@event4u/agent-config 9.36.0 → 10.0.0

package/.claude-plugin/marketplace.json

@@ -6,7 +6,7 @@
   },
   "metadata": {
     "description": "Bootstrap shim for the event4u agent-config suite. This plugin ships ONLY the dispatcher hooks plus one install-pointer skill — ALL content (skills, rules, commands) is installed via `npx -y @event4u/agent-config init`, which writes the file projection AND registers the same hooks in ~/.claude/settings.json. DEPRECATED as a content channel; kept so the marketplace listing stays discoverable and existing installs keep working hooks.",
-    "version": "9.36.0",
+    "version": "10.0.0",
     "keywords": [
       "agent-config",
       "skills",

package/CHANGELOG.md

@@ -339,6 +339,63 @@ Entry-shape contract: [`docs/contracts/CHANGELOG-conventions.md`](docs/contracts
 > that forces a new era split (`# Era: 9.37.x`, etc.) — see
 > [`docs/contracts/CHANGELOG-conventions.md § Era splits`](docs/contracts/CHANGELOG-conventions.md).
 
+## [10.0.0](https://github.com/event4u-app/agent-config/compare/9.36.0...10.0.0) (2026-08-12)
+
+### Release highlights
+
+<!-- Curated head: fill before merge, keep it under 10 lines, and leave `_none_` where it is genuinely the answer. The generated log below is unchanged. -->
+- **Behaviour changes:** _auto-derived, rewrite before merge:_ rule/schema diffs, breaking commits or removed public surface in 030ca0d, c1bc2aa, 4eda4ff.
+- **Default changes + migration:** _none_
+- **Security and correctness:** _none_
+- **Honest nulls:** _auto-derived, rewrite before merge:_ commits carrying an honest-null marker in 7c6b404.
+- **Known limitations:** _none_
+
+### BREAKING CHANGES
+
+* **council:** transport is resolved per machine, not configured ([4eda4ff](https://github.com/event4u-app/agent-config/commit/4eda4ff0f518cb30778dc139852576efd35bd57a))
+
+### Features
+
+* **ci:** the parity gate learns about preflight, which it never inspected ([44151b0](https://github.com/event4u-app/agent-config/commit/44151b02cd765aff16d7e95459752ec553c1d57b))
+* **conformance:** a fifth check, an era guard, and the denominator the rate was missing ([f7edbdc](https://github.com/event4u-app/agent-config/commit/f7edbdc99533d433ff2b1857bac5bc7fb2929fe8))
+* **hooks:** refuse a completion claim while the last CI read is unsettled ([1ea7536](https://github.com/event4u-app/agent-config/commit/1ea753629ce6a468e061af1ee2f7ac3f38f6bebd))
+* **turn-end-gate:** arm it unconditionally, with no settings surface ([42cd613](https://github.com/event4u-app/agent-config/commit/42cd6131761a5b6681583abd8b7100f4415d84bf))
+
+### Bug Fixes
+
+* **round7:** close the R2 findings — the two high ones are in my own Phase 1 ([030ca0d](https://github.com/event4u-app/agent-config/commit/030ca0d6e1a6b27ebbebf74a34caa1403cc98dfa))
+* **council:** validate the output path before spending, and count attendance from answers ([a23d6c8](https://github.com/event4u-app/agent-config/commit/a23d6c84d4963f17ca94838bdbc9f7067b72e77a))
+* **hooks:** block-no-verify stops failing closed on heredoc prose ([7ac5cd2](https://github.com/event4u-app/agent-config/commit/7ac5cd227d34dbc92f9f0438746ff5cd1317e5d2))
+* **taskfile:** block-scalar the bridge-derivation desc so the taskfile parses ([9b0f7b9](https://github.com/event4u-app/agent-config/commit/9b0f7b90ba9bac04c7b0e80dbeaeb99a3aab4cc3))
+* **council:** use a Json-typed sentinel for the ignored-key presence check ([29b9f42](https://github.com/event4u-app/agent-config/commit/29b9f42e505c187f2b35abcb81cc6e7055d5507f))
+* **detection:** find the Claude subscription in the macOS Keychain ([72de870](https://github.com/event4u-app/agent-config/commit/72de8706812ea2cf30940697887964ae1406a3e4))
+* **gates:** scope bridge-derivation to the roots this checkout writes ([ea1b1d4](https://github.com/event4u-app/agent-config/commit/ea1b1d4e230375db0ae1c8e01226d8527a08a1e7))
+
+### Documentation
+
+* **review:** re-bind the R2 artefact to the fixed scope ([304b898](https://github.com/event4u-app/agent-config/commit/304b89866880c23f68106c096df20ce18ed207b7))
+* **review:** record the R2 findings before fixing any of them ([bdf45c2](https://github.com/event4u-app/agent-config/commit/bdf45c2e86b2839f3c64d432d50285f043f08d3d))
+* **roadmaps:** the fifth check makes two Context claims stale, in both directions ([6915456](https://github.com/event4u-app/agent-config/commit/6915456005fd164bc525103c6f0b59f05dbc8169))
+* **analyze:** the conformance command documented four checks, there are five ([d05f97e](https://github.com/event4u-app/agent-config/commit/d05f97e13b03cc04036d83aba4df6635e0323932))
+* **conformance:** round 7 — the honest downgrades and the archived roadmap ([c1bc2aa](https://github.com/event4u-app/agent-config/commit/c1bc2aaef41b04aa76024f9949c9e10eacd9886c))
+* **council:** the template and contract stop documenting a setting that is gone ([49d58fa](https://github.com/event4u-app/agent-config/commit/49d58fa28778359416459465cf066b7d8fccb363))
+* **roadmap:** close the stop-refusal blocker, open the two follow-up tracks ([7c6b404](https://github.com/event4u-app/agent-config/commit/7c6b4045c2cadf023d1f434ff851cec86372613a))
+
+### Refactoring
+
+* **condense:** expose the active-tool set root-parameterised ([d795d6a](https://github.com/event4u-app/agent-config/commit/d795d6a666f57be451d0dd5462b8725b56e44e75))
+* **settings:** delete hooks.turn_end_gate.* and give REMOVED_KEYS per-key reasons ([f5b316b](https://github.com/event4u-app/agent-config/commit/f5b316b4bc531e2cf7ce0d65556c4a2737cbe0dc))
+
+### Tests
+
+* **hooks:** prove the completion detector is wired, not just correct ([4d284ef](https://github.com/event4u-app/agent-config/commit/4d284efa10ba939066edfc42c4a735d94e794def))
+
+### Chores
+
+* **condense:** re-project session-canary after the reproduction-command fix ([2d344c4](https://github.com/event4u-app/agent-config/commit/2d344c4d2183a608986f9dce485f1e5006e48863))
+
+Tests: 13384 (+51 since 9.36.0)
+
 ## [9.36.0](https://github.com/event4u-app/agent-config/compare/9.35.0...9.36.0) (2026-08-12)
 
 ### Release highlights

package/agents/templates/.ai-council.yml.example

@@ -25,9 +25,13 @@
 # never at the raw secret. See docs/contracts/ai-council-config.md for
 # the full schema.
 #
-# Cost note: every consultation makes real, paid API calls. The
-# autonomy directive does NOT silently spend tokens — the /council
-# command always asks before invoking, even under autonomy: on.
+# Cost note: a consultation is billed only when it resolves to the metered
+# `api` rung. A vendor CLI under your subscription is preferred whenever one
+# resolves, so the common case costs nothing per token — run
+# `agent-config council status` to see the resolved transport and billing class
+# per member before invoking. The autonomy directive does NOT silently spend
+# tokens — the /council command always asks before invoking, even under
+# autonomy: on.
 
 # Master switch (true, false). REQUIRED — the loader has no default for it,
 # so this file's value is the only value.
@@ -44,51 +48,30 @@
 # "could work" and "may spend" is visible rather than mysterious.
 enabled: true
 
-# Per-invocation defaults. Each member may override `mode:` below.
+# Per-invocation defaults.
 defaults:
-  # Default transport mode for every member (overridable per-member
-  # below, and per-invocation via `/council mode:<x>`).
+  # There is NO transport-mode setting, deliberately.
   #
-  #   manual = copy & paste — the human transports prompt + reply
-  #            between the agent and an external chat surface. Free,
-  #            no key.
-  #   api    = SDK call against a stored key, per-token billing.
-  #   cli    = shell out to a locally-installed provider CLI under the
-  #            user's subscription auth (Claude Pro/Max, ChatGPT
-  #            Plus/Pro, Google Gemini, etc.). Spend is covered by the
-  #            flat-rate subscription, not per-token. `cost_budget.
-  #            max_total_usd` does NOT apply; use `cli_call_budget`
-  #            below to guard subscription quotas.
-  #   auto   = resolve per provider per invocation: the provider's CLI
-  #            binary resolves AND a credential is present -> cli; else a
-  #            key resolves -> api; else unavailable with a one-line
-  #            reason. `manual` is NEVER part of the auto chain (it would
-  #            always "succeed" and silently turn every call into a
-  #            copy-paste request) — it stays an explicit opt-in.
-  #            THE SHIPPED DEFAULT (road-to-always-on-orchestration
-  #            Phase 3.1 — CLI-first is the owner-set transport doctrine):
-  #            ride the vendor CLI under your subscription first, fall to
-  #            the metered API only where no CLI resolves. Pin `manual` /
-  #            `api` / `cli` here (or per-member below) to override it.
-  #            `cli_call_budget` below ships populated with a generous
-  #            per-provider guard so this default never runs your
-  #            subscription quota uncapped.
+  # Transport is resolved per machine per invocation — `cli → api →
+  # unavailable`, and an airgapped host forces the `api` rung. A vendor CLI
+  # under your subscription is preferred whenever one resolves with a
+  # credential, so the free transport wins without anybody configuring it.
   #
-  # Precedence: invocation flag > per-member mode > defaults.mode >
-  # built-in. Two DIFFERENT defaults sit at the bottom, and they are not
-  # the same thing:
-  #   · omit `defaults.mode` entirely and the loader fills "auto" (was
-  #     "api" before the Phase 3.1 flip) — that is what every real config
-  #     file observes.
-  #   · the resolver's built-in fallback, reached only when no layer at all
-  #     supplies a mode (a settings dict handed straight to the resolver,
-  #     no config file involved), is "manual" — free, no key. A caller who
-  #     named no transport has not asked to spend money. This did NOT flip
-  #     alongside the loader default: `auto` still resolves to a paying
-  #     rung when no CLI is usable, so flipping this too would let a
-  #     caller that bypassed the config file spend money on a preference
-  #     it never stated.
-  mode: auto
+  # It used to be `defaults.mode`, with a per-member override. The default was
+  # flipped to CLI-first, but a default only fires on an ABSENT key: every
+  # config that had spelled the key out — which this template did, and which
+  # the setup wizard wrote — kept its old `api` value and went on paying per
+  # token while a paid-for subscription CLI sat unused on the same machine.
+  # A knob whose stale value silently costs money is worse than no knob.
+  #
+  # A file that still carries `mode:` (here or under a member) loads fine; the
+  # key is ignored and `agent-config council status` lists it as ignored so you
+  # can delete it. To pin one transport for ONE run — including the free,
+  # key-free `manual` copy-paste loop — pass `--mode-override` on the
+  # invocation. That is a flag, not a setting: it cannot go stale.
+  #
+  # `agent-config council status` prints the resolved transport and the billing
+  # class per member, which is the only honest answer to "will this cost money".
 
   # Default number of debate rounds per /council invocation.
   #
@@ -264,7 +247,9 @@ quorum: majority
 #                 under ~/.event4u/agent-config/, legacy
 #                 ~/.config/agent-config/ read as a fallback) or an env
 #                 var (`env:<VAR>`). Raw keys here are a hard validation
-#                 error. Required for mode: api; optional for cli /
+#                 error. Optional: it is the credential for the metered `api`
+#                 fallback rung. Absent, that rung is simply unavailable and
+#                 the member needs a working CLI. Not needed for cli /
 #                 manual / auto (those may authenticate via the CLI).
 #   mode:         overrides defaults.mode for this member only.
 #   binary:       absolute path to the provider's CLI — only valid when
@@ -290,7 +275,6 @@ members:
     enabled: true
     model: claude-sonnet-4-5
     api_key_ref: file:anthropic.key
-    # mode: cli                          # use subscription auth (Claude Pro/Max) — free, see cli_call_budget above
     # binary: /usr/local/bin/claude      # only valid when mode == cli
     # Phase 7 — size-fit downgrade ladder (smallest → largest). The
     # active `model:` above must appear on this list. When the size
@@ -325,7 +309,6 @@ members:
     enabled: true
     model: gpt-4o
     api_key_ref: file:openai.key
-    # mode: cli                          # use subscription auth (ChatGPT Plus/Pro via Codex CLI) — free
     # binary: /usr/local/bin/codex       # only valid when mode == cli
     # Phase 7 — size-fit downgrade ladder (smallest → largest). The
     # active `model:` above must appear on this list.
@@ -340,14 +323,12 @@ members:
     enabled: false
     model: gemini-2.5-pro
     api_key_ref: env:GEMINI_API_KEY
-    # mode: cli                          # use Google account (free-tier limits apply) — free
     # binary: /usr/local/bin/gemini      # only valid when mode == cli
 
   xai:
     enabled: false
     model: grok-4
     api_key_ref: env:XAI_API_KEY
-    # mode: cli                          # community `grok` CLI (Superagent) — ergonomic shortcut, NOT a billing change.
     # binary: /usr/local/bin/grok        # The CLI consumes XAI_API_KEY and remains billable=True;
     #                                    # cost_budget.max_total_usd STILL applies. Opt-in only.
 
@@ -355,7 +336,6 @@ members:
     enabled: false
     model: sonar-pro
     api_key_ref: env:PERPLEXITY_API_KEY
-    # mode: cli                          # community `perplexity` CLI — ergonomic shortcut, NOT a billing change.
     # binary: /usr/local/bin/perplexity  # The CLI consumes PERPLEXITY_API_KEY and remains billable=True;
     #                                    # cost_budget.max_total_usd STILL applies. Opt-in only.
 

package/dist/agent-src/commands/analyze/conformance.md

@@ -72,10 +72,21 @@ how they make it.
 agent-config conformance:behavior --limit <N> --output conformance-report.json
 ```
 
-Replays the local transcript store through the four **mechanised** checks:
-language pin, git authorization, vacuous evidence, evidence steering. Every
-classifier is imported from the gate it measures, so the scan and the gate
-cannot drift apart.
+Replays the local transcript store through the five **mechanised** checks:
+language pin, git authorization, vacuous evidence, evidence steering, and — since
+round 7 — completion claim (a turn claiming the work is done while the last CI
+read in that session was not settled). Every classifier is imported from the gate
+it measures, so the scan and the gate cannot drift apart.
+
+Two readings the report now separates, both because round 7's first run got them
+wrong. The **language-pin rate is printed over two denominators** — all assistant
+turns, which is what the band's three reference values used, and turns under a
+German pin, which is the only population the check can fire on; the same corpus
+read 6.5 % on the first and 9.2 % on the second, enough to move the verdict. And
+the **band verdict is withheld over a corpus that spans a carrier landing**
+(`CARRIER_CHANGES`): pooling 23.1 % before a mechanism with 0.0 % after it is a
+weighted average of two systems, and the pooled figure was announced as the
+pre-registered falsifier firing.
 
 This is the floor, not the audit. It sees only what already has a gate — which
 is exactly why it is trustworthy and exactly why it is not sufficient.

package/dist/agent-src/rules/session-canary.md

@@ -118,6 +118,34 @@ refused turn-end continues in the same turn) that rejects a task-start reply
 carrying no greeting. Proposed, not shipped; until it is, this obligation is
 model-carried in practice, whatever the frequency join reports.
 
+**Round 7 downgrade: that proposed mechanism is UNDECIDABLE as written, and the
+obligation splits into a measured half and an unmeasurable one.** A *task* start
+is recorded nowhere in a transcript — there is no task event on any host, and
+`user-interrupt-priority`'s continuation/clarification/interrupt distinction is a
+judgement, not a field. So a delivery check "that rejects a task-start reply" has
+no way to know a task started. The proposal is not merely unbuilt; as specified it
+cannot be built, and saying "proposed, not shipped" implied otherwise.
+
+What IS decidable is the per-**session** instance, and it was measured rather than
+asserted — reproducibly, which took a correction: the probe resolves the name
+through the same settings layers this rule names and REFUSES when no layer carries
+one, so the figure below is reproduced with the name passed explicitly
+(`./scripts-run src/scripts/probe_session_canary --limit 30 --name <your name>`;
+the first version hardcoded a maintainer's nickname as its default, which made the
+number irreproducible for anyone else and silently read 0 %). Over 30 sessions on
+2026-08-12: the opening greeting is present in **25 of 28** sessions carrying
+assistant prose (89.3 %), and in **24 of 25** post-carrier (96.0 %). Of the three
+misses, two predate the carrier (2026-07-21, 2026-07-29) and one is a session whose
+first thirty turns were tool calls.
+
+Both halves of that are load-bearing. The carrier works exactly where it has a
+slot — `session_start` — which is why the session-scope figure is high; and the
+24-of-29 task-start figure above is not contradicted by it, because the two count
+different events. The honest statement is therefore: **session-scope compliance is
+measured and good; task-scope compliance is unmeasured and unmeasurable with
+today's transcript, and no gate can change that until a task boundary is recorded
+somewhere.** Do not read the 96 % as covering the obligation as a whole.
+
 **The wrong-name half needs nothing, and that is worth stating.** The beat
 already carries the resolved value — `build_canary_reminder` emits
 `Canary active for "<name>"`, and the hook no-ops when no layer resolves a name —

package/dist/agent-src/templates/agents/agent-project-settings.example.yml

@@ -39,7 +39,7 @@ schema_version: 1
 # CI guard: a release bump of `package.json` must update this value
 # in lockstep — see scripts/check_template_pin_drift.ts (road-to-
 # portable-runtime-and-update-check P3.3).
-agent_config_version: "9.36.0"
+agent_config_version: "10.0.0"
 
 # --- Project identity ---
 project:

package/dist/cli-delegate/{chunk-SFGARMAB.js → chunk-2H5SE7DU.js}

@@ -18,7 +18,7 @@ import {
   hardenedSpawnEnv,
   scanTranscripts,
   weightedInputUnits
-} from "./chunk-55RI5UXK.js";
+} from "./chunk-XT2YTJCZ.js";
 import {
   git_common_dir
 } from "./chunk-PZWRPRWP.js";
@@ -52,7 +52,7 @@ import {
   load_agent_settings,
   project_settings_path,
   resolve_project_root
-} from "./chunk-JEJABGKB.js";
+} from "./chunk-XTC5ARB6.js";
 import {
   event4u_root,
   resolve_with_fallback,
@@ -3777,6 +3777,22 @@ function homeOf(env) {
   return injected !== "" ? injected : os.homedir();
 }
 var VERSION_PROBE_TIMEOUT_MS = 2e3;
+var CLAUDE_KEYCHAIN_SERVICE = "Claude Code-credentials";
+function defaultProbeKeychain(service) {
+  if (process.platform !== "darwin") return false;
+  try {
+    const res = spawnSync2("security", ["find-generic-password", "-s", service], {
+      timeout: VERSION_PROBE_TIMEOUT_MS,
+      encoding: "utf-8",
+      windowsHide: true,
+      env: hardenedSpawnEnv()
+    });
+    if (res.error !== void 0 || res.signal !== null) return false;
+    return res.status === 0;
+  } catch {
+    return false;
+  }
+}
 function defaultProbeVersion(binary) {
   try {
     const res = spawnSync2(binary, ["--version"], {
@@ -3822,13 +3838,16 @@ function classifyCodexAuth(authPath) {
   if (hasOauth) return "cli-subscription";
   return "cli-api-key";
 }
-function cliSubscriptionEvidence(provider, home, env, claudeConfigDir) {
+function cliSubscriptionEvidence(provider, home, env, claudeConfigDir, probeKeychain) {
   if (provider === "anthropic") {
     const configDir = claudeConfigDir;
     for (const rel of [".credentials.json", "credentials.json"]) {
       const p = path12.join(configDir, rel);
       if (isFile(p)) return { source: "cli-subscription", evidence: p };
     }
+    if (probeKeychain(CLAUDE_KEYCHAIN_SERVICE)) {
+      return { source: "cli-subscription", evidence: `keychain:${CLAUDE_KEYCHAIN_SERVICE}` };
+    }
     return null;
   }
   if (provider === "openai") {
@@ -3870,10 +3889,11 @@ function detectAuth(opts) {
   const env = opts.env ?? process.env;
   const home = opts.home ?? homeOf(opts.env);
   const claudeConfigDir = opts.home === void 0 && opts.env === void 0 ? claude_config_dir() : (env["CLAUDE_CONFIG_DIR"] ?? "").trim() || path12.join(home, ".claude");
+  const probeKeychain = opts.probeKeychain ?? defaultProbeKeychain;
   const auth = [];
   const keys = [];
   for (const provider of knownProviders()) {
-    const cli = cliSubscriptionEvidence(provider, home, env, claudeConfigDir);
+    const cli = cliSubscriptionEvidence(provider, home, env, claudeConfigDir, probeKeychain);
     if (cli !== null) {
       auth.push({ provider, source: cli.source, evidence: cli.evidence });
     }

package/dist/cli-delegate/{chunk-U7CMAIOC.js → chunk-3JUTT26I.js}

@@ -1,7 +1,7 @@
 import { createRequire as __acCreateRequire } from 'node:module'; const require = globalThis.require ?? __acCreateRequire(import.meta.url);
 import {
   resolve_project_root
-} from "./chunk-JEJABGKB.js";
+} from "./chunk-XTC5ARB6.js";
 import {
   resolvePackageRoot
 } from "./chunk-MCJYCQPF.js";

package/dist/cli-delegate/{chunk-JP53LNVT.js → chunk-HJSKTMIF.js}

@@ -4552,21 +4552,13 @@ var settingsSchema = external_exports.object({
       enabled: external_exports.boolean().default(false).describe(
         "PreToolUse code-graph nudge (ADR-124 Phase 4). Default off. When on AND a native code-graph cache or a consumer-shipped graph.json/SCIP index is present, warns once per session (never blocks) as the agent is about to Grep/Glob or Read a source file \u2014 query the graph first for who-calls/where-used/impact questions (or rebuild if stale, build if absent). Source G\u2019s strict block-first-read mode is deliberately un-ported."
       )
-    }).default({}),
-    turn_end_gate: external_exports.object({
-      enabled: external_exports.boolean().default(false).describe(
-        "Stop-slot turn-end gate (road-to-conformance-round5 Phase 3). Default off, and it is the only concern that can REFUSE a turn-end rather than a tool call \u2014 so it soaks behind an explicit opt-in before it binds. Round 5 measured the reason: both blocking carriers reached zero violations, neither advisory carrier did, and 19 wrong-language replies survived a pin that had fired 26-35 seconds earlier. A refused turn continues in the SAME turn and is never refused twice."
-      ),
-      promissory: external_exports.boolean().default(true).describe(
-        "Detector A of the turn-end gate: refuse a turn whose closing paragraph promises work not yet performed while asking the user nothing (20 measured occurrences). No fire rate is quoted here on purpose: the measured rate moved twice while the instrument itself was being corrected, so a number in a shipped description would be a moving target. Re-derive it with `measure-turn-end-gate --store <transcript dir>` against your own corpus before arming the gate. Inert while hooks.turn_end_gate.enabled is false."
-      ),
-      language: external_exports.boolean().default(true).describe(
-        "Detector B of the turn-end gate: refuse a turn whose reply is not in the pinned language (19 measured occurrences). Fenced code, inline code, quoted tool output, tables, URLs and paths are stripped first, and the remainder is then scored LEAD-FIRST by the same classifier that sets the pin \u2014 so the verdict usually comes from the reply opening, not from all of it. Sharing that classifier is deliberate: it stops the pin and the detector disagreeing about a turn. Accepted opt-in spellings for the switches below include YAML true/false and yes/no/on/off. Inert while hooks.turn_end_gate.enabled is false."
-      ),
-      verification: external_exports.boolean().default(true).describe(
-        "Detector C of the turn-end gate: refuse a turn that changed a file and then ran nothing that could have checked it \u2014 no test, type-check, lint or build call follows the LAST edit. Ordering is the point: a run before the final edit did not exercise it, which is the freshness clause verify-before-complete states. Read off the turn tool calls, not the prose, because a reply cannot say whether an edit was verified. Deliberately narrow on what counts as verification \u2014 a missed detection costs one unguarded turn, a false refusal teaches you to switch the gate off. No fire rate is quoted: none has been measured yet. Inert while hooks.turn_end_gate.enabled is false."
-      )
     }).default({})
+    // `turn_end_gate` is deliberately ABSENT. The stop-slot turn-end gate is
+    // always armed (2026-08-12) and has no settings surface: whether it
+    // fires is decided by each detector's own trigger conditions, not by a
+    // flag. A leftover `hooks.turn_end_gate.*` block from an older install
+    // warns once on stderr and is ignored — see REMOVED_KEYS in
+    // `src/scripts/_lib/agent_settings.ts`.
   }),
   decision_engine: external_exports.object({
     surface_traces: external_exports.boolean().default(false).describe(

package/dist/cli-delegate/{chunk-QEEB4LHO.js → chunk-LRXJK6GN.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-MMJL4TIX.js";
 import {
   load_agent_settings
-} from "./chunk-JEJABGKB.js";
+} from "./chunk-XTC5ARB6.js";
 
 // src/scripts/chat_history.ts
 import { createHash } from "node:crypto";

package/dist/cli-delegate/{chunk-NR7HSN3P.js → chunk-NX5AXSLD.js}

@@ -2,10 +2,10 @@ import { createRequire as __acCreateRequire } from 'node:module'; const require
 import {
   ZodFirstPartyTypeKind,
   settingsSchema
-} from "./chunk-JP53LNVT.js";
+} from "./chunk-HJSKTMIF.js";
 import {
   main
-} from "./chunk-U7CMAIOC.js";
+} from "./chunk-3JUTT26I.js";
 import {
   RULE_SOURCE_REL
 } from "./chunk-BKO2AZ7Z.js";
@@ -48,7 +48,7 @@ import {
 import {
   find_project_root_with_anchor,
   load_agent_settings
-} from "./chunk-JEJABGKB.js";
+} from "./chunk-XTC5ARB6.js";
 import {
   event4u_root,
   legacy_xdg_root,

package/dist/cli-delegate/{chunk-AG47LAGQ.js → chunk-TVGXH7VA.js}

@@ -2,7 +2,7 @@ import { createRequire as __acCreateRequire } from 'node:module'; const require
 import {
   DEFAULT_PROJECT_FILE,
   logger
-} from "./chunk-JEJABGKB.js";
+} from "./chunk-XTC5ARB6.js";
 
 // src/scripts/config/profiles.ts
 import * as fs2 from "node:fs";

package/dist/cli-delegate/{chunk-55RI5UXK.js → chunk-XT2YTJCZ.js}

@@ -40,7 +40,6 @@ var _VALID_PROVIDERS = /* @__PURE__ */ new Set([
   "xai",
   "perplexity"
 ]);
-var _VALID_MODES = /* @__PURE__ */ new Set(["api", "manual", "cli", "auto"]);
 var _RAW_KEY_PREFIXES = [
   "sk-",
   "sk-ant-",
@@ -303,7 +302,11 @@ function _build_config(raw, source_path) {
   if (!_isBool(enabled)) {
     throw new CouncilConfigError("`enabled` must be a bool.");
   }
-  const defaults = _build_defaults(_asDict(_getOr(raw, "defaults", {})));
+  const ignored_transport_keys = [];
+  const defaults = _build_defaults(
+    _asDict(_getOr(raw, "defaults", {})),
+    ignored_transport_keys
+  );
   const cost_budget = _build_cost_budget(
     _asDict(_getOr(raw, "cost_budget", {}))
   );
@@ -315,7 +318,12 @@ function _build_config(raw, source_path) {
   for (const [name, cfg] of Object.entries(members_raw)) {
     members.set(
       name,
-      _build_member(name, _asDict(_orEmpty(cfg)), defaults.mode)
+      _build_member(
+        name,
+        _asDict(_orEmpty(cfg)),
+        defaults.mode,
+        ignored_transport_keys
+      )
     );
   }
   const advisors_raw = _getOr(raw, "advisors", {});
@@ -414,7 +422,8 @@ function _build_config(raw, source_path) {
     routing,
     low_impact,
     lens_overrides,
-    source_path
+    source_path,
+    ignored_transport_keys
   };
 }
 function _orEmpty(value) {
@@ -892,16 +901,14 @@ function _build_consensus_scoring(d) {
   };
 }
 var _VALID_MEMBER_MODES = /* @__PURE__ */ new Set(["cli", "api"]);
-function _build_defaults(d) {
+function _build_defaults(d, ignored = []) {
   if (!_isDict(d)) {
     throw new CouncilConfigError("`defaults` must be a mapping.");
   }
-  const mode = _get(d, "mode", "auto");
-  if (!(_isStr(mode) && _VALID_MODES.has(mode))) {
-    throw new CouncilConfigError(
-      `defaults.mode=${_pyRepr(mode)} not in ${_sortedListRepr(_VALID_MODES)}.`
-    );
+  if (_get(d, "mode", null) !== null) {
+    ignored.push("defaults.mode");
   }
+  const mode = "auto";
   const member_mode = _get(d, "member_mode", "cli");
   if (!(_isStr(member_mode) && _VALID_MEMBER_MODES.has(member_mode))) {
     throw new CouncilConfigError(
@@ -1058,7 +1065,7 @@ function _build_cost_budget(d) {
   }
   return cb;
 }
-function _build_member(name, cfg, default_mode = "auto") {
+function _build_member(name, cfg, default_mode = "auto", ignored = []) {
   if (!_VALID_PROVIDERS.has(name)) {
     throw new CouncilConfigError(
       `members.${name}: unknown provider; valid: ${_sortedListRepr(_VALID_PROVIDERS)}.`
@@ -1069,14 +1076,11 @@ function _build_member(name, cfg, default_mode = "auto") {
   const model = _pyTruthy(modelVal) ? modelVal : "";
   const api_key_ref_raw = _get(cfg, "api_key_ref", null);
   const api_key_ref = api_key_ref_raw === void 0 ? null : api_key_ref_raw;
-  const member_mode_raw = _get(cfg, "mode", null);
-  const member_mode = member_mode_raw === void 0 ? null : member_mode_raw;
-  if (member_mode !== null && !(_isStr(member_mode) && _VALID_MODES.has(member_mode))) {
-    throw new CouncilConfigError(
-      `members.${name}.mode=${_pyRepr(member_mode)} not in ${_sortedListRepr(_VALID_MODES)}.`
-    );
+  if (_get(cfg, "mode", null) !== null) {
+    ignored.push(`members.${name}.mode`);
   }
-  const effective_mode = member_mode !== null ? member_mode : default_mode;
+  const member_mode = null;
+  const effective_mode = default_mode;
   const binary_raw = _get(cfg, "binary", null);
   const binary = binary_raw === void 0 ? null : binary_raw;
   if (binary !== null) {

package/dist/cli-delegate/{chunk-JEJABGKB.js → chunk-XTC5ARB6.js}

@@ -504,14 +504,18 @@ function load_agent_settings(options = {}) {
   _warn_removed_always_on_keys(merged);
   return merged;
 }
-var REMOVED_ALWAYS_ON_KEYS = [
-  "subagents.enabled",
-  "subagents.auto",
-  "subagents.host_capabilities",
-  "subagents.budget_routing",
-  "ai_team.enabled"
-];
-var _warnedRemovedAlwaysOnKeys = /* @__PURE__ */ new Set();
+var REMOVED_KEYS = /* @__PURE__ */ new Map([
+  ["subagents.enabled", "always-on orchestration"],
+  ["subagents.auto", "always-on orchestration"],
+  ["subagents.host_capabilities", "always-on orchestration"],
+  ["subagents.budget_routing", "always-on orchestration"],
+  ["ai_team.enabled", "always-on orchestration"],
+  ["hooks.turn_end_gate.enabled", "the turn-end gate is always armed"],
+  ["hooks.turn_end_gate.promissory", "the turn-end gate is always armed"],
+  ["hooks.turn_end_gate.language", "the turn-end gate is always armed"],
+  ["hooks.turn_end_gate.verification", "the turn-end gate is always armed"]
+]);
+var _warnedRemovedKeys = /* @__PURE__ */ new Set();
 function _readDottedSettingsPath(root, dotted) {
   let node = root;
   for (const part of dotted.split(".")) {
@@ -523,15 +527,15 @@ function _readDottedSettingsPath(root, dotted) {
   return node;
 }
 function _warn_removed_always_on_keys(merged) {
-  for (const key of REMOVED_ALWAYS_ON_KEYS) {
-    if (_warnedRemovedAlwaysOnKeys.has(key)) {
+  for (const [key, reason] of REMOVED_KEYS) {
+    if (_warnedRemovedKeys.has(key)) {
       continue;
     }
     if (_readDottedSettingsPath(merged, key) === void 0) {
       continue;
     }
-    _warnedRemovedAlwaysOnKeys.add(key);
-    process.stderr.write(`${key} was removed (always-on orchestration); ignored.
+    _warnedRemovedKeys.add(key);
+    process.stderr.write(`${key} was removed (${reason}); ignored.
 `);
   }
 }

package/dist/cli-delegate/cmd_analyze_session.js

@@ -7,7 +7,7 @@ import {
 import {
   ProjectRootError,
   resolve_project_root
-} from "./chunk-JEJABGKB.js";
+} from "./chunk-XTC5ARB6.js";
 import "./chunk-NDJLNC6Q.js";
 import "./chunk-J55WI3RR.js";
 

package/dist/cli-delegate/cmd_brand_status.js

@@ -1,7 +1,7 @@
 import { createRequire as __acCreateRequire } from 'node:module'; const require = globalThis.require ?? __acCreateRequire(import.meta.url);
 import {
   resolve_project_root
-} from "./chunk-JEJABGKB.js";
+} from "./chunk-XTC5ARB6.js";
 import "./chunk-NDJLNC6Q.js";
 import "./chunk-J55WI3RR.js";