@ai-matrx/desktop-protocol 0.12.0 → 0.14.0

package/dist/index.d.cts

@@ -1,6 +1,6 @@
 import { z } from 'zod';
-import { O as OpName } from './models-CxAHZMAM.cjs';
-export { B as BEARER_PREFIX, g as CLOSE_RULES, h as CancelMsg, j as ClientToCoreMsg, e as ClientType, k as CloseAction, l as CloseCode, m as CloseCodeValue, C as CloseOutcome, n as CloseRule, o as CoreToClientMsg, p as CreditMsg, D as DesktopProtocolError, d as EVENTS, q as EndMsg, E as EndReason, r as ErrorCode, s as ErrorCodeName, t as ErrorData, u as ErrorMsg, v as ErrorReason, w as ErrorReasonName, x as EventMsg, y as EventName, F as FsPatchEditFailure, H as HelloMsg, L as Limits, z as MlInstallPhase, A as MlInstallProgress, f as MlProgress, G as MlRuntimeState, I as MlServiceState, J as MlServiceStatus, K as MlStatusParams, N as MlStatusResult, P as ModelsInstallParams, Q as ModelsInstallResult, R as ModelsProgressEvent, U as ModelsStatusParams, V as ModelsStatusResult, X as ModelsTranscribeParams, M as ModelsTranscribeResult, Y as NAMED_SCHEMAS, Z as NamedSchemaId, c as OPS, _ as OpDescriptor, a as OpParams, b as OpResult, $ as OpSpec, a0 as PING_TEXT, a1 as PONG_TEXT, a2 as ProtocolErrorBody, a3 as RelayMsg, a4 as RequestMsg, a5 as ResponseMsg, a6 as SERVICES, a7 as SUBPROTOCOL, a8 as ServiceId, a9 as ServiceOpName, aa as ServiceOpSpec, ab as ServiceSpec, S as StreamMeta, ac as StreamMsg, ad as TranscriptSegment, T as TranscriptionModelId, ae as TranscriptionModelInfo, W as Welcome, af as closeRule, i as isDesktopProtocolError, ag as isTerminalClose } from './models-CxAHZMAM.cjs';
+import { O as OpName } from './models-DqFPqtNS.cjs';
+export { B as BEARER_PREFIX, g as CLOSE_RULES, h as CancelMsg, j as ClientToCoreMsg, e as ClientType, k as CloseAction, l as CloseCode, m as CloseCodeValue, C as CloseOutcome, n as CloseRule, o as CoreToClientMsg, p as CreditMsg, D as DesktopProtocolError, d as EVENTS, q as EndMsg, E as EndReason, r as ErrorCode, s as ErrorCodeName, t as ErrorData, u as ErrorMsg, v as ErrorReason, w as ErrorReasonName, x as EventMsg, y as EventName, F as FsPatchEditFailure, H as HelloMsg, L as Limits, z as MlInstallPhase, A as MlInstallProgress, f as MlProgress, G as MlRuntimeState, I as MlServiceState, J as MlServiceStatus, K as MlStatusParams, N as MlStatusResult, P as ModelsInstallParams, Q as ModelsInstallResult, R as ModelsProgressEvent, U as ModelsStatusParams, V as ModelsStatusResult, X as ModelsTranscribeParams, M as ModelsTranscribeResult, Y as NAMED_SCHEMAS, Z as NamedSchemaId, c as OPS, _ as OpDescriptor, a as OpParams, b as OpResult, $ as OpSpec, a0 as PING_TEXT, a1 as PONG_TEXT, a2 as ProtocolErrorBody, a3 as RelayMsg, a4 as RequestMsg, a5 as ResponseMsg, a6 as SERVICES, a7 as SUBPROTOCOL, a8 as ServiceId, a9 as ServiceOpName, aa as ServiceOpSpec, ab as ServiceSpec, S as StreamMeta, ac as StreamMsg, ad as TranscriptSegment, T as TranscriptionModelId, ae as TranscriptionModelInfo, W as Welcome, af as closeRule, i as isDesktopProtocolError, ag as isTerminalClose } from './models-DqFPqtNS.cjs';
 export { BROADCAST_CID, DecodedFrame, FRAME_HEADER_BYTES, FRAME_STRUCT_FORMAT, FRAME_VERSION, FrameChannel, FrameChannelValue, FrameFlag, assertFrameHeader, connectionEndFrame, decodeFrame, encodeFrame, hasFlag, isConnectionEnd, readCid, stampCid } from './frame.cjs';
 
 /** @ai-matrx/desktop-protocol — version and primitive schemas. Schema source: lint-enforced rules in scripts/check-schema-source.mjs. */
@@ -13,10 +13,11 @@ declare const PROTOCOL_MAJOR: 1;
  *         device status since_ms is null for a device that never connected.
  *   1.2 — the `models` capability (local transcription) and its error reasons (REASONS_SINCE);
  *         the `apps` capability (desktop apps, their profiles and usage).
+ *   1.3 — the `proc` capability (processes, listening ports, stopping one) and `clipboard`.
  */
-declare const PROTOCOL_MINOR: 2;
+declare const PROTOCOL_MINOR: 3;
 /** This package's version as the wire spells it ("major.minor"): hello, welcome, relay status. */
-declare const PROTOCOL_VERSION: "1.2";
+declare const PROTOCOL_VERSION: "1.3";
 /** Internal building blocks — deliberately unnamed in $defs (inlined wherever used). */
 declare const u32: z.ZodInt;
 declare const nonNegInt: z.ZodInt;
@@ -1642,6 +1643,116 @@ declare const ToolResultsFile: z.ZodObject<{
 }, z.core.$strict>;
 type ToolResultsFile = z.output<typeof ToolResultsFile>;
 
+/**
+ * @ai-matrx/desktop-protocol — cap proc (SPEC §6): the processes running on the person's computer,
+ * the ports they listen on, and stopping one. Schema source: lint-enforced rules in
+ * scripts/check-schema-source.mjs. Added in protocol 1.3.
+ */
+
+declare const ProcSort: z.ZodEnum<{
+    name: "name";
+    cpu: "cpu";
+    memory: "memory";
+    pid: "pid";
+}>;
+declare const ProcListParams: z.ZodObject<{
+    name: z.ZodOptional<z.ZodString>;
+    sort: z.ZodDefault<z.ZodEnum<{
+        name: "name";
+        cpu: "cpu";
+        memory: "memory";
+        pid: "pid";
+    }>>;
+    limit: z.ZodDefault<z.ZodInt>;
+}, z.core.$strict>;
+type ProcListParams = z.output<typeof ProcListParams>;
+declare const ProcListResult: z.ZodObject<{
+    processes: z.ZodArray<z.ZodObject<{
+        pid: z.ZodInt;
+        ppid: z.ZodNullable<z.ZodInt>;
+        name: z.ZodString;
+        command: z.ZodString;
+        cpu_percent: z.ZodNullable<z.ZodNumber>;
+        memory_bytes: z.ZodNullable<z.ZodInt>;
+        user: z.ZodNullable<z.ZodString>;
+    }, z.core.$strict>>;
+    total: z.ZodInt;
+    truncated: z.ZodBoolean;
+}, z.core.$strict>;
+type ProcListResult = z.output<typeof ProcListResult>;
+declare const ProcInfo: z.ZodObject<{
+    pid: z.ZodInt;
+    ppid: z.ZodNullable<z.ZodInt>;
+    name: z.ZodString;
+    command: z.ZodString;
+    cpu_percent: z.ZodNullable<z.ZodNumber>;
+    memory_bytes: z.ZodNullable<z.ZodInt>;
+    user: z.ZodNullable<z.ZodString>;
+}, z.core.$strict>;
+type ProcInfo = z.output<typeof ProcInfo>;
+declare const ProcPortsParams: z.ZodObject<{
+    port: z.ZodOptional<z.ZodInt>;
+}, z.core.$strict>;
+type ProcPortsParams = z.output<typeof ProcPortsParams>;
+declare const ProcPortsResult: z.ZodObject<{
+    ports: z.ZodArray<z.ZodObject<{
+        port: z.ZodInt;
+        protocol: z.ZodEnum<{
+            tcp: "tcp";
+            udp: "udp";
+        }>;
+        address: z.ZodString;
+        pid: z.ZodNullable<z.ZodInt>;
+        process: z.ZodNullable<z.ZodString>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+type ProcPortsResult = z.output<typeof ProcPortsResult>;
+declare const ProcPort: z.ZodObject<{
+    port: z.ZodInt;
+    protocol: z.ZodEnum<{
+        tcp: "tcp";
+        udp: "udp";
+    }>;
+    address: z.ZodString;
+    pid: z.ZodNullable<z.ZodInt>;
+    process: z.ZodNullable<z.ZodString>;
+}, z.core.$strict>;
+type ProcPort = z.output<typeof ProcPort>;
+declare const ProcKillParams: z.ZodObject<{
+    pid: z.ZodInt;
+    force: z.ZodDefault<z.ZodBoolean>;
+}, z.core.$strict>;
+type ProcKillParams = z.output<typeof ProcKillParams>;
+declare const ProcKillResult: z.ZodObject<{
+    pid: z.ZodInt;
+    signal: z.ZodEnum<{
+        SIGTERM: "SIGTERM";
+        SIGKILL: "SIGKILL";
+    }>;
+    exited: z.ZodBoolean;
+}, z.core.$strict>;
+type ProcKillResult = z.output<typeof ProcKillResult>;
+
+/**
+ * @ai-matrx/desktop-protocol — cap clipboard (SPEC §6): the system clipboard's text. Schema source:
+ * lint-enforced rules in scripts/check-schema-source.mjs. Added in protocol 1.3.
+ */
+
+declare const ClipboardReadParams: z.ZodObject<{}, z.core.$strict>;
+declare const ClipboardReadResult: z.ZodObject<{
+    text: z.ZodString;
+    truncated: z.ZodBoolean;
+}, z.core.$strict>;
+type ClipboardReadResult = z.output<typeof ClipboardReadResult>;
+declare const ClipboardWriteParams: z.ZodObject<{
+    text: z.ZodString;
+}, z.core.$strict>;
+type ClipboardWriteParams = z.output<typeof ClipboardWriteParams>;
+declare const ClipboardWriteResult: z.ZodObject<{
+    bytes: z.ZodInt;
+}, z.core.$strict>;
+type ClipboardWriteResult = z.output<typeof ClipboardWriteResult>;
+
 /**
  * Version skew is the normal state: a phone, the server and a desktop app in the field run
  * different package versions, and a minor protocol bump must never make any of them fail.
@@ -1728,7 +1839,7 @@ declare function forPeer(op: OpName | null, part: "error", value: unknown, versi
 declare const VERSIONED_RESULT_OPS: readonly OpName[];
 
 /** SHA-256 of generated/desktop-protocol.schema.json: the contract both sides of a service connection were built from. */
-declare const CONTRACT_SHA256: "ef9fd8c8ab611bf450730452a6cf48a4ebd566218b6e17e2834ef030fc2044cb";
+declare const CONTRACT_SHA256: "0354e634fd50ffdc4c83b7ede7f9c31f3b2c877c4574557a6b264d2998470fd6";
 
 /**
  * The local tool catalog (SPEC §10): every tool a platform agent calls on a person's computer, the
@@ -1777,6 +1888,11 @@ interface CatalogTool {
     readonly note?: string;
 }
 declare const TOOL_CATALOG: readonly CatalogTool[];
+/**
+ * Tools armed with a device binding that are deliberately NOT device tools, each with its reason.
+ * They run on the server; the status table does not track them.
+ */
+declare const EXCLUDED_TOOLS: Readonly<Record<string, string>>;
 /** What became of one matrx-local handler. */
 type LegacyDisposition = {
     readonly kind: "tool";
@@ -1855,4 +1971,4 @@ declare function buildToolStatus(files: readonly unknown[], opts: {
 /** The committed text form. Columns: per platform, the three levels (P = programmatic, R = protocol, C = chat). */
 declare function renderToolStatusMarkdown(status: ToolStatus): string;
 
-export { AbsPath, AppFeatureStatus, AppInfo, AppKey, AppProfile, AppProfileId, AppProfileLocator, AppSupport, AppUsageReading, AppsListParams, AppsListResult, AppsOpenParams, AppsOpenResult, AppsProfilesListParams, AppsProfilesListResult, AppsProfilesRemoveParams, AppsProfilesRemoveResult, AppsProfilesSaveParams, AppsProfilesSaveResult, CONTRACT_SHA256, type CatalogTool, type CellState, ContractHash, CoreToServiceMsg, DEFAULT_MAX_FRAME_PAYLOAD_BYTES, DEFAULT_MAX_MESSAGE_BYTES, DEFAULT_WINDOW_BYTES, DeviceId, ExecCwdEvent, ExecExitedEvent, ExecListParams, ExecListResult, ExecPtyKillParams, ExecPtyKillResult, ExecPtyResizeParams, ExecPtyResizeResult, ExecPtySignalParams, ExecPtySignalResult, ExecPtyStartParams, ExecPtyStartResult, ExecPtyWriteParams, ExecPtyWriteResult, ExecRunParams, ExecRunResult, ExecTitleEvent, FIELDS_SINCE, type FieldsSincePath, FrameHeader, FsChange, FsChangedEvent, FsDeleteParams, FsDeleteResult, FsEncoding, FsEntry, FsKind, FsListParams, FsListResult, FsMkdirParams, FsMkdirResult, FsMoveParams, FsMoveResult, FsPatchEditApplied, FsPatchParams, FsPatchResult, FsReadParams, FsReadResult, FsReadStreamParams, FsReadStreamResult, FsSearchContentParams, FsSearchContentResult, FsSearchPathsParams, FsSearchPathsResult, FsStatParams, FsStatResult, FsWatchParams, FsWatchResult, FsWriteParams, FsWriteResult, LEGACY_ACTIONS, LEGACY_DISPATCHERS, type LegacyDisposition, NULL_SINCE, OpName, OsPermissionName, PROTOCOL_MAJOR, PROTOCOL_MINOR, PROTOCOL_VERSION, ProtocolVersion, PtyInfo, REASONS_SINCE, RELAY_CALL_HELLO_ID, RELAY_CALL_REQUEST_ID, RELAY_CALL_VERSION_HEADER, RelayAuthExpiringEvent, RelayCallEnvelope, RelayCallHello, RelayCallRequest, RelayCallResponse, RelayDeviceStatusEvent, RelayHopConnectionEnd, RelayHopEnvelopeHeader, RelayStatusResponse, RequestId, ResourceId, ResourceInfo, SERVICE_MAX_FRAME_BYTES, ServiceCancel, ServiceErrorMsg, ServiceHello, ServiceName, ServicePing, ServicePong, ServiceProgressMsg, ServiceRequest, ServiceResponse, ServiceShutdown, ServiceToCoreMsg, ServiceToken, ServiceWelcome, SessionAttachParams, SessionAttachResult, SessionControlChangedEvent, SessionDetachParams, SessionDetachResult, SessionListParams, SessionListResult, SessionReleaseParams, SessionReleaseResult, Signal, type StatusCell, type StatusEvidence, type StatusRow, SysinfoGetParams, SysinfoGetResult, TOOL_CATALOG, TOOL_GROUPS, TOOL_LEVELS, TOOL_PLATFORMS, type ToolGroup, type ToolGroupId, ToolLevel, ToolLevelResult, ToolName, ToolOutcome, type ToolPath, ToolPlatform, ToolResultsFile, type ToolState, type ToolStatus, ToolTransport, VERSIONED_RESULT_OPS, announcedVersion, buildToolStatus, builtOps, compareVersions, epochMs, forPeer, knows, negotiate, nonNegInt, renderToolStatusMarkdown, statusForPeer, u32, versionSubprotocol };
+export { AbsPath, AppFeatureStatus, AppInfo, AppKey, AppProfile, AppProfileId, AppProfileLocator, AppSupport, AppUsageReading, AppsListParams, AppsListResult, AppsOpenParams, AppsOpenResult, AppsProfilesListParams, AppsProfilesListResult, AppsProfilesRemoveParams, AppsProfilesRemoveResult, AppsProfilesSaveParams, AppsProfilesSaveResult, CONTRACT_SHA256, type CatalogTool, type CellState, ClipboardReadParams, ClipboardReadResult, ClipboardWriteParams, ClipboardWriteResult, ContractHash, CoreToServiceMsg, DEFAULT_MAX_FRAME_PAYLOAD_BYTES, DEFAULT_MAX_MESSAGE_BYTES, DEFAULT_WINDOW_BYTES, DeviceId, EXCLUDED_TOOLS, ExecCwdEvent, ExecExitedEvent, ExecListParams, ExecListResult, ExecPtyKillParams, ExecPtyKillResult, ExecPtyResizeParams, ExecPtyResizeResult, ExecPtySignalParams, ExecPtySignalResult, ExecPtyStartParams, ExecPtyStartResult, ExecPtyWriteParams, ExecPtyWriteResult, ExecRunParams, ExecRunResult, ExecTitleEvent, FIELDS_SINCE, type FieldsSincePath, FrameHeader, FsChange, FsChangedEvent, FsDeleteParams, FsDeleteResult, FsEncoding, FsEntry, FsKind, FsListParams, FsListResult, FsMkdirParams, FsMkdirResult, FsMoveParams, FsMoveResult, FsPatchEditApplied, FsPatchParams, FsPatchResult, FsReadParams, FsReadResult, FsReadStreamParams, FsReadStreamResult, FsSearchContentParams, FsSearchContentResult, FsSearchPathsParams, FsSearchPathsResult, FsStatParams, FsStatResult, FsWatchParams, FsWatchResult, FsWriteParams, FsWriteResult, LEGACY_ACTIONS, LEGACY_DISPATCHERS, type LegacyDisposition, NULL_SINCE, OpName, OsPermissionName, PROTOCOL_MAJOR, PROTOCOL_MINOR, PROTOCOL_VERSION, ProcInfo, ProcKillParams, ProcKillResult, ProcListParams, ProcListResult, ProcPort, ProcPortsParams, ProcPortsResult, ProcSort, ProtocolVersion, PtyInfo, REASONS_SINCE, RELAY_CALL_HELLO_ID, RELAY_CALL_REQUEST_ID, RELAY_CALL_VERSION_HEADER, RelayAuthExpiringEvent, RelayCallEnvelope, RelayCallHello, RelayCallRequest, RelayCallResponse, RelayDeviceStatusEvent, RelayHopConnectionEnd, RelayHopEnvelopeHeader, RelayStatusResponse, RequestId, ResourceId, ResourceInfo, SERVICE_MAX_FRAME_BYTES, ServiceCancel, ServiceErrorMsg, ServiceHello, ServiceName, ServicePing, ServicePong, ServiceProgressMsg, ServiceRequest, ServiceResponse, ServiceShutdown, ServiceToCoreMsg, ServiceToken, ServiceWelcome, SessionAttachParams, SessionAttachResult, SessionControlChangedEvent, SessionDetachParams, SessionDetachResult, SessionListParams, SessionListResult, SessionReleaseParams, SessionReleaseResult, Signal, type StatusCell, type StatusEvidence, type StatusRow, SysinfoGetParams, SysinfoGetResult, TOOL_CATALOG, TOOL_GROUPS, TOOL_LEVELS, TOOL_PLATFORMS, type ToolGroup, type ToolGroupId, ToolLevel, ToolLevelResult, ToolName, ToolOutcome, type ToolPath, ToolPlatform, ToolResultsFile, type ToolState, type ToolStatus, ToolTransport, VERSIONED_RESULT_OPS, announcedVersion, buildToolStatus, builtOps, compareVersions, epochMs, forPeer, knows, negotiate, nonNegInt, renderToolStatusMarkdown, statusForPeer, u32, versionSubprotocol };

package/dist/index.d.ts

@@ -1,6 +1,6 @@
 import { z } from 'zod';
-import { O as OpName } from './models-CxAHZMAM.js';
-export { B as BEARER_PREFIX, g as CLOSE_RULES, h as CancelMsg, j as ClientToCoreMsg, e as ClientType, k as CloseAction, l as CloseCode, m as CloseCodeValue, C as CloseOutcome, n as CloseRule, o as CoreToClientMsg, p as CreditMsg, D as DesktopProtocolError, d as EVENTS, q as EndMsg, E as EndReason, r as ErrorCode, s as ErrorCodeName, t as ErrorData, u as ErrorMsg, v as ErrorReason, w as ErrorReasonName, x as EventMsg, y as EventName, F as FsPatchEditFailure, H as HelloMsg, L as Limits, z as MlInstallPhase, A as MlInstallProgress, f as MlProgress, G as MlRuntimeState, I as MlServiceState, J as MlServiceStatus, K as MlStatusParams, N as MlStatusResult, P as ModelsInstallParams, Q as ModelsInstallResult, R as ModelsProgressEvent, U as ModelsStatusParams, V as ModelsStatusResult, X as ModelsTranscribeParams, M as ModelsTranscribeResult, Y as NAMED_SCHEMAS, Z as NamedSchemaId, c as OPS, _ as OpDescriptor, a as OpParams, b as OpResult, $ as OpSpec, a0 as PING_TEXT, a1 as PONG_TEXT, a2 as ProtocolErrorBody, a3 as RelayMsg, a4 as RequestMsg, a5 as ResponseMsg, a6 as SERVICES, a7 as SUBPROTOCOL, a8 as ServiceId, a9 as ServiceOpName, aa as ServiceOpSpec, ab as ServiceSpec, S as StreamMeta, ac as StreamMsg, ad as TranscriptSegment, T as TranscriptionModelId, ae as TranscriptionModelInfo, W as Welcome, af as closeRule, i as isDesktopProtocolError, ag as isTerminalClose } from './models-CxAHZMAM.js';
+import { O as OpName } from './models-DqFPqtNS.js';
+export { B as BEARER_PREFIX, g as CLOSE_RULES, h as CancelMsg, j as ClientToCoreMsg, e as ClientType, k as CloseAction, l as CloseCode, m as CloseCodeValue, C as CloseOutcome, n as CloseRule, o as CoreToClientMsg, p as CreditMsg, D as DesktopProtocolError, d as EVENTS, q as EndMsg, E as EndReason, r as ErrorCode, s as ErrorCodeName, t as ErrorData, u as ErrorMsg, v as ErrorReason, w as ErrorReasonName, x as EventMsg, y as EventName, F as FsPatchEditFailure, H as HelloMsg, L as Limits, z as MlInstallPhase, A as MlInstallProgress, f as MlProgress, G as MlRuntimeState, I as MlServiceState, J as MlServiceStatus, K as MlStatusParams, N as MlStatusResult, P as ModelsInstallParams, Q as ModelsInstallResult, R as ModelsProgressEvent, U as ModelsStatusParams, V as ModelsStatusResult, X as ModelsTranscribeParams, M as ModelsTranscribeResult, Y as NAMED_SCHEMAS, Z as NamedSchemaId, c as OPS, _ as OpDescriptor, a as OpParams, b as OpResult, $ as OpSpec, a0 as PING_TEXT, a1 as PONG_TEXT, a2 as ProtocolErrorBody, a3 as RelayMsg, a4 as RequestMsg, a5 as ResponseMsg, a6 as SERVICES, a7 as SUBPROTOCOL, a8 as ServiceId, a9 as ServiceOpName, aa as ServiceOpSpec, ab as ServiceSpec, S as StreamMeta, ac as StreamMsg, ad as TranscriptSegment, T as TranscriptionModelId, ae as TranscriptionModelInfo, W as Welcome, af as closeRule, i as isDesktopProtocolError, ag as isTerminalClose } from './models-DqFPqtNS.js';
 export { BROADCAST_CID, DecodedFrame, FRAME_HEADER_BYTES, FRAME_STRUCT_FORMAT, FRAME_VERSION, FrameChannel, FrameChannelValue, FrameFlag, assertFrameHeader, connectionEndFrame, decodeFrame, encodeFrame, hasFlag, isConnectionEnd, readCid, stampCid } from './frame.js';
 
 /** @ai-matrx/desktop-protocol — version and primitive schemas. Schema source: lint-enforced rules in scripts/check-schema-source.mjs. */
@@ -13,10 +13,11 @@ declare const PROTOCOL_MAJOR: 1;
  *         device status since_ms is null for a device that never connected.
  *   1.2 — the `models` capability (local transcription) and its error reasons (REASONS_SINCE);
  *         the `apps` capability (desktop apps, their profiles and usage).
+ *   1.3 — the `proc` capability (processes, listening ports, stopping one) and `clipboard`.
  */
-declare const PROTOCOL_MINOR: 2;
+declare const PROTOCOL_MINOR: 3;
 /** This package's version as the wire spells it ("major.minor"): hello, welcome, relay status. */
-declare const PROTOCOL_VERSION: "1.2";
+declare const PROTOCOL_VERSION: "1.3";
 /** Internal building blocks — deliberately unnamed in $defs (inlined wherever used). */
 declare const u32: z.ZodInt;
 declare const nonNegInt: z.ZodInt;
@@ -1642,6 +1643,116 @@ declare const ToolResultsFile: z.ZodObject<{
 }, z.core.$strict>;
 type ToolResultsFile = z.output<typeof ToolResultsFile>;
 
+/**
+ * @ai-matrx/desktop-protocol — cap proc (SPEC §6): the processes running on the person's computer,
+ * the ports they listen on, and stopping one. Schema source: lint-enforced rules in
+ * scripts/check-schema-source.mjs. Added in protocol 1.3.
+ */
+
+declare const ProcSort: z.ZodEnum<{
+    name: "name";
+    cpu: "cpu";
+    memory: "memory";
+    pid: "pid";
+}>;
+declare const ProcListParams: z.ZodObject<{
+    name: z.ZodOptional<z.ZodString>;
+    sort: z.ZodDefault<z.ZodEnum<{
+        name: "name";
+        cpu: "cpu";
+        memory: "memory";
+        pid: "pid";
+    }>>;
+    limit: z.ZodDefault<z.ZodInt>;
+}, z.core.$strict>;
+type ProcListParams = z.output<typeof ProcListParams>;
+declare const ProcListResult: z.ZodObject<{
+    processes: z.ZodArray<z.ZodObject<{
+        pid: z.ZodInt;
+        ppid: z.ZodNullable<z.ZodInt>;
+        name: z.ZodString;
+        command: z.ZodString;
+        cpu_percent: z.ZodNullable<z.ZodNumber>;
+        memory_bytes: z.ZodNullable<z.ZodInt>;
+        user: z.ZodNullable<z.ZodString>;
+    }, z.core.$strict>>;
+    total: z.ZodInt;
+    truncated: z.ZodBoolean;
+}, z.core.$strict>;
+type ProcListResult = z.output<typeof ProcListResult>;
+declare const ProcInfo: z.ZodObject<{
+    pid: z.ZodInt;
+    ppid: z.ZodNullable<z.ZodInt>;
+    name: z.ZodString;
+    command: z.ZodString;
+    cpu_percent: z.ZodNullable<z.ZodNumber>;
+    memory_bytes: z.ZodNullable<z.ZodInt>;
+    user: z.ZodNullable<z.ZodString>;
+}, z.core.$strict>;
+type ProcInfo = z.output<typeof ProcInfo>;
+declare const ProcPortsParams: z.ZodObject<{
+    port: z.ZodOptional<z.ZodInt>;
+}, z.core.$strict>;
+type ProcPortsParams = z.output<typeof ProcPortsParams>;
+declare const ProcPortsResult: z.ZodObject<{
+    ports: z.ZodArray<z.ZodObject<{
+        port: z.ZodInt;
+        protocol: z.ZodEnum<{
+            tcp: "tcp";
+            udp: "udp";
+        }>;
+        address: z.ZodString;
+        pid: z.ZodNullable<z.ZodInt>;
+        process: z.ZodNullable<z.ZodString>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+type ProcPortsResult = z.output<typeof ProcPortsResult>;
+declare const ProcPort: z.ZodObject<{
+    port: z.ZodInt;
+    protocol: z.ZodEnum<{
+        tcp: "tcp";
+        udp: "udp";
+    }>;
+    address: z.ZodString;
+    pid: z.ZodNullable<z.ZodInt>;
+    process: z.ZodNullable<z.ZodString>;
+}, z.core.$strict>;
+type ProcPort = z.output<typeof ProcPort>;
+declare const ProcKillParams: z.ZodObject<{
+    pid: z.ZodInt;
+    force: z.ZodDefault<z.ZodBoolean>;
+}, z.core.$strict>;
+type ProcKillParams = z.output<typeof ProcKillParams>;
+declare const ProcKillResult: z.ZodObject<{
+    pid: z.ZodInt;
+    signal: z.ZodEnum<{
+        SIGTERM: "SIGTERM";
+        SIGKILL: "SIGKILL";
+    }>;
+    exited: z.ZodBoolean;
+}, z.core.$strict>;
+type ProcKillResult = z.output<typeof ProcKillResult>;
+
+/**
+ * @ai-matrx/desktop-protocol — cap clipboard (SPEC §6): the system clipboard's text. Schema source:
+ * lint-enforced rules in scripts/check-schema-source.mjs. Added in protocol 1.3.
+ */
+
+declare const ClipboardReadParams: z.ZodObject<{}, z.core.$strict>;
+declare const ClipboardReadResult: z.ZodObject<{
+    text: z.ZodString;
+    truncated: z.ZodBoolean;
+}, z.core.$strict>;
+type ClipboardReadResult = z.output<typeof ClipboardReadResult>;
+declare const ClipboardWriteParams: z.ZodObject<{
+    text: z.ZodString;
+}, z.core.$strict>;
+type ClipboardWriteParams = z.output<typeof ClipboardWriteParams>;
+declare const ClipboardWriteResult: z.ZodObject<{
+    bytes: z.ZodInt;
+}, z.core.$strict>;
+type ClipboardWriteResult = z.output<typeof ClipboardWriteResult>;
+
 /**
  * Version skew is the normal state: a phone, the server and a desktop app in the field run
  * different package versions, and a minor protocol bump must never make any of them fail.
@@ -1728,7 +1839,7 @@ declare function forPeer(op: OpName | null, part: "error", value: unknown, versi
 declare const VERSIONED_RESULT_OPS: readonly OpName[];
 
 /** SHA-256 of generated/desktop-protocol.schema.json: the contract both sides of a service connection were built from. */
-declare const CONTRACT_SHA256: "ef9fd8c8ab611bf450730452a6cf48a4ebd566218b6e17e2834ef030fc2044cb";
+declare const CONTRACT_SHA256: "0354e634fd50ffdc4c83b7ede7f9c31f3b2c877c4574557a6b264d2998470fd6";
 
 /**
  * The local tool catalog (SPEC §10): every tool a platform agent calls on a person's computer, the
@@ -1777,6 +1888,11 @@ interface CatalogTool {
     readonly note?: string;
 }
 declare const TOOL_CATALOG: readonly CatalogTool[];
+/**
+ * Tools armed with a device binding that are deliberately NOT device tools, each with its reason.
+ * They run on the server; the status table does not track them.
+ */
+declare const EXCLUDED_TOOLS: Readonly<Record<string, string>>;
 /** What became of one matrx-local handler. */
 type LegacyDisposition = {
     readonly kind: "tool";
@@ -1855,4 +1971,4 @@ declare function buildToolStatus(files: readonly unknown[], opts: {
 /** The committed text form. Columns: per platform, the three levels (P = programmatic, R = protocol, C = chat). */
 declare function renderToolStatusMarkdown(status: ToolStatus): string;
 
-export { AbsPath, AppFeatureStatus, AppInfo, AppKey, AppProfile, AppProfileId, AppProfileLocator, AppSupport, AppUsageReading, AppsListParams, AppsListResult, AppsOpenParams, AppsOpenResult, AppsProfilesListParams, AppsProfilesListResult, AppsProfilesRemoveParams, AppsProfilesRemoveResult, AppsProfilesSaveParams, AppsProfilesSaveResult, CONTRACT_SHA256, type CatalogTool, type CellState, ContractHash, CoreToServiceMsg, DEFAULT_MAX_FRAME_PAYLOAD_BYTES, DEFAULT_MAX_MESSAGE_BYTES, DEFAULT_WINDOW_BYTES, DeviceId, ExecCwdEvent, ExecExitedEvent, ExecListParams, ExecListResult, ExecPtyKillParams, ExecPtyKillResult, ExecPtyResizeParams, ExecPtyResizeResult, ExecPtySignalParams, ExecPtySignalResult, ExecPtyStartParams, ExecPtyStartResult, ExecPtyWriteParams, ExecPtyWriteResult, ExecRunParams, ExecRunResult, ExecTitleEvent, FIELDS_SINCE, type FieldsSincePath, FrameHeader, FsChange, FsChangedEvent, FsDeleteParams, FsDeleteResult, FsEncoding, FsEntry, FsKind, FsListParams, FsListResult, FsMkdirParams, FsMkdirResult, FsMoveParams, FsMoveResult, FsPatchEditApplied, FsPatchParams, FsPatchResult, FsReadParams, FsReadResult, FsReadStreamParams, FsReadStreamResult, FsSearchContentParams, FsSearchContentResult, FsSearchPathsParams, FsSearchPathsResult, FsStatParams, FsStatResult, FsWatchParams, FsWatchResult, FsWriteParams, FsWriteResult, LEGACY_ACTIONS, LEGACY_DISPATCHERS, type LegacyDisposition, NULL_SINCE, OpName, OsPermissionName, PROTOCOL_MAJOR, PROTOCOL_MINOR, PROTOCOL_VERSION, ProtocolVersion, PtyInfo, REASONS_SINCE, RELAY_CALL_HELLO_ID, RELAY_CALL_REQUEST_ID, RELAY_CALL_VERSION_HEADER, RelayAuthExpiringEvent, RelayCallEnvelope, RelayCallHello, RelayCallRequest, RelayCallResponse, RelayDeviceStatusEvent, RelayHopConnectionEnd, RelayHopEnvelopeHeader, RelayStatusResponse, RequestId, ResourceId, ResourceInfo, SERVICE_MAX_FRAME_BYTES, ServiceCancel, ServiceErrorMsg, ServiceHello, ServiceName, ServicePing, ServicePong, ServiceProgressMsg, ServiceRequest, ServiceResponse, ServiceShutdown, ServiceToCoreMsg, ServiceToken, ServiceWelcome, SessionAttachParams, SessionAttachResult, SessionControlChangedEvent, SessionDetachParams, SessionDetachResult, SessionListParams, SessionListResult, SessionReleaseParams, SessionReleaseResult, Signal, type StatusCell, type StatusEvidence, type StatusRow, SysinfoGetParams, SysinfoGetResult, TOOL_CATALOG, TOOL_GROUPS, TOOL_LEVELS, TOOL_PLATFORMS, type ToolGroup, type ToolGroupId, ToolLevel, ToolLevelResult, ToolName, ToolOutcome, type ToolPath, ToolPlatform, ToolResultsFile, type ToolState, type ToolStatus, ToolTransport, VERSIONED_RESULT_OPS, announcedVersion, buildToolStatus, builtOps, compareVersions, epochMs, forPeer, knows, negotiate, nonNegInt, renderToolStatusMarkdown, statusForPeer, u32, versionSubprotocol };
+export { AbsPath, AppFeatureStatus, AppInfo, AppKey, AppProfile, AppProfileId, AppProfileLocator, AppSupport, AppUsageReading, AppsListParams, AppsListResult, AppsOpenParams, AppsOpenResult, AppsProfilesListParams, AppsProfilesListResult, AppsProfilesRemoveParams, AppsProfilesRemoveResult, AppsProfilesSaveParams, AppsProfilesSaveResult, CONTRACT_SHA256, type CatalogTool, type CellState, ClipboardReadParams, ClipboardReadResult, ClipboardWriteParams, ClipboardWriteResult, ContractHash, CoreToServiceMsg, DEFAULT_MAX_FRAME_PAYLOAD_BYTES, DEFAULT_MAX_MESSAGE_BYTES, DEFAULT_WINDOW_BYTES, DeviceId, EXCLUDED_TOOLS, ExecCwdEvent, ExecExitedEvent, ExecListParams, ExecListResult, ExecPtyKillParams, ExecPtyKillResult, ExecPtyResizeParams, ExecPtyResizeResult, ExecPtySignalParams, ExecPtySignalResult, ExecPtyStartParams, ExecPtyStartResult, ExecPtyWriteParams, ExecPtyWriteResult, ExecRunParams, ExecRunResult, ExecTitleEvent, FIELDS_SINCE, type FieldsSincePath, FrameHeader, FsChange, FsChangedEvent, FsDeleteParams, FsDeleteResult, FsEncoding, FsEntry, FsKind, FsListParams, FsListResult, FsMkdirParams, FsMkdirResult, FsMoveParams, FsMoveResult, FsPatchEditApplied, FsPatchParams, FsPatchResult, FsReadParams, FsReadResult, FsReadStreamParams, FsReadStreamResult, FsSearchContentParams, FsSearchContentResult, FsSearchPathsParams, FsSearchPathsResult, FsStatParams, FsStatResult, FsWatchParams, FsWatchResult, FsWriteParams, FsWriteResult, LEGACY_ACTIONS, LEGACY_DISPATCHERS, type LegacyDisposition, NULL_SINCE, OpName, OsPermissionName, PROTOCOL_MAJOR, PROTOCOL_MINOR, PROTOCOL_VERSION, ProcInfo, ProcKillParams, ProcKillResult, ProcListParams, ProcListResult, ProcPort, ProcPortsParams, ProcPortsResult, ProcSort, ProtocolVersion, PtyInfo, REASONS_SINCE, RELAY_CALL_HELLO_ID, RELAY_CALL_REQUEST_ID, RELAY_CALL_VERSION_HEADER, RelayAuthExpiringEvent, RelayCallEnvelope, RelayCallHello, RelayCallRequest, RelayCallResponse, RelayDeviceStatusEvent, RelayHopConnectionEnd, RelayHopEnvelopeHeader, RelayStatusResponse, RequestId, ResourceId, ResourceInfo, SERVICE_MAX_FRAME_BYTES, ServiceCancel, ServiceErrorMsg, ServiceHello, ServiceName, ServicePing, ServicePong, ServiceProgressMsg, ServiceRequest, ServiceResponse, ServiceShutdown, ServiceToCoreMsg, ServiceToken, ServiceWelcome, SessionAttachParams, SessionAttachResult, SessionControlChangedEvent, SessionDetachParams, SessionDetachResult, SessionListParams, SessionListResult, SessionReleaseParams, SessionReleaseResult, Signal, type StatusCell, type StatusEvidence, type StatusRow, SysinfoGetParams, SysinfoGetResult, TOOL_CATALOG, TOOL_GROUPS, TOOL_LEVELS, TOOL_PLATFORMS, type ToolGroup, type ToolGroupId, ToolLevel, ToolLevelResult, ToolName, ToolOutcome, type ToolPath, ToolPlatform, ToolResultsFile, type ToolState, type ToolStatus, ToolTransport, VERSIONED_RESULT_OPS, announcedVersion, buildToolStatus, builtOps, compareVersions, epochMs, forPeer, knows, negotiate, nonNegInt, renderToolStatusMarkdown, statusForPeer, u32, versionSubprotocol };

package/dist/index.js

@@ -1,7 +1,7 @@
 // src/schema/primitives.ts
 import { z } from "zod";
 var PROTOCOL_MAJOR = 1;
-var PROTOCOL_MINOR = 2;
+var PROTOCOL_MINOR = 3;
 var PROTOCOL_VERSION = `${PROTOCOL_MAJOR}.${PROTOCOL_MINOR}`;
 var ProtocolVersion = z.string().regex(/^[1-9][0-9]{0,2}\.[0-9]{1,3}$/);
 var RequestId = z.string().min(1).max(64).regex(/^[A-Za-z0-9_-]+$/);
@@ -949,6 +949,69 @@ var ToolResultsFile = z13.strictObject({
   results: z13.array(ToolLevelResult).max(1e4)
 });
 
+// src/schema/proc.ts
+import { z as z14 } from "zod";
+var ProcSort = z14.enum(["cpu", "memory", "pid", "name"]);
+var ProcListParams = z14.strictObject({
+  /** Case-insensitive substring of the process name or its command line. */
+  name: z14.string().min(1).max(128).optional(),
+  sort: ProcSort.default("cpu"),
+  limit: z14.int().min(1).max(500).default(50)
+});
+var ProcInfo = z14.strictObject({
+  pid: z14.int().min(0),
+  /** Parent process id; null where the OS does not report it. */
+  ppid: z14.int().min(0).nullable(),
+  name: z14.string().max(256),
+  /** The command line, cut to 1024 characters. */
+  command: z14.string().max(1024),
+  /** Share of one core, as `ps` and Task Manager report it; null where the OS does not say. */
+  cpu_percent: z14.number().min(0).nullable(),
+  memory_bytes: nonNegInt.nullable(),
+  user: z14.string().max(128).nullable()
+});
+var ProcListResult = z14.strictObject({
+  processes: z14.array(ProcInfo).max(500),
+  /** Processes that matched before `limit`. */
+  total: nonNegInt,
+  truncated: z14.boolean()
+});
+var ProcPortsParams = z14.strictObject({
+  /** Only this port. */
+  port: z14.int().min(1).max(65535).optional()
+});
+var ProcPort = z14.strictObject({
+  port: z14.int().min(1).max(65535),
+  protocol: z14.enum(["tcp", "udp"]),
+  /** The local address it listens on ("127.0.0.1", "*", "::"). */
+  address: z14.string().max(64),
+  pid: z14.int().min(0).nullable(),
+  process: z14.string().max(256).nullable()
+});
+var ProcPortsResult = z14.strictObject({ ports: z14.array(ProcPort).max(4e3) });
+var ProcKillParams = z14.strictObject({
+  pid: z14.int().min(1),
+  /** Kill outright (SIGKILL; on Windows the same /F) instead of asking it to quit. */
+  force: z14.boolean().default(false)
+});
+var ProcKillResult = z14.strictObject({
+  pid: z14.int().min(1),
+  signal: z14.enum(["SIGTERM", "SIGKILL"]),
+  /** True when the process was gone within 3 s. */
+  exited: z14.boolean()
+});
+
+// src/schema/clipboard.ts
+import { z as z15 } from "zod";
+var ClipboardReadParams = z15.strictObject({});
+var ClipboardReadResult = z15.strictObject({
+  /** The clipboard's text ("" when it holds none), cut to 1 MiB. */
+  text: z15.string().max(1048576),
+  truncated: z15.boolean()
+});
+var ClipboardWriteParams = z15.strictObject({ text: z15.string().max(1048576) });
+var ClipboardWriteResult = z15.strictObject({ bytes: nonNegInt });
+
 // src/schema/registry.ts
 var FS_ERR = ["NOT_FOUND", "PERMISSION_DENIED_OS", "INVALID_PARAMS", "RESOURCE_BUSY", "INTERNAL"];
 var OPS = {
@@ -985,7 +1048,12 @@ var OPS = {
   "apps.profiles.list": { params: AppsProfilesListParams, result: AppsProfilesListResult, kind: "unary", since: "1.2", errors: ["NOT_FOUND", "INVALID_PARAMS", "INTERNAL"] },
   "apps.profiles.save": { params: AppsProfilesSaveParams, result: AppsProfilesSaveResult, kind: "unary", since: "1.2", errors: ["AUTH_REQUIRED", "AUTH_FORBIDDEN", "NOT_FOUND", "INVALID_PARAMS", "CONFLICT", "PLATFORM_UNSUPPORTED", "DEVICE_OFFLINE", "INTERNAL"] },
   "apps.profiles.remove": { params: AppsProfilesRemoveParams, result: AppsProfilesRemoveResult, kind: "unary", since: "1.2", errors: ["AUTH_REQUIRED", "AUTH_FORBIDDEN", "NOT_FOUND", "DEVICE_OFFLINE", "INTERNAL"] },
-  "apps.open": { params: AppsOpenParams, result: AppsOpenResult, kind: "unary", since: "1.2", errors: ["NOT_FOUND", "PLATFORM_UNSUPPORTED", "AUTH_REQUIRED", "DEVICE_OFFLINE", "INTERNAL"] }
+  "apps.open": { params: AppsOpenParams, result: AppsOpenResult, kind: "unary", since: "1.2", errors: ["NOT_FOUND", "PLATFORM_UNSUPPORTED", "AUTH_REQUIRED", "DEVICE_OFFLINE", "INTERNAL"] },
+  "proc.list": { params: ProcListParams, result: ProcListResult, kind: "unary", since: "1.3", errors: ["INVALID_PARAMS", "PLATFORM_UNSUPPORTED", "INTERNAL"] },
+  "proc.ports": { params: ProcPortsParams, result: ProcPortsResult, kind: "unary", since: "1.3", errors: ["INVALID_PARAMS", "PERMISSION_DENIED_OS", "PLATFORM_UNSUPPORTED", "INTERNAL"] },
+  "proc.kill": { params: ProcKillParams, result: ProcKillResult, kind: "unary", since: "1.3", errors: ["NOT_FOUND", "AUTH_FORBIDDEN", "PERMISSION_DENIED_OS", "INVALID_PARAMS", "INTERNAL"] },
+  "clipboard.read": { params: ClipboardReadParams, result: ClipboardReadResult, kind: "unary", since: "1.3", errors: ["PLATFORM_UNSUPPORTED", "INTERNAL"] },
+  "clipboard.write": { params: ClipboardWriteParams, result: ClipboardWriteResult, kind: "unary", since: "1.3", errors: ["PLATFORM_UNSUPPORTED", "PAYLOAD_TOO_LARGE", "INTERNAL"] }
 };
 var EVENTS = {
   "fs.changed": FsChangedEvent,
@@ -1137,6 +1205,19 @@ var NAMED_SCHEMAS = {
   RelayHopEnvelopeHeader,
   RelayHopConnectionEnd,
   CloseCodeValue,
+  ProcSort,
+  ProcListParams,
+  ProcInfo,
+  ProcListResult,
+  ProcPortsParams,
+  ProcPort,
+  ProcPortsResult,
+  ProcKillParams,
+  ProcKillResult,
+  ClipboardReadParams,
+  ClipboardReadResult,
+  ClipboardWriteParams,
+  ClipboardWriteResult,
   ToolLevel,
   ToolOutcome,
   ToolPlatform,
@@ -1242,7 +1323,7 @@ function forPeer(op, part, value, version) {
 var VERSIONED_RESULT_OPS = [...RESULT_PATH.keys()];
 
 // src/contract.ts
-var CONTRACT_SHA256 = "ef9fd8c8ab611bf450730452a6cf48a4ebd566218b6e17e2834ef030fc2044cb";
+var CONTRACT_SHA256 = "0354e634fd50ffdc4c83b7ede7f9c31f3b2c877c4574557a6b264d2998470fd6";
 
 // src/close-policy.ts
 var CLOSE_RULES = {
@@ -1289,23 +1370,14 @@ var TOOL_CATALOG = [
   { name: "fs_list", group: "files_shell", state: "built", path: "sandbox_proxy", ops: ["fs.list"], platforms: ALL, summary: "List a folder" },
   { name: "fs_mkdir", group: "files_shell", state: "built", path: "sandbox_proxy", ops: ["fs.mkdir"], platforms: ALL, summary: "Create a folder" },
   { name: "fs_search", group: "files_shell", state: "built", path: "sandbox_proxy", ops: ["fs.search_paths", "fs.search_content"], platforms: ALL, summary: "Find files by name or content" },
-  { name: "shell_execute", group: "files_shell", state: "built", path: "sandbox_proxy", ops: ["exec.run"], platforms: ALL, summary: "Run a command in a folder" },
+  { name: "shell_execute", group: "files_shell", state: "built", path: "sandbox_proxy", ops: ["exec.run"], platforms: ALL, summary: "Run a command; cd carries over" },
   { name: "shell_python", group: "files_shell", state: "built", path: "sandbox_proxy", ops: ["exec.run"], platforms: ALL, summary: "Run a Python script" },
-  {
-    name: "git_ingest",
-    group: "files_shell",
-    state: "broken",
-    path: "server",
-    ops: [],
-    platforms: ALL,
-    summary: "Digest a repository",
-    note: "Armed with the files tools, but a local path is read on the server, not the bound device"
-  },
   { name: "shell_job", group: "files_shell", state: "planned", path: "device_op", ops: ["exec.job.start", "exec.job.output", "exec.job.stop"], platforms: ALL, summary: "Background commands: start, read output, stop" },
   // ── 2. Computer control (TS owners) ──────────────────────────────────────────────────────────
-  { name: "desktop_process", group: "os_control", state: "planned", path: "device_op", ops: ["proc.list", "proc.ports", "proc.kill", "proc.launch_app", "proc.focus_app", "proc.installed_apps"], platforms: ALL, summary: "Processes, ports and apps" },
+  { name: "desktop_process", group: "os_control", state: "built", path: "device_op", ops: ["proc.list", "proc.ports", "proc.kill"], platforms: ALL, summary: "Running processes and ports; stop one" },
+  { name: "desktop_apps", group: "os_control", state: "planned", path: "device_op", ops: ["apps.list", "apps.open"], platforms: ALL, summary: "Installed apps; open or bring one forward" },
   { name: "desktop_system", group: "os_control", state: "planned", path: "device_op", ops: ["sysinfo.get", "system.open_url", "system.open_path", "system.notify"], platforms: ALL, summary: "System facts, open, notify" },
-  { name: "desktop_clipboard", group: "os_control", state: "planned", path: "device_op", ops: ["clipboard.read", "clipboard.write"], platforms: ALL, summary: "Read and write the clipboard" },
+  { name: "desktop_clipboard", group: "os_control", state: "built", path: "device_op", ops: ["clipboard.read", "clipboard.write"], platforms: ALL, summary: "Read and write the clipboard's text" },
   { name: "desktop_screen", group: "os_control", state: "planned", path: "device_op", ops: ["screen.list", "screen.capture"], platforms: ALL, summary: "Displays and screenshots" },
   { name: "desktop_window", group: "os_control", state: "planned", path: "device_op", ops: ["window.list", "window.focus", "window.move", "window.minimize"], platforms: ALL, summary: "Find, focus and arrange windows" },
   { name: "desktop_input", group: "os_control", state: "planned", path: "device_op", ops: ["input.type_text", "input.hotkey", "input.mouse_click", "input.mouse_move"], platforms: ALL, summary: "Keyboard and mouse" },
@@ -1332,6 +1404,9 @@ var TOOL_CATALOG = [
   // ── 6. Windows administration ────────────────────────────────────────────────────────────────
   { name: "desktop_windows_admin", group: "windows_admin", state: "planned", path: "device_op", ops: ["windows.registry_read", "windows.registry_write", "windows.services", "windows.service_control", "windows.event_log", "windows.features"], platforms: ["win32"], summary: "Registry, services, event log" }
 ];
+var EXCLUDED_TOOLS = {
+  git_ingest: "Runs on the server: it ingests repository URLs. A local path on a bound computer or sandbox is refused with the fs_* and shell remedy, since the server cannot see it"
+};
 var tool = (name) => ({ kind: "tool", tool: name });
 var dropped = (reason) => ({ kind: "dropped", reason });
 var SHELL_COVERS = "Done with shell_execute (mv, cp, rm, tar), as every coding agent does";
@@ -1360,12 +1435,12 @@ var LEGACY_ACTIONS = {
   "local_window.minimize": tool("desktop_window"),
   "local_process.list": tool("desktop_process"),
   "local_process.ports": tool("desktop_process"),
-  "local_process.launch_app": tool("desktop_process"),
+  "local_process.launch_app": tool("desktop_apps"),
   "local_process.kill": tool("desktop_process"),
-  "local_process.focus_app": tool("desktop_process"),
+  "local_process.focus_app": tool("desktop_apps"),
   "local_process.terminals": dropped("Matrx 2 terminals are exec sessions; the person's own terminal windows are not the agent's"),
   "local_process.tail_terminal": dropped("Matrx 2 terminals are exec sessions; the person's own terminal windows are not the agent's"),
-  "local_process.installed_apps": tool("desktop_process"),
+  "local_process.installed_apps": tool("desktop_apps"),
   "local_input.type_text": tool("desktop_input"),
   "local_input.hotkey": tool("desktop_input"),
   "local_input.mouse_click": tool("desktop_input"),
@@ -1581,6 +1656,10 @@ function renderToolStatusMarkdown(status) {
     }
     lines.push("");
   }
+  const excluded = Object.entries(EXCLUDED_TOOLS);
+  if (excluded.length > 0) {
+    lines.push("## Not device tools", "", "| Tool | Why |", "|---|---|", ...excluded.map(([name, why]) => `| ${name} | ${why} |`), "");
+  }
   return lines.join("\n");
 }
 export {
@@ -1610,6 +1689,10 @@ export {
   CancelMsg,
   ClientToCoreMsg,
   ClientType,
+  ClipboardReadParams,
+  ClipboardReadResult,
+  ClipboardWriteParams,
+  ClipboardWriteResult,
   CloseCode,
   CloseCodeValue,
   ContractHash,
@@ -1622,6 +1705,7 @@ export {
   DesktopProtocolError,
   DeviceId,
   EVENTS,
+  EXCLUDED_TOOLS,
   EndMsg,
   EndReason,
   ErrorCode,
@@ -1712,6 +1796,15 @@ export {
   PROTOCOL_MAJOR,
   PROTOCOL_MINOR,
   PROTOCOL_VERSION,
+  ProcInfo,
+  ProcKillParams,
+  ProcKillResult,
+  ProcListParams,
+  ProcListResult,
+  ProcPort,
+  ProcPortsParams,
+  ProcPortsResult,
+  ProcSort,
   ProtocolErrorBody,
   ProtocolVersion,
   PtyInfo,