wicked-crew-api-types 0.110.0 → 0.115.0

package/index.d.ts

@@ -288,6 +288,18 @@ export interface AgentSession {
   id: string;
   workflow_id: string;
   problem: string;
+  /**
+   * (api-types 0.113.0; operator ruling 2026-10-12) The run's SHORT JOB TITLE, derived by the daemon
+   * at DTO assembly on `GET /runs` and `GET /runs/:id` from {@link problem} — deterministic, at most
+   * 60 characters (an ellipsis included), so every skin shows the same headline: the operator's words
+   * without an attached studio context pack or step scaffold, cut at the first clause and then at an
+   * aside ("— …", ", meaning …", " when …"), which reads as a clause end; only a cut at a word boundary
+   * (no aside left) ends in "…". Onboarding runs read
+   * "Set up <repo>"; a chat's ask run reads "A conversation about <repos>". The full text stays in
+   * `problem` (show it on hover). ABSENT on a daemon before this field: a skin then falls back to its
+   * own first-clause cut of `problem`, never an invented title.
+   */
+  title?: string;
   entity_mode: EntityMode;
   collection_scope: string | null;
   clis: string[];
@@ -502,10 +514,13 @@ export interface AgentSession {
    * {@link created_at} ("started" ≡ "created" — the ONE launch instant) it gives a run its own clock;
    * a skin prefers these over the moment it happened to attach.
    *
-   * ABSENT — never `null`, never fabricated — when the daemon has no `run.ended` entry: a run
-   * still live, a run that terminalled before this field existed or before THIS daemon booted
-   * (no re-emission at boot), a lost trail, or the one crash window between the engine's status
-   * write and the daemon's synchronous audit record. Read with `typeof === 'number'`; a duration
+   * A terminal run with no `run.ended` entry (it ended before this field existed, or while no
+   * daemon was watching) is dated from the FIRST terminal frame in the engine's event log
+   * (`GET /runs/:id/events`), derived at read time and never written back (crew#985).
+   *
+   * ABSENT — never `null`, never fabricated — when neither source has it: a run still live, or a
+   * terminal run with no `run.ended` entry whose event log holds no terminal frame (it predates
+   * the log). Read with `typeof === 'number'`; a duration
    * or a "finished N minutes ago" MUST be omitted for an undated run, never derived from now.
    * Distinct from {@link finished_at} (engine-side unix MILLIS, retention bookkeeping).
    */
@@ -997,9 +1012,9 @@ export interface RosterSeat {
   /**
    * The shell invocation that runs this seat's own interactive login flow (seat sign-in;
    * wicked-core PR#278 `AgenticCli.login_invocation`). Passed through from the engine roster
-   * VERBATIM — the daemon never synthesizes one. The studio hosts it in a PTY terminal
-   * (`POST /terminals`) so every CLI's native sign-in gets one uniform surface. Absent on an
-   * engine predating the field (serde omits `None`) and on seats with no known login flow.
+   * VERBATIM — the daemon never synthesizes one. The operator runs it in their own terminal (the
+   * Agents page copies it; `RosterSeat.issues[].commands` carries a `$HOME` display form). Absent on
+   * an engine predating the field (serde omits `None`) and on seats with no known login flow.
    */
   login_invocation?: string;
   /**
@@ -1037,7 +1052,9 @@ export interface RosterSeat {
    */
   auth_source?: 'seat-stderr' | 'probe';
   /** Present with `auth_source: 'seat-stderr'`, and with `probe` when it read signed out: the
-   *  seat's own words, bounded. */
+   *  seat's own words, bounded. From api-types 0.115.0 (A8) account identifiers are dropped before
+   *  they reach the wire: a JSON status keeps only `loggedIn` / `authMethod` / `apiProvider`, and
+   *  email-, id- and key-shaped strings are masked. */
   auth_evidence?: string;
   /**
    * Present with `auth_source: 'probe'` (crew#630): ISO-8601 of the seat's own auth-status check
@@ -1056,7 +1073,8 @@ export interface RosterSeat {
    * or could not tell). Optional on the wire: a daemon before it sends none.
    */
   login_check?: 'live' | 'status' | 'unverified';
-  /** Present unless `login_check` is `live`: why, in the operator's words ("login unverified — …"). */
+  /** Present unless `login_check` is `live`: why, in the operator's words ("login unverified — …").
+   *  Scrubbed like `auth_evidence` (A8). */
   login_note?: string;
   /** Present when `auth` is `not_required`: the free tier the seat answers on. */
   free_tier?: string;
@@ -1106,9 +1124,156 @@ export interface RosterSeat {
    * engine (`clisJson` strips it).
    */
   governance_mode?: Record<GovernanceScopeKind, SeatGovernanceMode>;
+  /**
+   * (api-types 0.115.0, DES-seats-page A1) The seat's installed version, for EVERY seat (not only
+   * the pinned ones `version_pin` covers), read from its registry `version_probe` in the background.
+   * ABSENT until the first reading, and for a pinned seat until its pin has been probed too.
+   */
+  version?: SeatVersion;
+  /**
+   * (api-types 0.115.0, A2) The account KIND the seat is signed in with — never an email, an account
+   * or an organisation id. Present when `auth` is `signed_in` (`unknown` when the seat's status
+   * command states no kind) or `not_required` (`free`).
+   */
+  account?: SeatAccount;
+  /**
+   * (api-types 0.115.0, A3) The engine's bench of the seat that is ACTIVE now: a run benched it on
+   * its worker's or judge's own refusal, and crew keeps it out of new launches until `lifts_at`,
+   * its next good turn, or — for an account bench (`not_logged_in`, `quota_exhausted`,
+   * `usage_limit`) — a live sign-in check that answered after it. The week's history stays in
+   * `GET /roster/record`. ABSENT when there is no active bench.
+   */
+  recent_bench?: SeatRecentBench;
+  /**
+   * (api-types 0.115.0, A5) Whether a job of each scope kind would give the seat work, including
+   * the engine's launcher benches (core#769's codex worktree bench, via `Core.worktreeBenched`).
+   * ABSENT on a daemon whose engine addon cannot answer the worktree bench (wicked-core-ts without
+   * `worktreeBenched`): crew does not restate the engine's rule.
+   */
+  work_admission?: Record<GovernanceScopeKind, SeatWorkAdmission>;
+  /**
+   * (api-types 0.115.0, A4) Whether the seat can run the isolated QE review. Since wicked-core#917
+   * (core-ts 0.9.9) the engine starts the reviewer as a fresh session on any run seat it admits, so
+   * a seat is eligible when it is signed in, a run bound to one repository keeps it (QE runs only
+   * there), and the host's skill routing admits it to the QE skill (`Core.qeReviewerAdmitted`, wicked-core#923: a
+   * Claude-only skills root admits claude seats only). A reviewer-only seat counts. ABSENT unless
+   * the engine answers both `Core.worktreeBenched` (wicked-core#920) and `Core.qeReviewerAdmitted` (wicked-core#923).
+   */
+  qe_reviewer?: SeatQeReviewer;
+  /**
+   * (api-types 0.115.0, A6) What the Agents page shows for the seat, most important first (problem
+   * before warning before note; within one, safety before availability). Crew sends codes and
+   * facts; the client owns the words per code and shows `message` only for a code it does not know.
+   */
+  issues?: SeatIssue[];
   [k: string]: unknown;
 }
 
+/** `RosterSeat.version` (api-types 0.115.0). */
+export interface SeatVersion {
+  /** The first non-empty line of the seat's `--version`, home written `~`; `null` when it did not answer. */
+  installed: string | null;
+  /** The build the seat's governance was proven on (`acp.verified_version`); `null` when it pins none. */
+  proven: string | null;
+  /** `proven` — the installed build is the pinned one; `unproven` — it is not (governance fails
+   *  closed); `no_pin` — the seat pins no build. */
+  status: 'proven' | 'unproven' | 'no_pin';
+  /** ISO-8601 of the reading. */
+  checked_at: string;
+  /** How the binary on PATH was installed, from its resolved path: under `node_modules` = `npm`, a
+   *  Homebrew prefix = `brew`, else `other`; `null` when it is not on PATH. */
+  install_source: 'npm' | 'brew' | 'other' | null;
+}
+
+/** `RosterSeat.account` (api-types 0.115.0). */
+export interface SeatAccount {
+  kind: 'subscription' | 'api_key' | 'free' | 'unknown';
+  /** A provider-public plan name (`Max`, `Pro`, `Team`, `Enterprise`), only from a fixed table. */
+  plan?: string;
+}
+
+/** `RosterSeat.recent_bench` (api-types 0.115.0). */
+export interface SeatRecentBench {
+  /** The engine's cause token: `quota_exhausted`, `not_logged_in`, `not_installed`,
+   *  `approval_unavailable`, `timed_out`, … */
+  kind: string;
+  /** Runs that benched the seat while this bench was active (at least 1). */
+  runs: number;
+  /** ISO-8601 of the latest bench. */
+  last_at: string;
+  /** ISO-8601 of when crew stops carrying it to new launches. Crew's window, NOT a provider reset
+   *  time (no provider states one on the wire today). */
+  lifts_at: string;
+  /** Who benched it in the run: `worker` or `judge`. */
+  source: string;
+  /** The engine's own reason, verbatim (technical details). */
+  reason: string;
+}
+
+/** Why a seat would get no work, one code per refusal (api-types 0.115.0). */
+export type SeatWorkReasonCode =
+  | 'signed_out'
+  | 'not_enabled'
+  | 'reviewer_only'
+  | 'recent_bench'
+  | 'login_pending'
+  | 'worktree_bench'
+  | 'scope_ungoverned';
+
+/** `RosterSeat.work_admission[scope]` (api-types 0.115.0). `source`: `auth` — signed out;
+ *  `launcher` — a launch benches it (disabled, reviewer-only, a recent bench, a pending login
+ *  check, the engine's worktree bench); `scope` — the scope's governance rule refuses it. */
+export type SeatWorkAdmission =
+  | { ok: true }
+  | { ok: false; reason_code: SeatWorkReasonCode; source: 'auth' | 'launcher' | 'scope'; reason: string };
+
+/** `RosterSeat.qe_reviewer` (api-types 0.115.0). */
+export type SeatQeReviewer =
+  | { ok: true }
+  | {
+      ok: false;
+      /** `skill_not_admitted`: this host's skills root admits only a claude seat to the QE skill. */
+      reason_code: Exclude<SeatWorkReasonCode, 'reviewer_only' | 'scope_ungoverned'> | 'skill_not_admitted';
+      reason: string;
+    };
+
+/**
+ * One `RosterSeat.issues` entry (api-types 0.115.0). Today's codes: `signed_out`, `qe_blocked`
+ * (problems); `quota`, `usage_limit`, `benched`, `codex_worktree`, `version_unproven`,
+ * `unchecked` (`params.why`: `no_governance` | `no_host_boundary`), `fence_scoped`,
+ * `live_check_failed` (warnings); `opt_in`, `no_qe`, `unverified` (notes). A client must tolerate
+ * an unknown code.
+ */
+export interface SeatIssue {
+  code: string;
+  severity: 'problem' | 'warning' | 'note';
+  /** Names, versions, counts and ISO times only — never a CLI's free text. */
+  params: Record<string, string | number>;
+  /** Crew's one line, for a client that does not know the code. */
+  message: string;
+  commands?: SeatIssueCommand[];
+}
+
+/** A command an issue offers. Run the roster's `login_invocation` / `logout_invocation` (or
+ *  `<binary> --version`); `display` is the safe rendering, the home directory written `$HOME`. */
+export interface SeatIssueCommand {
+  purpose: 'sign_in' | 'sign_out' | 'version';
+  display: string;
+}
+
+/**
+ * `GET /roster[?refresh=<key>]` (api-types 0.115.0 names it). With `?refresh=<key>` the daemon
+ * re-runs that seat's sign-in check and waits for it, at most 20 s, before answering (A3b); 400
+ * when the key is not a roster seat.
+ */
+export interface RosterResponse {
+  roster: RosterSeat[];
+  /** Present on a `?refresh=` read: `probed` — the answer is fresh; `timed_out` — still running
+   *  (the roster shows the last reading; the check keeps going); `not_probed` — the seat has no
+   *  sign-in check (it reads its credential file). */
+  refresh?: { key: string; outcome: 'probed' | 'timed_out' | 'not_probed' };
+}
+
 /** The engine's governance class names (IG1-core-3). */
 export type EngineGovernanceClass = 'acp_input_governance' | 'os_sandbox' | 'none';
 
@@ -1170,14 +1335,21 @@ export interface RosterSeatCouncilBench {
 }
 
 /**
- * `GET /roster/record?days=N` (api-types 0.52.0): each seat's record over the last N days (default 7,
- * max 30), folded from the runs' durable event logs (studio's weekly 1:1 per agent). Nothing new is
+ * `GET /roster/record?days=N[&project=<id>]` (api-types 0.52.0): each seat's record over the last N days
+ * (default 7, max 90 from api-types 0.113.0; was 30), folded from the runs' durable event logs (studio's
+ * weekly 1:1 per agent; the dashboards sum `costUsd` across seats for a window's spend). Nothing new is
  * stored; the window is by event time. A unit's seat is `unitDistributed.cli` (moved by
  * `unitReassigned.newCli`), else the unit row's `assigned_cli`. 503 when the engine has no event-log
  * read binding (a missing binding is not an empty week).
  */
 export interface SeatRecordResponse {
   days: number;
+  /**
+   * (api-types 0.113.0) The project the read was scoped to (`?project=<id>`: only that project's runs
+   * were folded). ABSENT on an unscoped read AND on a daemon before the parameter, which ignores it and
+   * answers for every run: trust a project-scoped spend only when this echoes the id you asked for.
+   */
+  project?: string;
   /** Window start, unix MILLIS. */
   since: number;
   /** Window end (the read time), unix MILLIS. */
@@ -5007,9 +5179,10 @@ export interface DomainCoverage {
 }
 
 /**
- * `POST /seats/:cli/login` and `POST /seats/:cli/logout` (crew#615): the PTY size for the terminal
- * the daemon opens running the seat's own `login_invocation` / `logout_invocation`. Both optional
- * (default 100 x 30).
+ * `POST /seats/:cli/logout` (crew#615): the PTY size for the terminal the daemon opens running the
+ * seat's own `logout_invocation`. Both optional (default 100 x 30). `POST /seats/:cli/login` is
+ * GONE from api-types 0.115.0 (DES-seats-page Q3): sign-in is a command the operator runs in their
+ * own terminal (`RosterSeat.login_invocation`).
  */
 export interface SeatSessionBody {
   cols?: number;
@@ -5025,6 +5198,7 @@ export interface SeatSessionResponse {
   terminalId: string;
   /** The seat key the command was run for. */
   cli: string;
+  /** `login` is no longer produced (api-types 0.115.0: the login route is gone). */
   action: 'login' | 'logout';
 }
 
@@ -9490,8 +9664,22 @@ export interface McpPreviewTool {
   description: string | null;
   annotations: McpToolAnnotations | null;
   inputSchema: Record<string, unknown> | null;
+  /** The class the tool will have once saved: `classOverride ?? ` the class its annotations imply. */
   class: McpToolClass;
+  /**
+   * (api-types 0.111.0) The operator's class override this save keeps: the registered tool's, while
+   * its schema is unchanged; `null` for a new or changed tool, or one with no override.
+   */
+  classOverride: McpToolClass | null;
   schemaHash: string;
+  /**
+   * (api-types 0.111.0, G1) The switch `POST /mcp/servers` gives this tool when `enabledWrites`
+   * does not name it. A `write` or `destructive` tool that is new, or whose schema changed since
+   * the last save, is `false`: registered DISABLED until the operator grants it. A tool whose saved
+   * schema is unchanged keeps its switch; a new `read` tool is `true`. Enabling a tool is not
+   * approving it: `MCP-FIRST-USE` still asks on its first call.
+   */
+  enabledOnSave: boolean;
 }
 
 /**
@@ -9517,6 +9705,12 @@ export interface McpPreviewResponse {
   diff: McpToolDiff | null;
   /** `rest` only (api-types 0.64.0): operations that could not be wrapped, each with why. */
   skipped?: string[];
+  /**
+   * `rest` only (api-types 0.112.0, G2): where the tools' calls would go, checked against the
+   * document's `servers`. When `confirmRequired`, `POST /mcp/servers` needs `allowOrigin` set to
+   * exactly `egress.origin`.
+   */
+  egress?: McpRestEgress;
   /**
    * Each tool's decision per phase role × seat × mode under the current policies and approvals,
    * judged as if this preview were saved now (api-types 0.63.0); see `withdrawOnSave`. `null` when
@@ -9528,6 +9722,57 @@ export interface McpPreviewResponse {
 /** `POST /mcp/servers`. No `previewHash`, or one that is unknown or expired, is a 409. */
 export interface SaveMcpServerBody {
   previewHash?: string;
+  /**
+   * (api-types 0.111.0, G1) The operator's write grant: names of this preview's `write` or
+   * `destructive` tools to register ENABLED. Every other write tool that is new or changed is
+   * registered disabled (`McpPreviewTool.enabledOnSave`). A name the preview does not list is a 400
+   * `unknown_tool`; a tool that would not be a write once saved (its annotations, or a class override
+   * that survives an unchanged schema) a 400 `not_a_write_tool`. Both are refused before any approval
+   * is withdrawn and leave the preview usable. A grant from anyone but a human
+   * operator a 403 `write_grant_human_only`. Each grant is audited `mcp.tool.write_granted`.
+   */
+  enabledWrites?: string[];
+  /**
+   * (api-types 0.112.0, G2) The operator naming the exact origin a `rest` server's calls go to
+   * (`McpPreviewResponse.egress.origin`). Required when the preview's `egress.confirmRequired`
+   * (the base URL matches none of the document's `servers`, or its host is a loopback or private
+   * address, or did not resolve); without it, or with any other value, the save is a 409 `egress_unconfirmed`. It is
+   * remembered with the server, so re-saving over the same origin does not ask again. Human
+   * operator only (403 `egress_confirm_human_only`); audited `mcp.server.egress_confirmed`. A 400
+   * `egress_not_rest` for a server that is not `rest`.
+   */
+  allowOrigin?: string;
+}
+
+/**
+ * (api-types 0.112.0, G2, DES-data-connectors §3) A `rest` server's egress as its preview found it.
+ * A REST tool's schema hash also covers `{origin, basePath, auth header}`, so a changed target
+ * re-registers its tools and withdraws their approvals.
+ */
+export interface McpRestEgress {
+  /** The base URL's origin (`https://api.example.com`): the exact string `allowOrigin` names. */
+  origin: string;
+  /** The base URL's path, no trailing slash (`""` at the root). */
+  basePath: string;
+  /**
+   * The document's `servers` crew could resolve, as absolute URLs (`{variable}` = its default; a
+   * relative URL resolves against `openapiUrl`). No `servers` means `/`, per OpenAPI 3.
+   */
+  servers: string[];
+  /** The origin is one server's and the base path is that server's path or under it. */
+  matches: boolean;
+  /** The host is `localhost`, or is or resolves to a loopback/private/link-local/unique-local address. */
+  privateAddress: boolean;
+  /**
+   * `false` = the host is a name that did not resolve at preview, so crew could not check that it
+   * is not private. An IP literal is always `true`.
+   */
+  resolved: boolean;
+  /**
+   * `!matches || privateAddress || !resolved`, unless this origin was already confirmed for this
+   * server by an earlier save: the save needs `allowOrigin`.
+   */
+  confirmRequired: boolean;
 }
 
 /** `PATCH /mcp/servers/:name`. */
@@ -9535,7 +9780,13 @@ export interface PatchMcpServerBody {
   enabled: boolean;
 }
 
-/** `PATCH /mcp/tools/:subject` (subject URL-encoded). At least one field. */
+/**
+ * `PATCH /mcp/tools/:subject` (subject URL-encoded). At least one field. (G1) A patch that leaves
+ * the tool enabled AND a write (by its annotations, or its class after the patch) when it was not
+ * both before is a write grant: turning a write on, or re-classing an enabled read as a write. A
+ * grant is a human operator's only (else 403 `write_grant_human_only`) and is audited
+ * `mcp.tool.write_granted`. Turning a tool off, and enabling a read, need no grant.
+ */
 export interface PatchMcpToolBody {
   enabled?: boolean;
   classOverride?: McpToolClass | null;
@@ -10138,7 +10389,10 @@ export type EditorPermission =
   | 'media.read'
   | 'artifact.export'
   | 'ui.fullscreen'
-  | 'network.media';
+  | 'network.media'
+  /** Talk, through studio's host, to an MCP server the operator connected (DES-MCP-INSPECTOR-001).
+   *  No posture rule allows it: the editor's install consent writes its per-build grant. */
+  | 'mcp.session';
 
 /**
  * One registered editor, as Settings → Editors renders it. No path is on the wire: the bundle is
@@ -10193,6 +10447,14 @@ export interface InstallEditorResponse {
   editors: EditorView[];
   check: PackCheckResult;
   conformance: EditorConformanceSummary;
+  /**
+   * The `mcp.session` grant tokens this install consent wrote into `EDITOR-GRANTS` (one per installed
+   * editor that declares it). Absent when no installed editor declares it. `grantError` = the editor is
+   * installed but the ledger could not be edited: a declaring build's `mcp.session` still asks, or (for
+   * a build that no longer declares it) an earlier build's grant was not withdrawn.
+   */
+  granted?: string[];
+  grantError?: string;
 }
 
 /** What the install-time conformance run found (garden `scripts/editor/conformance.py`). */
@@ -10458,3 +10720,96 @@ export interface LearnTopicsResponse {
   repoRef: string;
   topics: LearnTopic[];
 }
+
+// ── MCP inspector bridge (DES-MCP-INSPECTOR-001 §3) ───────────────────────────────────────────
+// `/api/v1/mcp-inspect/sessions`: one live connection to an MCP server per session, driven by
+// studio's host for an `mcp-server` editor. Start, send and delete are human-only; the log is
+// operator-only. No session id, command, URL, env or header value is ever given to the plugin.
+
+/** What to connect to: a server in crew's MCP registry, a stdio command, or an HTTP endpoint. */
+export type McpInspectTarget =
+  | { server: string }
+  | { command: string; args?: string[]; env?: Record<string, string>; cwd?: string }
+  | { url: string; transport?: 'streamable-http' | 'sse'; headers?: Record<string, string> };
+
+/** `POST /mcp-inspect/sessions` */
+export interface McpInspectStartBody {
+  target: McpInspectTarget;
+}
+
+export type McpInspectState = 'connecting' | 'ready' | 'closed' | 'failed';
+
+/** The server's `initialize` result, secrets scrubbed. */
+export interface McpInspectInitialize {
+  protocolVersion: string | null;
+  serverInfo: { name: string; version: string; [k: string]: unknown } | null;
+  capabilities: Record<string, unknown>;
+  instructions: string | null;
+}
+
+export interface McpInspectSessionView {
+  id: string;
+  target: {
+    kind: 'server' | 'stdio' | 'streamable-http' | 'sse';
+    /** A short name: the registry name, the command's basename, or the URL's host. */
+    name: string;
+    /** The full command line or URL, for the HOST's header only. */
+    label: string;
+    /** Names only, never values. */
+    envNames: string[];
+    headerNames: string[];
+  };
+  state: McpInspectState;
+  initialize: McpInspectInitialize | null;
+  error: string | null;
+  startedAt: string;
+  /** The last log sequence number written. */
+  lastSeq: number;
+}
+
+/** `201` of `POST /mcp-inspect/sessions` */
+export interface McpInspectStartResponse {
+  session: McpInspectSessionView;
+}
+
+/** `POST /mcp-inspect/sessions/:id/rpc` */
+export interface McpInspectRpcBody {
+  method: string;
+  params?: Record<string, unknown>;
+}
+
+export interface McpInspectRpcResponse {
+  /** The server's JSON-RPC answer (`{ result }` or `{ error: { code, message, data? } }`), secrets scrubbed. */
+  response: { result?: unknown; error?: { code: number; message: string; data?: unknown } };
+  ms: number;
+  /** The answer was over the cap and is cut (the log entry carries the cut text). */
+  truncated: boolean;
+}
+
+export interface McpInspectLogEntry {
+  seq: number;
+  /** ISO time. */
+  at: string;
+  /** `out` = to the server, `in` = from it, `host` = the bridge's own line (state, exit). */
+  dir: 'out' | 'in' | 'host';
+  kind: 'request' | 'response' | 'notification' | 'stderr' | 'state';
+  method?: string;
+  rpcId?: string | number;
+  /** Round trip, on a response. */
+  ms?: number;
+  error?: boolean;
+  /** The message as JSON (or the stderr text), secrets scrubbed, at most 64 KB. */
+  text: string;
+  truncated?: boolean;
+}
+
+/** `GET /mcp-inspect/sessions/:id/log?after=&wait=` (a long poll) */
+export interface McpInspectLogResponse {
+  entries: McpInspectLogEntry[];
+  /** Pass as `after` next time. */
+  next: number;
+  /** The oldest sequence still held; entries before it were evicted (a gap). */
+  first: number;
+  state: McpInspectState;
+  error: string | null;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wicked-crew-api-types",
-  "version": "0.110.0",
+  "version": "0.115.0",
   "description": "The wire contract of the wicked-crew daemon's /api/v1 REST surface and /ws CoreEvent frames \u2014 types only, zero runtime",
   "type": "module",
   "types": "./index.d.ts",