@rulvar/core 1.5.2 → 1.7.0

package/README.md

@@ -1,6 +1,6 @@
 # @rulvar/core
 
-The rulvar engine in one dependency-light package: the L0 contracts and
+The Rulvar engine in one dependency-light package: the L0 contracts and
 SPI interfaces, the journal kernel behind the never-pay-twice invariant,
 the model router with the capability and price registry, the agent
 runtime, the tool system and MCP bus, the `ctx` primitives and run
@@ -10,7 +10,7 @@ adapters plug in from their own packages. Key exports: `createEngine`,
 `defineWorkflow`, `tool`, `mcp`, `orchestrate`, `InMemoryStore`,
 `JsonlFileStore`.
 
-Part of [rulvar](https://rulvar.com), an embeddable TypeScript engine
+Part of [Rulvar](https://rulvar.com), an embeddable TypeScript engine
 for durable, budget-bounded multi-agent LLM workflows, where a completed
 LLM call is never paid for twice. Full documentation:
 [docs.rulvar.com](https://docs.rulvar.com).

package/dist/index.d.ts

@@ -608,6 +608,23 @@ interface UsageSlice {
   usage: Usage;
 }
 /**
+* Cost-attribution facts a live run knows at settlement and a pure
+* journal fold cannot re-derive: the innermost phase name at the call
+* site, the agent profile, the primary invocation role, the budget
+* account the call debited, and whether the dispatch spent the
+* orchestrator finalize reserve. Policy, never identity, exactly like
+* usageByModel: none of it enters the content key, and entries written
+* before the field shipped fold under the documented fallback buckets
+* (empty phase, 'unknown' agent type, role 'loop').
+*/
+interface CostAttributionFacts {
+  phase?: string;
+  agentType?: string;
+  role?: InvocationRole;
+  budgetAccount?: string;
+  finalizeReserve?: boolean;
+}
+/**
 * The per-model slices of a terminal entry: the recorded split when the
 * call spanned several models, else the whole usage attributed to
 * `servedBy`. The fallback is what makes every journal written before the
@@ -669,6 +686,13 @@ type JournalEntry = {
   * Policy, never identity: it does not enter the content key.
   */
   usageByModel?: UsageSlice[];
+  /**
+  * Terminal usage-bearing entries: the attribution facts behind the
+  * CostReport breakdowns, so a pure journal fold reproduces the live
+  * report byte for byte on replay. Policy, never identity, exactly
+  * like usageByModel.
+  */
+  costAttribution?: CostAttributionFacts;
   transcriptRef?: string;
   checkpointRef?: string;
   /**
@@ -1029,6 +1053,25 @@ declare function validateSchemaSpec<S extends SchemaSpec>(spec: S, value: unknow
 //#endregion
 //#region src/l0/spi/provider.d.ts
 /**
+* One long-context price tier. When the full prompt (canonical
+* inputTokens, cache included) is strictly above `aboveInputTokens`, the
+* ENTIRE request is re-priced with these multipliers, not only the tokens
+* past the threshold (how providers state their long-context rules).
+* `inputMultiplier` scales every input-side rate: input, cache read, and
+* cache write.
+* `outputMultiplier` scales the output rate. Provider pricing pages state
+* multipliers for "input" without saying whether cache rates scale;
+* scaling them with input is the conservative reading for budget
+* enforcement (it never underestimates spend). With several tiers, the
+* highest threshold below the prompt size wins, independent of array
+* order.
+*/
+interface PricingTier {
+  aboveInputTokens: number;
+  inputMultiplier: number;
+  outputMultiplier: number;
+}
+/**
 * Per-model pricing in USD per million tokens. The registry's
 * versioned price table wins over adapter-
 * reported caps.pricing, which is a fallback only.
@@ -1041,6 +1084,8 @@ interface Pricing {
   cacheWriteUsdPerMTok?: number;
   /** 1h write premium rate where the provider distinguishes. */
   cacheWrite1hUsdPerMTok?: number;
+  /** Long-context tiers; a row without them is one linear price. */
+  tiers?: PricingTier[];
 }
 /** Capability facts the router consumes for tier selection and scrubbing. */
 type ModelCaps = {
@@ -2062,6 +2107,8 @@ interface TerminalPatch {
   servedBy?: ModelRef;
   /** Set only when the call spanned several serving models; see JournalEntry. */
   usageByModel?: UsageSlice[];
+  /** Attribution facts behind the CostReport breakdowns; see JournalEntry. */
+  costAttribution?: CostAttributionFacts;
   transcriptRef?: string;
   checkpointRef?: string;
   /** Terminal agent entries: Artifact list. */
@@ -2740,6 +2787,15 @@ interface RuntimeEventSink {
 interface BudgetHooks {
   /** Layer 2: before every turn; throws BudgetExhaustedError to block dispatch. */
   beforeTurn(): void;
+  /**
+  * Layer 2b, the pre-dispatch output bound: the output tokens the
+  * remaining budget still affords from `servedBy` for a prompt of
+  * `estimatedInputTokens`. The dispatch clamps the request's
+  * maxOutputTokens to it and denies the turn entirely when not even one
+  * output token fits. Undefined = unbounded (no ceiling, no price row,
+  * or free output).
+  */
+  maxAffordableOutputTokens?: (servedBy: ModelRef, estimatedInputTokens: number) => number | undefined;
   /** Live usage accounting; layer 3 may respond by aborting `signal`. */
   onUsage(usage: Usage, servedBy: ModelRef): void;
   /** Layer 3: the ceiling AbortSignal. */
@@ -3292,15 +3348,20 @@ declare const DEFAULT_FLAT_RESERVE_USD = .5;
 /** The run-root account scope. */
 declare const ROOT_ACCOUNT = "run";
 /**
-* The admission reserve for a spawn: opts.estCost, else profile.estCost, else
-* price(countTokens(input) + caps.maxOutputTokens), else the engine flat
-* default.
+* The admission reserve for a spawn: opts.estCost, else profile.estCost,
+* else price(countTokens(input) + one turn's worth of output), else the
+* engine flat default. The output term is caps.maxOutputTokens clamped to
+* limits.maxOutputTokensPerTurn when the spawn carries one, so a host can
+* bound reserves without hand-written estimates. The priced path uses the
+* SAME price function as settlement (priceUsdOf), so long-context tiers
+* apply to estimates too.
 */
 declare function admissionReserveUsd(options: {
   estCost?: number;
   profileEstCost?: number;
   inputTokens?: number;
   caps?: ModelCaps;
+  maxOutputTokensPerTurn?: number;
   flatReserveUsd?: number;
 }): number;
 /** Read-only projection of one account. */
@@ -3313,6 +3374,26 @@ interface BudgetAccountView {
   parentScope?: string;
 }
 /**
+* Why a ceiling error ended the work: the first closed account walking
+* from the debited scope toward the root, plus the root state, so the
+* outward message can name WHICH ceiling actually crossed instead of
+* blaming the run ceiling for every crossing.
+*/
+interface BudgetExhaustionDiagnostics {
+  crossed?: {
+    scope: string;
+    source: "root" | "orchestrator-cap" | "child-account";
+    ceilingUsd: number;
+    spentUsd: number;
+    committedReserveUsd: number;
+    finalizeReserveUsd: number;
+  };
+  root: {
+    ceilingUsd?: number;
+    spentUsd: number;
+  };
+}
+/**
 * The per-run budget account tree. All spend accounting is per instance;
 * the journal remains the durable source (the root is seeded by the
 * ledger fold on resume, M2; sub-account reserves are recovered from
@@ -3324,6 +3405,7 @@ declare class RunBudget {
   private readonly lifetimeSpawnCap;
   private readonly events?;
   private readonly priceUsd?;
+  private readonly pricingOf?;
   private readonly accounts;
   private usageInternal;
   private agentsSpawnedInternal;
@@ -3334,7 +3416,8 @@ declare class RunBudget {
     ceilingUsd?: number;
     lifetimeSpawnCap?: number;
     events?: RuntimeEventSink;
-    priceUsd?: (servedBy: ModelRef, usage: Usage) => number | undefined;
+    priceUsd?: (servedBy: ModelRef, usage: Usage) => number | undefined; /** Raw price-row resolution for the layer-2b output bound. */
+    pricingOf?: (servedBy: ModelRef) => Pricing | undefined;
     /**
     * The resume ledger fold: spend is never
     * reset and never double-counted; replayed entries are already inside
@@ -3358,7 +3441,20 @@ declare class RunBudget {
     parentScope?: string;
     ceilingUsd?: number;
     finalizeReserveUsd?: number;
+    kind?: "orchestrator-cap";
   }): void;
+  /**
+  * The diagnostic projection behind a ceiling error: the first CLOSED
+  * account (projected commitments included, exactly the layer-1
+  * closure test) walking from `scope` toward the root, plus the root
+  * state. 'run budget ceiling reached' under a healthy root misled the
+  * v1.6.0 follow-up review's live probe when only a 0.18 USD
+  * orchestrator cap had crossed under a 0.90 USD root; the message can
+  * now name the account that actually ended the work. An unknown scope
+  * degrades to root-only diagnostics instead of throwing: this runs on
+  * the error path.
+  */
+  exhaustionDiagnostics(scope: string): BudgetExhaustionDiagnostics;
   accountView(scope: string): BudgetAccountView | undefined;
   /**
   * The admission remainder of one account: ceiling minus spend minus
@@ -3381,9 +3477,15 @@ declare class RunBudget {
   /** Spawn headroom under the engine lifetime cap (embedded in admission verdicts). */
   get spawnHeadroom(): number;
   /**
-  * Layer 1: admission before spawn. Blocks when spent + committedReserve
-  * has reached the ceiling on ANY account in the ancestor chain of
-  * `accountScope`, otherwise commits the reserve along the whole chain.
+  * Layer 1: PROJECTED admission before spawn. A spawn is admitted only
+  * when every account in the ancestor chain of `accountScope` still has
+  * admission headroom AND fits the PROPOSED reserve on top of spent +
+  * committedReserve + finalizeReserve (the finalize reserve is
+  * untouchable by admission, DEF-7). An exact fill is allowed; one
+  * dollar past the ceiling is not: a spawn is never admitted on the
+  * argument that the money it needs is merely not committed yet. The
+  * whole chain is checked before anything commits, so a rejection
+  * mutates no account, increments no counter, and journals nothing.
   * Also enforces the engine lifetime spawn cap.
   */
   admitSpawn(reserveUsd: number, accountScope?: string): void;
@@ -3416,6 +3518,17 @@ declare class RunBudget {
   /** Layer 2: the per-turn guard. A turn that would cross any ceiling in the chain is not dispatched. */
   beforeTurn(accountScope?: string): void;
   /**
+  * Layer 2b, the pre-dispatch output bound: the output tokens the
+  * remaining chain budget (min over capped ancestors of ceiling minus
+  * spend) still affords from `servedBy` for an estimated prompt, priced
+  * by the same function as settlement, long-context tiers included.
+  * Undefined when no account in the chain carries a USD ceiling, when
+  * the model has no price row (the once-per-model unpriced warning in
+  * onUsage covers that hole), or when output is free. Zero or negative
+  * means the turn cannot be dispatched within the budget.
+  */
+  maxAffordableOutputTokens(servedBy: ModelRef, estimatedInputTokens: number, accountScope?: string): number | undefined;
+  /**
   * Live accounting; spend propagates from `accountScope` to every
   * ancestor. Crossing a ceiling severs the crossing account's subtree
   * via its layer-3 AbortSignal (overshoot bounded by one turn per
@@ -4092,9 +4205,14 @@ type WorkflowEvent = {
 /** Folds the per-run attribution buckets into the normative CostReport. */
 declare function buildCostReport(attribution: CostAttribution, totalUsd: number): CostReport;
 /**
-* The pure journal fold: byModel and totals from terminal entries, the
-* same summation the kernel ledger uses (terminal usage exactly once,
-* priced per servedBy, abandoned subtrees contribute zero).
+* The pure journal fold: the complete CostReport from terminal entries,
+* the same summation the kernel ledger uses (terminal usage exactly
+* once, priced per servedBy slice, abandoned subtrees contribute zero).
+* The orchestrator block folds too: spend attributed to the
+* orchestrator sub-account, the reserve-funded share of it, the armed
+* wake count, and the at-cap freeze flag from the journaled cap
+* decision, so a replay-only resume reproduces the block instead of
+* reading this process's live accounts (which a replay never charges).
 */
 declare function costReportFromJournal(entries: readonly JournalEntry[], priceUsd: (servedBy: ModelRef, usage: Usage) => number | undefined): CostReport;
 //#endregion
@@ -4117,7 +4235,15 @@ interface CostReport {
   byPhase: Record<string, number>;
   byAgentType: Record<string, number>;
   byRole: Record<InvocationRole, number>;
-  /** All-zero with forcedFinish false in runs without a dynamic orchestrator. */
+  /**
+  * All-zero with forcedFinish false in runs without a dynamic
+  * orchestrator (or when no cap resolved, so no sub-account opened).
+  * Folded purely from the journal: spentUsd is the priced usage of
+  * entries debited to the orchestrator sub-account, reserveUsedUsd its
+  * reserve-funded forced-finish share, wakes the ARMED (journaled)
+  * wake suspensions (a wait satisfied synchronously never suspends and
+  * is not counted), and forcedFinish the journaled at-cap decision.
+  */
   orchestrator: {
     spentUsd: number; /** spentUsd / max(totalUsd, 0.01): the epsilon-floored H-OrchShare input. */
     share: number;
@@ -4180,11 +4306,13 @@ type OnEscalation = (result: EscalatedResult<unknown>) => EscalationDecision | P
 /**
 * The mode (a) runner for human-authored closures. Determinism is enforced
 * by convention, lint, and the ctx shims, NOT by a VM: only the sequence
-* of keys must be stable. Dev mode (NODE_ENV !== 'production') patches
-* Date.now and Math.random for the duration of execute to emit one warning
-* per run pointing at ctx.now()/ctx.random(); the patch preserves behavior
-* and restores the prior functions on exit (nesting-safe by capturing the
-* prior value; concurrent runs may lose the warning, never correctness).
+* of keys must be stable. Dev mode (NODE_ENV !== 'production') detects
+* bare Date.now and Math.random and emits one warning per run pointing at
+* ctx.now()/ctx.random(). Detection is attributed by AsyncLocalStorage:
+* only code inside the workflow body's async context can trigger it, so
+* host code running concurrently, engine internals outside the body, and
+* other runs never produce a false warning, and nothing is ever restored,
+* so concurrent executes cannot race the patch state.
 */
 declare class InProcessRunner implements ScriptRunner {
   private readonly onEscalation?;
@@ -4209,13 +4337,29 @@ interface PriceTable {
 */
 declare function resolvePricing(ref: ModelRef, table: PriceTable | undefined, capsPricing: Pricing | undefined): Pricing | undefined;
 /**
-* Dollars from normalized usage against one pricing row (the adapter
-* normalized the usage; inputTokens is the
-* full prompt). Cache writes price at the 5m premium rate; the 1h rate
-* applies where a provider distinguishes it in usage, which the
+* Dollars from normalized usage against one pricing row. Under the Usage
+* invariant inputTokens is the FULL prompt including cache reads and
+* writes, so the input rate bills only the uncached remainder and cache
+* tokens bill at their own rates, never twice; a row that omits a cache
+* rate bills those tokens at the plain input rate rather than silently
+* for free. A row may carry long-context tiers: the highest threshold
+* strictly below the full prompt re-prices the ENTIRE request
+* (input-side rates scale by inputMultiplier, the output rate by
+* outputMultiplier). Cache writes price at the 5m premium rate; the 1h
+* rate applies where a provider distinguishes it in usage, which the
 * canonical Usage does not yet carry.
 */
 declare function priceUsdOf(pricing: Pricing, usage: Usage): number;
+/**
+* The output tokens `remainingUsd` still buys from one pricing row after
+* paying for an estimated prompt of `estimatedInputTokens`, priced with
+* the same tier rules as settlement (the tier is selected by the
+* estimated prompt). Floored to whole tokens; zero or negative means not
+* even one output token fits, so the turn must not be dispatched.
+* Undefined when the row prices output at zero (a free model needs no
+* output bound).
+*/
+declare function affordableOutputTokens(pricing: Pricing, remainingUsd: number, estimatedInputTokens: number): number | undefined;
 //#endregion
 //#region src/engine/engine.d.ts
 /**
@@ -4331,7 +4475,14 @@ interface CreateEngineOptions {
 interface RunOptions {
   /** Explicit id; otherwise the engine mints a ULID. */
   runId?: string;
-  /** Run ceiling B0; immutable after start. */
+  /**
+  * Run ceiling B0; immutable after start. Enforced by projected
+  * admission (a spawn whose reserve does not fit is denied before any
+  * dispatch), the per-turn guard with a budget-derived maxOutputTokens
+  * clamp, and live stream cuts on crossing; the residual
+  * provider-dependent overshoot is bounded by one in-flight turn per
+  * concurrent agent. Contract: https://docs.rulvar.com/guide/budgets.
+  */
   budgetUsd?: number;
   /** Run-level defaults merged over engine defaults. */
   limits?: UsageLimits;
@@ -4773,6 +4924,13 @@ interface OrchestratorExtension {
 * machinery (reserves, freeze) completes in M7 (DEF-7).
 */
 interface OrchestratorBudgetSpec {
+  /**
+  * Absolute bound in USD. It never REPLACES the fraction bound:
+  * effectiveCap = min(capUsd, (capFraction ?? 0.2) * ceiling), so an
+  * explicit capUsd larger than the default fraction of the run ceiling
+  * is still cut to that fraction (and a warn log says so). Pass
+  * capFraction: 1.0 to make capUsd the sole bound.
+  */
   capUsd?: number;
   /** default 0.2; effectiveCap = min of the given bounds */
   capFraction?: number;
@@ -5306,6 +5464,8 @@ interface RunInternals {
   dropped: DroppedItem[];
   cost: CostAttribution;
   priceUsd: (servedBy: ModelRef, usage: Usage) => number | undefined;
+  /** Raw price-row resolution (table wins, caps fallback); undefined = unpriced. */
+  pricingOf?: (servedBy: ModelRef) => Pricing | undefined;
   runSignal?: AbortSignal;
   /** The worktree lifecycle provider. */
   isolation?: IsolationProvider;
@@ -6100,4 +6260,4 @@ interface SandboxBridge {
 }
 declare function createSandboxBridge(ctx: Ctx<never>, options: SandboxBridgeOptions): SandboxBridge;
 //#endregion
-export { AWAIT_SCHEMA, AbandonAttempt, AbandonFold, AbandonPayload, AbandonedSpendView, AbortClass, type AdaptiveEvents, AdmissionController, AdmissionDecision, AdmissionRejectedError, AdmissionStatsBefore, AdmitLineage, AdmitRejectReason, AdmitSpec, AdmitVerdict, AgentCallError, AgentError, type AgentEvents, AgentIdentityInput, AgentOpts, AgentProfile, AgentProfilePermissions, AgentResult, AgentResultMeta, AgentStatus, ApproachSignatureInputs, ApprovalDecision, ApprovalIdentityInput, Artifact, AttemptOutcomeClass, BUDGET_ABORT_REASON, BriefOpts, BudgetAccountView, BudgetDefaults, BudgetExhaustedError, BudgetHooks, BudgetReserve, type Bytes, CANCEL_AGENT_SCHEMA, CHECKPOINT_FORMAT_V1, CLAIM_STATEMENT_MAX_CHARS, CLAIM_TTL_DAYS, COMPACTION_SUMMARY_PREFIX, CURRENT_HASH_VERSION, CacheHint, CacheTtl, CanUseTool, CanonicalId, CanonicalIdentity, CanonicalLadderSpec, CanonicalModelSpec, ChatEvent, ChatRequest, CheckpointState, ChildIdentityInput, type ClaimClass, type ClaimOp, type ClaimStatus, ClaimValidationOptions, CollectOpts, CollectedTurn, CompactionConfig, CompiledPermissionChain, CompiledWorkflow, ConfigError, type CoreEvents, CostAttribution, CostReport, CreateEngineOptions, Ctx, DEFAULT_CHILD_BUDGET_FRACTION, DEFAULT_COMPACTION_THRESHOLD, DEFAULT_ESCALATION_LIMITS, DEFAULT_FLAT_RESERVE_USD, DEFAULT_MAX_CHILDREN_PER_NODE, DEFAULT_MAX_DEPTH, DEFAULT_MAX_OSCILLATIONS_PER_KEY, DEFAULT_MAX_PINNED_WORKTREES, DEFAULT_MAX_REVISIONS_PER_RUN, DEFAULT_MAX_TOTAL_SPAWNS, DEFAULT_MAX_TURNS, DEFAULT_MODEL_RETRY_ATTEMPTS, DEFAULT_NO_PROGRESS_TURNS, DEFAULT_PER_RUN_CONCURRENCY, DEFAULT_RETRY_POLICY, DEFAULT_STREAM_IDLE_TIMEOUT_MS, DebitResult, DeclaredLadder, DedupIndex, DedupNote, DerivedKey, DeriverRegistry, DispositionRule, DispositionTable, DonorCandidate, DonorRef, DroppedItem, EMIT_RESULT_TOOL, EMPTY_SCHEMA_HASH, EMPTY_TOOLSET_HASH, ESCALATE_TOOL_NAME, ESCALATION_REPORT_SCHEMA, ESCALATION_REQUEST_SCHEMA, EffectiveUsageLimits, Effort, Engine, EngineDefaults, EntryKind, EntryRef, EntryStatus, ErrorClass, ErrorCode, ErrorPolicy, EscalatedResult, EscalationDecision, EscalationDigest, EscalationKind, EscalationLimits, EscalationOptions, EscalationReport, EscalationRequest, EventBus, type EvidenceRef, ExtensionAppendInput, ExtensionDispatchSpec, ExternalIdentityInput, ExternalRegistry, ExtractNecessityInput, FINISH_SCHEMA, FINISH_TOOL_NAME, FailoverTarget, FailoverTrigger, FallbackField, FallbackTrigger, FileModelKnowledgeStore, FileModelKnowledgeStoreOptions, FileTranscriptStore, FinishInfo, Gate, GateAudit, type GateRecord, GitWorktreeProvider, GitWorktreeProviderOptions, GraftBoot, HashVersion, HookVerdict, INBOX_PROPOSAL_TTL_DAYS, IdentityInput, InMemoryStore, InMemoryTranscriptStore, InProcessRunner, InvalidResolutionError, InvocationRole, type IsolationProvider, type IsolationSpec, Issue$1 as Issue, JournalCompatSubCode, JournalCompatibilityError, JournalEntry, JournalMatcher, JournalMissError, JournalOperation, JournalOrderViolation, JournalSerializationHook, type JournalStore, type Json, JsonSchema, JsonlFileStore, KB_ACTIVE_CLAIMS_CAP, KB_CARD_RENDER_BUDGET_CHARS, type KbProposal, type KbProposalTrigger, KeyDeriver, KeyRing, KeyedLimiter, KnowledgeCasError, type KnowledgeSnapshot, LARGE_VALUE_WARN_BYTES, LEGACY_LTID_PREFIX, LEGACY_SIGNATURE_INPUTS, LINEAGE_SIG_VERSION, LadderSpec, type LeasableStore, type Lease, LeaseHeldError, Ledger, LineageCounters, LineageIndex, LineageRef, LineageRelation, LineageStats, LogicalTaskId, MASKED_SECRET, MAX_DEPTH_CEILING, MatchResult, McpConfig, MechanicalGateProfile, MechanicalGateVerdict, type ModelCaps, ModelChoice, type ModelClaim, ModelEpochInputs, type ModelKnowledgeHandle, type ModelKnowledgeStore, ModelListConstraint, ModelRef, ModelRetry, ModelSpec, Msg, NoProgressDetector, NodeId, NodeLinkValue, NonSerializableValueError, ORCHESTRATE_WORKFLOW_NAME, OnEscalation, OperationDisposition, OrchestrateOptions, OrchestratorBudgetSpec, OrchestratorCapConfigError, OrchestratorExtension, OrchestratorExtensionIO, OrchestratorRuntime, Out, PARALLEL_AGENTS_SCHEMA, ParallelSiteCounter, Part, PendingExternal, PendingToolTurn, PermissionConfig, PermissionGate, PermissionHook, PermissionPreset, PermissionRule, PermissionVerdict, PhaseTarget, PipelineCollected, PipelineOpts, PlanInvariantError, PriceTable, PricedUsage, type Pricing, type ProviderAdapter, QualityFloors, ROLE_EFFORT_DEFAULTS, ROOT_ACCOUNT, ROOT_SCOPE, RUN_PROFILES, RandIdentityInput, RandPayload, RefEntryAppender, RefEntryClassification, RefusalInfo, ReplayDisposition, ReplayMode, ReplayPlanHashMismatch, Replayer, ResolutionArbiter, ResolutionAttempt, ResolutionBy, ResolutionFold, ResolutionLayer, ResolutionOutcome, ResolutionPayload, ResolvedInvocation, ResolvedToolset, ResumeHandle, ResumeOptions, ResumePreview, ResumeReport, RetryClass, RetryPolicy, ReuseConfig, RiskRuleValue, Role, RulvarError, RulvarErrorCode, RunAgentOptions, RunBudget, RunEventSink, type RunFilter, RunHandle, RunInternals, type RunMeta, RunOptions, RunOutcome, RunProfile, RunStatus, RuntimeEventSink, SPAWN_AGENT_SCHEMA, SandboxBridge, SandboxBridgeOptions, SandboxError, SandboxHostToWorker, SandboxMethod, SandboxWorkerToHost, SchemaPair, SchemaSpec, SchemaValidationResult, ScopeSegment, ScriptRejected, ScriptRunner, ScrubNote, Semaphore, SerializationHook, Settled, ShellPatternRules, ShellSegment, ShellVerdict, SinglePhaseAppend, SpanMinter, SpanRegistry, SpawnAdmissionValue, SpawnAgentParams, SpawnKey, SpawnLineage, SpawnLineageOpt, SpawnOrigin, SpawnRecord, Spend, Stage, type StandardJSONSchemaV1, type StandardSchemaV1, StepIdentityInput, StructuredOutputTier, SuspendedAppend, SuspensionState, TOOL_NAME_PATTERN, type TaskClass, TaskDigest, TaskSpec, TerminalPatch, TerminationAccount, TerminationAccountSnapshot, TerminationDeniedValue, TerminationDeniedWriter, TerminationInitValue, TerminationLimits, TerminationResource, ToolCallRequest, ToolChoice, type ToolContext, ToolContextSeed, ToolContract, type ToolDef, type ToolEvents, type ToolExecutor, ToolInit, type ToolRisk, ToolRuntime, type ToolSource, type ToolSourceSession, ToolsOption, TranscriptSerializationHook, type TranscriptStore, TriggerClass, TtlState, Usage, UsageLimits, UsageSlice, VerifiedRecommendation, WAIT_FOR_EVENTS_SCHEMA, WAIT_FOR_EVENTS_TOOL_NAME, WAKE_SUMMARY_RENDER_BUDGET_CHARS, WakeBudgetBlock, WakeDigest, WakeTrigger, WireError, Workflow, WorkflowCallOpts, type WorkflowEvent, type WorkflowEventBody, WorkflowRegistry, admissionReserveUsd, agentErrorFromWire, agentErrorToWire, agentScope, applyClaimOps, applyStructuredOutputTier, approachSigCoarse, approachSigOf, archiveDeprecatedModelOps, atCompactionThreshold, buildAbandonFold, buildAdapterRegistry, buildCostReport, buildDeriverRegistry, buildOrchestratorTools, buildTerminationInitValue, buildToolContext, canRideLoopTurn, canonicalIsolationTag, canonicalizeLadder, canonicalizeSchema, capIssues, capsHashOf, checkFloors, checkpointRefFor, childCoveragePrefix, claimExpired, claimExpiry, claimIssues, claimOpIssues, classifyAgentError, classifyAttemptOutcome, collectDeclaredLadders, compactMessages, compilePermissionChain, compilePermissionPreset, compileVerifiedLayer, costReportFromJournal, countsAgainstLimit, createCanonicalIdMinter, createCtx, createEngine, createSandboxBridge, currentOnlyKeyRing, decodeCheckpoint, defineWorkflow, deriveContentKey, deriverV1, deriverV2, digestOf, dispositionHook, emptyDigestBlocks, emptyToolset, encodeCheckpoint, entryUsageSlices, escalateTool, evaluatePermission, evaluateReuse, executeWorkflow, exhaustionCodeOf, extractCandidate, failoverTriggerOf, fallbackTriggerOf, filterClaimsForRun, finalizeFires, foldTermination, formatRePrompt, formatScopePath, hashWorkflowBody, hashWorkflowSource, identityJcs, isEscalated, isSchemaPairSpec, isStandardSchemaSpec, isStrictCompatibleSchema, kMaxOf, knowledgeHash, ladderLengthOf, ladderRungChoice, lexShellCommand, liftRetainedParts, lineageWeightOf, makeOrchestratorWorkflow, maskSecrets, maskSecretsDeep, maskSecretsJson, matchArgvPattern, matchShellCommand, mcp, mergeUsageLimits, modelEpochOf, modelKnowledgeCard, modelSpecIdentity, needsSeparateExtract, nextFailover, nodeLinkKey, normalizeApproachTag, normalizeEntry, normalizeFallbacks, orchestrate, parallelScope, parseModelRef, parseScopePath, phiInitialOf, pipelineScope, planNodeScope, priceEntryUsage, priceUsdOf, profileCard, profileRegistrySnapshotHash, projectHistory, projectIdentity, projectToJsonSchema, proposalStatement, providerOf, readTerminationInit, registryKeyRing, remeasureQueue, replayDisposition, resolveModelInvocation, resolvePricing, resolveToolset, retryClassOf, retryDelayMs, roleConfiguredInRouting, roundOneDisposition, runAgent, runProfile, scanJournalCompatibility, schemaHash, schemaHashOfSpec, selectStructuredOutputTier, shouldCompact, spawnDepthOf, summarizeInstruction, summarizeOutput, terminationConfigDrift, tierWithinCaps, toApprovalDecision, toJournalValue, tool, toolContract, toolsetHash, ttlState, validateEditorialCommit, validateEntryShape, validateEscalationLimits, validateEscalationReport, validateSchemaSpec, validateTerminationLimits, workflowScope, workflowSourceRef, wrapJournalStore, wrapTranscriptStore };
+export { AWAIT_SCHEMA, AbandonAttempt, AbandonFold, AbandonPayload, AbandonedSpendView, AbortClass, type AdaptiveEvents, AdmissionController, AdmissionDecision, AdmissionRejectedError, AdmissionStatsBefore, AdmitLineage, AdmitRejectReason, AdmitSpec, AdmitVerdict, AgentCallError, AgentError, type AgentEvents, AgentIdentityInput, AgentOpts, AgentProfile, AgentProfilePermissions, AgentResult, AgentResultMeta, AgentStatus, ApproachSignatureInputs, ApprovalDecision, ApprovalIdentityInput, Artifact, AttemptOutcomeClass, BUDGET_ABORT_REASON, BriefOpts, BudgetAccountView, BudgetDefaults, BudgetExhaustedError, BudgetExhaustionDiagnostics, BudgetHooks, BudgetReserve, type Bytes, CANCEL_AGENT_SCHEMA, CHECKPOINT_FORMAT_V1, CLAIM_STATEMENT_MAX_CHARS, CLAIM_TTL_DAYS, COMPACTION_SUMMARY_PREFIX, CURRENT_HASH_VERSION, CacheHint, CacheTtl, CanUseTool, CanonicalId, CanonicalIdentity, CanonicalLadderSpec, CanonicalModelSpec, ChatEvent, ChatRequest, CheckpointState, ChildIdentityInput, type ClaimClass, type ClaimOp, type ClaimStatus, ClaimValidationOptions, CollectOpts, CollectedTurn, CompactionConfig, CompiledPermissionChain, CompiledWorkflow, ConfigError, type CoreEvents, CostAttribution, CostAttributionFacts, CostReport, CreateEngineOptions, Ctx, DEFAULT_CHILD_BUDGET_FRACTION, DEFAULT_COMPACTION_THRESHOLD, DEFAULT_ESCALATION_LIMITS, DEFAULT_FLAT_RESERVE_USD, DEFAULT_MAX_CHILDREN_PER_NODE, DEFAULT_MAX_DEPTH, DEFAULT_MAX_OSCILLATIONS_PER_KEY, DEFAULT_MAX_PINNED_WORKTREES, DEFAULT_MAX_REVISIONS_PER_RUN, DEFAULT_MAX_TOTAL_SPAWNS, DEFAULT_MAX_TURNS, DEFAULT_MODEL_RETRY_ATTEMPTS, DEFAULT_NO_PROGRESS_TURNS, DEFAULT_PER_RUN_CONCURRENCY, DEFAULT_RETRY_POLICY, DEFAULT_STREAM_IDLE_TIMEOUT_MS, DebitResult, DeclaredLadder, DedupIndex, DedupNote, DerivedKey, DeriverRegistry, DispositionRule, DispositionTable, DonorCandidate, DonorRef, DroppedItem, EMIT_RESULT_TOOL, EMPTY_SCHEMA_HASH, EMPTY_TOOLSET_HASH, ESCALATE_TOOL_NAME, ESCALATION_REPORT_SCHEMA, ESCALATION_REQUEST_SCHEMA, EffectiveUsageLimits, Effort, Engine, EngineDefaults, EntryKind, EntryRef, EntryStatus, ErrorClass, ErrorCode, ErrorPolicy, EscalatedResult, EscalationDecision, EscalationDigest, EscalationKind, EscalationLimits, EscalationOptions, EscalationReport, EscalationRequest, EventBus, type EvidenceRef, ExtensionAppendInput, ExtensionDispatchSpec, ExternalIdentityInput, ExternalRegistry, ExtractNecessityInput, FINISH_SCHEMA, FINISH_TOOL_NAME, FailoverTarget, FailoverTrigger, FallbackField, FallbackTrigger, FileModelKnowledgeStore, FileModelKnowledgeStoreOptions, FileTranscriptStore, FinishInfo, Gate, GateAudit, type GateRecord, GitWorktreeProvider, GitWorktreeProviderOptions, GraftBoot, HashVersion, HookVerdict, INBOX_PROPOSAL_TTL_DAYS, IdentityInput, InMemoryStore, InMemoryTranscriptStore, InProcessRunner, InvalidResolutionError, InvocationRole, type IsolationProvider, type IsolationSpec, Issue$1 as Issue, JournalCompatSubCode, JournalCompatibilityError, JournalEntry, JournalMatcher, JournalMissError, JournalOperation, JournalOrderViolation, JournalSerializationHook, type JournalStore, type Json, JsonSchema, JsonlFileStore, KB_ACTIVE_CLAIMS_CAP, KB_CARD_RENDER_BUDGET_CHARS, type KbProposal, type KbProposalTrigger, KeyDeriver, KeyRing, KeyedLimiter, KnowledgeCasError, type KnowledgeSnapshot, LARGE_VALUE_WARN_BYTES, LEGACY_LTID_PREFIX, LEGACY_SIGNATURE_INPUTS, LINEAGE_SIG_VERSION, LadderSpec, type LeasableStore, type Lease, LeaseHeldError, Ledger, LineageCounters, LineageIndex, LineageRef, LineageRelation, LineageStats, LogicalTaskId, MASKED_SECRET, MAX_DEPTH_CEILING, MatchResult, McpConfig, MechanicalGateProfile, MechanicalGateVerdict, type ModelCaps, ModelChoice, type ModelClaim, ModelEpochInputs, type ModelKnowledgeHandle, type ModelKnowledgeStore, ModelListConstraint, ModelRef, ModelRetry, ModelSpec, Msg, NoProgressDetector, NodeId, NodeLinkValue, NonSerializableValueError, ORCHESTRATE_WORKFLOW_NAME, OnEscalation, OperationDisposition, OrchestrateOptions, OrchestratorBudgetSpec, OrchestratorCapConfigError, OrchestratorExtension, OrchestratorExtensionIO, OrchestratorRuntime, Out, PARALLEL_AGENTS_SCHEMA, ParallelSiteCounter, Part, PendingExternal, PendingToolTurn, PermissionConfig, PermissionGate, PermissionHook, PermissionPreset, PermissionRule, PermissionVerdict, PhaseTarget, PipelineCollected, PipelineOpts, PlanInvariantError, PriceTable, PricedUsage, type Pricing, type PricingTier, type ProviderAdapter, QualityFloors, ROLE_EFFORT_DEFAULTS, ROOT_ACCOUNT, ROOT_SCOPE, RUN_PROFILES, RandIdentityInput, RandPayload, RefEntryAppender, RefEntryClassification, RefusalInfo, ReplayDisposition, ReplayMode, ReplayPlanHashMismatch, Replayer, ResolutionArbiter, ResolutionAttempt, ResolutionBy, ResolutionFold, ResolutionLayer, ResolutionOutcome, ResolutionPayload, ResolvedInvocation, ResolvedToolset, ResumeHandle, ResumeOptions, ResumePreview, ResumeReport, RetryClass, RetryPolicy, ReuseConfig, RiskRuleValue, Role, RulvarError, RulvarErrorCode, RunAgentOptions, RunBudget, RunEventSink, type RunFilter, RunHandle, RunInternals, type RunMeta, RunOptions, RunOutcome, RunProfile, RunStatus, RuntimeEventSink, SPAWN_AGENT_SCHEMA, SandboxBridge, SandboxBridgeOptions, SandboxError, SandboxHostToWorker, SandboxMethod, SandboxWorkerToHost, SchemaPair, SchemaSpec, SchemaValidationResult, ScopeSegment, ScriptRejected, ScriptRunner, ScrubNote, Semaphore, SerializationHook, Settled, ShellPatternRules, ShellSegment, ShellVerdict, SinglePhaseAppend, SpanMinter, SpanRegistry, SpawnAdmissionValue, SpawnAgentParams, SpawnKey, SpawnLineage, SpawnLineageOpt, SpawnOrigin, SpawnRecord, Spend, Stage, type StandardJSONSchemaV1, type StandardSchemaV1, StepIdentityInput, StructuredOutputTier, SuspendedAppend, SuspensionState, TOOL_NAME_PATTERN, type TaskClass, TaskDigest, TaskSpec, TerminalPatch, TerminationAccount, TerminationAccountSnapshot, TerminationDeniedValue, TerminationDeniedWriter, TerminationInitValue, TerminationLimits, TerminationResource, ToolCallRequest, ToolChoice, type ToolContext, ToolContextSeed, ToolContract, type ToolDef, type ToolEvents, type ToolExecutor, ToolInit, type ToolRisk, ToolRuntime, type ToolSource, type ToolSourceSession, ToolsOption, TranscriptSerializationHook, type TranscriptStore, TriggerClass, TtlState, Usage, UsageLimits, UsageSlice, VerifiedRecommendation, WAIT_FOR_EVENTS_SCHEMA, WAIT_FOR_EVENTS_TOOL_NAME, WAKE_SUMMARY_RENDER_BUDGET_CHARS, WakeBudgetBlock, WakeDigest, WakeTrigger, WireError, Workflow, WorkflowCallOpts, type WorkflowEvent, type WorkflowEventBody, WorkflowRegistry, admissionReserveUsd, affordableOutputTokens, agentErrorFromWire, agentErrorToWire, agentScope, applyClaimOps, applyStructuredOutputTier, approachSigCoarse, approachSigOf, archiveDeprecatedModelOps, atCompactionThreshold, buildAbandonFold, buildAdapterRegistry, buildCostReport, buildDeriverRegistry, buildOrchestratorTools, buildTerminationInitValue, buildToolContext, canRideLoopTurn, canonicalIsolationTag, canonicalizeLadder, canonicalizeSchema, capIssues, capsHashOf, checkFloors, checkpointRefFor, childCoveragePrefix, claimExpired, claimExpiry, claimIssues, claimOpIssues, classifyAgentError, classifyAttemptOutcome, collectDeclaredLadders, compactMessages, compilePermissionChain, compilePermissionPreset, compileVerifiedLayer, costReportFromJournal, countsAgainstLimit, createCanonicalIdMinter, createCtx, createEngine, createSandboxBridge, currentOnlyKeyRing, decodeCheckpoint, defineWorkflow, deriveContentKey, deriverV1, deriverV2, digestOf, dispositionHook, emptyDigestBlocks, emptyToolset, encodeCheckpoint, entryUsageSlices, escalateTool, evaluatePermission, evaluateReuse, executeWorkflow, exhaustionCodeOf, extractCandidate, failoverTriggerOf, fallbackTriggerOf, filterClaimsForRun, finalizeFires, foldTermination, formatRePrompt, formatScopePath, hashWorkflowBody, hashWorkflowSource, identityJcs, isEscalated, isSchemaPairSpec, isStandardSchemaSpec, isStrictCompatibleSchema, kMaxOf, knowledgeHash, ladderLengthOf, ladderRungChoice, lexShellCommand, liftRetainedParts, lineageWeightOf, makeOrchestratorWorkflow, maskSecrets, maskSecretsDeep, maskSecretsJson, matchArgvPattern, matchShellCommand, mcp, mergeUsageLimits, modelEpochOf, modelKnowledgeCard, modelSpecIdentity, needsSeparateExtract, nextFailover, nodeLinkKey, normalizeApproachTag, normalizeEntry, normalizeFallbacks, orchestrate, parallelScope, parseModelRef, parseScopePath, phiInitialOf, pipelineScope, planNodeScope, priceEntryUsage, priceUsdOf, profileCard, profileRegistrySnapshotHash, projectHistory, projectIdentity, projectToJsonSchema, proposalStatement, providerOf, readTerminationInit, registryKeyRing, remeasureQueue, replayDisposition, resolveModelInvocation, resolvePricing, resolveToolset, retryClassOf, retryDelayMs, roleConfiguredInRouting, roundOneDisposition, runAgent, runProfile, scanJournalCompatibility, schemaHash, schemaHashOfSpec, selectStructuredOutputTier, shouldCompact, spawnDepthOf, summarizeInstruction, summarizeOutput, terminationConfigDrift, tierWithinCaps, toApprovalDecision, toJournalValue, tool, toolContract, toolsetHash, ttlState, validateEditorialCommit, validateEntryShape, validateEscalationLimits, validateEscalationReport, validateSchemaSpec, validateTerminationLimits, workflowScope, workflowSourceRef, wrapJournalStore, wrapTranscriptStore };