@arnilo/prism 0.0.96 → 0.1.1

package/dist/artifacts.d.ts

@@ -0,0 +1,132 @@
+import type { OwnershipScope } from "./contracts.js";
+/**
+ * Durable artifact co-work review types (Phase 9 / 0.0.14). Core exports types only;
+ * the service + delivery-link signer live in `@arnilo/prism-server`. Prism persists bounded
+ * metadata, revisions, approvals, and delivery references — never file bodies (hosts own blobs).
+ */
+/** Review state of an artifact's latest revision. */
+export type ArtifactApprovalState = "pending" | "approved" | "rejected";
+/** A resolved decision on one revision (pending is the absence of a decision). */
+export type ArtifactDecisionState = Exclude<ArtifactApprovalState, "pending">;
+/** Bounded citation / data-source reference. Host resolves the body; Prism stores the ref only. */
+export interface ArtifactCitation {
+    readonly uri: string;
+    readonly title?: string;
+    /** Data-source kind (e.g. "web", "database", "upload"); host-defined, bounded. */
+    readonly kind?: string;
+}
+/** One immutable revision of an artifact. `uri`/`hash` reference host-owned content. */
+export interface ArtifactRevision {
+    /** 1-based, monotonic within the artifact. */
+    readonly version: number;
+    /** Host-owned blob reference (redacted; never a local filesystem path). */
+    readonly uri: string;
+    readonly mime: string;
+    /** Host-computed content hash for integrity compare. */
+    readonly hash: string;
+    /** Expected body byte length; required when a blob store is wired for delivery. */
+    readonly size?: number;
+    readonly changeNote?: string;
+    /** Run that produced this revision, if any. */
+    readonly producerRunId?: string;
+    readonly citations?: readonly ArtifactCitation[];
+    /** Preview metadata only; the host renders content. */
+    readonly preview?: Readonly<Record<string, unknown>>;
+    readonly createdAt: string;
+}
+/** A reviewer decision on a specific revision. */
+export interface ArtifactApproval {
+    readonly version: number;
+    readonly state: ArtifactDecisionState;
+    /** Redacted reviewer actor reference. */
+    readonly reviewer: string;
+    /** Change-request / rejection note. */
+    readonly note?: string;
+    readonly decidedAt: string;
+}
+/**
+ * Durable artifact record. Stored as a versioned checkpoint value; the checkpoint version
+ * is the CAS counter for concurrent reviewers, distinct from revision numbers.
+ */
+export interface ArtifactRecord extends OwnershipScope {
+    readonly id: string;
+    readonly threadId: string;
+    readonly title?: string;
+    readonly revisions: readonly ArtifactRevision[];
+    readonly approvals: readonly ArtifactApproval[];
+    /** Last approved revision; remains recoverable after a later rejection. */
+    readonly lastValidatedVersion?: number;
+    readonly createdAt: string;
+    readonly updatedAt: string;
+}
+/** Signed, expiring delivery authorization. Reauthorized per download; never a bearer secret. */
+export interface ArtifactDeliveryToken extends OwnershipScope {
+    readonly artifactId: string;
+    readonly threadId: string;
+    readonly version: number;
+    readonly issuedAt: string;
+    readonly expiresAt: string;
+}
+/**
+ * Opaque, ownership-scoped reference to one artifact body revision. The store derives its
+ * internal object key from these fields; hosts never see or store bucket/path/key internals.
+ * `size` is the expected byte length and `hash` the expected SHA-256 hex; both are verified
+ * on every put/get (fail closed on mismatch).
+ */
+export interface ArtifactBodyRef extends OwnershipScope {
+    readonly artifactId: string;
+    readonly threadId: string;
+    readonly version: number;
+    readonly mime: string;
+    /** Expected body byte length; verified against the actual body on put and get. */
+    readonly size: number;
+    /** Expected SHA-256 hex digest of the body; verified on put and get. */
+    readonly hash: string;
+}
+/** Transfer options shared by put/get/delete. */
+export interface ArtifactBodyTransferOptions {
+    readonly signal?: AbortSignal;
+}
+/** Presign options: bounded TTL for the returned delivery URL. */
+export interface ArtifactBodyPresignOptions extends ArtifactBodyTransferOptions {
+    /** Bounded by the store's presignTtlMs cap; defaults to the store default. */
+    readonly ttlMs?: number;
+}
+/**
+ * Host-owned blob storage contract (Phase 11 / 0.0.28). Core exports the contract only;
+ * the reference S3-compatible adapter lives in `@arnilo/prism-server/artifact-bodies`.
+ * Implementations must verify ownership on every operation, verify hash/size/MIME on
+ * put/get (fail closed), refuse delete under legal hold, and never disclose bucket/path/key
+ * in errors, telemetry, or records. All failures surface typed errors, never silent success.
+ */
+export interface ArtifactBodyStore {
+    /** Store a body; verifies size + SHA-256 hash against the ref before persisting. */
+    put(ref: ArtifactBodyRef, body: Uint8Array | ReadableStream<Uint8Array>, options?: ArtifactBodyTransferOptions): Promise<void>;
+    /** Retrieve a body; verifies size, MIME, and SHA-256 hash before returning bytes. */
+    get(ref: ArtifactBodyRef, options?: ArtifactBodyTransferOptions): Promise<ReadableStream<Uint8Array>>;
+    /** Delete a body; idempotent. Refuses while the resource is under legal hold. */
+    delete(ref: ArtifactBodyRef, options?: ArtifactBodyTransferOptions): Promise<void>;
+    /** Return a bounded-TTL, single-object delivery URL (never a bucket listing or wildcard). */
+    presign(ref: ArtifactBodyRef, options?: ArtifactBodyPresignOptions): Promise<string>;
+}
+/** Frozen ArtifactBodyStore failure reasons (fail-closed posture). */
+export type ArtifactBodyErrorCode = "OWNERSHIP" | "HASH_MISMATCH" | "SIZE_MISMATCH" | "MIME_MISMATCH" | "HELD" | "STORE";
+/** Well-known error codes for ArtifactBodyStore failures. */
+export declare const ARTIFACT_BODY_ERROR_CODES: Readonly<Record<ArtifactBodyErrorCode, `ERR_PRISM_ARTIFACT_BODY_${ArtifactBodyErrorCode}`>>;
+/** Typed ArtifactBodyStore failure; `code` is one of the frozen ERR_PRISM_ARTIFACT_BODY_* codes. */
+export declare class ArtifactBodyStoreError extends Error {
+    readonly reason: ArtifactBodyErrorCode;
+    readonly code: `ERR_PRISM_ARTIFACT_BODY_${ArtifactBodyErrorCode}`;
+    constructor(message: string, reason: ArtifactBodyErrorCode);
+}
+/** Well-known checkpoint namespace for artifact records. */
+export declare const ARTIFACT_CHECKPOINT_NAMESPACE = "prism.artifact";
+export declare class ArtifactError extends Error {
+    readonly reason: string;
+    readonly code = "ERR_PRISM_ARTIFACT";
+    constructor(message: string, reason: string);
+}
+/** Checkpoint key for an artifact: thread-scoped so per-thread listing uses a key prefix. */
+export declare function artifactCheckpointKey(threadId: string, artifactId: string): string;
+/** Current review state: the decision on the latest revision, or pending when undecided. */
+export declare function artifactApprovalState(record: ArtifactRecord): ArtifactApprovalState;

package/dist/artifacts.js

@@ -0,0 +1,44 @@
+/** Well-known error codes for ArtifactBodyStore failures. */
+export const ARTIFACT_BODY_ERROR_CODES = {
+    OWNERSHIP: "ERR_PRISM_ARTIFACT_BODY_OWNERSHIP",
+    HASH_MISMATCH: "ERR_PRISM_ARTIFACT_BODY_HASH_MISMATCH",
+    SIZE_MISMATCH: "ERR_PRISM_ARTIFACT_BODY_SIZE_MISMATCH",
+    MIME_MISMATCH: "ERR_PRISM_ARTIFACT_BODY_MIME_MISMATCH",
+    HELD: "ERR_PRISM_ARTIFACT_BODY_HELD",
+    STORE: "ERR_PRISM_ARTIFACT_BODY_STORE",
+};
+/** Typed ArtifactBodyStore failure; `code` is one of the frozen ERR_PRISM_ARTIFACT_BODY_* codes. */
+export class ArtifactBodyStoreError extends Error {
+    reason;
+    code;
+    constructor(message, reason) {
+        super(message);
+        this.reason = reason;
+        this.name = "ArtifactBodyStoreError";
+        this.code = ARTIFACT_BODY_ERROR_CODES[reason];
+    }
+}
+/** Well-known checkpoint namespace for artifact records. */
+export const ARTIFACT_CHECKPOINT_NAMESPACE = "prism.artifact";
+export class ArtifactError extends Error {
+    reason;
+    code = "ERR_PRISM_ARTIFACT";
+    constructor(message, reason) {
+        super(message);
+        this.reason = reason;
+        this.name = "ArtifactError";
+    }
+}
+/** Checkpoint key for an artifact: thread-scoped so per-thread listing uses a key prefix. */
+export function artifactCheckpointKey(threadId, artifactId) {
+    return `${threadId}:${artifactId}`;
+}
+/** Current review state: the decision on the latest revision, or pending when undecided. */
+export function artifactApprovalState(record) {
+    const latest = record.revisions[record.revisions.length - 1];
+    if (latest === undefined)
+        return "pending";
+    const decision = record.approvals.find((approval) => approval.version === latest.version);
+    return decision?.state ?? "pending";
+}
+//# sourceMappingURL=artifacts.js.map

package/dist/cache-helpers.js

@@ -1,5 +1,8 @@
 export function sanitizeCacheKey(value, maxLength) {
-    const key = value?.replace(/[^A-Za-z0-9_.:-]+/g, "-").replace(/^-+|-+$/g, "").slice(0, Math.max(0, maxLength));
+    const key = value
+        ?.replace(/[^A-Za-z0-9_.:-]+/g, "-")
+        .replace(/^-+|-+$/g, "")
+        .slice(0, Math.max(0, maxLength));
     return key || undefined;
 }
 export function mapCacheRetention(retention, model) {
@@ -37,7 +40,7 @@ export function cacheSavings(usage, model) {
     const cacheRead = model.cost?.cacheRead;
     if (read === undefined || input === undefined || cacheRead === undefined)
         return undefined;
-    return read * Math.max(0, input - cacheRead) / costUnitDivisor(model.cost?.unit);
+    return (read * Math.max(0, input - cacheRead)) / costUnitDivisor(model.cost?.unit);
 }
 export function cacheUsageReport(usage, model) {
     if (!usage)
@@ -48,17 +51,23 @@ export function cacheUsageReport(usage, model) {
         cacheWriteTokens: usage.cacheWriteTokens ?? 0,
         hitRate: cacheHitRate(usage),
         estimatedSavings,
-        currency: estimatedSavings === undefined ? usage.currency : model?.cost?.currency ?? usage.currency,
+        currency: estimatedSavings === undefined ? usage.currency : (model?.cost?.currency ?? usage.currency),
     };
 }
 function resolveBreakpoint(messages, breakpoint) {
     switch (breakpoint.location) {
-        case "system_prompt": return messages.findIndex((message) => message.role === "system");
-        case "tools": return messages.findIndex((message) => message.role === "tool" || message.content.some((block) => block.type === "tool_call" || block.type === "tool_result"));
-        case "stable_context": return messages.findIndex((message) => message.role !== "system");
-        case "last_stable_message": return messages.length > 1 ? messages.length - 2 : messages.length - 1;
-        case "last_user_message": return findLastIndex(messages, (message) => message.role === "user");
-        case "message_id": return messages.findIndex((message) => message.id === breakpoint.messageId);
+        case "system_prompt":
+            return messages.findIndex((message) => message.role === "system");
+        case "tools":
+            return messages.findIndex((message) => message.role === "tool" || message.content.some((block) => block.type === "tool_call" || block.type === "tool_result"));
+        case "stable_context":
+            return messages.findIndex((message) => message.role !== "system");
+        case "last_stable_message":
+            return messages.length > 1 ? messages.length - 2 : messages.length - 1;
+        case "last_user_message":
+            return findLastIndex(messages, (message) => message.role === "user");
+        case "message_id":
+            return messages.findIndex((message) => message.id === breakpoint.messageId);
     }
 }
 function findLastIndex(items, predicate) {

package/dist/checkpoints.d.ts

@@ -6,6 +6,10 @@ export declare class CheckpointConflictError extends Error {
 }
 export interface MemoryCheckpointStoreOptions {
     readonly maxPageSize?: number;
+    /** Capacity bound: least-recently-saved records are evicted past this count (default 10_000). */
+    readonly maxRecords?: number;
+    /** Per-record bound on the JSON-encoded value in bytes (default 1 MiB); oversized values are rejected. */
+    readonly maxValueBytes?: number;
 }
 /** In-process reference implementation of the generic checkpoint contract. */
 export declare function createMemoryCheckpointStore(options?: MemoryCheckpointStoreOptions): CheckpointStore;

package/dist/checkpoints.js

@@ -6,10 +6,14 @@ export class CheckpointConflictError extends Error {
         this.name = "CheckpointConflictError";
     }
 }
+const DEFAULT_MAX_CHECKPOINT_RECORDS = 10_000;
+const DEFAULT_MAX_CHECKPOINT_VALUE_BYTES = 1024 * 1024;
 /** In-process reference implementation of the generic checkpoint contract. */
 export function createMemoryCheckpointStore(options = {}) {
     const records = new Map();
     const maxPageSize = Math.max(1, options.maxPageSize ?? 500);
+    const maxRecords = Math.max(1, options.maxRecords ?? DEFAULT_MAX_CHECKPOINT_RECORDS);
+    const maxValueBytes = Math.max(1, options.maxValueBytes ?? DEFAULT_MAX_CHECKPOINT_VALUE_BYTES);
     return {
         async saveCheckpoint(input) {
             throwIfAborted(input.signal);
@@ -32,6 +36,9 @@ export function createMemoryCheckpointStore(options = {}) {
             }
             const now = new Date().toISOString();
             const value = cloneJson(input.value, "Checkpoint value");
+            if (new TextEncoder().encode(JSON.stringify(value)).length > maxValueBytes) {
+                throw new RangeError(`Checkpoint value exceeds maxValueBytes (${maxValueBytes})`);
+            }
             const metadata = input.metadata === undefined ? undefined : cloneJson(input.metadata, "Checkpoint metadata");
             const record = {
                 namespace: input.namespace,
@@ -45,7 +52,12 @@ export function createMemoryCheckpointStore(options = {}) {
                 updatedAt: now,
                 ...(metadata === undefined ? {} : { metadata }),
             };
+            // delete+set moves an updated record to the end, keeping Map order = least- to
+            // most-recently-saved, so capacity eviction is O(1) off the front.
+            records.delete(id);
             records.set(id, record);
+            while (records.size > maxRecords)
+                records.delete(records.keys().next().value);
             return record;
         },
         async loadCheckpoint(input) {
@@ -61,9 +73,7 @@ export function createMemoryCheckpointStore(options = {}) {
             throwIfAborted(query.signal);
             const offset = decodeCursor(query.cursor);
             const limit = Math.min(Math.max(1, query.limit ?? 100), maxPageSize);
-            const categories = query.category === undefined
-                ? undefined
-                : new Set(Array.isArray(query.category) ? query.category : [query.category]);
+            const categories = query.category === undefined ? undefined : new Set(Array.isArray(query.category) ? query.category : [query.category]);
             const items = [...records.values()]
                 .filter((record) => query.namespace === undefined || record.namespace === query.namespace)
                 .filter((record) => query.keyPrefix === undefined || record.key.startsWith(query.keyPrefix))
@@ -104,14 +114,12 @@ function ownership(input) {
     };
 }
 function ownershipMatches(expected, actual) {
-    return expected.tenantId === actual.tenantId
-        && expected.accountId === actual.accountId
-        && expected.userId === actual.userId;
+    return expected.tenantId === actual.tenantId && expected.accountId === actual.accountId && expected.userId === actual.userId;
 }
 function ownershipFilterMatches(expected, actual) {
-    return (expected.tenantId === undefined || expected.tenantId === actual.tenantId)
-        && (expected.accountId === undefined || expected.accountId === actual.accountId)
-        && (expected.userId === undefined || expected.userId === actual.userId);
+    return ((expected.tenantId === undefined || expected.tenantId === actual.tenantId) &&
+        (expected.accountId === undefined || expected.accountId === actual.accountId) &&
+        (expected.userId === undefined || expected.userId === actual.userId));
 }
 function assertOwnership(expected, actual) {
     if (!ownershipMatches(expected, actual)) {

package/dist/cli-init.js

@@ -1,5 +1,5 @@
-import { access, mkdir, readdir, readFile, writeFile } from "node:fs/promises";
 import { constants as fsConstants, readFileSync } from "node:fs";
+import { access, mkdir, readdir, readFile, writeFile } from "node:fs/promises";
 import { dirname, isAbsolute, join, normalize, relative, resolve, sep } from "node:path";
 import { fileURLToPath } from "node:url";
 export class InitUsageError extends Error {
@@ -305,12 +305,8 @@ function buildTokens(input) {
         ? `2. Copy \`.env.example\` to \`.env\` and set \`${input.provider.envKey}\`.\n3. Run \`npm start\` for a live provider call.`
         : `2. Run \`npm start\` (mock provider; no network or credentials).`;
     const optionalDocs = [
-        ...(input.withWorkflows
-            ? ["- `src/workflows-example.ts` — tiny DAG example using `@arnilo/prism-workflows`."]
-            : []),
-        ...(input.withEvals
-            ? ["- `src/evals-example.ts` — deterministic scorer example using `@arnilo/prism-evals`."]
-            : []),
+        ...(input.withWorkflows ? ["- `src/workflows-example.ts` — tiny DAG example using `@arnilo/prism-workflows`."] : []),
+        ...(input.withEvals ? ["- `src/evals-example.ts` — deterministic scorer example using `@arnilo/prism-evals`."] : []),
     ].join("\n");
     return {
         __PROJECT_NAME__: input.projectName,

package/dist/cli-runner.d.ts

@@ -9,10 +9,6 @@ export interface CliOptions {
     readonly provider?: string;
     readonly model?: string;
     readonly session?: string;
-    readonly config: readonly string[];
-    readonly resources: readonly string[];
-    readonly extensions: readonly string[];
-    readonly tools: readonly string[];
     readonly system?: string;
     readonly context: readonly string[];
     readonly compact?: number;
@@ -46,7 +42,7 @@ export interface CliOptions {
     readonly agentsMdFile?: string;
     readonly systemMdFile?: string;
     /** Runtime-populated: AGENTS.md/SYSTEM.md layers loaded from disk (print/json modes only;
-    *  RPC is host-owned). Threaded into `AgentConfig.systemPrompt` by `defaultCreateSession`. */
+     *  RPC is host-owned). Threaded into `AgentConfig.systemPrompt` by `defaultCreateSession`. */
     readonly systemPromptLayers: readonly SystemPromptContribution[];
 }
 export interface CliRuntime {
@@ -67,7 +63,7 @@ export interface CliRuntime {
     /** Working directory for relative `prism init` destinations (tests). */
     readonly cwd?: string;
 }
-export declare const usage = "Usage: prism [--mode print|json|rpc] [-p prompt] [options]\n       prism init <dir> [--provider <name>] [--with-workflows] [--with-evals] [--force]\n\nOptions:\n  -p, --prompt <text>        Prompt to run in print/json mode\n  --provider <name>          Explicit provider id (mock is built in for smoke tests)\n  --model <name>             Explicit model name\n  --session <id>             Session id\n  --config <path>            Explicit config path (recorded, not auto-loaded)\n  --resource <uri>           Explicit resource URI (recorded, not auto-loaded)\n  --extension <name>         Explicit extension name (recorded, not auto-loaded)\n  --tool <name>              Explicit tool name (recorded, not auto-enabled)\n  --system <text>            System instructions\n  --context <text>           Context text\n  --compact <entries>        Auto-compaction threshold\n  --max-tool-rounds <n>      Maximum tool rounds\n  --discover                 Enable workspace contribution discovery (opt-in)\n  --discover-kinds <csv>     Kinds to discover (default: skill; skill,tool,context,instructions)\n  --no-discovery             Disable discovery even if --discover is set\n  --agents-config <path>     App config root holding agents/<name>/AGENT.md bundles (opt-in)\n  --no-agents-md             Skip auto-loading <workspaceRoot>/AGENTS.md\n  --no-system-md             Skip auto-loading the global SYSTEM.md layer\n  --agents-md-file <path>    Read AGENTS.md from <path> instead (trust-gated, source: app)\n  --system-md-file <path>    Read SYSTEM.md from <path> instead (source: user)\n  -h, --help                 Show this help\n";
+export declare const usage = "Usage: prism [--mode print|json|rpc] [-p prompt] [options]\n       prism init <dir> [--provider <name>] [--with-workflows] [--with-evals] [--force]\n\nOptions:\n  -p, --prompt <text>        Prompt to run in print/json mode\n  --provider <name>          Explicit provider id (mock is built in for smoke tests)\n  --model <name>             Explicit model name\n  --session <id>             Session id\n  --system <text>            System instructions\n  --context <text>           Context text\n  --compact <entries>        Auto-compaction threshold\n  --max-tool-rounds <n>      Maximum tool rounds\n  --discover                 Enable workspace contribution discovery (opt-in)\n  --discover-kinds <csv>     Kinds to discover (default: skill; skill,tool,context,instructions)\n  --no-discovery             Disable discovery even if --discover is set\n  --agents-config <path>     App config root holding agents/<name>/AGENT.md bundles (opt-in)\n  --no-agents-md             Skip auto-loading <workspaceRoot>/AGENTS.md\n  --no-system-md             Skip auto-loading the global SYSTEM.md layer\n  --agents-md-file <path>    Read AGENTS.md from <path> instead (trust-gated, source: app)\n  --system-md-file <path>    Read SYSTEM.md from <path> instead (source: user)\n  -h, --help                 Show this help\n";
 export declare function parseCliArgs(argv: readonly string[]): CliOptions;
 export declare function runCli(argv: readonly string[], runtime: CliRuntime): Promise<number>;
 export declare function runPromptMode(session: AgentSession, options: CliOptions, stdout: Writable, mode: "print" | "json"): Promise<void>;

package/dist/cli-runner.js

@@ -1,16 +1,16 @@
-import process from "node:process";
-import { createAgent, createMockProvider, providerDone, providerTextDelta, resolveInstructionInjectors, createContributionRegistry } from "./index.js";
 import { readFile } from "node:fs/promises";
 import { basename, dirname } from "node:path";
+import process from "node:process";
+import { initUsage, runInitCommand } from "./cli-init.js";
 import { createContributionRegistries, registerDiscoveredContributions } from "./contributions.js";
-import { createSkillRegistry } from "./skills.js";
-import { discoverContributions } from "./node/contribution-discovery.js";
+import { createAgent, createContributionRegistry, createMockProvider, providerDone, providerTextDelta, resolveInstructionInjectors, } from "./index.js";
 import { discoverAgentBundles } from "./node/agent-definitions.js";
+import { discoverContributions } from "./node/contribution-discovery.js";
 import { registerDiscoveredInstructionInjectors } from "./node/instruction-injectors.js";
 import { loadSystemPromptFiles } from "./node/system-project-prompts.js";
 import { createPathTrustPolicy } from "./node/trust.js";
 import { runRpcServer } from "./rpc.js";
-import { initUsage, runInitCommand } from "./cli-init.js";
+import { createSkillRegistry } from "./skills.js";
 export const usage = `Usage: prism [--mode print|json|rpc] [-p prompt] [options]
        prism init <dir> [--provider <name>] [--with-workflows] [--with-evals] [--force]
 
@@ -19,10 +19,6 @@ Options:
   --provider <name>          Explicit provider id (mock is built in for smoke tests)
   --model <name>             Explicit model name
   --session <id>             Session id
-  --config <path>            Explicit config path (recorded, not auto-loaded)
-  --resource <uri>           Explicit resource URI (recorded, not auto-loaded)
-  --extension <name>         Explicit extension name (recorded, not auto-loaded)
-  --tool <name>              Explicit tool name (recorded, not auto-enabled)
   --system <text>            System instructions
   --context <text>           Context text
   --compact <entries>        Auto-compaction threshold
@@ -37,8 +33,27 @@ Options:
   --system-md-file <path>    Read SYSTEM.md from <path> instead (source: user)
   -h, --help                 Show this help
 `;
-const valueFlags = new Set(["--prompt", "--mode", "--provider", "--model", "--session", "--config", "--resource", "--extension", "--tool", "--system", "--context", "--compact", "--max-tool-rounds", "--discover-kinds", "--instruction", "--injector-file", "--agents-md-file", "--system-md-file", "--agents-config"]);
+const valueFlags = new Set([
+    "--prompt",
+    "--mode",
+    "--provider",
+    "--model",
+    "--session",
+    "--system",
+    "--context",
+    "--compact",
+    "--max-tool-rounds",
+    "--discover-kinds",
+    "--instruction",
+    "--injector-file",
+    "--agents-md-file",
+    "--system-md-file",
+    "--agents-config",
+]);
 const boolFlags = new Set(["--discover", "--no-discovery", "--no-agents-md", "--no-system-md"]);
+// Known-but-inert flags: parsed by earlier builds, never wired to any behavior.
+// Rejected loudly (rather than silently ignored) until a CLI-harness plan wires them.
+const unsupportedFlags = new Set(["--config", "--resource", "--extension", "--tool"]);
 const ALL_KINDS = ["skill", "tool", "context", "instructions"];
 export function parseCliArgs(argv) {
     let mode = "print";
@@ -58,10 +73,6 @@ export function parseCliArgs(argv) {
     let agentsMdFile;
     let systemMdFile;
     let agentsConfig;
-    const config = [];
-    const resources = [];
-    const extensions = [];
-    const tools = [];
     const context = [];
     const instructions = [];
     const injectorFiles = [];
@@ -72,6 +83,8 @@ export function parseCliArgs(argv) {
             continue;
         }
         const name = flag === "-p" ? "--prompt" : flag;
+        if (unsupportedFlags.has(name))
+            throw new CliUsageError(`${name} is not supported in this build`);
         if (boolFlags.has(name)) {
             switch (name) {
                 case "--discover":
@@ -113,18 +126,6 @@ export function parseCliArgs(argv) {
             case "--session":
                 session = value;
                 break;
-            case "--config":
-                config.push(value);
-                break;
-            case "--resource":
-                resources.push(value);
-                break;
-            case "--extension":
-                extensions.push(value);
-                break;
-            case "--tool":
-                tools.push(value);
-                break;
             case "--system":
                 system = value;
                 break;
@@ -157,10 +158,39 @@ export function parseCliArgs(argv) {
                 break;
         }
     }
-    return { mode, prompt, provider, model, session, config, resources, extensions, tools, system, context, compact, maxToolRounds, help, discover, discoverKinds, noDiscovery, agentsConfig, discoveredSkills: [], discoveredInjectors: [], discoveredAgents: [], instructions, injectorFiles, resolvedInstructionInjectors: [], noAgentsMd, noSystemMd, agentsMdFile, systemMdFile, systemPromptLayers: [] };
+    return {
+        mode,
+        prompt,
+        provider,
+        model,
+        session,
+        system,
+        context,
+        compact,
+        maxToolRounds,
+        help,
+        discover,
+        discoverKinds,
+        noDiscovery,
+        agentsConfig,
+        discoveredSkills: [],
+        discoveredInjectors: [],
+        discoveredAgents: [],
+        instructions,
+        injectorFiles,
+        resolvedInstructionInjectors: [],
+        noAgentsMd,
+        noSystemMd,
+        agentsMdFile,
+        systemMdFile,
+        systemPromptLayers: [],
+    };
 }
 function parseKinds(csv, flag) {
-    const kinds = csv.split(",").map((k) => k.trim()).filter(Boolean);
+    const kinds = csv
+        .split(",")
+        .map((k) => k.trim())
+        .filter(Boolean);
     if (kinds.length === 0)
         throw new CliUsageError(`Invalid value for ${flag}: ${csv}`);
     const invalid = kinds.filter((k) => !ALL_KINDS.includes(k));
@@ -193,7 +223,12 @@ export async function runCli(argv, runtime) {
     }
     try {
         if (options.mode === "rpc") {
-            await runRpcServer({ stdin: runtime.stdin, stdout: runtime.stdout, createSession: (id) => (runtime.createSession ?? defaultCreateSession)({ ...options, session: id ?? options.session }), commands: runtime.commands });
+            await runRpcServer({
+                stdin: runtime.stdin,
+                stdout: runtime.stdout,
+                createSession: (id) => (runtime.createSession ?? defaultCreateSession)({ ...options, session: id ?? options.session }),
+                commands: runtime.commands,
+            });
             return 0;
         }
         if (!options.prompt)
@@ -248,7 +283,12 @@ export async function runCli(argv, runtime) {
             // the containment check (the user named it, so it's trusted by that act).
             const layers = await loadSystemPromptFiles({
                 ...(options.noAgentsMd ? {} : { workspaceRoot, trust, ...(options.agentsMdFile ? { agentsMdPath: options.agentsMdFile } : {}) }),
-                ...(options.noSystemMd ? {} : { ...(runtime.globalRoot !== undefined ? { globalRoot: runtime.globalRoot } : {}), ...(options.systemMdFile ? { systemMdPath: options.systemMdFile } : {}) }),
+                ...(options.noSystemMd
+                    ? {}
+                    : {
+                        ...(runtime.globalRoot !== undefined ? { globalRoot: runtime.globalRoot } : {}),
+                        ...(options.systemMdFile ? { systemMdPath: options.systemMdFile } : {}),
+                    }),
             });
             options = { ...options, systemPromptLayers: layers };
         }
@@ -306,9 +346,7 @@ function runOptions(options) {
         ...(options.discover && !options.noDiscovery && options.discoveredSkills.length > 0
             ? { activeSkills: options.discoveredSkills.map((s) => s.name) }
             : {}),
-        ...(options.resolvedInstructionInjectors.length > 0
-            ? { instructionInjectors: options.resolvedInstructionInjectors }
-            : {}),
+        ...(options.resolvedInstructionInjectors.length > 0 ? { instructionInjectors: options.resolvedInstructionInjectors } : {}),
     };
 }
 // ponytail: resolve --instruction names against discovered injectors (fail-closed) and load

package/dist/compaction.js

@@ -27,10 +27,11 @@ export function isCompactionEntryData(value) {
     if (!value || typeof value !== "object" || Array.isArray(value))
         return false;
     const data = value;
-    return (data.throughEntryId === undefined || typeof data.throughEntryId === "string")
-        && (data.keepEntryIds === undefined || (Array.isArray(data.keepEntryIds) && data.keepEntryIds.every((item) => typeof item === "string")))
-        && (data.strategy === undefined || typeof data.strategy === "string")
-        && (data.trigger === undefined || typeof data.trigger === "string");
+    return ((data.throughEntryId === undefined || typeof data.throughEntryId === "string") &&
+        (data.keepEntryIds === undefined ||
+            (Array.isArray(data.keepEntryIds) && data.keepEntryIds.every((item) => typeof item === "string"))) &&
+        (data.strategy === undefined || typeof data.strategy === "string") &&
+        (data.trigger === undefined || typeof data.trigger === "string"));
 }
 function summarize(entries) {
     const lines = entries.flatMap((entry) => entryText(entry));

package/dist/config.js

@@ -31,9 +31,10 @@ function mergeObjects(base, override, path = "config") {
         const childPath = `${path}.${key}`;
         assertSafeJsonKey(key, childPath);
         const current = result[key];
-        result[key] = isPlainObject(current) && isPlainObject(value)
-            ? mergeObjects(current, value, childPath)
-            : cloneJsonValue(value, childPath);
+        result[key] =
+            isPlainObject(current) && isPlainObject(value)
+                ? mergeObjects(current, value, childPath)
+                : cloneJsonValue(value, childPath);
     }
     return result;
 }
@@ -77,7 +78,9 @@ function isSafeJsonValue(value) {
 }
 function assertSafeJsonValue(value, path) {
     if (Array.isArray(value)) {
-        value.forEach((entry, index) => assertSafeJsonValue(entry, `${path}[${index}]`));
+        value.forEach((entry, index) => {
+            assertSafeJsonValue(entry, `${path}[${index}]`);
+        });
         return;
     }
     if (!isPlainObject(value))