@arnilo/prism 0.5.4 → 0.5.5

package/CHANGELOG.md

@@ -1,3 +1,8 @@
+## [0.5.5] - 2026-09-08
+
+### Fixed
+- **Byte limits are per-frame, not cumulative.** `maxRequestBytes`/`maxResponseBytes` now compare each individual provider frame (request payload, streamed event) against the cap instead of a run-lifetime byte sum, so long autonomous coding runs (many megabyte-scale frames, each far under 64 MiB) no longer trip `Run limit exceeded: maxRequestBytes` after ~40 turns. HARD stays per-frame process safety — one giant frame still fails, 40 legal frames never do. Cumulative byte counters remain in snapshots/telemetry; token/turn/wall/cost axes stay cumulative.
+
 ## [0.5.4] - 2026-09-08 (plan 067)
 
 ### Changed

package/README.md

@@ -162,16 +162,16 @@ printf '{"id":"1","command":"prompt","params":{"input":"Hi"}}\n' \
 
 | package | version | notes |
 | --- | --- | --- |
-| `@arnilo/prism` | 0.5.4 | core — runtime, CLI/RPC, templates, docs |
-| `@arnilo/prism-coding-tools` | 0.5.4 | family — /agent, /security, /document-reader, /openapi, /computer-use-linux, /dev, /caveman, /ponytail, /impeccable subpaths |
-| `@arnilo/prism-core` | 0.5.4 | family — /runtime, /sessions, /governance, /credentials, /enterprise, /work, /validation subpaths |
-| `@arnilo/prism-providers` | 0.5.4 | family — all provider adapters as `/<adapter>` subpaths |
-| `@arnilo/prism-acp-agent` | 0.5.4 | capability — ACP adapter |
-| `@arnilo/prism-ag-ui` | 0.5.4 | capability — AG-UI/A2A/A2UI adapter |
-| `@arnilo/prism-mcp` | 0.5.4 | capability — MCP client/server/OAuth interop |
-| `@arnilo/prism-memory` | 0.5.4 | capability — memory plus /rag, /compaction/*, /graft, /wiki subpaths |
-| `@arnilo/prism-office` | 0.5.4 | capability — /documents, /sheets, /diagrams subpaths |
-| `@arnilo/prism-web-tools` | 0.5.4 | capability — Brave/Exa/Firecrawl plus peer-gated /browser and /obscura subpaths |
+| `@arnilo/prism` | 0.5.5 | core — runtime, CLI/RPC, templates, docs |
+| `@arnilo/prism-coding-tools` | 0.5.5 | family — /agent, /security, /document-reader, /openapi, /computer-use-linux, /dev, /caveman, /ponytail, /impeccable subpaths |
+| `@arnilo/prism-core` | 0.5.5 | family — /runtime, /sessions, /governance, /credentials, /enterprise, /work, /validation subpaths |
+| `@arnilo/prism-providers` | 0.5.5 | family — all provider adapters as `/<adapter>` subpaths |
+| `@arnilo/prism-acp-agent` | 0.5.5 | capability — ACP adapter |
+| `@arnilo/prism-ag-ui` | 0.5.5 | capability — AG-UI/A2A/A2UI adapter |
+| `@arnilo/prism-mcp` | 0.5.5 | capability — MCP client/server/OAuth interop |
+| `@arnilo/prism-memory` | 0.5.5 | capability — memory plus /rag, /compaction/*, /graft, /wiki subpaths |
+| `@arnilo/prism-office` | 0.5.5 | capability — /documents, /sheets, /diagrams subpaths |
+| `@arnilo/prism-web-tools` | 0.5.5 | capability — Brave/Exa/Firecrawl plus peer-gated /browser and /obscura subpaths |
 <!-- generated:package-truth:inventory end -->
 
 ## Scripts

package/dist/index.d.ts

@@ -119,5 +119,5 @@ export { trimTrailingSlashes } from "./trim-trailing-slashes.js";
 export type { ResolvedUseCaseModel, ResolveUseCaseModelInput, UseCaseModelBinding, } from "./use-case-model.js";
 export { resolveUseCaseModel, resolveUseCaseModelBinding, useCaseCredentialProviderId, } from "./use-case-model.js";
 export declare const name = "prism";
-export declare const version = "0.5.4";
+export declare const version = "0.5.5";
 export declare const description = "Agent harness for AI providers, agents, sessions, and tools.";

package/dist/index.js

@@ -66,6 +66,6 @@ export { createToolParameterValidator, createToolRegistry, dispatchToolCall, fil
 export { trimTrailingSlashes } from "./trim-trailing-slashes.js";
 export { resolveUseCaseModel, resolveUseCaseModelBinding, useCaseCredentialProviderId, } from "./use-case-model.js";
 export const name = "prism";
-export const version = "0.5.4";
+export const version = "0.5.5";
 export const description = "Agent harness for AI providers, agents, sessions, and tools.";
 //# sourceMappingURL=index.js.map

package/dist/run-limits.js

@@ -209,8 +209,13 @@ export class RunLimitTracker {
             this.exceed(limit, Number.MAX_SAFE_INTEGER + 1);
         this.counters[counter] = observed;
         const cap = this.limits[limit];
-        if (cap !== null && observed > cap)
-            this.exceed(limit, observed);
+        if (cap === null)
+            return;
+        // Byte caps are per-frame (HARD exists so one giant provider frame cannot OOM the host),
+        // not run-lifetime sums; every other axis stays cumulative.
+        const against = limit === "maxRequestBytes" || limit === "maxResponseBytes" ? delta : observed;
+        if (against > cap)
+            this.exceed(limit, against);
     }
     recordUsage(usage) {
         if (!usage) {

package/docs/credential-storage.md

@@ -269,5 +269,5 @@ MCP credentials remain host inputs: resolve them before constructing client `req
 - [Azure OpenAI / Foundry](providers/azure.md) / [Amazon Bedrock](providers/bedrock.md) / [Google Vertex AI](providers/vertex.md): enterprise workload-identity credential callbacks
 - [Web search, fetch, and extraction](web-tools.md): late-bound Brave/Exa/Firecrawl credentials
 - [Security/auth/trust](settings-auth-trust-security.md): host-owned settings/credentials boundaries
-- [Persistence, credentials, and multimodality primitives](persistence-credentials-multimodality-primitives.md): Plan 056 threat model and conformance matrix rows 7–10
+- [Persistence, credentials, and multimodality primitives](history/persistence-credentials-multimodality-primitives.md): Plan 056 threat model and conformance matrix rows 7–10
 - `@arnilo/prism`: `CredentialResolver`, `OAuthCredentialStore`, `createMemoryCredentialStore()`

package/docs/graft.md

@@ -105,7 +105,7 @@ await kernel.load([
 - Import alone registers nothing (`sideEffects: false`); no timers, watchers, or network. The only child processes are budgeted graft CLI calls.
 - Retrieval happens in-process via Prism primitives (context provider, injector, tool_result middleware) — no external hook shims.
 - Ask result shape is parsed tolerantly (`nodes|results|matches|hits`) because graft is pre-1.0; formatters emit pointers (`title` + `file:line` + `[[wikilink]]`), never source bodies.
-- Not included in `@arnilo/prism-coding-tools`, `@arnilo/prism-core`, or the `prism-all` umbrella (deliberate opt-out, like Caveman/Ponytail) — opt-in install only.
+- Deliberate opt-out from family/umbrella packaging (like Caveman/Ponytail) — opt-in install only.
 - Multi-repo layouts work as upstream graft defines them (workspaces, submodules with `--follow-submodules`, sibling repos); point `projectDir` at the graft root that owns the target repo.
 
 ## Security and performance notes

package/docs/{0.1.0-readiness.md → history/0.1.0-readiness.md}

@@ -10,11 +10,11 @@ the release tree before cutting 1.0. The decision to cut 1.0 stays with the
 operator after operator-gated legs run in a protected environment and Phase
 12 demand evidence exists.
 
-Evidence trail: [`docs/_evidence/review-coverage-2026-07-26-phase-11.md`](./_evidence/review-coverage-2026-07-26-phase-11.md)
-(addenda 0–9), [`docs/release-and-install.md`](./release-and-install.md),
-[`docs/migration.md`](./migration.md), [`docs/performance.md`](./performance.md),
-[`docs/public-contracts.md`](./public-contracts.md) (frozen 0.1.x contract).
-The per-phase review-coverage evidence archive lives in [`docs/_evidence/`](./_evidence/)
+Evidence trail: [`docs/_evidence/review-coverage-2026-07-26-phase-11.md`](.././_evidence/review-coverage-2026-07-26-phase-11.md)
+(addenda 0–9), [`docs/release-and-install.md`](.././release-and-install.md),
+[`docs/migration.md`](.././migration.md), [`docs/performance.md`](.././performance.md),
+[`docs/public-contracts.md`](.././public-contracts.md) (frozen 0.1.x contract).
+The per-phase review-coverage evidence archive lives in [`docs/_evidence/`](.././_evidence/)
 (plans 067–079, releases 0.0.4–0.0.16; tarball-excluded, kept in-repo for audit).
 Historical release lines (0.0.16 floor → 0.0.27 Phase 10 ACP interop → 0.1.0)
 keep their per-phase evidence in the pages above; this page records the 0.2.6
@@ -82,7 +82,7 @@ material in published artifacts) and exact version-range drift. A genuine break
 requires `--allow-break` **and** a `docs/migration.md` entry mentioning the
 version. The frozen 0.1.x contract (declaration/exports, events, protocol
 payloads, migration checksums, patch-release compatibility promise) is
-published in [docs/public-contracts.md](public-contracts.md).
+published in [docs/public-contracts.md](../public-contracts.md).
 
 **Baseline maintenance:** `scripts/compat-baseline/` must stay committed.
 Regenerate only after review with `node scripts/release.mjs gate --update-baseline`,

package/docs/history/README.md

@@ -0,0 +1,11 @@
+# Documentation archive
+
+Historical records kept verbatim for audit and freeze tests. Not read on the
+hot path — do not link these pages from current-contract docs; link the live
+page instead and note the archive where provenance matters.
+
+- `migration-0.0.md` … `migration-0.4.md`: per-era release migrations (the live [migration guide](../migration.md) keeps 0.5.x only).
+- `release-handoffs.md`: operator publish handoffs per release line (the live [release and install](../release-and-install.md) page keeps current install, inventory, gates, and peer policy).
+- `migrate-to-0.4.md`: retired 0.3-era package reorganization guide (current line: [migrate-to-0.5.md](../migrate-to-0.5.md)).
+- `0.1.0-readiness.md`: frozen 0.1.x readiness record.
+- `persistence-credentials-multimodality-primitives.md`, `workflow-orchestration-primitives.md`, `workflow-tui-primitives.md`: plan-era primitive-review inventories.

package/docs/{migrate-to-0.4.md → history/migrate-to-0.4.md}

@@ -306,7 +306,7 @@ API page says so.
 
 ## Related APIs
 
-- [Release and install](release-and-install.md): package contents, peer rules, and publication.
-- [Migration guide](migration.md): migration history for prior releases.
-- [Provider packages](provider-packages.md): provider adapter behavior.
-- [Host security guide](host-security.md): preserve host trust boundaries while upgrading.
+- [Release and install](../release-and-install.md): package contents, peer rules, and publication.
+- [Migration guide](../migration.md): migration history for prior releases.
+- [Provider packages](../provider-packages.md): provider adapter behavior.
+- [Host security guide](../host-security.md): preserve host trust boundaries while upgrading.