modelrig 0.11.0 → 0.12.0

package/dist/registry/rows.js

@@ -10,6 +10,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.loadRegistryRows = loadRegistryRows;
 const node_fs_1 = require("node:fs");
 const node_path_1 = require("node:path");
+const model_kind_1 = require("./model-kind");
 function packagedRegistryDir() {
     // dist/ and src/ both sit one level under the package root.
     return (0, node_path_1.join)(__dirname, "..", "..", "registry");
@@ -38,7 +39,8 @@ function loadRegistryRows(registryPath) {
     const dir = registryFile.slice(0, Math.max(registryFile.lastIndexOf("/"), 0));
     const leaderboard = readJson((0, node_path_1.join)(dir, "leaderboard.json")) ?? [];
     const effective = new Map(leaderboard.map((r) => [r.model_key, r.effective_usd_per_1k_conformant ?? null]));
-    return (registry.models ?? []).map((entry) => {
+    // ARC-4 rank wall: declared-only generation models never enter selection.
+    return (registry.models ?? []).filter(model_kind_1.isRankable).map((entry) => {
         const [provider] = entry.model_key.split("/");
         return {
             key: entry.model_key,

package/dist/registry/unit-pricing.d.ts

@@ -0,0 +1,32 @@
+/**
+ * ARC-4 — the registry half of unit pricing: a DECLARED-ONLY generation entry's
+ * `pricing_v2.modality` unit rates, read from the packaged registry.json. Only
+ * a non-`llm` entry (model-kind.ts) whose modality carries `provenance` (source
+ * + as_of) answers; anything else is "no registry price" and the caller falls
+ * through to the vendored pricing map (run/cost.ts `estimateUnitCostUsd`).
+ */
+import { type GenerationKind } from "./model-kind";
+import type { ModalityRates } from "./pricing-shape";
+export interface RegistryUnitRates {
+    readonly modelKey: string;
+    readonly kind: GenerationKind;
+    readonly modality: ModalityRates;
+}
+interface RegistryEntryShape {
+    readonly model_key?: unknown;
+    readonly kind?: unknown;
+    readonly declared?: {
+        readonly pricing_v2?: {
+            readonly modality?: ModalityRates | null;
+        } | null;
+    } | null;
+}
+/** Build the lookup from registry entries (exported for tests and the registry
+ * drift test). */
+export declare function unitRatesIndex(models: readonly RegistryEntryShape[]): Map<string, RegistryUnitRates>;
+/** The registry's unit rates for `provider/model`, or null. */
+export declare function getRegistryUnitRates(provider: string, model: string): RegistryUnitRates | null;
+/** Test-only: replace (or with null, reset) the loaded registry index. */
+export declare function setRegistryUnitRatesForTest(models: readonly RegistryEntryShape[] | null): void;
+export {};
+//# sourceMappingURL=unit-pricing.d.ts.map

package/dist/registry/unit-pricing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"unit-pricing.d.ts","sourceRoot":"","sources":["../../src/registry/unit-pricing.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,EAAe,KAAK,cAAc,EAAE,MAAM,cAAc,CAAC;AAChE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAErD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;CAClC;AAED,UAAU,kBAAkB;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,QAAQ,CAAC,EAAE;QAAE,QAAQ,CAAC,UAAU,CAAC,EAAE;YAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,aAAa,GAAG,IAAI,CAAA;SAAE,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;CAC1G;AAcD;kBACkB;AAClB,wBAAgB,cAAc,CAAC,MAAM,EAAE,SAAS,kBAAkB,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,CASpG;AAkBD,+DAA+D;AAC/D,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,iBAAiB,GAAG,IAAI,CAE9F;AAED,0EAA0E;AAC1E,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,SAAS,kBAAkB,EAAE,GAAG,IAAI,GAAG,IAAI,CAE9F"}

package/dist/registry/unit-pricing.js

@@ -0,0 +1,62 @@
+"use strict";
+/**
+ * ARC-4 — the registry half of unit pricing: a DECLARED-ONLY generation entry's
+ * `pricing_v2.modality` unit rates, read from the packaged registry.json. Only
+ * a non-`llm` entry (model-kind.ts) whose modality carries `provenance` (source
+ * + as_of) answers; anything else is "no registry price" and the caller falls
+ * through to the vendored pricing map (run/cost.ts `estimateUnitCostUsd`).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.unitRatesIndex = unitRatesIndex;
+exports.getRegistryUnitRates = getRegistryUnitRates;
+exports.setRegistryUnitRatesForTest = setRegistryUnitRatesForTest;
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+const model_kind_1 = require("./model-kind");
+let cached = null;
+function packagedRegistryPath() {
+    // dist/ and src/ both sit one level under the package root.
+    return (0, node_path_1.join)(__dirname, "..", "..", "registry", "registry.json");
+}
+function hasProvenance(m) {
+    const p = m?.provenance;
+    return p != null && typeof p.source === "string" && p.source !== "" && typeof p.as_of === "string" && p.as_of !== "";
+}
+/** Build the lookup from registry entries (exported for tests and the registry
+ * drift test). */
+function unitRatesIndex(models) {
+    const out = new Map();
+    for (const e of models) {
+        if (typeof e.model_key !== "string" || !(0, model_kind_1.isModelKind)(e.kind) || e.kind === "llm")
+            continue;
+        const modality = e.declared?.pricing_v2?.modality;
+        if (!hasProvenance(modality))
+            continue;
+        out.set(e.model_key, { modelKey: e.model_key, kind: e.kind, modality });
+    }
+    return out;
+}
+function load() {
+    if (cached === null) {
+        const path = packagedRegistryPath();
+        let models = [];
+        if ((0, node_fs_1.existsSync)(path)) {
+            try {
+                models = (JSON.parse((0, node_fs_1.readFileSync)(path, "utf8")).models ?? []);
+            }
+            catch {
+                models = []; // an unreadable registry is "no registry price", never a throw
+            }
+        }
+        cached = unitRatesIndex(models);
+    }
+    return cached;
+}
+/** The registry's unit rates for `provider/model`, or null. */
+function getRegistryUnitRates(provider, model) {
+    return load().get(`${provider}/${model}`) ?? null;
+}
+/** Test-only: replace (or with null, reset) the loaded registry index. */
+function setRegistryUnitRatesForTest(models) {
+    cached = models === null ? null : unitRatesIndex(models);
+}

package/dist/routes/input-loader.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Route INPUT contract at load — ARC-β messages lane (builder-prompt-02 §1.3).
+ * Carved out of routes/loader.ts (near the 700-LOC cap), like output-loader.ts.
+ *
+ * YAML forms accepted for `input:`:
+ *   (absent)                    → variables (the default; byte-identical)
+ *   input: variables            → variables (explicit; identical to absent)
+ *   input: messages             → a chat / tool-loop route
+ *   input: { kind: messages }   → same
+ *   input: { kind: variables }  → variables
+ *
+ * The parsed result OMITS `inputKind` for variables so an existing route's
+ * bundle (and its `bundle_sha`) is unchanged; only `messages` is ever carried.
+ *
+ * Fail-closed pairing: `repair:` re-asks without the conversation (ruling M1);
+ * `mask:` and `screen:` operate on the rendered user slot
+ * and the declared untrusted variables — they do not yet see caller history.
+ * Rather than serve a conversation the guard cannot read, a messages route that
+ * declares either is a LOAD error that says so.
+ */
+export declare const INPUT_KINDS: ReadonlySet<string>;
+export interface ParsedInputBlock {
+    /** Present ONLY for `messages` (variables ⇒ omitted ⇒ byte-identical bundle). */
+    readonly inputKind?: "messages";
+}
+export interface InputBlockContext {
+    readonly maskDeclared: boolean;
+    readonly screenDeclared: boolean;
+    /** A `repair:` rung on the route or any variant (architect ruling M1). */
+    readonly repairDeclared: boolean;
+}
+/** The teaching problem for a messages route that also declares mask/screen —
+ * shared by the loader and the run-time guard (mirror bundles skip the loader). */
+export declare function messagesGuardConflict(ctx: InputBlockContext): string | null;
+/** Parse the bundle's `input:` key. Pushes teaching problems; returns `{}` for
+ * variables (absent / explicit) so the bundle spread adds nothing. */
+export declare function parseInputBlock(raw: unknown, ctx: InputBlockContext, problems: string[]): ParsedInputBlock;
+//# sourceMappingURL=input-loader.d.ts.map

package/dist/routes/input-loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"input-loader.d.ts","sourceRoot":"","sources":["../../src/routes/input-loader.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,eAAO,MAAM,WAAW,EAAE,WAAW,CAAC,MAAM,CAAsC,CAAC;AAGnF,MAAM,WAAW,gBAAgB;IAC/B,iFAAiF;IACjF,QAAQ,CAAC,SAAS,CAAC,EAAE,UAAU,CAAC;CACjC;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,0EAA0E;IAC1E,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;CAClC;AAMD;mFACmF;AACnF,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,iBAAiB,GAAG,MAAM,GAAG,IAAI,CAkB3E;AAED;sEACsE;AACtE,wBAAgB,eAAe,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,gBAAgB,CAyB1G"}

package/dist/routes/input-loader.js

@@ -0,0 +1,80 @@
+"use strict";
+/**
+ * Route INPUT contract at load — ARC-β messages lane (builder-prompt-02 §1.3).
+ * Carved out of routes/loader.ts (near the 700-LOC cap), like output-loader.ts.
+ *
+ * YAML forms accepted for `input:`:
+ *   (absent)                    → variables (the default; byte-identical)
+ *   input: variables            → variables (explicit; identical to absent)
+ *   input: messages             → a chat / tool-loop route
+ *   input: { kind: messages }   → same
+ *   input: { kind: variables }  → variables
+ *
+ * The parsed result OMITS `inputKind` for variables so an existing route's
+ * bundle (and its `bundle_sha`) is unchanged; only `messages` is ever carried.
+ *
+ * Fail-closed pairing: `repair:` re-asks without the conversation (ruling M1);
+ * `mask:` and `screen:` operate on the rendered user slot
+ * and the declared untrusted variables — they do not yet see caller history.
+ * Rather than serve a conversation the guard cannot read, a messages route that
+ * declares either is a LOAD error that says so.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.INPUT_KINDS = void 0;
+exports.messagesGuardConflict = messagesGuardConflict;
+exports.parseInputBlock = parseInputBlock;
+exports.INPUT_KINDS = new Set(["variables", "messages"]);
+const INPUT_BLOCK_KEYS = new Set(["kind"]);
+function isRecord(v) {
+    return typeof v === "object" && v !== null && !Array.isArray(v);
+}
+/** The teaching problem for a messages route that also declares mask/screen —
+ * shared by the loader and the run-time guard (mirror bundles skip the loader). */
+function messagesGuardConflict(ctx) {
+    // Architect ruling M1 (2026-10-24): the repair rung re-asks WITHOUT the
+    // conversation, so on a messages route it would answer a turn it cannot see —
+    // refused rather than served a context-free "corrected" reply.
+    if (ctx.repairDeclared) {
+        return ("input: messages cannot be combined with repair: — the repair rung re-asks the model without the " +
+            "conversation, so a repaired reply would answer a turn it cannot see. Remove repair: (route and variants) " +
+            "from this route; an invalid reply is retried from the content_invalid budget instead (see messages-lane.md)");
+    }
+    const which = [ctx.maskDeclared ? "mask:" : null, ctx.screenDeclared ? "screen:" : null].filter((x) => x !== null);
+    if (which.length === 0)
+        return null;
+    return (`input: messages cannot be combined with ${which.join(" / ")} yet — masking and screening read the rendered ` +
+        "user slot and declared variables, not caller history, so the conversation would pass unguarded. Remove " +
+        `${which.join(" / ")} from this route, or serve the content as variables (see messages-lane.md)`);
+}
+/** Parse the bundle's `input:` key. Pushes teaching problems; returns `{}` for
+ * variables (absent / explicit) so the bundle spread adds nothing. */
+function parseInputBlock(raw, ctx, problems) {
+    if (raw === undefined || raw === null)
+        return {};
+    let kind;
+    if (typeof raw === "string") {
+        kind = raw;
+    }
+    else if (isRecord(raw)) {
+        for (const key of Object.keys(raw)) {
+            if (!INPUT_BLOCK_KEYS.has(key))
+                problems.push(`input.${key} is not a known key — the block is {kind: variables|messages}`);
+        }
+        kind = raw.kind;
+    }
+    else {
+        problems.push(`input must be "variables", "messages", or {kind} — got ${JSON.stringify(raw)}`);
+        return {};
+    }
+    if (typeof kind !== "string" || !exports.INPUT_KINDS.has(kind)) {
+        problems.push(`input kind "${String(kind)}" is not one of [variables, messages] — write \`input: { kind: messages }\` for a ` +
+            "chat or tool-loop route, or omit it for a variables route (the default)");
+        return {};
+    }
+    if (kind === "variables")
+        return {};
+    const conflict = messagesGuardConflict(ctx);
+    if (conflict !== null)
+        problems.push(conflict);
+    return { inputKind: "messages" };
+}

package/dist/routes/loader.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"loader.d.ts","sourceRoot":"","sources":["../../src/routes/loader.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AASH,OAAO,KAAK,EAKV,WAAW,EAGZ,MAAM,gBAAgB,CAAC;AAaxB,OAAO,EAAE,sBAAsB,EAAE,kCAAkC,EAAE,8BAA8B,EAAE,MAAM,mBAAmB,CAAC;AAE/H;;;;;GAKG;AACH,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;gBAEzB,OAAO,EAAE,MAAM,EAAE,IAAI,GAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;KAAO;CAOxF;AA+BD,MAAM,WAAW,YAAY;IAC3B,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,WAAW,CAAC;IAChC,IAAI,IAAI,SAAS,WAAW,EAAE,CAAC;CAChC;AA2aD;;;;;;;GAOG;AACH;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,YAAY,CAItF;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,YAAY,GAAG,YAAY,CAyB1F;AAED;;yBAEyB;AACzB,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;CACtC;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,eAAe,EAAE,CA6CtE;AAED,wBAAgB,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,YAAY,CA2C1D"}
+{"version":3,"file":"loader.d.ts","sourceRoot":"","sources":["../../src/routes/loader.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AASH,OAAO,KAAK,EAKV,WAAW,EAGZ,MAAM,gBAAgB,CAAC;AAcxB,OAAO,EAAE,sBAAsB,EAAE,kCAAkC,EAAE,8BAA8B,EAAE,MAAM,mBAAmB,CAAC;AAE/H;;;;;GAKG;AACH,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;gBAEzB,OAAO,EAAE,MAAM,EAAE,IAAI,GAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;KAAO;CAOxF;AA+BD,MAAM,WAAW,YAAY;IAC3B,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,WAAW,CAAC;IAChC,IAAI,IAAI,SAAS,WAAW,EAAE,CAAC;CAChC;AA6aD;;;;;;;GAOG;AACH;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,YAAY,CAItF;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,YAAY,GAAG,YAAY,CAyB1F;AAED;;yBAEyB;AACzB,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;CACtC;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,eAAe,EAAE,CA6CtE;AAED,wBAAgB,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,YAAY,CA2C1D"}

package/dist/routes/loader.js

@@ -24,6 +24,7 @@ const screen_loader_1 = require("./screen-loader");
 const prompt_loader_1 = require("./prompt-loader"); // issue #5 (R1): `prompt.user` + the prompt block (moved out for the LOC cap)
 const mask_loader_1 = require("./mask-loader");
 const objective_loader_1 = require("./objective-loader");
+const input_loader_1 = require("./input-loader");
 const output_loader_1 = require("./output-loader"); // issue #1: `output: text` (prose) + the schema reader (moved out for the LOC cap)
 // Re-exported so existing importers of "./loader" keep resolving these advisories
 // (they live in ./loader-warnings to hold loader.ts under the 700-LOC cap).
@@ -392,6 +393,7 @@ function loadBundleFile(filePath) {
     // x-trust) — parsed in prompt-loader.ts; both templates are files relative to
     // the bundle and share one declared-variable list.
     const { systemTemplate, userTemplate, variables, variableTrust } = (0, prompt_loader_1.parsePromptBlock)(doc.prompt, bundleDir, problems);
+    const input = (0, input_loader_1.parseInputBlock)(doc.input, { maskDeclared: mask !== undefined, screenDeclared: screen !== undefined, repairDeclared: repair !== undefined || variants.some((v) => v.repair !== undefined) }, problems); // ARC-β `input: messages` (input-loader.ts)
     (0, screen_loader_1.pushUndeclaredVariableProblems)(systemTemplate, groundingQuery, variables, problems, userTemplate);
     if (problems.length > 0) {
         throw new RouteConfigError("invalid route bundle", { file: filePath, problems });
@@ -443,6 +445,7 @@ function loadBundleFile(filePath) {
         prefer: Object.freeze(prefer),
         systemTemplate,
         ...(userTemplate !== undefined ? { userTemplate } : {}), // issue #5 (R1): present ONLY when declared (absent ⇒ unchanged bundle_sha)
+        ...input, // ARC-β inputKind — present ONLY for `input: messages` (variables ⇒ nothing added)
         variables: Object.freeze(variables),
         policy,
         ...(repair !== undefined ? { repair } : {}),

package/dist/routes/resolved-bundle.d.ts

@@ -56,6 +56,8 @@ export interface ResolvedRouteBundle {
      * `bundle_sha`), so the hosted/mirror lane renders the same user turn and a
      * cache handle composes there too. */
     readonly userTemplate?: string;
+    /** ARC-β — `input: messages`, carried ONLY when declared (unchanged `bundle_sha` otherwise). */
+    readonly inputKind?: "messages";
     readonly variables: readonly string[];
     readonly policy: RoutePolicy;
     readonly repair?: RepairPolicy;

package/dist/routes/resolved-bundle.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resolved-bundle.d.ts","sourceRoot":"","sources":["../../src/routes/resolved-bundle.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAIH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAG7C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,KAAK,EACV,aAAa,EACb,UAAU,EACV,YAAY,EACZ,WAAW,EACX,WAAW,EACX,WAAW,EACX,YAAY,EACb,MAAM,gBAAgB,CAAC;AAExB;;;;;GAKG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,iFAAiF;IACjF,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC;;;+EAG2E;IAC3E,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,UAAU,EAAE,SAAS,aAAa,EAAE,CAAC;IAC9C,QAAQ,CAAC,OAAO,EAAE,SAAS,WAAW,EAAE,CAAC;IACzC,QAAQ,CAAC,MAAM,EAAE,SAAS,UAAU,EAAE,CAAC;IACvC,4DAA4D;IAC5D,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC;;;0CAGsC;IACtC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,SAAS,YAAY,EAAE,CAAC;IAC3C,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC;iFAC6E;IAC7E,QAAQ,CAAC,iBAAiB,CAAC,EAAE,QAAQ,GAAG,WAAW,CAAC;IACpD;;;;2BAIuB;IACvB,QAAQ,CAAC,aAAa,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;IAC/D;;;;;;;;;;;mBAWe;IACf,QAAQ,CAAC,YAAY,CAAC,EAAE,YAAY,CAAC;IACrC;;;;;;;mCAO+B;IAC/B,QAAQ,CAAC,IAAI,CAAC,EAAE,kBAAkB,CAAC;IACnC;;;;;oEAKgE;IAChE,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC;CAC9B;AAED;sEACsE;AACtE,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,WAAW,GAAG,mBAAmB,CA8B3E;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,WAAW,GAAG,IAAI,CAe1D;AAiBD,mEAAmE;AACnE,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,mBAAmB,GAAG,MAAM,CAEvE;AAED;gFACgF;AAChF,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,mBAAmB,GAAG,MAAM,CAEtE;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,OAAO,GAAG,WAAW,CAoE5D;AAED;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,WAAW,GAAG,YAAY,CAclE"}
+{"version":3,"file":"resolved-bundle.d.ts","sourceRoot":"","sources":["../../src/routes/resolved-bundle.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAIH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAG7C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,KAAK,EACV,aAAa,EACb,UAAU,EACV,YAAY,EACZ,WAAW,EACX,WAAW,EACX,WAAW,EACX,YAAY,EACb,MAAM,gBAAgB,CAAC;AAExB;;;;;GAKG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,iFAAiF;IACjF,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC;;;+EAG2E;IAC3E,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,UAAU,EAAE,SAAS,aAAa,EAAE,CAAC;IAC9C,QAAQ,CAAC,OAAO,EAAE,SAAS,WAAW,EAAE,CAAC;IACzC,QAAQ,CAAC,MAAM,EAAE,SAAS,UAAU,EAAE,CAAC;IACvC,4DAA4D;IAC5D,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC;;;0CAGsC;IACtC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,gGAAgG;IAChG,QAAQ,CAAC,SAAS,CAAC,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,SAAS,YAAY,EAAE,CAAC;IAC3C,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC;iFAC6E;IAC7E,QAAQ,CAAC,iBAAiB,CAAC,EAAE,QAAQ,GAAG,WAAW,CAAC;IACpD;;;;2BAIuB;IACvB,QAAQ,CAAC,aAAa,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;IAC/D;;;;;;;;;;;mBAWe;IACf,QAAQ,CAAC,YAAY,CAAC,EAAE,YAAY,CAAC;IACrC;;;;;;;mCAO+B;IAC/B,QAAQ,CAAC,IAAI,CAAC,EAAE,kBAAkB,CAAC;IACnC;;;;;oEAKgE;IAChE,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC;CAC9B;AAED;sEACsE;AACtE,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,WAAW,GAAG,mBAAmB,CA+B3E;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,WAAW,GAAG,IAAI,CAe1D;AAiBD,mEAAmE;AACnE,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,mBAAmB,GAAG,MAAM,CAEvE;AAED;gFACgF;AAChF,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,mBAAmB,GAAG,MAAM,CAEtE;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,OAAO,GAAG,WAAW,CAsE5D;AAED;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,WAAW,GAAG,YAAY,CAclE"}

package/dist/routes/resolved-bundle.js

@@ -51,6 +51,7 @@ function resolveRouteBundle(bundle) {
         prefer: bundle.prefer,
         systemTemplate: bundle.systemTemplate,
         ...(bundle.userTemplate !== undefined ? { userTemplate: bundle.userTemplate } : {}), // issue #5 (R1)
+        ...(bundle.inputKind === "messages" ? { inputKind: "messages" } : {}), // ARC-β
         variables: bundle.variables,
         policy: bundle.policy,
         ...(bundle.repair !== undefined ? { repair: bundle.repair } : {}),
@@ -174,6 +175,8 @@ function bundleFromResolved(raw) {
         // Issue #5 (R1): a mirrored `prompt.user` rebuilds as the user turn; anything
         // but a non-empty string ⇒ absent ⇒ the fixed trigger (byte-identical).
         ...(typeof b.userTemplate === "string" && b.userTemplate !== "" ? { userTemplate: b.userTemplate } : {}),
+        // ARC-β: only the literal "messages" rebuilds a messages route (anything else ⇒ variables).
+        ...(b.inputKind === "messages" ? { inputKind: "messages" } : {}),
         variables: Object.freeze([...(b.variables ?? [])]),
         policy: b.policy,
         ...(b.repair !== undefined ? { repair: b.repair } : {}),

package/dist/run/cost.d.ts

@@ -20,6 +20,7 @@
  * WITHOUT a served tier and so prices at base. That is a money path and is
  * deliberately not changed alongside this; tracked for the next money-path MR.
  */
+import type { RecordedUnits, UnitKey } from "../telemetry/attempt-meta";
 import type { ModelPricing } from "../registry/pricing";
 import type { AdapterUsage, ProviderId, ServiceTier } from "../types/provider";
 /** The `servedTier` an attempt reports, when the caller has it — optional so
@@ -64,5 +65,32 @@ export declare function costComponents(provider: ProviderId, model: string, usag
 /** Pre-dispatch upper-bound estimate for the envelope precheck: prompt
  * length + the full output bound, at real pricing or the conservative rate. */
 export declare function dispatchEstimateUsd(provider: ProviderId, model: string, promptChars: number, unpricedRatePerTok: number): number;
+/** Where a unit price came from. */
+export type UnitPriceSource = "registry" | "pricing-map";
+export interface UnitCost {
+    /** USD for the call's BILLED unit; 0 when unpriced. */
+    readonly costUsd: number;
+    /** True when the call reported units ModelRig cannot price (never guessed). */
+    readonly pricingMissing: boolean;
+    /** The unit the price applies to (one per model — the others are recorded,
+     * not priced, so a TTS call's seconds never double-bill its characters). */
+    readonly billedUnit: UnitKey | null;
+    readonly usdPerUnit: number | null;
+    readonly source: UnitPriceSource | null;
+}
+/**
+ * ARC-4 — the list-price cost of a call's non-token units. The chain, first
+ * hit wins (dev-rule L5 — never guessed, NEVER synthesized from token rates):
+ *   1. the registry: a declared generation entry's `pricing_v2.modality` unit
+ *      rate, which must carry provenance (source + as_of);
+ *   2. the vendored LiteLLM pricing map's per-mode unit key;
+ *   3. else `pricingMissing: true`, cost 0.
+ * Each model bills ONE unit (its kind / mode decides which); other units are
+ * recorded on `meta.units` but not priced. A call whose billed unit is absent
+ * or zero while it reports other units is `pricingMissing` (we cannot price what
+ * it reported). `steps` is never billed. No units (or all zero) ⇒ $0, not
+ * missing. Pure apart from the cached registry/map reads.
+ */
+export declare function estimateUnitCostUsd(provider: string, model: string, units: RecordedUnits | undefined): UnitCost;
 export {};
 //# sourceMappingURL=cost.d.ts.map

package/dist/run/cost.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cost.d.ts","sourceRoot":"","sources":["../../src/run/cost.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAGxD,OAAO,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAS/E;uEACuE;AACvE,KAAK,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,CAAC;AAE3D;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,UAAU,EACpB,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,WAAW,GAAG,SAAS,GAClC,YAAY,GAAG,IAAI,CAiBrB;AAED,eAAO,MAAM,wBAAwB,IAAI,CAAC;AAC1C,eAAO,MAAM,0BAA0B,QAAS,CAAC;AAEjD;;yEAEyE;AACzE,eAAO,MAAM,kCAAkC,MAAM,CAAC;AAEtD,MAAM,WAAW,WAAW;IAC1B,kEAAkE;IAClE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,uEAAuE;IACvE,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;CAClC;AAED,wBAAgB,WAAW,CACzB,QAAQ,EAAE,UAAU,EACpB,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,YAAY,EACnB,kBAAkB,EAAE,MAAM,GACzB,WAAW,CAoBb;AAED;;;;;4EAK4E;AAC5E,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,UAAU,EACpB,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,IAAI,CACT,YAAY,EACZ,UAAU,GAAG,WAAW,GAAG,cAAc,GAAG,kBAAkB,GAAG,oBAAoB,CACtF,GACC,SAAS,GACV;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAmB5F;AAED;+EAC+E;AAC/E,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,UAAU,EACpB,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,EACnB,kBAAkB,EAAE,MAAM,GACzB,MAAM,CAOR"}
+{"version":3,"file":"cost.d.ts","sourceRoot":"","sources":["../../src/run/cost.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAIH,OAAO,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,2BAA2B,CAAC;AACxE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAGxD,OAAO,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAS/E;uEACuE;AACvE,KAAK,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,CAAC;AAE3D;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,UAAU,EACpB,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,WAAW,GAAG,SAAS,GAClC,YAAY,GAAG,IAAI,CAiBrB;AAED,eAAO,MAAM,wBAAwB,IAAI,CAAC;AAC1C,eAAO,MAAM,0BAA0B,QAAS,CAAC;AAEjD;;yEAEyE;AACzE,eAAO,MAAM,kCAAkC,MAAM,CAAC;AAEtD,MAAM,WAAW,WAAW;IAC1B,kEAAkE;IAClE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,uEAAuE;IACvE,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;CAClC;AAED,wBAAgB,WAAW,CACzB,QAAQ,EAAE,UAAU,EACpB,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,YAAY,EACnB,kBAAkB,EAAE,MAAM,GACzB,WAAW,CAoBb;AAED;;;;;4EAK4E;AAC5E,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,UAAU,EACpB,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,IAAI,CACT,YAAY,EACZ,UAAU,GAAG,WAAW,GAAG,cAAc,GAAG,kBAAkB,GAAG,oBAAoB,CACtF,GACC,SAAS,GACV;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAmB5F;AAED;+EAC+E;AAC/E,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,UAAU,EACpB,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,EACnB,kBAAkB,EAAE,MAAM,GACzB,MAAM,CAOR;AAID,oCAAoC;AACpC,MAAM,MAAM,eAAe,GAAG,UAAU,GAAG,aAAa,CAAC;AAEzD,MAAM,WAAW,QAAQ;IACvB,uDAAuD;IACvD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,+EAA+E;IAC/E,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC;gFAC4E;IAC5E,QAAQ,CAAC,UAAU,EAAE,OAAO,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,MAAM,EAAE,eAAe,GAAG,IAAI,CAAC;CACzC;AAiDD;;;;;;;;;;;;GAYG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,GAAG,SAAS,GAAG,QAAQ,CAc/G"}

package/dist/run/cost.js

@@ -27,7 +27,9 @@ exports.pricingForServedTier = pricingForServedTier;
 exports.attemptCost = attemptCost;
 exports.costComponents = costComponents;
 exports.dispatchEstimateUsd = dispatchEstimateUsd;
+exports.estimateUnitCostUsd = estimateUnitCostUsd;
 const pricing_1 = require("../registry/pricing");
+const unit_pricing_1 = require("../registry/unit-pricing");
 const pricing_shape_1 = require("../registry/pricing-shape");
 /** The served tiers that carry their own published rates (issue #2). `standard`
  * is `base` by definition; an unlisted tier bills at base (fail-closed, L5). */
@@ -121,3 +123,75 @@ function dispatchEstimateUsd(provider, model, promptChars, unpricedRatePerTok) {
     }
     return (0, pricing_1.estimateCostUsd)(pricing, promptTokens, exports.ESTIMATE_MAX_OUTPUT_TOKENS, 0);
 }
+/** The registry profile of a declared generation model: its kind names the
+ * billed unit; the rate is the matching `pricing_v2.modality` field. */
+function registryProfile(provider, model) {
+    const r = (0, unit_pricing_1.getRegistryUnitRates)(provider, model);
+    if (r === null)
+        return null;
+    const m = r.modality;
+    switch (r.kind) {
+        case "image_gen":
+            return { billedUnit: "images", usdPerUnit: m.image_per_unit ?? null };
+        case "video_gen":
+            return { billedUnit: "seconds", usdPerUnit: m.video_per_second ?? null };
+        case "tts":
+            return m.characters_per_million != null
+                ? { billedUnit: "characters", usdPerUnit: m.characters_per_million / 1000000 }
+                : { billedUnit: "seconds", usdPerUnit: m.audio_per_second ?? null };
+        case "stt":
+            return { billedUnit: "seconds", usdPerUnit: m.audio_per_second ?? null };
+    }
+}
+/** The vendored pricing map's profile, by LiteLLM mode (pricing.ts
+ * `getMapUnitRates` documents which key is the billed unit per mode). */
+function mapProfile(provider, model) {
+    const r = (0, pricing_1.getMapUnitRates)(provider, model);
+    if (r === null)
+        return null;
+    switch (r.mode) {
+        case "image_generation":
+            return { billedUnit: "images", usdPerUnit: r.perImage };
+        case "video_generation":
+        case "audio_transcription":
+            return { billedUnit: "seconds", usdPerUnit: r.perSecond };
+        case "audio_speech":
+            return r.perCharacter !== null
+                ? { billedUnit: "characters", usdPerUnit: r.perCharacter }
+                : { billedUnit: "seconds", usdPerUnit: r.perSecond };
+        default:
+            return null;
+    }
+}
+const UNPRICED = { costUsd: 0, pricingMissing: true, billedUnit: null, usdPerUnit: null, source: null };
+/**
+ * ARC-4 — the list-price cost of a call's non-token units. The chain, first
+ * hit wins (dev-rule L5 — never guessed, NEVER synthesized from token rates):
+ *   1. the registry: a declared generation entry's `pricing_v2.modality` unit
+ *      rate, which must carry provenance (source + as_of);
+ *   2. the vendored LiteLLM pricing map's per-mode unit key;
+ *   3. else `pricingMissing: true`, cost 0.
+ * Each model bills ONE unit (its kind / mode decides which); other units are
+ * recorded on `meta.units` but not priced. A call whose billed unit is absent
+ * or zero while it reports other units is `pricingMissing` (we cannot price what
+ * it reported). `steps` is never billed. No units (or all zero) ⇒ $0, not
+ * missing. Pure apart from the cached registry/map reads.
+ */
+function estimateUnitCostUsd(provider, model, units) {
+    const any = units !== undefined && Object.values(units).some((v) => typeof v === "number" && v > 0);
+    if (!any || units === undefined)
+        return { costUsd: 0, pricingMissing: false, billedUnit: null, usdPerUnit: null, source: null };
+    const candidates = [
+        ["registry", registryProfile(provider, model)],
+        ["pricing-map", mapProfile(provider, model)],
+    ];
+    for (const [source, profile] of candidates) {
+        if (profile === null || profile.usdPerUnit === null)
+            continue;
+        const count = units[profile.billedUnit] ?? 0;
+        if (count <= 0)
+            return { ...UNPRICED, billedUnit: profile.billedUnit, source };
+        return { costUsd: count * profile.usdPerUnit, pricingMissing: false, billedUnit: profile.billedUnit, usdPerUnit: profile.usdPerUnit, source };
+    }
+    return UNPRICED;
+}

package/dist/run/dispatch.d.ts

@@ -8,7 +8,7 @@
  * Tool *execution* is never ours (spec §4.4); these helpers normalize the
  * protocol and surface it — nothing here runs a tool.
  */
-import type { AdapterRequest, AdapterResult, CandidateRef, ProviderAdapter, ServiceTier, ToolDefinition } from "../types/provider";
+import type { AdapterRequest, AdapterResult, CandidateRef, ProviderAdapter, ServiceTier, ToolCall, ToolDefinition } from "../types/provider";
 import type { RigFailure } from "../types/failures";
 import type { OutputKind, RouteBundle, RunMeta, RunOptions, RunResult, RunTags } from "../types/route";
 import type { TelemetryRung, TelemetryStore } from "../types/telemetry";
@@ -53,6 +53,9 @@ export interface AttemptTelemetry {
      * `summarizeAttemptMeta` with this row's provider/model/usage. Absent ⇒ the
      * recorder builds a minimal envelope from usage + cost alone (never null-only). */
     readonly metaInputs?: AttemptMetaSource;
+    /** ARC-5: the tool calls the model requested on this attempt (tool-call path
+     * only) — hashed by the run-limit repeat detector, never stored. */
+    readonly toolCalls?: readonly ToolCall[];
     /** SDK-owned extra telemetry tags merged onto the row (Q1 quality gate stamps
      * `quality` / `quality_score` here). Never carries `rung` — the recorder
      * stamps that last so a caller cannot override it. */

package/dist/run/dispatch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dispatch.d.ts","sourceRoot":"","sources":["../../src/run/dispatch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EACV,cAAc,EACd,aAAa,EACb,YAAY,EACZ,eAAe,EACf,WAAW,EACX,cAAc,EACf,MAAM,mBAAmB,CAAC;AAG3B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AACvG,OAAO,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACxE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAKnE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAEjD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACrE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAkB,KAAK,QAAQ,EAAE,MAAM,cAAc,CAAC;AAC7D,OAAO,EAAsD,KAAK,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAExG,OAAO,KAAK,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAG3E;oEACoE;AACpE,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC;IACjC;wEACoE;IACpE,QAAQ,CAAC,UAAU,EAAE,WAAW,CAAC;IACjC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B;6DACyD;IACzD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;0BACsB;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,CAAC;IACpC,6EAA6E;IAC7E,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,2EAA2E;IAC3E,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAClC;;gEAE4D;IAC5D,QAAQ,CAAC,IAAI,CAAC,EAAE,aAAa,CAAC;IAC9B;;;uFAGmF;IACnF,QAAQ,CAAC,UAAU,CAAC,EAAE,iBAAiB,CAAC;IACxC;;0DAEsD;IACtD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5C;;6EAEyE;IACzE,QAAQ,CAAC,IAAI,CAAC,EAAE,WAAW,CAAC;IAC5B;;;8BAG0B;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC;CACjC;AAED;;;+DAG+D;AAC/D,wBAAgB,iBAAiB,CAAC,IAAI,EAAE;IACtC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC;;+EAE2E;IAC3E,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;IAC7C,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;CAC5C,GAAG,iBAAiB,CAYpB;AAED;gEACgE;AAChE,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,EAAE,gBAAgB,KAAK,MAAM,CAAC;AAElE;;;;;;;;;;GAUG;AACH,wBAAgB,cAAc,CAAC,WAAW,EAAE,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAE/E;AAED;;4EAE4E;AAC5E,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,cAAc,EACzB,KAAK,EAAE,WAAW,EAClB,aAAa,EAAE,OAAO,EACtB,aAAa,EAAE,MAAM,GAAG,IAAI,EAC5B,gBAAgB,EAAE,MAAM,EACxB,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,eAAe,GACtB,IAAI,CAyCN;AAED;;8EAE8E;AAC9E,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAYvD;AAED;;0CAE0C;AAC1C,MAAM,MAAM,eAAe,GAAG,CAAC,KAAK,EAAE;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,KAAK,IAAI,CAAC;AAEzE,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC;IACjC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,+EAA+E;IAC/E,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B;;;8EAG0E;IAC1E,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,gBAAgB,EAAE,GAAG,IAAI,CAAC;IAC9D;;oEAEgE;IAChE,QAAQ,CAAC,qBAAqB,CAAC,EAAE,OAAO,CAAC;CAC1C;AAED;uDACuD;AACvD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,mBAAmB,GAAG,cAAc,CAgC9E;AAED;4CAC4C;AAC5C,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,WAAW,EAClB,SAAS,EAAE,YAAY,EACvB,YAAY,EAAE,MAAM,EACpB,eAAe,EAAE,MAAM,GACtB,cAAc,CAmBhB;AAED;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,eAAe,EACxB,GAAG,EAAE,cAAc,EACnB,OAAO,CAAC,EAAE,eAAe,GACxB,OAAO,CAAC,aAAa,CAAC,CAuBxB;AAED;2EAC2E;AAC3E,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;IACpC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;CAC1B;AAED;;;mDAGmD;AACnD,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,IAAI,EAAE,WAAW,GAAG,IAAI,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,oBAAoB,GAAG,IAAI,CAAC;CAC9C;AAED;;2EAE2E;AAC3E,wBAAgB,cAAc,CAAC,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,QAAQ,GAAG,SAAS,CAKtF;AAED;;;;;;4BAM4B;AAC5B,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC;IAC3C,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC;CACxC;AASD;;;;;;;;;GASG;AACH,wBAAsB,wBAAwB,CAC5C,OAAO,EAAE,eAAe,EACxB,KAAK,EAAE,mBAAmB,EAC1B,OAAO,EAAE,eAAe,GAAG,SAAS,EACpC,MAAM,EAAE,SAAS,GAChB,OAAO,CAAC,eAAe,CAAC,CAwF1B;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,aAAa,EAAE;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,CAAC,CAAC;IACtD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACrD,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC;kDAC8C;IAC9C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,wEAAwE;IACxE,QAAQ,CAAC,UAAU,CAAC,EAAE,iBAAiB,CAAC;IACxC;gFAC4E;IAC5E,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;CAC/C;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,mBAAmB,GAAG,SAAS,CAkD/F"}
+{"version":3,"file":"dispatch.d.ts","sourceRoot":"","sources":["../../src/run/dispatch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EACV,cAAc,EACd,aAAa,EACb,YAAY,EACZ,eAAe,EACf,WAAW,EACX,QAAQ,EACR,cAAc,EACf,MAAM,mBAAmB,CAAC;AAG3B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AACvG,OAAO,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACxE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAKnE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAEjD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACrE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAkB,KAAK,QAAQ,EAAE,MAAM,cAAc,CAAC;AAC7D,OAAO,EAAsD,KAAK,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAExG,OAAO,KAAK,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAG3E;oEACoE;AACpE,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC;IACjC;wEACoE;IACpE,QAAQ,CAAC,UAAU,EAAE,WAAW,CAAC;IACjC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B;6DACyD;IACzD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;0BACsB;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,CAAC;IACpC,6EAA6E;IAC7E,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,2EAA2E;IAC3E,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAClC;;gEAE4D;IAC5D,QAAQ,CAAC,IAAI,CAAC,EAAE,aAAa,CAAC;IAC9B;;;uFAGmF;IACnF,QAAQ,CAAC,UAAU,CAAC,EAAE,iBAAiB,CAAC;IACxC;wEACoE;IACpE,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,QAAQ,EAAE,CAAC;IACzC;;0DAEsD;IACtD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5C;;6EAEyE;IACzE,QAAQ,CAAC,IAAI,CAAC,EAAE,WAAW,CAAC;IAC5B;;;8BAG0B;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC;CACjC;AAED;;;+DAG+D;AAC/D,wBAAgB,iBAAiB,CAAC,IAAI,EAAE;IACtC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC;;+EAE2E;IAC3E,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;IAC7C,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;CAC5C,GAAG,iBAAiB,CAYpB;AAED;gEACgE;AAChE,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,EAAE,gBAAgB,KAAK,MAAM,CAAC;AAElE;;;;;;;;;;GAUG;AACH,wBAAgB,cAAc,CAAC,WAAW,EAAE,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAE/E;AAED;;4EAE4E;AAC5E,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,cAAc,EACzB,KAAK,EAAE,WAAW,EAClB,aAAa,EAAE,OAAO,EACtB,aAAa,EAAE,MAAM,GAAG,IAAI,EAC5B,gBAAgB,EAAE,MAAM,EACxB,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,eAAe,GACtB,IAAI,CAyCN;AAED;;8EAE8E;AAC9E,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAYvD;AAED;;0CAE0C;AAC1C,MAAM,MAAM,eAAe,GAAG,CAAC,KAAK,EAAE;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,KAAK,IAAI,CAAC;AAEzE,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC;IACjC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,+EAA+E;IAC/E,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B;;;8EAG0E;IAC1E,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,gBAAgB,EAAE,GAAG,IAAI,CAAC;IAC9D;;oEAEgE;IAChE,QAAQ,CAAC,qBAAqB,CAAC,EAAE,OAAO,CAAC;CAC1C;AAED;uDACuD;AACvD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,mBAAmB,GAAG,cAAc,CAkC9E;AAED;4CAC4C;AAC5C,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,WAAW,EAClB,SAAS,EAAE,YAAY,EACvB,YAAY,EAAE,MAAM,EACpB,eAAe,EAAE,MAAM,GACtB,cAAc,CAmBhB;AAED;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,eAAe,EACxB,GAAG,EAAE,cAAc,EACnB,OAAO,CAAC,EAAE,eAAe,GACxB,OAAO,CAAC,aAAa,CAAC,CAuBxB;AAED;2EAC2E;AAC3E,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;IACpC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;CAC1B;AAED;;;mDAGmD;AACnD,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,IAAI,EAAE,WAAW,GAAG,IAAI,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,oBAAoB,GAAG,IAAI,CAAC;CAC9C;AAED;;2EAE2E;AAC3E,wBAAgB,cAAc,CAAC,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,QAAQ,GAAG,SAAS,CAKtF;AAED;;;;;;4BAM4B;AAC5B,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC;IAC3C,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC;CACxC;AASD;;;;;;;;;GASG;AACH,wBAAsB,wBAAwB,CAC5C,OAAO,EAAE,eAAe,EACxB,KAAK,EAAE,mBAAmB,EAC1B,OAAO,EAAE,eAAe,GAAG,SAAS,EACpC,MAAM,EAAE,SAAS,GAChB,OAAO,CAAC,eAAe,CAAC,CAwF1B;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,aAAa,EAAE;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,CAAC,CAAC;IACtD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACrD,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC;kDAC8C;IAC9C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,wEAAwE;IACxE,QAAQ,CAAC,UAAU,CAAC,EAAE,iBAAiB,CAAC;IACxC;gFAC4E;IAC5E,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;CAC/C;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,mBAAmB,GAAG,SAAS,CAmD/F"}

package/dist/run/dispatch.js

@@ -151,6 +151,8 @@ function buildAdapterRequest(parts) {
         ...(route.policy.sampling !== undefined ? { sampling: route.policy.sampling } : {}),
         ...(opts.tools !== undefined ? { tools: opts.tools } : {}),
         ...(opts.toolChoice !== undefined ? { toolChoice: opts.toolChoice } : {}),
+        // ARC-β messages lane: the (run-validated) history; absent ⇒ no key ⇒ byte-identical.
+        ...(opts.messages !== undefined ? { history: opts.messages } : {}),
     };
 }
 /** Build the repair-attempt AdapterRequest (no tools — repair re-asks for the
@@ -348,6 +350,7 @@ function emitToolCallResult(record, parts) {
         // dispatch or a serve (its cost still counts).
         rung: "tool_call",
         ...(parts.metaInputs !== undefined ? { metaInputs: parts.metaInputs } : {}),
+        ...(result.toolCalls !== undefined ? { toolCalls: result.toolCalls } : {}), // ARC-5 repeat-tool detector
     });
     return {
         output: null,

package/dist/run/limits.d.ts

@@ -0,0 +1,88 @@
+/**
+ * ARC-5 — run limits: an inline loop and budget guard, per run, in-process.
+ *
+ *   run.start({ pipeline, limits: { maxUsd, maxCalls, maxWallMs, maxRepeatToolCall } })
+ *   rig.conversation(id, { agent, limits })
+ *
+ * Every call inside an ambient run passes through the SDK, so the SDK can refuse
+ * the NEXT dispatch once a limit is reached — something an observability tool
+ * structurally cannot. On breach the dispatch throws a typed
+ * {@link RunLimitExceeded} (`failureClass: "limit_exceeded"`, terminal), the
+ * run's `RunMeta.failure_reason` becomes `limit:<which>`, and the run ends
+ * `failed`. A run that stopped at a limit keeps refusing on that async path.
+ *
+ * `recordCall` cannot prevent a call it did not dispatch: it ACCUMULATES (cost,
+ * call count) and the next `run`/`runRaw` throws. Distinct from envelopes (org /
+ * route money budgets, server-side, monthly): limits are per run and immediate.
+ *
+ * `maxRepeatToolCall: n` trips when the SAME tool name + argument hash is
+ * requested n times IN A ROW (a stuck agent loop). Only a SHA-256 of the
+ * canonical JSON arguments is kept — never the argument content.
+ *
+ * Everything here is PURE (state in, state out); run-context.ts holds the state.
+ */
+import { RigFailureError } from "../types/failures";
+import type { LimitFailureReason } from "../telemetry/attempt-meta";
+export interface RunLimits {
+    /** Stop once the run's accumulated cost reaches this many USD. */
+    readonly maxUsd?: number;
+    /** Stop once this many calls have been made in the run. */
+    readonly maxCalls?: number;
+    /** Stop once this many milliseconds have passed since the run started. */
+    readonly maxWallMs?: number;
+    /** Stop once the same tool + arguments has been requested this many times in a row. */
+    readonly maxRepeatToolCall?: number;
+}
+export type LimitName = "max_usd" | "max_calls" | "max_wall_ms" | "max_repeat_tool_call";
+export interface LimitBreach {
+    readonly which: LimitName;
+    readonly limit: number;
+    readonly observed: number;
+}
+/** The accumulated run state the check reads. Hashes only for tool calls. */
+export interface RunLimitState {
+    readonly costUsd: number;
+    readonly calls: number;
+    readonly startedAtMs: number;
+    /** `<tool name>:<sha256 of canonical args>` of the last requested tool call. */
+    readonly lastToolSig: string | null;
+    /** How many times in a row `lastToolSig` was requested. */
+    readonly repeatCount: number;
+}
+/** One recorded call as the accumulator sees it. `toolCalls` undefined ⇒ the
+ * lane cannot say (a recorded call) — the repeat streak is left untouched; an
+ * empty array ⇒ a reply with no tool call, which breaks the streak. */
+export interface LimitCallObservation {
+    readonly costUsd?: number | null;
+    /** True for a pre-dispatch refusal (no provider call happened) — not counted. */
+    readonly notDispatched?: boolean;
+    readonly toolCalls?: readonly {
+        readonly name: string;
+        readonly arguments: string;
+    }[];
+}
+export declare function initialLimitState(startedAtMs: number): RunLimitState;
+/** `<name>:<sha256(canonical JSON args)>` — the ONLY form a tool call is kept in. */
+export declare function toolCallSignature(name: string, argsJson: string): string;
+/** Fold one recorded call into the state (pure). */
+export declare function accumulate(state: RunLimitState, call: LimitCallObservation): RunLimitState;
+/** PURE pre-dispatch check: the first limit already reached, or null. Order:
+ * money, calls, wall clock, repeat loop. */
+export declare function checkRunLimits(state: RunLimitState, limits: RunLimits, nowMs: number): LimitBreach | null;
+/** `limit:<which>` — the RunMeta.failure_reason a breach writes. */
+export declare function limitFailureReason(which: LimitName): LimitFailureReason;
+/** Validate caller limits (a caller bug throws with the fix). Returns null for
+ * an empty / absent object — no limits, no state, byte-identical runs. */
+export declare function validateRunLimits(limits: RunLimits | undefined): RunLimits | null;
+/** The snake_case copy recorded on `RunMeta.limits` (metadata-safe numbers). */
+export declare function limitsForMeta(limits: RunLimits): Readonly<Record<string, number>>;
+/** The typed error a refused dispatch throws. A `RigFailureError` (class
+ * `limit_exceeded`, terminal) carrying which limit, its value and the observed one. */
+export declare class RunLimitExceeded extends RigFailureError {
+    readonly which: LimitName;
+    readonly limit: number;
+    readonly observed: number;
+    readonly runId: string;
+    constructor(breach: LimitBreach, runId: string);
+}
+//# sourceMappingURL=limits.d.ts.map

package/dist/run/limits.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"limits.d.ts","sourceRoot":"","sources":["../../src/run/limits.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAGH,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEpD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAEpE,MAAM,WAAW,SAAS;IACxB,kEAAkE;IAClE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,2DAA2D;IAC3D,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,0EAA0E;IAC1E,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,uFAAuF;IACvF,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;CACrC;AAED,MAAM,MAAM,SAAS,GAAG,SAAS,GAAG,WAAW,GAAG,aAAa,GAAG,sBAAsB,CAAC;AAEzF,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,6EAA6E;AAC7E,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,gFAAgF;IAChF,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,2DAA2D;IAC3D,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED;;uEAEuE;AACvE,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,iFAAiF;IACjF,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACvF;AAED,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,aAAa,CAEpE;AAaD,qFAAqF;AACrF,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAQxE;AAED,oDAAoD;AACpD,wBAAgB,UAAU,CAAC,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,oBAAoB,GAAG,aAAa,CAmB1F;AAED;4CAC4C;AAC5C,wBAAgB,cAAc,CAAC,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI,CAezG;AAED,oEAAoE;AACpE,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,SAAS,GAAG,kBAAkB,CAEvE;AAED;0EAC0E;AAC1E,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG,IAAI,CAmBjF;AAED,gFAAgF;AAChF,wBAAgB,aAAa,CAAC,MAAM,EAAE,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAOjF;AAED;uFACuF;AACvF,qBAAa,gBAAiB,SAAQ,eAAe;IACnD,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;gBAEX,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM;CAc/C"}