wicked-crew-api-types 0.128.0 → 0.131.0

package/index.d.ts

@@ -1029,7 +1029,11 @@ export interface RosterSeat {
   key: string;
   display_name: string;
   binary: string;
+  /** wicked-core#572: may cast a council ballot — and nothing more (see `work_eligible`). */
   enabled_for_council: boolean;
+  /** (api-types 0.129.0) wicked-core#572: may be seated for work; absent means true. The engine's
+   *  registry field, passed through verbatim. */
+  seat_eligible_for_work?: boolean;
   category?: string;
   /**
    * Runtime health (crew#274). Additive: absent on a daemon predating the field, and safe to
@@ -1124,6 +1128,18 @@ export interface RosterSeat {
   council_eligible?: boolean;
   /** Present when `council_eligible` is false: the one reason, in the operator's words. */
   council_ineligible_reason?: string;
+  /**
+   * (api-types 0.129.0, crew#916, wicked-core#572) Whether the seat may be seated for WORK as far as
+   * the daemon can tell: `seat_eligible_for_work` not false, `auth` not `signed_out`, no active
+   * engine bench, login check answered. Independent of `council_eligible` — `enabled_for_council`
+   * covers the ballot only, so a work-only seat reads `council_eligible: false, work_eligible: true`
+   * and a reviewer-only seat the reverse. Neither false alone benches the seat: a launch benches it
+   * only when both are false. Never handed to the engine (`clisJson` strips it). ABSENT on a daemon
+   * before 0.129.0.
+   */
+  work_eligible?: boolean;
+  /** (api-types 0.129.0) Present when `work_eligible` is false: the one reason, in the operator's words. */
+  work_ineligible_reason?: string;
   /**
    * Present when THIS daemon's recent councils benched the seat: the engine's own
    * `councilSeatFailed` evidence (`non_zero_exit` / `timed_out`, the derivative `benched` kind
@@ -1215,21 +1231,45 @@ export interface RosterSeat {
   [k: string]: unknown;
 }
 
-/** `RosterSeat.version` (api-types 0.115.0). */
-export interface SeatVersion {
+/** Why a pinned seat reads `unproven` (api-types 0.131.0, crew#1004): `no_answer` — the pin's own
+ *  `--version` check got no answer, so nothing confirms the build (it was not shown to differ);
+ *  `different_build` — the check answered naming a build other than the pinned one (`observed`);
+ *  `invalid_answer` — the check answered, but in a shape it cannot confirm (its first line is not
+ *  the pinned build byte for byte) and without naming another build. A build is named by its id
+ *  alone, pre-release and build suffixes included (`1.18.31`, `1.17.18-rc.1`), only as a whole
+ *  token (`1.18.31.4` names none), never by the presentation around it: `opencode (1.17.18)`, a
+ *  colour-coded `1.17.18` and `v1.17.18,` name only the pinned build; `1.17.18-beta` names another. */
+export type SeatVersionUnprovenWhy = 'no_answer' | 'different_build' | 'invalid_answer';
+
+/**
+ * `RosterSeat.version` (api-types 0.115.0; `why` and `observed` 0.131.0). `status`: `proven` — the
+ * pin's check answered with the pinned build; `unproven` — it did not, and governance fails closed,
+ * with `why` saying which case and, on `different_build`, `observed` naming the build the check
+ * saw; `no_pin` — the seat pins no build.
+ *
+ * `status` comes from the pin's check alone (it mirrors the engine's spawn-time check), never from
+ * `installed`. The two are separate snapshots: the seat's own `--version` reading (`installed`,
+ * `checked_at`) and the pin's check are cached apart, each with its own TTL, so for up to one TTL
+ * after an upgrade `installed` may still read the pinned build while `why` is already
+ * `different_build`. The build the check saw is `observed`, never `installed`; `installed` equal to
+ * `proven` says nothing about the pin holding (crew#1004).
+ */
+export type SeatVersion = {
   /** The first non-empty line of the seat's `--version`, home written `~`; `null` when it did not answer. */
   installed: string | null;
-  /** The build the seat's governance was proven on (`acp.verified_version`); `null` when it pins none. */
-  proven: string | null;
-  /** `proven` — the installed build is the pinned one; `unproven` — it is not (governance fails
-   *  closed); `no_pin` — the seat pins no build. */
-  status: 'proven' | 'unproven' | 'no_pin';
-  /** ISO-8601 of the reading. */
+  /** ISO-8601 of the `installed` reading. */
   checked_at: string;
   /** How the binary on PATH was installed, from its resolved path: under `node_modules` = `npm`, a
    *  Homebrew prefix = `brew`, else `other`; `null` when it is not on PATH. */
   install_source: 'npm' | 'brew' | 'other' | null;
-}
+} & (
+  // `proven`: the build the seat's governance was proven on (`acp.verified_version`), `null` only
+  // when it pins none. `observed`: the build the pin's check saw, on `different_build` only.
+  | { status: 'no_pin'; proven: null }
+  | { status: 'proven'; proven: string }
+  | { status: 'unproven'; proven: string; why: 'no_answer' | 'invalid_answer' }
+  | { status: 'unproven'; proven: string; why: 'different_build'; observed: string }
+);
 
 /** `RosterSeat.account` (api-types 0.115.0). */
 export interface SeatAccount {
@@ -1288,7 +1328,10 @@ export type SeatQeReviewer =
 /**
  * One `RosterSeat.issues` entry (api-types 0.115.0). Today's codes: `signed_out`, `qe_blocked`
  * (problems); `quota`, `usage_limit`, `benched`, `codex_worktree`, `host_floor` and `host_floor_unknown`
- * (unreleased, wicked-core#976), `version_unproven`,
+ * (unreleased, wicked-core#976), `version_unproven` (`params.why`: `no_answer` | `different_build` | `invalid_answer`,
+ * api-types 0.131.0 — the same as `RosterSeat.version.why`; `params.observed`, on `different_build`
+ * only: the build the pin's check saw, the same as `RosterSeat.version.observed`; `params.proven`;
+ * `params.installed` when the seat's own `--version` answered),
  * `unchecked` (`params.why`: `no_governance` | `no_host_boundary`), `fence_scoped`,
  * `live_check_failed` (warnings); `opt_in`, `no_qe`, `unverified` (notes). A client must tolerate
  * an unknown code.
@@ -7460,6 +7503,24 @@ export interface DiagnosticsResponse {
   seatGovernance?: DiagnosticsSeatGovernance;
   /** (api-types 0.97.0, crew#740) The memory store this daemon reads and writes. */
   memoryStore?: MemoryStoreInfo;
+  /** (api-types 0.130.0, crew#1068) The wicked-vault CLI the engine records held team findings with
+   *  — see `DiagnosticsVault`. `null` on a route set booted without an engine adapter; ABSENT on an
+   *  older daemon. */
+  vault?: DiagnosticsVault | null;
+}
+
+/**
+ * (api-types 0.130.0, crew#1068) `DiagnosticsResponse.vault`: what the daemon exported to the engine
+ * as `WICKED_VAULT_BIN` at boot. `shipped` = crew's own `wicked-vault` dependency's bin (an absolute
+ * path); `operator` = the operator's own value, kept; `off` = the operator set it empty (the vault is
+ * switched off on purpose); `unresolvable` = crew's bin could not be resolved, so nothing was
+ * exported. `finding` is non-null exactly for `off` and `unresolvable` — the same entry
+ * `GET /health.warnings[]` carries (`vault.off` / `vault.unresolvable`) — and names the remedy.
+ */
+export interface DiagnosticsVault {
+  bin: string | null;
+  source: 'shipped' | 'operator' | 'off' | 'unresolvable';
+  finding: { kind: 'vault.off' | 'vault.unresolvable'; severity: 'warning'; message: string; remedy: string } | null;
 }
 
 /** `DiagnosticsResponse.seatGovernance` (crew#742). Paths are for the local operator. */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wicked-crew-api-types",
-  "version": "0.128.0",
+  "version": "0.131.0",
   "description": "The wire contract of the wicked-crew daemon's /api/v1 REST surface and /ws CoreEvent frames \u2014 types only, zero runtime",
   "type": "module",
   "types": "./index.d.ts",