@robbeverhelst/do 1.308.0 → 1.308.2

package/dist/do.js

@@ -4630,8 +4630,16 @@ var animals = pgTable("animals", {
 }, (t) => [index("animals_tenant_idx").on(t.tenantId), index("animals_species_idx").on(t.speciesId)]);
 var animalLostCards = pgTable("animal_lost_cards", {
   animalId: text("animal_id").primaryKey().references(() => animals.id, { onDelete: "cascade" }),
+  id: text("id").notNull().unique(),
   tenantId: text("tenant_id").notNull().references(() => tenants.id),
-  token: text("token").notNull().unique(),
+  token: text("token").unique(),
+  tokenHash: text("token_hash").notNull().unique(),
+  tokenSealed: text("token_sealed"),
+  expiresAt: timestamp("expires_at", { withTimezone: true }),
+  revokedAt: timestamp("revoked_at", { withTimezone: true }),
+  opens: integer("opens").notNull().default(0),
+  lastOpenedAt: timestamp("last_opened_at", { withTimezone: true }),
+  createdByUserId: text("created_by_user_id").references(() => users.id),
   photoFileId: text("photo_file_id"),
   phone: text("phone"),
   showChipped: boolean("show_chipped").notNull().default(false),
@@ -5721,6 +5729,8 @@ var invites = pgTable("invites", {
   type: inviteType("type").notNull(),
   email: text("email"),
   token: text("token").unique(),
+  tokenHash: text("token_hash").unique(),
+  tokenSealed: text("token_sealed"),
   role: baseRole("role").notNull().default("member"),
   customRoleId: text("custom_role_id").references(() => roles.id),
   invitedByUserId: text("invited_by_user_id").references(() => users.id),
@@ -5749,7 +5759,7 @@ var shareLinks = pgTable("share_links", {
   id: text("id").primaryKey(),
   tenantId: text("tenant_id").notNull().references(() => tenants.id),
   nodeId: text("node_id").notNull().references(() => nodes.id),
-  token: text("token").notNull().unique(),
+  tokenHash: text("token_hash").notNull().unique(),
   capability: capability("capability").notNull().default("view"),
   createdByUserId: text("created_by_user_id").references(() => users.id),
   expiresAt: timestamp("expires_at", { withTimezone: true }),
@@ -29358,7 +29368,7 @@ var inviteSchema = createSelectSchema(invites, {
   acceptedAt: exports_coerce.date().nullable(),
   createdAt: exports_coerce.date(),
   updatedAt: exports_coerce.date()
-});
+}).omit({ tokenHash: true, tokenSealed: true });
 var createInviteInputSchema = object({
   id: ulidSchema,
   type: _enum2(["email", "link", "guest"]),
@@ -29423,7 +29433,7 @@ var shareLinkSchema = createSelectSchema(shareLinks, {
   createdAt: exports_coerce.date(),
   updatedAt: exports_coerce.date()
 });
-var shareLinkPublicSchema = shareLinkSchema.omit({ token: true });
+var shareLinkPublicSchema = shareLinkSchema.omit({ tokenHash: true });
 var createShareLinkInputSchema = createInsertSchema(shareLinks, {
   id: ulidSchema,
   nodeId: ulidSchema,
@@ -29431,7 +29441,7 @@ var createShareLinkInputSchema = createInsertSchema(shareLinks, {
   expiresAt: exports_coerce.date().nullish()
 }).omit({
   tenantId: true,
-  token: true,
+  tokenHash: true,
   createdByUserId: true,
   revokedAt: true,
   createdAt: true,
@@ -31255,6 +31265,27 @@ var commentOperations = defineOperations({
   }
 });
 
+// ../../packages/schema/src/operations/contacts.ts
+var contactOperations = defineOperations({
+  ...crudOperations({
+    segment: "contacts",
+    tag: "Contacts",
+    noun: "contact",
+    read: "contacts:read",
+    write: "contacts:write",
+    create: createContactInputSchema,
+    update: updateContactInputSchema,
+    listQuery: [
+      { name: "kind", description: "Only `person` or only `organization` contacts." },
+      {
+        name: "role",
+        description: "Only contacts with this role (`insurer`, `telecom`, `gp`, `vet`, \u2026)."
+      }
+    ],
+    listQuerySchema: contactsQuerySchema
+  })
+});
+
 // ../../packages/schema/src/operations/days.ts
 var pathParams = {
   date: {
@@ -32275,6 +32306,24 @@ var householdOperations = defineOperations({
   })
 });
 
+// ../../packages/schema/src/operations/incidents.ts
+var incidentOperations = defineOperations({
+  ...crudOperations({
+    segment: "incidents",
+    tag: "Incidents",
+    noun: "incident",
+    read: "documents:read",
+    write: "documents:write",
+    create: createIncidentInputSchema,
+    update: updateIncidentInputSchema,
+    listQuery: [
+      { name: "status", description: "Only this status (`open`, `claimed`, `closed`)." },
+      { name: "policyId", description: "Only the incidents under this policy (a document id)." }
+    ],
+    listQuerySchema: incidentsQuerySchema
+  })
+});
+
 // ../../packages/schema/src/operations/inventory-items.ts
 var inventoryItemOperations = defineOperations({
   ...crudOperations({
@@ -32329,6 +32378,389 @@ var inviteOperations = defineOperations({
   }
 });
 
+// ../../packages/schema/src/operations/journal.ts
+var journalOperations = defineOperations({
+  range: {
+    method: "get",
+    path: "/journal/days",
+    scopes: ["journal:read"],
+    tag: "Journal",
+    summary: "Journal days in a range",
+    description: "Journal home's read: every day in `[from, to]` (at most 366 days, the key's member's civil days) that has a Journal day or a Metric value, newest first. Each carries the Journal day's title, status, highlights, tags and a plain excerpt of its summary when there is one, and that day's Metric values by key (`rating`, `mood`, `sleep`, \u2026), with how many photos and entries it holds and the first nodes it links to. The Journal is owner-only: a key reads only its own member's days.",
+    afterScopes: "`*` does not cover it.",
+    query: [
+      { name: "from", description: "The first day, `YYYY-MM-DD`.", format: "date" },
+      { name: "to", description: "The last day, `YYYY-MM-DD`.", format: "date" }
+    ],
+    querySchema: journalRangeQuerySchema,
+    status: 200,
+    response: { description: "The days.", view: "JournalDayList" },
+    errors: { 400: true },
+    operationId: "list_journal_days"
+  },
+  search: {
+    method: "get",
+    path: "/journal/search",
+    scopes: ["journal:read"],
+    tag: "Journal",
+    summary: "Search Journal days",
+    description: "The key's member's days that answer `q` (at least 2 characters), best match first, at most 30, each shaped like a day of `GET /journal/days`. Keyword and date, no model: the words left after small words (each with a few that mean the same, English and Dutch) scored where they're found (one-liner and tags, then highlights, then the summary and entries); a date phrase (`in March`, `last week`, `14 October`, `2026-02`, `yesterday`) narrows to its window, or alone reads it; a question leaning on a heavy or a bright day (`rough`, `tired`, `a great day`) adds the days rated 4 or less / 8 or more (within the window, else the last year). `understood` says how it was read. Owner-only: another member's days never match.",
+    afterScopes: "`*` does not cover it.",
+    query: [{ name: "q", description: "What to look for." }],
+    querySchema: journalSearchQuerySchema,
+    status: 200,
+    response: { description: "The matching days.", view: "JournalSearch" },
+    errors: { 400: true }
+  },
+  day: {
+    method: "get",
+    path: "/journal/days/{date}",
+    scopes: ["journal:read"],
+    tag: "Journal",
+    summary: "A Journal day",
+    description: "One civil day of the key's member: the Journal day (its summary, entries, highlights and tags; null when none was written yet) and what happened that day, read live: the Metric values, what landed (tasks and time blocks, by the member or an agent), the habits due and whether they happened, the calendar events, and the nodes the day links to.",
+    afterScopes: "`*` does not cover it.",
+    pathParams: {
+      date: { description: "The day, `YYYY-MM-DD`.", format: "date" }
+    },
+    pathParamSchemas: { date: journalDateSchema },
+    status: 200,
+    response: { description: "The day.", view: "JournalSnapshot" },
+    errors: { 400: true },
+    operationId: "get_journal_day"
+  },
+  like: {
+    method: "get",
+    path: "/journal/days/{date}/like",
+    scopes: ["journal:read"],
+    tag: "Journal",
+    summary: "Days like this one",
+    description: "\"When did I feel like this before?\" (`journal_like`): the key's member's other days most like this one, by Postgres full text over each day's one-liner, highlights, tags, summary and entries, queried with this day's distinctive words (each widened by a few that mean the same, English and Dutch), then ranked by the words and tags they share and how close the rating is. Each day is shaped like the range's, with `shared` (this day's words the other has) and `sharedTags`; `words` is how this day was read. Words, not meanings: there are no embeddings. A day hidden from memories is never offered. A day with nothing written is a 404.",
+    afterScopes: "`*` does not cover it.",
+    pathParams: {
+      date: { description: "The day, `YYYY-MM-DD`.", format: "date" }
+    },
+    pathParamSchemas: { date: journalDateSchema },
+    query: [{ name: "limit", description: "At most this many days (1\u201310, 5 by default)." }],
+    querySchema: journalLikeQuerySchema,
+    status: 200,
+    response: { description: "The days most like it.", view: "JournalLike" },
+    errors: { 400: true, 404: true }
+  },
+  export: {
+    method: "get",
+    path: "/journal/export",
+    scopes: ["journal:export"],
+    tag: "Journal",
+    summary: "Export the Journal as markdown",
+    description: "Every Journal day of the key's member changed at or after `since` (all without it) as a markdown file: `path` (`YYYY/YYYY-MM-DD.md`), front matter (date, title, status, Metric values, tags, `do_id`), the summary, highlights, entries and links as `do://node/<id>`. Links into other sensitive domains stay out. Store `nextSince` and pass it next time. The agent's runtime pulls this nightly into its memory; do is the record and the files are read-only copies.",
+    query: [
+      {
+        name: "since",
+        description: "Only days changed at or after this instant (ISO).",
+        format: "date-time"
+      }
+    ],
+    querySchema: journalExportQuerySchema,
+    status: 200,
+    response: { description: "The files.", view: "JournalExport" },
+    errors: { 400: true },
+    operationId: "export_journal"
+  },
+  write: {
+    method: "post",
+    path: "/journal/days/{date}",
+    scopes: ["journal:write"],
+    tag: "Journal",
+    summary: "Write a Journal day",
+    description: "The agent's evening write (`journal_write_day`) or the member's: creates the day when missing and sets what's given. `summary` (markdown) replaces the summary entry, `highlights` (at most 3) replace the day's, `tags` and `links` (`{ kind, nodeId }`, e.g. `saw` a contact, `about` an event) are added, `metrics` (`{ rating: 7, mood: 4 }`) are logged on each Metric's line for that day. A future date, an unknown Metric or a value out of range is a 400. Returns the day's snapshot, the receipt; an agent's write shows in the change list with Undo.",
+    pathParams: {
+      date: { description: "The day, `YYYY-MM-DD`.", format: "date" }
+    },
+    pathParamSchemas: { date: journalDateSchema },
+    body: journalWriteDayInputSchema,
+    status: 200,
+    response: { description: "The day.", view: "JournalSnapshot" },
+    errors: { 400: true },
+    operationId: "journal_write_day"
+  },
+  addEntry: {
+    method: "post",
+    path: "/journal/days/{date}/entries",
+    scopes: ["journal:write"],
+    tag: "Journal",
+    summary: "Add a Journal entry",
+    description: "Add an entry to the day (`journal_add_entry`): a markdown body and an optional title. The day is made when missing. Returns the snapshot.",
+    pathParams: {
+      date: { description: "The day, `YYYY-MM-DD`.", format: "date" }
+    },
+    pathParamSchemas: { date: journalDateSchema },
+    body: journalAddEntryInputSchema,
+    status: 200,
+    response: { description: "The day.", view: "JournalSnapshot" },
+    errors: { 400: true },
+    operationId: "journal_add_entry"
+  },
+  correct: {
+    method: "patch",
+    path: "/journal/days/{date}",
+    scopes: ["journal:write"],
+    tag: "Journal",
+    summary: "Correct a Journal day",
+    description: "Fix the day (`journal_correct`): `title`, `summary` (null clears it), `highlights` and `tags` replace what's there, `removeLinks` unlinks nodes, `metrics` log a corrected value for the day, `status` and `hiddenFromMemories` set those. The member's own correction marks the day reviewed. 404 when the date has no Journal day. Returns the snapshot.",
+    pathParams: {
+      date: { description: "The day, `YYYY-MM-DD`.", format: "date" }
+    },
+    pathParamSchemas: { date: journalDateSchema },
+    body: journalCorrectInputSchema,
+    status: 200,
+    response: { description: "The day.", view: "JournalSnapshot" },
+    errors: { 400: true, 404: "No Journal day on that date." },
+    operationId: "journal_correct"
+  },
+  stageImport: {
+    method: "post",
+    path: "/journal/imports",
+    scopes: ["journal:write"],
+    tag: "Journal",
+    summary: "Stage daily notes for the backfill",
+    description: "Stage parsed daily notes (`do journal import push <dir>`): one item per day (at most 400 a request) with its source file and hash, what becomes its entry (`summary`, `retro` or `log`), a one-liner, the summary's text (health lines left out), a clear `rating` or a `ratingQuestion` (\"~5/10\"), a highlight, whether it may be a milestone or had health lines, and the links counted. Nothing is written into the Journal: the member reviews and approves each month in the app, and a key can't approve. A day still waiting is replaced; one already imported is left alone (`alreadyImported`). Staged days stand behind the Journal's wall.",
+    body: journalImportUploadInputSchema,
+    status: 200,
+    response: { description: "How the upload went.", view: "JournalImportUpload" },
+    errors: { 400: true }
+  },
+  importOverview: {
+    method: "get",
+    path: "/journal/imports",
+    scopes: ["journal:read"],
+    tag: "Journal",
+    summary: "What the backfill has staged",
+    description: "The key's member's staged days: the source folder, how many files over which dates, what the parser found (summaries, ratings and the unclear ones, milestone candidates, days with health lines, links), each month's batch (days, ready, needing the member, imported), and one batch's days (`?batch=YYYY-MM`, else the newest still waiting), each with its `state`: `ready`, `needs_you`, `today` (never imported), `imported` or `skipped`.",
+    afterScopes: "`*` does not cover it.",
+    query: [{ name: "batch", description: "A month, `YYYY-MM`." }],
+    querySchema: journalImportQuerySchema,
+    status: 200,
+    response: { description: "The overview.", view: "JournalImportOverview" },
+    errors: { 400: true }
+  },
+  milestones: {
+    method: "get",
+    path: "/journal/milestones",
+    scopes: ["journal:read"],
+    tag: "Journal",
+    summary: "The life timeline",
+    description: "The key's member's milestones and the Space's shared ones, oldest first: title, kind, when (`happenedOn` at its `precision`: year, month or day), `planned` (still ahead), `status` (`suggested` by an agent and not kept yet, or `kept`), `visibility` (`owner` = Only me, the default; `space` = shared), the nodes it is about (each with its title, type and, for a Project, its `status`), the Journal day it happened on (rating, photos) when the date is a day, and whether it reminds yearly.",
+    afterScopes: "`*` does not cover it.",
+    status: 200,
+    response: { description: "The timeline.", view: "JournalMilestoneList" }
+  },
+  createMilestone: {
+    method: "post",
+    path: "/journal/milestones",
+    scopes: ["journal:write"],
+    tag: "Journal",
+    summary: "Mark a milestone",
+    description: "Mark a milestone (`journal_mark_milestone`): a title, a kind, when and how exactly, planned or not, a line about it, Only me (default) or shared, the nodes it is about (`links`: a Journal day, a paper, a project, a person) and `remindYearly` (a yearly `anniversary` Key date; needs a day). An agent's mark is `suggested` unless it sends `status: kept`; the member keeps or removes it.",
+    body: journalCreateMilestoneInputSchema,
+    status: 201,
+    response: { description: "The milestone.", view: "JournalMilestone" },
+    errors: { 400: true }
+  },
+  updateMilestone: {
+    method: "patch",
+    path: "/journal/milestones/{id}",
+    scopes: ["journal:write"],
+    tag: "Journal",
+    summary: "Change a milestone",
+    description: "Change what's given; `status: kept` keeps a suggestion; `addLinks` / `removeLinks` link or unlink; `remindYearly` turns the yearly Key date on or off (it moves with the date). 404 for someone else's Only me milestone.",
+    pathParams: {
+      id: "The milestone's id."
+    },
+    pathParamSchemas: { id: ulidSchema },
+    body: journalUpdateMilestoneInputSchema,
+    status: 200,
+    response: { description: "The milestone.", view: "JournalMilestone" },
+    errors: { 400: true, 404: "No such milestone." }
+  },
+  removeMilestone: {
+    method: "delete",
+    path: "/journal/milestones/{id}",
+    scopes: ["journal:write"],
+    tag: "Journal",
+    summary: "Remove a milestone",
+    description: "Remove a milestone (to the trash) and its yearly reminder.",
+    pathParams: {
+      id: "The milestone's id."
+    },
+    pathParamSchemas: { id: ulidSchema },
+    status: 204,
+    response: { description: "Removed." },
+    errors: { 404: "No such milestone." }
+  },
+  week: {
+    method: "get",
+    path: "/journal/weeks/{week}",
+    scopes: ["journal:read"],
+    tag: "Journal",
+    summary: "A Journal week",
+    description: "One ISO week of the key's member: the week's recap (the prose, up to 3 best moments, one pattern line; null until written), the week's days with a Journal day or a Metric value (as `GET /journal/days`), `usual` (the mean day rating over the eight weeks before) and the numbers from Progress and the Metrics: what landed (and how much of it was the member's own), each habit's done and due days, the average sleep and the nights to bed after midnight.",
+    afterScopes: "`*` does not cover it.",
+    pathParams: {
+      week: "The ISO week, `YYYY-Www` (e.g. `2026-W42`)."
+    },
+    pathParamSchemas: { week: journalWeekKeySchema },
+    status: 200,
+    response: { description: "The week.", view: "JournalWeek" },
+    errors: { 400: true }
+  },
+  writeRecap: {
+    method: "put",
+    path: "/journal/weeks/{week}/recap",
+    scopes: ["journal:write"],
+    tag: "Journal",
+    summary: "Write a week's recap",
+    description: "The agent's Sunday recap (`journal_write_recap`) or the member's: `body` (markdown) replaces the prose; `moments` (at most 3, `{ text, date?, nodeId? }`) and `pattern` replace theirs when given (`pattern: null` clears it). The recap is owner-only like the days. A week that hasn't started is a 400. Returns the week.",
+    pathParams: {
+      week: "The ISO week, `YYYY-Www` (e.g. `2026-W42`)."
+    },
+    pathParamSchemas: { week: journalWeekKeySchema },
+    body: journalWriteRecapInputSchema,
+    status: 200,
+    response: { description: "The week.", view: "JournalWeek" },
+    errors: { 400: true }
+  },
+  recall: {
+    method: "get",
+    path: "/journal/recall",
+    scopes: ["journal:read"],
+    tag: "Journal",
+    summary: "Recall the Journal",
+    description: "The agent's recall (`journal_recall`): \"what did I do / how was I around <date or topic>\" over the key's member's own days only (another member's days never answer). `q` (2+ characters) finds the days that mention it; `around` (a day) reads 3 days either side; `from`/`to` read a window (at most 366 days); words and a window combine; with neither, the last 7 days. Returns the days newest first (as `GET /journal/days`, at most `limit`, 30 by default), how many were rated and their mean, the member's kept milestones within a week of the window, and the window's last day in up to 3 earlier years (a day hidden from memories left out), so an answer can cite dates.",
+    afterScopes: "`*` does not cover it.",
+    query: [
+      { name: "q", description: "Words to look for (2+ characters)." },
+      { name: "around", description: "A day, YYYY-MM-DD: 3 days either side." },
+      { name: "from", description: "The window's first day, YYYY-MM-DD." },
+      { name: "to", description: "The window's last day, YYYY-MM-DD." },
+      { name: "limit", description: "At most this many days (1\u201330)." }
+    ],
+    querySchema: journalRecallQuerySchema,
+    status: 200,
+    response: { description: "The days that answer.", view: "JournalRecall" },
+    errors: { 400: true },
+    operationId: "journal_recall"
+  },
+  digest: {
+    method: "get",
+    path: "/journal/digest",
+    scopes: ["journal:read"],
+    tag: "Journal",
+    summary: "The Journal digest",
+    description: "The last 7 days of the key's member's Journal, for the agent's private session context: each day's one line and rating (oldest first), the member's kept milestones a week either side, and `text`, the same as a few plain lines (a few hundred tokens).",
+    afterScopes: "`*` does not cover it.",
+    status: 200,
+    response: { description: "The digest.", view: "JournalDigest" },
+    operationId: "journal_digest"
+  },
+  month: {
+    method: "get",
+    path: "/journal/months/{month}",
+    scopes: ["journal:read"],
+    tag: "Journal",
+    summary: "A Journal month",
+    description: "One month of the key's member: the month's recap (the prose, up to 3 best moments, one pattern line; null until written), the month's days with a Journal day or a Metric value (as `GET /journal/days`), `usual` (the mean day rating over the three months before), the numbers from Progress and the Metrics (what landed and how much was the member's own, each habit's done and due days, the average sleep and the nights to bed after midnight) and the member's own kept milestones that happened in it.",
+    afterScopes: "`*` does not cover it.",
+    pathParams: {
+      month: "The month, `YYYY-MM` (e.g. `2026-10`)."
+    },
+    pathParamSchemas: { month: journalMonthKeySchema },
+    status: 200,
+    response: { description: "The month.", view: "JournalMonth" },
+    errors: { 400: true }
+  },
+  writeMonthRecap: {
+    method: "put",
+    path: "/journal/months/{month}/recap",
+    scopes: ["journal:write"],
+    tag: "Journal",
+    summary: "Write a month's recap",
+    description: "The agent's recap on the 1st or the member's: `body` (markdown) replaces the prose; `moments` (at most 3, `{ text, date?, nodeId? }`) and `pattern` replace theirs when given (`pattern: null` clears it). Owner-only like the days. A month that hasn't started is a 400. Returns the month.",
+    pathParams: {
+      month: "The month, `YYYY-MM` (e.g. `2026-10`)."
+    },
+    pathParamSchemas: { month: journalMonthKeySchema },
+    body: journalWriteRecapInputSchema,
+    status: 200,
+    response: { description: "The month.", view: "JournalMonth" },
+    errors: { 400: true }
+  },
+  year: {
+    method: "get",
+    path: "/journal/years/{year}",
+    scopes: ["journal:read"],
+    tag: "Journal",
+    summary: "A Journal year",
+    description: "One year of the key's member: the year's recap (null until written), the year's days (its rating pixels), each begun month's average rating, rated and kept days and best day, `usual` (the mean day rating of the year before), the numbers from Progress and the Metrics, and the member's own kept milestones of the year.",
+    afterScopes: "`*` does not cover it.",
+    pathParams: {
+      year: "The year, `YYYY` (e.g. `2026`)."
+    },
+    pathParamSchemas: { year: journalYearKeySchema },
+    status: 200,
+    response: { description: "The year.", view: "JournalYear" },
+    errors: { 400: true }
+  },
+  writeYearRecap: {
+    method: "put",
+    path: "/journal/years/{year}/recap",
+    scopes: ["journal:write"],
+    tag: "Journal",
+    summary: "Write a year's recap",
+    description: "The agent's recap on 1 January or the member's, the same input as a week's: `body` replaces the prose; `moments` and `pattern` replace theirs when given. Owner-only like the days. A year that hasn't started is a 400. Returns the year.",
+    pathParams: {
+      year: "The year, `YYYY` (e.g. `2026`)."
+    },
+    pathParamSchemas: { year: journalYearKeySchema },
+    body: journalWriteRecapInputSchema,
+    status: 200,
+    response: { description: "The year.", view: "JournalYear" },
+    errors: { 400: true }
+  }
+});
+
+// ../../packages/schema/src/operations/key-dates.ts
+var keyDateOperations = defineOperations({
+  ...crudOperations({
+    segment: "key-dates",
+    tag: "Key dates",
+    noun: "key date",
+    read: "key-dates:read",
+    write: "key-dates:write",
+    create: createKeyDateInputSchema,
+    update: updateKeyDateInputSchema,
+    listQuery: [
+      {
+        name: "nodeId",
+        description: "Only the key dates on this node (a contact, a document, \u2026)."
+      },
+      {
+        name: "kind",
+        description: "Only this kind (`birthday`, `renews`, `cancel_by`, `expires`, `follow_up`, `due_back`, \u2026)."
+      },
+      {
+        name: "from",
+        description: "Only dates whose next occurrence is on or after this day (`YYYY-MM-DD`)."
+      },
+      {
+        name: "to",
+        description: "Only dates whose next occurrence is on or before this day (`YYYY-MM-DD`)."
+      }
+    ],
+    listQuerySchema: keyDatesQuerySchema
+  })
+});
+
 // ../../packages/schema/src/operations/keys.ts
 var keyOperations = defineOperations({
   list: {
@@ -32753,6 +33185,32 @@ var periodOperations = defineOperations({
   })
 });
 
+// ../../packages/schema/src/operations/places.ts
+var placeOperations = defineOperations({
+  ...crudOperations({
+    segment: "places",
+    tag: "Places",
+    noun: "place",
+    read: "places:read",
+    write: "places:write",
+    create: createPlaceInputSchema,
+    update: updatePlaceInputSchema
+  }),
+  importHouse: {
+    method: "post",
+    path: "/places/import",
+    scopes: ["places:write"],
+    tag: "Places",
+    summary: "Import Places from house.json",
+    description: "Import the rooms of one house from Gaard's `house.json` (`{ file, houseIndex? }`; the first house by default). Each room not imported before becomes a Place with its floor and outline; rooms already imported, even ones deleted since, are skipped, so do keeps what it owns. No sync with Gaard. Returns `{ created, skipped, places }`; fires `place.imported`.",
+    body: importPlacesInputSchema,
+    status: 200,
+    response: { description: "`{ created, skipped, places }`." },
+    errors: { 400: true },
+    webhook: "place.imported"
+  }
+});
+
 // ../../packages/schema/src/operations/planning-rules.ts
 var planningRuleOperations = defineOperations({
   ...crudOperations({
@@ -34884,7 +35342,7 @@ function parseCapture2(input, now) {
 
 // src/meta.ts
 var CLI_NAME = "do";
-var VERSION = "1.308.0";
+var VERSION = "1.308.2";
 var API_PREFIX = "/api/v1";
 var DEFAULT_API_URL = "http://localhost:3001";
 
@@ -35113,7 +35571,6 @@ function resolveConfig(io, flags) {
 }
 
 // src/contacts-commands.ts
-var WRITE6 = ["contacts:write"];
 var FIELD_FLAGS = [
   { name: "name", type: "string", description: "The display name (or pass it as the argument)." },
   { name: "kind", type: "string", description: "person (the default) or organization." },
@@ -35156,7 +35613,7 @@ var CONTACT_COMMAND_SPECS = [
     summary: "Add a contact: a person or an organisation, with their details.",
     args: [{ name: "name", required: false, description: "The display name." }],
     flags: FIELD_FLAGS,
-    scopes: WRITE6,
+    scopes: [...contactOperations.create.scopes],
     returns: "ContactView",
     notes: 'Flags build a CreateContactInput; --data adds any other field (a flag wins). The id is minted when omitted. e.g. `do contacts create "Sam Peters" --email sam@example.com --birthday 1990-04-12 --circles <id>`.'
   },
@@ -35165,7 +35622,7 @@ var CONTACT_COMMAND_SPECS = [
     summary: "Change a contact's details.",
     args: [{ name: "id", required: true, description: "The contact's id." }],
     flags: FIELD_FLAGS,
-    scopes: WRITE6,
+    scopes: [...contactOperations.update.scopes],
     returns: "ContactView",
     notes: "Only the flags you pass change. `none` clears a field (--email none, --birthday none). --birthday keeps the contact's other dates; --roles, --circles and --tags replace the list (a role it already has keeps its details)."
   }
@@ -35394,22 +35851,13 @@ var ENTITIES = [
     createInput: "CreateAreaInput",
     updateInput: "UpdateAreaInput"
   }),
-  {
+  entityFromOperations(placeOperations, {
     name: "places",
-    path: "/places",
-    readScopes: ["places:read"],
     returns: "PlaceView",
-    canGet: true,
     listFlags: [],
-    write: {
-      scopes: ["places:write"],
-      createSchema: createPlaceInputSchema,
-      createInput: "CreatePlaceInput",
-      updateSchema: updatePlaceInputSchema,
-      updateInput: "UpdatePlaceInput",
-      canDelete: true
-    }
-  },
+    createInput: "CreatePlaceInput",
+    updateInput: "UpdatePlaceInput"
+  }),
   entityFromOperations(routineOperations, {
     name: "routines",
     returns: "RoutineView",
@@ -35428,12 +35876,9 @@ var ENTITIES = [
     createInput: "CreateNoteInput",
     updateInput: "UpdateNoteInput"
   }),
-  {
+  entityFromOperations(contactOperations, {
     name: "contacts",
-    path: "/contacts",
-    readScopes: ["contacts:read"],
     returns: "Contact",
-    canGet: true,
     listFlags: [
       { name: "kind", description: "only person or only organization contacts", query: "kind" },
       {
@@ -35448,15 +35893,9 @@ var ENTITIES = [
         sends: "true"
       }
     ],
-    write: {
-      scopes: ["contacts:write"],
-      createSchema: createContactInputSchema,
-      createInput: "CreateContactInput",
-      updateSchema: updateContactInputSchema,
-      updateInput: "UpdateContactInput",
-      canDelete: true
-    }
-  },
+    createInput: "CreateContactInput",
+    updateInput: "UpdateContactInput"
+  }),
   {
     name: "contact-moments",
     path: "/contact-moments",
@@ -35597,12 +36036,9 @@ var ENTITIES = [
     createInput: "CreateGuestInput",
     updateInput: "UpdateGuestInput"
   }),
-  {
+  entityFromOperations(keyDateOperations, {
     name: "key-dates",
-    path: "/key-dates",
-    readScopes: ["key-dates:read"],
     returns: "KeyDateView",
-    canGet: true,
     listFlags: [
       { name: "node", description: "only the key dates on this node id", query: "nodeId" },
       {
@@ -35621,15 +36057,9 @@ var ENTITIES = [
         query: "to"
       }
     ],
-    write: {
-      scopes: ["key-dates:write"],
-      createSchema: createKeyDateInputSchema,
-      createInput: "CreateKeyDateInput",
-      updateSchema: updateKeyDateInputSchema,
-      updateInput: "UpdateKeyDateInput",
-      canDelete: true
-    }
-  },
+    createInput: "CreateKeyDateInput",
+    updateInput: "UpdateKeyDateInput"
+  }),
   {
     name: "documents",
     path: "/documents",
@@ -35662,12 +36092,9 @@ var ENTITIES = [
       canDelete: true
     }
   },
-  {
+  entityFromOperations(incidentOperations, {
     name: "incidents",
-    path: "/incidents",
-    readScopes: ["documents:read"],
     returns: "IncidentView",
-    canGet: true,
     listFlags: [
       { name: "status", description: "only this status (open, claimed, closed)", query: "status" },
       {
@@ -35676,15 +36103,9 @@ var ENTITIES = [
         query: "policyId"
       }
     ],
-    write: {
-      scopes: ["documents:write"],
-      createSchema: createIncidentInputSchema,
-      createInput: "CreateIncidentInput",
-      updateSchema: updateIncidentInputSchema,
-      updateInput: "UpdateIncidentInput",
-      canDelete: true
-    }
-  },
+    createInput: "CreateIncidentInput",
+    updateInput: "UpdateIncidentInput"
+  }),
   entityFromOperations(periodOperations, {
     name: "periods",
     returns: "PeriodView",
@@ -35826,7 +36247,7 @@ function entityOperations(e) {
 
 // src/health-commands.ts
 var READ6 = ["health:read"];
-var WRITE7 = ["health:write"];
+var WRITE6 = ["health:write"];
 var DATA_FLAG = {
   name: "data",
   type: "string",
@@ -35856,7 +36277,7 @@ function recordSpecs(plural, singular, noun, returns, createInput, updateInput,
       summary: `Add a health ${noun} (--data '${createInput}').`,
       args: [],
       flags: [DATA_FLAG, ...addFlags],
-      scopes: WRITE7,
+      scopes: WRITE6,
       returns,
       notes: `Body: ${createInput}. Always private to you; subjectNodeId names who it is about (absent = you).`
     },
@@ -35865,7 +36286,7 @@ function recordSpecs(plural, singular, noun, returns, createInput, updateInput,
       summary: `Change a health ${noun} (--data '${updateInput}').`,
       args: [id],
       flags: [DATA_FLAG],
-      scopes: WRITE7,
+      scopes: WRITE6,
       returns,
       notes: `Body: ${updateInput}. null clears a field.`
     },
@@ -35874,7 +36295,7 @@ function recordSpecs(plural, singular, noun, returns, createInput, updateInput,
       summary: `Delete a health ${noun}.`,
       args: [id],
       flags: [],
-      scopes: WRITE7,
+      scopes: WRITE6,
       returns: "Deleted",
       notes: "Destructive: needs --allow-destructive. An Agent's delete waits on your confirmation."
     }
@@ -35924,7 +36345,7 @@ var HEALTH_COMMAND_SPECS = [
         description: `Sex, in your words, for the doctor's page ("female"); "" clears it.`
       }
     ],
-    scopes: WRITE7,
+    scopes: WRITE6,
     returns: "HealthProfile",
     notes: "Body: UpdateHealthProfileInput. An absent key keeps a field; null clears it. Lifestyle is `alcohol`, `smoking`, `exercise`, and `notes` anything else: the member's own words. Notes go on For the doctor's background; `sex` on its patient line."
   },
@@ -35933,7 +36354,7 @@ var HEALTH_COMMAND_SPECS = [
     summary: "Log one health message: find or start the Episode, add a symptom and/or a dose.",
     args: [],
     flags: [DATA_FLAG],
-    scopes: WRITE7,
+    scopes: WRITE6,
     returns: "HealthReceipt",
     notes: 'Body: LogHealthInput, e.g. {"episode":{"title":"Sprained ankle","bodyRegion":"ankle_l"},"symptom":{"symptom":"worse on the stairs","severity":6,"severityGuessed":true},"dose":{"medication":"Ibuprofen"}}. The receipt lists each part with a line, what was guessed, and its undo. With "thread":{"slug":"<agent>"} (only an agent key that converses) the receipt card is posted there too, and postId names it.'
   },
@@ -35942,7 +36363,7 @@ var HEALTH_COMMAND_SPECS = [
     summary: `Correct a symptom entry and get a receipt (--data '{"bodyRegion":"ankle_l"}').`,
     args: [{ name: "entry", required: true, description: "The entry's id (its latest version)." }],
     flags: [DATA_FLAG],
-    scopes: WRITE7,
+    scopes: WRITE6,
     returns: "HealthReceipt"
   },
   {
@@ -35953,7 +36374,7 @@ var HEALTH_COMMAND_SPECS = [
       { name: "trend", required: true, description: "better|same|worse, against yesterday." }
     ],
     flags: [],
-    scopes: WRITE7,
+    scopes: WRITE6,
     returns: "HealthReceipt",
     notes: "One a day: a second check-in the same day corrects the first. The receipt carries its undo."
   },
@@ -35970,7 +36391,7 @@ var HEALTH_COMMAND_SPECS = [
         description: "Post the confirmation card in this thread (by slug); the agent's key only."
       }
     ],
-    scopes: WRITE7,
+    scopes: WRITE6,
     returns: "HealthRedFlagsResult",
     notes: "Flags: fever, vomiting, black_stools, blood, weight_loss, night_pain, chest_pain, short_of_breath. Answers merge into those asked before; the Episode is marked checked today, and For the doctor shows it."
   },
@@ -35982,7 +36403,7 @@ var HEALTH_COMMAND_SPECS = [
       { name: "id", required: true, description: "The id from the receipt's undo." }
     ],
     flags: [],
-    scopes: WRITE7,
+    scopes: WRITE6,
     returns: "HealthUndoResult",
     notes: "A POST, so an Agent's undo never waits on a confirmation."
   },
@@ -35991,7 +36412,7 @@ var HEALTH_COMMAND_SPECS = [
     summary: "Find the open Episode a complaint belongs to, or start one (--data UpsertHealthEpisodeInput).",
     args: [],
     flags: [DATA_FLAG],
-    scopes: WRITE7,
+    scopes: WRITE6,
     returns: "HealthEpisodeUpsert"
   },
   {
@@ -36033,7 +36454,7 @@ var HEALTH_COMMAND_SPECS = [
     summary: "Take a For-the-doctor link back: it stops opening.",
     args: [{ name: "id", required: true, description: "The share's id." }],
     flags: [],
-    scopes: WRITE7,
+    scopes: WRITE6,
     returns: "HealthShare"
   },
   ...recordSpecs("conditions", "condition", "condition", "HealthConditionView", "CreateHealthConditionInput", "UpdateHealthConditionInput"),
@@ -36051,7 +36472,7 @@ var HEALTH_COMMAND_SPECS = [
         description: 'Their role on it, in your words ("dermatologist").'
       }
     ],
-    scopes: WRITE7,
+    scopes: WRITE6,
     returns: "HealthConditionView",
     notes: "A cared_by link (condition \u2192 contact). Adding one already on it sets the role. The condition's page, the Health home's Care team and For the doctor list them."
   },
@@ -36063,7 +36484,7 @@ var HEALTH_COMMAND_SPECS = [
       { name: "contact", required: true, description: "The Contact's id." }
     ],
     flags: [],
-    scopes: WRITE7,
+    scopes: WRITE6,
     returns: "HealthConditionView",
     notes: "An Agent's removal waits on your confirmation, like a delete."
   },
@@ -36100,7 +36521,7 @@ var HEALTH_COMMAND_SPECS = [
       { name: "at", type: "string", description: "When it happened (ISO); defaults to now." },
       { name: "note", type: "string", description: "A free-text note." }
     ],
-    scopes: WRITE7,
+    scopes: WRITE6,
     returns: "HealthSymptomEntry",
     notes: "An Agent's entry is source chat. For qualifiers, send --data with LogHealthSymptomInput."
   },
@@ -36116,7 +36537,7 @@ var HEALTH_COMMAND_SPECS = [
       }
     ],
     flags: [DATA_FLAG],
-    scopes: WRITE7,
+    scopes: WRITE6,
     returns: "HealthSymptomEntry",
     notes: "Body: CorrectHealthSymptomInput; fields not named are copied. The history stays."
   },
@@ -36128,7 +36549,7 @@ var HEALTH_COMMAND_SPECS = [
       { name: "entry", required: true, description: "The entry's id." }
     ],
     flags: [],
-    scopes: WRITE7,
+    scopes: WRITE6,
     returns: "Deleted"
   },
   ...recordSpecs("visits", "visit", "visit", "HealthEncounterView", "CreateHealthEncounterInput", "UpdateHealthEncounterInput"),
@@ -36152,7 +36573,7 @@ var HEALTH_COMMAND_SPECS = [
       { name: "at", type: "string", description: "When (ISO); defaults to now." },
       { name: "note", type: "string", description: "A free-text note." }
     ],
-    scopes: WRITE7,
+    scopes: WRITE6,
     returns: "HealthMedicationDose"
   },
   {
@@ -36163,7 +36584,7 @@ var HEALTH_COMMAND_SPECS = [
       { name: "dose", required: true, description: "The dose's id." }
     ],
     flags: [DATA_FLAG],
-    scopes: WRITE7,
+    scopes: WRITE6,
     returns: "HealthMedicationDose",
     notes: "Body: UpdateHealthDoseInput."
   },
@@ -36175,7 +36596,7 @@ var HEALTH_COMMAND_SPECS = [
       { name: "dose", required: true, description: "The dose's id." }
     ],
     flags: [],
-    scopes: WRITE7,
+    scopes: WRITE6,
     returns: "Deleted"
   },
   ...recordSpecs("labs", "lab", "lab draw", "HealthLabPanelView", "CreateHealthLabPanelInput", "UpdateHealthLabPanelInput"),
@@ -36197,7 +36618,7 @@ var HEALTH_COMMAND_SPECS = [
         description: "The file's media type, when its name doesn't say."
       }
     ],
-    scopes: WRITE7,
+    scopes: WRITE6,
     returns: "HealthLabImportResult",
     notes: "The draw stays a draft (status draft, source import) until the member checks it; the report is kept as its original. A report with no lab value in it is a 422."
   },
@@ -36282,7 +36703,7 @@ var HEALTH_COMMAND_SPECS = [
     summary: `Keep a target band or the supplement for an analyte (--data '{"targetLow":40,"targetHigh":60}').`,
     args: [{ name: "analyte", required: true, description: "The analyte key (vitamin_d)." }],
     flags: [DATA_FLAG],
-    scopes: WRITE7,
+    scopes: WRITE6,
     returns: "HealthLabAnalyteView",
     notes: "Body: SetHealthLabAnalyteInput. An absent key keeps a field; null clears it."
   }
@@ -36626,9 +37047,9 @@ var COMMAND_SPECS = [
     summary: "One Journal day: the summary, entries and highlights, and what happened (Metrics, landed, habits, events, links).",
     args: [{ name: "date", required: true, description: "The day, YYYY-MM-DD." }],
     flags: [],
-    scopes: ["journal:read"],
+    scopes: [...journalOperations.day.scopes],
     returns: "JournalSnapshot",
-    notes: "GET /api/v1/journal/days/{date} \u2014 your own days only. journal:read is a sensitive scope: a full-access (*) key doesn't hold it. `day` is null until a Journal day was written."
+    notes: `${routeOf(journalOperations.day)} \u2014 your own days only. journal:read is a sensitive scope: a full-access (*) key doesn't hold it. \`day\` is null until a Journal day was written.`
   },
   {
     path: ["journal", "days"],
@@ -36642,18 +37063,18 @@ var COMMAND_SPECS = [
         description: "The last day, YYYY-MM-DD (at most 366 days on)."
       }
     ],
-    scopes: ["journal:read"],
+    scopes: [...journalOperations.range.scopes],
     returns: "JournalDayList",
-    notes: "GET /api/v1/journal/days \u2014 lists only days with a Journal day or a Metric value. journal:read is a sensitive scope."
+    notes: `${routeOf(journalOperations.range)} \u2014 lists only days with a Journal day or a Metric value. journal:read is a sensitive scope.`
   },
   {
     path: ["journal", "search"],
     summary: "Your Journal days that mention some words, newest first.",
     args: [{ name: "words", required: true, description: "What to look for (2+ characters)." }],
     flags: [],
-    scopes: ["journal:read"],
+    scopes: [...journalOperations.search.scopes],
     returns: "JournalSearch",
-    notes: "GET /api/v1/journal/search?q= \u2014 your own days only, best match first (at most 30): the words (and a few that mean the same, English and Dutch) in the one-liner, tags, highlights, summary and entries; a date phrase (in March, last week, 14 October, 2026-02) narrows to its window; a heavy or bright question (rough, tired, a great day) adds the days rated 4 or less / 8 or more. `understood` says how it was read. journal:read is a sensitive scope."
+    notes: `${routeOf(journalOperations.search)}?q= \u2014 your own days only, best match first (at most 30): the words (and a few that mean the same, English and Dutch) in the one-liner, tags, highlights, summary and entries; a date phrase (in March, last week, 14 October, 2026-02) narrows to its window; a heavy or bright question (rough, tired, a great day) adds the days rated 4 or less / 8 or more. \`understood\` says how it was read. journal:read is a sensitive scope.`
   },
   {
     path: ["journal", "recall"],
@@ -36669,9 +37090,9 @@ var COMMAND_SPECS = [
       { name: "to", type: "string", description: "The window's last day, YYYY-MM-DD." },
       { name: "limit", type: "string", description: "At most this many days (1\u201330)." }
     ],
-    scopes: ["journal:read"],
+    scopes: [...journalOperations.recall.scopes],
     returns: "JournalRecall",
-    notes: "GET /api/v1/journal/recall (journal_recall) \u2014 your own days only, dated so an answer can cite them; another member's days never answer. --around can't be combined with --from/--to. journal:read is a sensitive scope."
+    notes: `${routeOf(journalOperations.recall)} (journal_recall) \u2014 your own days only, dated so an answer can cite them; another member's days never answer. --around can't be combined with --from/--to. journal:read is a sensitive scope.`
   },
   {
     path: ["journal", "like"],
@@ -36684,45 +37105,45 @@ var COMMAND_SPECS = [
         description: "At most this many days (1\u201310, 5 by default)."
       }
     ],
-    scopes: ["journal:read"],
+    scopes: [...journalOperations.like.scopes],
     returns: "JournalLike",
-    notes: "GET /api/v1/journal/days/{date}/like (journal_like) \u2014 your own days only, by Postgres full text over the one-liner, highlights, tags, summary and entries (the day's own words, with a few that mean the same), then shared tags and a close rating. Words, not meanings: no embeddings. A day hidden from memories is never offered. journal:read is a sensitive scope."
+    notes: `${routeOf(journalOperations.like)} (journal_like) \u2014 your own days only, by Postgres full text over the one-liner, highlights, tags, summary and entries (the day's own words, with a few that mean the same), then shared tags and a close rating. Words, not meanings: no embeddings. A day hidden from memories is never offered. journal:read is a sensitive scope.`
   },
   {
     path: ["journal", "digest"],
     summary: "The last 7 days of your Journal as a short digest: each day's line and rating, and the milestones a week either side.",
     args: [],
     flags: [],
-    scopes: ["journal:read"],
+    scopes: [...journalOperations.digest.scopes],
     returns: "JournalDigest",
-    notes: "GET /api/v1/journal/digest \u2014 `text` is the few plain lines an agent keeps in its private session. journal:read is a sensitive scope."
+    notes: `${routeOf(journalOperations.digest)} \u2014 \`text\` is the few plain lines an agent keeps in its private session. journal:read is a sensitive scope.`
   },
   {
     path: ["journal", "week"],
     summary: "One week of the Journal: its recap (prose, best moments, a pattern), its days, the usual rating and the numbers from Progress.",
     args: [{ name: "week", required: true, description: "The ISO week, e.g. 2026-W42." }],
     flags: [],
-    scopes: ["journal:read"],
+    scopes: [...journalOperations.week.scopes],
     returns: "JournalWeek",
-    notes: "GET /api/v1/journal/weeks/{week} \u2014 your own week only. `recap` is null until one was written. journal:read is a sensitive scope."
+    notes: `${routeOf(journalOperations.week)} \u2014 your own week only. \`recap\` is null until one was written. journal:read is a sensitive scope.`
   },
   {
     path: ["journal", "month"],
     summary: "One month of the Journal: its recap, its days, the usual rating, the numbers from Progress and the milestones that happened in it.",
     args: [{ name: "month", required: true, description: "The month, e.g. 2026-10." }],
     flags: [],
-    scopes: ["journal:read"],
+    scopes: [...journalOperations.month.scopes],
     returns: "JournalMonth",
-    notes: "GET /api/v1/journal/months/{month} \u2014 your own month only. `recap` is null until one was written; `usual` is the mean rating over the three months before. journal:read is a sensitive scope."
+    notes: `${routeOf(journalOperations.month)} \u2014 your own month only. \`recap\` is null until one was written; \`usual\` is the mean rating over the three months before. journal:read is a sensitive scope.`
   },
   {
     path: ["journal", "year"],
     summary: "One year of the Journal: its recap, its days (the rating pixels), each month's average and best day, the usual, the numbers and the year's milestones.",
     args: [{ name: "year", required: true, description: "The year, e.g. 2026." }],
     flags: [],
-    scopes: ["journal:read"],
+    scopes: [...journalOperations.year.scopes],
     returns: "JournalYear",
-    notes: "GET /api/v1/journal/years/{year} \u2014 your own year only. `recap` is null until one was written; `usual` is the mean rating of the year before. journal:read is a sensitive scope."
+    notes: `${routeOf(journalOperations.year)} \u2014 your own year only. \`recap\` is null until one was written; \`usual\` is the mean rating of the year before. journal:read is a sensitive scope.`
   },
   {
     path: ["journal", "recap"],
@@ -36742,9 +37163,9 @@ var COMMAND_SPECS = [
         description: 'The JournalWriteRecapInput as JSON, merged under --body: {"body":"\u2026","moments":[{"text":"\u2026","date":"2026-10-14","nodeId":"\u2026"}],"pattern":"\u2026"}.'
       }
     ],
-    scopes: ["journal:write"],
+    scopes: [...journalOperations.writeRecap.scopes],
     returns: "JournalWeek",
-    notes: "PUT /api/v1/journal/weeks/{week}/recap (journal_write_recap), /api/v1/journal/months/{month}/recap or /api/v1/journal/years/{year}/recap, by the period's shape. The body replaces the prose; moments and pattern replace theirs when given (pattern null clears it). Returns the period (a JournalWeek, JournalMonth or JournalYear)."
+    notes: `${routeOf(journalOperations.writeRecap)} (journal_write_recap), /api/v1/journal/months/{month}/recap or /api/v1/journal/years/{year}/recap, by the period's shape. The body replaces the prose; moments and pattern replace theirs when given (pattern null clears it). Returns the period (a JournalWeek, JournalMonth or JournalYear).`
   },
   {
     path: ["journal", "write"],
@@ -36760,9 +37181,9 @@ var COMMAND_SPECS = [
         description: 'The JournalWriteDayInput as JSON, merged under the flags: {"summary":"\u2026","highlights":[{"text":"\u2026","nodeId":"\u2026"}],"tags":["Home"],"links":[{"kind":"saw","nodeId":"\u2026"}],"metrics":{"rating":7,"mood":4}}.'
       }
     ],
-    scopes: ["journal:write"],
+    scopes: [...journalOperations.write.scopes],
     returns: "JournalSnapshot",
-    notes: "POST /api/v1/journal/days/{date} (journal_write_day). Makes the day when missing. Highlights replace; tags and links add. An agent's write shows in the member's change list with Undo."
+    notes: `${routeOf(journalOperations.write)} (journal_write_day). Makes the day when missing. Highlights replace; tags and links add. An agent's write shows in the member's change list with Undo.`
   },
   {
     path: ["journal", "add"],
@@ -36772,9 +37193,9 @@ var COMMAND_SPECS = [
       { name: "text", required: true, description: "The entry, markdown; the rest of the line." }
     ],
     flags: [{ name: "title", type: "string", description: "The entry's title." }],
-    scopes: ["journal:write"],
+    scopes: [...journalOperations.addEntry.scopes],
     returns: "JournalSnapshot",
-    notes: "POST /api/v1/journal/days/{date}/entries (journal_add_entry)."
+    notes: `${routeOf(journalOperations.addEntry)} (journal_add_entry).`
   },
   {
     path: ["journal", "correct"],
@@ -36787,9 +37208,9 @@ var COMMAND_SPECS = [
         description: 'The JournalCorrectInput as JSON: {"title":"\u2026","summary":null,"highlights":[\u2026],"tags":[\u2026],"removeLinks":["\u2026"],"metrics":{"rating":6},"status":"reviewed","hiddenFromMemories":true}.'
       }
     ],
-    scopes: ["journal:write"],
+    scopes: [...journalOperations.correct.scopes],
     returns: "JournalSnapshot",
-    notes: "PATCH /api/v1/journal/days/{date} (journal_correct). 404 when the date has no Journal day."
+    notes: `${routeOf(journalOperations.correct)} (journal_correct). 404 when the date has no Journal day.`
   },
   {
     path: ["journal", "import", "push"],
@@ -36809,27 +37230,27 @@ var COMMAND_SPECS = [
         description: "How the days name their folder (default memory/daily)."
       }
     ],
-    scopes: ["journal:write"],
+    scopes: [...journalOperations.stageImport.scopes],
     returns: "JournalImportUpload",
-    notes: "POST /api/v1/journal/imports, 400 days a request. The day's '## Day summary' becomes its entry; a clear 'n/10' rating is kept, '~5/10' or '3-4/10' becomes a question; health and automation lines never reach the text. Nothing is written into the Journal until the member approves the month (the app only; a key can't approve). Re-running replaces what's still waiting."
+    notes: `${routeOf(journalOperations.stageImport)}, 400 days a request. The day's '## Day summary' becomes its entry; a clear 'n/10' rating is kept, '~5/10' or '3-4/10' becomes a question; health and automation lines never reach the text. Nothing is written into the Journal until the member approves the month (the app only; a key can't approve). Re-running replaces what's still waiting.`
   },
   {
     path: ["journal", "import", "status"],
     summary: "What the backfill has staged: the files, what the parser found, each month's batch.",
     args: [],
     flags: [{ name: "batch", type: "string", description: "Show this month's days (YYYY-MM)." }],
-    scopes: ["journal:read"],
+    scopes: [...journalOperations.importOverview.scopes],
     returns: "JournalImportOverview",
-    notes: "GET /api/v1/journal/imports. journal:read is a sensitive scope."
+    notes: `${routeOf(journalOperations.importOverview)}. journal:read is a sensitive scope.`
   },
   {
     path: ["journal", "milestones"],
     summary: "Your life timeline: your milestones and the Space's shared ones, oldest first, with the suggestions.",
     args: [],
     flags: [],
-    scopes: ["journal:read"],
+    scopes: [...journalOperations.milestones.scopes],
     returns: "JournalMilestoneList",
-    notes: "GET /api/v1/journal/milestones. A milestone is Only me unless shared; `status: suggested` is an agent's mark you haven't kept yet. journal:read is a sensitive scope."
+    notes: `${routeOf(journalOperations.milestones)}. A milestone is Only me unless shared; \`status: suggested\` is an agent's mark you haven't kept yet. journal:read is a sensitive scope.`
   },
   {
     path: ["journal", "milestone", "add"],
@@ -36856,9 +37277,9 @@ var COMMAND_SPECS = [
         description: 'The JournalCreateMilestoneInput as JSON, merged under the flags: {"description":"\u2026","visibility":"space","links":["<node id>"],"remindYearly":true,"status":"kept"}.'
       }
     ],
-    scopes: ["journal:write"],
+    scopes: [...journalOperations.createMilestone.scopes],
     returns: "JournalMilestone",
-    notes: "POST /api/v1/journal/milestones (journal_mark_milestone). Only me unless visibility is space. links point it at what it's about (a Journal day, a paper, a project, a person); remindYearly adds a yearly Key date."
+    notes: `${routeOf(journalOperations.createMilestone)} (journal_mark_milestone). Only me unless visibility is space. links point it at what it's about (a Journal day, a paper, a project, a person); remindYearly adds a yearly Key date.`
   },
   {
     path: ["journal", "milestone", "edit"],
@@ -36872,9 +37293,9 @@ var COMMAND_SPECS = [
         description: 'The JournalUpdateMilestoneInput as JSON: {"title":"\u2026","happenedOn":"2026-10-14","planned":false,"addLinks":["<id>"],"removeLinks":["<id>"],"remindYearly":true}.'
       }
     ],
-    scopes: ["journal:write"],
+    scopes: [...journalOperations.updateMilestone.scopes],
     returns: "JournalMilestone",
-    notes: "PATCH /api/v1/journal/milestones/{id}."
+    notes: `${routeOf(journalOperations.updateMilestone)}.`
   },
   {
     path: ["journal", "milestone", "remove"],
@@ -36887,9 +37308,9 @@ var COMMAND_SPECS = [
         description: "Required to actually remove it."
       }
     ],
-    scopes: ["journal:write"],
+    scopes: [...journalOperations.removeMilestone.scopes],
     returns: "None",
-    notes: "DELETE /api/v1/journal/milestones/{id}. Goes to the trash like any node."
+    notes: `${routeOf(journalOperations.removeMilestone)}. Goes to the trash like any node.`
   },
   {
     path: ["journal", "export"],
@@ -36907,9 +37328,9 @@ var COMMAND_SPECS = [
         description: "Write the files under this directory instead of printing them."
       }
     ],
-    scopes: ["journal:export"],
+    scopes: [...journalOperations.export.scopes],
     returns: "JournalExport",
-    notes: "GET /api/v1/journal/export. Prints `nextSince`; pass it as --since next time. do is the record: the files are read-only copies and are overwritten."
+    notes: `${routeOf(journalOperations.export)}. Prints \`nextSince\`; pass it as --since next time. do is the record: the files are read-only copies and are overwritten.`
   },
   {
     path: ["progress", "commits"],
@@ -37893,9 +38314,9 @@ var COMMAND_SPECS = [
         description: "The rest of the create body (JSON), e.g. claimNo; overrides the flags."
       }
     ],
-    scopes: ["documents:write"],
+    scopes: [...incidentOperations.create.scopes],
     returns: "IncidentView",
-    notes: `POST /api/v1/incidents. A policy or Place that isn't a live one in the Space is a 400. Tick steps off with \`do incidents update <id> --data '{"steps":[{"id":"photos","done":true}]}'\`.`
+    notes: `${routeOf(incidentOperations.create)}. A policy or Place that isn't a live one in the Space is a 400. Tick steps off with \`do incidents update <id> --data '{"steps":[{"id":"photos","done":true}]}'\`.`
   },
   {
     path: ["notes", "backlinks"],
@@ -40486,7 +40907,7 @@ var COMMAND_SPECS = [
         description: "Which house in the file (0 = the first, the default)."
       }
     ],
-    scopes: ["places:write"],
+    scopes: [...placeOperations.importHouse.scopes],
     returns: "ImportPlacesResult",
     notes: "Each room becomes a Place; rooms already imported (even ones deleted since) are skipped, so do keeps what it owns. No sync with Gaard. Returns { created, skipped, places }."
   },
@@ -43348,6 +43769,11 @@ async function dispatchEntity(entity, rest, flags, requireClient) {
   }
   throw usageError(`unknown operation for ${entity.name}: \`${op ?? ""}\` (use ${entityOperations(entity).join(", ")})`);
 }
+var RECAP_OPERATION = {
+  week: journalOperations.writeRecap,
+  month: journalOperations.writeMonthRecap,
+  year: journalOperations.writeYearRecap
+};
 function runFixed(spec, ctx) {
   const key = spec.path.join(" ");
   const handler = HANDLERS[key];
@@ -43566,7 +43992,7 @@ var HANDLERS = {
       throw usageError("journal day needs a date as YYYY-MM-DD, e.g. `do journal day 2026-10-15`");
     }
     return {
-      data: await requireClient().get(`/journal/days/${date}`),
+      data: await requireClient().get(pathOf(journalOperations.day, { date })),
       render: renderJournalDay
     };
   },
@@ -43577,7 +44003,7 @@ var HANDLERS = {
       throw usageError("journal days needs --from and --to as YYYY-MM-DD");
     }
     return {
-      data: await requireClient().get("/journal/days", { query: { from, to } }),
+      data: await requireClient().get(pathOf(journalOperations.range), { query: { from, to } }),
       render: renderJournalDays
     };
   },
@@ -43586,7 +44012,7 @@ var HANDLERS = {
     if (q.length < 2)
       throw usageError("journal search needs the words to look for");
     return {
-      data: await requireClient().get("/journal/search", { query: { q } }),
+      data: await requireClient().get(pathOf(journalOperations.search), { query: { q } }),
       render: renderJournalSearch
     };
   },
@@ -43603,7 +44029,7 @@ var HANDLERS = {
     };
     parseInput(journalRecallQuerySchema, Object.fromEntries(Object.entries(query).filter(([, v]) => v !== undefined)));
     return {
-      data: await requireClient().get("/journal/recall", { query }),
+      data: await requireClient().get(pathOf(journalOperations.recall), { query }),
       render: renderJournalRecall
     };
   },
@@ -43615,18 +44041,20 @@ var HANDLERS = {
     const limit = flagString(flags, "limit");
     parseInput(journalLikeQuerySchema, limit === undefined ? {} : { limit });
     return {
-      data: await requireClient().get(`/journal/days/${date}/like`, { query: { limit } }),
+      data: await requireClient().get(pathOf(journalOperations.like, { date }), {
+        query: { limit }
+      }),
       render: renderJournalLike
     };
   },
   "journal digest": async ({ requireClient }) => ({
-    data: await requireClient().get("/journal/digest"),
+    data: await requireClient().get(pathOf(journalOperations.digest)),
     render: renderJournalDigest
   }),
   "journal week": async ({ args, requireClient }) => {
     const week = journalWeekArg(args, "week");
     return {
-      data: await requireClient().get(`/journal/weeks/${week}`),
+      data: await requireClient().get(pathOf(journalOperations.week, { week })),
       render: renderJournalPeriod
     };
   },
@@ -43636,7 +44064,7 @@ var HANDLERS = {
       throw usageError("journal month needs a month as YYYY-MM, e.g. `do journal month 2026-10`");
     }
     return {
-      data: await requireClient().get(`/journal/months/${month}`),
+      data: await requireClient().get(pathOf(journalOperations.month, { month })),
       render: renderJournalPeriod
     };
   },
@@ -43646,7 +44074,7 @@ var HANDLERS = {
       throw usageError("journal year needs a year as YYYY, e.g. `do journal year 2026`");
     }
     return {
-      data: await requireClient().get(`/journal/years/${year}`),
+      data: await requireClient().get(pathOf(journalOperations.year, { year })),
       render: renderJournalPeriod
     };
   },
@@ -43662,7 +44090,7 @@ var HANDLERS = {
       body.body = text;
     const input = parseInput(journalWriteRecapInputSchema, body);
     return {
-      data: await requireClient().put(`/journal/${kind}s/${period}/recap`, input),
+      data: await requireClient().put(pathOf(RECAP_OPERATION[kind], { [kind]: period }), input),
       render: renderJournalPeriod
     };
   },
@@ -43687,7 +44115,7 @@ var HANDLERS = {
     }
     const input = parseInput(journalWriteDayInputSchema, body);
     return {
-      data: await requireClient().post(`/journal/days/${date}`, input),
+      data: await requireClient().post(pathOf(journalOperations.write, { date }), input),
       render: renderJournalDay
     };
   },
@@ -43702,7 +44130,7 @@ var HANDLERS = {
       ...title !== undefined ? { title } : {}
     });
     return {
-      data: await requireClient().post(`/journal/days/${date}/entries`, input),
+      data: await requireClient().post(pathOf(journalOperations.addEntry, { date }), input),
       render: renderJournalDay
     };
   },
@@ -43712,7 +44140,7 @@ var HANDLERS = {
       throw usageError("journal correct needs --data");
     const input = parseInput(journalCorrectInputSchema, readDataFlag(flags));
     return {
-      data: await requireClient().patch(`/journal/days/${date}`, input),
+      data: await requireClient().patch(pathOf(journalOperations.correct, { date }), input),
       render: renderJournalDay
     };
   },
@@ -43730,7 +44158,7 @@ var HANDLERS = {
       const input = parseInput(journalImportUploadInputSchema, {
         items: items.slice(i, i + JOURNAL_IMPORT_MAX_ITEMS)
       });
-      const res = await requireClient().post("/journal/imports", input);
+      const res = await requireClient().post(pathOf(journalOperations.stageImport), input);
       staged += res.staged;
       alreadyImported += res.alreadyImported;
     }
@@ -43742,12 +44170,14 @@ var HANDLERS = {
   "journal import status": async ({ flags, requireClient }) => {
     const batch = flagString(flags, "batch");
     return {
-      data: await requireClient().get("/journal/imports", { query: batch ? { batch } : {} }),
+      data: await requireClient().get(pathOf(journalOperations.importOverview), {
+        query: batch ? { batch } : {}
+      }),
       render: renderJournalImportStatus
     };
   },
   "journal milestones": async ({ requireClient }) => ({
-    data: await requireClient().get("/journal/milestones"),
+    data: await requireClient().get(pathOf(journalOperations.milestones)),
     render: renderJournalMilestones
   }),
   "journal milestone add": async ({ args, flags, requireClient }) => {
@@ -43768,7 +44198,7 @@ var HANDLERS = {
       body.planned = true;
     const input = parseInput(journalCreateMilestoneInputSchema, body);
     return {
-      data: await requireClient().post("/journal/milestones", input),
+      data: await requireClient().post(pathOf(journalOperations.createMilestone), input),
       render: renderJournalMilestone
     };
   },
@@ -43779,20 +44209,20 @@ var HANDLERS = {
       body.status = "kept";
     const input = parseInput(journalUpdateMilestoneInputSchema, body);
     return {
-      data: await requireClient().patch(`/journal/milestones/${id}`, input),
+      data: await requireClient().patch(pathOf(journalOperations.updateMilestone, { id }), input),
       render: renderJournalMilestone
     };
   },
   "journal milestone remove": async ({ args, flags, requireClient }) => {
     const id = requireArg(args, 0, "milestone id");
     assertDestructiveAllowed(flags, `remove milestone ${id}`);
-    await requireClient().delete(`/journal/milestones/${id}`);
+    await requireClient().delete(pathOf(journalOperations.removeMilestone, { id }));
     return { data: { ok: true, removed: id }, render: renderRecord };
   },
   "journal export": async ({ flags, requireClient }) => {
     const since = flagString(flags, "since");
     const out = flagString(flags, "out");
-    const data = await requireClient().get("/journal/export", {
+    const data = await requireClient().get(pathOf(journalOperations.export), {
       query: { since }
     });
     if (out !== undefined) {
@@ -43861,13 +44291,16 @@ var HANDLERS = {
     }
     const client = requireClient();
     if (flagBool(flags, "dry-run")) {
-      const before = await client.get(`/notes/${id}`);
+      const before = await client.get(pathOf(noteOperations.get, { id }));
       return {
         data: { dryRun: true, op: "update", entity: "notes", id, before, changes: body },
         render: renderRecord
       };
     }
-    return { data: await client.patch(`/notes/${id}`, body), render: renderRecord };
+    return {
+      data: await client.patch(pathOf(noteOperations.update, { id }), body),
+      render: renderRecord
+    };
   },
   "notes detach": async ({ args, flags, requireClient }) => {
     const node = requireArg(args, 0, "node id");
@@ -44198,7 +44631,10 @@ var HANDLERS = {
       ...fromFlags,
       ...readDataFlag(flags)
     });
-    return { data: await requireClient().post("/incidents", body), render: renderRecord };
+    return {
+      data: await requireClient().post(pathOf(incidentOperations.create), body),
+      render: renderRecord
+    };
   },
   "food log": async ({ flags, requireClient }) => {
     if (flagString(flags, "data") === undefined)
@@ -46387,7 +46823,7 @@ var HANDLERS = {
       file,
       ...house !== undefined ? { houseIndex: Number(house) } : {}
     });
-    const result = importPlacesResultSchema.parse(await requireClient().post("/places/import", body));
+    const result = importPlacesResultSchema.parse(await requireClient().post(pathOf(placeOperations.importHouse), body));
     return { data: result, render: renderRecord };
   },
   "people note": async ({ flags, requireClient }) => {
@@ -46494,13 +46930,16 @@ var HANDLERS = {
         render: renderRecord
       };
     }
-    return { data: await requireClient().post("/contacts", body), render: renderRecord };
+    return {
+      data: await requireClient().post(pathOf(contactOperations.create), body),
+      render: renderRecord
+    };
   },
   "contacts update": async ({ args, flags, requireClient }) => {
     const id = requireArg(args, 0, "contact id");
     const client = requireClient();
     const dryRun = flagBool(flags, "dry-run");
-    const before = dryRun || MERGING_FLAGS.some((f) => flags[f] !== undefined) ? await client.get(`/contacts/${id}`) : undefined;
+    const before = dryRun || MERGING_FLAGS.some((f) => flags[f] !== undefined) ? await client.get(pathOf(contactOperations.get, { id })) : undefined;
     const body = parseInput(updateContactInputSchema, contactBodyFromFlags(flags, readDataFlag(flags), "update", before));
     if (Object.keys(body).length === 0)
       throw usageError("nothing to change \u2014 pass a flag such as --email, or --data");
@@ -46518,7 +46957,10 @@ var HANDLERS = {
         render: renderRecord
       };
     }
-    return { data: await client.patch(`/contacts/${id}`, body), render: renderRecord };
+    return {
+      data: await client.patch(pathOf(contactOperations.update, { id }), body),
+      render: renderRecord
+    };
   },
   "people tree": async ({ flags, requireClient }) => {
     const side = flagString(flags, "side");