@agentcomms/events-daemon 0.16.0 → 0.18.0

package/dist/index.d.mts

@@ -1,7 +1,7 @@
 import "@agentcomms/core";
-import { CanonicalCondition, JsonValue } from "@agentcomms/events";
+import { AgenticConditionV1, CanonicalCondition, JsonValue } from "@agentcomms/events";
 //#endregion
-//#region ../../node_modules/.pnpm/@modelcontextprotocol+server@2.0.0/node_modules/@modelcontextprotocol/server/dist/types-DUs7mGBv.d.mts
+//#region ../../node_modules/.pnpm/@modelcontextprotocol+server@2.3.1/node_modules/@modelcontextprotocol/server/dist/types-DUs7mGBv.d.mts
 //#region ../../node_modules/.pnpm/json-schema-typed@8.0.2/node_modules/json-schema-typed/draft_2020_12.d.ts
 type MaybeReadonlyArray<T> = Array<T> | ReadonlyArray<T>;
 type ValueOf<T> = T[keyof T];
@@ -5372,7 +5372,7 @@ declare namespace index_d_exports {
   export { $brand, $input, $output, BRAND, CompileOptions, GlobalMeta, INVALID, Infer$1 as Infer, IssueData, JSONType, NEVER, $RefinementCtx as RefinementCtx, SafeExtendShape, Schema, TimePrecision, TypeOf, ZodAny, ZodArray, ZodBase64, ZodBase64URL, ZodBigInt, ZodBigIntFormat, ZodBoolean, ZodCIDRv4, ZodCIDRv6, ZodCUID, ZodCUID2, ZodCatch, ZodCodec, ZodCoercedBigInt, ZodCoercedBoolean, ZodCoercedDate, ZodCoercedNumber, ZodCoercedString, ZodCompileAsyncError, ZodCompileUnsupportedError, ZodCreditCard, ZodCustom, ZodCustomStringFormat, ZodDate, ZodDefault, ZodDiscriminatedUnion, ZodE164, ZodEmail, ZodEmoji, ZodEnum, ZodError, ZodErrorMap, ZodExactOptional, ZodFile, ZodFirstPartySchemaTypes, ZodFirstPartyTypeKind, ZodFlattenedError, ZodFloat32, ZodFloat64, ZodFormattedError, ZodFunction, ZodGUID, ZodIBAN, ZodIPv4, ZodIPv6, ZodISODate, ZodISODateTime, ZodISODuration, ZodISOTime, ZodInstanceOf, ZodInt, ZodInt32, ZodInt64, ZodIntersection, ZodIssue, ZodIssueCode, ZodJSONSchema, ZodJSONSchemaInternals, ZodJWT, ZodKSUID, ZodLazy, ZodLiteral, ZodMAC, ZodMap, ZodNaN, ZodNanoID, ZodNever, ZodNonOptional, ZodNull, ZodNullable, ZodNumber, ZodNumberFormat, ZodObject, ZodOptional, ZodPipe, ZodPrefault, ZodPreprocess, ZodPromise, ZodRawShape$1 as ZodRawShape, ZodReadonly, ZodRealError, ZodRecord, ZodSafeParseError, ZodSafeParseResult, ZodSafeParseSuccess, ZodSchema, ZodSet, ZodStandardSchemaWithJSON, ZodString, ZodStringFormat, ZodSuccess, ZodSymbol, ZodTemplateLiteral, ZodTransform, ZodTuple, ZodType, ZodTypeAny, ZodUInt32, ZodUInt64, ZodULID, ZodURL, ZodUUID, ZodUndefined, ZodUnion, ZodUnknown, ZodVoid, ZodXID, ZodXor, _ZodBigInt, _ZodBoolean, _ZodDate, _ZodNumber, _ZodString, _ZodType, _default, _function, any, array, base64, base64url, bigint$1 as bigint, boolean$1 as boolean, _catch as catch, check, cidrv4, cidrv6, clone, codec, coerce_d_exports as coerce, compile, config, index_d_exports$1 as core, creditCard, cuid, cuid2, currencyCode, custom, date$2 as date, decode, decodeAsync, deepPartial, external_d_exports as default, describe, discriminatedUnion, e164, email, emoji, encode, encodeAsync, _endsWith as endsWith, _enum as enum, exactOptional, file, flattenError, float32, float64, formatError, fromJSONSchema, _function as function, getDiscriminatedOption, getErrorMap, globalRegistry, _gt as gt, _gte as gte, guid, hash, hex, hostname, httpUrl, iban, _includes as includes, output$1 as infer, inferFlattenedErrors, inferFormattedError, input, _instanceof as instanceof, int, int32, int64, intersection, invertCodec, ipv4, ipv6, iso_d_exports as iso, json, jwt, keyof, ksuid, lazy, _length as length, literal, index_d_exports$2 as locales, looseObject, looseRecord, _lowercase as lowercase, _lt as lt, _lte as lte, mac, map, _maxLength as maxLength, _maxSize as maxSize, memoizer, meta, _mime as mime, _minLength as minLength, _minSize as minSize, _multipleOf as multipleOf, nan, nanoid, nativeEnum, _negative as negative, never, _nonnegative as nonnegative, nonoptional, _nonpositive as nonpositive, _normalize as normalize, _null as null, nullable, nullish, number$1 as number, object, optional, output, _overwrite as overwrite, parse, parseAsync, partialRecord, pipe, _positive as positive, prefault, preprocess, prettifyError, promise, _properties as properties, _property as property, readonly, record, refine, _regex as regex, regexes_d_exports as regexes, registry, safeDecode, safeDecodeAsync, safeEncode, safeEncodeAsync, safeParse, safeParseAsync, set, setErrorMap, _size as size, _slugify as slugify, _startsWith as startsWith, strictObject, string$1 as string, stringFormat, stringbool, success, superRefine, symbol, templateLiteral, toJSONSchema, _toLowerCase as toLowerCase, _toUpperCase as toUpperCase, toZod, transform, treeifyError, _trim as trim, tuple, uint32, uint64, ulid, _undefined as undefined, union, unknown, _uppercase as uppercase, url, util_d_exports as util, uuid, uuidv4, uuidv6, uuidv7, validate, validateAsync, _void as void, withParser, xid, xor, external_d_exports as z };
 }
 //#endregion
-//#region ../../node_modules/.pnpm/@modelcontextprotocol+core@2.0.0/node_modules/@modelcontextprotocol/core/dist/auth-BWdKR39I.d.mts
+//#region ../../node_modules/.pnpm/@modelcontextprotocol+core@2.3.1/node_modules/@modelcontextprotocol/core/dist/auth-Anm-lwWi.d.mts
 //#region src/types.d.ts
 type JSONValue = string | number | boolean | null | JSONObject | JSONArray;
 type JSONObject = {
@@ -5425,6 +5425,33 @@ declare const NotificationSchema: ZodObject<{
     }, $loose>>;
   }, $loose>>;
 }, $strip>;
+/**
+ * The contents of a result's `_meta` field (the 2026-07-28 `ResultMetaObject`).
+ * Loose — implementation-specific keys pass through.
+ *
+ * The serverInfo key identifies the server software producing the response
+ * (servers SHOULD include it on every response; the value is self-reported
+ * and intended for display, logging, and debugging). The getter defers the
+ * `ImplementationSchema` reference, which is declared later in this file.
+ */
+declare const ResultMetaObjectSchema: ZodObject<{
+  readonly "io.modelcontextprotocol/serverInfo": ZodCatch<ZodOptional<ZodObject<{
+    version: ZodString;
+    websiteUrl: ZodOptional<ZodString>;
+    description: ZodOptional<ZodString>;
+    icons: ZodOptional<ZodArray<ZodObject<{
+      src: ZodString;
+      mimeType: ZodOptional<ZodString>;
+      sizes: ZodOptional<ZodArray<ZodString>>;
+      theme: ZodOptional<ZodEnum<{
+        light: "light";
+        dark: "dark";
+      }>>;
+    }, $strip>>>;
+    name: ZodString;
+    title: ZodOptional<ZodString>;
+  }, $strip>>>;
+}, $loose>;
 declare const ResultSchema: ZodObject<{
   /**
    * See [MCP specification](https://modelcontextprotocol.io/specification/2026-07-28/basic/index#general-fields)
@@ -9103,7 +9130,7 @@ declare const ServerNotificationSchema: ZodUnion<readonly [ZodObject<{
   }, $strip>;
 }, $strip>]>;
 //#endregion
-//#region ../../node_modules/.pnpm/@modelcontextprotocol+server@2.0.0/node_modules/@modelcontextprotocol/server/dist/createMcpHandler-CLhGwQTn.d.mts
+//#region ../../node_modules/.pnpm/@modelcontextprotocol+server@2.3.1/node_modules/@modelcontextprotocol/server/dist/createMcpHandler-D4NN8WsG.d.mts
 //#endregion
 //#region ../core-internal/src/errors/sdkErrors.d.ts
 /**
@@ -9229,7 +9256,17 @@ declare class SdkError extends Error {
    * silently matching nothing).
    */
   static isInstance<T$1 extends abstract new (...args: never[]) => unknown>(this: T$1, value: unknown): value is InstanceType<T$1>;
-  constructor(code: SdkErrorCode, message: string, data?: unknown | undefined);
+  /**
+   * @param code - Stable string code identifying the failure ({@linkcode SdkErrorCode}).
+   * @param message - Human-readable description.
+   * @param data - Optional structured payload (for example the HTTP status carried by
+   * {@linkcode SdkHttpError}). Opaque to the SDK: a `cause` key inside `data` is not
+   * promoted to `Error.cause`.
+   * @param options - Standard `ErrorOptions`, forwarded to `Error`. Pass the underlying
+   * failure as `{ cause }` so it is reachable through the `Error.cause` chain that
+   * loggers and error trackers walk.
+   */
+  constructor(code: SdkErrorCode, message: string, data?: unknown | undefined, options?: ErrorOptions);
 }
 type Primitive = string | number | boolean | bigint | null | undefined;
 type Flatten<T$1> = T$1 extends Primitive ? T$1 : T$1 extends Array<infer U> ? Array<Flatten<U>> : T$1 extends Set<infer U> ? Set<Flatten<U>> : T$1 extends Map<infer K, infer V> ? Map<Flatten<K>, Flatten<V>> : T$1 extends object ? { [K in keyof T$1]: Flatten<T$1[K]>; } : T$1;
@@ -9487,6 +9524,18 @@ interface AuthInfo {
    * If set, this MUST match the MCP server's resource identifier (minus hash fragment).
    */
   resource?: URL;
+  /**
+   * URL of the RFC 9728 Protected Resource Metadata document for the
+   * resource server that accepted this token.
+   *
+   * The bearer-auth helpers stamp their configured `resourceMetadataUrl`
+   * here when verification succeeds, so challenge responses built after
+   * authentication (for example per-operation `insufficient_scope` scope
+   * challenges) can advertise the same document as the authentication
+   * gate's own challenges without separate configuration. Verifiers may
+   * also populate it directly; a verifier-set value wins.
+   */
+  resourceMetadataUrl?: string;
   /**
    * Additional data associated with the token.
    * This field should be used for any additional data that needs to be attached to the auth info.
@@ -9545,6 +9594,11 @@ interface MessageExtraInfo {
    */
   closeStandaloneSSEStream?: () => void;
 }
+/**
+ * The contents of a result's `_meta` field (the 2026-07-28 `ResultMetaObject`):
+ * loose, with the optional self-reported serverInfo key typed when present.
+ */
+type ResultMetaObject = Infer<typeof ResultMetaObjectSchema>;
 /**
  * {@linkcode CreateMessageRequestParams} without tools - for backwards-compatible overload.
  * Excludes tools/toolChoice to indicate they should not be provided.
@@ -9638,6 +9692,8 @@ type DecodedResult = {
    */
   inputRequests: Record<string, unknown>;
   requestState?: string;
+  /** Result-level `_meta`, carried through so a manual caller sees it. */
+  _meta?: ResultMetaObject;
 } | {
   kind: 'invalid';
   error: SdkError;
@@ -10253,6 +10309,8 @@ declare abstract class Protocol<ContextT extends BaseContext> {
   private _transport?;
   private _requestMessageId;
   private _requestHandlers;
+  /** Methods registered with an explicit schema; the era gate in `_onrequest` reads it for the Tasks extension names. */
+  private _customSchemaRequestMethods;
   private _requestHandlerAbortControllers;
   private _notificationHandlers;
   private _responseHandlers;
@@ -10636,6 +10694,20 @@ declare class UriTemplate {
   match(uri: string): Variables | null;
 }
 //#endregion
+//#region src/server/scopeChallenge.d.ts
+/** OAuth scopes to request before handling an MCP request. */
+interface ScopeChallenge {
+  /** The exact, complete scope set to include in the challenge. Each scope must satisfy the OAuth `scope-token` grammar. */
+  scopes: readonly [string, ...string[]];
+  /** Optional human-readable detail satisfying the RFC 6750 `error-description` grammar. */
+  errorDescription?: string;
+}
+/** Determines whether an MCP request needs an OAuth scope challenge. */
+type ScopeChallengeHandler = (context: {
+  request: JSONRPCRequest;
+  authInfo?: AuthInfo;
+}) => ScopeChallenge | undefined | Promise<ScopeChallenge | undefined>;
+//#endregion
 //#region src/server/server.d.ts
 type ServerOptions = ProtocolOptions & {
   /**
@@ -10777,6 +10849,8 @@ declare class Server extends Protocol<ServerContext> {
    * Initializes this server with the given name and version information.
    */
   constructor(_serverInfo: Implementation, options?: ServerOptions);
+  /** Attaches to the given transport; rejects while this instance is connected to another one. */
+  connect(transport: Transport): Promise<void>;
   /**
    * Registers the built-in `logging/setLevel` request handler.
    *
@@ -11035,6 +11109,16 @@ declare class Server extends Protocol<ServerContext> {
 }
 //#endregion
 //#region src/server/mcp.d.ts
+/**
+ * Options for {@linkcode McpServer}: everything {@linkcode ServerOptions} accepts, plus `maxToolInputElements`.
+ */
+type McpServerOptions = ServerOptions & {
+  /**
+   * Largest combined number of array elements and object members a single `tools/call` `arguments` payload may contain.
+   * A number of at least 1; unset or `Infinity` means no limit.
+   */
+  maxToolInputElements?: number;
+};
 /**
  * High-level MCP server that provides a simpler API for working with resources, tools, and prompts.
  * For advanced usage (like sending notifications or setting custom request handlers), use the underlying
@@ -11053,16 +11137,12 @@ declare class McpServer {
    * The underlying {@linkcode Server} instance, useful for advanced operations like sending notifications.
    */
   readonly server: Server;
+  private readonly _maxToolInputElements;
   private _registeredResources;
   private _registeredResourceTemplates;
   private _registeredTools;
   private _registeredPrompts;
-  /**
-   * Per-tool JSON-converted `inputSchema`, memoized so the SEP-2243
-   * registration-time scan and the pre-dispatch validation step share one
-   * conversion instead of paying it twice per request under the
-   * per-request-factory `createMcpHandler` model.
-   */
+  /** Per-tool JSON-converted `inputSchema`, filled on first use by `toolInputSchemaJson()`. */
   private _toolInputSchemaJson;
   /**
    * The JSON-serialized `inputSchema` of a registered tool, or `undefined`
@@ -11073,7 +11153,7 @@ declare class McpServer {
    * @internal
    */
   toolInputSchemaJson(name: string): Record<string, unknown> | undefined;
-  constructor(serverInfo: Implementation, options?: ServerOptions);
+  constructor(serverInfo: Implementation, options?: McpServerOptions);
   /**
    * Attaches to the given transport, starts it, and starts listening for messages.
    *
@@ -11091,6 +11171,8 @@ declare class McpServer {
    * Closes the connection.
    */
   close(): Promise<void>;
+  /** @internal */
+  resolveScopeChallenge: ScopeChallengeHandler;
   private _toolHandlersInitialized;
   private setToolRequestHandlers;
   /**
@@ -11141,9 +11223,11 @@ declare class McpServer {
    */
   registerResource(name: string, uriOrTemplate: string, config: ResourceMetadata & {
     cacheHint?: CacheHint;
+    scopeChallenge?: ScopeChallengeHandler;
   }, readCallback: ReadResourceCallback): RegisteredResource;
   registerResource(name: string, uriOrTemplate: ResourceTemplate, config: ResourceMetadata & {
     cacheHint?: CacheHint;
+    scopeChallenge?: ScopeChallengeHandler;
   }, readCallback: ReadResourceTemplateCallback): RegisteredResourceTemplate;
   private _createRegisteredResource;
   private _createRegisteredResourceTemplate;
@@ -11182,6 +11266,8 @@ declare class McpServer {
     outputSchema?: OutputArgs;
     annotations?: ToolAnnotations;
     icons?: Icon[];
+    /** Determines whether this tool call needs an OAuth scope challenge. */
+    scopeChallenge?: ScopeChallengeHandler;
     _meta?: Record<string, unknown>;
   }, cb: ToolCallback<InputArgs>): RegisteredTool;
   /** @deprecated Wrap with `z.object({...})` instead. Raw-shape form: `inputSchema`/`outputSchema` may be a plain `{ field: z.string() }` record; it is auto-wrapped with `z.object()`. */
@@ -11192,6 +11278,7 @@ declare class McpServer {
     outputSchema?: OutputArgs;
     annotations?: ToolAnnotations;
     icons?: Icon[];
+    scopeChallenge?: ScopeChallengeHandler;
     _meta?: Record<string, unknown>;
   }, cb: LegacyToolCallback<InputArgs>): RegisteredTool;
   /**
@@ -11220,11 +11307,22 @@ declare class McpServer {
    * );
    * ```
    */
+  registerPrompt(name: string, config: {
+    title?: string;
+    description?: string;
+    argsSchema?: undefined;
+    icons?: Icon[];
+    /** Determines whether this prompt retrieval needs an OAuth scope challenge. */
+    scopeChallenge?: ScopeChallengeHandler;
+    _meta?: Record<string, unknown>;
+  }, cb: PromptCallback): RegisteredPrompt;
   registerPrompt<Args extends StandardSchemaWithJSON>(name: string, config: {
     title?: string;
     description?: string;
     argsSchema?: Args;
     icons?: Icon[];
+    /** Determines whether this prompt retrieval needs an OAuth scope challenge. */
+    scopeChallenge?: ScopeChallengeHandler;
     _meta?: Record<string, unknown>;
   }, cb: PromptCallback<Args>): RegisteredPrompt;
   /** @deprecated Wrap with `z.object({...})` instead. Raw-shape form: `argsSchema` may be a plain `{ field: z.string() }` record; it is auto-wrapped with `z.object()`. */
@@ -11233,6 +11331,7 @@ declare class McpServer {
     description?: string;
     argsSchema?: Args;
     icons?: Icon[];
+    scopeChallenge?: ScopeChallengeHandler;
     _meta?: Record<string, unknown>;
   }, cb: LegacyPromptCallback<Args>): RegisteredPrompt;
   /**
@@ -11343,7 +11442,7 @@ type RegisteredTool = {
   outputSchema?: StandardSchemaWithJSON;
   /**
    * @hidden
-   * The converted JSON Schema of `outputSchema`, memoised at registration (and on
+   * The converted JSON Schema of `outputSchema`, memoised on first use (and on
    * `update({outputSchema})`) so the `tools/call` handler passes the SAME advertised schema
    * `tools/list` emits to the wire codec's `projectCallToolResult` — the SEP-2106 `{result:…}`
    * wrap predicate follows the schema's root, never the runtime value shape. `undefined` when
@@ -11353,6 +11452,7 @@ type RegisteredTool = {
   annotations?: ToolAnnotations;
   icons?: Icon[];
   execution?: ToolExecution;
+  scopeChallenge?: ScopeChallengeHandler;
   _meta?: Record<string, unknown>;
   handler: AnyToolHandler<StandardSchemaWithJSON | undefined>;
   /** @hidden */
@@ -11368,6 +11468,7 @@ type RegisteredTool = {
     outputSchema?: StandardSchemaWithJSON;
     annotations?: ToolAnnotations;
     icons?: Icon[];
+    scopeChallenge?: ScopeChallengeHandler | null;
     _meta?: Record<string, unknown>;
     callback?: ToolCallback<StandardSchemaWithJSON>;
     enabled?: boolean;
@@ -11392,6 +11493,7 @@ type RegisteredResource = {
   metadata?: ResourceMetadata;
   /** Cache hint applied to this resource's `resources/read` results on the 2026-07-28 revision. */
   cacheHint?: CacheHint;
+  scopeChallenge?: ScopeChallengeHandler;
   readCallback: ReadResourceCallback;
   enabled: boolean;
   enable(): void;
@@ -11401,6 +11503,7 @@ type RegisteredResource = {
     title?: string;
     uri?: string | null;
     metadata?: ResourceMetadata;
+    scopeChallenge?: ScopeChallengeHandler | null;
     callback?: ReadResourceCallback;
     enabled?: boolean;
   }): void;
@@ -11416,6 +11519,7 @@ type RegisteredResourceTemplate = {
   metadata?: ResourceMetadata;
   /** Cache hint applied to this template's `resources/read` results on the 2026-07-28 revision. */
   cacheHint?: CacheHint;
+  scopeChallenge?: ScopeChallengeHandler;
   readCallback: ReadResourceTemplateCallback;
   enabled: boolean;
   enable(): void;
@@ -11425,6 +11529,7 @@ type RegisteredResourceTemplate = {
     title?: string;
     template?: ResourceTemplate;
     metadata?: ResourceMetadata;
+    scopeChallenge?: ScopeChallengeHandler | null;
     callback?: ReadResourceTemplateCallback;
     enabled?: boolean;
   }): void;
@@ -11441,6 +11546,7 @@ type RegisteredPrompt = {
   description?: string;
   argsSchema?: StandardSchemaWithJSON;
   icons?: Icon[];
+  scopeChallenge?: ScopeChallengeHandler;
   _meta?: Record<string, unknown>;
   /** @hidden */
   handler: PromptHandler;
@@ -11453,6 +11559,7 @@ type RegisteredPrompt = {
     description?: string;
     argsSchema?: Args;
     icons?: Icon[];
+    scopeChallenge?: ScopeChallengeHandler | null;
     _meta?: Record<string, unknown>;
     callback?: PromptCallback<Args>;
     enabled?: boolean;
@@ -11461,9 +11568,69 @@ type RegisteredPrompt = {
 };
 //#endregion
 //#region src/domain/lifecycle.d.ts
-declare const JUDGE_KINDS: readonly ["typesafe", "laya", "local-endpoint"];
+declare const JUDGE_KIND_TYPESAFE: "typesafe";
+declare const JUDGE_KIND_LAYA: "laya";
+declare const JUDGE_KIND_LOCAL_ENDPOINT: "local-endpoint";
+declare const JUDGE_KINDS: readonly [typeof JUDGE_KIND_TYPESAFE, typeof JUDGE_KIND_LAYA, typeof JUDGE_KIND_LOCAL_ENDPOINT];
 type JudgeKind = (typeof JUDGE_KINDS)[number];
 //#endregion
+//#region src/domain/judges.d.ts
+declare const TYPESAFE_SYSTEM_ONE_ENDPOINT = "https://api.typesafe.ai/v1/systemone";
+declare const JUDGE_BUDGET_ID = "judge-budget";
+/** Provider record: docs/superpowers/plans/2026-10-10-events-phase-e-provider-record.md, read 2026-10-10. */
+declare const APPROVED_TYPESAFE_MODELS: readonly ["jev-1.13.0"];
+type ApprovedTypeSafeModel = (typeof APPROVED_TYPESAFE_MODELS)[number];
+interface TypeSafeJudgeDocument {
+  readonly judgeId: string;
+  readonly version: number;
+  readonly kind: typeof JUDGE_KIND_TYPESAFE;
+  readonly provider: typeof JUDGE_KIND_TYPESAFE;
+  readonly model: ApprovedTypeSafeModel;
+  readonly endpoint: typeof TYPESAFE_SYSTEM_ONE_ENDPOINT;
+  readonly promptTemplate: string;
+  readonly protocol: "noul";
+}
+interface LocalEndpointJudgeBase {
+  readonly judgeId: string;
+  readonly version: number;
+  readonly kind: typeof JUDGE_KIND_LOCAL_ENDPOINT;
+  readonly provider: string;
+  readonly model: string;
+  readonly endpoint: string;
+  readonly approvedAddressSet: readonly [string];
+  readonly promptTemplate: string;
+}
+type LocalEndpointJudgeDocument = (LocalEndpointJudgeBase & {
+  readonly protocol: "noul";
+}) | (LocalEndpointJudgeBase & {
+  readonly protocol: "json-score";
+  readonly scorePointer: string;
+});
+type CanonicalJudgeDocument = TypeSafeJudgeDocument | LocalEndpointJudgeDocument;
+interface JudgeBudgetLimits {
+  readonly callsPerRollingHour: number;
+  readonly inputTokensPerRolling30Days: number;
+  readonly concurrency: number;
+}
+interface CanonicalJudgeBudgetDocument {
+  readonly budgetId: typeof JUDGE_BUDGET_ID;
+  readonly version: number;
+  readonly global: JudgeBudgetLimits;
+  readonly providers: readonly (JudgeBudgetLimits & {
+    readonly provider: string;
+  })[];
+}
+type CanonicalJudgeKindEnablementDocument = {
+  readonly id: "judge-kind:typesafe";
+  readonly kind: typeof JUDGE_KIND_TYPESAFE;
+  readonly version: number;
+  readonly endpoint: typeof TYPESAFE_SYSTEM_ONE_ENDPOINT;
+} | {
+  readonly id: "judge-kind:local-endpoint";
+  readonly kind: typeof JUDGE_KIND_LOCAL_ENDPOINT;
+  readonly version: number;
+};
+//#endregion
 //#region src/domain/source-options.d.ts
 interface GmailSourceOptions {
   readonly channel: "gmail";
@@ -11537,14 +11704,10 @@ interface DryRunTargetDocument {
   readonly retentionMs: number;
 }
 type TargetDocument = DryRunTargetDocument | WebhookTargetDocument | SseTargetDocument;
-interface JudgeDocument {
-  readonly judgeId: string;
-  readonly version: number;
-  readonly kind: JudgeKind;
-  readonly provider: string;
-  readonly model: string;
-  readonly [field: string]: unknown;
-}
+type JudgeDocument = CanonicalJudgeDocument;
+type CanonicalAgenticCondition = Omit<AgenticConditionV1, "judge"> & {
+  readonly judge: CanonicalJudgeDocument;
+};
 type SubscriberDocument = SseSubscriberDocument;
 interface RuleRetentionDocument {
   readonly ingestMs: number;
@@ -11589,6 +11752,8 @@ interface CanonicalFullRuleDocument {
     readonly version: number;
   };
   readonly condition: CanonicalCondition;
+  /** An optional exact judge authority; deterministic matching remains mandatory without it. */
+  readonly agentic?: CanonicalAgenticCondition;
   readonly mapping: JsonValue;
   /** D2/D6: the optional exact CloudEvent `type` override, part of the approval when present; absent means the default. */
   readonly cloudEventType?: string;
@@ -11598,16 +11763,8 @@ interface CanonicalFullRuleDocument {
   readonly deliveryRateCap: number;
   readonly retention: RuleRetentionDocument;
 }
-interface JudgeBudgetDocument {
-  readonly budgetId: string;
-  readonly version: number;
-  readonly [field: string]: unknown;
-}
-interface JudgeKindEnablementDocument {
-  readonly kind: JudgeKind;
-  readonly version: number;
-  readonly [field: string]: unknown;
-}
+type JudgeBudgetDocument = CanonicalJudgeBudgetDocument;
+type JudgeKindEnablementDocument = CanonicalJudgeKindEnablementDocument;
 type ActivationDocumentV1 = {
   readonly documentVersion: 1;
   readonly kind: "rule";
@@ -12083,7 +12240,7 @@ interface DoctorReportV1 {
     }[];
   };
   readonly judgeBoundary: readonly {
-    readonly kind: "typesafe" | "local-endpoint" | "laya";
+    readonly kind: JudgeKind;
     readonly code: "E_REQUIRED" | "E2_REQUIRED";
     readonly phase: "E" | "E2";
   }[];
@@ -12458,10 +12615,10 @@ interface B3ControlRequestArgumentsV1 {
   };
   readonly judgesList: Record<string, never>;
   readonly addJudge: {
-    readonly document: JudgeDocument;
+    readonly document: CanonicalJudgeDocument;
   };
   readonly updateJudge: {
-    readonly document: JudgeDocument;
+    readonly document: CanonicalJudgeDocument;
   };
   readonly removeJudge: {
     readonly judgeId: string;

package/dist/index.mjs

@@ -1,2 +1,2 @@
-import { M as createEventsMcpServer, U as status, a as B3_CONTROL_V1_OPERATION_SPECS, c as B3_CONTROL_V1_SUCCESSOR_REQUIREMENT, d as B3_SECRET_TERMINAL_ORIGIN, i as B3_CONTROL_ERROR_CODES, l as B3_DESKTOP_CONTROL_OPERATIONS, m as renderB3ApprovalPreviewV1, n as B3_CAPABILITIES, o as B3_CONTROL_V1_RESULT_OPERATIONS, r as B3_CONTROL_CONTRACT, s as B3_CONTROL_V1_SCHEMA_VERSION, t as B3_APPROVAL_VIEW_VARIANTS, u as B3_JUDGE_UNAVAILABLE_VARIANTS } from "./b3-contract-03AO67VB.mjs";
+import { R as createEventsMcpServer, X as status, a as B3_CONTROL_V1_OPERATION_SPECS, c as B3_CONTROL_V1_SUCCESSOR_REQUIREMENT, d as B3_SECRET_TERMINAL_ORIGIN, i as B3_CONTROL_ERROR_CODES, l as B3_DESKTOP_CONTROL_OPERATIONS, m as renderB3ApprovalPreviewV1, n as B3_CAPABILITIES, o as B3_CONTROL_V1_RESULT_OPERATIONS, r as B3_CONTROL_CONTRACT, s as B3_CONTROL_V1_SCHEMA_VERSION, t as B3_APPROVAL_VIEW_VARIANTS, u as B3_JUDGE_UNAVAILABLE_VARIANTS } from "./b3-contract-B6UBBK7F.mjs";
 export { B3_APPROVAL_VIEW_VARIANTS, B3_CAPABILITIES, B3_CONTROL_CONTRACT, B3_CONTROL_ERROR_CODES, B3_CONTROL_V1_OPERATION_SPECS, B3_CONTROL_V1_RESULT_OPERATIONS, B3_CONTROL_V1_SCHEMA_VERSION, B3_CONTROL_V1_SUCCESSOR_REQUIREMENT, B3_DESKTOP_CONTROL_OPERATIONS, B3_JUDGE_UNAVAILABLE_VARIANTS, B3_SECRET_TERMINAL_ORIGIN, createEventsMcpServer, renderB3ApprovalPreviewV1, status };