@arnilo/prism 0.0.15 → 0.0.17

package/dist/cache-helpers.js

@@ -1,5 +1,8 @@
 export function sanitizeCacheKey(value, maxLength) {
-    const key = value?.replace(/[^A-Za-z0-9_.:-]+/g, "-").replace(/^-+|-+$/g, "").slice(0, Math.max(0, maxLength));
+    const key = value
+        ?.replace(/[^A-Za-z0-9_.:-]+/g, "-")
+        .replace(/^-+|-+$/g, "")
+        .slice(0, Math.max(0, maxLength));
     return key || undefined;
 }
 export function mapCacheRetention(retention, model) {
@@ -37,7 +40,7 @@ export function cacheSavings(usage, model) {
     const cacheRead = model.cost?.cacheRead;
     if (read === undefined || input === undefined || cacheRead === undefined)
         return undefined;
-    return read * Math.max(0, input - cacheRead) / costUnitDivisor(model.cost?.unit);
+    return (read * Math.max(0, input - cacheRead)) / costUnitDivisor(model.cost?.unit);
 }
 export function cacheUsageReport(usage, model) {
     if (!usage)
@@ -48,17 +51,23 @@ export function cacheUsageReport(usage, model) {
         cacheWriteTokens: usage.cacheWriteTokens ?? 0,
         hitRate: cacheHitRate(usage),
         estimatedSavings,
-        currency: estimatedSavings === undefined ? usage.currency : model?.cost?.currency ?? usage.currency,
+        currency: estimatedSavings === undefined ? usage.currency : (model?.cost?.currency ?? usage.currency),
     };
 }
 function resolveBreakpoint(messages, breakpoint) {
     switch (breakpoint.location) {
-        case "system_prompt": return messages.findIndex((message) => message.role === "system");
-        case "tools": return messages.findIndex((message) => message.role === "tool" || message.content.some((block) => block.type === "tool_call" || block.type === "tool_result"));
-        case "stable_context": return messages.findIndex((message) => message.role !== "system");
-        case "last_stable_message": return messages.length > 1 ? messages.length - 2 : messages.length - 1;
-        case "last_user_message": return findLastIndex(messages, (message) => message.role === "user");
-        case "message_id": return messages.findIndex((message) => message.id === breakpoint.messageId);
+        case "system_prompt":
+            return messages.findIndex((message) => message.role === "system");
+        case "tools":
+            return messages.findIndex((message) => message.role === "tool" || message.content.some((block) => block.type === "tool_call" || block.type === "tool_result"));
+        case "stable_context":
+            return messages.findIndex((message) => message.role !== "system");
+        case "last_stable_message":
+            return messages.length > 1 ? messages.length - 2 : messages.length - 1;
+        case "last_user_message":
+            return findLastIndex(messages, (message) => message.role === "user");
+        case "message_id":
+            return messages.findIndex((message) => message.id === breakpoint.messageId);
     }
 }
 function findLastIndex(items, predicate) {

package/dist/checkpoints.d.ts

@@ -6,6 +6,10 @@ export declare class CheckpointConflictError extends Error {
 }
 export interface MemoryCheckpointStoreOptions {
     readonly maxPageSize?: number;
+    /** Capacity bound: least-recently-saved records are evicted past this count (default 10_000). */
+    readonly maxRecords?: number;
+    /** Per-record bound on the JSON-encoded value in bytes (default 1 MiB); oversized values are rejected. */
+    readonly maxValueBytes?: number;
 }
 /** In-process reference implementation of the generic checkpoint contract. */
 export declare function createMemoryCheckpointStore(options?: MemoryCheckpointStoreOptions): CheckpointStore;

package/dist/checkpoints.js

@@ -6,10 +6,14 @@ export class CheckpointConflictError extends Error {
         this.name = "CheckpointConflictError";
     }
 }
+const DEFAULT_MAX_CHECKPOINT_RECORDS = 10_000;
+const DEFAULT_MAX_CHECKPOINT_VALUE_BYTES = 1024 * 1024;
 /** In-process reference implementation of the generic checkpoint contract. */
 export function createMemoryCheckpointStore(options = {}) {
     const records = new Map();
     const maxPageSize = Math.max(1, options.maxPageSize ?? 500);
+    const maxRecords = Math.max(1, options.maxRecords ?? DEFAULT_MAX_CHECKPOINT_RECORDS);
+    const maxValueBytes = Math.max(1, options.maxValueBytes ?? DEFAULT_MAX_CHECKPOINT_VALUE_BYTES);
     return {
         async saveCheckpoint(input) {
             throwIfAborted(input.signal);
@@ -32,6 +36,9 @@ export function createMemoryCheckpointStore(options = {}) {
             }
             const now = new Date().toISOString();
             const value = cloneJson(input.value, "Checkpoint value");
+            if (new TextEncoder().encode(JSON.stringify(value)).length > maxValueBytes) {
+                throw new RangeError(`Checkpoint value exceeds maxValueBytes (${maxValueBytes})`);
+            }
             const metadata = input.metadata === undefined ? undefined : cloneJson(input.metadata, "Checkpoint metadata");
             const record = {
                 namespace: input.namespace,
@@ -45,7 +52,12 @@ export function createMemoryCheckpointStore(options = {}) {
                 updatedAt: now,
                 ...(metadata === undefined ? {} : { metadata }),
             };
+            // delete+set moves an updated record to the end, keeping Map order = least- to
+            // most-recently-saved, so capacity eviction is O(1) off the front.
+            records.delete(id);
             records.set(id, record);
+            while (records.size > maxRecords)
+                records.delete(records.keys().next().value);
             return record;
         },
         async loadCheckpoint(input) {
@@ -61,9 +73,7 @@ export function createMemoryCheckpointStore(options = {}) {
             throwIfAborted(query.signal);
             const offset = decodeCursor(query.cursor);
             const limit = Math.min(Math.max(1, query.limit ?? 100), maxPageSize);
-            const categories = query.category === undefined
-                ? undefined
-                : new Set(Array.isArray(query.category) ? query.category : [query.category]);
+            const categories = query.category === undefined ? undefined : new Set(Array.isArray(query.category) ? query.category : [query.category]);
             const items = [...records.values()]
                 .filter((record) => query.namespace === undefined || record.namespace === query.namespace)
                 .filter((record) => query.keyPrefix === undefined || record.key.startsWith(query.keyPrefix))
@@ -104,14 +114,12 @@ function ownership(input) {
     };
 }
 function ownershipMatches(expected, actual) {
-    return expected.tenantId === actual.tenantId
-        && expected.accountId === actual.accountId
-        && expected.userId === actual.userId;
+    return expected.tenantId === actual.tenantId && expected.accountId === actual.accountId && expected.userId === actual.userId;
 }
 function ownershipFilterMatches(expected, actual) {
-    return (expected.tenantId === undefined || expected.tenantId === actual.tenantId)
-        && (expected.accountId === undefined || expected.accountId === actual.accountId)
-        && (expected.userId === undefined || expected.userId === actual.userId);
+    return ((expected.tenantId === undefined || expected.tenantId === actual.tenantId) &&
+        (expected.accountId === undefined || expected.accountId === actual.accountId) &&
+        (expected.userId === undefined || expected.userId === actual.userId));
 }
 function assertOwnership(expected, actual) {
     if (!ownershipMatches(expected, actual)) {

package/dist/cli-init.js

@@ -1,5 +1,5 @@
-import { access, mkdir, readdir, readFile, writeFile } from "node:fs/promises";
 import { constants as fsConstants, readFileSync } from "node:fs";
+import { access, mkdir, readdir, readFile, writeFile } from "node:fs/promises";
 import { dirname, isAbsolute, join, normalize, relative, resolve, sep } from "node:path";
 import { fileURLToPath } from "node:url";
 export class InitUsageError extends Error {
@@ -305,12 +305,8 @@ function buildTokens(input) {
         ? `2. Copy \`.env.example\` to \`.env\` and set \`${input.provider.envKey}\`.\n3. Run \`npm start\` for a live provider call.`
         : `2. Run \`npm start\` (mock provider; no network or credentials).`;
     const optionalDocs = [
-        ...(input.withWorkflows
-            ? ["- `src/workflows-example.ts` — tiny DAG example using `@arnilo/prism-workflows`."]
-            : []),
-        ...(input.withEvals
-            ? ["- `src/evals-example.ts` — deterministic scorer example using `@arnilo/prism-evals`."]
-            : []),
+        ...(input.withWorkflows ? ["- `src/workflows-example.ts` — tiny DAG example using `@arnilo/prism-workflows`."] : []),
+        ...(input.withEvals ? ["- `src/evals-example.ts` — deterministic scorer example using `@arnilo/prism-evals`."] : []),
     ].join("\n");
     return {
         __PROJECT_NAME__: input.projectName,

package/dist/cli-runner.d.ts

@@ -9,10 +9,6 @@ export interface CliOptions {
     readonly provider?: string;
     readonly model?: string;
     readonly session?: string;
-    readonly config: readonly string[];
-    readonly resources: readonly string[];
-    readonly extensions: readonly string[];
-    readonly tools: readonly string[];
     readonly system?: string;
     readonly context: readonly string[];
     readonly compact?: number;
@@ -46,7 +42,7 @@ export interface CliOptions {
     readonly agentsMdFile?: string;
     readonly systemMdFile?: string;
     /** Runtime-populated: AGENTS.md/SYSTEM.md layers loaded from disk (print/json modes only;
-    *  RPC is host-owned). Threaded into `AgentConfig.systemPrompt` by `defaultCreateSession`. */
+     *  RPC is host-owned). Threaded into `AgentConfig.systemPrompt` by `defaultCreateSession`. */
     readonly systemPromptLayers: readonly SystemPromptContribution[];
 }
 export interface CliRuntime {
@@ -67,7 +63,7 @@ export interface CliRuntime {
     /** Working directory for relative `prism init` destinations (tests). */
     readonly cwd?: string;
 }
-export declare const usage = "Usage: prism [--mode print|json|rpc] [-p prompt] [options]\n       prism init <dir> [--provider <name>] [--with-workflows] [--with-evals] [--force]\n\nOptions:\n  -p, --prompt <text>        Prompt to run in print/json mode\n  --provider <name>          Explicit provider id (mock is built in for smoke tests)\n  --model <name>             Explicit model name\n  --session <id>             Session id\n  --config <path>            Explicit config path (recorded, not auto-loaded)\n  --resource <uri>           Explicit resource URI (recorded, not auto-loaded)\n  --extension <name>         Explicit extension name (recorded, not auto-loaded)\n  --tool <name>              Explicit tool name (recorded, not auto-enabled)\n  --system <text>            System instructions\n  --context <text>           Context text\n  --compact <entries>        Auto-compaction threshold\n  --max-tool-rounds <n>      Maximum tool rounds\n  --discover                 Enable workspace contribution discovery (opt-in)\n  --discover-kinds <csv>     Kinds to discover (default: skill; skill,tool,context,instructions)\n  --no-discovery             Disable discovery even if --discover is set\n  --agents-config <path>     App config root holding agents/<name>/AGENT.md bundles (opt-in)\n  --no-agents-md             Skip auto-loading <workspaceRoot>/AGENTS.md\n  --no-system-md             Skip auto-loading the global SYSTEM.md layer\n  --agents-md-file <path>    Read AGENTS.md from <path> instead (trust-gated, source: app)\n  --system-md-file <path>    Read SYSTEM.md from <path> instead (source: user)\n  -h, --help                 Show this help\n";
+export declare const usage = "Usage: prism [--mode print|json|rpc] [-p prompt] [options]\n       prism init <dir> [--provider <name>] [--with-workflows] [--with-evals] [--force]\n\nOptions:\n  -p, --prompt <text>        Prompt to run in print/json mode\n  --provider <name>          Explicit provider id (mock is built in for smoke tests)\n  --model <name>             Explicit model name\n  --session <id>             Session id\n  --system <text>            System instructions\n  --context <text>           Context text\n  --compact <entries>        Auto-compaction threshold\n  --max-tool-rounds <n>      Maximum tool rounds\n  --discover                 Enable workspace contribution discovery (opt-in)\n  --discover-kinds <csv>     Kinds to discover (default: skill; skill,tool,context,instructions)\n  --no-discovery             Disable discovery even if --discover is set\n  --agents-config <path>     App config root holding agents/<name>/AGENT.md bundles (opt-in)\n  --no-agents-md             Skip auto-loading <workspaceRoot>/AGENTS.md\n  --no-system-md             Skip auto-loading the global SYSTEM.md layer\n  --agents-md-file <path>    Read AGENTS.md from <path> instead (trust-gated, source: app)\n  --system-md-file <path>    Read SYSTEM.md from <path> instead (source: user)\n  -h, --help                 Show this help\n";
 export declare function parseCliArgs(argv: readonly string[]): CliOptions;
 export declare function runCli(argv: readonly string[], runtime: CliRuntime): Promise<number>;
 export declare function runPromptMode(session: AgentSession, options: CliOptions, stdout: Writable, mode: "print" | "json"): Promise<void>;

package/dist/cli-runner.js

@@ -1,16 +1,16 @@
-import process from "node:process";
-import { createAgent, createMockProvider, providerDone, providerTextDelta, resolveInstructionInjectors, createContributionRegistry } from "./index.js";
 import { readFile } from "node:fs/promises";
 import { basename, dirname } from "node:path";
+import process from "node:process";
+import { initUsage, runInitCommand } from "./cli-init.js";
 import { createContributionRegistries, registerDiscoveredContributions } from "./contributions.js";
-import { createSkillRegistry } from "./skills.js";
-import { discoverContributions } from "./node/contribution-discovery.js";
+import { createAgent, createContributionRegistry, createMockProvider, providerDone, providerTextDelta, resolveInstructionInjectors, } from "./index.js";
 import { discoverAgentBundles } from "./node/agent-definitions.js";
+import { discoverContributions } from "./node/contribution-discovery.js";
 import { registerDiscoveredInstructionInjectors } from "./node/instruction-injectors.js";
 import { loadSystemPromptFiles } from "./node/system-project-prompts.js";
 import { createPathTrustPolicy } from "./node/trust.js";
 import { runRpcServer } from "./rpc.js";
-import { initUsage, runInitCommand } from "./cli-init.js";
+import { createSkillRegistry } from "./skills.js";
 export const usage = `Usage: prism [--mode print|json|rpc] [-p prompt] [options]
        prism init <dir> [--provider <name>] [--with-workflows] [--with-evals] [--force]
 
@@ -19,10 +19,6 @@ Options:
   --provider <name>          Explicit provider id (mock is built in for smoke tests)
   --model <name>             Explicit model name
   --session <id>             Session id
-  --config <path>            Explicit config path (recorded, not auto-loaded)
-  --resource <uri>           Explicit resource URI (recorded, not auto-loaded)
-  --extension <name>         Explicit extension name (recorded, not auto-loaded)
-  --tool <name>              Explicit tool name (recorded, not auto-enabled)
   --system <text>            System instructions
   --context <text>           Context text
   --compact <entries>        Auto-compaction threshold
@@ -37,8 +33,27 @@ Options:
   --system-md-file <path>    Read SYSTEM.md from <path> instead (source: user)
   -h, --help                 Show this help
 `;
-const valueFlags = new Set(["--prompt", "--mode", "--provider", "--model", "--session", "--config", "--resource", "--extension", "--tool", "--system", "--context", "--compact", "--max-tool-rounds", "--discover-kinds", "--instruction", "--injector-file", "--agents-md-file", "--system-md-file", "--agents-config"]);
+const valueFlags = new Set([
+    "--prompt",
+    "--mode",
+    "--provider",
+    "--model",
+    "--session",
+    "--system",
+    "--context",
+    "--compact",
+    "--max-tool-rounds",
+    "--discover-kinds",
+    "--instruction",
+    "--injector-file",
+    "--agents-md-file",
+    "--system-md-file",
+    "--agents-config",
+]);
 const boolFlags = new Set(["--discover", "--no-discovery", "--no-agents-md", "--no-system-md"]);
+// Known-but-inert flags: parsed by earlier builds, never wired to any behavior.
+// Rejected loudly (rather than silently ignored) until a CLI-harness plan wires them.
+const unsupportedFlags = new Set(["--config", "--resource", "--extension", "--tool"]);
 const ALL_KINDS = ["skill", "tool", "context", "instructions"];
 export function parseCliArgs(argv) {
     let mode = "print";
@@ -58,10 +73,6 @@ export function parseCliArgs(argv) {
     let agentsMdFile;
     let systemMdFile;
     let agentsConfig;
-    const config = [];
-    const resources = [];
-    const extensions = [];
-    const tools = [];
     const context = [];
     const instructions = [];
     const injectorFiles = [];
@@ -72,6 +83,8 @@ export function parseCliArgs(argv) {
             continue;
         }
         const name = flag === "-p" ? "--prompt" : flag;
+        if (unsupportedFlags.has(name))
+            throw new CliUsageError(`${name} is not supported in this build`);
         if (boolFlags.has(name)) {
             switch (name) {
                 case "--discover":
@@ -113,18 +126,6 @@ export function parseCliArgs(argv) {
             case "--session":
                 session = value;
                 break;
-            case "--config":
-                config.push(value);
-                break;
-            case "--resource":
-                resources.push(value);
-                break;
-            case "--extension":
-                extensions.push(value);
-                break;
-            case "--tool":
-                tools.push(value);
-                break;
             case "--system":
                 system = value;
                 break;
@@ -157,10 +158,39 @@ export function parseCliArgs(argv) {
                 break;
         }
     }
-    return { mode, prompt, provider, model, session, config, resources, extensions, tools, system, context, compact, maxToolRounds, help, discover, discoverKinds, noDiscovery, agentsConfig, discoveredSkills: [], discoveredInjectors: [], discoveredAgents: [], instructions, injectorFiles, resolvedInstructionInjectors: [], noAgentsMd, noSystemMd, agentsMdFile, systemMdFile, systemPromptLayers: [] };
+    return {
+        mode,
+        prompt,
+        provider,
+        model,
+        session,
+        system,
+        context,
+        compact,
+        maxToolRounds,
+        help,
+        discover,
+        discoverKinds,
+        noDiscovery,
+        agentsConfig,
+        discoveredSkills: [],
+        discoveredInjectors: [],
+        discoveredAgents: [],
+        instructions,
+        injectorFiles,
+        resolvedInstructionInjectors: [],
+        noAgentsMd,
+        noSystemMd,
+        agentsMdFile,
+        systemMdFile,
+        systemPromptLayers: [],
+    };
 }
 function parseKinds(csv, flag) {
-    const kinds = csv.split(",").map((k) => k.trim()).filter(Boolean);
+    const kinds = csv
+        .split(",")
+        .map((k) => k.trim())
+        .filter(Boolean);
     if (kinds.length === 0)
         throw new CliUsageError(`Invalid value for ${flag}: ${csv}`);
     const invalid = kinds.filter((k) => !ALL_KINDS.includes(k));
@@ -193,7 +223,12 @@ export async function runCli(argv, runtime) {
     }
     try {
         if (options.mode === "rpc") {
-            await runRpcServer({ stdin: runtime.stdin, stdout: runtime.stdout, createSession: (id) => (runtime.createSession ?? defaultCreateSession)({ ...options, session: id ?? options.session }), commands: runtime.commands });
+            await runRpcServer({
+                stdin: runtime.stdin,
+                stdout: runtime.stdout,
+                createSession: (id) => (runtime.createSession ?? defaultCreateSession)({ ...options, session: id ?? options.session }),
+                commands: runtime.commands,
+            });
             return 0;
         }
         if (!options.prompt)
@@ -248,7 +283,12 @@ export async function runCli(argv, runtime) {
             // the containment check (the user named it, so it's trusted by that act).
             const layers = await loadSystemPromptFiles({
                 ...(options.noAgentsMd ? {} : { workspaceRoot, trust, ...(options.agentsMdFile ? { agentsMdPath: options.agentsMdFile } : {}) }),
-                ...(options.noSystemMd ? {} : { ...(runtime.globalRoot !== undefined ? { globalRoot: runtime.globalRoot } : {}), ...(options.systemMdFile ? { systemMdPath: options.systemMdFile } : {}) }),
+                ...(options.noSystemMd
+                    ? {}
+                    : {
+                        ...(runtime.globalRoot !== undefined ? { globalRoot: runtime.globalRoot } : {}),
+                        ...(options.systemMdFile ? { systemMdPath: options.systemMdFile } : {}),
+                    }),
             });
             options = { ...options, systemPromptLayers: layers };
         }
@@ -306,9 +346,7 @@ function runOptions(options) {
         ...(options.discover && !options.noDiscovery && options.discoveredSkills.length > 0
             ? { activeSkills: options.discoveredSkills.map((s) => s.name) }
             : {}),
-        ...(options.resolvedInstructionInjectors.length > 0
-            ? { instructionInjectors: options.resolvedInstructionInjectors }
-            : {}),
+        ...(options.resolvedInstructionInjectors.length > 0 ? { instructionInjectors: options.resolvedInstructionInjectors } : {}),
     };
 }
 // ponytail: resolve --instruction names against discovered injectors (fail-closed) and load

package/dist/compaction.js

@@ -27,10 +27,11 @@ export function isCompactionEntryData(value) {
     if (!value || typeof value !== "object" || Array.isArray(value))
         return false;
     const data = value;
-    return (data.throughEntryId === undefined || typeof data.throughEntryId === "string")
-        && (data.keepEntryIds === undefined || (Array.isArray(data.keepEntryIds) && data.keepEntryIds.every((item) => typeof item === "string")))
-        && (data.strategy === undefined || typeof data.strategy === "string")
-        && (data.trigger === undefined || typeof data.trigger === "string");
+    return ((data.throughEntryId === undefined || typeof data.throughEntryId === "string") &&
+        (data.keepEntryIds === undefined ||
+            (Array.isArray(data.keepEntryIds) && data.keepEntryIds.every((item) => typeof item === "string"))) &&
+        (data.strategy === undefined || typeof data.strategy === "string") &&
+        (data.trigger === undefined || typeof data.trigger === "string"));
 }
 function summarize(entries) {
     const lines = entries.flatMap((entry) => entryText(entry));

package/dist/config.js

@@ -31,9 +31,10 @@ function mergeObjects(base, override, path = "config") {
         const childPath = `${path}.${key}`;
         assertSafeJsonKey(key, childPath);
         const current = result[key];
-        result[key] = isPlainObject(current) && isPlainObject(value)
-            ? mergeObjects(current, value, childPath)
-            : cloneJsonValue(value, childPath);
+        result[key] =
+            isPlainObject(current) && isPlainObject(value)
+                ? mergeObjects(current, value, childPath)
+                : cloneJsonValue(value, childPath);
     }
     return result;
 }
@@ -77,7 +78,9 @@ function isSafeJsonValue(value) {
 }
 function assertSafeJsonValue(value, path) {
     if (Array.isArray(value)) {
-        value.forEach((entry, index) => assertSafeJsonValue(entry, `${path}[${index}]`));
+        value.forEach((entry, index) => {
+            assertSafeJsonValue(entry, `${path}[${index}]`);
+        });
         return;
     }
     if (!isPlainObject(value))

package/dist/content.js

@@ -112,12 +112,12 @@ export function assertSsrfAllowedUrl(url, policy = {}) {
     }
     if (policy.denyPrivateHosts === false)
         return;
-    if (hostname === "localhost"
-        || hostname.endsWith(".localhost")
-        || hostname.endsWith(".local")
-        || hostname === "metadata"
-        || hostname === "metadata.google.internal"
-        || hostname === "instance-data") {
+    if (hostname === "localhost" ||
+        hostname.endsWith(".localhost") ||
+        hostname.endsWith(".local") ||
+        hostname === "metadata" ||
+        hostname === "metadata.google.internal" ||
+        hostname === "instance-data") {
         throw new MediaContentError("ssrf_denied", `Media URL host ${hostname} is not allowed`);
     }
     if (isBlockedIp(hostname)) {
@@ -306,9 +306,7 @@ async function fetchBoundedMediaUrl(url, options) {
     assertSsrfAllowedUrl(url, options.ssrf);
     const timeoutController = new AbortController();
     const timeout = setTimeout(() => timeoutController.abort(), options.timeoutMs);
-    const signal = options.signal
-        ? AbortSignal.any([options.signal, timeoutController.signal])
-        : timeoutController.signal;
+    const signal = options.signal ? AbortSignal.any([options.signal, timeoutController.signal]) : timeoutController.signal;
     try {
         if (options.fetch)
             return await readFetchResponse(await options.fetch(url, { signal, redirect: "error" }), options.maxBytes);
@@ -372,7 +370,13 @@ async function raceAbort(promise, signal) {
             reject(signal.reason);
         };
         signal.addEventListener("abort", onAbort, { once: true });
-        promise.then((value) => { cleanup(); resolve(value); }, (error) => { cleanup(); reject(error); });
+        promise.then((value) => {
+            cleanup();
+            resolve(value);
+        }, (error) => {
+            cleanup();
+            reject(error);
+        });
     });
 }
 async function readFetchResponse(response, maxBytes) {
@@ -479,22 +483,22 @@ function isBlockedIp(hostname) {
 }
 function isBlockedIpv4(address) {
     const [a, b] = address.split(".").map(Number);
-    return a === 0
-        || a === 10
-        || a === 127
-        || (a === 100 && b >= 64 && b <= 127)
-        || (a === 169 && b === 254)
-        || (a === 172 && b >= 16 && b <= 31)
-        || (a === 192 && (b === 0 || b === 168))
-        || (a === 198 && (b === 18 || b === 19 || b === 51))
-        || (a === 203 && b === 0)
-        || a >= 224;
+    return (a === 0 ||
+        a === 10 ||
+        a === 127 ||
+        (a === 100 && b >= 64 && b <= 127) ||
+        (a === 169 && b === 254) ||
+        (a === 172 && b >= 16 && b <= 31) ||
+        (a === 192 && (b === 0 || b === 168)) ||
+        (a === 198 && (b === 18 || b === 19 || b === 51)) ||
+        (a === 203 && b === 0) ||
+        a >= 224);
 }
 function isBlockedIpv6(address) {
     const words = parseIpv6Words(address);
     if (!words)
         return true;
-    if (words.every((word) => word === 0) || words.slice(0, 7).every((word) => word === 0) && words[7] === 1)
+    if (words.every((word) => word === 0) || (words.slice(0, 7).every((word) => word === 0) && words[7] === 1))
         return true;
     if ((words[0] & 0xfe00) === 0xfc00)
         return true;
@@ -517,9 +521,7 @@ function parseIpv6Words(address) {
     if (missing < 0 || (parts.length === 1 && missing !== 0))
         return undefined;
     const words = [...left, ...Array.from({ length: missing }, () => "0"), ...right].map((part) => Number.parseInt(part, 16));
-    return words.length === 8 && words.every((word) => Number.isInteger(word) && word >= 0 && word <= 0xffff)
-        ? words
-        : undefined;
+    return words.length === 8 && words.every((word) => Number.isInteger(word) && word >= 0 && word <= 0xffff) ? words : undefined;
 }
 function startsWith(bytes, prefix) {
     if (bytes.length < prefix.length)

package/dist/context-budget.js

@@ -61,16 +61,19 @@ export function applyContextBudget(options) {
     const skills = [...(options.skills ?? [])].filter((skill) => skill.instructions);
     const tools = options.tools ? [...options.tools] : undefined;
     const omitted = [];
-    const cost = () => measureAll(groups, context, skills, tools);
-    while (overBudget(cost(), budget)) {
+    // Measure once, then subtract each dropped item's own estimate (dropNext computes it
+    // with the same estimators) — avoids an O(n²) re-scan of the full keep-set per drop.
+    const kept = measureAll(groups, context, skills, tools);
+    while (overBudget(kept, budget)) {
         const drop = dropNext(groups, context, skills, layout);
         if (!drop) {
             throw new ContextBudgetError();
         }
+        kept.tokens -= drop.tokenEstimate;
+        kept.bytes -= drop.byteLength;
         if (omitted.length < HARD_MAX_CONTEXT_BUDGET_OMISSIONS)
             omitted.push(drop);
     }
-    const kept = cost();
     const reportOmissions = omitted.slice(0, DEFAULT_MAX_CONTEXT_BUDGET_OMISSIONS);
     return {
         groups,
@@ -197,13 +200,14 @@ function isContextBudgetReport(value) {
     if (!value || typeof value !== "object" || Array.isArray(value))
         return false;
     const report = value;
-    return Array.isArray(report.omitted)
-        && typeof report.keptTokens === "number"
-        && typeof report.keptBytes === "number"
-        && typeof report.truncated === "boolean";
+    return (Array.isArray(report.omitted) &&
+        typeof report.keptTokens === "number" &&
+        typeof report.keptBytes === "number" &&
+        typeof report.truncated === "boolean");
 }
 function messageText(message) {
-    return message.content.map((part) => {
+    return message.content
+        .map((part) => {
         if (part.type === "text" || part.type === "thinking")
             return part.text;
         if (part.type === "tool_result")
@@ -221,15 +225,18 @@ function messageText(message) {
         if (part.type === "document")
             return part.transcript ?? part.name ?? part.url ?? part.resourceUri ?? part.mediaType ?? "[document]";
         return "[content]";
-    }).join("\n");
+    })
+        .join("\n");
 }
 function contextBlockText(block) {
     if (typeof block.content === "string")
         return block.content;
-    return block.content.map((part) => {
+    return block.content
+        .map((part) => {
         if (part.type === "text" || part.type === "thinking")
             return part.text;
         return "[content]";
-    }).join("\n");
+    })
+        .join("\n");
 }
 //# sourceMappingURL=context-budget.js.map

package/dist/contracts.d.ts

@@ -1,11 +1,11 @@
-import type { AgentInput } from "./input.js";
+import type { AudioContent, DocumentContent, FileContent } from "./content.js";
 import type { ContributionRegistries } from "./contributions.js";
+import type { AgentInput } from "./input.js";
+import type { ManifestContributionDeclaration } from "./manifests.js";
 import type { Middleware, MiddlewareHookName, MiddlewareRegistry } from "./middleware.js";
 import type { SecretRedactor } from "./redaction.js";
 import type { PermissionPolicy, TrustPolicy } from "./security.js";
-import type { ManifestContributionDeclaration } from "./manifests.js";
 import type { ToolValidator } from "./tools.js";
-import type { AudioContent, DocumentContent, FileContent } from "./content.js";
 export type JsonPrimitive = string | number | boolean | null;
 export type JsonValue = JsonPrimitive | JsonObject | JsonValue[];
 export interface JsonObject {
@@ -15,6 +15,9 @@ export interface ErrorInfo {
     readonly name?: string;
     readonly message: string;
     readonly code?: string | number;
+    /** Provider backpressure hint (e.g. from a `Retry-After` header); retry policies
+     *  honor it capped at their own `maxDelayMs`. */
+    readonly retryAfterMs?: number;
     readonly cause?: unknown;
 }
 export type { AudioContent, DocumentContent, FileContent } from "./content.js";
@@ -749,6 +752,13 @@ export type AgentEvent = {
     readonly sessionId: string;
     readonly runId: string;
     readonly size: number;
+} | {
+    /** A steered message was dropped by a terminal input guardrail; the run continues without it. */
+    readonly type: "steer_rejected";
+    readonly sessionId: string;
+    readonly runId: string;
+    readonly message: Message;
+    readonly record: GuardrailRecord;
 } | {
     readonly type: "event_subscriber_overflow";
     readonly sessionId: string;
@@ -937,6 +947,9 @@ export interface PromptBuildRequest {
     readonly context?: readonly ContextBlock[];
     readonly skills?: readonly Skill[];
     readonly tools?: readonly ToolDefinition[];
+    /** Model being prompted; lets builders adapt composition to declared capabilities
+     *  (e.g. the default builder omits the `Available tools:` text for tool-capable models). */
+    readonly model?: ModelConfig;
     readonly metadata?: Readonly<Record<string, unknown>>;
     readonly signal?: AbortSignal;
 }

package/dist/contracts.js

@@ -1,6 +1,9 @@
 export class AgentRunStateError extends Error {
     code = "ERR_PRISM_AGENT_RUN_STATE";
-    constructor(message) { super(message); this.name = "AgentRunStateError"; }
+    constructor(message) {
+        super(message);
+        this.name = "AgentRunStateError";
+    }
 }
 export class AgentRunError extends Error {
     result;

package/dist/contribution-parsing.js

@@ -50,7 +50,11 @@ function parseFrontBlock(lines) {
             out.set(key, items);
         }
         else if (value.startsWith("[") && value.endsWith("]")) {
-            out.set(key, value.slice(1, -1).split(",").map((s) => s.trim()).filter((s) => s.length > 0));
+            out.set(key, value
+                .slice(1, -1)
+                .split(",")
+                .map((s) => s.trim())
+                .filter((s) => s.length > 0));
         }
         else {
             out.set(key, value);
@@ -63,7 +67,7 @@ function parseFrontBlock(lines) {
 // plain string split instead of `node:path`. Expects `.../<name>/SKILL.md`.
 function parentDirName(path) {
     const parts = path.split(/[/\\]+/).filter(Boolean);
-    return parts.length >= 2 ? parts[parts.length - 2] : parts[parts.length - 1] ?? "";
+    return parts.length >= 2 ? parts[parts.length - 2] : (parts[parts.length - 1] ?? "");
 }
 const NAME_RE = /^[A-Za-z0-9 _-]+$/;
 /** Parse a `SKILL.md` into a {@link Skill}. Frontmatter keys map to `name`