@t2000/engine 1.11.4 → 1.12.0

package/dist/index.d.ts

@@ -1692,35 +1692,85 @@ declare function bundleShortestTtl(toolUseIds: string[], toolNamesById: Record<s
 declare const REGENERATABLE_READ_TOOLS: ReadonlySet<string>;
 
 /**
- * [F14-fix-2 / 2026-05-03] Maximum number of writes per atomic bundle.
- *
- * The engine refuses to compose a `pending_action` with more than this
- * many steps. Bundles with N > MAX_BUNDLE_OPS get all-step error
- * tool_results synthesized in `engine.ts` so the LLM re-plans into two
- * sequential ≤N-op bundles. Why 5:
- *
- *  - Vercel runtime budget. At N>5 writes, Turn 2's emission + guard
- *    work + bundle compose has been observed in production to push
- *    /api/engine/chat past the 300s `maxDuration`. Reducing the cap
- *    keeps every flow well under the timeout.
- *  - Quote-freshness coupling. SwapQuoteTracker `windowMs = 60_000`.
- *    With N>5 (especially 2+ swap legs), Turn 2's planning + emission
- *    routinely bleeds past 60s; the stale-quote guard then blocks
- *    swap_execute on legs whose quote went stale during thinking.
- *  - LLM working memory. Sonnet+medium has been observed to drop
- *    legs when bundling >5 writes (the original B2 incident — LLM
- *    asked to emit 6 writes in one Turn 2 emitted only 3).
- *  - User cognitive load. A 6+ leg PermissionCard takes 30+ seconds
- *    to re-read; capping at 5 keeps the card scannable.
- *  - PTB instruction budget. Sui PTB max instructions ~1024; each leg
- *    consumes 5–20 instructions. 5 legs ≤ 100 instructions — well
- *    under the cap with comfortable headroom for nested splits.
- *
- * Hosts that want to advertise the cap in system prompts should import
- * this constant rather than hardcoding `5` — bumping the cap in one
- * place keeps host prompts and engine behavior in lockstep.
- */
-declare const MAX_BUNDLE_OPS = 5;
+ * [Phase 0 / SPEC 13 / 2026-05-03] Maximum number of writes per atomic bundle.
+ *
+ * **History.** This was 5 between F14-fix-2 (2026-05-03 morning) and
+ * Phase 0 (2026-05-03 evening). The May 3 production review found that
+ * the underlying problem was never the count — bundles fail because
+ * SDK appenders pre-fetch coins from the wallet and the chained asset
+ * doesn't exist there yet (e.g. `swap_execute(USDC→USDsui) +
+ * save_deposit(USDsui)` reverts at PREPARE because USDsui isn't in the
+ * wallet at compose time). SPEC 13 builds the chained-coin handoff
+ * primitive. Until that ships in `1.13.0`, Phase 0 strict-tightens
+ * bundles to:
+ *
+ *   - Cap = 2 ops (was 5).
+ *   - Every adjacent pair MUST be in `VALID_PAIRS` (was: any 2
+ *     bundleable tools).
+ *
+ * **Why 2.** Every multi-write production failure today reduces to
+ * the same gap: a chained-asset bundle whose intermediate output
+ * doesn't exist in the wallet yet. The `VALID_PAIRS` whitelist below
+ * enumerates every (producer, consumer) couple where chaining either
+ * works today (because the consumer takes a wallet coin that the
+ * producer happens to leave there via `tx.transferObjects`) OR will
+ * work after Phase 1. Anything outside the whitelist falls through
+ * to sequential — same outcome the LLM was already producing as a
+ * fallback, just without the wasted PREPARE round-trip.
+ *
+ * **Why not 3+.** 3-op chains require a graph validator (every adjacent
+ * pair valid + DAG topology checks) — that's Phase 2. Cap stays at 2
+ * until Phase 1 lands the validator.
+ *
+ * Hosts importing this constant for system-prompt construction get the
+ * current cap automatically. Bumping the cap in Phase 1 + Phase 2 + …
+ * is a one-line change here that propagates to prompts via the import.
+ */
+declare const MAX_BUNDLE_OPS = 2;
+/**
+ * [Phase 0 / SPEC 13] Whitelisted (producer, consumer) pairs for atomic
+ * bundling. Every key has the shape `${producer}->${consumer}`. Bundles
+ * whose adjacent steps aren't in this set get refused with
+ * `_gate: 'pair_not_whitelisted'` so the LLM splits sequentially.
+ *
+ * **The 7 pairs and why they're safe in Phase 0.**
+ *
+ * | Pair | Why it works at compose time today |
+ * |---|---|
+ * | `swap_execute → send_transfer` | Swap's `tx.transferObjects([result.coin], sender)` lands the swap output in the wallet for the same PTB; send's `selectAndSplitCoin` finds it. |
+ * | `swap_execute → save_deposit` | Same mechanism — swap output is back in wallet for save's coin fetch. (P0 caveat: this currently *fails* if the wallet has zero of `swap.to` BEFORE the swap step. Phase 1's `inputCoinFromStep` fixes that. For now we accept the pair but warn the LLM in the prompt rule that wallet must hold ≥0 of target asset.) |
+ * | `swap_execute → repay_debt` | Same as save. Same caveat. |
+ * | `withdraw → swap_execute` | Withdraw's output is transferred to user; swap's coin fetch finds it. Same wallet caveat in reverse. |
+ * | `withdraw → send_transfer` | Same shape. |
+ * | `borrow → send_transfer` | Borrow output lands in wallet; send finds it. |
+ * | `borrow → repay_debt` (same asset) | Unusual but valid — borrow output repays elsewhere. |
+ *
+ * **NOT in the whitelist** (sequential only until Phase 1+):
+ *
+ * - `swap → swap` — chained-asset handoff between two swaps. Phase 3.
+ * - `borrow → swap` — borrow output is `USDC|USDsui`, swap takes any
+ *   `from`. Could be added in Phase 1.
+ * - `claim_rewards → *` — produces N reward coins, structurally
+ *   different. Phase 5+.
+ * - Anything with `volo_stake` / `volo_unstake` chained — Phase 5+.
+ */
+declare const VALID_PAIRS: ReadonlySet<string>;
+/**
+ * Test whether a 2-op bundle's (producer, consumer) pair is in the
+ * Phase 0 whitelist. Returns the pair key on match, `null` otherwise
+ * so callers can include the rejection reason in the synthesized
+ * tool_result.
+ *
+ * Caller is responsible for ensuring `producer` and `consumer` are the
+ * actual tool names of the bundle's two steps (in execution order).
+ */
+declare function checkValidPair(producer: string, consumer: string): {
+    ok: true;
+    pair: string;
+} | {
+    ok: false;
+    pair: string;
+};
 
 /**
  * SPEC 7 v0.3 Quote-Refresh ReviewCard — engine-side bundle regeneration.
@@ -3730,4 +3780,4 @@ declare function getTelemetrySink(): TelemetrySink;
 /** Restore the default noop sink. Used by test teardowns. */
 declare function resetTelemetrySink(): void;
 
-export { type AddressPortfolio, AnthropicProvider, type AnthropicProviderConfig, type AudricHistoryRecord, type AudricPortfolioResult, type AwaitOrFetchOpts, type BalancePrices, type BalanceResult, BalanceTracker, type BuildToolOptions, CANVAS_TEMPLATES, type CanvasTemplate, type ChatParams, type CompactOptions, type ContentBlock, ContextBudget, type ContextBudgetConfig, type ConversationState, type ConversationStateStore, type CostSnapshot, CostTracker, type CostTrackerConfig, DEFAULT_GUARD_CONFIG, DEFAULT_LEASE_SEC, DEFAULT_PERMISSION_CONFIG, DEFAULT_POLL_BUDGET_MS, DEFAULT_POLL_INTERVAL_MS, DEFAULT_SYSTEM_PROMPT, DEFAULT_TOOL_TTL_MS, type DefiCacheEntry, type DefiCacheStore, type DefiProtocol, type DefiSummary, EFFORT_THINKING_BUDGET_CAPS, EarlyToolDispatcher, type EngineConfig, type EngineEvent, type EvalSummaryParseResult, type EvaluationItem, type EvaluationStatus, type FetchLock, type GuardCheckResult, type GuardConfig, type GuardEvent, type GuardInjection, type GuardResult, type GuardRunnerState, type GuardTier, type GuardVerdict, type HarnessShape, type HealthFactorResult, InMemoryDefiCacheStore, InMemoryFetchLock, InMemoryNaviCacheStore, InMemoryWalletCacheStore, InvalidAddressError, type LLMProvider, MAX_BUNDLE_OPS, type McpCallResult, McpClientManager, McpResponseCache, type McpServerConfig, type McpServerConnection, type McpToolAdapterConfig, type McpToolDescriptor, MemorySessionStore, type Message, NAVI_ADDR_TTL_SEC, NAVI_MCP_CONFIG, NAVI_MCP_URL, NAVI_RATES_TTL_SEC, NAVI_SERVER_NAME, type NaviCacheEntry, type NaviCacheStore, type NaviRawCoin, type NaviRawHealthFactor, type NaviRawPool, type NaviRawPosition, type NaviRawPositionsResponse, type NaviRawProtocolStats, type NaviRawRewardsResponse, type NaviReadOptions, NaviTools, type NormalizedAddress, type OutputConfig, PERMISSION_PRESETS, type PendingAction, type PendingActionModifiableField, type PendingActionStep, type PendingReward, type PendingToolCall, type PermissionLevel, type PermissionOperation, type PermissionResponse, type PermissionRule, type PortfolioCoin, type PositionEntry, type PreflightResult, type ProtocolStats, type ProviderEvent, QueryEngine, READ_TOOLS, REGENERATABLE_READ_TOOLS, type RatesResult, type Recipe, type RecipePrerequisite, RecipeRegistry, type RecipeStep, type RecipeStepOnError, type RegenerateFailure, type RegenerateResult, type RegenerateSuccess, type RegenerateTimelineEvent, RetryTracker, type SSEEvent, SUINS_NAME_REGEX, SUI_ADDRESS_REGEX, SUI_ADDRESS_STRICT_REGEX, type SavingsResult, type ServerPositionData, type SessionData, type SessionStore, type StateType, type StopReason, type SuiCoinBalance, SuinsNotRegisteredError, SuinsRpcError, type SystemBlock, type SystemPrompt, TOOL_FLAGS, TOOL_MODIFIABLE_FIELDS, TOOL_TTL_MS, type TelemetrySink, type TelemetryTags, type ThinkingConfig, type ThinkingEffort, type TodoItem$1 as TodoItem, type Tool, type ToolChoice, type ToolContext, type ToolDefinition, type ToolFlags, type ToolJsonSchema, type ToolResult, TxMutex, type UpdateTodoInput, type TodoItem as UpdateTodoItem, type UserFinancialProfile, type UserPermissionConfig, WRITE_TOOLS, type WalletCacheEntry, type WalletCacheStore, type WalletCoin, _resetNaviCircuitBreaker, activitySummaryTool, adaptAllMcpTools, adaptAllServerTools, adaptMcpTool, applyToolFlags, awaitOrFetch, balanceCheckTool, borrowTool, budgetToolResult, buildCachedSystemPrompt, buildMcpTools, buildProactivenessInstructions, buildProfileContext, buildSelfEvaluationInstruction, buildStateContext, buildTool, bundleShortestTtl, claimRewardsTool, clampThinkingForEffort, classifyEffort, clearPortfolioCache, clearPortfolioCacheFor, clearPriceMapCache, compactMessages, createGuardRunnerState, engineToSSE, estimateTokens, explainTxTool, extractConversationText, extractMcpText, fetchAddressDefiPortfolio, fetchAddressPortfolio, fetchAudricHistory, fetchAudricPortfolio, fetchAvailableRewards, fetchBalance, fetchHealthFactor, fetchPositions, fetchProtocolStats, fetchRates, fetchSavings, fetchTokenPrices, fetchWalletCoins, findTool, getAudricApiBase, getDefaultTools, getDefiCacheStore, getFetchLock, getMcpManager, getModifiableFields, getNaviCacheStore, getTelemetrySink, getToolFlags, getWalletAddress, getWalletCacheStore, guardArtifactPreview, guardStaleData, harnessShapeForEffort, hasNaviMcp, healthCheckTool, isBundleableTool, loadRecipes, looksLikeSuiNs, microcompact, mppServicesTool, naviKey, normalizeAddressInput, parseEvalSummary, parseMcpJson, parseRecipe, parseSSE, payApiTool, portfolioAnalysisTool, protocolDeepDiveTool, ratesInfoTool, regenerateBundle, registerEngineTools, renderCanvasTool, repayDebtTool, requireAgent, resetDefiCacheStore, resetFetchLock, resetNaviCacheStore, resetTelemetrySink, resetWalletCacheStore, resolveAddressToSuinsViaRpc, resolvePermissionTier, resolveSuinsTool, resolveSuinsViaRpc, resolveUsdValue, runGuards, runTools, saveContactTool, saveDepositTool, savingsInfoTool, sendTransferTool, serializeSSE, setDefiCacheStore, setFetchLock, setNaviCacheStore, setTelemetrySink, setWalletCacheStore, spendingAnalyticsTool, swapExecuteTool, swapQuoteTool, tokenPricesTool, toolNameToOperation, toolsToDefinitions, transactionHistoryTool, transformBalance, transformHealthFactor, transformPositions, transformRates, transformRewards, transformSavings, updateGuardStateAfterToolResult, updateTodoTool, validateHistory, voloStakeTool, voloStatsTool, voloUnstakeTool, webSearchTool, withdrawTool, yieldSummaryTool };
+export { type AddressPortfolio, AnthropicProvider, type AnthropicProviderConfig, type AudricHistoryRecord, type AudricPortfolioResult, type AwaitOrFetchOpts, type BalancePrices, type BalanceResult, BalanceTracker, type BuildToolOptions, CANVAS_TEMPLATES, type CanvasTemplate, type ChatParams, type CompactOptions, type ContentBlock, ContextBudget, type ContextBudgetConfig, type ConversationState, type ConversationStateStore, type CostSnapshot, CostTracker, type CostTrackerConfig, DEFAULT_GUARD_CONFIG, DEFAULT_LEASE_SEC, DEFAULT_PERMISSION_CONFIG, DEFAULT_POLL_BUDGET_MS, DEFAULT_POLL_INTERVAL_MS, DEFAULT_SYSTEM_PROMPT, DEFAULT_TOOL_TTL_MS, type DefiCacheEntry, type DefiCacheStore, type DefiProtocol, type DefiSummary, EFFORT_THINKING_BUDGET_CAPS, EarlyToolDispatcher, type EngineConfig, type EngineEvent, type EvalSummaryParseResult, type EvaluationItem, type EvaluationStatus, type FetchLock, type GuardCheckResult, type GuardConfig, type GuardEvent, type GuardInjection, type GuardResult, type GuardRunnerState, type GuardTier, type GuardVerdict, type HarnessShape, type HealthFactorResult, InMemoryDefiCacheStore, InMemoryFetchLock, InMemoryNaviCacheStore, InMemoryWalletCacheStore, InvalidAddressError, type LLMProvider, MAX_BUNDLE_OPS, type McpCallResult, McpClientManager, McpResponseCache, type McpServerConfig, type McpServerConnection, type McpToolAdapterConfig, type McpToolDescriptor, MemorySessionStore, type Message, NAVI_ADDR_TTL_SEC, NAVI_MCP_CONFIG, NAVI_MCP_URL, NAVI_RATES_TTL_SEC, NAVI_SERVER_NAME, type NaviCacheEntry, type NaviCacheStore, type NaviRawCoin, type NaviRawHealthFactor, type NaviRawPool, type NaviRawPosition, type NaviRawPositionsResponse, type NaviRawProtocolStats, type NaviRawRewardsResponse, type NaviReadOptions, NaviTools, type NormalizedAddress, type OutputConfig, PERMISSION_PRESETS, type PendingAction, type PendingActionModifiableField, type PendingActionStep, type PendingReward, type PendingToolCall, type PermissionLevel, type PermissionOperation, type PermissionResponse, type PermissionRule, type PortfolioCoin, type PositionEntry, type PreflightResult, type ProtocolStats, type ProviderEvent, QueryEngine, READ_TOOLS, REGENERATABLE_READ_TOOLS, type RatesResult, type Recipe, type RecipePrerequisite, RecipeRegistry, type RecipeStep, type RecipeStepOnError, type RegenerateFailure, type RegenerateResult, type RegenerateSuccess, type RegenerateTimelineEvent, RetryTracker, type SSEEvent, SUINS_NAME_REGEX, SUI_ADDRESS_REGEX, SUI_ADDRESS_STRICT_REGEX, type SavingsResult, type ServerPositionData, type SessionData, type SessionStore, type StateType, type StopReason, type SuiCoinBalance, SuinsNotRegisteredError, SuinsRpcError, type SystemBlock, type SystemPrompt, TOOL_FLAGS, TOOL_MODIFIABLE_FIELDS, TOOL_TTL_MS, type TelemetrySink, type TelemetryTags, type ThinkingConfig, type ThinkingEffort, type TodoItem$1 as TodoItem, type Tool, type ToolChoice, type ToolContext, type ToolDefinition, type ToolFlags, type ToolJsonSchema, type ToolResult, TxMutex, type UpdateTodoInput, type TodoItem as UpdateTodoItem, type UserFinancialProfile, type UserPermissionConfig, VALID_PAIRS, WRITE_TOOLS, type WalletCacheEntry, type WalletCacheStore, type WalletCoin, _resetNaviCircuitBreaker, activitySummaryTool, adaptAllMcpTools, adaptAllServerTools, adaptMcpTool, applyToolFlags, awaitOrFetch, balanceCheckTool, borrowTool, budgetToolResult, buildCachedSystemPrompt, buildMcpTools, buildProactivenessInstructions, buildProfileContext, buildSelfEvaluationInstruction, buildStateContext, buildTool, bundleShortestTtl, checkValidPair, claimRewardsTool, clampThinkingForEffort, classifyEffort, clearPortfolioCache, clearPortfolioCacheFor, clearPriceMapCache, compactMessages, createGuardRunnerState, engineToSSE, estimateTokens, explainTxTool, extractConversationText, extractMcpText, fetchAddressDefiPortfolio, fetchAddressPortfolio, fetchAudricHistory, fetchAudricPortfolio, fetchAvailableRewards, fetchBalance, fetchHealthFactor, fetchPositions, fetchProtocolStats, fetchRates, fetchSavings, fetchTokenPrices, fetchWalletCoins, findTool, getAudricApiBase, getDefaultTools, getDefiCacheStore, getFetchLock, getMcpManager, getModifiableFields, getNaviCacheStore, getTelemetrySink, getToolFlags, getWalletAddress, getWalletCacheStore, guardArtifactPreview, guardStaleData, harnessShapeForEffort, hasNaviMcp, healthCheckTool, isBundleableTool, loadRecipes, looksLikeSuiNs, microcompact, mppServicesTool, naviKey, normalizeAddressInput, parseEvalSummary, parseMcpJson, parseRecipe, parseSSE, payApiTool, portfolioAnalysisTool, protocolDeepDiveTool, ratesInfoTool, regenerateBundle, registerEngineTools, renderCanvasTool, repayDebtTool, requireAgent, resetDefiCacheStore, resetFetchLock, resetNaviCacheStore, resetTelemetrySink, resetWalletCacheStore, resolveAddressToSuinsViaRpc, resolvePermissionTier, resolveSuinsTool, resolveSuinsViaRpc, resolveUsdValue, runGuards, runTools, saveContactTool, saveDepositTool, savingsInfoTool, sendTransferTool, serializeSSE, setDefiCacheStore, setFetchLock, setNaviCacheStore, setTelemetrySink, setWalletCacheStore, spendingAnalyticsTool, swapExecuteTool, swapQuoteTool, tokenPricesTool, toolNameToOperation, toolsToDefinitions, transactionHistoryTool, transformBalance, transformHealthFactor, transformPositions, transformRates, transformRewards, transformSavings, updateGuardStateAfterToolResult, updateTodoTool, validateHistory, voloStakeTool, voloStatsTool, voloUnstakeTool, webSearchTool, withdrawTool, yieldSummaryTool };

package/dist/index.js

@@ -6732,7 +6732,20 @@ var REGENERATABLE_READ_TOOLS = /* @__PURE__ */ new Set([
 ]);
 
 // src/compose-bundle.ts
-var MAX_BUNDLE_OPS = 5;
+var MAX_BUNDLE_OPS = 2;
+var VALID_PAIRS = /* @__PURE__ */ new Set([
+  "swap_execute->send_transfer",
+  "swap_execute->save_deposit",
+  "swap_execute->repay_debt",
+  "withdraw->swap_execute",
+  "withdraw->send_transfer",
+  "borrow->send_transfer",
+  "borrow->repay_debt"
+]);
+function checkValidPair(producer, consumer) {
+  const pair = `${producer}->${consumer}`;
+  return VALID_PAIRS.has(pair) ? { ok: true, pair } : { ok: false, pair };
+}
 function composeBundleFromToolResults(input) {
   if (input.pendingWrites.length < 2) {
     throw new Error(
@@ -6920,6 +6933,10 @@ var QueryEngine = class {
   async *submitMessage(prompt, options) {
     if (this.costTracker.isOverBudget()) {
       yield { type: "error", error: new Error("Session budget exceeded") };
+      getTelemetrySink().counter("engine.turn_outcome", {
+        entry: "submit",
+        outcome: "error_budget"
+      });
       return;
     }
     this.abortController = new AbortController();
@@ -7058,6 +7075,10 @@ var QueryEngine = class {
     }
     if (!response.approved) {
       yield { type: "turn_complete", stopReason: "end_turn" };
+      getTelemetrySink().counter("engine.turn_outcome", {
+        entry: "resume",
+        outcome: "pending_action_decline"
+      });
       this.turnReadCache.clear();
       return;
     }
@@ -7344,10 +7365,22 @@ var QueryEngine = class {
     let turns = 0;
     let hasRetriedWithCleanHistory = false;
     let turnStartMs = Date.now();
+    const recordTurnOutcome = (outcome, extra = {}) => {
+      const tags = {
+        entry: freshPrompt !== null ? "submit" : "resume",
+        outcome
+      };
+      if (extra.stopReason) tags.stopReason = extra.stopReason;
+      const sink = getTelemetrySink();
+      sink.counter("engine.turn_outcome", tags);
+      sink.histogram("engine.turn_duration_ms", Date.now() - turnStartMs, tags);
+      sink.gauge("engine.turn_turns_used", turns, tags);
+    };
     const turnReadToolResults = [];
     while (turns < this.maxTurns) {
       if (signal.aborted) {
         yield { type: "error", error: new Error("Aborted") };
+        recordTurnOutcome("error_aborted");
         return;
       }
       turns++;
@@ -7532,6 +7565,7 @@ ${recipeCtx}`;
         this.messages.push({ role: "assistant", content: acc.assistantBlocks });
         getTelemetrySink().histogram("anthropic.latency_ms", Date.now() - turnStartMs);
         yield { type: "turn_complete", stopReason: acc.stopReason };
+        recordTurnOutcome("turn_complete", { stopReason: acc.stopReason });
         return;
       }
       if (signal.aborted) {
@@ -7541,6 +7575,7 @@ ${recipeCtx}`;
         }
         this.addErrorResults(acc.pendingToolCalls, "Aborted");
         yield { type: "error", error: new Error("Aborted") };
+        recordTurnOutcome("error_aborted");
         return;
       }
       const approved = [];
@@ -7793,6 +7828,10 @@ ${recipeCtx}`;
         if (anyGuardBlocked) {
           this.messages.push({ role: "assistant", content: acc.assistantBlocks });
           this.messages.push({ role: "user", content: toolResultBlocks });
+          getTelemetrySink().counter("engine.turn_outcome", {
+            entry: freshPrompt !== null ? "submit" : "resume",
+            outcome: "guard_block_continue"
+          });
           continue;
         }
       } else {
@@ -7800,7 +7839,7 @@ ${recipeCtx}`;
       }
       if (guardPassedWrites.length > MAX_BUNDLE_OPS) {
         const cappedError = {
-          error: `Compound flows are capped at ${MAX_BUNDLE_OPS} atomic ops per bundle. You attempted ${guardPassedWrites.length}. Split into two sequential bundles (\u2264${MAX_BUNDLE_OPS} ops each) across two confirmation rounds. Tell the user "I'll do this in two steps \u2014 first <ops 1-${MAX_BUNDLE_OPS}>, then after that confirms, <remaining ops>" and emit only the first ${MAX_BUNDLE_OPS} writes for the first bundle.`,
+          error: `Atomic bundles are capped at ${MAX_BUNDLE_OPS} ops in Phase 0. You attempted ${guardPassedWrites.length}. Execute these as ${guardPassedWrites.length} sequential single-write transactions: tell the user "I'll do this in ${guardPassedWrites.length} steps", then emit only the FIRST write. After it lands and the user confirms each step, emit the next.`,
           _gate: "max_bundle_ops"
         };
         for (const write of guardPassedWrites) {
@@ -7820,6 +7859,10 @@ ${recipeCtx}`;
         }
         this.messages.push({ role: "assistant", content: acc.assistantBlocks });
         this.messages.push({ role: "user", content: toolResultBlocks });
+        getTelemetrySink().counter("engine.turn_outcome", {
+          entry: freshPrompt !== null ? "submit" : "resume",
+          outcome: "max_bundle_ops_continue"
+        });
         continue;
       }
       if (guardPassedWrites.length > 0) {
@@ -7827,6 +7870,41 @@ ${recipeCtx}`;
         const turnIndex = this.messages.filter((m) => m.role === "assistant").length;
         this.turnPaused = true;
         if (allBundleable) {
+          if (guardPassedWrites.length === 2) {
+            const producer = guardPassedWrites[0].call.name;
+            const consumer = guardPassedWrites[1].call.name;
+            const check = checkValidPair(producer, consumer);
+            if (!check.ok) {
+              const pairError = {
+                error: `Bundle pair '${check.pair}' is not in the Phase 0 chaining whitelist. Whitelisted pairs: ${[...VALID_PAIRS].join(", ")}. Run these two writes sequentially: tell the user "I'll do this in two steps", emit only the first write, then the second after it lands and confirms.`,
+                _gate: "pair_not_whitelisted"
+              };
+              for (const write of guardPassedWrites) {
+                yield {
+                  type: "tool_result",
+                  toolName: write.call.name,
+                  toolUseId: write.call.id,
+                  result: pairError,
+                  isError: true
+                };
+                toolResultBlocks.push({
+                  type: "tool_result",
+                  toolUseId: write.call.id,
+                  content: JSON.stringify(pairError),
+                  isError: true
+                });
+              }
+              this.turnPaused = false;
+              this.messages.push({ role: "assistant", content: acc.assistantBlocks });
+              this.messages.push({ role: "user", content: toolResultBlocks });
+              getTelemetrySink().counter("engine.turn_outcome", {
+                entry: freshPrompt !== null ? "submit" : "resume",
+                outcome: "pair_not_whitelisted_continue",
+                pair: check.pair
+              });
+              continue;
+            }
+          }
           const completedResults = toolResultBlocks.map((b) => ({
             toolUseId: b.toolUseId,
             content: b.content,
@@ -7842,6 +7920,7 @@ ${recipeCtx}`;
             turnIndex
           });
           yield { type: "pending_action", action: bundleAction };
+          recordTurnOutcome("pending_action_bundle");
           return;
         }
         const pendingWrite = guardPassedWrites[0];
@@ -7889,6 +7968,7 @@ ${recipeCtx}`;
             attemptId
           }
         };
+        recordTurnOutcome("pending_action_single");
         return;
       }
       this.messages.push({ role: "assistant", content: acc.assistantBlocks });
@@ -7900,10 +7980,12 @@ ${recipeCtx}`;
       }
       if (this.costTracker.isOverBudget()) {
         yield { type: "error", error: new Error("Session budget exceeded") };
+        recordTurnOutcome("error_budget");
         return;
       }
     }
     yield { type: "turn_complete", stopReason: "max_turns" };
+    recordTurnOutcome("max_turns");
   }
   // ---------------------------------------------------------------------------
   // Internal
@@ -9374,6 +9456,6 @@ function sanitizeAnthropicMessages(messages) {
   return merged;
 }
 
-export { AnthropicProvider, BalanceTracker, CANVAS_TEMPLATES, ContextBudget, CostTracker, DEFAULT_GUARD_CONFIG, DEFAULT_LEASE_SEC, DEFAULT_PERMISSION_CONFIG, DEFAULT_POLL_BUDGET_MS, DEFAULT_POLL_INTERVAL_MS, DEFAULT_SYSTEM_PROMPT, DEFAULT_TOOL_TTL_MS, EFFORT_THINKING_BUDGET_CAPS, EarlyToolDispatcher, InMemoryDefiCacheStore, InMemoryFetchLock, InMemoryNaviCacheStore, InMemoryWalletCacheStore, InvalidAddressError, MAX_BUNDLE_OPS, McpClientManager, McpResponseCache, MemorySessionStore, NAVI_ADDR_TTL_SEC, NAVI_MCP_CONFIG, NAVI_MCP_URL, NAVI_RATES_TTL_SEC, NAVI_SERVER_NAME, NaviTools, PERMISSION_PRESETS, QueryEngine, READ_TOOLS, REGENERATABLE_READ_TOOLS, RecipeRegistry, RetryTracker, SUINS_NAME_REGEX, SUI_ADDRESS_REGEX, SUI_ADDRESS_STRICT_REGEX, SuinsNotRegisteredError, SuinsRpcError, TOOL_FLAGS, TOOL_MODIFIABLE_FIELDS, TOOL_TTL_MS, TxMutex, WRITE_TOOLS, _resetNaviCircuitBreaker, activitySummaryTool, adaptAllMcpTools, adaptAllServerTools, adaptMcpTool, applyToolFlags, awaitOrFetch, balanceCheckTool, borrowTool, budgetToolResult, buildCachedSystemPrompt, buildMcpTools, buildProactivenessInstructions, buildProfileContext, buildSelfEvaluationInstruction, buildStateContext, buildTool, bundleShortestTtl, claimRewardsTool, clampThinkingForEffort, classifyEffort, clearPortfolioCache, clearPortfolioCacheFor, clearPriceMapCache, compactMessages, createGuardRunnerState, engineToSSE, estimateTokens, explainTxTool, extractConversationText, extractMcpText, fetchAddressDefiPortfolio, fetchAddressPortfolio, fetchAudricHistory, fetchAudricPortfolio, fetchAvailableRewards, fetchBalance, fetchHealthFactor, fetchPositions, fetchProtocolStats, fetchRates, fetchSavings, fetchTokenPrices, fetchWalletCoins, findTool, getAudricApiBase, getDefaultTools, getDefiCacheStore, getFetchLock, getMcpManager, getModifiableFields, getNaviCacheStore, getTelemetrySink, getToolFlags, getWalletAddress, getWalletCacheStore, guardArtifactPreview, guardStaleData, harnessShapeForEffort, hasNaviMcp, healthCheckTool, isBundleableTool, loadRecipes, looksLikeSuiNs, microcompact, mppServicesTool, naviKey, normalizeAddressInput, parseEvalSummary, parseMcpJson, parseRecipe, parseSSE, payApiTool, portfolioAnalysisTool, protocolDeepDiveTool, ratesInfoTool, regenerateBundle, registerEngineTools, renderCanvasTool, repayDebtTool, requireAgent, resetDefiCacheStore, resetFetchLock, resetNaviCacheStore, resetTelemetrySink, resetWalletCacheStore, resolveAddressToSuinsViaRpc, resolvePermissionTier, resolveSuinsTool, resolveSuinsViaRpc, resolveUsdValue, runGuards, runTools, saveContactTool, saveDepositTool, savingsInfoTool, sendTransferTool, serializeSSE, setDefiCacheStore, setFetchLock, setNaviCacheStore, setTelemetrySink, setWalletCacheStore, spendingAnalyticsTool, swapExecuteTool, swapQuoteTool, tokenPricesTool, toolNameToOperation, toolsToDefinitions, transactionHistoryTool, transformBalance, transformHealthFactor, transformPositions, transformRates, transformRewards, transformSavings, updateGuardStateAfterToolResult, updateTodoTool, validateHistory, voloStakeTool, voloStatsTool, voloUnstakeTool, webSearchTool, withdrawTool, yieldSummaryTool };
+export { AnthropicProvider, BalanceTracker, CANVAS_TEMPLATES, ContextBudget, CostTracker, DEFAULT_GUARD_CONFIG, DEFAULT_LEASE_SEC, DEFAULT_PERMISSION_CONFIG, DEFAULT_POLL_BUDGET_MS, DEFAULT_POLL_INTERVAL_MS, DEFAULT_SYSTEM_PROMPT, DEFAULT_TOOL_TTL_MS, EFFORT_THINKING_BUDGET_CAPS, EarlyToolDispatcher, InMemoryDefiCacheStore, InMemoryFetchLock, InMemoryNaviCacheStore, InMemoryWalletCacheStore, InvalidAddressError, MAX_BUNDLE_OPS, McpClientManager, McpResponseCache, MemorySessionStore, NAVI_ADDR_TTL_SEC, NAVI_MCP_CONFIG, NAVI_MCP_URL, NAVI_RATES_TTL_SEC, NAVI_SERVER_NAME, NaviTools, PERMISSION_PRESETS, QueryEngine, READ_TOOLS, REGENERATABLE_READ_TOOLS, RecipeRegistry, RetryTracker, SUINS_NAME_REGEX, SUI_ADDRESS_REGEX, SUI_ADDRESS_STRICT_REGEX, SuinsNotRegisteredError, SuinsRpcError, TOOL_FLAGS, TOOL_MODIFIABLE_FIELDS, TOOL_TTL_MS, TxMutex, VALID_PAIRS, WRITE_TOOLS, _resetNaviCircuitBreaker, activitySummaryTool, adaptAllMcpTools, adaptAllServerTools, adaptMcpTool, applyToolFlags, awaitOrFetch, balanceCheckTool, borrowTool, budgetToolResult, buildCachedSystemPrompt, buildMcpTools, buildProactivenessInstructions, buildProfileContext, buildSelfEvaluationInstruction, buildStateContext, buildTool, bundleShortestTtl, checkValidPair, claimRewardsTool, clampThinkingForEffort, classifyEffort, clearPortfolioCache, clearPortfolioCacheFor, clearPriceMapCache, compactMessages, createGuardRunnerState, engineToSSE, estimateTokens, explainTxTool, extractConversationText, extractMcpText, fetchAddressDefiPortfolio, fetchAddressPortfolio, fetchAudricHistory, fetchAudricPortfolio, fetchAvailableRewards, fetchBalance, fetchHealthFactor, fetchPositions, fetchProtocolStats, fetchRates, fetchSavings, fetchTokenPrices, fetchWalletCoins, findTool, getAudricApiBase, getDefaultTools, getDefiCacheStore, getFetchLock, getMcpManager, getModifiableFields, getNaviCacheStore, getTelemetrySink, getToolFlags, getWalletAddress, getWalletCacheStore, guardArtifactPreview, guardStaleData, harnessShapeForEffort, hasNaviMcp, healthCheckTool, isBundleableTool, loadRecipes, looksLikeSuiNs, microcompact, mppServicesTool, naviKey, normalizeAddressInput, parseEvalSummary, parseMcpJson, parseRecipe, parseSSE, payApiTool, portfolioAnalysisTool, protocolDeepDiveTool, ratesInfoTool, regenerateBundle, registerEngineTools, renderCanvasTool, repayDebtTool, requireAgent, resetDefiCacheStore, resetFetchLock, resetNaviCacheStore, resetTelemetrySink, resetWalletCacheStore, resolveAddressToSuinsViaRpc, resolvePermissionTier, resolveSuinsTool, resolveSuinsViaRpc, resolveUsdValue, runGuards, runTools, saveContactTool, saveDepositTool, savingsInfoTool, sendTransferTool, serializeSSE, setDefiCacheStore, setFetchLock, setNaviCacheStore, setTelemetrySink, setWalletCacheStore, spendingAnalyticsTool, swapExecuteTool, swapQuoteTool, tokenPricesTool, toolNameToOperation, toolsToDefinitions, transactionHistoryTool, transformBalance, transformHealthFactor, transformPositions, transformRates, transformRewards, transformSavings, updateGuardStateAfterToolResult, updateTodoTool, validateHistory, voloStakeTool, voloStatsTool, voloUnstakeTool, webSearchTool, withdrawTool, yieldSummaryTool };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map