wicked-crew-api-types 0.106.0 → 0.107.0

package/index.d.ts

@@ -5158,11 +5158,12 @@ export interface SystemSettings {
   baseSkillPolicy?: 'warn' | 'require';
   /**
    * The DELIVER IDENTITY (crew#549; additive): the GitHub login the deliver phase must push as.
-   * The deliver script reads `gh api user` AND asks git which credential it would use for the
-   * remote's host, and REFUSES — before anything is staged, committed or pushed — when either
-   * disagrees with this login (or, with nothing configured, when those two disagree with each
-   * other). `''`/absent ⇒ the `GH_ACCOUNT` env var decides, and unset there means the phase
-   * pushes as whatever login gh holds, said aloud on the gate card.
+   * (crew#940) On a github.com origin the deliver script reads THIS login's own token from gh's
+   * keyring and uses it for its gh calls and its git fetch/push alone, whatever account gh has
+   * active; a login gh holds no token for is "GitHub credentials not configured", refused before
+   * anything is staged. An exported `GH_TOKEN` wins, and is refused when it authenticates as
+   * another login. `''`/absent ⇒ the `GH_ACCOUNT` env var decides, and unset there means the phase
+   * pushes as whatever login gh holds (git's credential cross-checked), said aloud on the gate card.
    *
    * A LOGIN ONLY — never a token. The credential itself stays in gh's keyring or in the daemon's
    * `GH_TOKEN`; `GET /settings` returns this login and no secret ever.
@@ -5395,6 +5396,9 @@ export interface RunInventoryResponse {
 export interface PresetStep {
   catalog: string;
   id: string;
+  /** (crew#928, wicked-core#854) The step changes no file in the run's tree; see
+   *  {@link TeamPlanStep.writes_nothing}. */
+  writes_nothing?: boolean;
   [k: string]: unknown;
 }
 
@@ -7197,7 +7201,8 @@ export interface DiagnosticsSkillsFinding {
    *  an `error` under `'require'` (the engine refuses every launch at intake); cleared by a publish
    *  that hands it. Also carried as `DiagnosticsSkills.baseSkill.finding`; `skills.phase-skill`
    *  (`warning`, crew#661) = a subsystem's phases declare a skill the published snapshot did not hold
-   *  when it armed, so they run without it — one per `DiagnosticsSkills.phaseSkillGaps` entry;
+   *  when it armed, so they run without it — one per `DiagnosticsSkills.phaseSkillGaps` entry (none
+   *  since crew#935);
    *  `skills.garden` (`error`, api-types 0.78.0, crew#753) = the installed wicked-garden is older
    *  than the daemon requires (`GardenRequiredBody.required`), so it is not used: found at seed,
    *  the runtime is `config-error` and the engine is handed a refusal path. Rides
@@ -7274,7 +7279,9 @@ export interface DiagnosticsSkills {
   /** Subsystems whose phases run WITHOUT a skill their workflow declares (crew#661; additive) — one
    *  entry per subsystem, judged when that seam ARMED (the decision holds until the daemon restarts).
    *  Each entry also rides `findings` as a `skills.phase-skill` warning. `[]` when every armed seam
-   *  holds its skill; ABSENT on a daemon before this field (read it as unknown, not as `[]`). */
+   *  holds its skill; ABSENT on a daemon before this field (read it as unknown, not as `[]`). Always
+   *  `[]` from a daemon carrying crew#935: the interactive seams launch wicked-core's presets, which
+   *  always run their skill (a snapshot without it fails the run), so no seam arms without it. */
   phaseSkillGaps?: DiagnosticsPhaseSkillGap[];
 }
 
@@ -8132,8 +8139,36 @@ export interface TeamPlanStep {
    *  phase's pool; a raise is refused (`wicked.team.plan.refused`, reason `pool_raised`). Omitted
    *  when unset. */
   pool?: number;
+  /** (crew#928, wicked-core#854) The step changes no file in the run's tree (capture-learnings'
+   *  `capture`, steering-author's `propose`). A plan whose every creator step sets it, and that has
+   *  no `run` step, may be scoped `SCOPE {"touch":[]}`, which scores 0. Set on a code phase it is
+   *  refused (`writes_nothing_on_code`). Omitted when unset. */
+  writes_nothing?: boolean;
 }
 
+/**
+ * The stable token of a plan-rule refusal (wicked-core `PlanRefusal::reason`). A refusal formatted
+ * by the engine's `PlanRefusal` reads `<token>: <detail>`; a skin matches the token, never the
+ * prose. NOT every `plan.refused` reason is one: some are plain text (an auto-mode floor override,
+ * a held edit the run ended before applying), and a launch / preview / `propose_plan` error message
+ * CONTAINS the refusal text behind a context prefix (`the plan is refused: <token>: …`), so search
+ * for the token rather than splitting on the first `:`. Open-ended: the engine may add tokens.
+ *
+ *  - `pool_raised` (crew#894, wicked-core#810): a step raised its phase's pool.
+ *  - `writes_nothing_on_code` (crew#928, wicked-core#854): `writes_nothing: true` on a step whose
+ *    phase executes code.
+ *  - `security_review_on_non_code_plan` (crew#928, wicked-core#846/#854): a `security_review` in a
+ *    plan where no step does code work; its diff evidence floor could never pass. The detail names
+ *    the step and either the held testing rule that added it (`rule TST-1002 requires it`) or `the
+ *    plan authored it`. Raised mid-run (a rule fired by the diff re-score) it FAILS the run, and
+ *    the run's error text carries the rule.
+ */
+export type PlanRefusalToken =
+  | 'pool_raised'
+  | 'writes_nothing_on_code'
+  | 'security_review_on_non_code_plan'
+  | (string & {});
+
 export interface TeamPlanOverride {
   remove: string[];
   reason: string;
@@ -8216,8 +8251,11 @@ export type TeamPlanAcceptedPayload = TeamEnvelope & {
 export type TeamPlanRefusedPayload = TeamEnvelope & {
   proposal_id: string;
   base_rev: number | null;
-  /** The engine's refusal reason, verbatim — e.g. `pool_raised` (crew#894, wicked-core#810: a plan
-   *  step raised a phase's `pool`; a step may only lower it). */
+  /** The engine's refusal reason, verbatim. A plan-rule refusal reads `<token>: <detail>` with a
+   *  {@link PlanRefusalToken} — e.g. `pool_raised` (crew#894, wicked-core#810: a plan step raised a
+   *  phase's `pool`; a step may only lower it), `security_review_on_non_code_plan` or
+   *  `writes_nothing_on_code` (crew#928); other reasons are plain text. A launch / preview /
+   *  `propose_plan` error message contains the same text behind a context prefix. */
   reason: string;
 };
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wicked-crew-api-types",
-  "version": "0.106.0",
+  "version": "0.107.0",
   "description": "The wire contract of the wicked-crew daemon's /api/v1 REST surface and /ws CoreEvent frames \u2014 types only, zero runtime",
   "type": "module",
   "types": "./index.d.ts",