@arnilo/prism-server 0.0.5 → 0.0.7

package/CHANGELOG.md

@@ -1,6 +1,12 @@
 # Changelog
 
-## [Unreleased]
+## [0.0.7] - 2026-07-19
+
+- Explicit `agentRuns` lifecycle capabilities expose bounded redacted durable agent status/resume routes through core CAS/fingerprint checks; no lifecycle route is enabled by default.
+
+## [0.0.6] - 2026-07-19
+
+- Workflow cancellation now forwards the registered revised definition and exact authorized ownership for pre-abort hash/owner verification.
 
 ## [0.0.5] - 2026-07-16
 

package/README.md

@@ -24,7 +24,7 @@ const response = await handler(new Request("https://api.example.test/prism/agent
 }));
 ```
 
-Routes: direct/SSE agent run, direct/SSE workflow run, durable workflow enqueue/status/cancel/resume/replay, and optional ownership-scoped schedule create/list/pause/resume/trigger/delete. All bodies, responses, events, queues, concurrency, and timeouts are bounded.
+Routes: direct/SSE agent run, explicitly selected durable agent status/resume through `agentRuns`, direct/SSE workflow run, durable workflow enqueue/status/cancel/resume/replay, and optional ownership-scoped schedule create/list/pause/resume/trigger/delete. `agentRuns` uses core `createAgentRunLifecycle()`; no lifecycle route exists by default. All bodies, responses, events, queues, concurrency, and timeouts are bounded.
 
 Nothing is exposed by default. Authorization is required; ownership comes only from its result. No listener, framework, auth provider, user database, credential discovery, or hidden package activation ships.
 

package/dist/handler.js

@@ -1,3 +1,4 @@
+import { AgentRunStateError } from "@arnilo/prism";
 import { cancelWorkflowRun, createWorkflowEventBus, enqueueWorkflow, getWorkflowRun, replayWorkflow, resumeWorkflow, runWorkflow, } from "@arnilo/prism-workflows";
 import { resolvePrismServerLimits } from "./limits.js";
 import { PrismServerError } from "./types.js";
@@ -93,6 +94,38 @@ export function createPrismHandler(options) {
                     owned.dispose();
                 }
             }
+            if (route.kind === "agent-status" || route.kind === "agent-resume") {
+                const exposure = options.agentRuns?.[route.capabilityId];
+                if (!exposure)
+                    throw new PrismServerError("Not found", 404, "ERR_PRISM_SERVER_NOT_FOUND");
+                if (route.kind === "agent-status") {
+                    const owned = ownedSignal(request, limits.requestTimeoutMs, options.disconnectAborts ?? true);
+                    try {
+                        return respond(json(await awaitWithSignal(exposure.lifecycle.status({ runId: route.runId }, {
+                            ownership: authorization.ownership,
+                            signal: owned.signal,
+                            agentId: route.capabilityId,
+                        }), owned.signal), 200, limits, options));
+                    }
+                    finally {
+                        owned.dispose();
+                    }
+                }
+                acquire();
+                const owned = ownedSignal(request, limits.requestTimeoutMs, options.disconnectAborts ?? true);
+                try {
+                    const body = await readJsonObject(request, limits.maxRequestBytes, owned.signal);
+                    return respond(json(await awaitWithSignal(exposure.lifecycle.resume({ runId: route.runId }, readAgentResume(body), {
+                        ownership: authorization.ownership,
+                        signal: owned.signal,
+                        agentId: route.capabilityId,
+                    }), owned.signal), 200, limits, options));
+                }
+                finally {
+                    owned.dispose();
+                    release();
+                }
+            }
             if (route.kind === "agent-run" || route.kind === "agent-stream") {
                 const exposure = options.agents?.[route.capabilityId];
                 if (!exposure)
@@ -197,6 +230,7 @@ export function createPrismHandler(options) {
                     const result = await awaitWithSignal(cancelWorkflowRun({
                         workflowId: exposure.definition.id,
                         runId: route.runId,
+                        workflow: exposure.definition,
                         checkpoints: exposure.checkpoints,
                         ownership: authorization.ownership,
                         signal: owned.signal,
@@ -321,6 +355,12 @@ function parseRoute(request, base) {
     if (group === "agents" && segment === "stream" && parts.length === 3 && request.method === "POST") {
         return { kind: "agent-stream", operation: "agent.stream", capabilityId: id };
     }
+    if (group === "agents" && segment === "runs" && runId && validId(runId)) {
+        if (parts.length === 4 && request.method === "GET")
+            return { kind: "agent-status", operation: "agent.status", capabilityId: id, runId };
+        if (parts.length === 5 && action === "resume" && request.method === "POST")
+            return { kind: "agent-resume", operation: "agent.resume", capabilityId: id, runId };
+    }
     if (group !== "workflows")
         return undefined;
     if (segment === "runs" && parts.length === 3 && request.method === "POST") {
@@ -458,6 +498,18 @@ function isMessage(value) {
     const item = value;
     return ["system", "user", "assistant", "tool"].includes(String(item.role)) && Array.isArray(item.content);
 }
+function readAgentResume(body) {
+    if (Object.keys(body).some((key) => key !== "decision" && key !== "expectedVersion")) {
+        throw new PrismServerError("Invalid agent resume body", 400, "ERR_PRISM_SERVER_RESUME");
+    }
+    if (body.decision !== "approve" && body.decision !== "deny") {
+        throw new PrismServerError("decision must be approve or deny", 400, "ERR_PRISM_SERVER_RESUME");
+    }
+    if (!Number.isSafeInteger(body.expectedVersion) || Number(body.expectedVersion) < 1) {
+        throw new PrismServerError("expectedVersion must be a positive safe integer", 400, "ERR_PRISM_SERVER_RESUME");
+    }
+    return { decision: body.decision, expectedVersion: Number(body.expectedVersion) };
+}
 function readResume(body) {
     if (body.decision !== "approve" && body.decision !== "deny") {
         throw new PrismServerError("decision must be approve or deny", 400, "ERR_PRISM_SERVER_RESUME");
@@ -636,9 +688,10 @@ function errorResponse(error, limits, options) {
                         ? { status: 409, code: workflowCode, message: "Workflow checkpoint operation rejected" }
                         : undefined;
     const known = error instanceof PrismServerError;
-    const status = mapped?.status ?? (known ? error.status : error instanceof DOMException && error.name === "AbortError" ? 499 : 500);
-    const code = mapped?.code ?? (known ? error.code : status === 499 ? "ERR_PRISM_SERVER_ABORTED" : "ERR_PRISM_SERVER_INTERNAL");
-    const message = mapped?.message ?? (known ? error.message : status === 499 ? "Request aborted" : "Internal server error");
+    const agentState = error instanceof AgentRunStateError;
+    const status = mapped?.status ?? (agentState ? 404 : known ? error.status : error instanceof DOMException && error.name === "AbortError" ? 499 : 500);
+    const code = mapped?.code ?? (agentState ? "ERR_PRISM_SERVER_NOT_FOUND" : known ? error.code : status === 499 ? "ERR_PRISM_SERVER_ABORTED" : "ERR_PRISM_SERVER_INTERNAL");
+    const message = mapped?.message ?? (agentState ? "Not found" : known ? error.message : status === 499 ? "Request aborted" : "Internal server error");
     try {
         return json({ error: { code, message } }, status, limits, options);
     }

package/dist/index.d.ts

@@ -1,6 +1,6 @@
 export { createPrismHandler } from "./handler.js";
 export { DEFAULT_MAX_REQUEST_BYTES, HARD_MAX_REQUEST_BYTES, DEFAULT_MAX_RESPONSE_BYTES, HARD_MAX_RESPONSE_BYTES, DEFAULT_MAX_EVENT_BYTES, HARD_MAX_EVENT_BYTES, DEFAULT_MAX_STREAM_BYTES, HARD_MAX_STREAM_BYTES, DEFAULT_MAX_STREAM_EVENTS, HARD_MAX_STREAM_EVENTS, DEFAULT_MAX_CONCURRENT_RUNS, HARD_MAX_CONCURRENT_RUNS, DEFAULT_MAX_QUEUED_EVENTS, HARD_MAX_QUEUED_EVENTS, DEFAULT_REQUEST_TIMEOUT_MS, HARD_REQUEST_TIMEOUT_MS, resolvePrismServerLimits, } from "./limits.js";
 export type { PrismServerLimits, ResolvedPrismServerLimits, } from "./limits.js";
-export type { PrismServerOperation, PrismServerAuthorization, PrismServerAuthorizationInput, PrismServerAuthorizer, PrismAgentExposure, PrismWorkflowExposure, PrismScheduleExposure, CreatePrismHandlerOptions, PrismRequestHandler, } from "./types.js";
+export type { PrismServerOperation, PrismServerAuthorization, PrismServerAuthorizationInput, PrismServerAuthorizer, PrismAgentExposure, PrismAgentRunExposure, PrismWorkflowExposure, PrismScheduleExposure, CreatePrismHandlerOptions, PrismRequestHandler, } from "./types.js";
 export { PrismServerError } from "./types.js";
 export declare const packageName = "@arnilo/prism-server";

package/dist/types.d.ts

@@ -1,7 +1,7 @@
-import type { Agent, AgentSession, OwnershipScope, RunOptions, SecretRedactor } from "@arnilo/prism";
+import type { Agent, AgentRunLifecycle, AgentSession, OwnershipScope, RunOptions, SecretRedactor } from "@arnilo/prism";
 import type { RunWorkflowOptions, WorkflowCheckpointAdapter, WorkflowDefinition, WorkflowSchedules } from "@arnilo/prism-workflows";
 import type { PrismServerLimits } from "./limits.js";
-export type PrismServerOperation = "agent.run" | "agent.stream" | "workflow.run" | "workflow.stream" | "workflow.status" | "workflow.cancel" | "workflow.resume" | "workflow.enqueue" | "workflow.replay" | "schedule.create" | "schedule.list" | "schedule.pause" | "schedule.resume" | "schedule.trigger" | "schedule.delete";
+export type PrismServerOperation = "agent.run" | "agent.stream" | "agent.status" | "agent.resume" | "workflow.run" | "workflow.stream" | "workflow.status" | "workflow.cancel" | "workflow.resume" | "workflow.enqueue" | "workflow.replay" | "schedule.create" | "schedule.list" | "schedule.pause" | "schedule.resume" | "schedule.trigger" | "schedule.delete";
 export interface PrismServerAuthorization {
     readonly ownership: OwnershipScope;
     readonly metadata?: Readonly<Record<string, unknown>>;
@@ -17,6 +17,10 @@ export interface PrismAgentExposure {
     readonly sessionFactory: (authorization: PrismServerAuthorization) => AgentSession | Promise<AgentSession>;
     readonly runOptions?: Omit<RunOptions, "ownership" | "signal" | "redactor">;
 }
+/** Explicit durable status/resume capability. Omit it to expose no agent lifecycle routes. */
+export interface PrismAgentRunExposure {
+    readonly lifecycle: AgentRunLifecycle;
+}
 export interface PrismWorkflowExposure {
     readonly definition: WorkflowDefinition;
     readonly checkpoints: WorkflowCheckpointAdapter;
@@ -25,6 +29,8 @@ export interface PrismWorkflowExposure {
 export type PrismScheduleExposure = WorkflowSchedules | ((authorization: PrismServerAuthorization, signal: AbortSignal) => WorkflowSchedules | Promise<WorkflowSchedules>);
 export interface CreatePrismHandlerOptions {
     readonly agents?: Readonly<Record<string, Agent | PrismAgentExposure>>;
+    /** Durable agent lifecycle capabilities, separate from direct agent run exposure. */
+    readonly agentRuns?: Readonly<Record<string, PrismAgentRunExposure>>;
     readonly workflows?: Readonly<Record<string, PrismWorkflowExposure>>;
     readonly schedules?: PrismScheduleExposure;
     readonly authorize: PrismServerAuthorizer;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@arnilo/prism-server",
-  "version": "0.0.5",
+  "version": "0.0.7",
   "description": "Optional framework-free Web Request-to-Response handler for explicitly selected Prism agents and workflows.",
   "type": "module",
   "main": "./dist/index.js",
@@ -25,8 +25,8 @@
     "pack:dry-run": "npm pack --dry-run"
   },
   "peerDependencies": {
-    "@arnilo/prism": "0.0.5",
-    "@arnilo/prism-workflows": "0.0.5"
+    "@arnilo/prism": "0.0.7",
+    "@arnilo/prism-workflows": "0.0.7"
   },
   "devDependencies": {
     "@arnilo/prism": "file:../..",