@rulvar/core 1.105.0 → 1.107.0

package/dist/index.d.ts

@@ -5978,8 +5978,9 @@ declare class AdmissionController {
 declare function buildCostReport(attribution: CostAttribution, totalUsd: number, abandoned?: CostReport["abandoned"]): CostReport;
 /**
 * The pure journal fold: the complete CostReport from terminal entries,
-* the same summation the kernel ledger uses (terminal usage exactly
-* once, priced per servedBy slice, abandoned subtrees contribute zero).
+* the same summation the kernel ledger uses (each terminal entry's
+* usage enters the sum once, priced per servedBy slice, abandoned
+* subtrees contribute zero).
 * The orchestrator block folds too: spend attributed to the
 * orchestrator sub-account, the reserve-funded share of it, the armed
 * wake count, and the at-cap freeze flag from the journaled cap
@@ -6873,7 +6874,14 @@ declare const DEFAULT_EVIDENCE_MIN_SHARE = .95;
 * list the missing (and unknown) citations, capped at 20, so the repair
 * turn can restore them. Purely textual and deterministic; checking
 * that cited targets EXIST on disk is host territory (a custom
-* validator), not this contract. Default name 'evidence-preserved'.
+* validator), not this contract. Intake is fail closed (RV610): a
+* pattern that can match the empty string is refused typed (an empty
+* match would enter the pool as fabricated evidence and defeat
+* `requireNonEmptyPool`), zero-length matches never enter the pool
+* even when a lookaround produces them in context, and the strict-mode
+* booleans must be real booleans, so a stray `'true'` can never
+* silently disable the mode it names. Default name
+* 'evidence-preserved'.
 */
 declare function evidencePreservedValidator(options?: {
   pattern?: string;

package/dist/index.js

@@ -2363,6 +2363,7 @@ function entryUsageSlices(entry) {
 		usage: entry.usage
 	}];
 }
+const foldOverflow = (seq, servedBy) => new ConfigError(`cost accounting overflow: the price sum for entry seq ${String(seq)} became non-finite at model ${servedBy} (individually finite prices overflowed); no public report may carry a non-finite number`);
 /**
 * The single pricing fold over one terminal entry, shared by the kernel
 * ledger and the CostReport fold so a run's total and its per-model
@@ -2388,6 +2389,7 @@ function priceEntryUsage(entry, priceUsd) {
 			continue;
 		}
 		result.usd += usd;
+		if (!Number.isFinite(result.usd)) throw foldOverflow(entry.seq, slice.servedBy);
 		result.priced.push({
 			...slice,
 			usd
@@ -2486,6 +2488,7 @@ function priceEntryBilling(entry, priceUsd) {
 			continue;
 		}
 		usd += price;
+		if (!Number.isFinite(usd)) throw foldOverflow(entry.seq, record.servedBy);
 		units.push({
 			source: "call",
 			servedBy: record.servedBy,
@@ -2512,6 +2515,7 @@ function priceEntryBilling(entry, priceUsd) {
 			continue;
 		}
 		usd += price;
+		if (!Number.isFinite(usd)) throw foldOverflow(entry.seq, slice.servedBy);
 		units.push({
 			source: "slice",
 			servedBy: slice.servedBy,
@@ -2827,6 +2831,31 @@ function validateEvidenceContract(value, site) {
 	if (overheadCalls !== void 0) requireNonNegativeInteger(overheadCalls, `${site}.overheadCalls`);
 	if (enforce !== void 0 && enforce !== "warn" && enforce !== "refuse") throw new ConfigError(`${site}.enforce must be 'warn' or 'refuse'; got ${JSON.stringify(enforce)}`);
 }
+/**
+* Walks a finished public accounting object (a cost report, an
+* invoice) and throws a typed ConfigError on the first non-finite
+* number (RV610): JSON serializes Infinity and NaN as null, so a
+* non-finite value in a published report is silent telemetry
+* corruption, never a representable answer. Individually finite
+* amounts can overflow in accumulation, which is exactly why the
+* boundary is guarded and not only the per-item validations.
+*/
+function requireFiniteNumbersDeep(value, site) {
+	const walk = (node, path) => {
+		if (typeof node === "number") {
+			if (!Number.isFinite(node)) throw new ConfigError(`cost accounting overflow at ${path}: the value is ${String(node)}; no public report or invoice may carry a non-finite number (JSON would serialize it as null)`);
+			return;
+		}
+		if (Array.isArray(node)) {
+			node.forEach((item, index) => {
+				walk(item, `${path}[${String(index)}]`);
+			});
+			return;
+		}
+		if (typeof node === "object" && node !== null) for (const [key, item] of Object.entries(node)) walk(item, `${path}.${key}`);
+	};
+	walk(value, site);
+}
 //#endregion
 //#region src/knowledge/file-store.ts
 /**
@@ -8310,8 +8339,9 @@ function buildCostReport(attribution, totalUsd, abandoned = {
 }
 /**
 * The pure journal fold: the complete CostReport from terminal entries,
-* the same summation the kernel ledger uses (terminal usage exactly
-* once, priced per servedBy slice, abandoned subtrees contribute zero).
+* the same summation the kernel ledger uses (each terminal entry's
+* usage enters the sum once, priced per servedBy slice, abandoned
+* subtrees contribute zero).
 * The orchestrator block folds too: spend attributed to the
 * orchestrator sub-account, the reserve-funded share of it, the armed
 * wake count, and the at-cap freeze flag from the journaled cap
@@ -8370,7 +8400,7 @@ function costReportFromJournal(entries, priceUsd) {
 			if (facts.finalizeReserve === true) reserveUsedUsd += priced.usd;
 		}
 	}
-	return {
+	const report = {
 		totalUsd,
 		grossUsd: totalUsd + abandonedUsd,
 		abandoned: {
@@ -8392,6 +8422,8 @@ function costReportFromJournal(entries, priceUsd) {
 		unpriced,
 		...usageApprox ? { usageApprox: true } : {}
 	};
+	requireFiniteNumbersDeep(report, "costReport");
+	return report;
 }
 //#endregion
 //#region src/engine/invoice.ts
@@ -8628,7 +8660,7 @@ function invoiceFromJournal(entries, priceUsd, options) {
 	}
 	const unallocatedUsd = allocateRows(rows, entries, priceUsd, report.grossUsd);
 	const usageApprox = report.usageApprox === true || report.abandoned.usageApprox === true;
-	return {
+	const invoice = {
 		rows,
 		totalUsd: report.grossUsd,
 		netUsd: report.totalUsd,
@@ -8645,6 +8677,8 @@ function invoiceFromJournal(entries, priceUsd, options) {
 		...usageApprox ? { usageApprox: true } : {},
 		...options?.pricing === void 0 ? {} : { pricing: options.pricing }
 	};
+	requireFiniteNumbersDeep(invoice, "invoice");
+	return invoice;
 }
 //#endregion
 //#region src/model/pricing.ts
@@ -16510,26 +16544,39 @@ function listCitations(values) {
 * list the missing (and unknown) citations, capped at 20, so the repair
 * turn can restore them. Purely textual and deterministic; checking
 * that cited targets EXIST on disk is host territory (a custom
-* validator), not this contract. Default name 'evidence-preserved'.
+* validator), not this contract. Intake is fail closed (RV610): a
+* pattern that can match the empty string is refused typed (an empty
+* match would enter the pool as fabricated evidence and defeat
+* `requireNonEmptyPool`), zero-length matches never enter the pool
+* even when a lookaround produces them in context, and the strict-mode
+* booleans must be real booleans, so a stray `'true'` can never
+* silently disable the mode it names. Default name
+* 'evidence-preserved'.
 */
 function evidencePreservedValidator(options) {
 	const pattern = options?.pattern ?? "[\\w./-]+\\.\\w+:\\d+";
 	const flags = options?.flags ?? "";
 	const globalFlags = flags.includes("g") ? flags : `${flags}g`;
+	let probe;
 	try {
-		new RegExp(pattern, globalFlags);
+		probe = new RegExp(pattern, flags.replace("g", ""));
 	} catch (thrown) {
 		throw new ConfigError(`evidencePreservedValidator pattern does not compile: ${thrown instanceof Error ? thrown.message : String(thrown)}`);
 	}
+	if (probe.test("")) throw new ConfigError(`evidencePreservedValidator pattern must not be able to match the empty string (an empty match would enter the citation pool as fabricated evidence); got ${JSON.stringify(pattern)}`);
 	const minShare = options?.minShare ?? .95;
 	if (typeof minShare !== "number" || !Number.isFinite(minShare) || minShare <= 0 || minShare > 1) throw new ConfigError(`evidencePreservedValidator minShare must be a number in (0, 1]; got ${String(minShare)}`);
+	for (const option of ["requireKnown", "requireNonEmptyPool"]) {
+		const value = options?.[option];
+		if (value !== void 0 && typeof value !== "boolean") throw new ConfigError(`evidencePreservedValidator ${option} must be a boolean when given; got ${JSON.stringify(value)}`);
+	}
 	return {
 		name: options?.name ?? "evidence-preserved",
 		validate: (input) => {
 			const cited = /* @__PURE__ */ new Set();
 			for (const child of input.children ?? []) {
 				if (child.status !== "ok" && child.salvageableOutput !== true) continue;
-				for (const match of child.text.match(new RegExp(pattern, globalFlags)) ?? []) cited.add(match);
+				for (const match of child.text.match(new RegExp(pattern, globalFlags)) ?? []) if (match.length > 0) cited.add(match);
 			}
 			const reasons = [];
 			if (cited.size === 0 && options?.requireNonEmptyPool === true) reasons.push("empty child citation pool: no ok child output contains a citation matching the pattern");
@@ -16539,7 +16586,7 @@ function evidencePreservedValidator(options) {
 				if (preserved < Math.ceil(minShare * cited.size - 1e-9)) reasons.push(`evidence preservation ${String(preserved)} of ${String(cited.size)} child citations is below the required share ${String(minShare)}; missing: ${listCitations(missing)}`);
 			}
 			if (options?.requireKnown === true) {
-				const fabricated = [...new Set(input.text.match(new RegExp(pattern, globalFlags)) ?? [])].filter((citation) => !cited.has(citation));
+				const fabricated = [...new Set(input.text.match(new RegExp(pattern, globalFlags)) ?? [])].filter((citation) => citation.length > 0 && !cited.has(citation));
 				if (fabricated.length > 0) reasons.push(`unknown citations not present in any child report: ${listCitations(fabricated)}`);
 			}
 			return reasons.length === 0 ? ok : {
@@ -17623,7 +17670,7 @@ function makeOrchestratorWorkflow(goal, opts) {
 				}, { childScope });
 				const dispatched = internals.replayer.snapshot().find((entry) => entry.seq === record.handle);
 				if (dispatched !== void 0) {
-					for (const prior of internals.replayer.snapshot()) if (prior.kind === "agent" && prior.status === "running" && prior.seq !== record.handle && prior.scope === dispatched.scope && prior.key === dispatched.key && prior.ordinal === dispatched.ordinal && !records.has(prior.seq)) records.set(prior.seq, record);
+					for (const prior of internals.replayer.snapshot()) if (prior.kind === "agent" && prior.status === "running" && prior.seq !== record.handle && prior.scope === dispatched.scope && prior.key === dispatched.key && !records.has(prior.seq)) records.set(prior.seq, record);
 				}
 			}
 			for (const entry of internals.replayer.snapshot()) {
@@ -17700,7 +17747,7 @@ function makeOrchestratorWorkflow(goal, opts) {
 			extension?.onWake?.(digest);
 		};
 		const buildDigest = (ordinal) => {
-			const undelivered = [...records.values()].filter((record) => record.settled !== void 0 && !deliveredNodeIds.has(record.nodeId)).sort((a, b) => a.spawnOrdinal - b.spawnOrdinal);
+			const undelivered = [...byOrdinal.values()].filter((record) => record.settled !== void 0 && !deliveredNodeIds.has(record.nodeId)).sort((a, b) => a.spawnOrdinal - b.spawnOrdinal);
 			const escalations = [];
 			for (const record of undelivered) {
 				const settled = record.settled;
@@ -17891,7 +17938,7 @@ function makeOrchestratorWorkflow(goal, opts) {
 						})) throw new ConfigError("child_terminal can never fire: every referenced child already settled and was delivered in a prior digest");
 					}
 					if (trigger.kind === "escalation") {
-						if (![...records.values()].some((record) => record.settled === void 0 || record.settled.status === "escalated" && !deliveredNodeIds.has(record.nodeId))) throw new ConfigError("escalation can never fire: no live or undelivered escalated children");
+						if (![...byOrdinal.values()].some((record) => record.settled === void 0 || record.settled.status === "escalated" && !deliveredNodeIds.has(record.nodeId))) throw new ConfigError("escalation can never fire: no live or undelivered escalated children");
 					}
 				}
 				const ordinal = wakeOrdinal;
@@ -17902,9 +17949,9 @@ function makeOrchestratorWorkflow(goal, opts) {
 				await internals.replayer.flush();
 				const entryRef = external.pending().find((item) => item.key === wakeKey && item.scope === wakeScope)?.entryRef;
 				const isReady = (trigger) => {
-					const undelivered = [...records.values()].filter((record) => record.settled !== void 0 && !deliveredNodeIds.has(record.nodeId));
+					const undelivered = [...byOrdinal.values()].filter((record) => record.settled !== void 0 && !deliveredNodeIds.has(record.nodeId));
 					switch (trigger.kind) {
-						case "quiescence": return [...records.values()].every((record) => record.settled !== void 0) && (extension?.quiescent?.() ?? true);
+						case "quiescence": return [...byOrdinal.values()].every((record) => record.settled !== void 0) && (extension?.quiescent?.() ?? true);
 						case "child_terminal":
 							if (trigger.handles === void 0) return undelivered.length > 0;
 							return trigger.handles.some((handle) => undelivered.some((record) => record.handle === handle));
@@ -18142,7 +18189,7 @@ function makeOrchestratorWorkflow(goal, opts) {
 		*/
 		const validationChildren = () => {
 			const salvageOutputOn = opts?.acceptance?.acceptValidatedTerminalOutputOnLimit === true;
-			return [...records.values()].sort((a, b) => a.spawnOrdinal - b.spawnOrdinal).map((record) => ({
+			return [...byOrdinal.values()].sort((a, b) => a.spawnOrdinal - b.spawnOrdinal).map((record) => ({
 				handle: record.handle,
 				nodeId: record.nodeId,
 				status: record.settled?.status ?? "running",
@@ -18378,7 +18425,7 @@ function makeOrchestratorWorkflow(goal, opts) {
 			return {
 				forcedFinishFallback: true,
 				planHash: capValue?.snapshot?.planHash ?? "",
-				completed: [...records.values()].filter((record) => record.settled !== void 0).sort((a, b) => a.spawnOrdinal - b.spawnOrdinal).map((record) => digestOf(record, record.settled))
+				completed: [...byOrdinal.values()].filter((record) => record.settled !== void 0).sort((a, b) => a.spawnOrdinal - b.spawnOrdinal).map((record) => digestOf(record, record.settled))
 			};
 		};
 		/**
@@ -18453,7 +18500,7 @@ function makeOrchestratorWorkflow(goal, opts) {
 		*/
 		const reconcileIncremental = async (draft, spec) => {
 			synthesisSettleFrozen = true;
-			const settledRecords = [...records.values()].filter((record) => record.settled !== void 0).sort((a, b) => a.spawnOrdinal - b.spawnOrdinal);
+			const settledRecords = [...byOrdinal.values()].filter((record) => record.settled !== void 0).sort((a, b) => a.spawnOrdinal - b.spawnOrdinal);
 			const sections = [];
 			for (const record of settledRecords) {
 				const settled = record.settled;
@@ -18646,7 +18693,7 @@ function makeOrchestratorWorkflow(goal, opts) {
 			const fullContext = spec.context === "full";
 			const synthesisToolNames = /* @__PURE__ */ new Set([FINISH_TOOL_NAME, ...exposeTools ? [GET_CHILD_RESULT_TOOL_NAME, READ_CHILD_ARTIFACT_TOOL_NAME] : []]);
 			const synthesisTools = buildOrchestratorTools(orchestratorRuntime, fullCardText, { childResultTools: exposeTools }).filter((tool) => synthesisToolNames.has(tool.name));
-			const settledEntries = [...records.entries()].filter((entry) => entry[1].settled !== void 0).sort((a, b) => a[1].spawnOrdinal - b[1].spawnOrdinal);
+			const settledEntries = [...byOrdinal.values()].filter((record) => record.settled !== void 0).sort((a, b) => a.spawnOrdinal - b.spawnOrdinal).map((record) => [record.handle, record]);
 			const settledDigests = settledEntries.map(([handle, record]) => ({
 				...exposeTools ? { handle } : {},
 				...digestOf(record, record.settled)
@@ -18899,7 +18946,7 @@ function makeOrchestratorWorkflow(goal, opts) {
 			let hardDegraded = 0;
 			const acceptPartial = opts.acceptance.acceptPartialChildren === true;
 			const acceptOutput = opts.acceptance.acceptValidatedTerminalOutputOnLimit === true;
-			const sortedRecords = [...records.values()].sort((a, b) => a.spawnOrdinal - b.spawnOrdinal);
+			const sortedRecords = [...byOrdinal.values()].sort((a, b) => a.spawnOrdinal - b.spawnOrdinal);
 			for (const record of sortedRecords) {
 				const status = record.settled?.status ?? "running";
 				childStatusCounts[status] = (childStatusCounts[status] ?? 0) + 1;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rulvar/core",
-  "version": "1.105.0",
+  "version": "1.107.0",
   "description": "Rulvar core: L0 contracts, journal kernel, ctx primitives, agent runtime, model router, tool system, dynamic orchestrator, InMemory and JSONL stores, event stream.",
   "type": "module",
   "license": "Apache-2.0",