@crewhaus/spec-patch 0.4.0 → 0.5.0

package/dist/index.d.ts

@@ -151,6 +151,22 @@ export declare function applySpecEdits(yamlText: string, edits: ReadonlyArray<Sp
  * only mutate prompts (the default), preserving the "spec safety floor"
  * that an optimizer can't accidentally rewrite security-critical fields
  * like `permissions.mode` or `model_router` rules.
+ *
+ * "Watch me" (`watchme:` on cli/channel/managed, design/watch-me.md §4.3) —
+ * EVERY `watchme.*` path is deliberately EXCLUDED; none may be whitelisted
+ * piecemeal later without revisiting that design section:
+ *   - `watchme.enabled` / `watchme.capture` — the observer must not be tuned
+ *     by the loop it observes (self-referential optimization), and capture
+ *     fidelity is a consent/data-plane posture, not a quality dial.
+ *   - `watchme.judge.model` — the model roster is never auto-patched (the
+ *     standing `agent.model` / model-roster exclusion).
+ *   - `watchme.judge.sample_rate` / `watchme.judge.budget_usd` — spend-class
+ *     knobs, human-only (sample_rate MULTIPLIES judge calls, so it is a
+ *     spend dial wearing a quality dial's clothes).
+ *   - `watchme.scope` / `watchme.share` — privacy/trust-boundary switches
+ *     (`share` crosses the harness boundary to Thredz).
+ * The paired `crewhaus advise` watchme rule is text-only for exactly this
+ * reason: there is no whitelisted path for it to patch.
  */
 export declare const OPTIMIZABLE_PATHS: Readonly<Record<Spec["target"], ReadonlyArray<ReadonlyArray<string>>>>;
 /**

package/dist/index.js

@@ -288,6 +288,22 @@ function formatEditPath(path) {
  * only mutate prompts (the default), preserving the "spec safety floor"
  * that an optimizer can't accidentally rewrite security-critical fields
  * like `permissions.mode` or `model_router` rules.
+ *
+ * "Watch me" (`watchme:` on cli/channel/managed, design/watch-me.md §4.3) —
+ * EVERY `watchme.*` path is deliberately EXCLUDED; none may be whitelisted
+ * piecemeal later without revisiting that design section:
+ *   - `watchme.enabled` / `watchme.capture` — the observer must not be tuned
+ *     by the loop it observes (self-referential optimization), and capture
+ *     fidelity is a consent/data-plane posture, not a quality dial.
+ *   - `watchme.judge.model` — the model roster is never auto-patched (the
+ *     standing `agent.model` / model-roster exclusion).
+ *   - `watchme.judge.sample_rate` / `watchme.judge.budget_usd` — spend-class
+ *     knobs, human-only (sample_rate MULTIPLIES judge calls, so it is a
+ *     spend dial wearing a quality dial's clothes).
+ *   - `watchme.scope` / `watchme.share` — privacy/trust-boundary switches
+ *     (`share` crosses the harness boundary to Thredz).
+ * The paired `crewhaus advise` watchme rule is text-only for exactly this
+ * reason: there is no whitelisted path for it to patch.
  */
 export const OPTIMIZABLE_PATHS = Object.freeze({
     cli: Object.freeze([

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@crewhaus/spec-patch",
-  "version": "0.4.0",
+  "version": "0.5.0",
   "type": "module",
   "description": "Pillar-2 patch infrastructure — apply a SpecPatch to a YAML source preserving comments and key order via the yaml CST. Drives the active eval optimizer's spec-level mutation loop.",
   "main": "dist/index.js",
@@ -15,8 +15,8 @@
     "test": "bun test src"
   },
   "dependencies": {
-    "@crewhaus/errors": "0.4.0",
-    "@crewhaus/spec": "0.4.0",
+    "@crewhaus/errors": "0.5.0",
+    "@crewhaus/spec": "0.5.0",
     "yaml": "^2.6.0",
     "zod": "^3.23.8"
   },