@rulvar/core 1.54.0 → 1.56.0

package/dist/index.d.ts

@@ -1638,6 +1638,59 @@ interface KbProposal {
   note?: string;
 }
 //#endregion
+//#region src/l0/spi/quota.d.ts
+/**
+* The pre-dispatch estimate a reservation is admitted under. Token
+* estimates are heuristic (the engine uses its deterministic
+* four-characters-per-token prompt estimate plus the request's output
+* cap when one is set); reconcile() settles the difference against
+* actual usage inside the same accounting window.
+*/
+interface QuotaEstimate {
+  /** Wire calls this reservation admits; the engine always sends 1. */
+  requests: number;
+  /** Heuristic prompt estimate for the attempt. */
+  inputTokens: number;
+  /** The request's output token cap, when one is set. */
+  maxOutputTokens?: number;
+}
+/** One admission request, dimensioned for tenant/model/provider rules. */
+interface QuotaReservationRequest {
+  /**
+  * The adapter id (the left segment of ModelRef), matching the keys
+  * of `concurrency.perProvider`.
+  */
+  provider: string;
+  /** The serving model, re-reserved per failover target. */
+  model: string;
+  /** The engine's configured tenant; absent when the host set none. */
+  tenant?: string;
+  /** The run paying for the attempt; observability only. */
+  runId?: string;
+  estimate: QuotaEstimate;
+}
+/**
+* The admission verdict. `retryAfterMs` on a denial is the
+* provider-shaped hint the retry engine honors verbatim: the time
+* until the limiter expects capacity (0 = retry immediately, e.g. a
+* request whose estimate can never fit its cap, so exhaustion and
+* failover happen without waiting; absent = the caller's backoff
+* policy applies).
+*/
+type QuotaDecision = {
+  granted: true;
+  reservationId: string;
+} | {
+  granted: false;
+  retryAfterMs?: number;
+  reason?: string;
+};
+/** The shared rate/quota limiter seam; see the module contract above. */
+interface QuotaLimiter {
+  reserve(request: QuotaReservationRequest): Promise<QuotaDecision>;
+  reconcile(reservationId: string, usage: Usage): Promise<void>;
+}
+//#endregion
 //#region src/knowledge/decay.d.ts
 /**
 * The asymmetric TTL table:
@@ -2667,6 +2720,127 @@ declare class KeyedLimiter {
   withSlot<T>(key: string, fn: () => Promise<T>, onQueued?: () => void, signal?: AbortSignal): Promise<T>;
 }
 //#endregion
+//#region src/model/quota.d.ts
+/** The fixed accounting window every PerMinute cap counts over. */
+declare const QUOTA_WINDOW_MS = 6e4;
+/**
+* One shared-quota rule. The dimension fields select which requests
+* the rule governs (an absent dimension matches every value); EVERY
+* matching rule must admit a request, and a grant consumes capacity
+* from each of them. The counters are rule-scoped: one rule matching
+* two models pools them under one cap; write one rule per model for
+* per-model buckets.
+*/
+interface QuotaRule {
+  /** Adapter id, as in `concurrency.perProvider` keys. */
+  provider?: string;
+  model?: string;
+  tenant?: string;
+  /** Wire attempts admitted per window; the exact, hard cap. */
+  requestsPerMinute?: number;
+  /**
+  * Input plus output tokens admitted per window: estimated at
+  * admission, reconciled to actual usage.
+  */
+  tokensPerMinute?: number;
+}
+/**
+* Validates a quota rule set as a typed ConfigError before any
+* limiter can admit under it: a non-array or empty set, a rule
+* without a cap, a malformed dimension, or a malformed cap all fail
+* loud at construction. Shared by every reference implementation.
+*/
+declare function validateQuotaRules(rules: readonly QuotaRule[], site?: string): void;
+/** True when every dimension the rule pins matches the request. */
+declare function quotaRuleMatches(rule: QuotaRule, request: QuotaReservationRequest): boolean;
+/** The tokens a reservation is admitted under: input estimate plus the output cap. */
+declare function quotaEstimateTokens(request: QuotaReservationRequest): number;
+/** The tokens a settled attempt actually consumed. */
+declare function quotaActualTokens(usage: Usage): number;
+/** Current-window counters of one rule bucket. */
+interface QuotaCounters {
+  requests: number;
+  tokens: number;
+}
+/**
+* One rule's admission verdict against its current-window counters,
+* the pure decision both reference implementations share. A denial
+* carries the window remainder as retryAfterMs, except when the
+* estimate alone can never fit the token cap: that denial says
+* retryAfterMs 0 (retry immediately), so the caller's bounded
+* attempts exhaust without waiting and failover gets its chance.
+*/
+declare function quotaRuleAdmission(rule: QuotaRule, counters: QuotaCounters, estimate: QuotaCounters, msUntilWindowEnd: number): {
+  admit: true;
+} | {
+  admit: false;
+  retryAfterMs: number;
+  reason: string;
+};
+/**
+* Folds one more failing rule into the decision the caller returns:
+* the wait is the LONGEST failing horizon (every matching rule must
+* admit), and the FIRST failing rule names the denial.
+*/
+declare function mergeQuotaDenial(current: {
+  retryAfterMs: number;
+  reason: string;
+} | undefined, next: {
+  retryAfterMs: number;
+  reason: string;
+}): {
+  retryAfterMs: number;
+  reason: string;
+};
+/** One rule's live counters, exposed by `snapshot()` for telemetry. */
+interface QuotaWindowSnapshot {
+  rule: QuotaRule;
+  windowStart: number;
+  requests: number;
+  tokens: number;
+}
+/** The in-process reference QuotaLimiter returned by memoryQuotaLimiter. */
+interface MemoryQuotaLimiter extends QuotaLimiter {
+  /** Current-window counters per rule; rolled-over windows read as zero. */
+  snapshot(): QuotaWindowSnapshot[];
+}
+/**
+* The in-process reference QuotaLimiter: fixed epoch-aligned
+* one-minute windows over the shared rule model. Coordinates every
+* engine that shares THIS instance inside one process; processes
+* coordinate through a shared-storage implementation of the same SPI
+* (SqliteQuotaLimiter in @rulvar/store-sqlite) instead.
+*/
+declare function memoryQuotaLimiter(rules: readonly QuotaRule[], options?: {
+  now?: () => number;
+}): MemoryQuotaLimiter;
+/** createEngine quota config: the limiter plus its engine-scoped knobs. */
+interface EngineQuotaConfig {
+  limiter: QuotaLimiter;
+  /** Stamped on every reservation of this engine's runs. */
+  tenant?: string;
+  /**
+  * What a limiter infrastructure FAILURE (reserve throwing) means:
+  * 'deny' (default, fail closed) converts it into a retryable
+  * transport-class denial; 'allow' logs a warning and dispatches
+  * without a reservation. A limiter DENIAL is unaffected by this
+  * knob. reconcile failures only ever warn.
+  */
+  onLimiterError?: "deny" | "allow";
+}
+/** The resolved engine-side quota runtime threaded into every run. */
+interface EngineQuotaRuntime {
+  limiter: QuotaLimiter;
+  tenant?: string;
+  onLimiterError: "deny" | "allow";
+}
+/**
+* Validates createEngine's quota config as a typed ConfigError before
+* any run could dispatch under a malformed limiter (the intake
+* discipline every engine option follows).
+*/
+declare function validateEngineQuotaConfig(config: EngineQuotaConfig | undefined, site?: string): void;
+//#endregion
 //#region src/model/floors.d.ts
 /** An explicit allowlist and denylist; deny wins over allow. */
 type ModelListConstraint = {
@@ -3033,6 +3207,10 @@ interface ExplorationSummary {
   deniedRepeats: number;
   /** Executions per tool name. */
   byTool: Record<string, number>;
+  /** Calls denied by maxCallsPerTool; present when that limit is configured. */
+  deniedToolCap?: number;
+  /** Weighted tool units spent; present when toolUnits is configured. */
+  toolUnitsUsed?: number;
 }
 /**
 * Agent lifecycle. One logical agent dispatch emits EXACTLY ONE
@@ -3407,6 +3585,45 @@ declare class NoProgressDetector {
   describe(): string;
 }
 //#endregion
+//#region src/tools/progress.d.ts
+/** The stock progress tool name the engine scans terminals for. */
+declare const PROGRESS_REPORT_TOOL_NAME = "report_progress";
+/**
+* One progress report: what the agent has established so far. Captured
+* as {@link AgentResult.partial} (normalized: absent arrays become
+* empty) when the invocation terminates with status 'limit'.
+*/
+interface ProgressReport {
+  /** New facts established, each a standalone claim line. */
+  facts: string[];
+  /** Evidence references backing the facts (file:line or recorded ids). */
+  evidence: string[];
+  /** Remaining unresolved questions. */
+  questions: string[];
+  /** Optional short status note. */
+  note?: string;
+}
+/**
+* The stock progress-report tool. Stateless and deterministic: the
+* result echoes the counts, so a verbatim repeated report is a
+* duplicate result digest to the exploration guards. The value is the
+* side contract: the engine captures the LAST successful call of this
+* tool as the structured terminal partial of a 'limit' invocation, so
+* an agent that reports after every batch never loses its collected
+* work to a budget expiry.
+*/
+declare function progressReportTool(): ToolDef;
+/**
+* The deterministic terminal scan: pairs `report_progress` tool calls
+* with their SUCCESSFUL results by id (a denied or failed call never
+* counts, mirroring the exploration guard's restore) and normalizes the
+* last one into a {@link ProgressReport}. Pure over the message window
+* it is given: the live loop hands its own history, the replay path
+* hands the terminal checkpoint's messages, and a compaction naturally
+* narrows the window to what the model itself still sees.
+*/
+declare function latestProgressReport(messages: readonly Msg[]): ProgressReport | undefined;
+//#endregion
 //#region src/runtime/usage-limits.d.ts
 interface UsageLimits {
   /** Default 32. */
@@ -3449,6 +3666,29 @@ interface UsageLimits {
   * default.
   */
   maxNoNewEvidenceCalls?: number;
+  /**
+  * Per-tool execution caps by tool NAME (RV-210 close-out): the call
+  * that would exceed its tool's cap is denied with a typed error tool
+  * result instead of dispatched (visible to the model, never terminal),
+  * and the denial does not consume maxToolCalls or tool units. A cap of
+  * 0 bans the tool for the invocation; names absent from the record are
+  * unlimited. Per layer the whole record replaces (no per-key merge),
+  * like every other UsageLimits field.
+  */
+  maxCallsPerTool?: Record<string, number>;
+  /**
+  * The weighted tool budget (RV-210 close-out): every EXECUTED call of
+  * tool T costs `costs[T] ?? 1` units (a cost of 0 makes bookkeeping
+  * tools free), and once the spent units reach `max` the invocation
+  * terminates as status 'limit' exactly like maxToolCalls (paid partial
+  * work; executed results stand). Denied calls cost nothing. On resume
+  * the spent units rebuild from the restored transcript's successful
+  * executions, the same conservative window the exploration guards use.
+  */
+  toolUnits?: {
+    max: number;
+    costs?: Record<string, number>;
+  };
 }
 declare const DEFAULT_MAX_TURNS = 32;
 declare const DEFAULT_STREAM_IDLE_TIMEOUT_MS = 12e4;
@@ -3464,6 +3704,11 @@ interface EffectiveUsageLimits {
   toolBudgetNotices?: boolean;
   maxRepeatedToolSignature?: number;
   maxNoNewEvidenceCalls?: number;
+  maxCallsPerTool?: Record<string, number>;
+  toolUnits?: {
+    max: number;
+    costs?: Record<string, number>;
+  };
 }
 /**
 * Limits merge per spawn: AgentOpts.limits over profile limits over engine
@@ -3574,6 +3819,18 @@ interface AgentResult<T> {
   * transportRetries.
   */
   exploration?: ExplorationSummary;
+  /**
+  * The structured terminal partial (RV-210 close-out): the LAST
+  * successful `report_progress` call of the invocation, present only on
+  * a 'limit' terminal (cap expiry or an engine-decided abort) whose
+  * transcript recorded at least one report. Derived deterministically
+  * from the message window: live from the loop's own history (a final
+  * boundary checkpoint is written so the window is durable), on replay
+  * from the terminal checkpoint, so both read the same bytes. This is
+  * what lets a caller salvage a limit child's collected work instead of
+  * seeing a bare 'terminal status limit'.
+  */
+  partial?: ProgressReport;
 }
 type EscalatedResult<T> = AgentResult<T> & {
   status: "escalated";
@@ -3690,6 +3947,24 @@ interface RunAgentOptions<S extends SchemaSpec = JsonSchema> {
   * key's queue without a slot (v1.34.0 review P2-4).
   */
   providerSlot?: <T>(key: string, fn: () => Promise<T>, signal?: AbortSignal) => Promise<T>;
+  /**
+  * The shared quota limiter hook (RV-215): consulted before EVERY
+  * live wire dispatch (initial attempts, transport retries, and
+  * failover takeovers alike, in every phase). A denial becomes a
+  * synthetic rate-limit-class WireError the retry and failover
+  * engine treats exactly like a provider 429, except no wire call
+  * was paid: retryAfterMs drives the interruptible backoff, attempts
+  * stay bounded by RetryPolicy, and exhaustion fails over (the
+  * takeover reserves under its own model). Granted reservations are
+  * reconciled with the attempt's actual usage after the outcome
+  * settles. Live-only by construction: replayed calls never reach
+  * this seam, and nothing here is journaled.
+  */
+  quota?: {
+    reserve: (request: QuotaReservationRequest) => Promise<QuotaDecision>;
+    reconcile: (reservationId: string, usage: Usage) => Promise<void>; /** Limiter infrastructure failure policy; a denial is unaffected. */
+    onLimiterError: "deny" | "allow";
+  };
   /** The resolved toolset; absent = no tools declared. */
   tools?: ToolRuntime;
   /**
@@ -5118,6 +5393,18 @@ interface CreateEngineOptions {
     perRun?: number; /** Per-adapter-id caps; unlimited unless configured (Appendix A; M4-T07). */
     perProvider?: Record<string, number>;
   };
+  /**
+  * The shared quota limiter (RV-215): a QuotaLimiter implementation
+  * consulted before every live wire dispatch of every run, plus the
+  * engine's tenant dimension and the limiter failure policy. Engines
+  * and processes that share one limiter (or one limiter storage,
+  * e.g. SqliteQuotaLimiter in @rulvar/store-sqlite over one database
+  * file) enforce one global quota; a denial rides the provider-429
+  * retry and failover machinery without paying a wire call. Absent =
+  * no shared quota (Appendix A: an embeddable library must not
+  * surprise-throttle hosts).
+  */
+  quota?: EngineQuotaConfig;
   /** Versioned price table; wins over caps.pricing (M4-T06). */
   pricing?: PriceTable;
   /**
@@ -5519,8 +5806,10 @@ interface TaskDigest {
 * when the output IS a string, else its JCS-independent `JSON.stringify`)
 * for a settled ok child, or the child's `errorMessage` otherwise, so the
 * orchestrator can read WHY a child failed as readily as what it
-* produced. Everything here is a pure read of already durable journal
-* state, so a resume reproduces it with no new spend.
+* produced; a limit child carrying a structured terminal partial serves
+* `{ error, partial }` instead (RV-210 close-out), so the collected work
+* is pageable in full. Everything here is a pure read of already durable
+* journal state, so a resume reproduces it with no new spend.
 */
 interface ChildResultPage {
   handle: number;
@@ -5998,6 +6287,21 @@ interface OrchestrateAcceptance {
   childPolicy: "all-ok" | {
     minSuccessful: number;
   };
+  /**
+  * The partial-child salvage switch (RV-210 close-out; default false).
+  * When true, a child that settled 'limit' WITH a structured terminal
+  * partial (it recorded progress through the stock `report_progress`
+  * tool before the budget expired) counts as a successful child for the
+  * policy: under 'all-ok' it no longer rejects the run, and under
+  * { minSuccessful: N } it counts toward N. The acceptance verdict then
+  * reports completion 'partial' (never 'complete'), lists the salvaged
+  * children in `salvagedPartialChildren` on the result envelope, and
+  * keeps a per-child note in degradedReasons. A limit child WITHOUT a
+  * partial gave the caller nothing to salvage and still counts against
+  * the policy. The whole fold is journaled in the single acceptance
+  * decision, so a resume rolls the same verdict forward.
+  */
+  acceptPartialChildren?: boolean;
 }
 /** How many rejected finishes are repaired by default: the plan's repair once. */
 declare const DEFAULT_FINISH_MAX_REPAIRS = 1;
@@ -6789,6 +7093,13 @@ interface RunInternals {
   };
   /** Engine-scoped per-provider keyed limiter (M4-T07). */
   providerLimiter?: KeyedLimiter;
+  /**
+  * The shared quota limiter runtime (RV-215): the configured
+  * QuotaLimiter with the engine's tenant and failure policy
+  * resolved. Threaded into every live wire dispatch of every run;
+  * absent = no shared quota, byte-identical to before the feature.
+  */
+  quota?: EngineQuotaRuntime;
   /** The configured price table's version; pinned in decision entries (M4-T06). */
   pricingVersion?: string;
   /** budgetDefaults.flatReserveUsd; last resort of the reserve formula. */
@@ -7158,6 +7469,73 @@ interface RepositoryResearchToolset {
 }
 declare function repositoryResearchToolset(options: RepositoryResearchToolsetOptions): RepositoryResearchToolset;
 //#endregion
+//#region src/engine/profile-templates.d.ts
+/**
+* The research template's stop conditions: a weighted unit budget over
+* the research tools (bookkeeping tools are free), per-tool caps, both
+* repetition guards, and soft budget notices. Exported so hosts and
+* tests can read the exact defaults they are overriding.
+*/
+declare const RESEARCH_PROFILE_LIMITS: UsageLimits;
+/** The implementation template's stop conditions. */
+declare const IMPLEMENTATION_PROFILE_LIMITS: UsageLimits;
+/** The review template's stop conditions. */
+declare const REVIEW_PROFILE_LIMITS: UsageLimits;
+/** Options shared by the implementation and review templates. */
+interface AgentProfileTemplateOptions {
+  /** Advertised profile description; the template provides a default. */
+  description?: string;
+  /** Per-key overrides over the template's limits. */
+  limits?: UsageLimits;
+  /** The task tools; the stock report_progress tool is always prepended. */
+  tools?: ToolDef[];
+}
+/** Options of {@link researchAgentProfile}: the toolset knobs plus template overrides. */
+interface ResearchAgentProfileOptions extends RepositoryResearchToolsetOptions {
+  /** Advertised profile description; the template provides a default. */
+  description?: string;
+  /** Per-key overrides over {@link RESEARCH_PROFILE_LIMITS}. */
+  limits?: UsageLimits;
+  /** Extra tools appended after the research toolset. */
+  extraTools?: ToolDef[];
+}
+/** What {@link researchAgentProfile} returns: the profile plus the evidence accessor. */
+interface ResearchAgentProfileResult {
+  profile: AgentProfile;
+  /**
+  * The research kit's host-side evidence snapshot. One kit instance
+  * backs the profile, so children spawned from the SAME registered
+  * profile pool their verified evidence here (and see each other's
+  * entries through list_evidence); construct one template per fan-out
+  * run, or per child, when isolation matters.
+  */
+  evidence: () => ResearchEvidenceEntry[];
+}
+/**
+* The batteries-included research child: the confined
+* {@link repositoryResearchToolset} over `root`, the stock
+* report_progress tool, and {@link RESEARCH_PROFILE_LIMITS} as the stop
+* conditions. A child spawned from this profile that runs out of budget
+* settles 'limit' WITH its last progress report as the structured
+* partial, and the recorded evidence stays readable host-side through
+* `evidence()`.
+*/
+declare function researchAgentProfile(options: ResearchAgentProfileOptions): ResearchAgentProfileResult;
+/**
+* The implementation child template: the caller's task tools plus the
+* progress contract, with {@link IMPLEMENTATION_PROFILE_LIMITS} as the
+* stop conditions (a no-progress detector instead of the research
+* no-new-evidence guard: implementation legitimately re-reads state).
+*/
+declare function implementationAgentProfile(options?: AgentProfileTemplateOptions): AgentProfile;
+/**
+* The review child template: the caller's task tools plus the progress
+* contract, with {@link REVIEW_PROFILE_LIMITS} as the stop conditions
+* (a tighter turn budget and the no-new-evidence guard: a reviewer
+* circling over the same pages should stop, not spin).
+*/
+declare function reviewAgentProfile(options?: AgentProfileTemplateOptions): AgentProfile;
+//#endregion
 //#region src/journal/scope.d.ts
 /**
 * Scope-path grammar (M1-T04): deterministic structural paths, independent
@@ -7924,4 +8302,4 @@ interface SandboxBridge {
 declare const SANDBOX_AGENT_OPT_KEYS: readonly string[];
 declare function createSandboxBridge(ctx: Ctx<never>, options: SandboxBridgeOptions): SandboxBridge;
 //#endregion
-export { AWAIT_SCHEMA, AbandonAttempt, AbandonFold, AbandonPayload, AbandonedSpendView, AbortClass, type AdaptiveEvents, AdmissionController, AdmissionDecision, AdmissionRejectedError, AdmissionStatsBefore, AdmitLineage, AdmitRejectReason, AdmitSpec, AdmitVerdict, AgentCallError, AgentError, type AgentEvents, AgentIdentityInput, type AgentInvocationRow, AgentOpts, AgentProfile, AgentProfilePermissions, AgentResult, AgentResultMeta, AgentStatus, ApproachSignatureInputs, ApprovalDecision, ApprovalIdentityInput, Artifact, AttemptOutcomeClass, AuditRunsOptions, BUDGET_ABORT_REASON, BaseAppend, BriefOpts, BudgetAccountView, BudgetDefaults, BudgetExhaustedError, BudgetExhaustionDiagnostics, BudgetHooks, BudgetReserve, type Bytes, CANCEL_AGENT_SCHEMA, CHECKPOINT_FORMAT_V1, CLAIM_STATEMENT_MAX_CHARS, CLAIM_TTL_DAYS, COMPACTION_SUMMARY_PREFIX, CURRENT_HASH_VERSION, CacheHint, CacheTtl, CanUseTool, CanonicalId, CanonicalIdentity, CanonicalLadderSpec, CanonicalModelSpec, ChatEvent, ChatRequest, CheckpointState, ChildArtifactPage, ChildIdentityInput, ChildResultPage, type ClaimClass, type ClaimOp, type ClaimStatus, ClaimValidationOptions, CollectOpts, CollectedTurn, CompactionConfig, CompiledPermissionChain, CompiledWorkflow, ConfigError, type CoreEvents, CostAttribution, CostAttributionFacts, CostReport, CreateEngineOptions, type CriticalPath, Ctx, DEFAULT_CHILD_BUDGET_FRACTION, DEFAULT_CHILD_RESULT_PAGE_CHARS, DEFAULT_CITATION_PATTERN, DEFAULT_COMPACTION_THRESHOLD, DEFAULT_ESCALATION_LIMITS, DEFAULT_EVIDENCE_MIN_SHARE, DEFAULT_FINISH_MAX_REPAIRS, DEFAULT_FLAT_RESERVE_USD, DEFAULT_MAX_CHILDREN_PER_NODE, DEFAULT_MAX_DEPTH, DEFAULT_MAX_OSCILLATIONS_PER_KEY, DEFAULT_MAX_PINNED_WORKTREES, DEFAULT_MAX_REVISIONS_PER_RUN, DEFAULT_MAX_TOTAL_SPAWNS, DEFAULT_MAX_TURNS, DEFAULT_MODEL_RETRY_ATTEMPTS, DEFAULT_NO_PROGRESS_TURNS, DEFAULT_PER_RUN_CONCURRENCY, DEFAULT_RETRY_POLICY, DEFAULT_STREAM_IDLE_TIMEOUT_MS, DEFAULT_SYNTHESIS_MAX_TURNS, DEFAULT_SYNTHESIS_NOTE_MAX_TURNS, DebitResult, DeclaredLadder, DedupIndex, DedupNote, DedupedClaims, DerivedKey, DeriverRegistry, type DeterminismConfig, DeterminismError, type DeterminismEvents, type DeterminismMode, DispositionRule, DispositionTable, DonorCandidate, DonorRef, DroppedItem, EMIT_RESULT_TOOL, EMPTY_SCHEMA_HASH, EMPTY_TOOLSET_HASH, ESCALATE_TOOL_NAME, ESCALATION_REPORT_SCHEMA, ESCALATION_REQUEST_SCHEMA, EVENT_SEGMENT_STRIDE, EffectiveUsageLimits, Effort, Engine, EngineDefaults, EntryKind, EntryRef, EntryStatus, ErrorClass, ErrorCode, ErrorPolicy, EscalatedResult, EscalationDecision, EscalationDecisionAbortedError, EscalationDigest, EscalationKind, EscalationLimits, EscalationOptions, EscalationReport, EscalationRequest, EventBus, type EvidenceRef, type ExplorationSummary, ExtensionAppendInput, ExtensionDispatchSpec, ExternalIdentityInput, ExternalRegistry, ExtractNecessityInput, FINALIZE_SYNTHESIS_INSTRUCTION, FINISH_SCHEMA, FINISH_TOOL_NAME, FailRunError, FailoverTarget, FailoverTrigger, FallbackField, FallbackTrigger, FileModelKnowledgeStore, FileModelKnowledgeStoreOptions, FileTranscriptStore, FinishInfo, FinishValidationChild, FinishValidationInput, FinishValidationSpec, FinishValidationVerdict, FinishValidator, GET_CHILD_RESULT_SCHEMA, GET_CHILD_RESULT_TOOL_NAME, Gate, GateAudit, type GateRecord, GitWorktreeProvider, GitWorktreeProviderOptions, GraftBoot, HashVersion, HookVerdict, INBOX_PROPOSAL_TTL_DAYS, IdentityInput, InMemoryStore, InMemoryTranscriptStore, InProcessRunner, IncrementalSynthesisResult, InvalidResolutionError, InvocationRole, type InvocationTable, type IsolationProvider, type IsolationSpec, Issue$1 as Issue, JournalCompatSubCode, JournalCompatibilityError, JournalEntry, JournalMatcher, JournalMissError, JournalOperation, JournalOrderViolation, JournalSerializationHook, type JournalStore, type Json, JsonSchema, JsonlFileStore, KB_ACTIVE_CLAIMS_CAP, KB_CARD_RENDER_BUDGET_CHARS, type KbProposal, type KbProposalTrigger, KeyDeriver, KeyRing, KeyedLimiter, KnowledgeCasError, type KnowledgeSnapshot, LARGE_VALUE_WARN_BYTES, LEGACY_LTID_PREFIX, LEGACY_SIGNATURE_INPUTS, LINEAGE_SIG_VERSION, LadderSpec, type LeasableStore, type Lease, LeaseHeldError, Ledger, LineageCounters, LineageIndex, LineageRef, LineageRelation, LineageStats, LogicalTaskId, MASKED_SECRET, MAX_CHILD_RESULT_PAGE_CHARS, MAX_DEPTH_CEILING, MatchResult, McpConfig, McpToolSource, MechanicalGateProfile, MechanicalGateVerdict, type MetaLookupStore, type ModelCaps, ModelChoice, type ModelClaim, ModelEpochInputs, type ModelKnowledgeHandle, type ModelKnowledgeStore, ModelListConstraint, ModelRef, ModelRetry, ModelSpec, Msg, NoProgressDetector, NodeId, NodeLinkValue, NonSerializableValueError, ORCHESTRATE_WORKFLOW_NAME, OnEscalation, OperationDisposition, OrchestrateAcceptance, OrchestrateOptions, OrchestrateSynthesis, OrchestratorBudgetSpec, OrchestratorCapConfigError, OrchestratorExtension, OrchestratorExtensionIO, OrchestratorRuntime, Out, PARALLEL_AGENTS_SCHEMA, ParallelSiteCounter, Part, PendingExternal, PendingToolTurn, PermissionConfig, PermissionGate, PermissionHook, PermissionPreset, PermissionRule, PermissionVerdict, type PhaseRow, PhaseTarget, PipelineCollected, PipelineOpts, PlanInvariantError, PriceTable, PricedUsage, type Pricing, type PricingTier, type ProviderAdapter, QualityFloors, READ_CHILD_ARTIFACT_SCHEMA, READ_CHILD_ARTIFACT_TOOL_NAME, ROLE_EFFORT_DEFAULTS, ROOT_ACCOUNT, ROOT_SCOPE, RUN_PROFILES, RUN_SETTLE_DECISION_TYPE, RandIdentityInput, RandPayload, ReconcileOptions, ReconcileResult, RefEntryAppender, RefEntryClassification, RefusalInfo, RepeatedClaim, ReplayDisposition, ReplayMode, ReplayPlanHashMismatch, Replayer, RepositoryResearchToolset, RepositoryResearchToolsetOptions, ResearchEvidenceEntry, ResolutionArbiter, ResolutionAttempt, ResolutionBy, ResolutionFold, ResolutionLayer, ResolutionOutcome, ResolutionPayload, ResolvedInvocation, ResolvedToolset, ResumeHandle, ResumeOptions, ResumePreview, ResumeReport, RetryClass, RetryPolicy, ReuseConfig, RiskRuleValue, Role, RulvarError, RulvarErrorCode, RunAgentOptions, RunAuditVerdict, RunBudget, RunEventSink, type RunFilter, RunHandle, RunInternals, type RunMeta, RunOptions, RunOutcome, RunProfile, RunStateAudit, RunStatus, RuntimeEventSink, SANDBOX_AGENT_OPT_KEYS, SPAWN_AGENT_SCHEMA, SandboxBridge, SandboxBridgeOptions, SandboxError, SandboxHostToWorker, SandboxMethod, SandboxWorkerToHost, SchemaPair, SchemaSpec, SchemaValidationResult, ScopeSegment, ScriptRejected, ScriptRunner, ScrubNote, Semaphore, SerializationHook, Settled, ShellPatternRules, ShellSegment, ShellVerdict, SinglePhaseAppend, SpanMinter, SpanRegistry, SpawnAdmissionValue, SpawnAgentParams, SpawnKey, SpawnLineage, SpawnLineageOpt, SpawnOrigin, SpawnRecord, Spend, Stage, type StandardJSONSchemaV1, type StandardSchemaV1, StepIdentityInput, StructuredOutputTier, SuspendedAppend, SuspensionState, TOOL_NAME_PATTERN, type TaskClass, TaskDigest, TaskSpec, TerminalPatch, TerminationAccount, TerminationAccountSnapshot, TerminationDeniedValue, TerminationDeniedWriter, TerminationInitValue, TerminationLimits, TerminationResource, ToolCallRequest, ToolChoice, type ToolContext, ToolContextSeed, ToolContract, type ToolDef, type ToolEvents, type ToolExecutor, ToolInit, type ToolRisk, ToolRuntime, type ToolSource, type ToolSourceSession, ToolsOption, TranscriptSerializationHook, type TranscriptStore, TriggerClass, TtlState, Usage, UsageLimits, UsageSlice, VerifiedRecommendation, WAIT_FOR_EVENTS_SCHEMA, WAIT_FOR_EVENTS_TOOL_NAME, WAKE_SUMMARY_RENDER_BUDGET_CHARS, WakeBudgetBlock, WakeDigest, WakeTrigger, WireError, Workflow, WorkflowCallOpts, type WorkflowEvent, type WorkflowEventBody, WorkflowRegistry, admissionReserveUsd, affordableOutputTokens, agentErrorFromWire, agentErrorToWire, agentResultWire, agentScope, applyClaimOps, applyStructuredOutputTier, approachSigCoarse, approachSigOf, archiveDeprecatedModelOps, assertFencedWrites, atCompactionThreshold, auditRun, auditRuns, buildAbandonFold, buildAdapterRegistry, buildCostReport, buildDeriverRegistry, buildOrchestratorTools, buildTerminationInitValue, buildToolContext, canRideLoopTurn, canonicalIsolationTag, canonicalizeLadder, canonicalizeSchema, capIssues, capsHashOf, checkFloors, checkpointRefFor, childCoveragePrefix, claimExpired, claimExpiry, claimIssues, claimOpIssues, classifyAgentError, classifyAttemptOutcome, collectDeclaredLadders, compactMessages, compilePermissionChain, compilePermissionPreset, compileVerifiedLayer, costReportFromJournal, countsAgainstLimit, createCanonicalIdMinter, createCtx, createEngine, createSandboxBridge, currentOnlyKeyRing, decodeCheckpoint, dedupeRepeatedClaims, defineWorkflow, deriveContentKey, deriverV1, deriverV2, digestOf, dispositionHook, emptyDigestBlocks, emptyToolset, encodeCheckpoint, entryUsageSlices, escalateTool, evaluatePermission, evaluateReuse, evidencePreservedValidator, executeWorkflow, exhaustionCodeOf, extractCandidate, failoverTriggerOf, fallbackTriggerOf, filterClaimsForRun, finalizeFires, foldTermination, formatRePrompt, formatScopePath, hasFencedWrites, hasMetaLookup, hashRunArgs, hashRunOutput, hashWorkflowBody, hashWorkflowSource, identityJcs, isEscalated, isSchemaPairSpec, isStandardSchemaSpec, isStrictCompatibleSchema, kMaxOf, knowledgeHash, ladderLengthOf, ladderRungChoice, lastRunSettle, lexShellCommand, liftRetainedParts, lineageWeightOf, makeOrchestratorWorkflow, maskSecrets, maskSecretsDeep, maskSecretsJson, matchArgvPattern, matchShellCommand, mcp, mergeUsageLimits, metaMatchesFilter, minMatchesValidator, modelEpochOf, modelKnowledgeCard, modelSpecIdentity, needsSeparateExtract, nextFailover, nodeLinkKey, normalizeApproachTag, normalizeEntry, normalizeFallbacks, orchestrate, parallelScope, parseModelRef, parseScopePath, phiInitialOf, pipelineScope, planNodeScope, priceEntryUsage, priceUsdOf, profileCard, profileRegistrySnapshotHash, projectHistory, projectIdentity, projectToJsonSchema, proposalStatement, providerOf, readRunMeta, readTerminationInit, reconcileRunMeta, reduceCriticalPath, reduceInvocationTable, registryKeyRing, remeasureQueue, replayDisposition, repositoryResearchToolset, requiredFieldsValidator, requiredSectionsValidator, resolveModelInvocation, resolvePricing, resolveToolset, retryClassOf, retryDelayMs, roleConfiguredInRouting, roundOneDisposition, runAgent, runProfile, sanitizeTerminalText, sanitizeTokenCount, sanitizeUsage, sanitizeUsageDelta, scanJournalCompatibility, schemaHash, schemaHashOfSpec, selectStructuredOutputTier, shouldCompact, snapshotUsage, spawnDepthOf, summarizeInstruction, summarizeOutput, terminationConfigDrift, tierWithinCaps, toApprovalDecision, toJournalValue, tool, toolContract, toolsetHash, ttlState, usageViolations, validateEditorialCommit, validateEntryShape, validateEscalationLimits, validateEscalationReport, validateRetryPolicy, validateSchemaSpec, validateTerminationLimits, validateUsageLimits, workflowScope, workflowSourceRef, wrapJournalStore, wrapTranscriptStore };
+export { AWAIT_SCHEMA, AbandonAttempt, AbandonFold, AbandonPayload, AbandonedSpendView, AbortClass, type AdaptiveEvents, AdmissionController, AdmissionDecision, AdmissionRejectedError, AdmissionStatsBefore, AdmitLineage, AdmitRejectReason, AdmitSpec, AdmitVerdict, AgentCallError, AgentError, type AgentEvents, AgentIdentityInput, type AgentInvocationRow, AgentOpts, AgentProfile, AgentProfilePermissions, AgentProfileTemplateOptions, AgentResult, AgentResultMeta, AgentStatus, ApproachSignatureInputs, ApprovalDecision, ApprovalIdentityInput, Artifact, AttemptOutcomeClass, AuditRunsOptions, BUDGET_ABORT_REASON, BaseAppend, BriefOpts, BudgetAccountView, BudgetDefaults, BudgetExhaustedError, BudgetExhaustionDiagnostics, BudgetHooks, BudgetReserve, type Bytes, CANCEL_AGENT_SCHEMA, CHECKPOINT_FORMAT_V1, CLAIM_STATEMENT_MAX_CHARS, CLAIM_TTL_DAYS, COMPACTION_SUMMARY_PREFIX, CURRENT_HASH_VERSION, CacheHint, CacheTtl, CanUseTool, CanonicalId, CanonicalIdentity, CanonicalLadderSpec, CanonicalModelSpec, ChatEvent, ChatRequest, CheckpointState, ChildArtifactPage, ChildIdentityInput, ChildResultPage, type ClaimClass, type ClaimOp, type ClaimStatus, ClaimValidationOptions, CollectOpts, CollectedTurn, CompactionConfig, CompiledPermissionChain, CompiledWorkflow, ConfigError, type CoreEvents, CostAttribution, CostAttributionFacts, CostReport, CreateEngineOptions, type CriticalPath, Ctx, DEFAULT_CHILD_BUDGET_FRACTION, DEFAULT_CHILD_RESULT_PAGE_CHARS, DEFAULT_CITATION_PATTERN, DEFAULT_COMPACTION_THRESHOLD, DEFAULT_ESCALATION_LIMITS, DEFAULT_EVIDENCE_MIN_SHARE, DEFAULT_FINISH_MAX_REPAIRS, DEFAULT_FLAT_RESERVE_USD, DEFAULT_MAX_CHILDREN_PER_NODE, DEFAULT_MAX_DEPTH, DEFAULT_MAX_OSCILLATIONS_PER_KEY, DEFAULT_MAX_PINNED_WORKTREES, DEFAULT_MAX_REVISIONS_PER_RUN, DEFAULT_MAX_TOTAL_SPAWNS, DEFAULT_MAX_TURNS, DEFAULT_MODEL_RETRY_ATTEMPTS, DEFAULT_NO_PROGRESS_TURNS, DEFAULT_PER_RUN_CONCURRENCY, DEFAULT_RETRY_POLICY, DEFAULT_STREAM_IDLE_TIMEOUT_MS, DEFAULT_SYNTHESIS_MAX_TURNS, DEFAULT_SYNTHESIS_NOTE_MAX_TURNS, DebitResult, DeclaredLadder, DedupIndex, DedupNote, DedupedClaims, DerivedKey, DeriverRegistry, type DeterminismConfig, DeterminismError, type DeterminismEvents, type DeterminismMode, DispositionRule, DispositionTable, DonorCandidate, DonorRef, DroppedItem, EMIT_RESULT_TOOL, EMPTY_SCHEMA_HASH, EMPTY_TOOLSET_HASH, ESCALATE_TOOL_NAME, ESCALATION_REPORT_SCHEMA, ESCALATION_REQUEST_SCHEMA, EVENT_SEGMENT_STRIDE, EffectiveUsageLimits, Effort, Engine, EngineDefaults, EngineQuotaConfig, EngineQuotaRuntime, EntryKind, EntryRef, EntryStatus, ErrorClass, ErrorCode, ErrorPolicy, EscalatedResult, EscalationDecision, EscalationDecisionAbortedError, EscalationDigest, EscalationKind, EscalationLimits, EscalationOptions, EscalationReport, EscalationRequest, EventBus, type EvidenceRef, type ExplorationSummary, ExtensionAppendInput, ExtensionDispatchSpec, ExternalIdentityInput, ExternalRegistry, ExtractNecessityInput, FINALIZE_SYNTHESIS_INSTRUCTION, FINISH_SCHEMA, FINISH_TOOL_NAME, FailRunError, FailoverTarget, FailoverTrigger, FallbackField, FallbackTrigger, FileModelKnowledgeStore, FileModelKnowledgeStoreOptions, FileTranscriptStore, FinishInfo, FinishValidationChild, FinishValidationInput, FinishValidationSpec, FinishValidationVerdict, FinishValidator, GET_CHILD_RESULT_SCHEMA, GET_CHILD_RESULT_TOOL_NAME, Gate, GateAudit, type GateRecord, GitWorktreeProvider, GitWorktreeProviderOptions, GraftBoot, HashVersion, HookVerdict, IMPLEMENTATION_PROFILE_LIMITS, INBOX_PROPOSAL_TTL_DAYS, IdentityInput, InMemoryStore, InMemoryTranscriptStore, InProcessRunner, IncrementalSynthesisResult, InvalidResolutionError, InvocationRole, type InvocationTable, type IsolationProvider, type IsolationSpec, Issue$1 as Issue, JournalCompatSubCode, JournalCompatibilityError, JournalEntry, JournalMatcher, JournalMissError, JournalOperation, JournalOrderViolation, JournalSerializationHook, type JournalStore, type Json, JsonSchema, JsonlFileStore, KB_ACTIVE_CLAIMS_CAP, KB_CARD_RENDER_BUDGET_CHARS, type KbProposal, type KbProposalTrigger, KeyDeriver, KeyRing, KeyedLimiter, KnowledgeCasError, type KnowledgeSnapshot, LARGE_VALUE_WARN_BYTES, LEGACY_LTID_PREFIX, LEGACY_SIGNATURE_INPUTS, LINEAGE_SIG_VERSION, LadderSpec, type LeasableStore, type Lease, LeaseHeldError, Ledger, LineageCounters, LineageIndex, LineageRef, LineageRelation, LineageStats, LogicalTaskId, MASKED_SECRET, MAX_CHILD_RESULT_PAGE_CHARS, MAX_DEPTH_CEILING, MatchResult, McpConfig, McpToolSource, MechanicalGateProfile, MechanicalGateVerdict, MemoryQuotaLimiter, type MetaLookupStore, type ModelCaps, ModelChoice, type ModelClaim, ModelEpochInputs, type ModelKnowledgeHandle, type ModelKnowledgeStore, ModelListConstraint, ModelRef, ModelRetry, ModelSpec, Msg, NoProgressDetector, NodeId, NodeLinkValue, NonSerializableValueError, ORCHESTRATE_WORKFLOW_NAME, OnEscalation, OperationDisposition, OrchestrateAcceptance, OrchestrateOptions, OrchestrateSynthesis, OrchestratorBudgetSpec, OrchestratorCapConfigError, OrchestratorExtension, OrchestratorExtensionIO, OrchestratorRuntime, Out, PARALLEL_AGENTS_SCHEMA, PROGRESS_REPORT_TOOL_NAME, ParallelSiteCounter, Part, PendingExternal, PendingToolTurn, PermissionConfig, PermissionGate, PermissionHook, PermissionPreset, PermissionRule, PermissionVerdict, type PhaseRow, PhaseTarget, PipelineCollected, PipelineOpts, PlanInvariantError, PriceTable, PricedUsage, type Pricing, type PricingTier, ProgressReport, type ProviderAdapter, QUOTA_WINDOW_MS, QualityFloors, QuotaCounters, type QuotaDecision, type QuotaEstimate, type QuotaLimiter, type QuotaReservationRequest, QuotaRule, QuotaWindowSnapshot, READ_CHILD_ARTIFACT_SCHEMA, READ_CHILD_ARTIFACT_TOOL_NAME, RESEARCH_PROFILE_LIMITS, REVIEW_PROFILE_LIMITS, ROLE_EFFORT_DEFAULTS, ROOT_ACCOUNT, ROOT_SCOPE, RUN_PROFILES, RUN_SETTLE_DECISION_TYPE, RandIdentityInput, RandPayload, ReconcileOptions, ReconcileResult, RefEntryAppender, RefEntryClassification, RefusalInfo, RepeatedClaim, ReplayDisposition, ReplayMode, ReplayPlanHashMismatch, Replayer, RepositoryResearchToolset, RepositoryResearchToolsetOptions, ResearchAgentProfileOptions, ResearchAgentProfileResult, ResearchEvidenceEntry, ResolutionArbiter, ResolutionAttempt, ResolutionBy, ResolutionFold, ResolutionLayer, ResolutionOutcome, ResolutionPayload, ResolvedInvocation, ResolvedToolset, ResumeHandle, ResumeOptions, ResumePreview, ResumeReport, RetryClass, RetryPolicy, ReuseConfig, RiskRuleValue, Role, RulvarError, RulvarErrorCode, RunAgentOptions, RunAuditVerdict, RunBudget, RunEventSink, type RunFilter, RunHandle, RunInternals, type RunMeta, RunOptions, RunOutcome, RunProfile, RunStateAudit, RunStatus, RuntimeEventSink, SANDBOX_AGENT_OPT_KEYS, SPAWN_AGENT_SCHEMA, SandboxBridge, SandboxBridgeOptions, SandboxError, SandboxHostToWorker, SandboxMethod, SandboxWorkerToHost, SchemaPair, SchemaSpec, SchemaValidationResult, ScopeSegment, ScriptRejected, ScriptRunner, ScrubNote, Semaphore, SerializationHook, Settled, ShellPatternRules, ShellSegment, ShellVerdict, SinglePhaseAppend, SpanMinter, SpanRegistry, SpawnAdmissionValue, SpawnAgentParams, SpawnKey, SpawnLineage, SpawnLineageOpt, SpawnOrigin, SpawnRecord, Spend, Stage, type StandardJSONSchemaV1, type StandardSchemaV1, StepIdentityInput, StructuredOutputTier, SuspendedAppend, SuspensionState, TOOL_NAME_PATTERN, type TaskClass, TaskDigest, TaskSpec, TerminalPatch, TerminationAccount, TerminationAccountSnapshot, TerminationDeniedValue, TerminationDeniedWriter, TerminationInitValue, TerminationLimits, TerminationResource, ToolCallRequest, ToolChoice, type ToolContext, ToolContextSeed, ToolContract, type ToolDef, type ToolEvents, type ToolExecutor, ToolInit, type ToolRisk, ToolRuntime, type ToolSource, type ToolSourceSession, ToolsOption, TranscriptSerializationHook, type TranscriptStore, TriggerClass, TtlState, Usage, UsageLimits, UsageSlice, VerifiedRecommendation, WAIT_FOR_EVENTS_SCHEMA, WAIT_FOR_EVENTS_TOOL_NAME, WAKE_SUMMARY_RENDER_BUDGET_CHARS, WakeBudgetBlock, WakeDigest, WakeTrigger, WireError, Workflow, WorkflowCallOpts, type WorkflowEvent, type WorkflowEventBody, WorkflowRegistry, admissionReserveUsd, affordableOutputTokens, agentErrorFromWire, agentErrorToWire, agentResultWire, agentScope, applyClaimOps, applyStructuredOutputTier, approachSigCoarse, approachSigOf, archiveDeprecatedModelOps, assertFencedWrites, atCompactionThreshold, auditRun, auditRuns, buildAbandonFold, buildAdapterRegistry, buildCostReport, buildDeriverRegistry, buildOrchestratorTools, buildTerminationInitValue, buildToolContext, canRideLoopTurn, canonicalIsolationTag, canonicalizeLadder, canonicalizeSchema, capIssues, capsHashOf, checkFloors, checkpointRefFor, childCoveragePrefix, claimExpired, claimExpiry, claimIssues, claimOpIssues, classifyAgentError, classifyAttemptOutcome, collectDeclaredLadders, compactMessages, compilePermissionChain, compilePermissionPreset, compileVerifiedLayer, costReportFromJournal, countsAgainstLimit, createCanonicalIdMinter, createCtx, createEngine, createSandboxBridge, currentOnlyKeyRing, decodeCheckpoint, dedupeRepeatedClaims, defineWorkflow, deriveContentKey, deriverV1, deriverV2, digestOf, dispositionHook, emptyDigestBlocks, emptyToolset, encodeCheckpoint, entryUsageSlices, escalateTool, evaluatePermission, evaluateReuse, evidencePreservedValidator, executeWorkflow, exhaustionCodeOf, extractCandidate, failoverTriggerOf, fallbackTriggerOf, filterClaimsForRun, finalizeFires, foldTermination, formatRePrompt, formatScopePath, hasFencedWrites, hasMetaLookup, hashRunArgs, hashRunOutput, hashWorkflowBody, hashWorkflowSource, identityJcs, implementationAgentProfile, isEscalated, isSchemaPairSpec, isStandardSchemaSpec, isStrictCompatibleSchema, kMaxOf, knowledgeHash, ladderLengthOf, ladderRungChoice, lastRunSettle, latestProgressReport, lexShellCommand, liftRetainedParts, lineageWeightOf, makeOrchestratorWorkflow, maskSecrets, maskSecretsDeep, maskSecretsJson, matchArgvPattern, matchShellCommand, mcp, memoryQuotaLimiter, mergeQuotaDenial, mergeUsageLimits, metaMatchesFilter, minMatchesValidator, modelEpochOf, modelKnowledgeCard, modelSpecIdentity, needsSeparateExtract, nextFailover, nodeLinkKey, normalizeApproachTag, normalizeEntry, normalizeFallbacks, orchestrate, parallelScope, parseModelRef, parseScopePath, phiInitialOf, pipelineScope, planNodeScope, priceEntryUsage, priceUsdOf, profileCard, profileRegistrySnapshotHash, progressReportTool, projectHistory, projectIdentity, projectToJsonSchema, proposalStatement, providerOf, quotaActualTokens, quotaEstimateTokens, quotaRuleAdmission, quotaRuleMatches, readRunMeta, readTerminationInit, reconcileRunMeta, reduceCriticalPath, reduceInvocationTable, registryKeyRing, remeasureQueue, replayDisposition, repositoryResearchToolset, requiredFieldsValidator, requiredSectionsValidator, researchAgentProfile, resolveModelInvocation, resolvePricing, resolveToolset, retryClassOf, retryDelayMs, reviewAgentProfile, roleConfiguredInRouting, roundOneDisposition, runAgent, runProfile, sanitizeTerminalText, sanitizeTokenCount, sanitizeUsage, sanitizeUsageDelta, scanJournalCompatibility, schemaHash, schemaHashOfSpec, selectStructuredOutputTier, shouldCompact, snapshotUsage, spawnDepthOf, summarizeInstruction, summarizeOutput, terminationConfigDrift, tierWithinCaps, toApprovalDecision, toJournalValue, tool, toolContract, toolsetHash, ttlState, usageViolations, validateEditorialCommit, validateEngineQuotaConfig, validateEntryShape, validateEscalationLimits, validateEscalationReport, validateQuotaRules, validateRetryPolicy, validateSchemaSpec, validateTerminationLimits, validateUsageLimits, workflowScope, workflowSourceRef, wrapJournalStore, wrapTranscriptStore };