@crewhaus/ir 0.4.0 → 0.5.0

package/dist/index.d.ts

@@ -666,6 +666,13 @@ export type IrThredz = {
      *  agent memory is never public by accident (Thredz's own API defaults
      *  new articles to globally-shared). */
     readonly visibility: IrThredzVisibility;
+    /** 0.5.0 — the Thredz wiki space (Pro/Scale) this agent's memory is scoped
+     *  to; becomes `THREDZ_DEFAULT_SPACE`. Absent → unspaced, i.e. the legacy
+     *  account-wide wiki, which is also the only path on Free/Starter. Inside a
+     *  space the space's TYPE decides visibility, so {@link visibility} stops
+     *  applying — it is still carried, because the two are independent knobs and
+     *  a bundle may be pointed at a space after the fact. */
+    readonly space?: string;
     /** RESOLVED — mirror continuity goal writes to Thredz `goal_write`/
      *  `goal_update` (spec-scoped only, §14.5 decision 5). Defaulted at lower
      *  time to "on when continuity goals are on". */
@@ -818,6 +825,25 @@ export type IrObservability = {
     readonly incidents?: IrObservabilityToggle;
     readonly otel?: IrObservabilityOtel;
 };
+/**
+ * "Watch me" (design/watch-me.md §4.6) — observe-and-learn config, lowered
+ * from `spec.watchme` on the three interactive-loop shapes (IrV0/cli,
+ * IrChannelV0, IrManagedV0), carried beside `observability` (a sibling
+ * feature, not a telemetry sub-key). Unlike IrObservability's declare-only
+ * carriage, every field here is REQUIRED: the lowering resolves all defaults
+ * (a bare `watchme: {}` arrives fully populated), so emitters/runtimes never
+ * re-derive them. Absent from the IR entirely when the spec omits the block.
+ */
+export type IrWatchme = {
+    readonly enabled: boolean;
+    readonly capture: "full" | "mirrors";
+    /** Phase-2 judge model — default resolved at lower time. */
+    readonly judgeModel: string;
+    readonly judgeSampleRate: number;
+    readonly judgeBudgetUsd: number;
+    readonly scope: "harness" | "user";
+    readonly share: boolean;
+};
 /**
  * Track F (Section 57) — typed message schemas (Σ) for multi-agent
  * communication. Source: AgentFlow (arxiv 2604.20801). A typed graph
@@ -934,6 +960,10 @@ export type IrV0 = {
     /** Ops item 37 — SLO targets + mitigation ladder. Optional; absent when the
      *  spec omits the `observability` block. */
     readonly observability?: IrObservability;
+    /** "Watch me" — observe-and-learn config (design/watch-me.md §4.6).
+     *  Optional; absent when the spec omits the `watchme` block; all defaults
+     *  resolved at lower time when present. */
+    readonly watchme?: IrWatchme;
     /** Item 1 (G30) — MCP-server projection config. Present when the spec
      *  declares `expose.mcp`; absent otherwise. */
     readonly expose?: IrExpose;
@@ -1161,6 +1191,12 @@ export type IrWhatsAppConfig = {
     readonly phoneNumberId: IrSecretRef;
     readonly accessToken: IrSecretRef;
     readonly appSecret: IrSecretRef;
+    /**
+     * Shared token echoed back on Meta's unsigned GET callback-URL verification
+     * handshake (`hub.verify_token`). Optional — absent means the daemon fails
+     * that handshake closed and serves only an already-verified subscription.
+     */
+    readonly verifyToken?: IrSecretRef;
 };
 /**
  * Section 33 — iMessage channel config (macOS host-bound). `chatDbPath`
@@ -1302,6 +1338,10 @@ export type IrChannelV0 = {
     /** Ops item 37 — SLO targets + mitigation ladder. Optional; absent when the
      *  spec omits the `observability` block. */
     readonly observability?: IrObservability;
+    /** "Watch me" — observe-and-learn config (design/watch-me.md §4.6).
+     *  Optional; absent when the spec omits the `watchme` block; all defaults
+     *  resolved at lower time when present. */
+    readonly watchme?: IrWatchme;
     /** Item 1 (G30) — MCP-server projection config. Present when the spec
      *  declares `expose.mcp`; absent otherwise. */
     readonly expose?: IrExpose;
@@ -1376,6 +1416,10 @@ export type IrManagedV0 = {
     /** Loop contract 0.4 (Batch B, G02) — in-loop output evaluation.
      *  Optional; absent when the spec omits the `evaluation` block. */
     readonly evaluation?: IrEvaluation;
+    /** NEW-inloop-coverage — response-feedback config. Gates the gateway's
+     *  `feedback.submit` rating route and (with `autoDistill`) the daemon's
+     *  distill janitor step. Absent when the spec omits the block. */
+    readonly feedback?: IrFeedback;
     /** #53 cross-session memory config. Optional; absent when the spec omits `memory`. */
     readonly memory?: IrMemory;
     /** Loop contract 0.4 (Batch E, G22) — agent-shape RAG config. Present when
@@ -1395,6 +1439,12 @@ export type IrManagedV0 = {
      *  spec omits the `observability` block. The managed daemon's `pause-intake`
      *  rung reuses its `budget_exceeded` 429 path. */
     readonly observability?: IrObservability;
+    /** "Watch me" — observe-and-learn config (design/watch-me.md §4.6).
+     *  Optional; absent when the spec omits the `watchme` block; all defaults
+     *  resolved at lower time when present. CARRIED but not runtime-wired on
+     *  this shape in v1 — `compile()` emits the accepted-but-unwired warning
+     *  (design/watch-me.md §6.3 names the target-managed stamp seam). */
+    readonly watchme?: IrWatchme;
     /** Item 1 (G30) — MCP-server projection config. Present when the spec
      *  declares `expose.mcp`; absent otherwise. SSE-backed exposure rides this
      *  shape's gateway-server tenancy/budgets. */
@@ -1418,8 +1468,12 @@ export type IrGraphNode = {
     readonly tools: readonly string[];
     readonly toolConfigs: IrToolConfigs;
     /**
-     * When set, the node calls `ctx.requestApproval(prompt)` after the
-     * LLM turn and pauses the graph until `resume(checkpointId, decision)`.
+     * When set, the node calls `ctx.requestApproval(prompt)` BEFORE its LLM
+     * turn and pauses the graph until `resume(checkpointId, decision)`. The
+     * gate is a pre-condition: at the pause the node has spent nothing, the
+     * `hitl_pause` event carries the upstream state the approver is deciding
+     * on, and a rejecting decision cancels the turn (the node records only
+     * `state["<name>_decision"]`).
      */
     readonly hitlPrompt?: string;
     /** Loop contract 0.4 (Batch B, G02) — `"judge"` marks a gate node over
@@ -1581,6 +1635,18 @@ export type IrCrewRole = {
      *  PolicyRouter decides per role against the shared routing-store
      *  scoreboard). Absent → single-model. */
     readonly modelPool?: IrModelPool;
+    /** 0.5.0 — this role's RESOLVED Thredz config: the crew-wide defaults with
+     *  the role's own `thredz.roles.<name>` overrides merged in, shorthands
+     *  expanded and the credential lowered. Absent → this role has no hosted
+     *  wiki. Resolution happens at lower time precisely so the emitter does no
+     *  inheritance logic. */
+    readonly thredz?: IrThredz;
+    /** 0.5.0 — the `mcp_servers` key of the server this role's Thredz rides:
+     *  `"thredz"` for the crew default, `"thredz-<slug>"` for a role override.
+     *  Carried explicitly so the emitter never re-derives it — a name derived
+     *  twice is a name that can drift, and `McpHost.getClient` on a name the
+     *  host does not carry degrades the role to local files SILENTLY. */
+    readonly thredzServer?: string;
 };
 export type IrCrewRoutingKind = "match" | "llm";
 export type IrCrewRouting = {
@@ -1838,6 +1904,14 @@ export type IrBrowserV0 = {
         };
         /** Optional initial URL; daemon calls driver.goto() before runChatLoop. */
         readonly startUrl?: string;
+        /**
+         * SECURITY — the spec opted in to private/loopback navigation targets
+         * (`driver.allowPrivateTargets: true`). Relaxes BOTH the Navigate
+         * pre-goto guard and the chromium DNS-pinning proxy for this harness,
+         * never the http/https scheme allowlist. Carried only when true, so a
+         * bundle that leaves it at the default stays byte-identical.
+         */
+        readonly allowPrivateTargets?: boolean;
     };
     /** Vision-grounding model. Defaults at lower-time to agent.model. */
     readonly groundingModel: string;

package/dist/readme.js

@@ -16,6 +16,7 @@ export const GENERATED_README_MARKER = "<!-- crewhaus:generated-readme -->";
  */
 const SYNTHESIZED_LITERAL_KEYS = new Set([
     "THREDZ_DEFAULT_VISIBILITY",
+    "THREDZ_DEFAULT_SPACE",
     "THREDZ_API_BASE",
 ]);
 export function collectSecretRefs(ir) {
@@ -342,7 +343,12 @@ function renderEnvSection(ir) {
 function defaultUsageSection(ir) {
     return {
         heading: "Run",
-        body: ["```sh", RUN_COMMANDS[ir.target], "```"].join("\n"),
+        body: [
+            "```sh",
+            "bun install   # first run only — installs the bundle's dependencies",
+            RUN_COMMANDS[ir.target],
+            "```",
+        ].join("\n"),
     };
 }
 const WORKSPACE_NOTE = [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@crewhaus/ir",
-  "version": "0.4.0",
+  "version": "0.5.0",
   "type": "module",
   "description": "Canonical typed intermediate representation",
   "main": "dist/index.js",