@rulvar/core 1.109.0 → 1.111.0

package/dist/index.d.ts

@@ -824,6 +824,15 @@ interface EntryBillingFold {
   * semantics. False folds the aggregate slices, the historical basis.
   */
   fullyAttributed: boolean;
+  /**
+  * The models this fold priced per call: record sums equal slice sums
+  * counter for counter under the symmetric per-model key (RV604).
+  * Published so a row builder can honor the same decision (RV703): a
+  * covered model's rows are exactly its records, so no per-slice
+  * remainder may be fabricated for it; recomputing coverage elsewhere
+  * is how the phantom-remainder skew was born.
+  */
+  coveredModels: ReadonlySet<ModelRef>;
 }
 /**
 * The billing fold over one terminal entry (RV504), shared by the
@@ -3713,6 +3722,18 @@ interface ToolBudgetSummary {
   limiter?: "maxToolCalls" | "toolUnits";
 }
 /**
+* How an event's `costUsd` was folded (RV702). `'per-call'`: the sum of
+* each provider request priced individually, the same basis the settled
+* CostReport and invoice use (RV504), so a nonlinear long-context tier
+* fires per REQUEST. `'aggregate-estimate'`: the aggregate usage priced
+* in one call, which a tier can inflate past what any single request
+* cost; emitted only when per-request records cannot cover the number
+* (a checkpoint written before the reconciliation ledger shipped, or a
+* terminal entry whose records do not cover its usage). An absent field
+* on an event stream recorded before RV702 means the aggregate basis.
+*/
+type CostBasis = "per-call" | "aggregate-estimate";
+/**
 * Agent lifecycle. One logical agent dispatch emits EXACTLY ONE
 * `agent:start`/`agent:end` pair on its span (the start carries the
 * primary role), and each model invocation phase inside the span
@@ -3762,6 +3783,14 @@ type AgentEvents = {
   durationMs: number; /** The usage this activation added to its (role, model) slices. */
   usage: Usage; /** That usage priced at each serving model's own rate. */
   costUsd: number;
+  /**
+  * The fold behind `costUsd` (RV702). Live phase deltas are always
+  * per-call (every slice a live activation adds is backed by a
+  * recorded provider call); a replayed pair says 'aggregate-estimate'
+  * exactly when its model's records do not cover its usage. Absent
+  * on streams recorded before RV702, which priced the aggregate.
+  */
+  costBasis?: CostBasis;
   outcome: "ok" | "error";
   /**
   * Transport retries inside this activation. Present only when
@@ -3775,6 +3804,16 @@ type AgentEvents = {
   status: string;
   usage: Usage;
   costUsd: number;
+  /**
+  * The fold behind `costUsd` (RV702): 'per-call' when every usage
+  * slice of the invocation (restored included) is covered by
+  * per-request records priced individually, the settled fold's own
+  * basis; 'aggregate-estimate' when it is not (the aggregate number
+  * is kept so restored spend is never silently dropped, and labeled
+  * so it is never mistaken for the per-request fold). Absent on
+  * streams recorded before RV702, which priced the aggregate.
+  */
+  costBasis?: CostBasis;
   entryRef: number;
   /**
   * Present and true when this agent's usage is approximate rather
@@ -4376,6 +4415,15 @@ interface AgentResult<T> {
   output: T | null;
   usage: Usage;
   costUsd: number;
+  /**
+  * The fold behind `costUsd` (RV702): 'per-call' when every usage
+  * slice (restored included) is covered by per-request records priced
+  * individually, exactly the settled fold's basis; 'aggregate-estimate'
+  * when a restored checkpoint left usage no record backs, in which case
+  * the aggregate-priced number is kept (never silently dropped) and
+  * labeled.
+  */
+  costBasis: CostBasis;
   turns: number;
   /**
   * The model that actually served the loop phase at the end (M4-T04):
@@ -10410,6 +10458,12 @@ interface PhaseRow {
   durationMs: number;
   usage: Usage;
   costUsd: number;
+  /**
+  * The fold behind `costUsd` (RV702). An event stream recorded before
+  * the field shipped priced aggregates, so an absent field reduces to
+  * 'aggregate-estimate', never to a per-call claim it cannot back.
+  */
+  costBasis: CostBasis;
   outcome?: "ok" | "error";
   retries: number;
   replayed: boolean;
@@ -10427,6 +10481,12 @@ interface AgentInvocationRow {
   status?: string;
   usage: Usage;
   costUsd: number;
+  /**
+  * The fold behind `costUsd` (RV702), from the span's agent:end; an
+  * absent field (a pre-RV702 stream, or a span still open) reduces to
+  * 'aggregate-estimate', never to a per-call claim it cannot back.
+  */
+  costBasis: CostBasis;
   usageApprox: boolean;
   retryCount: number;
   /**
@@ -10442,10 +10502,15 @@ interface AgentInvocationRow {
 /** The reduced table plus the per-role aggregate across every span. */
 interface InvocationTable {
   agents: AgentInvocationRow[];
-  /** Aggregated over COMPLETED phase pairs, keyed by role. */
+  /**
+  * Aggregated over COMPLETED phase pairs, keyed by role. The bucket's
+  * `costBasis` is 'per-call' only while EVERY folded pair carried the
+  * per-call basis; one aggregate-estimate pair degrades the bucket.
+  */
   byRole: Record<string, {
     usage: Usage;
     costUsd: number;
+    costBasis: CostBasis;
   }>;
   /** Sum of agent:end costUsd over settled spans. */
   totalCostUsd: number;
@@ -10557,4 +10622,4 @@ interface SandboxBridge {
 declare const SANDBOX_AGENT_OPT_KEYS: readonly string[];
 declare function createSandboxBridge(ctx: Ctx<never>, options: SandboxBridgeOptions): SandboxBridge;
 //#endregion
-export { AWAIT_SCHEMA, AbandonAttempt, AbandonFold, AbandonPayload, AbandonedSpendView, AbortClass, type AdaptiveEvents, AdmissionController, AdmissionDecision, AdmissionRejectedError, AdmissionStatsBefore, AdmitLineage, AdmitRejectReason, AdmitSpec, AdmitVerdict, AgentCallError, AgentError, type AgentEvents, AgentIdentityInput, type AgentInvocationRow, AgentOpts, AgentProfile, AgentProfilePermissions, AgentProfileTemplateOptions, AgentResult, AgentResultMeta, AgentStatus, type AppliedPricingRow, ApproachSignatureInputs, ApprovalDecision, ApprovalIdentityInput, Artifact, AttemptOutcomeClass, AuditCategory, AuditRecord, AuditRunsOptions, BUDGET_ABORT_REASON, BaseAppend, BriefOpts, BudgetAccountView, BudgetDefaults, BudgetExhaustedError, BudgetExhaustionDiagnostics, BudgetHooks, BudgetReserve, type Bytes, CANCEL_AGENT_SCHEMA, CHECKPOINT_FORMAT_V1, CLAIM_STATEMENT_MAX_CHARS, CLAIM_TTL_DAYS, COMPACTION_SUMMARY_PREFIX, CURRENT_HASH_VERSION, CacheHint, CacheTtl, CanUseTool, CanonicalId, CanonicalIdentity, CanonicalLadderSpec, CanonicalModelSpec, ChatEvent, ChatRequest, CheckpointState, ChildArtifactPage, ChildIdentityInput, ChildResultPage, type ClaimClass, type ClaimOp, type ClaimStatus, ClaimValidationOptions, CollectOpts, CollectedTurn, CompactionConfig, CompiledPermissionChain, CompiledWorkflow, ConfigError, type CoreEvents, CostAttribution, CostAttributionFacts, CostReport, CreateEngineOptions, type CriticalPath, Ctx, DEFAULT_CHILD_BUDGET_FRACTION, DEFAULT_CHILD_RESULT_PAGE_CHARS, DEFAULT_CITATION_PATTERN, DEFAULT_CITATION_SAMPLE, DEFAULT_COMPACTION_THRESHOLD, DEFAULT_ESCALATION_LIMITS, DEFAULT_EVIDENCE_CALLS_PER_ENTRY, DEFAULT_EVIDENCE_MIN_SHARE, DEFAULT_EVIDENCE_OVERHEAD_CALLS, DEFAULT_FINISH_MAX_REPAIRS, DEFAULT_FLAT_RESERVE_USD, DEFAULT_MAX_CHILDREN_PER_NODE, DEFAULT_MAX_DEPTH, DEFAULT_MAX_OSCILLATIONS_PER_KEY, DEFAULT_MAX_PINNED_WORKTREES, DEFAULT_MAX_REVISIONS_PER_RUN, DEFAULT_MAX_TOTAL_SPAWNS, DEFAULT_MAX_TURNS, DEFAULT_MODEL_RETRY_ATTEMPTS, DEFAULT_NO_PROGRESS_TURNS, DEFAULT_PER_RUN_CONCURRENCY, DEFAULT_RETRY_POLICY, DEFAULT_STREAM_IDLE_TIMEOUT_MS, DEFAULT_SYNTHESIS_MAX_TURNS, DEFAULT_SYNTHESIS_NOTE_MAX_TURNS, DataKeyProvider, DebitResult, DeclaredLadder, DedupIndex, DedupNote, DedupedClaims, DerivedKey, DeriverRegistry, type DeterminismConfig, DeterminismError, type DeterminismEvents, type DeterminismMode, DispositionRule, DispositionTable, DonorCandidate, DonorRef, DroppedItem, EMIT_RESULT_TOOL, EMPTY_SCHEMA_HASH, EMPTY_TOOLSET_HASH, ESCALATE_TOOL_NAME, ESCALATION_REPORT_SCHEMA, ESCALATION_REQUEST_SCHEMA, EVENT_SEGMENT_STRIDE, EffectiveUsageLimits, Effort, Engine, EngineDefaults, EngineQuotaConfig, EngineQuotaRuntime, EntryBillingFold, EntryBillingUnit, EntryKind, EntryRef, EntryStatus, EnvelopeEncryption, EnvelopeEncryptionOptions, ErrorClass, ErrorCode, ErrorPolicy, EscalatedResult, EscalationDecision, EscalationDecisionAbortedError, EscalationDigest, EscalationKind, EscalationLimits, EscalationOptions, EscalationReport, EscalationRequest, EventBus, EvidenceContract, type EvidenceRef, type ExecKeyDerivation, type ExecutorRegistry, type ExplorationSummary, ExtensionAppendInput, ExtensionDispatchSpec, ExternalIdentityInput, ExternalRegistry, ExtractNecessityInput, FINALIZE_SYNTHESIS_INSTRUCTION, FINISH_SCHEMA, FINISH_TOOL_NAME, FailRunError, FailoverTarget, FailoverTrigger, FallbackField, FallbackTrigger, FencedCodeMode, FileModelKnowledgeStore, FileModelKnowledgeStoreOptions, FileTranscriptStore, type FinalizationWindowBudget, FinishContract, FinishContractCitations, FinishContractGoldenReject, FinishContractManifest, FinishInfo, FinishSelfTestFailure, FinishSelfTestFixtures, FinishSelfTestReport, FinishValidationChild, FinishValidationInput, FinishValidationSpec, FinishValidationVerdict, FinishValidator, GET_CHILD_RESULT_SCHEMA, GET_CHILD_RESULT_TOOL_NAME, Gate, GateAudit, type GateRecord, GitWorktreeProvider, GitWorktreeProviderOptions, GraftBoot, HashVersion, HookVerdict, IMPLEMENTATION_PROFILE_LIMITS, INBOX_PROPOSAL_TTL_DAYS, IdentityInput, InMemoryStore, InMemoryTranscriptStore, InProcessRunner, IncrementalSynthesisResult, InvalidResolutionError, InvocationRole, type InvocationTable, InvoiceExport, InvoicePricingProvenance, InvoiceReconciliation, InvoiceRow, type IsolatedExecContext, type IsolatedExecRequest, type IsolatedExecutorTag, type IsolationProvider, type IsolationSpec, Issue$1 as Issue, JOURNAL_ENVELOPE_MARKER, JournalCompatSubCode, JournalCompatibilityError, JournalEntry, JournalMatcher, JournalMissError, JournalOperation, JournalOrderViolation, type JournalPricingSnapshot, JournalSerializationContext, JournalSerializationHook, type JournalStore, type Json, JsonSchema, JsonlFileStore, KB_ACTIVE_CLAIMS_CAP, KB_CARD_RENDER_BUDGET_CHARS, type KbProposal, type KbProposalTrigger, KeyDeriver, KeyRing, KeyedLimiter, KnowledgeCasError, type KnowledgeSnapshot, LARGE_VALUE_WARN_BYTES, LEGACY_LTID_PREFIX, LEGACY_SIGNATURE_INPUTS, LINEAGE_SIG_VERSION, LadderSpec, type LeasableStore, type Lease, LeaseHeldError, Ledger, LineageCounters, LineageIndex, LineageRef, LineageRelation, LineageStats, LogicalTaskId, MASKED_SECRET, MAX_CHILD_RESULT_PAGE_CHARS, MAX_DEPTH_CEILING, MAX_TIMER_DELAY_MS, MatchResult, McpConfig, McpToolSource, MechanicalGateProfile, MechanicalGateVerdict, MemoryQuotaLimiter, type MetaLookupStore, type ModelCaps, ModelChoice, type ModelClaim, ModelEpochInputs, type ModelKnowledgeHandle, type ModelKnowledgeStore, ModelListConstraint, ModelRef, ModelRetry, ModelSpec, Msg, NoProgressDetector, NodeId, NodeLinkValue, NonSerializableValueError, ORCHESTRATE_WORKFLOW_NAME, OnEscalation, OperationDisposition, OrchestrateAcceptance, OrchestrateOptions, OrchestrateSynthesis, OrchestrateSynthesisSkipReason, OrchestratorBudgetSpec, OrchestratorCapConfigError, OrchestratorExtension, OrchestratorExtensionIO, OrchestratorRuntime, Out, PARALLEL_AGENTS_SCHEMA, PROGRESS_REPORT_TOOL_NAME, ParallelSiteCounter, Part, PendingExternal, PendingToolTurn, PermissionConfig, PermissionGate, PermissionHook, PermissionPreset, PermissionRule, PermissionVerdict, type PhaseRow, PhaseTarget, type PinnedPricingSegment, PipelineCollected, PipelineOpts, PlanInvariantError, PreflightAdmissionRow, PreflightFinding, PreflightInput, PreflightOrchestratorSpec, PreflightReport, PreflightSpawnReport, PreflightSpawnSpec, PreflightToolCeiling, PriceTable, PricedUsage, type Pricing, type PricingTier, ProgressReport, type ProviderAdapter, ProviderCallRecord, QUOTA_WINDOW_MS, QualityFloors, QuotaCounters, type QuotaDecision, type QuotaEstimate, type QuotaLimiter, type QuotaReservationRequest, QuotaRule, QuotaWindowSnapshot, READ_CHILD_ARTIFACT_SCHEMA, READ_CHILD_ARTIFACT_TOOL_NAME, RESEARCH_PROFILE_LIMITS, REVIEW_PROFILE_LIMITS, ROLE_EFFORT_DEFAULTS, ROOT_ACCOUNT, ROOT_SCOPE, RUN_PROFILES, RUN_SETTLE_DECISION_TYPE, RandIdentityInput, RandPayload, RateLimitObservation, ReconcileOptions, ReconcileResult, RefEntryAppender, RefEntryClassification, RefusalInfo, RepeatedClaim, ReplayDisposition, ReplayMode, ReplayPlanHashMismatch, Replayer, RepositoryResearchToolset, RepositoryResearchToolsetOptions, ResearchAgentProfileOptions, ResearchAgentProfileResult, ResearchEvidenceEntry, ResolutionArbiter, ResolutionAttempt, ResolutionBy, ResolutionFold, ResolutionLayer, ResolutionOutcome, ResolutionPayload, ResolvedInvocation, ResolvedToolset, ResumeHandle, ResumeOptions, ResumePreview, ResumeReport, RetryClass, RetryPolicy, ReuseConfig, RiskRuleValue, Role, RulvarError, RulvarErrorCode, RunAgentOptions, RunAuditVerdict, RunBudget, RunEventSink, RunExport, type RunFilter, RunHandle, RunInternals, type RunMeta, RunOptions, RunOutcome, RunProfile, RunStateAudit, RunStatus, RuntimeEventSink, SANDBOX_AGENT_OPT_KEYS, SPAWN_AGENT_SCHEMA, SandboxBridge, SandboxBridgeOptions, SandboxError, SandboxHostToWorker, SandboxMethod, SandboxWorkerToHost, SchemaPair, SchemaSpec, SchemaValidationResult, ScopeSegment, ScriptRejected, ScriptRunner, ScrubNote, SecretMasker, SectionMatchMode, Semaphore, SerializationHook, Settled, SettlementError, ShellPatternRules, ShellSegment, ShellVerdict, SinglePhaseAppend, SpanMinter, SpanRegistry, SpawnAdmissionValue, SpawnAgentParams, SpawnKey, SpawnLineage, SpawnLineageOpt, SpawnOrigin, SpawnRecord, Spend, Stage, type StandardJSONSchemaV1, type StandardSchemaV1, StepIdentityInput, StructuredOutputTier, SuspendedAppend, SuspensionState, TOOL_NAME_PATTERN, type TaskClass, TaskDigest, TaskSpec, TerminalPatch, TerminationAccount, TerminationAccountSnapshot, TerminationDeniedValue, TerminationDeniedWriter, TerminationInitValue, TerminationLimits, TerminationResource, type ToolBudgetSummary, ToolCallRequest, ToolChoice, type ToolContext, ToolContextSeed, ToolContract, type ToolDef, type ToolEvents, type ToolExecutor, type ToolExecutorProvider, ToolInit, type ToolRisk, ToolRuntime, type ToolSource, type ToolSourceSession, ToolsOption, TranscriptSerializationHook, type TranscriptStore, TriggerClass, TtlState, Usage, UsageLimits, UsageSlice, VerifiedRecommendation, WAIT_FOR_EVENTS_SCHEMA, WAIT_FOR_EVENTS_TOOL_NAME, WAKE_SUMMARY_RENDER_BUDGET_CHARS, WakeBudgetBlock, WakeDigest, WakeTrigger, WireError, Workflow, WorkflowCallOpts, type WorkflowEvent, type WorkflowEventBody, WorkflowRegistry, admissionReserveUsd, affordableOutputTokens, agentErrorFromWire, agentErrorToWire, agentResultWire, agentScope, applyClaimOps, applyStructuredOutputTier, approachSigCoarse, approachSigOf, archiveDeprecatedModelOps, assertFencedWrites, atCompactionThreshold, auditRun, auditRuns, buildAbandonFold, buildAdapterRegistry, buildCostReport, buildDeriverRegistry, buildOrchestratorTools, buildTerminationInitValue, buildToolContext, canRideLoopTurn, canonicalIsolationTag, canonicalizeLadder, canonicalizeSchema, capIssues, capsHashOf, checkFloors, checkpointRefFor, childCoveragePrefix, claimExpired, claimExpiry, claimIssues, claimOpIssues, classifyAgentError, classifyAttemptOutcome, collectDeclaredLadders, compactMessages, compilePermissionChain, compilePermissionPreset, compileSecretMasker, compileVerifiedLayer, constantTimeEqual, costReportFromJournal, countsAgainstLimit, createCanonicalIdMinter, createCtx, createEngine, createEnvelopeEncryption, createSandboxBridge, currentOnlyKeyRing, decodeCheckpoint, dedupeRepeatedClaims, defineWorkflow, deriveContentKey, deriverV1, deriverV2, digestOf, dispatchProjectionReserveUsd, dispositionHook, emptyDigestBlocks, emptyToolset, encodeCheckpoint, entryUsageSlices, escalateTool, evaluatePermission, evaluateReuse, evidencePreservedValidator, executeWorkflow, exhaustionCodeOf, extractCandidate, failoverTriggerOf, fallbackTriggerOf, filterClaimsForRun, finalizeFires, finishContract, foldTermination, formatRePrompt, formatScopePath, hasFencedWrites, hasMetaLookup, hashRunArgs, hashRunOutput, hashWorkflowBody, hashWorkflowSource, headingStructureValidator, identityJcs, implementationAgentProfile, invoiceFromJournal, isEscalated, isSchemaPairSpec, isStandardSchemaSpec, isStrictCompatibleSchema, journalPricingSnapshot, kMaxOf, knowledgeHash, ladderLengthOf, ladderRungChoice, lastRunSettle, latestProgressReport, lexShellCommand, liftRetainedParts, lineageWeightOf, localKeyProvider, makeOrchestratorWorkflow, maskSecrets, maskSecretsDeep, maskSecretsJson, matchArgvPattern, matchShellCommand, mcp, memoryQuotaLimiter, mergeQuotaDenial, mergeUsageLimits, metaMatchesFilter, minMatchesValidator, modelEpochOf, modelKnowledgeCard, modelSpecIdentity, needsSeparateExtract, nextFailover, nodeLinkKey, normalizeApproachTag, normalizeEntry, normalizeFallbacks, orchestrate, orchestratorAdmissionEstCostUsd, parallelScope, parseModelRef, parseScopePath, phiInitialOf, pipelineScope, planNodeScope, preflightEstimate, priceEntryBilling, priceEntryUsage, priceUsdOf, profileCard, profileRegistrySnapshotHash, progressReportTool, projectHistory, projectIdentity, projectToJsonSchema, proposalStatement, providerOf, quotaActualTokens, quotaEstimateTokens, quotaRuleAdmission, quotaRuleKey, quotaRuleMatches, readRunMeta, readTerminationInit, reconcileRunMeta, reduceAuditTrail, reduceCriticalPath, reduceInvocationTable, registryKeyRing, remeasureQueue, replayDisposition, repositoryResearchToolset, requiredFieldsValidator, requiredSectionsValidator, researchAgentProfile, resolveModelInvocation, resolvePricing, resolveToolset, retryClassOf, retryDelayMs, reviewAgentProfile, roleConfiguredInRouting, roundOneDisposition, runAgent, runProfile, sanitizeTerminalText, sanitizeTokenCount, sanitizeUsage, sanitizeUsageDelta, scanJournalCompatibility, schemaHash, schemaHashOfSpec, sectionCitationsValidator, selectStructuredOutputTier, selfTestFinishValidation, shouldCompact, snapshotQuotaRules, snapshotUsage, spawnDepthOf, stripFencedBlocks, summarizeInstruction, summarizeOutput, terminationConfigDrift, tierWithinCaps, toApprovalDecision, toJournalValue, tool, toolContract, toolsetHash, ttlState, usageViolations, validateEditorialCommit, validateEngineQuotaConfig, validateEntryShape, validateEscalationLimits, validateEscalationReport, validateQuotaRules, validateRetryPolicy, validateSchemaSpec, validateTerminationLimits, validateUsageLimits, wordCountValidator, workflowScope, workflowSourceRef, wrapJournalStore, wrapTranscriptStore };
+export { AWAIT_SCHEMA, AbandonAttempt, AbandonFold, AbandonPayload, AbandonedSpendView, AbortClass, type AdaptiveEvents, AdmissionController, AdmissionDecision, AdmissionRejectedError, AdmissionStatsBefore, AdmitLineage, AdmitRejectReason, AdmitSpec, AdmitVerdict, AgentCallError, AgentError, type AgentEvents, AgentIdentityInput, type AgentInvocationRow, AgentOpts, AgentProfile, AgentProfilePermissions, AgentProfileTemplateOptions, AgentResult, AgentResultMeta, AgentStatus, type AppliedPricingRow, ApproachSignatureInputs, ApprovalDecision, ApprovalIdentityInput, Artifact, AttemptOutcomeClass, AuditCategory, AuditRecord, AuditRunsOptions, BUDGET_ABORT_REASON, BaseAppend, BriefOpts, BudgetAccountView, BudgetDefaults, BudgetExhaustedError, BudgetExhaustionDiagnostics, BudgetHooks, BudgetReserve, type Bytes, CANCEL_AGENT_SCHEMA, CHECKPOINT_FORMAT_V1, CLAIM_STATEMENT_MAX_CHARS, CLAIM_TTL_DAYS, COMPACTION_SUMMARY_PREFIX, CURRENT_HASH_VERSION, CacheHint, CacheTtl, CanUseTool, CanonicalId, CanonicalIdentity, CanonicalLadderSpec, CanonicalModelSpec, ChatEvent, ChatRequest, CheckpointState, ChildArtifactPage, ChildIdentityInput, ChildResultPage, type ClaimClass, type ClaimOp, type ClaimStatus, ClaimValidationOptions, CollectOpts, CollectedTurn, CompactionConfig, CompiledPermissionChain, CompiledWorkflow, ConfigError, type CoreEvents, CostAttribution, CostAttributionFacts, type CostBasis, CostReport, CreateEngineOptions, type CriticalPath, Ctx, DEFAULT_CHILD_BUDGET_FRACTION, DEFAULT_CHILD_RESULT_PAGE_CHARS, DEFAULT_CITATION_PATTERN, DEFAULT_CITATION_SAMPLE, DEFAULT_COMPACTION_THRESHOLD, DEFAULT_ESCALATION_LIMITS, DEFAULT_EVIDENCE_CALLS_PER_ENTRY, DEFAULT_EVIDENCE_MIN_SHARE, DEFAULT_EVIDENCE_OVERHEAD_CALLS, DEFAULT_FINISH_MAX_REPAIRS, DEFAULT_FLAT_RESERVE_USD, DEFAULT_MAX_CHILDREN_PER_NODE, DEFAULT_MAX_DEPTH, DEFAULT_MAX_OSCILLATIONS_PER_KEY, DEFAULT_MAX_PINNED_WORKTREES, DEFAULT_MAX_REVISIONS_PER_RUN, DEFAULT_MAX_TOTAL_SPAWNS, DEFAULT_MAX_TURNS, DEFAULT_MODEL_RETRY_ATTEMPTS, DEFAULT_NO_PROGRESS_TURNS, DEFAULT_PER_RUN_CONCURRENCY, DEFAULT_RETRY_POLICY, DEFAULT_STREAM_IDLE_TIMEOUT_MS, DEFAULT_SYNTHESIS_MAX_TURNS, DEFAULT_SYNTHESIS_NOTE_MAX_TURNS, DataKeyProvider, DebitResult, DeclaredLadder, DedupIndex, DedupNote, DedupedClaims, DerivedKey, DeriverRegistry, type DeterminismConfig, DeterminismError, type DeterminismEvents, type DeterminismMode, DispositionRule, DispositionTable, DonorCandidate, DonorRef, DroppedItem, EMIT_RESULT_TOOL, EMPTY_SCHEMA_HASH, EMPTY_TOOLSET_HASH, ESCALATE_TOOL_NAME, ESCALATION_REPORT_SCHEMA, ESCALATION_REQUEST_SCHEMA, EVENT_SEGMENT_STRIDE, EffectiveUsageLimits, Effort, Engine, EngineDefaults, EngineQuotaConfig, EngineQuotaRuntime, EntryBillingFold, EntryBillingUnit, EntryKind, EntryRef, EntryStatus, EnvelopeEncryption, EnvelopeEncryptionOptions, ErrorClass, ErrorCode, ErrorPolicy, EscalatedResult, EscalationDecision, EscalationDecisionAbortedError, EscalationDigest, EscalationKind, EscalationLimits, EscalationOptions, EscalationReport, EscalationRequest, EventBus, EvidenceContract, type EvidenceRef, type ExecKeyDerivation, type ExecutorRegistry, type ExplorationSummary, ExtensionAppendInput, ExtensionDispatchSpec, ExternalIdentityInput, ExternalRegistry, ExtractNecessityInput, FINALIZE_SYNTHESIS_INSTRUCTION, FINISH_SCHEMA, FINISH_TOOL_NAME, FailRunError, FailoverTarget, FailoverTrigger, FallbackField, FallbackTrigger, FencedCodeMode, FileModelKnowledgeStore, FileModelKnowledgeStoreOptions, FileTranscriptStore, type FinalizationWindowBudget, FinishContract, FinishContractCitations, FinishContractGoldenReject, FinishContractManifest, FinishInfo, FinishSelfTestFailure, FinishSelfTestFixtures, FinishSelfTestReport, FinishValidationChild, FinishValidationInput, FinishValidationSpec, FinishValidationVerdict, FinishValidator, GET_CHILD_RESULT_SCHEMA, GET_CHILD_RESULT_TOOL_NAME, Gate, GateAudit, type GateRecord, GitWorktreeProvider, GitWorktreeProviderOptions, GraftBoot, HashVersion, HookVerdict, IMPLEMENTATION_PROFILE_LIMITS, INBOX_PROPOSAL_TTL_DAYS, IdentityInput, InMemoryStore, InMemoryTranscriptStore, InProcessRunner, IncrementalSynthesisResult, InvalidResolutionError, InvocationRole, type InvocationTable, InvoiceExport, InvoicePricingProvenance, InvoiceReconciliation, InvoiceRow, type IsolatedExecContext, type IsolatedExecRequest, type IsolatedExecutorTag, type IsolationProvider, type IsolationSpec, Issue$1 as Issue, JOURNAL_ENVELOPE_MARKER, JournalCompatSubCode, JournalCompatibilityError, JournalEntry, JournalMatcher, JournalMissError, JournalOperation, JournalOrderViolation, type JournalPricingSnapshot, JournalSerializationContext, JournalSerializationHook, type JournalStore, type Json, JsonSchema, JsonlFileStore, KB_ACTIVE_CLAIMS_CAP, KB_CARD_RENDER_BUDGET_CHARS, type KbProposal, type KbProposalTrigger, KeyDeriver, KeyRing, KeyedLimiter, KnowledgeCasError, type KnowledgeSnapshot, LARGE_VALUE_WARN_BYTES, LEGACY_LTID_PREFIX, LEGACY_SIGNATURE_INPUTS, LINEAGE_SIG_VERSION, LadderSpec, type LeasableStore, type Lease, LeaseHeldError, Ledger, LineageCounters, LineageIndex, LineageRef, LineageRelation, LineageStats, LogicalTaskId, MASKED_SECRET, MAX_CHILD_RESULT_PAGE_CHARS, MAX_DEPTH_CEILING, MAX_TIMER_DELAY_MS, MatchResult, McpConfig, McpToolSource, MechanicalGateProfile, MechanicalGateVerdict, MemoryQuotaLimiter, type MetaLookupStore, type ModelCaps, ModelChoice, type ModelClaim, ModelEpochInputs, type ModelKnowledgeHandle, type ModelKnowledgeStore, ModelListConstraint, ModelRef, ModelRetry, ModelSpec, Msg, NoProgressDetector, NodeId, NodeLinkValue, NonSerializableValueError, ORCHESTRATE_WORKFLOW_NAME, OnEscalation, OperationDisposition, OrchestrateAcceptance, OrchestrateOptions, OrchestrateSynthesis, OrchestrateSynthesisSkipReason, OrchestratorBudgetSpec, OrchestratorCapConfigError, OrchestratorExtension, OrchestratorExtensionIO, OrchestratorRuntime, Out, PARALLEL_AGENTS_SCHEMA, PROGRESS_REPORT_TOOL_NAME, ParallelSiteCounter, Part, PendingExternal, PendingToolTurn, PermissionConfig, PermissionGate, PermissionHook, PermissionPreset, PermissionRule, PermissionVerdict, type PhaseRow, PhaseTarget, type PinnedPricingSegment, PipelineCollected, PipelineOpts, PlanInvariantError, PreflightAdmissionRow, PreflightFinding, PreflightInput, PreflightOrchestratorSpec, PreflightReport, PreflightSpawnReport, PreflightSpawnSpec, PreflightToolCeiling, PriceTable, PricedUsage, type Pricing, type PricingTier, ProgressReport, type ProviderAdapter, ProviderCallRecord, QUOTA_WINDOW_MS, QualityFloors, QuotaCounters, type QuotaDecision, type QuotaEstimate, type QuotaLimiter, type QuotaReservationRequest, QuotaRule, QuotaWindowSnapshot, READ_CHILD_ARTIFACT_SCHEMA, READ_CHILD_ARTIFACT_TOOL_NAME, RESEARCH_PROFILE_LIMITS, REVIEW_PROFILE_LIMITS, ROLE_EFFORT_DEFAULTS, ROOT_ACCOUNT, ROOT_SCOPE, RUN_PROFILES, RUN_SETTLE_DECISION_TYPE, RandIdentityInput, RandPayload, RateLimitObservation, ReconcileOptions, ReconcileResult, RefEntryAppender, RefEntryClassification, RefusalInfo, RepeatedClaim, ReplayDisposition, ReplayMode, ReplayPlanHashMismatch, Replayer, RepositoryResearchToolset, RepositoryResearchToolsetOptions, ResearchAgentProfileOptions, ResearchAgentProfileResult, ResearchEvidenceEntry, ResolutionArbiter, ResolutionAttempt, ResolutionBy, ResolutionFold, ResolutionLayer, ResolutionOutcome, ResolutionPayload, ResolvedInvocation, ResolvedToolset, ResumeHandle, ResumeOptions, ResumePreview, ResumeReport, RetryClass, RetryPolicy, ReuseConfig, RiskRuleValue, Role, RulvarError, RulvarErrorCode, RunAgentOptions, RunAuditVerdict, RunBudget, RunEventSink, RunExport, type RunFilter, RunHandle, RunInternals, type RunMeta, RunOptions, RunOutcome, RunProfile, RunStateAudit, RunStatus, RuntimeEventSink, SANDBOX_AGENT_OPT_KEYS, SPAWN_AGENT_SCHEMA, SandboxBridge, SandboxBridgeOptions, SandboxError, SandboxHostToWorker, SandboxMethod, SandboxWorkerToHost, SchemaPair, SchemaSpec, SchemaValidationResult, ScopeSegment, ScriptRejected, ScriptRunner, ScrubNote, SecretMasker, SectionMatchMode, Semaphore, SerializationHook, Settled, SettlementError, ShellPatternRules, ShellSegment, ShellVerdict, SinglePhaseAppend, SpanMinter, SpanRegistry, SpawnAdmissionValue, SpawnAgentParams, SpawnKey, SpawnLineage, SpawnLineageOpt, SpawnOrigin, SpawnRecord, Spend, Stage, type StandardJSONSchemaV1, type StandardSchemaV1, StepIdentityInput, StructuredOutputTier, SuspendedAppend, SuspensionState, TOOL_NAME_PATTERN, type TaskClass, TaskDigest, TaskSpec, TerminalPatch, TerminationAccount, TerminationAccountSnapshot, TerminationDeniedValue, TerminationDeniedWriter, TerminationInitValue, TerminationLimits, TerminationResource, type ToolBudgetSummary, ToolCallRequest, ToolChoice, type ToolContext, ToolContextSeed, ToolContract, type ToolDef, type ToolEvents, type ToolExecutor, type ToolExecutorProvider, ToolInit, type ToolRisk, ToolRuntime, type ToolSource, type ToolSourceSession, ToolsOption, TranscriptSerializationHook, type TranscriptStore, TriggerClass, TtlState, Usage, UsageLimits, UsageSlice, VerifiedRecommendation, WAIT_FOR_EVENTS_SCHEMA, WAIT_FOR_EVENTS_TOOL_NAME, WAKE_SUMMARY_RENDER_BUDGET_CHARS, WakeBudgetBlock, WakeDigest, WakeTrigger, WireError, Workflow, WorkflowCallOpts, type WorkflowEvent, type WorkflowEventBody, WorkflowRegistry, admissionReserveUsd, affordableOutputTokens, agentErrorFromWire, agentErrorToWire, agentResultWire, agentScope, applyClaimOps, applyStructuredOutputTier, approachSigCoarse, approachSigOf, archiveDeprecatedModelOps, assertFencedWrites, atCompactionThreshold, auditRun, auditRuns, buildAbandonFold, buildAdapterRegistry, buildCostReport, buildDeriverRegistry, buildOrchestratorTools, buildTerminationInitValue, buildToolContext, canRideLoopTurn, canonicalIsolationTag, canonicalizeLadder, canonicalizeSchema, capIssues, capsHashOf, checkFloors, checkpointRefFor, childCoveragePrefix, claimExpired, claimExpiry, claimIssues, claimOpIssues, classifyAgentError, classifyAttemptOutcome, collectDeclaredLadders, compactMessages, compilePermissionChain, compilePermissionPreset, compileSecretMasker, compileVerifiedLayer, constantTimeEqual, costReportFromJournal, countsAgainstLimit, createCanonicalIdMinter, createCtx, createEngine, createEnvelopeEncryption, createSandboxBridge, currentOnlyKeyRing, decodeCheckpoint, dedupeRepeatedClaims, defineWorkflow, deriveContentKey, deriverV1, deriverV2, digestOf, dispatchProjectionReserveUsd, dispositionHook, emptyDigestBlocks, emptyToolset, encodeCheckpoint, entryUsageSlices, escalateTool, evaluatePermission, evaluateReuse, evidencePreservedValidator, executeWorkflow, exhaustionCodeOf, extractCandidate, failoverTriggerOf, fallbackTriggerOf, filterClaimsForRun, finalizeFires, finishContract, foldTermination, formatRePrompt, formatScopePath, hasFencedWrites, hasMetaLookup, hashRunArgs, hashRunOutput, hashWorkflowBody, hashWorkflowSource, headingStructureValidator, identityJcs, implementationAgentProfile, invoiceFromJournal, isEscalated, isSchemaPairSpec, isStandardSchemaSpec, isStrictCompatibleSchema, journalPricingSnapshot, kMaxOf, knowledgeHash, ladderLengthOf, ladderRungChoice, lastRunSettle, latestProgressReport, lexShellCommand, liftRetainedParts, lineageWeightOf, localKeyProvider, makeOrchestratorWorkflow, maskSecrets, maskSecretsDeep, maskSecretsJson, matchArgvPattern, matchShellCommand, mcp, memoryQuotaLimiter, mergeQuotaDenial, mergeUsageLimits, metaMatchesFilter, minMatchesValidator, modelEpochOf, modelKnowledgeCard, modelSpecIdentity, needsSeparateExtract, nextFailover, nodeLinkKey, normalizeApproachTag, normalizeEntry, normalizeFallbacks, orchestrate, orchestratorAdmissionEstCostUsd, parallelScope, parseModelRef, parseScopePath, phiInitialOf, pipelineScope, planNodeScope, preflightEstimate, priceEntryBilling, priceEntryUsage, priceUsdOf, profileCard, profileRegistrySnapshotHash, progressReportTool, projectHistory, projectIdentity, projectToJsonSchema, proposalStatement, providerOf, quotaActualTokens, quotaEstimateTokens, quotaRuleAdmission, quotaRuleKey, quotaRuleMatches, readRunMeta, readTerminationInit, reconcileRunMeta, reduceAuditTrail, reduceCriticalPath, reduceInvocationTable, registryKeyRing, remeasureQueue, replayDisposition, repositoryResearchToolset, requiredFieldsValidator, requiredSectionsValidator, researchAgentProfile, resolveModelInvocation, resolvePricing, resolveToolset, retryClassOf, retryDelayMs, reviewAgentProfile, roleConfiguredInRouting, roundOneDisposition, runAgent, runProfile, sanitizeTerminalText, sanitizeTokenCount, sanitizeUsage, sanitizeUsageDelta, scanJournalCompatibility, schemaHash, schemaHashOfSpec, sectionCitationsValidator, selectStructuredOutputTier, selfTestFinishValidation, shouldCompact, snapshotQuotaRules, snapshotUsage, spawnDepthOf, stripFencedBlocks, summarizeInstruction, summarizeOutput, terminationConfigDrift, tierWithinCaps, toApprovalDecision, toJournalValue, tool, toolContract, toolsetHash, ttlState, usageViolations, validateEditorialCommit, validateEngineQuotaConfig, validateEntryShape, validateEscalationLimits, validateEscalationReport, validateQuotaRules, validateRetryPolicy, validateSchemaSpec, validateTerminationLimits, validateUsageLimits, wordCountValidator, workflowScope, workflowSourceRef, wrapJournalStore, wrapTranscriptStore };

package/dist/index.js

@@ -2532,7 +2532,8 @@ function priceEntryBilling(entry, priceUsd) {
 			servedBy,
 			usage
 		})),
-		fullyAttributed
+		fullyAttributed,
+		coveredModels: covered
 	};
 }
 /**
@@ -8542,16 +8543,22 @@ function costReportFromJournal(entries, priceUsd) {
 * and per-row `allocatedUsd` is the additive column whose flat sum
 * reproduces `totalUsd` exactly in every case.
 *
-* Coverage is loss-free by construction: an entry whose records do not
-* cover its usage total (a resume restored from a checkpoint written
-* before the ledger shipped) contributes an `unattributed` remainder
-* row, and an entry with no records at all (written before the ledger
-* shipped, or a fully replayed invocation) contributes one
-* `unattributed` row per usage slice. Missing provider ids are marked,
-* never dropped: a finished call without one reconciles as
-* `missing-provider-id`, a failed or severed call without one as
-* `unconfirmed` (the provider may or may not have billed it; there is
-* no id to match).
+* Coverage is loss-free by construction: a model whose records do not
+* cover its usage (a resume restored from a checkpoint written before
+* the ledger shipped) contributes an `unattributed` remainder row per
+* slice, and an entry with no records at all (written before the
+* ledger shipped, or a fully replayed invocation) contributes one
+* `unattributed` row per usage slice. A COVERED model contributes no
+* remainder rows at all (RV703): its rows are exactly its records, the
+* same per-model decision the billing fold makes, so a role mismatch
+* between records and slices (the schema-extract default splits one
+* model's usage by role while the record carries one role, or none)
+* can no longer fabricate a phantom row that breaks the
+* `rowUsdNonAdditive: false` promise and siphons allocation from the
+* real call. Missing provider ids are marked, never dropped: a
+* finished call without one reconciles as `missing-provider-id`, a
+* failed or severed call without one as `unconfirmed` (the provider
+* may or may not have billed it; there is no id to match).
 *
 * Pricing happens at fold time from the table you pass, exactly like
 * CostReport. For historical stability against price-table updates,
@@ -8577,6 +8584,12 @@ const USAGE_FIELDS = [
 * model: the whole-entry remainder was published under `entry.servedBy`,
 * so a slice with no records left its allocation pool rowless and the
 * dust pass moved its dollars onto another model's row.
+*
+* Consulted only for UNCOVERED models (RV703): coverage is a per-model
+* decision, so a covered model's slices never reach this arithmetic.
+* The per-role subtraction here against the per-model coverage key was
+* exactly the mismatch that fabricated a phantom remainder whenever a
+* covered model's record roles differed from its slice roles.
 */
 function sliceRemainder(slice, records) {
 	const remainder = {
@@ -8686,7 +8699,8 @@ function invoiceFromJournal(entries, priceUsd, options) {
 	let everyEntryFullyAttributed = true;
 	for (const entry of entries) {
 		if (entry.status === "running" || entry.usage === void 0) continue;
-		if (!priceEntryBilling(entry, priceUsd).fullyAttributed) everyEntryFullyAttributed = false;
+		const billing = priceEntryBilling(entry, priceUsd);
+		if (!billing.fullyAttributed) everyEntryFullyAttributed = false;
 		const abandoned = entry.kind !== "resolution" && entry.kind !== "abandon" && abandonFold.isAbandoned(entry.ref ?? entry.seq);
 		const base = {
 			entrySeq: entry.seq,
@@ -8737,6 +8751,7 @@ function invoiceFromJournal(entries, priceUsd, options) {
 		}
 		let remainderOrdinal = records.length + 1;
 		for (const slice of entryUsageSlices(entry)) {
+			if (billing.coveredModels.has(slice.servedBy)) continue;
 			const remainder = sliceRemainder(slice, records);
 			if (remainder === void 0) continue;
 			const usd = rowUsd(priceUsd, slice.servedBy, remainder, entry.seq);
@@ -11067,6 +11082,18 @@ async function runAgent(options) {
 		});
 	};
 	const providerCalls = [];
+	const usdByPhaseModel = /* @__PURE__ */ new Map();
+	const addCallUsd = (role, ref, usage) => {
+		const priced = options.priceUsd?.(ref, usage) ?? 0;
+		const usd = Number.isFinite(priced) && priced > 0 ? priced : 0;
+		const key = `${role}\u0000${ref}`;
+		const prior = usdByPhaseModel.get(key);
+		usdByPhaseModel.set(key, {
+			role,
+			usd: (prior?.usd ?? 0) + usd
+		});
+	};
+	let perCallCoverage = true;
 	let invocationCounter = 0;
 	let transportRetries = 0;
 	let schemaRecoveredTerminalExchanges = 0;
@@ -11076,6 +11103,11 @@ async function runAgent(options) {
 		for (const [key, slice] of usageByPhaseModel) if (slice.role === role) snapshot.set(key, slice.usage);
 		return snapshot;
 	};
+	const roleUsdSnapshot = (role) => {
+		const snapshot = /* @__PURE__ */ new Map();
+		for (const [key, cell] of usdByPhaseModel) if (cell.role === role) snapshot.set(key, cell.usd);
+		return snapshot;
+	};
 	const usageDelta = (after, before) => {
 		const base = before ?? ZERO_USAGE$1;
 		const delta = {
@@ -11103,19 +11135,22 @@ async function runAgent(options) {
 			role,
 			model,
 			before: roleUsageSnapshot(role),
+			beforeUsd: roleUsdSnapshot(role),
 			startedAtMs: now(),
 			retriesBefore: transportRetries
 		};
 	};
 	const endPhase = (phase, outcome, servedModel) => {
 		let phaseUsage = ZERO_USAGE$1;
-		let phaseUsd = 0;
 		for (const [key, slice] of usageByPhaseModel) {
 			if (slice.role !== phase.role) continue;
 			const delta = usageDelta(slice.usage, phase.before.get(key));
 			phaseUsage = addUsage$1(phaseUsage, delta);
-			const priced = options.priceUsd?.(slice.servedBy, delta) ?? 0;
-			if (Number.isFinite(priced) && priced > 0) phaseUsd += priced;
+		}
+		let phaseUsd = 0;
+		for (const [key, cell] of usdByPhaseModel) {
+			if (cell.role !== phase.role) continue;
+			phaseUsd += cell.usd - (phase.beforeUsd.get(key) ?? 0);
 		}
 		const retries = transportRetries - phase.retriesBefore;
 		events?.emit({
@@ -11128,6 +11163,7 @@ async function runAgent(options) {
 			durationMs: Math.max(0, now() - phase.startedAtMs),
 			usage: phaseUsage,
 			costUsd: phaseUsd,
+			costBasis: "per-call",
 			outcome,
 			...retries > 0 ? { retries } : {}
 		});
@@ -11376,15 +11412,28 @@ async function runAgent(options) {
 			servedBy,
 			usage: totalUsage
 		}];
+		const restoredSliceSums = /* @__PURE__ */ new Map();
 		for (const slice of restoredSlices) {
 			const sliceUsage = usageViolations(slice.usage).length === 0 ? slice.usage : sanitizeUsage(slice.usage);
 			addPhaseUsage(slice.role ?? primaryRole, slice.servedBy, sliceUsage);
 			options.budget?.onUsage(sliceUsage, slice.servedBy);
-		}
-		for (const record of restored.providerCalls ?? []) providerCalls.push(usageViolations(record.usage).length === 0 ? record : {
-			...record,
-			usage: sanitizeUsage(record.usage)
-		});
+			const key = `${slice.role ?? primaryRole} ${slice.servedBy}`;
+			restoredSliceSums.set(key, addUsage$1(restoredSliceSums.get(key) ?? ZERO_USAGE$1, sliceUsage));
+		}
+		const restoredRecordSums = /* @__PURE__ */ new Map();
+		for (const record of restored.providerCalls ?? []) {
+			const sane = usageViolations(record.usage).length === 0 ? record : {
+				...record,
+				usage: sanitizeUsage(record.usage)
+			};
+			providerCalls.push(sane);
+			addCallUsd(sane.role ?? primaryRole, sane.servedBy, sane.usage);
+			const key = `${sane.role ?? primaryRole} ${sane.servedBy}`;
+			restoredRecordSums.set(key, addUsage$1(restoredRecordSums.get(key) ?? ZERO_USAGE$1, sane.usage));
+		}
+		const usageEquals = (a, b) => a.inputTokens === b.inputTokens && a.outputTokens === b.outputTokens && a.cacheReadTokens === b.cacheReadTokens && a.cacheWriteTokens === b.cacheWriteTokens && (a.reasoningTokens ?? 0) === (b.reasoningTokens ?? 0);
+		for (const [key, sliceSum] of restoredSliceSums) if (!usageEquals(sliceSum, restoredRecordSums.get(key) ?? ZERO_USAGE$1)) perCallCoverage = false;
+		for (const key of restoredRecordSums.keys()) if (!restoredSliceSums.has(key)) perCallCoverage = false;
 		guard?.restore(messages);
 		if (limits.toolBudgetNotices === true && limits.maxToolCalls !== void 0) for (const threshold of crossedNoticeThresholds(toolCallsUsed, limits.maxToolCalls)) firedNotices.add(threshold);
 		if (extension !== void 0 && limits.maxToolCalls !== void 0 && toolCallsUsed > limits.maxToolCalls) {
@@ -11435,6 +11484,25 @@ async function runAgent(options) {
 		}
 		return usd;
 	};
+	/**
+	* The invocation's recorded spend (RV702): the per-call accumulator
+	* when every slice is covered by records, the settled fold's own
+	* basis; the labeled aggregate estimate when a restored checkpoint
+	* left usage no record backs, so restored spend is never silently
+	* dropped and an estimate never poses as the per-request fold.
+	*/
+	const recordedSpend = () => {
+		if (!perCallCoverage) return {
+			usd: priceRecordedUsage(),
+			basis: "aggregate-estimate"
+		};
+		let usd = 0;
+		for (const cell of usdByPhaseModel.values()) usd += cell.usd;
+		return {
+			usd,
+			basis: "per-call"
+		};
+	};
 	const saveBoundary = async (pending) => {
 		if (options.checkpoint === void 0) return;
 		await options.checkpoint.save({
@@ -11608,7 +11676,7 @@ async function runAgent(options) {
 					continue;
 				}
 				const request = validation.value;
-				const spentSoFar = priceRecordedUsage();
+				const spentSoFar = recordedSpend().usd;
 				if (countsAgainstLimit(request.kind) && spentSoFar < options.escalation.minSpendUsd) {
 					events?.emit({
 						type: "tool:end",
@@ -12016,6 +12084,7 @@ async function runAgent(options) {
 					if (outcome.aborted !== void 0) record.aborted = outcome.aborted;
 					else if (outcome.wireError !== void 0) record.errorCode = outcome.wireError.code;
 					providerCalls.push(record);
+					addCallUsd(site.role, target.resolved.ref, accounted);
 					const limited = outcome.wireError?.data;
 					if (limited?.kind === "rate-limit" && typeof limited.reportedLimits === "object" && limited.reportedLimits !== null) rateLimitObservations.set(`${target.adapter.id}:${target.resolved.model}`, {
 						provider: target.adapter.id,
@@ -12846,12 +12915,13 @@ async function runAgent(options) {
 		const blob = new TextEncoder().encode(JSON.stringify({ messages }));
 		await options.transcript.put(transcriptRef, blob);
 	}
-	const costUsd = priceRecordedUsage();
+	const spend = recordedSpend();
 	const result = {
 		status,
 		output: status === "ok" ? output : output ?? null,
 		usage: totalUsage,
-		costUsd,
+		costUsd: spend.usd,
+		costBasis: spend.basis,
 		turns,
 		servedBy,
 		transcriptRef
@@ -14667,13 +14737,15 @@ function createCtx(internals, rootWorkflow) {
 				cacheReadTokens: 0,
 				cacheWriteTokens: 0
 			};
-			const replayPriced = terminal === void 0 ? void 0 : priceEntryUsage(terminal, (ref, sliceUsage) => internals.priceUsd(ref, sliceUsage));
+			const replayPriced = terminal === void 0 ? void 0 : priceEntryBilling(terminal, (ref, sliceUsage) => internals.priceUsd(ref, sliceUsage));
 			const costUsd = replayPriced?.usd ?? 0;
+			const replayBasis = replayPriced === void 0 || replayPriced.fullyAttributed ? "per-call" : "aggregate-estimate";
 			const result = {
 				status: matched.kind === "skip" ? "skipped" : terminal?.status ?? "ok",
 				output: matched.kind === "skip" ? null : terminal?.value ?? null,
 				usage,
 				costUsd,
+				costBasis: replayBasis,
 				servedBy: terminal?.servedBy ?? loopResolved.ref,
 				turns: 0,
 				transcriptRef: terminal?.transcriptRef ?? ""
@@ -14737,29 +14809,37 @@ function createCtx(internals, rootWorkflow) {
 					durationMs: 0
 				}, spanId, true);
 			}
-			if (terminal !== void 0) entryUsageSlices(terminal).forEach((slice, index) => {
-				const priced = internals.priceUsd(slice.servedBy, slice.usage) ?? 0;
-				const sliceUsd = Number.isFinite(priced) && priced > 0 ? priced : 0;
-				const common = {
-					agentType,
-					label: opts.label,
-					role: slice.role ?? primaryRole,
-					model: slice.servedBy,
-					invocation: index + 1
-				};
-				internals.events.emit({
-					type: "agent:phase:start",
-					...common
-				}, spanId, true);
-				internals.events.emit({
-					type: "agent:phase:end",
-					...common,
-					durationMs: 0,
-					usage: slice.usage,
-					costUsd: sliceUsd,
-					outcome: terminal.status === "error" || terminal.status === "cancelled" ? "error" : "ok"
-				}, spanId, true);
-			});
+			if (terminal !== void 0) {
+				const usdByRoleModel = /* @__PURE__ */ new Map();
+				const perCallModels = /* @__PURE__ */ new Set();
+				for (const unit of replayPriced?.units ?? []) {
+					const key = `${unit.role ?? primaryRole} ${unit.servedBy}`;
+					usdByRoleModel.set(key, (usdByRoleModel.get(key) ?? 0) + unit.usd);
+					if (unit.source === "call") perCallModels.add(unit.servedBy);
+				}
+				entryUsageSlices(terminal).forEach((slice, index) => {
+					const common = {
+						agentType,
+						label: opts.label,
+						role: slice.role ?? primaryRole,
+						model: slice.servedBy,
+						invocation: index + 1
+					};
+					internals.events.emit({
+						type: "agent:phase:start",
+						...common
+					}, spanId, true);
+					internals.events.emit({
+						type: "agent:phase:end",
+						...common,
+						durationMs: 0,
+						usage: slice.usage,
+						costUsd: usdByRoleModel.get(`${slice.role ?? primaryRole} ${slice.servedBy}`) ?? 0,
+						costBasis: perCallModels.has(slice.servedBy) ? "per-call" : "aggregate-estimate",
+						outcome: terminal.status === "error" || terminal.status === "cancelled" ? "error" : "ok"
+					}, spanId, true);
+				});
+			}
 			internals.events.emit({
 				type: "agent:end",
 				agentType,
@@ -14767,12 +14847,13 @@ function createCtx(internals, rootWorkflow) {
 				status: result.status,
 				usage,
 				costUsd,
+				costBasis: replayBasis,
 				entryRef: terminal?.seq ?? matched.running.seq,
 				...terminal?.usageApprox === true ? { usageApprox: true } : {},
 				...result.exploration === void 0 ? {} : { exploration: result.exploration },
 				...result.toolBudget === void 0 ? {} : { toolBudget: result.toolBudget }
 			}, spanId, true);
-			for (const slice of replayPriced?.priced ?? []) bump(internals.cost.byModel, slice.servedBy, slice.usd);
+			for (const unit of replayPriced?.units ?? []) bump(internals.cost.byModel, unit.servedBy, unit.usd);
 			for (const slice of replayPriced?.unpriced ?? []) internals.cost.unpriced.push({
 				model: slice.servedBy,
 				usage: slice.usage
@@ -15404,6 +15485,7 @@ function createCtx(internals, rootWorkflow) {
 			status: result.status,
 			usage: result.usage,
 			costUsd: result.costUsd,
+			costBasis: result.costBasis,
 			entryRef: terminal.seq,
 			...resultUsageApprox ? { usageApprox: true } : {},
 			...result.transportRetries !== void 0 && result.transportRetries > 0 ? { retryCount: result.transportRetries } : {},
@@ -17606,6 +17688,7 @@ function makeOrchestratorWorkflow(goal, opts) {
 						cacheWriteTokens: 0
 					},
 					costUsd: 0,
+					costBasis: "per-call",
 					turns: 0,
 					servedBy: "unknown:unknown",
 					transcriptRef: "",
@@ -18583,6 +18666,7 @@ function makeOrchestratorWorkflow(goal, opts) {
 					cacheWriteTokens: 0
 				},
 				costUsd: 0,
+				costBasis: "per-call",
 				turns: 0,
 				servedBy: "unknown:unknown",
 				transcriptRef: "",
@@ -20355,6 +20439,7 @@ function reduceInvocationTable(events) {
 				...event.label === void 0 ? {} : { label: event.label },
 				usage: ZERO,
 				costUsd: 0,
+				costBasis: "aggregate-estimate",
 				usageApprox: false,
 				retryCount: 0,
 				replayed: event.replayed === true,
@@ -20381,6 +20466,7 @@ function reduceInvocationTable(events) {
 				durationMs: 0,
 				usage: ZERO,
 				costUsd: 0,
+				costBasis: "aggregate-estimate",
 				retries: 0,
 				replayed: event.replayed === true,
 				open: true
@@ -20400,6 +20486,7 @@ function reduceInvocationTable(events) {
 					durationMs: 0,
 					usage: ZERO,
 					costUsd: 0,
+					costBasis: "aggregate-estimate",
 					retries: 0,
 					replayed: event.replayed === true,
 					open: true
@@ -20413,14 +20500,17 @@ function reduceInvocationTable(events) {
 			phase.durationMs = event.durationMs;
 			phase.usage = event.usage;
 			phase.costUsd = event.costUsd;
+			phase.costBasis = event.costBasis ?? "aggregate-estimate";
 			phase.outcome = event.outcome;
 			phase.retries = event.retries ?? 0;
 			const bucket = byRole[event.role] ??= {
 				usage: ZERO,
-				costUsd: 0
+				costUsd: 0,
+				costBasis: "per-call"
 			};
 			bucket.usage = addUsage(bucket.usage, event.usage);
 			bucket.costUsd += event.costUsd;
+			if (phase.costBasis === "aggregate-estimate") bucket.costBasis = "aggregate-estimate";
 			break;
 		}
 		case "agent:end": {
@@ -20429,6 +20519,7 @@ function reduceInvocationTable(events) {
 			row.status = event.status;
 			row.usage = event.usage;
 			row.costUsd = event.costUsd;
+			row.costBasis = event.costBasis ?? "aggregate-estimate";
 			row.usageApprox = event.usageApprox === true;
 			row.retryCount = event.retryCount ?? 0;
 			if (event.toolBudget !== void 0) row.toolBudget = event.toolBudget;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rulvar/core",
-  "version": "1.109.0",
+  "version": "1.111.0",
   "description": "Rulvar core: L0 contracts, journal kernel, ctx primitives, agent runtime, model router, tool system, dynamic orchestrator, InMemory and JSONL stores, event stream.",
   "type": "module",
   "license": "Apache-2.0",