@event4u/agent-config 16.3.0 → 16.4.0

package/dist/cli-delegate/{chunk-TRI6DQZ6.js → chunk-5GPULQBE.js}

@@ -25,63 +25,62 @@ import {
   build_claude_hook_matrix,
   global_deploy_inventory_exports,
   residualReport
-} from "./chunk-S4YWNRKO.js";
+} from "./chunk-MDPPKQCQ.js";
+import {
+  LEGACY_ALL,
+  excludedRuleBasenames,
+  ruleScopeFromSettings
+} from "./chunk-DMSZHXZS.js";
 import {
-  CLI_CALLS_ATTRIBUTION_SUFFIX,
-  CLI_CONSUMER_COUNCIL,
-  CLI_CONSUMER_SELF_REVIEW,
-  CLI_CONSUMER_TEAM,
-  CLI_CONSUMER_UNKNOWN,
   DEFAULT_PROJECTS_ROOT,
-  DEFAULT_SEAT_CEILING,
-  OPENAI_CLI_VENDOR_DEFAULT,
-  QUOTA_SOURCE_LOCAL_BUDGET,
-  QUOTA_SOURCE_PROVIDER,
-  admitsContent,
   aggregateByBucket,
   billableInputTokens,
-  config_exports,
   derivedBytes,
   hardenedSpawnEnv,
   measureBytesPerToken,
-  policyExclusionReason,
   projectStoreSlug,
-  quotaSummaryLine,
-  readAttribution,
-  recordAttribution,
-  resetAttribution,
   scanTranscripts,
-  weightedInputUnits,
-  withStateLock,
-  writeStateAtomically
-} from "./chunk-EEHDXSYD.js";
+  weightedInputUnits
+} from "./chunk-OAFSJBHH.js";
 import {
   git_common_dir
-} from "./chunk-E4XIZDIB.js";
+} from "./chunk-IAYTIIQW.js";
 import {
   read_lockfile
-} from "./chunk-T7L2QK3K.js";
-import {
-  LEGACY_ALL,
-  excludedRuleBasenames,
-  ruleScopeFromSettings
-} from "./chunk-DMSZHXZS.js";
+} from "./chunk-LQOCRFWT.js";
 import {
   runCensus,
   summaryLine
-} from "./chunk-NXEILF2K.js";
+} from "./chunk-F3QDG2GT.js";
 import {
   DEFAULT_DEPLOY_ROOTS,
   SCHEMA_VERSIONS_SUPPORTED,
   manifest_path,
   read_manifest
 } from "./chunk-OKJUIAPS.js";
+import {
+  CLI_CALLS_ATTRIBUTION_SUFFIX,
+  CLI_CONSUMER_COUNCIL,
+  CLI_CONSUMER_SELF_REVIEW,
+  CLI_CONSUMER_TEAM,
+  CLI_CONSUMER_UNKNOWN,
+  DEFAULT_SEAT_CEILING,
+  OPENAI_CLI_VENDOR_DEFAULT,
+  QUOTA_SOURCE_LOCAL_BUDGET,
+  QUOTA_SOURCE_PROVIDER,
+  admitsContent,
+  config_exports,
+  policyExclusionReason,
+  quotaSummaryLine,
+  readAttribution,
+  recordAttribution,
+  resetAttribution,
+  withStateLock,
+  writeStateAtomically
+} from "./chunk-WQWXGIWB.js";
 import {
   require_dist
 } from "./chunk-OY53J6II.js";
-import {
-  resolvePackageRoot
-} from "./chunk-MCJYCQPF.js";
 import {
   PROJECT_ROOT_ENV,
   ProjectRootError,
@@ -91,12 +90,15 @@ import {
   load_agent_settings,
   project_settings_path,
   resolve_project_root
-} from "./chunk-JY2I2DXV.js";
+} from "./chunk-H76PHZBI.js";
 import {
   event4u_root,
   resolve_with_fallback,
   write_target
-} from "./chunk-NDJLNC6Q.js";
+} from "./chunk-T6BP34WI.js";
+import {
+  resolvePackageRoot
+} from "./chunk-MCJYCQPF.js";
 import {
   __export,
   __toESM
@@ -3205,7 +3207,7 @@ function executionJson(overrides) {
     escalation: [...posture.escalation]
   };
 }
-function forgeProtectionJson(reading, repo = null) {
+function forgeProtectionJson(reading, repo = null, not_checked = null) {
   const rows = forgeProtectionRows(reading);
   const readFromForge = rows.some((r) => r.state !== "unread");
   const anonymous = repo === null || !readFromForge;
@@ -3219,10 +3221,22 @@ function forgeProtectionJson(reading, repo = null) {
       detail: r.detail
     })),
     actions: protectionActions(rows).map(name),
-    read_from_forge: readFromForge
+    read_from_forge: readFromForge,
+    // Present on every run, `null` when the read happened. A key that
+    // appeared only on the skipped path would make its absence carry the
+    // meaning, and absence is exactly what a schema-validating consumer
+    // reads as "this build does not report it".
+    not_checked
   };
 }
+function forgeDepsFor(opts) {
+  const not_checked = opts.check !== null ? "single_check" : opts.no_forge === true ? "offline_flag" : opts.online === true ? null : "online_not_requested";
+  return { offline: not_checked !== null, not_checked };
+}
 function forgeProtectionJsonFor(root, deps = {}) {
+  if (deps.offline === true) {
+    return forgeProtectionJson(UNREAD_FORGE, null, deps.not_checked ?? null);
+  }
   const env = deps.env ?? process.env;
   const run = deps.run;
   const remaining = budgetOf(FORGE_TOTAL_BUDGET_MS);
@@ -6414,7 +6428,6 @@ var AI_TEAM_DEFAULTS = Object.freeze({
   model: "auto",
   allow_delegate: false,
   max_calls_per_day: 50,
-  suppress_setup_hint: false,
   review_gate: AI_TEAM_REVIEW_GATE_DEFAULTS
 });
 
@@ -8759,7 +8772,7 @@ function _run_no_manifest(opts, project_root, origin, bridge_present) {
   const fail_check = checks.some((c) => c["status"] === "fail");
   const skipped_requested = opts.check !== null && checks.some((c) => c["id"] === opts.check && c["status"] === "skipped");
   if (opts.json) {
-    _emit_json(project_root, [], [], [], [], checks, origin);
+    _emit_json(project_root, [], [], [], [], checks, origin, forgeDepsFor(opts));
   } else if (opts.check === null) {
     print2(`  \u{1F4CD}  project_root: ${project_root} (origin: ${origin})`);
     if (bridge_present) {
@@ -8795,7 +8808,7 @@ function _run_no_manifest(opts, project_root, origin, bridge_present) {
   }
   return bridge_present ? 0 : 2;
 }
-function _emit_json(project_root, missing, modified, foreign, tag_drift, checks = null, origin = null) {
+function _emit_json(project_root, missing, modified, foreign, tag_drift, checks = null, origin = null, forge = {}) {
   const payload = {
     project_root: String(project_root),
     missing,
@@ -8805,7 +8818,7 @@ function _emit_json(project_root, missing, modified, foreign, tag_drift, checks
   };
   if (origin !== null) payload["project_root_origin"] = origin;
   payload["execution"] = executionJson(() => iter_setting_overrides({ cwd: project_root }));
-  payload["forge_protection"] = forgeProtectionJsonFor(String(project_root));
+  payload["forge_protection"] = forgeProtectionJsonFor(String(project_root), forge);
   payload["traffic_environment"] = trafficEnvironmentJson(process3.env);
   if (checks !== null) {
     payload["checks"] = checks;
@@ -8842,12 +8855,15 @@ function _emit_detection_text(project_root, checks) {
 }
 var PROG = "agent-config doctor";
 var USAGE = `usage: ${PROG} [-h] [--project PROJECT] [--json] [--ci] [--check ID]
-` + STRICT_USAGE + "                           [--trace-root] [--context] [--anatomy]\n                           [--repair ID]\n";
+` + STRICT_USAGE + "                           [--trace-root] [--context] [--anatomy] [--no-forge]\n                           [--online] [--repair ID]\n";
 var _STORE_TRUE_FLAGS = {
   "--json": "json",
   "--ci": "ci",
   ...STRICT_STORE_TRUE,
   "--trace-root": "trace_root",
+  "--no-forge": "no_forge",
+  "--offline": "no_forge",
+  "--online": "online",
   "--context": "context",
   "--anatomy": "anatomy"
 };
@@ -8871,6 +8887,8 @@ function _parse2(argv) {
     ...STRICT_DEFAULTS,
     check: null,
     trace_root: false,
+    no_forge: false,
+    online: false,
     context: false,
     anatomy: false,
     repair: null
@@ -9110,7 +9128,7 @@ function main6(argv = null) {
   const checks = _run_checks(project_root, manifest, drift_groups, opts.check);
   const fail_check = checks.some((c) => c["status"] === "fail");
   if (opts.json) {
-    _emit_json(project_root, missing, modified, foreign, tag_drift, checks, origin);
+    _emit_json(project_root, missing, modified, foreign, tag_drift, checks, origin, forgeDepsFor(opts));
   } else {
     if (opts.check === null) {
       print2(`  \u{1F4CD}  project_root: ${project_root} (origin: ${origin})`);

package/dist/cli-delegate/{chunk-JQVYKIZA.js → chunk-6SRJTYJS.js}

@@ -4054,22 +4054,19 @@ var profileId = external_exports.enum(["developer", "content_creator", "founder"
 var accessStyle = external_exports.enum(["getters_setters", "get_attribute", "magic_properties"]);
 var chatFreq = external_exports.enum(["per_turn", "per_phase", "per_tool"]);
 var qualityCadence = external_exports.enum(["end_of_roadmap", "per_phase", "per_step"]);
-var regenCadence = external_exports.enum(["per_step", "every_5_steps", "phase_boundary"]);
 var fidelityMode = external_exports.enum(["strict", "structural", "hard-floor"]);
-var crossSourceMode = external_exports.enum(["on", "auto", "off"]);
-var richSkillsMode = external_exports.enum(["on", "ask", "off"]);
 var replyMethod = external_exports.enum(["replies_endpoint", "create_review_comment", "auto"]);
 var confidenceBand = external_exports.enum(["off", "low", "medium", "high"]);
 var onBlock = external_exports.enum(["stop", "ask", "warn"]);
-var onBlockFallback = external_exports.enum(["stop", "warn"]);
 var modelAutoSwitch = external_exports.enum(["auto", "suggest", "off"]);
 var leanProjectionMode = external_exports.enum(["eager-all", "thin", "delivery"]);
 var leanProjectionHost = external_exports.enum(["claude-code", "cursor", "cline"]);
 var projectionMode = external_exports.enum(["legacy-all", "scoped"]);
-var memoryCadence = external_exports.enum(["auto", "always", "never"]);
 var projectAudience = external_exports.enum(["self", "internal", "client", "public"]);
 var deliveryMerge = external_exports.enum(["off", "on-green"]);
 var prTopology = external_exports.enum(["single", "stacked"]);
+var gitCommitFormat = external_exports.enum(["ticket-scope", "ticket-conventional"]);
+var gitUpdateStrategy = external_exports.enum(["merge", "rebase"]);
 var settingsSchema = external_exports.object({
   agent_config_version: external_exports.string().default("").describe(
     'Pin the package to an exact semver (e.g. "1.4.2") so all teammates load the same skill / rule set. Leave empty to track whatever is installed locally \u2014 useful for the maintainers of this package, risky for production projects.'
@@ -4146,18 +4143,9 @@ var settingsSchema = external_exports.object({
     rtk_installed: external_exports.boolean().default(false).describe(
       "Does this machine have rtk (Rust Token Killer, a third-party Apache-2.0 tool: https://github.com/rtk-ai/rtk) on PATH \u2014 verified as the real Token Killer, not the unrelated Rust Type Kit that shares the binary name? When true the agent wraps verbose CLI output (git, tests, linters, docker, npm, composer) with rtk (upstream reports 60-90% token savings \u2014 their estimate). Leave false if rtk is missing \u2014 the agent falls back to tail / grep. The wizard overwrites this from a live two-stage probe (PATH presence + `rtk gain` identity check)."
     ),
-    minimal_output: external_exports.boolean().default(true).describe(
-      "Prefer short bullets and tables (true, default) vs verbose prose with rationale (false). Affects every chat reply; flip to false during debugging when you want the agent to think out loud."
-    ),
     canary_name: external_exports.string().default("").describe(
       'Session canary \u2014 the name the agent addresses you with at the start of every new task (e.g. "Alex"). When the greeting silently disappears, the context window is degrading: start a fresh conversation. Also keeps the reply-close markers (end-summary, PR URL as literal last line) alive. Empty = fall back to the user-global canary_name, then to identity.name from the setup wizard; no name anywhere = off. See rules/session-canary.md.'
     ),
-    play_by_play: external_exports.boolean().default(false).describe(
-      `Narrate intermediate findings between tool calls ("Found it.", "Let me check Y."). Off by default \u2014 most users find it noisy. Turn on when you want to follow the agent's reasoning step by step.`
-    ),
-    pr_comment_bot_icon: external_exports.boolean().default(false).describe(
-      "Prefix every PR review-comment reply with \u{1F916} so humans can tell agent-authored comments apart from teammate comments at a glance. Cosmetic only; the comment body itself never changes."
-    ),
     pr_progress_comments: external_exports.boolean().default(false).describe(
       'Permit the agent to post unsolicited progress / status comments on an open PR (e.g. "CI fix iteration #2", "still blocked on workflow scope"). Default off \u2014 most teammates find them noisy. User-invoked flows (/fix:pr-comments, /create-pr, /code-review, explicit "post a comment that \u2026") are NOT gated by this setting. See rules/no-pr-progress-comments.md.'
     ),
@@ -4169,9 +4157,6 @@ var settingsSchema = external_exports.object({
     )
   }),
   project: external_exports.object({
-    pr_template: external_exports.string().default(".github/pull_request_template.md").describe(
-      "Path (relative to project root) to the PR-description template the agent fills in before opening a pull request. Override only if your repo keeps the template somewhere non-standard."
-    ),
     upstream_repo: external_exports.string().default("").describe(
       "GitHub slug (owner/repo) the upstream-contribute skill targets when you ask the agent to push a learning back to the shared agent-config package. Empty = improvement PRs are disabled."
     ),
@@ -4182,6 +4167,17 @@ var settingsSchema = external_exports.object({
       'Who this project is built for \u2014 read by the demand gate (\xA7 8-pre of docs/guidelines/agent-infra/agent-interaction-and-decision-quality.md), whose L0-L4 ladder measures MARKET demand and is meaningless where no market is intended. self = a tool its maintainer builds for themselves; the gate is inert and work is classified L-self (build) instead of being deferred for lack of a user population nobody wants. internal = a team tool; only "what breaks without it?" survives. client = built for a named client, who is the requester rather than a market segment. public (default) = a product with an intended market; full three-question gate, behaviour unchanged from before this key existed.'
     )
   }),
+  git: external_exports.object({
+    commit_format: gitCommitFormat.default("ticket-scope").describe(
+      "Where a ticket id goes in a commit subject. ticket-scope (default) = the ticket is the Conventional-Commits scope, `feat(DEV-1234): add export filter` \u2014 the behaviour every install had before this key existed. ticket-conventional = the ticket leads the subject and the scope names the system area, `DEV-1234 feat(exporter): add export filter`; a ticket is then never a scope. Without a ticket both shapes are plain Conventional Commits. A commit-linting config in the repository (commitlint, a commit-msg hook) outranks this key."
+    ),
+    branch_pattern: external_exports.string().default("{type}/{slug}").describe(
+      "Shape of a branch name the agent creates. Placeholders: {type} (feat, fix, \u2026), {ticket} (e.g. DEV-1234), {slug} (short kebab-case description). Default {type}/{slug}. {slug} is required, and characters outside the placeholders are limited to A-Z a-z 0-9 . _ / - so a rendered name is safe in a command; agent-config git:convention show reports anything else as invalid. A team that names branches after the ticket sets {ticket}-{slug}. A placeholder with no value is dropped together with the separator that follows it, or the one before it when it is last, so no name starts or ends with a separator ({type}/{ticket}-{slug} without a ticket gives feat/slug). Reading a ticket back out of an existing branch never depends on this pattern."
+    ),
+    update_strategy: gitUpdateStrategy.default("merge").describe(
+      "How a feature branch is brought up to date with its base. merge (default) = merge the base into the branch, as before this key existed. rebase = rebase the branch onto origin/<base> and publish with --force-with-lease, never a merge of the base into the branch. Rebase rewrites history, so the agent still asks for it unless the git-history-discipline rule already authorises the rewrite (the user asked this turn, an unrevoked standing instruction, or a pull --rebase the user started); this key decides which operation is proposed, never whether one is authorised."
+    )
+  }).default({}),
   github: external_exports.object({
     pr_reply_method: replyMethod.default("create_review_comment").describe(
       "How the agent replies to PR review comments. create_review_comment = post a new review comment (works on every GitHub plan). replies_endpoint = thread the reply under the original comment (needs the newer REST endpoint). auto = detect at runtime, prefer threaded replies when available."
@@ -4261,32 +4257,29 @@ var settingsSchema = external_exports.object({
       )
     })
   }),
-  pipelines: external_exports.object({
-    skill_improvement: external_exports.boolean().default(true).describe(
-      "After a meaningful task the agent proposes a learning-capture turn (new skill, rule tweak, guideline). Turn off if you find the prompts noisy \u2014 you can still run /memory:promote manually."
-    )
-  }),
   roadmap: external_exports.object({
-    skip_pre_run_gate: external_exports.boolean().default(true).describe(
-      'Skip the /roadmap:process-* pre-run confirmation gate. true (default) starts processing immediately and surfaces the resolved config inline; false shows the numbered-options gate and waits. A genuine "which roadmap?" ambiguity always prompts regardless.'
-    ),
     quality_cadence: qualityCadence.default("per_phase").describe(
       "When the agent runs the full quality / test suite during /roadmap:process-* runs. per_phase = after each phase boundary (default since 2026-09-13 \u2014 end_of_roadmap lets errors compound across phases, which is expensive in a multi-phase autonomous run nobody is watching). end_of_roadmap = once, after the last step (fastest). per_step = after every single step (slowest, highest confidence)."
     ),
-    dashboard_regen_cadence: regenCadence.default("every_5_steps").describe(
-      "How often the agent regenerates agents/roadmaps/dashboard.md during a roadmap run. every_5_steps = batch the regen (default). per_step = after every step (freshest dashboard, highest subprocess overhead). phase_boundary = only at phase edges. A rename, phase add, or archive always regenerates immediately regardless."
-    ),
     horizon_weeks: external_exports.number().int().min(0).default(0).describe(
       'Optional planning horizon (weeks) the agent shows in roadmap framing ("next 4 weeks"). Set 0 to omit the horizon \u2014 most teams prefer to ship without a hardcoded window.'
     ),
     gate_budget: external_exports.object({
-      max_cost_per_run_usd: external_exports.number().min(0).default(5).describe(
-        "Per-run USD ceiling for a CLASS-1 roadmap blocker executed via `agent-config gates --execute`. A class-1 entry whose **Budget:** field states a larger figure renders its consent line instead of running. Bounds the size of an authorised spend; never supplies the authorisation \u2014 `--confirm` is still required on every class-1 run."
+      // `.min(0)` is kept deliberately, at a known cost: the settings-
+      // reference generator renders a constrained nullable number as
+      // type `unknown` rather than `number,null` (it reads `node.type`,
+      // which a constrained nullable emits as an `anyOf` instead).
+      // Eight keys already render that way. Dropping the constraint
+      // would buy a nicer doc cell by letting a negative USD ceiling
+      // into the schema, and a cap that refuses everything is a worse
+      // outcome than an uninformative table cell.
+      max_cost_per_run_usd: external_exports.number().min(0).nullable().default(null).describe(
+        "Per-run USD ceiling for a CLASS-1 roadmap blocker executed via `agent-config gates --execute`. A class-1 entry whose **Budget:** field states a larger figure renders its consent line instead of running. null (default) = no per-run ceiling, per ADR-279: a spend bound applies only where one was set, and the absence of a bound is not a refusal. Bounds the size of an authorised spend; never supplies the authorisation \u2014 `--confirm` is still required on every class-1 run, set or unset."
       ),
-      max_cost_per_rolling_7d_usd: external_exports.number().min(0).default(25).describe(
-        "Rolling 7-day USD ceiling for class-1 gate execution, summed from the append-only receipt ledger at agents/runtime/state/gate-budget-ledger.jsonl. A run whose estimate would cross it renders instead of running. A per-run cap alone bounds one mistake, not a week of them, which is why option (a) of b-gate-budget-preauth carries two numbers."
+      max_cost_per_rolling_7d_usd: external_exports.number().min(0).nullable().default(null).describe(
+        "Rolling 7-day USD ceiling for class-1 gate execution, summed from the append-only receipt ledger at agents/runtime/state/gate-budget-ledger.jsonl. A run whose estimate would cross it renders instead of running. null (default) = no rolling ceiling, per ADR-279. A per-run cap alone bounds one mistake, not a week of them, which is why option (a) of b-gate-budget-preauth carries two numbers \u2014 but each cap now bounds on its own, so setting one and leaving the other null is supported."
       )
-    }).default({ max_cost_per_run_usd: 5, max_cost_per_rolling_7d_usd: 25 })
+    }).default({ max_cost_per_run_usd: null, max_cost_per_rolling_7d_usd: null })
   }),
   planning: external_exports.object({
     closure_pass: external_exports.boolean().default(true).describe(
@@ -4341,11 +4334,6 @@ var settingsSchema = external_exports.object({
       "Extra project-relative paths where THIS project keeps a code-graph index another tool wrote. The built-in list is deliberately vendor-neutral (graph.json, code-graph.json, .code-graph/graph.json) and names no tool, so a tool that writes its index elsewhere is named here rather than waited for. A graph found this way LOADS and answers query and explain with every edge tagged read-from-elsewhere; the gate verbs (impact, untested, dead) refuse a graph made only of such edges and say so, because an empty answer from a gate must not read as 'nothing found' when it means 'nothing trusted'. Absolute paths and paths escaping the project root are ignored."
     )
   }).default({}),
-  consistency: external_exports.object({
-    cross_source: crossSourceMode.default("on").describe(
-      "Consumed by the cross-source-consistency rule. When the agent works from multiple sources (ticket text, an attached image/mockup, the spec, the codebase) it checks them against each other and asks before proceeding on a discrepancy \u2014 instead of silently guessing. on (default) = surface every real cross-source contradiction / silent-scope-expansion as one question; auto = surface only high-confidence contradictions, state low-confidence as an assumption; off = no cross-source checking."
-    )
-  }).default({ cross_source: "on" }),
   screenshots: external_exports.object({
     identity_allowlist: external_exports.array(external_exports.string()).default([]).describe(
       "Consumed by the doc-screenshot-hygiene rule and screenshot-hygiene skill. Public identity tokens SAFE to show unredacted in a documentation screenshot \u2014 the maintainer's own public handles plus well-known fake-data tokens. Not a general fake-data dictionary and not identity-resolution: everything not listed is treated as sensitive by default, and a public handle co-located with a real name does not whitelist the real name. Default [] = nothing auto-allowed."
@@ -4357,39 +4345,11 @@ var settingsSchema = external_exports.object({
       "Consumed by the doc-screenshot-hygiene rule. on (default) = a data-bearing screenshot embed is gated behind this-turn human confirmation; uncertain/unresolved regions redact-or-refuse, never ship-and-hope; illustrative/no-data screenshots may embed with a stated justification. off = no data-bearing gate (the anonymization taxonomy still applies)."
     )
   }).default({ identity_allowlist: [], forbid_terminal_capture: true, data_bearing_gate: "on" }),
-  telegraph: external_exports.object({
-    speak: external_exports.boolean().default(false).describe(
-      "Whether the telegraph-speak rule ships at all. false (default) = DORMANT: compile_router omits the rule from dist/router.json entirely, so its body never reaches a host. This is the only lever that stops the cost. Set true only after an output-side bench clears the kill-criterion bar (docs/adrs/telegraph/0002)."
-    )
-  }).default({ speak: false }),
-  tokens: external_exports.object({
-    rich_skills: richSkillsMode.default("on").describe(
-      "Whether skills marked token_budget_class: rich may load in full (exempt from telegraph-speak + thin-projector trimming), consumed by the token-budget-discipline rule. on = allowed (default); off = fall back to standard condensed behavior; ask = surface an estimated token delta (tokens, not dollars) and ask once per session before loading."
-    )
-  }).default({ rich_skills: "on" }),
   verbosity: external_exports.object({
-    intent_announcements: external_exports.boolean().default(false).describe(
-      'Intent narration before tool batches ("Let me check X\u2026"). Only honored when personal.play_by_play is ALSO true (the direct-answers narration carve-out requires both). false (default) = act and emit the result.'
-    ),
-    preview_artifacts: external_exports.boolean().default(false).describe(
-      "Show generated commit messages, PR titles/bodies, branch names before acting. false (default) = use generated content directly (/commit terse path)."
-    ),
-    routine_confirmations: external_exports.boolean().default(false).describe(
-      "Confirmation prompts for routine workflow steps with one obvious answer. Iron-Law gates (commit-policy, scope-control git-ops, Hard Floor) ALWAYS ask regardless."
-    ),
     offer_council_in_delivery: external_exports.boolean().default(false).describe(
       'Offer "run AI Council on this?" inside delivery commands (/feature-plan, /review-changes, /roadmap-create). Council commands themselves are unaffected.'
-    ),
-    post_action_reports: external_exports.enum(["off", "minimal", "full"]).default("minimal").describe(
-      "Status blocks after a successful action. off = errors only; minimal (default) = one-line confirmation; full = bullet list."
     )
-  }).default({
-    intent_announcements: false,
-    preview_artifacts: false,
-    routine_confirmations: false,
-    offer_council_in_delivery: false,
-    post_action_reports: "minimal"
-  }),
+  }).default({ offer_council_in_delivery: false }),
   code_style: external_exports.object({
     docblocks: external_exports.enum(["minimal", "full"]).default("minimal").describe(
       "Consumed by the code-comment-discipline rule. minimal (default) = no signature-mirroring docblocks; docblocks only for machine-relevant precision (generics, array shapes) or genuine why-context. full = the exported public surface of a library package may carry one-line summary docblocks; the redundancy ban still holds."
@@ -4398,44 +4358,9 @@ var settingsSchema = external_exports.object({
   reasoning: external_exports.object({
     enabled: external_exports.boolean().default(true).describe(
       "Master switch for the Reasoning Discipline Protocol (RDP). false = the whole layer is inert (zero overhead)."
-    ),
-    auto_gate: external_exports.boolean().default(true).describe(
-      "Engage the discipline only where it pays, using table-free signals (task triviality + agent-self-assessed host reasoning strength; no runtime model->band lookup, per ADR-035). false = gate on task-signal + the component toggles only."
-    ),
-    components: external_exports.object({
-      orchestrator: external_exports.boolean().default(true).describe(
-        "Sequence the reasoning chain (ground->intent->notes->gather->audit->verify) as one system; the single coordination point."
-      ),
-      notes_first: external_exports.boolean().default(true).describe(
-        "Keep hypotheses/predictions/decisions in session notes; the response carries conclusions + evidence only."
-      ),
-      grounding: external_exports.boolean().default(true).describe(
-        "Explore the environment / close info-gaps before designing."
-      ),
-      intent: external_exports.boolean().default(true).describe(
-        "Infer the underlying goal before solving the literal ask (standard host only)."
-      ),
-      complexity_first: external_exports.boolean().default(true).describe(
-        "Risk-first: resolve the load-bearing unknown before the easy parts (RDP derivation, not a Fable-documented behavior)."
-      ),
-      verifier_default: external_exports.boolean().default(true).describe(
-        "Run a fresh-context verifier on the structural-complexity gate (branching/constraints/stateful/irreversible + token floor)."
-      ),
-      prediction_tracking: external_exports.boolean().default(true).describe(
-        "Log prediction + confidence + outcome + lesson (calibration loop)."
-      ),
-      decision_ledger: external_exports.boolean().default(true).describe(
-        "Log decision + alternatives + reason + revisit-if; escalates to decision-record/ADR when durable."
-      ),
-      uncertainty_budget: external_exports.boolean().default(true).describe(
-        "Per-dimension uncertainty score that feeds adaptive effort."
-      )
-    }).default({})
+    )
   }).default({}),
   subagents: external_exports.object({
-    downshift: external_exports.boolean().default(true).describe(
-      "Route delegable sub-tasks to the lowest-capable model tier (cost + speed via model downshift). false = every subagent runs on the session tier."
-    ),
     quota_arbitrage: external_exports.boolean().default(true).describe(
       "Prefer a separate quota-pool model for delegable sub-tasks where the host manifest reports one. Optional bonus only \u2014 identical behaviour (minus the quota win) where unsupported. Never load-bearing."
     ),
@@ -4456,7 +4381,7 @@ var settingsSchema = external_exports.object({
       "Session-wide model CEILING for subagents (spend cap). Empty (default) = no ceiling. When set, suite-owned CLI spawn wrappers export CLAUDE_CODE_SUBAGENT_MODEL to the sessions they launch. Class C: a human sets it; the agent never writes or infers one."
     ),
     max_parallel: external_exports.number().int().min(1).default(3).describe(
-      "Hard cap on subagents running in parallel during /do-in-parallel, /do-competitively, and /judge runs. Raise for faster fan-out, lower if you hit rate limits or want lower token spend."
+      "Limit on subagents running in parallel during /do-in-parallel, /do-competitively, and /judge runs \u2014 a value the model reads from settings; no code counts spawns against it. Raise for faster fan-out, lower if you hit rate limits or want lower token spend."
     ),
     adversarial_council: external_exports.enum(["off", "ask", "on"]).default("off").describe(
       "Opt-in adversarial-verification-council mode (subagent-orchestration Mode 9, ADR-122). off (default) = never runs; ask = offer it on an explicit high-risk change; on = auto-run on high-risk changes. Advisory only \u2014 a panel of distinct-model skeptics red-teams a real change for defect FINDING coverage and NEVER auto-gates it (Hard Floor). Stays default-off until the adversarial-council-finding-coverage claim is backed."
@@ -4475,9 +4400,6 @@ var settingsSchema = external_exports.object({
     max_calls_per_day: external_exports.number().int().min(0).default(50).describe(
       "Per-day cap on team calls, read against the EXISTING cli_call_budget openai bucket (~/.event4u/agent-config/cli-calls.json, daily UTC reset) \u2014 one subscription, one counter, never a parallel count. 0 = block all team calls."
     ),
-    suppress_setup_hint: external_exports.boolean().default(false).describe(
-      "Suppress the one-line wizard/init recommendation to set up the codex plugin on Claude-Code hosts. Cosmetic only \u2014 never changes behavior."
-    ),
     review_gate: external_exports.object({
       managed: external_exports.boolean().default(false).describe(
         "Managed governance of the codex plugin's Stop-hook Review Gate (road-to-team-mode Phase 4). false (default) = byte-identical pre-Phase-4 behavior: no counting, no circuit breaker. true = count consecutive BLOCK verdicts per session and trip the circuit breaker at max_consecutive_blocks."
@@ -4486,7 +4408,7 @@ var settingsSchema = external_exports.object({
         "Circuit-breaker bound: after this many CONSECUTIVE BLOCK verdicts in one session, a visible notice is injected exactly once and the managed layer stops re-blocking \u2014 the user decides, never an infinite Claude\u2194Codex loop. An ALLOW verdict resets the counter. Positive integer."
       )
     }).default({ managed: false, max_consecutive_blocks: 3 })
-  }).default({ model: "auto", allow_delegate: false, max_calls_per_day: 50, suppress_setup_hint: false, review_gate: { managed: false, max_consecutive_blocks: 3 } }),
+  }).default({ model: "auto", allow_delegate: false, max_calls_per_day: 50, review_gate: { managed: false, max_consecutive_blocks: 3 } }),
   emergency: external_exports.object({
     orchestration_halt: external_exports.boolean().default(false).describe(
       "The one audited incident switch over the always-on orchestration stack (subagents, council, team). NOT an activation gate: false (default) = the stack runs normally. true = halted; arming requires no ceremony. Disarming (returning to false) requires orchestration_halt_justification to be a non-empty string. Both transitions emit one telemetry line."
@@ -4501,22 +4423,7 @@ var settingsSchema = external_exports.object({
     )
   }),
   commands: external_exports.object({
-    auto_detect: external_exports.enum(["enabled", "warn", "disabled"]).default("enabled").describe(
-      "Global kill-switch for orchestrator auto-detection (6.1.0 non-interactive-contract). enabled (default) = /judge, /fix, /analytics, /tests, /override auto-detect their sub-command per a confidence-tiered table; warn = detect but always confirm before routing; disabled = never auto-detect (always show the menu interactively, require an explicit sub-command in CI). Per-orchestrator override: auto_detect:false in front-matter. Per-invocation: --no-auto-detect."
-    ),
     suggestion: external_exports.object({
-      enabled: external_exports.boolean().default(true).describe(
-        'Master switch for the slash-command suggestion layer. When on, the agent offers numbered options ("did you mean /commit?") instead of guessing. Turn off if you prefer to type every command yourself.'
-      ),
-      confidence_floor: external_exports.number().min(0).max(1).default(0.6).describe(
-        "Minimum semantic-match score (0.0\u20131.0) before a command is offered as a suggestion. 0.6 (default) balances precision and recall. Raise toward 0.8 for fewer false positives, lower for broader hints."
-      ),
-      cooldown_seconds: external_exports.number().int().min(0).default(600).describe(
-        "How long (seconds) the suggester waits before offering the same command again after you ignored it. Default 600s (10 min) keeps the agent from nagging. Set 0 to disable the cooldown."
-      ),
-      max_options: external_exports.number().int().min(0).default(4).describe(
-        'Maximum number of command suggestions shown in a single numbered-options block, before the "Proceed as-is" escape. Lower for terser prompts, raise if you regularly want broader fan-out.'
-      ),
       blocklist: external_exports.array(external_exports.string()).default([]).describe(
         'Slash-command names that should never be suggested, one per line (e.g. "commit", "create-pr"). Useful if a command misfires on your common phrasing.'
       )
@@ -4528,17 +4435,8 @@ var settingsSchema = external_exports.object({
       detail_level: external_exports.enum(["min", "med", "max"]).default("min").describe(
         "Verbosity tier for the generated PR description body. min (default) = title + 2-3 sentence what/why/impact + linked ticket (token-frugal); med = min + grouped changes + tests note; max = med + how-to-test + edge cases + reviewer guidance. Critical info (breaking changes, migrations, security, rollback) is ALWAYS included at every tier \u2014 the tier governs explanatory depth, never whether a critical callout appears."
       ),
-      api_examples: external_exports.boolean().default(true).describe(
-        "JSON request/response examples for API-endpoint changes. true (default) = include a fenced example ONLY when grounded in a real source (response DTO/resource, OpenAPI/schema, test fixture, or an actual probe); no grounded source \u2192 a one-line pointer, never an invented example. false = never add API examples."
-      ),
       screenshots: external_exports.boolean().default(false).describe(
         "Screenshots for frontend changes. false (default) = never attempt. true = attempt when the host has browser/preview tooling and the diff touches a frontend surface; capability-gated (emits a one-line note and leaves the placeholder when tooling is absent, never fails or blocks the PR). Before/after + changed-region highlighting is best-effort."
-      ),
-      ui_paths: external_exports.array(external_exports.string()).default([]).describe(
-        'Optional glob list that makes frontend detection explicit instead of heuristic (e.g. ["resources/views/**", "src/pages/**"]). Empty (default) = a light path/extension heuristic that fails open (no false enrichment when the surface is ambiguous).'
-      ),
-      api_paths: external_exports.array(external_exports.string()).default([]).describe(
-        'Optional glob list that makes API-endpoint detection explicit instead of heuristic (e.g. ["app/Http/Controllers/Api/**", "src/pages/api/**"]). Empty (default) = a light path/extension heuristic that fails open.'
       )
     })
   }),
@@ -4551,12 +4449,6 @@ var settingsSchema = external_exports.object({
     )
   }),
   memory: external_exports.object({
-    cadence: memoryCadence.default("always").describe(
-      "Cadence of the \u{1F9E0} memory-visibility line after a memory-consulting step. always (default) = show whenever a memory type was asked; auto = show only when 3+ types were consulted (less noise); never = suppress. Distinct from rule_loading_tier \u2014 owns its own key since the 2026-06-01 untangle."
-    ),
-    review_threshold: external_exports.number().int().min(0).default(10).describe(
-      "Maximum number of memory entries /memory:load surfaces inline before falling back to a summary view. Default 10 keeps the chat readable. Raise to see more candidates, lower to keep the context tight."
-    ),
     redact_patterns: external_exports.array(external_exports.string()).default([]).describe(
       "Regex patterns (one per line) that scrub matches from chat-history transcripts and memory before they hit disk. Use for secrets, customer names, internal URLs. Patterns are anchored and case-insensitive."
     ),
@@ -4574,38 +4466,13 @@ var settingsSchema = external_exports.object({
       ),
       allowed_tiers: external_exports.array(external_exports.string()).default(["public"]).describe(
         "Origin tiers auto-eligible to cross a project boundary. proprietary is manual-only regardless (the gate hard-codes it), so an in-house schema never auto-shares."
-      ),
-      redaction: external_exports.object({
-        enabled: external_exports.boolean().default(true).describe(
-          "Run the privacy-floor + source-confidentiality scan before any card goes global."
-        ),
-        halt_on_trigger: external_exports.boolean().default(true).describe(
-          "Halt-and-surface on a confidential-pattern hit; never silent-share, never auto-rewrite."
-        )
-      }).default({}),
-      auto_promote_threshold: external_exports.number().int().min(1).default(2).describe(
-        "Distinct-repo count at which a public/vendor card triggers a promotion suggestion (never a silent write)."
-      ),
-      freshness: external_exports.object({
-        hypothesis_after_days: external_exports.number().int().min(0).default(90).describe(
-          "A global card older than this is lead-only (positive structure must be re-confirmed before use)."
-        ),
-        stale_after_days: external_exports.number().int().min(0).default(180).describe(
-          "A global card older than this is skipped until re-verified."
-        )
-      }).default({})
+      )
     }).default({})
   }).default({}),
   hooks: external_exports.object({
     concern_budget: external_exports.object({
-      max_per_event: external_exports.number().int().min(1).default(8).describe(
-        "Maximum number of concerns (issues / warnings) a single hook may raise per (platform, event) pair before the hook is rate-limited. Default 8 prevents noisy hooks from drowning out high-signal ones."
-      ),
       tier1_concerns: external_exports.array(external_exports.string()).default([]).describe(
         "Concern IDs (one per line) that are allowed to block the run on failure rather than warn. Reserved for high-confidence guards \u2014 leave empty unless you maintain custom hooks."
-      ),
-      hard_fail: external_exports.boolean().default(false).describe(
-        "When a hook exceeds hooks.concern_budget.max_per_event, fail the run (true) instead of warning and continuing (false, default). Turn on in CI when you want hook quality to gate merges."
       )
     }),
     verify_before_complete: external_exports.object({
@@ -4658,12 +4525,9 @@ var settingsSchema = external_exports.object({
     // fires is decided by each detector's own trigger conditions, not by a
     // flag. A leftover `hooks.turn_end_gate.*` block from an older install
     // warns once on stderr and is ignored — see REMOVED_KEYS in
-    // `src/scripts/_lib/agent_settings.ts`.
+    // `src/scripts/_lib/settings_removed_keys.ts`.
   }),
   decision_engine: external_exports.object({
-    surface_traces: external_exports.boolean().default(false).describe(
-      "Emit DecisionTraceHook events that surface why the agent picked one option over another. Useful when debugging unexpected choices; off by default to keep chat noise low."
-    ),
     min_confidence: confidenceBand.default("off").describe(
       "During Phase=Plan, refuse to advance to Phase=Implement if confidence is below this band. off (default) = no gate. low / medium / high = raise the floor; on miss, decision_engine.on_block decides what happens."
     ),
@@ -4677,10 +4541,7 @@ var settingsSchema = external_exports.object({
       "What the decision engine does when a gate (min_confidence / block_on_risk / require_memory_hits) fires. stop (default) = halt and surface the reason. ask = present numbered options. warn = log and continue."
     ),
     ask_timeout_seconds: external_exports.number().int().min(0).default(30).describe(
-      "Non-TTY timeout (seconds) for decision_engine.on_block = ask. After this elapses without input, decision_engine.on_block_fallback takes over. Default 30s; raise for slow human review, 0 = wait forever."
-    ),
-    on_block_fallback: onBlockFallback.default("stop").describe(
-      "Resolution when decision_engine.on_block = ask times out (see decision_engine.ask_timeout_seconds). stop (default) = halt the run. warn = log and continue with the agent's best guess."
+      "Non-TTY timeout (seconds) for decision_engine.on_block = ask. After this elapses without input, the engine stops (fail-safe). Default 30s; raise for slow human review, 0 = wait forever."
     )
   }),
   update_check: external_exports.object({
@@ -4688,11 +4549,6 @@ var settingsSchema = external_exports.object({
       "Once per day the agent checks the npm registry for a newer agent-config release and surfaces a one-line banner if one exists. Turn off in air-gapped environments or to silence the banner."
     )
   }),
-  explain: external_exports.object({
-    enable_last: external_exports.boolean().default(true).describe(
-      "Enable the `agent-config explain last` command, which prints the reasoning behind the agent's most recent decision (last tool call, last suggestion). Disable if you never use it and want a smaller CLI surface."
-    )
-  }),
   legal_review_prep: external_exports.object({
     acknowledged: external_exports.boolean().default(false).describe(
       "I understand the legal-review-prep pack provides templates and general information ONLY \u2014 it is NOT legal advice, creates no attorney-client relationship, and never replaces a licensed lawyer. Individual cases require an attorney. The pack stays inactive until this is checked."