amicus 4.2.1 → 4.4.0

package/electron/workspace-ui/workspace.css

@@ -0,0 +1,172 @@
+/* Council Workspace styles — every color/font/space from src/design/tokens.css. */
+
+* { box-sizing: border-box; }
+/* ⚠️ DE-ROT (F33): REQUIRED — do not drop. `.dialog-backdrop { display: flex }` below is an
+   AUTHOR rule, and author origin beats the UA's `[hidden] { display: none }` regardless of
+   specificity — so `#dialog-abort` (and `#run-view`, also `hidden`-attribute-gated) would be
+   visible from first paint and Task 16's `$('dialog-abort').hidden = true` would never hide it.
+   Nothing under electron/ or src/ defines a `[hidden]` reset today; this line is the only guard. */
+[hidden] { display: none !important; }
+html, body { height: 100%; margin: 0; }
+body {
+  background: var(--bg);
+  color: var(--text-1);
+  font-family: var(--font-sans);
+  font-size: var(--fs-13);
+  line-height: var(--lh-body);
+}
+.mono { font-family: var(--font-mono); }
+
+#app { display: flex; height: 100vh; }
+
+/* ---- left rail -------------------------------------------------------- */
+#rail {
+  width: 280px; min-width: 220px; flex: none;
+  border-right: var(--bd); background: var(--surface-1);
+  display: flex; flex-direction: column;
+}
+.rail-head {
+  padding: var(--pad-card); border-bottom: var(--bd);
+  display: flex; flex-direction: column; gap: var(--space-2);
+}
+.rail-title { font-weight: var(--w-semibold); letter-spacing: var(--ls-label); }
+.rail-project { color: var(--text-3); font-size: var(--fs-10); overflow: hidden; text-overflow: ellipsis; }
+#run-list { list-style: none; margin: 0; padding: var(--space-2); overflow-y: auto; flex: 1; }
+#run-list li {
+  padding: var(--space-4) var(--space-6); border-radius: var(--r-6);
+  cursor: pointer; border: 1px solid transparent;
+}
+#run-list li:hover { background: var(--surface-2); }
+#run-list li.selected { background: var(--surface-sel); border-color: var(--accent-line); }
+#run-list li.error-row { color: var(--text-3); cursor: default; }
+#run-list li:focus-visible, .btn:focus-visible, #blind-toggle:focus-visible, summary:focus-visible {
+  outline: 2px solid var(--focus-ring); outline-offset: 1px;
+}
+.run-row-top { display: flex; justify-content: space-between; gap: var(--space-4); }
+.run-row-sub { color: var(--text-3); font-size: var(--fs-11); display: flex; gap: var(--space-4); flex-wrap: wrap; }
+
+/* ---- chips / status --------------------------------------------------- */
+.chips { display: flex; gap: var(--space-3); flex-wrap: wrap; align-items: center; }
+.chip {
+  padding: var(--pad-pill); border-radius: var(--r-full); font-size: var(--fs-10);
+  border: var(--bd-strong); color: var(--text-2); background: var(--surface-2);
+}
+.chip.running { color: var(--running); border-color: var(--running); }
+.chip.running::before {
+  content: ''; display: inline-block; width: 6px; height: 6px; margin-right: var(--space-2);
+  border-radius: var(--r-full); background: var(--running); animation: ws-pulse 1.2s ease-in-out infinite;
+}
+.chip.complete { color: var(--ok); }
+.chip.partial { color: var(--warn); }
+.chip.error { color: var(--danger); }
+.chip.aborted { color: var(--text-3); }
+@keyframes ws-pulse { 0%, 100% { opacity: 1; } 50% { opacity: 0.25; } }
+@media (prefers-reduced-motion: reduce) { .chip.running::before { animation: none; } }
+
+/* ---- detail ----------------------------------------------------------- */
+#detail { flex: 1; overflow-y: auto; padding: var(--space-8); }
+.empty-state { color: var(--text-3); padding: var(--space-24); text-align: center; }
+#run-header { display: flex; flex-direction: column; gap: var(--space-4); margin-bottom: var(--space-6); }
+.run-head-row { display: flex; align-items: center; gap: var(--space-8); flex-wrap: wrap; }
+#run-title { font-size: var(--fs-18); margin: 0; }
+
+.banner {
+  padding: var(--pad-card); border-radius: var(--r-6); margin-bottom: var(--space-6);
+  border: 1px solid var(--danger); color: var(--danger); background: var(--surface-1);
+}
+.banner.warn { border-color: var(--warn); color: var(--warn); }
+.banner.info { border-color: var(--border-strong); color: var(--text-2); }
+
+.stage-rail { display: flex; gap: var(--space-4); flex-wrap: wrap; margin-bottom: var(--space-8); }
+.stage {
+  display: flex; align-items: center; gap: var(--space-3);
+  padding: var(--pad-pill); border-radius: var(--r-6); border: var(--bd);
+  color: var(--text-2); font-size: var(--fs-11);
+}
+.stage.complete { color: var(--ok); }
+.stage.running { color: var(--running); border-color: var(--running); }
+.stage.error { color: var(--danger); }
+.stage.partial { color: var(--warn); }
+.stage.skipped { color: var(--text-3); }
+
+.panel { margin-bottom: var(--space-10); border: var(--bd); border-radius: var(--r-8); background: var(--surface-1); padding: var(--pad-card); }
+.panel-title { font-size: var(--fs-13); font-weight: var(--w-semibold); margin: 0 0 var(--space-4) 0; cursor: default; }
+details.panel > summary { cursor: pointer; }
+.prose-host { color: var(--text-2); }
+.prose-host h3, .prose-host h4, .prose-host h5, .prose-host h6 { color: var(--text-1); margin: var(--space-6) 0 var(--space-2); }
+.prose-host pre {
+  background: var(--surface-3); border: var(--bd); border-radius: var(--r-6);
+  padding: var(--pad-card); overflow-x: auto; font-family: var(--font-mono); font-size: var(--fs-11);
+}
+.prose-host code { font-family: var(--font-mono); background: var(--surface-3); border-radius: var(--r-3); padding: 0 var(--space-2); }
+.prose-section { border-top: var(--bd); padding-top: var(--space-4); margin-top: var(--space-4); }
+.prose-section:first-child { border-top: none; margin-top: 0; padding-top: 0; }
+mark { background: var(--gold-soft); color: var(--gold-400); border-radius: var(--r-2); }
+
+/* ---- tables ------------------------------------------------------------ */
+.table { width: 100%; border-collapse: collapse; font-size: var(--fs-12); }
+.table th {
+  text-align: left; color: var(--text-3); font-weight: var(--w-medium);
+  border-bottom: var(--bd-strong); padding: var(--space-3) var(--space-4);
+}
+.table td { border-bottom: var(--bd); padding: var(--space-3) var(--space-4); }
+.table td.num, .table th.num { text-align: right; font-family: var(--font-mono); }
+.stalled-flag { color: var(--warn); }
+
+/* ---- matrix tier rows (report-html light-ground pairs, as token vars) -- */
+.matrix-wrap { overflow-x: auto; }
+tr.tier-Confirmed td { background: var(--tier-confirmed); color: var(--tier-confirmed-ink); }
+tr.tier-Contested td { background: var(--tier-contested); color: var(--tier-contested-ink); }
+tr.tier-Disputed td { background: var(--tier-disputed); color: var(--tier-disputed-ink); }
+tr.tier-Singleton td { background: var(--tier-singleton); color: var(--tier-singleton-ink); }
+td.vote-cell { text-align: center; font-family: var(--font-mono); }
+td.vote-cell.dispute { cursor: pointer; text-decoration: underline dotted; }
+.thin-badge, .override-badge, .debate-badge {
+  font-size: var(--fs-9); border-radius: var(--r-full); padding: 0 var(--space-3);
+  border: 1px solid currentColor; margin-left: var(--space-2);
+}
+
+/* ---- gauge -------------------------------------------------------------- */
+.gauge {
+  position: relative; flex: 1; min-width: 160px; max-width: 360px; height: 18px;
+  border: var(--bd-strong); border-radius: var(--r-full); background: var(--surface-2); overflow: hidden;
+}
+.gauge-fill { height: 100%; width: 0; background: var(--accent-soft); border-right: 2px solid var(--accent); }
+.gauge.over .gauge-fill { background: var(--danger); border-right-color: var(--danger); }
+/* v4.4 §8: `unknown` = at least one seat reported no usage, so the filled
+   fraction is a LOWER BOUND, not a measurement. Hatch the whole track (not just
+   the fill) so the empty remainder reads "indeterminate" rather than "headroom",
+   and dash the leading edge so it is visibly not a hard boundary. Paired with the
+   `≥` prefix renderGauge writes into .gauge-text. */
+.gauge.unknown {
+  background-image: repeating-linear-gradient(135deg,
+    transparent 0 4px, var(--surface-3, var(--surface-2)) 4px 8px);
+}
+.gauge.unknown .gauge-fill { border-right-style: dashed; }
+.gauge-text { position: absolute; inset: 0; display: flex; align-items: center; justify-content: center; font-size: var(--fs-10); color: var(--text-2); }
+
+/* ---- buttons / dialog ---------------------------------------------------- */
+.btn {
+  font-family: var(--font-sans); font-size: var(--fs-12); padding: var(--pad-btn-sm);
+  border-radius: var(--r-6); border: var(--bd-strong); background: var(--surface-2);
+  color: var(--text-1); cursor: pointer;
+}
+.btn:hover { background: var(--surface-3); }
+.btn.danger { border-color: var(--danger); color: var(--danger); }
+.btn.primary { background: var(--accent); border-color: var(--accent); color: var(--on-accent); }
+.btn[disabled] { opacity: 0.5; cursor: default; }
+.blind-label { display: flex; align-items: center; gap: var(--space-3); color: var(--text-2); font-size: var(--fs-12); }
+
+.dialog-backdrop {
+  position: fixed; inset: 0; background: var(--accent-glow);
+  backdrop-filter: blur(2px); display: flex; align-items: center; justify-content: center; z-index: 10;
+}
+.dialog {
+  background: var(--surface-2); border: var(--bd-strong); border-radius: var(--r-10);
+  box-shadow: var(--shadow-pop); padding: var(--space-12); max-width: 420px;
+}
+.dialog h2 { margin-top: 0; font-size: var(--fs-15); }
+.dialog-actions { display: flex; justify-content: flex-end; gap: var(--space-4); margin-top: var(--space-8); }
+
+.empty-note { color: var(--text-3); font-size: var(--fs-12); }
+.truncate-note { color: var(--warn); font-size: var(--fs-11); margin-top: var(--space-3); }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "amicus",
-  "version": "4.2.1",
+  "version": "4.4.0",
   "mcpName": "io.github.BourbonDog/amicus",
   "description": "Multi-model LLM Council + parallel AI window for Claude Code. Run structured council reviews across Gemini, GPT, DeepSeek and more — or fork a conversation to any model and fold the results back.",
   "keywords": [

package/schemas/council-run-live.schema.json

@@ -0,0 +1,57 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://github.com/BourbonDog/amicus/schemas/council-run-live.schema.json",
+  "title": "Amicus composed live council-run doc (amicus_status/buildCouncilStatusPayload, view:'live')",
+  "type": "object",
+  "required": ["taskId", "type", "runId", "runDir", "status", "currentStage", "stages", "legsTotal", "legsComplete", "elapsed", "exitCode", "version"],
+  "properties": {
+    "type": { "const": "council-run" },
+    "view": { "const": "live" },
+    "runId": { "type": "string" },
+    "runDir": { "type": "string" },
+    "status": { "type": "string" },
+    "currentStage": { "type": ["string", "null"] },
+    "stages": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "required": ["name", "status"],
+        "properties": {
+          "name": { "type": "string" },
+          "status": { "type": "string" },
+          "waveId": { "type": ["string", "null"] }
+        }
+      }
+    },
+    "legsTotal": { "type": ["number", "null"] },
+    "legsComplete": { "type": ["number", "null"] },
+    "elapsed": { "type": "string" },
+    "exitCode": { "type": ["number", "null"] },
+    "usage": { "type": "object" },
+    "legs": {
+      "description": "One row per active-stage leg id (DE-ROT Task 0.5 / F01), present unconditionally — a just-started leg with no usage flushed yet still gets a row.",
+      "type": "array",
+      "items": {
+        "type": "object",
+        "required": ["taskId", "model", "status"],
+        "properties": {
+          "taskId": { "type": "string" },
+          "model": { "type": ["string", "null"], "description": "Resolved executable id (metadata.model)." },
+          "modelInput": { "type": ["string", "null"], "description": "Council alias (run.json bench/chair/critic/lenses are keyed on this, not `model`); null when the leg's metadata.json has not been patched with it yet (F36)." },
+          "role": { "type": ["string", "null"], "description": "'seat' | 'critic' | 'lens:<slug>' | 'chair', derived via roleFor keyed on modelInput (chair via the owning stage's name instead, F34); null when modelInput is unknown." },
+          "status": { "type": "string" },
+          "messages": { "type": "number" },
+          "stage": { "type": "string" },
+          "latestPreview": { "type": ["string", "null"] },
+          "lastActivityAt": { "type": ["string", "null"] },
+          "stalled": { "type": "boolean" },
+          "usage": { "type": "object" },
+          "usageError": { "type": "string", "description": "Council review C3: set when enrichLegUsage (pricing resolution) throws for this leg's progress usage, so the failure is distinguishable from a leg that simply has not billed yet (no `usage` key, no `usageError` key either). Additive; absent on every leg that priced cleanly or has no usage yet." }
+        }
+      }
+    },
+    "stalled": { "type": "boolean" },
+    "stalledForSeconds": { "type": "number" }
+  },
+  "additionalProperties": true
+}

package/schemas/council-run.schema.json

@@ -34,6 +34,20 @@
     "options": { "type": "object" },
     "usage": { "type": "object" },
     "exitCode": { "type": ["number", "null"] },
+    "budgetRefusals": {
+      "description": "Waves the --max-cost ceiling refused at pre-flight (v4.4). Present only once at least one wave was refused. The run CONTINUES with a partial bench and exits degraded (2) — it is never rolled back and never aborted.",
+      "type": "array",
+      "items": {
+        "type": "object",
+        "required": ["waveId", "models"],
+        "properties": {
+          "waveId": { "type": ["string", "null"] },
+          "models": { "type": "array", "items": { "type": "string" } },
+          "reason": { "type": "string" },
+          "at": { "type": "string" }
+        }
+      }
+    },
     "debate": {
       "type": "object",
       "properties": {

package/schemas/event.schema.json

@@ -0,0 +1,15 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://github.com/BourbonDog/amicus/schemas/event.schema.json",
+  "title": "Amicus observability event (events.jsonl line)",
+  "type": "object",
+  "required": ["schemaVersion", "type", "event", "ts", "id"],
+  "properties": {
+    "schemaVersion": { "const": 1 },
+    "type": { "const": "event" },
+    "event": { "enum": ["wave-started", "leg-started", "leg-fallback", "leg-terminal", "wave-terminal", "retry-started", "run-started", "stage-started", "stage-terminal", "run-terminal"] },
+    "ts": { "type": "string", "format": "date-time" },
+    "id": { "type": "string" }
+  },
+  "additionalProperties": true
+}

package/schemas/progress.schema.json

@@ -0,0 +1,37 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://github.com/BourbonDog/amicus/schemas/progress.schema.json",
+  "title": "Amicus leg/solo progress snapshot (progress.json)",
+  "type": "object",
+  "required": ["schemaVersion", "type", "stage", "updatedAt"],
+  "properties": {
+    "schemaVersion": { "const": 1 },
+    "type": { "const": "progress" },
+    "stage": { "type": "string" },
+    "stageLabel": { "type": "string" },
+    "updatedAt": { "type": "string", "format": "date-time" },
+    "messagesReceived": { "type": "number" },
+    "latestTool": { "type": "string" },
+    "usage": {
+      "type": "object",
+      "properties": {
+        "tokens": { "type": "object" },
+        "costReported": { "type": "number" },
+        "subtree": {
+          "description": "v4.4.1 CA-1. Spend of the CHILD (subagent) OpenCode sessions this leg spawned, which OpenCode bills separately and does NOT roll into the parent session's cost. Attributed to this leg by the terminal walk in src/headless.js; resolved into usage.subtree by src/observe/live-doc.js enrichLegUsage so the live GUI and run.json agree. Absent when the leg spawned none.",
+          "type": "object",
+          "properties": {
+            "sessions": { "type": "number" },
+            "tokens": { "type": "object" },
+            "costReported": { "type": "number" }
+          }
+        },
+        "subtreeUnknown": {
+          "description": "The leg's own cost is stated, but there is positive evidence of a subagent subtree whose spend the walk could not account for. The total is a floor, not the bill. Present only when true.",
+          "const": true
+        }
+      }
+    }
+  },
+  "additionalProperties": true
+}

package/schemas/run-live.schema.json

@@ -0,0 +1,15 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://github.com/BourbonDog/amicus/schemas/run-live.schema.json",
+  "title": "Amicus composed live single-session doc (amicus_status, view:'live')",
+  "description": "amicus_status's single-session response always stamps type:'run' (stampEnvelope); documented here as a const rather than the brief's 'may be absent' guess to match real output.",
+  "type": "object",
+  "required": ["taskId", "type", "status"],
+  "properties": {
+    "type": { "const": "run" },
+    "view": { "const": "live" },
+    "status": { "type": "string" },
+    "usage": { "type": "object" }
+  },
+  "additionalProperties": true
+}

package/schemas/spend.schema.json

@@ -11,6 +11,31 @@
     "windowDays": { "type": ["number", "null"] },
     "total": { "type": "object" },
     "byModel": { "type": "array", "items": { "type": "object" } },
-    "credit": { "type": ["object", "null"] }
+    "credit": { "type": ["object", "null"] },
+    "filters": { "type": "object" },
+    "groupBy": { "enum": ["model", "wave", "council", "project", "op", "day"] },
+    "groups": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "required": ["key", "amount", "runs"],
+        "properties": {
+          "key": { "type": "string" },
+          "amount": { "type": "number" },
+          "runs": { "type": "number" }
+        }
+      }
+    },
+    "wasted": {
+      "type": "object",
+      "required": ["amount", "runs", "byStatus"],
+      "properties": {
+        "amount": { "type": "number" },
+        "runs": { "type": "number" },
+        "byStatus": { "type": "object" }
+      }
+    },
+    "rows": { "type": "array" },
+    "rowsTruncated": { "type": "boolean" }
   }
 }

package/schemas/wave-live.schema.json

@@ -0,0 +1,15 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://github.com/BourbonDog/amicus/schemas/wave-live.schema.json",
+  "title": "Amicus composed live wave doc (amicus_status, view:'live')",
+  "type": "object",
+  "required": ["taskId", "type", "status", "legs"],
+  "properties": {
+    "type": { "const": "wave" },
+    "view": { "const": "live" },
+    "status": { "type": "string" },
+    "legs": { "type": "array", "items": { "type": "object", "properties": { "usage": { "type": "object" } } } },
+    "usage": { "type": "object" }
+  },
+  "additionalProperties": true
+}

package/skills/second-opinion/MODEL-NOTES.md

@@ -4,8 +4,8 @@ This file is the `second-opinion` skill's evolving memory of **how to actually d
 well**. Read it before Stage 0 (council selection and launch); update it, with the user's
 approval, at the end of each run (Stage 6). Keep it tight — merge and prune rather than append.
 
-_Last updated: 2026-07-14 (v2.2.0 fold-back: v3.1 optional council elements verified live;
-claim-class dedup adjudication limit; minimax and qwen-coder debut notes; see changelog)._
+_Last updated: 2026-07-26 (v4.4.0 fold-back: alias-resolution hygiene, `council run --run-id`,
+debate defense/re-vote waves now exercised, haiku and glm notes; see changelog)._
 
 ## Global operating rules (all models)
 - **Fast path:** `council run` applies `--agent Plan` / `--no-context` / `--summary-length
@@ -58,6 +58,20 @@ claim-class dedup adjudication limit; minimax and qwen-coder debut notes; see ch
   including ones outside a judge's focus. A council reviewing this contract flagged the asymmetry
   unanimously. Weigh a lone `Confirmed` tier accordingly, and prefer `Contested` evidence over
   vote counts when a finding matters.
+- **`council run` prints nothing until the run is terminal.** The run id is generated internally and
+  the only stdout write happens after the run resolves, so a backgrounded `council run` gives you no
+  id to watch. **Pin it up front with `--run-id <id>`** and point `amicus watch <id>` at it directly.
+- **Resolve every alias before you spend.** Two failure shapes, both cheap to pre-empt:
+  - **An alias that does not exist aborts the run before any spend** — `resolveModel` throws
+    `Unknown model alias '<x>'`. `deepseek-r1` is a recurring guess and is **not** shipped; the real
+    alias is `deepseek`. Check the alias table (`amicus models`) rather than inferring a name from a
+    model's marketing string.
+  - **A local alias override can silently upgrade a "cheap" seat to a frontier model.** Aliases in
+    `~/.config/amicus/config.json` take precedence over the shipped routes, so a bench you picked for
+    price can resolve to a Pro/preview tier and trip a low `--max-cost` (exit 1) — or quietly cost
+    5-10× what you budgeted. Confirm what each seat actually resolves to before a budget bench.
+- **The chair cannot also hold a bench seat**, so a bench built from budget aliases cannot chair
+  itself with one of them — pick the chair from *outside* the bench list.
 - **Stage-6 approvals:** write the proposed MODEL-NOTES diff to a run-folder file and put that path
   in the approval prompt — chat-text diffs can be hidden behind the approval dialog.
 
@@ -85,9 +99,13 @@ claim-class dedup adjudication limit; minimax and qwen-coder debut notes; see ch
 - **Optional council elements (v2.2.0) verified live:** critic seat (solo-alongside-fanout;
   `role: "critic"` passes through `council tally` untouched), debate mode's nothing-to-debate path
   (provisional `--no-ledger` tally → skip rebuttals → final ledger-recorded tally), and the chair
-  verdict scale (parseable `VERDICT:` line + hard questions) all behaved per SEAT-BRIEFS. **Debate
-  mode's defense/re-vote waves remain unexercised** — an all-Confirmed consensus run has no
-  rebuttal surface; exercise them on a contentious artifact before trusting that path blind.
+  verdict scale (parseable `VERDICT:` line + hard questions) all behaved per SEAT-BRIEFS.
+- **Debate's defense/re-vote waves have now been exercised** (an ideation council, where severity
+  means impact rather than correctness): they parse and tally cleanly, and the round behaves as a
+  **rescope** mechanism rather than a defense — raisers overwhelmingly AMEND (downgrade an
+  overstated severity, narrow a scope) rather than DEFEND, and amendments are re-confirmed on the
+  re-vote. Expect high-amend / low-defend; the idea usually survives, the severity claim often does
+  not.
 
 ## Per-model notes
 
@@ -136,6 +154,26 @@ claim-class dedup adjudication limit; minimax and qwen-coder debut notes; see ch
 ### Claude  (in-council, when toggle on)
 - Consistently the most *calibrated* reviewer (no severity inflation; findings overwhelmingly Confirmed; bench-best street-cred in recent runs) but sometimes the least *original* — it can miss the boldest single catch. Treat as a reliability floor, not a discovery engine.
 
+### haiku  (`--model haiku`) — **verify before using; it has been hard-404ing**
+- The direct-Anthropic route (`anthropic/claude-haiku-4-5-20251001`) returned a hard `Not Found`
+  on **every** invocation of a recent paid corpus — 3 of 3 legs across two separate runs, both as
+  **chair** (twice, incl. the fallback retry) and as a **bench seat** — in ~2 s with zero tokens.
+- Both runs degraded *around* it silently rather than failing: one fell back to another chair, the
+  other collapsed its bench from 3 seats to 2 and exited 2. **A dead alias does not stop a council;
+  it shrinks it.** In the bench-seat case every finding came out `confidence: "thin"` with a single
+  peer corroborator, purely because the bench had halved — and nothing in `verdict.json` said so.
+- Resolve the alias against the catalog (`amicus models --check`) before putting it on a paid
+  bench, and re-check the bench roster in `run.json` against what you asked for afterwards.
+
+### GLM  (`--model glm` → z-ai via OpenRouter)
+- Cheap and fast, and ranked best-by-peers on a clean debut — but a later run produced **35 KB of
+  prose with `conformance: unstructured` and 0 parsed findings**, twice. Its structured-output
+  reliability is **not** established; treat the debut as low-N.
+- Useful behavioural note: when its structured output failed it **refused to fabricate** on the
+  repair attempts. Honest — but an honest refusal still costs you the seat, so a bench that leans
+  on `glm` for quorum can silently adjudicate a seat short while still paying for its tokens.
+  Watch `conformance` per seat, not just the finding count.
+
 ### minimax  (`--model minimax` → via OpenRouter)
 - Fast (~2 min review legs), cheap, `clean` findings-JSON conformance on debut.
 - Took the **critic seat** brief exceptionally well: unanimously ranked #1 by its bench, full
@@ -209,6 +247,16 @@ This section keeps only per-model **qualitative quirks** and **structural-confor
   GUI-hangs-on-this-machine rule (resolved 2026-06-10; headless stays the council default by
   design). Config path updated to `~/.config/amicus/.env`.
 - **2026-07-02** — Folded back field lessons from runs 4-7 (AV-receiver, pork-shoulder, resume, novel ×2 councils): PowerShell `--models` quoting; current-date injection; long-read model selection; judge no-tools preamble; severity-inflation-justifies-dispute; five-keys tally schema; new Grok/Kimi/Mistral/Claude-in-council sections. Quantitative history stays in the ledger (`amicus council stats`).
+- **2026-07-26 (v4.4.0)** — Fold-back from six paid councils (workspace/renderer review ×4, a
+  frontier cost-pipeline council, and an ideation council). Operating lessons: alias-resolution
+  hygiene before spending (a non-existent alias aborts the run; a local `config.json` override can
+  silently upgrade a "cheap" seat to a Pro tier and trip `--max-cost`); the chair may not also hold
+  a bench seat; `council run` prints nothing until terminal, so pin `--run-id` when backgrounding.
+  Debate's defense/re-vote waves exercised for the first time — they work, and behave as a rescope
+  (amend-heavy) rather than a defense. New per-model notes: **haiku** hard-404ed 3/3 legs across two
+  runs and both councils silently degraded around it; **glm** returned `unstructured` conformance
+  with 0 findings twice after a clean debut, and honestly refused to fabricate on repair — which
+  still costs the seat.
 - **2026-07-14 (v2.2.0)** — Optional council elements shipped and verified on a planted-flaw
   ground-truth council (critic seat, debate mode nothing-to-debate path, chair verdict scale;
   expert lenses defined but not yet field-run). New lessons: claim-class dedup glosses

package/src/cli-handlers-council-run.js

@@ -20,7 +20,30 @@ function parseList(value) {
   return String(value).split(',').map(s => s.trim()).filter(Boolean);
 }
 
-/** Resolve bench models from --models XOR --council (mirrors handleFanout). */
+/**
+ * Sanitize the internal `--council-name` passthrough before it can reach the
+ * spend ledger's `councilName` column (v4.3 Task 4 review fix, spec §7.3:
+ * spend docs hold only ids/numbers/paths "by construction"). That value is
+ * user-supplied (via mcp-council-run.js, ultimately an MCP caller's `input`),
+ * unbounded, and unvalidated — unlike a real `--council <preset>`, which is
+ * catalog-validated upstream. Strips control/non-printable characters, trims,
+ * and caps length so a hostile/malformed passthrough can't land raw in a
+ * `--group-by council` rollup. Precedence is untouched by this: it's applied
+ * only to the passthrough branch, never to the catalog-validated preset name.
+ * @param {string} name @returns {string|null} sanitized name, or null if empty after cleanup
+ */
+function sanitizeCouncilName(name) {
+  // eslint-disable-next-line no-control-regex -- deliberately stripping C0/DEL control chars
+  const cleaned = String(name).replace(/[\x00-\x1F\x7F]/g, '').trim().slice(0, 64);
+  return cleaned || null;
+}
+
+/**
+ * Resolve bench models from --models XOR --council (mirrors handleFanout).
+ * Also returns `presetName` (v4.3 Task 3, spec §7.1): the trimmed --council
+ * name when that branch was taken, else null — threaded into runCouncil's
+ * `councilName` option so council ledger rows can be attributed to a preset.
+ */
 function resolveBench(args, useJson) {
   const hasModels = typeof args.models === 'string' && args.models.trim();
   const hasCouncil = args.council !== undefined && args.council !== false;
@@ -40,16 +63,17 @@ function resolveBench(args, useJson) {
     const { resolveCouncilMembers } = require('./utils/config');
     const { readCache } = require('./utils/model-catalog');
     const catalog = (readCache() || {}).models || [];
-    const expanded = resolveCouncilMembers(args.council.trim(), catalog);
+    const presetName = args.council.trim();
+    const expanded = resolveCouncilMembers(presetName, catalog);
     if (expanded.error) {
       return { fail: failJson(useJson, { code: ERROR_CODES.BAD_ARGS, message: `Error: ${expanded.error}` }) };
     }
     if (expanded.dropped && expanded.dropped.length && !useJson) {
       process.stderr.write(`Notice: dropped unavailable council member(s): ${expanded.dropped.join(', ')}\n`);
     }
-    return { bench: expanded.models };
+    return { bench: expanded.models, presetName };
   }
-  return { bench: parseList(args.models) };
+  return { bench: parseList(args.models), presetName: null };
 }
 
 function renderRunHuman(run) {
@@ -58,8 +82,30 @@ function renderRunHuman(run) {
     `  bench: ${(run.bench || []).join(', ')}  chair: ${run.chair}`,
     `  dir:   ${run.options && run.options.outDir}`,
   ];
-  if (run.usage && run.usage.cost && typeof run.usage.cost.amount === 'number') {
-    lines.push(`  cost:  $${run.usage.cost.amount.toFixed(4)} (${run.usage.cost.source})`);
+  // v4.4: a cost line that omits unpriced legs reads as the whole bill. The
+  // diagnosis measured council-wsgate02 printing $0.3720 for a run that really
+  // spent $0.9859. Say what we know, then say what we cannot know — and print
+  // the line even when NOTHING resolved (the old `typeof amount === 'number'`
+  // guard silently dropped it, so a fully unpriced run looked free).
+  const u = run.usage || null;
+  const unknownLegs = u && typeof u.unknownLegs === 'number'
+    ? u.unknownLegs
+    : (u && u.cost && u.cost.unpricedLegs) || 0;
+  // v4.4 Task 2: a fully-priced run can still be short. `council-wsgate01`
+  // printed an unqualified $0.2821 for a run that really spent $0.3036 — every
+  // leg `reported`, and 100% of the gap one unattributed `explore` child session.
+  const subtreeLegs = u && typeof u.subtreeUnknownLegs === 'number'
+    ? u.subtreeUnknownLegs
+    : (u && u.cost && u.cost.subtreeUnknownLegs) || 0;
+  if (u && u.cost && (typeof u.cost.amount === 'number' || unknownLegs > 0 || subtreeLegs > 0)) {
+    const known = typeof u.cost.amount === 'number' ? `$${u.cost.amount.toFixed(4)}` : '$0.0000';
+    const gaps = [];
+    if (unknownLegs > 0) { gaps.push(`${unknownLegs} leg(s) unknown`); }
+    if (subtreeLegs > 0) { gaps.push(`${subtreeLegs} leg(s) with unattributed subagent child-session spend`); }
+    const tail = gaps.length > 0
+      ? ` + ${gaps.join(' + ')} — real spend is at least this much`
+      : '';
+    lines.push(`  cost:  ${known} (${u.cost.source})${tail}`);
   }
   if (run.error) { lines.push(`  error: ${run.error.code}: ${run.error.message}`); }
   return lines.join('\n') + '\n';
@@ -85,6 +131,19 @@ async function handleCouncilRun(args) {
   const benchRes = resolveBench(args, useJson);
   if (benchRes.fail !== undefined) { return benchRes.fail; }
   const bench = benchRes.bench;
+  // v4.3 Task 3 (spec §7.1): the preset name, when this run came from a real
+  // --council <preset>. `--council-name` is an internal, undocumented passthrough
+  // set by mcp-council-run.js — the MCP handler always expands a preset to
+  // `--models` before spawning (so `--council`/`--models` stay mutually exclusive
+  // on this CLI surface), which would otherwise strand the preset name with no
+  // way to reach this process. Never fabricated: --models with neither flag
+  // stays null, matching spec §7.1 ("preset name … else null"). The
+  // passthrough branch is sanitized (see sanitizeCouncilName docblock) — the
+  // preset-name branch is catalog-validated upstream and never touched here,
+  // so precedence (a real --council preset always outranks the passthrough)
+  // is unchanged.
+  const councilName = benchRes.presetName
+    || (typeof args['council-name'] === 'string' ? sanitizeCouncilName(args['council-name']) : null);
   if (bench.length < 2) {
     return failJson(useJson, { code: ERROR_CODES.BAD_ARGS,
       message: 'Error: a council needs at least 2 seats (fanout semantics)' });
@@ -139,8 +198,11 @@ async function handleCouncilRun(args) {
     ? path.resolve(project, String(args['out-dir']))
     : path.resolve(project, `council-${runId}`);
 
-  const { resolveGatewayMode } = require('./utils/config');
+  const { resolveGatewayMode, loadConfig } = require('./utils/config');
+  const { resolveFallbackConfig } = require('./sidecar/fallback-chains');
+  const { readCache } = require('./utils/model-catalog');
   const { runCouncil } = require('./council/run');
+  const cfg = loadConfig() || {};
   const { exitCode, run } = await runCouncil({
     briefing: promptRes.prompt, models: bench, chair, critic, lenses,
     project, runId, runDir,
@@ -148,6 +210,7 @@ async function handleCouncilRun(args) {
     gateway: resolveGatewayMode(args.gateway),
     noValidateModel: !!args['no-validate-model'],
     date: new Date().toISOString().slice(0, 10),
+    councilName,
     // v4.1 §4.5b/§4.5d. `--claude-review` is resolved here but VALIDATED by the
     // engine's preflightClaudeReview (run-assemble.js): the reserved-seat and
     // 'claude may not chair' guards live there on purpose so MCP, the GitHub
@@ -157,6 +220,21 @@ async function handleCouncilRun(args) {
     debate: !!args.debate,
     claudeReviewFile: args['claude-review'] ? path.resolve(args['claude-review']) : null,
     noCostGate: !!args['no-cost-gate'],
+    // v4.3 Task 13: --follow's json-vs-human mode mirrors the same --json this
+    // handler already resolved for the final run doc, so `--json --follow`
+    // NDJSON on stderr and the `--json` final doc on stdout agree.
+    follow: !!args.follow,
+    json: useJson,
+    onComplete: args['on-complete'],
+    // v4.3 Task 18 (spec §6.2): opt-in cheaper-model substitution for STAGE
+    // legs only (run-stages.js threads it through; the chair is excluded —
+    // see run-chair.js). --fallback forces on, --no-fallback forces off;
+    // unset defers to config `fallbacks.enabled`.
+    fallback: resolveFallbackConfig({
+      flagFallback: args.fallback === true ? true : (args['no-fallback'] ? false : undefined),
+      config: cfg,
+    }),
+    catalog: (readCache() || {}).models || [],
   });
 
   if (useJson) {
@@ -174,4 +252,4 @@ async function handleCouncilRun(args) {
   return exitCode;
 }
 
-module.exports = { handleCouncilRun, CHAIR_DEFAULT };
+module.exports = { handleCouncilRun, renderRunHuman, CHAIR_DEFAULT };