@rulvar/core 1.4.0 → 1.5.1

package/dist/index.d.ts

@@ -602,6 +602,36 @@ type AbandonPayload = {
   retainCheckpoint?: boolean; /** Default false; counts against the pin cap (DEF-5). */
   retainWorktree?: boolean;
 };
+/** One serving model's slice of a multi-model agent call's usage. */
+interface UsageSlice {
+  servedBy: ModelRef;
+  usage: Usage;
+}
+/**
+* The per-model slices of a terminal entry: the recorded split when the
+* call spanned several models, else the whole usage attributed to
+* `servedBy`. The fallback is what makes every journal written before the
+* split shipped price exactly as it did before.
+*/
+declare function entryUsageSlices(entry: JournalEntry): UsageSlice[];
+/** A priced slice, plus the total and the gaps the price table did not cover. */
+interface PricedUsage {
+  /** Total of every slice the price table covered. */
+  usd: number;
+  /** Covered slices with their prices; the basis of per-model attribution. */
+  priced: Array<UsageSlice & {
+    usd: number;
+  }>;
+  /** Slices with no price row: surfaced as unpriced, never a silent zero. */
+  unpriced: UsageSlice[];
+}
+/**
+* The single pricing fold over one terminal entry, shared by the kernel
+* ledger and the CostReport fold so a run's total and its per-model
+* breakdown can never disagree. Each slice is priced at ITS OWN model's
+* rate.
+*/
+declare function priceEntryUsage(entry: JournalEntry, priceUsd: (servedBy: ModelRef, usage: Usage) => number | undefined): PricedUsage;
 /**
 * Final entry form (hashVersion 2).
 * All journaled values MUST be JSON-serializable; a violation raises a
@@ -627,6 +657,18 @@ type JournalEntry = {
   usage?: Usage; /** True when the stream was cut at the budget ceiling or by a stream failure. */
   usageApprox?: boolean; /** Who actually served (failover changes only this, never the key). */
   servedBy?: ModelRef;
+  /**
+  * Terminal agent entries whose phases were served by MORE THAN ONE
+  * model: usage split by the model that actually served each slice. The
+  * loop, extract, finalize, and summarize roles resolve independently,
+  * so a single agent call routinely spans models at different prices;
+  * pricing the whole call at `servedBy` bills the cheap extract at the
+  * loop model's rate. Absent when one model served the whole call, and
+  * on entries written before the split shipped: readers fall back to
+  * pricing `usage` at `servedBy`, which is exactly correct for those.
+  * Policy, never identity: it does not enter the content key.
+  */
+  usageByModel?: UsageSlice[];
   transcriptRef?: string;
   checkpointRef?: string;
   /**
@@ -2018,6 +2060,8 @@ interface TerminalPatch {
   usage?: Usage;
   usageApprox?: boolean;
   servedBy?: ModelRef;
+  /** Set only when the call spanned several serving models; see JournalEntry. */
+  usageByModel?: UsageSlice[];
   transcriptRef?: string;
   checkpointRef?: string;
   /** Terminal agent entries: Artifact list. */
@@ -2312,6 +2356,14 @@ interface CheckpointState {
   turns: number;
   /** Usage accumulated so far (not yet journaled: terminals carry totals). */
   usage: Usage;
+  /**
+  * The same usage split by serving model, so a dangling redispatch
+  * restores the per-model breakdown instead of collapsing every paid
+  * turn onto the loop model. Absent on checkpoints written before the
+  * split shipped: those restore the aggregate against the loop model,
+  * exactly as they did then.
+  */
+  usageByModel?: UsageSlice[];
   toolCallsUsed: number;
   schemaAttempts: number;
   /** Compaction points; producers arrive with M4-T03. */
@@ -2641,6 +2693,14 @@ interface AgentResult<T> {
   * differs from the requested spec only under transport failover.
   */
   servedBy: ModelRef;
+  /**
+  * Present only when the call spanned MORE THAN ONE serving model (the
+  * loop, extract, finalize, and summarize roles resolve independently):
+  * usage split per model, so `costUsd` and every cost bucket price each
+  * slice at its own rate. Absent for a single-model call, which
+  * (usage, servedBy) already describes exactly.
+  */
+  usageByModel?: UsageSlice[];
   transcriptRef: string;
   artifacts?: Artifact[];
   error?: AgentError;
@@ -3268,6 +3328,8 @@ declare class RunBudget {
   private usageInternal;
   private agentsSpawnedInternal;
   private exhaustedInternal;
+  /** Models already warned about; the warning fires once per model per run. */
+  private readonly unpricedWarned;
   constructor(options: {
     ceilingUsd?: number;
     lifetimeSpawnCap?: number;
@@ -5153,12 +5215,27 @@ interface Workflow<A = unknown, R = unknown> {
   readonly name: string;
   readonly argsSchema?: SchemaSpec<A>;
   readonly errorPolicy: ErrorPolicy;
+  /**
+  * Workflow defaults: the third layer of the resolution chain, under the
+  * call override and the agent profile and over the engine defaults.
+  * A workflow that declares nothing contributes no layer and resolves
+  * exactly as it did before. The layer follows the CALL TREE, not the
+  * file: a child spawned through `ctx.workflow` contributes ITS OWN
+  * defaults inside its scope, so nesting a cheap workflow under an
+  * expensive one does the obvious thing.
+  */
+  readonly model?: ModelSpec;
+  readonly routing?: Partial<Record<InvocationRole, ModelSpec>>;
+  readonly effort?: Effort;
   readonly body: (ctx: Ctx<never>, args: A) => Promise<R>;
 }
 declare function defineWorkflow<A, R, P extends ErrorPolicy = "strict">(meta: {
   name: string;
   args?: SchemaSpec<A>;
-  errorPolicy?: P;
+  errorPolicy?: P; /** Workflow defaults: resolution-chain layer 3. See Workflow. */
+  model?: ModelSpec;
+  routing?: Partial<Record<InvocationRole, ModelSpec>>;
+  effort?: Effort;
 }, body: (ctx: Ctx<P>, args: A) => Promise<R>): Workflow<A, R>;
 /**
 * Span-aware event sink: bodies are stamped into the WorkflowEvent
@@ -5262,7 +5339,11 @@ interface RunInternals {
 * one ctx object while journaling under their own scope paths (I3:
 * structure from call-and-return only).
 */
-declare function createCtx(internals: RunInternals): Ctx<ErrorPolicy>;
+declare function createCtx(internals: RunInternals, rootWorkflow?: {
+  model?: ModelSpec;
+  routing?: Partial<Record<InvocationRole, ModelSpec>>;
+  effort?: Effort;
+}): Ctx<ErrorPolicy>;
 /**
 * Runs a workflow body against a fresh ctx: the engine core that
 * engine.run wraps with RunHandle, events, and outcome assembly (M1-T11).
@@ -6019,4 +6100,4 @@ interface SandboxBridge {
 }
 declare function createSandboxBridge(ctx: Ctx<never>, options: SandboxBridgeOptions): SandboxBridge;
 //#endregion
-export { AWAIT_SCHEMA, AbandonAttempt, AbandonFold, AbandonPayload, AbandonedSpendView, AbortClass, type AdaptiveEvents, AdmissionController, AdmissionDecision, AdmissionRejectedError, AdmissionStatsBefore, AdmitLineage, AdmitRejectReason, AdmitSpec, AdmitVerdict, AgentCallError, AgentError, type AgentEvents, AgentIdentityInput, AgentOpts, AgentProfile, AgentProfilePermissions, AgentResult, AgentResultMeta, AgentStatus, ApproachSignatureInputs, ApprovalDecision, ApprovalIdentityInput, Artifact, AttemptOutcomeClass, BUDGET_ABORT_REASON, BriefOpts, BudgetAccountView, BudgetDefaults, BudgetExhaustedError, BudgetHooks, BudgetReserve, type Bytes, CANCEL_AGENT_SCHEMA, CHECKPOINT_FORMAT_V1, CLAIM_STATEMENT_MAX_CHARS, CLAIM_TTL_DAYS, COMPACTION_SUMMARY_PREFIX, CURRENT_HASH_VERSION, CacheHint, CacheTtl, CanUseTool, CanonicalId, CanonicalIdentity, CanonicalLadderSpec, CanonicalModelSpec, ChatEvent, ChatRequest, CheckpointState, ChildIdentityInput, type ClaimClass, type ClaimOp, type ClaimStatus, ClaimValidationOptions, CollectOpts, CollectedTurn, CompactionConfig, CompiledPermissionChain, CompiledWorkflow, ConfigError, type CoreEvents, CostAttribution, CostReport, CreateEngineOptions, Ctx, DEFAULT_CHILD_BUDGET_FRACTION, DEFAULT_COMPACTION_THRESHOLD, DEFAULT_ESCALATION_LIMITS, DEFAULT_FLAT_RESERVE_USD, DEFAULT_MAX_CHILDREN_PER_NODE, DEFAULT_MAX_DEPTH, DEFAULT_MAX_OSCILLATIONS_PER_KEY, DEFAULT_MAX_PINNED_WORKTREES, DEFAULT_MAX_REVISIONS_PER_RUN, DEFAULT_MAX_TOTAL_SPAWNS, DEFAULT_MAX_TURNS, DEFAULT_MODEL_RETRY_ATTEMPTS, DEFAULT_NO_PROGRESS_TURNS, DEFAULT_PER_RUN_CONCURRENCY, DEFAULT_RETRY_POLICY, DEFAULT_STREAM_IDLE_TIMEOUT_MS, DebitResult, DeclaredLadder, DedupIndex, DedupNote, DerivedKey, DeriverRegistry, DispositionRule, DispositionTable, DonorCandidate, DonorRef, DroppedItem, EMIT_RESULT_TOOL, EMPTY_SCHEMA_HASH, EMPTY_TOOLSET_HASH, ESCALATE_TOOL_NAME, ESCALATION_REPORT_SCHEMA, ESCALATION_REQUEST_SCHEMA, EffectiveUsageLimits, Effort, Engine, EngineDefaults, EntryKind, EntryRef, EntryStatus, ErrorClass, ErrorCode, ErrorPolicy, EscalatedResult, EscalationDecision, EscalationDigest, EscalationKind, EscalationLimits, EscalationOptions, EscalationReport, EscalationRequest, EventBus, type EvidenceRef, ExtensionAppendInput, ExtensionDispatchSpec, ExternalIdentityInput, ExternalRegistry, ExtractNecessityInput, FINISH_SCHEMA, FINISH_TOOL_NAME, FailoverTarget, FailoverTrigger, FallbackField, FallbackTrigger, FileModelKnowledgeStore, FileModelKnowledgeStoreOptions, FileTranscriptStore, FinishInfo, Gate, GateAudit, type GateRecord, GitWorktreeProvider, GitWorktreeProviderOptions, GraftBoot, HashVersion, HookVerdict, INBOX_PROPOSAL_TTL_DAYS, IdentityInput, InMemoryStore, InMemoryTranscriptStore, InProcessRunner, InvalidResolutionError, InvocationRole, type IsolationProvider, type IsolationSpec, Issue$1 as Issue, JournalCompatSubCode, JournalCompatibilityError, JournalEntry, JournalMatcher, JournalMissError, JournalOperation, JournalOrderViolation, JournalSerializationHook, type JournalStore, type Json, JsonSchema, JsonlFileStore, KB_ACTIVE_CLAIMS_CAP, KB_CARD_RENDER_BUDGET_CHARS, type KbProposal, type KbProposalTrigger, KeyDeriver, KeyRing, KeyedLimiter, KnowledgeCasError, type KnowledgeSnapshot, LARGE_VALUE_WARN_BYTES, LEGACY_LTID_PREFIX, LEGACY_SIGNATURE_INPUTS, LINEAGE_SIG_VERSION, LadderSpec, type LeasableStore, type Lease, LeaseHeldError, Ledger, LineageCounters, LineageIndex, LineageRef, LineageRelation, LineageStats, LogicalTaskId, MASKED_SECRET, MAX_DEPTH_CEILING, MatchResult, McpConfig, MechanicalGateProfile, MechanicalGateVerdict, type ModelCaps, ModelChoice, type ModelClaim, ModelEpochInputs, type ModelKnowledgeHandle, type ModelKnowledgeStore, ModelListConstraint, ModelRef, ModelRetry, ModelSpec, Msg, NoProgressDetector, NodeId, NodeLinkValue, NonSerializableValueError, ORCHESTRATE_WORKFLOW_NAME, OnEscalation, OperationDisposition, OrchestrateOptions, OrchestratorBudgetSpec, OrchestratorCapConfigError, OrchestratorExtension, OrchestratorExtensionIO, OrchestratorRuntime, Out, PARALLEL_AGENTS_SCHEMA, ParallelSiteCounter, Part, PendingExternal, PendingToolTurn, PermissionConfig, PermissionGate, PermissionHook, PermissionPreset, PermissionRule, PermissionVerdict, PhaseTarget, PipelineCollected, PipelineOpts, PlanInvariantError, PriceTable, type Pricing, type ProviderAdapter, QualityFloors, ROLE_EFFORT_DEFAULTS, ROOT_ACCOUNT, ROOT_SCOPE, RUN_PROFILES, RandIdentityInput, RandPayload, RefEntryAppender, RefEntryClassification, RefusalInfo, ReplayDisposition, ReplayMode, ReplayPlanHashMismatch, Replayer, ResolutionArbiter, ResolutionAttempt, ResolutionBy, ResolutionFold, ResolutionLayer, ResolutionOutcome, ResolutionPayload, ResolvedInvocation, ResolvedToolset, ResumeHandle, ResumeOptions, ResumePreview, ResumeReport, RetryClass, RetryPolicy, ReuseConfig, RiskRuleValue, Role, RulvarError, RulvarErrorCode, RunAgentOptions, RunBudget, RunEventSink, type RunFilter, RunHandle, RunInternals, type RunMeta, RunOptions, RunOutcome, RunProfile, RunStatus, RuntimeEventSink, SPAWN_AGENT_SCHEMA, SandboxBridge, SandboxBridgeOptions, SandboxError, SandboxHostToWorker, SandboxMethod, SandboxWorkerToHost, SchemaPair, SchemaSpec, SchemaValidationResult, ScopeSegment, ScriptRejected, ScriptRunner, ScrubNote, Semaphore, SerializationHook, Settled, ShellPatternRules, ShellSegment, ShellVerdict, SinglePhaseAppend, SpanMinter, SpanRegistry, SpawnAdmissionValue, SpawnAgentParams, SpawnKey, SpawnLineage, SpawnLineageOpt, SpawnOrigin, SpawnRecord, Spend, Stage, type StandardJSONSchemaV1, type StandardSchemaV1, StepIdentityInput, StructuredOutputTier, SuspendedAppend, SuspensionState, TOOL_NAME_PATTERN, type TaskClass, TaskDigest, TaskSpec, TerminalPatch, TerminationAccount, TerminationAccountSnapshot, TerminationDeniedValue, TerminationDeniedWriter, TerminationInitValue, TerminationLimits, TerminationResource, ToolCallRequest, ToolChoice, type ToolContext, ToolContextSeed, ToolContract, type ToolDef, type ToolEvents, type ToolExecutor, ToolInit, type ToolRisk, ToolRuntime, type ToolSource, type ToolSourceSession, ToolsOption, TranscriptSerializationHook, type TranscriptStore, TriggerClass, TtlState, Usage, UsageLimits, VerifiedRecommendation, WAIT_FOR_EVENTS_SCHEMA, WAIT_FOR_EVENTS_TOOL_NAME, WAKE_SUMMARY_RENDER_BUDGET_CHARS, WakeBudgetBlock, WakeDigest, WakeTrigger, WireError, Workflow, WorkflowCallOpts, type WorkflowEvent, type WorkflowEventBody, WorkflowRegistry, admissionReserveUsd, agentErrorFromWire, agentErrorToWire, agentScope, applyClaimOps, applyStructuredOutputTier, approachSigCoarse, approachSigOf, archiveDeprecatedModelOps, atCompactionThreshold, buildAbandonFold, buildAdapterRegistry, buildCostReport, buildDeriverRegistry, buildOrchestratorTools, buildTerminationInitValue, buildToolContext, canRideLoopTurn, canonicalIsolationTag, canonicalizeLadder, canonicalizeSchema, capIssues, capsHashOf, checkFloors, checkpointRefFor, childCoveragePrefix, claimExpired, claimExpiry, claimIssues, claimOpIssues, classifyAgentError, classifyAttemptOutcome, collectDeclaredLadders, compactMessages, compilePermissionChain, compilePermissionPreset, compileVerifiedLayer, costReportFromJournal, countsAgainstLimit, createCanonicalIdMinter, createCtx, createEngine, createSandboxBridge, currentOnlyKeyRing, decodeCheckpoint, defineWorkflow, deriveContentKey, deriverV1, deriverV2, digestOf, dispositionHook, emptyDigestBlocks, emptyToolset, encodeCheckpoint, escalateTool, evaluatePermission, evaluateReuse, executeWorkflow, exhaustionCodeOf, extractCandidate, failoverTriggerOf, fallbackTriggerOf, filterClaimsForRun, finalizeFires, foldTermination, formatRePrompt, formatScopePath, hashWorkflowBody, hashWorkflowSource, identityJcs, isEscalated, isSchemaPairSpec, isStandardSchemaSpec, isStrictCompatibleSchema, kMaxOf, knowledgeHash, ladderLengthOf, ladderRungChoice, lexShellCommand, liftRetainedParts, lineageWeightOf, makeOrchestratorWorkflow, maskSecrets, maskSecretsDeep, maskSecretsJson, matchArgvPattern, matchShellCommand, mcp, mergeUsageLimits, modelEpochOf, modelKnowledgeCard, modelSpecIdentity, needsSeparateExtract, nextFailover, nodeLinkKey, normalizeApproachTag, normalizeEntry, normalizeFallbacks, orchestrate, parallelScope, parseModelRef, parseScopePath, phiInitialOf, pipelineScope, planNodeScope, priceUsdOf, profileCard, profileRegistrySnapshotHash, projectHistory, projectIdentity, projectToJsonSchema, proposalStatement, providerOf, readTerminationInit, registryKeyRing, remeasureQueue, replayDisposition, resolveModelInvocation, resolvePricing, resolveToolset, retryClassOf, retryDelayMs, roleConfiguredInRouting, roundOneDisposition, runAgent, runProfile, scanJournalCompatibility, schemaHash, schemaHashOfSpec, selectStructuredOutputTier, shouldCompact, spawnDepthOf, summarizeInstruction, summarizeOutput, terminationConfigDrift, tierWithinCaps, toApprovalDecision, toJournalValue, tool, toolContract, toolsetHash, ttlState, validateEditorialCommit, validateEntryShape, validateEscalationLimits, validateEscalationReport, validateSchemaSpec, validateTerminationLimits, workflowScope, workflowSourceRef, wrapJournalStore, wrapTranscriptStore };
+export { AWAIT_SCHEMA, AbandonAttempt, AbandonFold, AbandonPayload, AbandonedSpendView, AbortClass, type AdaptiveEvents, AdmissionController, AdmissionDecision, AdmissionRejectedError, AdmissionStatsBefore, AdmitLineage, AdmitRejectReason, AdmitSpec, AdmitVerdict, AgentCallError, AgentError, type AgentEvents, AgentIdentityInput, AgentOpts, AgentProfile, AgentProfilePermissions, AgentResult, AgentResultMeta, AgentStatus, ApproachSignatureInputs, ApprovalDecision, ApprovalIdentityInput, Artifact, AttemptOutcomeClass, BUDGET_ABORT_REASON, BriefOpts, BudgetAccountView, BudgetDefaults, BudgetExhaustedError, BudgetHooks, BudgetReserve, type Bytes, CANCEL_AGENT_SCHEMA, CHECKPOINT_FORMAT_V1, CLAIM_STATEMENT_MAX_CHARS, CLAIM_TTL_DAYS, COMPACTION_SUMMARY_PREFIX, CURRENT_HASH_VERSION, CacheHint, CacheTtl, CanUseTool, CanonicalId, CanonicalIdentity, CanonicalLadderSpec, CanonicalModelSpec, ChatEvent, ChatRequest, CheckpointState, ChildIdentityInput, type ClaimClass, type ClaimOp, type ClaimStatus, ClaimValidationOptions, CollectOpts, CollectedTurn, CompactionConfig, CompiledPermissionChain, CompiledWorkflow, ConfigError, type CoreEvents, CostAttribution, CostReport, CreateEngineOptions, Ctx, DEFAULT_CHILD_BUDGET_FRACTION, DEFAULT_COMPACTION_THRESHOLD, DEFAULT_ESCALATION_LIMITS, DEFAULT_FLAT_RESERVE_USD, DEFAULT_MAX_CHILDREN_PER_NODE, DEFAULT_MAX_DEPTH, DEFAULT_MAX_OSCILLATIONS_PER_KEY, DEFAULT_MAX_PINNED_WORKTREES, DEFAULT_MAX_REVISIONS_PER_RUN, DEFAULT_MAX_TOTAL_SPAWNS, DEFAULT_MAX_TURNS, DEFAULT_MODEL_RETRY_ATTEMPTS, DEFAULT_NO_PROGRESS_TURNS, DEFAULT_PER_RUN_CONCURRENCY, DEFAULT_RETRY_POLICY, DEFAULT_STREAM_IDLE_TIMEOUT_MS, DebitResult, DeclaredLadder, DedupIndex, DedupNote, DerivedKey, DeriverRegistry, DispositionRule, DispositionTable, DonorCandidate, DonorRef, DroppedItem, EMIT_RESULT_TOOL, EMPTY_SCHEMA_HASH, EMPTY_TOOLSET_HASH, ESCALATE_TOOL_NAME, ESCALATION_REPORT_SCHEMA, ESCALATION_REQUEST_SCHEMA, EffectiveUsageLimits, Effort, Engine, EngineDefaults, EntryKind, EntryRef, EntryStatus, ErrorClass, ErrorCode, ErrorPolicy, EscalatedResult, EscalationDecision, EscalationDigest, EscalationKind, EscalationLimits, EscalationOptions, EscalationReport, EscalationRequest, EventBus, type EvidenceRef, ExtensionAppendInput, ExtensionDispatchSpec, ExternalIdentityInput, ExternalRegistry, ExtractNecessityInput, FINISH_SCHEMA, FINISH_TOOL_NAME, FailoverTarget, FailoverTrigger, FallbackField, FallbackTrigger, FileModelKnowledgeStore, FileModelKnowledgeStoreOptions, FileTranscriptStore, FinishInfo, Gate, GateAudit, type GateRecord, GitWorktreeProvider, GitWorktreeProviderOptions, GraftBoot, HashVersion, HookVerdict, INBOX_PROPOSAL_TTL_DAYS, IdentityInput, InMemoryStore, InMemoryTranscriptStore, InProcessRunner, InvalidResolutionError, InvocationRole, type IsolationProvider, type IsolationSpec, Issue$1 as Issue, JournalCompatSubCode, JournalCompatibilityError, JournalEntry, JournalMatcher, JournalMissError, JournalOperation, JournalOrderViolation, JournalSerializationHook, type JournalStore, type Json, JsonSchema, JsonlFileStore, KB_ACTIVE_CLAIMS_CAP, KB_CARD_RENDER_BUDGET_CHARS, type KbProposal, type KbProposalTrigger, KeyDeriver, KeyRing, KeyedLimiter, KnowledgeCasError, type KnowledgeSnapshot, LARGE_VALUE_WARN_BYTES, LEGACY_LTID_PREFIX, LEGACY_SIGNATURE_INPUTS, LINEAGE_SIG_VERSION, LadderSpec, type LeasableStore, type Lease, LeaseHeldError, Ledger, LineageCounters, LineageIndex, LineageRef, LineageRelation, LineageStats, LogicalTaskId, MASKED_SECRET, MAX_DEPTH_CEILING, MatchResult, McpConfig, MechanicalGateProfile, MechanicalGateVerdict, type ModelCaps, ModelChoice, type ModelClaim, ModelEpochInputs, type ModelKnowledgeHandle, type ModelKnowledgeStore, ModelListConstraint, ModelRef, ModelRetry, ModelSpec, Msg, NoProgressDetector, NodeId, NodeLinkValue, NonSerializableValueError, ORCHESTRATE_WORKFLOW_NAME, OnEscalation, OperationDisposition, OrchestrateOptions, OrchestratorBudgetSpec, OrchestratorCapConfigError, OrchestratorExtension, OrchestratorExtensionIO, OrchestratorRuntime, Out, PARALLEL_AGENTS_SCHEMA, ParallelSiteCounter, Part, PendingExternal, PendingToolTurn, PermissionConfig, PermissionGate, PermissionHook, PermissionPreset, PermissionRule, PermissionVerdict, PhaseTarget, PipelineCollected, PipelineOpts, PlanInvariantError, PriceTable, PricedUsage, type Pricing, type ProviderAdapter, QualityFloors, ROLE_EFFORT_DEFAULTS, ROOT_ACCOUNT, ROOT_SCOPE, RUN_PROFILES, RandIdentityInput, RandPayload, RefEntryAppender, RefEntryClassification, RefusalInfo, ReplayDisposition, ReplayMode, ReplayPlanHashMismatch, Replayer, ResolutionArbiter, ResolutionAttempt, ResolutionBy, ResolutionFold, ResolutionLayer, ResolutionOutcome, ResolutionPayload, ResolvedInvocation, ResolvedToolset, ResumeHandle, ResumeOptions, ResumePreview, ResumeReport, RetryClass, RetryPolicy, ReuseConfig, RiskRuleValue, Role, RulvarError, RulvarErrorCode, RunAgentOptions, RunBudget, RunEventSink, type RunFilter, RunHandle, RunInternals, type RunMeta, RunOptions, RunOutcome, RunProfile, RunStatus, RuntimeEventSink, SPAWN_AGENT_SCHEMA, SandboxBridge, SandboxBridgeOptions, SandboxError, SandboxHostToWorker, SandboxMethod, SandboxWorkerToHost, SchemaPair, SchemaSpec, SchemaValidationResult, ScopeSegment, ScriptRejected, ScriptRunner, ScrubNote, Semaphore, SerializationHook, Settled, ShellPatternRules, ShellSegment, ShellVerdict, SinglePhaseAppend, SpanMinter, SpanRegistry, SpawnAdmissionValue, SpawnAgentParams, SpawnKey, SpawnLineage, SpawnLineageOpt, SpawnOrigin, SpawnRecord, Spend, Stage, type StandardJSONSchemaV1, type StandardSchemaV1, StepIdentityInput, StructuredOutputTier, SuspendedAppend, SuspensionState, TOOL_NAME_PATTERN, type TaskClass, TaskDigest, TaskSpec, TerminalPatch, TerminationAccount, TerminationAccountSnapshot, TerminationDeniedValue, TerminationDeniedWriter, TerminationInitValue, TerminationLimits, TerminationResource, ToolCallRequest, ToolChoice, type ToolContext, ToolContextSeed, ToolContract, type ToolDef, type ToolEvents, type ToolExecutor, ToolInit, type ToolRisk, ToolRuntime, type ToolSource, type ToolSourceSession, ToolsOption, TranscriptSerializationHook, type TranscriptStore, TriggerClass, TtlState, Usage, UsageLimits, UsageSlice, VerifiedRecommendation, WAIT_FOR_EVENTS_SCHEMA, WAIT_FOR_EVENTS_TOOL_NAME, WAKE_SUMMARY_RENDER_BUDGET_CHARS, WakeBudgetBlock, WakeDigest, WakeTrigger, WireError, Workflow, WorkflowCallOpts, type WorkflowEvent, type WorkflowEventBody, WorkflowRegistry, admissionReserveUsd, agentErrorFromWire, agentErrorToWire, agentScope, applyClaimOps, applyStructuredOutputTier, approachSigCoarse, approachSigOf, archiveDeprecatedModelOps, atCompactionThreshold, buildAbandonFold, buildAdapterRegistry, buildCostReport, buildDeriverRegistry, buildOrchestratorTools, buildTerminationInitValue, buildToolContext, canRideLoopTurn, canonicalIsolationTag, canonicalizeLadder, canonicalizeSchema, capIssues, capsHashOf, checkFloors, checkpointRefFor, childCoveragePrefix, claimExpired, claimExpiry, claimIssues, claimOpIssues, classifyAgentError, classifyAttemptOutcome, collectDeclaredLadders, compactMessages, compilePermissionChain, compilePermissionPreset, compileVerifiedLayer, costReportFromJournal, countsAgainstLimit, createCanonicalIdMinter, createCtx, createEngine, createSandboxBridge, currentOnlyKeyRing, decodeCheckpoint, defineWorkflow, deriveContentKey, deriverV1, deriverV2, digestOf, dispositionHook, emptyDigestBlocks, emptyToolset, encodeCheckpoint, entryUsageSlices, escalateTool, evaluatePermission, evaluateReuse, executeWorkflow, exhaustionCodeOf, extractCandidate, failoverTriggerOf, fallbackTriggerOf, filterClaimsForRun, finalizeFires, foldTermination, formatRePrompt, formatScopePath, hashWorkflowBody, hashWorkflowSource, identityJcs, isEscalated, isSchemaPairSpec, isStandardSchemaSpec, isStrictCompatibleSchema, kMaxOf, knowledgeHash, ladderLengthOf, ladderRungChoice, lexShellCommand, liftRetainedParts, lineageWeightOf, makeOrchestratorWorkflow, maskSecrets, maskSecretsDeep, maskSecretsJson, matchArgvPattern, matchShellCommand, mcp, mergeUsageLimits, modelEpochOf, modelKnowledgeCard, modelSpecIdentity, needsSeparateExtract, nextFailover, nodeLinkKey, normalizeApproachTag, normalizeEntry, normalizeFallbacks, orchestrate, parallelScope, parseModelRef, parseScopePath, phiInitialOf, pipelineScope, planNodeScope, priceEntryUsage, priceUsdOf, profileCard, profileRegistrySnapshotHash, projectHistory, projectIdentity, projectToJsonSchema, proposalStatement, providerOf, readTerminationInit, registryKeyRing, remeasureQueue, replayDisposition, resolveModelInvocation, resolvePricing, resolveToolset, retryClassOf, retryDelayMs, roleConfiguredInRouting, roundOneDisposition, runAgent, runProfile, scanJournalCompatibility, schemaHash, schemaHashOfSpec, selectStructuredOutputTier, shouldCompact, spawnDepthOf, summarizeInstruction, summarizeOutput, terminationConfigDrift, tierWithinCaps, toApprovalDecision, toJournalValue, tool, toolContract, toolsetHash, ttlState, validateEditorialCommit, validateEntryShape, validateEscalationLimits, validateEscalationReport, validateSchemaSpec, validateTerminationLimits, workflowScope, workflowSourceRef, wrapJournalStore, wrapTranscriptStore };

package/dist/index.js

@@ -1750,6 +1750,46 @@ async function validateSchemaSpec(spec, value) {
 /** 1 = round 1; 2 = current. */
 const CURRENT_HASH_VERSION = 2;
 /**
+* The per-model slices of a terminal entry: the recorded split when the
+* call spanned several models, else the whole usage attributed to
+* `servedBy`. The fallback is what makes every journal written before the
+* split shipped price exactly as it did before.
+*/
+function entryUsageSlices(entry) {
+	if (entry.usage === void 0) return [];
+	if (entry.usageByModel !== void 0 && entry.usageByModel.length > 0) return entry.usageByModel;
+	return entry.servedBy === void 0 ? [] : [{
+		servedBy: entry.servedBy,
+		usage: entry.usage
+	}];
+}
+/**
+* The single pricing fold over one terminal entry, shared by the kernel
+* ledger and the CostReport fold so a run's total and its per-model
+* breakdown can never disagree. Each slice is priced at ITS OWN model's
+* rate.
+*/
+function priceEntryUsage(entry, priceUsd) {
+	const result = {
+		usd: 0,
+		priced: [],
+		unpriced: []
+	};
+	for (const slice of entryUsageSlices(entry)) {
+		const usd = priceUsd(slice.servedBy, slice.usage);
+		if (usd === void 0) {
+			result.unpriced.push(slice);
+			continue;
+		}
+		result.usd += usd;
+		result.priced.push({
+			...slice,
+			usd
+		});
+	}
+	return result;
+}
+/**
 * Round-1 normalization: hashVersion is taken from `hashVersion`, else
 * from the legacy `v` field, else 1. Stores are never rewritten;
 * normalization happens at read.
@@ -3201,7 +3241,7 @@ function scanJournalCompatibility(runId, entries, registry) {
 				min,
 				max
 			},
-			hint: tooNew ? "upgrade rulvar" : `enable deriverV${entry.hashVersion} from @rulvar/compat via extraDerivers`
+			hint: tooNew ? "upgrade rulvar" : `register a hashVersion ${entry.hashVersion} KeyDeriver through createEngine({ extraDerivers }); @rulvar/compat ships the frozen profiles`
 		});
 	}
 }
@@ -5443,6 +5483,7 @@ var Replayer = class {
 			if (patch.usage !== void 0) entry.usage = patch.usage;
 			if (patch.usageApprox !== void 0) entry.usageApprox = patch.usageApprox;
 			if (patch.servedBy !== void 0) entry.servedBy = patch.servedBy;
+			if (patch.usageByModel !== void 0) entry.usageByModel = patch.usageByModel;
 			if (patch.transcriptRef !== void 0) entry.transcriptRef = patch.transcriptRef;
 			if (patch.checkpointRef !== void 0) entry.checkpointRef = patch.checkpointRef;
 			if (patch.artifacts !== void 0) entry.artifacts = toJournalValue(patch.artifacts, "terminal artifacts");
@@ -5486,7 +5527,7 @@ var Replayer = class {
 			usage.cacheReadTokens += entry.usage.cacheReadTokens;
 			usage.cacheWriteTokens += entry.usage.cacheWriteTokens;
 			reasoning += entry.usage.reasoningTokens ?? 0;
-			usd += this.priceUsd?.(entry.servedBy, entry.usage) ?? 0;
+			if (this.priceUsd !== void 0) usd += priceEntryUsage(entry, this.priceUsd).usd;
 		}
 		if (reasoning > 0) usage.reasoningTokens = reasoning;
 		return {
@@ -6178,18 +6219,13 @@ function costReportFromJournal(entries, priceUsd) {
 	for (const entry of entries) {
 		if (entry.kind !== "resolution" && entry.kind !== "abandon" && abandonFold.isAbandoned(entry.ref ?? entry.seq)) continue;
 		if (entry.status === "running" || entry.usage === void 0) continue;
-		const servedBy = entry.servedBy;
-		if (servedBy === void 0) continue;
-		const usd = priceUsd(servedBy, entry.usage);
-		if (usd === void 0) {
-			unpriced.push({
-				model: servedBy,
-				usage: entry.usage
-			});
-			continue;
-		}
-		byModel[servedBy] = (byModel[servedBy] ?? 0) + usd;
-		totalUsd += usd;
+		const priced = priceEntryUsage(entry, priceUsd);
+		for (const slice of priced.unpriced) unpriced.push({
+			model: slice.servedBy,
+			usage: slice.usage
+		});
+		for (const slice of priced.priced) byModel[slice.servedBy] = (byModel[slice.servedBy] ?? 0) + slice.usd;
+		totalUsd += priced.usd;
 	}
 	return {
 		totalUsd,
@@ -6822,7 +6858,13 @@ function resolveModelInvocation(options) {
 	});
 	const requestedEffort = merged.effort ?? ROLE_EFFORT_DEFAULTS[role];
 	const { adapterId, model } = parseModelRef(merged.model);
-	const caps = options.capsOf(merged.model);
+	let caps;
+	try {
+		caps = options.capsOf(merged.model);
+	} catch (thrown) {
+		if (thrown instanceof ConfigError) throw new ConfigError(`role '${role}': ${thrown.message}`);
+		throw thrown;
+	}
 	const scrubs = [];
 	let wireEffort = requestedEffort;
 	if (wireEffort !== void 0 && !caps.reasoningEfforts.includes(wireEffort)) {
@@ -7735,6 +7777,7 @@ async function runAgent(options) {
 		}]
 	}];
 	let totalUsage = ZERO_USAGE$1;
+	const usageByModel = /* @__PURE__ */ new Map();
 	let turns = 0;
 	let schemaAttempts = 0;
 	let output = null;
@@ -7764,8 +7807,31 @@ async function runAgent(options) {
 		toolCallsUsed = restored.toolCallsUsed;
 		schemaAttempts = restored.schemaAttempts;
 		compactionPoints.push(...restored.compaction);
-		options.budget?.onUsage(restored.usage, servedBy);
+		const restoredSlices = restored.usageByModel ?? [{
+			servedBy,
+			usage: restored.usage
+		}];
+		for (const slice of restoredSlices) {
+			usageByModel.set(slice.servedBy, addUsage(usageByModel.get(slice.servedBy) ?? ZERO_USAGE$1, slice.usage));
+			options.budget?.onUsage(slice.usage, slice.servedBy);
+		}
 	}
+	const usageSlices = () => [...usageByModel].map(([sliceServedBy, usage]) => ({
+		servedBy: sliceServedBy,
+		usage
+	}));
+	/**
+	* Every slice priced at ITS OWN model's rate. An unpriced model
+	* contributes zero here and surfaces through CostReport.unpriced, never
+	* as a silent zero.
+	*/
+	const priceRecordedUsage = () => {
+		const price = options.priceUsd;
+		if (price === void 0) return 0;
+		let usd = 0;
+		for (const [sliceServedBy, usage] of usageByModel) usd += price(sliceServedBy, usage) ?? 0;
+		return usd;
+	};
 	const saveBoundary = async (pending) => {
 		if (options.checkpoint === void 0) return;
 		await options.checkpoint.save({
@@ -7773,6 +7839,7 @@ async function runAgent(options) {
 			messages: [...messages],
 			turns,
 			usage: totalUsage,
+			usageByModel: usageSlices(),
 			toolCallsUsed,
 			schemaAttempts,
 			compaction: [...compactionPoints],
@@ -7886,7 +7953,7 @@ async function runAgent(options) {
 					continue;
 				}
 				const request = validation.value;
-				const spentSoFar = options.priceUsd?.(servedBy, totalUsage) ?? 0;
+				const spentSoFar = priceRecordedUsage();
 				if (countsAgainstLimit(request.kind) && spentSoFar < options.escalation.minSpendUsd) {
 					events?.emit({
 						type: "tool:end",
@@ -8005,6 +8072,7 @@ async function runAgent(options) {
 			invariantViolation = thrown instanceof Error ? thrown.message : String(thrown);
 		}
 		totalUsage = addUsage(totalUsage, usage);
+		usageByModel.set(ref, addUsage(usageByModel.get(ref) ?? ZERO_USAGE$1, usage));
 		const remainder = {
 			inputTokens: Math.max(0, usage.inputTokens - reported.inputTokens),
 			outputTokens: Math.max(0, usage.outputTokens - reported.outputTokens),
@@ -8584,7 +8652,7 @@ async function runAgent(options) {
 		const blob = new TextEncoder().encode(JSON.stringify({ messages }));
 		await options.transcript.put(transcriptRef, blob);
 	}
-	const costUsd = options.priceUsd?.(servedBy, totalUsage) ?? 0;
+	const costUsd = priceRecordedUsage();
 	const result = {
 		status,
 		output: status === "ok" ? output : output ?? null,
@@ -8594,6 +8662,7 @@ async function runAgent(options) {
 		servedBy,
 		transcriptRef
 	};
+	if (usageByModel.size > 1) result.usageByModel = usageSlices();
 	if (agentError !== void 0) result.error = agentError;
 	if (escalationRequest !== void 0) result.escalationRequest = escalationRequest;
 	if (abortClass !== void 0) result.abortClass = abortClass;
@@ -8660,6 +8729,8 @@ var RunBudget = class {
 	usageInternal = { ...ZERO_USAGE };
 	agentsSpawnedInternal = 0;
 	exhaustedInternal = false;
+	/** Models already warned about; the warning fires once per model per run. */
+	unpricedWarned = /* @__PURE__ */ new Set();
 	constructor(options) {
 		if (options.ceilingUsd !== void 0) this.ceilingUsd = options.ceilingUsd;
 		this.lifetimeSpawnCap = options.lifetimeSpawnCap ?? 500;
@@ -8864,7 +8935,16 @@ var RunBudget = class {
 		};
 		const reasoning = (this.usageInternal.reasoningTokens ?? 0) + (usage.reasoningTokens ?? 0);
 		if (reasoning > 0) this.usageInternal.reasoningTokens = reasoning;
-		const usd = this.priceUsd?.(servedBy, usage) ?? 0;
+		const priced = this.priceUsd?.(servedBy, usage);
+		if (priced === void 0 && this.ceilingUsd !== void 0 && !this.unpricedWarned.has(servedBy)) {
+			this.unpricedWarned.add(servedBy);
+			this.events?.emit({
+				type: "log",
+				level: "warn",
+				msg: `no price row for '${servedBy}': its usage does not debit the budget, so the ${this.ceilingUsd} USD run ceiling does NOT bound this model. Add it to createEngine({ pricing }) to cap it; its usage is reported under CostReport.unpriced`
+			});
+		}
+		const usd = priced ?? 0;
 		for (const account of this.chainOf(accountScope)) {
 			account.spentUsd += usd;
 			if (account.ceilingUsd !== void 0 && account.spentUsd >= account.ceilingUsd && !account.controller.signal.aborted) {
@@ -9569,11 +9649,22 @@ var AgentCallError = class extends Error {
 		if (entryRef !== void 0) this.entryRef = entryRef;
 	}
 };
+/** The workflow-defaults layer a Workflow value contributes, or nothing. */
+function workflowLayerOf(wf) {
+	const layer = {};
+	if (wf.model !== void 0) layer.model = wf.model;
+	if (wf.routing !== void 0) layer.routing = wf.routing;
+	if (wf.effort !== void 0) layer.effort = wf.effort;
+	return Object.keys(layer).length === 0 ? void 0 : layer;
+}
 function defineWorkflow(meta, body) {
 	const wf = {
 		kind: "workflow",
 		name: meta.name,
 		errorPolicy: meta.errorPolicy ?? "strict",
+		...meta.model === void 0 ? {} : { model: meta.model },
+		...meta.routing === void 0 ? {} : { routing: meta.routing },
+		...meta.effort === void 0 ? {} : { effort: meta.effort },
 		body
 	};
 	if (meta.args !== void 0) return {
@@ -9615,19 +9706,24 @@ function buildEscalationReport(request, result, worktreePatchRef) {
 * one ctx object while journaling under their own scope paths (I3:
 * structure from call-and-return only).
 */
-function createCtx(internals) {
+function createCtx(internals, rootWorkflow) {
 	const als = new AsyncLocalStorage();
 	const sites = new ParallelSiteCounter();
+	const rootWorkflowLayer = rootWorkflow === void 0 ? void 0 : workflowLayerOf(rootWorkflow);
 	const rootState = {
 		scope: "",
-		spanId: internals.rootSpanId
+		spanId: internals.rootSpanId,
+		...rootWorkflowLayer === void 0 ? {} : { workflowLayer: rootWorkflowLayer }
 	};
 	const current = () => als.getStore() ?? rootState;
 	const capsOf = (ref) => {
 		const colon = ref.indexOf(":");
 		const adapterId = ref.slice(0, colon);
 		const adapter = internals.adapters.get(adapterId);
-		if (adapter === void 0) throw new ConfigError(`no adapter registered for '${adapterId}' (ModelRef '${ref}'); pass it to createEngine`);
+		if (adapter === void 0) {
+			const registered = [...internals.adapters.keys()].sort();
+			throw new ConfigError(`no adapter registered for '${adapterId}' (ModelRef '${ref}'); registered: ${registered.length === 0 ? "(none)" : registered.join(", ")}. Pass the adapter to createEngine, or route this role to a registered adapter through defaults.routing`);
+		}
 		return adapter.caps(ref.slice(colon + 1));
 	};
 	const adapterOf = (resolved) => {
@@ -9720,6 +9816,7 @@ function createCtx(internals) {
 		if (profile?.effort !== void 0) profileLayer.effort = profile.effort;
 		const engineLayer = {};
 		if (internals.defaults.routing !== void 0) engineLayer.routing = internals.defaults.routing;
+		const workflowLayer = state.workflowLayer;
 		const telemetryNamespace = { agentType };
 		if (opts.label !== void 0) telemetryNamespace.label = opts.label;
 		const withTelemetry = (resolved) => ({
@@ -9734,6 +9831,7 @@ function createCtx(internals) {
 			role: primaryRole,
 			call: callLayer,
 			profile: profileLayer,
+			workflow: workflowLayer,
 			engine: engineLayer,
 			capsOf,
 			...floorContext
@@ -9770,6 +9868,7 @@ function createCtx(internals) {
 				role: "extract",
 				call: callLayer,
 				profile: profileLayer,
+				workflow: workflowLayer,
 				engine: engineLayer,
 				capsOf,
 				...floorContext
@@ -9803,6 +9902,7 @@ function createCtx(internals) {
 				role: "finalize",
 				call: callLayer,
 				profile: profileLayer,
+				workflow: workflowLayer,
 				engine: engineLayer,
 				capsOf,
 				...floorContext
@@ -9823,6 +9923,7 @@ function createCtx(internals) {
 				role: "summarize",
 				call: callLayer,
 				profile: profileLayer,
+				workflow: workflowLayer,
 				engine: engineLayer,
 				capsOf,
 				...floorContext
@@ -9832,6 +9933,7 @@ function createCtx(internals) {
 				role: "summarize",
 				call: callLayer,
 				profile: profileLayer,
+				workflow: workflowLayer,
 				engine: {
 					...engineLayer,
 					model: loopResolved.ref
@@ -9851,6 +9953,7 @@ function createCtx(internals) {
 				role,
 				call: fallbackLayer,
 				profile: profileLayer,
+				workflow: workflowLayer,
 				engine: engineLayer,
 				capsOf,
 				...floorContext
@@ -9895,7 +9998,8 @@ function createCtx(internals) {
 				cacheReadTokens: 0,
 				cacheWriteTokens: 0
 			};
-			const costUsd = terminal?.servedBy === void 0 ? 0 : internals.priceUsd(terminal.servedBy, usage) ?? 0;
+			const replayPriced = terminal === void 0 ? void 0 : priceEntryUsage(terminal, (ref, sliceUsage) => internals.priceUsd(ref, sliceUsage));
+			const costUsd = replayPriced?.usd ?? 0;
 			const result = {
 				status: matched.kind === "skip" ? "skipped" : terminal?.status ?? "ok",
 				output: matched.kind === "skip" ? null : terminal?.value ?? null,
@@ -9952,7 +10056,11 @@ function createCtx(internals) {
 				costUsd,
 				entryRef: terminal?.seq ?? matched.running.seq
 			}, spanId, true);
-			bump(internals.cost.byModel, terminal?.servedBy ?? loopResolved.ref, costUsd);
+			for (const slice of replayPriced?.priced ?? []) bump(internals.cost.byModel, slice.servedBy, slice.usd);
+			for (const slice of replayPriced?.unpriced ?? []) internals.cost.unpriced.push({
+				model: slice.servedBy,
+				usage: slice.usage
+			});
 			bump(internals.cost.byPhase, state.phase ?? "", costUsd);
 			bump(internals.cost.byAgentType, agentType, costUsd);
 			internals.cost.byRole.set(primaryRole, (internals.cost.byRole.get(primaryRole) ?? 0) + costUsd);
@@ -10352,6 +10460,7 @@ function createCtx(internals) {
 			status: result.status === "skipped" ? "error" : result.status,
 			usage: result.usage,
 			servedBy: result.servedBy,
+			...result.usageByModel === void 0 ? {} : { usageByModel: result.usageByModel },
 			transcriptRef: result.transcriptRef
 		};
 		if (result.status === "escalated" && result.escalation !== void 0) terminalPatch.escalation = result.escalation;
@@ -10402,14 +10511,23 @@ function createCtx(internals) {
 			});
 		}
 		const usd = result.costUsd;
-		bump(internals.cost.byModel, loopResolved.ref, usd);
+		for (const slice of result.usageByModel ?? [{
+			servedBy: result.servedBy,
+			usage: result.usage
+		}]) {
+			const priced = internals.priceUsd(slice.servedBy, slice.usage);
+			if (priced === void 0) {
+				internals.cost.unpriced.push({
+					model: slice.servedBy,
+					usage: slice.usage
+				});
+				continue;
+			}
+			bump(internals.cost.byModel, slice.servedBy, priced);
+		}
 		bump(internals.cost.byPhase, state.phase ?? "", usd);
 		bump(internals.cost.byAgentType, agentType, usd);
 		internals.cost.byRole.set(primaryRole, (internals.cost.byRole.get(primaryRole) ?? 0) + usd);
-		if (internals.priceUsd(loopResolved.ref, result.usage) === void 0) internals.cost.unpriced.push({
-			model: loopResolved.ref,
-			usage: result.usage
-		});
 		if (result.error?.kind === "budget" || internals.budget.exhausted && result.status !== "ok") throw new BudgetExhaustedError("run budget ceiling reached during agent execution", { data: {
 			scope: state.scope,
 			entryRef: terminal.seq
@@ -10712,10 +10830,12 @@ function createCtx(internals) {
 			site: `ctx.workflow('${name}')`
 		});
 		const signals = [state.signal ?? internals.runSignal, internals.budget.signalOf(childScope)].filter((signal) => signal !== void 0);
+		const childLayer = workflowLayerOf(wf);
 		const childState = {
 			scope: childScope,
 			spanId,
-			budgetScope: childScope
+			budgetScope: childScope,
+			...childLayer === void 0 ? {} : { workflowLayer: childLayer }
 		};
 		if (signals.length === 1) childState.signal = signals[0];
 		else if (signals.length > 1) childState.signal = AbortSignal.any(signals);
@@ -10886,7 +11006,7 @@ async function executeWorkflow(internals, wf, args) {
 		const validation = await validateSchemaSpec(wf.argsSchema, args);
 		if (!validation.valid) throw new ConfigError(`arguments for workflow '${wf.name}' do not validate: ` + validation.issues.map((issue) => issue.message).join("; "), { data: { issues: validation.issues.map((issue) => issue.message) } });
 	}
-	const ctx = createCtx(internals);
+	const ctx = createCtx(internals, wf);
 	try {
 		return await wf.body(ctx, args);
 	} finally {
@@ -12059,7 +12179,7 @@ function createEngine(options) {
 					const validation = await validateSchemaSpec(wf.argsSchema, args);
 					if (!validation.valid) throw new ConfigError(`arguments for workflow '${wf.name}' do not validate: ` + validation.issues.map((issue) => issue.message).join("; "));
 				}
-				const ctx = createCtx(internals);
+				const ctx = createCtx(internals, wf.kind === "workflow" ? wf : void 0);
 				const bodyPromise = (compiled === void 0 ? runner : options.runners?.sandbox).execute(wf, ctx, args);
 				const raced = await Promise.race([bodyPromise.then((result) => ({
 					kind: "done",
@@ -12555,4 +12675,4 @@ function createSandboxBridge(ctx, options) {
 	};
 }
 //#endregion
-export { AWAIT_SCHEMA, AdmissionController, AdmissionRejectedError, AgentCallError, BUDGET_ABORT_REASON, BudgetExhaustedError, CANCEL_AGENT_SCHEMA, CHECKPOINT_FORMAT_V1, CLAIM_STATEMENT_MAX_CHARS, CLAIM_TTL_DAYS, COMPACTION_SUMMARY_PREFIX, CURRENT_HASH_VERSION, ConfigError, DEFAULT_CHILD_BUDGET_FRACTION, DEFAULT_COMPACTION_THRESHOLD, DEFAULT_ESCALATION_LIMITS, DEFAULT_FLAT_RESERVE_USD, DEFAULT_MAX_CHILDREN_PER_NODE, DEFAULT_MAX_DEPTH, DEFAULT_MAX_OSCILLATIONS_PER_KEY, DEFAULT_MAX_PINNED_WORKTREES, DEFAULT_MAX_REVISIONS_PER_RUN, DEFAULT_MAX_TOTAL_SPAWNS, DEFAULT_MAX_TURNS, DEFAULT_MODEL_RETRY_ATTEMPTS, DEFAULT_NO_PROGRESS_TURNS, DEFAULT_PER_RUN_CONCURRENCY, DEFAULT_RETRY_POLICY, DEFAULT_STREAM_IDLE_TIMEOUT_MS, DedupIndex, EMIT_RESULT_TOOL, EMPTY_SCHEMA_HASH, EMPTY_TOOLSET_HASH, ESCALATE_TOOL_NAME, ESCALATION_REPORT_SCHEMA, ESCALATION_REQUEST_SCHEMA, EventBus, ExternalRegistry, FINISH_SCHEMA, FINISH_TOOL_NAME, FileModelKnowledgeStore, FileTranscriptStore, GitWorktreeProvider, INBOX_PROPOSAL_TTL_DAYS, InMemoryStore, InMemoryTranscriptStore, InProcessRunner, InvalidResolutionError, JournalCompatibilityError, JournalMatcher, JournalMissError, JournalOrderViolation, JsonlFileStore, KB_ACTIVE_CLAIMS_CAP, KB_CARD_RENDER_BUDGET_CHARS, KeyedLimiter, KnowledgeCasError, LARGE_VALUE_WARN_BYTES, LEGACY_LTID_PREFIX, LEGACY_SIGNATURE_INPUTS, LINEAGE_SIG_VERSION, LeaseHeldError, LineageIndex, MASKED_SECRET, MAX_DEPTH_CEILING, ModelRetry, NoProgressDetector, NonSerializableValueError, ORCHESTRATE_WORKFLOW_NAME, OrchestratorCapConfigError, PARALLEL_AGENTS_SCHEMA, ParallelSiteCounter, PlanInvariantError, ROLE_EFFORT_DEFAULTS, ROOT_ACCOUNT, ROOT_SCOPE, RUN_PROFILES, ReplayPlanHashMismatch, Replayer, ResolutionArbiter, ResolutionFold, RulvarError, RunBudget, SPAWN_AGENT_SCHEMA, SandboxError, ScriptRejected, Semaphore, SpanRegistry, TOOL_NAME_PATTERN, TerminationAccount, WAIT_FOR_EVENTS_SCHEMA, WAIT_FOR_EVENTS_TOOL_NAME, WAKE_SUMMARY_RENDER_BUDGET_CHARS, admissionReserveUsd, agentErrorFromWire, agentErrorToWire, agentScope, applyClaimOps, applyStructuredOutputTier, approachSigCoarse, approachSigOf, archiveDeprecatedModelOps, atCompactionThreshold, buildAbandonFold, buildAdapterRegistry, buildCostReport, buildDeriverRegistry, buildOrchestratorTools, buildTerminationInitValue, buildToolContext, canRideLoopTurn, canonicalIsolationTag, canonicalizeLadder, canonicalizeSchema, capIssues, capsHashOf, checkFloors, checkpointRefFor, childCoveragePrefix, claimExpired, claimExpiry, claimIssues, claimOpIssues, classifyAgentError, classifyAttemptOutcome, collectDeclaredLadders, compactMessages, compilePermissionChain, compilePermissionPreset, compileVerifiedLayer, costReportFromJournal, countsAgainstLimit, createCanonicalIdMinter, createCtx, createEngine, createSandboxBridge, currentOnlyKeyRing, decodeCheckpoint, defineWorkflow, deriveContentKey, deriverV1, deriverV2, digestOf, dispositionHook, emptyDigestBlocks, emptyToolset, encodeCheckpoint, escalateTool, evaluatePermission, evaluateReuse, executeWorkflow, exhaustionCodeOf, extractCandidate, failoverTriggerOf, fallbackTriggerOf, filterClaimsForRun, finalizeFires, foldTermination, formatRePrompt, formatScopePath, hashWorkflowBody, hashWorkflowSource, identityJcs, isEscalated, isSchemaPairSpec, isStandardSchemaSpec, isStrictCompatibleSchema, kMaxOf, knowledgeHash, ladderLengthOf, ladderRungChoice, lexShellCommand, liftRetainedParts, lineageWeightOf, makeOrchestratorWorkflow, maskSecrets, maskSecretsDeep, maskSecretsJson, matchArgvPattern, matchShellCommand, mcp, mergeUsageLimits, modelEpochOf, modelKnowledgeCard, modelSpecIdentity, needsSeparateExtract, nextFailover, nodeLinkKey, normalizeApproachTag, normalizeEntry, normalizeFallbacks, orchestrate, parallelScope, parseModelRef, parseScopePath, phiInitialOf, pipelineScope, planNodeScope, priceUsdOf, profileCard, profileRegistrySnapshotHash, projectHistory, projectIdentity, projectToJsonSchema, proposalStatement, providerOf, readTerminationInit, registryKeyRing, remeasureQueue, replayDisposition, resolveModelInvocation, resolvePricing, resolveToolset, retryClassOf, retryDelayMs, roleConfiguredInRouting, roundOneDisposition, runAgent, runProfile, scanJournalCompatibility, schemaHash, schemaHashOfSpec, selectStructuredOutputTier, shouldCompact, spawnDepthOf, summarizeInstruction, summarizeOutput, terminationConfigDrift, tierWithinCaps, toApprovalDecision, toJournalValue, tool, toolContract, toolsetHash, ttlState, validateEditorialCommit, validateEntryShape, validateEscalationLimits, validateEscalationReport, validateSchemaSpec, validateTerminationLimits, workflowScope, workflowSourceRef, wrapJournalStore, wrapTranscriptStore };
+export { AWAIT_SCHEMA, AdmissionController, AdmissionRejectedError, AgentCallError, BUDGET_ABORT_REASON, BudgetExhaustedError, CANCEL_AGENT_SCHEMA, CHECKPOINT_FORMAT_V1, CLAIM_STATEMENT_MAX_CHARS, CLAIM_TTL_DAYS, COMPACTION_SUMMARY_PREFIX, CURRENT_HASH_VERSION, ConfigError, DEFAULT_CHILD_BUDGET_FRACTION, DEFAULT_COMPACTION_THRESHOLD, DEFAULT_ESCALATION_LIMITS, DEFAULT_FLAT_RESERVE_USD, DEFAULT_MAX_CHILDREN_PER_NODE, DEFAULT_MAX_DEPTH, DEFAULT_MAX_OSCILLATIONS_PER_KEY, DEFAULT_MAX_PINNED_WORKTREES, DEFAULT_MAX_REVISIONS_PER_RUN, DEFAULT_MAX_TOTAL_SPAWNS, DEFAULT_MAX_TURNS, DEFAULT_MODEL_RETRY_ATTEMPTS, DEFAULT_NO_PROGRESS_TURNS, DEFAULT_PER_RUN_CONCURRENCY, DEFAULT_RETRY_POLICY, DEFAULT_STREAM_IDLE_TIMEOUT_MS, DedupIndex, EMIT_RESULT_TOOL, EMPTY_SCHEMA_HASH, EMPTY_TOOLSET_HASH, ESCALATE_TOOL_NAME, ESCALATION_REPORT_SCHEMA, ESCALATION_REQUEST_SCHEMA, EventBus, ExternalRegistry, FINISH_SCHEMA, FINISH_TOOL_NAME, FileModelKnowledgeStore, FileTranscriptStore, GitWorktreeProvider, INBOX_PROPOSAL_TTL_DAYS, InMemoryStore, InMemoryTranscriptStore, InProcessRunner, InvalidResolutionError, JournalCompatibilityError, JournalMatcher, JournalMissError, JournalOrderViolation, JsonlFileStore, KB_ACTIVE_CLAIMS_CAP, KB_CARD_RENDER_BUDGET_CHARS, KeyedLimiter, KnowledgeCasError, LARGE_VALUE_WARN_BYTES, LEGACY_LTID_PREFIX, LEGACY_SIGNATURE_INPUTS, LINEAGE_SIG_VERSION, LeaseHeldError, LineageIndex, MASKED_SECRET, MAX_DEPTH_CEILING, ModelRetry, NoProgressDetector, NonSerializableValueError, ORCHESTRATE_WORKFLOW_NAME, OrchestratorCapConfigError, PARALLEL_AGENTS_SCHEMA, ParallelSiteCounter, PlanInvariantError, ROLE_EFFORT_DEFAULTS, ROOT_ACCOUNT, ROOT_SCOPE, RUN_PROFILES, ReplayPlanHashMismatch, Replayer, ResolutionArbiter, ResolutionFold, RulvarError, RunBudget, SPAWN_AGENT_SCHEMA, SandboxError, ScriptRejected, Semaphore, SpanRegistry, TOOL_NAME_PATTERN, TerminationAccount, WAIT_FOR_EVENTS_SCHEMA, WAIT_FOR_EVENTS_TOOL_NAME, WAKE_SUMMARY_RENDER_BUDGET_CHARS, admissionReserveUsd, agentErrorFromWire, agentErrorToWire, agentScope, applyClaimOps, applyStructuredOutputTier, approachSigCoarse, approachSigOf, archiveDeprecatedModelOps, atCompactionThreshold, buildAbandonFold, buildAdapterRegistry, buildCostReport, buildDeriverRegistry, buildOrchestratorTools, buildTerminationInitValue, buildToolContext, canRideLoopTurn, canonicalIsolationTag, canonicalizeLadder, canonicalizeSchema, capIssues, capsHashOf, checkFloors, checkpointRefFor, childCoveragePrefix, claimExpired, claimExpiry, claimIssues, claimOpIssues, classifyAgentError, classifyAttemptOutcome, collectDeclaredLadders, compactMessages, compilePermissionChain, compilePermissionPreset, compileVerifiedLayer, costReportFromJournal, countsAgainstLimit, createCanonicalIdMinter, createCtx, createEngine, createSandboxBridge, currentOnlyKeyRing, decodeCheckpoint, defineWorkflow, deriveContentKey, deriverV1, deriverV2, digestOf, dispositionHook, emptyDigestBlocks, emptyToolset, encodeCheckpoint, entryUsageSlices, escalateTool, evaluatePermission, evaluateReuse, executeWorkflow, exhaustionCodeOf, extractCandidate, failoverTriggerOf, fallbackTriggerOf, filterClaimsForRun, finalizeFires, foldTermination, formatRePrompt, formatScopePath, hashWorkflowBody, hashWorkflowSource, identityJcs, isEscalated, isSchemaPairSpec, isStandardSchemaSpec, isStrictCompatibleSchema, kMaxOf, knowledgeHash, ladderLengthOf, ladderRungChoice, lexShellCommand, liftRetainedParts, lineageWeightOf, makeOrchestratorWorkflow, maskSecrets, maskSecretsDeep, maskSecretsJson, matchArgvPattern, matchShellCommand, mcp, mergeUsageLimits, modelEpochOf, modelKnowledgeCard, modelSpecIdentity, needsSeparateExtract, nextFailover, nodeLinkKey, normalizeApproachTag, normalizeEntry, normalizeFallbacks, orchestrate, parallelScope, parseModelRef, parseScopePath, phiInitialOf, pipelineScope, planNodeScope, priceEntryUsage, priceUsdOf, profileCard, profileRegistrySnapshotHash, projectHistory, projectIdentity, projectToJsonSchema, proposalStatement, providerOf, readTerminationInit, registryKeyRing, remeasureQueue, replayDisposition, resolveModelInvocation, resolvePricing, resolveToolset, retryClassOf, retryDelayMs, roleConfiguredInRouting, roundOneDisposition, runAgent, runProfile, scanJournalCompatibility, schemaHash, schemaHashOfSpec, selectStructuredOutputTier, shouldCompact, spawnDepthOf, summarizeInstruction, summarizeOutput, terminationConfigDrift, tierWithinCaps, toApprovalDecision, toJournalValue, tool, toolContract, toolsetHash, ttlState, validateEditorialCommit, validateEntryShape, validateEscalationLimits, validateEscalationReport, validateSchemaSpec, validateTerminationLimits, workflowScope, workflowSourceRef, wrapJournalStore, wrapTranscriptStore };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rulvar/core",
-  "version": "1.4.0",
+  "version": "1.5.1",
   "description": "rulvar core: L0 contracts, journal kernel, ctx primitives, agent runtime, model router, tool system, dynamic orchestrator, InMemory and JSONL stores, event stream.",
   "type": "module",
   "license": "Apache-2.0",