@event4u/agent-config 9.36.0 → 10.0.0

package/dist/hooks/dispatch.js

@@ -11852,14 +11852,18 @@ function load_agent_settings(options = {}) {
   _warn_removed_always_on_keys(merged);
   return merged;
 }
-var REMOVED_ALWAYS_ON_KEYS = [
-  "subagents.enabled",
-  "subagents.auto",
-  "subagents.host_capabilities",
-  "subagents.budget_routing",
-  "ai_team.enabled"
-];
-var _warnedRemovedAlwaysOnKeys = /* @__PURE__ */ new Set();
+var REMOVED_KEYS = /* @__PURE__ */ new Map([
+  ["subagents.enabled", "always-on orchestration"],
+  ["subagents.auto", "always-on orchestration"],
+  ["subagents.host_capabilities", "always-on orchestration"],
+  ["subagents.budget_routing", "always-on orchestration"],
+  ["ai_team.enabled", "always-on orchestration"],
+  ["hooks.turn_end_gate.enabled", "the turn-end gate is always armed"],
+  ["hooks.turn_end_gate.promissory", "the turn-end gate is always armed"],
+  ["hooks.turn_end_gate.language", "the turn-end gate is always armed"],
+  ["hooks.turn_end_gate.verification", "the turn-end gate is always armed"]
+]);
+var _warnedRemovedKeys = /* @__PURE__ */ new Set();
 function _readDottedSettingsPath(root, dotted) {
   let node = root;
   for (const part of dotted.split(".")) {
@@ -11871,15 +11875,15 @@ function _readDottedSettingsPath(root, dotted) {
   return node;
 }
 function _warn_removed_always_on_keys(merged) {
-  for (const key of REMOVED_ALWAYS_ON_KEYS) {
-    if (_warnedRemovedAlwaysOnKeys.has(key)) {
+  for (const [key, reason] of REMOVED_KEYS) {
+    if (_warnedRemovedKeys.has(key)) {
       continue;
     }
     if (_readDottedSettingsPath(merged, key) === void 0) {
       continue;
     }
-    _warnedRemovedAlwaysOnKeys.add(key);
-    process.stderr.write(`${key} was removed (always-on orchestration); ignored.
+    _warnedRemovedKeys.add(key);
+    process.stderr.write(`${key} was removed (${reason}); ignored.
 `);
   }
 }
@@ -14048,7 +14052,6 @@ var _VALID_PROVIDERS = /* @__PURE__ */ new Set([
   "xai",
   "perplexity"
 ]);
-var _VALID_MODES = /* @__PURE__ */ new Set(["api", "manual", "cli", "auto"]);
 var _RAW_KEY_PREFIXES = [
   "sk-",
   "sk-ant-",
@@ -14301,7 +14304,11 @@ function _build_config(raw, source_path) {
   if (!_isBool(enabled4)) {
     throw new CouncilConfigError("`enabled` must be a bool.");
   }
-  const defaults = _build_defaults(_asDict(_getOr(raw, "defaults", {})));
+  const ignored_transport_keys = [];
+  const defaults = _build_defaults(
+    _asDict(_getOr(raw, "defaults", {})),
+    ignored_transport_keys
+  );
   const cost_budget = _build_cost_budget(
     _asDict(_getOr(raw, "cost_budget", {}))
   );
@@ -14313,7 +14320,12 @@ function _build_config(raw, source_path) {
   for (const [name, cfg] of Object.entries(members_raw)) {
     members.set(
       name,
-      _build_member(name, _asDict(_orEmpty(cfg)), defaults.mode)
+      _build_member(
+        name,
+        _asDict(_orEmpty(cfg)),
+        defaults.mode,
+        ignored_transport_keys
+      )
     );
   }
   const advisors_raw = _getOr(raw, "advisors", {});
@@ -14412,7 +14424,8 @@ function _build_config(raw, source_path) {
     routing,
     low_impact,
     lens_overrides,
-    source_path
+    source_path,
+    ignored_transport_keys
   };
 }
 function _orEmpty(value) {
@@ -14890,16 +14903,14 @@ function _build_consensus_scoring(d) {
   };
 }
 var _VALID_MEMBER_MODES = /* @__PURE__ */ new Set(["cli", "api"]);
-function _build_defaults(d) {
+function _build_defaults(d, ignored = []) {
   if (!_isDict(d)) {
     throw new CouncilConfigError("`defaults` must be a mapping.");
   }
-  const mode = _get(d, "mode", "auto");
-  if (!(_isStr(mode) && _VALID_MODES.has(mode))) {
-    throw new CouncilConfigError(
-      `defaults.mode=${_pyRepr3(mode)} not in ${_sortedListRepr(_VALID_MODES)}.`
-    );
+  if (_get(d, "mode", null) !== null) {
+    ignored.push("defaults.mode");
   }
+  const mode = "auto";
   const member_mode = _get(d, "member_mode", "cli");
   if (!(_isStr(member_mode) && _VALID_MEMBER_MODES.has(member_mode))) {
     throw new CouncilConfigError(
@@ -15056,7 +15067,7 @@ function _build_cost_budget(d) {
   }
   return cb;
 }
-function _build_member(name, cfg, default_mode = "auto") {
+function _build_member(name, cfg, default_mode = "auto", ignored = []) {
   if (!_VALID_PROVIDERS.has(name)) {
     throw new CouncilConfigError(
       `members.${name}: unknown provider; valid: ${_sortedListRepr(_VALID_PROVIDERS)}.`
@@ -15067,14 +15078,11 @@ function _build_member(name, cfg, default_mode = "auto") {
   const model = _pyTruthy(modelVal) ? modelVal : "";
   const api_key_ref_raw = _get(cfg, "api_key_ref", null);
   const api_key_ref = api_key_ref_raw === void 0 ? null : api_key_ref_raw;
-  const member_mode_raw = _get(cfg, "mode", null);
-  const member_mode = member_mode_raw === void 0 ? null : member_mode_raw;
-  if (member_mode !== null && !(_isStr(member_mode) && _VALID_MODES.has(member_mode))) {
-    throw new CouncilConfigError(
-      `members.${name}.mode=${_pyRepr3(member_mode)} not in ${_sortedListRepr(_VALID_MODES)}.`
-    );
+  if (_get(cfg, "mode", null) !== null) {
+    ignored.push(`members.${name}.mode`);
   }
-  const effective_mode = member_mode !== null ? member_mode : default_mode;
+  const member_mode = null;
+  const effective_mode = default_mode;
   const binary_raw = _get(cfg, "binary", null);
   const binary = binary_raw === void 0 ? null : binary_raw;
   if (binary !== null) {
@@ -17233,6 +17241,14 @@ function _empty_state2() {
     verified_this_turn: false,
     ci_saw_pending: false,
     nonevidence_this_turn: 0,
+    // Round 7 § Phase 1 — the last CI read, SESSION-scoped on purpose. Every
+    // other counter here is turn-scoped because a stale POSITIVE would wrongly
+    // vouch ("I verified"). This one is a NEGATIVE ("CI was not settled"), and a
+    // stale negative only ever refuses more often — so surviving the turn
+    // boundary preserves the freshness invariant rather than bypassing it. It
+    // has to survive it: the measured failure is a completion claim in a LATER
+    // turn than the poll it rests on.
+    ci_last: null,
     checked_at: _now2()
   };
 }
@@ -17360,6 +17376,7 @@ function _update2(state, event, envelope) {
   if (session_id && session_id !== state["session_id"]) {
     state["session_id"] = session_id;
     state["verifications_this_session"] = 0;
+    state["ci_last"] = null;
     state = _reset_turn(state, session_id);
   }
   let payload = envelope["payload"];
@@ -17385,6 +17402,12 @@ function _update2(state, event, envelope) {
         } else {
           counts = false;
         }
+        state["ci_last"] = {
+          at: _now2(),
+          command: cmd.slice(0, 512),
+          pending,
+          settled: pending === 0 && counts === true
+        };
       }
       state["last_verification"] = {
         command: cmd.slice(0, 512),
@@ -22054,28 +22077,51 @@ function _looks_like_git_invocation(cmd, depth = 0) {
   }
   return false;
 }
+var _SHELL_CONSUMER_RE = /(?:^|[|&;]|\$\(|`)\s*(?:env\s+(?:[A-Za-z_][A-Za-z0-9_]*=\S*\s+)*)?(?:\S*\/)?(?:ba|z|k)?sh\b/;
+function _heredocs(cmd) {
+  const re = /<<-?\s*(['"]?)([A-Za-z_][A-Za-z0-9_]*)\1([\s\S]*?)^\s*\2\s*$/gm;
+  const docs = [];
+  let stripped = "";
+  let last = 0;
+  let m;
+  while ((m = re.exec(cmd)) !== null) {
+    const lineStart = cmd.lastIndexOf("\n", m.index) + 1;
+    const prefix = cmd.slice(lineStart, m.index);
+    docs.push({ body: m[3] ?? "", shellConsumed: _SHELL_CONSUMER_RE.test(prefix) });
+    stripped += cmd.slice(last, m.index) + "<<HEREDOC";
+    last = m.index + m[0].length;
+  }
+  stripped += cmd.slice(last);
+  return { stripped, docs };
+}
 function _check_command(cmd, depth = 0) {
+  const { stripped, docs } = depth <= 3 ? _heredocs(cmd) : { stripped: cmd, docs: [] };
   if (depth <= 3) {
-    const withoutHeredocs = cmd.replace(
-      /<<-?\s*(['"]?)([A-Za-z_][A-Za-z0-9_]*)\1[\s\S]*?^\s*\2\s*$/gm,
-      "<<HEREDOC"
-    );
-    for (const payload of substitutionPayloads(withoutHeredocs)) {
+    for (const payload of substitutionPayloads(stripped)) {
       const [blocked, reason] = _check_command(payload, depth + 1);
       if (blocked) {
         return [true, reason];
       }
     }
+    for (const doc of docs) {
+      if (!doc.shellConsumed) {
+        continue;
+      }
+      const [blocked, reason] = _check_command(doc.body, depth + 1);
+      if (blocked) {
+        return [true, reason];
+      }
+    }
   }
   let tokens;
   try {
-    tokens = shlexSplit(cmd);
+    tokens = shlexSplit(stripped);
   } catch (e) {
     if (e instanceof ShlexError) {
-      if (_looks_like_git_invocation(cmd)) {
+      if (_looks_like_git_invocation(stripped)) {
         return [
           true,
-          "command parse failed (shlex) on a git-containing command \u2014 fail-closed (git-history-discipline). \nMost common cause: an apostrophe or backtick inside a heredoc commit message in the SAME compound command as `git`. \nFix: write the message to a file and use `git commit -F <file>` \u2014 do not retry the heredoc."
+          "command parse failed (shlex) on a git-containing command \u2014 fail-closed (git-history-discipline). \nThe quoting is unbalanced OUTSIDE any terminated heredoc \u2014 an unterminated heredoc, or an odd quote. \nbash refuses this command too; fix the quoting rather than working around the guard."
         ];
       }
       return [false, ""];
@@ -25654,6 +25700,33 @@ function detectPromissory(reply) {
   }
   return null;
 }
+function readCiSettled(workspaceRoot2) {
+  try {
+    const raw = fs60.readFileSync(path61.join(workspaceRoot2, STATE_FILE3), "utf-8");
+    const decoded = JSON.parse(raw);
+    if (typeof decoded === "object" && decoded !== null && !Array.isArray(decoded)) {
+      const ci = decoded["ci_last"];
+      if (typeof ci === "object" && ci !== null && !Array.isArray(ci)) {
+        return { seen: true, settled: ci["settled"] === true };
+      }
+    }
+  } catch {
+  }
+  return { seen: false, settled: false };
+}
+var _COMPLETION_RE = /(^|\n)\s*(?:\*\*)?(?:fertig\b|damit ist alles erledigt|aufgabe erledigt|alles erledigt\b|komplett(?:er)? (?:auftrag|abgearbeitet)|der komplette auftrag ist durch|done[.!]|all done\b|task complete)/i;
+function detectCompletionClaim(reply, ci) {
+  if (!ci.seen || ci.settled) return null;
+  const prose = visibleProse(reply);
+  const m = _COMPLETION_RE.exec(prose);
+  if (!m) return null;
+  const at = m.index;
+  return {
+    detector: "completion",
+    evidence: prose.slice(at, at + 120).trim(),
+    reason: "a completion claim while the last CI read was not settled \u2014 read the verdict, then claim it (verify-before-complete)"
+  };
+}
 function readLanguagePin(workspaceRoot2) {
   try {
     const raw = fs60.readFileSync(path61.join(workspaceRoot2, STATE_FILE5), "utf-8");
@@ -25816,43 +25889,6 @@ function _messageText(content) {
   }
   return parts.length > 0 ? parts.join("\n") : null;
 }
-function _isOn(v) {
-  if (typeof v === "boolean") return v;
-  if (typeof v !== "string") return null;
-  const s = v.trim().toLowerCase();
-  if (s === "true" || s === "yes" || s === "on") return true;
-  if (s === "false" || s === "no" || s === "off") return false;
-  return null;
-}
-function readGateSettings(workspaceRoot2) {
-  const off = {
-    enabled: false,
-    promissory: true,
-    language: true,
-    verification: true
-  };
-  let settings;
-  try {
-    settings = load_agent_settings({ cwd: workspaceRoot2 });
-  } catch {
-    return off;
-  }
-  const hooks = settings["hooks"];
-  if (typeof hooks !== "object" || hooks === null || Array.isArray(hooks)) return off;
-  const block = hooks["turn_end_gate"];
-  if (typeof block !== "object" || block === null || Array.isArray(block)) return off;
-  const gate = block;
-  const flag = (name, dflt) => {
-    const v = _isOn(gate[name]);
-    return v === null ? dflt : v;
-  };
-  return {
-    enabled: flag("enabled", false),
-    promissory: flag("promissory", true),
-    language: flag("language", true),
-    verification: flag("verification", true)
-  };
-}
 function str4(v) {
   return typeof v === "string" ? v : "";
 }
@@ -25866,8 +25902,6 @@ function main42() {
   }
   if (payload["stop_hook_active"] === true) return EXIT_ALLOW18;
   const workspaceRoot2 = str4(envelope["workspace_root"]) || process.cwd();
-  const settings = readGateSettings(workspaceRoot2);
-  if (!settings.enabled) return EXIT_ALLOW18;
   const transcriptPath = str4(
     payload["transcript_path"] ?? payload["transcriptPath"]
   );
@@ -25880,16 +25914,19 @@ function main42() {
   );
   if (alreadyRefusedTurn(workspaceRoot2, sessionKey, turnOrdinal)) return EXIT_ALLOW18;
   const findings = [];
-  if (settings.promissory) {
-    const f = detectPromissory(lastAssistant);
-    if (f) findings.push(f);
-  }
-  if (settings.language) {
-    const f = detectLanguage(lastAssistant, readLanguagePin(workspaceRoot2));
-    if (f) findings.push(f);
-  }
-  if (settings.verification) {
-    const f = detectUnverifiedEdit(toolCalls);
+  for (const f of [
+    detectPromissory(lastAssistant),
+    detectLanguage(lastAssistant, readLanguagePin(workspaceRoot2)),
+    detectUnverifiedEdit(toolCalls),
+    // Round 7 § Phase 1 — detector D, in the same unconditional list as the
+    // other three. It shipped with its own settings flag one commit earlier
+    // and that flag is gone: `hooks.turn_end_gate.*` was deleted on
+    // 2026-08-12 because a default-off safety gate is an absent one. Its
+    // gating is where the comment above says gating belongs — inside the
+    // detector: no CI observed, or a settled read, or no completion claim
+    // ⇒ no finding.
+    detectCompletionClaim(lastAssistant, readCiSettled(workspaceRoot2))
+  ]) {
     if (f) findings.push(f);
   }
   if (findings.length === 0) return EXIT_ALLOW18;
@@ -25901,9 +25938,8 @@ function main42() {
   process.stderr.write(
     `turn-end-gate: REFUSED \u2014 this turn is not finished.
 ${lines.join("\n")}
-  Do the promised work now, correct the language, or run the verification the edit needs, then end the turn.
+  Do the promised work now, correct the language, run the verification the edit needs, or read the CI verdict before claiming it \u2014 then end the turn.
   This turn will not be refused a second time.
-  Disable: hooks.turn_end_gate.enabled: false in .agent-settings.yml
 `
   );
   return EXIT_BLOCK4;

package/dist/install/install.mjs

@@ -10210,14 +10210,18 @@ function load_agent_settings(options = {}) {
   _warn_removed_always_on_keys(merged);
   return merged;
 }
-var REMOVED_ALWAYS_ON_KEYS = [
-  "subagents.enabled",
-  "subagents.auto",
-  "subagents.host_capabilities",
-  "subagents.budget_routing",
-  "ai_team.enabled"
-];
-var _warnedRemovedAlwaysOnKeys = /* @__PURE__ */ new Set();
+var REMOVED_KEYS = /* @__PURE__ */ new Map([
+  ["subagents.enabled", "always-on orchestration"],
+  ["subagents.auto", "always-on orchestration"],
+  ["subagents.host_capabilities", "always-on orchestration"],
+  ["subagents.budget_routing", "always-on orchestration"],
+  ["ai_team.enabled", "always-on orchestration"],
+  ["hooks.turn_end_gate.enabled", "the turn-end gate is always armed"],
+  ["hooks.turn_end_gate.promissory", "the turn-end gate is always armed"],
+  ["hooks.turn_end_gate.language", "the turn-end gate is always armed"],
+  ["hooks.turn_end_gate.verification", "the turn-end gate is always armed"]
+]);
+var _warnedRemovedKeys = /* @__PURE__ */ new Set();
 function _readDottedSettingsPath(root, dotted) {
   let node = root;
   for (const part of dotted.split(".")) {
@@ -10229,15 +10233,15 @@ function _readDottedSettingsPath(root, dotted) {
   return node;
 }
 function _warn_removed_always_on_keys(merged) {
-  for (const key of REMOVED_ALWAYS_ON_KEYS) {
-    if (_warnedRemovedAlwaysOnKeys.has(key)) {
+  for (const [key, reason] of REMOVED_KEYS) {
+    if (_warnedRemovedKeys.has(key)) {
       continue;
     }
     if (_readDottedSettingsPath(merged, key) === void 0) {
       continue;
     }
-    _warnedRemovedAlwaysOnKeys.add(key);
-    process.stderr.write(`${key} was removed (always-on orchestration); ignored.
+    _warnedRemovedKeys.add(key);
+    process.stderr.write(`${key} was removed (${reason}); ignored.
 `);
   }
 }
@@ -15075,21 +15079,13 @@ var settingsSchema = external_exports.object({
       enabled: external_exports.boolean().default(false).describe(
         "PreToolUse code-graph nudge (ADR-124 Phase 4). Default off. When on AND a native code-graph cache or a consumer-shipped graph.json/SCIP index is present, warns once per session (never blocks) as the agent is about to Grep/Glob or Read a source file \u2014 query the graph first for who-calls/where-used/impact questions (or rebuild if stale, build if absent). Source G\u2019s strict block-first-read mode is deliberately un-ported."
       )
-    }).default({}),
-    turn_end_gate: external_exports.object({
-      enabled: external_exports.boolean().default(false).describe(
-        "Stop-slot turn-end gate (road-to-conformance-round5 Phase 3). Default off, and it is the only concern that can REFUSE a turn-end rather than a tool call \u2014 so it soaks behind an explicit opt-in before it binds. Round 5 measured the reason: both blocking carriers reached zero violations, neither advisory carrier did, and 19 wrong-language replies survived a pin that had fired 26-35 seconds earlier. A refused turn continues in the SAME turn and is never refused twice."
-      ),
-      promissory: external_exports.boolean().default(true).describe(
-        "Detector A of the turn-end gate: refuse a turn whose closing paragraph promises work not yet performed while asking the user nothing (20 measured occurrences). No fire rate is quoted here on purpose: the measured rate moved twice while the instrument itself was being corrected, so a number in a shipped description would be a moving target. Re-derive it with `measure-turn-end-gate --store <transcript dir>` against your own corpus before arming the gate. Inert while hooks.turn_end_gate.enabled is false."
-      ),
-      language: external_exports.boolean().default(true).describe(
-        "Detector B of the turn-end gate: refuse a turn whose reply is not in the pinned language (19 measured occurrences). Fenced code, inline code, quoted tool output, tables, URLs and paths are stripped first, and the remainder is then scored LEAD-FIRST by the same classifier that sets the pin \u2014 so the verdict usually comes from the reply opening, not from all of it. Sharing that classifier is deliberate: it stops the pin and the detector disagreeing about a turn. Accepted opt-in spellings for the switches below include YAML true/false and yes/no/on/off. Inert while hooks.turn_end_gate.enabled is false."
-      ),
-      verification: external_exports.boolean().default(true).describe(
-        "Detector C of the turn-end gate: refuse a turn that changed a file and then ran nothing that could have checked it \u2014 no test, type-check, lint or build call follows the LAST edit. Ordering is the point: a run before the final edit did not exercise it, which is the freshness clause verify-before-complete states. Read off the turn tool calls, not the prose, because a reply cannot say whether an edit was verified. Deliberately narrow on what counts as verification \u2014 a missed detection costs one unguarded turn, a false refusal teaches you to switch the gate off. No fire rate is quoted: none has been measured yet. Inert while hooks.turn_end_gate.enabled is false."
-      )
     }).default({})
+    // `turn_end_gate` is deliberately ABSENT. The stop-slot turn-end gate is
+    // always armed (2026-08-12) and has no settings surface: whether it
+    // fires is decided by each detector's own trigger conditions, not by a
+    // flag. A leftover `hooks.turn_end_gate.*` block from an older install
+    // warns once on stderr and is ignored — see REMOVED_KEYS in
+    // `src/scripts/_lib/agent_settings.ts`.
   }),
   decision_engine: external_exports.object({
     surface_traces: external_exports.boolean().default(false).describe(

package/dist/mcp/registry-manifest.json

@@ -9,7 +9,7 @@
     "homepage": "https://event4u-app.github.io/agent-config",
     "name": "@event4u/agent-config",
     "repository": "https://github.com/event4u-app/agent-config",
-    "version": "9.36.0"
+    "version": "10.0.0"
   },
   "registries": [
     {

package/dist/mcp/server.json

@@ -9,12 +9,12 @@
       "transport": {
         "type": "stdio"
       },
-      "version": "9.36.0"
+      "version": "10.0.0"
     }
   ],
   "repository": {
     "source": "github",
     "url": "https://github.com/event4u-app/agent-config"
   },
-  "version": "9.36.0"
+  "version": "10.0.0"
 }