instar 1.3.490 → 1.3.491

package/dist/monitoring/guardManifest.js

@@ -0,0 +1,536 @@
+/**
+ * guardManifest — the STATIC DECLARED MANIFEST of every guard this codebase
+ * ships (GUARD-POSTURE-ENDPOINT-SPEC §2.1).
+ *
+ * The authoritative discovery boundary for the /guards inventory: the shared
+ * extractor (guardPosture.ts) covers config-shaped guards generically; this
+ * manifest declares the rest — guards with no config key at all (default-ON
+ * in code), guards living outside `monitoring.*`, sub-guards that must not
+ * hide inside an on-confirmed parent, and out-of-process (lifeline) guards —
+ * plus per-guard metadata the honest-state derivation needs (expected tick
+ * cadence for staleness, liveConfig divergence suppression, dry-run paths).
+ *
+ * The companion `NOT_A_GUARD` list classifies every other boot-constructed
+ * component that LOOKS guard-shaped but deliberately is not in the inventory,
+ * with a reason. scripts/lint-guard-manifest.js enforces that every candidate
+ * component appears in exactly one of the two lists — a future guard cannot
+ * be forgotten (Structure > Willpower; the lint follows the
+ * lint-dev-agent-dark-gate.js + exclusions-list precedent).
+ */
+export const GUARD_MANIFEST = [
+    // ── Session lifecycle guards ──
+    {
+        key: 'monitoring.sessionReaper.enabled',
+        kind: 'config',
+        configPath: 'monitoring.sessionReaper.enabled',
+        defaultEnabled: false,
+        dryRunConfigPath: 'monitoring.sessionReaper.dryRun',
+        expectedTickMs: 120_000,
+        process: 'server',
+        expectRuntime: true,
+        component: 'SessionReaper',
+        description: 'Pressure-aware reaper of idle-but-alive sessions (the guard the Mini ran without for a week).',
+    },
+    {
+        key: 'monitoring.reapNotify.enabled',
+        kind: 'config',
+        configPath: 'monitoring.reapNotify.enabled',
+        defaultEnabled: true,
+        process: 'server',
+        expectRuntime: false,
+        component: 'ReapNotify',
+        description: 'User-facing notice when a session is autonomously shut down.',
+    },
+    {
+        key: 'monitoring.watchdog.enabled',
+        kind: 'config',
+        configPath: 'monitoring.watchdog.enabled',
+        defaultEnabled: true,
+        expectedTickMs: 30_000,
+        liveConfig: true,
+        process: 'server',
+        expectRuntime: true,
+        component: 'SessionWatchdog',
+        description: 'Stuck-process detection + escalating kill sequence.',
+    },
+    {
+        key: 'monitoring.socketDisconnectSentinel.enabled',
+        kind: 'config',
+        configPath: 'monitoring.socketDisconnectSentinel.enabled',
+        defaultEnabled: true,
+        expectedTickMs: 15_000,
+        process: 'server',
+        expectRuntime: true,
+        component: 'SocketDisconnectSentinel',
+        description: 'Detects sessions that silently dropped their socket.',
+    },
+    {
+        key: 'monitoring.activeWorkSilenceSentinel.enabled',
+        kind: 'config',
+        configPath: 'monitoring.activeWorkSilenceSentinel.enabled',
+        defaultEnabled: true,
+        expectedTickMs: 60_000,
+        process: 'server',
+        expectRuntime: true,
+        component: 'ActiveWorkSilenceSentinel',
+        description: 'Detects sessions frozen mid-task (active work gone silent).',
+    },
+    {
+        key: 'monitoring.contextWedgeSentinel.enabled',
+        kind: 'config',
+        configPath: 'monitoring.contextWedgeSentinel.enabled',
+        defaultEnabled: true,
+        expectedTickMs: 20_000,
+        process: 'server',
+        expectRuntime: true,
+        component: 'ContextWedgeSentinel',
+        description: 'Detects the thinking-block/AUP wedge that permanently kills a session.',
+    },
+    {
+        // Sub-guard (spec §2.1): the destructive fresh-respawn arm inside the
+        // wedge sentinel. Its own inventory row so "autoRecovery silently off
+        // inside an on-confirmed sentinel" cannot hide. Default is the runtime
+        // fallback in server.ts (deliberately OMITTED from ConfigDefaults).
+        key: 'monitoring.contextWedgeSentinel.autoRecovery.enabled',
+        kind: 'config',
+        configPath: 'monitoring.contextWedgeSentinel.autoRecovery.enabled',
+        defaultEnabled: false,
+        dryRunConfigPath: 'monitoring.contextWedgeSentinel.autoRecovery.dryRun',
+        process: 'server',
+        expectRuntime: true,
+        component: 'ContextWedgeSentinel',
+        description: 'Auto-recovery (kill + fresh respawn) arm of the context-wedge sentinel.',
+    },
+    {
+        key: 'monitoring.agentWorktreeReaper.enabled',
+        kind: 'config',
+        configPath: 'monitoring.agentWorktreeReaper.enabled',
+        defaultEnabled: false,
+        dryRunConfigPath: 'monitoring.agentWorktreeReaper.dryRun',
+        expectedTickMs: 86_400_000,
+        process: 'server',
+        expectRuntime: false,
+        component: 'AgentWorktreeReaper',
+        description: 'Reclaims merged+clean+unused agent worktrees.',
+    },
+    {
+        key: 'monitoring.mcpProcessReaper.enabled',
+        kind: 'config',
+        configPath: 'monitoring.mcpProcessReaper.enabled',
+        defaultEnabled: false,
+        expectedTickMs: 1_800_000,
+        process: 'server',
+        expectRuntime: false,
+        component: 'McpProcessReaper',
+        description: 'Reaps orphaned MCP server processes.',
+    },
+    {
+        key: 'monitoring.staleBackstop.enabled',
+        kind: 'config',
+        configPath: 'monitoring.staleBackstop.enabled',
+        defaultEnabled: true,
+        process: 'server',
+        expectRuntime: false,
+        component: 'StaleBackstop',
+        description: 'Backstop cleanup for stale session state.',
+    },
+    {
+        key: 'monitoring.agentSleep.enabled',
+        kind: 'config',
+        configPath: 'monitoring.agentSleep.enabled',
+        defaultEnabled: false,
+        process: 'server',
+        expectRuntime: false,
+        component: 'AgentSleep',
+        description: 'Agent sleep/idle power management.',
+    },
+    // ── Liveness / health guards ──
+    {
+        key: 'monitoring.bootHealthBeacon.enabled',
+        kind: 'config',
+        configPath: 'monitoring.bootHealthBeacon.enabled',
+        defaultEnabled: false,
+        process: 'server',
+        expectRuntime: false,
+        component: 'BootHealthBeacon',
+        description: 'Boot-time health beacon endpoint.',
+    },
+    {
+        key: 'monitoring.rateLimitSentinel.enabled',
+        kind: 'config',
+        configPath: 'monitoring.rateLimitSentinel.enabled',
+        defaultEnabled: true,
+        process: 'server',
+        expectRuntime: false,
+        component: 'RateLimitSentinel',
+        description: 'Detects provider rate-limit walls and schedules recovery.',
+    },
+    {
+        key: 'monitoring.parallelWorkSentinel.enabled',
+        kind: 'config',
+        configPath: 'monitoring.parallelWorkSentinel.enabled',
+        defaultEnabled: false,
+        process: 'server',
+        expectRuntime: false,
+        component: 'ParallelWorkSentinel',
+        description: 'Cross-topic overlap councilor (ships dark, Phase B).',
+    },
+    {
+        key: 'monitoring.resourceLedger.enabled',
+        kind: 'config',
+        configPath: 'monitoring.resourceLedger.enabled',
+        defaultEnabled: true,
+        process: 'server',
+        expectRuntime: false,
+        component: 'ResourceLedger',
+        description: 'CPU/memory sampling + rate-limit-event ledger (read-only observability).',
+    },
+    {
+        key: 'monitoring.memoryMonitoring',
+        kind: 'config',
+        configPath: 'monitoring.memoryMonitoring',
+        defaultEnabled: true,
+        process: 'server',
+        expectRuntime: false,
+        component: 'MemoryPressureMonitor',
+        description: 'Memory-pressure sampling that feeds load-shed decisions.',
+    },
+    {
+        key: 'monitoring.quotaTracking',
+        kind: 'config',
+        configPath: 'monitoring.quotaTracking',
+        defaultEnabled: true,
+        process: 'server',
+        expectRuntime: false,
+        component: 'QuotaTracker',
+        description: 'Threshold-based LLM quota tracking + load shedding.',
+    },
+    {
+        key: 'monitoring.telemetry.enabled',
+        kind: 'config',
+        configPath: 'monitoring.telemetry.enabled',
+        defaultEnabled: true,
+        process: 'server',
+        expectRuntime: false,
+        component: 'TelemetryCollector',
+        description: 'Job/session telemetry collection.',
+    },
+    {
+        key: 'monitoring.burnDetection.enabled',
+        kind: 'config',
+        configPath: 'monitoring.burnDetection.enabled',
+        // Defaults deliberately OMITTED from ConfigDefaults (shipped defaults live
+        // in AgentServer); absence preserves default-ON.
+        defaultEnabled: true,
+        process: 'server',
+        expectRuntime: false,
+        component: 'BurnDetector',
+        description: 'Per-component token-burn share/rate alerts.',
+    },
+    {
+        key: 'monitoring.sentinelTelegramEscalation',
+        kind: 'config',
+        configPath: 'monitoring.sentinelTelegramEscalation',
+        defaultEnabled: false,
+        process: 'server',
+        expectRuntime: false,
+        component: 'SentinelEscalationFlag',
+        description: 'Opt-in Telegram delivery of coalesced sentinel escalations.',
+    },
+    // ── Triage / learning guards ──
+    {
+        key: 'monitoring.triage.enabled',
+        kind: 'config',
+        configPath: 'monitoring.triage.enabled',
+        defaultEnabled: true,
+        process: 'server',
+        expectRuntime: false,
+        component: 'StallTriageNurse',
+        description: 'Stall triage nurse (classification of stuck sessions).',
+    },
+    {
+        key: 'monitoring.triageOrchestrator.enabled',
+        kind: 'config',
+        configPath: 'monitoring.triageOrchestrator.enabled',
+        defaultEnabled: true,
+        process: 'server',
+        expectRuntime: false,
+        component: 'TriageOrchestrator',
+        description: 'Orchestrates triage outcomes into recovery actions.',
+    },
+    {
+        key: 'monitoring.failureLearning.enabled',
+        kind: 'config',
+        configPath: 'monitoring.failureLearning.enabled',
+        defaultEnabled: false,
+        process: 'server',
+        expectRuntime: false,
+        component: 'FailureLearningLoop',
+        description: 'Failure-Learning Loop capture + pattern surfacing.',
+    },
+    {
+        key: 'monitoring.correctionLearning.enabled',
+        kind: 'config',
+        configPath: 'monitoring.correctionLearning.enabled',
+        defaultEnabled: false,
+        process: 'server',
+        expectRuntime: false,
+        component: 'CorrectionLearningLoop',
+        description: 'Correction & preference learning sentinel.',
+    },
+    {
+        // Sub-guard: plain-boolean flag INSIDE the correctionLearning block (not
+        // `.enabled`-shaped, so the generic extractor cannot see it).
+        key: 'monitoring.correctionLearning.selfViolationSignal',
+        kind: 'config',
+        configPath: 'monitoring.correctionLearning.selfViolationSignal',
+        defaultEnabled: false,
+        process: 'server',
+        expectRuntime: false,
+        component: 'CorrectionLearningLoop',
+        description: 'Self-violation observe-only signal inside correction learning.',
+    },
+    {
+        key: 'monitoring.apprenticeshipCycleSla.enabled',
+        kind: 'config',
+        configPath: 'monitoring.apprenticeshipCycleSla.enabled',
+        defaultEnabled: false,
+        process: 'server',
+        expectRuntime: false,
+        component: 'ApprenticeshipCycleSlaMonitor',
+        description: 'Observe-only overdue-apprenticeship-cycle signal.',
+    },
+    {
+        key: 'monitoring.geminiCapacityEscalation.enabled',
+        kind: 'config',
+        configPath: 'monitoring.geminiCapacityEscalation.enabled',
+        defaultEnabled: false,
+        process: 'server',
+        expectRuntime: false,
+        component: 'GeminiCapacityEscalation',
+        description: 'Gemini capacity escalation monitor.',
+    },
+    {
+        key: 'monitoring.releaseReadiness.enabled',
+        kind: 'config',
+        configPath: 'monitoring.releaseReadiness.enabled',
+        defaultEnabled: false,
+        expectedTickMs: 21_600_000,
+        process: 'server',
+        expectRuntime: false,
+        component: 'ReleaseReadinessSentinel',
+        description: 'Stalled-release watchdog (maintainer environments).',
+    },
+    {
+        key: 'monitoring.promptGate.enabled',
+        kind: 'config',
+        configPath: 'monitoring.promptGate.enabled',
+        defaultEnabled: true,
+        process: 'server',
+        expectRuntime: false,
+        component: 'PromptGate',
+        description: 'Prompt-quality gate on outbound LLM calls.',
+    },
+    // ── Dev-gated observability guards (enabled omitted; gate-resolved) ──
+    {
+        key: 'monitoring.growthAnalyst.enabled',
+        kind: 'config',
+        configPath: 'monitoring.growthAnalyst.enabled',
+        defaultEnabled: false,
+        process: 'server',
+        expectRuntime: false,
+        component: 'GrowthMilestoneAnalyst',
+        description: 'Proactive growth & milestone analyst (dev-gated).',
+    },
+    {
+        key: 'monitoring.blockerLedger.enabled',
+        kind: 'config',
+        configPath: 'monitoring.blockerLedger.enabled',
+        defaultEnabled: false,
+        process: 'server',
+        expectRuntime: false,
+        component: 'BlockerLedger',
+        description: 'Blocker ledger resolution pipeline (dev-gated).',
+    },
+    // ── Non-monitoring roots ──
+    {
+        key: 'scheduler.enabled',
+        kind: 'config',
+        configPath: 'scheduler.enabled',
+        defaultEnabled: true,
+        process: 'server',
+        expectRuntime: true,
+        component: 'JobScheduler',
+        description: 'Cron job scheduler (registration is not life: runtime carries lastTickAt/jobCount/pausedJobCount).',
+    },
+    {
+        key: 'models.tierEscalation.enabled',
+        kind: 'config',
+        configPath: 'models.tierEscalation.enabled',
+        defaultEnabled: false,
+        dryRunConfigPath: 'models.tierEscalation.dryRun',
+        process: 'server',
+        expectRuntime: false,
+        component: 'ModelTierEscalation',
+        description: 'Model-tier escalation policy (COST-INCREASING enable).',
+    },
+    {
+        // Out-of-process guard (spec §2.1): config-derived states ONLY
+        // (`on-unverified` at best) — the sync in-memory getter contract cannot
+        // cross processes, so this entry must never carry expectRuntime.
+        key: 'lifeline.driftPromoter.enabled',
+        kind: 'config',
+        configPath: 'lifeline.driftPromoter.enabled',
+        defaultEnabled: true,
+        process: 'lifeline',
+        expectRuntime: false,
+        component: 'LifelineDriftPromoter',
+        description: 'Lifeline version-drift self-restart promoter (runs in the lifeline process).',
+    },
+    {
+        key: 'multiMachine.secretSync.enabled',
+        kind: 'config',
+        configPath: 'multiMachine.secretSync.enabled',
+        defaultEnabled: false,
+        process: 'server',
+        expectRuntime: false,
+        component: 'SecretSync',
+        description: 'Cross-machine secret sync, receive side (dev-gated).',
+    },
+    {
+        key: 'multiMachine.sessionPool.enabled',
+        kind: 'config',
+        configPath: 'multiMachine.sessionPool.enabled',
+        defaultEnabled: false,
+        process: 'server',
+        expectRuntime: false,
+        component: 'SessionPool',
+        description: 'Multi-machine session pool (ships dark behind stage).',
+    },
+    {
+        key: 'multiMachine.coherenceJournal.enabled',
+        kind: 'config',
+        configPath: 'multiMachine.coherenceJournal.enabled',
+        defaultEnabled: false,
+        process: 'server',
+        expectRuntime: false,
+        component: 'CoherenceJournal',
+        description: 'Cross-machine coherence journal (dev-gated).',
+    },
+    // ── Code-default guards (no config key; default-ON in code) ──
+    {
+        key: 'messaging.attentionTopicGuard',
+        kind: 'code-default',
+        defaultEnabled: true,
+        process: 'server',
+        expectRuntime: false,
+        component: 'AttentionTopicGuard',
+        description: 'Topic-Flood Guard — per-source attention-topic circuit breaker (default-ON in code; tunable via messaging[].config.attentionTopicGuard).',
+    },
+    {
+        key: 'messaging.topicCreationBudget',
+        kind: 'code-default',
+        defaultEnabled: true,
+        process: 'server',
+        expectRuntime: false,
+        component: 'TopicCreationBudget',
+        description: 'Bounded Notification Surface — last-resort budget on every auto-created topic (default-ON in code).',
+    },
+];
+export const NOT_A_GUARD = [
+    { component: 'GuardPostureTripwire', reason: 'The boot-transition detector OVER the guard inventory — meta-layer, not a guard itself; always-on, no enabled flag.' },
+    { component: 'GuardRegistry', reason: 'Infrastructure of this feature: the runtime-getter registry the inventory reads; not a guard.' },
+    { component: 'GuardPostureProbe', reason: 'Consumer of the inventory (probe family); its cadence rides SystemReviewer, not an own enabled switch.' },
+    { component: 'SystemReviewer', reason: 'Probe scheduler/aggregator — operational reviewer, not a behavior-protecting guard; covered indirectly by its probes.' },
+    { component: 'CompactionSentinel', reason: 'Always-on internal recovery lifecycle with no config enabled switch; recovery engine, not an operator-flippable guard.' },
+    { component: 'SessionMonitor', reason: 'Event-driven session bookkeeping with no enabled switch; pure observability plumbing.' },
+    { component: 'WorktreeMonitor', reason: 'Always-active worktree scan plumbing, no enabled switch, takes no protective action.' },
+    { component: 'CoherenceMonitor', reason: 'Multi-machine coherence bookkeeping rides multiMachine gating; no own guard switch.' },
+    { component: 'CommitmentSentinel', reason: 'Rides the commitments feature lifecycle; commitment bookkeeping, not a safety guard with an operator switch.' },
+    { component: 'SleepWakeDetector', reason: 'Always-on OS sleep/wake event detector; pure signal source with no enabled switch.' },
+    { component: 'PresenceProxy', reason: 'Standby heartbeat messenger; messaging-liveness feature, tuned not toggled — no guard semantics.' },
+    { component: 'PromiseBeacon', reason: 'Commitment follow-through heartbeats; user-facing feature behavior, not a protective guard.' },
+    { component: 'CommitmentTracker', reason: 'Commitment lifecycle store; data layer, no guard semantics.' },
+    { component: 'LlmQueue', reason: 'Rate-limited LLM call queue; shared infrastructure, not an operator-flippable guard.' },
+    { component: 'HelperWatchdog', reason: 'Signal-only subagent stall detector wired into SubagentTracker; no config enabled switch, consumers own actions.' },
+    { component: 'DeliveryFailureSentinel', reason: 'Telegram relay recovery engine; delivery-robustness layer, always-on with the relay, no guard switch.' },
+    { component: 'TemplatesDriftVerifier', reason: 'Deployed-script drift lint; CI-style verifier, not a runtime guard.' },
+    { component: 'TokenLedger', reason: 'Read-only token observability (never gates); the spec class-precedent for always-on read-only features.' },
+    { component: 'TokenLedgerPoller', reason: 'Background scanner feeding TokenLedger; observability plumbing.' },
+    { component: 'CrashLoopPauser', reason: 'Auto-pause of runaway jobs is scheduler-internal mechanics; surfaced via scheduler.enabled + job state, not its own guard.' },
+    { component: 'QuotaTrackerPoller', reason: 'Polling arm of QuotaTracker; covered by monitoring.quotaTracking.' },
+    { component: 'StuckSignatureClassifier', reason: 'Pure classifier (standby honesty); signal-only, no enabled switch, no action.' },
+    { component: 'MessageSentinel', reason: 'Emergency-stop message classifier; inbound-dispatch mechanics inseparable from messaging, no operator switch.' },
+    { component: 'TelegramAdapter', reason: 'Platform transport adapter; messaging infrastructure, not a guard.' },
+    { component: 'SlackAdapter', reason: 'Platform transport adapter; messaging infrastructure, not a guard.' },
+    { component: 'WhatsAppAdapter', reason: 'Platform transport adapter; messaging infrastructure, not a guard.' },
+    { component: 'IMessageAdapter', reason: 'Platform transport adapter; messaging infrastructure, not a guard.' },
+    { component: 'MessageRouter', reason: 'Topic→adapter routing; messaging infrastructure, not a guard.' },
+    { component: 'DeliveryRetryManager', reason: 'Delivery retry mechanics; messaging infrastructure, not a guard.' },
+    { component: 'PendingRelayStore', reason: 'Durable relay queue; storage layer, not a guard.' },
+    { component: 'MessageStore', reason: 'Message persistence; storage layer, not a guard.' },
+    { component: 'SpawnRequestManager', reason: 'Cross-session spawn coordination; session mechanics, not a guard.' },
+    { component: 'SessionManager', reason: 'Core session lifecycle engine; the thing guards act ON, not a guard.' },
+    { component: 'StateManager', reason: 'Core state persistence; storage layer.' },
+    { component: 'SourceTreeGuard', reason: 'Hard invariant on destructive ops against the source tree — always-on by design with NO off switch, so posture (on/off) is meaningless for it.' },
+    { component: 'SafeGitExecutor', reason: 'Single-funnel for destructive git ops; hard invariant, no off switch, posture meaningless.' },
+    { component: 'SafeFsExecutor', reason: 'Single-funnel for destructive fs ops; hard invariant, no off switch, posture meaningless.' },
+    { component: 'UpdateChecker', reason: 'Auto-update polling; lifecycle infrastructure, not a protective guard.' },
+    { component: 'SleepWakeCoordinator', reason: 'Multi-machine awake/standby lease mechanics; coordination layer, not an operator-flippable guard.' },
+    { component: 'MachinePoolRegistry', reason: 'In-memory pool state from heartbeats; data layer this feature reads, not a guard.' },
+    { component: 'PendingInjectStore', reason: 'Durable inject ledger; storage layer.' },
+    { component: 'LifelineProbe', reason: 'Server→lifeline health probe in the probe family; rides SystemReviewer cadence.' },
+    { component: 'LifelineDriftMonitor', reason: 'Version-handshake observer feeding the driftPromoter (which IS the guard, declared in the manifest).' },
+    // ── lint-guard-manifest backfill (spec §2.1 "complete backfill" sweep) ──
+    { component: 'A2ARedeliverySentinel', reason: 'A2A delivery-loop closer (redelivery + per-peer escalation) gated by monitoring.a2aRedelivery, default-OFF; threadline delivery-robustness mechanics, deliberately not in the protective-guard inventory.' },
+    { component: 'AgentWorktreeDetector', reason: 'One-shot per-startup worktree-convention scan emitting at most one aggregated attention item; no running lifecycle or enabled switch, so posture is not expressible.' },
+    { component: 'FeedbackAnomalyDetector', reason: 'In-memory rate/burst screening of feedback submissions; feedback-service input validation, not a session-protecting guard.' },
+    { component: 'FrameworkParitySentinel', reason: 'Parity-rules registry consumer surfacing framework-native drift; mentor/parity feature mechanics riding enabledFrameworks, not an operator-flippable protective guard.' },
+    { component: 'GeminiCapacityEscalationMonitor', reason: 'Implementation file of the manifest guard monitoring.geminiCapacityEscalation.enabled — declared there under component name GeminiCapacityEscalation; this entry classifies the file-basename alias only.' },
+    { component: 'HandoffSentinel', reason: 'Planned-handoff lifecycle state machine (multi-machine coordination mechanics); coordination layer, not an operator-flippable guard.' },
+    { component: 'HomeostasisMonitor', reason: 'Work-velocity awareness suggesting pause prompts during long sessions; advisory session-quality feature, takes no protective action.' },
+    { component: 'InputGuard', reason: 'Inbound provenance/injection screening that warns-never-blocks before messages reach sessions; messaging-ingress mechanics with no operator enabled switch.' },
+    { component: 'IntentDriftDetector', reason: 'Pure deterministic analyzer over decision-journal windows (alignment scoring); computation library with no boot lifecycle or switch.' },
+    { component: 'JargonDetector', reason: 'Signal-only jargon classifier feeding MessagingToneGate (the authority); pure function, never blocks, no posture.' },
+    { component: 'LedgerParaphraseDetector', reason: 'Signal-only paraphrase cross-check against SharedStateLedger feeding MessagingToneGate; observability data, never blocks.' },
+    { component: 'LifelineHealthWatchdog', reason: 'Lifeline-internal stuck-loop signal source for the RestartOrchestrator (the authority); always-on self-health mechanics in the lifeline process, no operator switch.' },
+    { component: 'OrphanProcessReaper', reason: 'Always-on untracked-CLI-process hygiene started unconditionally at boot with no config enabled switch; on/off posture is not expressible (CompactionSentinel class).' },
+    { component: 'OverlapGuard', reason: 'Work-overlap detection wrapper around WorkLedger for the intelligent-sync feature; sync mechanics, not a boot-constructed posture guard.' },
+    { component: 'PeerVisibilityGuard', reason: 'Pure hygiene-signal helpers over the machine registry (improper-revocation detection); stateless functions, no lifecycle or switch.' },
+    { component: 'PrincipalGuard', reason: 'Pure-logic cross-principal crediting detector consumed by the principal-coherence pipeline; library code, the observe-only wiring rides monitoring.principalCoherence.' },
+    { component: 'ProactiveSwapMonitor', reason: 'Pre-limit subscription-account swap engine (subscriptionPool.proactiveSwap); quota-continuity feature lever, not a failure-protecting guard.' },
+    { component: 'PromptGuard', reason: 'Prompt-injection defense helpers (filtering/output validation) for LLM conflict resolution; pure library, no boot lifecycle.' },
+    { component: 'QuotaExhaustionDetector', reason: 'Post-mortem classifier of why a dead session died (pattern-matching over tmux output); pure library, no lifecycle or switch.' },
+    { component: 'ReapGuard', reason: 'Stateless KEEP-check helper consulted by the single ReapAuthority before any terminate; precondition logic inside the reap path, not a posture guard itself.' },
+    { component: 'RevertDetector', reason: 'Read-only git revert scan feeding the FailureLedger; failure-learning ingestion plumbing, fail-open, no operator switch.' },
+    { component: 'SelfViolationDetector', reason: 'Observe-only detector arm of the correctionLearning.selfViolationSignal sub-guard, which IS declared in the manifest under component CorrectionLearningLoop.' },
+    { component: 'SessionActivitySentinel', reason: 'Mid-session activity digests + completion synthesis; session observability/digest feature, takes no protective action.' },
+    { component: 'SessionServerGuard', reason: 'Pure decision helper validating session-server actions; stateless validation logic, no boot lifecycle or enabled switch.' },
+    { component: 'SessionSummarySentinel', reason: 'Real-time session summaries for intelligent message routing (session: "best"); routing-quality plumbing, not a protective guard.' },
+    { component: 'StaleProcessGuard', reason: 'Stale-state detection helpers (version/config drift checks); meta-infrastructure library, no boot-constructed lifecycle.' },
+    { component: 'StaleSessionBackstop', reason: 'Implementation file of the manifest guard monitoring.staleBackstop.enabled — declared there under component name StaleBackstop; this entry classifies the file-basename alias only.' },
+    { component: 'StallDetector', reason: 'Platform-agnostic stall/promise-tracking helper embedded in messaging adapters; adapter plumbing with no own lifecycle.' },
+    { component: 'StuckInputSentinel', reason: 'Always-on restart-safe recovery sweep for messages wedged at the tmux prompt; injection-delivery mechanics inseparable from session messaging, no enabled switch.' },
+    { component: 'UltraSessionCapMonitor', reason: 'Mid-run ultra-token-cap watcher inside model-tier escalation; rides models.tierEscalation (declared in the manifest as ModelTierEscalation), no own switch.' },
+    { component: 'WorktreeReaper', reason: 'Dormant parallel-dev-isolation orphan-worktree reaper — exported but constructed nowhere (no importer); nothing runs, so there is no posture until it is wired.' },
+    { component: 'claudeForbiddenGuard', reason: 'Hard invariant enforcing Codex-only agents never invoke Claude; always-on by design with no off switch, posture meaningless (SourceTreeGuard class).' },
+    { component: 'registryReplayGuard', reason: 'Pure validation of pulled registry entries (replay/epoch/unknown-key checks); stateless function, not a runtime guard.' },
+];
+/** Lookup helpers (used by the lint's unit test and the registry reconciliation). */
+export function manifestByKey() {
+    const map = new Map();
+    for (const entry of GUARD_MANIFEST)
+        map.set(entry.key, entry);
+    return map;
+}
+export function manifestComponents() {
+    const set = new Set();
+    for (const entry of GUARD_MANIFEST)
+        if (entry.component)
+            set.add(entry.component);
+    return set;
+}
+export function notAGuardComponents() {
+    return new Set(NOT_A_GUARD.map(e => e.component));
+}
+//# sourceMappingURL=guardManifest.js.map

package/dist/monitoring/guardManifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guardManifest.js","sourceRoot":"","sources":["../../src/monitoring/guardManifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAkCH,MAAM,CAAC,MAAM,cAAc,GAAkC;IAC3D,iCAAiC;IACjC;QACE,GAAG,EAAE,kCAAkC;QACvC,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,kCAAkC;QAC9C,cAAc,EAAE,KAAK;QACrB,gBAAgB,EAAE,iCAAiC;QACnD,cAAc,EAAE,OAAO;QACvB,OAAO,EAAE,QAAQ;QACjB,aAAa,EAAE,IAAI;QACnB,SAAS,EAAE,eAAe;QAC1B,WAAW,EAAE,+FAA+F;KAC7G;IACD;QACE,GAAG,EAAE,+BAA+B;QACpC,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,+BAA+B;QAC3C,cAAc,EAAE,IAAI;QACpB,OAAO,EAAE,QAAQ;QACjB,aAAa,EAAE,KAAK;QACpB,SAAS,EAAE,YAAY;QACvB,WAAW,EAAE,8DAA8D;KAC5E;IACD;QACE,GAAG,EAAE,6BAA6B;QAClC,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,6BAA6B;QACzC,cAAc,EAAE,IAAI;QACpB,cAAc,EAAE,MAAM;QACtB,UAAU,EAAE,IAAI;QAChB,OAAO,EAAE,QAAQ;QACjB,aAAa,EAAE,IAAI;QACnB,SAAS,EAAE,iBAAiB;QAC5B,WAAW,EAAE,qDAAqD;KACnE;IACD;QACE,GAAG,EAAE,6CAA6C;QAClD,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,6CAA6C;QACzD,cAAc,EAAE,IAAI;QACpB,cAAc,EAAE,MAAM;QACtB,OAAO,EAAE,QAAQ;QACjB,aAAa,EAAE,IAAI;QACnB,SAAS,EAAE,0BAA0B;QACrC,WAAW,EAAE,sDAAsD;KACpE;IACD;QACE,GAAG,EAAE,8CAA8C;QACnD,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,8CAA8C;QAC1D,cAAc,EAAE,IAAI;QACpB,cAAc,EAAE,MAAM;QACtB,OAAO,EAAE,QAAQ;QACjB,aAAa,EAAE,IAAI;QACnB,SAAS,EAAE,2BAA2B;QACtC,WAAW,EAAE,6DAA6D;KAC3E;IACD;QACE,GAAG,EAAE,yCAAyC;QAC9C,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,yCAAyC;QACrD,cAAc,EAAE,IAAI;QACpB,cAAc,EAAE,MAAM;QACtB,OAAO,EAAE,QAAQ;QACjB,aAAa,EAAE,IAAI;QACnB,SAAS,EAAE,sBAAsB;QACjC,WAAW,EAAE,wEAAwE;KACtF;IACD;QACE,sEAAsE;QACtE,sEAAsE;QACtE,uEAAuE;QACvE,oEAAoE;QACpE,GAAG,EAAE,sDAAsD;QAC3D,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,sDAAsD;QAClE,cAAc,EAAE,KAAK;QACrB,gBAAgB,EAAE,qDAAqD;QACvE,OAAO,EAAE,QAAQ;QACjB,aAAa,EAAE,IAAI;QACnB,SAAS,EAAE,sBAAsB;QACjC,WAAW,EAAE,yEAAyE;KACvF;IACD;QACE,GAAG,EAAE,wCAAwC;QAC7C,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,wCAAwC;QACpD,cAAc,EAAE,KAAK;QACrB,gBAAgB,EAAE,uCAAuC;QACzD,cAAc,EAAE,UAAU;QAC1B,OAAO,EAAE,QAAQ;QACjB,aAAa,EAAE,KAAK;QACpB,SAAS,EAAE,qBAAqB;QAChC,WAAW,EAAE,+CAA+C;KAC7D;IACD;QACE,GAAG,EAAE,qCAAqC;QAC1C,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,qCAAqC;QACjD,cAAc,EAAE,KAAK;QACrB,cAAc,EAAE,SAAS;QACzB,OAAO,EAAE,QAAQ;QACjB,aAAa,EAAE,KAAK;QACpB,SAAS,EAAE,kBAAkB;QAC7B,WAAW,EAAE,sCAAsC;KACpD;IACD;QACE,GAAG,EAAE,kCAAkC;QACvC,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,kCAAkC;QAC9C,cAAc,EAAE,IAAI;QACpB,OAAO,EAAE,QAAQ;QACjB,aAAa,EAAE,KAAK;QACpB,SAAS,EAAE,eAAe;QAC1B,WAAW,EAAE,2CAA2C;KACzD;IACD;QACE,GAAG,EAAE,+BAA+B;QACpC,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,+BAA+B;QAC3C,cAAc,EAAE,KAAK;QACrB,OAAO,EAAE,QAAQ;QACjB,aAAa,EAAE,KAAK;QACpB,SAAS,EAAE,YAAY;QACvB,WAAW,EAAE,oCAAoC;KAClD;IACD,iCAAiC;IACjC;QACE,GAAG,EAAE,qCAAqC;QAC1C,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,qCAAqC;QACjD,cAAc,EAAE,KAAK;QACrB,OAAO,EAAE,QAAQ;QACjB,aAAa,EAAE,KAAK;QACpB,SAAS,EAAE,kBAAkB;QAC7B,WAAW,EAAE,mCAAmC;KACjD;IACD;QACE,GAAG,EAAE,sCAAsC;QAC3C,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,sCAAsC;QAClD,cAAc,EAAE,IAAI;QACpB,OAAO,EAAE,QAAQ;QACjB,aAAa,EAAE,KAAK;QACpB,SAAS,EAAE,mBAAmB;QAC9B,WAAW,EAAE,2DAA2D;KACzE;IACD;QACE,GAAG,EAAE,yCAAyC;QAC9C,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,yCAAyC;QACrD,cAAc,EAAE,KAAK;QACrB,OAAO,EAAE,QAAQ;QACjB,aAAa,EAAE,KAAK;QACpB,SAAS,EAAE,sBAAsB;QACjC,WAAW,EAAE,sDAAsD;KACpE;IACD;QACE,GAAG,EAAE,mCAAmC;QACxC,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,mCAAmC;QAC/C,cAAc,EAAE,IAAI;QACpB,OAAO,EAAE,QAAQ;QACjB,aAAa,EAAE,KAAK;QACpB,SAAS,EAAE,gBAAgB;QAC3B,WAAW,EAAE,0EAA0E;KACxF;IACD;QACE,GAAG,EAAE,6BAA6B;QAClC,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,6BAA6B;QACzC,cAAc,EAAE,IAAI;QACpB,OAAO,EAAE,QAAQ;QACjB,aAAa,EAAE,KAAK;QACpB,SAAS,EAAE,uBAAuB;QAClC,WAAW,EAAE,0DAA0D;KACxE;IACD;QACE,GAAG,EAAE,0BAA0B;QAC/B,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,0BAA0B;QACtC,cAAc,EAAE,IAAI;QACpB,OAAO,EAAE,QAAQ;QACjB,aAAa,EAAE,KAAK;QACpB,SAAS,EAAE,cAAc;QACzB,WAAW,EAAE,qDAAqD;KACnE;IACD;QACE,GAAG,EAAE,8BAA8B;QACnC,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,8BAA8B;QAC1C,cAAc,EAAE,IAAI;QACpB,OAAO,EAAE,QAAQ;QACjB,aAAa,EAAE,KAAK;QACpB,SAAS,EAAE,oBAAoB;QAC/B,WAAW,EAAE,mCAAmC;KACjD;IACD;QACE,GAAG,EAAE,kCAAkC;QACvC,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,kCAAkC;QAC9C,2EAA2E;QAC3E,iDAAiD;QACjD,cAAc,EAAE,IAAI;QACpB,OAAO,EAAE,QAAQ;QACjB,aAAa,EAAE,KAAK;QACpB,SAAS,EAAE,cAAc;QACzB,WAAW,EAAE,6CAA6C;KAC3D;IACD;QACE,GAAG,EAAE,uCAAuC;QAC5C,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,uCAAuC;QACnD,cAAc,EAAE,KAAK;QACrB,OAAO,EAAE,QAAQ;QACjB,aAAa,EAAE,KAAK;QACpB,SAAS,EAAE,wBAAwB;QACnC,WAAW,EAAE,6DAA6D;KAC3E;IACD,iCAAiC;IACjC;QACE,GAAG,EAAE,2BAA2B;QAChC,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,2BAA2B;QACvC,cAAc,EAAE,IAAI;QACpB,OAAO,EAAE,QAAQ;QACjB,aAAa,EAAE,KAAK;QACpB,SAAS,EAAE,kBAAkB;QAC7B,WAAW,EAAE,wDAAwD;KACtE;IACD;QACE,GAAG,EAAE,uCAAuC;QAC5C,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,uCAAuC;QACnD,cAAc,EAAE,IAAI;QACpB,OAAO,EAAE,QAAQ;QACjB,aAAa,EAAE,KAAK;QACpB,SAAS,EAAE,oBAAoB;QAC/B,WAAW,EAAE,qDAAqD;KACnE;IACD;QACE,GAAG,EAAE,oCAAoC;QACzC,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,oCAAoC;QAChD,cAAc,EAAE,KAAK;QACrB,OAAO,EAAE,QAAQ;QACjB,aAAa,EAAE,KAAK;QACpB,SAAS,EAAE,qBAAqB;QAChC,WAAW,EAAE,oDAAoD;KAClE;IACD;QACE,GAAG,EAAE,uCAAuC;QAC5C,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,uCAAuC;QACnD,cAAc,EAAE,KAAK;QACrB,OAAO,EAAE,QAAQ;QACjB,aAAa,EAAE,KAAK;QACpB,SAAS,EAAE,wBAAwB;QACnC,WAAW,EAAE,4CAA4C;KAC1D;IACD;QACE,yEAAyE;QACzE,8DAA8D;QAC9D,GAAG,EAAE,mDAAmD;QACxD,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,mDAAmD;QAC/D,cAAc,EAAE,KAAK;QACrB,OAAO,EAAE,QAAQ;QACjB,aAAa,EAAE,KAAK;QACpB,SAAS,EAAE,wBAAwB;QACnC,WAAW,EAAE,gEAAgE;KAC9E;IACD;QACE,GAAG,EAAE,2CAA2C;QAChD,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,2CAA2C;QACvD,cAAc,EAAE,KAAK;QACrB,OAAO,EAAE,QAAQ;QACjB,aAAa,EAAE,KAAK;QACpB,SAAS,EAAE,+BAA+B;QAC1C,WAAW,EAAE,mDAAmD;KACjE;IACD;QACE,GAAG,EAAE,6CAA6C;QAClD,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,6CAA6C;QACzD,cAAc,EAAE,KAAK;QACrB,OAAO,EAAE,QAAQ;QACjB,aAAa,EAAE,KAAK;QACpB,SAAS,EAAE,0BAA0B;QACrC,WAAW,EAAE,qCAAqC;KACnD;IACD;QACE,GAAG,EAAE,qCAAqC;QAC1C,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,qCAAqC;QACjD,cAAc,EAAE,KAAK;QACrB,cAAc,EAAE,UAAU;QAC1B,OAAO,EAAE,QAAQ;QACjB,aAAa,EAAE,KAAK;QACpB,SAAS,EAAE,0BAA0B;QACrC,WAAW,EAAE,qDAAqD;KACnE;IACD;QACE,GAAG,EAAE,+BAA+B;QACpC,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,+BAA+B;QAC3C,cAAc,EAAE,IAAI;QACpB,OAAO,EAAE,QAAQ;QACjB,aAAa,EAAE,KAAK;QACpB,SAAS,EAAE,YAAY;QACvB,WAAW,EAAE,4CAA4C;KAC1D;IACD,wEAAwE;IACxE;QACE,GAAG,EAAE,kCAAkC;QACvC,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,kCAAkC;QAC9C,cAAc,EAAE,KAAK;QACrB,OAAO,EAAE,QAAQ;QACjB,aAAa,EAAE,KAAK;QACpB,SAAS,EAAE,wBAAwB;QACnC,WAAW,EAAE,mDAAmD;KACjE;IACD;QACE,GAAG,EAAE,kCAAkC;QACvC,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,kCAAkC;QAC9C,cAAc,EAAE,KAAK;QACrB,OAAO,EAAE,QAAQ;QACjB,aAAa,EAAE,KAAK;QACpB,SAAS,EAAE,eAAe;QAC1B,WAAW,EAAE,iDAAiD;KAC/D;IACD,6BAA6B;IAC7B;QACE,GAAG,EAAE,mBAAmB;QACxB,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,mBAAmB;QAC/B,cAAc,EAAE,IAAI;QACpB,OAAO,EAAE,QAAQ;QACjB,aAAa,EAAE,IAAI;QACnB,SAAS,EAAE,cAAc;QACzB,WAAW,EAAE,oGAAoG;KAClH;IACD;QACE,GAAG,EAAE,+BAA+B;QACpC,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,+BAA+B;QAC3C,cAAc,EAAE,KAAK;QACrB,gBAAgB,EAAE,8BAA8B;QAChD,OAAO,EAAE,QAAQ;QACjB,aAAa,EAAE,KAAK;QACpB,SAAS,EAAE,qBAAqB;QAChC,WAAW,EAAE,wDAAwD;KACtE;IACD;QACE,+DAA+D;QAC/D,wEAAwE;QACxE,iEAAiE;QACjE,GAAG,EAAE,gCAAgC;QACrC,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,gCAAgC;QAC5C,cAAc,EAAE,IAAI;QACpB,OAAO,EAAE,UAAU;QACnB,aAAa,EAAE,KAAK;QACpB,SAAS,EAAE,uBAAuB;QAClC,WAAW,EAAE,8EAA8E;KAC5F;IACD;QACE,GAAG,EAAE,iCAAiC;QACtC,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,iCAAiC;QAC7C,cAAc,EAAE,KAAK;QACrB,OAAO,EAAE,QAAQ;QACjB,aAAa,EAAE,KAAK;QACpB,SAAS,EAAE,YAAY;QACvB,WAAW,EAAE,sDAAsD;KACpE;IACD;QACE,GAAG,EAAE,kCAAkC;QACvC,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,kCAAkC;QAC9C,cAAc,EAAE,KAAK;QACrB,OAAO,EAAE,QAAQ;QACjB,aAAa,EAAE,KAAK;QACpB,SAAS,EAAE,aAAa;QACxB,WAAW,EAAE,uDAAuD;KACrE;IACD;QACE,GAAG,EAAE,uCAAuC;QAC5C,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,uCAAuC;QACnD,cAAc,EAAE,KAAK;QACrB,OAAO,EAAE,QAAQ;QACjB,aAAa,EAAE,KAAK;QACpB,SAAS,EAAE,kBAAkB;QAC7B,WAAW,EAAE,8CAA8C;KAC5D;IACD,gEAAgE;IAChE;QACE,GAAG,EAAE,+BAA+B;QACpC,IAAI,EAAE,cAAc;QACpB,cAAc,EAAE,IAAI;QACpB,OAAO,EAAE,QAAQ;QACjB,aAAa,EAAE,KAAK;QACpB,SAAS,EAAE,qBAAqB;QAChC,WAAW,EAAE,0IAA0I;KACxJ;IACD;QACE,GAAG,EAAE,+BAA+B;QACpC,IAAI,EAAE,cAAc;QACpB,cAAc,EAAE,IAAI;QACpB,OAAO,EAAE,QAAQ;QACjB,aAAa,EAAE,KAAK;QACpB,SAAS,EAAE,qBAAqB;QAChC,WAAW,EAAE,qGAAqG;KACnH;CACO,CAAC;AAcX,MAAM,CAAC,MAAM,WAAW,GAA8B;IACpD,EAAE,SAAS,EAAE,sBAAsB,EAAE,MAAM,EAAE,qHAAqH,EAAE;IACpK,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,EAAE,+FAA+F,EAAE;IACvI,EAAE,SAAS,EAAE,mBAAmB,EAAE,MAAM,EAAE,wGAAwG,EAAE;IACpJ,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,EAAE,uHAAuH,EAAE;IAChK,EAAE,SAAS,EAAE,oBAAoB,EAAE,MAAM,EAAE,wHAAwH,EAAE;IACrK,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,EAAE,uFAAuF,EAAE;IAChI,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,EAAE,sFAAsF,EAAE;IAChI,EAAE,SAAS,EAAE,kBAAkB,EAAE,MAAM,EAAE,qFAAqF,EAAE;IAChI,EAAE,SAAS,EAAE,oBAAoB,EAAE,MAAM,EAAE,8GAA8G,EAAE;IAC3J,EAAE,SAAS,EAAE,mBAAmB,EAAE,MAAM,EAAE,oFAAoF,EAAE;IAChI,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,EAAE,kGAAkG,EAAE;IAC1I,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,EAAE,6FAA6F,EAAE;IACrI,EAAE,SAAS,EAAE,mBAAmB,EAAE,MAAM,EAAE,6DAA6D,EAAE;IACzG,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,sFAAsF,EAAE;IACzH,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,EAAE,kHAAkH,EAAE;IAC3J,EAAE,SAAS,EAAE,yBAAyB,EAAE,MAAM,EAAE,uGAAuG,EAAE;IACzJ,EAAE,SAAS,EAAE,wBAAwB,EAAE,MAAM,EAAE,qEAAqE,EAAE;IACtH,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE,yGAAyG,EAAE;IAC/I,EAAE,SAAS,EAAE,mBAAmB,EAAE,MAAM,EAAE,iEAAiE,EAAE;IAC7G,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,EAAE,4HAA4H,EAAE;IACtK,EAAE,SAAS,EAAE,oBAAoB,EAAE,MAAM,EAAE,mEAAmE,EAAE;IAChH,EAAE,SAAS,EAAE,0BAA0B,EAAE,MAAM,EAAE,+EAA+E,EAAE;IAClI,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,EAAE,+GAA+G,EAAE;IACzJ,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,EAAE,oEAAoE,EAAE;IAC9G,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,EAAE,oEAAoE,EAAE;IAC3G,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,EAAE,oEAAoE,EAAE;IAC9G,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,EAAE,oEAAoE,EAAE;IAC9G,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,EAAE,+DAA+D,EAAE;IACvG,EAAE,SAAS,EAAE,sBAAsB,EAAE,MAAM,EAAE,kEAAkE,EAAE;IACjH,EAAE,SAAS,EAAE,mBAAmB,EAAE,MAAM,EAAE,kDAAkD,EAAE;IAC9F,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,EAAE,kDAAkD,EAAE;IACzF,EAAE,SAAS,EAAE,qBAAqB,EAAE,MAAM,EAAE,mEAAmE,EAAE;IACjH,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,EAAE,sEAAsE,EAAE;IAC/G,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,EAAE,wCAAwC,EAAE;IAC/E,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,EAAE,gJAAgJ,EAAE;IAC1L,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,EAAE,4FAA4F,EAAE;IACtI,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,EAAE,2FAA2F,EAAE;IACpI,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,EAAE,wEAAwE,EAAE;IAChH,EAAE,SAAS,EAAE,sBAAsB,EAAE,MAAM,EAAE,mGAAmG,EAAE;IAClJ,EAAE,SAAS,EAAE,qBAAqB,EAAE,MAAM,EAAE,mFAAmF,EAAE;IACjI,EAAE,SAAS,EAAE,oBAAoB,EAAE,MAAM,EAAE,uCAAuC,EAAE;IACpF,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,EAAE,iFAAiF,EAAE;IACzH,EAAE,SAAS,EAAE,sBAAsB,EAAE,MAAM,EAAE,sGAAsG,EAAE;IACrJ,2EAA2E;IAC3E,EAAE,SAAS,EAAE,uBAAuB,EAAE,MAAM,EAAE,2MAA2M,EAAE;IAC3P,EAAE,SAAS,EAAE,uBAAuB,EAAE,MAAM,EAAE,sKAAsK,EAAE;IACtN,EAAE,SAAS,EAAE,yBAAyB,EAAE,MAAM,EAAE,4HAA4H,EAAE;IAC9K,EAAE,SAAS,EAAE,yBAAyB,EAAE,MAAM,EAAE,wKAAwK,EAAE;IAC1N,EAAE,SAAS,EAAE,iCAAiC,EAAE,MAAM,EAAE,2MAA2M,EAAE;IACrQ,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,EAAE,sIAAsI,EAAE;IAChL,EAAE,SAAS,EAAE,oBAAoB,EAAE,MAAM,EAAE,sIAAsI,EAAE;IACnL,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,6JAA6J,EAAE;IAClM,EAAE,SAAS,EAAE,qBAAqB,EAAE,MAAM,EAAE,sIAAsI,EAAE;IACpL,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,EAAE,mHAAmH,EAAE;IAC5J,EAAE,SAAS,EAAE,0BAA0B,EAAE,MAAM,EAAE,2HAA2H,EAAE;IAC9K,EAAE,SAAS,EAAE,wBAAwB,EAAE,MAAM,EAAE,sKAAsK,EAAE;IACvN,EAAE,SAAS,EAAE,qBAAqB,EAAE,MAAM,EAAE,sKAAsK,EAAE;IACpN,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,EAAE,0IAA0I,EAAE;IACjL,EAAE,SAAS,EAAE,qBAAqB,EAAE,MAAM,EAAE,qIAAqI,EAAE;IACnL,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,EAAE,wKAAwK,EAAE;IACjN,EAAE,SAAS,EAAE,sBAAsB,EAAE,MAAM,EAAE,8IAA8I,EAAE;IAC7L,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE,8HAA8H,EAAE;IACpK,EAAE,SAAS,EAAE,yBAAyB,EAAE,MAAM,EAAE,8HAA8H,EAAE;IAChL,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,8JAA8J,EAAE;IAClM,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,EAAE,0HAA0H,EAAE;IACnK,EAAE,SAAS,EAAE,uBAAuB,EAAE,MAAM,EAAE,8JAA8J,EAAE;IAC9M,EAAE,SAAS,EAAE,yBAAyB,EAAE,MAAM,EAAE,wHAAwH,EAAE;IAC1K,EAAE,SAAS,EAAE,oBAAoB,EAAE,MAAM,EAAE,0HAA0H,EAAE;IACvK,EAAE,SAAS,EAAE,wBAAwB,EAAE,MAAM,EAAE,kIAAkI,EAAE;IACnL,EAAE,SAAS,EAAE,mBAAmB,EAAE,MAAM,EAAE,0HAA0H,EAAE;IACtK,EAAE,SAAS,EAAE,sBAAsB,EAAE,MAAM,EAAE,qLAAqL,EAAE;IACpO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,EAAE,yHAAyH,EAAE;IACjK,EAAE,SAAS,EAAE,oBAAoB,EAAE,MAAM,EAAE,mKAAmK,EAAE;IAChN,EAAE,SAAS,EAAE,wBAAwB,EAAE,MAAM,EAAE,6JAA6J,EAAE;IAC9M,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,EAAE,iKAAiK,EAAE;IAC1M,EAAE,SAAS,EAAE,sBAAsB,EAAE,MAAM,EAAE,sJAAsJ,EAAE;IACrM,EAAE,SAAS,EAAE,qBAAqB,EAAE,MAAM,EAAE,wHAAwH,EAAE;CAC9J,CAAC;AAEX,qFAAqF;AACrF,MAAM,UAAU,aAAa;IAC3B,MAAM,GAAG,GAAG,IAAI,GAAG,EAA8B,CAAC;IAClD,KAAK,MAAM,KAAK,IAAI,cAAc;QAAE,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC9D,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,KAAK,IAAI,cAAc;QAAE,IAAI,KAAK,CAAC,SAAS;YAAE,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAClF,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,mBAAmB;IACjC,OAAO,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;AACpD,CAAC"}

package/dist/monitoring/guardPosture.d.ts

@@ -0,0 +1,77 @@
+/**
+ * guardPosture — the SINGLE shared definition of "what is a guard and what
+ * does the config say about it" (GUARD-POSTURE-ENDPOINT-SPEC §2.1).
+ *
+ * Consumed by BOTH the boot-time GuardPostureTripwire (transition alarms) and
+ * the GET /guards endpoint (steady-state readability). Never re-derive this
+ * extraction elsewhere — the SafeGitExecutor single-funnel lesson: two copies
+ * of "what counts as a guard" WILL drift, and the drifted one is always the
+ * one watching when the next Mini incident happens.
+ *
+ * Also home of resolveGuardConfigSnapshot(): the one-disk-read resolved-config
+ * snapshot the endpoint derives everything from. Disk, not the in-memory
+ * config object, because the original incident (2026-06-05) was an emergency
+ * DIRECT DISK EDIT invisible to in-memory config until restart.
+ */
+import { type AgentType } from '../config/ConfigDefaults.js';
+export type GuardPosture = Record<string, boolean>;
+export interface GuardPostureDiff {
+    /** Guards that were enabled last boot and are disabled now. */
+    disabled: string[];
+    /** Guards that were disabled last boot and are enabled now. */
+    enabled: string[];
+}
+/** Posture keys whose false→true transition is COST-INCREASING and must be
+ *  surfaced as loudly as a guard-disable (FABLE-MODEL-ESCALATION-SPEC §10). */
+export declare const COST_INCREASING_ENABLE_KEYS: ReadonlySet<string>;
+/**
+ * Extract the guard posture from a resolved config object.
+ *
+ * Covered surface (generic by design — a future guard is covered the moment
+ * it follows the `monitoring.<key>.enabled` convention, with no change here):
+ *   - `monitoring.<key>.enabled` (boolean) → `monitoring.<key>.enabled`
+ *   - `monitoring.<key>` (plain boolean)   → `monitoring.<key>`
+ *   - `scheduler.enabled` (boolean)        → `scheduler.enabled`
+ *   - `models.tierEscalation.{enabled,dryRun}`
+ */
+export declare function extractGuardPosture(config: unknown): GuardPosture;
+/**
+ * Diff two postures. Only keys present in BOTH snapshots can transition —
+ * a key appearing for the first time (new feature) or vanishing (config
+ * cleanup) is a shape change, not a guard flip, and raises nothing.
+ */
+export declare function diffGuardPosture(prev: GuardPosture, cur: GuardPosture): GuardPostureDiff;
+export interface GuardPostureBootSnapshot {
+    ts: string;
+    posture: GuardPosture;
+}
+export declare function guardPostureSnapshotPath(stateDir: string): string;
+/** Read the tripwire's boot-time posture snapshot. null = absent/corrupt —
+ *  callers degrade to `divergence: "snapshot-unavailable"`, never invent. */
+export declare function readGuardPostureBootSnapshot(stateDir: string): GuardPostureBootSnapshot | null;
+export interface ResolvedGuardConfigSnapshot {
+    /** Defaults + on-disk file deep-merged, dev gates resolved. The ONLY object
+     *  posture derivation reads config from. */
+    resolved: Record<string, unknown>;
+    /** Defaults alone (same agent type, dev gates resolved against the merged
+     *  config's developmentAgent) — the baseline for offClass classification. */
+    defaults: Record<string, unknown>;
+    /** True when `.instar/config.json` was absent (a defaults-only snapshot). */
+    fileAbsent: boolean;
+    /** Set when the file existed but could not be read/parsed. The caller must
+     *  surface this as a top-level error — never an empty-truthful inventory. */
+    readError?: string;
+}
+/**
+ * Read the on-disk agent config ONCE and resolve it the way the server would:
+ * shared defaults (by agent type) + file deep-merged on top + every
+ * DEV_GATED_FEATURES `enabled` resolved via resolveDevAgentGate (their
+ * convention is to OMIT `enabled` and let the gate decide).
+ *
+ * EXACTLY ONE fs read of config.json per call — the endpoint calls this once
+ * per request (Tier-1 pinned), never per guard.
+ */
+export declare function resolveGuardConfigSnapshot(projectDir: string, opts?: {
+    agentType?: AgentType;
+}): ResolvedGuardConfigSnapshot;
+//# sourceMappingURL=guardPosture.d.ts.map

package/dist/monitoring/guardPosture.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guardPosture.d.ts","sourceRoot":"","sources":["../../src/monitoring/guardPosture.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAIH,OAAO,EAAmB,KAAK,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAI9E,MAAM,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEnD,MAAM,WAAW,gBAAgB;IAC/B,+DAA+D;IAC/D,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,+DAA+D;IAC/D,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED;+EAC+E;AAC/E,eAAO,MAAM,2BAA2B,EAAE,WAAW,CAAC,MAAM,CAE1D,CAAC;AAEH;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,OAAO,GAAG,YAAY,CAqCjE;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,YAAY,GAAG,gBAAgB,CASxF;AAKD,MAAM,WAAW,wBAAwB;IACvC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,YAAY,CAAC;CACvB;AAED,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEjE;AAED;6EAC6E;AAC7E,wBAAgB,4BAA4B,CAAC,QAAQ,EAAE,MAAM,GAAG,wBAAwB,GAAG,IAAI,CAe9F;AAID,MAAM,WAAW,2BAA2B;IAC1C;gDAC4C;IAC5C,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC;iFAC6E;IAC7E,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,6EAA6E;IAC7E,UAAU,EAAE,OAAO,CAAC;IACpB;iFAC6E;IAC7E,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAgCD;;;;;;;;GAQG;AACH,wBAAgB,0BAA0B,CACxC,UAAU,EAAE,MAAM,EAClB,IAAI,CAAC,EAAE;IAAE,SAAS,CAAC,EAAE,SAAS,CAAA;CAAE,GAC/B,2BAA2B,CAoD7B"}