@rulvar/core 1.242.0 → 1.244.0

package/dist/index.d.ts

@@ -1194,14 +1194,27 @@ type RunMeta = {
   workflowHash?: string; /** TranscriptStore ref of the persisted CompiledWorkflow source. */
   workflowSourceRef?: string;
   /**
-  * The run's immutable USD ceiling (RunOptions.budgetUsd), recorded so
-  * resume restores the original invocation's bound. Absent when the
-  * run started without a ceiling. Stores must round-trip the field
-  * (the conformance kit checks); a store that drops it degrades a
-  * resumed run to uncapped.
+  * The run's segment-immutable USD ceiling (RunOptions.budgetUsd),
+  * recorded so resume restores the original invocation's bound (only
+  * the explicit, journaled ResumeOptions.run override changes it,
+  * RV2208, by rewriting this field for the run's remaining life).
+  * Absent when the run started without a ceiling. Stores must
+  * round-trip the field (the conformance kit checks); a store that
+  * drops it degrades a resumed run to uncapped.
   */
   budgetUsd?: number;
   /**
+  * The ceiling-override posture (RunOptions.budgetPolicy, RV3902),
+  * recorded at genesis only when 'immutable-lifetime': under it a
+  * resume carrying any ResumeOptions.run override refuses typed
+  * before ownership. Absent means 'segment', the historical
+  * behavior. Stores must round-trip the field (the conformance kit
+  * checks); a store that drops it degrades the run to the 'segment'
+  * posture (the override door works again), never to an invented
+  * refusal.
+  */
+  budgetPolicy?: "immutable-lifetime";
+  /**
   * The opt-in in-flight exposure cap
   * (RunOptions.maxInFlightExposureUsd), recorded at genesis so resume
   * restores the original invocation's cap (RV1504): the option used
@@ -1746,6 +1759,37 @@ interface TerminalEnvelope {
   */
   provenance?: "journal";
 }
+/**
+* The runtime gate over the terminal envelope contract (RV3903, the
+* fourth comparison experiment). `terminalEnvelopeOf` is the ONE
+* producer, but a producer is a compile-time promise, and the envelope
+* crosses trust boundaries the type system never sees: a journal read
+* back after a restart, a plain JS caller, an HTTP body a pipeline
+* gates on. The experiment probed the built dist and the typed copy
+* accepted `status: 'green'`, NaN dollars, and negative counts without
+* a sound; a finance or compliance consumer downstream would have
+* gated a run on fiction.
+*
+* The gate validates the CONTRACT fields and refuses with a typed
+* {@link ConfigError} naming the field and the defect: enum `status`
+* and `completion`, finite nonnegative money (with `totalUsd <=
+* grossUsd`, gross being net plus abandoned by construction), usage
+* and counters, `settledReason` only beside `settled: false`, the
+* `costBasis` and `provenance` literals, boolean `usageApprox`, and
+* the `WireError` shape when an error rides along. Unknown top-level
+* fields pass through untouched: the contract evolves additively, and
+* a parser that refused tomorrow's field would turn every additive
+* release into a wire break. On success the SAME reference comes back,
+* typed: the gate is a boundary check, never a normalizer.
+*
+* Wired where external bytes actually enter: `persistedTerminalEnvelope`
+* runs every journal-rebuilt envelope through it (and refuses typed as
+* `malformed-envelope`), which also covers the server's persisted
+* serving by construction. The live settlement chokepoint stays
+* unparsed on purpose: it is the one producer inside one process, and
+* gating it would add a throw site to settlement itself.
+*/
+declare function parseTerminalEnvelope(value: unknown): TerminalEnvelope;
 //#endregion
 //#region src/l0/spi/isolation.d.ts
 /**
@@ -6156,7 +6200,13 @@ interface TerminationLimits {
   maxDepth: number;
   /** Maximum declared ladder length per the profile-registry snapshot. */
   kMax: number;
-  /** B0; immutable after start, no API including HITL can top up. */
+  /**
+  * B0 as frozen at genesis; no API, HITL included, tops up a live
+  * run. The vector keeps the GENESIS ceiling even when a later
+  * segment's journaled ResumeOptions.run override (RV2208) moved the
+  * enforced bound: the frozen dollars are the termination account's
+  * record, the override decision entry is the budget's.
+  */
   runBudgetUsdCeiling: number;
   /**
   * The resolved orchestrator cap in absolute USD (DEF-7; XF-09),
@@ -6240,8 +6290,9 @@ declare function readTerminationInit(entry: JournalEntry): TerminationInitValue
 /**
 * Config-drift detection at resume: the journaled vector
 * always wins; every differing field is reported for the
-* `termination:config-drift` event. Dynamic budget top-up via restart is
-* excluded by construction.
+* `termination:config-drift` event. Ambient config can never top up a
+* budget through a restart; the one explicit, journaled door is
+* ResumeOptions.run (RV2208), which is a decision entry, not a drift.
 */
 declare function terminationConfigDrift(frozen: TerminationLimits, live: Partial<TerminationLimits>): Array<{
   field: keyof TerminationLimits;
@@ -6451,6 +6502,8 @@ interface BudgetAccountView {
   synthesisReserveUsd: number;
   /** The repair round's verdict hold (RV3701); zero when none is committed. */
   convergenceReserveUsd: number;
+  /** The repair round's mechanical leg (RV3802); zero when none is committed. */
+  repairReserveUsd: number;
   parentScope?: string;
 }
 /**
@@ -6480,7 +6533,12 @@ interface BudgetExhaustionDiagnostics {
 * spawn-admission decision entries, M6).
 */
 declare class RunBudget {
-  /** B0; immutable after start. Undefined means no USD ceiling. */
+  /**
+  * B0; immutable within a segment (RV2511): only the explicit,
+  * journaled ResumeOptions.run override (RV2208) changes it, by
+  * opening a new segment, and budgetPolicy 'immutable-lifetime'
+  * (RV3902) refuses even that. Undefined means no USD ceiling.
+  */
   readonly ceilingUsd?: number;
   /**
   * The opt-in in-flight exposure cap (RV711). Undefined means the
@@ -6772,6 +6830,26 @@ declare class RunBudget {
   commitConvergenceReserve(scope: string, reserveUsd: number): void;
   /** The verdict pass dispatch consumes its reserve; see commitConvergenceReserve. */
   releaseConvergenceReserve(scope: string): void;
+  /**
+  * Registers the repair round's MECHANICAL leg (RV3802), the money
+  * twin of the RV3602 per-invocation pool: the round's finish
+  * contract can grant one bounded mechanical repair turn, and the
+  * third comparison run's round entered exactly that turn's price
+  * short of certainty (the repair existed by pool and by contract,
+  * but nothing guaranteed the money would still be there when the
+  * candidate materialized). Held beside the verdict leg from the
+  * moment the round is admitted; released EARLY, to the round's own
+  * finish loop, at its first journaled verdict (a 'repair' verdict is
+  * about to spend the freed money on the granted turn, an 'accepted'
+  * one never needed it), where the verdict leg lives until the judge
+  * dispatch. Exactly the convergence reserve mechanics otherwise:
+  * joins the projected admission sum and both remainders, named in
+  * the refusal clause, never joined to the severing check, idempotent
+  * per account with the root adjusted by the delta.
+  */
+  commitRepairReserve(scope: string, reserveUsd: number): void;
+  /** The round's finish loop consumes its leg; see commitRepairReserve. */
+  releaseRepairReserve(scope: string): void;
   /** The reserve is replaced by real spend when the spawn settles. */
   releaseReserve(reserveUsd: number, accountScope?: string): void;
   /**
@@ -7913,15 +7991,38 @@ interface RunOptions {
   */
   configFingerprint?: string;
   /**
-  * Run ceiling B0; immutable after start. Enforced by projected
-  * admission (a spawn whose reserve does not fit is denied before any
-  * dispatch), the per-turn guard with a budget-derived maxOutputTokens
-  * clamp, and live stream cuts on crossing; the residual
-  * provider-dependent overshoot is bounded by one in-flight turn per
-  * concurrent agent. Contract: https://docs.rulvar.com/guide/budgets.
+  * Run ceiling B0; immutable within a segment (RV2511): no API tops
+  * up a live run's ceiling, and the ONE explicit door after genesis
+  * is the validated, journaled `ResumeOptions.run` override (RV2208),
+  * which takes effect only by opening a new segment. Enforced by
+  * projected admission (a spawn whose reserve does not fit is denied
+  * before any dispatch), the per-turn guard with a budget-derived
+  * maxOutputTokens clamp, and live stream cuts on crossing; the
+  * residual provider-dependent overshoot is bounded by one in-flight
+  * turn per concurrent agent. Under {@link RunOptions.budgetPolicy}
+  * 'immutable-lifetime' even the override door refuses typed.
+  * Contract: https://docs.rulvar.com/guide/budgets.
   */
   budgetUsd?: number;
   /**
+  * The ceiling-override posture of the run's whole life (RV3902, the
+  * fourth comparison experiment). Default 'segment', today's behavior
+  * byte for byte: B0 and the exposure cap are immutable WITHIN a
+  * segment, and the explicit, validated, journaled
+  * `ResumeOptions.run` override (RV2208) may change them by opening a
+  * new segment. 'immutable-lifetime' welds that one door shut: the
+  * posture is recorded in RunMeta at genesis and restored on every
+  * resume, and a resume carrying ANY `ResumeOptions.run` value
+  * refuses with a typed ConfigError BEFORE ownership, meta writes, or
+  * any append, raise and lower alike; no journaled override exists in
+  * this mode, and the emergency lever for a run that must stop
+  * spending is cancel, not a ceiling edit. Degradation is honest: a
+  * store that drops the optional RunMeta field resumes as 'segment'
+  * (the override door works again), never as an invented refusal.
+  * Declared at genesis only; the policy itself has no override.
+  */
+  budgetPolicy?: "segment" | "immutable-lifetime";
+  /**
   * The opt-in in-flight exposure cap (RV711): bounds spent money plus
   * the summed worst-case estimates of live dispatches. The per-turn
   * guard checks money already SPENT, so under `budgetUsd` alone N
@@ -8106,7 +8207,11 @@ interface ResumeOptions {
   * meta, or any append: such a ceiling would exhaust the segment
   * before its first turn and read like a fresh money death. Absent
   * fields keep the recorded values; an absent object keeps the
-  * historical behavior byte for byte.
+  * historical behavior byte for byte. Under a recorded
+  * {@link RunOptions.budgetPolicy} 'immutable-lifetime' (RV3902) any
+  * applying override refuses typed before ownership, raise and lower
+  * alike: the door this field is exists only under the 'segment'
+  * posture.
   */
   run?: {
     budgetUsd?: number;
@@ -8131,7 +8236,9 @@ interface Engine {
   * whose source hash differs from the recorded one is a typed
   * ConfigError (M6-T02). ResumeOptions.run (RV2208) overrides the
   * recorded budget ceilings for the run's remaining life, with a
-  * journaled decision and a typed floor at the settled spend.
+  * journaled decision and a typed floor at the settled spend; under
+  * a recorded budgetPolicy 'immutable-lifetime' (RV3902) any applying
+  * override refuses typed before ownership instead.
   */
   resume<A, R>(runId: string, wf?: Workflow<A, R> | CompiledWorkflow, options?: ResumeOptions): ResumeHandle<R>;
   /**
@@ -8376,12 +8483,42 @@ interface FinishValidationInput {
   */
   readonly runId?: string;
 }
+/**
+* One structured repair hint on a failed verdict (RV3801): the exact
+* edit whose application satisfies this validator, precise enough for
+* the HOST to perform without a provider wire. The third comparison
+* run died with its repair pool spent on a failure class whose remedy
+* the evidence-grade verdict already prescribed word for word (write
+* this run's id inside each offending sentence); a remedy that
+* deterministic must not cost a model turn. A hint is advisory: the
+* finish loop attempts the patch only when EVERY failure of the
+* candidate carries hints, re-runs the FULL validator set over the
+* patched document, and falls back to the ordinary model repair pool
+* when the patch does not survive re-validation.
+*/
+interface FinishRepairHint {
+  /** The one host-side edit the loop knows how to apply. */
+  readonly mechanism: "insert-run-id";
+  /** Offset of the offending sentence's first character in the judged text. */
+  readonly start: number;
+  /** Offset one past the offending sentence's last character. */
+  readonly end: number;
+  /**
+  * The offending sentence verbatim (never normalized or clipped): the
+  * loop refuses the patch unless `text.slice(start, end)` equals it,
+  * so a stale hint can never edit the wrong bytes.
+  */
+  readonly sentence: string;
+  /** The identifier whose insertion the verdict prescribes. */
+  readonly insert: string;
+}
 /** The verdict of one validator over one finish attempt. */
 type FinishValidationVerdict = {
   ok: true;
 } | {
   ok: false;
   reasons: string[];
+  repairHints?: FinishRepairHint[];
 };
 /**
 * A deterministic host validator of the orchestrator finish result.
@@ -8519,6 +8656,33 @@ declare const DEFAULT_CITATION_PATTERN = "[\\w./-]+\\.\\w+:\\d+";
 /** The default preserved share, the improvement plan's RV-202 gate. */
 declare const DEFAULT_EVIDENCE_MIN_SHARE = .95;
 /**
+* The deterministic edit behind the `insert-run-id` mechanism
+* (RV3801): the id lands INSIDE the sentence, before its trailing
+* terminator run (a `.`, `!`, or `?` with any closing quotes,
+* brackets, or markdown emphasis after it), or at the very end when
+* the sentence carries no terminator. Inside matters: appended AFTER
+* the terminator the id would belong to the NEXT sentence under the
+* shared `sentencesOf` segmentation and the re-validation would fail
+* the same sentence again. Exported so tests and hosts can reproduce
+* the loop's exact bytes.
+*/
+declare function insertRunIdIntoSentence(sentence: string, insert: string): string;
+/**
+* Applies `insert-run-id` repair hints to a judged text (RV3801): each
+* `[start, end)` window is replaced by
+* {@link insertRunIdIntoSentence}(window, insert), right to left so
+* earlier offsets stay valid, every other byte identical. Fail closed:
+* `undefined` (never a partial patch) when the set is empty, any
+* window is out of bounds or empty, or two windows overlap; the caller
+* treats a refused patch exactly like an absent one and proceeds to
+* the model repair pool.
+*/
+declare function applyFinishRepairHints(text: string, hints: readonly {
+  start: number;
+  end: number;
+  insert: string;
+}[]): string | undefined;
+/**
 * The RV-202 evidence preservation contract: the finish result must
 * PRESERVE the citations the children actually produced. Distinct
 * matches of `pattern` are collected across the outputs of children
@@ -8683,6 +8847,13 @@ declare const DEFAULT_ARTIFACT_PATTERN = "(?:run[ -]?[0-9A-HJKMNP-TV-Z]{6,26}|[\
 * the repair instruction is executable rather than aspirational. An id
 * shorter than `MIN_RUN_ID_ARTIFACT_CHARS` (six) is ignored, and
 * without an id the verdict is byte identical to the historical one.
+*
+* With the id in hand the failure also carries {@link FinishRepairHint}
+* rows (RV3801), one per offending sentence, so the finish loop can
+* perform the verdict's own prescription host side without spending a
+* provider wire; the reasons stay byte identical either way, and the
+* hints are bounded (at most `MAX_REPAIR_HINTS` offenders) and fail
+* closed (an id whose bytes could split a sentence is never hinted).
 * Default name 'evidence-grade'.
 */
 declare function evidenceGradeValidator(options?: {
@@ -9919,6 +10090,27 @@ interface OrchestratorBudgetSpec {
   */
   synthesisReserveUsd?: number;
   /**
+  * The admission posture of the acceptance path (RV3907, the fourth
+  * comparison experiment). Preflight has long PRICED the tail and
+  * warned (`reserve-line-headroom`, `orchestrator-working-room`), and
+  * the experiment's run started anyway, with the warnings on record
+  * and the acceptance machinery funded by luck. 'warn' (default)
+  * keeps exactly that: findings in preflight, nothing at runtime.
+  * 'require' turns the arithmetic into a boot refusal BEFORE the
+  * first wire: the effective cap must cover, at exact fill or
+  * better, the DECLARED acceptance tail (the held
+  * `synthesisReserveUsd`, the claim judge's `judge.estCost` times
+  * one plus the armed semantic repair round, the declared
+  * `finishValidation.estRepairCostUsd`, and the armed round's
+  * declared `synthesis.estCost` composition floor) plus one
+  * coordination turn floor of working room. Undeclared estimates
+  * contribute zero, so the gate binds exactly what the host
+  * declared; the refusal journals an `acceptance_reserve_refused`
+  * decision naming every term and throws the typed
+  * OrchestratorCapConfigError with the same arithmetic.
+  */
+  acceptanceReserve?: "warn" | "require";
+  /**
   * A positive integer, validated before any journal entry or dispatch:
   * the turn limit of the reserved final wake.
   */
@@ -10060,6 +10252,28 @@ interface OrchestrateAcceptance {
 }
 /** How many rejected finishes are repaired by default: the plan's repair once. */
 declare const DEFAULT_FINISH_MAX_REPAIRS = 1;
+/** The sectional round's owning sections and marker roster (RV3803). */
+interface SectionalRoundPlan {
+  /** Every H2 marker of the retained document, in document order. */
+  sections: string[];
+  /** The markers owning at least one finding excerpt, document order. */
+  targets: string[];
+}
+/**
+* Plans the sectional claim repair round (RV3803): which H2 sections
+* of the accepted pre-repair document own the judged findings. The
+* third comparison run's round regenerated the WHOLE 43k character
+* document to consume findings that lived in a handful of sentences,
+* and the tail after fan-in was 80.1 percent of the run's wall. Each
+* finding's `draftExcerpt` (whitespace collapsed by the pairing fold)
+* is located in the document through a collapse-aware scan, and its
+* owning section is the nearest H2 line above it. Fail closed to the
+* FULL regeneration (undefined, the historical round byte for byte)
+* whenever the plan cannot be exact: no excerpts, a document without
+* H2 headings, duplicated markers (the splice grammar needs unique
+* lines), or any excerpt the scan cannot locate.
+*/
+declare function sectionalRoundPlan(document: string, excerpts: readonly string[]): SectionalRoundPlan | undefined;
 /**
 * Character cap of the HOST VALIDATION LESSONS prompt block (RV3603):
 * the bounded repair round's prompt folds the run's journaled finish
@@ -10174,6 +10388,21 @@ interface FinishValidationSpec {
   */
   repairTurnReserve?: number;
   /**
+  * The declared price of ONE mechanical repair turn in USD (RV3802),
+  * the money twin of `repairTurnReserve`'s turn grant: the bounded
+  * claim repair round (`claimConsistency.onFound: 'repair'`) holds
+  * this beside the verdict money (RV3701) from the moment the round
+  * is admitted, so the one repair turn the round's own finish
+  * contract can grant is funded when the candidate materializes; the
+  * leg releases to the round's finish loop at its first journaled
+  * verdict. Undeclared, the hold falls back to the run's own observed
+  * last mechanical repair price (`lastMechanicalRepairCostUsd` over
+  * the journal, absent when no priced repair window exists), else
+  * zero, which keeps every pre-RV3802 admission byte identical. A
+  * nonnegative finite number; refused typed otherwise.
+  */
+  estRepairCostUsd?: number;
+  /**
   * The coordination draft gate (the v1.74 experiment review, P0.3),
   * meaningful ONLY with `synthesis` configured: with validators bound
   * to the synthesis finish, the coordination finish is an unvalidated
@@ -10813,6 +11042,35 @@ interface OrchestrateClaimConsistencyMeta {
   * the synthesis rewrote what the judge cleared.
   */
   judgedHash: string;
+  /**
+  * How many judge passes this stage's verdict lineage ran (RV3904,
+  * the fourth comparison experiment): present exactly when the
+  * bounded claim repair round is armed (`onFound: 'repair'`), so a
+  * consumer reading `findings: 0` can tell a clean FIRST verdict
+  * (`passes: 1`) from a verdict earned through a repair
+  * (`passes: 2`, the meta above always describing the LAST pass).
+  * The experiment's terminal read findings 0 over a lineage whose
+  * first pass had caught a real contradiction, and only the journal
+  * could say so. Absent on journals and configs from before the
+  * field, and absent when no repair round is armed: NOT RECORDED,
+  * never a claim of a single pass.
+  */
+  passes?: number;
+  /**
+  * The findings count of the FIRST pass of this stage (RV3904),
+  * present exactly when `passes` exceeds 1: what the repair round
+  * consumed, so "zero findings after one round over one first-pass
+  * finding" reads off the envelope instead of the journal.
+  */
+  firstPassFindings?: number;
+  /**
+  * Bounded semantic repair rounds actually dispatched at this stage
+  * (RV3904); today 0 or 1, the evidence-grade precedent. Distinct
+  * from the finish validation's mechanical `repairsUsed`, which
+  * counts model repair turns INSIDE one invocation and keeps its
+  * byte contract untouched.
+  */
+  semanticRepairRounds?: number;
 }
 /**
 * How the shipped artifact relates to the draft the run composed it
@@ -10833,6 +11091,26 @@ interface OrchestrateDraftToFinal {
   claimsJudgedOn?: "draft" | "final" | "both";
 }
 /**
+* The deterministic-repair aggregate of the shipped run (RV3904, the
+* fourth comparison experiment): the patches themselves stay on the
+* journaled finish-validation decisions (RV3801, byte-exact with
+* before/after hashes per decision); the acceptance envelope carries
+* the aggregate, so "was the shipped document machine-patched, and
+* from what bytes" is an envelope read instead of a journal walk.
+* Present exactly when at least one ACCEPTED deterministic repair
+* exists; every other envelope stays byte identical.
+*/
+interface OrchestrateDeterministicPatches {
+  /** Finish decisions whose deterministic repair was accepted. */
+  decisions: number;
+  /** Total individual patches across those decisions. */
+  patches: number;
+  /** The LAST accepted repair's canonical pre-patch hash. */
+  lastBeforeHash: string;
+  /** The LAST accepted repair's canonical post-patch hash; the judge rules on these bytes. */
+  lastAfterHash: string;
+}
+/**
 * The synthesis invocation's own knobs (RV-211). Everything else about
 * the invocation is deterministic: the prompt derives from the journaled
 * draft and the settled child digest, the toolset is the single finish
@@ -11157,9 +11435,9 @@ declare function makeOrchestratorWorkflow(goal: string, opts?: OrchestrateOption
 * Top-level surface: creates a run. `runOptions` are the ordinary
 * engine {@link RunOptions} of the created run; in particular
 * `runOptions.budgetUsd` is the ROOT hard ceiling over the WHOLE tree
-* (the orchestrator and every child), immutable after start, while
-* `opts.budget` only shapes the orchestrator's own sub-account inside
-* that ceiling. The shortcut previously accepted no RunOptions at all,
+* (the orchestrator and every child), immutable within a segment,
+* while `opts.budget` only shapes the orchestrator's own sub-account
+* inside that ceiling. The shortcut previously accepted no RunOptions at all,
 * so the canonical entry point could not set a root ceiling without
 * dropping to `engine.run(makeOrchestratorWorkflow(...))` (v1.18.0
 * review P1-5).
@@ -11796,6 +12074,8 @@ interface CostAttribution {
   byModel: Map<string, number>;
   byPhase: Map<string, number>;
   byAgentType: Map<string, number>;
+  /** Keyed by the raw journal scope (RV3805); '' is the root's own scope. */
+  byScope: Map<string, number>;
   byRole: Map<InvocationRole, number>;
   unpriced: Array<{
     model: string;
@@ -11959,6 +12239,16 @@ declare function executeWorkflow<A, R>(internals: RunInternals, wf: Workflow<A,
 */
 declare function attributionBucket(value: string | undefined): string;
 /**
+* The scope key rule of the byScope rollup (RV3805). The root's OWN
+* scope is the empty string BY CONSTRUCTION: present data whose string
+* happens to be empty, not an absence, so it folds under the
+* addressable name 'root' instead of the RV3604 'unknown' fallback,
+* which stays reserved for a scope that is truly missing. Children
+* keep their scope strings verbatim. One rule for both builders, so
+* the live report and the journal fold cannot disagree on the key.
+*/
+declare function scopeBucket(scope: string | undefined): string;
+/**
 * Folds the per-run attribution buckets into the normative CostReport.
 * Live attribution buckets never see abandoned subtrees, so a host
 * that tracked abandoned spend itself passes it as `abandoned`;
@@ -12074,13 +12364,32 @@ interface CostReport {
   * phase, or an EMPTY phase, folds under the named 'unknown' bucket
   * (RV3604): a '' key is unaddressable in every downstream table,
   * and the third comparison run's report read `byPhase {"": 5.58}`
-  * for the whole run.
+  * for the whole run. In dynamic runs the orchestrator's own stages
+  * name their dispatches since RV3905 ('fan-out' children,
+  * 'coordination' loop turns and the forced-finish wake,
+  * 'composition' synthesis and incremental notes, 'judge' claim
+  * passes, 'repair' the bounded claim repair round), filling only
+  * the vacuum: an explicit host ctx.phase around the orchestration
+  * keeps its own bucket. The fourth comparison run's report read
+  * byPhase 100% 'unknown' over stages the journal held apart.
   */
   byPhase: Record<string, number>;
   /** Spawn agentType names; absent and empty fold under 'unknown' (RV3604). */
   byAgentType: Record<string, number>;
   byRole: Record<InvocationRole, number>;
   /**
+  * Spend per journal scope (RV3805): the root and every child are
+  * addressable rows whose sum equals `totalUsd`, so the children
+  * versus whole-workflow cut (the third comparison analysis had to
+  * hand-aggregate it from invoice rows) reads off the report
+  * directly. The root's OWN scope is the empty string BY
+  * CONSTRUCTION, present data rather than an absence, so it folds
+  * under the named 'root' bucket; children keep their scope strings
+  * verbatim, and only a truly absent scope folds under 'unknown',
+  * the RV3604 fallback.
+  */
+  byScope: Record<string, number>;
+  /**
   * All-zero with forcedFinish false in runs without a dynamic
   * orchestrator (or when no cap resolved, so no sub-account opened).
   * Folded purely from the journal: spentUsd is the priced usage of
@@ -13767,6 +14076,13 @@ interface JournaledSynthesisCandidate {
   /** The hosting span's dispatch label (RV2901), when journaled. */
   spanLabel?: string;
   /**
+  * The hosting span's running entry seq (RV3802): the span's identity
+  * within the run, so two candidates can be read as neighbors of ONE
+  * composition invocation (the repair-turn pairing below) instead of
+  * accidental neighbors across spans. Absent exactly when unhosted.
+  */
+  spanSeq?: number;
+  /**
   * Wall from the previous boundary (the span's start, or the prior
   * verdict) to this verdict's stamp. Absent when the candidate is not
   * hosted by a settled synthesize span or a stamp is missing.
@@ -13825,6 +14141,20 @@ interface JournaledSynthesisCandidateReport {
 *   same shape `invoiceFromJournal` takes; omit to fold without money
 */
 declare function synthesisCandidatesFromJournal(entries: readonly JournalEntry[], priceUsd?: (servedBy: ModelRef, usage: Usage) => number | undefined): JournaledSynthesisCandidateReport;
+/**
+* The observed price of the run's LAST mechanical repair turn
+* (RV3802): the window of the candidate that FOLLOWED a 'repair'
+* verdict inside the same settled synthesize span, priced by the same
+* per-call fold every candidate window uses. This is the fallback the
+* repair round's mechanical money leg sizes itself from when the host
+* declared no estimate: by the time the round is admitted the initial
+* composition has settled, so a mechanical repair it performed is a
+* priced window in the journal. Fail closed under RV1209: no such
+* pairing, an unattributed span, or an unpriceable window all return
+* undefined (never a guessed number), and the caller treats undefined
+* as an inert zero-size leg.
+*/
+declare function lastMechanicalRepairCostUsd(entries: readonly JournalEntry[], priceUsd?: (servedBy: ModelRef, usage: Usage) => number | undefined): number | undefined;
 //#endregion
 //#region src/stores/tool-calibration.d.ts
 /** One dispatch carrying BOTH sides of the calibration pair (RV3003). */
@@ -14090,6 +14420,25 @@ interface InvoiceRow {
   entrySeq: number;
   scope: string;
   key: string;
+  /**
+  * The spawn's agent type from the terminal's cost attribution
+  * (RV3906, the fourth comparison experiment): in dynamic runs the
+  * scope grammar nests every orchestrator spawn under one
+  * `agent:<seq>` bucket, so per-child money used to require a join
+  * through the journal; the row now names the profile directly.
+  * Additive and policy, never identity: absent on entries journaled
+  * before cost attribution shipped, on empty attributions, and on
+  * every pre-RV3906 export byte, so old journals and old consumers
+  * read exactly what they always read.
+  */
+  agentType?: string;
+  /**
+  * The dispatch label from the same attribution (RV2803 journaled
+  * it; RV3906 lifts it onto the row), what tells two spans of one
+  * role apart without a journal join. Absent on unlabelled
+  * dispatches, additive exactly like `agentType`.
+  */
+  label?: string;
   /** The call's dispatch ordinal within its invocation; remainder and slice rows continue past it. */
   ordinal: number;
   servedBy: ModelRef;
@@ -14648,9 +14997,15 @@ declare function statementRowsFromDelimited(text: string, options?: DelimitedSta
 * a stale settle), which is exactly the evidence `auditRun` derives a
 * non-terminal status from. `unknown-workflow`: nothing names the
 * workflow the terminal belongs to, and an envelope that invented one
-* would be a lie on its most-read field.
-*/
-type PersistedTerminalRefusal = "unsettled" | "not-terminal" | "unknown-workflow";
+* would be a lie on its most-read field. `malformed-envelope` (RV3903):
+* the rebuilt envelope failed the runtime contract gate
+* (`parseTerminalEnvelope`), which means the journal bytes this fold
+* read produced values the terminal contract forbids (NaN money, a
+* negative counter, an unknown status literal); the reconstruction is
+* withheld typed instead of served green, and the message names the
+* field and the defect.
+*/
+type PersistedTerminalRefusal = "unsettled" | "not-terminal" | "unknown-workflow" | "malformed-envelope";
 /** The reconstruction verdict: an envelope, or a typed refusal. */
 type PersistedTerminalResult = {
   available: true;
@@ -14830,7 +15185,12 @@ interface PreflightOrchestratorSpec {
     * (this same `judge.estCost` first, else the run's own observed
     * post draft judge price) until that pass admits, so the
     * declared estimate is not only judged before the run but enforced
-    * inside it.
+    * inside it. The mechanical leg has the same twin (RV3802): the
+    * one repair turn the round's finish contract can grant is held as
+    * `finishValidation.estRepairCostUsd` (else the run's observed
+    * last mechanical repair price) beside the verdict money, released
+    * to the round's finish loop at its first verdict; the runtime
+    * enforcement of the `repairTurnReserve` turn grant's price.
     */
     onFound?: "report" | "carry" | "fail" | "repair";
     /**
@@ -15992,4 +16352,4 @@ interface SandboxBridge {
 declare const SANDBOX_AGENT_OPT_KEYS: readonly string[];
 declare function createSandboxBridge(ctx: Ctx<never>, options: SandboxBridgeOptions): SandboxBridge;
 //#endregion
-export { AWAIT_SCHEMA, AbandonAttempt, AbandonFold, AbandonPayload, AbandonedSpendView, AbortClass, AcceptanceChildSummary, type AdaptiveEvents, AdmissionController, AdmissionDecision, AdmissionRejectedError, AdmissionStatsBefore, AdmitLineage, AdmitRejectReason, AdmitSpec, AdmitVerdict, AgentCallError, AgentError, type AgentEvents, AgentIdentityInput, type AgentInvocationRow, AgentOpts, AgentProfile, AgentProfilePermissions, AgentProfileTemplateOptions, AgentResult, AgentResultMeta, AgentStatus, type AppliedPricingRow, ApproachSignatureInputs, ApprovalDecision, ApprovalIdentityInput, Artifact, AttemptOutcomeClass, AuditCategory, AuditRecord, AuditRunsOptions, BUDGET_ABORT_REASON, BaseAppend, BillingComponent, BriefOpts, BudgetAccountView, BudgetDefaults, BudgetExhaustedError, BudgetExhaustionDiagnostics, BudgetHooks, BudgetReserve, type Bytes, CANCEL_AGENT_SCHEMA, CHECKPOINT_FORMAT_V1, CLAIM_JUDGE_LABEL, CLAIM_STATEMENT_MAX_CHARS, CLAIM_TTL_DAYS, COMPACTION_SUMMARY_PREFIX, CURRENT_HASH_VERSION, CacheHint, CachePolicy, CacheTtl, CanUseTool, CanonicalId, CanonicalIdentity, CanonicalLadderSpec, CanonicalModelSpec, ChatEvent, ChatRequest, CheckpointState, ChildArtifactPage, ChildExecutionFacts, ChildIdentityInput, ChildResultPage, ChildrenAtFailure, CitationTarget, type ClaimClass, ClaimContradictionFinding, ClaimCoverageGrade, ClaimCoverageInput, type ClaimOp, ClaimPair, ClaimPairOptions, ClaimPairsFold, ClaimPoolReading, type ClaimStatus, ClaimValidationOptions, CollectOpts, CollectedTurn, CompactionConfig, CompiledPermissionChain, CompiledWorkflow, ComponentDelta, ConfigError, Contradiction, ContradictionClaim, ContradictionOptions, ContradictionSource, type CoreEvents, CostAttribution, CostAttributionFacts, type CostBasis, CostReport, CreateEngineOptions, type CriticalPath, Ctx, DECISION_CHAIN_KINDS, DEFAULT_ANCHOR_PATTERN, DEFAULT_ARTIFACT_PATTERN, DEFAULT_CHILD_BUDGET_FRACTION, DEFAULT_CHILD_RESULT_PAGE_CHARS, DEFAULT_CITATION_PATTERN, DEFAULT_CITATION_SAMPLE, DEFAULT_CLAIM_JUDGE_MAX_TURNS, DEFAULT_COMPACTION_THRESHOLD, DEFAULT_ESCALATION_LIMITS, DEFAULT_EVIDENCE_CALLS_PER_ENTRY, DEFAULT_EVIDENCE_GRADE_PHRASES, DEFAULT_EVIDENCE_MIN_SHARE, DEFAULT_EVIDENCE_OVERHEAD_CALLS, DEFAULT_FINISH_MAX_REPAIRS, DEFAULT_FLAT_RESERVE_USD, DEFAULT_MAX_CHILDREN_PER_NODE, DEFAULT_MAX_CLAIM_PAIRS, DEFAULT_MAX_CONTRADICTIONS, DEFAULT_MAX_DEPTH, DEFAULT_MAX_EXCERPT_CHARS, DEFAULT_MAX_OSCILLATIONS_PER_KEY, DEFAULT_MAX_PAIR_EXCERPT_CHARS, DEFAULT_MAX_PINNED_WORKTREES, DEFAULT_MAX_POOL_PER_PAIR, DEFAULT_MAX_QUOTA_DENIALS, DEFAULT_MAX_REVISIONS_PER_RUN, DEFAULT_MAX_RUN_FACT_PAIRS, DEFAULT_MAX_TOTAL_SPAWNS, DEFAULT_MAX_TURNS, DEFAULT_MODEL_RETRY_ATTEMPTS, DEFAULT_NO_PROGRESS_TURNS, DEFAULT_PER_RUN_CONCURRENCY, DEFAULT_RETRY_POLICY, DEFAULT_STREAM_IDLE_TIMEOUT_MS, DEFAULT_SYNTHESIS_MAX_TURNS, DEFAULT_SYNTHESIS_NOTE_MAX_TURNS, DataKeyProvider, DebitResult, DecisionChainRow, DeclaredLadder, DedupIndex, DedupNote, DedupedClaims, DelimitedStatementOptions, DerivedKey, DeriverRegistry, type DeterminismConfig, DeterminismError, type DeterminismEvents, type DeterminismMode, DispositionRule, DispositionTable, DocumentedRates, DonorCandidate, DonorRef, DroppedItem, EMIT_RESULT_TOOL, EMPTY_AUTHORITY_HASH, EMPTY_SCHEMA_HASH, EMPTY_TOOLSET_HASH, ESCALATE_TOOL_NAME, ESCALATION_REPORT_SCHEMA, ESCALATION_REQUEST_SCHEMA, EVENT_SEGMENT_STRIDE, EXPOSURE_WAIT_SWEEP_MS, EffectiveUsageLimits, Effort, Engine, EngineDefaults, EngineQuotaConfig, EngineQuotaRuntime, EntryBillingFold, EntryBillingUnit, EntryKind, EntryRef, EntryStatus, EnvelopeEncryption, EnvelopeEncryptionOptions, ErrorClass, ErrorCode, ErrorPolicy, EscalatedResult, EscalationDecision, EscalationDecisionAbortedError, EscalationDigest, EscalationKind, EscalationLimits, EscalationOptions, EscalationReport, EscalationRequest, EventBus, EvidenceContract, type EvidenceRef, type ExecKeyDerivation, type ExecutorRegistry, type ExplorationSummary, ExtensionAppendInput, ExtensionDispatchSpec, ExternalIdentityInput, ExternalRegistry, ExtractNecessityInput, FINALIZE_SYNTHESIS_INSTRUCTION, FINAL_COMPOSITION_LABEL, FINISH_LESSON_CAP_CHARS, FINISH_SCHEMA, FINISH_SECTIONAL_SCHEMA, FINISH_TOOL_NAME, FUTURE_RATES_TOLERANCE_MS, FailRunError, FailoverTarget, FailoverTrigger, FallbackField, FallbackTrigger, FencedCodeMode, FileModelKnowledgeStore, FileModelKnowledgeStoreOptions, FileTranscriptStore, type FinalizationWindowBudget, FinishContract, FinishContractCitations, FinishContractGoldenReject, FinishContractManifest, FinishContractSectionPattern, FinishInfo, FinishSelfTestFailure, FinishSelfTestFixtures, FinishSelfTestReport, FinishValidationChild, FinishValidationInput, FinishValidationSpec, FinishValidationVerdict, FinishValidator, GET_CHILD_RESULT_SCHEMA, GET_CHILD_RESULT_TOOL_NAME, GET_SETTLED_CHILD_RESULTS_SCHEMA, GET_SETTLED_CHILD_RESULTS_TOOL_NAME, Gate, GateAudit, type GateRecord, GitWorktreeProvider, GitWorktreeProviderOptions, GraftBoot, HashVersion, HookVerdict, IMPLEMENTATION_PROFILE_LIMITS, INBOX_PROPOSAL_TTL_DAYS, IN_FLIGHT_EXPOSURE_REFUSAL_PREFIX, IdentityInput, InMemoryStore, InMemoryTranscriptStore, InProcessRunner, IncrementalSynthesisResult, InvalidResolutionError, InvocationRole, type InvocationTable, InvoiceCardinality, InvoiceExport, InvoicePricingProvenance, InvoiceReconciliation, InvoiceRow, type IsolatedExecContext, type IsolatedExecRequest, type IsolatedExecutorTag, type IsolationProvider, type IsolationSpec, Issue$1 as Issue, JOURNAL_ENVELOPE_MARKER, JournalCompatSubCode, JournalCompatibilityError, JournalEntry, JournalIntegrityError, JournalMatcher, JournalMissError, JournalOperation, JournalOrderViolation, type JournalPricingSnapshot, JournalSealedError, JournalSerializationContext, JournalSerializationHook, type JournalStore, JournaledChild, JournaledChildRoster, JournaledCriticalPath, JournaledPostFanIn, JournaledSynthesisCandidate, JournaledSynthesisCandidateReport, type Json, JsonSchema, JsonlFileStore, KB_ACTIVE_CLAIMS_CAP, KB_CARD_RENDER_BUDGET_CHARS, type KbProposal, type KbProposalTrigger, KeyDeriver, KeyRing, KeyedLimiter, KnowledgeCasError, type KnowledgeSnapshot, LARGE_VALUE_WARN_BYTES, LEGACY_LTID_PREFIX, LEGACY_SIGNATURE_INPUTS, LINEAGE_SIG_VERSION, LadderSpec, type LeasableStore, type Lease, LeaseHeldError, Ledger, LineageCounters, LineageIndex, LineageRef, LineageRelation, LineageStats, LogicalRunTelemetry, LogicalTaskId, MASKED_SECRET, MAX_CHILD_RESULT_PAGE_CHARS, MAX_CRITICAL_UNCOVERED, MAX_DEPTH_CEILING, MAX_RUN_FACTS_SHEET_CHARS, MAX_RUN_ID_LENGTH, MAX_TIMER_DELAY_MS, MatchResult, McpConfig, McpToolSource, MechanicalGateProfile, MechanicalGateVerdict, MemoryQuotaLimiter, type MetaLookupStore, type ModelCaps, ModelChoice, type ModelClaim, ModelEpochInputs, type ModelKnowledgeHandle, type ModelKnowledgeStore, ModelListConstraint, ModelRef, ModelRetry, ModelSpec, Msg, NoProgressDetector, NodeId, NodeLinkValue, NonSerializableValueError, ORCHESTRATE_WORKFLOW_NAME, OnEscalation, OperationDisposition, OrchestrateAcceptance, OrchestrateClaimConsistency, OrchestrateClaimConsistencyMeta, OrchestrateContradictions, OrchestrateContradictionsMeta, OrchestrateDraftToFinal, OrchestrateOptions, OrchestrateSynthesis, OrchestrateSynthesisSkipReason, OrchestratorBudgetSpec, OrchestratorCapConfigError, OrchestratorExtension, OrchestratorExtensionIO, OrchestratorRuntime, Out, OutputContractManifest, PARALLEL_AGENTS_SCHEMA, PROGRESS_REPORT_TOOL_NAME, ParallelSiteCounter, Part, PendingExternal, PendingToolTurn, PermissionConfig, PermissionGate, PermissionHook, PermissionPreset, PermissionRule, PermissionVerdict, PersistedTerminalRefusal, PersistedTerminalResult, type PhaseRow, PhaseTarget, PilotAgentProfileOptions, PilotAgentProfileResult, type PinnedPricingSegment, PipelineCollected, PipelineOpts, PlanInvariantError, type PostFanInBreakdown, PreflightAdmissionRow, PreflightFinding, PreflightInput, PreflightOrchestratorSpec, PreflightReport, PreflightSpawnReport, PreflightSpawnSpec, PreflightToolCeiling, PriceTable, PricedComponent, PricedComponents, PricedUsage, type Pricing, type PricingTier, ProgressReport, type ProviderAdapter, ProviderCallRecord, ProviderStatement, QUOTA_WINDOW_MS, QualityFloors, QuotaCounters, type QuotaDecision, type QuotaEstimate, type QuotaLimiter, type QuotaReservationRequest, QuotaRule, QuotaWindowSnapshot, READ_CHILD_ARTIFACT_SCHEMA, READ_CHILD_ARTIFACT_TOOL_NAME, RESEARCH_PROFILE_LIMITS, REVIEW_PROFILE_LIMITS, ROLE_EFFORT_DEFAULTS, ROOT_ACCOUNT, ROOT_SCOPE, RUN_FACTS_ANCHOR, RUN_PROFILES, RUN_SETTLE_DECISION_TYPE, RandIdentityInput, RandPayload, RateLimitObservation, ReconcileOptions, ReconcileResult, ReconcileStatementOptions, RefEntryAppender, RefEntryClassification, RefusalInfo, RejectedFinishCandidate, RepeatedClaim, ReplayDisposition, ReplayMode, ReplayPlanHashMismatch, Replayer, RepositoryResearchToolset, RepositoryResearchToolsetOptions, ResearchAgentProfileOptions, ResearchAgentProfileResult, ResearchEvidenceEntry, ResolutionArbiter, ResolutionAttempt, ResolutionBy, ResolutionFold, ResolutionLayer, ResolutionOutcome, ResolutionPayload, ResolvedInvocation, ResolvedToolset, ResumeHandle, ResumeOptions, ResumePreview, ResumeReport, RetryClass, RetryPolicy, ReuseConfig, RiskRuleValue, Role, RulvarError, RulvarErrorCode, RunAgentOptions, RunAuditVerdict, RunBudget, RunEventSink, RunExport, RunFactPairOptions, RunFactPairsFold, RunFactsSheet, type RunFilter, RunHandle, RunInternals, type RunMeta, RunOptions, RunOutcome, RunProfile, RunStateAudit, RunStatus, RuntimeEventSink, SANDBOX_AGENT_OPT_KEYS, SPAWN_ADMISSION_DECISION_TYPE, SPAWN_AGENT_SCHEMA, SYNTHESIS_NOTE_LABEL, SandboxBridge, SandboxBridgeOptions, SandboxError, SandboxHostToWorker, SandboxMethod, SandboxWorkerToHost, SchemaPair, SchemaSpec, SchemaValidationResult, ScopeSegment, ScriptRejected, ScriptRunner, ScrubNote, SecretMasker, SectionMatchMode, SectionPatternEntry, SemanticPassSummary, SemanticPassesSummary, Semaphore, SerializationHook, Settled, SettlementError, ShellPatternRules, ShellSegment, ShellVerdict, SinglePhaseAppend, SpanMinter, SpanRegistry, SpawnAdmissionValue, SpawnAgentParams, SpawnKey, SpawnLineage, SpawnLineageOpt, SpawnOrigin, SpawnRecord, Spend, Stage, type StandardJSONSchemaV1, type StandardSchemaV1, StatementCategoryRow, StatementColumnMap, StatementCoverage, StatementReconciliation, StatementRequestRow, StepIdentityInput, type StreamHooks, StructuredOutputTier, SupersededError, SuspendedAppend, SuspensionState, SynthesisCandidateFailure, TERMINAL_TELEMETRY_SCOPE, TOOL_NAME_PATTERN, type TaskClass, TaskDigest, TaskSpec, TelemetryScope, type TerminalEnvelope, TerminalOutcomeFacts, TerminalPatch, TerminalTelemetryScopes, TerminationAccount, TerminationAccountSnapshot, TerminationDeniedValue, TerminationDeniedWriter, TerminationInitValue, TerminationLimits, TerminationResource, ToolAuthority, type ToolBudgetSummary, ToolCalibrationExclusion, ToolCalibrationReport, ToolCalibrationRow, ToolCallRequest, ToolChoice, type ToolContext, ToolContextSeed, ToolContract, type ToolDef, type ToolEvents, type ToolExecutor, type ToolExecutorProvider, ToolInit, type ToolRisk, ToolRuntime, type ToolSource, type ToolSourceSession, ToolsOption, ToolsetAttestation, TranscriptSerializationHook, type TranscriptStore, TriggerClass, TtlState, Usage, UsageLimits, UsageSlice, VerifiedRecommendation, WAIT_FOR_EVENTS_SCHEMA, WAIT_FOR_EVENTS_TOOL_NAME, WAKE_SUMMARY_RENDER_BUDGET_CHARS, WakeBudgetBlock, WakeDigest, WakeTrigger, WireError, Workflow, WorkflowCallOpts, type WorkflowEvent, type WorkflowEventBody, WorkflowRegistry, accountSpendFromJournal, admissionReserveUsd, affordableOutputTokens, agentErrorFromWire, agentErrorToWire, agentResultWire, agentScope, applyClaimOps, applyStructuredOutputTier, approachSigCoarse, approachSigOf, archiveDeprecatedModelOps, assertFencedWrites, assertSafeRunId, atCompactionThreshold, attestToolset, attributionBucket, auditRun, auditRuns, buildAbandonFold, buildAdapterRegistry, buildCostReport, buildDeriverRegistry, buildOrchestratorTools, buildTerminationInitValue, buildToolContext, canRideLoopTurn, canonicalIsolationTag, canonicalizeLadder, canonicalizeSchema, capIssues, capsHashOf, checkFloors, checkpointRefFor, childCoveragePrefix, childRostersFromJournal, citationTargetsValidator, citedValueValidator, claimCoverageOf, claimExpired, claimExpiry, claimIssues, claimJudgeStageOf, claimOpIssues, classifyAgentError, classifyAttemptOutcome, collectDeclaredLadders, compactMessages, compareRates, compilePermissionChain, compilePermissionPreset, compileSecretMasker, compileVerifiedLayer, constantTimeEqual, costReportFromJournal, countsAgainstLimit, createCanonicalIdMinter, createCtx, createEngine, createEnvelopeEncryption, createSandboxBridge, criticalPathFromJournal, currentOnlyKeyRing, decodeCheckpoint, dedupeRepeatedClaims, defineWorkflow, deriveContentKey, deriverV1, deriverV2, digestOf, dispatchProjectionReserveUsd, dispositionHook, emptyDigestBlocks, emptyToolset, encodeCheckpoint, enforceToolsetAttestation, entryUsageSlices, escalateTool, evaluatePermission, evaluateReuse, evidenceGradeValidator, evidencePreservedValidator, executeWorkflow, executionFactsOf, exhaustionCodeOf, extractCandidate, failoverTriggerOf, fallbackTriggerOf, filterClaimsForRun, finalizeFires, findContradictions, finishContract, foldLedger, foldTermination, formatCharacterValidator, formatRePrompt, formatScopePath, hasFencedWrites, hasMetaLookup, hashRunArgs, hashRunOutput, hashWorkflowBody, hashWorkflowSource, headingStructureValidator, identityJcs, implementationAgentProfile, invoiceFromJournal, isClaimJudgeLabel, isEscalated, isSchemaPairSpec, isStandardSchemaSpec, isStrictCompatibleSchema, journalPricingSnapshot, kMaxOf, knowledgeHash, ladderLengthOf, ladderRungChoice, lastRunSettle, latestProgressReport, lexShellCommand, liftRetainedParts, lineageWeightOf, localKeyProvider, logicalRunTelemetry, makeOrchestratorWorkflow, manifestValidators, maskSecrets, maskSecretsDeep, maskSecretsJson, matchArgvPattern, matchShellCommand, mcp, memoryQuotaLimiter, mergeQuotaDenial, mergeUsageLimits, metaMatchesFilter, minMatchesValidator, modelEpochOf, modelKnowledgeCard, modelSpecIdentity, needsSeparateExtract, nextFailover, nodeLinkKey, normalizeApproachTag, normalizeEntry, normalizeFallbacks, orchestrate, orchestratorAdmissionEstCostUsd, pairDraftClaims, pairRunFactClaims, parallelScope, parseModelRef, parseScopePath, persistedTerminalEnvelope, phiInitialOf, pilotAgentProfile, pipelineScope, planNodeScope, preflightEstimate, priceComponentsOf, priceEntryBilling, priceEntryUsage, priceUsdOf, profileCard, profileRegistrySnapshotHash, progressReportTool, projectHistory, projectIdentity, projectToJsonSchema, proposalStatement, providerOf, quotaActualRequestsDelta, quotaActualTokens, quotaEstimateTokens, quotaRuleAdmission, quotaRuleKey, quotaRuleMatches, readRunMeta, readTerminationInit, reconcileRunMeta, reconcileStatement, reduceAuditTrail, reduceCriticalPath, reduceDecisionChain, reduceInvocationTable, registryKeyRing, remeasureQueue, renderContractRequirements, replayDisposition, repositoryResearchToolset, requiredFieldsValidator, requiredMentionsValidator, requiredSectionsValidator, researchAgentProfile, resolveModelInvocation, resolvePricing, resolveToolset, retryClassOf, retryDelayMs, reviewAgentProfile, roleConfiguredInRouting, roundOneDisposition, runAgent, runProfile, sanitizeTerminalText, sanitizeTokenCount, sanitizeUsage, sanitizeUsageDelta, scanJournalCompatibility, schemaHash, schemaHashOfSpec, sectionCitationsValidator, sectionPatternCountValidator, selectStructuredOutputTier, selfTestFinishValidation, shouldCompact, snapshotQuotaRules, snapshotUsage, spawnDepthOf, spliceSections, statementFromRows, statementRowsFromDelimited, stripFencedBlocks, sumUsage, summarizeInstruction, summarizeOutput, synthesisCandidatesFromJournal, terminalEnvelopeOf, terminationConfigDrift, tierWithinCaps, toApprovalDecision, toJournalValue, tool, toolAuthority, toolCalibrationFromJournal, toolContract, toolContractHash, toolsetAuthorityHash, toolsetHash, ttlState, unionOfIntervalsMs, usageViolations, validateDetachedResolution, validateEditorialCommit, validateEngineQuotaConfig, validateEntryShape, validateEscalationLimits, validateEscalationReport, validateQuotaRules, validateRetryPolicy, validateSchemaSpec, validateTerminationLimits, validateToolsetAttestation, validateUsageLimits, wordCountValidator, workflowScope, workflowSourceRef, wrapJournalStore, wrapTranscriptStore };
+export { AWAIT_SCHEMA, AbandonAttempt, AbandonFold, AbandonPayload, AbandonedSpendView, AbortClass, AcceptanceChildSummary, type AdaptiveEvents, AdmissionController, AdmissionDecision, AdmissionRejectedError, AdmissionStatsBefore, AdmitLineage, AdmitRejectReason, AdmitSpec, AdmitVerdict, AgentCallError, AgentError, type AgentEvents, AgentIdentityInput, type AgentInvocationRow, AgentOpts, AgentProfile, AgentProfilePermissions, AgentProfileTemplateOptions, AgentResult, AgentResultMeta, AgentStatus, type AppliedPricingRow, ApproachSignatureInputs, ApprovalDecision, ApprovalIdentityInput, Artifact, AttemptOutcomeClass, AuditCategory, AuditRecord, AuditRunsOptions, BUDGET_ABORT_REASON, BaseAppend, BillingComponent, BriefOpts, BudgetAccountView, BudgetDefaults, BudgetExhaustedError, BudgetExhaustionDiagnostics, BudgetHooks, BudgetReserve, type Bytes, CANCEL_AGENT_SCHEMA, CHECKPOINT_FORMAT_V1, CLAIM_JUDGE_LABEL, CLAIM_STATEMENT_MAX_CHARS, CLAIM_TTL_DAYS, COMPACTION_SUMMARY_PREFIX, CURRENT_HASH_VERSION, CacheHint, CachePolicy, CacheTtl, CanUseTool, CanonicalId, CanonicalIdentity, CanonicalLadderSpec, CanonicalModelSpec, ChatEvent, ChatRequest, CheckpointState, ChildArtifactPage, ChildExecutionFacts, ChildIdentityInput, ChildResultPage, ChildrenAtFailure, CitationTarget, type ClaimClass, ClaimContradictionFinding, ClaimCoverageGrade, ClaimCoverageInput, type ClaimOp, ClaimPair, ClaimPairOptions, ClaimPairsFold, ClaimPoolReading, type ClaimStatus, ClaimValidationOptions, CollectOpts, CollectedTurn, CompactionConfig, CompiledPermissionChain, CompiledWorkflow, ComponentDelta, ConfigError, Contradiction, ContradictionClaim, ContradictionOptions, ContradictionSource, type CoreEvents, CostAttribution, CostAttributionFacts, type CostBasis, CostReport, CreateEngineOptions, type CriticalPath, Ctx, DECISION_CHAIN_KINDS, DEFAULT_ANCHOR_PATTERN, DEFAULT_ARTIFACT_PATTERN, DEFAULT_CHILD_BUDGET_FRACTION, DEFAULT_CHILD_RESULT_PAGE_CHARS, DEFAULT_CITATION_PATTERN, DEFAULT_CITATION_SAMPLE, DEFAULT_CLAIM_JUDGE_MAX_TURNS, DEFAULT_COMPACTION_THRESHOLD, DEFAULT_ESCALATION_LIMITS, DEFAULT_EVIDENCE_CALLS_PER_ENTRY, DEFAULT_EVIDENCE_GRADE_PHRASES, DEFAULT_EVIDENCE_MIN_SHARE, DEFAULT_EVIDENCE_OVERHEAD_CALLS, DEFAULT_FINISH_MAX_REPAIRS, DEFAULT_FLAT_RESERVE_USD, DEFAULT_MAX_CHILDREN_PER_NODE, DEFAULT_MAX_CLAIM_PAIRS, DEFAULT_MAX_CONTRADICTIONS, DEFAULT_MAX_DEPTH, DEFAULT_MAX_EXCERPT_CHARS, DEFAULT_MAX_OSCILLATIONS_PER_KEY, DEFAULT_MAX_PAIR_EXCERPT_CHARS, DEFAULT_MAX_PINNED_WORKTREES, DEFAULT_MAX_POOL_PER_PAIR, DEFAULT_MAX_QUOTA_DENIALS, DEFAULT_MAX_REVISIONS_PER_RUN, DEFAULT_MAX_RUN_FACT_PAIRS, DEFAULT_MAX_TOTAL_SPAWNS, DEFAULT_MAX_TURNS, DEFAULT_MODEL_RETRY_ATTEMPTS, DEFAULT_NO_PROGRESS_TURNS, DEFAULT_PER_RUN_CONCURRENCY, DEFAULT_RETRY_POLICY, DEFAULT_STREAM_IDLE_TIMEOUT_MS, DEFAULT_SYNTHESIS_MAX_TURNS, DEFAULT_SYNTHESIS_NOTE_MAX_TURNS, DataKeyProvider, DebitResult, DecisionChainRow, DeclaredLadder, DedupIndex, DedupNote, DedupedClaims, DelimitedStatementOptions, DerivedKey, DeriverRegistry, type DeterminismConfig, DeterminismError, type DeterminismEvents, type DeterminismMode, DispositionRule, DispositionTable, DocumentedRates, DonorCandidate, DonorRef, DroppedItem, EMIT_RESULT_TOOL, EMPTY_AUTHORITY_HASH, EMPTY_SCHEMA_HASH, EMPTY_TOOLSET_HASH, ESCALATE_TOOL_NAME, ESCALATION_REPORT_SCHEMA, ESCALATION_REQUEST_SCHEMA, EVENT_SEGMENT_STRIDE, EXPOSURE_WAIT_SWEEP_MS, EffectiveUsageLimits, Effort, Engine, EngineDefaults, EngineQuotaConfig, EngineQuotaRuntime, EntryBillingFold, EntryBillingUnit, EntryKind, EntryRef, EntryStatus, EnvelopeEncryption, EnvelopeEncryptionOptions, ErrorClass, ErrorCode, ErrorPolicy, EscalatedResult, EscalationDecision, EscalationDecisionAbortedError, EscalationDigest, EscalationKind, EscalationLimits, EscalationOptions, EscalationReport, EscalationRequest, EventBus, EvidenceContract, type EvidenceRef, type ExecKeyDerivation, type ExecutorRegistry, type ExplorationSummary, ExtensionAppendInput, ExtensionDispatchSpec, ExternalIdentityInput, ExternalRegistry, ExtractNecessityInput, FINALIZE_SYNTHESIS_INSTRUCTION, FINAL_COMPOSITION_LABEL, FINISH_LESSON_CAP_CHARS, FINISH_SCHEMA, FINISH_SECTIONAL_SCHEMA, FINISH_TOOL_NAME, FUTURE_RATES_TOLERANCE_MS, FailRunError, FailoverTarget, FailoverTrigger, FallbackField, FallbackTrigger, FencedCodeMode, FileModelKnowledgeStore, FileModelKnowledgeStoreOptions, FileTranscriptStore, type FinalizationWindowBudget, FinishContract, FinishContractCitations, FinishContractGoldenReject, FinishContractManifest, FinishContractSectionPattern, FinishInfo, FinishRepairHint, FinishSelfTestFailure, FinishSelfTestFixtures, FinishSelfTestReport, FinishValidationChild, FinishValidationInput, FinishValidationSpec, FinishValidationVerdict, FinishValidator, GET_CHILD_RESULT_SCHEMA, GET_CHILD_RESULT_TOOL_NAME, GET_SETTLED_CHILD_RESULTS_SCHEMA, GET_SETTLED_CHILD_RESULTS_TOOL_NAME, Gate, GateAudit, type GateRecord, GitWorktreeProvider, GitWorktreeProviderOptions, GraftBoot, HashVersion, HookVerdict, IMPLEMENTATION_PROFILE_LIMITS, INBOX_PROPOSAL_TTL_DAYS, IN_FLIGHT_EXPOSURE_REFUSAL_PREFIX, IdentityInput, InMemoryStore, InMemoryTranscriptStore, InProcessRunner, IncrementalSynthesisResult, InvalidResolutionError, InvocationRole, type InvocationTable, InvoiceCardinality, InvoiceExport, InvoicePricingProvenance, InvoiceReconciliation, InvoiceRow, type IsolatedExecContext, type IsolatedExecRequest, type IsolatedExecutorTag, type IsolationProvider, type IsolationSpec, Issue$1 as Issue, JOURNAL_ENVELOPE_MARKER, JournalCompatSubCode, JournalCompatibilityError, JournalEntry, JournalIntegrityError, JournalMatcher, JournalMissError, JournalOperation, JournalOrderViolation, type JournalPricingSnapshot, JournalSealedError, JournalSerializationContext, JournalSerializationHook, type JournalStore, JournaledChild, JournaledChildRoster, JournaledCriticalPath, JournaledPostFanIn, JournaledSynthesisCandidate, JournaledSynthesisCandidateReport, type Json, JsonSchema, JsonlFileStore, KB_ACTIVE_CLAIMS_CAP, KB_CARD_RENDER_BUDGET_CHARS, type KbProposal, type KbProposalTrigger, KeyDeriver, KeyRing, KeyedLimiter, KnowledgeCasError, type KnowledgeSnapshot, LARGE_VALUE_WARN_BYTES, LEGACY_LTID_PREFIX, LEGACY_SIGNATURE_INPUTS, LINEAGE_SIG_VERSION, LadderSpec, type LeasableStore, type Lease, LeaseHeldError, Ledger, LineageCounters, LineageIndex, LineageRef, LineageRelation, LineageStats, LogicalRunTelemetry, LogicalTaskId, MASKED_SECRET, MAX_CHILD_RESULT_PAGE_CHARS, MAX_CRITICAL_UNCOVERED, MAX_DEPTH_CEILING, MAX_RUN_FACTS_SHEET_CHARS, MAX_RUN_ID_LENGTH, MAX_TIMER_DELAY_MS, MatchResult, McpConfig, McpToolSource, MechanicalGateProfile, MechanicalGateVerdict, MemoryQuotaLimiter, type MetaLookupStore, type ModelCaps, ModelChoice, type ModelClaim, ModelEpochInputs, type ModelKnowledgeHandle, type ModelKnowledgeStore, ModelListConstraint, ModelRef, ModelRetry, ModelSpec, Msg, NoProgressDetector, NodeId, NodeLinkValue, NonSerializableValueError, ORCHESTRATE_WORKFLOW_NAME, OnEscalation, OperationDisposition, OrchestrateAcceptance, OrchestrateClaimConsistency, OrchestrateClaimConsistencyMeta, OrchestrateContradictions, OrchestrateContradictionsMeta, OrchestrateDeterministicPatches, OrchestrateDraftToFinal, OrchestrateOptions, OrchestrateSynthesis, OrchestrateSynthesisSkipReason, OrchestratorBudgetSpec, OrchestratorCapConfigError, OrchestratorExtension, OrchestratorExtensionIO, OrchestratorRuntime, Out, OutputContractManifest, PARALLEL_AGENTS_SCHEMA, PROGRESS_REPORT_TOOL_NAME, ParallelSiteCounter, Part, PendingExternal, PendingToolTurn, PermissionConfig, PermissionGate, PermissionHook, PermissionPreset, PermissionRule, PermissionVerdict, PersistedTerminalRefusal, PersistedTerminalResult, type PhaseRow, PhaseTarget, PilotAgentProfileOptions, PilotAgentProfileResult, type PinnedPricingSegment, PipelineCollected, PipelineOpts, PlanInvariantError, type PostFanInBreakdown, PreflightAdmissionRow, PreflightFinding, PreflightInput, PreflightOrchestratorSpec, PreflightReport, PreflightSpawnReport, PreflightSpawnSpec, PreflightToolCeiling, PriceTable, PricedComponent, PricedComponents, PricedUsage, type Pricing, type PricingTier, ProgressReport, type ProviderAdapter, ProviderCallRecord, ProviderStatement, QUOTA_WINDOW_MS, QualityFloors, QuotaCounters, type QuotaDecision, type QuotaEstimate, type QuotaLimiter, type QuotaReservationRequest, QuotaRule, QuotaWindowSnapshot, READ_CHILD_ARTIFACT_SCHEMA, READ_CHILD_ARTIFACT_TOOL_NAME, RESEARCH_PROFILE_LIMITS, REVIEW_PROFILE_LIMITS, ROLE_EFFORT_DEFAULTS, ROOT_ACCOUNT, ROOT_SCOPE, RUN_FACTS_ANCHOR, RUN_PROFILES, RUN_SETTLE_DECISION_TYPE, RandIdentityInput, RandPayload, RateLimitObservation, ReconcileOptions, ReconcileResult, ReconcileStatementOptions, RefEntryAppender, RefEntryClassification, RefusalInfo, RejectedFinishCandidate, RepeatedClaim, ReplayDisposition, ReplayMode, ReplayPlanHashMismatch, Replayer, RepositoryResearchToolset, RepositoryResearchToolsetOptions, ResearchAgentProfileOptions, ResearchAgentProfileResult, ResearchEvidenceEntry, ResolutionArbiter, ResolutionAttempt, ResolutionBy, ResolutionFold, ResolutionLayer, ResolutionOutcome, ResolutionPayload, ResolvedInvocation, ResolvedToolset, ResumeHandle, ResumeOptions, ResumePreview, ResumeReport, RetryClass, RetryPolicy, ReuseConfig, RiskRuleValue, Role, RulvarError, RulvarErrorCode, RunAgentOptions, RunAuditVerdict, RunBudget, RunEventSink, RunExport, RunFactPairOptions, RunFactPairsFold, RunFactsSheet, type RunFilter, RunHandle, RunInternals, type RunMeta, RunOptions, RunOutcome, RunProfile, RunStateAudit, RunStatus, RuntimeEventSink, SANDBOX_AGENT_OPT_KEYS, SPAWN_ADMISSION_DECISION_TYPE, SPAWN_AGENT_SCHEMA, SYNTHESIS_NOTE_LABEL, SandboxBridge, SandboxBridgeOptions, SandboxError, SandboxHostToWorker, SandboxMethod, SandboxWorkerToHost, SchemaPair, SchemaSpec, SchemaValidationResult, ScopeSegment, ScriptRejected, ScriptRunner, ScrubNote, SecretMasker, SectionMatchMode, SectionPatternEntry, SectionalRoundPlan, SemanticPassSummary, SemanticPassesSummary, Semaphore, SerializationHook, Settled, SettlementError, ShellPatternRules, ShellSegment, ShellVerdict, SinglePhaseAppend, SpanMinter, SpanRegistry, SpawnAdmissionValue, SpawnAgentParams, SpawnKey, SpawnLineage, SpawnLineageOpt, SpawnOrigin, SpawnRecord, Spend, Stage, type StandardJSONSchemaV1, type StandardSchemaV1, StatementCategoryRow, StatementColumnMap, StatementCoverage, StatementReconciliation, StatementRequestRow, StepIdentityInput, type StreamHooks, StructuredOutputTier, SupersededError, SuspendedAppend, SuspensionState, SynthesisCandidateFailure, TERMINAL_TELEMETRY_SCOPE, TOOL_NAME_PATTERN, type TaskClass, TaskDigest, TaskSpec, TelemetryScope, type TerminalEnvelope, TerminalOutcomeFacts, TerminalPatch, TerminalTelemetryScopes, TerminationAccount, TerminationAccountSnapshot, TerminationDeniedValue, TerminationDeniedWriter, TerminationInitValue, TerminationLimits, TerminationResource, ToolAuthority, type ToolBudgetSummary, ToolCalibrationExclusion, ToolCalibrationReport, ToolCalibrationRow, ToolCallRequest, ToolChoice, type ToolContext, ToolContextSeed, ToolContract, type ToolDef, type ToolEvents, type ToolExecutor, type ToolExecutorProvider, ToolInit, type ToolRisk, ToolRuntime, type ToolSource, type ToolSourceSession, ToolsOption, ToolsetAttestation, TranscriptSerializationHook, type TranscriptStore, TriggerClass, TtlState, Usage, UsageLimits, UsageSlice, VerifiedRecommendation, WAIT_FOR_EVENTS_SCHEMA, WAIT_FOR_EVENTS_TOOL_NAME, WAKE_SUMMARY_RENDER_BUDGET_CHARS, WakeBudgetBlock, WakeDigest, WakeTrigger, WireError, Workflow, WorkflowCallOpts, type WorkflowEvent, type WorkflowEventBody, WorkflowRegistry, accountSpendFromJournal, admissionReserveUsd, affordableOutputTokens, agentErrorFromWire, agentErrorToWire, agentResultWire, agentScope, applyClaimOps, applyFinishRepairHints, applyStructuredOutputTier, approachSigCoarse, approachSigOf, archiveDeprecatedModelOps, assertFencedWrites, assertSafeRunId, atCompactionThreshold, attestToolset, attributionBucket, auditRun, auditRuns, buildAbandonFold, buildAdapterRegistry, buildCostReport, buildDeriverRegistry, buildOrchestratorTools, buildTerminationInitValue, buildToolContext, canRideLoopTurn, canonicalIsolationTag, canonicalizeLadder, canonicalizeSchema, capIssues, capsHashOf, checkFloors, checkpointRefFor, childCoveragePrefix, childRostersFromJournal, citationTargetsValidator, citedValueValidator, claimCoverageOf, claimExpired, claimExpiry, claimIssues, claimJudgeStageOf, claimOpIssues, classifyAgentError, classifyAttemptOutcome, collectDeclaredLadders, compactMessages, compareRates, compilePermissionChain, compilePermissionPreset, compileSecretMasker, compileVerifiedLayer, constantTimeEqual, costReportFromJournal, countsAgainstLimit, createCanonicalIdMinter, createCtx, createEngine, createEnvelopeEncryption, createSandboxBridge, criticalPathFromJournal, currentOnlyKeyRing, decodeCheckpoint, dedupeRepeatedClaims, defineWorkflow, deriveContentKey, deriverV1, deriverV2, digestOf, dispatchProjectionReserveUsd, dispositionHook, emptyDigestBlocks, emptyToolset, encodeCheckpoint, enforceToolsetAttestation, entryUsageSlices, escalateTool, evaluatePermission, evaluateReuse, evidenceGradeValidator, evidencePreservedValidator, executeWorkflow, executionFactsOf, exhaustionCodeOf, extractCandidate, failoverTriggerOf, fallbackTriggerOf, filterClaimsForRun, finalizeFires, findContradictions, finishContract, foldLedger, foldTermination, formatCharacterValidator, formatRePrompt, formatScopePath, hasFencedWrites, hasMetaLookup, hashRunArgs, hashRunOutput, hashWorkflowBody, hashWorkflowSource, headingStructureValidator, identityJcs, implementationAgentProfile, insertRunIdIntoSentence, invoiceFromJournal, isClaimJudgeLabel, isEscalated, isSchemaPairSpec, isStandardSchemaSpec, isStrictCompatibleSchema, journalPricingSnapshot, kMaxOf, knowledgeHash, ladderLengthOf, ladderRungChoice, lastMechanicalRepairCostUsd, lastRunSettle, latestProgressReport, lexShellCommand, liftRetainedParts, lineageWeightOf, localKeyProvider, logicalRunTelemetry, makeOrchestratorWorkflow, manifestValidators, maskSecrets, maskSecretsDeep, maskSecretsJson, matchArgvPattern, matchShellCommand, mcp, memoryQuotaLimiter, mergeQuotaDenial, mergeUsageLimits, metaMatchesFilter, minMatchesValidator, modelEpochOf, modelKnowledgeCard, modelSpecIdentity, needsSeparateExtract, nextFailover, nodeLinkKey, normalizeApproachTag, normalizeEntry, normalizeFallbacks, orchestrate, orchestratorAdmissionEstCostUsd, pairDraftClaims, pairRunFactClaims, parallelScope, parseModelRef, parseScopePath, parseTerminalEnvelope, persistedTerminalEnvelope, phiInitialOf, pilotAgentProfile, pipelineScope, planNodeScope, preflightEstimate, priceComponentsOf, priceEntryBilling, priceEntryUsage, priceUsdOf, profileCard, profileRegistrySnapshotHash, progressReportTool, projectHistory, projectIdentity, projectToJsonSchema, proposalStatement, providerOf, quotaActualRequestsDelta, quotaActualTokens, quotaEstimateTokens, quotaRuleAdmission, quotaRuleKey, quotaRuleMatches, readRunMeta, readTerminationInit, reconcileRunMeta, reconcileStatement, reduceAuditTrail, reduceCriticalPath, reduceDecisionChain, reduceInvocationTable, registryKeyRing, remeasureQueue, renderContractRequirements, replayDisposition, repositoryResearchToolset, requiredFieldsValidator, requiredMentionsValidator, requiredSectionsValidator, researchAgentProfile, resolveModelInvocation, resolvePricing, resolveToolset, retryClassOf, retryDelayMs, reviewAgentProfile, roleConfiguredInRouting, roundOneDisposition, runAgent, runProfile, sanitizeTerminalText, sanitizeTokenCount, sanitizeUsage, sanitizeUsageDelta, scanJournalCompatibility, schemaHash, schemaHashOfSpec, scopeBucket, sectionCitationsValidator, sectionPatternCountValidator, sectionalRoundPlan, selectStructuredOutputTier, selfTestFinishValidation, shouldCompact, snapshotQuotaRules, snapshotUsage, spawnDepthOf, spliceSections, statementFromRows, statementRowsFromDelimited, stripFencedBlocks, sumUsage, summarizeInstruction, summarizeOutput, synthesisCandidatesFromJournal, terminalEnvelopeOf, terminationConfigDrift, tierWithinCaps, toApprovalDecision, toJournalValue, tool, toolAuthority, toolCalibrationFromJournal, toolContract, toolContractHash, toolsetAuthorityHash, toolsetHash, ttlState, unionOfIntervalsMs, usageViolations, validateDetachedResolution, validateEditorialCommit, validateEngineQuotaConfig, validateEntryShape, validateEscalationLimits, validateEscalationReport, validateQuotaRules, validateRetryPolicy, validateSchemaSpec, validateTerminationLimits, validateToolsetAttestation, validateUsageLimits, wordCountValidator, workflowScope, workflowSourceRef, wrapJournalStore, wrapTranscriptStore };