wicked-crew-api-types 0.105.0 → 0.107.0

package/index.d.ts

@@ -267,6 +267,12 @@ export interface HealthCapabilities {
    * receipts. ABSENT on an older daemon — do not send the field (its strict schema 400s on it).
    */
   reducedAssurance?: boolean;
+  /**
+   * (api-types 0.106.0) `LaunchRunBody.skipQeAcceptance` / `forceQeAcceptance` are accepted (the
+   * installed addon carries the QE acceptance decision, wicked-core-ts >= 0.7.49), and receipts
+   * carry `qe`. ABSENT on an older daemon — do not send the fields (its strict schema 400s on them).
+   */
+  qeAcceptanceOverride?: boolean;
 }
 
 /** One `GET /health.warnings[]` entry (additive; wicked-core#411 / wicked-crew#497). */
@@ -1972,6 +1978,33 @@ export type AssuranceSkipReason =
 export interface RunAssurance {
   mode: AssuranceMode;
   required: AssuranceRequirement[];
+  /** (api-types 0.106.0; wicked-core-ts >= 0.7.49) The run's QE acceptance decision, present
+   *  exactly when `required` holds `qe_acceptance`. ABSENT on an older engine (then a required
+   *  `qe_acceptance` is enforced). */
+  qe?: QeAcceptanceDecision;
+}
+
+/** (api-types 0.106.0) `QeAcceptanceDecision.status`. */
+export type QeAcceptanceStatus = 'required' | 'waived' | 'skipped' | (string & {});
+
+/**
+ * (api-types 0.106.0; wicked-core-ts >= 0.7.49; QE-IN-APP-WORKFLOWS) A run's QE acceptance
+ * decision, on `RunAssurance.qe` and every receipt. `basis: 'plan'` is the launch's provisional
+ * `required` (a plan has no diff); `'operator'` is an explicit skip (with its reason) or force;
+ * `'diff'` is the binding decision the run's QE unit made from the run's diff — `waived` only when
+ * every scoring dimension is in its lowest band (`score <= threshold`, no complexity or novelty).
+ * A creator after a waiver revokes it. `reason` is what a plan, gate or delivery shows.
+ */
+export interface QeAcceptanceDecision {
+  status: QeAcceptanceStatus;
+  basis: 'plan' | 'operator' | 'diff' | (string & {});
+  score: number | null;
+  threshold: number;
+  reason: string;
+  /** The score's own lines, one per term, when it was scored. */
+  reasons: string[];
+  ord: number | null;
+  tree: string | null;
 }
 
 /** One instrument a receipt did NOT run, and why. */
@@ -2001,6 +2034,10 @@ export interface AssuranceReceipt {
   judge: string | null;
   tree: string | null;
   attempt: number;
+  /** (api-types 0.106.0) The run's QE acceptance decision when the receipt was cut; ABSENT when the
+   *  run does not require QE acceptance (or on an older engine). A waived or skipped one is also a
+   *  `skipped[]` entry (reason `qe_waived_by_score` | `qe_skipped_by_operator`). */
+  qe?: QeAcceptanceDecision;
 }
 
 /**
@@ -2009,6 +2046,11 @@ export interface AssuranceReceipt {
  * non-PASS verdict, no verdict, an unattributed verdict or an unreadable ledger refuses delivery.
  */
 export interface QeAcceptanceCheck {
+  /** (api-types 0.106.0) `required` — the ledger was read and `satisfied` is its PASS; `waived` —
+   *  the run's score waived it (`reason` names the score); `skipped` — the operator skipped it at
+   *  launch (`reason` names the reason). A waived or skipped check is `satisfied` with no verdict.
+   *  ABSENT on an older daemon (read as `required`). */
+  status?: QeAcceptanceStatus;
   satisfied: boolean;
   /** The gate's own words (`GET /runs/:id/acceptance` → `gate.reason`). */
   reason: string;
@@ -2761,6 +2803,17 @@ export type RunBaseResolvedEvent = {
   runBranch?: string;
 };
 
+/** (api-types 0.106.0; wicked-core-ts >= 0.7.49) The run's QE acceptance decision changed at a
+ *  unit's dispatch: the run's QE unit scored the run's diff (`qe.basis: 'diff'`, `required` or
+ *  `waived`), or a creator dispatched after a waiver revoked it. From this point the decision is on
+ *  the session's contract (`AgentSession.assurance.qe`). `type` alias on purpose. */
+export type QeAcceptanceDecidedEvent = {
+  type: 'qeAcceptanceDecided';
+  session: string;
+  ord: number;
+  qe: QeAcceptanceDecision;
+};
+
 /** The gate-evidence events (wicked-core F-036/F-039, extended by wicked-core#431 — api-types 0.33.0
  *  added {@link WorktreeRestoredEvent}, {@link DeliverLiftEvaluatedEvent} and
  *  {@link EvaluatorToolCallDeniedEvent}) as a discriminated union for consumers that narrow on `type`;
@@ -4556,6 +4609,20 @@ export interface LaunchRunBody {
    * operator before sending `true`; send it only when `GET /health.capabilities.reducedAssurance === true`.
    */
   reducedAssurance?: boolean;
+  /**
+   * (api-types 0.106.0; wicked-core QE-IN-APP-WORKFLOWS) SKIP a required QE acceptance, for this
+   * reason (non-empty, the operator's own words). Persisted on the contract
+   * (`assurance.qe.status: 'skipped'`, `basis: 'operator'`) and labelled on the run, every gate and
+   * the delivery ("QE acceptance skipped by operator: <reason>"). Omitted: a required QE acceptance
+   * is never skipped. 400 beside `forceQeAcceptance`; the engine refuses it on a run whose workflow
+   * does not require QE acceptance. Send only when `GET /health.capabilities.qeAcceptanceOverride`.
+   */
+  skipQeAcceptance?: { reason: string };
+  /**
+   * (api-types 0.106.0) REQUIRE QE acceptance whatever the run's impact score says (no waiver).
+   * `false` is the same as omitting it. 400 beside `skipQeAcceptance`.
+   */
+  forceQeAcceptance?: boolean;
 }
 
 /** `POST /linked-issues/preview` (crew#825): what a workflow launch of `problem` WOULD append. */
@@ -5091,11 +5158,12 @@ export interface SystemSettings {
   baseSkillPolicy?: 'warn' | 'require';
   /**
    * The DELIVER IDENTITY (crew#549; additive): the GitHub login the deliver phase must push as.
-   * The deliver script reads `gh api user` AND asks git which credential it would use for the
-   * remote's host, and REFUSES — before anything is staged, committed or pushed — when either
-   * disagrees with this login (or, with nothing configured, when those two disagree with each
-   * other). `''`/absent ⇒ the `GH_ACCOUNT` env var decides, and unset there means the phase
-   * pushes as whatever login gh holds, said aloud on the gate card.
+   * (crew#940) On a github.com origin the deliver script reads THIS login's own token from gh's
+   * keyring and uses it for its gh calls and its git fetch/push alone, whatever account gh has
+   * active; a login gh holds no token for is "GitHub credentials not configured", refused before
+   * anything is staged. An exported `GH_TOKEN` wins, and is refused when it authenticates as
+   * another login. `''`/absent ⇒ the `GH_ACCOUNT` env var decides, and unset there means the phase
+   * pushes as whatever login gh holds (git's credential cross-checked), said aloud on the gate card.
    *
    * A LOGIN ONLY — never a token. The credential itself stays in gh's keyring or in the daemon's
    * `GH_TOKEN`; `GET /settings` returns this login and no secret ever.
@@ -5328,6 +5396,9 @@ export interface RunInventoryResponse {
 export interface PresetStep {
   catalog: string;
   id: string;
+  /** (crew#928, wicked-core#854) The step changes no file in the run's tree; see
+   *  {@link TeamPlanStep.writes_nothing}. */
+  writes_nothing?: boolean;
   [k: string]: unknown;
 }
 
@@ -7130,7 +7201,8 @@ export interface DiagnosticsSkillsFinding {
    *  an `error` under `'require'` (the engine refuses every launch at intake); cleared by a publish
    *  that hands it. Also carried as `DiagnosticsSkills.baseSkill.finding`; `skills.phase-skill`
    *  (`warning`, crew#661) = a subsystem's phases declare a skill the published snapshot did not hold
-   *  when it armed, so they run without it — one per `DiagnosticsSkills.phaseSkillGaps` entry;
+   *  when it armed, so they run without it — one per `DiagnosticsSkills.phaseSkillGaps` entry (none
+   *  since crew#935);
    *  `skills.garden` (`error`, api-types 0.78.0, crew#753) = the installed wicked-garden is older
    *  than the daemon requires (`GardenRequiredBody.required`), so it is not used: found at seed,
    *  the runtime is `config-error` and the engine is handed a refusal path. Rides
@@ -7207,7 +7279,9 @@ export interface DiagnosticsSkills {
   /** Subsystems whose phases run WITHOUT a skill their workflow declares (crew#661; additive) — one
    *  entry per subsystem, judged when that seam ARMED (the decision holds until the daemon restarts).
    *  Each entry also rides `findings` as a `skills.phase-skill` warning. `[]` when every armed seam
-   *  holds its skill; ABSENT on a daemon before this field (read it as unknown, not as `[]`). */
+   *  holds its skill; ABSENT on a daemon before this field (read it as unknown, not as `[]`). Always
+   *  `[]` from a daemon carrying crew#935: the interactive seams launch wicked-core's presets, which
+   *  always run their skill (a snapshot without it fails the run), so no seam arms without it. */
   phaseSkillGaps?: DiagnosticsPhaseSkillGap[];
 }
 
@@ -8065,8 +8139,36 @@ export interface TeamPlanStep {
    *  phase's pool; a raise is refused (`wicked.team.plan.refused`, reason `pool_raised`). Omitted
    *  when unset. */
   pool?: number;
+  /** (crew#928, wicked-core#854) The step changes no file in the run's tree (capture-learnings'
+   *  `capture`, steering-author's `propose`). A plan whose every creator step sets it, and that has
+   *  no `run` step, may be scoped `SCOPE {"touch":[]}`, which scores 0. Set on a code phase it is
+   *  refused (`writes_nothing_on_code`). Omitted when unset. */
+  writes_nothing?: boolean;
 }
 
+/**
+ * The stable token of a plan-rule refusal (wicked-core `PlanRefusal::reason`). A refusal formatted
+ * by the engine's `PlanRefusal` reads `<token>: <detail>`; a skin matches the token, never the
+ * prose. NOT every `plan.refused` reason is one: some are plain text (an auto-mode floor override,
+ * a held edit the run ended before applying), and a launch / preview / `propose_plan` error message
+ * CONTAINS the refusal text behind a context prefix (`the plan is refused: <token>: …`), so search
+ * for the token rather than splitting on the first `:`. Open-ended: the engine may add tokens.
+ *
+ *  - `pool_raised` (crew#894, wicked-core#810): a step raised its phase's pool.
+ *  - `writes_nothing_on_code` (crew#928, wicked-core#854): `writes_nothing: true` on a step whose
+ *    phase executes code.
+ *  - `security_review_on_non_code_plan` (crew#928, wicked-core#846/#854): a `security_review` in a
+ *    plan where no step does code work; its diff evidence floor could never pass. The detail names
+ *    the step and either the held testing rule that added it (`rule TST-1002 requires it`) or `the
+ *    plan authored it`. Raised mid-run (a rule fired by the diff re-score) it FAILS the run, and
+ *    the run's error text carries the rule.
+ */
+export type PlanRefusalToken =
+  | 'pool_raised'
+  | 'writes_nothing_on_code'
+  | 'security_review_on_non_code_plan'
+  | (string & {});
+
 export interface TeamPlanOverride {
   remove: string[];
   reason: string;
@@ -8149,8 +8251,11 @@ export type TeamPlanAcceptedPayload = TeamEnvelope & {
 export type TeamPlanRefusedPayload = TeamEnvelope & {
   proposal_id: string;
   base_rev: number | null;
-  /** The engine's refusal reason, verbatim — e.g. `pool_raised` (crew#894, wicked-core#810: a plan
-   *  step raised a phase's `pool`; a step may only lower it). */
+  /** The engine's refusal reason, verbatim. A plan-rule refusal reads `<token>: <detail>` with a
+   *  {@link PlanRefusalToken} — e.g. `pool_raised` (crew#894, wicked-core#810: a plan step raised a
+   *  phase's `pool`; a step may only lower it), `security_review_on_non_code_plan` or
+   *  `writes_nothing_on_code` (crew#928); other reasons are plain text. A launch / preview /
+   *  `propose_plan` error message contains the same text behind a context prefix. */
   reason: string;
 };
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wicked-crew-api-types",
-  "version": "0.105.0",
+  "version": "0.107.0",
   "description": "The wire contract of the wicked-crew daemon's /api/v1 REST surface and /ws CoreEvent frames \u2014 types only, zero runtime",
   "type": "module",
   "types": "./index.d.ts",