@event4u/agent-config 9.28.0 → 9.30.0

package/dist/cli-delegate/{chunk-DVRS2KVR.js → chunk-DDUNNFYX.js}

@@ -4355,18 +4355,9 @@ var settingsSchema = external_exports.object({
     }).default({})
   }).default({}),
   subagents: external_exports.object({
-    enabled: external_exports.boolean().default(true).describe(
-      "Global master switch for the subagent layer. true (default) = available; false = fully disabled (the canonical kill-switch \u2014 no auto-dispatch, no routing, everything runs in-session)."
-    ),
-    auto: external_exports.enum(["off", "ask", "on"]).default("on").describe(
-      "Automatic-dispatch mode. off = subagents only via explicit command. ask = classify the task and ask once before dispatching. on = auto-dispatch delegable tasks (surface the choice in one line). Shipped default is on on subagent-capable hosts (flipped from ask 2026-07-09, ADR-117), off elsewhere; no-op where the host has no subagent primitive."
-    ),
     downshift: external_exports.boolean().default(true).describe(
       "Route delegable sub-tasks to the lowest-capable model tier (cost + speed via model downshift). false = every subagent runs on the session tier."
     ),
-    budget_routing: external_exports.enum(["ask", "auto", "off"]).default("ask").describe(
-      "Budget-aware cheap-request delegation (docs/contracts/budget-routing.md): pick the cheapest classifier-adequate tier WITH available budget (cost.budgets.per_tier); cheap exhausted but strong funded \u2192 strong tier; all exhausted \u2192 session model + notice. Work is never blocked to save money; the session model is never switched (delegation with a model override). ask = confirm the first budget-motivated downshift per session (default). auto = apply silently with telemetry. off = today's behavior (single-flip rollback). Distinct from downshift: that is the quality/cost knob, this is the resource-availability gate."
-    ),
     quota_arbitrage: external_exports.boolean().default(true).describe(
       "Prefer a separate quota-pool model for delegable sub-tasks where the host manifest reports one. Optional bonus only \u2014 identical behaviour (minus the quota win) where unsupported. Never load-bearing."
     ),
@@ -4377,15 +4368,15 @@ var settingsSchema = external_exports.object({
     }).default({}).describe(
       "Per-tier model map for downshift routing. Each empty value uses the tier runtime default (no vendor model baked in)."
     ),
-    host_capabilities: external_exports.object({}).passthrough().default({}).describe(
-      "Optional override of the host-capability manifest (subagent_spawn / parallel_spawn / status_polling / separate_quota_pool). Any field set wins; omitted fields fall back to the all-false safe default. Empty = the agent resolves the manifest from host knowledge."
-    ),
     implementer_model: external_exports.string().default("").describe(
       "Override the model the orchestrator dispatches to subagents that write code (e.g. claude-sonnet-4, gpt-5). Empty (default) = inherit the session's primary model \u2014 cheapest and usually right."
     ),
     judge_model: external_exports.string().default("").describe(
       "Override the model used for review / judge subagents that critique implementer output. Empty (default) = one tier above the implementer model \u2014 picks up nuance the implementer missed."
     ),
+    model_ceiling: external_exports.string().default("").describe(
+      "Session-wide model CEILING for subagents (spend cap). Empty (default) = no ceiling. When set, suite-owned CLI spawn wrappers export CLAUDE_CODE_SUBAGENT_MODEL to the sessions they launch. Class C: a human sets it; the agent never writes or infers one."
+    ),
     max_parallel: external_exports.number().int().min(1).default(3).describe(
       "Hard cap on subagents running in parallel during /do-in-parallel, /do-competitively, and /judge runs. Raise for faster fan-out, lower if you hit rate limits or want lower token spend."
     ),
@@ -4399,14 +4390,11 @@ var settingsSchema = external_exports.object({
     )
   }),
   ai_team: external_exports.object({
-    enabled: external_exports.boolean().default(false).describe(
-      "Master switch for the /team cross-model review family (docs/contracts/ai-team-config.md). false (default) = commands are never suggested and every invocation refuses with an enable pointer. true = the family is live; individual gates (allow_delegate) still apply."
-    ),
     model: external_exports.string().default("auto").describe(
       "Model handed to the codex CLI. 'auto' (default) = pass no --model flag so the CLI's own default applies \u2014 tracks the subscription's current strongest model instead of pinning a stale ID. Any other value passes through verbatim as `--model <value>`."
     ),
     allow_delegate: external_exports.boolean().default(false).describe(
-      "Second opt-in for the only wrapper that delegates write access (/team:delegate). false (default) = delegate refuses even when ai_team.enabled is true. Both keys must be true before delegation is reachable."
+      "Second opt-in for the only wrapper that delegates write access (/team:delegate). false (default) = delegate refuses even when /team itself is available. Availability (codex CLI installed + authenticated) is necessary but not sufficient \u2014 this key must ALSO be true before delegation is reachable."
     ),
     max_calls_per_day: external_exports.number().int().min(0).default(50).describe(
       "Per-day cap on team calls, read against the EXISTING cli_call_budget openai bucket (~/.event4u/agent-config/cli-calls.json, daily UTC reset) \u2014 one subscription, one counter, never a parallel count. 0 = block all team calls."
@@ -4422,7 +4410,15 @@ var settingsSchema = external_exports.object({
         "Circuit-breaker bound: after this many CONSECUTIVE BLOCK verdicts in one session, a visible notice is injected exactly once and the managed layer stops re-blocking \u2014 the user decides, never an infinite Claude\u2194Codex loop. An ALLOW verdict resets the counter. Positive integer."
       )
     }).default({ managed: false, max_consecutive_blocks: 3 })
-  }).default({ enabled: false, model: "auto", allow_delegate: false, max_calls_per_day: 50, suppress_setup_hint: false, review_gate: { managed: false, max_consecutive_blocks: 3 } }),
+  }).default({ model: "auto", allow_delegate: false, max_calls_per_day: 50, suppress_setup_hint: false, review_gate: { managed: false, max_consecutive_blocks: 3 } }),
+  emergency: external_exports.object({
+    orchestration_halt: external_exports.boolean().default(false).describe(
+      "The one audited incident switch over the always-on orchestration stack (subagents, council, team). NOT an activation gate: false (default) = the stack runs normally. true = halted; arming requires no ceremony. Disarming (returning to false) requires orchestration_halt_justification to be a non-empty string. Both transitions emit one telemetry line."
+    ),
+    orchestration_halt_justification: external_exports.string().default("").describe(
+      "Required non-empty before orchestration_halt may return to false. Ignored while arming the halt."
+    )
+  }).default({ orchestration_halt: false, orchestration_halt_justification: "" }),
   onboarding: external_exports.object({
     onboarded: external_exports.boolean().default(false).describe(
       "Set to true once the developer has completed `agent-config setup`. The onboarding-gate rule blocks the first turn of every chat until this is true. Toggle back to false to re-trigger the wizard."
@@ -4547,6 +4543,17 @@ var settingsSchema = external_exports.object({
       enabled: external_exports.boolean().default(false).describe(
         "PreToolUse code-graph nudge (ADR-124 Phase 4). Default off. When on AND a native code-graph cache or a consumer-shipped graph.json/SCIP index is present, warns once per session (never blocks) as the agent is about to Grep/Glob or Read a source file \u2014 query the graph first for who-calls/where-used/impact questions (or rebuild if stale, build if absent). Source G\u2019s strict block-first-read mode is deliberately un-ported."
       )
+    }).default({}),
+    turn_end_gate: external_exports.object({
+      enabled: external_exports.boolean().default(false).describe(
+        "Stop-slot turn-end gate (road-to-conformance-round5 Phase 3). Default off, and it is the only concern that can REFUSE a turn-end rather than a tool call \u2014 so it soaks behind an explicit opt-in before it binds. Round 5 measured the reason: both blocking carriers reached zero violations, neither advisory carrier did, and 19 wrong-language replies survived a pin that had fired 26-35 seconds earlier. A refused turn continues in the SAME turn and is never refused twice."
+      ),
+      promissory: external_exports.boolean().default(true).describe(
+        "Detector A of the turn-end gate: refuse a turn whose closing paragraph promises work not yet performed while asking the user nothing (20 measured occurrences). Inert while hooks.turn_end_gate.enabled is false."
+      ),
+      language: external_exports.boolean().default(true).describe(
+        "Detector B of the turn-end gate: refuse a turn whose user-visible prose is not in the pinned language, with fenced code, inline code, quoted tool output, tables, URLs, paths and identifiers excluded first (19 measured occurrences). Fires 18.0% of turns on the measured corpus, which is why the master switch is off by default. Inert while hooks.turn_end_gate.enabled is false."
+      )
     }).default({})
   }),
   decision_engine: external_exports.object({

package/dist/cli-delegate/{chunk-PQSAQKHW.js → chunk-EQY4FLJB.js}

@@ -2,10 +2,10 @@ import { createRequire as __acCreateRequire } from 'node:module'; const require
 import {
   ZodFirstPartyTypeKind,
   settingsSchema
-} from "./chunk-DVRS2KVR.js";
+} from "./chunk-DDUNNFYX.js";
 import {
   main
-} from "./chunk-JXARCGVN.js";
+} from "./chunk-MP3JT3IU.js";
 import {
   RULE_SOURCE_REL
 } from "./chunk-BKO2AZ7Z.js";
@@ -48,7 +48,7 @@ import {
 import {
   find_project_root_with_anchor,
   load_agent_settings
-} from "./chunk-GB2FSUEE.js";
+} from "./chunk-LCFJIQ4J.js";
 import {
   event4u_root,
   legacy_xdg_root,

package/dist/cli-delegate/{chunk-2BE5I2MN.js → chunk-IYTGIG2Y.js}

@@ -13,7 +13,7 @@ import {
 import {
   config_exports,
   hardenedSpawnEnv
-} from "./chunk-VSYT7OHO.js";
+} from "./chunk-LVRYBKTI.js";
 import {
   DEFAULT_GITATTRIBUTES,
   SECTION_HEADER,
@@ -41,9 +41,10 @@ import {
   ProjectRootError,
   ROOT_OVERRIDE_ENV,
   find_project_root_with_trace,
+  load_agent_settings,
   project_settings_path,
   resolve_project_root
-} from "./chunk-GB2FSUEE.js";
+} from "./chunk-LCFJIQ4J.js";
 import {
   event4u_root,
   resolve_with_fallback,
@@ -186,7 +187,9 @@ __export(clients_exports, {
   _OpenAICompatibleClient: () => _OpenAICompatibleClient,
   _is_reasoning_model: () => _is_reasoning_model,
   _read_until_marker: () => _read_until_marker,
+  _resetModelCeilingMemo: () => _resetModelCeilingMemo,
   _setMonotonicSource: () => _setMonotonicSource,
+  _subagentModelCeiling: () => _subagentModelCeiling,
   _today_utc_iso: () => _today_utc_iso,
   assertCacheBreakpointOrder: () => assertCacheBreakpointOrder,
   load_anthropic_key: () => load_anthropic_key,
@@ -200,6 +203,9 @@ import { spawnSync } from "node:child_process";
 import * as fs4 from "node:fs";
 import * as path4 from "node:path";
 
+// src/scripts/_lib/session_role.ts
+var SESSION_ROLE_ENV = "AGENT_CONFIG_SESSION_ROLE";
+
 // src/scripts/ai_council/events_log.ts
 import * as crypto from "node:crypto";
 import * as fs3 from "node:fs";
@@ -405,6 +411,25 @@ function _pyJsonStringRaw(s) {
 }
 
 // src/scripts/ai_council/clients.ts
+var _modelCeilingMemo = /* @__PURE__ */ new Map();
+function _subagentModelCeiling(cwd = process.cwd()) {
+  const hit = _modelCeilingMemo.get(cwd);
+  if (hit !== void 0) return hit;
+  let ceiling;
+  try {
+    const settings = load_agent_settings({ cwd });
+    const sub = settings["subagents"] ?? {};
+    const v = typeof sub["model_ceiling"] === "string" ? sub["model_ceiling"].trim() : "";
+    ceiling = v.length > 0 ? v : null;
+  } catch {
+    ceiling = null;
+  }
+  _modelCeilingMemo.set(cwd, ceiling);
+  return ceiling;
+}
+function _resetModelCeilingMemo() {
+  _modelCeilingMemo.clear();
+}
 var ANTHROPIC_KEY_FILENAME = "anthropic.key";
 var OPENAI_KEY_FILENAME = "openai.key";
 var ANTHROPIC_KEY_PATH = write_target(ANTHROPIC_KEY_FILENAME);
@@ -1091,8 +1116,19 @@ var CliClient = class extends ExternalAIClient {
     "429",
     "usage limit"
   ];
-  constructor(opts) {
+  /**
+   * `identity` carries the subclass constants (`name`, `default_binary`)
+   * that construction validates against. They are passed explicitly rather
+   * than read off `this.name` / `this.default_binary` because subclass
+   * instance-field initializers (`override default_binary = 'claude'`,
+   * declared in the subclass body) run only AFTER this `super()` call
+   * returns — reading them here, before that happens, would always see the
+   * base class's own field defaults (`''`), not the subclass override.
+   */
+  constructor(opts, identity) {
     super();
+    this.name = identity.name;
+    this.default_binary = identity.default_binary;
     this.model = opts.model;
     this.timeout_seconds = opts.timeout_seconds ?? DEFAULT_CLI_TIMEOUT_SECONDS;
     this.max_calls_per_day = opts.max_calls_per_day ?? null;
@@ -1139,7 +1175,25 @@ var CliClient = class extends ExternalAIClient {
       // (loader preload, git *_COMMAND, NODE_OPTIONS, …) so an
       // attacker-influenced parent env cannot RCE via the spawned CLI
       // or a `git` it invokes internally.
-      env: hardenedSpawnEnv()
+      // Role marking (token-economy-dispatch Phase 2.2): a council
+      // member CLI session is worker-class — it never talks to OUR
+      // user, never dispatches sub-workers, never runs a council.
+      // The spawned vendor CLI loads this repo's hook chains; the
+      // marker lets the dispatcher run the thinner worker chain
+      // (manifest `roles.worker.drop`; pre_tool_use guards are
+      // structurally exempt). This is the ONE in-tree spawn point
+      // that launches a separate CLI session today — Agent-tool
+      // subagents share the host process env and cannot be marked
+      // (probed live 2026-08-10; see _lib/session_role.ts).
+      // The optional model ceiling (subagents.model_ceiling, class C)
+      // rides the same spawn: a spend cap the human set per install.
+      env: hardenedSpawnEnv({
+        [SESSION_ROLE_ENV]: "worker",
+        ...(() => {
+          const ceiling = _subagentModelCeiling();
+          return ceiling !== null ? { CLAUDE_CODE_SUBAGENT_MODEL: ceiling } : {};
+        })()
+      })
     };
     if (stdinPayload !== null) {
       spawnOpts.input = stdinPayload;
@@ -1297,18 +1351,19 @@ var CliClient = class extends ExternalAIClient {
   }
 };
 var AnthropicCliClient = class extends CliClient {
-  name = "anthropic";
-  default_binary = "claude";
   subscription_label = "claude-pro";
   constructor(opts = {}) {
-    super({
-      model: opts.model ?? DEFAULT_ANTHROPIC_CLI_MODEL,
-      binary: opts.binary,
-      timeout_seconds: opts.timeout_seconds,
-      max_calls_per_day: opts.max_calls_per_day,
-      warn_at: opts.warn_at,
-      cli_calls_path: opts.cli_calls_path
-    });
+    super(
+      {
+        model: opts.model ?? DEFAULT_ANTHROPIC_CLI_MODEL,
+        binary: opts.binary,
+        timeout_seconds: opts.timeout_seconds,
+        max_calls_per_day: opts.max_calls_per_day,
+        warn_at: opts.warn_at,
+        cli_calls_path: opts.cli_calls_path
+      },
+      { name: "anthropic", default_binary: "claude" }
+    );
   }
   _build_command(system_prompt, user_prompt, max_tokens) {
     void user_prompt;
@@ -1368,8 +1423,6 @@ var AnthropicCliClient = class extends CliClient {
   }
 };
 var OpenAICliClient = class extends CliClient {
-  name = "openai";
-  default_binary = "codex";
   subscription_label = "chatgpt-plus";
   static _AUTH_FAILURE_PATTERNS = [
     ...CliClient._AUTH_FAILURE_PATTERNS,
@@ -1378,14 +1431,17 @@ var OpenAICliClient = class extends CliClient {
     "401"
   ];
   constructor(opts = {}) {
-    super({
-      model: opts.model ?? DEFAULT_OPENAI_CLI_MODEL,
-      binary: opts.binary,
-      timeout_seconds: opts.timeout_seconds,
-      max_calls_per_day: opts.max_calls_per_day,
-      warn_at: opts.warn_at,
-      cli_calls_path: opts.cli_calls_path
-    });
+    super(
+      {
+        model: opts.model ?? DEFAULT_OPENAI_CLI_MODEL,
+        binary: opts.binary,
+        timeout_seconds: opts.timeout_seconds,
+        max_calls_per_day: opts.max_calls_per_day,
+        warn_at: opts.warn_at,
+        cli_calls_path: opts.cli_calls_path
+      },
+      { name: "openai", default_binary: "codex" }
+    );
   }
   _build_command(system_prompt, user_prompt, max_tokens) {
     void max_tokens;
@@ -1474,8 +1530,6 @@ var OpenAICliClient = class extends CliClient {
   }
 };
 var GeminiCliClient = class extends CliClient {
-  name = "gemini";
-  default_binary = "gemini";
   subscription_label = "gemini-pro";
   static _AUTH_FAILURE_PATTERNS = [
     ...CliClient._AUTH_FAILURE_PATTERNS,
@@ -1484,14 +1538,17 @@ var GeminiCliClient = class extends CliClient {
     "oauth"
   ];
   constructor(opts = {}) {
-    super({
-      model: opts.model ?? DEFAULT_GEMINI_CLI_MODEL,
-      binary: opts.binary,
-      timeout_seconds: opts.timeout_seconds,
-      max_calls_per_day: opts.max_calls_per_day,
-      warn_at: opts.warn_at,
-      cli_calls_path: opts.cli_calls_path
-    });
+    super(
+      {
+        model: opts.model ?? DEFAULT_GEMINI_CLI_MODEL,
+        binary: opts.binary,
+        timeout_seconds: opts.timeout_seconds,
+        max_calls_per_day: opts.max_calls_per_day,
+        warn_at: opts.warn_at,
+        cli_calls_path: opts.cli_calls_path
+      },
+      { name: "gemini", default_binary: "gemini" }
+    );
   }
   _build_command(system_prompt, user_prompt, max_tokens) {
     void user_prompt;
@@ -1566,8 +1623,6 @@ var GeminiCliClient = class extends CliClient {
   }
 };
 var XAICliClient = class extends CliClient {
-  name = "xai";
-  default_binary = "grok";
   billable = true;
   // community CLI consumes an API key — billable applies
   static _AUTH_FAILURE_PATTERNS = [
@@ -1577,14 +1632,17 @@ var XAICliClient = class extends CliClient {
     "unauthorized"
   ];
   constructor(opts = {}) {
-    super({
-      model: opts.model ?? DEFAULT_XAI_MODEL,
-      binary: opts.binary,
-      timeout_seconds: opts.timeout_seconds,
-      max_calls_per_day: opts.max_calls_per_day,
-      warn_at: opts.warn_at,
-      cli_calls_path: opts.cli_calls_path
-    });
+    super(
+      {
+        model: opts.model ?? DEFAULT_XAI_MODEL,
+        binary: opts.binary,
+        timeout_seconds: opts.timeout_seconds,
+        max_calls_per_day: opts.max_calls_per_day,
+        warn_at: opts.warn_at,
+        cli_calls_path: opts.cli_calls_path
+      },
+      { name: "xai", default_binary: "grok" }
+    );
   }
   _build_command(system_prompt, user_prompt, max_tokens) {
     void system_prompt;
@@ -1610,8 +1668,6 @@ var XAICliClient = class extends CliClient {
   }
 };
 var PerplexityCliClient = class extends CliClient {
-  name = "perplexity";
-  default_binary = "perplexity";
   billable = true;
   // community CLI consumes an API key — billable applies
   static _AUTH_FAILURE_PATTERNS = [
@@ -1621,14 +1677,17 @@ var PerplexityCliClient = class extends CliClient {
     "unauthorized"
   ];
   constructor(opts = {}) {
-    super({
-      model: opts.model ?? DEFAULT_PERPLEXITY_MODEL,
-      binary: opts.binary,
-      timeout_seconds: opts.timeout_seconds,
-      max_calls_per_day: opts.max_calls_per_day,
-      warn_at: opts.warn_at,
-      cli_calls_path: opts.cli_calls_path
-    });
+    super(
+      {
+        model: opts.model ?? DEFAULT_PERPLEXITY_MODEL,
+        binary: opts.binary,
+        timeout_seconds: opts.timeout_seconds,
+        max_calls_per_day: opts.max_calls_per_day,
+        warn_at: opts.warn_at,
+        cli_calls_path: opts.cli_calls_path
+      },
+      { name: "perplexity", default_binary: "perplexity" }
+    );
   }
   _build_command(system_prompt, user_prompt, max_tokens) {
     void system_prompt;
@@ -2471,7 +2530,8 @@ function resolveTransport(opts) {
       billing,
       authSource,
       makesProviderCall: false,
-      reason: null
+      reason: null,
+      absentReason: null
     };
   }
   if (mode === "api" || mode === "cli") {
@@ -2481,7 +2541,8 @@ function resolveTransport(opts) {
       billing,
       authSource,
       makesProviderCall: true,
-      reason: null
+      reason: null,
+      absentReason: null
     };
   }
   if (mode !== "auto") {
@@ -2501,7 +2562,8 @@ function resolveTransport(opts) {
       billing,
       authSource,
       makesProviderCall: true,
-      reason: null
+      reason: null,
+      absentReason: null
     };
   }
   const keyPresent = opts.apiKeyPresent ?? hasSource(report, provider, KEY_AUTH_SOURCES);
@@ -2512,12 +2574,18 @@ function resolveTransport(opts) {
       billing,
       authSource,
       makesProviderCall: true,
-      reason: null
+      reason: null,
+      absentReason: null
     };
   }
-  return unavailable(provider, billing, autoUnavailableReason(provider, binary, cliAuthed));
+  return unavailable(
+    provider,
+    billing,
+    autoUnavailableReason(provider, binary, cliAuthed),
+    classifyStaticAbsentReason(binary)
+  );
 }
-function unavailable(_provider, billing, reason) {
+function unavailable(_provider, billing, reason, absentReason = null) {
   return {
     available: false,
     transport: null,
@@ -2526,9 +2594,13 @@ function unavailable(_provider, billing, reason) {
     billing,
     authSource: null,
     makesProviderCall: false,
-    reason
+    reason,
+    absentReason
   };
 }
+function classifyStaticAbsentReason(binary) {
+  return binary === null ? "no_binary" : "no_auth";
+}
 function autoUnavailableReason(provider, binary, cliAuthed) {
   const expected = PROVIDER_CLI_META[provider]?.[0] ?? provider;
   if (binary === null && !cliAuthed) {
@@ -2787,7 +2859,6 @@ var AI_TEAM_REVIEW_GATE_DEFAULTS = Object.freeze({
   max_consecutive_blocks: 3
 });
 var AI_TEAM_DEFAULTS = Object.freeze({
-  enabled: false,
   model: "auto",
   allow_delegate: false,
   max_calls_per_day: 50,
@@ -4382,6 +4453,13 @@ function osErrorStr(exc) {
   return String(exc);
 }
 var _CLI_PROVIDER_META = PROVIDER_CLI_META;
+function _effectiveMemberMode(member, cfg) {
+  return member.mode ?? cfg.defaults.mode;
+}
+function _mayRunOverCli(member, cfg) {
+  const mode = _effectiveMemberMode(member, cfg);
+  return mode === "cli" || mode === "auto";
+}
 function _check_council_cli(project_root) {
   const { load_cli_call_counts: load_cli_call_counts2 } = clients_exports;
   const { load_council_config, resolve_config_path } = config_exports;
@@ -4407,7 +4485,7 @@ function _check_council_cli(project_root) {
   }
   const cli_members = [];
   for (const [name, m] of cfg.members.entries()) {
-    if (m.enabled && m.mode === "cli" && name in _CLI_PROVIDER_META) {
+    if (m.enabled && _mayRunOverCli(m, cfg) && name in _CLI_PROVIDER_META) {
       cli_members.push([name, m]);
     }
   }
@@ -4506,18 +4584,11 @@ function _team_codex_binary_name(project_root) {
     return default_bin;
   }
   const member = cfg.members.get("openai");
-  if (member && member.enabled && member.mode === "cli" && member.binary) {
+  if (member && member.enabled && _mayRunOverCli(member, cfg) && member.binary) {
     return member.binary;
   }
   return default_bin;
 }
-function _settings_flag(val) {
-  if (typeof val === "boolean") return val;
-  if (typeof val === "string") {
-    return ["true", "yes", "on", "1"].includes(val.trim().toLowerCase());
-  }
-  return false;
-}
 function _jwt_exp(token) {
   if (typeof token !== "string") return null;
   const parts = token.split(".");
@@ -4682,31 +4753,14 @@ function _check_detection(project_root) {
 }
 function _check_team(project_root) {
   const ai_team = _read_ai_team_block(project_root);
-  const enabled = _settings_flag(ai_team["enabled"]);
   const gateRaw = ai_team["review_gate"];
   const gate = typeof gateRaw === "object" && gateRaw !== null && !Array.isArray(gateRaw) ? gateRaw : {};
-  const gate_managed = _settings_flag(gate["managed"]);
-  if (!enabled) {
-    if (gate_managed) {
-      return {
-        id: "team",
-        status: "warn",
-        message: "half-configured: ai_team.review_gate.managed is on but ai_team.enabled is false \u2014 the gate never runs",
-        remedy: "set `ai_team.enabled: true` in .agent-settings.yml, or remove `ai_team.review_gate.managed`"
-      };
-    }
-    return {
-      id: "team",
-      status: "ok",
-      message: "team mode not configured (default-off)",
-      remedy: "opt in via `ai_team.enabled: true` in .agent-settings.yml, then re-run `agent-config doctor --check team`"
-    };
-  }
   const remedies = [];
   const binary_name = _team_codex_binary_name(project_root);
   const binary_resolved = shutilWhich(binary_name);
   const binary_glyph = binary_resolved !== null ? "\u2705" : "\u274C";
-  if (binary_resolved === null) {
+  const binary_missing = binary_resolved === null;
+  if (binary_missing) {
     remedies.push("install the codex CLI: `npm install -g @openai/codex`");
   }
   const auth_path = path8.join(_codex_home(), "auth.json");
@@ -4747,6 +4801,14 @@ function _check_team(project_root) {
   const gate_str = gate_signal.gate_str;
   remedies.push(...gate_signal.remedies);
   const detail = `codex binary ${binary_glyph} (${binary_name}) \xB7 ${auth_str} \xB7 ${plugin_str} \xB7 ${gate_str}`;
+  if (binary_missing && !authed) {
+    return {
+      id: "team",
+      status: "ok",
+      message: `team unavailable (default) \u2014 codex CLI not installed \xB7 ${detail}`,
+      remedy: remedies.join("; ")
+    };
+  }
   if (remedies.length > 0) {
     return {
       id: "team",
@@ -4758,7 +4820,7 @@ function _check_team(project_root) {
   return {
     id: "team",
     status: "ok",
-    message: `team mode enabled \xB7 ${detail}`,
+    message: `team available \xB7 ${detail}`,
     remedy: ""
   };
 }
@@ -5525,6 +5587,7 @@ export {
   _check_git_identity,
   _check_manifest_integrity,
   _check_lockfile_freshness,
+  shutilWhich,
   _check_global_binary,
   _check_claude_plugin,
   _check_claude_command_wrappers,
@@ -5539,6 +5602,7 @@ export {
   _check_mcp_beta_readiness,
   _check_tier_usage_readiness,
   _check_council_cli,
+  _team_codex_binary_name,
   _read_council_facts,
   _detection_report,
   _reset_detection_memo,

package/dist/cli-delegate/{chunk-GB2FSUEE.js → chunk-LCFJIQ4J.js}

@@ -406,8 +406,40 @@ function load_agent_settings(options = {}) {
       _deep_merge(merged, layer);
     }
   }
+  _warn_removed_always_on_keys(merged);
   return merged;
 }
+var REMOVED_ALWAYS_ON_KEYS = [
+  "subagents.enabled",
+  "subagents.auto",
+  "subagents.host_capabilities",
+  "subagents.budget_routing",
+  "ai_team.enabled"
+];
+var _warnedRemovedAlwaysOnKeys = /* @__PURE__ */ new Set();
+function _readDottedSettingsPath(root, dotted) {
+  let node = root;
+  for (const part of dotted.split(".")) {
+    if (typeof node !== "object" || node === null || Array.isArray(node)) {
+      return void 0;
+    }
+    node = node[part];
+  }
+  return node;
+}
+function _warn_removed_always_on_keys(merged) {
+  for (const key of REMOVED_ALWAYS_ON_KEYS) {
+    if (_warnedRemovedAlwaysOnKeys.has(key)) {
+      continue;
+    }
+    if (_readDottedSettingsPath(merged, key) === void 0) {
+      continue;
+    }
+    _warnedRemovedAlwaysOnKeys.add(key);
+    process.stderr.write(`${key} was removed (always-on orchestration); ignored.
+`);
+  }
+}
 function* iter_setting_overrides(options = {}) {
   const project_path = options.project_path ?? null;
   const user_global_path = options.user_global_path ?? null;