things-api 0.17.0 → 0.19.0

package/dist/host-access.js

@@ -0,0 +1,165 @@
+/**
+ * Host identity and the Full Disk Access probe
+ * (docs/design/permissions-doctrine.md, Articles I and III).
+ *
+ * This module is deliberately dependency-light — it imports nothing that could
+ * import it back — so the routing layer, the capability verdict, and the
+ * helpers ceremonies can all consult the same prompt-free facts.
+ *
+ * Its facts serve DIRECT mode: whether this host app holds Full Disk Access,
+ * and what to call it in copy. The helpers path needs none of them — since
+ * helpers 1.3.0 the reader's rendezvous is a launchd-owned socket plus an
+ * installer-minted token in `<state>/reader`, ordinary files this process owns,
+ * so reaching the reader crosses no container boundary and raises no consent
+ * class from any host.
+ */
+import { execFileSync } from "node:child_process";
+import { closeSync, openSync, readFileSync, existsSync as realExistsSync } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+import {} from "./session-grant.js";
+/** The user TCC database. Readable iff the calling process holds Full Disk Access. */
+const TCC_DB_RELATIVE = "Library/Application Support/com.apple.TCC/TCC.db";
+// ── Host identity ────────────────────────────────────────────────────────────
+/**
+ * Terminals and agent harnesses whose display name we can state without asking
+ * LaunchServices. Only an exec-free shortcut: an unlisted host still resolves,
+ * it just pays one `lsappinfo` call on a copy path.
+ */
+const KNOWN_HOSTS = {
+    "com.apple.Terminal": "Terminal",
+    "com.googlecode.iterm2": "iTerm2",
+    "com.mitchellh.ghostty": "Ghostty",
+    "dev.warp.Warp-Stable": "Warp",
+    "net.kovidgoyal.kitty": "kitty",
+    "io.alacritty": "Alacritty",
+    "com.microsoft.VSCode": "Visual Studio Code",
+    "com.anthropic.claude-code": "Claude Code",
+    "com.anthropic.claudefordesktop": "Claude",
+};
+/** TERM_PROGRAM values, for hosts that set it but expose no bundle id. */
+const TERM_PROGRAM_NAMES = {
+    Apple_Terminal: "Terminal",
+    iTerm: "iTerm2",
+    "iTerm.app": "iTerm2",
+    ghostty: "Ghostty",
+    WarpTerminal: "Warp",
+    vscode: "Visual Studio Code",
+    Hyper: "Hyper",
+    WezTerm: "WezTerm",
+};
+/** The fallback used everywhere a host cannot be named — never a guess. */
+const ANONYMOUS_HOST = "this terminal";
+let hostNameMemo = null;
+function lookupAppNameDefault(bundleId) {
+    try {
+        // LaunchServices knows the display name of every RUNNING app, which the
+        // host terminal always is. Quoted-value output: "LSDisplayName"="Ghostty".
+        const out = execFileSync("lsappinfo", ["info", "-only", "name", bundleId], {
+            encoding: "utf8",
+            timeout: 3000,
+            stdio: ["ignore", "pipe", "ignore"],
+        });
+        const match = /"LSDisplayName"\s*=\s*"([^"]+)"/.exec(out);
+        return match?.[1] ?? null;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * The host app, resolved from the environment alone — no subprocess, so this is
+ * safe on the hot path. `__CFBundleIdentifier` is set by macOS when a process
+ * descends from an app bundle, which is how a terminal's shell (and everything
+ * it spawns) carries its emulator's identity.
+ */
+export function hostApp(deps = {}) {
+    const env = deps.env ?? process.env;
+    const bundleId = env["__CFBundleIdentifier"] ?? null;
+    const termProgram = env["TERM_PROGRAM"] ?? "";
+    const name = (bundleId !== null ? KNOWN_HOSTS[bundleId] : undefined) ??
+        TERM_PROGRAM_NAMES[termProgram] ??
+        ANONYMOUS_HOST;
+    return { bundleId, name };
+}
+/**
+ * The host app's display name for COPY. Identical to {@link hostApp}'s name
+ * except for an unlisted bundle id, where LaunchServices is asked once per
+ * process. Only call this from a path that is about to print.
+ */
+export function hostDisplayName(deps = {}) {
+    if (hostNameMemo !== null)
+        return hostNameMemo;
+    const host = hostApp(deps);
+    if (host.name !== ANONYMOUS_HOST || host.bundleId === null) {
+        hostNameMemo = host.name;
+        return hostNameMemo;
+    }
+    hostNameMemo = (deps.lookupAppName ?? lookupAppNameDefault)(host.bundleId) ?? ANONYMOUS_HOST;
+    return hostNameMemo;
+}
+/** Test seam: forget the one memo this module keeps (the host's display name). */
+export function resetHostAccessForTests() {
+    hostNameMemo = null;
+}
+// ── The Full Disk Access probe ───────────────────────────────────────────────
+/** Where the FDA probe reads. Exported so `doctor` and the ceremony can name it. */
+export function tccDbPath(env = process.env) {
+    return join(env["HOME"] ?? homedir(), TCC_DB_RELATIVE);
+}
+function fdaProbeDefault(env) {
+    // ONE open(2), read-only, immediately closed. This file is FDA-class: macOS
+    // answers it with a plain EPERM rather than a dialog, which is precisely why
+    // the doctrine picks it as the probe (Article III). Deliberately NOT cached:
+    // read capability is ground truth per invocation.
+    const fd = openSync(tccDbPath(env), "r");
+    closeSync(fd);
+}
+/**
+ * Does the host app hold Full Disk Access? Prompt-free by construction. An
+ * EPERM (or the sandbox's EACCES) is the ordinary "no"; any other errno is
+ * reported as itself rather than folded into a false negative.
+ */
+export function fdaGranted(deps = {}) {
+    const env = deps.env ?? process.env;
+    try {
+        (deps.fdaProbe ?? (() => fdaProbeDefault(env)))();
+        return { granted: true, code: null };
+    }
+    catch (err) {
+        return { granted: false, code: err.code ?? null };
+    }
+}
+// ── EPERM-safe rendezvous reads ──────────────────────────────────────────────
+//
+// The rendezvous is ours now, so these are ordinary reads of ordinary files.
+// The belt stays on anyway: a `stat`/`open` that ends in EPERM (a stray chmod,
+// a filesystem that answers oddly) is a STATE to report, never a crash out of
+// a routing probe, and never a second attempt.
+/**
+ * `existsSync` for a rendezvous path. It already swallows errno, but it is
+ * wrapped anyway so no future refactor can turn a denial into a throw, and so
+ * every rendezvous touch reads the same at the call site.
+ */
+export function rendezvousExists(path) {
+    try {
+        return realExistsSync(path);
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Read the reader's access token. Returns null instead of throwing when the
+ * read fails (ENOENT before the first install; EPERM if something outside our
+ * flows re-permissioned the file).
+ */
+export function readRendezvousToken(path) {
+    try {
+        return readFileSync(path, "utf8").trim();
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=host-access.js.map

package/dist/host-access.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-access.js","sourceRoot":"","sources":["../src/host-access.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,UAAU,IAAI,cAAc,EAAE,MAAM,SAAS,CAAC;AAC1F,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAyB,MAAM,oBAAoB,CAAC;AAE3D,sFAAsF;AACtF,MAAM,eAAe,GAAG,kDAAkD,CAAC;AA0B3E,gFAAgF;AAEhF;;;;GAIG;AACH,MAAM,WAAW,GAAqC;IACpD,oBAAoB,EAAE,UAAU;IAChC,uBAAuB,EAAE,QAAQ;IACjC,uBAAuB,EAAE,SAAS;IAClC,sBAAsB,EAAE,MAAM;IAC9B,sBAAsB,EAAE,OAAO;IAC/B,cAAc,EAAE,WAAW;IAC3B,sBAAsB,EAAE,oBAAoB;IAC5C,2BAA2B,EAAE,aAAa;IAC1C,gCAAgC,EAAE,QAAQ;CAC3C,CAAC;AAEF,0EAA0E;AAC1E,MAAM,kBAAkB,GAAqC;IAC3D,cAAc,EAAE,UAAU;IAC1B,KAAK,EAAE,QAAQ;IACf,WAAW,EAAE,QAAQ;IACrB,OAAO,EAAE,SAAS;IAClB,YAAY,EAAE,MAAM;IACpB,MAAM,EAAE,oBAAoB;IAC5B,KAAK,EAAE,OAAO;IACd,OAAO,EAAE,SAAS;CACnB,CAAC;AAEF,2EAA2E;AAC3E,MAAM,cAAc,GAAG,eAAe,CAAC;AAEvC,IAAI,YAAY,GAAkB,IAAI,CAAC;AAEvC,SAAS,oBAAoB,CAAC,QAAgB;IAC5C,IAAI,CAAC;QACH,wEAAwE;QACxE,2EAA2E;QAC3E,MAAM,GAAG,GAAG,YAAY,CAAC,WAAW,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE;YACzE,QAAQ,EAAE,MAAM;YAChB,OAAO,EAAE,IAAI;YACb,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SACpC,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,iCAAiC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC1D,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,OAAO,CAAC,OAAuB,EAAE;IAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACpC,MAAM,QAAQ,GAAG,GAAG,CAAC,sBAAsB,CAAC,IAAI,IAAI,CAAC;IACrD,MAAM,WAAW,GAAG,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;IAC9C,MAAM,IAAI,GACR,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACvD,kBAAkB,CAAC,WAAW,CAAC;QAC/B,cAAc,CAAC;IACjB,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;AAC5B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,OAAuB,EAAE;IACvD,IAAI,YAAY,KAAK,IAAI;QAAE,OAAO,YAAY,CAAC;IAC/C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,IAAI,CAAC,IAAI,KAAK,cAAc,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;QAC3D,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC;QACzB,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,YAAY,GAAG,CAAC,IAAI,CAAC,aAAa,IAAI,oBAAoB,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,cAAc,CAAC;IAC7F,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,uBAAuB;IACrC,YAAY,GAAG,IAAI,CAAC;AACtB,CAAC;AAED,gFAAgF;AAEhF,oFAAoF;AACpF,MAAM,UAAU,SAAS,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC5D,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,OAAO,EAAE,EAAE,eAAe,CAAC,CAAC;AACzD,CAAC;AAQD,SAAS,eAAe,CAAC,GAAsB;IAC7C,4EAA4E;IAC5E,6EAA6E;IAC7E,6EAA6E;IAC7E,kDAAkD;IAClD,MAAM,EAAE,GAAG,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;IACzC,SAAS,CAAC,EAAE,CAAC,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,OAAuB,EAAE;IAClD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACpC,IAAI,CAAC;QACH,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACvC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAG,GAA6B,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC;IAC/E,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,EAAE;AACF,6EAA6E;AAC7E,+EAA+E;AAC/E,8EAA8E;AAC9E,+CAA+C;AAE/C;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,IAAI,CAAC;QACH,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/index.d.ts

@@ -11,6 +11,8 @@ export type { Truncation, GroupBlock } from "./contracts.ts";
 export type { TodayBucketTotals, AreaBucketTotals, SectionTotals, UpcomingBlockTotals, } from "./read/truncation.ts";
 export { diagnose } from "./diagnose.ts";
 export type { DiagnoseOptions, DiagnoseReport, DiagnoseResult } from "./diagnose.ts";
+export { opResult } from "./op-result.ts";
+export type { OpResultData, OpResultOptions, OpResultStatus } from "./op-result.ts";
 export { probeAutomation } from "./write/automation-probe.ts";
 export type { AutomationProbeDeps, AutomationProbeResult, AutomationProbeStatus, } from "./write/automation-probe.ts";
 export { createEnvironmentTracker, describeEnvironmentChanges, diffEnvironment, } from "./write/environment.ts";
@@ -18,17 +20,21 @@ export type { EnvironmentChange, EnvironmentTracker, EnvironmentTuple, } from ".
 export type { FailureHint, LikelyCause } from "./write/failure-hints.ts";
 export { capabilitiesTable } from "./write/capabilities.ts";
 export type { CapabilityEntry } from "./write/capabilities.ts";
-export { describeConfig, getConfigKey, saveConfigKey } from "./config.ts";
+export { assertOperationParams, ParamSchemaError, PARAM_SCHEMAS, paramSummary, validateOperationParams, } from "./write/param-schema.ts";
+export type { FieldKind, FieldSpec, ParamSummary } from "./write/param-schema.ts";
+export { describeConfig, getConfigKey, loadConfig, saveConfigKey } from "./config.ts";
 export type { ConfigKeyView } from "./config.ts";
 export type { UndoItemResult, UndoOptions, UndoPlan, UndoStep } from "./write/undo.ts";
 export type { BatchItemResult, BatchOp, BatchOptions, BatchResult } from "./write/batch.ts";
 export type { ReorderResult } from "./write/reorder.ts";
 export type { MoveResult, MoveOk, MoveRefused, MoveLegFailed, MoveDryRun, MovePosition, PlacementClass, ProjectMoveDestination, ProjectMoveRequest, ReorderRequest, TodoMoveDestination, TodoMoveRequest, } from "./write/move.ts";
-export type { SearchOptions, SomedayFilter, UpcomingFilter, ViewFilter, ChangedItem, DeadlinesFilter, } from "./read/views.ts";
+export type { SearchOptions, SomedayFilter, UpcomingFilter, ViewFilter, ChangedItem, DeadlinesFilter, RepeatersFilter, } from "./read/views.ts";
 export { FILTER_CONTRACT, hasTagPresence, tagFlagConflict, tagFilterFields, validateViewArgs, } from "./read/filter-contract.ts";
 export type { BoundModel, FilterArgs, FilterVocab, TagPresence, TagSemantics, ViewFilterSpec, ViewName, ViewValidation, } from "./read/filter-contract.ts";
-export type { Acknowledgements, AreaAddParams, ContainerRef, HeadingPlacement, MoveHeadingParams, OperationKind, OperationParamsMap, ProjectAddParams, ProjectCompleteParams, ProjectMoveParams, ProjectUpdateParams, ReorderParams, ReorderScope, ReorderStrategy, TagAddParams, TagUpdateParams, AreaUpdateParams, TodoAddParams, TodoMoveParams, TodoUpdateParams, WhenValue, } from "./write/operations.ts";
+export type { Acknowledgements, AreaAddParams, ContainerRef, HeadingPlacement, MoveHeadingParams, OperationKind, OperationParamsMap, ProjectAddParams, ProjectCompleteParams, ProjectMoveParams, ProjectUpdateParams, ReorderParams, ReorderScope, ReorderStrategy, TagAddParams, TagUpdateParams, AreaUpdateParams, TodoAddParams, TodoMoveParams, TodoUpdateParams, UpdateFields, WhenValue, } from "./write/operations.ts";
 export { OPERATION_KINDS } from "./write/operations.ts";
+export { buildUpdatePatch, CLI_UPDATE_LABELS, MCP_UPDATE_LABELS } from "./write/update-fields.ts";
+export type { UpdateInput, UpdateLabels, UpdatePatch, UpdatePatchResult, } from "./write/update-fields.ts";
 export type { MutationPlan, MutationResult, WriteOptions } from "./write/pipeline.ts";
 export type { HazardId } from "./write/guards.ts";
 export { HAZARD_IDS } from "./write/guards.ts";
@@ -36,9 +42,10 @@ export type { CompiledInvocation, VectorId, VectorMatrix, VectorSupport, WriteVe
 export { APPLESCRIPT_MATRIX } from "./write/vectors/applescript.ts";
 export { URL_SCHEME_MATRIX } from "./write/vectors/url-scheme.ts";
 export { dbCarriesBenchMarker, simFenceActive } from "./write/vectors/simulator.ts";
-export type { DeltaSpec, FieldAssertion, RepeatingDiscovery } from "./write/verify/delta.ts";
+export type { DeltaSpec, FieldAssertion, OccurrenceResolution, RepeatingDiscovery, } from "./write/verify/delta.ts";
 export type { AuditRecord } from "./audit/schema.ts";
-export type { DisruptionTier, Profile, ThingsApiConfig } from "./config.ts";
+export type { DisruptionTier, HelpersMode, Profile, ThingsApiConfig } from "./config.ts";
+export { HELPERS_MODES, parseHelpersMode } from "./config.ts";
 export type { AnyTask, Area, ChecklistItem, DerivedSubstrate, Heading, IsoDateGroup, Project, Ref, RepeatContext, RepeatingInfo, StartState, Tag, TaskStatus, TaskType, Todo, } from "./model/entities.ts";
 export type { IsoDate } from "./model/dates.ts";
 export { calendarDateInZone, dayBoundInstant, hostTimeZone, isValidTimeZone, } from "./model/dates.ts";
@@ -62,6 +69,15 @@ export { splitWhenSugar, CLI_WHEN_LABELS, MCP_WHEN_LABELS } from "./model/when-s
 export type { WhenSugar, WhenSugarLabels } from "./model/when-sugar.ts";
 export { ThingsDbNotFoundError } from "./db/locate.ts";
 export { ThingsDbOpenError } from "./db/connection.ts";
+export { deputyPlistPath, deputySigningInfo, grantReader, helpersBundleCandidates, helpersDefaultBuildPath, helpersStatus, installedHelpersVersion, installHelpers, onboardHelpers, readerPlistPath, restartHelpers, uninstallHelpers, } from "./deputy/install.ts";
+export type { DeputyHalfStatus, DeputySigning, HelpersInstallResult, HelpersOnboardResult, HelpersRevocation, HelpersStatus, HelpersUninstallDeps, HelpersUninstallOptions, HelpersUninstallResult, OnboardChannel, OnboardDeps, OnboardLeg, OnboardOptions, OnboardState, OnboardStep, OnboardTier, ReaderHalfStatus, } from "./deputy/install.ts";
+export { deputyInstalledBinaryPath, EXPECTED_HELPERS_VERSION, helpersInstallDir, helpersInstalledBundlePath, readerInstalledAppPath, } from "./deputy/protocol.ts";
+export type { AutomationPermission, DeputyAutomationStatus, DeputyHello, } from "./deputy/protocol.ts";
+export { deputyRouting, helpersRouting, readerRouting } from "./deputy/routing.ts";
+export type { DeputyRouting, HelpersRouting } from "./deputy/routing.ts";
+export { emitHelpersNotice } from "./deputy/notice.ts";
+export { computeHelpersNotice, HELPERS_HINT_INTERVAL_DAYS, lastHelpersHintAt, markHelpersHintShown, } from "./deputy/notices.ts";
+export type { HelpersNotice, HelpersNoticeKind } from "./deputy/notices.ts";
 export type { Baseline, FingerprintStatus, SchemaObservation } from "./db/fingerprint.ts";
 export { aggregateExitCode, API_VERSION, blockedCode, errorEnvelope, ExitCode, mutationWireData, okEnvelope, PKG_VERSION, verifyFailedCode, } from "./contracts.ts";
 export type { Envelope, EnvelopeMeta, ErrorCode, ErrorEnvelope, OkEnvelope, WireData, WireEnvelope, WireOkEnvelope, WireOkKind, } from "./contracts.ts";
@@ -72,6 +88,7 @@ export { makeRefPromoter, titleRoundTrips } from "./read/queries.ts";
 export { fusedRef, REF_PREFIX_LEN } from "./read/queries.ts";
 export { instantDateIso, localToday } from "./model/dates.ts";
 export { templateStatus } from "./model/recurrence.ts";
+export type { RepeatOffset, RepeatRule } from "./model/recurrence.ts";
 export { isTodayMember } from "./read/views.ts";
 export { entityProvisional, entityStage, entityWhen } from "./read/stage.ts";
 export type { When } from "./read/stage.ts";
@@ -89,6 +106,15 @@ export { BOUNCE_MAX_ITEMS } from "./write/reorder.ts";
 export type { AddRepeatingRuleFields, MonthlyAnchor, ProjectAddRepeatingParams, RepeatEnds, RepeatFrequency, RepeatRuleParams, TodoAddRepeatingParams, Weekday, WeekdayOrdinal, YearlyAnchor, } from "./write/operations.ts";
 export { shortcutProxies } from "./diagnose.ts";
 export type { ShortcutsState } from "./write/availability.ts";
+export { fdaGranted, hostApp, hostDisplayName, readAllowed, readCapability, ReadCapabilityError, resetCapabilityForTests, tccDbPath, uiAllowed, uiCapability, UiCapabilityError, UI_DIRECT_ESCAPE_ENV, writeAllowed, writeCapability, WriteCapabilityError, THINGS_BUNDLE_ID, } from "./capability.ts";
+export type { Capability, CapabilityDeps, FdaVerdict, HostApp, ReadCapability, ReadCapabilityMode, UiCapability, UiCapabilityMode, WriteCapability, WriteCapabilityMode, } from "./capability.ts";
+export type { HostAccessDeps } from "./host-access.ts";
+export { clearSessionGrant, sessionGrantPath, sessionGrantValid, witnessSessionGrant, } from "./session-grant.ts";
+export type { SessionGrantDeps, SessionGrantMarker, SessionGrantVerdict } from "./session-grant.ts";
+export { directSetup, surveySetup } from "./direct-setup.ts";
+export { CeremonyStopped, createWizard, withDefaultInterrupts } from "./wizard.ts";
+export type { Wizard, WizardDeps } from "./wizard.ts";
+export type { DirectSetupDeps, DirectSetupResult, SetupLeg, SetupState, SetupStep, SetupSurvey, } from "./direct-setup.ts";
 export { closeCliTrace, getInflight, installCliTrace, resolveTraceEnabled, sanitizeArgv, trace, traceActive, tracePath, } from "./trace/tracer.ts";
 export type { InflightWrite, TraceEvent, TraceSink } from "./trace/tracer.ts";
 export { traceDir } from "./paths.ts";

package/dist/index.js

@@ -7,19 +7,28 @@
  */
 export { openThings } from "./client.js";
 export { diagnose } from "./diagnose.js";
+export { opResult } from "./op-result.js";
 export { probeAutomation } from "./write/automation-probe.js";
 export { createEnvironmentTracker, describeEnvironmentChanges, diffEnvironment, } from "./write/environment.js";
 export { capabilitiesTable } from "./write/capabilities.js";
-export { describeConfig, getConfigKey, saveConfigKey } from "./config.js";
+// The per-operation PARAMETER schema (#580): the one structural contract every
+// untyped entry point is held to. Exported so the consumer surfaces (CLI, MCP)
+// reach it through this barrel rather than importing a write internal.
+export { assertOperationParams, ParamSchemaError, PARAM_SCHEMAS, paramSummary, validateOperationParams, } from "./write/param-schema.js";
+export { describeConfig, getConfigKey, loadConfig, saveConfigKey } from "./config.js";
 // The per-view read-filter contract: the declarative applicability table plus
 // the shared tag-conflict predicates both surfaces enforce. See
 // docs/design/architecture.md (Consumer boundary).
 export { FILTER_CONTRACT, hasTagPresence, tagFlagConflict, tagFilterFields, validateViewArgs, } from "./read/filter-contract.js";
 export { OPERATION_KINDS } from "./write/operations.js";
+// The update vocabulary's one registry: consumer surfaces build their patch with
+// this instead of hand-listing the fields (the #491 exhaustive-map doctrine).
+export { buildUpdatePatch, CLI_UPDATE_LABELS, MCP_UPDATE_LABELS } from "./write/update-fields.js";
 export { HAZARD_IDS } from "./write/guards.js";
 export { APPLESCRIPT_MATRIX } from "./write/vectors/applescript.js";
 export { URL_SCHEME_MATRIX } from "./write/vectors/url-scheme.js";
 export { dbCarriesBenchMarker, simFenceActive } from "./write/vectors/simulator.js";
+export { HELPERS_MODES, parseHelpersMode } from "./config.js";
 export { calendarDateInZone, dayBoundInstant, hostTimeZone, isValidTimeZone, } from "./model/dates.js";
 export { resolveClock, clockMeta, ClockError } from "./model/clock.js";
 export { isActiveProjectRow, isScheduledProjectRow, isSomedayProjectRow, } from "./read/area-view.js";
@@ -43,6 +52,13 @@ export { ScopeResolutionError } from "./read/scope.js";
 export { splitWhenSugar, CLI_WHEN_LABELS, MCP_WHEN_LABELS } from "./model/when-sugar.js";
 export { ThingsDbNotFoundError } from "./db/locate.js";
 export { ThingsDbOpenError } from "./db/connection.js";
+// The helper pair (docs/design/agent-daemon.md §β1): lifecycle + routing
+// state for the CLI `things helpers` command group and doctor.
+export { deputyPlistPath, deputySigningInfo, grantReader, helpersBundleCandidates, helpersDefaultBuildPath, helpersStatus, installedHelpersVersion, installHelpers, onboardHelpers, readerPlistPath, restartHelpers, uninstallHelpers, } from "./deputy/install.js";
+export { deputyInstalledBinaryPath, EXPECTED_HELPERS_VERSION, helpersInstallDir, helpersInstalledBundlePath, readerInstalledAppPath, } from "./deputy/protocol.js";
+export { deputyRouting, helpersRouting, readerRouting } from "./deputy/routing.js";
+export { emitHelpersNotice } from "./deputy/notice.js";
+export { computeHelpersNotice, HELPERS_HINT_INTERVAL_DAYS, lastHelpersHintAt, markHelpersHintShown, } from "./deputy/notices.js";
 export { aggregateExitCode, API_VERSION, blockedCode, errorEnvelope, ExitCode, mutationWireData, okEnvelope, PKG_VERSION, verifyFailedCode, } from "./contracts.js";
 // ---------------------------------------------------------------------------
 // Consumer-surface support: everything below is exported so the CLI and MCP
@@ -76,6 +92,12 @@ export { BOUNCE_MAX_ITEMS } from "./write/reorder.js";
 // Shortcut-proxy availability: a proper library accessor (setup consumes it
 // without opening a database). See shortcutProxies in diagnose.ts.
 export { shortcutProxies } from "./diagnose.js";
+// Prompt-free capability detection and the direct-path ceremony
+// (docs/design/permissions-doctrine.md).
+export { fdaGranted, hostApp, hostDisplayName, readAllowed, readCapability, ReadCapabilityError, resetCapabilityForTests, tccDbPath, uiAllowed, uiCapability, UiCapabilityError, UI_DIRECT_ESCAPE_ENV, writeAllowed, writeCapability, WriteCapabilityError, THINGS_BUNDLE_ID, } from "./capability.js";
+export { clearSessionGrant, sessionGrantPath, sessionGrantValid, witnessSessionGrant, } from "./session-grant.js";
+export { directSetup, surveySetup } from "./direct-setup.js";
+export { CeremonyStopped, createWizard, withDefaultInterrupts } from "./wizard.js";
 // Dev-mode step-timeline trace (TRACE1, #487): the CLI write driver installs a
 // file sink (isDevVersion / config-forced) and the signal handler reads the
 // in-flight-write marker to emit an honest "interrupted, outcome uncertain"

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAmBzC,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAM9D,OAAO,EACL,wBAAwB,EACxB,0BAA0B,EAC1B,eAAe,GAChB,MAAM,wBAAwB,CAAC;AAOhC,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAE5D,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AA4B1E,8EAA8E;AAC9E,gEAAgE;AAChE,mDAAmD;AACnD,OAAO,EACL,eAAe,EACf,cAAc,EACd,eAAe,EACf,eAAe,EACf,gBAAgB,GACjB,MAAM,2BAA2B,CAAC;AAmCnC,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAGxD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAQ/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAuBpF,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,YAAY,EACZ,eAAe,GAChB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AASvE,OAAO,EACL,kBAAkB,EAClB,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAE9D,iFAAiF;AACjF,yEAAyE;AACzE,OAAO,EACL,UAAU,EACV,iBAAiB,EACjB,kBAAkB,EAClB,SAAS,EACT,qBAAqB,GACtB,MAAM,uBAAuB,CAAC;AAM/B,gFAAgF;AAChF,+EAA+E;AAC/E,uEAAuE;AACvE,OAAO,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,gFAAgF;AAChF,4EAA4E;AAC5E,oDAAoD;AACpD,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAG9D,iFAAiF;AACjF,wEAAwE;AACxE,kCAAkC;AAClC,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAGvD,kEAAkE;AAClE,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAGzF,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAGvD,OAAO,EACL,iBAAiB,EACjB,WAAW,EACX,WAAW,EACX,aAAa,EACb,QAAQ,EACR,gBAAgB,EAChB,UAAU,EACV,WAAW,EACX,gBAAgB,GACjB,MAAM,gBAAgB,CAAC;AAaxB,8EAA8E;AAC9E,4EAA4E;AAC5E,4EAA4E;AAC5E,2EAA2E;AAC3E,8EAA8E;AAE9E,2EAA2E;AAC3E,cAAc,mBAAmB,CAAC;AAElC,yDAAyD;AACzD,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EACL,gBAAgB,EAChB,qBAAqB,EACrB,oBAAoB,EACpB,iBAAiB,EACjB,uBAAuB,GACxB,MAAM,iBAAiB,CAAC;AACzB,iFAAiF;AACjF,2EAA2E;AAC3E,4DAA4D;AAC5D,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACrE,+EAA+E;AAC/E,8EAA8E;AAC9E,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,4EAA4E;AAC5E,+EAA+E;AAC/E,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAG7E,OAAO,EAAE,uBAAuB,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAEjF,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAMnF,0DAA0D;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AActD,4EAA4E;AAC5E,mEAAmE;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAGhD,+EAA+E;AAC/E,4EAA4E;AAC5E,4EAA4E;AAC5E,iFAAiF;AACjF,mEAAmE;AACnE,OAAO,EACL,aAAa,EACb,WAAW,EACX,eAAe,EACf,mBAAmB,EACnB,YAAY,EACZ,KAAK,EACL,WAAW,EACX,SAAS,GACV,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAWtC,MAAM,UAAU,aAAa;IAC3B,OAAO,MAAM,CAAC,iBAAiB,CAAC,CAAC;AACnC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAmBzC,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE1C,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAM9D,OAAO,EACL,wBAAwB,EACxB,0BAA0B,EAC1B,eAAe,GAChB,MAAM,wBAAwB,CAAC;AAOhC,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAE5D,+EAA+E;AAC/E,+EAA+E;AAC/E,uEAAuE;AACvE,OAAO,EACL,qBAAqB,EACrB,gBAAgB,EAChB,aAAa,EACb,YAAY,EACZ,uBAAuB,GACxB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AA6BtF,8EAA8E;AAC9E,gEAAgE;AAChE,mDAAmD;AACnD,OAAO,EACL,eAAe,EACf,cAAc,EACd,eAAe,EACf,eAAe,EACf,gBAAgB,GACjB,MAAM,2BAA2B,CAAC;AAoCnC,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,iFAAiF;AACjF,8EAA8E;AAC9E,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AASlG,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAQ/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AASpF,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAoB9D,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,YAAY,EACZ,eAAe,GAChB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AASvE,OAAO,EACL,kBAAkB,EAClB,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAE9D,iFAAiF;AACjF,yEAAyE;AACzE,OAAO,EACL,UAAU,EACV,iBAAiB,EACjB,kBAAkB,EAClB,SAAS,EACT,qBAAqB,GACtB,MAAM,uBAAuB,CAAC;AAM/B,gFAAgF;AAChF,+EAA+E;AAC/E,uEAAuE;AACvE,OAAO,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,gFAAgF;AAChF,4EAA4E;AAC5E,oDAAoD;AACpD,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAG9D,iFAAiF;AACjF,wEAAwE;AACxE,kCAAkC;AAClC,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAGvD,kEAAkE;AAClE,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAGzF,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAEvD,yEAAyE;AACzE,+DAA+D;AAC/D,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,WAAW,EACX,uBAAuB,EACvB,uBAAuB,EACvB,aAAa,EACb,uBAAuB,EACvB,cAAc,EACd,cAAc,EACd,eAAe,EACf,cAAc,EACd,gBAAgB,GACjB,MAAM,qBAAqB,CAAC;AAoB7B,OAAO,EACL,yBAAyB,EACzB,wBAAwB,EACxB,iBAAiB,EACjB,0BAA0B,EAC1B,sBAAsB,GACvB,MAAM,sBAAsB,CAAC;AAM9B,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEnF,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EACL,oBAAoB,EACpB,0BAA0B,EAC1B,iBAAiB,EACjB,oBAAoB,GACrB,MAAM,qBAAqB,CAAC;AAI7B,OAAO,EACL,iBAAiB,EACjB,WAAW,EACX,WAAW,EACX,aAAa,EACb,QAAQ,EACR,gBAAgB,EAChB,UAAU,EACV,WAAW,EACX,gBAAgB,GACjB,MAAM,gBAAgB,CAAC;AAaxB,8EAA8E;AAC9E,4EAA4E;AAC5E,4EAA4E;AAC5E,2EAA2E;AAC3E,8EAA8E;AAE9E,2EAA2E;AAC3E,cAAc,mBAAmB,CAAC;AAElC,yDAAyD;AACzD,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EACL,gBAAgB,EAChB,qBAAqB,EACrB,oBAAoB,EACpB,iBAAiB,EACjB,uBAAuB,GACxB,MAAM,iBAAiB,CAAC;AACzB,iFAAiF;AACjF,2EAA2E;AAC3E,4DAA4D;AAC5D,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACrE,+EAA+E;AAC/E,8EAA8E;AAC9E,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAIvD,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,4EAA4E;AAC5E,+EAA+E;AAC/E,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAG7E,OAAO,EAAE,uBAAuB,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAEjF,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAMnF,0DAA0D;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AActD,4EAA4E;AAC5E,mEAAmE;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAGhD,gEAAgE;AAChE,yCAAyC;AACzC,OAAO,EACL,UAAU,EACV,OAAO,EACP,eAAe,EACf,WAAW,EACX,cAAc,EACd,mBAAmB,EACnB,uBAAuB,EACvB,SAAS,EACT,SAAS,EACT,YAAY,EACZ,iBAAiB,EACjB,oBAAoB,EACpB,YAAY,EACZ,eAAe,EACf,oBAAoB,EACpB,gBAAgB,GACjB,MAAM,iBAAiB,CAAC;AAczB,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAWnF,+EAA+E;AAC/E,4EAA4E;AAC5E,4EAA4E;AAC5E,iFAAiF;AACjF,mEAAmE;AACnE,OAAO,EACL,aAAa,EACb,WAAW,EACX,eAAe,EACf,mBAAmB,EACnB,YAAY,EACZ,KAAK,EACL,WAAW,EACX,SAAS,GACV,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAWtC,MAAM,UAAU,aAAa;IAC3B,OAAO,MAAM,CAAC,iBAAiB,CAAC,CAAC;AACnC,CAAC"}

package/dist/mcp/server.d.ts

@@ -1,5 +1,5 @@
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
-import { type DisruptionTier, type OpenOptions } from "../index.ts";
+import { type ReadCapability, type UiCapability, type WriteCapability, type DisruptionTier, type OpenOptions } from "../index.ts";
 export interface McpServerOptions {
     dbPath?: string;
     /**
@@ -21,5 +21,31 @@ export interface McpServerOptions {
     scope?: string;
     /** Test seam: forwarded to openThings (fake vectors, pinned clock, env). */
     openOptions?: OpenOptions;
+    /**
+     * Test seam: the startup capability survey (docs/design/permissions-doctrine.md,
+     * Article II). Real servers run the prompt-free survey once at startup; tests
+     * substitute a fixed verdict so a cell's outcome never depends on the
+     * developer's own macOS grants.
+     */
+    capability?: BakedCapability;
+    /** Where the one startup warning line goes. Default: stderr. */
+    onStartupWarning?: (line: string) => void;
+}
+/**
+ * What this server may do, decided ONCE before the first tool call
+ * (docs/design/permissions-doctrine.md, Article II).
+ *
+ * A daemon is exactly the wrong place to discover a missing grant: nobody is
+ * watching its stderr, a per-call re-survey would let capability change under
+ * an agent mid-conversation, and the grants a daemon holds are its LAUNCHER's,
+ * fixed for the process's whole life — a `things setup` run afterwards changes
+ * nothing until the daemon is restarted. So the verdict is baked: stated in the
+ * server instructions, enforced immediately on tools whose vector class is
+ * absent, and remediated with "kill the server, run setup, restart it".
+ */
+export interface BakedCapability {
+    read: ReadCapability;
+    write: WriteCapability;
+    ui: UiCapability;
 }
 export declare function createThingsMcpServer(options?: McpServerOptions): McpServer;