@event4u/agent-config 14.8.0 → 14.10.0

package/dist/mcp/server.mjs

@@ -1841,17 +1841,17 @@ var require_visit = __commonJS({
     visit.BREAK = BREAK;
     visit.SKIP = SKIP;
     visit.REMOVE = REMOVE;
-    function visit_(key, node, visitor, path81) {
-      const ctrl = callVisitor(key, node, visitor, path81);
+    function visit_(key, node, visitor, path83) {
+      const ctrl = callVisitor(key, node, visitor, path83);
       if (identity.isNode(ctrl) || identity.isPair(ctrl)) {
-        replaceNode(key, path81, ctrl);
-        return visit_(key, ctrl, visitor, path81);
+        replaceNode(key, path83, ctrl);
+        return visit_(key, ctrl, visitor, path83);
       }
       if (typeof ctrl !== "symbol") {
         if (identity.isCollection(node)) {
-          path81 = Object.freeze(path81.concat(node));
+          path83 = Object.freeze(path83.concat(node));
           for (let i = 0; i < node.items.length; ++i) {
-            const ci = visit_(i, node.items[i], visitor, path81);
+            const ci = visit_(i, node.items[i], visitor, path83);
             if (typeof ci === "number")
               i = ci - 1;
             else if (ci === BREAK)
@@ -1862,13 +1862,13 @@ var require_visit = __commonJS({
             }
           }
         } else if (identity.isPair(node)) {
-          path81 = Object.freeze(path81.concat(node));
-          const ck = visit_("key", node.key, visitor, path81);
+          path83 = Object.freeze(path83.concat(node));
+          const ck = visit_("key", node.key, visitor, path83);
           if (ck === BREAK)
             return BREAK;
           else if (ck === REMOVE)
             node.key = null;
-          const cv = visit_("value", node.value, visitor, path81);
+          const cv = visit_("value", node.value, visitor, path83);
           if (cv === BREAK)
             return BREAK;
           else if (cv === REMOVE)
@@ -1889,17 +1889,17 @@ var require_visit = __commonJS({
     visitAsync.BREAK = BREAK;
     visitAsync.SKIP = SKIP;
     visitAsync.REMOVE = REMOVE;
-    async function visitAsync_(key, node, visitor, path81) {
-      const ctrl = await callVisitor(key, node, visitor, path81);
+    async function visitAsync_(key, node, visitor, path83) {
+      const ctrl = await callVisitor(key, node, visitor, path83);
       if (identity.isNode(ctrl) || identity.isPair(ctrl)) {
-        replaceNode(key, path81, ctrl);
-        return visitAsync_(key, ctrl, visitor, path81);
+        replaceNode(key, path83, ctrl);
+        return visitAsync_(key, ctrl, visitor, path83);
       }
       if (typeof ctrl !== "symbol") {
         if (identity.isCollection(node)) {
-          path81 = Object.freeze(path81.concat(node));
+          path83 = Object.freeze(path83.concat(node));
           for (let i = 0; i < node.items.length; ++i) {
-            const ci = await visitAsync_(i, node.items[i], visitor, path81);
+            const ci = await visitAsync_(i, node.items[i], visitor, path83);
             if (typeof ci === "number")
               i = ci - 1;
             else if (ci === BREAK)
@@ -1910,13 +1910,13 @@ var require_visit = __commonJS({
             }
           }
         } else if (identity.isPair(node)) {
-          path81 = Object.freeze(path81.concat(node));
-          const ck = await visitAsync_("key", node.key, visitor, path81);
+          path83 = Object.freeze(path83.concat(node));
+          const ck = await visitAsync_("key", node.key, visitor, path83);
           if (ck === BREAK)
             return BREAK;
           else if (ck === REMOVE)
             node.key = null;
-          const cv = await visitAsync_("value", node.value, visitor, path81);
+          const cv = await visitAsync_("value", node.value, visitor, path83);
           if (cv === BREAK)
             return BREAK;
           else if (cv === REMOVE)
@@ -1943,23 +1943,23 @@ var require_visit = __commonJS({
       }
       return visitor;
     }
-    function callVisitor(key, node, visitor, path81) {
+    function callVisitor(key, node, visitor, path83) {
       if (typeof visitor === "function")
-        return visitor(key, node, path81);
+        return visitor(key, node, path83);
       if (identity.isMap(node))
-        return visitor.Map?.(key, node, path81);
+        return visitor.Map?.(key, node, path83);
       if (identity.isSeq(node))
-        return visitor.Seq?.(key, node, path81);
+        return visitor.Seq?.(key, node, path83);
       if (identity.isPair(node))
-        return visitor.Pair?.(key, node, path81);
+        return visitor.Pair?.(key, node, path83);
       if (identity.isScalar(node))
-        return visitor.Scalar?.(key, node, path81);
+        return visitor.Scalar?.(key, node, path83);
       if (identity.isAlias(node))
-        return visitor.Alias?.(key, node, path81);
+        return visitor.Alias?.(key, node, path83);
       return void 0;
     }
-    function replaceNode(key, path81, node) {
-      const parent = path81[path81.length - 1];
+    function replaceNode(key, path83, node) {
+      const parent = path83[path83.length - 1];
       if (identity.isCollection(parent)) {
         parent.items[key] = node;
       } else if (identity.isPair(parent)) {
@@ -2569,10 +2569,10 @@ var require_Collection = __commonJS({
     var createNode = require_createNode();
     var identity = require_identity();
     var Node = require_Node();
-    function collectionFromPath(schema, path81, value) {
+    function collectionFromPath(schema, path83, value) {
       let v = value;
-      for (let i = path81.length - 1; i >= 0; --i) {
-        const k = path81[i];
+      for (let i = path83.length - 1; i >= 0; --i) {
+        const k = path83[i];
         if (typeof k === "number" && Number.isInteger(k) && k >= 0) {
           const a = [];
           a[k] = v;
@@ -2591,7 +2591,7 @@ var require_Collection = __commonJS({
         sourceObjects: /* @__PURE__ */ new Map()
       });
     }
-    var isEmptyPath = (path81) => path81 == null || typeof path81 === "object" && !!path81[Symbol.iterator]().next().done;
+    var isEmptyPath = (path83) => path83 == null || typeof path83 === "object" && !!path83[Symbol.iterator]().next().done;
     var Collection = class extends Node.NodeBase {
       constructor(type, schema) {
         super(type);
@@ -2621,11 +2621,11 @@ var require_Collection = __commonJS({
        * be a Pair instance or a `{ key, value }` object, which may not have a key
        * that already exists in the map.
        */
-      addIn(path81, value) {
-        if (isEmptyPath(path81))
+      addIn(path83, value) {
+        if (isEmptyPath(path83))
           this.add(value);
         else {
-          const [key, ...rest] = path81;
+          const [key, ...rest] = path83;
           const node = this.get(key, true);
           if (identity.isCollection(node))
             node.addIn(rest, value);
@@ -2639,8 +2639,8 @@ var require_Collection = __commonJS({
        * Removes a value from the collection.
        * @returns `true` if the item was found and removed.
        */
-      deleteIn(path81) {
-        const [key, ...rest] = path81;
+      deleteIn(path83) {
+        const [key, ...rest] = path83;
         if (rest.length === 0)
           return this.delete(key);
         const node = this.get(key, true);
@@ -2654,8 +2654,8 @@ var require_Collection = __commonJS({
        * scalar values from their surrounding node; to disable set `keepScalar` to
        * `true` (collections are always returned intact).
        */
-      getIn(path81, keepScalar) {
-        const [key, ...rest] = path81;
+      getIn(path83, keepScalar) {
+        const [key, ...rest] = path83;
         const node = this.get(key, true);
         if (rest.length === 0)
           return !keepScalar && identity.isScalar(node) ? node.value : node;
@@ -2673,8 +2673,8 @@ var require_Collection = __commonJS({
       /**
        * Checks if the collection includes a value with the key `key`.
        */
-      hasIn(path81) {
-        const [key, ...rest] = path81;
+      hasIn(path83) {
+        const [key, ...rest] = path83;
         if (rest.length === 0)
           return this.has(key);
         const node = this.get(key, true);
@@ -2684,8 +2684,8 @@ var require_Collection = __commonJS({
        * Sets a value in this collection. For `!!set`, `value` needs to be a
        * boolean to add/remove the item from the set.
        */
-      setIn(path81, value) {
-        const [key, ...rest] = path81;
+      setIn(path83, value) {
+        const [key, ...rest] = path83;
         if (rest.length === 0) {
           this.set(key, value);
         } else {
@@ -3426,16 +3426,16 @@ var require_merge = __commonJS({
     "use strict";
     var identity = require_identity();
     var Scalar = require_Scalar();
-    var MERGE_KEY2 = "<<";
+    var MERGE_KEY = "<<";
     var merge = {
-      identify: (value) => value === MERGE_KEY2 || typeof value === "symbol" && value.description === MERGE_KEY2,
+      identify: (value) => value === MERGE_KEY || typeof value === "symbol" && value.description === MERGE_KEY,
       default: "key",
       tag: "tag:yaml.org,2002:merge",
       test: /^<<$/,
-      resolve: () => Object.assign(new Scalar.Scalar(Symbol(MERGE_KEY2)), {
+      resolve: () => Object.assign(new Scalar.Scalar(Symbol(MERGE_KEY)), {
         addToJSMap: addMergeToJSMap
       }),
-      stringify: () => MERGE_KEY2
+      stringify: () => MERGE_KEY
     };
     var isMergeKey = (ctx, key) => (merge.identify(key) || identity.isScalar(key) && (!key.type || key.type === Scalar.Scalar.PLAIN) && merge.identify(key.value)) && ctx?.doc.schema.tags.some((tag) => tag.tag === merge.tag && tag.default);
     function addMergeToJSMap(ctx, map, value) {
@@ -5200,9 +5200,9 @@ var require_Document = __commonJS({
           this.contents.add(value);
       }
       /** Adds a value to the document. */
-      addIn(path81, value) {
+      addIn(path83, value) {
         if (assertCollection(this.contents))
-          this.contents.addIn(path81, value);
+          this.contents.addIn(path83, value);
       }
       /**
        * Create a new `Alias` node, ensuring that the target `node` has the required anchor.
@@ -5277,14 +5277,14 @@ var require_Document = __commonJS({
        * Removes a value from the document.
        * @returns `true` if the item was found and removed.
        */
-      deleteIn(path81) {
-        if (Collection.isEmptyPath(path81)) {
+      deleteIn(path83) {
+        if (Collection.isEmptyPath(path83)) {
           if (this.contents == null)
             return false;
           this.contents = null;
           return true;
         }
-        return assertCollection(this.contents) ? this.contents.deleteIn(path81) : false;
+        return assertCollection(this.contents) ? this.contents.deleteIn(path83) : false;
       }
       /**
        * Returns item at `key`, or `undefined` if not found. By default unwraps
@@ -5299,10 +5299,10 @@ var require_Document = __commonJS({
        * scalar values from their surrounding node; to disable set `keepScalar` to
        * `true` (collections are always returned intact).
        */
-      getIn(path81, keepScalar) {
-        if (Collection.isEmptyPath(path81))
+      getIn(path83, keepScalar) {
+        if (Collection.isEmptyPath(path83))
           return !keepScalar && identity.isScalar(this.contents) ? this.contents.value : this.contents;
-        return identity.isCollection(this.contents) ? this.contents.getIn(path81, keepScalar) : void 0;
+        return identity.isCollection(this.contents) ? this.contents.getIn(path83, keepScalar) : void 0;
       }
       /**
        * Checks if the document includes a value with the key `key`.
@@ -5313,10 +5313,10 @@ var require_Document = __commonJS({
       /**
        * Checks if the document includes a value at `path`.
        */
-      hasIn(path81) {
-        if (Collection.isEmptyPath(path81))
+      hasIn(path83) {
+        if (Collection.isEmptyPath(path83))
           return this.contents !== void 0;
-        return identity.isCollection(this.contents) ? this.contents.hasIn(path81) : false;
+        return identity.isCollection(this.contents) ? this.contents.hasIn(path83) : false;
       }
       /**
        * Sets a value in this document. For `!!set`, `value` needs to be a
@@ -5333,13 +5333,13 @@ var require_Document = __commonJS({
        * Sets a value in this document. For `!!set`, `value` needs to be a
        * boolean to add/remove the item from the set.
        */
-      setIn(path81, value) {
-        if (Collection.isEmptyPath(path81)) {
+      setIn(path83, value) {
+        if (Collection.isEmptyPath(path83)) {
           this.contents = value;
         } else if (this.contents == null) {
-          this.contents = Collection.collectionFromPath(this.schema, Array.from(path81), value);
+          this.contents = Collection.collectionFromPath(this.schema, Array.from(path83), value);
         } else if (assertCollection(this.contents)) {
-          this.contents.setIn(path81, value);
+          this.contents.setIn(path83, value);
         }
       }
       /**
@@ -7299,9 +7299,9 @@ var require_cst_visit = __commonJS({
     visit.BREAK = BREAK;
     visit.SKIP = SKIP;
     visit.REMOVE = REMOVE;
-    visit.itemAtPath = (cst, path81) => {
+    visit.itemAtPath = (cst, path83) => {
       let item = cst;
-      for (const [field, index] of path81) {
+      for (const [field, index] of path83) {
         const tok = item?.[field];
         if (tok && "items" in tok) {
           item = tok.items[index];
@@ -7310,23 +7310,23 @@ var require_cst_visit = __commonJS({
       }
       return item;
     };
-    visit.parentCollection = (cst, path81) => {
-      const parent = visit.itemAtPath(cst, path81.slice(0, -1));
-      const field = path81[path81.length - 1][0];
+    visit.parentCollection = (cst, path83) => {
+      const parent = visit.itemAtPath(cst, path83.slice(0, -1));
+      const field = path83[path83.length - 1][0];
       const coll = parent?.[field];
       if (coll && "items" in coll)
         return coll;
       throw new Error("Parent collection not found");
     };
-    function _visit(path81, item, visitor) {
-      let ctrl = visitor(item, path81);
+    function _visit(path83, item, visitor) {
+      let ctrl = visitor(item, path83);
       if (typeof ctrl === "symbol")
         return ctrl;
       for (const field of ["key", "value"]) {
         const token = item[field];
         if (token && "items" in token) {
           for (let i = 0; i < token.items.length; ++i) {
-            const ci = _visit(Object.freeze(path81.concat([[field, i]])), token.items[i], visitor);
+            const ci = _visit(Object.freeze(path83.concat([[field, i]])), token.items[i], visitor);
             if (typeof ci === "number")
               i = ci - 1;
             else if (ci === BREAK)
@@ -7337,10 +7337,10 @@ var require_cst_visit = __commonJS({
             }
           }
           if (typeof ctrl === "function" && field === "key")
-            ctrl = ctrl(item, path81);
+            ctrl = ctrl(item, path83);
         }
       }
-      return typeof ctrl === "function" ? ctrl(item, path81) : ctrl;
+      return typeof ctrl === "function" ? ctrl(item, path83) : ctrl;
     }
     exports.visit = visit;
   }
@@ -8642,14 +8642,14 @@ var require_parser = __commonJS({
             case "scalar":
             case "single-quoted-scalar":
             case "double-quoted-scalar": {
-              const fs84 = this.flowScalar(this.type);
+              const fs86 = this.flowScalar(this.type);
               if (atNextItem || it.value) {
-                map.items.push({ start, key: fs84, sep: [] });
+                map.items.push({ start, key: fs86, sep: [] });
                 this.onKeyLine = true;
               } else if (it.sep) {
-                this.stack.push(fs84);
+                this.stack.push(fs86);
               } else {
-                Object.assign(it, { key: fs84, sep: [] });
+                Object.assign(it, { key: fs86, sep: [] });
                 this.onKeyLine = true;
               }
               return;
@@ -8777,13 +8777,13 @@ var require_parser = __commonJS({
             case "scalar":
             case "single-quoted-scalar":
             case "double-quoted-scalar": {
-              const fs84 = this.flowScalar(this.type);
+              const fs86 = this.flowScalar(this.type);
               if (!it || it.value)
-                fc.items.push({ start: [], key: fs84, sep: [] });
+                fc.items.push({ start: [], key: fs86, sep: [] });
               else if (it.sep)
-                this.stack.push(fs84);
+                this.stack.push(fs86);
               else
-                Object.assign(it, { key: fs84, sep: [] });
+                Object.assign(it, { key: fs86, sep: [] });
               return;
             }
             case "flow-map-end":
@@ -20454,6 +20454,22 @@ function _getStr(d, key, dflt) {
   }
   return String(v);
 }
+function _runtime_enforcement_lines() {
+  return [
+    "runtime_enforcement:",
+    "  # Four states, and no others: detects | warns | blocks | not-enforceable-on-host.",
+    "  # Derived from src/scripts/hook_manifest.yaml (fail_closed + severity), never",
+    "  # hand-written \u2014 a manifest row that gained teeth would have to change this one.",
+    "  - hook: injection-scan",
+    "    slot: post_tool_use",
+    "    state: warns",
+    "    default: off",
+    "    blocks_legal_on_any_host: false",
+    "    reason: " + _scalar(
+      "fail_closed: false + severity: advisory in hook_manifest.yaml \u2014 it reports through the host and cannot refuse, so it warns and never blocks. Ships enabled: false; the detector was measured at 99.00% recall and a 0.85% false-positive rate over internal/bench/corpora/encoding-channels/ before any default flip is even discussable.<!-- claim:injection-scan-corpus-rates -->"
+    )
+  ];
+}
 function build() {
   const packs = _load_packs();
   const skillMap = _skill_packs();
@@ -20540,6 +20556,8 @@ function build() {
     }
   }
   lines.push("");
+  lines.push(..._runtime_enforcement_lines());
+  lines.push("");
   lines.push("gaps:");
   if (gaps.length > 0) {
     const sortedGaps = [...gaps].sort((a, b) => a.id < b.id ? -1 : a.id > b.id ? 1 : 0);
@@ -22068,8 +22086,8 @@ function lockfile_path(env) {
   }
   return write_target("installed.lock", { env: env ?? null });
 }
-function read_lockfile(path81) {
-  const target = path81 ?? lockfile_path();
+function read_lockfile(path83) {
+  const target = path83 ?? lockfile_path();
   let text;
   try {
     text = fs33.readFileSync(target, { encoding: "utf-8" });
@@ -22286,18 +22304,18 @@ function manifest_path(project_root, env) {
   }
   return fsPath.join(project_root, DEFAULT_MANIFEST_RELATIVE);
 }
-function read_manifest(path81) {
+function read_manifest(path83) {
   let text;
   try {
-    text = require_read_text(path81);
+    text = require_read_text(path83);
   } catch {
     return null;
   }
   const data = _parse_manual(text);
   return _normalise_v2_shape(data);
 }
-function require_read_text(path81) {
-  return fs35.readFileSync(path81, { encoding: "utf-8" });
+function require_read_text(path83) {
+  return fs35.readFileSync(path83, { encoding: "utf-8" });
 }
 function _normalise_v2_shape(data) {
   if (data["tools"] === void 0 || data["tools"] === null) {
@@ -22478,9 +22496,9 @@ function stable_sort(items, key) {
     return a.index - b.index;
   }).map((entry) => entry.item);
 }
-function write_manifest(path81, version, tools, options = {}) {
+function write_manifest(path83, version, tools, options = {}) {
   const rendered = _render(version, tools, { deploy_roots: options.deploy_roots ?? null });
-  return write_atomic(path81, rendered);
+  return write_atomic(path83, rendered);
 }
 function upsert_tool(existing, options) {
   const {
@@ -23092,9 +23110,9 @@ function defineScalarTag(tagName, options) {
     matchByTagPrefix: options.matchByTagPrefix ?? false,
     implicitFirstChars: options.implicitFirstChars ?? null,
     resolve: options.resolve,
-    identify: options.identify ?? null,
+    identify: options.identify,
     represent: options.represent ?? ((data) => String(data)),
-    representTagName: options.representTagName ?? null
+    representTagName: options.representTagName ?? (() => tagName)
   };
 }
 function defineSequenceTag(tagName, options) {
@@ -23108,9 +23126,9 @@ function defineSequenceTag(tagName, options) {
     addItem: options.addItem,
     finalize: options.finalize ?? ((carrier) => carrier),
     carrierIsResult,
-    identify: options.identify ?? null,
+    identify: options.identify,
     represent: options.represent ?? ((data) => data),
-    representTagName: options.representTagName ?? null
+    representTagName: options.representTagName ?? (() => tagName)
   };
 }
 function defineMappingTag(tagName, options) {
@@ -23127,9 +23145,9 @@ function defineMappingTag(tagName, options) {
     get: options.get,
     finalize: options.finalize ?? ((carrier) => carrier),
     carrierIsResult,
-    identify: options.identify ?? null,
+    identify: options.identify,
     represent: options.represent ?? ((data) => data),
-    representTagName: options.representTagName ?? null
+    representTagName: options.representTagName ?? (() => tagName)
   };
 }
 function parseYamlInteger$2(source) {
@@ -23397,11 +23415,10 @@ function simpleEscapeSequence(c) {
       return "";
   }
 }
-var NOT_RESOLVED, MERGE_KEY, strTag, NULL_VALUES$1, nullCoreTag, nullJsonTag, NULL_VALUES, nullYaml11Tag, TRUE_VALUES$2, FALSE_VALUES$2, boolCoreTag, TRUE_VALUES$1, FALSE_VALUES$1, boolJsonTag, TRUE_VALUES, FALSE_VALUES, boolYaml11Tag, YAML_INTEGER_IMPLICIT_PATTERN$1, YAML_INTEGER_EXPLICIT_PATTERN$1, intCoreTag, YAML_INTEGER_IMPLICIT_PATTERN, YAML_INTEGER_EXPLICIT_PATTERN, intJsonTag, YAML_INTEGER_PATTERN, intYaml11Tag, YAML_FLOAT_PATTERN$1, YAML_FLOAT_SPECIAL_PATTERN$1, floatCoreTag, YAML_FLOAT_IMPLICIT_PATTERN, YAML_FLOAT_EXPLICIT_PATTERN, floatJsonTag, YAML_FLOAT_PATTERN, YAML_FLOAT_SPECIAL_PATTERN, floatYaml11Tag, mergeTag, BASE64_PATTERN, binaryTag, YAML_DATE_REGEXP, YAML_TIMESTAMP_REGEXP, timestampTag, seqTag, omapTag, pairsTag, mapTag, setTag, Schema, FAILSAFE_SCHEMA, JSON_SCHEMA, CORE_SCHEMA, YAML11_SCHEMA, realMapTag, legacyMapTag, simpleEscapeCheck, simpleEscapeMap, DEFAULT_TAG_HANDLERS, DEFAULT_CONSTRUCTOR_OPTIONS, NS_URI_CHAR, NS_TAG_CHAR, PATTERN_TAG_URI, PATTERN_TAG_SUFFIX, PATTERN_TAG_PREFIX, DEFAULT_PARSER_OPTIONS, DEFAULT_LOAD_OPTIONS, ESCAPE_SEQUENCES, DEFAULT_PRESENTER_OPTIONS, DEFAULT_DUMP_SCHEMA, DEFAULT_DUMP_OPTIONS;
+var NOT_RESOLVED, strTag, NULL_VALUES$1, nullCoreTag, nullJsonTag, NULL_VALUES, nullYaml11Tag, TRUE_VALUES$2, FALSE_VALUES$2, boolCoreTag, TRUE_VALUES$1, FALSE_VALUES$1, boolJsonTag, TRUE_VALUES, FALSE_VALUES, boolYaml11Tag, YAML_INTEGER_IMPLICIT_PATTERN$1, YAML_INTEGER_EXPLICIT_PATTERN$1, intCoreTag, YAML_INTEGER_IMPLICIT_PATTERN, YAML_INTEGER_EXPLICIT_PATTERN, intJsonTag, YAML_INTEGER_PATTERN, intYaml11Tag, YAML_FLOAT_PATTERN$1, YAML_FLOAT_SPECIAL_PATTERN$1, floatCoreTag, YAML_FLOAT_IMPLICIT_PATTERN, YAML_FLOAT_EXPLICIT_PATTERN, floatJsonTag, YAML_FLOAT_PATTERN, YAML_FLOAT_SPECIAL_PATTERN, floatYaml11Tag, mergeTag, BASE64_PATTERN, binaryTag, YAML_DATE_REGEXP, YAML_TIMESTAMP_REGEXP, timestampTag, seqTag, omapTag, pairsTag, mapTag, setTag, Schema, FAILSAFE_SCHEMA, JSON_SCHEMA, CORE_SCHEMA, YAML11_SCHEMA, DUMP_SCHEMA, realMapTag, legacyMapTag, EVENT_ID, SCALAR_STYLE, COLLECTION_STYLE, CHOMPING_MODE, simpleEscapeCheck, simpleEscapeMap, DEFAULT_TAG_HANDLERS, DEFAULT_CONSTRUCTOR_OPTIONS, NS_URI_CHAR, NS_TAG_CHAR, PATTERN_TAG_URI, PATTERN_TAG_SUFFIX, PATTERN_TAG_PREFIX, DEFAULT_PARSER_OPTIONS, DEFAULT_LOAD_OPTIONS, ESCAPE_SEQUENCES, DEFAULT_PRESENTER_OPTIONS, DEFAULT_DUMP_OPTIONS, EVENT_DOCUMENT, EVENT_SEQUENCE, EVENT_MAPPING, EVENT_SCALAR, EVENT_ALIAS, EVENT_POP, SCALAR_STYLE_PLAIN, SCALAR_STYLE_SINGLE_QUOTED, SCALAR_STYLE_DOUBLE_QUOTED, SCALAR_STYLE_LITERAL_BLOCK, SCALAR_STYLE_FOLDED_BLOCK, COLLECTION_STYLE_BLOCK, COLLECTION_STYLE_FLOW, CHOMPING_CLIP, CHOMPING_STRIP, CHOMPING_KEEP;
 var init_js_yaml = __esm({
   "node_modules/js-yaml/dist/js-yaml.mjs"() {
     NOT_RESOLVED = /* @__PURE__ */ Symbol("NOT_RESOLVED");
-    MERGE_KEY = /* @__PURE__ */ Symbol("MERGE_KEY");
     strTag = defineScalarTag("tag:yaml.org,2002:str", {
       resolve: (source) => source,
       identify: (data) => typeof data === "string"
@@ -23622,9 +23639,10 @@ var init_js_yaml = __esm({
       implicit: true,
       implicitFirstChars: ["<"],
       resolve: (source, isExplicit) => {
-        if (source === "<<" || isExplicit && source === "") return MERGE_KEY;
+        if (source === "<<" || isExplicit && source === "") return "<<";
         return NOT_RESOLVED;
-      }
+      },
+      identify: () => false
     });
     BASE64_PATTERN = /^[A-Za-z0-9+/]*={0,2}$/;
     binaryTag = defineScalarTag("tag:yaml.org,2002:binary", {
@@ -23668,7 +23686,8 @@ var init_js_yaml = __esm({
         carrier.list.push(item);
         return "";
       },
-      finalize: (carrier) => carrier.list
+      finalize: (carrier) => carrier.list,
+      identify: () => false
     });
     pairsTag = defineSequenceTag("tag:yaml.org,2002:pairs", {
       create: () => [],
@@ -23684,7 +23703,8 @@ var init_js_yaml = __esm({
         if (keys.length !== 1) return "cannot resolve a pairs item";
         container.push([keys[0], object[keys[0]]]);
         return "";
-      }
+      },
+      identify: () => false
     });
     mapTag = defineMappingTag("tag:yaml.org,2002:map", {
       create: () => ({}),
@@ -23736,11 +23756,35 @@ var init_js_yaml = __esm({
     });
     Schema = class Schema2 {
       tags;
+      /** @internal */
       implicitScalarTags;
+      /**
+      * Dispatch implicit scalar resolvers by `source.charAt(0)`. Each bucket holds
+      * the resolvers that may match that key, in schema order; a key absent from
+      * the map uses
+      * {@link Schema.implicitScalarAnyFirstChar}
+      * (resolvers that declared no first-char constraint, so they apply to any
+      * first character).
+      */
       implicitScalarByFirstChar;
       implicitScalarAnyFirstChar;
+      /**
+      * The default scalar tag (`!!str`), resolved once so the composer's fallback
+      * for unresolved plain scalars avoids a keyed lookup per scalar.
+      *
+      * @internal
+      */
       defaultScalarTag;
+      /**
+      * The default container tags (`!!seq` / `!!map`), used by the dumper: when a
+      * value is identified by its default tag, the tag is implicit and not
+      * printed. Undefined if the schema does not define them (then such values
+      * can't be dumped).
+      *
+      * @internal
+      */
       defaultSequenceTag;
+      /** @internal */
       defaultMappingTag;
       exact;
       prefix;
@@ -23786,6 +23830,52 @@ var init_js_yaml = __esm({
         this.exact = exact;
         this.prefix = prefix;
       }
+      /** @internal */
+      lookupScalarTag(tagName) {
+        const exactTag = this.exact.scalar[tagName];
+        if (exactTag) return exactTag;
+        for (const tag of this.prefix.scalar) if (tagName.startsWith(tag.tagName)) return tag;
+      }
+      /** @internal */
+      lookupSequenceTag(tagName) {
+        const exactTag = this.exact.sequence[tagName];
+        if (exactTag) return exactTag;
+        for (const tag of this.prefix.sequence) if (tagName.startsWith(tag.tagName)) return tag;
+      }
+      /** @internal */
+      lookupMappingTag(tagName) {
+        const exactTag = this.exact.mapping[tagName];
+        if (exactTag) return exactTag;
+        for (const tag of this.prefix.mapping) if (tagName.startsWith(tag.tagName)) return tag;
+      }
+      /** @internal */
+      resolveImplicitScalarTag(source) {
+        const candidates = this.implicitScalarByFirstChar.get(source.charAt(0)) ?? this.implicitScalarAnyFirstChar;
+        for (const tag2 of candidates) {
+          const value = tag2.resolve(source, false, tag2.tagName);
+          if (value !== NOT_RESOLVED) return {
+            value,
+            tag: tag2
+          };
+        }
+        const tag = this.defaultScalarTag;
+        return {
+          value: tag.resolve(source, false, tag.tagName),
+          tag
+        };
+      }
+      /**
+      * Creates a new schema with the specified tags added. If a tag already
+      * exists, it is replaced by the specified tag.
+      *
+      * @example
+      *
+      * ```javascript
+      * import { CORE_SCHEMA, mergeTag, realMapTag } from 'js-yaml'
+      *
+      * const schema = CORE_SCHEMA.withTags(mergeTag, realMapTag)
+      * ```
+      */
       withTags(...tags) {
         let flatTags = [];
         for (const tag of tags) flatTags = flatTags.concat(tag);
@@ -23824,6 +23914,19 @@ var init_js_yaml = __esm({
       pairsTag,
       setTag
     ]);
+    DUMP_SCHEMA = YAML11_SCHEMA.withTags({
+      ...intYaml11Tag,
+      resolve: (source, isExplicit, tagName) => {
+        const result = intYaml11Tag.resolve(source, isExplicit, tagName);
+        return result === NOT_RESOLVED ? intCoreTag.resolve(source, isExplicit, tagName) : result;
+      }
+    }, {
+      ...floatYaml11Tag,
+      resolve: (source, isExplicit, tagName) => {
+        const result = floatYaml11Tag.resolve(source, isExplicit, tagName);
+        return result === NOT_RESOLVED ? floatCoreTag.resolve(source, isExplicit, tagName) : result;
+      }
+    });
     realMapTag = defineMappingTag("tag:yaml.org,2002:map", {
       create: () => /* @__PURE__ */ new Map(),
       addPair: (container, key, value) => {
@@ -23873,6 +23976,30 @@ var init_js_yaml = __esm({
         return container[normalizedKey];
       }
     });
+    EVENT_ID = {
+      DOCUMENT: 1,
+      SEQUENCE: 2,
+      MAPPING: 3,
+      SCALAR: 4,
+      ALIAS: 5,
+      POP: 6
+    };
+    SCALAR_STYLE = {
+      PLAIN: 1,
+      SINGLE_QUOTED: 2,
+      DOUBLE_QUOTED: 3,
+      LITERAL_BLOCK: 4,
+      FOLDED_BLOCK: 5
+    };
+    COLLECTION_STYLE = {
+      BLOCK: 1,
+      FLOW: 2
+    };
+    CHOMPING_MODE = {
+      CLIP: 1,
+      STRIP: 2,
+      KEEP: 3
+    };
     simpleEscapeCheck = new Array(256);
     simpleEscapeMap = new Array(256);
     for (let i = 0; i < 256; i++) {
@@ -23933,28 +24060,31 @@ var init_js_yaml = __esm({
       forceQuotes: false,
       tagBeforeAnchor: false
     };
-    DEFAULT_DUMP_SCHEMA = YAML11_SCHEMA.withTags({
-      ...intYaml11Tag,
-      resolve: (source, isExplicit, tagName) => {
-        const result = intYaml11Tag.resolve(source, isExplicit, tagName);
-        return result === NOT_RESOLVED ? intCoreTag.resolve(source, isExplicit, tagName) : result;
-      }
-    }, {
-      ...floatYaml11Tag,
-      resolve: (source, isExplicit, tagName) => {
-        const result = floatYaml11Tag.resolve(source, isExplicit, tagName);
-        return result === NOT_RESOLVED ? floatCoreTag.resolve(source, isExplicit, tagName) : result;
-      }
-    });
     DEFAULT_DUMP_OPTIONS = {
       ...DEFAULT_PRESENTER_OPTIONS,
-      schema: DEFAULT_DUMP_SCHEMA,
+      schema: DUMP_SCHEMA,
       skipInvalid: false,
       noRefs: false,
       flowLevel: -1,
       transform: () => {
       }
     };
+    EVENT_DOCUMENT = EVENT_ID.DOCUMENT;
+    EVENT_SEQUENCE = EVENT_ID.SEQUENCE;
+    EVENT_MAPPING = EVENT_ID.MAPPING;
+    EVENT_SCALAR = EVENT_ID.SCALAR;
+    EVENT_ALIAS = EVENT_ID.ALIAS;
+    EVENT_POP = EVENT_ID.POP;
+    SCALAR_STYLE_PLAIN = SCALAR_STYLE.PLAIN;
+    SCALAR_STYLE_SINGLE_QUOTED = SCALAR_STYLE.SINGLE_QUOTED;
+    SCALAR_STYLE_DOUBLE_QUOTED = SCALAR_STYLE.DOUBLE_QUOTED;
+    SCALAR_STYLE_LITERAL_BLOCK = SCALAR_STYLE.LITERAL_BLOCK;
+    SCALAR_STYLE_FOLDED_BLOCK = SCALAR_STYLE.FOLDED_BLOCK;
+    COLLECTION_STYLE_BLOCK = COLLECTION_STYLE.BLOCK;
+    COLLECTION_STYLE_FLOW = COLLECTION_STYLE.FLOW;
+    CHOMPING_CLIP = CHOMPING_MODE.CLIP;
+    CHOMPING_STRIP = CHOMPING_MODE.STRIP;
+    CHOMPING_KEEP = CHOMPING_MODE.KEEP;
   }
 });
 
@@ -27021,7 +27151,7 @@ var init_clients = __esm({
       ["gpt-5.1-codex", "2026-08-15"]
     ]);
     DEFAULT_OPENAI_CLI_MODEL = OPENAI_CLI_VENDOR_DEFAULT;
-    DEFAULT_ANTHROPIC_CLI_MODEL = "claude-sonnet-4-5";
+    DEFAULT_ANTHROPIC_CLI_MODEL = "sonnet";
     DEFAULT_GEMINI_CLI_MODEL = "gemini-2.5-pro";
     XAI_BASE_URL = "https://api.x.ai/v1";
     PERPLEXITY_BASE_URL = "https://api.perplexity.ai";
@@ -28444,12 +28574,11 @@ function buildFallback(raw, d) {
   if (!d.isDict(raw)) return { api_on_quota: false };
   const v = raw["api_on_quota"];
   if (v === void 0) return { api_on_quota: false };
-  if (!d.isBool(v)) {
-    throw d.error(
-      `\`fallback.api_on_quota\`=${d.repr(v)} must be a boolean (got ${d.typeName(v)}).`
-    );
-  }
-  return { api_on_quota: v };
+  if (d.isBool(v)) return { api_on_quota: v };
+  if (d.isStr(v) && v === "ask") return { api_on_quota: "ask" };
+  throw d.error(
+    `\`fallback.api_on_quota\`=${d.repr(v)} must be \`false\`, \`true\` or \`'ask'\` (got ${d.typeName(v)}).`
+  );
 }
 function buildSecondModel(entry, cls, locked, d) {
   if (!("second_model" in entry)) return null;
@@ -28479,24 +28608,7 @@ var init_fallback_config = __esm({
   }
 });
 
-// src/scripts/ai_council/config.ts
-var config_exports = {};
-__export(config_exports, {
-  COUNCIL_CONFIG_ENV: () => COUNCIL_CONFIG_ENV,
-  COUNCIL_CONFIG_RELNAME: () => COUNCIL_CONFIG_RELNAME,
-  COUNCIL_CONFIG_USER_GLOBAL_REL: () => COUNCIL_CONFIG_USER_GLOBAL_REL,
-  CouncilConfigError: () => CouncilConfigError,
-  DEFAULT_CLI_CALLS_PER_DAY: () => DEFAULT_CLI_CALLS_PER_DAY2,
-  _RAW_KEY_PREFIXES: () => _RAW_KEY_PREFIXES,
-  _build_config: () => _build_config,
-  load_council_config: () => load_council_config,
-  resolve_api_key: () => resolve_api_key,
-  resolve_cli_call_caps: () => resolve_cli_call_caps,
-  resolve_config_path: () => resolve_config_path
-});
-import * as fs48 from "node:fs";
-import * as os9 from "node:os";
-import * as path48 from "node:path";
+// src/scripts/ai_council/py_format.ts
 function _pyReprStr(s) {
   const hasSingle = s.includes("'");
   const hasDouble = s.includes('"');
@@ -28583,6 +28695,37 @@ function _sortedListRepr(items) {
 function _pyOct(mode) {
   return `0o${mode.toString(8)}`;
 }
+var _Float;
+var init_py_format = __esm({
+  "src/scripts/ai_council/py_format.ts"() {
+    "use strict";
+    _Float = class {
+      constructor(value) {
+        this.value = value;
+      }
+      value;
+    };
+  }
+});
+
+// src/scripts/ai_council/config.ts
+var config_exports = {};
+__export(config_exports, {
+  COUNCIL_CONFIG_ENV: () => COUNCIL_CONFIG_ENV,
+  COUNCIL_CONFIG_RELNAME: () => COUNCIL_CONFIG_RELNAME,
+  COUNCIL_CONFIG_USER_GLOBAL_REL: () => COUNCIL_CONFIG_USER_GLOBAL_REL,
+  CouncilConfigError: () => CouncilConfigError,
+  DEFAULT_CLI_CALLS_PER_DAY: () => DEFAULT_CLI_CALLS_PER_DAY2,
+  _RAW_KEY_PREFIXES: () => _RAW_KEY_PREFIXES,
+  _build_config: () => _build_config,
+  load_council_config: () => load_council_config,
+  resolve_api_key: () => resolve_api_key,
+  resolve_cli_call_caps: () => resolve_cli_call_caps,
+  resolve_config_path: () => resolve_config_path
+});
+import * as fs48 from "node:fs";
+import * as os9 from "node:os";
+import * as path48 from "node:path";
 function _pyInt2(value) {
   if (typeof value === "boolean") {
     return value ? 1 : 0;
@@ -29553,6 +29696,29 @@ function _build_member(name, cfg, default_mode = "auto", ignored = []) {
     }
     tier = tier_raw;
   }
+  const verified_at_raw = _get(cfg, "verified_at", null);
+  let verified_at = null;
+  if (verified_at_raw !== null && verified_at_raw !== void 0) {
+    if (verified_at_raw instanceof Date) {
+      throw new CouncilConfigError(
+        `members.${name}.verified_at must be QUOTED \u2014 write verified_at: "YYYY-MM-DD". Unquoted, YAML parses it as a date and silently rolls impossible values over (2026-13-45 becomes 2027-02-14), which would let a malformed stamp through.`
+      );
+    }
+    const coerced = verified_at_raw;
+    if (typeof coerced !== "string" || !/^\d{4}-\d{2}-\d{2}$/.test(coerced)) {
+      throw new CouncilConfigError(
+        `members.${name}.verified_at must be a 'YYYY-MM-DD' string when set (got ${_pyRepr6(verified_at_raw)}).`
+      );
+    }
+    const [y, m, d] = coerced.split("-").map((x) => Number(x));
+    const probe = new Date(Date.UTC(y, m - 1, d));
+    if (probe.getUTCFullYear() !== y || probe.getUTCMonth() + 1 !== m || probe.getUTCDate() !== d) {
+      throw new CouncilConfigError(
+        `members.${name}.verified_at is not a real calendar date (got ${_pyRepr6(verified_at_raw)}).`
+      );
+    }
+    verified_at = coerced;
+  }
   const prompt_cache_raw = _get(cfg, "prompt_cache", null);
   let prompt_cache_ttl = "5m";
   if (prompt_cache_raw !== null && prompt_cache_raw !== void 0 && !_isBool(prompt_cache_raw)) {
@@ -29579,7 +29745,8 @@ function _build_member(name, cfg, default_mode = "auto", ignored = []) {
     model_ladder: ladder,
     participate_low_impact: participate_raw,
     tier,
-    prompt_cache_ttl
+    prompt_cache_ttl,
+    verified_at
   };
 }
 function resolve_cli_call_caps(raw) {
@@ -29763,7 +29930,7 @@ function _pyTruthy3(value) {
   }
   return Object.keys(value).length > 0;
 }
-var import_yaml5, _VALID_PROVIDERS, _FALLBACK_DEPS, _RAW_KEY_PREFIXES, CouncilConfigError, _Float, _VALID_NECESSITY_MODES, _VALID_DISCLOSURE_MODES, _VALID_CHAIRMAN_MODES, COUNCIL_CONFIG_RELNAME, COUNCIL_CONFIG_USER_GLOBAL_REL, COUNCIL_CONFIG_ENV, _VALID_CRITIC_PROTOCOLS, _VALID_RESOLUTION_MODES, _IMPACT_CLASSES, _LOCKED_IMPACT_CLASSES, _DEFAULT_RESOLUTION_MODES, _VALID_MEMBER_MODES, _VALID_DISPATCH_MODES, DEFAULT_CLI_CALLS_PER_DAY2;
+var import_yaml5, _VALID_PROVIDERS, _FALLBACK_DEPS, _RAW_KEY_PREFIXES, CouncilConfigError, _VALID_NECESSITY_MODES, _VALID_DISCLOSURE_MODES, _VALID_CHAIRMAN_MODES, COUNCIL_CONFIG_RELNAME, COUNCIL_CONFIG_USER_GLOBAL_REL, COUNCIL_CONFIG_ENV, _VALID_CRITIC_PROTOCOLS, _VALID_RESOLUTION_MODES, _IMPACT_CLASSES, _LOCKED_IMPACT_CLASSES, _DEFAULT_RESOLUTION_MODES, _VALID_MEMBER_MODES, _VALID_DISPATCH_MODES, DEFAULT_CLI_CALLS_PER_DAY2;
 var init_config = __esm({
   "src/scripts/ai_council/config.ts"() {
     "use strict";
@@ -29773,6 +29940,7 @@ var init_config = __esm({
     init_clients();
     init_quorum();
     init_fallback_config();
+    init_py_format();
     _VALID_PROVIDERS = /* @__PURE__ */ new Set([
       "anthropic",
       "openai",
@@ -29804,12 +29972,6 @@ var init_config = __esm({
         this.name = "CouncilConfigError";
       }
     };
-    _Float = class {
-      constructor(value) {
-        this.value = value;
-      }
-      value;
-    };
     _VALID_NECESSITY_MODES = /* @__PURE__ */ new Set([
       "off",
       "educate",
@@ -30422,6 +30584,25 @@ function autoUnavailableReason(provider, binary, cliAuthed) {
   }
   return `no transport available: \`${expected}\` is on PATH but not authenticated and no key resolves \u2014 log in to the CLI, or add an api_key_ref`;
 }
+function effectiveApiOnQuota(policy) {
+  if (policy.apiOnQuota === "ask") return policy.billingGrant === true;
+  return policy.apiOnQuota === true;
+}
+function parseApiOnQuota(raw) {
+  if (typeof raw === "boolean") return raw;
+  if (raw === void 0 || raw === null) return false;
+  if (typeof raw === "string") {
+    const s = raw.trim().toLowerCase();
+    if (s === "ask") return "ask";
+    if (s === "true" || s === "yes" || s === "on" || s === "1") return true;
+    if (s === "" || s === "false" || s === "no" || s === "off" || s === "0") {
+      return false;
+    }
+  }
+  throw new Error(
+    `ai_council.fallback.api_on_quota: expected false | true | 'ask', got ${JSON.stringify(raw)}`
+  );
+}
 function classifyCliFailure(raw) {
   const s = raw.trim().toLowerCase();
   if (s === "binary_missing" || s === "file_not_found") return "binary_missing";
@@ -30449,7 +30630,7 @@ function classifyCliFailure(raw) {
 }
 function isFallbackEligibleUnder(failure, policy) {
   if (FALLBACK_ELIGIBLE.has(failure)) return true;
-  return policy.apiOnQuota && failure === "quota_exhausted";
+  return effectiveApiOnQuota(policy) && failure === "quota_exhausted";
 }
 function absentReasonFromCliFailure(failure) {
   switch (failure) {
@@ -34280,9 +34461,9 @@ function detectToolPresence(root) {
     agentsMd: existsSync28(join50(root, "AGENTS.md"))
   };
 }
-function isDir3(path81) {
+function isDir3(path83) {
   try {
-    return statSync34(path81).isDirectory();
+    return statSync34(path83).isDirectory();
   } catch {
     return false;
   }
@@ -34933,10 +35114,12 @@ function classifyAuthorization(prompt) {
     }
     for (const line of _commandLines(fence)) {
       for (const { op, re } of PASTED_COMMANDS) {
-        if (re.test(line)) {
+        if (!re.test(line)) continue;
+        if (op !== null) {
           authorized.add(op);
           evidence[op] = `pasted command: "${line.slice(0, 80)}"`;
         }
+        break;
       }
     }
   }
@@ -35071,6 +35254,7 @@ var init_git_authorization_hook = __esm({
       "branch",
       "pr-create",
       "pr-merge",
+      "pr-merge-auto",
       "tag",
       "release",
       "publish"
@@ -35084,8 +35268,29 @@ var init_git_authorization_hook = __esm({
         op: "pr-create",
         re: /\b(erstell(e|en)?|mach(e|en)?|leg(e|en)?\s+an|(er)?(ö|oe)ffne|open|create|raise|aufmachen)\b[^.\n]{0,30}\b(pr|pull[- ]request)\b|\b(pr|pull[- ]request)\b[^.\n]{0,20}\b(erstellen|aufmachen|anlegen|(er)?(ö|oe)ffnen)\b/i
       },
-      // `merge` as an ACTION, never as the noun in "merge conflict" / "merge commit".
-      { op: "pr-merge", re: /\b(merge|merg(e|en|st|t)|zusammenf(ü|ue)hren|reinmergen)\b(?!\s*[- ]?(conflict|konflikt|commit|base|queue|state|status))/i },
+      // `merge` as an ACTION, never as the noun in "merge conflict" / "merge commit",
+      // and never under a NEGATION.
+      //
+      // The negation half closes a measured defect: probed directly against
+      // `classifyAuthorization`, "nicht mergen", "don't merge this" and
+      // "never auto-merge" each returned ["pr-merge"] — a prompt saying DO NOT
+      // MERGE authorized a merge. The noun-sense lookahead was never a negator.
+      //
+      // The lookBEHIND is line-scoped by `[^.!?\n]` on purpose, the same scoping
+      // `turn_end_gate_hook.ts` uses for its own negation exclusion (`:330`) and
+      // its negated-claim window (`:490-493`). A sentence boundary ends a
+      // negation's reach: "Do not push. Merge PR #12." is two instructions, and a
+      // guard that let the first suppress the second would silently stop
+      // authorizing merges the user DID order — the failure mode that is worse
+      // than the defect, because nothing happens and nothing says why.
+      //
+      // Reusing that vocabulary rather than inventing a third is deliberate: two
+      // negation vocabularies in one tree drift, and the drift is invisible until
+      // a prompt lands in the gap between them.
+      {
+        op: "pr-merge",
+        re: /(?<!\b(nicht|nichts|kein(e|en|em|er|es)?|niemals|nie|no|not|dont|don't|never|without|ohne)\b[^.!?\n]{0,30})\b(merge|merg(e|en|st|t)|zusammenf(ü|ue)hren|reinmergen)\b(?!\s*[- ]?(conflict|konflikt|commit|base|queue|state|status))/i
+      },
       // A tag is an ACTION here — bare "Tag" is the German word for day, and
       // "Version" is an ordinary noun. Both authorized a BLOCK op before this.
       { op: "tag", re: /\b(tagge(n|st)?|tag\s+(setzen|anlegen|erstellen)|git\s+tag|--tags|--follow-tags)\b/i },
@@ -35101,6 +35306,16 @@ var init_git_authorization_hook = __esm({
       { op: "publish", re: /\bnpm\s+publish\b/i },
       { op: "tag", re: /\bgit\s+push\s+[^\n]*--tags\b|\bgit\s+tag\s+-a\b/i },
       { op: "release", re: /\bgh\s+release\s+create\b/i },
+      // ORDER IS LOAD-BEARING: the auto variants precede the plain merge, because
+      // the first match wins and `gh pr merge 12 --auto` also matches the plain
+      // pattern. Same rule the block-side table states for `git push --tags`.
+      //
+      // The DE-ESCALATING forms come first of all, and they map to no op at all:
+      // `--disable-auto` and `disablePullRequestAutoMerge` turn the capability OFF.
+      // Requiring merge authorization to switch auto-merge off is a live deadlock,
+      // and it is why this cannot ship after the split rather than with it.
+      { op: null, re: /\bgh\s+pr\s+merge\b[^\n]*--disable-auto\b|\bdisablePullRequestAutoMerge\b/i },
+      { op: "pr-merge-auto", re: /\bgh\s+pr\s+merge\b[^\n]*--auto\b|\benablePullRequestAutoMerge\b/i },
       { op: "pr-merge", re: /\bgh\s+pr\s+merge\b/i },
       { op: "pr-create", re: /\bgh\s+pr\s+create\b/i },
       { op: "push", re: /\bgit\s+push\b/i },
@@ -35444,7 +35659,10 @@ var init_block_unauthorized_git = __esm({
       "publish",
       "tag",
       "release",
-      "pr-merge"
+      "pr-merge",
+      // Enabling auto-merge commits the outcome to a condition the agent does not
+      // control, so it is blocked on the same terms as the merge it schedules.
+      "pr-merge-auto"
     ]);
     WARN_OPS = /* @__PURE__ */ new Set([
       "commit",
@@ -35464,10 +35682,25 @@ var init_block_unauthorized_git = __esm({
         op: "tag",
         re: new RegExp(`${P}git\\s+${G}push\\b[^\\n;|&]*(--tags|--follow-tags|refs\\/tags\\/)`, "i")
       },
+      // ORDER IS LOAD-BEARING, per this table's own rule that the most specific
+      // pattern wins: `gh pr merge 12 --auto` matches the plain merge pattern too.
+      //
+      // The GraphQL mutation needs its OWN pattern rather than a widening of
+      // `ghApiWrite()`. That helper requires BOTH a REST-shaped path and an
+      // explicit write method, and `gh api graphql -f query='mutation{...}'` has
+      // neither — widening it to reach this would loosen every other op that uses
+      // it, which is a bigger change than the defect.
+      {
+        op: "pr-merge-auto",
+        re: new RegExp(
+          `${P}gh\\s+pr\\s+merge\\b(?=[^\\n]*--auto\\b)|${P}gh\\s+api\\b(?=[^\\n]*enablePullRequestAutoMerge\\b)`,
+          "i"
+        )
+      },
       {
         op: "pr-merge",
         re: new RegExp(
-          `${P}gh\\s+pr\\s+merge\\b|${ghApiWrite("\\/pulls\\/\\d+\\/merge\\b").source}`,
+          `${P}gh\\s+pr\\s+merge\\b(?![^\\n]*--(auto|disable-auto)\\b)|${ghApiWrite("\\/pulls\\/\\d+\\/merge\\b").source}`,
           "i"
         )
       },
@@ -36268,6 +36501,11 @@ var init_subagent_capsule = __esm({
 });
 
 // src/scripts/_lib/subagent_response.ts
+function countContractFields(input) {
+  if (input === null || typeof input !== "object") return 0;
+  const r = input;
+  return RESPONSE_REQUIRED_FIELDS.filter((k) => Object.hasOwn(r, k)).length;
+}
 function validateResponse(input) {
   const errors = [];
   if (input === null || typeof input !== "object") {
@@ -36347,7 +36585,7 @@ function validateResponse(input) {
   }
   return { valid: errors.length === 0, errors };
 }
-var MAX_SUMMARY_CHARS, MAX_RESPONSE_LINE_CHARS, MAX_RESPONSE_ENTRIES, MAX_ARTIFACT_REF_CHARS, MAX_ENVELOPE_CHARS, CONFIDENCE;
+var MAX_SUMMARY_CHARS, MAX_RESPONSE_LINE_CHARS, MAX_RESPONSE_ENTRIES, MAX_ARTIFACT_REF_CHARS, MAX_ENVELOPE_CHARS, CONFIDENCE, RESPONSE_REQUIRED_FIELDS;
 var init_subagent_response = __esm({
   "src/scripts/_lib/subagent_response.ts"() {
     "use strict";
@@ -36358,6 +36596,13 @@ var init_subagent_response = __esm({
     MAX_ARTIFACT_REF_CHARS = 200;
     MAX_ENVELOPE_CHARS = 12e3;
     CONFIDENCE = /* @__PURE__ */ new Set(["low", "medium", "high"]);
+    RESPONSE_REQUIRED_FIELDS = [
+      "summary",
+      "handoff",
+      "confidence",
+      "findings",
+      "risks"
+    ];
   }
 });
 
@@ -36394,16 +36639,25 @@ function extractParentId(payload, ownId) {
   return null;
 }
 function classifyEnvelope(message) {
-  if (message === null || !message.trim()) return { verdict: "no_message", error_count: 0 };
+  if (message === null || !message.trim()) {
+    return { verdict: "no_message", error_count: 0, field_hits: 0 };
+  }
   const candidates = _jsonObjectCandidates(message);
-  if (candidates.length === 0) return { verdict: "no_envelope", error_count: 0 };
+  if (candidates.length === 0) return { verdict: "no_envelope", error_count: 0, field_hits: 0 };
   let best = null;
   for (const candidate of candidates) {
     const result = validateResponse(candidate);
-    if (result.valid) return { verdict: "ok", error_count: 0 };
-    if (best === null) best = { verdict: "fail", error_count: result.errors.length };
+    const fieldHits = countContractFields(candidate);
+    if (result.valid) return { verdict: "ok", error_count: 0, field_hits: fieldHits };
+    if (best === null || fieldHits > best.field_hits) {
+      best = {
+        verdict: fieldHits === 0 ? "foreign_object" : "fail",
+        error_count: result.errors.length,
+        field_hits: fieldHits
+      };
+    }
   }
-  return best ?? { verdict: "no_envelope", error_count: 0 };
+  return best ?? { verdict: "no_envelope", error_count: 0, field_hits: 0 };
 }
 function _jsonObjectCandidates(message) {
   const texts = [];
@@ -36666,6 +36920,9 @@ function handleStop(root, payload, nowIso, sessionId) {
     start_seen: rec !== null,
     envelope_parse: parse6.verdict,
     envelope_error_count: parse6.error_count,
+    // Beside the count, never instead of it: the count says how wrong the
+    // candidate was, this says whether it was aimed at the envelope.
+    envelope_field_hits: parse6.field_hits,
     concurrent_open: countOpen(root)
   });
 }
@@ -43212,29 +43469,116 @@ function renderPostureLines(postures, apiOnQuota) {
   const lines = live.map(
     ([name, p]) => `  fallback         ${name}: ` + (p === "api" ? "would fall back to api" : "no api rung \u2014 a lost cli transport loses the seat")
   );
-  lines.push(
-    `  fallback quota   api_on_quota: ${apiOnQuota ? "on" : "off"} \u2014 an exhausted cli quota ${apiOnQuota ? "MAY" : "may not"} retry on the metered rung`
-  );
+  const word = apiOnQuota === "ask" ? "ask" : apiOnQuota ? "on" : "off";
+  const consequence = apiOnQuota === "ask" ? " \u2014 an exhausted cli quota PARKS the seat and the round closes with a question, unless a run-scoped billing grant is already in force" : apiOnQuota ? " \u2014 an exhausted cli quota MAY retry on the metered rung" : " \u2014 an exhausted cli quota may not retry on the metered rung";
+  lines.push(`  fallback quota   api_on_quota: ${word}${consequence}`);
   return lines;
 }
+function renderBillingGateLines(parked, opts) {
+  if (parked.length === 0) return [];
+  const seats = [...new Set(parked)].sort();
+  const cost = opts.estimatedUsd === null ? "unknown \u2014 no priced estimate for the retry" : `~$${opts.estimatedUsd.toFixed(2)}`;
+  return [
+    "",
+    "HUMAN GATE \u2014 plan quota exhausted, metered spend not authorised",
+    `  parked seats     ${seats.join(", ")}`,
+    `  retry cost       ${cost}`,
+    // The command is printed rather than described because the whole
+    // mechanism fails if answering it takes a lookup: an operator who has
+    // to go find the syntax is an operator who says yes tomorrow, on a run
+    // that has already ended.
+    `  to authorise     agent-config council:grant-billing ${opts.runId}`,
+    "  to decline       do nothing \u2014 the grant is never implied by silence"
+  ];
+}
 var init_council_fallback_posture = __esm({
   "src/scripts/_lib/council_fallback_posture.ts"() {
     "use strict";
   }
 });
 
+// src/scripts/_lib/billing_grant.ts
+import * as fs76 from "node:fs";
+import * as path74 from "node:path";
+function grantFile(repoRoot, runId) {
+  return path74.join(
+    repoRoot,
+    BILLING_GRANT_DIR_REL,
+    `${runId.replace(/[^A-Za-z0-9_-]/g, "_")}.json`
+  );
+}
+function issueBillingGrant(repoRoot, runId, now = () => /* @__PURE__ */ new Date()) {
+  const file = grantFile(repoRoot, runId);
+  const existing = _read(file);
+  if (existing !== null && existing.run_id === runId) return existing;
+  const grant = { run_id: runId, issued_at: now().toISOString() };
+  fs76.mkdirSync(path74.dirname(file), { recursive: true });
+  fs76.writeFileSync(file, `${JSON.stringify(grant, null, 2)}
+`, "utf8");
+  return grant;
+}
+function isBillingGrantActive(repoRoot, runId, env = process.env, now = () => /* @__PURE__ */ new Date()) {
+  if ((env[BILLING_GRANT_ENV] ?? "").trim() !== runId) return false;
+  const grant = _read(grantFile(repoRoot, runId));
+  if (grant === null || grant.run_id !== runId) return false;
+  const age = now().getTime() - Date.parse(grant.issued_at);
+  return Number.isFinite(age) && age >= 0 && age <= BILLING_GRANT_MAX_AGE_MS;
+}
+function hasBillingGrant(repoRoot, env = process.env, now = () => /* @__PURE__ */ new Date()) {
+  const runId = (env[BILLING_GRANT_ENV] ?? "").trim();
+  if (runId === "") return false;
+  return isBillingGrantActive(repoRoot, runId, env, now);
+}
+function revokeBillingGrant(repoRoot, runId) {
+  try {
+    fs76.unlinkSync(grantFile(repoRoot, runId));
+  } catch {
+  }
+}
+function _read(file) {
+  try {
+    const raw = JSON.parse(fs76.readFileSync(file, "utf8"));
+    if (raw === null || typeof raw !== "object") return null;
+    const o = raw;
+    if (typeof o.run_id !== "string" || typeof o.issued_at !== "string") return null;
+    return { run_id: o.run_id, issued_at: o.issued_at };
+  } catch {
+    return null;
+  }
+}
+function currentRunId(env = process.env) {
+  for (const key of [BILLING_GRANT_ENV, "AC_RUN_ID", "CLAUDE_CODE_SESSION_ID"]) {
+    const v = (env[key] ?? "").trim();
+    if (v !== "") return v;
+  }
+  return null;
+}
+var BILLING_GRANT_ENV, BILLING_GRANT_DIR_REL, BILLING_GRANT_MAX_AGE_MS;
+var init_billing_grant = __esm({
+  "src/scripts/_lib/billing_grant.ts"() {
+    "use strict";
+    BILLING_GRANT_ENV = "AC_BILLING_GRANT";
+    BILLING_GRANT_DIR_REL = path74.join("agents", "runtime", "billing-grants");
+    BILLING_GRANT_MAX_AGE_MS = 24 * 60 * 60 * 1e3;
+  }
+});
+
 // src/scripts/_lib/council_fallback_wiring.ts
 function isRefusal(exc) {
   if (exc instanceof CouncilConfigError) return true;
   return exc instanceof Error && REFUSAL_NAMES.has(exc.constructor.name);
 }
 function buildFallbackOptions(deps) {
+  const parked = [];
   return {
     api_on_quota: deps.apiOnQuota,
+    billing_grant: deps.billingGrant === true,
+    parked,
     // The orchestrator is a pure library and holds no sink; this is it.
     // One line per establishing escalation, so attendance analysis can
     // tell a seat SAVED by the fallback from one that was natively api.
     on_event: (e) => {
+      if (e.outcome === "awaiting_grant") parked.push(e.provider);
       try {
         deps.emit({
           action: "transport_fallback",
@@ -43263,10 +43607,25 @@ function buildFallbackOptions(deps) {
     }
   };
 }
+function wireCouncilFallback(out, ai, d) {
+  if (out === null) return;
+  const cfg = d.isDict(ai["fallback"]) ? ai["fallback"] : {};
+  out.options = buildFallbackOptions({
+    apiOnQuota: parseApiOnQuota(cfg["api_on_quota"]),
+    billingGrant: hasBillingGrant(d.repoRoot),
+    hasApiRung: d.hasApiRung,
+    memberConfig: (p) => d.membersCfg[p] || {},
+    modelOverride: (p) => d.overrides[p] ?? null,
+    constructApi: d.constructApi,
+    emit: d.emit
+  });
+}
 var REFUSAL_NAMES;
 var init_council_fallback_wiring = __esm({
   "src/scripts/_lib/council_fallback_wiring.ts"() {
     "use strict";
+    init_transport_resolver();
+    init_billing_grant();
     init_config();
     REFUSAL_NAMES = /* @__PURE__ */ new Set([
       "CouncilDisabledError",
@@ -43287,6 +43646,107 @@ var init_council_fallback_wiring = __esm({
   }
 });
 
+// src/scripts/_lib/quota_parked.ts
+import * as fs77 from "node:fs";
+import * as path75 from "node:path";
+function markerFile(repoRoot, runId) {
+  return path75.join(
+    repoRoot,
+    QUOTA_PARKED_DIR_REL,
+    `${runId.replace(/[^A-Za-z0-9_-]/g, "_")}.json`
+  );
+}
+function writeQuotaParked(repoRoot, runId, providers, now = () => /* @__PURE__ */ new Date()) {
+  const file = markerFile(repoRoot, runId);
+  const existing = readMarker(file);
+  const merged = [.../* @__PURE__ */ new Set([...existing?.providers ?? [], ...providers])].sort();
+  const marker = {
+    run_id: runId,
+    providers: merged,
+    parked_at: existing?.parked_at ?? now().toISOString()
+  };
+  fs77.mkdirSync(path75.dirname(file), { recursive: true });
+  fs77.writeFileSync(file, `${JSON.stringify(marker, null, 2)}
+`, "utf8");
+  return marker;
+}
+function readMarker(file) {
+  try {
+    const raw = JSON.parse(fs77.readFileSync(file, "utf8"));
+    if (raw === null || typeof raw !== "object") return null;
+    const o = raw;
+    if (typeof o["run_id"] !== "string" || typeof o["parked_at"] !== "string") return null;
+    if (!Array.isArray(o["providers"])) return null;
+    const providers = o["providers"].filter((p) => typeof p === "string");
+    return { run_id: o["run_id"], providers, parked_at: o["parked_at"] };
+  } catch {
+    return null;
+  }
+}
+var QUOTA_PARKED_DIR_REL;
+var init_quota_parked = __esm({
+  "src/scripts/_lib/quota_parked.ts"() {
+    "use strict";
+    QUOTA_PARKED_DIR_REL = path75.join("agents", "runtime", "state", "quota-parked");
+  }
+});
+
+// src/scripts/_lib/billing_grant_cli.ts
+function billingArgSpec(cmd) {
+  return BILLING_SUBCOMMANDS.includes(cmd) ? { positionals: ["run_id"], opts: [], requiredOpts: [] } : null;
+}
+function handleBillingCommand(cmd, runId, d) {
+  if (cmd === "grant-billing") return grantBilling(String(runId ?? ""), d);
+  if (cmd === "revoke-billing") return revokeBilling(String(runId ?? ""), d);
+  return null;
+}
+function grantBilling(runId, d) {
+  if (runId.trim() === "") {
+    d.stderr("\u274C  council:grant-billing: a run id is required.\n");
+    return 2;
+  }
+  const g = issueBillingGrant(d.repoRoot, runId.trim());
+  d.stdout(`\u2705  billing grant recorded for run ${g.run_id} (issued ${g.issued_at})
+`);
+  d.stdout(`    export ${BILLING_GRANT_ENV}=${g.run_id}
+`);
+  const live = hasBillingGrant(d.repoRoot) ? "yes" : "not until the export above is set";
+  d.stdout(`    in force: ${live}
+`);
+  return 0;
+}
+function revokeBilling(runId, d) {
+  if (runId.trim() === "") {
+    d.stderr("\u274C  council:revoke-billing: a run id is required.\n");
+    return 2;
+  }
+  revokeBillingGrant(d.repoRoot, runId.trim());
+  d.stdout(`\u2705  billing grant revoked for run ${runId.trim()}
+`);
+  return 0;
+}
+function printBillingGate(parked, d) {
+  const runId = currentRunId();
+  if (parked.length > 0 && runId !== null) writeQuotaParked(d.repoRoot, runId, parked);
+  for (const line of renderBillingGateLines(parked, {
+    runId: runId ?? "<run-id>",
+    estimatedUsd: null
+  })) {
+    d.stdout(`${line}
+`);
+  }
+}
+var BILLING_SUBCOMMANDS;
+var init_billing_grant_cli = __esm({
+  "src/scripts/_lib/billing_grant_cli.ts"() {
+    "use strict";
+    init_billing_grant();
+    init_council_fallback_posture();
+    init_quota_parked();
+    BILLING_SUBCOMMANDS = ["grant-billing", "revoke-billing"];
+  }
+});
+
 // src/scripts/ai_council/low_impact_corpus.ts
 var low_impact_corpus_exports = {};
 __export(low_impact_corpus_exports, {
@@ -43297,7 +43757,7 @@ __export(low_impact_corpus_exports, {
   load_validated_phrases: () => load_validated_phrases,
   parse_corpus_strict: () => parse_corpus_strict
 });
-import * as fs76 from "node:fs";
+import * as fs78 from "node:fs";
 function _entry(phrase, normalised, section, line_no, trailing_metadata = "") {
   return { phrase, normalised, section, line_no, trailing_metadata };
 }
@@ -43470,10 +43930,10 @@ function _checkHeadingDrift(text, title) {
 }
 function parse_corpus_strict(corpusPath) {
   const p = corpusPath;
-  if (!fs76.existsSync(p)) {
+  if (!fs78.existsSync(p)) {
     return new CorpusParseResult();
   }
-  const text = fs76.readFileSync(p, { encoding: "utf-8" });
+  const text = fs78.readFileSync(p, { encoding: "utf-8" });
   const allTitles = _SECTION_KEYS.map((k) => _SECTION_TITLES[k]);
   const resultSections = {
     validated: [],
@@ -43536,10 +43996,10 @@ function load_anti_example_phrases(corpusPath) {
 }
 function load_corpus_lock(yamlPath) {
   const p = yamlPath;
-  if (!fs76.existsSync(p)) {
+  if (!fs78.existsSync(p)) {
     return new CorpusParseResult();
   }
-  const parsed = (0, import_yaml7.parse)(fs76.readFileSync(p, { encoding: "utf-8" }), { version: "1.1" });
+  const parsed = (0, import_yaml7.parse)(fs78.readFileSync(p, { encoding: "utf-8" }), { version: "1.1" });
   const doc = parsed === null || parsed === void 0 ? {} : parsed;
   const schemaVersion = doc["schema_version"];
   if (schemaVersion !== 1) {
@@ -43601,7 +44061,7 @@ function _deriveLockPath(corpusPath) {
 }
 function _loadSectionFromLock(corpusPath, section) {
   const lockPath = _deriveLockPath(corpusPath);
-  if (!fs76.existsSync(lockPath)) {
+  if (!fs78.existsSync(lockPath)) {
     return null;
   }
   try {
@@ -43613,10 +44073,10 @@ function _loadSectionFromLock(corpusPath, section) {
 }
 function _loadSectionLenient(corpusPath, section) {
   const p = corpusPath;
-  if (!fs76.existsSync(p)) {
+  if (!fs78.existsSync(p)) {
     return [];
   }
-  const text = fs76.readFileSync(p, { encoding: "utf-8" });
+  const text = fs78.readFileSync(p, { encoding: "utf-8" });
   const allTitles = _SECTION_KEYS.map((k) => _SECTION_TITLES[k]);
   const bounds = _sectionBounds(text, _SECTION_TITLES[section], allTitles);
   if (bounds === null) {
@@ -44396,8 +44856,8 @@ var init_necessity = __esm({
 });
 
 // src/scripts/ai_council/budget_guard.ts
-import * as fs77 from "node:fs";
-import * as path74 from "node:path";
+import * as fs79 from "node:fs";
+import * as path76 from "node:path";
 function _resolveLedgerPath(p) {
   if (p !== null) {
     return p;
@@ -44412,18 +44872,18 @@ function _nowUtcMs() {
   return Date.now();
 }
 function _ensureLedgerDir(p) {
-  const parent = path74.dirname(p);
+  const parent = path76.dirname(p);
   try {
-    fs77.mkdirSync(parent, { recursive: true });
+    fs79.mkdirSync(parent, { recursive: true });
     let mode;
     try {
-      mode = fs77.statSync(parent).mode & 511;
+      mode = fs79.statSync(parent).mode & 511;
     } catch {
       mode = 448;
     }
     if (mode !== 448) {
       try {
-        fs77.chmodSync(parent, 448);
+        fs79.chmodSync(parent, 448);
       } catch {
       }
     }
@@ -44435,18 +44895,18 @@ function _ensureLedgerDir(p) {
   }
 }
 function _ensureLedgerFileMode(p) {
-  if (!fs77.existsSync(p)) {
+  if (!fs79.existsSync(p)) {
     return;
   }
   let current;
   try {
-    current = fs77.statSync(p).mode & 511;
+    current = fs79.statSync(p).mode & 511;
   } catch {
     return;
   }
   if (current !== 384) {
     try {
-      fs77.chmodSync(p, 384);
+      fs79.chmodSync(p, 384);
     } catch {
     }
   }
@@ -44598,11 +45058,11 @@ function pyNumToStr(n) {
 }
 function read_entries2(p = null) {
   const resolved = _resolveLedgerPath(p);
-  if (!fs77.existsSync(resolved)) {
+  if (!fs79.existsSync(resolved)) {
     return [];
   }
   const out = [];
-  const text = fs77.readFileSync(resolved, "utf-8");
+  const text = fs79.readFileSync(resolved, "utf-8");
   for (const rawLine of text.split(/\r\n|\r|\n/u)) {
     const line = rawLine.trim();
     if (line === "") {
@@ -44705,7 +45165,7 @@ function record_spend(usd, provider, model, options = {}) {
   )}
 `;
   try {
-    fs77.appendFileSync(p, entry, { encoding: "utf-8" });
+    fs79.appendFileSync(p, entry, { encoding: "utf-8" });
   } catch (exc) {
     process.stderr.write(`[council:budget_guard] write failed: ${_errStr(exc)}
 `);
@@ -44828,8 +45288,8 @@ function aggregate_scores(findings, scores) {
     by_id.get(s.finding_id).push(s);
   }
   const out = /* @__PURE__ */ new Map();
-  for (const [fid, fs84] of by_id) {
-    if (fs84.length === 0) {
+  for (const [fid, fs86] of by_id) {
+    if (fs86.length === 0) {
       out.set(
         fid,
         new ConsensusMetadata({
@@ -44845,13 +45305,13 @@ function aggregate_scores(findings, scores) {
       );
       continue;
     }
-    const mean2 = fs84.reduce((acc, s) => acc + s.score, 0) / fs84.length;
-    const agree_rate = fs84.filter((s) => s.agree).length / fs84.length;
+    const mean2 = fs86.reduce((acc, s) => acc + s.score, 0) / fs86.length;
+    const agree_rate = fs86.filter((s) => s.agree).length / fs86.length;
     const strength = mean2 / 10 * agree_rate;
-    const dissent = fs84.filter((s) => !s.agree).length;
-    const concur = fs84.filter((s) => s.agree).length;
-    const scorers = fs84.map((s) => s.scorer);
-    const dissent_reasons = fs84.filter((s) => !s.agree).map((s) => [s.scorer, s.reason]);
+    const dissent = fs86.filter((s) => !s.agree).length;
+    const concur = fs86.filter((s) => s.agree).length;
+    const scorers = fs86.map((s) => s.scorer);
+    const dissent_reasons = fs86.filter((s) => !s.agree).map((s) => [s.scorer, s.reason]);
     const mean_rounded = pyRound(mean2, 2);
     out.set(
       fid,
@@ -45326,10 +45786,25 @@ var init_stance_tally = __esm({
 });
 
 // src/scripts/ai_council/mid_flight_fallback.ts
+function isEstablishedTwin(o) {
+  return o !== null && !("parked" in o);
+}
 function establishTwin(input) {
   const { member, error, fallback, ledger } = input;
   const failure = classifyCliFailure(error);
-  const policy = { apiOnQuota: fallback.api_on_quota };
+  const policy = {
+    apiOnQuota: fallback.api_on_quota,
+    billingGrant: fallback.billing_grant === true
+  };
+  if (fallback.api_on_quota === "ask" && failure === "quota_exhausted" && !effectiveApiOnQuota(policy)) {
+    fallback.on_event?.({
+      provider: member.name,
+      failure,
+      outcome: "awaiting_grant",
+      api_on_quota: fallback.api_on_quota
+    });
+    return { parked: true, provider: member.name, reason: failure, original_error: error };
+  }
   if (!isFallbackEligibleUnder(failure, policy)) return null;
   if (ledger.attempt(member.name, failure, policy) !== "api") return null;
   const twin = fallback.construct(member.name);
@@ -45385,7 +45860,7 @@ function escalateUnmetered(member, response, transport, fallback, ledger) {
     fallback,
     ledger
   });
-  if (twin === null) return null;
+  if (!isEstablishedTwin(twin)) return null;
   return twin;
 }
 function refuseUnmeteredEscalation(args) {
@@ -46102,7 +46577,7 @@ ${suffix}` : base;
         fallback,
         ledger
       });
-      if (twin !== null) {
+      if (isEstablishedTwin(twin)) {
         const out = runGatedRetry(response, member, twin, fallback, {
           gate: (client) => table === null || _breach(
             estimate(question, [client], table, {
@@ -46999,18 +47474,18 @@ __export(project_context_exports, {
   REPO_PURPOSE_MAX_CHARS: () => REPO_PURPOSE_MAX_CHARS,
   detect_project_context: () => detect_project_context
 });
-import * as fs78 from "node:fs";
-import * as path75 from "node:path";
+import * as fs80 from "node:fs";
+import * as path77 from "node:path";
 function _isPlainObject11(v) {
   return typeof v === "object" && v !== null && !Array.isArray(v);
 }
 function _read_json(p) {
-  if (!fs78.existsSync(p)) {
+  if (!fs80.existsSync(p)) {
     return null;
   }
   let raw;
   try {
-    raw = fs78.readFileSync(p, "utf-8");
+    raw = fs80.readFileSync(p, "utf-8");
   } catch {
     return null;
   }
@@ -47032,7 +47507,7 @@ function _name_from(composer, pkg, root) {
     }
   }
   try {
-    const base = path75.basename(root);
+    const base = path77.basename(root);
     return base || null;
   } catch {
     return null;
@@ -47101,12 +47576,12 @@ function _splitlines10(text) {
   return parts;
 }
 function _purpose_from_readme(p) {
-  if (!fs78.existsSync(p)) {
+  if (!fs80.existsSync(p)) {
     return null;
   }
   let text;
   try {
-    text = fs78.readFileSync(p, "utf-8");
+    text = fs80.readFileSync(p, "utf-8");
   } catch {
     return null;
   }
@@ -47190,13 +47665,13 @@ function _rfind(haystack, needle) {
   return -1;
 }
 function detect_project_context(root) {
-  const resolvedRoot = path75.resolve(root ?? process.cwd());
-  const composer = _read_json(path75.join(resolvedRoot, "composer.json"));
-  const pkg = _read_json(path75.join(resolvedRoot, "package.json"));
+  const resolvedRoot = path77.resolve(root ?? process.cwd());
+  const composer = _read_json(path77.join(resolvedRoot, "composer.json"));
+  const pkg = _read_json(path77.join(resolvedRoot, "package.json"));
   return new ProjectContext(
     _name_from(composer, pkg, resolvedRoot),
     _stack_from(composer, pkg),
-    _purpose_from_readme(path75.join(resolvedRoot, "README.md"))
+    _purpose_from_readme(path77.join(resolvedRoot, "README.md"))
   );
 }
 var REPO_PURPOSE_MAX_CHARS, _HEADING_RE, _BADGE_RE, _HTML_RE, ProjectContext;
@@ -47466,7 +47941,7 @@ __export(shadow_dispatch_exports, {
   slo_banner: () => slo_banner,
   slo_status: () => slo_status
 });
-import * as fs79 from "node:fs";
+import * as fs81 from "node:fs";
 import { createHash as createHash14 } from "node:crypto";
 function should_shadow(sampleRate, opts = {}) {
   const rate = Math.max(0, Math.min(1, sampleRate));
@@ -47504,7 +47979,7 @@ function record_shadow_decision(logPath, opts) {
     escalated,
     escalation_reason: escalationReason
   };
-  fs79.mkdirSync(_dirname2(logPath), { recursive: true });
+  fs81.mkdirSync(_dirname2(logPath), { recursive: true });
   const row = _pyJsonDumps2({
     timestamp: decision.timestamp,
     query_hash: decision.query_hash,
@@ -47514,7 +47989,7 @@ function record_shadow_decision(logPath, opts) {
     escalated: decision.escalated,
     escalation_reason: decision.escalation_reason
   }) + "\n";
-  fs79.appendFileSync(logPath, row, { encoding: "utf-8" });
+  fs81.appendFileSync(logPath, row, { encoding: "utf-8" });
   return decision;
 }
 function _isoNowSeconds() {
@@ -47523,10 +47998,10 @@ function _isoNowSeconds() {
   return `${pad(d.getUTCFullYear(), 4)}-${pad(d.getUTCMonth() + 1)}-${pad(d.getUTCDate())}T${pad(d.getUTCHours())}:${pad(d.getUTCMinutes())}:${pad(d.getUTCSeconds())}+00:00`;
 }
 function* _iterLog(logPath) {
-  if (!fs79.existsSync(logPath)) {
+  if (!fs81.existsSync(logPath)) {
     return;
   }
-  const content = fs79.readFileSync(logPath, { encoding: "utf-8" });
+  const content = fs81.readFileSync(logPath, { encoding: "utf-8" });
   for (const rawLine of _splitlines11(content)) {
     const line = _strip7(rawLine);
     if (!line) {
@@ -48453,8 +48928,8 @@ __export(council_cli_exports, {
   load_settings: () => load_settings,
   main: () => main34
 });
-import * as fs80 from "node:fs";
-import * as path76 from "node:path";
+import * as fs82 from "node:fs";
+import * as path78 from "node:path";
 import { fileURLToPath as fileURLToPath46, pathToFileURL as pathToFileURL34 } from "node:url";
 function _pyFixed6(x, ndigits) {
   if (!Number.isFinite(x)) {
@@ -48663,7 +49138,7 @@ function _stderr2(s) {
 function load_settings(p = SETTINGS_FILE2, opts = {}) {
   const ai_council_path = opts.ai_council_path ?? AI_COUNCIL_FILE;
   const settings = load_agent_settings({ project_path: p });
-  if (fs80.existsSync(ai_council_path)) {
+  if (fs82.existsSync(ai_council_path)) {
     const cfg = load_council_config(ai_council_path);
     settings["ai_council"] = synthesizeAiCouncilBlock(cfg);
   }
@@ -48894,17 +49369,15 @@ function build_members(settings, opts = {}) {
       `no council member has \`enabled: true\` \u2014 enable at least one under members.* in ${COUNCIL_CONFIG_USER_GLOBAL_REL} (user-global root; never the project tree, ADR-104). \`agent-config council:status\` prints the resolved path.`
     );
   }
-  if (fallback_out !== null) {
-    const fallback_cfg = _isDict3(ai["fallback"]) ? ai["fallback"] : {};
-    fallback_out.options = buildFallbackOptions({
-      apiOnQuota: _pyBool2(fallback_cfg["api_on_quota"]),
-      hasApiRung: (p) => _API_PROVIDERS.has(p),
-      memberConfig: (p) => members_cfg[p] || {},
-      modelOverride: (p) => overrides[p] ?? null,
-      constructApi: _construct_api_member,
-      emit: appendEvent
-    });
-  }
+  wireCouncilFallback(fallback_out, ai, {
+    repoRoot: REPO_ROOT11,
+    isDict: _isDict3,
+    membersCfg: members_cfg,
+    overrides,
+    hasApiRung: (p) => _API_PROVIDERS.has(p),
+    constructApi: _construct_api_member,
+    emit: appendEvent
+  });
   return members;
 }
 function _setDifference(items, known) {
@@ -49031,7 +49504,7 @@ function build_question(opts) {
   let ctx;
   let artefact;
   if (input_mode === "prompt") {
-    const text = fs80.readFileSync(input_path, "utf-8");
+    const text = fs82.readFileSync(input_path, "utf-8");
     ctx = bundle_prompt(text);
     artefact = String(input_path);
   } else if (input_mode === "roadmap") {
@@ -49174,9 +49647,9 @@ function _maybe_write_decision_replay(opts) {
       include_member_arguments: include_args
     })
   );
-  const target = path76.join(path76.dirname(opts.out_path), "decision-replay.md");
-  fs80.mkdirSync(path76.dirname(target), { recursive: true });
-  fs80.writeFileSync(target, replay, { encoding: "utf-8" });
+  const target = path78.join(path78.dirname(opts.out_path), "decision-replay.md");
+  fs82.mkdirSync(path78.dirname(target), { recursive: true });
+  fs82.writeFileSync(target, replay, { encoding: "utf-8" });
   return target;
 }
 function _peer_review_active(ai_cfg, args) {
@@ -49881,7 +50354,7 @@ function cmd_status(args, opts = {}) {
   const env = opts.env ?? process.env;
   const override = env[COUNCIL_CONFIG_ENV];
   const path_ = resolve_config_path(REPO_ROOT11, { env });
-  const exists3 = fs80.existsSync(String(path_));
+  const exists3 = fs82.existsSync(String(path_));
   const provenance = override ? `${COUNCIL_CONFIG_ENV} override` : "user-global";
   let cfg = null;
   let parse_error = null;
@@ -50224,6 +50697,7 @@ function cmd_run(args, opts = {}) {
   quorum_out.result = post_run.quorum;
   skipped.push(...post_run.absent);
   recordRoundObservations(REPO_ROOT11, members, responses, classifyCliFailure);
+  printBillingGate(fallback_out.options?.parked ?? [], { repoRoot: REPO_ROOT11, stdout: _stdout2, stderr: _stderr2 });
   _emitQuorumEvent("post_run", post_run.quorum, post_run.absent, {
     command: "run",
     // Whether the roster actually shrank — see `dispatch_shape`. Without
@@ -50337,8 +50811,8 @@ function cmd_run(args, opts = {}) {
     kind: "responses",
     subcommand: "run"
   });
-  fs80.mkdirSync(path76.dirname(_resolveTarget(out_path)), { recursive: true });
-  fs80.writeFileSync(_resolveTarget(out_path), _jsonDumpsIndent2(payload) + "\n", { encoding: "utf-8" });
+  fs82.mkdirSync(path78.dirname(_resolveTarget(out_path)), { recursive: true });
+  fs82.writeFileSync(_resolveTarget(out_path), _jsonDumpsIndent2(payload) + "\n", { encoding: "utf-8" });
   _stdout2(
     `
 council:run \xB7 wrote ${out_path} (estimated $${_pyFixed6(estimated_total, 4)} / actual $${_pyFixed6(actual_total, 4)})
@@ -50363,7 +50837,7 @@ function _debate_round_filename(round_number) {
   return `debate-round-${round_number}.json`;
 }
 function _write_debate_round(out_dir, round_number, responses, opts) {
-  fs80.mkdirSync(_resolveTarget(out_dir), { recursive: true });
+  fs82.mkdirSync(_resolveTarget(out_dir), { recursive: true });
   let actual_total = 0;
   for (const r of responses) {
     if (r.error) {
@@ -50387,15 +50861,15 @@ function _write_debate_round(out_dir, round_number, responses, opts) {
     prompt_cache_round_gap_ms: opts.cache_gap_ms_since_previous_round ?? null,
     responses: _serialise_responses(responses)
   };
-  const out_path = path76.join(_resolveTarget(out_dir), _debate_round_filename(round_number));
-  fs80.writeFileSync(out_path, _jsonDumpsIndent2(payload) + "\n", { encoding: "utf-8" });
+  const out_path = path78.join(_resolveTarget(out_dir), _debate_round_filename(round_number));
+  fs82.writeFileSync(out_path, _jsonDumpsIndent2(payload) + "\n", { encoding: "utf-8" });
   return out_path;
 }
 function _load_debate_seed(p, expected_members) {
-  if (!fs80.existsSync(p)) {
+  if (!fs82.existsSync(p)) {
     throw new FileNotFoundError3(`--continue-as-debate path not found: ${p}`);
   }
-  const payload = JSON.parse(fs80.readFileSync(p, "utf-8"));
+  const payload = JSON.parse(fs82.readFileSync(p, "utf-8"));
   const source_members = (payload["members"] || []).slice();
   const expected_labels = expected_members.map((m) => `${m.name}/${m.model}`);
   if (!_listEq(source_members, expected_labels)) {
@@ -50441,7 +50915,7 @@ function _readStdinLine() {
   try {
     const buf = Buffer.alloc(4096);
     const fd = 0;
-    const n = fs80.readSync(fd, buf, 0, buf.length, null);
+    const n = fs82.readSync(fd, buf, 0, buf.length, null);
     return buf.toString("utf-8", 0, n).split("\n")[0]?.trim().toLowerCase() ?? "";
   } catch {
     return "";
@@ -50675,7 +51149,7 @@ council:debate \xB7 ${all_rounds.length} round(s) complete \xB7 actual $${_pyFix
   return errors_last.length > 0 && errors_last.length === last.length ? 1 : 0;
 }
 function cmd_render(args) {
-  const payload = JSON.parse(fs80.readFileSync(args.responses, "utf-8"));
+  const payload = JSON.parse(fs82.readFileSync(args.responses, "utf-8"));
   const items = payload["responses"] || [];
   const explicit = _getattr3(args, "prompt_mode", null);
   const mode = explicit || payload["prompt_mode"] || payload["mode"];
@@ -50704,8 +51178,8 @@ function cmd_render(args) {
       kind: "sessions",
       subcommand: "render"
     });
-    fs80.mkdirSync(path76.dirname(_resolveTarget(out_path)), { recursive: true });
-    fs80.writeFileSync(_resolveTarget(out_path), body + "\n", { encoding: "utf-8" });
+    fs82.mkdirSync(path78.dirname(_resolveTarget(out_path)), { recursive: true });
+    fs82.writeFileSync(_resolveTarget(out_path), body + "\n", { encoding: "utf-8" });
     _stdout2(`council:render \xB7 wrote ${out_path}
 `);
     return 0;
@@ -50716,15 +51190,15 @@ function cmd_render(args) {
 function _cmd_replay_low_impact_stats(args) {
   const li = low_impact_exports;
   const responses_path = args.responses;
-  const log_path = path76.join(path76.dirname(responses_path), "low-impact-resolutions.md");
-  if (!fs80.existsSync(log_path)) {
+  const log_path = path78.join(path78.dirname(responses_path), "low-impact-resolutions.md");
+  if (!fs82.existsSync(log_path)) {
     _stdout2(
       `council:replay \xB7 no low-impact-resolutions.md alongside ${responses_path} \u2014 session had no fast-path entries.
 `
     );
     return 0;
   }
-  const body = fs80.readFileSync(log_path, "utf-8");
+  const body = fs82.readFileSync(log_path, "utf-8");
   const stats = li.parse_low_impact_log(body);
   const out = li.render_low_impact_stats(stats);
   if (_getattr3(args, "output", null)) {
@@ -50732,8 +51206,8 @@ function _cmd_replay_low_impact_stats(args) {
       kind: "sessions",
       subcommand: "replay"
     });
-    fs80.mkdirSync(path76.dirname(_resolveTarget(target)), { recursive: true });
-    fs80.writeFileSync(_resolveTarget(target), out, { encoding: "utf-8" });
+    fs82.mkdirSync(path78.dirname(_resolveTarget(target)), { recursive: true });
+    fs82.writeFileSync(_resolveTarget(target), out, { encoding: "utf-8" });
     _stdout2(`council:replay \xB7 wrote ${target}
 `);
     return 0;
@@ -50745,7 +51219,7 @@ function cmd_replay(args) {
   if (_getattr3(args, "low_impact_stats", false)) {
     return _cmd_replay_low_impact_stats(args);
   }
-  const payload = JSON.parse(fs80.readFileSync(args.responses, "utf-8"));
+  const payload = JSON.parse(fs82.readFileSync(args.responses, "utf-8"));
   const consensus = _deserialise_consensus(payload["consensus"]);
   if (consensus === null) {
     _stderr2(
@@ -50770,8 +51244,8 @@ function cmd_replay(args) {
       kind: "sessions",
       subcommand: "replay"
     });
-    fs80.mkdirSync(path76.dirname(_resolveTarget(out_path)), { recursive: true });
-    fs80.writeFileSync(_resolveTarget(out_path), body, { encoding: "utf-8" });
+    fs82.mkdirSync(path78.dirname(_resolveTarget(out_path)), { recursive: true });
+    fs82.writeFileSync(_resolveTarget(out_path), body, { encoding: "utf-8" });
     _stdout2(`council:replay \xB7 wrote ${out_path}
 `);
   } else {
@@ -50828,8 +51302,8 @@ function cmd_quota(args, opts = {}) {
 }
 function _validate_council_output_path(path_str, opts) {
   const expected_rel = COUNCIL_CANONICAL_DIRS[opts.kind];
-  const expected_abs = _resolveReal(path76.join(REPO_ROOT11, expected_rel));
-  const target = path76.isAbsolute(path_str) ? path_str : path76.join(REPO_ROOT11, path_str);
+  const expected_abs = _resolveReal(path78.join(REPO_ROOT11, expected_rel));
+  const target = path78.isAbsolute(path_str) ? path_str : path78.join(REPO_ROOT11, path_str);
   const target_resolved = _resolveReal(target);
   if (!_isRelativeTo(target_resolved, expected_abs)) {
     throw new ArgumentTypeError(
@@ -50839,12 +51313,12 @@ function _validate_council_output_path(path_str, opts) {
   return path_str;
 }
 function _resolveTarget(path_str) {
-  return path76.isAbsolute(path_str) ? path_str : path76.join(REPO_ROOT11, path_str);
+  return path78.isAbsolute(path_str) ? path_str : path78.join(REPO_ROOT11, path_str);
 }
 function _resolveReal(p) {
-  const abs = path76.resolve(p);
+  const abs = path78.resolve(p);
   try {
-    return fs80.realpathSync(abs);
+    return fs82.realpathSync(abs);
   } catch {
     return abs;
   }
@@ -50853,8 +51327,8 @@ function _isRelativeTo(target, base) {
   if (target === base) {
     return true;
   }
-  const rel = path76.relative(base, target);
-  return rel !== "" && !rel.startsWith("..") && !path76.isAbsolute(rel);
+  const rel = path78.relative(base, target);
+  return rel !== "" && !rel.startsWith("..") && !path78.isAbsolute(rel);
 }
 function _topError(message) {
   _stderr2(_TOP_USAGE2);
@@ -51031,7 +51505,7 @@ function _specsFor(cmd) {
         requiredOpts: []
       };
     default:
-      return { positionals: [], opts: [], requiredOpts: [] };
+      return billingArgSpec(cmd) ?? { positionals: [], opts: [], requiredOpts: [] };
   }
 }
 function _parseArgs7(argv) {
@@ -51206,6 +51680,8 @@ function main34(argv = null) {
     if (args.cmd === "status") {
       return cmd_status(args);
     }
+    const billing = handleBillingCommand(String(args.cmd), _getattr3(args, "run_id", null), { repoRoot: REPO_ROOT11, stdout: _stdout2, stderr: _stderr2 });
+    if (billing !== null) return billing;
   } catch (exc) {
     if (exc instanceof CouncilDisabledError) {
       _stderr2(`\u274C  council:${args.cmd}: ${exc.message}
@@ -51225,13 +51701,13 @@ function _isCliEntry31() {
   if (process.argv[1] === void 0) {
     return false;
   }
-  const argvUrl = pathToFileURL34(path76.resolve(process.argv[1])).href;
+  const argvUrl = pathToFileURL34(path78.resolve(process.argv[1])).href;
   if (import.meta.url === argvUrl) {
     return true;
   }
   try {
-    const here = fs80.realpathSync(fileURLToPath46(import.meta.url));
-    const argv = fs80.realpathSync(path76.resolve(process.argv[1]));
+    const here = fs82.realpathSync(fileURLToPath46(import.meta.url));
+    const argv = fs82.realpathSync(path78.resolve(process.argv[1]));
     return here === argv;
   } catch {
     return false;
@@ -51267,6 +51743,7 @@ var init_council_cli = __esm({
     init_council_settings_block();
     init_council_fallback_posture();
     init_council_fallback_wiring();
+    init_billing_grant_cli();
     init_necessity();
     init_orchestrator();
     init_pricing();
@@ -51298,7 +51775,7 @@ var init_council_cli = __esm({
       "xai",
       "perplexity"
     ]);
-    _HERE23 = path76.dirname(fileURLToPath46(import.meta.url));
+    _HERE23 = path78.dirname(fileURLToPath46(import.meta.url));
     [REPO_ROOT11] = resolve_project_root(null);
     SETTINGS_FILE2 = project_settings_path(REPO_ROOT11);
     AI_COUNCIL_FILE = resolve_config_path(REPO_ROOT11);
@@ -51326,7 +51803,7 @@ var init_council_cli = __esm({
     ]);
     FileNotFoundError3 = class extends Error {
     };
-    _SUBCOMMANDS = ["estimate", "run", "debate", "render", "replay", "quota", "shadow-report", "status"];
+    _SUBCOMMANDS = ["estimate", "run", "debate", "render", "replay", "quota", "shadow-report", "status", ...BILLING_SUBCOMMANDS];
     _TOP_USAGE2 = `usage: ${_PROG9} [-h]
                             {estimate,run,debate,render,replay,quota,shadow-report,status}
                             ...
@@ -51431,13 +51908,13 @@ __export(skill_catalogue_exports, {
   resolveSkillsRoot: () => resolveSkillsRoot,
   truncationModeOf: () => truncationModeOf
 });
-import * as fs81 from "node:fs";
-import * as path77 from "node:path";
+import * as fs83 from "node:fs";
+import * as path79 from "node:path";
 function resolveSkillsRoot(workspaceRoot) {
   for (const candidate of DEFAULT_CATALOGUE_ROOTS) {
-    const abs = path77.join(workspaceRoot, candidate);
+    const abs = path79.join(workspaceRoot, candidate);
     try {
-      if (fs81.existsSync(abs) && fs81.statSync(abs).isDirectory()) return abs;
+      if (fs83.existsSync(abs) && fs83.statSync(abs).isDirectory()) return abs;
     } catch {
     }
   }
@@ -51481,9 +51958,9 @@ function descriptionOf(frontmatter) {
   return "";
 }
 function readProjectedCatalogue(root) {
-  const names = fs81.readdirSync(root).filter((n) => fs81.existsSync(path77.join(root, n, "SKILL.md"))).sort();
+  const names = fs83.readdirSync(root).filter((n) => fs83.existsSync(path79.join(root, n, "SKILL.md"))).sort();
   return names.map((name, index) => {
-    const content = fs81.readFileSync(path77.join(root, name, "SKILL.md"), "utf-8");
+    const content = fs83.readFileSync(path79.join(root, name, "SKILL.md"), "utf-8");
     const frontmatter = frontmatterOf(content);
     const description = descriptionOf(frontmatter);
     return {
@@ -51685,12 +52162,12 @@ function buildNoTruncationRecord(host, observedAt, entriesOffered, projectedSkil
   };
 }
 function markdownFilesUnder(root) {
-  if (!fs81.existsSync(root)) return [];
+  if (!fs83.existsSync(root)) return [];
   const out = [];
   const walk = (dir) => {
-    for (const entry of fs81.readdirSync(dir, { withFileTypes: true })) {
-      const full = path77.join(dir, entry.name);
-      if (fs81.statSync(full).isDirectory()) walk(full);
+    for (const entry of fs83.readdirSync(dir, { withFileTypes: true })) {
+      const full = path79.join(dir, entry.name);
+      if (fs83.statSync(full).isDirectory()) walk(full);
       else if (entry.name.endsWith(".md")) out.push(full);
     }
   };
@@ -51698,9 +52175,9 @@ function markdownFilesUnder(root) {
   return out;
 }
 function measureCatalogueVolume(host, root) {
-  const skillsRoot = path77.join(root, "skills");
-  const skills = fs81.existsSync(skillsRoot) ? readProjectedCatalogue(skillsRoot) : [];
-  const commandEntries = markdownFilesUnder(path77.join(root, "commands")).length;
+  const skillsRoot = path79.join(root, "skills");
+  const skills = fs83.existsSync(skillsRoot) ? readProjectedCatalogue(skillsRoot) : [];
+  const commandEntries = markdownFilesUnder(path79.join(root, "commands")).length;
   return {
     host,
     root,
@@ -51831,9 +52308,9 @@ function migrationPromptLines(host, eligibility, settingsPath) {
   ];
 }
 function readObservationLog(logPath) {
-  if (!fs81.existsSync(logPath)) return [];
+  if (!fs83.existsSync(logPath)) return [];
   const out = [];
-  for (const line of fs81.readFileSync(logPath, "utf-8").split("\n")) {
+  for (const line of fs83.readFileSync(logPath, "utf-8").split("\n")) {
     const trimmed = line.trim();
     if (trimmed.length === 0) continue;
     try {
@@ -51908,7 +52385,7 @@ var init_skill_catalogue = __esm({
   "src/scripts/_lib/skill_catalogue.ts"() {
     "use strict";
     DEFAULT_CATALOGUE_ROOTS = [".claude/skills", "src/skills"];
-    OBSERVATION_LOG = path77.join(
+    OBSERVATION_LOG = path79.join(
       "agents",
       "evidence",
       "metrics",
@@ -51929,8 +52406,8 @@ __export(score_skill_relevance_exports, {
   parse_args: () => parse_args7,
   rank: () => rank
 });
-import * as fs82 from "node:fs";
-import * as path78 from "node:path";
+import * as fs84 from "node:fs";
+import * as path80 from "node:path";
 import { fileURLToPath as fileURLToPath47, pathToFileURL as pathToFileURL35 } from "node:url";
 function pyLen(s) {
   let n = 0;
@@ -51950,7 +52427,7 @@ function _tokenize(text) {
   return out;
 }
 function _parse_frontmatter2(filePath) {
-  const text = fs82.readFileSync(filePath, "utf-8");
+  const text = fs84.readFileSync(filePath, "utf-8");
   if (!text.startsWith("---")) {
     return {};
   }
@@ -52007,7 +52484,7 @@ function _load_skills(skillsDir) {
   for (const skillMd of _globSkillMd(skillsDir)) {
     const fm = _parse_frontmatter2(skillMd);
     const rawName = fm["name"];
-    const name = _truthyStr(rawName) ? String(rawName) : path78.basename(path78.dirname(skillMd));
+    const name = _truthyStr(rawName) ? String(rawName) : path80.basename(path80.dirname(skillMd));
     const rawDesc = fm["description"];
     const desc = _truthyStr(rawDesc) ? String(rawDesc) : "";
     let personas = fm["personas"] ?? [];
@@ -52033,23 +52510,23 @@ function _truthyStr(v) {
 function _globSkillMd(root) {
   let names;
   try {
-    names = fs82.readdirSync(root);
+    names = fs84.readdirSync(root);
   } catch {
     return [];
   }
   const dirs = [];
   for (const name of names) {
-    const dir = path78.join(root, name);
-    const skillMd = path78.join(dir, "SKILL.md");
+    const dir = path80.join(root, name);
+    const skillMd = path80.join(dir, "SKILL.md");
     try {
-      if (fs82.statSync(dir).isDirectory() && fs82.statSync(skillMd).isFile()) {
+      if (fs84.statSync(dir).isDirectory() && fs84.statSync(skillMd).isFile()) {
         dirs.push(name);
       }
     } catch {
     }
   }
   dirs.sort();
-  return dirs.map((name) => path78.join(root, name, "SKILL.md"));
+  return dirs.map((name) => path80.join(root, name, "SKILL.md"));
 }
 function _score3(taskTerms, skill) {
   if (taskTerms.size === 0) {
@@ -52272,13 +52749,13 @@ function _isCliEntry32() {
   if (process.argv[1] === void 0) {
     return false;
   }
-  const argvUrl = pathToFileURL35(path78.resolve(process.argv[1])).href;
+  const argvUrl = pathToFileURL35(path80.resolve(process.argv[1])).href;
   if (import.meta.url === argvUrl) {
     return true;
   }
   try {
-    const here = fs82.realpathSync(fileURLToPath47(import.meta.url));
-    const argv = fs82.realpathSync(path78.resolve(process.argv[1]));
+    const here = fs84.realpathSync(fileURLToPath47(import.meta.url));
+    const argv = fs84.realpathSync(path80.resolve(process.argv[1]));
     return here === argv;
   } catch {
     return false;
@@ -52290,8 +52767,8 @@ var init_score_skill_relevance = __esm({
     "use strict";
     init_value_ladder();
     _HERE24 = fileURLToPath47(import.meta.url);
-    ROOT3 = path78.resolve(path78.dirname(_HERE24), "..", "..", "..");
-    DEFAULT_SKILLS_DIR = path78.join(ROOT3, ".agent-src.uncondensed", "skills");
+    ROOT3 = path80.resolve(path80.dirname(_HERE24), "..", "..", "..");
+    DEFAULT_SKILLS_DIR = path80.join(ROOT3, ".agent-src.uncondensed", "skills");
     TOKEN_RE3 = /[a-z][a-z0-9]+/g;
     STOPWORDS = /* @__PURE__ */ new Set([
       "the",
@@ -52376,7 +52853,7 @@ var init_score_skill_relevance = __esm({
 });
 
 // src/scripts/mcp_server/__main__.ts
-import * as path80 from "node:path";
+import * as path82 from "node:path";
 import { fileURLToPath as fileURLToPath49 } from "node:url";
 
 // src/scripts/mcp_server/index.ts
@@ -52424,8 +52901,8 @@ init_prompts();
 init_resources();
 
 // src/scripts/mcp_server/tools.ts
-import * as fs83 from "node:fs";
-import * as path79 from "node:path";
+import * as fs85 from "node:fs";
+import * as path81 from "node:path";
 import { fileURLToPath as fileURLToPath48 } from "node:url";
 
 // src/scripts/chat_history.ts
@@ -54659,9 +55136,9 @@ function _strip8(s) {
 }
 function _resolvePath2(p) {
   try {
-    return fs83.realpathSync(p);
+    return fs85.realpathSync(p);
   } catch {
-    return path79.resolve(p);
+    return path81.resolve(p);
   }
 }
 function _resolveConsumerRoot(override) {
@@ -54671,14 +55148,14 @@ function _resolveConsumerRoot(override) {
   return _resolvePath2(process.cwd());
 }
 function _relativeUnder(target, root) {
-  const rel = path79.relative(root, target);
+  const rel = path81.relative(root, target);
   if (rel === "") {
     return "";
   }
-  if (rel.startsWith("..") || path79.isAbsolute(rel)) {
+  if (rel.startsWith("..") || path81.isAbsolute(rel)) {
     return null;
   }
-  return rel.split(path79.sep).join("/");
+  return rel.split(path81.sep).join("/");
 }
 function _reprStrList(values) {
   return `[${values.map((v) => `'${v}'`).join(", ")}]`;
@@ -54687,11 +55164,11 @@ function _validateInTreePath(raw, consumerRoot) {
   const root = _resolvePath2(consumerRoot);
   let target;
   if (raw === null || raw === void 0 || raw === "") {
-    target = path79.join(root, "agents", "runtime", ".agent-chat-history");
-  } else if (path79.isAbsolute(raw)) {
+    target = path81.join(root, "agents", "runtime", ".agent-chat-history");
+  } else if (path81.isAbsolute(raw)) {
     target = _resolvePath2(raw);
   } else {
-    target = _resolvePath2(path79.join(root, raw));
+    target = _resolvePath2(path81.join(root, raw));
   }
   const rel = _relativeUnder(target, root);
   if (rel === null) {
@@ -54729,11 +55206,11 @@ async function _lintSkillsHandler(args, consumerRoot) {
       if (typeof raw !== "string") {
         throw new Error("'paths' entries must be strings");
       }
-      const resolved = path79.isAbsolute(raw) ? _resolvePath2(raw) : _resolvePath2(path79.join(root, raw));
+      const resolved = path81.isAbsolute(raw) ? _resolvePath2(raw) : _resolvePath2(path81.join(root, raw));
       if (_relativeUnder(resolved, root) === null) {
         throw new Error(`path escapes consumer_root: ${resolved}`);
       }
-      if (fs83.existsSync(resolved)) {
+      if (fs85.existsSync(resolved)) {
         paths.push(resolved);
       }
     }
@@ -54770,7 +55247,7 @@ async function _chatHistoryAppendHandler(args, consumerRoot) {
     if (typeof minSchema !== "number" || !Number.isInteger(minSchema) || typeof minSchema === "boolean") {
       throw new Error("'min_schema_version' must be an integer");
     }
-    const existingHeader = fs83.existsSync(target) ? _chReadHeader(target) : null;
+    const existingHeader = fs85.existsSync(target) ? _chReadHeader(target) : null;
     const observed = existingHeader !== null && typeof existingHeader === "object" ? _pyInt7(existingHeader.v ?? 0) : SCHEMA_VERSION3;
     if (observed < minSchema) {
       throw new Error(`chat-history schema ${observed} below required ${minSchema}`);
@@ -54785,8 +55262,8 @@ async function _chatHistoryAppendHandler(args, consumerRoot) {
       session: session === void 0 ? null : session
     };
   }
-  if (!fs83.existsSync(target) || _chReadHeader(target) === null) {
-    fs83.mkdirSync(path79.dirname(target), { recursive: true });
+  if (!fs85.existsSync(target) || _chReadHeader(target) === null) {
+    fs85.mkdirSync(path81.dirname(target), { recursive: true });
     _chInit(target);
   }
   _chAppend(entry, target, session ?? null);
@@ -54830,7 +55307,7 @@ async function _chatHistoryReadHandler(args, consumerRoot) {
   if (detail !== "full" && detail !== "index") {
     throw new Error("'detail' must be 'index' or 'full'");
   }
-  if (!fs83.existsSync(target)) {
+  if (!fs85.existsSync(target)) {
     return { path: target, entries: [], count: 0 };
   }
   if (around !== void 0 && around !== null) {
@@ -54932,8 +55409,8 @@ async function _memoryStatusHandler(_args, consumerRoot) {
   }
   return result;
 }
-var _PACKAGE_ROOT3 = path79.resolve(
-  path79.dirname(fileURLToPath48(import.meta.url)),
+var _PACKAGE_ROOT3 = path81.resolve(
+  path81.dirname(fileURLToPath48(import.meta.url)),
   "..",
   "..",
   ".."
@@ -54977,10 +55454,10 @@ async function _memorySignalHandler(args, consumerRoot) {
 async function _roadmapProgressHandler(args, consumerRoot) {
   const dryRun = _pyTruthy6(args.dry_run ?? false);
   const root = _resolvePath2(consumerRoot);
-  const roadmapRoot = path79.join(root, "agents", "roadmaps");
-  const target = path79.join(root, "agents", "roadmaps-progress.md");
+  const roadmapRoot = path81.join(root, "agents", "roadmaps");
+  const target = path81.join(root, "agents", "roadmaps-progress.md");
   const urp = await Promise.resolve().then(() => (init_update_roadmap_progress(), update_roadmap_progress_exports));
-  if (!fs83.existsSync(roadmapRoot)) {
+  if (!fs85.existsSync(roadmapRoot)) {
     return {
       written: false,
       path: target,
@@ -54995,7 +55472,7 @@ async function _roadmapProgressHandler(args, consumerRoot) {
   const stepsDone = roadmaps.reduce((s, r) => s + r.done, 0);
   const stepsTotal = roadmaps.reduce((s, r) => s + r.total_active, 0);
   if (!dryRun) {
-    fs83.writeFileSync(target, content, "utf-8");
+    fs85.writeFileSync(target, content, "utf-8");
   }
   return {
     written: !dryRun,
@@ -55016,11 +55493,11 @@ async function _roadmapArchiveHandler(_args, consumerRoot) {
   let dashboardRegenerated = false;
   if (archived.length > 0) {
     const urp = await Promise.resolve().then(() => (init_update_roadmap_progress(), update_roadmap_progress_exports));
-    const roadmapRoot = path79.join(root, "agents", "roadmaps");
-    if (fs83.existsSync(roadmapRoot)) {
+    const roadmapRoot = path81.join(root, "agents", "roadmaps");
+    if (fs85.existsSync(roadmapRoot)) {
       const roadmaps = urp.collect(roadmapRoot);
-      fs83.writeFileSync(
-        path79.join(root, "agents", "roadmaps-progress.md"),
+      fs85.writeFileSync(
+        path81.join(root, "agents", "roadmaps-progress.md"),
         urp.render(roadmaps, urp.collect_bundles(root), roadmapRoot),
         "utf-8"
       );
@@ -55036,9 +55513,9 @@ async function _roadmapArchiveHandler(_args, consumerRoot) {
 async function _capabilitiesIndexHandler(args, consumerRoot) {
   const check = _pyTruthy6(args.check ?? false);
   const cap = await Promise.resolve().then(() => (init_generate_capabilities_index(), generate_capabilities_index_exports));
-  const out = path79.join(_PACKAGE_ROOT3, "CAPABILITIES.yaml");
+  const out = path81.join(_PACKAGE_ROOT3, "CAPABILITIES.yaml");
   const content = cap.build();
-  const onDisk = fs83.existsSync(out) ? fs83.readFileSync(out, "utf-8") : "";
+  const onDisk = fs85.existsSync(out) ? fs85.readFileSync(out, "utf-8") : "";
   const drift = onDisk !== content;
   if (check) {
     return { check: true, written: false, drift, path: out };
@@ -55049,7 +55526,7 @@ async function _capabilitiesIndexHandler(args, consumerRoot) {
       `CAPABILITIES.yaml path escapes consumer_root: ${out} not under ${root}`
     );
   }
-  fs83.writeFileSync(out, content, "utf-8");
+  fs85.writeFileSync(out, content, "utf-8");
   return { check: false, written: true, drift, path: out };
 }
 async function _runDoctorLeg(consumerRoot) {
@@ -55149,11 +55626,11 @@ async function _councilEstimateHandler(args, consumerRoot) {
     throw new Error("'depth' must be 'shallow' or 'deep' when provided");
   }
   const root = _resolvePath2(consumerRoot);
-  const target = path79.isAbsolute(inputRaw) ? _resolvePath2(inputRaw) : _resolvePath2(path79.join(root, inputRaw));
+  const target = path81.isAbsolute(inputRaw) ? _resolvePath2(inputRaw) : _resolvePath2(path81.join(root, inputRaw));
   if (_relativeUnder(target, root) === null) {
     throw new Error(`path escapes consumer_root: ${target}`);
   }
-  if (!fs83.existsSync(target)) {
+  if (!fs85.existsSync(target)) {
     throw new Error(`input_path not found: ${target}`);
   }
   const cli = await Promise.resolve().then(() => (init_council_cli(), council_cli_exports));
@@ -55215,18 +55692,18 @@ async function _runTestsHandler(args, consumerRoot) {
     if (typeof relPathRaw !== "string" || !_strip8(relPathRaw)) {
       throw new Error("'path' must be a non-empty string when provided");
     }
-    const resolved = path79.isAbsolute(relPathRaw) ? _resolvePath2(relPathRaw) : _resolvePath2(path79.join(root, relPathRaw));
+    const resolved = path81.isAbsolute(relPathRaw) ? _resolvePath2(relPathRaw) : _resolvePath2(path81.join(root, relPathRaw));
     const rel = _relativeUnder(resolved, root);
     if (rel === null) {
       throw new Error(`path escapes consumer_root: ${resolved}`);
     }
-    if (!fs83.existsSync(resolved)) {
+    if (!fs85.existsSync(resolved)) {
       throw new Error(`path not found: ${resolved}`);
     }
     relArg = rel;
   }
-  const vitestEntry = path79.join(root, "node_modules", "vitest", "vitest.mjs");
-  if (!fs83.existsSync(vitestEntry)) {
+  const vitestEntry = path81.join(root, "node_modules", "vitest", "vitest.mjs");
+  if (!fs85.existsSync(vitestEntry)) {
     throw new Error(
       "run_tests pilot supports vitest projects only \u2014 node_modules/vitest/vitest.mjs not found under consumer_root"
     );
@@ -55880,8 +56357,8 @@ function _strCmp3(a, b) {
   return a < b ? -1 : a > b ? 1 : 0;
 }
 function _pathlibCompare3(a, b) {
-  const pa = a.split(path79.sep);
-  const pb = b.split(path79.sep);
+  const pa = a.split(path81.sep);
+  const pb = b.split(path81.sep);
   const n = Math.min(pa.length, pb.length);
   for (let i = 0; i < n; i++) {
     const c = _strCmp3(pa[i], pb[i]);
@@ -56106,7 +56583,7 @@ function main36() {
 
 // src/scripts/mcp_server/__main__.ts
 var _selfPath = fileURLToPath49(import.meta.url);
-var _invokedDirectly2 = globalThis.__AC_MCP_BUNDLE_DIRECT === true || process.argv[1] !== void 0 && path80.resolve(process.argv[1]) === path80.resolve(_selfPath);
+var _invokedDirectly2 = globalThis.__AC_MCP_BUNDLE_DIRECT === true || process.argv[1] !== void 0 && path82.resolve(process.argv[1]) === path82.resolve(_selfPath);
 if (_invokedDirectly2) {
   main36();
 }
@@ -56116,5 +56593,5 @@ export {
 /*! Bundled license information:
 
 js-yaml/dist/js-yaml.mjs:
-  (*! js-yaml 5.2.3 https://github.com/nodeca/js-yaml @license MIT *)
+  (*! js-yaml 5.3.0 https://github.com/nodeca/js-yaml @license MIT *)
 */