instar 1.3.341 → 1.3.342

package/dist/monitoring/GuardPostureTripwire.d.ts

@@ -0,0 +1,90 @@
+/**
+ * GuardPostureTripwire — a disabled guard is itself an incident.
+ *
+ * Triggering incident (2026-06-05): the meltdown load-shed at 2:54 PM PDT
+ * batch-flipped a set of monitoring guards off in `.instar/config.json` —
+ * scheduler.enabled (issue #882), contextWedgeSentinel, failureLearning,
+ * resourceLedger, burnDetection. Only the scheduler was noticed and
+ * re-enabled (5.5h later); the wedge sentinel stayed dark and watched the
+ * EXO 3.0 AUP-rejection wedge kill a session for an hour THAT SAME EVENING
+ * without a single audit row. No instar code writes those flags — the flip
+ * was emergency hand-editing — so nothing structural recorded it. Two
+ * silently-disabled guards discovered in one day is a class, not a
+ * coincidence.
+ *
+ * The tripwire: at every server boot, compare the resolved guard posture
+ * (every monitoring.* enabled flag + scheduler.enabled) against the persisted
+ * posture from the previous boot. Any guard that went enabled→disabled gets:
+ *   1. a loud boot log line,
+ *   2. one JSONL breadcrumb row in `logs/guard-posture.jsonl` (same home as
+ *      sentinel-events.jsonl — the documented "why did X stop?" surface),
+ *   3. ONE aggregated Attention item listing every newly-disabled guard
+ *      (aggregate per the Bounded Notification Surface rule — never one
+ *      item per guard).
+ * Re-enabled guards get the log line + breadcrumb only (good news is not a
+ * to-do). First boot (no snapshot) records the posture and raises nothing.
+ *
+ * Signal-vs-authority: pure detector. It never re-enables anything, never
+ * blocks a boot, never edits config — a deliberate disable stays disabled;
+ * the Attention item is the consent surface where the operator either
+ * acknowledges the flip or goes and re-enables the guard. Errors are
+ * swallowed into the log: a broken tripwire must never break a boot.
+ */
+export type GuardPosture = Record<string, boolean>;
+export interface GuardPostureDiff {
+    /** Guards that were enabled last boot and are disabled now. */
+    disabled: string[];
+    /** Guards that were disabled last boot and are enabled now. */
+    enabled: string[];
+}
+export interface AttentionItemInput {
+    id: string;
+    title: string;
+    summary: string;
+    description?: string;
+    category: string;
+    priority: 'URGENT' | 'HIGH' | 'NORMAL' | 'LOW';
+    sourceContext?: string;
+}
+export interface GuardPostureTripwireOpts {
+    /** The RESOLVED config object the server is booting with. */
+    config: unknown;
+    /** Agent state dir (`<projectDir>/.instar`) — snapshot lives at `state/guard-posture.json`. */
+    stateDir: string;
+    /** Logs dir (`<projectDir>/logs`) — breadcrumb lives at `guard-posture.jsonl`. */
+    logsDir: string;
+    /** Aggregated Attention emit; absent (no Telegram) → breadcrumb-only. */
+    emitAttention?: (item: AttentionItemInput) => Promise<void>;
+    /** Boot logger (default console.log). */
+    log?: (msg: string) => void;
+    /** Clock override (tests). */
+    now?: () => Date;
+}
+export interface GuardPostureTripwireResult {
+    firstBoot: boolean;
+    disabled: string[];
+    enabled: string[];
+    attentionEmitted: boolean;
+    /** Non-fatal error message when the tripwire degraded (never throws). */
+    error?: string;
+}
+/**
+ * Extract the guard posture from a resolved config object.
+ *
+ * Covered surface (generic by design — a future guard is covered the moment
+ * it follows the `monitoring.<key>.enabled` convention, with no tripwire
+ * change):
+ *   - `monitoring.<key>.enabled` (boolean) → `monitoring.<key>.enabled`
+ *   - `monitoring.<key>` (plain boolean)   → `monitoring.<key>`
+ *   - `scheduler.enabled` (boolean)        → `scheduler.enabled`
+ */
+export declare function extractGuardPosture(config: unknown): GuardPosture;
+/**
+ * Diff two postures. Only keys present in BOTH snapshots can transition —
+ * a key appearing for the first time (new feature) or vanishing (config
+ * cleanup) is a shape change, not a guard flip, and raises nothing.
+ */
+export declare function diffGuardPosture(prev: GuardPosture, cur: GuardPosture): GuardPostureDiff;
+/** Run the tripwire once at boot. Never throws. */
+export declare function runGuardPostureTripwire(opts: GuardPostureTripwireOpts): Promise<GuardPostureTripwireResult>;
+//# sourceMappingURL=GuardPostureTripwire.d.ts.map

package/dist/monitoring/GuardPostureTripwire.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"GuardPostureTripwire.d.ts","sourceRoot":"","sources":["../../src/monitoring/GuardPostureTripwire.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAKH,MAAM,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEnD,MAAM,WAAW,gBAAgB;IAC/B,+DAA+D;IAC/D,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,+DAA+D;IAC/D,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,QAAQ,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;IAC/C,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,wBAAwB;IACvC,6DAA6D;IAC7D,MAAM,EAAE,OAAO,CAAC;IAChB,+FAA+F;IAC/F,QAAQ,EAAE,MAAM,CAAC;IACjB,kFAAkF;IAClF,OAAO,EAAE,MAAM,CAAC;IAChB,yEAAyE;IACzE,aAAa,CAAC,EAAE,CAAC,IAAI,EAAE,kBAAkB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D,yCAAyC;IACzC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5B,8BAA8B;IAC9B,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAED,MAAM,WAAW,0BAA0B;IACzC,SAAS,EAAE,OAAO,CAAC;IACnB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,yEAAyE;IACzE,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,OAAO,GAAG,YAAY,CAwBjE;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,YAAY,GAAG,gBAAgB,CASxF;AAeD,mDAAmD;AACnD,wBAAsB,uBAAuB,CAC3C,IAAI,EAAE,wBAAwB,GAC7B,OAAO,CAAC,0BAA0B,CAAC,CA2FrC"}

package/dist/monitoring/GuardPostureTripwire.js

@@ -0,0 +1,182 @@
+/**
+ * GuardPostureTripwire — a disabled guard is itself an incident.
+ *
+ * Triggering incident (2026-06-05): the meltdown load-shed at 2:54 PM PDT
+ * batch-flipped a set of monitoring guards off in `.instar/config.json` —
+ * scheduler.enabled (issue #882), contextWedgeSentinel, failureLearning,
+ * resourceLedger, burnDetection. Only the scheduler was noticed and
+ * re-enabled (5.5h later); the wedge sentinel stayed dark and watched the
+ * EXO 3.0 AUP-rejection wedge kill a session for an hour THAT SAME EVENING
+ * without a single audit row. No instar code writes those flags — the flip
+ * was emergency hand-editing — so nothing structural recorded it. Two
+ * silently-disabled guards discovered in one day is a class, not a
+ * coincidence.
+ *
+ * The tripwire: at every server boot, compare the resolved guard posture
+ * (every monitoring.* enabled flag + scheduler.enabled) against the persisted
+ * posture from the previous boot. Any guard that went enabled→disabled gets:
+ *   1. a loud boot log line,
+ *   2. one JSONL breadcrumb row in `logs/guard-posture.jsonl` (same home as
+ *      sentinel-events.jsonl — the documented "why did X stop?" surface),
+ *   3. ONE aggregated Attention item listing every newly-disabled guard
+ *      (aggregate per the Bounded Notification Surface rule — never one
+ *      item per guard).
+ * Re-enabled guards get the log line + breadcrumb only (good news is not a
+ * to-do). First boot (no snapshot) records the posture and raises nothing.
+ *
+ * Signal-vs-authority: pure detector. It never re-enables anything, never
+ * blocks a boot, never edits config — a deliberate disable stays disabled;
+ * the Attention item is the consent surface where the operator either
+ * acknowledges the flip or goes and re-enables the guard. Errors are
+ * swallowed into the log: a broken tripwire must never break a boot.
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+/**
+ * Extract the guard posture from a resolved config object.
+ *
+ * Covered surface (generic by design — a future guard is covered the moment
+ * it follows the `monitoring.<key>.enabled` convention, with no tripwire
+ * change):
+ *   - `monitoring.<key>.enabled` (boolean) → `monitoring.<key>.enabled`
+ *   - `monitoring.<key>` (plain boolean)   → `monitoring.<key>`
+ *   - `scheduler.enabled` (boolean)        → `scheduler.enabled`
+ */
+export function extractGuardPosture(config) {
+    const posture = {};
+    if (!config || typeof config !== 'object')
+        return posture;
+    const cfg = config;
+    const monitoring = cfg.monitoring;
+    if (monitoring && typeof monitoring === 'object' && !Array.isArray(monitoring)) {
+        for (const [key, value] of Object.entries(monitoring)) {
+            if (typeof value === 'boolean') {
+                posture[`monitoring.${key}`] = value;
+            }
+            else if (value && typeof value === 'object' && !Array.isArray(value)) {
+                const enabled = value.enabled;
+                if (typeof enabled === 'boolean')
+                    posture[`monitoring.${key}.enabled`] = enabled;
+            }
+        }
+    }
+    const scheduler = cfg.scheduler;
+    if (scheduler && typeof scheduler === 'object' && !Array.isArray(scheduler)) {
+        const enabled = scheduler.enabled;
+        if (typeof enabled === 'boolean')
+            posture['scheduler.enabled'] = enabled;
+    }
+    return posture;
+}
+/**
+ * Diff two postures. Only keys present in BOTH snapshots can transition —
+ * a key appearing for the first time (new feature) or vanishing (config
+ * cleanup) is a shape change, not a guard flip, and raises nothing.
+ */
+export function diffGuardPosture(prev, cur) {
+    const disabled = [];
+    const enabled = [];
+    for (const key of Object.keys(cur).sort()) {
+        if (!(key in prev))
+            continue;
+        if (prev[key] === true && cur[key] === false)
+            disabled.push(key);
+        else if (prev[key] === false && cur[key] === true)
+            enabled.push(key);
+    }
+    return { disabled, enabled };
+}
+function snapshotPath(stateDir) {
+    return path.join(stateDir, 'state', 'guard-posture.json');
+}
+function breadcrumbPath(logsDir) {
+    return path.join(logsDir, 'guard-posture.jsonl');
+}
+/** Run the tripwire once at boot. Never throws. */
+export async function runGuardPostureTripwire(opts) {
+    const log = opts.log ?? ((m) => console.log(m));
+    const now = (opts.now ?? (() => new Date()))();
+    const result = {
+        firstBoot: false,
+        disabled: [],
+        enabled: [],
+        attentionEmitted: false,
+    };
+    try {
+        const posture = extractGuardPosture(opts.config);
+        const snapPath = snapshotPath(opts.stateDir);
+        let prev = null;
+        if (fs.existsSync(snapPath)) {
+            try {
+                const parsed = JSON.parse(fs.readFileSync(snapPath, 'utf-8'));
+                if (parsed && typeof parsed === 'object' && parsed.posture && typeof parsed.posture === 'object') {
+                    prev = parsed;
+                }
+            }
+            catch {
+                // @silent-fallback-ok — a corrupt snapshot degrades to first-boot
+                // semantics (re-baseline, no alarms); the new write below repairs it.
+            }
+        }
+        // Persist the new snapshot FIRST so even an emit failure below leaves the
+        // baseline current (no repeat alarms for the same transition next boot).
+        fs.mkdirSync(path.dirname(snapPath), { recursive: true });
+        fs.writeFileSync(snapPath, JSON.stringify({ ts: now.toISOString(), posture }, null, 2));
+        if (!prev) {
+            result.firstBoot = true;
+            log(`[guard-posture] baseline recorded (${Object.keys(posture).length} guards)`);
+            return result;
+        }
+        const diff = diffGuardPosture(prev.posture, posture);
+        result.disabled = diff.disabled;
+        result.enabled = diff.enabled;
+        if (diff.disabled.length === 0 && diff.enabled.length === 0)
+            return result;
+        // Breadcrumb — one aggregated row per boot that saw transitions.
+        try {
+            fs.mkdirSync(path.dirname(breadcrumbPath(opts.logsDir)), { recursive: true });
+            fs.appendFileSync(breadcrumbPath(opts.logsDir), JSON.stringify({
+                ts: now.toISOString(),
+                kind: 'guard-posture-change',
+                disabled: diff.disabled,
+                enabled: diff.enabled,
+                prevTs: prev.ts,
+            }) + '\n');
+        }
+        catch (err) {
+            result.error = `breadcrumb append failed: ${err instanceof Error ? err.message : String(err)}`;
+        }
+        for (const key of diff.enabled)
+            log(`[guard-posture] guard re-enabled since last boot: ${key}`);
+        for (const key of diff.disabled)
+            log(`[guard-posture] ⚠ GUARD DISABLED since last boot: ${key}`);
+        if (diff.disabled.length > 0 && opts.emitAttention) {
+            const list = diff.disabled.join(', ');
+            try {
+                await opts.emitAttention({
+                    id: `guard-posture-disabled:${now.toISOString().slice(0, 10)}:${diff.disabled.join(',')}`,
+                    title: `${diff.disabled.length} monitoring guard(s) disabled since last boot`,
+                    summary: `These guards were ON at the previous server boot and are OFF now: ${list}. ` +
+                        `Nothing in instar code flips these flags — this was a config edit. ` +
+                        `If it was deliberate (e.g. load-shedding), acknowledge this item; otherwise re-enable them in .instar/config.json. ` +
+                        `History: logs/guard-posture.jsonl.`,
+                    category: 'monitoring',
+                    priority: 'HIGH',
+                    sourceContext: 'guard-posture-tripwire',
+                });
+                result.attentionEmitted = true;
+            }
+            catch (err) {
+                result.error = `attention emit failed: ${err instanceof Error ? err.message : String(err)}`;
+            }
+        }
+        return result;
+    }
+    catch (err) {
+        // A broken tripwire must never break a boot.
+        result.error = err instanceof Error ? err.message : String(err);
+        log(`[guard-posture] tripwire degraded: ${result.error}`);
+        return result;
+    }
+}
+//# sourceMappingURL=GuardPostureTripwire.js.map

package/dist/monitoring/GuardPostureTripwire.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"GuardPostureTripwire.js","sourceRoot":"","sources":["../../src/monitoring/GuardPostureTripwire.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AA6C7B;;;;;;;;;GASG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAe;IACjD,MAAM,OAAO,GAAiB,EAAE,CAAC;IACjC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IAC1D,MAAM,GAAG,GAAG,MAAiC,CAAC;IAE9C,MAAM,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC;IAClC,IAAI,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/E,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAqC,CAAC,EAAE,CAAC;YACjF,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC/B,OAAO,CAAC,cAAc,GAAG,EAAE,CAAC,GAAG,KAAK,CAAC;YACvC,CAAC;iBAAM,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACvE,MAAM,OAAO,GAAI,KAAiC,CAAC,OAAO,CAAC;gBAC3D,IAAI,OAAO,OAAO,KAAK,SAAS;oBAAE,OAAO,CAAC,cAAc,GAAG,UAAU,CAAC,GAAG,OAAO,CAAC;YACnF,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;IAChC,IAAI,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5E,MAAM,OAAO,GAAI,SAAqC,CAAC,OAAO,CAAC;QAC/D,IAAI,OAAO,OAAO,KAAK,SAAS;YAAE,OAAO,CAAC,mBAAmB,CAAC,GAAG,OAAO,CAAC;IAC3E,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAkB,EAAE,GAAiB;IACpE,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAC1C,IAAI,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC;YAAE,SAAS;QAC7B,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,KAAK;YAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;aAC5D,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI;YAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AAC/B,CAAC;AAOD,SAAS,YAAY,CAAC,QAAgB;IACpC,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,oBAAoB,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,cAAc,CAAC,OAAe;IACrC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;AACnD,CAAC;AAED,mDAAmD;AACnD,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,IAA8B;IAE9B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACxD,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;IAC/C,MAAM,MAAM,GAA+B;QACzC,SAAS,EAAE,KAAK;QAChB,QAAQ,EAAE,EAAE;QACZ,OAAO,EAAE,EAAE;QACX,gBAAgB,EAAE,KAAK;KACxB,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjD,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAE7C,IAAI,IAAI,GAAoB,IAAI,CAAC;QACjC,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAa,CAAC;gBAC1E,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,OAAO,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;oBACjG,IAAI,GAAG,MAAM,CAAC;gBAChB,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,kEAAkE;gBAClE,sEAAsE;YACxE,CAAC;QACH,CAAC;QAED,0EAA0E;QAC1E,yEAAyE;QACzE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,OAAO,EAAqB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAE3G,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC;YACxB,GAAG,CAAC,sCAAsC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,UAAU,CAAC,CAAC;YACjF,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACrD,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAChC,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC9B,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,MAAM,CAAC;QAE3E,iEAAiE;QACjE,IAAI,CAAC;YACH,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9E,EAAE,CAAC,cAAc,CACf,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,EAC5B,IAAI,CAAC,SAAS,CAAC;gBACb,EAAE,EAAE,GAAG,CAAC,WAAW,EAAE;gBACrB,IAAI,EAAE,sBAAsB;gBAC5B,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,MAAM,EAAE,IAAI,CAAC,EAAE;aAChB,CAAC,GAAG,IAAI,CACV,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,GAAG,6BAA6B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QACjG,CAAC;QAED,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,OAAO;YAAE,GAAG,CAAC,qDAAqD,GAAG,EAAE,CAAC,CAAC;QAChG,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,QAAQ;YAAE,GAAG,CAAC,qDAAqD,GAAG,EAAE,CAAC,CAAC;QAEjG,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACnD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtC,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,aAAa,CAAC;oBACvB,EAAE,EAAE,0BAA0B,GAAG,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;oBACzF,KAAK,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,+CAA+C;oBAC7E,OAAO,EACL,qEAAqE,IAAI,IAAI;wBAC7E,qEAAqE;wBACrE,qHAAqH;wBACrH,oCAAoC;oBACtC,QAAQ,EAAE,YAAY;oBACtB,QAAQ,EAAE,MAAM;oBAChB,aAAa,EAAE,wBAAwB;iBACxC,CAAC,CAAC;gBACH,MAAM,CAAC,gBAAgB,GAAG,IAAI,CAAC;YACjC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,KAAK,GAAG,0BAA0B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9F,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,6CAA6C;QAC7C,MAAM,CAAC,KAAK,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChE,GAAG,CAAC,sCAAsC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QAC1D,OAAO,MAAM,CAAC;IAChB,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.341",
+  "version": "1.3.342",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-06-06T04:58:42.775Z",
-  "instarVersion": "1.3.341",
+  "generatedAt": "2026-06-06T05:04:20.337Z",
+  "instarVersion": "1.3.342",
   "entryCount": 199,
   "entries": {
     "hook:session-start": {
@@ -11,7 +11,7 @@
       "domain": "identity",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/session-start.sh",
-      "contentHash": "72604345a56ff19867136d0457efe9c4757b0bcaeeaadd48f3558b41caf82941",
+      "contentHash": "67606a9d2c94d2b88f5ec21a08965b25afbbb43e1291de2ebdd0cc77dfed949c",
       "since": "2025-01-01"
     },
     "hook:dangerous-command-guard": {
@@ -20,7 +20,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/dangerous-command-guard.sh",
-      "contentHash": "72604345a56ff19867136d0457efe9c4757b0bcaeeaadd48f3558b41caf82941",
+      "contentHash": "67606a9d2c94d2b88f5ec21a08965b25afbbb43e1291de2ebdd0cc77dfed949c",
       "since": "2025-01-01"
     },
     "hook:grounding-before-messaging": {
@@ -29,7 +29,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/grounding-before-messaging.sh",
-      "contentHash": "72604345a56ff19867136d0457efe9c4757b0bcaeeaadd48f3558b41caf82941",
+      "contentHash": "67606a9d2c94d2b88f5ec21a08965b25afbbb43e1291de2ebdd0cc77dfed949c",
       "since": "2025-01-01"
     },
     "hook:compaction-recovery": {
@@ -38,7 +38,7 @@
       "domain": "identity",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/compaction-recovery.sh",
-      "contentHash": "72604345a56ff19867136d0457efe9c4757b0bcaeeaadd48f3558b41caf82941",
+      "contentHash": "67606a9d2c94d2b88f5ec21a08965b25afbbb43e1291de2ebdd0cc77dfed949c",
       "since": "2025-01-01"
     },
     "hook:external-operation-gate": {
@@ -47,7 +47,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/external-operation-gate.js",
-      "contentHash": "72604345a56ff19867136d0457efe9c4757b0bcaeeaadd48f3558b41caf82941",
+      "contentHash": "67606a9d2c94d2b88f5ec21a08965b25afbbb43e1291de2ebdd0cc77dfed949c",
       "since": "2025-01-01"
     },
     "hook:deferral-detector": {
@@ -56,7 +56,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/deferral-detector.js",
-      "contentHash": "72604345a56ff19867136d0457efe9c4757b0bcaeeaadd48f3558b41caf82941",
+      "contentHash": "67606a9d2c94d2b88f5ec21a08965b25afbbb43e1291de2ebdd0cc77dfed949c",
       "since": "2025-01-01"
     },
     "hook:self-stop-guard": {
@@ -65,7 +65,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/self-stop-guard.js",
-      "contentHash": "72604345a56ff19867136d0457efe9c4757b0bcaeeaadd48f3558b41caf82941",
+      "contentHash": "67606a9d2c94d2b88f5ec21a08965b25afbbb43e1291de2ebdd0cc77dfed949c",
       "since": "2025-01-01"
     },
     "hook:post-action-reflection": {
@@ -74,7 +74,7 @@
       "domain": "evolution",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/post-action-reflection.js",
-      "contentHash": "72604345a56ff19867136d0457efe9c4757b0bcaeeaadd48f3558b41caf82941",
+      "contentHash": "67606a9d2c94d2b88f5ec21a08965b25afbbb43e1291de2ebdd0cc77dfed949c",
       "since": "2025-01-01"
     },
     "hook:external-communication-guard": {
@@ -83,7 +83,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/external-communication-guard.js",
-      "contentHash": "72604345a56ff19867136d0457efe9c4757b0bcaeeaadd48f3558b41caf82941",
+      "contentHash": "67606a9d2c94d2b88f5ec21a08965b25afbbb43e1291de2ebdd0cc77dfed949c",
       "since": "2025-01-01"
     },
     "hook:scope-coherence-collector": {
@@ -92,7 +92,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/scope-coherence-collector.js",
-      "contentHash": "72604345a56ff19867136d0457efe9c4757b0bcaeeaadd48f3558b41caf82941",
+      "contentHash": "67606a9d2c94d2b88f5ec21a08965b25afbbb43e1291de2ebdd0cc77dfed949c",
       "since": "2025-01-01"
     },
     "hook:scope-coherence-checkpoint": {
@@ -101,7 +101,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/scope-coherence-checkpoint.js",
-      "contentHash": "72604345a56ff19867136d0457efe9c4757b0bcaeeaadd48f3558b41caf82941",
+      "contentHash": "67606a9d2c94d2b88f5ec21a08965b25afbbb43e1291de2ebdd0cc77dfed949c",
       "since": "2025-01-01"
     },
     "hook:free-text-guard": {
@@ -110,7 +110,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/free-text-guard.sh",
-      "contentHash": "72604345a56ff19867136d0457efe9c4757b0bcaeeaadd48f3558b41caf82941",
+      "contentHash": "67606a9d2c94d2b88f5ec21a08965b25afbbb43e1291de2ebdd0cc77dfed949c",
       "since": "2025-01-01"
     },
     "hook:claim-intercept": {
@@ -119,7 +119,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/claim-intercept.js",
-      "contentHash": "72604345a56ff19867136d0457efe9c4757b0bcaeeaadd48f3558b41caf82941",
+      "contentHash": "67606a9d2c94d2b88f5ec21a08965b25afbbb43e1291de2ebdd0cc77dfed949c",
       "since": "2025-01-01"
     },
     "hook:claim-intercept-response": {
@@ -128,7 +128,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/claim-intercept-response.js",
-      "contentHash": "72604345a56ff19867136d0457efe9c4757b0bcaeeaadd48f3558b41caf82941",
+      "contentHash": "67606a9d2c94d2b88f5ec21a08965b25afbbb43e1291de2ebdd0cc77dfed949c",
       "since": "2025-01-01"
     },
     "hook:stop-gate-router": {
@@ -137,7 +137,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/stop-gate-router.js",
-      "contentHash": "72604345a56ff19867136d0457efe9c4757b0bcaeeaadd48f3558b41caf82941",
+      "contentHash": "67606a9d2c94d2b88f5ec21a08965b25afbbb43e1291de2ebdd0cc77dfed949c",
       "since": "2025-01-01"
     },
     "hook:auto-approve-permissions": {
@@ -146,7 +146,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/auto-approve-permissions.js",
-      "contentHash": "72604345a56ff19867136d0457efe9c4757b0bcaeeaadd48f3558b41caf82941",
+      "contentHash": "67606a9d2c94d2b88f5ec21a08965b25afbbb43e1291de2ebdd0cc77dfed949c",
       "since": "2025-01-01"
     },
     "job:health-check": {
@@ -1538,7 +1538,7 @@
       "type": "subsystem",
       "domain": "updates",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
-      "contentHash": "72604345a56ff19867136d0457efe9c4757b0bcaeeaadd48f3558b41caf82941",
+      "contentHash": "67606a9d2c94d2b88f5ec21a08965b25afbbb43e1291de2ebdd0cc77dfed949c",
       "since": "2025-01-01"
     },
     "subsystem:scheduler": {

package/upgrades/1.3.342.md

@@ -0,0 +1,85 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+GuardPostureTripwire — "a disabled guard is itself an incident." Born from
+2026-06-05, when the morning meltdown load-shed batch-flipped FIVE guards off
+in config.json (scheduler, contextWedgeSentinel, failureLearning,
+resourceLedger, burnDetection) and only the scheduler was noticed: the wedge
+sentinel stayed dark and watched a session die for an hour that same evening
+with zero audit rows. No instar code writes those flags — emergency hand-edits
+leave no trace, so each dark guard was discoverable only by a user-facing
+failure.
+
+Now: at every server boot, the resolved guard posture (every `monitoring.*`
+enabled flag + `scheduler.enabled` — generic by convention, no per-guard
+registration) is compared against the persisted posture from the previous
+boot. Any enabled→disabled transition gets a loud boot log line, one
+aggregated row in `logs/guard-posture.jsonl`, and ONE aggregated HIGH
+Attention item listing every newly-disabled guard. Re-enables get the
+breadcrumb only. Signal-only: nothing is ever auto-re-enabled, a broken
+tripwire can never break a boot, and the snapshot advances before alarms so
+the same transition never re-alarms.
+
+Queued initial messages now survive server restarts. When a session is
+spawned for an inbound message, the pending inject is recorded durably
+(`<stateDir>/state/pending-injects/`) and cleared only after the message is
+actually typed into the session. On boot, `recoverPendingInjects` sweeps
+survivors: still-alive sessions get re-delivery through the normal readiness
+path; dead or >6h-old records are reported via DegradationReporter and
+retired — a loss is now always VISIBLE.
+
+Why: the auto-updater restarted the server while a fresh codex session was
+still booting; the in-memory pending inject died with the process, tmux
+survived idle, and the operator waited 50+ minutes on a silently dropped
+message (finding 8d300555). Delivery is at-least-once by design — a rare
+duplicate beats a silent drop.
+
+Also: the "Fresh-spawn fallback succeeded" log now honestly says "launched
+(inject pending)" — it printed before the inject ran.
+
+## What to Tell Your User
+
+If any of my safety monitors ever gets switched off — by an emergency
+intervention, a config edit, or anything else — you now hear about it at the
+next restart instead of finding out weeks later when something it should have
+caught hits you. One consolidated heads-up, with the history kept in a log
+file. Nothing gets re-enabled behind your back; the heads-up is where you
+decide.
+
+If your agent's server restarts at the exact moment you message it, your
+message no longer risks silently vanishing — it is delivered when the session
+finishes starting, even across the restart.
+
+## Summary of New Capabilities
+
+- Boot-time guard-posture comparison with durable history at
+  `logs/guard-posture.jsonl` and snapshot at `state/guard-posture.json`.
+  Default-on, zero configuration; covers any future guard that follows the
+  `monitoring.<key>.enabled` convention automatically.
+- ONE aggregated HIGH Attention item per boot that saw disables (Bounded
+  Notification Surface — never per-guard items).
+- CLAUDE.md template + migration: agents are taught to check
+  `logs/guard-posture.jsonl` FIRST when asked "why didn't the watchdog catch
+  X?" — a silently-disabled guard explains more incidents than a broken one.
+
+- `SessionManager.recoverPendingInjects()` — boot-time orphaned-inject sweep
+  (wired automatically; not a user-facing surface).
+
+## Evidence
+
+Incident grounding: last sentinel-enabled boot 21:54Z = the exact minute of
+the #882 load-shed; 3 more dark guards found by config audit and re-enabled.
+Unit: 12 tests incl. the verbatim 5-guard incident config → exactly ONE
+aggregated item, no-repeat-alarm across boots, re-enable breadcrumb-only,
+corrupt-snapshot self-repair, emit-failure baseline-advance. Migrator: 2
+(added + idempotent). E2E: two-boot lifecycle over real disk + WIRED source
+guard. tsc clean; preflight PASS.
+
+13 new tests (store CRUD/corruption, all four sweep verdicts incl. the live
+incident shape, and wiring-integrity through a real SessionManager: record
+visible on disk DURING the spawn→inject window, cleared after). Adjacent
+session suites green (53 tests); tsc clean.

package/upgrades/guard-posture-tripwire.eli16.md

@@ -0,0 +1,48 @@
+# ELI16 — Guard-Posture Tripwire
+
+## The problem
+
+Yesterday morning, during an emergency (the laptop was melting down), somebody
+— one of my own sessions, acting fast — turned off a bunch of my safety
+monitors by editing a config file. That's like flipping the breakers off while
+fighting a kitchen fire: sometimes reasonable in the moment. The problem is
+what came after: nobody wrote down which breakers got flipped. One (the job
+scheduler) was noticed and turned back on 5.5 hours later. FOUR others stayed
+off, silently. That same evening a session died in a brand-new way, and the
+exact watchdog built to catch dying sessions... was one of the monitors still
+switched off. It watched nothing. Justin found out via screenshot, again.
+
+The deep issue: none of my code turns these monitors off — humans and
+emergency interventions do, by hand, and hand-edits leave no trace. A monitor
+that's secretly off is worse than a broken one, because everything LOOKS
+covered.
+
+## What this change does
+
+At every server start, I now compare "which guards are on right now?" against
+a saved copy of "which guards were on last time I started?" If any guard went
+ON → OFF in between:
+
+1. A loud line in the boot log,
+2. A permanent record in `logs/guard-posture.jsonl` (so "was the watchdog even
+   running in March?" has an answer forever),
+3. ONE attention item — "these N guards got disabled since last boot, was that
+   on purpose?" — not N separate pings.
+
+Turning a guard back ON just gets the log entry — good news isn't homework.
+
+## What it deliberately does NOT do
+
+It never flips anything back on by itself. If you disabled a monitor on
+purpose, it stays disabled — you just acknowledge the one heads-up. The
+tripwire is a smoke detector, not a sprinkler system. And it can't break
+anything: if the tripwire itself hits an error, the server boots normally and
+the error goes in the log.
+
+## Why this matters beyond yesterday
+
+This was the SECOND silently-disabled guard found in one day. That's not bad
+luck, that's a missing structure: there was no system that noticed "a
+protection went away." Now there is, and it automatically covers every future
+monitor too — anything that follows the standard config naming is watched
+from the day it ships, with zero extra wiring.