@agentcomms/events-daemon 0.16.0 → 0.18.0

package/dist/{b3-contract-03AO67VB.mjs → b3-contract-B6UBBK7F.mjs}

@@ -1,12 +1,12 @@
-import { a as number, c as unknown, o as strictObject, s as string, t as McpServer } from "./mcp-DXXb3Vv3-B0sHZfig.mjs";
-import { d as isJudgeKind, l as EventDomainError, n as canonicalWebhookTarget } from "./webhook-target-BkA_wHIu.mjs";
+import { a as number, c as unknown, o as strictObject, s as string, t as McpServer } from "./mcp-DIH4cS6P-YuKZfqTg.mjs";
+import { a as EventDomainError, c as JUDGE_KIND_LOCAL_ENDPOINT, f as validateLocalEndpoint, g as parseIpLiteral, h as assertApprovedAddressSet, l as JUDGE_KIND_TYPESAFE, n as canonicalWebhookTarget, o as JUDGE_KINDS } from "./webhook-target-DyDTwWhV.mjs";
 import { createHash, randomBytes } from "node:crypto";
 import { chmod, lstat, mkdir, open, readFile, realpath, rm, writeFile } from "node:fs/promises";
 import { createConnection } from "node:net";
 import { CommsError, ERROR_REGISTRY, canonicalDisclosureBinding, canonicalJson, isCommsError, neutralise, resolvePaths, sha256Hex } from "@agentcomms/core";
 import { constants } from "node:fs";
 import { basename, dirname, join } from "node:path";
-import { TEST_CLOUD_EVENT, canonicaliseCondition, catalogueEntry, compileMapping, isJsonValue, validateCloudEventType } from "@agentcomms/events";
+import { TEST_CLOUD_EVENT, canonicaliseAgenticCondition, canonicaliseCondition, catalogueEntry, compileMapping, isJsonValue, parsePointer, validateCloudEventType } from "@agentcomms/events";
 //#region src/network/error-sink.ts
 /**
 * Keeps an owned network resource from turning a later transport error into an uncaught exception.
@@ -532,7 +532,10 @@ async function heldList(options = {}) {
 }
 /** Terminal/app-only operation; Task 5 intentionally provides no MCP adapter. */
 async function decideHeld(decisionId, decision, options = {}) {
-	return new EventControlClient({ stateDir: options.stateDir }).request("decideHeld", {
+	return new EventControlClient({
+		stateDir: options.stateDir,
+		clientName: "interactive-terminal"
+	}).request("decideHeld", {
 		decisionId,
 		decision
 	});
@@ -583,6 +586,25 @@ function assertDoctorReportV1(report) {
 	if (Object.keys(report).some((key) => !DOCTOR_REPORT_V1_KEYS.includes(key))) throw new Error("doctor-v1 report is closed");
 	return report;
 }
+const DOCTOR_REPORT_V2_KEYS = [
+	"schemaVersion",
+	"owner",
+	"switch",
+	"lineages",
+	"superseded",
+	"points",
+	"awaitingReapproval",
+	"activationIntents",
+	"sources",
+	"recovery",
+	"judgeBoundary",
+	"judge",
+	"whatsapp"
+];
+function assertDoctorReportV2(report) {
+	if (Object.keys(report).some((key) => !DOCTOR_REPORT_V2_KEYS.includes(key))) throw new Error("doctor-v2 report is closed");
+	return report;
+}
 async function doctor(options = {}) {
 	return await new EventControlClient({ stateDir: options.stateDir }).request("doctor");
 }
@@ -810,7 +832,7 @@ async function removeTarget(targetId, options = {}) {
 //#endregion
 //#region src/version.ts
 /** The package version, read from package.json at build time. */
-const VERSION = "0.16.0";
+const VERSION = "0.18.0";
 //#endregion
 //#region src/mcp/server.ts
 function reply(data) {
@@ -829,6 +851,10 @@ async function createEventsMcpServer(options = {}) {
 		name: "agent-events",
 		version: VERSION
 	});
+	const b3 = (operation, args, throughOwner) => options.b3Registrar === void 0 ? throughOwner() : options.b3Registrar.owner.handle({
+		operation,
+		args
+	});
 	server.registerTool("events_status", {
 		title: "Local event service status",
 		description: "Reports whether the local event service has an owner.",
@@ -872,7 +898,7 @@ async function createEventsMcpServer(options = {}) {
 		destructiveHint: false,
 		idempotentHint: true
 	});
-	runtimeTool("events_doctor", "Local event service doctor", "Reports content-free lineage validation, pending metadata/materialisation retry health, recovery and protocol health.", doctor, {
+	runtimeTool("events_doctor", "Local event service doctor", "Reports content-free lineage, retry, recovery, judge authority, hold-clock and protocol health.", doctor, {
 		destructiveHint: false,
 		idempotentHint: true
 	});
@@ -934,25 +960,28 @@ async function createEventsMcpServer(options = {}) {
 	strictControlTool("events_subscriber_add", "Add subscriber", "Creates one immutable subscriber version.", { document: unknown() }, (args) => addSubscriber(args.document, options), true);
 	strictControlTool("events_subscriber_update", "Update subscriber", "Creates one replacement immutable subscriber version.", { document: unknown() }, (args) => updateSubscriber(args.document, options), true);
 	strictControlTool("events_subscriber_remove", "Remove subscriber", "Revokes every live version of one subscriber and closes its streams.", { subscriberId: string().min(1) }, (args) => removeSubscriber(args.subscriberId, options), true);
-	strictControlTool("events_judges_list", "List judges", "Returns the typed Phase-E unavailable result.", {}, () => judgesList(options));
-	strictControlTool("events_judge_add", "Add judge", "Returns the typed Phase-E unavailable result.", { document: unknown() }, (args) => addJudge(args.document, options), true);
-	strictControlTool("events_judge_update", "Update judge", "Returns the typed Phase-E unavailable result.", { document: unknown() }, (args) => updateJudge(args.document, options), true);
-	strictControlTool("events_judge_remove", "Remove judge", "Returns the typed Phase-E unavailable result.", { judgeId: string().min(1) }, (args) => removeJudge(args.judgeId, options), true);
-	strictControlTool("events_judge_test", "Test judge", "Returns the typed Phase-E unavailable result.", {
+	strictControlTool("events_judges_list", "List judges", "Lists content-free immutable judge metadata.", {}, () => judgesList(options));
+	strictControlTool("events_judge_add", "Add judge", "Creates an immutable, initially inactive judge version.", { document: unknown() }, (args) => b3("addJudge", { document: args.document }, () => addJudge(args.document, options)), true);
+	strictControlTool("events_judge_update", "Update judge", "Creates an immutable replacement judge version.", { document: unknown() }, (args) => b3("updateJudge", { document: args.document }, () => updateJudge(args.document, options)), true);
+	strictControlTool("events_judge_remove", "Remove judge", "Removes every live immutable version of one judge.", { judgeId: string().min(1) }, (args) => b3("removeJudge", { judgeId: args.judgeId }, () => removeJudge(args.judgeId, options)), true);
+	strictControlTool("events_judge_test", "Test judge", "Tests one active exact judge version with the daemon-fixed synthetic event.", {
 		judgeId: string().min(1),
 		version: number().int().positive()
 	}, (args) => judgeTest(args.judgeId, args.version, options));
-	strictControlTool("events_budget_show", "Show budget", "Returns the typed Phase-E unavailable result.", {}, () => budgetShow(options));
-	strictControlTool("events_budget_update", "Update budget", "Returns the typed Phase-E unavailable result.", { document: unknown() }, (args) => updateBudget(args.document, options), true);
-	strictControlTool("events_judge_kinds_list", "List judge kinds", "Returns the typed Phase-E unavailable result.", {}, () => judgeKindsList(options));
-	strictControlTool("events_judge_kind_enable", "Enable judge kind", "Returns the typed Phase-E or E2 unavailable result.", { kind: string().min(1) }, (args) => enableJudgeKind(args.kind, options), true);
-	strictControlTool("events_judge_kind_disable", "Disable judge kind", "Returns the typed Phase-E or E2 unavailable result.", { kind: string().min(1) }, (args) => disableJudgeKind(args.kind, options), true);
+	strictControlTool("events_budget_show", "Show budget", "Lists immutable judge budgets and the active singleton.", {}, () => budgetShow(options));
+	strictControlTool("events_budget_update", "Update budget", "Creates a pending immutable global budget and prepares its approval.", { document: unknown() }, (args) => b3("updateBudget", { document: args.document }, () => updateBudget(args.document, options)), true);
+	strictControlTool("events_judge_kinds_list", "List judge kinds", "Lists disabled/enabled judge kinds and the typed Laya E2 seam.", {}, () => judgeKindsList(options));
+	strictControlTool("events_judge_kind_enable", "Enable judge kind", "Prepares, but never approves or claims, judge-kind enablement.", { kind: string().min(1) }, (args) => b3("enableJudgeKind", { kind: args.kind }, () => enableJudgeKind(args.kind, options)), true);
+	strictControlTool("events_judge_kind_disable", "Disable judge kind", "Immediately disables one available judge kind; Laya remains typed E2-unavailable.", { kind: string().min(1) }, (args) => {
+		const kind = args.kind;
+		return b3("disableJudgeKind", { kind }, () => disableJudgeKind(kind, options));
+	}, true);
 	strictControlTool("events_judge_model_status", "Judge model status", "Returns the typed Phase-E2 unavailable result.", {}, () => judgeModelStatus(options));
 	strictControlTool("events_judge_model_remove", "Remove judge model", "Returns the typed Phase-E2 unavailable result.", {}, () => removeJudgeModel(options), true);
 	strictControlTool("events_deliveries_list", "List deliveries", "Lists content-free delivery metadata.", {}, () => deliveriesList(options));
 	strictControlTool("events_delivery_retry", "Retry delivery", "Retries one exact retryable delivery.", { deliveryId: string().min(1) }, (args) => retryDelivery(args.deliveryId, options), true);
 	strictControlTool("events_delivery_drop", "Drop delivery", "Drops one exact dead-letter delivery and its retained payload.", { deliveryId: string().min(1) }, (args) => dropDelivery(args.deliveryId, options), true);
-	strictControlTool("events_held_list", "List held decisions", "Returns the typed empty held-decision result; judges, which can hold an event, are not available yet.", {}, () => heldList(options));
+	strictControlTool("events_held_list", "List held decisions", "Lists content-free held-decision metadata; only a terminal/app may resolve one.", {}, () => heldList(options));
 	controlTool("events_catalogue_show", "Show local event definition", "Shows one selectable local event definition.", { type: string() }, (args) => catalogueShow(args.type, options));
 	controlTool("events_sources_list", "List event sources", "Lists configured local event sources.", {}, () => sourcesList(options));
 	controlTool("events_source_show", "Show event source", "Shows one configured local event source.", { source: string() }, (args) => sourceShow(args.source, options));
@@ -973,12 +1002,253 @@ async function createEventsMcpServer(options = {}) {
 	return {
 		server,
 		async connectStdio() {
-			const { StdioServerTransport } = await import("./stdio-CD7QQBAh.mjs");
+			const { StdioServerTransport } = await import("./stdio-Dp1EE6ok.mjs");
 			await server.connect(new StdioServerTransport());
 		}
 	};
 }
 //#endregion
+//#region src/domain/judges.ts
+const TYPESAFE_SYSTEM_ONE_ENDPOINT = "https://api.typesafe.ai/v1/systemone";
+const JUDGE_BUDGET_ID = "judge-budget";
+/** Provider record: docs/superpowers/plans/2026-10-10-events-phase-e-provider-record.md, read 2026-10-10. */
+const APPROVED_TYPESAFE_MODELS = ["jev-1.13.0"];
+/** Phase E's closed registry. The lifecycle module owns the literal vocabulary; this registry owns its availability. */
+const JUDGE_KIND_DEFINITIONS = [
+	{
+		kind: JUDGE_KINDS[0],
+		availability: "available"
+	},
+	{
+		kind: JUDGE_KINDS[1],
+		availability: "unavailable",
+		unavailableCode: "E2_REQUIRED"
+	},
+	{
+		kind: JUDGE_KINDS[2],
+		availability: "available"
+	}
+];
+function fail$3(message, code = "VERSION_DOCUMENT_INVALID") {
+	throw new EventDomainError(code, message);
+}
+function record$1(value, name) {
+	if (typeof value !== "object" || value === null || Array.isArray(value)) return fail$3(`${name} is an object`);
+	try {
+		return JSON.parse(canonicalJson(value));
+	} catch {
+		return fail$3(`${name} is canonical JSON`);
+	}
+}
+function exactKeys$1(value, keys, name) {
+	const found = Object.keys(value).sort();
+	const wanted = [...keys].sort();
+	if (found.length !== wanted.length || found.some((key, index) => key !== wanted[index])) fail$3(`${name} has exactly its canonical fields`);
+}
+function text$1(value, name) {
+	if (typeof value !== "string" || value.length === 0) return fail$3(`${name} is a non-empty string`);
+	return value;
+}
+function positiveInteger$2(value, name) {
+	if (!Number.isSafeInteger(value) || value < 1) return fail$3(`${name} is a positive safe integer`);
+	return value;
+}
+function protocol(value, name) {
+	if (value.protocol === "noul") {
+		exactKeys$1(value, ["protocol"], name);
+		return { protocol: "noul" };
+	}
+	if (value.protocol !== "json-score") return fail$3(`${name} has protocol noul or json-score`);
+	exactKeys$1(value, ["protocol", "scorePointer"], name);
+	const scorePointer = text$1(value.scorePointer, `${name} scorePointer`);
+	const parsed = parsePointer(scorePointer);
+	if (!parsed.ok || parsed.value.includes("*")) return fail$3(`${name} scorePointer is one concrete JSON Pointer`);
+	return {
+		protocol: "json-score",
+		scorePointer
+	};
+}
+function identity(value, name) {
+	return {
+		judgeId: text$1(value.judgeId, `${name} id`),
+		version: positiveInteger$2(value.version, `${name} version`)
+	};
+}
+function localAddress(value) {
+	if (!Array.isArray(value) || value.length !== 1) return fail$3("a local judge approvedAddressSet has one exact literal");
+	const entry = text$1(value[0], "a local judge approvedAddressSet entry");
+	try {
+		assertApprovedAddressSet([entry]);
+		return [parseIpLiteral(entry).address];
+	} catch {
+		return fail$3("a local judge approvedAddressSet has one valid literal");
+	}
+}
+/** The one canonical, immutable judge document form. E2's laya seam is recognised but intentionally unavailable. */
+function canonicalJudge(value) {
+	const judge = record$1(value, "a judge document");
+	const kind = judge.kind;
+	if (!JUDGE_KINDS.includes(kind)) return fail$3("a judge document has a known judge kind");
+	if (kind === "laya") return fail$3("laya is unavailable until E2", "E2_REQUIRED");
+	if (kind === "typesafe") {
+		exactKeys$1(judge, [
+			"judgeId",
+			"version",
+			"kind",
+			"provider",
+			"model",
+			"endpoint",
+			"promptTemplate",
+			"protocol"
+		], "a typesafe judge document");
+		if (judge.provider !== "typesafe") return fail$3("a typesafe judge names the TypeSafe Jev adapter");
+		if (!APPROVED_TYPESAFE_MODELS.includes(judge.model)) return fail$3("a typesafe judge names one concrete model listed in the provider record");
+		if (judge.endpoint !== "https://api.typesafe.ai/v1/systemone") return fail$3("a typesafe judge has its fixed System One endpoint");
+		if (protocol({ protocol: judge.protocol }, "a typesafe judge document").protocol !== "noul") return fail$3("a typesafe judge uses the noul protocol");
+		return {
+			...identity(judge, "a typesafe judge"),
+			kind: JUDGE_KIND_TYPESAFE,
+			provider: JUDGE_KIND_TYPESAFE,
+			model: judge.model,
+			endpoint: TYPESAFE_SYSTEM_ONE_ENDPOINT,
+			promptTemplate: text$1(judge.promptTemplate, "a typesafe judge prompt template"),
+			protocol: "noul"
+		};
+	}
+	const localProtocol = protocol(judge.protocol === "json-score" ? {
+		protocol: judge.protocol,
+		scorePointer: judge.scorePointer
+	} : { protocol: judge.protocol }, "a local judge document");
+	exactKeys$1(judge, localProtocol.protocol === "json-score" ? [
+		"judgeId",
+		"version",
+		"kind",
+		"provider",
+		"model",
+		"endpoint",
+		"approvedAddressSet",
+		"promptTemplate",
+		"protocol",
+		"scorePointer"
+	] : [
+		"judgeId",
+		"version",
+		"kind",
+		"provider",
+		"model",
+		"endpoint",
+		"approvedAddressSet",
+		"promptTemplate",
+		"protocol"
+	], "a local judge document");
+	const approvedAddressSet = localAddress(judge.approvedAddressSet);
+	const endpoint = text$1(judge.endpoint, "a local judge endpoint");
+	try {
+		const local = validateLocalEndpoint(endpoint, approvedAddressSet);
+		if (local.url.search !== "") return fail$3("a local judge endpoint has no query");
+		return {
+			...identity(judge, "a local judge"),
+			kind: JUDGE_KIND_LOCAL_ENDPOINT,
+			provider: text$1(judge.provider, "a local judge provider"),
+			model: text$1(judge.model, "a local judge model"),
+			endpoint: local.url.href,
+			approvedAddressSet,
+			promptTemplate: text$1(judge.promptTemplate, "a local judge prompt template"),
+			...localProtocol
+		};
+	} catch (error) {
+		if (error instanceof EventDomainError) throw error;
+		return fail$3("a local judge has a literal loopback endpoint and its exact approved address");
+	}
+}
+function limits(value, name) {
+	const limit = record$1(value, name);
+	exactKeys$1(limit, [
+		"callsPerRollingHour",
+		"inputTokensPerRolling30Days",
+		"concurrency"
+	], name);
+	return {
+		callsPerRollingHour: positiveInteger$2(limit.callsPerRollingHour, `${name} callsPerRollingHour`),
+		inputTokensPerRolling30Days: positiveInteger$2(limit.inputTokensPerRolling30Days, `${name} inputTokensPerRolling30Days`),
+		concurrency: positiveInteger$2(limit.concurrency, `${name} concurrency`)
+	};
+}
+/** The singleton's complete global and per-provider rolling ceilings, with no implicit defaults. */
+function canonicalJudgeBudget(value) {
+	const budget = record$1(value, "a judge budget document");
+	exactKeys$1(budget, [
+		"budgetId",
+		"version",
+		"global",
+		"providers"
+	], "a judge budget document");
+	if (budget.budgetId !== "judge-budget") return fail$3(`a judge budget id is ${JUDGE_BUDGET_ID}`);
+	if (!Array.isArray(budget.providers)) return fail$3("judge budget providers are an array");
+	const providers = budget.providers.map((entry) => {
+		const provider = record$1(entry, "a judge provider budget");
+		exactKeys$1(provider, [
+			"provider",
+			"callsPerRollingHour",
+			"inputTokensPerRolling30Days",
+			"concurrency"
+		], "a judge provider budget");
+		return {
+			provider: text$1(provider.provider, "a judge provider id"),
+			callsPerRollingHour: positiveInteger$2(provider.callsPerRollingHour, "a judge provider budget callsPerRollingHour"),
+			inputTokensPerRolling30Days: positiveInteger$2(provider.inputTokensPerRolling30Days, "a judge provider budget inputTokensPerRolling30Days"),
+			concurrency: positiveInteger$2(provider.concurrency, "a judge provider budget concurrency")
+		};
+	});
+	if ([...providers].sort((left, right) => left.provider < right.provider ? -1 : left.provider > right.provider ? 1 : 0).some((entry, index) => entry.provider !== providers[index]?.provider) || new Set(providers.map((entry) => entry.provider)).size !== providers.length) return fail$3("judge budget providers are sorted and duplicate-free");
+	return {
+		budgetId: JUDGE_BUDGET_ID,
+		version: positiveInteger$2(budget.version, "a judge budget version"),
+		global: limits(budget.global, "a global judge budget"),
+		providers
+	};
+}
+/** The closed kind registry lookup, including E2's intentionally unavailable laya slot. */
+function judgeKindDefinition(kind) {
+	const definition = JUDGE_KIND_DEFINITIONS.find((candidate) => candidate.kind === kind);
+	if (definition === void 0) return fail$3("a judge kind has a registry definition");
+	return definition;
+}
+/** Canonicalises one inert kind-enablement version; no pointer or availability change happens here. */
+function canonicalJudgeKindEnablement(value) {
+	const enablement = record$1(value, "a judge-kind document");
+	if (!JUDGE_KINDS.includes(enablement.kind)) return fail$3("a judge-kind document has a known judge kind");
+	const kind = enablement.kind;
+	if (judgeKindDefinition(kind).availability === "unavailable") return fail$3("laya is unavailable until E2", "E2_REQUIRED");
+	const id = `judge-kind:${kind}`;
+	if (enablement.id !== id) return fail$3(`a judge-kind document id is ${id}`);
+	if (kind === "typesafe") {
+		exactKeys$1(enablement, [
+			"id",
+			"kind",
+			"version",
+			"endpoint"
+		], "a typesafe judge-kind document");
+		if (enablement.endpoint !== "https://api.typesafe.ai/v1/systemone") return fail$3("a typesafe judge-kind document has the fixed System One endpoint");
+		return {
+			id: "judge-kind:typesafe",
+			kind: JUDGE_KIND_TYPESAFE,
+			version: positiveInteger$2(enablement.version, "a judge-kind version"),
+			endpoint: TYPESAFE_SYSTEM_ONE_ENDPOINT
+		};
+	}
+	exactKeys$1(enablement, [
+		"id",
+		"kind",
+		"version"
+	], "a local-endpoint judge-kind document");
+	return {
+		id: "judge-kind:local-endpoint",
+		kind: JUDGE_KIND_LOCAL_ENDPOINT,
+		version: positiveInteger$2(enablement.version, "a judge-kind version")
+	};
+}
+//#endregion
 //#region src/domain/source-options.ts
 function fail$2(message) {
 	throw new EventDomainError("VERSION_DOCUMENT_INVALID", message);
@@ -1263,19 +1533,6 @@ function canonicalTarget(value) {
 		default: return fail("a target document has a known kind");
 	}
 }
-/** The one canonical form of a judge version — stored, and embedded in every rule that names it. */
-function canonicalJudge(value) {
-	const judge = cloneJsonRecord(value, "a judge document");
-	if (!isJudgeKind(judge.kind)) return fail("a judge document has a known judge kind");
-	return {
-		...judge,
-		judgeId: requiredText(judge.judgeId, "a judge id"),
-		version: positiveInteger(judge.version, "a judge version"),
-		kind: judge.kind,
-		provider: requiredText(judge.provider, "a judge provider"),
-		model: requiredText(judge.model, "a judge model")
-	};
-}
 /** The one canonical form of a subscriber version — stored, and embedded in every rule that names it. */
 function canonicalSubscriber(value) {
 	const subscriber = cloneJsonRecord(value, "a subscriber document");
@@ -1338,6 +1595,15 @@ function canonicalFullRuleDocument(value) {
 	if (!eventType.startsWith(`${source.channel}.`)) return fail("a rule event type belongs to its source channel", "SOURCE_CHANNEL_UNSUPPORTED");
 	const condition = canonicaliseCondition(definition.value, rule.condition);
 	if (!condition.ok) return fail(condition.issues[0]?.message ?? "the rule condition is not valid");
+	let agentic;
+	if (rule.agentic !== void 0) {
+		const canonical = canonicaliseAgenticCondition(definition.value, condition.value, rule.agentic);
+		if (!canonical.ok) return fail(canonical.issues[0]?.message ?? "the rule agentic condition is not valid");
+		agentic = {
+			...canonical.value,
+			judge: canonicalJudge(canonical.value.judge)
+		};
+	}
 	const mapping = canonicalJsonValue(rule.mapping, "rule mapping");
 	const compiledMapping = compileMapping(definition.value, mapping);
 	if (!compiledMapping.ok) return fail(compiledMapping.issues[0]?.message ?? "the rule mapping is not valid");
@@ -1349,6 +1615,7 @@ function canonicalFullRuleDocument(value) {
 		if (subscribers.find((subscriber) => subscriber.subscriberId === target.subscriberId && subscriber.version === target.subscriberVersion) === void 0) return fail("an SSE target embeds its exact subscriber version");
 	}
 	const judges = Array.isArray(rule.judges) ? rule.judges.map(canonicalJudge) : fail("rule judges are an array");
+	if (judges.length !== 0) return fail("rule judges are represented only by the optional agentic sibling");
 	let cloudEventType;
 	if (rule.cloudEventType !== void 0) {
 		const chosen = validateCloudEventType(rule.cloudEventType);
@@ -1364,6 +1631,7 @@ function canonicalFullRuleDocument(value) {
 			version: eventVersion
 		},
 		condition: condition.value,
+		...agentic === void 0 ? {} : { agentic },
 		mapping,
 		...cloudEventType === void 0 ? {} : { cloudEventType },
 		targets,
@@ -1373,23 +1641,6 @@ function canonicalFullRuleDocument(value) {
 		retention: canonicalRetention(rule.retention)
 	};
 }
-function canonicalBudget(value) {
-	const budget = cloneJsonRecord(value, "a judge budget document");
-	return {
-		...budget,
-		budgetId: requiredText(budget.budgetId, "a judge budget id"),
-		version: positiveInteger(budget.version, "a judge budget version")
-	};
-}
-function canonicalEnablement(value) {
-	const enablement = cloneJsonRecord(value, "a judge-kind document");
-	if (!isJudgeKind(enablement.kind)) return fail("a judge-kind document has a known judge kind");
-	return {
-		...enablement,
-		kind: enablement.kind,
-		version: positiveInteger(enablement.version, "a judge-kind version")
-	};
-}
 function canonicalEnableAll(value) {
 	const document = cloneJsonRecord(value, "an enable-all document");
 	if (!Array.isArray(document.ruleVersions)) return fail("enable-all rule versions are an array");
@@ -1426,12 +1677,12 @@ function normaliseActivationDocument(value) {
 		case "judge-budget": return {
 			documentVersion: 1,
 			kind: "judge-budget",
-			budget: canonicalBudget(document.budget)
+			budget: canonicalJudgeBudget(document.budget)
 		};
 		case "judge-kind": return {
 			documentVersion: 1,
 			kind: "judge-kind",
-			enablement: canonicalEnablement(document.enablement)
+			enablement: canonicalJudgeKindEnablement(document.enablement)
 		};
 		case "enable-all": return canonicalEnableAll(document);
 		default: return fail("an activation document has a known kind");
@@ -1466,11 +1717,11 @@ function derivedVersions(document) {
 				id: subscriber.subscriberId,
 				version: subscriber.version
 			})),
-			...document.rule.judges.map((judge) => ({
+			...document.rule.agentic === void 0 ? [] : [{
 				kind: "judge",
-				id: judge.judgeId,
-				version: judge.version
-			}))
+				id: document.rule.agentic.judge.judgeId,
+				version: document.rule.agentic.judge.version
+			}]
 		];
 		case "judge-budget": return [{
 			kind: "judge-budget",
@@ -2232,4 +2483,4 @@ const B3_CONTROL_CONTRACT = Object.freeze({
 	judgeUnavailable: B3_JUDGE_UNAVAILABLE_VARIANTS
 });
 //#endregion
-export { updateRule as $, eventPaths as $t, normaliseSourceOptions as A, EventControlClient as At, subscribersList as B, newInstanceRecord as Bt, normaliseActivationDocument as C, deliveriesList as Ct, normaliseGmailSourceOptions as D, catalogueList as Dt, classifySourceOptionChange as E, retryDelivery as Et, targetsList as F, encodeControlFrame as Ft, sourceShow as G, assertControlSupported as Gt, stop as H, readInstance as Ht, updateTarget as I, isControlHello as It, disableRule as J, verifyControlSocket as Jt, sourcesList as K, assertSocketPathFits as Kt, targetTest as L, isControlRequest as Lt, createEventsMcpServer as M, CONTROL_PROTOCOL_VERSIONS as Mt, addTarget as N, ControlFrameReader as Nt, normaliseResendSourceOptions as O, catalogueShow as Ot, removeTarget as P, controlFailure as Pt, rulesList as Q, ensureOwnerOnlyFile as Qt, addSubscriber as R, negotiateVersion as Rt, disclosureBindingFor as S, decideHeld as St, sseDeliveryTarget as T, heldList as Tt, status as U, removeInstance as Ut, updateSubscriber as V, processIsLive as Vt, loadSqlite as W, writeInstance as Wt, removeRule as X, ensureEventPaths as Xt, enableRule as Y, verifyPrivateSocketDirectory as Yt, ruleShow as Z, ensureEventSocketDirectory as Zt, activationDocumentDigest as _, assertDoctorReportV1 as _t, B3_CONTROL_V1_OPERATION_SPECS as a, budgetShow as at, canonicalSubscriber as b, isActivationFailureCode as bt, B3_CONTROL_V1_SUCCESSOR_REQUIREMENT as c, judgeKindsList as ct, B3_SECRET_TERMINAL_ORIGIN as d, judgesList as dt, installErrorSink as en, ruleTest as et, isB3ControlOperation as f, removeJudge as ft, isOwnerControlWireOperation as g, enableAll as gt, OWNER_CONTROL_WIRES as h, updateJudge as ht, B3_CONTROL_ERROR_CODES as i, addJudge as it, normaliseWhatsAppSourceOptions as j, probeControl as jt, normaliseSlackSourceOptions as k, approvalView as kt, B3_DESKTOP_CONTROL_OPERATIONS as l, judgeModelStatus as lt, renderB3ApprovalPreviewV1 as m, updateBudget as mt, B3_CAPABILITIES as n, pause as nt, B3_CONTROL_V1_RESULT_OPERATIONS as o, disableJudgeKind as ot, isB3SecretOperation as p, removeJudgeModel as pt, createRule as q, controlEndpoint as qt, B3_CONTROL_CONTRACT as r, resume as rt, B3_CONTROL_V1_SCHEMA_VERSION as s, enableJudgeKind as st, B3_APPROVAL_VIEW_VARIANTS as t, ruleTestRetained as tt, B3_JUDGE_UNAVAILABLE_VARIANTS as u, judgeTest as ut, canonicalFullRuleDocument as v, doctor as vt, canonicalSseSubscriber as w, dropDelivery as wt, canonicalTarget as x, disableAll as xt, canonicalJudge as y, ACTIVATION_FAILURE as yt, removeSubscriber as z, mayRecoverStaleInstance as zt };
+export { sourcesList as $, assertControlSupported as $t, normaliseWhatsAppSourceOptions as A, decideHeld as At, addTarget as B, CONTROL_PROTOCOL_VERSIONS as Bt, canonicalSseSubscriber as C, enableAll as Ct, normaliseResendSourceOptions as D, ACTIVATION_FAILURE as Dt, normaliseGmailSourceOptions as E, doctor as Et, canonicalJudgeBudget as F, catalogueList as Ft, addSubscriber as G, isControlRequest as Gt, targetsList as H, controlFailure as Ht, canonicalJudgeKindEnablement as I, catalogueShow as It, updateSubscriber as J, newInstanceRecord as Jt, removeSubscriber as K, negotiateVersion as Kt, judgeKindDefinition as L, approvalView as Lt, JUDGE_BUDGET_ID as M, dropDelivery as Mt, JUDGE_KIND_DEFINITIONS as N, heldList as Nt, normaliseSlackSourceOptions as O, isActivationFailureCode as Ot, canonicalJudge as P, retryDelivery as Pt, sourceShow as Q, writeInstance as Qt, createEventsMcpServer as R, EventControlClient as Rt, normaliseActivationDocument as S, updateJudge as St, classifySourceOptionChange as T, assertDoctorReportV2 as Tt, updateTarget as U, encodeControlFrame as Ut, removeTarget as V, ControlFrameReader as Vt, targetTest as W, isControlHello as Wt, status as X, readInstance as Xt, stop as Y, processIsLive as Yt, loadSqlite as Z, removeInstance as Zt, activationDocumentDigest as _, judgeTest as _t, B3_CONTROL_V1_OPERATION_SPECS as a, ensureEventSocketDirectory as an, rulesList as at, canonicalTarget as b, removeJudgeModel as bt, B3_CONTROL_V1_SUCCESSOR_REQUIREMENT as c, installErrorSink as cn, ruleTestRetained as ct, B3_SECRET_TERMINAL_ORIGIN as d, addJudge as dt, assertSocketPathFits as en, createRule as et, isB3ControlOperation as f, budgetShow as ft, isOwnerControlWireOperation as g, judgeModelStatus as gt, OWNER_CONTROL_WIRES as h, judgeKindsList as ht, B3_CONTROL_ERROR_CODES as i, ensureEventPaths as in, ruleShow as it, APPROVED_TYPESAFE_MODELS as j, deliveriesList as jt, normaliseSourceOptions as k, disableAll as kt, B3_DESKTOP_CONTROL_OPERATIONS as l, pause as lt, renderB3ApprovalPreviewV1 as m, enableJudgeKind as mt, B3_CAPABILITIES as n, verifyControlSocket as nn, enableRule as nt, B3_CONTROL_V1_RESULT_OPERATIONS as o, ensureOwnerOnlyFile as on, updateRule as ot, isB3SecretOperation as p, disableJudgeKind as pt, subscribersList as q, mayRecoverStaleInstance as qt, B3_CONTROL_CONTRACT as r, verifyPrivateSocketDirectory as rn, removeRule as rt, B3_CONTROL_V1_SCHEMA_VERSION as s, eventPaths as sn, ruleTest as st, B3_APPROVAL_VIEW_VARIANTS as t, controlEndpoint as tn, disableRule as tt, B3_JUDGE_UNAVAILABLE_VARIANTS as u, resume as ut, canonicalFullRuleDocument as v, judgesList as vt, sseDeliveryTarget as w, assertDoctorReportV1 as wt, disclosureBindingFor as x, updateBudget as xt, canonicalSubscriber as y, removeJudge as yt, VERSION as z, probeControl as zt };