textus 0.45.1 → 0.46.0

data/lib/textus/maintenance/key_delete_prefix.rb

@@ -6,11 +6,12 @@ module Textus
 
       verb     :key_delete_prefix
       summary  "Bulk-delete every leaf key under prefix."
-      surfaces :cli, :ruby, :mcp
+      surfaces :cli, :mcp
       cli      "key delete-prefix"
       arg :prefix,  String, required: true, positional: true, description: "every leaf key under this dotted prefix is deleted"
-      arg :dry_run, :boolean, default: true, cli_default: false,
-                              description: "agents plan by default; the CLI applies by default (pass --dry-run to plan only)"
+      arg :dry_run, :boolean, default: false,
+                              description: "when true, returns the keys that would be deleted without deleting them; " \
+                                           "defaults to false, so omitting it deletes immediately"
       view { |v, _i| v.to_h }
 
       def initialize(container:, call:)
@@ -18,7 +19,7 @@ module Textus
         @call         = call
       end
 
-      def call(prefix, dry_run: true)
+      def call(prefix, dry_run: false)
         raise UsageError.new("prefix required") if prefix.nil? || prefix.empty?
 
         leaves = Read::List.new(container: @container)

data/lib/textus/maintenance/key_mv_prefix.rb

@@ -7,12 +7,13 @@ module Textus
 
       verb     :key_mv_prefix
       summary  "Bulk-rename every leaf key under from_prefix to to_prefix. Dry-run returns a Plan; apply with dry_run: false."
-      surfaces :cli, :ruby, :mcp
+      surfaces :cli, :mcp
       cli      "key mv-prefix"
       arg :from_prefix, String, required: true, positional: true, description: "dotted prefix whose leaf keys are renamed"
       arg :to_prefix,   String, required: true, positional: true, description: "dotted prefix the keys are renamed to"
-      arg :dry_run,     :boolean, default: true, cli_default: false,
-                                  description: "agents plan by default; the CLI applies by default (pass --dry-run to plan only)"
+      arg :dry_run,     :boolean, default: false,
+                                  description: "when true, returns the planned moves without applying them; " \
+                                               "defaults to false, so omitting it applies the rename immediately"
       view { |v, _i| v.to_h }
 
       def initialize(container:, call:)
@@ -20,10 +21,19 @@ module Textus
         @call         = call
       end
 
-      def call(from_prefix, to_prefix, dry_run: true)
+      def call(from_prefix, to_prefix, dry_run: false)
         raise UsageError.new("from_prefix and to_prefix required") if from_prefix.nil? || to_prefix.nil?
 
         leaves = list_leaves_under(from_prefix)
+
+        # When from_prefix is itself a leaf, `delete_prefix("#{from_prefix}.")`
+        # finds no trailing dot to strip, so the tail keeps the whole key and the
+        # move silently targets "to_prefix.<full-from_prefix>". Refuse it — a
+        # single-key rename is `mv`'s job, not the bulk prefix verb's.
+        if leaves.include?(from_prefix)
+          raise UsageError.new("from_prefix '#{from_prefix}' is itself a leaf — use `mv` to rename a single key")
+        end
+
         warnings = []
         warnings << "no keys under #{from_prefix}" if leaves.empty?
 

data/lib/textus/maintenance/migrate.rb

@@ -9,11 +9,12 @@ module Textus
 
       verb     :migrate
       summary  "Run a YAML migration plan (multi-op)."
-      surfaces :cli, :ruby, :mcp
+      surfaces :cli, :mcp
       arg :plan_yaml, String, required: true, positional: true, source: :file,
                               description: "path to the YAML migration plan (zone_mv, key_mv_prefix, key_delete_prefix ops run in order)"
-      arg :dry_run, :boolean, default: true, cli_default: false,
-                              description: "agents plan by default; the CLI applies by default (pass --dry-run to plan only)"
+      arg :dry_run, :boolean, default: false,
+                              description: "when true, returns the planned ops without applying them; " \
+                                           "defaults to false, so omitting it runs the migration immediately"
       view { |v, _i| v.to_h }
 
       def initialize(container:, call:)
@@ -21,7 +22,7 @@ module Textus
         @call         = call
       end
 
-      def call(plan_yaml, dry_run: true)
+      def call(plan_yaml, dry_run: false)
         raw = YAML.safe_load(plan_yaml, permitted_classes: [Symbol], aliases: false)
         raise UsageError.new("migration plan must be a YAML mapping") unless raw.is_a?(Hash)
 

data/lib/textus/maintenance/rule_lint.rb

@@ -10,7 +10,7 @@ module Textus
 
       verb     :rule_lint
       summary  "Diff candidate manifest YAML's rules against the live manifest. No writes."
-      surfaces :cli, :ruby, :mcp
+      surfaces :cli, :mcp
       cli      "rule lint"
       arg :candidate_yaml, String, required: true, wire_name: :against, source: :file,
                                    description: "path to candidate manifest YAML; its `rules:` block is diffed against the live manifest"

data/lib/textus/maintenance/zone_mv.rb

@@ -10,12 +10,13 @@ module Textus
 
       verb     :zone_mv
       summary  "Rename a zone — manifest + files. Refuses if destination exists."
-      surfaces :cli, :ruby, :mcp
+      surfaces :cli, :mcp
       cli      "zone mv"
       arg :from,    String, required: true, positional: true, description: "current zone name"
       arg :to,      String, required: true, positional: true, description: "new zone name; refused if a zone by this name already exists"
-      arg :dry_run, :boolean, default: true, cli_default: false,
-                              description: "agents plan by default; the CLI applies by default (pass --dry-run to plan only)"
+      arg :dry_run, :boolean, default: false,
+                              description: "when true, returns the planned zone move without applying it; " \
+                                           "defaults to false, so omitting it applies the move immediately"
       view { |v, _i| v.to_h }
 
       def initialize(container:, call:)
@@ -25,7 +26,7 @@ module Textus
         @root      = container.root
       end
 
-      def call(from, to, dry_run: true)
+      def call(from, to, dry_run: false)
         raise UsageError.new("from and to required") if from.nil? || to.nil? || from.empty? || to.empty?
         raise UsageError.new("zone '#{from}' not declared") unless @manifest.data.declared_zone_kinds.key?(from)
 

data/lib/textus/ports/publisher.rb

@@ -7,8 +7,9 @@ module Textus
     # artifact; no parsing or stripping.
     #
     # Sentinel I/O is delegated to Textus::Ports::SentinelStore. Sentinels live
-    # under `<store_root>/sentinels/` and mirror the target's repo-relative layout
-    # so consumer directories aren't polluted with `.textus-managed.json` siblings.
+    # under `<store_root>/.run/sentinels/` (runtime, git-ignored — ADR 0070) and
+    # mirror the target's repo-relative layout so consumer directories aren't
+    # polluted with `.textus-managed.json` siblings.
     module Publisher
       def self.publish(source:, target:, store_root:)
         FileUtils.mkdir_p(File.dirname(target))

data/lib/textus/ports/sentinel_store.rb

@@ -5,12 +5,12 @@ require "fileutils"
 module Textus
   module Ports
     # Persistence adapter for sentinel files. Owns the on-disk JSON shape, the
-    # path layout (<store_root>/sentinels/<target-rel-to-repo>.textus-managed.json),
-    # and all File/FileUtils I/O. Domain::Sentinel is a pure value object that
-    # depends on this port for reads and writes.
+    # path layout (<store_root>/.run/sentinels/<target-rel-to-repo>.textus-managed.json
+    # — runtime, git-ignored, ADR 0070), and all File/FileUtils I/O.
+    # Domain::Sentinel is a pure value object that depends on this port for
+    # reads and writes.
     class SentinelStore
       SUFFIX = ".textus-managed.json".freeze
-      DIR    = "sentinels".freeze
 
       def write!(target:, source:, store_root:)
         path = sentinel_path(target, store_root)
@@ -39,17 +39,18 @@ module Textus
       def sentinel_path(target, store_root)
         repo_root = File.dirname(store_root)
         rel = relative_to(target, repo_root) || File.basename(target)
-        File.join(store_root, DIR, rel + SUFFIX)
+        File.join(Textus::Layout.sentinels(store_root), rel + SUFFIX)
       end
 
       # Absolute target paths of every sentinel recorded under `target_dir`.
       def targets_under(target_dir, store_root)
         repo_root = File.dirname(store_root)
         rel = relative_to(target_dir, repo_root) or return []
-        sdir = File.join(store_root, DIR, rel)
+        root = Textus::Layout.sentinels(store_root)
+        sdir = File.join(root, rel)
         return [] unless File.directory?(sdir)
 
-        prefix = File.join(store_root, DIR) + "/"
+        prefix = root + "/"
         Dir.glob(File.join(sdir, "**", "*#{SUFFIX}")).map do |spath|
           # strip the sentinel-store prefix and the .textus-managed.json suffix to recover the repo-relative target path
           trel = spath.delete_prefix(prefix).delete_suffix(SUFFIX)

data/lib/textus/projection.rb

@@ -33,15 +33,16 @@ module Textus
       reduced = apply_reducer(rows)
       # Reducers may return either an Array of rows (legacy / templated builds)
       # or a Hash that becomes the structured-format payload base. In the Hash
-      # case, downstream sort/limit/position markers don't apply, and the
-      # builder owns `_meta.generated_at` so we don't stamp it here.
+      # case, downstream sort/limit/position markers don't apply.
       return reduced if reduced.is_a?(Hash)
 
       rows = reduced
       rows = sort(rows)
       rows = rows.first(@limit)
       mark_positions(rows)
-      { "entries" => rows, "count" => rows.length, "generated_at" => Time.now.utc.iso8601 }
+      # No `generated_at` in the payload — the built artifact is content-addressed
+      # (ADR 0070); volatile build time is kept out of the tracked output.
+      { "entries" => rows, "count" => rows.length }
     end
 
     private

data/lib/textus/read/audit.rb

@@ -34,7 +34,7 @@ module Textus
 
       verb     :audit
       summary  "Query the audit log with optional filters."
-      surfaces :cli, :ruby
+      surfaces :cli
       cli      "audit"
       # #call(**filters) — args map to Query.build keyword params (ADR 0063)
       arg :key,            String,  required: false, description: "filter to rows for this key"

data/lib/textus/read/blame.rb

@@ -11,7 +11,7 @@ module Textus
 
       verb     :blame
       summary  "Annotate audit rows for a key with the git commit that introduced each file state."
-      surfaces :cli, :ruby
+      surfaces :cli
       cli      "blame"
       arg :key,   String,  required: true, positional: true, description: "entry key to blame"
       arg :limit, Integer, required: false, description: "maximum number of audit rows to return"

data/lib/textus/read/boot.rb

@@ -9,7 +9,7 @@ module Textus
 
       verb     :boot
       summary  "Return the orientation contract: zones, entries, schemas, write_flows, agent_quickstart."
-      surfaces :cli, :ruby, :mcp
+      surfaces :cli, :mcp
 
       def initialize(container:, call:)
         @container = container

data/lib/textus/read/capabilities.rb

@@ -0,0 +1,70 @@
+module Textus
+  module Read
+    # A machine-readable projection of the contract surface: every verb, the
+    # transports it reaches, and its full argument schema — sourced from the
+    # same Contract DSL the CLI/MCP/boot already project from (ADR 0039/0063).
+    #
+    # Integrators assert their docs against this in CI so they can't drift
+    # (#161 F4 — patrick-nexus docs claimed "MCP exposes 3 verbs" while ~20 are
+    # surfaced). It also makes the per-surface `dry_run` default asymmetry
+    # (#161 F6) self-documenting: each arg carries both `default` (agent wire)
+    # and `cli_default` (CLI), so the divergence is visible, not folklore.
+    #
+    # Pure contract introspection — it reads no store data; `container` is
+    # accepted only for the uniform use-case constructor.
+    class Capabilities
+      extend Textus::Contract::DSL
+
+      verb     :capabilities
+      summary  "Machine-readable contract surface: every verb, its transports, and arg schema."
+      surfaces :cli, :mcp
+      arg :verb, String, required: false, description: "filter to a single verb by name"
+      view { |result, _i| result }
+
+      def initialize(container: nil, call: nil); end
+
+      def call(verb: nil)
+        klasses = Textus::Dispatcher::VERBS.values.select { |k| contract?(k) }
+        rows = klasses.map { |k| project(k.contract) }
+        rows.select! { |r| r["verb"] == verb } if verb
+        { "verbs" => rows.sort_by { |r| r["verb"] } }
+      end
+
+      private
+
+      def contract?(klass)
+        klass.respond_to?(:contract?) && klass.contract?
+      end
+
+      def project(spec)
+        {
+          "verb" => spec.verb.to_s,
+          "summary" => spec.summary,
+          "surfaces" => spec.surfaces.map(&:to_s) + ["ruby"],
+          "cli" => spec.cli? ? spec.cli_path : nil,
+          "args" => spec.args.map { |a| project_arg(a) },
+        }
+      end
+
+      def project_arg(arg)
+        out = {
+          "name" => arg.wire.to_s,
+          "type" => json_type(arg.type),
+          "required" => arg.required,
+          "positional" => arg.positional,
+        }
+        out["description"] = arg.description if arg.description
+        out["default"] = arg.default unless arg.default.nil?
+        out["cli_default"] = arg.cli_default unless arg.cli_default == :__unset
+        out["session_default"] = arg.session_default.to_s if arg.session_default
+        out
+      end
+
+      def json_type(type)
+        Textus::Contract.json_type(type)
+      rescue ArgumentError
+        "string"
+      end
+    end
+  end
+end

data/lib/textus/read/deps.rb

@@ -5,7 +5,7 @@ module Textus
 
       verb     :deps
       summary  "List the keys a derived entry depends on (its projection/external sources)."
-      surfaces :cli, :ruby, :mcp
+      surfaces :cli, :mcp
       arg :key, String, required: true, positional: true,
                         description: "dotted key of the derived entry whose source keys you want"
 

data/lib/textus/read/doctor.rb

@@ -10,7 +10,7 @@ module Textus
 
       verb     :doctor
       summary  "Run health checks on the textus store and report any issues."
-      surfaces :cli, :ruby
+      surfaces :cli
       cli      "doctor"
       arg :checks, Array, required: false, description: "subset of check names to run (default: all)"
 

data/lib/textus/read/freshness.rb

@@ -11,7 +11,7 @@ module Textus
 
       verb     :freshness
       summary  "Report the fetch-freshness status of every entry with a fetch policy."
-      surfaces :cli, :ruby
+      surfaces :cli
       cli      "freshness"
       arg :prefix, String, required: false, description: "filter to keys with this prefix"
       arg :zone,   String, required: false, description: "filter to entries in this zone"

data/lib/textus/read/get.rb

@@ -23,7 +23,7 @@ module Textus
                "the entry's fetch rule, degrading to a pure read when the key " \
                "has no rule. Pass fetch:false for a guaranteed pure on-disk " \
                "read. Returns the envelope (uid, etag, _meta, body, freshness)."
-      surfaces :cli, :ruby, :mcp
+      surfaces :cli, :mcp
       arg :key, String, required: true, positional: true,
                         description: "dotted entry key to read, e.g. 'knowledge.project'"
       arg :fetch, :boolean, default: true,

data/lib/textus/read/list.rb

@@ -5,7 +5,7 @@ module Textus
 
       verb     :list
       summary  "List keys filtered by zone and/or prefix."
-      surfaces :cli, :ruby, :mcp
+      surfaces :cli, :mcp
       arg :prefix, String, description: "restrict to keys starting with this dotted prefix, e.g. 'knowledge.runbooks'"
       arg :zone,   String, description: "restrict to one zone by name (see `boot` zones); combine with prefix to narrow further"
       view(:cli) { |rows| { "entries" => rows } }

data/lib/textus/read/published.rb

@@ -5,7 +5,7 @@ module Textus
 
       verb     :published
       summary  "List all entries that declare a publish_to target."
-      surfaces :cli, :ruby
+      surfaces :cli
       cli      "published"
 
       def initialize(container:, call: nil) # rubocop:disable Lint/UnusedMethodArgument

data/lib/textus/read/pulse.rb

@@ -11,7 +11,7 @@ module Textus
 
       verb     :pulse
       summary  "Delta since cursor — changed entries, stale, pending proposals, doctor summary."
-      surfaces :cli, :ruby, :mcp
+      surfaces :cli, :mcp
       around   :cursor
       arg :since, Integer, session_default: :cursor, description: "audit seq to diff from; defaults to the session cursor"
 

data/lib/textus/read/rdeps.rb

@@ -5,7 +5,7 @@ module Textus
 
       verb     :rdeps
       summary  "List the derived entries that depend on a key (reverse deps / impact set)."
-      surfaces :cli, :ruby, :mcp
+      surfaces :cli, :mcp
       arg :key, String, required: true, positional: true,
                         description: "dotted key whose dependents (what would be stranded if it moved) you want"
 

data/lib/textus/read/rule_explain.rb

@@ -11,7 +11,7 @@ module Textus
 
       verb     :rule_explain
       summary  "Effective rules for a key. Lean {fetch, guard} by default; detail: true adds matched blocks + guard predicates."
-      surfaces :cli, :ruby, :mcp
+      surfaces :cli, :mcp
       cli      "rule explain"
       arg :key,    String, required: true, positional: true,
                            description: "dotted key whose effective rules you want (fetch ttl/action, write guard, ...)"

data/lib/textus/read/rule_list.rb

@@ -9,7 +9,7 @@ module Textus
 
       verb     :rule_list
       summary  "List every rule block in the manifest."
-      surfaces :cli, :ruby
+      surfaces :cli
       cli      "rule list"
       view(:cli) { |policies| { "verb" => "rule_list", "policies" => policies } }
 

data/lib/textus/read/schema_envelope.rb

@@ -5,7 +5,7 @@ module Textus
 
       verb     :schema_show
       summary  "Return the schema (field shape) for an entry's family, by key."
-      surfaces :cli, :ruby, :mcp
+      surfaces :cli, :mcp
       cli      "schema show"
       arg :key, String, required: true, positional: true,
                         description: "any key in the family whose schema you want; returns required/optional fields and their types"

data/lib/textus/read/uid.rb

@@ -5,7 +5,7 @@ module Textus
 
       verb     :uid
       summary  "Return the stable UID of an entry without reading its body."
-      surfaces :cli, :ruby
+      surfaces :cli
       cli      "key uid"
       arg :key, String, required: true, positional: true, description: "entry key"
       view(:cli) { |uid, inputs| { "key" => inputs[:key], "uid" => uid } }

data/lib/textus/read/where.rb

@@ -5,7 +5,7 @@ module Textus
 
       verb     :where
       summary  "Resolve a key to its zone, owner, and path without reading the body."
-      surfaces :cli, :ruby, :mcp
+      surfaces :cli, :mcp
       arg :key, String, required: true, positional: true,
                         description: "dotted key to locate (returns zone, owner, path; does not read content)"
 

data/lib/textus/store.rb

@@ -2,52 +2,50 @@ require "fileutils"
 
 module Textus
   class Store
-    attr_reader :root, :manifest, :schemas, :file_store, :audit_log, :events, :rpc
+    attr_reader :container
+
+    # Readers are derived from the Container's schema, so the field set lives
+    # in exactly one place (Container's Data.define). A new capability added
+    # there is automatically exposed on the Store.
+    Textus::Container.members.each do |field|
+      define_method(field) { @container.public_send(field) }
+    end
 
     def self.discover(start_dir = Dir.pwd, root: nil)
       explicit = root || ENV.fetch("TEXTUS_ROOT", nil)
       return discover_explicit(explicit) if explicit
 
-      dir = File.expand_path(start_dir)
+      ascend_for_store(File.expand_path(start_dir)) ||
+        raise(IoError.new("no .textus directory found from #{start_dir}"))
+    end
+
+    private_class_method def self.ascend_for_store(dir)
       loop do
         candidate = File.join(dir, ".textus")
-        return new(candidate) if File.directory?(candidate) && File.exist?(File.join(candidate, "manifest.yaml"))
+        return new(candidate) if store_dir?(candidate)
 
         parent = File.dirname(dir)
-        break if parent == dir
+        return nil if parent == dir
 
         dir = parent
       end
-      raise IoError.new("no .textus directory found from #{start_dir}")
     end
 
     private_class_method def self.discover_explicit(root_arg)
       abs = File.expand_path(root_arg)
-      raise IoError.new("no textus store at #{abs}") unless File.directory?(abs) && File.exist?(File.join(abs, "manifest.yaml"))
+      raise IoError.new("no textus store at #{abs}") unless store_dir?(abs)
 
       new(abs)
     end
 
-    def initialize(root)
-      @root       = File.expand_path(root)
-      @manifest   = Manifest.load(@root)
-      @schemas    = Schemas.new(File.join(@root, "schemas"))
-      @file_store = Ports::Storage::FileStore.new
-      @audit_log  = Ports::AuditLog.new(
-        @root,
-        max_size: @manifest.data.audit_config[:max_size],
-        keep: @manifest.data.audit_config[:keep],
-      )
-      @events = Hooks::EventBus.new
-      @rpc = Hooks::RpcRegistry.new
-      Ports::AuditSubscriber.new(@audit_log).attach(@events)
-      Hooks::Builtin.register_all(events: @events, rpc: @rpc)
-      Hooks::Loader.new(events: @events, rpc: @rpc).load_dir(File.join(@root, "hooks"))
-      @events.publish(:store_loaded, ctx: Hooks::Context.new(scope: as(Role::DEFAULT)))
+    private_class_method def self.store_dir?(dir)
+      File.directory?(dir) && File.exist?(File.join(dir, "manifest.yaml"))
     end
 
-    def container
-      @container ||= Textus::Container.from_store(self)
+    def initialize(root)
+      @container = build_container(File.expand_path(root))
+      bootstrap_hooks
+      events.publish(:store_loaded, ctx: Hooks::Context.new(scope: as(Role::DEFAULT)))
     end
 
     # Build an agent Session oriented at the current cursor/manifest — the
@@ -70,5 +68,30 @@ module Textus
         as(role).public_send(verb, *args, **kwargs)
       end
     end
+
+    private
+
+    def build_container(root)
+      manifest = Manifest.load(root)
+      Container.new(
+        root: root,
+        manifest: manifest,
+        schemas: Schemas.new(File.join(root, "schemas")),
+        file_store: Ports::Storage::FileStore.new,
+        audit_log: Ports::AuditLog.new(
+          root,
+          max_size: manifest.data.audit_config[:max_size],
+          keep: manifest.data.audit_config[:keep],
+        ),
+        events: Hooks::EventBus.new,
+        rpc: Hooks::RpcRegistry.new,
+      )
+    end
+
+    def bootstrap_hooks
+      Ports::AuditSubscriber.new(audit_log).attach(events)
+      Hooks::Builtin.register_all(events: events, rpc: rpc)
+      Hooks::Loader.new(events: events, rpc: rpc).load_dir(File.join(root, "hooks"))
+    end
   end
 end

data/lib/textus/version.rb

@@ -1,4 +1,4 @@
 module Textus
-  VERSION = "0.45.1"
+  VERSION = "0.46.0"
   PROTOCOL = "textus/3"
 end

data/lib/textus/write/accept.rb

@@ -5,7 +5,7 @@ module Textus
 
       verb :accept
       summary "apply a queued proposal to its target zone; requires the author capability"
-      surfaces :cli, :ruby
+      surfaces :cli, :mcp
       cli "accept"
       arg :pending_key, String, required: true, positional: true, description: "the queued proposal's key"
 

data/lib/textus/write/build.rb

@@ -14,7 +14,7 @@ module Textus
 
       verb     :build
       summary  "materialize derived entries; publish_to and publish_tree fan out copies"
-      surfaces :cli, :ruby
+      surfaces :cli
       cli      "build"
       arg :prefix, String, required: false, description: "limit the build to keys under this prefix"
 

data/lib/textus/write/delete.rb

@@ -6,7 +6,7 @@ module Textus
       verb     :delete
       summary  "Delete one entry by key. Single-key, lower blast radius than " \
                "key_delete_prefix; guarded by an optional optimistic-concurrency etag. Returns {ok, key, deleted}."
-      surfaces :cli, :ruby, :mcp
+      surfaces :cli, :mcp
       cli      "key delete"
       arg :key, String, required: true, positional: true,
                         description: "dotted entry key to delete"

data/lib/textus/write/fetch_all.rb

@@ -5,7 +5,7 @@ module Textus
 
       verb     :fetch_all
       summary  "Fetch all stale quarantine entries, optionally scoped by zone/prefix."
-      surfaces :cli, :ruby, :mcp
+      surfaces :cli, :mcp
       cli      "fetch all"
       arg :prefix, String, description: "only refresh stale entries whose key starts with this dotted prefix"
       arg :zone,   String, description: "only refresh stale entries in this quarantine zone (see `pulse` stale list)"

data/lib/textus/write/fetch_worker.rb

@@ -7,7 +7,7 @@ module Textus
 
       verb     :fetch
       summary  "Run a fetch action for one quarantine entry."
-      surfaces :cli, :ruby, :mcp
+      surfaces :cli, :mcp
       arg :key, String, required: true, positional: true,
                         description: "quarantine-zone entry key to refresh using its declared intake action"
       view { |outcome| { "outcome" => outcome.class.name.split("::").last.downcase } }

data/lib/textus/write/mv.rb

@@ -5,7 +5,7 @@ module Textus
 
       verb     :mv
       summary  "Rename one entry (same zone + format). Refuses if the target exists. Single-key, lower blast radius than key_mv_prefix."
-      surfaces :cli, :ruby, :mcp
+      surfaces :cli, :mcp
       cli      "key mv"
       arg :old_key, String, required: true, positional: true,
                             description: "current dotted key"

data/lib/textus/write/propose.rb

@@ -9,7 +9,7 @@ module Textus
 
       verb     :propose
       summary  "Write a proposal to the role's propose_zone. Auto-prefixes the key."
-      surfaces :cli, :ruby, :mcp
+      surfaces :cli, :mcp
       cli_stdin :json
       arg :key,     String, required: true, positional: true,
                             description: "key relative to propose_zone, e.g. 'decisions.feature-x'"

data/lib/textus/write/put.rb

@@ -5,7 +5,7 @@ module Textus
 
       verb     :put
       summary  "Create or update an entry. Schema-validated. Returns {uid, etag}."
-      surfaces :cli, :ruby, :mcp
+      surfaces :cli, :mcp
       arg :key,     String, required: true, positional: true,
                             description: "dotted entry key, e.g. 'knowledge.project'; must resolve to a zone the role may write"
       arg :meta,    Hash, required: false, wire_name: :_meta,

data/lib/textus/write/reject.rb

@@ -5,7 +5,7 @@ module Textus
 
       verb :reject
       summary "discard a queued proposal without applying it"
-      surfaces :cli, :ruby
+      surfaces :cli, :mcp
       cli "reject"
       arg :pending_key, String, required: true, positional: true, description: "the queued proposal's key"