mu-agent 0.2.4 → 0.2.6

package/CHANGELOG.md

@@ -2,6 +2,31 @@
 
 ## [Unreleased]
 
+## [0.2.6] - 2026-10-24
+
+**0.2.6 shows the note that Laya was replaced when a person sends a message, keeps mude 1.0 local only when it's installed again, and stops `mu doctor` failing on a machine without Chrome.**
+
+### Fixed
+
+- The `laya_removed` notice waits for a person. In 0.2.5 the desktop backend's health check of mu (a session that never gets a prompt) was the first session with a UI: it took Laya out of mu.json and got the notice about 3 s after the app started, so nobody saw it. mu.json still loses Laya at the first session start with a terminal or the desktop app, but the notice is now kept in `<agentDir>/mu/notices.json` (`layaRemoved: { judge, from }`) and said at the first message a person sends, in that session or a later one: `judge.notice`, then the line, and the entry is removed. pi's `input` event is that message; mu's own commands (`/goal`, `/permissions`, `/mu …`), which pi runs before it, and messages an extension sends don't count. A session that gets no message leaves the notice where it is, and `mu --print` and json mode still change nothing. `MU_JUDGE=laya` leaves the same notice at the start of each session that has it. The free Jev notice now writes its day beside other entries in notices.json instead of replacing the file. A mu.json that 0.2.5 already updated has no notice left to show.
+- `mu judge mude install` without `--local-only` or `--with-fallback` keeps the current setting when mude 1.0 is already the judge (as `enable` does), instead of putting Jev back behind it.
+- `mu judge model add`: a 401 without `HF_TOKEN` says the model doesn't exist or is private or gated, and to check the name, since Hugging Face answers both the same way.
+- `mu doctor` and `/doctor` mark a missing Chrome, Chromium, Edge or Brave as optional (`--`) instead of something to fix, so `mu doctor` exits 0 when everything else is set up. `mu --help` lines fit in 100 columns.
+
+## [0.2.5] - 2026-10-24
+
+**0.2.5 removes Laya from mu's built-in judges. A configuration that still names it switches to mude 1.0 or Jev on its own.**
+
+### Changed
+
+- A configuration that still names Laya keeps working. `laya` in `tiers` or a route, and a judge of type `local`, are read without it: mude 1.0 takes its place when it is installed on this Mac and its key (`MU_JUDGE_MUDE_KEY`) is set, otherwise the judges left do, or Jev when none is left. A route left with no judge goes back to `tiers`. The first session with a terminal or the desktop app (not `mu --print` or json mode) writes that to mu.json once. It changes only those values, keeps a copy in `~/.mu/backups`, and says so once: `judge.notice` with the code `laya_removed` and the `judge`, then the line itself. A mu.json that isn't plain JSON is left alone. `MU_JUDGE=laya` is skipped in every session that has it. For such a configuration the launcher starts mude's server in the background, as it does for `mude`.
+- `/mu judge laya` and `/mu route <point> laya` say that Laya is no longer built in. An `http` judge needs a `baseUrl`; its client is `HttpJudgeProvider` (it was `LocalJudgeProvider`).
+
+### Removed
+
+- Laya, the third-party local judge, is no longer built in: the `laya` judge, the `local` judge type, its sidecar (`kyrn/bin/kyrn-judge-local`, `kyrn/local-judge/server.py` and its lock, no longer in the package) and `mu judge setup | start | stop | status | run`. Those commands now say so and point to `mu judge mude install` and `mu judge model add <link>`; `mu judge` alone prints the judge commands. The launcher no longer starts a sidecar, and `mu doctor` drops its rows.
+- `continuation.localPromised`, which only Laya used, and the one-question-at-a-time path of a `local` judge: `tool.admission` and `tool.injection` always ask in batches, and the questions about a message start together.
+
 ## [0.2.4] - 2026-10-24
 
 **0.2.4 brings Gemini 4 Argon through Google Antigravity and fixes third-party OpenAI-compatible providers that turned away the `developer` role.**

package/README.md

@@ -27,13 +27,13 @@ mu is built on [pi](https://github.com/earendil-works/pi). It hands the small qu
 
 ## Choose a judge
 
-Out of the box, the judge is Jev 1.13, TypeSafe's hosted judge model, free on OpenCode Zen for a limited time and with no key needed. What it judges goes to OpenCode, which doesn't train on it, and mu reminds you of that once a day. To send nothing anywhere, run `mu setup --judge off` (or choose "Not now" when `mu setup` asks): no decision point asks a judge, and mu's features keep working on their rules. Or use the local judge, Laya.
+Out of the box, the judge is Jev 1.13, TypeSafe's hosted judge model, free on OpenCode Zen for a limited time and with no key needed. What it judges goes to OpenCode, which doesn't train on it, and mu reminds you of that once a day. To send nothing anywhere, run `mu setup --judge off` (or choose "Not now" when `mu setup` asks): no decision point asks a judge, and mu's features fall back to their own rules. Or, on a Mac with Apple silicon, use mude 1.0 with `--local-only`.
 
 - **Jev** (hosted): set `TYPESAFE_API_KEY` (TypeSafe), `MU_JUDGE_OPENROUTER_API_KEY` (Jev on OpenRouter), `AI_GATEWAY_API_KEY` (Vercel AI Gateway), `OPENCODE_API_KEY` (OpenCode Zen) or `CLOUDFLARE_API_KEY` with `CLOUDFLARE_ACCOUNT_ID` (Cloudflare Workers AI) in your environment, or add it to `~/.mu/.env` as `KEY=value`. `mu setup` asks for a key and writes it there. mu reads that file as data, never prints it and starts using the key automatically.
 - **Another classifier** from pi's catalog: `/mu judge classifier:<provider>/<model>`, for example Cloudflare's Clef (`clef`, `clef-flash`) or a System One model on OpenRouter, with that provider's key.
 - **CLM** (self-hosted; its encoder needs a GPU): start `clm-serve` from [Contrastive-LM/CLM](https://github.com/Contrastive-LM/CLM), then run `/mu judge clm`. For a server on another machine, add `"judges": { "clm": { "type": "clm", "baseUrl": "http://<host>:8700" } }` to `~/.mu/agent/mu.json`. If the server was started with `CLM_API_KEY`, set the same value in `MU_JUDGE_CLM_API_KEY`. `mu doctor` checks the server.
 - **mude 1.0** (local, a Mac with Apple silicon, macOS 14+), mu's own decision model, optimized for coding: `mu judge mude install` downloads it (1.8 GB), sets it up in `~/.mu/local-judge/mude`, starts its server on 127.0.0.1 and puts it first. What it can't answer goes to the judges you had before, which are hosted; `mu judge mude enable --local-only` keeps everything on your Mac. Its server uses about 4 GB of memory until `mu judge mude stop`.
-- **Laya** (local, macOS on Apple silicon): `mu judge setup` installs it into `~/.mu/local-judge`. It downloads about 930 MB, and only when you run that command.
+- **Other decision models from Hugging Face** (local, a Mac with Apple silicon): `mu judge model add <link>` adds one that is packaged like mude 1.0 and makes it the judge. Laya is no longer included: a `mu.json` that still names it gets mude 1.0 in its place when mude is set up, otherwise the remaining judges or Jev, and mu says so once.
 - **Any model you already use:** `/mu judge llm:<provider>/<model>`.
 
 34 of the 40 decision points act on their verdicts from the start (`active`). To only record what the judge would do, run `/mu mode default shadow`, or put `"modes": { "default": "shadow" }` in `~/.mu/agent/mu.json`.
@@ -47,7 +47,7 @@ mu -p "prompt"           run one prompt, print the answer and exit
 mu -c | -r               continue the last session | pick a session to resume
 mu setup                 connect a model and choose a judge (see mu setup --help for scripting and services)
 mu judge mude <cmd>      mude 1.0 on this Mac: install | enable | disable | start | stop | status | uninstall
-mu judge <cmd>           manage the local judge, Laya (macOS on Apple silicon): setup | start | stop | status | run
+mu judge model <cmd>     other decision models from Hugging Face: add <link> | list | use | remove
 mu ledger [n] [--json]   print the judge's verdicts from the last n sessions
 mu import <file>...      import Claude Code, Codex and ZCode conversations; --list shows them (mu import --help)
 mu doctor                check the installation, the judges and the connections

package/judge/dist/auth.js

@@ -73,12 +73,13 @@ var DEFAULT_CONFIG = {
   recordState: false
 };
 var MODES = ["off", "shadow", "active"];
+var LAYA = "laya";
+var RETIRED_TYPE = "local";
 var JUDGE_TYPES = [
   "jev",
   "typesafe",
   "clm",
   "gateway",
-  "local",
   "http",
   "llm",
   "classifier",
@@ -118,14 +119,48 @@ function readJudges(value) {
   }
   return judges;
 }
-function parseConfig(value) {
+function retiredJudges(judges) {
+  const names = /* @__PURE__ */ new Set();
+  const entries = isRecord(judges) ? judges : {};
+  const own = entries[LAYA];
+  if (!(isRecord(own) && typeof own.type === "string" && JUDGE_TYPES.includes(own.type))) names.add(LAYA);
+  for (const [name, entry] of Object.entries(entries)) {
+    if (isRecord(entry) && entry.type === RETIRED_TYPE) names.add(name);
+  }
+  return names;
+}
+function withoutRetired(tiers, retired, replacement) {
+  if (!tiers.some((tier) => retired.has(tier.trim()))) return void 0;
+  const mapped = tiers.flatMap((tier) => retired.has(tier.trim()) ? replacement ? [replacement] : [] : [tier]);
+  return mapped.filter((tier, index) => tier !== replacement || mapped.indexOf(tier) === index);
+}
+function namesRetired(value) {
+  if (!isRecord(value)) return false;
+  const retired = retiredJudges(value.judges);
+  const lists = [
+    Array.isArray(value.tiers) ? value.tiers : [],
+    ...isRecord(value.routes) ? Object.values(value.routes) : []
+  ];
+  return lists.some((tiers) => readTiers(tiers).some((tier) => retired.has(tier)));
+}
+function parseConfig(value, options = {}) {
   if (!isRecord(value)) return DEFAULT_CONFIG;
-  const tiers = Array.isArray(value.tiers) ? value.tiers.filter((tier) => typeof tier === "string") : [];
+  const named = Array.isArray(value.tiers) ? value.tiers.filter((tier) => typeof tier === "string") : [];
+  const retired = retiredJudges(value.judges);
+  const replacement = namesRetired(value) ? options.replaceLaya?.() : void 0;
+  const tiers = withoutRetired(named, retired, replacement) ?? named;
+  const routes = readRoutes(value.routes);
+  for (const [specId, routed] of Object.entries(routes)) {
+    const kept = withoutRetired(routed, retired, replacement);
+    if (kept === void 0) continue;
+    if (kept.length > 0) routes[specId] = kept;
+    else delete routes[specId];
+  }
   return {
     tiers: tiers.length > 0 ? tiers : DEFAULT_CONFIG.tiers,
     judges: readJudges(value.judges),
     modes: { ...DEFAULT_CONFIG.modes, ...readModes(value.modes) },
-    routes: readRoutes(value.routes),
+    routes,
     features: isRecord(value.features) ? value.features : {},
     mcp: isRecord(value.mcp) ? value.mcp : void 0,
     writer: typeof value.writer === "string" ? value.writer : void 0,
@@ -136,9 +171,18 @@ function loadConfig(source = {}) {
   const env = source.env ?? process.env;
   let config = DEFAULT_CONFIG;
   let problem;
+  let inFile = false;
+  let replacement;
   for (const file of source.dir ? [CONFIG_FILE, LEGACY_CONFIG_FILE] : []) {
     try {
-      config = parseConfig(JSON.parse(readFileSync(join2(source.dir, file), "utf8")));
+      const value = JSON.parse(readFileSync(join2(source.dir, file), "utf8"));
+      inFile = namesRetired(value);
+      config = parseConfig(value, {
+        replaceLaya: () => {
+          replacement = source.replaceLaya?.();
+          return replacement;
+        }
+      });
       break;
     } catch (error) {
       if (error.code === "ENOENT") continue;
@@ -146,17 +190,21 @@ function loadConfig(source = {}) {
       break;
     }
   }
+  let inEnv = false;
   const judge = muEnv("JUDGE", env)?.trim();
   if (judge === "off") return { config, disabled: true, problem };
   if (judge) {
-    const tiers = judge.split(",").map((tier) => tier.trim() === "gateway" ? "jev" : tier.trim());
-    config = { ...config, tiers: tiers.filter(Boolean) };
+    const tiers = judge.split(",").map((tier) => tier.trim() === "gateway" ? "jev" : tier.trim()).filter(Boolean);
+    const kept = config.judges[LAYA] ? tiers : tiers.filter((tier) => tier !== LAYA);
+    inEnv = kept.length < tiers.length;
+    if (kept.length > 0) config = { ...config, tiers: kept };
   }
   const mode = muEnv("JUDGE_MODE", env);
   if (mode && MODES.includes(mode)) config = { ...config, modes: { ...config.modes, default: mode } };
   const writer = muEnv("WRITER", env);
   if (writer) config = { ...config, writer };
-  return { config, disabled: false, problem };
+  const laya = inFile || inEnv ? { file: inFile, env: inEnv, replacement } : void 0;
+  return { config, disabled: false, problem, ...laya ? { laya } : {} };
 }
 function featureOptions(config, name, defaults) {
   const value = config.features[name];

package/judge/dist/mude.js

@@ -38,18 +38,6 @@ var BUILT_IN_JUDGES = {
   "clef-flash": { type: "classifier", model: "cloudflare-workers-ai/@cf/cloudflare/clef-flash" },
   // CLM-8B on this machine, where `clm-serve` listens by default. Its profile is not measured on mu's questions yet.
   clm: { type: "clm" },
-  // Measured in kyrn/docs/03-local-judge.md: the base checkpoint classifies one text well, says "yes" to
-  // nearly every relational question, and cannot use a rubric or judge the request itself. Measured on
-  // Terminal-Bench 2.1 (Oct 2026): on tool output it is wrong or late. All 15 passages it withheld as injections were
-  // clean (directory listings, href lists, headers, JSON), its one admission drop was a makefile, and most of its
-  // calls on both failed or came too late. So screening tool output (`screen`) goes to the next tier, or to the
-  // rules. It also read a finished "Done. Created /app/meeting_scheduled.ics …" as a promise of more work, twice in one
-  // run (constraints-scheduling): 4 extra requests and the model searching / for test files. So whether a closing
-  // message promised more (`intent`, turn.continue) goes to the next tier too; `continuation.localPromised` asks it.
-  laya: {
-    type: "local",
-    profile: { capabilities: { relate: false, rate: false, meta: false, screen: false, intent: false } }
-  },
   // mude, the decision model trained for mu's judgment layer, on this Mac (`mu judge mude install`, Apple silicon):
   // the System One server that comes in its package, on 127.0.0.1:8790, with the key the install wrote to the .env.
   // Trusted on every capability: on mu's own dev scenarios (an internal benchmark, not public yet) it did as well as Jev
@@ -66,6 +54,31 @@ var BUILT_IN_JUDGES = {
   },
   mock: { type: "mock" }
 };
+var LAYA = "laya";
+var RETIRED_TYPE = "local";
+var JUDGE_TYPES = [
+  "jev",
+  "typesafe",
+  "clm",
+  "gateway",
+  "http",
+  "llm",
+  "classifier",
+  "mock"
+];
+function isRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function retiredJudges(judges) {
+  const names = /* @__PURE__ */ new Set();
+  const entries = isRecord(judges) ? judges : {};
+  const own = entries[LAYA];
+  if (!(isRecord(own) && typeof own.type === "string" && JUDGE_TYPES.includes(own.type))) names.add(LAYA);
+  for (const [name, entry] of Object.entries(entries)) {
+    if (isRecord(entry) && entry.type === RETIRED_TYPE) names.add(name);
+  }
+  return names;
+}
 
 // packages/kyrn-judge/src/setup/env-file.ts
 var DEFINITION = /^(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=\s*(.*)$/;
@@ -255,7 +268,7 @@ function writeJsonFile(path, value) {
   writeFileAtomic(path, `${JSON.stringify(value, null, 2)}
 `);
 }
-function isRecord(value) {
+function isRecord2(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function judgeConfigPath(agentDir, exists = existsSync) {
@@ -272,10 +285,10 @@ function withTiers(config, tiers) {
   return { ...config, tiers: [...tiers] };
 }
 function judgeOff(config) {
-  return isRecord(config?.modes) && config.modes.default === "off";
+  return isRecord2(config?.modes) && config.modes.default === "off";
 }
 function withJudge(config, on) {
-  const { default: _default, ...modes } = isRecord(config.modes) ? config.modes : {};
+  const { default: _default, ...modes } = isRecord2(config.modes) ? config.modes : {};
   if (!on) return { ...config, modes: { default: "off", ...modes } };
   if (!judgeOff(config)) return config;
   const { modes: _modes, ...rest } = config;
@@ -596,8 +609,10 @@ function enableLocal(judge, paths, files, options) {
   const name = judge.name;
   const { path, config } = readConfig(files);
   const state = readState(paths);
-  const current = tiersOf(config).filter((tier) => tier !== name);
-  const before = current.length > 0 ? current : [...state?.previousTiers ?? ["jev"]];
+  const retired = retiredJudges(config.judges);
+  const current = tiersOf(config).filter((tier) => tier !== name && !retired.has(tier));
+  const kept = (state?.previousTiers ?? []).filter((tier) => !retired.has(tier));
+  const before = current.length > 0 ? current : kept.length > 0 ? kept : ["jev"];
   const tiers = options.localOnly ? [name] : [name, ...before.filter((tier) => tier !== name)];
   const judgeWasOff = state?.judgeWasOff ?? judgeOff(config);
   let next = withJudge(withTiers(withoutOwnRoutes(config, state), tiers), true);
@@ -640,8 +655,10 @@ function disableMude(paths, files, options = {}) {
 function disableLocal(judge, paths, files, options = {}) {
   const { path, config } = readConfig(files);
   const state = readState(paths);
-  const rest = tiersOf(config).filter((tier) => tier !== judge.name);
-  const tiers = rest.length > 0 ? rest : [...state?.previousTiers ?? ["jev"]];
+  const retired = retiredJudges(config.judges);
+  const rest = tiersOf(config).filter((tier) => tier !== judge.name && !retired.has(tier));
+  const previous = (state?.previousTiers ?? []).filter((tier) => !retired.has(tier));
+  const tiers = rest.length > 0 ? rest : previous.length > 0 ? previous : ["jev"];
   let next = withTiers(withoutOwnRoutes(config, state), tiers);
   if (state?.judgeWasOff) next = withJudge(next, false);
   if (options.removeEntry && state?.wroteEntry) {
@@ -1054,7 +1071,7 @@ async function resolveModel(ref, options = {}) {
     }
     if (response.status === 401 || response.status === 403) {
       throw new ModelError(
-        `Hugging Face won't show ${ref.repo} (${response.status}): it's private or gated. Accept its terms on huggingface.co, set HF_TOKEN, then add it again`,
+        response.status === 401 && !options.token ? `Couldn't open ${ref.repo} on Hugging Face (401): it doesn't exist, or it's private or gated. Check the name; for a gated model, accept its terms on huggingface.co, set HF_TOKEN, then add it again` : `${ref.repo} is private or gated on Hugging Face (${response.status}). Accept its terms on huggingface.co, set HF_TOKEN, then add it again`,
         "access"
       );
     }
@@ -1131,7 +1148,7 @@ function writeRecord(muHome, record) {
   writeFileSync5(join5(root, "model.json"), `${JSON.stringify(record, null, 1)}
 `);
 }
-function isRecord2(value) {
+function isRecord3(value) {
   if (typeof value !== "object" || value === null) return false;
   const record = value;
   return typeof record.id === "string" && typeof record.repo === "string" && typeof record.revision === "string" && typeof record.bytes === "number" && Array.isArray(record.files);
@@ -1147,7 +1164,7 @@ function listRecords(muHome) {
   for (const name of names.sort()) {
     try {
       const value = JSON.parse(readFileSync5(join5(modelsDir(muHome), name, "model.json"), "utf8"));
-      if (isRecord2(value) && value.id === name) records.push(value);
+      if (isRecord3(value) && value.id === name) records.push(value);
     } catch {
     }
   }
@@ -1460,10 +1477,11 @@ function installLocalOnly(ctx, args) {
   if (args.includes("--with-fallback")) return false;
   try {
     const value = JSON.parse(readFileSync7(ctx.paths.install, "utf8"));
-    return typeof value === "object" && value !== null && "localOnly" in value && value.localOnly === true;
+    if (typeof value === "object" && value !== null && "localOnly" in value) return value.localOnly === true;
   } catch {
-    return false;
   }
+  const current = judgeSetting(ctx.files, pkgOf(ctx).judge.name);
+  return current.enabled && current.localOnly;
 }
 function startedAt(pid) {
   try {
@@ -1944,7 +1962,7 @@ ${USAGE2}`, "usage");
       else out = humanOut(write, tty, each2.pkg);
       out.step(
         "model",
-        `${record2.repo} @ ${record2.revision.slice(0, 7)} (${gb2(record2.bytes)} GB) is the decision model ${record2.id}. It runs its own server code (${SERVER_FILE}) on this Mac: add only models you trust.`
+        `Adding ${record2.repo} @ ${record2.revision.slice(0, 7)} (${gb2(record2.bytes)} GB) as ${record2.id}. It runs its own server code (${SERVER_FILE}) on this Mac: add only models you trust.`
       );
       await install(each2, out, flags, mudePaths(home));
       out.status(await status(each2));

package/judge/dist/setup.js

@@ -100,18 +100,6 @@ var BUILT_IN_JUDGES = {
   "clef-flash": { type: "classifier", model: "cloudflare-workers-ai/@cf/cloudflare/clef-flash" },
   // CLM-8B on this machine, where `clm-serve` listens by default. Its profile is not measured on mu's questions yet.
   clm: { type: "clm" },
-  // Measured in kyrn/docs/03-local-judge.md: the base checkpoint classifies one text well, says "yes" to
-  // nearly every relational question, and cannot use a rubric or judge the request itself. Measured on
-  // Terminal-Bench 2.1 (Oct 2026): on tool output it is wrong or late. All 15 passages it withheld as injections were
-  // clean (directory listings, href lists, headers, JSON), its one admission drop was a makefile, and most of its
-  // calls on both failed or came too late. So screening tool output (`screen`) goes to the next tier, or to the
-  // rules. It also read a finished "Done. Created /app/meeting_scheduled.ics …" as a promise of more work, twice in one
-  // run (constraints-scheduling): 4 extra requests and the model searching / for test files. So whether a closing
-  // message promised more (`intent`, turn.continue) goes to the next tier too; `continuation.localPromised` asks it.
-  laya: {
-    type: "local",
-    profile: { capabilities: { relate: false, rate: false, meta: false, screen: false, intent: false } }
-  },
   // mude, the decision model trained for mu's judgment layer, on this Mac (`mu judge mude install`, Apple silicon):
   // the System One server that comes in its package, on 127.0.0.1:8790, with the key the install wrote to the .env.
   // Trusted on every capability: on mu's own dev scenarios (an internal benchmark, not public yet) it did as well as Jev
@@ -128,6 +116,31 @@ var BUILT_IN_JUDGES = {
   },
   mock: { type: "mock" }
 };
+var LAYA = "laya";
+var RETIRED_TYPE = "local";
+var JUDGE_TYPES = [
+  "jev",
+  "typesafe",
+  "clm",
+  "gateway",
+  "http",
+  "llm",
+  "classifier",
+  "mock"
+];
+function isRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function retiredJudges(judges) {
+  const names = /* @__PURE__ */ new Set();
+  const entries = isRecord(judges) ? judges : {};
+  const own = entries[LAYA];
+  if (!(isRecord(own) && typeof own.type === "string" && JUDGE_TYPES.includes(own.type))) names.add(LAYA);
+  for (const [name, entry] of Object.entries(entries)) {
+    if (isRecord(entry) && entry.type === RETIRED_TYPE) names.add(name);
+  }
+  return names;
+}
 
 // packages/kyrn-judge/src/setup/env-file.ts
 var DEFINITION = /^(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=\s*(.*)$/;
@@ -317,21 +330,21 @@ function writeJsonFile(path, value) {
   writeFileAtomic(path, `${JSON.stringify(value, null, 2)}
 `);
 }
-function isRecord(value) {
+function isRecord2(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function existingProvider(models, id) {
   const providers = models.providers;
-  return isRecord(providers) && isRecord(providers[id]) ? providers[id] : void 0;
+  return isRecord2(providers) && isRecord2(providers[id]) ? providers[id] : void 0;
 }
 function mergeModels(existing, added) {
   const kept = Array.isArray(existing) ? [...existing] : [];
-  const have = new Set(kept.flatMap((model) => isRecord(model) && typeof model.id === "string" ? [model.id] : []));
+  const have = new Set(kept.flatMap((model) => isRecord2(model) && typeof model.id === "string" ? [model.id] : []));
   return [...kept, ...added.filter((model) => !have.has(model.id)).map((model) => ({ ...model }))];
 }
 function withProvider(models, id, entry) {
-  const providers = isRecord(models.providers) ? models.providers : {};
-  const current = isRecord(providers[id]) ? providers[id] : {};
+  const providers = isRecord2(models.providers) ? models.providers : {};
+  const current = isRecord2(providers[id]) ? providers[id] : {};
   const next = {
     ...current,
     name: typeof current.name === "string" ? current.name : entry.name,
@@ -345,8 +358,8 @@ function withProvider(models, id, entry) {
   return { ...models, providers: { ...providers, [id]: next } };
 }
 function withModel(models, providerId, modelId) {
-  const providers = isRecord(models.providers) ? models.providers : {};
-  const current = isRecord(providers[providerId]) ? providers[providerId] : {};
+  const providers = isRecord2(models.providers) ? models.providers : {};
+  const current = isRecord2(providers[providerId]) ? providers[providerId] : {};
   return {
     ...models,
     providers: { ...providers, [providerId]: { ...current, models: mergeModels(current.models, [{ id: modelId }]) } }
@@ -366,10 +379,10 @@ function withTiers(config, tiers) {
   return { ...config, tiers: [...tiers] };
 }
 function judgeOff(config) {
-  return isRecord(config?.modes) && config.modes.default === "off";
+  return isRecord2(config?.modes) && config.modes.default === "off";
 }
 function withJudge(config, on) {
-  const { default: _default, ...modes } = isRecord(config.modes) ? config.modes : {};
+  const { default: _default, ...modes } = isRecord2(config.modes) ? config.modes : {};
   if (!on) return { ...config, modes: { default: "off", ...modes } };
   if (!judgeOff(config)) return config;
   const { modes: _modes, ...rest } = config;
@@ -690,8 +703,10 @@ function enableLocal(judge, paths, files, options) {
   const name = judge.name;
   const { path, config } = readConfig(files);
   const state = readState(paths);
-  const current = tiersOf(config).filter((tier) => tier !== name);
-  const before = current.length > 0 ? current : [...state?.previousTiers ?? ["jev"]];
+  const retired = retiredJudges(config.judges);
+  const current = tiersOf(config).filter((tier) => tier !== name && !retired.has(tier));
+  const kept = (state?.previousTiers ?? []).filter((tier) => !retired.has(tier));
+  const before = current.length > 0 ? current : kept.length > 0 ? kept : ["jev"];
   const tiers = options.localOnly ? [name] : [name, ...before.filter((tier) => tier !== name)];
   const judgeWasOff = state?.judgeWasOff ?? judgeOff(config);
   let next = withJudge(withTiers(withoutOwnRoutes(config, state), tiers), true);
@@ -734,8 +749,10 @@ function disableMude(paths, files, options = {}) {
 function disableLocal(judge, paths, files, options = {}) {
   const { path, config } = readConfig(files);
   const state = readState(paths);
-  const rest = tiersOf(config).filter((tier) => tier !== judge.name);
-  const tiers = rest.length > 0 ? rest : [...state?.previousTiers ?? ["jev"]];
+  const retired = retiredJudges(config.judges);
+  const rest = tiersOf(config).filter((tier) => tier !== judge.name && !retired.has(tier));
+  const previous = (state?.previousTiers ?? []).filter((tier) => !retired.has(tier));
+  const tiers = rest.length > 0 ? rest : previous.length > 0 ? previous : ["jev"];
   let next = withTiers(withoutOwnRoutes(config, state), tiers);
   if (state?.judgeWasOff) next = withJudge(next, false);
   if (options.removeEntry && state?.wroteEntry) {
@@ -1098,7 +1115,7 @@ function modelPaths(muHome2, record) {
     installLock: join6(root, "install.lock")
   };
 }
-function isRecord2(value) {
+function isRecord3(value) {
   if (typeof value !== "object" || value === null) return false;
   const record = value;
   return typeof record.id === "string" && typeof record.repo === "string" && typeof record.revision === "string" && typeof record.bytes === "number" && Array.isArray(record.files);
@@ -1114,7 +1131,7 @@ function listRecords(muHome2) {
   for (const name of names.sort()) {
     try {
       const value = JSON.parse(readFileSync5(join6(modelsDir(muHome2), name, "model.json"), "utf8"));
-      if (isRecord2(value) && value.id === name) records.push(value);
+      if (isRecord3(value) && value.id === name) records.push(value);
     } catch {
     }
   }
@@ -1422,10 +1439,11 @@ function installLocalOnly(ctx, args) {
   if (args.includes("--with-fallback")) return false;
   try {
     const value = JSON.parse(readFileSync7(ctx.paths.install, "utf8"));
-    return typeof value === "object" && value !== null && "localOnly" in value && value.localOnly === true;
+    if (typeof value === "object" && value !== null && "localOnly" in value) return value.localOnly === true;
   } catch {
-    return false;
   }
+  const current = judgeSetting(ctx.files, pkgOf(ctx).judge.name);
+  return current.enabled && current.localOnly;
 }
 function startedAt(pid) {
   try {

package/judge/manifest.json

@@ -270,7 +270,7 @@
 			},
 			"summary": {
 				"zh": "任务进行中你又发来一句话：判断是在下一步就带进工作，还是等这一轮做完再处理。判定最多等 1.5 秒；没有判定时，消息按你发送的方式送达。",
-				"en": "For a message you send while the agent is working: bring it into the work at the next step, or hold it until the run is done. mu waits up to 1.5 seconds for the verdict; without one, the message goes as you sent it.",
+				"en": "For a message you send while the agent is working: deliver it at the next step, or hold it until the run is done. mu waits up to 1.5 seconds for the verdict; without one, the message goes as you sent it.",
 				"zh-TW": "任務進行中你又傳來一則訊息：判斷是在下一步就帶進工作，還是等這一輪做完再處理。判定最多等 1.5 秒；沒有判定時，訊息照你傳送的方式送達。",
 				"ja-JP": "エージェントの作業中に送ったメッセージを、次のステップで作業に取り込むか、実行が終わるまで待たせるかを判定します。判定は最大 1.5 秒待ち、判定がなければメッセージは送ったとおりに届きます。",
 				"ko-KR": "에이전트가 작업하는 중에 보낸 메시지를 다음 단계에서 작업에 반영할지, 실행이 끝날 때까지 기다리게 할지 판정합니다. 판정은 최대 1.5초 기다리며, 판정이 없으면 메시지는 보낸 그대로 전달됩니다.",
@@ -1181,8 +1181,8 @@
 				"fa-IR": "نیمه‌کاره ماند"
 			},
 			"summary": {
-				"zh": "一轮结束在「接下来我去跑测试」却什么也没做，或者你已经让它做了它还在问「要我改吗」：让它接着做。难以撤销、或要出这台电脑的一步（推送、发布、删除、付款）不催。每条消息最多催两次；无人值守的运行里「说了没做」最多催一次，它回应上一次催促时没调工具就不再催。本地判定器（Laya）不回答「说了没做」。",
-				"en": "When a run ends on \"next I'll run the tests\" without doing it, or asks permission for work you already asked for, sends the agent back to it. Never nudges a step that is hard to undo or reaches beyond this machine (push, publish, delete, pay). At most twice per message; in an unattended run, at most once for work it said it would do, and not after it answered a nudge without a tool call. The local judge (Laya) doesn't answer whether work was left undone."
+				"zh": "一轮结束在「接下来我去跑测试」却什么也没做，或者你已经让它做了它还在问「要我改吗」：让它接着做。难以撤销、或要出这台电脑的一步（推送、发布、删除、付款）不催。每条消息最多催两次；无人值守的运行里「说了没做」最多催一次，它回应上一次催促时没调工具就不再催。",
+				"en": "When a run ends on \"next I'll run the tests\" without doing it, or asks permission for work you already asked for, sends the agent back to it. Never nudges a step that is hard to undo or reaches beyond this machine (push, publish, delete, pay). At most twice per message; in an unattended run, at most once for work it said it would do, and not after it answered a nudge without a tool call."
 			}
 		},
 		{
@@ -1381,7 +1381,7 @@
 			},
 			"summary": {
 				"zh": "上下文预算、后台命令结束等事件出现时，判断该现在告诉模型、稍后再说，还是不必说。默认是影子模式：判定只记录，事件按各自的规则投递，后台命令结束和上下文预算都是立刻告知。",
-				"en": "For events such as the context budget or a background job's end: tell the model now, later or not at all. In shadow by default: the verdict is only logged, and each event is delivered by its own rule: right away for a job's end and the context budget.",
+				"en": "For events such as the context budget or a background job's end: tell the model now, later or not at all. In shadow by default: the verdict is only logged, and each event is delivered by its own rule (right away for a job's end and the context budget).",
 				"zh-TW": "上下文預算、背景工作結束這類事件出現時，判斷該現在告訴模型、晚點再說，還是不必說。預設為影子模式：判定只記錄下來，事件各按自己的規則送達；背景工作結束和上下文預算都是立刻告知。",
 				"ja-JP": "コンテキスト予算やバックグラウンドジョブの終了などのイベントを、モデルにすぐ伝えるか、後で伝えるか、伝えないかを判定します。既定ではシャドーモードです。判定は記録するだけで、各イベントはそれぞれのルールで届けます。ジョブの終了とコンテキスト予算の場合は、すぐに届けます。",
 				"ko-KR": "컨텍스트 예산이나 백그라운드 작업 종료 같은 이벤트를 모델에게 지금 알릴지, 나중에 알릴지, 알리지 않을지 정합니다. 기본값은 섀도 모드입니다. 판정은 기록만 하고 각 이벤트는 자체 규칙에 따라 전달되는데, 작업 종료와 컨텍스트 예산은 바로 알립니다.",
@@ -3700,19 +3700,19 @@
 						"fa-IR": "تعداد تکه در هر درخواست"
 					},
 					"help": {
-						"zh": "托管判定器把多块放进一个请求，状态只计费一次；本地判定器始终一次一块。",
-						"en": "A hosted judge takes many chunks in one request, with the shared context billed once; the local judge takes one at a time.",
-						"zh-TW": "託管判定器把多塊放進一個請求，狀態只計費一次；本機判定器一律一次一塊。",
-						"ja-JP": "ホスト型の判定器は多くのチャンクを 1 回のリクエストで受け取り、状態の課金は 1 回だけです。ローカルの判定器は 1 つずつ処理します。",
-						"ko-KR": "호스팅 판정기는 여러 청크를 한 번의 요청으로 받으며 상태는 한 번만 과금됩니다. 로컬 판정기는 한 번에 하나씩 처리합니다.",
-						"de-DE": "Ein gehosteter Judge nimmt viele Abschnitte in einer Anfrage, der Zustand wird nur einmal berechnet; der lokale Judge nimmt einen nach dem anderen.",
-						"fr-FR": "Un juge hébergé reçoit de nombreux fragments en une seule requête, l’état n’étant facturé qu’une fois ; le juge local les traite un par un.",
-						"es-ES": "Un juez alojado recibe muchos fragmentos en una sola solicitud y el estado se factura una vez; el juez local los procesa de uno en uno.",
-						"pt-BR": "Um juiz hospedado recebe muitos blocos numa só solicitação, com o estado cobrado uma vez; o juiz local recebe um de cada vez.",
-						"ru-RU": "Облачный судья принимает много частей одним запросом, и состояние оплачивается один раз; локальный судья берёт по одной.",
-						"uk-UA": "Хмарний суддя приймає багато частин одним запитом, і стан оплачується один раз; локальний суддя бере по одній.",
-						"tr-TR": "Barındırılan bir hakem birçok parçayı tek istekte alır ve durum bir kez ücretlendirilir; yerel hakem her seferinde bir parça alır.",
-						"fa-IR": "داور میزبانی‌شده چندین تکه را در یک درخواست می‌گیرد و هزینهٔ وضعیت فقط یک بار حساب می‌شود؛ داور محلی هر بار یک تکه می‌گیرد."
+						"zh": "判定器把多块放进一个请求，状态只计费一次。",
+						"en": "The judge takes many chunks in one request, with the shared context billed once.",
+						"zh-TW": "判定器把多塊放進一個請求，狀態只計費一次。",
+						"ja-JP": "判定器は多くのチャンクを 1 回のリクエストで受け取り、状態の課金は 1 回だけです。",
+						"ko-KR": "판정기는 여러 청크를 한 번의 요청으로 받으며 상태는 한 번만 과금됩니다.",
+						"de-DE": "Der Judge nimmt viele Abschnitte in einer Anfrage, der Zustand wird nur einmal berechnet.",
+						"fr-FR": "Le juge reçoit de nombreux fragments en une seule requête, l’état n’étant facturé qu’une fois.",
+						"es-ES": "El juez recibe muchos fragmentos en una sola solicitud y el estado se factura una vez.",
+						"pt-BR": "O juiz recebe muitos blocos numa só solicitação, com o estado cobrado uma vez.",
+						"ru-RU": "Судья принимает много частей одним запросом, и состояние оплачивается один раз.",
+						"uk-UA": "Суддя приймає багато частин одним запитом, і стан оплачується один раз.",
+						"tr-TR": "Hakem birçok parçayı tek istekte alır ve durum bir kez ücretlendirilir.",
+						"fa-IR": "داور چندین تکه را در یک درخواست می‌گیرد و هزینهٔ وضعیت فقط یک بار حساب می‌شود."
 					}
 				},
 				{
@@ -7092,19 +7092,6 @@
 						"zh": "默认不催：它回应上一次催促时一个工具也没调（比如「工作已经做完了」），就是用停下来作了答，不再说它没做完。什么也没说就停下的一轮照样会被催。",
 						"en": "Off by default: when the agent answered the last nudge without calling a tool (\"The work is already complete\"), it answered by stopping, and isn't told again that it said it would do more. A run that stops without a message is still sent back."
 					}
-				},
-				{
-					"key": "localPromised",
-					"kind": "boolean",
-					"default": false,
-					"label": {
-						"zh": "让本地判定器判断「说了没做」",
-						"en": "Let the local judge decide whether work was left undone"
-					},
-					"help": {
-						"zh": "默认不让：这一问交给判定器列表里的下一个；只有本地判定器（Laya）时就不因此催。基准测试里 Laya 两次把做完了的「已完成，已创建 …」当成还要接着做。",
-						"en": "Off by default: this question goes to the next judge in your list, and with the local judge (Laya) alone no such nudge is sent. In a benchmark run Laya twice read a finished \"Done. Created …\" as a promise of more work."
-					}
 				}
 			]
 		},