@arnilo/prism 0.2.7 → 0.2.8

package/CHANGELOG.md

@@ -1,3 +1,8 @@
+## [0.2.8] - 2026-08-18
+
+### Changed
+- **Release 0.2.8 (plan 028)** is the ACP adoption-fixes cut on the 0.2.x review-remediation line. API surface **additive-only** (plain reviewed compat gate at 0.2.8: expected deltas are the version literal plus the plan 028 additive exports — `ToolKind`/`ToolDefinition.kind`, `AgentFinishReason`/`agent_finished.finishReason`, `AgUiProjectedImage`/`AgUiProjectedToolResult`/`createCodingToolProjection`, `AcpCommand`/`AcpCommandsSeam`, `ERR_PRISM_ACP_RUN`, `acpImageBytes`/`acpCommandsPerUpdate`, and the new `@arnilo/prism-acp-agent` package; zero removals; baselines regenerated with `--update-baseline`, no `--allow-break`). Client names are scrubbed from the tree and `scripts/check-client-neutrality.mjs` is wired into `npm run release:gate`. ACP bugs B1–B5: truthful `usage_update` via a host `contextWindow` seam (omit when unknown); run-level `error` rejects `session/prompt` with `ERR_PRISM_ACP_RUN` (no fake transcript chunks); only boolean config options are advertised/`set_config_option` (select fails `ERR_PRISM_ACP_CAPABILITY`); `tool_call.kind` prefers registry `ToolDefinition.kind`; permission docs match SDK wire kinds (`allow_always`/`reject_always`). Features F1–F10: thinking → `agent_thought_chunk`; bounded redacted transcript replay on `session/load`/`resume`; spawnable `@arnilo/prism-acp-agent` over stdio; `session/prompt` `StopReason` fidelity; UNSTABLE-gated `plan_update`/`plan_removed` from coding plan lifecycle; host-owned `session_info_update` titles; opt-in `createCodingToolProjection()` for first-party edit/write diffs+locations; projected `toolResult` images as ACP content/image blocks (`acpImageBytes`); host slash commands as `available_commands_update` (`acpCommandsPerUpdate`); Windows sandbox policy documented (native backend stays Linux-only, fail-closed). Release graph is **51** publishable manifests at exact **0.2.8** (root + 50 workspace; `+1` `@arnilo/prism-acp-agent`). Store compatibility with 0.2.7: **compatible, no migration**. Exit gate green (`sdk:ready`, `release:check` including the client-neutrality guard, audit 0 moderate, scan-secrets 0, SBOM regenerated). **Publication remains the operator handoff** (`docs/release-and-install.md` `0.2.8 publish handoff` — signed `v0.2.8` tag + npm OIDC).
+
 ## [0.2.7] - 2026-08-17
 
 ### Changed
@@ -112,7 +117,7 @@
 ### Changed
 - `@arnilo/prism-ag-ui` depends on `@arnilo/prism-coding-agent` (workspace) for Phase 9 output-chunk caps and lifecycle types; publishable graph stays **48** manifests.
 - SBOM license policy allows `Unlicense` (tweetnacl via `@nats-io/nkeys`); readiness SBOM evidence refreshed (227 packages / 12 licenses).
-- `@arnilo/prism-ag-ui/renderer` now exports the DOM-free A2UI core values (`A2UiSurfaceState`, `reduceA2UiOps`, `readA2UiBatch`, `resolvePointer`, `A2UI_VERSION`) — Synapta FR, hosts can drive the surface state machine without mounting; `createA2UiRenderer` behavior and frozen A2UI caps unchanged.
+- `@arnilo/prism-ag-ui/renderer` now exports the DOM-free A2UI core values (`A2UiSurfaceState`, `reduceA2UiOps`, `readA2UiBatch`, `resolvePointer`, `A2UI_VERSION`) — host FR, hosts can drive the surface state machine without mounting; `createA2UiRenderer` behavior and frozen A2UI caps unchanged.
 
 ### Breaking (advertise/surface for ACP hosts only)
 - `initialize` advertisement now reflects wired seams (previously minimal close-session); new session methods are registered only with their seams; `session/resume` of a live session rejects; `agentInfo.version` now comes from the package.json. Core, AG-UI, and coding-agent behavior unchanged. See [migration guide](docs/migration.md) `0.0.26 → 0.0.27`.

package/README.md

@@ -56,7 +56,7 @@ npm install @arnilo/prism @arnilo/prism-provider-openai    # core + one provider
 npm install @arnilo/prism-base                              # core + compaction + validation
 npm install @arnilo/prism-code @arnilo/prism-provider-openai # coding-agent profile
 npm install @arnilo/prism-sdk @arnilo/prism-provider-openai  # application profile
-npm install @arnilo/prism-all                               # broad umbrella (20 direct / 43 transitive packages)
+npm install @arnilo/prism-all                               # broad umbrella (21 direct / 44 transitive packages)
 npm install @arnilo/prism-server @arnilo/prism-workflows    # optional Web API boundary
 npm install @arnilo/prism-supervisor                         # optional local delegation + A2A 1.0
 npm install @arnilo/prism-web-tools                          # optional bounded Brave/Exa/Firecrawl research
@@ -183,7 +183,7 @@ printf '{"id":"1","command":"prompt","params":{"input":"Hi"}}\n' \
 | `@arnilo/prism-base` | profile: core + compaction + JSON Schema validation |
 | `@arnilo/prism-code` | profile: base + coding tools/security + MCP |
 | `@arnilo/prism-sdk` | profile: base + workflows + MCP + credentials + OpenTelemetry |
-| `@arnilo/prism-all` | broad umbrella: 20 first-party packages (43 transitive) across runtime, capability, provider, and persistence — omits document-reader, OpenAPI tools, NATS, Caveman, and Ponytail |
+| `@arnilo/prism-all` | broad umbrella: 21 first-party packages (44 transitive) across runtime, capability, provider, and persistence — omits document-reader, OpenAPI tools, NATS, Caveman, and Ponytail |
 
 ## Scripts
 

package/dist/agent-loops.js

@@ -47,6 +47,9 @@ export const singleShotLoop = {
             ctx.emit({ type: "turn_finished", sessionId: ctx.sessionId, runId: ctx.runId, turn });
             const dispatchable = dispatchableToolCalls(calls);
             if (dispatchable.length === 0 || toolRounds >= ctx.maxToolRounds) {
+                // F4: the tool-round ceiling ended the run cleanly (not a natural end).
+                if (dispatchable.length > 0 && toolRounds >= ctx.maxToolRounds)
+                    ctx.finishReason = "turn_limit";
                 // Soft-interrupt / late steer: keep same run going when queue still has text.
                 if (await ctx.applyPendingSteers?.()) {
                     nextInput = [];
@@ -155,6 +158,7 @@ export function generateValidateReviseLoop(opts) {
                             errors: [{ message: "maximum tool rounds exceeded" }],
                             metadata: { reason: "tool_round_limit" },
                         };
+                        ctx.finishReason = "turn_limit";
                         ctx.emit({ type: "artifact_failed", sessionId: ctx.sessionId, runId: ctx.runId, turn, attempt: attempts + 1, result });
                         return usage;
                     }

package/dist/agent-run-lifecycle.js

@@ -1,7 +1,7 @@
-import { agentFingerprint, loadAgentRunState, publicState, saveAgentRunState } from "./agent-run-state.js";
-import { AgentRunStateError } from "./contracts.js";
 import { assertValidAgentRunResume, pendingDecisionsOf, resolveRunDecisions } from "./agent-approval.js";
+import { agentFingerprint, loadAgentRunState, publicState, saveAgentRunState } from "./agent-run-state.js";
 import { RuntimeAgentSession, throwIfAbortedSignal } from "./agent-session.js";
+import { AgentRunStateError } from "./contracts.js";
 function assertAgentId(actual, expected) {
     if (expected !== undefined && actual !== expected)
         throw new AgentRunStateError("Agent run capability mismatch");

package/dist/agent-session/helpers.d.ts

@@ -1,7 +1,7 @@
 /** helpers (0.2.5 plan 025 Task 1 split). Moved verbatim from agent-session.ts; public surface unchanged behind the barrel. */
 import type { CompactionOptions, ContentBlock, ErrorInfo, Guardrails, Message, ProviderEvent, RetryOptions, ToolCallContent, Usage } from "../contracts.js";
-import type { AgentInput } from "../input.js";
 import { createId } from "../ids.js";
+import type { AgentInput } from "../input.js";
 export declare function providerContent(event: Extract<ProviderEvent, {
     type: "content_delta" | "tool_call";
 }>): ContentBlock;

package/dist/agent-session/helpers.js

@@ -1,6 +1,7 @@
+/** helpers (0.2.5 plan 025 Task 1 split). Moved verbatim from agent-session.ts; public surface unchanged behind the barrel. */
+import { singleShotLoop } from "../agent-loops.js";
 import { createId } from "../ids.js";
 import { reconstructToolCallDeltas } from "../provider-events.js";
-import { singleShotLoop } from "../agent-loops.js";
 export function providerContent(event) {
     return event.type === "content_delta" ? event.content : event.call;
 }

package/dist/agent-session/session.d.ts

@@ -1,8 +1,8 @@
 /** session (0.2.5 plan 025 Task 1 split). Moved verbatim from agent-session.ts; public surface unchanged behind the barrel. */
+import type { StoredAgentRunState } from "../agent-run-state.js";
 import type { Agent, AgentEvent, AgentRunResult, AgentRunStateOptions, AgentSession, AgentSessionConfig, CompactionOptions, CompactionResult, OwnershipScope, RunDecision, RunOptions, SessionEntry, SteerOptions, SubscribeOptions } from "../contracts.js";
 import type { AgentInput } from "../input.js";
 import type { LoadedSkillBodiesEntry } from "../skill-load.js";
-import type { StoredAgentRunState } from "../agent-run-state.js";
 export declare class RuntimeAgentSession implements AgentSession {
     readonly id: string;
     private readonly agent;

package/dist/agent-session/session.js

@@ -1,31 +1,32 @@
-import { AgentDecisionError, AgentDelegationSuspendedError, AgentLoopStateError, AgentRunError, AgentRunStateError, DEFAULT_MAX_PENDING_DECISIONS, DEFAULT_MAX_PENDING_STEERS, DEFAULT_MAX_PENDING_STEER_BYTES, HARD_MAX_PENDING_DECISIONS, MAX_ATTRIBUTION_DEPTH, } from "../contracts.js";
+/** session (0.2.5 plan 025 Task 1 split). Moved verbatim from agent-session.ts; public surface unchanged behind the barrel. */
 import { AgentRunSuspended, decisionIdentityRef, decisionScopesEqual, nestedApprovalId, nestedOutcomeToolResult, pathsEqual, } from "../agent-approval.js";
-import { identityTelemetryAttributes, ownershipFromIdentity, resolveRunIdentity } from "../identity.js";
-import { assembleProviderInput } from "../input.js";
-import { GuardrailError, assertGuardrailsAllowed, runGuardrails } from "../guardrails.js";
-import { applyRestoredSkillBodies, snapshotLoadedSkillBodies, validateLoadedSkillBodies } from "../skill-load.js";
+import { resolveLoop, resolveToolConcurrency } from "../agent-loops.js";
 import { boundedLoopSnapshot, initialAgentRunState, publicState, saveAgentRunState, validateRunStateOptions } from "../agent-run-state.js";
-import { RunLimitError, RunLimitTracker, resolveRunLimits } from "../run-limits.js";
-import { errorToErrorInfo, redactAgentEvent, redactProviderRequest, redactRunLedgerRecord, redactSecrets, redactSessionEntry, } from "../redaction.js";
-import { createMemorySessionStore, createSessionEntry, getSessionBranchEntries, rebuildSessionContext } from "../session-stores.js";
 import { activeTools, policyList, toolElicitationRequest } from "../agent-tool-dispatch.js";
-import { assertStructuredOutputRequestSupported, resolveRunProviderOptions } from "../structured-output.js";
-import { canonicalToolEffectJson, toolEffectArgumentsHash } from "../tool-effects.js";
-import { composeSystemPrompt, mergeSystemPromptConfig } from "../system-prompts.js";
 import { createDefaultCompactionStrategy, isCompactionEntryData } from "../compaction.js";
-import { createDefaultRetryPolicy, waitForRetry } from "../retry.js";
-import { createLoadedSkillSet, resolveSkillsDisclosure } from "../skill-disclosure.js";
-import { createProviderRequestPolicyChain, normalizeProviderRequestPolicyResult } from "../provider-request-policy.js";
+import { AgentDecisionError, AgentDelegationSuspendedError, AgentLoopStateError, AgentRunError, AgentRunStateError, DEFAULT_MAX_PENDING_DECISIONS, DEFAULT_MAX_PENDING_STEER_BYTES, DEFAULT_MAX_PENDING_STEERS, HARD_MAX_PENDING_DECISIONS, MAX_ATTRIBUTION_DEPTH, } from "../contracts.js";
+import { assertGuardrailsAllowed, GuardrailError, runGuardrails } from "../guardrails.js";
+import { identityTelemetryAttributes, ownershipFromIdentity, resolveRunIdentity } from "../identity.js";
+import { assembleProviderInput } from "../input.js";
 import { createProviderTurnMetadata, readProviderHttpStatus } from "../observability.js";
-import { dispatchToolCall, resolveToolEffectDeclaration } from "../tools.js";
-import { isFlushableRunLedger } from "../run-ledger.js";
 import { providerToolCallDeltaContent } from "../provider-events.js";
+import { createProviderRequestPolicyChain, normalizeProviderRequestPolicyResult } from "../provider-request-policy.js";
+import { errorToErrorInfo, redactAgentEvent, redactProviderRequest, redactRunLedgerRecord, redactSecrets, redactSessionEntry, } from "../redaction.js";
+import { createDefaultRetryPolicy, waitForRetry } from "../retry.js";
+import { isFlushableRunLedger } from "../run-ledger.js";
+import { RunLimitError, RunLimitTracker, resolveRunLimits } from "../run-limits.js";
+import { createMemorySessionStore, createSessionEntry, getSessionBranchEntries, rebuildSessionContext } from "../session-stores.js";
+import { createLoadedSkillSet, resolveSkillsDisclosure } from "../skill-disclosure.js";
+import { applyRestoredSkillBodies, snapshotLoadedSkillBodies, validateLoadedSkillBodies } from "../skill-load.js";
 import { resolveActiveSkills } from "../skills.js";
-import { resolveLoop, resolveToolConcurrency } from "../agent-loops.js";
+import { assertStructuredOutputRequestSupported, resolveRunProviderOptions } from "../structured-output.js";
+import { composeSystemPrompt, mergeSystemPromptConfig } from "../system-prompts.js";
+import { canonicalToolEffectJson, toolEffectArgumentsHash } from "../tool-effects.js";
 import { resolveToolResultFold } from "../tool-result-fold.js";
-import { EventSubscriber } from "./event-subscriber.js";
-import { ProviderTurnFailure, SteerSoftInterrupt, bridgeAbort, createUsageAccumulator, errorFromInfo, finalAssistantMessage, inputToMessages, isDurableLoop, isSteerSoftInterrupt, jsonBytes, mergeCompaction, mergeGuardrails, mergeRetry, messageTextBytes, providerContent, randomId, reconstructMissingToolCalls, throwIfAborted, throwIfAbortedSignal, withoutTrailingInput, } from "./helpers.js";
+import { dispatchToolCall, resolveToolEffectDeclaration } from "../tools.js";
 import { createAgentSession } from "./create-agent.js";
+import { EventSubscriber } from "./event-subscriber.js";
+import { bridgeAbort, createUsageAccumulator, errorFromInfo, finalAssistantMessage, inputToMessages, isDurableLoop, isSteerSoftInterrupt, jsonBytes, mergeCompaction, mergeGuardrails, mergeRetry, messageTextBytes, ProviderTurnFailure, providerContent, randomId, reconstructMissingToolCalls, SteerSoftInterrupt, throwIfAborted, throwIfAbortedSignal, withoutTrailingInput, } from "./helpers.js";
 export class RuntimeAgentSession {
     id;
     agent;
@@ -850,7 +851,14 @@ export class RuntimeAgentSession {
                     loopState: undefined,
                 })
                 : undefined;
-            this.emit({ type: "agent_finished", sessionId: this.id, runId, usage });
+            this.emit({
+                type: "agent_finished",
+                sessionId: this.id,
+                runId,
+                usage,
+                // F4: loop strategies record why a ceiling ended the run cleanly (e.g. turn_limit).
+                ...(ctx.finishReason ? { finishReason: ctx.finishReason } : {}),
+            });
             return this.buildRunResult({ runId, status: "succeeded", usage, runState });
         }
         catch (error) {

package/dist/agent-session.d.ts

@@ -1,6 +1,6 @@
 /** agent-session.ts barrel (0.2.5 plan 025 Task 1 god-module split): re-exports the
  * public surface from cohesive family modules (0.1.4 barrel precedent). */
 export * from "./agent-session/create-agent.js";
-export * from "./agent-session/session.js";
 export * from "./agent-session/event-subscriber.js";
 export * from "./agent-session/helpers.js";
+export * from "./agent-session/session.js";

package/dist/agent-session.js

@@ -1,7 +1,7 @@
 /** agent-session.ts barrel (0.2.5 plan 025 Task 1 god-module split): re-exports the
  * public surface from cohesive family modules (0.1.4 barrel precedent). */
 export * from "./agent-session/create-agent.js";
-export * from "./agent-session/session.js";
 export * from "./agent-session/event-subscriber.js";
 export * from "./agent-session/helpers.js";
+export * from "./agent-session/session.js";
 //# sourceMappingURL=agent-session.js.map

package/dist/agents.d.ts

@@ -12,5 +12,5 @@
  * agents.d.ts and change the declared surface — the 0.1.4 promise is an
  * identical surface.
  */
-export { createAgent, createAgentSession } from "./agent-session.js";
 export { resumeAgentRun, resumeAgentRunStream } from "./agent-run-lifecycle.js";
+export { createAgent, createAgentSession } from "./agent-session.js";

package/dist/agents.js

@@ -12,6 +12,6 @@
  * agents.d.ts and change the declared surface — the 0.1.4 promise is an
  * identical surface.
  */
-export { createAgent, createAgentSession } from "./agent-session.js";
 export { resumeAgentRun, resumeAgentRunStream } from "./agent-run-lifecycle.js";
+export { createAgent, createAgentSession } from "./agent-session.js";
 //# sourceMappingURL=agents.js.map

package/dist/contracts-core/agent.d.ts

@@ -1,20 +1,20 @@
 /** Contracts-core agent family (0.2.5 plan 025 Task 1 split).
  * Moved verbatim from contracts-core.ts; public surface unchanged behind the barrel. */
+import type { InputAssemblyLayout, RunLedger, ToolDefinition, ToolEffectStore, ToolRegistry } from "../contracts-protocol.js";
 import type { AgentRunStateOptions, AgentSession } from "../contracts-run-state.js";
 import type { ContributionRegistries } from "../contributions.js";
-import type { InputAssemblyLayout, RunLedger, ToolDefinition, ToolEffectStore, ToolRegistry } from "../contracts-protocol.js";
 import type { MiddlewareRegistry } from "../middleware.js";
-import type { PermissionPolicy, TrustPolicy } from "../security.js";
 import type { SecretRedactor } from "../redaction.js";
+import type { PermissionPolicy, TrustPolicy } from "../security.js";
 import type { ToolValidator } from "../tools.js";
-import type { AIProvider, ProviderRequestOptions, ProviderResolver } from "./provider.js";
-import type { AgentLoopOptions, AgentLoopStrategy } from "./loop.js";
 import type { CompactionOptions, RetryOptions } from "./compaction.js";
 import type { ContentBlock, ErrorInfo, JsonObject, Message, ModelConfig } from "./content.js";
 import type { ProviderRequestPolicy, SystemPromptConfig } from "./extensions.js";
-import type { Guardrails, RunLimits } from "./run-limits.js";
+import type { AgentLoopOptions, AgentLoopStrategy } from "./loop.js";
 import type { OwnershipScope } from "./persistence.js";
+import type { AIProvider, ProviderRequestOptions, ProviderResolver } from "./provider.js";
 import type { ResourceLoader } from "./resources.js";
+import type { Guardrails, RunLimits } from "./run-limits.js";
 import type { SessionStore } from "./session.js";
 export interface AgentDefinition {
     readonly name: string;

package/dist/contracts-core/agent.js

@@ -1,3 +1,5 @@
+/** Contracts-core agent family (0.2.5 plan 025 Task 1 split).
+ * Moved verbatim from contracts-core.ts; public surface unchanged behind the barrel. */
 export {};
 /** Directory-name spelling for discovered contribution kinds. Maps to a
  *  {@link ManifestContributionDeclaration} kind for non-skill kinds:

package/dist/contracts-core/extensions.d.ts

@@ -1,15 +1,15 @@
 /** Contracts-core extensions family (0.2.5 plan 025 Task 1 split).
  * Moved verbatim from contracts-core.ts; public surface unchanged behind the barrel. */
+import type { ToolDefinition } from "../contracts-protocol.js";
 import type { ContributionRegistries } from "../contributions.js";
 import type { ManifestContributionDeclaration } from "../manifests.js";
 import type { Middleware, MiddlewareHookName, MiddlewareRegistry } from "../middleware.js";
-import type { ToolDefinition } from "../contracts-protocol.js";
-import type { AIProvider, ProviderRequest } from "./provider.js";
 import type { AgentDefinition, CommandDefinition, ContextProvider, InputBuilder, InstructionInjector, PromptBuilder, Skill } from "./agent.js";
 import type { CompactionStrategy, RetryPolicy } from "./compaction.js";
-import type { Credential, CredentialResolver, ResourceLoader, SettingsProvider } from "./resources.js";
 import type { ErrorInfo, ModelConfig } from "./content.js";
 import type { StoreFactory } from "./persistence.js";
+import type { AIProvider, ProviderRequest } from "./provider.js";
+import type { Credential, CredentialResolver, ResourceLoader, SettingsProvider } from "./resources.js";
 export type ContributionFileKind = "skill" | "tool" | "context" | "instructions";
 /** Inert envelope emitted by the host/CLI discovery scanner. Carries the
  *  realized {@link Skill} for skill kinds and a manifest-referenced

package/dist/contracts-core/extensions.js

@@ -1,2 +1,4 @@
+/** Contracts-core extensions family (0.2.5 plan 025 Task 1 split).
+ * Moved verbatim from contracts-core.ts; public surface unchanged behind the barrel. */
 export {};
 //# sourceMappingURL=extensions.js.map

package/dist/contracts-core/loop.d.ts

@@ -1,6 +1,6 @@
 /** Contracts-core loop family (0.2.5 plan 025 Task 1 split).
  * Moved verbatim from contracts-core.ts; public surface unchanged behind the barrel. */
-import type { AgentEvent, ProviderTurnResult, ToolResult } from "../contracts-protocol.js";
+import type { AgentEvent, AgentFinishReason, ProviderTurnResult, ToolResult } from "../contracts-protocol.js";
 import type { AgentInput } from "../input.js";
 import type { JsonValue, Message, ToolCallContent, Usage } from "./content.js";
 import type { ProviderRequest, StructuredOutputOptions } from "./provider.js";
@@ -13,6 +13,11 @@ export interface LoopContext {
     readonly input: AgentInput;
     readonly inputMessages: readonly Message[];
     readonly maxToolRounds: number;
+    /**
+     * Why the loop stopped, when a limit/ceiling ends the run cleanly (F4). Strategies set
+     * this at ceiling exits (e.g. `turn_limit`); the runtime copies it onto `agent_finished`.
+     */
+    finishReason?: AgentFinishReason;
     /** Maximum independent tool calls dispatched concurrently per provider turn. Default `1`. */
     readonly toolConcurrency: number;
     assemble(nextInput: AgentInput, toolResults?: readonly ToolResult[], turn?: number): Promise<ProviderRequest>;

package/dist/contracts-core/session.d.ts

@@ -1,8 +1,8 @@
 /** Contracts-core session family (0.2.5 plan 025 Task 1 split).
  * Moved verbatim from contracts-core.ts; public surface unchanged behind the barrel. */
 import type { AgentEvent } from "../contracts-protocol.js";
-import type { OwnershipScope, PersistencePage, PersistenceQuery } from "./persistence.js";
 import type { Message, ModelConfig } from "./content.js";
+import type { OwnershipScope, PersistencePage, PersistenceQuery } from "./persistence.js";
 export type SessionEntryKind = "message" | "event" | "summary" | "metadata" | "model_change" | "label" | "custom" | "compaction";
 export declare const SESSION_ENTRY_KINDS: readonly SessionEntryKind[];
 export declare const SESSION_ENTRY_SCHEMA_VERSION = 1;

package/dist/contracts-core.d.ts

@@ -2,13 +2,13 @@
  * public contracts surface from cohesive family modules so the import surface
  * of `./contracts-core.js` is unchanged (0.1.4 barrel precedent). */
 export type { AudioContent, DocumentContent, FileContent } from "./content.js";
-export * from "./contracts-core/content.js";
-export * from "./contracts-core/run-limits.js";
-export * from "./contracts-core/provider.js";
 export * from "./contracts-core/agent.js";
+export * from "./contracts-core/compaction.js";
+export * from "./contracts-core/content.js";
 export * from "./contracts-core/extensions.js";
-export * from "./contracts-core/session.js";
+export * from "./contracts-core/loop.js";
 export * from "./contracts-core/persistence.js";
-export * from "./contracts-core/compaction.js";
+export * from "./contracts-core/provider.js";
 export * from "./contracts-core/resources.js";
-export * from "./contracts-core/loop.js";
+export * from "./contracts-core/run-limits.js";
+export * from "./contracts-core/session.js";

package/dist/contracts-core.js

@@ -1,11 +1,11 @@
-export * from "./contracts-core/content.js";
-export * from "./contracts-core/run-limits.js";
-export * from "./contracts-core/provider.js";
 export * from "./contracts-core/agent.js";
+export * from "./contracts-core/compaction.js";
+export * from "./contracts-core/content.js";
 export * from "./contracts-core/extensions.js";
-export * from "./contracts-core/session.js";
+export * from "./contracts-core/loop.js";
 export * from "./contracts-core/persistence.js";
-export * from "./contracts-core/compaction.js";
+export * from "./contracts-core/provider.js";
 export * from "./contracts-core/resources.js";
-export * from "./contracts-core/loop.js";
+export * from "./contracts-core/run-limits.js";
+export * from "./contracts-core/session.js";
 //# sourceMappingURL=contracts-core.js.map

package/dist/contracts-protocol.d.ts

@@ -1,6 +1,5 @@
-import type { AgentLoopOptions, AgentLoopStrategy, ArtifactValidation, CompactionOptions, ContentBlock, ErrorInfo, GuardrailRecord, Guardrails, InstructionInjector, JsonObject, Message, ModelConfig, OwnershipScope, ProviderRequestPolicy, ProviderResolver, RetryOptions, RunLimitBreach, RunLimits, Skill, SubscriberOverflowPolicy, SystemPromptConfig, ToolCallAuthority, ToolCallContent, Usage } from "./contracts-core.js";
+import type { AgentLoopOptions, AgentLoopStrategy, ArtifactValidation, CompactionOptions, ContentBlock, ErrorInfo, GuardrailRecord, Guardrails, InstructionInjector, JsonObject, Message, ModelConfig, OwnershipScope, ProviderRequestOptions, ProviderRequestPolicy, ProviderResolver, RetryOptions, RunLimitBreach, RunLimits, Skill, SubscriberOverflowPolicy, SystemPromptConfig, ToolCallAuthority, ToolCallContent, Usage } from "./contracts-core.js";
 import type { AgentRunInterruption, AgentRunStateOptions } from "./contracts-run-state.js";
-import type { ProviderRequestOptions } from "./contracts-core.js";
 import type { SecretRedactor } from "./redaction.js";
 import type { ToolValidator } from "./tools.js";
 export type ProviderEvent = {
@@ -109,6 +108,7 @@ export interface ToolExecutionMetadata {
     readonly durationMs: number;
     readonly status: ToolCallStatus;
 }
+export type AgentFinishReason = "turn_limit" | "token_limit" | "refusal";
 export type AgentEvent = {
     readonly type: "agent_started";
     readonly sessionId: string;
@@ -118,6 +118,8 @@ export type AgentEvent = {
     readonly sessionId: string;
     readonly runId: string;
     readonly usage?: Usage;
+    /** Why the loop stopped, when a limit/ceiling ended the run cleanly (F4). Absent = natural end. */
+    readonly finishReason?: AgentFinishReason;
 } | {
     readonly type: "agent_suspended";
     readonly sessionId: string;
@@ -318,8 +320,12 @@ export interface ToolElicitationRequest {
     /** Answer-shape validation beyond structural schema checks; throw to reject the payload. */
     readonly validate?: (payload: JsonObject) => void;
 }
+/** Neutral tool-kind union mirroring the ACP `ToolKind` set (B4); never an ACP import in `src/`. */
+export type ToolKind = "read" | "edit" | "delete" | "move" | "search" | "execute" | "think" | "fetch" | "switch_mode" | "other";
 export interface ToolDefinition {
     readonly name: string;
+    /** Optional explicit kind; consumers (e.g. the ACP mapper) use it instead of name heuristics. */
+    readonly kind?: ToolKind;
     readonly description?: string;
     readonly parameters?: JsonObject;
     /** Force any provider turn containing this tool to dispatch sequentially. */

package/dist/contracts.d.ts

@@ -5,8 +5,8 @@
  * import surface of `./contracts.js` is unchanged.
  */
 export * from "./contracts-core.js";
-export * from "./contracts-run-state.js";
 export * from "./contracts-protocol.js";
+export * from "./contracts-run-state.js";
 /** Alias re-exports so `dist/contracts.d.ts` exposes implementer contract names. */
 export type AgentIdentity = import("./identity.js").AgentIdentity;
 export type Principal = import("./identity.js").Principal;

package/dist/contracts.js

@@ -5,6 +5,6 @@
  * import surface of `./contracts.js` is unchanged.
  */
 export * from "./contracts-core.js";
-export * from "./contracts-run-state.js";
 export * from "./contracts-protocol.js";
+export * from "./contracts-run-state.js";
 //# sourceMappingURL=contracts.js.map

package/dist/index.d.ts

@@ -1,6 +1,4 @@
 export { resolveAgentDefinition } from "./agent-definitions.js";
-export { abortableSleep, pollDeviceCodeToken, redactOAuthError, throwIfAborted, type OAuthTokenSuccessPayload, type PollDeviceCodeTokenOptions, } from "./oauth-device-code.js";
-export { boundResponse, defaultResolver, isLoopbackAddress, isLoopbackHostname, normalizeHostname, pinnedFetch, raceAbort, requestPinned, resolvePinnedAddress, type PinnedFetchOptions, } from "./pinned-fetch.js";
 export type { AgentEventSourceErrorCode } from "./agent-event-source.js";
 export { AgentEventSourceError, createMemoryAgentEventSource } from "./agent-event-source.js";
 export { dispatchToolCallsInOrder, generateValidateReviseLoop, isAgentLoopOptions, resolveLoop, resolveToolConcurrency, singleShotLoop, } from "./agent-loops.js";
@@ -14,7 +12,7 @@ export { ARTIFACT_BODY_ERROR_CODES, ARTIFACT_CHECKPOINT_NAMESPACE, ArtifactBodyS
 export type { ApplyCacheControlOptions, CacheControlledContentBlock, CacheControlledMessage, CacheControlValue, CacheUsageReport, } from "./cache-helpers.js";
 export { applyCacheControl, cacheHitRate, cacheSavings, cacheUsageReport, mapCacheRetention, sanitizeCacheKey } from "./cache-helpers.js";
 export type { CacheTelemetry, CacheTelemetryOptions, CacheTelemetryReport, CacheTelemetrySample, } from "./cache-telemetry.js";
-export { CACHE_TELEMETRY_OVERFLOW_KEY, CacheTelemetryError, DEFAULT_CACHE_TELEMETRY_CAP, createCacheTelemetry, } from "./cache-telemetry.js";
+export { CACHE_TELEMETRY_OVERFLOW_KEY, CacheTelemetryError, createCacheTelemetry, DEFAULT_CACHE_TELEMETRY_CAP, } from "./cache-telemetry.js";
 export type { MemoryCheckpointStoreOptions } from "./checkpoints.js";
 export { CHECKPOINT_CONFLICT_CODE, CheckpointConflictError, createMemoryCheckpointStore } from "./checkpoints.js";
 export type { DefaultCompactionStrategyOptions } from "./compaction.js";
@@ -45,6 +43,8 @@ export type { ExtensionErrorPolicy, ExtensionEventBus, ExtensionEventHandler, Ex
 export { createExtensionEventBus, createExtensionKernel } from "./extensions.js";
 export type { MemoryRunFeedbackStoreOptions, PrepareRunFeedbackOptions, RunFeedbackLimits, RunFeedbackRun, RunFeedbackRunResolver, } from "./feedback.js";
 export { createMemoryRunFeedbackStore, prepareRunFeedback, RunFeedbackError, requireRunFeedbackOwnership, runFeedbackPageLimit, } from "./feedback.js";
+export type { ApplyFieldPolicyOptions, AuditFieldRedaction, AuditFieldRedactorLike, AuditFieldRedactorOptions, FieldPolicy, FieldPolicyAction, FieldPolicyDecision, FieldPolicyInput, ProtectedFieldPolicyOptions, } from "./field-policy.js";
+export { ALLOW_FIELD_POLICY, applyFieldPolicy, createAuditFieldRedactor, createProtectedFieldPolicy, FIELD_POLICY_LIMITS, FieldPolicyError, } from "./field-policy.js";
 export type { GuardrailRunResult, RunGuardrailsOptions, } from "./guardrails.js";
 export { assertGuardrailsAllowed, GuardrailError, MAX_GUARDRAIL_CONCURRENCY, runGuardrails } from "./guardrails.js";
 export type { AgentIdentity, AssertIdentityActiveOptions, IdentityLimits, IdentityVerifier, NarrowIdentityOptions, Principal, ResolvedIdentityLimits, } from "./identity.js";
@@ -62,9 +62,11 @@ export type { MockProviderOptions } from "./mock-provider.js";
 export { createMockProvider } from "./mock-provider.js";
 export type { ModelRegistry, ModelRegistryOptions } from "./models.js";
 export { createModelRegistry } from "./models.js";
+export { abortableSleep, type OAuthTokenSuccessPayload, type PollDeviceCodeTokenOptions, pollDeviceCodeToken, redactOAuthError, throwIfAborted, } from "./oauth-device-code.js";
 export { createProviderTurnMetadata, readProviderHttpStatus } from "./observability.js";
 export type { ApplyRetentionInput, ApplyRetentionResult, ConsumeTenantQuotaInput, ExportUnderHoldInput, LegalHoldExportItem, LegalHoldQuery, LegalHoldRecord, PersistenceLifecycleStore, PersistenceResourceKind, PutLegalHoldInput, ReleaseLegalHoldInput, SetTenantQuotaInput, TenantQuota, } from "./persistence-lifecycle.js";
 export { createMemoryPersistenceLifecycle, DEFAULT_LIFECYCLE_PAGE_SIZE, DEFAULT_MAX_HOLD_REASON_BYTES, HARD_LIFECYCLE_PAGE_SIZE, HARD_MAX_HOLD_REASON_BYTES, isResourceHeld, PersistenceLifecycleError, } from "./persistence-lifecycle.js";
+export { boundResponse, defaultResolver, isLoopbackAddress, isLoopbackHostname, normalizeHostname, type PinnedFetchOptions, pinnedFetch, raceAbort, requestPinned, resolvePinnedAddress, } from "./pinned-fetch.js";
 export { providerContentDelta, providerContinuationRequired, providerDone, providerError, providerTextDelta, providerThinkingDelta, providerToolCall, providerToolCallDelta, providerUsage, toolCallContent, toolCallFromArgumentsText, } from "./provider-events.js";
 export { authMethodKey, defineProviderPackage, systemPromptContributionKey } from "./provider-packages.js";
 export type { SessionCachePolicyOptions } from "./provider-request-policy.js";
@@ -72,8 +74,6 @@ export { createProviderRequestPolicyChain, createSessionCachePolicy, mergeProvid
 export type { ProviderRegistry, ProviderRegistryOptions } from "./providers.js";
 export { createProviderRegistry, createProviderResolver } from "./providers.js";
 export type { SecretRedactor } from "./redaction.js";
-export { ALLOW_FIELD_POLICY, applyFieldPolicy, createAuditFieldRedactor, createProtectedFieldPolicy, FieldPolicyError, FIELD_POLICY_LIMITS, } from "./field-policy.js";
-export type { ApplyFieldPolicyOptions, AuditFieldRedaction, AuditFieldRedactorLike, AuditFieldRedactorOptions, FieldPolicy, FieldPolicyAction, FieldPolicyDecision, FieldPolicyInput, ProtectedFieldPolicyOptions, } from "./field-policy.js";
 export { createSecretRedactor, errorToErrorInfo, redactAgentEvent, redactMessage, redactProviderRequest, redactRunLedgerRecord, redactSecrets, redactSessionEntry, resolveRedactor, } from "./redaction.js";
 export type { DuplicateRegistrationOptions, DuplicateRegistrationPolicy } from "./registry-options.js";
 export type { LoadBinaryResourceOptions } from "./resources.js";
@@ -111,5 +111,5 @@ export { createToolParameterValidator, createToolRegistry, dispatchToolCall, fil
 export type { ResolvedUseCaseModel, ResolveUseCaseModelInput, UseCaseModelBinding, } from "./use-case-model.js";
 export { resolveUseCaseModel, resolveUseCaseModelBinding, useCaseCredentialProviderId, } from "./use-case-model.js";
 export declare const name = "prism";
-export declare const version = "0.2.7";
+export declare const version = "0.2.8";
 export declare const description = "Agent harness for AI providers, agents, sessions, and tools.";

package/dist/index.js

@@ -1,6 +1,4 @@
 export { resolveAgentDefinition } from "./agent-definitions.js";
-export { abortableSleep, pollDeviceCodeToken, redactOAuthError, throwIfAborted, } from "./oauth-device-code.js";
-export { boundResponse, defaultResolver, isLoopbackAddress, isLoopbackHostname, normalizeHostname, pinnedFetch, raceAbort, requestPinned, resolvePinnedAddress, } from "./pinned-fetch.js";
 export { AgentEventSourceError, createMemoryAgentEventSource } from "./agent-event-source.js";
 export { dispatchToolCallsInOrder, generateValidateReviseLoop, isAgentLoopOptions, resolveLoop, resolveToolConcurrency, singleShotLoop, } from "./agent-loops.js";
 export { createAgentRunLifecycle } from "./agent-run-lifecycle.js";
@@ -8,7 +6,7 @@ export { AGENT_RUN_STATE_NAMESPACE, AGENT_RUN_STATE_SCHEMA_VERSION, agentFingerp
 export { createAgent, createAgentSession, resumeAgentRun, resumeAgentRunStream } from "./agents.js";
 export { ARTIFACT_BODY_ERROR_CODES, ARTIFACT_CHECKPOINT_NAMESPACE, ArtifactBodyStoreError, ArtifactError, artifactApprovalState, artifactCheckpointKey, } from "./artifacts.js";
 export { applyCacheControl, cacheHitRate, cacheSavings, cacheUsageReport, mapCacheRetention, sanitizeCacheKey } from "./cache-helpers.js";
-export { CACHE_TELEMETRY_OVERFLOW_KEY, CacheTelemetryError, DEFAULT_CACHE_TELEMETRY_CAP, createCacheTelemetry, } from "./cache-telemetry.js";
+export { CACHE_TELEMETRY_OVERFLOW_KEY, CacheTelemetryError, createCacheTelemetry, DEFAULT_CACHE_TELEMETRY_CAP, } from "./cache-telemetry.js";
 export { CHECKPOINT_CONFLICT_CODE, CheckpointConflictError, createMemoryCheckpointStore } from "./checkpoints.js";
 export { createDefaultCompactionStrategy, isCompactionEntryData } from "./compaction.js";
 export { assertJsonObject, isJsonObject, loadConfigLayers, mergeConfigLayers } from "./config.js";
@@ -24,6 +22,7 @@ export { createEventMultiplexer, EVENT_MULTIPLEXER_SINGLE_CONSUMER_CODE, EventMu
 export { applyExecutionDecision, assertExecutionAllowed, checkExecution, ExecutionDeniedError } from "./execution-policy.js";
 export { createExtensionEventBus, createExtensionKernel } from "./extensions.js";
 export { createMemoryRunFeedbackStore, prepareRunFeedback, RunFeedbackError, requireRunFeedbackOwnership, runFeedbackPageLimit, } from "./feedback.js";
+export { ALLOW_FIELD_POLICY, applyFieldPolicy, createAuditFieldRedactor, createProtectedFieldPolicy, FIELD_POLICY_LIMITS, FieldPolicyError, } from "./field-policy.js";
 export { assertGuardrailsAllowed, GuardrailError, MAX_GUARDRAIL_CONCURRENCY, runGuardrails } from "./guardrails.js";
 export { assertIdentityActive, assertIdentityMatchesOwnership, assertIdentityPropagation, DEFAULT_IDENTITY_LIMITS, HARD_IDENTITY_LIMITS, IdentityError, identityTelemetryAttributes, narrowIdentity, ownershipFromIdentity, resolveIdentityLimits, resolveRunIdentity, } from "./identity.js";
 export { assembleProviderInput, createDefaultInputBuilder, createDefaultPromptBuilder, renderPromptTemplate, resolveContextProviders, } from "./input.js";
@@ -33,13 +32,14 @@ export { definePrismManifest, parsePrismManifest } from "./manifests.js";
 export { createMiddlewareRegistry } from "./middleware.js";
 export { createMockProvider } from "./mock-provider.js";
 export { createModelRegistry } from "./models.js";
+export { abortableSleep, pollDeviceCodeToken, redactOAuthError, throwIfAborted, } from "./oauth-device-code.js";
 export { createProviderTurnMetadata, readProviderHttpStatus } from "./observability.js";
 export { createMemoryPersistenceLifecycle, DEFAULT_LIFECYCLE_PAGE_SIZE, DEFAULT_MAX_HOLD_REASON_BYTES, HARD_LIFECYCLE_PAGE_SIZE, HARD_MAX_HOLD_REASON_BYTES, isResourceHeld, PersistenceLifecycleError, } from "./persistence-lifecycle.js";
+export { boundResponse, defaultResolver, isLoopbackAddress, isLoopbackHostname, normalizeHostname, pinnedFetch, raceAbort, requestPinned, resolvePinnedAddress, } from "./pinned-fetch.js";
 export { providerContentDelta, providerContinuationRequired, providerDone, providerError, providerTextDelta, providerThinkingDelta, providerToolCall, providerToolCallDelta, providerUsage, toolCallContent, toolCallFromArgumentsText, } from "./provider-events.js";
 export { authMethodKey, defineProviderPackage, systemPromptContributionKey } from "./provider-packages.js";
 export { createProviderRequestPolicyChain, createSessionCachePolicy, mergeProviderRequestOptions } from "./provider-request-policy.js";
 export { createProviderRegistry, createProviderResolver } from "./providers.js";
-export { ALLOW_FIELD_POLICY, applyFieldPolicy, createAuditFieldRedactor, createProtectedFieldPolicy, FieldPolicyError, FIELD_POLICY_LIMITS, } from "./field-policy.js";
 export { createSecretRedactor, errorToErrorInfo, redactAgentEvent, redactMessage, redactProviderRequest, redactRunLedgerRecord, redactSecrets, redactSessionEntry, resolveRedactor, } from "./redaction.js";
 export { loadBinaryResource, loadJsonResource, loadManifestResource, loadTextResource } from "./resources.js";
 export { createDefaultRetryPolicy, isTransientErrorInfo, waitForRetry } from "./retry.js";
@@ -61,6 +61,6 @@ export { DEFAULT_TOOL_RESULT_FOLD_MAX_SUMMARY_BYTES, DEFAULT_TOOL_RESULT_FOLD_MI
 export { createToolParameterValidator, createToolRegistry, dispatchToolCall, filterTools } from "./tools.js";
 export { resolveUseCaseModel, resolveUseCaseModelBinding, useCaseCredentialProviderId, } from "./use-case-model.js";
 export const name = "prism";
-export const version = "0.2.7";
+export const version = "0.2.8";
 export const description = "Agent harness for AI providers, agents, sessions, and tools.";
 //# sourceMappingURL=index.js.map

package/dist/input.js

@@ -4,8 +4,8 @@ import { runInstructionInjectors } from "./instruction-injection.js";
 import { redactMessage } from "./redaction.js";
 import { loadTextResource } from "./resources.js";
 import { skillMessages as buildSkillMessages } from "./skill-disclosure.js";
-import { foldToolResultHistory, foldToolResults } from "./tool-result-fold.js";
 import { composeSystemPrompt } from "./system-prompts.js";
+import { foldToolResultHistory, foldToolResults } from "./tool-result-fold.js";
 export function createDefaultInputBuilder() {
     return {
         name: "default-input",

package/dist/tools.d.ts

@@ -1,4 +1,4 @@
-import type { AgentEvent, ErrorInfo, Guardrails, JsonObject, OwnershipScope, RunLedger, ToolCallContent, ToolDefinition, ToolExecutionContext, ToolEffectDeclaration, ToolEffectStore, ToolRegistry, ToolResult } from "./contracts.js";
+import type { AgentEvent, ErrorInfo, Guardrails, JsonObject, OwnershipScope, RunLedger, ToolCallContent, ToolDefinition, ToolEffectDeclaration, ToolEffectStore, ToolExecutionContext, ToolRegistry, ToolResult } from "./contracts.js";
 import type { MiddlewareRegistry } from "./middleware.js";
 import { type SecretRedactor } from "./redaction.js";
 import { type DuplicateRegistrationOptions } from "./registry-options.js";

package/dist/tools.js

@@ -5,7 +5,7 @@ import { createId } from "./ids.js";
 import { errorToErrorInfo, redactRunLedgerRecord, redactSecrets } from "./redaction.js";
 import { assertCanRegister } from "./registry-options.js";
 import { assertPermission, assertTrusted } from "./security.js";
-import { deriveToolEffectKey, toolEffectArgumentsHash, ToolEffectError } from "./tool-effects.js";
+import { deriveToolEffectKey, ToolEffectError, toolEffectArgumentsHash } from "./tool-effects.js";
 /** Wrap a schema adapter as the existing `ToolValidator` seam used by dispatch and the agent runtime. */
 export function createToolParameterValidator(validator, options = {}) {
     const missingSchema = options.missingSchema ?? "allow";

package/docs/0.1.0-readiness.md

@@ -1,6 +1,6 @@
 # 0.1.0 / 1.0 Readiness Gates
 
-Status: **0.2.7** is the current release line (the 0.2.x review-remediation line: fail-closed runtime/sandbox security, provider completion and outbound trust boundaries, concurrent-state/durability integrity, build/coverage/release-evidence integrity, package/documentation/compatibility truth, maintainability and bounded performance, fully featured coding-agent readiness); **0.1.7** was the terminal 0.1.x baseline; **1.0** readiness remains operator-gated, not automatic.
+Status: **0.2.8** is the current release line (the 0.2.x review-remediation line: fail-closed runtime/sandbox security, provider completion and outbound trust boundaries, concurrent-state/durability integrity, build/coverage/release-evidence integrity, package/documentation/compatibility truth, maintainability and bounded performance, fully featured coding-agent readiness, enterprise ERP production readiness, ACP adoption fixes); **0.1.7** was the terminal 0.1.x baseline; **1.0** readiness remains operator-gated, not automatic.
 
 This page distills runnable readiness gates into one command-per-gate table.
 The **Last evidence** column records the 0.1.0-tree snapshot (plan 012 Tasks
@@ -20,15 +20,15 @@ Historical release lines (0.0.16 floor → 0.0.27 Phase 10 ACP interop → 0.1.0
 keep their per-phase evidence in the pages above; this page records the 0.2.6
 snapshot (plan 026) with the 0.1.x tables below as the historical record.
 
-## Current line (0.2.7)
+## Current line (0.2.8)
 
 | Item | Status |
 |---|---|
-| Published graph | **50** publishable manifests at exact **0.2.7** (root + 49 workspace packages: 14 provider adapters + 9 `prism-*` family/profile + 26 capability; generated by `node scripts/package-truth.mjs` → `scripts/package-truth.json`) |
-| Current-line cut | The 0.2.x review-remediation line, additive-only vs the frozen 0.1.x contract: 0.2.0 fail-closed runtime/sandbox security (durable-resume decision validation, work-tool env isolation, explicit sandbox capabilities), 0.2.1 provider completion + outbound trust boundaries (strict stream completion, bounded success bodies, DNS-pinned OIDC/OPA fetches), 0.2.2 concurrent-state/durability integrity (model-budget reservation, conversation-metadata CAS, single-consumer EventMultiplexer, NATS durable identity), 0.2.3 build/coverage/release-evidence integrity (build single-flight, corrected coverage denominators, release skip manifest, stabilized quality gates), 0.2.4 package/documentation/compatibility truth (umbrella wording matches manifests, manifest-derived package truth, peer-version policy Decision A, current-line truth), 0.2.5 maintainability and bounded performance (god-module splits into cohesive family files behind preserved barrels, persistence-mechanics dedup into `session-store-codecs`, quadratic `Buffer.concat` removed from framing/tar, dead-code cleanup internal-only, 76 behavior-backed coverage regressions), 0.2.6 fully featured coding-agent readiness (host-selected PTY backend, scalable indexed code-search seam, multi-worktree/repository lifecycle, forge breadth demand-gated, durable ACP/process recovery, patch review + incremental diagnostics, protected real coding journey) |
-| Upgrade path | `docs/migration.md` `0.2.6 → 0.2.7` (additive; two new forward-only ERP migrations 004/005 — outbox/inbox + approvals tables; rollback = stop 0.2.7 workers, drop the ERP tables, restore 0.2.6 manifests/tag); store-compatible throughout 0.2.x |
-| Compat promise | Additive-only vs the frozen 0.1.x contract; `scripts/compat-baseline` regenerated at 0.2.7 (version literal + additive PTY/index/workspace/recovery/review exports), zero breaking deltas |
-| Security policy | `npm audit --audit-level=moderate` 0 at 0.2.7; threat-suites legs (phase8–11 + phase20–26) green; protected Postgres recovery/workspace conformance, PTY, real coding journey, NATS/live-canary legs operator-gated |
+| Published graph | **51** publishable manifests at exact **0.2.8** (root + 50 workspace packages: 14 provider adapters + 9 `prism-*` family/profile + 27 capability; generated by `node scripts/package-truth.mjs` → `scripts/package-truth.json`) |
+| Current-line cut | The 0.2.x review-remediation line, additive-only vs the frozen 0.1.x contract: 0.2.0 fail-closed runtime/sandbox security, 0.2.1 provider completion + outbound trust boundaries, 0.2.2 concurrent-state/durability integrity, 0.2.3 build/coverage/release-evidence integrity, 0.2.4 package/documentation/compatibility truth, 0.2.5 maintainability and bounded performance, 0.2.6 fully featured coding-agent readiness, 0.2.7 enterprise ERP production readiness, 0.2.8 ACP adoption fixes (client-neutrality guard, truthful ACP wire, spawnable `@arnilo/prism-acp-agent`, thought/plan/title/image/command updates) |
+| Upgrade path | `docs/migration.md` `0.2.7 → 0.2.8` (additive; no store migration; rollback = restore 0.2.7 manifests/tag); store-compatible throughout 0.2.x |
+| Compat promise | Additive-only vs the frozen 0.1.x contract; `scripts/compat-baseline` regenerated at 0.2.8 (version literal + additive ACP/agent exports), zero breaking deltas |
+| Security policy | `npm audit --audit-level=moderate` 0 at 0.2.8; threat-suites legs (phase8–11 + phase20–26) green; protected Postgres recovery/workspace conformance, PTY, real coding journey, NATS/live-canary legs operator-gated |
 | Docs freeze | tripwires green including the canonical manifest-count tripwire (50/49/14/9/26), the plan 024 package-truth tests (generator reproducibility + artifact equality + closure asserts + derived docs truth), the plan 025 bounded-accumulation near-limit probe, and the plan 026 freeze tripwires (per-task markers, threat T1–T8 test mapping, exit gate green) |
 | 0.1.x line | **0.1.7** (plan 019) is the terminal 0.1.x baseline; the 0.1.1 table below keeps the plan 013 snapshot; the 0.1.0 table keeps the plan 012 snapshot; the **0.0.16** values remain the historical network-free floor |