wicked-crew 0.7.32 → 0.7.34

package/dist/projects/state-home-registry.js

@@ -0,0 +1,50 @@
+/**
+ * The TOP-LEVEL names of the daemon state home, as crew's `src/` knows them (wicked-core#411 /
+ * crew#497).
+ *
+ * The registry of record is `tests/fixtures/state-home-subtrees.json` — the file wicked-core
+ * embeds to build the worker Read fence (design v3.1 §1) and crew mirrors byte for byte. It lives
+ * under `tests/` so `src/` cannot read it, yet the daemon needs the same classification at BOOT
+ * to say, before anyone launches, that an entry under its state home is one the fence will refuse
+ * every worker launch over (`state-home-preflight.ts`). The engine answers that question itself
+ * once the addon carries `Core.preflightStateHome`; on an older addon crew classifies with THIS
+ * list. Same doctrine as `skills/root-names.ts` for the skills root's children: `src/` carries the
+ * names, `tests/state-home-subtrees.test.ts` asserts they equal the fixture, so the two cannot
+ * drift without a red test.
+ *
+ * `names` are exact top-level names; `prefixes` cover a file and its sidecars (`core.db`,
+ * `core.db-wal`, `core.db.events`, …). Nothing here is enumerated at runtime to BUILD a rule —
+ * that is core's fail-closed contract; crew only REPORTS what core would refuse.
+ */
+/** Exact top-level names the registry classifies. */
+export const STATE_HOME_ENTRY_NAMES = [
+    'skills',
+    'audit.log',
+    'evals',
+    'project-graphs',
+    'repo-graphs',
+    'project-settings.json',
+    'interactive-chat-ledger.json',
+    'interactive-chats',
+    'interactive-demo-ledger.json',
+    'interactive-demos',
+    'interactive-draft-ledger.json',
+    'interactive-drafts',
+    'interactive-edit-ledger.json',
+    'interactive-edits',
+    // Placed by an OPERATOR variable, never by a `join(<state home>, …)` in src/ (the `env` field
+    // on the fixture entry): registered so a pre-existing placement is fenced rather than refusing
+    // every launch; `assertWickedRootsOutsideStateHome` refuses to BOOT with the variable pointed
+    // there (state-home-preflight.ts).
+    'workflows',
+    'steering-inbox',
+    'interactive',
+];
+/** Top-level PREFIXES the registry classifies (a file and its sidecars). */
+export const STATE_HOME_ENTRY_PREFIXES = ['bus.db', 'core.db', 'daemon-'];
+/** Is `topLevel` a name the registry classifies? */
+export function isRegisteredStateHomeEntry(topLevel) {
+    return (STATE_HOME_ENTRY_NAMES.includes(topLevel) ||
+        STATE_HOME_ENTRY_PREFIXES.some((p) => topLevel.startsWith(p)));
+}
+//# sourceMappingURL=state-home-registry.js.map

package/dist/projects/state-home-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"state-home-registry.js","sourceRoot":"","sources":["../../src/projects/state-home-registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,qDAAqD;AACrD,MAAM,CAAC,MAAM,sBAAsB,GAA0B;IAC3D,QAAQ;IACR,WAAW;IACX,OAAO;IACP,gBAAgB;IAChB,aAAa;IACb,uBAAuB;IACvB,8BAA8B;IAC9B,mBAAmB;IACnB,8BAA8B;IAC9B,mBAAmB;IACnB,+BAA+B;IAC/B,oBAAoB;IACpB,8BAA8B;IAC9B,mBAAmB;IACnB,8FAA8F;IAC9F,+FAA+F;IAC/F,8FAA8F;IAC9F,mCAAmC;IACnC,WAAW;IACX,gBAAgB;IAChB,aAAa;CACd,CAAC;AAEF,4EAA4E;AAC5E,MAAM,CAAC,MAAM,yBAAyB,GAA0B,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;AAEjG,oDAAoD;AACpD,MAAM,UAAU,0BAA0B,CAAC,QAAgB;IACzD,OAAO,CACL,sBAAsB,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACzC,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAC9D,CAAC;AACJ,CAAC"}

package/dist/qe/gate-events.d.ts

@@ -88,6 +88,8 @@ export interface QeGateSubscriberOptions {
     pollIntervalMs?: number;
     /** Diagnostics sink (default: console.error). */
     log?: (message: string) => void;
+    /** Error-level logger for connection-fatal subscriber errors (the /diagnostics ring folds it); defaults to `log`. */
+    logError?: (message: string) => void;
 }
 /** Handle for a running subscription. */
 export interface QeGateSubscription {

package/dist/qe/gate-events.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gate-events.d.ts","sourceRoot":"","sources":["../../src/qe/gate-events.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAIH,8EAA8E;AAC9E,eAAO,MAAM,mBAAmB,2FAItB,CAAC;AAEX,gEAAgE;AAChE,eAAO,MAAM,oBAAoB,+BAA+B,CAAC;AAEjE;;;GAGG;AACH,eAAO,MAAM,aAAa,iBAAiB,CAAC;AAE5C,yEAAyE;AACzE,eAAO,MAAM,aAAa,gBAAgB,CAAC;AAE3C,qEAAqE;AACrE,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,iDAAiD;IACjD,KAAK,EAAE,MAAM,CAAC;IACd,4EAA4E;IAC5E,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,8EAA8E;IAC9E,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,yEAAyE;IACzE,UAAU,EAAE,MAAM,CAAC;CACpB;AAUD;;;;;;;GAOG;AACH,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAuC;IAC7D,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAuC;IACjE,OAAO,CAAC,WAAW,CAA+B;IAElD;;;;OAIG;IACH,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,SAA2B,GAAG,OAAO;IAoC3F,gDAAgD;IAChD,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS;IAInD,8DAA8D;IAC9D,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS;IAIzD,kEAAkE;IAClE,MAAM,IAAI,gBAAgB,GAAG,SAAS;IAItC,6EAA6E;IAC7E,IAAI,IAAI,MAAM;CAGf;AAED,iDAAiD;AACjD,MAAM,WAAW,uBAAuB;IACtC;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,mEAAmE;IACnE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,iDAAiD;IACjD,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACjC;AAED,yCAAyC;AACzC,MAAM,WAAW,kBAAkB;IACjC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CAC9B;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,qBAAqB,CACzC,KAAK,EAAE,WAAW,EAClB,IAAI,GAAE,uBAA4B,GACjC,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAiDpC"}
+{"version":3,"file":"gate-events.d.ts","sourceRoot":"","sources":["../../src/qe/gate-events.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAKH,8EAA8E;AAC9E,eAAO,MAAM,mBAAmB,2FAItB,CAAC;AAEX,gEAAgE;AAChE,eAAO,MAAM,oBAAoB,+BAA+B,CAAC;AAEjE;;;GAGG;AACH,eAAO,MAAM,aAAa,iBAAiB,CAAC;AAE5C,yEAAyE;AACzE,eAAO,MAAM,aAAa,gBAAgB,CAAC;AAE3C,qEAAqE;AACrE,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,iDAAiD;IACjD,KAAK,EAAE,MAAM,CAAC;IACd,4EAA4E;IAC5E,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,8EAA8E;IAC9E,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,yEAAyE;IACzE,UAAU,EAAE,MAAM,CAAC;CACpB;AAUD;;;;;;;GAOG;AACH,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAuC;IAC7D,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAuC;IACjE,OAAO,CAAC,WAAW,CAA+B;IAElD;;;;OAIG;IACH,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,SAA2B,GAAG,OAAO;IAoC3F,gDAAgD;IAChD,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS;IAInD,8DAA8D;IAC9D,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS;IAIzD,kEAAkE;IAClE,MAAM,IAAI,gBAAgB,GAAG,SAAS;IAItC,6EAA6E;IAC7E,IAAI,IAAI,MAAM;CAGf;AAED,iDAAiD;AACjD,MAAM,WAAW,uBAAuB;IACtC;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,mEAAmE;IACnE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,iDAAiD;IACjD,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IAChC,qHAAqH;IACrH,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACtC;AAED,yCAAyC;AACzC,MAAM,WAAW,kBAAkB;IACjC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CAC9B;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,qBAAqB,CACzC,KAAK,EAAE,WAAW,EAClB,IAAI,GAAE,uBAA4B,GACjC,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAmDpC"}

package/dist/qe/gate-events.js

@@ -21,6 +21,7 @@
  * cache is a freshness signal — the ledger stays the system of record for the
  * gate decision, so a lost or replayed event can never flip a verdict.
  */
+import { busSubscriberErrorReporter } from '../interactive/bus-subscriber-errors.js';
 /** The gate-result event types (the old gate.mjs wire contract, verbatim). */
 export const QE_GATE_EVENT_TYPES = [
     'wicked.qe.gate.passed',
@@ -157,9 +158,12 @@ export async function startQeGateSubscriber(cache, opts = {}) {
         handler: (event) => {
             cache.ingest(event.event_type, event.payload);
         },
-        onError: (err, event) => {
-            log(`[qe-gate-events] handler error on event ${String(event?.event_id ?? '?')}: ${err.message}`);
-        },
+        onError: busSubscriberErrorReporter({
+            describe: (err, event) => `[qe-gate-events] handler error on event ${String(event?.event_id ?? '?')}: ${err.message}`,
+            log,
+            logError: opts.logError,
+            pollIntervalMs: opts.pollIntervalMs ?? 5000,
+        }),
     });
     return {
         stop: () => sub.stop(),

package/dist/qe/gate-events.js.map

@@ -1 +1 @@
-{"version":3,"file":"gate-events.js","sourceRoot":"","sources":["../../src/qe/gate-events.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAIH,8EAA8E;AAC9E,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,uBAAuB;IACvB,uBAAuB;IACvB,4BAA4B;CACpB,CAAC;AAEX,gEAAgE;AAChE,MAAM,CAAC,MAAM,oBAAoB,GAAG,4BAA4B,CAAC;AAEjE;;;GAGG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,cAAc,CAAC;AAE5C,yEAAyE;AACzE,MAAM,CAAC,MAAM,aAAa,GAAG,aAAa,CAAC;AAoB3C,SAAS,GAAG,CAAC,CAAU;IACrB,OAAO,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1C,CAAC;AAED,SAAS,GAAG,CAAC,CAAU;IACrB,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAChE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,WAAW;IACL,KAAK,GAAG,IAAI,GAAG,EAA4B,CAAC;IAC5C,SAAS,GAAG,IAAI,GAAG,EAA4B,CAAC;IACzD,WAAW,CAA+B;IAElD;;;;OAIG;IACH,MAAM,CAAC,SAAiB,EAAE,OAAgB,EAAE,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAC/E,MAAM,MAAM,GAAI,mBAAyC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC9E,MAAM,QAAQ,GAAG,SAAS,KAAK,oBAAoB,CAAC;QACpD,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QACvC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QAClE,MAAM,CAAC,GAAG,OAAkC,CAAC;QAC7C,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC/B,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC,CAAC,gCAAgC;QAElE,MAAM,KAAK,GAAqB;YAC9B,SAAS;YACT,KAAK;YACL,yEAAyE;YACzE,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;YAClD,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;YACnD,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;YAC7C,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;YACzD,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;YACpC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;YACnD,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;YACvD,UAAU;SACX,CAAC;QAEF,4EAA4E;QAC5E,2EAA2E;QAC3E,uEAAuE;QACvE,mDAAmD;QACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACvC,IAAI,CAAC,CAAC,QAAQ,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,WAAW,KAAK,IAAI,CAAC,EAAE,CAAC;YAC3E,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAC7B,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI;gBAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACvE,CAAC;QACD,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;QACzB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,gDAAgD;IAChD,MAAM,CAAC,KAAa;QAClB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IAED,8DAA8D;IAC9D,UAAU,CAAC,OAAe;QACxB,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IAED,kEAAkE;IAClE,MAAM;QACJ,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED,6EAA6E;IAC7E,IAAI;QACF,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;IACzB,CAAC;CACF;AAqBD;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,KAAkB,EAClB,OAAgC,EAAE;IAElC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAE1D,IAAI,GAAgC,CAAC;IACrC,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CACD,gHACE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,EAAE,CACH,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,EAAW,CAAC;IAChB,IAAI,CAAC;QACH,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC7E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CACD,6CAA6C,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,4BAChG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,EAAE,CACH,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,GAAG,GAAG,GAAG,CAAC,SAAS,CAAC;QACxB,EAAE;QACF,MAAM,EAAE,aAAa;QACrB,MAAM,EAAE,aAAa;QACrB,WAAW,EAAE,QAAQ;QACrB,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,IAAI;QAC3C,0EAA0E;QAC1E,0DAA0D;QAC1D,UAAU,EAAE,CAAC;QACb,OAAO,EAAE,CAAC,KAAe,EAAE,EAAE;YAC3B,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QAChD,CAAC;QACD,OAAO,EAAE,CAAC,GAAU,EAAE,KAAgB,EAAE,EAAE;YACxC,GAAG,CACD,2CAA2C,MAAM,CAAC,KAAK,EAAE,QAAQ,IAAI,GAAG,CAAC,KAAK,GAAG,CAAC,OAAO,EAAE,CAC5F,CAAC;QACJ,CAAC;KACF,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE;KACvB,CAAC;AACJ,CAAC"}
+{"version":3,"file":"gate-events.js","sourceRoot":"","sources":["../../src/qe/gate-events.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAGH,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AAErF,8EAA8E;AAC9E,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,uBAAuB;IACvB,uBAAuB;IACvB,4BAA4B;CACpB,CAAC;AAEX,gEAAgE;AAChE,MAAM,CAAC,MAAM,oBAAoB,GAAG,4BAA4B,CAAC;AAEjE;;;GAGG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,cAAc,CAAC;AAE5C,yEAAyE;AACzE,MAAM,CAAC,MAAM,aAAa,GAAG,aAAa,CAAC;AAoB3C,SAAS,GAAG,CAAC,CAAU;IACrB,OAAO,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1C,CAAC;AAED,SAAS,GAAG,CAAC,CAAU;IACrB,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAChE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,WAAW;IACL,KAAK,GAAG,IAAI,GAAG,EAA4B,CAAC;IAC5C,SAAS,GAAG,IAAI,GAAG,EAA4B,CAAC;IACzD,WAAW,CAA+B;IAElD;;;;OAIG;IACH,MAAM,CAAC,SAAiB,EAAE,OAAgB,EAAE,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAC/E,MAAM,MAAM,GAAI,mBAAyC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC9E,MAAM,QAAQ,GAAG,SAAS,KAAK,oBAAoB,CAAC;QACpD,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QACvC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QAClE,MAAM,CAAC,GAAG,OAAkC,CAAC;QAC7C,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC/B,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC,CAAC,gCAAgC;QAElE,MAAM,KAAK,GAAqB;YAC9B,SAAS;YACT,KAAK;YACL,yEAAyE;YACzE,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;YAClD,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;YACnD,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;YAC7C,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;YACzD,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;YACpC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;YACnD,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;YACvD,UAAU;SACX,CAAC;QAEF,4EAA4E;QAC5E,2EAA2E;QAC3E,uEAAuE;QACvE,mDAAmD;QACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACvC,IAAI,CAAC,CAAC,QAAQ,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,WAAW,KAAK,IAAI,CAAC,EAAE,CAAC;YAC3E,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAC7B,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI;gBAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACvE,CAAC;QACD,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;QACzB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,gDAAgD;IAChD,MAAM,CAAC,KAAa;QAClB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IAED,8DAA8D;IAC9D,UAAU,CAAC,OAAe;QACxB,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IAED,kEAAkE;IAClE,MAAM;QACJ,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED,6EAA6E;IAC7E,IAAI;QACF,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;IACzB,CAAC;CACF;AAuBD;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,KAAkB,EAClB,OAAgC,EAAE;IAElC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAE1D,IAAI,GAAgC,CAAC;IACrC,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CACD,gHACE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,EAAE,CACH,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,EAAW,CAAC;IAChB,IAAI,CAAC;QACH,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC7E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CACD,6CAA6C,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,4BAChG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,EAAE,CACH,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,GAAG,GAAG,GAAG,CAAC,SAAS,CAAC;QACxB,EAAE;QACF,MAAM,EAAE,aAAa;QACrB,MAAM,EAAE,aAAa;QACrB,WAAW,EAAE,QAAQ;QACrB,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,IAAI;QAC3C,0EAA0E;QAC1E,0DAA0D;QAC1D,UAAU,EAAE,CAAC;QACb,OAAO,EAAE,CAAC,KAAe,EAAE,EAAE;YAC3B,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QAChD,CAAC;QACD,OAAO,EAAE,0BAA0B,CAAC;YAClC,QAAQ,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CACvB,2CAA2C,MAAM,CAAC,KAAK,EAAE,QAAQ,IAAI,GAAG,CAAC,KAAK,GAAG,CAAC,OAAO,EAAE;YAC7F,GAAG;YACH,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,IAAI;SAC5C,CAAC;KACH,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE;KACvB,CAAC;AACJ,CAAC"}

package/dist/skills/base-skill.d.ts

@@ -0,0 +1,92 @@
+/**
+ * The BASE skill posture (crew#554 — the launcher half of wicked-core#468).
+ *
+ * The engine prepends ONE role-keyed discipline directive to EVERY agent unit's prompt —
+ * `Invoke your skill "<base>" … and follow its §<role> section` — when a base skill is in force:
+ * the workflow def's `base_skill_ref`, else the engine-config default `WICKED_BASE_SKILL_REF`.
+ * It is GATED AT INTAKE: a launch whose handed skills snapshot lacks the skill is refused before
+ * any unit is planned (`SkillsError::BaseSkillRefused`). Crew is the launcher, so crew owns the
+ * default (`SystemSettings.baseSkillRef`, shipped as `wicked-garden-governed-worker`) and must
+ * decide what a snapshot WITHOUT the skill means:
+ *
+ *   `baseSkillPolicy: 'warn'`    (default) — export the env ONLY when the published generation
+ *                                holds the skill; otherwise leave it unset (runs proceed without
+ *                                the directive) and raise a `skills.base-skill` WARNING. A fresh
+ *                                install lacks the skill until the garden that ships it is
+ *                                installed and published — a visible warning, never a dead Send.
+ *   `baseSkillPolicy: 'require'` — export the env whatever the generation holds; the engine
+ *                                refuses every launch at intake until a generation with the skill
+ *                                is published. The finding is an ERROR that says so.
+ *
+ * Pure: the posture is a function of the configured default, the published generation's skill
+ * rows and the editor catalog — the runtime applies it to `process.env` (engine-env.ts) and
+ * reports it (`GET /health.baseSkill`, `GET /diagnostics.skills.baseSkill`, the publish/refresh
+ * results). `gen` here is the generation the NEXT launch is judged against; the generation a
+ * RUNNING unit was handed is that unit's `skillsSnapshotHanded.gen`, joined with its
+ * `unitDispatched.baseSkill {name, role}` frame.
+ */
+import type { SkillsHealthFinding } from './runtime.js';
+/** The engine-config variable wicked-core reads at intake (`workflow::BASE_SKILL_REF_ENV`). */
+export declare const BASE_SKILL_REF_ENGINE_ENV = "WICKED_BASE_SKILL_REF";
+/** The shipped default: the cross-CLI discipline skill wicked-garden publishes (garden#1131). */
+export declare const DEFAULT_BASE_SKILL_REF = "wicked-garden-governed-worker";
+export type BaseSkillPolicy = 'warn' | 'require';
+export declare const BASE_SKILL_POLICIES: ReadonlySet<string>;
+/**
+ * What a base skill NAME may look like once trimmed: empty (off) or a frontmatter skill name —
+ * lowercase letters, digits, `-`, `_`, `:`, `.` (the `wicked-garden-<dir>` convention and the
+ * `wicked-garden:<dir>` plugin spelling), ≤ 128 chars. The PUT /settings boundary and the
+ * hand-edited settings.json read both hold to it, so the engine is never handed whitespace, a path
+ * or a sentence as `WICKED_BASE_SKILL_REF` (which would refuse every launch by a name nobody typed).
+ */
+export declare const BASE_SKILL_REF_SHAPE: RegExp;
+/** What the settings store says: the skill name (`''` = off) and the missing-skill policy. */
+export interface BaseSkillConfig {
+    ref: string;
+    policy: BaseSkillPolicy;
+}
+/** The published generation the engine is handed, reduced to what the posture needs. */
+export interface PublishedSkills {
+    gen: number;
+    /** Frontmatter names of every skill row in the generation's `snapshot.json`. */
+    skills: ReadonlyArray<string>;
+}
+/**
+ * The base skill in force for the next launch — `null` when the setting is off (`''`).
+ * Additive on every surface that carries it (api-types declares it as optional).
+ */
+export interface BaseSkillPosture {
+    /** The frontmatter name the engine is (or would be) handed. */
+    name: string;
+    policy: BaseSkillPolicy;
+    /** The published generation the engine is handed holds the skill — the intake admission will pass. */
+    present: boolean;
+    /** The editor catalog holds the skill enabled — a publish would hand it (`present` after the next publish). */
+    inCatalog: boolean;
+    /** The generation judged, or `null` when nothing is published (fallback / blocked / config-error / disabled). */
+    gen: number | null;
+    /** What `WICKED_BASE_SKILL_REF` is exported as: the name, or `null` = unset (the engine runs without a base skill). */
+    engineInput: string | null;
+    /** The `skills.base-skill` finding when the generation lacks the skill; `null` when it holds it. */
+    finding: SkillsHealthFinding | null;
+}
+/** Trim the configured name; `''`/blank is "no base skill". */
+export declare function normalizeBaseSkillRef(ref: string | undefined): string;
+/**
+ * Compute the posture. `published` is `null` when no verified generation is exported (the engine
+ * either falls back to the live plugin or refuses — either way the base skill is not KNOWN to be
+ * handed, so it counts as absent); `inCatalog` answers whether the editor manifest holds the
+ * skill enabled (what a publish would hand).
+ */
+export declare function baseSkillPosture(config: BaseSkillConfig, published: PublishedSkills | null, inCatalog: (name: string) => boolean): BaseSkillPosture | null;
+/**
+ * Apply a posture to THIS process's environment. The engine reads `WICKED_BASE_SKILL_REF` at
+ * INTAKE (plan time) per launch — never cached — so applying it at boot, after every publish /
+ * refresh and on every settings change is the whole mechanism: no daemon or engine restart.
+ * Crew OWNS the variable while the seam is live: a value the process booted with is overwritten
+ * (the setting is the source of truth; `baseSkillRef: ""` deletes it).
+ */
+export declare function applyBaseSkillEnv(posture: BaseSkillPosture | null): void;
+/** The one-line disclosure a composer / run header renders: `discipline skill: <name> gen N`. */
+export declare function describeBaseSkill(posture: BaseSkillPosture | null): string;
+//# sourceMappingURL=base-skill.d.ts.map

package/dist/skills/base-skill.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"base-skill.d.ts","sourceRoot":"","sources":["../../src/skills/base-skill.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAExD,+FAA+F;AAC/F,eAAO,MAAM,yBAAyB,0BAA0B,CAAC;AAEjE,iGAAiG;AACjG,eAAO,MAAM,sBAAsB,kCAAkC,CAAC;AAEtE,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,SAAS,CAAC;AAEjD,eAAO,MAAM,mBAAmB,EAAE,WAAW,CAAC,MAAM,CAAiD,CAAC;AAEtG;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB,QAAuC,CAAC;AAEzE,8FAA8F;AAC9F,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,eAAe,CAAC;CACzB;AAED,wFAAwF;AACxF,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,gFAAgF;IAChF,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;CAC/B;AAED;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,+DAA+D;IAC/D,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,eAAe,CAAC;IACxB,sGAAsG;IACtG,OAAO,EAAE,OAAO,CAAC;IACjB,+GAA+G;IAC/G,SAAS,EAAE,OAAO,CAAC;IACnB,iHAAiH;IACjH,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,uHAAuH;IACvH,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,oGAAoG;IACpG,OAAO,EAAE,mBAAmB,GAAG,IAAI,CAAC;CACrC;AAED,+DAA+D;AAC/D,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAErE;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,eAAe,EACvB,SAAS,EAAE,eAAe,GAAG,IAAI,EACjC,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,GACnC,gBAAgB,GAAG,IAAI,CASzB;AAqBD;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,gBAAgB,GAAG,IAAI,GAAG,IAAI,CAMxE;AAED,iGAAiG;AACjG,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,gBAAgB,GAAG,IAAI,GAAG,MAAM,CAM1E"}

package/dist/skills/base-skill.js

@@ -0,0 +1,105 @@
+/**
+ * The BASE skill posture (crew#554 — the launcher half of wicked-core#468).
+ *
+ * The engine prepends ONE role-keyed discipline directive to EVERY agent unit's prompt —
+ * `Invoke your skill "<base>" … and follow its §<role> section` — when a base skill is in force:
+ * the workflow def's `base_skill_ref`, else the engine-config default `WICKED_BASE_SKILL_REF`.
+ * It is GATED AT INTAKE: a launch whose handed skills snapshot lacks the skill is refused before
+ * any unit is planned (`SkillsError::BaseSkillRefused`). Crew is the launcher, so crew owns the
+ * default (`SystemSettings.baseSkillRef`, shipped as `wicked-garden-governed-worker`) and must
+ * decide what a snapshot WITHOUT the skill means:
+ *
+ *   `baseSkillPolicy: 'warn'`    (default) — export the env ONLY when the published generation
+ *                                holds the skill; otherwise leave it unset (runs proceed without
+ *                                the directive) and raise a `skills.base-skill` WARNING. A fresh
+ *                                install lacks the skill until the garden that ships it is
+ *                                installed and published — a visible warning, never a dead Send.
+ *   `baseSkillPolicy: 'require'` — export the env whatever the generation holds; the engine
+ *                                refuses every launch at intake until a generation with the skill
+ *                                is published. The finding is an ERROR that says so.
+ *
+ * Pure: the posture is a function of the configured default, the published generation's skill
+ * rows and the editor catalog — the runtime applies it to `process.env` (engine-env.ts) and
+ * reports it (`GET /health.baseSkill`, `GET /diagnostics.skills.baseSkill`, the publish/refresh
+ * results). `gen` here is the generation the NEXT launch is judged against; the generation a
+ * RUNNING unit was handed is that unit's `skillsSnapshotHanded.gen`, joined with its
+ * `unitDispatched.baseSkill {name, role}` frame.
+ */
+/** The engine-config variable wicked-core reads at intake (`workflow::BASE_SKILL_REF_ENV`). */
+export const BASE_SKILL_REF_ENGINE_ENV = 'WICKED_BASE_SKILL_REF';
+/** The shipped default: the cross-CLI discipline skill wicked-garden publishes (garden#1131). */
+export const DEFAULT_BASE_SKILL_REF = 'wicked-garden-governed-worker';
+export const BASE_SKILL_POLICIES = new Set(['warn', 'require']);
+/**
+ * What a base skill NAME may look like once trimmed: empty (off) or a frontmatter skill name —
+ * lowercase letters, digits, `-`, `_`, `:`, `.` (the `wicked-garden-<dir>` convention and the
+ * `wicked-garden:<dir>` plugin spelling), ≤ 128 chars. The PUT /settings boundary and the
+ * hand-edited settings.json read both hold to it, so the engine is never handed whitespace, a path
+ * or a sentence as `WICKED_BASE_SKILL_REF` (which would refuse every launch by a name nobody typed).
+ */
+export const BASE_SKILL_REF_SHAPE = /^(?:[a-z0-9][a-z0-9._:-]{0,127})?$/;
+/** Trim the configured name; `''`/blank is "no base skill". */
+export function normalizeBaseSkillRef(ref) {
+    return typeof ref === 'string' ? ref.trim() : '';
+}
+/**
+ * Compute the posture. `published` is `null` when no verified generation is exported (the engine
+ * either falls back to the live plugin or refuses — either way the base skill is not KNOWN to be
+ * handed, so it counts as absent); `inCatalog` answers whether the editor manifest holds the
+ * skill enabled (what a publish would hand).
+ */
+export function baseSkillPosture(config, published, inCatalog) {
+    const name = normalizeBaseSkillRef(config.ref);
+    if (name === '')
+        return null;
+    const present = published !== null && published.skills.includes(name);
+    const catalog = inCatalog(name);
+    const gen = published?.gen ?? null;
+    const engineInput = config.policy === 'require' || present ? name : null;
+    const finding = present ? null : missingFinding(name, config.policy, gen, catalog);
+    return { name, policy: config.policy, present, inCatalog: catalog, gen, engineInput, finding };
+}
+function missingFinding(name, policy, gen, inCatalog) {
+    const where = gen === null ? 'no published snapshot is handed to the engine' : `the published snapshot (gen ${gen}) does not hold it`;
+    const remedy = inCatalog
+        ? 'it is in the catalog — POST /skills/publish hands it to the next launch'
+        : 'install a wicked-garden that ships it, POST /skills/refresh-baseline, then POST /skills/publish';
+    if (policy === 'require') {
+        return {
+            kind: 'skills.base-skill',
+            severity: 'error',
+            message: `the base skill "${name}" (baseSkillRef — the role-keyed discipline every governed unit follows) is REQUIRED but ${where}: the engine refuses every launch at intake until a generation holding it is published — ${remedy}; or set baseSkillPolicy "warn" to run without the discipline directive meanwhile`,
+        };
+    }
+    return {
+        kind: 'skills.base-skill',
+        severity: 'warning',
+        message: `the base skill "${name}" (baseSkillRef — the role-keyed discipline every governed unit follows) is not handed: ${where}, so runs proceed WITHOUT the discipline directive — ${remedy}; set baseSkillPolicy "require" to refuse such runs at intake instead`,
+    };
+}
+/**
+ * Apply a posture to THIS process's environment. The engine reads `WICKED_BASE_SKILL_REF` at
+ * INTAKE (plan time) per launch — never cached — so applying it at boot, after every publish /
+ * refresh and on every settings change is the whole mechanism: no daemon or engine restart.
+ * Crew OWNS the variable while the seam is live: a value the process booted with is overwritten
+ * (the setting is the source of truth; `baseSkillRef: ""` deletes it).
+ */
+export function applyBaseSkillEnv(posture) {
+    if (posture !== null && posture.engineInput !== null) {
+        process.env[BASE_SKILL_REF_ENGINE_ENV] = posture.engineInput;
+    }
+    else {
+        delete process.env[BASE_SKILL_REF_ENGINE_ENV];
+    }
+}
+/** The one-line disclosure a composer / run header renders: `discipline skill: <name> gen N`. */
+export function describeBaseSkill(posture) {
+    if (posture === null)
+        return 'discipline skill: off';
+    if (posture.present)
+        return `discipline skill: ${posture.name} gen ${posture.gen ?? '?'}`;
+    return posture.policy === 'require'
+        ? `discipline skill: ${posture.name} MISSING — runs will be refused at intake`
+        : `discipline skill: ${posture.name} MISSING — runs proceed without it`;
+}
+//# sourceMappingURL=base-skill.js.map

package/dist/skills/base-skill.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"base-skill.js","sourceRoot":"","sources":["../../src/skills/base-skill.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAIH,+FAA+F;AAC/F,MAAM,CAAC,MAAM,yBAAyB,GAAG,uBAAuB,CAAC;AAEjE,iGAAiG;AACjG,MAAM,CAAC,MAAM,sBAAsB,GAAG,+BAA+B,CAAC;AAItE,MAAM,CAAC,MAAM,mBAAmB,GAAwB,IAAI,GAAG,CAAkB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;AAEtG;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,oCAAoC,CAAC;AAmCzE,+DAA+D;AAC/D,MAAM,UAAU,qBAAqB,CAAC,GAAuB;IAC3D,OAAO,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AACnD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAC9B,MAAuB,EACvB,SAAiC,EACjC,SAAoC;IAEpC,MAAM,IAAI,GAAG,qBAAqB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC/C,IAAI,IAAI,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAC7B,MAAM,OAAO,GAAG,SAAS,KAAK,IAAI,IAAI,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACtE,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,GAAG,GAAG,SAAS,EAAE,GAAG,IAAI,IAAI,CAAC;IACnC,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACzE,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IACnF,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC;AACjG,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,MAAuB,EAAE,GAAkB,EAAE,SAAkB;IACnG,MAAM,KAAK,GAAG,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,+CAA+C,CAAC,CAAC,CAAC,+BAA+B,GAAG,oBAAoB,CAAC;IACtI,MAAM,MAAM,GAAG,SAAS;QACtB,CAAC,CAAC,yEAAyE;QAC3E,CAAC,CAAC,iGAAiG,CAAC;IACtG,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO;YACL,IAAI,EAAE,mBAAmB;YACzB,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,mBAAmB,IAAI,4FAA4F,KAAK,4FAA4F,MAAM,mFAAmF;SACvT,CAAC;IACJ,CAAC;IACD,OAAO;QACL,IAAI,EAAE,mBAAmB;QACzB,QAAQ,EAAE,SAAS;QACnB,OAAO,EAAE,mBAAmB,IAAI,2FAA2F,KAAK,wDAAwD,MAAM,uEAAuE;KACtQ,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAgC;IAChE,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;QACrD,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC;IAC/D,CAAC;SAAM,CAAC;QACN,OAAO,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;IAChD,CAAC;AACH,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,iBAAiB,CAAC,OAAgC;IAChE,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,uBAAuB,CAAC;IACrD,IAAI,OAAO,CAAC,OAAO;QAAE,OAAO,qBAAqB,OAAO,CAAC,IAAI,QAAQ,OAAO,CAAC,GAAG,IAAI,GAAG,EAAE,CAAC;IAC1F,OAAO,OAAO,CAAC,MAAM,KAAK,SAAS;QACjC,CAAC,CAAC,qBAAqB,OAAO,CAAC,IAAI,2CAA2C;QAC9E,CAAC,CAAC,qBAAqB,OAAO,CAAC,IAAI,oCAAoC,CAAC;AAC5E,CAAC"}

package/dist/skills/runtime.d.ts

@@ -73,13 +73,15 @@
  */
 import type { LaunchNotice } from '../core/adapter.js';
 import type { CoreEvent } from '../core/types.js';
+import { type BaseSkillPolicy, type BaseSkillPosture } from './base-skill.js';
 import { REFUSED_DIRNAME } from './root-names.js';
 import { type SkillsStore } from './store.js';
 /** The refusal sentinel directory name — from the ONE table of root names (design v3.5 §2); re-exported for the tests. */
 export { REFUSED_DIRNAME };
 export type SkillsHealthState = 'published' | 'fallback' | 'blocked' | 'config-error' | 'disabled';
 /** `skills.stale-rules` (F-083) is emitted ahead of its `wicked-crew-api-types` declaration — the next api-types cut adds it to `DiagnosticsSkillsFinding.kind`. */
-export type SkillsHealthFindingKind = 'skills.fallback' | 'skills.blocked' | 'skills.config' | 'skills.source' | 'skills.manifest' | 'skills.stale-rules';
+/** `skills.base-skill` (crew#554): the configured base skill is not in the published generation — a warning under `baseSkillPolicy: 'warn'`, an error under `'require'`. */
+export type SkillsHealthFindingKind = 'skills.fallback' | 'skills.blocked' | 'skills.config' | 'skills.source' | 'skills.manifest' | 'skills.stale-rules' | 'skills.base-skill';
 export interface SkillsHealthFinding {
     kind: SkillsHealthFindingKind;
     severity: 'warning' | 'error';
@@ -102,6 +104,11 @@ export interface SkillsHealth {
      *  `null` when `disabled`. */
     stateHome: string | null;
     findings: SkillsHealthFinding[];
+    /** The BASE skill posture (crew#554 / core#468): the role-keyed discipline skill the engine is
+     *  handed as `WICKED_BASE_SKILL_REF` for the next launch, judged against `current` — or `null`
+     *  when the setting is off (`baseSkillRef: ""`) or the seam is `disabled`. Its finding (when the
+     *  generation lacks the skill) also rides `findings`. Additive. */
+    baseSkill: BaseSkillPosture | null;
 }
 /** The `skills` block a daemon booted WITHOUT the seam reports. */
 export declare function disabledSkillsHealth(): SkillsHealth;
@@ -122,13 +129,48 @@ export declare class SkillsRuntime {
     private readonly log;
     private readonly bootSnapshot;
     private lastHealth;
+    /** The base skill setting (crew#554) — `null` until `configureBaseSkill` runs (boot reads settings.json first). */
+    private baseSkillConfig;
+    private lastBaseSkill;
+    /** The last `skills.base-skill` message logged — the seam says a finding once per change, not per re-export. */
+    private lastBaseSkillLogged;
     constructor(opts: SkillsRuntimeOptions);
+    /**
+     * Take the base skill setting (crew#554 — `SystemSettings.baseSkillRef` / `baseSkillPolicy`) and
+     * apply it NOW: at boot (before `apply`, so the ladder's outcome re-judges it) and on every
+     * `PUT /settings` that changes it. `baseSkillRef: ""` (or blank) is OFF — the engine variable is
+     * deleted. Answers the posture applied.
+     */
+    configureBaseSkill(settings: {
+        baseSkillRef?: string | undefined;
+        baseSkillPolicy?: BaseSkillPolicy | undefined;
+    }): BaseSkillPosture | null;
+    /** The base skill posture the engine is handed right now — `null` when off or unconfigured. */
+    baseSkill(): BaseSkillPosture | null;
+    /**
+     * Re-judge the base skill against the CURRENT published generation and the editor catalog, and
+     * export (or delete) `WICKED_BASE_SKILL_REF` accordingly (base-skill.ts). Called by every ladder
+     * outcome (`record`), after every publish, after a baseline refresh (the catalog moved, so
+     * `inCatalog` did) and on a settings change. Never throws: a generation whose metadata will not
+     * re-read counts as "nothing known to be handed" — under `warn` that unsets the variable and
+     * warns; under `require` the engine refuses at intake, which is the policy's whole point.
+     */
+    refreshBaseSkill(): BaseSkillPosture | null;
     /**
      * The seam's last outcome (diagnostics) — plus the live `skills.source` warning when the current
      * baseline is the installer copy (design v3.6). Only a seeded root (`published` / `blocked`) has a
      * current baseline to judge; the other rungs have no manifest, or one their own finding condemns.
      */
+    /**
+     * Does the PUBLISHED snapshot the engine is handed hold (and enable) skill `name`? The interactive
+     * seams gate their `skill_ref` on this (interactive/draft-skill.ts): the engine refuses a run whose
+     * `skill_ref` the snapshot lacks, so a seam must know before it stamps. `false` on every non-published
+     * state (fallback, blocked, config-error, disabled) and on an unreadable manifest — never a guess.
+     */
+    holdsSkill(name: string): boolean;
     health(): SkillsHealth;
+    /** The reported block carries the base skill posture and its finding (crew#554) — the seam's one answer to "is the discipline skill handed". */
+    private withBaseSkill;
     /** Boot entry point. Never throws; never fails open (module header). Idempotent: a seeded, published root is only re-verified. */
     apply(): Promise<SkillsHealth>;
     /** Say once, at boot, that the current baseline is the installer copy (design v3.6) — the finding itself persists in `health()`. */

package/dist/skills/runtime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../src/skills/runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwEG;AAIH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,KAAK,EAAE,SAAS,EAAiB,MAAM,kBAAkB,CAAC;AAGjE,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAsD,KAAK,WAAW,EAAE,MAAM,YAAY,CAAC;AAuFlG,0HAA0H;AAC1H,OAAO,EAAE,eAAe,EAAE,CAAC;AAE3B,MAAM,MAAM,iBAAiB,GAAG,WAAW,GAAG,UAAU,GAAG,SAAS,GAAG,cAAc,GAAG,UAAU,CAAC;AAEnG,oKAAoK;AACpK,MAAM,MAAM,uBAAuB,GAAG,iBAAiB,GAAG,gBAAgB,GAAG,eAAe,GAAG,eAAe,GAAG,iBAAiB,GAAG,oBAAoB,CAAC;AAE1J,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,uBAAuB,CAAC;IAC9B,QAAQ,EAAE,SAAS,GAAG,OAAO,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,6EAA6E;AAC7E,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,iBAAiB,CAAC;IACzB,kGAAkG;IAClG,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,kDAAkD;IAClD,OAAO,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC9C,4FAA4F;IAC5F,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B;;kCAE8B;IAC9B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,EAAE,mBAAmB,EAAE,CAAC;CACjC;AAED,mEAAmE;AACnE,wBAAgB,oBAAoB,IAAI,YAAY,CAEnD;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,GAAG,eAAe,GAAG,MAAM,CAE1F;AAED,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,WAAW,CAAC;IACnB,GAAG,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/B,8IAA8I;IAC9I,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACnC;AAED,qBAAa,aAAa;IACxB,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA4B;IAChD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAqB;IAClD,OAAO,CAAC,UAAU,CAAwC;gBAE9C,IAAI,EAAE,oBAAoB;IAMtC;;;;OAIG;IACH,MAAM,IAAI,YAAY;IA+BtB,kIAAkI;IAC5H,KAAK,IAAI,OAAO,CAAC,YAAY,CAAC;IAwFpC,oIAAoI;IACpI,OAAO,CAAC,gBAAgB;IAKxB;;;;OAIG;IACH,OAAO,CAAC,KAAK,EAAE,SAAS,GAAG,IAAI;IAI/B;;;;;;OAMG;IACH,QAAQ,CAAC,MAAM,EAAE,YAAY,GAAG,IAAI;IAKpC;;;;OAIG;IACH,YAAY,IAAI,YAAY,GAAG,IAAI;IA2DnC,kHAAkH;IAClH,OAAO,CAAC,MAAM;CAIf"}
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../src/skills/runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwEG;AAIH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,KAAK,EAAE,SAAS,EAAiB,MAAM,kBAAkB,CAAC;AAEjE,OAAO,EAA+G,KAAK,eAAe,EAAE,KAAK,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAE3L,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAsD,KAAK,WAAW,EAAE,MAAM,YAAY,CAAC;AAuFlG,0HAA0H;AAC1H,OAAO,EAAE,eAAe,EAAE,CAAC;AAE3B,MAAM,MAAM,iBAAiB,GAAG,WAAW,GAAG,UAAU,GAAG,SAAS,GAAG,cAAc,GAAG,UAAU,CAAC;AAEnG,oKAAoK;AACpK,4KAA4K;AAC5K,MAAM,MAAM,uBAAuB,GAAG,iBAAiB,GAAG,gBAAgB,GAAG,eAAe,GAAG,eAAe,GAAG,iBAAiB,GAAG,oBAAoB,GAAG,mBAAmB,CAAC;AAEhL,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,uBAAuB,CAAC;IAC9B,QAAQ,EAAE,SAAS,GAAG,OAAO,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,6EAA6E;AAC7E,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,iBAAiB,CAAC;IACzB,kGAAkG;IAClG,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,kDAAkD;IAClD,OAAO,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC9C,4FAA4F;IAC5F,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B;;kCAE8B;IAC9B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,EAAE,mBAAmB,EAAE,CAAC;IAChC;;;uEAGmE;IACnE,SAAS,EAAE,gBAAgB,GAAG,IAAI,CAAC;CACpC;AAED,mEAAmE;AACnE,wBAAgB,oBAAoB,IAAI,YAAY,CAEnD;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,GAAG,eAAe,GAAG,MAAM,CAE1F;AAED,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,WAAW,CAAC;IACnB,GAAG,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/B,8IAA8I;IAC9I,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACnC;AAED,qBAAa,aAAa;IACxB,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA4B;IAChD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAqB;IAClD,OAAO,CAAC,UAAU,CAAwC;IAC1D,mHAAmH;IACnH,OAAO,CAAC,eAAe,CAAgC;IACvD,OAAO,CAAC,aAAa,CAAiC;IACtD,gHAAgH;IAChH,OAAO,CAAC,mBAAmB,CAAuB;gBAEtC,IAAI,EAAE,oBAAoB;IAMtC;;;;;OAKG;IACH,kBAAkB,CAAC,QAAQ,EAAE;QAAE,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,eAAe,CAAC,EAAE,eAAe,GAAG,SAAS,CAAA;KAAE,GAAG,gBAAgB,GAAG,IAAI;IAK3I,+FAA+F;IAC/F,SAAS,IAAI,gBAAgB,GAAG,IAAI;IAIpC;;;;;;;OAOG;IACH,gBAAgB,IAAI,gBAAgB,GAAG,IAAI;IAsC3C;;;;OAIG;IACH;;;;;OAKG;IACH,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAUjC,MAAM,IAAI,YAAY;IAkCtB,gJAAgJ;IAChJ,OAAO,CAAC,aAAa;IAMrB,kIAAkI;IAC5H,KAAK,IAAI,OAAO,CAAC,YAAY,CAAC;IA4FpC,oIAAoI;IACpI,OAAO,CAAC,gBAAgB;IAKxB;;;;OAIG;IACH,OAAO,CAAC,KAAK,EAAE,SAAS,GAAG,IAAI;IAI/B;;;;;;OAMG;IACH,QAAQ,CAAC,MAAM,EAAE,YAAY,GAAG,IAAI;IAKpC;;;;OAIG;IACH,YAAY,IAAI,YAAY,GAAG,IAAI;IA8DnC,kHAAkH;IAClH,OAAO,CAAC,MAAM;CAOf"}

package/dist/skills/runtime.js

@@ -73,6 +73,7 @@
  */
 import { join } from 'node:path';
 import { applySkillsSnapshotEnv, BOOT_SKILLS_SNAPSHOT, canonicalCrewStateHome, SKILLS_SNAPSHOT_ENGINE_ENV } from './engine-env.js';
+import { applyBaseSkillEnv, BASE_SKILL_REF_ENGINE_ENV, baseSkillPosture, normalizeBaseSkillRef } from './base-skill.js';
 import { SKILLS_SOURCE_ENV } from './plugin-source.js';
 import { REFUSED_DIRNAME } from './root-names.js';
 import { SkillsSourceUnavailableError } from './store.js';
@@ -159,7 +160,7 @@ function staleRulesFinding(current, rederived) {
 export { REFUSED_DIRNAME };
 /** The `skills` block a daemon booted WITHOUT the seam reports. */
 export function disabledSkillsHealth() {
-    return { state: 'disabled', root: null, current: null, engineInput: null, stateHome: null, findings: [] };
+    return { state: 'disabled', root: null, current: null, engineInput: null, stateHome: null, findings: [], baseSkill: null };
 }
 /**
  * The path the engine input is pointed at when the daemon has NO valid snapshot to offer and must
@@ -174,20 +175,107 @@ export class SkillsRuntime {
     log;
     bootSnapshot;
     lastHealth = disabledSkillsHealth();
+    /** The base skill setting (crew#554) — `null` until `configureBaseSkill` runs (boot reads settings.json first). */
+    baseSkillConfig = null;
+    lastBaseSkill = null;
+    /** The last `skills.base-skill` message logged — the seam says a finding once per change, not per re-export. */
+    lastBaseSkillLogged = null;
     constructor(opts) {
         this.store = opts.store;
         this.log = opts.log;
         this.bootSnapshot = 'bootSnapshot' in opts ? opts.bootSnapshot : BOOT_SKILLS_SNAPSHOT;
     }
+    /**
+     * Take the base skill setting (crew#554 — `SystemSettings.baseSkillRef` / `baseSkillPolicy`) and
+     * apply it NOW: at boot (before `apply`, so the ladder's outcome re-judges it) and on every
+     * `PUT /settings` that changes it. `baseSkillRef: ""` (or blank) is OFF — the engine variable is
+     * deleted. Answers the posture applied.
+     */
+    configureBaseSkill(settings) {
+        this.baseSkillConfig = { ref: normalizeBaseSkillRef(settings.baseSkillRef), policy: settings.baseSkillPolicy ?? 'warn' };
+        return this.refreshBaseSkill();
+    }
+    /** The base skill posture the engine is handed right now — `null` when off or unconfigured. */
+    baseSkill() {
+        return this.lastBaseSkill;
+    }
+    /**
+     * Re-judge the base skill against the CURRENT published generation and the editor catalog, and
+     * export (or delete) `WICKED_BASE_SKILL_REF` accordingly (base-skill.ts). Called by every ladder
+     * outcome (`record`), after every publish, after a baseline refresh (the catalog moved, so
+     * `inCatalog` did) and on a settings change. Never throws: a generation whose metadata will not
+     * re-read counts as "nothing known to be handed" — under `warn` that unsets the variable and
+     * warns; under `require` the engine refuses at intake, which is the policy's whole point.
+     */
+    refreshBaseSkill() {
+        const config = this.baseSkillConfig;
+        if (config === null)
+            return null;
+        let published = null;
+        if (this.lastHealth.state === 'published') {
+            try {
+                published = this.store.currentSnapshotSkills();
+            }
+            catch {
+                published = null;
+            }
+        }
+        const inCatalog = (name) => {
+            try {
+                const entry = this.store.manifest().skills[name];
+                return entry !== undefined && entry.enabled;
+            }
+            catch {
+                return false;
+            }
+        };
+        const posture = baseSkillPosture(config, published, inCatalog);
+        applyBaseSkillEnv(posture);
+        this.lastBaseSkill = posture;
+        const message = posture?.finding?.message ?? null;
+        // Say it once per CHANGE, and only once the ladder has run: before `apply` the seam is
+        // `disabled` by construction, so a boot-order judgement ("no published snapshot") would log a
+        // warning the first ladder outcome contradicts a moment later. The variable is still applied.
+        const settled = this.lastHealth.state !== 'disabled';
+        if (settled && message !== this.lastBaseSkillLogged) {
+            if (message !== null) {
+                this.log(`[skills] skills.base-skill: ${message} (${BASE_SKILL_REF_ENGINE_ENV} ${posture?.engineInput === null ? 'unset' : `= ${posture?.engineInput}`})`);
+            }
+            else if (this.lastBaseSkillLogged !== null && posture !== null) {
+                this.log(`[skills] skills.base-skill: cleared — "${posture.name}" is handed from generation ${posture.gen ?? '?'} (${BASE_SKILL_REF_ENGINE_ENV} = ${posture.name})`);
+            }
+            this.lastBaseSkillLogged = message;
+        }
+        return posture;
+    }
     /**
      * The seam's last outcome (diagnostics) — plus the live `skills.source` warning when the current
      * baseline is the installer copy (design v3.6). Only a seeded root (`published` / `blocked`) has a
      * current baseline to judge; the other rungs have no manifest, or one their own finding condemns.
      */
+    /**
+     * Does the PUBLISHED snapshot the engine is handed hold (and enable) skill `name`? The interactive
+     * seams gate their `skill_ref` on this (interactive/draft-skill.ts): the engine refuses a run whose
+     * `skill_ref` the snapshot lacks, so a seam must know before it stamps. `false` on every non-published
+     * state (fallback, blocked, config-error, disabled) and on an unreadable manifest — never a guess.
+     */
+    holdsSkill(name) {
+        if (this.lastHealth.state !== 'published')
+            return false;
+        try {
+            const entry = this.store.manifest().skills[name];
+            return entry !== undefined && entry.enabled;
+        }
+        catch {
+            return false;
+        }
+    }
     health() {
         const base = this.lastHealth;
+        // The base skill posture rides EVERY state (crew#554): under fallback / config-error nothing is
+        // known to be handed, which is exactly what the operator must see beside the ladder's finding.
         if (base.state !== 'published' && base.state !== 'blocked')
-            return base;
+            return this.withBaseSkill(base);
         let manifest;
         try {
             manifest = this.store.manifest();
@@ -198,7 +286,7 @@ export class SkillsRuntime {
             // never touches the engine input: whatever is exported stays exported until a restart re-runs
             // the ladder, and the finding says so.
             const cause = err instanceof Error ? err.message : String(err);
-            return {
+            return this.withBaseSkill({
                 state: 'config-error',
                 root: base.root,
                 current: null,
@@ -211,10 +299,17 @@ export class SkillsRuntime {
                         message: `manifest.json cannot be read: ${cause} — the skills store is unusable (every /skills request fails) until it is fixed; ${SKILLS_SNAPSHOT_ENGINE_ENV} still exports what the last boot or publish set (${base.engineInput ?? 'unset'}) until the daemon restarts`,
                     },
                 ],
-            };
+                baseSkill: null,
+            });
         }
         const source = sourceFinding(manifest);
-        return source === null ? base : { ...base, findings: [...base.findings, source] };
+        return this.withBaseSkill(source === null ? base : { ...base, findings: [...base.findings, source] });
+    }
+    /** The reported block carries the base skill posture and its finding (crew#554) — the seam's one answer to "is the discipline skill handed". */
+    withBaseSkill(health) {
+        const posture = this.lastBaseSkill;
+        const findings = posture?.finding === null || posture?.finding === undefined ? health.findings : [...health.findings, posture.finding];
+        return { ...health, findings, baseSkill: posture };
     }
     /** Boot entry point. Never throws; never fails open (module header). Idempotent: a seeded, published root is only re-verified. */
     async apply() {
@@ -243,6 +338,7 @@ export class SkillsRuntime {
                         engineInput: '',
                         stateHome: canonicalCrewStateHome(),
                         findings: [{ kind: 'skills.config', severity: 'error', message: detail }],
+                        baseSkill: null,
                     });
                 }
                 this.log(restored === undefined
@@ -255,6 +351,7 @@ export class SkillsRuntime {
                     engineInput: restored ?? null,
                     stateHome: canonicalCrewStateHome(),
                     findings: [{ kind: 'skills.fallback', severity: 'warning', message }],
+                    baseSkill: null,
                 });
             }
             const refusal = refusalPath(root, 'skills.config');
@@ -267,6 +364,7 @@ export class SkillsRuntime {
                 engineInput: refusal,
                 stateHome: canonicalCrewStateHome(),
                 findings: [{ kind: 'skills.config', severity: 'error', message }],
+                baseSkill: null,
             });
         }
         if (ready.seeded)
@@ -288,6 +386,7 @@ export class SkillsRuntime {
                 engineInput: refusal,
                 stateHome: canonicalCrewStateHome(),
                 findings: [{ kind: 'skills.blocked', severity: 'error', message }],
+                baseSkill: null,
             });
             this.logSourceWarning(blocked);
             return blocked;
@@ -354,10 +453,12 @@ export class SkillsRuntime {
                 engineInput: refusal,
                 stateHome: canonicalCrewStateHome(),
                 findings: [{ kind: 'skills.config', severity: 'error', message }],
+                baseSkill: null,
             });
         }
         if (current === null) {
             this.store.live.exported(null);
+            this.refreshBaseSkill();
             return null;
         }
         applySkillsSnapshotEnv(current.path);
@@ -396,11 +497,15 @@ export class SkillsRuntime {
             engineInput: current.path,
             stateHome: canonicalCrewStateHome(),
             findings: stale === null ? [] : [stale],
+            baseSkill: null,
         });
     }
     /** Store the ladder's outcome; answer it as `health()` reports it (the live `skills.source` warning included). */
     record(health) {
         this.lastHealth = health;
+        // The base skill is judged against THIS outcome (crew#554): a generation just published (or
+        // refused) changes what the engine is handed, so the variable follows the ladder every time.
+        this.refreshBaseSkill();
         return this.health();
     }
 }