things-api 0.17.0 → 0.18.0

package/dist/deputy/osa.d.ts

@@ -0,0 +1,21 @@
+export type OsaLang = "applescript" | "javascript";
+export interface OsaExecResult {
+    exitCode: number;
+    stdout: string;
+    stderr: string;
+    timedOut?: boolean;
+}
+/** Async osascript for vector dispatch and ui steps (never blocks the event loop). */
+export declare function osaExec(script: string, options: {
+    lang?: OsaLang;
+    timeoutMs: number;
+}): Promise<OsaExecResult>;
+/**
+ * Sync osascript for the consent probes. Returns stdout on success; throws an
+ * execFileSync-SHAPED error otherwise (status/stderr/killed/signal), so the
+ * probes' TCC classification regexes (-1743 denied, -1712/kill pending) read
+ * identically on both paths. In deputy mode the classification is answered
+ * about the DEPUTY's grants — exactly the right question, since it is the
+ * deputy that will send every AppleEvent.
+ */
+export declare function osaExecSync(script: string, timeoutMs: number): string;

package/dist/deputy/osa.js

@@ -0,0 +1,72 @@
+/**
+ * The single osascript execution seam. Every osascript the library runs —
+ * vector dispatch, ui steps, consent probes — flows through one of these two
+ * functions, which route to the deputy when it is active and run direct
+ * (execFile/execFileSync, byte-identical to the pre-deputy behavior)
+ * otherwise. `open`-based primitives (URL scheme, reveal) are consent-free by
+ * design and never route.
+ */
+import { execFile, execFileSync } from "node:child_process";
+import {} from "./protocol.js";
+import { deputyAsyncRequest, deputyRouting, deputySyncRequest } from "./routing.js";
+/** Deputy-side kill fires at timeoutMs; the client deadline adds grace so the deputy's honest answer wins. */
+const CLIENT_GRACE_MS = 5000;
+function osaArgs(script, lang) {
+    return lang === "javascript" ? ["-l", "JavaScript", "-e", script] : ["-e", script];
+}
+function fromDeputy(res) {
+    const r = res;
+    return {
+        exitCode: r.timedOut === true || r.signal !== undefined
+            ? r.exitCode === 0
+                ? 1
+                : r.exitCode
+            : r.exitCode,
+        stdout: r.stdout,
+        stderr: r.stderr,
+        ...(r.timedOut === true && { timedOut: true }),
+    };
+}
+/** Async osascript for vector dispatch and ui steps (never blocks the event loop). */
+export async function osaExec(script, options) {
+    const lang = options.lang ?? "applescript";
+    if (deputyRouting().active) {
+        const res = await deputyAsyncRequest({ verb: "osascript", script, lang, timeoutMs: options.timeoutMs }, options.timeoutMs + CLIENT_GRACE_MS);
+        return fromDeputy(res);
+    }
+    return new Promise((resolve) => {
+        execFile("osascript", osaArgs(script, lang), { timeout: options.timeoutMs }, (err, stdout, stderr) => {
+            const timedOut = err !== null && err.killed === true;
+            resolve({
+                exitCode: err === null ? 0 : (err.code ?? 1),
+                stdout: String(stdout),
+                stderr: String(stderr),
+                ...(timedOut && { timedOut: true }),
+            });
+        });
+    });
+}
+/**
+ * Sync osascript for the consent probes. Returns stdout on success; throws an
+ * execFileSync-SHAPED error otherwise (status/stderr/killed/signal), so the
+ * probes' TCC classification regexes (-1743 denied, -1712/kill pending) read
+ * identically on both paths. In deputy mode the classification is answered
+ * about the DEPUTY's grants — exactly the right question, since it is the
+ * deputy that will send every AppleEvent.
+ */
+export function osaExecSync(script, timeoutMs) {
+    if (!deputyRouting().active) {
+        return execFileSync("osascript", ["-e", script], { encoding: "utf8", timeout: timeoutMs });
+    }
+    const res = deputySyncRequest({ verb: "osascript", script, lang: "applescript", timeoutMs }, timeoutMs + CLIENT_GRACE_MS);
+    if (res.exitCode === 0 && res.timedOut !== true && res.signal === undefined)
+        return res.stdout;
+    const error = new Error(`Command failed: osascript\n${res.stderr}`);
+    error.status = res.timedOut === true ? null : res.exitCode;
+    error.stdout = res.stdout;
+    error.stderr = res.stderr;
+    error.killed = res.timedOut === true;
+    error.signal = res.timedOut === true || res.signal !== undefined ? "SIGTERM" : null;
+    throw error;
+}
+//# sourceMappingURL=osa.js.map

package/dist/deputy/osa.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"osa.js","sourceRoot":"","sources":["../../src/deputy/osa.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAE5D,OAAO,EAAwB,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAWpF,8GAA8G;AAC9G,MAAM,eAAe,GAAG,IAAI,CAAC;AAE7B,SAAS,OAAO,CAAC,MAAc,EAAE,IAAa;IAC5C,OAAO,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AACrF,CAAC;AAED,SAAS,UAAU,CAAC,GAA4B;IAC9C,MAAM,CAAC,GAAG,GAAiC,CAAC;IAC5C,OAAO;QACL,QAAQ,EACN,CAAC,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS;YAC3C,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,CAAC;gBAChB,CAAC,CAAC,CAAC;gBACH,CAAC,CAAC,CAAC,CAAC,QAAQ;YACd,CAAC,CAAC,CAAC,CAAC,QAAQ;QAChB,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,GAAG,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;KAC/C,CAAC;AACJ,CAAC;AAED,sFAAsF;AACtF,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,MAAc,EACd,OAA8C;IAE9C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,aAAa,CAAC;IAC3C,IAAI,aAAa,EAAE,CAAC,MAAM,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,MAAM,kBAAkB,CAClC,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,EACjE,OAAO,CAAC,SAAS,GAAG,eAAe,CACpC,CAAC;QACF,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,QAAQ,CACN,WAAW,EACX,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,EACrB,EAAE,OAAO,EAAE,OAAO,CAAC,SAAS,EAAE,EAC9B,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;YACtB,MAAM,QAAQ,GAAG,GAAG,KAAK,IAAI,IAAK,GAA4B,CAAC,MAAM,KAAK,IAAI,CAAC;YAC/E,OAAO,CAAC;gBACN,QAAQ,EAAE,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,GAAyB,CAAC,IAAI,IAAI,CAAC,CAAC;gBACnE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;gBACtB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;gBACtB,GAAG,CAAC,QAAQ,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;aACpC,CAAC,CAAC;QACL,CAAC,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,WAAW,CAAC,MAAc,EAAE,SAAiB;IAC3D,IAAI,CAAC,aAAa,EAAE,CAAC,MAAM,EAAE,CAAC;QAC5B,OAAO,YAAY,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;IAC7F,CAAC;IACD,MAAM,GAAG,GAAG,iBAAiB,CAC3B,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,EAC7D,SAAS,GAAG,eAAe,CACE,CAAC;IAChC,IAAI,GAAG,CAAC,QAAQ,KAAK,CAAC,IAAI,GAAG,CAAC,QAAQ,KAAK,IAAI,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,GAAG,CAAC,MAAM,CAAC;IAC/F,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,8BAA8B,GAAG,CAAC,MAAM,EAAE,CAMjE,CAAC;IACF,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;IAC3D,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;IAC1B,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;IAC1B,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,QAAQ,KAAK,IAAI,CAAC;IACrC,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,QAAQ,KAAK,IAAI,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;IACpF,MAAM,KAAK,CAAC;AACd,CAAC"}

package/dist/deputy/protocol.d.ts

@@ -0,0 +1,86 @@
+export declare const DEPUTY_PROTOCOL_VERSION = 1;
+/**
+ * The helpers version this package expects — the helpers are versioned on
+ * their OWN line (deputy/VERSION), decoupled from the package version, so a
+ * package release whose helper sources are unchanged never nags for (or
+ * forces) a reinstall of a byte-equivalent bundle. Bump deputy/VERSION with
+ * any helper-source change; a drift test asserts this constant matches it.
+ * The PROTOCOL version above remains the hard compatibility gate.
+ */
+export declare const EXPECTED_HELPERS_VERSION = "1.1.0";
+/** The outer helper bundle's identifier (Things API Helper.app) — TCC + BTM identity. */
+export declare const HELPERS_BUNDLE_ID = "com.pixelcog.things-api-helper";
+/** launchd label (and signing identifier) of the broker. */
+export declare const DEPUTY_LAUNCHD_LABEL = "com.pixelcog.things-deputy";
+/**
+ * The deputy derives its own state dir from the same THINGS_API_STATE_DIR /
+ * XDG_STATE_HOME precedence as the library (deputy/src/main.swift mirrors
+ * this), so pointing both sides at one env is all a test needs.
+ */
+export declare function deputyStateDir(env?: NodeJS.ProcessEnv): string;
+export declare function deputySocketPath(env?: NodeJS.ProcessEnv): string;
+export declare function deputyTokenPath(env?: NodeJS.ProcessEnv): string;
+/**
+ * The directory `helpers install` owns WHOLESALE: it is deleted and recreated
+ * on every install, so any previous layout (however old) is erased without
+ * dedicated migration logic, and the fresh inodes reset the kernel's
+ * per-vnode code-signature cache (copying over an executed inode makes every
+ * future exec die with SIGKILL — observed live 2026-08-21).
+ */
+export declare function helpersInstallDir(env?: NodeJS.ProcessEnv): string;
+/** Where `helpers install` places the bundle. */
+export declare function helpersInstalledBundlePath(env?: NodeJS.ProcessEnv): string;
+/** The installed deputy executable (the bundle's main executable). */
+export declare function deputyInstalledBinaryPath(env?: NodeJS.ProcessEnv): string;
+/** The installed nested reader app. */
+export declare function readerInstalledAppPath(env?: NodeJS.ProcessEnv): string;
+/** launchd label (and bundle identifier) of the sandboxed reader. */
+export declare const READER_LAUNCHD_LABEL = "com.pixelcog.things-reader";
+/**
+ * The reader's state lives in its App Sandbox container home — the OS picks
+ * the path from the bundle identifier. THINGS_API_READER_DIR overrides for
+ * tests (a mock reader is just a socket; no sandbox involved).
+ */
+export declare function readerContainerDir(env?: NodeJS.ProcessEnv): string;
+export declare function readerSocketPath(env?: NodeJS.ProcessEnv): string;
+export declare function readerTokenPath(env?: NodeJS.ProcessEnv): string;
+/** Reader handshake: DeputyHello plus the grant state. */
+export interface ReaderHello extends DeputyHello {
+    role: "reader";
+    /** False until the one-time open-panel ceremony has granted the folder. */
+    granted: boolean;
+}
+export interface DeputyErrorShape {
+    code: string;
+    message: string;
+}
+/** A protocol-level failure (the deputy answered `ok:false`, or never answered). */
+export declare class DeputyRequestError extends Error {
+    readonly code: string;
+    constructor(code: string, message: string);
+}
+export interface DeputyHello {
+    protocol: number;
+    deputyVersion: string;
+    pid: number;
+    /** Reader only: its cached container-db resolution (absent on the deputy). */
+    dbPath?: string | null;
+    uptimeMs: number;
+}
+/**
+ * osascript outcome as the deputy reports it. `ok:true` at the protocol level
+ * means "the deputy ran osascript" — a failing script is exitCode ≠ 0 here,
+ * exactly as execFile would report it, so vector-side classification logic
+ * reads the same signals on both paths.
+ */
+export interface DeputyOsaResult {
+    exitCode: number;
+    stdout: string;
+    stderr: string;
+    timedOut?: boolean;
+    /** Present when osascript died to a signal (number, e.g. 15 for SIGTERM). */
+    signal?: number;
+}
+export type DeputyRow = Record<string, unknown>;
+/** BLOB columns cross the wire as `{ "$b64": <base64> }`; revive to Uint8Array. */
+export declare function reviveRow(row: DeputyRow): DeputyRow;

package/dist/deputy/protocol.js

@@ -0,0 +1,106 @@
+/**
+ * things-deputy wire protocol: shared constants, request/response shapes, and
+ * path resolution for the broker's socket, token, and state directory.
+ *
+ * The helpers (deputy/src, deputy/reader) are deliberately dumb privileged
+ * proxies — the deputy runs fixed-shape osascript/shortcuts (mutations), the
+ * sandboxed reader serves read-only SQL and scoped file reads — so that macOS
+ * permission grants attach to their stable signed identities instead of
+ * whichever agent harness invokes the CLI. All product logic stays here in the
+ * library; the protocol therefore carries raw primitives, never operations.
+ * See docs/design/agent-daemon.md (§β1, §3b).
+ */
+import { homedir } from "node:os";
+import { join } from "node:path";
+import { stateDir } from "../paths.js";
+export const DEPUTY_PROTOCOL_VERSION = 1;
+/**
+ * The helpers version this package expects — the helpers are versioned on
+ * their OWN line (deputy/VERSION), decoupled from the package version, so a
+ * package release whose helper sources are unchanged never nags for (or
+ * forces) a reinstall of a byte-equivalent bundle. Bump deputy/VERSION with
+ * any helper-source change; a drift test asserts this constant matches it.
+ * The PROTOCOL version above remains the hard compatibility gate.
+ */
+export const EXPECTED_HELPERS_VERSION = "1.1.0";
+/** The outer helper bundle's identifier (Things API Helper.app) — TCC + BTM identity. */
+export const HELPERS_BUNDLE_ID = "com.pixelcog.things-api-helper";
+/** launchd label (and signing identifier) of the broker. */
+export const DEPUTY_LAUNCHD_LABEL = "com.pixelcog.things-deputy";
+/**
+ * The deputy derives its own state dir from the same THINGS_API_STATE_DIR /
+ * XDG_STATE_HOME precedence as the library (deputy/src/main.swift mirrors
+ * this), so pointing both sides at one env is all a test needs.
+ */
+export function deputyStateDir(env = process.env) {
+    return join(stateDir(env), "deputy");
+}
+export function deputySocketPath(env = process.env) {
+    return join(deputyStateDir(env), "deputy.sock");
+}
+export function deputyTokenPath(env = process.env) {
+    return join(deputyStateDir(env), "token");
+}
+/**
+ * The directory `helpers install` owns WHOLESALE: it is deleted and recreated
+ * on every install, so any previous layout (however old) is erased without
+ * dedicated migration logic, and the fresh inodes reset the kernel's
+ * per-vnode code-signature cache (copying over an executed inode makes every
+ * future exec die with SIGKILL — observed live 2026-08-21).
+ */
+export function helpersInstallDir(env = process.env) {
+    return join(deputyStateDir(env), "bin");
+}
+/** Where `helpers install` places the bundle. */
+export function helpersInstalledBundlePath(env = process.env) {
+    return join(helpersInstallDir(env), "Things API Helper.app");
+}
+/** The installed deputy executable (the bundle's main executable). */
+export function deputyInstalledBinaryPath(env = process.env) {
+    return join(helpersInstalledBundlePath(env), "Contents/MacOS/things-deputy");
+}
+/** The installed nested reader app. */
+export function readerInstalledAppPath(env = process.env) {
+    return join(helpersInstalledBundlePath(env), "Contents/Helpers/things-reader.app");
+}
+/** launchd label (and bundle identifier) of the sandboxed reader. */
+export const READER_LAUNCHD_LABEL = "com.pixelcog.things-reader";
+/**
+ * The reader's state lives in its App Sandbox container home — the OS picks
+ * the path from the bundle identifier. THINGS_API_READER_DIR overrides for
+ * tests (a mock reader is just a socket; no sandbox involved).
+ */
+export function readerContainerDir(env = process.env) {
+    const explicit = env["THINGS_API_READER_DIR"];
+    if (explicit !== undefined && explicit !== "")
+        return explicit;
+    return join(homedir(), "Library/Containers", READER_LAUNCHD_LABEL, "Data");
+}
+export function readerSocketPath(env = process.env) {
+    return join(readerContainerDir(env), "reader.sock");
+}
+export function readerTokenPath(env = process.env) {
+    return join(readerContainerDir(env), "token");
+}
+/** A protocol-level failure (the deputy answered `ok:false`, or never answered). */
+export class DeputyRequestError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.name = "DeputyRequestError";
+        this.code = code;
+    }
+}
+/** BLOB columns cross the wire as `{ "$b64": <base64> }`; revive to Uint8Array. */
+export function reviveRow(row) {
+    for (const [key, value] of Object.entries(row)) {
+        if (value !== null &&
+            typeof value === "object" &&
+            "$b64" in value &&
+            typeof value.$b64 === "string") {
+            row[key] = new Uint8Array(Buffer.from(value.$b64, "base64"));
+        }
+    }
+    return row;
+}
+//# sourceMappingURL=protocol.js.map

package/dist/deputy/protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.js","sourceRoot":"","sources":["../../src/deputy/protocol.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEvC,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC;AAEzC;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,OAAO,CAAC;AAEhD,yFAAyF;AACzF,MAAM,CAAC,MAAM,iBAAiB,GAAG,gCAAgC,CAAC;AAElE,4DAA4D;AAC5D,MAAM,CAAC,MAAM,oBAAoB,GAAG,4BAA4B,CAAC;AAEjE;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,MAAyB,OAAO,CAAC,GAAG;IACjE,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACnE,OAAO,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,aAAa,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAAyB,OAAO,CAAC,GAAG;IAClE,OAAO,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC;AAC5C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACpE,OAAO,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;AAC1C,CAAC;AAED,iDAAiD;AACjD,MAAM,UAAU,0BAA0B,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC7E,OAAO,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAE,uBAAuB,CAAC,CAAC;AAC/D,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,yBAAyB,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC5E,OAAO,IAAI,CAAC,0BAA0B,CAAC,GAAG,CAAC,EAAE,8BAA8B,CAAC,CAAC;AAC/E,CAAC;AAED,uCAAuC;AACvC,MAAM,UAAU,sBAAsB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACzE,OAAO,IAAI,CAAC,0BAA0B,CAAC,GAAG,CAAC,EAAE,oCAAoC,CAAC,CAAC;AACrF,CAAC;AAED,qEAAqE;AACrE,MAAM,CAAC,MAAM,oBAAoB,GAAG,4BAA4B,CAAC;AAEjE;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACrE,MAAM,QAAQ,GAAG,GAAG,CAAC,uBAAuB,CAAC,CAAC;IAC9C,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,EAAE;QAAE,OAAO,QAAQ,CAAC;IAC/D,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,CAAC,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACnE,OAAO,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,EAAE,aAAa,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAAyB,OAAO,CAAC,GAAG;IAClE,OAAO,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC;AAChD,CAAC;AAcD,oFAAoF;AACpF,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAClC,IAAI,CAAS;IACtB,YAAY,IAAY,EAAE,OAAe;QACvC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;QACjC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AA4BD,mFAAmF;AACnF,MAAM,UAAU,SAAS,CAAC,GAAc;IACtC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,IACE,KAAK,KAAK,IAAI;YACd,OAAO,KAAK,KAAK,QAAQ;YACzB,MAAM,IAAI,KAAK;YACf,OAAQ,KAA2B,CAAC,IAAI,KAAK,QAAQ,EACrD,CAAC;YACD,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAE,KAA0B,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/deputy/routing.d.ts

@@ -0,0 +1,63 @@
+import { type HelpersMode } from "../config.ts";
+import { type DeputyHello, type ReaderHello } from "./protocol.ts";
+export interface DeputyRouting {
+    /** True when requests are actually flowing to the deputy. */
+    readonly active: boolean;
+    /** Why routing is inactive ("disabled", or the activation failure). */
+    readonly reason: string | null;
+    /** Handshake result when active. */
+    readonly hello: DeputyHello | null;
+}
+/** Test seam: forget the per-process activation memo (and close transports). */
+export declare function resetDeputyRoutingForTests(): void;
+/** The per-process routing decision (activated lazily on first ask). */
+export declare function deputyRouting(env?: NodeJS.ProcessEnv): DeputyRouting;
+/** The reader transport's state (activated lazily; test seam via reset). */
+export declare function readerRouting(env?: NodeJS.ProcessEnv): {
+    active: boolean;
+    granted: boolean;
+    hello: ReaderHello | null;
+    reason: string | null;
+};
+/**
+ * What routing actually RESOLVED to in this process: the configured mode plus
+ * whether each half is carrying traffic. Activates both halves (memoized), so
+ * it reports the same decision every other call in this process sees — doctor's
+ * helpers section reads it rather than re-deriving one.
+ */
+export interface HelpersRouting {
+    mode: HelpersMode;
+    /** Automation verbs (osascript/shortcuts) ride the deputy. */
+    automation: boolean;
+    /** File verbs (sql/read-file/locate) ride the granted reader. */
+    files: boolean;
+    /** Why automation is not routed (null when it is). */
+    deputyReason: string | null;
+    /** Why file verbs are not routed (null when they are). */
+    readerReason: string | null;
+}
+export declare function helpersRouting(env?: NodeJS.ProcessEnv): HelpersRouting;
+/** True when file verbs ride the reader (present, protocol-matched, granted). */
+export declare function deputyFilesActive(env?: NodeJS.ProcessEnv): boolean;
+/** Blocking FILE-verb round-trip via the granted reader. */
+export declare function fileSyncRequest(fields: Record<string, unknown>, timeoutMs: number, env?: NodeJS.ProcessEnv): Record<string, unknown>;
+/** Blocking round-trip via the bridge (facade + sync probes only). */
+export declare function deputySyncRequest(fields: Record<string, unknown>, timeoutMs: number, env?: NodeJS.ProcessEnv): Record<string, unknown>;
+/** Event-loop-friendly round-trip (vector dispatch). */
+export declare function deputyAsyncRequest(fields: Record<string, unknown>, timeoutMs: number, env?: NodeJS.ProcessEnv): Promise<Record<string, unknown>>;
+/**
+ * The reader-resolved container database path, or null when no granted reader
+ * is active (the caller then locates locally, exactly as before the helpers
+ * existed). The reader's scope is grant-checked, never prompted — a locate
+ * through it can refuse but can never stall on a consent dialog.
+ */
+export declare function deputyDbPath(env?: NodeJS.ProcessEnv): string | null;
+/**
+ * Should DATABASE access route through the deputy? Only for the default
+ * container database: an explicit dbPath option or THINGS_DB env names a
+ * caller-chosen file (lab clones, fixtures) the deputy knows nothing about —
+ * those always open locally, deputy or no deputy.
+ */
+export declare function deputyRoutesDb(options: {
+    dbPath?: string;
+} | undefined, env?: NodeJS.ProcessEnv): boolean;