@event4u/agent-config 11.0.0 → 12.1.0

package/dist/mcp/registry-manifest.json

@@ -1,15 +1,15 @@
 {
   "discovery": {
     "artefact_count": 607,
-    "scanner_version": "1eaf68b6e9c9"
+    "scanner_version": "de0a22b4ac4c"
   },
-  "generated_at": "2026-08-13",
+  "generated_at": "2026-08-16",
   "package": {
     "description": "Governed skills, rules and commands for AI coding tools (Claude Code, Cursor, Windsurf, Copilot) \u2014 every claim machine-checked, including \"zero runtime daemon\".",
     "homepage": "https://event4u-app.github.io/agent-config",
     "name": "@event4u/agent-config",
     "repository": "https://github.com/event4u-app/agent-config",
-    "version": "11.0.0"
+    "version": "12.1.0"
   },
   "registries": [
     {

package/dist/mcp/server.json

@@ -9,12 +9,12 @@
       "transport": {
         "type": "stdio"
       },
-      "version": "11.0.0"
+      "version": "12.1.0"
     }
   ],
   "repository": {
     "source": "github",
     "url": "https://github.com/event4u-app/agent-config"
   },
-  "version": "11.0.0"
+  "version": "12.1.0"
 }

package/dist/mcp/server.mjs

@@ -15262,7 +15262,7 @@ function lint_wing4_boundaries(text) {
   }
   return issues;
 }
-function lint_execution_metadata(execution, frontmatter) {
+function lint_execution_metadata(execution, frontmatter, body = "") {
   const issues = [];
   const execType = execution.type;
   if (execType !== void 0) {
@@ -15332,6 +15332,15 @@ function lint_execution_metadata(execution, frontmatter) {
       new Issue("error", "invalid_safety_mode", `Invalid safety_mode '${String(safetyMode)}'; must be 'strict'`)
     );
   }
+  if (safetyMode === "strict" && body !== "" && !STRICT_WRITE_GATE_PATTERNS.some((p) => p.test(body)) && !SKILL_REFERENCE_DEFERRAL_PATTERN.test(body)) {
+    issues.push(
+      new Issue(
+        "warning",
+        "strict_mode_missing_write_gate",
+        "execution.safety_mode is 'strict' but the body names no precondition on the write path and defers no write-path steps to the skill's references/ \u2014 state the gate inline (propose-then-confirm, --dry-run) or defer it, per skill-writing \xA7 Action-reference split"
+      )
+    );
+  }
   const timeout = execution.timeout_seconds;
   if (timeout !== void 0) {
     if (typeof timeout !== "number" || !Number.isInteger(timeout) || timeout <= 0) {
@@ -15506,9 +15515,18 @@ function lint_skill(p, text, absPath = null) {
         issues.push(new Issue("warning", "superseded_skill", msg));
       }
     }
+    if (COMPATIBILITY_KEY_PATTERN.test(frontmatter) && !HARNESS_COMPAT_KEY_PATTERN.test(frontmatter)) {
+      issues.push(
+        new Issue(
+          "warning",
+          "deprecated_compatibility_field",
+          "Frontmatter declares the deprecated free-text 'compatibility:' without the structured 'harness_compat:' that supersedes it \u2014 add harness_compat (see skill.schema.json and docs/MIGRATION.md \xA7 Scheduled deprecations); compatibility stays accepted until removal"
+        )
+      );
+    }
     const execution = parseExecutionBlock(frontmatter);
     if (execution !== null) {
-      issues.push(...lint_execution_metadata(execution, frontmatter));
+      issues.push(...lint_execution_metadata(execution, frontmatter, text.replace(FRONTMATTER_PATTERN, "")));
     }
     const tierMatch = TIER_PATTERN.exec(frontmatter);
     if (tierMatch && tierMatch[1] === "senior") {
@@ -18030,7 +18048,7 @@ function _isCliEntry7() {
     return false;
   }
 }
-var _HERE4, REQUIRED_PERSONA_SECTIONS_CORE, REQUIRED_PERSONA_SECTIONS_SPECIALIST, VALID_PERSONA_TIERS, PERSONA_LINE_BUDGETS, REQUIRED_USERTYPE_SECTIONS, USERTYPE_LINE_BUDGET, VALID_PERSONA_WINGS, PERSONA_LINE_BUDGETS_BY_WING, REQUIRED_SKILL_SECTIONS, SECTION_ALIASES, RECOMMENDED_SKILL_SECTIONS, CONDITIONAL_SKILL_SECTIONS, RULE_BAD_SIGNS, FRUGALITY_WRITER_SKILLS, FRUGALITY_CHARTER_RELPATH, FRUGALITY_CHARTER_INDEX_RULES, VAGUE_VALIDATION_PATTERNS, TRIGGER_WARNING_PATTERNS, ORDERED_STEP_PATTERN, SECTION_PATTERN, FRONTMATTER_PATTERN, DESCRIPTION_PATTERN, STATUS_PATTERN, REPLACED_BY_PATTERN, TIER_PATTERN, TYPE_PATTERN, SOURCE_PATTERN, SENIOR_RELATED_SKILLS_PATTERN, SENIOR_RELATED_WHEN_PATTERN, SENIOR_RELATED_WHEN_NOT_PATTERN, SENIOR_PROACTIVE_PATTERN, SENIOR_OUTPUT_PATTERN, H1_PATTERN, DOUBLE_BLANK_PATTERN, VALID_RULE_TYPES, VALID_RULE_SOURCES, ROUTER_ALLOWED_TRIGGER_KEYS, KERNEL_RULE_IDS2, VALID_EXECUTION_TYPES, VALID_EXECUTION_HANDLERS, VALID_EXECUTION_SAFETY_MODES, EXTERNAL_EXECUTION_HANDLERS, RUNTIME_REQUIRES_BLOCK_PATTERN, VALID_EXECUTION_FIELDS, WING3_SPINE_SLOTS, CONTEXT_SPINE_INLINE_PATTERN, WING3_SAAS_URL_PATTERN, WING3_VENDOR_BLACKLIST, WING3_STACK_LOCKED_PATTERN, WING3_CHANNEL_TACTIC_PATTERN, WING4_SPINE_SLOTS, WING4_SAAS_URL_PATTERN, WING4_VENDOR_BLACKLIST, WING4_STAGE_AGNOSTIC_PATTERN, Issue, LintResult, _ROLE_CONTRACT_CANDIDATES, _ROLE_CONTRACT_SLUGS_CACHE, _ROLE_CONTRACT_REF_PATTERN, PROCEDURE_HEADING_PATTERN, COMMAND_FRONTMATTER_DELEGATION_KEYS, MD_LINK_PATTERN_G, NAME_PATTERN, DISABLE_MODEL_PATTERN, _INSPECT_VERB_PATTERN, last_changed_scope_reason, last_changed_base_diff_ok, _INTERACTION_NAME_PATTERNS, _INTERACTION_CONTENT_KEYWORDS, _EXEC_FILE_SIGNALS, _EXEC_CONTENT_SIGNALS, _TASK_TYPE_SIGNALS, _VERIFICATION_TOOLS, _FRUGALITY_STANDARDS_PATTERN, _FRUGALITY_CHARTER_LINK_PATTERN, _MD_LINK_PATTERN, _MALICE_CRED_EXFIL, _MALICE_REMOTE_EXEC, _MALICE_FORCE_PUSH, _MALICE_CHMOD_SECRETS, _MALICE_SHELL_INJECT, _MALICE_PATTERNS, _NAG_UPDATE_CHECK, _NAG_STAY_CURRENT, _NAG_SELF_PROMO, _NAG_BEST_SKILL, _NAG_MUST_USE, _NAG_ALWAYS_USE, _NAG_PATTERNS, _OUTPUT_SCHEMA_KEY_PATTERN, _SCHEMA_ARTEFACT_TYPES, ArgError, isCliEntry2;
+var _HERE4, REQUIRED_PERSONA_SECTIONS_CORE, REQUIRED_PERSONA_SECTIONS_SPECIALIST, VALID_PERSONA_TIERS, PERSONA_LINE_BUDGETS, REQUIRED_USERTYPE_SECTIONS, USERTYPE_LINE_BUDGET, VALID_PERSONA_WINGS, PERSONA_LINE_BUDGETS_BY_WING, REQUIRED_SKILL_SECTIONS, SECTION_ALIASES, RECOMMENDED_SKILL_SECTIONS, CONDITIONAL_SKILL_SECTIONS, RULE_BAD_SIGNS, FRUGALITY_WRITER_SKILLS, FRUGALITY_CHARTER_RELPATH, FRUGALITY_CHARTER_INDEX_RULES, VAGUE_VALIDATION_PATTERNS, TRIGGER_WARNING_PATTERNS, ORDERED_STEP_PATTERN, SECTION_PATTERN, FRONTMATTER_PATTERN, DESCRIPTION_PATTERN, STATUS_PATTERN, REPLACED_BY_PATTERN, TIER_PATTERN, TYPE_PATTERN, SOURCE_PATTERN, SENIOR_RELATED_SKILLS_PATTERN, SENIOR_RELATED_WHEN_PATTERN, SENIOR_RELATED_WHEN_NOT_PATTERN, SENIOR_PROACTIVE_PATTERN, SENIOR_OUTPUT_PATTERN, H1_PATTERN, DOUBLE_BLANK_PATTERN, VALID_RULE_TYPES, VALID_RULE_SOURCES, ROUTER_ALLOWED_TRIGGER_KEYS, KERNEL_RULE_IDS2, VALID_EXECUTION_TYPES, VALID_EXECUTION_HANDLERS, VALID_EXECUTION_SAFETY_MODES, EXTERNAL_EXECUTION_HANDLERS, RUNTIME_REQUIRES_BLOCK_PATTERN, COMPATIBILITY_KEY_PATTERN, HARNESS_COMPAT_KEY_PATTERN, STRICT_WRITE_GATE_PATTERNS, SKILL_REFERENCE_DEFERRAL_PATTERN, VALID_EXECUTION_FIELDS, WING3_SPINE_SLOTS, CONTEXT_SPINE_INLINE_PATTERN, WING3_SAAS_URL_PATTERN, WING3_VENDOR_BLACKLIST, WING3_STACK_LOCKED_PATTERN, WING3_CHANNEL_TACTIC_PATTERN, WING4_SPINE_SLOTS, WING4_SAAS_URL_PATTERN, WING4_VENDOR_BLACKLIST, WING4_STAGE_AGNOSTIC_PATTERN, Issue, LintResult, _ROLE_CONTRACT_CANDIDATES, _ROLE_CONTRACT_SLUGS_CACHE, _ROLE_CONTRACT_REF_PATTERN, PROCEDURE_HEADING_PATTERN, COMMAND_FRONTMATTER_DELEGATION_KEYS, MD_LINK_PATTERN_G, NAME_PATTERN, DISABLE_MODEL_PATTERN, _INSPECT_VERB_PATTERN, last_changed_scope_reason, last_changed_base_diff_ok, _INTERACTION_NAME_PATTERNS, _INTERACTION_CONTENT_KEYWORDS, _EXEC_FILE_SIGNALS, _EXEC_CONTENT_SIGNALS, _TASK_TYPE_SIGNALS, _VERIFICATION_TOOLS, _FRUGALITY_STANDARDS_PATTERN, _FRUGALITY_CHARTER_LINK_PATTERN, _MD_LINK_PATTERN, _MALICE_CRED_EXFIL, _MALICE_REMOTE_EXEC, _MALICE_FORCE_PUSH, _MALICE_CHMOD_SECRETS, _MALICE_SHELL_INJECT, _MALICE_PATTERNS, _NAG_UPDATE_CHECK, _NAG_STAY_CURRENT, _NAG_SELF_PROMO, _NAG_BEST_SKILL, _NAG_MUST_USE, _NAG_ALWAYS_USE, _NAG_PATTERNS, _OUTPUT_SCHEMA_KEY_PATTERN, _SCHEMA_ARTEFACT_TYPES, ArgError, isCliEntry2;
 var init_skill_linter = __esm({
   "src/scripts/skill_linter.ts"() {
     "use strict";
@@ -18171,6 +18189,17 @@ var init_skill_linter = __esm({
     VALID_EXECUTION_SAFETY_MODES = /* @__PURE__ */ new Set(["strict"]);
     EXTERNAL_EXECUTION_HANDLERS = /* @__PURE__ */ new Set(["shell", "php", "node"]);
     RUNTIME_REQUIRES_BLOCK_PATTERN = /^runtime_requires:[ \t]*(\{.*)?$/m;
+    COMPATIBILITY_KEY_PATTERN = /^compatibility:[ \t]*\S/m;
+    HARNESS_COMPAT_KEY_PATTERN = /^harness_compat:[ \t]*\S/m;
+    STRICT_WRITE_GATE_PATTERNS = [
+      /--dry-run/i,
+      /\bnever silent[- ]run/i,
+      /\bpropose,? never\b/i,
+      /\bconfirms? before\b/i,
+      /\bexplicit (?:user )?confirmation\b/i,
+      /\basks? (?:the user )?(?:first|before)\b/i
+    ];
+    SKILL_REFERENCE_DEFERRAL_PATTERN = /\]\(\.{0,2}\/?references\//;
     VALID_EXECUTION_FIELDS = /* @__PURE__ */ new Set([
       "type",
       "handler",
@@ -18880,7 +18909,10 @@ function parse_blockers(raw_text) {
         owner: _blockerField(body, "Owner") ?? "user",
         blocks: _blockerField(body, "Blocks") ?? "(unspecified)",
         todo: _blockerTodo(body),
-        resolvedWhen: _blockerField(body, "Resolved when") ?? "(unspecified)"
+        resolvedWhen: _blockerField(body, "Resolved when") ?? "(unspecified)",
+        recommendation: _blockerField(body, "Recommendation") ?? "",
+        ifNothing: _blockerField(body, "If you do nothing") ?? "",
+        question: _blockerField(body, "Question") ?? ""
       });
     }
   }
@@ -18906,7 +18938,10 @@ function parse_blockers(raw_text) {
       owner: "user",
       blocks: "entire roadmap",
       todo: [parts.join(" ")],
-      resolvedWhen: "condition described above clears"
+      resolvedWhen: "condition described above clears",
+      recommendation: "",
+      ifNothing: "",
+      question: ""
     });
   }
   return blockers;
@@ -19178,6 +19213,12 @@ function render(roadmaps, bundles = null) {
       lines.push("**Blockers**\n");
       for (const b of openBlockers) {
         lines.push(`- **${b.id}** (owner: ${b.owner}) \u2014 blocks ${b.blocks}`);
+        if (b.recommendation) {
+          lines.push(`  - **Recommendation:** ${b.recommendation}`);
+        }
+        if (b.ifNothing) {
+          lines.push(`  - **If you do nothing:** ${b.ifNothing}`);
+        }
         lines.push("  - **What to do:**");
         for (const step of b.todo) {
           lines.push(`    ${step}`);
@@ -19506,7 +19547,7 @@ var init_update_roadmap_progress = __esm({
     BLOCKER_HEADING_RE = /^###[ \t]+blocker:[ \t]*(.+?)[ \t]*$/gim;
     NEXT_H2_RE = /^##[ \t]+\S/m;
     LEGACY_BLOCKED_UNTIL_RE = /^>[ \t]*Blocked until:?[ \t]*(.+)$/im;
-    BLOCKER_FIELD_RE = /^-[ \t]*\*\*(Status|Owner|Blocks|Resolved when|What to do):\*\*/i;
+    BLOCKER_FIELD_RE = /^-[ \t]*\*\*(Status|Owner|Blocks|Resolved when|What to do|Recommendation|If you do nothing|Question):\*\*/i;
     ArgparseExit = class extends Error {
       code;
       constructor(code) {
@@ -25763,6 +25804,7 @@ __export(clients_exports, {
   AnthropicCliClient: () => AnthropicCliClient,
   AnthropicClient: () => AnthropicClient,
   CLI_CALLS_FILENAME: () => CLI_CALLS_FILENAME,
+  CODEX_MEASURED_UNSERVABLE: () => CODEX_MEASURED_UNSERVABLE,
   CliClient: () => CliClient,
   CliClientError: () => CliClientError,
   CouncilResponse: () => CouncilResponse,
@@ -25784,6 +25826,7 @@ __export(clients_exports, {
   KeyGateError: () => KeyGateError,
   MANUAL_END_MARKER: () => MANUAL_END_MARKER,
   ManualClient: () => ManualClient,
+  OPENAI_CLI_VENDOR_DEFAULT: () => OPENAI_CLI_VENDOR_DEFAULT,
   OPENAI_KEY_FILENAME: () => OPENAI_KEY_FILENAME,
   OPENAI_KEY_PATH: () => OPENAI_KEY_PATH,
   OpenAICliClient: () => OpenAICliClient,
@@ -26406,7 +26449,7 @@ function _defaultStdin() {
     }
   };
 }
-var _modelCeilingMemo, ANTHROPIC_KEY_FILENAME, OPENAI_KEY_FILENAME, ANTHROPIC_KEY_PATH, OPENAI_KEY_PATH, DEFAULT_ANTHROPIC_MODEL, DEFAULT_OPENAI_MODEL, DEFAULT_GEMINI_MODEL, DEFAULT_XAI_MODEL, DEFAULT_PERPLEXITY_MODEL, DEFAULT_OPENAI_CLI_MODEL, DEFAULT_ANTHROPIC_CLI_MODEL, DEFAULT_GEMINI_CLI_MODEL, XAI_BASE_URL, PERPLEXITY_BASE_URL, DEFAULT_MAX_TOKENS, UNLIMITED_TOKENS_FALLBACK, _REASONING_PREFIXES, KeyGateError, CliClientError, DEFAULT_PROMPT_CACHE_TTL, CouncilResponse, _monotonicSource, ExternalAIClient, AnthropicClient, OpenAIClient, GeminiClient, _OpenAICompatibleClient, XAIClient, PerplexityClient, CLI_CALLS_FILENAME, DEFAULT_CLI_TIMEOUT_SECONDS, SubprocessError, CliClient, AnthropicCliClient, OpenAICliClient, GeminiCliClient, XAICliClient, PerplexityCliClient, MANUAL_END_MARKER, ManualClient, ValueError3, JSONDecodeError;
+var _modelCeilingMemo, ANTHROPIC_KEY_FILENAME, OPENAI_KEY_FILENAME, ANTHROPIC_KEY_PATH, OPENAI_KEY_PATH, DEFAULT_ANTHROPIC_MODEL, DEFAULT_OPENAI_MODEL, DEFAULT_GEMINI_MODEL, DEFAULT_XAI_MODEL, DEFAULT_PERPLEXITY_MODEL, OPENAI_CLI_VENDOR_DEFAULT, CODEX_MEASURED_UNSERVABLE, DEFAULT_OPENAI_CLI_MODEL, DEFAULT_ANTHROPIC_CLI_MODEL, DEFAULT_GEMINI_CLI_MODEL, XAI_BASE_URL, PERPLEXITY_BASE_URL, DEFAULT_MAX_TOKENS, UNLIMITED_TOKENS_FALLBACK, _REASONING_PREFIXES, KeyGateError, CliClientError, DEFAULT_PROMPT_CACHE_TTL, CouncilResponse, _monotonicSource, ExternalAIClient, AnthropicClient, OpenAIClient, GeminiClient, _OpenAICompatibleClient, XAIClient, PerplexityClient, CLI_CALLS_FILENAME, DEFAULT_CLI_TIMEOUT_SECONDS, SubprocessError, CliClient, AnthropicCliClient, OpenAICliClient, GeminiCliClient, XAICliClient, PerplexityCliClient, MANUAL_END_MARKER, ManualClient, ValueError3, JSONDecodeError;
 var init_clients = __esm({
   "src/scripts/ai_council/clients.ts"() {
     "use strict";
@@ -26425,7 +26468,13 @@ var init_clients = __esm({
     DEFAULT_GEMINI_MODEL = "gemini-2.5-pro";
     DEFAULT_XAI_MODEL = "grok-4";
     DEFAULT_PERPLEXITY_MODEL = "sonar-pro";
-    DEFAULT_OPENAI_CLI_MODEL = "gpt-5";
+    OPENAI_CLI_VENDOR_DEFAULT = "codex-default";
+    CODEX_MEASURED_UNSERVABLE = /* @__PURE__ */ new Map([
+      ["gpt-4o", "2026-08-15"],
+      ["gpt-5", "2026-08-15"],
+      ["gpt-5.1-codex", "2026-08-15"]
+    ]);
+    DEFAULT_OPENAI_CLI_MODEL = OPENAI_CLI_VENDOR_DEFAULT;
     DEFAULT_ANTHROPIC_CLI_MODEL = "claude-sonnet-4-5";
     DEFAULT_GEMINI_CLI_MODEL = "gemini-2.5-pro";
     XAI_BASE_URL = "https://api.x.ai/v1";
@@ -26648,7 +26697,7 @@ var init_clients = __esm({
       _client;
       constructor(opts = {}) {
         super();
-        this.model = opts.model ?? DEFAULT_OPENAI_MODEL;
+        this.model = opts.model === void 0 || opts.model === OPENAI_CLI_VENDOR_DEFAULT ? DEFAULT_OPENAI_MODEL : opts.model;
         if (opts.client !== void 0 && opts.client !== null) {
           this._client = opts.client;
           return;
@@ -26968,6 +27017,19 @@ ${user_prompt}`;
         } catch {
         }
       }
+      /**
+       * Refuse a call this transport cannot serve, BEFORE spawning.
+       *
+       * `null` means "nothing known to be wrong" — deliberately not "verified
+       * servable". No vendor CLI here publishes the set of models its
+       * subscription tier accepts, so an allow-list would be invented and would
+       * reject valid pins the day the vendor adds one. What CAN be stated is the
+       * complement: models this estate has MEASURED being rejected. Subclasses
+       * override; the base transport knows of none.
+       */
+      _preflight_transport() {
+        return null;
+      }
       /** Return text to send on stdin, or `null` to inherit caller's stdin. */
       _stdin_payload(system_prompt, user_prompt) {
         void system_prompt;
@@ -27094,6 +27156,17 @@ ${user_prompt}`;
             });
           }
         }
+        const preflight = this._preflight_transport();
+        if (preflight !== null) {
+          return new CouncilResponse({
+            provider: this.name,
+            model: this.model,
+            text: "",
+            latency_ms: _elapsedMs(t0),
+            error: preflight.code,
+            metadata: { cli: true, transport: this.transport, detail: preflight.detail }
+          });
+        }
         const cmd = this._build_command(system_prompt, user_prompt, max_tokens);
         const stdinPayload = this._stdin_payload(system_prompt, user_prompt);
         let proc;
@@ -27325,7 +27398,23 @@ ${user_prompt}`;
         void system_prompt;
         void user_prompt;
         void max_tokens;
-        return [this.binary, "exec", "--json", "--model", this.model, "-"];
+        const modelArgs = this.model === OPENAI_CLI_VENDOR_DEFAULT ? [] : ["--model", this.model];
+        return [this.binary, "exec", "--json", "--skip-git-repo-check", ...modelArgs, "-"];
+      }
+      /**
+       * Refuse a pin this estate has measured the transport rejecting.
+       *
+       * The remedy is named because it is not guessable: removing the `model:`
+       * line is the fix, and "remove a setting" is the last thing an operator
+       * tries when a member is silent.
+       */
+      _preflight_transport() {
+        const measuredOn = CODEX_MEASURED_UNSERVABLE.get(this.model);
+        if (measuredOn === void 0) return null;
+        return {
+          code: "model_unsupported_on_transport",
+          detail: `openai member pins model \`${this.model}\`, which the codex CLI (subscription transport) refused when measured on ${measuredOn}: "The '${this.model}' model is not supported when using Codex with a ChatGPT account." The CLI publishes no list of models it DOES accept, so there is no supported set to offer here \u2014 the one configuration measured to work is no pin at all. Fix: remove the \`model:\` line from the openai member (or set it to \`codex-default\`) to use the CLI's own default. A pinned model is only reachable on the API transport (\`api_key_ref:\` without \`mode: cli\`).`
+        };
       }
       /**
        * System and user prompt travel as ONE stdin payload, because `codex exec`
@@ -27347,6 +27436,7 @@ ${user_prompt}`;
         let text = "";
         let input_tokens = 0;
         let output_tokens = 0;
+        let failure = null;
         const meta = {};
         for (let line of _splitlines6(stdout)) {
           line = line.trim();
@@ -27389,6 +27479,12 @@ ${user_prompt}`;
                   text = chunks.join("\n").trim();
                 }
               }
+              if (_dictGet(itemObj, "type", void 0) === "agent_message") {
+                const flat = _pyStr3(_dictGet(itemObj, "text", "")).trim();
+                if (flat) {
+                  text = flat;
+                }
+              }
               if (_pyTruthy2(_dictGet(itemObj, "id", void 0))) {
                 meta["item_id"] = _pyStr3(itemObj["id"]);
               }
@@ -27407,8 +27503,36 @@ ${user_prompt}`;
             if (_pyTruthy2(_dictGet(ev, "session_id", void 0))) {
               meta["session_id"] = _pyStr3(ev["session_id"]);
             }
+          } else if (event_type === "turn.failed") {
+            let err = _dictGet(ev, "error", null);
+            if (!_pyTruthy2(err)) err = {};
+            if (_isPlainObject7(err)) {
+              const raw = _pyStr3(_dictGet(err, "message", ""));
+              if (raw) failure = raw;
+            }
           }
         }
+        if (failure !== null && !text) {
+          const unsupported = /not supported when using Codex/i.test(failure);
+          return new CouncilResponse({
+            provider: this.name,
+            model: this.model,
+            text: "",
+            input_tokens,
+            output_tokens,
+            error: unsupported ? "model_unsupported_on_transport" : "turn_failed",
+            metadata: {
+              ...meta,
+              // The vendor's own sentence, kept because it names the
+              // model and the account type — the two facts an operator
+              // needs and neither of which the error code carries.
+              detail: failure.slice(0, 400),
+              ...unsupported ? {
+                hint: "the codex subscription transport serves no explicitly pinned model measured so far \u2014 remove the `model:` line from the openai member to use the CLI default"
+              } : {}
+            }
+          });
+        }
         return new CouncilResponse({
           provider: this.name,
           model: this.model,
@@ -28799,7 +28923,7 @@ function _build_member(name, cfg, default_mode = "auto", ignored = []) {
       }
       entries.push(entry);
     }
-    if (member_enabled && model && !entries.includes(model)) {
+    if (member_enabled && model && model !== OPENAI_CLI_VENDOR_DEFAULT && !entries.includes(model)) {
       throw new CouncilConfigError(
         `members.${name}.model_ladder must include the active \`model\` (${_pyReprStr(model)}); got ${_pyRepr6(entries)}.`
       );
@@ -29037,6 +29161,7 @@ var init_config = __esm({
     "use strict";
     import_yaml5 = __toESM(require_dist(), 1);
     init_user_global_paths();
+    init_clients();
     init_quorum();
     _VALID_PROVIDERS = /* @__PURE__ */ new Set([
       "anthropic",
@@ -29687,6 +29812,9 @@ function classifyCliFailure(raw) {
   if (s === "cli_unsupported" || s === "unsupported" || s === "parse_failed") {
     return "cli_unsupported";
   }
+  if (s.startsWith("model_unservable") || s.includes("is not supported when using codex")) {
+    return "model_unservable";
+  }
   if (s === "timeout") return "timeout";
   if (s === "cli_quota_exhausted" || s === "quota_exhausted") return "quota_exhausted";
   if (/^exit_5\d\d$/.test(s) || s === "server_error" || s === "os") return "server_error";
@@ -35377,6 +35505,13 @@ function handleStart(root, payload, nowIso, sessionId) {
     event: "subagent_start",
     ts: nowIso,
     ref,
+    // Phase 1 Step 4 correction (b): without this the dispatch denominator
+    // is not per-session. Three sessions share one ledger file, so a rate
+    // computed over the file aggregates strangers — the measured window
+    // held 7 starts against 25 stops, one of them an agent type this
+    // session never dispatched. The open record already carried it; the
+    // appended line did not, and the line is what a rate is computed from.
+    session_id: sessionId,
     agent_type: rec.agent_type,
     parent_ref: parentRef,
     depth,
@@ -35384,7 +35519,7 @@ function handleStart(root, payload, nowIso, sessionId) {
     concurrent_open: countOpen(root)
   });
 }
-function handleStop(root, payload, nowIso) {
+function handleStop(root, payload, nowIso, sessionId) {
   const agentId = str2(payload, "agent_id", "agentId");
   if (agentId === null) {
     appendUnidentified(root, "subagent_stop", nowIso, payload);
@@ -35403,6 +35538,11 @@ function handleStop(root, payload, nowIso) {
     event: "subagent_stop",
     ts: nowIso,
     ref,
+    // The session this stop was OBSERVED in, read from the same envelope
+    // position as the start's — never back-filled from `rec`, which would
+    // relabel a cross-session stop as belonging to the dispatching session
+    // and hide exactly the mismatch this field exists to expose.
+    session_id: sessionId,
     agent_type: rec?.agent_type ?? str2(payload, "agent_type", "agentType", "subagent_type", "subagentType"),
     depth: rec?.depth ?? null,
     depth_basis: rec?.depth_basis ?? null,
@@ -35428,7 +35568,7 @@ function processEnvelope(envelope, consumerRoot) {
     const sessionId = str2(payload, "session_id", "sessionId") ?? str2(envelope, "session_id", "sessionId");
     reapStaleOpenRecords(consumerRoot, nowIso);
     if (event === "subagent_start") handleStart(consumerRoot, payload, nowIso, sessionId);
-    else handleStop(consumerRoot, payload, nowIso);
+    else handleStop(consumerRoot, payload, nowIso, sessionId);
   } catch {
     return EXIT_ALLOW4;
   }
@@ -44312,7 +44452,8 @@ ${body}`);
 function _render_quorum_line(q) {
   const verdict = q.status === "concluded" ? "concluded" : "INCONCLUSIVE \u2014 release gate holds";
   const solo = isSoloConcluded(q) ? " \xB7 **solo** \u2014 one voice concluded this pass" : "";
-  return `**Quorum:** ${q.present}/${q.total} present, needed ${q.threshold} \u2014 ${verdict}.${solo}`;
+  const degraded = q.present < q.total ? `  \u26A0\uFE0F  DEGRADED \u2014 ${String(q.total - q.present)} member(s) did not answer; this is not convergence.` : "";
+  return `**Quorum:** ${q.present}/${q.total} present, needed ${q.threshold} \u2014 ${verdict}.${solo}${degraded}`;
 }
 function _render_absent_members(absent) {
   const lines = ["### Absent Members", ""];
@@ -45673,7 +45814,9 @@ function resolve_low_impact(question_text, plan, clients, price_table = null, no
       const pinned = model_downgrade.model_tier_override?.[member.name];
       const cheapest = member.model_ladder.length > 0 ? member.model_ladder[0] : null;
       const target = pinned && pinned.length > 0 ? pinned : cheapest;
-      if (target && target !== client.model) {
+      const unpinned = client.model === OPENAI_CLI_VENDOR_DEFAULT;
+      const overrideWins = pinned !== void 0 && pinned.length > 0;
+      if (target && target !== client.model && (!unpinned || overrideWins)) {
         client.model = target;
       }
     }
@@ -45979,6 +46122,7 @@ var init_low_impact = __esm({
   "src/scripts/ai_council/low_impact.ts"() {
     "use strict";
     init_value_ladder();
+    init_clients();
     init_orchestrator();
     _INPUT_RATIO = 0.6;
     FastPathPlan = class {