@event4u/agent-config 9.28.0 → 9.30.0

package/dist/install/install.mjs

@@ -10110,8 +10110,40 @@ function load_agent_settings(options = {}) {
       _deep_merge(merged, layer);
     }
   }
+  _warn_removed_always_on_keys(merged);
   return merged;
 }
+var REMOVED_ALWAYS_ON_KEYS = [
+  "subagents.enabled",
+  "subagents.auto",
+  "subagents.host_capabilities",
+  "subagents.budget_routing",
+  "ai_team.enabled"
+];
+var _warnedRemovedAlwaysOnKeys = /* @__PURE__ */ new Set();
+function _readDottedSettingsPath(root, dotted) {
+  let node = root;
+  for (const part of dotted.split(".")) {
+    if (typeof node !== "object" || node === null || Array.isArray(node)) {
+      return void 0;
+    }
+    node = node[part];
+  }
+  return node;
+}
+function _warn_removed_always_on_keys(merged) {
+  for (const key of REMOVED_ALWAYS_ON_KEYS) {
+    if (_warnedRemovedAlwaysOnKeys.has(key)) {
+      continue;
+    }
+    if (_readDottedSettingsPath(merged, key) === void 0) {
+      continue;
+    }
+    _warnedRemovedAlwaysOnKeys.add(key);
+    process.stderr.write(`${key} was removed (always-on orchestration); ignored.
+`);
+  }
+}
 function _read_yaml(p) {
   if (!_is_file(p)) {
     return null;
@@ -14741,18 +14773,9 @@ var settingsSchema = external_exports.object({
     }).default({})
   }).default({}),
   subagents: external_exports.object({
-    enabled: external_exports.boolean().default(true).describe(
-      "Global master switch for the subagent layer. true (default) = available; false = fully disabled (the canonical kill-switch \u2014 no auto-dispatch, no routing, everything runs in-session)."
-    ),
-    auto: external_exports.enum(["off", "ask", "on"]).default("on").describe(
-      "Automatic-dispatch mode. off = subagents only via explicit command. ask = classify the task and ask once before dispatching. on = auto-dispatch delegable tasks (surface the choice in one line). Shipped default is on on subagent-capable hosts (flipped from ask 2026-07-09, ADR-117), off elsewhere; no-op where the host has no subagent primitive."
-    ),
     downshift: external_exports.boolean().default(true).describe(
       "Route delegable sub-tasks to the lowest-capable model tier (cost + speed via model downshift). false = every subagent runs on the session tier."
     ),
-    budget_routing: external_exports.enum(["ask", "auto", "off"]).default("ask").describe(
-      "Budget-aware cheap-request delegation (docs/contracts/budget-routing.md): pick the cheapest classifier-adequate tier WITH available budget (cost.budgets.per_tier); cheap exhausted but strong funded \u2192 strong tier; all exhausted \u2192 session model + notice. Work is never blocked to save money; the session model is never switched (delegation with a model override). ask = confirm the first budget-motivated downshift per session (default). auto = apply silently with telemetry. off = today's behavior (single-flip rollback). Distinct from downshift: that is the quality/cost knob, this is the resource-availability gate."
-    ),
     quota_arbitrage: external_exports.boolean().default(true).describe(
       "Prefer a separate quota-pool model for delegable sub-tasks where the host manifest reports one. Optional bonus only \u2014 identical behaviour (minus the quota win) where unsupported. Never load-bearing."
     ),
@@ -14763,15 +14786,15 @@ var settingsSchema = external_exports.object({
     }).default({}).describe(
       "Per-tier model map for downshift routing. Each empty value uses the tier runtime default (no vendor model baked in)."
     ),
-    host_capabilities: external_exports.object({}).passthrough().default({}).describe(
-      "Optional override of the host-capability manifest (subagent_spawn / parallel_spawn / status_polling / separate_quota_pool). Any field set wins; omitted fields fall back to the all-false safe default. Empty = the agent resolves the manifest from host knowledge."
-    ),
     implementer_model: external_exports.string().default("").describe(
       "Override the model the orchestrator dispatches to subagents that write code (e.g. claude-sonnet-4, gpt-5). Empty (default) = inherit the session's primary model \u2014 cheapest and usually right."
     ),
     judge_model: external_exports.string().default("").describe(
       "Override the model used for review / judge subagents that critique implementer output. Empty (default) = one tier above the implementer model \u2014 picks up nuance the implementer missed."
     ),
+    model_ceiling: external_exports.string().default("").describe(
+      "Session-wide model CEILING for subagents (spend cap). Empty (default) = no ceiling. When set, suite-owned CLI spawn wrappers export CLAUDE_CODE_SUBAGENT_MODEL to the sessions they launch. Class C: a human sets it; the agent never writes or infers one."
+    ),
     max_parallel: external_exports.number().int().min(1).default(3).describe(
       "Hard cap on subagents running in parallel during /do-in-parallel, /do-competitively, and /judge runs. Raise for faster fan-out, lower if you hit rate limits or want lower token spend."
     ),
@@ -14785,14 +14808,11 @@ var settingsSchema = external_exports.object({
     )
   }),
   ai_team: external_exports.object({
-    enabled: external_exports.boolean().default(false).describe(
-      "Master switch for the /team cross-model review family (docs/contracts/ai-team-config.md). false (default) = commands are never suggested and every invocation refuses with an enable pointer. true = the family is live; individual gates (allow_delegate) still apply."
-    ),
     model: external_exports.string().default("auto").describe(
       "Model handed to the codex CLI. 'auto' (default) = pass no --model flag so the CLI's own default applies \u2014 tracks the subscription's current strongest model instead of pinning a stale ID. Any other value passes through verbatim as `--model <value>`."
     ),
     allow_delegate: external_exports.boolean().default(false).describe(
-      "Second opt-in for the only wrapper that delegates write access (/team:delegate). false (default) = delegate refuses even when ai_team.enabled is true. Both keys must be true before delegation is reachable."
+      "Second opt-in for the only wrapper that delegates write access (/team:delegate). false (default) = delegate refuses even when /team itself is available. Availability (codex CLI installed + authenticated) is necessary but not sufficient \u2014 this key must ALSO be true before delegation is reachable."
     ),
     max_calls_per_day: external_exports.number().int().min(0).default(50).describe(
       "Per-day cap on team calls, read against the EXISTING cli_call_budget openai bucket (~/.event4u/agent-config/cli-calls.json, daily UTC reset) \u2014 one subscription, one counter, never a parallel count. 0 = block all team calls."
@@ -14808,7 +14828,15 @@ var settingsSchema = external_exports.object({
         "Circuit-breaker bound: after this many CONSECUTIVE BLOCK verdicts in one session, a visible notice is injected exactly once and the managed layer stops re-blocking \u2014 the user decides, never an infinite Claude\u2194Codex loop. An ALLOW verdict resets the counter. Positive integer."
       )
     }).default({ managed: false, max_consecutive_blocks: 3 })
-  }).default({ enabled: false, model: "auto", allow_delegate: false, max_calls_per_day: 50, suppress_setup_hint: false, review_gate: { managed: false, max_consecutive_blocks: 3 } }),
+  }).default({ model: "auto", allow_delegate: false, max_calls_per_day: 50, suppress_setup_hint: false, review_gate: { managed: false, max_consecutive_blocks: 3 } }),
+  emergency: external_exports.object({
+    orchestration_halt: external_exports.boolean().default(false).describe(
+      "The one audited incident switch over the always-on orchestration stack (subagents, council, team). NOT an activation gate: false (default) = the stack runs normally. true = halted; arming requires no ceremony. Disarming (returning to false) requires orchestration_halt_justification to be a non-empty string. Both transitions emit one telemetry line."
+    ),
+    orchestration_halt_justification: external_exports.string().default("").describe(
+      "Required non-empty before orchestration_halt may return to false. Ignored while arming the halt."
+    )
+  }).default({ orchestration_halt: false, orchestration_halt_justification: "" }),
   onboarding: external_exports.object({
     onboarded: external_exports.boolean().default(false).describe(
       "Set to true once the developer has completed `agent-config setup`. The onboarding-gate rule blocks the first turn of every chat until this is true. Toggle back to false to re-trigger the wizard."
@@ -14933,6 +14961,17 @@ var settingsSchema = external_exports.object({
       enabled: external_exports.boolean().default(false).describe(
         "PreToolUse code-graph nudge (ADR-124 Phase 4). Default off. When on AND a native code-graph cache or a consumer-shipped graph.json/SCIP index is present, warns once per session (never blocks) as the agent is about to Grep/Glob or Read a source file \u2014 query the graph first for who-calls/where-used/impact questions (or rebuild if stale, build if absent). Source G\u2019s strict block-first-read mode is deliberately un-ported."
       )
+    }).default({}),
+    turn_end_gate: external_exports.object({
+      enabled: external_exports.boolean().default(false).describe(
+        "Stop-slot turn-end gate (road-to-conformance-round5 Phase 3). Default off, and it is the only concern that can REFUSE a turn-end rather than a tool call \u2014 so it soaks behind an explicit opt-in before it binds. Round 5 measured the reason: both blocking carriers reached zero violations, neither advisory carrier did, and 19 wrong-language replies survived a pin that had fired 26-35 seconds earlier. A refused turn continues in the SAME turn and is never refused twice."
+      ),
+      promissory: external_exports.boolean().default(true).describe(
+        "Detector A of the turn-end gate: refuse a turn whose closing paragraph promises work not yet performed while asking the user nothing (20 measured occurrences). Inert while hooks.turn_end_gate.enabled is false."
+      ),
+      language: external_exports.boolean().default(true).describe(
+        "Detector B of the turn-end gate: refuse a turn whose user-visible prose is not in the pinned language, with fenced code, inline code, quoted tool output, tables, URLs, paths and identifiers excluded first (19 measured occurrences). Fires 18.0% of turns on the measured corpus, which is why the master switch is off by default. Inert while hooks.turn_end_gate.enabled is false."
+      )
     }).default({})
   }),
   decision_engine: external_exports.object({

package/dist/mcp/registry-manifest.json

@@ -1,15 +1,15 @@
 {
   "discovery": {
-    "artefact_count": 602,
+    "artefact_count": 603,
     "scanner_version": "c24312e116f8"
   },
-  "generated_at": "2026-08-09",
+  "generated_at": "2026-08-10",
   "package": {
     "description": "Governed skills, rules and commands for AI coding tools (Claude Code, Cursor, Windsurf, Copilot) \u2014 every claim machine-checked, including \"zero runtime daemon\".",
     "homepage": "https://event4u-app.github.io/agent-config",
     "name": "@event4u/agent-config",
     "repository": "https://github.com/event4u-app/agent-config",
-    "version": "9.28.0"
+    "version": "9.30.0"
   },
   "registries": [
     {

package/dist/mcp/server.json

@@ -9,12 +9,12 @@
       "transport": {
         "type": "stdio"
       },
-      "version": "9.28.0"
+      "version": "9.30.0"
     }
   ],
   "repository": {
     "source": "github",
     "url": "https://github.com/event4u-app/agent-config"
   },
-  "version": "9.28.0"
+  "version": "9.30.0"
 }