@crewhaus/ir 0.4.0 → 0.4.2

package/dist/index.d.ts

@@ -818,6 +818,25 @@ export type IrObservability = {
     readonly incidents?: IrObservabilityToggle;
     readonly otel?: IrObservabilityOtel;
 };
+/**
+ * "Watch me" (design/watch-me.md §4.6) — observe-and-learn config, lowered
+ * from `spec.watchme` on the three interactive-loop shapes (IrV0/cli,
+ * IrChannelV0, IrManagedV0), carried beside `observability` (a sibling
+ * feature, not a telemetry sub-key). Unlike IrObservability's declare-only
+ * carriage, every field here is REQUIRED: the lowering resolves all defaults
+ * (a bare `watchme: {}` arrives fully populated), so emitters/runtimes never
+ * re-derive them. Absent from the IR entirely when the spec omits the block.
+ */
+export type IrWatchme = {
+    readonly enabled: boolean;
+    readonly capture: "full" | "mirrors";
+    /** Phase-2 judge model — default resolved at lower time. */
+    readonly judgeModel: string;
+    readonly judgeSampleRate: number;
+    readonly judgeBudgetUsd: number;
+    readonly scope: "harness" | "user";
+    readonly share: boolean;
+};
 /**
  * Track F (Section 57) — typed message schemas (Σ) for multi-agent
  * communication. Source: AgentFlow (arxiv 2604.20801). A typed graph
@@ -934,6 +953,10 @@ export type IrV0 = {
     /** Ops item 37 — SLO targets + mitigation ladder. Optional; absent when the
      *  spec omits the `observability` block. */
     readonly observability?: IrObservability;
+    /** "Watch me" — observe-and-learn config (design/watch-me.md §4.6).
+     *  Optional; absent when the spec omits the `watchme` block; all defaults
+     *  resolved at lower time when present. */
+    readonly watchme?: IrWatchme;
     /** Item 1 (G30) — MCP-server projection config. Present when the spec
      *  declares `expose.mcp`; absent otherwise. */
     readonly expose?: IrExpose;
@@ -1161,6 +1184,12 @@ export type IrWhatsAppConfig = {
     readonly phoneNumberId: IrSecretRef;
     readonly accessToken: IrSecretRef;
     readonly appSecret: IrSecretRef;
+    /**
+     * Shared token echoed back on Meta's unsigned GET callback-URL verification
+     * handshake (`hub.verify_token`). Optional — absent means the daemon fails
+     * that handshake closed and serves only an already-verified subscription.
+     */
+    readonly verifyToken?: IrSecretRef;
 };
 /**
  * Section 33 — iMessage channel config (macOS host-bound). `chatDbPath`
@@ -1302,6 +1331,10 @@ export type IrChannelV0 = {
     /** Ops item 37 — SLO targets + mitigation ladder. Optional; absent when the
      *  spec omits the `observability` block. */
     readonly observability?: IrObservability;
+    /** "Watch me" — observe-and-learn config (design/watch-me.md §4.6).
+     *  Optional; absent when the spec omits the `watchme` block; all defaults
+     *  resolved at lower time when present. */
+    readonly watchme?: IrWatchme;
     /** Item 1 (G30) — MCP-server projection config. Present when the spec
      *  declares `expose.mcp`; absent otherwise. */
     readonly expose?: IrExpose;
@@ -1376,6 +1409,10 @@ export type IrManagedV0 = {
     /** Loop contract 0.4 (Batch B, G02) — in-loop output evaluation.
      *  Optional; absent when the spec omits the `evaluation` block. */
     readonly evaluation?: IrEvaluation;
+    /** NEW-inloop-coverage — response-feedback config. Gates the gateway's
+     *  `feedback.submit` rating route and (with `autoDistill`) the daemon's
+     *  distill janitor step. Absent when the spec omits the block. */
+    readonly feedback?: IrFeedback;
     /** #53 cross-session memory config. Optional; absent when the spec omits `memory`. */
     readonly memory?: IrMemory;
     /** Loop contract 0.4 (Batch E, G22) — agent-shape RAG config. Present when
@@ -1395,6 +1432,12 @@ export type IrManagedV0 = {
      *  spec omits the `observability` block. The managed daemon's `pause-intake`
      *  rung reuses its `budget_exceeded` 429 path. */
     readonly observability?: IrObservability;
+    /** "Watch me" — observe-and-learn config (design/watch-me.md §4.6).
+     *  Optional; absent when the spec omits the `watchme` block; all defaults
+     *  resolved at lower time when present. CARRIED but not runtime-wired on
+     *  this shape in v1 — `compile()` emits the accepted-but-unwired warning
+     *  (design/watch-me.md §6.3 names the target-managed stamp seam). */
+    readonly watchme?: IrWatchme;
     /** Item 1 (G30) — MCP-server projection config. Present when the spec
      *  declares `expose.mcp`; absent otherwise. SSE-backed exposure rides this
      *  shape's gateway-server tenancy/budgets. */
@@ -1418,8 +1461,12 @@ export type IrGraphNode = {
     readonly tools: readonly string[];
     readonly toolConfigs: IrToolConfigs;
     /**
-     * When set, the node calls `ctx.requestApproval(prompt)` after the
-     * LLM turn and pauses the graph until `resume(checkpointId, decision)`.
+     * When set, the node calls `ctx.requestApproval(prompt)` BEFORE its LLM
+     * turn and pauses the graph until `resume(checkpointId, decision)`. The
+     * gate is a pre-condition: at the pause the node has spent nothing, the
+     * `hitl_pause` event carries the upstream state the approver is deciding
+     * on, and a rejecting decision cancels the turn (the node records only
+     * `state["<name>_decision"]`).
      */
     readonly hitlPrompt?: string;
     /** Loop contract 0.4 (Batch B, G02) — `"judge"` marks a gate node over
@@ -1838,6 +1885,14 @@ export type IrBrowserV0 = {
         };
         /** Optional initial URL; daemon calls driver.goto() before runChatLoop. */
         readonly startUrl?: string;
+        /**
+         * SECURITY — the spec opted in to private/loopback navigation targets
+         * (`driver.allowPrivateTargets: true`). Relaxes BOTH the Navigate
+         * pre-goto guard and the chromium DNS-pinning proxy for this harness,
+         * never the http/https scheme allowlist. Carried only when true, so a
+         * bundle that leaves it at the default stays byte-identical.
+         */
+        readonly allowPrivateTargets?: boolean;
     };
     /** Vision-grounding model. Defaults at lower-time to agent.model. */
     readonly groundingModel: string;

package/dist/readme.js

@@ -342,7 +342,12 @@ function renderEnvSection(ir) {
 function defaultUsageSection(ir) {
     return {
         heading: "Run",
-        body: ["```sh", RUN_COMMANDS[ir.target], "```"].join("\n"),
+        body: [
+            "```sh",
+            "bun install   # first run only — installs the bundle's dependencies",
+            RUN_COMMANDS[ir.target],
+            "```",
+        ].join("\n"),
     };
 }
 const WORKSPACE_NOTE = [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@crewhaus/ir",
-  "version": "0.4.0",
+  "version": "0.4.2",
   "type": "module",
   "description": "Canonical typed intermediate representation",
   "main": "dist/index.js",