@event4u/agent-config 9.28.0 → 9.29.0

package/dist/ui/index.html

@@ -27,7 +27,7 @@
                 document.documentElement.setAttribute('data-theme', theme);
             })();
         </script>
-      <script type="module" crossorigin src="/assets/index-DmR0mbk4.js"></script>
+      <script type="module" crossorigin src="/assets/index-JDAF00bC.js"></script>
       <link rel="stylesheet" crossorigin href="/assets/index-jSfMW8_t.css">
     </head>
     <body>

package/docs/contracts/settings-classes.md

@@ -129,18 +129,51 @@ larger set; it is the set that passes both halves.
 | `personal.canary_name` | un-inferrable, and answering arms the session-degradation canary; one keypress to accept the prefill | `""` (canary dark) |
 | `memory.learn_on_session_end` | it turns on automatic memory writes at the end of every session — a standing write the user should authorise | `false` |
 
+## The one exception — `emergency.orchestration_halt`
+
+The always-on-orchestration doctrine (subagents, council, team) deletes every
+per-layer on/off setting: `subagents.enabled`, `subagents.auto`, and
+`subagents.host_capabilities` are gone from the template, and the layer
+activates on any capable host with an EMPTY settings file. One switch survives
+that deletion on purpose, and it is not the same shape wearing a different
+name.
+
+```
+ON-BY-DEFAULT, NOT OFF-BY-DEFAULT. ABSENT OR false MEANS THE STACK RUNS.
+ARMING THE HALT IS CEREMONY-FREE — INCIDENTS ARE URGENT.
+DISARMING IT REQUIRES A NON-EMPTY orchestration_halt_justification.
+INCIDENT-RESPONSE USE ONLY.
+```
+
+**Enforcement, stated honestly (`enforced_by: none`).** The settings file is
+hand-edited YAML — no machine sits on the write path, so the
+justification-on-disarm rule and any per-transition telemetry are
+MODEL-CARRIED conventions, not checked gates (the same honesty stance as
+`security-sensitive-stop`). What IS checked: readers treat only strict
+`true` as halted, and the `no-activation-gates` lint prevents the switch
+from ever growing activation siblings. An agent editing this key follows
+the convention; a human editing it is the owner exercising it.
+
+The distinguishing test against "an activation gate under a new name": an
+activation gate is symmetric — flipping it either way costs the same nothing,
+and its purpose is to let a capability sit unused by default. This switch is
+asymmetric by convention — cheap to arm during an incident, costed (a stated
+reason) to disarm, never a silent preference. `subagents.downshift`, `subagents.quota_arbitrage`, and
+`subagents.model_map` are unaffected by the deletion — they tune HOW a
+dispatch runs, not WHETHER the layer exists, so they keep their own C rows.
+
 ## Counts
 
 | Class | Keys |
 |---|---|
 | A — preference | 27 |
 | B — consent | 3 |
-| C — guarded | 110 |
-| **Total** | **140** |
+| C — guarded | 107 |
+| **Total** | **137** |
 
 The total is every leaf in the template, where *leaf* means anything that is not
-a **non-empty** map. An empty map (`subagents.host_capabilities: {}`) is a real
-configurable value with a real default, so it is a leaf here — one row more than
+a **non-empty** map. An empty map (like the former `subagents.host_capabilities: {}`) is a real
+configurable value with a real default, so such keys count as leaves here — one row more than
 the template↔schema parity test walks, deliberately, because a key with no
 class is exactly what this contract exists to prevent.
 
@@ -229,27 +262,24 @@ Rows follow template order, so a diff against the template reads straight down.
 | `screenshots.forbid_terminal_capture` | C | `true` | kill-switch over the highest-leak capture path |
 | `screenshots.data_bearing_gate` | C | `"on"` | the human-confirmation gate over a published egress |
 | `code_style.docblocks` | A | `minimal` | code convention |
-| `subagents.enabled` | C | `true` | kill-switch for the whole subagent layer |
-| `subagents.auto` | C | `"on"` | dispatches work without asking |
 | `subagents.downshift` | C | `true` | routes to another model tier, which is spend and quality |
-| `subagents.budget_routing` | C | `ask` | the budget-aware routing gate |
 | `subagents.quota_arbitrage` | C | `true` | spends from a separate quota pool |
 | `subagents.model_map.lite` | C | `""` | names an external model endpoint |
 | `subagents.model_map.medium` | C | `""` | names an external model endpoint |
 | `subagents.model_map.high` | C | `""` | names an external model endpoint |
-| `subagents.host_capabilities` | C | `{}` | overrides the host capability manifest |
 | `subagents.implementer_model` | C | `""` | names an external model endpoint |
 | `subagents.judge_model` | C | `""` | names an external model endpoint |
 | `subagents.max_parallel` | C | `3` | parallelism cap, and therefore a spend rate |
 | `subagents.adversarial_council` | C | `"off"` | governs a paid verification step |
 | `worktrees.mode` | C | `ask` | standing permission for autonomous worktree creation |
-| `ai_team.enabled` | C | `false` | authorises paid external CLI calls |
 | `ai_team.model` | C | `auto` | names an external model |
 | `ai_team.allow_delegate` | C | `false` | grants an external tool write access to the repository |
 | `ai_team.max_calls_per_day` | C | `50` | quota cap on a shared budget |
 | `ai_team.suppress_setup_hint` | A | `false` | hint cosmetics |
 | `ai_team.review_gate.managed` | C | `false` | governs an upstream review gate |
 | `ai_team.review_gate.max_consecutive_blocks` | C | `3` | circuit-breaker threshold |
+| `emergency.orchestration_halt` | C | `false` | the one audited incident switch over the always-on orchestration stack — see § The one exception above |
+| `emergency.orchestration_halt_justification` | C | `""` | required non-empty before the halt may be lifted; an audit-trail field |
 | `onboarding.onboarded` | C | `false` | flipping it bypasses the onboarding gate |
 | `commands.auto_detect` | C | `enabled` | kill-switch for orchestrator auto-detection |
 | `commands.suggestion.enabled` | A | `true` | a convenience layer; governs no gate and no spend |

package/package.json

@@ -1,7 +1,7 @@
 {
     "name": "@event4u/agent-config",
     "mcpName": "io.github.event4u-app/agent-config",
-    "version": "9.28.0",
+    "version": "9.29.0",
     "description": "Governed skills, rules and commands for AI coding tools (Claude Code, Cursor, Windsurf, Copilot) — every claim machine-checked, including \"zero runtime daemon\".",
     "license": "MIT",
     "private": false,

package/src/agent-src/templates/AGENTS.md

@@ -1,6 +1,6 @@
 # {{project_name}}
 
-<!-- Fill placeholders or run `/agents init`; delete after. Capability bullets, not paths. Recipes: `.augment/contexts/contracts/agents-md-anatomy.md`. -->
+<!-- Fill placeholders or run `/agents init`; delete after. Recipes: `.augment/contexts/contracts/agents-md-anatomy.md`. -->
 
 > {{project_description}}
 
@@ -8,8 +8,8 @@
 
 | Layer | Location | Edits |
 |---|---|---|
-| Installed package | `.augment/`, `dist/agent-src/` | hands-off — managed by `event4u/agent-config` |
-| Project layer | `agents/`, `agents/overrides/`, `.agent-settings.yml` | your customizations and config |
+| Installed package | `.augment/`, `dist/agent-src/` | managed by `event4u/agent-config` |
+| Project layer | `agents/`, `agents/overrides/`, `.agent-settings.yml` | your customizations |
 
 ## Pointers
 
@@ -18,7 +18,7 @@
 - **Skills (on-demand expertise)** — domain skills surfaced by description, invoked on trigger match: [`.augment/skills/`](.augment/skills/).
 - **Commands (workflows)** — slash-commands the agent runs end-to-end (`/work`, `/create-pr`, …): [`.augment/commands/`](.augment/commands/).
 - **Project-specific docs** — your own architecture notes, roadmaps, sessions, contexts: [`agents/`](agents/).
-- **Delegation & review** — dispatch independent-slice tasks to subagents instead of serial work; a mutating session ends after a neutral cross-model review: [`delegation-policy`](.augment/rules/delegation-policy.md).
+- **Delegation & review** — dispatch independent-slice tasks to subagents instead of serial work; in a team (host-flag gated) the lead coordinates, teammates implement; a mutating session ends after a neutral cross-model review: [`delegation-policy`](.augment/rules/delegation-policy.md).
 
 ## Emergency triage — read this when nothing else is reachable
 

package/src/config/agent-settings.template.yml

@@ -231,7 +231,8 @@ cost:
     # separate tier cap — the global ceilings above still apply and the
     # budget-routing relation works purely off them. Set a value to cap one
     # tier (e.g. cheap: 10 keeps haiku-class delegation under $10/day-window
-    # of the ledger). Consumed by subagents.budget_routing below.
+    # of the ledger). Informational since the budget_routing key was removed
+    # (always-on orchestration): routing is judgment-ladder-driven.
     per_tier:
       cheap: null
       medium: null
@@ -743,60 +744,27 @@ code_style:
 
 # --- Subagent orchestration ---
 #
-# Controls model selection, parallelism, and AUTOMATIC orchestration for
-# subagent-based workflows (/do-and-judge, /do-in-steps, /judge, and the
-# auto-dispatch layer). Empty values fall back to the runtime defaults
-# described in .augment/contexts/subagent-configuration.md and
+# Always-on orchestration (road-to-always-on-orchestration Phase 1): the
+# subagent layer carries no per-run on/off setting. `subagents.enabled`,
+# `subagents.auto`, and `subagents.host_capabilities` were REMOVED — a fresh
+# install with this section untouched still activates auto-dispatch on any
+# host whose capability probe reports a subagent primitive. Capability is a
+# fact resolved from the host (registry + a live environment probe), never a
+# setting; the one surviving incident-only control is `emergency.
+# orchestration_halt` below. A leftover `subagents.enabled` / `subagents.auto`
+# / `subagents.host_capabilities` key from an older install is ignored (one
+# deprecation-warning line on load, per-key, per run).
+#
+# What remains below tunes HOW a delegated sub-task runs, never WHETHER the
+# layer exists. Empty values fall back to the runtime defaults described in
+# .augment/contexts/subagent-configuration.md and
 # .augment/contexts/execution/auto-orchestration-activation.md.
 subagents:
-  # Global master switch for the whole subagent layer.
-  # true (default) = the layer is available; false = fully disabled, the
-  # canonical kill-switch (no auto-dispatch, no model routing, in-session only).
-  enabled: true
-
-  # Automatic-dispatch mode:  off | ask | on
-  #
-  # off = never auto-dispatch; subagents only via an explicit command.
-  # ask = classify the task; when delegable, ask once before dispatching.
-  # on  = auto-dispatch delegable tasks without asking (surface the choice
-  #       in one line).
-  #
-  # SHIPPED default is `on` on hosts whose capability manifest reports
-  # `subagent_spawn: true`, and `off` on hosts without a subagent primitive.
-  # Auto-dispatch stays a no-op wherever the manifest reports
-  # `subagent_spawn: false`, regardless of this value.
-  #
-  # The default was `ask` until 2026-07-09, when it was flipped to `on` after a
-  # re-evaluation (agents/settings/contexts/orchestration-default-flip-verdict.md
-  # § 2026-07-09; ADR-117). The flip rests on a bounded-downside argument, NOT a
-  # passed benchmark: delegable slices are already cost-routed to the cheapest
-  # capable tier, classification fires only on real structural signals (never
-  # unstructured or tiny work), and every return is verified — so `on` cannot
-  # delegate frontier-priced or speculative work. `resolveShippedDefault()`
-  # remains the telemetry-driven DEMOTION gate: a measured regression demotes
-  # back to `ask`.
-  auto: "on"
-
   # Route delegable sub-tasks to the lowest-capable model tier (cost + speed
   # via model downshift). true (default) = downshift per declared model_tier;
   # false = every subagent runs on the session tier.
   downshift: true
 
-  # Budget-aware cheap-request delegation (docs/contracts/budget-routing.md).
-  # Picks the cheapest CLASSIFIER-ADEQUATE tier that has available budget
-  # (cost.budgets.per_tier above); cheap exhausted but strong funded → strong
-  # tier; everything exhausted → session model + notice. Work is never
-  # blocked to save money, and the session model is never switched — routing
-  # happens as delegation with a model override. DISTINCT from `downshift`
-  # above: downshift is the quality/cost trade-off knob, budget_routing is
-  # the resource-availability gate (council 2026-08-03).
-  #   ask  = (default) first budget-motivated downshift of a session asks once
-  #   auto = apply the relation silently (telemetry line per routed request)
-  #   off  = today's behavior; single-flip rollback — QUOTE it ("off") when
-  #          editing: bare off is YAML-1.1 boolean false (readers coerce, but
-  #          the quoted form is the unambiguous one, same as `auto: "on"`)
-  budget_routing: ask
-
   # Prefer a separate-quota-pool model for delegable sub-tasks WHERE the host
   # manifest reports `separate_quota_pool: true` (e.g. a subscription whose
   # Sonnet allowance is distinct from Opus). Optional bonus only — behaviour is
@@ -811,12 +779,6 @@ subagents:
     medium: ""
     high: ""
 
-  # Optional host-capability override (see
-  # .augment/contexts/execution/host-capability-manifest.md). Any field set
-  # here wins; any field omitted falls back to the all-false safe default.
-  # Leave empty to let the agent resolve the manifest from host knowledge.
-  host_capabilities: {}
-
   # Model for implementer subagents (empty = same tier as the session model)
   implementer_model: ""
 
@@ -878,17 +840,23 @@ worktrees:
 
 # --- AI Team (cross-model strong-pair review — /team family) ---
 #
-# Governs the default-off `/team` capability family: one strong external
-# model (via the codex CLI, subscription-authed) reviews inside the repo —
-# the depth complement to the council's breadth. Schema + validation
-# contract: `docs/contracts/ai-team-config.md`. The loader
-# (`src/scripts/ai_team/config.ts`) rejects unknown keys fail-closed.
+# One strong external model (via the codex CLI, subscription-authed)
+# reviews inside the repo — the depth complement to the council's breadth.
+# Schema + validation contract: `docs/contracts/ai-team-config.md`. The
+# loader (`src/scripts/ai_team/config.ts`) rejects unknown keys fail-closed.
+#
+# Always-on orchestration (road-to-always-on-orchestration Phase 1, Step
+# 1.3): `/team` carries no per-run on/off setting — `enabled` was REMOVED.
+# A fresh install with this section untouched still surfaces `/team` when
+# the codex CLI resolves on $PATH AND some auth for it is detectable
+# (subscription login, API key, key file, or env key); otherwise every
+# invocation degrades with one clear "codex CLI not available" line
+# instead of a silent enabled:false refusal. Verify with `agent-config
+# doctor --check team`. The one surviving incident-only control is
+# `emergency.orchestration_halt` below. A leftover `enabled` key from an
+# older install is accepted and ignored (one deprecation-warning line on
+# load, per run).
 ai_team:
-  # Master switch. false (default) = /team commands are never suggested
-  # and every invocation refuses with an enable pointer; true = the
-  # family is live (individual gates below still apply).
-  enabled: false
-
   # Model handed to the codex CLI. 'auto' (default) = pass NO --model
   # flag, the codex CLI's own default applies — this tracks the
   # subscription's current strongest model instead of pinning a stale
@@ -897,8 +865,9 @@ ai_team:
 
   # Second opt-in for the ONLY wrapper that delegates write access
   # (/team:delegate → the plugin's native-Codex worker). false (default)
-  # = delegate refuses with an enable pointer even when ai_team.enabled
-  # is true. Both keys must be true before delegation is reachable.
+  # = delegate refuses even when /team itself is available. Availability
+  # (codex CLI installed + authenticated) is necessary but not
+  # sufficient — this key must ALSO be true before delegation is reachable.
   allow_delegate: false
 
   # Per-day cap on team calls. Team calls count into the EXISTING
@@ -934,6 +903,23 @@ ai_team:
     # Positive integer.
     max_consecutive_blocks: 3
 
+# --- Emergency orchestration halt (the one incident-only kill switch) ---
+#
+# NOT an activation gate — see docs/contracts/settings-classes.md § "The one
+# exception". The always-on orchestration stack (subagents, council, team)
+# has no per-layer on/off setting; this is the single audited switch that
+# survives, for incident response only.
+emergency:
+  # false (default) = the stack runs normally. Flipping this to true requires
+  # no ceremony — incidents are urgent. Flipping it back to false requires
+  # `orchestration_halt_justification` below to be a non-empty string; both
+  # transitions emit one telemetry line (enum/bool fields only).
+  orchestration_halt: false
+
+  # Required non-empty before `orchestration_halt` may return to false.
+  # Ignored while the halt is being armed (arming is ceremony-free).
+  orchestration_halt_justification: ""
+
 # --- Onboarding ---
 #
 # Tracks whether the initial setup flow (/onboard) has been completed

package/src/config/discovery/packs.yml

@@ -162,6 +162,17 @@
   size_class: small
   default_install: false
 
+- id: forensics
+  label: Forensic Evidence
+  description: Machine-derived release evidence from git history alone — hotspot risk (change frequency x complexity) and change-coupling analyzers; deterministic, read-only, advisory to the release findings pipeline.
+  workspaces: [engineering]
+  requires: [engineering-base]
+  trust_level_default: experimental
+  surface_tier: lab
+  domain: engineering
+  size_class: small
+  default_install: false
+
 - id: python
   label: Python
   description: Python-language patterns.

package/src/config/discovery/workspaces.yml

@@ -13,7 +13,7 @@
   description: Code, tests, CI, reviews, architecture.
   example_roles: [Developer, CTO, Tech Lead]
   default_packs: [engineering-base, git]
-  optional_packs: [php, laravel, symfony, javascript, typescript, react, nextjs, python, frontend-design, brand, analysis-workbench, scale-discipline, history-discipline]
+  optional_packs: [php, laravel, symfony, javascript, typescript, react, nextjs, python, frontend-design, brand, analysis-workbench, scale-discipline, history-discipline, forensics]
 
 - id: product
   label: Product

package/src/config/gate-violation-baselines.json

@@ -2,9 +2,9 @@
   "$comment": "Violation ratchet for gates whose dead scan root was repaired. A repair REVEALS pre-existing debt; it does not create it. Each entry records the count revealed at repair time — the gate fails only when its count RISES. Lowering a count is a normal commit; raising one is a defect. Entries expire: a baseline that has not dropped within 56 days of `landed` (or of `reaffirmed.date`) fails its gate, because a number that never moves is suppression with extra steps. Mechanism + rationale: src/scripts/_lib/gate_baseline.ts. Decision: AI council 2026-08-02, roadmap road-to-gates-that-can-fail blocker `dead-gate-finding-triage`.",
   "gates": {
     "check_no_new_legacy_path:hardcoded-scan-roots": {
-      "count": 49,
-      "landed": "2026-08-04",
-      "note": "Lines under src/scripts/**/*.{ts,mts,mjs} that pass the retired `.agent-src.uncondensed` directory into `path.join(...)` — a filesystem path CONSTRUCTED against the tree ADR-051 abandoned, which is the exact shape of all 14 dead gates. Deliberately narrow so the number is signal, not noise: 236 raw mentions under src/scripts → 147 string-literal lines → 67 path-constructing lines when the pass was written, after exempting src/scripts/_lib/agent_src.ts (the shared resolver, whose job IS owning the constant — gates that route through it survived the move). Detectors holding the literal as data to match, strip, or print are not counted, and no prose, docs, tests or fixtures are read: that full-tree shape was measured at 44 files / 213 hits and rejected as the wrong lint (see the note in check_no_new_legacy_path.ts::find_offenders). Recorded at 58 rather than 67 because Phase 1's scan-root repairs were landing on this branch while the pass was being written and had already removed 9 — a baseline above the truth silently permits new violations. This count goes to ZERO as the remaining repairs land; every repair is a lowering commit. Lowered 56→51 by the road-to-renewal-foundation Phase 1 dead-root sweep (check_always_budget, check_portability, check_references, lint_framework_leakage, lint_agents_md). Lowered 51→49 by the gate-hardening adoption PR: skill_collision_clusters and skill_overlap were repointed at the live skills tree via the shared resolver — two gates that had been reading the retired container and scoring 0 of 288 skills."
+      "count": 48,
+      "landed": "2026-08-09",
+      "note": "Lines under src/scripts/**/*.{ts,mts,mjs} that pass the retired `.agent-src.uncondensed` directory into `path.join(...)` — a filesystem path CONSTRUCTED against the tree ADR-051 abandoned, which is the exact shape of all 14 dead gates. Deliberately narrow so the number is signal, not noise: 236 raw mentions under src/scripts → 147 string-literal lines → 67 path-constructing lines when the pass was written, after exempting src/scripts/_lib/agent_src.ts (the shared resolver, whose job IS owning the constant — gates that route through it survived the move). Detectors holding the literal as data to match, strip, or print are not counted, and no prose, docs, tests or fixtures are read: that full-tree shape was measured at 44 files / 213 hits and rejected as the wrong lint (see the note in check_no_new_legacy_path.ts::find_offenders). Recorded at 58 rather than 67 because Phase 1's scan-root repairs were landing on this branch while the pass was being written and had already removed 9 — a baseline above the truth silently permits new violations. This count goes to ZERO as the remaining repairs land; every repair is a lowering commit. Lowered 56→51 by the road-to-renewal-foundation Phase 1 dead-root sweep (check_always_budget, check_portability, check_references, lint_framework_leakage, lint_agents_md). Lowered 51→49 by the gate-hardening adoption PR: skill_collision_clusters and skill_overlap were repointed at the live skills tree via the shared resolver — two gates that had been reading the retired container and scoring 0 of 288 skills. Lowered 49→48 by road-to-rule-delivery-integrity P2.2: score_skill_selection was repointed at the live skills tree via the shared resolver. It is the same shape as the two gates lowered before it — a scorer reading the retired container and scoring 0 of 288 skills — and here the consequence was sharper than a dead gate: the roadmap's pre-registered selection-accuracy criteria would have been compared against a baseline of silent zeros."
     },
     "audit_user_type_axis": {
       "count": 1,

package/src/scripts/_cli/cmd_conformance.ts

@@ -10,7 +10,9 @@
  *   (b) router-pointers      — dist/router.json ids + routes_to resolve on disk
  *   (c) hook-dispatcher      — dispatcher answers synthetic session_start/stop
  *   (d) lean-projection      — lean_projection.mode matches projected artifacts
- *   (e) host-manifest        — subagents.host_capabilities parses strictly
+ *   (e) host-manifest        — a leftover subagents.host_capabilities override
+ *                              is deprecated + ignored (always-on orchestration
+ *                              resolves capability from a probe/registry only)
  *
  * All checks are deterministic — no LLM, no network. Exit contract:
  *   0 = every check ok/skipped (warns allowed) and doctor --ci green
@@ -421,14 +423,6 @@ export function _check_lean_projection(
 // Check (e) — host-capability manifest parses strictly + matches detection.
 // ---------------------------------------------------------------------------
 
-const HOST_MANIFEST_KEYS = new Set([
-    'schema_version',
-    'subagent_spawn',
-    'parallel_spawn',
-    'status_polling',
-    'separate_quota_pool',
-]);
-
 export function _check_host_manifest(projectRoot: string): Dict {
     const detected = Object.entries(detectToolPresence(projectRoot))
         .filter(([, v]) => v === true)
@@ -441,7 +435,7 @@ export function _check_host_manifest(projectRoot: string): Dict {
         return {
             id: 'host-manifest',
             status: 'ok',
-            message: `no .agent-settings.yml — safe-default manifest applies (${detectedNote})`,
+            message: `no .agent-settings.yml — host capability is always probe/registry-resolved (${detectedNote})`,
             remedy: '',
         };
     }
@@ -462,44 +456,22 @@ export function _check_host_manifest(projectRoot: string): Dict {
         return {
             id: 'host-manifest',
             status: 'ok',
-            message: `no host_capabilities override — safe-default manifest applies (${detectedNote})`,
+            message: `no host_capabilities override — host capability is always probe/registry-resolved (${detectedNote})`,
             remedy: '',
         };
     }
-    if (typeof manifest !== 'object' || Array.isArray(manifest)) {
-        return {
-            id: 'host-manifest',
-            status: 'fail',
-            message: 'subagents.host_capabilities is not a mapping',
-            remedy: 'use the four boolean fields from the host-capability manifest contract',
-        };
-    }
-    const problems: string[] = [];
-    for (const [key, value] of Object.entries(manifest as Dict)) {
-        if (!HOST_MANIFEST_KEYS.has(key)) {
-            problems.push(`unknown key '${key}'`);
-            continue;
-        }
-        if (key === 'schema_version') {
-            if (value !== 1) problems.push(`schema_version must be 1 (got ${JSON.stringify(value)})`);
-            continue;
-        }
-        if (typeof value !== 'boolean') {
-            problems.push(`'${key}' must be boolean (got ${JSON.stringify(value)})`);
-        }
-    }
-    if (problems.length > 0) {
-        return {
-            id: 'host-manifest',
-            status: 'fail',
-            message: `host_capabilities malformed: ${problems.slice(0, 4).join('; ')}`,
-            remedy: 'only schema_version:1 + four boolean capability fields are valid',
-        };
-    }
+    // Always-on orchestration (road-to-always-on-orchestration Phase 1)
+    // deleted `subagents.host_capabilities` as a live override — capability
+    // now resolves ONLY from the host probe/registry. A leftover key is
+    // therefore inert: its shape no longer matters, so this no longer fails
+    // on an unknown key or a non-boolean value — there is nothing left for a
+    // malformed override to break.
     return {
         id: 'host-manifest',
         status: 'ok',
-        message: `host_capabilities override parses strictly (${detectedNote})`,
+        message:
+            `subagents.host_capabilities is deprecated and ignored — host capability is ` +
+            `always probe/registry-resolved (${detectedNote})`,
         remedy: '',
     };
 }

package/src/scripts/_cli/cmd_doctor.ts

@@ -1050,7 +1050,7 @@ function _check_lockfile_freshness(manifest: Dict): Dict {
 }
 
 /** `shutil.which(name)` — first PATH hit (with PATHEXT on win32). */
-function shutilWhich(name: string): string | null {
+export function shutilWhich(name: string): string | null {
     if (path.dirname(name) !== '.' && (name.includes('/') || name.includes('\\'))) {
         // Has a path component: check directly.
         return isExecutableFile(name) ? name : null;
@@ -2065,6 +2065,31 @@ function osErrorStr(exc: unknown): string {
 const _CLI_PROVIDER_META: Readonly<Record<string, readonly [string, boolean]>> =
     PROVIDER_CLI_META;
 
+/**
+ * m5 fix (independent-review finding) — `MemberConfig.mode` is the RAW
+ * per-member override only (`config.ts::_build_member` never writes the
+ * `defaults.mode`-resolved value back onto it); a member that never sets
+ * `mode:` locally has `member.mode === null` regardless of what the
+ * council's global default is. `defaults.mode` shipped `'auto'` as its own
+ * default (road-to-always-on-orchestration Phase 3.1), so the common,
+ * unconfigured case for every member is `null` here — and `auto` may
+ * legitimately resolve to the `cli` rung, exactly the case
+ * `config.ts::_build_member`'s own binary-override validation already
+ * accounts for ("`auto` may resolve to the cli rung, so a binary override
+ * is legitimate there too"). A check gated on the literal `mode === 'cli'`
+ * misses every `auto`/unset member, honouring neither its binary override
+ * nor its quota — silently, for the majority default shape.
+ */
+function _effectiveMemberMode(member: ai_council_config.MemberConfig, cfg: ai_council_config.CouncilConfig): string {
+    return member.mode ?? cfg.defaults.mode;
+}
+
+/** True when `member` might run over CLI transport — `cli` pinned, or `auto` (which may resolve to it). */
+function _mayRunOverCli(member: ai_council_config.MemberConfig, cfg: ai_council_config.CouncilConfig): boolean {
+    const mode = _effectiveMemberMode(member, cfg);
+    return mode === 'cli' || mode === 'auto';
+}
+
 function _check_council_cli(project_root: string): Dict {
     // Python wraps the council-module import in a try/except ImportError so a
     // broken council install degrades to a `warn` instead of crashing doctor.
@@ -2097,7 +2122,7 @@ function _check_council_cli(project_root: string): Dict {
     }
     const cli_members: Array<[string, ai_council_config.MemberConfig]> = [];
     for (const [name, m] of cfg.members.entries()) {
-        if (m.enabled && m.mode === 'cli' && name in _CLI_PROVIDER_META) {
+        if (m.enabled && _mayRunOverCli(m, cfg) && name in _CLI_PROVIDER_META) {
             cli_members.push([name, m]);
         }
     }
@@ -2216,11 +2241,12 @@ function _codex_home(): string {
 
 /**
  * Codex binary name for the team check — REUSES the council probe's binary
- * discovery: when a council config exists and declares an enabled cli-mode
- * `openai` member with a `binary` override, honour it; else the provider
- * default from `_CLI_PROVIDER_META` (`codex`). Never throws — an unreadable
- * or invalid council config falls back to the default binary (the council-cli
- * check owns reporting that problem).
+ * discovery: when a council config exists and declares an enabled `openai`
+ * member whose effective mode is `cli` (pinned) OR `auto` (may resolve to
+ * `cli` — see `_mayRunOverCli`) with a `binary` override, honour it; else
+ * the provider default from `_CLI_PROVIDER_META` (`codex`). Never throws —
+ * an unreadable or invalid council config falls back to the default binary
+ * (the council-cli check owns reporting that problem).
  */
 function _team_codex_binary_name(project_root: string): string {
     const default_bin = (_CLI_PROVIDER_META['openai'] as [string, boolean])[0];
@@ -2236,21 +2262,12 @@ function _team_codex_binary_name(project_root: string): string {
         return default_bin;
     }
     const member = cfg.members.get('openai');
-    if (member && member.enabled && member.mode === 'cli' && member.binary) {
+    if (member && member.enabled && _mayRunOverCli(member, cfg) && member.binary) {
         return member.binary;
     }
     return default_bin;
 }
 
-/** Settings-flag coercion shared with the tier-usage check (bool or string). */
-function _settings_flag(val: unknown): boolean {
-    if (typeof val === 'boolean') return val;
-    if (typeof val === 'string') {
-        return ['true', 'yes', 'on', '1'].includes(val.trim().toLowerCase());
-    }
-    return false;
-}
-
 /**
  * Decode a JWT payload's `exp` claim (epoch seconds) — base64 decode only,
  * NO signature verification, no network. Non-JWT / undecodable → null.
@@ -2364,9 +2381,16 @@ function _read_ai_team_block(project_root: string): Dict {
  *     loop bound (`max_consecutive_blocks`, Phase 4 — unbuilt) is absent
  *     → WARN.
  *
- * Absent feature ≠ broken feature: with `ai_team` absent or disabled the
- * check reports ok ("team mode not configured (default-off)"); WARN fires
- * only on failing sub-signals or inconsistent half-configured states.
+ * Availability, not a setting (road-to-always-on-orchestration Phase 1,
+ * Step 1.3): `ai_team.enabled` was DELETED — `/team`'s on/off state is the
+ * codex binary + auth facts (a) computes below, mirroring
+ * `checkCodexAvailability()` (`src/scripts/ai_team/availability.ts`).
+ * Absent feature ≠ broken feature: with BOTH the binary and auth absent the
+ * check reports ok ("team unavailable (default) — codex CLI not
+ * installed") — a normal starting state, not a misconfiguration; WARN
+ * fires only when something was set up PARTWAY (binary without auth, a
+ * managed Review-Gate with an invalid bound, …) or a real sub-signal
+ * fails.
  */
 // ---------------------------------------------------------------------------
 // detection check (road-to-zero-ceremony-detection Phases 3 + 4)
@@ -2526,36 +2550,11 @@ function _check_detection(project_root: string): Dict {
 
 function _check_team(project_root: string): Dict {
     const ai_team = _read_ai_team_block(project_root);
-    const enabled = _settings_flag(ai_team['enabled']);
     const gateRaw = ai_team['review_gate'];
     const gate =
         typeof gateRaw === 'object' && gateRaw !== null && !Array.isArray(gateRaw)
             ? (gateRaw as Dict)
             : {};
-    const gate_managed = _settings_flag(gate['managed']);
-
-    if (!enabled) {
-        if (gate_managed) {
-            return {
-                id: 'team',
-                status: 'warn',
-                message:
-                    'half-configured: ai_team.review_gate.managed is on but ' +
-                    'ai_team.enabled is false — the gate never runs',
-                remedy:
-                    'set `ai_team.enabled: true` in .agent-settings.yml, or ' +
-                    'remove `ai_team.review_gate.managed`',
-            };
-        }
-        return {
-            id: 'team',
-            status: 'ok',
-            message: 'team mode not configured (default-off)',
-            remedy:
-                'opt in via `ai_team.enabled: true` in .agent-settings.yml, ' +
-                'then re-run `agent-config doctor --check team`',
-        };
-    }
 
     const remedies: string[] = [];
 
@@ -2563,7 +2562,8 @@ function _check_team(project_root: string): Dict {
     const binary_name = _team_codex_binary_name(project_root);
     const binary_resolved = shutilWhich(binary_name);
     const binary_glyph = binary_resolved !== null ? '✅' : '❌';
-    if (binary_resolved === null) {
+    const binary_missing = binary_resolved === null;
+    if (binary_missing) {
         remedies.push('install the codex CLI: `npm install -g @openai/codex`');
     }
 
@@ -2613,7 +2613,8 @@ function _check_team(project_root: string): Dict {
     // (c) Review-Gate governance (Phase 4) — logic lives in
     // src/scripts/ai_team/review_gate.ts (upstream gate probe + WARN
     // states, incl. plugin-gate-on-while-unmanaged with the quoted
-    // upstream cost warning).
+    // upstream cost warning). Independent of /team's own availability —
+    // `managed` governs the codex PLUGIN's own Stop-hook loop.
     const gate_signal = review_gate_doctor_signal(project_root, gate);
     const gate_str = gate_signal.gate_str;
     remedies.push(...gate_signal.remedies);
@@ -2621,6 +2622,21 @@ function _check_team(project_root: string): Dict {
     const detail =
         `codex binary ${binary_glyph} (${binary_name}) · ` +
         `${auth_str} · ${plugin_str} · ${gate_str}`;
+
+    if (binary_missing && !authed) {
+        // Neither the binary nor auth is present — /team simply is not set
+        // up on this machine yet. CLI-first doctrine (road-to-always-on-
+        // orchestration Phase 1, Step 1.3): this is a normal starting
+        // state, not a misconfiguration — still surface the full detail
+        // (e.g. a `review_gate.managed` left on) so nothing is hidden.
+        return {
+            id: 'team',
+            status: 'ok',
+            message: `team unavailable (default) — codex CLI not installed · ${detail}`,
+            remedy: remedies.join('; '),
+        };
+    }
+
     if (remedies.length > 0) {
         return {
             id: 'team',
@@ -2632,7 +2648,7 @@ function _check_team(project_root: string): Dict {
     return {
         id: 'team',
         status: 'ok',
-        message: `team mode enabled · ${detail}`,
+        message: `team available · ${detail}`,
         remedy: '',
     };
 }
@@ -3556,6 +3572,7 @@ export {
     _foreign_records,
     _check_scope,
     _check_manifest_integrity,
+    _team_codex_binary_name,
     _check_lockfile_freshness,
     _check_global_binary,
     _check_claude_plugin,