@agentcomms/events-daemon 0.24.0 → 0.26.0

package/dist/{b3-contract-C1q5aekF.mjs → b3-contract-CG8Z2OtX.mjs}

@@ -1,22 +1,13 @@
 import { a as number, c as unknown, o as strictObject, s as string, t as McpServer } from "./mcp-DIH4cS6P-YuKZfqTg.mjs";
-import { a as EventDomainError, c as JUDGE_KIND_LOCAL_ENDPOINT, f as validateLocalEndpoint, g as parseIpLiteral, h as assertApprovedAddressSet, l as JUDGE_KIND_TYPESAFE, n as canonicalWebhookTarget, o as JUDGE_KINDS } from "./webhook-target-DyDTwWhV.mjs";
+import { h as isLayaTemplateId, m as LAYA_RUNNABLE_TEMPLATE_IDS, v as installErrorSink } from "./worker-boundary-probe-CFN6EsyK.mjs";
+import { _ as JUDGE_KIND_TYPESAFE, c as validateLocalEndpoint, d as assertApprovedAddressSet, f as parseIpLiteral, g as JUDGE_KIND_LOCAL_ENDPOINT, h as JUDGE_KIND_LAYA, m as JUDGE_KINDS, n as canonicalWebhookTarget, o as LayaContractError, p as EventDomainError, s as createLayaJudgeKindDefinition } from "./webhook-target-EzLIFpIY.mjs";
 import { createHash, randomBytes } from "node:crypto";
 import { chmod, lstat, mkdir, open, readFile, realpath, rm, writeFile } from "node:fs/promises";
 import { createConnection } from "node:net";
 import { CommsError, ERROR_REGISTRY, canonicalDisclosureBinding, canonicalJson, isCommsError, neutralise, resolvePaths, sha256Hex } from "@agentcomms/core";
-import { constants } from "node:fs";
-import { basename, dirname, join } from "node:path";
+import { constants, readFileSync } from "node:fs";
+import { basename, dirname, join, sep } from "node:path";
 import { TEST_CLOUD_EVENT, canonicaliseAgenticCondition, canonicaliseCondition, catalogueEntry, compileMapping, isJsonValue, parsePointer, validateCloudEventType } from "@agentcomms/events";
-//#region src/network/error-sink.ts
-/**
-* Keeps an owned network resource from turning a later transport error into an uncaught exception.
-* Operation-specific listeners still translate errors into their own result while they are active.
-*/
-function installErrorSink(resource) {
-	resource.on("error", () => void 0);
-	return resource;
-}
-//#endregion
 //#region src/runtime/paths.ts
 const DIRECTORY_MODE = 448;
 const FILE_MODE = 384;
@@ -357,15 +348,15 @@ function append(first, second) {
 	return joined;
 }
 function isControlHello(value) {
-	if (!isRecord$3(value) || !isRecord$3(value.hello)) return false;
+	if (!isRecord$4(value) || !isRecord$4(value.hello)) return false;
 	const { supportedVersions, token, client } = value.hello;
-	return Array.isArray(supportedVersions) && supportedVersions.length > 0 && supportedVersions.length <= 8 && supportedVersions.every((version) => Number.isSafeInteger(version)) && typeof token === "string" && token.length === 64 && isRecord$3(client) && typeof client.name === "string" && client.name.length > 0 && client.name.length <= 128;
+	return Array.isArray(supportedVersions) && supportedVersions.length > 0 && supportedVersions.length <= 8 && supportedVersions.every((version) => Number.isSafeInteger(version)) && typeof token === "string" && token.length === 64 && isRecord$4(client) && typeof client.name === "string" && client.name.length > 0 && client.name.length <= 128;
 }
 function isControlRequest(value) {
-	if (!isRecord$3(value)) return false;
-	return Number.isSafeInteger(value.version) && typeof value.requestId === "string" && value.requestId.length > 0 && value.requestId.length <= 128 && typeof value.session === "string" && value.session.length > 0 && value.session.length <= 256 && typeof value.operation === "string" && value.operation.length > 0 && value.operation.length <= 128 && isRecord$3(value.args);
+	if (!isRecord$4(value)) return false;
+	return Number.isSafeInteger(value.version) && typeof value.requestId === "string" && value.requestId.length > 0 && value.requestId.length <= 128 && typeof value.session === "string" && value.session.length > 0 && value.session.length <= 256 && typeof value.operation === "string" && value.operation.length > 0 && value.operation.length <= 128 && isRecord$4(value.args);
 }
-function isRecord$3(value) {
+function isRecord$4(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 //#endregion
@@ -407,7 +398,7 @@ async function probeControl(paths, record, token) {
 	}
 }
 async function requestControl(record, token, clientName, operation, args) {
-	const socket = await connect(record.endpoint);
+	const socket = await connect$1(record.endpoint);
 	try {
 		const hello = await exchange(socket, { hello: {
 			supportedVersions: CONTROL_PROTOCOL_VERSIONS,
@@ -439,7 +430,7 @@ async function readToken(paths, record) {
 	if (!/^[0-9a-f]{64}$/.test(token) || tokenFingerprint(token) !== record.tokenFingerprint) throw notRunning();
 	return token;
 }
-function connect(endpoint) {
+function connect$1(endpoint) {
 	return new Promise((resolve, reject) => {
 		const socket = createConnection(endpoint);
 		installErrorSink(socket);
@@ -605,6 +596,35 @@ function assertDoctorReportV2(report) {
 	if (Object.keys(report).some((key) => !DOCTOR_REPORT_V2_KEYS.includes(key))) throw new Error("doctor-v2 report is closed");
 	return report;
 }
+const DOCTOR_REPORT_V3_JUDGE_KEYS = [
+	"kinds",
+	"budget",
+	"reservations",
+	"holds",
+	JUDGE_KIND_LAYA
+];
+const DOCTOR_REPORT_V3_LAYA_KEYS = [
+	"state",
+	"manifestId",
+	"runtimeLockDigest",
+	"runtime",
+	"model",
+	"boundary",
+	"failureCode",
+	"bytesVerified",
+	"totalBytes"
+];
+function exactlyKeys(value, keys) {
+	const found = Object.keys(value);
+	return found.length === keys.length && keys.every((key) => found.includes(key));
+}
+/** The projection boundary: a v3 report, its judge entry and its Laya entry each have exactly their fields. */
+function assertDoctorReportV3(report) {
+	if (Object.keys(report).some((key) => !DOCTOR_REPORT_V2_KEYS.includes(key))) throw new Error("doctor-v3 report is closed");
+	if (!exactlyKeys(report.judge, DOCTOR_REPORT_V3_JUDGE_KEYS)) throw new Error("doctor-v3 judge entry is closed");
+	if (!exactlyKeys(report.judge.laya, DOCTOR_REPORT_V3_LAYA_KEYS)) throw new Error("doctor-v3 Laya entry is closed");
+	return report;
+}
 async function doctor(options = {}) {
 	return await new EventControlClient({ stateDir: options.stateDir }).request("doctor");
 }
@@ -832,7 +852,7 @@ async function removeTarget(targetId, options = {}) {
 //#endregion
 //#region src/version.ts
 /** The package version, read from package.json at build time. */
-const VERSION = "0.24.0";
+const VERSION = "0.26.0";
 //#endregion
 //#region src/mcp/server.ts
 function reply(data) {
@@ -970,14 +990,14 @@ async function createEventsMcpServer(options = {}) {
 	}, (args) => judgeTest(args.judgeId, args.version, options));
 	strictControlTool("events_budget_show", "Show budget", "Lists immutable judge budgets and the active singleton.", {}, () => budgetShow(options));
 	strictControlTool("events_budget_update", "Update budget", "Creates a pending immutable global budget and prepares its approval.", { document: unknown() }, (args) => b3("updateBudget", { document: args.document }, () => updateBudget(args.document, options)), true);
-	strictControlTool("events_judge_kinds_list", "List judge kinds", "Lists disabled/enabled judge kinds and the typed Laya E2 seam.", {}, () => judgeKindsList(options));
+	strictControlTool("events_judge_kinds_list", "List judge kinds", "Lists each judge kind as disabled or enabled, or Laya as unavailable here with its reason.", {}, () => judgeKindsList(options));
 	strictControlTool("events_judge_kind_enable", "Enable judge kind", "Prepares, but never approves or claims, judge-kind enablement.", { kind: string().min(1) }, (args) => b3("enableJudgeKind", { kind: args.kind }, () => enableJudgeKind(args.kind, options)), true);
-	strictControlTool("events_judge_kind_disable", "Disable judge kind", "Immediately disables one available judge kind; Laya remains typed E2-unavailable.", { kind: string().min(1) }, (args) => {
+	strictControlTool("events_judge_kind_disable", "Disable judge kind", "Immediately disables one judge kind; for Laya it also cancels a download and keeps verified files.", { kind: string().min(1) }, (args) => {
 		const kind = args.kind;
 		return b3("disableJudgeKind", { kind }, () => disableJudgeKind(kind, options));
 	}, true);
-	strictControlTool("events_judge_model_status", "Judge model status", "Returns the typed Phase-E2 unavailable result.", {}, () => judgeModelStatus(options));
-	strictControlTool("events_judge_model_remove", "Remove judge model", "Returns the typed Phase-E2 unavailable result.", {}, () => removeJudgeModel(options), true);
+	strictControlTool("events_judge_model_status", "Judge model status", "Reports the local Laya runtime and model state, byte progress and any failure or unavailable reason.", {}, () => judgeModelStatus(options));
+	strictControlTool("events_judge_model_remove", "Remove judge model", "Deletes the verified Laya model and runtime files, only while Laya is disabled.", {}, () => removeJudgeModel(options), true);
 	strictControlTool("events_deliveries_list", "List deliveries", "Lists content-free delivery metadata.", {}, () => deliveriesList(options));
 	strictControlTool("events_delivery_retry", "Retry delivery", "Retries one exact retryable delivery.", { deliveryId: string().min(1) }, (args) => retryDelivery(args.deliveryId, options), true);
 	strictControlTool("events_delivery_drop", "Drop delivery", "Drops one exact dead-letter delivery and its retained payload.", { deliveryId: string().min(1) }, (args) => dropDelivery(args.deliveryId, options), true);
@@ -1013,6 +1033,37 @@ const TYPESAFE_SYSTEM_ONE_ENDPOINT = "https://api.typesafe.ai/v1/systemone";
 const JUDGE_BUDGET_ID = "judge-budget";
 /** Provider record: docs/superpowers/plans/2026-10-10-events-phase-e-provider-record.md, read 2026-10-10. */
 const APPROVED_TYPESAFE_MODELS = ["jev-1.13.0"];
+const layaInputsByDatabase = /* @__PURE__ */ new WeakMap();
+/**
+* One owner registers the Laya inputs its own activation path validates with, for its database, as it registers E's
+* purge listener: so E's budget fence, settlement and every other reader of that database's Laya kind document use
+* the same reviewed bytes. Production's inputs are empty — the shipped assets and this process's platform.
+*/
+function registerLayaEnablementInputs(database, inputs) {
+	if (layaInputsByDatabase.has(database)) throw new Error("Laya enablement inputs are already registered");
+	layaInputsByDatabase.set(database, inputs);
+	return () => {
+		if (layaInputsByDatabase.get(database) === inputs) layaInputsByDatabase.delete(database);
+	};
+}
+/** The inputs registered for one database, or none: the shipped assets and this process's platform. */
+function layaEnablementInputsFor(database) {
+	return layaInputsByDatabase.get(database) ?? {};
+}
+const LAYA_JUDGE_KIND_DEFINITION = {
+	kind: JUDGE_KINDS[1],
+	availability: () => shippedLayaDefinition().availability(),
+	judgeTerms: () => shippedLayaDefinition().judgeTerms(),
+	prepareEnablement: (input) => shippedLayaDefinition().prepareEnablement(input),
+	canonicalEnablement: (value) => shippedLayaDefinition().canonicalEnablement(value),
+	preview: (input) => shippedLayaDefinition().preview(input),
+	onEnabled: (enablement, activation) => shippedLayaDefinition().onEnabled(enablement, activation),
+	execute: (request, reservation) => shippedLayaDefinition().execute(request, reservation),
+	onWorkPurged: (scope) => shippedLayaDefinition().onWorkPurged(scope),
+	onDisabled: () => shippedLayaDefinition().onDisabled(),
+	status: () => shippedLayaDefinition().status(),
+	removeWhenDisabled: () => shippedLayaDefinition().removeWhenDisabled()
+};
 /** Phase E's closed registry. The lifecycle module owns the literal vocabulary; this registry owns its availability. */
 const JUDGE_KIND_DEFINITIONS = [
 	{
@@ -1022,7 +1073,8 @@ const JUDGE_KIND_DEFINITIONS = [
 	{
 		kind: JUDGE_KINDS[1],
 		availability: "unavailable",
-		unavailableCode: "E2_REQUIRED"
+		unavailableCode: "E2_REQUIRED",
+		implementation: LAYA_JUDGE_KIND_DEFINITION
 	},
 	{
 		kind: JUDGE_KINDS[2],
@@ -1032,6 +1084,95 @@ const JUDGE_KIND_DEFINITIONS = [
 function fail$3(message, code = "VERSION_DOCUMENT_INVALID") {
 	throw new EventDomainError(code, message);
 }
+/**
+* The daemon package's root, where its three reviewed Laya assets ship: two levels above this module in the source
+* tree (`src/domain/`), one above the bundle that carries it (`dist/`), by the same rule as the worker entry.
+*/
+const SHIPPED_PACKAGE_ROOT = import.meta.dirname.endsWith(`${sep}dist`) ? join(import.meta.dirname, "..") : join(import.meta.dirname, "..", "..");
+/** The production assets remain blocked until Task 10's owner-only lock gate replaces the placeholder. */
+function shippedLayaAssetSource() {
+	return {
+		manifestBytes: readFileSync(join(SHIPPED_PACKAGE_ROOT, "laya-manifest.json")),
+		runtimeLockBytes: readFileSync(join(SHIPPED_PACKAGE_ROOT, "laya-runtime.json")),
+		disclosuresBytes: readFileSync(join(SHIPPED_PACKAGE_ROOT, "laya-enablement-disclosures.json"))
+	};
+}
+function shippedLayaDefinition(inputs = {}) {
+	return createLayaJudgeKindDefinition({
+		assets: inputs.layaAssetSource ?? shippedLayaAssetSource(),
+		platform: inputs.layaPlatformProbe ?? {
+			platform: process.platform,
+			architecture: process.arch
+		}
+	});
+}
+/**
+* The one reviewed Laya definition for exactly the inputs E's activation path validates against: the shipped asset
+* bytes and this process's platform in production, the same strict-parsed fixture bytes in tests.
+*/
+function layaJudgeKindDefinitionFor(inputs = {}) {
+	return shippedLayaDefinition(inputs);
+}
+function layaEnablement(value, inputs = {}) {
+	try {
+		const implementation = inputs.layaAssetSource === void 0 && inputs.layaPlatformProbe === void 0 ? judgeKindDefinition(JUDGE_KINDS[1]).implementation : shippedLayaDefinition(inputs);
+		if (implementation === void 0) return fail$3("the Laya registry implementation is absent");
+		return implementation.canonicalEnablement(value);
+	} catch (error) {
+		if (error instanceof LayaContractError) {
+			if (error.code === "E2_EXTERNAL_REFERENCE_BLOCKED") return fail$3("the reviewed Laya runtime lock is blocked", "E2_EXTERNAL_REFERENCE_BLOCKED");
+			if (error.code === "LAYA_PLATFORM_UNAVAILABLE") return fail$3("Laya is unavailable on this platform", "LAYA_PLATFORM_UNAVAILABLE");
+			if (error.code === "LAYA_SANDBOX_UNAVAILABLE") return fail$3("the macOS Laya boundary is unavailable", "LAYA_SANDBOX_UNAVAILABLE");
+		}
+		return fail$3("the Laya enablement is not its exact reviewed document");
+	}
+}
+/** Performs only the content-free availability probe before an activation can create its first intent. */
+function assertLayaJudgeKindAvailable(inputs = {}) {
+	const implementation = inputs.layaAssetSource === void 0 && inputs.layaPlatformProbe === void 0 ? judgeKindDefinition(JUDGE_KINDS[1]).implementation : shippedLayaDefinition(inputs);
+	if (implementation === void 0) fail$3("the Laya registry implementation is absent");
+	const availability = implementation.availability();
+	if (availability.available) return;
+	if (availability.code === "E2_EXTERNAL_REFERENCE_BLOCKED") fail$3("the reviewed Laya runtime lock is blocked", "E2_EXTERNAL_REFERENCE_BLOCKED");
+	if (availability.code === "LAYA_PLATFORM_UNAVAILABLE") fail$3("Laya is unavailable on this platform", "LAYA_PLATFORM_UNAVAILABLE");
+	fail$3("the macOS Laya boundary is unavailable", "LAYA_SANDBOX_UNAVAILABLE");
+}
+/** The reviewed terms a Laya judge is created under, for exactly the inputs E's activation path validates with. */
+function layaJudgeTermsFor(inputs = {}) {
+	try {
+		const implementation = inputs.layaAssetSource === void 0 && inputs.layaPlatformProbe === void 0 ? judgeKindDefinition(JUDGE_KINDS[1]).implementation : shippedLayaDefinition(inputs);
+		if (implementation === void 0) return fail$3("the Laya registry implementation is absent");
+		return implementation.judgeTerms();
+	} catch (error) {
+		if (error instanceof LayaContractError) return fail$3("the reviewed Laya manifest cannot be read");
+		throw error;
+	}
+}
+/**
+* B3 control v3 (D2, D11): a Laya judge is configuration, kept whatever Laya's state on this machine or in this release,
+* and it evaluates only once Laya is enabled and ready. It may name only what this release could run: the reviewed
+* manifest entry, and a template that entry lists and the worker runs. The reason is in each message, because the
+* message is all the CLI and MCP show.
+*/
+function assertCreatableLayaJudge(judge, inputs = {}) {
+	if (judge?.kind !== "laya") return;
+	const terms = layaJudgeTermsFor(inputs);
+	if (judge.model !== terms.manifestId) fail$3(`a Laya judge names this release's reviewed manifest, ${terms.manifestId} (LAYA_MANIFEST_NOT_REVIEWED)`, "LAYA_MANIFEST_NOT_REVIEWED");
+	if (!terms.promptTemplates.includes(judge.promptTemplate) || !LAYA_RUNNABLE_TEMPLATE_IDS.includes(judge.promptTemplate)) fail$3(`a Laya judge uses ${LAYA_RUNNABLE_TEMPLATE_IDS.join(" or ")}; ${judge.promptTemplate} is not offered (LAYA_TEMPLATE_BLOCKED)`, "LAYA_TEMPLATE_BLOCKED");
+}
+/**
+* D11: a rule naming a Laya judge is activated only where this release and platform offer Laya. Anywhere else its
+* judge could never evaluate, so preparing, claiming or finalising the rule is refused with Laya's own closed reason,
+* before the kind's state: never a rule that silently cannot ask.
+*/
+function assertLayaRuleJudgeOffered(inputs = {}) {
+	try {
+		assertLayaJudgeKindAvailable(inputs);
+	} catch (error) {
+		if (error instanceof EventDomainError) throw new EventDomainError(error.code, `this rule's Laya judge cannot evaluate here: Laya is not offered (${error.code})`);
+		throw error;
+	}
+}
 function record$1(value, name) {
 	if (typeof value !== "object" || value === null || Array.isArray(value)) return fail$3(`${name} is an object`);
 	try {
@@ -1045,7 +1186,7 @@ function exactKeys$1(value, keys, name) {
 	const wanted = [...keys].sort();
 	if (found.length !== wanted.length || found.some((key, index) => key !== wanted[index])) fail$3(`${name} has exactly its canonical fields`);
 }
-function text$1(value, name) {
+function text$2(value, name) {
 	if (typeof value !== "string" || value.length === 0) return fail$3(`${name} is a non-empty string`);
 	return value;
 }
@@ -1060,7 +1201,7 @@ function protocol(value, name) {
 	}
 	if (value.protocol !== "json-score") return fail$3(`${name} has protocol noul or json-score`);
 	exactKeys$1(value, ["protocol", "scorePointer"], name);
-	const scorePointer = text$1(value.scorePointer, `${name} scorePointer`);
+	const scorePointer = text$2(value.scorePointer, `${name} scorePointer`);
 	const parsed = parsePointer(scorePointer);
 	if (!parsed.ok || parsed.value.includes("*")) return fail$3(`${name} scorePointer is one concrete JSON Pointer`);
 	return {
@@ -1070,13 +1211,13 @@ function protocol(value, name) {
 }
 function identity(value, name) {
 	return {
-		judgeId: text$1(value.judgeId, `${name} id`),
+		judgeId: text$2(value.judgeId, `${name} id`),
 		version: positiveInteger$2(value.version, `${name} version`)
 	};
 }
 function localAddress(value) {
 	if (!Array.isArray(value) || value.length !== 1) return fail$3("a local judge approvedAddressSet has one exact literal");
-	const entry = text$1(value[0], "a local judge approvedAddressSet entry");
+	const entry = text$2(value[0], "a local judge approvedAddressSet entry");
 	try {
 		assertApprovedAddressSet([entry]);
 		return [parseIpLiteral(entry).address];
@@ -1084,12 +1225,30 @@ function localAddress(value) {
 		return fail$3("a local judge approvedAddressSet has one valid literal");
 	}
 }
-/** The one canonical, immutable judge document form. E2's laya seam is recognised but intentionally unavailable. */
+/** The one canonical, immutable judge document form. Laya's separate reviewed kind document is its activation authority. */
 function canonicalJudge(value) {
 	const judge = record$1(value, "a judge document");
 	const kind = judge.kind;
 	if (!JUDGE_KINDS.includes(kind)) return fail$3("a judge document has a known judge kind");
-	if (kind === "laya") return fail$3("laya is unavailable until E2", "E2_REQUIRED");
+	if (kind === "laya") {
+		exactKeys$1(judge, [
+			"judgeId",
+			"version",
+			"kind",
+			"provider",
+			"model",
+			"promptTemplate"
+		], "a Laya judge document");
+		if (judge.provider !== "laya") return fail$3("a Laya judge names the canonical Laya provider");
+		if (!isLayaTemplateId(judge.promptTemplate)) return fail$3("a Laya judge names one immutable Laya prompt template");
+		return {
+			...identity(judge, "a Laya judge"),
+			kind: JUDGE_KIND_LAYA,
+			provider: JUDGE_KIND_LAYA,
+			model: text$2(judge.model, "a Laya judge manifest id"),
+			promptTemplate: judge.promptTemplate
+		};
+	}
 	if (kind === "typesafe") {
 		exactKeys$1(judge, [
 			"judgeId",
@@ -1111,7 +1270,7 @@ function canonicalJudge(value) {
 			provider: JUDGE_KIND_TYPESAFE,
 			model: judge.model,
 			endpoint: TYPESAFE_SYSTEM_ONE_ENDPOINT,
-			promptTemplate: text$1(judge.promptTemplate, "a typesafe judge prompt template"),
+			promptTemplate: text$2(judge.promptTemplate, "a typesafe judge prompt template"),
 			protocol: "noul"
 		};
 	}
@@ -1142,18 +1301,18 @@ function canonicalJudge(value) {
 		"protocol"
 	], "a local judge document");
 	const approvedAddressSet = localAddress(judge.approvedAddressSet);
-	const endpoint = text$1(judge.endpoint, "a local judge endpoint");
+	const endpoint = text$2(judge.endpoint, "a local judge endpoint");
 	try {
 		const local = validateLocalEndpoint(endpoint, approvedAddressSet);
 		if (local.url.search !== "") return fail$3("a local judge endpoint has no query");
 		return {
 			...identity(judge, "a local judge"),
 			kind: JUDGE_KIND_LOCAL_ENDPOINT,
-			provider: text$1(judge.provider, "a local judge provider"),
-			model: text$1(judge.model, "a local judge model"),
+			provider: text$2(judge.provider, "a local judge provider"),
+			model: text$2(judge.model, "a local judge model"),
 			endpoint: local.url.href,
 			approvedAddressSet,
-			promptTemplate: text$1(judge.promptTemplate, "a local judge prompt template"),
+			promptTemplate: text$2(judge.promptTemplate, "a local judge prompt template"),
 			...localProtocol
 		};
 	} catch (error) {
@@ -1193,12 +1352,14 @@ function canonicalJudgeBudget(value) {
 			"inputTokensPerRolling30Days",
 			"concurrency"
 		], "a judge provider budget");
-		return {
-			provider: text$1(provider.provider, "a judge provider id"),
+		const canonical = {
+			provider: text$2(provider.provider, "a judge provider id"),
 			callsPerRollingHour: positiveInteger$2(provider.callsPerRollingHour, "a judge provider budget callsPerRollingHour"),
 			inputTokensPerRolling30Days: positiveInteger$2(provider.inputTokensPerRolling30Days, "a judge provider budget inputTokensPerRolling30Days"),
 			concurrency: positiveInteger$2(provider.concurrency, "a judge provider budget concurrency")
 		};
+		if (canonical.provider === JUDGE_KINDS[1] && canonical.concurrency > 1) return fail$3("the Laya provider is one-at-a-time");
+		return canonical;
 	});
 	if ([...providers].sort((left, right) => left.provider < right.provider ? -1 : left.provider > right.provider ? 1 : 0).some((entry, index) => entry.provider !== providers[index]?.provider) || new Set(providers.map((entry) => entry.provider)).size !== providers.length) return fail$3("judge budget providers are sorted and duplicate-free");
 	return {
@@ -1208,18 +1369,19 @@ function canonicalJudgeBudget(value) {
 		providers
 	};
 }
-/** The closed kind registry lookup, including E2's intentionally unavailable laya slot. */
+/** The closed kind registry lookup. E2 replaces only Phase E's Laya slot. */
 function judgeKindDefinition(kind) {
 	const definition = JUDGE_KIND_DEFINITIONS.find((candidate) => candidate.kind === kind);
 	if (definition === void 0) return fail$3("a judge kind has a registry definition");
 	return definition;
 }
 /** Canonicalises one inert kind-enablement version; no pointer or availability change happens here. */
-function canonicalJudgeKindEnablement(value) {
+function canonicalJudgeKindEnablement(value, inputs = {}) {
 	const enablement = record$1(value, "a judge-kind document");
 	if (!JUDGE_KINDS.includes(enablement.kind)) return fail$3("a judge-kind document has a known judge kind");
 	const kind = enablement.kind;
-	if (judgeKindDefinition(kind).availability === "unavailable") return fail$3("laya is unavailable until E2", "E2_REQUIRED");
+	if (kind === JUDGE_KINDS[1]) return layaEnablement(enablement, inputs);
+	if (judgeKindDefinition(kind).availability === "unavailable") return fail$3("the judge kind is unavailable", "E2_REQUIRED");
 	const id = `judge-kind:${kind}`;
 	if (enablement.id !== id) return fail$3(`a judge-kind document id is ${id}`);
 	if (kind === "typesafe") {
@@ -1253,7 +1415,7 @@ function canonicalJudgeKindEnablement(value) {
 function fail$2(message) {
 	throw new EventDomainError("VERSION_DOCUMENT_INVALID", message);
 }
-function isRecord$2(value) {
+function isRecord$3(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function exactKeys(value, keys, name) {
@@ -1284,7 +1446,7 @@ function canonicalLabels(value) {
 }
 /** Validates the Gmail source shape without silently reordering an authority-bound label array. */
 function normaliseGmailSourceOptions(value) {
-	if (!isRecord$2(value) || value.channel !== "gmail") return fail$2("a Gmail source option names the Gmail channel");
+	if (!isRecord$3(value) || value.channel !== "gmail") return fail$2("a Gmail source option names the Gmail channel");
 	exactKeys(value, [
 		"channel",
 		"labels",
@@ -1299,7 +1461,7 @@ function normaliseGmailSourceOptions(value) {
 }
 /** Validates the Phase-D Slack source shape, retaining only canonical conversation ids. */
 function normaliseSlackSourceOptions(value) {
-	if (!isRecord$2(value) || value.channel !== "slack") return fail$2("a Slack source option names the Slack channel");
+	if (!isRecord$3(value) || value.channel !== "slack") return fail$2("a Slack source option names the Slack channel");
 	exactKeys(value, ["channel", "conversations"], "a Slack source option");
 	return {
 		channel: "slack",
@@ -1308,7 +1470,7 @@ function normaliseSlackSourceOptions(value) {
 }
 /** Validates Resend's fixed-order, non-empty event-kind set. */
 function normaliseResendSourceOptions(value) {
-	if (!isRecord$2(value) || value.channel !== "resend") return fail$2("a Resend source option names the Resend channel");
+	if (!isRecord$3(value) || value.channel !== "resend") return fail$2("a Resend source option names the Resend channel");
 	exactKeys(value, ["channel", "kinds"], "a Resend source option");
 	if (!Array.isArray(value.kinds) || value.kinds.length === 0) return fail$2("Resend kinds are a non-empty array");
 	const kinds = [...value.kinds];
@@ -1322,7 +1484,7 @@ function normaliseResendSourceOptions(value) {
 }
 /** Validates the raw WhatsApp chat selector; JIDs stay raw authority-bound strings. */
 function normaliseWhatsAppSourceOptions(value) {
-	if (!isRecord$2(value) || value.channel !== "whatsapp") return fail$2("a WhatsApp source option names the WhatsApp channel");
+	if (!isRecord$3(value) || value.channel !== "whatsapp") return fail$2("a WhatsApp source option names the WhatsApp channel");
 	exactKeys(value, ["channel", "chats"], "a WhatsApp source option");
 	return {
 		channel: "whatsapp",
@@ -1331,7 +1493,7 @@ function normaliseWhatsAppSourceOptions(value) {
 }
 /** D4's closed four-channel source-options union. */
 function normaliseSourceOptions(value) {
-	if (!isRecord$2(value)) return fail$2("a source option is an object");
+	if (!isRecord$3(value)) return fail$2("a source option is an object");
 	switch (value.channel) {
 		case "gmail": return normaliseGmailSourceOptions(value);
 		case "slack": return normaliseSlackSourceOptions(value);
@@ -1403,7 +1565,7 @@ function record(value, name) {
 		return fail$1(`${name} is canonical JSON`);
 	}
 }
-function text(value, name) {
+function text$1(value, name) {
 	if (typeof value !== "string" || value.length === 0) return fail$1(`${name} is a non-empty string`);
 	return value;
 }
@@ -1412,7 +1574,7 @@ function positiveInteger$1(value, name) {
 	return value;
 }
 function canonicalOrigin(value) {
-	const origin = text(value, "an SSE allowed Origin");
+	const origin = text$1(value, "an SSE allowed Origin");
 	let parsed;
 	try {
 		parsed = new URL(origin);
@@ -1427,7 +1589,7 @@ function canonicalSseSubscriber(value) {
 	const subscriber = record(value, "an SSE subscriber document");
 	if (subscriber.kind !== "sse") return fail$1("an SSE subscriber document has kind sse");
 	const authority = record(subscriber.authority, "an SSE subscriber authority");
-	const host = text(authority.host, "an SSE subscriber authority host");
+	const host = text$1(authority.host, "an SSE subscriber authority host");
 	if (host !== "127.0.0.1" && host !== "::1") return fail$1("an SSE subscriber authority host is literal loopback");
 	const origins = Array.isArray(subscriber.origins) ? subscriber.origins.map(canonicalOrigin) : fail$1("SSE allowed Origins are an array");
 	if (origins.length === 0 || new Set(origins).size !== origins.length || [...origins].sort().some((origin, index) => origin !== origins[index])) return fail$1("SSE allowed Origins are non-empty, sorted and duplicate-free");
@@ -1436,7 +1598,7 @@ function canonicalSseSubscriber(value) {
 	const port = positiveInteger$1(authority.port, "an SSE subscriber authority port");
 	if (port > 65535) return fail$1("an SSE subscriber authority port is at most 65535");
 	return {
-		subscriberId: text(subscriber.subscriberId, "an SSE subscriber id"),
+		subscriberId: text$1(subscriber.subscriberId, "an SSE subscriber id"),
 		version: positiveInteger$1(subscriber.version, "an SSE subscriber version"),
 		kind: "sse",
 		authority: {
@@ -1453,10 +1615,10 @@ function canonicalSseTarget(value) {
 	if (target.kind !== "sse") return fail$1("an SSE target document has kind sse");
 	if (target.representation !== "plain" && target.representation !== "enveloped") return fail$1("an SSE target representation is plain or enveloped");
 	return {
-		targetId: text(target.targetId, "an SSE target id"),
+		targetId: text$1(target.targetId, "an SSE target id"),
 		version: positiveInteger$1(target.version, "an SSE target version"),
 		kind: "sse",
-		subscriberId: text(target.subscriberId, "an SSE target subscriber id"),
+		subscriberId: text$1(target.subscriberId, "an SSE target subscriber id"),
 		subscriberVersion: positiveInteger$1(target.subscriberVersion, "an SSE target subscriber version"),
 		representation: target.representation
 	};
@@ -1474,7 +1636,7 @@ function sseDeliveryTarget(input) {
 }
 //#endregion
 //#region src/domain/activation-documents.ts
-function isRecord$1(value) {
+function isRecord$2(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function fail(message, code = "VERSION_DOCUMENT_INVALID") {
@@ -1489,7 +1651,7 @@ function positiveInteger(value, name) {
 	return value;
 }
 function cloneJsonRecord(value, name) {
-	if (!isRecord$1(value)) return fail(`${name} is a JSON object`);
+	if (!isRecord$2(value)) return fail(`${name} is a JSON object`);
 	try {
 		return JSON.parse(canonicalJson(value));
 	} catch {
@@ -1664,7 +1826,7 @@ function canonicalEnableAll(value) {
 	};
 }
 /** Validates exactly one v1 activation document and normalises only D2's unordered enable-all list. */
-function normaliseActivationDocument(value) {
+function normaliseActivationDocument(value, options = {}) {
 	const document = cloneJsonRecord(value, "an activation document");
 	if (document.documentVersion !== 1) return fail("an activation document has documentVersion 1");
 	if (Object.hasOwn(document, "versions")) return fail("activation-document versions are derived, never supplied");
@@ -1682,19 +1844,19 @@ function normaliseActivationDocument(value) {
 		case "judge-kind": return {
 			documentVersion: 1,
 			kind: "judge-kind",
-			enablement: canonicalJudgeKindEnablement(document.enablement)
+			enablement: canonicalJudgeKindEnablement(document.enablement, options)
 		};
 		case "enable-all": return canonicalEnableAll(document);
 		default: return fail("an activation document has a known kind");
 	}
 }
 /** Core's recursively key-sorted canonical JSON for a complete v1 activation document. */
-function canonicalActivationDocument(document) {
-	return canonicalJson(normaliseActivationDocument(document));
+function canonicalActivationDocument(document, options = {}) {
+	return canonicalJson(normaliseActivationDocument(document, options));
 }
 /** The lowercase SHA-256 disclosure digest of one canonical activation document. */
-function activationDocumentDigest(document) {
-	return sha256Hex(canonicalActivationDocument(document));
+function activationDocumentDigest(document, options = {}) {
+	return sha256Hex(canonicalActivationDocument(document, options));
 }
 function compareVersions(left, right) {
 	return compareText(left.kind, right.kind) || compareText(left.id, right.id) || left.version - right.version;
@@ -1741,8 +1903,8 @@ function derivedVersions(document) {
 	}
 }
 /** Derives, rather than accepts, the exact core standing-disclosure binding for an activation intent. */
-function disclosureBindingFor(activationIntentId, input) {
-	const document = normaliseActivationDocument(input);
+function disclosureBindingFor(activationIntentId, input, options = {}) {
+	const document = normaliseActivationDocument(input, options);
 	const versions = derivedVersions(document).sort(compareVersions);
 	for (let index = 1; index < versions.length; index += 1) if (compareVersions(versions[index - 1], versions[index]) === 0) return fail("an activation document cannot derive duplicate disclosure versions");
 	return canonicalDisclosureBinding({
@@ -2131,6 +2293,93 @@ function isOwnerControlWireOperation(value) {
 function isB3ControlWireOperation(value) {
 	return B3_CONTROL_WIRE_OPERATION_SET.has(value);
 }
+Object.freeze([
+	"addJudge",
+	"updateJudge",
+	"rule-create",
+	"rule-update",
+	"ruleTest"
+]);
+Object.freeze([
+	"judgesList",
+	"addJudge",
+	"updateJudge",
+	"rule-create",
+	"rule-update",
+	"approvalView"
+]);
+Object.freeze([
+	"E2_EXTERNAL_REFERENCE_BLOCKED",
+	"LAYA_PLATFORM_UNAVAILABLE",
+	"LAYA_SANDBOX_UNAVAILABLE",
+	"LAYA_MANIFEST_NOT_REVIEWED",
+	"LAYA_TEMPLATE_BLOCKED"
+]);
+/**
+* The Laya limits of one rule activation preview, from the reviewed terms of this database's Laya inputs, or
+* undefined when the preview is not a rule naming a Laya judge. It reads only ids and reviewed texts.
+*/
+function layaJudgePreviewFor(preview, terms) {
+	if (preview.kind !== "rule") return void 0;
+	const judge = preview.rule.agentic?.judge;
+	if (judge?.kind !== "laya") return void 0;
+	return {
+		judgeId: judge.judgeId,
+		version: judge.version,
+		promptTemplate: judge.promptTemplate,
+		manifestId: judge.model,
+		limits: {
+			englishCpu: terms.facts.englishCpu,
+			macosBoundary: terms.facts.macosBoundary,
+			oneAtATime: terms.facts.oneAtATime
+		},
+		limitations: terms.limitations
+	};
+}
+function isRecord$1(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function closed(value, keys, name) {
+	if (!isRecord$1(value) || keys.some((key) => !Object.hasOwn(value, key)) || Object.keys(value).some((key) => !keys.includes(key))) throw new TypeError(`${name} must be a closed object`);
+}
+function text(value, name) {
+	if (typeof value !== "string" || value.length === 0) throw new TypeError(`${name} is a non-empty string`);
+}
+function positive(value, name) {
+	if (!Number.isSafeInteger(value) || value < 1) throw new TypeError(`${name} is a positive integer`);
+}
+/** The runtime companion to the schema's `layaJudgePreview`. */
+function assertLayaJudgePreviewV3(value) {
+	closed(value, [
+		"judgeId",
+		"version",
+		"promptTemplate",
+		"manifestId",
+		"limits",
+		"limitations"
+	], "a Laya judge preview");
+	text(value.judgeId, "a Laya judge preview id");
+	positive(value.version, "a Laya judge preview version");
+	if (value.promptTemplate !== "laya-noul-v1") throw new TypeError("a Laya judge preview names its template");
+	text(value.manifestId, "a Laya judge preview manifest id");
+	closed(value.limits, [
+		"englishCpu",
+		"macosBoundary",
+		"oneAtATime"
+	], "the Laya judge preview limits");
+	for (const limit of Object.values(value.limits)) text(limit, "a Laya judge preview limit");
+	closed(value.limitations, ["sandboxDeprecation", "englishAccuracy"], "the Laya judge preview limitations");
+	for (const limitation of Object.values(value.limitations)) text(limitation, "a Laya judge preview limitation");
+}
+/** The terminal lines that follow a rule preview naming a Laya judge; every line is neutralised like the preview. */
+function renderLayaJudgePreviewV3(value) {
+	assertLayaJudgePreviewV3(value);
+	return [
+		`Laya judge ${value.judgeId}@${value.version}: template ${value.promptTemplate}, manifest ${value.manifestId}`,
+		`Laya limits: ${value.limits.englishCpu} ${value.limits.macosBoundary} ${value.limits.oneAtATime}`,
+		`Laya limitations: ${value.limitations.sandboxDeprecation} ${value.limitations.englishAccuracy}`
+	].map((line) => neutralise(line).text);
+}
 //#endregion
 //#region src/operations/b3-contract.ts
 /**
@@ -2442,7 +2691,8 @@ Object.freeze({
 });
 /**
 * The terminal and desktop fixture boundary. This formats only daemon-authored identifiers and a canonical, neutralised
-* preview representation; it never consumes a secret operation or claims the approval.
+* preview representation; it never consumes a secret operation or claims the approval. A B3 v3 rule preview naming a
+* Laya judge also carries D11's Laya limits, rendered after the preview.
 */
 function renderB3ApprovalPreviewV1(value) {
 	if (!isRecord(value) || typeof value.kind !== "string" || !B3_APPROVAL_VIEW_VARIANTS.includes(value.kind)) throw new TypeError("an approval preview has an unknown B3 v1 variant");
@@ -2453,6 +2703,7 @@ function renderB3ApprovalPreviewV1(value) {
 	};
 	if (typeof value.approvalId !== "string" || typeof value.digest !== "string" || !isRecord(value.challenge) || typeof value.challenge.approvalId !== "string" || typeof value.challenge.digest !== "string" || typeof value.challenge.challenge !== "string" || typeof value.challenge.expiresAt !== "number") throw new TypeError("a ready approval preview is malformed");
 	normaliseActivationDocument(value.preview);
+	const laya = Object.hasOwn(value, "layaJudge") ? renderLayaJudgePreviewV3(value.layaJudge) : [];
 	return {
 		kind: "READY",
 		structured: {
@@ -2464,12 +2715,14 @@ function renderB3ApprovalPreviewV1(value) {
 				digest: value.challenge.digest,
 				challenge: value.challenge.challenge,
 				expiresAt: value.challenge.expiresAt
-			}
+			},
+			...Object.hasOwn(value, "layaJudge") ? { layaJudge: value.layaJudge } : {}
 		},
 		terminal: [
 			`Approval ${value.approvalId}`,
 			`Digest ${value.digest}`,
 			`Preview ${neutralise(canonicalJson(value.preview)).text}`,
+			...laya,
 			`Challenge ${value.challenge.challenge}`,
 			`Expires ${new Date(value.challenge.expiresAt).toISOString()}`
 		].join("\n")
@@ -2483,4 +2736,4 @@ const B3_CONTROL_CONTRACT = Object.freeze({
 	judgeUnavailable: B3_JUDGE_UNAVAILABLE_VARIANTS
 });
 //#endregion
-export { sourcesList as $, assertControlSupported as $t, normaliseWhatsAppSourceOptions as A, decideHeld as At, addTarget as B, CONTROL_PROTOCOL_VERSIONS as Bt, canonicalSseSubscriber as C, enableAll as Ct, normaliseResendSourceOptions as D, ACTIVATION_FAILURE as Dt, normaliseGmailSourceOptions as E, doctor as Et, canonicalJudgeBudget as F, catalogueList as Ft, addSubscriber as G, isControlRequest as Gt, targetsList as H, controlFailure as Ht, canonicalJudgeKindEnablement as I, catalogueShow as It, updateSubscriber as J, newInstanceRecord as Jt, removeSubscriber as K, negotiateVersion as Kt, judgeKindDefinition as L, approvalView as Lt, JUDGE_BUDGET_ID as M, dropDelivery as Mt, JUDGE_KIND_DEFINITIONS as N, heldList as Nt, normaliseSlackSourceOptions as O, isActivationFailureCode as Ot, canonicalJudge as P, retryDelivery as Pt, sourceShow as Q, writeInstance as Qt, createEventsMcpServer as R, EventControlClient as Rt, normaliseActivationDocument as S, updateJudge as St, classifySourceOptionChange as T, assertDoctorReportV2 as Tt, updateTarget as U, encodeControlFrame as Ut, removeTarget as V, ControlFrameReader as Vt, targetTest as W, isControlHello as Wt, status as X, readInstance as Xt, stop as Y, processIsLive as Yt, loadSqlite as Z, removeInstance as Zt, activationDocumentDigest as _, judgeTest as _t, B3_CONTROL_V1_OPERATION_SPECS as a, ensureEventSocketDirectory as an, rulesList as at, canonicalTarget as b, removeJudgeModel as bt, B3_CONTROL_V1_SUCCESSOR_REQUIREMENT as c, installErrorSink as cn, ruleTestRetained as ct, B3_SECRET_TERMINAL_ORIGIN as d, addJudge as dt, assertSocketPathFits as en, createRule as et, isB3ControlOperation as f, budgetShow as ft, isOwnerControlWireOperation as g, judgeModelStatus as gt, OWNER_CONTROL_WIRES as h, judgeKindsList as ht, B3_CONTROL_ERROR_CODES as i, ensureEventPaths as in, ruleShow as it, APPROVED_TYPESAFE_MODELS as j, deliveriesList as jt, normaliseSourceOptions as k, disableAll as kt, B3_DESKTOP_CONTROL_OPERATIONS as l, pause as lt, renderB3ApprovalPreviewV1 as m, enableJudgeKind as mt, B3_CAPABILITIES as n, verifyControlSocket as nn, enableRule as nt, B3_CONTROL_V1_RESULT_OPERATIONS as o, ensureOwnerOnlyFile as on, updateRule as ot, isB3SecretOperation as p, disableJudgeKind as pt, subscribersList as q, mayRecoverStaleInstance as qt, B3_CONTROL_CONTRACT as r, verifyPrivateSocketDirectory as rn, removeRule as rt, B3_CONTROL_V1_SCHEMA_VERSION as s, eventPaths as sn, ruleTest as st, B3_APPROVAL_VIEW_VARIANTS as t, controlEndpoint as tn, disableRule as tt, B3_JUDGE_UNAVAILABLE_VARIANTS as u, resume as ut, canonicalFullRuleDocument as v, judgesList as vt, sseDeliveryTarget as w, assertDoctorReportV1 as wt, disclosureBindingFor as x, updateBudget as xt, canonicalSubscriber as y, removeJudge as yt, VERSION as z, probeControl as zt };
+export { addSubscriber as $, isControlHello as $t, normaliseSourceOptions as A, updateJudge as At, canonicalJudgeKindEnablement as B, deliveriesList as Bt, normaliseActivationDocument as C, judgeKindsList as Ct, normaliseGmailSourceOptions as D, removeJudge as Dt, classifySourceOptionChange as E, judgesList as Et, assertCreatableLayaJudge as F, doctor as Ft, registerLayaEnablementInputs as G, catalogueShow as Gt, layaEnablementInputsFor as H, heldList as Ht, assertLayaJudgeKindAvailable as I, ACTIVATION_FAILURE as It, addTarget as J, probeControl as Jt, createEventsMcpServer as K, approvalView as Kt, assertLayaRuleJudgeOffered as L, isActivationFailureCode as Lt, APPROVED_TYPESAFE_MODELS as M, assertDoctorReportV1 as Mt, JUDGE_BUDGET_ID as N, assertDoctorReportV2 as Nt, normaliseResendSourceOptions as O, removeJudgeModel as Ot, JUDGE_KIND_DEFINITIONS as P, assertDoctorReportV3 as Pt, targetTest as Q, encodeControlFrame as Qt, canonicalJudge as R, disableAll as Rt, disclosureBindingFor as S, enableJudgeKind as St, sseDeliveryTarget as T, judgeTest as Tt, layaJudgeKindDefinitionFor as U, retryDelivery as Ut, judgeKindDefinition as V, dropDelivery as Vt, layaJudgeTermsFor as W, catalogueList as Wt, targetsList as X, ControlFrameReader as Xt, removeTarget as Y, CONTROL_PROTOCOL_VERSIONS as Yt, updateTarget as Z, controlFailure as Zt, isOwnerControlWireOperation as _, pause as _t, B3_CONTROL_V1_OPERATION_SPECS as a, readInstance as an, loadSqlite as at, canonicalSubscriber as b, budgetShow as bt, B3_CONTROL_V1_SUCCESSOR_REQUIREMENT as c, assertControlSupported as cn, createRule as ct, B3_SECRET_TERMINAL_ORIGIN as d, verifyControlSocket as dn, removeRule as dt, isControlRequest as en, removeSubscriber as et, isB3ControlOperation as f, verifyPrivateSocketDirectory as fn, ruleShow as ft, OWNER_CONTROL_WIRES as g, eventPaths as gn, ruleTestRetained as gt, layaJudgePreviewFor as h, ensureOwnerOnlyFile as hn, ruleTest as ht, B3_CONTROL_ERROR_CODES as i, processIsLive as in, status as it, normaliseWhatsAppSourceOptions as j, enableAll as jt, normaliseSlackSourceOptions as k, updateBudget as kt, B3_DESKTOP_CONTROL_OPERATIONS as l, assertSocketPathFits as ln, disableRule as lt, renderB3ApprovalPreviewV1 as m, ensureEventSocketDirectory as mn, updateRule as mt, B3_CAPABILITIES as n, mayRecoverStaleInstance as nn, updateSubscriber as nt, B3_CONTROL_V1_RESULT_OPERATIONS as o, removeInstance as on, sourceShow as ot, isB3SecretOperation as p, ensureEventPaths as pn, rulesList as pt, VERSION as q, EventControlClient as qt, B3_CONTROL_CONTRACT as r, newInstanceRecord as rn, stop as rt, B3_CONTROL_V1_SCHEMA_VERSION as s, writeInstance as sn, sourcesList as st, B3_APPROVAL_VIEW_VARIANTS as t, negotiateVersion as tn, subscribersList as tt, B3_JUDGE_UNAVAILABLE_VARIANTS as u, controlEndpoint as un, enableRule as ut, activationDocumentDigest as v, resume as vt, canonicalSseSubscriber as w, judgeModelStatus as wt, canonicalTarget as x, disableJudgeKind as xt, canonicalFullRuleDocument as y, addJudge as yt, canonicalJudgeBudget as z, decideHeld as zt };