@rulvar/core 1.54.0 → 1.55.0

package/dist/index.d.ts

@@ -3033,6 +3033,10 @@ interface ExplorationSummary {
   deniedRepeats: number;
   /** Executions per tool name. */
   byTool: Record<string, number>;
+  /** Calls denied by maxCallsPerTool; present when that limit is configured. */
+  deniedToolCap?: number;
+  /** Weighted tool units spent; present when toolUnits is configured. */
+  toolUnitsUsed?: number;
 }
 /**
 * Agent lifecycle. One logical agent dispatch emits EXACTLY ONE
@@ -3407,6 +3411,45 @@ declare class NoProgressDetector {
   describe(): string;
 }
 //#endregion
+//#region src/tools/progress.d.ts
+/** The stock progress tool name the engine scans terminals for. */
+declare const PROGRESS_REPORT_TOOL_NAME = "report_progress";
+/**
+* One progress report: what the agent has established so far. Captured
+* as {@link AgentResult.partial} (normalized: absent arrays become
+* empty) when the invocation terminates with status 'limit'.
+*/
+interface ProgressReport {
+  /** New facts established, each a standalone claim line. */
+  facts: string[];
+  /** Evidence references backing the facts (file:line or recorded ids). */
+  evidence: string[];
+  /** Remaining unresolved questions. */
+  questions: string[];
+  /** Optional short status note. */
+  note?: string;
+}
+/**
+* The stock progress-report tool. Stateless and deterministic: the
+* result echoes the counts, so a verbatim repeated report is a
+* duplicate result digest to the exploration guards. The value is the
+* side contract: the engine captures the LAST successful call of this
+* tool as the structured terminal partial of a 'limit' invocation, so
+* an agent that reports after every batch never loses its collected
+* work to a budget expiry.
+*/
+declare function progressReportTool(): ToolDef;
+/**
+* The deterministic terminal scan: pairs `report_progress` tool calls
+* with their SUCCESSFUL results by id (a denied or failed call never
+* counts, mirroring the exploration guard's restore) and normalizes the
+* last one into a {@link ProgressReport}. Pure over the message window
+* it is given: the live loop hands its own history, the replay path
+* hands the terminal checkpoint's messages, and a compaction naturally
+* narrows the window to what the model itself still sees.
+*/
+declare function latestProgressReport(messages: readonly Msg[]): ProgressReport | undefined;
+//#endregion
 //#region src/runtime/usage-limits.d.ts
 interface UsageLimits {
   /** Default 32. */
@@ -3449,6 +3492,29 @@ interface UsageLimits {
   * default.
   */
   maxNoNewEvidenceCalls?: number;
+  /**
+  * Per-tool execution caps by tool NAME (RV-210 close-out): the call
+  * that would exceed its tool's cap is denied with a typed error tool
+  * result instead of dispatched (visible to the model, never terminal),
+  * and the denial does not consume maxToolCalls or tool units. A cap of
+  * 0 bans the tool for the invocation; names absent from the record are
+  * unlimited. Per layer the whole record replaces (no per-key merge),
+  * like every other UsageLimits field.
+  */
+  maxCallsPerTool?: Record<string, number>;
+  /**
+  * The weighted tool budget (RV-210 close-out): every EXECUTED call of
+  * tool T costs `costs[T] ?? 1` units (a cost of 0 makes bookkeeping
+  * tools free), and once the spent units reach `max` the invocation
+  * terminates as status 'limit' exactly like maxToolCalls (paid partial
+  * work; executed results stand). Denied calls cost nothing. On resume
+  * the spent units rebuild from the restored transcript's successful
+  * executions, the same conservative window the exploration guards use.
+  */
+  toolUnits?: {
+    max: number;
+    costs?: Record<string, number>;
+  };
 }
 declare const DEFAULT_MAX_TURNS = 32;
 declare const DEFAULT_STREAM_IDLE_TIMEOUT_MS = 12e4;
@@ -3464,6 +3530,11 @@ interface EffectiveUsageLimits {
   toolBudgetNotices?: boolean;
   maxRepeatedToolSignature?: number;
   maxNoNewEvidenceCalls?: number;
+  maxCallsPerTool?: Record<string, number>;
+  toolUnits?: {
+    max: number;
+    costs?: Record<string, number>;
+  };
 }
 /**
 * Limits merge per spawn: AgentOpts.limits over profile limits over engine
@@ -3574,6 +3645,18 @@ interface AgentResult<T> {
   * transportRetries.
   */
   exploration?: ExplorationSummary;
+  /**
+  * The structured terminal partial (RV-210 close-out): the LAST
+  * successful `report_progress` call of the invocation, present only on
+  * a 'limit' terminal (cap expiry or an engine-decided abort) whose
+  * transcript recorded at least one report. Derived deterministically
+  * from the message window: live from the loop's own history (a final
+  * boundary checkpoint is written so the window is durable), on replay
+  * from the terminal checkpoint, so both read the same bytes. This is
+  * what lets a caller salvage a limit child's collected work instead of
+  * seeing a bare 'terminal status limit'.
+  */
+  partial?: ProgressReport;
 }
 type EscalatedResult<T> = AgentResult<T> & {
   status: "escalated";
@@ -5519,8 +5602,10 @@ interface TaskDigest {
 * when the output IS a string, else its JCS-independent `JSON.stringify`)
 * for a settled ok child, or the child's `errorMessage` otherwise, so the
 * orchestrator can read WHY a child failed as readily as what it
-* produced. Everything here is a pure read of already durable journal
-* state, so a resume reproduces it with no new spend.
+* produced; a limit child carrying a structured terminal partial serves
+* `{ error, partial }` instead (RV-210 close-out), so the collected work
+* is pageable in full. Everything here is a pure read of already durable
+* journal state, so a resume reproduces it with no new spend.
 */
 interface ChildResultPage {
   handle: number;
@@ -5998,6 +6083,21 @@ interface OrchestrateAcceptance {
   childPolicy: "all-ok" | {
     minSuccessful: number;
   };
+  /**
+  * The partial-child salvage switch (RV-210 close-out; default false).
+  * When true, a child that settled 'limit' WITH a structured terminal
+  * partial (it recorded progress through the stock `report_progress`
+  * tool before the budget expired) counts as a successful child for the
+  * policy: under 'all-ok' it no longer rejects the run, and under
+  * { minSuccessful: N } it counts toward N. The acceptance verdict then
+  * reports completion 'partial' (never 'complete'), lists the salvaged
+  * children in `salvagedPartialChildren` on the result envelope, and
+  * keeps a per-child note in degradedReasons. A limit child WITHOUT a
+  * partial gave the caller nothing to salvage and still counts against
+  * the policy. The whole fold is journaled in the single acceptance
+  * decision, so a resume rolls the same verdict forward.
+  */
+  acceptPartialChildren?: boolean;
 }
 /** How many rejected finishes are repaired by default: the plan's repair once. */
 declare const DEFAULT_FINISH_MAX_REPAIRS = 1;
@@ -7158,6 +7258,73 @@ interface RepositoryResearchToolset {
 }
 declare function repositoryResearchToolset(options: RepositoryResearchToolsetOptions): RepositoryResearchToolset;
 //#endregion
+//#region src/engine/profile-templates.d.ts
+/**
+* The research template's stop conditions: a weighted unit budget over
+* the research tools (bookkeeping tools are free), per-tool caps, both
+* repetition guards, and soft budget notices. Exported so hosts and
+* tests can read the exact defaults they are overriding.
+*/
+declare const RESEARCH_PROFILE_LIMITS: UsageLimits;
+/** The implementation template's stop conditions. */
+declare const IMPLEMENTATION_PROFILE_LIMITS: UsageLimits;
+/** The review template's stop conditions. */
+declare const REVIEW_PROFILE_LIMITS: UsageLimits;
+/** Options shared by the implementation and review templates. */
+interface AgentProfileTemplateOptions {
+  /** Advertised profile description; the template provides a default. */
+  description?: string;
+  /** Per-key overrides over the template's limits. */
+  limits?: UsageLimits;
+  /** The task tools; the stock report_progress tool is always prepended. */
+  tools?: ToolDef[];
+}
+/** Options of {@link researchAgentProfile}: the toolset knobs plus template overrides. */
+interface ResearchAgentProfileOptions extends RepositoryResearchToolsetOptions {
+  /** Advertised profile description; the template provides a default. */
+  description?: string;
+  /** Per-key overrides over {@link RESEARCH_PROFILE_LIMITS}. */
+  limits?: UsageLimits;
+  /** Extra tools appended after the research toolset. */
+  extraTools?: ToolDef[];
+}
+/** What {@link researchAgentProfile} returns: the profile plus the evidence accessor. */
+interface ResearchAgentProfileResult {
+  profile: AgentProfile;
+  /**
+  * The research kit's host-side evidence snapshot. One kit instance
+  * backs the profile, so children spawned from the SAME registered
+  * profile pool their verified evidence here (and see each other's
+  * entries through list_evidence); construct one template per fan-out
+  * run, or per child, when isolation matters.
+  */
+  evidence: () => ResearchEvidenceEntry[];
+}
+/**
+* The batteries-included research child: the confined
+* {@link repositoryResearchToolset} over `root`, the stock
+* report_progress tool, and {@link RESEARCH_PROFILE_LIMITS} as the stop
+* conditions. A child spawned from this profile that runs out of budget
+* settles 'limit' WITH its last progress report as the structured
+* partial, and the recorded evidence stays readable host-side through
+* `evidence()`.
+*/
+declare function researchAgentProfile(options: ResearchAgentProfileOptions): ResearchAgentProfileResult;
+/**
+* The implementation child template: the caller's task tools plus the
+* progress contract, with {@link IMPLEMENTATION_PROFILE_LIMITS} as the
+* stop conditions (a no-progress detector instead of the research
+* no-new-evidence guard: implementation legitimately re-reads state).
+*/
+declare function implementationAgentProfile(options?: AgentProfileTemplateOptions): AgentProfile;
+/**
+* The review child template: the caller's task tools plus the progress
+* contract, with {@link REVIEW_PROFILE_LIMITS} as the stop conditions
+* (a tighter turn budget and the no-new-evidence guard: a reviewer
+* circling over the same pages should stop, not spin).
+*/
+declare function reviewAgentProfile(options?: AgentProfileTemplateOptions): AgentProfile;
+//#endregion
 //#region src/journal/scope.d.ts
 /**
 * Scope-path grammar (M1-T04): deterministic structural paths, independent
@@ -7924,4 +8091,4 @@ interface SandboxBridge {
 declare const SANDBOX_AGENT_OPT_KEYS: readonly string[];
 declare function createSandboxBridge(ctx: Ctx<never>, options: SandboxBridgeOptions): SandboxBridge;
 //#endregion
-export { AWAIT_SCHEMA, AbandonAttempt, AbandonFold, AbandonPayload, AbandonedSpendView, AbortClass, type AdaptiveEvents, AdmissionController, AdmissionDecision, AdmissionRejectedError, AdmissionStatsBefore, AdmitLineage, AdmitRejectReason, AdmitSpec, AdmitVerdict, AgentCallError, AgentError, type AgentEvents, AgentIdentityInput, type AgentInvocationRow, AgentOpts, AgentProfile, AgentProfilePermissions, AgentResult, AgentResultMeta, AgentStatus, ApproachSignatureInputs, ApprovalDecision, ApprovalIdentityInput, Artifact, AttemptOutcomeClass, AuditRunsOptions, BUDGET_ABORT_REASON, BaseAppend, BriefOpts, BudgetAccountView, BudgetDefaults, BudgetExhaustedError, BudgetExhaustionDiagnostics, BudgetHooks, BudgetReserve, type Bytes, CANCEL_AGENT_SCHEMA, CHECKPOINT_FORMAT_V1, CLAIM_STATEMENT_MAX_CHARS, CLAIM_TTL_DAYS, COMPACTION_SUMMARY_PREFIX, CURRENT_HASH_VERSION, CacheHint, CacheTtl, CanUseTool, CanonicalId, CanonicalIdentity, CanonicalLadderSpec, CanonicalModelSpec, ChatEvent, ChatRequest, CheckpointState, ChildArtifactPage, ChildIdentityInput, ChildResultPage, type ClaimClass, type ClaimOp, type ClaimStatus, ClaimValidationOptions, CollectOpts, CollectedTurn, CompactionConfig, CompiledPermissionChain, CompiledWorkflow, ConfigError, type CoreEvents, CostAttribution, CostAttributionFacts, CostReport, CreateEngineOptions, type CriticalPath, Ctx, DEFAULT_CHILD_BUDGET_FRACTION, DEFAULT_CHILD_RESULT_PAGE_CHARS, DEFAULT_CITATION_PATTERN, DEFAULT_COMPACTION_THRESHOLD, DEFAULT_ESCALATION_LIMITS, DEFAULT_EVIDENCE_MIN_SHARE, DEFAULT_FINISH_MAX_REPAIRS, DEFAULT_FLAT_RESERVE_USD, DEFAULT_MAX_CHILDREN_PER_NODE, DEFAULT_MAX_DEPTH, DEFAULT_MAX_OSCILLATIONS_PER_KEY, DEFAULT_MAX_PINNED_WORKTREES, DEFAULT_MAX_REVISIONS_PER_RUN, DEFAULT_MAX_TOTAL_SPAWNS, DEFAULT_MAX_TURNS, DEFAULT_MODEL_RETRY_ATTEMPTS, DEFAULT_NO_PROGRESS_TURNS, DEFAULT_PER_RUN_CONCURRENCY, DEFAULT_RETRY_POLICY, DEFAULT_STREAM_IDLE_TIMEOUT_MS, DEFAULT_SYNTHESIS_MAX_TURNS, DEFAULT_SYNTHESIS_NOTE_MAX_TURNS, DebitResult, DeclaredLadder, DedupIndex, DedupNote, DedupedClaims, DerivedKey, DeriverRegistry, type DeterminismConfig, DeterminismError, type DeterminismEvents, type DeterminismMode, DispositionRule, DispositionTable, DonorCandidate, DonorRef, DroppedItem, EMIT_RESULT_TOOL, EMPTY_SCHEMA_HASH, EMPTY_TOOLSET_HASH, ESCALATE_TOOL_NAME, ESCALATION_REPORT_SCHEMA, ESCALATION_REQUEST_SCHEMA, EVENT_SEGMENT_STRIDE, EffectiveUsageLimits, Effort, Engine, EngineDefaults, EntryKind, EntryRef, EntryStatus, ErrorClass, ErrorCode, ErrorPolicy, EscalatedResult, EscalationDecision, EscalationDecisionAbortedError, EscalationDigest, EscalationKind, EscalationLimits, EscalationOptions, EscalationReport, EscalationRequest, EventBus, type EvidenceRef, type ExplorationSummary, ExtensionAppendInput, ExtensionDispatchSpec, ExternalIdentityInput, ExternalRegistry, ExtractNecessityInput, FINALIZE_SYNTHESIS_INSTRUCTION, FINISH_SCHEMA, FINISH_TOOL_NAME, FailRunError, FailoverTarget, FailoverTrigger, FallbackField, FallbackTrigger, FileModelKnowledgeStore, FileModelKnowledgeStoreOptions, FileTranscriptStore, FinishInfo, FinishValidationChild, FinishValidationInput, FinishValidationSpec, FinishValidationVerdict, FinishValidator, GET_CHILD_RESULT_SCHEMA, GET_CHILD_RESULT_TOOL_NAME, Gate, GateAudit, type GateRecord, GitWorktreeProvider, GitWorktreeProviderOptions, GraftBoot, HashVersion, HookVerdict, INBOX_PROPOSAL_TTL_DAYS, IdentityInput, InMemoryStore, InMemoryTranscriptStore, InProcessRunner, IncrementalSynthesisResult, InvalidResolutionError, InvocationRole, type InvocationTable, type IsolationProvider, type IsolationSpec, Issue$1 as Issue, JournalCompatSubCode, JournalCompatibilityError, JournalEntry, JournalMatcher, JournalMissError, JournalOperation, JournalOrderViolation, JournalSerializationHook, type JournalStore, type Json, JsonSchema, JsonlFileStore, KB_ACTIVE_CLAIMS_CAP, KB_CARD_RENDER_BUDGET_CHARS, type KbProposal, type KbProposalTrigger, KeyDeriver, KeyRing, KeyedLimiter, KnowledgeCasError, type KnowledgeSnapshot, LARGE_VALUE_WARN_BYTES, LEGACY_LTID_PREFIX, LEGACY_SIGNATURE_INPUTS, LINEAGE_SIG_VERSION, LadderSpec, type LeasableStore, type Lease, LeaseHeldError, Ledger, LineageCounters, LineageIndex, LineageRef, LineageRelation, LineageStats, LogicalTaskId, MASKED_SECRET, MAX_CHILD_RESULT_PAGE_CHARS, MAX_DEPTH_CEILING, MatchResult, McpConfig, McpToolSource, MechanicalGateProfile, MechanicalGateVerdict, type MetaLookupStore, type ModelCaps, ModelChoice, type ModelClaim, ModelEpochInputs, type ModelKnowledgeHandle, type ModelKnowledgeStore, ModelListConstraint, ModelRef, ModelRetry, ModelSpec, Msg, NoProgressDetector, NodeId, NodeLinkValue, NonSerializableValueError, ORCHESTRATE_WORKFLOW_NAME, OnEscalation, OperationDisposition, OrchestrateAcceptance, OrchestrateOptions, OrchestrateSynthesis, OrchestratorBudgetSpec, OrchestratorCapConfigError, OrchestratorExtension, OrchestratorExtensionIO, OrchestratorRuntime, Out, PARALLEL_AGENTS_SCHEMA, ParallelSiteCounter, Part, PendingExternal, PendingToolTurn, PermissionConfig, PermissionGate, PermissionHook, PermissionPreset, PermissionRule, PermissionVerdict, type PhaseRow, PhaseTarget, PipelineCollected, PipelineOpts, PlanInvariantError, PriceTable, PricedUsage, type Pricing, type PricingTier, type ProviderAdapter, QualityFloors, READ_CHILD_ARTIFACT_SCHEMA, READ_CHILD_ARTIFACT_TOOL_NAME, ROLE_EFFORT_DEFAULTS, ROOT_ACCOUNT, ROOT_SCOPE, RUN_PROFILES, RUN_SETTLE_DECISION_TYPE, RandIdentityInput, RandPayload, ReconcileOptions, ReconcileResult, RefEntryAppender, RefEntryClassification, RefusalInfo, RepeatedClaim, ReplayDisposition, ReplayMode, ReplayPlanHashMismatch, Replayer, RepositoryResearchToolset, RepositoryResearchToolsetOptions, ResearchEvidenceEntry, ResolutionArbiter, ResolutionAttempt, ResolutionBy, ResolutionFold, ResolutionLayer, ResolutionOutcome, ResolutionPayload, ResolvedInvocation, ResolvedToolset, ResumeHandle, ResumeOptions, ResumePreview, ResumeReport, RetryClass, RetryPolicy, ReuseConfig, RiskRuleValue, Role, RulvarError, RulvarErrorCode, RunAgentOptions, RunAuditVerdict, RunBudget, RunEventSink, type RunFilter, RunHandle, RunInternals, type RunMeta, RunOptions, RunOutcome, RunProfile, RunStateAudit, RunStatus, RuntimeEventSink, SANDBOX_AGENT_OPT_KEYS, SPAWN_AGENT_SCHEMA, SandboxBridge, SandboxBridgeOptions, SandboxError, SandboxHostToWorker, SandboxMethod, SandboxWorkerToHost, SchemaPair, SchemaSpec, SchemaValidationResult, ScopeSegment, ScriptRejected, ScriptRunner, ScrubNote, Semaphore, SerializationHook, Settled, ShellPatternRules, ShellSegment, ShellVerdict, SinglePhaseAppend, SpanMinter, SpanRegistry, SpawnAdmissionValue, SpawnAgentParams, SpawnKey, SpawnLineage, SpawnLineageOpt, SpawnOrigin, SpawnRecord, Spend, Stage, type StandardJSONSchemaV1, type StandardSchemaV1, StepIdentityInput, StructuredOutputTier, SuspendedAppend, SuspensionState, TOOL_NAME_PATTERN, type TaskClass, TaskDigest, TaskSpec, TerminalPatch, TerminationAccount, TerminationAccountSnapshot, TerminationDeniedValue, TerminationDeniedWriter, TerminationInitValue, TerminationLimits, TerminationResource, ToolCallRequest, ToolChoice, type ToolContext, ToolContextSeed, ToolContract, type ToolDef, type ToolEvents, type ToolExecutor, ToolInit, type ToolRisk, ToolRuntime, type ToolSource, type ToolSourceSession, ToolsOption, TranscriptSerializationHook, type TranscriptStore, TriggerClass, TtlState, Usage, UsageLimits, UsageSlice, VerifiedRecommendation, WAIT_FOR_EVENTS_SCHEMA, WAIT_FOR_EVENTS_TOOL_NAME, WAKE_SUMMARY_RENDER_BUDGET_CHARS, WakeBudgetBlock, WakeDigest, WakeTrigger, WireError, Workflow, WorkflowCallOpts, type WorkflowEvent, type WorkflowEventBody, WorkflowRegistry, admissionReserveUsd, affordableOutputTokens, agentErrorFromWire, agentErrorToWire, agentResultWire, agentScope, applyClaimOps, applyStructuredOutputTier, approachSigCoarse, approachSigOf, archiveDeprecatedModelOps, assertFencedWrites, atCompactionThreshold, auditRun, auditRuns, buildAbandonFold, buildAdapterRegistry, buildCostReport, buildDeriverRegistry, buildOrchestratorTools, buildTerminationInitValue, buildToolContext, canRideLoopTurn, canonicalIsolationTag, canonicalizeLadder, canonicalizeSchema, capIssues, capsHashOf, checkFloors, checkpointRefFor, childCoveragePrefix, claimExpired, claimExpiry, claimIssues, claimOpIssues, classifyAgentError, classifyAttemptOutcome, collectDeclaredLadders, compactMessages, compilePermissionChain, compilePermissionPreset, compileVerifiedLayer, costReportFromJournal, countsAgainstLimit, createCanonicalIdMinter, createCtx, createEngine, createSandboxBridge, currentOnlyKeyRing, decodeCheckpoint, dedupeRepeatedClaims, defineWorkflow, deriveContentKey, deriverV1, deriverV2, digestOf, dispositionHook, emptyDigestBlocks, emptyToolset, encodeCheckpoint, entryUsageSlices, escalateTool, evaluatePermission, evaluateReuse, evidencePreservedValidator, executeWorkflow, exhaustionCodeOf, extractCandidate, failoverTriggerOf, fallbackTriggerOf, filterClaimsForRun, finalizeFires, foldTermination, formatRePrompt, formatScopePath, hasFencedWrites, hasMetaLookup, hashRunArgs, hashRunOutput, hashWorkflowBody, hashWorkflowSource, identityJcs, isEscalated, isSchemaPairSpec, isStandardSchemaSpec, isStrictCompatibleSchema, kMaxOf, knowledgeHash, ladderLengthOf, ladderRungChoice, lastRunSettle, lexShellCommand, liftRetainedParts, lineageWeightOf, makeOrchestratorWorkflow, maskSecrets, maskSecretsDeep, maskSecretsJson, matchArgvPattern, matchShellCommand, mcp, mergeUsageLimits, metaMatchesFilter, minMatchesValidator, modelEpochOf, modelKnowledgeCard, modelSpecIdentity, needsSeparateExtract, nextFailover, nodeLinkKey, normalizeApproachTag, normalizeEntry, normalizeFallbacks, orchestrate, parallelScope, parseModelRef, parseScopePath, phiInitialOf, pipelineScope, planNodeScope, priceEntryUsage, priceUsdOf, profileCard, profileRegistrySnapshotHash, projectHistory, projectIdentity, projectToJsonSchema, proposalStatement, providerOf, readRunMeta, readTerminationInit, reconcileRunMeta, reduceCriticalPath, reduceInvocationTable, registryKeyRing, remeasureQueue, replayDisposition, repositoryResearchToolset, requiredFieldsValidator, requiredSectionsValidator, resolveModelInvocation, resolvePricing, resolveToolset, retryClassOf, retryDelayMs, roleConfiguredInRouting, roundOneDisposition, runAgent, runProfile, sanitizeTerminalText, sanitizeTokenCount, sanitizeUsage, sanitizeUsageDelta, scanJournalCompatibility, schemaHash, schemaHashOfSpec, selectStructuredOutputTier, shouldCompact, snapshotUsage, spawnDepthOf, summarizeInstruction, summarizeOutput, terminationConfigDrift, tierWithinCaps, toApprovalDecision, toJournalValue, tool, toolContract, toolsetHash, ttlState, usageViolations, validateEditorialCommit, validateEntryShape, validateEscalationLimits, validateEscalationReport, validateRetryPolicy, validateSchemaSpec, validateTerminationLimits, validateUsageLimits, workflowScope, workflowSourceRef, wrapJournalStore, wrapTranscriptStore };
+export { AWAIT_SCHEMA, AbandonAttempt, AbandonFold, AbandonPayload, AbandonedSpendView, AbortClass, type AdaptiveEvents, AdmissionController, AdmissionDecision, AdmissionRejectedError, AdmissionStatsBefore, AdmitLineage, AdmitRejectReason, AdmitSpec, AdmitVerdict, AgentCallError, AgentError, type AgentEvents, AgentIdentityInput, type AgentInvocationRow, AgentOpts, AgentProfile, AgentProfilePermissions, AgentProfileTemplateOptions, AgentResult, AgentResultMeta, AgentStatus, ApproachSignatureInputs, ApprovalDecision, ApprovalIdentityInput, Artifact, AttemptOutcomeClass, AuditRunsOptions, BUDGET_ABORT_REASON, BaseAppend, BriefOpts, BudgetAccountView, BudgetDefaults, BudgetExhaustedError, BudgetExhaustionDiagnostics, BudgetHooks, BudgetReserve, type Bytes, CANCEL_AGENT_SCHEMA, CHECKPOINT_FORMAT_V1, CLAIM_STATEMENT_MAX_CHARS, CLAIM_TTL_DAYS, COMPACTION_SUMMARY_PREFIX, CURRENT_HASH_VERSION, CacheHint, CacheTtl, CanUseTool, CanonicalId, CanonicalIdentity, CanonicalLadderSpec, CanonicalModelSpec, ChatEvent, ChatRequest, CheckpointState, ChildArtifactPage, ChildIdentityInput, ChildResultPage, type ClaimClass, type ClaimOp, type ClaimStatus, ClaimValidationOptions, CollectOpts, CollectedTurn, CompactionConfig, CompiledPermissionChain, CompiledWorkflow, ConfigError, type CoreEvents, CostAttribution, CostAttributionFacts, CostReport, CreateEngineOptions, type CriticalPath, Ctx, DEFAULT_CHILD_BUDGET_FRACTION, DEFAULT_CHILD_RESULT_PAGE_CHARS, DEFAULT_CITATION_PATTERN, DEFAULT_COMPACTION_THRESHOLD, DEFAULT_ESCALATION_LIMITS, DEFAULT_EVIDENCE_MIN_SHARE, DEFAULT_FINISH_MAX_REPAIRS, DEFAULT_FLAT_RESERVE_USD, DEFAULT_MAX_CHILDREN_PER_NODE, DEFAULT_MAX_DEPTH, DEFAULT_MAX_OSCILLATIONS_PER_KEY, DEFAULT_MAX_PINNED_WORKTREES, DEFAULT_MAX_REVISIONS_PER_RUN, DEFAULT_MAX_TOTAL_SPAWNS, DEFAULT_MAX_TURNS, DEFAULT_MODEL_RETRY_ATTEMPTS, DEFAULT_NO_PROGRESS_TURNS, DEFAULT_PER_RUN_CONCURRENCY, DEFAULT_RETRY_POLICY, DEFAULT_STREAM_IDLE_TIMEOUT_MS, DEFAULT_SYNTHESIS_MAX_TURNS, DEFAULT_SYNTHESIS_NOTE_MAX_TURNS, DebitResult, DeclaredLadder, DedupIndex, DedupNote, DedupedClaims, DerivedKey, DeriverRegistry, type DeterminismConfig, DeterminismError, type DeterminismEvents, type DeterminismMode, DispositionRule, DispositionTable, DonorCandidate, DonorRef, DroppedItem, EMIT_RESULT_TOOL, EMPTY_SCHEMA_HASH, EMPTY_TOOLSET_HASH, ESCALATE_TOOL_NAME, ESCALATION_REPORT_SCHEMA, ESCALATION_REQUEST_SCHEMA, EVENT_SEGMENT_STRIDE, EffectiveUsageLimits, Effort, Engine, EngineDefaults, EntryKind, EntryRef, EntryStatus, ErrorClass, ErrorCode, ErrorPolicy, EscalatedResult, EscalationDecision, EscalationDecisionAbortedError, EscalationDigest, EscalationKind, EscalationLimits, EscalationOptions, EscalationReport, EscalationRequest, EventBus, type EvidenceRef, type ExplorationSummary, ExtensionAppendInput, ExtensionDispatchSpec, ExternalIdentityInput, ExternalRegistry, ExtractNecessityInput, FINALIZE_SYNTHESIS_INSTRUCTION, FINISH_SCHEMA, FINISH_TOOL_NAME, FailRunError, FailoverTarget, FailoverTrigger, FallbackField, FallbackTrigger, FileModelKnowledgeStore, FileModelKnowledgeStoreOptions, FileTranscriptStore, FinishInfo, FinishValidationChild, FinishValidationInput, FinishValidationSpec, FinishValidationVerdict, FinishValidator, GET_CHILD_RESULT_SCHEMA, GET_CHILD_RESULT_TOOL_NAME, Gate, GateAudit, type GateRecord, GitWorktreeProvider, GitWorktreeProviderOptions, GraftBoot, HashVersion, HookVerdict, IMPLEMENTATION_PROFILE_LIMITS, INBOX_PROPOSAL_TTL_DAYS, IdentityInput, InMemoryStore, InMemoryTranscriptStore, InProcessRunner, IncrementalSynthesisResult, InvalidResolutionError, InvocationRole, type InvocationTable, type IsolationProvider, type IsolationSpec, Issue$1 as Issue, JournalCompatSubCode, JournalCompatibilityError, JournalEntry, JournalMatcher, JournalMissError, JournalOperation, JournalOrderViolation, JournalSerializationHook, type JournalStore, type Json, JsonSchema, JsonlFileStore, KB_ACTIVE_CLAIMS_CAP, KB_CARD_RENDER_BUDGET_CHARS, type KbProposal, type KbProposalTrigger, KeyDeriver, KeyRing, KeyedLimiter, KnowledgeCasError, type KnowledgeSnapshot, LARGE_VALUE_WARN_BYTES, LEGACY_LTID_PREFIX, LEGACY_SIGNATURE_INPUTS, LINEAGE_SIG_VERSION, LadderSpec, type LeasableStore, type Lease, LeaseHeldError, Ledger, LineageCounters, LineageIndex, LineageRef, LineageRelation, LineageStats, LogicalTaskId, MASKED_SECRET, MAX_CHILD_RESULT_PAGE_CHARS, MAX_DEPTH_CEILING, MatchResult, McpConfig, McpToolSource, MechanicalGateProfile, MechanicalGateVerdict, type MetaLookupStore, type ModelCaps, ModelChoice, type ModelClaim, ModelEpochInputs, type ModelKnowledgeHandle, type ModelKnowledgeStore, ModelListConstraint, ModelRef, ModelRetry, ModelSpec, Msg, NoProgressDetector, NodeId, NodeLinkValue, NonSerializableValueError, ORCHESTRATE_WORKFLOW_NAME, OnEscalation, OperationDisposition, OrchestrateAcceptance, OrchestrateOptions, OrchestrateSynthesis, OrchestratorBudgetSpec, OrchestratorCapConfigError, OrchestratorExtension, OrchestratorExtensionIO, OrchestratorRuntime, Out, PARALLEL_AGENTS_SCHEMA, PROGRESS_REPORT_TOOL_NAME, ParallelSiteCounter, Part, PendingExternal, PendingToolTurn, PermissionConfig, PermissionGate, PermissionHook, PermissionPreset, PermissionRule, PermissionVerdict, type PhaseRow, PhaseTarget, PipelineCollected, PipelineOpts, PlanInvariantError, PriceTable, PricedUsage, type Pricing, type PricingTier, ProgressReport, type ProviderAdapter, QualityFloors, READ_CHILD_ARTIFACT_SCHEMA, READ_CHILD_ARTIFACT_TOOL_NAME, RESEARCH_PROFILE_LIMITS, REVIEW_PROFILE_LIMITS, ROLE_EFFORT_DEFAULTS, ROOT_ACCOUNT, ROOT_SCOPE, RUN_PROFILES, RUN_SETTLE_DECISION_TYPE, RandIdentityInput, RandPayload, ReconcileOptions, ReconcileResult, RefEntryAppender, RefEntryClassification, RefusalInfo, RepeatedClaim, ReplayDisposition, ReplayMode, ReplayPlanHashMismatch, Replayer, RepositoryResearchToolset, RepositoryResearchToolsetOptions, ResearchAgentProfileOptions, ResearchAgentProfileResult, ResearchEvidenceEntry, ResolutionArbiter, ResolutionAttempt, ResolutionBy, ResolutionFold, ResolutionLayer, ResolutionOutcome, ResolutionPayload, ResolvedInvocation, ResolvedToolset, ResumeHandle, ResumeOptions, ResumePreview, ResumeReport, RetryClass, RetryPolicy, ReuseConfig, RiskRuleValue, Role, RulvarError, RulvarErrorCode, RunAgentOptions, RunAuditVerdict, RunBudget, RunEventSink, type RunFilter, RunHandle, RunInternals, type RunMeta, RunOptions, RunOutcome, RunProfile, RunStateAudit, RunStatus, RuntimeEventSink, SANDBOX_AGENT_OPT_KEYS, SPAWN_AGENT_SCHEMA, SandboxBridge, SandboxBridgeOptions, SandboxError, SandboxHostToWorker, SandboxMethod, SandboxWorkerToHost, SchemaPair, SchemaSpec, SchemaValidationResult, ScopeSegment, ScriptRejected, ScriptRunner, ScrubNote, Semaphore, SerializationHook, Settled, ShellPatternRules, ShellSegment, ShellVerdict, SinglePhaseAppend, SpanMinter, SpanRegistry, SpawnAdmissionValue, SpawnAgentParams, SpawnKey, SpawnLineage, SpawnLineageOpt, SpawnOrigin, SpawnRecord, Spend, Stage, type StandardJSONSchemaV1, type StandardSchemaV1, StepIdentityInput, StructuredOutputTier, SuspendedAppend, SuspensionState, TOOL_NAME_PATTERN, type TaskClass, TaskDigest, TaskSpec, TerminalPatch, TerminationAccount, TerminationAccountSnapshot, TerminationDeniedValue, TerminationDeniedWriter, TerminationInitValue, TerminationLimits, TerminationResource, ToolCallRequest, ToolChoice, type ToolContext, ToolContextSeed, ToolContract, type ToolDef, type ToolEvents, type ToolExecutor, ToolInit, type ToolRisk, ToolRuntime, type ToolSource, type ToolSourceSession, ToolsOption, TranscriptSerializationHook, type TranscriptStore, TriggerClass, TtlState, Usage, UsageLimits, UsageSlice, VerifiedRecommendation, WAIT_FOR_EVENTS_SCHEMA, WAIT_FOR_EVENTS_TOOL_NAME, WAKE_SUMMARY_RENDER_BUDGET_CHARS, WakeBudgetBlock, WakeDigest, WakeTrigger, WireError, Workflow, WorkflowCallOpts, type WorkflowEvent, type WorkflowEventBody, WorkflowRegistry, admissionReserveUsd, affordableOutputTokens, agentErrorFromWire, agentErrorToWire, agentResultWire, agentScope, applyClaimOps, applyStructuredOutputTier, approachSigCoarse, approachSigOf, archiveDeprecatedModelOps, assertFencedWrites, atCompactionThreshold, auditRun, auditRuns, buildAbandonFold, buildAdapterRegistry, buildCostReport, buildDeriverRegistry, buildOrchestratorTools, buildTerminationInitValue, buildToolContext, canRideLoopTurn, canonicalIsolationTag, canonicalizeLadder, canonicalizeSchema, capIssues, capsHashOf, checkFloors, checkpointRefFor, childCoveragePrefix, claimExpired, claimExpiry, claimIssues, claimOpIssues, classifyAgentError, classifyAttemptOutcome, collectDeclaredLadders, compactMessages, compilePermissionChain, compilePermissionPreset, compileVerifiedLayer, costReportFromJournal, countsAgainstLimit, createCanonicalIdMinter, createCtx, createEngine, createSandboxBridge, currentOnlyKeyRing, decodeCheckpoint, dedupeRepeatedClaims, defineWorkflow, deriveContentKey, deriverV1, deriverV2, digestOf, dispositionHook, emptyDigestBlocks, emptyToolset, encodeCheckpoint, entryUsageSlices, escalateTool, evaluatePermission, evaluateReuse, evidencePreservedValidator, executeWorkflow, exhaustionCodeOf, extractCandidate, failoverTriggerOf, fallbackTriggerOf, filterClaimsForRun, finalizeFires, foldTermination, formatRePrompt, formatScopePath, hasFencedWrites, hasMetaLookup, hashRunArgs, hashRunOutput, hashWorkflowBody, hashWorkflowSource, identityJcs, implementationAgentProfile, isEscalated, isSchemaPairSpec, isStandardSchemaSpec, isStrictCompatibleSchema, kMaxOf, knowledgeHash, ladderLengthOf, ladderRungChoice, lastRunSettle, latestProgressReport, lexShellCommand, liftRetainedParts, lineageWeightOf, makeOrchestratorWorkflow, maskSecrets, maskSecretsDeep, maskSecretsJson, matchArgvPattern, matchShellCommand, mcp, mergeUsageLimits, metaMatchesFilter, minMatchesValidator, modelEpochOf, modelKnowledgeCard, modelSpecIdentity, needsSeparateExtract, nextFailover, nodeLinkKey, normalizeApproachTag, normalizeEntry, normalizeFallbacks, orchestrate, parallelScope, parseModelRef, parseScopePath, phiInitialOf, pipelineScope, planNodeScope, priceEntryUsage, priceUsdOf, profileCard, profileRegistrySnapshotHash, progressReportTool, projectHistory, projectIdentity, projectToJsonSchema, proposalStatement, providerOf, readRunMeta, readTerminationInit, reconcileRunMeta, reduceCriticalPath, reduceInvocationTable, registryKeyRing, remeasureQueue, replayDisposition, repositoryResearchToolset, requiredFieldsValidator, requiredSectionsValidator, researchAgentProfile, resolveModelInvocation, resolvePricing, resolveToolset, retryClassOf, retryDelayMs, reviewAgentProfile, roleConfiguredInRouting, roundOneDisposition, runAgent, runProfile, sanitizeTerminalText, sanitizeTokenCount, sanitizeUsage, sanitizeUsageDelta, scanJournalCompatibility, schemaHash, schemaHashOfSpec, selectStructuredOutputTier, shouldCompact, snapshotUsage, spawnDepthOf, summarizeInstruction, summarizeOutput, terminationConfigDrift, tierWithinCaps, toApprovalDecision, toJournalValue, tool, toolContract, toolsetHash, ttlState, usageViolations, validateEditorialCommit, validateEntryShape, validateEscalationLimits, validateEscalationReport, validateRetryPolicy, validateSchemaSpec, validateTerminationLimits, validateUsageLimits, workflowScope, workflowSourceRef, wrapJournalStore, wrapTranscriptStore };

package/dist/index.js

@@ -3750,6 +3750,197 @@ function repositoryResearchToolset(options) {
 	};
 }
 //#endregion
+//#region src/tools/progress.ts
+/** The stock progress tool name the engine scans terminals for. */
+const PROGRESS_REPORT_TOOL_NAME = "report_progress";
+const PROGRESS_SCHEMA = {
+	type: "object",
+	additionalProperties: false,
+	required: ["facts"],
+	properties: {
+		facts: {
+			type: "array",
+			items: { type: "string" },
+			description: "New facts established since the last report; may be empty early on."
+		},
+		evidence: {
+			type: "array",
+			items: { type: "string" },
+			description: "Evidence references backing the facts (file:line or recorded evidence ids)."
+		},
+		questions: {
+			type: "array",
+			items: { type: "string" },
+			description: "Remaining unresolved questions."
+		},
+		note: {
+			type: "string",
+			description: "Optional short status note."
+		}
+	}
+};
+/**
+* The stock progress-report tool. Stateless and deterministic: the
+* result echoes the counts, so a verbatim repeated report is a
+* duplicate result digest to the exploration guards. The value is the
+* side contract: the engine captures the LAST successful call of this
+* tool as the structured terminal partial of a 'limit' invocation, so
+* an agent that reports after every batch never loses its collected
+* work to a budget expiry.
+*/
+function progressReportTool() {
+	return tool({
+		name: PROGRESS_REPORT_TOOL_NAME,
+		description: "Report research progress after every batch of tool calls: the new facts you established, the evidence references backing them, and the questions still open. If the invocation ends at a limit, your LAST report is returned to the caller as the structured partial result, so report before the budget runs out.",
+		parameters: PROGRESS_SCHEMA,
+		risk: "read",
+		execute: (input) => {
+			const report = input;
+			return Promise.resolve({
+				recorded: true,
+				facts: report.facts?.length ?? 0,
+				evidence: report.evidence?.length ?? 0,
+				questions: report.questions?.length ?? 0
+			});
+		}
+	});
+}
+function stringArray(value) {
+	return Array.isArray(value) ? value.filter((entry) => typeof entry === "string") : [];
+}
+/**
+* The deterministic terminal scan: pairs `report_progress` tool calls
+* with their SUCCESSFUL results by id (a denied or failed call never
+* counts, mirroring the exploration guard's restore) and normalizes the
+* last one into a {@link ProgressReport}. Pure over the message window
+* it is given: the live loop hands its own history, the replay path
+* hands the terminal checkpoint's messages, and a compaction naturally
+* narrows the window to what the model itself still sees.
+*/
+function latestProgressReport(messages) {
+	const callsById = /* @__PURE__ */ new Map();
+	let latest;
+	for (const msg of messages) for (const part of msg.parts) if (part.type === "tool-call" && part.name === "report_progress") callsById.set(part.id, part.args);
+	else if (part.type === "tool-result" && part.name === "report_progress" && part.isError !== true && callsById.has(part.id)) {
+		const args = callsById.get(part.id);
+		if (typeof args === "object" && args !== null && !Array.isArray(args)) {
+			const record = args;
+			const report = {
+				facts: stringArray(record.facts),
+				evidence: stringArray(record.evidence),
+				questions: stringArray(record.questions)
+			};
+			if (typeof record.note === "string") report.note = record.note;
+			latest = report;
+		}
+	}
+	return latest;
+}
+//#endregion
+//#region src/engine/profile-templates.ts
+/**
+* The research template's stop conditions: a weighted unit budget over
+* the research tools (bookkeeping tools are free), per-tool caps, both
+* repetition guards, and soft budget notices. Exported so hosts and
+* tests can read the exact defaults they are overriding.
+*/
+const RESEARCH_PROFILE_LIMITS = {
+	maxTurns: 24,
+	maxToolCalls: 48,
+	toolBudgetNotices: true,
+	maxRepeatedToolSignature: 2,
+	maxNoNewEvidenceCalls: 6,
+	maxCallsPerTool: {
+		list_files: 12,
+		search_files: 20,
+		read_file: 30
+	},
+	toolUnits: {
+		max: 64,
+		costs: {
+			list_files: 1,
+			search_files: 2,
+			read_file: 2,
+			record_evidence: 0,
+			list_evidence: 0,
+			report_progress: 0
+		}
+	}
+};
+/** The implementation template's stop conditions. */
+const IMPLEMENTATION_PROFILE_LIMITS = {
+	maxTurns: 32,
+	maxToolCalls: 64,
+	toolBudgetNotices: true,
+	maxRepeatedToolSignature: 3,
+	noProgressTurns: 3
+};
+/** The review template's stop conditions. */
+const REVIEW_PROFILE_LIMITS = {
+	maxTurns: 16,
+	maxToolCalls: 32,
+	toolBudgetNotices: true,
+	maxRepeatedToolSignature: 2,
+	maxNoNewEvidenceCalls: 8
+};
+function mergeLimits(template, overrides) {
+	return {
+		...template,
+		...overrides ?? {}
+	};
+}
+/**
+* The batteries-included research child: the confined
+* {@link repositoryResearchToolset} over `root`, the stock
+* report_progress tool, and {@link RESEARCH_PROFILE_LIMITS} as the stop
+* conditions. A child spawned from this profile that runs out of budget
+* settles 'limit' WITH its last progress report as the structured
+* partial, and the recorded evidence stays readable host-side through
+* `evidence()`.
+*/
+function researchAgentProfile(options) {
+	const { description, limits, extraTools, ...toolsetOptions } = options;
+	const kit = repositoryResearchToolset(toolsetOptions);
+	return {
+		profile: {
+			description: description ?? "Repository research over a confined root: paginated list_files/search_files/read_file with stable cursors, record_evidence verifying every citation, and report_progress after every batch. Stop conditions built in: weighted tool units, per-tool caps, repetition and no-new-evidence guards, budget notices. On limit the last progress report is the structured partial.",
+			tools: [
+				...kit.tools,
+				progressReportTool(),
+				...extraTools ?? []
+			],
+			limits: mergeLimits(RESEARCH_PROFILE_LIMITS, limits)
+		},
+		evidence: () => kit.evidence()
+	};
+}
+/**
+* The implementation child template: the caller's task tools plus the
+* progress contract, with {@link IMPLEMENTATION_PROFILE_LIMITS} as the
+* stop conditions (a no-progress detector instead of the research
+* no-new-evidence guard: implementation legitimately re-reads state).
+*/
+function implementationAgentProfile(options = {}) {
+	return {
+		description: options.description ?? "Implementation work with built-in stop conditions: tool budget with notices, repeated-call guard, no-progress detector. Report progress with report_progress after every batch; on limit the last report is the structured partial.",
+		tools: [progressReportTool(), ...options.tools ?? []],
+		limits: mergeLimits(IMPLEMENTATION_PROFILE_LIMITS, options.limits)
+	};
+}
+/**
+* The review child template: the caller's task tools plus the progress
+* contract, with {@link REVIEW_PROFILE_LIMITS} as the stop conditions
+* (a tighter turn budget and the no-new-evidence guard: a reviewer
+* circling over the same pages should stop, not spin).
+*/
+function reviewAgentProfile(options = {}) {
+	return {
+		description: options.description ?? "Focused review with built-in stop conditions: tight turn and tool budgets with notices, repetition and no-new-evidence guards. Report findings with report_progress after every batch; on limit the last report is the structured partial.",
+		tools: [progressReportTool(), ...options.tools ?? []],
+		limits: mergeLimits(REVIEW_PROFILE_LIMITS, options.limits)
+	};
+}
+//#endregion
 //#region src/journal/identity.ts
 /**
 * Content-addressed entry identity (M1-T04): IdentityInput records per
@@ -8461,6 +8652,10 @@ function mergeUsageLimits(call, profile, engine) {
 	if (maxRepeatedToolSignature !== void 0) merged.maxRepeatedToolSignature = maxRepeatedToolSignature;
 	const maxNoNewEvidenceCalls = pick("maxNoNewEvidenceCalls");
 	if (maxNoNewEvidenceCalls !== void 0) merged.maxNoNewEvidenceCalls = maxNoNewEvidenceCalls;
+	const maxCallsPerTool = pick("maxCallsPerTool");
+	if (maxCallsPerTool !== void 0) merged.maxCallsPerTool = maxCallsPerTool;
+	const toolUnits = pick("toolUnits");
+	if (toolUnits !== void 0) merged.toolUnits = toolUnits;
 	return merged;
 }
 /**
@@ -8485,6 +8680,21 @@ function validateUsageLimits(limits, site) {
 	if (limits.toolBudgetNotices !== void 0 && typeof limits.toolBudgetNotices !== "boolean") throw new ConfigError(`${site}.toolBudgetNotices must be a boolean; got ${typeof limits.toolBudgetNotices}`);
 	if (limits.maxRepeatedToolSignature !== void 0) requirePositiveInteger(limits.maxRepeatedToolSignature, `${site}.maxRepeatedToolSignature`);
 	if (limits.maxNoNewEvidenceCalls !== void 0) requirePositiveInteger(limits.maxNoNewEvidenceCalls, `${site}.maxNoNewEvidenceCalls`);
+	if (limits.maxCallsPerTool !== void 0) {
+		const caps = limits.maxCallsPerTool;
+		if (typeof caps !== "object" || caps === null || Array.isArray(caps)) throw new ConfigError(`${site}.maxCallsPerTool must be a record of per-tool caps`);
+		for (const [name, cap] of Object.entries(caps)) requireNonNegativeInteger(cap, `${site}.maxCallsPerTool['${name}']`);
+	}
+	if (limits.toolUnits !== void 0) {
+		const units = limits.toolUnits;
+		if (typeof units !== "object" || units === null || Array.isArray(units)) throw new ConfigError(`${site}.toolUnits must be { max, costs? }`);
+		const { max, costs } = units;
+		requirePositiveInteger(max, `${site}.toolUnits.max`);
+		if (costs !== void 0) {
+			if (typeof costs !== "object" || costs === null || Array.isArray(costs)) throw new ConfigError(`${site}.toolUnits.costs must be a record of per-tool costs`);
+			for (const [name, cost] of Object.entries(costs)) requireNonNegativeInteger(cost, `${site}.toolUnits.costs['${name}']`);
+		}
+	}
 }
 //#endregion
 //#region src/runtime/model-retry.ts
@@ -9019,7 +9229,7 @@ function formatRePrompt(issues, attempt, maxAttempts) {
 const GUARD_DOCS_URL = "https://docs.rulvar.com/guide/agents#exploration-guards";
 /** True when any exploration guard field asks for tracking. */
 function explorationTrackingEnabled(limits) {
-	return limits.maxRepeatedToolSignature !== void 0 || limits.maxNoNewEvidenceCalls !== void 0 || limits.toolBudgetNotices === true;
+	return limits.maxRepeatedToolSignature !== void 0 || limits.maxNoNewEvidenceCalls !== void 0 || limits.toolBudgetNotices === true || limits.maxCallsPerTool !== void 0 || limits.toolUnits !== void 0;
 }
 function digestOf$1(value) {
 	try {
@@ -9038,6 +9248,8 @@ var ExplorationGuard = class {
 	repeated = 0;
 	duplicateResults = 0;
 	denied = 0;
+	deniedToolCap = 0;
+	unitsUsed = 0;
 	unserializableSeq = 0;
 	constructor(config) {
 		this.config = config;
@@ -9075,10 +9287,25 @@ var ExplorationGuard = class {
 		}
 	}
 	/**
-	* The pre-dispatch verdict: denies the call that would exceed
-	* maxRepeatedToolSignature executions of the same signature.
+	* The pre-dispatch verdict: denies the call that would exceed its
+	* tool's maxCallsPerTool cap, then the call that would exceed
+	* maxRepeatedToolSignature executions of the same signature. A denial
+	* never consumes maxToolCalls or tool units.
 	*/
 	beforeExecute(name, args) {
+		const cap = this.config.maxCallsPerTool?.[name];
+		if (cap !== void 0) {
+			const executions = this.byTool.get(name) ?? 0;
+			if (executions >= cap) {
+				this.deniedToolCap += 1;
+				return {
+					deny: true,
+					guard: "per-tool-cap",
+					executions,
+					reason: `exploration guard: '${name}' already executed ${String(executions)} time(s) this invocation (maxCallsPerTool ${String(cap)}). Use what you have or a different tool (${GUARD_DOCS_URL}).`
+				};
+			}
+		}
 		const max = this.config.maxRepeatedToolSignature;
 		if (max === void 0) return { deny: false };
 		const executions = this.signatureExecutions.get(this.signatureOf(name, args)) ?? 0;
@@ -9086,6 +9313,7 @@ var ExplorationGuard = class {
 		this.denied += 1;
 		return {
 			deny: true,
+			guard: "repeated-signature",
 			executions,
 			reason: `exploration guard: this exact '${name}' call already executed ${String(executions)} time(s) this invocation (maxRepeatedToolSignature ${String(max)}). Reuse the earlier result or change the arguments (${GUARD_DOCS_URL}).`
 		};
@@ -9103,6 +9331,7 @@ var ExplorationGuard = class {
 	recordExecution(name, args, result, successful) {
 		this.executed += 1;
 		this.byTool.set(name, (this.byTool.get(name) ?? 0) + 1);
+		if (this.config.toolUnits !== void 0) this.unitsUsed += this.config.toolUnits.costs?.[name] ?? 1;
 		const signature = this.signatureOf(name, args);
 		const prior = this.signatureExecutions.get(signature) ?? 0;
 		if (prior > 0) this.repeated += 1;
@@ -9119,6 +9348,14 @@ var ExplorationGuard = class {
 		const max = this.config.maxNoNewEvidenceCalls;
 		return max !== void 0 && this.noNewEvidenceStreak >= max;
 	}
+	/**
+	* True once the spent tool units reached the weighted budget: the
+	* loop's pre-dispatch check, mirroring maxToolCalls (terminal 'limit',
+	* paid partial work). Never true without toolUnits configured.
+	*/
+	unitsExhausted() {
+		return this.config.toolUnits !== void 0 && this.unitsUsed >= this.config.toolUnits.max;
+	}
 	/** The abort message for a tripped no-new-evidence guard. */
 	describeTrip() {
 		return `exploration guard: ${String(this.noNewEvidenceStreak)} consecutive tool calls returned no new evidence (maxNoNewEvidenceCalls ${String(this.config.maxNoNewEvidenceCalls ?? this.noNewEvidenceStreak)}; every result was already seen this invocation). The executed work is kept; narrow the scope, vary the queries, or raise the limit (${GUARD_DOCS_URL}).`;
@@ -9133,7 +9370,9 @@ var ExplorationGuard = class {
 			repeatedCalls: this.repeated,
 			duplicateResultCalls: this.duplicateResults,
 			deniedRepeats: this.denied,
-			byTool
+			byTool,
+			...this.config.maxCallsPerTool === void 0 ? {} : { deniedToolCap: this.deniedToolCap },
+			...this.config.toolUnits === void 0 ? {} : { toolUnitsUsed: this.unitsUsed }
 		};
 	}
 };
@@ -9743,6 +9982,10 @@ async function runAgent(options) {
 				parts,
 				limitHit: true
 			};
+			if (guard !== void 0 && guard.unitsExhausted()) return {
+				parts,
+				limitHit: true
+			};
 			const def = runtime.defs.find((candidate) => candidate.name === call.name);
 			events?.emit({
 				type: "tool:start",
@@ -9898,11 +10141,11 @@ async function runAgent(options) {
 						toolName: gatedCall.name,
 						outcome: "denied",
 						durationMs: now() - gateStartedAt,
-						guard: "repeated-signature"
+						guard: guardVerdict.guard
 					});
 					parts.push(errorPart(call, {
 						error: guardVerdict.reason,
-						guard: "repeated-signature"
+						guard: guardVerdict.guard
 					}));
 					continue;
 				}
@@ -10751,6 +10994,8 @@ async function runAgent(options) {
 		}
 		endPhase(extractPhase, phaseOutcome(), extractServed);
 	}
+	const limitPartial = status === "limit" ? latestProgressReport(messages) : void 0;
+	if (limitPartial !== void 0) await saveBoundary();
 	let transcriptRef = "";
 	if (options.transcript !== void 0) {
 		transcriptRef = options.transcript.mintRef();
@@ -10773,6 +11018,7 @@ async function runAgent(options) {
 	if (abortClass !== void 0) result.abortClass = abortClass;
 	if (errorMessage !== void 0) result.errorMessage = errorMessage;
 	if (guard !== void 0) result.exploration = guard.summary(toolCallsUsed);
+	if (limitPartial !== void 0) result.partial = limitPartial;
 	if (usageApprox) result.usageApprox = true;
 	if (transportRetries > 0) result.transportRetries = transportRetries;
 	return result;
@@ -11744,7 +11990,13 @@ const WAKE_SUMMARY_RENDER_BUDGET_CHARS = 400;
 * spawn ordinal; the LLM distillation upgrade is M7 territory).
 */
 function summarizeOutput(result) {
-	return truncateToBudget(result.status === "ok" ? typeof result.output === "string" ? result.output : JSON.stringify(result.output ?? null) : result.errorMessage ?? `terminal status ${result.status}`, 400);
+	let raw;
+	if (result.status === "ok") raw = typeof result.output === "string" ? result.output : JSON.stringify(result.output ?? null);
+	else {
+		raw = result.errorMessage ?? `terminal status ${result.status}`;
+		if (result.partial !== void 0) raw = `${raw}; partial: ${JSON.stringify(result.partial)}`;
+	}
+	return truncateToBudget(raw, 400);
 }
 /** Folds one settled child into its digest (spawn-ordinal ordering is the caller's). */
 function digestOf(record, result) {
@@ -12617,6 +12869,10 @@ function createCtx(internals, rootWorkflow) {
 				const checkpoint = blob === null ? void 0 : decodeCheckpoint(blob);
 				if (checkpoint !== void 0) {
 					result.turns = checkpoint.turns;
+					if (result.status === "limit") {
+						const partialReport = latestProgressReport(checkpoint.messages);
+						if (partialReport !== void 0) result.partial = partialReport;
+					}
 					replayedToolResults = checkpoint.messages.filter((msg) => msg.role === "tool").flatMap((msg) => msg.parts).filter((part) => part.type === "tool-result").map((part) => ({
 						name: part.name,
 						isError: part.isError === true
@@ -13817,7 +14073,14 @@ function pageOf(content, rawOffset, rawMaxChars) {
 }
 /** The serialized full result of a settled child: the raw string, or JSON. */
 function serializeChildOutput(result) {
-	if (result.status !== "ok") return result.errorMessage ?? `terminal status ${result.status}`;
+	if (result.status !== "ok") {
+		const base = result.errorMessage ?? `terminal status ${result.status}`;
+		if (result.partial !== void 0) return JSON.stringify({
+			error: base,
+			partial: result.partial
+		});
+		return base;
+	}
 	return typeof result.output === "string" ? result.output : JSON.stringify(result.output ?? null);
 }
 /**
@@ -13839,6 +14102,8 @@ function validateOrchestrateOptions(opts) {
 		const minSuccessful = typeof policy === "object" && policy !== null && !Array.isArray(policy) ? policy.minSuccessful : void 0;
 		if (policy !== "all-ok" && minSuccessful === void 0) throw new ConfigError(`orchestrate acceptance.childPolicy must be 'all-ok' or { minSuccessful: N }; got ${JSON.stringify(policy)}`);
 		if (policy !== "all-ok") requirePositiveInteger(minSuccessful, "orchestrate acceptance.childPolicy.minSuccessful");
+		const acceptPartial = opts.acceptance.acceptPartialChildren;
+		if (acceptPartial !== void 0 && typeof acceptPartial !== "boolean") throw new ConfigError(`orchestrate acceptance.acceptPartialChildren must be a boolean; got ${typeof acceptPartial}`);
 	}
 	if (opts.finishValidation !== void 0) {
 		const fv = opts.finishValidation;
@@ -13903,6 +14168,16 @@ function finishValidationPromptLines(spec) {
 	return [`The host validates every finish({ result }) with deterministic validators: ${names}.`, "A rejected finish returns the failure reasons as the tool error result; repair the result and call finish again. " + (repairs === 0 ? "No repair attempt is granted: the first rejected finish fails the run." : repairs === 1 ? "At most one repair attempt is granted before the run fails." : `At most ${String(repairs)} repair attempts are granted before the run fails.`)];
 }
 /**
+* The partial-salvage contract rides the PROMPT exactly like finish
+* validation (RV-210 close-out): present only when
+* acceptance.acceptPartialChildren is set, so every other configuration
+* keeps byte-identical coordination prompts.
+*/
+function acceptancePromptLines(acceptance) {
+	if (acceptance?.acceptPartialChildren !== true) return [];
+	return ["Partial salvage is on: a child that ends at its limit AFTER recording progress with report_progress counts as a partial success for acceptance; its digest carries the partial and get_child_result (when enabled) pages the full report. When the gap matters, respawn a NARROWED child carrying the partial instead of repeating the task."];
+}
+/**
 * Resolves per-spawn dispatch options against the engine registries
 * (registered SchemaSpec and tool profile names; M7-T05). An
 * unknown ref is a typed ConfigError, surfaced as a tool error to the
@@ -15232,7 +15507,11 @@ function makeOrchestratorWorkflow(goal, opts) {
 			const priorRejection = validationDecisions().find((decision) => decision.verdict === "rejected");
 			if (priorRejection !== void 0) throw finishValidationError(priorRejection);
 		}
-		const promptLines = [...extension?.promptLines?.() ?? [], ...finishValidationPromptLines(validationSpec)];
+		const promptLines = [
+			...extension?.promptLines?.() ?? [],
+			...finishValidationPromptLines(validationSpec),
+			...acceptancePromptLines(opts?.acceptance)
+		];
 		const result = await runtime.runInScope(orchestratorState, () => ctx.agent(orchestratorPrompt(goal, opts?.maxSpawns, promptLines.length === 0 ? void 0 : promptLines), agentOpts));
 		const liveTermination = extensionTermination;
 		if (liveTermination !== void 0) throw liveTermination;
@@ -15248,21 +15527,32 @@ function makeOrchestratorWorkflow(goal, opts) {
 		else {
 			const childStatusCounts = {};
 			const degradedReasons = [];
+			const salvaged = [];
+			let hardDegraded = 0;
+			const acceptPartial = opts.acceptance.acceptPartialChildren === true;
 			const sortedRecords = [...records.values()].sort((a, b) => a.spawnOrdinal - b.spawnOrdinal);
 			for (const record of sortedRecords) {
 				const status = record.settled?.status ?? "running";
 				childStatusCounts[status] = (childStatusCounts[status] ?? 0) + 1;
-				if (status !== "ok") degradedReasons.push(status === "running" ? `child ${record.nodeId} was still running when finish validated` : `child ${record.nodeId} settled '${status}'`);
+				if (status === "ok") continue;
+				if (acceptPartial && status === "limit" && record.settled?.partial !== void 0) {
+					salvaged.push(record.nodeId);
+					degradedReasons.push(`child ${record.nodeId} accepted as partial (settled 'limit' with a structured partial)`);
+					continue;
+				}
+				hardDegraded += 1;
+				degradedReasons.push(status === "running" ? `child ${record.nodeId} was still running when finish validated` : `child ${record.nodeId} settled '${status}'`);
 			}
 			const childPolicy = opts.acceptance.childPolicy;
-			const accepted = childPolicy === "all-ok" ? degradedReasons.length === 0 : (childStatusCounts.ok ?? 0) >= childPolicy.minSuccessful;
+			const accepted = childPolicy === "all-ok" ? hardDegraded === 0 : (childStatusCounts.ok ?? 0) + salvaged.length >= childPolicy.minSuccessful;
 			decision = {
 				decisionType: "orchestrator_acceptance",
 				verdict: accepted ? "accepted" : "rejected",
 				completion: !accepted ? "rejected" : degradedReasons.length === 0 ? "complete" : "partial",
 				childPolicy,
 				childStatusCounts,
-				degradedReasons
+				degradedReasons,
+				...salvaged.length === 0 ? {} : { salvagedPartialChildren: salvaged }
 			};
 			await internals.replayer.appendSinglePhase({
 				scope: callingState.scope,
@@ -15281,14 +15571,16 @@ function makeOrchestratorWorkflow(goal, opts) {
 				completion: "rejected",
 				childPolicy: decision.childPolicy,
 				childStatusCounts: decision.childStatusCounts,
-				degradedReasons: decision.degradedReasons
+				degradedReasons: decision.degradedReasons,
+				...decision.salvagedPartialChildren === void 0 ? {} : { salvagedPartialChildren: decision.salvagedPartialChildren }
 			} });
 		}
 		return {
 			result: await runSynthesis(result.output),
 			completion: decision.completion,
 			childStatusCounts: decision.childStatusCounts,
-			degradedReasons: decision.degradedReasons
+			degradedReasons: decision.degradedReasons,
+			...decision.salvagedPartialChildren === void 0 ? {} : { salvagedPartialChildren: decision.salvagedPartialChildren }
 		};
 	});
 }
@@ -16810,4 +17102,4 @@ function createSandboxBridge(ctx, options) {
 	};
 }
 //#endregion
-export { AWAIT_SCHEMA, AdmissionController, AdmissionRejectedError, AgentCallError, BUDGET_ABORT_REASON, BudgetExhaustedError, CANCEL_AGENT_SCHEMA, CHECKPOINT_FORMAT_V1, CLAIM_STATEMENT_MAX_CHARS, CLAIM_TTL_DAYS, COMPACTION_SUMMARY_PREFIX, CURRENT_HASH_VERSION, ConfigError, DEFAULT_CHILD_BUDGET_FRACTION, DEFAULT_CHILD_RESULT_PAGE_CHARS, DEFAULT_CITATION_PATTERN, DEFAULT_COMPACTION_THRESHOLD, DEFAULT_ESCALATION_LIMITS, DEFAULT_EVIDENCE_MIN_SHARE, DEFAULT_FINISH_MAX_REPAIRS, DEFAULT_FLAT_RESERVE_USD, DEFAULT_MAX_CHILDREN_PER_NODE, DEFAULT_MAX_DEPTH, DEFAULT_MAX_OSCILLATIONS_PER_KEY, DEFAULT_MAX_PINNED_WORKTREES, DEFAULT_MAX_REVISIONS_PER_RUN, DEFAULT_MAX_TOTAL_SPAWNS, DEFAULT_MAX_TURNS, DEFAULT_MODEL_RETRY_ATTEMPTS, DEFAULT_NO_PROGRESS_TURNS, DEFAULT_PER_RUN_CONCURRENCY, DEFAULT_RETRY_POLICY, DEFAULT_STREAM_IDLE_TIMEOUT_MS, DEFAULT_SYNTHESIS_MAX_TURNS, DEFAULT_SYNTHESIS_NOTE_MAX_TURNS, DedupIndex, DeterminismError, EMIT_RESULT_TOOL, EMPTY_SCHEMA_HASH, EMPTY_TOOLSET_HASH, ESCALATE_TOOL_NAME, ESCALATION_REPORT_SCHEMA, ESCALATION_REQUEST_SCHEMA, EVENT_SEGMENT_STRIDE, EscalationDecisionAbortedError, EventBus, ExternalRegistry, FINALIZE_SYNTHESIS_INSTRUCTION, FINISH_SCHEMA, FINISH_TOOL_NAME, FailRunError, FileModelKnowledgeStore, FileTranscriptStore, GET_CHILD_RESULT_SCHEMA, GET_CHILD_RESULT_TOOL_NAME, GitWorktreeProvider, INBOX_PROPOSAL_TTL_DAYS, InMemoryStore, InMemoryTranscriptStore, InProcessRunner, InvalidResolutionError, JournalCompatibilityError, JournalMatcher, JournalMissError, JournalOrderViolation, JsonlFileStore, KB_ACTIVE_CLAIMS_CAP, KB_CARD_RENDER_BUDGET_CHARS, KeyedLimiter, KnowledgeCasError, LARGE_VALUE_WARN_BYTES, LEGACY_LTID_PREFIX, LEGACY_SIGNATURE_INPUTS, LINEAGE_SIG_VERSION, LeaseHeldError, LineageIndex, MASKED_SECRET, MAX_CHILD_RESULT_PAGE_CHARS, MAX_DEPTH_CEILING, ModelRetry, NoProgressDetector, NonSerializableValueError, ORCHESTRATE_WORKFLOW_NAME, OrchestratorCapConfigError, PARALLEL_AGENTS_SCHEMA, ParallelSiteCounter, PlanInvariantError, READ_CHILD_ARTIFACT_SCHEMA, READ_CHILD_ARTIFACT_TOOL_NAME, ROLE_EFFORT_DEFAULTS, ROOT_ACCOUNT, ROOT_SCOPE, RUN_PROFILES, RUN_SETTLE_DECISION_TYPE, ReplayPlanHashMismatch, Replayer, ResolutionArbiter, ResolutionFold, RulvarError, RunBudget, SANDBOX_AGENT_OPT_KEYS, SPAWN_AGENT_SCHEMA, SandboxError, ScriptRejected, Semaphore, SpanRegistry, TOOL_NAME_PATTERN, TerminationAccount, WAIT_FOR_EVENTS_SCHEMA, WAIT_FOR_EVENTS_TOOL_NAME, WAKE_SUMMARY_RENDER_BUDGET_CHARS, admissionReserveUsd, affordableOutputTokens, agentErrorFromWire, agentErrorToWire, agentResultWire, agentScope, applyClaimOps, applyStructuredOutputTier, approachSigCoarse, approachSigOf, archiveDeprecatedModelOps, assertFencedWrites, atCompactionThreshold, auditRun, auditRuns, buildAbandonFold, buildAdapterRegistry, buildCostReport, buildDeriverRegistry, buildOrchestratorTools, buildTerminationInitValue, buildToolContext, canRideLoopTurn, canonicalIsolationTag, canonicalizeLadder, canonicalizeSchema, capIssues, capsHashOf, checkFloors, checkpointRefFor, childCoveragePrefix, claimExpired, claimExpiry, claimIssues, claimOpIssues, classifyAgentError, classifyAttemptOutcome, collectDeclaredLadders, compactMessages, compilePermissionChain, compilePermissionPreset, compileVerifiedLayer, costReportFromJournal, countsAgainstLimit, createCanonicalIdMinter, createCtx, createEngine, createSandboxBridge, currentOnlyKeyRing, decodeCheckpoint, dedupeRepeatedClaims, defineWorkflow, deriveContentKey, deriverV1, deriverV2, digestOf, dispositionHook, emptyDigestBlocks, emptyToolset, encodeCheckpoint, entryUsageSlices, escalateTool, evaluatePermission, evaluateReuse, evidencePreservedValidator, executeWorkflow, exhaustionCodeOf, extractCandidate, failoverTriggerOf, fallbackTriggerOf, filterClaimsForRun, finalizeFires, foldTermination, formatRePrompt, formatScopePath, hasFencedWrites, hasMetaLookup, hashRunArgs, hashRunOutput, hashWorkflowBody, hashWorkflowSource, identityJcs, isEscalated, isSchemaPairSpec, isStandardSchemaSpec, isStrictCompatibleSchema, kMaxOf, knowledgeHash, ladderLengthOf, ladderRungChoice, lastRunSettle, lexShellCommand, liftRetainedParts, lineageWeightOf, makeOrchestratorWorkflow, maskSecrets, maskSecretsDeep, maskSecretsJson, matchArgvPattern, matchShellCommand, mcp, mergeUsageLimits, metaMatchesFilter, minMatchesValidator, modelEpochOf, modelKnowledgeCard, modelSpecIdentity, needsSeparateExtract, nextFailover, nodeLinkKey, normalizeApproachTag, normalizeEntry, normalizeFallbacks, orchestrate, parallelScope, parseModelRef, parseScopePath, phiInitialOf, pipelineScope, planNodeScope, priceEntryUsage, priceUsdOf, profileCard, profileRegistrySnapshotHash, projectHistory, projectIdentity, projectToJsonSchema, proposalStatement, providerOf, readRunMeta, readTerminationInit, reconcileRunMeta, reduceCriticalPath, reduceInvocationTable, registryKeyRing, remeasureQueue, replayDisposition, repositoryResearchToolset, requiredFieldsValidator, requiredSectionsValidator, resolveModelInvocation, resolvePricing, resolveToolset, retryClassOf, retryDelayMs, roleConfiguredInRouting, roundOneDisposition, runAgent, runProfile, sanitizeTerminalText, sanitizeTokenCount, sanitizeUsage, sanitizeUsageDelta, scanJournalCompatibility, schemaHash, schemaHashOfSpec, selectStructuredOutputTier, shouldCompact, snapshotUsage, spawnDepthOf, summarizeInstruction, summarizeOutput, terminationConfigDrift, tierWithinCaps, toApprovalDecision, toJournalValue, tool, toolContract, toolsetHash, ttlState, usageViolations, validateEditorialCommit, validateEntryShape, validateEscalationLimits, validateEscalationReport, validateRetryPolicy, validateSchemaSpec, validateTerminationLimits, validateUsageLimits, workflowScope, workflowSourceRef, wrapJournalStore, wrapTranscriptStore };
+export { AWAIT_SCHEMA, AdmissionController, AdmissionRejectedError, AgentCallError, BUDGET_ABORT_REASON, BudgetExhaustedError, CANCEL_AGENT_SCHEMA, CHECKPOINT_FORMAT_V1, CLAIM_STATEMENT_MAX_CHARS, CLAIM_TTL_DAYS, COMPACTION_SUMMARY_PREFIX, CURRENT_HASH_VERSION, ConfigError, DEFAULT_CHILD_BUDGET_FRACTION, DEFAULT_CHILD_RESULT_PAGE_CHARS, DEFAULT_CITATION_PATTERN, DEFAULT_COMPACTION_THRESHOLD, DEFAULT_ESCALATION_LIMITS, DEFAULT_EVIDENCE_MIN_SHARE, DEFAULT_FINISH_MAX_REPAIRS, DEFAULT_FLAT_RESERVE_USD, DEFAULT_MAX_CHILDREN_PER_NODE, DEFAULT_MAX_DEPTH, DEFAULT_MAX_OSCILLATIONS_PER_KEY, DEFAULT_MAX_PINNED_WORKTREES, DEFAULT_MAX_REVISIONS_PER_RUN, DEFAULT_MAX_TOTAL_SPAWNS, DEFAULT_MAX_TURNS, DEFAULT_MODEL_RETRY_ATTEMPTS, DEFAULT_NO_PROGRESS_TURNS, DEFAULT_PER_RUN_CONCURRENCY, DEFAULT_RETRY_POLICY, DEFAULT_STREAM_IDLE_TIMEOUT_MS, DEFAULT_SYNTHESIS_MAX_TURNS, DEFAULT_SYNTHESIS_NOTE_MAX_TURNS, DedupIndex, DeterminismError, EMIT_RESULT_TOOL, EMPTY_SCHEMA_HASH, EMPTY_TOOLSET_HASH, ESCALATE_TOOL_NAME, ESCALATION_REPORT_SCHEMA, ESCALATION_REQUEST_SCHEMA, EVENT_SEGMENT_STRIDE, EscalationDecisionAbortedError, EventBus, ExternalRegistry, FINALIZE_SYNTHESIS_INSTRUCTION, FINISH_SCHEMA, FINISH_TOOL_NAME, FailRunError, FileModelKnowledgeStore, FileTranscriptStore, GET_CHILD_RESULT_SCHEMA, GET_CHILD_RESULT_TOOL_NAME, GitWorktreeProvider, IMPLEMENTATION_PROFILE_LIMITS, INBOX_PROPOSAL_TTL_DAYS, InMemoryStore, InMemoryTranscriptStore, InProcessRunner, InvalidResolutionError, JournalCompatibilityError, JournalMatcher, JournalMissError, JournalOrderViolation, JsonlFileStore, KB_ACTIVE_CLAIMS_CAP, KB_CARD_RENDER_BUDGET_CHARS, KeyedLimiter, KnowledgeCasError, LARGE_VALUE_WARN_BYTES, LEGACY_LTID_PREFIX, LEGACY_SIGNATURE_INPUTS, LINEAGE_SIG_VERSION, LeaseHeldError, LineageIndex, MASKED_SECRET, MAX_CHILD_RESULT_PAGE_CHARS, MAX_DEPTH_CEILING, ModelRetry, NoProgressDetector, NonSerializableValueError, ORCHESTRATE_WORKFLOW_NAME, OrchestratorCapConfigError, PARALLEL_AGENTS_SCHEMA, PROGRESS_REPORT_TOOL_NAME, ParallelSiteCounter, PlanInvariantError, READ_CHILD_ARTIFACT_SCHEMA, READ_CHILD_ARTIFACT_TOOL_NAME, RESEARCH_PROFILE_LIMITS, REVIEW_PROFILE_LIMITS, ROLE_EFFORT_DEFAULTS, ROOT_ACCOUNT, ROOT_SCOPE, RUN_PROFILES, RUN_SETTLE_DECISION_TYPE, ReplayPlanHashMismatch, Replayer, ResolutionArbiter, ResolutionFold, RulvarError, RunBudget, SANDBOX_AGENT_OPT_KEYS, SPAWN_AGENT_SCHEMA, SandboxError, ScriptRejected, Semaphore, SpanRegistry, TOOL_NAME_PATTERN, TerminationAccount, WAIT_FOR_EVENTS_SCHEMA, WAIT_FOR_EVENTS_TOOL_NAME, WAKE_SUMMARY_RENDER_BUDGET_CHARS, admissionReserveUsd, affordableOutputTokens, agentErrorFromWire, agentErrorToWire, agentResultWire, agentScope, applyClaimOps, applyStructuredOutputTier, approachSigCoarse, approachSigOf, archiveDeprecatedModelOps, assertFencedWrites, atCompactionThreshold, auditRun, auditRuns, buildAbandonFold, buildAdapterRegistry, buildCostReport, buildDeriverRegistry, buildOrchestratorTools, buildTerminationInitValue, buildToolContext, canRideLoopTurn, canonicalIsolationTag, canonicalizeLadder, canonicalizeSchema, capIssues, capsHashOf, checkFloors, checkpointRefFor, childCoveragePrefix, claimExpired, claimExpiry, claimIssues, claimOpIssues, classifyAgentError, classifyAttemptOutcome, collectDeclaredLadders, compactMessages, compilePermissionChain, compilePermissionPreset, compileVerifiedLayer, costReportFromJournal, countsAgainstLimit, createCanonicalIdMinter, createCtx, createEngine, createSandboxBridge, currentOnlyKeyRing, decodeCheckpoint, dedupeRepeatedClaims, defineWorkflow, deriveContentKey, deriverV1, deriverV2, digestOf, dispositionHook, emptyDigestBlocks, emptyToolset, encodeCheckpoint, entryUsageSlices, escalateTool, evaluatePermission, evaluateReuse, evidencePreservedValidator, executeWorkflow, exhaustionCodeOf, extractCandidate, failoverTriggerOf, fallbackTriggerOf, filterClaimsForRun, finalizeFires, foldTermination, formatRePrompt, formatScopePath, hasFencedWrites, hasMetaLookup, hashRunArgs, hashRunOutput, hashWorkflowBody, hashWorkflowSource, identityJcs, implementationAgentProfile, isEscalated, isSchemaPairSpec, isStandardSchemaSpec, isStrictCompatibleSchema, kMaxOf, knowledgeHash, ladderLengthOf, ladderRungChoice, lastRunSettle, latestProgressReport, lexShellCommand, liftRetainedParts, lineageWeightOf, makeOrchestratorWorkflow, maskSecrets, maskSecretsDeep, maskSecretsJson, matchArgvPattern, matchShellCommand, mcp, mergeUsageLimits, metaMatchesFilter, minMatchesValidator, modelEpochOf, modelKnowledgeCard, modelSpecIdentity, needsSeparateExtract, nextFailover, nodeLinkKey, normalizeApproachTag, normalizeEntry, normalizeFallbacks, orchestrate, parallelScope, parseModelRef, parseScopePath, phiInitialOf, pipelineScope, planNodeScope, priceEntryUsage, priceUsdOf, profileCard, profileRegistrySnapshotHash, progressReportTool, projectHistory, projectIdentity, projectToJsonSchema, proposalStatement, providerOf, readRunMeta, readTerminationInit, reconcileRunMeta, reduceCriticalPath, reduceInvocationTable, registryKeyRing, remeasureQueue, replayDisposition, repositoryResearchToolset, requiredFieldsValidator, requiredSectionsValidator, researchAgentProfile, resolveModelInvocation, resolvePricing, resolveToolset, retryClassOf, retryDelayMs, reviewAgentProfile, roleConfiguredInRouting, roundOneDisposition, runAgent, runProfile, sanitizeTerminalText, sanitizeTokenCount, sanitizeUsage, sanitizeUsageDelta, scanJournalCompatibility, schemaHash, schemaHashOfSpec, selectStructuredOutputTier, shouldCompact, snapshotUsage, spawnDepthOf, summarizeInstruction, summarizeOutput, terminationConfigDrift, tierWithinCaps, toApprovalDecision, toJournalValue, tool, toolContract, toolsetHash, ttlState, usageViolations, validateEditorialCommit, validateEntryShape, validateEscalationLimits, validateEscalationReport, validateRetryPolicy, validateSchemaSpec, validateTerminationLimits, validateUsageLimits, workflowScope, workflowSourceRef, wrapJournalStore, wrapTranscriptStore };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rulvar/core",
-  "version": "1.54.0",
+  "version": "1.55.0",
   "description": "Rulvar core: L0 contracts, journal kernel, ctx primitives, agent runtime, model router, tool system, dynamic orchestrator, InMemory and JSONL stores, event stream.",
   "type": "module",
   "license": "Apache-2.0",