wicked-crew 0.7.1 → 0.7.2

package/dist/api/delivery-index.d.ts

@@ -0,0 +1,61 @@
+/**
+ * The run→delivered-PR index (CREW-UX-8, crew#321).
+ *
+ * `LaunchRunBody.deliver?: 'pr'` is input-only; the deliver phase computes the PR URL
+ * (`core/deliver.ts` — re-derived from the remote, refused without one) and prints it as the
+ * unit's last output line, which is console text, not a wire. This index is the read-side
+ * latency layer that lets the run DTOs echo `session.delivery` on BOTH `GET /runs` and
+ * `GET /runs/:id` without a `workOutput` read per request — the persisted field that makes a
+ * list surface's "4 of 5 siblings delivered" rollup affordable without an N-fetch fan-out
+ * (wicked-studio#27).
+ *
+ * Mirrors `RetryIndex`/`GuidanceIndex`'s posture exactly: the DURABLE record is the audit
+ * trail (the engine run record has no such field) — action `run.delivered`, `detail.url` —
+ * hydrated once at server start (best-effort: a missing or unreadable trail leaves deliveries
+ * blank, the pre-#321 behavior, not an error) and updated at the same post-terminal point
+ * that writes the audit entry.
+ *
+ * KNOWN LIMIT (stated in the contract too): runs that delivered before this landed have no
+ * `run.delivered` entry and carry no field. Do NOT backfill by scanning `work_output` at
+ * hydrate — that is an unbounded boot cost. Historical runs still resolve their URL through
+ * the per-run output endpoint.
+ */
+import type { AuditLog } from './audit.js';
+import type { SessionView, WorkUnit } from '../core/types.js';
+/** The wire shape `AgentSession.delivery` carries (api-types 0.11.0). */
+export interface SessionDelivery {
+    kind: 'pull_request';
+    url: string;
+}
+/**
+ * The PR URL in a deliver transcript — crew's own extraction, mirrored
+ * (`core/deliver.ts`: `grep -Eo 'https://[^[:space:]]+/pull/[0-9]+' | tail -1`). Requiring
+ * the digits keeps `…/pull/new/<branch>` — the create-PR form git prints on every push —
+ * from ever matching; the LAST match wins, same as `tail -1`.
+ */
+export declare function prUrlFrom(text: string): string | null;
+/**
+ * This run's deliver unit, or `null`. The composed id suffix (`<base>:deliver`) is the
+ * primary key; the `tool_cmd` probe is the fallback for an operator OVERLAY that carried the
+ * deliver phase under its own name — do NOT key on `workflow_id`, which is plain for
+ * overlay-carried deliver phases (crew#321).
+ */
+export declare function deliverUnitOf(view: SessionView): WorkUnit | null;
+export declare class DeliveryIndex {
+    private readonly runToUrl;
+    /**
+     * Load deliveries from EVERY `run.delivered` entry in the trail — exhaustively, not capped
+     * (BRIEF-UX-002 C5, the same defect class as `RetryIndex.hydrate`: a durable record must
+     * not vanish because 1000+ newer writes landed on top of it). The trail answers newest
+     * first, so the FIRST entry seen per run wins; older entries for the same run are
+     * superseded and skipped. Still best-effort, like its siblings; cost is one full-file scan
+     * at boot. (Third exhaustive trail scan at boot, after RetryIndex and GuidanceIndex — a
+     * FOURTH should trigger consolidating them into one pass, per crew#321.)
+     */
+    hydrate(audit: AuditLog, log?: (msg: string) => void): Promise<void>;
+    /** Record the run's delivered PR URL (idempotent — the newest write wins). */
+    set(runId: string, url: string): void;
+    /** The delivery for this run, or `undefined` (the DTO spells that as an ABSENT field). */
+    deliveryFor(runId: string): SessionDelivery | undefined;
+}
+//# sourceMappingURL=delivery-index.d.ts.map

package/dist/api/delivery-index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delivery-index.d.ts","sourceRoot":"","sources":["../../src/api/delivery-index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE9D,yEAAyE;AACzE,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,cAAc,CAAC;IACrB,GAAG,EAAE,MAAM,CAAC;CACb;AAED;;;;;GAKG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAGrD;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,WAAW,GAAG,QAAQ,GAAG,IAAI,CAIhE;AAED,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA6B;IAEtD;;;;;;;;OAQG;IACG,OAAO,CAAC,KAAK,EAAE,QAAQ,EAAE,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAsB1E,8EAA8E;IAC9E,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI;IAIrC,0FAA0F;IAC1F,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS;CAIxD"}

package/dist/api/delivery-index.js

@@ -0,0 +1,87 @@
+/**
+ * The run→delivered-PR index (CREW-UX-8, crew#321).
+ *
+ * `LaunchRunBody.deliver?: 'pr'` is input-only; the deliver phase computes the PR URL
+ * (`core/deliver.ts` — re-derived from the remote, refused without one) and prints it as the
+ * unit's last output line, which is console text, not a wire. This index is the read-side
+ * latency layer that lets the run DTOs echo `session.delivery` on BOTH `GET /runs` and
+ * `GET /runs/:id` without a `workOutput` read per request — the persisted field that makes a
+ * list surface's "4 of 5 siblings delivered" rollup affordable without an N-fetch fan-out
+ * (wicked-studio#27).
+ *
+ * Mirrors `RetryIndex`/`GuidanceIndex`'s posture exactly: the DURABLE record is the audit
+ * trail (the engine run record has no such field) — action `run.delivered`, `detail.url` —
+ * hydrated once at server start (best-effort: a missing or unreadable trail leaves deliveries
+ * blank, the pre-#321 behavior, not an error) and updated at the same post-terminal point
+ * that writes the audit entry.
+ *
+ * KNOWN LIMIT (stated in the contract too): runs that delivered before this landed have no
+ * `run.delivered` entry and carry no field. Do NOT backfill by scanning `work_output` at
+ * hydrate — that is an unbounded boot cost. Historical runs still resolve their URL through
+ * the per-run output endpoint.
+ */
+/**
+ * The PR URL in a deliver transcript — crew's own extraction, mirrored
+ * (`core/deliver.ts`: `grep -Eo 'https://[^[:space:]]+/pull/[0-9]+' | tail -1`). Requiring
+ * the digits keeps `…/pull/new/<branch>` — the create-PR form git prints on every push —
+ * from ever matching; the LAST match wins, same as `tail -1`.
+ */
+export function prUrlFrom(text) {
+    const matches = text.match(/https:\/\/\S+\/pull\/\d+/g);
+    return matches === null ? null : (matches[matches.length - 1] ?? null);
+}
+/**
+ * This run's deliver unit, or `null`. The composed id suffix (`<base>:deliver`) is the
+ * primary key; the `tool_cmd` probe is the fallback for an operator OVERLAY that carried the
+ * deliver phase under its own name — do NOT key on `workflow_id`, which is plain for
+ * overlay-carried deliver phases (crew#321).
+ */
+export function deliverUnitOf(view) {
+    const byId = view.units.find((u) => u.id.endsWith(':deliver'));
+    if (byId !== undefined)
+        return byId;
+    return view.units.find((u) => (u.tool_cmd ?? []).join(' ').includes('gh pr create')) ?? null;
+}
+export class DeliveryIndex {
+    runToUrl = new Map();
+    /**
+     * Load deliveries from EVERY `run.delivered` entry in the trail — exhaustively, not capped
+     * (BRIEF-UX-002 C5, the same defect class as `RetryIndex.hydrate`: a durable record must
+     * not vanish because 1000+ newer writes landed on top of it). The trail answers newest
+     * first, so the FIRST entry seen per run wins; older entries for the same run are
+     * superseded and skipped. Still best-effort, like its siblings; cost is one full-file scan
+     * at boot. (Third exhaustive trail scan at boot, after RetryIndex and GuidanceIndex — a
+     * FOURTH should trigger consolidating them into one pass, per crew#321.)
+     */
+    async hydrate(audit, log) {
+        try {
+            const seen = new Set();
+            for (const entry of await audit.readAll({ action: 'run.delivered' })) {
+                if (typeof entry.runId !== 'string')
+                    continue;
+                if (seen.has(entry.runId))
+                    continue;
+                // Newest entry decides, even when malformed — marking the run seen BEFORE the url
+                // check keeps a corrupt newest write from resurrecting an older one (the #312 rule).
+                seen.add(entry.runId);
+                const url = entry.detail?.['url'];
+                if (typeof url !== 'string' || url === '')
+                    continue;
+                this.runToUrl.set(entry.runId, url);
+            }
+        }
+        catch (err) {
+            log?.(`[runs] delivery-index hydrate failed (prior runs read as undelivered until restart): ${err instanceof Error ? err.message : String(err)}`);
+        }
+    }
+    /** Record the run's delivered PR URL (idempotent — the newest write wins). */
+    set(runId, url) {
+        this.runToUrl.set(runId, url);
+    }
+    /** The delivery for this run, or `undefined` (the DTO spells that as an ABSENT field). */
+    deliveryFor(runId) {
+        const url = this.runToUrl.get(runId);
+        return url === undefined ? undefined : { kind: 'pull_request', url };
+    }
+}
+//# sourceMappingURL=delivery-index.js.map

package/dist/api/delivery-index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delivery-index.js","sourceRoot":"","sources":["../../src/api/delivery-index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAWH;;;;;GAKG;AACH,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;IACxD,OAAO,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;AACzE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,IAAiB;IAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;IAC/D,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACpC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,IAAI,IAAI,CAAC;AAC/F,CAAC;AAED,MAAM,OAAO,aAAa;IACP,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAEtD;;;;;;;;OAQG;IACH,KAAK,CAAC,OAAO,CAAC,KAAe,EAAE,GAA2B;QACxD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;YAC/B,KAAK,MAAM,KAAK,IAAI,MAAM,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,EAAE,CAAC;gBACrE,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;oBAAE,SAAS;gBAC9C,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC;oBAAE,SAAS;gBACpC,kFAAkF;gBAClF,qFAAqF;gBACrF,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACtB,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC;gBAClC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,EAAE;oBAAE,SAAS;gBACpD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,EAAE,CACH,wFACE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,EAAE,CACH,CAAC;QACJ,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,GAAG,CAAC,KAAa,EAAE,GAAW;QAC5B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAChC,CAAC;IAED,0FAA0F;IAC1F,WAAW,CAAC,KAAa;QACvB,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACrC,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC;IACvE,CAAC;CACF"}

package/dist/api/governance-wiki.d.ts

@@ -0,0 +1,28 @@
+/**
+ * The `/api/v1/governance/wiki/*` surface (wiki-mgmt) — the management wire for the graph-backed
+ * architecture wiki, so the wiki is VISIBLE (not just queryable): a scoreboard that tells a
+ * populated wiki from an ingested-once-and-decaying one, and a meta probe cheap enough for the
+ * UI to call on mount so an empty store shows an honest "nothing seeded — here's the runbook"
+ * instead of a blank table.
+ *
+ * Thin by design, like `campaigns/routes.ts`: the scoreboard is computed by wicked-core's
+ * governance layer (`wicked-governance::scoreboard`, read-only `open_store_ro` — safe beside the
+ * live single-writer daemon); the daemon keeps no shadow wiki state. Error posture mirrors the
+ * campaign surface: a build whose engine addon lacks the `governanceScoreboard` binding answers
+ * 501 (`GovernanceScoreboardUnsupportedError` — "upgrade the engine"), never 400 ("fix your
+ * request").
+ *
+ * Rule/ruleset BROWSE and RETIRE deliberately live elsewhere — this module adds no second door:
+ * `GET /governance/rules` (facet-filterable, retired rows flagged) is the browse surface and
+ * `DELETE /governance/rules/:id` (retire-not-delete, FINDING-038) is the kill switch, both in
+ * `api/routes.ts`.
+ */
+import type { FastifyInstance } from 'fastify';
+import { type CoreAdapter } from '../core/adapter.js';
+/**
+ * The authoring guide the honest empty state points at: the AW-13 seed runbook — frontmatter
+ * conventions, the `seed_wiki.py` driver, and the `wicked-core rules` ingest/fanout/relink CLIs.
+ */
+export declare const WIKI_AUTHORING_DOC = "https://github.com/mikeparcewski/wicked-core/blob/main/crates/wicked-governance/seed/README.md";
+export declare function registerGovernanceWikiRoutes(app: FastifyInstance, adapter: CoreAdapter): void;
+//# sourceMappingURL=governance-wiki.d.ts.map

package/dist/api/governance-wiki.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"governance-wiki.d.ts","sourceRoot":"","sources":["../../src/api/governance-wiki.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAE/C,OAAO,EAAwC,KAAK,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAM5F;;;GAGG;AACH,eAAO,MAAM,kBAAkB,mGACmE,CAAC;AAMnG,wBAAgB,4BAA4B,CAAC,GAAG,EAAE,eAAe,EAAE,OAAO,EAAE,WAAW,GAAG,IAAI,CAwE7F"}

package/dist/api/governance-wiki.js

@@ -0,0 +1,97 @@
+/**
+ * The `/api/v1/governance/wiki/*` surface (wiki-mgmt) — the management wire for the graph-backed
+ * architecture wiki, so the wiki is VISIBLE (not just queryable): a scoreboard that tells a
+ * populated wiki from an ingested-once-and-decaying one, and a meta probe cheap enough for the
+ * UI to call on mount so an empty store shows an honest "nothing seeded — here's the runbook"
+ * instead of a blank table.
+ *
+ * Thin by design, like `campaigns/routes.ts`: the scoreboard is computed by wicked-core's
+ * governance layer (`wicked-governance::scoreboard`, read-only `open_store_ro` — safe beside the
+ * live single-writer daemon); the daemon keeps no shadow wiki state. Error posture mirrors the
+ * campaign surface: a build whose engine addon lacks the `governanceScoreboard` binding answers
+ * 501 (`GovernanceScoreboardUnsupportedError` — "upgrade the engine"), never 400 ("fix your
+ * request").
+ *
+ * Rule/ruleset BROWSE and RETIRE deliberately live elsewhere — this module adds no second door:
+ * `GET /governance/rules` (facet-filterable, retired rows flagged) is the browse surface and
+ * `DELETE /governance/rules/:id` (retire-not-delete, FINDING-038) is the kill switch, both in
+ * `api/routes.ts`.
+ */
+import { GovernanceScoreboardUnsupportedError } from '../core/adapter.js';
+import { API_PREFIX } from './api-prefix.js';
+const V = API_PREFIX;
+/**
+ * The authoring guide the honest empty state points at: the AW-13 seed runbook — frontmatter
+ * conventions, the `seed_wiki.py` driver, and the `wicked-core rules` ingest/fanout/relink CLIs.
+ */
+export const WIKI_AUTHORING_DOC = 'https://github.com/mikeparcewski/wicked-core/blob/main/crates/wicked-governance/seed/README.md';
+function message(err) {
+    return err instanceof Error ? err.message : String(err);
+}
+export function registerGovernanceWikiRoutes(app, adapter) {
+    // The AW-23 population/connection scoreboard. `?docsRoot=` is the OPTIONAL docs root the
+    // typing half needs (the same directory `rules ingest --dir` consumed — enforcement_class
+    // lives in doc frontmatter, never on the rule node); omitted, the scoreboard still answers
+    // 200 with `typing.available: false` and the reason in-band — a wiki with no local docs
+    // checkout is a normal deployment, not an error.
+    app.get(`${V}/governance/wiki/scoreboard`, {
+        config: {
+            manifest: {
+                responseType: '{ scoreboard: GovernanceScoreboard }',
+                // 501: the installed engine addon predates the governanceScoreboard binding
+                // (wicked-core-ts < 0.7.4) — upgrade the engine, the request was already correct.
+                statusCodes: [200, 500, 501],
+            },
+        },
+    }, async (req, reply) => {
+        // Fastify parses a repeated `?docsRoot=a&docsRoot=b` into an array — take the first, and
+        // TRIM so a whitespace-only value means "no docs root" rather than a doomed doc scan.
+        const raw = req.query.docsRoot;
+        const first = Array.isArray(raw) ? raw[0] : raw;
+        const docsRoot = first?.trim() || undefined;
+        try {
+            const scoreboard = await adapter.governanceScoreboard(docsRoot);
+            return { scoreboard };
+        }
+        catch (err) {
+            if (err instanceof GovernanceScoreboardUnsupportedError) {
+                return reply.code(501).send({ error: err.message });
+            }
+            // An engine/store failure is OURS, not the caller's — there is nothing to fix in a
+            // bare GET, so nothing here maps to 400.
+            return reply.code(500).send({ error: message(err) });
+        }
+    });
+    // The wiki's honest empty-state signal. Works on EVERY addon (listConformanceRules is a
+    // required binding since crew#40), so the UI can always distinguish "nothing seeded — run the
+    // seed runbook" from "the engine can't tell me": `ruleset_count` is `null` (never a fabricated
+    // 0) on a build without the listRuleSets binding, and `scoreboard_available` says up front
+    // whether the scoreboard route will answer 200 here.
+    app.get(`${V}/governance/wiki/meta`, {
+        config: {
+            manifest: {
+                responseType: '{ meta: GovernanceWikiMeta }',
+                statusCodes: [200],
+            },
+        },
+    }, 
+    // Wrapped per crew house style — campaigns/rules/scoreboard all wrap, and studio's
+    // Wiki page reads `body.meta` (a bare seeded:false would read as "cannot tell").
+    async () => {
+        // NOTE: pre-0.7.4 addons funnel listConformanceRules through recall, which skips retired
+        // rows — so `rule_count` counts the LISTABLE rules. That is the right number for "is
+        // anything here": a store holding only retired rules has nothing recallable to show.
+        const rules = await adapter.listConformanceRules();
+        const rulesetCount = await adapter.countRuleSets();
+        return {
+            meta: {
+                seeded: rules.length > 0 || (rulesetCount ?? 0) > 0,
+                ruleset_count: rulesetCount,
+                rule_count: rules.length,
+                scoreboard_available: adapter.wikiScoreboardSupported(),
+                doc: WIKI_AUTHORING_DOC,
+            },
+        };
+    });
+}
+//# sourceMappingURL=governance-wiki.js.map

package/dist/api/governance-wiki.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"governance-wiki.js","sourceRoot":"","sources":["../../src/api/governance-wiki.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAIH,OAAO,EAAE,oCAAoC,EAAoB,MAAM,oBAAoB,CAAC;AAE5F,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAE7C,MAAM,CAAC,GAAG,UAAU,CAAC;AAErB;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAC7B,gGAAgG,CAAC;AAEnG,SAAS,OAAO,CAAC,GAAY;IAC3B,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,GAAoB,EAAE,OAAoB;IACrF,yFAAyF;IACzF,0FAA0F;IAC1F,2FAA2F;IAC3F,wFAAwF;IACxF,iDAAiD;IACjD,GAAG,CAAC,GAAG,CACL,GAAG,CAAC,6BAA6B,EACjC;QACE,MAAM,EAAE;YACN,QAAQ,EAAE;gBACR,YAAY,EAAE,sCAAsC;gBACpD,4EAA4E;gBAC5E,kFAAkF;gBAClF,WAAW,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC;aAC7B;SACF;KACF,EACD,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,yFAAyF;QACzF,sFAAsF;QACtF,MAAM,GAAG,GAAI,GAAG,CAAC,KAA0C,CAAC,QAAQ,CAAC;QACrE,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QAChD,MAAM,QAAQ,GAAG,KAAK,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;QAC5C,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC;YAChE,OAAO,EAAE,UAAU,EAAE,CAAC;QACxB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,oCAAoC,EAAE,CAAC;gBACxD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YACtD,CAAC;YACD,mFAAmF;YACnF,yCAAyC;YACzC,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACvD,CAAC;IACH,CAAC,CACF,CAAC;IAEF,wFAAwF;IACxF,8FAA8F;IAC9F,+FAA+F;IAC/F,2FAA2F;IAC3F,qDAAqD;IACrD,GAAG,CAAC,GAAG,CACL,GAAG,CAAC,uBAAuB,EAC3B;QACE,MAAM,EAAE;YACN,QAAQ,EAAE;gBACR,YAAY,EAAE,8BAA8B;gBAC5C,WAAW,EAAE,CAAC,GAAG,CAAC;aACnB;SACF;KACF;IACD,mFAAmF;IACnF,iFAAiF;IACjF,KAAK,IAA2C,EAAE;QAChD,yFAAyF;QACzF,qFAAqF;QACrF,qFAAqF;QACrF,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,oBAAoB,EAAE,CAAC;QACnD,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,aAAa,EAAE,CAAC;QACnD,OAAO;YACL,IAAI,EAAE;gBACJ,MAAM,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,CAAC,GAAG,CAAC;gBACnD,aAAa,EAAE,YAAY;gBAC3B,UAAU,EAAE,KAAK,CAAC,MAAM;gBACxB,oBAAoB,EAAE,OAAO,CAAC,uBAAuB,EAAE;gBACvD,GAAG,EAAE,kBAAkB;aACxB;SACF,CAAC;IACJ,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/api/routes.d.ts

@@ -10,6 +10,7 @@ import { InteractiveBridgePool } from '../interactive/bridge-pool.js';
 import { AuditLog } from './audit.js';
 import { RetryIndex } from './retry-index.js';
 import { GuidanceIndex } from './guidance-index.js';
+import { DeliveryIndex } from './delivery-index.js';
 import { type AuthMode } from './auth.js';
 export { API_PREFIX } from './api-prefix.js';
 /**
@@ -48,46 +49,46 @@ export declare const LaunchSchema: z.ZodEffects<z.ZodObject<{
     problem: string;
     deliver?: "pr" | undefined;
     projectId?: string | undefined;
+    workflow?: string | undefined;
+    repoRef?: string | undefined;
+    clisJson?: string | undefined;
     retryOf?: string | undefined;
     sessionId?: string | undefined;
-    clisJson?: string | undefined;
     entityMode?: "shared" | "isolated" | undefined;
     humanConfirm?: string | undefined;
-    repoRef?: string | undefined;
-    workflow?: string | undefined;
 }, {
     problem: string;
     deliver?: "pr" | undefined;
     projectId?: string | undefined;
+    workflow?: string | undefined;
+    repoRef?: string | undefined;
+    clisJson?: string | undefined;
     retryOf?: string | undefined;
     sessionId?: string | undefined;
-    clisJson?: string | undefined;
     entityMode?: "shared" | "isolated" | undefined;
     humanConfirm?: string | undefined;
-    repoRef?: string | undefined;
-    workflow?: string | undefined;
 }>, {
     problem: string;
     deliver?: "pr" | undefined;
     projectId?: string | undefined;
+    workflow?: string | undefined;
+    repoRef?: string | undefined;
+    clisJson?: string | undefined;
     retryOf?: string | undefined;
     sessionId?: string | undefined;
-    clisJson?: string | undefined;
     entityMode?: "shared" | "isolated" | undefined;
     humanConfirm?: string | undefined;
-    repoRef?: string | undefined;
-    workflow?: string | undefined;
 }, {
     problem: string;
     deliver?: "pr" | undefined;
     projectId?: string | undefined;
+    workflow?: string | undefined;
+    repoRef?: string | undefined;
+    clisJson?: string | undefined;
     retryOf?: string | undefined;
     sessionId?: string | undefined;
-    clisJson?: string | undefined;
     entityMode?: "shared" | "isolated" | undefined;
     humanConfirm?: string | undefined;
-    repoRef?: string | undefined;
-    workflow?: string | undefined;
 }>;
 export declare const GateSchema: z.ZodObject<{
     approve: z.ZodBoolean;
@@ -157,6 +158,10 @@ export interface RuntimeDeps {
     /** Run→operator-guidance index (CREW-UX-7) — `createServer` hydrates one from the audit trail
      *  so a restarted daemon still echoes `guidance`; a directly-driven route set gets a fresh one. */
     guidanceIndex?: GuidanceIndex;
+    /** Run→delivered-PR index (CREW-UX-8, crew#321) — `createServer` hydrates one from the audit
+     *  trail so a restarted daemon still echoes `delivery`; a directly-driven route set gets a
+     *  fresh one. */
+    deliveryIndex?: DeliveryIndex;
     openWithOs?: (target: string) => Promise<void>;
     /** Seat sign-in presence probe (seat sign-in) — injectable so route tests never read the
      *  developer's real dotfiles. Defaults to the file/env heuristic in seat-signin.ts. */

package/dist/api/routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../src/api/routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAgB,MAAM,SAAS,CAAC;AAC7D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAOxB,OAAO,EAAwB,WAAW,EAAkD,MAAM,oBAAoB,CAAC;AAEvH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAMnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAWrD,OAAO,EAAyB,KAAK,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAEtF,OAAO,EAAe,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAInF,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAe,KAAK,QAAQ,EAAE,MAAM,WAAW,CAAC;AAGvD,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAyF7C;;;;;;;;;;;;GAYG;AAIH,eAAO,MAAM,YAAY;;;;;;;;IAQvB;+FAC2F;;IAE3F;;wFAEoF;;IAEpF;;0FAEsF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAKtF,CAAC;AAEH,eAAO,MAAM,UAAU;;;;;;;;;EAGZ,CAAC;AAEZ;;yEAEyE;AACzE,eAAO,MAAM,cAAc;;;;;;EAEhB,CAAC;AAUZ,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;EAQpB,CAAC;AAOZ,4FAA4F;AAC5F,eAAO,MAAM,cAAc;;;;;;;;;EAGhB,CAAC;AAwBZ,sEAAsE;AACtE,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,QAAQ,CAAC;IAChB,QAAQ,EAAE,QAAQ,CAAC;CACpB;AAED;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,UAAU,CAAC,EAAE,iBAAiB,CAAC;IAC/B;oGACgG;IAChG,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB;uGACmG;IACnG,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/C;2FACuF;IACvF,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,gBAAgB,CAAC,EAAE,MAAM,KAAK,OAAO,GAAG,IAAI,CAAC;IAC1E;;0DAEsD;IACtD,kBAAkB,CAAC,EAAE,qBAAqB,CAAC;CAC5C;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAC5B,GAAG,EAAE,eAAe,EACpB,OAAO,EAAE,WAAW,EACpB,SAAS,EAAE,SAAS,EACpB,gBAAgB,EAAE,gBAAgB,EAIlC,YAAY,GAAE,WAA+B,EAG7C,QAAQ,GAAE,iBAAqF,EAK/F,QAAQ,GAAE,YAA0D,EAGpE,OAAO,GAAE,WAAgB,GACxB,IAAI,CA+wDN"}
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../src/api/routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAgB,MAAM,SAAS,CAAC;AAC7D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAOxB,OAAO,EAAwB,WAAW,EAAkD,MAAM,oBAAoB,CAAC;AAEvH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAMnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAWrD,OAAO,EAAyB,KAAK,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAItF,OAAO,EAAe,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAInF,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAe,KAAK,QAAQ,EAAE,MAAM,WAAW,CAAC;AAGvD,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAgG7C;;;;;;;;;;;;GAYG;AAIH,eAAO,MAAM,YAAY;;;;;;;;IAQvB;+FAC2F;;IAE3F;;wFAEoF;;IAEpF;;0FAEsF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAKtF,CAAC;AAEH,eAAO,MAAM,UAAU;;;;;;;;;EAGZ,CAAC;AAEZ;;yEAEyE;AACzE,eAAO,MAAM,cAAc;;;;;;EAEhB,CAAC;AAUZ,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;EAQpB,CAAC;AAOZ,4FAA4F;AAC5F,eAAO,MAAM,cAAc;;;;;;;;;EAGhB,CAAC;AAwBZ,sEAAsE;AACtE,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,QAAQ,CAAC;IAChB,QAAQ,EAAE,QAAQ,CAAC;CACpB;AAED;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,UAAU,CAAC,EAAE,iBAAiB,CAAC;IAC/B;oGACgG;IAChG,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB;uGACmG;IACnG,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B;;qBAEiB;IACjB,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/C;2FACuF;IACvF,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,gBAAgB,CAAC,EAAE,MAAM,KAAK,OAAO,GAAG,IAAI,CAAC;IAC1E;;0DAEsD;IACtD,kBAAkB,CAAC,EAAE,qBAAqB,CAAC;CAC5C;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAC5B,GAAG,EAAE,eAAe,EACpB,OAAO,EAAE,WAAW,EACpB,SAAS,EAAE,SAAS,EACpB,gBAAgB,EAAE,gBAAgB,EAIlC,YAAY,GAAE,WAA+B,EAG7C,QAAQ,GAAE,iBAAqF,EAK/F,QAAQ,GAAE,YAA0D,EAGpE,OAAO,GAAE,WAAgB,GACxB,IAAI,CA41DN"}

package/dist/api/routes.js

@@ -18,6 +18,8 @@ import { allowedRootsFor, isInsideRoot, openWithSystemDefault } from './open-pat
 import { InvalidDiffBaseError, NotARegularFileError, UnresolvableDiffBaseError, readFileCapped, worktreeDiff, } from './run-files.js';
 import { resolveProjectGraphBinding } from '../projects/graph.js';
 import { registerProjectRoutes } from '../projects/routes.js';
+import { registerCampaignRoutes } from '../campaigns/routes.js';
+import { registerGovernanceWikiRoutes } from './governance-wiki.js';
 import { ProjectSettingsStore } from '../projects/settings.js';
 import { boundOrigin, InteractiveBridgePool } from '../interactive/bridge-pool.js';
 import { registerInteractiveProxy } from '../interactive/proxy-routes.js';
@@ -26,6 +28,7 @@ import { MEMBERSHIP_ATTACHED, membershipAttachedKey } from '../projects/events.j
 import { AuditLog } from './audit.js';
 import { RetryIndex } from './retry-index.js';
 import { GuidanceIndex } from './guidance-index.js';
+import { DeliveryIndex } from './delivery-index.js';
 import { LOCAL_ACTOR } from './auth.js';
 // Re-exported so existing `import { API_PREFIX } from './routes.js'` callers keep working; the
 // value lives in the leaf module api-prefix.ts to keep unit-output.ts out of this file's cycle.
@@ -73,6 +76,12 @@ function invalidBody(err, what) {
         : what;
     return { error, details: err.issues };
 }
+// Closed facet vocabularies for the `GET /governance/rules` browse filters (wiki-mgmt) — the
+// wire contract's `RuleBrowseQuery`. Sets, not zod: the query is otherwise free-form and only
+// these three facets have a vocabulary to enforce.
+const RULE_SEVERITIES = new Set(['info', 'warn', 'error', 'critical']);
+const RULE_TYPES = new Set(['pattern', 'policy']);
+const RULE_STATUSES = new Set(['active', 'retired', 'all']);
 // Repo names become directory components under ~/.wicked/repos/ — reject anything
 // that would allow path traversal (slashes, dots-only segments, control chars).
 const SAFE_REPO_NAME = /^[a-zA-Z0-9][a-zA-Z0-9._-]*$/;
@@ -217,10 +226,12 @@ runtime = {}) {
     const signedIn = runtime.signedIn ?? signedInHeuristic;
     const retryIndex = runtime.retryIndex ?? new RetryIndex();
     const guidanceIndex = runtime.guidanceIndex ?? new GuidanceIndex();
+    const deliveryIndex = runtime.deliveryIndex ?? new DeliveryIndex();
     // The run-DTO joins (DES-UX-001 §8.2/§8.3, DES-UX-002 §7.2): `project_id` from the membership
     // record — `null` = genuinely unfiled, so the field is ALWAYS present on served runs —
-    // `retry_of` from the lineage index, and `guidance` from the guidance index, each set only
-    // when known (absent, never null, spells "not a retry" / "no note").
+    // `retry_of` from the lineage index, `guidance` from the guidance index, and `delivery`
+    // from the delivery index (CREW-UX-8, crew#321), each set only when known (absent, never
+    // null, spells "not a retry" / "no note" / "delivered nothing").
     // Applied at DTO assembly on exactly the two endpoints that serve the run DTO
     // (GET /runs + GET /runs/:id); the internal sessionsDetail() consumers are untouched.
     const decorateRun = (view) => {
@@ -231,6 +242,9 @@ runtime = {}) {
         const guidance = guidanceIndex.guidanceFor(view.session.id);
         if (guidance !== undefined)
             view.session.guidance = guidance;
+        const delivery = deliveryIndex.deliveryFor(view.session.id);
+        if (delivery !== undefined)
+            view.session.delivery = delivery;
         return view;
     };
     // Resolved ONCE and shared by the project routes (which read/write `interactiveRoot`) and the
@@ -977,6 +991,12 @@ runtime = {}) {
             workflow,
             gateEvents: qeGateEvents,
             ...(qeRunId !== undefined && qeRunId !== '' ? { qeRunId } : {}),
+            // AW-14 (arch-R13a + R16): the conformance section reads the same wires the standalone
+            // `/governance/claims` and `/runs/:id/events` routes serve, but run-scoped and resolved
+            // deny-dominates BESIDE the QE gate — so a wiki-rule violation and an unenforced governed
+            // unit both appear on the page humans actually look at.
+            claims: () => adapter.listConformanceClaims(),
+            events: (rid) => adapter.runEvents(rid),
         });
     });
     // The steering gate (§11.1). approve+amend = approve-with-steer; approve:false = reject (cancels).
@@ -1316,8 +1336,53 @@ runtime = {}) {
         const policies = await adapter.listPolicies();
         return { policies };
     });
-    app.get(`${V}/governance/rules`, async () => {
-        const rules = await adapter.listConformanceRules();
+    // The wiki BROWSE surface (wiki-mgmt): facet filters over the listed rows. EXACT matches by
+    // design — unlike `/governance/rules/preview`, whose recall semantics treat an absent rule
+    // facet as a wildcard (enforcement's question: "which rules apply HERE"), browse answers
+    // "show me the rules TAGGED `layer=api`", and a wildcard rule flooding every layer filter
+    // would bury the tagged ones. `?status=` keeps the AW-24 kill switch visible: every row keeps
+    // its `retired` flag, and `retired`/`active` narrow to one side. Default is `all` — the
+    // route's historical behavior, though pre-0.7.4 addons funnel the listing through recall and
+    // return active rows only (the engine's fact to fix, not this filter's to mask).
+    app.get(`${V}/governance/rules`, {
+        config: {
+            manifest: {
+                responseType: '{ rules: ConformanceRule[] }',
+                statusCodes: [200, 400],
+            },
+        },
+    }, async (req, reply) => {
+        const q = req.query;
+        // Same normalization as `repoParam` below: first value of a repeated param, trimmed, and
+        // an empty/whitespace value means "facet not given" rather than a filter matching nothing.
+        const facet = (k) => {
+            const raw = q[k];
+            const first = Array.isArray(raw) ? raw[0] : raw;
+            const trimmed = first?.trim();
+            return trimmed ? trimmed : undefined;
+        };
+        // Closed vocabularies reject loudly (400 names the valid set): `?severity=hihg` silently
+        // matching nothing would read as "no critical rules" — an empty answer to a question the
+        // caller didn't ask.
+        const invalid = (name, got, valid) => reply.code(400).send({ error: `${name} must be one of ${valid} (got \`${got}\`)` });
+        const severity = facet('severity');
+        if (severity !== undefined && !RULE_SEVERITIES.has(severity)) {
+            return invalid('severity', severity, 'info|warn|error|critical');
+        }
+        const ruleType = facet('rule_type');
+        if (ruleType !== undefined && !RULE_TYPES.has(ruleType)) {
+            return invalid('rule_type', ruleType, 'pattern|policy');
+        }
+        const status = facet('status') ?? 'all';
+        if (!RULE_STATUSES.has(status)) {
+            return invalid('status', status, 'active|retired|all');
+        }
+        const layer = facet('layer');
+        const rules = (await adapter.listConformanceRules()).filter((r) => (severity === undefined || r.severity === severity) &&
+            (ruleType === undefined || r.rule_type === ruleType) &&
+            (layer === undefined || r.targets.layer === layer) &&
+            // `retired` is absent on rows written before the field existed, which read as active.
+            (status === 'all' || (status === 'retired') === (r.retired === true)));
         return { rules };
     });
     app.get(`${V}/governance/claims`, async () => {
@@ -1921,6 +1986,18 @@ runtime = {}) {
     });
     // ── Projects (DES-PROJECT-001) — the 9-route experience-plane surface ────────
     registerProjectRoutes(app, adapter, { ...projects, settings: projectSettings }, security);
+    // ── Campaigns (crew#342 + TH-9) — the engine's durable Run-DAG scheduler over REST ──────────
+    // Progress streams as campaign* CoreEvents on the existing allowlist-free /ws relay; these
+    // routes are launch/resume/cancel + the reads a scoreboard builds from.
+    registerCampaignRoutes(app, adapter, {
+        audit,
+        actorOf,
+        roster: () => CoreAdapter.roster(),
+    });
+    // ── Governance wiki management (wiki-mgmt) — scoreboard + honest empty-state meta ──────────
+    // Browse (`GET /governance/rules` + facets) and retire (`DELETE /governance/rules/:id`) stay
+    // ABOVE with the other governance routes; this registers only the wiki-specific reads.
+    registerGovernanceWikiRoutes(app, adapter);
     // ── The wicked-interactive bridge, reverse-proxied (DES-MERGE-001 §5.3/§7.2) ──
     // Mounted BESIDE the routes above and under the same `${V}` prefix, so it inherits one
     // origin, one auth hook, and one CORS posture — the whole point of slice 1.