@rulvar/core 1.3.2 → 1.5.0

package/dist/index.d.ts

@@ -602,6 +602,36 @@ type AbandonPayload = {
   retainCheckpoint?: boolean; /** Default false; counts against the pin cap (DEF-5). */
   retainWorktree?: boolean;
 };
+/** One serving model's slice of a multi-model agent call's usage. */
+interface UsageSlice {
+  servedBy: ModelRef;
+  usage: Usage;
+}
+/**
+* The per-model slices of a terminal entry: the recorded split when the
+* call spanned several models, else the whole usage attributed to
+* `servedBy`. The fallback is what makes every journal written before the
+* split shipped price exactly as it did before.
+*/
+declare function entryUsageSlices(entry: JournalEntry): UsageSlice[];
+/** A priced slice, plus the total and the gaps the price table did not cover. */
+interface PricedUsage {
+  /** Total of every slice the price table covered. */
+  usd: number;
+  /** Covered slices with their prices; the basis of per-model attribution. */
+  priced: Array<UsageSlice & {
+    usd: number;
+  }>;
+  /** Slices with no price row: surfaced as unpriced, never a silent zero. */
+  unpriced: UsageSlice[];
+}
+/**
+* The single pricing fold over one terminal entry, shared by the kernel
+* ledger and the CostReport fold so a run's total and its per-model
+* breakdown can never disagree. Each slice is priced at ITS OWN model's
+* rate.
+*/
+declare function priceEntryUsage(entry: JournalEntry, priceUsd: (servedBy: ModelRef, usage: Usage) => number | undefined): PricedUsage;
 /**
 * Final entry form (hashVersion 2).
 * All journaled values MUST be JSON-serializable; a violation raises a
@@ -627,6 +657,18 @@ type JournalEntry = {
   usage?: Usage; /** True when the stream was cut at the budget ceiling or by a stream failure. */
   usageApprox?: boolean; /** Who actually served (failover changes only this, never the key). */
   servedBy?: ModelRef;
+  /**
+  * Terminal agent entries whose phases were served by MORE THAN ONE
+  * model: usage split by the model that actually served each slice. The
+  * loop, extract, finalize, and summarize roles resolve independently,
+  * so a single agent call routinely spans models at different prices;
+  * pricing the whole call at `servedBy` bills the cheap extract at the
+  * loop model's rate. Absent when one model served the whole call, and
+  * on entries written before the split shipped: readers fall back to
+  * pricing `usage` at `servedBy`, which is exactly correct for those.
+  * Policy, never identity: it does not enter the content key.
+  */
+  usageByModel?: UsageSlice[];
   transcriptRef?: string;
   checkpointRef?: string;
   /**
@@ -697,6 +739,14 @@ type RunMeta = {
   workflowName?: string; /** Content hash of the body or of the compiled source. */
   workflowHash?: string; /** TranscriptStore ref of the persisted CompiledWorkflow source. */
   workflowSourceRef?: string;
+  /**
+  * The run's immutable USD ceiling (RunOptions.budgetUsd), recorded so
+  * resume restores the original invocation's bound. Absent when the
+  * run started without a ceiling. Stores must round-trip the field
+  * (the conformance kit checks); a store that drops it degrades a
+  * resumed run to uncapped.
+  */
+  budgetUsd?: number;
 };
 type RunFilter = {
   status?: string;
@@ -2010,6 +2060,8 @@ interface TerminalPatch {
   usage?: Usage;
   usageApprox?: boolean;
   servedBy?: ModelRef;
+  /** Set only when the call spanned several serving models; see JournalEntry. */
+  usageByModel?: UsageSlice[];
   transcriptRef?: string;
   checkpointRef?: string;
   /** Terminal agent entries: Artifact list. */
@@ -2304,6 +2356,14 @@ interface CheckpointState {
   turns: number;
   /** Usage accumulated so far (not yet journaled: terminals carry totals). */
   usage: Usage;
+  /**
+  * The same usage split by serving model, so a dangling redispatch
+  * restores the per-model breakdown instead of collapsing every paid
+  * turn onto the loop model. Absent on checkpoints written before the
+  * split shipped: those restore the aggregate against the loop model,
+  * exactly as they did then.
+  */
+  usageByModel?: UsageSlice[];
   toolCallsUsed: number;
   schemaAttempts: number;
   /** Compaction points; producers arrive with M4-T03. */
@@ -2633,6 +2693,14 @@ interface AgentResult<T> {
   * differs from the requested spec only under transport failover.
   */
   servedBy: ModelRef;
+  /**
+  * Present only when the call spanned MORE THAN ONE serving model (the
+  * loop, extract, finalize, and summarize roles resolve independently):
+  * usage split per model, so `costUsd` and every cost bucket price each
+  * slice at its own rate. Absent for a single-model call, which
+  * (usage, servedBy) already describes exactly.
+  */
+  usageByModel?: UsageSlice[];
   transcriptRef: string;
   artifacts?: Artifact[];
   error?: AgentError;
@@ -2867,8 +2935,10 @@ type PermissionHook = (toolName: string, input: unknown, ctx: ToolContext) => Ho
 * position matches every tool WITHOUT declared risk: presets treat the
 * undeclared state conservatively. Argv rules
 * match through the real shell matcher; domain rules are
-* ADVISORY outside the first-party fetch tool: they never
-* change a verdict in M5, and matches surface in audit events.
+* ADVISORY for every tool in the current release: they never
+* change a verdict, and matches surface in the tool:end audit
+* fields (enforcement will live in a first-party fetch tool
+* when one ships).
 */
 type RiskRuleValue = ToolRisk | "undeclared";
 type PermissionRule = {
@@ -2928,8 +2998,8 @@ type PermissionVerdict = ({
   input: unknown;
 }) & {
   /**
-  * Advisory domain-rule matches: reported in audit
-  * events, never enforced outside the first-party fetch tool.
+  * Advisory domain-rule matches: reported in the tool:end
+  * audit fields, never enforced in the current release.
   */
   advisory?: PermissionRule[];
 };
@@ -3258,6 +3328,8 @@ declare class RunBudget {
   private usageInternal;
   private agentsSpawnedInternal;
   private exhaustedInternal;
+  /** Models already warned about; the warning fires once per model per run. */
+  private readonly unpricedWarned;
   constructor(options: {
     ceilingUsd?: number;
     lifetimeSpawnCap?: number;
@@ -3893,12 +3965,23 @@ type AdaptiveEvents = {
   coversToOrdinal: number;
   renderSize: number;
 } | {
+  /**
+  * Two emitted shapes share the discriminant: the cap-freeze form
+  * carries { atCap: true, spentUsd, capUsd, finalizeReserveUsd },
+  * and the per-wake digest form carries atCap plus the passive
+  * WakeBudgetBlock fields (runSpentUsd .. softWarning).
+  */
   type: "orchestrator:budget";
-  entryRef: number;
-  spentUsd: number;
-  effectiveCapUsd: number;
-  reserveUsedUsd: number;
-  frozen: boolean;
+  atCap: boolean;
+  spentUsd?: number;
+  capUsd?: number;
+  finalizeReserveUsd?: number;
+  runSpentUsd?: number;
+  runCeilingUsd?: number;
+  orchestratorSpentUsd?: number;
+  orchestratorCapUsd?: number;
+  orchestratorShare?: number;
+  softWarning?: boolean;
 } | {
   type: "escalation:raised";
   entryRef: number;
@@ -3920,7 +4003,12 @@ type AdaptiveEvents = {
   spawnUnitsAfter: number;
 } | {
   type: "spawn:rejected";
-  entryRef: number;
+  /**
+  * The journaled admission decision entry; absent for the
+  * pre-admission config gates (orchestrate maxSpawns), which
+  * reject before anything is journaled.
+  */
+  entryRef?: number;
   code: string;
   agentType: string;
   logicalTaskId?: string;
@@ -3971,6 +4059,12 @@ type AdaptiveEvents = {
   frozenValue: Json;
   liveValue: Json;
 } | {
+  /**
+  * Declared for hosts; not emitted today. The compatibility scan
+  * runs strictly before a run's event stream exists, so the
+  * refusal travels only as the typed JournalCompatibilityError
+  * (which carries the same fields).
+  */
   type: "journal:compat";
   code: "HASH_VERSION_TOO_OLD" | "HASH_VERSION_TOO_NEW";
   found: number;
@@ -4773,7 +4867,14 @@ declare class ExternalRegistry {
   private activity;
   private quiesceListener?;
   private quiesceScheduled;
-  constructor(replayer: Replayer);
+  private readonly emitEvent?;
+  constructor(replayer: Replayer, emitEvent?: (body: WorkflowEventBody) => void);
+  /**
+  * Live resolution telemetry: applied when the attempt won the
+  * first-closing-wins fold, superseded when it lost. Emitted for live
+  * attempts only; folds of prior entries at resume re-emit nothing.
+  */
+  private emitResolutionOutcome;
   /** Wraps every non-suspension async operation (agents, steps). */
   enter(): () => void;
   /**
@@ -5114,12 +5215,27 @@ interface Workflow<A = unknown, R = unknown> {
   readonly name: string;
   readonly argsSchema?: SchemaSpec<A>;
   readonly errorPolicy: ErrorPolicy;
+  /**
+  * Workflow defaults: the third layer of the resolution chain, under the
+  * call override and the agent profile and over the engine defaults.
+  * A workflow that declares nothing contributes no layer and resolves
+  * exactly as it did before. The layer follows the CALL TREE, not the
+  * file: a child spawned through `ctx.workflow` contributes ITS OWN
+  * defaults inside its scope, so nesting a cheap workflow under an
+  * expensive one does the obvious thing.
+  */
+  readonly model?: ModelSpec;
+  readonly routing?: Partial<Record<InvocationRole, ModelSpec>>;
+  readonly effort?: Effort;
   readonly body: (ctx: Ctx<never>, args: A) => Promise<R>;
 }
 declare function defineWorkflow<A, R, P extends ErrorPolicy = "strict">(meta: {
   name: string;
   args?: SchemaSpec<A>;
-  errorPolicy?: P;
+  errorPolicy?: P; /** Workflow defaults: resolution-chain layer 3. See Workflow. */
+  model?: ModelSpec;
+  routing?: Partial<Record<InvocationRole, ModelSpec>>;
+  effort?: Effort;
 }, body: (ctx: Ctx<P>, args: A) => Promise<R>): Workflow<A, R>;
 /**
 * Span-aware event sink: bodies are stamped into the WorkflowEvent
@@ -5223,7 +5339,11 @@ interface RunInternals {
 * one ctx object while journaling under their own scope paths (I3:
 * structure from call-and-return only).
 */
-declare function createCtx(internals: RunInternals): Ctx<ErrorPolicy>;
+declare function createCtx(internals: RunInternals, rootWorkflow?: {
+  model?: ModelSpec;
+  routing?: Partial<Record<InvocationRole, ModelSpec>>;
+  effort?: Effort;
+}): Ctx<ErrorPolicy>;
 /**
 * Runs a workflow body against a fresh ctx: the engine core that
 * engine.run wraps with RunHandle, events, and outcome assembly (M1-T11).
@@ -5568,6 +5688,9 @@ declare class InMemoryStore implements JournalStore {
   private readonly runs;
   private readonly metas;
   private warned;
+  constructor(options?: {
+    quiet?: boolean;
+  });
   append(runId: string, e: JournalEntry): Promise<void>;
   load(runId: string): Promise<JournalEntry[]>;
   putMeta(m: RunMeta): Promise<void>;
@@ -5977,4 +6100,4 @@ interface SandboxBridge {
 }
 declare function createSandboxBridge(ctx: Ctx<never>, options: SandboxBridgeOptions): SandboxBridge;
 //#endregion
-export { AWAIT_SCHEMA, AbandonAttempt, AbandonFold, AbandonPayload, AbandonedSpendView, AbortClass, type AdaptiveEvents, AdmissionController, AdmissionDecision, AdmissionRejectedError, AdmissionStatsBefore, AdmitLineage, AdmitRejectReason, AdmitSpec, AdmitVerdict, AgentCallError, AgentError, type AgentEvents, AgentIdentityInput, AgentOpts, AgentProfile, AgentProfilePermissions, AgentResult, AgentResultMeta, AgentStatus, ApproachSignatureInputs, ApprovalDecision, ApprovalIdentityInput, Artifact, AttemptOutcomeClass, BUDGET_ABORT_REASON, BriefOpts, BudgetAccountView, BudgetDefaults, BudgetExhaustedError, BudgetHooks, BudgetReserve, type Bytes, CANCEL_AGENT_SCHEMA, CHECKPOINT_FORMAT_V1, CLAIM_STATEMENT_MAX_CHARS, CLAIM_TTL_DAYS, COMPACTION_SUMMARY_PREFIX, CURRENT_HASH_VERSION, CacheHint, CacheTtl, CanUseTool, CanonicalId, CanonicalIdentity, CanonicalLadderSpec, CanonicalModelSpec, ChatEvent, ChatRequest, CheckpointState, ChildIdentityInput, type ClaimClass, type ClaimOp, type ClaimStatus, ClaimValidationOptions, CollectOpts, CollectedTurn, CompactionConfig, CompiledPermissionChain, CompiledWorkflow, ConfigError, type CoreEvents, CostAttribution, CostReport, CreateEngineOptions, Ctx, DEFAULT_CHILD_BUDGET_FRACTION, DEFAULT_COMPACTION_THRESHOLD, DEFAULT_ESCALATION_LIMITS, DEFAULT_FLAT_RESERVE_USD, DEFAULT_MAX_CHILDREN_PER_NODE, DEFAULT_MAX_DEPTH, DEFAULT_MAX_OSCILLATIONS_PER_KEY, DEFAULT_MAX_PINNED_WORKTREES, DEFAULT_MAX_REVISIONS_PER_RUN, DEFAULT_MAX_TOTAL_SPAWNS, DEFAULT_MAX_TURNS, DEFAULT_MODEL_RETRY_ATTEMPTS, DEFAULT_NO_PROGRESS_TURNS, DEFAULT_PER_RUN_CONCURRENCY, DEFAULT_RETRY_POLICY, DEFAULT_STREAM_IDLE_TIMEOUT_MS, DebitResult, DeclaredLadder, DedupIndex, DedupNote, DerivedKey, DeriverRegistry, DispositionRule, DispositionTable, DonorCandidate, DonorRef, DroppedItem, EMIT_RESULT_TOOL, EMPTY_SCHEMA_HASH, EMPTY_TOOLSET_HASH, ESCALATE_TOOL_NAME, ESCALATION_REPORT_SCHEMA, ESCALATION_REQUEST_SCHEMA, EffectiveUsageLimits, Effort, Engine, EngineDefaults, EntryKind, EntryRef, EntryStatus, ErrorClass, ErrorCode, ErrorPolicy, EscalatedResult, EscalationDecision, EscalationDigest, EscalationKind, EscalationLimits, EscalationOptions, EscalationReport, EscalationRequest, EventBus, type EvidenceRef, ExtensionAppendInput, ExtensionDispatchSpec, ExternalIdentityInput, ExternalRegistry, ExtractNecessityInput, FINISH_SCHEMA, FINISH_TOOL_NAME, FailoverTarget, FailoverTrigger, FallbackField, FallbackTrigger, FileModelKnowledgeStore, FileModelKnowledgeStoreOptions, FileTranscriptStore, FinishInfo, Gate, GateAudit, type GateRecord, GitWorktreeProvider, GitWorktreeProviderOptions, GraftBoot, HashVersion, HookVerdict, INBOX_PROPOSAL_TTL_DAYS, IdentityInput, InMemoryStore, InMemoryTranscriptStore, InProcessRunner, InvalidResolutionError, InvocationRole, type IsolationProvider, type IsolationSpec, Issue$1 as Issue, JournalCompatSubCode, JournalCompatibilityError, JournalEntry, JournalMatcher, JournalMissError, JournalOperation, JournalOrderViolation, JournalSerializationHook, type JournalStore, type Json, JsonSchema, JsonlFileStore, KB_ACTIVE_CLAIMS_CAP, KB_CARD_RENDER_BUDGET_CHARS, type KbProposal, type KbProposalTrigger, KeyDeriver, KeyRing, KeyedLimiter, KnowledgeCasError, type KnowledgeSnapshot, LARGE_VALUE_WARN_BYTES, LEGACY_LTID_PREFIX, LEGACY_SIGNATURE_INPUTS, LINEAGE_SIG_VERSION, LadderSpec, type LeasableStore, type Lease, LeaseHeldError, Ledger, LineageCounters, LineageIndex, LineageRef, LineageRelation, LineageStats, LogicalTaskId, MASKED_SECRET, MAX_DEPTH_CEILING, MatchResult, McpConfig, MechanicalGateProfile, MechanicalGateVerdict, type ModelCaps, ModelChoice, type ModelClaim, ModelEpochInputs, type ModelKnowledgeHandle, type ModelKnowledgeStore, ModelListConstraint, ModelRef, ModelRetry, ModelSpec, Msg, NoProgressDetector, NodeId, NodeLinkValue, NonSerializableValueError, ORCHESTRATE_WORKFLOW_NAME, OnEscalation, OperationDisposition, OrchestrateOptions, OrchestratorBudgetSpec, OrchestratorCapConfigError, OrchestratorExtension, OrchestratorExtensionIO, OrchestratorRuntime, Out, PARALLEL_AGENTS_SCHEMA, ParallelSiteCounter, Part, PendingExternal, PendingToolTurn, PermissionConfig, PermissionGate, PermissionHook, PermissionPreset, PermissionRule, PermissionVerdict, PhaseTarget, PipelineCollected, PipelineOpts, PlanInvariantError, PriceTable, type Pricing, type ProviderAdapter, QualityFloors, ROLE_EFFORT_DEFAULTS, ROOT_ACCOUNT, ROOT_SCOPE, RUN_PROFILES, RandIdentityInput, RandPayload, RefEntryAppender, RefEntryClassification, RefusalInfo, ReplayDisposition, ReplayMode, ReplayPlanHashMismatch, Replayer, ResolutionArbiter, ResolutionAttempt, ResolutionBy, ResolutionFold, ResolutionLayer, ResolutionOutcome, ResolutionPayload, ResolvedInvocation, ResolvedToolset, ResumeHandle, ResumeOptions, ResumePreview, ResumeReport, RetryClass, RetryPolicy, ReuseConfig, RiskRuleValue, Role, RulvarError, RulvarErrorCode, RunAgentOptions, RunBudget, RunEventSink, type RunFilter, RunHandle, RunInternals, type RunMeta, RunOptions, RunOutcome, RunProfile, RunStatus, RuntimeEventSink, SPAWN_AGENT_SCHEMA, SandboxBridge, SandboxBridgeOptions, SandboxError, SandboxHostToWorker, SandboxMethod, SandboxWorkerToHost, SchemaPair, SchemaSpec, SchemaValidationResult, ScopeSegment, ScriptRejected, ScriptRunner, ScrubNote, Semaphore, SerializationHook, Settled, ShellPatternRules, ShellSegment, ShellVerdict, SinglePhaseAppend, SpanMinter, SpanRegistry, SpawnAdmissionValue, SpawnAgentParams, SpawnKey, SpawnLineage, SpawnLineageOpt, SpawnOrigin, SpawnRecord, Spend, Stage, type StandardJSONSchemaV1, type StandardSchemaV1, StepIdentityInput, StructuredOutputTier, SuspendedAppend, SuspensionState, TOOL_NAME_PATTERN, type TaskClass, TaskDigest, TaskSpec, TerminalPatch, TerminationAccount, TerminationAccountSnapshot, TerminationDeniedValue, TerminationDeniedWriter, TerminationInitValue, TerminationLimits, TerminationResource, ToolCallRequest, ToolChoice, type ToolContext, ToolContextSeed, ToolContract, type ToolDef, type ToolEvents, type ToolExecutor, ToolInit, type ToolRisk, ToolRuntime, type ToolSource, type ToolSourceSession, ToolsOption, TranscriptSerializationHook, type TranscriptStore, TriggerClass, TtlState, Usage, UsageLimits, VerifiedRecommendation, WAIT_FOR_EVENTS_SCHEMA, WAIT_FOR_EVENTS_TOOL_NAME, WAKE_SUMMARY_RENDER_BUDGET_CHARS, WakeBudgetBlock, WakeDigest, WakeTrigger, WireError, Workflow, WorkflowCallOpts, type WorkflowEvent, type WorkflowEventBody, WorkflowRegistry, admissionReserveUsd, agentErrorFromWire, agentErrorToWire, agentScope, applyClaimOps, applyStructuredOutputTier, approachSigCoarse, approachSigOf, archiveDeprecatedModelOps, atCompactionThreshold, buildAbandonFold, buildAdapterRegistry, buildCostReport, buildDeriverRegistry, buildOrchestratorTools, buildTerminationInitValue, buildToolContext, canRideLoopTurn, canonicalIsolationTag, canonicalizeLadder, canonicalizeSchema, capIssues, capsHashOf, checkFloors, checkpointRefFor, childCoveragePrefix, claimExpired, claimExpiry, claimIssues, claimOpIssues, classifyAgentError, classifyAttemptOutcome, collectDeclaredLadders, compactMessages, compilePermissionChain, compilePermissionPreset, compileVerifiedLayer, costReportFromJournal, countsAgainstLimit, createCanonicalIdMinter, createCtx, createEngine, createSandboxBridge, currentOnlyKeyRing, decodeCheckpoint, defineWorkflow, deriveContentKey, deriverV1, deriverV2, digestOf, dispositionHook, emptyDigestBlocks, emptyToolset, encodeCheckpoint, escalateTool, evaluatePermission, evaluateReuse, executeWorkflow, exhaustionCodeOf, extractCandidate, failoverTriggerOf, fallbackTriggerOf, filterClaimsForRun, finalizeFires, foldTermination, formatRePrompt, formatScopePath, hashWorkflowBody, hashWorkflowSource, identityJcs, isEscalated, isSchemaPairSpec, isStandardSchemaSpec, isStrictCompatibleSchema, kMaxOf, knowledgeHash, ladderLengthOf, ladderRungChoice, lexShellCommand, liftRetainedParts, lineageWeightOf, makeOrchestratorWorkflow, maskSecrets, maskSecretsDeep, maskSecretsJson, matchArgvPattern, matchShellCommand, mcp, mergeUsageLimits, modelEpochOf, modelKnowledgeCard, modelSpecIdentity, needsSeparateExtract, nextFailover, nodeLinkKey, normalizeApproachTag, normalizeEntry, normalizeFallbacks, orchestrate, parallelScope, parseModelRef, parseScopePath, phiInitialOf, pipelineScope, planNodeScope, priceUsdOf, profileCard, profileRegistrySnapshotHash, projectHistory, projectIdentity, projectToJsonSchema, proposalStatement, providerOf, readTerminationInit, registryKeyRing, remeasureQueue, replayDisposition, resolveModelInvocation, resolvePricing, resolveToolset, retryClassOf, retryDelayMs, roleConfiguredInRouting, roundOneDisposition, runAgent, runProfile, scanJournalCompatibility, schemaHash, schemaHashOfSpec, selectStructuredOutputTier, shouldCompact, spawnDepthOf, summarizeInstruction, summarizeOutput, terminationConfigDrift, tierWithinCaps, toApprovalDecision, toJournalValue, tool, toolContract, toolsetHash, ttlState, validateEditorialCommit, validateEntryShape, validateEscalationLimits, validateEscalationReport, validateSchemaSpec, validateTerminationLimits, workflowScope, workflowSourceRef, wrapJournalStore, wrapTranscriptStore };
+export { AWAIT_SCHEMA, AbandonAttempt, AbandonFold, AbandonPayload, AbandonedSpendView, AbortClass, type AdaptiveEvents, AdmissionController, AdmissionDecision, AdmissionRejectedError, AdmissionStatsBefore, AdmitLineage, AdmitRejectReason, AdmitSpec, AdmitVerdict, AgentCallError, AgentError, type AgentEvents, AgentIdentityInput, AgentOpts, AgentProfile, AgentProfilePermissions, AgentResult, AgentResultMeta, AgentStatus, ApproachSignatureInputs, ApprovalDecision, ApprovalIdentityInput, Artifact, AttemptOutcomeClass, BUDGET_ABORT_REASON, BriefOpts, BudgetAccountView, BudgetDefaults, BudgetExhaustedError, BudgetHooks, BudgetReserve, type Bytes, CANCEL_AGENT_SCHEMA, CHECKPOINT_FORMAT_V1, CLAIM_STATEMENT_MAX_CHARS, CLAIM_TTL_DAYS, COMPACTION_SUMMARY_PREFIX, CURRENT_HASH_VERSION, CacheHint, CacheTtl, CanUseTool, CanonicalId, CanonicalIdentity, CanonicalLadderSpec, CanonicalModelSpec, ChatEvent, ChatRequest, CheckpointState, ChildIdentityInput, type ClaimClass, type ClaimOp, type ClaimStatus, ClaimValidationOptions, CollectOpts, CollectedTurn, CompactionConfig, CompiledPermissionChain, CompiledWorkflow, ConfigError, type CoreEvents, CostAttribution, CostReport, CreateEngineOptions, Ctx, DEFAULT_CHILD_BUDGET_FRACTION, DEFAULT_COMPACTION_THRESHOLD, DEFAULT_ESCALATION_LIMITS, DEFAULT_FLAT_RESERVE_USD, DEFAULT_MAX_CHILDREN_PER_NODE, DEFAULT_MAX_DEPTH, DEFAULT_MAX_OSCILLATIONS_PER_KEY, DEFAULT_MAX_PINNED_WORKTREES, DEFAULT_MAX_REVISIONS_PER_RUN, DEFAULT_MAX_TOTAL_SPAWNS, DEFAULT_MAX_TURNS, DEFAULT_MODEL_RETRY_ATTEMPTS, DEFAULT_NO_PROGRESS_TURNS, DEFAULT_PER_RUN_CONCURRENCY, DEFAULT_RETRY_POLICY, DEFAULT_STREAM_IDLE_TIMEOUT_MS, DebitResult, DeclaredLadder, DedupIndex, DedupNote, DerivedKey, DeriverRegistry, DispositionRule, DispositionTable, DonorCandidate, DonorRef, DroppedItem, EMIT_RESULT_TOOL, EMPTY_SCHEMA_HASH, EMPTY_TOOLSET_HASH, ESCALATE_TOOL_NAME, ESCALATION_REPORT_SCHEMA, ESCALATION_REQUEST_SCHEMA, EffectiveUsageLimits, Effort, Engine, EngineDefaults, EntryKind, EntryRef, EntryStatus, ErrorClass, ErrorCode, ErrorPolicy, EscalatedResult, EscalationDecision, EscalationDigest, EscalationKind, EscalationLimits, EscalationOptions, EscalationReport, EscalationRequest, EventBus, type EvidenceRef, ExtensionAppendInput, ExtensionDispatchSpec, ExternalIdentityInput, ExternalRegistry, ExtractNecessityInput, FINISH_SCHEMA, FINISH_TOOL_NAME, FailoverTarget, FailoverTrigger, FallbackField, FallbackTrigger, FileModelKnowledgeStore, FileModelKnowledgeStoreOptions, FileTranscriptStore, FinishInfo, Gate, GateAudit, type GateRecord, GitWorktreeProvider, GitWorktreeProviderOptions, GraftBoot, HashVersion, HookVerdict, INBOX_PROPOSAL_TTL_DAYS, IdentityInput, InMemoryStore, InMemoryTranscriptStore, InProcessRunner, InvalidResolutionError, InvocationRole, type IsolationProvider, type IsolationSpec, Issue$1 as Issue, JournalCompatSubCode, JournalCompatibilityError, JournalEntry, JournalMatcher, JournalMissError, JournalOperation, JournalOrderViolation, JournalSerializationHook, type JournalStore, type Json, JsonSchema, JsonlFileStore, KB_ACTIVE_CLAIMS_CAP, KB_CARD_RENDER_BUDGET_CHARS, type KbProposal, type KbProposalTrigger, KeyDeriver, KeyRing, KeyedLimiter, KnowledgeCasError, type KnowledgeSnapshot, LARGE_VALUE_WARN_BYTES, LEGACY_LTID_PREFIX, LEGACY_SIGNATURE_INPUTS, LINEAGE_SIG_VERSION, LadderSpec, type LeasableStore, type Lease, LeaseHeldError, Ledger, LineageCounters, LineageIndex, LineageRef, LineageRelation, LineageStats, LogicalTaskId, MASKED_SECRET, MAX_DEPTH_CEILING, MatchResult, McpConfig, MechanicalGateProfile, MechanicalGateVerdict, type ModelCaps, ModelChoice, type ModelClaim, ModelEpochInputs, type ModelKnowledgeHandle, type ModelKnowledgeStore, ModelListConstraint, ModelRef, ModelRetry, ModelSpec, Msg, NoProgressDetector, NodeId, NodeLinkValue, NonSerializableValueError, ORCHESTRATE_WORKFLOW_NAME, OnEscalation, OperationDisposition, OrchestrateOptions, OrchestratorBudgetSpec, OrchestratorCapConfigError, OrchestratorExtension, OrchestratorExtensionIO, OrchestratorRuntime, Out, PARALLEL_AGENTS_SCHEMA, ParallelSiteCounter, Part, PendingExternal, PendingToolTurn, PermissionConfig, PermissionGate, PermissionHook, PermissionPreset, PermissionRule, PermissionVerdict, PhaseTarget, PipelineCollected, PipelineOpts, PlanInvariantError, PriceTable, PricedUsage, type Pricing, type ProviderAdapter, QualityFloors, ROLE_EFFORT_DEFAULTS, ROOT_ACCOUNT, ROOT_SCOPE, RUN_PROFILES, RandIdentityInput, RandPayload, RefEntryAppender, RefEntryClassification, RefusalInfo, ReplayDisposition, ReplayMode, ReplayPlanHashMismatch, Replayer, ResolutionArbiter, ResolutionAttempt, ResolutionBy, ResolutionFold, ResolutionLayer, ResolutionOutcome, ResolutionPayload, ResolvedInvocation, ResolvedToolset, ResumeHandle, ResumeOptions, ResumePreview, ResumeReport, RetryClass, RetryPolicy, ReuseConfig, RiskRuleValue, Role, RulvarError, RulvarErrorCode, RunAgentOptions, RunBudget, RunEventSink, type RunFilter, RunHandle, RunInternals, type RunMeta, RunOptions, RunOutcome, RunProfile, RunStatus, RuntimeEventSink, SPAWN_AGENT_SCHEMA, SandboxBridge, SandboxBridgeOptions, SandboxError, SandboxHostToWorker, SandboxMethod, SandboxWorkerToHost, SchemaPair, SchemaSpec, SchemaValidationResult, ScopeSegment, ScriptRejected, ScriptRunner, ScrubNote, Semaphore, SerializationHook, Settled, ShellPatternRules, ShellSegment, ShellVerdict, SinglePhaseAppend, SpanMinter, SpanRegistry, SpawnAdmissionValue, SpawnAgentParams, SpawnKey, SpawnLineage, SpawnLineageOpt, SpawnOrigin, SpawnRecord, Spend, Stage, type StandardJSONSchemaV1, type StandardSchemaV1, StepIdentityInput, StructuredOutputTier, SuspendedAppend, SuspensionState, TOOL_NAME_PATTERN, type TaskClass, TaskDigest, TaskSpec, TerminalPatch, TerminationAccount, TerminationAccountSnapshot, TerminationDeniedValue, TerminationDeniedWriter, TerminationInitValue, TerminationLimits, TerminationResource, ToolCallRequest, ToolChoice, type ToolContext, ToolContextSeed, ToolContract, type ToolDef, type ToolEvents, type ToolExecutor, ToolInit, type ToolRisk, ToolRuntime, type ToolSource, type ToolSourceSession, ToolsOption, TranscriptSerializationHook, type TranscriptStore, TriggerClass, TtlState, Usage, UsageLimits, UsageSlice, VerifiedRecommendation, WAIT_FOR_EVENTS_SCHEMA, WAIT_FOR_EVENTS_TOOL_NAME, WAKE_SUMMARY_RENDER_BUDGET_CHARS, WakeBudgetBlock, WakeDigest, WakeTrigger, WireError, Workflow, WorkflowCallOpts, type WorkflowEvent, type WorkflowEventBody, WorkflowRegistry, admissionReserveUsd, agentErrorFromWire, agentErrorToWire, agentScope, applyClaimOps, applyStructuredOutputTier, approachSigCoarse, approachSigOf, archiveDeprecatedModelOps, atCompactionThreshold, buildAbandonFold, buildAdapterRegistry, buildCostReport, buildDeriverRegistry, buildOrchestratorTools, buildTerminationInitValue, buildToolContext, canRideLoopTurn, canonicalIsolationTag, canonicalizeLadder, canonicalizeSchema, capIssues, capsHashOf, checkFloors, checkpointRefFor, childCoveragePrefix, claimExpired, claimExpiry, claimIssues, claimOpIssues, classifyAgentError, classifyAttemptOutcome, collectDeclaredLadders, compactMessages, compilePermissionChain, compilePermissionPreset, compileVerifiedLayer, costReportFromJournal, countsAgainstLimit, createCanonicalIdMinter, createCtx, createEngine, createSandboxBridge, currentOnlyKeyRing, decodeCheckpoint, defineWorkflow, deriveContentKey, deriverV1, deriverV2, digestOf, dispositionHook, emptyDigestBlocks, emptyToolset, encodeCheckpoint, entryUsageSlices, escalateTool, evaluatePermission, evaluateReuse, executeWorkflow, exhaustionCodeOf, extractCandidate, failoverTriggerOf, fallbackTriggerOf, filterClaimsForRun, finalizeFires, foldTermination, formatRePrompt, formatScopePath, hashWorkflowBody, hashWorkflowSource, identityJcs, isEscalated, isSchemaPairSpec, isStandardSchemaSpec, isStrictCompatibleSchema, kMaxOf, knowledgeHash, ladderLengthOf, ladderRungChoice, lexShellCommand, liftRetainedParts, lineageWeightOf, makeOrchestratorWorkflow, maskSecrets, maskSecretsDeep, maskSecretsJson, matchArgvPattern, matchShellCommand, mcp, mergeUsageLimits, modelEpochOf, modelKnowledgeCard, modelSpecIdentity, needsSeparateExtract, nextFailover, nodeLinkKey, normalizeApproachTag, normalizeEntry, normalizeFallbacks, orchestrate, parallelScope, parseModelRef, parseScopePath, phiInitialOf, pipelineScope, planNodeScope, priceEntryUsage, priceUsdOf, profileCard, profileRegistrySnapshotHash, projectHistory, projectIdentity, projectToJsonSchema, proposalStatement, providerOf, readTerminationInit, registryKeyRing, remeasureQueue, replayDisposition, resolveModelInvocation, resolvePricing, resolveToolset, retryClassOf, retryDelayMs, roleConfiguredInRouting, roundOneDisposition, runAgent, runProfile, scanJournalCompatibility, schemaHash, schemaHashOfSpec, selectStructuredOutputTier, shouldCompact, spawnDepthOf, summarizeInstruction, summarizeOutput, terminationConfigDrift, tierWithinCaps, toApprovalDecision, toJournalValue, tool, toolContract, toolsetHash, ttlState, validateEditorialCommit, validateEntryShape, validateEscalationLimits, validateEscalationReport, validateSchemaSpec, validateTerminationLimits, workflowScope, workflowSourceRef, wrapJournalStore, wrapTranscriptStore };

package/dist/index.js

@@ -1750,6 +1750,46 @@ async function validateSchemaSpec(spec, value) {
 /** 1 = round 1; 2 = current. */
 const CURRENT_HASH_VERSION = 2;
 /**
+* The per-model slices of a terminal entry: the recorded split when the
+* call spanned several models, else the whole usage attributed to
+* `servedBy`. The fallback is what makes every journal written before the
+* split shipped price exactly as it did before.
+*/
+function entryUsageSlices(entry) {
+	if (entry.usage === void 0) return [];
+	if (entry.usageByModel !== void 0 && entry.usageByModel.length > 0) return entry.usageByModel;
+	return entry.servedBy === void 0 ? [] : [{
+		servedBy: entry.servedBy,
+		usage: entry.usage
+	}];
+}
+/**
+* The single pricing fold over one terminal entry, shared by the kernel
+* ledger and the CostReport fold so a run's total and its per-model
+* breakdown can never disagree. Each slice is priced at ITS OWN model's
+* rate.
+*/
+function priceEntryUsage(entry, priceUsd) {
+	const result = {
+		usd: 0,
+		priced: [],
+		unpriced: []
+	};
+	for (const slice of entryUsageSlices(entry)) {
+		const usd = priceUsd(slice.servedBy, slice.usage);
+		if (usd === void 0) {
+			result.unpriced.push(slice);
+			continue;
+		}
+		result.usd += usd;
+		result.priced.push({
+			...slice,
+			usd
+		});
+	}
+	return result;
+}
+/**
 * Round-1 normalization: hashVersion is taken from `hashVersion`, else
 * from the legacy `v` field, else 1. Stores are never rewritten;
 * normalization happens at read.
@@ -2583,7 +2623,7 @@ async function resolveToolset(specs, session) {
 	if (specs === void 0 || specs.length === 0) return emptyToolset();
 	const tools = [];
 	for (const spec of specs) {
-		if (typeof spec === "string") throw new ConfigError(`tools by registered name ('${spec}') resolve only inside the worker sandbox; name-based tool registries exist for compiled scripts only (https://docs.rulvar.com/guide/planner)`);
+		if (typeof spec === "string") throw new ConfigError(`tools by registered name ('${spec}') are not supported here: pass ToolDef or ToolSource values. Registered toolset names exist only for the dynamic orchestrator's spawn_agent toolsetRef (https://docs.rulvar.com/guide/tools)`);
 		if (isToolDef(spec)) {
 			tools.push(spec);
 			continue;
@@ -5443,6 +5483,7 @@ var Replayer = class {
 			if (patch.usage !== void 0) entry.usage = patch.usage;
 			if (patch.usageApprox !== void 0) entry.usageApprox = patch.usageApprox;
 			if (patch.servedBy !== void 0) entry.servedBy = patch.servedBy;
+			if (patch.usageByModel !== void 0) entry.usageByModel = patch.usageByModel;
 			if (patch.transcriptRef !== void 0) entry.transcriptRef = patch.transcriptRef;
 			if (patch.checkpointRef !== void 0) entry.checkpointRef = patch.checkpointRef;
 			if (patch.artifacts !== void 0) entry.artifacts = toJournalValue(patch.artifacts, "terminal artifacts");
@@ -5486,7 +5527,7 @@ var Replayer = class {
 			usage.cacheReadTokens += entry.usage.cacheReadTokens;
 			usage.cacheWriteTokens += entry.usage.cacheWriteTokens;
 			reasoning += entry.usage.reasoningTokens ?? 0;
-			usd += this.priceUsd?.(entry.servedBy, entry.usage) ?? 0;
+			if (this.priceUsd !== void 0) usd += priceEntryUsage(entry, this.priceUsd).usd;
 		}
 		if (reasoning > 0) usage.reasoningTokens = reasoning;
 		return {
@@ -5576,8 +5617,31 @@ var ExternalRegistry = class ExternalRegistry {
 	activity = 0;
 	quiesceListener;
 	quiesceScheduled = false;
-	constructor(replayer) {
+	emitEvent;
+	constructor(replayer, emitEvent) {
 		this.replayer = replayer;
+		this.emitEvent = emitEvent;
+	}
+	/**
+	* Live resolution telemetry: applied when the attempt won the
+	* first-closing-wins fold, superseded when it lost. Emitted for live
+	* attempts only; folds of prior entries at resume re-emit nothing.
+	*/
+	emitResolutionOutcome(targetRef, by, outcome) {
+		if (this.emitEvent === void 0) return;
+		if (outcome.applied) this.emitEvent({
+			type: "resolution:applied",
+			targetRef,
+			entryRef: outcome.seq,
+			by
+		});
+		else this.emitEvent({
+			type: "resolution:superseded",
+			targetRef,
+			entryRef: outcome.seq,
+			supersededBy: outcome.supersededBy,
+			reason: outcome.reason
+		});
 	}
 	/** Wraps every non-suspension async operation (agents, steps). */
 	enter() {
@@ -5805,6 +5869,7 @@ var ExternalRegistry = class ExternalRegistry {
 	*/
 	async submitResolution(entryRef, attempt) {
 		const outcome = await this.replayer.resolveSuspended(entryRef, attempt);
+		this.emitResolutionOutcome(entryRef, attempt.by, outcome);
 		if (outcome.applied) {
 			const waiter = this.waiters.get(entryRef);
 			if (waiter !== void 0) {
@@ -5838,6 +5903,7 @@ var ExternalRegistry = class ExternalRegistry {
 			by: "external",
 			value
 		});
+		this.emitResolutionOutcome(waiter.entryRef, "external", outcome);
 		if (outcome.applied) {
 			this.waiters.delete(waiter.entryRef);
 			waiter.resolve(value);
@@ -5853,7 +5919,10 @@ function deepCopy(value) {
 var InMemoryStore = class {
 	runs = /* @__PURE__ */ new Map();
 	metas = /* @__PURE__ */ new Map();
-	warned = false;
+	warned;
+	constructor(options) {
+		this.warned = options?.quiet === true;
+	}
 	append(runId, e) {
 		this.warnOnce();
 		const entries = this.runs.get(runId) ?? [];
@@ -5885,7 +5954,7 @@ var InMemoryStore = class {
 	warnOnce() {
 		if (this.warned) return;
 		this.warned = true;
-		process.emitWarning("InMemoryStore keeps journals in process memory: nothing survives the process and resume is disabled. Use JsonlFileStore (M2) or @rulvar/store-sqlite (M5) for durable runs.", {
+		process.emitWarning("InMemoryStore keeps journals in process memory: nothing survives a process exit, and a run cannot be resumed from another process. Use JsonlFileStore (M2) or @rulvar/store-sqlite (M5) for durable runs.", {
 			code: "RULVAR_INMEMORY_STORE",
 			type: "RulvarWarning"
 		});
@@ -6150,18 +6219,13 @@ function costReportFromJournal(entries, priceUsd) {
 	for (const entry of entries) {
 		if (entry.kind !== "resolution" && entry.kind !== "abandon" && abandonFold.isAbandoned(entry.ref ?? entry.seq)) continue;
 		if (entry.status === "running" || entry.usage === void 0) continue;
-		const servedBy = entry.servedBy;
-		if (servedBy === void 0) continue;
-		const usd = priceUsd(servedBy, entry.usage);
-		if (usd === void 0) {
-			unpriced.push({
-				model: servedBy,
-				usage: entry.usage
-			});
-			continue;
-		}
-		byModel[servedBy] = (byModel[servedBy] ?? 0) + usd;
-		totalUsd += usd;
+		const priced = priceEntryUsage(entry, priceUsd);
+		for (const slice of priced.unpriced) unpriced.push({
+			model: slice.servedBy,
+			usage: slice.usage
+		});
+		for (const slice of priced.priced) byModel[slice.servedBy] = (byModel[slice.servedBy] ?? 0) + slice.usd;
+		totalUsd += priced.usd;
 	}
 	return {
 		totalUsd,
@@ -6518,6 +6582,12 @@ function liftRetainedParts(providerMetadata, adapter) {
 }
 //#endregion
 //#region src/model/retry.ts
+/**
+* Captured at module load, before the InProcessRunner's nondeterminism
+* guard can patch the global: the engine's own jitter is journal
+* invisible and must never be blamed on workflow code.
+*/
+const nativeRandom = Math.random;
 /** Appendix A committed defaults (M4 entry gate, PR #26). */
 const DEFAULT_RETRY_POLICY = {
 	attempts: 3,
@@ -6553,7 +6623,7 @@ function retryClassOf(error) {
 * equal-jitter: half the backoff is deterministic, half random, so a
 * jittered delay never collapses to zero.
 */
-function retryDelayMs(policy, retryIndex, retryAfterMs, random = Math.random) {
+function retryDelayMs(policy, retryIndex, retryAfterMs, random = nativeRandom) {
 	if (retryAfterMs !== void 0) return retryAfterMs;
 	const { initialMs, factor, maxMs, jitter } = policy.backoff;
 	const base = Math.min(maxMs, initialMs * factor ** retryIndex);
@@ -6788,7 +6858,13 @@ function resolveModelInvocation(options) {
 	});
 	const requestedEffort = merged.effort ?? ROLE_EFFORT_DEFAULTS[role];
 	const { adapterId, model } = parseModelRef(merged.model);
-	const caps = options.capsOf(merged.model);
+	let caps;
+	try {
+		caps = options.capsOf(merged.model);
+	} catch (thrown) {
+		if (thrown instanceof ConfigError) throw new ConfigError(`role '${role}': ${thrown.message}`);
+		throw thrown;
+	}
 	const scrubs = [];
 	let wireEffort = requestedEffort;
 	if (wireEffort !== void 0 && !caps.reasoningEfforts.includes(wireEffort)) {
@@ -7213,7 +7289,7 @@ function ruleMatches(rule, toolName, risk, input) {
 }
 /**
 * Advisory domain-rule matches for the audit payload:
-* reported, never enforced outside first-party fetch.
+* reported, never enforced in the current release.
 */
 function advisoryMatches(chain, toolName) {
 	return [...chain.deny, ...chain.ask].filter((rule) => "domains" in rule && rule.tool === toolName);
@@ -7701,6 +7777,7 @@ async function runAgent(options) {
 		}]
 	}];
 	let totalUsage = ZERO_USAGE$1;
+	const usageByModel = /* @__PURE__ */ new Map();
 	let turns = 0;
 	let schemaAttempts = 0;
 	let output = null;
@@ -7730,8 +7807,31 @@ async function runAgent(options) {
 		toolCallsUsed = restored.toolCallsUsed;
 		schemaAttempts = restored.schemaAttempts;
 		compactionPoints.push(...restored.compaction);
-		options.budget?.onUsage(restored.usage, servedBy);
+		const restoredSlices = restored.usageByModel ?? [{
+			servedBy,
+			usage: restored.usage
+		}];
+		for (const slice of restoredSlices) {
+			usageByModel.set(slice.servedBy, addUsage(usageByModel.get(slice.servedBy) ?? ZERO_USAGE$1, slice.usage));
+			options.budget?.onUsage(slice.usage, slice.servedBy);
+		}
 	}
+	const usageSlices = () => [...usageByModel].map(([sliceServedBy, usage]) => ({
+		servedBy: sliceServedBy,
+		usage
+	}));
+	/**
+	* Every slice priced at ITS OWN model's rate. An unpriced model
+	* contributes zero here and surfaces through CostReport.unpriced, never
+	* as a silent zero.
+	*/
+	const priceRecordedUsage = () => {
+		const price = options.priceUsd;
+		if (price === void 0) return 0;
+		let usd = 0;
+		for (const [sliceServedBy, usage] of usageByModel) usd += price(sliceServedBy, usage) ?? 0;
+		return usd;
+	};
 	const saveBoundary = async (pending) => {
 		if (options.checkpoint === void 0) return;
 		await options.checkpoint.save({
@@ -7739,6 +7839,7 @@ async function runAgent(options) {
 			messages: [...messages],
 			turns,
 			usage: totalUsage,
+			usageByModel: usageSlices(),
 			toolCallsUsed,
 			schemaAttempts,
 			compaction: [...compactionPoints],
@@ -7852,7 +7953,7 @@ async function runAgent(options) {
 					continue;
 				}
 				const request = validation.value;
-				const spentSoFar = options.priceUsd?.(servedBy, totalUsage) ?? 0;
+				const spentSoFar = priceRecordedUsage();
 				if (countsAgainstLimit(request.kind) && spentSoFar < options.escalation.minSpendUsd) {
 					events?.emit({
 						type: "tool:end",
@@ -7971,6 +8072,7 @@ async function runAgent(options) {
 			invariantViolation = thrown instanceof Error ? thrown.message : String(thrown);
 		}
 		totalUsage = addUsage(totalUsage, usage);
+		usageByModel.set(ref, addUsage(usageByModel.get(ref) ?? ZERO_USAGE$1, usage));
 		const remainder = {
 			inputTokens: Math.max(0, usage.inputTokens - reported.inputTokens),
 			outputTokens: Math.max(0, usage.outputTokens - reported.outputTokens),
@@ -8550,7 +8652,7 @@ async function runAgent(options) {
 		const blob = new TextEncoder().encode(JSON.stringify({ messages }));
 		await options.transcript.put(transcriptRef, blob);
 	}
-	const costUsd = options.priceUsd?.(servedBy, totalUsage) ?? 0;
+	const costUsd = priceRecordedUsage();
 	const result = {
 		status,
 		output: status === "ok" ? output : output ?? null,
@@ -8560,6 +8662,7 @@ async function runAgent(options) {
 		servedBy,
 		transcriptRef
 	};
+	if (usageByModel.size > 1) result.usageByModel = usageSlices();
 	if (agentError !== void 0) result.error = agentError;
 	if (escalationRequest !== void 0) result.escalationRequest = escalationRequest;
 	if (abortClass !== void 0) result.abortClass = abortClass;
@@ -8626,6 +8729,8 @@ var RunBudget = class {
 	usageInternal = { ...ZERO_USAGE };
 	agentsSpawnedInternal = 0;
 	exhaustedInternal = false;
+	/** Models already warned about; the warning fires once per model per run. */
+	unpricedWarned = /* @__PURE__ */ new Set();
 	constructor(options) {
 		if (options.ceilingUsd !== void 0) this.ceilingUsd = options.ceilingUsd;
 		this.lifetimeSpawnCap = options.lifetimeSpawnCap ?? 500;
@@ -8830,7 +8935,16 @@ var RunBudget = class {
 		};
 		const reasoning = (this.usageInternal.reasoningTokens ?? 0) + (usage.reasoningTokens ?? 0);
 		if (reasoning > 0) this.usageInternal.reasoningTokens = reasoning;
-		const usd = this.priceUsd?.(servedBy, usage) ?? 0;
+		const priced = this.priceUsd?.(servedBy, usage);
+		if (priced === void 0 && this.ceilingUsd !== void 0 && !this.unpricedWarned.has(servedBy)) {
+			this.unpricedWarned.add(servedBy);
+			this.events?.emit({
+				type: "log",
+				level: "warn",
+				msg: `no price row for '${servedBy}': its usage does not debit the budget, so the ${this.ceilingUsd} USD run ceiling does NOT bound this model. Add it to createEngine({ pricing }) to cap it; its usage is reported under CostReport.unpriced`
+			});
+		}
+		const usd = priced ?? 0;
 		for (const account of this.chainOf(accountScope)) {
 			account.spentUsd += usd;
 			if (account.ceilingUsd !== void 0 && account.spentUsd >= account.ceilingUsd && !account.controller.signal.aborted) {
@@ -9535,11 +9649,22 @@ var AgentCallError = class extends Error {
 		if (entryRef !== void 0) this.entryRef = entryRef;
 	}
 };
+/** The workflow-defaults layer a Workflow value contributes, or nothing. */
+function workflowLayerOf(wf) {
+	const layer = {};
+	if (wf.model !== void 0) layer.model = wf.model;
+	if (wf.routing !== void 0) layer.routing = wf.routing;
+	if (wf.effort !== void 0) layer.effort = wf.effort;
+	return Object.keys(layer).length === 0 ? void 0 : layer;
+}
 function defineWorkflow(meta, body) {
 	const wf = {
 		kind: "workflow",
 		name: meta.name,
 		errorPolicy: meta.errorPolicy ?? "strict",
+		...meta.model === void 0 ? {} : { model: meta.model },
+		...meta.routing === void 0 ? {} : { routing: meta.routing },
+		...meta.effort === void 0 ? {} : { effort: meta.effort },
 		body
 	};
 	if (meta.args !== void 0) return {
@@ -9581,19 +9706,24 @@ function buildEscalationReport(request, result, worktreePatchRef) {
 * one ctx object while journaling under their own scope paths (I3:
 * structure from call-and-return only).
 */
-function createCtx(internals) {
+function createCtx(internals, rootWorkflow) {
 	const als = new AsyncLocalStorage();
 	const sites = new ParallelSiteCounter();
+	const rootWorkflowLayer = rootWorkflow === void 0 ? void 0 : workflowLayerOf(rootWorkflow);
 	const rootState = {
 		scope: "",
-		spanId: internals.rootSpanId
+		spanId: internals.rootSpanId,
+		...rootWorkflowLayer === void 0 ? {} : { workflowLayer: rootWorkflowLayer }
 	};
 	const current = () => als.getStore() ?? rootState;
 	const capsOf = (ref) => {
 		const colon = ref.indexOf(":");
 		const adapterId = ref.slice(0, colon);
 		const adapter = internals.adapters.get(adapterId);
-		if (adapter === void 0) throw new ConfigError(`no adapter registered for '${adapterId}' (ModelRef '${ref}'); pass it to createEngine`);
+		if (adapter === void 0) {
+			const registered = [...internals.adapters.keys()].sort();
+			throw new ConfigError(`no adapter registered for '${adapterId}' (ModelRef '${ref}'); registered: ${registered.length === 0 ? "(none)" : registered.join(", ")}. Pass the adapter to createEngine, or route this role to a registered adapter through defaults.routing`);
+		}
 		return adapter.caps(ref.slice(colon + 1));
 	};
 	const adapterOf = (resolved) => {
@@ -9686,6 +9816,7 @@ function createCtx(internals) {
 		if (profile?.effort !== void 0) profileLayer.effort = profile.effort;
 		const engineLayer = {};
 		if (internals.defaults.routing !== void 0) engineLayer.routing = internals.defaults.routing;
+		const workflowLayer = state.workflowLayer;
 		const telemetryNamespace = { agentType };
 		if (opts.label !== void 0) telemetryNamespace.label = opts.label;
 		const withTelemetry = (resolved) => ({
@@ -9700,6 +9831,7 @@ function createCtx(internals) {
 			role: primaryRole,
 			call: callLayer,
 			profile: profileLayer,
+			workflow: workflowLayer,
 			engine: engineLayer,
 			capsOf,
 			...floorContext
@@ -9736,6 +9868,7 @@ function createCtx(internals) {
 				role: "extract",
 				call: callLayer,
 				profile: profileLayer,
+				workflow: workflowLayer,
 				engine: engineLayer,
 				capsOf,
 				...floorContext
@@ -9769,6 +9902,7 @@ function createCtx(internals) {
 				role: "finalize",
 				call: callLayer,
 				profile: profileLayer,
+				workflow: workflowLayer,
 				engine: engineLayer,
 				capsOf,
 				...floorContext
@@ -9789,6 +9923,7 @@ function createCtx(internals) {
 				role: "summarize",
 				call: callLayer,
 				profile: profileLayer,
+				workflow: workflowLayer,
 				engine: engineLayer,
 				capsOf,
 				...floorContext
@@ -9798,6 +9933,7 @@ function createCtx(internals) {
 				role: "summarize",
 				call: callLayer,
 				profile: profileLayer,
+				workflow: workflowLayer,
 				engine: {
 					...engineLayer,
 					model: loopResolved.ref
@@ -9817,6 +9953,7 @@ function createCtx(internals) {
 				role,
 				call: fallbackLayer,
 				profile: profileLayer,
+				workflow: workflowLayer,
 				engine: engineLayer,
 				capsOf,
 				...floorContext
@@ -9861,7 +9998,8 @@ function createCtx(internals) {
 				cacheReadTokens: 0,
 				cacheWriteTokens: 0
 			};
-			const costUsd = terminal?.servedBy === void 0 ? 0 : internals.priceUsd(terminal.servedBy, usage) ?? 0;
+			const replayPriced = terminal === void 0 ? void 0 : priceEntryUsage(terminal, (ref, sliceUsage) => internals.priceUsd(ref, sliceUsage));
+			const costUsd = replayPriced?.usd ?? 0;
 			const result = {
 				status: matched.kind === "skip" ? "skipped" : terminal?.status ?? "ok",
 				output: matched.kind === "skip" ? null : terminal?.value ?? null,
@@ -9918,7 +10056,11 @@ function createCtx(internals) {
 				costUsd,
 				entryRef: terminal?.seq ?? matched.running.seq
 			}, spanId, true);
-			bump(internals.cost.byModel, terminal?.servedBy ?? loopResolved.ref, costUsd);
+			for (const slice of replayPriced?.priced ?? []) bump(internals.cost.byModel, slice.servedBy, slice.usd);
+			for (const slice of replayPriced?.unpriced ?? []) internals.cost.unpriced.push({
+				model: slice.servedBy,
+				usage: slice.usage
+			});
 			bump(internals.cost.byPhase, state.phase ?? "", costUsd);
 			bump(internals.cost.byAgentType, agentType, costUsd);
 			internals.cost.byRole.set(primaryRole, (internals.cost.byRole.get(primaryRole) ?? 0) + costUsd);
@@ -9977,7 +10119,15 @@ function createCtx(internals) {
 			if (prior !== void 0) {
 				claimed.add(prior.seq);
 				const recorded = prior.value;
-				if (recorded.reject !== void 0) throw new AdmissionRejectedError(`lineage admission rejected agent spawn (${recorded.reject.code}; recorded verdict)`, { data: { reason: recorded.reject } });
+				if (recorded.reject !== void 0) {
+					internals.events.emit({
+						type: "spawn:rejected",
+						entryRef: prior.seq,
+						code: recorded.reject.code,
+						agentType
+					}, state.spanId, true);
+					throw new AdmissionRejectedError(`lineage admission rejected agent spawn (${recorded.reject.code}; recorded verdict)`, { data: { reason: recorded.reject } });
+				}
 			} else {
 				const evaluated = admission.evaluateLineage({
 					name: agentType,
@@ -10000,7 +10150,7 @@ function createCtx(internals) {
 				};
 				if (evaluated.decision.kind === "reject") decisionValue.reject = { code: evaluated.decision.reason.code };
 				else decisionValue.lineage = evaluated.decision.lineage;
-				await internals.replayer.appendSinglePhase({
+				const decisionEntry = await internals.replayer.appendSinglePhase({
 					scope: state.scope,
 					key: "",
 					kind: "decision",
@@ -10008,7 +10158,15 @@ function createCtx(internals) {
 					spanId: internals.spans.mint(state.spanId),
 					value: decisionValue
 				});
-				if (evaluated.decision.kind === "reject") throw new AdmissionRejectedError(`lineage admission rejected agent spawn (${evaluated.decision.reason.code})`, { data: { reason: evaluated.decision.reason } });
+				if (evaluated.decision.kind === "reject") {
+					internals.events.emit({
+						type: "spawn:rejected",
+						entryRef: decisionEntry.seq,
+						code: evaluated.decision.reason.code,
+						agentType
+					}, state.spanId);
+					throw new AdmissionRejectedError(`lineage admission rejected agent spawn (${evaluated.decision.reason.code})`, { data: { reason: evaluated.decision.reason } });
+				}
 				admission.registerLineageAdmit(evaluated.decision.lineage.logicalTaskId);
 			}
 		}
@@ -10112,7 +10270,12 @@ function createCtx(internals) {
 					data
 				}, toolSpanId)
 			});
-			const chain = compilePermissionChain(internals.defaults.permissions, profile?.permissions);
+			const compiledChain = compilePermissionChain(internals.defaults.permissions, profile?.permissions);
+			const readonlyDeny = { risk: ["write", "destructive"] };
+			const chain = isolation === "readonly" ? {
+				...compiledChain,
+				deny: [...compiledChain.deny, readonlyDeny]
+			} : compiledChain;
 			toolRuntime = {
 				defs: toolset.tools,
 				contracts: toolset.contracts,
@@ -10297,6 +10460,7 @@ function createCtx(internals) {
 			status: result.status === "skipped" ? "error" : result.status,
 			usage: result.usage,
 			servedBy: result.servedBy,
+			...result.usageByModel === void 0 ? {} : { usageByModel: result.usageByModel },
 			transcriptRef: result.transcriptRef
 		};
 		if (result.status === "escalated" && result.escalation !== void 0) terminalPatch.escalation = result.escalation;
@@ -10347,14 +10511,23 @@ function createCtx(internals) {
 			});
 		}
 		const usd = result.costUsd;
-		bump(internals.cost.byModel, loopResolved.ref, usd);
+		for (const slice of result.usageByModel ?? [{
+			servedBy: result.servedBy,
+			usage: result.usage
+		}]) {
+			const priced = internals.priceUsd(slice.servedBy, slice.usage);
+			if (priced === void 0) {
+				internals.cost.unpriced.push({
+					model: slice.servedBy,
+					usage: slice.usage
+				});
+				continue;
+			}
+			bump(internals.cost.byModel, slice.servedBy, priced);
+		}
 		bump(internals.cost.byPhase, state.phase ?? "", usd);
 		bump(internals.cost.byAgentType, agentType, usd);
 		internals.cost.byRole.set(primaryRole, (internals.cost.byRole.get(primaryRole) ?? 0) + usd);
-		if (internals.priceUsd(loopResolved.ref, result.usage) === void 0) internals.cost.unpriced.push({
-			model: loopResolved.ref,
-			usage: result.usage
-		});
 		if (result.error?.kind === "budget" || internals.budget.exhausted && result.status !== "ok") throw new BudgetExhaustedError("run budget ceiling reached during agent execution", { data: {
 			scope: state.scope,
 			entryRef: terminal.seq
@@ -10657,10 +10830,12 @@ function createCtx(internals) {
 			site: `ctx.workflow('${name}')`
 		});
 		const signals = [state.signal ?? internals.runSignal, internals.budget.signalOf(childScope)].filter((signal) => signal !== void 0);
+		const childLayer = workflowLayerOf(wf);
 		const childState = {
 			scope: childScope,
 			spanId,
-			budgetScope: childScope
+			budgetScope: childScope,
+			...childLayer === void 0 ? {} : { workflowLayer: childLayer }
 		};
 		if (signals.length === 1) childState.signal = signals[0];
 		else if (signals.length > 1) childState.signal = AbortSignal.any(signals);
@@ -10831,7 +11006,7 @@ async function executeWorkflow(internals, wf, args) {
 		const validation = await validateSchemaSpec(wf.argsSchema, args);
 		if (!validation.valid) throw new ConfigError(`arguments for workflow '${wf.name}' do not validate: ` + validation.issues.map((issue) => issue.message).join("; "), { data: { issues: validation.issues.map((issue) => issue.message) } });
 	}
-	const ctx = createCtx(internals);
+	const ctx = createCtx(internals, wf);
 	try {
 		return await wf.body(ctx, args);
 	} finally {
@@ -11278,7 +11453,14 @@ function makeOrchestratorWorkflow(goal, opts) {
 				if (recovered !== void 0) return { handle: recovered.handle };
 				const recoveredRejection = rejectedByOrdinal.get(spawnOrdinal);
 				if (recoveredRejection !== void 0) throw new AdmissionRejectedError(`admission rejected spawn ordinal ${String(spawnOrdinal)} (recovered verdict)`, { data: { decision: recoveredRejection } });
-				if (opts?.maxSpawns !== void 0 && spawnOrdinal >= opts.maxSpawns) throw new AdmissionRejectedError(`orchestrate maxSpawns ${String(opts.maxSpawns)} reached`, { data: { reason: { code: "lifetime" } } });
+				if (opts?.maxSpawns !== void 0 && spawnOrdinal >= opts.maxSpawns) {
+					internals.events.emit({
+						type: "spawn:rejected",
+						code: "lifetime",
+						agentType: params.agentType
+					}, callingState.spanId);
+					throw new AdmissionRejectedError(`orchestrate maxSpawns ${String(opts.maxSpawns)} reached`, { data: { reason: { code: "lifetime" } } });
+				}
 				const scope = childScopeOf();
 				const profile = internals.defaults.profiles?.[params.agentType];
 				const profileModel = profile?.model;
@@ -11312,7 +11494,7 @@ function makeOrchestratorWorkflow(goal, opts) {
 					spec: params,
 					decision
 				};
-				await internals.replayer.appendSinglePhase({
+				const decisionEntry = await internals.replayer.appendSinglePhase({
 					scope: callingState.scope,
 					key: "",
 					kind: "decision",
@@ -11322,11 +11504,19 @@ function makeOrchestratorWorkflow(goal, opts) {
 				});
 				if (decision.verdict.kind === "reject") {
 					rejectedByOrdinal.set(spawnOrdinal, decision);
+					internals.events.emit({
+						type: "spawn:rejected",
+						entryRef: decisionEntry.seq,
+						code: decision.verdict.reason.code,
+						agentType: params.agentType
+					}, callingState.spanId);
 					throw new AdmissionRejectedError(`admission rejected spawn_agent '${params.agentType}' (${decision.verdict.reason.code})`, { data: { reason: decision.verdict.reason } });
 				}
 				if (decision.verdict.kind !== "admit") throw new ConfigError(`admission verdict '${decision.verdict.kind}' has no producer before M7 (DEF-5)`);
 				internals.events.emit({
 					type: "spawn:admitted",
+					entryRef: decisionEntry.seq,
+					verdict: decision.verdict.kind,
 					agentType: params.agentType,
 					logicalTaskId: decision.verdict.lineage.logicalTaskId,
 					spawnUnitsAfter: decision.verdict.spawnUnitsAfter
@@ -11740,8 +11930,12 @@ var InProcessRunner = class {
 			const priorRandom = Math.random;
 			let warnedNow = false;
 			let warnedRandom = false;
+			const libraryCaller = () => {
+				const caller = (/* @__PURE__ */ new Error()).stack?.split("\n")[3];
+				return caller !== void 0 && caller.includes("node_modules");
+			};
 			Date.now = function rulvarPatchedDateNow() {
-				if (!warnedNow) {
+				if (!warnedNow && !libraryCaller()) {
 					warnedNow = true;
 					process.emitWarning("bare Date.now() called inside a rulvar run; use ctx.now() so the value is journaled and stable on replay", {
 						code: "RULVAR_BARE_DATE_NOW",
@@ -11751,7 +11945,7 @@ var InProcessRunner = class {
 				return priorNow();
 			};
 			Math.random = function rulvarPatchedMathRandom() {
-				if (!warnedRandom) {
+				if (!warnedRandom && !libraryCaller()) {
 					warnedRandom = true;
 					process.emitWarning("bare Math.random() called inside a rulvar run; use ctx.random() so the value is journaled and stable on replay", {
 						code: "RULVAR_BARE_MATH_RANDOM",
@@ -11829,8 +12023,9 @@ function createEngine(options) {
 		});
 		const rootSpanId = spans.mint();
 		let budgetSeed;
+		const ceilingUsd = opts?.budgetUsd ?? resumeCtx?.budgetUsd;
 		const makeBudget = () => new RunBudget({
-			...opts?.budgetUsd === void 0 ? {} : { ceilingUsd: opts.budgetUsd },
+			...ceilingUsd === void 0 ? {} : { ceilingUsd },
 			lifetimeSpawnCap: options.budgetDefaults?.lifetimeSpawnCap ?? 500,
 			events: { emit: (body) => bus.emit(body, rootSpanId) },
 			priceUsd,
@@ -11889,7 +12084,7 @@ function createEngine(options) {
 				...options.budgetDefaults?.lineage === void 0 ? {} : { limits: options.budgetDefaults.lineage }
 			}
 		});
-		const external = new ExternalRegistry(replayer);
+		const external = new ExternalRegistry(replayer, (body) => bus.emit(body, rootSpanId));
 		let transcriptCounter = 0;
 		const internals = {
 			runId,
@@ -11950,6 +12145,7 @@ function createEngine(options) {
 			updatedAt: new Date(realNow()).toISOString(),
 			...opts?.name === void 0 ? {} : { name: opts.name },
 			...opts?.tags === void 0 ? {} : { tags: opts.tags },
+			...ceilingUsd === void 0 ? {} : { budgetUsd: ceilingUsd },
 			workflowName: wf.name,
 			workflowHash: compiled === void 0 ? hashWorkflowBody(wf) : hashWorkflowSource(compiled.source),
 			...compiled === void 0 ? {} : { workflowSourceRef: workflowSourceRef(runId) }
@@ -11983,7 +12179,7 @@ function createEngine(options) {
 					const validation = await validateSchemaSpec(wf.argsSchema, args);
 					if (!validation.valid) throw new ConfigError(`arguments for workflow '${wf.name}' do not validate: ` + validation.issues.map((issue) => issue.message).join("; "));
 				}
-				const ctx = createCtx(internals);
+				const ctx = createCtx(internals, wf.kind === "workflow" ? wf : void 0);
 				const bodyPromise = (compiled === void 0 ? runner : options.runners?.sandbox).execute(wf, ctx, args);
 				const raced = await Promise.race([bodyPromise.then((result) => ({
 					kind: "done",
@@ -12125,6 +12321,7 @@ function createEngine(options) {
 				strict: resumeOptions?.dryRun ?? false,
 				invalidate: resumeOptions?.invalidate ?? [],
 				...resumeOptions?.lease === void 0 ? {} : { lease: resumeOptions.lease },
+				...typeof meta?.budgetUsd === "number" ? { budgetUsd: meta.budgetUsd } : {},
 				previewResolve
 			});
 		})();
@@ -12478,4 +12675,4 @@ function createSandboxBridge(ctx, options) {
 	};
 }
 //#endregion
-export { AWAIT_SCHEMA, AdmissionController, AdmissionRejectedError, AgentCallError, BUDGET_ABORT_REASON, BudgetExhaustedError, CANCEL_AGENT_SCHEMA, CHECKPOINT_FORMAT_V1, CLAIM_STATEMENT_MAX_CHARS, CLAIM_TTL_DAYS, COMPACTION_SUMMARY_PREFIX, CURRENT_HASH_VERSION, ConfigError, DEFAULT_CHILD_BUDGET_FRACTION, DEFAULT_COMPACTION_THRESHOLD, DEFAULT_ESCALATION_LIMITS, DEFAULT_FLAT_RESERVE_USD, DEFAULT_MAX_CHILDREN_PER_NODE, DEFAULT_MAX_DEPTH, DEFAULT_MAX_OSCILLATIONS_PER_KEY, DEFAULT_MAX_PINNED_WORKTREES, DEFAULT_MAX_REVISIONS_PER_RUN, DEFAULT_MAX_TOTAL_SPAWNS, DEFAULT_MAX_TURNS, DEFAULT_MODEL_RETRY_ATTEMPTS, DEFAULT_NO_PROGRESS_TURNS, DEFAULT_PER_RUN_CONCURRENCY, DEFAULT_RETRY_POLICY, DEFAULT_STREAM_IDLE_TIMEOUT_MS, DedupIndex, EMIT_RESULT_TOOL, EMPTY_SCHEMA_HASH, EMPTY_TOOLSET_HASH, ESCALATE_TOOL_NAME, ESCALATION_REPORT_SCHEMA, ESCALATION_REQUEST_SCHEMA, EventBus, ExternalRegistry, FINISH_SCHEMA, FINISH_TOOL_NAME, FileModelKnowledgeStore, FileTranscriptStore, GitWorktreeProvider, INBOX_PROPOSAL_TTL_DAYS, InMemoryStore, InMemoryTranscriptStore, InProcessRunner, InvalidResolutionError, JournalCompatibilityError, JournalMatcher, JournalMissError, JournalOrderViolation, JsonlFileStore, KB_ACTIVE_CLAIMS_CAP, KB_CARD_RENDER_BUDGET_CHARS, KeyedLimiter, KnowledgeCasError, LARGE_VALUE_WARN_BYTES, LEGACY_LTID_PREFIX, LEGACY_SIGNATURE_INPUTS, LINEAGE_SIG_VERSION, LeaseHeldError, LineageIndex, MASKED_SECRET, MAX_DEPTH_CEILING, ModelRetry, NoProgressDetector, NonSerializableValueError, ORCHESTRATE_WORKFLOW_NAME, OrchestratorCapConfigError, PARALLEL_AGENTS_SCHEMA, ParallelSiteCounter, PlanInvariantError, ROLE_EFFORT_DEFAULTS, ROOT_ACCOUNT, ROOT_SCOPE, RUN_PROFILES, ReplayPlanHashMismatch, Replayer, ResolutionArbiter, ResolutionFold, RulvarError, RunBudget, SPAWN_AGENT_SCHEMA, SandboxError, ScriptRejected, Semaphore, SpanRegistry, TOOL_NAME_PATTERN, TerminationAccount, WAIT_FOR_EVENTS_SCHEMA, WAIT_FOR_EVENTS_TOOL_NAME, WAKE_SUMMARY_RENDER_BUDGET_CHARS, admissionReserveUsd, agentErrorFromWire, agentErrorToWire, agentScope, applyClaimOps, applyStructuredOutputTier, approachSigCoarse, approachSigOf, archiveDeprecatedModelOps, atCompactionThreshold, buildAbandonFold, buildAdapterRegistry, buildCostReport, buildDeriverRegistry, buildOrchestratorTools, buildTerminationInitValue, buildToolContext, canRideLoopTurn, canonicalIsolationTag, canonicalizeLadder, canonicalizeSchema, capIssues, capsHashOf, checkFloors, checkpointRefFor, childCoveragePrefix, claimExpired, claimExpiry, claimIssues, claimOpIssues, classifyAgentError, classifyAttemptOutcome, collectDeclaredLadders, compactMessages, compilePermissionChain, compilePermissionPreset, compileVerifiedLayer, costReportFromJournal, countsAgainstLimit, createCanonicalIdMinter, createCtx, createEngine, createSandboxBridge, currentOnlyKeyRing, decodeCheckpoint, defineWorkflow, deriveContentKey, deriverV1, deriverV2, digestOf, dispositionHook, emptyDigestBlocks, emptyToolset, encodeCheckpoint, escalateTool, evaluatePermission, evaluateReuse, executeWorkflow, exhaustionCodeOf, extractCandidate, failoverTriggerOf, fallbackTriggerOf, filterClaimsForRun, finalizeFires, foldTermination, formatRePrompt, formatScopePath, hashWorkflowBody, hashWorkflowSource, identityJcs, isEscalated, isSchemaPairSpec, isStandardSchemaSpec, isStrictCompatibleSchema, kMaxOf, knowledgeHash, ladderLengthOf, ladderRungChoice, lexShellCommand, liftRetainedParts, lineageWeightOf, makeOrchestratorWorkflow, maskSecrets, maskSecretsDeep, maskSecretsJson, matchArgvPattern, matchShellCommand, mcp, mergeUsageLimits, modelEpochOf, modelKnowledgeCard, modelSpecIdentity, needsSeparateExtract, nextFailover, nodeLinkKey, normalizeApproachTag, normalizeEntry, normalizeFallbacks, orchestrate, parallelScope, parseModelRef, parseScopePath, phiInitialOf, pipelineScope, planNodeScope, priceUsdOf, profileCard, profileRegistrySnapshotHash, projectHistory, projectIdentity, projectToJsonSchema, proposalStatement, providerOf, readTerminationInit, registryKeyRing, remeasureQueue, replayDisposition, resolveModelInvocation, resolvePricing, resolveToolset, retryClassOf, retryDelayMs, roleConfiguredInRouting, roundOneDisposition, runAgent, runProfile, scanJournalCompatibility, schemaHash, schemaHashOfSpec, selectStructuredOutputTier, shouldCompact, spawnDepthOf, summarizeInstruction, summarizeOutput, terminationConfigDrift, tierWithinCaps, toApprovalDecision, toJournalValue, tool, toolContract, toolsetHash, ttlState, validateEditorialCommit, validateEntryShape, validateEscalationLimits, validateEscalationReport, validateSchemaSpec, validateTerminationLimits, workflowScope, workflowSourceRef, wrapJournalStore, wrapTranscriptStore };
+export { AWAIT_SCHEMA, AdmissionController, AdmissionRejectedError, AgentCallError, BUDGET_ABORT_REASON, BudgetExhaustedError, CANCEL_AGENT_SCHEMA, CHECKPOINT_FORMAT_V1, CLAIM_STATEMENT_MAX_CHARS, CLAIM_TTL_DAYS, COMPACTION_SUMMARY_PREFIX, CURRENT_HASH_VERSION, ConfigError, DEFAULT_CHILD_BUDGET_FRACTION, DEFAULT_COMPACTION_THRESHOLD, DEFAULT_ESCALATION_LIMITS, DEFAULT_FLAT_RESERVE_USD, DEFAULT_MAX_CHILDREN_PER_NODE, DEFAULT_MAX_DEPTH, DEFAULT_MAX_OSCILLATIONS_PER_KEY, DEFAULT_MAX_PINNED_WORKTREES, DEFAULT_MAX_REVISIONS_PER_RUN, DEFAULT_MAX_TOTAL_SPAWNS, DEFAULT_MAX_TURNS, DEFAULT_MODEL_RETRY_ATTEMPTS, DEFAULT_NO_PROGRESS_TURNS, DEFAULT_PER_RUN_CONCURRENCY, DEFAULT_RETRY_POLICY, DEFAULT_STREAM_IDLE_TIMEOUT_MS, DedupIndex, EMIT_RESULT_TOOL, EMPTY_SCHEMA_HASH, EMPTY_TOOLSET_HASH, ESCALATE_TOOL_NAME, ESCALATION_REPORT_SCHEMA, ESCALATION_REQUEST_SCHEMA, EventBus, ExternalRegistry, FINISH_SCHEMA, FINISH_TOOL_NAME, FileModelKnowledgeStore, FileTranscriptStore, GitWorktreeProvider, INBOX_PROPOSAL_TTL_DAYS, InMemoryStore, InMemoryTranscriptStore, InProcessRunner, InvalidResolutionError, JournalCompatibilityError, JournalMatcher, JournalMissError, JournalOrderViolation, JsonlFileStore, KB_ACTIVE_CLAIMS_CAP, KB_CARD_RENDER_BUDGET_CHARS, KeyedLimiter, KnowledgeCasError, LARGE_VALUE_WARN_BYTES, LEGACY_LTID_PREFIX, LEGACY_SIGNATURE_INPUTS, LINEAGE_SIG_VERSION, LeaseHeldError, LineageIndex, MASKED_SECRET, MAX_DEPTH_CEILING, ModelRetry, NoProgressDetector, NonSerializableValueError, ORCHESTRATE_WORKFLOW_NAME, OrchestratorCapConfigError, PARALLEL_AGENTS_SCHEMA, ParallelSiteCounter, PlanInvariantError, ROLE_EFFORT_DEFAULTS, ROOT_ACCOUNT, ROOT_SCOPE, RUN_PROFILES, ReplayPlanHashMismatch, Replayer, ResolutionArbiter, ResolutionFold, RulvarError, RunBudget, SPAWN_AGENT_SCHEMA, SandboxError, ScriptRejected, Semaphore, SpanRegistry, TOOL_NAME_PATTERN, TerminationAccount, WAIT_FOR_EVENTS_SCHEMA, WAIT_FOR_EVENTS_TOOL_NAME, WAKE_SUMMARY_RENDER_BUDGET_CHARS, admissionReserveUsd, agentErrorFromWire, agentErrorToWire, agentScope, applyClaimOps, applyStructuredOutputTier, approachSigCoarse, approachSigOf, archiveDeprecatedModelOps, atCompactionThreshold, buildAbandonFold, buildAdapterRegistry, buildCostReport, buildDeriverRegistry, buildOrchestratorTools, buildTerminationInitValue, buildToolContext, canRideLoopTurn, canonicalIsolationTag, canonicalizeLadder, canonicalizeSchema, capIssues, capsHashOf, checkFloors, checkpointRefFor, childCoveragePrefix, claimExpired, claimExpiry, claimIssues, claimOpIssues, classifyAgentError, classifyAttemptOutcome, collectDeclaredLadders, compactMessages, compilePermissionChain, compilePermissionPreset, compileVerifiedLayer, costReportFromJournal, countsAgainstLimit, createCanonicalIdMinter, createCtx, createEngine, createSandboxBridge, currentOnlyKeyRing, decodeCheckpoint, defineWorkflow, deriveContentKey, deriverV1, deriverV2, digestOf, dispositionHook, emptyDigestBlocks, emptyToolset, encodeCheckpoint, entryUsageSlices, escalateTool, evaluatePermission, evaluateReuse, executeWorkflow, exhaustionCodeOf, extractCandidate, failoverTriggerOf, fallbackTriggerOf, filterClaimsForRun, finalizeFires, foldTermination, formatRePrompt, formatScopePath, hashWorkflowBody, hashWorkflowSource, identityJcs, isEscalated, isSchemaPairSpec, isStandardSchemaSpec, isStrictCompatibleSchema, kMaxOf, knowledgeHash, ladderLengthOf, ladderRungChoice, lexShellCommand, liftRetainedParts, lineageWeightOf, makeOrchestratorWorkflow, maskSecrets, maskSecretsDeep, maskSecretsJson, matchArgvPattern, matchShellCommand, mcp, mergeUsageLimits, modelEpochOf, modelKnowledgeCard, modelSpecIdentity, needsSeparateExtract, nextFailover, nodeLinkKey, normalizeApproachTag, normalizeEntry, normalizeFallbacks, orchestrate, parallelScope, parseModelRef, parseScopePath, phiInitialOf, pipelineScope, planNodeScope, priceEntryUsage, priceUsdOf, profileCard, profileRegistrySnapshotHash, projectHistory, projectIdentity, projectToJsonSchema, proposalStatement, providerOf, readTerminationInit, registryKeyRing, remeasureQueue, replayDisposition, resolveModelInvocation, resolvePricing, resolveToolset, retryClassOf, retryDelayMs, roleConfiguredInRouting, roundOneDisposition, runAgent, runProfile, scanJournalCompatibility, schemaHash, schemaHashOfSpec, selectStructuredOutputTier, shouldCompact, spawnDepthOf, summarizeInstruction, summarizeOutput, terminationConfigDrift, tierWithinCaps, toApprovalDecision, toJournalValue, tool, toolContract, toolsetHash, ttlState, validateEditorialCommit, validateEntryShape, validateEscalationLimits, validateEscalationReport, validateSchemaSpec, validateTerminationLimits, workflowScope, workflowSourceRef, wrapJournalStore, wrapTranscriptStore };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rulvar/core",
-  "version": "1.3.2",
+  "version": "1.5.0",
   "description": "rulvar core: L0 contracts, journal kernel, ctx primitives, agent runtime, model router, tool system, dynamic orchestrator, InMemory and JSONL stores, event stream.",
   "type": "module",
   "license": "Apache-2.0",