@arnilo/prism 0.0.96 → 0.1.0

package/dist/identity.js

@@ -0,0 +1,265 @@
+export const DEFAULT_IDENTITY_LIMITS = {
+    maxScopes: 64,
+    maxScopeBytes: 128,
+    maxMetadataBytes: 4 * 1024,
+    maxCredentialRefBytes: 256,
+    maxPrincipalIdBytes: 256,
+};
+export const HARD_IDENTITY_LIMITS = {
+    maxScopes: 256,
+    maxScopeBytes: 512,
+    maxMetadataBytes: 16 * 1024,
+    maxCredentialRefBytes: 2 * 1024,
+    maxPrincipalIdBytes: 2 * 1024,
+};
+export class IdentityError extends Error {
+    reason;
+    code = "ERR_PRISM_IDENTITY";
+    constructor(message, reason) {
+        super(message);
+        this.reason = reason;
+        this.name = "IdentityError";
+    }
+}
+export function resolveIdentityLimits(input = {}) {
+    return {
+        maxScopes: bound("maxScopes", input.maxScopes, DEFAULT_IDENTITY_LIMITS.maxScopes, HARD_IDENTITY_LIMITS.maxScopes),
+        maxScopeBytes: bound("maxScopeBytes", input.maxScopeBytes, DEFAULT_IDENTITY_LIMITS.maxScopeBytes, HARD_IDENTITY_LIMITS.maxScopeBytes),
+        maxMetadataBytes: bound("maxMetadataBytes", input.maxMetadataBytes, DEFAULT_IDENTITY_LIMITS.maxMetadataBytes, HARD_IDENTITY_LIMITS.maxMetadataBytes),
+        maxCredentialRefBytes: bound("maxCredentialRefBytes", input.maxCredentialRefBytes, DEFAULT_IDENTITY_LIMITS.maxCredentialRefBytes, HARD_IDENTITY_LIMITS.maxCredentialRefBytes),
+        maxPrincipalIdBytes: bound("maxPrincipalIdBytes", input.maxPrincipalIdBytes, DEFAULT_IDENTITY_LIMITS.maxPrincipalIdBytes, HARD_IDENTITY_LIMITS.maxPrincipalIdBytes),
+    };
+}
+/** Project verified identity onto ownership scope fields used by persistence/server. */
+export function ownershipFromIdentity(identity) {
+    return {
+        tenantId: identity.tenantId,
+        ...(identity.accountId !== undefined ? { accountId: identity.accountId } : {}),
+        ...(identity.userId !== undefined ? { userId: identity.userId } : {}),
+    };
+}
+/**
+ * Fail closed on shape/limits/expiry/revocation/tenant mismatch.
+ * Sync and network-free — host {@link IdentityVerifier} owns remote checks.
+ */
+export function assertIdentityActive(identity, options = {}) {
+    const limits = resolveIdentityLimits(options.limits);
+    assertIdentityShape(identity, limits);
+    if (identity.verified !== true)
+        throw new IdentityError("Identity is not host-verified", "unverified");
+    if (options.expectedTenantId !== undefined && identity.tenantId !== options.expectedTenantId) {
+        throw new IdentityError("Identity tenant mismatch", "wrong_tenant");
+    }
+    const now = options.now ?? Date.now();
+    if (identity.revokedAt !== undefined) {
+        const revokedAt = Date.parse(identity.revokedAt);
+        if (!Number.isFinite(revokedAt))
+            throw new IdentityError("Identity revokedAt is invalid", "invalid_revoked_at");
+        if (revokedAt <= now)
+            throw new IdentityError("Identity has been revoked", "revoked");
+    }
+    if (identity.expiresAt !== undefined) {
+        const expiresAt = Date.parse(identity.expiresAt);
+        if (!Number.isFinite(expiresAt))
+            throw new IdentityError("Identity expiresAt is invalid", "invalid_expires_at");
+        if (expiresAt <= now)
+            throw new IdentityError("Identity has expired", "expired");
+    }
+    const issuedAt = Date.parse(identity.issuedAt);
+    if (!Number.isFinite(issuedAt))
+        throw new IdentityError("Identity issuedAt is invalid", "invalid_issued_at");
+    if (issuedAt > now + 60_000)
+        throw new IdentityError("Identity issuedAt is in the future", "invalid_issued_at");
+}
+/** Delegation may only narrow scopes; tenant and ownership ids stay immutable. */
+export function narrowIdentity(parent, options) {
+    assertIdentityActive(parent, { limits: options.limits });
+    const limits = resolveIdentityLimits(options.limits);
+    if (options.scopes.length === 0)
+        throw new IdentityError("Delegated scopes must be non-empty", "empty_scopes");
+    const parentScopes = new Set(parent.scopes);
+    for (const scope of options.scopes) {
+        if (!parentScopes.has(scope))
+            throw new IdentityError(`Delegation widens scope: ${scope}`, "scope_widen");
+    }
+    if (options.expiresAt !== undefined) {
+        const childExp = Date.parse(options.expiresAt);
+        if (!Number.isFinite(childExp))
+            throw new IdentityError("Delegated expiresAt is invalid", "invalid_expires_at");
+        if (parent.expiresAt !== undefined) {
+            const parentExp = Date.parse(parent.expiresAt);
+            if (Number.isFinite(parentExp) && childExp > parentExp) {
+                throw new IdentityError("Delegation cannot extend expiry", "expiry_widen");
+            }
+        }
+    }
+    const child = {
+        tenantId: parent.tenantId,
+        ...(parent.accountId !== undefined ? { accountId: parent.accountId } : {}),
+        ...(parent.userId !== undefined ? { userId: parent.userId } : {}),
+        principal: options.principal ?? parent.principal,
+        ...(parent.sponsor !== undefined ? { sponsor: parent.sponsor } : {}),
+        ...(parent.owner !== undefined ? { owner: parent.owner } : {}),
+        delegatedFrom: parent.principal,
+        scopes: Object.freeze([...options.scopes]),
+        credentialRefs: Object.freeze([...(options.credentialRefs ?? parent.credentialRefs ?? [])]),
+        issuedAt: parent.issuedAt,
+        ...(options.expiresAt !== undefined
+            ? { expiresAt: options.expiresAt }
+            : parent.expiresAt !== undefined
+                ? { expiresAt: parent.expiresAt }
+                : {}),
+        ...(parent.revokedAt !== undefined ? { revokedAt: parent.revokedAt } : {}),
+        ...(options.metadata !== undefined
+            ? { metadata: options.metadata }
+            : parent.metadata !== undefined
+                ? { metadata: parent.metadata }
+                : {}),
+        verified: true,
+    };
+    assertIdentityActive(child, { limits: options.limits });
+    assertPrincipalBounds(child.principal, limits);
+    return child;
+}
+/** Refuse ownership that widens or conflicts with a verified identity. */
+export function assertIdentityMatchesOwnership(identity, ownership) {
+    assertIdentityActive(identity);
+    if (!ownership)
+        return;
+    if (ownership.tenantId !== undefined && ownership.tenantId !== identity.tenantId) {
+        throw new IdentityError("Ownership tenant conflicts with identity", "ownership_tenant");
+    }
+    if (ownership.accountId !== undefined) {
+        if (identity.accountId === undefined || ownership.accountId !== identity.accountId) {
+            throw new IdentityError("Ownership account conflicts with identity", "ownership_account");
+        }
+    }
+    if (ownership.userId !== undefined) {
+        if (identity.userId === undefined || ownership.userId !== identity.userId) {
+            throw new IdentityError("Ownership user conflicts with identity", "ownership_user");
+        }
+    }
+}
+/**
+ * Propagation check: child must share tenant, not widen scopes, and remain active.
+ * Used by supervisor/A2A/MCP/server when forwarding identity across a boundary.
+ */
+export function assertIdentityPropagation(parent, child, options = {}) {
+    assertIdentityActive(parent, options);
+    assertIdentityActive(child, options);
+    if (child.tenantId !== parent.tenantId)
+        throw new IdentityError("Propagated identity changed tenant", "tenant_widen");
+    if (parent.accountId !== undefined && child.accountId !== parent.accountId) {
+        throw new IdentityError("Propagated identity changed account", "account_widen");
+    }
+    if (parent.userId !== undefined && child.userId !== parent.userId) {
+        throw new IdentityError("Propagated identity changed user", "user_widen");
+    }
+    const parentScopes = new Set(parent.scopes);
+    for (const scope of child.scopes) {
+        if (!parentScopes.has(scope))
+            throw new IdentityError(`Propagated identity widens scope: ${scope}`, "scope_widen");
+    }
+}
+/** Redacted identity refs safe for telemetry/ledger metadata (no secrets, no raw JWT). */
+export function identityTelemetryAttributes(identity) {
+    assertIdentityActive(identity);
+    return {
+        "prism.identity.tenant_id": identity.tenantId,
+        "prism.identity.principal_kind": String(identity.principal.kind),
+        "prism.identity.principal_id": identity.principal.id,
+        "prism.identity.scope_count": String(identity.scopes.length),
+        ...(identity.accountId !== undefined ? { "prism.identity.account_id": identity.accountId } : {}),
+        ...(identity.userId !== undefined ? { "prism.identity.user_id": identity.userId } : {}),
+        ...(identity.sponsor !== undefined ? { "prism.identity.sponsor_id": identity.sponsor.id } : {}),
+        ...(identity.credentialRefs?.length ? { "prism.identity.credential_ref_count": String(identity.credentialRefs.length) } : {}),
+    };
+}
+/** Resolve run identity: explicit option wins; otherwise agent default. Assert when present. */
+export function resolveRunIdentity(runIdentity, agentIdentity, ownership, options = {}) {
+    const identity = runIdentity ?? agentIdentity;
+    if (!identity)
+        return undefined;
+    assertIdentityActive(identity, options);
+    assertIdentityMatchesOwnership(identity, ownership ?? ownershipFromIdentity(identity));
+    return identity;
+}
+function assertIdentityShape(identity, limits) {
+    if (typeof identity.tenantId !== "string" || identity.tenantId.length === 0) {
+        throw new IdentityError("Identity tenantId is required", "missing_tenant");
+    }
+    if (byteLength(identity.tenantId) > limits.maxPrincipalIdBytes) {
+        throw new IdentityError("Identity tenantId exceeds byte limit", "tenant_too_large");
+    }
+    assertPrincipalBounds(identity.principal, limits);
+    if (identity.sponsor)
+        assertPrincipalBounds(identity.sponsor, limits);
+    if (identity.owner)
+        assertPrincipalBounds(identity.owner, limits);
+    if (identity.delegatedFrom)
+        assertPrincipalBounds(identity.delegatedFrom, limits);
+    if (!Array.isArray(identity.scopes) || identity.scopes.length === 0) {
+        throw new IdentityError("Identity scopes must be a non-empty array", "empty_scopes");
+    }
+    if (identity.scopes.length > limits.maxScopes) {
+        throw new IdentityError(`Identity exceeds maxScopes (${limits.maxScopes})`, "too_many_scopes");
+    }
+    for (const scope of identity.scopes) {
+        if (typeof scope !== "string" || scope.length === 0)
+            throw new IdentityError("Identity scope is invalid", "invalid_scope");
+        if (byteLength(scope) > limits.maxScopeBytes)
+            throw new IdentityError("Identity scope exceeds byte limit", "scope_too_large");
+    }
+    if (identity.credentialRefs) {
+        for (const ref of identity.credentialRefs) {
+            if (typeof ref !== "string" || ref.length === 0)
+                throw new IdentityError("Credential ref is invalid", "invalid_credential_ref");
+            if (byteLength(ref) > limits.maxCredentialRefBytes) {
+                throw new IdentityError("Credential ref exceeds byte limit", "credential_ref_too_large");
+            }
+        }
+    }
+    if (identity.metadata !== undefined) {
+        let encoded;
+        try {
+            encoded = JSON.stringify(identity.metadata);
+        }
+        catch {
+            throw new IdentityError("Identity metadata is not JSON-serializable", "invalid_metadata");
+        }
+        if (byteLength(encoded) > limits.maxMetadataBytes) {
+            throw new IdentityError("Identity metadata exceeds byte limit", "metadata_too_large");
+        }
+    }
+    if (identity.accountId !== undefined && byteLength(identity.accountId) > limits.maxPrincipalIdBytes) {
+        throw new IdentityError("Identity accountId exceeds byte limit", "account_too_large");
+    }
+    if (identity.userId !== undefined && byteLength(identity.userId) > limits.maxPrincipalIdBytes) {
+        throw new IdentityError("Identity userId exceeds byte limit", "user_too_large");
+    }
+}
+function assertPrincipalBounds(principal, limits) {
+    if (typeof principal.id !== "string" || principal.id.length === 0) {
+        throw new IdentityError("Principal id is required", "missing_principal");
+    }
+    if (byteLength(principal.id) > limits.maxPrincipalIdBytes) {
+        throw new IdentityError("Principal id exceeds byte limit", "principal_too_large");
+    }
+    if (typeof principal.kind !== "string" || principal.kind.length === 0 || byteLength(principal.kind) > 64) {
+        throw new IdentityError("Principal kind is invalid", "invalid_principal_kind");
+    }
+    if (principal.displayName !== undefined && byteLength(principal.displayName) > limits.maxPrincipalIdBytes) {
+        throw new IdentityError("Principal displayName exceeds byte limit", "display_name_too_large");
+    }
+}
+function bound(name, value, fallback, hard) {
+    const resolved = value ?? fallback;
+    if (!Number.isSafeInteger(resolved) || resolved < 1 || resolved > hard) {
+        throw new RangeError(`${name} must be a positive safe integer no greater than ${hard}`);
+    }
+    return resolved;
+}
+function byteLength(value) {
+    return Buffer.byteLength(value, "utf8");
+}
+//# sourceMappingURL=identity.js.map

package/dist/index.d.ts

@@ -1,87 +1,109 @@
-export type * from "./contracts.js";
-export type { RunLimitCounters, RunLimitName, SecureAgentOptions } from "./contracts.js";
-export { isSessionEntryKind, SESSION_APPEND_CONFLICT_CODE, SESSION_ENTRY_KINDS, SESSION_ENTRY_SCHEMA_VERSION, SessionAppendConflictError, isSessionAppendConflict, AgentRunError, AgentRunStateError } from "./contracts.js";
-export { createAgent, createAgentSession, resumeAgentRun } from "./agents.js";
-export { createBatchedRunLedger, isFlushableRunLedger, DEFAULT_LEDGER_BATCH_ENTRIES, HARD_LEDGER_BATCH_ENTRIES, DEFAULT_LEDGER_BATCH_BYTES, HARD_LEDGER_BATCH_BYTES, DEFAULT_LEDGER_BATCH_DELAY_MS, HARD_LEDGER_BATCH_DELAY_MS, } from "./run-ledger.js";
-export type { BatchedRunLedgerOptions } from "./run-ledger.js";
-export { createSecureAgent } from "./secure-agent.js";
-export { createMemoryRunFeedbackStore, prepareRunFeedback, requireRunFeedbackOwnership, runFeedbackPageLimit, RunFeedbackError, } from "./feedback.js";
-export type { MemoryRunFeedbackStoreOptions, PrepareRunFeedbackOptions, RunFeedbackLimits, RunFeedbackRun, RunFeedbackRunResolver, } from "./feedback.js";
-export { CHECKPOINT_CONFLICT_CODE, CheckpointConflictError, createMemoryCheckpointStore } from "./checkpoints.js";
-export { AGENT_RUN_STATE_NAMESPACE, AGENT_RUN_STATE_SCHEMA_VERSION, DEFAULT_MAX_AGENT_RUN_STATE_BYTES, HARD_MAX_AGENT_RUN_STATE_BYTES, agentFingerprint, loadAgentRunState } from "./agent-run-state.js";
-export type { StoredAgentRunState } from "./agent-run-state.js";
+export { resolveAgentDefinition } from "./agent-definitions.js";
+export type { AgentEventSourceErrorCode } from "./agent-event-source.js";
+export { AgentEventSourceError, createMemoryAgentEventSource } from "./agent-event-source.js";
+export { dispatchToolCallsInOrder, generateValidateReviseLoop, isAgentLoopOptions, resolveLoop, resolveToolConcurrency, singleShotLoop, } from "./agent-loops.js";
+export type { AgentRunLifecycle, AgentRunLifecycleAgent, AgentRunLifecycleOptions, AgentRunLifecycleRequest, AgentRunLifecycleStreamRequest, } from "./agent-run-lifecycle.js";
 export { createAgentRunLifecycle } from "./agent-run-lifecycle.js";
-export type { AgentRunLifecycle, AgentRunLifecycleAgent, AgentRunLifecycleOptions, AgentRunLifecycleRequest } from "./agent-run-lifecycle.js";
-export type { MemoryCheckpointStoreOptions } from "./checkpoints.js";
-export { LEASE_CONFLICT_CODE, LeaseConflictError, createMemoryLeaseStore } from "./leases.js";
-export { createEventMultiplexer } from "./event-multiplexer.js";
-export type { EventMultiplexer, EventMultiplexerOptions, EventOverflowInfo, EventOverflowPolicy } from "./event-multiplexer.js";
+export type { PendingToolCall, StoredAgentRunState } from "./agent-run-state.js";
+export { AGENT_RUN_STATE_NAMESPACE, AGENT_RUN_STATE_SCHEMA_VERSION, agentFingerprint, DEFAULT_MAX_AGENT_RUN_STATE_BYTES, HARD_MAX_AGENT_RUN_STATE_BYTES, loadAgentRunState, } from "./agent-run-state.js";
+export { createAgent, createAgentSession, resumeAgentRun, resumeAgentRunStream } from "./agents.js";
+export type { ArtifactApproval, ArtifactApprovalState, ArtifactBodyErrorCode, ArtifactBodyPresignOptions, ArtifactBodyRef, ArtifactBodyStore, ArtifactBodyTransferOptions, ArtifactCitation, ArtifactDecisionState, ArtifactDeliveryToken, ArtifactRecord, ArtifactRevision, } from "./artifacts.js";
+export { ARTIFACT_BODY_ERROR_CODES, ARTIFACT_CHECKPOINT_NAMESPACE, ArtifactBodyStoreError, ArtifactError, artifactApprovalState, artifactCheckpointKey, } from "./artifacts.js";
+export type { ApplyCacheControlOptions, CacheControlledContentBlock, CacheControlledMessage, CacheControlValue, CacheUsageReport, } from "./cache-helpers.js";
 export { applyCacheControl, cacheHitRate, cacheSavings, cacheUsageReport, mapCacheRetention, sanitizeCacheKey } from "./cache-helpers.js";
-export type { ApplyCacheControlOptions, CacheControlledContentBlock, CacheControlledMessage, CacheControlValue, CacheUsageReport } from "./cache-helpers.js";
-export { resolveAgentDefinition } from "./agent-definitions.js";
-export { parseSkillFile, parseAgentFile } from "./contribution-parsing.js";
-export { assertJsonObject, isJsonObject, loadConfigLayers, mergeConfigLayers } from "./config.js";
-export type { ConfigLayer, ConfigLoadContext, ConfigProvider } from "./config.js";
-export { createDefaultCompactionStrategy, isCompactionEntryData } from "./compaction.js";
+export type { MemoryCheckpointStoreOptions } from "./checkpoints.js";
+export { CHECKPOINT_CONFLICT_CODE, CheckpointConflictError, createMemoryCheckpointStore } from "./checkpoints.js";
 export type { DefaultCompactionStrategyOptions } from "./compaction.js";
-export { createDefaultRetryPolicy, isTransientErrorInfo, waitForRetry } from "./retry.js";
-export type { DefaultRetryPolicyOptions } from "./retry.js";
+export { createDefaultCompactionStrategy, isCompactionEntryData } from "./compaction.js";
+export type { ConfigLayer, ConfigLoadContext, ConfigProvider } from "./config.js";
+export { assertJsonObject, isJsonObject, loadConfigLayers, mergeConfigLayers } from "./config.js";
+export type { AudioContent, DocumentContent, FileContent, MediaContentBlock, MediaContentBounds, MediaHostAddress, MediaHostnameResolver, MediaMimePolicy, MediaUrlRequest, MediaUrlRequester, ModelInputCapability, ResolvedMediaContent, ResolveMediaContentOptions, SsrfPolicy, } from "./content.js";
+export { assertDeclaredMediaTypeMatches, assertMediaBlocksWithinBounds, assertMessagesSupportModelCapabilities, assertModelSupportsContentBlocks, assertSsrfAllowedUrl, collectMessageContentBlocks, contentBlockInputModality, DEFAULT_MAX_AUDIO_DURATION_MS, DEFAULT_MAX_MEDIA_ITEM_BYTES, DEFAULT_MAX_MEDIA_ITEMS_PER_REQUEST, DEFAULT_MAX_MEDIA_REQUEST_BYTES, DEFAULT_MEDIA_FETCH_TIMEOUT_MS, loadBoundedBinaryResource, MediaContentError, MODEL_INPUT_CAPABILITIES, resolveMediaContentBlock, resolveMediaContentBlocks, sniffMediaMimeType, UnsupportedModalityError, } from "./content.js";
+export type { ContextBudget, ContextBudgetMessageGroups, ContextBudgetOmission, ContextBudgetOmissionKind, ContextBudgetReport, } from "./context-budget.js";
+export { applyContextBudget, CONTEXT_BUDGET_ERROR_CODE, CONTEXT_BUDGET_REPORT_METADATA_KEY, ContextBudgetError, DEFAULT_MAX_CONTEXT_BUDGET_OMISSIONS, estimateAssemblyTokens, estimateMessageBytes, estimateMessageTokens, estimateTextBytes, estimateTextTokens, getContextBudgetReport, HARD_MAX_CONTEXT_BUDGET_BYTES, HARD_MAX_CONTEXT_BUDGET_OMISSIONS, HARD_MAX_CONTEXT_BUDGET_TOKENS, isContextBudgetError, resolveContextBudget, } from "./context-budget.js";
+export type * from "./contracts.js";
+export type { ApprovalOutcome, DecisionScope, NestedRunApproval, NestedRunOutcome, NestedRunRef, PendingDecision, PendingDecisionKind, ProviderResolver, RealtimeCaps, RealtimeEvent, RealtimeSession, RealtimeSessionFactory, RealtimeSessionOptions, ResumeNestedRun, RunDecision, RunLimitCounters, RunLimitName, SecureAgentOptions, StickyDecision, ToolCallAuthority, ToolEffectClassifier, ToolEffectDeclaration, ToolEffectIdempotency, ToolEffectKey, ToolEffectKind, ToolEffectRecord, ToolEffectStatus, ToolEffectStore, ToolEffectTransition, ToolElicitationRequest, } from "./contracts.js";
+export { AgentDecisionError, AgentDelegationSuspendedError, AgentLoopStateError, AgentRunError, AgentRunStateError, assertSessionMetadataKey, DEFAULT_MAX_PENDING_DECISIONS, DEFAULT_MAX_PENDING_STEER_BYTES, DEFAULT_MAX_PENDING_STEERS, DEFAULT_MAX_SESSION_SEARCH_CURSOR_BYTES, DEFAULT_MAX_SESSION_SEARCH_FTS_CANDIDATES, DEFAULT_MAX_SESSION_SEARCH_LINEAR_BYTES, DEFAULT_MAX_SESSION_SEARCH_LINEAR_ENTRIES, DEFAULT_MAX_SESSION_SEARCH_LINEAR_SESSIONS, DEFAULT_MAX_SESSION_SEARCH_QUERY_BYTES, DEFAULT_MAX_SESSION_SEARCH_SNIPPET_BYTES, DEFAULT_MAX_STICKY_DECISIONS, DEFAULT_SESSION_SEARCH_LIMIT, HARD_MAX_ACTION_CONSTRAINT_BYTES, HARD_MAX_ACTION_CONSTRAINTS, HARD_MAX_DECISION_REASON_BYTES, HARD_MAX_ELICITATION_BYTES, HARD_MAX_PENDING_DECISIONS, HARD_MAX_PENDING_STEER_BYTES, HARD_MAX_PENDING_STEERS, HARD_MAX_SESSION_SEARCH_CURSOR_BYTES, HARD_MAX_SESSION_SEARCH_FTS_CANDIDATES, HARD_MAX_SESSION_SEARCH_LIMIT, HARD_MAX_SESSION_SEARCH_LINEAR_BYTES, HARD_MAX_SESSION_SEARCH_LINEAR_ENTRIES, HARD_MAX_SESSION_SEARCH_LINEAR_SESSIONS, HARD_MAX_SESSION_SEARCH_QUERY_BYTES, HARD_MAX_SESSION_SEARCH_SNIPPET_BYTES, HARD_MAX_STICKY_DECISIONS, isSessionAppendConflict, isSessionEntryKind, isSessionSearchUnsupported, MAX_ACTION_CONSTRAINT_BYTES, MAX_ACTION_CONSTRAINTS, MAX_ATTRIBUTION_DEPTH, MAX_DECISION_REASON_BYTES, MAX_ELICITATION_BYTES, resolveSessionSearchQuery, SESSION_APPEND_CONFLICT_CODE, SESSION_ENTRY_KINDS, SESSION_ENTRY_SCHEMA_VERSION, SESSION_SEARCH_UNSUPPORTED_CODE, SESSION_SEARCH_WORKSPACE_METADATA_KEY, SessionAppendConflictError, SessionSearchUnsupportedError, } from "./contracts.js";
+export { parseAgentFile, parseSkillFile } from "./contribution-parsing.js";
+export type { ContributionRegistries, ContributionRegistriesOptions, ContributionRegistry, ContributionRegistryOptions, } from "./contributions.js";
 export { createContributionRegistries, createContributionRegistry, registerDiscoveredContributions } from "./contributions.js";
-export type { ContributionRegistries, ContributionRegistriesOptions, ContributionRegistry, ContributionRegistryOptions } from "./contributions.js";
-export { createChainedCredentialResolver, createEnvCredentialResolver, createExplicitCredentialResolver, createMemoryCredentialStore, refreshOAuthCredential, resolveCredentialValue } from "./credentials.js";
+export type { ConversationBranchRef, ConversationReplayCursor, ConversationThread, ConversationThreadState, } from "./conversations.js";
+export { CONVERSATION_METADATA_KEY, ConversationError, conversationMarkerMetadata, conversationThreadFromRecord, DEFAULT_MAX_CONVERSATION_CURSOR_BYTES, decodeConversationReplayCursor, encodeConversationReplayCursor, HARD_MAX_CONVERSATION_CURSOR_BYTES, } from "./conversations.js";
+export type { CredentialRecord, CredentialValueSource, MemoryCredentialStore, RevocableOAuthCredentialStore } from "./credentials.js";
+export { createChainedCredentialResolver, createEnvCredentialResolver, createExplicitCredentialResolver, createMemoryCredentialStore, refreshOAuthCredential, resolveCredentialValue, revokeOAuthCredential, } from "./credentials.js";
+export type { DeviceAdapter, DeviceAdmitRequest, DeviceChunkResult, DeviceConformanceResult, DeviceKind, DevicePolicyErrorCode, DevicePolicyOptions, DeviceStreamLimits, ResolvedDevicePolicy, } from "./devices.js";
+export { acceptDeviceChunk, assertDeviceAdmit, DEFAULT_DEVICE_MAX_CHUNK_BYTES, DEFAULT_DEVICE_MAX_CONCURRENT_SESSIONS, DevicePolicyError, HARD_DEVICE_MAX_CHUNK_BYTES, HARD_DEVICE_MAX_CONCURRENT_SESSIONS, redactDeviceTelemetry, resolveDevicePolicy, runDevicePolicyConformance, } from "./devices.js";
+export type { EventMultiplexer, EventMultiplexerOptions, EventOverflowInfo, EventOverflowPolicy } from "./event-multiplexer.js";
+export { createEventMultiplexer } from "./event-multiplexer.js";
+export type { ExecutionAction, ExecutionDecision, ExecutionPolicy, ExecutionRisk } from "./execution-policy.js";
+export { applyExecutionDecision, assertExecutionAllowed, checkExecution, ExecutionDeniedError } from "./execution-policy.js";
+export type { ExtensionErrorPolicy, ExtensionEventBus, ExtensionEventHandler, ExtensionKernel, ExtensionKernelOptions, ExtensionLoadPolicy, LoadedExtension, } from "./extensions.js";
 export { createExtensionEventBus, createExtensionKernel } from "./extensions.js";
-export type { ExtensionErrorPolicy, ExtensionEventBus, ExtensionEventHandler, ExtensionKernel, ExtensionKernelOptions } from "./extensions.js";
-export type { CredentialRecord, CredentialValueSource, MemoryCredentialStore } from "./credentials.js";
-export { createModelRegistry } from "./models.js";
-export { authMethodKey, defineProviderPackage, systemPromptContributionKey } from "./provider-packages.js";
-export { assertStructuredOutputRequestSupported, DEFAULT_MAX_STRUCTURED_OUTPUT_NAME_LENGTH, DEFAULT_MAX_STRUCTURED_OUTPUT_SCHEMA_BYTES, modelSupportsStructuredOutput, resolveRunProviderOptions, StructuredOutputError, validateStructuredOutputOptions, } from "./structured-output.js";
-export { createProviderTurnMetadata, readProviderHttpStatus } from "./observability.js";
-export { createProviderRequestPolicyChain, createSessionCachePolicy, mergeProviderRequestOptions } from "./provider-request-policy.js";
-export type { SessionCachePolicyOptions } from "./provider-request-policy.js";
-export { THINKING_LEVELS, applyThinkingLevel, isThinkingLevel, normalizeThinkingLevel, thinkingCompatFor, thinkingFamilyForModel, } from "./thinking.js";
-export type { ThinkingCompatFamily, ThinkingLevel } from "./thinking.js";
-export { resolveUseCaseModel, resolveUseCaseModelBinding, useCaseCredentialProviderId, } from "./use-case-model.js";
-export type { ResolveUseCaseModelInput, ResolvedUseCaseModel, UseCaseModelBinding, } from "./use-case-model.js";
-export { composeSystemPrompt, mergeSystemPromptConfig } from "./system-prompts.js";
-export type { ComposeSystemPromptOptions } from "./system-prompts.js";
-export type { ModelRegistry, ModelRegistryOptions } from "./models.js";
-export { definePrismManifest, parsePrismManifest } from "./manifests.js";
+export type { MemoryRunFeedbackStoreOptions, PrepareRunFeedbackOptions, RunFeedbackLimits, RunFeedbackRun, RunFeedbackRunResolver, } from "./feedback.js";
+export { createMemoryRunFeedbackStore, prepareRunFeedback, RunFeedbackError, requireRunFeedbackOwnership, runFeedbackPageLimit, } from "./feedback.js";
+export type { GuardrailRunResult, RunGuardrailsOptions, } from "./guardrails.js";
+export { assertGuardrailsAllowed, GuardrailError, MAX_GUARDRAIL_CONCURRENCY, runGuardrails } from "./guardrails.js";
+export type { AgentIdentity, AssertIdentityActiveOptions, IdentityLimits, IdentityVerifier, NarrowIdentityOptions, Principal, ResolvedIdentityLimits, } from "./identity.js";
+export { assertIdentityActive, assertIdentityMatchesOwnership, assertIdentityPropagation, DEFAULT_IDENTITY_LIMITS, HARD_IDENTITY_LIMITS, IdentityError, identityTelemetryAttributes, narrowIdentity, ownershipFromIdentity, resolveIdentityLimits, resolveRunIdentity, } from "./identity.js";
+export type { AgentInput, AssembleProviderInputOptions, DefaultInputBuildContext, DefaultInputBuilder, DefaultPromptBuilder, InputAttachment, PromptInstruction, PromptTemplateOptions, ResolveContextOptions, } from "./input.js";
+export { assembleProviderInput, createDefaultInputBuilder, createDefaultPromptBuilder, renderPromptTemplate, resolveContextProviders, } from "./input.js";
+export type { ResolveInstructionInjectorsOptions } from "./instruction-injection.js";
+export { resolveInstructionInjectors, runInstructionInjectors } from "./instruction-injection.js";
+export { createMemoryLeaseStore, LEASE_CONFLICT_CODE, LeaseConflictError } from "./leases.js";
 export type { ManifestContributionDeclaration, ManifestContributionKind, ManifestResourceDeclaration, PrismManifest } from "./manifests.js";
-export { assertDeclaredMediaTypeMatches, assertMediaBlocksWithinBounds, assertMessagesSupportModelCapabilities, assertModelSupportsContentBlocks, assertSsrfAllowedUrl, collectMessageContentBlocks, contentBlockInputModality, DEFAULT_MAX_AUDIO_DURATION_MS, DEFAULT_MAX_MEDIA_ITEM_BYTES, DEFAULT_MAX_MEDIA_ITEMS_PER_REQUEST, DEFAULT_MAX_MEDIA_REQUEST_BYTES, DEFAULT_MEDIA_FETCH_TIMEOUT_MS, loadBoundedBinaryResource, MediaContentError, MODEL_INPUT_CAPABILITIES, resolveMediaContentBlock, resolveMediaContentBlocks, sniffMediaMimeType, UnsupportedModalityError, } from "./content.js";
-export type { AudioContent, DocumentContent, FileContent, MediaContentBlock, MediaContentBounds, MediaHostAddress, MediaHostnameResolver, MediaMimePolicy, MediaUrlRequest, MediaUrlRequester, ModelInputCapability, ResolvedMediaContent, ResolveMediaContentOptions, SsrfPolicy, } from "./content.js";
-export { loadBinaryResource, loadJsonResource, loadManifestResource, loadTextResource } from "./resources.js";
-export type { LoadBinaryResourceOptions } from "./resources.js";
-export { createChainedSettingsProvider, createStaticSettingsProvider } from "./settings.js";
-export { createMiddlewareRegistry } from "./middleware.js";
+export { definePrismManifest, parsePrismManifest } from "./manifests.js";
 export type { Middleware, MiddlewareHookName, MiddlewareNext, MiddlewareRegistry, MiddlewareRegistryOptions } from "./middleware.js";
-export { assembleProviderInput, createDefaultInputBuilder, createDefaultPromptBuilder, renderPromptTemplate, resolveContextProviders } from "./input.js";
-export type { AgentInput, AssembleProviderInputOptions, DefaultInputBuilder, DefaultInputBuildContext, DefaultPromptBuilder, InputAttachment, PromptInstruction, PromptTemplateOptions, ResolveContextOptions } from "./input.js";
-export { createMockProvider } from "./mock-provider.js";
-export { createMemorySessionStore, createSessionEntry, getSessionBranchEntries, listSessionBranches, rebuildSessionContext } from "./session-stores.js";
-export type { CreateSessionEntryOptions, SessionBranch, SessionBranchOptions, SessionContextSnapshot } from "./session-stores.js";
+export { createMiddlewareRegistry } from "./middleware.js";
 export type { MockProviderOptions } from "./mock-provider.js";
-export { providerContentDelta, providerDone, providerError, providerTextDelta, providerThinkingDelta, providerToolCall, providerToolCallDelta, providerUsage, toolCallContent, toolCallFromArgumentsText, } from "./provider-events.js";
-export type { ProviderResolver } from "./contracts.js";
-export { createProviderRegistry, createProviderResolver } from "./providers.js";
+export { createMockProvider } from "./mock-provider.js";
+export type { ModelRegistry, ModelRegistryOptions } from "./models.js";
+export { createModelRegistry } from "./models.js";
+export { createProviderTurnMetadata, readProviderHttpStatus } from "./observability.js";
+export type { ApplyRetentionInput, ApplyRetentionResult, ConsumeTenantQuotaInput, ExportUnderHoldInput, LegalHoldExportItem, LegalHoldQuery, LegalHoldRecord, PersistenceLifecycleStore, PersistenceResourceKind, PutLegalHoldInput, ReleaseLegalHoldInput, SetTenantQuotaInput, TenantQuota, } from "./persistence-lifecycle.js";
+export { createMemoryPersistenceLifecycle, DEFAULT_LIFECYCLE_PAGE_SIZE, DEFAULT_MAX_HOLD_REASON_BYTES, HARD_LIFECYCLE_PAGE_SIZE, HARD_MAX_HOLD_REASON_BYTES, isResourceHeld, PersistenceLifecycleError, } from "./persistence-lifecycle.js";
+export { providerContentDelta, providerContinuationRequired, providerDone, providerError, providerTextDelta, providerThinkingDelta, providerToolCall, providerToolCallDelta, providerUsage, toolCallContent, toolCallFromArgumentsText, } from "./provider-events.js";
+export { authMethodKey, defineProviderPackage, systemPromptContributionKey } from "./provider-packages.js";
+export type { SessionCachePolicyOptions } from "./provider-request-policy.js";
+export { createProviderRequestPolicyChain, createSessionCachePolicy, mergeProviderRequestOptions } from "./provider-request-policy.js";
 export type { ProviderRegistry, ProviderRegistryOptions } from "./providers.js";
-export { createSecretRedactor, errorToErrorInfo, redactAgentEvent, redactMessage, redactProviderRequest, redactRunLedgerRecord, redactSecrets, redactSessionEntry } from "./redaction.js";
+export { createProviderRegistry, createProviderResolver } from "./providers.js";
 export type { SecretRedactor } from "./redaction.js";
-export { assertPermission, assertTrusted, checkPermission, createStaticPermissionPolicy, createStaticTrustPolicy, denialToErrorInfo, isTrusted, PermissionDeniedError, TrustDeniedError } from "./security.js";
+export { createSecretRedactor, errorToErrorInfo, redactAgentEvent, redactMessage, redactProviderRequest, redactRunLedgerRecord, redactSecrets, redactSessionEntry, resolveRedactor, } from "./redaction.js";
+export type { DuplicateRegistrationOptions, DuplicateRegistrationPolicy } from "./registry-options.js";
+export type { LoadBinaryResourceOptions } from "./resources.js";
+export { loadBinaryResource, loadJsonResource, loadManifestResource, loadTextResource } from "./resources.js";
+export type { DefaultRetryPolicyOptions } from "./retry.js";
+export { createDefaultRetryPolicy, isTransientErrorInfo, waitForRetry } from "./retry.js";
+export type { BatchedRunLedgerOptions } from "./run-ledger.js";
+export { createBatchedRunLedger, DEFAULT_LEDGER_BATCH_BYTES, DEFAULT_LEDGER_BATCH_DELAY_MS, DEFAULT_LEDGER_BATCH_ENTRIES, HARD_LEDGER_BATCH_BYTES, HARD_LEDGER_BATCH_DELAY_MS, HARD_LEDGER_BATCH_ENTRIES, isFlushableRunLedger, } from "./run-ledger.js";
+export type { RunLimitTrackerOptions } from "./run-limits.js";
+export { createRunLimitTracker, DEFAULT_RUN_LIMITS, HARD_MAX_RUN_COST, HARD_RUN_LIMITS, RunLimitError, RunLimitTracker, resolveRunLimits, } from "./run-limits.js";
+export { createSecureAgent } from "./secure-agent.js";
 export type { PermissionDecision, PermissionPolicy, PermissionRequest, TrustDecision, TrustPolicy, TrustRequest } from "./security.js";
-export { applyExecutionDecision, assertExecutionAllowed, checkExecution, ExecutionDeniedError } from "./execution-policy.js";
-export type { ExecutionAction, ExecutionDecision, ExecutionPolicy, ExecutionRisk } from "./execution-policy.js";
-export { createSkillRegistry, resolveActiveSkills } from "./skills.js";
+export { assertPermission, assertTrusted, checkPermission, createStaticPermissionPolicy, createStaticTrustPolicy, denialToErrorInfo, isTrusted, PermissionDeniedError, TrustDeniedError, } from "./security.js";
+export type { CreateMemorySessionStoreOptions, CreateSessionEntryOptions, MemorySessionSearchMode, SessionBranch, SessionBranchOptions, SessionContextSnapshot, } from "./session-stores.js";
+export { createMemorySessionStore, createSessionEntry, getSessionBranchEntries, listSessionBranches, rebuildSessionContext, } from "./session-stores.js";
+export { createChainedSettingsProvider, createStaticSettingsProvider } from "./settings.js";
+export type { LoadedSkillSet, SkillRenderContext, SkillsDisclosure } from "./skill-disclosure.js";
+export { createLoadedSkillSet, DEFAULT_MAX_SKILL_CATALOG_ENTRIES, DEFAULT_MAX_SKILL_DESCRIPTION_BYTES, DEFAULT_MAX_SKILL_INSTRUCTION_BYTES, EMPTY_SKILL_DESCRIPTION, HARD_MAX_SKILL_CATALOG_ENTRIES, HARD_MAX_SKILL_DESCRIPTION_BYTES, HARD_MAX_SKILL_INSTRUCTION_BYTES, isSkillDisclosureError, resolveSkillsDisclosure, SkillDisclosureError, } from "./skill-disclosure.js";
+export type { CreateLoadSkillToolOptions, ResolveSkillLoadOptions } from "./skill-load.js";
+export { createLoadSkillTool, DEFAULT_LOAD_SKILL_TOOL_NAME, isSkillLoadError, MAX_LOAD_SKILL_RESULT_BYTES, resolveSkillLoad, SKILL_LOAD_ERROR_CODE, SkillLoadError, } from "./skill-load.js";
 export type { ResolveActiveSkillsOptions, SkillRegistryOptions } from "./skills.js";
-export { resolveInstructionInjectors, runInstructionInjectors } from "./instruction-injection.js";
-export type { ResolveInstructionInjectorsOptions } from "./instruction-injection.js";
-export { createToolRegistry, dispatchToolCall, filterTools, createToolParameterValidator } from "./tools.js";
-export { assertGuardrailsAllowed, GuardrailError, MAX_GUARDRAIL_CONCURRENCY, runGuardrails } from "./guardrails.js";
-export { createRunLimitTracker, DEFAULT_RUN_LIMITS, HARD_MAX_RUN_COST, HARD_RUN_LIMITS, RunLimitError, RunLimitTracker, resolveRunLimits } from "./run-limits.js";
-export type { GuardrailRunResult, RunGuardrailsOptions, } from "./guardrails.js";
-export type { RunLimitTrackerOptions, } from "./run-limits.js";
+export { createSkillRegistry, resolveActiveSkills } from "./skills.js";
+export { artifactStructuredOutputRequest, assertStructuredOutputRequestSupported, DEFAULT_MAX_STRUCTURED_OUTPUT_NAME_LENGTH, DEFAULT_MAX_STRUCTURED_OUTPUT_SCHEMA_BYTES, modelSupportsStructuredOutput, resolveRunProviderOptions, StructuredOutputError, validateStructuredOutputOptions, withoutStructuredOutput, } from "./structured-output.js";
+export type { ComposeSystemPromptOptions } from "./system-prompts.js";
+export { composeSystemPrompt, mergeSystemPromptConfig } from "./system-prompts.js";
+export { assertAgentEventSourceConforms } from "./testing/agent-event-source-conformance.js";
+export type { ThinkingCompatFamily, ThinkingLevel } from "./thinking.js";
+export { applyThinkingLevel, isThinkingLevel, normalizeThinkingLevel, THINKING_LEVELS, thinkingCompatFor, thinkingFamilyForModel, } from "./thinking.js";
+export type { ToolEffectErrorCode } from "./tool-effects.js";
+export { createMemoryToolEffectStore, ToolEffectError } from "./tool-effects.js";
+export type { FoldToolResultsContext, ResolvedToolResultFoldOptions, ToolResultFoldInput, ToolResultFoldOptions, } from "./tool-result-fold.js";
+export { DEFAULT_TOOL_RESULT_FOLD_MAX_SUMMARY_BYTES, DEFAULT_TOOL_RESULT_FOLD_MIN_AGE_TURNS, DEFAULT_TOOL_RESULT_FOLD_MIN_BYTES, foldedToolResultHeader, foldToolResultHistory, foldToolResults, formatFoldedToolResult, HARD_TOOL_RESULT_FOLD_MAX_SUMMARY_BYTES, resolveToolResultFold, TOOL_RESULT_FOLD_TURN_METADATA_KEY, } from "./tool-result-fold.js";
 export type { DispatchToolCallOptions, ToolArgumentValidationError, ToolArgumentValidationResult, ToolArgumentValidator, ToolFilter, ToolFilterInput, ToolParameterValidatorOptions, ToolRegistryOptions, ToolValidator, } from "./tools.js";
-export type { DuplicateRegistrationOptions, DuplicateRegistrationPolicy } from "./registry-options.js";
-export { dispatchToolCallsInOrder, generateValidateReviseLoop, isAgentLoopOptions, resolveLoop, resolveToolConcurrency, singleShotLoop } from "./agent-loops.js";
+export { createToolParameterValidator, createToolRegistry, dispatchToolCall, filterTools } from "./tools.js";
+export type { ResolvedUseCaseModel, ResolveUseCaseModelInput, UseCaseModelBinding, } from "./use-case-model.js";
+export { resolveUseCaseModel, resolveUseCaseModelBinding, useCaseCredentialProviderId, } from "./use-case-model.js";
 export declare const name = "prism";
-export declare const version = "0.0.96";
+export declare const version = "0.1.0";
 export declare const description = "Agent harness for AI providers, agents, sessions, and tools.";

package/dist/index.js

@@ -1,50 +1,62 @@
-export { isSessionEntryKind, SESSION_APPEND_CONFLICT_CODE, SESSION_ENTRY_KINDS, SESSION_ENTRY_SCHEMA_VERSION, SessionAppendConflictError, isSessionAppendConflict, AgentRunError, AgentRunStateError } from "./contracts.js";
-export { createAgent, createAgentSession, resumeAgentRun } from "./agents.js";
-export { createBatchedRunLedger, isFlushableRunLedger, DEFAULT_LEDGER_BATCH_ENTRIES, HARD_LEDGER_BATCH_ENTRIES, DEFAULT_LEDGER_BATCH_BYTES, HARD_LEDGER_BATCH_BYTES, DEFAULT_LEDGER_BATCH_DELAY_MS, HARD_LEDGER_BATCH_DELAY_MS, } from "./run-ledger.js";
-export { createSecureAgent } from "./secure-agent.js";
-export { createMemoryRunFeedbackStore, prepareRunFeedback, requireRunFeedbackOwnership, runFeedbackPageLimit, RunFeedbackError, } from "./feedback.js";
-export { CHECKPOINT_CONFLICT_CODE, CheckpointConflictError, createMemoryCheckpointStore } from "./checkpoints.js";
-export { AGENT_RUN_STATE_NAMESPACE, AGENT_RUN_STATE_SCHEMA_VERSION, DEFAULT_MAX_AGENT_RUN_STATE_BYTES, HARD_MAX_AGENT_RUN_STATE_BYTES, agentFingerprint, loadAgentRunState } from "./agent-run-state.js";
+export { resolveAgentDefinition } from "./agent-definitions.js";
+export { AgentEventSourceError, createMemoryAgentEventSource } from "./agent-event-source.js";
+export { dispatchToolCallsInOrder, generateValidateReviseLoop, isAgentLoopOptions, resolveLoop, resolveToolConcurrency, singleShotLoop, } from "./agent-loops.js";
 export { createAgentRunLifecycle } from "./agent-run-lifecycle.js";
-export { LEASE_CONFLICT_CODE, LeaseConflictError, createMemoryLeaseStore } from "./leases.js";
-export { createEventMultiplexer } from "./event-multiplexer.js";
+export { AGENT_RUN_STATE_NAMESPACE, AGENT_RUN_STATE_SCHEMA_VERSION, agentFingerprint, DEFAULT_MAX_AGENT_RUN_STATE_BYTES, HARD_MAX_AGENT_RUN_STATE_BYTES, loadAgentRunState, } from "./agent-run-state.js";
+export { createAgent, createAgentSession, resumeAgentRun, resumeAgentRunStream } from "./agents.js";
+export { ARTIFACT_BODY_ERROR_CODES, ARTIFACT_CHECKPOINT_NAMESPACE, ArtifactBodyStoreError, ArtifactError, artifactApprovalState, artifactCheckpointKey, } from "./artifacts.js";
 export { applyCacheControl, cacheHitRate, cacheSavings, cacheUsageReport, mapCacheRetention, sanitizeCacheKey } from "./cache-helpers.js";
-export { resolveAgentDefinition } from "./agent-definitions.js";
-export { parseSkillFile, parseAgentFile } from "./contribution-parsing.js";
-export { assertJsonObject, isJsonObject, loadConfigLayers, mergeConfigLayers } from "./config.js";
+export { CHECKPOINT_CONFLICT_CODE, CheckpointConflictError, createMemoryCheckpointStore } from "./checkpoints.js";
 export { createDefaultCompactionStrategy, isCompactionEntryData } from "./compaction.js";
-export { createDefaultRetryPolicy, isTransientErrorInfo, waitForRetry } from "./retry.js";
+export { assertJsonObject, isJsonObject, loadConfigLayers, mergeConfigLayers } from "./config.js";
+export { assertDeclaredMediaTypeMatches, assertMediaBlocksWithinBounds, assertMessagesSupportModelCapabilities, assertModelSupportsContentBlocks, assertSsrfAllowedUrl, collectMessageContentBlocks, contentBlockInputModality, DEFAULT_MAX_AUDIO_DURATION_MS, DEFAULT_MAX_MEDIA_ITEM_BYTES, DEFAULT_MAX_MEDIA_ITEMS_PER_REQUEST, DEFAULT_MAX_MEDIA_REQUEST_BYTES, DEFAULT_MEDIA_FETCH_TIMEOUT_MS, loadBoundedBinaryResource, MediaContentError, MODEL_INPUT_CAPABILITIES, resolveMediaContentBlock, resolveMediaContentBlocks, sniffMediaMimeType, UnsupportedModalityError, } from "./content.js";
+export { applyContextBudget, CONTEXT_BUDGET_ERROR_CODE, CONTEXT_BUDGET_REPORT_METADATA_KEY, ContextBudgetError, DEFAULT_MAX_CONTEXT_BUDGET_OMISSIONS, estimateAssemblyTokens, estimateMessageBytes, estimateMessageTokens, estimateTextBytes, estimateTextTokens, getContextBudgetReport, HARD_MAX_CONTEXT_BUDGET_BYTES, HARD_MAX_CONTEXT_BUDGET_OMISSIONS, HARD_MAX_CONTEXT_BUDGET_TOKENS, isContextBudgetError, resolveContextBudget, } from "./context-budget.js";
+export { AgentDecisionError, AgentDelegationSuspendedError, AgentLoopStateError, AgentRunError, AgentRunStateError, assertSessionMetadataKey, DEFAULT_MAX_PENDING_DECISIONS, DEFAULT_MAX_PENDING_STEER_BYTES, DEFAULT_MAX_PENDING_STEERS, DEFAULT_MAX_SESSION_SEARCH_CURSOR_BYTES, DEFAULT_MAX_SESSION_SEARCH_FTS_CANDIDATES, DEFAULT_MAX_SESSION_SEARCH_LINEAR_BYTES, DEFAULT_MAX_SESSION_SEARCH_LINEAR_ENTRIES, DEFAULT_MAX_SESSION_SEARCH_LINEAR_SESSIONS, DEFAULT_MAX_SESSION_SEARCH_QUERY_BYTES, DEFAULT_MAX_SESSION_SEARCH_SNIPPET_BYTES, DEFAULT_MAX_STICKY_DECISIONS, DEFAULT_SESSION_SEARCH_LIMIT, HARD_MAX_ACTION_CONSTRAINT_BYTES, HARD_MAX_ACTION_CONSTRAINTS, HARD_MAX_DECISION_REASON_BYTES, HARD_MAX_ELICITATION_BYTES, HARD_MAX_PENDING_DECISIONS, HARD_MAX_PENDING_STEER_BYTES, HARD_MAX_PENDING_STEERS, HARD_MAX_SESSION_SEARCH_CURSOR_BYTES, HARD_MAX_SESSION_SEARCH_FTS_CANDIDATES, HARD_MAX_SESSION_SEARCH_LIMIT, HARD_MAX_SESSION_SEARCH_LINEAR_BYTES, HARD_MAX_SESSION_SEARCH_LINEAR_ENTRIES, HARD_MAX_SESSION_SEARCH_LINEAR_SESSIONS, HARD_MAX_SESSION_SEARCH_QUERY_BYTES, HARD_MAX_SESSION_SEARCH_SNIPPET_BYTES, HARD_MAX_STICKY_DECISIONS, isSessionAppendConflict, isSessionEntryKind, isSessionSearchUnsupported, MAX_ACTION_CONSTRAINT_BYTES, MAX_ACTION_CONSTRAINTS, MAX_ATTRIBUTION_DEPTH, MAX_DECISION_REASON_BYTES, MAX_ELICITATION_BYTES, resolveSessionSearchQuery, SESSION_APPEND_CONFLICT_CODE, SESSION_ENTRY_KINDS, SESSION_ENTRY_SCHEMA_VERSION, SESSION_SEARCH_UNSUPPORTED_CODE, SESSION_SEARCH_WORKSPACE_METADATA_KEY, SessionAppendConflictError, SessionSearchUnsupportedError, } from "./contracts.js";
+export { parseAgentFile, parseSkillFile } from "./contribution-parsing.js";
 export { createContributionRegistries, createContributionRegistry, registerDiscoveredContributions } from "./contributions.js";
-export { createChainedCredentialResolver, createEnvCredentialResolver, createExplicitCredentialResolver, createMemoryCredentialStore, refreshOAuthCredential, resolveCredentialValue } from "./credentials.js";
+export { CONVERSATION_METADATA_KEY, ConversationError, conversationMarkerMetadata, conversationThreadFromRecord, DEFAULT_MAX_CONVERSATION_CURSOR_BYTES, decodeConversationReplayCursor, encodeConversationReplayCursor, HARD_MAX_CONVERSATION_CURSOR_BYTES, } from "./conversations.js";
+export { createChainedCredentialResolver, createEnvCredentialResolver, createExplicitCredentialResolver, createMemoryCredentialStore, refreshOAuthCredential, resolveCredentialValue, revokeOAuthCredential, } from "./credentials.js";
+export { acceptDeviceChunk, assertDeviceAdmit, DEFAULT_DEVICE_MAX_CHUNK_BYTES, DEFAULT_DEVICE_MAX_CONCURRENT_SESSIONS, DevicePolicyError, HARD_DEVICE_MAX_CHUNK_BYTES, HARD_DEVICE_MAX_CONCURRENT_SESSIONS, redactDeviceTelemetry, resolveDevicePolicy, runDevicePolicyConformance, } from "./devices.js";
+export { createEventMultiplexer } from "./event-multiplexer.js";
+export { applyExecutionDecision, assertExecutionAllowed, checkExecution, ExecutionDeniedError } from "./execution-policy.js";
 export { createExtensionEventBus, createExtensionKernel } from "./extensions.js";
+export { createMemoryRunFeedbackStore, prepareRunFeedback, RunFeedbackError, requireRunFeedbackOwnership, runFeedbackPageLimit, } from "./feedback.js";
+export { assertGuardrailsAllowed, GuardrailError, MAX_GUARDRAIL_CONCURRENCY, runGuardrails } from "./guardrails.js";
+export { assertIdentityActive, assertIdentityMatchesOwnership, assertIdentityPropagation, DEFAULT_IDENTITY_LIMITS, HARD_IDENTITY_LIMITS, IdentityError, identityTelemetryAttributes, narrowIdentity, ownershipFromIdentity, resolveIdentityLimits, resolveRunIdentity, } from "./identity.js";
+export { assembleProviderInput, createDefaultInputBuilder, createDefaultPromptBuilder, renderPromptTemplate, resolveContextProviders, } from "./input.js";
+export { resolveInstructionInjectors, runInstructionInjectors } from "./instruction-injection.js";
+export { createMemoryLeaseStore, LEASE_CONFLICT_CODE, LeaseConflictError } from "./leases.js";
+export { definePrismManifest, parsePrismManifest } from "./manifests.js";
+export { createMiddlewareRegistry } from "./middleware.js";
+export { createMockProvider } from "./mock-provider.js";
 export { createModelRegistry } from "./models.js";
-export { authMethodKey, defineProviderPackage, systemPromptContributionKey } from "./provider-packages.js";
-export { assertStructuredOutputRequestSupported, DEFAULT_MAX_STRUCTURED_OUTPUT_NAME_LENGTH, DEFAULT_MAX_STRUCTURED_OUTPUT_SCHEMA_BYTES, modelSupportsStructuredOutput, resolveRunProviderOptions, StructuredOutputError, validateStructuredOutputOptions, } from "./structured-output.js";
 export { createProviderTurnMetadata, readProviderHttpStatus } from "./observability.js";
+export { createMemoryPersistenceLifecycle, DEFAULT_LIFECYCLE_PAGE_SIZE, DEFAULT_MAX_HOLD_REASON_BYTES, HARD_LIFECYCLE_PAGE_SIZE, HARD_MAX_HOLD_REASON_BYTES, isResourceHeld, PersistenceLifecycleError, } from "./persistence-lifecycle.js";
+export { providerContentDelta, providerContinuationRequired, providerDone, providerError, providerTextDelta, providerThinkingDelta, providerToolCall, providerToolCallDelta, providerUsage, toolCallContent, toolCallFromArgumentsText, } from "./provider-events.js";
+export { authMethodKey, defineProviderPackage, systemPromptContributionKey } from "./provider-packages.js";
 export { createProviderRequestPolicyChain, createSessionCachePolicy, mergeProviderRequestOptions } from "./provider-request-policy.js";
-export { THINKING_LEVELS, applyThinkingLevel, isThinkingLevel, normalizeThinkingLevel, thinkingCompatFor, thinkingFamilyForModel, } from "./thinking.js";
-export { resolveUseCaseModel, resolveUseCaseModelBinding, useCaseCredentialProviderId, } from "./use-case-model.js";
-export { composeSystemPrompt, mergeSystemPromptConfig } from "./system-prompts.js";
-export { definePrismManifest, parsePrismManifest } from "./manifests.js";
-export { assertDeclaredMediaTypeMatches, assertMediaBlocksWithinBounds, assertMessagesSupportModelCapabilities, assertModelSupportsContentBlocks, assertSsrfAllowedUrl, collectMessageContentBlocks, contentBlockInputModality, DEFAULT_MAX_AUDIO_DURATION_MS, DEFAULT_MAX_MEDIA_ITEM_BYTES, DEFAULT_MAX_MEDIA_ITEMS_PER_REQUEST, DEFAULT_MAX_MEDIA_REQUEST_BYTES, DEFAULT_MEDIA_FETCH_TIMEOUT_MS, loadBoundedBinaryResource, MediaContentError, MODEL_INPUT_CAPABILITIES, resolveMediaContentBlock, resolveMediaContentBlocks, sniffMediaMimeType, UnsupportedModalityError, } from "./content.js";
+export { createProviderRegistry, createProviderResolver } from "./providers.js";
+export { createSecretRedactor, errorToErrorInfo, redactAgentEvent, redactMessage, redactProviderRequest, redactRunLedgerRecord, redactSecrets, redactSessionEntry, resolveRedactor, } from "./redaction.js";
 export { loadBinaryResource, loadJsonResource, loadManifestResource, loadTextResource } from "./resources.js";
+export { createDefaultRetryPolicy, isTransientErrorInfo, waitForRetry } from "./retry.js";
+export { createBatchedRunLedger, DEFAULT_LEDGER_BATCH_BYTES, DEFAULT_LEDGER_BATCH_DELAY_MS, DEFAULT_LEDGER_BATCH_ENTRIES, HARD_LEDGER_BATCH_BYTES, HARD_LEDGER_BATCH_DELAY_MS, HARD_LEDGER_BATCH_ENTRIES, isFlushableRunLedger, } from "./run-ledger.js";
+export { createRunLimitTracker, DEFAULT_RUN_LIMITS, HARD_MAX_RUN_COST, HARD_RUN_LIMITS, RunLimitError, RunLimitTracker, resolveRunLimits, } from "./run-limits.js";
+export { createSecureAgent } from "./secure-agent.js";
+export { assertPermission, assertTrusted, checkPermission, createStaticPermissionPolicy, createStaticTrustPolicy, denialToErrorInfo, isTrusted, PermissionDeniedError, TrustDeniedError, } from "./security.js";
+export { createMemorySessionStore, createSessionEntry, getSessionBranchEntries, listSessionBranches, rebuildSessionContext, } from "./session-stores.js";
 export { createChainedSettingsProvider, createStaticSettingsProvider } from "./settings.js";
-export { createMiddlewareRegistry } from "./middleware.js";
-export { assembleProviderInput, createDefaultInputBuilder, createDefaultPromptBuilder, renderPromptTemplate, resolveContextProviders } from "./input.js";
-export { createMockProvider } from "./mock-provider.js";
-export { createMemorySessionStore, createSessionEntry, getSessionBranchEntries, listSessionBranches, rebuildSessionContext } from "./session-stores.js";
-export { providerContentDelta, providerDone, providerError, providerTextDelta, providerThinkingDelta, providerToolCall, providerToolCallDelta, providerUsage, toolCallContent, toolCallFromArgumentsText, } from "./provider-events.js";
-export { createProviderRegistry, createProviderResolver } from "./providers.js";
-export { createSecretRedactor, errorToErrorInfo, redactAgentEvent, redactMessage, redactProviderRequest, redactRunLedgerRecord, redactSecrets, redactSessionEntry } from "./redaction.js";
-export { assertPermission, assertTrusted, checkPermission, createStaticPermissionPolicy, createStaticTrustPolicy, denialToErrorInfo, isTrusted, PermissionDeniedError, TrustDeniedError } from "./security.js";
-export { applyExecutionDecision, assertExecutionAllowed, checkExecution, ExecutionDeniedError } from "./execution-policy.js";
+export { createLoadedSkillSet, DEFAULT_MAX_SKILL_CATALOG_ENTRIES, DEFAULT_MAX_SKILL_DESCRIPTION_BYTES, DEFAULT_MAX_SKILL_INSTRUCTION_BYTES, EMPTY_SKILL_DESCRIPTION, HARD_MAX_SKILL_CATALOG_ENTRIES, HARD_MAX_SKILL_DESCRIPTION_BYTES, HARD_MAX_SKILL_INSTRUCTION_BYTES, isSkillDisclosureError, resolveSkillsDisclosure, SkillDisclosureError, } from "./skill-disclosure.js";
+export { createLoadSkillTool, DEFAULT_LOAD_SKILL_TOOL_NAME, isSkillLoadError, MAX_LOAD_SKILL_RESULT_BYTES, resolveSkillLoad, SKILL_LOAD_ERROR_CODE, SkillLoadError, } from "./skill-load.js";
 export { createSkillRegistry, resolveActiveSkills } from "./skills.js";
-export { resolveInstructionInjectors, runInstructionInjectors } from "./instruction-injection.js";
-export { createToolRegistry, dispatchToolCall, filterTools, createToolParameterValidator } from "./tools.js";
-export { assertGuardrailsAllowed, GuardrailError, MAX_GUARDRAIL_CONCURRENCY, runGuardrails } from "./guardrails.js";
-export { createRunLimitTracker, DEFAULT_RUN_LIMITS, HARD_MAX_RUN_COST, HARD_RUN_LIMITS, RunLimitError, RunLimitTracker, resolveRunLimits } from "./run-limits.js";
-export { dispatchToolCallsInOrder, generateValidateReviseLoop, isAgentLoopOptions, resolveLoop, resolveToolConcurrency, singleShotLoop } from "./agent-loops.js";
+export { artifactStructuredOutputRequest, assertStructuredOutputRequestSupported, DEFAULT_MAX_STRUCTURED_OUTPUT_NAME_LENGTH, DEFAULT_MAX_STRUCTURED_OUTPUT_SCHEMA_BYTES, modelSupportsStructuredOutput, resolveRunProviderOptions, StructuredOutputError, validateStructuredOutputOptions, withoutStructuredOutput, } from "./structured-output.js";
+export { composeSystemPrompt, mergeSystemPromptConfig } from "./system-prompts.js";
+export { assertAgentEventSourceConforms } from "./testing/agent-event-source-conformance.js";
+export { applyThinkingLevel, isThinkingLevel, normalizeThinkingLevel, THINKING_LEVELS, thinkingCompatFor, thinkingFamilyForModel, } from "./thinking.js";
+export { createMemoryToolEffectStore, ToolEffectError } from "./tool-effects.js";
+export { DEFAULT_TOOL_RESULT_FOLD_MAX_SUMMARY_BYTES, DEFAULT_TOOL_RESULT_FOLD_MIN_AGE_TURNS, DEFAULT_TOOL_RESULT_FOLD_MIN_BYTES, foldedToolResultHeader, foldToolResultHistory, foldToolResults, formatFoldedToolResult, HARD_TOOL_RESULT_FOLD_MAX_SUMMARY_BYTES, resolveToolResultFold, TOOL_RESULT_FOLD_TURN_METADATA_KEY, } from "./tool-result-fold.js";
+export { createToolParameterValidator, createToolRegistry, dispatchToolCall, filterTools } from "./tools.js";
+export { resolveUseCaseModel, resolveUseCaseModelBinding, useCaseCredentialProviderId, } from "./use-case-model.js";
 export const name = "prism";
-export const version = "0.0.96";
+export const version = "0.1.0";
 export const description = "Agent harness for AI providers, agents, sessions, and tools.";
 //# sourceMappingURL=index.js.map

package/dist/input.d.ts

@@ -1,6 +1,9 @@
-import type { ContentBlock, ContextBlock, ContextProvider, ContextResolutionContext, InputBuilder, InstructionInjector, InputBuildContext, JsonObject, Message, ModelConfig, PromptBuilder, PromptBuildRequest, ProviderRequest, ProviderRequestOptions, ResourceLoader, Skill, ToolDefinition, ToolResult } from "./contracts.js";
+import { type ContextBudget } from "./context-budget.js";
+import type { ContentBlock, ContextBlock, ContextProvider, ContextResolutionContext, InputBuildContext, InputBuilder, InstructionInjector, JsonObject, Message, ModelConfig, PromptBuilder, PromptBuildRequest, ProviderRequest, ProviderRequestOptions, ResourceLoader, Skill, ToolDefinition, ToolResult } from "./contracts.js";
 import type { MiddlewareRegistry } from "./middleware.js";
 import type { SecretRedactor } from "./redaction.js";
+import { type LoadedSkillSet, type SkillsDisclosure } from "./skill-disclosure.js";
+import { type ResolvedToolResultFoldOptions } from "./tool-result-fold.js";
 export type AgentInput = string | Message | readonly Message[];
 export interface PromptInstruction {
     readonly text: string;
@@ -52,8 +55,14 @@ export interface AssembleProviderInputOptions extends DefaultInputBuildContext {
     readonly contextProviders?: readonly ContextProvider[];
     readonly promptBuilder?: PromptBuilder;
     readonly skills?: readonly Skill[];
+    readonly skillsDisclosure?: SkillsDisclosure;
+    readonly loadedSkills?: LoadedSkillSet;
     readonly tools?: readonly ToolDefinition[];
     readonly providerOptions?: ProviderRequestOptions;
+    /** Assembler-time eviction; does not delete session store history. */
+    readonly contextBudget?: ContextBudget;
+    /** Resolved tool-result fold; projection-only, store untouched. */
+    readonly toolResultFold?: ResolvedToolResultFoldOptions;
 }
 export declare function createDefaultInputBuilder(): DefaultInputBuilder;
 export declare function resolveContextProviders(options: ResolveContextOptions): Promise<readonly ContextBlock[]>;