create-egregore 0.21.0-runtime-mvp.8 → 0.21.0-runtime-mvp.9

package/assets/egregore-launcher.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-// egregore-launcher-version: 0.21.0-runtime-mvp.8
+// egregore-launcher-version: 0.21.0-runtime-mvp.9
 //
 // egregore — launch and browse Egregore instances from your terminal.
 // Installed by create-egregore. Reads ~/.egregore/instances.json.
@@ -35,7 +35,7 @@ const crypto = require("node:crypto");
 const { spawnSync, spawn } = require("node:child_process");
 const readline = require("node:readline");
 
-const VERSION = "0.21.0-runtime-mvp.8";
+const VERSION = "0.21.0-runtime-mvp.9";
 const REGISTRY = path.join(os.homedir(), ".egregore", "instances.json");
 const DEFAULT_FILE = path.join(os.homedir(), ".egregore", "default");
 const UPDATE_CACHE_FILE = path.join(os.homedir(), ".egregore", "update-check.json");
@@ -2787,13 +2787,13 @@ async function cmdSettingsRuntime(inst, args) {
 async function cmdSettings(args) {
   const registry = readRegistry();
   if (registry.length === 0) die("no egregores installed yet.\n  run: npx -y create-egregore@latest");
-  const DOMAINS = new Set(["hosting", "workflow", "repo", "admin", "people", "dump", "runtime", "privacy", "telemetry", "boundary"]);
+  const DOMAINS = new Set(["hosting", "workflow", "repo", "admin", "people", "dump", "runtime", "privacy", "telemetry", "boundary", "posture"]);
   let rest = args.slice();
   let slug = "";
   if (rest.length && !DOMAINS.has(rest[0])) { slug = rest[0]; rest = rest.slice(1); }
   const inst = resolveInviteInstance(registry, slug);
   if (!inst) {
-    die(`multiple egregores installed; choose one:\n  egregore settings <slug> [runtime|hosting|workflow|repo|admin|people|privacy|telemetry]\n  run: egregore ls`);
+    die(`multiple egregores installed; choose one:\n  egregore settings <slug> [runtime|hosting|workflow|repo|admin|people|privacy|posture|telemetry]\n  run: egregore ls`);
   }
   // Runtime update is Runtime-owned state, not org config — it routes to the
   // upgrade bridge instead of bin/settings.sh.
@@ -3208,14 +3208,58 @@ function renderSettingsPanel({ inst, data, cursor, view, domain, items, listCurs
     lines.push(boxLine(`${BOLD}${view === "privacy" ? "Privacy & access" : "Telemetry"}${RESET}`, innerWidth, margin));
     lines.push(emptyBoxLine(innerWidth, margin));
     if (mode === "shareinfo") {
-      const shareLines = (data && data.shareLines) || ["share proposal unavailable"];
+      const proposal = data && data.shareProposal;
       lines.push(boxLine(`${BOLD}Share proposal${RESET} ${DIM}(nothing has been sent)${RESET}`, innerWidth, margin));
       lines.push(emptyBoxLine(innerWidth, margin));
-      for (const line of shareLines.slice(0, 16)) {
-        lines.push(boxLine(`${line.includes("--confirm") ? "" : DIM}${line}${RESET}`, innerWidth, margin));
+      if (proposal && proposal.token) {
+        lines.push(boxLine(`${DIM}Target: ${proposal.target}${RESET}`, innerWidth, margin));
+        lines.push(boxLine(`${DIM}Events: ${proposal.events} · Bytes: ${proposal.bytes}${RESET}`, innerWidth, margin));
+        lines.push(boxLine(`${DIM}Dataset SHA-256: ${proposal.dataset_sha256}${RESET}`, innerWidth, margin));
+        lines.push(boxLine(`${DIM}Metric fields: ${proposal.metric_fields}${RESET}`, innerWidth, margin));
+        lines.push(boxLine(`${DIM}Excluded by validation: ${proposal.excluded}${RESET}`, innerWidth, margin));
+        lines.push(emptyBoxLine(innerWidth, margin));
+        if (input) {
+          lines.push(boxLine(`${YELLOW}${input}${RESET}`, innerWidth, margin));
+        } else {
+          lines.push(boxLine(`${DIM}Nothing is sent until you confirm here. ${RESET}${BOLD}s${RESET}${DIM} send now · esc back${RESET}`, innerWidth, margin));
+        }
+      } else {
+        // Older adapter without a machine-readable proposal: show its prose
+        // and fall back to the terminal confirm instruction it printed.
+        const shareLines = (data && data.shareLines) || ["share proposal unavailable"];
+        for (const line of shareLines.slice(0, 16)) {
+          lines.push(boxLine(`${line.includes("--confirm") ? "" : DIM}${line}${RESET}`, innerWidth, margin));
+        }
+        lines.push(emptyBoxLine(innerWidth, margin));
+        lines.push(boxLine(`${DIM}Sharing completes only by running the confirm command above in a terminal. ← back${RESET}`, innerWidth, margin));
       }
       lines.push(emptyBoxLine(innerWidth, margin));
-      lines.push(boxLine(`${DIM}Sharing completes only by running the confirm command above in a terminal. ← back${RESET}`, innerWidth, margin));
+      lines.push(`${margin}${DIM}└${"─".repeat(innerWidth)}┘${RESET}`);
+      return lines;
+    }
+    if (mode === "posture") {
+      const current = (data && data.privacySnapshot && data.privacySnapshot.boundary && data.privacySnapshot.boundary.posture) || "standard";
+      lines.push(boxLine(`${BOLD}Boundary posture${RESET} ${DIM}— how far reads may reach outside this egregore${RESET}`, innerWidth, margin));
+      lines.push(emptyBoxLine(innerWidth, margin));
+      const options = [
+        ["strict", "reads outside the project, memory, and managed repos always ask first"],
+        ["standard", "inbox folders (Downloads, Desktop) readable without asking; everything else asks first"],
+        ["open", "reads outside the boundary allowed without asking; writes outside still ask"],
+      ];
+      options.forEach(([name, why], i) => {
+        const sel = i === (listCursor || 0);
+        const mark = name === current ? `${GREEN}● ${RESET}` : "  ";
+        lines.push(boxLine(`${sel ? `${CYAN}❯${RESET} ` : "  "}${mark}${sel ? BOLD : ""}${name}${RESET}`, innerWidth, margin));
+        lines.push(boxLine(`      ${DIM}${why}${RESET}`, innerWidth, margin));
+      });
+      lines.push(boxLine(`   ${DIM}other Egregore instances stay isolated under every posture${RESET}`, innerWidth, margin));
+      lines.push(emptyBoxLine(innerWidth, margin));
+      if (input) {
+        lines.push(boxLine(`${YELLOW}${input}${RESET}`, innerWidth, margin));
+      } else {
+        if (notice) lines.push(boxLine(notice, innerWidth, margin));
+        lines.push(boxLine(`${DIM}↑↓ nav · ${RESET}${BOLD}enter${RESET}${DIM} select · esc cancel${RESET}`, innerWidth, margin));
+      }
       lines.push(emptyBoxLine(innerWidth, margin));
       lines.push(`${margin}${DIM}└${"─".repeat(innerWidth)}┘${RESET}`);
       return lines;
@@ -3300,7 +3344,7 @@ function renderSettingsPanel({ inst, data, cursor, view, domain, items, listCurs
       lines.push(boxLine(
         locked
           ? `${DIM}Boundary policy is managed by your organization. ← back · q quit${RESET}`
-          : `${DIM}${RESET}${BOLD}a${RESET}${DIM} add personal read root · ${RESET}${BOLD}r${RESET}${DIM} remove · ← back · q quit${RESET}`,
+          : `${DIM}${RESET}${BOLD}a${RESET}${DIM} add personal read root · ${RESET}${BOLD}r${RESET}${DIM} remove · ${RESET}${BOLD}p${RESET}${DIM} boundary posture · ← back · q quit${RESET}`,
         innerWidth, margin,
       ));
     } else {
@@ -3966,16 +4010,49 @@ async function browser(args = {}) {
               render(); return;
             }
             if (chunk === "s") {
-              const r = runTelemetry(S.settingsInst, ["share"]);
-              const shareLines = ((r && (r.stdout || r.stderr)) || "share preview unavailable").split("\n").filter(Boolean);
-              S.settingsData = { ...(S.settingsData || {}), shareLines };
-              S.settingsMode = "shareinfo"; S.settingsNotice = "";
+              // Prefer the machine-readable proposal so the send can complete
+              // here; fall back to the adapter's prose for older runtimes.
+              let proposal = null;
+              const rj = runTelemetry(S.settingsInst, ["share", "--json"]);
+              if (rj && rj.status === 0 && rj.stdout) {
+                try { proposal = JSON.parse(rj.stdout); } catch { proposal = null; }
+              }
+              if (proposal && proposal.token) {
+                S.settingsData = { ...(S.settingsData || {}), shareProposal: proposal, shareLines: null };
+              } else {
+                const r = runTelemetry(S.settingsInst, ["share"]);
+                const shareLines = ((r && (r.stdout || r.stderr)) || "share preview unavailable").split("\n").filter(Boolean);
+                S.settingsData = { ...(S.settingsData || {}), shareProposal: null, shareLines };
+              }
+              S.settingsMode = "shareinfo"; S.settingsNotice = ""; S.settingsInput = ""; S.settingsAction = "";
               render(); return;
             }
             return;
           }
           if (S.settingsMode === "shareinfo") {
-            if (key.name === "escape" || key.name === "left") { S.settingsMode = "events"; render(); return; }
+            const proposal = S.settingsData && S.settingsData.shareProposal;
+            if (S.settingsAction === "tele-share" && S.settingsInput) {
+              if (chunk === "y" || chunk === "Y") {
+                const r = runTelemetry(S.settingsInst, ["share", "--confirm", proposal.token]);
+                S.settingsNotice = r && r.status === 0
+                  ? `${GREEN}${((r.stdout || "shared").split("\n")[0])}${RESET}`
+                  : `${YELLOW}${(((r && (r.stderr || r.stdout)) || "share failed").split("\n")[0])}${RESET}`;
+                S.settingsAction = ""; S.settingsInput = "";
+                S.settingsData = { ...(S.settingsData || {}), shareProposal: null, telemetryEvents: telemetryEvents(S.settingsInst, 100) };
+                S.settingsMode = "events"; S.settingsListCursor = 0;
+                refreshPanel(); render(); return;
+              }
+              S.settingsAction = ""; S.settingsInput = ""; render(); return;
+            }
+            if (chunk === "s" && proposal && proposal.token) {
+              S.settingsAction = "tele-share";
+              S.settingsInput = `Send ${proposal.events} event(s) to ${proposal.target} now? Local events are retained. [y/N]`;
+              render(); return;
+            }
+            if (key.name === "escape" || key.name === "left") {
+              S.settingsAction = ""; S.settingsInput = "";
+              S.settingsMode = "events"; render(); return;
+            }
             return;
           }
           if (S.settingsMode === "pickdir") {
@@ -4003,6 +4080,34 @@ async function browser(args = {}) {
             }
             return;
           }
+          if (S.settingsMode === "posture") {
+            const POSTURES = ["strict", "standard", "open"];
+            const current = (S.settingsData.privacySnapshot && S.settingsData.privacySnapshot.boundary && S.settingsData.privacySnapshot.boundary.posture) || "standard";
+            if (S.settingsAction === "posture" && S.settingsInput) {
+              if (chunk === "y" || chunk === "Y") {
+                const r = runSettings(S.settingsInst, ["posture", S.settingsPendingDir]);
+                S.settingsNotice = r && r.status === 0
+                  ? `${GREEN}${((r.stdout || "done").split("\n")[0])}${RESET}`
+                  : `${YELLOW}${(((r && (r.stderr || r.stdout)) || "posture change failed").split("\n")[0])}${RESET}`;
+                S.settingsAction = ""; S.settingsInput = ""; S.settingsPendingDir = "";
+                S.settingsMode = "browse";
+                refreshPanel(); render(); return;
+              }
+              S.settingsAction = ""; S.settingsInput = ""; S.settingsPendingDir = ""; render(); return;
+            }
+            if (key.name === "escape" || key.name === "left") { S.settingsMode = "browse"; S.settingsListCursor = 0; S.settingsNotice = ""; render(); return; }
+            if (key.name === "up" || key.name === "k") { S.settingsListCursor = ((S.settingsListCursor || 0) + 2) % 3; render(); return; }
+            if (key.name === "down" || key.name === "j") { S.settingsListCursor = ((S.settingsListCursor || 0) + 1) % 3; render(); return; }
+            if (key.name === "return") {
+              const chosen = POSTURES[Math.min(S.settingsListCursor || 0, 2)];
+              if (chosen === current) { S.settingsNotice = `${DIM}already on ${chosen}${RESET}`; render(); return; }
+              S.settingsAction = "posture";
+              S.settingsPendingDir = chosen;
+              S.settingsInput = `Switch boundary posture to ${chosen.toUpperCase()} for the whole organization? This edits the org's committed egregore.json for everyone. [y/N]`;
+              render(); return;
+            }
+            return;
+          }
           if (S.settingsMode === "pickroot") {
             const roots = (S.settingsData.privacySnapshot && S.settingsData.privacySnapshot.boundary && S.settingsData.privacySnapshot.boundary.personal_read_roots) || [];
             if (key.name === "escape" || key.name === "left") { S.settingsMode = "browse"; S.settingsListCursor = 0; render(); return; }
@@ -4050,6 +4155,13 @@ async function browser(args = {}) {
             if (!locked && chunk === "r") {
               S.settingsMode = "pickroot"; S.settingsListCursor = 0; S.settingsNotice = ""; render(); return;
             }
+            if (!locked && chunk === "p") {
+              const current = (S.settingsData && S.settingsData.privacySnapshot && S.settingsData.privacySnapshot.boundary && S.settingsData.privacySnapshot.boundary.posture) || "standard";
+              S.settingsMode = "posture";
+              S.settingsListCursor = Math.max(0, ["strict", "standard", "open"].indexOf(current));
+              S.settingsNotice = ""; S.settingsInput = ""; S.settingsAction = "";
+              render(); return;
+            }
             return;
           }
           // telemetry view

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-egregore",
-  "version": "0.21.0-runtime-mvp.8",
+  "version": "0.21.0-runtime-mvp.9",
   "description": "Set up Egregore for your team in one command — installs the egregore launcher and your choice of Claude Code, Codex, or Pi.",
   "license": "MIT",
   "bin": {

package/runtime/claude/bin/settings.sh

@@ -59,6 +59,7 @@ settings.sh — Egregore instance settings
   settings.sh repo   list | add <name> [description] | remove <name>
   settings.sh admin  list | add <github-handle> | remove <github-handle>
   settings.sh people list | add <github-handle> | remove <github-handle>
+  settings.sh posture status|strict|standard|open   org-wide boundary posture
   settings.sh dump                         full snapshot (JSON)
 
   --json    machine-readable output for status/list
@@ -441,6 +442,38 @@ cmd_privacy() {
     }'
 }
 
+# ── boundary posture (org-wide) ──────────────────────────────────────────
+# Edits committed egregore.json for the whole organization. `locked: true`
+# removes the change path entirely — posture is then org-policy managed.
+
+cmd_posture() {
+  local action="${1:-status}" current
+  current="$(jq -r '.boundary.posture // "standard"' "$CONFIG" 2>/dev/null || echo standard)"
+  case "$current" in strict|standard|open) ;; *) current="standard" ;; esac
+  case "$action" in
+    status)
+      if [ "$JSON" = 1 ]; then
+        jq -n --arg posture "$current" \
+          --argjson locked "$(_boundary_locked && echo true || echo false)" \
+          '{domain:"posture", posture:$posture, locked:$locked}'
+      else
+        echo "Boundary posture: $current"
+        _boundary_locked && echo "(organization boundary policy is locked — posture cannot change)"
+      fi
+      ;;
+    strict|standard|open)
+      if _boundary_locked; then
+        _die "boundary policy is managed by your organization and locked; posture cannot change" 1
+      fi
+      if [ "$action" != "$current" ]; then
+        _save '.boundary = ((.boundary // {}) + {posture: $p})' --arg p "$action"
+      fi
+      echo "Boundary posture: $action"
+      ;;
+    *) _die "usage: settings.sh posture status|strict|standard|open" 1 ;;
+  esac
+}
+
 # ── personal boundary read roots ─────────────────────────────────────────
 # Personal-only: edits .egregore-boundary.local.json for the current member.
 # Respects org `locked: true` (no personal expansion), and never accepts a
@@ -525,8 +558,9 @@ case "$DOMAIN" in
   admin)   cmd_admin "$@" ;;
   people)  cmd_people "$@" ;;
   privacy) cmd_privacy ;;
+  posture) cmd_posture "$@" ;;
   boundary) cmd_boundary "$@" ;;
   dump)    cmd_dump ;;
   ""|-h|--help|help) usage 0 ;;
-  *) _die "unknown settings domain: '$DOMAIN' (try: hosting, relay, workflow, repo, admin, people, privacy, boundary, dump)" 1 ;;
+  *) _die "unknown settings domain: '$DOMAIN' (try: hosting, relay, workflow, repo, admin, people, privacy, posture, boundary, dump)" 1 ;;
 esac

package/runtime/claude/bin/telemetry.sh

@@ -484,7 +484,7 @@ _resolve_share_target() {
 }
 
 cmd_share() {
-  local confirmation="" requested_endpoint="" allow_legacy_relay="false"
+  local confirmation="" requested_endpoint="" allow_legacy_relay="false" json_output="false"
   while [ "$#" -gt 0 ]; do
     case "$1" in
       --confirm)
@@ -499,6 +499,10 @@ cmd_share() {
         allow_legacy_relay="true"
         shift
         ;;
+      --json)
+        json_output="true"
+        shift
+        ;;
       *)
         echo "Unknown share option: $1" >&2
         return 2
@@ -561,6 +565,25 @@ cmd_share() {
       > "$SHARE_CONSENT_FILE"
     chmod 600 "$SHARE_CONSENT_FILE"
 
+    if [ "$json_output" = "true" ]; then
+      # Machine-readable proposal for thin surfaces (the launcher). Same
+      # consent protocol: the token here is the only place it exists, and a
+      # send still requires a separate explicit `share --confirm`.
+      jq -n \
+        --arg target "$endpoint" \
+        --argjson events "${count:-0}" \
+        --argjson bytes "${size:-0}" \
+        --arg dataset_sha256 "$dataset_sha256" \
+        --arg metric_fields "$fields" \
+        --arg token "$token" \
+        --argjson expires_at "$expires_at" \
+        '{proposal:true, sent:false, target:$target, events:$events, bytes:$bytes,
+          dataset_sha256:$dataset_sha256, metric_fields:$metric_fields,
+          excluded:"prompts, content, passages, file paths, arguments, secrets, env values",
+          token:$token, expires_at:$expires_at}'
+      return 0
+    fi
+
     echo "Telemetry share proposal (nothing sent):"
     echo ""
     echo "  Target: $endpoint"

package/runtime/codex/bin/settings.sh

@@ -59,6 +59,7 @@ settings.sh — Egregore instance settings
   settings.sh repo   list | add <name> [description] | remove <name>
   settings.sh admin  list | add <github-handle> | remove <github-handle>
   settings.sh people list | add <github-handle> | remove <github-handle>
+  settings.sh posture status|strict|standard|open   org-wide boundary posture
   settings.sh dump                         full snapshot (JSON)
 
   --json    machine-readable output for status/list
@@ -441,6 +442,38 @@ cmd_privacy() {
     }'
 }
 
+# ── boundary posture (org-wide) ──────────────────────────────────────────
+# Edits committed egregore.json for the whole organization. `locked: true`
+# removes the change path entirely — posture is then org-policy managed.
+
+cmd_posture() {
+  local action="${1:-status}" current
+  current="$(jq -r '.boundary.posture // "standard"' "$CONFIG" 2>/dev/null || echo standard)"
+  case "$current" in strict|standard|open) ;; *) current="standard" ;; esac
+  case "$action" in
+    status)
+      if [ "$JSON" = 1 ]; then
+        jq -n --arg posture "$current" \
+          --argjson locked "$(_boundary_locked && echo true || echo false)" \
+          '{domain:"posture", posture:$posture, locked:$locked}'
+      else
+        echo "Boundary posture: $current"
+        _boundary_locked && echo "(organization boundary policy is locked — posture cannot change)"
+      fi
+      ;;
+    strict|standard|open)
+      if _boundary_locked; then
+        _die "boundary policy is managed by your organization and locked; posture cannot change" 1
+      fi
+      if [ "$action" != "$current" ]; then
+        _save '.boundary = ((.boundary // {}) + {posture: $p})' --arg p "$action"
+      fi
+      echo "Boundary posture: $action"
+      ;;
+    *) _die "usage: settings.sh posture status|strict|standard|open" 1 ;;
+  esac
+}
+
 # ── personal boundary read roots ─────────────────────────────────────────
 # Personal-only: edits .egregore-boundary.local.json for the current member.
 # Respects org `locked: true` (no personal expansion), and never accepts a
@@ -525,8 +558,9 @@ case "$DOMAIN" in
   admin)   cmd_admin "$@" ;;
   people)  cmd_people "$@" ;;
   privacy) cmd_privacy ;;
+  posture) cmd_posture "$@" ;;
   boundary) cmd_boundary "$@" ;;
   dump)    cmd_dump ;;
   ""|-h|--help|help) usage 0 ;;
-  *) _die "unknown settings domain: '$DOMAIN' (try: hosting, relay, workflow, repo, admin, people, privacy, boundary, dump)" 1 ;;
+  *) _die "unknown settings domain: '$DOMAIN' (try: hosting, relay, workflow, repo, admin, people, privacy, posture, boundary, dump)" 1 ;;
 esac

package/runtime/codex/bin/telemetry.sh

@@ -484,7 +484,7 @@ _resolve_share_target() {
 }
 
 cmd_share() {
-  local confirmation="" requested_endpoint="" allow_legacy_relay="false"
+  local confirmation="" requested_endpoint="" allow_legacy_relay="false" json_output="false"
   while [ "$#" -gt 0 ]; do
     case "$1" in
       --confirm)
@@ -499,6 +499,10 @@ cmd_share() {
         allow_legacy_relay="true"
         shift
         ;;
+      --json)
+        json_output="true"
+        shift
+        ;;
       *)
         echo "Unknown share option: $1" >&2
         return 2
@@ -561,6 +565,25 @@ cmd_share() {
       > "$SHARE_CONSENT_FILE"
     chmod 600 "$SHARE_CONSENT_FILE"
 
+    if [ "$json_output" = "true" ]; then
+      # Machine-readable proposal for thin surfaces (the launcher). Same
+      # consent protocol: the token here is the only place it exists, and a
+      # send still requires a separate explicit `share --confirm`.
+      jq -n \
+        --arg target "$endpoint" \
+        --argjson events "${count:-0}" \
+        --argjson bytes "${size:-0}" \
+        --arg dataset_sha256 "$dataset_sha256" \
+        --arg metric_fields "$fields" \
+        --arg token "$token" \
+        --argjson expires_at "$expires_at" \
+        '{proposal:true, sent:false, target:$target, events:$events, bytes:$bytes,
+          dataset_sha256:$dataset_sha256, metric_fields:$metric_fields,
+          excluded:"prompts, content, passages, file paths, arguments, secrets, env values",
+          token:$token, expires_at:$expires_at}'
+      return 0
+    fi
+
     echo "Telemetry share proposal (nothing sent):"
     echo ""
     echo "  Target: $endpoint"

package/runtime/pi/bin/settings.sh

@@ -59,6 +59,7 @@ settings.sh — Egregore instance settings
   settings.sh repo   list | add <name> [description] | remove <name>
   settings.sh admin  list | add <github-handle> | remove <github-handle>
   settings.sh people list | add <github-handle> | remove <github-handle>
+  settings.sh posture status|strict|standard|open   org-wide boundary posture
   settings.sh dump                         full snapshot (JSON)
 
   --json    machine-readable output for status/list
@@ -441,6 +442,38 @@ cmd_privacy() {
     }'
 }
 
+# ── boundary posture (org-wide) ──────────────────────────────────────────
+# Edits committed egregore.json for the whole organization. `locked: true`
+# removes the change path entirely — posture is then org-policy managed.
+
+cmd_posture() {
+  local action="${1:-status}" current
+  current="$(jq -r '.boundary.posture // "standard"' "$CONFIG" 2>/dev/null || echo standard)"
+  case "$current" in strict|standard|open) ;; *) current="standard" ;; esac
+  case "$action" in
+    status)
+      if [ "$JSON" = 1 ]; then
+        jq -n --arg posture "$current" \
+          --argjson locked "$(_boundary_locked && echo true || echo false)" \
+          '{domain:"posture", posture:$posture, locked:$locked}'
+      else
+        echo "Boundary posture: $current"
+        _boundary_locked && echo "(organization boundary policy is locked — posture cannot change)"
+      fi
+      ;;
+    strict|standard|open)
+      if _boundary_locked; then
+        _die "boundary policy is managed by your organization and locked; posture cannot change" 1
+      fi
+      if [ "$action" != "$current" ]; then
+        _save '.boundary = ((.boundary // {}) + {posture: $p})' --arg p "$action"
+      fi
+      echo "Boundary posture: $action"
+      ;;
+    *) _die "usage: settings.sh posture status|strict|standard|open" 1 ;;
+  esac
+}
+
 # ── personal boundary read roots ─────────────────────────────────────────
 # Personal-only: edits .egregore-boundary.local.json for the current member.
 # Respects org `locked: true` (no personal expansion), and never accepts a
@@ -525,8 +558,9 @@ case "$DOMAIN" in
   admin)   cmd_admin "$@" ;;
   people)  cmd_people "$@" ;;
   privacy) cmd_privacy ;;
+  posture) cmd_posture "$@" ;;
   boundary) cmd_boundary "$@" ;;
   dump)    cmd_dump ;;
   ""|-h|--help|help) usage 0 ;;
-  *) _die "unknown settings domain: '$DOMAIN' (try: hosting, relay, workflow, repo, admin, people, privacy, boundary, dump)" 1 ;;
+  *) _die "unknown settings domain: '$DOMAIN' (try: hosting, relay, workflow, repo, admin, people, privacy, posture, boundary, dump)" 1 ;;
 esac

package/runtime/pi/bin/telemetry.sh

@@ -484,7 +484,7 @@ _resolve_share_target() {
 }
 
 cmd_share() {
-  local confirmation="" requested_endpoint="" allow_legacy_relay="false"
+  local confirmation="" requested_endpoint="" allow_legacy_relay="false" json_output="false"
   while [ "$#" -gt 0 ]; do
     case "$1" in
       --confirm)
@@ -499,6 +499,10 @@ cmd_share() {
         allow_legacy_relay="true"
         shift
         ;;
+      --json)
+        json_output="true"
+        shift
+        ;;
       *)
         echo "Unknown share option: $1" >&2
         return 2
@@ -561,6 +565,25 @@ cmd_share() {
       > "$SHARE_CONSENT_FILE"
     chmod 600 "$SHARE_CONSENT_FILE"
 
+    if [ "$json_output" = "true" ]; then
+      # Machine-readable proposal for thin surfaces (the launcher). Same
+      # consent protocol: the token here is the only place it exists, and a
+      # send still requires a separate explicit `share --confirm`.
+      jq -n \
+        --arg target "$endpoint" \
+        --argjson events "${count:-0}" \
+        --argjson bytes "${size:-0}" \
+        --arg dataset_sha256 "$dataset_sha256" \
+        --arg metric_fields "$fields" \
+        --arg token "$token" \
+        --argjson expires_at "$expires_at" \
+        '{proposal:true, sent:false, target:$target, events:$events, bytes:$bytes,
+          dataset_sha256:$dataset_sha256, metric_fields:$metric_fields,
+          excluded:"prompts, content, passages, file paths, arguments, secrets, env values",
+          token:$token, expires_at:$expires_at}'
+      return 0
+    fi
+
     echo "Telemetry share proposal (nothing sent):"
     echo ""
     echo "  Target: $endpoint"

package/runtime/prime/bin/settings.sh

@@ -59,6 +59,7 @@ settings.sh — Egregore instance settings
   settings.sh repo   list | add <name> [description] | remove <name>
   settings.sh admin  list | add <github-handle> | remove <github-handle>
   settings.sh people list | add <github-handle> | remove <github-handle>
+  settings.sh posture status|strict|standard|open   org-wide boundary posture
   settings.sh dump                         full snapshot (JSON)
 
   --json    machine-readable output for status/list
@@ -441,6 +442,38 @@ cmd_privacy() {
     }'
 }
 
+# ── boundary posture (org-wide) ──────────────────────────────────────────
+# Edits committed egregore.json for the whole organization. `locked: true`
+# removes the change path entirely — posture is then org-policy managed.
+
+cmd_posture() {
+  local action="${1:-status}" current
+  current="$(jq -r '.boundary.posture // "standard"' "$CONFIG" 2>/dev/null || echo standard)"
+  case "$current" in strict|standard|open) ;; *) current="standard" ;; esac
+  case "$action" in
+    status)
+      if [ "$JSON" = 1 ]; then
+        jq -n --arg posture "$current" \
+          --argjson locked "$(_boundary_locked && echo true || echo false)" \
+          '{domain:"posture", posture:$posture, locked:$locked}'
+      else
+        echo "Boundary posture: $current"
+        _boundary_locked && echo "(organization boundary policy is locked — posture cannot change)"
+      fi
+      ;;
+    strict|standard|open)
+      if _boundary_locked; then
+        _die "boundary policy is managed by your organization and locked; posture cannot change" 1
+      fi
+      if [ "$action" != "$current" ]; then
+        _save '.boundary = ((.boundary // {}) + {posture: $p})' --arg p "$action"
+      fi
+      echo "Boundary posture: $action"
+      ;;
+    *) _die "usage: settings.sh posture status|strict|standard|open" 1 ;;
+  esac
+}
+
 # ── personal boundary read roots ─────────────────────────────────────────
 # Personal-only: edits .egregore-boundary.local.json for the current member.
 # Respects org `locked: true` (no personal expansion), and never accepts a
@@ -525,8 +558,9 @@ case "$DOMAIN" in
   admin)   cmd_admin "$@" ;;
   people)  cmd_people "$@" ;;
   privacy) cmd_privacy ;;
+  posture) cmd_posture "$@" ;;
   boundary) cmd_boundary "$@" ;;
   dump)    cmd_dump ;;
   ""|-h|--help|help) usage 0 ;;
-  *) _die "unknown settings domain: '$DOMAIN' (try: hosting, relay, workflow, repo, admin, people, privacy, boundary, dump)" 1 ;;
+  *) _die "unknown settings domain: '$DOMAIN' (try: hosting, relay, workflow, repo, admin, people, privacy, posture, boundary, dump)" 1 ;;
 esac

package/runtime/prime/bin/telemetry.sh

@@ -484,7 +484,7 @@ _resolve_share_target() {
 }
 
 cmd_share() {
-  local confirmation="" requested_endpoint="" allow_legacy_relay="false"
+  local confirmation="" requested_endpoint="" allow_legacy_relay="false" json_output="false"
   while [ "$#" -gt 0 ]; do
     case "$1" in
       --confirm)
@@ -499,6 +499,10 @@ cmd_share() {
         allow_legacy_relay="true"
         shift
         ;;
+      --json)
+        json_output="true"
+        shift
+        ;;
       *)
         echo "Unknown share option: $1" >&2
         return 2
@@ -561,6 +565,25 @@ cmd_share() {
       > "$SHARE_CONSENT_FILE"
     chmod 600 "$SHARE_CONSENT_FILE"
 
+    if [ "$json_output" = "true" ]; then
+      # Machine-readable proposal for thin surfaces (the launcher). Same
+      # consent protocol: the token here is the only place it exists, and a
+      # send still requires a separate explicit `share --confirm`.
+      jq -n \
+        --arg target "$endpoint" \
+        --argjson events "${count:-0}" \
+        --argjson bytes "${size:-0}" \
+        --arg dataset_sha256 "$dataset_sha256" \
+        --arg metric_fields "$fields" \
+        --arg token "$token" \
+        --argjson expires_at "$expires_at" \
+        '{proposal:true, sent:false, target:$target, events:$events, bytes:$bytes,
+          dataset_sha256:$dataset_sha256, metric_fields:$metric_fields,
+          excluded:"prompts, content, passages, file paths, arguments, secrets, env values",
+          token:$token, expires_at:$expires_at}'
+      return 0
+    fi
+
     echo "Telemetry share proposal (nothing sent):"
     echo ""
     echo "  Target: $endpoint"