wicked-crew 0.4.0 → 0.6.0

package/dist/core/adapter.d.ts

@@ -1,4 +1,16 @@
-import type { CoreEvent, LaunchRunInput, RepoEntry, RepoOnboardRef, SessionView, RecordedEvent, GovernancePolicy, ConformanceRule, GovernanceClaim, CoverageReport, WorkflowDef, SystemSettings } from './types.js';
+import type { CoreEvent, LaunchRunInput, RepoEntry, RepoOnboardRef, SessionView, RecordedEvent, GovernancePolicy, ConformanceRule, GovernanceClaim, CoverageReport, GraphKind, WorkflowDef, SystemSettings, Project, ProjectMember, InteractionRequest } from './types.js';
+/** Where the daemon persists system settings. Exported so tests write fixtures to the ONE
+ *  spelling of this path (the tests/ tree is audited against spelling core paths itself). */
+export declare function settingsFilePath(): string;
+/** Read user-registered workflow overlays from `dir` (the same dir `registerWorkflow` writes to).
+ *
+ * Skips: files whose id matches a built-in (those are `_writeBuiltinOverlay` artifacts written FOR
+ * the Rust actor, not user workflows — including them would duplicate a built-in in `listWorkflows`),
+ * non-`.json` files, and any file that does not parse into a `{id, phases[]}` shape (the Rust actor
+ * skips an unreadable overlay too, so crew must not surface one it can't). A missing dir yields `[]`.
+ *
+ * Exported so the FINDING-002 restart-hydration path is unit-testable without spawning a Core. */
+export declare function readOverlayWorkflows(dir: string, builtinIds: ReadonlySet<string>): WorkflowDef[];
 export declare const BUILTIN_WORKFLOWS: WorkflowDef[];
 /**
  * Chat is not available in this deployment at all — a capability gap, never a bad request.
@@ -15,6 +27,14 @@ export declare const BUILTIN_WORKFLOWS: WorkflowDef[];
 export declare class ChatUnsupportedError extends Error {
     constructor(message: string);
 }
+/**
+ * The project surface (DES-PROJECT-001) is not available in this deployment — the installed
+ * wicked-core-ts predates 0.6.0. Typed for the same reason as `ChatUnsupportedError`: the routes
+ * answer 501 ("upgrade the engine") on this, never 400 ("fix your request").
+ */
+export declare class ProjectsUnsupportedError extends Error {
+    constructor(what: string);
+}
 /**
  * `resolveElicitation` is not available in this deployment — the NAPI binding has not
  * landed in the installed `wicked-core-ts` yet (DES-002 §4 P-1 stub).
@@ -63,6 +83,15 @@ export interface CoreAdapterOptions {
  * endpoint and the WS fan-out funnel through this stable API — so when the
  * in-flight core-ts subscribe/teardown signature lands, only this file changes.
  */
+/** The ids of a workflow's phases that carry a HUMAN gate (`human_confirm` unconditional, or the
+ * conditional `human_confirm_if`) — i.e. the phases that will PAUSE for a person.
+ *
+ * FINDING-023 (residual): core#208 made a workflow's phase gate deliberately WIN over a run-level
+ * `humanConfirm: none` (it pauses, with a self-disclosing note), but there was no way to learn a
+ * workflow's gates BEFORE launching it — an operator picking `none` for an unattended run only found
+ * out when it paused. Surfacing this on `GET /workflows/:id` is that missing launch-time signal.
+ * `'auto'` (the string form) is NOT a human gate. */
+export declare function humanGatePhaseIds(wf: WorkflowDef): string[];
 export declare class CoreAdapter {
     private readonly core;
     private readonly subscription;
@@ -89,6 +118,13 @@ export declare class CoreAdapter {
     confirmGate(runId: string, approve: boolean, amend?: string): Promise<string>;
     /** Cancel a run → the status token. */
     cancelRun(runId: string): Promise<string>;
+    /**
+     * Archive (or unarchive) a TERMINAL run (crew#265) — write-off, not delete. Resolves `true`
+     * when the session existed, `false` for an unknown id (→ 404); REJECTS when the run is
+     * non-terminal (the route answers 409). Fail-closed on an old addon: method-presence guard,
+     * same doctrine as `injectWorkerMessage`.
+     */
+    archiveRun(runId: string, archived: boolean, note?: string): Promise<boolean>;
     /** Inject an operator message into a run's active PTY worker(s). target="all" or a CLI key. */
     injectWorkerMessage(runId: string, message: string, target: string): Promise<string>;
     /**
@@ -107,6 +143,51 @@ export declare class CoreAdapter {
     sessionsDetail(): Promise<SessionView[]>;
     /** A unit's captured transcript (string, or `null`). */
     workOutput(unitId: string): Promise<string | null>;
+    /** True when the installed addon carries the project surface (0.6.0+). */
+    projectsSupported(): boolean;
+    private requireProjects;
+    projectCreate(name: string, description?: string): Promise<Project>;
+    projectUpdate(id: string, patch: {
+        name?: string | undefined;
+        description?: string | undefined;
+        status?: string | undefined;
+    }): Promise<Project>;
+    /** Every stored project (all statuses, newest first). The `default` project is NOT here — the
+     *  route layer synthesizes it (ADR §7: computed, never stored). */
+    projectList(): Promise<Project[]>;
+    projectGet(id: string): Promise<Project | null>;
+    projectMembers(projectId: string): Promise<ProjectMember[]>;
+    /** Attach a member. `created:false` = the idempotent duplicate hit (emit no event for it). */
+    projectMemberAttach(projectId: string, kind: string, ref: string, meta?: Record<string, unknown>, attachedBy?: string): Promise<{
+        member: ProjectMember;
+        created: boolean;
+    }>;
+    /** Detach (tombstone). `false` = no such live member on that project (the route's 404). */
+    projectMemberDetach(projectId: string, memberId: string): Promise<boolean>;
+    /** The projects holding a live `(kind, ref)` membership — the run→project reverse read. */
+    memberProjects(kind: string, ref: string): Promise<string[]>;
+    /**
+     * Durable interaction requests (ADR §5.3), newest first — or `null` when this addon predates
+     * the binding (the `runEvents` convention: a missing capability must stay distinguishable from
+     * "no open prompts", or the caches' fallback chain misreports upgrades as empty inboxes).
+     */
+    interactionRequests(sessionId?: string, status?: string): Promise<InteractionRequest[] | null>;
+    /** Capture a memory at a STRICT `kind:id[/…]` scope (the engine refuses malformed segments). */
+    captureMemory(content: string, scope: string): Promise<void>;
+    /** Memories within `scope`'s subtree, newest first — the ADR's memory.coverage probe. */
+    listMemories(scope: string, limit: number): Promise<{
+        content: string;
+        score: number;
+        tier: string;
+    }[]>;
+    /** Ingest a document (title + chunks) into the knowledge store. Returns the chunk count. */
+    ingestKnowledge(title: string, chunks: string[]): Promise<number>;
+    /** Recall up to `k` knowledge chunks relevant to `query`. */
+    recallKnowledge(query: string, k: number): Promise<{
+        content: string;
+        score: number;
+        source: string;
+    }[]>;
     chatOpen(chatId: string, clis: string[], cwd?: string): Promise<{
         cliKey: string;
         ok: boolean;
@@ -175,6 +256,19 @@ export declare class CoreAdapter {
     listConformanceClaims(): Promise<GovernanceClaim[]>;
     /** Front-half coverage gate report; null when the store has no graph nodes. */
     getCoverageReport(): Promise<CoverageReport | null>;
+    /**
+     * Coverage for ONE registered repo, computed over that repo's OWN code graph (FINDING-009). Unlike
+     * {@link getCoverageReport} — which reads the daemon store and reports a vacuous `coverage: 1.0` that
+     * names no repo — this resolves `repoRef` in the registry and recomputes over its `code_graph_db`.
+     * The core rejects an unknown repo (never a silent vacuous report), so this throws for a bad ref.
+     */
+    getCoverageReportForRepo(repoRef: string): Promise<CoverageReport | null>;
+    /**
+     * Node-count-by-kind summary of ONE registered repo's code graph, over that repo's OWN store
+     * (#122) — what the estate graph actually holds for the repo, so an operator can see it was
+     * populated. The core rejects an unknown repo, so this throws for a bad ref.
+     */
+    getGraphKindsForRepo(repoRef: string): Promise<GraphKind[]>;
     /** Upsert a governance policy via the single-writer actor. */
     upsertPolicy(policy: GovernancePolicy): Promise<void>;
     /** Upsert a conformance rule via the single-writer actor. */
@@ -192,6 +286,17 @@ export declare class CoreAdapter {
     /** Recall conformance rules matching a facet query (read-only, does not block actor). */
     recallRulesPreview(query: Record<string, string | string[] | undefined>): Promise<ConformanceRule[]>;
     private readonly userWorkflows;
+    /** Whether {@link hydrateFromOverlay} has run this process lifetime. */
+    private overlayHydrated;
+    /** Load user-registered workflows persisted to the overlay dir into `userWorkflows`, ONCE.
+     *
+     * FINDING-002 residual: `registerWorkflow` writes each def to the overlay dir AND to the in-memory
+     * `userWorkflows` Map, but the Map is process-local and empty on every daemon restart, and nothing
+     * read the dir back. So after a restart the Rust actor (which DOES load the overlay dir at startup)
+     * would launch a user workflow that `listWorkflows()`/`GET /workflows` no longer showed — it
+     * vanished from the registry while remaining runnable. Hydrating from the same dir the writer uses
+     * makes the two views agree again. */
+    private hydrateFromOverlay;
     listWorkflows(): WorkflowDef[];
     getWorkflow(id: string): WorkflowDef | null;
     /** Write a built-in workflow definition to the Rust overlay dir (and hot-register when possible).

package/dist/core/adapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../src/core/adapter.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EACV,SAAS,EACT,cAAc,EACd,SAAS,EACT,cAAc,EACd,WAAW,EACX,aAAa,EACb,gBAAgB,EAChB,eAAe,EACf,eAAe,EACf,cAAc,EACd,WAAW,EACX,cAAc,EACf,MAAM,YAAY,CAAC;AAoKpB,eAAO,MAAM,iBAAiB,EAAE,WAAW,EAuH1C,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,qBAAa,oBAAqB,SAAQ,KAAK;gBACjC,OAAO,EAAE,MAAM;CAI5B;AAED;;;;;;GAMG;AACH,qBAAa,2BAA4B,SAAQ,KAAK;gBACxC,OAAO,EAAE,MAAM;CAI5B;AAKD,iFAAiF;AACjF,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,wCAAwC;IACxC,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,4FAA4F;IAC5F,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,mCAAmC;AACnC,MAAM,MAAM,iBAAiB,GAAG,CAAC,KAAK,EAAE,SAAS,KAAK,IAAI,CAAC;AAE3D,MAAM,WAAW,kBAAkB;IACjC,+DAA+D;IAC/D,MAAM,EAAE,MAAM,CAAC;IACf,uFAAuF;IACvF,IAAI,CAAC,EAAE,OAAO,CAAC;IACf;;;;;;;;;;;OAWG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,wGAAwG;IACxG,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAmED;;;;;;GAMG;AACH,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAiB;IACtC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAe;IAC5C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAgC;IAC1D,OAAO,CAAC,MAAM,CAAS;IACvB,uFAAuF;IACvF,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAqB;IAE5D,2FAA2F;IAC3F,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,wEAAwE;IACxE,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;gBAE3B,IAAI,EAAE,kBAAkB;IAqDpC,sEAAsE;IACtE,OAAO,CAAC,QAAQ,EAAE,iBAAiB,GAAG,MAAM,IAAI;IAOhD,+DAA+D;IAC/D,MAAM,CAAC,MAAM,IAAI,OAAO,EAAE;IAI1B,4DAA4D;IAC5D,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC;IAIvB,yDAAyD;IACnD,SAAS,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC;IAgCvD,iEAAiE;IACjE,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAIzC,mFAAmF;IACnF,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAI7E,uCAAuC;IACvC,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAIzC,+FAA+F;IAC/F,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAOpF;;;;;;;;OAQG;IACG,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,GAAG,IAAI,CAAC;IAQ/D,4BAA4B;IACtB,QAAQ,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAInC,qCAAqC;IAC/B,cAAc,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;IA+B9C,wDAAwD;IAClD,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAMlD,QAAQ,CACZ,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EAAE,EACd,GAAG,CAAC,EAAE,MAAM,GACX,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAKvD,QAAQ,CACZ,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE,MAAM,EAAE,EAClB,GAAG,CAAC,EAAE,MAAM,GACX,OAAO,CAAC,MAAM,EAAE,CAAC;IAUd,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAIlD;;;;;;;;;;OAUG;IACG,QAAQ,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;IAkBlC,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI9C;;;;;;;;OAQG;IACG,kBAAkB,CACtB,MAAM,EAAE,MAAM,EACd,cAAc,EAAE,MAAM,EACtB,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,GAAG,IAAI,GACvB,OAAO,CAAC,IAAI,CAAC;IAYhB,uFAAuF;IACvF,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAA6B;IAC/D;;;;;;;;OAQG;IACH,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAsC;IAEzE,6DAA6D;IACvD,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAItE;;;OAGG;IACG,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IAuExG;;;;OAIG;IACG,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;YAyB9D,mBAAmB;IAwBjC,wFAAwF;IACxF,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAInD,kCAAkC;IAC5B,SAAS,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;IAMvC,0CAA0C;IACpC,YAAY,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAIjD,0CAA0C;IACpC,oBAAoB,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;IAIxD,8DAA8D;IACxD,qBAAqB,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;IAIzD,+EAA+E;IACzE,iBAAiB,IAAI,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;IAMzD,8DAA8D;IACxD,YAAY,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;IAI3D,6DAA6D;IACvD,qBAAqB,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;IAIjE;;;;;;OAMG;IACG,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAQhD,sFAAsF;IAChF,qBAAqB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAQzD,yFAAyF;IACnF,kBAAkB,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;IAgB1G,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAkC;IAEhE,aAAa,IAAI,WAAW,EAAE;IAe9B,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI;IAI3C;gHAC4G;YAC9F,oBAAoB;IA+BlC;;;;;OAKG;IACG,gBAAgB,CAAC,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC;IAiDzD;;;OAGG;IACG,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,QAAQ,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC;IAkBhG;;;;;OAKG;IACH,YAAY,CACV,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,EAAE,GAAG,SAAS,EACzB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,OAAO,GAChB,OAAO,CAAC,MAAM,CAAC;IAIlB,2FAA2F;IAC3F,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAIzD,mFAAmF;IACnF,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAIvE,0FAA0F;IAC1F,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAMpC,WAAW,IAAI,OAAO,CAAC,cAAc,CAAC;IAetC,cAAc,CAAC,KAAK,EAAE,OAAO,CAAC,cAAc,CAAC,GAAG,OAAO,CAAC,cAAc,CAAC;IAS7E;;;OAGG;IACH,KAAK,IAAI,IAAI;CAMd"}
+{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../src/core/adapter.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EACV,SAAS,EACT,cAAc,EACd,SAAS,EACT,cAAc,EACd,WAAW,EACX,aAAa,EACb,gBAAgB,EAChB,eAAe,EACf,eAAe,EACf,cAAc,EACd,SAAS,EACT,WAAW,EACX,cAAc,EACd,OAAO,EACP,aAAa,EACb,kBAAkB,EACnB,MAAM,YAAY,CAAC;AA6CpB;6FAC6F;AAC7F,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC;AAED;;;;;;;kGAOkG;AAClG,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,MAAM,EACX,UAAU,EAAE,WAAW,CAAC,MAAM,CAAC,GAC9B,WAAW,EAAE,CAoBf;AA2MD,eAAO,MAAM,iBAAiB,EAAE,WAAW,EAuI1C,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,qBAAa,oBAAqB,SAAQ,KAAK;gBACjC,OAAO,EAAE,MAAM;CAI5B;AAED;;;;GAIG;AACH,qBAAa,wBAAyB,SAAQ,KAAK;gBACrC,IAAI,EAAE,MAAM;CAIzB;AAED;;;;;;GAMG;AACH,qBAAa,2BAA4B,SAAQ,KAAK;gBACxC,OAAO,EAAE,MAAM;CAI5B;AAKD,iFAAiF;AACjF,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,wCAAwC;IACxC,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,4FAA4F;IAC5F,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,mCAAmC;AACnC,MAAM,MAAM,iBAAiB,GAAG,CAAC,KAAK,EAAE,SAAS,KAAK,IAAI,CAAC;AAE3D,MAAM,WAAW,kBAAkB;IACjC,+DAA+D;IAC/D,MAAM,EAAE,MAAM,CAAC;IACf,uFAAuF;IACvF,IAAI,CAAC,EAAE,OAAO,CAAC;IACf;;;;;;;;;;;OAWG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,wGAAwG;IACxG,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAmED;;;;;;GAMG;AACH;;;;;;;qDAOqD;AACrD,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,WAAW,GAAG,MAAM,EAAE,CAS3D;AAED,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAiB;IACtC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAe;IAC5C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAgC;IAC1D,OAAO,CAAC,MAAM,CAAS;IACvB,uFAAuF;IACvF,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAqB;IAE5D,2FAA2F;IAC3F,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,wEAAwE;IACxE,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;gBAE3B,IAAI,EAAE,kBAAkB;IAqDpC,sEAAsE;IACtE,OAAO,CAAC,QAAQ,EAAE,iBAAiB,GAAG,MAAM,IAAI;IAOhD,+DAA+D;IAC/D,MAAM,CAAC,MAAM,IAAI,OAAO,EAAE;IAI1B,4DAA4D;IAC5D,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC;IAIvB,yDAAyD;IACnD,SAAS,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC;IAmDvD,iEAAiE;IACjE,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAIzC,mFAAmF;IACnF,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAI7E,uCAAuC;IACvC,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAIzC;;;;;OAKG;IACG,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IASnF,+FAA+F;IAC/F,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAOpF;;;;;;;;OAQG;IACG,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,GAAG,IAAI,CAAC;IAQ/D,4BAA4B;IACtB,QAAQ,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAInC,qCAAqC;IAC/B,cAAc,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;IA+B9C,wDAAwD;IAClD,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IASxD,0EAA0E;IAC1E,iBAAiB,IAAI,OAAO;IAI5B,OAAO,CAAC,eAAe;IAKjB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAKnE,aAAa,CACjB,EAAE,EAAE,MAAM,EACV,KAAK,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,GAClG,OAAO,CAAC,OAAO,CAAC;IAOnB;uEACmE;IAC7D,WAAW,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IAKjC,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IAK/C,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAKjE,8FAA8F;IACxF,mBAAmB,CACvB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,MAAM,EACX,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC;QAAE,MAAM,EAAE,aAAa,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;IAcvD,2FAA2F;IACrF,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAKhF,2FAA2F;IACrF,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAKlE;;;;OAIG;IACG,mBAAmB,CACvB,SAAS,CAAC,EAAE,MAAM,EAClB,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,kBAAkB,EAAE,GAAG,IAAI,CAAC;IASvC,gGAAgG;IAC1F,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKlE,yFAAyF;IACnF,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAS7G,4FAA4F;IACtF,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;IAKvE,6DAA6D;IACvD,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAWxG,QAAQ,CACZ,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EAAE,EACd,GAAG,CAAC,EAAE,MAAM,GACX,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAKvD,QAAQ,CACZ,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE,MAAM,EAAE,EAClB,GAAG,CAAC,EAAE,MAAM,GACX,OAAO,CAAC,MAAM,EAAE,CAAC;IAUd,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAIlD;;;;;;;;;;OAUG;IACG,QAAQ,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;IAkBlC,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI9C;;;;;;;;OAQG;IACG,kBAAkB,CACtB,MAAM,EAAE,MAAM,EACd,cAAc,EAAE,MAAM,EACtB,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,GAAG,IAAI,GACvB,OAAO,CAAC,IAAI,CAAC;IAYhB,uFAAuF;IACvF,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAA6B;IAC/D;;;;;;;;OAQG;IACH,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAsC;IAEzE,6DAA6D;IACvD,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAItE;;;OAGG;IACG,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IAuExG;;;;OAIG;IACG,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;YAyB9D,mBAAmB;IAwBjC,wFAAwF;IACxF,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAInD,kCAAkC;IAC5B,SAAS,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;IAMvC,0CAA0C;IACpC,YAAY,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAIjD,0CAA0C;IACpC,oBAAoB,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;IAIxD,8DAA8D;IACxD,qBAAqB,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;IAIzD,+EAA+E;IACzE,iBAAiB,IAAI,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;IAIzD;;;;;OAKG;IACG,wBAAwB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;IAS/E;;;;OAIG;IACG,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;IASjE,8DAA8D;IACxD,YAAY,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;IAI3D,6DAA6D;IACvD,qBAAqB,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;IAIjE;;;;;;OAMG;IACG,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAQhD,sFAAsF;IAChF,qBAAqB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAQzD,yFAAyF;IACnF,kBAAkB,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;IAgB1G,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAkC;IAEhE,wEAAwE;IACxE,OAAO,CAAC,eAAe,CAAS;IAEhC;;;;;;;0CAOsC;IACtC,OAAO,CAAC,kBAAkB;IAS1B,aAAa,IAAI,WAAW,EAAE;IAgB9B,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI;IAK3C;gHAC4G;YAC9F,oBAAoB;IA+BlC;;;;;OAKG;IACG,gBAAgB,CAAC,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC;IAiDzD;;;OAGG;IACG,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,QAAQ,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC;IAkBhG;;;;;OAKG;IACH,YAAY,CACV,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,EAAE,GAAG,SAAS,EACzB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,OAAO,GAChB,OAAO,CAAC,MAAM,CAAC;IAIlB,2FAA2F;IAC3F,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAIzD,mFAAmF;IACnF,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAIvE,0FAA0F;IAC1F,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAMpC,WAAW,IAAI,OAAO,CAAC,cAAc,CAAC;IAsBtC,cAAc,CAAC,KAAK,EAAE,OAAO,CAAC,cAAc,CAAC,GAAG,OAAO,CAAC,cAAc,CAAC;IAS7E;;;OAGG;IACH,KAAK,IAAI,IAAI;CAMd"}

package/dist/core/adapter.js

@@ -1,6 +1,6 @@
 import { createRequire } from 'node:module';
 import { mkdir, access, readFile, writeFile, chmod, rm } from 'node:fs/promises';
-import { existsSync, readFileSync, renameSync } from 'node:fs';
+import { existsSync, readdirSync, readFileSync, renameSync } from 'node:fs';
 import { join, dirname, resolve, isAbsolute, relative, sep } from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { homedir } from 'node:os';
@@ -12,6 +12,23 @@ function wickedDir(...parts) {
     const home = process.env.HOME ?? process.env.USERPROFILE ?? '/tmp';
     return join(home, '.wicked', ...parts);
 }
+/**
+ * Parse a JSON string a napi binding returned. The bindings type their return loosely (`unknown`
+ * until a `ts_return_type` regen), so guard BOTH a non-string return and invalid JSON with an error
+ * that names the method — a bare `JSON.parse` throw is an unactionable "Unexpected token" (crew#227
+ * review). At the current engine contract `raw` is always a valid JSON string.
+ */
+function parseEngineJson(raw, method) {
+    if (typeof raw !== 'string') {
+        throw new Error(`${method}: expected a JSON string from the engine, got ${typeof raw}`);
+    }
+    try {
+        return JSON.parse(raw);
+    }
+    catch (e) {
+        throw new Error(`${method}: engine returned invalid JSON (${e instanceof Error ? e.message : String(e)})`);
+    }
+}
 /**
  * Workflow overlay directory — mirrors the Rust `workflow_overlay_dir()` logic in
  * `pipeline.rs`. The Rust actor reads drop-in workflow JSONs from this path at startup
@@ -26,9 +43,45 @@ function workflowOverlayDir() {
     const home = process.env.HOME ?? process.env.USERPROFILE ?? '/tmp';
     return join(home, '.config', 'wicked-core', 'workflows');
 }
-function settingsFilePath() {
+/** Where the daemon persists system settings. Exported so tests write fixtures to the ONE
+ *  spelling of this path (the tests/ tree is audited against spelling core paths itself). */
+export function settingsFilePath() {
     return join(homedir(), '.config', 'wicked-core', 'settings.json');
 }
+/** Read user-registered workflow overlays from `dir` (the same dir `registerWorkflow` writes to).
+ *
+ * Skips: files whose id matches a built-in (those are `_writeBuiltinOverlay` artifacts written FOR
+ * the Rust actor, not user workflows — including them would duplicate a built-in in `listWorkflows`),
+ * non-`.json` files, and any file that does not parse into a `{id, phases[]}` shape (the Rust actor
+ * skips an unreadable overlay too, so crew must not surface one it can't). A missing dir yields `[]`.
+ *
+ * Exported so the FINDING-002 restart-hydration path is unit-testable without spawning a Core. */
+export function readOverlayWorkflows(dir, builtinIds) {
+    let files;
+    try {
+        files = readdirSync(dir);
+    }
+    catch {
+        return []; // no overlay dir yet → nothing registered
+    }
+    const out = [];
+    for (const file of files) {
+        if (!file.endsWith('.json'))
+            continue;
+        const id = file.slice(0, -'.json'.length);
+        if (builtinIds.has(id))
+            continue; // a built-in overlay, not a user workflow
+        try {
+            const def = JSON.parse(readFileSync(join(dir, file), 'utf8'));
+            if (def && typeof def.id === 'string' && Array.isArray(def.phases))
+                out.push(def);
+        }
+        catch {
+            // Unparseable overlay — core would skip it at load, so crew skips it too.
+        }
+    }
+    return out;
+}
 /** Find the wicked-core standalone binary for the gate-hook command.
  * Checks common install locations so the Rust actor can build a correct
  * hook command even when loaded as a napi addon (where current_exe() = node).
@@ -58,6 +111,31 @@ function locateWickedCoreExe() {
 // `subscribe` seam has a blast radius of exactly one file.
 const require = createRequire(import.meta.url);
 const { Core } = require('wicked-core-ts');
+/**
+ * Does the installed wicked-core-ts addon understand `LaunchOptions.extraWriteRoots` (≥ 0.6.1)?
+ *
+ * A napi object silently IGNORES fields the addon doesn't declare, so passing the option to an
+ * older addon would launch a run whose boundary never widened — the worker then gets a boundary
+ * deny on the very deliverable path the caller declared (the crew#263 failure, resurrected
+ * silently). Fail CLOSED on version instead: same doctrine as the `projectId` guard below.
+ */
+function addonSupportsExtraWriteRoots() {
+    try {
+        // eslint-disable-next-line @typescript-eslint/no-require-imports
+        const pkg = require('wicked-core-ts/package.json');
+        // Match only the numeric MAJOR.MINOR.PATCH prefix: `split('.').map(Number)` returns NaN on
+        // pre-release/build suffixes (`0.6.1-beta.1`), which would fail-closed a capable addon
+        // (Copilot). No match ⇒ unparseable ⇒ fail closed.
+        const m = /^(\d+)\.(\d+)\.(\d+)/.exec(pkg.version ?? '');
+        if (!m)
+            return false;
+        const [maj, min, pat] = [Number(m[1]), Number(m[2]), Number(m[3])];
+        return maj > 0 || min > 6 || (min === 6 && pat >= 1);
+    }
+    catch {
+        return false;
+    }
+}
 // ── Built-in workflow definitions (crew#44) ──────────────────────────────────
 // Static mirrors of wicked-core workflow defs: feature, bug, migration, survey-repo,
 // domain-graph-slice, memories, collab, onboarding, chat, and domain-extraction.
@@ -98,7 +176,7 @@ const CORE_SEEDED_WORKFLOWS = new Set(['feature', 'bug', 'migration', 'onboardin
  * moves. This is display only: as of FINDING-049 these defs are never written to core's overlay dir
  * (see CORE_SEEDED_WORKFLOWS), so a stale value here cannot reach the engine.
  */
-const EVIDENCE_FLOOR_PIN = '2fcde907d57f3ee2';
+const EVIDENCE_FLOOR_PIN = 'e2e7af1db9e48454';
 export const BUILTIN_WORKFLOWS = [
     {
         id: 'chat',
@@ -133,7 +211,7 @@ export const BUILTIN_WORKFLOWS = [
             { id: 'design', kind: 'recon', gate_type: 'strategy', gate: 'auto', executes_code: false, verified_evidence: false, required_deliverables: [], depends_on: ['clarify'], role: 'neutral', skill_ref: null, allowed_skills: [], validator_pin: null },
             { id: 'build', kind: 'build', gate_type: 'execution', gate: 'auto', executes_code: true, verified_evidence: false, required_deliverables: [], depends_on: ['design'], role: 'creator', skill_ref: null, allowed_skills: [], validator_pin: null },
             { id: 'adversarial-review', kind: 'review', gate_type: 'execution', gate: { human_confirm: { unconditional: false } }, executes_code: false, verified_evidence: false, required_deliverables: [], depends_on: ['build'], role: 'evaluator', skill_ref: null, allowed_skills: [], validator_pin: EVIDENCE_FLOOR_PIN },
-            { id: 'test', kind: 'test', gate_type: 'execution', gate: { human_confirm_if: 'verdict_not_pass' }, executes_code: false, verified_evidence: true, required_deliverables: [], depends_on: ['build'], role: 'neutral', skill_ref: null, allowed_skills: [], validator_pin: null },
+            { id: 'test', kind: 'test', gate_type: 'execution', gate: { human_confirm_if: 'verdict_not_pass' }, executes_code: false, verified_evidence: true, required_deliverables: [], depends_on: ['build'], role: 'neutral', skill_ref: null, allowed_skills: [], validator_pin: EVIDENCE_FLOOR_PIN },
             { id: 'review', kind: 'review', gate_type: 'execution', gate: 'auto', executes_code: false, verified_evidence: false, required_deliverables: [], depends_on: ['test'], role: 'neutral', skill_ref: null, allowed_skills: [], validator_pin: null },
         ],
     },
@@ -157,12 +235,19 @@ export const BUILTIN_WORKFLOWS = [
         ],
     },
     {
+        // MUST stay byte-identical to wicked-core/workflows/survey-repo.json — crew's overlay write is the
+        // ONLY def the engine resolves at runtime (core does not seed survey-repo), so a stale mirror here
+        // silently runs the OLD def. The pre-fix mirror carried 3 phases with no `instructions` and no
+        // `synthesize`, so survey-repo ran 3 near-identical prompts and produced no run-level synthesis —
+        // exactly FINDING-011, still live because the fix only landed in the core JSON the runtime ignores.
+        // Guarded by builtin-overlay-shadow.test.ts (survey-repo is now in MIRRORED_IDS).
         id: 'survey-repo',
         is_system: true,
         phases: [
-            { id: 'structure', kind: 'recon', gate_type: 'value', gate: 'auto', executes_code: false, verified_evidence: false, required_deliverables: [], depends_on: [], role: 'neutral', skill_ref: null, allowed_skills: [], validator_pin: null },
-            { id: 'stack', kind: 'recon', gate_type: 'value', gate: 'auto', executes_code: false, verified_evidence: false, required_deliverables: [], depends_on: ['structure'], role: 'neutral', skill_ref: null, allowed_skills: [], validator_pin: null },
-            { id: 'conventions', kind: 'recon', gate_type: 'value', gate: 'auto', executes_code: false, verified_evidence: false, required_deliverables: [], depends_on: ['stack'], role: 'neutral', skill_ref: null, allowed_skills: [], validator_pin: null },
+            { id: 'structure', kind: 'recon', instructions: 'Map the repository layout only: top-level directories, entry points, and where source, tests, config, and docs live. Do not analyze languages, dependencies, or conventions — later phases cover those.', gate_type: 'value', gate: 'auto', executes_code: false, verified_evidence: false, required_deliverables: [], depends_on: [], role: 'neutral', skill_ref: null, allowed_skills: [], validator_pin: null },
+            { id: 'stack', kind: 'recon', instructions: 'Identify the technology stack from the manifests (package.json, Cargo.toml, pyproject.toml, ...): languages, frameworks, build tools, key dependencies. Build on the structure summary provided as prior context; do not re-map the layout.', gate_type: 'value', gate: 'auto', executes_code: false, verified_evidence: false, required_deliverables: [], depends_on: ['structure'], role: 'neutral', skill_ref: null, allowed_skills: [], validator_pin: null },
+            { id: 'conventions', kind: 'recon', instructions: 'Identify the working conventions: naming, module boundaries, test placement and style, lint/format configuration, CI expectations. Build on the prior phases\' outputs provided as context; do not re-survey structure or stack.', gate_type: 'value', gate: 'auto', executes_code: false, verified_evidence: false, required_deliverables: [], depends_on: ['stack'], role: 'neutral', skill_ref: null, allowed_skills: [], validator_pin: null },
+            { id: 'synthesize', kind: 'recon', instructions: 'Do not re-survey the repository. Merge the three prior phase outputs provided as context into one coherent survey — structure, then stack, then conventions — resolving overlaps and flagging any contradictions between them.', gate_type: 'value', gate: 'auto', executes_code: false, verified_evidence: false, required_deliverables: [], depends_on: ['structure', 'stack', 'conventions'], role: 'neutral', skill_ref: null, allowed_skills: [], validator_pin: null },
         ],
     },
     {
@@ -211,11 +296,20 @@ export const BUILTIN_WORKFLOWS = [
     {
         id: 'domain-extraction',
         phases: [
-            { id: 'survey', kind: 'recon', gate_type: null, gate: 'auto', executes_code: false, verified_evidence: false, required_deliverables: ['legacy-graph.digest.txt'], depends_on: [], role: 'neutral', skill_ref: 'wicked-garden-domain', allowed_skills: [], validator_pin: null },
-            { id: 'analyze', kind: 'recon', gate_type: null, gate: 'auto', executes_code: false, verified_evidence: false, required_deliverables: ['analysis-report.json'], depends_on: ['survey'], role: 'neutral', skill_ref: 'wicked-garden-domain', allowed_skills: [], validator_pin: null },
-            { id: 'extract', kind: 'recon', gate_type: 'value', gate: 'auto', executes_code: false, verified_evidence: false, required_deliverables: ['annotations.jsonl'], depends_on: ['analyze'], role: 'creator', skill_ref: 'wicked-garden-domain-extractor', allowed_skills: [], validator_pin: null },
-            { id: 'coverage', kind: 'test', gate_type: 'execution', gate: { human_confirm_if: 'verdict_not_pass' }, executes_code: false, verified_evidence: true, required_deliverables: ['coverage-report.json'], depends_on: ['extract'], role: 'evaluator', skill_ref: 'wicked-garden-domain-coverage', allowed_skills: [], validator_pin: 'adaf3e9b6d088f1a' },
-            { id: 'domain-graph', kind: 'build', gate_type: 'strategy', gate: { human_confirm: { unconditional: false } }, executes_code: false, verified_evidence: false, required_deliverables: ['requirements_graph.json'], depends_on: ['coverage'], role: 'neutral', skill_ref: 'wicked-garden-domain-modeler', allowed_skills: [], validator_pin: null },
+            // required_deliverables reconciled with core (wicked-core/workflows/domain-extraction.json):
+            // survey/analyze/extract annotate the estate STORE and domain-graph now PERSISTS the graph
+            // into the store (not a JSON file), so their evidence is DB state — verified by the coverage
+            // gate (reads the store) and domain-graph's fail-closed-on-coverage<1.0 — not a worktree file.
+            // Only coverage emits a genuine standalone report the deterministic floor reads. Declaring
+            // phantom files failed every phase under core's FINDING-101 deliverable gate.
+            { id: 'survey', kind: 'recon', gate_type: null, gate: 'auto', executes_code: false, verified_evidence: false, required_deliverables: [], depends_on: [], role: 'neutral', skill_ref: 'wicked-garden-domain', allowed_skills: [], validator_pin: null },
+            { id: 'analyze', kind: 'recon', gate_type: null, gate: 'auto', executes_code: false, verified_evidence: false, required_deliverables: [], depends_on: ['survey'], role: 'neutral', skill_ref: 'wicked-garden-domain', allowed_skills: [], validator_pin: null },
+            { id: 'extract', kind: 'recon', gate_type: 'value', gate: 'auto', executes_code: false, verified_evidence: false, required_deliverables: [], depends_on: ['analyze'], role: 'creator', skill_ref: 'wicked-garden-domain-extractor', allowed_skills: [], validator_pin: null },
+            { id: 'coverage', kind: 'test', gate_type: 'execution', gate: { human_confirm_if: 'verdict_not_pass' }, executes_code: false, verified_evidence: true, required_deliverables: ['coverage-report.json'], depends_on: ['extract'], role: 'evaluator', skill_ref: 'wicked-garden-domain-coverage', allowed_skills: [], validator_pin: 'bfe4020a365c598b' },
+            // domain-graph is a DETERMINISTIC Tool that runs `wicked-core domain-graph`, which PERSISTS the
+            // domain/requirement/rule graph into the repo store (core#237) — not an LLM skill that could hit
+            // a non-persisting hermetic fallback. Mirrors wicked-core/workflows/domain-extraction.json.
+            { id: 'domain-graph', executor: { type: 'tool', cmd: ['wicked-core', 'domain-graph', '--db', '{code_graph_db}', '--out', 'requirements_graph.json'] }, kind: 'build', gate_type: 'strategy', gate: { human_confirm: { unconditional: false } }, executes_code: false, verified_evidence: false, required_deliverables: [], depends_on: ['coverage'], role: 'neutral', skill_ref: null, allowed_skills: [], validator_pin: null },
         ],
     },
 ];
@@ -237,6 +331,17 @@ export class ChatUnsupportedError extends Error {
         this.name = 'ChatUnsupportedError';
     }
 }
+/**
+ * The project surface (DES-PROJECT-001) is not available in this deployment — the installed
+ * wicked-core-ts predates 0.6.0. Typed for the same reason as `ChatUnsupportedError`: the routes
+ * answer 501 ("upgrade the engine") on this, never 400 ("fix your request").
+ */
+export class ProjectsUnsupportedError extends Error {
+    constructor(what) {
+        super(`${what} is not supported by this wicked-core build (needs wicked-core-ts >= 0.6.0)`);
+        this.name = 'ProjectsUnsupportedError';
+    }
+}
 /**
  * `resolveElicitation` is not available in this deployment — the NAPI binding has not
  * landed in the installed `wicked-core-ts` yet (DES-002 §4 P-1 stub).
@@ -316,6 +421,21 @@ function quarantineStaleOnboardingOverlay() {
  * endpoint and the WS fan-out funnel through this stable API — so when the
  * in-flight core-ts subscribe/teardown signature lands, only this file changes.
  */
+/** The ids of a workflow's phases that carry a HUMAN gate (`human_confirm` unconditional, or the
+ * conditional `human_confirm_if`) — i.e. the phases that will PAUSE for a person.
+ *
+ * FINDING-023 (residual): core#208 made a workflow's phase gate deliberately WIN over a run-level
+ * `humanConfirm: none` (it pauses, with a self-disclosing note), but there was no way to learn a
+ * workflow's gates BEFORE launching it — an operator picking `none` for an unattended run only found
+ * out when it paused. Surfacing this on `GET /workflows/:id` is that missing launch-time signal.
+ * `'auto'` (the string form) is NOT a human gate. */
+export function humanGatePhaseIds(wf) {
+    return wf.phases
+        .filter((p) => typeof p.gate === 'object' &&
+        p.gate !== null &&
+        ('human_confirm' in p.gate || 'human_confirm_if' in p.gate))
+        .map((p) => p.id);
+}
 export class CoreAdapter {
     core;
     subscription;
@@ -408,6 +528,23 @@ export class CoreAdapter {
             opts.humanConfirm = input.humanConfirm;
         if (input.repoRef !== undefined)
             opts.repoRef = input.repoRef;
+        if (input.projectId !== undefined) {
+            // Fail CLOSED on an old addon: silently dropping projectId would launch an unfiled run the
+            // caller believed was filed — the exact failure §2.2 exists to prevent.
+            if (typeof this.core.projectCreate !== 'function') {
+                throw new ProjectsUnsupportedError('Filing a run into a project');
+            }
+            opts.projectId = input.projectId;
+        }
+        if (input.extraWriteRoots !== undefined && input.extraWriteRoots.length > 0) {
+            // Fail CLOSED on an old addon (napi ignores undeclared fields): a silently-dropped
+            // widening resurrects the crew#263 boundary deny on the declared deliverable path.
+            if (!addonSupportsExtraWriteRoots()) {
+                throw new Error('extraWriteRoots needs wicked-core-ts >= 0.6.1; the installed addon would silently ' +
+                    'ignore it and the run would be denied writing its own deliverable');
+            }
+            opts.extraWriteRoots = input.extraWriteRoots;
+        }
         if (input.workflow !== undefined) {
             opts.workflow = input.workflow;
             // Ensure DROP-IN workflow definitions are present in the Rust overlay dir on first use.
@@ -442,6 +579,20 @@ export class CoreAdapter {
     cancelRun(runId) {
         return this.core.cancelRun(runId);
     }
+    /**
+     * Archive (or unarchive) a TERMINAL run (crew#265) — write-off, not delete. Resolves `true`
+     * when the session existed, `false` for an unknown id (→ 404); REJECTS when the run is
+     * non-terminal (the route answers 409). Fail-closed on an old addon: method-presence guard,
+     * same doctrine as `injectWorkerMessage`.
+     */
+    async archiveRun(runId, archived, note) {
+        const archive = this.core.archiveRun;
+        if (typeof archive !== 'function') {
+            throw new Error('Run archival needs wicked-core-ts >= 0.6.2; this build does not support it');
+        }
+        // JSON-encoded bool by contract (parse, never truthiness-test — 'false' is truthy).
+        return JSON.parse(await archive.call(this.core, runId, archived, note ?? null));
+    }
     /** Inject an operator message into a run's active PTY worker(s). target="all" or a CLI key. */
     injectWorkerMessage(runId, message, target) {
         if (typeof this.core.injectWorkerMessage !== 'function') {
@@ -506,6 +657,87 @@ export class CoreAdapter {
     async workOutput(unitId) {
         return JSON.parse(await this.core.workOutput(unitId));
     }
+    // ── Projects (DES-PROJECT-001) ──────────────────────────────────────────────
+    // 1:1 maps of the 0.6.0 engine surface. Writes ride the single-writer actor;
+    // reads are read-only store opens inside the addon. Every method throws
+    // ProjectsUnsupportedError on a pre-0.6.0 addon (routes answer 501).
+    /** True when the installed addon carries the project surface (0.6.0+). */
+    projectsSupported() {
+        return typeof this.core.projectCreate === 'function';
+    }
+    requireProjects(fn, what) {
+        if (typeof fn !== 'function')
+            throw new ProjectsUnsupportedError(what);
+        return fn;
+    }
+    async projectCreate(name, description) {
+        const fn = this.requireProjects(this.core.projectCreate, 'Creating a project');
+        return JSON.parse(await fn.call(this.core, name, description ?? null));
+    }
+    async projectUpdate(id, patch) {
+        const fn = this.requireProjects(this.core.projectUpdate, 'Updating a project');
+        return JSON.parse(await fn.call(this.core, id, patch.name ?? null, patch.description ?? null, patch.status ?? null));
+    }
+    /** Every stored project (all statuses, newest first). The `default` project is NOT here — the
+     *  route layer synthesizes it (ADR §7: computed, never stored). */
+    async projectList() {
+        const fn = this.requireProjects(this.core.projectList, 'Listing projects');
+        return JSON.parse(await fn.call(this.core));
+    }
+    async projectGet(id) {
+        const fn = this.requireProjects(this.core.projectGet, 'Reading a project');
+        return JSON.parse(await fn.call(this.core, id));
+    }
+    async projectMembers(projectId) {
+        const fn = this.requireProjects(this.core.projectMembers, 'Listing project members');
+        return JSON.parse(await fn.call(this.core, projectId));
+    }
+    /** Attach a member. `created:false` = the idempotent duplicate hit (emit no event for it). */
+    async projectMemberAttach(projectId, kind, ref, meta, attachedBy) {
+        const fn = this.requireProjects(this.core.projectMemberAttach, 'Attaching a project member');
+        return JSON.parse(await fn.call(this.core, projectId, kind, ref, meta !== undefined ? JSON.stringify(meta) : null, attachedBy ?? null));
+    }
+    /** Detach (tombstone). `false` = no such live member on that project (the route's 404). */
+    async projectMemberDetach(projectId, memberId) {
+        const fn = this.requireProjects(this.core.projectMemberDetach, 'Detaching a project member');
+        return JSON.parse(await fn.call(this.core, projectId, memberId));
+    }
+    /** The projects holding a live `(kind, ref)` membership — the run→project reverse read. */
+    async memberProjects(kind, ref) {
+        const fn = this.requireProjects(this.core.memberProjects, 'Resolving a member’s projects');
+        return JSON.parse(await fn.call(this.core, kind, ref));
+    }
+    /**
+     * Durable interaction requests (ADR §5.3), newest first — or `null` when this addon predates
+     * the binding (the `runEvents` convention: a missing capability must stay distinguishable from
+     * "no open prompts", or the caches' fallback chain misreports upgrades as empty inboxes).
+     */
+    async interactionRequests(sessionId, status) {
+        if (typeof this.core.interactionRequests !== 'function')
+            return null;
+        return JSON.parse(await this.core.interactionRequests(sessionId ?? null, status ?? null));
+    }
+    // ── The foundation record (ADR §3.2): charter writes + record probes ────────
+    /** Capture a memory at a STRICT `kind:id[/…]` scope (the engine refuses malformed segments). */
+    async captureMemory(content, scope) {
+        const fn = this.requireProjects(this.core.captureMemory, 'Capturing a memory');
+        await fn.call(this.core, content, scope);
+    }
+    /** Memories within `scope`'s subtree, newest first — the ADR's memory.coverage probe. */
+    async listMemories(scope, limit) {
+        const fn = this.requireProjects(this.core.listMemories, 'Listing memories');
+        return JSON.parse(await fn.call(this.core, scope, limit));
+    }
+    /** Ingest a document (title + chunks) into the knowledge store. Returns the chunk count. */
+    async ingestKnowledge(title, chunks) {
+        const fn = this.requireProjects(this.core.ingestKnowledge, 'Ingesting knowledge');
+        return JSON.parse(await fn.call(this.core, title, JSON.stringify(chunks)));
+    }
+    /** Recall up to `k` knowledge chunks relevant to `query`. */
+    async recallKnowledge(query, k) {
+        const fn = this.requireProjects(this.core.recallKnowledge, 'Recalling knowledge');
+        return JSON.parse(await fn.call(this.core, query, k));
+    }
     // ── Chat sessions (core#134 / crew#165) ────────────────────────────────────
     async chatOpen(chatId, clis, cwd) {
         const raw = await this.core.chatOpen(chatId, JSON.stringify(clis), cwd ?? null);
@@ -743,6 +975,25 @@ export class CoreAdapter {
     async getCoverageReport() {
         return JSON.parse(await this.core.getCoverageReport());
     }
+    /**
+     * Coverage for ONE registered repo, computed over that repo's OWN code graph (FINDING-009). Unlike
+     * {@link getCoverageReport} — which reads the daemon store and reports a vacuous `coverage: 1.0` that
+     * names no repo — this resolves `repoRef` in the registry and recomputes over its `code_graph_db`.
+     * The core rejects an unknown repo (never a silent vacuous report), so this throws for a bad ref.
+     */
+    async getCoverageReportForRepo(repoRef) {
+        // The napi binding returns a JSON string (`serde_json::to_string`); parse it with a guard that
+        // names the method on either a non-string return or invalid JSON (Copilot #227).
+        return parseEngineJson(await this.core.getCoverageReportForRepo(repoRef), 'getCoverageReportForRepo');
+    }
+    /**
+     * Node-count-by-kind summary of ONE registered repo's code graph, over that repo's OWN store
+     * (#122) — what the estate graph actually holds for the repo, so an operator can see it was
+     * populated. The core rejects an unknown repo, so this throws for a bad ref.
+     */
+    async getGraphKindsForRepo(repoRef) {
+        return parseEngineJson(await this.core.getGraphKindsForRepo(repoRef), 'getGraphKindsForRepo');
+    }
     // ── Governance writes (crew#42) ────────────────────────────────────────────
     /** Upsert a governance policy via the single-writer actor. */
     async upsertPolicy(policy) {
@@ -791,7 +1042,28 @@ export class CoreAdapter {
     // workflows are added to `userWorkflows` and persisted to disk; the Rust actor
     // picks them up via `register_workflow` NAPI (when available) for immediate use.
     userWorkflows = new Map();
+    /** Whether {@link hydrateFromOverlay} has run this process lifetime. */
+    overlayHydrated = false;
+    /** Load user-registered workflows persisted to the overlay dir into `userWorkflows`, ONCE.
+     *
+     * FINDING-002 residual: `registerWorkflow` writes each def to the overlay dir AND to the in-memory
+     * `userWorkflows` Map, but the Map is process-local and empty on every daemon restart, and nothing
+     * read the dir back. So after a restart the Rust actor (which DOES load the overlay dir at startup)
+     * would launch a user workflow that `listWorkflows()`/`GET /workflows` no longer showed — it
+     * vanished from the registry while remaining runnable. Hydrating from the same dir the writer uses
+     * makes the two views agree again. */
+    hydrateFromOverlay() {
+        if (this.overlayHydrated)
+            return;
+        this.overlayHydrated = true;
+        const builtinIds = new Set(BUILTIN_WORKFLOWS.map((w) => w.id));
+        for (const def of readOverlayWorkflows(workflowOverlayDir(), builtinIds)) {
+            if (!this.userWorkflows.has(def.id))
+                this.userWorkflows.set(def.id, def);
+        }
+    }
     listWorkflows() {
+        this.hydrateFromOverlay();
         // Builtins first (stable ordering), but user-registered workflows take precedence when
         // ids conflict — consistent with getWorkflow() which prefers userWorkflows.get().
         const seen = new Set();
@@ -812,6 +1084,7 @@ export class CoreAdapter {
         return result;
     }
     getWorkflow(id) {
+        this.hydrateFromOverlay();
         return this.userWorkflows.get(id) ?? BUILTIN_WORKFLOWS.find((w) => w.id === id) ?? null;
     }
     /** Write a built-in workflow definition to the Rust overlay dir (and hot-register when possible).
@@ -947,6 +1220,14 @@ export class CoreAdapter {
                 if (typeof v !== 'number' || !Number.isInteger(v) || v < 1 || v > 10000)
                     delete parsed.graphNodeLimit;
             }
+            // worker_config_root (seat sign-in): absolute path or "" (= engine default). A hand-edited
+            // relative path is dropped rather than exported as WICKED_WORKER_HOME, where the engine
+            // would resolve it against an arbitrary spawn cwd.
+            if ('worker_config_root' in parsed) {
+                const r = parsed.worker_config_root;
+                if (typeof r !== 'string' || (r !== '' && !isAbsolute(r)))
+                    delete parsed.worker_config_root;
+            }
             return { ...DEFAULT_SETTINGS, ...parsed };
         }
         catch {