@arnilo/prism-server 0.0.24 → 0.0.25

package/CHANGELOG.md

@@ -1,5 +1,15 @@
 # Changelog
 
+## [0.0.25] - 2026-08-06
+
+### Added
+- Agent resume accepts batch `decisions: RunDecision[]` (exclusive with legacy binary `decision`) with boundary validation.
+
+### Changed
+- Released with exact 0.0.25 graph.
+
+See [migration guide](../../docs/migration.md) for the 0.0.24 → 0.0.25 notes.
+
 ## [0.0.24] - 2026-08-04
 
 ### Added

package/README.md

@@ -24,7 +24,7 @@ const response = await handler(new Request("https://api.example.test/prism/agent
 }));
 ```
 
-Routes: direct/SSE agent run, cross-replica durable event reconnect through object agent exposures with `events` + `resolveRun`, explicitly selected durable agent status/resume through `agentRuns`, direct/SSE workflow run, durable workflow enqueue/status/cancel/resume/replay, and optional ownership-scoped schedule create/list/pause/resume/trigger/delete. `agentRuns` uses core `createAgentRunLifecycle()`; no lifecycle route exists by default. All bodies, responses, events, queues, concurrency, and timeouts are bounded.
+Routes: direct/SSE agent run, cross-replica durable event reconnect through object agent exposures with `events` + `resolveRun`, explicitly selected durable agent status/resume through `agentRuns`, direct/SSE workflow run, durable workflow enqueue/status/cancel/resume/replay, and optional ownership-scoped schedule create/list/pause/resume/trigger/delete. `agentRuns` uses core `createAgentRunLifecycle()`; no lifecycle route exists by default. Agent resume accepts legacy binary `decision` or batch `decisions: RunDecision[]` (exactly one). All bodies, responses, events, queues, concurrency, and timeouts are bounded.
 
 Optional 0.0.14 co-work handlers (mount beside the API handler): `createConversationHandler` (durable user-scoped conversation threads with reconnectable redacted replay — `createConversationService`) and `createArtifactHandler` (artifact revisions, approve/reject review, expiring authorized delivery links — `createArtifactService` over the existing checkpoint store). Both are ownership-scoped and fail closed without authorization.
 

package/dist/handler.js

@@ -1,4 +1,4 @@
-import { AgentRunStateError, assertIdentityActive, assertIdentityMatchesOwnership, } from "@arnilo/prism";
+import { AgentRunStateError, assertIdentityActive, assertIdentityMatchesOwnership, HARD_MAX_DECISION_REASON_BYTES, HARD_MAX_ELICITATION_BYTES, HARD_MAX_PENDING_DECISIONS, } from "@arnilo/prism";
 import { cancelWorkflowRun, createWorkflowEventBus, enqueueWorkflow, getWorkflowRun, replayWorkflow, resumeWorkflow, runWorkflow, } from "@arnilo/prism-workflows";
 import { isAdmitOperation } from "./drain.js";
 import { resolvePrismServerLimits } from "./limits.js";
@@ -558,17 +558,66 @@ function isMessage(value) {
     const item = value;
     return ["system", "user", "assistant", "tool"].includes(String(item.role)) && Array.isArray(item.content);
 }
+const RUN_DECISION_OUTCOMES = new Set(["allow_once", "allow_for_run", "reject_once", "reject_for_run"]);
+const RUN_DECISION_KEYS = new Set(["approvalId", "outcome", "reason", "modifiedArguments", "elicitation"]);
+/** Boundary validation for a client-supplied decision batch; core re-validates under CAS. */
+function readAgentDecisions(value) {
+    if (!Array.isArray(value) || value.length === 0 || value.length > HARD_MAX_PENDING_DECISIONS) {
+        throw new PrismServerError("decisions must be a non-empty bounded array", 400, "ERR_PRISM_SERVER_RESUME");
+    }
+    return value.map((entry) => {
+        if (!entry || typeof entry !== "object" || Array.isArray(entry)) {
+            throw new PrismServerError("decision entry must be an object", 400, "ERR_PRISM_SERVER_RESUME");
+        }
+        const row = entry;
+        if (Object.keys(row).some((key) => !RUN_DECISION_KEYS.has(key))) {
+            throw new PrismServerError("decision entry has unknown keys", 400, "ERR_PRISM_SERVER_RESUME");
+        }
+        if (typeof row.approvalId !== "string" || row.approvalId.length === 0 || row.approvalId.length > 128) {
+            throw new PrismServerError("decision approvalId is invalid", 400, "ERR_PRISM_SERVER_RESUME");
+        }
+        if (typeof row.outcome !== "string" || !RUN_DECISION_OUTCOMES.has(row.outcome)) {
+            throw new PrismServerError("decision outcome is invalid", 400, "ERR_PRISM_SERVER_RESUME");
+        }
+        if (row.reason !== undefined &&
+            (typeof row.reason !== "string" || Buffer.byteLength(row.reason, "utf8") > HARD_MAX_DECISION_REASON_BYTES)) {
+            throw new PrismServerError("decision reason exceeds limits", 400, "ERR_PRISM_SERVER_RESUME");
+        }
+        for (const key of ["modifiedArguments", "elicitation"]) {
+            const field = row[key];
+            if (field === undefined)
+                continue;
+            if (!field || typeof field !== "object" || Array.isArray(field)) {
+                throw new PrismServerError(`decision ${key} must be an object`, 400, "ERR_PRISM_SERVER_RESUME");
+            }
+            const text = JSON.stringify(field);
+            if (text === undefined || Buffer.byteLength(text, "utf8") > HARD_MAX_ELICITATION_BYTES) {
+                throw new PrismServerError(`decision ${key} exceeds limits`, 400, "ERR_PRISM_SERVER_RESUME");
+            }
+        }
+        return entry;
+    });
+}
 function readAgentResume(body) {
-    if (Object.keys(body).some((key) => key !== "decision" && key !== "expectedVersion")) {
+    if (Object.keys(body).some((key) => key !== "decision" && key !== "decisions" && key !== "expectedVersion")) {
         throw new PrismServerError("Invalid agent resume body", 400, "ERR_PRISM_SERVER_RESUME");
     }
-    if (body.decision !== "approve" && body.decision !== "deny") {
-        throw new PrismServerError("decision must be approve or deny", 400, "ERR_PRISM_SERVER_RESUME");
-    }
     if (!Number.isSafeInteger(body.expectedVersion) || Number(body.expectedVersion) < 1) {
         throw new PrismServerError("expectedVersion must be a positive safe integer", 400, "ERR_PRISM_SERVER_RESUME");
     }
-    return { decision: body.decision, expectedVersion: Number(body.expectedVersion) };
+    if (body.decision !== undefined && body.decisions !== undefined) {
+        throw new PrismServerError("provide exactly one of decision or decisions", 400, "ERR_PRISM_SERVER_RESUME");
+    }
+    if (body.decision !== undefined) {
+        if (body.decision !== "approve" && body.decision !== "deny") {
+            throw new PrismServerError("decision must be approve or deny", 400, "ERR_PRISM_SERVER_RESUME");
+        }
+        return { decision: body.decision, expectedVersion: Number(body.expectedVersion) };
+    }
+    if (body.decisions === undefined) {
+        throw new PrismServerError("provide decision or decisions", 400, "ERR_PRISM_SERVER_RESUME");
+    }
+    return { decisions: readAgentDecisions(body.decisions), expectedVersion: Number(body.expectedVersion) };
 }
 function readResume(body) {
     if (body.decision !== "approve" && body.decision !== "deny") {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@arnilo/prism-server",
-  "version": "0.0.24",
+  "version": "0.0.25",
   "description": "Optional framework-free Web Request-to-Response handler for explicitly selected Prism agents and workflows.",
   "type": "module",
   "main": "./dist/index.js",
@@ -25,8 +25,8 @@
     "pack:dry-run": "npm pack --dry-run"
   },
   "peerDependencies": {
-    "@arnilo/prism": "0.0.24",
-    "@arnilo/prism-workflows": "0.0.24"
+    "@arnilo/prism": "0.0.25",
+    "@arnilo/prism-workflows": "0.0.25"
   },
   "devDependencies": {
     "@arnilo/prism": "file:../..",