wicked-core-ts 0.7.5 → 0.7.7

package/index.d.ts

@@ -59,6 +59,16 @@ export interface LaunchOptions {
    * session persisted. Omit for runs that deliver inside their own workdir.
    */
   extraWriteRoots?: Array<string>
+  /**
+   * ADDITIONAL absolute READ-ONLY roots for the run (core#294) — the read mirror of
+   * `extraWriteRoots`, for grounding a run in content it must never edit (e.g. a repo the
+   * workflow reads without binding its worktree). Reads inside these roots pass the governed
+   * units' boundary; WRITES there stay denied — a read root never widens write scope. Same
+   * launch-side vetting as the write roots (absolute, outside the engine's config/pin tree);
+   * an invalid root REJECTS the launch with no session persisted. Omit for the default
+   * evidence-derived read boundary.
+   */
+  extraReadRoots?: Array<string>
   /**
    * The PROJECT code graph this run's governed workers should query, instead of the run repo's
    * own graph — one database holding every member repo of the project, so a worker's
@@ -211,8 +221,23 @@ export declare class Core {
    * a UI builds its project list from).
    */
   sessionsDetail(): Promise<string>
-  /** A unit's captured work output (transcript), as a JSON value — a string, or `null` if none. */
+  /**
+   * A unit's captured work output (transcript), as a JSON value — a string, or `null` if none.
+   * A REJECTED unit answers with whatever PARTIAL output existed at rejection (usability review
+   * #1) — the unit record's `status`/`denial` marks it partial; `null` only when no output was
+   * ever stored (never ran, or denied before any output existed — see `unitTranscript`).
+   */
   workOutput(unitId: string): Promise<string>
+  /**
+   * A unit's full transcript RECORD (usability review #1), as a JSON object — or `null` when the
+   * unit never ran far enough to leave one. Shape: `{ unit_id, resolution: "resolved"|"rejected",
+   * partial: bool, phase_status?, output?, denial_reason?, denial? }` where `denial` is
+   * `{ source, reason, claim_id?, rule_ids?, denied_tool?, phase? }`. A rejected unit keeps its
+   * PARTIAL output here, flagged; a unit denied BEFORE any output existed answers with an
+   * explicit failure record (`output` absent, `denial` carrying the claim id / firing rule ids /
+   * denied tool) instead of `null`.
+   */
+  unitTranscript(unitId: string): Promise<string>
   /**
    * A run's recorded event history, oldest first, as a JSON array. Each entry is the SAME tagged
    * object the `/ws` stream carries ([`CoreEvent::to_json`]) plus a capture-time `ts` (epoch millis)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wicked-core-ts",
-  "version": "0.7.5",
+  "version": "0.7.7",
   "description": "Node/TypeScript bindings (napi-rs) for wicked-core: drive the in-process orchestration engine from JS/TS.",
   "license": "MIT",
   "repository": {
@@ -42,11 +42,11 @@
     "smoke:all": "node smoke.mjs && node smoke-lifecycle.mjs && node smoke-terminal.mjs && node smoke-evals.mjs"
   },
   "optionalDependencies": {
-    "wicked-core-ts-darwin-arm64": "0.7.5",
-    "wicked-core-ts-darwin-x64": "0.7.5",
-    "wicked-core-ts-linux-arm64-gnu": "0.7.5",
-    "wicked-core-ts-linux-x64-gnu": "0.7.5",
-    "wicked-core-ts-win32-x64-msvc": "0.7.5"
+    "wicked-core-ts-darwin-arm64": "0.7.7",
+    "wicked-core-ts-darwin-x64": "0.7.7",
+    "wicked-core-ts-linux-arm64-gnu": "0.7.7",
+    "wicked-core-ts-linux-x64-gnu": "0.7.7",
+    "wicked-core-ts-win32-x64-msvc": "0.7.7"
   },
   "devDependencies": {
     "@napi-rs/cli": "^2.18.4"