spaps-sdk 1.7.0 → 1.9.0

package/CHANGELOG.md

@@ -6,6 +6,12 @@ The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) and
 
 ## [Unreleased]
 
+## [1.8.0] - 2026-05-11
+
+- Maintenance: align the SDK package version after release automation.
+
+## [1.7.0] - 2026-05-09
+
 - Added `dayrate.getCheckoutStatus(sessionId)` and checkout-status response types for Bookme/dayrate confirmation polling.
 - Added browser-safe runtime helpers: guarded environment reads, `TokenManager.decodePayload()`, and SPAPS envelope unwrapping/type guards.
 - Added `headerProvider` SDK config for per-request custom context headers without overriding SDK-managed auth headers.

package/README.md

@@ -88,7 +88,7 @@ Relevant environment variables:
 | `appLinks` | Authenticated create and public resolve helpers for application-scoped short links |
 | `email` | Template lookup, preview, and send helpers |
 | `entitlements` | User and resource entitlement queries |
-| `skillEvals` | Paid blind skill-eval cases, review rooms, controlled reveal, and governance snapshots |
+| `skillEvals` | Paid blind skill-eval cases, review rooms, reviewer marks, insight inboxes, and controlled reveal |
 | `dayrate` | Availability, Stripe booking, x402 booking-hold, and checkout-status helpers |
 | `admin` | Product and pricing admin helpers |
 | `cfo` | CFO-facing reporting endpoints |
@@ -146,7 +146,7 @@ console.log(`/${link.app_slug}/${link.username}/${link.slug}`);
 
 ### Skill Evals
 
-Use `skillEvals` for SPAPS-owned blind comparative review cases. Paid creation uses the same `PAYMENT-SIGNATURE` header shape as the x402 namespace.
+Use `skillEvals` for SPAPS-owned blind review of agent-skill logs. Paid creation uses the same `PAYMENT-SIGNATURE` header shape as the x402 namespace. Reviewers submit `valuable` and `not_valuable` marks, and submitters read those marks through an insight inbox before applying skill changes.
 
 ```ts
 const signedPayment = "base64-x402-payment";
@@ -163,7 +163,13 @@ const created = await spaps.skillEvals.createCase(
         evidence_summary: "Validation passed",
         artifact_hash: "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
         artifact_mime: "text/markdown",
+        jsonl_log_ref: "spaps-artifact://logs/a.jsonl",
+        jsonl_log_hash: "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+        skill_ref: "skill://docs-review",
+        skill_version_ref: "skill://docs-review/v2.0",
         skill_version_digest: "sha256:1111111111111111111111111111111111111111111111111111111111111111",
+        model_id: "openai/gpt-5.4",
+        effort_level: "medium",
         provenance_ref: "skill://private/a",
       },
       {
@@ -172,10 +178,21 @@ const created = await spaps.skillEvals.createCase(
         evidence_summary: "Validation passed",
         artifact_hash: "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
         artifact_mime: "text/markdown",
+        jsonl_log_ref: "spaps-artifact://logs/b.jsonl",
+        jsonl_log_hash: "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+        skill_ref: "skill://docs-review",
+        skill_version_ref: "skill://docs-review/v2.1",
         skill_version_digest: "sha256:2222222222222222222222222222222222222222222222222222222222222222",
+        model_id: "openai/gpt-5.4",
+        effort_level: "medium",
         provenance_ref: "skill://private/b",
       },
     ],
+    case_policy: {
+      access_mode: "team_private",
+      allowed_model_efforts: [{ model_id: "openai/gpt-5.4", effort_level: "medium" }],
+      participant_allowlist: ["reviewer-actor-id"],
+    },
     idempotency_key: "eval-create-001",
   },
   { paymentSignature: signedPayment }
@@ -183,6 +200,35 @@ const created = await spaps.skillEvals.createCase(
 
 const room = await spaps.skillEvals.getReviewRoom(created.case_id);
 console.log(room.reviewer_state);
+
+const review = await spaps.skillEvals.submitReview(created.case_id, {
+  review_marks: [
+    {
+      candidate_id: "B",
+      kind: "valuable",
+      note: "B checks the configured docs path before recommending an edit.",
+      reason_code: "prevents_wrong_repo_patch",
+      confidence: "high",
+      criterion: "Finds repo boundaries",
+    },
+  ],
+});
+
+const inbox = await spaps.skillEvals.getInsights(created.case_id);
+console.log(inbox.valuable[0]?.jsonl_log_ref, review.review_mark_counts);
+
+await spaps.skillEvals.respondToReview(created.case_id, inbox.valuable[0].source_review_id, {
+  response: "applied",
+  reason: "Updated the skill from the concrete log-backed insight.",
+  applied_insight_ref: inbox.valuable[0].insight_ref,
+  skill_change_ref: "skill://docs-review/v2.1",
+  skill_version_before: "skill://docs-review/v2.0",
+  skill_version_after: "skill://docs-review/v2.1",
+  jsonl_log_ref: "spaps-artifact://logs/apply.jsonl",
+  jsonl_log_hash: "sha256:ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff",
+  model_id: "openai/gpt-5.4",
+  effort_level: "medium",
+});
 ```
 
 ### Custom Context Headers
@@ -319,7 +365,7 @@ npm run test:readme
 ## Metadata
 
 - `package_name`: `spaps-sdk`
-- `latest_version`: `1.6.8`
+- `latest_version`: `1.8.0`
 - `minimum_runtime`: `Node.js >=14.0.0`
 - `api_base_url`: `https://api.sweetpotato.dev`
 

package/dist/index.d.mts

@@ -1,6 +1,6 @@
 import * as spaps_types from 'spaps-types';
 import { ResourceType, Entitlement, CreateProductRequest, Product, UpdateProductRequest, CreatePriceRequest, Price, ProductSyncResult, CryptoReconcileRequest, CreateSecureMessageRequest, SecureMessage, IssueReportScope, IssueReportStatusResult, IssueReportStatus, IssueReportListResult, IssueReport, CreateIssueReportRequest, IssueReportingVoiceTokenResult, UpdateIssueReportRequest, ReplyIssueReportRequest, CreateAppLinkRequest, AppLink, AuthResponse, User as User$1, CreateCryptoInvoiceRequest, CryptoInvoiceStatusSnapshot, CheckoutSession, X402ResourceStatusResponse, X402ActionResponse, X402ReceiptResponse, X402ReceiptListResponse, X402HandoffVerification, DayrateAvailabilityResponse, DayrateBookingRequest, DayrateBookingResponse, DayrateMultiBookingRequest, DayrateMultiBookingResponse, DayrateX402BookingRequest, DayrateX402BookingResponse, DayrateCheckoutStatusResponse, Subscription, UsageBalance, VerifyCryptoWebhookSignatureOptions } from 'spaps-types';
-export { AdminPermission, AdminRole, AdminUser, ApiResponse, AppLink, AuthResponse, CheckoutSession, CreateAppLinkRequest, CreateCryptoInvoiceRequest, CreateIssueReportRequest, CreatePriceRequest, CreateProductRequest, CreateSecureMessageInput, CreateSecureMessageRequest, CryptoInvoice, CryptoInvoiceResponse, CryptoInvoiceStatusSnapshot, CryptoReconcileRequest, DayrateAvailabilityResponse, DayrateAvailableSlot, DayrateBookingRequest, DayrateBookingResponse, DayrateCheckoutStatus, DayrateCheckoutStatusBooking, DayrateCheckoutStatusResponse, DayrateDayOfWeek, DayrateMultiBookingRequest, DayrateMultiBookingResponse, DayratePriceBreakdown, DayrateSlotType, DayrateX402BookingRequest, DayrateX402BookingResponse, Entitlement, IssueReport, IssueReportListResult, IssueReportStatus, IssueReportStatusResult, IssueReportTarget, IssueReportingInputMode, IssueReportingVoiceProvider, IssueReportingVoiceTokenResult, LinkedIssueReportCase, Price, Product, ProductSyncResult, ReplyIssueReportRequest, ResourceType, SecureMessage, SecureMessageOutput, Subscription, TokenPair, UpdateIssueReportRequest, UpdateProductRequest, UsageBalance, User, UserProfile, UserRole, UserWallet, VerifyCryptoWebhookSignatureOptions, X402ActionFreeResponse, X402ActionOutcome, X402ActionPendingResponse, X402ActionReplayedResponse, X402ActionResponse, X402ActionSettledResponse, X402ExecuteActionRequest, X402HandoffAuthorization, X402HandoffVerification, X402HandoffVerifyRequest, X402PaymentAccept, X402PaymentRequirement, X402ProjectionStatus, X402Receipt, X402ReceiptListResponse, X402ReceiptResponse, X402ReceiptStatus, X402Resource, X402ResourceStatus, X402ResourceStatusResponse, createSecureMessageRequestSchema, isX402PaymentRequired, isX402ResourceStatus, secureMessageMetadataSchema, secureMessageSchema } from 'spaps-types';
+export { AdminPermission, AdminRole, AdminUser, ApiResponse, AppLink, AuthResponse, CheckoutSession, CreateAppLinkRequest, CreateCryptoInvoiceRequest, CreateIssueReportRequest, CreatePriceRequest, CreateProductRequest, CreateSecureMessageInput, CreateSecureMessageRequest, CryptoInvoice, CryptoInvoiceResponse, CryptoInvoiceStatusSnapshot, CryptoReconcileRequest, DayrateAvailabilityResponse, DayrateAvailableSlot, DayrateBookingRequest, DayrateBookingResponse, DayrateCheckoutStatus, DayrateCheckoutStatusBooking, DayrateCheckoutStatusResponse, DayrateDayOfWeek, DayrateMultiBookingRequest, DayrateMultiBookingResponse, DayratePriceBreakdown, DayrateSlotType, DayrateX402BookingRequest, DayrateX402BookingResponse, Entitlement, IssueReport, IssueReportListResult, IssueReportStatus, IssueReportStatusResult, IssueReportTarget, IssueReportingInputMode, IssueReportingVoiceProvider, IssueReportingVoiceTokenResult, LinkedIssueReportCase, Price, Product, ProductSyncResult, ReplyIssueReportRequest, ResourceType, SecureMessage, SecureMessageOutput, Subscription, TokenPair, UpdateIssueReportRequest, UpdateProductRequest, UsageBalance, User, UserProfile, UserRole, UserWallet, VerifyCryptoWebhookSignatureOptions, X402ActionFreeResponse, X402ActionOutcome, X402ActionPendingResponse, X402ActionReplayedResponse, X402ActionResponse, X402ActionSettledResponse, X402ExecuteActionRequest, X402HandoffAuthorization, X402HandoffVerification, X402HandoffVerifyRequest, X402PaymentAccept, X402PaymentRequirement, X402ProjectionStatus, X402Receipt, X402ReceiptListResponse, X402ReceiptResponse, X402ReceiptStatus, X402Resource, X402ResourceStatus, X402ResourceStatusResponse, atomicToMoneyUnits, createSecureMessageRequestSchema, isX402PaymentRequired, isX402ResourceStatus, moneyUnitsToAtomic, roundHalfToPositiveInfinity, secureMessageMetadataSchema, secureMessageSchema, validatePositiveAmountAtomic } from 'spaps-types';
 
 /**
  * Permission checking utilities for SPAPS SDK
@@ -383,8 +383,10 @@ interface X402VerifyHandoffOptions {
 type SkillEvalDisclosurePolicy = 'blind_then_controlled_reveal';
 type SkillEvalEligibilitySource = 'admin_assigned' | 'entitlement' | 'policy_import' | 'manual_override';
 type SkillEvalConfidence = 'low' | 'medium' | 'high';
+type SkillEvalReviewMarkKind = 'valuable' | 'not_valuable';
 type SkillEvalPosterResponse = 'accepted' | 'rejected' | 'needs_clarification' | 'applied';
 type SkillEvalRevealField = 'skill_version_digest' | 'provenance_ref';
+type SkillEvalAccessMode = 'public' | 'team_private';
 type SkillEvalGovernancePurpose = 'adopt_skill' | 'retire_skill' | 'merge_skill' | 'split_skill' | 'reviewer_policy' | 'fund_bounty';
 interface SkillEvalCandidateInput {
     candidate_id: string;
@@ -392,12 +394,33 @@ interface SkillEvalCandidateInput {
     evidence_summary: string;
     artifact_hash: string;
     artifact_mime: string;
+    jsonl_log_ref: string;
+    jsonl_log_hash: string;
+    skill_ref: string;
+    skill_version_ref: string;
     skill_version_digest: string;
+    model_id: string;
+    effort_level: string;
     provenance_ref: string;
 }
+interface SkillEvalModelEffort {
+    model_id: string;
+    effort_level: string;
+}
+interface SkillEvalCasePolicy {
+    access_mode?: SkillEvalAccessMode;
+    allowed_model_efforts: SkillEvalModelEffort[];
+    min_contribution_score?: number | null;
+    contribution_score_source_ref?: string | null;
+    viewer_allowlist?: string[];
+    skill_user_allowlist?: string[];
+    participant_allowlist?: string[];
+}
 interface SkillEvalReviewerEligibilityInput {
     reviewer_actor_id: string;
     eligibility_source?: SkillEvalEligibilitySource;
+    contribution_score?: number | null;
+    contribution_score_source_ref?: string | null;
 }
 interface CreateSkillEvalCaseRequest {
     title: string;
@@ -405,6 +428,7 @@ interface CreateSkillEvalCaseRequest {
     success_criteria: string[];
     candidates: SkillEvalCandidateInput[];
     disclosure_policy?: SkillEvalDisclosurePolicy;
+    case_policy: SkillEvalCasePolicy;
     idempotency_key: string;
     reviewer_eligibility?: SkillEvalReviewerEligibilityInput[];
 }
@@ -423,6 +447,9 @@ interface SkillEvalCaseResponse {
     x402_receipt_id?: string | null;
     payload_fingerprint?: string;
     case_version: number;
+    access_mode?: SkillEvalAccessMode;
+    case_policy?: SkillEvalCasePolicy;
+    actor_access?: SkillEvalActorAccess;
     created_at?: string | null;
     updated_at?: string | null;
     idempotent_replay?: boolean;
@@ -431,6 +458,11 @@ interface SkillEvalCaseResponse {
     success_criteria?: string[];
     candidates?: SkillEvalCandidateResponse[];
 }
+interface SkillEvalActorAccess {
+    can_view: boolean;
+    can_use_skill: boolean;
+    can_participate: boolean;
+}
 interface SkillEvalCandidateResponse {
     candidate_id: string;
     output_ref: string;
@@ -439,6 +471,10 @@ interface SkillEvalCandidateResponse {
     artifact_mime: string;
     skill_version_digest?: string;
     provenance_ref?: string;
+    jsonl_log_ref?: string;
+    jsonl_log_hash?: string;
+    model_id?: string;
+    effort_level?: string;
 }
 interface SkillEvalReviewRoom {
     case_id: string;
@@ -447,14 +483,24 @@ interface SkillEvalReviewRoom {
     success_criteria: string[];
     candidates: SkillEvalCandidateResponse[];
     reviewer_state: string;
+    actor_access?: SkillEvalActorAccess;
     case_version: number;
 }
+interface SkillEvalReviewMarkInput {
+    candidate_id: string;
+    kind: SkillEvalReviewMarkKind;
+    note: string;
+    reason_code: string;
+    confidence: SkillEvalConfidence;
+    criterion?: string | null;
+}
 interface SubmitSkillEvalReviewRequest {
-    winner_candidate_id: string;
-    rationale: string;
-    missing_from_winner: string;
+    winner_candidate_id?: string | null;
+    rationale?: string | null;
+    missing_from_winner?: string | null;
     criteria_challenge?: string | null;
-    confidence: SkillEvalConfidence;
+    confidence?: SkillEvalConfidence | null;
+    review_marks?: SkillEvalReviewMarkInput[];
 }
 interface SkillEvalRewardEvent {
     reward_event_id?: string;
@@ -463,17 +509,77 @@ interface SkillEvalRewardEvent {
 interface SkillEvalReviewResponse {
     review_id: string;
     status: string;
+    review_mark_counts?: {
+        valuable: number;
+        not_valuable: number;
+    };
     reward_event?: SkillEvalRewardEvent | null;
 }
+interface SkillEvalInsight {
+    insight_ref: string;
+    mark_id?: string | null;
+    source_review_id: string;
+    reviewer_actor_id?: string | null;
+    source_review_created_at?: string | null;
+    candidate_id: string;
+    kind: SkillEvalReviewMarkKind;
+    note: string;
+    reason_code: string;
+    confidence: SkillEvalConfidence;
+    criterion?: string | null;
+    jsonl_log_ref: string;
+    jsonl_log_hash: string;
+    source_candidate?: {
+        output_ref?: string | null;
+        evidence_summary?: string | null;
+        artifact_hash?: string | null;
+        artifact_mime?: string | null;
+        model_id?: string | null;
+        effort_level?: string | null;
+    };
+}
+interface SkillEvalInsightsResponse {
+    case_id: string;
+    status?: string;
+    task_claim?: string;
+    success_criteria?: string[];
+    case_version?: number;
+    valuable: SkillEvalInsight[];
+    not_valuable: SkillEvalInsight[];
+    counts?: {
+        valuable: number;
+        not_valuable: number;
+    };
+    visibility_policy?: {
+        access_mode?: SkillEvalAccessMode;
+        actor_access?: SkillEvalActorAccess;
+        reviewer_identity_visible?: boolean;
+        case_policy?: SkillEvalCasePolicy;
+    };
+}
 interface RespondToSkillEvalReviewRequest {
     response: SkillEvalPosterResponse;
     reason: string;
+    applied_insight_ref?: string | null;
     skill_change_ref?: string | null;
+    skill_version_before?: string | null;
+    skill_version_after?: string | null;
+    jsonl_log_ref?: string | null;
+    jsonl_log_hash?: string | null;
+    model_id?: string | null;
+    effort_level?: string | null;
 }
 interface SkillEvalPosterResponseResult {
     response_id: string;
     response: SkillEvalPosterResponse;
+    applied_insight_ref?: string | null;
     skill_change_ref?: string | null;
+    skill_version_before?: string | null;
+    skill_version_after?: string | null;
+    jsonl_log_ref?: string | null;
+    jsonl_log_hash?: string | null;
+    model_id?: string | null;
+    effort_level?: string | null;
     reward_event?: SkillEvalRewardEvent | null;
 }
 interface RevealSkillEvalEvidenceRequest {
@@ -948,6 +1054,7 @@ declare class SPAPSClient<SecureMessageMetadata extends Record<string, any> = Re
         createCase: (payload: CreateSkillEvalCaseRequest, options?: SkillEvalCreateOptions) => Promise<SkillEvalCaseResponse>;
         getCase: (caseId: string) => Promise<SkillEvalCaseResponse>;
         getReviewRoom: (caseId: string) => Promise<SkillEvalReviewRoom>;
+        getInsights: (caseId: string) => Promise<SkillEvalInsightsResponse>;
         submitReview: (caseId: string, payload: SubmitSkillEvalReviewRequest, options?: SkillEvalMutationOptions) => Promise<SkillEvalReviewResponse>;
         respondToReview: (caseId: string, reviewId: string, payload: RespondToSkillEvalReviewRequest, options?: SkillEvalMutationOptions) => Promise<SkillEvalPosterResponseResult>;
         lockReviews: (caseId: string, options?: SkillEvalMutationOptions) => Promise<SkillEvalCaseResponse>;
@@ -1176,4 +1283,4 @@ declare function createServerClient(secretKey: string, options?: Omit<SPAPSConfi
  */
 declare function detectKeyType(key: string): ApiKeyType | null;
 
-export { type AdminConfig, type ApiKeyType, type CheckoutLineItem, type CheckoutLineItemPriceData, type CreateCheckoutSessionPayload, type CreateSkillEvalCaseRequest, type CreateSkillEvalGovernanceSnapshotRequest, DEFAULT_ADMIN_ACCOUNTS, type EmailSendOptions, type EmailSendResult, type EmailTemplate, type EmailTemplatePreview, type EntitlementCheckResult, type EntitlementListParams, type FeatureContext, type FeatureDefinition, FeatureEvaluator, type HeaderProvider, type ImportSkillEvalGovernanceOutcomeRequest, type IssueReportListParams, type IssueReportStatusParams, type PermissionCheckResult, PermissionChecker, type RespondToSkillEvalReviewRequest, type RevealSkillEvalEvidenceRequest, RoleHierarchy, SPAPSClient as SPAPS, SPAPSClient, type SPAPSConfig, type SPAPSEnvelope, type SkillEvalCandidateInput, type SkillEvalCandidateResponse, type SkillEvalCaseResponse, type SkillEvalConfidence, type SkillEvalCreateOptions, type SkillEvalDisclosurePolicy, type SkillEvalEligibilitySource, type SkillEvalGovernanceOutcomeResult, type SkillEvalGovernancePurpose, type SkillEvalGovernanceSnapshotResult, type SkillEvalMutationOptions, type SkillEvalPosterResponse, type SkillEvalPosterResponseResult, type SkillEvalRevealField, type SkillEvalRevealResult, type SkillEvalReviewResponse, type SkillEvalReviewRoom, type SkillEvalReviewerEligibilityInput, type SkillEvalRewardEvent, type SubmitSkillEvalReviewRequest, type TemplateVariable, TokenManager, WalletUtils, WebSocketAuthHelper, type WebSocketAuthHelperConfig, type X402ExecuteActionOptions, X402PaymentRequiredSDKError, type X402ReceiptListParams, type X402VerifyHandoffOptions, canAccessAdmin, createBrowserClient, createPermissionChecker, createServerClient, SPAPSClient as default, defaultPermissionChecker, detectKeyType, getRoleAwareErrorMessage, getUserDisplay, getUserRole, hasPermission, isAdminAccount, isEnvelope, isErrorEnvelope, isSuccessEnvelope, unwrapEnvelope, unwrapNestedData, verifyCryptoWebhookSignature };
+export { type AdminConfig, type ApiKeyType, type CheckoutLineItem, type CheckoutLineItemPriceData, type CreateCheckoutSessionPayload, type CreateSkillEvalCaseRequest, type CreateSkillEvalGovernanceSnapshotRequest, DEFAULT_ADMIN_ACCOUNTS, type EmailSendOptions, type EmailSendResult, type EmailTemplate, type EmailTemplatePreview, type EntitlementCheckResult, type EntitlementListParams, type FeatureContext, type FeatureDefinition, FeatureEvaluator, type HeaderProvider, type ImportSkillEvalGovernanceOutcomeRequest, type IssueReportListParams, type IssueReportStatusParams, type PermissionCheckResult, PermissionChecker, type RespondToSkillEvalReviewRequest, type RevealSkillEvalEvidenceRequest, RoleHierarchy, SPAPSClient as SPAPS, SPAPSClient, type SPAPSConfig, type SPAPSEnvelope, type SkillEvalAccessMode, type SkillEvalActorAccess, type SkillEvalCandidateInput, type SkillEvalCandidateResponse, type SkillEvalCasePolicy, type SkillEvalCaseResponse, type SkillEvalConfidence, type SkillEvalCreateOptions, type SkillEvalDisclosurePolicy, type SkillEvalEligibilitySource, type SkillEvalGovernanceOutcomeResult, type SkillEvalGovernancePurpose, type SkillEvalGovernanceSnapshotResult, type SkillEvalInsight, type SkillEvalInsightsResponse, type SkillEvalModelEffort, type SkillEvalMutationOptions, type SkillEvalPosterResponse, type SkillEvalPosterResponseResult, type SkillEvalRevealField, type SkillEvalRevealResult, type SkillEvalReviewMarkInput, type SkillEvalReviewMarkKind, type SkillEvalReviewResponse, type SkillEvalReviewRoom, type SkillEvalReviewerEligibilityInput, type SkillEvalRewardEvent, type SubmitSkillEvalReviewRequest, type TemplateVariable, TokenManager, WalletUtils, WebSocketAuthHelper, type WebSocketAuthHelperConfig, type X402ExecuteActionOptions, X402PaymentRequiredSDKError, type X402ReceiptListParams, type X402VerifyHandoffOptions, canAccessAdmin, createBrowserClient, createPermissionChecker, createServerClient, SPAPSClient as default, defaultPermissionChecker, detectKeyType, getRoleAwareErrorMessage, getUserDisplay, getUserRole, hasPermission, isAdminAccount, isEnvelope, isErrorEnvelope, isSuccessEnvelope, unwrapEnvelope, unwrapNestedData, verifyCryptoWebhookSignature };

package/dist/index.d.ts

@@ -1,6 +1,6 @@
 import * as spaps_types from 'spaps-types';
 import { ResourceType, Entitlement, CreateProductRequest, Product, UpdateProductRequest, CreatePriceRequest, Price, ProductSyncResult, CryptoReconcileRequest, CreateSecureMessageRequest, SecureMessage, IssueReportScope, IssueReportStatusResult, IssueReportStatus, IssueReportListResult, IssueReport, CreateIssueReportRequest, IssueReportingVoiceTokenResult, UpdateIssueReportRequest, ReplyIssueReportRequest, CreateAppLinkRequest, AppLink, AuthResponse, User as User$1, CreateCryptoInvoiceRequest, CryptoInvoiceStatusSnapshot, CheckoutSession, X402ResourceStatusResponse, X402ActionResponse, X402ReceiptResponse, X402ReceiptListResponse, X402HandoffVerification, DayrateAvailabilityResponse, DayrateBookingRequest, DayrateBookingResponse, DayrateMultiBookingRequest, DayrateMultiBookingResponse, DayrateX402BookingRequest, DayrateX402BookingResponse, DayrateCheckoutStatusResponse, Subscription, UsageBalance, VerifyCryptoWebhookSignatureOptions } from 'spaps-types';
-export { AdminPermission, AdminRole, AdminUser, ApiResponse, AppLink, AuthResponse, CheckoutSession, CreateAppLinkRequest, CreateCryptoInvoiceRequest, CreateIssueReportRequest, CreatePriceRequest, CreateProductRequest, CreateSecureMessageInput, CreateSecureMessageRequest, CryptoInvoice, CryptoInvoiceResponse, CryptoInvoiceStatusSnapshot, CryptoReconcileRequest, DayrateAvailabilityResponse, DayrateAvailableSlot, DayrateBookingRequest, DayrateBookingResponse, DayrateCheckoutStatus, DayrateCheckoutStatusBooking, DayrateCheckoutStatusResponse, DayrateDayOfWeek, DayrateMultiBookingRequest, DayrateMultiBookingResponse, DayratePriceBreakdown, DayrateSlotType, DayrateX402BookingRequest, DayrateX402BookingResponse, Entitlement, IssueReport, IssueReportListResult, IssueReportStatus, IssueReportStatusResult, IssueReportTarget, IssueReportingInputMode, IssueReportingVoiceProvider, IssueReportingVoiceTokenResult, LinkedIssueReportCase, Price, Product, ProductSyncResult, ReplyIssueReportRequest, ResourceType, SecureMessage, SecureMessageOutput, Subscription, TokenPair, UpdateIssueReportRequest, UpdateProductRequest, UsageBalance, User, UserProfile, UserRole, UserWallet, VerifyCryptoWebhookSignatureOptions, X402ActionFreeResponse, X402ActionOutcome, X402ActionPendingResponse, X402ActionReplayedResponse, X402ActionResponse, X402ActionSettledResponse, X402ExecuteActionRequest, X402HandoffAuthorization, X402HandoffVerification, X402HandoffVerifyRequest, X402PaymentAccept, X402PaymentRequirement, X402ProjectionStatus, X402Receipt, X402ReceiptListResponse, X402ReceiptResponse, X402ReceiptStatus, X402Resource, X402ResourceStatus, X402ResourceStatusResponse, createSecureMessageRequestSchema, isX402PaymentRequired, isX402ResourceStatus, secureMessageMetadataSchema, secureMessageSchema } from 'spaps-types';
+export { AdminPermission, AdminRole, AdminUser, ApiResponse, AppLink, AuthResponse, CheckoutSession, CreateAppLinkRequest, CreateCryptoInvoiceRequest, CreateIssueReportRequest, CreatePriceRequest, CreateProductRequest, CreateSecureMessageInput, CreateSecureMessageRequest, CryptoInvoice, CryptoInvoiceResponse, CryptoInvoiceStatusSnapshot, CryptoReconcileRequest, DayrateAvailabilityResponse, DayrateAvailableSlot, DayrateBookingRequest, DayrateBookingResponse, DayrateCheckoutStatus, DayrateCheckoutStatusBooking, DayrateCheckoutStatusResponse, DayrateDayOfWeek, DayrateMultiBookingRequest, DayrateMultiBookingResponse, DayratePriceBreakdown, DayrateSlotType, DayrateX402BookingRequest, DayrateX402BookingResponse, Entitlement, IssueReport, IssueReportListResult, IssueReportStatus, IssueReportStatusResult, IssueReportTarget, IssueReportingInputMode, IssueReportingVoiceProvider, IssueReportingVoiceTokenResult, LinkedIssueReportCase, Price, Product, ProductSyncResult, ReplyIssueReportRequest, ResourceType, SecureMessage, SecureMessageOutput, Subscription, TokenPair, UpdateIssueReportRequest, UpdateProductRequest, UsageBalance, User, UserProfile, UserRole, UserWallet, VerifyCryptoWebhookSignatureOptions, X402ActionFreeResponse, X402ActionOutcome, X402ActionPendingResponse, X402ActionReplayedResponse, X402ActionResponse, X402ActionSettledResponse, X402ExecuteActionRequest, X402HandoffAuthorization, X402HandoffVerification, X402HandoffVerifyRequest, X402PaymentAccept, X402PaymentRequirement, X402ProjectionStatus, X402Receipt, X402ReceiptListResponse, X402ReceiptResponse, X402ReceiptStatus, X402Resource, X402ResourceStatus, X402ResourceStatusResponse, atomicToMoneyUnits, createSecureMessageRequestSchema, isX402PaymentRequired, isX402ResourceStatus, moneyUnitsToAtomic, roundHalfToPositiveInfinity, secureMessageMetadataSchema, secureMessageSchema, validatePositiveAmountAtomic } from 'spaps-types';
 
 /**
  * Permission checking utilities for SPAPS SDK
@@ -383,8 +383,10 @@ interface X402VerifyHandoffOptions {
 type SkillEvalDisclosurePolicy = 'blind_then_controlled_reveal';
 type SkillEvalEligibilitySource = 'admin_assigned' | 'entitlement' | 'policy_import' | 'manual_override';
 type SkillEvalConfidence = 'low' | 'medium' | 'high';
+type SkillEvalReviewMarkKind = 'valuable' | 'not_valuable';
 type SkillEvalPosterResponse = 'accepted' | 'rejected' | 'needs_clarification' | 'applied';
 type SkillEvalRevealField = 'skill_version_digest' | 'provenance_ref';
+type SkillEvalAccessMode = 'public' | 'team_private';
 type SkillEvalGovernancePurpose = 'adopt_skill' | 'retire_skill' | 'merge_skill' | 'split_skill' | 'reviewer_policy' | 'fund_bounty';
 interface SkillEvalCandidateInput {
     candidate_id: string;
@@ -392,12 +394,33 @@ interface SkillEvalCandidateInput {
     evidence_summary: string;
     artifact_hash: string;
     artifact_mime: string;
+    jsonl_log_ref: string;
+    jsonl_log_hash: string;
+    skill_ref: string;
+    skill_version_ref: string;
     skill_version_digest: string;
+    model_id: string;
+    effort_level: string;
     provenance_ref: string;
 }
+interface SkillEvalModelEffort {
+    model_id: string;
+    effort_level: string;
+}
+interface SkillEvalCasePolicy {
+    access_mode?: SkillEvalAccessMode;
+    allowed_model_efforts: SkillEvalModelEffort[];
+    min_contribution_score?: number | null;
+    contribution_score_source_ref?: string | null;
+    viewer_allowlist?: string[];
+    skill_user_allowlist?: string[];
+    participant_allowlist?: string[];
+}
 interface SkillEvalReviewerEligibilityInput {
     reviewer_actor_id: string;
     eligibility_source?: SkillEvalEligibilitySource;
+    contribution_score?: number | null;
+    contribution_score_source_ref?: string | null;
 }
 interface CreateSkillEvalCaseRequest {
     title: string;
@@ -405,6 +428,7 @@ interface CreateSkillEvalCaseRequest {
     success_criteria: string[];
     candidates: SkillEvalCandidateInput[];
     disclosure_policy?: SkillEvalDisclosurePolicy;
+    case_policy: SkillEvalCasePolicy;
     idempotency_key: string;
     reviewer_eligibility?: SkillEvalReviewerEligibilityInput[];
 }
@@ -423,6 +447,9 @@ interface SkillEvalCaseResponse {
     x402_receipt_id?: string | null;
     payload_fingerprint?: string;
     case_version: number;
+    access_mode?: SkillEvalAccessMode;
+    case_policy?: SkillEvalCasePolicy;
+    actor_access?: SkillEvalActorAccess;
     created_at?: string | null;
     updated_at?: string | null;
     idempotent_replay?: boolean;
@@ -431,6 +458,11 @@ interface SkillEvalCaseResponse {
     success_criteria?: string[];
     candidates?: SkillEvalCandidateResponse[];
 }
+interface SkillEvalActorAccess {
+    can_view: boolean;
+    can_use_skill: boolean;
+    can_participate: boolean;
+}
 interface SkillEvalCandidateResponse {
     candidate_id: string;
     output_ref: string;
@@ -439,6 +471,10 @@ interface SkillEvalCandidateResponse {
     artifact_mime: string;
     skill_version_digest?: string;
     provenance_ref?: string;
+    jsonl_log_ref?: string;
+    jsonl_log_hash?: string;
+    model_id?: string;
+    effort_level?: string;
 }
 interface SkillEvalReviewRoom {
     case_id: string;
@@ -447,14 +483,24 @@ interface SkillEvalReviewRoom {
     success_criteria: string[];
     candidates: SkillEvalCandidateResponse[];
     reviewer_state: string;
+    actor_access?: SkillEvalActorAccess;
     case_version: number;
 }
+interface SkillEvalReviewMarkInput {
+    candidate_id: string;
+    kind: SkillEvalReviewMarkKind;
+    note: string;
+    reason_code: string;
+    confidence: SkillEvalConfidence;
+    criterion?: string | null;
+}
 interface SubmitSkillEvalReviewRequest {
-    winner_candidate_id: string;
-    rationale: string;
-    missing_from_winner: string;
+    winner_candidate_id?: string | null;
+    rationale?: string | null;
+    missing_from_winner?: string | null;
     criteria_challenge?: string | null;
-    confidence: SkillEvalConfidence;
+    confidence?: SkillEvalConfidence | null;
+    review_marks?: SkillEvalReviewMarkInput[];
 }
 interface SkillEvalRewardEvent {
     reward_event_id?: string;
@@ -463,17 +509,77 @@ interface SkillEvalRewardEvent {
 interface SkillEvalReviewResponse {
     review_id: string;
     status: string;
+    review_mark_counts?: {
+        valuable: number;
+        not_valuable: number;
+    };
     reward_event?: SkillEvalRewardEvent | null;
 }
+interface SkillEvalInsight {
+    insight_ref: string;
+    mark_id?: string | null;
+    source_review_id: string;
+    reviewer_actor_id?: string | null;
+    source_review_created_at?: string | null;
+    candidate_id: string;
+    kind: SkillEvalReviewMarkKind;
+    note: string;
+    reason_code: string;
+    confidence: SkillEvalConfidence;
+    criterion?: string | null;
+    jsonl_log_ref: string;
+    jsonl_log_hash: string;
+    source_candidate?: {
+        output_ref?: string | null;
+        evidence_summary?: string | null;
+        artifact_hash?: string | null;
+        artifact_mime?: string | null;
+        model_id?: string | null;
+        effort_level?: string | null;
+    };
+}
+interface SkillEvalInsightsResponse {
+    case_id: string;
+    status?: string;
+    task_claim?: string;
+    success_criteria?: string[];
+    case_version?: number;
+    valuable: SkillEvalInsight[];
+    not_valuable: SkillEvalInsight[];
+    counts?: {
+        valuable: number;
+        not_valuable: number;
+    };
+    visibility_policy?: {
+        access_mode?: SkillEvalAccessMode;
+        actor_access?: SkillEvalActorAccess;
+        reviewer_identity_visible?: boolean;
+        case_policy?: SkillEvalCasePolicy;
+    };
+}
 interface RespondToSkillEvalReviewRequest {
     response: SkillEvalPosterResponse;
     reason: string;
+    applied_insight_ref?: string | null;
     skill_change_ref?: string | null;
+    skill_version_before?: string | null;
+    skill_version_after?: string | null;
+    jsonl_log_ref?: string | null;
+    jsonl_log_hash?: string | null;
+    model_id?: string | null;
+    effort_level?: string | null;
 }
 interface SkillEvalPosterResponseResult {
     response_id: string;
     response: SkillEvalPosterResponse;
+    applied_insight_ref?: string | null;
     skill_change_ref?: string | null;
+    skill_version_before?: string | null;
+    skill_version_after?: string | null;
+    jsonl_log_ref?: string | null;
+    jsonl_log_hash?: string | null;
+    model_id?: string | null;
+    effort_level?: string | null;
     reward_event?: SkillEvalRewardEvent | null;
 }
 interface RevealSkillEvalEvidenceRequest {
@@ -948,6 +1054,7 @@ declare class SPAPSClient<SecureMessageMetadata extends Record<string, any> = Re
         createCase: (payload: CreateSkillEvalCaseRequest, options?: SkillEvalCreateOptions) => Promise<SkillEvalCaseResponse>;
         getCase: (caseId: string) => Promise<SkillEvalCaseResponse>;
         getReviewRoom: (caseId: string) => Promise<SkillEvalReviewRoom>;
+        getInsights: (caseId: string) => Promise<SkillEvalInsightsResponse>;
         submitReview: (caseId: string, payload: SubmitSkillEvalReviewRequest, options?: SkillEvalMutationOptions) => Promise<SkillEvalReviewResponse>;
         respondToReview: (caseId: string, reviewId: string, payload: RespondToSkillEvalReviewRequest, options?: SkillEvalMutationOptions) => Promise<SkillEvalPosterResponseResult>;
         lockReviews: (caseId: string, options?: SkillEvalMutationOptions) => Promise<SkillEvalCaseResponse>;
@@ -1176,4 +1283,4 @@ declare function createServerClient(secretKey: string, options?: Omit<SPAPSConfi
  */
 declare function detectKeyType(key: string): ApiKeyType | null;
 
-export { type AdminConfig, type ApiKeyType, type CheckoutLineItem, type CheckoutLineItemPriceData, type CreateCheckoutSessionPayload, type CreateSkillEvalCaseRequest, type CreateSkillEvalGovernanceSnapshotRequest, DEFAULT_ADMIN_ACCOUNTS, type EmailSendOptions, type EmailSendResult, type EmailTemplate, type EmailTemplatePreview, type EntitlementCheckResult, type EntitlementListParams, type FeatureContext, type FeatureDefinition, FeatureEvaluator, type HeaderProvider, type ImportSkillEvalGovernanceOutcomeRequest, type IssueReportListParams, type IssueReportStatusParams, type PermissionCheckResult, PermissionChecker, type RespondToSkillEvalReviewRequest, type RevealSkillEvalEvidenceRequest, RoleHierarchy, SPAPSClient as SPAPS, SPAPSClient, type SPAPSConfig, type SPAPSEnvelope, type SkillEvalCandidateInput, type SkillEvalCandidateResponse, type SkillEvalCaseResponse, type SkillEvalConfidence, type SkillEvalCreateOptions, type SkillEvalDisclosurePolicy, type SkillEvalEligibilitySource, type SkillEvalGovernanceOutcomeResult, type SkillEvalGovernancePurpose, type SkillEvalGovernanceSnapshotResult, type SkillEvalMutationOptions, type SkillEvalPosterResponse, type SkillEvalPosterResponseResult, type SkillEvalRevealField, type SkillEvalRevealResult, type SkillEvalReviewResponse, type SkillEvalReviewRoom, type SkillEvalReviewerEligibilityInput, type SkillEvalRewardEvent, type SubmitSkillEvalReviewRequest, type TemplateVariable, TokenManager, WalletUtils, WebSocketAuthHelper, type WebSocketAuthHelperConfig, type X402ExecuteActionOptions, X402PaymentRequiredSDKError, type X402ReceiptListParams, type X402VerifyHandoffOptions, canAccessAdmin, createBrowserClient, createPermissionChecker, createServerClient, SPAPSClient as default, defaultPermissionChecker, detectKeyType, getRoleAwareErrorMessage, getUserDisplay, getUserRole, hasPermission, isAdminAccount, isEnvelope, isErrorEnvelope, isSuccessEnvelope, unwrapEnvelope, unwrapNestedData, verifyCryptoWebhookSignature };
+export { type AdminConfig, type ApiKeyType, type CheckoutLineItem, type CheckoutLineItemPriceData, type CreateCheckoutSessionPayload, type CreateSkillEvalCaseRequest, type CreateSkillEvalGovernanceSnapshotRequest, DEFAULT_ADMIN_ACCOUNTS, type EmailSendOptions, type EmailSendResult, type EmailTemplate, type EmailTemplatePreview, type EntitlementCheckResult, type EntitlementListParams, type FeatureContext, type FeatureDefinition, FeatureEvaluator, type HeaderProvider, type ImportSkillEvalGovernanceOutcomeRequest, type IssueReportListParams, type IssueReportStatusParams, type PermissionCheckResult, PermissionChecker, type RespondToSkillEvalReviewRequest, type RevealSkillEvalEvidenceRequest, RoleHierarchy, SPAPSClient as SPAPS, SPAPSClient, type SPAPSConfig, type SPAPSEnvelope, type SkillEvalAccessMode, type SkillEvalActorAccess, type SkillEvalCandidateInput, type SkillEvalCandidateResponse, type SkillEvalCasePolicy, type SkillEvalCaseResponse, type SkillEvalConfidence, type SkillEvalCreateOptions, type SkillEvalDisclosurePolicy, type SkillEvalEligibilitySource, type SkillEvalGovernanceOutcomeResult, type SkillEvalGovernancePurpose, type SkillEvalGovernanceSnapshotResult, type SkillEvalInsight, type SkillEvalInsightsResponse, type SkillEvalModelEffort, type SkillEvalMutationOptions, type SkillEvalPosterResponse, type SkillEvalPosterResponseResult, type SkillEvalRevealField, type SkillEvalRevealResult, type SkillEvalReviewMarkInput, type SkillEvalReviewMarkKind, type SkillEvalReviewResponse, type SkillEvalReviewRoom, type SkillEvalReviewerEligibilityInput, type SkillEvalRewardEvent, type SubmitSkillEvalReviewRequest, type TemplateVariable, TokenManager, WalletUtils, WebSocketAuthHelper, type WebSocketAuthHelperConfig, type X402ExecuteActionOptions, X402PaymentRequiredSDKError, type X402ReceiptListParams, type X402VerifyHandoffOptions, canAccessAdmin, createBrowserClient, createPermissionChecker, createServerClient, SPAPSClient as default, defaultPermissionChecker, detectKeyType, getRoleAwareErrorMessage, getUserDisplay, getUserRole, hasPermission, isAdminAccount, isEnvelope, isErrorEnvelope, isSuccessEnvelope, unwrapEnvelope, unwrapNestedData, verifyCryptoWebhookSignature };

package/dist/index.js

@@ -204,6 +204,7 @@ __export(index_exports, {
   WalletUtils: () => WalletUtils,
   WebSocketAuthHelper: () => WebSocketAuthHelper,
   X402PaymentRequiredSDKError: () => X402PaymentRequiredSDKError,
+  atomicToMoneyUnits: () => import_spaps_types.atomicToMoneyUnits,
   canAccessAdmin: () => canAccessAdmin,
   createBrowserClient: () => createBrowserClient,
   createPermissionChecker: () => createPermissionChecker,
@@ -222,10 +223,13 @@ __export(index_exports, {
   isSuccessEnvelope: () => isSuccessEnvelope,
   isX402PaymentRequired: () => import_spaps_types.isX402PaymentRequired,
   isX402ResourceStatus: () => import_spaps_types.isX402ResourceStatus,
+  moneyUnitsToAtomic: () => import_spaps_types.moneyUnitsToAtomic,
+  roundHalfToPositiveInfinity: () => import_spaps_types.roundHalfToPositiveInfinity,
   secureMessageMetadataSchema: () => import_spaps_types2.secureMessageMetadataSchema,
   secureMessageSchema: () => import_spaps_types2.secureMessageSchema,
   unwrapEnvelope: () => unwrapEnvelope,
   unwrapNestedData: () => unwrapNestedData,
+  validatePositiveAmountAtomic: () => import_spaps_types.validatePositiveAmountAtomic,
   verifyCryptoWebhookSignature: () => verifyCryptoWebhookSignature
 });
 module.exports = __toCommonJS(index_exports);
@@ -1488,6 +1492,15 @@ var SPAPSClient = class _SPAPSClient {
       );
       return this.unwrapApiResponse(res, "Failed to get skill eval room");
     },
+    getInsights: async (caseId) => {
+      const res = await this.client.get(
+        `/api/skill-evals/cases/${encodeURIComponent(caseId)}/insights`
+      );
+      return this.unwrapApiResponse(
+        res,
+        "Failed to get skill eval insights"
+      );
+    },
     submitReview: async (caseId, payload, options) => {
       const config = this.skillEvalMutationConfig(options);
       const res = await this.client.post(
@@ -2090,6 +2103,7 @@ function detectKeyType(key) {
   WalletUtils,
   WebSocketAuthHelper,
   X402PaymentRequiredSDKError,
+  atomicToMoneyUnits,
   canAccessAdmin,
   createBrowserClient,
   createPermissionChecker,
@@ -2107,9 +2121,12 @@ function detectKeyType(key) {
   isSuccessEnvelope,
   isX402PaymentRequired,
   isX402ResourceStatus,
+  moneyUnitsToAtomic,
+  roundHalfToPositiveInfinity,
   secureMessageMetadataSchema,
   secureMessageSchema,
   unwrapEnvelope,
   unwrapNestedData,
+  validatePositiveAmountAtomic,
   verifyCryptoWebhookSignature
 });

package/dist/index.mjs

@@ -192,7 +192,11 @@ import crypto from "crypto";
 import axios from "axios";
 import {
   isX402PaymentRequired,
-  isX402ResourceStatus
+  isX402ResourceStatus,
+  atomicToMoneyUnits,
+  moneyUnitsToAtomic,
+  roundHalfToPositiveInfinity,
+  validatePositiveAmountAtomic
 } from "spaps-types";
 import {
   createSecureMessageRequestSchema,
@@ -1453,6 +1457,15 @@ var SPAPSClient = class _SPAPSClient {
       );
       return this.unwrapApiResponse(res, "Failed to get skill eval room");
     },
+    getInsights: async (caseId) => {
+      const res = await this.client.get(
+        `/api/skill-evals/cases/${encodeURIComponent(caseId)}/insights`
+      );
+      return this.unwrapApiResponse(
+        res,
+        "Failed to get skill eval insights"
+      );
+    },
     submitReview: async (caseId, payload, options) => {
       const config = this.skillEvalMutationConfig(options);
       const res = await this.client.post(
@@ -2054,6 +2067,7 @@ export {
   WalletUtils,
   WebSocketAuthHelper,
   X402PaymentRequiredSDKError,
+  atomicToMoneyUnits,
   canAccessAdmin,
   createBrowserClient,
   createPermissionChecker,
@@ -2072,9 +2086,12 @@ export {
   isSuccessEnvelope,
   isX402PaymentRequired,
   isX402ResourceStatus,
+  moneyUnitsToAtomic,
+  roundHalfToPositiveInfinity,
   secureMessageMetadataSchema,
   secureMessageSchema,
   unwrapEnvelope,
   unwrapNestedData,
+  validatePositiveAmountAtomic,
   verifyCryptoWebhookSignature
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "spaps-sdk",
-  "version": "1.7.0",
+  "version": "1.9.0",
   "description": "Sweet Potato Authentication & Payment Service SDK - Zero-config client with built-in permission checking, role-based access control, and dayrate scheduling",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -51,7 +51,7 @@
   "dependencies": {
     "axios": "^1.15.1",
     "cross-fetch": "^4.0.0",
-    "spaps-types": "^1.1.4"
+    "spaps-types": "^1.2.0"
   },
   "devDependencies": {
     "@types/node": "^20.10.0",