@rulvar/core 1.9.0 → 1.11.0

package/dist/index.d.ts

@@ -2643,8 +2643,16 @@ declare function countsAgainstLimit(kind: EscalationKind): boolean;
 */
 /** The committed no-progress detector N. */
 declare const DEFAULT_NO_PROGRESS_TURNS = 3;
-/** The consumer-visible dedicated class marker (FR-424). */
-type AbortClass = "no-progress";
+/**
+* The consumer-visible engine-decided abort classes (FR-424).
+* 'no-progress' is the detector below; 'output-truncated' is a
+* schema-less turn that ended at its output token allowance
+* (finish reason 'max-tokens') without visible output (v1.9.0
+* follow-up review). Both stamp memoizeOutcome on the terminal:
+* the work is paid, so every resume replays the abort instead of
+* re-paying the same bounded failure.
+*/
+type AbortClass = "no-progress" | "output-truncated";
 /**
 * Counts consecutive progress-free turns. A turn with at least one tool
 * call (or, later, an artifact delta) resets the streak; a turn with
@@ -5096,6 +5104,7 @@ declare class ExternalRegistry {
   private readonly waiters;
   private readonly keysByScope;
   private activity;
+  private closedFlag;
   private quiesceListener?;
   private quiesceScheduled;
   private readonly emitEvent?;
@@ -5118,6 +5127,22 @@ declare class ExternalRegistry {
   pending(): PendingExternal[];
   /** The synthesized resolveExternal key of an approval suspension. */
   static approvalKey(entryRef: number): string;
+  /**
+  * The resolveExternal key a journaled suspension answers to: externals
+  * carry the workflow-chosen key in the payload; approvals and Flavor B
+  * decisions synthesize `approval:<seq>`. Undefined for anything that
+  * is not a suspended entry.
+  */
+  static suspensionKeyOf(entry: JournalEntry): string | undefined;
+  /**
+  * Settling the run closes this execution segment permanently: every
+  * parked waiter is detached, so a resolution arriving after
+  * handle.result settled appends durably through the fold and wakes
+  * NOTHING; exactly one subsequent engine.resume owns the continuation.
+  * Idempotent. (Suspension ownership rule; v1.10 deep E2E review.)
+  */
+  close(): void;
+  get closed(): boolean;
   private scheduleQuiesceCheck;
   /**
   * ctx.awaitExternal: journal (or re-match) the suspended entry and park
@@ -5173,9 +5198,25 @@ declare class ExternalRegistry {
   /**
   * RunHandle.resolveExternal: the live path validates BEFORE append and
   * throws InvalidResolutionError without journaling; a winning attempt
-  * settles the waiting promise in place.
+  * settles the waiting promise in place. Without an open waiter the
+  * attempt goes through the journal fold instead: a repeated resolution
+  * is the documented journaled no-op ('already_resolved'), and once the
+  * segment settled the resolution appends durably WITHOUT waking the
+  * closed body (exactly one engine.resume owns the continuation).
   */
   resolveExternal(key: string, value: Json): Promise<ResolutionOutcome>;
+  /** The shared live-path payload validation (throws, journals nothing). */
+  private validatePayload;
+  /**
+  * Resolution without a live waiter, over the journal fold. Three cases:
+  * a key no suspension ever carried throws InvalidResolutionError; a key
+  * whose suspensions are all closed submits through the arbiter and
+  * returns the journaled no-op ('already_resolved' or
+  * 'target_abandoned', durability.md contract); an OPEN suspension is
+  * resolvable this way only once the segment settled (closed registry),
+  * with the exact live-path validation and no wake.
+  */
+  private resolveDetached;
 }
 //#endregion
 //#region src/engine/ctx.d.ts
@@ -5333,6 +5374,15 @@ declare class AgentCallError extends Error implements AgentError {
   readonly entryRef?: number;
   constructor(message: string, result: AgentResult<unknown>, scope: string, entryRef?: number);
 }
+/**
+* Projects a settled AgentResult's error to its wire form, carrying the
+* engine-decided abort class in data. AgentError itself has no data
+* field, so without this every projection past the terminal entry (the
+* run-level outcome.error, thrown AgentCallError wires, dropped items)
+* would keep only the message text and lose the typed class (v1.9.0
+* follow-up review).
+*/
+declare function agentResultWire(result: AgentResult<unknown>, fallbackMessage: string): WireError;
 /** Pipeline results plus the dropped evidence, returned by onItemError: 'collect'. */
 interface PipelineCollected<T> {
   results: T[];
@@ -5946,6 +5996,12 @@ declare class InMemoryTranscriptStore implements TranscriptStore {
 //#region src/stores/jsonl.d.ts
 declare class JsonlFileStore implements JournalStore {
   private readonly dir;
+  /**
+  * The stored tail seq per run, lazily initialized from the file on the
+  * first append this instance performs (obligation A5). Per instance by
+  * design: cross-process writers are the lease seam's job.
+  */
+  private readonly lastSeq;
   constructor(options: {
     dir: string;
   });
@@ -6333,4 +6389,4 @@ interface SandboxBridge {
 }
 declare function createSandboxBridge(ctx: Ctx<never>, options: SandboxBridgeOptions): SandboxBridge;
 //#endregion
-export { AWAIT_SCHEMA, AbandonAttempt, AbandonFold, AbandonPayload, AbandonedSpendView, AbortClass, type AdaptiveEvents, AdmissionController, AdmissionDecision, AdmissionRejectedError, AdmissionStatsBefore, AdmitLineage, AdmitRejectReason, AdmitSpec, AdmitVerdict, AgentCallError, AgentError, type AgentEvents, AgentIdentityInput, AgentOpts, AgentProfile, AgentProfilePermissions, AgentResult, AgentResultMeta, AgentStatus, ApproachSignatureInputs, ApprovalDecision, ApprovalIdentityInput, Artifact, AttemptOutcomeClass, BUDGET_ABORT_REASON, BriefOpts, BudgetAccountView, BudgetDefaults, BudgetExhaustedError, BudgetExhaustionDiagnostics, BudgetHooks, BudgetReserve, type Bytes, CANCEL_AGENT_SCHEMA, CHECKPOINT_FORMAT_V1, CLAIM_STATEMENT_MAX_CHARS, CLAIM_TTL_DAYS, COMPACTION_SUMMARY_PREFIX, CURRENT_HASH_VERSION, CacheHint, CacheTtl, CanUseTool, CanonicalId, CanonicalIdentity, CanonicalLadderSpec, CanonicalModelSpec, ChatEvent, ChatRequest, CheckpointState, ChildIdentityInput, type ClaimClass, type ClaimOp, type ClaimStatus, ClaimValidationOptions, CollectOpts, CollectedTurn, CompactionConfig, CompiledPermissionChain, CompiledWorkflow, ConfigError, type CoreEvents, CostAttribution, CostAttributionFacts, CostReport, CreateEngineOptions, Ctx, DEFAULT_CHILD_BUDGET_FRACTION, DEFAULT_COMPACTION_THRESHOLD, DEFAULT_ESCALATION_LIMITS, DEFAULT_FLAT_RESERVE_USD, DEFAULT_MAX_CHILDREN_PER_NODE, DEFAULT_MAX_DEPTH, DEFAULT_MAX_OSCILLATIONS_PER_KEY, DEFAULT_MAX_PINNED_WORKTREES, DEFAULT_MAX_REVISIONS_PER_RUN, DEFAULT_MAX_TOTAL_SPAWNS, DEFAULT_MAX_TURNS, DEFAULT_MODEL_RETRY_ATTEMPTS, DEFAULT_NO_PROGRESS_TURNS, DEFAULT_PER_RUN_CONCURRENCY, DEFAULT_RETRY_POLICY, DEFAULT_STREAM_IDLE_TIMEOUT_MS, DebitResult, DeclaredLadder, DedupIndex, DedupNote, DerivedKey, DeriverRegistry, DispositionRule, DispositionTable, DonorCandidate, DonorRef, DroppedItem, EMIT_RESULT_TOOL, EMPTY_SCHEMA_HASH, EMPTY_TOOLSET_HASH, ESCALATE_TOOL_NAME, ESCALATION_REPORT_SCHEMA, ESCALATION_REQUEST_SCHEMA, EffectiveUsageLimits, Effort, Engine, EngineDefaults, EntryKind, EntryRef, EntryStatus, ErrorClass, ErrorCode, ErrorPolicy, EscalatedResult, EscalationDecision, EscalationDigest, EscalationKind, EscalationLimits, EscalationOptions, EscalationReport, EscalationRequest, EventBus, type EvidenceRef, ExtensionAppendInput, ExtensionDispatchSpec, ExternalIdentityInput, ExternalRegistry, ExtractNecessityInput, FINISH_SCHEMA, FINISH_TOOL_NAME, FailoverTarget, FailoverTrigger, FallbackField, FallbackTrigger, FileModelKnowledgeStore, FileModelKnowledgeStoreOptions, FileTranscriptStore, FinishInfo, Gate, GateAudit, type GateRecord, GitWorktreeProvider, GitWorktreeProviderOptions, GraftBoot, HashVersion, HookVerdict, INBOX_PROPOSAL_TTL_DAYS, IdentityInput, InMemoryStore, InMemoryTranscriptStore, InProcessRunner, InvalidResolutionError, InvocationRole, type IsolationProvider, type IsolationSpec, Issue$1 as Issue, JournalCompatSubCode, JournalCompatibilityError, JournalEntry, JournalMatcher, JournalMissError, JournalOperation, JournalOrderViolation, JournalSerializationHook, type JournalStore, type Json, JsonSchema, JsonlFileStore, KB_ACTIVE_CLAIMS_CAP, KB_CARD_RENDER_BUDGET_CHARS, type KbProposal, type KbProposalTrigger, KeyDeriver, KeyRing, KeyedLimiter, KnowledgeCasError, type KnowledgeSnapshot, LARGE_VALUE_WARN_BYTES, LEGACY_LTID_PREFIX, LEGACY_SIGNATURE_INPUTS, LINEAGE_SIG_VERSION, LadderSpec, type LeasableStore, type Lease, LeaseHeldError, Ledger, LineageCounters, LineageIndex, LineageRef, LineageRelation, LineageStats, LogicalTaskId, MASKED_SECRET, MAX_DEPTH_CEILING, MatchResult, McpConfig, MechanicalGateProfile, MechanicalGateVerdict, type ModelCaps, ModelChoice, type ModelClaim, ModelEpochInputs, type ModelKnowledgeHandle, type ModelKnowledgeStore, ModelListConstraint, ModelRef, ModelRetry, ModelSpec, Msg, NoProgressDetector, NodeId, NodeLinkValue, NonSerializableValueError, ORCHESTRATE_WORKFLOW_NAME, OnEscalation, OperationDisposition, OrchestrateOptions, OrchestratorBudgetSpec, OrchestratorCapConfigError, OrchestratorExtension, OrchestratorExtensionIO, OrchestratorRuntime, Out, PARALLEL_AGENTS_SCHEMA, ParallelSiteCounter, Part, PendingExternal, PendingToolTurn, PermissionConfig, PermissionGate, PermissionHook, PermissionPreset, PermissionRule, PermissionVerdict, PhaseTarget, PipelineCollected, PipelineOpts, PlanInvariantError, PriceTable, PricedUsage, type Pricing, type PricingTier, type ProviderAdapter, QualityFloors, ROLE_EFFORT_DEFAULTS, ROOT_ACCOUNT, ROOT_SCOPE, RUN_PROFILES, RandIdentityInput, RandPayload, RefEntryAppender, RefEntryClassification, RefusalInfo, ReplayDisposition, ReplayMode, ReplayPlanHashMismatch, Replayer, ResolutionArbiter, ResolutionAttempt, ResolutionBy, ResolutionFold, ResolutionLayer, ResolutionOutcome, ResolutionPayload, ResolvedInvocation, ResolvedToolset, ResumeHandle, ResumeOptions, ResumePreview, ResumeReport, RetryClass, RetryPolicy, ReuseConfig, RiskRuleValue, Role, RulvarError, RulvarErrorCode, RunAgentOptions, RunBudget, RunEventSink, type RunFilter, RunHandle, RunInternals, type RunMeta, RunOptions, RunOutcome, RunProfile, RunStatus, RuntimeEventSink, SPAWN_AGENT_SCHEMA, SandboxBridge, SandboxBridgeOptions, SandboxError, SandboxHostToWorker, SandboxMethod, SandboxWorkerToHost, SchemaPair, SchemaSpec, SchemaValidationResult, ScopeSegment, ScriptRejected, ScriptRunner, ScrubNote, Semaphore, SerializationHook, Settled, ShellPatternRules, ShellSegment, ShellVerdict, SinglePhaseAppend, SpanMinter, SpanRegistry, SpawnAdmissionValue, SpawnAgentParams, SpawnKey, SpawnLineage, SpawnLineageOpt, SpawnOrigin, SpawnRecord, Spend, Stage, type StandardJSONSchemaV1, type StandardSchemaV1, StepIdentityInput, StructuredOutputTier, SuspendedAppend, SuspensionState, TOOL_NAME_PATTERN, type TaskClass, TaskDigest, TaskSpec, TerminalPatch, TerminationAccount, TerminationAccountSnapshot, TerminationDeniedValue, TerminationDeniedWriter, TerminationInitValue, TerminationLimits, TerminationResource, ToolCallRequest, ToolChoice, type ToolContext, ToolContextSeed, ToolContract, type ToolDef, type ToolEvents, type ToolExecutor, ToolInit, type ToolRisk, ToolRuntime, type ToolSource, type ToolSourceSession, ToolsOption, TranscriptSerializationHook, type TranscriptStore, TriggerClass, TtlState, Usage, UsageLimits, UsageSlice, VerifiedRecommendation, WAIT_FOR_EVENTS_SCHEMA, WAIT_FOR_EVENTS_TOOL_NAME, WAKE_SUMMARY_RENDER_BUDGET_CHARS, WakeBudgetBlock, WakeDigest, WakeTrigger, WireError, Workflow, WorkflowCallOpts, type WorkflowEvent, type WorkflowEventBody, WorkflowRegistry, admissionReserveUsd, affordableOutputTokens, agentErrorFromWire, agentErrorToWire, agentScope, applyClaimOps, applyStructuredOutputTier, approachSigCoarse, approachSigOf, archiveDeprecatedModelOps, atCompactionThreshold, buildAbandonFold, buildAdapterRegistry, buildCostReport, buildDeriverRegistry, buildOrchestratorTools, buildTerminationInitValue, buildToolContext, canRideLoopTurn, canonicalIsolationTag, canonicalizeLadder, canonicalizeSchema, capIssues, capsHashOf, checkFloors, checkpointRefFor, childCoveragePrefix, claimExpired, claimExpiry, claimIssues, claimOpIssues, classifyAgentError, classifyAttemptOutcome, collectDeclaredLadders, compactMessages, compilePermissionChain, compilePermissionPreset, compileVerifiedLayer, costReportFromJournal, countsAgainstLimit, createCanonicalIdMinter, createCtx, createEngine, createSandboxBridge, currentOnlyKeyRing, decodeCheckpoint, defineWorkflow, deriveContentKey, deriverV1, deriverV2, digestOf, dispositionHook, emptyDigestBlocks, emptyToolset, encodeCheckpoint, entryUsageSlices, escalateTool, evaluatePermission, evaluateReuse, executeWorkflow, exhaustionCodeOf, extractCandidate, failoverTriggerOf, fallbackTriggerOf, filterClaimsForRun, finalizeFires, foldTermination, formatRePrompt, formatScopePath, hashWorkflowBody, hashWorkflowSource, identityJcs, isEscalated, isSchemaPairSpec, isStandardSchemaSpec, isStrictCompatibleSchema, kMaxOf, knowledgeHash, ladderLengthOf, ladderRungChoice, lexShellCommand, liftRetainedParts, lineageWeightOf, makeOrchestratorWorkflow, maskSecrets, maskSecretsDeep, maskSecretsJson, matchArgvPattern, matchShellCommand, mcp, mergeUsageLimits, modelEpochOf, modelKnowledgeCard, modelSpecIdentity, needsSeparateExtract, nextFailover, nodeLinkKey, normalizeApproachTag, normalizeEntry, normalizeFallbacks, orchestrate, parallelScope, parseModelRef, parseScopePath, phiInitialOf, pipelineScope, planNodeScope, priceEntryUsage, priceUsdOf, profileCard, profileRegistrySnapshotHash, projectHistory, projectIdentity, projectToJsonSchema, proposalStatement, providerOf, readTerminationInit, registryKeyRing, remeasureQueue, replayDisposition, resolveModelInvocation, resolvePricing, resolveToolset, retryClassOf, retryDelayMs, roleConfiguredInRouting, roundOneDisposition, runAgent, runProfile, scanJournalCompatibility, schemaHash, schemaHashOfSpec, selectStructuredOutputTier, shouldCompact, spawnDepthOf, summarizeInstruction, summarizeOutput, terminationConfigDrift, tierWithinCaps, toApprovalDecision, toJournalValue, tool, toolContract, toolsetHash, ttlState, validateEditorialCommit, validateEntryShape, validateEscalationLimits, validateEscalationReport, validateSchemaSpec, validateTerminationLimits, workflowScope, workflowSourceRef, wrapJournalStore, wrapTranscriptStore };
+export { AWAIT_SCHEMA, AbandonAttempt, AbandonFold, AbandonPayload, AbandonedSpendView, AbortClass, type AdaptiveEvents, AdmissionController, AdmissionDecision, AdmissionRejectedError, AdmissionStatsBefore, AdmitLineage, AdmitRejectReason, AdmitSpec, AdmitVerdict, AgentCallError, AgentError, type AgentEvents, AgentIdentityInput, AgentOpts, AgentProfile, AgentProfilePermissions, AgentResult, AgentResultMeta, AgentStatus, ApproachSignatureInputs, ApprovalDecision, ApprovalIdentityInput, Artifact, AttemptOutcomeClass, BUDGET_ABORT_REASON, BriefOpts, BudgetAccountView, BudgetDefaults, BudgetExhaustedError, BudgetExhaustionDiagnostics, BudgetHooks, BudgetReserve, type Bytes, CANCEL_AGENT_SCHEMA, CHECKPOINT_FORMAT_V1, CLAIM_STATEMENT_MAX_CHARS, CLAIM_TTL_DAYS, COMPACTION_SUMMARY_PREFIX, CURRENT_HASH_VERSION, CacheHint, CacheTtl, CanUseTool, CanonicalId, CanonicalIdentity, CanonicalLadderSpec, CanonicalModelSpec, ChatEvent, ChatRequest, CheckpointState, ChildIdentityInput, type ClaimClass, type ClaimOp, type ClaimStatus, ClaimValidationOptions, CollectOpts, CollectedTurn, CompactionConfig, CompiledPermissionChain, CompiledWorkflow, ConfigError, type CoreEvents, CostAttribution, CostAttributionFacts, CostReport, CreateEngineOptions, Ctx, DEFAULT_CHILD_BUDGET_FRACTION, DEFAULT_COMPACTION_THRESHOLD, DEFAULT_ESCALATION_LIMITS, DEFAULT_FLAT_RESERVE_USD, DEFAULT_MAX_CHILDREN_PER_NODE, DEFAULT_MAX_DEPTH, DEFAULT_MAX_OSCILLATIONS_PER_KEY, DEFAULT_MAX_PINNED_WORKTREES, DEFAULT_MAX_REVISIONS_PER_RUN, DEFAULT_MAX_TOTAL_SPAWNS, DEFAULT_MAX_TURNS, DEFAULT_MODEL_RETRY_ATTEMPTS, DEFAULT_NO_PROGRESS_TURNS, DEFAULT_PER_RUN_CONCURRENCY, DEFAULT_RETRY_POLICY, DEFAULT_STREAM_IDLE_TIMEOUT_MS, DebitResult, DeclaredLadder, DedupIndex, DedupNote, DerivedKey, DeriverRegistry, DispositionRule, DispositionTable, DonorCandidate, DonorRef, DroppedItem, EMIT_RESULT_TOOL, EMPTY_SCHEMA_HASH, EMPTY_TOOLSET_HASH, ESCALATE_TOOL_NAME, ESCALATION_REPORT_SCHEMA, ESCALATION_REQUEST_SCHEMA, EffectiveUsageLimits, Effort, Engine, EngineDefaults, EntryKind, EntryRef, EntryStatus, ErrorClass, ErrorCode, ErrorPolicy, EscalatedResult, EscalationDecision, EscalationDigest, EscalationKind, EscalationLimits, EscalationOptions, EscalationReport, EscalationRequest, EventBus, type EvidenceRef, ExtensionAppendInput, ExtensionDispatchSpec, ExternalIdentityInput, ExternalRegistry, ExtractNecessityInput, FINISH_SCHEMA, FINISH_TOOL_NAME, FailoverTarget, FailoverTrigger, FallbackField, FallbackTrigger, FileModelKnowledgeStore, FileModelKnowledgeStoreOptions, FileTranscriptStore, FinishInfo, Gate, GateAudit, type GateRecord, GitWorktreeProvider, GitWorktreeProviderOptions, GraftBoot, HashVersion, HookVerdict, INBOX_PROPOSAL_TTL_DAYS, IdentityInput, InMemoryStore, InMemoryTranscriptStore, InProcessRunner, InvalidResolutionError, InvocationRole, type IsolationProvider, type IsolationSpec, Issue$1 as Issue, JournalCompatSubCode, JournalCompatibilityError, JournalEntry, JournalMatcher, JournalMissError, JournalOperation, JournalOrderViolation, JournalSerializationHook, type JournalStore, type Json, JsonSchema, JsonlFileStore, KB_ACTIVE_CLAIMS_CAP, KB_CARD_RENDER_BUDGET_CHARS, type KbProposal, type KbProposalTrigger, KeyDeriver, KeyRing, KeyedLimiter, KnowledgeCasError, type KnowledgeSnapshot, LARGE_VALUE_WARN_BYTES, LEGACY_LTID_PREFIX, LEGACY_SIGNATURE_INPUTS, LINEAGE_SIG_VERSION, LadderSpec, type LeasableStore, type Lease, LeaseHeldError, Ledger, LineageCounters, LineageIndex, LineageRef, LineageRelation, LineageStats, LogicalTaskId, MASKED_SECRET, MAX_DEPTH_CEILING, MatchResult, McpConfig, MechanicalGateProfile, MechanicalGateVerdict, type ModelCaps, ModelChoice, type ModelClaim, ModelEpochInputs, type ModelKnowledgeHandle, type ModelKnowledgeStore, ModelListConstraint, ModelRef, ModelRetry, ModelSpec, Msg, NoProgressDetector, NodeId, NodeLinkValue, NonSerializableValueError, ORCHESTRATE_WORKFLOW_NAME, OnEscalation, OperationDisposition, OrchestrateOptions, OrchestratorBudgetSpec, OrchestratorCapConfigError, OrchestratorExtension, OrchestratorExtensionIO, OrchestratorRuntime, Out, PARALLEL_AGENTS_SCHEMA, ParallelSiteCounter, Part, PendingExternal, PendingToolTurn, PermissionConfig, PermissionGate, PermissionHook, PermissionPreset, PermissionRule, PermissionVerdict, PhaseTarget, PipelineCollected, PipelineOpts, PlanInvariantError, PriceTable, PricedUsage, type Pricing, type PricingTier, type ProviderAdapter, QualityFloors, ROLE_EFFORT_DEFAULTS, ROOT_ACCOUNT, ROOT_SCOPE, RUN_PROFILES, RandIdentityInput, RandPayload, RefEntryAppender, RefEntryClassification, RefusalInfo, ReplayDisposition, ReplayMode, ReplayPlanHashMismatch, Replayer, ResolutionArbiter, ResolutionAttempt, ResolutionBy, ResolutionFold, ResolutionLayer, ResolutionOutcome, ResolutionPayload, ResolvedInvocation, ResolvedToolset, ResumeHandle, ResumeOptions, ResumePreview, ResumeReport, RetryClass, RetryPolicy, ReuseConfig, RiskRuleValue, Role, RulvarError, RulvarErrorCode, RunAgentOptions, RunBudget, RunEventSink, type RunFilter, RunHandle, RunInternals, type RunMeta, RunOptions, RunOutcome, RunProfile, RunStatus, RuntimeEventSink, SPAWN_AGENT_SCHEMA, SandboxBridge, SandboxBridgeOptions, SandboxError, SandboxHostToWorker, SandboxMethod, SandboxWorkerToHost, SchemaPair, SchemaSpec, SchemaValidationResult, ScopeSegment, ScriptRejected, ScriptRunner, ScrubNote, Semaphore, SerializationHook, Settled, ShellPatternRules, ShellSegment, ShellVerdict, SinglePhaseAppend, SpanMinter, SpanRegistry, SpawnAdmissionValue, SpawnAgentParams, SpawnKey, SpawnLineage, SpawnLineageOpt, SpawnOrigin, SpawnRecord, Spend, Stage, type StandardJSONSchemaV1, type StandardSchemaV1, StepIdentityInput, StructuredOutputTier, SuspendedAppend, SuspensionState, TOOL_NAME_PATTERN, type TaskClass, TaskDigest, TaskSpec, TerminalPatch, TerminationAccount, TerminationAccountSnapshot, TerminationDeniedValue, TerminationDeniedWriter, TerminationInitValue, TerminationLimits, TerminationResource, ToolCallRequest, ToolChoice, type ToolContext, ToolContextSeed, ToolContract, type ToolDef, type ToolEvents, type ToolExecutor, ToolInit, type ToolRisk, ToolRuntime, type ToolSource, type ToolSourceSession, ToolsOption, TranscriptSerializationHook, type TranscriptStore, TriggerClass, TtlState, Usage, UsageLimits, UsageSlice, VerifiedRecommendation, WAIT_FOR_EVENTS_SCHEMA, WAIT_FOR_EVENTS_TOOL_NAME, WAKE_SUMMARY_RENDER_BUDGET_CHARS, WakeBudgetBlock, WakeDigest, WakeTrigger, WireError, Workflow, WorkflowCallOpts, type WorkflowEvent, type WorkflowEventBody, WorkflowRegistry, admissionReserveUsd, affordableOutputTokens, agentErrorFromWire, agentErrorToWire, agentResultWire, agentScope, applyClaimOps, applyStructuredOutputTier, approachSigCoarse, approachSigOf, archiveDeprecatedModelOps, atCompactionThreshold, buildAbandonFold, buildAdapterRegistry, buildCostReport, buildDeriverRegistry, buildOrchestratorTools, buildTerminationInitValue, buildToolContext, canRideLoopTurn, canonicalIsolationTag, canonicalizeLadder, canonicalizeSchema, capIssues, capsHashOf, checkFloors, checkpointRefFor, childCoveragePrefix, claimExpired, claimExpiry, claimIssues, claimOpIssues, classifyAgentError, classifyAttemptOutcome, collectDeclaredLadders, compactMessages, compilePermissionChain, compilePermissionPreset, compileVerifiedLayer, costReportFromJournal, countsAgainstLimit, createCanonicalIdMinter, createCtx, createEngine, createSandboxBridge, currentOnlyKeyRing, decodeCheckpoint, defineWorkflow, deriveContentKey, deriverV1, deriverV2, digestOf, dispositionHook, emptyDigestBlocks, emptyToolset, encodeCheckpoint, entryUsageSlices, escalateTool, evaluatePermission, evaluateReuse, executeWorkflow, exhaustionCodeOf, extractCandidate, failoverTriggerOf, fallbackTriggerOf, filterClaimsForRun, finalizeFires, foldTermination, formatRePrompt, formatScopePath, hashWorkflowBody, hashWorkflowSource, identityJcs, isEscalated, isSchemaPairSpec, isStandardSchemaSpec, isStrictCompatibleSchema, kMaxOf, knowledgeHash, ladderLengthOf, ladderRungChoice, lexShellCommand, liftRetainedParts, lineageWeightOf, makeOrchestratorWorkflow, maskSecrets, maskSecretsDeep, maskSecretsJson, matchArgvPattern, matchShellCommand, mcp, mergeUsageLimits, modelEpochOf, modelKnowledgeCard, modelSpecIdentity, needsSeparateExtract, nextFailover, nodeLinkKey, normalizeApproachTag, normalizeEntry, normalizeFallbacks, orchestrate, parallelScope, parseModelRef, parseScopePath, phiInitialOf, pipelineScope, planNodeScope, priceEntryUsage, priceUsdOf, profileCard, profileRegistrySnapshotHash, projectHistory, projectIdentity, projectToJsonSchema, proposalStatement, providerOf, readTerminationInit, registryKeyRing, remeasureQueue, replayDisposition, resolveModelInvocation, resolvePricing, resolveToolset, retryClassOf, retryDelayMs, roleConfiguredInRouting, roundOneDisposition, runAgent, runProfile, scanJournalCompatibility, schemaHash, schemaHashOfSpec, selectStructuredOutputTier, shouldCompact, spawnDepthOf, summarizeInstruction, summarizeOutput, terminationConfigDrift, tierWithinCaps, toApprovalDecision, toJournalValue, tool, toolContract, toolsetHash, ttlState, validateEditorialCommit, validateEntryShape, validateEscalationLimits, validateEscalationReport, validateSchemaSpec, validateTerminationLimits, workflowScope, workflowSourceRef, wrapJournalStore, wrapTranscriptStore };

package/dist/index.js

@@ -5626,6 +5626,7 @@ var ExternalRegistry = class ExternalRegistry {
 	waiters = /* @__PURE__ */ new Map();
 	keysByScope = /* @__PURE__ */ new Set();
 	activity = 0;
+	closedFlag = false;
 	quiesceListener;
 	quiesceScheduled = false;
 	emitEvent;
@@ -5697,6 +5698,34 @@ var ExternalRegistry = class ExternalRegistry {
 	static approvalKey(entryRef) {
 		return `approval:${entryRef}`;
 	}
+	/**
+	* The resolveExternal key a journaled suspension answers to: externals
+	* carry the workflow-chosen key in the payload; approvals and Flavor B
+	* decisions synthesize `approval:<seq>`. Undefined for anything that
+	* is not a suspended entry.
+	*/
+	static suspensionKeyOf(entry) {
+		if (entry.status !== "suspended") return;
+		if (entry.kind === "external") {
+			const key = entry.value?.key;
+			return typeof key === "string" ? key : void 0;
+		}
+		if (entry.kind === "approval") return ExternalRegistry.approvalKey(entry.seq);
+	}
+	/**
+	* Settling the run closes this execution segment permanently: every
+	* parked waiter is detached, so a resolution arriving after
+	* handle.result settled appends durably through the fold and wakes
+	* NOTHING; exactly one subsequent engine.resume owns the continuation.
+	* Idempotent. (Suspension ownership rule; v1.10 deep E2E review.)
+	*/
+	close() {
+		this.closedFlag = true;
+		this.waiters.clear();
+	}
+	get closed() {
+		return this.closedFlag;
+	}
 	scheduleQuiesceCheck() {
 		if (this.quiesceScheduled) return;
 		this.quiesceScheduled = true;
@@ -5885,7 +5914,7 @@ var ExternalRegistry = class ExternalRegistry {
 			const waiter = this.waiters.get(entryRef);
 			if (waiter !== void 0) {
 				this.waiters.delete(entryRef);
-				waiter.resolve(attempt.value);
+				if (!this.closedFlag) waiter.resolve(attempt.value);
 			}
 		}
 		return outcome;
@@ -5893,37 +5922,76 @@ var ExternalRegistry = class ExternalRegistry {
 	/**
 	* RunHandle.resolveExternal: the live path validates BEFORE append and
 	* throws InvalidResolutionError without journaling; a winning attempt
-	* settles the waiting promise in place.
+	* settles the waiting promise in place. Without an open waiter the
+	* attempt goes through the journal fold instead: a repeated resolution
+	* is the documented journaled no-op ('already_resolved'), and once the
+	* segment settled the resolution appends durably WITHOUT waking the
+	* closed body (exactly one engine.resume owns the continuation).
 	*/
 	async resolveExternal(key, value) {
 		const waiter = [...this.waiters.values()].find((candidate) => candidate.key === key);
-		if (waiter === void 0) throw new InvalidResolutionError(`no open awaitExternal suspension with key '${key}' in this run`);
-		if (waiter.kind === "approval") {
+		if (waiter === void 0) return this.resolveDetached(key, value);
+		await this.validatePayload(waiter.kind, key, value, waiter.schemaSpec);
+		const outcome = await this.replayer.resolveSuspended(waiter.entryRef, {
+			by: "external",
+			value
+		});
+		this.emitResolutionOutcome(waiter.entryRef, "external", outcome);
+		if (outcome.applied) {
+			this.waiters.delete(waiter.entryRef);
+			if (!this.closedFlag) waiter.resolve(value);
+		}
+		return outcome;
+	}
+	/** The shared live-path payload validation (throws, journals nothing). */
+	async validatePayload(kind, key, value, schemaSpec) {
+		if (kind === "approval") {
 			const decision = value?.decision;
 			if (decision !== "allow" && decision !== "deny") throw new InvalidResolutionError(`approval '${key}' resolves with { decision: 'allow' | 'deny', reason? }`);
 		}
-		if (waiter.kind === "decision") {
-			const kind = value?.kind;
-			if (kind !== "retry" && kind !== "decompose" && kind !== "cancel" && kind !== "accept") throw new InvalidResolutionError(`escalation '${key}' resolves with an EscalationDecision ({ kind: 'retry' | 'decompose' | 'cancel' | 'accept', ... })`);
+		if (kind === "decision") {
+			const decisionKind = value?.kind;
+			if (decisionKind !== "retry" && decisionKind !== "decompose" && decisionKind !== "cancel" && decisionKind !== "accept") throw new InvalidResolutionError(`escalation '${key}' resolves with an EscalationDecision ({ kind: 'retry' | 'decompose' | 'cancel' | 'accept', ... })`);
 		}
-		if (waiter.schemaSpec !== void 0) {
-			const validation = await validateSchemaSpec(waiter.schemaSpec, value);
+		if (schemaSpec !== void 0) {
+			const validation = await validateSchemaSpec(schemaSpec, value);
 			if (!validation.valid) throw new InvalidResolutionError(`resolution for '${key}' does not validate against the pinned schema: ` + validation.issues.map((issue) => issue.message).join("; "), { data: { issues: validation.issues.map((issue) => issue.message) } });
 		}
-		const outcome = await this.replayer.resolveSuspended(waiter.entryRef, {
+	}
+	/**
+	* Resolution without a live waiter, over the journal fold. Three cases:
+	* a key no suspension ever carried throws InvalidResolutionError; a key
+	* whose suspensions are all closed submits through the arbiter and
+	* returns the journaled no-op ('already_resolved' or
+	* 'target_abandoned', durability.md contract); an OPEN suspension is
+	* resolvable this way only once the segment settled (closed registry),
+	* with the exact live-path validation and no wake.
+	*/
+	async resolveDetached(key, value) {
+		const candidates = this.replayer.snapshot().filter((entry) => ExternalRegistry.suspensionKeyOf(entry) === key);
+		const open = candidates.find((entry) => this.replayer.suspensionState(entry.seq).state === "suspended");
+		if (open === void 0 && candidates.length === 0) throw new InvalidResolutionError(`no open awaitExternal suspension with key '${key}' in this run`);
+		if (open !== void 0 && !this.closedFlag) throw new InvalidResolutionError(`no open awaitExternal suspension with key '${key}' in this run`);
+		const target = open ?? candidates[candidates.length - 1];
+		await this.validatePayload(target.kind === "approval" ? target.deadlineAt === void 0 ? "approval" : "decision" : "external", key, value, target.value?.schema);
+		const outcome = await this.replayer.resolveSuspended(target.seq, {
 			by: "external",
 			value
 		});
-		this.emitResolutionOutcome(waiter.entryRef, "external", outcome);
-		if (outcome.applied) {
-			this.waiters.delete(waiter.entryRef);
-			waiter.resolve(value);
-		}
+		this.emitResolutionOutcome(target.seq, "external", outcome);
 		return outcome;
 	}
 };
 //#endregion
 //#region src/stores/inmemory.ts
+/**
+* InMemoryStore (M1-T04): the default journal store. Process-local, so
+* nothing survives a process exit and cross-process resume is
+* impossible (same-process resume of a kept instance works); the store
+* warns loudly exactly once per instance unless constructed with
+* `quiet: true` (the deliberate choice of a test tier).
+* An in-memory TranscriptStore ships alongside for the same default.
+*/
 function deepCopy(value) {
 	return JSON.parse(JSON.stringify(value));
 }
@@ -5937,6 +6005,8 @@ var InMemoryStore = class {
 	append(runId, e) {
 		this.warnOnce();
 		const entries = this.runs.get(runId) ?? [];
+		const tail = entries[entries.length - 1];
+		if (tail !== void 0 && Number.isFinite(e.seq) && Number.isFinite(tail.seq) && e.seq <= tail.seq) return Promise.reject(new JournalOrderViolation(`InMemoryStore: append of seq ${e.seq} to run '${runId}' is not after the stored tail seq ${tail.seq}; a concurrent writer raced this journal from a stale tail`));
 		entries.push(deepCopy(e));
 		this.runs.set(runId, entries);
 		return Promise.resolve();
@@ -6023,6 +6093,12 @@ function safeName(runId) {
 }
 var JsonlFileStore = class {
 	dir;
+	/**
+	* The stored tail seq per run, lazily initialized from the file on the
+	* first append this instance performs (obligation A5). Per instance by
+	* design: cross-process writers are the lease seam's job.
+	*/
+	lastSeq = /* @__PURE__ */ new Map();
 	constructor(options) {
 		this.dir = options.dir;
 		mkdirSync(this.dir, { recursive: true });
@@ -6034,7 +6110,16 @@ var JsonlFileStore = class {
 		return join(this.dir, `${safeName(runId)}${META_SUFFIX}`);
 	}
 	async append(runId, e) {
+		let tail = this.lastSeq.get(runId);
+		if (tail === void 0) {
+			const existing = await this.load(runId);
+			const last = existing[existing.length - 1];
+			tail = last !== void 0 && Number.isFinite(last.seq) ? last.seq : Number.NEGATIVE_INFINITY;
+			this.lastSeq.set(runId, tail);
+		}
+		if (Number.isFinite(e.seq) && e.seq <= tail) throw new JournalOrderViolation(`JsonlFileStore: append of seq ${e.seq} to run '${runId}' is not after the stored tail seq ${tail}; a concurrent writer raced this journal from a stale tail`);
 		appendFileSync(this.journalPath(runId), `${JSON.stringify(e)}\n`, "utf8");
+		if (Number.isFinite(e.seq)) this.lastSeq.set(runId, e.seq);
 	}
 	async load(runId) {
 		let raw;
@@ -6091,6 +6176,7 @@ var JsonlFileStore = class {
 	async delete(runId) {
 		rmSync(this.journalPath(runId), { force: true });
 		rmSync(this.metaPath(runId), { force: true });
+		this.lastSeq.delete(runId);
 	}
 };
 const TRANSCRIPT_SUFFIX = ".bin";
@@ -7806,6 +7892,16 @@ function applyOutputBudget(req, target, budget) {
 	return req;
 }
 /**
+* The output-truncation abort message (v1.9.0 follow-up review). The
+* constraint is named neutrally as the turn's output token allowance:
+* the effective request cap can come from limits.maxOutputTokensPerTurn,
+* the budget clamp above, or the adapter's own default, and the provider
+* can also cut at its model maximum with no request cap at all.
+*/
+function outputTruncatedMessage(invocation) {
+	return `the ${invocation} ended at its output token allowance (finish reason 'max-tokens') before producing visible output; raise limits.maxOutputTokensPerTurn, reduce the reasoning effort, or free budget for the turn (https://docs.rulvar.com/guide/agents#output-truncation)`;
+}
+/**
 * Builds the turn's canonical assistant message. Retained provider-raw
 * parts go at the HEAD: on both first-class providers the retained
 * blocks (thinking blocks, reasoning items) precede the turn's text and
@@ -8578,6 +8674,16 @@ async function runAgent(options) {
 			continue loop;
 		}
 		if (options.schema === void 0) {
+			if (options.finalize === void 0 && outcome.finish?.reason === "max-tokens" && outcome.turn.text.trim() === "") {
+				status = "limit";
+				abortClass = "output-truncated";
+				agentError = {
+					kind: "terminal",
+					retryable: false
+				};
+				errorMessage = outputTruncatedMessage("turn");
+				break;
+			}
 			output = outcome.turn.text;
 			break;
 		}
@@ -8718,6 +8824,14 @@ async function runAgent(options) {
 						retryable: false
 					};
 					if (outcome.finish.reason === "refusal") errorMessage = `model refusal (${outcome.finish.refusal.provider})`;
+				} else if (options.schema === void 0 && outcome.finish?.reason === "max-tokens" && outcome.turn.text.trim() === "") {
+					status = "limit";
+					abortClass = "output-truncated";
+					agentError = {
+						kind: "terminal",
+						retryable: false
+					};
+					errorMessage = outputTruncatedMessage("finalize invocation");
 				} else if (options.schema === void 0) output = outcome.turn.text;
 			}
 		}
@@ -9983,6 +10097,29 @@ var AgentCallError = class extends Error {
 		if (entryRef !== void 0) this.entryRef = entryRef;
 	}
 };
+/**
+* Projects a settled AgentResult's error to its wire form, carrying the
+* engine-decided abort class in data. AgentError itself has no data
+* field, so without this every projection past the terminal entry (the
+* run-level outcome.error, thrown AgentCallError wires, dropped items)
+* would keep only the message text and lose the typed class (v1.9.0
+* follow-up review).
+*/
+function agentResultWire(result, fallbackMessage) {
+	const wire = agentErrorToWire(result.error ?? {
+		kind: "terminal",
+		retryable: false
+	}, result.errorMessage ?? fallbackMessage);
+	if (result.abortClass === void 0) return wire;
+	const data = typeof wire.data === "object" && wire.data !== null && !Array.isArray(wire.data) ? wire.data : {};
+	return {
+		...wire,
+		data: {
+			...data,
+			abortClass: result.abortClass
+		}
+	};
+}
 /** The workflow-defaults layer a Workflow value contributes, or nothing. */
 function workflowLayerOf(wf) {
 	const layer = {};
@@ -10349,7 +10486,10 @@ function createCtx(internals, rootWorkflow) {
 			}
 			if (terminal?.artifacts !== void 0) result.artifacts = terminal.artifacts;
 			if (terminal?.status === "escalated" && terminal.escalation !== void 0) result.escalation = terminal.escalation;
-			if ((terminal?.error?.data)?.abortClass === "no-progress") result.abortClass = "no-progress";
+			{
+				const stamped = (terminal?.error?.data)?.abortClass;
+				if (stamped !== void 0) result.abortClass = stamped;
+			}
 			let replayedToolResults = [];
 			if (matched.kind === "replay" && terminal?.checkpointRef !== void 0) {
 				const blob = await internals.transcripts.get(terminal.checkpointRef);
@@ -10424,10 +10564,7 @@ function createCtx(internals, rootWorkflow) {
 			if (result.status === "ok") return result.output;
 			if (result.status === "escalated") throw new AgentCallError(`agent escalated: ${result.escalation?.scopeDelta ?? ""}`, result, state.scope, terminal?.seq ?? matched.running.seq);
 			const effectivePolicy = opts.onError ?? (internals.errorPolicy === "lenient" ? "null" : "throw");
-			const replayWire = agentErrorToWire(result.error ?? {
-				kind: "terminal",
-				retryable: false
-			}, result.errorMessage ?? `agent replayed with status ${result.status}`);
+			const replayWire = agentResultWire(result, `agent replayed with status ${result.status}`);
 			if (effectivePolicy === "null") {
 				const droppedItem = {
 					source: "agent-onerror-null",
@@ -10812,7 +10949,7 @@ function createCtx(internals, rootWorkflow) {
 		if (result.error !== void 0) terminalPatch.error = agentErrorToWire(result.error, result.errorMessage ?? `agent terminated with status ${result.status}`);
 		if (result.usageApprox === true) terminalPatch.usageApprox = true;
 		if (result.artifacts !== void 0) terminalPatch.artifacts = result.artifacts;
-		if (result.abortClass === "no-progress") {
+		if (result.abortClass !== void 0) {
 			terminalPatch.memoizeOutcome = true;
 			if (terminalPatch.error !== void 0) {
 				const priorData = terminalPatch.error.data;
@@ -10821,7 +10958,7 @@ function createCtx(internals, rootWorkflow) {
 					...terminalPatch.error,
 					data: {
 						...dataRecord,
-						abortClass: "no-progress"
+						abortClass: result.abortClass
 					}
 				};
 			}
@@ -10899,10 +11036,7 @@ function createCtx(internals, rootWorkflow) {
 		if (result.status === "ok") return result.output;
 		if (result.status === "escalated") throw new AgentCallError(`agent escalated: ${result.escalation?.scopeDelta ?? ""}`, result, state.scope, terminal.seq);
 		const effectiveOnError = opts.onError ?? (internals.errorPolicy === "lenient" ? "null" : "throw");
-		const wire = agentErrorToWire(result.error ?? {
-			kind: "terminal",
-			retryable: false
-		}, result.errorMessage ?? `agent terminated with status ${result.status}`);
+		const wire = agentResultWire(result, `agent terminated with status ${result.status}`);
 		if (effectiveOnError === "null") {
 			const droppedItem = {
 				source: "agent-onerror-null",
@@ -11016,10 +11150,7 @@ function createCtx(internals, rootWorkflow) {
 					value = await als.run(stageState, () => stages[stageIndex](value));
 				} catch (thrown) {
 					if (thrown instanceof BudgetExhaustedError || onItemError === "throw") throw thrown;
-					const wire = thrown instanceof AgentCallError ? agentErrorToWire(thrown.result.error ?? {
-						kind: "terminal",
-						retryable: false
-					}, thrown.message) : thrown instanceof RulvarError ? thrown.toWire() : {
+					const wire = thrown instanceof AgentCallError ? agentResultWire(thrown.result, thrown.message) : thrown instanceof RulvarError ? thrown.toWire() : {
 						code: "error",
 						message: thrown instanceof Error ? thrown.message : String(thrown),
 						retryable: false
@@ -12512,6 +12643,7 @@ function createEngine(options) {
 		return priceUsdOf(pricing, usage);
 	};
 	const providerLimiter = new KeyedLimiter(options.concurrency?.perProvider);
+	const activeSegments = /* @__PURE__ */ new Set();
 	function run(wf, args, opts, resumeCtx) {
 		if (wf.kind !== "workflow" && wf.kind !== "compiled-workflow") throw new ConfigError("engine.run accepts in-process Workflow values or compileScript CompiledWorkflow values");
 		const compiled = wf.kind === "compiled-workflow" ? wf : void 0;
@@ -12656,6 +12788,8 @@ function createEngine(options) {
 			workflowHash: compiled === void 0 ? hashWorkflowBody(wf) : hashWorkflowSource(compiled.source),
 			...compiled === void 0 ? {} : { workflowSourceRef: workflowSourceRef(runId) }
 		});
+		if (activeSegments.has(runId)) throw new ConfigError(`run '${runId}' already has a live execution segment in this engine; await its settled result before starting another one (exactly one segment owns a run; https://docs.rulvar.com/guide/durability#resolving-a-settled-run)`);
+		activeSegments.add(runId);
 		const result = (async () => {
 			let status = "ok";
 			let value;
@@ -12696,8 +12830,9 @@ function createEngine(options) {
 				}))]);
 				if (raced.kind === "suspended") {
 					bodyPromise.catch(() => void 0);
+					external.close();
 					status = "suspended";
-					pending = raced.open;
+					pending = raced.open.filter((item) => replayer.suspensionState(item.entryRef).state === "suspended");
 					for (const item of pending) bus.emit({
 						type: "external:waiting",
 						key: item.key,
@@ -12729,10 +12864,7 @@ function createEngine(options) {
 					};
 				} else {
 					status = "error";
-					wireError = thrown instanceof AgentCallError ? agentErrorToWire(thrown.result.error ?? {
-						kind: "terminal",
-						retryable: false
-					}, thrown.message) : thrown instanceof RulvarError ? thrown.toWire() : {
+					wireError = thrown instanceof AgentCallError ? agentResultWire(thrown.result, thrown.message) : thrown instanceof RulvarError ? thrown.toWire() : {
 						code: "error",
 						message: thrown instanceof Error ? thrown.message : String(thrown),
 						retryable: false
@@ -12740,6 +12872,7 @@ function createEngine(options) {
 				}
 			} finally {
 				if (deadlineTimer !== void 0) clearTimeout(deadlineTimer);
+				external.close();
 				await replayer.flush().catch(() => void 0);
 			}
 			const ledger = replayer.ledger();
@@ -12765,7 +12898,9 @@ function createEngine(options) {
 			});
 			return outcome;
 		})();
-		result.catch(() => void 0);
+		result.catch(() => void 0).finally(() => {
+			activeSegments.delete(runId);
+		});
 		return {
 			runId,
 			result,
@@ -13181,4 +13316,4 @@ function createSandboxBridge(ctx, options) {
 	};
 }
 //#endregion
-export { AWAIT_SCHEMA, AdmissionController, AdmissionRejectedError, AgentCallError, BUDGET_ABORT_REASON, BudgetExhaustedError, CANCEL_AGENT_SCHEMA, CHECKPOINT_FORMAT_V1, CLAIM_STATEMENT_MAX_CHARS, CLAIM_TTL_DAYS, COMPACTION_SUMMARY_PREFIX, CURRENT_HASH_VERSION, ConfigError, DEFAULT_CHILD_BUDGET_FRACTION, DEFAULT_COMPACTION_THRESHOLD, DEFAULT_ESCALATION_LIMITS, DEFAULT_FLAT_RESERVE_USD, DEFAULT_MAX_CHILDREN_PER_NODE, DEFAULT_MAX_DEPTH, DEFAULT_MAX_OSCILLATIONS_PER_KEY, DEFAULT_MAX_PINNED_WORKTREES, DEFAULT_MAX_REVISIONS_PER_RUN, DEFAULT_MAX_TOTAL_SPAWNS, DEFAULT_MAX_TURNS, DEFAULT_MODEL_RETRY_ATTEMPTS, DEFAULT_NO_PROGRESS_TURNS, DEFAULT_PER_RUN_CONCURRENCY, DEFAULT_RETRY_POLICY, DEFAULT_STREAM_IDLE_TIMEOUT_MS, DedupIndex, EMIT_RESULT_TOOL, EMPTY_SCHEMA_HASH, EMPTY_TOOLSET_HASH, ESCALATE_TOOL_NAME, ESCALATION_REPORT_SCHEMA, ESCALATION_REQUEST_SCHEMA, EventBus, ExternalRegistry, FINISH_SCHEMA, FINISH_TOOL_NAME, FileModelKnowledgeStore, FileTranscriptStore, GitWorktreeProvider, INBOX_PROPOSAL_TTL_DAYS, InMemoryStore, InMemoryTranscriptStore, InProcessRunner, InvalidResolutionError, JournalCompatibilityError, JournalMatcher, JournalMissError, JournalOrderViolation, JsonlFileStore, KB_ACTIVE_CLAIMS_CAP, KB_CARD_RENDER_BUDGET_CHARS, KeyedLimiter, KnowledgeCasError, LARGE_VALUE_WARN_BYTES, LEGACY_LTID_PREFIX, LEGACY_SIGNATURE_INPUTS, LINEAGE_SIG_VERSION, LeaseHeldError, LineageIndex, MASKED_SECRET, MAX_DEPTH_CEILING, ModelRetry, NoProgressDetector, NonSerializableValueError, ORCHESTRATE_WORKFLOW_NAME, OrchestratorCapConfigError, PARALLEL_AGENTS_SCHEMA, ParallelSiteCounter, PlanInvariantError, ROLE_EFFORT_DEFAULTS, ROOT_ACCOUNT, ROOT_SCOPE, RUN_PROFILES, ReplayPlanHashMismatch, Replayer, ResolutionArbiter, ResolutionFold, RulvarError, RunBudget, SPAWN_AGENT_SCHEMA, SandboxError, ScriptRejected, Semaphore, SpanRegistry, TOOL_NAME_PATTERN, TerminationAccount, WAIT_FOR_EVENTS_SCHEMA, WAIT_FOR_EVENTS_TOOL_NAME, WAKE_SUMMARY_RENDER_BUDGET_CHARS, admissionReserveUsd, affordableOutputTokens, agentErrorFromWire, agentErrorToWire, agentScope, applyClaimOps, applyStructuredOutputTier, approachSigCoarse, approachSigOf, archiveDeprecatedModelOps, atCompactionThreshold, buildAbandonFold, buildAdapterRegistry, buildCostReport, buildDeriverRegistry, buildOrchestratorTools, buildTerminationInitValue, buildToolContext, canRideLoopTurn, canonicalIsolationTag, canonicalizeLadder, canonicalizeSchema, capIssues, capsHashOf, checkFloors, checkpointRefFor, childCoveragePrefix, claimExpired, claimExpiry, claimIssues, claimOpIssues, classifyAgentError, classifyAttemptOutcome, collectDeclaredLadders, compactMessages, compilePermissionChain, compilePermissionPreset, compileVerifiedLayer, costReportFromJournal, countsAgainstLimit, createCanonicalIdMinter, createCtx, createEngine, createSandboxBridge, currentOnlyKeyRing, decodeCheckpoint, defineWorkflow, deriveContentKey, deriverV1, deriverV2, digestOf, dispositionHook, emptyDigestBlocks, emptyToolset, encodeCheckpoint, entryUsageSlices, escalateTool, evaluatePermission, evaluateReuse, executeWorkflow, exhaustionCodeOf, extractCandidate, failoverTriggerOf, fallbackTriggerOf, filterClaimsForRun, finalizeFires, foldTermination, formatRePrompt, formatScopePath, hashWorkflowBody, hashWorkflowSource, identityJcs, isEscalated, isSchemaPairSpec, isStandardSchemaSpec, isStrictCompatibleSchema, kMaxOf, knowledgeHash, ladderLengthOf, ladderRungChoice, lexShellCommand, liftRetainedParts, lineageWeightOf, makeOrchestratorWorkflow, maskSecrets, maskSecretsDeep, maskSecretsJson, matchArgvPattern, matchShellCommand, mcp, mergeUsageLimits, modelEpochOf, modelKnowledgeCard, modelSpecIdentity, needsSeparateExtract, nextFailover, nodeLinkKey, normalizeApproachTag, normalizeEntry, normalizeFallbacks, orchestrate, parallelScope, parseModelRef, parseScopePath, phiInitialOf, pipelineScope, planNodeScope, priceEntryUsage, priceUsdOf, profileCard, profileRegistrySnapshotHash, projectHistory, projectIdentity, projectToJsonSchema, proposalStatement, providerOf, readTerminationInit, registryKeyRing, remeasureQueue, replayDisposition, resolveModelInvocation, resolvePricing, resolveToolset, retryClassOf, retryDelayMs, roleConfiguredInRouting, roundOneDisposition, runAgent, runProfile, scanJournalCompatibility, schemaHash, schemaHashOfSpec, selectStructuredOutputTier, shouldCompact, spawnDepthOf, summarizeInstruction, summarizeOutput, terminationConfigDrift, tierWithinCaps, toApprovalDecision, toJournalValue, tool, toolContract, toolsetHash, ttlState, validateEditorialCommit, validateEntryShape, validateEscalationLimits, validateEscalationReport, validateSchemaSpec, validateTerminationLimits, workflowScope, workflowSourceRef, wrapJournalStore, wrapTranscriptStore };
+export { AWAIT_SCHEMA, AdmissionController, AdmissionRejectedError, AgentCallError, BUDGET_ABORT_REASON, BudgetExhaustedError, CANCEL_AGENT_SCHEMA, CHECKPOINT_FORMAT_V1, CLAIM_STATEMENT_MAX_CHARS, CLAIM_TTL_DAYS, COMPACTION_SUMMARY_PREFIX, CURRENT_HASH_VERSION, ConfigError, DEFAULT_CHILD_BUDGET_FRACTION, DEFAULT_COMPACTION_THRESHOLD, DEFAULT_ESCALATION_LIMITS, DEFAULT_FLAT_RESERVE_USD, DEFAULT_MAX_CHILDREN_PER_NODE, DEFAULT_MAX_DEPTH, DEFAULT_MAX_OSCILLATIONS_PER_KEY, DEFAULT_MAX_PINNED_WORKTREES, DEFAULT_MAX_REVISIONS_PER_RUN, DEFAULT_MAX_TOTAL_SPAWNS, DEFAULT_MAX_TURNS, DEFAULT_MODEL_RETRY_ATTEMPTS, DEFAULT_NO_PROGRESS_TURNS, DEFAULT_PER_RUN_CONCURRENCY, DEFAULT_RETRY_POLICY, DEFAULT_STREAM_IDLE_TIMEOUT_MS, DedupIndex, EMIT_RESULT_TOOL, EMPTY_SCHEMA_HASH, EMPTY_TOOLSET_HASH, ESCALATE_TOOL_NAME, ESCALATION_REPORT_SCHEMA, ESCALATION_REQUEST_SCHEMA, EventBus, ExternalRegistry, FINISH_SCHEMA, FINISH_TOOL_NAME, FileModelKnowledgeStore, FileTranscriptStore, GitWorktreeProvider, INBOX_PROPOSAL_TTL_DAYS, InMemoryStore, InMemoryTranscriptStore, InProcessRunner, InvalidResolutionError, JournalCompatibilityError, JournalMatcher, JournalMissError, JournalOrderViolation, JsonlFileStore, KB_ACTIVE_CLAIMS_CAP, KB_CARD_RENDER_BUDGET_CHARS, KeyedLimiter, KnowledgeCasError, LARGE_VALUE_WARN_BYTES, LEGACY_LTID_PREFIX, LEGACY_SIGNATURE_INPUTS, LINEAGE_SIG_VERSION, LeaseHeldError, LineageIndex, MASKED_SECRET, MAX_DEPTH_CEILING, ModelRetry, NoProgressDetector, NonSerializableValueError, ORCHESTRATE_WORKFLOW_NAME, OrchestratorCapConfigError, PARALLEL_AGENTS_SCHEMA, ParallelSiteCounter, PlanInvariantError, ROLE_EFFORT_DEFAULTS, ROOT_ACCOUNT, ROOT_SCOPE, RUN_PROFILES, ReplayPlanHashMismatch, Replayer, ResolutionArbiter, ResolutionFold, RulvarError, RunBudget, SPAWN_AGENT_SCHEMA, SandboxError, ScriptRejected, Semaphore, SpanRegistry, TOOL_NAME_PATTERN, TerminationAccount, WAIT_FOR_EVENTS_SCHEMA, WAIT_FOR_EVENTS_TOOL_NAME, WAKE_SUMMARY_RENDER_BUDGET_CHARS, admissionReserveUsd, affordableOutputTokens, agentErrorFromWire, agentErrorToWire, agentResultWire, agentScope, applyClaimOps, applyStructuredOutputTier, approachSigCoarse, approachSigOf, archiveDeprecatedModelOps, atCompactionThreshold, buildAbandonFold, buildAdapterRegistry, buildCostReport, buildDeriverRegistry, buildOrchestratorTools, buildTerminationInitValue, buildToolContext, canRideLoopTurn, canonicalIsolationTag, canonicalizeLadder, canonicalizeSchema, capIssues, capsHashOf, checkFloors, checkpointRefFor, childCoveragePrefix, claimExpired, claimExpiry, claimIssues, claimOpIssues, classifyAgentError, classifyAttemptOutcome, collectDeclaredLadders, compactMessages, compilePermissionChain, compilePermissionPreset, compileVerifiedLayer, costReportFromJournal, countsAgainstLimit, createCanonicalIdMinter, createCtx, createEngine, createSandboxBridge, currentOnlyKeyRing, decodeCheckpoint, defineWorkflow, deriveContentKey, deriverV1, deriverV2, digestOf, dispositionHook, emptyDigestBlocks, emptyToolset, encodeCheckpoint, entryUsageSlices, escalateTool, evaluatePermission, evaluateReuse, executeWorkflow, exhaustionCodeOf, extractCandidate, failoverTriggerOf, fallbackTriggerOf, filterClaimsForRun, finalizeFires, foldTermination, formatRePrompt, formatScopePath, hashWorkflowBody, hashWorkflowSource, identityJcs, isEscalated, isSchemaPairSpec, isStandardSchemaSpec, isStrictCompatibleSchema, kMaxOf, knowledgeHash, ladderLengthOf, ladderRungChoice, lexShellCommand, liftRetainedParts, lineageWeightOf, makeOrchestratorWorkflow, maskSecrets, maskSecretsDeep, maskSecretsJson, matchArgvPattern, matchShellCommand, mcp, mergeUsageLimits, modelEpochOf, modelKnowledgeCard, modelSpecIdentity, needsSeparateExtract, nextFailover, nodeLinkKey, normalizeApproachTag, normalizeEntry, normalizeFallbacks, orchestrate, parallelScope, parseModelRef, parseScopePath, phiInitialOf, pipelineScope, planNodeScope, priceEntryUsage, priceUsdOf, profileCard, profileRegistrySnapshotHash, projectHistory, projectIdentity, projectToJsonSchema, proposalStatement, providerOf, readTerminationInit, registryKeyRing, remeasureQueue, replayDisposition, resolveModelInvocation, resolvePricing, resolveToolset, retryClassOf, retryDelayMs, roleConfiguredInRouting, roundOneDisposition, runAgent, runProfile, scanJournalCompatibility, schemaHash, schemaHashOfSpec, selectStructuredOutputTier, shouldCompact, spawnDepthOf, summarizeInstruction, summarizeOutput, terminationConfigDrift, tierWithinCaps, toApprovalDecision, toJournalValue, tool, toolContract, toolsetHash, ttlState, validateEditorialCommit, validateEntryShape, validateEscalationLimits, validateEscalationReport, validateSchemaSpec, validateTerminationLimits, workflowScope, workflowSourceRef, wrapJournalStore, wrapTranscriptStore };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rulvar/core",
-  "version": "1.9.0",
+  "version": "1.11.0",
   "description": "Rulvar core: L0 contracts, journal kernel, ctx primitives, agent runtime, model router, tool system, dynamic orchestrator, InMemory and JSONL stores, event stream.",
   "type": "module",
   "license": "Apache-2.0",