@rulvar/core 1.108.0 → 1.110.0

package/dist/index.d.ts

@@ -3713,6 +3713,18 @@ interface ToolBudgetSummary {
   limiter?: "maxToolCalls" | "toolUnits";
 }
 /**
+* How an event's `costUsd` was folded (RV702). `'per-call'`: the sum of
+* each provider request priced individually, the same basis the settled
+* CostReport and invoice use (RV504), so a nonlinear long-context tier
+* fires per REQUEST. `'aggregate-estimate'`: the aggregate usage priced
+* in one call, which a tier can inflate past what any single request
+* cost; emitted only when per-request records cannot cover the number
+* (a checkpoint written before the reconciliation ledger shipped, or a
+* terminal entry whose records do not cover its usage). An absent field
+* on an event stream recorded before RV702 means the aggregate basis.
+*/
+type CostBasis = "per-call" | "aggregate-estimate";
+/**
 * Agent lifecycle. One logical agent dispatch emits EXACTLY ONE
 * `agent:start`/`agent:end` pair on its span (the start carries the
 * primary role), and each model invocation phase inside the span
@@ -3762,6 +3774,14 @@ type AgentEvents = {
   durationMs: number; /** The usage this activation added to its (role, model) slices. */
   usage: Usage; /** That usage priced at each serving model's own rate. */
   costUsd: number;
+  /**
+  * The fold behind `costUsd` (RV702). Live phase deltas are always
+  * per-call (every slice a live activation adds is backed by a
+  * recorded provider call); a replayed pair says 'aggregate-estimate'
+  * exactly when its model's records do not cover its usage. Absent
+  * on streams recorded before RV702, which priced the aggregate.
+  */
+  costBasis?: CostBasis;
   outcome: "ok" | "error";
   /**
   * Transport retries inside this activation. Present only when
@@ -3775,6 +3795,16 @@ type AgentEvents = {
   status: string;
   usage: Usage;
   costUsd: number;
+  /**
+  * The fold behind `costUsd` (RV702): 'per-call' when every usage
+  * slice of the invocation (restored included) is covered by
+  * per-request records priced individually, the settled fold's own
+  * basis; 'aggregate-estimate' when it is not (the aggregate number
+  * is kept so restored spend is never silently dropped, and labeled
+  * so it is never mistaken for the per-request fold). Absent on
+  * streams recorded before RV702, which priced the aggregate.
+  */
+  costBasis?: CostBasis;
   entryRef: number;
   /**
   * Present and true when this agent's usage is approximate rather
@@ -4376,6 +4406,15 @@ interface AgentResult<T> {
   output: T | null;
   usage: Usage;
   costUsd: number;
+  /**
+  * The fold behind `costUsd` (RV702): 'per-call' when every usage
+  * slice (restored included) is covered by per-request records priced
+  * individually, exactly the settled fold's basis; 'aggregate-estimate'
+  * when a restored checkpoint left usage no record backs, in which case
+  * the aggregate-priced number is kept (never silently dropped) and
+  * labeled.
+  */
+  costBasis: CostBasis;
   turns: number;
   /**
   * The model that actually served the loop phase at the end (M4-T04):
@@ -5973,7 +6012,11 @@ declare class AdmissionController {
 * Folds the per-run attribution buckets into the normative CostReport.
 * Live attribution buckets never see abandoned subtrees, so a host
 * that tracked abandoned spend itself passes it as `abandoned`;
-* omitted, the report shows a gross equal to the net.
+* omitted, the report shows a gross equal to the net. Non-finite
+* numbers anywhere in the inputs are a typed refusal (RV705): this
+* exported builder is the same public surface as
+* {@link costReportFromJournal} and holds the same RV610 doctrine,
+* instead of letting an Infinity or NaN serialize into null downstream.
 */
 declare function buildCostReport(attribution: CostAttribution, totalUsd: number, abandoned?: CostReport["abandoned"]): CostReport;
 /**
@@ -9430,6 +9473,13 @@ declare class JsonlFileStore implements MetaLookupStore {
   private metaPath;
   append(runId: string, e: JournalEntry): Promise<void>;
   load(runId: string): Promise<JournalEntry[]>;
+  /**
+  * Restores the trailing '\n' of a parseable-but-unterminated tail
+  * (RV701). One byte appended in place terminates the record exactly
+  * where the crash left it; the file's bytes before it stay untouched.
+  * No-op on a missing, empty, or already-terminated journal.
+  */
+  private terminateUnterminatedTail;
   private repairTornTail;
   putMeta(m: RunMeta): Promise<void>;
   getMeta(runId: string): Promise<RunMeta | undefined>;
@@ -10399,6 +10449,12 @@ interface PhaseRow {
   durationMs: number;
   usage: Usage;
   costUsd: number;
+  /**
+  * The fold behind `costUsd` (RV702). An event stream recorded before
+  * the field shipped priced aggregates, so an absent field reduces to
+  * 'aggregate-estimate', never to a per-call claim it cannot back.
+  */
+  costBasis: CostBasis;
   outcome?: "ok" | "error";
   retries: number;
   replayed: boolean;
@@ -10416,6 +10472,12 @@ interface AgentInvocationRow {
   status?: string;
   usage: Usage;
   costUsd: number;
+  /**
+  * The fold behind `costUsd` (RV702), from the span's agent:end; an
+  * absent field (a pre-RV702 stream, or a span still open) reduces to
+  * 'aggregate-estimate', never to a per-call claim it cannot back.
+  */
+  costBasis: CostBasis;
   usageApprox: boolean;
   retryCount: number;
   /**
@@ -10431,10 +10493,15 @@ interface AgentInvocationRow {
 /** The reduced table plus the per-role aggregate across every span. */
 interface InvocationTable {
   agents: AgentInvocationRow[];
-  /** Aggregated over COMPLETED phase pairs, keyed by role. */
+  /**
+  * Aggregated over COMPLETED phase pairs, keyed by role. The bucket's
+  * `costBasis` is 'per-call' only while EVERY folded pair carried the
+  * per-call basis; one aggregate-estimate pair degrades the bucket.
+  */
   byRole: Record<string, {
     usage: Usage;
     costUsd: number;
+    costBasis: CostBasis;
   }>;
   /** Sum of agent:end costUsd over settled spans. */
   totalCostUsd: number;
@@ -10546,4 +10613,4 @@ interface SandboxBridge {
 declare const SANDBOX_AGENT_OPT_KEYS: readonly string[];
 declare function createSandboxBridge(ctx: Ctx<never>, options: SandboxBridgeOptions): SandboxBridge;
 //#endregion
-export { AWAIT_SCHEMA, AbandonAttempt, AbandonFold, AbandonPayload, AbandonedSpendView, AbortClass, type AdaptiveEvents, AdmissionController, AdmissionDecision, AdmissionRejectedError, AdmissionStatsBefore, AdmitLineage, AdmitRejectReason, AdmitSpec, AdmitVerdict, AgentCallError, AgentError, type AgentEvents, AgentIdentityInput, type AgentInvocationRow, AgentOpts, AgentProfile, AgentProfilePermissions, AgentProfileTemplateOptions, AgentResult, AgentResultMeta, AgentStatus, type AppliedPricingRow, ApproachSignatureInputs, ApprovalDecision, ApprovalIdentityInput, Artifact, AttemptOutcomeClass, AuditCategory, AuditRecord, AuditRunsOptions, BUDGET_ABORT_REASON, BaseAppend, BriefOpts, BudgetAccountView, BudgetDefaults, BudgetExhaustedError, BudgetExhaustionDiagnostics, BudgetHooks, BudgetReserve, type Bytes, CANCEL_AGENT_SCHEMA, CHECKPOINT_FORMAT_V1, CLAIM_STATEMENT_MAX_CHARS, CLAIM_TTL_DAYS, COMPACTION_SUMMARY_PREFIX, CURRENT_HASH_VERSION, CacheHint, CacheTtl, CanUseTool, CanonicalId, CanonicalIdentity, CanonicalLadderSpec, CanonicalModelSpec, ChatEvent, ChatRequest, CheckpointState, ChildArtifactPage, ChildIdentityInput, ChildResultPage, type ClaimClass, type ClaimOp, type ClaimStatus, ClaimValidationOptions, CollectOpts, CollectedTurn, CompactionConfig, CompiledPermissionChain, CompiledWorkflow, ConfigError, type CoreEvents, CostAttribution, CostAttributionFacts, CostReport, CreateEngineOptions, type CriticalPath, Ctx, DEFAULT_CHILD_BUDGET_FRACTION, DEFAULT_CHILD_RESULT_PAGE_CHARS, DEFAULT_CITATION_PATTERN, DEFAULT_CITATION_SAMPLE, DEFAULT_COMPACTION_THRESHOLD, DEFAULT_ESCALATION_LIMITS, DEFAULT_EVIDENCE_CALLS_PER_ENTRY, DEFAULT_EVIDENCE_MIN_SHARE, DEFAULT_EVIDENCE_OVERHEAD_CALLS, DEFAULT_FINISH_MAX_REPAIRS, DEFAULT_FLAT_RESERVE_USD, DEFAULT_MAX_CHILDREN_PER_NODE, DEFAULT_MAX_DEPTH, DEFAULT_MAX_OSCILLATIONS_PER_KEY, DEFAULT_MAX_PINNED_WORKTREES, DEFAULT_MAX_REVISIONS_PER_RUN, DEFAULT_MAX_TOTAL_SPAWNS, DEFAULT_MAX_TURNS, DEFAULT_MODEL_RETRY_ATTEMPTS, DEFAULT_NO_PROGRESS_TURNS, DEFAULT_PER_RUN_CONCURRENCY, DEFAULT_RETRY_POLICY, DEFAULT_STREAM_IDLE_TIMEOUT_MS, DEFAULT_SYNTHESIS_MAX_TURNS, DEFAULT_SYNTHESIS_NOTE_MAX_TURNS, DataKeyProvider, DebitResult, DeclaredLadder, DedupIndex, DedupNote, DedupedClaims, DerivedKey, DeriverRegistry, type DeterminismConfig, DeterminismError, type DeterminismEvents, type DeterminismMode, DispositionRule, DispositionTable, DonorCandidate, DonorRef, DroppedItem, EMIT_RESULT_TOOL, EMPTY_SCHEMA_HASH, EMPTY_TOOLSET_HASH, ESCALATE_TOOL_NAME, ESCALATION_REPORT_SCHEMA, ESCALATION_REQUEST_SCHEMA, EVENT_SEGMENT_STRIDE, EffectiveUsageLimits, Effort, Engine, EngineDefaults, EngineQuotaConfig, EngineQuotaRuntime, EntryBillingFold, EntryBillingUnit, EntryKind, EntryRef, EntryStatus, EnvelopeEncryption, EnvelopeEncryptionOptions, ErrorClass, ErrorCode, ErrorPolicy, EscalatedResult, EscalationDecision, EscalationDecisionAbortedError, EscalationDigest, EscalationKind, EscalationLimits, EscalationOptions, EscalationReport, EscalationRequest, EventBus, EvidenceContract, type EvidenceRef, type ExecKeyDerivation, type ExecutorRegistry, type ExplorationSummary, ExtensionAppendInput, ExtensionDispatchSpec, ExternalIdentityInput, ExternalRegistry, ExtractNecessityInput, FINALIZE_SYNTHESIS_INSTRUCTION, FINISH_SCHEMA, FINISH_TOOL_NAME, FailRunError, FailoverTarget, FailoverTrigger, FallbackField, FallbackTrigger, FencedCodeMode, FileModelKnowledgeStore, FileModelKnowledgeStoreOptions, FileTranscriptStore, type FinalizationWindowBudget, FinishContract, FinishContractCitations, FinishContractGoldenReject, FinishContractManifest, FinishInfo, FinishSelfTestFailure, FinishSelfTestFixtures, FinishSelfTestReport, FinishValidationChild, FinishValidationInput, FinishValidationSpec, FinishValidationVerdict, FinishValidator, GET_CHILD_RESULT_SCHEMA, GET_CHILD_RESULT_TOOL_NAME, Gate, GateAudit, type GateRecord, GitWorktreeProvider, GitWorktreeProviderOptions, GraftBoot, HashVersion, HookVerdict, IMPLEMENTATION_PROFILE_LIMITS, INBOX_PROPOSAL_TTL_DAYS, IdentityInput, InMemoryStore, InMemoryTranscriptStore, InProcessRunner, IncrementalSynthesisResult, InvalidResolutionError, InvocationRole, type InvocationTable, InvoiceExport, InvoicePricingProvenance, InvoiceReconciliation, InvoiceRow, type IsolatedExecContext, type IsolatedExecRequest, type IsolatedExecutorTag, type IsolationProvider, type IsolationSpec, Issue$1 as Issue, JOURNAL_ENVELOPE_MARKER, JournalCompatSubCode, JournalCompatibilityError, JournalEntry, JournalMatcher, JournalMissError, JournalOperation, JournalOrderViolation, type JournalPricingSnapshot, JournalSerializationContext, JournalSerializationHook, type JournalStore, type Json, JsonSchema, JsonlFileStore, KB_ACTIVE_CLAIMS_CAP, KB_CARD_RENDER_BUDGET_CHARS, type KbProposal, type KbProposalTrigger, KeyDeriver, KeyRing, KeyedLimiter, KnowledgeCasError, type KnowledgeSnapshot, LARGE_VALUE_WARN_BYTES, LEGACY_LTID_PREFIX, LEGACY_SIGNATURE_INPUTS, LINEAGE_SIG_VERSION, LadderSpec, type LeasableStore, type Lease, LeaseHeldError, Ledger, LineageCounters, LineageIndex, LineageRef, LineageRelation, LineageStats, LogicalTaskId, MASKED_SECRET, MAX_CHILD_RESULT_PAGE_CHARS, MAX_DEPTH_CEILING, MAX_TIMER_DELAY_MS, MatchResult, McpConfig, McpToolSource, MechanicalGateProfile, MechanicalGateVerdict, MemoryQuotaLimiter, type MetaLookupStore, type ModelCaps, ModelChoice, type ModelClaim, ModelEpochInputs, type ModelKnowledgeHandle, type ModelKnowledgeStore, ModelListConstraint, ModelRef, ModelRetry, ModelSpec, Msg, NoProgressDetector, NodeId, NodeLinkValue, NonSerializableValueError, ORCHESTRATE_WORKFLOW_NAME, OnEscalation, OperationDisposition, OrchestrateAcceptance, OrchestrateOptions, OrchestrateSynthesis, OrchestrateSynthesisSkipReason, OrchestratorBudgetSpec, OrchestratorCapConfigError, OrchestratorExtension, OrchestratorExtensionIO, OrchestratorRuntime, Out, PARALLEL_AGENTS_SCHEMA, PROGRESS_REPORT_TOOL_NAME, ParallelSiteCounter, Part, PendingExternal, PendingToolTurn, PermissionConfig, PermissionGate, PermissionHook, PermissionPreset, PermissionRule, PermissionVerdict, type PhaseRow, PhaseTarget, type PinnedPricingSegment, PipelineCollected, PipelineOpts, PlanInvariantError, PreflightAdmissionRow, PreflightFinding, PreflightInput, PreflightOrchestratorSpec, PreflightReport, PreflightSpawnReport, PreflightSpawnSpec, PreflightToolCeiling, PriceTable, PricedUsage, type Pricing, type PricingTier, ProgressReport, type ProviderAdapter, ProviderCallRecord, QUOTA_WINDOW_MS, QualityFloors, QuotaCounters, type QuotaDecision, type QuotaEstimate, type QuotaLimiter, type QuotaReservationRequest, QuotaRule, QuotaWindowSnapshot, READ_CHILD_ARTIFACT_SCHEMA, READ_CHILD_ARTIFACT_TOOL_NAME, RESEARCH_PROFILE_LIMITS, REVIEW_PROFILE_LIMITS, ROLE_EFFORT_DEFAULTS, ROOT_ACCOUNT, ROOT_SCOPE, RUN_PROFILES, RUN_SETTLE_DECISION_TYPE, RandIdentityInput, RandPayload, RateLimitObservation, ReconcileOptions, ReconcileResult, RefEntryAppender, RefEntryClassification, RefusalInfo, RepeatedClaim, ReplayDisposition, ReplayMode, ReplayPlanHashMismatch, Replayer, RepositoryResearchToolset, RepositoryResearchToolsetOptions, ResearchAgentProfileOptions, ResearchAgentProfileResult, ResearchEvidenceEntry, ResolutionArbiter, ResolutionAttempt, ResolutionBy, ResolutionFold, ResolutionLayer, ResolutionOutcome, ResolutionPayload, ResolvedInvocation, ResolvedToolset, ResumeHandle, ResumeOptions, ResumePreview, ResumeReport, RetryClass, RetryPolicy, ReuseConfig, RiskRuleValue, Role, RulvarError, RulvarErrorCode, RunAgentOptions, RunAuditVerdict, RunBudget, RunEventSink, RunExport, type RunFilter, RunHandle, RunInternals, type RunMeta, RunOptions, RunOutcome, RunProfile, RunStateAudit, RunStatus, RuntimeEventSink, SANDBOX_AGENT_OPT_KEYS, SPAWN_AGENT_SCHEMA, SandboxBridge, SandboxBridgeOptions, SandboxError, SandboxHostToWorker, SandboxMethod, SandboxWorkerToHost, SchemaPair, SchemaSpec, SchemaValidationResult, ScopeSegment, ScriptRejected, ScriptRunner, ScrubNote, SecretMasker, SectionMatchMode, Semaphore, SerializationHook, Settled, SettlementError, ShellPatternRules, ShellSegment, ShellVerdict, SinglePhaseAppend, SpanMinter, SpanRegistry, SpawnAdmissionValue, SpawnAgentParams, SpawnKey, SpawnLineage, SpawnLineageOpt, SpawnOrigin, SpawnRecord, Spend, Stage, type StandardJSONSchemaV1, type StandardSchemaV1, StepIdentityInput, StructuredOutputTier, SuspendedAppend, SuspensionState, TOOL_NAME_PATTERN, type TaskClass, TaskDigest, TaskSpec, TerminalPatch, TerminationAccount, TerminationAccountSnapshot, TerminationDeniedValue, TerminationDeniedWriter, TerminationInitValue, TerminationLimits, TerminationResource, type ToolBudgetSummary, ToolCallRequest, ToolChoice, type ToolContext, ToolContextSeed, ToolContract, type ToolDef, type ToolEvents, type ToolExecutor, type ToolExecutorProvider, ToolInit, type ToolRisk, ToolRuntime, type ToolSource, type ToolSourceSession, ToolsOption, TranscriptSerializationHook, type TranscriptStore, TriggerClass, TtlState, Usage, UsageLimits, UsageSlice, VerifiedRecommendation, WAIT_FOR_EVENTS_SCHEMA, WAIT_FOR_EVENTS_TOOL_NAME, WAKE_SUMMARY_RENDER_BUDGET_CHARS, WakeBudgetBlock, WakeDigest, WakeTrigger, WireError, Workflow, WorkflowCallOpts, type WorkflowEvent, type WorkflowEventBody, WorkflowRegistry, admissionReserveUsd, affordableOutputTokens, agentErrorFromWire, agentErrorToWire, agentResultWire, agentScope, applyClaimOps, applyStructuredOutputTier, approachSigCoarse, approachSigOf, archiveDeprecatedModelOps, assertFencedWrites, atCompactionThreshold, auditRun, auditRuns, buildAbandonFold, buildAdapterRegistry, buildCostReport, buildDeriverRegistry, buildOrchestratorTools, buildTerminationInitValue, buildToolContext, canRideLoopTurn, canonicalIsolationTag, canonicalizeLadder, canonicalizeSchema, capIssues, capsHashOf, checkFloors, checkpointRefFor, childCoveragePrefix, claimExpired, claimExpiry, claimIssues, claimOpIssues, classifyAgentError, classifyAttemptOutcome, collectDeclaredLadders, compactMessages, compilePermissionChain, compilePermissionPreset, compileSecretMasker, compileVerifiedLayer, constantTimeEqual, costReportFromJournal, countsAgainstLimit, createCanonicalIdMinter, createCtx, createEngine, createEnvelopeEncryption, createSandboxBridge, currentOnlyKeyRing, decodeCheckpoint, dedupeRepeatedClaims, defineWorkflow, deriveContentKey, deriverV1, deriverV2, digestOf, dispatchProjectionReserveUsd, dispositionHook, emptyDigestBlocks, emptyToolset, encodeCheckpoint, entryUsageSlices, escalateTool, evaluatePermission, evaluateReuse, evidencePreservedValidator, executeWorkflow, exhaustionCodeOf, extractCandidate, failoverTriggerOf, fallbackTriggerOf, filterClaimsForRun, finalizeFires, finishContract, foldTermination, formatRePrompt, formatScopePath, hasFencedWrites, hasMetaLookup, hashRunArgs, hashRunOutput, hashWorkflowBody, hashWorkflowSource, headingStructureValidator, identityJcs, implementationAgentProfile, invoiceFromJournal, isEscalated, isSchemaPairSpec, isStandardSchemaSpec, isStrictCompatibleSchema, journalPricingSnapshot, kMaxOf, knowledgeHash, ladderLengthOf, ladderRungChoice, lastRunSettle, latestProgressReport, lexShellCommand, liftRetainedParts, lineageWeightOf, localKeyProvider, makeOrchestratorWorkflow, maskSecrets, maskSecretsDeep, maskSecretsJson, matchArgvPattern, matchShellCommand, mcp, memoryQuotaLimiter, mergeQuotaDenial, mergeUsageLimits, metaMatchesFilter, minMatchesValidator, modelEpochOf, modelKnowledgeCard, modelSpecIdentity, needsSeparateExtract, nextFailover, nodeLinkKey, normalizeApproachTag, normalizeEntry, normalizeFallbacks, orchestrate, orchestratorAdmissionEstCostUsd, parallelScope, parseModelRef, parseScopePath, phiInitialOf, pipelineScope, planNodeScope, preflightEstimate, priceEntryBilling, priceEntryUsage, priceUsdOf, profileCard, profileRegistrySnapshotHash, progressReportTool, projectHistory, projectIdentity, projectToJsonSchema, proposalStatement, providerOf, quotaActualTokens, quotaEstimateTokens, quotaRuleAdmission, quotaRuleKey, quotaRuleMatches, readRunMeta, readTerminationInit, reconcileRunMeta, reduceAuditTrail, reduceCriticalPath, reduceInvocationTable, registryKeyRing, remeasureQueue, replayDisposition, repositoryResearchToolset, requiredFieldsValidator, requiredSectionsValidator, researchAgentProfile, resolveModelInvocation, resolvePricing, resolveToolset, retryClassOf, retryDelayMs, reviewAgentProfile, roleConfiguredInRouting, roundOneDisposition, runAgent, runProfile, sanitizeTerminalText, sanitizeTokenCount, sanitizeUsage, sanitizeUsageDelta, scanJournalCompatibility, schemaHash, schemaHashOfSpec, sectionCitationsValidator, selectStructuredOutputTier, selfTestFinishValidation, shouldCompact, snapshotQuotaRules, snapshotUsage, spawnDepthOf, stripFencedBlocks, summarizeInstruction, summarizeOutput, terminationConfigDrift, tierWithinCaps, toApprovalDecision, toJournalValue, tool, toolContract, toolsetHash, ttlState, usageViolations, validateEditorialCommit, validateEngineQuotaConfig, validateEntryShape, validateEscalationLimits, validateEscalationReport, validateQuotaRules, validateRetryPolicy, validateSchemaSpec, validateTerminationLimits, validateUsageLimits, wordCountValidator, workflowScope, workflowSourceRef, wrapJournalStore, wrapTranscriptStore };
+export { AWAIT_SCHEMA, AbandonAttempt, AbandonFold, AbandonPayload, AbandonedSpendView, AbortClass, type AdaptiveEvents, AdmissionController, AdmissionDecision, AdmissionRejectedError, AdmissionStatsBefore, AdmitLineage, AdmitRejectReason, AdmitSpec, AdmitVerdict, AgentCallError, AgentError, type AgentEvents, AgentIdentityInput, type AgentInvocationRow, AgentOpts, AgentProfile, AgentProfilePermissions, AgentProfileTemplateOptions, AgentResult, AgentResultMeta, AgentStatus, type AppliedPricingRow, ApproachSignatureInputs, ApprovalDecision, ApprovalIdentityInput, Artifact, AttemptOutcomeClass, AuditCategory, AuditRecord, AuditRunsOptions, BUDGET_ABORT_REASON, BaseAppend, BriefOpts, BudgetAccountView, BudgetDefaults, BudgetExhaustedError, BudgetExhaustionDiagnostics, BudgetHooks, BudgetReserve, type Bytes, CANCEL_AGENT_SCHEMA, CHECKPOINT_FORMAT_V1, CLAIM_STATEMENT_MAX_CHARS, CLAIM_TTL_DAYS, COMPACTION_SUMMARY_PREFIX, CURRENT_HASH_VERSION, CacheHint, CacheTtl, CanUseTool, CanonicalId, CanonicalIdentity, CanonicalLadderSpec, CanonicalModelSpec, ChatEvent, ChatRequest, CheckpointState, ChildArtifactPage, ChildIdentityInput, ChildResultPage, type ClaimClass, type ClaimOp, type ClaimStatus, ClaimValidationOptions, CollectOpts, CollectedTurn, CompactionConfig, CompiledPermissionChain, CompiledWorkflow, ConfigError, type CoreEvents, CostAttribution, CostAttributionFacts, type CostBasis, CostReport, CreateEngineOptions, type CriticalPath, Ctx, DEFAULT_CHILD_BUDGET_FRACTION, DEFAULT_CHILD_RESULT_PAGE_CHARS, DEFAULT_CITATION_PATTERN, DEFAULT_CITATION_SAMPLE, DEFAULT_COMPACTION_THRESHOLD, DEFAULT_ESCALATION_LIMITS, DEFAULT_EVIDENCE_CALLS_PER_ENTRY, DEFAULT_EVIDENCE_MIN_SHARE, DEFAULT_EVIDENCE_OVERHEAD_CALLS, DEFAULT_FINISH_MAX_REPAIRS, DEFAULT_FLAT_RESERVE_USD, DEFAULT_MAX_CHILDREN_PER_NODE, DEFAULT_MAX_DEPTH, DEFAULT_MAX_OSCILLATIONS_PER_KEY, DEFAULT_MAX_PINNED_WORKTREES, DEFAULT_MAX_REVISIONS_PER_RUN, DEFAULT_MAX_TOTAL_SPAWNS, DEFAULT_MAX_TURNS, DEFAULT_MODEL_RETRY_ATTEMPTS, DEFAULT_NO_PROGRESS_TURNS, DEFAULT_PER_RUN_CONCURRENCY, DEFAULT_RETRY_POLICY, DEFAULT_STREAM_IDLE_TIMEOUT_MS, DEFAULT_SYNTHESIS_MAX_TURNS, DEFAULT_SYNTHESIS_NOTE_MAX_TURNS, DataKeyProvider, DebitResult, DeclaredLadder, DedupIndex, DedupNote, DedupedClaims, DerivedKey, DeriverRegistry, type DeterminismConfig, DeterminismError, type DeterminismEvents, type DeterminismMode, DispositionRule, DispositionTable, DonorCandidate, DonorRef, DroppedItem, EMIT_RESULT_TOOL, EMPTY_SCHEMA_HASH, EMPTY_TOOLSET_HASH, ESCALATE_TOOL_NAME, ESCALATION_REPORT_SCHEMA, ESCALATION_REQUEST_SCHEMA, EVENT_SEGMENT_STRIDE, EffectiveUsageLimits, Effort, Engine, EngineDefaults, EngineQuotaConfig, EngineQuotaRuntime, EntryBillingFold, EntryBillingUnit, EntryKind, EntryRef, EntryStatus, EnvelopeEncryption, EnvelopeEncryptionOptions, ErrorClass, ErrorCode, ErrorPolicy, EscalatedResult, EscalationDecision, EscalationDecisionAbortedError, EscalationDigest, EscalationKind, EscalationLimits, EscalationOptions, EscalationReport, EscalationRequest, EventBus, EvidenceContract, type EvidenceRef, type ExecKeyDerivation, type ExecutorRegistry, type ExplorationSummary, ExtensionAppendInput, ExtensionDispatchSpec, ExternalIdentityInput, ExternalRegistry, ExtractNecessityInput, FINALIZE_SYNTHESIS_INSTRUCTION, FINISH_SCHEMA, FINISH_TOOL_NAME, FailRunError, FailoverTarget, FailoverTrigger, FallbackField, FallbackTrigger, FencedCodeMode, FileModelKnowledgeStore, FileModelKnowledgeStoreOptions, FileTranscriptStore, type FinalizationWindowBudget, FinishContract, FinishContractCitations, FinishContractGoldenReject, FinishContractManifest, FinishInfo, FinishSelfTestFailure, FinishSelfTestFixtures, FinishSelfTestReport, FinishValidationChild, FinishValidationInput, FinishValidationSpec, FinishValidationVerdict, FinishValidator, GET_CHILD_RESULT_SCHEMA, GET_CHILD_RESULT_TOOL_NAME, Gate, GateAudit, type GateRecord, GitWorktreeProvider, GitWorktreeProviderOptions, GraftBoot, HashVersion, HookVerdict, IMPLEMENTATION_PROFILE_LIMITS, INBOX_PROPOSAL_TTL_DAYS, IdentityInput, InMemoryStore, InMemoryTranscriptStore, InProcessRunner, IncrementalSynthesisResult, InvalidResolutionError, InvocationRole, type InvocationTable, InvoiceExport, InvoicePricingProvenance, InvoiceReconciliation, InvoiceRow, type IsolatedExecContext, type IsolatedExecRequest, type IsolatedExecutorTag, type IsolationProvider, type IsolationSpec, Issue$1 as Issue, JOURNAL_ENVELOPE_MARKER, JournalCompatSubCode, JournalCompatibilityError, JournalEntry, JournalMatcher, JournalMissError, JournalOperation, JournalOrderViolation, type JournalPricingSnapshot, JournalSerializationContext, JournalSerializationHook, type JournalStore, type Json, JsonSchema, JsonlFileStore, KB_ACTIVE_CLAIMS_CAP, KB_CARD_RENDER_BUDGET_CHARS, type KbProposal, type KbProposalTrigger, KeyDeriver, KeyRing, KeyedLimiter, KnowledgeCasError, type KnowledgeSnapshot, LARGE_VALUE_WARN_BYTES, LEGACY_LTID_PREFIX, LEGACY_SIGNATURE_INPUTS, LINEAGE_SIG_VERSION, LadderSpec, type LeasableStore, type Lease, LeaseHeldError, Ledger, LineageCounters, LineageIndex, LineageRef, LineageRelation, LineageStats, LogicalTaskId, MASKED_SECRET, MAX_CHILD_RESULT_PAGE_CHARS, MAX_DEPTH_CEILING, MAX_TIMER_DELAY_MS, MatchResult, McpConfig, McpToolSource, MechanicalGateProfile, MechanicalGateVerdict, MemoryQuotaLimiter, type MetaLookupStore, type ModelCaps, ModelChoice, type ModelClaim, ModelEpochInputs, type ModelKnowledgeHandle, type ModelKnowledgeStore, ModelListConstraint, ModelRef, ModelRetry, ModelSpec, Msg, NoProgressDetector, NodeId, NodeLinkValue, NonSerializableValueError, ORCHESTRATE_WORKFLOW_NAME, OnEscalation, OperationDisposition, OrchestrateAcceptance, OrchestrateOptions, OrchestrateSynthesis, OrchestrateSynthesisSkipReason, OrchestratorBudgetSpec, OrchestratorCapConfigError, OrchestratorExtension, OrchestratorExtensionIO, OrchestratorRuntime, Out, PARALLEL_AGENTS_SCHEMA, PROGRESS_REPORT_TOOL_NAME, ParallelSiteCounter, Part, PendingExternal, PendingToolTurn, PermissionConfig, PermissionGate, PermissionHook, PermissionPreset, PermissionRule, PermissionVerdict, type PhaseRow, PhaseTarget, type PinnedPricingSegment, PipelineCollected, PipelineOpts, PlanInvariantError, PreflightAdmissionRow, PreflightFinding, PreflightInput, PreflightOrchestratorSpec, PreflightReport, PreflightSpawnReport, PreflightSpawnSpec, PreflightToolCeiling, PriceTable, PricedUsage, type Pricing, type PricingTier, ProgressReport, type ProviderAdapter, ProviderCallRecord, QUOTA_WINDOW_MS, QualityFloors, QuotaCounters, type QuotaDecision, type QuotaEstimate, type QuotaLimiter, type QuotaReservationRequest, QuotaRule, QuotaWindowSnapshot, READ_CHILD_ARTIFACT_SCHEMA, READ_CHILD_ARTIFACT_TOOL_NAME, RESEARCH_PROFILE_LIMITS, REVIEW_PROFILE_LIMITS, ROLE_EFFORT_DEFAULTS, ROOT_ACCOUNT, ROOT_SCOPE, RUN_PROFILES, RUN_SETTLE_DECISION_TYPE, RandIdentityInput, RandPayload, RateLimitObservation, ReconcileOptions, ReconcileResult, RefEntryAppender, RefEntryClassification, RefusalInfo, RepeatedClaim, ReplayDisposition, ReplayMode, ReplayPlanHashMismatch, Replayer, RepositoryResearchToolset, RepositoryResearchToolsetOptions, ResearchAgentProfileOptions, ResearchAgentProfileResult, ResearchEvidenceEntry, ResolutionArbiter, ResolutionAttempt, ResolutionBy, ResolutionFold, ResolutionLayer, ResolutionOutcome, ResolutionPayload, ResolvedInvocation, ResolvedToolset, ResumeHandle, ResumeOptions, ResumePreview, ResumeReport, RetryClass, RetryPolicy, ReuseConfig, RiskRuleValue, Role, RulvarError, RulvarErrorCode, RunAgentOptions, RunAuditVerdict, RunBudget, RunEventSink, RunExport, type RunFilter, RunHandle, RunInternals, type RunMeta, RunOptions, RunOutcome, RunProfile, RunStateAudit, RunStatus, RuntimeEventSink, SANDBOX_AGENT_OPT_KEYS, SPAWN_AGENT_SCHEMA, SandboxBridge, SandboxBridgeOptions, SandboxError, SandboxHostToWorker, SandboxMethod, SandboxWorkerToHost, SchemaPair, SchemaSpec, SchemaValidationResult, ScopeSegment, ScriptRejected, ScriptRunner, ScrubNote, SecretMasker, SectionMatchMode, Semaphore, SerializationHook, Settled, SettlementError, ShellPatternRules, ShellSegment, ShellVerdict, SinglePhaseAppend, SpanMinter, SpanRegistry, SpawnAdmissionValue, SpawnAgentParams, SpawnKey, SpawnLineage, SpawnLineageOpt, SpawnOrigin, SpawnRecord, Spend, Stage, type StandardJSONSchemaV1, type StandardSchemaV1, StepIdentityInput, StructuredOutputTier, SuspendedAppend, SuspensionState, TOOL_NAME_PATTERN, type TaskClass, TaskDigest, TaskSpec, TerminalPatch, TerminationAccount, TerminationAccountSnapshot, TerminationDeniedValue, TerminationDeniedWriter, TerminationInitValue, TerminationLimits, TerminationResource, type ToolBudgetSummary, ToolCallRequest, ToolChoice, type ToolContext, ToolContextSeed, ToolContract, type ToolDef, type ToolEvents, type ToolExecutor, type ToolExecutorProvider, ToolInit, type ToolRisk, ToolRuntime, type ToolSource, type ToolSourceSession, ToolsOption, TranscriptSerializationHook, type TranscriptStore, TriggerClass, TtlState, Usage, UsageLimits, UsageSlice, VerifiedRecommendation, WAIT_FOR_EVENTS_SCHEMA, WAIT_FOR_EVENTS_TOOL_NAME, WAKE_SUMMARY_RENDER_BUDGET_CHARS, WakeBudgetBlock, WakeDigest, WakeTrigger, WireError, Workflow, WorkflowCallOpts, type WorkflowEvent, type WorkflowEventBody, WorkflowRegistry, admissionReserveUsd, affordableOutputTokens, agentErrorFromWire, agentErrorToWire, agentResultWire, agentScope, applyClaimOps, applyStructuredOutputTier, approachSigCoarse, approachSigOf, archiveDeprecatedModelOps, assertFencedWrites, atCompactionThreshold, auditRun, auditRuns, buildAbandonFold, buildAdapterRegistry, buildCostReport, buildDeriverRegistry, buildOrchestratorTools, buildTerminationInitValue, buildToolContext, canRideLoopTurn, canonicalIsolationTag, canonicalizeLadder, canonicalizeSchema, capIssues, capsHashOf, checkFloors, checkpointRefFor, childCoveragePrefix, claimExpired, claimExpiry, claimIssues, claimOpIssues, classifyAgentError, classifyAttemptOutcome, collectDeclaredLadders, compactMessages, compilePermissionChain, compilePermissionPreset, compileSecretMasker, compileVerifiedLayer, constantTimeEqual, costReportFromJournal, countsAgainstLimit, createCanonicalIdMinter, createCtx, createEngine, createEnvelopeEncryption, createSandboxBridge, currentOnlyKeyRing, decodeCheckpoint, dedupeRepeatedClaims, defineWorkflow, deriveContentKey, deriverV1, deriverV2, digestOf, dispatchProjectionReserveUsd, dispositionHook, emptyDigestBlocks, emptyToolset, encodeCheckpoint, entryUsageSlices, escalateTool, evaluatePermission, evaluateReuse, evidencePreservedValidator, executeWorkflow, exhaustionCodeOf, extractCandidate, failoverTriggerOf, fallbackTriggerOf, filterClaimsForRun, finalizeFires, finishContract, foldTermination, formatRePrompt, formatScopePath, hasFencedWrites, hasMetaLookup, hashRunArgs, hashRunOutput, hashWorkflowBody, hashWorkflowSource, headingStructureValidator, identityJcs, implementationAgentProfile, invoiceFromJournal, isEscalated, isSchemaPairSpec, isStandardSchemaSpec, isStrictCompatibleSchema, journalPricingSnapshot, kMaxOf, knowledgeHash, ladderLengthOf, ladderRungChoice, lastRunSettle, latestProgressReport, lexShellCommand, liftRetainedParts, lineageWeightOf, localKeyProvider, makeOrchestratorWorkflow, maskSecrets, maskSecretsDeep, maskSecretsJson, matchArgvPattern, matchShellCommand, mcp, memoryQuotaLimiter, mergeQuotaDenial, mergeUsageLimits, metaMatchesFilter, minMatchesValidator, modelEpochOf, modelKnowledgeCard, modelSpecIdentity, needsSeparateExtract, nextFailover, nodeLinkKey, normalizeApproachTag, normalizeEntry, normalizeFallbacks, orchestrate, orchestratorAdmissionEstCostUsd, parallelScope, parseModelRef, parseScopePath, phiInitialOf, pipelineScope, planNodeScope, preflightEstimate, priceEntryBilling, priceEntryUsage, priceUsdOf, profileCard, profileRegistrySnapshotHash, progressReportTool, projectHistory, projectIdentity, projectToJsonSchema, proposalStatement, providerOf, quotaActualTokens, quotaEstimateTokens, quotaRuleAdmission, quotaRuleKey, quotaRuleMatches, readRunMeta, readTerminationInit, reconcileRunMeta, reduceAuditTrail, reduceCriticalPath, reduceInvocationTable, registryKeyRing, remeasureQueue, replayDisposition, repositoryResearchToolset, requiredFieldsValidator, requiredSectionsValidator, researchAgentProfile, resolveModelInvocation, resolvePricing, resolveToolset, retryClassOf, retryDelayMs, reviewAgentProfile, roleConfiguredInRouting, roundOneDisposition, runAgent, runProfile, sanitizeTerminalText, sanitizeTokenCount, sanitizeUsage, sanitizeUsageDelta, scanJournalCompatibility, schemaHash, schemaHashOfSpec, sectionCitationsValidator, selectStructuredOutputTier, selfTestFinishValidation, shouldCompact, snapshotQuotaRules, snapshotUsage, spawnDepthOf, stripFencedBlocks, summarizeInstruction, summarizeOutput, terminationConfigDrift, tierWithinCaps, toApprovalDecision, toJournalValue, tool, toolContract, toolsetHash, ttlState, usageViolations, validateEditorialCommit, validateEngineQuotaConfig, validateEntryShape, validateEscalationLimits, validateEscalationReport, validateQuotaRules, validateRetryPolicy, validateSchemaSpec, validateTerminationLimits, validateUsageLimits, wordCountValidator, workflowScope, workflowSourceRef, wrapJournalStore, wrapTranscriptStore };

package/dist/index.js

@@ -1,5 +1,5 @@
 import { createCipheriv, createDecipheriv, createHash, createHmac, getRandomValues, hkdfSync, randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
-import { appendFileSync, mkdirSync, readFileSync, readdirSync, realpathSync, renameSync, rmSync, statSync, writeFileSync } from "node:fs";
+import { appendFileSync, closeSync, fstatSync, mkdirSync, openSync, readFileSync, readSync, readdirSync, realpathSync, renameSync, rmSync, statSync, writeFileSync } from "node:fs";
 import path, { dirname, join, resolve, sep } from "node:path";
 import { Client } from "@modelcontextprotocol/sdk/client";
 import { StdioClientTransport } from "@modelcontextprotocol/sdk/client/stdio.js";
@@ -8080,7 +8080,13 @@ async function reconcileRunMeta(store, runId, opts) {
 *
 * Contract (DEF-4 tightening):
 * - A1 atomicity: a torn trailing line (crash mid-append) is never
-*   visible in load; it is dropped and overwritten by the next append.
+*   visible in load; the incomplete fragment is dropped and overwritten
+*   by the next append. Whole records on that line are data, never
+*   fragment (RV701): a crash that persisted every JSON byte but not
+*   the '\n' leaves a parseable tail that load serves and append
+*   terminates before writing, and repair salvages complete records a
+*   glued line carries instead of discarding the line, so an entry a
+*   load has served can never be un-served by a later repair.
 * - A2 total per-run order: load returns append order, stable across
 *   calls (the kernel's per-run queue serializes appends).
 * - A3 read-your-writes: append resolves after the line is written.
@@ -8097,6 +8103,62 @@ function safeName(runId) {
 	if (!/^[A-Za-z0-9._-]+$/.test(runId)) throw new JournalOrderViolation(`JsonlFileStore: runId '${runId}' is not filesystem-safe ([A-Za-z0-9._-] only)`);
 	return runId;
 }
+/**
+* Whole JSON values glued on one line, split apart without parser
+* ambiguity (RV701): depth is tracked outside string literals only, and
+* every candidate must still round-trip JSON.parse. A line that is not a
+* clean concatenation from its first byte salvages its whole prefix
+* values and returns everything after them as the torn fragment, so the
+* caller keeps accepted records and drops exactly the unacknowledged
+* tail a crash tore.
+*/
+function splitConcatenatedJson(line) {
+	const whole = [];
+	let start = 0;
+	let depth = 0;
+	let inString = false;
+	let escaped = false;
+	for (let i = 0; i < line.length; i += 1) {
+		const ch = line[i];
+		if (inString) {
+			if (escaped) escaped = false;
+			else if (ch === "\\") escaped = true;
+			else if (ch === "\"") inString = false;
+			continue;
+		}
+		if (ch === "\"") {
+			inString = true;
+			continue;
+		}
+		if (ch === "{" || ch === "[") {
+			depth += 1;
+			continue;
+		}
+		if (ch === "}" || ch === "]") {
+			depth -= 1;
+			if (depth < 0) return {
+				whole,
+				fragment: line.slice(start)
+			};
+			if (depth === 0) {
+				const candidate = line.slice(start, i + 1);
+				try {
+					whole.push(JSON.parse(candidate));
+				} catch {
+					return {
+						whole,
+						fragment: line.slice(start)
+					};
+				}
+				start = i + 1;
+			}
+		}
+	}
+	return {
+		whole,
+		fragment: line.slice(start)
+	};
+}
 var JsonlFileStore = class {
 	dir;
 	/**
@@ -8119,6 +8181,7 @@ var JsonlFileStore = class {
 		let tail = this.lastSeq.get(runId);
 		if (tail === void 0) {
 			const existing = await this.load(runId);
+			this.terminateUnterminatedTail(runId);
 			const last = existing[existing.length - 1];
 			tail = last !== void 0 && Number.isFinite(last.seq) ? last.seq : Number.NEGATIVE_INFINITY;
 			this.lastSeq.set(runId, tail);
@@ -8144,6 +8207,7 @@ var JsonlFileStore = class {
 				entries.push(JSON.parse(line));
 			} catch (thrown) {
 				if (lines.slice(i + 1).every((rest) => rest === "")) {
+					for (const value of splitConcatenatedJson(line).whole) entries.push(value);
 					this.repairTornTail(runId, entries);
 					break;
 				}
@@ -8152,6 +8216,34 @@ var JsonlFileStore = class {
 		}
 		return entries;
 	}
+	/**
+	* Restores the trailing '\n' of a parseable-but-unterminated tail
+	* (RV701). One byte appended in place terminates the record exactly
+	* where the crash left it; the file's bytes before it stay untouched.
+	* No-op on a missing, empty, or already-terminated journal.
+	*/
+	terminateUnterminatedTail(runId) {
+		const path = this.journalPath(runId);
+		let fd;
+		try {
+			fd = openSync(path, "r");
+		} catch (thrown) {
+			if (thrown.code === "ENOENT") return;
+			throw thrown;
+		}
+		let needsNewline = false;
+		try {
+			const size = fstatSync(fd).size;
+			if (size > 0) {
+				const lastByte = /* @__PURE__ */ new Uint8Array(1);
+				readSync(fd, lastByte, 0, 1, size - 1);
+				needsNewline = lastByte[0] !== 10;
+			}
+		} finally {
+			closeSync(fd);
+		}
+		if (needsNewline) appendFileSync(path, "\n", "utf8");
+	}
 	repairTornTail(runId, whole) {
 		const path = this.journalPath(runId);
 		const temp = `${path}.tmp`;
@@ -8308,7 +8400,11 @@ function isOrchestratorAccount(scope) {
 * Folds the per-run attribution buckets into the normative CostReport.
 * Live attribution buckets never see abandoned subtrees, so a host
 * that tracked abandoned spend itself passes it as `abandoned`;
-* omitted, the report shows a gross equal to the net.
+* omitted, the report shows a gross equal to the net. Non-finite
+* numbers anywhere in the inputs are a typed refusal (RV705): this
+* exported builder is the same public surface as
+* {@link costReportFromJournal} and holds the same RV610 doctrine,
+* instead of letting an Infinity or NaN serialize into null downstream.
 */
 function buildCostReport(attribution, totalUsd, abandoned = {
 	usd: 0,
@@ -8322,7 +8418,7 @@ function buildCostReport(attribution, totalUsd, abandoned = {
 		forcedFinish: false,
 		reserveUsedUsd: 0
 	};
-	return {
+	const report = {
 		totalUsd,
 		grossUsd: totalUsd + abandoned.usd,
 		abandoned,
@@ -8336,6 +8432,8 @@ function buildCostReport(attribution, totalUsd, abandoned = {
 		},
 		unpriced: attribution.unpriced
 	};
+	requireFiniteNumbersDeep(report, "costReport");
+	return report;
 }
 /**
 * The pure journal fold: the complete CostReport from terminal entries,
@@ -10969,6 +11067,18 @@ async function runAgent(options) {
 		});
 	};
 	const providerCalls = [];
+	const usdByPhaseModel = /* @__PURE__ */ new Map();
+	const addCallUsd = (role, ref, usage) => {
+		const priced = options.priceUsd?.(ref, usage) ?? 0;
+		const usd = Number.isFinite(priced) && priced > 0 ? priced : 0;
+		const key = `${role}\u0000${ref}`;
+		const prior = usdByPhaseModel.get(key);
+		usdByPhaseModel.set(key, {
+			role,
+			usd: (prior?.usd ?? 0) + usd
+		});
+	};
+	let perCallCoverage = true;
 	let invocationCounter = 0;
 	let transportRetries = 0;
 	let schemaRecoveredTerminalExchanges = 0;
@@ -10978,6 +11088,11 @@ async function runAgent(options) {
 		for (const [key, slice] of usageByPhaseModel) if (slice.role === role) snapshot.set(key, slice.usage);
 		return snapshot;
 	};
+	const roleUsdSnapshot = (role) => {
+		const snapshot = /* @__PURE__ */ new Map();
+		for (const [key, cell] of usdByPhaseModel) if (cell.role === role) snapshot.set(key, cell.usd);
+		return snapshot;
+	};
 	const usageDelta = (after, before) => {
 		const base = before ?? ZERO_USAGE$1;
 		const delta = {
@@ -11005,19 +11120,22 @@ async function runAgent(options) {
 			role,
 			model,
 			before: roleUsageSnapshot(role),
+			beforeUsd: roleUsdSnapshot(role),
 			startedAtMs: now(),
 			retriesBefore: transportRetries
 		};
 	};
 	const endPhase = (phase, outcome, servedModel) => {
 		let phaseUsage = ZERO_USAGE$1;
-		let phaseUsd = 0;
 		for (const [key, slice] of usageByPhaseModel) {
 			if (slice.role !== phase.role) continue;
 			const delta = usageDelta(slice.usage, phase.before.get(key));
 			phaseUsage = addUsage$1(phaseUsage, delta);
-			const priced = options.priceUsd?.(slice.servedBy, delta) ?? 0;
-			if (Number.isFinite(priced) && priced > 0) phaseUsd += priced;
+		}
+		let phaseUsd = 0;
+		for (const [key, cell] of usdByPhaseModel) {
+			if (cell.role !== phase.role) continue;
+			phaseUsd += cell.usd - (phase.beforeUsd.get(key) ?? 0);
 		}
 		const retries = transportRetries - phase.retriesBefore;
 		events?.emit({
@@ -11030,6 +11148,7 @@ async function runAgent(options) {
 			durationMs: Math.max(0, now() - phase.startedAtMs),
 			usage: phaseUsage,
 			costUsd: phaseUsd,
+			costBasis: "per-call",
 			outcome,
 			...retries > 0 ? { retries } : {}
 		});
@@ -11278,15 +11397,28 @@ async function runAgent(options) {
 			servedBy,
 			usage: totalUsage
 		}];
+		const restoredSliceSums = /* @__PURE__ */ new Map();
 		for (const slice of restoredSlices) {
 			const sliceUsage = usageViolations(slice.usage).length === 0 ? slice.usage : sanitizeUsage(slice.usage);
 			addPhaseUsage(slice.role ?? primaryRole, slice.servedBy, sliceUsage);
 			options.budget?.onUsage(sliceUsage, slice.servedBy);
-		}
-		for (const record of restored.providerCalls ?? []) providerCalls.push(usageViolations(record.usage).length === 0 ? record : {
-			...record,
-			usage: sanitizeUsage(record.usage)
-		});
+			const key = `${slice.role ?? primaryRole} ${slice.servedBy}`;
+			restoredSliceSums.set(key, addUsage$1(restoredSliceSums.get(key) ?? ZERO_USAGE$1, sliceUsage));
+		}
+		const restoredRecordSums = /* @__PURE__ */ new Map();
+		for (const record of restored.providerCalls ?? []) {
+			const sane = usageViolations(record.usage).length === 0 ? record : {
+				...record,
+				usage: sanitizeUsage(record.usage)
+			};
+			providerCalls.push(sane);
+			addCallUsd(sane.role ?? primaryRole, sane.servedBy, sane.usage);
+			const key = `${sane.role ?? primaryRole} ${sane.servedBy}`;
+			restoredRecordSums.set(key, addUsage$1(restoredRecordSums.get(key) ?? ZERO_USAGE$1, sane.usage));
+		}
+		const usageEquals = (a, b) => a.inputTokens === b.inputTokens && a.outputTokens === b.outputTokens && a.cacheReadTokens === b.cacheReadTokens && a.cacheWriteTokens === b.cacheWriteTokens && (a.reasoningTokens ?? 0) === (b.reasoningTokens ?? 0);
+		for (const [key, sliceSum] of restoredSliceSums) if (!usageEquals(sliceSum, restoredRecordSums.get(key) ?? ZERO_USAGE$1)) perCallCoverage = false;
+		for (const key of restoredRecordSums.keys()) if (!restoredSliceSums.has(key)) perCallCoverage = false;
 		guard?.restore(messages);
 		if (limits.toolBudgetNotices === true && limits.maxToolCalls !== void 0) for (const threshold of crossedNoticeThresholds(toolCallsUsed, limits.maxToolCalls)) firedNotices.add(threshold);
 		if (extension !== void 0 && limits.maxToolCalls !== void 0 && toolCallsUsed > limits.maxToolCalls) {
@@ -11337,6 +11469,25 @@ async function runAgent(options) {
 		}
 		return usd;
 	};
+	/**
+	* The invocation's recorded spend (RV702): the per-call accumulator
+	* when every slice is covered by records, the settled fold's own
+	* basis; the labeled aggregate estimate when a restored checkpoint
+	* left usage no record backs, so restored spend is never silently
+	* dropped and an estimate never poses as the per-request fold.
+	*/
+	const recordedSpend = () => {
+		if (!perCallCoverage) return {
+			usd: priceRecordedUsage(),
+			basis: "aggregate-estimate"
+		};
+		let usd = 0;
+		for (const cell of usdByPhaseModel.values()) usd += cell.usd;
+		return {
+			usd,
+			basis: "per-call"
+		};
+	};
 	const saveBoundary = async (pending) => {
 		if (options.checkpoint === void 0) return;
 		await options.checkpoint.save({
@@ -11510,7 +11661,7 @@ async function runAgent(options) {
 					continue;
 				}
 				const request = validation.value;
-				const spentSoFar = priceRecordedUsage();
+				const spentSoFar = recordedSpend().usd;
 				if (countsAgainstLimit(request.kind) && spentSoFar < options.escalation.minSpendUsd) {
 					events?.emit({
 						type: "tool:end",
@@ -11918,6 +12069,7 @@ async function runAgent(options) {
 					if (outcome.aborted !== void 0) record.aborted = outcome.aborted;
 					else if (outcome.wireError !== void 0) record.errorCode = outcome.wireError.code;
 					providerCalls.push(record);
+					addCallUsd(site.role, target.resolved.ref, accounted);
 					const limited = outcome.wireError?.data;
 					if (limited?.kind === "rate-limit" && typeof limited.reportedLimits === "object" && limited.reportedLimits !== null) rateLimitObservations.set(`${target.adapter.id}:${target.resolved.model}`, {
 						provider: target.adapter.id,
@@ -12748,12 +12900,13 @@ async function runAgent(options) {
 		const blob = new TextEncoder().encode(JSON.stringify({ messages }));
 		await options.transcript.put(transcriptRef, blob);
 	}
-	const costUsd = priceRecordedUsage();
+	const spend = recordedSpend();
 	const result = {
 		status,
 		output: status === "ok" ? output : output ?? null,
 		usage: totalUsage,
-		costUsd,
+		costUsd: spend.usd,
+		costBasis: spend.basis,
 		turns,
 		servedBy,
 		transcriptRef
@@ -14569,13 +14722,15 @@ function createCtx(internals, rootWorkflow) {
 				cacheReadTokens: 0,
 				cacheWriteTokens: 0
 			};
-			const replayPriced = terminal === void 0 ? void 0 : priceEntryUsage(terminal, (ref, sliceUsage) => internals.priceUsd(ref, sliceUsage));
+			const replayPriced = terminal === void 0 ? void 0 : priceEntryBilling(terminal, (ref, sliceUsage) => internals.priceUsd(ref, sliceUsage));
 			const costUsd = replayPriced?.usd ?? 0;
+			const replayBasis = replayPriced === void 0 || replayPriced.fullyAttributed ? "per-call" : "aggregate-estimate";
 			const result = {
 				status: matched.kind === "skip" ? "skipped" : terminal?.status ?? "ok",
 				output: matched.kind === "skip" ? null : terminal?.value ?? null,
 				usage,
 				costUsd,
+				costBasis: replayBasis,
 				servedBy: terminal?.servedBy ?? loopResolved.ref,
 				turns: 0,
 				transcriptRef: terminal?.transcriptRef ?? ""
@@ -14639,29 +14794,37 @@ function createCtx(internals, rootWorkflow) {
 					durationMs: 0
 				}, spanId, true);
 			}
-			if (terminal !== void 0) entryUsageSlices(terminal).forEach((slice, index) => {
-				const priced = internals.priceUsd(slice.servedBy, slice.usage) ?? 0;
-				const sliceUsd = Number.isFinite(priced) && priced > 0 ? priced : 0;
-				const common = {
-					agentType,
-					label: opts.label,
-					role: slice.role ?? primaryRole,
-					model: slice.servedBy,
-					invocation: index + 1
-				};
-				internals.events.emit({
-					type: "agent:phase:start",
-					...common
-				}, spanId, true);
-				internals.events.emit({
-					type: "agent:phase:end",
-					...common,
-					durationMs: 0,
-					usage: slice.usage,
-					costUsd: sliceUsd,
-					outcome: terminal.status === "error" || terminal.status === "cancelled" ? "error" : "ok"
-				}, spanId, true);
-			});
+			if (terminal !== void 0) {
+				const usdByRoleModel = /* @__PURE__ */ new Map();
+				const perCallModels = /* @__PURE__ */ new Set();
+				for (const unit of replayPriced?.units ?? []) {
+					const key = `${unit.role ?? primaryRole} ${unit.servedBy}`;
+					usdByRoleModel.set(key, (usdByRoleModel.get(key) ?? 0) + unit.usd);
+					if (unit.source === "call") perCallModels.add(unit.servedBy);
+				}
+				entryUsageSlices(terminal).forEach((slice, index) => {
+					const common = {
+						agentType,
+						label: opts.label,
+						role: slice.role ?? primaryRole,
+						model: slice.servedBy,
+						invocation: index + 1
+					};
+					internals.events.emit({
+						type: "agent:phase:start",
+						...common
+					}, spanId, true);
+					internals.events.emit({
+						type: "agent:phase:end",
+						...common,
+						durationMs: 0,
+						usage: slice.usage,
+						costUsd: usdByRoleModel.get(`${slice.role ?? primaryRole} ${slice.servedBy}`) ?? 0,
+						costBasis: perCallModels.has(slice.servedBy) ? "per-call" : "aggregate-estimate",
+						outcome: terminal.status === "error" || terminal.status === "cancelled" ? "error" : "ok"
+					}, spanId, true);
+				});
+			}
 			internals.events.emit({
 				type: "agent:end",
 				agentType,
@@ -14669,12 +14832,13 @@ function createCtx(internals, rootWorkflow) {
 				status: result.status,
 				usage,
 				costUsd,
+				costBasis: replayBasis,
 				entryRef: terminal?.seq ?? matched.running.seq,
 				...terminal?.usageApprox === true ? { usageApprox: true } : {},
 				...result.exploration === void 0 ? {} : { exploration: result.exploration },
 				...result.toolBudget === void 0 ? {} : { toolBudget: result.toolBudget }
 			}, spanId, true);
-			for (const slice of replayPriced?.priced ?? []) bump(internals.cost.byModel, slice.servedBy, slice.usd);
+			for (const unit of replayPriced?.units ?? []) bump(internals.cost.byModel, unit.servedBy, unit.usd);
 			for (const slice of replayPriced?.unpriced ?? []) internals.cost.unpriced.push({
 				model: slice.servedBy,
 				usage: slice.usage
@@ -15306,6 +15470,7 @@ function createCtx(internals, rootWorkflow) {
 			status: result.status,
 			usage: result.usage,
 			costUsd: result.costUsd,
+			costBasis: result.costBasis,
 			entryRef: terminal.seq,
 			...resultUsageApprox ? { usageApprox: true } : {},
 			...result.transportRetries !== void 0 && result.transportRetries > 0 ? { retryCount: result.transportRetries } : {},
@@ -17508,6 +17673,7 @@ function makeOrchestratorWorkflow(goal, opts) {
 						cacheWriteTokens: 0
 					},
 					costUsd: 0,
+					costBasis: "per-call",
 					turns: 0,
 					servedBy: "unknown:unknown",
 					transcriptRef: "",
@@ -18485,6 +18651,7 @@ function makeOrchestratorWorkflow(goal, opts) {
 					cacheWriteTokens: 0
 				},
 				costUsd: 0,
+				costBasis: "per-call",
 				turns: 0,
 				servedBy: "unknown:unknown",
 				transcriptRef: "",
@@ -20257,6 +20424,7 @@ function reduceInvocationTable(events) {
 				...event.label === void 0 ? {} : { label: event.label },
 				usage: ZERO,
 				costUsd: 0,
+				costBasis: "aggregate-estimate",
 				usageApprox: false,
 				retryCount: 0,
 				replayed: event.replayed === true,
@@ -20283,6 +20451,7 @@ function reduceInvocationTable(events) {
 				durationMs: 0,
 				usage: ZERO,
 				costUsd: 0,
+				costBasis: "aggregate-estimate",
 				retries: 0,
 				replayed: event.replayed === true,
 				open: true
@@ -20302,6 +20471,7 @@ function reduceInvocationTable(events) {
 					durationMs: 0,
 					usage: ZERO,
 					costUsd: 0,
+					costBasis: "aggregate-estimate",
 					retries: 0,
 					replayed: event.replayed === true,
 					open: true
@@ -20315,14 +20485,17 @@ function reduceInvocationTable(events) {
 			phase.durationMs = event.durationMs;
 			phase.usage = event.usage;
 			phase.costUsd = event.costUsd;
+			phase.costBasis = event.costBasis ?? "aggregate-estimate";
 			phase.outcome = event.outcome;
 			phase.retries = event.retries ?? 0;
 			const bucket = byRole[event.role] ??= {
 				usage: ZERO,
-				costUsd: 0
+				costUsd: 0,
+				costBasis: "per-call"
 			};
 			bucket.usage = addUsage(bucket.usage, event.usage);
 			bucket.costUsd += event.costUsd;
+			if (phase.costBasis === "aggregate-estimate") bucket.costBasis = "aggregate-estimate";
 			break;
 		}
 		case "agent:end": {
@@ -20331,6 +20504,7 @@ function reduceInvocationTable(events) {
 			row.status = event.status;
 			row.usage = event.usage;
 			row.costUsd = event.costUsd;
+			row.costBasis = event.costBasis ?? "aggregate-estimate";
 			row.usageApprox = event.usageApprox === true;
 			row.retryCount = event.retryCount ?? 0;
 			if (event.toolBudget !== void 0) row.toolBudget = event.toolBudget;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rulvar/core",
-  "version": "1.108.0",
+  "version": "1.110.0",
   "description": "Rulvar core: L0 contracts, journal kernel, ctx primitives, agent runtime, model router, tool system, dynamic orchestrator, InMemory and JSONL stores, event stream.",
   "type": "module",
   "license": "Apache-2.0",