Chat SDK 納入 AI SDK Tools：Agent 功能應先設計權限邊界
Tech
·Dante Chun
這次整合降低了把 agent tool 接入聊天產品的成本。但執行變得更容易，也代表權限、審批、稽核紀錄與復原路徑必須更早設計。
開發者社群的訊號很一致：哪些 tool 可以開放，何時必須使用者確認，失敗後如何解釋與復原。這些問題應寫進產品策略。
What changed
Vercel announced on May 20, 2026 that Chat SDK now includes an AI SDK toolset. The important pieces are chat/ai and createChatTools(chat), which make chat state and agent actions easier to connect.
Practical takeaway
- Separate read-only tools from write tools.
- Require approval for actions that change external systems.
- Log inputs, actor, approver, result, and failure reason.
- Design rollback or human escalation before launch.
- Keep hard restrictions in server policy, not only prompts.
Risk
The risk is not tool calling itself. The risk is giving a model product authority without a visible control surface. Good agent UX automates low-risk work and slows down only where trust requires it.