@mmerterden/multi-agent-pipeline 19.1.1 → 19.1.3

package/CHANGELOG.md

@@ -14,6 +14,43 @@ Internal file-layout changes that don't affect the slash-command surface are sti
 
 ---
 
+## [19.1.3] - 2026-09-21
+
+### Fixed
+
+- **Routing no longer hands back a rung the caller cannot dispatch to.** The
+  router permitted a non-Anthropic rung at `bulk-read`, and `bulk-read.sh`
+  passes the rung straight to `claude -p --model <rung>` - a CLI that speaks the
+  Anthropic ladder and nothing else. `research_ask` never consulted the router
+  at all. So no call site could honour an external rung, and the permission was
+  empty: a rule naming one produced a failed call rather than a cheaper one.
+
+  `model-dispatch.sh` now refuses a non-Anthropic rung at every call site and
+  falls to the NEXT rung the rule named, not to the caller's default - the user
+  asked for a preference order, and only the part that cannot be honoured is
+  dropped. `provider` in `cost-table.json` stays, because it is what makes the
+  refusal checkable and is the seam a future call site would use.
+
+  `smoke-model-dispatch.sh` asserts the reason rather than the rule:
+  `bulk-read.sh` still dispatches through the Anthropic CLI. The day a call site
+  grows its own provider path, that assertion is what says the refusal may be
+  lifted.
+
+---
+
+## [19.1.2] - 2026-09-21
+
+### Added
+
+- **`doctor` reports the update policy.** `update-policy` prints the effective
+  `updateCheck.enabled`, `.ttlHours` and `.autoUpdate`, and says which of them
+  came from the schema rather than from the preferences file. The knob that
+  decides whether a run updates itself before it starts was otherwise only
+  discoverable by reading the schema. Reported, never written - a preferences
+  file is the user's, and a diagnostic that edits one is not a diagnostic.
+
+---
+
 ## [19.1.1] - 2026-09-21
 
 ### Changed

package/docs/facts.json

@@ -1,7 +1,7 @@
 {
   "$comment": "Generated by pipeline/scripts/gen-facts.mjs. Do not hand-edit: the site reads this, and a number edited here instead of at its source is the drift this file removes.",
-  "generatedAt": "2026-09-20",
-  "version": "19.1.1",
+  "generatedAt": "2026-09-21",
+  "version": "19.1.3",
   "phaseSchema": 2,
   "phases": [
     {

package/manifest.json

@@ -1,12 +1,12 @@
 {
   "name": "@mmerterden/multi-agent-pipeline",
-  "version": "19.1.1",
-  "commit": "f45e4e1e3b101d0c795794793b6274ddd72d6ded",
-  "generatedAt": "2026-09-20T20:39:30.640Z",
+  "version": "19.1.3",
+  "commit": "ab89855c58cbddec0ea834d80efc7dfc3f630c69",
+  "generatedAt": "2026-09-21T06:32:52.127Z",
   "algorithm": "sha256",
   "fileCount": 1057,
   "files": {
-    "CHANGELOG.md": "26f5a11dbe3b8ef1db89e2e2cfa38005709394c11e2be9bd8c9b0122d3f5f40c",
+    "CHANGELOG.md": "a17d55e5b1f00236a491817510d60a845f6ff31a9b466dc56fed3daf19cb2deb",
     "LICENSE": "8d8c51aaf1e1538b180c69965fa038db71be86798cc3e26a143bebfefe16a43e",
     "README.md": "63cba0443ff6750cf979ca39093f80f414a9ffa72bdf08a196a4fb821520fb5d",
     "README.tr.md": "429823b93ae79e783ac91559251ff741d01b147146fffb6fb30f8a980ca157c2",
@@ -31,7 +31,7 @@
     "docs/best-practices.md": "aeaaa12d518233cb09577c1dbaee00d62cd26f9f7e0400c681fe38742d6a7ba2",
     "docs/ecosystem.md": "051520cefee38d34894ef563ab987be15dc47cc9172fc6692ee440a77fa1f2c0",
     "docs/engineering.md": "550528cd47c7d2c921729c68d0782a00ac8e77a4bdfec479f6749f9c3235d188",
-    "docs/facts.json": "91633e93a671f2d32ce1b1bfb1b797bda6e8430108e2a70e5f662654321de728",
+    "docs/facts.json": "58ed4849960aee5efe4cbbb66e576db5b077468e9bcb6f936bae4cbcba6fe51d",
     "docs/features.md": "927e5e54f7b1348ce2cddecb0d11115dc5ae9db20558b12d67932d38b26dad3f",
     "docs/performance.md": "bbf2f3922c25dcba0c1a9e69ef420e3871a729af5b35009a49b48a5d3c5cd151",
     "docs/recovery-guide.md": "1cc014295f8c8ffba1f1c44397b657e925f1bc0e4757217d6e69e8cfb271f3cb",
@@ -58,7 +58,7 @@
     "install/templates/codex-instructions.md": "dd78eb9553e725c039380457245793a5fc748ae37ebf5ccfe11be5ed5b9a4025",
     "install/templates/copilot-instructions.md": "18161f2a8c995044aeae69d47200795b8babcf8b80d5e09e8d91dcfb7c841ce2",
     "install/templates/multi-agent-autopilot.plist.template": "d79de637b17330e720be43b96bfcdd51797bd9ce219eafaa3dd5a8ece96e4814",
-    "package.json": "8cf3ab5b8ab1eb0b5449c89fe00412623fa9b20e3afa41fe6868ae6bf3a07e0c",
+    "package.json": "0fab4746bdc36850af7a7e5900578ea934202f13e8bbe71831ab619a4e28c9a0",
     "pipeline/agents/android-architect.md": "baa5787b3a4c800dd065e27e05f44462927c9938c8bb676c80f18cb10e2b12c4",
     "pipeline/agents/backend-architect.md": "a83bd7f8b0a5289a1ef9a9b59d60fc759b8db260606ff2df427cf5ade5db8530",
     "pipeline/agents/bulk-reader.md": "0b9d415fab2c449d43329d759049af9401255d06b32d57a38c95e684837b19bf",
@@ -164,7 +164,7 @@
     "pipeline/lib/issue-fetcher.sh": "c496ad6b07c0f6c64c69cb6293a0a4f3010b3ce3945a525e602c0d51c665ac67",
     "pipeline/lib/jira-publish.sh": "a32e6a682ae730ddd9c6df64b9ece1fb73c797111c63f5c247d7e733668da6b7",
     "pipeline/lib/md2confluence-v3.py": "3677ca47931e4b3d0fd2ce3e11299fc5f6d24799eb8332e37dd60b6c3c4653a2",
-    "pipeline/lib/model-dispatch.sh": "929b665bda7116da219cc9e0f3e0b17b1e73472482293d251803e35822c8daa0",
+    "pipeline/lib/model-dispatch.sh": "467ee01628c2a4a706410fdc7b04b0dd92ad2c2cbdd2150f6fd91f2d7a773796",
     "pipeline/lib/model-rung.sh": "befcd1a250a04f9ea9c8dca18c9d8905286330197e54da41ad4fd12b845f604d",
     "pipeline/lib/multi-repo-pipeline.sh": "392b06b4d40924b16a74d85dfceb68a5aeed8a50aed832a5ca92f27e2a5d7e80",
     "pipeline/lib/outbound-gate.mjs": "76547f21ca92793f4c59e1dbf91c498278614281607e3ecbeeddbafe7e3a6a56",
@@ -218,11 +218,11 @@
     "pipeline/multi-agent-refs/features/cost-analysis.md": "42f1b90b41ef454f29ccfd3f93c959920f0e74cbca65e140695e9a30d6d90b87",
     "pipeline/multi-agent-refs/features/design-conformance.md": "8bcc1c9221f39ec8764c6aa20e59f968d6beb777f644c61adf7a38e35af1a9d5",
     "pipeline/multi-agent-refs/features/dev-critic.md": "08e01edef04b5ac216f8f43332126966d33da7b95625e47a8a6cd8ac105b263f",
-    "pipeline/multi-agent-refs/features/doctor.md": "61fb489841e408c275d4d82769930544b13de9aa61b94656e77238bc9908cb89",
+    "pipeline/multi-agent-refs/features/doctor.md": "7fb8f00dfca3d44fa256b97f2669d414d27fe73408e9b2c651067f042c8a73b8",
     "pipeline/multi-agent-refs/features/external-context-injection.md": "8fcf5229f92276af7714638602ec4da076f9f3f0a170303e3c1e178f55e39863",
     "pipeline/multi-agent-refs/features/jira-context.md": "6f6fe697451e061909aa125366defbcc0baae5cecd8341bfabbad09011256684",
     "pipeline/multi-agent-refs/features/maturity-followup.md": "2a6166869101b00ea273b92e3fe1ea07b375a0190aaab6b42ff5691db3748eec",
-    "pipeline/multi-agent-refs/features/model-fallback.md": "fb982661127075930450cfff89857c892569e5068b60fab2fb59af2fc5613791",
+    "pipeline/multi-agent-refs/features/model-fallback.md": "7ac6a048c3ac2c494fbe03b027850703dba0995dc9dc0c63ceb14e0a8c8925b2",
     "pipeline/multi-agent-refs/features/package-manager.md": "b9e52f798f5dcba43abff1fe5cad8d5d5374058c9a6847c993975c665acab05a",
     "pipeline/multi-agent-refs/features/plan-todos.md": "8780d80b4541daee2b05080759a0694ef7e6270abe9a4621deb92ec7bac94e8e",
     "pipeline/multi-agent-refs/features/prior-fix-detection.md": "f194c444f1685bb103e1aa16164ca6737ba9910b7c8f89874924da950838b074",
@@ -320,7 +320,7 @@
     "pipeline/schemas/prefs.schema.json": "1a5e041385d251fb62fa39771ca0a357b9ce2270d39fe0b3dd84c9fc0f4c8f7b",
     "pipeline/schemas/review-file-exclusions.json": "2e8c44b45d21d2c82fc95aa2bf76ad3fbf2d5c68180c7b2ebf89c4a926688d77",
     "pipeline/schemas/reviewer-output.schema.json": "1bc8dd8feb416ea2101457e071d72b5a6ab0aefa7da3d42063bbe1c153755754",
-    "pipeline/schemas/route-config.schema.json": "ddade61393ee7c2f5863ca26324af70a1d2153ef7221526878ea07a4d5c9b54c",
+    "pipeline/schemas/route-config.schema.json": "6f606926c257b7ad3d2972e53d0b772714774140c473b9cb8c7cd9e52731020f",
     "pipeline/schemas/scope-check.schema.json": "f96973c59372b36b7d68b9ac4b03490e7da8d54acf29a35947f5f610e82b98ea",
     "pipeline/schemas/secret-patterns.json": "d9a7bec7b2ba704b73f2302c3498874c6298cde69bde0f181932c282d3fe0b0e",
     "pipeline/schemas/skill-observation.schema.json": "05f16c6e5055ef99a102b12b578ba841251267d41dd7343f8ab66cd8070180ff",
@@ -374,7 +374,7 @@
     "pipeline/scripts/crush-json.mjs": "303382670f8f170c8c6710202853a2de2915625813cd157185f9be4e2b27258e",
     "pipeline/scripts/diff-explain.mjs": "79137dafe5a3b90a5496611c215669f26d92ab070dc4a71f1d37ed095a49c471",
     "pipeline/scripts/diff-risk-score.mjs": "b3e8da42fea1258162e40f4eb7809074831339b7563874527f7e825f7aa795ca",
-    "pipeline/scripts/doctor.mjs": "06ba164a2b869256ddb140d86af6f59129304c142218ccbb98a9b284e32055a7",
+    "pipeline/scripts/doctor.mjs": "73edeadd54d9cca035bf94b80e7f394da6e0692d3e803da1baa37db76f44e3ce",
     "pipeline/scripts/evidence-gate.mjs": "54bd99ad7ead241cdb9b6281994dac31695fd0c7cf92222249803abc1a48f78a",
     "pipeline/scripts/feedback-send.mjs": "8ec3f8fcafbe0de6c916a13a151d009cb804522537621b239a183591dddeec85",
     "pipeline/scripts/finding-fingerprint.mjs": "fa12ab10701db5d2bfff014e41d1cd4c0b2b772aee5fc69205de14b2761b0c83",
@@ -480,7 +480,7 @@
     "pipeline/scripts/website-deploy-commit.sh": "523482438b265ca1f1883ec5fb450e803566a1239eaccdc423e12c5426140a84",
     "pipeline/scripts/worktree-finalize.sh": "f905ba69272d32afc75b5deb8406efabfe0865bdeec2e150a521d5a1b0c51b8a",
     "pipeline/scripts/write-state.mjs": "1367280057d2b747da55ba62af6f884a647f2675c0bde10c39dc68c84ff7daac",
-    "pipeline/skills/.skill-manifest.json": "22eac6907c5d5e7a774d5d64148645f633863b60335596bb2dcee1020f787e63",
+    "pipeline/skills/.skill-manifest.json": "fc25b360a03932f8c5575e337cc476524d15c199fb6ff8e76b23fe3668267f22",
     "pipeline/skills/.skills-index.json": "05545f7603267576f614d6eedd0369bfcf5b8d1aadbf4c791295559f930b4bb2",
     "pipeline/skills/shared/README.md": "12692c36caaf2f4567cf21b788dad66e1bc34cae345dc8045e0569834b819414",
     "pipeline/skills/shared/core/apple-archive-compliance/SKILL.md": "6675a53441f2f3bedc82284998f402bd51fa251c7491a595e12c6c4016830337",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mmerterden/multi-agent-pipeline",
-  "version": "19.1.1",
+  "version": "19.1.3",
   "description": "6-phase AI development pipeline with full orchestration on Claude Code, Copilot CLI and Codex CLI. Analysis, planning, TDD, CLI-aware parallel review with consensus surfacing + Fable triage, default-FAIL evidence gates, secret + intent guards, per-phase cost ledger, persistent learnings memory, wiki generation, commit automation. Token-preserving uninstall.",
   "type": "module",
   "main": "index.js",

package/pipeline/lib/model-dispatch.sh

@@ -22,10 +22,16 @@
 #
 #   Layer 1  an Anthropic rung. Reachable from every call site, because it
 #            writes to a seam that already exists and opens no new network path.
-#   Layer 2  a non-Anthropic rung. Reachable ONLY from a call site the pipeline
-#            makes itself. A subagent is dispatched by the HOST, so a rule that
-#            prefers an external rung for a subagent cannot be honoured - and
-#            this script says so on stderr rather than pretending it was.
+#   Layer 2  a non-Anthropic rung. NO call site can dispatch to one today, and
+#            the router refuses it rather than returning a rung its caller will
+#            hand to a CLI that does not know the name:
+#              - a subagent is dispatched by the HOST;
+#              - bulk-read shells out to `claude -p --model <rung>`;
+#              - research_ask runs in the MCP server and picks its own model.
+#            `provider` in cost-table.json is what makes this checkable, and it
+#            is the seam a future call site would use. Until one exists, the
+#            refusal is the honest answer: an allowed rung nothing can honour is
+#            a rule the user believes worked.
 
 set -uo pipefail
 
@@ -124,12 +130,12 @@ for rung in $MATCH; do
     echo "model-dispatch: rule prefers 'fable' but modelFallback.fableEnabled is false; skipping it" >&2
     continue
   fi
-  if [ "$PROVIDER" != "anthropic" ] && [ "$CALL_SITE" = "subagent" ]; then
-    # The honest limit, said out loud at the moment it bites. Subagent dispatch
-    # belongs to the host; we cannot send one to another provider, and a router
-    # that quietly downgraded to an Anthropic rung here would leave the user
-    # believing a rule worked that never could.
-    echo "model-dispatch: rung '$rung' is $PROVIDER and subagent dispatch belongs to the host; skipping it" >&2
+  if [ "$PROVIDER" != "anthropic" ]; then
+    # The honest limit, said out loud at the moment it bites. Every call site
+    # that asks here hands the rung to something that only speaks the Anthropic
+    # ladder, so returning an external rung would produce a failed call rather
+    # than a cheaper one.
+    echo "model-dispatch: rung '$rung' is $PROVIDER and no call site can dispatch to one yet; skipping it" >&2
     continue
   fi
   record "$rung" "rule matched"

package/pipeline/multi-agent-refs/features/doctor.md

@@ -126,6 +126,15 @@ The installed `.pipeline-version` matches the package version resolved from the
 checkout or the published package. WARN on a mismatch: the run works, it just
 is not the version the user thinks they have.
 
+### update-policy
+
+Whether a run updates itself before it starts, read the way the run reads it:
+`updateCheck.enabled`, `.ttlHours` and `.autoUpdate`. The schema defaults all
+three, so a preferences file that omits them behaves exactly like one that sets
+them - which is why they are worth reporting. INFO when a value comes from the
+schema rather than from the file, so the policy is legible in the place somebody
+would change it. Reported, never written: a preferences file is the user's.
+
 ### script-surface
 
 Every script a shipped command names by path exists in the installed tree. BLOCK:

package/pipeline/multi-agent-refs/features/model-fallback.md

@@ -193,13 +193,17 @@ Two limits are enforced by the script rather than written here and hoped for:
 - **A rule may not turn the fable rung on.** With `modelFallback.fableEnabled`
   false, a rule preferring `fable` falls past it to the next rung. Otherwise
   `/multi-agent:model off` would have a second door.
-- **A subagent stays inside the Anthropic ladder.** Subagent dispatch belongs to
-  the host, so a rule preferring a non-Anthropic rung cannot be honoured there;
-  the script says so on stderr and moves on rather than substituting an
-  Anthropic rung and leaving the user believing a rule worked that never could.
-  `bulk-read.sh` is a call site the pipeline makes itself, so the same rung IS
-  allowed there. That asymmetry is why `/multi-agent:route-status` reports scope
-  per call site instead of one on/off.
+- **Every call site stays inside the Anthropic ladder.** No call site can
+  dispatch to another provider today: a subagent is dispatched by the host,
+  `bulk-read.sh` shells out to `claude -p --model <rung>`, and `research_ask`
+  runs in the MCP server and picks its own model. A rule preferring an external
+  rung falls to the next rung the rule named, and the script says why on stderr.
+  Returning the external rung instead would hand a caller a name it passes
+  straight to a CLI that does not know it - a failed call, not a cheaper one.
+  `provider` in `cost-table.json` is what makes the refusal checkable and is the
+  seam a future call site would use; `smoke-model-dispatch.sh` asserts that
+  `bulk-read.sh` still dispatches through the Anthropic CLI, so the day that
+  changes, the gate says the refusal may be lifted.
 
 The script never fails and never returns an empty rung: a missing preferences
 file, a missing `jq`, unparseable JSON, an out-of-scope call site and a rung

package/pipeline/schemas/route-config.schema.json

@@ -2,7 +2,7 @@
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "$id": "https://github.com/mmerterden/multi-agent-pipeline/pipeline/schemas/route-config.schema.json",
   "title": "Model routing configuration",
-  "description": "Policy-driven model selection, OFF by default. Lives under prefs.global.modelRouting. Two layers, and the difference is the whole safety argument. Layer 1 chooses a rung INSIDE the Anthropic ladder and writes to the existing PHASE_MODEL_OVERRIDE seam - no new network path, no new account. Layer 2 sends a call to a non-Anthropic provider, and only at the call sites the pipeline makes itself (bulk-read.sh, research_ask), never at a call site the host owns. `scope` has no `host-session` member and that absence is enforced here rather than written in prose: rewriting the host's base URL would route the user's ENTIRE session, including work that has nothing to do with this pipeline, through a third layer - breaking the subscription's auth model and silently changing which model answers. Shipping this disabled is the same reasoning as modelFallback.fableEnabled: a cost control that is on by default is not a control.",
+  "description": "Policy-driven model selection, OFF by default. Lives under prefs.global.modelRouting. Two layers, and the difference is the whole safety argument. Layer 1 chooses a rung INSIDE the Anthropic ladder and writes to the existing PHASE_MODEL_OVERRIDE seam - no new network path, no new account. Layer 2 would send a call to a non-Anthropic provider, and no call site can do that yet: a subagent is dispatched by the host, bulk-read.sh shells out to `claude -p --model <rung>`, and research_ask runs in the MCP server and picks its own model. model-dispatch.sh therefore refuses a non-Anthropic rung everywhere and falls to the rule's next rung, because an allowed rung nothing can honour is a rule the user believes worked. `provider` in cost-table.json is the seam a future call site would use. `scope` has no `host-session` member and that absence is enforced here rather than written in prose: rewriting the host's base URL would route the user's ENTIRE session, including work that has nothing to do with this pipeline, through a third layer - breaking the subscription's auth model and silently changing which model answers. Shipping this disabled is the same reasoning as modelFallback.fableEnabled: a cost control that is on by default is not a control.",
   "type": "object",
   "additionalProperties": false,
   "required": ["enabled"],

package/pipeline/scripts/doctor.mjs

@@ -80,6 +80,7 @@ const CHECK_IDS = [
   "host-platform",
   "install-present",
   "install-version",
+  "update-policy",
   "script-surface",
   "skill-siblings",
   "state-writable",
@@ -240,6 +241,43 @@ function checkInstallVersion() {
   ok("install-version");
 }
 
+// Whether a run updates itself before it starts, read the way the run reads it.
+//
+// The schema defaults `enabled`, `ttlHours` and `autoUpdate`, so a preferences
+// file with no `updateCheck` block behaves exactly like one that sets all three
+// - and that is the problem this reports. The setting that decides whether a
+// run silently updates itself is then invisible in the file somebody opens to
+// change it, and the only way to learn the answer is to read the schema.
+//
+// Reported, never written. A preferences file is the user's, and a diagnostic
+// that edits one is not a diagnostic.
+function checkUpdatePolicy() {
+  const prefs = readJson(join(CLAUDE, "multi-agent-preferences.json"));
+  if (!prefs) {
+    skip("update-policy", "no preferences file to read");
+    return;
+  }
+  const uc = prefs.global?.updateCheck;
+  const effective = {
+    enabled: uc?.enabled ?? true,
+    ttlHours: uc?.ttlHours ?? 24,
+    autoUpdate: uc?.autoUpdate ?? true,
+  };
+  const spelled = uc && typeof uc === "object" ? Object.keys(uc) : [];
+  const missing = ["enabled", "ttlHours", "autoUpdate"].filter((k) => !spelled.includes(k));
+  const summary = `enabled=${effective.enabled}, autoUpdate=${effective.autoUpdate}, ttlHours=${effective.ttlHours}`;
+  if (missing.length === 0) {
+    ok("update-policy");
+    return;
+  }
+  report(
+    "update-policy",
+    "INFO",
+    `${summary} - ${missing.join(", ")} come from the schema, not from your preferences file`,
+    "set global.updateCheck in ~/.claude/multi-agent-preferences.json to make the policy explicit",
+  );
+}
+
 function checkScriptSurface() {
   const cmdDir = join(CLAUDE, "commands", "multi-agent");
   if (!existsSync(cmdDir)) {
@@ -957,6 +995,7 @@ function main() {
   }
 
   checkInstallVersion();
+  checkUpdatePolicy();
   checkScriptSurface();
   checkSkillSiblings();
   checkStateWritable();

package/pipeline/skills/.skill-manifest.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": "1.0.0",
-  "generatedAt": "2026-09-20T20:24:07Z",
+  "generatedAt": "2026-09-21T06:17:16Z",
   "skillCount": 216,
   "entries": [
     {