create-egregore 0.21.0-runtime-mvp.8 → 0.21.0-runtime-mvp.10

package/assets/egregore-launcher.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-// egregore-launcher-version: 0.21.0-runtime-mvp.8
+// egregore-launcher-version: 0.21.0-runtime-mvp.10
 //
 // egregore — launch and browse Egregore instances from your terminal.
 // Installed by create-egregore. Reads ~/.egregore/instances.json.
@@ -35,7 +35,7 @@ const crypto = require("node:crypto");
 const { spawnSync, spawn } = require("node:child_process");
 const readline = require("node:readline");
 
-const VERSION = "0.21.0-runtime-mvp.8";
+const VERSION = "0.21.0-runtime-mvp.10";
 const REGISTRY = path.join(os.homedir(), ".egregore", "instances.json");
 const DEFAULT_FILE = path.join(os.homedir(), ".egregore", "default");
 const UPDATE_CACHE_FILE = path.join(os.homedir(), ".egregore", "update-check.json");
@@ -2787,13 +2787,13 @@ async function cmdSettingsRuntime(inst, args) {
 async function cmdSettings(args) {
   const registry = readRegistry();
   if (registry.length === 0) die("no egregores installed yet.\n  run: npx -y create-egregore@latest");
-  const DOMAINS = new Set(["hosting", "workflow", "repo", "admin", "people", "dump", "runtime", "privacy", "telemetry", "boundary"]);
+  const DOMAINS = new Set(["hosting", "workflow", "repo", "admin", "people", "dump", "runtime", "privacy", "telemetry", "boundary", "posture"]);
   let rest = args.slice();
   let slug = "";
   if (rest.length && !DOMAINS.has(rest[0])) { slug = rest[0]; rest = rest.slice(1); }
   const inst = resolveInviteInstance(registry, slug);
   if (!inst) {
-    die(`multiple egregores installed; choose one:\n  egregore settings <slug> [runtime|hosting|workflow|repo|admin|people|privacy|telemetry]\n  run: egregore ls`);
+    die(`multiple egregores installed; choose one:\n  egregore settings <slug> [runtime|hosting|workflow|repo|admin|people|privacy|posture|telemetry]\n  run: egregore ls`);
   }
   // Runtime update is Runtime-owned state, not org config — it routes to the
   // upgrade bridge instead of bin/settings.sh.
@@ -3208,14 +3208,58 @@ function renderSettingsPanel({ inst, data, cursor, view, domain, items, listCurs
     lines.push(boxLine(`${BOLD}${view === "privacy" ? "Privacy & access" : "Telemetry"}${RESET}`, innerWidth, margin));
     lines.push(emptyBoxLine(innerWidth, margin));
     if (mode === "shareinfo") {
-      const shareLines = (data && data.shareLines) || ["share proposal unavailable"];
+      const proposal = data && data.shareProposal;
       lines.push(boxLine(`${BOLD}Share proposal${RESET} ${DIM}(nothing has been sent)${RESET}`, innerWidth, margin));
       lines.push(emptyBoxLine(innerWidth, margin));
-      for (const line of shareLines.slice(0, 16)) {
-        lines.push(boxLine(`${line.includes("--confirm") ? "" : DIM}${line}${RESET}`, innerWidth, margin));
+      if (proposal && proposal.token) {
+        lines.push(boxLine(`${DIM}Target: ${proposal.target}${RESET}`, innerWidth, margin));
+        lines.push(boxLine(`${DIM}Events: ${proposal.events} · Bytes: ${proposal.bytes}${RESET}`, innerWidth, margin));
+        lines.push(boxLine(`${DIM}Dataset SHA-256: ${proposal.dataset_sha256}${RESET}`, innerWidth, margin));
+        lines.push(boxLine(`${DIM}Metric fields: ${proposal.metric_fields}${RESET}`, innerWidth, margin));
+        lines.push(boxLine(`${DIM}Excluded by validation: ${proposal.excluded}${RESET}`, innerWidth, margin));
+        lines.push(emptyBoxLine(innerWidth, margin));
+        if (input) {
+          lines.push(boxLine(`${YELLOW}${input}${RESET}`, innerWidth, margin));
+        } else {
+          lines.push(boxLine(`${DIM}Nothing is sent until you confirm here. ${RESET}${BOLD}s${RESET}${DIM} send now · esc back${RESET}`, innerWidth, margin));
+        }
+      } else {
+        // Older adapter without a machine-readable proposal: show its prose
+        // and fall back to the terminal confirm instruction it printed.
+        const shareLines = (data && data.shareLines) || ["share proposal unavailable"];
+        for (const line of shareLines.slice(0, 16)) {
+          lines.push(boxLine(`${line.includes("--confirm") ? "" : DIM}${line}${RESET}`, innerWidth, margin));
+        }
+        lines.push(emptyBoxLine(innerWidth, margin));
+        lines.push(boxLine(`${DIM}Sharing completes only by running the confirm command above in a terminal. ← back${RESET}`, innerWidth, margin));
       }
       lines.push(emptyBoxLine(innerWidth, margin));
-      lines.push(boxLine(`${DIM}Sharing completes only by running the confirm command above in a terminal. ← back${RESET}`, innerWidth, margin));
+      lines.push(`${margin}${DIM}└${"─".repeat(innerWidth)}┘${RESET}`);
+      return lines;
+    }
+    if (mode === "posture") {
+      const current = (data && data.privacySnapshot && data.privacySnapshot.boundary && data.privacySnapshot.boundary.posture) || "standard";
+      lines.push(boxLine(`${BOLD}Boundary posture${RESET} ${DIM}— how far reads may reach outside this egregore${RESET}`, innerWidth, margin));
+      lines.push(emptyBoxLine(innerWidth, margin));
+      const options = [
+        ["strict", "reads outside the project, memory, and managed repos always ask first"],
+        ["standard", "inbox folders (Downloads, Desktop) readable without asking; everything else asks first"],
+        ["open", "reads outside the boundary allowed without asking; writes outside still ask"],
+      ];
+      options.forEach(([name, why], i) => {
+        const sel = i === (listCursor || 0);
+        const mark = name === current ? `${GREEN}● ${RESET}` : "  ";
+        lines.push(boxLine(`${sel ? `${CYAN}❯${RESET} ` : "  "}${mark}${sel ? BOLD : ""}${name}${RESET}`, innerWidth, margin));
+        lines.push(boxLine(`      ${DIM}${why}${RESET}`, innerWidth, margin));
+      });
+      lines.push(boxLine(`   ${DIM}other Egregore instances stay isolated under every posture${RESET}`, innerWidth, margin));
+      lines.push(emptyBoxLine(innerWidth, margin));
+      if (input) {
+        lines.push(boxLine(`${YELLOW}${input}${RESET}`, innerWidth, margin));
+      } else {
+        if (notice) lines.push(boxLine(notice, innerWidth, margin));
+        lines.push(boxLine(`${DIM}↑↓ nav · ${RESET}${BOLD}enter${RESET}${DIM} select · esc cancel${RESET}`, innerWidth, margin));
+      }
       lines.push(emptyBoxLine(innerWidth, margin));
       lines.push(`${margin}${DIM}└${"─".repeat(innerWidth)}┘${RESET}`);
       return lines;
@@ -3300,7 +3344,7 @@ function renderSettingsPanel({ inst, data, cursor, view, domain, items, listCurs
       lines.push(boxLine(
         locked
           ? `${DIM}Boundary policy is managed by your organization. ← back · q quit${RESET}`
-          : `${DIM}${RESET}${BOLD}a${RESET}${DIM} add personal read root · ${RESET}${BOLD}r${RESET}${DIM} remove · ← back · q quit${RESET}`,
+          : `${DIM}${RESET}${BOLD}a${RESET}${DIM} add personal read root · ${RESET}${BOLD}r${RESET}${DIM} remove · ${RESET}${BOLD}p${RESET}${DIM} boundary posture · ← back · q quit${RESET}`,
         innerWidth, margin,
       ));
     } else {
@@ -3966,16 +4010,49 @@ async function browser(args = {}) {
               render(); return;
             }
             if (chunk === "s") {
-              const r = runTelemetry(S.settingsInst, ["share"]);
-              const shareLines = ((r && (r.stdout || r.stderr)) || "share preview unavailable").split("\n").filter(Boolean);
-              S.settingsData = { ...(S.settingsData || {}), shareLines };
-              S.settingsMode = "shareinfo"; S.settingsNotice = "";
+              // Prefer the machine-readable proposal so the send can complete
+              // here; fall back to the adapter's prose for older runtimes.
+              let proposal = null;
+              const rj = runTelemetry(S.settingsInst, ["share", "--json"]);
+              if (rj && rj.status === 0 && rj.stdout) {
+                try { proposal = JSON.parse(rj.stdout); } catch { proposal = null; }
+              }
+              if (proposal && proposal.token) {
+                S.settingsData = { ...(S.settingsData || {}), shareProposal: proposal, shareLines: null };
+              } else {
+                const r = runTelemetry(S.settingsInst, ["share"]);
+                const shareLines = ((r && (r.stdout || r.stderr)) || "share preview unavailable").split("\n").filter(Boolean);
+                S.settingsData = { ...(S.settingsData || {}), shareProposal: null, shareLines };
+              }
+              S.settingsMode = "shareinfo"; S.settingsNotice = ""; S.settingsInput = ""; S.settingsAction = "";
               render(); return;
             }
             return;
           }
           if (S.settingsMode === "shareinfo") {
-            if (key.name === "escape" || key.name === "left") { S.settingsMode = "events"; render(); return; }
+            const proposal = S.settingsData && S.settingsData.shareProposal;
+            if (S.settingsAction === "tele-share" && S.settingsInput) {
+              if (chunk === "y" || chunk === "Y") {
+                const r = runTelemetry(S.settingsInst, ["share", "--confirm", proposal.token]);
+                S.settingsNotice = r && r.status === 0
+                  ? `${GREEN}${((r.stdout || "shared").split("\n")[0])}${RESET}`
+                  : `${YELLOW}${(((r && (r.stderr || r.stdout)) || "share failed").split("\n")[0])}${RESET}`;
+                S.settingsAction = ""; S.settingsInput = "";
+                S.settingsData = { ...(S.settingsData || {}), shareProposal: null, telemetryEvents: telemetryEvents(S.settingsInst, 100) };
+                S.settingsMode = "events"; S.settingsListCursor = 0;
+                refreshPanel(); render(); return;
+              }
+              S.settingsAction = ""; S.settingsInput = ""; render(); return;
+            }
+            if (chunk === "s" && proposal && proposal.token) {
+              S.settingsAction = "tele-share";
+              S.settingsInput = `Send ${proposal.events} event(s) now? Local events are retained. [y/N]`;
+              render(); return;
+            }
+            if (key.name === "escape" || key.name === "left") {
+              S.settingsAction = ""; S.settingsInput = "";
+              S.settingsMode = "events"; render(); return;
+            }
             return;
           }
           if (S.settingsMode === "pickdir") {
@@ -4003,6 +4080,34 @@ async function browser(args = {}) {
             }
             return;
           }
+          if (S.settingsMode === "posture") {
+            const POSTURES = ["strict", "standard", "open"];
+            const current = (S.settingsData.privacySnapshot && S.settingsData.privacySnapshot.boundary && S.settingsData.privacySnapshot.boundary.posture) || "standard";
+            if (S.settingsAction === "posture" && S.settingsInput) {
+              if (chunk === "y" || chunk === "Y") {
+                const r = runSettings(S.settingsInst, ["posture", S.settingsPendingDir]);
+                S.settingsNotice = r && r.status === 0
+                  ? `${GREEN}${((r.stdout || "done").split("\n")[0])}${RESET}`
+                  : `${YELLOW}${(((r && (r.stderr || r.stdout)) || "posture change failed").split("\n")[0])}${RESET}`;
+                S.settingsAction = ""; S.settingsInput = ""; S.settingsPendingDir = "";
+                S.settingsMode = "browse";
+                refreshPanel(); render(); return;
+              }
+              S.settingsAction = ""; S.settingsInput = ""; S.settingsPendingDir = ""; render(); return;
+            }
+            if (key.name === "escape" || key.name === "left") { S.settingsMode = "browse"; S.settingsListCursor = 0; S.settingsNotice = ""; render(); return; }
+            if (key.name === "up" || key.name === "k") { S.settingsListCursor = ((S.settingsListCursor || 0) + 2) % 3; render(); return; }
+            if (key.name === "down" || key.name === "j") { S.settingsListCursor = ((S.settingsListCursor || 0) + 1) % 3; render(); return; }
+            if (key.name === "return") {
+              const chosen = POSTURES[Math.min(S.settingsListCursor || 0, 2)];
+              if (chosen === current) { S.settingsNotice = `${DIM}already on ${chosen}${RESET}`; render(); return; }
+              S.settingsAction = "posture";
+              S.settingsPendingDir = chosen;
+              S.settingsInput = `Switch boundary posture to ${chosen.toUpperCase()} for the whole organization? This edits the org's committed egregore.json for everyone. [y/N]`;
+              render(); return;
+            }
+            return;
+          }
           if (S.settingsMode === "pickroot") {
             const roots = (S.settingsData.privacySnapshot && S.settingsData.privacySnapshot.boundary && S.settingsData.privacySnapshot.boundary.personal_read_roots) || [];
             if (key.name === "escape" || key.name === "left") { S.settingsMode = "browse"; S.settingsListCursor = 0; render(); return; }
@@ -4050,6 +4155,13 @@ async function browser(args = {}) {
             if (!locked && chunk === "r") {
               S.settingsMode = "pickroot"; S.settingsListCursor = 0; S.settingsNotice = ""; render(); return;
             }
+            if (!locked && chunk === "p") {
+              const current = (S.settingsData && S.settingsData.privacySnapshot && S.settingsData.privacySnapshot.boundary && S.settingsData.privacySnapshot.boundary.posture) || "standard";
+              S.settingsMode = "posture";
+              S.settingsListCursor = Math.max(0, ["strict", "standard", "open"].indexOf(current));
+              S.settingsNotice = ""; S.settingsInput = ""; S.settingsAction = "";
+              render(); return;
+            }
             return;
           }
           // telemetry view

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-egregore",
-  "version": "0.21.0-runtime-mvp.8",
+  "version": "0.21.0-runtime-mvp.10",
   "description": "Set up Egregore for your team in one command — installs the egregore launcher and your choice of Claude Code, Codex, or Pi.",
   "license": "MIT",
   "bin": {

package/runtime/claude/bin/search.sh

@@ -235,6 +235,21 @@ cmd_query() {
     } >&2
     return "$query_rc"
   fi
+  # Content-free query telemetry: mode, duration, result count. Never the
+  # query text. This is what makes Runtime/QMD retrieval visible in the
+  # telemetry event list instead of only legacy graph_query rows.
+  local _tele_count _tele_ms
+  _tele_ms=$(( ($(date +%s) - t0) * 1000 ))
+  _tele_count=$(printf '%s' "$out" | jq 'if type == "array" then length elif type == "object" then (.results // [] | length) else empty end' 2>/dev/null || true)
+  if [[ "$_tele_count" =~ ^[0-9]+$ ]]; then
+    bash "$SCRIPT_DIR/bin/telemetry.sh" emit "query" \
+      "$(jq -n --arg mode "$label" --argjson d "$_tele_ms" --argjson c "$_tele_count" \
+        '{mode:$mode, duration_ms:$d, count:$c}')" 2>/dev/null &
+  else
+    bash "$SCRIPT_DIR/bin/telemetry.sh" emit "query" \
+      "$(jq -n --arg mode "$label" --argjson d "$_tele_ms" '{mode:$mode, duration_ms:$d}')" 2>/dev/null &
+  fi
+
   [ "$enrich" = 1 ] && emit="_enrich"
   if [ "$context_packet" = 1 ]; then
     local packet

package/runtime/claude/bin/settings.sh

@@ -59,6 +59,7 @@ settings.sh — Egregore instance settings
   settings.sh repo   list | add <name> [description] | remove <name>
   settings.sh admin  list | add <github-handle> | remove <github-handle>
   settings.sh people list | add <github-handle> | remove <github-handle>
+  settings.sh posture status|strict|standard|open   org-wide boundary posture
   settings.sh dump                         full snapshot (JSON)
 
   --json    machine-readable output for status/list
@@ -145,7 +146,7 @@ cmd_workflow() {
           || _die "cannot switch workflow: origin/main does not exist or could not be reached" 1
         _save '.base_branch = "main"'
       fi
-      echo "Git workflow: SIMPLE — pull requests now target main"
+      echo "Git workflow: SIMPLE — pull requests now target main · /save shares it with the org"
       ;;
     staged)
       if [ "$base" != "develop" ]; then
@@ -159,7 +160,7 @@ cmd_workflow() {
       elif ! jq -e 'has("base_branch")' "$CONFIG" >/dev/null 2>&1; then
         _save '.base_branch = "develop"'
       fi
-      echo "Git workflow: STAGED — pull requests now target develop; releases promote to main"
+      echo "Git workflow: STAGED — pull requests now target develop; releases promote to main · /save shares it with the org"
       ;;
     *) _die "usage: settings.sh workflow status|simple|staged" 1 ;;
   esac
@@ -441,6 +442,38 @@ cmd_privacy() {
     }'
 }
 
+# ── boundary posture (org-wide) ──────────────────────────────────────────
+# Edits committed egregore.json for the whole organization. `locked: true`
+# removes the change path entirely — posture is then org-policy managed.
+
+cmd_posture() {
+  local action="${1:-status}" current
+  current="$(jq -r '.boundary.posture // "standard"' "$CONFIG" 2>/dev/null || echo standard)"
+  case "$current" in strict|standard|open) ;; *) current="standard" ;; esac
+  case "$action" in
+    status)
+      if [ "$JSON" = 1 ]; then
+        jq -n --arg posture "$current" \
+          --argjson locked "$(_boundary_locked && echo true || echo false)" \
+          '{domain:"posture", posture:$posture, locked:$locked}'
+      else
+        echo "Boundary posture: $current"
+        _boundary_locked && echo "(organization boundary policy is locked — posture cannot change)"
+      fi
+      ;;
+    strict|standard|open)
+      if _boundary_locked; then
+        _die "boundary policy is managed by your organization and locked; posture cannot change" 1
+      fi
+      if [ "$action" != "$current" ]; then
+        _save '.boundary = ((.boundary // {}) + {posture: $p})' --arg p "$action"
+      fi
+      echo "Boundary posture: $action · applies to new sessions · /save shares it with the org"
+      ;;
+    *) _die "usage: settings.sh posture status|strict|standard|open" 1 ;;
+  esac
+}
+
 # ── personal boundary read roots ─────────────────────────────────────────
 # Personal-only: edits .egregore-boundary.local.json for the current member.
 # Respects org `locked: true` (no personal expansion), and never accepts a
@@ -525,8 +558,9 @@ case "$DOMAIN" in
   admin)   cmd_admin "$@" ;;
   people)  cmd_people "$@" ;;
   privacy) cmd_privacy ;;
+  posture) cmd_posture "$@" ;;
   boundary) cmd_boundary "$@" ;;
   dump)    cmd_dump ;;
   ""|-h|--help|help) usage 0 ;;
-  *) _die "unknown settings domain: '$DOMAIN' (try: hosting, relay, workflow, repo, admin, people, privacy, boundary, dump)" 1 ;;
+  *) _die "unknown settings domain: '$DOMAIN' (try: hosting, relay, workflow, repo, admin, people, privacy, posture, boundary, dump)" 1 ;;
 esac

package/runtime/claude/bin/telemetry.sh

@@ -27,6 +27,10 @@ fi
 BUFFER_FILE="$BUFFER_DIR/telemetry.jsonl"
 LOCK_DIR="$BUFFER_DIR/telemetry.lock"
 SHARE_CONSENT_FILE="$BUFFER_DIR/telemetry-share-consent.json"
+# Exact dataset pinned at proposal time. The confirm step sends this snapshot,
+# so events emitted between proposal and confirm (attendant, other sessions)
+# can never invalidate — or silently join — a disclosed share.
+SHARE_STAGED_FILE="$BUFFER_DIR/telemetry.share-staged.jsonl"
 STATE_FILE="${EGREGORE_STATE_FILE:-$SCRIPT_DIR/.egregore-state.json}"
 CONFIG="${EGREGORE_CONFIG_FILE:-$SCRIPT_DIR/egregore.json}"
 ENV_FILE="${EGREGORE_ENV_FILE:-$SCRIPT_DIR/.env}"
@@ -230,7 +234,8 @@ _validate_metrics() {
 }
 
 _validate_buffer() {
-  [ -s "$BUFFER_FILE" ] || return 0
+  local target="${1:-$BUFFER_FILE}"
+  [ -s "$target" ] || return 0
   jq -e --arg schema "$SCHEMA_VERSION" --argjson allowed "$ALLOWED_METRICS_JSON" '
     def safe_id:
       type == "string" and length > 0 and length <= 256 and
@@ -264,7 +269,7 @@ _validate_buffer() {
       (.data | safe_metrics) and (.ts | type == "string") and
       (.type | safe_id) and (.sid | safe_id) and (.org | safe_id) and (.user | safe_id)
     end
-  ' "$BUFFER_FILE" >/dev/null 2>&1
+  ' "$target" >/dev/null 2>&1
 }
 
 cmd_emit() {
@@ -422,7 +427,7 @@ cmd_clear() {
     echo "Could not acquire the telemetry lock; nothing was cleared." >&2
     return 1
   fi
-  rm -f "$BUFFER_FILE" "$SHARE_CONSENT_FILE"
+  rm -f "$BUFFER_FILE" "$SHARE_CONSENT_FILE" "$SHARE_STAGED_FILE"
   _unlock
   echo "Local telemetry buffer cleared."
 }
@@ -484,7 +489,7 @@ _resolve_share_target() {
 }
 
 cmd_share() {
-  local confirmation="" requested_endpoint="" allow_legacy_relay="false"
+  local confirmation="" requested_endpoint="" allow_legacy_relay="false" json_output="false"
   while [ "$#" -gt 0 ]; do
     case "$1" in
       --confirm)
@@ -499,6 +504,10 @@ cmd_share() {
         allow_legacy_relay="true"
         shift
         ;;
+      --json)
+        json_output="true"
+        shift
+        ;;
       *)
         echo "Unknown share option: $1" >&2
         return 2
@@ -521,31 +530,35 @@ cmd_share() {
     https://*|http://127.0.0.1*|http://localhost*|http://\[::1\]*) ;;
     *) echo "Share endpoint must use https (or loopback http)." >&2; return 2 ;;
   esac
-  if ! _validate_buffer; then
+  # Proposal validates the live buffer it is about to stage; confirm validates
+  # the staged snapshot it is about to send — never the moving buffer.
+  if [ -z "$confirmation" ] && ! _validate_buffer; then
     echo "Share blocked: the local buffer contains an invalid or content-bearing event." >&2
     return 2
   fi
-
-  local count=0 size=0 dataset_sha256=""
-  if [ -s "$BUFFER_FILE" ]; then
-    count=$(grep -c '^{' "$BUFFER_FILE" 2>/dev/null || true)
-    size=$(wc -c < "$BUFFER_FILE" 2>/dev/null | tr -d ' ')
-    dataset_sha256=$(_sha256_file "$BUFFER_FILE")
-  else
-    local empty_file="$BUFFER_DIR/telemetry.empty.$$"
-    mkdir -p "$BUFFER_DIR"
-    : > "$empty_file"
-    dataset_sha256=$(_sha256_file "$empty_file")
-    rm -f "$empty_file"
+  if [ -n "$confirmation" ] && ! _validate_buffer "$SHARE_STAGED_FILE"; then
+    echo "Share blocked: the staged dataset contains an invalid or content-bearing event." >&2
+    return 2
   fi
 
+  local count=0 size=0 dataset_sha256=""
   if [ -z "$confirmation" ]; then
-    local fields="none"
+    mkdir -p "$BUFFER_DIR"
     if [ -s "$BUFFER_FILE" ]; then
+      cp "$BUFFER_FILE" "$SHARE_STAGED_FILE"
+    else
+      : > "$SHARE_STAGED_FILE"
+    fi
+    chmod 600 "$SHARE_STAGED_FILE"
+    count=$(grep -c '^{' "$SHARE_STAGED_FILE" 2>/dev/null || true)
+    size=$(wc -c < "$SHARE_STAGED_FILE" 2>/dev/null | tr -d ' ')
+    dataset_sha256=$(_sha256_file "$SHARE_STAGED_FILE")
+    local fields="none"
+    if [ -s "$SHARE_STAGED_FILE" ]; then
       fields=$(jq -rs '
         [.[].metrics // .[].data // {} | keys[]] | unique |
         if length == 0 then "none" else map("metrics." + .) | join(", ") end
-      ' "$BUFFER_FILE" 2>/dev/null || echo "unable to inspect")
+      ' "$SHARE_STAGED_FILE" 2>/dev/null || echo "unable to inspect")
     fi
     local token token_sha256 expires_at
     token=$(_random_token)
@@ -561,6 +574,25 @@ cmd_share() {
       > "$SHARE_CONSENT_FILE"
     chmod 600 "$SHARE_CONSENT_FILE"
 
+    if [ "$json_output" = "true" ]; then
+      # Machine-readable proposal for thin surfaces (the launcher). Same
+      # consent protocol: the token here is the only place it exists, and a
+      # send still requires a separate explicit `share --confirm`.
+      jq -n \
+        --arg target "$endpoint" \
+        --argjson events "${count:-0}" \
+        --argjson bytes "${size:-0}" \
+        --arg dataset_sha256 "$dataset_sha256" \
+        --arg metric_fields "$fields" \
+        --arg token "$token" \
+        --argjson expires_at "$expires_at" \
+        '{proposal:true, sent:false, target:$target, events:$events, bytes:$bytes,
+          dataset_sha256:$dataset_sha256, metric_fields:$metric_fields,
+          excluded:"prompts, content, passages, file paths, arguments, secrets, env values",
+          token:$token, expires_at:$expires_at}'
+      return 0
+    fi
+
     echo "Telemetry share proposal (nothing sent):"
     echo ""
     echo "  Target: $endpoint"
@@ -577,10 +609,14 @@ cmd_share() {
     return 0
   fi
 
-  if [ ! -f "$SHARE_CONSENT_FILE" ]; then
+  if [ ! -f "$SHARE_CONSENT_FILE" ] || [ ! -f "$SHARE_STAGED_FILE" ]; then
     echo "Share blocked: run share without --confirm to inspect and prepare this dataset first." >&2
     return 2
   fi
+  # The staged snapshot is the disclosed dataset: exactly what the proposal
+  # named is what ships, and later buffer growth cannot invalidate it.
+  count=$(grep -c '^{' "$SHARE_STAGED_FILE" 2>/dev/null || true)
+  dataset_sha256=$(_sha256_file "$SHARE_STAGED_FILE")
   local expected_target expected_dataset expected_token expires_at actual_token
   expected_target=$(jq -r '.target // empty' "$SHARE_CONSENT_FILE")
   expected_dataset=$(jq -r '.dataset_sha256 // empty' "$SHARE_CONSENT_FILE")
@@ -588,7 +624,7 @@ cmd_share() {
   expires_at=$(jq -r '.expires_at // 0' "$SHARE_CONSENT_FILE")
   actual_token=$(_sha256_text "$confirmation")
   if [ "$(date +%s)" -gt "$expires_at" ] 2>/dev/null; then
-    rm -f "$SHARE_CONSENT_FILE"
+    rm -f "$SHARE_CONSENT_FILE" "$SHARE_STAGED_FILE"
     echo "Share blocked: confirmation expired; prepare a new share." >&2
     return 2
   fi
@@ -598,7 +634,7 @@ cmd_share() {
   fi
 
   local share_file="$BUFFER_DIR/telemetry.share.$$"
-  if [ -s "$BUFFER_FILE" ]; then
+  if [ -s "$SHARE_STAGED_FILE" ]; then
     jq -c --arg schema "$SCHEMA_VERSION" '
       if .schema_version == $schema then
         {ts:.occurred_at,type:.event_type,sid:.session_id,org:.org_id,user:.actor_id,
@@ -606,7 +642,7 @@ cmd_share() {
            artifact_ids:.artifact_ids,task_id:.task_id,org_revision:.org_revision,
            index_spec_version:.index_spec_version,shared:true})}
       else . end
-    ' "$BUFFER_FILE" > "$share_file"
+    ' "$SHARE_STAGED_FILE" > "$share_file"
   else
     : > "$share_file"
   fi
@@ -623,7 +659,7 @@ cmd_share() {
   http_code=$(curl "${curl_args[@]}" 2>/dev/null || echo "000")
   rm -f "$share_file"
   if [ "$http_code" -ge 200 ] 2>/dev/null && [ "$http_code" -lt 300 ] 2>/dev/null; then
-    rm -f "$SHARE_CONSENT_FILE"
+    rm -f "$SHARE_CONSENT_FILE" "$SHARE_STAGED_FILE"
     echo "Shared $count telemetry events with $endpoint. Local events were retained."
   else
     echo "Share failed (HTTP $http_code). Nothing was removed locally." >&2

package/runtime/codex/bin/search.sh

@@ -235,6 +235,21 @@ cmd_query() {
     } >&2
     return "$query_rc"
   fi
+  # Content-free query telemetry: mode, duration, result count. Never the
+  # query text. This is what makes Runtime/QMD retrieval visible in the
+  # telemetry event list instead of only legacy graph_query rows.
+  local _tele_count _tele_ms
+  _tele_ms=$(( ($(date +%s) - t0) * 1000 ))
+  _tele_count=$(printf '%s' "$out" | jq 'if type == "array" then length elif type == "object" then (.results // [] | length) else empty end' 2>/dev/null || true)
+  if [[ "$_tele_count" =~ ^[0-9]+$ ]]; then
+    bash "$SCRIPT_DIR/bin/telemetry.sh" emit "query" \
+      "$(jq -n --arg mode "$label" --argjson d "$_tele_ms" --argjson c "$_tele_count" \
+        '{mode:$mode, duration_ms:$d, count:$c}')" 2>/dev/null &
+  else
+    bash "$SCRIPT_DIR/bin/telemetry.sh" emit "query" \
+      "$(jq -n --arg mode "$label" --argjson d "$_tele_ms" '{mode:$mode, duration_ms:$d}')" 2>/dev/null &
+  fi
+
   [ "$enrich" = 1 ] && emit="_enrich"
   if [ "$context_packet" = 1 ]; then
     local packet

package/runtime/codex/bin/settings.sh

@@ -59,6 +59,7 @@ settings.sh — Egregore instance settings
   settings.sh repo   list | add <name> [description] | remove <name>
   settings.sh admin  list | add <github-handle> | remove <github-handle>
   settings.sh people list | add <github-handle> | remove <github-handle>
+  settings.sh posture status|strict|standard|open   org-wide boundary posture
   settings.sh dump                         full snapshot (JSON)
 
   --json    machine-readable output for status/list
@@ -145,7 +146,7 @@ cmd_workflow() {
           || _die "cannot switch workflow: origin/main does not exist or could not be reached" 1
         _save '.base_branch = "main"'
       fi
-      echo "Git workflow: SIMPLE — pull requests now target main"
+      echo "Git workflow: SIMPLE — pull requests now target main · /save shares it with the org"
       ;;
     staged)
       if [ "$base" != "develop" ]; then
@@ -159,7 +160,7 @@ cmd_workflow() {
       elif ! jq -e 'has("base_branch")' "$CONFIG" >/dev/null 2>&1; then
         _save '.base_branch = "develop"'
       fi
-      echo "Git workflow: STAGED — pull requests now target develop; releases promote to main"
+      echo "Git workflow: STAGED — pull requests now target develop; releases promote to main · /save shares it with the org"
       ;;
     *) _die "usage: settings.sh workflow status|simple|staged" 1 ;;
   esac
@@ -441,6 +442,38 @@ cmd_privacy() {
     }'
 }
 
+# ── boundary posture (org-wide) ──────────────────────────────────────────
+# Edits committed egregore.json for the whole organization. `locked: true`
+# removes the change path entirely — posture is then org-policy managed.
+
+cmd_posture() {
+  local action="${1:-status}" current
+  current="$(jq -r '.boundary.posture // "standard"' "$CONFIG" 2>/dev/null || echo standard)"
+  case "$current" in strict|standard|open) ;; *) current="standard" ;; esac
+  case "$action" in
+    status)
+      if [ "$JSON" = 1 ]; then
+        jq -n --arg posture "$current" \
+          --argjson locked "$(_boundary_locked && echo true || echo false)" \
+          '{domain:"posture", posture:$posture, locked:$locked}'
+      else
+        echo "Boundary posture: $current"
+        _boundary_locked && echo "(organization boundary policy is locked — posture cannot change)"
+      fi
+      ;;
+    strict|standard|open)
+      if _boundary_locked; then
+        _die "boundary policy is managed by your organization and locked; posture cannot change" 1
+      fi
+      if [ "$action" != "$current" ]; then
+        _save '.boundary = ((.boundary // {}) + {posture: $p})' --arg p "$action"
+      fi
+      echo "Boundary posture: $action · applies to new sessions · /save shares it with the org"
+      ;;
+    *) _die "usage: settings.sh posture status|strict|standard|open" 1 ;;
+  esac
+}
+
 # ── personal boundary read roots ─────────────────────────────────────────
 # Personal-only: edits .egregore-boundary.local.json for the current member.
 # Respects org `locked: true` (no personal expansion), and never accepts a
@@ -525,8 +558,9 @@ case "$DOMAIN" in
   admin)   cmd_admin "$@" ;;
   people)  cmd_people "$@" ;;
   privacy) cmd_privacy ;;
+  posture) cmd_posture "$@" ;;
   boundary) cmd_boundary "$@" ;;
   dump)    cmd_dump ;;
   ""|-h|--help|help) usage 0 ;;
-  *) _die "unknown settings domain: '$DOMAIN' (try: hosting, relay, workflow, repo, admin, people, privacy, boundary, dump)" 1 ;;
+  *) _die "unknown settings domain: '$DOMAIN' (try: hosting, relay, workflow, repo, admin, people, privacy, posture, boundary, dump)" 1 ;;
 esac