@agentcomms/events-daemon 0.16.0 → 0.17.0

package/dist/{b3-contract-03AO67VB.mjs → b3-contract-DFxcHY0I.mjs}

@@ -1,12 +1,12 @@
 import { a as number, c as unknown, o as strictObject, s as string, t as McpServer } from "./mcp-DXXb3Vv3-B0sHZfig.mjs";
-import { d as isJudgeKind, l as EventDomainError, n as canonicalWebhookTarget } from "./webhook-target-BkA_wHIu.mjs";
+import { a as EventDomainError, c as JUDGE_KIND_LOCAL_ENDPOINT, f as validateLocalEndpoint, g as parseIpLiteral, h as assertApprovedAddressSet, l as JUDGE_KIND_TYPESAFE, n as canonicalWebhookTarget, o as JUDGE_KINDS } from "./webhook-target-DyDTwWhV.mjs";
 import { createHash, randomBytes } from "node:crypto";
 import { chmod, lstat, mkdir, open, readFile, realpath, rm, writeFile } from "node:fs/promises";
 import { createConnection } from "node:net";
 import { CommsError, ERROR_REGISTRY, canonicalDisclosureBinding, canonicalJson, isCommsError, neutralise, resolvePaths, sha256Hex } from "@agentcomms/core";
 import { constants } from "node:fs";
 import { basename, dirname, join } from "node:path";
-import { TEST_CLOUD_EVENT, canonicaliseCondition, catalogueEntry, compileMapping, isJsonValue, validateCloudEventType } from "@agentcomms/events";
+import { TEST_CLOUD_EVENT, canonicaliseAgenticCondition, canonicaliseCondition, catalogueEntry, compileMapping, isJsonValue, parsePointer, validateCloudEventType } from "@agentcomms/events";
 //#region src/network/error-sink.ts
 /**
 * Keeps an owned network resource from turning a later transport error into an uncaught exception.
@@ -532,7 +532,10 @@ async function heldList(options = {}) {
 }
 /** Terminal/app-only operation; Task 5 intentionally provides no MCP adapter. */
 async function decideHeld(decisionId, decision, options = {}) {
-	return new EventControlClient({ stateDir: options.stateDir }).request("decideHeld", {
+	return new EventControlClient({
+		stateDir: options.stateDir,
+		clientName: "interactive-terminal"
+	}).request("decideHeld", {
 		decisionId,
 		decision
 	});
@@ -583,6 +586,25 @@ function assertDoctorReportV1(report) {
 	if (Object.keys(report).some((key) => !DOCTOR_REPORT_V1_KEYS.includes(key))) throw new Error("doctor-v1 report is closed");
 	return report;
 }
+const DOCTOR_REPORT_V2_KEYS = [
+	"schemaVersion",
+	"owner",
+	"switch",
+	"lineages",
+	"superseded",
+	"points",
+	"awaitingReapproval",
+	"activationIntents",
+	"sources",
+	"recovery",
+	"judgeBoundary",
+	"judge",
+	"whatsapp"
+];
+function assertDoctorReportV2(report) {
+	if (Object.keys(report).some((key) => !DOCTOR_REPORT_V2_KEYS.includes(key))) throw new Error("doctor-v2 report is closed");
+	return report;
+}
 async function doctor(options = {}) {
 	return await new EventControlClient({ stateDir: options.stateDir }).request("doctor");
 }
@@ -810,7 +832,7 @@ async function removeTarget(targetId, options = {}) {
 //#endregion
 //#region src/version.ts
 /** The package version, read from package.json at build time. */
-const VERSION = "0.16.0";
+const VERSION = "0.17.0";
 //#endregion
 //#region src/mcp/server.ts
 function reply(data) {
@@ -829,6 +851,10 @@ async function createEventsMcpServer(options = {}) {
 		name: "agent-events",
 		version: VERSION
 	});
+	const b3 = (operation, args, throughOwner) => options.b3Registrar === void 0 ? throughOwner() : options.b3Registrar.owner.handle({
+		operation,
+		args
+	});
 	server.registerTool("events_status", {
 		title: "Local event service status",
 		description: "Reports whether the local event service has an owner.",
@@ -872,7 +898,7 @@ async function createEventsMcpServer(options = {}) {
 		destructiveHint: false,
 		idempotentHint: true
 	});
-	runtimeTool("events_doctor", "Local event service doctor", "Reports content-free lineage validation, pending metadata/materialisation retry health, recovery and protocol health.", doctor, {
+	runtimeTool("events_doctor", "Local event service doctor", "Reports content-free lineage, retry, recovery, judge authority, hold-clock and protocol health.", doctor, {
 		destructiveHint: false,
 		idempotentHint: true
 	});
@@ -934,25 +960,28 @@ async function createEventsMcpServer(options = {}) {
 	strictControlTool("events_subscriber_add", "Add subscriber", "Creates one immutable subscriber version.", { document: unknown() }, (args) => addSubscriber(args.document, options), true);
 	strictControlTool("events_subscriber_update", "Update subscriber", "Creates one replacement immutable subscriber version.", { document: unknown() }, (args) => updateSubscriber(args.document, options), true);
 	strictControlTool("events_subscriber_remove", "Remove subscriber", "Revokes every live version of one subscriber and closes its streams.", { subscriberId: string().min(1) }, (args) => removeSubscriber(args.subscriberId, options), true);
-	strictControlTool("events_judges_list", "List judges", "Returns the typed Phase-E unavailable result.", {}, () => judgesList(options));
-	strictControlTool("events_judge_add", "Add judge", "Returns the typed Phase-E unavailable result.", { document: unknown() }, (args) => addJudge(args.document, options), true);
-	strictControlTool("events_judge_update", "Update judge", "Returns the typed Phase-E unavailable result.", { document: unknown() }, (args) => updateJudge(args.document, options), true);
-	strictControlTool("events_judge_remove", "Remove judge", "Returns the typed Phase-E unavailable result.", { judgeId: string().min(1) }, (args) => removeJudge(args.judgeId, options), true);
-	strictControlTool("events_judge_test", "Test judge", "Returns the typed Phase-E unavailable result.", {
+	strictControlTool("events_judges_list", "List judges", "Lists content-free immutable judge metadata.", {}, () => judgesList(options));
+	strictControlTool("events_judge_add", "Add judge", "Creates an immutable, initially inactive judge version.", { document: unknown() }, (args) => b3("addJudge", { document: args.document }, () => addJudge(args.document, options)), true);
+	strictControlTool("events_judge_update", "Update judge", "Creates an immutable replacement judge version.", { document: unknown() }, (args) => b3("updateJudge", { document: args.document }, () => updateJudge(args.document, options)), true);
+	strictControlTool("events_judge_remove", "Remove judge", "Removes every live immutable version of one judge.", { judgeId: string().min(1) }, (args) => b3("removeJudge", { judgeId: args.judgeId }, () => removeJudge(args.judgeId, options)), true);
+	strictControlTool("events_judge_test", "Test judge", "Tests one active exact judge version with the daemon-fixed synthetic event.", {
 		judgeId: string().min(1),
 		version: number().int().positive()
 	}, (args) => judgeTest(args.judgeId, args.version, options));
-	strictControlTool("events_budget_show", "Show budget", "Returns the typed Phase-E unavailable result.", {}, () => budgetShow(options));
-	strictControlTool("events_budget_update", "Update budget", "Returns the typed Phase-E unavailable result.", { document: unknown() }, (args) => updateBudget(args.document, options), true);
-	strictControlTool("events_judge_kinds_list", "List judge kinds", "Returns the typed Phase-E unavailable result.", {}, () => judgeKindsList(options));
-	strictControlTool("events_judge_kind_enable", "Enable judge kind", "Returns the typed Phase-E or E2 unavailable result.", { kind: string().min(1) }, (args) => enableJudgeKind(args.kind, options), true);
-	strictControlTool("events_judge_kind_disable", "Disable judge kind", "Returns the typed Phase-E or E2 unavailable result.", { kind: string().min(1) }, (args) => disableJudgeKind(args.kind, options), true);
+	strictControlTool("events_budget_show", "Show budget", "Lists immutable judge budgets and the active singleton.", {}, () => budgetShow(options));
+	strictControlTool("events_budget_update", "Update budget", "Creates a pending immutable global budget and prepares its approval.", { document: unknown() }, (args) => b3("updateBudget", { document: args.document }, () => updateBudget(args.document, options)), true);
+	strictControlTool("events_judge_kinds_list", "List judge kinds", "Lists disabled/enabled judge kinds and the typed Laya E2 seam.", {}, () => judgeKindsList(options));
+	strictControlTool("events_judge_kind_enable", "Enable judge kind", "Prepares, but never approves or claims, judge-kind enablement.", { kind: string().min(1) }, (args) => b3("enableJudgeKind", { kind: args.kind }, () => enableJudgeKind(args.kind, options)), true);
+	strictControlTool("events_judge_kind_disable", "Disable judge kind", "Immediately disables one available judge kind; Laya remains typed E2-unavailable.", { kind: string().min(1) }, (args) => {
+		const kind = args.kind;
+		return b3("disableJudgeKind", { kind }, () => disableJudgeKind(kind, options));
+	}, true);
 	strictControlTool("events_judge_model_status", "Judge model status", "Returns the typed Phase-E2 unavailable result.", {}, () => judgeModelStatus(options));
 	strictControlTool("events_judge_model_remove", "Remove judge model", "Returns the typed Phase-E2 unavailable result.", {}, () => removeJudgeModel(options), true);
 	strictControlTool("events_deliveries_list", "List deliveries", "Lists content-free delivery metadata.", {}, () => deliveriesList(options));
 	strictControlTool("events_delivery_retry", "Retry delivery", "Retries one exact retryable delivery.", { deliveryId: string().min(1) }, (args) => retryDelivery(args.deliveryId, options), true);
 	strictControlTool("events_delivery_drop", "Drop delivery", "Drops one exact dead-letter delivery and its retained payload.", { deliveryId: string().min(1) }, (args) => dropDelivery(args.deliveryId, options), true);
-	strictControlTool("events_held_list", "List held decisions", "Returns the typed empty held-decision result; judges, which can hold an event, are not available yet.", {}, () => heldList(options));
+	strictControlTool("events_held_list", "List held decisions", "Lists content-free held-decision metadata; only a terminal/app may resolve one.", {}, () => heldList(options));
 	controlTool("events_catalogue_show", "Show local event definition", "Shows one selectable local event definition.", { type: string() }, (args) => catalogueShow(args.type, options));
 	controlTool("events_sources_list", "List event sources", "Lists configured local event sources.", {}, () => sourcesList(options));
 	controlTool("events_source_show", "Show event source", "Shows one configured local event source.", { source: string() }, (args) => sourceShow(args.source, options));
@@ -979,6 +1008,247 @@ async function createEventsMcpServer(options = {}) {
 	};
 }
 //#endregion
+//#region src/domain/judges.ts
+const TYPESAFE_SYSTEM_ONE_ENDPOINT = "https://api.typesafe.ai/v1/systemone";
+const JUDGE_BUDGET_ID = "judge-budget";
+/** Provider record: docs/superpowers/plans/2026-10-10-events-phase-e-provider-record.md, read 2026-10-10. */
+const APPROVED_TYPESAFE_MODELS = ["jev-1.13.0"];
+/** Phase E's closed registry. The lifecycle module owns the literal vocabulary; this registry owns its availability. */
+const JUDGE_KIND_DEFINITIONS = [
+	{
+		kind: JUDGE_KINDS[0],
+		availability: "available"
+	},
+	{
+		kind: JUDGE_KINDS[1],
+		availability: "unavailable",
+		unavailableCode: "E2_REQUIRED"
+	},
+	{
+		kind: JUDGE_KINDS[2],
+		availability: "available"
+	}
+];
+function fail$3(message, code = "VERSION_DOCUMENT_INVALID") {
+	throw new EventDomainError(code, message);
+}
+function record$1(value, name) {
+	if (typeof value !== "object" || value === null || Array.isArray(value)) return fail$3(`${name} is an object`);
+	try {
+		return JSON.parse(canonicalJson(value));
+	} catch {
+		return fail$3(`${name} is canonical JSON`);
+	}
+}
+function exactKeys$1(value, keys, name) {
+	const found = Object.keys(value).sort();
+	const wanted = [...keys].sort();
+	if (found.length !== wanted.length || found.some((key, index) => key !== wanted[index])) fail$3(`${name} has exactly its canonical fields`);
+}
+function text$1(value, name) {
+	if (typeof value !== "string" || value.length === 0) return fail$3(`${name} is a non-empty string`);
+	return value;
+}
+function positiveInteger$2(value, name) {
+	if (!Number.isSafeInteger(value) || value < 1) return fail$3(`${name} is a positive safe integer`);
+	return value;
+}
+function protocol(value, name) {
+	if (value.protocol === "noul") {
+		exactKeys$1(value, ["protocol"], name);
+		return { protocol: "noul" };
+	}
+	if (value.protocol !== "json-score") return fail$3(`${name} has protocol noul or json-score`);
+	exactKeys$1(value, ["protocol", "scorePointer"], name);
+	const scorePointer = text$1(value.scorePointer, `${name} scorePointer`);
+	const parsed = parsePointer(scorePointer);
+	if (!parsed.ok || parsed.value.includes("*")) return fail$3(`${name} scorePointer is one concrete JSON Pointer`);
+	return {
+		protocol: "json-score",
+		scorePointer
+	};
+}
+function identity(value, name) {
+	return {
+		judgeId: text$1(value.judgeId, `${name} id`),
+		version: positiveInteger$2(value.version, `${name} version`)
+	};
+}
+function localAddress(value) {
+	if (!Array.isArray(value) || value.length !== 1) return fail$3("a local judge approvedAddressSet has one exact literal");
+	const entry = text$1(value[0], "a local judge approvedAddressSet entry");
+	try {
+		assertApprovedAddressSet([entry]);
+		return [parseIpLiteral(entry).address];
+	} catch {
+		return fail$3("a local judge approvedAddressSet has one valid literal");
+	}
+}
+/** The one canonical, immutable judge document form. E2's laya seam is recognised but intentionally unavailable. */
+function canonicalJudge(value) {
+	const judge = record$1(value, "a judge document");
+	const kind = judge.kind;
+	if (!JUDGE_KINDS.includes(kind)) return fail$3("a judge document has a known judge kind");
+	if (kind === "laya") return fail$3("laya is unavailable until E2", "E2_REQUIRED");
+	if (kind === "typesafe") {
+		exactKeys$1(judge, [
+			"judgeId",
+			"version",
+			"kind",
+			"provider",
+			"model",
+			"endpoint",
+			"promptTemplate",
+			"protocol"
+		], "a typesafe judge document");
+		if (judge.provider !== "typesafe") return fail$3("a typesafe judge names the TypeSafe Jev adapter");
+		if (!APPROVED_TYPESAFE_MODELS.includes(judge.model)) return fail$3("a typesafe judge names one concrete model listed in the provider record");
+		if (judge.endpoint !== "https://api.typesafe.ai/v1/systemone") return fail$3("a typesafe judge has its fixed System One endpoint");
+		if (protocol({ protocol: judge.protocol }, "a typesafe judge document").protocol !== "noul") return fail$3("a typesafe judge uses the noul protocol");
+		return {
+			...identity(judge, "a typesafe judge"),
+			kind: JUDGE_KIND_TYPESAFE,
+			provider: JUDGE_KIND_TYPESAFE,
+			model: judge.model,
+			endpoint: TYPESAFE_SYSTEM_ONE_ENDPOINT,
+			promptTemplate: text$1(judge.promptTemplate, "a typesafe judge prompt template"),
+			protocol: "noul"
+		};
+	}
+	const localProtocol = protocol(judge.protocol === "json-score" ? {
+		protocol: judge.protocol,
+		scorePointer: judge.scorePointer
+	} : { protocol: judge.protocol }, "a local judge document");
+	exactKeys$1(judge, localProtocol.protocol === "json-score" ? [
+		"judgeId",
+		"version",
+		"kind",
+		"provider",
+		"model",
+		"endpoint",
+		"approvedAddressSet",
+		"promptTemplate",
+		"protocol",
+		"scorePointer"
+	] : [
+		"judgeId",
+		"version",
+		"kind",
+		"provider",
+		"model",
+		"endpoint",
+		"approvedAddressSet",
+		"promptTemplate",
+		"protocol"
+	], "a local judge document");
+	const approvedAddressSet = localAddress(judge.approvedAddressSet);
+	const endpoint = text$1(judge.endpoint, "a local judge endpoint");
+	try {
+		const local = validateLocalEndpoint(endpoint, approvedAddressSet);
+		if (local.url.search !== "") return fail$3("a local judge endpoint has no query");
+		return {
+			...identity(judge, "a local judge"),
+			kind: JUDGE_KIND_LOCAL_ENDPOINT,
+			provider: text$1(judge.provider, "a local judge provider"),
+			model: text$1(judge.model, "a local judge model"),
+			endpoint: local.url.href,
+			approvedAddressSet,
+			promptTemplate: text$1(judge.promptTemplate, "a local judge prompt template"),
+			...localProtocol
+		};
+	} catch (error) {
+		if (error instanceof EventDomainError) throw error;
+		return fail$3("a local judge has a literal loopback endpoint and its exact approved address");
+	}
+}
+function limits(value, name) {
+	const limit = record$1(value, name);
+	exactKeys$1(limit, [
+		"callsPerRollingHour",
+		"inputTokensPerRolling30Days",
+		"concurrency"
+	], name);
+	return {
+		callsPerRollingHour: positiveInteger$2(limit.callsPerRollingHour, `${name} callsPerRollingHour`),
+		inputTokensPerRolling30Days: positiveInteger$2(limit.inputTokensPerRolling30Days, `${name} inputTokensPerRolling30Days`),
+		concurrency: positiveInteger$2(limit.concurrency, `${name} concurrency`)
+	};
+}
+/** The singleton's complete global and per-provider rolling ceilings, with no implicit defaults. */
+function canonicalJudgeBudget(value) {
+	const budget = record$1(value, "a judge budget document");
+	exactKeys$1(budget, [
+		"budgetId",
+		"version",
+		"global",
+		"providers"
+	], "a judge budget document");
+	if (budget.budgetId !== "judge-budget") return fail$3(`a judge budget id is ${JUDGE_BUDGET_ID}`);
+	if (!Array.isArray(budget.providers)) return fail$3("judge budget providers are an array");
+	const providers = budget.providers.map((entry) => {
+		const provider = record$1(entry, "a judge provider budget");
+		exactKeys$1(provider, [
+			"provider",
+			"callsPerRollingHour",
+			"inputTokensPerRolling30Days",
+			"concurrency"
+		], "a judge provider budget");
+		return {
+			provider: text$1(provider.provider, "a judge provider id"),
+			callsPerRollingHour: positiveInteger$2(provider.callsPerRollingHour, "a judge provider budget callsPerRollingHour"),
+			inputTokensPerRolling30Days: positiveInteger$2(provider.inputTokensPerRolling30Days, "a judge provider budget inputTokensPerRolling30Days"),
+			concurrency: positiveInteger$2(provider.concurrency, "a judge provider budget concurrency")
+		};
+	});
+	if ([...providers].sort((left, right) => left.provider < right.provider ? -1 : left.provider > right.provider ? 1 : 0).some((entry, index) => entry.provider !== providers[index]?.provider) || new Set(providers.map((entry) => entry.provider)).size !== providers.length) return fail$3("judge budget providers are sorted and duplicate-free");
+	return {
+		budgetId: JUDGE_BUDGET_ID,
+		version: positiveInteger$2(budget.version, "a judge budget version"),
+		global: limits(budget.global, "a global judge budget"),
+		providers
+	};
+}
+/** The closed kind registry lookup, including E2's intentionally unavailable laya slot. */
+function judgeKindDefinition(kind) {
+	const definition = JUDGE_KIND_DEFINITIONS.find((candidate) => candidate.kind === kind);
+	if (definition === void 0) return fail$3("a judge kind has a registry definition");
+	return definition;
+}
+/** Canonicalises one inert kind-enablement version; no pointer or availability change happens here. */
+function canonicalJudgeKindEnablement(value) {
+	const enablement = record$1(value, "a judge-kind document");
+	if (!JUDGE_KINDS.includes(enablement.kind)) return fail$3("a judge-kind document has a known judge kind");
+	const kind = enablement.kind;
+	if (judgeKindDefinition(kind).availability === "unavailable") return fail$3("laya is unavailable until E2", "E2_REQUIRED");
+	const id = `judge-kind:${kind}`;
+	if (enablement.id !== id) return fail$3(`a judge-kind document id is ${id}`);
+	if (kind === "typesafe") {
+		exactKeys$1(enablement, [
+			"id",
+			"kind",
+			"version",
+			"endpoint"
+		], "a typesafe judge-kind document");
+		if (enablement.endpoint !== "https://api.typesafe.ai/v1/systemone") return fail$3("a typesafe judge-kind document has the fixed System One endpoint");
+		return {
+			id: "judge-kind:typesafe",
+			kind: JUDGE_KIND_TYPESAFE,
+			version: positiveInteger$2(enablement.version, "a judge-kind version"),
+			endpoint: TYPESAFE_SYSTEM_ONE_ENDPOINT
+		};
+	}
+	exactKeys$1(enablement, [
+		"id",
+		"kind",
+		"version"
+	], "a local-endpoint judge-kind document");
+	return {
+		id: "judge-kind:local-endpoint",
+		kind: JUDGE_KIND_LOCAL_ENDPOINT,
+		version: positiveInteger$2(enablement.version, "a judge-kind version")
+	};
+}
+//#endregion
 //#region src/domain/source-options.ts
 function fail$2(message) {
 	throw new EventDomainError("VERSION_DOCUMENT_INVALID", message);
@@ -1263,19 +1533,6 @@ function canonicalTarget(value) {
 		default: return fail("a target document has a known kind");
 	}
 }
-/** The one canonical form of a judge version — stored, and embedded in every rule that names it. */
-function canonicalJudge(value) {
-	const judge = cloneJsonRecord(value, "a judge document");
-	if (!isJudgeKind(judge.kind)) return fail("a judge document has a known judge kind");
-	return {
-		...judge,
-		judgeId: requiredText(judge.judgeId, "a judge id"),
-		version: positiveInteger(judge.version, "a judge version"),
-		kind: judge.kind,
-		provider: requiredText(judge.provider, "a judge provider"),
-		model: requiredText(judge.model, "a judge model")
-	};
-}
 /** The one canonical form of a subscriber version — stored, and embedded in every rule that names it. */
 function canonicalSubscriber(value) {
 	const subscriber = cloneJsonRecord(value, "a subscriber document");
@@ -1338,6 +1595,15 @@ function canonicalFullRuleDocument(value) {
 	if (!eventType.startsWith(`${source.channel}.`)) return fail("a rule event type belongs to its source channel", "SOURCE_CHANNEL_UNSUPPORTED");
 	const condition = canonicaliseCondition(definition.value, rule.condition);
 	if (!condition.ok) return fail(condition.issues[0]?.message ?? "the rule condition is not valid");
+	let agentic;
+	if (rule.agentic !== void 0) {
+		const canonical = canonicaliseAgenticCondition(definition.value, condition.value, rule.agentic);
+		if (!canonical.ok) return fail(canonical.issues[0]?.message ?? "the rule agentic condition is not valid");
+		agentic = {
+			...canonical.value,
+			judge: canonicalJudge(canonical.value.judge)
+		};
+	}
 	const mapping = canonicalJsonValue(rule.mapping, "rule mapping");
 	const compiledMapping = compileMapping(definition.value, mapping);
 	if (!compiledMapping.ok) return fail(compiledMapping.issues[0]?.message ?? "the rule mapping is not valid");
@@ -1349,6 +1615,7 @@ function canonicalFullRuleDocument(value) {
 		if (subscribers.find((subscriber) => subscriber.subscriberId === target.subscriberId && subscriber.version === target.subscriberVersion) === void 0) return fail("an SSE target embeds its exact subscriber version");
 	}
 	const judges = Array.isArray(rule.judges) ? rule.judges.map(canonicalJudge) : fail("rule judges are an array");
+	if (judges.length !== 0) return fail("rule judges are represented only by the optional agentic sibling");
 	let cloudEventType;
 	if (rule.cloudEventType !== void 0) {
 		const chosen = validateCloudEventType(rule.cloudEventType);
@@ -1364,6 +1631,7 @@ function canonicalFullRuleDocument(value) {
 			version: eventVersion
 		},
 		condition: condition.value,
+		...agentic === void 0 ? {} : { agentic },
 		mapping,
 		...cloudEventType === void 0 ? {} : { cloudEventType },
 		targets,
@@ -1373,23 +1641,6 @@ function canonicalFullRuleDocument(value) {
 		retention: canonicalRetention(rule.retention)
 	};
 }
-function canonicalBudget(value) {
-	const budget = cloneJsonRecord(value, "a judge budget document");
-	return {
-		...budget,
-		budgetId: requiredText(budget.budgetId, "a judge budget id"),
-		version: positiveInteger(budget.version, "a judge budget version")
-	};
-}
-function canonicalEnablement(value) {
-	const enablement = cloneJsonRecord(value, "a judge-kind document");
-	if (!isJudgeKind(enablement.kind)) return fail("a judge-kind document has a known judge kind");
-	return {
-		...enablement,
-		kind: enablement.kind,
-		version: positiveInteger(enablement.version, "a judge-kind version")
-	};
-}
 function canonicalEnableAll(value) {
 	const document = cloneJsonRecord(value, "an enable-all document");
 	if (!Array.isArray(document.ruleVersions)) return fail("enable-all rule versions are an array");
@@ -1426,12 +1677,12 @@ function normaliseActivationDocument(value) {
 		case "judge-budget": return {
 			documentVersion: 1,
 			kind: "judge-budget",
-			budget: canonicalBudget(document.budget)
+			budget: canonicalJudgeBudget(document.budget)
 		};
 		case "judge-kind": return {
 			documentVersion: 1,
 			kind: "judge-kind",
-			enablement: canonicalEnablement(document.enablement)
+			enablement: canonicalJudgeKindEnablement(document.enablement)
 		};
 		case "enable-all": return canonicalEnableAll(document);
 		default: return fail("an activation document has a known kind");
@@ -1466,11 +1717,11 @@ function derivedVersions(document) {
 				id: subscriber.subscriberId,
 				version: subscriber.version
 			})),
-			...document.rule.judges.map((judge) => ({
+			...document.rule.agentic === void 0 ? [] : [{
 				kind: "judge",
-				id: judge.judgeId,
-				version: judge.version
-			}))
+				id: document.rule.agentic.judge.judgeId,
+				version: document.rule.agentic.judge.version
+			}]
 		];
 		case "judge-budget": return [{
 			kind: "judge-budget",
@@ -2232,4 +2483,4 @@ const B3_CONTROL_CONTRACT = Object.freeze({
 	judgeUnavailable: B3_JUDGE_UNAVAILABLE_VARIANTS
 });
 //#endregion
-export { updateRule as $, eventPaths as $t, normaliseSourceOptions as A, EventControlClient as At, subscribersList as B, newInstanceRecord as Bt, normaliseActivationDocument as C, deliveriesList as Ct, normaliseGmailSourceOptions as D, catalogueList as Dt, classifySourceOptionChange as E, retryDelivery as Et, targetsList as F, encodeControlFrame as Ft, sourceShow as G, assertControlSupported as Gt, stop as H, readInstance as Ht, updateTarget as I, isControlHello as It, disableRule as J, verifyControlSocket as Jt, sourcesList as K, assertSocketPathFits as Kt, targetTest as L, isControlRequest as Lt, createEventsMcpServer as M, CONTROL_PROTOCOL_VERSIONS as Mt, addTarget as N, ControlFrameReader as Nt, normaliseResendSourceOptions as O, catalogueShow as Ot, removeTarget as P, controlFailure as Pt, rulesList as Q, ensureOwnerOnlyFile as Qt, addSubscriber as R, negotiateVersion as Rt, disclosureBindingFor as S, decideHeld as St, sseDeliveryTarget as T, heldList as Tt, status as U, removeInstance as Ut, updateSubscriber as V, processIsLive as Vt, loadSqlite as W, writeInstance as Wt, removeRule as X, ensureEventPaths as Xt, enableRule as Y, verifyPrivateSocketDirectory as Yt, ruleShow as Z, ensureEventSocketDirectory as Zt, activationDocumentDigest as _, assertDoctorReportV1 as _t, B3_CONTROL_V1_OPERATION_SPECS as a, budgetShow as at, canonicalSubscriber as b, isActivationFailureCode as bt, B3_CONTROL_V1_SUCCESSOR_REQUIREMENT as c, judgeKindsList as ct, B3_SECRET_TERMINAL_ORIGIN as d, judgesList as dt, installErrorSink as en, ruleTest as et, isB3ControlOperation as f, removeJudge as ft, isOwnerControlWireOperation as g, enableAll as gt, OWNER_CONTROL_WIRES as h, updateJudge as ht, B3_CONTROL_ERROR_CODES as i, addJudge as it, normaliseWhatsAppSourceOptions as j, probeControl as jt, normaliseSlackSourceOptions as k, approvalView as kt, B3_DESKTOP_CONTROL_OPERATIONS as l, judgeModelStatus as lt, renderB3ApprovalPreviewV1 as m, updateBudget as mt, B3_CAPABILITIES as n, pause as nt, B3_CONTROL_V1_RESULT_OPERATIONS as o, disableJudgeKind as ot, isB3SecretOperation as p, removeJudgeModel as pt, createRule as q, controlEndpoint as qt, B3_CONTROL_CONTRACT as r, resume as rt, B3_CONTROL_V1_SCHEMA_VERSION as s, enableJudgeKind as st, B3_APPROVAL_VIEW_VARIANTS as t, ruleTestRetained as tt, B3_JUDGE_UNAVAILABLE_VARIANTS as u, judgeTest as ut, canonicalFullRuleDocument as v, doctor as vt, canonicalSseSubscriber as w, dropDelivery as wt, canonicalTarget as x, disableAll as xt, canonicalJudge as y, ACTIVATION_FAILURE as yt, removeSubscriber as z, mayRecoverStaleInstance as zt };
+export { createRule as $, assertSocketPathFits as $t, normaliseWhatsAppSourceOptions as A, deliveriesList as At, removeTarget as B, ControlFrameReader as Bt, canonicalSseSubscriber as C, assertDoctorReportV1 as Ct, normaliseResendSourceOptions as D, isActivationFailureCode as Dt, normaliseGmailSourceOptions as E, ACTIVATION_FAILURE as Et, canonicalJudgeBudget as F, catalogueShow as Ft, removeSubscriber as G, negotiateVersion as Gt, updateTarget as H, encodeControlFrame as Ht, canonicalJudgeKindEnablement as I, approvalView as It, stop as J, processIsLive as Jt, subscribersList as K, mayRecoverStaleInstance as Kt, judgeKindDefinition as L, EventControlClient as Lt, JUDGE_BUDGET_ID as M, heldList as Mt, JUDGE_KIND_DEFINITIONS as N, retryDelivery as Nt, normaliseSlackSourceOptions as O, disableAll as Ot, canonicalJudge as P, catalogueList as Pt, sourcesList as Q, assertControlSupported as Qt, createEventsMcpServer as R, probeControl as Rt, normaliseActivationDocument as S, enableAll as St, classifySourceOptionChange as T, doctor as Tt, targetTest as U, isControlHello as Ut, targetsList as V, controlFailure as Vt, addSubscriber as W, isControlRequest as Wt, loadSqlite as X, removeInstance as Xt, status as Y, readInstance as Yt, sourceShow as Z, writeInstance as Zt, activationDocumentDigest as _, judgesList as _t, B3_CONTROL_V1_OPERATION_SPECS as a, ensureOwnerOnlyFile as an, updateRule as at, canonicalTarget as b, updateBudget as bt, B3_CONTROL_V1_SUCCESSOR_REQUIREMENT as c, pause as ct, B3_SECRET_TERMINAL_ORIGIN as d, budgetShow as dt, controlEndpoint as en, disableRule as et, isB3ControlOperation as f, disableJudgeKind as ft, isOwnerControlWireOperation as g, judgeTest as gt, OWNER_CONTROL_WIRES as h, judgeModelStatus as ht, B3_CONTROL_ERROR_CODES as i, ensureEventSocketDirectory as in, rulesList as it, APPROVED_TYPESAFE_MODELS as j, dropDelivery as jt, normaliseSourceOptions as k, decideHeld as kt, B3_DESKTOP_CONTROL_OPERATIONS as l, resume as lt, renderB3ApprovalPreviewV1 as m, judgeKindsList as mt, B3_CAPABILITIES as n, verifyPrivateSocketDirectory as nn, removeRule as nt, B3_CONTROL_V1_RESULT_OPERATIONS as o, eventPaths as on, ruleTest as ot, isB3SecretOperation as p, enableJudgeKind as pt, updateSubscriber as q, newInstanceRecord as qt, B3_CONTROL_CONTRACT as r, ensureEventPaths as rn, ruleShow as rt, B3_CONTROL_V1_SCHEMA_VERSION as s, installErrorSink as sn, ruleTestRetained as st, B3_APPROVAL_VIEW_VARIANTS as t, verifyControlSocket as tn, enableRule as tt, B3_JUDGE_UNAVAILABLE_VARIANTS as u, addJudge as ut, canonicalFullRuleDocument as v, removeJudge as vt, sseDeliveryTarget as w, assertDoctorReportV2 as wt, disclosureBindingFor as x, updateJudge as xt, canonicalSubscriber as y, removeJudgeModel as yt, addTarget as z, CONTROL_PROTOCOL_VERSIONS as zt };