@arnilo/prism 0.0.96 → 0.1.0

package/dist/input.js

@@ -1,26 +1,19 @@
-import { redactMessage } from "./redaction.js";
 import { assertMessagesSupportModelCapabilities } from "./content.js";
+import { applyContextBudget, CONTEXT_BUDGET_REPORT_METADATA_KEY } from "./context-budget.js";
+import { runInstructionInjectors } from "./instruction-injection.js";
+import { redactMessage } from "./redaction.js";
 import { loadTextResource } from "./resources.js";
+import { skillMessages as buildSkillMessages } from "./skill-disclosure.js";
+import { foldToolResultHistory, foldToolResults } from "./tool-result-fold.js";
 import { composeSystemPrompt } from "./system-prompts.js";
-import { runInstructionInjectors } from "./instruction-injection.js";
 export function createDefaultInputBuilder() {
     return {
         name: "default-input",
         async build(input, context = {}) {
-            const groups = {
-                instructions: [
-                    ...instructionMessages(context.systemInstructions, "System instruction"),
-                    ...instructionMessages(context.developerInstructions, "Developer instruction"),
-                    ...customInstructionMessages(context.instructions),
-                ],
-                summaries: summaryMessages(context.summaries),
-                history: [...(context.history ?? [])],
-                input: inputMessages(input),
-                attachments: await attachmentMessages(context),
-                toolResults: toolResultMessages(context.toolResults),
-            };
-            const messages = flattenInputGroups(groups, context.inputLayout ?? "legacy");
-            return context.middleware ? context.middleware.run("input_assembly", messages) : messages;
+            const groups = await buildDefaultInputMessageGroups(input, context);
+            // `input_assembly` middleware is applied by assembleProviderInput after build(),
+            // never here: builders must not be a security seam.
+            return flattenInputGroups(groups, context.inputLayout ?? "cache_aware");
         },
     };
 }
@@ -28,13 +21,13 @@ export async function resolveContextProviders(options) {
     const blocks = [];
     for (const provider of options.providers ?? []) {
         throwIfAborted(options.signal);
-        blocks.push(...await provider.resolve({
+        blocks.push(...(await provider.resolve({
             sessionId: options.sessionId,
             runId: options.runId,
             messages: options.messages,
             metadata: options.metadata,
             signal: options.signal,
-        }));
+        })));
     }
     // ponytail: injector blocks after host+skill provider blocks (split by origin if per-block ordering matters).
     if (options.injectedBlocks)
@@ -45,10 +38,17 @@ export function createDefaultPromptBuilder() {
     return {
         name: "default-prompt",
         async build(request) {
+            // Tool-capable models receive schemas via request.tools; the text list only serves
+            // text-only (or unknown-capability) models — duplicating it doubles tool tokens per turn.
+            const tools = request.model?.capabilities?.tools === true ? undefined : request.tools;
             return [
                 ...contextMessages(request.context),
-                ...skillMessages(request.skills),
-                ...toolMessages(request.tools),
+                ...buildSkillMessages(request.skills, {
+                    disclosure: request.skillsDisclosure,
+                    loaded: request.loadedSkills,
+                    demotedBodies: request.demotedSkillBodies?.length ? new Set(request.demotedSkillBodies) : undefined,
+                }),
+                ...toolMessages(tools),
                 ...request.messages,
             ];
         },
@@ -56,7 +56,7 @@ export function createDefaultPromptBuilder() {
 }
 export function renderPromptTemplate(template, variables, options = {}) {
     return template.replace(/\{\{\s*([A-Za-z0-9_]+)\s*\}\}/g, (match, name) => {
-        if (!Object.prototype.hasOwnProperty.call(variables, name)) {
+        if (!Object.hasOwn(variables, name)) {
             if (options.missing === "preserve")
                 return match;
             throw new Error(`Missing prompt template variable: ${name}`);
@@ -65,7 +65,6 @@ export function renderPromptTemplate(template, variables, options = {}) {
     });
 }
 export async function assembleProviderInput(options) {
-    const inputBuilder = options.inputBuilder ?? createDefaultInputBuilder();
     const baseContext = {
         sessionId: options.sessionId,
         runId: options.runId,
@@ -76,6 +75,18 @@ export async function assembleProviderInput(options) {
     // filter against loop-local turn. Instructions layer via composeSystemPrompt (no parallel prompt
     // code); contextBlocks merge via resolveContextProviders (middleware still runs).
     const turn = options.turn ?? 1;
+    const foldContext = {
+        sessionId: options.sessionId ?? "",
+        runId: options.runId ?? "",
+        turn,
+        signal: options.signal,
+    };
+    const foldedHistory = options.toolResultFold
+        ? await foldToolResultHistory(options.history ?? [], options.toolResultFold, foldContext)
+        : (options.history ?? []);
+    const foldedToolResults = options.toolResultFold && options.toolResults?.length
+        ? await foldToolResults(options.toolResults, options.toolResultFold, foldContext)
+        : options.toolResults;
     const injectorContribs = options.instructionInjectors?.length
         ? runInstructionInjectors(options.instructionInjectors, {
             sessionId: options.sessionId ?? "",
@@ -83,7 +94,7 @@ export async function assembleProviderInput(options) {
             turn,
             // Runtime history is already redacted; input is redacted here before injector code sees it.
             input: inputMessages(options.input).map((message) => redactMessage(message, options.redactor)),
-            history: options.history ?? [],
+            history: foldedHistory,
             metadata: options.metadata ?? {},
             signal: options.signal ?? new AbortController().signal,
         })
@@ -91,51 +102,136 @@ export async function assembleProviderInput(options) {
     const systemInstructions = injectorContribs.instructions.length
         ? composeSystemPrompt(injectorContribs.instructions, { base: options.systemInstructions })
         : options.systemInstructions;
-    const buildContext = { ...options, ...baseContext, systemInstructions };
-    const messages = await inputBuilder.build(options.input, buildContext);
-    const context = await resolveContextProviders({
-        providers: options.contextProviders,
-        messages,
-        injectedBlocks: injectorContribs.contextBlocks.length ? injectorContribs.contextBlocks : undefined,
-        middleware: options.middleware,
+    const buildContext = {
+        ...options,
         ...baseContext,
-    });
+        systemInstructions,
+        history: foldedHistory,
+        toolResults: foldedToolResults,
+    };
+    const layout = buildContext.inputLayout ?? "cache_aware";
+    let messages;
+    let context;
+    let skills = options.skills;
+    let tools = options.tools;
+    let demotedSkillBodies;
+    let budgetReport;
+    if (options.contextBudget) {
+        // ponytail: budget path always uses default groups so eviction kinds stay deterministic;
+        // custom inputBuilder still honored when contextBudget is absent.
+        const groups = await buildDefaultInputMessageGroups(options.input, buildContext);
+        context = await resolveContextProviders({
+            providers: options.contextProviders,
+            messages: flattenInputGroups(groups, layout),
+            injectedBlocks: injectorContribs.contextBlocks.length ? injectorContribs.contextBlocks : undefined,
+            middleware: options.middleware,
+            ...baseContext,
+        });
+        const applied = applyContextBudget({
+            groups,
+            context,
+            skills: skills ?? [],
+            tools,
+            budget: options.contextBudget,
+            layout,
+            skillsDisclosure: options.skillsDisclosure,
+            loadedSkills: options.loadedSkills,
+        });
+        messages = flattenInputGroups(applied.groups, layout);
+        if (buildContext.middleware)
+            messages = await buildContext.middleware.run("input_assembly", messages);
+        context = applied.context;
+        skills = applied.skills;
+        tools = applied.tools;
+        demotedSkillBodies = applied.demotedSkillBodies;
+        if (options.contextBudget.reportOmissions)
+            budgetReport = applied.report;
+    }
+    else {
+        const inputBuilder = options.inputBuilder ?? createDefaultInputBuilder();
+        messages = await inputBuilder.build(options.input, buildContext);
+        // Runtime-owned: input_assembly middleware always runs, regardless of which builder is installed.
+        if (buildContext.middleware)
+            messages = await buildContext.middleware.run("input_assembly", messages);
+        context = await resolveContextProviders({
+            providers: options.contextProviders,
+            messages,
+            injectedBlocks: injectorContribs.contextBlocks.length ? injectorContribs.contextBlocks : undefined,
+            middleware: options.middleware,
+            ...baseContext,
+        });
+    }
     const promptBuilder = options.promptBuilder ?? createDefaultPromptBuilder();
     const promptRequest = options.middleware
         ? await options.middleware.run("prompt_build", {
             messages,
             context,
-            skills: options.skills,
-            tools: options.tools,
+            skills,
+            skillsDisclosure: options.skillsDisclosure,
+            loadedSkills: options.loadedSkills,
+            demotedSkillBodies,
+            tools,
             metadata: options.metadata,
             signal: options.signal,
         })
         : {
             messages,
             context,
-            skills: options.skills,
-            tools: options.tools,
+            skills,
+            skillsDisclosure: options.skillsDisclosure,
+            loadedSkills: options.loadedSkills,
+            demotedSkillBodies,
+            tools,
             metadata: options.metadata,
             signal: options.signal,
         };
-    const providerMessages = await promptBuilder.build({ ...promptRequest, tools: options.tools });
+    const providerMessages = await promptBuilder.build({ ...promptRequest, tools, model: options.model });
     assertMessagesSupportModelCapabilities(options.model, providerMessages);
+    const metadata = budgetReport ? { ...options.metadata, [CONTEXT_BUDGET_REPORT_METADATA_KEY]: budgetReport } : options.metadata;
     return {
         model: options.model,
         messages: providerMessages,
-        tools: options.tools,
+        tools,
         context,
         options: options.providerOptions,
-        metadata: options.metadata,
+        metadata,
         signal: options.signal,
     };
 }
+async function buildDefaultInputMessageGroups(input, context) {
+    return {
+        instructions: [
+            ...instructionMessages(context.systemInstructions, "System instruction"),
+            ...instructionMessages(context.developerInstructions, "Developer instruction"),
+            ...customInstructionMessages(context.instructions),
+        ],
+        summaries: summaryMessages(context.summaries),
+        history: [...(context.history ?? [])],
+        input: inputMessages(input),
+        attachments: await attachmentMessages(context),
+        toolResults: toolResultMessages(context.toolResults),
+    };
+}
 function flattenInputGroups(groups, layout) {
     switch (layout) {
         case "cache_aware":
-            return [...groups.instructions, ...groups.attachments, ...groups.summaries, ...groups.history, ...groups.toolResults, ...groups.input];
+            return [
+                ...groups.instructions,
+                ...groups.attachments,
+                ...groups.summaries,
+                ...groups.history,
+                ...groups.toolResults,
+                ...groups.input,
+            ];
         case "legacy":
-            return [...groups.instructions, ...groups.summaries, ...groups.history, ...groups.input, ...groups.attachments, ...groups.toolResults];
+            return [
+                ...groups.instructions,
+                ...groups.summaries,
+                ...groups.history,
+                ...groups.input,
+                ...groups.attachments,
+                ...groups.toolResults,
+            ];
     }
 }
 export function inputMessages(input) {
@@ -146,7 +242,7 @@ export function inputMessages(input) {
     return [...input];
 }
 function instructionMessages(value, label) {
-    const items = typeof value === "string" ? [value] : value ?? [];
+    const items = typeof value === "string" ? [value] : (value ?? []);
     return items.map((text) => textMessage("system", `${label}:\n${text}`));
 }
 function customInstructionMessages(value) {
@@ -198,13 +294,16 @@ async function resourceMessage(uri, context, attachment) {
 function toolResultMessages(results) {
     return (results ?? []).map((result) => ({
         role: "tool",
-        content: [{
+        content: [
+            {
                 type: "tool_result",
                 toolCallId: result.toolCallId,
                 name: result.name,
                 result: result.value,
                 error: result.error,
-            }, ...(result.content ?? [])],
+            },
+            ...(result.content ?? []),
+        ],
         metadata: result.metadata,
     }));
 }
@@ -214,20 +313,18 @@ function textMessage(role, text, metadata) {
 function contextMessages(context) {
     return (context ?? []).map((block) => textMessage("system", `${block.title ? `${block.title}:\n` : "Context:\n"}${blockText(block)}`, block.metadata));
 }
-function skillMessages(skills) {
-    return (skills ?? [])
-        .filter((skill) => skill.instructions)
-        .map((skill) => textMessage("system", `Skill ${skill.name}:\n${skill.instructions}`, skill.metadata));
-}
 function toolMessages(tools) {
     if (!tools?.length)
         return [];
-    return [textMessage("system", `Available tools:\n${tools.map((tool) => `- ${tool.name}${tool.description ? `: ${tool.description}` : ""}`).join("\n")}`)];
+    return [
+        textMessage("system", `Available tools:\n${tools.map((tool) => `- ${tool.name}${tool.description ? `: ${tool.description}` : ""}`).join("\n")}`),
+    ];
 }
 function blockText(block) {
     if (typeof block.content === "string")
         return block.content;
-    return block.content.map((part) => {
+    return block.content
+        .map((part) => {
         if (part.type === "text" || part.type === "thinking")
             return part.text;
         if (part.type === "tool_result")
@@ -245,7 +342,8 @@ function blockText(block) {
         if (part.type === "document")
             return part.transcript ?? part.name ?? part.url ?? part.resourceUri ?? part.mediaType ?? "[document]";
         return "[content]";
-    }).join("\n");
+    })
+        .join("\n");
 }
 function templateValue(value) {
     if (typeof value === "string")
@@ -259,7 +357,9 @@ function sortJson(value) {
         return value;
     if (Array.isArray(value))
         return value.map(sortJson);
-    return Object.fromEntries(Object.keys(value).sort().map((key) => [key, sortJson(value[key])]));
+    return Object.fromEntries(Object.keys(value)
+        .sort()
+        .map((key) => [key, sortJson(value[key])]));
 }
 function throwIfAborted(signal) {
     if (signal?.aborted)

package/dist/instruction-injection.d.ts

@@ -1,5 +1,5 @@
-import type { ContributionRegistry } from "./contributions.js";
 import type { ContextBlock, InstructionContext, InstructionInjector, SystemPromptContribution } from "./contracts.js";
+import type { ContributionRegistry } from "./contributions.js";
 /** Run each selected injector against `ctx`, returning the matching contributions as
  *  `package`-source `SystemPromptContribution[]` (for `composeSystemPrompt`) and
  *  `ContextBlock[]` (for the context merge). Aborts on `ctx.signal`. Non-matching

package/dist/middleware.js

@@ -21,10 +21,13 @@ export function createMiddlewareRegistry(options = {}) {
         },
         async run(hook, value) {
             let current = value;
-            for (const middleware of byHook.get(hook) ?? []) {
+            for (const [index, middleware] of (byHook.get(hook) ?? []).entries()) {
                 try {
                     let calledNext = false;
                     const next = async (nextValue) => {
+                        // Double next() forks the chain value nondeterministically — always a bug.
+                        if (calledNext)
+                            throw new Error(`Middleware hook "${hook}" #${index}: next() called more than once`);
                         calledNext = true;
                         current = nextValue;
                         return current;
@@ -32,6 +35,11 @@ export function createMiddlewareRegistry(options = {}) {
                     const result = await middleware(current, next);
                     if (!calledNext)
                         current = result;
+                    else if (result !== undefined && result !== current) {
+                        // next(v) already committed the chain value; a conflicting return is silently
+                        // discarded. Ambiguous rather than certainly-wrong, so diagnose, don't throw.
+                        await options.onError?.(middlewareError(new Error(`Middleware hook "${hook}" #${index}: called next(value) and returned a different value; the next() value wins, the return is discarded`), hook, secrets));
+                    }
                 }
                 catch (error) {
                     if (errorPolicy === "throw")

package/dist/models.d.ts

@@ -2,6 +2,8 @@ import type { ModelConfig } from "./contracts.js";
 import { type DuplicateRegistrationOptions } from "./registry-options.js";
 export interface ModelRegistry {
     register(model: ModelConfig): void;
+    /** Remove a model; returns false when it was not registered. */
+    unregister(provider: string, model: string): boolean;
     get(provider: string, model: string): ModelConfig | undefined;
     resolve(provider: string, model: string): ModelConfig;
     list(): readonly ModelConfig[];

package/dist/models.js

@@ -8,6 +8,9 @@ export function createModelRegistry(models = [], options = {}) {
             assertCanRegister(byId, id, "model", `${model.provider}/${model.model}`, options.duplicate);
             byId.set(id, model);
         },
+        unregister(provider, model) {
+            return byId.delete(key(provider, model));
+        },
         get(provider, model) {
             return byId.get(key(provider, model));
         },

package/dist/node/agent-definitions.js

@@ -1,13 +1,12 @@
+import { readdir, readFile, stat } from "node:fs/promises";
 import { join } from "node:path";
-import { readFile } from "node:fs/promises";
-import { readdir, stat } from "node:fs/promises";
-import { parseSkillFile, splitFrontmatter } from "../contribution-parsing.js";
 import { resolveAgentDefinition } from "../agent-definitions.js";
+import { parseSkillFile, splitFrontmatter } from "../contribution-parsing.js";
 import { assertPermission, isTrusted } from "../security.js";
-import { isPathInsideReal } from "./trust.js";
-import { readOptionalFile } from "./contribution-discovery.js";
 import { createSkillRegistry } from "../skills.js";
 import { isNodeErrorCode } from "./config.js";
+import { readOptionalFile } from "./contribution-discovery.js";
+import { isPathInsideReal } from "./trust.js";
 const defaultInclude = {
     systemPrompt: true,
     agentPrompt: true,
@@ -288,7 +287,13 @@ function resolveSkillContexts(skills, contextProviders) {
 function collectMetadata(front) {
     const metadata = {};
     for (const [key, value] of front) {
-        if (key !== "name" && key !== "description" && key !== "model" && key !== "tools" && key !== "skills" && key !== "context" && key !== "instructions") {
+        if (key !== "name" &&
+            key !== "description" &&
+            key !== "model" &&
+            key !== "tools" &&
+            key !== "skills" &&
+            key !== "context" &&
+            key !== "instructions") {
             metadata[key] = value;
         }
     }
@@ -305,7 +310,10 @@ function getStringList(front, key) {
     if (Array.isArray(value))
         return value.map(String);
     if (typeof value === "string")
-        return value.split(",").map((s) => s.trim()).filter(Boolean);
+        return value
+            .split(",")
+            .map((s) => s.trim())
+            .filter(Boolean);
     return undefined;
 }
 function bodyAsInstructions(text, path) {
@@ -348,7 +356,7 @@ async function readOptional(read, path) {
 const NAME_RE = /^[A-Za-z0-9 _-]+$/;
 function parentDirName(path) {
     const parts = path.split(/[/\\]+/).filter(Boolean);
-    return parts.length >= 2 ? parts[parts.length - 2] : parts[parts.length - 1] ?? "";
+    return parts.length >= 2 ? parts[parts.length - 2] : (parts[parts.length - 1] ?? "");
 }
 /** Parse a `CONTEXT.md` into a static {@link ContextProvider}. The markdown
  *  body becomes the context block content; frontmatter `name` overrides the

package/dist/node/contribution-discovery.d.ts

@@ -1,6 +1,5 @@
 import type { ContributionFileKind, DiscoveredContribution } from "../contracts.js";
-import type { PermissionPolicy } from "../security.js";
-import type { TrustPolicy } from "../security.js";
+import type { PermissionPolicy, TrustPolicy } from "../security.js";
 export interface DiscoveryOptions {
     readonly kinds: readonly ContributionFileKind[];
     /** Workspace root. Scans `<root>/.agents/<kind>s/<name>/`. Gated by `trust`. */

package/dist/node/contribution-discovery.js

@@ -1,10 +1,10 @@
 import { readdir, readFile, stat } from "node:fs/promises";
 import { join } from "node:path";
 import { isJsonObject } from "../config.js";
-import { assertPermission } from "../security.js";
-import { isPathInsideReal } from "./trust.js";
 import { parseSkillFile } from "../contribution-parsing.js";
+import { assertPermission } from "../security.js";
 import { isNodeErrorCode } from "./config.js";
+import { isPathInsideReal } from "./trust.js";
 /**
  * Discover contributions on disk. Scans the workspace `.agents/` tree only;
  * no global root. One `readdir` per kind-root; no `import()`. Inert output —
@@ -72,7 +72,7 @@ async function readEntry(dir, fallbackName, kind, origin) {
             return readManifestEntry(dir, fallbackName, kind, origin);
     }
 }
-async function readSkillEntry(dir, fallbackName, origin) {
+async function readSkillEntry(dir, _fallbackName, origin) {
     const path = join(dir, "SKILL.md");
     if (!(await isPathInsideReal(dir, path)))
         return undefined;

package/dist/node/session-store-jsonl.js

@@ -1,6 +1,6 @@
-import { mkdir, readFile, appendFile } from "node:fs/promises";
+import { appendFile, mkdir, readFile } from "node:fs/promises";
 import { dirname } from "node:path";
-import { SESSION_APPEND_CONFLICT_CODE, SessionAppendConflictError, isSessionEntryKind, SESSION_ENTRY_SCHEMA_VERSION } from "../contracts.js";
+import { isSessionEntryKind, SESSION_APPEND_CONFLICT_CODE, SESSION_ENTRY_SCHEMA_VERSION, SessionAppendConflictError, SessionSearchUnsupportedError, } from "../contracts.js";
 import { isNodeErrorCode } from "./config.js";
 export function createJsonlSessionStore(pathOrOptions) {
     const options = typeof pathOrOptions === "string" ? { path: pathOrOptions, createDirectory: true } : pathOrOptions;
@@ -46,6 +46,9 @@ export function createJsonlSessionStore(pathOrOptions) {
         async get(id) {
             return findEntry(path, id);
         },
+        async searchSessions() {
+            throw new SessionSearchUnsupportedError("JSONL session store does not support searchSessions");
+        },
     };
 }
 /** Read a JSONL session file and return both valid entries and per-line parse errors. */
@@ -90,7 +93,10 @@ function parseEntry(line, lineNumber) {
 }
 function validateSessionEntry(value, lineNumber, raw) {
     if (!isBasicSessionEntry(value)) {
-        return { ok: false, error: { line: lineNumber, message: "Invalid session entry: expected object with id, sessionId, timestamp, and kind", raw } };
+        return {
+            ok: false,
+            error: { line: lineNumber, message: "Invalid session entry: expected object with id, sessionId, timestamp, and kind", raw },
+        };
     }
     const entry = value;
     if (entry.parentId !== undefined && typeof entry.parentId !== "string") {
@@ -146,10 +152,10 @@ function isBasicSessionEntry(value) {
     if (!value || typeof value !== "object" || Array.isArray(value))
         return false;
     const entry = value;
-    return typeof entry.id === "string"
-        && typeof entry.sessionId === "string"
-        && typeof entry.timestamp === "string"
-        && typeof entry.kind === "string";
+    return (typeof entry.id === "string" &&
+        typeof entry.sessionId === "string" &&
+        typeof entry.timestamp === "string" &&
+        typeof entry.kind === "string");
 }
 function isMessage(value) {
     if (!value || typeof value !== "object" || Array.isArray(value))

package/dist/node/settings.d.ts

@@ -1,6 +1,6 @@
 import { type ConfigLayer } from "../config.js";
-import { type NodeConfigFile } from "./config.js";
 import type { SettingsProvider } from "../contracts.js";
+import { type NodeConfigFile } from "./config.js";
 export type NodeSettingsFile = NodeConfigFile;
 export declare function defaultUserSettingsPath(appName?: string): string;
 export declare function readSettingsFile(path: string): Promise<ConfigLayer["config"]>;

package/dist/node/settings.js

@@ -1,8 +1,8 @@
 import { homedir } from "node:os";
 import { join } from "node:path";
 import { mergeConfigLayers } from "../config.js";
-import { readConfigFile, isNodeErrorCode } from "./config.js";
 import { createStaticSettingsProvider } from "../settings.js";
+import { isNodeErrorCode, readConfigFile } from "./config.js";
 export function defaultUserSettingsPath(appName = "prism") {
     return join(homedir(), ".config", appName, "settings.json");
 }

package/dist/node/system-project-prompts.js

@@ -14,10 +14,8 @@ import { readOptionalFile } from "./contribution-discovery.js";
  *  singletons don't fit `discoverContributions`' named-subdir scanner, so this is a
  *  sibling loader mirroring `src/node/instruction-injectors.ts`'s per-concern adapter shape. */
 export async function loadSystemPromptFiles(options) {
-    const agentsPath = options.agentsMdPath
-        ?? (options.workspaceRoot !== undefined ? join(options.workspaceRoot, "AGENTS.md") : undefined);
-    const systemPath = options.systemMdPath
-        ?? (options.globalRoot !== undefined ? join(options.globalRoot, ".prism", "agent", "SYSTEM.md") : undefined);
+    const agentsPath = options.agentsMdPath ?? (options.workspaceRoot !== undefined ? join(options.workspaceRoot, "AGENTS.md") : undefined);
+    const systemPath = options.systemMdPath ?? (options.globalRoot !== undefined ? join(options.globalRoot, ".prism", "agent", "SYSTEM.md") : undefined);
     const out = [];
     if (systemPath !== undefined) {
         const layer = await readSystemFile(systemPath, options.permission);

package/dist/node/trust.js

@@ -1,5 +1,5 @@
-import { isAbsolute, relative, resolve, dirname, basename, join } from "node:path";
 import { realpath } from "node:fs/promises";
+import { basename, dirname, isAbsolute, join, relative, resolve } from "node:path";
 import { isNodeErrorCode } from "./config.js";
 export function isPathInside(root, target) {
     const from = resolve(root);