@forwardimpact/outpost 3.3.4 → 3.5.0

package/LICENSE

@@ -1,201 +1,21 @@
-                                 Apache License
-                           Version 2.0, January 2004
-                        http://www.apache.org/licenses/
-
-   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
-
-   1. Definitions.
-
-      "License" shall mean the terms and conditions for use, reproduction,
-      and distribution as defined by Sections 1 through 9 of this document.
-
-      "Licensor" shall mean the copyright owner or entity authorized by
-      the copyright owner that is granting the License.
-
-      "Legal Entity" shall mean the union of the acting entity and all
-      other entities that control, are controlled by, or are under common
-      control with that entity. For the purposes of this definition,
-      "control" means (i) the power, direct or indirect, to cause the
-      direction or management of such entity, whether by contract or
-      otherwise, or (ii) ownership of fifty percent (50%) or more of the
-      outstanding shares, or (iii) beneficial ownership of such entity.
-
-      "You" (or "Your") shall mean an individual or Legal Entity
-      exercising permissions granted by this License.
-
-      "Source" form shall mean the preferred form for making modifications,
-      including but not limited to software source code, documentation
-      source, and configuration files.
-
-      "Object" form shall mean any form resulting from mechanical
-      transformation or translation of a Source form, including but
-      not limited to compiled object code, generated documentation,
-      and conversions to other media types.
-
-      "Work" shall mean the work of authorship, whether in Source or
-      Object form, made available under the License, as indicated by a
-      copyright notice that is included in or attached to the work
-      (an example is provided in the Appendix below).
-
-      "Derivative Works" shall mean any work, whether in Source or Object
-      form, that is based on (or derived from) the Work and for which the
-      editorial revisions, annotations, elaborations, or other modifications
-      represent, as a whole, an original work of authorship. For the purposes
-      of this License, Derivative Works shall not include works that remain
-      separable from, or merely link (or bind by name) to the interfaces of,
-      the Work and Derivative Works thereof.
-
-      "Contribution" shall mean any work of authorship, including
-      the original version of the Work and any modifications or additions
-      to that Work or Derivative Works thereof, that is intentionally
-      submitted to the Licensor for inclusion in the Work by the copyright owner
-      or by an individual or Legal Entity authorized to submit on behalf of
-      the copyright owner. For the purposes of this definition, "submitted"
-      means any form of electronic, verbal, or written communication sent
-      to the Licensor or its representatives, including but not limited to
-      communication on electronic mailing lists, source code control systems,
-      and issue tracking systems that are managed by, or on behalf of, the
-      Licensor for the purpose of discussing and improving the Work, but
-      excluding communication that is conspicuously marked or otherwise
-      designated in writing by the copyright owner as "Not a Contribution."
-
-      "Contributor" shall mean Licensor and any individual or Legal Entity
-      on behalf of whom a Contribution has been received by Licensor and
-      subsequently incorporated within the Work.
-
-   2. Grant of Copyright License. Subject to the terms and conditions of
-      this License, each Contributor hereby grants to You a perpetual,
-      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
-      copyright license to reproduce, prepare Derivative Works of,
-      publicly display, publicly perform, sublicense, and distribute the
-      Work and such Derivative Works in Source or Object form.
-
-   3. Grant of Patent License. Subject to the terms and conditions of
-      this License, each Contributor hereby grants to You a perpetual,
-      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
-      (except as stated in this section) patent license to make, have made,
-      use, offer to sell, sell, import, and otherwise transfer the Work,
-      where such license applies only to those patent claims licensable
-      by such Contributor that are necessarily infringed by their
-      Contribution(s) alone or by combination of their Contribution(s)
-      with the Work to which such Contribution(s) was submitted. If You
-      institute patent litigation against any entity (including a
-      cross-claim or counterclaim in a lawsuit) alleging that the Work
-      or a Contribution incorporated within the Work constitutes direct
-      or contributory patent infringement, then any patent licenses
-      granted to You under this License for that Work shall terminate
-      as of the date such litigation is filed.
-
-   4. Redistribution. You may reproduce and distribute copies of the
-      Work or Derivative Works thereof in any medium, with or without
-      modifications, and in Source or Object form, provided that You
-      meet the following conditions:
-
-      (a) You must give any other recipients of the Work or
-          Derivative Works a copy of this License; and
-
-      (b) You must cause any modified files to carry prominent notices
-          stating that You changed the files; and
-
-      (c) You must retain, in the Source form of any Derivative Works
-          that You distribute, all copyright, patent, trademark, and
-          attribution notices from the Source form of the Work,
-          excluding those notices that do not pertain to any part of
-          the Derivative Works; and
-
-      (d) If the Work includes a "NOTICE" text file as part of its
-          distribution, then any Derivative Works that You distribute must
-          include a readable copy of the attribution notices contained
-          within such NOTICE file, excluding those notices that do not
-          pertain to any part of the Derivative Works, in at least one
-          of the following places: within a NOTICE text file distributed
-          as part of the Derivative Works; within the Source form or
-          documentation, if provided along with the Derivative Works; or,
-          within a display generated by the Derivative Works, if and
-          wherever such third-party notices normally appear. The contents
-          of the NOTICE file are for informational purposes only and
-          do not modify the License. You may add Your own attribution
-          notices within Derivative Works that You distribute, alongside
-          or as an addendum to the NOTICE text from the Work, provided
-          that such additional attribution notices cannot be construed
-          as modifying the License.
-
-      You may add Your own copyright statement to Your modifications and
-      may provide additional or different license terms and conditions
-      for use, reproduction, or distribution of Your modifications, or
-      for any such Derivative Works as a whole, provided Your use,
-      reproduction, and distribution of the Work otherwise complies with
-      the conditions stated in this License.
-
-   5. Submission of Contributions. Unless You explicitly state otherwise,
-      any Contribution intentionally submitted for inclusion in the Work
-      by You to the Licensor shall be under the terms and conditions of
-      this License, without any additional terms or conditions.
-      Notwithstanding the above, nothing herein shall supersede or modify
-      the terms of any separate license agreement you may have executed
-      with Licensor regarding such Contributions.
-
-   6. Trademarks. This License does not grant permission to use the trade
-      names, trademarks, service marks, or product names of the Licensor,
-      except as required for reasonable and customary use in describing the
-      origin of the Work and reproducing the content of the NOTICE file.
-
-   7. Disclaimer of Warranty. Unless required by applicable law or
-      agreed to in writing, Licensor provides the Work (and each
-      Contributor provides its Contributions) on an "AS IS" BASIS,
-      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
-      implied, including, without limitation, any warranties or conditions
-      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
-      PARTICULAR PURPOSE. You are solely responsible for determining the
-      appropriateness of using or redistributing the Work and assume any
-      risks associated with Your exercise of permissions under this License.
-
-   8. Limitation of Liability. In no event and under no legal theory,
-      whether in tort (including negligence), contract, or otherwise,
-      unless required by applicable law (such as deliberate and grossly
-      negligent acts) or agreed to in writing, shall any Contributor be
-      liable to You for damages, including any direct, indirect, special,
-      incidental, or consequential damages of any character arising as a
-      result of this License or out of the use or inability to use the
-      Work (including but not limited to damages for loss of goodwill,
-      work stoppage, computer failure or malfunction, or any and all
-      other commercial damages or losses), even if such Contributor
-      has been advised of the possibility of such damages.
-
-   9. Accepting Warranty or Additional Liability. While redistributing
-      the Work or Derivative Works thereof, You may choose to offer,
-      and charge a fee for, acceptance of support, warranty, indemnity,
-      or other liability obligations and/or rights consistent with this
-      License. However, in accepting such obligations, You may act only
-      on Your own behalf and on Your sole responsibility, not on behalf
-      of any other Contributor, and only if You agree to indemnify,
-      defend, and hold each Contributor harmless for any liability
-      incurred by, or claims asserted against, such Contributor by reason
-      of your accepting any such warranty or additional liability.
-
-   END OF TERMS AND CONDITIONS
-
-   APPENDIX: How to apply the Apache License to your work.
-
-      To apply the Apache License to your work, attach the following
-      boilerplate notice, with the fields enclosed by brackets "[]"
-      replaced with your own identifying information. (Don't include
-      the brackets!)  The text should be enclosed in the appropriate
-      comment syntax for the file format. We also recommend that a
-      file or class name and description of purpose be included on the
-      same "printed page" as the copyright notice for easier
-      identification within third-party archives.
-
-   Copyright 2026 Dick Olsson
-
-   Licensed under the Apache License, Version 2.0 (the "License");
-   you may not use this file except in compliance with the License.
-   You may obtain a copy of the License at
-
-       http://www.apache.org/licenses/LICENSE-2.0
-
-   Unless required by applicable law or agreed to in writing, software
-   distributed under the License is distributed on an "AS IS" BASIS,
-   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-   See the License for the specific language governing permissions and
-   limitations under the License.
+MIT License
+
+Copyright (c) 2019 Zachary Rice
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/config/skill-postures.json

@@ -0,0 +1,28 @@
+{
+  "candidate-report": "draft",
+  "deck-create": "draft",
+  "deck-summarize": "brief",
+  "doc-collab": "brief",
+  "doc-create": "draft",
+  "draft-emails": "draft",
+  "extract-entities": "brief",
+  "hyprnote-follow": "brief",
+  "hyprnote-process": "brief",
+  "hyprnote-trim": "brief",
+  "manage-tasks": "brief",
+  "meeting-prep": "brief",
+  "organize-files": "draft",
+  "req-assess": "brief",
+  "req-decide": "brief",
+  "req-forget": "brief",
+  "req-scan": "brief",
+  "req-screen": "brief",
+  "req-track": "brief",
+  "req-workday": "brief",
+  "send-chat": "draft",
+  "sync-apple-calendar": "brief",
+  "sync-apple-mail": "brief",
+  "sync-teams": "brief",
+  "upstream-skill": "brief",
+  "weekly-update": "brief"
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@forwardimpact/outpost",
-  "version": "3.3.4",
+  "version": "3.5.0",
   "description": "Personal operations center — context from email, calendar, and knowledge assembled so preparation is continuous, not a morning scramble.",
   "homepage": "https://www.forwardimpact.team",
   "repository": {
@@ -45,9 +45,7 @@
   "scripts": {
     "start": "bun ./bin/fit-outpost.js",
     "status": "bun ./bin/fit-outpost.js status",
-    "build": "bun pkg/build.js",
-    "build:app": "bun pkg/build.js --app",
-    "build:pkg": "bun pkg/build.js --pkg"
+    "build": "bun pkg/build.js"
   },
   "dependencies": {
     "@forwardimpact/libcli": "^0.1.0",

package/src/agent-path.js

@@ -0,0 +1,42 @@
+/**
+ * agent-path — validate a config-supplied agent name before using it as a
+ * filesystem path component.
+ *
+ * The agent-state writer maps an agent name to a per-agent state filename.
+ * A name carrying `/` or `..` segments would let a rewritten `scheduler.json`
+ * direct writes outside `~/.cache/fit/outpost/state/`. This module validates
+ * and rejects rather than silently sanitising, so an unexpected path segment
+ * surfaces as an intrusion signal instead of a quietly rewritten filename.
+ */
+
+/** Raised when an agent name cannot map to a safe state-file prefix. */
+export class UnsafeAgentNameError extends Error {
+  /** @param {string} name */
+  constructor(name) {
+    super(`unsafe agent name for state path: ${JSON.stringify(name)}`);
+    this.name = "UnsafeAgentNameError";
+    this.agentName = name;
+  }
+}
+
+/**
+ * Map an agent name to a safe state-file prefix (hyphen → underscore).
+ * @param {string} name
+ * @returns {string} safe filename prefix
+ * @throws {UnsafeAgentNameError} when `name` is empty, non-string, or contains
+ *   `/`, `\`, `..`, NUL, or a leading `~`.
+ */
+export function agentNameToStatePrefix(name) {
+  if (
+    typeof name !== "string" ||
+    name.length === 0 ||
+    name.includes("/") ||
+    name.includes("\\") ||
+    name.includes("..") ||
+    name.includes("\0") ||
+    name.startsWith("~")
+  ) {
+    throw new UnsafeAgentNameError(String(name));
+  }
+  return name.replace(/-/g, "_");
+}

package/src/agent-runner.js

@@ -5,6 +5,24 @@
 import { resolve, join } from "node:path";
 import { homedir } from "node:os";
 import { isoTimestamp } from "@forwardimpact/libutil";
+import {
+  readPosture,
+  effectivePosture,
+  loadManifest,
+  draftSkills,
+} from "./posture.js";
+import { buildSpawnEnv } from "./spawn-env.js";
+
+/**
+ * System-prompt directive injected under the `brief` posture. Neutralises any
+ * draft-side prose in a materialised agent definition and forbids writing the
+ * posture record.
+ */
+const BRIEF_DIRECTIVE =
+  "Adoption posture: brief. Run only read-and-brief work. Do not draft or " +
+  "send content on the user's behalf for delivery to anyone else, do not move " +
+  "or write files outside the knowledge base, and never write the posture " +
+  "record (~/.fit/outpost/posture.json).";
 
 /** Spawn agent CLI processes, capture their output, and update agent state. */
 export class AgentRunner {
@@ -17,6 +35,8 @@ export class AgentRunner {
   #proc;
   #clock;
   #runtime;
+  #posturePath;
+  #manifestPath;
 
   /**
    * @param {Object | (() => Object | Promise<{default?: Object}>)} spawn -
@@ -28,8 +48,11 @@ export class AgentRunner {
    * @param {string} cacheDir - Cache directory for state files
    * @param {import("@forwardimpact/libutil/runtime").Runtime} runtime
    *   Injected runtime bag (uses `fs` (async), `proc`, `clock`).
+   * @param {{posturePath: string, manifestPath: string}} posture - Paths to the
+   *   posture record (read-only on the wake path) and the skill-posture
+   *   membership manifest.
    */
-  constructor(spawn, stateManager, logFn, cacheDir, runtime) {
+  constructor(spawn, stateManager, logFn, cacheDir, runtime, posture) {
     if (!spawn) throw new Error("spawn is required");
     if (!stateManager) throw new Error("stateManager is required");
     if (!logFn) throw new Error("logFn is required");
@@ -37,6 +60,10 @@ export class AgentRunner {
     if (!runtime?.fs) throw new Error("runtime.fs is required");
     if (!runtime?.proc) throw new Error("runtime.proc is required");
     if (!runtime?.clock) throw new Error("runtime.clock is required");
+    if (!posture?.posturePath)
+      throw new Error("posture.posturePath is required");
+    if (!posture?.manifestPath)
+      throw new Error("posture.manifestPath is required");
     this.#spawn = spawn;
     this.#stateManager = stateManager;
     this.#log = logFn;
@@ -45,6 +72,8 @@ export class AgentRunner {
     this.#proc = runtime.proc;
     this.#clock = runtime.clock;
     this.#runtime = runtime;
+    this.#posturePath = posture.posturePath;
+    this.#manifestPath = posture.manifestPath;
     this.#activeChildren = new Set();
   }
 
@@ -118,22 +147,25 @@ export class AgentRunner {
   }
 
   /**
-   * Build environment for a child process.
-   * Merges the current process env with config-level env overrides.
-   * Expands ~ in values to the user's home directory.
-   * @param {Record<string, string>} [configEnv]
-   * @returns {Record<string, string>}
+   * Resolve the spawn flags the recorded posture adds. Under `brief` (also the
+   * default when no posture is recorded), deny every draft-side skill by name
+   * and inject the brief directive — a deterministic gate the woken agent
+   * cannot override under `bypassPermissions`. Under `brief+draft`, add
+   * nothing. The posture record is read here, never written.
+   * @returns {Promise<string[]>} Extra args to append to the spawn argv.
    */
-  #buildSpawnEnv(configEnv) {
-    const env = { ...this.#proc.env };
-    if (configEnv) {
-      const home = homedir();
-      for (const [key, value] of Object.entries(configEnv)) {
-        const v = String(value);
-        env[key] = v.startsWith("~/") ? join(home, v.slice(2)) : v;
-      }
-    }
-    return env;
+  async #postureArgs() {
+    const posture = effectivePosture(
+      await readPosture(this.#fs, this.#posturePath),
+    );
+    if (posture !== "brief") return [];
+    const manifest = await loadManifest(this.#fs, this.#manifestPath);
+    const denied = draftSkills(manifest)
+      .map((s) => `Skill(${s})`)
+      .join(" ");
+    const args = ["--append-system-prompt", BRIEF_DIRECTIVE];
+    if (denied) args.unshift("--disallowedTools", denied);
+    return args;
   }
 
   /**
@@ -170,11 +202,21 @@ export class AgentRunner {
       "--agent",
       agentName,
       "--print",
+      ...(await this.#postureArgs()),
       "-p",
       "Observe and act.",
     ];
 
-    const env = this.#buildSpawnEnv(configEnv);
+    const { env, rejections } = buildSpawnEnv(configEnv, this.#proc.env);
+    for (const key of rejections) {
+      this.#log(
+        JSON.stringify({
+          event: "outpost.spawn_env.rejected",
+          key,
+          agent: agentName,
+        }),
+      );
+    }
     const spawnMod = await this.#resolveSpawn();
 
     try {
@@ -206,6 +248,7 @@ export class AgentRunner {
           stdout,
           agentName,
           this.#cacheDir,
+          this.#log,
         );
       } else {
         const errMsg = stderr || stdout || `Exit code ${exitCode}`;

package/src/kb-manager.js

@@ -179,13 +179,11 @@ export class KBManager {
     }
 
     await this.#ensureDir(dest);
-    for (const d of [
-      "knowledge/People",
-      "knowledge/Organizations",
-      "knowledge/Projects",
-      "knowledge/Topics",
-      "knowledge/Briefings",
-    ])
+    // Create the top-level roots only. `Knowledge/` is the shared graph (synced
+    // with the team); `Drafts/` and `Briefings/` are personal and local. Entity
+    // subdirectories (People, Organizations, ...) are created on demand by the
+    // skills that write into them.
+    for (const d of ["Knowledge", "Drafts", "Briefings"])
       await this.#ensureDir(join(dest, d));
 
     await this.copyBundledFiles(templateDir, dest);

package/src/outpost.js

@@ -27,6 +27,13 @@ import { AgentRunner } from "./agent-runner.js";
 import { Scheduler, formatLocalTime } from "./scheduler.js";
 import { KBManager } from "./kb-manager.js";
 import { SocketServer, requestShutdown } from "./socket-server.js";
+import {
+  readPosture,
+  writePosture,
+  effectivePosture,
+  loadManifest,
+  POSTURES,
+} from "./posture.js";
 
 const SHARE_DIR = "/usr/local/share/fit-outpost";
 
@@ -65,6 +72,11 @@ function buildDefinition(version) {
       },
       { name: "validate", description: "Validate agent definitions exist" },
       { name: "status", description: "Show agent status" },
+      {
+        name: "posture",
+        args: "[brief|brief+draft]",
+        description: "Show or set the adoption posture (brief or brief+draft)",
+      },
     ],
     globalOptions: {
       help: { type: "boolean", short: "h", description: "Show this help" },
@@ -147,10 +159,12 @@ export async function run(runtime, version) {
   const OUTPOST_HOME = join(HOME, ".fit", "outpost");
   const CONFIG_PATH = join(OUTPOST_HOME, "scheduler.json");
   const STATE_PATH = join(OUTPOST_HOME, "state.json");
+  const POSTURE_PATH = join(OUTPOST_HOME, "posture.json");
   const LOG_DIR = join(OUTPOST_HOME, "logs");
   const CACHE_DIR = join(HOME, ".cache", "fit", "outpost");
   const SOCKET_PATH = join(OUTPOST_HOME, "outpost.sock");
   const PKG_DIR = dirname(import.meta.dirname);
+  const MANIFEST_PATH = join(PKG_DIR, "config", "skill-postures.json");
 
   // --- Logging ---------------------------------------------------------------
   await fs.mkdir(LOG_DIR, { recursive: true });
@@ -190,6 +204,7 @@ export async function run(runtime, version) {
     log,
     CACHE_DIR,
     runtime,
+    { posturePath: POSTURE_PATH, manifestPath: MANIFEST_PATH },
   );
   const scheduler = new Scheduler(
     loadConfig,
@@ -333,7 +348,12 @@ export async function run(runtime, version) {
   async function showStatus() {
     const config = await loadConfig();
     const state = await stateManager.load();
+    const posture = await readPosture(fs, POSTURE_PATH);
     logger.info("\nOutpost Scheduler\n==================\n");
+    // The posture must be observable on a line matching
+    // `^posture: (brief|brief+draft|unset)$`, so write it as plain text to
+    // stdout rather than through the RFC5424-prefixed logger.
+    proc.stdout.write(`posture: ${posture ?? "unset"}\n`);
 
     const agents = Object.entries(config.agents || {});
     if (agents.length === 0) {
@@ -425,7 +445,7 @@ export async function run(runtime, version) {
         );
         return 1;
       }
-      await agentRunner.wake(args[0], agent, state);
+      await agentRunner.wake(args[0], agent, state, config.env);
       return 0;
     },
     init: async () => {
@@ -440,6 +460,12 @@ export async function run(runtime, version) {
         proc.stderr.write(result.error + "\n");
         return result.code;
       }
+      // A fresh init defaults the posture to `brief`, the opted-into trust
+      // contract. Only write when none is recorded so re-running never flips
+      // an existing posture.
+      if ((await readPosture(fs, POSTURE_PATH)) === null) {
+        await writePosture(fs, POSTURE_PATH, "brief");
+      }
       return 0;
     },
     update: () => runUpdate(args),
@@ -449,6 +475,22 @@ export async function run(runtime, version) {
     },
     validate,
     status: showStatus,
+    posture: async () => {
+      if (!args[0]) {
+        const current = effectivePosture(await readPosture(fs, POSTURE_PATH));
+        proc.stdout.write(`posture: ${current}\n`);
+        return 0;
+      }
+      if (!POSTURES.includes(args[0])) {
+        cli.usageError(
+          `invalid posture "${args[0]}"; expected one of ${POSTURES.join(", ")}`,
+        );
+        return 2;
+      }
+      await writePosture(fs, POSTURE_PATH, args[0]);
+      logger.info(`Posture recorded: ${args[0]}`);
+      return 0;
+    },
   };
 
   const handler = COMMANDS[command];

package/src/posture.js

@@ -0,0 +1,77 @@
+/**
+ * Posture — read/write the adoption-posture record and resolve the
+ * draft-side deny set from the skill-posture manifest.
+ *
+ * The two committed posture strings are the only valid values; they appear
+ * verbatim in CLI flags, `status` output, and landing-page copy.
+ */
+
+/** The two adoption postures, in the order the spec commits them. */
+export const POSTURES = ["brief", "brief+draft"];
+
+/** Default for a posture-less read (interim window / fresh-read fallback). */
+export const DEFAULT_POSTURE = "brief";
+
+/**
+ * Read the recorded posture from disk.
+ * @param {import("@forwardimpact/libutil/runtime").Runtime["fs"]} fs
+ * @param {string} posturePath - Path to `posture.json`.
+ * @returns {Promise<"brief"|"brief+draft"|null>} The recorded posture, or
+ *   `null` when the file is absent or its contents are not a committed string.
+ */
+export async function readPosture(fs, posturePath) {
+  try {
+    const raw = JSON.parse(await fs.readFile(posturePath, "utf8"));
+    return POSTURES.includes(raw?.posture) ? raw.posture : null;
+  } catch {
+    return null;
+  }
+}
+
+/**
+ * Persist a posture to disk. The record is its own file so the wake path can
+ * open it read-only and never alter the recorded posture.
+ * @param {import("@forwardimpact/libutil/runtime").Runtime["fs"]} fs
+ * @param {string} posturePath - Path to `posture.json`.
+ * @param {string} value - Must be one of {@link POSTURES}.
+ * @returns {Promise<void>}
+ */
+export async function writePosture(fs, posturePath, value) {
+  if (!POSTURES.includes(value)) {
+    throw new Error(
+      `invalid posture "${value}"; expected one of ${POSTURES.join(", ")}`,
+    );
+  }
+  await fs.writeFile(posturePath, JSON.stringify({ posture: value }) + "\n");
+}
+
+/**
+ * Resolve the effective posture, applying the default when no posture has been
+ * recorded so a posture-less install behaves as `brief`.
+ * @param {"brief"|"brief+draft"|null} stored
+ * @returns {"brief"|"brief+draft"}
+ */
+export function effectivePosture(stored) {
+  return stored ?? DEFAULT_POSTURE;
+}
+
+/**
+ * Load the skill-posture membership manifest.
+ * @param {import("@forwardimpact/libutil/runtime").Runtime["fs"]} fs
+ * @param {string} manifestPath - Path to `skill-postures.json`.
+ * @returns {Promise<Record<string, "brief"|"draft">>}
+ */
+export async function loadManifest(fs, manifestPath) {
+  return JSON.parse(await fs.readFile(manifestPath, "utf8"));
+}
+
+/**
+ * The skills the manifest classifies as draft-side.
+ * @param {Record<string, "brief"|"draft">} manifest
+ * @returns {string[]} Skill names whose class is `"draft"`.
+ */
+export function draftSkills(manifest) {
+  return Object.entries(manifest)
+    .filter(([, cls]) => cls === "draft")
+    .map(([name]) => name);
+}