promptopskit 0.5.0 → 0.6.2

package/dist/index.cjs

@@ -72,7 +72,7 @@ __export(src_exports, {
   withUsageTapCall: () => withUsageTapCall
 });
 module.exports = __toCommonJS(src_exports);
-var import_node_path4 = require("path");
+var import_node_path5 = require("path");
 
 // src/renderer/interpolate.ts
 var VARIABLE_RE = /\{\{\s*([a-zA-Z_][a-zA-Z0-9_]*)\s*\}\}/g;
@@ -80,12 +80,13 @@ var ESCAPED_OPEN = /\\\{\\\{/g;
 var ESCAPE_PLACEHOLDER = "\0ESCAPED_OPEN\0";
 function interpolate(template, variables, options = {}) {
   const { strict = false } = options;
+  const optionalVariables = new Set(options.optionalVariables ?? []);
   let result = template.replace(ESCAPED_OPEN, ESCAPE_PLACEHOLDER);
   result = result.replace(VARIABLE_RE, (match, name) => {
     if (name in variables) {
       return variables[name];
     }
-    if (strict) {
+    if (strict && !optionalVariables.has(name)) {
       throw new Error(`Missing required variable: "${name}"`);
     }
     return match;
@@ -103,159 +104,463 @@ function extractVariables(template) {
   return [...vars];
 }
 
-// src/renderer/renderer.ts
-function renderSections(asset, options = {}) {
-  const { variables = {}, strict = false } = options;
-  const result = {};
-  if (asset.sections.system_instructions) {
-    result.system_instructions = interpolate(
-      asset.sections.system_instructions,
-      variables,
-      { strict }
-    );
-  }
-  if (asset.sections.prompt_template) {
-    result.prompt_template = interpolate(
-      asset.sections.prompt_template,
-      variables,
-      { strict }
-    );
-  }
-  return result;
+// src/context.ts
+var textEncoder = new TextEncoder();
+var REJECT_SECRETS_PATTERN = "(secret|api[_-]?key|password)";
+var REJECT_SECRETS_FLAGS = "i";
+function getContextInputs(asset) {
+  return (asset.context?.inputs ?? []).map(normalizeContextInput);
 }
-
-// src/overrides/apply-overrides.ts
-function applyOverrides(asset, options = {}) {
-  let result = { ...asset };
-  if (options.environment && result.environments?.[options.environment]) {
-    result = mergeOverride(result, result.environments[options.environment]);
+function normalizeContextInput(input) {
+  if (typeof input === "string") {
+    return { name: input };
   }
-  if (options.tier && result.tiers?.[options.tier]) {
-    result = mergeOverride(result, result.tiers[options.tier]);
+  return {
+    name: input.name,
+    optional: input.optional,
+    warnings: input.warnings,
+    max_size: input.max_size,
+    trim: input.trim,
+    allow_regex: normalizeContextRegex(input.allow_regex),
+    deny_regex: normalizeContextRegex(input.deny_regex),
+    non_empty: normalizeBuiltInValidator(input.non_empty),
+    reject_secrets: normalizeBuiltInValidator(input.reject_secrets)
+  };
+}
+function areContextInputWarningsEnabled(input) {
+  return input.warnings !== false;
+}
+function normalizeContextRegex(value) {
+  if (value === void 0) {
+    return void 0;
   }
-  if (options.runtime) {
-    result = mergeOverride(result, options.runtime);
+  if (typeof value === "string") {
+    const literal = parseRegexLiteral(value);
+    if (value.startsWith("/") && !literal) {
+      return {
+        pattern: value,
+        flags: "",
+        raw: value,
+        invalidLiteral: true
+      };
+    }
+    return {
+      pattern: literal?.pattern ?? value,
+      flags: literal?.flags ?? "",
+      raw: value
+    };
   }
-  return result;
+  return {
+    pattern: value.pattern,
+    flags: value.flags ?? "",
+    raw: JSON.stringify(value),
+    returnMessage: value.return_message
+  };
 }
-function mergeOverride(base, override) {
-  const result = { ...base };
-  if (override.model !== void 0) result.model = override.model;
-  if (override.fallback_models !== void 0) result.fallback_models = override.fallback_models;
-  if (override.tools !== void 0) result.tools = override.tools;
-  if (override.reasoning !== void 0) {
-    result.reasoning = { ...result.reasoning, ...override.reasoning };
+function normalizeBuiltInValidator(value) {
+  if (value === void 0 || value === false) {
+    return void 0;
   }
-  if (override.sampling !== void 0) {
-    result.sampling = { ...result.sampling, ...override.sampling };
+  if (value === true) {
+    return {};
   }
-  if (override.response !== void 0) {
-    result.response = { ...result.response, ...override.response };
+  return {
+    returnMessage: value.return_message
+  };
+}
+function parseRegexLiteral(value) {
+  if (!value.startsWith("/")) {
+    return void 0;
   }
-  if (override.cache !== void 0) {
-    result.cache = {
-      ...result.cache,
-      ...override.cache,
-      openai: mergeRecordBlock(result.cache?.openai, override.cache.openai),
-      anthropic: mergeRecordBlock(result.cache?.anthropic, override.cache.anthropic),
-      gemini: mergeRecordBlock(result.cache?.gemini, override.cache.gemini),
-      google: mergeRecordBlock(result.cache?.google, override.cache.google)
+  for (let index = value.length - 1; index > 0; index -= 1) {
+    if (value[index] !== "/") {
+      continue;
+    }
+    let backslashCount = 0;
+    for (let cursor = index - 1; cursor >= 0 && value[cursor] === "\\"; cursor -= 1) {
+      backslashCount += 1;
+    }
+    if (backslashCount % 2 === 1) {
+      continue;
+    }
+    return {
+      pattern: value.slice(1, index),
+      flags: value.slice(index + 1)
     };
   }
-  if (override.raw !== void 0) {
-    result.raw = {
-      ...result.raw,
-      ...override.raw,
-      openai: mergeRecordBlock(result.raw?.openai, override.raw.openai),
-      "openai-responses": mergeRecordBlock(result.raw?.["openai-responses"], override.raw["openai-responses"]),
-      openai_responses: mergeRecordBlock(result.raw?.openai_responses, override.raw.openai_responses),
-      anthropic: mergeRecordBlock(result.raw?.anthropic, override.raw.anthropic),
-      gemini: mergeRecordBlock(result.raw?.gemini, override.raw.gemini),
-      google: mergeRecordBlock(result.raw?.google, override.raw.google),
-      openrouter: mergeRecordBlock(result.raw?.openrouter, override.raw.openrouter),
-      llmasaservice: mergeRecordBlock(result.raw?.llmasaservice, override.raw.llmasaservice)
-    };
+  return void 0;
+}
+function formatInvalidContextRegexMessage(details) {
+  return [
+    `Invalid context regex for prompt "${details.promptId}"`,
+    `variable "${details.variable}"`,
+    `field "${details.field}"`,
+    `value ${JSON.stringify(details.raw)}: ${details.reason}`
+  ].join(", ");
+}
+function compileContextRegex(regex, details) {
+  if (regex.invalidLiteral) {
+    throw new Error(
+      `POK013: ${formatInvalidContextRegexMessage({
+        ...details,
+        raw: regex.raw,
+        reason: "Malformed regex literal. Use /pattern/flags or { pattern, flags }."
+      })}`
+    );
   }
-  if (override.provider_options !== void 0) {
-    result.provider_options = {
-      ...result.provider_options,
-      ...override.provider_options,
-      anthropic: {
-        ...result.provider_options?.anthropic,
-        ...override.provider_options.anthropic
-      },
-      gemini: {
-        ...result.provider_options?.gemini,
-        ...override.provider_options.gemini
-      },
-      openrouter: {
-        ...result.provider_options?.openrouter,
-        ...override.provider_options.openrouter
-      },
-      llmasaservice: {
-        ...result.provider_options?.llmasaservice,
-        ...override.provider_options.llmasaservice
-      }
-    };
+  try {
+    return new RegExp(regex.pattern, regex.flags);
+  } catch (error) {
+    const reason = error instanceof Error ? error.message : String(error);
+    throw new Error(`POK013: ${formatInvalidContextRegexMessage({ ...details, raw: regex.raw, reason })}`);
   }
-  return result;
 }
-function mergeRecordBlock(base, override) {
-  if (override === void 0) return base;
-  return { ...base, ...override };
+function getRejectSecretsRegex() {
+  return {
+    pattern: REJECT_SECRETS_PATTERN,
+    flags: REJECT_SECRETS_FLAGS,
+    raw: JSON.stringify({ pattern: REJECT_SECRETS_PATTERN, flags: REJECT_SECRETS_FLAGS })
+  };
 }
-
-// src/providers/resolve-asset.ts
-function resolveAssetForProvider(asset, runtime = {}) {
-  if (!runtime.environment && !runtime.tier && !runtime.runtime) {
-    return asset;
+function isTrimEnabled(mode) {
+  return mode === true || mode === "start" || mode === "end" || mode === "both";
+}
+function normalizeTrimMode(mode) {
+  if (mode === "start") {
+    return "start";
   }
-  return applyOverrides(asset, {
-    environment: runtime.environment,
-    tier: runtime.tier,
-    runtime: runtime.runtime
-  });
+  return "end";
 }
-
-// src/prompt-resolution.ts
-var import_promises3 = require("fs/promises");
-var import_node_fs2 = require("fs");
-var import_node_path3 = require("path");
-
-// src/cache.ts
-var import_node_fs = require("fs");
-var PromptCache = class {
-  cache = /* @__PURE__ */ new Map();
-  maxSize;
-  constructor(maxSize = 100) {
-    this.maxSize = maxSize;
+function trimToMaxSize(value, maxSize, mode) {
+  const measured = measureContextValueSize(value);
+  if (measured <= maxSize) {
+    return value;
   }
-  get(filePath) {
-    const entry = this.cache.get(filePath);
-    if (!entry) return void 0;
-    try {
-      const stat = (0, import_node_fs.statSync)(filePath);
-      if (stat.mtimeMs !== entry.mtime) {
-        this.cache.delete(filePath);
-        return void 0;
+  const characters = Array.from(value);
+  const normalizedMode = normalizeTrimMode(mode);
+  if (normalizedMode === "start") {
+    let collected2 = "";
+    let size2 = 0;
+    for (let i = characters.length - 1; i >= 0; i -= 1) {
+      const next = characters[i];
+      const charSize = measureContextValueSize(next);
+      if (size2 + charSize > maxSize) {
+        break;
       }
-    } catch {
-      this.cache.delete(filePath);
-      return void 0;
+      collected2 = next + collected2;
+      size2 += charSize;
     }
-    this.cache.delete(filePath);
-    this.cache.set(filePath, entry);
-    return entry.value;
+    return collected2;
   }
-  set(filePath, value) {
-    try {
-      const stat = (0, import_node_fs.statSync)(filePath);
-      if (this.cache.has(filePath)) {
-        this.cache.delete(filePath);
-      } else if (this.cache.size >= this.maxSize) {
-        const oldest = this.cache.keys().next().value;
-        if (oldest) this.cache.delete(oldest);
-      }
+  let collected = "";
+  let size = 0;
+  for (const char of characters) {
+    const charSize = measureContextValueSize(char);
+    if (size + charSize > maxSize) {
+      break;
+    }
+    collected += char;
+    size += charSize;
+  }
+  return collected;
+}
+function sanitizeContextVariables(asset, variables = {}, options = {}) {
+  const { onContextOverflow } = options;
+  const sanitized = { ...variables };
+  for (const input of getContextInputs(asset)) {
+    const value = sanitized[input.name];
+    if (value === void 0) {
+      continue;
+    }
+    let candidate = value;
+    if (input.max_size !== void 0) {
+      const actualSize = measureContextValueSize(candidate);
+      if (actualSize > input.max_size && onContextOverflow) {
+        candidate = onContextOverflow({
+          promptId: asset.id,
+          variable: input.name,
+          value: candidate,
+          maxSize: input.max_size,
+          actualSize
+        });
+      }
+    }
+    if (isTrimEnabled(input.trim) && input.max_size !== void 0) {
+      candidate = trimToMaxSize(candidate, input.max_size, input.trim);
+    }
+    sanitized[input.name] = candidate;
+    if (input.allow_regex) {
+      const candidate2 = sanitized[input.name];
+      const matcher = compileContextRegex(input.allow_regex, {
+        promptId: asset.id,
+        variable: input.name,
+        field: "allow_regex"
+      });
+      if (!matcher.test(candidate2)) {
+        if (input.allow_regex.returnMessage) {
+          return {
+            variables: sanitized,
+            shortCircuit: {
+              returnMessage: input.allow_regex.returnMessage,
+              code: "POK031",
+              variable: input.name,
+              field: "allow_regex"
+            }
+          };
+        }
+        throw new Error(
+          `POK031: Context variable "${input.name}" failed allow_regex validation for prompt "${asset.id}".`
+        );
+      }
+    }
+    if (input.deny_regex) {
+      const candidate2 = sanitized[input.name];
+      const matcher = compileContextRegex(input.deny_regex, {
+        promptId: asset.id,
+        variable: input.name,
+        field: "deny_regex"
+      });
+      if (matcher.test(candidate2)) {
+        if (input.deny_regex.returnMessage) {
+          return {
+            variables: sanitized,
+            shortCircuit: {
+              returnMessage: input.deny_regex.returnMessage,
+              code: "POK032",
+              variable: input.name,
+              field: "deny_regex"
+            }
+          };
+        }
+        throw new Error(
+          `POK032: Context variable "${input.name}" matched deny_regex for prompt "${asset.id}".`
+        );
+      }
+    }
+    if (input.non_empty && candidate.trim().length === 0) {
+      if (input.non_empty.returnMessage) {
+        return {
+          variables: sanitized,
+          shortCircuit: {
+            returnMessage: input.non_empty.returnMessage,
+            code: "POK033",
+            variable: input.name,
+            field: "non_empty"
+          }
+        };
+      }
+      throw new Error(
+        `POK033: Context variable "${input.name}" failed non_empty validation for prompt "${asset.id}".`
+      );
+    }
+    if (input.reject_secrets) {
+      const matcher = compileContextRegex(getRejectSecretsRegex(), {
+        promptId: asset.id,
+        variable: input.name,
+        field: "reject_secrets"
+      });
+      if (matcher.test(candidate)) {
+        if (input.reject_secrets.returnMessage) {
+          return {
+            variables: sanitized,
+            shortCircuit: {
+              returnMessage: input.reject_secrets.returnMessage,
+              code: "POK034",
+              variable: input.name,
+              field: "reject_secrets"
+            }
+          };
+        }
+        throw new Error(
+          `POK034: Context variable "${input.name}" matched reject_secrets validation for prompt "${asset.id}".`
+        );
+      }
+    }
+  }
+  return { variables: sanitized };
+}
+function measureContextValueSize(value) {
+  return textEncoder.encode(value).length;
+}
+function collectContextSizeWarnings(asset, variables = {}) {
+  const warnings = [];
+  for (const input of getContextInputs(asset)) {
+    if (!areContextInputWarningsEnabled(input)) {
+      continue;
+    }
+    if (input.max_size === void 0) {
+      continue;
+    }
+    const value = variables[input.name];
+    if (value === void 0) {
+      continue;
+    }
+    const actualSize = measureContextValueSize(value);
+    if (actualSize > input.max_size) {
+      warnings.push({
+        variable: input.name,
+        maxSize: input.max_size,
+        actualSize
+      });
+    }
+  }
+  return warnings;
+}
+
+// src/renderer/renderer.ts
+function renderSections(asset, options = {}) {
+  const { variables = {}, strict = false } = options;
+  const optionalVariables = getContextInputs(asset).filter((input) => input.optional === true).map((input) => input.name);
+  const result = {};
+  if (asset.sections.system_instructions) {
+    result.system_instructions = interpolate(
+      asset.sections.system_instructions,
+      variables,
+      { strict, optionalVariables }
+    );
+  }
+  if (asset.sections.prompt_template) {
+    result.prompt_template = interpolate(
+      asset.sections.prompt_template,
+      variables,
+      { strict, optionalVariables }
+    );
+  }
+  return result;
+}
+
+// src/overrides/apply-overrides.ts
+function applyOverrides(asset, options = {}) {
+  let result = { ...asset };
+  if (options.environment && result.environments?.[options.environment]) {
+    result = mergeOverride(result, result.environments[options.environment]);
+  }
+  if (options.tier && result.tiers?.[options.tier]) {
+    result = mergeOverride(result, result.tiers[options.tier]);
+  }
+  if (options.runtime) {
+    result = mergeOverride(result, options.runtime);
+  }
+  return result;
+}
+function mergeOverride(base, override) {
+  const result = { ...base };
+  if (override.model !== void 0) result.model = override.model;
+  if (override.fallback_models !== void 0) result.fallback_models = override.fallback_models;
+  if (override.tools !== void 0) result.tools = override.tools;
+  if (override.reasoning !== void 0) {
+    result.reasoning = { ...result.reasoning, ...override.reasoning };
+  }
+  if (override.sampling !== void 0) {
+    result.sampling = { ...result.sampling, ...override.sampling };
+  }
+  if (override.response !== void 0) {
+    result.response = { ...result.response, ...override.response };
+  }
+  if (override.cache !== void 0) {
+    result.cache = {
+      ...result.cache,
+      ...override.cache,
+      openai: mergeRecordBlock(result.cache?.openai, override.cache.openai),
+      anthropic: mergeRecordBlock(result.cache?.anthropic, override.cache.anthropic),
+      gemini: mergeRecordBlock(result.cache?.gemini, override.cache.gemini),
+      google: mergeRecordBlock(result.cache?.google, override.cache.google)
+    };
+  }
+  if (override.raw !== void 0) {
+    result.raw = {
+      ...result.raw,
+      ...override.raw,
+      openai: mergeRecordBlock(result.raw?.openai, override.raw.openai),
+      "openai-responses": mergeRecordBlock(result.raw?.["openai-responses"], override.raw["openai-responses"]),
+      openai_responses: mergeRecordBlock(result.raw?.openai_responses, override.raw.openai_responses),
+      anthropic: mergeRecordBlock(result.raw?.anthropic, override.raw.anthropic),
+      gemini: mergeRecordBlock(result.raw?.gemini, override.raw.gemini),
+      google: mergeRecordBlock(result.raw?.google, override.raw.google),
+      openrouter: mergeRecordBlock(result.raw?.openrouter, override.raw.openrouter),
+      llmasaservice: mergeRecordBlock(result.raw?.llmasaservice, override.raw.llmasaservice)
+    };
+  }
+  if (override.provider_options !== void 0) {
+    result.provider_options = {
+      ...result.provider_options,
+      ...override.provider_options,
+      anthropic: {
+        ...result.provider_options?.anthropic,
+        ...override.provider_options.anthropic
+      },
+      gemini: {
+        ...result.provider_options?.gemini,
+        ...override.provider_options.gemini
+      },
+      openrouter: {
+        ...result.provider_options?.openrouter,
+        ...override.provider_options.openrouter
+      },
+      llmasaservice: {
+        ...result.provider_options?.llmasaservice,
+        ...override.provider_options.llmasaservice
+      }
+    };
+  }
+  return result;
+}
+function mergeRecordBlock(base, override) {
+  if (override === void 0) return base;
+  return { ...base, ...override };
+}
+
+// src/providers/resolve-asset.ts
+function resolveAssetForProvider(asset, runtime = {}) {
+  if (!runtime.environment && !runtime.tier && !runtime.runtime) {
+    return asset;
+  }
+  return applyOverrides(asset, {
+    environment: runtime.environment,
+    tier: runtime.tier,
+    runtime: runtime.runtime
+  });
+}
+
+// src/prompt-resolution.ts
+var import_promises4 = require("fs/promises");
+var import_node_fs2 = require("fs");
+var import_node_path4 = require("path");
+
+// src/cache.ts
+var import_node_fs = require("fs");
+var PromptCache = class {
+  cache = /* @__PURE__ */ new Map();
+  maxSize;
+  constructor(maxSize = 100) {
+    this.maxSize = maxSize;
+  }
+  get(filePath) {
+    const entry = this.cache.get(filePath);
+    if (!entry) return void 0;
+    try {
+      const stat = (0, import_node_fs.statSync)(filePath);
+      if (stat.mtimeMs !== entry.mtime) {
+        this.cache.delete(filePath);
+        return void 0;
+      }
+    } catch {
+      this.cache.delete(filePath);
+      return void 0;
+    }
+    this.cache.delete(filePath);
+    this.cache.set(filePath, entry);
+    return entry.value;
+  }
+  set(filePath, value) {
+    try {
+      const stat = (0, import_node_fs.statSync)(filePath);
+      if (this.cache.has(filePath)) {
+        this.cache.delete(filePath);
+      } else if (this.cache.size >= this.maxSize) {
+        const oldest = this.cache.keys().next().value;
+        if (oldest) this.cache.delete(oldest);
+      }
       this.cache.set(filePath, { value, mtime: stat.mtimeMs });
     } catch {
     }
@@ -269,8 +574,8 @@ var PromptCache = class {
 };
 
 // src/composition/resolve-includes.ts
-var import_promises2 = require("fs/promises");
-var import_node_path2 = require("path");
+var import_promises3 = require("fs/promises");
+var import_node_path3 = require("path");
 
 // src/parser/parser.ts
 var import_gray_matter = __toESM(require("gray-matter"), 1);
@@ -306,10 +611,26 @@ var ResponseSchema = import_zod.z.object({
   format: import_zod.z.enum(["text", "json", "markdown"]).optional(),
   stream: import_zod.z.boolean().optional(),
   schema: import_zod.z.record(import_zod.z.unknown()).optional(),
+  schema_ref: import_zod.z.string().min(1).optional(),
+  schema_source: import_zod.z.object({
+    mode: import_zod.z.enum(["inline", "schema_ref_json", "schema_ref_zod_module"]).optional(),
+    ref: import_zod.z.string().optional(),
+    resolved_path: import_zod.z.string().optional(),
+    hash: import_zod.z.string().optional()
+  }).optional(),
   schema_name: import_zod.z.string().optional(),
   schema_description: import_zod.z.string().optional(),
   schema_strict: import_zod.z.boolean().optional()
 });
+var ResponseSchemaWithValidation = ResponseSchema.superRefine((value, ctx) => {
+  if (value.schema !== void 0 && value.schema_ref !== void 0) {
+    ctx.addIssue({
+      code: import_zod.z.ZodIssueCode.custom,
+      message: "response.schema and response.schema_ref are mutually exclusive",
+      path: ["schema_ref"]
+    });
+  }
+});
 var AnthropicProviderOptionsSchema = import_zod.z.object({
   top_k: import_zod.z.number().int().min(0).optional(),
   tool_choice: import_zod.z.record(import_zod.z.unknown()).optional(),
@@ -401,6 +722,8 @@ var ContextBuiltInValidatorSchema = import_zod.z.union([
 ]);
 var ContextInputDefinitionObjectSchema = import_zod.z.object({
   name: import_zod.z.string(),
+  optional: import_zod.z.boolean().optional(),
+  warnings: import_zod.z.boolean().optional(),
   max_size: import_zod.z.number().int().positive().optional(),
   trim: import_zod.z.union([import_zod.z.boolean(), import_zod.z.enum(["start", "end", "both"])]).optional(),
   allow_regex: ContextRegexSchema.optional(),
@@ -430,7 +753,7 @@ var PromptAssetOverridesSchema = import_zod.z.object({
   fallback_models: import_zod.z.array(import_zod.z.string()).optional(),
   reasoning: ReasoningSchema.optional(),
   sampling: SamplingSchema.optional(),
-  response: ResponseSchema.optional(),
+  response: ResponseSchemaWithValidation.optional(),
   cache: CacheSchema.optional(),
   raw: RawProviderBodySchema.optional(),
   tools: import_zod.z.array(ToolRefSchema).optional(),
@@ -448,7 +771,19 @@ var SectionsSchema = import_zod.z.object({
 var PromptDefaultsSchema = import_zod.z.object({
   provider: import_zod.z.enum(["openai", "openai-responses", "anthropic", "google", "gemini", "openrouter", "llmasaservice", "any"]).optional(),
   model: import_zod.z.string().optional(),
+  fallback_models: import_zod.z.array(import_zod.z.string()).optional(),
+  reasoning: ReasoningSchema.optional(),
+  sampling: SamplingSchema.optional(),
+  response: ResponseSchema.optional(),
   cache: CacheSchema.optional(),
+  raw: RawProviderBodySchema.optional(),
+  tools: import_zod.z.array(ToolRefSchema).optional(),
+  provider_options: ProviderOptionsSchema.optional(),
+  mcp: MCPSchema.optional(),
+  context: ContextSchema.optional(),
+  includes: import_zod.z.array(import_zod.z.string()).optional(),
+  environments: import_zod.z.record(PromptAssetOverridesSchema).optional(),
+  tiers: import_zod.z.record(PromptAssetOverridesSchema).optional(),
   metadata: MetadataSchema.optional(),
   sections: import_zod.z.object({
     system_instructions: import_zod.z.string().optional()
@@ -463,7 +798,7 @@ var PromptAssetSchema = import_zod.z.object({
   fallback_models: import_zod.z.array(import_zod.z.string()).optional(),
   reasoning: ReasoningSchema.optional(),
   sampling: SamplingSchema.optional(),
-  response: ResponseSchema.optional(),
+  response: ResponseSchemaWithValidation.optional(),
   cache: CacheSchema.optional(),
   raw: RawProviderBodySchema.optional(),
   tools: import_zod.z.array(ToolRefSchema).optional(),
@@ -640,567 +975,503 @@ function parsePrompt(content, filePath) {
   const { data: frontMatter, content: body } = (0, import_gray_matter.default)(content);
   const sections = extractSections(body);
   const raw = {
-    ...frontMatter,
-    sections,
-    source: filePath ? { file_path: filePath } : void 0
-  };
-  const asset = PromptAssetSchema.parse(raw);
-  return {
-    asset,
-    raw: {
-      frontMatter,
-      body
-    }
-  };
-}
-
-// src/parser/loader.ts
-var import_promises = require("fs/promises");
-var import_node_path = require("path");
-var import_gray_matter2 = __toESM(require("gray-matter"), 1);
-var DEFAULTS_FILE_NAME = "defaults.md";
-async function loadPromptFile(filePath, options = {}) {
-  const content = await (0, import_promises.readFile)(filePath, "utf-8");
-  const parsed = parsePrompt(content, filePath);
-  const root = options.defaultsRoot ?? (0, import_node_path.dirname)(filePath);
-  const defaults = await loadDefaultsForPath(filePath, root);
-  const asset = applyDefaults(parsed.asset, defaults);
-  return {
-    ...parsed,
-    asset
-  };
-}
-async function loadDefaultsForPath(filePath, defaultsRoot) {
-  const directories = getDirectoriesToCheck(filePath, defaultsRoot);
-  let merged = {};
-  for (const dir of directories) {
-    const defaultsPath = (0, import_node_path.join)(dir, DEFAULTS_FILE_NAME);
-    try {
-      const defaultsContent = await (0, import_promises.readFile)(defaultsPath, "utf-8");
-      const defaults = parseDefaults(defaultsContent);
-      merged = mergeDefaults(merged, defaults);
-    } catch (error) {
-      if (error.code !== "ENOENT") {
-        throw error;
-      }
-    }
-  }
-  return merged;
-}
-function getDirectoriesToCheck(filePath, defaultsRoot) {
-  const dirs = [];
-  let current = (0, import_node_path.resolve)((0, import_node_path.dirname)(filePath));
-  const boundary = defaultsRoot ? (0, import_node_path.resolve)(defaultsRoot) : void 0;
-  while (true) {
-    dirs.unshift(current);
-    if (boundary && current === boundary || current === (0, import_node_path.dirname)(current)) {
-      break;
-    }
-    current = (0, import_node_path.dirname)(current);
-  }
-  return dirs;
-}
-function parseDefaults(content) {
-  const { data: frontMatter, content: body } = (0, import_gray_matter2.default)(content);
-  const sections = extractSections(body);
-  return PromptDefaultsSchema.parse({
-    ...frontMatter,
-    sections: {
-      system_instructions: sections.system_instructions
-    }
-  });
-}
-function mergeDefaults(base, local) {
-  return {
-    provider: local.provider ?? base.provider,
-    model: local.model ?? base.model,
-    cache: mergeCache(base.cache, local.cache),
-    metadata: {
-      ...base.metadata ?? {},
-      ...local.metadata ?? {}
-    },
-    sections: {
-      ...base.sections ?? {},
-      ...local.sections ?? {}
-    }
-  };
-}
-function applyDefaults(asset, defaults) {
-  const cache = mergeCache(defaults.cache, asset.cache);
-  const hasDefaultMetadata = defaults.metadata && Object.keys(defaults.metadata).length > 0;
-  const hasDefaultSystem = !!defaults.sections?.system_instructions;
-  const hasDefaultScalars = defaults.provider !== void 0 || defaults.model !== void 0;
-  const hasDefaultCache = cache !== void 0;
-  if (!hasDefaultMetadata && !hasDefaultSystem && !hasDefaultScalars && !hasDefaultCache) {
-    return asset;
-  }
-  const mergedMetadata = {
-    ...defaults.metadata ?? {},
-    ...asset.metadata ?? {}
-  };
-  const metadata = Object.keys(mergedMetadata).length > 0 ? mergedMetadata : void 0;
-  const systemInstructions = asset.sections?.system_instructions ?? defaults.sections?.system_instructions;
-  const sections = asset.sections ? { ...asset.sections, system_instructions: systemInstructions } : systemInstructions ? { system_instructions: systemInstructions } : void 0;
-  return {
-    ...asset,
-    provider: asset.provider ?? defaults.provider,
-    model: asset.model ?? defaults.model,
-    cache,
-    metadata,
-    sections
-  };
-}
-function mergeCache(base, local) {
-  const merged = {
-    ...base ?? {},
-    ...local ?? {},
-    openai: {
-      ...base?.openai ?? {},
-      ...local?.openai ?? {}
-    },
-    anthropic: {
-      ...base?.anthropic ?? {},
-      ...local?.anthropic ?? {}
-    },
-    gemini: {
-      ...base?.gemini ?? {},
-      ...local?.gemini ?? {}
-    },
-    google: {
-      ...base?.google ?? {},
-      ...local?.google ?? {}
-    }
-  };
-  if (merged.openai && Object.keys(merged.openai).length === 0) delete merged.openai;
-  if (merged.anthropic && Object.keys(merged.anthropic).length === 0) delete merged.anthropic;
-  if (merged.gemini && Object.keys(merged.gemini).length === 0) delete merged.gemini;
-  if (merged.google && Object.keys(merged.google).length === 0) delete merged.google;
-  return Object.keys(merged).length > 0 ? merged : void 0;
-}
-
-// src/composition/resolve-includes.ts
-async function resolveIncludes(asset, basePath, visited = /* @__PURE__ */ new Set()) {
-  if (!asset.includes || asset.includes.length === 0) {
-    return asset;
-  }
-  const baseDir = (0, import_node_path2.dirname)(basePath);
-  const resolvedPath = (0, import_node_path2.resolve)(basePath);
-  if (visited.has(resolvedPath)) {
-    throw new Error(`Circular include detected: ${resolvedPath}`);
-  }
-  visited.add(resolvedPath);
-  let mergedSystemInstructions = "";
-  for (const includePath of asset.includes) {
-    const fullPath = (0, import_node_path2.resolve)(baseDir, includePath);
-    if (visited.has(fullPath)) {
-      throw new Error(`Circular include detected: ${fullPath} (included from ${basePath})`);
-    }
-    const content = await (0, import_promises2.readFile)(fullPath, "utf-8");
-    const { asset: includedAsset } = parsePrompt(content, fullPath);
-    const resolved = await resolveIncludes(includedAsset, fullPath, new Set(visited));
-    if (resolved.sections?.system_instructions) {
-      mergedSystemInstructions += resolved.sections.system_instructions + "\n\n";
-    }
-  }
-  const localSystem = asset.sections?.system_instructions ?? "";
-  const combinedSystem = (mergedSystemInstructions + localSystem).trim() || void 0;
-  return {
-    ...asset,
-    sections: {
-      ...asset.sections,
-      system_instructions: combinedSystem
-    },
-    // Drop includes from the resolved asset — they've been inlined
-    includes: void 0
-  };
-}
-
-// src/prompt-resolution.ts
-var DEFAULT_PROMPTS_DIR = "./prompts";
-var DEFAULT_COMPILED_JSON_DIR = "./.generated-prompts/json";
-function withPromptResolutionDefaults(config) {
-  return {
-    ...config,
-    sourceDir: config.sourceDir ?? DEFAULT_PROMPTS_DIR,
-    compiledDir: config.compiledDir ?? DEFAULT_COMPILED_JSON_DIR
-  };
-}
-var sharedPromptCache = new PromptCache();
-async function loadPromptAsset(promptPath, config, promptCache = sharedPromptCache) {
-  const resolvedConfig = withPromptResolutionDefaults(config);
-  const mode = resolvedConfig.mode ?? "auto";
-  if (mode !== "source-only" && resolvedConfig.compiledDir) {
-    const compiledFile = (0, import_node_path3.resolve)(resolvedConfig.compiledDir, promptPath + ".json");
-    if ((0, import_node_fs2.existsSync)(compiledFile)) {
-      if (mode === "auto") {
-        const sourceFile = (0, import_node_path3.resolve)(resolvedConfig.sourceDir, promptPath + ".md");
-        if ((0, import_node_fs2.existsSync)(sourceFile)) {
-          const compiledMtime = (0, import_node_fs2.statSync)(compiledFile).mtimeMs;
-          const sourceMtime = (0, import_node_fs2.statSync)(sourceFile).mtimeMs;
-          if (sourceMtime > compiledMtime) {
-            console.warn(
-              `[promptopskit] Warning: compiled artifact for "${promptPath}" is older than source .md file.
-               Run "promptopskit compile" or switch to source-only mode.`
-            );
-          }
-        }
-      }
-      const content = await (0, import_promises3.readFile)(compiledFile, "utf-8");
-      return JSON.parse(content);
-    }
-    if (mode === "compiled-only") {
-      throw new Error(
-        `Compiled artifact not found: ${compiledFile}
-Run "promptopskit compile" to generate it.`
-      );
-    }
-  }
-  if (mode !== "compiled-only") {
-    const sourceFile = (0, import_node_path3.resolve)(resolvedConfig.sourceDir, promptPath + ".md");
-    if (resolvedConfig.cache !== false) {
-      const cached = promptCache.get(sourceFile);
-      if (cached) {
-        return cached;
-      }
-    }
-    if (!(0, import_node_fs2.existsSync)(sourceFile)) {
-      const paths = [sourceFile];
-      if (resolvedConfig.compiledDir) {
-        paths.unshift((0, import_node_path3.resolve)(resolvedConfig.compiledDir, promptPath + ".json"));
-      }
-      throw new Error(
-        `Prompt not found: "${promptPath}"
-Searched:
-${paths.map((candidate) => `  - ${candidate}`).join("\n")}`
-      );
-    }
-    const { asset } = await loadPromptFile(sourceFile, { defaultsRoot: resolvedConfig.sourceDir });
-    if (resolvedConfig.cache !== false) {
-      promptCache.set(sourceFile, asset);
-    }
-    return asset;
-  }
-  throw new Error(`Prompt not found: "${promptPath}"`);
-}
-async function resolvePromptAsset(promptPath, config, options = {}, promptCache = sharedPromptCache) {
-  const resolvedConfig = withPromptResolutionDefaults(config);
-  let asset = await loadPromptAsset(promptPath, resolvedConfig, promptCache);
-  const sourceFile = (0, import_node_path3.resolve)(resolvedConfig.sourceDir, promptPath + ".md");
-  if (asset.includes && asset.includes.length > 0 && (0, import_node_fs2.existsSync)(sourceFile)) {
-    asset = await resolveIncludes(asset, sourceFile);
-  }
-  asset = applyOverrides(asset, {
-    environment: options.environment,
-    tier: options.tier,
-    runtime: options.runtime
-  });
-  return asset;
-}
-function resolveInlinePromptSource(source, options = {}) {
-  const { asset } = parsePrompt(source);
-  return applyOverrides(asset, {
-    environment: options.environment,
-    tier: options.tier,
-    runtime: options.runtime
-  });
-}
-
-// src/context.ts
-var textEncoder = new TextEncoder();
-var REJECT_SECRETS_PATTERN = "(secret|api[_-]?key|password)";
-var REJECT_SECRETS_FLAGS = "i";
-function getContextInputs(asset) {
-  return (asset.context?.inputs ?? []).map(normalizeContextInput);
-}
-function getContextInputNames(asset) {
-  return getContextInputs(asset).map((input) => input.name);
-}
-function normalizeContextInput(input) {
-  if (typeof input === "string") {
-    return { name: input };
-  }
+    ...frontMatter,
+    sections,
+    source: filePath ? { file_path: filePath } : void 0
+  };
+  const asset = PromptAssetSchema.parse(raw);
   return {
-    name: input.name,
-    max_size: input.max_size,
-    trim: input.trim,
-    allow_regex: normalizeContextRegex(input.allow_regex),
-    deny_regex: normalizeContextRegex(input.deny_regex),
-    non_empty: normalizeBuiltInValidator(input.non_empty),
-    reject_secrets: normalizeBuiltInValidator(input.reject_secrets)
+    asset,
+    raw: {
+      frontMatter,
+      body
+    }
   };
 }
-function normalizeContextRegex(value) {
-  if (value === void 0) {
-    return void 0;
-  }
-  if (typeof value === "string") {
-    const literal = parseRegexLiteral(value);
-    if (value.startsWith("/") && !literal) {
-      return {
-        pattern: value,
-        flags: "",
-        raw: value,
-        invalidLiteral: true
-      };
+
+// src/parser/loader.ts
+var import_promises2 = require("fs/promises");
+var import_node_path2 = require("path");
+var import_gray_matter2 = __toESM(require("gray-matter"), 1);
+
+// src/parser/response-schema-ref.ts
+var import_promises = require("fs/promises");
+var import_node_crypto = require("crypto");
+var import_node_path = require("path");
+var import_node_url = require("url");
+var import_zod2 = require("zod");
+var import_zod_to_json_schema = require("zod-to-json-schema");
+var SUPPORTED_SCHEMA_REF_EXTENSIONS = /* @__PURE__ */ new Set([".json", ".js", ".mjs", ".cjs"]);
+async function resolveJsonSchemaRef(schemaRef, promptFilePath) {
+  const resolvedPath = (0, import_node_path.resolve)((0, import_node_path.dirname)(promptFilePath), schemaRef);
+  let raw;
+  try {
+    raw = await (0, import_promises.readFile)(resolvedPath, "utf-8");
+  } catch (error) {
+    const code = error.code;
+    if (code === "ENOENT") {
+      throw new Error(`POK050: response.schema_ref "${schemaRef}" not found (resolved from ${promptFilePath})`);
     }
-    return {
-      pattern: literal?.pattern ?? value,
-      flags: literal?.flags ?? "",
-      raw: value
-    };
+    throw error;
+  }
+  let parsed;
+  try {
+    parsed = JSON.parse(raw);
+  } catch {
+    throw new Error(`POK050: response.schema_ref "${schemaRef}" is not valid JSON`);
+  }
+  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+    throw new Error(`POK050: response.schema_ref "${schemaRef}" must resolve to a JSON object schema`);
   }
   return {
-    pattern: value.pattern,
-    flags: value.flags ?? "",
-    raw: JSON.stringify(value),
-    returnMessage: value.return_message
+    schema: parsed,
+    resolvedPath,
+    hash: (0, import_node_crypto.createHash)("sha256").update(raw).digest("hex")
   };
 }
-function normalizeBuiltInValidator(value) {
-  if (value === void 0 || value === false) {
-    return void 0;
+async function resolveZodSchemaRef(schemaRef, promptFilePath) {
+  const resolvedPath = (0, import_node_path.resolve)((0, import_node_path.dirname)(promptFilePath), schemaRef);
+  let moduleSource;
+  try {
+    moduleSource = await (0, import_promises.readFile)(resolvedPath, "utf-8");
+  } catch (error) {
+    const code = error.code;
+    if (code === "ENOENT") {
+      throw new Error(`POK051: response.schema_ref "${schemaRef}" not found (resolved from ${promptFilePath})`);
+    }
+    throw error;
   }
-  if (value === true) {
-    return {};
+  let imported;
+  try {
+    imported = await import((0, import_node_url.pathToFileURL)(resolvedPath).href);
+  } catch (error) {
+    const message = error instanceof Error ? error.message : String(error);
+    throw new Error(`POK051: response.schema_ref "${schemaRef}" could not be imported as a module (${message})`);
+  }
+  const mod = imported;
+  const candidate = mod.default ?? mod.schema;
+  if (!(candidate instanceof import_zod2.z.ZodType)) {
+    throw new Error('POK051: zod schema modules must export a Zod schema as default export or named export "schema"');
+  }
+  const jsonSchema = (0, import_zod_to_json_schema.zodToJsonSchema)(candidate, {
+    target: "jsonSchema7",
+    $refStrategy: "none"
+  });
+  if (!jsonSchema || typeof jsonSchema !== "object" || Array.isArray(jsonSchema)) {
+    throw new Error(`POK051: response.schema_ref "${schemaRef}" did not produce a valid JSON schema object`);
   }
   return {
-    returnMessage: value.return_message
+    schema: jsonSchema,
+    resolvedPath,
+    hash: (0, import_node_crypto.createHash)("sha256").update(moduleSource).digest("hex")
   };
 }
-function parseRegexLiteral(value) {
-  if (!value.startsWith("/")) {
-    return void 0;
+async function resolveResponseSchemaRef(asset, promptFilePath) {
+  const schemaRef = asset.response?.schema_ref;
+  if (!schemaRef) return asset;
+  const ext = (0, import_node_path.extname)(schemaRef).toLowerCase();
+  if (!SUPPORTED_SCHEMA_REF_EXTENSIONS.has(ext)) {
+    throw new Error(`POK051: response.schema_ref "${schemaRef}" has unsupported extension "${ext}". Use .json, .js, .mjs, or .cjs`);
   }
-  for (let index = value.length - 1; index > 0; index -= 1) {
-    if (value[index] !== "/") {
-      continue;
+  const resolved = ext === ".json" ? await resolveJsonSchemaRef(schemaRef, promptFilePath) : await resolveZodSchemaRef(schemaRef, promptFilePath);
+  return {
+    ...asset,
+    response: {
+      ...asset.response,
+      schema: resolved.schema,
+      schema_ref: void 0,
+      schema_source: {
+        mode: ext === ".json" ? "schema_ref_json" : "schema_ref_zod_module",
+        ref: schemaRef,
+        resolved_path: resolved.resolvedPath,
+        hash: resolved.hash
+      }
     }
-    let backslashCount = 0;
-    for (let cursor = index - 1; cursor >= 0 && value[cursor] === "\\"; cursor -= 1) {
-      backslashCount += 1;
+  };
+}
+
+// src/parser/loader.ts
+var DEFAULTS_FILE_NAME = "defaults.md";
+async function loadPromptFile(filePath, options = {}) {
+  const content = await (0, import_promises2.readFile)(filePath, "utf-8");
+  const parsed = parsePrompt(content, filePath);
+  const root = options.defaultsRoot ?? (0, import_node_path2.dirname)(filePath);
+  const defaults = await loadDefaultsForPath(filePath, root);
+  const withDefaults = applyDefaults(parsed.asset, defaults);
+  const resolved = await resolveResponseSchemaRef(withDefaults, filePath);
+  const asset = resolved.response?.schema !== void 0 && !resolved.response?.schema_source ? {
+    ...resolved,
+    response: {
+      ...resolved.response,
+      schema_source: { mode: "inline" }
+    }
+  } : resolved;
+  return {
+    ...parsed,
+    asset
+  };
+}
+async function loadDefaultsForPath(filePath, defaultsRoot) {
+  const directories = getDirectoriesToCheck(filePath, defaultsRoot);
+  let merged = {};
+  for (const dir of directories) {
+    const defaultsPath = (0, import_node_path2.join)(dir, DEFAULTS_FILE_NAME);
+    try {
+      const defaultsContent = await (0, import_promises2.readFile)(defaultsPath, "utf-8");
+      const defaults = normalizeDefaultIncludes(parseDefaults(defaultsContent), defaultsPath, filePath);
+      merged = mergeDefaults(merged, defaults);
+    } catch (error) {
+      if (error.code !== "ENOENT") {
+        throw error;
+      }
     }
-    if (backslashCount % 2 === 1) {
-      continue;
+  }
+  return merged;
+}
+function getDirectoriesToCheck(filePath, defaultsRoot) {
+  const dirs = [];
+  let current = (0, import_node_path2.resolve)((0, import_node_path2.dirname)(filePath));
+  const boundary = defaultsRoot ? (0, import_node_path2.resolve)(defaultsRoot) : void 0;
+  while (true) {
+    dirs.unshift(current);
+    if (boundary && current === boundary || current === (0, import_node_path2.dirname)(current)) {
+      break;
     }
-    return {
-      pattern: value.slice(1, index),
-      flags: value.slice(index + 1)
-    };
+    current = (0, import_node_path2.dirname)(current);
   }
-  return void 0;
+  return dirs;
 }
-function formatInvalidContextRegexMessage(details) {
-  return [
-    `Invalid context regex for prompt "${details.promptId}"`,
-    `variable "${details.variable}"`,
-    `field "${details.field}"`,
-    `value ${JSON.stringify(details.raw)}: ${details.reason}`
-  ].join(", ");
+function parseDefaults(content) {
+  const { data: frontMatter, content: body } = (0, import_gray_matter2.default)(content);
+  const sections = extractSections(body);
+  return PromptDefaultsSchema.parse({
+    ...frontMatter,
+    sections: {
+      system_instructions: sections.system_instructions
+    }
+  });
 }
-function compileContextRegex(regex, details) {
-  if (regex.invalidLiteral) {
-    throw new Error(
-      `POK013: ${formatInvalidContextRegexMessage({
-        ...details,
-        raw: regex.raw,
-        reason: "Malformed regex literal. Use /pattern/flags or { pattern, flags }."
-      })}`
-    );
-  }
-  try {
-    return new RegExp(regex.pattern, regex.flags);
-  } catch (error) {
-    const reason = error instanceof Error ? error.message : String(error);
-    throw new Error(`POK013: ${formatInvalidContextRegexMessage({ ...details, raw: regex.raw, reason })}`);
+function mergeDefaults(base, local) {
+  return {
+    provider: local.provider ?? base.provider,
+    model: local.model ?? base.model,
+    fallback_models: local.fallback_models ?? base.fallback_models,
+    reasoning: mergeRecordBlock2(base.reasoning, local.reasoning),
+    sampling: mergeRecordBlock2(base.sampling, local.sampling),
+    response: mergeRecordBlock2(base.response, local.response),
+    cache: mergeCache(base.cache, local.cache),
+    raw: mergeRaw(base.raw, local.raw),
+    tools: local.tools ?? base.tools,
+    provider_options: mergeProviderOptions(base.provider_options, local.provider_options),
+    mcp: mergeMcp(base.mcp, local.mcp),
+    context: mergeContext(base.context, local.context),
+    includes: local.includes ?? base.includes,
+    environments: mergeOverrideMap(base.environments, local.environments),
+    tiers: mergeOverrideMap(base.tiers, local.tiers),
+    metadata: {
+      ...base.metadata ?? {},
+      ...local.metadata ?? {}
+    },
+    sections: {
+      ...base.sections ?? {},
+      ...local.sections ?? {}
+    }
+  };
+}
+function applyDefaults(asset, defaults) {
+  const cache = mergeCache(defaults.cache, asset.cache);
+  const raw = mergeRaw(defaults.raw, asset.raw);
+  const providerOptions = mergeProviderOptions(defaults.provider_options, asset.provider_options);
+  const reasoning = mergeRecordBlock2(defaults.reasoning, asset.reasoning);
+  const sampling = mergeRecordBlock2(defaults.sampling, asset.sampling);
+  const response = mergeRecordBlock2(defaults.response, asset.response);
+  const mcp = mergeMcp(defaults.mcp, asset.mcp);
+  const context = mergeContext(defaults.context, asset.context);
+  const environments = mergeOverrideMap(defaults.environments, asset.environments);
+  const tiers = mergeOverrideMap(defaults.tiers, asset.tiers);
+  const hasDefaultMetadata = defaults.metadata && Object.keys(defaults.metadata).length > 0;
+  const hasDefaultSystem = !!defaults.sections?.system_instructions;
+  const hasDefaultScalars = defaults.provider !== void 0 || defaults.model !== void 0 || defaults.fallback_models !== void 0 || defaults.tools !== void 0 || defaults.includes !== void 0;
+  const hasDefaultObjects = cache !== void 0 || raw !== void 0 || providerOptions !== void 0 || reasoning !== void 0 || sampling !== void 0 || response !== void 0 || mcp !== void 0 || context !== void 0 || environments !== void 0 || tiers !== void 0;
+  if (!hasDefaultMetadata && !hasDefaultSystem && !hasDefaultScalars && !hasDefaultObjects) {
+    return asset;
   }
+  const mergedMetadata = {
+    ...defaults.metadata ?? {},
+    ...asset.metadata ?? {}
+  };
+  const metadata = Object.keys(mergedMetadata).length > 0 ? mergedMetadata : void 0;
+  const systemInstructions = asset.sections?.system_instructions ?? defaults.sections?.system_instructions;
+  const sections = asset.sections ? { ...asset.sections, system_instructions: systemInstructions } : systemInstructions ? { system_instructions: systemInstructions } : void 0;
+  return {
+    ...asset,
+    provider: asset.provider ?? defaults.provider,
+    model: asset.model ?? defaults.model,
+    fallback_models: asset.fallback_models ?? defaults.fallback_models,
+    reasoning,
+    sampling,
+    response,
+    cache,
+    raw,
+    tools: asset.tools ?? defaults.tools,
+    provider_options: providerOptions,
+    mcp,
+    context,
+    includes: asset.includes ?? defaults.includes,
+    environments,
+    tiers,
+    metadata,
+    sections
+  };
 }
-function getRejectSecretsRegex() {
+function normalizeDefaultIncludes(defaults, defaultsPath, filePath) {
+  if (!defaults.includes) return defaults;
+  const promptDir = (0, import_node_path2.dirname)(filePath);
+  const defaultsDir = (0, import_node_path2.dirname)(defaultsPath);
+  const includes = defaults.includes.map((includePath) => {
+    const relativePath = (0, import_node_path2.relative)(promptDir, (0, import_node_path2.resolve)(defaultsDir, includePath)).replace(/\\/g, "/");
+    return relativePath.startsWith(".") ? relativePath : `./${relativePath}`;
+  });
   return {
-    pattern: REJECT_SECRETS_PATTERN,
-    flags: REJECT_SECRETS_FLAGS,
-    raw: JSON.stringify({ pattern: REJECT_SECRETS_PATTERN, flags: REJECT_SECRETS_FLAGS })
+    ...defaults,
+    includes
   };
 }
-function isTrimEnabled(mode) {
-  return mode === true || mode === "start" || mode === "end" || mode === "both";
+function mergeRecordBlock2(base, local) {
+  if (base === void 0) return local;
+  if (local === void 0) return base;
+  return { ...base, ...local };
 }
-function normalizeTrimMode(mode) {
-  if (mode === "start") {
-    return "start";
-  }
-  return "end";
+function mergeMcp(base, local) {
+  return mergeRecordBlock2(base, local);
 }
-function trimToMaxSize(value, maxSize, mode) {
-  const measured = measureContextValueSize(value);
-  if (measured <= maxSize) {
-    return value;
-  }
-  const characters = Array.from(value);
-  const normalizedMode = normalizeTrimMode(mode);
-  if (normalizedMode === "start") {
-    let collected2 = "";
-    let size2 = 0;
-    for (let i = characters.length - 1; i >= 0; i -= 1) {
-      const next = characters[i];
-      const charSize = measureContextValueSize(next);
-      if (size2 + charSize > maxSize) {
-        break;
-      }
-      collected2 = next + collected2;
-      size2 += charSize;
-    }
-    return collected2;
-  }
-  let collected = "";
-  let size = 0;
-  for (const char of characters) {
-    const charSize = measureContextValueSize(char);
-    if (size + charSize > maxSize) {
-      break;
+function mergeContext(base, local) {
+  const merged = {
+    ...base ?? {},
+    ...local ?? {},
+    history: mergeRecordBlock2(base?.history, local?.history)
+  };
+  return Object.keys(merged).length > 0 ? merged : void 0;
+}
+function mergeCache(base, local) {
+  const merged = {
+    ...base ?? {},
+    ...local ?? {},
+    openai: {
+      ...base?.openai ?? {},
+      ...local?.openai ?? {}
+    },
+    anthropic: {
+      ...base?.anthropic ?? {},
+      ...local?.anthropic ?? {}
+    },
+    gemini: {
+      ...base?.gemini ?? {},
+      ...local?.gemini ?? {}
+    },
+    google: {
+      ...base?.google ?? {},
+      ...local?.google ?? {}
     }
-    collected += char;
-    size += charSize;
+  };
+  if (merged.openai && Object.keys(merged.openai).length === 0) delete merged.openai;
+  if (merged.anthropic && Object.keys(merged.anthropic).length === 0) delete merged.anthropic;
+  if (merged.gemini && Object.keys(merged.gemini).length === 0) delete merged.gemini;
+  if (merged.google && Object.keys(merged.google).length === 0) delete merged.google;
+  return Object.keys(merged).length > 0 ? merged : void 0;
+}
+function mergeRaw(base, local) {
+  const merged = {
+    ...base ?? {},
+    ...local ?? {},
+    openai: mergeRecordBlock2(base?.openai, local?.openai),
+    "openai-responses": mergeRecordBlock2(base?.["openai-responses"], local?.["openai-responses"]),
+    openai_responses: mergeRecordBlock2(base?.openai_responses, local?.openai_responses),
+    anthropic: mergeRecordBlock2(base?.anthropic, local?.anthropic),
+    gemini: mergeRecordBlock2(base?.gemini, local?.gemini),
+    google: mergeRecordBlock2(base?.google, local?.google),
+    openrouter: mergeRecordBlock2(base?.openrouter, local?.openrouter),
+    llmasaservice: mergeRecordBlock2(base?.llmasaservice, local?.llmasaservice)
+  };
+  removeEmptyProviderBlocks(merged);
+  return Object.keys(merged).length > 0 ? merged : void 0;
+}
+function mergeProviderOptions(base, local) {
+  const merged = {
+    ...base ?? {},
+    ...local ?? {},
+    anthropic: mergeRecordBlock2(base?.anthropic, local?.anthropic),
+    gemini: mergeRecordBlock2(base?.gemini, local?.gemini),
+    openrouter: mergeRecordBlock2(base?.openrouter, local?.openrouter),
+    llmasaservice: mergeRecordBlock2(base?.llmasaservice, local?.llmasaservice)
+  };
+  removeEmptyProviderBlocks(merged);
+  return Object.keys(merged).length > 0 ? merged : void 0;
+}
+function mergeOverrideMap(base, local) {
+  const merged = { ...base ?? {} };
+  for (const [name, localOverride] of Object.entries(local ?? {})) {
+    merged[name] = mergeOverrideConfig(merged[name], localOverride);
   }
-  return collected;
+  return Object.keys(merged).length > 0 ? merged : void 0;
 }
-function sanitizeContextVariables(asset, variables = {}, options = {}) {
-  const { onContextOverflow } = options;
-  const sanitized = { ...variables };
-  for (const input of getContextInputs(asset)) {
-    const value = sanitized[input.name];
-    if (value === void 0) {
+function mergeOverrideConfig(base, local) {
+  const merged = {
+    ...base ?? {},
+    ...local
+  };
+  const reasoning = mergeRecordBlock2(base?.reasoning, local.reasoning);
+  const sampling = mergeRecordBlock2(base?.sampling, local.sampling);
+  const response = mergeRecordBlock2(base?.response, local.response);
+  const cache = mergeCache(base?.cache, local.cache);
+  const raw = mergeRaw(base?.raw, local.raw);
+  const providerOptions = mergeProviderOptions(base?.provider_options, local.provider_options);
+  if (reasoning !== void 0) merged.reasoning = reasoning;
+  if (sampling !== void 0) merged.sampling = sampling;
+  if (response !== void 0) merged.response = response;
+  if (cache !== void 0) merged.cache = cache;
+  if (raw !== void 0) merged.raw = raw;
+  if (providerOptions !== void 0) merged.provider_options = providerOptions;
+  return merged;
+}
+function removeEmptyProviderBlocks(value) {
+  for (const key of Object.keys(value)) {
+    const block = value[key];
+    if (block === void 0) {
+      delete value[key];
       continue;
     }
-    let candidate = value;
-    if (input.max_size !== void 0) {
-      const actualSize = measureContextValueSize(candidate);
-      if (actualSize > input.max_size && onContextOverflow) {
-        candidate = onContextOverflow({
-          promptId: asset.id,
-          variable: input.name,
-          value: candidate,
-          maxSize: input.max_size,
-          actualSize
-        });
-      }
+    if (block !== null && typeof block === "object" && !Array.isArray(block) && Object.keys(block).length === 0) {
+      delete value[key];
     }
-    if (isTrimEnabled(input.trim) && input.max_size !== void 0) {
-      candidate = trimToMaxSize(candidate, input.max_size, input.trim);
+  }
+}
+
+// src/composition/resolve-includes.ts
+async function resolveIncludes(asset, basePath, visited = /* @__PURE__ */ new Set()) {
+  if (!asset.includes || asset.includes.length === 0) {
+    return asset;
+  }
+  const baseDir = (0, import_node_path3.dirname)(basePath);
+  const resolvedPath = (0, import_node_path3.resolve)(basePath);
+  if (visited.has(resolvedPath)) {
+    throw new Error(`Circular include detected: ${resolvedPath}`);
+  }
+  visited.add(resolvedPath);
+  let mergedSystemInstructions = "";
+  for (const includePath of asset.includes) {
+    const fullPath = (0, import_node_path3.resolve)(baseDir, includePath);
+    if (visited.has(fullPath)) {
+      throw new Error(`Circular include detected: ${fullPath} (included from ${basePath})`);
     }
-    sanitized[input.name] = candidate;
-    if (input.allow_regex) {
-      const candidate2 = sanitized[input.name];
-      const matcher = compileContextRegex(input.allow_regex, {
-        promptId: asset.id,
-        variable: input.name,
-        field: "allow_regex"
-      });
-      if (!matcher.test(candidate2)) {
-        if (input.allow_regex.returnMessage) {
-          return {
-            variables: sanitized,
-            shortCircuit: {
-              returnMessage: input.allow_regex.returnMessage,
-              code: "POK031",
-              variable: input.name,
-              field: "allow_regex"
-            }
-          };
+    const content = await (0, import_promises3.readFile)(fullPath, "utf-8");
+    const { asset: includedAsset } = parsePrompt(content, fullPath);
+    const resolved = await resolveIncludes(includedAsset, fullPath, new Set(visited));
+    if (resolved.sections?.system_instructions) {
+      mergedSystemInstructions += resolved.sections.system_instructions + "\n\n";
+    }
+  }
+  const localSystem = asset.sections?.system_instructions ?? "";
+  const combinedSystem = (mergedSystemInstructions + localSystem).trim() || void 0;
+  return {
+    ...asset,
+    sections: {
+      ...asset.sections,
+      system_instructions: combinedSystem
+    },
+    // Drop includes from the resolved asset — they've been inlined
+    includes: void 0
+  };
+}
+
+// src/prompt-resolution.ts
+var DEFAULT_PROMPTS_DIR = "./prompts";
+var DEFAULT_COMPILED_JSON_DIR = "./.generated-prompts/json";
+function withPromptResolutionDefaults(config) {
+  return {
+    ...config,
+    sourceDir: config.sourceDir ?? DEFAULT_PROMPTS_DIR,
+    compiledDir: config.compiledDir ?? DEFAULT_COMPILED_JSON_DIR
+  };
+}
+var sharedPromptCache = new PromptCache();
+async function loadPromptAsset(promptPath, config, promptCache = sharedPromptCache) {
+  const resolvedConfig = withPromptResolutionDefaults(config);
+  const mode = resolvedConfig.mode ?? "auto";
+  if (mode !== "source-only" && resolvedConfig.compiledDir) {
+    const compiledFile = (0, import_node_path4.resolve)(resolvedConfig.compiledDir, promptPath + ".json");
+    if ((0, import_node_fs2.existsSync)(compiledFile)) {
+      if (mode === "auto") {
+        const sourceFile = (0, import_node_path4.resolve)(resolvedConfig.sourceDir, promptPath + ".md");
+        if ((0, import_node_fs2.existsSync)(sourceFile)) {
+          const compiledMtime = (0, import_node_fs2.statSync)(compiledFile).mtimeMs;
+          const sourceMtime = (0, import_node_fs2.statSync)(sourceFile).mtimeMs;
+          if (sourceMtime > compiledMtime) {
+            console.warn(
+              `[promptopskit] Warning: compiled artifact for "${promptPath}" is older than source .md file.
+               Run "promptopskit compile" or switch to source-only mode.`
+            );
+          }
         }
-        throw new Error(
-          `POK031: Context variable "${input.name}" failed allow_regex validation for prompt "${asset.id}".`
-        );
       }
+      const content = await (0, import_promises4.readFile)(compiledFile, "utf-8");
+      return JSON.parse(content);
     }
-    if (input.deny_regex) {
-      const candidate2 = sanitized[input.name];
-      const matcher = compileContextRegex(input.deny_regex, {
-        promptId: asset.id,
-        variable: input.name,
-        field: "deny_regex"
-      });
-      if (matcher.test(candidate2)) {
-        if (input.deny_regex.returnMessage) {
-          return {
-            variables: sanitized,
-            shortCircuit: {
-              returnMessage: input.deny_regex.returnMessage,
-              code: "POK032",
-              variable: input.name,
-              field: "deny_regex"
-            }
-          };
-        }
-        throw new Error(
-          `POK032: Context variable "${input.name}" matched deny_regex for prompt "${asset.id}".`
-        );
+    if (mode === "compiled-only") {
+      throw new Error(
+        `Compiled artifact not found: ${compiledFile}
+Run "promptopskit compile" to generate it.`
+      );
+    }
+  }
+  if (mode !== "compiled-only") {
+    const sourceFile = (0, import_node_path4.resolve)(resolvedConfig.sourceDir, promptPath + ".md");
+    if (resolvedConfig.cache !== false) {
+      const cached = promptCache.get(sourceFile);
+      if (cached) {
+        return cached;
       }
     }
-    if (input.non_empty && candidate.trim().length === 0) {
-      if (input.non_empty.returnMessage) {
-        return {
-          variables: sanitized,
-          shortCircuit: {
-            returnMessage: input.non_empty.returnMessage,
-            code: "POK033",
-            variable: input.name,
-            field: "non_empty"
-          }
-        };
+    if (!(0, import_node_fs2.existsSync)(sourceFile)) {
+      const paths = [sourceFile];
+      if (resolvedConfig.compiledDir) {
+        paths.unshift((0, import_node_path4.resolve)(resolvedConfig.compiledDir, promptPath + ".json"));
       }
       throw new Error(
-        `POK033: Context variable "${input.name}" failed non_empty validation for prompt "${asset.id}".`
+        `Prompt not found: "${promptPath}"
+Searched:
+${paths.map((candidate) => `  - ${candidate}`).join("\n")}`
       );
     }
-    if (input.reject_secrets) {
-      const matcher = compileContextRegex(getRejectSecretsRegex(), {
-        promptId: asset.id,
-        variable: input.name,
-        field: "reject_secrets"
-      });
-      if (matcher.test(candidate)) {
-        if (input.reject_secrets.returnMessage) {
-          return {
-            variables: sanitized,
-            shortCircuit: {
-              returnMessage: input.reject_secrets.returnMessage,
-              code: "POK034",
-              variable: input.name,
-              field: "reject_secrets"
-            }
-          };
-        }
-        throw new Error(
-          `POK034: Context variable "${input.name}" matched reject_secrets validation for prompt "${asset.id}".`
-        );
-      }
+    const { asset } = await loadPromptFile(sourceFile, { defaultsRoot: resolvedConfig.sourceDir });
+    if (resolvedConfig.cache !== false) {
+      promptCache.set(sourceFile, asset);
     }
+    return asset;
   }
-  return { variables: sanitized };
-}
-function measureContextValueSize(value) {
-  return textEncoder.encode(value).length;
+  throw new Error(`Prompt not found: "${promptPath}"`);
 }
-function collectContextSizeWarnings(asset, variables = {}) {
-  const warnings = [];
-  for (const input of getContextInputs(asset)) {
-    if (input.max_size === void 0) {
-      continue;
-    }
-    const value = variables[input.name];
-    if (value === void 0) {
-      continue;
-    }
-    const actualSize = measureContextValueSize(value);
-    if (actualSize > input.max_size) {
-      warnings.push({
-        variable: input.name,
-        maxSize: input.max_size,
-        actualSize
-      });
-    }
+async function resolvePromptAsset(promptPath, config, options = {}, promptCache = sharedPromptCache) {
+  const resolvedConfig = withPromptResolutionDefaults(config);
+  let asset = await loadPromptAsset(promptPath, resolvedConfig, promptCache);
+  const sourceFile = (0, import_node_path4.resolve)(resolvedConfig.sourceDir, promptPath + ".md");
+  if (asset.includes && asset.includes.length > 0 && (0, import_node_fs2.existsSync)(sourceFile)) {
+    asset = await resolveIncludes(asset, sourceFile);
   }
-  return warnings;
+  asset = applyOverrides(asset, {
+    environment: options.environment,
+    tier: options.tier,
+    runtime: options.runtime
+  });
+  return asset;
+}
+function resolveInlinePromptSource(source, options = {}) {
+  const { asset } = parsePrompt(source);
+  return applyOverrides(asset, {
+    environment: options.environment,
+    tier: options.tier,
+    runtime: options.runtime
+  });
 }
 
 // src/history.ts
@@ -1985,6 +2256,18 @@ var KNOWN_FRONT_MATTER_KEYS = /* @__PURE__ */ new Set([
   "provider_options",
   "raw"
 ]);
+function collectSchemaKeywords(value, acc) {
+  if (!value || typeof value !== "object") return;
+  if (Array.isArray(value)) {
+    for (const item of value) collectSchemaKeywords(item, acc);
+    return;
+  }
+  const record = value;
+  for (const [key, child] of Object.entries(record)) {
+    acc.add(key);
+    collectSchemaKeywords(child, acc);
+  }
+}
 var RISKY_UNBOUNDED_INPUT_NAMES = [
   "message",
   "prompt",
@@ -2036,7 +2319,9 @@ function validateAsset(asset, frontMatterKeys, filePath) {
       }
     }
   }
-  const declaredInputs = new Set(getContextInputNames(asset));
+  const contextInputs = getContextInputs(asset);
+  const declaredInputs = new Set(contextInputs.map((input) => input.name));
+  const declaredInputsByName = new Map(contextInputs.map((input) => [input.name, input]));
   const usedVars = /* @__PURE__ */ new Set();
   if (asset.sections?.system_instructions) {
     for (const v of extractVariables(asset.sections.system_instructions)) {
@@ -2058,7 +2343,8 @@ function validateAsset(asset, frontMatterKeys, filePath) {
     }
   }
   for (const v of declaredInputs) {
-    if (!usedVars.has(v)) {
+    const input = declaredInputsByName.get(v);
+    if (!usedVars.has(v) && input?.optional !== true && areContextInputWarningsEnabled(input ?? {})) {
       warnings.push({
         code: "POK012",
         message: `Variable "${v}" is declared in context.inputs but never used`,
@@ -2074,9 +2360,10 @@ function validateAsset(asset, frontMatterKeys, filePath) {
       suggestion: "Declare context.inputs to enable input policy validation."
     });
   }
-  for (const input of getContextInputs(asset)) {
+  for (const input of contextInputs) {
     const lowerName = input.name.toLowerCase();
-    if (input.max_size === void 0 && RISKY_UNBOUNDED_INPUT_NAMES.some((needle) => lowerName.includes(needle))) {
+    const inputWarningsEnabled = areContextInputWarningsEnabled(input);
+    if (inputWarningsEnabled && input.max_size === void 0 && RISKY_UNBOUNDED_INPUT_NAMES.some((needle) => lowerName.includes(needle))) {
       warnings.push({
         code: "POK040",
         message: `Context input "${input.name}" has no max_size and appears unbounded.`,
@@ -2084,7 +2371,7 @@ function validateAsset(asset, frontMatterKeys, filePath) {
         suggestion: "Add max_size to constrain prompt payload growth."
       });
     }
-    if (input.allow_regex === void 0 && input.deny_regex === void 0 && input.non_empty === void 0 && input.reject_secrets === void 0) {
+    if (inputWarningsEnabled && input.optional !== true && input.allow_regex === void 0 && input.deny_regex === void 0 && input.non_empty === void 0 && input.reject_secrets === void 0) {
       warnings.push({
         code: "POK041",
         message: `Context input "${input.name}" has no input hardening validators.`,
@@ -2092,7 +2379,7 @@ function validateAsset(asset, frontMatterKeys, filePath) {
         suggestion: "Consider non_empty/reject_secrets and allow/deny regex validators."
       });
     }
-    if (input.trim !== void 0 && input.trim !== false && input.max_size === void 0) {
+    if (inputWarningsEnabled && input.trim !== void 0 && input.trim !== false && input.max_size === void 0) {
       warnings.push({
         code: "POK014",
         message: `Context input "${input.name}" sets trim but has no max_size; trim-to-budget will be skipped.`,
@@ -2119,6 +2406,30 @@ function validateAsset(asset, frontMatterKeys, filePath) {
       }
     }
   }
+  if (asset.response?.schema && asset.provider) {
+    const keywords = /* @__PURE__ */ new Set();
+    collectSchemaKeywords(asset.response.schema, keywords);
+    const openAIUnsupported = ["patternProperties", "unevaluatedProperties", "$dynamicRef"];
+    const geminiUnsupported = ["patternProperties", "$dynamicRef", "dependentSchemas"];
+    const anthropicCaution = ["if", "then", "else"];
+    const checks = [
+      { provider: ["openai", "openai-responses", "openrouter", "llmasaservice"], unsupported: openAIUnsupported, code: "POK052" },
+      { provider: ["gemini", "google"], unsupported: geminiUnsupported, code: "POK053" },
+      { provider: ["anthropic"], unsupported: anthropicCaution, code: "POK054" }
+    ];
+    for (const check of checks) {
+      if (!check.provider.includes(asset.provider)) continue;
+      const hits = check.unsupported.filter((k) => keywords.has(k));
+      if (hits.length > 0) {
+        warnings.push({
+          code: check.code,
+          message: `response.schema includes provider-sensitive JSON Schema keywords for "${asset.provider}": ${hits.join(", ")}`,
+          filePath,
+          suggestion: "Validate schema compatibility with your provider docs or simplify the schema dialect."
+        });
+      }
+    }
+  }
   if (asset.provider) {
     let providerCache;
     let cacheSuggestionField;
@@ -2733,7 +3044,7 @@ var PromptOpsKit = class {
    * Validate a prompt file.
    */
   async validatePrompt(promptPath) {
-    const sourceFile = (0, import_node_path4.resolve)(this.config.sourceDir, promptPath + ".md");
+    const sourceFile = (0, import_node_path5.resolve)(this.config.sourceDir, promptPath + ".md");
     try {
       const asset = await this.loadPrompt(promptPath);
       return validateAssetWithIncludes(asset, sourceFile);