@arnilo/prism 0.7.0 → 0.9.0

package/dist/index.d.ts

@@ -1,16 +1,18 @@
 export { resolveAgentDefinition } from "./agent-definitions.js";
 export type { AgentEventSourceErrorCode } from "./agent-event-source.js";
-export { AgentEventSourceError, createMemoryAgentEventSource } from "./agent-event-source.js";
+export { AgentEventSourceError, createMemoryAgentEventSource, isTerminalAgentEventType } from "./agent-event-source.js";
 export { dispatchToolCallsInOrder, generateValidateReviseLoop, isAgentLoopOptions, resolveLoop, resolveToolConcurrency, singleShotLoop, } from "./agent-loops.js";
 export type { AgentRunLifecycle, AgentRunLifecycleAgent, AgentRunLifecycleOptions, AgentRunLifecycleRequest, AgentRunLifecycleStreamRequest, } from "./agent-run-lifecycle.js";
 export { createAgentRunLifecycle } from "./agent-run-lifecycle.js";
+export type { CheckpointRestoreAudit, CheckpointRestoreAuditEntry, CheckpointRestoreHook, RunCheckpointRestoreHooksOptions, } from "./checkpoint-restore.js";
+export { CheckpointRestoreError, DEFAULT_CHECKPOINT_RESTORE_TIMEOUT_MS, runCheckpointRestoreHooks } from "./checkpoint-restore.js";
 export type { PendingToolCall, StoredAgentRunState } from "./agent-run-state.js";
-export { AGENT_RUN_STATE_NAMESPACE, AGENT_RUN_STATE_SCHEMA_VERSION, agentFingerprint, DEFAULT_MAX_AGENT_RUN_STATE_BYTES, HARD_MAX_AGENT_RUN_STATE_BYTES, loadAgentRunState, } from "./agent-run-state.js";
+export { AGENT_RUN_STATE_NAMESPACE, AGENT_RUN_STATE_SCHEMA_VERSION, agentFingerprint, boundCheckpointMetadata, DEFAULT_MAX_AGENT_RUN_STATE_BYTES, HARD_MAX_AGENT_RUN_STATE_BYTES, loadAgentRunState, MAX_AGENT_RUN_METADATA_BYTES, readCheckpointMetadata, resolveCheckpointMetadata, } from "./agent-run-state.js";
 export { createAgent, createAgentSession, resumeAgentRun, resumeAgentRunStream } from "./agents.js";
 export type { ArtifactApproval, ArtifactApprovalState, ArtifactBodyErrorCode, ArtifactBodyPresignOptions, ArtifactBodyRef, ArtifactBodyStore, ArtifactBodyTransferOptions, ArtifactCitation, ArtifactDecisionState, ArtifactDeliveryToken, ArtifactRecord, ArtifactRevision, CitationIntegrityReason, CitationIntegrityResult, CitationLiveSource, CitationSupport, } from "./artifacts.js";
 export { ARTIFACT_BODY_ERROR_CODES, ARTIFACT_CHECKPOINT_NAMESPACE, ArtifactBodyStoreError, ArtifactError, approvalEvidenceIntact, artifactApprovalState, artifactCheckpointKey, checkCitationIntegrity, citationBindingDigest, HARD_CITATION_EXCERPT_BYTES, } from "./artifacts.js";
-export { ATTENTION_BUDGET_ERROR_CODE, AttentionBudgetError, createAttentionCompiler, createAttentionTruncationTrigger, DEFAULT_ATTENTION_COMPACT_RATIO, DEFAULT_ATTENTION_KEEP_LAST, DEFAULT_ATTENTION_RESERVE_TOKENS, DEFAULT_ATTENTION_THINKING_KEEP_TURNS, DEFAULT_ATTENTION_TRIGGER_RATIO, DEFAULT_ATTENTION_TRUNCATION_THRESHOLD, isAttentionBudgetError, resolveAttentionReserveTokens, resolveInputCap, resolveRunAttentionCompiler, } from "./attention-compiler.js";
 export type { AttentionTruncationTrigger, AttentionTruncationTriggerOptions, PersistedAttentionStickyFrontier, } from "./attention-compiler.js";
+export { ATTENTION_BUDGET_ERROR_CODE, AttentionBudgetError, createAttentionCompiler, createAttentionTruncationTrigger, DEFAULT_ATTENTION_COMPACT_RATIO, DEFAULT_ATTENTION_KEEP_LAST, DEFAULT_ATTENTION_RESERVE_TOKENS, DEFAULT_ATTENTION_THINKING_KEEP_TURNS, DEFAULT_ATTENTION_TRIGGER_RATIO, DEFAULT_ATTENTION_TRUNCATION_THRESHOLD, isAttentionBudgetError, resolveAttentionReserveTokens, resolveInputCap, resolveRunAttentionCompiler, } from "./attention-compiler.js";
 export type { ApplyCacheControlOptions, CacheControlledContentBlock, CacheControlledMessage, CacheControlValue, CacheUsageReport, } from "./cache-helpers.js";
 export { applyCacheControl, cacheHitRate, cacheSavings, cacheUsageReport, mapCacheRetention, resolveBreakpoint, sanitizeCacheKey, systemCacheControlField, } from "./cache-helpers.js";
 export type { CacheTelemetry, CacheTelemetryOptions, CacheTelemetryReport, CacheTelemetrySample, } from "./cache-telemetry.js";
@@ -28,7 +30,7 @@ export { assertDeclaredMediaTypeMatches, assertMediaBlocksWithinBounds, assertMe
 export type { ContextBudget, ContextBudgetMessageGroups, ContextBudgetOmission, ContextBudgetOmissionKind, ContextBudgetReport, TokenEstimator, } from "./context-budget.js";
 export { applyContextBudget, CONTEXT_BUDGET_ERROR_CODE, CONTEXT_BUDGET_REPORT_METADATA_KEY, ContextBudgetError, DEFAULT_MAX_CONTEXT_BUDGET_OMISSIONS, estimateAssemblyTokens, estimateMessageBytes, estimateMessageTokens, estimateTextBytes, estimateTextTokens, getContextBudgetReport, HARD_MAX_CONTEXT_BUDGET_BYTES, HARD_MAX_CONTEXT_BUDGET_OMISSIONS, HARD_MAX_CONTEXT_BUDGET_TOKENS, isContextBudgetError, resolveContextBudget, } from "./context-budget.js";
 export type * from "./contracts.js";
-export type { ApprovalOutcome, AttentionCompiler, AttentionCompilerContext, AttentionCompilerOptions, AttentionCompilerSetting, AttentionInputCapOptions, AttentionReport, CompactionTrigger, CompactionTriggerContext, DecisionScope, NestedRunApproval, NestedRunOutcome, NestedRunRef, PendingDecision, PendingDecisionKind, ProviderResolver, RealtimeCaps, RealtimeEvent, RealtimeSession, RealtimeSessionFactory, RealtimeSessionOptions, ResolveShouldCompactInput, ResolveShouldCompactOptions, ResumeNestedRun, RunDecision, RunLimitCounters, RunLimitName, SecureAgentOptions, StickyDecision, ToolCallAuthority, ToolEffectClassifier, ToolEffectDeclaration, ToolEffectIdempotency, ToolEffectKey, ToolEffectKind, ToolEffectRecord, ToolEffectStatus, ToolEffectStore, ToolEffectTransition, ToolElicitationRequest, } from "./contracts.js";
+export type { ApprovalOutcome, AttentionCompiler, AttentionCompilerContext, AttentionCompilerOptions, AttentionCompilerSetting, AttentionInputCapOptions, AttentionReport, CompactionTrigger, CompactionTriggerContext, ContextMeter, DecisionScope, ModelFamily, NestedRunApproval, NestedRunOutcome, NestedRunRef, PendingDecision, PendingDecisionKind, ProviderResolver, RealtimeCaps, RealtimeEvent, RealtimeSession, RealtimeSessionFactory, RealtimeSessionOptions, ResolveShouldCompactInput, ResolveShouldCompactOptions, ResumeNestedRun, RunDecision, RunLimitCounters, RunLimitName, SecureAgentOptions, StickyDecision, TokenEstimate, TokenEstimateConfidence, ToolCallAuthority, ToolEffectClassifier, ToolEffectDeclaration, ToolEffectIdempotency, ToolEffectKey, ToolEffectKind, ToolEffectRecord, ToolEffectStatus, ToolEffectStore, ToolEffectTransition, ToolElicitationRequest, } from "./contracts.js";
 export { AgentDecisionError, AgentDelegationSuspendedError, AgentLoopStateError, AgentRunError, AgentRunStateError, assertBatchJobsSupported, assertCompactionTrigger, assertEmbeddingsSupported, assertImageGenerationSupported, assertModerationSupported, assertSessionMetadataKey, assertSpeechSupported, assertTranscriptionSupported, assertVideoGenerationSupported, BatchJobsError, DEFAULT_MAX_PENDING_DECISIONS, DEFAULT_MAX_PENDING_STEER_BYTES, DEFAULT_MAX_PENDING_STEERS, DEFAULT_MAX_SESSION_SEARCH_CURSOR_BYTES, DEFAULT_MAX_SESSION_SEARCH_FTS_CANDIDATES, DEFAULT_MAX_SESSION_SEARCH_LINEAR_BYTES, DEFAULT_MAX_SESSION_SEARCH_LINEAR_ENTRIES, DEFAULT_MAX_SESSION_SEARCH_LINEAR_SESSIONS, DEFAULT_MAX_SESSION_SEARCH_QUERY_BYTES, DEFAULT_MAX_SESSION_SEARCH_SNIPPET_BYTES, DEFAULT_MAX_STICKY_DECISIONS, DEFAULT_SESSION_SEARCH_LIMIT, DEFAULT_SNAPSHOT_CACHE_TTL_MS, EmbeddingsError, HARD_MAX_ACTION_CONSTRAINT_BYTES, HARD_MAX_ACTION_CONSTRAINTS, HARD_MAX_DECISION_REASON_BYTES, HARD_MAX_ELICITATION_BYTES, HARD_MAX_PENDING_DECISIONS, HARD_MAX_PENDING_STEER_BYTES, HARD_MAX_PENDING_STEERS, HARD_MAX_SESSION_SEARCH_CURSOR_BYTES, HARD_MAX_SESSION_SEARCH_FTS_CANDIDATES, HARD_MAX_SESSION_SEARCH_LIMIT, HARD_MAX_SESSION_SEARCH_LINEAR_BYTES, HARD_MAX_SESSION_SEARCH_LINEAR_ENTRIES, HARD_MAX_SESSION_SEARCH_LINEAR_SESSIONS, HARD_MAX_SESSION_SEARCH_QUERY_BYTES, HARD_MAX_SESSION_SEARCH_SNIPPET_BYTES, HARD_MAX_SNAPSHOT_CACHE_TTL_MS, HARD_MAX_STICKY_DECISIONS, ImageGenerationError, isBatchJobTerminal, isSessionAppendConflict, isSessionEntryKind, isSessionMetadataConflict, isSessionSearchUnsupported, MAX_ACTION_CONSTRAINT_BYTES, MAX_ACTION_CONSTRAINTS, MAX_ATTRIBUTION_DEPTH, MAX_DECISION_REASON_BYTES, MAX_ELICITATION_BYTES, ModerationError, modelSupportsBatchJobs, modelSupportsEmbeddings, modelSupportsImageGeneration, modelSupportsModeration, modelSupportsSpeech, modelSupportsTranscription, modelSupportsVideoGeneration, pollBatch, resolveSessionSearchQuery, resolveShouldCompact, SESSION_APPEND_CONFLICT_CODE, SESSION_ENTRY_KINDS, SESSION_ENTRY_SCHEMA_VERSION, SESSION_METADATA_CONFLICT_CODE, SESSION_SEARCH_UNSUPPORTED_CODE, SESSION_SEARCH_WORKSPACE_METADATA_KEY, SessionAppendConflictError, SessionMetadataConflictError, SessionSearchUnsupportedError, SpeechError, TranscriptionError, VideoGenerationError, } from "./contracts.js";
 export { parseAgentFile, parseSkillFile } from "./contribution-parsing.js";
 export type { ContributionRegistries, ContributionRegistriesOptions, ContributionRegistry, ContributionRegistryOptions, } from "./contributions.js";
@@ -43,6 +45,8 @@ export type { DeviceAdapter, DeviceAdmitRequest, DeviceChunkResult, DeviceConfor
 export { acceptDeviceChunk, assertDeviceAdmit, DEFAULT_DEVICE_MAX_CHUNK_BYTES, DEFAULT_DEVICE_MAX_CONCURRENT_SESSIONS, DevicePolicyError, HARD_DEVICE_MAX_CHUNK_BYTES, HARD_DEVICE_MAX_CONCURRENT_SESSIONS, redactDeviceTelemetry, resolveDevicePolicy, runDevicePolicyConformance, } from "./devices.js";
 export type { EventMultiplexer, EventMultiplexerOptions, EventOverflowInfo, EventOverflowPolicy } from "./event-multiplexer.js";
 export { createEventMultiplexer, EVENT_MULTIPLEXER_SINGLE_CONSUMER_CODE, EventMultiplexerError } from "./event-multiplexer.js";
+export type { ClaimGroundingEvidence, ClaimGroundingEvidenceExtractor, ClaimGroundingEvidenceExtractorContext, ClaimGroundingGuardrailOptions, } from "./evidence-grounding.js";
+export { createClaimGroundingGuardrail } from "./evidence-grounding.js";
 export type { ExecutionAction, ExecutionDecision, ExecutionPolicy, ExecutionRisk } from "./execution-policy.js";
 export { applyExecutionDecision, assertExecutionAllowed, checkExecution, ExecutionDeniedError } from "./execution-policy.js";
 export type { ActivatedKernelConfig, ExtensionErrorPolicy, ExtensionEventBus, ExtensionEventHandler, ExtensionKernel, ExtensionKernelOptions, ExtensionLoadPolicy, LoadedExtension, } from "./extensions.js";
@@ -51,8 +55,9 @@ export type { MemoryRunFeedbackStoreOptions, PrepareRunFeedbackOptions, RunFeedb
 export { createMemoryRunFeedbackStore, prepareRunFeedback, RunFeedbackError, requireRunFeedbackOwnership, runFeedbackPageLimit, } from "./feedback.js";
 export type { ApplyFieldPolicyOptions, AuditFieldRedaction, AuditFieldRedactorLike, AuditFieldRedactorOptions, FieldPolicy, FieldPolicyAction, FieldPolicyDecision, FieldPolicyInput, ProtectedFieldPolicyOptions, } from "./field-policy.js";
 export { ALLOW_FIELD_POLICY, applyFieldPolicy, createAuditFieldRedactor, createProtectedFieldPolicy, FIELD_POLICY_LIMITS, FieldPolicyError, } from "./field-policy.js";
-export type { GuardrailRunResult, RunGuardrailsOptions, } from "./guardrails.js";
-export { assertGuardrailsAllowed, GuardrailError, MAX_GUARDRAIL_CONCURRENCY, runGuardrails } from "./guardrails.js";
+export type { GuardrailPackRow, GuardrailRunResult, RunGuardrailsOptions, } from "./guardrails.js";
+export { assertGuardrailsAllowed, compileGuardrailPacks, describeGuardrailPacks, GuardrailError, GuardrailPackError, MAX_GUARDRAIL_CONCURRENCY, MAX_GUARDRAIL_PACK_RULES, MAX_GUARDRAIL_PACKS, runGuardrails, } from "./guardrails.js";
+export { BUILT_IN_GUARDRAIL_PACK_IDS } from "./guardrail-packs/index.js";
 export type { AgentIdentity, AssertIdentityActiveOptions, IdentityLimits, IdentityVerifier, NarrowIdentityOptions, Principal, ResolvedIdentityLimits, } from "./identity.js";
 export { assertIdentityActive, assertIdentityMatchesOwnership, assertIdentityPropagation, DEFAULT_IDENTITY_LIMITS, HARD_IDENTITY_LIMITS, IdentityError, identityTelemetryAttributes, narrowIdentity, ownershipFromIdentity, resolveIdentityLimits, resolveRunIdentity, } from "./identity.js";
 export type { AgentInput, AssembleProviderInputOptions, DefaultInputBuildContext, DefaultInputBuilder, DefaultPromptBuilder, InputAttachment, PromptInstruction, PromptTemplateOptions, ResolveContextOptions, } from "./input.js";
@@ -62,8 +67,8 @@ export { resolveInstructionInjectors, runInstructionInjectors } from "./instruct
 export { createMemoryLeaseStore, LEASE_CONFLICT_CODE, LeaseConflictError } from "./leases.js";
 export type { ManifestContributionDeclaration, ManifestContributionKind, ManifestResourceDeclaration, PrismManifest } from "./manifests.js";
 export { definePrismManifest, parsePrismManifest } from "./manifests.js";
-export type { Middleware, MiddlewareHookName, MiddlewareNext, MiddlewareRegistry, MiddlewareRegistryOptions } from "./middleware.js";
-export { createMiddlewareRegistry } from "./middleware.js";
+export type { BeforeProviderTurnPayload, DeterministicTurnAnswer, DeterministicTurnProvenance, Middleware, MiddlewareHookName, MiddlewareNext, MiddlewareRegistry, MiddlewareRegistryOptions, } from "./middleware.js";
+export { createMiddlewareRegistry, DeterministicTurnError } from "./middleware.js";
 export type { MockProviderOptions } from "./mock-provider.js";
 export { createMockProvider } from "./mock-provider.js";
 export type { ModelRegistry, ModelRegistryOptions } from "./models.js";
@@ -73,7 +78,7 @@ export { createProviderTurnMetadata, readProviderHttpStatus } from "./observabil
 export type { ApplyRetentionInput, ApplyRetentionResult, ConsumeTenantQuotaInput, ExportUnderHoldInput, LegalHoldExportItem, LegalHoldQuery, LegalHoldRecord, PersistenceLifecycleStore, PersistenceResourceKind, PutLegalHoldInput, ReleaseLegalHoldInput, SetTenantQuotaInput, TenantQuota, } from "./persistence-lifecycle.js";
 export { createMemoryPersistenceLifecycle, DEFAULT_LIFECYCLE_PAGE_SIZE, DEFAULT_MAX_HOLD_REASON_BYTES, HARD_LIFECYCLE_PAGE_SIZE, HARD_MAX_HOLD_REASON_BYTES, isResourceHeld, PersistenceLifecycleError, } from "./persistence-lifecycle.js";
 export { boundResponse, defaultResolver, isLoopbackAddress, isLoopbackHostname, normalizeHostname, type PinnedFetchOptions, pinnedFetch, raceAbort, requestPinned, resolvePinnedAddress, } from "./pinned-fetch.js";
-export { providerContentDelta, providerContinuationRequired, providerDone, providerError, providerTextDelta, providerThinkingDelta, providerToolCall, providerToolCallDelta, providerUsage, toolCallContent, toolCallFromArgumentsText, } from "./provider-events.js";
+export { mapProviderStopReason, providerContentDelta, providerContinuationRequired, providerDone, providerError, providerTextDelta, providerThinkingDelta, providerToolCall, providerToolCallDelta, providerUsage, toolCallContent, toolCallFromArgumentsText, } from "./provider-events.js";
 export { authMethodKey, defineProviderPackage, systemPromptContributionKey } from "./provider-packages.js";
 export type { ApplyDefaultProviderRequestOptionsContext, SessionCachePolicyOptions } from "./provider-request-policy.js";
 export { applyDefaultProviderRequestOptions, createProviderRequestPolicyChain, createSessionCachePolicy, mergeProviderRequestOptions, ProviderRequirementError, } from "./provider-request-policy.js";
@@ -87,6 +92,8 @@ export type { LoadBinaryResourceOptions } from "./resources.js";
 export { loadBinaryResource, loadJsonResource, loadManifestResource, loadTextResource } from "./resources.js";
 export type { DefaultRetryPolicyOptions } from "./retry.js";
 export { createDefaultRetryPolicy, isTransientErrorInfo, waitForRetry } from "./retry.js";
+export type { RunBundleSnapshot, RunBundleSnapshotInput } from "./run-bundle.js";
+export { RUN_BUNDLE_SCHEMA_VERSION, snapshotRunBundle } from "./run-bundle.js";
 export type { BatchedRunLedgerOptions } from "./run-ledger.js";
 export { createBatchedRunLedger, DEFAULT_LEDGER_BATCH_BYTES, DEFAULT_LEDGER_BATCH_DELAY_MS, DEFAULT_LEDGER_BATCH_ENTRIES, HARD_LEDGER_BATCH_BYTES, HARD_LEDGER_BATCH_DELAY_MS, HARD_LEDGER_BATCH_ENTRIES, isFlushableRunLedger, } from "./run-ledger.js";
 export type { RunLimitTrackerOptions } from "./run-limits.js";
@@ -119,8 +126,10 @@ export { createActiveToolSet, createSearchToolsTool, createToolSearchIndex, crea
 export type { DispatchToolCallOptions, ToolArgumentValidationError, ToolArgumentValidationResult, ToolArgumentValidator, ToolFilter, ToolFilterInput, ToolParameterValidatorOptions, ToolRegistryOptions, ToolValidator, } from "./tools.js";
 export { createToolParameterValidator, createToolRegistry, dispatchToolCall, filterTools } from "./tools.js";
 export { trimTrailingSlashes } from "./trim-trailing-slashes.js";
+export type { ModelFamilyTokens } from "./usage-estimation.js";
+export { MODEL_FAMILY_TOKENS, resolveModelFamily } from "./usage-estimation.js";
 export type { ResolvedUseCaseModel, ResolveUseCaseModelInput, UseCaseModelBinding, } from "./use-case-model.js";
 export { resolveUseCaseModel, resolveUseCaseModelBinding, useCaseCredentialProviderId, } from "./use-case-model.js";
 export declare const name = "prism";
-export declare const version = "0.7.0";
+export declare const version = "0.9.0";
 export declare const description = "Agent harness for AI providers, agents, sessions, and tools.";

package/dist/index.js

@@ -1,8 +1,9 @@
 export { resolveAgentDefinition } from "./agent-definitions.js";
-export { AgentEventSourceError, createMemoryAgentEventSource } from "./agent-event-source.js";
+export { AgentEventSourceError, createMemoryAgentEventSource, isTerminalAgentEventType } from "./agent-event-source.js";
 export { dispatchToolCallsInOrder, generateValidateReviseLoop, isAgentLoopOptions, resolveLoop, resolveToolConcurrency, singleShotLoop, } from "./agent-loops.js";
 export { createAgentRunLifecycle } from "./agent-run-lifecycle.js";
-export { AGENT_RUN_STATE_NAMESPACE, AGENT_RUN_STATE_SCHEMA_VERSION, agentFingerprint, DEFAULT_MAX_AGENT_RUN_STATE_BYTES, HARD_MAX_AGENT_RUN_STATE_BYTES, loadAgentRunState, } from "./agent-run-state.js";
+export { CheckpointRestoreError, DEFAULT_CHECKPOINT_RESTORE_TIMEOUT_MS, runCheckpointRestoreHooks } from "./checkpoint-restore.js";
+export { AGENT_RUN_STATE_NAMESPACE, AGENT_RUN_STATE_SCHEMA_VERSION, agentFingerprint, boundCheckpointMetadata, DEFAULT_MAX_AGENT_RUN_STATE_BYTES, HARD_MAX_AGENT_RUN_STATE_BYTES, loadAgentRunState, MAX_AGENT_RUN_METADATA_BYTES, readCheckpointMetadata, resolveCheckpointMetadata, } from "./agent-run-state.js";
 export { createAgent, createAgentSession, resumeAgentRun, resumeAgentRunStream } from "./agents.js";
 export { ARTIFACT_BODY_ERROR_CODES, ARTIFACT_CHECKPOINT_NAMESPACE, ArtifactBodyStoreError, ArtifactError, approvalEvidenceIntact, artifactApprovalState, artifactCheckpointKey, checkCitationIntegrity, citationBindingDigest, HARD_CITATION_EXCERPT_BYTES, } from "./artifacts.js";
 export { ATTENTION_BUDGET_ERROR_CODE, AttentionBudgetError, createAttentionCompiler, createAttentionTruncationTrigger, DEFAULT_ATTENTION_COMPACT_RATIO, DEFAULT_ATTENTION_KEEP_LAST, DEFAULT_ATTENTION_RESERVE_TOKENS, DEFAULT_ATTENTION_THINKING_KEEP_TURNS, DEFAULT_ATTENTION_TRIGGER_RATIO, DEFAULT_ATTENTION_TRUNCATION_THRESHOLD, isAttentionBudgetError, resolveAttentionReserveTokens, resolveInputCap, resolveRunAttentionCompiler, } from "./attention-compiler.js";
@@ -22,24 +23,26 @@ export { createChainedCredentialResolver, createEnvCredentialResolver, createExp
 export { createDelegatedAgentStep, DelegatedAgentStepError, MAX_DELEGATED_AGENT_DURATION_MS, MAX_DELEGATED_AGENT_EVENT_BYTES, MAX_DELEGATED_AGENT_ID_BYTES, MAX_DELEGATED_AGENT_NAME_BYTES, MAX_DELEGATED_AGENT_STEP_INDEX, MAX_DELEGATED_AGENT_TOKEN_COUNT, } from "./delegated-agent-step.js";
 export { acceptDeviceChunk, assertDeviceAdmit, DEFAULT_DEVICE_MAX_CHUNK_BYTES, DEFAULT_DEVICE_MAX_CONCURRENT_SESSIONS, DevicePolicyError, HARD_DEVICE_MAX_CHUNK_BYTES, HARD_DEVICE_MAX_CONCURRENT_SESSIONS, redactDeviceTelemetry, resolveDevicePolicy, runDevicePolicyConformance, } from "./devices.js";
 export { createEventMultiplexer, EVENT_MULTIPLEXER_SINGLE_CONSUMER_CODE, EventMultiplexerError } from "./event-multiplexer.js";
+export { createClaimGroundingGuardrail } from "./evidence-grounding.js";
 export { applyExecutionDecision, assertExecutionAllowed, checkExecution, ExecutionDeniedError } from "./execution-policy.js";
 export { activateKernel, createExtensionEventBus, createExtensionKernel } from "./extensions.js";
 export { createMemoryRunFeedbackStore, prepareRunFeedback, RunFeedbackError, requireRunFeedbackOwnership, runFeedbackPageLimit, } from "./feedback.js";
 export { ALLOW_FIELD_POLICY, applyFieldPolicy, createAuditFieldRedactor, createProtectedFieldPolicy, FIELD_POLICY_LIMITS, FieldPolicyError, } from "./field-policy.js";
-export { assertGuardrailsAllowed, GuardrailError, MAX_GUARDRAIL_CONCURRENCY, runGuardrails } from "./guardrails.js";
+export { assertGuardrailsAllowed, compileGuardrailPacks, describeGuardrailPacks, GuardrailError, GuardrailPackError, MAX_GUARDRAIL_CONCURRENCY, MAX_GUARDRAIL_PACK_RULES, MAX_GUARDRAIL_PACKS, runGuardrails, } from "./guardrails.js";
+export { BUILT_IN_GUARDRAIL_PACK_IDS } from "./guardrail-packs/index.js";
 export { assertIdentityActive, assertIdentityMatchesOwnership, assertIdentityPropagation, DEFAULT_IDENTITY_LIMITS, HARD_IDENTITY_LIMITS, IdentityError, identityTelemetryAttributes, narrowIdentity, ownershipFromIdentity, resolveIdentityLimits, resolveRunIdentity, } from "./identity.js";
 export { assembleProviderInput, createDefaultInputBuilder, createDefaultPromptBuilder, EMPTY_TOOL_RESULT_TEXT, renderPromptTemplate, resolveContextProviders, } from "./input.js";
 export { resolveInstructionInjectors, runInstructionInjectors } from "./instruction-injection.js";
 export { createMemoryLeaseStore, LEASE_CONFLICT_CODE, LeaseConflictError } from "./leases.js";
 export { definePrismManifest, parsePrismManifest } from "./manifests.js";
-export { createMiddlewareRegistry } from "./middleware.js";
+export { createMiddlewareRegistry, DeterministicTurnError } from "./middleware.js";
 export { createMockProvider } from "./mock-provider.js";
 export { createModelRegistry } from "./models.js";
 export { abortableSleep, pollDeviceCodeToken, redactOAuthError, throwIfAborted, } from "./oauth-device-code.js";
 export { createProviderTurnMetadata, readProviderHttpStatus } from "./observability.js";
 export { createMemoryPersistenceLifecycle, DEFAULT_LIFECYCLE_PAGE_SIZE, DEFAULT_MAX_HOLD_REASON_BYTES, HARD_LIFECYCLE_PAGE_SIZE, HARD_MAX_HOLD_REASON_BYTES, isResourceHeld, PersistenceLifecycleError, } from "./persistence-lifecycle.js";
 export { boundResponse, defaultResolver, isLoopbackAddress, isLoopbackHostname, normalizeHostname, pinnedFetch, raceAbort, requestPinned, resolvePinnedAddress, } from "./pinned-fetch.js";
-export { providerContentDelta, providerContinuationRequired, providerDone, providerError, providerTextDelta, providerThinkingDelta, providerToolCall, providerToolCallDelta, providerUsage, toolCallContent, toolCallFromArgumentsText, } from "./provider-events.js";
+export { mapProviderStopReason, providerContentDelta, providerContinuationRequired, providerDone, providerError, providerTextDelta, providerThinkingDelta, providerToolCall, providerToolCallDelta, providerUsage, toolCallContent, toolCallFromArgumentsText, } from "./provider-events.js";
 export { authMethodKey, defineProviderPackage, systemPromptContributionKey } from "./provider-packages.js";
 export { applyDefaultProviderRequestOptions, createProviderRequestPolicyChain, createSessionCachePolicy, mergeProviderRequestOptions, ProviderRequirementError, } from "./provider-request-policy.js";
 export { canonicalizeJsonSchema } from "./providers/schema.js";
@@ -47,6 +50,7 @@ export { createProviderRegistry, createProviderResolver } from "./providers.js";
 export { createSecretRedactor, errorToErrorInfo, redactAgentEvent, redactMessage, redactProviderRequest, redactRunLedgerRecord, redactSecrets, redactSessionEntry, resolveRedactor, } from "./redaction.js";
 export { loadBinaryResource, loadJsonResource, loadManifestResource, loadTextResource } from "./resources.js";
 export { createDefaultRetryPolicy, isTransientErrorInfo, waitForRetry } from "./retry.js";
+export { RUN_BUNDLE_SCHEMA_VERSION, snapshotRunBundle } from "./run-bundle.js";
 export { createBatchedRunLedger, DEFAULT_LEDGER_BATCH_BYTES, DEFAULT_LEDGER_BATCH_DELAY_MS, DEFAULT_LEDGER_BATCH_ENTRIES, HARD_LEDGER_BATCH_BYTES, HARD_LEDGER_BATCH_DELAY_MS, HARD_LEDGER_BATCH_ENTRIES, isFlushableRunLedger, } from "./run-ledger.js";
 export { createRunLimitTracker, DEFAULT_RUN_LIMITS, HARD_RUN_LIMITS, RunLimitError, RunLimitTracker, resolveRunLimits, } from "./run-limits.js";
 export { assertHostCompositionReadiness, createSecureAgent, HostCompositionError, inspectHostComposition, } from "./secure-agent.js";
@@ -65,8 +69,9 @@ export { DEFAULT_TOOL_RESULT_FOLD_MAX_SUMMARY_BYTES, DEFAULT_TOOL_RESULT_FOLD_MI
 export { createActiveToolSet, createSearchToolsTool, createToolSearchIndex, createToolSearchState, DEFAULT_MAX_TOOLS_SEARCH_QUERY_BYTES, DEFAULT_TOOLS_SEARCH_TOP_K, HARD_MAX_TOOLS_INDEX, HARD_MAX_TOOLS_SEARCH_QUERY_BYTES, HARD_MAX_TOOLS_SEARCH_TOP_K, isToolDisclosureError, resolveToolsDisclosure, SEARCH_TOOLS_TOOL_NAME, scoreTools, selectDisclosedTools, TOOL_DISCLOSURE_ERROR_CODE, ToolDisclosureError, } from "./tool-search.js";
 export { createToolParameterValidator, createToolRegistry, dispatchToolCall, filterTools } from "./tools.js";
 export { trimTrailingSlashes } from "./trim-trailing-slashes.js";
+export { MODEL_FAMILY_TOKENS, resolveModelFamily } from "./usage-estimation.js";
 export { resolveUseCaseModel, resolveUseCaseModelBinding, useCaseCredentialProviderId, } from "./use-case-model.js";
 export const name = "prism";
-export const version = "0.7.0";
+export const version = "0.9.0";
 export const description = "Agent harness for AI providers, agents, sessions, and tools.";
 //# sourceMappingURL=index.js.map

package/dist/input.d.ts

@@ -1,4 +1,4 @@
-import { type AttentionStickyFrontier } from "./attention-compiler.js";
+import { type AttentionFoldLedger, type AttentionStickyFrontier } from "./attention-compiler.js";
 import { type ContextBudget } from "./context-budget.js";
 import type { AttentionCompiler, AttentionCompilerOptions, AttentionReport, ContentBlock, ContextBlock, ContextProvider, ContextResolutionContext, InputBuildContext, InputBuilder, InstructionInjector, JsonObject, Message, ModelConfig, PromptBuilder, PromptBuildRequest, ProviderRequest, ProviderRequestOptions, ResourceLoader, Skill, ToolDefinition, ToolResult } from "./contracts.js";
 import type { MiddlewareRegistry } from "./middleware.js";
@@ -65,6 +65,8 @@ export interface AssembleProviderInputOptions extends DefaultInputBuildContext {
     readonly skills?: readonly Skill[];
     readonly skillsDisclosure?: SkillsDisclosure;
     readonly loadedSkills?: LoadedSkillSet;
+    /** Run-owned append-only segments. Omit outside a session to retain existing assembly exactly. */
+    readonly tailSegments?: Map<string, Message>;
     readonly tools?: readonly ToolDefinition[];
     /** Tools disclosure: "search" narrows the disclosed tool list (activated ∪ top-k); default "all" is unchanged. */
     readonly toolsDisclosure?: ToolsDisclosure;
@@ -86,9 +88,14 @@ export interface AssembleProviderInputOptions extends DefaultInputBuildContext {
     readonly attentionCompiler?: AttentionCompilerOptions | AttentionCompiler;
     /** Per-session-leaf sticky frontier; omit for one-shot assemblies (no cross-turn stickiness). */
     readonly attentionSticky?: AttentionStickyFrontier;
+    /** Per-session folded bodies; omit to re-summarize every folded row on every turn. */
+    readonly attentionFold?: AttentionFoldLedger;
     /** Called once per *mutated* turn with the report, so a host can emit telemetry: under-ratio
      *  turns never call it, and it runs before `input_assembly` middleware. */
     readonly onAttentionReport?: (report: AttentionReport) => void;
+    /** Run input tokens already charged this run; feeds the `run_input_ratio` axis projection
+     *  (default 0). The run budget itself rides the resolved `AttentionCompiler` handle. */
+    readonly runInputTokens?: number;
 }
 export declare function createDefaultInputBuilder(): DefaultInputBuilder;
 export declare function resolveContextProviders(options: ResolveContextOptions): Promise<readonly ContextBlock[]>;

package/dist/input.js

@@ -5,7 +5,7 @@ import { runInstructionInjectors } from "./instruction-injection.js";
 import { applyDefaultProviderRequestOptions } from "./provider-request-policy.js";
 import { redactMessage } from "./redaction.js";
 import { loadTextResource } from "./resources.js";
-import { skillMessages as buildSkillMessages } from "./skill-disclosure.js";
+import { capSkillCatalog, selectSkillsForPrompt, skillHasRenderableBody, skillMessages as buildSkillMessages, } from "./skill-disclosure.js";
 import { composeSystemPrompt } from "./system-prompts.js";
 import { foldToolResultHistory, foldToolResults } from "./tool-result-fold.js";
 import { selectDisclosedTools } from "./tool-search.js";
@@ -51,11 +51,16 @@ export function createDefaultPromptBuilder() {
             // text-only (or unknown-capability) models — duplicating it doubles tool tokens per turn.
             const tools = request.model?.capabilities?.tools === true ? undefined : request.tools;
             const context = contextMessages(request.context);
-            const skills = buildSkillMessages(request.skills, {
-                disclosure: request.skillsDisclosure,
-                loaded: request.loadedSkills,
-                demotedBodies: request.demotedSkillBodies?.length ? new Set(request.demotedSkillBodies) : undefined,
-            });
+            const skills = buildSkillMessages(request.skills, request.tailSkillBodies
+                ? {
+                    disclosure: "progressive",
+                    demotedBodies: request.demotedSkillBodies?.length ? new Set(request.demotedSkillBodies) : undefined,
+                }
+                : {
+                    disclosure: request.skillsDisclosure,
+                    loaded: request.loadedSkills,
+                    demotedBodies: request.demotedSkillBodies?.length ? new Set(request.demotedSkillBodies) : undefined,
+                });
             const declarations = toolMessages(tools);
             if ((request.inputLayout ?? "cache_aware") === "legacy") {
                 return [...context, ...skills, ...declarations, ...request.messages];
@@ -156,9 +161,11 @@ export async function assembleProviderInput(options) {
             tools,
             fold: options.toolResultFold,
             frontier: options.attentionSticky,
+            attentionFold: options.attentionFold,
             redactor: options.redactor,
             signal: options.signal,
             turn,
+            runInputTokens: options.runInputTokens,
             sessionId: options.sessionId,
             runId: options.runId,
         });
@@ -213,6 +220,14 @@ export async function assembleProviderInput(options) {
             ...baseContext,
         });
     }
+    const tailSegments = options.tailSegments;
+    const tailSkillBodies = tailSegments !== undefined;
+    if (tailSegments) {
+        const activeTailSegments = new Set();
+        messages = moveResourceMessagesToTail(messages, options, tailSegments, activeTailSegments);
+        appendSkillTailSegments(tailSegments, activeTailSegments, skills, options.skillsDisclosure, options.loadedSkills, demotedSkillBodies);
+        messages = [...messages, ...tailMessages(tailSegments, activeTailSegments)];
+    }
     const promptBuilder = options.promptBuilder ?? createDefaultPromptBuilder();
     const promptRequest = options.middleware
         ? await options.middleware.run("prompt_build", {
@@ -222,6 +237,7 @@ export async function assembleProviderInput(options) {
             skills,
             skillsDisclosure: options.skillsDisclosure,
             loadedSkills: options.loadedSkills,
+            tailSkillBodies,
             demotedSkillBodies,
             tools,
             metadata: options.metadata,
@@ -234,6 +250,7 @@ export async function assembleProviderInput(options) {
             skills,
             skillsDisclosure: options.skillsDisclosure,
             loadedSkills: options.loadedSkills,
+            tailSkillBodies,
             demotedSkillBodies,
             tools,
             metadata: options.metadata,
@@ -389,6 +406,51 @@ function textMessage(role, text, metadata) {
 function contextMessages(context) {
     return (context ?? []).map((block) => textMessage("system", `${block.title ? `${block.title}:\n` : "Context:\n"}${blockText(block)}`, block.metadata));
 }
+function moveResourceMessagesToTail(messages, options, tailSegments, activeTailSegments) {
+    const resourceUris = new Set([
+        ...(options.resourceUris ?? []),
+        ...(options.attachments ?? []).flatMap((attachment) => attachment.uri !== undefined && attachment.text === undefined && attachment.content === undefined ? [attachment.uri] : []),
+    ]);
+    if (resourceUris.size === 0)
+        return messages;
+    return messages.filter((message) => {
+        const uri = message.metadata?.uri;
+        if (message.role !== "user" || typeof uri !== "string" || !resourceUris.has(uri))
+            return true;
+        appendTailSegment(tailSegments, activeTailSegments, `resource:${uri}`, message);
+        return false;
+    });
+}
+function appendSkillTailSegments(tailSegments, activeTailSegments, skills, disclosure, loaded, demotedSkillBodies) {
+    const renderContext = {
+        disclosure,
+        loaded,
+        demotedBodies: demotedSkillBodies?.length ? new Set(demotedSkillBodies) : undefined,
+    };
+    const selected = capSkillCatalog(selectSkillsForPrompt(skills ?? [], renderContext));
+    const byName = new Map(selected.map((skill) => [skill.name, skill]));
+    const ordered = disclosure === "eager"
+        ? selected
+        : (loaded?.list() ?? []).flatMap((name) => {
+            const skill = byName.get(name);
+            return skill === undefined ? [] : [skill];
+        });
+    for (const skill of ordered) {
+        if (!skillHasRenderableBody(skill, renderContext))
+            continue;
+        const message = buildSkillMessages([skill], renderContext)[0];
+        if (message)
+            appendTailSegment(tailSegments, activeTailSegments, `skill:${skill.name}`, message);
+    }
+}
+/** Map#set retains first-insertion order, so re-derivation replaces only this segment's bytes. */
+function appendTailSegment(tailSegments, activeTailSegments, id, message) {
+    tailSegments.set(id, message);
+    activeTailSegments.add(id);
+}
+function tailMessages(tailSegments, activeTailSegments) {
+    return [...tailSegments].flatMap(([id, message]) => (activeTailSegments.has(id) ? [message] : []));
+}
 function toolMessages(tools) {
     if (!tools?.length)
         return [];

package/dist/middleware.d.ts

@@ -1,5 +1,40 @@
-import type { ExtensionEvent } from "./contracts.js";
-export type MiddlewareHookName = "provider_request" | "input_assembly" | "prompt_build" | "context" | "tool_call" | "tool_result" | "retry" | "compaction" | "session_start" | "session_shutdown";
+import type { ContentBlock, ExtensionEvent } from "./contracts.js";
+export type MiddlewareHookName = "beforeProviderTurn" | "provider_request" | "input_assembly" | "prompt_build" | "context" | "tool_call" | "tool_result" | "retry" | "compaction" | "session_start" | "session_shutdown";
+/** Provenance of a host-answered turn (plan 096). An id, never free host code. */
+export interface DeterministicTurnProvenance {
+    /** Answering middleware id; bounded, replay-stable, and auditable. */
+    readonly middleware: string;
+}
+/** Host middleware answer that completes a turn without any provider request (plan 096). */
+export interface DeterministicTurnAnswer {
+    /** Assistant content with provider content-block shape; tool calls are rejected (no provider ran). */
+    readonly content: readonly ContentBlock[];
+    /** Mandatory: a deterministic turn can never masquerade as model output. */
+    readonly provenance: DeterministicTurnProvenance;
+}
+/**
+ * Payload for the `beforeProviderTurn` hook (plan 096). Host middleware sets `answer` to complete the
+ * turn deterministically; leaving it absent/undefined sends the turn to the provider as usual.
+ */
+export interface BeforeProviderTurnPayload {
+    readonly sessionId: string;
+    readonly runId: string;
+    readonly turn: number;
+    /** Concatenated text blocks of the latest user-role message in the assembled request. */
+    readonly userText: string;
+    /** Set by host middleware to answer without a provider call. */
+    readonly answer?: DeterministicTurnAnswer;
+}
+/** Host answered with a malformed deterministic turn. Fails the run closed — never falls through. */
+export declare class DeterministicTurnError extends Error {
+    readonly code = "ERR_PRISM_DETERMINISTIC_TURN";
+    constructor(message: string);
+}
+/**
+ * Validate a host deterministic answer at the trust boundary: non-empty assistant-visible content and
+ * mandatory bounded provenance. Throws instead of degrading to a provider call.
+ */
+export declare function validateDeterministicTurnAnswer(value: unknown): DeterministicTurnAnswer;
 export type MiddlewareNext<T> = (value: T) => Promise<T>;
 export type Middleware<T = unknown> = (value: T, next: MiddlewareNext<T>) => T | Promise<T>;
 export interface MiddlewareRegistryOptions {

package/dist/middleware.js

@@ -1,4 +1,45 @@
 import { errorToErrorInfo } from "./redaction.js";
+/** Host answered with a malformed deterministic turn. Fails the run closed — never falls through. */
+export class DeterministicTurnError extends Error {
+    code = "ERR_PRISM_DETERMINISTIC_TURN";
+    constructor(message) {
+        super(message);
+        this.name = "DeterministicTurnError";
+    }
+}
+/** Provenance ids stay ids: bounded, no whitespace or separators outside the id alphabet. */
+const DETERMINISTIC_MIDDLEWARE_ID = /^[A-Za-z0-9][A-Za-z0-9._:-]{0,63}$/;
+// Assistant-visible blocks only: a deterministic answer cannot smuggle tool execution/authority.
+const DETERMINISTIC_BLOCK_TYPES = new Set(["text", "image", "audio", "file", "document", "video", "thinking"]);
+/**
+ * Validate a host deterministic answer at the trust boundary: non-empty assistant-visible content and
+ * mandatory bounded provenance. Throws instead of degrading to a provider call.
+ */
+export function validateDeterministicTurnAnswer(value) {
+    if (typeof value !== "object" || value === null)
+        throw new DeterministicTurnError("answer must be an object");
+    const answer = value;
+    if (!Array.isArray(answer.content) || answer.content.length === 0) {
+        throw new DeterministicTurnError("answer.content must be a non-empty content block array");
+    }
+    for (const block of answer.content) {
+        const type = block?.type;
+        if (typeof block !== "object" || block === null || typeof type !== "string" || !DETERMINISTIC_BLOCK_TYPES.has(type)) {
+            throw new DeterministicTurnError("answer.content blocks must be assistant-visible content blocks (text, image, audio, file, document, video, thinking)");
+        }
+        if (type === "text" && typeof block.text !== "string") {
+            throw new DeterministicTurnError("answer.content text blocks require a string text");
+        }
+        if (type === "thinking" && typeof block.text !== "string") {
+            throw new DeterministicTurnError("answer.content thinking blocks require a string text");
+        }
+    }
+    const middleware = answer.provenance?.middleware;
+    if (typeof middleware !== "string" || !DETERMINISTIC_MIDDLEWARE_ID.test(middleware)) {
+        throw new DeterministicTurnError("answer.provenance.middleware must be a bounded id (1-64 chars: letters, digits, . _ : -)");
+    }
+    return { content: answer.content, provenance: { middleware } };
+}
 function middlewareError(error, hook, secrets) {
     return { type: "extension_error", extension: `middleware:${hook}`, error: errorToErrorInfo(error, secrets) };
 }

package/dist/node/session-store-jsonl.js

@@ -1,6 +1,7 @@
 import { appendFile, mkdir, readFile } from "node:fs/promises";
 import { dirname } from "node:path";
-import { isSessionEntryKind, SESSION_APPEND_CONFLICT_CODE, SESSION_ENTRY_SCHEMA_VERSION, SessionAppendConflictError, SessionSearchUnsupportedError, } from "../contracts.js";
+import { isSessionEntryKind, SESSION_APPEND_CONFLICT_CODE, SESSION_ENTRY_SCHEMA_VERSION, SessionAppendConflictError, } from "../contracts.js";
+import { searchLinearSessions } from "../session-stores.js";
 import { isNodeErrorCode } from "./config.js";
 export function createJsonlSessionStore(pathOrOptions) {
     const options = typeof pathOrOptions === "string" ? { path: pathOrOptions, createDirectory: true } : pathOrOptions;
@@ -50,8 +51,22 @@ export function createJsonlSessionStore(pathOrOptions) {
         async get(id) {
             return findEntry(path, id);
         },
-        async searchSessions() {
-            throw new SessionSearchUnsupportedError("JSONL session store does not support searchSessions");
+        async searchSessions(query) {
+            // ponytail: no index - every search reads and parses the file (O(corpus) time and memory), the
+            // recommended indexed paths are the SQLite/Postgres adapters. Corrupt lines are quarantined
+            // exactly as in list()/get(), and the contract linear caps bound entries/text scanned.
+            const { entries } = await readJsonlSessionEntries(path);
+            const bySession = new Map();
+            const leafBySession = new Map();
+            for (const entry of entries) {
+                const sessionEntries = bySession.get(entry.sessionId);
+                if (sessionEntries)
+                    sessionEntries.push(entry);
+                else
+                    bySession.set(entry.sessionId, [entry]);
+                leafBySession.set(entry.sessionId, entry.id);
+            }
+            return searchLinearSessions(bySession, leafBySession, query);
         },
     };
 }

package/dist/observability.js

@@ -1,9 +1,15 @@
+import { createHash } from "node:crypto";
 export function createProviderTurnMetadata(request, providerId, fields = {}) {
+    const names = (request.tools ?? []).map((tool) => tool.name);
     return {
         providerId,
         model: request.model,
         requestId: readRequestId(request),
         ...fields,
+        tools: {
+            count: names.length,
+            idsHash: `sha256:${createHash("sha256").update(JSON.stringify(names), "utf8").digest("hex")}`,
+        },
     };
 }
 export function readProviderHttpStatus(error) {

package/dist/provider-events.d.ts

@@ -1,4 +1,4 @@
-import type { ContentBlock, JsonObject, ProviderEvent, ToolCallContent, ToolCallDeltaContent, Usage } from "./contracts.js";
+import type { ContentBlock, JsonObject, ProviderEvent, ProviderStopReason, ToolCallContent, ToolCallDeltaContent, Usage } from "./contracts.js";
 export declare function providerTextDelta(text: string): ProviderEvent;
 export declare function providerThinkingDelta(text: string, signature?: string): ProviderEvent;
 export declare function providerContentDelta(content: ContentBlock): ProviderEvent;
@@ -13,8 +13,16 @@ export declare function providerToolCallDeltaContent(delta: Omit<ToolCallDeltaCo
 export declare function providerContinuationRequired(cursor: string, reason?: string): ProviderEvent;
 export declare function reconstructToolCallDeltas(events: readonly ProviderEvent[]): readonly ToolCallContent[];
 export declare function providerUsage(usage: Usage): ProviderEvent;
-export declare function providerDone(usage?: Usage): ProviderEvent;
-export declare function providerError(error: unknown, secrets?: readonly (string | undefined)[]): ProviderEvent;
+/**
+ * Map a native provider stop/finish reason onto the closed taxonomy. A missing, non-string, or
+ * unmapped value returns `"unknown"` rather than throwing, so a new wire value can never fail a
+ * run (plan 087 T1).
+ */
+export declare function mapProviderStopReason(native: string | null | undefined): ProviderStopReason;
+export declare function providerDone(usage?: Usage, stopReason?: ProviderStopReason): ProviderEvent;
+export declare function providerError(error: unknown, secrets?: readonly (string | undefined)[]): Extract<ProviderEvent, {
+    type: "error";
+}>;
 export declare function toolCallContent(id: string, name: string, args?: JsonObject): ToolCallContent;
 /** Build a tool call from streamed arguments text; malformed JSON becomes a blocked call (no throw). */
 export declare function toolCallFromArgumentsText(id: string, name: string, argumentsText: string): ToolCallContent;

package/dist/provider-events.js

@@ -1,4 +1,4 @@
-import { ProviderTransportError, tryParseJsonObjectArguments } from "./providers/transport.js";
+import { classifyProviderFailure, ProviderTransportError, tryParseJsonObjectArguments } from "./providers/transport.js";
 import { errorToErrorInfo } from "./redaction.js";
 export function providerTextDelta(text) {
     return { type: "content_delta", content: { type: "text", text } };
@@ -46,12 +46,70 @@ export function reconstructToolCallDeltas(events) {
 export function providerUsage(usage) {
     return { type: "usage", usage };
 }
-export function providerDone(usage) {
-    return { type: "done", usage };
+/**
+ * One shared native → taxonomy table (plan 087 T1). Every adapter routes its wire reason
+ * through `mapProviderStopReason`, so hosts switch on one closed union instead of per-provider
+ * strings. Keys are lowercased wire values; `unknown` never appears here — it is the fallback.
+ */
+const PROVIDER_STOP_REASONS = Object.freeze({
+    // OpenAI Chat Completions (`finish_reason`) and generic OpenAI-compatible routes.
+    stop: "end_turn",
+    length: "max_output_tokens",
+    tool_calls: "tool_calls",
+    function_call: "tool_calls",
+    content_filter: "content_filter",
+    // Messages-style `stop_reason` routes and Bedrock Converse (`stopReason`).
+    end_turn: "end_turn",
+    stop_sequence: "end_turn",
+    pause_turn: "end_turn",
+    tool_use: "tool_calls",
+    max_tokens: "max_output_tokens",
+    refusal: "content_filter",
+    // Google generateContent (`finishReason`).
+    safety: "content_filter",
+    recitation: "content_filter",
+    blocklist: "content_filter",
+    prohibited_content: "content_filter",
+    spii: "content_filter",
+    image_safety: "content_filter",
+    language: "content_filter",
+    malformed_function_call: "provider_error",
+    unexpected_tool_call: "provider_error",
+    // OpenAI Responses (status / `incomplete_details.reason`).
+    completed: "end_turn",
+    failed: "provider_error",
+    cancelled: "abort",
+    canceled: "abort",
+    // Bedrock Converse guarded routes.
+    content_filtered: "content_filter",
+    guardrail_intervened: "content_filter",
+    malformed_model_output: "provider_error",
+    malformed_tool_use: "provider_error",
+    // AI SDK unified finish reasons (hyphenated).
+    "content-filter": "content_filter",
+    "tool-calls": "tool_calls",
+    error: "provider_error",
+    other: "unknown",
+    unknown: "unknown",
+    abort: "abort",
+    aborted: "abort",
+});
+/**
+ * Map a native provider stop/finish reason onto the closed taxonomy. A missing, non-string, or
+ * unmapped value returns `"unknown"` rather than throwing, so a new wire value can never fail a
+ * run (plan 087 T1).
+ */
+export function mapProviderStopReason(native) {
+    if (typeof native !== "string")
+        return "unknown";
+    return PROVIDER_STOP_REASONS[native.trim().toLowerCase()] ?? "unknown";
+}
+export function providerDone(usage, stopReason) {
+    return { type: "done", usage, ...(stopReason === undefined ? {} : { stopReason }) };
 }
 export function providerError(error, secrets = []) {
     const info = errorToErrorInfo(error, secrets);
-    return { type: "error", error: info };
+    return { type: "error", error: info.failureClass ? info : { ...info, failureClass: classifyProviderFailure(error) } };
 }
 export function toolCallContent(id, name, args = {}) {
     return { type: "tool_call", id, name, arguments: args };

package/dist/providers/openai-compatible.js

@@ -1,5 +1,5 @@
 import { resolveCredentialValue } from "../credentials.js";
-import { providerDone, providerError, providerTextDelta, providerThinkingDelta, providerToolCall, providerToolCallDelta, providerUsage, toolCallFromArgumentsText, } from "../provider-events.js";
+import { mapProviderStopReason, providerDone, providerError, providerTextDelta, providerThinkingDelta, providerToolCall, providerToolCallDelta, providerUsage, toolCallFromArgumentsText, } from "../provider-events.js";
 import { assertStructuredOutputRequestSupported } from "../structured-output.js";
 import { trimTrailingSlashes } from "../trim-trailing-slashes.js";
 import { applyOpenAIChatStructuredOutput, assertOpenAIChatMessage, mapOpenAIChatUsage, serializeOpenAIChatMessage, serializeOpenAITool, } from "./openai-primitives.js";
@@ -13,6 +13,7 @@ export async function* openAIChatEvents(body, options = {}) {
     let usage;
     let sawDoneMarker = false;
     let sawFinishReason = false;
+    let finishReason;
     for await (const sseEvent of readSseEvents(body, { signal: options.signal })) {
         if (options.onComment && sseEvent.comments?.length) {
             for (const text of sseEvent.comments) {
@@ -43,8 +44,10 @@ export async function* openAIChatEvents(body, options = {}) {
             yield providerUsage(mapped);
         }
         for (const choice of parsed.choices ?? []) {
-            if (choice.finish_reason)
+            if (choice.finish_reason) {
                 sawFinishReason = true;
+                finishReason = choice.finish_reason;
+            }
             const delta = choice.delta ?? {};
             if (typeof delta.content === "string" && delta.content)
                 yield providerTextDelta(delta.content);
@@ -83,7 +86,7 @@ export async function* openAIChatEvents(body, options = {}) {
     for (const call of tools.values()) {
         yield providerToolCall(toolCallFromArgumentsText(call.id, call.name, call.argumentsText));
     }
-    yield providerDone((options.strictCompletion ?? true) || options.doneUsage ? usage : undefined);
+    yield providerDone((options.strictCompletion ?? true) || options.doneUsage ? usage : undefined, finishReason === undefined ? undefined : mapProviderStopReason(finishReason));
 }
 export function createOpenAICompatibleProvider(options) {
     const providerId = options.id ?? "openai-compatible";