instar 1.3.532 → 1.3.534

package/dist/server/routes.js

@@ -10,7 +10,7 @@ import { createHash, timingSafeEqual, randomUUID } from 'node:crypto';
 import fs from 'node:fs';
 import os from 'node:os';
 import path from 'node:path';
-import { KNOWN_CLAUDE_MODEL_IDS } from '../core/ModelTierEscalation.js';
+import { KNOWN_CLAUDE_MODEL_IDS, escalatedModelIds, normalizeTierEscalationConfig, } from '../core/ModelTierEscalation.js';
 import { validateSummaryDeterministic, neutralizeInstructionShapedContent, extractCodeSymbols, } from '../core/cartographerSummary.js';
 import { navigate as cartographerNavigate } from '../core/CartographerNavigator.js';
 import { computeCoverage as computeStandardsCoverage, } from '../core/StandardsEnforcementAuditor.js';
@@ -10304,6 +10304,51 @@ export function createRoutes(ctx) {
                 console.warn(`[pool/transfer] autonomous-run suspend failed for topic ${topicId}: ${err instanceof Error ? err.message : String(err)}`);
             }
         }
+        // ── WS5.3 (escalation-rides-topic) SOURCE capture ───────────────────────
+        // When the moving topic has a LIVE session running on the escalated tier,
+        // file an EPHEMERAL escalation hint keyed by topic. The destination's
+        // acquire pull serves it and RE-ADMITS through its OWN governor — a trigger
+        // carry, NEVER a tier grant. Gated under tierEscalation.enabled && ridesTopic
+        // (default false ⇒ strict no-op). Honors escalationOverride:'suppress' (a
+        // suppressed topic files NO hint — it must never be re-escalated on arrival).
+        // Only a REAL move files (noop/already-there never does).
+        let escalationHintFiled = false;
+        if (plan.action !== 'noop' && ctx.escalationHints) {
+            try {
+                const teCfg = normalizeTierEscalationConfig(ctx.config.models?.tierEscalation);
+                if (teCfg.enabled && teCfg.ridesTopic) {
+                    // The topic's live session on THIS machine (the source in the
+                    // live-swap topology owner==holder==self; a remote-owner move
+                    // degrades safely — no local session, no hint, default tier).
+                    const topicNum = Number(topicId);
+                    const srcSessionName = Number.isFinite(topicNum)
+                        ? ctx.telegram?.getSessionForTopic?.(topicNum) ?? null
+                        : null;
+                    const srcSession = srcSessionName
+                        ? ctx.sessionManager.listRunningSessions().find((s) => s.name === srcSessionName || s.tmuxSession === srcSessionName) ?? null
+                        : null;
+                    const escalatedIds = escalatedModelIds(teCfg);
+                    const isEscalated = srcSession?.model != null && escalatedIds.has(srcSession.model);
+                    // suppress consult: a 'suppress'-pinned topic files no hint.
+                    const suppressed = ctx.topicProfile?.resolver?.resolve(topicNum)?.escalationOverride === 'suppress';
+                    if (isEscalated && !suppressed) {
+                        ctx.escalationHints.file(topicId, {
+                            trigger: 'transfer', // audit label only — the destination governor re-decides from real state
+                            sourceTier: 'escalated',
+                            ...(self ? { sourceMachineId: self } : {}),
+                        });
+                        escalationHintFiled = true;
+                    }
+                }
+            }
+            catch {
+                // @silent-fallback-ok — filing the hint is fire-and-forget enrichment of
+                // the transfer: a capture error must never fail the move. Worst case the
+                // resumed session re-evaluates escalation only when its heavy-work trigger
+                // fires again on the destination (default tier in the meantime — the safe
+                // direction, identical to WS5.3 being off).
+            }
+        }
         ctx.topicPinStore.set(topicId, target, plan.setPin ?? true);
         let releasedLocalOwnership = false;
         try {
@@ -10434,6 +10479,7 @@ export function createRoutes(ctx) {
             placedOwnership,
             autonomousRunSuspended: autonomousRunSuspended || drainRunSuspended,
             ...(drainLeg.attempted ? { drain: drainLeg } : {}),
+            ...(escalationHintFiled ? { escalationHintFiled: true } : {}),
         });
     });
     // GET /secrets/sync-status — read-only view of cross-machine secret-sync (spec Phase 4).