@event4u/agent-config 14.2.0 → 14.4.0

package/dist/mcp/server.mjs

@@ -12987,22 +12987,78 @@ var init_memory_lookup = __esm({
   }
 });
 
-// src/scripts/hooks/hook_stdin.ts
+// src/scripts/_lib/stdin.ts
 import * as fs13 from "node:fs";
+function _sleepSync(ms) {
+  Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, ms);
+}
+function readStdinText(fd = 0, opts = {}) {
+  const chunks = [];
+  const buf = Buffer.alloc(CHUNK);
+  let retries = 0;
+  let got_any = false;
+  const first_byte_deadline = opts.firstByteTimeoutMs === void 0 ? null : Date.now() + opts.firstByteTimeoutMs;
+  for (; ; ) {
+    let read;
+    try {
+      read = fs13.readSync(fd, buf, 0, CHUNK, null);
+      retries = 0;
+    } catch (exc) {
+      const code = exc.code;
+      if (code === "EAGAIN") {
+        if (!got_any && first_byte_deadline !== null && Date.now() >= first_byte_deadline) {
+          return "";
+        }
+        retries += 1;
+        if (retries > MAX_RETRIES) {
+          throw new Error(
+            `readStdinText: stdin stayed unreadable across ${String(MAX_RETRIES)} retries (~${String(MAX_RETRIES * RETRY_SLEEP_MS / 1e3)}s). Refusing to report an empty read as empty input.`
+          );
+        }
+        _sleepSync(RETRY_SLEEP_MS);
+        continue;
+      }
+      if (code === "EOF") break;
+      throw exc;
+    }
+    if (read === 0) break;
+    got_any = true;
+    chunks.push(Buffer.from(buf.subarray(0, read)));
+  }
+  return Buffer.concat(chunks).toString("utf-8");
+}
+var CHUNK, RETRY_SLEEP_MS, MAX_RETRIES;
+var init_stdin = __esm({
+  "src/scripts/_lib/stdin.ts"() {
+    "use strict";
+    CHUNK = 64 * 1024;
+    RETRY_SLEEP_MS = 5;
+    MAX_RETRIES = 2e3;
+  }
+});
+
+// src/scripts/hooks/hook_stdin.ts
+import * as tty from "node:tty";
+function readFd0ToEnd() {
+  void process.stdin;
+  return readStdinText(0, { firstByteTimeoutMs: HOOK_FIRST_BYTE_TIMEOUT_MS });
+}
 function readHookStdin() {
   if (_override !== null) return _override;
   try {
-    if (process.stdin.isTTY) return "";
-    return fs13.readFileSync(0, "utf-8");
+    if (tty.isatty(0)) return "";
+    return readFd0ToEnd();
   } catch {
     return "";
   }
 }
-var _override;
+var _override, HOOK_FIRST_BYTE_TIMEOUT_MS;
 var init_hook_stdin = __esm({
   "src/scripts/hooks/hook_stdin.ts"() {
     "use strict";
+    init_stdin();
     _override = null;
+    HOOK_FIRST_BYTE_TIMEOUT_MS = 25;
   }
 });
 
@@ -20475,7 +20531,7 @@ import {
   fsyncSync,
   mkdirSync as mkdirSync8,
   openSync,
-  readFileSync as readFileSync22,
+  readFileSync as readFileSync21,
   renameSync as renameSync4,
   unlinkSync as unlinkSync2,
   writeSync
@@ -20512,7 +20568,7 @@ function atomicWriteFile(target, data, options = {}) {
 function atomicAppendLine(target, line) {
   let existing = "";
   try {
-    existing = readFileSync22(target, "utf8");
+    existing = readFileSync21(target, "utf8");
   } catch {
     existing = "";
   }
@@ -26081,7 +26137,13 @@ var init_events_log = __esm({
       "proceed",
       "skip_necessity",
       "block_quota",
-      "quorum_result"
+      "quorum_result",
+      // A seat lost its cli transport mid-pass and was retried on the metered
+      // api rung. Without this action, attendance analysis cannot tell a seat
+      // SAVED by the fallback from a seat that was natively api all along — the
+      // two are indistinguishable in the response set, and only one of them
+      // costs money that the operator did not plan.
+      "transport_fallback"
     ]);
     _KILL_SWITCH_ENV = "AGENT_CONFIG_NO_EVENTS_LOG";
     _HERE15 = fileURLToPath28(import.meta.url);
@@ -28101,6 +28163,46 @@ Type your follow-up question, end with a line containing only: ${this._end_marke
   }
 });
 
+// src/scripts/ai_council/fallback_config.ts
+function buildFallback(raw, d) {
+  if (!d.isDict(raw)) return { api_on_quota: false };
+  const v = raw["api_on_quota"];
+  if (v === void 0) return { api_on_quota: false };
+  if (!d.isBool(v)) {
+    throw d.error(
+      `\`fallback.api_on_quota\`=${d.repr(v)} must be a boolean (got ${d.typeName(v)}).`
+    );
+  }
+  return { api_on_quota: v };
+}
+function buildSecondModel(entry, cls, locked, d) {
+  if (!("second_model" in entry)) return null;
+  if (locked.has(cls)) {
+    throw d.error(
+      `decision_resolution.classes.${cls}.second_model=${d.repr(entry["second_model"])}: a second-model rung is not configurable for high-impact / user-required decisions \u2014 those classes are LOCKED to \`user\` (Iron Law) and never resolve on a model of any kind.`
+    );
+  }
+  const raw = entry["second_model"];
+  if (raw === null) return null;
+  if (!(d.isStr(raw) && SECOND_MODEL_PROVIDERS.has(raw))) {
+    throw d.error(
+      `decision_resolution.classes.${cls}.second_model=${d.repr(raw)} not in ${d.sortedListRepr(SECOND_MODEL_PROVIDERS)} \u2014 the rung must be a provider whose local CLI runs under subscription auth, so a resolution can never become metered USD spend.`
+    );
+  }
+  return raw;
+}
+var SECOND_MODEL_PROVIDERS;
+var init_fallback_config = __esm({
+  "src/scripts/ai_council/fallback_config.ts"() {
+    "use strict";
+    SECOND_MODEL_PROVIDERS = /* @__PURE__ */ new Set([
+      "anthropic",
+      "openai",
+      "gemini"
+    ]);
+  }
+});
+
 // src/scripts/ai_council/config.ts
 var config_exports = {};
 __export(config_exports, {
@@ -28403,6 +28505,7 @@ function _build_config(raw, source_path) {
   const quorum_min_present = _build_quorum_min_present(
     _get(raw, "quorum_min_present", SOLO_FLOOR_MIN_PRESENT)
   );
+  const fallback = buildFallback(_get(raw, "fallback", {}), _FALLBACK_DEPS);
   const necessity_classifier = _build_necessity_classifier(
     _asDict(_getOr(raw, "necessity_classifier", {}))
   );
@@ -28452,6 +28555,7 @@ function _build_config(raw, source_path) {
     cli_call_budget,
     quorum,
     quorum_min_present,
+    fallback,
     necessity_classifier,
     model_downgrade,
     debate,
@@ -28718,7 +28822,13 @@ function _build_decision_resolution(d) {
         `decision_resolution.classes.${cls}.confidence_threshold must be in [0.0, 1.0] (got ${_pyRepr6(_f(threshold))}).`
       );
     }
-    classes.set(cls, { mode, confidence_threshold: threshold });
+    const second_model = buildSecondModel(
+      entry_raw,
+      cls,
+      _LOCKED_IMPACT_CLASSES,
+      _FALLBACK_DEPS
+    );
+    classes.set(cls, { mode, confidence_threshold: threshold, second_model });
   }
   const fast_path_raw = _getOr(d, "fast_path", {});
   if (!_isDict(fast_path_raw)) {
@@ -29377,7 +29487,7 @@ function _pyTruthy3(value) {
   }
   return Object.keys(value).length > 0;
 }
-var import_yaml5, _VALID_PROVIDERS, _RAW_KEY_PREFIXES, CouncilConfigError, _Float, _VALID_NECESSITY_MODES, _VALID_DISCLOSURE_MODES, _VALID_CHAIRMAN_MODES, COUNCIL_CONFIG_RELNAME, COUNCIL_CONFIG_USER_GLOBAL_REL, COUNCIL_CONFIG_ENV, _VALID_CRITIC_PROTOCOLS, _VALID_RESOLUTION_MODES, _IMPACT_CLASSES, _LOCKED_IMPACT_CLASSES, _DEFAULT_RESOLUTION_MODES, _VALID_MEMBER_MODES, _VALID_DISPATCH_MODES, DEFAULT_CLI_CALLS_PER_DAY2;
+var import_yaml5, _VALID_PROVIDERS, _FALLBACK_DEPS, _RAW_KEY_PREFIXES, CouncilConfigError, _Float, _VALID_NECESSITY_MODES, _VALID_DISCLOSURE_MODES, _VALID_CHAIRMAN_MODES, COUNCIL_CONFIG_RELNAME, COUNCIL_CONFIG_USER_GLOBAL_REL, COUNCIL_CONFIG_ENV, _VALID_CRITIC_PROTOCOLS, _VALID_RESOLUTION_MODES, _IMPACT_CLASSES, _LOCKED_IMPACT_CLASSES, _DEFAULT_RESOLUTION_MODES, _VALID_MEMBER_MODES, _VALID_DISPATCH_MODES, DEFAULT_CLI_CALLS_PER_DAY2;
 var init_config = __esm({
   "src/scripts/ai_council/config.ts"() {
     "use strict";
@@ -29386,6 +29496,7 @@ var init_config = __esm({
     init_cli_call_budget();
     init_clients();
     init_quorum();
+    init_fallback_config();
     _VALID_PROVIDERS = /* @__PURE__ */ new Set([
       "anthropic",
       "openai",
@@ -29393,6 +29504,15 @@ var init_config = __esm({
       "xai",
       "perplexity"
     ]);
+    _FALLBACK_DEPS = {
+      isDict: _isDict,
+      isBool: _isBool,
+      isStr: _isStr,
+      repr: _pyRepr6,
+      typeName: _pyTypeName,
+      sortedListRepr: _sortedListRepr,
+      error: (msg) => new CouncilConfigError(msg)
+    };
     _RAW_KEY_PREFIXES = [
       "sk-",
       "sk-ant-",
@@ -30035,7 +30155,15 @@ function classifyCliFailure(raw) {
   if (s === "cli_unsupported" || s === "unsupported" || s === "parse_failed") {
     return "cli_unsupported";
   }
-  if (s.startsWith("model_unservable") || s.includes("is not supported when using codex")) {
+  if (s.startsWith("model_unservable") || // The token the PRODUCERS actually write. R2 round 6, finding 4:
+  // `clients.ts` emits `model_unsupported_on_transport` at both sites
+  // (the pre-spend gate at :1857 and the turn-failed path at :2002) and
+  // puts the vendor sentence in `metadata.detail`, never in `error` — so
+  // the class matched nothing a caller could produce and the contract's
+  // fourth eligible class was dead. The token is matched here rather
+  // than renamed at the producers because `code:` values reach the
+  // events log and a rename would break every reader of the history.
+  s.startsWith("model_unsupported_on_transport") || s.includes("is not supported when using codex")) {
     return "model_unservable";
   }
   if (s === "timeout") return "timeout";
@@ -30043,6 +30171,10 @@ function classifyCliFailure(raw) {
   if (/^exit_5\d\d$/.test(s) || s === "server_error" || s === "os") return "server_error";
   return "other";
 }
+function isFallbackEligibleUnder(failure, policy) {
+  if (FALLBACK_ELIGIBLE.has(failure)) return true;
+  return policy.apiOnQuota && failure === "quota_exhausted";
+}
 function absentReasonFromCliFailure(failure) {
   switch (failure) {
     case "binary_missing":
@@ -30057,7 +30189,7 @@ function absentReasonFromCliFailure(failure) {
       return null;
   }
 }
-var VALID_TRANSPORT_MODES, CLI_AUTH_SOURCES, KEY_AUTH_SOURCES;
+var VALID_TRANSPORT_MODES, CLI_AUTH_SOURCES, KEY_AUTH_SOURCES, FALLBACK_ELIGIBLE, DEFAULT_FALLBACK_POLICY, MidFlightFallback;
 var init_transport_resolver = __esm({
   "src/scripts/ai_council/transport_resolver.ts"() {
     "use strict";
@@ -30071,6 +30203,50 @@ var init_transport_resolver = __esm({
     ]);
     CLI_AUTH_SOURCES = /* @__PURE__ */ new Set(["cli-subscription", "cli-api-key"]);
     KEY_AUTH_SOURCES = /* @__PURE__ */ new Set(["key-file", "env-key"]);
+    FALLBACK_ELIGIBLE = /* @__PURE__ */ new Set([
+      "binary_missing",
+      "auth_rejected",
+      "cli_unsupported",
+      // `model_unservable` satisfies the same no-double-charge property in both
+      // of its shapes: the pre-spend gate refuses before any subprocess exists,
+      // and the call-time shape is a provider 400 — rejected at the request
+      // boundary, no generation performed.
+      "model_unservable"
+    ]);
+    DEFAULT_FALLBACK_POLICY = { apiOnQuota: false };
+    MidFlightFallback = class {
+      used = /* @__PURE__ */ new Set();
+      /** `'api'` to retry on the api rung, `'stop'` to surface the failure. */
+      attempt(provider, failure, policy = DEFAULT_FALLBACK_POLICY) {
+        if (!isFallbackEligibleUnder(failure, policy)) return "stop";
+        if (this.used.has(provider)) return "stop";
+        this.used.add(provider);
+        return "api";
+      }
+      /**
+       * Give a provider its one fallback back, because the twin never ran.
+       *
+       * R2 round 2, finding 8. `attempt` claims the slot at DECISION time, which
+       * is correct — the claim is what stops a dead binary being retried once per
+       * round. But a claim that is never CONSUMED must not stay spent: when the
+       * projected-spend gate refuses the escalation, no api call happens, and
+       * leaving the provider marked means the seat can never re-decide. Every
+       * later round then re-spawns the dead cli binary and gets `'stop'`, which
+       * is the exact per-round-ledger behaviour the invocation-scoped ledger was
+       * chosen to avoid.
+       *
+       * Called ONLY on a path where the twin was built and then not called.
+       * A provider that actually retried keeps its claim spent — that is the cap
+       * working.
+       */
+      release(provider) {
+        this.used.delete(provider);
+      }
+      /** Providers that have already spent their one fallback. */
+      spent() {
+        return [...this.used].sort();
+      }
+    };
   }
 });
 
@@ -33615,12 +33791,12 @@ var init_cmd_doctor = __esm({
 });
 
 // src/install/txlog.ts
-import { createReadStream, createWriteStream, existsSync as existsSync25, readFileSync as readFileSync44, renameSync as renameSync8, statSync as statSync32, unlinkSync as unlinkSync7 } from "node:fs";
+import { createReadStream, createWriteStream, existsSync as existsSync25, readFileSync as readFileSync43, renameSync as renameSync8, statSync as statSync32, unlinkSync as unlinkSync7 } from "node:fs";
 function readRecentEntries(logPath) {
   if (!existsSync25(logPath)) {
     return [];
   }
-  const raw = readFileSync44(logPath, "utf8");
+  const raw = readFileSync43(logPath, "utf8");
   const lines = raw.split("\n").filter((l) => l.length > 0);
   const tail = lines.slice(-RECOVERY_DEPTH_CAP);
   const out = [];
@@ -33655,7 +33831,7 @@ var init_txlog = __esm({
 });
 
 // src/install/detect.ts
-import { existsSync as existsSync26, readFileSync as readFileSync45, readdirSync as readdirSync28, statSync as statSync33 } from "node:fs";
+import { existsSync as existsSync26, readFileSync as readFileSync44, readdirSync as readdirSync28, statSync as statSync33 } from "node:fs";
 import { join as join49, resolve as resolve30 } from "node:path";
 function detectToolPresence(root) {
   return {
@@ -35233,12 +35409,22 @@ function untrackedNonDocFiles(cwd) {
 }
 function untrackedFileLineCount(cwd, relPath) {
   try {
-    const r = spawnSync9("git", ["diff", "--numstat", "--no-index", "/dev/null", relPath], {
-      cwd,
-      encoding: "utf8",
-      maxBuffer: 16 * 1024 * 1024
-    });
-    return parseNumstat(r.stdout ?? "").reduce((sum, row) => sum + row.added + row.deleted, 0);
+    const abs = path59.resolve(cwd, relPath);
+    const size = fs58.statSync(abs).size;
+    if (size === 0) return 0;
+    if (size > UNTRACKED_FILE_READ_CAP_BYTES) {
+      return MUTATION_LINE_THRESHOLD + 1;
+    }
+    const buf = fs58.readFileSync(abs);
+    if (buf.length === 0) return 0;
+    const probe = buf.subarray(0, Math.min(buf.length, BINARY_PROBE_BYTES));
+    if (probe.includes(0)) return 0;
+    let lines = 0;
+    for (const byte of buf) {
+      if (byte === 10) lines += 1;
+    }
+    if (buf[buf.length - 1] !== 10) lines += 1;
+    return lines;
   } catch {
     return 0;
   }
@@ -35421,7 +35607,7 @@ function _isCliEntry21() {
     return false;
   }
 }
-var MUTATION_LINE_THRESHOLD, UNTRACKED_FILE_CAP, TRANSCRIPT_SCAN_MAX_BYTES, EXIT_WARN2, DOC_PATH_RE, DISPATCH_TOOL_RE, REVIEW_SHAPED_LABEL_RE, REVIEW_SHAPED_PROMPT_RE, REVIEW_SKILL_NAME_RE;
+var MUTATION_LINE_THRESHOLD, UNTRACKED_FILE_CAP, TRANSCRIPT_SCAN_MAX_BYTES, EXIT_WARN2, DOC_PATH_RE, BINARY_PROBE_BYTES, UNTRACKED_FILE_READ_CAP_BYTES, DISPATCH_TOOL_RE, REVIEW_SHAPED_LABEL_RE, REVIEW_SHAPED_PROMPT_RE, REVIEW_SKILL_NAME_RE;
 var init_end_review_nudge_hook = __esm({
   "src/scripts/hooks/end_review_nudge_hook.ts"() {
     "use strict";
@@ -35434,6 +35620,8 @@ var init_end_review_nudge_hook = __esm({
     TRANSCRIPT_SCAN_MAX_BYTES = 50 * 1024 * 1024;
     EXIT_WARN2 = 2;
     DOC_PATH_RE = /\.md$/i;
+    BINARY_PROBE_BYTES = 8e3;
+    UNTRACKED_FILE_READ_CAP_BYTES = 8 * 1024 * 1024;
     DISPATCH_TOOL_RE = /^(agent|task)$/i;
     REVIEW_SHAPED_LABEL_RE = /\b(review|judge|adversarial|critique|second[- ]opinion|blind\s+(pass|review)|cross-model)\b/i;
     REVIEW_SHAPED_PROMPT_RE = /\b(code\s+review|neutral\s+review|adversarial|judge|critique|second[- ]opinion|blind\s+(pass|review)|cross-model)\b/i;
@@ -36364,8 +36552,11 @@ function main25() {
     dispatchOpen ? null : detectPromissory(lastAssistant),
     detectLanguage(lastAssistant, readLanguagePin(workspaceRoot)),
     detectUnverifiedEdit(toolCalls),
-    // Round 7 § Phase 1 — detector D, in the same unconditional list as the
-    // other three. It shipped with its own settings flag one commit earlier
+    // Round 7 § Phase 1 — detector D. It is NOT unconditional, and this
+    // comment said it was while sitting one line above the `dispatchOpen`
+    // ternary that conditions it: A and D are both excused by an open
+    // dispatch, per the note at the top of this loop. Corrected 2026-08-18.
+    // It shipped with its own settings flag one commit earlier
     // and that flag is gone: `hooks.turn_end_gate.*` was deleted on
     // 2026-08-12 because a default-off safety gate is an absent one. Its
     // gating is where the comment above says gating belongs — inside the
@@ -39503,12 +39694,21 @@ var init_cmd_conformance = __esm({
 var settings_exports = {};
 __export(settings_exports, {
   ALLOWED_GRANULARITIES: () => ALLOWED_GRANULARITIES,
+  ALLOWED_REMOTE_FLUSH: () => ALLOWED_REMOTE_FLUSH,
   DEFAULT_GRANULARITY: () => DEFAULT_GRANULARITY,
   DEFAULT_LOG_PATH: () => DEFAULT_LOG_PATH,
+  DEFAULT_REMOTE_FLUSH: () => DEFAULT_REMOTE_FLUSH,
+  DEFAULT_REMOTE_LOG_PATH: () => DEFAULT_REMOTE_LOG_PATH,
+  DEFAULT_REMOTE_RETENTION: () => DEFAULT_REMOTE_RETENTION,
   DEFAULT_TIER_USAGE_LOG_PATH: () => DEFAULT_TIER_USAGE_LOG_PATH,
   DEFAULT_TIER_USAGE_RETIER: () => DEFAULT_TIER_USAGE_RETIER,
+  MIN_RETENTION_MAX_AGE_DAYS: () => MIN_RETENTION_MAX_AGE_DAYS,
+  MIN_RETENTION_MAX_BYTES: () => MIN_RETENTION_MAX_BYTES,
+  REMOTE_REQUIRED_FIELDS: () => REMOTE_REQUIRED_FIELDS,
+  RemoteTelemetrySettings: () => RemoteTelemetrySettings,
   TelemetrySettings: () => TelemetrySettings,
   TierUsageSettings: () => TierUsageSettings,
+  read_remote_settings: () => read_remote_settings,
   read_settings: () => read_settings,
   read_tier_usage_settings: () => read_tier_usage_settings
 });
@@ -39555,30 +39755,34 @@ function _isFile13(p) {
     return false;
   }
 }
-function read_settings(p) {
-  let section = {};
-  let section_present = false;
-  if (_isFile13(p)) {
-    let raw = {};
-    try {
-      raw = YAML8.parse(fs69.readFileSync(p, "utf-8"), { version: "1.1" });
-      if (raw === null || raw === void 0) {
-        raw = {};
-      }
-    } catch {
+function _read_telemetry_section(p, key) {
+  if (!_isFile13(p)) {
+    return { section: {}, present: false };
+  }
+  let raw = {};
+  try {
+    raw = YAML8.parse(fs69.readFileSync(p, "utf-8"), { version: "1.1" });
+    if (raw === null || raw === void 0) {
       raw = {};
     }
-    if (_isPlainObject8(raw)) {
-      const tele = raw["telemetry"];
-      if (_isPlainObject8(tele)) {
-        const artefact = tele["artifact_engagement"];
-        if (_isPlainObject8(artefact)) {
-          section = artefact;
-          section_present = true;
-        }
-      }
-    }
+  } catch {
+    raw = {};
+  }
+  if (!_isPlainObject8(raw)) {
+    return { section: {}, present: false };
+  }
+  const tele = raw["telemetry"];
+  if (!_isPlainObject8(tele)) {
+    return { section: {}, present: false };
   }
+  const sub = tele[key];
+  if (!_isPlainObject8(sub)) {
+    return { section: {}, present: false };
+  }
+  return { section: sub, present: true };
+}
+function read_settings(p) {
+  const { section, present: section_present } = _read_telemetry_section(p, "artifact_engagement");
   const record = _isPlainObject8(section["record"]) ? section["record"] : {};
   const output = _isPlainObject8(section["output"]) ? section["output"] : {};
   return new TelemetrySettings({
@@ -39591,27 +39795,7 @@ function read_settings(p) {
   });
 }
 function read_tier_usage_settings(p) {
-  let section = {};
-  if (_isFile13(p)) {
-    let raw = {};
-    try {
-      raw = YAML8.parse(fs69.readFileSync(p, "utf-8"), { version: "1.1" });
-      if (raw === null || raw === void 0) {
-        raw = {};
-      }
-    } catch {
-      raw = {};
-    }
-    if (_isPlainObject8(raw)) {
-      const tele = raw["telemetry"];
-      if (_isPlainObject8(tele)) {
-        const tu = tele["tier_usage"];
-        if (_isPlainObject8(tu)) {
-          section = tu;
-        }
-      }
-    }
-  }
+  const { section } = _read_telemetry_section(p, "tier_usage");
   const output = _isPlainObject8(section["output"]) ? section["output"] : {};
   const retier = _isPlainObject8(section["retier"]) ? section["retier"] : {};
   const defaults = DEFAULT_TIER_USAGE_RETIER;
@@ -39632,7 +39816,39 @@ function read_tier_usage_settings(p) {
     min_distinct_users: _coerce_int(retier["min_distinct_users"], defaults.min_distinct_users)
   });
 }
-var YAML8, DEFAULT_LOG_PATH, DEFAULT_GRANULARITY, ALLOWED_GRANULARITIES, DEFAULT_TIER_USAGE_LOG_PATH, DEFAULT_TIER_USAGE_RETIER, TelemetrySettings, TierUsageSettings;
+function read_remote_settings(p) {
+  const { section } = _read_telemetry_section(p, "remote");
+  const output = _isPlainObject8(section["output"]) ? section["output"] : {};
+  const retention = _isPlainObject8(section["retention"]) ? section["retention"] : {};
+  const _coerce_bounded_int = (value, def, floor) => {
+    if (typeof value === "boolean") {
+      return def;
+    }
+    if (typeof value === "number" && Number.isInteger(value) && value >= floor) {
+      return value;
+    }
+    return def;
+  };
+  return new RemoteTelemetrySettings({
+    enabled: _coerce_bool(section["enabled"], false),
+    endpoint: _coerce_str(section["endpoint"], ""),
+    org_id: _coerce_str(section["org_id"], ""),
+    salt: _coerce_str(section["salt"], ""),
+    flush: _coerce_str(section["flush"], DEFAULT_REMOTE_FLUSH, ALLOWED_REMOTE_FLUSH),
+    log_path: _coerce_path(output["path"], DEFAULT_REMOTE_LOG_PATH),
+    retention_max_age_days: _coerce_bounded_int(
+      retention["max_age_days"],
+      DEFAULT_REMOTE_RETENTION.max_age_days,
+      MIN_RETENTION_MAX_AGE_DAYS
+    ),
+    retention_max_bytes: _coerce_bounded_int(
+      retention["max_bytes"],
+      DEFAULT_REMOTE_RETENTION.max_bytes,
+      MIN_RETENTION_MAX_BYTES
+    )
+  });
+}
+var YAML8, DEFAULT_LOG_PATH, DEFAULT_GRANULARITY, ALLOWED_GRANULARITIES, DEFAULT_TIER_USAGE_LOG_PATH, DEFAULT_TIER_USAGE_RETIER, TelemetrySettings, TierUsageSettings, DEFAULT_REMOTE_LOG_PATH, DEFAULT_REMOTE_FLUSH, ALLOWED_REMOTE_FLUSH, DEFAULT_REMOTE_RETENTION, MIN_RETENTION_MAX_AGE_DAYS, MIN_RETENTION_MAX_BYTES, REMOTE_REQUIRED_FIELDS, RemoteTelemetrySettings;
 var init_settings = __esm({
   "src/agent-src/templates/scripts/telemetry/settings.ts"() {
     "use strict";
@@ -39679,6 +39895,62 @@ var init_settings = __esm({
         this.min_distinct_users = init2.min_distinct_users;
       }
     };
+    DEFAULT_REMOTE_LOG_PATH = ".agent-telemetry.jsonl";
+    DEFAULT_REMOTE_FLUSH = "session-end";
+    ALLOWED_REMOTE_FLUSH = ["session-end", "never"];
+    DEFAULT_REMOTE_RETENTION = {
+      max_age_days: 90,
+      max_bytes: 2 * 1024 * 1024
+    };
+    MIN_RETENTION_MAX_AGE_DAYS = 1;
+    MIN_RETENTION_MAX_BYTES = 4096;
+    REMOTE_REQUIRED_FIELDS = ["endpoint", "org_id", "salt"];
+    RemoteTelemetrySettings = class {
+      /** The raw `enabled:` value. NOT the switch — see `active`. */
+      enabled;
+      endpoint;
+      org_id;
+      /** Org-pack secret. Never written into a record, never logged. */
+      salt;
+      flush;
+      log_path;
+      /**
+       * Growth budget for `log_path`. Always present — an install that
+       * declares no `retention:` gets the defaults rather than no policy,
+       * because "unbounded" is the state R-A7 forbids and a settings file is
+       * not a place to opt back into it.
+       */
+      retention_max_age_days;
+      retention_max_bytes;
+      constructor(init2) {
+        this.enabled = init2.enabled;
+        this.endpoint = init2.endpoint;
+        this.org_id = init2.org_id;
+        this.salt = init2.salt;
+        this.flush = init2.flush;
+        this.log_path = init2.log_path;
+        this.retention_max_age_days = init2.retention_max_age_days;
+        this.retention_max_bytes = init2.retention_max_bytes;
+      }
+      /**
+       * Which required fields are absent. Empty array + `enabled` ⇒ `active`.
+       * Exposed so a doctor command can say WHICH field is missing without
+       * printing the salt, rather than reporting a bare "disabled".
+       */
+      get missing() {
+        const out = [];
+        for (const field of REMOTE_REQUIRED_FIELDS) {
+          if (!this[field]) {
+            out.push(field);
+          }
+        }
+        return out;
+      }
+      /** The real switch: opted in AND fully configured by the org pack. */
+      get active() {
+        return this.enabled && this.missing.length === 0;
+      }
+    };
   }
 });
 
@@ -42152,6 +42424,242 @@ var init_qualification_wiring = __esm({
   }
 });
 
+// src/scripts/_lib/map_to_object.ts
+function _mapToObject(m) {
+  const out = {};
+  for (const [k, v] of m) {
+    out[k] = v;
+  }
+  return out;
+}
+var init_map_to_object = __esm({
+  "src/scripts/_lib/map_to_object.ts"() {
+    "use strict";
+  }
+});
+
+// src/scripts/_lib/council_settings_block.ts
+function synthesizeAiCouncilBlock(cfg) {
+  const members = {};
+  for (const [name, m] of cfg.members) {
+    const entry = { enabled: m.enabled, model: m.model };
+    if (m.api_key_ref !== null) {
+      entry["api_key_ref"] = m.api_key_ref;
+    }
+    if (m.mode !== null) {
+      entry["mode"] = m.mode;
+    }
+    if (m.binary !== null) {
+      entry["binary"] = m.binary;
+    }
+    if (m.model_ladder && m.model_ladder.length > 0) {
+      entry["model_ladder"] = [...m.model_ladder];
+    }
+    if (m.prompt_cache_ttl !== "5m") {
+      entry["prompt_cache_ttl"] = m.prompt_cache_ttl;
+    }
+    members[name] = entry;
+  }
+  const advisors = {};
+  for (const [name, a] of cfg.advisors) {
+    const entry = {
+      enabled: a.enabled,
+      member: a.member,
+      persona: a.persona
+    };
+    if (a.model !== null) {
+      entry["model"] = a.model;
+    }
+    advisors[name] = entry;
+  }
+  const lensCostDisclosure = {};
+  for (const [lens, cd] of cfg.lens_overrides.cost_disclosure) {
+    lensCostDisclosure[lens] = {
+      mode: cd.mode,
+      threshold_usd: cd.threshold_usd,
+      show_per_member: cd.show_per_member
+    };
+  }
+  const lensModelDowngrade = {};
+  for (const [lens, md] of cfg.lens_overrides.model_downgrade) {
+    lensModelDowngrade[lens] = { enabled: md.enabled, auto_apply: md.auto_apply };
+  }
+  return {
+    enabled: cfg.enabled,
+    mode: cfg.defaults.mode,
+    min_rounds: cfg.defaults.min_rounds,
+    deep_min_rounds: cfg.defaults.deep_min_rounds,
+    max_output_tokens: cfg.defaults.max_output_tokens,
+    session_retention_days: cfg.defaults.session_retention_days,
+    debate_max_rounds: cfg.defaults.debate_max_rounds,
+    cost_budget: {
+      max_input_tokens: cfg.cost_budget.max_input_tokens,
+      max_output_tokens: cfg.cost_budget.max_output_tokens,
+      max_calls: cfg.cost_budget.max_calls,
+      max_total_usd: cfg.cost_budget.max_total_usd,
+      daily_limit_usd: cfg.cost_budget.daily_limit_usd
+    },
+    consensus_scoring: {
+      enabled: cfg.consensus_scoring.enabled,
+      strong_threshold: cfg.consensus_scoring.strong_threshold,
+      minority_threshold: cfg.consensus_scoring.minority_threshold,
+      lenses: [...cfg.consensus_scoring.lenses]
+    },
+    cli_call_budget: {
+      max_calls_per_day: _mapToObject(cfg.cli_call_budget.max_calls_per_day),
+      warn_at: cfg.cli_call_budget.warn_at
+    },
+    // Phase 3.3 (road-to-always-on-orchestration): was validated by
+    // `_build_config`/`_build_quorum` but never forwarded into the
+    // synthesized block, so `build_members` always saw `undefined` and
+    // silently fell back to `'majority'` regardless of the user's
+    // configured `quorum: <k>`. Additive key — callers that never read
+    // it observe no change.
+    quorum: cfg.quorum,
+    // Forwarded for the same reason `quorum` above had to be: a key that
+    // `_build_config` validates and this block drops is a key the loader
+    // enforces and the runtime never sees. That defect shipped once here
+    // already; repeating it for the shadow floor would silently pin every
+    // `floor_would_hold` to the default no matter what the operator set.
+    quorum_min_present: cfg.quorum_min_present,
+    // Third instance of the same defect the two comments above describe,
+    // and the most expensive of the three: `build_members` reads
+    // `ai_council.fallback.api_on_quota` off THIS block, so before the key
+    // was forwarded no config file could turn quota fall-through on. The
+    // documentation, the contract section and the tests all described a
+    // switch that production could not flip.
+    fallback: { api_on_quota: cfg.fallback.api_on_quota },
+    necessity_classifier: {
+      enabled: cfg.necessity_classifier.enabled,
+      mode: cfg.necessity_classifier.mode,
+      user_explicit_mode: cfg.necessity_classifier.user_explicit_mode
+    },
+    model_downgrade: {
+      enabled: cfg.model_downgrade.enabled,
+      auto_apply: cfg.model_downgrade.auto_apply
+    },
+    debate: {
+      max_cost_usd: cfg.debate.max_cost_usd,
+      cost_disclosure: {
+        mode: cfg.debate.cost_disclosure.mode,
+        threshold_usd: cfg.debate.cost_disclosure.threshold_usd,
+        show_per_member: cfg.debate.cost_disclosure.show_per_member
+      }
+    },
+    lens_overrides: {
+      necessity_classifier_mode: _mapToObject(
+        cfg.lens_overrides.necessity_classifier_mode
+      ),
+      necessity_classifier_user_explicit_mode: _mapToObject(
+        cfg.lens_overrides.necessity_classifier_user_explicit_mode
+      ),
+      model_downgrade: lensModelDowngrade,
+      cost_disclosure: lensCostDisclosure
+    },
+    members,
+    advisors
+  };
+}
+var init_council_settings_block = __esm({
+  "src/scripts/_lib/council_settings_block.ts"() {
+    "use strict";
+    init_map_to_object();
+  }
+});
+
+// src/scripts/_lib/council_fallback_posture.ts
+function fallbackPostureFor(input) {
+  if (input.transport !== "cli") return "n/a";
+  if (!input.hasApiRung) return "none";
+  if (input.apiKeyRef !== null) return input.refResolves === true ? "api" : "none";
+  if (input.keylessResolves === void 0) return "none";
+  try {
+    return input.keylessResolves() ? "api" : "none";
+  } catch {
+    return "none";
+  }
+}
+function renderPostureLines(postures, apiOnQuota) {
+  const live = postures.filter(([, p]) => p !== "n/a");
+  if (live.length === 0) return [];
+  const lines = live.map(
+    ([name, p]) => `  fallback         ${name}: ` + (p === "api" ? "would fall back to api" : "no api rung \u2014 a lost cli transport loses the seat")
+  );
+  lines.push(
+    `  fallback quota   api_on_quota: ${apiOnQuota ? "on" : "off"} \u2014 an exhausted cli quota ${apiOnQuota ? "MAY" : "may not"} retry on the metered rung`
+  );
+  return lines;
+}
+var init_council_fallback_posture = __esm({
+  "src/scripts/_lib/council_fallback_posture.ts"() {
+    "use strict";
+  }
+});
+
+// src/scripts/_lib/council_fallback_wiring.ts
+function isRefusal(exc) {
+  if (exc instanceof CouncilConfigError) return true;
+  return exc instanceof Error && REFUSAL_NAMES.has(exc.constructor.name);
+}
+function buildFallbackOptions(deps) {
+  return {
+    api_on_quota: deps.apiOnQuota,
+    // The orchestrator is a pure library and holds no sink; this is it.
+    // One line per establishing escalation, so attendance analysis can
+    // tell a seat SAVED by the fallback from one that was natively api.
+    on_event: (e) => {
+      try {
+        deps.emit({
+          action: "transport_fallback",
+          provider: e.provider,
+          failure_class: e.failure,
+          outcome: e.outcome,
+          api_on_quota: e.api_on_quota
+        });
+      } catch {
+      }
+    },
+    construct: (provider) => {
+      if (!deps.hasApiRung(provider)) return null;
+      const cfg = deps.memberConfig(provider);
+      const model = deps.modelOverride(provider) ?? cfg["model"] ?? null;
+      try {
+        return deps.constructApi(provider, model, {
+          api_key_ref: cfg["api_key_ref"] ?? null,
+          enable_prompt_cache: cfg["prompt_cache"] !== false,
+          prompt_cache_ttl: cfg["prompt_cache_ttl"]
+        });
+      } catch (exc) {
+        if (isRefusal(exc)) return null;
+        throw exc;
+      }
+    }
+  };
+}
+var REFUSAL_NAMES;
+var init_council_fallback_wiring = __esm({
+  "src/scripts/_lib/council_fallback_wiring.ts"() {
+    "use strict";
+    init_config();
+    REFUSAL_NAMES = /* @__PURE__ */ new Set([
+      "CouncilDisabledError",
+      "CliClientError",
+      "CouncilConfigError",
+      // R2 round 6, critical finding 1 — and the docblock above already told the
+      // story one name short. `KeyGateError` is what an api-twin construction
+      // raises when the provider key is absent or violates the 0600 contract,
+      // which is the ORDINARY shape of the very configuration this fallback
+      // targets: a cli member under subscription auth, no `api_key_ref`, no
+      // local key. It escaped `construct()`, escaped `consult()`, and is not in
+      // `main`'s catch list — so instead of losing one seat, the whole pass died
+      // with an unhandled exception. A mechanism that turns a recoverable seat
+      // loss into a total loss is worse than no mechanism, which is the sentence
+      // directly above this list.
+      "KeyGateError"
+    ]);
+  }
+});
+
 // src/scripts/ai_council/low_impact_corpus.ts
 var low_impact_corpus_exports = {};
 __export(low_impact_corpus_exports, {
@@ -44190,6 +44698,293 @@ var init_stance_tally = __esm({
   }
 });
 
+// src/scripts/ai_council/mid_flight_fallback.ts
+function establishTwin(input) {
+  const { member, error, fallback, ledger } = input;
+  const failure = classifyCliFailure(error);
+  const policy = { apiOnQuota: fallback.api_on_quota };
+  if (!isFallbackEligibleUnder(failure, policy)) return null;
+  if (ledger.attempt(member.name, failure, policy) !== "api") return null;
+  const twin = fallback.construct(member.name);
+  if (twin === null) {
+    fallback.on_event?.({
+      provider: member.name,
+      failure,
+      outcome: "no_twin",
+      api_on_quota: fallback.api_on_quota
+    });
+    return null;
+  }
+  return { client: twin, reason: failure, original_error: error };
+}
+function emitOutcome(fallback, provider, twin, outcome) {
+  fallback.on_event?.({
+    provider,
+    failure: twin.reason,
+    outcome,
+    api_on_quota: fallback.api_on_quota
+  });
+}
+function stampFallback(response, twin, sticky) {
+  response.metadata = {
+    ...response.metadata ?? {},
+    fallback_from: "cli",
+    fallback_reason: twin.reason,
+    fallback_original_error: twin.original_error,
+    ...sticky ? { fallback_sticky: true } : {}
+  };
+}
+function isFailedCliCall(member, error, transport) {
+  return error !== null && String(error) !== "" && transport === "cli";
+}
+function runGatedRetry(original, member, twin, fallback, deps, ledger = null) {
+  if (!deps.gate(twin.client)) {
+    original.metadata = { ...original.metadata ?? {}, fallback_skipped: "cost_budget" };
+    emitOutcome(fallback, member.name, twin, "cost_budget");
+    ledger?.release(member.name);
+    return { response: original, effective: member, retried: false };
+  }
+  const response = deps.call(twin.client);
+  stampFallback(response, twin, false);
+  emitOutcome(fallback, member.name, twin, "retried");
+  return { response, effective: twin.client, retried: true };
+}
+function escalateUnmetered(member, response, transport, fallback, ledger) {
+  if (fallback === null || ledger === null) return null;
+  if (!isFailedCliCall(member, response.error, transport)) return null;
+  const twin = establishTwin({
+    member,
+    error: String(response.error),
+    fallback,
+    ledger
+  });
+  if (twin === null) return null;
+  return twin;
+}
+function refuseUnmeteredEscalation(args) {
+  const { original, declared, twin, fallback, ledger, twins } = args;
+  original.metadata = { ...original.metadata ?? {}, fallback_skipped: "cost_budget" };
+  if (fallback !== null) emitOutcome(fallback, declared.name, twin, "cost_budget");
+  twins?.delete(declared.name);
+  ledger?.release(declared.name);
+  return original;
+}
+var init_mid_flight_fallback = __esm({
+  "src/scripts/ai_council/mid_flight_fallback.ts"() {
+    "use strict";
+    init_transport_resolver();
+  }
+});
+
+// src/scripts/ai_council/spend_gate.ts
+function _total_usd(e) {
+  return e.input_usd + e.output_usd;
+}
+function _breach(est, spent, budget) {
+  const usd = est ? _total_usd(est) : 0;
+  if (spent.input + (est ? est.input_tokens : 0) > budget.max_input_tokens || spent.output + (est ? est.output_tokens : 0) > budget.max_output_tokens) {
+    return "tokens";
+  }
+  if (budget.daily_limit_usd > 0 && would_exceed(budget.daily_limit_usd, usd)) {
+    return "daily";
+  }
+  if (budget.max_total_usd > 0 && spent.usd + usd > budget.max_total_usd) return "session";
+  return null;
+}
+var CostBudget, OverrunEvent;
+var init_spend_gate = __esm({
+  "src/scripts/ai_council/spend_gate.ts"() {
+    "use strict";
+    init_budget_guard();
+    CostBudget = class {
+      max_input_tokens;
+      max_output_tokens;
+      max_calls;
+      max_total_usd;
+      // 0 = USD ceiling disabled (token caps still apply)
+      daily_limit_usd;
+      // 0 = rolling 24h cap disabled (D3)
+      constructor(args = {}) {
+        this.max_input_tokens = args.max_input_tokens ?? 5e4;
+        this.max_output_tokens = args.max_output_tokens ?? 2e4;
+        this.max_calls = args.max_calls ?? 10;
+        this.max_total_usd = args.max_total_usd ?? 0;
+        this.daily_limit_usd = args.daily_limit_usd ?? 0;
+      }
+    };
+    OverrunEvent = class {
+      member_index;
+      member;
+      next_estimate;
+      // this member's projected cost
+      spent_input_tokens;
+      // already-billed totals BEFORE this member
+      spent_output_tokens;
+      spent_usd;
+      projected_total_usd;
+      // spent_usd + next_estimate.total_usd
+      daily_spent_usd;
+      // rolling 24h spend BEFORE this member (D3)
+      daily_limit_usd;
+      // the configured daily cap (0 = disabled)
+      breach_kind;
+      // "session" | "daily" | "tokens"
+      constructor(args) {
+        this.member_index = args.member_index;
+        this.member = args.member;
+        this.next_estimate = args.next_estimate;
+        this.spent_input_tokens = args.spent_input_tokens;
+        this.spent_output_tokens = args.spent_output_tokens;
+        this.spent_usd = args.spent_usd;
+        this.projected_total_usd = args.projected_total_usd;
+        this.daily_spent_usd = args.daily_spent_usd ?? 0;
+        this.daily_limit_usd = args.daily_limit_usd ?? 0;
+        this.breach_kind = args.breach_kind ?? "session";
+      }
+    };
+  }
+});
+
+// src/scripts/ai_council/py_parity.ts
+function _pyInt5(x) {
+  return Math.trunc(x);
+}
+function _pyReprInt(x) {
+  return String(x);
+}
+function _excTag(exc) {
+  if (exc instanceof Error) {
+    return `${exc.name}: ${exc.message}`;
+  }
+  return `Error: ${String(exc)}`;
+}
+function _setdefault(obj, key, value) {
+  if (!(key in obj)) {
+    obj[key] = value;
+  }
+}
+function _metaGet(obj, key, fallback) {
+  return key in obj ? obj[key] : fallback;
+}
+function _pyLStrip(s) {
+  return s.replace(/^\s+/, "");
+}
+function _pyRStrip2(s) {
+  return s.replace(/\s+$/, "");
+}
+function _pyLen5(s) {
+  let n = 0;
+  for (const _ of s) {
+    n += 1;
+  }
+  return n;
+}
+function _pySlice(s, start, end) {
+  return [...s].slice(start, end).join("");
+}
+function _pyFixed3(x, ndigits) {
+  if (!Number.isFinite(x)) {
+    return String(x);
+  }
+  const neg = x < 0 || Object.is(x, -0);
+  const abs = Math.abs(x);
+  const factor = Math.pow(10, ndigits);
+  const scaled = abs * factor;
+  const floor = Math.floor(scaled);
+  const frac = scaled - floor;
+  const tol = Math.max(Math.abs(scaled), 1) * 2 ** -40;
+  let rounded;
+  if (Math.abs(frac - 0.5) <= tol) {
+    rounded = floor % 2 === 0 ? floor : floor + 1;
+  } else {
+    rounded = Math.round(scaled);
+  }
+  let intStr = String(rounded);
+  let result;
+  if (ndigits === 0) {
+    result = intStr;
+  } else {
+    if (intStr.length <= ndigits) {
+      intStr = "0".repeat(ndigits - intStr.length + 1) + intStr;
+    }
+    const whole = intStr.slice(0, intStr.length - ndigits);
+    const dec = intStr.slice(intStr.length - ndigits);
+    result = `${whole}.${dec}`;
+  }
+  return neg ? `-${result}` : result;
+}
+function _pyStrip5(s) {
+  return s.trim();
+}
+function _pySplitWhitespace(s) {
+  const trimmed = s.trim();
+  if (trimmed === "") {
+    return [];
+  }
+  return trimmed.split(/\s+/);
+}
+var init_py_parity = __esm({
+  "src/scripts/ai_council/py_parity.ts"() {
+    "use strict";
+  }
+});
+
+// src/scripts/ai_council/response_render.ts
+function renderResponseMeta(r, deps) {
+  const meta_dict = r.metadata ?? {};
+  const billable = Boolean(_metaGet(meta_dict, "billable", true));
+  const estimated = Boolean(_metaGet(meta_dict, "tokens_estimated", false));
+  const parts = [];
+  if (!billable) {
+    const label = _metaGet(meta_dict, "subscription_label", null) || "flat-rate";
+    parts.push(`cost: subscription (${label})`);
+  } else {
+    const cost_usd = _metaGet(meta_dict, "cost_usd", void 0);
+    if (typeof cost_usd === "number" && !(typeof cost_usd === "boolean")) {
+      parts.push(`cost: $${deps.pyFixed(cost_usd, 4)}`);
+    }
+    const prefix = estimated ? "~" : "";
+    parts.push(
+      `tokens: ${prefix}${r.input_tokens} in / ${prefix}${r.output_tokens} out`
+    );
+  }
+  parts.push(`${r.latency_ms} ms`);
+  const fallback_from = _metaGet(meta_dict, "fallback_from", null);
+  if (typeof fallback_from === "string" && fallback_from !== "") {
+    const reason = _metaGet(meta_dict, "fallback_reason", null);
+    const sticky = _metaGet(meta_dict, "fallback_sticky", false) === true;
+    const why = typeof reason === "string" && reason !== "" ? `: ${reason}` : "";
+    parts.push(
+      sticky ? `transport: api (${fallback_from} lost earlier this pass${why})` : `transport: api (fell back from ${fallback_from}${why})`
+    );
+  }
+  return `*${parts.join(" \xB7 ")}*`;
+}
+function callMember(client, question, opts, systemFor, excTag) {
+  try {
+    return opts.split ? client.ask_split(
+      systemFor(client),
+      opts.split.stable,
+      opts.split.suffix,
+      question.max_tokens
+    ) : client.ask(systemFor(client), question.user_prompt, question.max_tokens);
+  } catch (exc) {
+    return new CouncilResponse({
+      provider: client.name,
+      model: client.model,
+      text: "",
+      error: excTag(exc)
+    });
+  }
+}
+var init_response_render = __esm({
+  "src/scripts/ai_council/response_render.ts"() {
+    "use strict";
+    init_clients();
+    init_py_parity();
+  }
+});
+
 // src/scripts/ai_council/blind_review.ts
 import { createHash as createHash12 } from "node:crypto";
 function _sha256_hex(s) {
@@ -44345,6 +45140,8 @@ __export(orchestrator_exports, {
   DebateCostEstimate: () => DebateCostEstimate,
   OverrunEvent: () => OverrunEvent,
   PeerReviewResult: () => PeerReviewResult,
+  _breach: () => _breach,
+  _total_usd: () => _total_usd,
   consult: () => consult,
   estimate: () => estimate,
   estimate_debate_cost: () => estimate_debate_cost,
@@ -44353,47 +45150,6 @@ __export(orchestrator_exports, {
   run_debate: () => run_debate,
   run_peer_review: () => run_peer_review
 });
-function _pyFixed3(x, ndigits) {
-  if (!Number.isFinite(x)) {
-    return String(x);
-  }
-  const neg = x < 0 || Object.is(x, -0);
-  const abs = Math.abs(x);
-  const factor = Math.pow(10, ndigits);
-  const scaled = abs * factor;
-  const floor = Math.floor(scaled);
-  const frac = scaled - floor;
-  const tol = Math.max(Math.abs(scaled), 1) * 2 ** -40;
-  let rounded;
-  if (Math.abs(frac - 0.5) <= tol) {
-    rounded = floor % 2 === 0 ? floor : floor + 1;
-  } else {
-    rounded = Math.round(scaled);
-  }
-  let intStr = String(rounded);
-  let result;
-  if (ndigits === 0) {
-    result = intStr;
-  } else {
-    if (intStr.length <= ndigits) {
-      intStr = "0".repeat(ndigits - intStr.length + 1) + intStr;
-    }
-    const whole = intStr.slice(0, intStr.length - ndigits);
-    const dec = intStr.slice(intStr.length - ndigits);
-    result = `${whole}.${dec}`;
-  }
-  return neg ? `-${result}` : result;
-}
-function _pyStrip5(s) {
-  return s.trim();
-}
-function _pySplitWhitespace(s) {
-  const trimmed = s.trim();
-  if (trimmed === "") {
-    return [];
-  }
-  return trimmed.split(/\s+/);
-}
 function _getattr2(obj, name, fallback) {
   if (obj === null || obj === void 0) {
     return fallback;
@@ -44457,9 +45213,6 @@ function estimate_debate_cost(question, members, table, opts) {
     subscription_members: sub_members
   });
 }
-function _total_usd(e) {
-  return e.input_usd + e.output_usd;
-}
 function estimate(question, members, table, opts = {}) {
   const project = opts.project ?? null;
   const original_ask = opts.original_ask ?? "";
@@ -44508,6 +45261,9 @@ function consult(members, question, budget = null, opts = {}) {
     );
   }
   const spent = { input: 0, output: 0, usd: 0 };
+  const cli_fallback = opts.cli_fallback ?? null;
+  const fallback_ledger = cli_fallback !== null ? new MidFlightFallback() : null;
+  const fallback_twins = cli_fallback !== null ? /* @__PURE__ */ new Map() : null;
   let last_results = [];
   let current_suffix = "";
   const stance_tally = opts.stance_tally ?? false;
@@ -44530,6 +45286,9 @@ ${STANCE_LINE_CONTRACT}` : current_suffix;
       project,
       original_ask,
       advisor_plans,
+      cli_fallback,
+      fallback_ledger,
+      fallback_twins,
       member_prompt_suffix: opts.member_prompt_suffix ?? null,
       no_project_context_members: opts.no_project_context_members ?? null,
       split: suffix_for_round ? { stable: question.user_prompt, suffix: suffix_for_round } : null
@@ -44564,7 +45323,10 @@ ${STANCE_LINE_CONTRACT}`,
         on_overrun,
         project,
         original_ask,
-        advisor_plans
+        advisor_plans,
+        cli_fallback,
+        fallback_ledger,
+        fallback_twins
       });
       const rep = rr[0];
       if (rep !== void 0) {
@@ -44611,55 +45373,78 @@ ${suffix}` : base;
     original_ask,
     advisor_plans: opts.advisor_plans ?? null
   }) : null;
+  const twins = opts.fallback_twins ?? null;
   for (let idx = 0; idx < members.length; idx++) {
-    const member = members[idx];
+    const declared = members[idx];
+    let established = twins?.get(declared.name) ?? null;
+    const substituted_on_entry = established !== null;
+    let member = established !== null ? established.client : declared;
+    let unmetered_original = null;
+    let unmetered_twin = null;
     if (!_getattr2(member, "billable", true)) {
-      let response2;
-      try {
-        response2 = opts.split ? member.ask_split(
-          _system_prompt_for_member(member),
-          opts.split.stable,
-          opts.split.suffix,
-          question.max_tokens
-        ) : member.ask(
-          _system_prompt_for_member(member),
-          question.user_prompt,
-          question.max_tokens
-        );
-      } catch (exc) {
-        response2 = new CouncilResponse({
-          provider: member.name,
-          model: member.model,
-          text: "",
-          error: _excTag(exc)
-        });
+      let response2 = callMember(member, question, opts, _system_prompt_for_member, _excTag);
+      const nb_twin = escalateUnmetered(
+        member,
+        response2,
+        _getattr2(member, "transport", "api"),
+        opts.cli_fallback ?? null,
+        opts.fallback_ledger ?? null
+      );
+      const escalated = nb_twin !== null;
+      if (nb_twin !== null) {
+        established = nb_twin;
+        twins?.set(member.name, nb_twin);
+        member = nb_twin.client;
+        unmetered_original = response2;
+        unmetered_twin = nb_twin;
+      }
+      if (!escalated) {
+        _stamp_transport_metadata(response2, member);
+        results.push(response2);
+        spent.input += response2.input_tokens;
+        spent.output += response2.output_tokens;
+        continue;
       }
-      _stamp_transport_metadata(response2, member);
-      results.push(response2);
-      spent.input += response2.input_tokens;
-      spent.output += response2.output_tokens;
-      continue;
-    }
-    const est = estimates ? estimates[idx] : null;
-    const proj_input = spent.input + (est ? est.input_tokens : 0);
-    const proj_output = spent.output + (est ? est.output_tokens : 0);
-    const proj_usd = spent.usd + (est ? _total_usd(est) : 0);
-    const next_call_usd = est ? _total_usd(est) : 0;
-    const breaches_tokens = proj_input > budget.max_input_tokens || proj_output > budget.max_output_tokens;
-    const breaches_usd = budget.max_total_usd > 0 && proj_usd > budget.max_total_usd;
-    const breaches_daily = budget.daily_limit_usd > 0 && would_exceed(budget.daily_limit_usd, next_call_usd);
-    if (breaches_tokens || breaches_usd || breaches_daily) {
-      const breach_kind = breaches_tokens ? "tokens" : breaches_daily ? "daily" : "session";
+    }
+    const est = established !== null && table !== null ? estimate(question, [member], table, {
+      project,
+      original_ask,
+      advisor_plans: opts.advisor_plans ?? null
+    })[0] : estimates ? estimates[idx] : null;
+    const breach = _breach(est, spent, budget);
+    if (breach !== null) {
+      const breach_kind = breach;
       const error_tag = breach_kind === "daily" ? "daily_budget_exceeded" : "cost_budget_exceeded";
+      if (unmetered_original !== null && unmetered_twin !== null) {
+        const refused = refuseUnmeteredEscalation({
+          original: unmetered_original,
+          declared,
+          twin: unmetered_twin,
+          fallback: opts.cli_fallback ?? null,
+          ledger: opts.fallback_ledger ?? null,
+          twins
+        });
+        _stamp_transport_metadata(refused, declared);
+        results.push(refused);
+        spent.input += refused.input_tokens;
+        spent.output += refused.output_tokens;
+        continue;
+      }
       if (on_overrun !== null && estimates !== null) {
         const event = new OverrunEvent({
           member_index: idx,
           member,
-          next_estimate: estimates[idx],
+          // `est`, not `estimates[idx]`. The breach decision two
+          // lines up was already re-priced for a substituted twin;
+          // the event that ASKS the operator to approve it showed
+          // the pre-loop row for the unmetered DECLARED seat, i.e. a
+          // ~$0 next-call estimate for the very call the gate just
+          // refused as over budget. R2 review, finding 8.
+          next_estimate: est ?? estimates[idx],
           spent_input_tokens: _pyInt5(spent.input),
           spent_output_tokens: _pyInt5(spent.output),
           spent_usd: spent.usd,
-          projected_total_usd: proj_usd,
+          projected_total_usd: spent.usd + (est ? _total_usd(est) : 0),
           daily_spent_usd: budget.daily_limit_usd > 0 ? today_spend_usd() : 0,
           daily_limit_usd: budget.daily_limit_usd,
           breach_kind
@@ -44675,34 +45460,48 @@ ${suffix}` : base;
         return results;
       }
     }
-    let response;
-    try {
-      response = opts.split ? member.ask_split(
-        _system_prompt_for_member(member),
-        opts.split.stable,
-        opts.split.suffix,
-        question.max_tokens
-      ) : member.ask(
-        _system_prompt_for_member(member),
-        question.user_prompt,
-        question.max_tokens
-      );
-    } catch (exc) {
-      response = new CouncilResponse({
-        provider: member.name,
-        model: member.model,
-        text: "",
-        error: _excTag(exc)
+    if (unmetered_twin !== null) {
+      const fb = opts.cli_fallback ?? null;
+      if (fb !== null) emitOutcome(fb, declared.name, unmetered_twin, "retried");
+    }
+    let response = callMember(member, question, opts, _system_prompt_for_member, _excTag);
+    let effective = member;
+    const fallback = opts.cli_fallback ?? null;
+    const ledger = opts.fallback_ledger ?? null;
+    if (fallback !== null && ledger !== null && isFailedCliCall(member, response.error, _getattr2(member, "transport", "api"))) {
+      const twin = establishTwin({
+        member,
+        error: String(response.error),
+        fallback,
+        ledger
       });
-    }
+      if (twin !== null) {
+        const out = runGatedRetry(response, member, twin, fallback, {
+          gate: (client) => table === null || _breach(
+            estimate(question, [client], table, {
+              project,
+              original_ask,
+              advisor_plans: opts.advisor_plans ?? null
+            })[0],
+            spent,
+            budget
+          ) === null,
+          call: (client) => callMember(client, question, opts, _system_prompt_for_member, _excTag)
+        }, ledger);
+        response = out.response;
+        effective = out.effective;
+        if (out.retried) twins?.set(member.name, twin);
+      }
+    }
+    if (established !== null) stampFallback(response, established, substituted_on_entry);
     results.push(response);
     spent.input += response.input_tokens;
     spent.output += response.output_tokens;
     let actual_usd = null;
     if (estimates !== null && table !== null) {
       const actual = reprice_with_cache(
-        member.name,
-        member.model,
+        effective.name,
+        effective.model,
         {
           input_tokens: response.input_tokens,
           cache_read_input_tokens: response.cache_read_input_tokens,
@@ -44715,14 +45514,14 @@ ${suffix}` : base;
       actual_usd = _total_usd(actual);
       spent.usd += _total_usd(actual);
       if (budget.daily_limit_usd > 0 && !response.error) {
-        record_spend(_total_usd(actual), member.name, member.model, {
+        record_spend(_total_usd(actual), effective.name, effective.model, {
           cache_read_input_tokens: response.cache_read_input_tokens,
           cache_creation_input_tokens: response.cache_creation_input_tokens,
           cache_ttl: "5m"
         });
       }
     }
-    _stamp_transport_metadata(response, member, actual_usd);
+    _stamp_transport_metadata(response, effective, actual_usd);
   }
   return results;
 }
@@ -44902,6 +45701,9 @@ function run_debate(members, question, opts = {}) {
     );
   }
   const spent = { input: 0, output: 0, usd: 0 };
+  const cli_fallback = opts.cli_fallback ?? null;
+  const fallback_ledger = cli_fallback !== null ? new MidFlightFallback() : null;
+  const fallback_twins = cli_fallback !== null ? /* @__PURE__ */ new Map() : null;
   const all_rounds = [];
   let current_suffix = "";
   let current_user_prompt = question.user_prompt;
@@ -44921,7 +45723,10 @@ ${question.user_prompt}`,
       on_overrun,
       project,
       original_ask,
-      advisor_plans
+      advisor_plans,
+      cli_fallback,
+      fallback_ledger,
+      fallback_twins
     });
     opts.on_restate?.(restated);
   }
@@ -44944,6 +45749,9 @@ ${question.user_prompt}`,
         project,
         original_ask,
         advisor_plans,
+        cli_fallback,
+        fallback_ledger,
+        fallback_twins,
         split: current_suffix ? { stable: question.user_prompt, suffix: current_suffix } : null
       });
     }
@@ -44960,7 +45768,16 @@ ${question.user_prompt}`,
         }),
         budget,
         spent,
-        { table, on_overrun, project, original_ask, advisor_plans },
+        {
+          table,
+          on_overrun,
+          project,
+          original_ask,
+          advisor_plans,
+          cli_fallback,
+          fallback_ledger,
+          fallback_twins
+        },
         opts.on_repair ?? null
       );
     }
@@ -45209,27 +46026,6 @@ function run_consensus_scoring(members, deliberation_responses, opts = {}) {
     scoring_responses
   });
 }
-function _render_response_meta(r) {
-  const meta_dict = r.metadata ?? {};
-  const billable = Boolean(_metaGet(meta_dict, "billable", true));
-  const estimated = Boolean(_metaGet(meta_dict, "tokens_estimated", false));
-  const parts = [];
-  if (!billable) {
-    const label = _metaGet(meta_dict, "subscription_label", null) || "flat-rate";
-    parts.push(`cost: subscription (${label})`);
-  } else {
-    const cost_usd = _metaGet(meta_dict, "cost_usd", void 0);
-    if (typeof cost_usd === "number" && !(typeof cost_usd === "boolean")) {
-      parts.push(`cost: $${_pyFixed3(cost_usd, 4)}`);
-    }
-    const prefix = estimated ? "~" : "";
-    parts.push(
-      `tokens: ${prefix}${r.input_tokens} in / ${prefix}${r.output_tokens} out`
-    );
-  }
-  parts.push(`${r.latency_ms} ms`);
-  return `*${parts.join(" \xB7 ")}*`;
-}
 function _default_explain_confidence(mode) {
   if (mode === null) {
     return true;
@@ -45260,7 +46056,7 @@ function render7(responses, opts = {}) {
 *ERROR:* \`${r.error}\``);
       continue;
     }
-    const meta = _render_response_meta(r);
+    const meta = renderResponseMeta(r, { pyFixed: _pyFixed3 });
     blocks.push(`${header}
 
 ${meta}
@@ -45452,43 +46248,7 @@ function _render_bucket(items, explain = true) {
   }
   return lines.join("\n");
 }
-function _pyInt5(x) {
-  return Math.trunc(x);
-}
-function _pyReprInt(x) {
-  return String(x);
-}
-function _excTag(exc) {
-  if (exc instanceof Error) {
-    return `${exc.name}: ${exc.message}`;
-  }
-  return `Error: ${String(exc)}`;
-}
-function _setdefault(obj, key, value) {
-  if (!(key in obj)) {
-    obj[key] = value;
-  }
-}
-function _metaGet(obj, key, fallback) {
-  return key in obj ? obj[key] : fallback;
-}
-function _pyLStrip(s) {
-  return s.replace(/^\s+/, "");
-}
-function _pyRStrip2(s) {
-  return s.replace(/\s+$/, "");
-}
-function _pyLen5(s) {
-  let n = 0;
-  for (const _ of s) {
-    n += 1;
-  }
-  return n;
-}
-function _pySlice(s, start, end) {
-  return [...s].slice(start, end).join("");
-}
-var CostBudget, CouncilQuestion, OverrunEvent, DebateCostEstimate, DebateCheckpoint, DebateCapExceeded, PeerReviewResult, ConsensusResult, _DEFAULT_EXPLAIN_LENSES;
+var CouncilQuestion, DebateCostEstimate, DebateCheckpoint, DebateCapExceeded, PeerReviewResult, ConsensusResult, _DEFAULT_EXPLAIN_LENSES;
 var init_orchestrator = __esm({
   "src/scripts/ai_council/orchestrator.ts"() {
     "use strict";
@@ -45499,25 +46259,15 @@ var init_orchestrator = __esm({
     init_prompts2();
     init_debate_gates();
     init_stance_tally();
+    init_transport_resolver();
+    init_mid_flight_fallback();
+    init_spend_gate();
+    init_spend_gate();
+    init_response_render();
+    init_py_parity();
     init_blind_review();
     init_quorum();
     init_handoff();
-    CostBudget = class {
-      max_input_tokens;
-      max_output_tokens;
-      max_calls;
-      max_total_usd;
-      // 0 = USD ceiling disabled (token caps still apply)
-      daily_limit_usd;
-      // 0 = rolling 24h cap disabled (D3)
-      constructor(args = {}) {
-        this.max_input_tokens = args.max_input_tokens ?? 5e4;
-        this.max_output_tokens = args.max_output_tokens ?? 2e4;
-        this.max_calls = args.max_calls ?? 10;
-        this.max_total_usd = args.max_total_usd ?? 0;
-        this.daily_limit_usd = args.daily_limit_usd ?? 0;
-      }
-    };
     CouncilQuestion = class {
       mode;
       // one of: prompt, roadmap, diff, files
@@ -45530,36 +46280,6 @@ var init_orchestrator = __esm({
         this.max_tokens = args.max_tokens ?? DEFAULT_MAX_TOKENS;
       }
     };
-    OverrunEvent = class {
-      member_index;
-      member;
-      next_estimate;
-      // this member's projected cost
-      spent_input_tokens;
-      // already-billed totals BEFORE this member
-      spent_output_tokens;
-      spent_usd;
-      projected_total_usd;
-      // spent_usd + next_estimate.total_usd
-      daily_spent_usd;
-      // rolling 24h spend BEFORE this member (D3)
-      daily_limit_usd;
-      // the configured daily cap (0 = disabled)
-      breach_kind;
-      // "session" | "daily" | "tokens"
-      constructor(args) {
-        this.member_index = args.member_index;
-        this.member = args.member;
-        this.next_estimate = args.next_estimate;
-        this.spent_input_tokens = args.spent_input_tokens;
-        this.spent_output_tokens = args.spent_output_tokens;
-        this.spent_usd = args.spent_usd;
-        this.projected_total_usd = args.projected_total_usd;
-        this.daily_spent_usd = args.daily_spent_usd ?? 0;
-        this.daily_limit_usd = args.daily_limit_usd ?? 0;
-        this.breach_kind = args.breach_kind ?? "session";
-      }
-    };
     DebateCostEstimate = class {
       rounds;
       low_usd;
@@ -47091,7 +47811,7 @@ __export(council_cli_exports, {
   _parse_model_overrides: () => _parse_model_overrides,
   _parse_siblings_overrides: () => _parse_siblings_overrides,
   _postRunQuorum: () => _postRunQuorum,
-  _synthesize_ai_council_block: () => _synthesize_ai_council_block,
+  _synthesize_ai_council_block: () => synthesizeAiCouncilBlock,
   build_members: () => build_members,
   build_question: () => build_question,
   cmd_debate: () => cmd_debate,
@@ -47318,131 +48038,10 @@ function load_settings(p = SETTINGS_FILE2, opts = {}) {
   const settings = load_agent_settings({ project_path: p });
   if (fs78.existsSync(ai_council_path)) {
     const cfg = load_council_config(ai_council_path);
-    settings["ai_council"] = _synthesize_ai_council_block(cfg);
+    settings["ai_council"] = synthesizeAiCouncilBlock(cfg);
   }
   return settings;
 }
-function _synthesize_ai_council_block(cfg) {
-  const members = {};
-  for (const [name, m] of cfg.members) {
-    const entry = { enabled: m.enabled, model: m.model };
-    if (m.api_key_ref !== null) {
-      entry["api_key_ref"] = m.api_key_ref;
-    }
-    if (m.mode !== null) {
-      entry["mode"] = m.mode;
-    }
-    if (m.binary !== null) {
-      entry["binary"] = m.binary;
-    }
-    if (m.model_ladder && m.model_ladder.length > 0) {
-      entry["model_ladder"] = [...m.model_ladder];
-    }
-    if (m.prompt_cache_ttl !== "5m") {
-      entry["prompt_cache_ttl"] = m.prompt_cache_ttl;
-    }
-    members[name] = entry;
-  }
-  const advisors = {};
-  for (const [name, a] of cfg.advisors) {
-    const entry = {
-      enabled: a.enabled,
-      member: a.member,
-      persona: a.persona
-    };
-    if (a.model !== null) {
-      entry["model"] = a.model;
-    }
-    advisors[name] = entry;
-  }
-  const lensCostDisclosure = {};
-  for (const [lens, cd] of cfg.lens_overrides.cost_disclosure) {
-    lensCostDisclosure[lens] = {
-      mode: cd.mode,
-      threshold_usd: cd.threshold_usd,
-      show_per_member: cd.show_per_member
-    };
-  }
-  const lensModelDowngrade = {};
-  for (const [lens, md] of cfg.lens_overrides.model_downgrade) {
-    lensModelDowngrade[lens] = { enabled: md.enabled, auto_apply: md.auto_apply };
-  }
-  return {
-    enabled: cfg.enabled,
-    mode: cfg.defaults.mode,
-    min_rounds: cfg.defaults.min_rounds,
-    deep_min_rounds: cfg.defaults.deep_min_rounds,
-    max_output_tokens: cfg.defaults.max_output_tokens,
-    session_retention_days: cfg.defaults.session_retention_days,
-    debate_max_rounds: cfg.defaults.debate_max_rounds,
-    cost_budget: {
-      max_input_tokens: cfg.cost_budget.max_input_tokens,
-      max_output_tokens: cfg.cost_budget.max_output_tokens,
-      max_calls: cfg.cost_budget.max_calls,
-      max_total_usd: cfg.cost_budget.max_total_usd,
-      daily_limit_usd: cfg.cost_budget.daily_limit_usd
-    },
-    consensus_scoring: {
-      enabled: cfg.consensus_scoring.enabled,
-      strong_threshold: cfg.consensus_scoring.strong_threshold,
-      minority_threshold: cfg.consensus_scoring.minority_threshold,
-      lenses: [...cfg.consensus_scoring.lenses]
-    },
-    cli_call_budget: {
-      max_calls_per_day: _mapToObject(cfg.cli_call_budget.max_calls_per_day),
-      warn_at: cfg.cli_call_budget.warn_at
-    },
-    // Phase 3.3 (road-to-always-on-orchestration): was validated by
-    // `_build_config`/`_build_quorum` but never forwarded into the
-    // synthesized block, so `build_members` always saw `undefined` and
-    // silently fell back to `'majority'` regardless of the user's
-    // configured `quorum: <k>`. Additive key — callers that never read
-    // it observe no change.
-    quorum: cfg.quorum,
-    // Forwarded for the same reason `quorum` above had to be: a key that
-    // `_build_config` validates and this block drops is a key the loader
-    // enforces and the runtime never sees. That defect shipped once here
-    // already; repeating it for the shadow floor would silently pin every
-    // `floor_would_hold` to the default no matter what the operator set.
-    quorum_min_present: cfg.quorum_min_present,
-    necessity_classifier: {
-      enabled: cfg.necessity_classifier.enabled,
-      mode: cfg.necessity_classifier.mode,
-      user_explicit_mode: cfg.necessity_classifier.user_explicit_mode
-    },
-    model_downgrade: {
-      enabled: cfg.model_downgrade.enabled,
-      auto_apply: cfg.model_downgrade.auto_apply
-    },
-    debate: {
-      max_cost_usd: cfg.debate.max_cost_usd,
-      cost_disclosure: {
-        mode: cfg.debate.cost_disclosure.mode,
-        threshold_usd: cfg.debate.cost_disclosure.threshold_usd,
-        show_per_member: cfg.debate.cost_disclosure.show_per_member
-      }
-    },
-    lens_overrides: {
-      necessity_classifier_mode: _mapToObject(
-        cfg.lens_overrides.necessity_classifier_mode
-      ),
-      necessity_classifier_user_explicit_mode: _mapToObject(
-        cfg.lens_overrides.necessity_classifier_user_explicit_mode
-      ),
-      model_downgrade: lensModelDowngrade,
-      cost_disclosure: lensCostDisclosure
-    },
-    members,
-    advisors
-  };
-}
-function _mapToObject(m) {
-  const out = {};
-  for (const [k, v] of m) {
-    out[k] = v;
-  }
-  return out;
-}
 function _member_api_key_present(cfg) {
   const ref = cfg["api_key_ref"];
   if (typeof ref !== "string" || ref.trim() === "") {
@@ -47463,6 +48062,7 @@ function build_members(settings, opts = {}) {
   const quorum_out = opts.quorum_out ?? null;
   const probe_store = opts.probe_store ?? null;
   const qualification_out = opts.qualification_out ?? null;
+  const fallback_out = opts.fallback_out ?? null;
   const qualifications = [];
   const report2 = opts.environment_report ?? detectEnvironment();
   const ai = _isDict3(settings) ? settings["ai_council"] || {} : {};
@@ -47667,6 +48267,17 @@ function build_members(settings, opts = {}) {
       `no council member has \`enabled: true\` \u2014 enable at least one under members.* in ${COUNCIL_CONFIG_USER_GLOBAL_REL} (user-global root; never the project tree, ADR-104). \`agent-config council:status\` prints the resolved path.`
     );
   }
+  if (fallback_out !== null) {
+    const fallback_cfg = _isDict3(ai["fallback"]) ? ai["fallback"] : {};
+    fallback_out.options = buildFallbackOptions({
+      apiOnQuota: _pyBool2(fallback_cfg["api_on_quota"]),
+      hasApiRung: (p) => _API_PROVIDERS.has(p),
+      memberConfig: (p) => members_cfg[p] || {},
+      modelOverride: (p) => overrides[p] ?? null,
+      constructApi: _construct_api_member,
+      emit: appendEvent
+    });
+  }
   return members;
 }
 function _setDifference(items, known) {
@@ -47968,7 +48579,7 @@ function _peer_review_cost_delta(ai_cfg, args, estimates, n_billable) {
   const extra_usd = estimates.reduce((acc, e) => acc + _total_usd2(e), 0);
   return [extra_calls, extra_usd];
 }
-function _maybe_run_chairman(ai_cfg, question, members, responses, budget, table, project, args) {
+function _maybe_run_chairman(ai_cfg, question, members, responses, budget, table, project, args, cli_fallback = null) {
   const ch = (_isDict3(ai_cfg) ? ai_cfg["chairman"] : null) || {};
   const mode = typeof ch["mode"] === "string" ? ch["mode"] : "host";
   if (mode === "host") {
@@ -48037,7 +48648,8 @@ ${transcript}`;
   const out = consult([client], synthQ, budget, {
     table,
     project,
-    original_ask: args.original_ask
+    original_ask: args.original_ask,
+    cli_fallback
   });
   const r = out[0] ?? null;
   if (r === null || r.error !== null || r.text.trim() === "") {
@@ -48624,6 +49236,20 @@ function _resolvedTransportFor(name, member, report2) {
     binaryOverride: member.binary
   });
 }
+function _posture(name, member) {
+  const t = _resolvedTransportFor(name, member);
+  const keyless = {
+    anthropic: () => Boolean(load_anthropic_key()),
+    openai: () => Boolean(load_openai_key())
+  };
+  return fallbackPostureFor({
+    transport: t.available ? t.transport : null,
+    hasApiRung: _API_PROVIDERS.has(name),
+    apiKeyRef: member.api_key_ref,
+    refResolves: member.api_key_ref === null ? void 0 : _member_api_key_present({ api_key_ref: member.api_key_ref }),
+    keylessResolves: keyless[name]
+  });
+}
 function cmd_status(args, opts = {}) {
   const env = opts.env ?? process.env;
   const override = env[COUNCIL_CONFIG_ENV];
@@ -48670,6 +49296,12 @@ function cmd_status(args, opts = {}) {
             ];
           })
         ),
+        fallback: {
+          api_on_quota: cfg?.fallback.api_on_quota ?? false,
+          posture: Object.fromEntries(
+            enabledMembers.map(([n, m]) => [n, _posture(n, m)])
+          )
+        },
         ignored_transport_keys: cfg?.ignored_transport_keys ?? [],
         qualification: qualificationJson(qualifications),
         qualified_members: countableSeats(qualifications),
@@ -48710,6 +49342,13 @@ function cmd_status(args, opts = {}) {
       const billing = t.available ? ` \xB7 ${t.billing}` : "";
       const detail = t.available ? t.transport : `unavailable \u2014 ${t.reason ?? "no usable transport"}`;
       _stdout2(`  transport        ${name}: ${detail}${billing}
+`);
+    }
+    for (const line of renderPostureLines(
+      enabledMembers.map(([n, m]) => [n, _posture(n, m)]),
+      cfg.fallback.api_on_quota
+    )) {
+      _stdout2(`${line}
 `);
     }
     for (const line of qualificationStatusLines(qualifications)) {
@@ -48799,6 +49438,7 @@ function cmd_run(args, opts = {}) {
   const explicit_overrides = _parse_model_overrides(_getattr3(args, "model", null));
   const skipped = [];
   const quorum_out = { result: null };
+  const fallback_out = { options: null };
   if (members === null) {
     members = build_members(settings, {
       invocation_mode: args.mode_override,
@@ -48806,7 +49446,8 @@ function cmd_run(args, opts = {}) {
       siblings_overrides: _parse_siblings_overrides(_getattr3(args, "siblings", null)),
       skipped,
       quorum_out,
-      probe_store: readProbeStore(REPO_ROOT11)
+      probe_store: readProbeStore(REPO_ROOT11),
+      fallback_out
     });
   }
   const roster_before_dispatch = members.length;
@@ -48939,6 +49580,10 @@ function cmd_run(args, opts = {}) {
     stance_tally: stance_tally_on,
     member_prompt_suffix,
     no_project_context_members,
+    // Mid-flight cli→api fallback (ai-council-config.md § failure-class-
+    // gated). `null` when the caller injected `members` directly — a
+    // pre-built roster carries no config to derive the factory from.
+    cli_fallback: fallback_out.options,
     // Interactive one-line confirm (cmd_run has no --auto-continue); the
     // repaired-call cost is collected so cost_usd_actual stays honest.
     on_stance_repair: stance_tally_on ? (member) => _make_repair_confirm(false)(member, "missing stance line") : null,
@@ -48982,7 +49627,17 @@ function cmd_run(args, opts = {}) {
     { persona_labels }
   );
   const consensus = _maybe_run_consensus(ai_cfg, question, members, responses, budget, table, project, args);
-  const chairman = _maybe_run_chairman(ai_cfg, question, members, responses, budget, table, project, args);
+  const chairman = _maybe_run_chairman(
+    ai_cfg,
+    question,
+    members,
+    responses,
+    budget,
+    table,
+    project,
+    args,
+    fallback_out.options
+  );
   const blind_chairman_on = args.blind_chairman === true;
   const chairman_fields_on = args.chairman_fields === true;
   let blind_review_map = null;
@@ -49176,6 +49831,7 @@ function cmd_debate(args, opts = {}) {
   const explicit_overrides = _parse_model_overrides(_getattr3(args, "model", null));
   const skipped = [];
   const quorum_out = { result: null };
+  const fallback_out = { options: null };
   if (members === null) {
     members = build_members(settings, {
       invocation_mode: args.mode_override,
@@ -49184,7 +49840,8 @@ function cmd_debate(args, opts = {}) {
       skipped,
       quorum_out,
       probe_store: readProbeStore(REPO_ROOT11),
-      command: "debate"
+      command: "debate",
+      fallback_out
     });
   }
   if (table === null) {
@@ -49355,7 +50012,8 @@ ${blocks.join("\n\n")}
       restate: restate_on,
       on_restate: restate_on ? on_restate : null,
       advisor_plans,
-      seed_round_1: seed
+      seed_round_1: seed,
+      cli_fallback: fallback_out.options
     });
   } catch (exc) {
     if (exc instanceof DebateCapExceeded) {
@@ -49976,6 +50634,10 @@ var init_council_cli = __esm({
     init_qualification_wiring();
     init_probe_store();
     init_events_log();
+    init_map_to_object();
+    init_council_settings_block();
+    init_council_fallback_posture();
+    init_council_fallback_wiring();
     init_necessity();
     init_orchestrator();
     init_pricing();