@qontinui/shared-types 0.14.0 → 1.1.0

package/dist/runner.d.cts

@@ -31,6 +31,73 @@ interface RunnerCrash {
   thread: string;
 }
 
+/* eslint-disable */
+/**
+ * This file was automatically generated.
+ * DO NOT MODIFY IT BY HAND. Regenerate with `just generate-types` or
+ * `qontinui-runner/src-tauri/scripts/generate_types.sh`.
+ */
+
+/**
+ * Which role a runner instance plays on its machine.
+ *
+ * Every runner instance on one box presents the SAME machine `device_id`, so
+ * the role is what separates the canonical instance from the supervisor-spawned
+ * ones sharing its row. Reported by the runner in `runner_info` as the
+ * top-level `instanceRole`.
+ */
+type RunnerInstanceRole = "primary" | "secondary";
+
+/* eslint-disable */
+/**
+ * This file was automatically generated.
+ * DO NOT MODIFY IT BY HAND. Regenerate with `just generate-types` or
+ * `qontinui-runner/src-tauri/scripts/generate_types.sh`.
+ */
+
+
+
+/**
+ * One live runner instance under a [`Runner`] (machine) row.
+ *
+ * A machine can host several runner instances at once — the primary on
+ * `:9876` and supervisor-spawned secondaries on `:9877-9899` — all presenting
+ * the one machine `device_id`, so they share a single [`Runner`] row. One
+ * entry per currently connected instance lets a consumer address `:9876` and
+ * `:9877` on the same box separately rather than seeing only whichever
+ * instance wrote the row's `port` last (plan
+ * `2026-09-20-runner-selector-drives-a-transport-not-a-target`, reading A0.2
+ * and Phase 6).
+ */
+interface RunnerInstance {
+  /**
+   * ISO 8601 timestamp when this instance's current WebSocket connection
+   * was established.
+   */
+  connectedAt: string;
+  /**
+   * Per-instance key, reported by the runner as `instanceKey`. Built from
+   * namespaced sources so no source can spell another's key: `"primary"`
+   * for the primary; `"runner:<id>"` for a supervisor-spawned secondary
+   * (supervisor-assigned ids are unique, and a named runner's id is reused
+   * across its restarts); `"name:<name>"` for a secondary carrying only an
+   * instance name; `"port:<port>"` for a nameless one (stable only while it
+   * keeps that port). NOT guaranteed unique: two processes that each believe
+   * themselves the primary both report `"primary"`, so a consumer must treat
+   * two live instances with the same key as a conflict, never as one
+   * overwriting the other.
+   */
+  instanceKey: string;
+  /**
+   * Whether this instance is the machine's primary or a secondary.
+   */
+  instanceRole: RunnerInstanceRole;
+  /**
+   * Port this instance's HTTP API is listening on, if reported.
+   */
+  port?: number | null;
+}
+
 /* eslint-disable */
 /**
  * This file was automatically generated.
@@ -115,6 +182,13 @@ interface Runner {
    * Runner identifier (UUID as a string).
    */
   id: string;
+  /**
+   * Currently connected runner instances on this machine, one entry per
+   * instance (see [`RunnerInstance`]). Empty when none is connected — and
+   * when the serving backend predates per-instance rows and omits the
+   * field, so absence deserializes to an empty list rather than failing.
+   */
+  instances: RunnerInstance[];
   /**
    * Reported network address the runner is reachable on.
    */

package/dist/runner.d.ts

@@ -31,6 +31,73 @@ interface RunnerCrash {
   thread: string;
 }
 
+/* eslint-disable */
+/**
+ * This file was automatically generated.
+ * DO NOT MODIFY IT BY HAND. Regenerate with `just generate-types` or
+ * `qontinui-runner/src-tauri/scripts/generate_types.sh`.
+ */
+
+/**
+ * Which role a runner instance plays on its machine.
+ *
+ * Every runner instance on one box presents the SAME machine `device_id`, so
+ * the role is what separates the canonical instance from the supervisor-spawned
+ * ones sharing its row. Reported by the runner in `runner_info` as the
+ * top-level `instanceRole`.
+ */
+type RunnerInstanceRole = "primary" | "secondary";
+
+/* eslint-disable */
+/**
+ * This file was automatically generated.
+ * DO NOT MODIFY IT BY HAND. Regenerate with `just generate-types` or
+ * `qontinui-runner/src-tauri/scripts/generate_types.sh`.
+ */
+
+
+
+/**
+ * One live runner instance under a [`Runner`] (machine) row.
+ *
+ * A machine can host several runner instances at once — the primary on
+ * `:9876` and supervisor-spawned secondaries on `:9877-9899` — all presenting
+ * the one machine `device_id`, so they share a single [`Runner`] row. One
+ * entry per currently connected instance lets a consumer address `:9876` and
+ * `:9877` on the same box separately rather than seeing only whichever
+ * instance wrote the row's `port` last (plan
+ * `2026-09-20-runner-selector-drives-a-transport-not-a-target`, reading A0.2
+ * and Phase 6).
+ */
+interface RunnerInstance {
+  /**
+   * ISO 8601 timestamp when this instance's current WebSocket connection
+   * was established.
+   */
+  connectedAt: string;
+  /**
+   * Per-instance key, reported by the runner as `instanceKey`. Built from
+   * namespaced sources so no source can spell another's key: `"primary"`
+   * for the primary; `"runner:<id>"` for a supervisor-spawned secondary
+   * (supervisor-assigned ids are unique, and a named runner's id is reused
+   * across its restarts); `"name:<name>"` for a secondary carrying only an
+   * instance name; `"port:<port>"` for a nameless one (stable only while it
+   * keeps that port). NOT guaranteed unique: two processes that each believe
+   * themselves the primary both report `"primary"`, so a consumer must treat
+   * two live instances with the same key as a conflict, never as one
+   * overwriting the other.
+   */
+  instanceKey: string;
+  /**
+   * Whether this instance is the machine's primary or a secondary.
+   */
+  instanceRole: RunnerInstanceRole;
+  /**
+   * Port this instance's HTTP API is listening on, if reported.
+   */
+  port?: number | null;
+}
+
 /* eslint-disable */
 /**
  * This file was automatically generated.
@@ -115,6 +182,13 @@ interface Runner {
    * Runner identifier (UUID as a string).
    */
   id: string;
+  /**
+   * Currently connected runner instances on this machine, one entry per
+   * instance (see [`RunnerInstance`]). Empty when none is connected — and
+   * when the serving backend predates per-instance rows and omits the
+   * field, so absence deserializes to an empty list rather than failing.
+   */
+  instances: RunnerInstance[];
   /**
    * Reported network address the runner is reachable on.
    */

package/dist/tauri-events.d.cts

@@ -1132,31 +1132,6 @@ interface DevSeedFindingPayload {
   [k: string]: unknown;
 }
 
-/* eslint-disable */
-/**
- * This file was automatically generated.
- * DO NOT MODIFY IT BY HAND. Regenerate with `just generate-types` or
- * `qontinui-runner/src-tauri/scripts/generate_types.sh`.
- */
-
-/**
- * Payload shape for the `review-approved` and `review-rejected` Tauri events
- * emitted by `commands::productivity::approve_recommendation` /
- * `reject_recommendation` after a user resolves a medium-confidence
- * recommendation card. Field names are explicit camelCase to match the
- * `serde_json::json!()` literal previously used at the emit site.
- *
- * Single struct shared by both channels: only `user_decision` differs
- * (`"approved"` vs `"rejected"`), so a tagged enum would inflate the wire
- * format without payoff.
- */
-interface RecommendationReviewDecisionPayload {
-  reviewId: string;
-  taskId: string;
-  userDecision: string;
-  [k: string]: unknown;
-}
-
 /* eslint-disable */
 /**
  * This file was automatically generated.
@@ -1270,4 +1245,4 @@ interface UiBridgeResponseEnvelope {
   [k: string]: unknown;
 }
 
-export type { AppEvent, CanvasPanel as CanvasUpdatePanel, DevSeedFindingPayload, RecommendationReviewDecisionPayload, RunnerConnectedConnection, RunnerFinding, RunnerFindingCodeContext, RunnerFindingUserInput, RunnerRelayMessage, RunnerStatusEvent, TerminalExitEvent, TerminalInfo, TerminalOutputEvent, UiBridgeRequestEnvelope, UiBridgeResponseEnvelope };
+export type { AppEvent, CanvasPanel as CanvasUpdatePanel, DevSeedFindingPayload, RunnerConnectedConnection, RunnerFinding, RunnerFindingCodeContext, RunnerFindingUserInput, RunnerRelayMessage, RunnerStatusEvent, TerminalExitEvent, TerminalInfo, TerminalOutputEvent, UiBridgeRequestEnvelope, UiBridgeResponseEnvelope };

package/dist/tauri-events.d.ts

@@ -1132,31 +1132,6 @@ interface DevSeedFindingPayload {
   [k: string]: unknown;
 }
 
-/* eslint-disable */
-/**
- * This file was automatically generated.
- * DO NOT MODIFY IT BY HAND. Regenerate with `just generate-types` or
- * `qontinui-runner/src-tauri/scripts/generate_types.sh`.
- */
-
-/**
- * Payload shape for the `review-approved` and `review-rejected` Tauri events
- * emitted by `commands::productivity::approve_recommendation` /
- * `reject_recommendation` after a user resolves a medium-confidence
- * recommendation card. Field names are explicit camelCase to match the
- * `serde_json::json!()` literal previously used at the emit site.
- *
- * Single struct shared by both channels: only `user_decision` differs
- * (`"approved"` vs `"rejected"`), so a tagged enum would inflate the wire
- * format without payoff.
- */
-interface RecommendationReviewDecisionPayload {
-  reviewId: string;
-  taskId: string;
-  userDecision: string;
-  [k: string]: unknown;
-}
-
 /* eslint-disable */
 /**
  * This file was automatically generated.
@@ -1270,4 +1245,4 @@ interface UiBridgeResponseEnvelope {
   [k: string]: unknown;
 }
 
-export type { AppEvent, CanvasPanel as CanvasUpdatePanel, DevSeedFindingPayload, RecommendationReviewDecisionPayload, RunnerConnectedConnection, RunnerFinding, RunnerFindingCodeContext, RunnerFindingUserInput, RunnerRelayMessage, RunnerStatusEvent, TerminalExitEvent, TerminalInfo, TerminalOutputEvent, UiBridgeRequestEnvelope, UiBridgeResponseEnvelope };
+export type { AppEvent, CanvasPanel as CanvasUpdatePanel, DevSeedFindingPayload, RunnerConnectedConnection, RunnerFinding, RunnerFindingCodeContext, RunnerFindingUserInput, RunnerRelayMessage, RunnerStatusEvent, TerminalExitEvent, TerminalInfo, TerminalOutputEvent, UiBridgeRequestEnvelope, UiBridgeResponseEnvelope };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@qontinui/shared-types",
-  "version": "0.14.0",
+  "version": "1.1.0",
   "description": "Shared TypeScript types for the Qontinui ecosystem",
   "type": "module",
   "main": "./dist/index.js",

package/src/generated/Runner.d.ts

@@ -6,6 +6,8 @@
  */
 
 import type { RunnerCrash } from "./RunnerCrash";
+import type { RunnerInstance } from "./RunnerInstance";
+import type { RunnerInstanceRole } from "./RunnerInstanceRole";
 import type { RunnerStatus } from "./RunnerStatus";
 import type { RunnerUiError } from "./RunnerUiError";
 
@@ -41,6 +43,13 @@ export interface Runner {
    * Runner identifier (UUID as a string).
    */
   id: string;
+  /**
+   * Currently connected runner instances on this machine, one entry per
+   * instance (see [`RunnerInstance`]). Empty when none is connected — and
+   * when the serving backend predates per-instance rows and omits the
+   * field, so absence deserializes to an empty list rather than failing.
+   */
+  instances: RunnerInstance[];
   /**
    * Reported network address the runner is reachable on.
    */

package/src/generated/RunnerInstance.d.ts

@@ -0,0 +1,49 @@
+/* eslint-disable */
+/**
+ * This file was automatically generated.
+ * DO NOT MODIFY IT BY HAND. Regenerate with `just generate-types` or
+ * `qontinui-runner/src-tauri/scripts/generate_types.sh`.
+ */
+
+import type { RunnerInstanceRole } from "./RunnerInstanceRole";
+
+/**
+ * One live runner instance under a [`Runner`] (machine) row.
+ *
+ * A machine can host several runner instances at once — the primary on
+ * `:9876` and supervisor-spawned secondaries on `:9877-9899` — all presenting
+ * the one machine `device_id`, so they share a single [`Runner`] row. One
+ * entry per currently connected instance lets a consumer address `:9876` and
+ * `:9877` on the same box separately rather than seeing only whichever
+ * instance wrote the row's `port` last (plan
+ * `2026-09-20-runner-selector-drives-a-transport-not-a-target`, reading A0.2
+ * and Phase 6).
+ */
+export interface RunnerInstance {
+  /**
+   * ISO 8601 timestamp when this instance's current WebSocket connection
+   * was established.
+   */
+  connectedAt: string;
+  /**
+   * Per-instance key, reported by the runner as `instanceKey`. Built from
+   * namespaced sources so no source can spell another's key: `"primary"`
+   * for the primary; `"runner:<id>"` for a supervisor-spawned secondary
+   * (supervisor-assigned ids are unique, and a named runner's id is reused
+   * across its restarts); `"name:<name>"` for a secondary carrying only an
+   * instance name; `"port:<port>"` for a nameless one (stable only while it
+   * keeps that port). NOT guaranteed unique: two processes that each believe
+   * themselves the primary both report `"primary"`, so a consumer must treat
+   * two live instances with the same key as a conflict, never as one
+   * overwriting the other.
+   */
+  instanceKey: string;
+  /**
+   * Whether this instance is the machine's primary or a secondary.
+   */
+  instanceRole: RunnerInstanceRole;
+  /**
+   * Port this instance's HTTP API is listening on, if reported.
+   */
+  port?: number | null;
+}

package/src/generated/RunnerInstanceRole.d.ts

@@ -0,0 +1,16 @@
+/* eslint-disable */
+/**
+ * This file was automatically generated.
+ * DO NOT MODIFY IT BY HAND. Regenerate with `just generate-types` or
+ * `qontinui-runner/src-tauri/scripts/generate_types.sh`.
+ */
+
+/**
+ * Which role a runner instance plays on its machine.
+ *
+ * Every runner instance on one box presents the SAME machine `device_id`, so
+ * the role is what separates the canonical instance from the supervisor-spawned
+ * ones sharing its row. Reported by the runner in `runner_info` as the
+ * top-level `instanceRole`.
+ */
+export type RunnerInstanceRole = "primary" | "secondary";

package/src/generated/UIBridgeElement.d.ts

@@ -41,8 +41,42 @@ export interface UIBridgeElement {
   bbox?: ElementBbox | null;
   /**
    * Custom (application-defined) actions.
-   */
-  customActions?: string[] | null;
+   *
+   * **Objects, not names.** These used to be a bare `Vec<String>` of action
+   * names, which left an element-level custom action with nowhere to carry a
+   * safety class — so the walker had no way to tell a `refresh` from a
+   * `sendKeys` that writes raw bytes into a live agent PTY. Widening this to
+   * [`ElementActionInfo`] is what makes `effect` REACHABLE from an element;
+   * see that type's docs.
+   *
+   * Absent (`None`) means the element declares none. That is deliberately
+   * distinct from an empty list, which would mean "declared, and empty".
+   *
+   * **The bare-NAME form is REJECTED.** A transitional shim accepted
+   * `["sendKeys"]` here while the shape change rolled across three repos
+   * that cannot land atomically. It was deleted once its own observable
+   * trigger was met: no emitter produces names (every `ui-bridge` element
+   * projection routes through `serializeElementCustomActions`, and
+   * `qontinui-runner`'s `src/services/background-observer-service.ts` --
+   * the ninth emitter -- does too), and the runner's SDK pin moved to
+   * `@qontinui/ui-bridge` `^0.27.0`. Plan
+   * `2026-09-04-effect-calculus-joins-the-component-action-registry`,
+   * Design decision 4, step 5.
+   *
+   * The shim's deletion also required retiring the two recorded fixtures
+   * that still carried names. That was admissible because the UI Bridge has
+   * exactly one consumer -- Qontinui itself -- so "deployed apps still
+   * emitting the old wire", the reason the wire gate keeps fixtures
+   * append-only, has no instances. Both were REPLACED by captures from
+   * 0.27.0 rather than merely dropped, so the gate still parses genuine SDK
+   * output; it now parses the object form instead of the name form.
+   *
+   * Rejecting is the point, not a side effect: a name carries no `effect`,
+   * so anything still emitting one would be shipping UNCLASSIFIED actions
+   * to a consumer that must treat unclassified as unsafe. A hard parse
+   * error names that producer; silent tolerance hid it.
+   */
+  customActions?: ElementActionInfo[] | null;
   /**
    * Unique element ID within the registry.
    */
@@ -94,3 +128,72 @@ export interface UIBridgeElement {
    */
   visible?: boolean | null;
 }
+/**
+ * Information about a single custom (application-defined) action exposed by a
+ * UI Bridge **element**.
+ *
+ * The element-level twin of [`ComponentActionInfo`], and deliberately the same
+ * field vocabulary so a consumer that walks both action planes reads one shape,
+ * not two. One field is NOT carried over: `path`. A component action has a
+ * resolved per-action invocation path because the SDK annotates one
+ * (`/control/component/<componentId>/action/<actionId>`); an element action has
+ * no analogue — every element action is invoked through the single
+ * `/control/element/<elementId>/action` route with the action name in the body.
+ * A field nothing would ever populate is dead schema surface, so it is absent
+ * rather than perpetually `null`.
+ *
+ * ## Why this is an object rather than a name
+ *
+ * It exists so `effect` has somewhere to live. A bare list of action NAMES is
+ * unannotatable: there is no slot on a name for a safety class, so an
+ * element-level custom action could not declare itself `destructive` however
+ * much its author wanted to. That is not hypothetical — the runner exposes
+ * element custom actions that write raw bytes into a live agent PTY, and some
+ * of them act on a pane with no visible view.
+ *
+ * The wire projection is widened FIRST and the annotation lands on top of it.
+ * The reverse order ships an UNREACHABLE annotation, which is worse than an
+ * absent one: the author believes the delete button is marked, and the walker
+ * walks it anyway.
+ */
+export interface ElementActionInfo {
+  /**
+   * Longer description of what the action does.
+   */
+  description?: string | null;
+  /**
+   * Safety class of this action: `read`, `write` or `destructive`.
+   *
+   * **A safety annotation, not a hint.** An autonomous walk MUST NOT fire an
+   * action annotated `destructive`; that is the same exclusion the IR already
+   * applies to `destructive` transitions when generating auto-regressions.
+   * Author-declared, because only the app author knows that a particular
+   * custom action sends the keystrokes that end a session.
+   *
+   * Absent means **unclassified, not safe** — an action nobody has judged
+   * must be treated as unknown rather than as `read`. `skip_serializing_if`
+   * keeps an un-annotated action ABSENT on the wire rather than defaulting to
+   * a class nobody chose.
+   */
+  effect?: ("read" | "write" | "destructive") | null;
+  /**
+   * Unique action identifier within the element — the key the action is
+   * registered under, and the name `/control/element/<id>/action` is called
+   * with.
+   */
+  id: string;
+  /**
+   * Human-readable label.
+   */
+  label?: string | null;
+  /**
+   * Free-form declaration of the action's parameters, author-supplied on the
+   * SDK side and surfaced verbatim. Conventionally a small JSON Schema
+   * subset, but the SDK does not constrain the shape, so it is carried
+   * through untyped — the same treatment `ElementActionRequest::params` and
+   * `ComponentActionInfo::param_schema` get.
+   */
+  paramSchema?: {
+    [k: string]: unknown;
+  };
+}

package/src/generated/index.ts

@@ -332,7 +332,6 @@ export type { RagCompletionEvent } from './RagCompletionEvent';
 export type { RagProcessingStatus } from './RagProcessingStatus';
 export type { RagProgressEvent } from './RagProgressEvent';
 export type { ReadConfigResponse } from './ReadConfigResponse';
-export type { RecommendationReviewDecisionPayload } from './RecommendationReviewDecisionPayload';
 export type { RecommendedState } from './RecommendedState';
 export type { RecordGitOpRequest } from './RecordGitOpRequest';
 export type { ReflectionFixOutput } from './ReflectionFixOutput';
@@ -361,6 +360,8 @@ export type { RunnerCrash } from './RunnerCrash';
 export type { RunnerFinding } from './RunnerFinding';
 export type { RunnerFindingCodeContext } from './RunnerFindingCodeContext';
 export type { RunnerFindingUserInput } from './RunnerFindingUserInput';
+export type { RunnerInstance } from './RunnerInstance';
+export type { RunnerInstanceRole } from './RunnerInstanceRole';
 export type { RunnerMetadata } from './RunnerMetadata';
 export type { RunnerRelayMessage } from './RunnerRelayMessage';
 export type { RunnerStatus } from './RunnerStatus';

package/src/tauri-events/_api.ts

@@ -63,11 +63,6 @@ export type { RunnerConnectedConnection } from "../generated/RunnerConnectedConn
 //    fields so the TS listener can spread them straight into a Finding. ──
 export type { DevSeedFindingPayload } from "../generated/DevSeedFindingPayload";
 
-// ── Recommendation review decision payloads (`review-approved` /
-//    `review-rejected` from `commands/productivity.rs`). One struct
-//    covers both channels — only `userDecision` differs. ──
-export type { RecommendationReviewDecisionPayload } from "../generated/RecommendationReviewDecisionPayload";
-
 // ── Canvas panel payload carried inside AppEvent::CanvasUpdate's
 //    `data.panel` field. Wire-format mirror of the runner's `StoredPanel`
 //    (`mcp/canvas.rs`). The hand-written `CanvasPanel` in `../canvas/index.ts`

package/src/generated/RecommendationReviewDecisionPayload.d.ts

@@ -1,24 +0,0 @@
-/* eslint-disable */
-/**
- * This file was automatically generated.
- * DO NOT MODIFY IT BY HAND. Regenerate with `just generate-types` or
- * `qontinui-runner/src-tauri/scripts/generate_types.sh`.
- */
-
-/**
- * Payload shape for the `review-approved` and `review-rejected` Tauri events
- * emitted by `commands::productivity::approve_recommendation` /
- * `reject_recommendation` after a user resolves a medium-confidence
- * recommendation card. Field names are explicit camelCase to match the
- * `serde_json::json!()` literal previously used at the emit site.
- *
- * Single struct shared by both channels: only `user_decision` differs
- * (`"approved"` vs `"rejected"`), so a tagged enum would inflate the wire
- * format without payoff.
- */
-export interface RecommendationReviewDecisionPayload {
-  reviewId: string;
-  taskId: string;
-  userDecision: string;
-  [k: string]: unknown;
-}