@rulvar/core 1.88.0 → 1.89.0

package/dist/index.d.ts

@@ -545,6 +545,15 @@ type ChatEvent = {
 } | {
   type: "error";
   error: WireError;
+  /**
+  * Provenance the adapter already holds when the stream dies (RV401,
+  * the eighth comparison experiment): a failed generation is still a
+  * billable provider call, and its response id is what joins the
+  * reconciliation record to the provider's own statement. Same
+  * namespaced shape as the finish event's; absent when the failure
+  * predates any provider response.
+  */
+  providerMetadata?: Record<string, unknown>;
 };
 /** Strictly 'adapterId:model', no query parameters. */
 type ModelRef = `${string}:${string}`;
@@ -962,13 +971,17 @@ type RunMeta = {
   * the args are not JCS-serializable (`argsProvided` still records
   * presence). The raw args are never journaled, but the digest is
   * sensitive-derived metadata, not an opaque token: it is deterministic
-  * and unsalted, so it reveals when two runs (in this store or another)
-  * were started with identical args, and low-entropy args (a boolean,
-  * an approval flag, a role, a short id) are recoverable by hashing
-  * candidate values. Protect meta, `inspect` output, and run listings
-  * with the same access control as the journal and transcripts; the
-  * digest confers no confidentiality on the args it binds. Stores must
-  * round-trip the field (the conformance kit checks).
+  * and unsalted BY DEFAULT, so it reveals when two runs (in this store
+  * or another) were started with identical args, and low-entropy args
+  * (a boolean, an approval flag, a role, a short id) are recoverable by
+  * hashing candidate values. `createEngine security.argsHashSalt`
+  * switches the digest to HMAC-SHA256 under a deployment salt (RV-217),
+  * which removes both leaks at the cost of binding every resuming
+  * engine to the same salt. Protect meta, `inspect` output, and run
+  * listings with the same access control as the journal and
+  * transcripts; the digest confers no confidentiality on the args it
+  * binds. Stores must round-trip the field (the conformance kit
+  * checks).
   */
   argsHash?: string;
   /**

package/dist/index.js

@@ -10205,6 +10205,7 @@ async function streamTurn(adapter, req, options) {
 					break;
 				case "error":
 					wireError = event.error;
+					if (event.providerMetadata !== void 0) providerMetadata = event.providerMetadata;
 					break;
 			}
 			if (sawFinish || wireError !== void 0) break;
@@ -11466,6 +11467,7 @@ async function runAgent(options) {
 						usage: accounted
 					};
 					if (typeof namespace?.responseId === "string") record.responseId = namespace.responseId;
+					else if (typeof namespace?.response?.id === "string") record.responseId = namespace.response.id;
 					if (outcome.usageApprox) record.usageApprox = true;
 					if (outcome.aborted !== void 0) record.aborted = outcome.aborted;
 					else if (outcome.wireError !== void 0) record.errorCode = outcome.wireError.code;
@@ -18065,7 +18067,6 @@ function makeOrchestratorWorkflow(goal, opts) {
 			const synthesized = await runtime.runInScope(synthesisState, () => ctx.agent(prompt, synthesisOpts));
 			synthesisSchemaRejectedExchanges = synthesized.schemaRejectedTerminalExchanges ?? 0;
 			synthesisSchemaRecoveredExchanges = synthesized.schemaRecoveredTerminalExchanges ?? 0;
-			if (validationTermination !== void 0) throw validationTermination;
 			if (configuredReserveUsd > 0) {
 				const reserveKey = "synthesis-reserve-lifecycle";
 				const prior = internals.replayer.snapshot().find((entry) => entry.kind === "decision" && entry.scope === callingState.scope && entry.key === reserveKey);
@@ -18106,6 +18107,7 @@ function makeOrchestratorWorkflow(goal, opts) {
 					data: { ...synthesisReserveLifecycle }
 				}, callingState.spanId);
 			}
+			if (validationTermination !== void 0) throw validationTermination;
 			if (synthesized.status === "ok") return synthesized.output;
 			if (validationSpec !== void 0) throw new FailRunError(`the synthesis invocation terminated with status '${synthesized.status}'` + (synthesized.errorMessage === void 0 ? "" : `: ${synthesized.errorMessage}`) + "; finish validators are configured, so the unvalidated draft cannot stand", { data: {
 				source: "orchestrator_synthesis",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rulvar/core",
-  "version": "1.88.0",
+  "version": "1.89.0",
   "description": "Rulvar core: L0 contracts, journal kernel, ctx primitives, agent runtime, model router, tool system, dynamic orchestrator, InMemory and JSONL stores, event stream.",
   "type": "module",
   "license": "Apache-2.0",