wicked-crew-api-types 0.83.0 → 0.87.0

package/index.d.ts

@@ -1797,8 +1797,15 @@ export interface GovernanceHookFiredEvent {
   ord: number;
   attempt: number;
   toolName: string;
-  decision: 'allow' | 'deny';
+  /** `allow_with_conditions` (typed from api-types 0.87.0): the engine permits with obligations. */
+  decision: 'allow' | 'deny' | 'allow_with_conditions';
   denyingPolicy: string | null;
+  /**
+   * (TR-W2, wicked-core-ts >= 0.7.35; api-types 0.87.0) EVERY steering rule that fired on this
+   * call, whatever the decision — the `warn` class included, which an allow decision used to drop.
+   * The watch registry's `risky-call` entry projects the warn-effect ones. Absent on an older engine.
+   */
+  firedPolicies?: string[];
 }
 
 /** P2 — a pinned deterministic validator was attached; confirms the governance floor is armed. */
@@ -2102,6 +2109,32 @@ export type RepoChecksEvaluatedEvent = {
    *  `typecheck`/`lint`/`test` script, …) — the reason an empty `checks` is empty; `null` when
    *  detection succeeded. */
   detectError?: string | null;
+  /**
+   * (wicked-core#469; typed here from api-types 0.87.0) How the floor ended: `passed` | `failed` |
+   * `timed_out` | `not_run`. A floor that did not finish, or could not run at all (no write
+   * boundary — see `sandboxError`), is never "its checks failed". Absent on an older engine.
+   */
+  outcome?: string;
+  /**
+   * (wicked-core#467; typed here from api-types 0.87.0) Whose floor this was: `creator` (the seat
+   * handed back output and the engine ran the repo checks on its tree — a failing one is the
+   * structural "handed back as finished, its own checks failed", TR-W6) or `verify` (the
+   * code-verifying unit's, and the deliver re-check). Absent on an older engine.
+   */
+  floor?: string;
+  /**
+   * (wicked-core#467) A creator transcript's "pre-existing failure" claim, judged against the
+   * baseline diff: `verdict` is `claim_rejected` | `claim_confirmed` | `unverified`. `null` when no
+   * claim was made or the floor was green.
+   */
+  claim?: { phrase: string; check: string; verdict: string } | null;
+  /**
+   * (TR-W1b, wicked-core-ts >= 0.7.35) The repo-relative paths the step changed, `git diff-tree
+   * --name-status` baseline → floor tree. Absent when the tree did not change; capped at 200 with
+   * `changedTruncated: true`.
+   */
+  changed?: Array<{ status: string; path: string }>;
+  changedTruncated?: boolean;
 };
 
 // ── wicked-core#431 gate / deliver evidence (F-3R2-013 / -010 / -009; api-types 0.33.0) ──────────
@@ -5233,7 +5266,8 @@ export type ChatSeatRefusedFrame = {
 // verdicts; the seat's TEXT is never edited — a skin MARKS it from these items.
 
 /** What class of thing a citation is. */
-export type ChatCitationKind = 'path' | 'line' | 'symbol' | 'sha';
+/** `rule` (api-types 0.85.0, DC-S7): a `[rule:<id>]` the reply wrote — "cited by the step — unchecked", never a followed count. */
+export type ChatCitationKind = 'path' | 'line' | 'symbol' | 'sha' | 'rule';
 
 /**
  * The verdict on one citation.
@@ -5339,7 +5373,21 @@ export type ChatTranscriptRecord =
       corrected: number;
       unchecked: number;
       items: ChatCitationItem[];
-    };
+    }
+  /**
+   * The decisions recorded from the operator's message of `turnId` (api-types 0.84.0, DC-S4b) — a
+   * SEPARATE record, like `citations`, because derivation runs after the seats' replies are stored. A
+   * reader folds it onto the turn's `user` record; a skin that does not know this kind ignores it.
+   * The live frame is {@link ChatDecisionsFrame}. The seats' `wicked-decisions` blocks themselves
+   * never reach the transcript (they are cut from the reply before it is persisted or broadcast).
+   */
+  | { at: number; turnId: string; kind: 'decisions'; items: DecisionView[] }
+  /**
+   * A crew-authored preface the seats received with the operator's message of `turnId` (api-types
+   * 0.85.0, DC-S7): the rules remembered since they last heard from crew. Disclosed here so the
+   * operator sees exactly what crew added; the `user` record keeps the operator's own words.
+   */
+  | { at: number; turnId: string; kind: 'system'; text: string };
 
 /** `GET /chats/:id` → 200. */
 export interface ChatDetailResponse {
@@ -5959,6 +6007,8 @@ export interface DiagnosticsResponse {
    *  `DiagnosticsStateHome`. `null` on a daemon booted without the watch (some tests); ABSENT on a
    *  daemon before this field. */
   stateHome?: DiagnosticsStateHome | null;
+  /** The studio chat recorder's per-CLI format compliance (api-types 0.84.0, DC-S4b); `null` without the chat host. */
+  decisions?: DiagnosticsDecisions | null;
 }
 
 // ── Diagnostics — governance store + dead letters (api-types 0.31.0, crew#495 / F-022) ─────────
@@ -8733,3 +8783,199 @@ export interface DecisionChangedFrame {
   rule_id?: string;
   project_id: string | null;
 }
+
+/**
+ * `/ws` frame (api-types 0.84.0, DC-S4b): the decisions recorded from ONE chat turn's operator
+ * message, once every seat of the turn has answered (or the turn went stale). Mirrors
+ * {@link ChatCitationsFrame}; the same items land in the transcript as a `decisions` record.
+ */
+export interface ChatDecisionsFrame {
+  type: 'chatDecisions';
+  chat: string;
+  turn_id: string;
+  items: DecisionView[];
+  project_id?: string;
+}
+
+/**
+ * `GET /diagnostics.decisions` (api-types 0.84.0, DC-S4b): the studio chat recorder's format
+ * compliance per seat CLI — how often a seat ended its reply with a well-formed `wicked-decisions`
+ * block (§4.3.3 measures the rate per CLI). `null` on a daemon without the chat host.
+ */
+export interface DiagnosticsDecisions {
+  /** The `WICKED_DECISIONS` switch this daemon runs under. */
+  mode: 'off' | 'ledger' | 'on';
+  /** Per `cliKey`: replies seen, well-formed blocks, malformed blocks. */
+  recorder: Record<string, { replies: number; blocks: number; malformed: number }>;
+  /** Turns whose recorder seat posted no usable block. The words were still recorded, unlabelled. */
+  unclassified_turns: number;
+  /** Turns that produced at least one decision record. */
+  recorded_turns: number;
+}
+
+// ── Considered · set aside · cited (unchecked) (DES-decision-capture §4.7; DC-S7, api-types 0.85.0) ──
+
+export interface ConsiderationRule {
+  id: string;
+  statement: string;
+  severity: 'info' | 'warn' | 'error' | 'critical';
+  steering_type?: SteeringType;
+  /** Present on a project-scoped rule. */
+  project?: string;
+}
+
+export interface ConsiderationSetAside {
+  id: string;
+  statement: string;
+  /** The engine's reasons, plus crew's `not_confirmed`: a decision offered for this project, not yet remembered. */
+  reason: 'out_of_scope' | 'replaced' | 'retired' | 'not_confirmed';
+}
+
+/**
+ * A `[rule:<id>]` the reply or step wrote. `unchecked` = the id is in force and the step cited it —
+ * whether it FOLLOWED it is not checked (DES-rule-check will say); `unverified` = not an in-force
+ * rule here (invented, or another project's). Never summed into a "followed" count.
+ */
+export interface ConsiderationCitation {
+  id: string;
+  /** The seat (`cliKey`) or the unit id that wrote it. */
+  by: string;
+  status: 'unchecked' | 'unverified';
+  label: string;
+}
+
+/**
+ * `GET /chats/:id/turns/:turnId/considered` and `GET /runs/:id/units/:unitKey/considered?attempt=`
+ * (operator+): what the seats were given to consider, what was set aside, and what they cited.
+ */
+export interface Consideration {
+  subject: { kind: 'chat'; chat_id: string; turn_id: string } | { kind: 'unit'; run_id: string; ord: number; attempt: number };
+  /** `considered:<chat>:<turn>` or `considered:<run>:<ord>:<attempt>` — the bus fact's idempotency key. */
+  key: string;
+  project_id: string | null;
+  /** Severity-ordered (critical → info). */
+  considered: ConsiderationRule[];
+  set_aside: ConsiderationSetAside[];
+  cited: ConsiderationCitation[];
+  /** `considerRules` (the engine's project-aware read), `global-only` (an engine without it), or `unavailable`. */
+  source: 'considerRules' | 'global-only' | 'unavailable';
+}
+
+// ── Artifact editors (DES-artifact-editor-plugins §5.2, §6, §8.2; EP-C1, api-types 0.86.0) ───────
+
+/** What a plugin can ask for (§6.1). There is no permission for network calls, agents or gates. */
+export type EditorPermission =
+  | 'artifact.read'
+  | 'artifact.write'
+  | 'selection.chip'
+  | 'composer.draft'
+  | 'checks.read'
+  | 'checks.contribute'
+  | 'sources.read'
+  | 'media.read'
+  | 'artifact.export'
+  | 'ui.fullscreen'
+  | 'network.media';
+
+/**
+ * One registered editor, as Settings → Editors renders it. No path is on the wire: the bundle is
+ * fetched at `entry_url` (`GET /editors/:id/:version/entry`, the §8.2 headers, re-hashed per serve).
+ * First-party editors ship inside studio's bundle (`<studio dist>/editors/<id>/editor.json` +
+ * `index.html`, ids `wicked-*`) and are discovered at boot; third-party editors arrive as garden
+ * packs and cannot be installed before the install-time conformance run (EP-C8).
+ */
+export interface EditorView {
+  id: string;
+  title: string;
+  version: string;
+  /** wicked.editor protocol versions it speaks. */
+  protocol: number[];
+  /** Artifact kinds it can open. */
+  kinds: string[];
+  sizes: Array<'inline' | 'pane' | 'full'>;
+  panels?: Array<'checks'>;
+  /** Each with the reason shown at install. The GRANTED set is `GET /editors/:id/grants`. */
+  permissions: Array<{ id: EditorPermission; why: string }>;
+  /** The full sha256 of the entry file, pinned when the registry read it. */
+  sha256: string;
+  bytes: number;
+  first_party: boolean;
+  enabled: boolean;
+  source: 'studio-bundle';
+  entry_url: string;
+}
+
+/** `GET /editors` (operator+). */
+export interface ListEditorsResponse {
+  editors: EditorView[];
+  /** Why `POST /editors` answers 501 today: third-party installs wait on EP-C8. */
+  installs: 'refused_until_conformance';
+}
+
+/** `POST /editors` body (human-only): a pack directory holding `wicked-pack.json`. */
+export interface InstallEditorBody {
+  packRoot: string;
+}
+
+/** One finding of garden's `pack check --json`. */
+export interface PackCheckFinding {
+  level: 'error' | 'warn';
+  code: string;
+  message: string;
+  path?: string;
+}
+
+/** The verdict of garden's `pack check --json` (the fail-closed gate every install runs first). */
+export interface PackCheckResult {
+  ok: boolean;
+  errors: PackCheckFinding[];
+  warnings: PackCheckFinding[];
+}
+
+/**
+ * `POST /editors` → 501: the pack passed garden's gate, and this is what the install WOULD ask the
+ * operator to approve (§3.2 "Add these") once third-party installs open (EP-C8). Nothing was written.
+ */
+export interface InstallEditorRefusal {
+  code: 'third_party_editors_not_available';
+  error: string;
+  check: PackCheckResult;
+  pack: {
+    name: string;
+    vendor: string;
+    version: string;
+    editors: Array<{ id: string; title: string; version: string; kinds: string[]; permissions: Array<{ id: string; why: string }> }>;
+    blocks: Array<{ id: string; label: string; produces_kind: string; skills: string[] }>;
+    /** The pack's skill directories, approved together with its editors and blocks. */
+    skills: string[];
+  };
+}
+
+/** `POST /editors/:id/enabled` body (human-only). */
+export interface SetEditorEnabledBody {
+  enabled: boolean;
+}
+
+/** One decided permission (the engine's `evaluate_editor_grants`, EP-K1). */
+export interface EditorGrant {
+  permission: EditorPermission | string;
+  decision: 'allow' | 'ask' | 'deny';
+  /** The steering rules that decided it. */
+  ruleIds: string[];
+  /** The ledger entry an operator's "allow" adds to `EDITOR-GRANTS.excludes` (`editor:<id>@<version>#<sha256>/<permission>`). */
+  token: string;
+}
+
+/**
+ * `GET /editors/:id/grants?project=` (operator+): the engine's decided set for this editor's version
+ * and hash (a changed hash is a new token and asks again), deny dominating. The host fetches it
+ * before `host.hello` and on every settings/rule change, and enforces it on every request.
+ */
+export interface EditorGrantsResponse {
+  editorId: string;
+  version: string;
+  sha256: string;
+  project: string | null;
+  firstParty: boolean;
+  grants: EditorGrant[];
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wicked-crew-api-types",
-  "version": "0.83.0",
+  "version": "0.87.0",
   "description": "The wire contract of the wicked-crew daemon's /api/v1 REST surface and /ws CoreEvent frames \u2014 types only, zero runtime",
   "type": "module",
   "types": "./index.d.ts",