@arnilo/prism-coding-agent 0.0.25 → 0.0.27

package/CHANGELOG.md

@@ -1,5 +1,21 @@
 # Changelog
 
+## [0.0.27] - 2026-08-07
+
+### Added
+- `createCodingLifecycleEmitter(options?)` — consumer-gated coding lifecycle events (Phase 10): ships `process_*` (reuses `CodingProcessEvent`) plus `file_changed`, `worktree_changed`, `permission_denied`, `configuration_changed`; synchronous bounded `emit`/`on`; drops unknown/oversized events without breaking producer paths; invalid limits fail closed with `CodingLifecycleError` (`ERR_PRISM_LIFECYCLE_LIMIT`); frozen `DEFAULT_LIFECYCLE_MAX_*` / `HARD_LIFECYCLE_MAX_*` caps.
+- `onEvent` option on `createWriteTool` / `createEditTool` / `createMoveTool` / `createDeleteTool` / `createGitWorktreeTool` — tools emit `file_changed` (write/edit/move/delete) and `worktree_changed` (add/remove) after successful mutation, and `permission_denied` via the shared `enforceExecutionPolicy` deny hook (never raw tool arguments).
+- `enforceExecutionPolicy(..., onDenied?)` — optional callback invoked once per policy denial (additive; existing callers unaffected).
+
+## [0.0.26] - 2026-08-06
+
+### Added
+- `createGitHubForge(options)` — reference GitHub adapter: issue context, authenticated push (`GIT_CONFIG_*` credential injection, never argv), PR create/update, review comments, checks/status, bounded `reconcileHandoff`; every mutation gated by `ExecutionPolicy` and recorded in `ToolEffectStore` (retry never duplicates PRs/comments); typed `ERR_PRISM_FORGE_*` codes; frozen `DEFAULT_MAX_FORGE_*` / `HARD_MAX_FORGE_*` caps; no octokit dependency.
+- `createGitAwareRepositoryOperations(cwd, options?)` — ignore-aware enumeration via fixed `git ls-files` with native walker fallback; host-only `includeIgnored`; `DEFAULT_MAX_LS_FILES_OUTPUT_BYTES` / `HARD_MAX_LS_FILES_OUTPUT_BYTES`.
+- `createLanguageIntelligence(options)` — host-selected LSP 3.17 client (Content-Length framing); symbols/definitions/references/diagnostics/hover/rename; lazy spawn; `ERR_PRISM_LSP_*`; frozen `DEFAULT_MAX_LSP_*` / `HARD_MAX_LSP_*` caps.
+- `createProcessSessions(options)` — managed process sessions (start/output/input/wait/signal/kill/release); optional sandbox `startProcess` backend + `reconcile`/sandbox-loss → `unknown`; ownership/identity + expiry sweep; `CodingProcessEvent`; `ERR_PRISM_PROCESS_*`; frozen `DEFAULT_MAX_PROCESS_*` / `HARD_MAX_PROCESS_*` caps; `OutputAccumulator.readRaw` for cursor paging.
+- `CreateGitHubForgeOptions.fetch?` — host-injectable fetch (defaults to `globalThis.fetch`); enables routing forge traffic through an egress proxy and mock-fetch tests.
+
 ## [0.0.25] - 2026-08-06
 
 ### Added

package/README.md

@@ -103,11 +103,11 @@ const askUser = createAskUserDecisionTool({
 
 ### Phase 4 non-goals
 
-No PDF reader, trash daemon, PTY, or LSP tools in 0.0.21. See [coding agent tools docs](https://github.com/ashiqrniloy/prism/blob/main/docs/coding-agent-tools.md).
+No PDF reader, trash daemon, or PTY in 0.0.21. Phase 9 optionals: `createLanguageIntelligence`, `createProcessSessions`, `createGitHubForge`. See [coding agent tools docs](https://github.com/ashiqrniloy/prism/blob/main/docs/coding-agent-tools.md), [language intelligence](https://github.com/ashiqrniloy/prism/blob/main/docs/language-intelligence.md), [process sessions](https://github.com/ashiqrniloy/prism/blob/main/docs/process-sessions.md), and [forge integration](https://github.com/ashiqrniloy/prism/blob/main/docs/forge-integration.md).
 
 ## Exports
 
-Factories: `createShellTool`, `createReadTool`, `createWriteTool`, `createEditTool`, `createRepoListTool`, `createRepoSearchTool`, `createGlobTool`, `createDeleteTool`, `createMoveTool`, `createCodingTools`, `createReadOnlyTools`, `createAllTools`, `createGitTools`, `createCodingCheckTool`, `createAskUserDecisionTool`, `createLocalBashOperations`, `createLocalRepositoryOperations`, `createGitOperations`, `createReadPathSet`.
+Factories: `createShellTool`, `createReadTool`, `createWriteTool`, `createEditTool`, `createRepoListTool`, `createRepoSearchTool`, `createGlobTool`, `createDeleteTool`, `createMoveTool`, `createCodingTools`, `createReadOnlyTools`, `createAllTools`, `createGitTools`, `createCodingCheckTool`, `createAskUserDecisionTool`, `createLocalBashOperations`, `createLocalRepositoryOperations`, `createGitAwareRepositoryOperations`, `createLanguageIntelligence`, `createProcessSessions`, `createGitHubForge`, `createGitOperations`, `createReadPathSet`.
 
 Helpers: `detectSupportedImageMimeType`, `detectSupportedImageMimeTypeFromFile`, `getShellConfig`, `killProcessTree`, `waitForChildProcess`, `withFileMutationQueue`, `resolveRepositoryLimits`, `matchGlobPattern`, `validateGlobPattern`, `writeCodingPlanFile`, `readCodingPlanFile`, `buildCodingCheckpointMetadata`, `validateCodingCheckpointMetadata`, `assertCodingResumeAllowed`, `fingerprintJson`, `runCodingGoalVerify`, `createCodingGoalVerifyWorkflow`, `suspendAskUserDecision`, `createAskUserDecisionResumeValidator`, `validateAskUserDecisionResume`, `validateAskUserDecisionAgentResume`. Default/hard coding, repository, Git, and plan/checkpoint limit constants are exported for host configuration.
 

package/dist/delete.d.ts

@@ -1,4 +1,5 @@
 import type { ExecutionPolicy, ToolDefinition } from "@arnilo/prism";
+import type { CodingLifecycleEvent } from "./lifecycle.js";
 export interface MutationStat {
     isFile(): boolean;
     isDirectory(): boolean;
@@ -22,5 +23,7 @@ export interface DeleteOperations {
 export interface DeleteToolOptions {
     executionPolicy?: ExecutionPolicy;
     operations?: DeleteOperations;
+    /** Optional consumer-gated lifecycle listener (file_changed / permission_denied). */
+    onEvent?: (event: CodingLifecycleEvent) => void;
 }
 export declare function createDeleteTool(cwd: string, options?: DeleteToolOptions): ToolDefinition;

package/dist/delete.js

@@ -62,7 +62,7 @@ export function createDeleteTool(cwd, options) {
                     paths: [absolutePath],
                     risk: "high",
                     metadata: { sessionId: context.sessionId, runId: context.runId, signal: context.signal },
-                }, toolCallId, "delete");
+                }, toolCallId, "delete", (denied) => options?.onEvent?.({ type: "permission_denied", ...denied }));
                 if (!policyCheck.allowed)
                     return policyCheck.result;
                 const allowedPath = policyCheck.action.paths?.[0] ?? absolutePath;
@@ -84,6 +84,7 @@ export function createDeleteTool(cwd, options) {
                         return errorResult(toolCallId, "Operation aborted");
                     if (st.isFile() || st.isSymbolicLink()) {
                         await ops.unlink(allowedPath, { signal: context.signal });
+                        options?.onEvent?.({ type: "file_changed", path: allowedPath, op: "delete", toolCallId });
                         return {
                             toolCallId,
                             name: "delete",
@@ -97,6 +98,7 @@ export function createDeleteTool(cwd, options) {
                             return errorResult(toolCallId, `Directory is not empty: ${path}. Recursive delete is not supported.`);
                         }
                         await ops.rmdir(allowedPath, { signal: context.signal });
+                        options?.onEvent?.({ type: "file_changed", path: allowedPath, op: "delete", toolCallId });
                         return {
                             toolCallId,
                             name: "delete",

package/dist/edit.d.ts

@@ -21,6 +21,7 @@
  */
 import { Buffer } from "node:buffer";
 import type { ExecutionPolicy, ToolDefinition } from "@arnilo/prism";
+import type { CodingLifecycleEvent } from "./lifecycle.js";
 import { type ReadBeforeWriteOptions } from "./read-path-set.js";
 export interface Edit {
     oldText: string;
@@ -71,5 +72,7 @@ export interface EditToolOptions extends ReadBeforeWriteOptions {
     maxInputBytes?: number;
     /** Maximum replacements per call (default 100). */
     maxEdits?: number;
+    /** Optional consumer-gated lifecycle listener (file_changed / permission_denied). */
+    onEvent?: (event: CodingLifecycleEvent) => void;
 }
 export declare function createEditTool(cwd: string, options?: EditToolOptions): ToolDefinition;

package/dist/edit.js

@@ -149,7 +149,7 @@ export function createEditTool(cwd, options) {
                     paths: [absolutePath],
                     risk: "medium",
                     metadata: { editCount: edits.length, sessionId: context.sessionId, runId: context.runId, signal: context.signal },
-                }, toolCallId, "edit");
+                }, toolCallId, "edit", (denied) => options?.onEvent?.({ type: "permission_denied", ...denied }));
                 if (!policyCheck.allowed)
                     return policyCheck.result;
                 const allowedPath = policyCheck.action.paths?.[0] ?? absolutePath;
@@ -203,6 +203,7 @@ export function createEditTool(cwd, options) {
                         return errorResult(toolCallId, "Operation aborted");
                     const finalContent = bom + restoreLineEndings(newContent, originalEnding);
                     await ops.writeFile(allowedPath, finalContent, { signal: context.signal });
+                    options?.onEvent?.({ type: "file_changed", path: allowedPath, op: "edit", toolCallId });
                     const diffResult = generateDiffString(baseContent, newContent);
                     const patch = generateUnifiedPatch(prepared.path, baseContent, newContent);
                     return {

package/dist/execution-policy.d.ts

@@ -1,5 +1,11 @@
 import type { ExecutionAction, ExecutionPolicy, ToolResult } from "@arnilo/prism";
-export declare function enforceExecutionPolicy(policy: ExecutionPolicy | undefined, action: ExecutionAction, toolCallId: string, toolName: string): Promise<{
+export declare function enforceExecutionPolicy(policy: ExecutionPolicy | undefined, action: ExecutionAction, toolCallId: string, toolName: string, 
+/** Called once on policy denial so one site emits lifecycle permission_denied for every tool. */
+onDenied?: (input: {
+    readonly toolCallId: string;
+    readonly toolName: string;
+    readonly reason: string;
+}) => void): Promise<{
     allowed: true;
     action: ExecutionAction;
 } | {

package/dist/execution-policy.js

@@ -1,5 +1,7 @@
 import { assertExecutionAllowed, ExecutionDeniedError } from "@arnilo/prism";
-export async function enforceExecutionPolicy(policy, action, toolCallId, toolName) {
+export async function enforceExecutionPolicy(policy, action, toolCallId, toolName, 
+/** Called once on policy denial so one site emits lifecycle permission_denied for every tool. */
+onDenied) {
     if (!policy)
         return { allowed: true, action };
     try {
@@ -12,6 +14,7 @@ export async function enforceExecutionPolicy(policy, action, toolCallId, toolNam
             : error instanceof Error
                 ? error.message
                 : String(error);
+        onDenied?.({ toolCallId, toolName, reason: message });
         return {
             allowed: false,
             result: {

package/dist/forge/github.d.ts

@@ -0,0 +1,2 @@
+import type { CreateGitHubForgeOptions, ForgeOperations } from "./types.js";
+export declare function createGitHubForge(options: CreateGitHubForgeOptions): ForgeOperations;