instar 1.3.468 → 1.3.470

package/dist/core/ModelTierEscalation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ModelTierEscalation.js","sourceRoot":"","sources":["../../src/core/ModelTierEscalation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAOH,MAAM,CAAC,MAAM,qBAAqB,GAAmC;IACnE,aAAa;IACb,WAAW;IACX,YAAY;IACZ,QAAQ;CACT,CAAC;AAqDF,sEAAsE;AACtE,MAAM,CAAC,MAAM,8BAA8B,GAAyB;IAClE,OAAO,EAAE,KAAK;IACd,MAAM,EAAE,IAAI;IACZ,QAAQ,EAAE;QACR,MAAM,EAAE,CAAC,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,eAAe,CAAC;QAC9D,aAAa,EAAE,IAAI;QACnB,cAAc,EAAE,KAAK;KACtB;IACD,UAAU,EAAE;QACV,aAAa,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,SAAS,EAAE,gBAAgB,EAAE;QAC1E,WAAW,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE;QAC/C,YAAY,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE;QAChD,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE;KAC7C;IACD,UAAU,EAAE;QACV,kBAAkB,EAAE,EAAE,gBAAgB,EAAE,YAAY,EAAE;QACtD,oBAAoB,EAAE,IAAI;QAC1B,gCAAgC,EAAE,CAAC;QACnC,qBAAqB,EAAE,CAAC;QACxB,kBAAkB,EAAE,IAAI;QACxB,kBAAkB,EAAE,UAAU,EAAE,KAAK;QACrC,cAAc,EAAE,OAAO,EAAE,OAAO;QAChC,iBAAiB,EAAE,CAAC;KACrB;CACF,CAAC;AAEF;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAAE,mBAAmB,EAAE,MAAM,4CAA4C,CAAC;AAEjF,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,gBAAgB;IAChB,iBAAiB;IACjB,iBAAiB;IACjB,iBAAiB;IACjB,mBAAmB;IACnB,kBAAkB;IAClB,2BAA2B;IAC3B,MAAM;IACN,QAAQ;IACR,OAAO;CACC,CAAC;AAEX,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,SAAS;IACT,eAAe;IACf,SAAS;IACT,cAAc;IACd,SAAS;CACD,CAAC;AAEX,MAAM,CAAC,MAAM,eAAe,GAAmD;IAC7E,aAAa,EAAE,sBAAsB;IACrC,WAAW,EAAE,qBAAqB;IAClC,YAAY,EAAE,mBAAmB;IACjC,QAAQ,EAAE,EAAE;CACb,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,eAAe,GAAgD;IAC1E,aAAa,EAAE,aAAa;IAC5B,WAAW,EAAE,kBAAkB;IAC/B,YAAY,EAAE,kBAAkB;IAChC,QAAQ,EAAE,kBAAkB;CAC7B,CAAC;AAEF,mEAAmE;AACnE,MAAM,CAAC,MAAM,WAAW,GAAG,wBAAwB,CAAC;AAkBpD,yEAAyE;AACzE,MAAM,UAAU,gBAAgB,CAAC,EAAU;IACzC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,8BAA8B;IAC/E,OAAO,OAAO,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC;AAC/E,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAC9B,SAAiB,EACjB,IAAoB,EACpB,MAAwC,EACxC,KAA0C;IAE1C,IAAI,CAAE,qBAA2C,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACtE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC,CAAC;QAC1D,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,EAAE,GAAG,SAAgC,CAAC;IAC5C,MAAM,UAAU,GAAG,MAAM,EAAE,UAAU,IAAI,EAAE,CAAC;IAC5C,uEAAuE;IACvE,4EAA4E;IAC5E,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;QAChE,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC;QAChB,CAAC,CAAC,SAAS,CAAC;IACd,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAC;QAC3D,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,EAAE,GAAG,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC;IACrF,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC;QACf,kEAAkE;QAClE,+DAA+D;QAC/D,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QACpD,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,kBAAkB,EAAE,UAAU,EAAE,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QACnG,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;QACtC,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,uBAAuB,EAAE,UAAU,EAAE,gBAAgB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAChG,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAC/B,SAAiB,EACjB,MAAwC;IAExC,MAAM,SAAS,GAAG,gBAAgB,CAAC,SAAS,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;IACnE,MAAM,IAAI,GAAG,gBAAgB,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IAC5D,OAAO,SAAS,IAAI,IAAI,IAAI,SAAS,KAAK,IAAI,CAAC;AACjD,CAAC;AAED;+DAC+D;AAC/D,MAAM,UAAU,iBAAiB,CAAC,MAAwC;IACxE,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,EAAE,IAAI,qBAAqB,EAAE,CAAC;QACvC,MAAM,EAAE,GAAG,gBAAgB,CAAC,EAAE,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;QACrD,MAAM,IAAI,GAAG,gBAAgB,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QACrD,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,KAAK,IAAI;YAAE,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAChC,OAAe,EACf,MAAgC,EAChC,KAAa;IAEb,MAAM,OAAO,GAAG,MAAM,CAAC,kBAAkB,IAAI,EAAE,CAAC;IAChD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1E,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACjC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IACtF,6EAA6E;IAC7E,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,OAAO,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IAClF,OAAO,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,KAAK,GAAG,YAAY,CAAC;AAC/D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,6BAA6B,CAC3C,GAAY;IAEZ,MAAM,CAAC,GAAG,8BAA8B,CAAC;IACzC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1D,OAAO;YACL,GAAG,CAAC;YACJ,QAAQ,EAAE,EAAE,GAAG,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE;YAC3D,UAAU,EAAE,EAAE,GAAG,CAAC,CAAC,UAAU,EAAE;YAC/B,UAAU,EAAE,EAAE,GAAG,CAAC,CAAC,UAAU,EAAE,kBAAkB,EAAE,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,kBAAkB,EAAE,EAAE;SAC5F,CAAC;IACJ,CAAC;IACD,MAAM,CAAC,GAAG,GAAoC,CAAC;IAC/C,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO;QAC/D,MAAM,EAAE,OAAO,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM;QAC3D,QAAQ,EAAE;YACR,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC;gBACvC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;gBACrE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;YAC1B,aAAa,EAAE,OAAO,CAAC,CAAC,QAAQ,EAAE,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa;YACnH,cAAc,EAAE,OAAO,CAAC,CAAC,QAAQ,EAAE,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,cAAc;SACxH;QACD,UAAU,EAAE,EAAE,GAAG,CAAC,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC,UAAU,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;QAC1G,UAAU,EAAE;YACV,GAAG,CAAC,CAAC,UAAU;YACf,GAAG,CAAC,CAAC,CAAC,UAAU,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;YACzE,kBAAkB,EAAE;gBAClB,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,kBAAkB,IAAI,OAAO,CAAC,CAAC,UAAU,CAAC,kBAAkB,KAAK,QAAQ;oBACzF,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,kBAAkB;oBACjC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,kBAAkB,CAAC;aACrC;SACF;KACF,CAAC;AACJ,CAAC"}

package/dist/core/PostUpdateMigrator.d.ts

@@ -668,7 +668,7 @@ export declare class PostUpdateMigrator {
      * Get the content of a named hook template.
      * Used by init.ts to share canonical hook content without duplication.
      */
-    getHookContent(name: 'session-start' | 'mcp-health-autorefresh' | 'compaction-recovery' | 'external-operation-gate' | 'deferral-detector' | 'self-stop-guard' | 'slopcheck-guard' | 'post-action-reflection' | 'external-communication-guard' | 'scope-coherence-collector' | 'scope-coherence-checkpoint' | 'claim-intercept' | 'claim-intercept-response' | 'telegram-topic-context' | 'response-review' | 'stop-gate-router' | 'auto-approve-permissions' | 'skill-usage-telemetry' | 'build-stop-hook'): string;
+    getHookContent(name: 'session-start' | 'mcp-health-autorefresh' | 'compaction-recovery' | 'external-operation-gate' | 'deferral-detector' | 'self-stop-guard' | 'slopcheck-guard' | 'post-action-reflection' | 'external-communication-guard' | 'scope-coherence-collector' | 'scope-coherence-checkpoint' | 'claim-intercept' | 'claim-intercept-response' | 'telegram-topic-context' | 'response-review' | 'stop-gate-router' | 'auto-approve-permissions' | 'skill-usage-telemetry' | 'build-stop-hook' | 'model-tier-skill-entry' | 'model-tier-reconciler'): string;
     /** Public accessor for grounding-before-messaging hook content (used by init.ts) */
     getGroundingBeforeMessagingPublic(): string;
     /** Public accessor for convergence-check script content (used by init.ts) */
@@ -762,6 +762,8 @@ export declare class PostUpdateMigrator {
     private getStopGateRouterHook;
     private getClaimInterceptResponseHook;
     private getSkillUsageTelemetryHook;
+    private getModelTierSkillEntryHook;
+    private getModelTierReconcilerHook;
     private getBuildStopHook;
     private getAutoApprovePermissionsHook;
 }

package/dist/core/PostUpdateMigrator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"PostUpdateMigrator.d.ts","sourceRoot":"","sources":["../../src/core/PostUpdateMigrator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAwCH,OAAO,EAEL,KAAK,YAAY,EACjB,KAAK,qBAAqB,EAC3B,MAAM,yBAAyB,CAAC;AAyBjC,MAAM,WAAW,eAAe;IAC9B,wBAAwB;IACxB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,kCAAkC;IAClC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,2CAA2C;IAC3C,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,OAAO,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,MAAM,CAAiB;IAC/B;;;;;;OAMG;IACH,OAAO,CAAC,UAAU,CAAiC;gBAEvC,MAAM,EAAE,cAAc;IAIlC;;;;;;;;;;;;;;OAcG;IACH,OAAO,CAAC,oBAAoB;IA0B5B;;;;;;;;;;;OAWG;IACH,YAAY,CAAC,IAAI,EAAE,YAAY,GAAG,IAAI;IAItC;;;;;;OAMG;IACG,eAAe,CACnB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,qBAAqB,CAAC;IAIjC,OAAO,CAAC,aAAa;IAOrB,OAAO,CAAC,kBAAkB;IAO1B;;;;OAIG;IACH,OAAO,CAAC,YAAY;IASpB;;;OAGG;IACH,OAAO,IAAI,eAAe;IAqD1B;;;;;;;;;;;;;;;;;;OAkBG;IACH,OAAO,CAAC,uCAAuC;IAqC/C;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,0BAA0B;IAmFlC,OAAO,CAAC,0BAA0B;IAmDlC;;;;;;;;;;OAUG;IACH,OAAO,CAAC,kCAAkC;IAwH1C;;;;;;;;;;;;;;;;;;;OAmBG;IACH,OAAO,CAAC,kCAAkC;IA8C1C;;;;;;;;OAQG;IACH,OAAO,CAAC,kCAAkC;IA2B1C,OAAO,CAAC,uBAAuB;IAwE/B,OAAO,CAAC,4CAA4C;IA+CpD;;;;;;;OAOG;IACH,OAAO,CAAC,iCAAiC;IA0BzC;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,oCAAoC;IAmB5C;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,yCAAyC;IAWjD;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,kCAAkC;IAW1C,OAAO,CAAC,yBAAyB;IA6FjC;;;;;;;;;;OAUG;IACG,YAAY,IAAI,OAAO,CAAC,eAAe,CAAC;YA4BhC,uBAAuB;IAkGrC,OAAO,CAAC,0BAA0B;IAkGlC,OAAO,CAAC,0BAA0B;IAoElC,OAAO,CAAC,oBAAoB;IA4G5B,OAAO,CAAC,8BAA8B;IA2EtC;;;;OAIG;IACH,OAAO,CAAC,gBAAgB;IAaxB;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,0BAA0B;IA8BlC;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,4BAA4B;IAwBpC;;;;;;;;;;OAUG;IACH,OAAO,CAAC,sBAAsB;IAwB9B;;;;;;;;;OASG;IACH,OAAO,CAAC,wCAAwC;IAuBhD;;;;;;;;OAQG;IACH,OAAO,CAAC,2CAA2C;IAuBnD;;;;;;;;;;;;;;;;OAgBG;IACH,OAAO,CAAC,mCAAmC;IA4I3C;;;OAGG;IACH,OAAO,CAAC,oBAAoB;IAW5B;;;;;;;;;OASG;IACH,OAAO,CAAC,kBAAkB;IA2B1B;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACH,OAAO,CAAC,yBAAyB;IA4HjC;6EACyE;IACzE,OAAO,CAAC,wBAAwB;IAShC;sDACkD;IAClD,OAAO,CAAC,wBAAwB;IAQhC;;;;OAIG;IACH,OAAO,CAAC,YAAY;IAkPpB;;;;;;;;OAQG;IACH,sBAAsB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,GAAG,IAAI;IA6CvE;;;;OAIG;IACH,OAAO,CAAC,iBAAiB;IAkEzB;;;OAGG;IACH,OAAO,CAAC,wBAAwB;IAkChC;;;;;;;;;OASG;IACH,OAAO,CAAC,wBAAwB;IAoEhC;;;;;;OAMG;IACH,OAAO,CAAC,oBAAoB;IAiE5B;;;;;OAKG;IACH,OAAO,CAAC,2BAA2B;IA8BnC;;;;OAIG;IACH,OAAO,CAAC,wBAAwB;IAyIhC;;;;;;OAMG;IACH,OAAO,CAAC,8BAA8B;IAwDtC,OAAO,CAAC,0BAA0B;IA8DlC;;;OAGG;IACH,OAAO,CAAC,eAAe;IA8+DvB;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,OAAO,CAAC,kCAAkC;IA0J1C;;;OAGG;IACH,OAAO,CAAC,cAAc;IAmLtB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA+BG;IACH,OAAO,CAAC,yCAAyC;IAyDjD;;;OAGG;IACH,OAAO,CAAC,eAAe;IAuTvB;;;OAGG;IACH,OAAO,CAAC,aAAa;IAqFrB;;;OAGG;IACH;;;OAGG;IACH;;;;;;;;;;;;;;;;;;OAkBG;IACH,OAAO,CAAC,wBAAwB;IAmEhC;;;;;;;;;;;;;;OAcG;IACH,OAAO,CAAC,6BAA6B;IAwDrC;;;;;;;;;OASG;IACH,OAAO,CAAC,yBAAyB;IAsDjC,OAAO,CAAC,wBAAwB;IAqChC,OAAO,CAAC,gBAAgB;IAiBxB;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACH,OAAO,CAAC,qBAAqB;IAkE7B;;;;;;;;;;;;;;;;;;;OAmBG;IACH,OAAO,CAAC,0BAA0B;IAgDlC;;;;;OAKG;IACH,OAAO,CAAC,oBAAoB;IAkC5B;;;;;;;;;;OAUG;IACH,OAAO,CAAC,kBAAkB;IA2C1B;;;;;OAKG;IACH,OAAO,CAAC,iBAAiB;IA+BzB,OAAO,CAAC,oBAAoB;IAgC5B;;;OAGG;IACH,OAAO,CAAC,aAAa;IAyBrB;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAqC9B;;;OAGG;IACH,cAAc,CAAC,IAAI,EAAE,eAAe,GAAG,wBAAwB,GAAG,qBAAqB,GAAG,yBAAyB,GAAG,mBAAmB,GAAG,iBAAiB,GAAG,iBAAiB,GAAG,wBAAwB,GAAG,8BAA8B,GAAG,2BAA2B,GAAG,4BAA4B,GAAG,iBAAiB,GAAG,0BAA0B,GAAG,wBAAwB,GAAG,iBAAiB,GAAG,kBAAkB,GAAG,0BAA0B,GAAG,uBAAuB,GAAG,iBAAiB,GAAG,MAAM;IAwBnf,oFAAoF;IACpF,iCAAiC,IAAI,MAAM;IAI3C,6EAA6E;IAC7E,yBAAyB,IAAI,MAAM;IAInC;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,OAAO,CAAC,2BAA2B;IAmFnC,OAAO,CAAC,mBAAmB;IAuf3B,OAAO,CAAC,wBAAwB;IA6JhC,OAAO,CAAC,2BAA2B;IAwEnC,OAAO,CAAC,yBAAyB;IA8IjC,OAAO,CAAC,2BAA2B;IAqKnC,OAAO,CAAC,qBAAqB;IAyU7B,OAAO,CAAC,uBAAuB;IA8O/B,OAAO,CAAC,oBAAoB;IAgG5B,OAAO,CAAC,qBAAqB;IA8H7B,OAAO,CAAC,2BAA2B;IAoHnC,OAAO,CAAC,iCAAiC;IA6DzC,OAAO,CAAC,4BAA4B;IA0MpC;;;;;;;;;;OAUG;IACH;;;;;;;;;;;OAWG;IAEH,gBAAuB,iCAAiC,EAAE,WAAW,CAAC,MAAM,CAAC,CAgC1E;IAEH;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,8BAA8B;IAiHtC,OAAO,CAAC,uBAAuB;IAwD/B;;;;OAIG;IACH,OAAO,CAAC,iBAAiB;IAIzB,OAAO,CAAC,sBAAsB;IAwC9B,OAAO,CAAC,iBAAiB;IAwBzB,OAAO,CAAC,mBAAmB;IAa3B,OAAO,CAAC,8BAA8B;IA6HtC,OAAO,CAAC,+BAA+B;IAuKvC,OAAO,CAAC,oBAAoB;IAY5B,OAAO,CAAC,qBAAqB;IAqO7B,OAAO,CAAC,qBAAqB;IAwI7B,OAAO,CAAC,qBAAqB;IAyN7B,OAAO,CAAC,6BAA6B;IAkLrC,OAAO,CAAC,0BAA0B;IAgClC,OAAO,CAAC,gBAAgB;IAmJxB,OAAO,CAAC,6BAA6B;CAoCtC"}
+{"version":3,"file":"PostUpdateMigrator.d.ts","sourceRoot":"","sources":["../../src/core/PostUpdateMigrator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAwCH,OAAO,EAEL,KAAK,YAAY,EACjB,KAAK,qBAAqB,EAC3B,MAAM,yBAAyB,CAAC;AAyBjC,MAAM,WAAW,eAAe;IAC9B,wBAAwB;IACxB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,kCAAkC;IAClC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,2CAA2C;IAC3C,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,OAAO,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,MAAM,CAAiB;IAC/B;;;;;;OAMG;IACH,OAAO,CAAC,UAAU,CAAiC;gBAEvC,MAAM,EAAE,cAAc;IAIlC;;;;;;;;;;;;;;OAcG;IACH,OAAO,CAAC,oBAAoB;IA0B5B;;;;;;;;;;;OAWG;IACH,YAAY,CAAC,IAAI,EAAE,YAAY,GAAG,IAAI;IAItC;;;;;;OAMG;IACG,eAAe,CACnB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,qBAAqB,CAAC;IAIjC,OAAO,CAAC,aAAa;IAOrB,OAAO,CAAC,kBAAkB;IAO1B;;;;OAIG;IACH,OAAO,CAAC,YAAY;IASpB;;;OAGG;IACH,OAAO,IAAI,eAAe;IAqD1B;;;;;;;;;;;;;;;;;;OAkBG;IACH,OAAO,CAAC,uCAAuC;IAqC/C;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,0BAA0B;IAmFlC,OAAO,CAAC,0BAA0B;IAmDlC;;;;;;;;;;OAUG;IACH,OAAO,CAAC,kCAAkC;IAwH1C;;;;;;;;;;;;;;;;;;;OAmBG;IACH,OAAO,CAAC,kCAAkC;IA8C1C;;;;;;;;OAQG;IACH,OAAO,CAAC,kCAAkC;IA2B1C,OAAO,CAAC,uBAAuB;IAwE/B,OAAO,CAAC,4CAA4C;IA+CpD;;;;;;;OAOG;IACH,OAAO,CAAC,iCAAiC;IA0BzC;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,oCAAoC;IAmB5C;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,yCAAyC;IAWjD;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,kCAAkC;IAW1C,OAAO,CAAC,yBAAyB;IA6FjC;;;;;;;;;;OAUG;IACG,YAAY,IAAI,OAAO,CAAC,eAAe,CAAC;YA4BhC,uBAAuB;IAkGrC,OAAO,CAAC,0BAA0B;IAkGlC,OAAO,CAAC,0BAA0B;IAoElC,OAAO,CAAC,oBAAoB;IAuH5B,OAAO,CAAC,8BAA8B;IA2EtC;;;;OAIG;IACH,OAAO,CAAC,gBAAgB;IAaxB;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,0BAA0B;IA8BlC;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,4BAA4B;IAwBpC;;;;;;;;;;OAUG;IACH,OAAO,CAAC,sBAAsB;IAwB9B;;;;;;;;;OASG;IACH,OAAO,CAAC,wCAAwC;IAuBhD;;;;;;;;OAQG;IACH,OAAO,CAAC,2CAA2C;IAuBnD;;;;;;;;;;;;;;;;OAgBG;IACH,OAAO,CAAC,mCAAmC;IA4I3C;;;OAGG;IACH,OAAO,CAAC,oBAAoB;IAW5B;;;;;;;;;OASG;IACH,OAAO,CAAC,kBAAkB;IA2B1B;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACH,OAAO,CAAC,yBAAyB;IA4HjC;6EACyE;IACzE,OAAO,CAAC,wBAAwB;IAShC;sDACkD;IAClD,OAAO,CAAC,wBAAwB;IAQhC;;;;OAIG;IACH,OAAO,CAAC,YAAY;IAkQpB;;;;;;;;OAQG;IACH,sBAAsB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,GAAG,IAAI;IA6CvE;;;;OAIG;IACH,OAAO,CAAC,iBAAiB;IAkEzB;;;OAGG;IACH,OAAO,CAAC,wBAAwB;IAkChC;;;;;;;;;OASG;IACH,OAAO,CAAC,wBAAwB;IAoEhC;;;;;;OAMG;IACH,OAAO,CAAC,oBAAoB;IAiE5B;;;;;OAKG;IACH,OAAO,CAAC,2BAA2B;IA8BnC;;;;OAIG;IACH,OAAO,CAAC,wBAAwB;IAyIhC;;;;;;OAMG;IACH,OAAO,CAAC,8BAA8B;IAwDtC,OAAO,CAAC,0BAA0B;IA8DlC;;;OAGG;IACH,OAAO,CAAC,eAAe;IAugEvB;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,OAAO,CAAC,kCAAkC;IAgK1C;;;OAGG;IACH,OAAO,CAAC,cAAc;IAmLtB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA+BG;IACH,OAAO,CAAC,yCAAyC;IAyDjD;;;OAGG;IACH,OAAO,CAAC,eAAe;IAqWvB;;;OAGG;IACH,OAAO,CAAC,aAAa;IAqFrB;;;OAGG;IACH;;;OAGG;IACH;;;;;;;;;;;;;;;;;;OAkBG;IACH,OAAO,CAAC,wBAAwB;IAmEhC;;;;;;;;;;;;;;OAcG;IACH,OAAO,CAAC,6BAA6B;IAwDrC;;;;;;;;;OASG;IACH,OAAO,CAAC,yBAAyB;IAsDjC,OAAO,CAAC,wBAAwB;IAqChC,OAAO,CAAC,gBAAgB;IAiBxB;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACH,OAAO,CAAC,qBAAqB;IAkE7B;;;;;;;;;;;;;;;;;;;OAmBG;IACH,OAAO,CAAC,0BAA0B;IAgDlC;;;;;OAKG;IACH,OAAO,CAAC,oBAAoB;IAkC5B;;;;;;;;;;OAUG;IACH,OAAO,CAAC,kBAAkB;IA2C1B;;;;;OAKG;IACH,OAAO,CAAC,iBAAiB;IA+BzB,OAAO,CAAC,oBAAoB;IAgC5B;;;OAGG;IACH,OAAO,CAAC,aAAa;IAyBrB;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAqC9B;;;OAGG;IACH,cAAc,CAAC,IAAI,EAAE,eAAe,GAAG,wBAAwB,GAAG,qBAAqB,GAAG,yBAAyB,GAAG,mBAAmB,GAAG,iBAAiB,GAAG,iBAAiB,GAAG,wBAAwB,GAAG,8BAA8B,GAAG,2BAA2B,GAAG,4BAA4B,GAAG,iBAAiB,GAAG,0BAA0B,GAAG,wBAAwB,GAAG,iBAAiB,GAAG,kBAAkB,GAAG,0BAA0B,GAAG,uBAAuB,GAAG,iBAAiB,GAAG,wBAAwB,GAAG,uBAAuB,GAAG,MAAM;IA0BxiB,oFAAoF;IACpF,iCAAiC,IAAI,MAAM;IAI3C,6EAA6E;IAC7E,yBAAyB,IAAI,MAAM;IAInC;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,OAAO,CAAC,2BAA2B;IAmFnC,OAAO,CAAC,mBAAmB;IAuf3B,OAAO,CAAC,wBAAwB;IA6JhC,OAAO,CAAC,2BAA2B;IAwEnC,OAAO,CAAC,yBAAyB;IA8IjC,OAAO,CAAC,2BAA2B;IAqKnC,OAAO,CAAC,qBAAqB;IAyU7B,OAAO,CAAC,uBAAuB;IA8O/B,OAAO,CAAC,oBAAoB;IAgG5B,OAAO,CAAC,qBAAqB;IA8H7B,OAAO,CAAC,2BAA2B;IAoHnC,OAAO,CAAC,iCAAiC;IA6DzC,OAAO,CAAC,4BAA4B;IA0MpC;;;;;;;;;;OAUG;IACH;;;;;;;;;;;OAWG;IAEH,gBAAuB,iCAAiC,EAAE,WAAW,CAAC,MAAM,CAAC,CAgC1E;IAEH;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,8BAA8B;IAiHtC,OAAO,CAAC,uBAAuB;IAwD/B;;;;OAIG;IACH,OAAO,CAAC,iBAAiB;IAIzB,OAAO,CAAC,sBAAsB;IAwC9B,OAAO,CAAC,iBAAiB;IAwBzB,OAAO,CAAC,mBAAmB;IAa3B,OAAO,CAAC,8BAA8B;IA6HtC,OAAO,CAAC,+BAA+B;IAuKvC,OAAO,CAAC,oBAAoB;IAY5B,OAAO,CAAC,qBAAqB;IAqO7B,OAAO,CAAC,qBAAqB;IAwI7B,OAAO,CAAC,qBAAqB;IAyN7B,OAAO,CAAC,6BAA6B;IAkLrC,OAAO,CAAC,0BAA0B;IAiClC,OAAO,CAAC,0BAA0B;IA8ElC,OAAO,CAAC,0BAA0B;IA8IlC,OAAO,CAAC,gBAAgB;IAmJxB,OAAO,CAAC,6BAA6B;CAoCtC"}

package/dist/core/PostUpdateMigrator.js

@@ -1322,7 +1322,18 @@ export class PostUpdateMigrator {
                 return;
             }
             // Reload only if plist changed (script-only changes don't need launchd touch).
-            if (plistChanged) {
+            //
+            // NEVER under a test harness: launchd is a MACHINE-GLOBAL registry that a
+            // $HOME redirect does not scope. Before this guard, every darwin test that
+            // ran migrate() with a redirected HOME booted out the REAL fleet watchdog
+            // and bootstrapped one pointing at the test tmpdir — the RunAtLoad run then
+            // wrote watchdog-launchd.{log,err} into the tmpdir mid-cleanup (the
+            // worktree-spotlight-exclusion ENOTEMPTY flake, 2026-06-09), and after
+            // cleanup the machine's watchdog service pointed at a DELETED plist (fleet
+            // watchdog silently dead until the next real update). File writes above
+            // stay active under tests (hermetic, HOME-scoped); only the launchd
+            // mutation is skipped.
+            if (plistChanged && !process.env.VITEST && process.env.NODE_ENV !== 'test') {
                 const uid = process.getuid?.() ?? 501;
                 try {
                     execFileSync('launchctl', ['bootout', `gui/${uid}`, plistPath], { stdio: 'ignore' });
@@ -2226,6 +2237,23 @@ export class PostUpdateMigrator {
         catch (err) {
             result.errors.push(`skill-usage-telemetry.sh: ${err instanceof Error ? err.message : String(err)}`);
         }
+        // Model-Tier Escalation §5.4 signal hooks (FABLE-MODEL-ESCALATION-SPEC
+        // §10) — built-in instar/ hooks, ALWAYS overwritten on migration so no
+        // agent can get stuck on a broken template.
+        try {
+            fs.writeFileSync(path.join(instarHooksDir, 'model-tier-skill-entry.sh'), this.getModelTierSkillEntryHook(), { mode: 0o755 });
+            result.upgraded.push('hooks/instar/model-tier-skill-entry.sh (model-tier trigger signal)');
+        }
+        catch (err) {
+            result.errors.push(`model-tier-skill-entry.sh: ${err instanceof Error ? err.message : String(err)}`);
+        }
+        try {
+            fs.writeFileSync(path.join(instarHooksDir, 'model-tier-reconciler.js'), this.getModelTierReconcilerHook(), { mode: 0o755 });
+            result.upgraded.push('hooks/instar/model-tier-reconciler.js (model-tier reconciler)');
+        }
+        catch (err) {
+            result.errors.push(`model-tier-reconciler.js: ${err instanceof Error ? err.message : String(err)}`);
+        }
         // Build stop hook — structural enforcement for /build pipeline.
         // Previously only installed once by init.ts, so existing agents that initialized
         // before it was added never received the file, yet settings.json references it
@@ -2838,6 +2866,14 @@ setTimeout(() => process.exit(0), 2000);
             patched = true;
             result.upgraded.push('CLAUDE.md: added Cartographer Doc-Tree section');
         }
+        // Cartographer doc-freshness (spec #2) — the Tier-1 inline-refresh affordance.
+        // Keyed on this spec's OWN marker ('Keep the map true') so it is independent of
+        // spec #1's marker and idempotent (run twice → single block).
+        if (!content.includes('Keep the map true')) {
+            content += `\n### Cartographer Doc-Freshness — Keep the map true\n\nWhen the cartographer doc-tree + freshness sweep are enabled (\`cartographer.freshnessSweep.enabled\`), the map self-heals: a background sweep authors stale/never-authored node summaries on a LIGHT model routed OFF Claude (it never spends your Anthropic quota — it refuses to author rather than fall back to Claude), and a CI ratchet keeps aggregate freshness from backsliding.\n- **You can help keep it true:** when you finish editing a subsystem, refresh its node so the map reflects your change immediately — \`curl -X POST -H "Authorization: Bearer $AUTH" http://localhost:${port}/cartographer/node/refresh -H 'Content-Type: application/json' -d '{"path":"src/foo/Bar.ts","summary":"…"}'\` (503 unless the sweep is enabled; the summary must name a real symbol in the code).\n- **Freshness state:** \`GET /cartographer/health\` reports the fresh ratio + the un-authored/quarantined backlog. \`fresh\` means a summary is fingerprint-current, NOT verified-correct — always re-ground against the code.\n`;
+            patched = true;
+            result.upgraded.push('CLAUDE.md: added Cartographer Doc-Freshness section');
+        }
         // Cross-Agent Communication Discipline (anti-confabulation) — codex-instar
         // audit Item 11. Existing agents need this section even if they were
         // initialized before it existed. The check uses a content-sniffing marker
@@ -2900,6 +2936,21 @@ Rule: I do not state that work landed inside another agent's state unless I have
             patched = true;
             result.upgraded.push('CLAUDE.md: added Threadline Conversation Coherence holder-view section');
         }
+        // Model-Tier Escalation (FABLE-MODEL-ESCALATION-SPEC §10) — agent-facing
+        // awareness in the proactive-trigger form, tagged EXPERIMENTAL per
+        // maturity-honesty (dark on the fleet; never announced as a finished user
+        // capability). Content MUST stay byte-identical to the generateClaudeMd()
+        // section in src/scaffold/templates.ts — parity tests assert it.
+        if (!content.includes('Model-Tier Escalation (EXPERIMENTAL')) {
+            const modelTierSection = `
+**Model-Tier Escalation (EXPERIMENTAL — escalate the model for heavy work)** — A policy layer that can run my claude-code sessions on the ultra model (\`claude-fable-5\`) for the two heavy-work triggers — spec/project design (\`spec-converge\`) and implementation or long autonomous runs (\`build\`, \`autonomous\`, \`instar-dev\`) — and on the default tier (\`claude-opus-4-8\`) the rest of the time. EXPERIMENTAL and dark by default: \`models.tierEscalation\` in \`.instar/config.json\` ships \`enabled:false\` (and \`dryRun:true\`, which logs intended swaps without performing them). Frameworks with no escalated model configured (codex/gemini/pi) are never touched. Every escalation passes cost guards first (quota headroom, per-account concurrent-escalation cap, hourly budget, TTL + dwell hysteresis) and is audited.
+- Swap a session's tier (server-side authority — body carries a TIER ONLY, never a model id): \`curl -X POST -H "Authorization: Bearer $AUTH" http://localhost:${port}/sessions/SESSION_NAME/model-swap -H 'Content-Type: application/json' -d '{"tier":"escalated"}'\` (\`"default"\` to de-escalate). Refuses protected/non-idle sessions; honors enabled/dryRun; 202 = swap sent but unconfirmed.
+- Proactive: user asks "what model are you running?" / "why are you on Fable/Opus?" → \`GET /sessions\` reports each session's live \`model\`; name the trigger that escalated it (or say escalation is disabled/dry-run on this agent). User says "stop using the expensive model" → set \`models.tierEscalation.enabled:false\` and restart sessions to apply.
+`;
+            content += '\n' + modelTierSection;
+            patched = true;
+            result.upgraded.push('CLAUDE.md: added Model-Tier Escalation awareness section');
+        }
         // MTP Protocol — the two EXO 3.0 tests (refusal + endorsement) on ORG-INTENT.
         // Existing agents need to know the /intent/org/test-action endpoint + the
         // three-layer protocol exist. Content-sniffed on a distinctive marker.
@@ -4847,6 +4898,12 @@ Create worktrees for collaborator repos with \`instar worktree create <branch>\`
             // never learns the holder view will claim a thread held elsewhere
             // "doesn't exist" — the exact dishonesty P3 kills.
             '**Threadline Conversation Coherence (which machine holds each agent-to-agent thread)**',
+            // Model-Tier Escalation (FABLE-MODEL-ESCALATION-SPEC §10): a Codex/
+            // Gemini agent spawns claude-code sessions through the same spawn/swap
+            // routes — without this awareness it would never escalate (or explain)
+            // a heavy-work session's model tier. Mid-session swap remains
+            // claude-code-only; other frameworks are honest no-ops.
+            '**Model-Tier Escalation (EXPERIMENTAL — escalate the model for heavy work)**',
             // Session Boot Self-Knowledge (spec session-boot-self-knowledge): vault
             // secret NAMES + operational facts at boot. A Codex/Gemini agent that
             // never learns the facts writer + secret-get retrieval will re-ask the
@@ -5421,6 +5478,48 @@ Create worktrees for collaborator repos with \`instar worktree create <branch>\`
                 result.upgraded.push('.claude/settings.json: added PostToolUse skill-usage-telemetry hook');
             }
         }
+        // Model-Tier Escalation (FABLE-MODEL-ESCALATION-SPEC §10) — append-with-
+        // dedup registration for the two §5.4 signal hooks. Idempotent: appends
+        // only when missing, never reorders or removes.
+        {
+            const postToolUse = (hooks.PostToolUse || []);
+            const hasSkillEntry = postToolUse.some(e => e.matcher === 'Skill' && e.hooks?.some(h => h.command?.includes('model-tier-skill-entry')));
+            if (!hasSkillEntry) {
+                const skillEntry = postToolUse.find(e => e.matcher === 'Skill');
+                const hookDef = {
+                    type: 'command',
+                    command: 'bash ${CLAUDE_PROJECT_DIR}/.instar/hooks/instar/model-tier-skill-entry.sh',
+                    timeout: 3000,
+                };
+                if (skillEntry) {
+                    skillEntry.hooks = skillEntry.hooks ?? [];
+                    skillEntry.hooks.push(hookDef);
+                }
+                else {
+                    postToolUse.push({ matcher: 'Skill', hooks: [hookDef] });
+                }
+                hooks.PostToolUse = postToolUse;
+                patched = true;
+                result.upgraded.push('.claude/settings.json: added PostToolUse model-tier-skill-entry hook');
+            }
+        }
+        {
+            const userPromptSubmit = (hooks.UserPromptSubmit || []);
+            const hasReconciler = userPromptSubmit.some(e => e.hooks?.some(h => h.command?.includes('model-tier-reconciler')));
+            if (!hasReconciler) {
+                userPromptSubmit.push({
+                    matcher: '',
+                    hooks: [{
+                            type: 'command',
+                            command: 'node ${CLAUDE_PROJECT_DIR}/.instar/hooks/instar/model-tier-reconciler.js',
+                            timeout: 5000,
+                        }],
+                });
+                hooks.UserPromptSubmit = userPromptSubmit;
+                patched = true;
+                result.upgraded.push('.claude/settings.json: added UserPromptSubmit model-tier-reconciler hook');
+            }
+        }
         // Migrate all hook paths from flat layout to instar/ subdirectory
         if (hooks.PostToolUse) {
             this.migrateSettingsHookPaths(hooks.PostToolUse, result);
@@ -6240,6 +6339,8 @@ Create worktrees for collaborator repos with \`instar worktree create <branch>\`
             case 'auto-approve-permissions': return this.getAutoApprovePermissionsHook();
             case 'skill-usage-telemetry': return this.getSkillUsageTelemetryHook();
             case 'build-stop-hook': return this.getBuildStopHook();
+            case 'model-tier-skill-entry': return this.getModelTierSkillEntryHook();
+            case 'model-tier-reconciler': return this.getModelTierReconcilerHook();
         }
     }
     /** Public accessor for grounding-before-messaging hook content (used by init.ts) */
@@ -9913,6 +10014,225 @@ SESSION_ID="\${INSTAR_SESSION_ID:-}"
 
 mkdir -p "$INSTAR_DIR"
 echo "{\\"timestamp\\":\\"$TIMESTAMP\\",\\"skill\\":\\"$SKILL_NAME\\",\\"args\\":\\"$SKILL_ARGS\\",\\"session_id\\":\\"$SESSION_ID\\",\\"output_length\\":$OUTPUT_LEN}" >> "$TELEMETRY_FILE"
+`;
+    }
+    getModelTierSkillEntryHook() {
+        // Canonical source: src/templates/hooks/model-tier-skill-entry.sh
+        // If you edit either, keep them byte-identical — tests assert equality.
+        return `#!/bin/bash
+# Model-Tier Skill Entry — PostToolUse hook for the Skill tool.
+#
+# FABLE-MODEL-ESCALATION-SPEC §5.4: records that a trigger skill STARTED by
+# writing the per-instance mode-state — ONLY on a tier transition (§6
+# write-on-transition; never on every PostToolUse). This is a SIGNAL writer:
+# it never swaps anything and never carries a model id; the reconciler +
+# server-side swap service (the single authority) decide what happens.
+#
+# Instance key: INSTAR_SESSION_ID — the spawn-generated session id. A
+# resume/respawn gets a fresh id, so a predecessor's mode-state can never be
+# inherited (§5.5). Fail-closed: any missing input exits 0 silently.
+
+INPUT=$(cat)
+
+TOOL_NAME=$(echo "$INPUT" | python3 -c "import json,sys; print(json.load(sys.stdin).get('tool_name',''))" 2>/dev/null)
+if [ "$TOOL_NAME" != "Skill" ]; then
+  exit 0
+fi
+
+if [ -z "\${INSTAR_SESSION_ID:-}" ]; then
+  exit 0
+fi
+
+INSTAR_DIR="\${CLAUDE_PROJECT_DIR:-.}/.instar"
+CONFIG_FILE="$INSTAR_DIR/config.json"
+if [ ! -f "$CONFIG_FILE" ]; then
+  exit 0
+fi
+
+SKILL_NAME=$(echo "$INPUT" | python3 -c "import json,sys; print(json.load(sys.stdin).get('tool_input',{}).get('skill',''))" 2>/dev/null)
+if [ -z "$SKILL_NAME" ]; then
+  exit 0
+fi
+
+MODE_FILE="$INSTAR_DIR/state/model-tier-escalation/mode-state-\${INSTAR_SESSION_ID}.json"
+
+python3 - "$CONFIG_FILE" "$SKILL_NAME" "$MODE_FILE" "\${INSTAR_SESSION_ID}" "\${INSTAR_SESSION_NAME:-}" <<'PYEOF' 2>/dev/null
+import json, os, sys, datetime
+config_file, skill, mode_file, instance_id, session_name = sys.argv[1:6]
+try:
+    cfg = json.load(open(config_file))
+except Exception:
+    sys.exit(0)
+te = ((cfg.get('models') or {}).get('tierEscalation') or {})
+if te.get('enabled') is not True:
+    sys.exit(0)
+triggers = ((te.get('triggers') or {}).get('skills')) or ['build', 'autonomous', 'instar-dev', 'spec-converge']
+if skill not in triggers:
+    sys.exit(0)
+# Write-on-transition only (spec section 6): an existing same-instance
+# escalated mode-state means no transition - never rewrite (no churn).
+try:
+    existing = json.load(open(mode_file))
+    if existing.get('instanceId') == instance_id and existing.get('tier') == 'escalated':
+        sys.exit(0)
+except Exception:
+    pass
+os.makedirs(os.path.dirname(mode_file), exist_ok=True)
+state = {
+    'tier': 'escalated',
+    'trigger': skill,
+    'since': datetime.datetime.now(datetime.timezone.utc).strftime('%Y-%m-%dT%H:%M:%SZ'),
+    'instanceId': instance_id,
+    'sessionName': session_name,
+}
+tmp = mode_file + '.tmp'
+with open(tmp, 'w') as f:
+    json.dump(state, f)
+os.replace(tmp, mode_file)
+PYEOF
+exit 0
+`;
+    }
+    getModelTierReconcilerHook() {
+        // Canonical source: src/templates/hooks/model-tier-reconciler.js
+        // If you edit either, keep them byte-identical — tests assert equality.
+        return `#!/usr/bin/env node
+// Model-Tier Reconciler — UserPromptSubmit hook.
+//
+// FABLE-MODEL-ESCALATION-SPEC sections 5.3(1)/5.4/5.5/6: computes the desired
+// tier from durable signals and, ONLY on a transition, asks the server-side
+// swap endpoint to act. It never performs a swap itself, never blocks the
+// turn, and emits no prompt context. The common path is PURE FILESYSTEM with
+// an early-exit no-op when desired == last-applied (no HTTP, no tmux).
+// Fail-closed: anything missing or unparseable exits 0 and the session stays
+// on its default model.
+//
+// NOTE: dynamic import('node:...') so this works under both CJS and ESM
+// hosts (the hook-event-reporter lesson).
+
+const sid = process.env.INSTAR_SESSION_ID || '';
+const sessionName = process.env.INSTAR_SESSION_NAME || '';
+const serverUrl = process.env.INSTAR_SERVER_URL || '';
+const authToken = process.env.INSTAR_AUTH_TOKEN || '';
+if (!sid || !sessionName || !serverUrl || !authToken) process.exit(0);
+
+(async () => {
+  const fs = await import('node:fs');
+  const path = await import('node:path');
+  const projectDir = process.env.CLAUDE_PROJECT_DIR || '.';
+  const instarDir = path.join(projectDir, '.instar');
+  const stateDir = path.join(instarDir, 'state', 'model-tier-escalation');
+  const modeFile = path.join(stateDir, 'mode-state-' + sid + '.json');
+  const markerFile = path.join(stateDir, 'last-applied-' + sid + '.json');
+
+  const readJson = (p) => {
+    try { return JSON.parse(fs.readFileSync(p, 'utf-8')); } catch { return null; }
+  };
+
+  const cfgAll = readJson(path.join(instarDir, 'config.json'));
+  const te = (cfgAll && cfgAll.models && cfgAll.models.tierEscalation) || null;
+  if (!te || te.enabled !== true) process.exit(0);
+  const guards = te.costGuards || {};
+  const ttlMs = typeof guards.maxEscalationTtlMs === 'number' ? guards.maxEscalationTtlMs : 21600000;
+  const dwellMs = typeof guards.minTierDwellMs === 'number' ? guards.minTierDwellMs : 300000;
+  const dwellTurns = typeof guards.minTierDwellTurns === 'number' ? guards.minTierDwellTurns : 1;
+
+  // Desired tier — re-derived LIVE each turn from the durable signal (never
+  // a persisted "escalated" flag that must be cleared). The mode-state is
+  // self-expiring on read (spec 5.5): past TTL it is QUARANTINED (renamed),
+  // so re-escalation needs a FRESH trigger, not a clock reset.
+  let desired = 'default';
+  const mode = readJson(modeFile);
+  if (mode && mode.instanceId === sid && mode.tier === 'escalated') {
+    const since = Date.parse(mode.since || '');
+    if (Number.isFinite(since) && Date.now() - since < ttlMs) {
+      desired = 'escalated';
+    } else {
+      try { fs.renameSync(modeFile, modeFile + '.expired'); } catch { /* already gone */ }
+      // One audit breadcrumb — a TTL firing means the primary path failed.
+      try {
+        fs.mkdirSync(stateDir, { recursive: true });
+        fs.appendFileSync(
+          path.join(stateDir, 'audit.jsonl'),
+          JSON.stringify({ ts: new Date().toISOString(), source: 'reconciler', type: 'ttl-expired', instanceId: sid }) + '\\n',
+        );
+      } catch { /* best-effort */ }
+    }
+  }
+
+  const marker = readJson(markerFile) || { tier: 'default', at: 0, turnsClear: 0 };
+
+  // FAST PATH (spec section 6): desired == last applied. Pure read, zero
+  // writes, no HTTP. (A stale turnsClear can survive an interrupted
+  // de-escalation streak; worst case is a de-escalation one turn early,
+  // still bounded by dwellMs here AND by the server-side dwell backstop.)
+  if (marker.tier === desired) process.exit(0);
+
+  const writeMarker = (m) => {
+    try {
+      fs.mkdirSync(stateDir, { recursive: true });
+      const tmp = markerFile + '.tmp';
+      fs.writeFileSync(tmp, JSON.stringify(m));
+      fs.renameSync(tmp, markerFile);
+    } catch { /* a lost marker only costs one redundant no-op POST */ }
+  };
+
+  // Asymmetric hysteresis (spec 5.5): escalate immediately; de-escalate only
+  // after the condition has been clear for dwellTurns consecutive turns AND
+  // dwellMs since the last swap. Suppressed flaps leave the marker counting.
+  if (desired === 'default') {
+    const turnsClear = (marker.turnsClear || 0) + 1;
+    if (turnsClear < dwellTurns || (marker.at && Date.now() - marker.at < dwellMs)) {
+      writeMarker({ ...marker, turnsClear });
+      process.exit(0);
+    }
+  }
+
+  // Stable-refusal cooldown: 'disabled' / 'launch-time-only-framework' can't
+  // change turn-to-turn — don't hammer the endpoint for 10 minutes.
+  if (
+    marker.refusedReason &&
+    marker.refusedDesired === desired &&
+    Date.now() - (marker.refusedAt || 0) < 600000
+  ) {
+    process.exit(0);
+  }
+
+  // TRANSITION: ask the server — the single swap authority. Bounded (4s);
+  // any failure leaves the marker untouched, so the next idle boundary
+  // retries. The reconciler reconciles against the OBSERVED outcome
+  // ('swapped' = canary-confirmed), never its own write-intent.
+  try {
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), 4000);
+    const res = await fetch(
+      serverUrl + '/sessions/' + encodeURIComponent(sessionName) + '/model-swap',
+      {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json', Authorization: 'Bearer ' + authToken },
+        body: JSON.stringify({ tier: desired }),
+        signal: controller.signal,
+      },
+    );
+    clearTimeout(timer);
+    const body = await res.json().catch(() => ({}));
+    const status = body && body.status;
+    if (status === 'swapped' || status === 'dry-run' || status === 'noop') {
+      // 'swapped': independent oracle confirmed. 'dry-run'/'noop': nothing
+      // will change for this tier — marking prevents per-turn re-POSTs while
+      // keeping exactly one audit line per transition.
+      writeMarker({ tier: desired, at: Date.now(), turnsClear: 0 });
+    } else if (
+      status === 'refused' &&
+      (body.reason === 'disabled' || body.reason === 'launch-time-only-framework')
+    ) {
+      writeMarker({ ...marker, refusedReason: body.reason, refusedDesired: desired, refusedAt: Date.now() });
+    }
+    // 'unconfirmed' and transient refusals (not-idle / dwell / cost-guard):
+    // do NOT mark reconciled (spec 5.3) — behaviourally default; retry later.
+  } catch { /* never blocks the turn */ }
+  process.exit(0);
+})();
 `;
     }
     getBuildStopHook() {