@graphorin/agent 0.6.0 → 0.6.1

package/CHANGELOG.md

@@ -1,5 +1,20 @@
 # @graphorin/agent
 
+## 0.6.1
+
+### Patch Changes
+
+- [#142](https://github.com/o-stepper/graphorin/pull/142) [`436d6ca`](https://github.com/o-stepper/graphorin/commit/436d6ca5ebbd16df094e915682d3915c279a8430) Thanks [@o-stepper](https://github.com/o-stepper)! - Version constants and version-bearing strings now derive from each package's manifest at build time (`VERSION = pkg.version`; writer ids, client/server info, OTLP framework attributes, build-info metrics interpolate it). No behavioral change at the current version: the rendered strings are byte-identical. A release bump no longer edits source; the new `check-version-consistency` gate fails any reintroduced hardcoded framework version.
+
+- Updated dependencies [[`826ee59`](https://github.com/o-stepper/graphorin/commit/826ee5933ad38693b0dd2f20a110abfecba7d23d), [`436d6ca`](https://github.com/o-stepper/graphorin/commit/436d6ca5ebbd16df094e915682d3915c279a8430)]:
+  - @graphorin/observability@0.6.1
+  - @graphorin/core@0.6.1
+  - @graphorin/memory@0.6.1
+  - @graphorin/provider@0.6.1
+  - @graphorin/security@0.6.1
+  - @graphorin/skills@0.6.1
+  - @graphorin/tools@0.6.1
+
 ## 0.6.0
 
 ### Minor Changes

package/README.md

@@ -10,10 +10,10 @@ preservation, agent-level model fallback, post-compaction hooks,
 per-tool model-tier hints, lateral-leak defenses).
 
 The package is **library-mode-first**: every primitive that can be
-useful from a script (`createAgent`, `RunState.toJSON / fromJSON`,
-the filter library, `evaluatorOptimizer`, `Agent.fanOut`,
-`agent.progress.write / read`) ships from the npm package without
-the optional standalone server.
+useful from a script (`createAgent`, `runStateToJSON` /
+`runStateFromJSON`, the filter library, `evaluatorOptimizer`,
+`Agent.fanOut`, `agent.progress.write / read`) ships from the npm
+package without the optional standalone server.
 
 ## Dependencies
 
@@ -63,16 +63,36 @@ for await (const event of agent.stream('Plan a trip to Mars')) {
   progress artifacts, lateral-leak detections, model fallback
   transitions, …). `assertNever(...)` exhaustiveness is verified at
   compile time.
-- **Durable HITL.** `RunState.toJSON()` /
-  `RunState.fromJSON(serialized, agent)` round-trip the full run
-  state through any storage the caller picks (file, SQLite, KV, S3).
-- **Multi-agent.** `Agent.toTool({ exposeTurns, inputFilter })`
+- **Durable HITL.** `runStateToJSON(state)` /
+  `runStateFromJSON(serialized)` round-trip the full run state
+  through any storage the caller picks (file, SQLite, KV, S3); with a
+  `checkpointStore` wired, resuming a granted approval executes the
+  approved tool exactly once.
+- **Multi-agent.** `Agent.toTool({ exposeTurns, inputFilter, capability, contextFold, propagateTaint })`
   wraps an agent as a tool the parent agent can call. The parent's
   abort signal, deps, and sessionId propagate into the sub-run;
   without an `inputFilter` the sub-agent sees only the input string
   (no parent conversation crosses the boundary), and there is no
   secret-inheritance mechanism at this boundary at all - least
-  authority by construction.
+  authority by construction. `capability: 'read-only'` blocks
+  side-effecting tools in the child, `contextFold` returns a
+  distilled outcome instead of the raw transcript tail, and taint
+  from the child's untrusted inputs propagates to the parent by
+  default.
+- **Prompt-cache economics.** Opt-in `cachePolicy: { breakpoints: 'auto' }`
+  anchors provider cache breakpoints on the stable prefix so long
+  conversations are written once and read at the discounted rate;
+  cache read/write token legs flow through `Usage` and cost
+  tracking.
+- **Verifiers + deterministic replay.** `verifiers` run deterministic
+  checks on every terminal response (`verifier.result` events, up to
+  `maxVerifierRounds` feedback rounds); opt-in
+  `recordProviderResponses` journals raw model responses onto
+  `RunState` so `createReplayProvider(state)` re-drives the run
+  offline and fails loudly on divergence.
+- **Structured planning.** `plan: true` gives the model an
+  `update_plan` tool and surfaces the live plan as
+  `RunState.todos`.
 - **Filter library.** `filters.lastN(n)`, `filters.lastUser`,
   `filters.summary({...})`, `filters.bySensitivity({...})`,
   `filters.stripReasoning()`, `filters.stripSensitiveOutputs()`,
@@ -155,5 +175,5 @@ text.
 
 ---
 
-**Project Graphorin** · v0.6.0 · MIT License · © 2026 Oleksiy
+**Project Graphorin** · v0.6.1 · MIT License · © 2026 Oleksiy
 Stepurenko · <https://github.com/o-stepper/graphorin>

package/dist/index.d.ts

@@ -45,8 +45,7 @@ import { GuardrailContext, GuardrailDefinition, GuardrailResult, InputGuardrail,
  *
  * @packageDocumentation
  */
-/** Canonical version constant. Mirrors the `package.json` version. */
-declare const VERSION = "0.6.0";
+declare const VERSION: string;
 //#endregion
 export { type AbortOptions, type Agent, type AgentCallOptions, type AgentCapability, type AgentConfig, type AgentFallbackEligibility, type AgentFallbackPolicy, type AgentFallbackReason, type AgentInput, AgentResolutionError, AgentRuntimeError, type AgentRuntimeErrorCode, type AgentToToolOptions, CausalityMonitor, type CausalityMonitorCheck, type CausalityMonitorConfig, type CausalityMonitorStrictness, type ChildResult, type ChildTrustInput, type CompactOptions, type CompactionApiResult, type ContentOriginKind, DEFAULT_DENIAL_PATTERNS, DEFAULT_MAX_CHAIN_DEPTH, type DescribedFilter, type EvaluatorCallable, EvaluatorOptimizerConfigError, type EvaluatorOptimizerOptions, type EvaluatorOptimizerOutcome, type EvaluatorOutcome, FILTER_KIND_CUSTOM, type FanOutOptions, type FanOutResult, type GeneratorCallable, type GuardOutcome, type GuardrailContext, type GuardrailDefinition, type GuardrailResult, type InputGuardrail, InvalidAgentConfigError, InvalidPreferredModelError, type MergeBiasDecision, MergeBlockedError, type MergeGuardConfig, type MergeStrategy, MultipleHandoffsInStepError, type OutputGuardrail, type OutputSpec, type PerChildBudget, type PostCompactionHook, type PreferredModelResolution, type PrepareStepHook, type PrepareStepOverrides, type ProgressIO, type ProgressIOConfig, type ProgressReadOptions, ProgressWriteError, type ProgressWriteOptions, type ProtocolBoundary, type ProtocolEscapePolicy, type ProtocolGuardConfig, ProtocolInjectionRejectError, ProviderMiddlewareOrderError, RUN_STATE_SCHEMA_MAJOR_SUPPORTED, RUN_STATE_SCHEMA_VERSION, type ReplayProviderOptions, type ResolvePreferredModelInput, type ResponseVerifier, type ResumeDirective, type Rubric, RunStateMalformedError, RunStateVersionUnsupportedError, type SerializeRunStateOptions, type SerializedRunState, type SkillsRegistryLike, ToolNotFoundError, type TrustClass, VERSION, type VerifierResult, addModelUsage, aggregateUsageFromByModel, bySensitivity, completedToolCallsFromState, compose, computeSourceTrust, createAgent, createInitialRunState, createProgressIO, createReplayProvider, custom, defaultHandoffFilter, deserializeRunState, evaluateMerge, evaluatorOptimizer, filters, full, guardOutboundContent, isAgentFallbackEligible, lastN, lastUser, pickTopTierAcrossTools, resolvePolicy, resolvePreferredModel, runFanOut, runStateFromJSON, runStateToJSON, serializeRunState, stripReasoning, stripSensitiveOutputs, stripToolCalls, summary };
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","names":[],"sources":["../src/index.ts"],"sourcesContent":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8BA;;;;;;;;;;;cAAa,OAAA"}
+{"version":3,"file":"index.d.ts","names":[],"sources":["../src/index.ts"],"sourcesContent":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgCA;;;;;;;;;;cAAa"}

package/dist/index.js

@@ -1,3 +1,4 @@
+import { version } from "./package.js";
 import { AgentResolutionError, AgentRuntimeError, EvaluatorOptimizerConfigError, InvalidAgentConfigError, InvalidPreferredModelError, MergeBlockedError, MultipleHandoffsInStepError, ProgressWriteError, ProtocolInjectionRejectError, ProviderMiddlewareOrderError, RunStateMalformedError, RunStateVersionUnsupportedError, ToolNotFoundError } from "./errors/index.js";
 import { evaluatorOptimizer } from "./evaluator-optimizer/index.js";
 import { isAgentFallbackEligible } from "./fallback/index.js";
@@ -42,8 +43,8 @@ import { createReplayProvider } from "./testing/replay-provider.js";
 *
 * @packageDocumentation
 */
-/** Canonical version constant. Mirrors the `package.json` version. */
-const VERSION = "0.6.0";
+/** Canonical version constant, derived from `package.json` at build time. */
+const VERSION = version;
 
 //#endregion
 export { AgentResolutionError, AgentRuntimeError, CausalityMonitor, DEFAULT_DENIAL_PATTERNS, DEFAULT_MAX_CHAIN_DEPTH, EvaluatorOptimizerConfigError, FILTER_KIND_CUSTOM, InvalidAgentConfigError, InvalidPreferredModelError, MergeBlockedError, MultipleHandoffsInStepError, ProgressWriteError, ProtocolInjectionRejectError, ProviderMiddlewareOrderError, RUN_STATE_SCHEMA_MAJOR_SUPPORTED, RUN_STATE_SCHEMA_VERSION, RunStateMalformedError, RunStateVersionUnsupportedError, ToolNotFoundError, VERSION, addModelUsage, aggregateUsageFromByModel, bySensitivity, completedToolCallsFromState, compose, computeSourceTrust, createAgent, createInitialRunState, createProgressIO, createReplayProvider, custom, defaultHandoffFilter, deserializeRunState, evaluateMerge, evaluatorOptimizer, filters, full, guardOutboundContent, isAgentFallbackEligible, lastN, lastUser, pickTopTierAcrossTools, resolvePolicy, resolvePreferredModel, runFanOut, runStateFromJSON, runStateToJSON, serializeRunState, stripReasoning, stripSensitiveOutputs, stripToolCalls, summary };

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":[],"sources":["../src/index.ts"],"sourcesContent":["/**\n * `@graphorin/agent` - agent runtime for the Graphorin framework.\n *\n * The package owns:\n *\n * - The `createAgent({...})` factory that wires the typed\n *   `model -> tool calls -> model` loop, the streaming event\n *   surface, the steering / followUp queues, durable HITL\n *   approvals, multi-agent handoffs (`Agent.toTool`, the filter\n *   library, secrets isolation), the agent-level model fallback\n *   chain, the per-step compaction lifecycle, the per-tool\n *   preferred-model resolution, the structured progress-artifact\n *   APIs, and the lateral-leak defense layer.\n * - `runStateToJSON / runStateFromJSON` helpers for caller-managed\n *   durable HITL.\n * - The handoff filter library.\n * - The agent-step-level fan-out helpers (`runFanOut`,\n *   `evaluatorOptimizer`, the progress IO surface).\n * - Pure decision functions consulted by the loop\n *   (`isAgentFallbackEligible`, `resolvePreferredModel`).\n * - Lateral-leak primitives (`CausalityMonitor`,\n *   `MergeAgentSidewaysInjectionGuard` decision helpers,\n *   protocol-injection guard).\n *\n * The full documentation lives in the package `README.md`.\n *\n * @packageDocumentation\n */\n\n/** Canonical version constant. Mirrors the `package.json` version. */\nexport const VERSION = '0.6.0';\n\n// AG-2 / SDF-4: the canonical guardrail contract lives in\n// `@graphorin/security`; re-exported here for config ergonomics.\nexport type {\n  GuardrailContext,\n  GuardrailDefinition,\n  GuardrailResult,\n  InputGuardrail,\n  OutputGuardrail,\n} from '@graphorin/security/guardrails';\nexport {\n  AgentResolutionError,\n  AgentRuntimeError,\n  type AgentRuntimeErrorCode,\n  EvaluatorOptimizerConfigError,\n  InvalidAgentConfigError,\n  InvalidPreferredModelError,\n  MergeBlockedError,\n  MultipleHandoffsInStepError,\n  ProgressWriteError,\n  ProtocolInjectionRejectError,\n  ProviderMiddlewareOrderError,\n  RunStateMalformedError,\n  RunStateVersionUnsupportedError,\n  ToolNotFoundError,\n} from './errors/index.js';\nexport {\n  type EvaluatorCallable,\n  type EvaluatorOptimizerOptions,\n  type EvaluatorOptimizerOutcome,\n  type EvaluatorOutcome,\n  evaluatorOptimizer,\n  type GeneratorCallable,\n  type Rubric,\n} from './evaluator-optimizer/index.js';\nexport { createAgent } from './factory.js';\nexport {\n  type AgentFallbackEligibility,\n  type AgentFallbackPolicy,\n  type AgentFallbackReason,\n  isAgentFallbackEligible,\n} from './fallback/index.js';\nexport {\n  type ChildResult,\n  type FanOutOptions,\n  type FanOutResult,\n  type MergeStrategy,\n  type PerChildBudget,\n  runFanOut,\n} from './fanout/index.js';\nexport {\n  bySensitivity,\n  compose,\n  custom,\n  type DescribedFilter,\n  defaultHandoffFilter,\n  FILTER_KIND_CUSTOM,\n  filters,\n  full,\n  lastN,\n  lastUser,\n  stripReasoning,\n  stripSensitiveOutputs,\n  stripToolCalls,\n  summary,\n} from './filters/index.js';\nexport {\n  CausalityMonitor,\n  type CausalityMonitorCheck,\n  type CausalityMonitorConfig,\n  type CausalityMonitorStrictness,\n  type ChildTrustInput,\n  type ContentOriginKind,\n  computeSourceTrust,\n  DEFAULT_DENIAL_PATTERNS,\n  DEFAULT_MAX_CHAIN_DEPTH,\n  evaluateMerge,\n  type GuardOutcome,\n  guardOutboundContent,\n  type MergeBiasDecision,\n  type MergeGuardConfig,\n  type ProtocolBoundary,\n  type ProtocolEscapePolicy,\n  type ProtocolGuardConfig,\n  resolvePolicy,\n  type TrustClass,\n} from './lateral-leak/index.js';\nexport {\n  type PreferredModelResolution,\n  pickTopTierAcrossTools,\n  type ResolvePreferredModelInput,\n  resolvePreferredModel,\n} from './preferred-model/index.js';\nexport {\n  createProgressIO,\n  type ProgressIO,\n  type ProgressIOConfig,\n  type ProgressReadOptions,\n  type ProgressWriteOptions,\n} from './progress/index.js';\nexport {\n  addModelUsage,\n  aggregateUsageFromByModel,\n  completedToolCallsFromState,\n  createInitialRunState,\n  deserializeRunState,\n  RUN_STATE_SCHEMA_MAJOR_SUPPORTED,\n  RUN_STATE_SCHEMA_VERSION,\n  runStateFromJSON,\n  runStateToJSON,\n  type SerializedRunState,\n  type SerializeRunStateOptions,\n  serializeRunState,\n} from './run-state/index.js';\nexport {\n  createReplayProvider,\n  type ReplayProviderOptions,\n} from './testing/replay-provider.js';\nexport type {\n  AbortOptions,\n  Agent,\n  AgentCallOptions,\n  AgentCapability,\n  AgentConfig,\n  AgentInput,\n  AgentToToolOptions,\n  CompactionApiResult,\n  CompactOptions,\n  OutputSpec,\n  PostCompactionHook,\n  PrepareStepHook,\n  PrepareStepOverrides,\n  ResponseVerifier,\n  ResumeDirective,\n  SkillsRegistryLike,\n  VerifierResult,\n} from './types.js';\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8BA,MAAa,UAAU"}
+{"version":3,"file":"index.js","names":["VERSION: string","pkg.version"],"sources":["../src/index.ts"],"sourcesContent":["/**\n * `@graphorin/agent` - agent runtime for the Graphorin framework.\n *\n * The package owns:\n *\n * - The `createAgent({...})` factory that wires the typed\n *   `model -> tool calls -> model` loop, the streaming event\n *   surface, the steering / followUp queues, durable HITL\n *   approvals, multi-agent handoffs (`Agent.toTool`, the filter\n *   library, secrets isolation), the agent-level model fallback\n *   chain, the per-step compaction lifecycle, the per-tool\n *   preferred-model resolution, the structured progress-artifact\n *   APIs, and the lateral-leak defense layer.\n * - `runStateToJSON / runStateFromJSON` helpers for caller-managed\n *   durable HITL.\n * - The handoff filter library.\n * - The agent-step-level fan-out helpers (`runFanOut`,\n *   `evaluatorOptimizer`, the progress IO surface).\n * - Pure decision functions consulted by the loop\n *   (`isAgentFallbackEligible`, `resolvePreferredModel`).\n * - Lateral-leak primitives (`CausalityMonitor`,\n *   `MergeAgentSidewaysInjectionGuard` decision helpers,\n *   protocol-injection guard).\n *\n * The full documentation lives in the package `README.md`.\n *\n * @packageDocumentation\n */\n\n/** Canonical version constant, derived from `package.json` at build time. */\nimport pkg from '../package.json' with { type: 'json' };\n\nexport const VERSION: string = pkg.version;\n\n// AG-2 / SDF-4: the canonical guardrail contract lives in\n// `@graphorin/security`; re-exported here for config ergonomics.\nexport type {\n  GuardrailContext,\n  GuardrailDefinition,\n  GuardrailResult,\n  InputGuardrail,\n  OutputGuardrail,\n} from '@graphorin/security/guardrails';\nexport {\n  AgentResolutionError,\n  AgentRuntimeError,\n  type AgentRuntimeErrorCode,\n  EvaluatorOptimizerConfigError,\n  InvalidAgentConfigError,\n  InvalidPreferredModelError,\n  MergeBlockedError,\n  MultipleHandoffsInStepError,\n  ProgressWriteError,\n  ProtocolInjectionRejectError,\n  ProviderMiddlewareOrderError,\n  RunStateMalformedError,\n  RunStateVersionUnsupportedError,\n  ToolNotFoundError,\n} from './errors/index.js';\nexport {\n  type EvaluatorCallable,\n  type EvaluatorOptimizerOptions,\n  type EvaluatorOptimizerOutcome,\n  type EvaluatorOutcome,\n  evaluatorOptimizer,\n  type GeneratorCallable,\n  type Rubric,\n} from './evaluator-optimizer/index.js';\nexport { createAgent } from './factory.js';\nexport {\n  type AgentFallbackEligibility,\n  type AgentFallbackPolicy,\n  type AgentFallbackReason,\n  isAgentFallbackEligible,\n} from './fallback/index.js';\nexport {\n  type ChildResult,\n  type FanOutOptions,\n  type FanOutResult,\n  type MergeStrategy,\n  type PerChildBudget,\n  runFanOut,\n} from './fanout/index.js';\nexport {\n  bySensitivity,\n  compose,\n  custom,\n  type DescribedFilter,\n  defaultHandoffFilter,\n  FILTER_KIND_CUSTOM,\n  filters,\n  full,\n  lastN,\n  lastUser,\n  stripReasoning,\n  stripSensitiveOutputs,\n  stripToolCalls,\n  summary,\n} from './filters/index.js';\nexport {\n  CausalityMonitor,\n  type CausalityMonitorCheck,\n  type CausalityMonitorConfig,\n  type CausalityMonitorStrictness,\n  type ChildTrustInput,\n  type ContentOriginKind,\n  computeSourceTrust,\n  DEFAULT_DENIAL_PATTERNS,\n  DEFAULT_MAX_CHAIN_DEPTH,\n  evaluateMerge,\n  type GuardOutcome,\n  guardOutboundContent,\n  type MergeBiasDecision,\n  type MergeGuardConfig,\n  type ProtocolBoundary,\n  type ProtocolEscapePolicy,\n  type ProtocolGuardConfig,\n  resolvePolicy,\n  type TrustClass,\n} from './lateral-leak/index.js';\nexport {\n  type PreferredModelResolution,\n  pickTopTierAcrossTools,\n  type ResolvePreferredModelInput,\n  resolvePreferredModel,\n} from './preferred-model/index.js';\nexport {\n  createProgressIO,\n  type ProgressIO,\n  type ProgressIOConfig,\n  type ProgressReadOptions,\n  type ProgressWriteOptions,\n} from './progress/index.js';\nexport {\n  addModelUsage,\n  aggregateUsageFromByModel,\n  completedToolCallsFromState,\n  createInitialRunState,\n  deserializeRunState,\n  RUN_STATE_SCHEMA_MAJOR_SUPPORTED,\n  RUN_STATE_SCHEMA_VERSION,\n  runStateFromJSON,\n  runStateToJSON,\n  type SerializedRunState,\n  type SerializeRunStateOptions,\n  serializeRunState,\n} from './run-state/index.js';\nexport {\n  createReplayProvider,\n  type ReplayProviderOptions,\n} from './testing/replay-provider.js';\nexport type {\n  AbortOptions,\n  Agent,\n  AgentCallOptions,\n  AgentCapability,\n  AgentConfig,\n  AgentInput,\n  AgentToToolOptions,\n  CompactionApiResult,\n  CompactOptions,\n  OutputSpec,\n  PostCompactionHook,\n  PrepareStepHook,\n  PrepareStepOverrides,\n  ResponseVerifier,\n  ResumeDirective,\n  SkillsRegistryLike,\n  VerifierResult,\n} from './types.js';\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgCA,MAAaA,UAAkBC"}

package/dist/package.js

@@ -0,0 +1,6 @@
+//#region package.json
+var version = "0.6.1";
+
+//#endregion
+export { version };
+//# sourceMappingURL=package.js.map

package/dist/package.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"package.js","names":[],"sources":["../package.json"],"sourcesContent":["{\n  \"name\": \"@graphorin/agent\",\n  \"version\": \"0.6.1\",\n  \"description\": \"Agent runtime for the Graphorin framework: createAgent({...}) factory, the typed model -> tool calls -> model loop, the AgentEvent<TOutput> discriminated event stream, steering / followUp queues, durable HITL approvals via runStateToJSON / runStateFromJSON, multi-agent handoffs (Agent.toTool, filter library, secrets isolation), agent-level model fallback chain, intra-loop reasoning preservation, post-compaction hook lifecycle, agent-step-level fan-out (Agent.fanOut + evaluatorOptimizer + progress artifacts), per-tool model-tier hint resolution, lateral-leak defense layer (CausalityMonitor + MergeAgentSidewaysInjectionGuard + protocol-guard), inbound-content sanitization preamble injection, and AbortSignal-aware hard-kill / drain cancellation. Created and maintained by Oleksiy Stepurenko.\",\n  \"license\": \"MIT\",\n  \"author\": \"Oleksiy Stepurenko\",\n  \"homepage\": \"https://github.com/o-stepper/graphorin/tree/main/packages/agent\",\n  \"repository\": {\n    \"type\": \"git\",\n    \"url\": \"git+https://github.com/o-stepper/graphorin.git\",\n    \"directory\": \"packages/agent\"\n  },\n  \"bugs\": {\n    \"url\": \"https://github.com/o-stepper/graphorin/issues\"\n  },\n  \"keywords\": [\n    \"graphorin\",\n    \"ai\",\n    \"agents\",\n    \"framework\",\n    \"agent-runtime\",\n    \"agent-loop\",\n    \"streaming\",\n    \"multi-agent\",\n    \"handoff\",\n    \"hitl\",\n    \"approval\",\n    \"fanout\",\n    \"evaluator-optimizer\",\n    \"fallback-chain\",\n    \"context-compaction\",\n    \"lateral-leak\",\n    \"causality-monitor\"\n  ],\n  \"type\": \"module\",\n  \"engines\": {\n    \"node\": \">=22.0.0\"\n  },\n  \"main\": \"./dist/index.js\",\n  \"module\": \"./dist/index.js\",\n  \"types\": \"./dist/index.d.ts\",\n  \"exports\": {\n    \".\": {\n      \"types\": \"./dist/index.d.ts\",\n      \"import\": \"./dist/index.js\"\n    },\n    \"./factory\": {\n      \"types\": \"./dist/factory.d.ts\",\n      \"import\": \"./dist/factory.js\"\n    },\n    \"./run-state\": {\n      \"types\": \"./dist/run-state/index.d.ts\",\n      \"import\": \"./dist/run-state/index.js\"\n    },\n    \"./filters\": {\n      \"types\": \"./dist/filters/index.d.ts\",\n      \"import\": \"./dist/filters/index.js\"\n    },\n    \"./fallback\": {\n      \"types\": \"./dist/fallback/index.d.ts\",\n      \"import\": \"./dist/fallback/index.js\"\n    },\n    \"./preferred-model\": {\n      \"types\": \"./dist/preferred-model/index.d.ts\",\n      \"import\": \"./dist/preferred-model/index.js\"\n    },\n    \"./fanout\": {\n      \"types\": \"./dist/fanout/index.d.ts\",\n      \"import\": \"./dist/fanout/index.js\"\n    },\n    \"./evaluator-optimizer\": {\n      \"types\": \"./dist/evaluator-optimizer/index.d.ts\",\n      \"import\": \"./dist/evaluator-optimizer/index.js\"\n    },\n    \"./progress\": {\n      \"types\": \"./dist/progress/index.d.ts\",\n      \"import\": \"./dist/progress/index.js\"\n    },\n    \"./lateral-leak\": {\n      \"types\": \"./dist/lateral-leak/index.d.ts\",\n      \"import\": \"./dist/lateral-leak/index.js\"\n    },\n    \"./errors\": {\n      \"types\": \"./dist/errors/index.d.ts\",\n      \"import\": \"./dist/errors/index.js\"\n    },\n    \"./package.json\": \"./package.json\"\n  },\n  \"files\": [\n    \"dist\",\n    \"README.md\",\n    \"CHANGELOG.md\",\n    \"LICENSE\"\n  ],\n  \"scripts\": {\n    \"build\": \"tsdown\",\n    \"typecheck\": \"tsc --noEmit && tsc -p tsconfig.tests.json\",\n    \"test\": \"vitest run\",\n    \"lint\": \"biome check .\",\n    \"clean\": \"rimraf dist .turbo *.tsbuildinfo\"\n  },\n  \"dependencies\": {\n    \"@graphorin/core\": \"workspace:*\",\n    \"@graphorin/memory\": \"workspace:*\",\n    \"@graphorin/observability\": \"workspace:*\",\n    \"@graphorin/provider\": \"workspace:*\",\n    \"@graphorin/security\": \"workspace:*\",\n    \"@graphorin/skills\": \"workspace:*\",\n    \"@graphorin/tools\": \"workspace:*\"\n  },\n  \"publishConfig\": {\n    \"access\": \"public\",\n    \"provenance\": true\n  },\n  \"devDependencies\": {\n    \"zod\": \"^3.25.0\"\n  }\n}\n"],"mappings":";cAEa"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@graphorin/agent",
-  "version": "0.6.0",
+  "version": "0.6.1",
   "description": "Agent runtime for the Graphorin framework: createAgent({...}) factory, the typed model -> tool calls -> model loop, the AgentEvent<TOutput> discriminated event stream, steering / followUp queues, durable HITL approvals via runStateToJSON / runStateFromJSON, multi-agent handoffs (Agent.toTool, filter library, secrets isolation), agent-level model fallback chain, intra-loop reasoning preservation, post-compaction hook lifecycle, agent-step-level fan-out (Agent.fanOut + evaluatorOptimizer + progress artifacts), per-tool model-tier hint resolution, lateral-leak defense layer (CausalityMonitor + MergeAgentSidewaysInjectionGuard + protocol-guard), inbound-content sanitization preamble injection, and AbortSignal-aware hard-kill / drain cancellation. Created and maintained by Oleksiy Stepurenko.",
   "license": "MIT",
   "author": "Oleksiy Stepurenko",
@@ -93,13 +93,13 @@
     "LICENSE"
   ],
   "dependencies": {
-    "@graphorin/core": "0.6.0",
-    "@graphorin/memory": "0.6.0",
-    "@graphorin/observability": "0.6.0",
-    "@graphorin/provider": "0.6.0",
-    "@graphorin/security": "0.6.0",
-    "@graphorin/skills": "0.6.0",
-    "@graphorin/tools": "0.6.0"
+    "@graphorin/core": "0.6.1",
+    "@graphorin/memory": "0.6.1",
+    "@graphorin/observability": "0.6.1",
+    "@graphorin/provider": "0.6.1",
+    "@graphorin/security": "0.6.1",
+    "@graphorin/skills": "0.6.1",
+    "@graphorin/tools": "0.6.1"
   },
   "publishConfig": {
     "access": "public",