@ankhorage/permissions 0.2.64 → 0.3.0

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @ankhorage/permissions
 
+## 0.3.0
+
+### Minor Changes
+
+- 253d7f3: Publish canonical Capability descriptors for the Permissions Ankh provider.
+
 ## 0.2.64
 
 ### Patch Changes

package/README.md

@@ -3,7 +3,7 @@
 
 # PERMISSIONS
 
-![license: MIT](././paradox/badges/license.svg) ![npm: v0.2.64](././paradox/badges/npm.svg) ![runtime: bun](././paradox/badges/runtime.svg) ![typescript: strict](././paradox/badges/typescript.svg) ![eslint: checked](././paradox/badges/eslint.svg) ![prettier: checked](././paradox/badges/prettier.svg) ![build: checked](././paradox/badges/build.svg) ![tests: checked](././paradox/badges/tests.svg) ![paradox: canonical](././paradox/badges/docs.svg)
+![license: MIT](././paradox/badges/license.svg) ![npm: v0.3.0](././paradox/badges/npm.svg) ![runtime: bun](././paradox/badges/runtime.svg) ![typescript: strict](././paradox/badges/typescript.svg) ![eslint: checked](././paradox/badges/eslint.svg) ![prettier: checked](././paradox/badges/prettier.svg) ![build: checked](././paradox/badges/build.svg) ![tests: checked](././paradox/badges/tests.svg) ![paradox: canonical](././paradox/badges/docs.svg)
 
 Cross-platform permission registry and runtime helpers for Expo, React Native, and React Native Web apps, with unified request/check APIs for camera, media, location, notifications, microphone, and other web/native capabilities.
 

package/dist/ankh.provider.d.ts

@@ -1,9 +1,49 @@
 declare const provider: {
-    id: string;
-    category: string;
-    version: string;
-    capabilities: readonly ["permissions.inspect", "permissions.check", "permissions.request", "permissions.manifest"];
-    commands: readonly [{
+    readonly id: "@ankhorage/permissions";
+    readonly category: "permissions";
+    readonly version: string;
+    readonly capabilities: readonly [{
+        readonly id: "permissions.inspect";
+        readonly owner: "@ankhorage/permissions";
+        readonly access: readonly ["invoke"];
+        readonly binding: {
+            readonly kind: "action";
+            readonly bindableAs: readonly ["target"];
+        };
+        readonly label: "Inspect permissions";
+        readonly description: "List known permission identifiers and registry metadata.";
+    }, {
+        readonly id: "permissions.check";
+        readonly owner: "@ankhorage/permissions";
+        readonly access: readonly ["invoke"];
+        readonly binding: {
+            readonly kind: "action";
+            readonly bindableAs: readonly ["target"];
+        };
+        readonly label: "Check permission";
+        readonly description: "Check a permission state through a host-provided permission client.";
+    }, {
+        readonly id: "permissions.request";
+        readonly owner: "@ankhorage/permissions";
+        readonly access: readonly ["invoke"];
+        readonly binding: {
+            readonly kind: "action";
+            readonly bindableAs: readonly ["target"];
+        };
+        readonly label: "Request permission";
+        readonly description: "Request a permission through a host-provided permission client.";
+    }, {
+        readonly id: "permissions.manifest";
+        readonly owner: "@ankhorage/permissions";
+        readonly access: readonly ["invoke"];
+        readonly binding: {
+            readonly kind: "action";
+            readonly bindableAs: readonly ["target"];
+        };
+        readonly label: "Inspect permission manifest";
+        readonly description: "Show native and web manifest metadata required by registered permissions.";
+    }];
+    readonly commands: readonly [{
         readonly path: readonly ["list"];
         readonly summary: "List known permission identifiers and registry metadata.";
         readonly capability: "permissions.inspect";
@@ -25,7 +65,7 @@ declare const provider: {
         readonly capability: "permissions.manifest";
         readonly examples: readonly ["ankh permissions manifest camera"];
     }];
-    handlers: {
+    readonly handlers: {
         path: readonly ["list"] | readonly ["check"] | readonly ["request"] | readonly ["manifest"];
         handler(request: {
             readonly context: {

package/dist/ankh.provider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ankh.provider.d.ts","sourceRoot":"","sources":["../src/ankh.provider.ts"],"names":[],"mappings":"AAwDA,QAAA,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAbK;YACf,QAAQ,CAAC,OAAO,EAAE;gBAChB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;aACjC,CAAC;SACH;;;;CAgBF,CAAC;AAEF,eAAe,QAAQ,CAAC"}
+{"version":3,"file":"ankh.provider.d.ts","sourceRoot":"","sources":["../src/ankh.provider.ts"],"names":[],"mappings":"AAwDA,QAAA,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAbK;YACf,QAAQ,CAAC,OAAO,EAAE;gBAChB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;aACjC,CAAC;SACH;;;;CAgB4C,CAAC;AAEhD,eAAe,QAAQ,CAAC"}

package/dist/ankh.provider.js

@@ -1,13 +1,8 @@
+import packageJson from '../package.json';
+import { CAPABILITIES } from './capabilities/index';
 import { PERMISSIONS } from './registry/permissions';
 const PERMISSIONS_PACKAGE_NAME = '@ankhorage/permissions';
-const PERMISSIONS_PACKAGE_VERSION = '0.2.0';
 const PERMISSIONS_COMMAND_CATEGORY = 'permissions';
-const PERMISSIONS_CAPABILITIES = [
-    'permissions.inspect',
-    'permissions.check',
-    'permissions.request',
-    'permissions.manifest',
-];
 const commands = [
     {
         path: ['list'],
@@ -46,8 +41,8 @@ const handlers = commands.map((command) => ({
 const provider = {
     id: PERMISSIONS_PACKAGE_NAME,
     category: PERMISSIONS_COMMAND_CATEGORY,
-    version: PERMISSIONS_PACKAGE_VERSION,
-    capabilities: PERMISSIONS_CAPABILITIES,
+    version: packageJson.version,
+    capabilities: CAPABILITIES,
     commands,
     handlers,
 };

package/dist/ankh.provider.js.map

@@ -1 +1 @@
-{"version":3,"file":"ankh.provider.js","sourceRoot":"","sources":["../src/ankh.provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAErD,MAAM,wBAAwB,GAAG,wBAAwB,CAAC;AAC1D,MAAM,2BAA2B,GAAG,OAAO,CAAC;AAC5C,MAAM,4BAA4B,GAAG,aAAa,CAAC;AAEnD,MAAM,wBAAwB,GAAG;IAC/B,qBAAqB;IACrB,mBAAmB;IACnB,qBAAqB;IACrB,sBAAsB;CACd,CAAC;AAEX,MAAM,QAAQ,GAAG;IACf;QACE,IAAI,EAAE,CAAC,MAAM,CAAC;QACd,OAAO,EAAE,0DAA0D;QACnE,UAAU,EAAE,qBAAqB;QACjC,OAAO,EAAE,CAAC,UAAU,CAAC;QACrB,QAAQ,EAAE,CAAC,uBAAuB,CAAC;KACpC;IACD;QACE,IAAI,EAAE,CAAC,OAAO,CAAC;QACf,OAAO,EAAE,qEAAqE;QAC9E,UAAU,EAAE,mBAAmB;QAC/B,QAAQ,EAAE,CAAC,+BAA+B,CAAC;KAC5C;IACD;QACE,IAAI,EAAE,CAAC,SAAS,CAAC;QACjB,OAAO,EAAE,iEAAiE;QAC1E,UAAU,EAAE,qBAAqB;QACjC,QAAQ,EAAE,CAAC,iCAAiC,CAAC;KAC9C;IACD;QACE,IAAI,EAAE,CAAC,UAAU,CAAC;QAClB,OAAO,EAAE,uEAAuE;QAChF,UAAU,EAAE,sBAAsB;QAClC,QAAQ,EAAE,CAAC,kCAAkC,CAAC;KAC/C;CACO,CAAC;AAEX,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC1C,IAAI,EAAE,OAAO,CAAC,IAAI;IAClB,OAAO,CAAC,OAIP;QACC,OAAO,CAAC,OAAO,CAAC,WAAW,CACzB,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,mBAAmB,wBAAwB,IAAI;YACtE,sBAAsB,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CACpD,CAAC;QACF,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACzB,CAAC;CACF,CAAC,CAAC,CAAC;AAEJ,MAAM,QAAQ,GAAG;IACf,EAAE,EAAE,wBAAwB;IAC5B,QAAQ,EAAE,4BAA4B;IACtC,OAAO,EAAE,2BAA2B;IACpC,YAAY,EAAE,wBAAwB;IACtC,QAAQ;IACR,QAAQ;CACT,CAAC;AAEF,eAAe,QAAQ,CAAC","sourcesContent":["import { PERMISSIONS } from './registry/permissions';\n\nconst PERMISSIONS_PACKAGE_NAME = '@ankhorage/permissions';\nconst PERMISSIONS_PACKAGE_VERSION = '0.2.0';\nconst PERMISSIONS_COMMAND_CATEGORY = 'permissions';\n\nconst PERMISSIONS_CAPABILITIES = [\n  'permissions.inspect',\n  'permissions.check',\n  'permissions.request',\n  'permissions.manifest',\n] as const;\n\nconst commands = [\n  {\n    path: ['list'],\n    summary: 'List known permission identifiers and registry metadata.',\n    capability: 'permissions.inspect',\n    aliases: ['registry'],\n    examples: ['ankh permissions list'],\n  },\n  {\n    path: ['check'],\n    summary: 'Check a permission state through a host-provided permission client.',\n    capability: 'permissions.check',\n    examples: ['ankh permissions check camera'],\n  },\n  {\n    path: ['request'],\n    summary: 'Request a permission through a host-provided permission client.',\n    capability: 'permissions.request',\n    examples: ['ankh permissions request camera'],\n  },\n  {\n    path: ['manifest'],\n    summary: 'Show native/web manifest metadata required by registered permissions.',\n    capability: 'permissions.manifest',\n    examples: ['ankh permissions manifest camera'],\n  },\n] as const;\n\nconst handlers = commands.map((command) => ({\n  path: command.path,\n  handler(request: {\n    readonly context: {\n      writeStdout(text: string): void;\n    };\n  }) {\n    request.context.writeStdout(\n      `${command.path.join(' ')} is provided by ${PERMISSIONS_PACKAGE_NAME}. ` +\n        `Known permissions: ${PERMISSIONS.join(', ')}.\\n`,\n    );\n    return { exitCode: 0 };\n  },\n}));\n\nconst provider = {\n  id: PERMISSIONS_PACKAGE_NAME,\n  category: PERMISSIONS_COMMAND_CATEGORY,\n  version: PERMISSIONS_PACKAGE_VERSION,\n  capabilities: PERMISSIONS_CAPABILITIES,\n  commands,\n  handlers,\n};\n\nexport default provider;\n"]}
+{"version":3,"file":"ankh.provider.js","sourceRoot":"","sources":["../src/ankh.provider.ts"],"names":[],"mappings":"AAIA,OAAO,WAAW,MAAM,iBAAiB,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAErD,MAAM,wBAAwB,GAAG,wBAAwB,CAAC;AAC1D,MAAM,4BAA4B,GAAG,aAAa,CAAC;AAEnD,MAAM,QAAQ,GAAG;IACf;QACE,IAAI,EAAE,CAAC,MAAM,CAAC;QACd,OAAO,EAAE,0DAA0D;QACnE,UAAU,EAAE,qBAAgD;QAC5D,OAAO,EAAE,CAAC,UAAU,CAAC;QACrB,QAAQ,EAAE,CAAC,uBAAuB,CAAC;KACpC;IACD;QACE,IAAI,EAAE,CAAC,OAAO,CAAC;QACf,OAAO,EAAE,qEAAqE;QAC9E,UAAU,EAAE,mBAA8C;QAC1D,QAAQ,EAAE,CAAC,+BAA+B,CAAC;KAC5C;IACD;QACE,IAAI,EAAE,CAAC,SAAS,CAAC;QACjB,OAAO,EAAE,iEAAiE;QAC1E,UAAU,EAAE,qBAAgD;QAC5D,QAAQ,EAAE,CAAC,iCAAiC,CAAC;KAC9C;IACD;QACE,IAAI,EAAE,CAAC,UAAU,CAAC;QAClB,OAAO,EAAE,uEAAuE;QAChF,UAAU,EAAE,sBAAiD;QAC7D,QAAQ,EAAE,CAAC,kCAAkC,CAAC;KAC/C;CAGC,CAAC;AAEL,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC1C,IAAI,EAAE,OAAO,CAAC,IAAI;IAClB,OAAO,CAAC,OAIP;QACC,OAAO,CAAC,OAAO,CAAC,WAAW,CACzB,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,mBAAmB,wBAAwB,IAAI;YACtE,sBAAsB,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CACpD,CAAC;QACF,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACzB,CAAC;CACF,CAAC,CAAC,CAAC;AAEJ,MAAM,QAAQ,GAAG;IACf,EAAE,EAAE,wBAAwB;IAC5B,QAAQ,EAAE,4BAA4B;IACtC,OAAO,EAAE,WAAW,CAAC,OAAO;IAC5B,YAAY,EAAE,YAAY;IAC1B,QAAQ;IACR,QAAQ;CACqC,CAAC;AAEhD,eAAe,QAAQ,CAAC","sourcesContent":["import type { AnkhRuntimeCommandProvider } from '@ankhorage/ankh';\nimport type { Capability } from '@ankhorage/contracts/capabilities';\nimport type { AnkhCommandDescriptor } from '@ankhorage/contracts/cli';\n\nimport packageJson from '../package.json';\nimport { CAPABILITIES } from './capabilities/index';\nimport { PERMISSIONS } from './registry/permissions';\n\nconst PERMISSIONS_PACKAGE_NAME = '@ankhorage/permissions';\nconst PERMISSIONS_COMMAND_CATEGORY = 'permissions';\n\nconst commands = [\n  {\n    path: ['list'],\n    summary: 'List known permission identifiers and registry metadata.',\n    capability: 'permissions.inspect' satisfies Capability['id'],\n    aliases: ['registry'],\n    examples: ['ankh permissions list'],\n  },\n  {\n    path: ['check'],\n    summary: 'Check a permission state through a host-provided permission client.',\n    capability: 'permissions.check' satisfies Capability['id'],\n    examples: ['ankh permissions check camera'],\n  },\n  {\n    path: ['request'],\n    summary: 'Request a permission through a host-provided permission client.',\n    capability: 'permissions.request' satisfies Capability['id'],\n    examples: ['ankh permissions request camera'],\n  },\n  {\n    path: ['manifest'],\n    summary: 'Show native/web manifest metadata required by registered permissions.',\n    capability: 'permissions.manifest' satisfies Capability['id'],\n    examples: ['ankh permissions manifest camera'],\n  },\n] as const satisfies readonly (AnkhCommandDescriptor & {\n  readonly capability: Capability['id'];\n})[];\n\nconst handlers = commands.map((command) => ({\n  path: command.path,\n  handler(request: {\n    readonly context: {\n      writeStdout(text: string): void;\n    };\n  }) {\n    request.context.writeStdout(\n      `${command.path.join(' ')} is provided by ${PERMISSIONS_PACKAGE_NAME}. ` +\n        `Known permissions: ${PERMISSIONS.join(', ')}.\\n`,\n    );\n    return { exitCode: 0 };\n  },\n}));\n\nconst provider = {\n  id: PERMISSIONS_PACKAGE_NAME,\n  category: PERMISSIONS_COMMAND_CATEGORY,\n  version: packageJson.version,\n  capabilities: CAPABILITIES,\n  commands,\n  handlers,\n} as const satisfies AnkhRuntimeCommandProvider;\n\nexport default provider;\n"]}

package/dist/capabilities/index.d.ts

@@ -0,0 +1,43 @@
+/*** Define the executable permission operations published by this package. */
+export declare const CAPABILITIES: readonly [{
+    readonly id: "permissions.inspect";
+    readonly owner: "@ankhorage/permissions";
+    readonly access: readonly ["invoke"];
+    readonly binding: {
+        readonly kind: "action";
+        readonly bindableAs: readonly ["target"];
+    };
+    readonly label: "Inspect permissions";
+    readonly description: "List known permission identifiers and registry metadata.";
+}, {
+    readonly id: "permissions.check";
+    readonly owner: "@ankhorage/permissions";
+    readonly access: readonly ["invoke"];
+    readonly binding: {
+        readonly kind: "action";
+        readonly bindableAs: readonly ["target"];
+    };
+    readonly label: "Check permission";
+    readonly description: "Check a permission state through a host-provided permission client.";
+}, {
+    readonly id: "permissions.request";
+    readonly owner: "@ankhorage/permissions";
+    readonly access: readonly ["invoke"];
+    readonly binding: {
+        readonly kind: "action";
+        readonly bindableAs: readonly ["target"];
+    };
+    readonly label: "Request permission";
+    readonly description: "Request a permission through a host-provided permission client.";
+}, {
+    readonly id: "permissions.manifest";
+    readonly owner: "@ankhorage/permissions";
+    readonly access: readonly ["invoke"];
+    readonly binding: {
+        readonly kind: "action";
+        readonly bindableAs: readonly ["target"];
+    };
+    readonly label: "Inspect permission manifest";
+    readonly description: "Show native and web manifest metadata required by registered permissions.";
+}];
+//# sourceMappingURL=index.d.ts.map

package/dist/capabilities/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/capabilities/index.ts"],"names":[],"mappings":"AAEA,8EAA8E;AAC9E,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAiCiB,CAAC"}

package/dist/capabilities/index.js

@@ -0,0 +1,36 @@
+/*** Define the executable permission operations published by this package. */
+export const CAPABILITIES = [
+    {
+        id: 'permissions.inspect',
+        owner: '@ankhorage/permissions',
+        access: ['invoke'],
+        binding: { kind: 'action', bindableAs: ['target'] },
+        label: 'Inspect permissions',
+        description: 'List known permission identifiers and registry metadata.',
+    },
+    {
+        id: 'permissions.check',
+        owner: '@ankhorage/permissions',
+        access: ['invoke'],
+        binding: { kind: 'action', bindableAs: ['target'] },
+        label: 'Check permission',
+        description: 'Check a permission state through a host-provided permission client.',
+    },
+    {
+        id: 'permissions.request',
+        owner: '@ankhorage/permissions',
+        access: ['invoke'],
+        binding: { kind: 'action', bindableAs: ['target'] },
+        label: 'Request permission',
+        description: 'Request a permission through a host-provided permission client.',
+    },
+    {
+        id: 'permissions.manifest',
+        owner: '@ankhorage/permissions',
+        access: ['invoke'],
+        binding: { kind: 'action', bindableAs: ['target'] },
+        label: 'Inspect permission manifest',
+        description: 'Show native and web manifest metadata required by registered permissions.',
+    },
+];
+//# sourceMappingURL=index.js.map

package/dist/capabilities/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/capabilities/index.ts"],"names":[],"mappings":"AAEA,8EAA8E;AAC9E,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B;QACE,EAAE,EAAE,qBAAqB;QACzB,KAAK,EAAE,wBAAwB;QAC/B,MAAM,EAAE,CAAC,QAAQ,CAAC;QAClB,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,QAAQ,CAAC,EAAE;QACnD,KAAK,EAAE,qBAAqB;QAC5B,WAAW,EAAE,0DAA0D;KACxE;IACD;QACE,EAAE,EAAE,mBAAmB;QACvB,KAAK,EAAE,wBAAwB;QAC/B,MAAM,EAAE,CAAC,QAAQ,CAAC;QAClB,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,QAAQ,CAAC,EAAE;QACnD,KAAK,EAAE,kBAAkB;QACzB,WAAW,EAAE,qEAAqE;KACnF;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,KAAK,EAAE,wBAAwB;QAC/B,MAAM,EAAE,CAAC,QAAQ,CAAC;QAClB,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,QAAQ,CAAC,EAAE;QACnD,KAAK,EAAE,oBAAoB;QAC3B,WAAW,EAAE,iEAAiE;KAC/E;IACD;QACE,EAAE,EAAE,sBAAsB;QAC1B,KAAK,EAAE,wBAAwB;QAC/B,MAAM,EAAE,CAAC,QAAQ,CAAC;QAClB,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,QAAQ,CAAC,EAAE;QACnD,KAAK,EAAE,6BAA6B;QACpC,WAAW,EAAE,2EAA2E;KACzF;CACuC,CAAC","sourcesContent":["import type { Capability } from '@ankhorage/contracts/capabilities';\n\n/*** Define the executable permission operations published by this package. */\nexport const CAPABILITIES = [\n  {\n    id: 'permissions.inspect',\n    owner: '@ankhorage/permissions',\n    access: ['invoke'],\n    binding: { kind: 'action', bindableAs: ['target'] },\n    label: 'Inspect permissions',\n    description: 'List known permission identifiers and registry metadata.',\n  },\n  {\n    id: 'permissions.check',\n    owner: '@ankhorage/permissions',\n    access: ['invoke'],\n    binding: { kind: 'action', bindableAs: ['target'] },\n    label: 'Check permission',\n    description: 'Check a permission state through a host-provided permission client.',\n  },\n  {\n    id: 'permissions.request',\n    owner: '@ankhorage/permissions',\n    access: ['invoke'],\n    binding: { kind: 'action', bindableAs: ['target'] },\n    label: 'Request permission',\n    description: 'Request a permission through a host-provided permission client.',\n  },\n  {\n    id: 'permissions.manifest',\n    owner: '@ankhorage/permissions',\n    access: ['invoke'],\n    binding: { kind: 'action', bindableAs: ['target'] },\n    label: 'Inspect permission manifest',\n    description: 'Show native and web manifest metadata required by registered permissions.',\n  },\n] as const satisfies readonly Capability[];\n"]}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@ankhorage/permissions",
   "type": "module",
-  "version": "0.2.64",
+  "version": "0.3.0",
   "description": "Cross-platform permission registry and runtime helpers for Expo, React Native, and React Native Web apps, with unified request/check APIs for camera, media, location, notifications, microphone, and other web/native capabilities.",
   "homepage": "https://github.com/ankhorage/permissions#readme",
   "bugs": {
@@ -34,7 +34,10 @@
     "typescript",
     "web"
   ],
-  "dependencies": {},
+  "dependencies": {
+    "@ankhorage/ankh": "^0.12.0",
+    "@ankhorage/contracts": "^24.1.0"
+  },
   "peerDependencies": {
     "react": ">=18.2.0 || >=19.0.0"
   },
@@ -42,10 +45,66 @@
     "category": "permissions",
     "provider": "./dist/cli/index.js",
     "capabilities": [
-      "permissions.inspect",
-      "permissions.check",
-      "permissions.request",
-      "permissions.manifest"
+      {
+        "id": "permissions.inspect",
+        "owner": "@ankhorage/permissions",
+        "access": [
+          "invoke"
+        ],
+        "binding": {
+          "kind": "action",
+          "bindableAs": [
+            "target"
+          ]
+        },
+        "label": "Inspect permissions",
+        "description": "List known permission identifiers and registry metadata."
+      },
+      {
+        "id": "permissions.check",
+        "owner": "@ankhorage/permissions",
+        "access": [
+          "invoke"
+        ],
+        "binding": {
+          "kind": "action",
+          "bindableAs": [
+            "target"
+          ]
+        },
+        "label": "Check permission",
+        "description": "Check a permission state through a host-provided permission client."
+      },
+      {
+        "id": "permissions.request",
+        "owner": "@ankhorage/permissions",
+        "access": [
+          "invoke"
+        ],
+        "binding": {
+          "kind": "action",
+          "bindableAs": [
+            "target"
+          ]
+        },
+        "label": "Request permission",
+        "description": "Request a permission through a host-provided permission client."
+      },
+      {
+        "id": "permissions.manifest",
+        "owner": "@ankhorage/permissions",
+        "access": [
+          "invoke"
+        ],
+        "binding": {
+          "kind": "action",
+          "bindableAs": [
+            "target"
+          ]
+        },
+        "label": "Inspect permission manifest",
+        "description": "Show native and web manifest metadata required by registered permissions."
+      }
     ]
   },
   "files": [
@@ -69,6 +128,11 @@
       "import": "./dist/cli/index.js",
       "default": "./dist/cli/index.js"
     },
+    "./capabilities": {
+      "types": "./dist/capabilities/index.d.ts",
+      "import": "./dist/capabilities/index.js",
+      "default": "./dist/capabilities/index.js"
+    },
     "./react": {
       "react-native": "./dist/react/index.js",
       "browser": "./dist/react/index.js",
@@ -136,8 +200,8 @@
     "knip:check": "ankhorage-knip"
   },
   "devDependencies": {
-    "@ankhorage/devtools": "^2.1.2",
-    "@ankhorage/paradox": "^0.2.27",
+    "@ankhorage/devtools": "^2.1.19",
+    "@ankhorage/paradox": "^0.2.28",
     "@types/bun": "^1.4.2",
     "@types/node": "^26.6.4",
     "@types/react": "^19.3.0",

package/src/ankh.provider.ts

@@ -1,43 +1,43 @@
+import type { AnkhRuntimeCommandProvider } from '@ankhorage/ankh';
+import type { Capability } from '@ankhorage/contracts/capabilities';
+import type { AnkhCommandDescriptor } from '@ankhorage/contracts/cli';
+
+import packageJson from '../package.json';
+import { CAPABILITIES } from './capabilities/index';
 import { PERMISSIONS } from './registry/permissions';
 
 const PERMISSIONS_PACKAGE_NAME = '@ankhorage/permissions';
-const PERMISSIONS_PACKAGE_VERSION = '0.2.0';
 const PERMISSIONS_COMMAND_CATEGORY = 'permissions';
 
-const PERMISSIONS_CAPABILITIES = [
-  'permissions.inspect',
-  'permissions.check',
-  'permissions.request',
-  'permissions.manifest',
-] as const;
-
 const commands = [
   {
     path: ['list'],
     summary: 'List known permission identifiers and registry metadata.',
-    capability: 'permissions.inspect',
+    capability: 'permissions.inspect' satisfies Capability['id'],
     aliases: ['registry'],
     examples: ['ankh permissions list'],
   },
   {
     path: ['check'],
     summary: 'Check a permission state through a host-provided permission client.',
-    capability: 'permissions.check',
+    capability: 'permissions.check' satisfies Capability['id'],
     examples: ['ankh permissions check camera'],
   },
   {
     path: ['request'],
     summary: 'Request a permission through a host-provided permission client.',
-    capability: 'permissions.request',
+    capability: 'permissions.request' satisfies Capability['id'],
     examples: ['ankh permissions request camera'],
   },
   {
     path: ['manifest'],
     summary: 'Show native/web manifest metadata required by registered permissions.',
-    capability: 'permissions.manifest',
+    capability: 'permissions.manifest' satisfies Capability['id'],
     examples: ['ankh permissions manifest camera'],
   },
-] as const;
+] as const satisfies readonly (AnkhCommandDescriptor & {
+  readonly capability: Capability['id'];
+})[];
 
 const handlers = commands.map((command) => ({
   path: command.path,
@@ -57,10 +57,10 @@ const handlers = commands.map((command) => ({
 const provider = {
   id: PERMISSIONS_PACKAGE_NAME,
   category: PERMISSIONS_COMMAND_CATEGORY,
-  version: PERMISSIONS_PACKAGE_VERSION,
-  capabilities: PERMISSIONS_CAPABILITIES,
+  version: packageJson.version,
+  capabilities: CAPABILITIES,
   commands,
   handlers,
-};
+} as const satisfies AnkhRuntimeCommandProvider;
 
 export default provider;

package/src/capabilities/index.test.ts

@@ -0,0 +1,15 @@
+import { isCapability } from '@ankhorage/contracts/capabilities';
+import { describe, expect, test } from 'bun:test';
+
+import { CAPABILITIES } from './index';
+
+describe('CAPABILITIES', () => {
+  test('publishes canonical executable action targets', () => {
+    expect(CAPABILITIES).toHaveLength(4);
+    for (const capability of CAPABILITIES) {
+      expect(isCapability(capability)).toBeTrue();
+      expect(capability.access).toEqual(['invoke']);
+      expect(capability.binding).toEqual({ kind: 'action', bindableAs: ['target'] });
+    }
+  });
+});

package/src/capabilities/index.ts

@@ -0,0 +1,37 @@
+import type { Capability } from '@ankhorage/contracts/capabilities';
+
+/*** Define the executable permission operations published by this package. */
+export const CAPABILITIES = [
+  {
+    id: 'permissions.inspect',
+    owner: '@ankhorage/permissions',
+    access: ['invoke'],
+    binding: { kind: 'action', bindableAs: ['target'] },
+    label: 'Inspect permissions',
+    description: 'List known permission identifiers and registry metadata.',
+  },
+  {
+    id: 'permissions.check',
+    owner: '@ankhorage/permissions',
+    access: ['invoke'],
+    binding: { kind: 'action', bindableAs: ['target'] },
+    label: 'Check permission',
+    description: 'Check a permission state through a host-provided permission client.',
+  },
+  {
+    id: 'permissions.request',
+    owner: '@ankhorage/permissions',
+    access: ['invoke'],
+    binding: { kind: 'action', bindableAs: ['target'] },
+    label: 'Request permission',
+    description: 'Request a permission through a host-provided permission client.',
+  },
+  {
+    id: 'permissions.manifest',
+    owner: '@ankhorage/permissions',
+    access: ['invoke'],
+    binding: { kind: 'action', bindableAs: ['target'] },
+    label: 'Inspect permission manifest',
+    description: 'Show native and web manifest metadata required by registered permissions.',
+  },
+] as const satisfies readonly Capability[];

package/src/provider.test.ts

@@ -1,6 +1,8 @@
 import { describe, expect, test } from 'bun:test';
 
+import packageJson from '../package.json';
 import provider from './ankh.provider';
+import { CAPABILITIES } from './capabilities/index';
 
 describe('provider', () => {
   test('declares permission command metadata', () => {
@@ -10,4 +12,32 @@ describe('provider', () => {
       provider.commands.map((entry) => entry.path.join(' ')),
     );
   });
+
+  test('keeps package metadata, provider metadata, and catalog aligned', () => {
+    expect(packageJson.ankh.capabilities).toEqual(
+      CAPABILITIES.map((capability) => ({
+        ...capability,
+        access: [...capability.access],
+        binding: {
+          ...capability.binding,
+          bindableAs: [...capability.binding.bindableAs],
+        },
+      })),
+    );
+    expect(provider.capabilities).toEqual(CAPABILITIES);
+    expect(provider.version).toBe(packageJson.version);
+  });
+
+  test('maps every command to its canonical capability by ID', () => {
+    expect(provider.commands.map(({ path, capability }) => ({ path, capability }))).toEqual([
+      { path: ['list'], capability: 'permissions.inspect' },
+      { path: ['check'], capability: 'permissions.check' },
+      { path: ['request'], capability: 'permissions.request' },
+      { path: ['manifest'], capability: 'permissions.manifest' },
+    ]);
+
+    expect([...provider.commands.map(({ capability }) => capability)].sort()).toEqual(
+      [...CAPABILITIES.map(({ id }) => id)].sort(),
+    );
+  });
 });