabled in readOnly mode.`,
+        category: "tool_execution"
+      });
+    }
     const effectiveTool = effectiveAccess === tool2.meta.access && effectiveRiskLevel === tool2.meta.riskLevel ? tool2 : { ...tool2, meta: { ...tool2.meta, access: effectiveAccess, riskLevel: effectiveRiskLevel } };
     await enforceApproval(
       effectiveTool,