Cloudflare Agents

// provision.ts — run once.
import { Naive } from "@usenaive-sdk/server";

const naive = new Naive({ apiKey: process.env.NAIVE_API_KEY! });

// Control plane: a reusable policy template.
const pro = await naive.accountKits.create({
  name: "Pro",
  primitives_config: {
    cards: { enabled: true, requiresApproval: true, defaults: { spending_limit_cents: 50000 } },
    vault: { enabled: true },
  },
  connections_config: { mode: "allowlist", toolkits: ["github", "gmail", "stripe"] },
});

// Provision one of your end-users and assign the kit.
const alice = await naive.users.create({
  external_id: "user_123",
  email: "alice@acme.com",
  account_kit_id: pro.id,
});

console.log(alice.id); // → set as the NAIVE_USER_ID var for the Worker

// wrangler.jsonc
{
  "name": "naive-agent",
  "main": "src/index.ts",
  "compatibility_date": "2026-06-30",
  "compatibility_flags": ["nodejs_compat"],
  "ai": { "binding": "AI" },
  "durable_objects": {
    "bindings": [{ "name": "NaiveAgent", "class_name": "NaiveAgent" }]
  },
  "migrations": [{ "tag": "v1", "new_sqlite_classes": ["NaiveAgent"] }],
  "vars": { "NAIVE_USER_ID": "usr_..." }
}

// src/index.ts
import { AIChatAgent } from "@cloudflare/ai-chat";
import { routeAgentRequest } from "agents";
import { createWorkersAI } from "workers-ai-provider";
import { streamText, convertToModelMessages, stepCountIs } from "ai";

interface Env {
  AI: Ai;
  NaiveAgent: DurableObjectNamespace;
  NAIVE_API_KEY: string;
  NAIVE_USER_ID: string;
}

export class NaiveAgent extends AIChatAgent<Env> {
  async onStart() {
    // Connection is restored from storage on wake — only connect once.
    if (this.getMcpServers().servers["naive"]) return;

    // Mint a per-user Naive MCP session (SSE), scoped by the user's Account Kit.
    const res = await fetch(
      `https://api.usenaive.ai/v1/users/${this.env.NAIVE_USER_ID}/sessions`,
      {
        method: "POST",
        headers: {
          Authorization: `Bearer ${this.env.NAIVE_API_KEY}`,
          "Content-Type": "application/json",
        },
        body: JSON.stringify({ ttl_ms: 24 * 60 * 60 * 1000 }), // max 24h
      },
    );
    const session = await res.json();

    // Naive's tools become this agent's tools — gated server-side for this one user.
    await this.addMcpServer("naive", session.mcp.url, {
      id: "naive", // stable id → readable tool keys, single connection per instance
      transport: { type: "sse", headers: session.mcp.headers },
    });
  }

  async onChatMessage(onFinish: Parameters<typeof streamText>[0]["onFinish"]) {
    const workersai = createWorkersAI({ binding: this.env.AI });

    const result = streamText({
      model: workersai("@cf/zai-org/glm-4.7-flash"), // adjust to a model you can access
      system:
        "You act on this user's real account through Naive tools. " +
        "Connect apps and spend only within their Account Kit.",
      messages: await convertToModelMessages(this.messages),
      tools: this.mcp.getAITools(), // Naive's tools, discovered over MCP
      stopWhen: stepCountIs(10), // cap tool-call rounds for the agentic loop
      onFinish,
    });

    return result.toUIMessageStreamResponse();
  }
}

export default {
  fetch: async (req: Request, env: Env) =>
    (await routeAgentRequest(req, env)) ?? new Response("Not found", { status: 404 }),
};