@arnilo/prism 0.5.6 → 0.7.0

package/dist/contracts-core/provider.d.ts

@@ -83,6 +83,10 @@ export interface RealtimeSession {
     close(reason?: string, options?: {
         readonly signal?: AbortSignal;
     }): Promise<void>;
+    /** Return a host-dispatched tool result. Omitted on transports that cannot complete tools. */
+    completeTool?(callId: string, output: string, options?: {
+        readonly signal?: AbortSignal;
+    }): Promise<void>;
 }
 /** Factory a provider exposes for realtime sessions; not part of `AIProvider`. */
 export type RealtimeSessionFactory = (options: RealtimeSessionOptions) => RealtimeSession;

package/dist/contracts-core.d.ts

@@ -3,6 +3,7 @@
  * of `./contracts-core.js` is unchanged (0.1.4 barrel precedent). */
 export type { AudioContent, DocumentContent, FileContent } from "./content.js";
 export * from "./contracts-core/agent.js";
+export * from "./contracts-core/attention.js";
 export * from "./contracts-core/batch.js";
 export * from "./contracts-core/compaction.js";
 export * from "./contracts-core/content.js";

package/dist/contracts-core.js

@@ -1,4 +1,5 @@
 export * from "./contracts-core/agent.js";
+export * from "./contracts-core/attention.js";
 export * from "./contracts-core/batch.js";
 export * from "./contracts-core/compaction.js";
 export * from "./contracts-core/content.js";

package/dist/contracts-protocol.d.ts

@@ -45,6 +45,9 @@ export type RealtimeEvent = {
 } | {
     readonly type: "tool_call";
     readonly call: ToolCallContent;
+} | {
+    readonly type: "usage";
+    readonly usage: Usage;
 } | {
     readonly type: "interrupted";
 } | {
@@ -97,11 +100,22 @@ export interface RunOptions {
     readonly activateAllSkills?: true;
     /** Progressive: catalog (name+description) unless loaded; eager: full instructions every turn. Default progressive. */
     readonly skillsDisclosure?: import("./skill-disclosure.js").SkillsDisclosure;
+    /**
+     * Optional per-run allow-list of registered tool names. Omitted → every registered tool (legacy).
+     * Empty → no tools this run. Unknown names fail closed. Cannot widen the agent registry or a
+     * checkpointed grant; resume intersects this list with current authority.
+     */
+    readonly toolNames?: readonly string[];
     /** Tools disclosure: "all" (default) sends every active tool schema; "search" sends top-k + the generated `search_tools` tool. */
     readonly toolsDisclosure?: import("./tool-search.js").ToolsDisclosure;
     readonly toolsSearch?: import("./tool-search.js").ToolsSearchOptions;
     /** Opt-in projection-only fold for aged large tool results in provider view; store untouched. */
     readonly toolResultFold?: import("./tool-result-fold.js").ToolResultFoldOptions;
+    /** Per-run overlay for `AgentConfig.attentionCompiler` (plan 074 C12): `false` disables the
+     *  compiler for this run, `true` is a no-op, an object may only relax the agent setting
+     *  (gate ratios up, `keepLast`/`thinkingKeepTurns` down, `excludeTools` extended). Enabling
+     *  the compiler where the agent config left it off throws before the first provider turn. */
+    readonly attentionCompiler?: import("./contracts-core/attention.js").AttentionCompilerSetting;
     readonly instructionInjectors?: readonly InstructionInjector[];
     readonly inputLayout?: InputAssemblyLayout;
     readonly loop?: AgentLoopStrategy | AgentLoopOptions;
@@ -299,6 +313,21 @@ export type AgentEvent = {
     readonly sessionId: string;
     readonly runId?: string;
     readonly summary: string;
+} | {
+    /** One attention-compiler mutation (plan 074 R15/T6): measured counts only, never message text. */
+    readonly type: "attention_compiled";
+    readonly sessionId: string;
+    readonly runId?: string;
+    readonly used: number;
+    /** Estimated tokens of the same request after this turn's mutation. */
+    readonly usedAfter: number;
+    readonly inputCap: number;
+    readonly triggerRatio: number;
+    readonly droppedThinkingTurns: number;
+    readonly stubbedToolResults: number;
+    /** Payload bytes the tool stubs took out of this request. */
+    readonly stubbedBytes: number;
+    readonly truncated: boolean;
 } | {
     readonly type: "retry_scheduled";
     readonly sessionId: string;

package/dist/contracts-run-state.d.ts

@@ -196,6 +196,12 @@ export interface AgentRunResumeOptions {
     readonly fencingToken?: number;
     /** Routes root decisions for nested-run approvals back to the child (e.g. supervisor). */
     readonly resumeNestedRun?: ResumeNestedRun;
+    /**
+     * Opt-in (plan 078 Task 7): receives the reconstructed session before the resumed run
+     * starts, so an observer (e.g. the supervisor's child-event pump) can subscribe while the
+     * run is still live. The session is valid only for the duration of this resume.
+     */
+    readonly onSession?: (session: AgentSession) => void;
     /** Opt-in (plan 015 Task 4): restore persisted loaded-skill names into the resumed session catalog. */
     readonly persistSessionState?: boolean;
     /** Opt-in (plan 018 Task 6): restore persisted loaded-skill bodies (requires `persistSessionState` too). */

package/dist/host-composition.d.ts

@@ -0,0 +1,78 @@
+import type { Agent, AgentConfig, CheckpointStore, SecureAgentOptions, SessionStore } from "./contracts.js";
+import type { SecretRedactor } from "./redaction.js";
+export type HostCompositionProfile = "personal" | "local-personal" | "business" | "business-worker" | "multi-tenant-worker";
+export declare class HostCompositionError extends Error {
+    readonly code: string;
+    constructor(message: string, code?: string);
+}
+export interface HostCompositionGovernance {
+    readonly modelRouter?: unknown;
+    readonly budgetPolicy?: unknown;
+    readonly rateLimitPolicy?: unknown;
+    readonly supported?: boolean;
+    readonly [key: string]: unknown;
+}
+export interface HostCompositionOptions {
+    readonly profile?: HostCompositionProfile;
+    readonly agent?: Agent | AgentConfig | SecureAgentOptions | Partial<AgentConfig>;
+    readonly store?: SessionStore | CheckpointStore | {
+        readonly kind?: string;
+        readonly durable?: boolean;
+        [key: string]: unknown;
+    };
+    readonly checkpoints?: CheckpointStore;
+    readonly workspaceRoot?: string;
+    readonly sandboxRoots?: readonly string[];
+    readonly credentialRefs?: readonly string[];
+    readonly governance?: HostCompositionGovernance;
+    readonly redactor?: SecretRedactor;
+    /** Explicit opt-in for live network checks; inert by default. */
+    readonly liveChecks?: boolean;
+}
+export interface HostCompositionToolReport {
+    readonly name: string;
+    readonly description?: string;
+    readonly hasParameters: boolean;
+}
+export interface HostCompositionReport {
+    readonly profile: "personal" | "business";
+    readonly effectiveTools: readonly HostCompositionToolReport[];
+    readonly credentialReferences: readonly string[];
+    readonly ownership: {
+        readonly tenantId?: string;
+        readonly accountId?: string;
+        readonly userId?: string;
+    };
+    readonly storage: {
+        readonly kind: string;
+        readonly durable: boolean;
+    };
+    readonly sandbox: {
+        readonly workspaceRoot?: string;
+        readonly roots: readonly string[];
+        readonly isolated: boolean;
+    };
+    readonly governance: {
+        readonly permission: boolean;
+        readonly trust: boolean;
+        readonly redactor: boolean;
+        readonly validator: boolean;
+        readonly modelRouting: boolean;
+        readonly secure: boolean;
+    };
+    readonly readiness: {
+        readonly ok: boolean;
+        readonly errors: readonly string[];
+        readonly warnings: readonly string[];
+    };
+}
+/**
+ * Inspects a host composition in an inert, bounded, and secret-redacting manner.
+ * Performs zero network calls by default.
+ */
+export declare function inspectHostComposition(options: HostCompositionOptions): HostCompositionReport;
+/**
+ * Asserts that a host composition meets all readiness requirements for its profile.
+ * Throws HostCompositionError on failure.
+ */
+export declare function assertHostCompositionReadiness(options: HostCompositionOptions): HostCompositionReport;

package/dist/host-composition.js

@@ -0,0 +1,248 @@
+import { isAbsolute, relative } from "node:path";
+import { assertIdentityActive, assertIdentityMatchesOwnership } from "./identity.js";
+export class HostCompositionError extends Error {
+    code;
+    constructor(message, code = "ERR_PRISM_HOST_COMPOSITION") {
+        super(message);
+        this.code = code;
+        this.name = "HostCompositionError";
+    }
+}
+function resolveAgentConfig(input) {
+    if (!input)
+        return undefined;
+    if ("config" in input && typeof input.config === "object" && input.config !== null) {
+        return input.config;
+    }
+    return input;
+}
+function normalizeProfile(profile) {
+    if (!profile)
+        return "personal";
+    if (profile === "business" || profile === "business-worker" || profile === "multi-tenant-worker") {
+        return "business";
+    }
+    return "personal";
+}
+function extractTools(toolsConfig) {
+    if (!toolsConfig)
+        return [];
+    if (Array.isArray(toolsConfig))
+        return toolsConfig;
+    if (typeof toolsConfig.list === "function") {
+        return toolsConfig.list();
+    }
+    return [];
+}
+function sanitizeCredentialRefs(refs = [], redactor) {
+    const sanitized = [];
+    for (const ref of refs) {
+        if (!ref || typeof ref !== "string")
+            continue;
+        const trimmed = ref.trim();
+        if (!trimmed)
+            continue;
+        // Credential references must be identifier names (env vars or vault keys), never raw secrets.
+        if (/^(?:sk-|ghp_|ey|Bearer\s+)/i.test(trimmed)) {
+            sanitized.push("[REDACTED_SECRET_VALUE]");
+            continue;
+        }
+        if (redactor && typeof redactor.redact === "function") {
+            sanitized.push(redactor.redact(trimmed));
+        }
+        else {
+            sanitized.push(trimmed);
+        }
+    }
+    return Object.freeze(sanitized);
+}
+function isContainedPath(parent, child) {
+    const rel = relative(parent, child);
+    return !rel.startsWith("..") && !isAbsolute(rel);
+}
+function resolveStorage(store, checkpoints) {
+    const target = store ?? checkpoints;
+    if (!target || typeof target !== "object") {
+        return { kind: "none", durable: false };
+    }
+    const record = target;
+    const constructorName = target.constructor?.name ?? "";
+    const declaredKind = typeof record.kind === "string" ? record.kind.toLowerCase() : "";
+    // Explicit in-memory implementations are NEVER durable.
+    if (constructorName.includes("Memory") ||
+        declaredKind.includes("memory") ||
+        record.durable === false ||
+        record.durability === "ephemeral") {
+        return { kind: declaredKind || "memory", durable: false };
+    }
+    // Postgres, SQLite, or explicitly durable stores
+    if (record.durable === true ||
+        record.durability === "durable" ||
+        constructorName.includes("Postgres") ||
+        constructorName.includes("Sqlite") ||
+        declaredKind.includes("postgres") ||
+        declaredKind.includes("sqlite")) {
+        return { kind: declaredKind || constructorName.toLowerCase() || "durable", durable: true };
+    }
+    // Any store with saveCheckpoint / appendEntry / queryEntries without explicit durable: true is in-memory
+    if (typeof record.saveCheckpoint === "function" ||
+        typeof record.appendEntry === "function" ||
+        typeof record.queryEntries === "function" ||
+        typeof record.append === "function") {
+        return { kind: declaredKind || "memory", durable: false };
+    }
+    // Unknown store without explicit durable flag is treated as non-durable memory
+    return { kind: declaredKind || "memory", durable: false };
+}
+/**
+ * Inspects a host composition in an inert, bounded, and secret-redacting manner.
+ * Performs zero network calls by default.
+ */
+export function inspectHostComposition(options) {
+    const normalizedProfile = normalizeProfile(options.profile);
+    const config = resolveAgentConfig(options.agent);
+    const redactor = options.redactor ?? config?.redactor;
+    // 1. Effective tools
+    const rawTools = extractTools(config?.tools);
+    const effectiveTools = rawTools.map((tool) => ({
+        name: tool.name,
+        description: tool.description,
+        hasParameters: Boolean(tool.parameters && Object.keys(tool.parameters).length > 0),
+    }));
+    // 2. Credential references (identifier references only, raw values redacted)
+    const credRefs = sanitizeCredentialRefs(options.credentialRefs, redactor);
+    // 3. Ownership
+    const rawOwnership = config?.ownership;
+    const ownership = {
+        tenantId: typeof rawOwnership?.tenantId === "string" ? rawOwnership.tenantId.trim() : undefined,
+        accountId: typeof rawOwnership?.accountId === "string" ? rawOwnership.accountId.trim() : undefined,
+        userId: typeof rawOwnership?.userId === "string" ? rawOwnership.userId.trim() : undefined,
+    };
+    // 4. Storage durability
+    const storage = resolveStorage(options.store, options.checkpoints ?? config?.runState?.checkpoints);
+    // 5. Sandbox capabilities
+    const workspaceRoot = options.workspaceRoot;
+    const sandboxRoots = options.sandboxRoots ?? [];
+    let isolated = true;
+    if (workspaceRoot && sandboxRoots.length > 0) {
+        for (const root of sandboxRoots) {
+            if (!isContainedPath(workspaceRoot, root)) {
+                isolated = false;
+                break;
+            }
+        }
+    }
+    // 6. Governance coverage
+    const hasValidator = Boolean((config && "validator" in config && typeof config.validator === "function") ||
+        (config &&
+            "toolArgumentValidator" in config &&
+            typeof config.toolArgumentValidator?.validate === "function"));
+    const isSecure = Boolean(config?.secure);
+    const governance = {
+        permission: Boolean(config?.permission && typeof config.permission.check === "function"),
+        trust: Boolean(config?.trust && typeof config.trust.check === "function"),
+        redactor: Boolean(redactor && typeof redactor.redact === "function"),
+        validator: hasValidator,
+        modelRouting: Boolean(options.governance?.modelRouter || config?.modelRouter),
+        secure: isSecure,
+    };
+    // 7. Readiness analysis
+    const errors = [];
+    const warnings = [];
+    // Required redactor check
+    if (!governance.redactor) {
+        errors.push("Missing required secret redactor");
+    }
+    // Required provider or model configuration
+    const hasProvider = Boolean(config?.provider);
+    const hasModel = Boolean(config?.model);
+    if (!hasProvider && !hasModel) {
+        errors.push("Missing required provider or model configuration");
+    }
+    // Ownership presence
+    const hasAnyOwner = Boolean(ownership.tenantId || ownership.userId || ownership.accountId);
+    if (!hasAnyOwner) {
+        errors.push("Ownership scope is required");
+    }
+    // Profile-specific readiness
+    if (normalizedProfile === "personal") {
+        if (!ownership.userId) {
+            errors.push("Personal composition requires userId in ownership");
+        }
+        if (!isolated) {
+            errors.push("Sandbox roots must be contained within workspaceRoot");
+        }
+    }
+    else {
+        // business composition
+        if (!ownership.tenantId) {
+            errors.push("Business worker requires non-empty tenantId in ownership");
+        }
+        // Verified identity verification
+        const identity = config?.identity;
+        if (identity) {
+            if (!identity.principal?.id || !identity.tenantId) {
+                errors.push("Business worker identity cannot be empty or fabricated");
+            }
+            else {
+                try {
+                    assertIdentityActive(identity);
+                    if (rawOwnership) {
+                        assertIdentityMatchesOwnership(identity, rawOwnership);
+                    }
+                }
+                catch (error) {
+                    errors.push(error instanceof Error ? error.message : String(error));
+                }
+            }
+        }
+        // Storage durability verification (memory-only persistence is NOT permitted in business readiness)
+        if (!storage.durable) {
+            errors.push("Business composition requires durable storage; in-memory storage is not permitted in production readiness");
+        }
+        // Sandbox isolation verification
+        if (!isolated || (sandboxRoots.length > 0 && !workspaceRoot)) {
+            errors.push("Mixed sandbox workspace detected; business worker requires strict workspace containment");
+        }
+        // Governance coverage
+        if (options.governance?.supported === false) {
+            errors.push("Unsupported governance configuration");
+        }
+        if (!governance.permission) {
+            errors.push("Business composition requires a permission policy");
+        }
+        if (!governance.trust) {
+            errors.push("Business composition requires a trust policy");
+        }
+    }
+    return {
+        profile: normalizedProfile,
+        effectiveTools: Object.freeze(effectiveTools),
+        credentialReferences: credRefs,
+        ownership: Object.freeze(ownership),
+        storage: Object.freeze(storage),
+        sandbox: Object.freeze({
+            ...(workspaceRoot ? { workspaceRoot } : {}),
+            roots: Object.freeze([...sandboxRoots]),
+            isolated,
+        }),
+        governance: Object.freeze(governance),
+        readiness: Object.freeze({
+            ok: errors.length === 0,
+            errors: Object.freeze(errors),
+            warnings: Object.freeze(warnings),
+        }),
+    };
+}
+/**
+ * Asserts that a host composition meets all readiness requirements for its profile.
+ * Throws HostCompositionError on failure.
+ */
+export function assertHostCompositionReadiness(options) {
+    const report = inspectHostComposition(options);
+    if (!report.readiness.ok) {
+        throw new HostCompositionError(report.readiness.errors.join("; "));
+    }
+    return report;
+}
+//# sourceMappingURL=host-composition.js.map

package/dist/index.d.ts

@@ -7,8 +7,10 @@ export { createAgentRunLifecycle } from "./agent-run-lifecycle.js";
 export type { PendingToolCall, StoredAgentRunState } from "./agent-run-state.js";
 export { AGENT_RUN_STATE_NAMESPACE, AGENT_RUN_STATE_SCHEMA_VERSION, agentFingerprint, DEFAULT_MAX_AGENT_RUN_STATE_BYTES, HARD_MAX_AGENT_RUN_STATE_BYTES, loadAgentRunState, } from "./agent-run-state.js";
 export { createAgent, createAgentSession, resumeAgentRun, resumeAgentRunStream } from "./agents.js";
-export type { ArtifactApproval, ArtifactApprovalState, ArtifactBodyErrorCode, ArtifactBodyPresignOptions, ArtifactBodyRef, ArtifactBodyStore, ArtifactBodyTransferOptions, ArtifactCitation, ArtifactDecisionState, ArtifactDeliveryToken, ArtifactRecord, ArtifactRevision, } from "./artifacts.js";
-export { ARTIFACT_BODY_ERROR_CODES, ARTIFACT_CHECKPOINT_NAMESPACE, ArtifactBodyStoreError, ArtifactError, artifactApprovalState, artifactCheckpointKey, } from "./artifacts.js";
+export type { ArtifactApproval, ArtifactApprovalState, ArtifactBodyErrorCode, ArtifactBodyPresignOptions, ArtifactBodyRef, ArtifactBodyStore, ArtifactBodyTransferOptions, ArtifactCitation, ArtifactDecisionState, ArtifactDeliveryToken, ArtifactRecord, ArtifactRevision, CitationIntegrityReason, CitationIntegrityResult, CitationLiveSource, CitationSupport, } from "./artifacts.js";
+export { ARTIFACT_BODY_ERROR_CODES, ARTIFACT_CHECKPOINT_NAMESPACE, ArtifactBodyStoreError, ArtifactError, approvalEvidenceIntact, artifactApprovalState, artifactCheckpointKey, checkCitationIntegrity, citationBindingDigest, HARD_CITATION_EXCERPT_BYTES, } from "./artifacts.js";
+export { ATTENTION_BUDGET_ERROR_CODE, AttentionBudgetError, createAttentionCompiler, createAttentionTruncationTrigger, DEFAULT_ATTENTION_COMPACT_RATIO, DEFAULT_ATTENTION_KEEP_LAST, DEFAULT_ATTENTION_RESERVE_TOKENS, DEFAULT_ATTENTION_THINKING_KEEP_TURNS, DEFAULT_ATTENTION_TRIGGER_RATIO, DEFAULT_ATTENTION_TRUNCATION_THRESHOLD, isAttentionBudgetError, resolveAttentionReserveTokens, resolveInputCap, resolveRunAttentionCompiler, } from "./attention-compiler.js";
+export type { AttentionTruncationTrigger, AttentionTruncationTriggerOptions, PersistedAttentionStickyFrontier, } from "./attention-compiler.js";
 export type { ApplyCacheControlOptions, CacheControlledContentBlock, CacheControlledMessage, CacheControlValue, CacheUsageReport, } from "./cache-helpers.js";
 export { applyCacheControl, cacheHitRate, cacheSavings, cacheUsageReport, mapCacheRetention, resolveBreakpoint, sanitizeCacheKey, systemCacheControlField, } from "./cache-helpers.js";
 export type { CacheTelemetry, CacheTelemetryOptions, CacheTelemetryReport, CacheTelemetrySample, } from "./cache-telemetry.js";
@@ -23,11 +25,11 @@ export type { ConfigLayer, ConfigLoadContext, ConfigProvider } from "./config.js
 export { assertJsonObject, isJsonObject, loadConfigLayers, mergeConfigLayers } from "./config.js";
 export type { AudioContent, DocumentContent, FileContent, MediaContentBlock, MediaContentBounds, MediaHostAddress, MediaHostnameResolver, MediaMimePolicy, MediaUrlRequest, MediaUrlRequester, ModelInputCapability, ResolvedMediaContent, ResolveMediaContentOptions, SsrfPolicy, } from "./content.js";
 export { assertDeclaredMediaTypeMatches, assertMediaBlocksWithinBounds, assertMessagesSupportModelCapabilities, assertModelSupportsContentBlocks, assertSsrfAllowedUrl, collectMessageContentBlocks, contentBlockInputModality, DEFAULT_MAX_AUDIO_DURATION_MS, DEFAULT_MAX_MEDIA_ITEM_BYTES, DEFAULT_MAX_MEDIA_ITEMS_PER_REQUEST, DEFAULT_MAX_MEDIA_REQUEST_BYTES, DEFAULT_MEDIA_FETCH_TIMEOUT_MS, loadBoundedBinaryResource, MediaContentError, MODEL_INPUT_CAPABILITIES, resolveMediaContentBlock, resolveMediaContentBlocks, sniffMediaMimeType, UnsupportedModalityError, } from "./content.js";
-export type { ContextBudget, ContextBudgetMessageGroups, ContextBudgetOmission, ContextBudgetOmissionKind, ContextBudgetReport, } from "./context-budget.js";
+export type { ContextBudget, ContextBudgetMessageGroups, ContextBudgetOmission, ContextBudgetOmissionKind, ContextBudgetReport, TokenEstimator, } from "./context-budget.js";
 export { applyContextBudget, CONTEXT_BUDGET_ERROR_CODE, CONTEXT_BUDGET_REPORT_METADATA_KEY, ContextBudgetError, DEFAULT_MAX_CONTEXT_BUDGET_OMISSIONS, estimateAssemblyTokens, estimateMessageBytes, estimateMessageTokens, estimateTextBytes, estimateTextTokens, getContextBudgetReport, HARD_MAX_CONTEXT_BUDGET_BYTES, HARD_MAX_CONTEXT_BUDGET_OMISSIONS, HARD_MAX_CONTEXT_BUDGET_TOKENS, isContextBudgetError, resolveContextBudget, } from "./context-budget.js";
 export type * from "./contracts.js";
-export type { ApprovalOutcome, DecisionScope, NestedRunApproval, NestedRunOutcome, NestedRunRef, PendingDecision, PendingDecisionKind, ProviderResolver, RealtimeCaps, RealtimeEvent, RealtimeSession, RealtimeSessionFactory, RealtimeSessionOptions, ResumeNestedRun, RunDecision, RunLimitCounters, RunLimitName, SecureAgentOptions, StickyDecision, ToolCallAuthority, ToolEffectClassifier, ToolEffectDeclaration, ToolEffectIdempotency, ToolEffectKey, ToolEffectKind, ToolEffectRecord, ToolEffectStatus, ToolEffectStore, ToolEffectTransition, ToolElicitationRequest, } from "./contracts.js";
-export { AgentDecisionError, AgentDelegationSuspendedError, AgentLoopStateError, AgentRunError, AgentRunStateError, assertBatchJobsSupported, assertEmbeddingsSupported, assertImageGenerationSupported, assertModerationSupported, assertSessionMetadataKey, assertSpeechSupported, assertTranscriptionSupported, assertVideoGenerationSupported, BatchJobsError, DEFAULT_MAX_PENDING_DECISIONS, DEFAULT_MAX_PENDING_STEER_BYTES, DEFAULT_MAX_PENDING_STEERS, DEFAULT_MAX_SESSION_SEARCH_CURSOR_BYTES, DEFAULT_MAX_SESSION_SEARCH_FTS_CANDIDATES, DEFAULT_MAX_SESSION_SEARCH_LINEAR_BYTES, DEFAULT_MAX_SESSION_SEARCH_LINEAR_ENTRIES, DEFAULT_MAX_SESSION_SEARCH_LINEAR_SESSIONS, DEFAULT_MAX_SESSION_SEARCH_QUERY_BYTES, DEFAULT_MAX_SESSION_SEARCH_SNIPPET_BYTES, DEFAULT_MAX_STICKY_DECISIONS, DEFAULT_SESSION_SEARCH_LIMIT, EmbeddingsError, HARD_MAX_ACTION_CONSTRAINT_BYTES, HARD_MAX_ACTION_CONSTRAINTS, HARD_MAX_DECISION_REASON_BYTES, HARD_MAX_ELICITATION_BYTES, HARD_MAX_PENDING_DECISIONS, HARD_MAX_PENDING_STEER_BYTES, HARD_MAX_PENDING_STEERS, HARD_MAX_SESSION_SEARCH_CURSOR_BYTES, HARD_MAX_SESSION_SEARCH_FTS_CANDIDATES, HARD_MAX_SESSION_SEARCH_LIMIT, HARD_MAX_SESSION_SEARCH_LINEAR_BYTES, HARD_MAX_SESSION_SEARCH_LINEAR_ENTRIES, HARD_MAX_SESSION_SEARCH_LINEAR_SESSIONS, HARD_MAX_SESSION_SEARCH_QUERY_BYTES, HARD_MAX_SESSION_SEARCH_SNIPPET_BYTES, HARD_MAX_STICKY_DECISIONS, ImageGenerationError, isBatchJobTerminal, isSessionAppendConflict, isSessionEntryKind, isSessionMetadataConflict, isSessionSearchUnsupported, MAX_ACTION_CONSTRAINT_BYTES, MAX_ACTION_CONSTRAINTS, MAX_ATTRIBUTION_DEPTH, MAX_DECISION_REASON_BYTES, MAX_ELICITATION_BYTES, ModerationError, modelSupportsBatchJobs, modelSupportsEmbeddings, modelSupportsImageGeneration, modelSupportsModeration, modelSupportsSpeech, modelSupportsTranscription, modelSupportsVideoGeneration, pollBatch, resolveSessionSearchQuery, SESSION_APPEND_CONFLICT_CODE, SESSION_ENTRY_KINDS, SESSION_ENTRY_SCHEMA_VERSION, SESSION_METADATA_CONFLICT_CODE, SESSION_SEARCH_UNSUPPORTED_CODE, SESSION_SEARCH_WORKSPACE_METADATA_KEY, SessionAppendConflictError, SessionMetadataConflictError, SessionSearchUnsupportedError, SpeechError, TranscriptionError, VideoGenerationError, } from "./contracts.js";
+export type { ApprovalOutcome, AttentionCompiler, AttentionCompilerContext, AttentionCompilerOptions, AttentionCompilerSetting, AttentionInputCapOptions, AttentionReport, CompactionTrigger, CompactionTriggerContext, DecisionScope, NestedRunApproval, NestedRunOutcome, NestedRunRef, PendingDecision, PendingDecisionKind, ProviderResolver, RealtimeCaps, RealtimeEvent, RealtimeSession, RealtimeSessionFactory, RealtimeSessionOptions, ResolveShouldCompactInput, ResolveShouldCompactOptions, ResumeNestedRun, RunDecision, RunLimitCounters, RunLimitName, SecureAgentOptions, StickyDecision, ToolCallAuthority, ToolEffectClassifier, ToolEffectDeclaration, ToolEffectIdempotency, ToolEffectKey, ToolEffectKind, ToolEffectRecord, ToolEffectStatus, ToolEffectStore, ToolEffectTransition, ToolElicitationRequest, } from "./contracts.js";
+export { AgentDecisionError, AgentDelegationSuspendedError, AgentLoopStateError, AgentRunError, AgentRunStateError, assertBatchJobsSupported, assertCompactionTrigger, assertEmbeddingsSupported, assertImageGenerationSupported, assertModerationSupported, assertSessionMetadataKey, assertSpeechSupported, assertTranscriptionSupported, assertVideoGenerationSupported, BatchJobsError, DEFAULT_MAX_PENDING_DECISIONS, DEFAULT_MAX_PENDING_STEER_BYTES, DEFAULT_MAX_PENDING_STEERS, DEFAULT_MAX_SESSION_SEARCH_CURSOR_BYTES, DEFAULT_MAX_SESSION_SEARCH_FTS_CANDIDATES, DEFAULT_MAX_SESSION_SEARCH_LINEAR_BYTES, DEFAULT_MAX_SESSION_SEARCH_LINEAR_ENTRIES, DEFAULT_MAX_SESSION_SEARCH_LINEAR_SESSIONS, DEFAULT_MAX_SESSION_SEARCH_QUERY_BYTES, DEFAULT_MAX_SESSION_SEARCH_SNIPPET_BYTES, DEFAULT_MAX_STICKY_DECISIONS, DEFAULT_SESSION_SEARCH_LIMIT, DEFAULT_SNAPSHOT_CACHE_TTL_MS, EmbeddingsError, HARD_MAX_ACTION_CONSTRAINT_BYTES, HARD_MAX_ACTION_CONSTRAINTS, HARD_MAX_DECISION_REASON_BYTES, HARD_MAX_ELICITATION_BYTES, HARD_MAX_PENDING_DECISIONS, HARD_MAX_PENDING_STEER_BYTES, HARD_MAX_PENDING_STEERS, HARD_MAX_SESSION_SEARCH_CURSOR_BYTES, HARD_MAX_SESSION_SEARCH_FTS_CANDIDATES, HARD_MAX_SESSION_SEARCH_LIMIT, HARD_MAX_SESSION_SEARCH_LINEAR_BYTES, HARD_MAX_SESSION_SEARCH_LINEAR_ENTRIES, HARD_MAX_SESSION_SEARCH_LINEAR_SESSIONS, HARD_MAX_SESSION_SEARCH_QUERY_BYTES, HARD_MAX_SESSION_SEARCH_SNIPPET_BYTES, HARD_MAX_SNAPSHOT_CACHE_TTL_MS, HARD_MAX_STICKY_DECISIONS, ImageGenerationError, isBatchJobTerminal, isSessionAppendConflict, isSessionEntryKind, isSessionMetadataConflict, isSessionSearchUnsupported, MAX_ACTION_CONSTRAINT_BYTES, MAX_ACTION_CONSTRAINTS, MAX_ATTRIBUTION_DEPTH, MAX_DECISION_REASON_BYTES, MAX_ELICITATION_BYTES, ModerationError, modelSupportsBatchJobs, modelSupportsEmbeddings, modelSupportsImageGeneration, modelSupportsModeration, modelSupportsSpeech, modelSupportsTranscription, modelSupportsVideoGeneration, pollBatch, resolveSessionSearchQuery, resolveShouldCompact, SESSION_APPEND_CONFLICT_CODE, SESSION_ENTRY_KINDS, SESSION_ENTRY_SCHEMA_VERSION, SESSION_METADATA_CONFLICT_CODE, SESSION_SEARCH_UNSUPPORTED_CODE, SESSION_SEARCH_WORKSPACE_METADATA_KEY, SessionAppendConflictError, SessionMetadataConflictError, SessionSearchUnsupportedError, SpeechError, TranscriptionError, VideoGenerationError, } from "./contracts.js";
 export { parseAgentFile, parseSkillFile } from "./contribution-parsing.js";
 export type { ContributionRegistries, ContributionRegistriesOptions, ContributionRegistry, ContributionRegistryOptions, } from "./contributions.js";
 export { createContributionRegistries, createContributionRegistry, registerDiscoveredContributions } from "./contributions.js";
@@ -54,7 +56,7 @@ export { assertGuardrailsAllowed, GuardrailError, MAX_GUARDRAIL_CONCURRENCY, run
 export type { AgentIdentity, AssertIdentityActiveOptions, IdentityLimits, IdentityVerifier, NarrowIdentityOptions, Principal, ResolvedIdentityLimits, } from "./identity.js";
 export { assertIdentityActive, assertIdentityMatchesOwnership, assertIdentityPropagation, DEFAULT_IDENTITY_LIMITS, HARD_IDENTITY_LIMITS, IdentityError, identityTelemetryAttributes, narrowIdentity, ownershipFromIdentity, resolveIdentityLimits, resolveRunIdentity, } from "./identity.js";
 export type { AgentInput, AssembleProviderInputOptions, DefaultInputBuildContext, DefaultInputBuilder, DefaultPromptBuilder, InputAttachment, PromptInstruction, PromptTemplateOptions, ResolveContextOptions, } from "./input.js";
-export { assembleProviderInput, createDefaultInputBuilder, createDefaultPromptBuilder, renderPromptTemplate, resolveContextProviders, } from "./input.js";
+export { assembleProviderInput, createDefaultInputBuilder, createDefaultPromptBuilder, EMPTY_TOOL_RESULT_TEXT, renderPromptTemplate, resolveContextProviders, } from "./input.js";
 export type { ResolveInstructionInjectorsOptions } from "./instruction-injection.js";
 export { resolveInstructionInjectors, runInstructionInjectors } from "./instruction-injection.js";
 export { createMemoryLeaseStore, LEASE_CONFLICT_CODE, LeaseConflictError } from "./leases.js";
@@ -89,7 +91,8 @@ export type { BatchedRunLedgerOptions } from "./run-ledger.js";
 export { createBatchedRunLedger, DEFAULT_LEDGER_BATCH_BYTES, DEFAULT_LEDGER_BATCH_DELAY_MS, DEFAULT_LEDGER_BATCH_ENTRIES, HARD_LEDGER_BATCH_BYTES, HARD_LEDGER_BATCH_DELAY_MS, HARD_LEDGER_BATCH_ENTRIES, isFlushableRunLedger, } from "./run-ledger.js";
 export type { RunLimitTrackerOptions } from "./run-limits.js";
 export { createRunLimitTracker, DEFAULT_RUN_LIMITS, HARD_RUN_LIMITS, RunLimitError, RunLimitTracker, resolveRunLimits, } from "./run-limits.js";
-export { createSecureAgent } from "./secure-agent.js";
+export type { HostCompositionGovernance, HostCompositionOptions, HostCompositionProfile, HostCompositionReport, HostCompositionToolReport, } from "./secure-agent.js";
+export { assertHostCompositionReadiness, createSecureAgent, HostCompositionError, inspectHostComposition, } from "./secure-agent.js";
 export type { PermissionDecision, PermissionPolicy, PermissionRequest, TrustDecision, TrustPolicy, TrustRequest } from "./security.js";
 export { assertPermission, assertTrusted, checkPermission, createStaticPermissionPolicy, createStaticTrustPolicy, denialToErrorInfo, isTrusted, PermissionDeniedError, TrustDeniedError, } from "./security.js";
 export type { CreateMemorySessionStoreOptions, CreateSessionEntryOptions, MemorySessionSearchMode, SessionBranch, SessionBranchOptions, SessionContextSnapshot, } from "./session-stores.js";
@@ -119,5 +122,5 @@ export { trimTrailingSlashes } from "./trim-trailing-slashes.js";
 export type { ResolvedUseCaseModel, ResolveUseCaseModelInput, UseCaseModelBinding, } from "./use-case-model.js";
 export { resolveUseCaseModel, resolveUseCaseModelBinding, useCaseCredentialProviderId, } from "./use-case-model.js";
 export declare const name = "prism";
-export declare const version = "0.5.6";
+export declare const version = "0.7.0";
 export declare const description = "Agent harness for AI providers, agents, sessions, and tools.";

package/dist/index.js

@@ -4,7 +4,8 @@ export { dispatchToolCallsInOrder, generateValidateReviseLoop, isAgentLoopOption
 export { createAgentRunLifecycle } from "./agent-run-lifecycle.js";
 export { AGENT_RUN_STATE_NAMESPACE, AGENT_RUN_STATE_SCHEMA_VERSION, agentFingerprint, DEFAULT_MAX_AGENT_RUN_STATE_BYTES, HARD_MAX_AGENT_RUN_STATE_BYTES, loadAgentRunState, } from "./agent-run-state.js";
 export { createAgent, createAgentSession, resumeAgentRun, resumeAgentRunStream } from "./agents.js";
-export { ARTIFACT_BODY_ERROR_CODES, ARTIFACT_CHECKPOINT_NAMESPACE, ArtifactBodyStoreError, ArtifactError, artifactApprovalState, artifactCheckpointKey, } from "./artifacts.js";
+export { ARTIFACT_BODY_ERROR_CODES, ARTIFACT_CHECKPOINT_NAMESPACE, ArtifactBodyStoreError, ArtifactError, approvalEvidenceIntact, artifactApprovalState, artifactCheckpointKey, checkCitationIntegrity, citationBindingDigest, HARD_CITATION_EXCERPT_BYTES, } from "./artifacts.js";
+export { ATTENTION_BUDGET_ERROR_CODE, AttentionBudgetError, createAttentionCompiler, createAttentionTruncationTrigger, DEFAULT_ATTENTION_COMPACT_RATIO, DEFAULT_ATTENTION_KEEP_LAST, DEFAULT_ATTENTION_RESERVE_TOKENS, DEFAULT_ATTENTION_THINKING_KEEP_TURNS, DEFAULT_ATTENTION_TRIGGER_RATIO, DEFAULT_ATTENTION_TRUNCATION_THRESHOLD, isAttentionBudgetError, resolveAttentionReserveTokens, resolveInputCap, resolveRunAttentionCompiler, } from "./attention-compiler.js";
 export { applyCacheControl, cacheHitRate, cacheSavings, cacheUsageReport, mapCacheRetention, resolveBreakpoint, sanitizeCacheKey, systemCacheControlField, } from "./cache-helpers.js";
 export { CACHE_TELEMETRY_OVERFLOW_KEY, CacheTelemetryError, createCacheTelemetry, DEFAULT_CACHE_TELEMETRY_CAP, } from "./cache-telemetry.js";
 export { createProviderCapture } from "./capture.js";
@@ -13,7 +14,7 @@ export { createDefaultCompactionStrategy, isCompactionEntryData } from "./compac
 export { assertJsonObject, isJsonObject, loadConfigLayers, mergeConfigLayers } from "./config.js";
 export { assertDeclaredMediaTypeMatches, assertMediaBlocksWithinBounds, assertMessagesSupportModelCapabilities, assertModelSupportsContentBlocks, assertSsrfAllowedUrl, collectMessageContentBlocks, contentBlockInputModality, DEFAULT_MAX_AUDIO_DURATION_MS, DEFAULT_MAX_MEDIA_ITEM_BYTES, DEFAULT_MAX_MEDIA_ITEMS_PER_REQUEST, DEFAULT_MAX_MEDIA_REQUEST_BYTES, DEFAULT_MEDIA_FETCH_TIMEOUT_MS, loadBoundedBinaryResource, MediaContentError, MODEL_INPUT_CAPABILITIES, resolveMediaContentBlock, resolveMediaContentBlocks, sniffMediaMimeType, UnsupportedModalityError, } from "./content.js";
 export { applyContextBudget, CONTEXT_BUDGET_ERROR_CODE, CONTEXT_BUDGET_REPORT_METADATA_KEY, ContextBudgetError, DEFAULT_MAX_CONTEXT_BUDGET_OMISSIONS, estimateAssemblyTokens, estimateMessageBytes, estimateMessageTokens, estimateTextBytes, estimateTextTokens, getContextBudgetReport, HARD_MAX_CONTEXT_BUDGET_BYTES, HARD_MAX_CONTEXT_BUDGET_OMISSIONS, HARD_MAX_CONTEXT_BUDGET_TOKENS, isContextBudgetError, resolveContextBudget, } from "./context-budget.js";
-export { AgentDecisionError, AgentDelegationSuspendedError, AgentLoopStateError, AgentRunError, AgentRunStateError, assertBatchJobsSupported, assertEmbeddingsSupported, assertImageGenerationSupported, assertModerationSupported, assertSessionMetadataKey, assertSpeechSupported, assertTranscriptionSupported, assertVideoGenerationSupported, BatchJobsError, DEFAULT_MAX_PENDING_DECISIONS, DEFAULT_MAX_PENDING_STEER_BYTES, DEFAULT_MAX_PENDING_STEERS, DEFAULT_MAX_SESSION_SEARCH_CURSOR_BYTES, DEFAULT_MAX_SESSION_SEARCH_FTS_CANDIDATES, DEFAULT_MAX_SESSION_SEARCH_LINEAR_BYTES, DEFAULT_MAX_SESSION_SEARCH_LINEAR_ENTRIES, DEFAULT_MAX_SESSION_SEARCH_LINEAR_SESSIONS, DEFAULT_MAX_SESSION_SEARCH_QUERY_BYTES, DEFAULT_MAX_SESSION_SEARCH_SNIPPET_BYTES, DEFAULT_MAX_STICKY_DECISIONS, DEFAULT_SESSION_SEARCH_LIMIT, EmbeddingsError, HARD_MAX_ACTION_CONSTRAINT_BYTES, HARD_MAX_ACTION_CONSTRAINTS, HARD_MAX_DECISION_REASON_BYTES, HARD_MAX_ELICITATION_BYTES, HARD_MAX_PENDING_DECISIONS, HARD_MAX_PENDING_STEER_BYTES, HARD_MAX_PENDING_STEERS, HARD_MAX_SESSION_SEARCH_CURSOR_BYTES, HARD_MAX_SESSION_SEARCH_FTS_CANDIDATES, HARD_MAX_SESSION_SEARCH_LIMIT, HARD_MAX_SESSION_SEARCH_LINEAR_BYTES, HARD_MAX_SESSION_SEARCH_LINEAR_ENTRIES, HARD_MAX_SESSION_SEARCH_LINEAR_SESSIONS, HARD_MAX_SESSION_SEARCH_QUERY_BYTES, HARD_MAX_SESSION_SEARCH_SNIPPET_BYTES, HARD_MAX_STICKY_DECISIONS, ImageGenerationError, isBatchJobTerminal, isSessionAppendConflict, isSessionEntryKind, isSessionMetadataConflict, isSessionSearchUnsupported, MAX_ACTION_CONSTRAINT_BYTES, MAX_ACTION_CONSTRAINTS, MAX_ATTRIBUTION_DEPTH, MAX_DECISION_REASON_BYTES, MAX_ELICITATION_BYTES, ModerationError, modelSupportsBatchJobs, modelSupportsEmbeddings, modelSupportsImageGeneration, modelSupportsModeration, modelSupportsSpeech, modelSupportsTranscription, modelSupportsVideoGeneration, pollBatch, resolveSessionSearchQuery, SESSION_APPEND_CONFLICT_CODE, SESSION_ENTRY_KINDS, SESSION_ENTRY_SCHEMA_VERSION, SESSION_METADATA_CONFLICT_CODE, SESSION_SEARCH_UNSUPPORTED_CODE, SESSION_SEARCH_WORKSPACE_METADATA_KEY, SessionAppendConflictError, SessionMetadataConflictError, SessionSearchUnsupportedError, SpeechError, TranscriptionError, VideoGenerationError, } from "./contracts.js";
+export { AgentDecisionError, AgentDelegationSuspendedError, AgentLoopStateError, AgentRunError, AgentRunStateError, assertBatchJobsSupported, assertCompactionTrigger, assertEmbeddingsSupported, assertImageGenerationSupported, assertModerationSupported, assertSessionMetadataKey, assertSpeechSupported, assertTranscriptionSupported, assertVideoGenerationSupported, BatchJobsError, DEFAULT_MAX_PENDING_DECISIONS, DEFAULT_MAX_PENDING_STEER_BYTES, DEFAULT_MAX_PENDING_STEERS, DEFAULT_MAX_SESSION_SEARCH_CURSOR_BYTES, DEFAULT_MAX_SESSION_SEARCH_FTS_CANDIDATES, DEFAULT_MAX_SESSION_SEARCH_LINEAR_BYTES, DEFAULT_MAX_SESSION_SEARCH_LINEAR_ENTRIES, DEFAULT_MAX_SESSION_SEARCH_LINEAR_SESSIONS, DEFAULT_MAX_SESSION_SEARCH_QUERY_BYTES, DEFAULT_MAX_SESSION_SEARCH_SNIPPET_BYTES, DEFAULT_MAX_STICKY_DECISIONS, DEFAULT_SESSION_SEARCH_LIMIT, DEFAULT_SNAPSHOT_CACHE_TTL_MS, EmbeddingsError, HARD_MAX_ACTION_CONSTRAINT_BYTES, HARD_MAX_ACTION_CONSTRAINTS, HARD_MAX_DECISION_REASON_BYTES, HARD_MAX_ELICITATION_BYTES, HARD_MAX_PENDING_DECISIONS, HARD_MAX_PENDING_STEER_BYTES, HARD_MAX_PENDING_STEERS, HARD_MAX_SESSION_SEARCH_CURSOR_BYTES, HARD_MAX_SESSION_SEARCH_FTS_CANDIDATES, HARD_MAX_SESSION_SEARCH_LIMIT, HARD_MAX_SESSION_SEARCH_LINEAR_BYTES, HARD_MAX_SESSION_SEARCH_LINEAR_ENTRIES, HARD_MAX_SESSION_SEARCH_LINEAR_SESSIONS, HARD_MAX_SESSION_SEARCH_QUERY_BYTES, HARD_MAX_SESSION_SEARCH_SNIPPET_BYTES, HARD_MAX_SNAPSHOT_CACHE_TTL_MS, HARD_MAX_STICKY_DECISIONS, ImageGenerationError, isBatchJobTerminal, isSessionAppendConflict, isSessionEntryKind, isSessionMetadataConflict, isSessionSearchUnsupported, MAX_ACTION_CONSTRAINT_BYTES, MAX_ACTION_CONSTRAINTS, MAX_ATTRIBUTION_DEPTH, MAX_DECISION_REASON_BYTES, MAX_ELICITATION_BYTES, ModerationError, modelSupportsBatchJobs, modelSupportsEmbeddings, modelSupportsImageGeneration, modelSupportsModeration, modelSupportsSpeech, modelSupportsTranscription, modelSupportsVideoGeneration, pollBatch, resolveSessionSearchQuery, resolveShouldCompact, SESSION_APPEND_CONFLICT_CODE, SESSION_ENTRY_KINDS, SESSION_ENTRY_SCHEMA_VERSION, SESSION_METADATA_CONFLICT_CODE, SESSION_SEARCH_UNSUPPORTED_CODE, SESSION_SEARCH_WORKSPACE_METADATA_KEY, SessionAppendConflictError, SessionMetadataConflictError, SessionSearchUnsupportedError, SpeechError, TranscriptionError, VideoGenerationError, } from "./contracts.js";
 export { parseAgentFile, parseSkillFile } from "./contribution-parsing.js";
 export { createContributionRegistries, createContributionRegistry, registerDiscoveredContributions } from "./contributions.js";
 export { CONVERSATION_METADATA_KEY, ConversationError, conversationMarkerMetadata, conversationThreadFromRecord, DEFAULT_MAX_CONVERSATION_CURSOR_BYTES, decodeConversationReplayCursor, encodeConversationReplayCursor, HARD_MAX_CONVERSATION_CURSOR_BYTES, } from "./conversations.js";
@@ -27,7 +28,7 @@ export { createMemoryRunFeedbackStore, prepareRunFeedback, RunFeedbackError, req
 export { ALLOW_FIELD_POLICY, applyFieldPolicy, createAuditFieldRedactor, createProtectedFieldPolicy, FIELD_POLICY_LIMITS, FieldPolicyError, } from "./field-policy.js";
 export { assertGuardrailsAllowed, GuardrailError, MAX_GUARDRAIL_CONCURRENCY, runGuardrails } from "./guardrails.js";
 export { assertIdentityActive, assertIdentityMatchesOwnership, assertIdentityPropagation, DEFAULT_IDENTITY_LIMITS, HARD_IDENTITY_LIMITS, IdentityError, identityTelemetryAttributes, narrowIdentity, ownershipFromIdentity, resolveIdentityLimits, resolveRunIdentity, } from "./identity.js";
-export { assembleProviderInput, createDefaultInputBuilder, createDefaultPromptBuilder, renderPromptTemplate, resolveContextProviders, } from "./input.js";
+export { assembleProviderInput, createDefaultInputBuilder, createDefaultPromptBuilder, EMPTY_TOOL_RESULT_TEXT, renderPromptTemplate, resolveContextProviders, } from "./input.js";
 export { resolveInstructionInjectors, runInstructionInjectors } from "./instruction-injection.js";
 export { createMemoryLeaseStore, LEASE_CONFLICT_CODE, LeaseConflictError } from "./leases.js";
 export { definePrismManifest, parsePrismManifest } from "./manifests.js";
@@ -48,7 +49,7 @@ export { loadBinaryResource, loadJsonResource, loadManifestResource, loadTextRes
 export { createDefaultRetryPolicy, isTransientErrorInfo, waitForRetry } from "./retry.js";
 export { createBatchedRunLedger, DEFAULT_LEDGER_BATCH_BYTES, DEFAULT_LEDGER_BATCH_DELAY_MS, DEFAULT_LEDGER_BATCH_ENTRIES, HARD_LEDGER_BATCH_BYTES, HARD_LEDGER_BATCH_DELAY_MS, HARD_LEDGER_BATCH_ENTRIES, isFlushableRunLedger, } from "./run-ledger.js";
 export { createRunLimitTracker, DEFAULT_RUN_LIMITS, HARD_RUN_LIMITS, RunLimitError, RunLimitTracker, resolveRunLimits, } from "./run-limits.js";
-export { createSecureAgent } from "./secure-agent.js";
+export { assertHostCompositionReadiness, createSecureAgent, HostCompositionError, inspectHostComposition, } from "./secure-agent.js";
 export { assertPermission, assertTrusted, checkPermission, createStaticPermissionPolicy, createStaticTrustPolicy, denialToErrorInfo, isTrusted, PermissionDeniedError, TrustDeniedError, } from "./security.js";
 export { createMemorySessionStore, createSessionEntry, getSessionBranchEntries, listSessionBranches, rebuildSessionContext, } from "./session-stores.js";
 export { createChainedSettingsProvider, createStaticSettingsProvider } from "./settings.js";
@@ -66,6 +67,6 @@ export { createToolParameterValidator, createToolRegistry, dispatchToolCall, fil
 export { trimTrailingSlashes } from "./trim-trailing-slashes.js";
 export { resolveUseCaseModel, resolveUseCaseModelBinding, useCaseCredentialProviderId, } from "./use-case-model.js";
 export const name = "prism";
-export const version = "0.5.6";
+export const version = "0.7.0";
 export const description = "Agent harness for AI providers, agents, sessions, and tools.";
 //# sourceMappingURL=index.js.map

package/dist/input.d.ts

@@ -1,11 +1,18 @@
+import { type AttentionStickyFrontier } from "./attention-compiler.js";
 import { type ContextBudget } from "./context-budget.js";
-import type { ContentBlock, ContextBlock, ContextProvider, ContextResolutionContext, InputBuildContext, InputBuilder, InstructionInjector, JsonObject, Message, ModelConfig, PromptBuilder, PromptBuildRequest, ProviderRequest, ProviderRequestOptions, ResourceLoader, Skill, ToolDefinition, ToolResult } from "./contracts.js";
+import type { AttentionCompiler, AttentionCompilerOptions, AttentionReport, ContentBlock, ContextBlock, ContextProvider, ContextResolutionContext, InputBuildContext, InputBuilder, InstructionInjector, JsonObject, Message, ModelConfig, PromptBuilder, PromptBuildRequest, ProviderRequest, ProviderRequestOptions, ResourceLoader, Skill, ToolDefinition, ToolResult } from "./contracts.js";
 import type { MiddlewareRegistry } from "./middleware.js";
 import type { SecretRedactor } from "./redaction.js";
 import { type LoadedSkillSet, type SkillsDisclosure } from "./skill-disclosure.js";
 import { type ResolvedToolResultFoldOptions } from "./tool-result-fold.js";
 import { type ToolsDisclosure, type ToolsSearchOptions } from "./tool-search.js";
 export type AgentInput = string | Message | readonly Message[];
+/**
+ * Wire payload for a tool result that carries no `value`, no `type:text` content, and no error.
+ * Every provider route serializes a tool result from this block, so the empty case must be a
+ * constant non-empty string instead of an absent payload (strict providers reject empty results).
+ */
+export declare const EMPTY_TOOL_RESULT_TEXT = "(tool completed with no output)";
 export interface PromptInstruction {
     readonly text: string;
     readonly label?: string;
@@ -71,6 +78,17 @@ export interface AssembleProviderInputOptions extends DefaultInputBuildContext {
     readonly contextBudget?: ContextBudget;
     /** Resolved tool-result fold; projection-only, store untouched. */
     readonly toolResultFold?: ResolvedToolResultFoldOptions;
+    /**
+     * Opt-in attention compiler: options are validated here (per call) or pass an existing
+     * `AttentionCompiler` to reuse one validation. Mutually exclusive with `contextBudget`,
+     * which would otherwise evict as a silent last resort after the compiler's stages.
+     */
+    readonly attentionCompiler?: AttentionCompilerOptions | AttentionCompiler;
+    /** Per-session-leaf sticky frontier; omit for one-shot assemblies (no cross-turn stickiness). */
+    readonly attentionSticky?: AttentionStickyFrontier;
+    /** Called once per *mutated* turn with the report, so a host can emit telemetry: under-ratio
+     *  turns never call it, and it runs before `input_assembly` middleware. */
+    readonly onAttentionReport?: (report: AttentionReport) => void;
 }
 export declare function createDefaultInputBuilder(): DefaultInputBuilder;
 export declare function resolveContextProviders(options: ResolveContextOptions): Promise<readonly ContextBlock[]>;