@rulvar/core 1.40.0 → 1.42.0

package/dist/index.d.ts

@@ -193,8 +193,11 @@ declare class BudgetExhaustedError extends RulvarError {
 /**
 * A declared fail-run policy engaged and closed the run as a failure
 * (v1.35.0 review P2-1): `budget.atCap: 'fail-run'` after the journaled
-* orchestrator cap decision, or `guards.fallback: 'fail-run'` after the
-* journaled guard verdict. The run outcome is 'error' with this code;
+* orchestrator cap decision, `guards.fallback: 'fail-run'` after the
+* journaled guard verdict, or a violated orchestrate acceptance policy
+* after the journaled acceptance decision (`data.source`
+* 'orchestrator_acceptance', with the child status counts and degraded
+* reasons in `data`). The run outcome is 'error' with this code;
 * `data.source` names the policy ('orchestrator_budget_cap' or
 * 'plan_guards') and `data` carries the decision entry reference, so the
 * outcome is a pure roll forward of the journal on resume: no second
@@ -5002,6 +5005,57 @@ interface TaskDigest {
   costUsd: number;
   artifactsIndex: string[];
 }
+/**
+* One page of a settled child's FULL output, returned by the opt-in
+* `get_child_result` tool. The digest is a wake signal truncated to 400
+* characters; this is the whole evidence, paged so a large result can be
+* read without overflowing the orchestrator's context in one call
+* (v1.40.0 improvement plan, the narrow RV-201 slice). The content is a
+* deterministic serialization of the child's `output` (the raw string
+* when the output IS a string, else its JCS-independent `JSON.stringify`)
+* for a settled ok child, or the child's `errorMessage` otherwise, so the
+* orchestrator can read WHY a child failed as readily as what it
+* produced. Everything here is a pure read of already durable journal
+* state, so a resume reproduces it with no new spend.
+*/
+interface ChildResultPage {
+  handle: number;
+  status: string;
+  /** Length of the whole serialized result, in characters. */
+  totalChars: number;
+  /** The character offset this page starts at, counted from zero. */
+  offset: number;
+  /** The page: `content.length` is at most the requested (clamped) maxChars. */
+  content: string;
+  /** True when more characters remain past this page; call again with a higher offset. */
+  hasMore: boolean;
+  /** The child's artifacts, id and kind, so the model knows what `read_child_artifact` can fetch. */
+  artifacts: Array<{
+    id: string;
+    kind: string;
+    label?: string;
+  }>;
+}
+/**
+* One page of a settled child's artifact CONTENT, returned by the opt-in
+* `read_child_artifact` tool. Inline artifact `data` serializes to a
+* string; an offloaded artifact (a TranscriptStore `ref`) is fetched and
+* decoded as UTF-8; a `patch` artifact with only a changed file list
+* carries that list in `files` and empty content. Paged and pure exactly
+* like {@link ChildResultPage}.
+*/
+interface ChildArtifactPage {
+  handle: number;
+  artifactId: string;
+  kind: string;
+  label?: string;
+  totalChars: number;
+  offset: number;
+  content: string;
+  hasMore: boolean;
+  /** The changed file list for a `patch` artifact; absent otherwise. */
+  files?: string[];
+}
 /** One spawned child tracked by the orchestrator runtime. */
 interface SpawnRecord {
   handle: number;
@@ -5044,6 +5098,16 @@ interface OrchestratorRuntime {
   }>;
   /** Sleep until a coalesced WakeDigest (M6-T09). */
   waitForEvents(triggers: unknown): Promise<unknown>;
+  /** A page of a settled child's full output; opt-in `get_child_result` (RV-201). */
+  getChildResult(handle: number, opts?: {
+    offset?: number;
+    maxChars?: number;
+  }): Promise<ChildResultPage>;
+  /** A page of a settled child's artifact content; opt-in `read_child_artifact` (RV-201). */
+  readChildArtifact(handle: number, artifactId: string, opts?: {
+    offset?: number;
+    maxChars?: number;
+  }): Promise<ChildArtifactPage>;
 }
 /**
 * The committed WakeDigest render budget (Appendix A: 400
@@ -5403,6 +5467,34 @@ interface OrchestratorBudgetSpec {
   atCap?: "finish-with-partial" | "fail-run";
 }
 /** Options for orchestrate(engine, goal, o?). */
+/**
+* The opt-in child completion policy (the v1.40.0 improvement plan's
+* completion contract): run status 'ok' alone never proves the children
+* succeeded, because the model may call finish after any mix of child
+* outcomes. When acceptance is set, the policy is evaluated exactly when
+* the model's finish validates, the verdict is journaled as ONE decision
+* entry (so a resume rolls the SAME verdict forward, immune to drift of
+* the live options), and the workflow result becomes the acceptance
+* envelope { result, completion, childStatusCounts, degradedReasons }. A
+* violated policy fails the run with the typed FailRunError (code
+* 'fail_run', data.source 'orchestrator_acceptance') instead of settling
+* ok. A budget cap settle keeps its atCap policy: the cap partial is
+* already visible as run status 'exhausted' or the typed fail run error,
+* never a plain ok, so acceptance does not judge it again.
+*/
+interface OrchestrateAcceptance {
+  /**
+  * 'all-ok' requires EVERY spawned child to have settled 'ok' when
+  * finish validates: a child still running counts against the policy,
+  * and so does a deliberately cancelled straggler (spawn nothing you do
+  * not need to succeed; zero spawned children are vacuously complete).
+  * { minSuccessful: N } requires at least N children settled 'ok' and
+  * reports every other child in degradedReasons.
+  */
+  childPolicy: "all-ok" | {
+    minSuccessful: number;
+  };
+}
 interface OrchestrateOptions {
   model?: ModelSpec;
   /** Registered profile names to advertise; default: every profile. */
@@ -5434,6 +5526,20 @@ interface OrchestrateOptions {
   * participates in the mandatory quiescence trigger.
   */
   extension?: OrchestratorExtension;
+  /** The opt in child completion policy; see {@link OrchestrateAcceptance}. */
+  acceptance?: OrchestrateAcceptance;
+  /**
+  * Opt in to the evidence tools `get_child_result` and
+  * `read_child_artifact` (the v1.40.0 improvement plan's narrow RV-201
+  * slice). The digest an await returns is a wake signal truncated to 400
+  * characters; with this set, the orchestrator can page a settled
+  * child's FULL output and its artifact contents, both pure reads of
+  * durable journal state. Adding the tools changes the orchestrator
+  * toolset hash by design (exactly like the extension's plan tools), so
+  * leave it off and the default toolset, and every frozen cassette, stay
+  * unchanged.
+  */
+  exposeChildResultTools?: boolean;
 }
 declare const ORCHESTRATE_WORKFLOW_NAME = "rulvar-orchestrate";
 /**
@@ -6740,6 +6846,13 @@ declare const PARALLEL_AGENTS_SCHEMA: SchemaSpec;
 declare const AWAIT_SCHEMA: SchemaSpec;
 /** The cancel_agent parameter schema. */
 declare const CANCEL_AGENT_SCHEMA: SchemaSpec;
+/** Default and hard-max characters per child-result / artifact page. */
+declare const DEFAULT_CHILD_RESULT_PAGE_CHARS = 4e3;
+declare const MAX_CHILD_RESULT_PAGE_CHARS = 2e4;
+declare const GET_CHILD_RESULT_SCHEMA: SchemaSpec;
+declare const READ_CHILD_ARTIFACT_SCHEMA: SchemaSpec;
+declare const GET_CHILD_RESULT_TOOL_NAME = "get_child_result";
+declare const READ_CHILD_ARTIFACT_TOOL_NAME = "read_child_artifact";
 /** finish; result validates against the declared output schema. */
 declare const FINISH_SCHEMA: SchemaSpec;
 declare const FINISH_TOOL_NAME = "finish";
@@ -6766,7 +6879,9 @@ interface SpawnAgentParams {
 * rides the spawn tools' descriptions so both modes speak one agent
 * vocabulary (M6-T04).
 */
-declare function buildOrchestratorTools(runtime: OrchestratorRuntime, profileCardText: string): ToolDef[];
+declare function buildOrchestratorTools(runtime: OrchestratorRuntime, profileCardText: string, options?: {
+  childResultTools?: boolean;
+}): ToolDef[];
 //#endregion
 //#region src/engine/events.d.ts
 /**
@@ -6924,4 +7039,4 @@ interface SandboxBridge {
 declare const SANDBOX_AGENT_OPT_KEYS: readonly string[];
 declare function createSandboxBridge(ctx: Ctx<never>, options: SandboxBridgeOptions): SandboxBridge;
 //#endregion
-export { AWAIT_SCHEMA, AbandonAttempt, AbandonFold, AbandonPayload, AbandonedSpendView, AbortClass, type AdaptiveEvents, AdmissionController, AdmissionDecision, AdmissionRejectedError, AdmissionStatsBefore, AdmitLineage, AdmitRejectReason, AdmitSpec, AdmitVerdict, AgentCallError, AgentError, type AgentEvents, AgentIdentityInput, AgentOpts, AgentProfile, AgentProfilePermissions, AgentResult, AgentResultMeta, AgentStatus, ApproachSignatureInputs, ApprovalDecision, ApprovalIdentityInput, Artifact, AttemptOutcomeClass, BUDGET_ABORT_REASON, BaseAppend, BriefOpts, BudgetAccountView, BudgetDefaults, BudgetExhaustedError, BudgetExhaustionDiagnostics, BudgetHooks, BudgetReserve, type Bytes, CANCEL_AGENT_SCHEMA, CHECKPOINT_FORMAT_V1, CLAIM_STATEMENT_MAX_CHARS, CLAIM_TTL_DAYS, COMPACTION_SUMMARY_PREFIX, CURRENT_HASH_VERSION, CacheHint, CacheTtl, CanUseTool, CanonicalId, CanonicalIdentity, CanonicalLadderSpec, CanonicalModelSpec, ChatEvent, ChatRequest, CheckpointState, ChildIdentityInput, type ClaimClass, type ClaimOp, type ClaimStatus, ClaimValidationOptions, CollectOpts, CollectedTurn, CompactionConfig, CompiledPermissionChain, CompiledWorkflow, ConfigError, type CoreEvents, CostAttribution, CostAttributionFacts, CostReport, CreateEngineOptions, Ctx, DEFAULT_CHILD_BUDGET_FRACTION, DEFAULT_COMPACTION_THRESHOLD, DEFAULT_ESCALATION_LIMITS, DEFAULT_FLAT_RESERVE_USD, DEFAULT_MAX_CHILDREN_PER_NODE, DEFAULT_MAX_DEPTH, DEFAULT_MAX_OSCILLATIONS_PER_KEY, DEFAULT_MAX_PINNED_WORKTREES, DEFAULT_MAX_REVISIONS_PER_RUN, DEFAULT_MAX_TOTAL_SPAWNS, DEFAULT_MAX_TURNS, DEFAULT_MODEL_RETRY_ATTEMPTS, DEFAULT_NO_PROGRESS_TURNS, DEFAULT_PER_RUN_CONCURRENCY, DEFAULT_RETRY_POLICY, DEFAULT_STREAM_IDLE_TIMEOUT_MS, DebitResult, DeclaredLadder, DedupIndex, DedupNote, DerivedKey, DeriverRegistry, DispositionRule, DispositionTable, DonorCandidate, DonorRef, DroppedItem, EMIT_RESULT_TOOL, EMPTY_SCHEMA_HASH, EMPTY_TOOLSET_HASH, ESCALATE_TOOL_NAME, ESCALATION_REPORT_SCHEMA, ESCALATION_REQUEST_SCHEMA, EVENT_SEGMENT_STRIDE, EffectiveUsageLimits, Effort, Engine, EngineDefaults, EntryKind, EntryRef, EntryStatus, ErrorClass, ErrorCode, ErrorPolicy, EscalatedResult, EscalationDecision, EscalationDecisionAbortedError, EscalationDigest, EscalationKind, EscalationLimits, EscalationOptions, EscalationReport, EscalationRequest, EventBus, type EvidenceRef, ExtensionAppendInput, ExtensionDispatchSpec, ExternalIdentityInput, ExternalRegistry, ExtractNecessityInput, FINALIZE_SYNTHESIS_INSTRUCTION, FINISH_SCHEMA, FINISH_TOOL_NAME, FailRunError, FailoverTarget, FailoverTrigger, FallbackField, FallbackTrigger, FileModelKnowledgeStore, FileModelKnowledgeStoreOptions, FileTranscriptStore, FinishInfo, Gate, GateAudit, type GateRecord, GitWorktreeProvider, GitWorktreeProviderOptions, GraftBoot, HashVersion, HookVerdict, INBOX_PROPOSAL_TTL_DAYS, IdentityInput, InMemoryStore, InMemoryTranscriptStore, InProcessRunner, InvalidResolutionError, InvocationRole, type IsolationProvider, type IsolationSpec, Issue$1 as Issue, JournalCompatSubCode, JournalCompatibilityError, JournalEntry, JournalMatcher, JournalMissError, JournalOperation, JournalOrderViolation, JournalSerializationHook, type JournalStore, type Json, JsonSchema, JsonlFileStore, KB_ACTIVE_CLAIMS_CAP, KB_CARD_RENDER_BUDGET_CHARS, type KbProposal, type KbProposalTrigger, KeyDeriver, KeyRing, KeyedLimiter, KnowledgeCasError, type KnowledgeSnapshot, LARGE_VALUE_WARN_BYTES, LEGACY_LTID_PREFIX, LEGACY_SIGNATURE_INPUTS, LINEAGE_SIG_VERSION, LadderSpec, type LeasableStore, type Lease, LeaseHeldError, Ledger, LineageCounters, LineageIndex, LineageRef, LineageRelation, LineageStats, LogicalTaskId, MASKED_SECRET, MAX_DEPTH_CEILING, MatchResult, McpConfig, McpToolSource, MechanicalGateProfile, MechanicalGateVerdict, type MetaLookupStore, type ModelCaps, ModelChoice, type ModelClaim, ModelEpochInputs, type ModelKnowledgeHandle, type ModelKnowledgeStore, ModelListConstraint, ModelRef, ModelRetry, ModelSpec, Msg, NoProgressDetector, NodeId, NodeLinkValue, NonSerializableValueError, ORCHESTRATE_WORKFLOW_NAME, OnEscalation, OperationDisposition, OrchestrateOptions, OrchestratorBudgetSpec, OrchestratorCapConfigError, OrchestratorExtension, OrchestratorExtensionIO, OrchestratorRuntime, Out, PARALLEL_AGENTS_SCHEMA, ParallelSiteCounter, Part, PendingExternal, PendingToolTurn, PermissionConfig, PermissionGate, PermissionHook, PermissionPreset, PermissionRule, PermissionVerdict, PhaseTarget, PipelineCollected, PipelineOpts, PlanInvariantError, PriceTable, PricedUsage, type Pricing, type PricingTier, type ProviderAdapter, QualityFloors, ROLE_EFFORT_DEFAULTS, ROOT_ACCOUNT, ROOT_SCOPE, RUN_PROFILES, RandIdentityInput, RandPayload, RefEntryAppender, RefEntryClassification, RefusalInfo, ReplayDisposition, ReplayMode, ReplayPlanHashMismatch, Replayer, ResolutionArbiter, ResolutionAttempt, ResolutionBy, ResolutionFold, ResolutionLayer, ResolutionOutcome, ResolutionPayload, ResolvedInvocation, ResolvedToolset, ResumeHandle, ResumeOptions, ResumePreview, ResumeReport, RetryClass, RetryPolicy, ReuseConfig, RiskRuleValue, Role, RulvarError, RulvarErrorCode, RunAgentOptions, RunBudget, RunEventSink, type RunFilter, RunHandle, RunInternals, type RunMeta, RunOptions, RunOutcome, RunProfile, RunStatus, RuntimeEventSink, SANDBOX_AGENT_OPT_KEYS, SPAWN_AGENT_SCHEMA, SandboxBridge, SandboxBridgeOptions, SandboxError, SandboxHostToWorker, SandboxMethod, SandboxWorkerToHost, SchemaPair, SchemaSpec, SchemaValidationResult, ScopeSegment, ScriptRejected, ScriptRunner, ScrubNote, Semaphore, SerializationHook, Settled, ShellPatternRules, ShellSegment, ShellVerdict, SinglePhaseAppend, SpanMinter, SpanRegistry, SpawnAdmissionValue, SpawnAgentParams, SpawnKey, SpawnLineage, SpawnLineageOpt, SpawnOrigin, SpawnRecord, Spend, Stage, type StandardJSONSchemaV1, type StandardSchemaV1, StepIdentityInput, StructuredOutputTier, SuspendedAppend, SuspensionState, TOOL_NAME_PATTERN, type TaskClass, TaskDigest, TaskSpec, TerminalPatch, TerminationAccount, TerminationAccountSnapshot, TerminationDeniedValue, TerminationDeniedWriter, TerminationInitValue, TerminationLimits, TerminationResource, ToolCallRequest, ToolChoice, type ToolContext, ToolContextSeed, ToolContract, type ToolDef, type ToolEvents, type ToolExecutor, ToolInit, type ToolRisk, ToolRuntime, type ToolSource, type ToolSourceSession, ToolsOption, TranscriptSerializationHook, type TranscriptStore, TriggerClass, TtlState, Usage, UsageLimits, UsageSlice, VerifiedRecommendation, WAIT_FOR_EVENTS_SCHEMA, WAIT_FOR_EVENTS_TOOL_NAME, WAKE_SUMMARY_RENDER_BUDGET_CHARS, WakeBudgetBlock, WakeDigest, WakeTrigger, WireError, Workflow, WorkflowCallOpts, type WorkflowEvent, type WorkflowEventBody, WorkflowRegistry, admissionReserveUsd, affordableOutputTokens, agentErrorFromWire, agentErrorToWire, agentResultWire, agentScope, applyClaimOps, applyStructuredOutputTier, approachSigCoarse, approachSigOf, archiveDeprecatedModelOps, atCompactionThreshold, buildAbandonFold, buildAdapterRegistry, buildCostReport, buildDeriverRegistry, buildOrchestratorTools, buildTerminationInitValue, buildToolContext, canRideLoopTurn, canonicalIsolationTag, canonicalizeLadder, canonicalizeSchema, capIssues, capsHashOf, checkFloors, checkpointRefFor, childCoveragePrefix, claimExpired, claimExpiry, claimIssues, claimOpIssues, classifyAgentError, classifyAttemptOutcome, collectDeclaredLadders, compactMessages, compilePermissionChain, compilePermissionPreset, compileVerifiedLayer, costReportFromJournal, countsAgainstLimit, createCanonicalIdMinter, createCtx, createEngine, createSandboxBridge, currentOnlyKeyRing, decodeCheckpoint, defineWorkflow, deriveContentKey, deriverV1, deriverV2, digestOf, dispositionHook, emptyDigestBlocks, emptyToolset, encodeCheckpoint, entryUsageSlices, escalateTool, evaluatePermission, evaluateReuse, executeWorkflow, exhaustionCodeOf, extractCandidate, failoverTriggerOf, fallbackTriggerOf, filterClaimsForRun, finalizeFires, foldTermination, formatRePrompt, formatScopePath, hasMetaLookup, hashRunArgs, hashWorkflowBody, hashWorkflowSource, identityJcs, isEscalated, isSchemaPairSpec, isStandardSchemaSpec, isStrictCompatibleSchema, kMaxOf, knowledgeHash, ladderLengthOf, ladderRungChoice, lexShellCommand, liftRetainedParts, lineageWeightOf, makeOrchestratorWorkflow, maskSecrets, maskSecretsDeep, maskSecretsJson, matchArgvPattern, matchShellCommand, mcp, mergeUsageLimits, metaMatchesFilter, modelEpochOf, modelKnowledgeCard, modelSpecIdentity, needsSeparateExtract, nextFailover, nodeLinkKey, normalizeApproachTag, normalizeEntry, normalizeFallbacks, orchestrate, parallelScope, parseModelRef, parseScopePath, phiInitialOf, pipelineScope, planNodeScope, priceEntryUsage, priceUsdOf, profileCard, profileRegistrySnapshotHash, projectHistory, projectIdentity, projectToJsonSchema, proposalStatement, providerOf, readRunMeta, readTerminationInit, registryKeyRing, remeasureQueue, replayDisposition, resolveModelInvocation, resolvePricing, resolveToolset, retryClassOf, retryDelayMs, roleConfiguredInRouting, roundOneDisposition, runAgent, runProfile, sanitizeTerminalText, sanitizeTokenCount, sanitizeUsage, sanitizeUsageDelta, scanJournalCompatibility, schemaHash, schemaHashOfSpec, selectStructuredOutputTier, shouldCompact, snapshotUsage, spawnDepthOf, summarizeInstruction, summarizeOutput, terminationConfigDrift, tierWithinCaps, toApprovalDecision, toJournalValue, tool, toolContract, toolsetHash, ttlState, usageViolations, validateEditorialCommit, validateEntryShape, validateEscalationLimits, validateEscalationReport, validateRetryPolicy, validateSchemaSpec, validateTerminationLimits, validateUsageLimits, workflowScope, workflowSourceRef, wrapJournalStore, wrapTranscriptStore };
+export { AWAIT_SCHEMA, AbandonAttempt, AbandonFold, AbandonPayload, AbandonedSpendView, AbortClass, type AdaptiveEvents, AdmissionController, AdmissionDecision, AdmissionRejectedError, AdmissionStatsBefore, AdmitLineage, AdmitRejectReason, AdmitSpec, AdmitVerdict, AgentCallError, AgentError, type AgentEvents, AgentIdentityInput, AgentOpts, AgentProfile, AgentProfilePermissions, AgentResult, AgentResultMeta, AgentStatus, ApproachSignatureInputs, ApprovalDecision, ApprovalIdentityInput, Artifact, AttemptOutcomeClass, BUDGET_ABORT_REASON, BaseAppend, BriefOpts, BudgetAccountView, BudgetDefaults, BudgetExhaustedError, BudgetExhaustionDiagnostics, BudgetHooks, BudgetReserve, type Bytes, CANCEL_AGENT_SCHEMA, CHECKPOINT_FORMAT_V1, CLAIM_STATEMENT_MAX_CHARS, CLAIM_TTL_DAYS, COMPACTION_SUMMARY_PREFIX, CURRENT_HASH_VERSION, CacheHint, CacheTtl, CanUseTool, CanonicalId, CanonicalIdentity, CanonicalLadderSpec, CanonicalModelSpec, ChatEvent, ChatRequest, CheckpointState, ChildArtifactPage, ChildIdentityInput, ChildResultPage, type ClaimClass, type ClaimOp, type ClaimStatus, ClaimValidationOptions, CollectOpts, CollectedTurn, CompactionConfig, CompiledPermissionChain, CompiledWorkflow, ConfigError, type CoreEvents, CostAttribution, CostAttributionFacts, CostReport, CreateEngineOptions, Ctx, DEFAULT_CHILD_BUDGET_FRACTION, DEFAULT_CHILD_RESULT_PAGE_CHARS, DEFAULT_COMPACTION_THRESHOLD, DEFAULT_ESCALATION_LIMITS, DEFAULT_FLAT_RESERVE_USD, DEFAULT_MAX_CHILDREN_PER_NODE, DEFAULT_MAX_DEPTH, DEFAULT_MAX_OSCILLATIONS_PER_KEY, DEFAULT_MAX_PINNED_WORKTREES, DEFAULT_MAX_REVISIONS_PER_RUN, DEFAULT_MAX_TOTAL_SPAWNS, DEFAULT_MAX_TURNS, DEFAULT_MODEL_RETRY_ATTEMPTS, DEFAULT_NO_PROGRESS_TURNS, DEFAULT_PER_RUN_CONCURRENCY, DEFAULT_RETRY_POLICY, DEFAULT_STREAM_IDLE_TIMEOUT_MS, DebitResult, DeclaredLadder, DedupIndex, DedupNote, DerivedKey, DeriverRegistry, DispositionRule, DispositionTable, DonorCandidate, DonorRef, DroppedItem, EMIT_RESULT_TOOL, EMPTY_SCHEMA_HASH, EMPTY_TOOLSET_HASH, ESCALATE_TOOL_NAME, ESCALATION_REPORT_SCHEMA, ESCALATION_REQUEST_SCHEMA, EVENT_SEGMENT_STRIDE, EffectiveUsageLimits, Effort, Engine, EngineDefaults, EntryKind, EntryRef, EntryStatus, ErrorClass, ErrorCode, ErrorPolicy, EscalatedResult, EscalationDecision, EscalationDecisionAbortedError, EscalationDigest, EscalationKind, EscalationLimits, EscalationOptions, EscalationReport, EscalationRequest, EventBus, type EvidenceRef, ExtensionAppendInput, ExtensionDispatchSpec, ExternalIdentityInput, ExternalRegistry, ExtractNecessityInput, FINALIZE_SYNTHESIS_INSTRUCTION, FINISH_SCHEMA, FINISH_TOOL_NAME, FailRunError, FailoverTarget, FailoverTrigger, FallbackField, FallbackTrigger, FileModelKnowledgeStore, FileModelKnowledgeStoreOptions, FileTranscriptStore, FinishInfo, GET_CHILD_RESULT_SCHEMA, GET_CHILD_RESULT_TOOL_NAME, Gate, GateAudit, type GateRecord, GitWorktreeProvider, GitWorktreeProviderOptions, GraftBoot, HashVersion, HookVerdict, INBOX_PROPOSAL_TTL_DAYS, IdentityInput, InMemoryStore, InMemoryTranscriptStore, InProcessRunner, InvalidResolutionError, InvocationRole, type IsolationProvider, type IsolationSpec, Issue$1 as Issue, JournalCompatSubCode, JournalCompatibilityError, JournalEntry, JournalMatcher, JournalMissError, JournalOperation, JournalOrderViolation, JournalSerializationHook, type JournalStore, type Json, JsonSchema, JsonlFileStore, KB_ACTIVE_CLAIMS_CAP, KB_CARD_RENDER_BUDGET_CHARS, type KbProposal, type KbProposalTrigger, KeyDeriver, KeyRing, KeyedLimiter, KnowledgeCasError, type KnowledgeSnapshot, LARGE_VALUE_WARN_BYTES, LEGACY_LTID_PREFIX, LEGACY_SIGNATURE_INPUTS, LINEAGE_SIG_VERSION, LadderSpec, type LeasableStore, type Lease, LeaseHeldError, Ledger, LineageCounters, LineageIndex, LineageRef, LineageRelation, LineageStats, LogicalTaskId, MASKED_SECRET, MAX_CHILD_RESULT_PAGE_CHARS, MAX_DEPTH_CEILING, MatchResult, McpConfig, McpToolSource, MechanicalGateProfile, MechanicalGateVerdict, type MetaLookupStore, type ModelCaps, ModelChoice, type ModelClaim, ModelEpochInputs, type ModelKnowledgeHandle, type ModelKnowledgeStore, ModelListConstraint, ModelRef, ModelRetry, ModelSpec, Msg, NoProgressDetector, NodeId, NodeLinkValue, NonSerializableValueError, ORCHESTRATE_WORKFLOW_NAME, OnEscalation, OperationDisposition, OrchestrateAcceptance, OrchestrateOptions, OrchestratorBudgetSpec, OrchestratorCapConfigError, OrchestratorExtension, OrchestratorExtensionIO, OrchestratorRuntime, Out, PARALLEL_AGENTS_SCHEMA, ParallelSiteCounter, Part, PendingExternal, PendingToolTurn, PermissionConfig, PermissionGate, PermissionHook, PermissionPreset, PermissionRule, PermissionVerdict, PhaseTarget, PipelineCollected, PipelineOpts, PlanInvariantError, PriceTable, PricedUsage, type Pricing, type PricingTier, type ProviderAdapter, QualityFloors, READ_CHILD_ARTIFACT_SCHEMA, READ_CHILD_ARTIFACT_TOOL_NAME, ROLE_EFFORT_DEFAULTS, ROOT_ACCOUNT, ROOT_SCOPE, RUN_PROFILES, RandIdentityInput, RandPayload, RefEntryAppender, RefEntryClassification, RefusalInfo, ReplayDisposition, ReplayMode, ReplayPlanHashMismatch, Replayer, ResolutionArbiter, ResolutionAttempt, ResolutionBy, ResolutionFold, ResolutionLayer, ResolutionOutcome, ResolutionPayload, ResolvedInvocation, ResolvedToolset, ResumeHandle, ResumeOptions, ResumePreview, ResumeReport, RetryClass, RetryPolicy, ReuseConfig, RiskRuleValue, Role, RulvarError, RulvarErrorCode, RunAgentOptions, RunBudget, RunEventSink, type RunFilter, RunHandle, RunInternals, type RunMeta, RunOptions, RunOutcome, RunProfile, RunStatus, RuntimeEventSink, SANDBOX_AGENT_OPT_KEYS, SPAWN_AGENT_SCHEMA, SandboxBridge, SandboxBridgeOptions, SandboxError, SandboxHostToWorker, SandboxMethod, SandboxWorkerToHost, SchemaPair, SchemaSpec, SchemaValidationResult, ScopeSegment, ScriptRejected, ScriptRunner, ScrubNote, Semaphore, SerializationHook, Settled, ShellPatternRules, ShellSegment, ShellVerdict, SinglePhaseAppend, SpanMinter, SpanRegistry, SpawnAdmissionValue, SpawnAgentParams, SpawnKey, SpawnLineage, SpawnLineageOpt, SpawnOrigin, SpawnRecord, Spend, Stage, type StandardJSONSchemaV1, type StandardSchemaV1, StepIdentityInput, StructuredOutputTier, SuspendedAppend, SuspensionState, TOOL_NAME_PATTERN, type TaskClass, TaskDigest, TaskSpec, TerminalPatch, TerminationAccount, TerminationAccountSnapshot, TerminationDeniedValue, TerminationDeniedWriter, TerminationInitValue, TerminationLimits, TerminationResource, ToolCallRequest, ToolChoice, type ToolContext, ToolContextSeed, ToolContract, type ToolDef, type ToolEvents, type ToolExecutor, ToolInit, type ToolRisk, ToolRuntime, type ToolSource, type ToolSourceSession, ToolsOption, TranscriptSerializationHook, type TranscriptStore, TriggerClass, TtlState, Usage, UsageLimits, UsageSlice, VerifiedRecommendation, WAIT_FOR_EVENTS_SCHEMA, WAIT_FOR_EVENTS_TOOL_NAME, WAKE_SUMMARY_RENDER_BUDGET_CHARS, WakeBudgetBlock, WakeDigest, WakeTrigger, WireError, Workflow, WorkflowCallOpts, type WorkflowEvent, type WorkflowEventBody, WorkflowRegistry, admissionReserveUsd, affordableOutputTokens, agentErrorFromWire, agentErrorToWire, agentResultWire, agentScope, applyClaimOps, applyStructuredOutputTier, approachSigCoarse, approachSigOf, archiveDeprecatedModelOps, atCompactionThreshold, buildAbandonFold, buildAdapterRegistry, buildCostReport, buildDeriverRegistry, buildOrchestratorTools, buildTerminationInitValue, buildToolContext, canRideLoopTurn, canonicalIsolationTag, canonicalizeLadder, canonicalizeSchema, capIssues, capsHashOf, checkFloors, checkpointRefFor, childCoveragePrefix, claimExpired, claimExpiry, claimIssues, claimOpIssues, classifyAgentError, classifyAttemptOutcome, collectDeclaredLadders, compactMessages, compilePermissionChain, compilePermissionPreset, compileVerifiedLayer, costReportFromJournal, countsAgainstLimit, createCanonicalIdMinter, createCtx, createEngine, createSandboxBridge, currentOnlyKeyRing, decodeCheckpoint, defineWorkflow, deriveContentKey, deriverV1, deriverV2, digestOf, dispositionHook, emptyDigestBlocks, emptyToolset, encodeCheckpoint, entryUsageSlices, escalateTool, evaluatePermission, evaluateReuse, executeWorkflow, exhaustionCodeOf, extractCandidate, failoverTriggerOf, fallbackTriggerOf, filterClaimsForRun, finalizeFires, foldTermination, formatRePrompt, formatScopePath, hasMetaLookup, hashRunArgs, hashWorkflowBody, hashWorkflowSource, identityJcs, isEscalated, isSchemaPairSpec, isStandardSchemaSpec, isStrictCompatibleSchema, kMaxOf, knowledgeHash, ladderLengthOf, ladderRungChoice, lexShellCommand, liftRetainedParts, lineageWeightOf, makeOrchestratorWorkflow, maskSecrets, maskSecretsDeep, maskSecretsJson, matchArgvPattern, matchShellCommand, mcp, mergeUsageLimits, metaMatchesFilter, modelEpochOf, modelKnowledgeCard, modelSpecIdentity, needsSeparateExtract, nextFailover, nodeLinkKey, normalizeApproachTag, normalizeEntry, normalizeFallbacks, orchestrate, parallelScope, parseModelRef, parseScopePath, phiInitialOf, pipelineScope, planNodeScope, priceEntryUsage, priceUsdOf, profileCard, profileRegistrySnapshotHash, projectHistory, projectIdentity, projectToJsonSchema, proposalStatement, providerOf, readRunMeta, readTerminationInit, registryKeyRing, remeasureQueue, replayDisposition, resolveModelInvocation, resolvePricing, resolveToolset, retryClassOf, retryDelayMs, roleConfiguredInRouting, roundOneDisposition, runAgent, runProfile, sanitizeTerminalText, sanitizeTokenCount, sanitizeUsage, sanitizeUsageDelta, scanJournalCompatibility, schemaHash, schemaHashOfSpec, selectStructuredOutputTier, shouldCompact, snapshotUsage, spawnDepthOf, summarizeInstruction, summarizeOutput, terminationConfigDrift, tierWithinCaps, toApprovalDecision, toJournalValue, tool, toolContract, toolsetHash, ttlState, usageViolations, validateEditorialCommit, validateEntryShape, validateEscalationLimits, validateEscalationReport, validateRetryPolicy, validateSchemaSpec, validateTerminationLimits, validateUsageLimits, workflowScope, workflowSourceRef, wrapJournalStore, wrapTranscriptStore };

package/dist/index.js

@@ -208,8 +208,11 @@ var BudgetExhaustedError = class extends RulvarError {
 /**
 * A declared fail-run policy engaged and closed the run as a failure
 * (v1.35.0 review P2-1): `budget.atCap: 'fail-run'` after the journaled
-* orchestrator cap decision, or `guards.fallback: 'fail-run'` after the
-* journaled guard verdict. The run outcome is 'error' with this code;
+* orchestrator cap decision, `guards.fallback: 'fail-run'` after the
+* journaled guard verdict, or a violated orchestrate acceptance policy
+* after the journaled acceptance decision (`data.source`
+* 'orchestrator_acceptance', with the child status counts and degraded
+* reasons in `data`). The run outcome is 'error' with this code;
 * `data.source` names the policy ('orchestrator_budget_cap' or
 * 'plan_guards') and `data` carries the decision entry reference, so the
 * outcome is a pure roll forward of the journal on resume: no second
@@ -10765,6 +10768,46 @@ const CANCEL_AGENT_SCHEMA = {
 		reason: { type: "string" }
 	}
 };
+/** Default and hard-max characters per child-result / artifact page. */
+const DEFAULT_CHILD_RESULT_PAGE_CHARS = 4e3;
+const MAX_CHILD_RESULT_PAGE_CHARS = 2e4;
+const PAGING_PROPS = {
+	offset: {
+		type: "integer",
+		minimum: 0
+	},
+	maxChars: {
+		type: "integer",
+		minimum: 1
+	}
+};
+const GET_CHILD_RESULT_SCHEMA = {
+	type: "object",
+	additionalProperties: false,
+	required: ["handle"],
+	properties: {
+		handle: {
+			type: "integer",
+			minimum: 1
+		},
+		...PAGING_PROPS
+	}
+};
+const READ_CHILD_ARTIFACT_SCHEMA = {
+	type: "object",
+	additionalProperties: false,
+	required: ["handle", "artifactId"],
+	properties: {
+		handle: {
+			type: "integer",
+			minimum: 1
+		},
+		artifactId: { type: "string" },
+		...PAGING_PROPS
+	}
+};
+const GET_CHILD_RESULT_TOOL_NAME = "get_child_result";
+const READ_CHILD_ARTIFACT_TOOL_NAME = "read_child_artifact";
 /** finish; result validates against the declared output schema. */
 const FINISH_SCHEMA = {
 	type: "object",
@@ -10781,64 +10824,95 @@ const FINISH_TOOL_NAME = "finish";
 * rides the spawn tools' descriptions so both modes speak one agent
 * vocabulary (M6-T04).
 */
-function buildOrchestratorTools(runtime, profileCardText) {
-	return [
-		tool({
-			name: "spawn_agent",
-			description: `Admit and schedule one child agent. ${profileCardText}`,
-			parameters: SPAWN_AGENT_SCHEMA,
-			execute: (input) => runtime.spawn(input)
-		}),
-		tool({
-			name: "parallel_agents",
-			description: "Admit and schedule several children at once (submission order).",
-			parameters: PARALLEL_AGENTS_SCHEMA,
-			execute: async (input) => {
-				const tasks = input.tasks;
-				const handles = [];
-				for (const task of tasks) {
-					const spawned = await runtime.spawn(task);
-					handles.push(spawned.handle);
-				}
-				return { handles };
-			}
-		}),
-		tool({
-			name: "await_any",
-			description: "Wait for the FIRST of the handles to settle; returns its TaskDigest.",
-			parameters: AWAIT_SCHEMA,
-			execute: (input) => runtime.awaitAny(input.handles)
-		}),
-		tool({
-			name: "await_all",
-			description: "Wait for ALL handles to settle; returns their TaskDigests in handle order.",
-			parameters: AWAIT_SCHEMA,
-			execute: (input) => runtime.awaitAll(input.handles)
-		}),
-		tool({
-			name: "cancel_agent",
-			description: "Cancel an in-flight child. Cancellation is caller intent: the entry journals cancelled and reruns on a later resume unless covered by abandon (M7).",
-			parameters: CANCEL_AGENT_SCHEMA,
-			execute: (input) => {
-				const params = input;
-				return runtime.cancel(params.handle, params.reason);
-			}
-		}),
-		tool({
-			name: WAIT_FOR_EVENTS_TOOL_NAME,
-			description: "Sleep until a coalesced WakeDigest: quiescence (always armed), child_terminal, escalation, or budget_threshold at 50/80 percent. A trigger set that can never fire is a typed error.",
-			parameters: WAIT_FOR_EVENTS_SCHEMA,
-			execute: (input) => runtime.waitForEvents(input.triggers)
-		}),
-		tool({
-			name: FINISH_TOOL_NAME,
-			description: "Terminate the orchestration with a result (run outcome ok).",
-			parameters: FINISH_SCHEMA,
-			execute: () => {
-				throw new Error("finish is intercepted by the agent runtime, never executed");
-			}
-		})
+function buildOrchestratorTools(runtime, profileCardText, options) {
+	const spawnAgent = tool({
+		name: "spawn_agent",
+		description: `Admit and schedule one child agent. ${profileCardText}`,
+		parameters: SPAWN_AGENT_SCHEMA,
+		execute: (input) => runtime.spawn(input)
+	});
+	const parallelAgents = tool({
+		name: "parallel_agents",
+		description: "Admit and schedule several children at once (submission order).",
+		parameters: PARALLEL_AGENTS_SCHEMA,
+		execute: async (input) => {
+			const tasks = input.tasks;
+			const handles = [];
+			for (const task of tasks) {
+				const spawned = await runtime.spawn(task);
+				handles.push(spawned.handle);
+			}
+			return { handles };
+		}
+	});
+	const awaitAny = tool({
+		name: "await_any",
+		description: "Wait for the FIRST of the handles to settle; returns its TaskDigest.",
+		parameters: AWAIT_SCHEMA,
+		execute: (input) => runtime.awaitAny(input.handles)
+	});
+	const awaitAll = tool({
+		name: "await_all",
+		description: "Wait for ALL handles to settle; returns their TaskDigests in handle order.",
+		parameters: AWAIT_SCHEMA,
+		execute: (input) => runtime.awaitAll(input.handles)
+	});
+	const cancelAgent = tool({
+		name: "cancel_agent",
+		description: "Cancel an in-flight child. Cancellation is caller intent: the entry journals cancelled and reruns on a later resume unless covered by abandon (M7).",
+		parameters: CANCEL_AGENT_SCHEMA,
+		execute: (input) => {
+			const params = input;
+			return runtime.cancel(params.handle, params.reason);
+		}
+	});
+	const waitForEvents = tool({
+		name: WAIT_FOR_EVENTS_TOOL_NAME,
+		description: "Sleep until a coalesced WakeDigest: quiescence (always armed), child_terminal, escalation, or budget_threshold at 50/80 percent. A trigger set that can never fire is a typed error.",
+		parameters: WAIT_FOR_EVENTS_SCHEMA,
+		execute: (input) => runtime.waitForEvents(input.triggers)
+	});
+	const finish = tool({
+		name: FINISH_TOOL_NAME,
+		description: "Terminate the orchestration with a result (run outcome ok).",
+		parameters: FINISH_SCHEMA,
+		execute: () => {
+			throw new Error("finish is intercepted by the agent runtime, never executed");
+		}
+	});
+	const tools = [
+		spawnAgent,
+		parallelAgents,
+		awaitAny,
+		awaitAll,
+		cancelAgent,
+		waitForEvents
 	];
+	if (options?.childResultTools === true) tools.push(tool({
+		name: GET_CHILD_RESULT_TOOL_NAME,
+		description: "Read a page of a SETTLED child's FULL output (the digest is truncated to 400 chars). Pages with offset and maxChars; the reply reports totalChars and hasMore.",
+		parameters: GET_CHILD_RESULT_SCHEMA,
+		execute: (input) => {
+			const p = input;
+			return runtime.getChildResult(p.handle, {
+				offset: p.offset,
+				maxChars: p.maxChars
+			});
+		}
+	}), tool({
+		name: READ_CHILD_ARTIFACT_TOOL_NAME,
+		description: "Read a page of a SETTLED child's artifact content by id (ids come from get_child_result or a digest). Pages with offset and maxChars.",
+		parameters: READ_CHILD_ARTIFACT_SCHEMA,
+		execute: (input) => {
+			const p = input;
+			return runtime.readChildArtifact(p.handle, p.artifactId, {
+				offset: p.offset,
+				maxChars: p.maxChars
+			});
+		}
+	}));
+	tools.push(finish);
+	return tools;
 }
 //#endregion
 //#region src/engine/internal.ts
@@ -12477,6 +12551,29 @@ async function executeWorkflow(internals, wf, args) {
 */
 const ORCHESTRATE_WORKFLOW_NAME = "rulvar-orchestrate";
 /**
+* One page of a string, for the child result evidence tools: maxChars is
+* clamped to [1, MAX] and offset to [0, length], so a hostile or absent
+* paging argument can never throw or read past the end. The window is measured in
+* UTF-16 code units, the same unit the model counts, so hasMore and the
+* next offset are exact.
+*/
+function pageOf(content, rawOffset, rawMaxChars) {
+	const totalChars = content.length;
+	const offset = Math.min(Math.max(0, Math.trunc(rawOffset ?? 0)), totalChars);
+	const end = Math.min(offset + Math.min(Math.max(1, Math.trunc(rawMaxChars ?? 4e3)), MAX_CHILD_RESULT_PAGE_CHARS), totalChars);
+	return {
+		totalChars,
+		offset,
+		content: content.slice(offset, end),
+		hasMore: end < totalChars
+	};
+}
+/** The serialized full result of a settled child: the raw string, or JSON. */
+function serializeChildOutput(result) {
+	if (result.status !== "ok") return result.errorMessage ?? `terminal status ${result.status}`;
+	return typeof result.output === "string" ? result.output : JSON.stringify(result.output ?? null);
+}
+/**
 * The orchestrate intake gate (v1.35.0 review P2-2): every numeric
 * option and the atCap literal validate SYNCHRONOUSLY at workflow
 * construction, shared by both surfaces (the top level orchestrate() throws
@@ -12490,6 +12587,12 @@ function validateOrchestrateOptions(opts) {
 	if (opts === void 0) return;
 	if (opts.maxSpawns !== void 0) requireNonNegativeInteger(opts.maxSpawns, "orchestrate maxSpawns");
 	if (opts.renderBudgetChars !== void 0) requireNonNegativeInteger(opts.renderBudgetChars, "orchestrate renderBudgetChars");
+	if (opts.acceptance !== void 0) {
+		const policy = opts.acceptance.childPolicy;
+		const minSuccessful = typeof policy === "object" && policy !== null && !Array.isArray(policy) ? policy.minSuccessful : void 0;
+		if (policy !== "all-ok" && minSuccessful === void 0) throw new ConfigError(`orchestrate acceptance.childPolicy must be 'all-ok' or { minSuccessful: N }; got ${JSON.stringify(policy)}`);
+		if (policy !== "all-ok") requirePositiveInteger(minSuccessful, "orchestrate acceptance.childPolicy.minSuccessful");
+	}
 	const spec = opts.budget;
 	if (spec === void 0) return;
 	if (spec.capUsd !== void 0) requireNonNegativeNumber(spec.capUsd, "orchestrate budget.capUsd");
@@ -13231,6 +13334,48 @@ function makeOrchestratorWorkflow(goal, opts) {
 			async cancel(handle, reason) {
 				await recoveryDone;
 				return cancelByHandle(handle, reason);
+			},
+			async getChildResult(handle, opts) {
+				await recoveryDone;
+				const record = records.get(handle);
+				if (record === void 0) throw new ConfigError(`get_child_result: unknown handle ${String(handle)}`);
+				const settled = record.settled;
+				if (settled === void 0) throw new ConfigError(`get_child_result: child ${String(handle)} has not settled; await it first`);
+				const page = pageOf(serializeChildOutput(settled), opts?.offset, opts?.maxChars);
+				return {
+					handle,
+					status: settled.status,
+					...page,
+					artifacts: (settled.artifacts ?? []).map((artifact) => ({
+						id: artifact.id,
+						kind: artifact.kind,
+						...artifact.label === void 0 ? {} : { label: artifact.label }
+					}))
+				};
+			},
+			async readChildArtifact(handle, artifactId, opts) {
+				await recoveryDone;
+				const record = records.get(handle);
+				if (record === void 0) throw new ConfigError(`read_child_artifact: unknown handle ${String(handle)}`);
+				const settled = record.settled;
+				if (settled === void 0) throw new ConfigError(`read_child_artifact: child ${String(handle)} has not settled; await it first`);
+				const artifact = (settled.artifacts ?? []).find((a) => a.id === artifactId);
+				if (artifact === void 0) throw new ConfigError(`read_child_artifact: child ${String(handle)} has no artifact '${artifactId}'`);
+				let raw = "";
+				if (artifact.data !== void 0) raw = typeof artifact.data === "string" ? artifact.data : JSON.stringify(artifact.data);
+				else if (artifact.ref !== void 0) {
+					const blob = await internals.transcripts.get(artifact.ref);
+					raw = blob === null ? "" : new TextDecoder().decode(blob);
+				}
+				const page = pageOf(raw, opts?.offset, opts?.maxChars);
+				return {
+					handle,
+					artifactId,
+					kind: artifact.kind,
+					...artifact.label === void 0 ? {} : { label: artifact.label },
+					...page,
+					...artifact.files === void 0 ? {} : { files: artifact.files }
+				};
 			}
 		};
 		if (extension?.boot !== void 0) await extension.boot(io);
@@ -13306,7 +13451,7 @@ function makeOrchestratorWorkflow(goal, opts) {
 		const agentOpts = {
 			role: "orchestrate",
 			result: "full",
-			tools: [...buildOrchestratorTools(orchestratorRuntime, fullCardText), ...extension?.tools(io) ?? []],
+			tools: [...buildOrchestratorTools(orchestratorRuntime, fullCardText, { childResultTools: opts?.exposeChildResultTools === true }), ...extension?.tools(io) ?? []],
 			...capState === void 0 ? {} : { estCost: capState.effectiveCapUsd - (orchestratorAccount === void 0 ? 0 : internals.budget.accountView(orchestratorAccount)?.finalizeReserveUsd ?? 0) },
 			...opts?.model === void 0 ? {} : { model: opts.model },
 			...opts?.limits === void 0 ? {} : { limits: opts.limits },
@@ -13417,7 +13562,55 @@ function makeOrchestratorWorkflow(goal, opts) {
 		if (capDecisionRef !== void 0) return await settleCapOutcome();
 		if (orchestratorAccount !== void 0) internals.cost.orchestrator.spentUsd = internals.budget.accountView(orchestratorAccount)?.spentUsd ?? 0;
 		if (result.status !== "ok") throw new ConfigError(`the orchestrator agent terminated with status '${result.status}'` + (result.errorMessage === void 0 ? "" : `: ${result.errorMessage}`));
-		return result.output;
+		if (opts?.acceptance === void 0) return result.output;
+		const acceptanceKey = "acceptance";
+		const priorAcceptance = internals.replayer.snapshot().find((entry) => entry.kind === "decision" && entry.scope === callingState.scope && entry.key === acceptanceKey);
+		let decision;
+		if (priorAcceptance !== void 0) decision = priorAcceptance.value;
+		else {
+			const childStatusCounts = {};
+			const degradedReasons = [];
+			const sortedRecords = [...records.values()].sort((a, b) => a.spawnOrdinal - b.spawnOrdinal);
+			for (const record of sortedRecords) {
+				const status = record.settled?.status ?? "running";
+				childStatusCounts[status] = (childStatusCounts[status] ?? 0) + 1;
+				if (status !== "ok") degradedReasons.push(status === "running" ? `child ${record.nodeId} was still running when finish validated` : `child ${record.nodeId} settled '${status}'`);
+			}
+			const childPolicy = opts.acceptance.childPolicy;
+			const accepted = childPolicy === "all-ok" ? degradedReasons.length === 0 : (childStatusCounts.ok ?? 0) >= childPolicy.minSuccessful;
+			decision = {
+				decisionType: "orchestrator_acceptance",
+				verdict: accepted ? "accepted" : "rejected",
+				completion: !accepted ? "rejected" : degradedReasons.length === 0 ? "complete" : "partial",
+				childPolicy,
+				childStatusCounts,
+				degradedReasons
+			};
+			await internals.replayer.appendSinglePhase({
+				scope: callingState.scope,
+				key: acceptanceKey,
+				kind: "decision",
+				status: "ok",
+				spanId: internals.spans.mint(callingState.spanId),
+				site: "orchestrator-acceptance",
+				value: decision
+			});
+		}
+		if (decision.verdict === "rejected") {
+			const required = decision.childPolicy === "all-ok" ? "every child ok" : `at least ${String(decision.childPolicy.minSuccessful)} children ok`;
+			throw new FailRunError(`the orchestrator acceptance policy rejected the finish: ${String(decision.childStatusCounts.ok ?? 0)} children settled 'ok' but the policy requires ${required}; degraded: ${decision.degradedReasons.join("; ")}`, { data: {
+				source: "orchestrator_acceptance",
+				childPolicy: decision.childPolicy,
+				childStatusCounts: decision.childStatusCounts,
+				degradedReasons: decision.degradedReasons
+			} });
+		}
+		return {
+			result: result.output,
+			completion: decision.completion,
+			childStatusCounts: decision.childStatusCounts,
+			degradedReasons: decision.degradedReasons
+		};
 	});
 }
 /**
@@ -14589,4 +14782,4 @@ function createSandboxBridge(ctx, options) {
 	};
 }
 //#endregion
-export { AWAIT_SCHEMA, AdmissionController, AdmissionRejectedError, AgentCallError, BUDGET_ABORT_REASON, BudgetExhaustedError, CANCEL_AGENT_SCHEMA, CHECKPOINT_FORMAT_V1, CLAIM_STATEMENT_MAX_CHARS, CLAIM_TTL_DAYS, COMPACTION_SUMMARY_PREFIX, CURRENT_HASH_VERSION, ConfigError, DEFAULT_CHILD_BUDGET_FRACTION, DEFAULT_COMPACTION_THRESHOLD, DEFAULT_ESCALATION_LIMITS, DEFAULT_FLAT_RESERVE_USD, DEFAULT_MAX_CHILDREN_PER_NODE, DEFAULT_MAX_DEPTH, DEFAULT_MAX_OSCILLATIONS_PER_KEY, DEFAULT_MAX_PINNED_WORKTREES, DEFAULT_MAX_REVISIONS_PER_RUN, DEFAULT_MAX_TOTAL_SPAWNS, DEFAULT_MAX_TURNS, DEFAULT_MODEL_RETRY_ATTEMPTS, DEFAULT_NO_PROGRESS_TURNS, DEFAULT_PER_RUN_CONCURRENCY, DEFAULT_RETRY_POLICY, DEFAULT_STREAM_IDLE_TIMEOUT_MS, DedupIndex, EMIT_RESULT_TOOL, EMPTY_SCHEMA_HASH, EMPTY_TOOLSET_HASH, ESCALATE_TOOL_NAME, ESCALATION_REPORT_SCHEMA, ESCALATION_REQUEST_SCHEMA, EVENT_SEGMENT_STRIDE, EscalationDecisionAbortedError, EventBus, ExternalRegistry, FINALIZE_SYNTHESIS_INSTRUCTION, FINISH_SCHEMA, FINISH_TOOL_NAME, FailRunError, FileModelKnowledgeStore, FileTranscriptStore, GitWorktreeProvider, INBOX_PROPOSAL_TTL_DAYS, InMemoryStore, InMemoryTranscriptStore, InProcessRunner, InvalidResolutionError, JournalCompatibilityError, JournalMatcher, JournalMissError, JournalOrderViolation, JsonlFileStore, KB_ACTIVE_CLAIMS_CAP, KB_CARD_RENDER_BUDGET_CHARS, KeyedLimiter, KnowledgeCasError, LARGE_VALUE_WARN_BYTES, LEGACY_LTID_PREFIX, LEGACY_SIGNATURE_INPUTS, LINEAGE_SIG_VERSION, LeaseHeldError, LineageIndex, MASKED_SECRET, MAX_DEPTH_CEILING, ModelRetry, NoProgressDetector, NonSerializableValueError, ORCHESTRATE_WORKFLOW_NAME, OrchestratorCapConfigError, PARALLEL_AGENTS_SCHEMA, ParallelSiteCounter, PlanInvariantError, ROLE_EFFORT_DEFAULTS, ROOT_ACCOUNT, ROOT_SCOPE, RUN_PROFILES, ReplayPlanHashMismatch, Replayer, ResolutionArbiter, ResolutionFold, RulvarError, RunBudget, SANDBOX_AGENT_OPT_KEYS, SPAWN_AGENT_SCHEMA, SandboxError, ScriptRejected, Semaphore, SpanRegistry, TOOL_NAME_PATTERN, TerminationAccount, WAIT_FOR_EVENTS_SCHEMA, WAIT_FOR_EVENTS_TOOL_NAME, WAKE_SUMMARY_RENDER_BUDGET_CHARS, admissionReserveUsd, affordableOutputTokens, agentErrorFromWire, agentErrorToWire, agentResultWire, agentScope, applyClaimOps, applyStructuredOutputTier, approachSigCoarse, approachSigOf, archiveDeprecatedModelOps, atCompactionThreshold, buildAbandonFold, buildAdapterRegistry, buildCostReport, buildDeriverRegistry, buildOrchestratorTools, buildTerminationInitValue, buildToolContext, canRideLoopTurn, canonicalIsolationTag, canonicalizeLadder, canonicalizeSchema, capIssues, capsHashOf, checkFloors, checkpointRefFor, childCoveragePrefix, claimExpired, claimExpiry, claimIssues, claimOpIssues, classifyAgentError, classifyAttemptOutcome, collectDeclaredLadders, compactMessages, compilePermissionChain, compilePermissionPreset, compileVerifiedLayer, costReportFromJournal, countsAgainstLimit, createCanonicalIdMinter, createCtx, createEngine, createSandboxBridge, currentOnlyKeyRing, decodeCheckpoint, defineWorkflow, deriveContentKey, deriverV1, deriverV2, digestOf, dispositionHook, emptyDigestBlocks, emptyToolset, encodeCheckpoint, entryUsageSlices, escalateTool, evaluatePermission, evaluateReuse, executeWorkflow, exhaustionCodeOf, extractCandidate, failoverTriggerOf, fallbackTriggerOf, filterClaimsForRun, finalizeFires, foldTermination, formatRePrompt, formatScopePath, hasMetaLookup, hashRunArgs, hashWorkflowBody, hashWorkflowSource, identityJcs, isEscalated, isSchemaPairSpec, isStandardSchemaSpec, isStrictCompatibleSchema, kMaxOf, knowledgeHash, ladderLengthOf, ladderRungChoice, lexShellCommand, liftRetainedParts, lineageWeightOf, makeOrchestratorWorkflow, maskSecrets, maskSecretsDeep, maskSecretsJson, matchArgvPattern, matchShellCommand, mcp, mergeUsageLimits, metaMatchesFilter, modelEpochOf, modelKnowledgeCard, modelSpecIdentity, needsSeparateExtract, nextFailover, nodeLinkKey, normalizeApproachTag, normalizeEntry, normalizeFallbacks, orchestrate, parallelScope, parseModelRef, parseScopePath, phiInitialOf, pipelineScope, planNodeScope, priceEntryUsage, priceUsdOf, profileCard, profileRegistrySnapshotHash, projectHistory, projectIdentity, projectToJsonSchema, proposalStatement, providerOf, readRunMeta, readTerminationInit, registryKeyRing, remeasureQueue, replayDisposition, resolveModelInvocation, resolvePricing, resolveToolset, retryClassOf, retryDelayMs, roleConfiguredInRouting, roundOneDisposition, runAgent, runProfile, sanitizeTerminalText, sanitizeTokenCount, sanitizeUsage, sanitizeUsageDelta, scanJournalCompatibility, schemaHash, schemaHashOfSpec, selectStructuredOutputTier, shouldCompact, snapshotUsage, spawnDepthOf, summarizeInstruction, summarizeOutput, terminationConfigDrift, tierWithinCaps, toApprovalDecision, toJournalValue, tool, toolContract, toolsetHash, ttlState, usageViolations, validateEditorialCommit, validateEntryShape, validateEscalationLimits, validateEscalationReport, validateRetryPolicy, validateSchemaSpec, validateTerminationLimits, validateUsageLimits, workflowScope, workflowSourceRef, wrapJournalStore, wrapTranscriptStore };
+export { AWAIT_SCHEMA, AdmissionController, AdmissionRejectedError, AgentCallError, BUDGET_ABORT_REASON, BudgetExhaustedError, CANCEL_AGENT_SCHEMA, CHECKPOINT_FORMAT_V1, CLAIM_STATEMENT_MAX_CHARS, CLAIM_TTL_DAYS, COMPACTION_SUMMARY_PREFIX, CURRENT_HASH_VERSION, ConfigError, DEFAULT_CHILD_BUDGET_FRACTION, DEFAULT_CHILD_RESULT_PAGE_CHARS, DEFAULT_COMPACTION_THRESHOLD, DEFAULT_ESCALATION_LIMITS, DEFAULT_FLAT_RESERVE_USD, DEFAULT_MAX_CHILDREN_PER_NODE, DEFAULT_MAX_DEPTH, DEFAULT_MAX_OSCILLATIONS_PER_KEY, DEFAULT_MAX_PINNED_WORKTREES, DEFAULT_MAX_REVISIONS_PER_RUN, DEFAULT_MAX_TOTAL_SPAWNS, DEFAULT_MAX_TURNS, DEFAULT_MODEL_RETRY_ATTEMPTS, DEFAULT_NO_PROGRESS_TURNS, DEFAULT_PER_RUN_CONCURRENCY, DEFAULT_RETRY_POLICY, DEFAULT_STREAM_IDLE_TIMEOUT_MS, DedupIndex, EMIT_RESULT_TOOL, EMPTY_SCHEMA_HASH, EMPTY_TOOLSET_HASH, ESCALATE_TOOL_NAME, ESCALATION_REPORT_SCHEMA, ESCALATION_REQUEST_SCHEMA, EVENT_SEGMENT_STRIDE, EscalationDecisionAbortedError, EventBus, ExternalRegistry, FINALIZE_SYNTHESIS_INSTRUCTION, FINISH_SCHEMA, FINISH_TOOL_NAME, FailRunError, FileModelKnowledgeStore, FileTranscriptStore, GET_CHILD_RESULT_SCHEMA, GET_CHILD_RESULT_TOOL_NAME, GitWorktreeProvider, INBOX_PROPOSAL_TTL_DAYS, InMemoryStore, InMemoryTranscriptStore, InProcessRunner, InvalidResolutionError, JournalCompatibilityError, JournalMatcher, JournalMissError, JournalOrderViolation, JsonlFileStore, KB_ACTIVE_CLAIMS_CAP, KB_CARD_RENDER_BUDGET_CHARS, KeyedLimiter, KnowledgeCasError, LARGE_VALUE_WARN_BYTES, LEGACY_LTID_PREFIX, LEGACY_SIGNATURE_INPUTS, LINEAGE_SIG_VERSION, LeaseHeldError, LineageIndex, MASKED_SECRET, MAX_CHILD_RESULT_PAGE_CHARS, MAX_DEPTH_CEILING, ModelRetry, NoProgressDetector, NonSerializableValueError, ORCHESTRATE_WORKFLOW_NAME, OrchestratorCapConfigError, PARALLEL_AGENTS_SCHEMA, ParallelSiteCounter, PlanInvariantError, READ_CHILD_ARTIFACT_SCHEMA, READ_CHILD_ARTIFACT_TOOL_NAME, ROLE_EFFORT_DEFAULTS, ROOT_ACCOUNT, ROOT_SCOPE, RUN_PROFILES, ReplayPlanHashMismatch, Replayer, ResolutionArbiter, ResolutionFold, RulvarError, RunBudget, SANDBOX_AGENT_OPT_KEYS, SPAWN_AGENT_SCHEMA, SandboxError, ScriptRejected, Semaphore, SpanRegistry, TOOL_NAME_PATTERN, TerminationAccount, WAIT_FOR_EVENTS_SCHEMA, WAIT_FOR_EVENTS_TOOL_NAME, WAKE_SUMMARY_RENDER_BUDGET_CHARS, admissionReserveUsd, affordableOutputTokens, agentErrorFromWire, agentErrorToWire, agentResultWire, agentScope, applyClaimOps, applyStructuredOutputTier, approachSigCoarse, approachSigOf, archiveDeprecatedModelOps, atCompactionThreshold, buildAbandonFold, buildAdapterRegistry, buildCostReport, buildDeriverRegistry, buildOrchestratorTools, buildTerminationInitValue, buildToolContext, canRideLoopTurn, canonicalIsolationTag, canonicalizeLadder, canonicalizeSchema, capIssues, capsHashOf, checkFloors, checkpointRefFor, childCoveragePrefix, claimExpired, claimExpiry, claimIssues, claimOpIssues, classifyAgentError, classifyAttemptOutcome, collectDeclaredLadders, compactMessages, compilePermissionChain, compilePermissionPreset, compileVerifiedLayer, costReportFromJournal, countsAgainstLimit, createCanonicalIdMinter, createCtx, createEngine, createSandboxBridge, currentOnlyKeyRing, decodeCheckpoint, defineWorkflow, deriveContentKey, deriverV1, deriverV2, digestOf, dispositionHook, emptyDigestBlocks, emptyToolset, encodeCheckpoint, entryUsageSlices, escalateTool, evaluatePermission, evaluateReuse, executeWorkflow, exhaustionCodeOf, extractCandidate, failoverTriggerOf, fallbackTriggerOf, filterClaimsForRun, finalizeFires, foldTermination, formatRePrompt, formatScopePath, hasMetaLookup, hashRunArgs, hashWorkflowBody, hashWorkflowSource, identityJcs, isEscalated, isSchemaPairSpec, isStandardSchemaSpec, isStrictCompatibleSchema, kMaxOf, knowledgeHash, ladderLengthOf, ladderRungChoice, lexShellCommand, liftRetainedParts, lineageWeightOf, makeOrchestratorWorkflow, maskSecrets, maskSecretsDeep, maskSecretsJson, matchArgvPattern, matchShellCommand, mcp, mergeUsageLimits, metaMatchesFilter, modelEpochOf, modelKnowledgeCard, modelSpecIdentity, needsSeparateExtract, nextFailover, nodeLinkKey, normalizeApproachTag, normalizeEntry, normalizeFallbacks, orchestrate, parallelScope, parseModelRef, parseScopePath, phiInitialOf, pipelineScope, planNodeScope, priceEntryUsage, priceUsdOf, profileCard, profileRegistrySnapshotHash, projectHistory, projectIdentity, projectToJsonSchema, proposalStatement, providerOf, readRunMeta, readTerminationInit, registryKeyRing, remeasureQueue, replayDisposition, resolveModelInvocation, resolvePricing, resolveToolset, retryClassOf, retryDelayMs, roleConfiguredInRouting, roundOneDisposition, runAgent, runProfile, sanitizeTerminalText, sanitizeTokenCount, sanitizeUsage, sanitizeUsageDelta, scanJournalCompatibility, schemaHash, schemaHashOfSpec, selectStructuredOutputTier, shouldCompact, snapshotUsage, spawnDepthOf, summarizeInstruction, summarizeOutput, terminationConfigDrift, tierWithinCaps, toApprovalDecision, toJournalValue, tool, toolContract, toolsetHash, ttlState, usageViolations, validateEditorialCommit, validateEntryShape, validateEscalationLimits, validateEscalationReport, validateRetryPolicy, validateSchemaSpec, validateTerminationLimits, validateUsageLimits, workflowScope, workflowSourceRef, wrapJournalStore, wrapTranscriptStore };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rulvar/core",
-  "version": "1.40.0",
+  "version": "1.42.0",
   "description": "Rulvar core: L0 contracts, journal kernel, ctx primitives, agent runtime, model router, tool system, dynamic orchestrator, InMemory and JSONL stores, event stream.",
   "type": "module",
   "license": "Apache-2.0",