@event4u/agent-config 9.36.0 → 10.1.0

package/.claude-plugin/marketplace.json

@@ -6,7 +6,7 @@
   },
   "metadata": {
     "description": "Bootstrap shim for the event4u agent-config suite. This plugin ships ONLY the dispatcher hooks plus one install-pointer skill — ALL content (skills, rules, commands) is installed via `npx -y @event4u/agent-config init`, which writes the file projection AND registers the same hooks in ~/.claude/settings.json. DEPRECATED as a content channel; kept so the marketplace listing stays discoverable and existing installs keep working hooks.",
-    "version": "9.36.0",
+    "version": "10.1.0",
     "keywords": [
       "agent-config",
       "skills",

package/CHANGELOG.md

@@ -339,12 +339,127 @@ Entry-shape contract: [`docs/contracts/CHANGELOG-conventions.md`](docs/contracts
 > that forces a new era split (`# Era: 9.37.x`, etc.) — see
 > [`docs/contracts/CHANGELOG-conventions.md § Era splits`](docs/contracts/CHANGELOG-conventions.md).
 
-## [9.36.0](https://github.com/event4u-app/agent-config/compare/9.35.0...9.36.0) (2026-08-12)
+## [10.1.0](https://github.com/event4u-app/agent-config/compare/10.0.0...10.1.0) (2026-08-12)
 
 ### Release highlights
 
 <!-- Curated head: fill before merge, keep it under 10 lines, and leave `_none_` where it is genuinely the answer. The generated log below is unchanged. -->
-- **Behaviour changes:** _auto-derived, rewrite before merge:_ rule/schema diffs, breaking commits or removed public surface in 9f69017, 924cad8, 3c20d47, 72bb1bc.
+- **Behaviour changes:** _auto-derived, rewrite before merge:_ rule/schema diffs, breaking commits or removed public surface in 0992c92, 20a8606, 63aeba1.
+- **Default changes + migration:** _none_
+- **Security and correctness:** _none_
+- **Honest nulls:** _auto-derived, rewrite before merge:_ commits carrying an honest-null marker in 0f3ce9b.
+- **Known limitations:** _none_
+
+### Features
+
+* **untrusted-content:** tag external content where it enters, with an unforgeable boundary ([7a313ec](https://github.com/event4u-app/agent-config/commit/7a313ecfae4eadd06ff547a4a67d363a6758707b))
+* **skill-schema:** structured runtime requirements, and the rule that gives them teeth ([63aeba1](https://github.com/event4u-app/agent-config/commit/63aeba1070af3d72bcaac0c7f999788d3b833354))
+
+### Bug Fixes
+
+* **roadmap,context:** satisfy the two gates this branch newly tripped ([e61d461](https://github.com/event4u-app/agent-config/commit/e61d46142a9dc41841c98360377cc89176ce1057))
+* **roadmap-archival:** an open blocker outlives its steps, and the sweep did not look ([710dc26](https://github.com/event4u-app/agent-config/commit/710dc266a27a82aad9a527c525650e8d43accfdc))
+* **review:** close all eight R2 findings, one of them by admitting a gap instead of papering it ([0992c92](https://github.com/event4u-app/agent-config/commit/0992c92219364bc646e78c29fa3072b5e46361ef))
+* **diff:** drop a regenerated report my git add -A swept in ([3aec031](https://github.com/event4u-app/agent-config/commit/3aec031b160a8bc676053be370b2fddfbeab250c))
+* **skill-schema:** rename requires to runtime_requires — the key was already taken ([20a8606](https://github.com/event4u-app/agent-config/commit/20a86065cc5d9c86e9fdf0710c51ddf850ca7ae4))
+* **roadmap:** anonymize the harvest source per source-confidentiality ([195e444](https://github.com/event4u-app/agent-config/commit/195e444a7b1f9d7d05ac5cb768b0be17a1ac58ea))
+
+### Documentation
+
+* **changelog:** curate the 10.0.0 head, which shipped the same placeholder hours later ([0f3ce9b](https://github.com/event4u-app/agent-config/commit/0f3ce9b22c1858e12556a4b0fe95bec1931dde91))
+* **roadmap:** the verified residue of five external release reviews ([a25579f](https://github.com/event4u-app/agent-config/commit/a25579fdf4d13cf6057ccdfeba5dc87990dd11e0))
+* **analysis:** threat-model the confirmation store, and enumerate the buried decisions ([8b18f1c](https://github.com/event4u-app/agent-config/commit/8b18f1c4a850a9b08906aceccbe3562f381de7c3))
+* **records:** three figures five reviews keep re-deriving, corrected at the source ([1612a70](https://github.com/event4u-app/agent-config/commit/1612a70e3e13daa0572fefb4803533708c1273f0))
+* **changelog:** curate the 9.36.0 head that shipped its own placeholder ([83a3922](https://github.com/event4u-app/agent-config/commit/83a3922f63efbe5aca280e775acc85b36573c3f4))
+* **review:** re-bind after the count correction ([9dd75ec](https://github.com/event4u-app/agent-config/commit/9dd75ecf178152641f8744a8f1b81f045befde7b))
+* **roadmap:** correct the test count the review fixes moved ([ec52c42](https://github.com/event4u-app/agent-config/commit/ec52c421ba69dc85ee78095323f8495b93f3dd26))
+* **review:** re-bind the R2 artefact to the fixed scope, dispositions terminal ([e601648](https://github.com/event4u-app/agent-config/commit/e6016487e883f611b2b7b989f23ed682796a6a73))
+* **review:** record the R2 findings before fixing any of them ([1cf8d78](https://github.com/event4u-app/agent-config/commit/1cf8d787c015f51261bdd22b7388e47d127003f6))
+* **roadmap:** add the Acceptance Criteria the completion review needs to bind to ([f35becd](https://github.com/event4u-app/agent-config/commit/f35becd885c09a5ac7f5a678adf29a360e776efa))
+* **roadmap:** follow the schema key rename, and record why the obvious name was unavailable ([5720847](https://github.com/event4u-app/agent-config/commit/572084763fef97eb66fa91fd722d75a9c527440a))
+* **roadmap:** the executable-payload harvest, with four source claims corrected ([2f4d8a8](https://github.com/event4u-app/agent-config/commit/2f4d8a8be5891d6045d4605a4a6d8fe3dc28a65e))
+
+### Tests
+
+* **council-cli:** the quota case asserted a property of the developer machine ([35037f9](https://github.com/event4u-app/agent-config/commit/35037f96d3e631d6ee1a235415e716e2a29f8f8c))
+
+Tests: 13411 (+27 since 10.0.0)
+
+## [10.0.0](https://github.com/event4u-app/agent-config/compare/9.36.0...10.0.0) (2026-08-12)
+
+### Release highlights
+
+- **Behaviour changes:** council transport is **resolved per machine rather than
+  configured** — the breaking change this major carries (4eda4ff); every member
+  now resolves as `auto`, so a configured CLI call budget applies wherever a
+  council config exists. The turn-end gate is armed unconditionally and loses its
+  settings surface (42cd613). Conformance round 7 records its downgrades rather
+  than restating them (030ca0d, c1bc2aa).
+- **Default changes + migration:** _none_
+- **Security and correctness:** _none_
+- **Honest nulls:** a blocker whose resolution condition no passage of time could
+  satisfy — a default-OFF gate cannot soak, so the switch removal discharges it
+  and the original wording stays verbatim beside the resolution, because the
+  unsatisfiable condition is itself the finding (7c6b404).
+- **Known limitations:** _none_
+
+### BREAKING CHANGES
+
+* **council:** transport is resolved per machine, not configured ([4eda4ff](https://github.com/event4u-app/agent-config/commit/4eda4ff0f518cb30778dc139852576efd35bd57a))
+
+### Features
+
+* **ci:** the parity gate learns about preflight, which it never inspected ([44151b0](https://github.com/event4u-app/agent-config/commit/44151b02cd765aff16d7e95459752ec553c1d57b))
+* **conformance:** a fifth check, an era guard, and the denominator the rate was missing ([f7edbdc](https://github.com/event4u-app/agent-config/commit/f7edbdc99533d433ff2b1857bac5bc7fb2929fe8))
+* **hooks:** refuse a completion claim while the last CI read is unsettled ([1ea7536](https://github.com/event4u-app/agent-config/commit/1ea753629ce6a468e061af1ee2f7ac3f38f6bebd))
+* **turn-end-gate:** arm it unconditionally, with no settings surface ([42cd613](https://github.com/event4u-app/agent-config/commit/42cd6131761a5b6681583abd8b7100f4415d84bf))
+
+### Bug Fixes
+
+* **round7:** close the R2 findings — the two high ones are in my own Phase 1 ([030ca0d](https://github.com/event4u-app/agent-config/commit/030ca0d6e1a6b27ebbebf74a34caa1403cc98dfa))
+* **council:** validate the output path before spending, and count attendance from answers ([a23d6c8](https://github.com/event4u-app/agent-config/commit/a23d6c84d4963f17ca94838bdbc9f7067b72e77a))
+* **hooks:** block-no-verify stops failing closed on heredoc prose ([7ac5cd2](https://github.com/event4u-app/agent-config/commit/7ac5cd227d34dbc92f9f0438746ff5cd1317e5d2))
+* **taskfile:** block-scalar the bridge-derivation desc so the taskfile parses ([9b0f7b9](https://github.com/event4u-app/agent-config/commit/9b0f7b90ba9bac04c7b0e80dbeaeb99a3aab4cc3))
+* **council:** use a Json-typed sentinel for the ignored-key presence check ([29b9f42](https://github.com/event4u-app/agent-config/commit/29b9f42e505c187f2b35abcb81cc6e7055d5507f))
+* **detection:** find the Claude subscription in the macOS Keychain ([72de870](https://github.com/event4u-app/agent-config/commit/72de8706812ea2cf30940697887964ae1406a3e4))
+* **gates:** scope bridge-derivation to the roots this checkout writes ([ea1b1d4](https://github.com/event4u-app/agent-config/commit/ea1b1d4e230375db0ae1c8e01226d8527a08a1e7))
+
+### Documentation
+
+* **review:** re-bind the R2 artefact to the fixed scope ([304b898](https://github.com/event4u-app/agent-config/commit/304b89866880c23f68106c096df20ce18ed207b7))
+* **review:** record the R2 findings before fixing any of them ([bdf45c2](https://github.com/event4u-app/agent-config/commit/bdf45c2e86b2839f3c64d432d50285f043f08d3d))
+* **roadmaps:** the fifth check makes two Context claims stale, in both directions ([6915456](https://github.com/event4u-app/agent-config/commit/6915456005fd164bc525103c6f0b59f05dbc8169))
+* **analyze:** the conformance command documented four checks, there are five ([d05f97e](https://github.com/event4u-app/agent-config/commit/d05f97e13b03cc04036d83aba4df6635e0323932))
+* **conformance:** round 7 — the honest downgrades and the archived roadmap ([c1bc2aa](https://github.com/event4u-app/agent-config/commit/c1bc2aaef41b04aa76024f9949c9e10eacd9886c))
+* **council:** the template and contract stop documenting a setting that is gone ([49d58fa](https://github.com/event4u-app/agent-config/commit/49d58fa28778359416459465cf066b7d8fccb363))
+* **roadmap:** close the stop-refusal blocker, open the two follow-up tracks ([7c6b404](https://github.com/event4u-app/agent-config/commit/7c6b4045c2cadf023d1f434ff851cec86372613a))
+
+### Refactoring
+
+* **condense:** expose the active-tool set root-parameterised ([d795d6a](https://github.com/event4u-app/agent-config/commit/d795d6a666f57be451d0dd5462b8725b56e44e75))
+* **settings:** delete hooks.turn_end_gate.* and give REMOVED_KEYS per-key reasons ([f5b316b](https://github.com/event4u-app/agent-config/commit/f5b316b4bc531e2cf7ce0d65556c4a2737cbe0dc))
+
+### Tests
+
+* **hooks:** prove the completion detector is wired, not just correct ([4d284ef](https://github.com/event4u-app/agent-config/commit/4d284efa10ba939066edfc42c4a735d94e794def))
+
+### Chores
+
+* **condense:** re-project session-canary after the reproduction-command fix ([2d344c4](https://github.com/event4u-app/agent-config/commit/2d344c4d2183a608986f9dce485f1e5006e48863))
+
+Tests: 13384 (+51 since 9.36.0)
+
+## [9.36.0](https://github.com/event4u-app/agent-config/compare/9.35.0...9.36.0) (2026-08-12)
+
+### Release highlights
+
+- **Behaviour changes:** the demand gate reads `project.audience` and is inert at
+  `self` — a market-demand ladder no longer fires on a project that intends no
+  market (9f69017). The two UI rules stop claiming the `ui-route-nudge` concern
+  reads their `keyword:` triggers; it does not, and six surfaces said it did
+  (3c20d47). The design skills now reach the consumers they were written for
+  (72bb1bc). The CI-side change in 924cad8 is internal to the pipeline and
+  changes no consumer-visible behaviour.
 - **Default changes + migration:** _none_
 - **Security and correctness:** _none_
 - **Honest nulls:** _none_

package/agents/templates/.ai-council.yml.example

@@ -25,9 +25,13 @@
 # never at the raw secret. See docs/contracts/ai-council-config.md for
 # the full schema.
 #
-# Cost note: every consultation makes real, paid API calls. The
-# autonomy directive does NOT silently spend tokens — the /council
-# command always asks before invoking, even under autonomy: on.
+# Cost note: a consultation is billed only when it resolves to the metered
+# `api` rung. A vendor CLI under your subscription is preferred whenever one
+# resolves, so the common case costs nothing per token — run
+# `agent-config council status` to see the resolved transport and billing class
+# per member before invoking. The autonomy directive does NOT silently spend
+# tokens — the /council command always asks before invoking, even under
+# autonomy: on.
 
 # Master switch (true, false). REQUIRED — the loader has no default for it,
 # so this file's value is the only value.
@@ -44,51 +48,30 @@
 # "could work" and "may spend" is visible rather than mysterious.
 enabled: true
 
-# Per-invocation defaults. Each member may override `mode:` below.
+# Per-invocation defaults.
 defaults:
-  # Default transport mode for every member (overridable per-member
-  # below, and per-invocation via `/council mode:<x>`).
+  # There is NO transport-mode setting, deliberately.
   #
-  #   manual = copy & paste — the human transports prompt + reply
-  #            between the agent and an external chat surface. Free,
-  #            no key.
-  #   api    = SDK call against a stored key, per-token billing.
-  #   cli    = shell out to a locally-installed provider CLI under the
-  #            user's subscription auth (Claude Pro/Max, ChatGPT
-  #            Plus/Pro, Google Gemini, etc.). Spend is covered by the
-  #            flat-rate subscription, not per-token. `cost_budget.
-  #            max_total_usd` does NOT apply; use `cli_call_budget`
-  #            below to guard subscription quotas.
-  #   auto   = resolve per provider per invocation: the provider's CLI
-  #            binary resolves AND a credential is present -> cli; else a
-  #            key resolves -> api; else unavailable with a one-line
-  #            reason. `manual` is NEVER part of the auto chain (it would
-  #            always "succeed" and silently turn every call into a
-  #            copy-paste request) — it stays an explicit opt-in.
-  #            THE SHIPPED DEFAULT (road-to-always-on-orchestration
-  #            Phase 3.1 — CLI-first is the owner-set transport doctrine):
-  #            ride the vendor CLI under your subscription first, fall to
-  #            the metered API only where no CLI resolves. Pin `manual` /
-  #            `api` / `cli` here (or per-member below) to override it.
-  #            `cli_call_budget` below ships populated with a generous
-  #            per-provider guard so this default never runs your
-  #            subscription quota uncapped.
+  # Transport is resolved per machine per invocation — `cli → api →
+  # unavailable`, and an airgapped host forces the `api` rung. A vendor CLI
+  # under your subscription is preferred whenever one resolves with a
+  # credential, so the free transport wins without anybody configuring it.
   #
-  # Precedence: invocation flag > per-member mode > defaults.mode >
-  # built-in. Two DIFFERENT defaults sit at the bottom, and they are not
-  # the same thing:
-  #   · omit `defaults.mode` entirely and the loader fills "auto" (was
-  #     "api" before the Phase 3.1 flip) — that is what every real config
-  #     file observes.
-  #   · the resolver's built-in fallback, reached only when no layer at all
-  #     supplies a mode (a settings dict handed straight to the resolver,
-  #     no config file involved), is "manual" — free, no key. A caller who
-  #     named no transport has not asked to spend money. This did NOT flip
-  #     alongside the loader default: `auto` still resolves to a paying
-  #     rung when no CLI is usable, so flipping this too would let a
-  #     caller that bypassed the config file spend money on a preference
-  #     it never stated.
-  mode: auto
+  # It used to be `defaults.mode`, with a per-member override. The default was
+  # flipped to CLI-first, but a default only fires on an ABSENT key: every
+  # config that had spelled the key out — which this template did, and which
+  # the setup wizard wrote — kept its old `api` value and went on paying per
+  # token while a paid-for subscription CLI sat unused on the same machine.
+  # A knob whose stale value silently costs money is worse than no knob.
+  #
+  # A file that still carries `mode:` (here or under a member) loads fine; the
+  # key is ignored and `agent-config council status` lists it as ignored so you
+  # can delete it. To pin one transport for ONE run — including the free,
+  # key-free `manual` copy-paste loop — pass `--mode-override` on the
+  # invocation. That is a flag, not a setting: it cannot go stale.
+  #
+  # `agent-config council status` prints the resolved transport and the billing
+  # class per member, which is the only honest answer to "will this cost money".
 
   # Default number of debate rounds per /council invocation.
   #
@@ -264,7 +247,9 @@ quorum: majority
 #                 under ~/.event4u/agent-config/, legacy
 #                 ~/.config/agent-config/ read as a fallback) or an env
 #                 var (`env:<VAR>`). Raw keys here are a hard validation
-#                 error. Required for mode: api; optional for cli /
+#                 error. Optional: it is the credential for the metered `api`
+#                 fallback rung. Absent, that rung is simply unavailable and
+#                 the member needs a working CLI. Not needed for cli /
 #                 manual / auto (those may authenticate via the CLI).
 #   mode:         overrides defaults.mode for this member only.
 #   binary:       absolute path to the provider's CLI — only valid when
@@ -290,7 +275,6 @@ members:
     enabled: true
     model: claude-sonnet-4-5
     api_key_ref: file:anthropic.key
-    # mode: cli                          # use subscription auth (Claude Pro/Max) — free, see cli_call_budget above
     # binary: /usr/local/bin/claude      # only valid when mode == cli
     # Phase 7 — size-fit downgrade ladder (smallest → largest). The
     # active `model:` above must appear on this list. When the size
@@ -325,7 +309,6 @@ members:
     enabled: true
     model: gpt-4o
     api_key_ref: file:openai.key
-    # mode: cli                          # use subscription auth (ChatGPT Plus/Pro via Codex CLI) — free
     # binary: /usr/local/bin/codex       # only valid when mode == cli
     # Phase 7 — size-fit downgrade ladder (smallest → largest). The
     # active `model:` above must appear on this list.
@@ -340,14 +323,12 @@ members:
     enabled: false
     model: gemini-2.5-pro
     api_key_ref: env:GEMINI_API_KEY
-    # mode: cli                          # use Google account (free-tier limits apply) — free
     # binary: /usr/local/bin/gemini      # only valid when mode == cli
 
   xai:
     enabled: false
     model: grok-4
     api_key_ref: env:XAI_API_KEY
-    # mode: cli                          # community `grok` CLI (Superagent) — ergonomic shortcut, NOT a billing change.
     # binary: /usr/local/bin/grok        # The CLI consumes XAI_API_KEY and remains billable=True;
     #                                    # cost_budget.max_total_usd STILL applies. Opt-in only.
 
@@ -355,7 +336,6 @@ members:
     enabled: false
     model: sonar-pro
     api_key_ref: env:PERPLEXITY_API_KEY
-    # mode: cli                          # community `perplexity` CLI — ergonomic shortcut, NOT a billing change.
     # binary: /usr/local/bin/perplexity  # The CLI consumes PERPLEXITY_API_KEY and remains billable=True;
     #                                    # cost_budget.max_total_usd STILL applies. Opt-in only.
 

package/dist/agent-src/commands/analyze/conformance.md

@@ -72,10 +72,21 @@ how they make it.
 agent-config conformance:behavior --limit <N> --output conformance-report.json
 ```
 
-Replays the local transcript store through the four **mechanised** checks:
-language pin, git authorization, vacuous evidence, evidence steering. Every
-classifier is imported from the gate it measures, so the scan and the gate
-cannot drift apart.
+Replays the local transcript store through the five **mechanised** checks:
+language pin, git authorization, vacuous evidence, evidence steering, and — since
+round 7 — completion claim (a turn claiming the work is done while the last CI
+read in that session was not settled). Every classifier is imported from the gate
+it measures, so the scan and the gate cannot drift apart.
+
+Two readings the report now separates, both because round 7's first run got them
+wrong. The **language-pin rate is printed over two denominators** — all assistant
+turns, which is what the band's three reference values used, and turns under a
+German pin, which is the only population the check can fire on; the same corpus
+read 6.5 % on the first and 9.2 % on the second, enough to move the verdict. And
+the **band verdict is withheld over a corpus that spans a carrier landing**
+(`CARRIER_CHANGES`): pooling 23.1 % before a mechanism with 0.0 % after it is a
+weighted average of two systems, and the pooled figure was announced as the
+pre-registered falsifier firing.
 
 This is the floor, not the audit. It sees only what already has a gate — which
 is exactly why it is trustworthy and exactly why it is not sufficient.

package/dist/agent-src/rules/session-canary.md

@@ -118,6 +118,34 @@ refused turn-end continues in the same turn) that rejects a task-start reply
 carrying no greeting. Proposed, not shipped; until it is, this obligation is
 model-carried in practice, whatever the frequency join reports.
 
+**Round 7 downgrade: that proposed mechanism is UNDECIDABLE as written, and the
+obligation splits into a measured half and an unmeasurable one.** A *task* start
+is recorded nowhere in a transcript — there is no task event on any host, and
+`user-interrupt-priority`'s continuation/clarification/interrupt distinction is a
+judgement, not a field. So a delivery check "that rejects a task-start reply" has
+no way to know a task started. The proposal is not merely unbuilt; as specified it
+cannot be built, and saying "proposed, not shipped" implied otherwise.
+
+What IS decidable is the per-**session** instance, and it was measured rather than
+asserted — reproducibly, which took a correction: the probe resolves the name
+through the same settings layers this rule names and REFUSES when no layer carries
+one, so the figure below is reproduced with the name passed explicitly
+(`./scripts-run src/scripts/probe_session_canary --limit 30 --name <your name>`;
+the first version hardcoded a maintainer's nickname as its default, which made the
+number irreproducible for anyone else and silently read 0 %). Over 30 sessions on
+2026-08-12: the opening greeting is present in **25 of 28** sessions carrying
+assistant prose (89.3 %), and in **24 of 25** post-carrier (96.0 %). Of the three
+misses, two predate the carrier (2026-07-21, 2026-07-29) and one is a session whose
+first thirty turns were tool calls.
+
+Both halves of that are load-bearing. The carrier works exactly where it has a
+slot — `session_start` — which is why the session-scope figure is high; and the
+24-of-29 task-start figure above is not contradicted by it, because the two count
+different events. The honest statement is therefore: **session-scope compliance is
+measured and good; task-scope compliance is unmeasured and unmeasurable with
+today's transcript, and no gate can change that until a task boundary is recorded
+somewhere.** Do not read the 96 % as covering the obligation as a whole.
+
 **The wrong-name half needs nothing, and that is worth stating.** The beat
 already carries the resolved value — `build_canary_reminder` emits
 `Canary active for "<name>"`, and the hook no-ops when no layer resolves a name —

package/dist/agent-src/scripts/archive_completed_roadmaps.ts

@@ -335,6 +335,23 @@ function archive_completed(
         if (stats.open_ !== 0 || stats.deferred !== 0) {
             continue; // not complete
         }
+        // An unresolved blocker outlives its steps. Closing every box does not
+        // answer a question the roadmap raised for a human, and archiving on
+        // step-count alone is how `b-highlights-mechanism` left the active tree
+        // unanswered in the 9.29 roadmap — four releases before the failure it
+        // predicted shipped in the 9.36.0 changelog head. Same discipline
+        // `roadmap-progress-sync` Iron Law 3 applies to `[~]` steps: a roadmap
+        // carrying an open decision stays visible until the decision is made.
+        const open_blockers = stats.open_blockers;
+        if (open_blockers.length > 0) {
+            const ids = open_blockers.map((b) => b.id).join(', ');
+            process.stderr.write(
+                `  ⚠️  ${stats.rel}: all steps closed but ${open_blockers.length} ` +
+                    `blocker(s) still open (${ids}) — not archived. Resolve them, ` +
+                    'or record the decision, then re-run the sweep.\n',
+            );
+            continue;
+        }
         const old_rel = `agents/roadmaps/${stats.rel}`;
         if (changed_only && !(touched as Set<string>).has(old_rel)) {
             continue; // complete, but not this branch's work

package/dist/agent-src/skills/adr-create/SKILL.md

@@ -11,6 +11,11 @@ execution:
   command:
     - ./scripts-run
     - src/scripts/adr/regenerate_index
+runtime_requires:
+  bins:
+    - bash
+    - node
+  network: []
 workspaces:
   - agent-config-maintainer
 packs:

package/dist/agent-src/skills/check-refs/SKILL.md

@@ -11,6 +11,11 @@ execution:
   command:
     - ./scripts-run
     - src/scripts/check_references
+runtime_requires:
+  bins:
+    - bash
+    - node
+  network: []
 workspaces:
   - agent-config-maintainer
 packs:

package/dist/agent-src/skills/lint-skills/SKILL.md

@@ -12,6 +12,11 @@ execution:
     - ./scripts-run
     - src/scripts/skill_linter
     - "--all"
+runtime_requires:
+  bins:
+    - bash
+    - node
+  network: []
 workspaces:
   - agent-config-maintainer
 packs:

package/dist/agent-src/skills/md-language-check/SKILL.md

@@ -11,6 +11,11 @@ execution:
   command:
     - ./scripts-run
     - src/scripts/check_md_language
+runtime_requires:
+  bins:
+    - bash
+    - node
+  network: []
 workspaces:
   - agent-config-maintainer
 packs:

package/dist/agent-src/templates/agents/agent-project-settings.example.yml

@@ -39,7 +39,7 @@ schema_version: 1
 # CI guard: a release bump of `package.json` must update this value
 # in lockstep — see scripts/check_template_pin_drift.ts (road-to-
 # portable-runtime-and-update-check P3.3).
-agent_config_version: "9.36.0"
+agent_config_version: "10.1.0"
 
 # --- Project identity ---
 project:

package/dist/cli-delegate/{chunk-SFGARMAB.js → chunk-2H5SE7DU.js}

@@ -18,7 +18,7 @@ import {
   hardenedSpawnEnv,
   scanTranscripts,
   weightedInputUnits
-} from "./chunk-55RI5UXK.js";
+} from "./chunk-XT2YTJCZ.js";
 import {
   git_common_dir
 } from "./chunk-PZWRPRWP.js";
@@ -52,7 +52,7 @@ import {
   load_agent_settings,
   project_settings_path,
   resolve_project_root
-} from "./chunk-JEJABGKB.js";
+} from "./chunk-XTC5ARB6.js";
 import {
   event4u_root,
   resolve_with_fallback,
@@ -3777,6 +3777,22 @@ function homeOf(env) {
   return injected !== "" ? injected : os.homedir();
 }
 var VERSION_PROBE_TIMEOUT_MS = 2e3;
+var CLAUDE_KEYCHAIN_SERVICE = "Claude Code-credentials";
+function defaultProbeKeychain(service) {
+  if (process.platform !== "darwin") return false;
+  try {
+    const res = spawnSync2("security", ["find-generic-password", "-s", service], {
+      timeout: VERSION_PROBE_TIMEOUT_MS,
+      encoding: "utf-8",
+      windowsHide: true,
+      env: hardenedSpawnEnv()
+    });
+    if (res.error !== void 0 || res.signal !== null) return false;
+    return res.status === 0;
+  } catch {
+    return false;
+  }
+}
 function defaultProbeVersion(binary) {
   try {
     const res = spawnSync2(binary, ["--version"], {
@@ -3822,13 +3838,16 @@ function classifyCodexAuth(authPath) {
   if (hasOauth) return "cli-subscription";
   return "cli-api-key";
 }
-function cliSubscriptionEvidence(provider, home, env, claudeConfigDir) {
+function cliSubscriptionEvidence(provider, home, env, claudeConfigDir, probeKeychain) {
   if (provider === "anthropic") {
     const configDir = claudeConfigDir;
     for (const rel of [".credentials.json", "credentials.json"]) {
       const p = path12.join(configDir, rel);
       if (isFile(p)) return { source: "cli-subscription", evidence: p };
     }
+    if (probeKeychain(CLAUDE_KEYCHAIN_SERVICE)) {
+      return { source: "cli-subscription", evidence: `keychain:${CLAUDE_KEYCHAIN_SERVICE}` };
+    }
     return null;
   }
   if (provider === "openai") {
@@ -3870,10 +3889,11 @@ function detectAuth(opts) {
   const env = opts.env ?? process.env;
   const home = opts.home ?? homeOf(opts.env);
   const claudeConfigDir = opts.home === void 0 && opts.env === void 0 ? claude_config_dir() : (env["CLAUDE_CONFIG_DIR"] ?? "").trim() || path12.join(home, ".claude");
+  const probeKeychain = opts.probeKeychain ?? defaultProbeKeychain;
   const auth = [];
   const keys = [];
   for (const provider of knownProviders()) {
-    const cli = cliSubscriptionEvidence(provider, home, env, claudeConfigDir);
+    const cli = cliSubscriptionEvidence(provider, home, env, claudeConfigDir, probeKeychain);
     if (cli !== null) {
       auth.push({ provider, source: cli.source, evidence: cli.evidence });
     }

package/dist/cli-delegate/{chunk-U7CMAIOC.js → chunk-3JUTT26I.js}

@@ -1,7 +1,7 @@
 import { createRequire as __acCreateRequire } from 'node:module'; const require = globalThis.require ?? __acCreateRequire(import.meta.url);
 import {
   resolve_project_root
-} from "./chunk-JEJABGKB.js";
+} from "./chunk-XTC5ARB6.js";
 import {
   resolvePackageRoot
 } from "./chunk-MCJYCQPF.js";

package/dist/cli-delegate/{chunk-JP53LNVT.js → chunk-HJSKTMIF.js}

@@ -4552,21 +4552,13 @@ var settingsSchema = external_exports.object({
       enabled: external_exports.boolean().default(false).describe(
         "PreToolUse code-graph nudge (ADR-124 Phase 4). Default off. When on AND a native code-graph cache or a consumer-shipped graph.json/SCIP index is present, warns once per session (never blocks) as the agent is about to Grep/Glob or Read a source file \u2014 query the graph first for who-calls/where-used/impact questions (or rebuild if stale, build if absent). Source G\u2019s strict block-first-read mode is deliberately un-ported."
       )
-    }).default({}),
-    turn_end_gate: external_exports.object({
-      enabled: external_exports.boolean().default(false).describe(
-        "Stop-slot turn-end gate (road-to-conformance-round5 Phase 3). Default off, and it is the only concern that can REFUSE a turn-end rather than a tool call \u2014 so it soaks behind an explicit opt-in before it binds. Round 5 measured the reason: both blocking carriers reached zero violations, neither advisory carrier did, and 19 wrong-language replies survived a pin that had fired 26-35 seconds earlier. A refused turn continues in the SAME turn and is never refused twice."
-      ),
-      promissory: external_exports.boolean().default(true).describe(
-        "Detector A of the turn-end gate: refuse a turn whose closing paragraph promises work not yet performed while asking the user nothing (20 measured occurrences). No fire rate is quoted here on purpose: the measured rate moved twice while the instrument itself was being corrected, so a number in a shipped description would be a moving target. Re-derive it with `measure-turn-end-gate --store <transcript dir>` against your own corpus before arming the gate. Inert while hooks.turn_end_gate.enabled is false."
-      ),
-      language: external_exports.boolean().default(true).describe(
-        "Detector B of the turn-end gate: refuse a turn whose reply is not in the pinned language (19 measured occurrences). Fenced code, inline code, quoted tool output, tables, URLs and paths are stripped first, and the remainder is then scored LEAD-FIRST by the same classifier that sets the pin \u2014 so the verdict usually comes from the reply opening, not from all of it. Sharing that classifier is deliberate: it stops the pin and the detector disagreeing about a turn. Accepted opt-in spellings for the switches below include YAML true/false and yes/no/on/off. Inert while hooks.turn_end_gate.enabled is false."
-      ),
-      verification: external_exports.boolean().default(true).describe(
-        "Detector C of the turn-end gate: refuse a turn that changed a file and then ran nothing that could have checked it \u2014 no test, type-check, lint or build call follows the LAST edit. Ordering is the point: a run before the final edit did not exercise it, which is the freshness clause verify-before-complete states. Read off the turn tool calls, not the prose, because a reply cannot say whether an edit was verified. Deliberately narrow on what counts as verification \u2014 a missed detection costs one unguarded turn, a false refusal teaches you to switch the gate off. No fire rate is quoted: none has been measured yet. Inert while hooks.turn_end_gate.enabled is false."
-      )
     }).default({})
+    // `turn_end_gate` is deliberately ABSENT. The stop-slot turn-end gate is
+    // always armed (2026-08-12) and has no settings surface: whether it
+    // fires is decided by each detector's own trigger conditions, not by a
+    // flag. A leftover `hooks.turn_end_gate.*` block from an older install
+    // warns once on stderr and is ignored — see REMOVED_KEYS in
+    // `src/scripts/_lib/agent_settings.ts`.
   }),
   decision_engine: external_exports.object({
     surface_traces: external_exports.boolean().default(false).describe(

package/dist/cli-delegate/{chunk-QEEB4LHO.js → chunk-LRXJK6GN.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-MMJL4TIX.js";
 import {
   load_agent_settings
-} from "./chunk-JEJABGKB.js";
+} from "./chunk-XTC5ARB6.js";
 
 // src/scripts/chat_history.ts
 import { createHash } from "node:crypto";

package/dist/cli-delegate/{chunk-NR7HSN3P.js → chunk-NX5AXSLD.js}

@@ -2,10 +2,10 @@ import { createRequire as __acCreateRequire } from 'node:module'; const require
 import {
   ZodFirstPartyTypeKind,
   settingsSchema
-} from "./chunk-JP53LNVT.js";
+} from "./chunk-HJSKTMIF.js";
 import {
   main
-} from "./chunk-U7CMAIOC.js";
+} from "./chunk-3JUTT26I.js";
 import {
   RULE_SOURCE_REL
 } from "./chunk-BKO2AZ7Z.js";
@@ -48,7 +48,7 @@ import {
 import {
   find_project_root_with_anchor,
   load_agent_settings
-} from "./chunk-JEJABGKB.js";
+} from "./chunk-XTC5ARB6.js";
 import {
   event4u_root,
   legacy_xdg_root,

package/dist/cli-delegate/{chunk-AG47LAGQ.js → chunk-TVGXH7VA.js}

@@ -2,7 +2,7 @@ import { createRequire as __acCreateRequire } from 'node:module'; const require
 import {
   DEFAULT_PROJECT_FILE,
   logger
-} from "./chunk-JEJABGKB.js";
+} from "./chunk-XTC5ARB6.js";
 
 // src/scripts/config/profiles.ts
 import * as fs2 from "node:fs";