+ Arcjet Cloudflare Think agent example
+
+ A Cloudflare Think beforeToolCall support agent looks up
+ orders. Arcjet screens inbound prompt injection
+ before the Think turn, and
+ guardHooks (hooks.beforeToolCall(ctx)) is the
+ tool-call gate. Default DENY is
+ { action: "substitute", output: ArcjetDenialResult } — the
+ tool never runs and the model sees the payload.
+
+
+ This is Cloudflare Think (@cloudflare/think 0.x), not the
+ Vercel AI SDK. There is no guardTool.
+ needsApproval is a human-in-the-loop pause, not a
+ deny. Same trap as Mastra requireApproval and Claude
+ canUseTool. There is no guardApproval.
+ Correlation is a caller-owned id on helper options / context — never
+ toolCallId, never Durable Object name /
+ id.
+
+
+
+
+
+ Response
+
+
+ Correlation ID:
+
+
+
+ Tool results
+
+
+
+
+
+
+
+
diff --git a/examples/cloudflare-think-agent/index.ts b/examples/cloudflare-think-agent/index.ts
new file mode 100644
index 0000000..35b0f16
--- /dev/null
+++ b/examples/cloudflare-think-agent/index.ts
@@ -0,0 +1,116 @@
+import { readFile } from "node:fs/promises";
+import {
+ createServer,
+ type IncomingMessage,
+ type ServerResponse,
+} from "node:http";
+import { z } from "zod";
+import { runAgent } from "./lib/agent.ts";
+
+function requestPath(url: string | undefined): string {
+ if (url === undefined) {
+ return "";
+ }
+ return new URL(url, "http://localhost").pathname;
+}
+
+const conversationIdSchema = z
+ .string()
+ .min(1)
+ .max(256)
+ // Same 1–256 printable-ASCII window cloudflareThinkContext accepts.
+ .regex(/^[\x20-\x7E]+$/);
+
+const requestSchema = z.object({
+ message: z.string().min(1).max(2000),
+ // Caller-owned id only. Copied onto cloudflareThinkContext / guardHooks
+ // sessionId. Never minted. Never toolCallId. Never Durable Object ids.
+ conversationId: conversationIdSchema.optional(),
+ // Optional Think DENY delivery. Default is substitute.
+ onDeny: z.literal("block").optional(),
+});
+
+const page = await readFile(new URL("./index.html", import.meta.url), "utf8");
+const MAX_JSON_BODY_BYTES = 32 * 1024;
+
+async function readJson(request: IncomingMessage): Promise
+