wicked-crew 0.7.32 → 0.7.34

package/README.md

@@ -39,7 +39,8 @@ engine cannot store dead-letter to
 `WICKED_APPS_EMIT_DEADLETTER` is honoured), are counted on
 `GET /api/v1/diagnostics` → `governance` (a `governance.deadletter` finding), and are drained back
 with `wicked-crew governance replay <outbox>`. The interactive document bridge is spawned on demand
-as `npx wicked-interactive@^0.9.1`; `WICKED_INTERACTIVE_SPEC` overrides the range (semver range
+as `npx wicked-interactive@^0.9.2` (0.9.2: recorder browser preflight + provisioning, typed `RecorderError`
+frames); `WICKED_INTERACTIVE_SPEC` overrides the range (semver range
 only, validated; invalid values are named on the boot line and ignored, a floor below crew's need
 is warned about).
 

package/dist/api/chat-turns.d.ts

@@ -0,0 +1,87 @@
+/**
+ * Per-chat TURN tracking for `POST /chats/:id/messages` (F-RECON-017).
+ *
+ * The engine queues a message sent to a seat that is still answering the previous one — silently:
+ * `chatSend` answers the seats it accepted, the worker receives the text the instant the previous
+ * turn's final block lands, and the reply frames (`chatDelta` / `chatReply`) carry chat + seat but
+ * NO message correlation. The recon saw exactly that: Q3 sent 58 s into Q2's turn got a 202, and
+ * Q2's reply then rendered under Q3's bubble. Neither the daemon nor the skin could tell.
+ *
+ * This index is the daemon's own record of which seats are mid-turn in which chat:
+ *
+ *  - `begin` opens a turn for the seats a send actually reached (the engine's answer) and mints a
+ *    `turnId` the 202 returns;
+ *  - `inFlight` is the refusal predicate the route consults FIRST: a send that targets a seat still
+ *    mid-turn is refused (409 `turn_in_flight`, naming the turn and the busy seats) — targeting
+ *    only idle seats passes, so a stalled seat (opencode 0 bytes for 300 s) never blocks a
+ *    follow-up to the one that answered;
+ *  - `observe` folds the engine's frames: a seat's `chatReply` (ok or not) or `chatSessionFailed`
+ *    ends its part of the turn, `chatClosed` drops the chat's turns;
+ *  - `decorate` stamps `turn_id` onto the chat frames of a seat mid-turn, so a skin can file a
+ *    delta/reply under the message it answers instead of the newest bubble.
+ *
+ * A turn whose frames were lost (an engine restart, a seat reaped without a frame) must never wedge
+ * the chat: a turn older than `staleAfterMs` (default 15 min — three engine turn budgets) is treated
+ * as ended by every read, and reported in the 409's `stale` reason when it is what let a send pass.
+ */
+import type { CoreEvent } from '../core/types.js';
+/** One live turn: the message a set of seats is answering. */
+export interface ChatTurn {
+    turnId: string;
+    chatId: string;
+    /** Every seat the send reached (the engine's `chatSend` answer). */
+    seats: string[];
+    /** The seats that have not ended their part yet. */
+    pending: string[];
+    /** Epoch ms of the accepted send. */
+    startedAt: number;
+    /** A bounded excerpt of the message, for the 409 body and diagnostics. */
+    excerpt: string;
+}
+/** What a refused send is told (the 409 body's `turn`). */
+export interface ChatTurnInFlight {
+    turnId: string;
+    chatId: string;
+    seats: string[];
+    /** The targeted seats still answering — the reason for the refusal. */
+    busy: string[];
+    startedAt: number;
+    ageMs: number;
+    excerpt: string;
+}
+export declare const CHAT_TURN_EXCERPT_CHARS = 120;
+/** Three engine turn budgets (300 s each): a turn this old with no closing frame is lost, not live. */
+export declare const CHAT_TURN_STALE_AFTER_MS: number;
+export declare class ChatTurnIndex {
+    /** chatId → live turns (a seat is in at most one — `inFlight` refuses the second). */
+    private readonly turns;
+    private readonly now;
+    private readonly staleAfterMs;
+    constructor(opts?: {
+        now?: () => number;
+        staleAfterMs?: number;
+    });
+    /** Drop turns whose frames were lost (see the module doc); returns the survivors. */
+    private live;
+    /**
+     * The turn that makes a send to `targets` (every seat of the chat when omitted) refusable: one
+     * whose pending seats intersect the targets. `null` when every targeted seat is idle.
+     */
+    inFlight(chatId: string, targets?: readonly string[]): ChatTurnInFlight | null;
+    /** Open a turn for the seats a send reached. An empty seat list opens nothing (nothing to wait for). */
+    begin(chatId: string, seats: readonly string[], text: string): ChatTurn | null;
+    /** The live turn a seat of a chat is answering, if any. */
+    turnOf(chatId: string, cliKey: string): ChatTurn | undefined;
+    /** Every live turn of a chat (diagnostics / tests). */
+    turnsOf(chatId: string): ChatTurn[];
+    /** Fold one engine frame. Safe on every event type; non-chat frames are ignored. */
+    observe(event: CoreEvent): void;
+    /**
+     * The frame with `turn_id` stamped when it is a seat's progress on a live turn; the frame itself
+     * otherwise. Call BEFORE `observe` — the closing `chatReply` is the one most worth correlating.
+     */
+    decorate(event: CoreEvent): CoreEvent;
+    /** The chat is gone (a `DELETE` or an engine reclaim) — nothing left to wait for. */
+    closed(chatId: string): void;
+}
+//# sourceMappingURL=chat-turns.d.ts.map

package/dist/api/chat-turns.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat-turns.d.ts","sourceRoot":"","sources":["../../src/api/chat-turns.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAGH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAElD,8DAA8D;AAC9D,MAAM,WAAW,QAAQ;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,oEAAoE;IACpE,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,oDAAoD;IACpD,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,qCAAqC;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,0EAA0E;IAC1E,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,2DAA2D;AAC3D,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,uEAAuE;IACvE,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,eAAO,MAAM,uBAAuB,MAAM,CAAC;AAC3C,uGAAuG;AACvG,eAAO,MAAM,wBAAwB,QAAc,CAAC;AAYpD,qBAAa,aAAa;IACxB,sFAAsF;IACtF,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAiC;IACvD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IACnC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;gBAE1B,IAAI,GAAE;QAAE,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAO;IAKpE,qFAAqF;IACrF,OAAO,CAAC,IAAI;IAUZ;;;OAGG;IACH,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,gBAAgB,GAAG,IAAI;IAiB9E,wGAAwG;IACxG,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,GAAG,QAAQ,GAAG,IAAI;IAiB9E,2DAA2D;IAC3D,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS;IAI5D,uDAAuD;IACvD,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,QAAQ,EAAE;IAInC,oFAAoF;IACpF,OAAO,CAAC,KAAK,EAAE,SAAS,GAAG,IAAI;IAgB/B;;;OAGG;IACH,QAAQ,CAAC,KAAK,EAAE,SAAS,GAAG,SAAS;IASrC,qFAAqF;IACrF,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;CAG7B"}

package/dist/api/chat-turns.js

@@ -0,0 +1,147 @@
+/**
+ * Per-chat TURN tracking for `POST /chats/:id/messages` (F-RECON-017).
+ *
+ * The engine queues a message sent to a seat that is still answering the previous one — silently:
+ * `chatSend` answers the seats it accepted, the worker receives the text the instant the previous
+ * turn's final block lands, and the reply frames (`chatDelta` / `chatReply`) carry chat + seat but
+ * NO message correlation. The recon saw exactly that: Q3 sent 58 s into Q2's turn got a 202, and
+ * Q2's reply then rendered under Q3's bubble. Neither the daemon nor the skin could tell.
+ *
+ * This index is the daemon's own record of which seats are mid-turn in which chat:
+ *
+ *  - `begin` opens a turn for the seats a send actually reached (the engine's answer) and mints a
+ *    `turnId` the 202 returns;
+ *  - `inFlight` is the refusal predicate the route consults FIRST: a send that targets a seat still
+ *    mid-turn is refused (409 `turn_in_flight`, naming the turn and the busy seats) — targeting
+ *    only idle seats passes, so a stalled seat (opencode 0 bytes for 300 s) never blocks a
+ *    follow-up to the one that answered;
+ *  - `observe` folds the engine's frames: a seat's `chatReply` (ok or not) or `chatSessionFailed`
+ *    ends its part of the turn, `chatClosed` drops the chat's turns;
+ *  - `decorate` stamps `turn_id` onto the chat frames of a seat mid-turn, so a skin can file a
+ *    delta/reply under the message it answers instead of the newest bubble.
+ *
+ * A turn whose frames were lost (an engine restart, a seat reaped without a frame) must never wedge
+ * the chat: a turn older than `staleAfterMs` (default 15 min — three engine turn budgets) is treated
+ * as ended by every read, and reported in the 409's `stale` reason when it is what let a send pass.
+ */
+import { randomUUID } from 'node:crypto';
+export const CHAT_TURN_EXCERPT_CHARS = 120;
+/** Three engine turn budgets (300 s each): a turn this old with no closing frame is lost, not live. */
+export const CHAT_TURN_STALE_AFTER_MS = 15 * 60_000;
+/** The frame kinds that carry a seat's progress on a turn (`chat` + `cliKey` fields). */
+const SEAT_PROGRESS_FRAMES = new Set(['chatDelta', 'chatReply', 'chatSessionFailed']);
+/** The frame kinds that END a seat's part of its turn. */
+const SEAT_DONE_FRAMES = new Set(['chatReply', 'chatSessionFailed']);
+function excerptOf(text) {
+    const one = text.replace(/\s+/g, ' ').trim();
+    return one.length > CHAT_TURN_EXCERPT_CHARS ? `${one.slice(0, CHAT_TURN_EXCERPT_CHARS)}…` : one;
+}
+export class ChatTurnIndex {
+    /** chatId → live turns (a seat is in at most one — `inFlight` refuses the second). */
+    turns = new Map();
+    now;
+    staleAfterMs;
+    constructor(opts = {}) {
+        this.now = opts.now ?? Date.now;
+        this.staleAfterMs = opts.staleAfterMs ?? CHAT_TURN_STALE_AFTER_MS;
+    }
+    /** Drop turns whose frames were lost (see the module doc); returns the survivors. */
+    live(chatId) {
+        const list = this.turns.get(chatId);
+        if (list === undefined)
+            return [];
+        const now = this.now();
+        const kept = list.filter((t) => t.pending.length > 0 && now - t.startedAt < this.staleAfterMs);
+        if (kept.length === 0)
+            this.turns.delete(chatId);
+        else if (kept.length !== list.length)
+            this.turns.set(chatId, kept);
+        return kept;
+    }
+    /**
+     * The turn that makes a send to `targets` (every seat of the chat when omitted) refusable: one
+     * whose pending seats intersect the targets. `null` when every targeted seat is idle.
+     */
+    inFlight(chatId, targets) {
+        for (const turn of this.live(chatId)) {
+            const busy = targets === undefined ? [...turn.pending] : turn.pending.filter((s) => targets.includes(s));
+            if (busy.length === 0)
+                continue;
+            return {
+                turnId: turn.turnId,
+                chatId,
+                seats: [...turn.seats],
+                busy,
+                startedAt: turn.startedAt,
+                ageMs: Math.max(0, this.now() - turn.startedAt),
+                excerpt: turn.excerpt,
+            };
+        }
+        return null;
+    }
+    /** Open a turn for the seats a send reached. An empty seat list opens nothing (nothing to wait for). */
+    begin(chatId, seats, text) {
+        const unique = [...new Set(seats)];
+        if (unique.length === 0)
+            return null;
+        const turn = {
+            turnId: randomUUID(),
+            chatId,
+            seats: unique,
+            pending: [...unique],
+            startedAt: this.now(),
+            excerpt: excerptOf(text),
+        };
+        const list = this.live(chatId);
+        list.push(turn);
+        this.turns.set(chatId, list);
+        return turn;
+    }
+    /** The live turn a seat of a chat is answering, if any. */
+    turnOf(chatId, cliKey) {
+        return this.live(chatId).find((t) => t.pending.includes(cliKey));
+    }
+    /** Every live turn of a chat (diagnostics / tests). */
+    turnsOf(chatId) {
+        return this.live(chatId).map((t) => ({ ...t, seats: [...t.seats], pending: [...t.pending] }));
+    }
+    /** Fold one engine frame. Safe on every event type; non-chat frames are ignored. */
+    observe(event) {
+        const chatId = typeof event.chat === 'string' ? event.chat : undefined;
+        if (chatId === undefined)
+            return;
+        if (event.type === 'chatClosed') {
+            this.turns.delete(chatId);
+            return;
+        }
+        if (!SEAT_DONE_FRAMES.has(event.type))
+            return;
+        const cliKey = typeof event.cliKey === 'string' ? event.cliKey : undefined;
+        if (cliKey === undefined)
+            return;
+        const turn = this.turnOf(chatId, cliKey);
+        if (turn === undefined)
+            return;
+        turn.pending = turn.pending.filter((s) => s !== cliKey);
+        this.live(chatId); // prunes the turn once its last seat ended
+    }
+    /**
+     * The frame with `turn_id` stamped when it is a seat's progress on a live turn; the frame itself
+     * otherwise. Call BEFORE `observe` — the closing `chatReply` is the one most worth correlating.
+     */
+    decorate(event) {
+        if (!SEAT_PROGRESS_FRAMES.has(event.type))
+            return event;
+        const chatId = typeof event.chat === 'string' ? event.chat : undefined;
+        const cliKey = typeof event.cliKey === 'string' ? event.cliKey : undefined;
+        if (chatId === undefined || cliKey === undefined)
+            return event;
+        const turn = this.turnOf(chatId, cliKey);
+        return turn === undefined ? event : { ...event, turn_id: turn.turnId };
+    }
+    /** The chat is gone (a `DELETE` or an engine reclaim) — nothing left to wait for. */
+    closed(chatId) {
+        this.turns.delete(chatId);
+    }
+}
+//# sourceMappingURL=chat-turns.js.map

package/dist/api/chat-turns.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat-turns.js","sourceRoot":"","sources":["../../src/api/chat-turns.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AA6BzC,MAAM,CAAC,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAC3C,uGAAuG;AACvG,MAAM,CAAC,MAAM,wBAAwB,GAAG,EAAE,GAAG,MAAM,CAAC;AAEpD,yFAAyF;AACzF,MAAM,oBAAoB,GAAwB,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,mBAAmB,CAAC,CAAC,CAAC;AAC3G,0DAA0D;AAC1D,MAAM,gBAAgB,GAAwB,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,mBAAmB,CAAC,CAAC,CAAC;AAE1F,SAAS,SAAS,CAAC,IAAY;IAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7C,OAAO,GAAG,CAAC,MAAM,GAAG,uBAAuB,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,uBAAuB,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;AAClG,CAAC;AAED,MAAM,OAAO,aAAa;IACxB,sFAAsF;IACrE,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAC;IACtC,GAAG,CAAe;IAClB,YAAY,CAAS;IAEtC,YAAY,OAAsD,EAAE;QAClE,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;QAChC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,wBAAwB,CAAC;IACpE,CAAC;IAED,qFAAqF;IAC7E,IAAI,CAAC,MAAc;QACzB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,EAAE,CAAC;QAClC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC;QAC/F,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;aAC5C,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM;YAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACnE,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;OAGG;IACH,QAAQ,CAAC,MAAc,EAAE,OAA2B;QAClD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;YACzG,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YAChC,OAAO;gBACL,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,MAAM;gBACN,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC;gBACtB,IAAI;gBACJ,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC;gBAC/C,OAAO,EAAE,IAAI,CAAC,OAAO;aACtB,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,wGAAwG;IACxG,KAAK,CAAC,MAAc,EAAE,KAAwB,EAAE,IAAY;QAC1D,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;QACnC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACrC,MAAM,IAAI,GAAa;YACrB,MAAM,EAAE,UAAU,EAAE;YACpB,MAAM;YACN,KAAK,EAAE,MAAM;YACb,OAAO,EAAE,CAAC,GAAG,MAAM,CAAC;YACpB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,OAAO,EAAE,SAAS,CAAC,IAAI,CAAC;SACzB,CAAC;QACF,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/B,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC7B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,2DAA2D;IAC3D,MAAM,CAAC,MAAc,EAAE,MAAc;QACnC,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IACnE,CAAC;IAED,uDAAuD;IACvD,OAAO,CAAC,MAAc;QACpB,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;IAChG,CAAC;IAED,oFAAoF;IACpF,OAAO,CAAC,KAAgB;QACtB,MAAM,MAAM,GAAG,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QACvE,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO;QACjC,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAChC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC1B,OAAO;QACT,CAAC;QACD,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,OAAO;QAC9C,MAAM,MAAM,GAAG,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QAC3E,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO;QACjC,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACzC,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO;QAC/B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC;QACxD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,2CAA2C;IAChE,CAAC;IAED;;;OAGG;IACH,QAAQ,CAAC,KAAgB;QACvB,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QACxD,MAAM,MAAM,GAAG,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QACvE,MAAM,MAAM,GAAG,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QAC3E,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QAC/D,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACzC,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAE,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,EAAgB,CAAC;IACxF,CAAC;IAED,qFAAqF;IACrF,MAAM,CAAC,MAAc;QACnB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;CACF"}

package/dist/api/eval-sample.d.ts

@@ -23,14 +23,14 @@ export const EvalSignalsSchema: z.ZodObject<{
     files: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
     content: z.ZodOptional<z.ZodString>;
 }, "strict", z.ZodTypeAny, {
-    content?: string | undefined;
     tool?: string | undefined;
     files?: string[] | undefined;
+    content?: string | undefined;
     phase?: string | undefined;
 }, {
-    content?: string | undefined;
     tool?: string | undefined;
     files?: string[] | undefined;
+    content?: string | undefined;
     phase?: string | undefined;
 }>;
 export const EvalSampleSchema: z.ZodObject<{
@@ -44,36 +44,36 @@ export const EvalSampleSchema: z.ZodObject<{
         files: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
         content: z.ZodOptional<z.ZodString>;
     }, "strict", z.ZodTypeAny, {
-        content?: string | undefined;
         tool?: string | undefined;
         files?: string[] | undefined;
+        content?: string | undefined;
         phase?: string | undefined;
     }, {
-        content?: string | undefined;
         tool?: string | undefined;
         files?: string[] | undefined;
+        content?: string | undefined;
         phase?: string | undefined;
     }>;
 }, "strict", z.ZodTypeAny, {
-    id: string;
     kind: "good" | "bad";
+    id: string;
     description: string;
     steering_type: string;
     signals: {
-        content?: string | undefined;
         tool?: string | undefined;
         files?: string[] | undefined;
+        content?: string | undefined;
         phase?: string | undefined;
     };
 }, {
-    id: string;
     kind: "good" | "bad";
+    id: string;
     description: string;
     steering_type: string;
     signals: {
-        content?: string | undefined;
         tool?: string | undefined;
         files?: string[] | undefined;
+        content?: string | undefined;
         phase?: string | undefined;
     };
 }>;
@@ -90,64 +90,64 @@ export const ImportEvalCorpusSchema: z.ZodObject<{
             files: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
             content: z.ZodOptional<z.ZodString>;
         }, "strict", z.ZodTypeAny, {
-            content?: string | undefined;
             tool?: string | undefined;
             files?: string[] | undefined;
+            content?: string | undefined;
             phase?: string | undefined;
         }, {
-            content?: string | undefined;
             tool?: string | undefined;
             files?: string[] | undefined;
+            content?: string | undefined;
             phase?: string | undefined;
         }>;
     }, "strict", z.ZodTypeAny, {
-        id: string;
         kind: "good" | "bad";
+        id: string;
         description: string;
         steering_type: string;
         signals: {
-            content?: string | undefined;
             tool?: string | undefined;
             files?: string[] | undefined;
+            content?: string | undefined;
             phase?: string | undefined;
         };
     }, {
-        id: string;
         kind: "good" | "bad";
+        id: string;
         description: string;
         steering_type: string;
         signals: {
-            content?: string | undefined;
             tool?: string | undefined;
             files?: string[] | undefined;
+            content?: string | undefined;
             phase?: string | undefined;
         };
     }>, "many">;
 }, "strict", z.ZodTypeAny, {
     name: string;
     samples: {
-        id: string;
         kind: "good" | "bad";
+        id: string;
         description: string;
         steering_type: string;
         signals: {
-            content?: string | undefined;
             tool?: string | undefined;
             files?: string[] | undefined;
+            content?: string | undefined;
             phase?: string | undefined;
         };
     }[];
 }, {
     name: string;
     samples: {
-        id: string;
         kind: "good" | "bad";
+        id: string;
         description: string;
         steering_type: string;
         signals: {
-            content?: string | undefined;
             tool?: string | undefined;
             files?: string[] | undefined;
+            content?: string | undefined;
             phase?: string | undefined;
         };
     }[];

package/dist/api/governance-steering.d.ts

@@ -93,11 +93,11 @@ export declare const SteeringAuthorSchema: z.ZodObject<{
         name: z.ZodString;
         content: z.ZodString;
     }, "strict", z.ZodTypeAny, {
-        content: string;
         name: string;
-    }, {
         content: string;
+    }, {
         name: string;
+        content: string;
     }>, "many">>;
     repoRef: z.ZodOptional<z.ZodString>;
     sessionId: z.ZodOptional<z.ZodString>;
@@ -107,8 +107,8 @@ export declare const SteeringAuthorSchema: z.ZodObject<{
     repoRef?: string | undefined;
     paths?: string[] | undefined;
     documents?: {
-        content: string;
         name: string;
+        content: string;
     }[] | undefined;
     sessionId?: string | undefined;
 }, {
@@ -117,8 +117,8 @@ export declare const SteeringAuthorSchema: z.ZodObject<{
     repoRef?: string | undefined;
     paths?: string[] | undefined;
     documents?: {
-        content: string;
         name: string;
+        content: string;
     }[] | undefined;
     sessionId?: string | undefined;
 }>;

package/dist/api/roster-standing.d.ts

@@ -0,0 +1,42 @@
+/**
+ * The ONE roster accessor every launch path shares: the registry roster decorated with crew's
+ * STANDING (F-2R2-009) — runtime `health`, `signed_in`, `auth`, `council_eligible` + its reason,
+ * the council bench — so `engineRosterJson` (core/engine-roster.ts) can bench a seat the daemon
+ * already knows is unusable before the engine convenes it.
+ *
+ * F-RECON-002 / F-RECON-003: this used to be a closure inside `registerRoutes`, so ONLY the routes
+ * (`POST /runs`, `/testing/*`, campaigns, steering) launched with standing. The interactive seams
+ * (draft/edit/chat/demo subscribers), the adapter's onboarding launch (`seatsForWorkflow`) and
+ * `wicked-crew start` handed the engine `CoreAdapter.roster()` RAW — every interactive council
+ * convened codex/pi/copilot although the roster reported them `signed_out` (9–19 councilSeatFailed,
+ * 57–112 s of dead ballots per run), and one council ELECTED signed-out pi, which then failed its
+ * unit and fell over to claude. The factory below is what all of those now call; `createServer`
+ * builds exactly one over its `SeatHealthTracker` and hands the same function everywhere.
+ *
+ * Standing is read at CALL time (the tracker's live state, the LIVE `WICKED_WORKER_HOME`), never
+ * captured — a seat signed in from the System page is eligible on the very next launch.
+ */
+import type { RosterSeat } from '../core/types.js';
+import type { SeatHealthTracker } from './seat-health.js';
+/** The accessor: the registry roster WITH crew's standing, freshly read on every call. */
+export type RosterWithStanding = () => RosterSeat[];
+export interface RosterStandingDeps {
+    /** The daemon's per-seat runtime health + council evidence (councilSeatFailed, auth refusals). */
+    seatHealth: SeatHealthTracker;
+    /** Seat sign-in presence probe — injectable so tests never read the developer's dotfiles.
+     *  Defaults to the file/env heuristic in seat-signin.ts. */
+    signedIn?: (seatKey: string, workerConfigRoot?: string) => boolean | null;
+    /** The registry roster (default: the engine's production roster via `CoreAdapter.roster()`).
+     *  Injectable so a test decorates its own seats without the native addon. */
+    registry?: () => unknown[];
+    /** Where `WICKED_WORKER_HOME` is read from at call time (default `process.env`). */
+    env?: NodeJS.ProcessEnv;
+}
+/**
+ * Build the accessor. Each seat's registry fields ride through verbatim — the spread is
+ * deliberately NOT a field whitelist, which is what lets the engine's `login_invocation` pass
+ * untouched — and gains `health`, `signed_in`, and the standing readings (`auth`, `free_tier*`,
+ * `council_eligible`, `council_ineligible_reason`, `council_bench`, `auth_source/evidence`).
+ */
+export declare function rosterWithStandingFactory(deps: RosterStandingDeps): RosterWithStanding;
+//# sourceMappingURL=roster-standing.d.ts.map

package/dist/api/roster-standing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"roster-standing.d.ts","sourceRoot":"","sources":["../../src/api/roster-standing.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAGH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAI1D,0FAA0F;AAC1F,MAAM,MAAM,kBAAkB,GAAG,MAAM,UAAU,EAAE,CAAC;AAEpD,MAAM,WAAW,kBAAkB;IACjC,kGAAkG;IAClG,UAAU,EAAE,iBAAiB,CAAC;IAC9B;gEAC4D;IAC5D,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,gBAAgB,CAAC,EAAE,MAAM,KAAK,OAAO,GAAG,IAAI,CAAC;IAC1E;iFAC6E;IAC7E,QAAQ,CAAC,EAAE,MAAM,OAAO,EAAE,CAAC;IAC3B,oFAAoF;IACpF,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACzB;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,kBAAkB,GAAG,kBAAkB,CA8BtF"}

package/dist/api/roster-standing.js

@@ -0,0 +1,54 @@
+/**
+ * The ONE roster accessor every launch path shares: the registry roster decorated with crew's
+ * STANDING (F-2R2-009) — runtime `health`, `signed_in`, `auth`, `council_eligible` + its reason,
+ * the council bench — so `engineRosterJson` (core/engine-roster.ts) can bench a seat the daemon
+ * already knows is unusable before the engine convenes it.
+ *
+ * F-RECON-002 / F-RECON-003: this used to be a closure inside `registerRoutes`, so ONLY the routes
+ * (`POST /runs`, `/testing/*`, campaigns, steering) launched with standing. The interactive seams
+ * (draft/edit/chat/demo subscribers), the adapter's onboarding launch (`seatsForWorkflow`) and
+ * `wicked-crew start` handed the engine `CoreAdapter.roster()` RAW — every interactive council
+ * convened codex/pi/copilot although the roster reported them `signed_out` (9–19 councilSeatFailed,
+ * 57–112 s of dead ballots per run), and one council ELECTED signed-out pi, which then failed its
+ * unit and fell over to claude. The factory below is what all of those now call; `createServer`
+ * builds exactly one over its `SeatHealthTracker` and hands the same function everywhere.
+ *
+ * Standing is read at CALL time (the tracker's live state, the LIVE `WICKED_WORKER_HOME`), never
+ * captured — a seat signed in from the System page is eligible on the very next launch.
+ */
+import { CoreAdapter } from '../core/adapter.js';
+import { signedInHeuristic } from './seat-signin.js';
+import { seatStanding } from './seat-standing.js';
+/**
+ * Build the accessor. Each seat's registry fields ride through verbatim — the spread is
+ * deliberately NOT a field whitelist, which is what lets the engine's `login_invocation` pass
+ * untouched — and gains `health`, `signed_in`, and the standing readings (`auth`, `free_tier*`,
+ * `council_eligible`, `council_ineligible_reason`, `council_bench`, `auth_source/evidence`).
+ */
+export function rosterWithStandingFactory(deps) {
+    const { seatHealth } = deps;
+    const signedIn = deps.signedIn ?? signedInHeuristic;
+    const registry = deps.registry ?? (() => CoreAdapter.roster());
+    const env = deps.env ?? process.env;
+    return () => {
+        const workerRoot = env['WICKED_WORKER_HOME'];
+        return registry().map((seat) => {
+            const key = String(seat.key);
+            const health = seatHealth.healthFor(key);
+            const signed = signedIn(key, workerRoot === '' ? undefined : workerRoot);
+            return {
+                ...seat,
+                health,
+                signed_in: signed,
+                // The bench is THIS daemon's council evidence (councilSeatFailed, bounded window) — the
+                // prediction learns from what the engine actually did with the seat (#533 review, F-1).
+                ...seatStanding(seat, signed, health, seatHealth.councilBenchFor(key), 
+                // F-A45-006: the seat's OWN "no credential" report (a ballot's "No API key found", a
+                // worker's 401, an auth ACP fallback) overrides the file probe — `auth` flips, not only
+                // `council_eligible`, and the evidence rides on the wire.
+                seatHealth.authFailureFor(key)),
+            };
+        });
+    };
+}
+//# sourceMappingURL=roster-standing.js.map

package/dist/api/roster-standing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"roster-standing.js","sourceRoot":"","sources":["../../src/api/roster-standing.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAGjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAkBlD;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CAAC,IAAwB;IAChE,MAAM,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;IAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,iBAAiB,CAAC;IACpD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACpC,OAAO,GAAiB,EAAE;QACxB,MAAM,UAAU,GAAG,GAAG,CAAC,oBAAoB,CAAC,CAAC;QAC7C,OAAQ,QAAQ,EAAmB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YAC/C,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7B,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACzC,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,EAAE,UAAU,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;YACzE,OAAO;gBACL,GAAG,IAAI;gBACP,MAAM;gBACN,SAAS,EAAE,MAAM;gBACjB,wFAAwF;gBACxF,wFAAwF;gBACxF,GAAG,YAAY,CACb,IAA+F,EAC/F,MAAM,EACN,MAAM,EACN,UAAU,CAAC,eAAe,CAAC,GAAG,CAAC;gBAC/B,qFAAqF;gBACrF,wFAAwF;gBACxF,0DAA0D;gBAC1D,UAAU,CAAC,cAAc,CAAC,GAAG,CAAC,CAC/B;aACF,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC"}