@event4u/agent-config 8.4.1 → 8.6.0

package/src/scripts/_lib/auto_dispatch.ts

@@ -93,3 +93,66 @@ export function classifyTask(signals: TaskSignals, activation: ActivationInputs)
     const action: DispatchAction = activation.auto === 'on' ? 'dispatch' : 'ask';
     return { delegable: true, action, mode, reason };
 }
+
+// ── Per-slice tier inference (v1.5 — road-to-cost-aware-model-routing) ──
+
+/**
+ * Task-TYPE outputs the tier inference keys on. NEVER raw size metrics —
+ * size enters only as the negative guard below. Contract:
+ * `auto-dispatch-classification.md § Per-slice tier inference`.
+ */
+export type SliceType =
+    | 'read-only-fanout' // grep / inventory / discovery targets
+    | 'mechanical-covered' // template-driven transform WITH test coverage
+    | 'mutating-uncovered' // mutation without test coverage
+    | 'synthesis' // review / analysis / judgment slice
+    | 'unknown';
+
+export interface SliceTierSignals {
+    slice_type: SliceType;
+    /**
+     * Negative size guard: slice scope exceeds the mechanical envelope
+     * (multi-file mutation / beyond single responsibility). Revokes a `lite`
+     * candidacy — never creates one.
+     */
+    exceeds_mechanical_envelope?: boolean;
+}
+
+export type InferredTier = 'lite' | 'medium' | 'inherit';
+
+export interface TierInference {
+    tier: InferredTier;
+    /** 'inferred' for a real downshift decision; 'inherit' when no inference fired. */
+    tier_source: 'inferred' | 'inherit';
+    reason: string;
+}
+
+/**
+ * Infer a delegable slice's model tier from its task TYPE. Deterministic,
+ * no LLM meta-call. Unknown/ambiguous → inherit (session tier) — never
+ * guess down.
+ */
+export function inferSliceTier(signals: SliceTierSignals): TierInference {
+    const guard = signals.exceeds_mechanical_envelope === true;
+
+    switch (signals.slice_type) {
+        case 'read-only-fanout':
+        case 'mechanical-covered': {
+            if (guard) {
+                return {
+                    tier: 'medium',
+                    tier_source: 'inferred',
+                    reason: `${signals.slice_type} slice, but scope exceeds the mechanical envelope — lite candidacy revoked`,
+                };
+            }
+            const cascade = signals.slice_type === 'mechanical-covered' ? ' (verify-fail escalates to medium)' : '';
+            return { tier: 'lite', tier_source: 'inferred', reason: `${signals.slice_type} slice${cascade}` };
+        }
+        case 'mutating-uncovered':
+            return { tier: 'medium', tier_source: 'inferred', reason: 'mutating slice without test coverage' };
+        case 'synthesis':
+            return { tier: 'medium', tier_source: 'inferred', reason: 'synthesis/judgment slice — judge one tier up' };
+        default:
+            return { tier: 'inherit', tier_source: 'inherit', reason: 'unknown/ambiguous slice type — session tier, never guess down' };
+    }
+}

package/src/scripts/_lib/bench_ab_cache.ts

@@ -1,7 +1,7 @@
 /**
  * Baseline-cache helpers for the package-impact A/B bench.
  *
- * TypeScript twin of `src/scripts/_lib/bench_ab_cache.py` (ADR-200,
+ * Ported from the retired Python `src/scripts/_lib/bench_ab_cache.py` (ADR-200,
  * Phase 2 Wave 2a). Public API mirrors the Python module exactly — same
  * exported names (deliberately snake_case), same cache-key shape and
  * `to_dict()` / `from_dict()` serialization, same freshness diagnosis.

package/src/scripts/_lib/bench_ab_scoring.ts

@@ -1,7 +1,7 @@
 /**
  * Structural success criteria for Track B.
  *
- * TypeScript twin of `src/scripts/_lib/bench_ab_scoring.py` (ADR-200,
+ * Ported from the retired Python `src/scripts/_lib/bench_ab_scoring.py` (ADR-200,
  * Phase 2 Wave 2a). Public API mirrors the Python module exactly — same
  * exported names (deliberately snake_case), same A/B scoring math, same
  * check ordering, same JSON-identical result shape.

package/src/scripts/_lib/bench_ab_scoring_v2.ts

@@ -1,8 +1,8 @@
 /**
  * Dual-axis deterministic scoring for the bench:ab v2 discipline-axis benchmark.
  *
- * TypeScript twin of `src/scripts/_lib/bench_ab_scoring_v2.py` (ADR-200
- * Python→TS migration). Public API mirrors the Python module EXACTLY — same
+ * Ported from the retired Python `src/scripts/_lib/bench_ab_scoring_v2.py` (ADR-200
+ * Python→TS migration). Public API pins the historical contract exactly — same
  * exported name (`score_task_v2`, deliberately snake_case), same check
  * ordering, same JSON-identical result shape, same scoring math.
  *
@@ -23,7 +23,7 @@
  * The `_diff_line_count` helper replicates CPython `difflib.unified_diff` with
  * default `n=3` context: the SequenceMatcher matching-block algorithm (incl. the
  * `autojunk` popular-element pruning) is ported verbatim so the added+removed
- * line tally is byte-for-byte identical to the Python original.
+ * line tally is byte-for-byte identical to the retired Python implementation.
  */
 import { spawnSync } from 'node:child_process';
 import * as fs from 'node:fs';

package/src/scripts/_lib/bench_cost.ts

@@ -1,7 +1,7 @@
 /**
  * Cost capture helper for the bench runner.
  *
- * TypeScript twin of `src/scripts/_lib/bench_cost.py` (ADR-200, Phase 2
+ * Ported from the retired Python `src/scripts/_lib/bench_cost.py` (ADR-200, Phase 2
  * Wave 2a). Public API mirrors the Python module exactly — same exported
  * names (deliberately snake_case), same per-tier aggregation, same
  * recompute-from-rates fallback, same 6-decimal rounding, same JSON-identical

package/src/scripts/_lib/bench_quality.ts

@@ -6,7 +6,7 @@
 // assertions against actual output. Without it, we emit `not_collected`
 // per docs/contracts/benchmark-report-schema.md § quality invariants.
 //
-// TypeScript twin of `src/scripts/_lib/bench_quality.py` (ADR-200 py2ts
+// Ported from the retired Python `src/scripts/_lib/bench_quality.py` (ADR-200 py2ts
 // Phase 2 / Wave 2a). Scoring math, rubric/regex semantics, and the
 // `not_collected` shape are mirrored exactly; `quality_score` uses
 // Python's round-half-to-even on `round(passing/total, 4)`.
@@ -194,8 +194,8 @@ function _pyRound(value: number, ndigits: number): number {
 /**
  * Translate a Python `re` pattern + `re.MULTILINE` flag into a JS RegExp.
  * The corpus assertions use simple patterns; we surface a thrown error for
- * patterns JS cannot compile so `_eval_regex` reports `bad_regex` like the
- * Python original (which catches `re.error`).
+ * patterns JS cannot compile so `_eval_regex` reports `bad_regex` — the
+ * historical contract (the retired implementation caught `re.error`).
  */
 function _pyCompile(pattern: string): RegExp {
     // re.MULTILINE → 'm'. Python `.search` is unanchored; RegExp.test is too.

package/src/scripts/_lib/bench_report.ts

@@ -4,9 +4,9 @@
 // docs/contracts/benchmark-report-schema.md. Filename format:
 // `internal/bench/reports/<UTC ISO-8601 with : -> ->-<corpus_id>.{json,md}`.
 //
-// TypeScript twin of `src/scripts/_lib/bench_report.py` (ADR-200 py2ts
-// Phase 2 / Wave 2a). Markdown / JSON rendering is byte-exact with the
-// Python original; the inline `:.2%` formatting replicates Python's
+// Ported from the retired Python `src/scripts/_lib/bench_report.py` (ADR-200 py2ts
+// Phase 2 / Wave 2a). Markdown / JSON rendering is byte-stable (goldens pin
+// it); the inline `:.2%` formatting replicates Python's
 // round-half-to-even semantics.
 import * as fs from 'node:fs';
 import * as path from 'node:path';
@@ -52,7 +52,7 @@ export function write_json(filePath: string, report: unknown): void {
 //
 // Python's f"{x:.2%}" rounds half-to-even on the decimal representation.
 // JS `toFixed` rounds half away from zero, so we reimplement to stay
-// byte-exact with the Python original.
+// byte-exact with the retired Python implementation.
 
 /** Replicate Python `format(x, ".2%")` — value × 100, banker-rounded, '%' suffix. */
 function _fmt_pct2(x: number): string {

package/src/scripts/_lib/bench_telegraph.ts

@@ -11,7 +11,7 @@
 //
 // Cost-touch: 10 prompts × 3 arms × claude-sonnet-4-5 (~$3/M in, ~$15/M out).
 //
-// TypeScript twin of `src/scripts/_lib/bench_telegraph.py` (ADR-200
+// Ported from the retired Python `src/scripts/_lib/bench_telegraph.py` (ADR-200
 // py2ts Phase 2 / Wave 2a). Public API mirrored exactly — snake_case
 // names kept deliberately. Numeric helpers replicate Python's
 // round-half-to-even (banker's rounding) and the `statistics` module

package/src/scripts/_lib/bench_telegraph_report.ts

@@ -5,9 +5,9 @@
 // blocks are disjoint: telegraph has no `selection`/`quality`, and the
 // selection bench has no three-arm condensation metrics.
 //
-// TypeScript twin of `src/scripts/_lib/bench_telegraph_report.py`
+// Ported from the retired Python `src/scripts/_lib/bench_telegraph_report.py`
 // (ADR-200 py2ts Phase 2 / Wave 2a). Markdown rendering is byte-exact
-// with the Python original; the `_fmt_pct` / `:.0f` helpers replicate
+// with the retired Python implementation; the `_fmt_pct` / `:.0f` helpers replicate
 // Python's round-half-to-even formatting.
 import {
     ARMS,
@@ -137,8 +137,8 @@ function _prompt_block(r: PromptResult): PromptBlock {
 //
 // Python's f"{x:.2%}" and f"{m:.0f}" both round half-to-even (banker's
 // rounding) on the decimal representation. JS `toFixed` rounds half away
-// from zero, so we reimplement the formatting to stay byte-exact with the
-// Python original.
+// from zero, so we reimplement the formatting to keep the report bytes
+// stable (goldens pin them).
 
 /** Replicate Python `format(x, f".{ndigits}%")` — value × 100, banker-rounded, '%' suffix. */
 function _py_format_pct(x: number, ndigits: number): string {

package/src/scripts/_lib/changelog_eras.ts

@@ -1,7 +1,7 @@
 /**
  * Shared constants + helpers for CHANGELOG.md era discipline.
  *
- * TypeScript twin of `src/scripts/_lib/changelog_eras.py` (ADR-200
+ * Ported from the retired Python `src/scripts/_lib/changelog_eras.py` (ADR-200
  * py2ts Phase 2 / Wave 1). The drift gate (`tests/test_changelog_eras.py`
  * / `tests/lib/changelog_eras.test.ts`) and the release automation
  * (`scripts/release.py`) both reason about the same era shape: a single

package/src/scripts/_lib/claude_desktop_bundler.ts

@@ -1,7 +1,7 @@
 /**
  * Claude Desktop skill ZIP bundler (Phase 4 of event4u-namespace roadmap).
  *
- * TypeScript twin of `src/scripts/_lib/claude_desktop_bundler.py`
+ * Ported from the retired Python `src/scripts/_lib/claude_desktop_bundler.py`
  * (ADR-200 py2ts Phase 2 / Wave 1).
  *
  * Claude Desktop has no filesystem convention for skills; the Customize →

package/src/scripts/_lib/cli_wrapper.ts

@@ -1,7 +1,7 @@
 /**
  * Install / refresh the consumer-facing `./agent-config` wrapper.
  *
- * TypeScript twin of `src/scripts/_lib/cli_wrapper.py` (ADR-200 —
+ * Ported from the retired Python `src/scripts/_lib/cli_wrapper.py` (ADR-200 —
  * Python→TS migration, Phase 2 / Wave 1). Public API mirrors the
  * Python module exactly (snake_case kept deliberately).
  *

package/src/scripts/_lib/fs_atomic.ts

@@ -1,7 +1,7 @@
 /**
  * Atomic file-write primitive shared by lockfile-schema-v2 writers.
  *
- * TypeScript twin of `src/scripts/_lib/fs_atomic.py` (ADR-200 — Python→TS
+ * Ported from the retired Python `src/scripts/_lib/fs_atomic.py` (ADR-200 — Python→TS
  * migration, Phase 2 / Wave 1). Public API mirrors the Python module
  * exactly (snake_case kept deliberately — fidelity over TS idiom).
  *

package/src/scripts/_lib/global_deploy_inventory.ts

@@ -1,7 +1,7 @@
 /**
  * Per-tool inventory of files written by global deploys — and stale reaping.
  *
- * TypeScript twin of `src/scripts/_lib/global_deploy_inventory.py` (ADR-200 —
+ * Ported from the retired Python `src/scripts/_lib/global_deploy_inventory.py` (ADR-200 —
  * Python→TS migration, Phase 2 / Wave 2a). Public API mirrors the Python
  * module exactly (snake_case kept deliberately), including the JSON
  * serialization shape (`indent=2, sort_keys=True` + trailing newline) and the

package/src/scripts/_lib/install_layout.ts

@@ -1,7 +1,7 @@
 /**
  * Install-layout ABI version.
  *
- * TypeScript twin of `src/scripts/_lib/install_layout.py` (ADR-200 — Python→TS
+ * Ported from the retired Python `src/scripts/_lib/install_layout.py` (ADR-200 — Python→TS
  * migration). Public API mirrors the Python module exactly (snake_case kept
  * deliberately — fidelity over TS idiom): the two version constants and the
  * `coerce_layout_version` / `needs_migration` helpers, with Python `int()`

package/src/scripts/_lib/install_regenerator.ts

@@ -1,7 +1,7 @@
 /**
  * Provision the roadmap-progress regenerator into a consumer.
  *
- * TypeScript twin of `src/scripts/_lib/install_regenerator.py` (ADR-200 —
+ * Ported from the retired Python `src/scripts/_lib/install_regenerator.py` (ADR-200 —
  * Python→TS migration, Phase 2 / Wave 2a). Public API mirrors the Python
  * module exactly (snake_case kept deliberately).
  *

package/src/scripts/_lib/installed_lock.ts

@@ -1,7 +1,7 @@
 /**
  * Global-install lockfile at `~/.event4u/agent-config/installed.lock`.
  *
- * TypeScript twin of `src/scripts/_lib/installed_lock.py` (ADR-200 — Python→TS
+ * Ported from the retired Python `src/scripts/_lib/installed_lock.py` (ADR-200 — Python→TS
  * migration, Phase 2 / Wave 2a). Public API mirrors the Python module exactly
  * (snake_case kept deliberately — fidelity over TS idiom), including the
  * byte-exact lockfile wire format and the tempfile + rename atomic write.

package/src/scripts/_lib/installed_tools.ts

@@ -1,7 +1,7 @@
 /**
  * Project-scope installed-tools manifest at `agents/installed-tools.lock`.
  *
- * TypeScript twin of `src/scripts/_lib/installed_tools.py` (ADR-200 — Python→TS
+ * Ported from the retired Python `src/scripts/_lib/installed_tools.py` (ADR-200 — Python→TS
  * migration, Phase 2 / Wave 2a). Public API mirrors the Python module exactly
  * (snake_case kept deliberately — fidelity over TS idiom), including the
  * byte-exact YAML wire format the `_render` golden tests pin.

package/src/scripts/_lib/json_pointers.ts

@@ -1,7 +1,7 @@
 /**
  * JSON-pointer helpers for the v2 `merged_keys[]` manifest field.
  *
- * TypeScript twin of `src/scripts/_lib/json_pointers.py` (ADR-200 —
+ * Ported from the retired Python `src/scripts/_lib/json_pointers.py` (ADR-200 —
  * Python→TS migration, Phase 2 / Wave 1). Public API mirrors the Python
  * module exactly (snake_case kept deliberately).
  *

package/src/scripts/_lib/knowledge_global.ts

@@ -2,7 +2,7 @@
 /**
  * File-first global knowledge-card layer — store path, config, origin-tier.
  *
- * TypeScript twin of `src/scripts/_lib/knowledge_global.py` (ADR-200,
+ * Ported from the retired Python `src/scripts/_lib/knowledge_global.py` (ADR-200,
  * Python→TS migration). The public API and CLI contract mirror the Python
  * original EXACTLY — same exported snake_case names, same semantics, same
  * tier-classification, provenance footer, and config-merge behavior, same

package/src/scripts/_lib/knowledge_global_promote.ts

@@ -2,8 +2,8 @@
 /**
  * File-first usage signal + hybrid promotion for global knowledge cards.
  *
- * TypeScript twin of `src/scripts/_lib/knowledge_global_promote.py` (ADR-200).
- * The public API and CLI contract mirror the Python original EXACTLY — same
+ * Ported from the retired Python `src/scripts/_lib/knowledge_global_promote.py` (ADR-200).
+ * The public API and CLI contract mirror the retired Python implementation EXACTLY — same
  * exported snake_case names, same repo-slug / card-id derivation, same usage
  * sidecar shape (sorted-key JSON), same suggestion decision, same exit codes
  * and byte-identical stdout. No behaviour changes.

package/src/scripts/_lib/knowledge_global_redaction.ts

@@ -2,9 +2,9 @@
 /**
  * Write-time redaction + tier gate for global knowledge-card sharing.
  *
- * TypeScript twin of `src/scripts/_lib/knowledge_global_redaction.py`
+ * Ported from the retired Python `src/scripts/_lib/knowledge_global_redaction.py`
  * (ADR-200). Security-sensitive: the redaction patterns + replacements and
- * the tier gate are matched byte-for-byte against the Python original. The
+ * the tier gate are matched byte-for-byte against the retired Python implementation. The
  * public API and CLI contract mirror Python exactly — same exported
  * snake_case names, same `GateResult` shape + `summary()` text, same exit
  * codes and stdout. No behaviour changes.

package/src/scripts/_lib/link_crypto.ts

@@ -2,12 +2,12 @@
 /**
  * link_crypto — encrypt/decrypt stored third-party package links.
  *
- * TypeScript twin of `src/scripts/_lib/link_crypto.py` (ADR-200). The public
+ * Ported from the retired Python `src/scripts/_lib/link_crypto.py` (ADR-200). The public
  * API is mirrored EXACTLY — `encrypt`, `decrypt`, `is_token`, `project_key`,
  * `global_key`, `resolve_keys`, plus the CLI (`encrypt` / `decrypt` / `keygen`
- * / `keystatus`). The crypto scheme is replicated byte-for-byte against the
- * Python original so that a token produced by either runtime round-trips
- * identically under the other: PBKDF2-HMAC-SHA256 (200 000 iters, dklen 64) key
+ * / `keystatus`). The crypto scheme matches the retired Python implementation byte-for-byte
+ * so that ENC1 tokens minted before the migration still round-trip
+ * identically: PBKDF2-HMAC-SHA256 (200 000 iters, dklen 64) key
  * derivation, an HMAC-SHA256 counter-mode keystream, encrypt-then-MAC with
  * HMAC-SHA256, standard base64, constant-time tag compare. Every primitive has
  * an identical `node:crypto` counterpart, so encrypt-then-decrypt and the token

package/src/scripts/_lib/linked_projects.ts

@@ -1,7 +1,7 @@
 /**
  * Detect IDE-attached sibling projects (linked-projects scope, Option A).
  *
- * TypeScript twin of `src/scripts/_lib/linked_projects.py` (ADR-200,
+ * Ported from the retired Python `src/scripts/_lib/linked_projects.py` (ADR-200,
  * Phase 2 Wave 1 batch C). Public API mirrors the Python module exactly —
  * same exported snake_case names, same entry dict shape (`path` /
  * `detected_via` / `large`, JSON-identical), same parsing tolerances.
@@ -33,7 +33,7 @@
  * sibling files in context and does NOT persist anything. Opt-in +
  * persistence is the caller's job.
  *
- * Note on logging: the Python original emits `logger.info(...)` diagnostics
+ * Note on logging: the retired Python implementation emits `logger.info(...)` diagnostics
  * which are silent under the default logging configuration. The TS twin
  * omits them — observable behavior (return value) is identical.
  */
@@ -261,7 +261,7 @@ function _resolve_idea_url(raw: string, root: string): string | null {
         return null;
     }
     // path.resolve handles both the absolute and the root-relative branch
-    // of the Python original; _resolve_path never throws (the Python
+    // of the retired Python implementation; _resolve_path never throws (the Python
     // OSError → None branch maps to the lexical fallback inside it).
     return _resolve_path(path.resolve(root, value));
 }
@@ -363,7 +363,7 @@ function _read_jsonc(filePath: string): unknown {
 /* ------------------------------------------------------------------ */
 /* Minimal well-formed-XML attribute scanner.                          */
 /*                                                                     */
-/* The Python original parses with xml.etree.ElementTree and treats    */
+/* the retired Python implementation parses with xml.etree.ElementTree and treats    */
 /* any ParseError as "no entries". Rather than pull in an XML          */
 /* dependency, this scanner tokenizes the document, enforces the       */
 /* well-formedness rules ET relies on for the IDE-config input domain  */

package/src/scripts/_lib/model_tier.ts

@@ -1,7 +1,7 @@
 /**
  * Shared `model_tier` → native Claude `model:` mapping (ADR-034 / ADR-035).
  *
- * TypeScript twin of `src/scripts/_lib/model_tier.py` (ADR-200 —
+ * Ported from the retired Python `src/scripts/_lib/model_tier.py` (ADR-200 —
  * Python→TS migration, Phase 2 / Wave 1). Public API mirrors the
  * Python module exactly (snake_case kept deliberately).
  *

package/src/scripts/_lib/module_detection.ts

@@ -1,7 +1,7 @@
 /**
  * Detect module root directories from a project tree.
  *
- * TypeScript twin of `src/scripts/_lib/module_detection.py` (ADR-200,
+ * Ported from the retired Python `src/scripts/_lib/module_detection.py` (ADR-200,
  * Phase 2 Wave 1 batch C). Public API mirrors the Python module exactly —
  * same exported snake_case names, same return shapes, same confidence
  * ladder, same read-only / tolerant contract.
@@ -126,7 +126,7 @@ export function is_module_like_path(rel_path: string): boolean {
  * Fields mirror the JSON shape callers ultimately persist into
  * `modules.root_paths` (the `path` field) plus metadata used by the
  * installer to phrase the numbered-options prompt. Mirrors the frozen
- * `ModuleCandidate` dataclass of the Python original.
+ * `ModuleCandidate` dataclass of the retired Python implementation.
  */
 export interface ModuleCandidate {
     /** Repo-relative POSIX path of the module root (e.g. `app/Modules`). */

package/src/scripts/_lib/pin_resolver.ts

@@ -1,7 +1,7 @@
 /**
  * Pin-aware version resolver for the `agent-config` dispatcher.
  *
- * TypeScript twin of `src/scripts/_lib/pin_resolver.py` (ADR-200,
+ * Ported from the retired Python `src/scripts/_lib/pin_resolver.py` (ADR-200,
  * Phase 2 / Wave 1 batch B). The dispatcher consults this module
  * **before** doing any work. If `.agent-settings.yml` carries a
  * non-empty `agent_config_version` pin and the currently running

package/src/scripts/_lib/script_output.ts

@@ -1,7 +1,7 @@
 /**
  * Verbosity-aware print router for scripts.
  *
- * TypeScript twin of `src/scripts/_lib/script_output.py` (ADR-200,
+ * Ported from the retired Python `src/scripts/_lib/script_output.py` (ADR-200,
  * Phase 2 / Wave 2b). Mirrors the Python module's public API exactly —
  * same exported snake_case names, same resolution order, same level
  * semantics, same output channels (stdout vs stderr), same module-level

package/src/scripts/_lib/security_lint.ts

@@ -1,6 +1,6 @@
 // Shared helpers for the agent-security corpus linters (road-to-security-pillar.md P1).
 //
-// TypeScript twin of `src/scripts/_lib/security_lint.py` (ADR-200 — Python→TS
+// Ported from the retired Python `src/scripts/_lib/security_lint.py` (ADR-200 — Python→TS
 // migration). Public API mirrors the Python module exactly (snake_case kept
 // deliberately) so the two dependent linters — lint_hidden_unicode and
 // lint_instruction_smuggling — depend on one source of truth.

package/src/scripts/_lib/subagent_routing.ts

@@ -18,6 +18,16 @@
 export type Tier = 'lite' | 'medium' | 'high' | 'inherit';
 export type QuotaPool = 'separate' | 'shared';
 
+/**
+ * Where a resolved tier came from (road-to-cost-aware-model-routing Phase 0):
+ * - 'static'   — declared by frontmatter / category pin,
+ * - 'inferred' — produced by the deterministic per-slice tier inference,
+ * - 'inherit'  — session tier; no downshift decision was made.
+ * Mirrors the `tier_source` telemetry field in
+ * `src/agent-src/contexts/execution/orchestration-telemetry.md`.
+ */
+export type TierSource = 'static' | 'inferred' | 'inherit';
+
 /** Per-tier model alias overrides (empty string = use the tier's runtime default). */
 export interface ModelMap {
     lite?: string;
@@ -35,6 +45,12 @@ export interface RoutingInputs {
     model_map: ModelMap;
     /** From the host-capability manifest. */
     separate_quota_pool: boolean;
+    /**
+     * How `task_tier` was produced: 'static' (frontmatter/category pin) or
+     * 'inferred' (deterministic per-slice inference). Optional — absent
+     * defaults to 'static'. Ignored when the slice runs on the session tier.
+     */
+    task_tier_origin?: Exclude<TierSource, 'inherit'>;
 }
 
 export interface RoutingDecision {
@@ -44,6 +60,8 @@ export interface RoutingDecision {
     model: string;
     /** Whether a separate quota pool is used (bonus) or the shared one. */
     quota_pool: QuotaPool;
+    /** Telemetry value for `tier_source`: 'inherit' when no downshift decision applied. */
+    tier_source: TierSource;
     reason: string;
 }
 
@@ -64,6 +82,11 @@ export function resolveSubagentRouting(inp: RoutingInputs): RoutingDecision {
     const tier: Tier = !inp.downshift || inp.task_tier === 'inherit' ? inp.session_tier : inp.task_tier;
     const downshifted = inp.downshift && inp.task_tier !== 'inherit' && tier !== inp.session_tier;
 
+    // Telemetry provenance: only a real downshift decision carries its origin;
+    // session-tier runs (inherit task, downshift off, or tier == session) are 'inherit'.
+    const applied = inp.downshift && inp.task_tier !== 'inherit';
+    const tier_source: TierSource = applied ? (inp.task_tier_origin ?? 'static') : 'inherit';
+
     // Quota arbitrage: a bonus, only when BOTH the setting and the host allow it.
     const useSeparate = inp.quota_arbitrage && inp.separate_quota_pool;
     const quota_pool: QuotaPool = useSeparate ? 'separate' : 'shared';
@@ -76,6 +99,7 @@ export function resolveSubagentRouting(inp: RoutingInputs): RoutingDecision {
         tier,
         model: modelForTier(tier, inp.model_map),
         quota_pool,
+        tier_source,
         reason: reasonParts.join(' · '),
     };
 }