instar 1.3.738 → 1.3.740

package/dist/data/llmBenchCoverage.d.ts

@@ -35,4 +35,22 @@ export type UntrustedInputFlag = true | {
     false: string;
 };
 export declare const LLM_UNTRUSTED_INPUT: Readonly<Record<string, UntrustedInputFlag>>;
+/** The kind of claim a judge callsite credits/refuses (spec §2). Different kinds
+ * take different evidence, so each `judgesClaims: true` entry declares its kind:
+ *   - completionClaim: proof of asserted work ("the task is done / tests pass");
+ *   - healthClaim: behavioral-signal sufficiency (stall/stuck/health classifiers);
+ *   - scoredCredit: rubric evaluators that award credit for claimed work. */
+export type ClaimKind = 'completionClaim' | 'healthClaim' | 'scoredCredit';
+export declare const CLAIM_KINDS: ReadonlyArray<ClaimKind>;
+/** The `judgesClaims` classification of one LLM callsite:
+ *   - `{ claimKind }`  → judges a claim (true), of the declared kind;
+ *   - `false`          → does not judge a completion/progress/health claim;
+ *   - `{ false: '<reason>' }` → a judge-SHAPED callsite argued OUT of scope
+ *     (pinned shrink-only + reviewed, like the untrustedInput argued-false set). */
+export type JudgesClaimsFlag = {
+    claimKind: ClaimKind;
+} | false | {
+    false: string;
+};
+export declare const LLM_JUDGES_CLAIMS: Readonly<Record<string, JudgesClaimsFlag>>;
 //# sourceMappingURL=llmBenchCoverage.d.ts.map

package/dist/data/llmBenchCoverage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"llmBenchCoverage.d.ts","sourceRoot":"","sources":["../../src/data/llmBenchCoverage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,MAAM,MAAM,aAAa,GACrB;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAChB;IAAE,OAAO,EAAE,QAAQ,GAAG,QAAQ,CAAA;CAAE,GAChC;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvB,eAAO,MAAM,kBAAkB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAqFtE,CAAC;AA4BF,MAAM,MAAM,kBAAkB,GAAG,IAAI,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAE1D,eAAO,MAAM,mBAAmB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAiF5E,CAAC"}
+{"version":3,"file":"llmBenchCoverage.d.ts","sourceRoot":"","sources":["../../src/data/llmBenchCoverage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,MAAM,MAAM,aAAa,GACrB;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAChB;IAAE,OAAO,EAAE,QAAQ,GAAG,QAAQ,CAAA;CAAE,GAChC;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvB,eAAO,MAAM,kBAAkB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAqFtE,CAAC;AA4BF,MAAM,MAAM,kBAAkB,GAAG,IAAI,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAE1D,eAAO,MAAM,mBAAmB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAiF5E,CAAC;AA+CF;;;;6EAI6E;AAC7E,MAAM,MAAM,SAAS,GAAG,iBAAiB,GAAG,aAAa,GAAG,cAAc,CAAC;AAE3E,eAAO,MAAM,WAAW,EAAE,aAAa,CAAC,SAAS,CAIhD,CAAC;AAEF;;;;oFAIoF;AACpF,MAAM,MAAM,gBAAgB,GAAG;IAAE,SAAS,EAAE,SAAS,CAAA;CAAE,GAAG,KAAK,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEpF,eAAO,MAAM,iBAAiB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAmExE,CAAC"}

package/dist/data/llmBenchCoverage.js

@@ -171,4 +171,72 @@ export const LLM_UNTRUSTED_INPUT = {
         false: 'attribution-manifest alias only (a legacy prompt-pattern matcher); the live matcher calls with attribution PromptGate, classified true there',
     },
 };
+export const CLAIM_KINDS = [
+    'completionClaim',
+    'healthClaim',
+    'scoredCredit',
+];
+export const LLM_JUDGES_CLAIMS = {
+    // ── Judges (judgesClaims: true) ────────────────────────────────────────────
+    // Completion evaluators — credit/refuse a claim of asserted work.
+    CompletionEvaluator: { claimKind: 'completionClaim' }, // THE motivating callsite: credited a bare "tests pass"
+    UnjustifiedStopGate: { claimKind: 'completionClaim' }, // judges whether a stop is justified = is the claimed work actually done/blocked
+    JobReflector: { claimKind: 'completionClaim' }, // reflects on job success/completion (spec §2 pending-wave judge; classified now so the asymmetry can't silently reopen)
+    // Stall/stuck/health classifiers — credit/refuse a health claim about a session.
+    SessionWatchdog: { claimKind: 'healthClaim' }, // stuck-judge
+    PresenceProxy: { claimKind: 'healthClaim' }, // tier-3 stall judge
+    StallTriageNurse: { claimKind: 'healthClaim' }, // stall-triage diagnosis
+    TelegramAdapter: { claimKind: 'healthClaim' }, // confirmStallAlert — judges whether a session is genuinely stalled before alerting (inclusion criteria: stall/health classifier)
+    SlackAdapter: { claimKind: 'healthClaim' }, // confirmStallAlert (byte-identical prompt to Telegram's; parity)
+    // Scored evaluators — award credit for claimed work.
+    'mentor-stage-b': { claimKind: 'scoredCredit' }, // classifies mentor signals over mentee output (spec §2 pending-wave judge)
+    // ── Not a completion/progress/health judge (judgesClaims: false) ────────────
+    // Sentinels that classify/summarize but do not credit a completion/health claim.
+    InputDetector: false, // legacy prompt-pattern matcher alias
+    InputGuard: false, // input-coherence, not a completion/health claim
+    SessionActivitySentinel: false, // activity DIGEST — summarizes activity, does not credit a claim (exclusion: pure summarizer)
+    CommitmentSentinel: false, // detects commitments in text
+    PromiseBeacon: false, // no live LLM prompt (hooks unwired at construction — see its bench exemption)
+    MessageSentinel: false, // classifies message intent (pause/emergency), not a completion claim
+    TopicIntentArcCheck: false, // arc-check classification of a topic's intent, not a completion/health claim
+    InputClassifier: false, // input auto-approve vs relay classification
+    SessionSummarySentinel: false, // summarizes tmux output → task/phase/files (exclusion: pure summarizer)
+    ProjectDriftChecker: false, // is-work-on-project coherence, not a completion/health claim
+    TemporalCoherenceChecker: false, // temporal-coherence classification
+    ResumeQueueDrainer: false, // inspects session state before a resume — judges STATE validity, not an agent's claim
+    InteractivePoolCanaryJudge: false, // judges a FIXED known-answer canary constant, not an agent claim
+    // Gates that classify an action/message but do not credit a completion/health claim.
+    PromptGate: false, // detects prompt-injection in content
+    AutoApprover: false, // mechanical key injection, no LLM prompt of its own
+    IntegrationGate: false, // delegates to JobReflector.reflect(), no own callsite
+    ExternalOperationGate: false, // classifies operation mutability/reversibility, not a completion claim
+    WarrantsReplyGate: false, // "should I reply?" — not a completion/health claim
+    CoherenceGate: false, // no own callsite — flows through CoherenceReviewer
+    MessagingToneGate: false, // reviews outbound tone/leaks
+    CoherenceReviewer: false, // reviews outbound coherence
+    LLMSanitizer: false, // sanitizes untrusted inbound content
+    OverrideDetector: false, // detects override intent in a turn
+    TaskClassifier: false, // classifies task type
+    ResumeValidator: false, // matches a resume UUID against a topic — a state match, not a claim
+    // Reflectors/jobs that extract/summarize/route but do not credit a completion/health claim.
+    crossModelReviewer: false, // reviews a SPEC document, not a session's completion claim
+    SelfKnowledgeTree: false, // extracts self-knowledge
+    TreeTriage: false, // triages tree fragments
+    TopicSummarizer: false, // summarizes a topic
+    ContextualEvaluator: false, // evaluates context relevance
+    RelationshipManager: false, // extracts relationship facts
+    StandardsConformanceReviewer: false, // reviews artifact-vs-standard conformance, not a session completion claim
+    DiscoveryEvaluator: false, // evaluates serendipity discoveries
+    Usher: false, // routes a turn to candidate topics
+    TopicIntentExtractor: false, // extracts topic intent from a turn
+    PreCompactionFlush: false, // extracts durable facts before compaction
+    TreeSynthesis: false, // synthesizes knowledge fragments → answer
+    LLMConflictResolver: false, // resolves divergent multi-machine state
+    openConversationBrief: false, // generates an A2A conversation brief
+    'a2a-checkin': false, // summarizes A2A check-in threads
+    'correction-learning': false, // distills recurring corrections → preference
+    PipeSessionSpawner: false, // spawns from task descriptions
+    CartographerSweep: false, // authors doc-tree summaries over code
+    StandardsCoverageEnrichment: false, // enriches standards-coverage rows
+};
 //# sourceMappingURL=llmBenchCoverage.js.map

package/dist/data/llmBenchCoverage.js.map

@@ -1 +1 @@
-{"version":3,"file":"llmBenchCoverage.js","sourceRoot":"","sources":["../../src/data/llmBenchCoverage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAOH,MAAM,CAAC,MAAM,kBAAkB,GAA4C;IACzE,mEAAmE;IACnE,eAAe,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE;IAC9C,iBAAiB,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE;IACxC,6DAA6D;IAC7D,mBAAmB,EAAE,EAAE,IAAI,EAAE,iCAAiC,EAAE;IAChE,qBAAqB,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE;IACnD,YAAY,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE;IAC7C,iBAAiB,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE;IAC7C,eAAe,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE;IAC7C,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;IACxB,qBAAqB,EAAE,EAAE,IAAI,EAAE,sBAAsB,EAAE;IACvD,iBAAiB,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE;IAE1C,kEAAkE;IAClE,0BAA0B,EAAE;QAC1B,MAAM,EACJ,0HAA0H;KAC7H;IAED,mFAAmF;IACnF,UAAU,EAAE,EAAE,IAAI,EAAE,uBAAuB,EAAE;IAC7C,uBAAuB,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE;IACpD,gBAAgB,EAAE,EAAE,IAAI,EAAE,wBAAwB,EAAE;IACpD,kBAAkB,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE;IACnD,aAAa,EAAE,EAAE,IAAI,EAAE,sBAAsB,EAAE;IAC/C,mBAAmB,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE;IACpD,wBAAwB,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE;IACxD,eAAe,EAAE,EAAE,IAAI,EAAE,sBAAsB,EAAE;IACjD,kBAAkB,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE;IACnD,mBAAmB,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE;IACnD,eAAe,EAAE,EAAE,IAAI,EAAE,wBAAwB,EAAE;IACnD,mEAAmE;IACnE,sEAAsE;IACtE,iEAAiE;IACjE,YAAY,EAAE,EAAE,IAAI,EAAE,wBAAwB,EAAE;IAChD,UAAU,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE;IAC1C,mBAAmB,EAAE,EAAE,IAAI,EAAE,uBAAuB,EAAE;IACtD,gBAAgB,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE;IAC/C,cAAc,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE;IAC3C,eAAe,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE;IAC7C,sBAAsB,EAAE,EAAE,IAAI,EAAE,0BAA0B,EAAE;IAC5D,oBAAoB,EAAE,EAAE,IAAI,EAAE,wBAAwB,EAAE;IAExD,yFAAyF;IACzF,eAAe,EAAE;QACf,MAAM,EACJ,yKAAyK;KAC5K;IACD,aAAa,EAAE;QACb,MAAM,EACJ,qKAAqK;KACxK;IACD,YAAY,EAAE;QACZ,MAAM,EACJ,6IAA6I;KAChJ;IACD,aAAa,EAAE;QACb,MAAM,EACJ,mLAAmL;KACtL;IACD,aAAa,EAAE;QACb,MAAM,EACJ,+LAA+L;KAClM;IAED,mDAAmD;IACnD,YAAY,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACnC,kBAAkB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACzC,iBAAiB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACxC,UAAU,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACjC,eAAe,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACtC,mBAAmB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IAC1C,mBAAmB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IAC1C,4BAA4B,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACnD,kBAAkB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACzC,kBAAkB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACzC,iBAAiB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACxC,2BAA2B,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IAClD,kBAAkB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACzC,aAAa,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACpC,mBAAmB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IAC1C,qBAAqB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IAC5C,aAAa,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACpC,gBAAgB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;CACxC,CAAC;AA8BF,MAAM,CAAC,MAAM,mBAAmB,GAAiD;IAC/E,yEAAyE;IACzE,UAAU,EAAE,IAAI;IAChB,uBAAuB,EAAE,IAAI;IAC7B,gBAAgB,EAAE,IAAI;IACtB,kBAAkB,EAAE,IAAI;IACxB,aAAa,EAAE,IAAI;IACnB,eAAe,EAAE,IAAI;IACrB,mBAAmB,EAAE,IAAI;IACzB,wBAAwB,EAAE,IAAI;IAC9B,mBAAmB,EAAE,IAAI;IACzB,eAAe,EAAE,IAAI;IACrB,kBAAkB,EAAE,IAAI;IACxB,mBAAmB,EAAE,IAAI;IACzB,YAAY,EAAE,IAAI;IAClB,eAAe,EAAE,IAAI;IACrB,sBAAsB,EAAE,IAAI;IAC5B,eAAe,EAAE,IAAI;IAErB,4DAA4D;IAC5D,UAAU,EAAE,IAAI;IAChB,qBAAqB,EAAE,IAAI,EAAE,uEAAuE;IACpG,iBAAiB,EAAE,IAAI;IACvB,mBAAmB,EAAE,IAAI;IACzB,iBAAiB,EAAE,IAAI,EAAE,oEAAoE;IAC7F,iBAAiB,EAAE,IAAI;IACvB,YAAY,EAAE,IAAI,EAAE,kDAAkD;IACtE,gBAAgB,EAAE,IAAI;IACtB,cAAc,EAAE,IAAI;IACpB,eAAe,EAAE,IAAI,EAAE,wEAAwE;IAE/F,oFAAoF;IACpF,YAAY,EAAE,IAAI;IAClB,kBAAkB,EAAE,IAAI;IACxB,iBAAiB,EAAE,IAAI;IACvB,UAAU,EAAE,IAAI;IAChB,eAAe,EAAE,IAAI;IACrB,mBAAmB,EAAE,IAAI;IACzB,mBAAmB,EAAE,IAAI;IACzB,4BAA4B,EAAE,IAAI;IAClC,kBAAkB,EAAE,IAAI;IACxB,KAAK,EAAE,IAAI;IACX,oBAAoB,EAAE,IAAI;IAC1B,kBAAkB,EAAE,IAAI;IACxB,aAAa,EAAE,IAAI;IACnB,mBAAmB,EAAE,IAAI,EAAE,sDAAsD;IACjF,qBAAqB,EAAE,IAAI;IAC3B,aAAa,EAAE,IAAI,EAAE,4BAA4B;IACjD,qBAAqB,EAAE,IAAI;IAC3B,gBAAgB,EAAE,IAAI;IAEtB,+DAA+D;IAC/D,kBAAkB,EAAE,IAAI,EAAE,0DAA0D;IACpF,iBAAiB,EAAE,IAAI,EAAE,gGAAgG;IACzH,2BAA2B,EAAE,IAAI;IAEjC,0FAA0F;IAC1F,aAAa,EAAE;QACb,KAAK,EACH,8KAA8K;KACjL;IACD,0BAA0B,EAAE;QAC1B,KAAK,EACH,iIAAiI;KACpI;IACD,YAAY,EAAE;QACZ,KAAK,EACH,2IAA2I;KAC9I;IACD,eAAe,EAAE;QACf,KAAK,EACH,mIAAmI;KACtI;IACD,aAAa,EAAE;QACb,KAAK,EACH,+HAA+H;KAClI;IACD,aAAa,EAAE;QACb,KAAK,EACH,8IAA8I;KACjJ;CACF,CAAC"}
+{"version":3,"file":"llmBenchCoverage.js","sourceRoot":"","sources":["../../src/data/llmBenchCoverage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAOH,MAAM,CAAC,MAAM,kBAAkB,GAA4C;IACzE,mEAAmE;IACnE,eAAe,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE;IAC9C,iBAAiB,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE;IACxC,6DAA6D;IAC7D,mBAAmB,EAAE,EAAE,IAAI,EAAE,iCAAiC,EAAE;IAChE,qBAAqB,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE;IACnD,YAAY,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE;IAC7C,iBAAiB,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE;IAC7C,eAAe,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE;IAC7C,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;IACxB,qBAAqB,EAAE,EAAE,IAAI,EAAE,sBAAsB,EAAE;IACvD,iBAAiB,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE;IAE1C,kEAAkE;IAClE,0BAA0B,EAAE;QAC1B,MAAM,EACJ,0HAA0H;KAC7H;IAED,mFAAmF;IACnF,UAAU,EAAE,EAAE,IAAI,EAAE,uBAAuB,EAAE;IAC7C,uBAAuB,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE;IACpD,gBAAgB,EAAE,EAAE,IAAI,EAAE,wBAAwB,EAAE;IACpD,kBAAkB,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE;IACnD,aAAa,EAAE,EAAE,IAAI,EAAE,sBAAsB,EAAE;IAC/C,mBAAmB,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE;IACpD,wBAAwB,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE;IACxD,eAAe,EAAE,EAAE,IAAI,EAAE,sBAAsB,EAAE;IACjD,kBAAkB,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE;IACnD,mBAAmB,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE;IACnD,eAAe,EAAE,EAAE,IAAI,EAAE,wBAAwB,EAAE;IACnD,mEAAmE;IACnE,sEAAsE;IACtE,iEAAiE;IACjE,YAAY,EAAE,EAAE,IAAI,EAAE,wBAAwB,EAAE;IAChD,UAAU,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE;IAC1C,mBAAmB,EAAE,EAAE,IAAI,EAAE,uBAAuB,EAAE;IACtD,gBAAgB,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE;IAC/C,cAAc,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE;IAC3C,eAAe,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE;IAC7C,sBAAsB,EAAE,EAAE,IAAI,EAAE,0BAA0B,EAAE;IAC5D,oBAAoB,EAAE,EAAE,IAAI,EAAE,wBAAwB,EAAE;IAExD,yFAAyF;IACzF,eAAe,EAAE;QACf,MAAM,EACJ,yKAAyK;KAC5K;IACD,aAAa,EAAE;QACb,MAAM,EACJ,qKAAqK;KACxK;IACD,YAAY,EAAE;QACZ,MAAM,EACJ,6IAA6I;KAChJ;IACD,aAAa,EAAE;QACb,MAAM,EACJ,mLAAmL;KACtL;IACD,aAAa,EAAE;QACb,MAAM,EACJ,+LAA+L;KAClM;IAED,mDAAmD;IACnD,YAAY,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACnC,kBAAkB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACzC,iBAAiB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACxC,UAAU,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACjC,eAAe,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACtC,mBAAmB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IAC1C,mBAAmB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IAC1C,4BAA4B,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACnD,kBAAkB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACzC,kBAAkB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACzC,iBAAiB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACxC,2BAA2B,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IAClD,kBAAkB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACzC,aAAa,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACpC,mBAAmB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IAC1C,qBAAqB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IAC5C,aAAa,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACpC,gBAAgB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;CACxC,CAAC;AA8BF,MAAM,CAAC,MAAM,mBAAmB,GAAiD;IAC/E,yEAAyE;IACzE,UAAU,EAAE,IAAI;IAChB,uBAAuB,EAAE,IAAI;IAC7B,gBAAgB,EAAE,IAAI;IACtB,kBAAkB,EAAE,IAAI;IACxB,aAAa,EAAE,IAAI;IACnB,eAAe,EAAE,IAAI;IACrB,mBAAmB,EAAE,IAAI;IACzB,wBAAwB,EAAE,IAAI;IAC9B,mBAAmB,EAAE,IAAI;IACzB,eAAe,EAAE,IAAI;IACrB,kBAAkB,EAAE,IAAI;IACxB,mBAAmB,EAAE,IAAI;IACzB,YAAY,EAAE,IAAI;IAClB,eAAe,EAAE,IAAI;IACrB,sBAAsB,EAAE,IAAI;IAC5B,eAAe,EAAE,IAAI;IAErB,4DAA4D;IAC5D,UAAU,EAAE,IAAI;IAChB,qBAAqB,EAAE,IAAI,EAAE,uEAAuE;IACpG,iBAAiB,EAAE,IAAI;IACvB,mBAAmB,EAAE,IAAI;IACzB,iBAAiB,EAAE,IAAI,EAAE,oEAAoE;IAC7F,iBAAiB,EAAE,IAAI;IACvB,YAAY,EAAE,IAAI,EAAE,kDAAkD;IACtE,gBAAgB,EAAE,IAAI;IACtB,cAAc,EAAE,IAAI;IACpB,eAAe,EAAE,IAAI,EAAE,wEAAwE;IAE/F,oFAAoF;IACpF,YAAY,EAAE,IAAI;IAClB,kBAAkB,EAAE,IAAI;IACxB,iBAAiB,EAAE,IAAI;IACvB,UAAU,EAAE,IAAI;IAChB,eAAe,EAAE,IAAI;IACrB,mBAAmB,EAAE,IAAI;IACzB,mBAAmB,EAAE,IAAI;IACzB,4BAA4B,EAAE,IAAI;IAClC,kBAAkB,EAAE,IAAI;IACxB,KAAK,EAAE,IAAI;IACX,oBAAoB,EAAE,IAAI;IAC1B,kBAAkB,EAAE,IAAI;IACxB,aAAa,EAAE,IAAI;IACnB,mBAAmB,EAAE,IAAI,EAAE,sDAAsD;IACjF,qBAAqB,EAAE,IAAI;IAC3B,aAAa,EAAE,IAAI,EAAE,4BAA4B;IACjD,qBAAqB,EAAE,IAAI;IAC3B,gBAAgB,EAAE,IAAI;IAEtB,+DAA+D;IAC/D,kBAAkB,EAAE,IAAI,EAAE,0DAA0D;IACpF,iBAAiB,EAAE,IAAI,EAAE,gGAAgG;IACzH,2BAA2B,EAAE,IAAI;IAEjC,0FAA0F;IAC1F,aAAa,EAAE;QACb,KAAK,EACH,8KAA8K;KACjL;IACD,0BAA0B,EAAE;QAC1B,KAAK,EACH,iIAAiI;KACpI;IACD,YAAY,EAAE;QACZ,KAAK,EACH,2IAA2I;KAC9I;IACD,eAAe,EAAE;QACf,KAAK,EACH,mIAAmI;KACtI;IACD,aAAa,EAAE;QACb,KAAK,EACH,+HAA+H;KAClI;IACD,aAAa,EAAE;QACb,KAAK,EACH,8IAA8I;KACjJ;CACF,CAAC;AAsDF,MAAM,CAAC,MAAM,WAAW,GAA6B;IACnD,iBAAiB;IACjB,aAAa;IACb,cAAc;CACf,CAAC;AASF,MAAM,CAAC,MAAM,iBAAiB,GAA+C;IAC3E,8EAA8E;IAC9E,kEAAkE;IAClE,mBAAmB,EAAE,EAAE,SAAS,EAAE,iBAAiB,EAAE,EAAE,wDAAwD;IAC/G,mBAAmB,EAAE,EAAE,SAAS,EAAE,iBAAiB,EAAE,EAAE,iFAAiF;IACxI,YAAY,EAAE,EAAE,SAAS,EAAE,iBAAiB,EAAE,EAAE,yHAAyH;IAEzK,iFAAiF;IACjF,eAAe,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,EAAE,cAAc;IAC7D,aAAa,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,EAAE,qBAAqB;IAClE,gBAAgB,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,EAAE,yBAAyB;IACzE,eAAe,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,EAAE,kIAAkI;IACjL,YAAY,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,EAAE,kEAAkE;IAE9G,qDAAqD;IACrD,gBAAgB,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE,EAAE,4EAA4E;IAE7H,+EAA+E;IAC/E,iFAAiF;IACjF,aAAa,EAAE,KAAK,EAAE,sCAAsC;IAC5D,UAAU,EAAE,KAAK,EAAE,iDAAiD;IACpE,uBAAuB,EAAE,KAAK,EAAE,8FAA8F;IAC9H,kBAAkB,EAAE,KAAK,EAAE,8BAA8B;IACzD,aAAa,EAAE,KAAK,EAAE,+EAA+E;IACrG,eAAe,EAAE,KAAK,EAAE,sEAAsE;IAC9F,mBAAmB,EAAE,KAAK,EAAE,8EAA8E;IAC1G,eAAe,EAAE,KAAK,EAAE,6CAA6C;IACrE,sBAAsB,EAAE,KAAK,EAAE,yEAAyE;IACxG,mBAAmB,EAAE,KAAK,EAAE,8DAA8D;IAC1F,wBAAwB,EAAE,KAAK,EAAE,oCAAoC;IACrE,kBAAkB,EAAE,KAAK,EAAE,uFAAuF;IAClH,0BAA0B,EAAE,KAAK,EAAE,kEAAkE;IAErG,qFAAqF;IACrF,UAAU,EAAE,KAAK,EAAE,sCAAsC;IACzD,YAAY,EAAE,KAAK,EAAE,qDAAqD;IAC1E,eAAe,EAAE,KAAK,EAAE,uDAAuD;IAC/E,qBAAqB,EAAE,KAAK,EAAE,wEAAwE;IACtG,iBAAiB,EAAE,KAAK,EAAE,oDAAoD;IAC9E,aAAa,EAAE,KAAK,EAAE,oDAAoD;IAC1E,iBAAiB,EAAE,KAAK,EAAE,8BAA8B;IACxD,iBAAiB,EAAE,KAAK,EAAE,6BAA6B;IACvD,YAAY,EAAE,KAAK,EAAE,sCAAsC;IAC3D,gBAAgB,EAAE,KAAK,EAAE,oCAAoC;IAC7D,cAAc,EAAE,KAAK,EAAE,uBAAuB;IAC9C,eAAe,EAAE,KAAK,EAAE,qEAAqE;IAE7F,4FAA4F;IAC5F,kBAAkB,EAAE,KAAK,EAAE,4DAA4D;IACvF,iBAAiB,EAAE,KAAK,EAAE,0BAA0B;IACpD,UAAU,EAAE,KAAK,EAAE,yBAAyB;IAC5C,eAAe,EAAE,KAAK,EAAE,qBAAqB;IAC7C,mBAAmB,EAAE,KAAK,EAAE,8BAA8B;IAC1D,mBAAmB,EAAE,KAAK,EAAE,8BAA8B;IAC1D,4BAA4B,EAAE,KAAK,EAAE,2EAA2E;IAChH,kBAAkB,EAAE,KAAK,EAAE,oCAAoC;IAC/D,KAAK,EAAE,KAAK,EAAE,oCAAoC;IAClD,oBAAoB,EAAE,KAAK,EAAE,oCAAoC;IACjE,kBAAkB,EAAE,KAAK,EAAE,2CAA2C;IACtE,aAAa,EAAE,KAAK,EAAE,2CAA2C;IACjE,mBAAmB,EAAE,KAAK,EAAE,yCAAyC;IACrE,qBAAqB,EAAE,KAAK,EAAE,sCAAsC;IACpE,aAAa,EAAE,KAAK,EAAE,kCAAkC;IACxD,qBAAqB,EAAE,KAAK,EAAE,8CAA8C;IAC5E,kBAAkB,EAAE,KAAK,EAAE,gCAAgC;IAC3D,iBAAiB,EAAE,KAAK,EAAE,uCAAuC;IACjE,2BAA2B,EAAE,KAAK,EAAE,mCAAmC;CACxE,CAAC"}

package/dist/monitoring/ReapLog.d.ts

@@ -67,10 +67,34 @@ export interface ReapLogEntry {
     /** Notify entries: the outcome this record asserts. */
     outcome?: ReapNotifyOutcome;
 }
+/** Optional overrides for the self-limiting caps — primarily so tests can
+ *  trigger rotation without writing 16MB. Production uses the module defaults. */
+export interface ReapLogOptions {
+    maxLogBytes?: number;
+    tailReadBytes?: number;
+    maxSkipState?: number;
+}
 export declare class ReapLog {
     private readonly logPath;
     private readonly machineId?;
-    constructor(stateDir: string, machineId?: () => string | undefined);
+    private readonly maxLogBytes;
+    private readonly tailReadBytes;
+    private readonly maxSkipState;
+    /** session name → last-LOGGED skip signature (`${reason}::${skipped}`).
+     *  A `recordSkipped` whose signature equals the session's last-logged one is
+     *  the SAME permanent veto being re-evaluated at tick speed (open-commitment,
+     *  not-lease-holder, protected …) — it is NOT re-appended. This is the
+     *  primary cure for the reaper self-inflicted log flood (3218 open-commitment
+     *  + 1608 not-lease-holder repeat rows ⇒ 142MB, 2026-07-03): mirror the
+     *  reaper-audit "log on transition, not every tick" pattern. Cleared when the
+     *  session is reaped so a same-named successor logs its first skip fresh. */
+    private readonly skipState;
+    /** Cheap running estimate of the current log's byte size, so rotation is
+     *  decided WITHOUT a statSync on every append. Seeded from the real size on
+     *  first append, then advanced by each write; re-synced on rotation. -1 =
+     *  not yet seeded. */
+    private approxSize;
+    constructor(stateDir: string, machineId?: () => string | undefined, opts?: ReapLogOptions);
     recordReaped(e: {
         session: string;
         tmuxSession: string;
@@ -103,8 +127,26 @@ export declare class ReapLog {
         skipped: string;
         origin?: 'operator' | 'autonomous';
     }): void;
+    /** Record a session's last-logged skip signature, enforcing the map ceiling
+     *  (oldest-first prune — Map preserves insertion order). Re-inserting an
+     *  existing key does not reorder it, which is fine: churny NEW names are the
+     *  growth risk, and those get pruned. */
+    private rememberSkip;
+    /** Forget a session's skip state — call when the session is gone (reaped) so a
+     *  same-named successor logs its first skip fresh and the map can't leak. */
+    private forgetSkip;
     private append;
-    /** Read the most-recent `limit` entries (newest last), tolerating partial/corrupt lines. */
+    /** Roll the log to `<path>.1` (single retained generation) once it would cross
+     *  MAX_LOG_BYTES, so the file can never grow unbounded. Rename is O(1) — no
+     *  data rewrite on the append hot path (rewriting a large file synchronously
+     *  here would reintroduce the very event-loop stall we're removing). Seeds the
+     *  cheap size estimate from the real file size on first use. */
+    private rotateIfNeeded;
+    /** Read the most-recent `limit` entries (newest last), tolerating partial/corrupt lines.
+     *  Only the last TAIL_READ_BYTES of each file are ever read, so a large log can
+     *  never be slurped whole into memory (the readFileSync-whole-file freeze). If
+     *  the current file's tail doesn't yield enough rows and a rotated `.1` backup
+     *  exists, its tail is merged so recent history survives a rotation boundary. */
     read(limit?: number): ReapLogEntry[];
     private normalizeEntry;
 }

package/dist/monitoring/ReapLog.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ReapLog.d.ts","sourceRoot":"","sources":["../../src/monitoring/ReapLog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAKH;;;;;GAKG;AACH,MAAM,MAAM,iBAAiB,GACzB,UAAU,GACV,MAAM,GACN,uBAAuB,GACvB,UAAU,GACV,gBAAgB,CAAC;AAUrB,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX;oFACgF;IAChF,IAAI,EAAE,QAAQ,GAAG,SAAS,GAAG,QAAQ,CAAC;IACtC,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,yEAAyE;IACzE,MAAM,EAAE,MAAM,CAAC;IACf;+BAC2B;IAC3B,WAAW,EAAE,UAAU,GAAG,iBAAiB,GAAG,WAAW,MAAM,EAAE,GAAG,UAAU,MAAM,EAAE,CAAC;IACvF,MAAM,CAAC,EAAE,UAAU,GAAG,YAAY,CAAC;IACnC;;;6EAGyE;IACzE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oGAAoG;IACpG,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;+DAG2D;IAC3D,UAAU,CAAC,EAAE,UAAU,GAAG,sBAAsB,CAAC;IACjD;kEAC8D;IAC9D,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,0EAA0E;IAC1E,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB;;;;;;;;OAQG;IACH,cAAc,CAAC,EAAE,YAAY,GAAG,YAAY,CAAC;IAC7C,iEAAiE;IACjE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,+EAA+E;IAC/E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,uDAAuD;IACvD,OAAO,CAAC,EAAE,iBAAiB,CAAC;CAC7B;AAED,qBAAa,OAAO;IAClB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAA2B;gBAE1C,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,MAAM,GAAG,SAAS;IAKlE,YAAY,CAAC,CAAC,EAAE;QACd,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,EAAE,MAAM,CAAC;QACpB,MAAM,EAAE,MAAM,CAAC;QACf,WAAW,CAAC,EAAE,UAAU,GAAG,iBAAiB,CAAC;QAC7C,MAAM,CAAC,EAAE,UAAU,GAAG,YAAY,CAAC;QACnC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,UAAU,CAAC,EAAE,UAAU,GAAG,sBAAsB,CAAC;QACjD,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;QACxB,cAAc,CAAC,EAAE,YAAY,GAAG,YAAY,CAAC;KAC9C,GAAG,IAAI;IAkBR;;;;;OAKG;IACH,YAAY,CAAC,CAAC,EAAE;QACd,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;QACvB,OAAO,EAAE,iBAAiB,CAAC;QAC3B,oEAAoE;QACpE,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,GAAG,IAAI;IAeR,aAAa,CAAC,CAAC,EAAE;QACf,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,EAAE,MAAM,CAAC;QACpB,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,CAAC,EAAE,UAAU,GAAG,YAAY,CAAC;KACpC,GAAG,IAAI;IAcR,OAAO,CAAC,MAAM;IASd,4FAA4F;IAC5F,IAAI,CAAC,KAAK,SAAM,GAAG,YAAY,EAAE;IAsBjC,OAAO,CAAC,cAAc;CA+CvB"}
+{"version":3,"file":"ReapLog.d.ts","sourceRoot":"","sources":["../../src/monitoring/ReapLog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AA0CH;;;;;GAKG;AACH,MAAM,MAAM,iBAAiB,GACzB,UAAU,GACV,MAAM,GACN,uBAAuB,GACvB,UAAU,GACV,gBAAgB,CAAC;AAUrB,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX;oFACgF;IAChF,IAAI,EAAE,QAAQ,GAAG,SAAS,GAAG,QAAQ,CAAC;IACtC,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,yEAAyE;IACzE,MAAM,EAAE,MAAM,CAAC;IACf;+BAC2B;IAC3B,WAAW,EAAE,UAAU,GAAG,iBAAiB,GAAG,WAAW,MAAM,EAAE,GAAG,UAAU,MAAM,EAAE,CAAC;IACvF,MAAM,CAAC,EAAE,UAAU,GAAG,YAAY,CAAC;IACnC;;;6EAGyE;IACzE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oGAAoG;IACpG,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;+DAG2D;IAC3D,UAAU,CAAC,EAAE,UAAU,GAAG,sBAAsB,CAAC;IACjD;kEAC8D;IAC9D,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,0EAA0E;IAC1E,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB;;;;;;;;OAQG;IACH,cAAc,CAAC,EAAE,YAAY,GAAG,YAAY,CAAC;IAC7C,iEAAiE;IACjE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,+EAA+E;IAC/E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,uDAAuD;IACvD,OAAO,CAAC,EAAE,iBAAiB,CAAC;CAC7B;AAkBD;kFACkF;AAClF,MAAM,WAAW,cAAc;IAC7B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,qBAAa,OAAO;IAClB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAA2B;IACtD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC;;;;;;;iFAO6E;IAC7E,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA6B;IACvD;;;0BAGsB;IACtB,OAAO,CAAC,UAAU,CAAM;gBAEZ,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,MAAM,GAAG,SAAS,EAAE,IAAI,GAAE,cAAmB;IAQ7F,YAAY,CAAC,CAAC,EAAE;QACd,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,EAAE,MAAM,CAAC;QACpB,MAAM,EAAE,MAAM,CAAC;QACf,WAAW,CAAC,EAAE,UAAU,GAAG,iBAAiB,CAAC;QAC7C,MAAM,CAAC,EAAE,UAAU,GAAG,YAAY,CAAC;QACnC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,UAAU,CAAC,EAAE,UAAU,GAAG,sBAAsB,CAAC;QACjD,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;QACxB,cAAc,CAAC,EAAE,YAAY,GAAG,YAAY,CAAC;KAC9C,GAAG,IAAI;IAqBR;;;;;OAKG;IACH,YAAY,CAAC,CAAC,EAAE;QACd,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;QACvB,OAAO,EAAE,iBAAiB,CAAC;QAC3B,oEAAoE;QACpE,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,GAAG,IAAI;IAeR,aAAa,CAAC,CAAC,EAAE;QACf,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,EAAE,MAAM,CAAC;QACpB,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,CAAC,EAAE,UAAU,GAAG,YAAY,CAAC;KACpC,GAAG,IAAI;IAyBR;;;6CAGyC;IACzC,OAAO,CAAC,YAAY;IASpB;iFAC6E;IAC7E,OAAO,CAAC,UAAU;IAIlB,OAAO,CAAC,MAAM;IAYd;;;;oEAIgE;IAChE,OAAO,CAAC,cAAc;IAmBtB;;;;qFAIiF;IACjF,IAAI,CAAC,KAAK,SAAM,GAAG,YAAY,EAAE;IAoBjC,OAAO,CAAC,cAAc;CA+CvB"}

package/dist/monitoring/ReapLog.js

@@ -14,6 +14,47 @@
  */
 import fs from 'node:fs';
 import path from 'node:path';
+/**
+ * Read only the last `maxBytes` of a file and return its non-empty lines,
+ * newest last. Bounded by construction: an arbitrarily large log is never
+ * loaded whole (the readFileSync-whole-file pattern that froze the event loop
+ * on a 142MB reap-log, 2026-07-03). If the read starts mid-file (the file is
+ * larger than `maxBytes`), the first — possibly partial — line is dropped so a
+ * torn record is never mis-parsed. Never throws; an absent/unreadable file
+ * yields [].
+ */
+function tailLines(filePath, maxBytes) {
+    let fd;
+    try {
+        const size = fs.statSync(filePath).size;
+        if (size === 0)
+            return [];
+        const readBytes = Math.min(size, maxBytes);
+        const start = size - readBytes;
+        const buf = Buffer.allocUnsafe(readBytes);
+        fd = fs.openSync(filePath, 'r');
+        fs.readSync(fd, buf, 0, readBytes, start);
+        const text = buf.toString('utf-8');
+        const lines = text.split('\n');
+        // Dropped: a leading partial line when we didn't read from byte 0.
+        if (start > 0 && lines.length > 0)
+            lines.shift();
+        return lines.filter((l) => l.trim().length > 0);
+    }
+    catch {
+        return []; // @silent-fallback-ok — absent/unreadable ⇒ no rows.
+    }
+    finally {
+        if (fd !== undefined) {
+            try {
+                fs.closeSync(fd);
+            }
+            catch {
+                /* fd already gone */
+            }
+        }
+    }
+}
 const NOTIFY_OUTCOMES = new Set([
     'enqueued',
     'sent',
@@ -21,12 +62,47 @@ const NOTIFY_OUTCOMES = new Set([
     'no-topic',
     'enqueue-failed',
 ]);
+/** Rotate the reap-log once it crosses this many bytes. The current file is
+ *  renamed to `<path>.1` (O(1), no data rewrite) and a fresh file started, so
+ *  the on-disk log can NEVER grow unbounded — even if some future caller floods
+ *  it past the transition-dedup below. One backup generation is retained;
+ *  `read()` merges its tail so recent history survives a rotation boundary. */
+const MAX_LOG_BYTES = 16 * 1024 * 1024;
+/** `read()` only ever pulls the last this-many bytes of a log file, so a large
+ *  reap-log can never be slurped whole into memory (the 142MB readFileSync +
+ *  split that blocked the event loop, 2026-07-03). Generous vs the default
+ *  `limit` of 200 rows (~300 B/row ⇒ ~6.5k rows fit in 2 MB). */
+const TAIL_READ_BYTES = 2 * 1024 * 1024;
+/** Cap on the in-memory transition-dedup map. Live session names are bounded
+ *  (dozens); this is a safety ceiling so a pathological churn of distinct names
+ *  can't grow the map without bound. Oldest entries are pruned first. */
+const MAX_SKIP_STATE = 2000;
 export class ReapLog {
     logPath;
     machineId;
-    constructor(stateDir, machineId) {
+    maxLogBytes;
+    tailReadBytes;
+    maxSkipState;
+    /** session name → last-LOGGED skip signature (`${reason}::${skipped}`).
+     *  A `recordSkipped` whose signature equals the session's last-logged one is
+     *  the SAME permanent veto being re-evaluated at tick speed (open-commitment,
+     *  not-lease-holder, protected …) — it is NOT re-appended. This is the
+     *  primary cure for the reaper self-inflicted log flood (3218 open-commitment
+     *  + 1608 not-lease-holder repeat rows ⇒ 142MB, 2026-07-03): mirror the
+     *  reaper-audit "log on transition, not every tick" pattern. Cleared when the
+     *  session is reaped so a same-named successor logs its first skip fresh. */
+    skipState = new Map();
+    /** Cheap running estimate of the current log's byte size, so rotation is
+     *  decided WITHOUT a statSync on every append. Seeded from the real size on
+     *  first append, then advanced by each write; re-synced on rotation. -1 =
+     *  not yet seeded. */
+    approxSize = -1;
+    constructor(stateDir, machineId, opts = {}) {
         this.logPath = path.join(stateDir, '..', 'logs', 'reap-log.jsonl');
         this.machineId = machineId;
+        this.maxLogBytes = opts.maxLogBytes ?? MAX_LOG_BYTES;
+        this.tailReadBytes = opts.tailReadBytes ?? TAIL_READ_BYTES;
+        this.maxSkipState = opts.maxSkipState ?? MAX_SKIP_STATE;
     }
     recordReaped(e) {
         this.append({
@@ -44,6 +120,9 @@ export class ReapLog {
             ...(e.workEvidence && e.workEvidence.length > 0 ? { workEvidence: e.workEvidence } : {}),
             ...(e.evidenceSource ? { evidenceSource: e.evidenceSource } : {}),
         });
+        // The session is gone — drop its skip-dedup state so a same-named successor
+        // logs its first skip fresh and the map never leaks reaped names.
+        this.forgetSkip(e.session);
     }
     /**
      * Append one reap-notice delivery outcome record (reap-notify spec R1.3).
@@ -66,6 +145,18 @@ export class ReapLog {
         });
     }
     recordSkipped(e) {
+        // Log-on-transition: a reaper evaluates a permanently-vetoed session
+        // (open-commitment, not-lease-holder, protected, …) on EVERY tick and would
+        // emit an identical `skipped` row each time — 5k+ repeat rows ⇒ a 142MB log
+        // that froze the event loop when read (2026-07-03). Only append when the
+        // skip STATE changes for this session; a re-evaluation with the same
+        // (reason, skipped) is the same veto and is dropped. The reaper keeps
+        // evaluating every tick, so the moment the veto lifts (commitment closes,
+        // lease moves) the state changes and the next skip — or the reap — logs.
+        const sig = `${e.reason}::${e.skipped}`;
+        if (this.skipState.get(e.session) === sig)
+            return;
+        this.rememberSkip(e.session, sig);
         this.append({
             ts: new Date().toISOString(),
             type: 'skipped',
@@ -78,27 +169,77 @@ export class ReapLog {
             machine: this.machineId?.(),
         });
     }
+    /** Record a session's last-logged skip signature, enforcing the map ceiling
+     *  (oldest-first prune — Map preserves insertion order). Re-inserting an
+     *  existing key does not reorder it, which is fine: churny NEW names are the
+     *  growth risk, and those get pruned. */
+    rememberSkip(session, sig) {
+        this.skipState.set(session, sig);
+        while (this.skipState.size > this.maxSkipState) {
+            const oldest = this.skipState.keys().next().value;
+            if (oldest === undefined)
+                break;
+            this.skipState.delete(oldest);
+        }
+    }
+    /** Forget a session's skip state — call when the session is gone (reaped) so a
+     *  same-named successor logs its first skip fresh and the map can't leak. */
+    forgetSkip(session) {
+        this.skipState.delete(session);
+    }
     append(entry) {
         try {
             fs.mkdirSync(path.dirname(this.logPath), { recursive: true });
-            fs.appendFileSync(this.logPath, JSON.stringify(entry) + '\n');
+            const line = JSON.stringify(entry) + '\n';
+            this.rotateIfNeeded(Buffer.byteLength(line));
+            fs.appendFileSync(this.logPath, line);
+            if (this.approxSize >= 0)
+                this.approxSize += Buffer.byteLength(line);
         }
         catch {
             // never throw from the audit sink
         }
     }
-    /** Read the most-recent `limit` entries (newest last), tolerating partial/corrupt lines. */
-    read(limit = 200) {
-        let raw;
+    /** Roll the log to `<path>.1` (single retained generation) once it would cross
+     *  MAX_LOG_BYTES, so the file can never grow unbounded. Rename is O(1) — no
+     *  data rewrite on the append hot path (rewriting a large file synchronously
+     *  here would reintroduce the very event-loop stall we're removing). Seeds the
+     *  cheap size estimate from the real file size on first use. */
+    rotateIfNeeded(incomingBytes) {
+        if (this.approxSize < 0) {
+            try {
+                this.approxSize = fs.statSync(this.logPath).size;
+            }
+            catch {
+                this.approxSize = 0; // absent file ⇒ empty
+            }
+        }
+        if (this.approxSize + incomingBytes <= this.maxLogBytes)
+            return;
         try {
-            raw = fs.readFileSync(this.logPath, 'utf-8');
+            fs.renameSync(this.logPath, `${this.logPath}.1`); // overwrites a prior .1
         }
         catch {
-            // @silent-fallback-ok — no log file yet means no reaps recorded; an empty
-            // list is the correct answer, not a degraded one.
-            return [];
+            // @silent-fallback-ok — if the roll fails the append still proceeds; the
+            // read path is tail-bounded so an oversize file is a perf hit, never a
+            // correctness failure.
+        }
+        this.approxSize = 0;
+    }
+    /** Read the most-recent `limit` entries (newest last), tolerating partial/corrupt lines.
+     *  Only the last TAIL_READ_BYTES of each file are ever read, so a large log can
+     *  never be slurped whole into memory (the readFileSync-whole-file freeze). If
+     *  the current file's tail doesn't yield enough rows and a rotated `.1` backup
+     *  exists, its tail is merged so recent history survives a rotation boundary. */
+    read(limit = 200) {
+        const wanted = limit > 0 ? limit : Number.MAX_SAFE_INTEGER;
+        let lines = tailLines(this.logPath, this.tailReadBytes);
+        if (lines.length < wanted) {
+            // Backfill from the rotated generation (older lines first).
+            const older = tailLines(`${this.logPath}.1`, this.tailReadBytes);
+            if (older.length > 0)
+                lines = older.concat(lines);
         }
-        const lines = raw.split('\n').filter((l) => l.trim().length > 0);
         const tail = limit > 0 ? lines.slice(-limit) : lines;
         const out = [];
         for (const line of tail) {

package/dist/monitoring/ReapLog.js.map

@@ -1 +1 @@
-{"version":3,"file":"ReapLog.js","sourceRoot":"","sources":["../../src/monitoring/ReapLog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAe7B,MAAM,eAAe,GAAwB,IAAI,GAAG,CAAC;IACnD,UAAU;IACV,MAAM;IACN,uBAAuB;IACvB,UAAU;IACV,gBAAgB;CACjB,CAAC,CAAC;AAmDH,MAAM,OAAO,OAAO;IACD,OAAO,CAAS;IAChB,SAAS,CAA4B;IAEtD,YAAY,QAAgB,EAAE,SAAoC;QAChE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC;QACnE,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;IAED,YAAY,CAAC,CAWZ;QACC,IAAI,CAAC,MAAM,CAAC;YACV,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC5B,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,UAAU;YACxC,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/C,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE;YAC3B,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,GAAG,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1D,GAAG,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxF,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClE,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,YAAY,CAAC,CAMZ;QACC,IAAI,CAAC,MAAM,CAAC;YACV,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC5B,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,CAAC,CAAC,QAAQ;YACnB,WAAW,EAAE,GAAG;YAChB,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,OAAO;YAC7B,WAAW,EAAE,UAAU,CAAC,CAAC,OAAO,EAAE;YAClC,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE;YAC3B,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,GAAG,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChF,OAAO,EAAE,CAAC,CAAC,OAAO;SACnB,CAAC,CAAC;IACL,CAAC;IAED,aAAa,CAAC,CAMb;QACC,IAAI,CAAC,MAAM,CAAC;YACV,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC5B,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,WAAW,EAAE,WAAW,CAAC,CAAC,OAAO,EAAE;YACnC,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE;SAC5B,CAAC,CAAC;IACL,CAAC;IAEO,MAAM,CAAC,KAAmB;QAChC,IAAI,CAAC;YACH,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9D,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;QAChE,CAAC;QAAC,MAAM,CAAC;YACP,kCAAkC;QACpC,CAAC;IACH,CAAC;IAED,4FAA4F;IAC5F,IAAI,CAAC,KAAK,GAAG,GAAG;QACd,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YACP,0EAA0E;YAC1E,kDAAkD;YAClD,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACjE,MAAM,IAAI,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QACrD,MAAM,GAAG,GAAmB,EAAE,CAAC;QAC/B,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;YACxB,IAAI,CAAC;gBACH,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAA0B,CAAC,CAAC,CAAC;YAC3E,CAAC;YAAC,MAAM,CAAC;gBACP,iEAAiE;YACnE,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAEO,cAAc,CAAC,KAA4B;QACjD,2EAA2E;QAC3E,0EAA0E;QAC1E,qEAAqE;QACrE,MAAM,IAAI,GACR,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;QACvF,MAAM,OAAO,GAAG,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9E,MAAM,OAAO,GACX,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC;YACrE,CAAC,CAAE,KAAK,CAAC,OAA6B;YACtC,CAAC,CAAC,SAAS,CAAC;QAChB,IAAI,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;QACpC,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,WAAW;gBACT,IAAI,KAAK,SAAS;oBAChB,CAAC,CAAC,WAAW,OAAO,IAAI,SAAS,EAAE;oBACnC,CAAC,CAAC,IAAI,KAAK,QAAQ;wBACjB,CAAC,CAAC,UAAU,OAAO,IAAI,SAAS,EAAE;wBAClC,CAAC,CAAC,UAAU,CAAC;QACrB,CAAC;QAED,MAAM,UAAU,GACd,KAAK,CAAC,UAAU,KAAK,UAAU,IAAI,KAAK,CAAC,UAAU,KAAK,sBAAsB;YAC5E,CAAC,CAAC,KAAK,CAAC,UAAU;YAClB,CAAC,CAAC,SAAS,CAAC;QAChB,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC;YACpD,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;YACtE,CAAC,CAAC,SAAS,CAAC;QAEd,OAAO;YACL,EAAE,EAAE,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;YACvE,IAAI;YACJ,OAAO,EAAE,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;YACtE,WAAW,EAAE,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;YAClF,MAAM,EAAE,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;YACnE,WAAW;YACX,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,OAAO;YACP,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrC,GAAG,CAAC,OAAO,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzE,GAAG,CAAC,YAAY,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpE,GAAG,CAAC,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3E,GAAG,CAAC,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChC,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"ReapLog.js","sourceRoot":"","sources":["../../src/monitoring/ReapLog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B;;;;;;;;GAQG;AACH,SAAS,SAAS,CAAC,QAAgB,EAAE,QAAgB;IACnD,IAAI,EAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC;QACxC,IAAI,IAAI,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC3C,MAAM,KAAK,GAAG,IAAI,GAAG,SAAS,CAAC;QAC/B,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAC1C,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAChC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACnC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/B,mEAAmE;QACnE,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,KAAK,CAAC,KAAK,EAAE,CAAC;QACjD,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC,CAAC,qDAAqD;IAClE,CAAC;YAAS,CAAC;QACT,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;YACrB,IAAI,CAAC;gBACH,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YACnB,CAAC;YAAC,MAAM,CAAC;gBACP,qBAAqB;YACvB,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAeD,MAAM,eAAe,GAAwB,IAAI,GAAG,CAAC;IACnD,UAAU;IACV,MAAM;IACN,uBAAuB;IACvB,UAAU;IACV,gBAAgB;CACjB,CAAC,CAAC;AAmDH;;;;+EAI+E;AAC/E,MAAM,aAAa,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AACvC;;;iEAGiE;AACjE,MAAM,eAAe,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AACxC;;yEAEyE;AACzE,MAAM,cAAc,GAAG,IAAI,CAAC;AAU5B,MAAM,OAAO,OAAO;IACD,OAAO,CAAS;IAChB,SAAS,CAA4B;IACrC,WAAW,CAAS;IACpB,aAAa,CAAS;IACtB,YAAY,CAAS;IACtC;;;;;;;iFAO6E;IAC5D,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAC;IACvD;;;0BAGsB;IACd,UAAU,GAAG,CAAC,CAAC,CAAC;IAExB,YAAY,QAAgB,EAAE,SAAoC,EAAE,OAAuB,EAAE;QAC3F,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC;QACnE,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,aAAa,CAAC;QACrD,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,eAAe,CAAC;QAC3D,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,cAAc,CAAC;IAC1D,CAAC;IAED,YAAY,CAAC,CAWZ;QACC,IAAI,CAAC,MAAM,CAAC;YACV,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC5B,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,UAAU;YACxC,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/C,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE;YAC3B,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,GAAG,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1D,GAAG,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxF,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClE,CAAC,CAAC;QACH,4EAA4E;QAC5E,kEAAkE;QAClE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IAED;;;;;OAKG;IACH,YAAY,CAAC,CAMZ;QACC,IAAI,CAAC,MAAM,CAAC;YACV,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC5B,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,CAAC,CAAC,QAAQ;YACnB,WAAW,EAAE,GAAG;YAChB,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,OAAO;YAC7B,WAAW,EAAE,UAAU,CAAC,CAAC,OAAO,EAAE;YAClC,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE;YAC3B,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,GAAG,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChF,OAAO,EAAE,CAAC,CAAC,OAAO;SACnB,CAAC,CAAC;IACL,CAAC;IAED,aAAa,CAAC,CAMb;QACC,qEAAqE;QACrE,4EAA4E;QAC5E,4EAA4E;QAC5E,yEAAyE;QACzE,qEAAqE;QACrE,sEAAsE;QACtE,0EAA0E;QAC1E,yEAAyE;QACzE,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;QACxC,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,GAAG;YAAE,OAAO;QAClD,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAClC,IAAI,CAAC,MAAM,CAAC;YACV,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC5B,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,WAAW,EAAE,WAAW,CAAC,CAAC,OAAO,EAAE;YACnC,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE;SAC5B,CAAC,CAAC;IACL,CAAC;IAED;;;6CAGyC;IACjC,YAAY,CAAC,OAAe,EAAE,GAAW;QAC/C,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACjC,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;YAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;YAClD,IAAI,MAAM,KAAK,SAAS;gBAAE,MAAM;YAChC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAED;iFAC6E;IACrE,UAAU,CAAC,OAAe;QAChC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC;IAEO,MAAM,CAAC,KAAmB;QAChC,IAAI,CAAC;YACH,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9D,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC;YAC1C,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;YAC7C,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACtC,IAAI,IAAI,CAAC,UAAU,IAAI,CAAC;gBAAE,IAAI,CAAC,UAAU,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACvE,CAAC;QAAC,MAAM,CAAC;YACP,kCAAkC;QACpC,CAAC;IACH,CAAC;IAED;;;;oEAIgE;IACxD,cAAc,CAAC,aAAqB;QAC1C,IAAI,IAAI,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC;YACxB,IAAI,CAAC;gBACH,IAAI,CAAC,UAAU,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC;YACnD,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,sBAAsB;YAC7C,CAAC;QACH,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,GAAG,aAAa,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO;QAChE,IAAI,CAAC;YACH,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,wBAAwB;QAC5E,CAAC;QAAC,MAAM,CAAC;YACP,yEAAyE;YACzE,uEAAuE;YACvE,uBAAuB;QACzB,CAAC;QACD,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC;IACtB,CAAC;IAED;;;;qFAIiF;IACjF,IAAI,CAAC,KAAK,GAAG,GAAG;QACd,MAAM,MAAM,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC;QAC3D,IAAI,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;QACxD,IAAI,KAAK,CAAC,MAAM,GAAG,MAAM,EAAE,CAAC;YAC1B,4DAA4D;YAC5D,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,IAAI,CAAC,OAAO,IAAI,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;YACjE,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;gBAAE,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACpD,CAAC;QACD,MAAM,IAAI,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QACrD,MAAM,GAAG,GAAmB,EAAE,CAAC;QAC/B,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;YACxB,IAAI,CAAC;gBACH,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAA0B,CAAC,CAAC,CAAC;YAC3E,CAAC;YAAC,MAAM,CAAC;gBACP,iEAAiE;YACnE,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAEO,cAAc,CAAC,KAA4B;QACjD,2EAA2E;QAC3E,0EAA0E;QAC1E,qEAAqE;QACrE,MAAM,IAAI,GACR,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;QACvF,MAAM,OAAO,GAAG,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9E,MAAM,OAAO,GACX,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC;YACrE,CAAC,CAAE,KAAK,CAAC,OAA6B;YACtC,CAAC,CAAC,SAAS,CAAC;QAChB,IAAI,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;QACpC,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,WAAW;gBACT,IAAI,KAAK,SAAS;oBAChB,CAAC,CAAC,WAAW,OAAO,IAAI,SAAS,EAAE;oBACnC,CAAC,CAAC,IAAI,KAAK,QAAQ;wBACjB,CAAC,CAAC,UAAU,OAAO,IAAI,SAAS,EAAE;wBAClC,CAAC,CAAC,UAAU,CAAC;QACrB,CAAC;QAED,MAAM,UAAU,GACd,KAAK,CAAC,UAAU,KAAK,UAAU,IAAI,KAAK,CAAC,UAAU,KAAK,sBAAsB;YAC5E,CAAC,CAAC,KAAK,CAAC,UAAU;YAClB,CAAC,CAAC,SAAS,CAAC;QAChB,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC;YACpD,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;YACtE,CAAC,CAAC,SAAS,CAAC;QAEd,OAAO;YACL,EAAE,EAAE,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;YACvE,IAAI;YACJ,OAAO,EAAE,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;YACtE,WAAW,EAAE,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;YAClF,MAAM,EAAE,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;YACnE,WAAW;YACX,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,OAAO;YACP,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrC,GAAG,CAAC,OAAO,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzE,GAAG,CAAC,YAAY,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpE,GAAG,CAAC,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3E,GAAG,CAAC,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChC,CAAC;IACJ,CAAC;CACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.738",
+  "version": "1.3.740",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-07-03T22:30:08.221Z",
-  "instarVersion": "1.3.738",
+  "generatedAt": "2026-07-03T23:17:57.781Z",
+  "instarVersion": "1.3.740",
   "entryCount": 202,
   "entries": {
     "hook:session-start": {

package/src/data/llmBenchCoverage.ts

@@ -226,3 +226,137 @@ export const LLM_UNTRUSTED_INPUT: Readonly<Record<string, UntrustedInputFlag>> =
       'attribution-manifest alias only (a legacy prompt-pattern matcher); the live matcher calls with attribution PromptGate, classified true there',
   },
 };
+
+// ───────────────────────────────────────────────────────────────────────────
+// Evidence-Bar Extension — Judge Prompts (defect class 3 / claim-vs-evidence —
+// docs/specs/evidence-bar-judge-extension.md §2 "the judge-nature classification")
+//
+// The `judgesClaims` axis of the program's shared per-callsite metadata record
+// (class-closure-gate.md §"Program-shared machinery"; co-located in THIS file
+// with the bench-coverage record it extends, exactly like the sibling
+// `untrustedInput` axis). The consolidated axis ratchet derives the required
+// bench axes from all these per-callsite axes together.
+//
+// WHY (earned): on 2026-07-02 the INSTAR-Bench v2 defect-class review found the
+// completion judge (and four other model routes on the same case) credited a
+// BARE assertion ("tests pass," no output shown) as satisfied evidence — the
+// judge prompt never defined what counts as evidence, so models defaulted to
+// crediting the claim. The agent-facing "Bug-Fix Evidence Bar" holds the
+// CLAIMANT ("verify before you claim"); the prompts that JUDGE such claims were
+// never given the same rule. This classification is the structural record of
+// WHICH callsites judge a claim, so the (deferred) bench-axis ratchet can
+// require both a bare-claim (false-accept) AND a real-evidence (false-reject)
+// case for each — the known over-correction hazard (the first fix rejected REAL
+// evidence on 6 routes) makes the false-reject direction mandatory.
+//
+// INCLUSION CRITERIA (spec §2): the callsite's task is to CREDIT or REFUSE an
+// agent/session claim of completion, progress, or health — verdict gates,
+// completion evaluators, stuck/stall/health classifiers, and scored evaluators
+// that award credit for claimed work. EXCLUSION: pure summarizers and
+// extractors are out unless they score or credit a claim.
+//
+// THE FIELD IS REQUIRED AND EXPLICIT FOR EVERY COMPONENT_CATEGORY KEY — there is
+// NO DEFAULT (same polarity rule as `untrustedInput`). A `{ claimKind }` entry
+// is a judge (true) and declares WHICH kind of claim it judges (the axis cases +
+// accepted evidence classes are authored per kind). Plain `false` is a callsite
+// that does not judge a completion/progress/health claim. A judge-SHAPED
+// callsite that argues it does NOT judge claims is written as
+// `{ false: '<argued reason>' }` and pinned shrink-only in
+// tests/unit/judges-claims-classification-ratchet.test.ts — a silent omission
+// is red CI, so the flag can never default toward the un-benched state.
+//
+// DETERMINISTIC ARM (spec "Honest reach"): the real-check `verification_command`
+// verifier is NAMED in the spec seed but is NOT an LLM callsite (it runs the
+// actual command on a met-verdict) — it has no COMPONENT_CATEGORY key and is
+// therefore out of this LLM classification by construction. A prompt bar governs
+// what is SHOWN; verification of what is TRUE belongs to that deterministic arm.
+// ───────────────────────────────────────────────────────────────────────────
+
+/** The kind of claim a judge callsite credits/refuses (spec §2). Different kinds
+ * take different evidence, so each `judgesClaims: true` entry declares its kind:
+ *   - completionClaim: proof of asserted work ("the task is done / tests pass");
+ *   - healthClaim: behavioral-signal sufficiency (stall/stuck/health classifiers);
+ *   - scoredCredit: rubric evaluators that award credit for claimed work. */
+export type ClaimKind = 'completionClaim' | 'healthClaim' | 'scoredCredit';
+
+export const CLAIM_KINDS: ReadonlyArray<ClaimKind> = [
+  'completionClaim',
+  'healthClaim',
+  'scoredCredit',
+];
+
+/** The `judgesClaims` classification of one LLM callsite:
+ *   - `{ claimKind }`  → judges a claim (true), of the declared kind;
+ *   - `false`          → does not judge a completion/progress/health claim;
+ *   - `{ false: '<reason>' }` → a judge-SHAPED callsite argued OUT of scope
+ *     (pinned shrink-only + reviewed, like the untrustedInput argued-false set). */
+export type JudgesClaimsFlag = { claimKind: ClaimKind } | false | { false: string };
+
+export const LLM_JUDGES_CLAIMS: Readonly<Record<string, JudgesClaimsFlag>> = {
+  // ── Judges (judgesClaims: true) ────────────────────────────────────────────
+  // Completion evaluators — credit/refuse a claim of asserted work.
+  CompletionEvaluator: { claimKind: 'completionClaim' }, // THE motivating callsite: credited a bare "tests pass"
+  UnjustifiedStopGate: { claimKind: 'completionClaim' }, // judges whether a stop is justified = is the claimed work actually done/blocked
+  JobReflector: { claimKind: 'completionClaim' }, // reflects on job success/completion (spec §2 pending-wave judge; classified now so the asymmetry can't silently reopen)
+
+  // Stall/stuck/health classifiers — credit/refuse a health claim about a session.
+  SessionWatchdog: { claimKind: 'healthClaim' }, // stuck-judge
+  PresenceProxy: { claimKind: 'healthClaim' }, // tier-3 stall judge
+  StallTriageNurse: { claimKind: 'healthClaim' }, // stall-triage diagnosis
+  TelegramAdapter: { claimKind: 'healthClaim' }, // confirmStallAlert — judges whether a session is genuinely stalled before alerting (inclusion criteria: stall/health classifier)
+  SlackAdapter: { claimKind: 'healthClaim' }, // confirmStallAlert (byte-identical prompt to Telegram's; parity)
+
+  // Scored evaluators — award credit for claimed work.
+  'mentor-stage-b': { claimKind: 'scoredCredit' }, // classifies mentor signals over mentee output (spec §2 pending-wave judge)
+
+  // ── Not a completion/progress/health judge (judgesClaims: false) ────────────
+  // Sentinels that classify/summarize but do not credit a completion/health claim.
+  InputDetector: false, // legacy prompt-pattern matcher alias
+  InputGuard: false, // input-coherence, not a completion/health claim
+  SessionActivitySentinel: false, // activity DIGEST — summarizes activity, does not credit a claim (exclusion: pure summarizer)
+  CommitmentSentinel: false, // detects commitments in text
+  PromiseBeacon: false, // no live LLM prompt (hooks unwired at construction — see its bench exemption)
+  MessageSentinel: false, // classifies message intent (pause/emergency), not a completion claim
+  TopicIntentArcCheck: false, // arc-check classification of a topic's intent, not a completion/health claim
+  InputClassifier: false, // input auto-approve vs relay classification
+  SessionSummarySentinel: false, // summarizes tmux output → task/phase/files (exclusion: pure summarizer)
+  ProjectDriftChecker: false, // is-work-on-project coherence, not a completion/health claim
+  TemporalCoherenceChecker: false, // temporal-coherence classification
+  ResumeQueueDrainer: false, // inspects session state before a resume — judges STATE validity, not an agent's claim
+  InteractivePoolCanaryJudge: false, // judges a FIXED known-answer canary constant, not an agent claim
+
+  // Gates that classify an action/message but do not credit a completion/health claim.
+  PromptGate: false, // detects prompt-injection in content
+  AutoApprover: false, // mechanical key injection, no LLM prompt of its own
+  IntegrationGate: false, // delegates to JobReflector.reflect(), no own callsite
+  ExternalOperationGate: false, // classifies operation mutability/reversibility, not a completion claim
+  WarrantsReplyGate: false, // "should I reply?" — not a completion/health claim
+  CoherenceGate: false, // no own callsite — flows through CoherenceReviewer
+  MessagingToneGate: false, // reviews outbound tone/leaks
+  CoherenceReviewer: false, // reviews outbound coherence
+  LLMSanitizer: false, // sanitizes untrusted inbound content
+  OverrideDetector: false, // detects override intent in a turn
+  TaskClassifier: false, // classifies task type
+  ResumeValidator: false, // matches a resume UUID against a topic — a state match, not a claim
+
+  // Reflectors/jobs that extract/summarize/route but do not credit a completion/health claim.
+  crossModelReviewer: false, // reviews a SPEC document, not a session's completion claim
+  SelfKnowledgeTree: false, // extracts self-knowledge
+  TreeTriage: false, // triages tree fragments
+  TopicSummarizer: false, // summarizes a topic
+  ContextualEvaluator: false, // evaluates context relevance
+  RelationshipManager: false, // extracts relationship facts
+  StandardsConformanceReviewer: false, // reviews artifact-vs-standard conformance, not a session completion claim
+  DiscoveryEvaluator: false, // evaluates serendipity discoveries
+  Usher: false, // routes a turn to candidate topics
+  TopicIntentExtractor: false, // extracts topic intent from a turn
+  PreCompactionFlush: false, // extracts durable facts before compaction
+  TreeSynthesis: false, // synthesizes knowledge fragments → answer
+  LLMConflictResolver: false, // resolves divergent multi-machine state
+  openConversationBrief: false, // generates an A2A conversation brief
+  'a2a-checkin': false, // summarizes A2A check-in threads
+  'correction-learning': false, // distills recurring corrections → preference
+  PipeSessionSpawner: false, // spawns from task descriptions
+  CartographerSweep: false, // authors doc-tree summaries over code
+  StandardsCoverageEnrichment: false, // enriches standards-coverage rows
+};

package/upgrades/1.3.739.md

@@ -0,0 +1,77 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: minor -->
+
+## What Changed
+
+The mechanical arm of the **Evidence-Bar Extension to Judge Prompts** standard
+(`docs/specs/evidence-bar-judge-extension.md`, defect class 3 / `claim-vs-evidence` closure),
+shipped as a self-contained DARK increment — no runtime wiring, no operator-gated registry
+amendment, no config key, no behavioral prompt change. It is the structural answer to the
+2026-07-02 INSTAR-Bench v2 finding that the completion judge (and four other model routes on
+the same case) credited a BARE assertion ("tests pass," no output shown) as satisfied evidence:
+the agent-facing **Bug-Fix Evidence Bar** holds the CLAIMANT ("verify before you claim"), but
+the prompts that JUDGE such claims were never given the same rule — an asymmetry where we hold
+the claimer to a bar the judge does not know exists.
+
+This increment ships **the judge-nature classification + its CI ratchet only**:
+
+- The **`judgesClaims` classification** (`LLM_JUDGES_CLAIMS` in `src/data/llmBenchCoverage.ts`):
+  the `judgesClaims` axis of the program's ONE shared per-callsite metadata record (sibling of
+  the authority-clause `untrustedInput` axis), required-explicit for every LLM component (no
+  default — a silent omission is red CI). A judge is a `{ claimKind }` entry declaring WHICH
+  kind of claim it credits/refuses — `completionClaim` (proof of asserted work), `healthClaim`
+  (stall/stuck/health signal sufficiency), or `scoredCredit` (rubric evaluators) — because those
+  are NOT one evidence problem and their axis cases are authored per kind. Nine callsites classify
+  as judges (the five measured completion/health judges — CompletionEvaluator, UnjustifiedStopGate,
+  SessionWatchdog, PresenceProxy, StallTriageNurse — plus the two stall-confirm adapters and the
+  two spec-named pending-wave judges JobReflector + mentor-stage-b); the deterministic real-check
+  `verification_command` verifier is seed-named but is NOT an LLM callsite (it runs the actual
+  command), out of the classification by construction.
+- A **classification ratchet** (`tests/unit/judges-claims-classification-ratchet.test.ts`):
+  required-explicit + no-dangling + valid-claimKind-per-judge + the spec-named JUDGE SEED pinned
+  as a judge (the callsites measured crediting a bare claim can't silently slip out of scope) +
+  the argued-false set pinned shrink-only with a real-reason floor. Same pinned-baseline family as
+  `llm-bench-coverage-ratchet` and `untrusted-input-classification-ratchet`.
+
+Deliberately OUT of scope (not orphan deferrals — see `upgrades/side-effects/`):
+- The **registry amendment** (spec §1) — operator-gated; ships ONLY with Justin's explicit
+  sign-off. It is DRAFTED in the spec; this run does not edit the standards registry.
+- The **bench-axis pair ratchet** (spec §3: a bare-claim false-accept case + a real-evidence
+  false-reject case per judge) — blocked on the SAME program-wide "batteries readable by CI"
+  decision the sibling authority-clause axis ratchet deferred on (`research/` is absent from
+  canonical main), owned by `class-closure-gate.md` §"Program-shared machinery" and binding all
+  three axis specs.
+- The **`evidenceBar()` prompt clause** (spec §4) — a sibling of the authority clause in
+  `src/core/promptClauses.ts`. That shared library is introduced by the still-open sibling PR
+  (authority-clause); adding the clause here would collide on the same new file. The clause is
+  only consumed via the A/B-gated per-component migrations (spec §4/rollout §2), which are
+  behavioral and deferred regardless. It lands as a follow-up once the shared library is on main.
+
+## What to Tell Your User
+
+Nothing changes for you right now — this ships **dark**, and it is maintainer-only machinery (a
+no-op on your install unless you develop instar itself). It records WHICH of my AI checks exist to
+JUDGE a completion/health claim, so the same "a claim is not evidence — show the output" bar that
+already binds what I claim can be extended to the checks that judge those claims. The judge-prompt
+wording and the registry text itself change later, and only after an operator sign-off.
+
+## Summary of New Capabilities
+
+None active for end users in this increment — everything ships dark and additive. (For instar
+maintainers: a required per-callsite `judgesClaims` classification with a shrink-only ratchet and
+a pinned JUDGE-SEED floor, so a claim-judging callsite can never silently ship un-benched against
+the bare-claim / real-evidence axis pair.)
+
+## Evidence
+
+- `npx vitest run tests/unit/judges-claims-classification-ratchet.test.ts tests/unit/llm-bench-coverage-ratchet.test.ts`
+  → **2 files, 13 tests, 0 failures** (required-explicit + no-dangling + valid-claimKind + the
+  JUDGE-SEED floor + shrink-only argued-false + the grounding canary; the pre-existing coverage
+  ratchet still green against the additive record). During authoring the ratchet caught three
+  unclassified callsites (TopicIntentArcCheck, InputClassifier, SessionSummarySentinel) and
+  failed the build until they were classified — the required-explicit guard doing its job.
+- `npx tsc --noEmit` → exit 0. `npm run lint` → exit 0.
+- Dark-by-construction: `LLM_JUDGES_CLAIMS` is build-time metadata read only by the new pinned
+  ratchet; it changes NO prompt text and wires NO runtime gate.

package/upgrades/1.3.740.md

@@ -0,0 +1,65 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+Three self-limiting changes to `src/monitoring/ReapLog.ts` (the audit trail behind
+`GET /sessions/reap-log`) that stop the reaper from flooding — and freezing on — its own log.
+
+The reaper re-evaluates every session on each tick. When a session **can't** be reaped yet — it
+holds an open commitment, or it belongs to another machine (`not-lease-holder`), or it's
+protected — the reaper skips it and recorded a `skipped` row **every tick**. On a live agent
+that produced 3218 `open-commitment` + 1608 `not-lease-holder` **identical repeat rows** and
+grew `reap-log.jsonl` to **142MB / 463k lines** (observed 2026-07-03). Worse, `read()` did
+`fs.readFileSync(WHOLE file).split('\n')` just to return the last N rows — a 142MB slurp that
+**blocked the event loop** (~90s CPU-bound stalls) whenever the route was queried.
+
+- **Write-side transition dedup (primary cure).** `recordSkipped()` now logs on *transition*:
+  it keeps an in-memory `session → last-logged skip signature (${reason}::${skipped})` map and
+  drops a re-append when the signature is unchanged — mirroring the sibling `reaper-audit.jsonl`
+  "log on change, not every tick" discipline. State is cleared when the session is reaped
+  (`forgetSkip`) so a same-named successor logs fresh and the map can't leak (hard ceiling
+  `MAX_SKIP_STATE`, 2000, oldest-pruned). The reaper still **evaluates** every tick, so the
+  moment a veto lifts the next skip — or the reap — is logged.
+- **Read-side bounded tail.** `read()` now reads only the last `TAIL_READ_BYTES` (2MB) via a
+  positional `readSync`, drops a torn leading line, and merges the rotated `.1` tail if needed —
+  so a large log can never be slurped whole into memory again.
+- **Size-cap rotation (defense-in-depth).** `append()` rolls the file to `<path>.1` (O(1)
+  `renameSync`, no hot-path rewrite) once it crosses `MAX_LOG_BYTES` (16MB), so it can never
+  grow unbounded even if a future caller floods it.
+
+Caps are overridable via an optional `ReapLogOptions` constructor arg (defaults = the module
+constants) purely so tests can trigger rotation cheaply; the production callsite is unchanged.
+
+## What to Tell Your User
+
+If your agent's server ever felt like it "froze for a minute" periodically, or your disk was
+filling up with a giant session-audit log, this is a fix for that. The background tidier that
+closes finished sessions was writing the same "couldn't clean this up yet" note thousands of
+times, and reading that log loaded the whole thing at once. Now it writes the note once and
+reads only the end of the file. Nothing you do changes — your "why did my session vanish?"
+history is still complete (the first skip, every change of reason, and every actual close are
+all still recorded); it just stops the duplicate spam and the stall it caused, and a log that's
+already huge stops growing and gets trimmed automatically.
+
+## Summary of New Capabilities
+
+None — this is a reliability fix to existing behavior, not a new capability. The session-audit
+history keeps the same shape and meaning; it's just bounded and de-duplicated now.
+
+## Evidence
+
+- `npx vitest run tests/unit/reap-log.test.ts` → **16 tests, 0 failures** (transition-dedup:
+  identical-skip-suppressed, reason-transition-logs, per-session independence, re-log-after-reap;
+  bounded read returns correct last-N; rotation to `.1` + cross-boundary merge + live file
+  bounded; absent-file empty read).
+- `npx vitest run tests/unit/reap-log.test.ts tests/unit/session-reaper.test.ts
+  tests/unit/reap-notifier.test.ts tests/unit/reap-guard.test.ts` → **115 tests, 0 failures**
+  (reaper family regression-clean; `normalizeEntry` whitelist untouched).
+- `npx tsc --noEmit -p tsconfig.json` → **0 errors**.
+- Independent second-pass reviewer: **Concur** — observability-only, touches no kill/keep
+  decision; no operator-needed row hidden; read/rotation off-by-one-clean.
+- Side-effects review: `upgrades/side-effects/reaper-log-flood-fix.md` (8 questions +
+  signal-vs-authority + multi-machine posture + second-pass concurrence).

package/upgrades/side-effects/evidence-bar-judge-extension.md

@@ -0,0 +1,66 @@
+# Side-Effects Review — Evidence-Bar Extension (defect class 3, dark increment)
+
+**Version / slug:** `evidence-bar-judge-extension`
+**Date:** `2026-07-03`
+**Author:** `echo`
+**Tier:** `1 (dark increment — additive classification + one pinned ratchet; no runtime wiring, no operator-gated text)`
+
+## Summary of the change
+
+The mechanical arm of the "Evidence-Bar Extension to Judge Prompts" standard (defect class 3 / `claim-vs-evidence` closure; `docs/specs/evidence-bar-judge-extension.md`), shipped as a self-contained DARK increment. It ships:
+
+1. **`src/data/llmBenchCoverage.ts`** (additive) — `LLM_JUDGES_CLAIMS`, the `judgesClaims` axis of the program's ONE shared per-callsite metadata record (sibling of the authority-clause `untrustedInput` axis, co-located in the same file). `ClaimKind` = `completionClaim | healthClaim | scoredCredit`; `JudgesClaimsFlag` = `{ claimKind }` (a judge) | `false` (not a judge) | `{ false: reason }` (a judge-shaped callsite argued out of scope). Required-explicit for every `COMPONENT_CATEGORY` key.
+2. **`tests/unit/judges-claims-classification-ratchet.test.ts`** — required-explicit + no-dangling + valid-claimKind-per-judge + the spec-named JUDGE-SEED pinned as a judge + argued-false-shrink-only + real-reason floor. Same pinned-baseline family as the sibling ratchets.
+3. **`docs/specs/evidence-bar-judge-extension.md`** + **`.eli16.md`** — the converged spec + plain-English overview (carried in with the closure so the standard's authority is on canonical main).
+
+## What is DELIBERATELY out of scope (not orphan deferrals)
+
+- **The registry amendment (spec §1).** Operator-gated — ships ONLY with Justin's explicit sign-off (spec front-matter `operator-gate`; the amendment is DRAFTED in spec §1). This run does not write `docs/STANDARDS-REGISTRY.md`.
+- **The bench-axis pair ratchet (spec §3).** A bare-claim (false-accept) case + a real-evidence (false-reject) case per `judgesClaims` judge. Blocked on the program-wide "batteries readable by CI" decision — `research/` is absent from canonical main, so main's CI cannot read axis fields (`class-closure-gate.md` §"Program-shared machinery" #2, binding all three sibling axis specs). The sibling authority-clause axis ratchet deferred on the identical blocker; the keystone (#1347) staged its axis-requirements ratchet into its OWN dark increment for the same reason. Landing it under one standard's name would be doing shared cross-program infra as a side effect.
+- **The `evidenceBar()` prompt clause (spec §4).** A sibling of the authority clause, defined by the spec to live in `src/core/promptClauses.ts`. That shared library is introduced by the still-OPEN sibling PR (authority-clause, #1351); creating it here would hard-collide on the same new file and break auto-merge for whichever PR merges second. The clause is consumed only by the A/B-gated per-component migrations (spec §4 / rollout §2), which are behavioral and deferred regardless — so shipping the clause function now would add a caller-less string with a merge hazard and no live value. It lands as a follow-up once the shared library is on main.
+- **Per-component A/B clause migrations (rollout §2).** Behavioral prompt-text changes, each gated by the A/B protocol; the completion judge goes LAST (three wordings have already failed honestly — the named legitimate terminal state is "incumbent stands + routing mitigation + tracked gap"). A downstream task, not this dark increment.
+
+## Decision-point inventory
+
+- `LLM_JUDGES_CLAIMS` (`src/data/llmBenchCoverage.ts`) — **add** — build-time metadata only. Read by the new pinned ratchet; no runtime consumer. A SIGNAL producer (which callsites judge a completion/health claim), never a runtime authority.
+- `tests/unit/judges-claims-classification-ratchet.test.ts` — **add** — a CI-only pinned baseline (same family as `llm-bench-coverage-ratchet`). It gates the build (adding an unclassified LLM callsite / mis-shaping a judge entry is red CI), never a runtime path.
+
+---
+
+## 1. Over-block
+
+**What legitimate inputs does this change reject that it shouldn't?**
+
+None at runtime — nothing is wired to a runtime allow/deny path. The only new red-CI surfaces are build-time and intentional: (a) adding a new LLM component to `COMPONENT_CATEGORY` without an explicit `judgesClaims` classification, (b) shaping a judge entry with an invalid `claimKind`, (c) marking a spec-named JUDGE-SEED callsite as `false`, or (d) drifting the argued-false pinned baseline. Each is a self-describing failure with fix-instructions in the assertion message — the "visible, reviewed act" the standard exists to force, not an over-block of legitimate work.
+
+## 2. Under-block
+
+**What failure modes does this still miss?**
+
+- The classification records WHICH callsites judge claims; it does NOT yet enforce that each judge carries the bare-claim + real-evidence axis PAIR (that is the deferred bench-axis ratchet, spec §3). So a classified judge can still ship with no false-accept/false-reject coverage until that ratchet lands. This is the known staged-rollout gap, tracked in the spec rollout, not a silent miss.
+- Classification accuracy is author-judged (like the sibling `untrustedInput` axis). A judge mislabeled `false` beyond the spec-named seed would pass — the JUDGE-SEED floor + the argued-false shrink-only pin catch the measured judges and every judge-shaped exemption; the seeding PR IS that review.
+- A prompt bar cannot AUTHENTICATE material — a fabricated transcript showing a fake PASS passes any in-prompt bar (spec "Honest reach"). The authoritative verification arm is the deterministic real-check `verification_command`, which is out of this classification by construction and named in the spec as the true-verification owner.
+
+## 3. Level-of-abstraction fit
+
+**Is this at the right layer?**
+
+Yes. The classification extends the ONE shared per-callsite metadata record the program mandates (`src/data/llmBenchCoverage.ts`), not a new parallel registry — exactly where the sibling `untrustedInput` axis lives; the ratchet is in the established pinned-baseline vitest family. No higher gate already owns "which callsites judge a completion claim"; no lower primitive is duplicated.
+
+## 4. Signal vs authority compliance
+
+`LLM_JUDGES_CLAIMS` and the ratchet are SIGNALS (which callsites judge a claim; is each judge classified and axis-eligible) — they inform the build and the reviewer, never grant or deny a runtime action. No model-produced field is wired to satisfy any check. The (future, deferred) prompt clause, once consumed, would make a model REPORT that a bare claim is unverified rather than CREDIT it — it never becomes the authority; the deterministic real-check verifier owns what is TRUE.
+
+## 5. Interactions with existing systems
+
+- **`llm-bench-coverage-ratchet`** — unaffected: `LLM_JUDGES_CLAIMS` is a NEW additive export; the existing `LLM_BENCH_COVERAGE` union and its ratchet are untouched (both green post-change under a bounded run).
+- **`untrusted-input-classification-ratchet` / `promptClauses.ts`** (sibling authority-clause, PR #1351, still open) — this increment adds a PARALLEL axis export in the same file and a parallel ratchet; it does not import or depend on the authority-clause work. Both append to `LLM_BENCH_COVERAGE`'s file region, so a textual rebase against #1351 may be needed depending on merge order — an additive, mechanical resolve, no semantic conflict.
+- **`class-closure-lint.mjs`** — already names `src/data/llmBenchCoverage.ts` as an agent-authored artifact; touching it routes the PR to operator review (the lint is report-only today). The defect class `claim-vs-evidence` already carries `closureStandard: evidence-bar-judge-extension` on master — untouched here.
+
+## 6. Failure modes / rollback
+
+Pure additive TypeScript + one test + spec docs. Rollback = revert the commit; nothing persists state, nothing runs at runtime, no migration, no config key (spec §"Decision points touched": none at runtime; no agent-side config key exists or is wanted — repo posture only, so no Migration Parity work). tsc clean, `npm run lint` exit 0, both ratchets green under bounded single-file runs (machine under intermittent external CPU pressure; verification used bounded vitest per the CI-as-gate pattern, full suite gated by CI).
+
+## 7. Second-pass reviewer
+
+Self-review (bounded machine-pressure build). The change is additive, dark, and test-pinned; no runtime surface. Key self-checks: (a) confirmed the JUDGE-SEED is exactly the spec §2 named LLM judges (real-check verifier correctly excluded as the deterministic arm); (b) the two stall-confirm adapters (Telegram/Slack) classify true by the spec's stated inclusion criteria (stall/health classifiers), the safe over-inclusive direction; (c) the required-explicit ratchet actually fired during authoring (caught 3 unclassified callsites), proving it is not a no-op; (d) argued-false baseline is empty and the type still supports it for future judge-shaped exemptions.

package/upgrades/side-effects/reaper-log-flood-fix.eli16.md

@@ -0,0 +1,39 @@
+# Reaper log-flood fix — Plain-English Overview
+
+> The one-line version: the reaper was scribbling the same "couldn't clean this up" note into an audit file thousands of times a minute until the file grew to 142MB and froze the whole server when anything read it — this makes it write the note once and read the file in small bites.
+
+## The problem in one breath
+
+Every agent has a background "reaper" that tidies up finished sessions. When a session CAN'T be tidied yet (it has an open promise to the user, or it belongs to another machine), the reaper politely skips it — and writes a one-line "skipped, here's why" note to an audit log. The bug: it re-checks and re-writes that identical note on every single tick, forever. On a live agent that piled up 3,218 + 1,608 duplicate notes and grew the log to 142MB. Worse, the code that READS that log loaded the entire 142MB into memory at once, which pegged a CPU and froze the server for ~90 seconds each time.
+
+## What already exists
+
+- **The reaper** — the background tidier that decides which sessions to close. Its actual close/keep decisions are correct and are NOT changed by this work.
+- **`reap-log.jsonl`** — the "why did my session vanish?" audit trail. One line per close, one line per refused close. This is the file that ballooned.
+- **`reaper-audit.jsonl`** — a SEPARATE, sibling audit file that already does the right thing: it only writes when a decision CHANGES, not on every tick. It stayed tiny (under half a megabyte). We copy its proven habit.
+
+## What this adds
+
+The reaper's skip-note now follows the same "only write when something changed" rule its sibling already uses. If a session is skipped for the exact same reason as last time, no new note is written. The moment the reason changes — the promise closes, the session moves machines, or it finally gets reaped — a fresh note is written, so the audit trail still tells the true story with none of the spam.
+
+Two more safety belts:
+
+- **Small-bite reading** — reading the log now pulls only the last couple of megabytes off the end of the file instead of the whole thing, so even a giant log can never freeze the server again.
+- **Auto-rotation** — if the file ever crosses 16MB anyway, it's instantly rolled aside to a single backup and a fresh file is started, so it can never grow without bound. Reading transparently stitches the backup back in so recent history is never lost.
+
+## The new pieces
+
+- **Transition dedup (in-memory)** — a tiny table remembering each session's last-written skip reason. It's per-machine, capped at 2,000 entries (sessions are only ever a few dozen in practice), and forgotten the instant a session is reaped so it can't leak. It is NOT allowed to change any close/keep decision — it only decides whether a LOG LINE is worth writing.
+- **Bounded tail reader** — reads the end of the file only. It carefully drops a half-a-line at the read boundary so a torn record is never mis-parsed.
+- **Size-cap rotation** — an instant rename (no slow file rewrite) when the file gets too big.
+
+## The safeguards
+
+- The reaper's real authority — which sessions live or die — is untouched. This is purely about how much it writes and how the file is read.
+- Nothing is lost from the audit story: first-skip, every change-of-reason, and every actual reap are all still recorded. Only the identical-to-last-time repeats are dropped.
+- It's per-machine by design (each machine audits its own reaping), matching the sibling file. No cross-machine syncing to get wrong.
+- Rollback is a one-file revert with no data migration — old fat logs and new backups both read correctly through the new reader.
+
+## What you need to decide
+
+Nothing structural — this is a contained, low-risk hygiene fix with full unit-test coverage (16 focused tests; 115 reaper-family tests green). The one judgment call baked in: we accept losing the per-tick "still skipped at 12:00:01, still skipped at 12:00:02…" heartbeat in exchange for a log that doesn't self-destruct. That trade matches what the sibling audit file already chose, so it's a consistent, already-proven decision rather than a new gamble.

package/upgrades/side-effects/reaper-log-flood-fix.md

@@ -0,0 +1,90 @@
+# Side-Effects Review — Reaper self-inflicted log-flood fix (ReapLog transition-dedup + bounded read + rotation)
+
+**Version / slug:** `reaper-log-flood-fix`
+**Date:** `2026-07-03`
+**Author:** `Echo (instar-dev agent)`
+**Second-pass reviewer:** `reviewer subagent (see appended concurrence)`
+
+## Summary of the change
+
+Three self-limiting changes to `src/monitoring/ReapLog.ts`, the append-only audit trail behind `GET /sessions/reap-log`:
+
+1. **Write-side transition dedup (primary cure).** `recordSkipped()` now logs on TRANSITION only — it keeps an in-memory `session → last-logged skip signature (${reason}::${skipped})` map and drops a re-append when the signature is unchanged. The reaper re-evaluates a permanently-vetoed session (`open-commitment`, `not-lease-holder`, `protected`) on every tick and previously appended an identical `skipped` row each time — on a live agent this produced 3218 `open-commitment` + 1608 `not-lease-holder` repeat rows and grew the log to 142MB / 463k lines (observed 2026-07-03). The dedup state is cleared when the session is reaped (`recordReaped` → `forgetSkip`) so a same-named successor logs fresh and the map cannot leak. The map has a hard ceiling (`MAX_SKIP_STATE`, default 2000, oldest-pruned).
+2. **Read-side bounded tail (fixes the freeze-on-read).** `read()` previously did `fs.readFileSync(WHOLE file).split('\n')` just to return the last `limit` rows — a 142MB slurp + split that blocked the event loop when the route was queried. It now reads only the last `TAIL_READ_BYTES` (default 2MB) of the file via a positional `readSync`, drops a leading partial line, and merges the rotated `.1` tail if the live file doesn't yield enough rows.
+3. **Size-cap rotation (defense-in-depth).** `append()` rolls the file to `<path>.1` (O(1) `renameSync`, no data rewrite on the hot path) once it would cross `MAX_LOG_BYTES` (default 16MB), so the file can never grow unbounded even if a future caller floods it. One backup generation is retained; `read()` merges it.
+
+The caps are overridable via an optional `ReapLogOptions` constructor arg (defaults = module constants) purely so tests can trigger rotation cheaply. The production callsite (`src/commands/server.ts`) is unchanged.
+
+## Decision-point inventory
+
+This change touches NO block/allow/gate decision point. `ReapLog` is a read-only observability sink — the class docstring states it "never gates or mutates a session — it only records." The reaper's keep/kill authority (`SessionManager` / `SessionReaper`) is entirely untouched; only the LOGGING cadence and READ mechanics change.
+
+- `ReapLog.recordSkipped` — modify — logs on transition instead of every tick (observability cadence only).
+- `ReapLog.read` — modify — bounded tail read instead of whole-file slurp (I/O mechanics only).
+- `ReapLog.append` — modify — adds O(1) size-cap rotation (I/O mechanics only).
+
+---
+
+## 1. Over-block
+
+No block/allow surface — over-block not applicable. `ReapLog` never blocks a session. The only "suppression" is of DUPLICATE LOG ROWS for an unchanged skip state, which is the intended behavior (mirrors the existing `reaper-audit.jsonl` log-on-transition pattern).
+
+---
+
+## 2. Under-block
+
+No block/allow surface — under-block not applicable. In audit-fidelity terms, the analogue is "what does the log no longer record?": it no longer records a fresh row for an UNCHANGED skip state on each tick. It STILL records: the first skip (transition into skipped), every change of skip reason, and every reap. A reviewer asking "is this session still being skipped?" reads the most recent skip row plus the absence of a later reap — the same answer, without 5000 duplicate rows. Loss of the per-tick "still skipped at time T" heartbeat is intentional and matches reaper-audit.
+
+---
+
+## 3. Level-of-abstraction fit
+
+Correct layer. The dedup lives INSIDE `ReapLog` (the class that owns the log), so it covers every caller — not bolted onto the single `reapBlocked` event wiring in `server.ts`, which would leave other/future callers un-deduped. The read/rotation are pure file mechanics that belong on the class that owns the file. This is a detector/observability primitive, not an authority — it produces no signal consumed by any gate. It mirrors the already-shipped `reaper-audit.jsonl` transition pattern rather than inventing a new one.
+
+---
+
+## 4. Signal vs authority compliance
+
+Compliant. The change adds NO blocking authority and NO brittle decision logic in front of any gate. It is a data-sink optimization: fewer duplicate rows written, bounded bytes read. `docs/signal-vs-authority.md` governs decision points; this change has none.
+
+---
+
+## 5. Interactions
+
+- **Mirrors, does not shadow, `reaper-audit.jsonl`.** That sink already logs reaper decisions on transition; this brings `reap-log.jsonl`'s skip rows to the same discipline. They remain separate files with separate purposes.
+- **`recordReaped` → `forgetSkip` ordering.** Reap clears the skip-state so a same-named successor logs fresh. A reap for a session never previously skipped is a harmless no-op delete.
+- **No race with cleanup.** `ReapLog` is synchronous and single-process; the rotation `renameSync` is atomic. A concurrent reader mid-rotation either sees the old file (pre-rename) or the new empty file + `.1` (post-rename) — `read()` merges `.1`, so no window loses the newest rows.
+- **`normalizeEntry` untouched** — the notify/skipped/reaped type + field whitelist that other tests guard is unchanged; all 115 reaper-family unit tests pass.
+
+---
+
+## 6. External surfaces
+
+- **`GET /sessions/reap-log`** — same JSON shape, same newest-last ordering, same `limit` semantics. The only observable difference: far fewer duplicate `skipped` rows, and the route no longer blocks the event loop on a large file. No API contract change.
+- No change visible to other agents or users beyond the route above. No dependency on timing or conversation state.
+- **Pre-existing on-disk bloat is not rewritten by this change.** A file already at 142MB stays until the next rotation trims it (or an operator archives it, as was done live on 2026-07-03). The bounded READ means even a still-large file no longer freezes the loop; the write-side dedup means it stops growing.
+
+---
+
+## 7. Multi-machine posture (Cross-Machine Coherence)
+
+**Machine-local BY DESIGN.** `reap-log.jsonl` is a per-machine audit of that machine's own reap decisions (the log path is under the machine's own `logs/`, and `GET /sessions/reap-log` already reports only the local machine's entries — pool-scope reap history is not a feature). The in-memory `skipState` dedup map is likewise per-process and correctly scoped to the machine doing the reaping. No replication, no proxied read, no cross-machine state. This matches the existing `reaper-audit.jsonl` posture. No topic-transfer, one-voice, or URL-durability concerns (it is not user-facing and generates no links).
+
+---
+
+## 8. Rollback cost
+
+Low. The change is contained to one file (`ReapLog.ts`) plus its unit tests. Back-out is a straight revert — no data migration (the on-disk format is unchanged; older whole-file logs and `.1` backups both read correctly through the new tail reader). If the transition-dedup were ever suspected of hiding a needed row, reverting restores per-tick logging immediately. No agent-state repair, no hot-fix data surgery. The caps are constructor-overridable if a deployment needs different thresholds without a code change.
+
+---
+
+## Second-pass review (independent reviewer subagent)
+
+**Concur with the review.** The change is observability-only and touches no kill/keep decision — the reaper still evaluates every tick, so the transition-dedup can never strand an operator's "why did my session vanish / not get reaped?" answer.
+
+1. **Transition-dedup:** correctly keyed on `${reason}::${skipped}`; suppresses only a byte-identical re-evaluation of the same permanent veto. Any genuine change (veto lifts → reap row always appends since `recordReaped` has no dedup; reason changes → new signature → new row) is still logged. `forgetSkip` on reap prevents both the stale-successor bug and unbounded map growth, backed by the `MAX_SKIP_STATE` oldest-first ceiling. No operator-needed row is hidden.
+2. **Bounded read:** traced the merge/tail logic — older `.1` correctly prepended to newer live, `.slice(-limit)` keeps the newest, leading partial line dropped only when `start > 0`, trailing empty line filtered, `.1` read only when live yields `< wanted`. No off-by-one, no torn record, newest row never dropped, no cross-file duplication (rename→fresh-empty-live).
+3. **Rotation:** O(1) `renameSync` off the hot path; `approxSize` seeded once then advanced per-write (no per-append stat); a pre-existing 142MB file rotates on the first append. On-disk bounded to `live (≤cap) + .1 (≤cap)` since each rotation overwrites the prior `.1`. Concurrent reader sees a consistent pre/post-rename state, both handled by `read()`.
+4. **Signal-vs-authority:** no blocking authority added; `SessionReaper`/`SessionManager` kill logic untouched; audit-sink failures swallow silently rather than perturbing behavior.
+
+No correctness defect found. Tests exercise both sides of the dedup boundary, the rotation/merge boundary, and the absent-file path. Sound to merge.