things-api 0.19.0 → 0.19.2

package/dist/diagnose.d.ts

@@ -1,11 +1,11 @@
 import { type HelpersMode } from "./config.ts";
 import { type HelpersStatus } from "./deputy/install.ts";
 import { type HelpersRouting } from "./deputy/routing.ts";
-import { type ReadCapability, type UiCapability, type WriteCapability } from "./capability.ts";
+import { type CapabilityDeps, type ReadCapability, type UiCapability, type UrlSchemeCapability, type WriteCapability } from "./capability.ts";
 import { type AutomationProbeDeps, type AutomationProbeStatus } from "./write/automation-probe.ts";
 import { type AccessibilityProbeDeps, type AccessibilityProbeStatus } from "./write/accessibility-probe.ts";
 import { type CertificationStatus } from "./write/vectors/ui-certification.ts";
-import { type AvailabilityDeps, type ShortcutsState, type UrlSchemeState } from "./write/availability.ts";
+import { type AvailabilityDeps, type ShortcutsState } from "./write/availability.ts";
 import { type EnvironmentChange, type EnvironmentTracker, type EnvironmentTuple } from "./write/environment.ts";
 import { type SyncHealth, type SyncHealthDeps } from "./sync-health.ts";
 import { ExitCode, type EnvelopeMeta, type ErrorCode } from "./contracts.ts";
@@ -142,8 +142,8 @@ export interface DiagnoseReport {
         reason: string;
     };
     availability: {
-        /** On-disk 'Enable Things URLs' state (group-container plist; Phase 21b). */
-        urlScheme: UrlSchemeState;
+        /** Things' own 'Enable Things URLs' authorization (capability.ts; URLEN1). */
+        urlScheme: UrlSchemeCapability;
         /** Which proxy shortcuts are installed (the Shortcuts surface's prerequisites). */
         shortcuts: ShortcutsState;
     };
@@ -205,6 +205,8 @@ export interface DiagnoseOptions {
     accessibilityProbeDeps?: AccessibilityProbeDeps;
     environment?: EnvironmentTracker;
     availability?: AvailabilityDeps;
+    /** Test seams for the prompt-free capability verdicts (capability.ts). */
+    capability?: CapabilityDeps;
     /** Test seams for the sync-health section (clock, process check, WAL/plist readers). */
     syncHealth?: SyncHealthDeps;
     /**

package/dist/diagnose.js

@@ -15,13 +15,13 @@ import { createDeputyDbFacade } from "./deputy/db-facade.js";
 import { helpersStatus } from "./deputy/install.js";
 import { EXPECTED_HELPERS_VERSION } from "./deputy/protocol.js";
 import { deputyDbPath, deputyRoutesDb, helpersRouting, } from "./deputy/routing.js";
-import { readAllowed, readCapability, uiCapability, writeCapability, } from "./capability.js";
+import { readAllowed, readCapability, uiCapability, urlSchemeCapability, writeCapability, } from "./capability.js";
 import { compareToBaseline, observeSchema } from "./db/fingerprint.js";
 import { locateThingsDb, ThingsDbNotFoundError } from "./db/locate.js";
 import { isThingsRunning, probeAutomation, } from "./write/automation-probe.js";
 import { probeAccessibility, } from "./write/accessibility-probe.js";
 import { allCertifications, UI_CERTIFICATION_PROFILE, } from "./write/vectors/ui-certification.js";
-import { readShortcutProxies, readUrlSchemeEnabled, } from "./write/availability.js";
+import { readShortcutProxies, } from "./write/availability.js";
 import { createEnvironmentTracker, diffEnvironment, } from "./write/environment.js";
 import { sdefDeclaresPrivateReorder } from "./write/experimental.js";
 import { computeSyncHealth } from "./sync-health.js";
@@ -75,7 +75,16 @@ function outstandingConsent(hello) {
     const automation = hello.automation;
     if (automation === undefined)
         return false;
-    return automation.things !== "granted" || automation.systemEvents !== "granted";
+    return consentOwed(automation.things) || consentOwed(automation.systemEvents);
+}
+/**
+ * `not-running` is the one value that is NOT a standing: with the target down
+ * the ask-false determination has no answer to give, so nothing is owed and no
+ * sitting would settle anything (#610 for System Events, #617 for Things).
+ * Steering a human to a ceremony on it is the false-onboarding loop itself.
+ */
+function consentOwed(standing) {
+    return standing !== "granted" && standing !== "not-running";
 }
 function buildHelpersReport(configMode, deps = {}) {
     // The routing resolution carries the mode it resolved (helpersRouting reads
@@ -141,6 +150,8 @@ export function diagnose(dbPath, options = {}) {
     // itself opening the container and raising the dialog it is diagnosing.
     const capability = {
         read: readCapability(dbPath !== undefined ? { dbPath } : {}),
+        // SURVEY, so a closed Things is REPORTED (`deputy-target-dormant`) and
+        // never started: doctor diagnoses the machine, it does not rearrange it.
         write: writeCapability(),
         ui: uiCapability(),
     };
@@ -334,7 +345,12 @@ export function diagnose(dbPath, options = {}) {
                         "intended for a dedicated always-on Mac, see docs/setup.md)",
             },
             availability: {
-                urlScheme: readUrlSchemeEnabled(options.availability),
+                // Reuses the read standing already established above rather than
+                // re-deriving it, so doctor asks the machine once.
+                urlScheme: urlSchemeCapability({
+                    readStanding: () => capability.read,
+                    ...options.capability,
+                }),
                 shortcuts: readShortcutProxies(options.availability),
             },
             recurrence: scanRecurrenceRules(conn.db),

package/dist/diagnose.js.map

@@ -1 +1 @@
-{"version":3,"file":"diagnose.js","sourceRoot":"","sources":["../src/diagnose.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAErC,OAAO,EAAoB,UAAU,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACvE,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvE,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAsB,MAAM,qBAAqB,CAAC;AACxE,OAAO,EAAoB,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAClF,OAAO,EACL,YAAY,EACZ,cAAc,EACd,cAAc,GAEf,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,WAAW,EACX,cAAc,EACd,YAAY,EACZ,eAAe,GAIhB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACvE,OAAO,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AACvE,OAAO,EACL,eAAe,EACf,eAAe,GAGhB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,kBAAkB,GAGnB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,iBAAiB,EACjB,wBAAwB,GAEzB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EACL,mBAAmB,EACnB,oBAAoB,GAIrB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,wBAAwB,EACxB,eAAe,GAIhB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAwC,MAAM,kBAAkB,CAAC;AAC3F,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAqC,MAAM,gBAAgB,CAAC;AAE1F,MAAM,UAAU,GAAG,2BAA2B,CAAC;AAE/C,uEAAuE;AACvE,SAAS,mBAAmB,CAAC,EAE5B;IACC,IAAI,IAA4C,CAAC;IACjD,IAAI,CAAC;QACH,IAAI,GAAG,EAAE;aACN,OAAO,CACN,0FAA0F,CAC3F;aACA,GAAG,EAA4C,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAAC;IACpF,CAAC;IACD,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,UAAU,GAAG,EAAE,CAAC;IACpB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,CAAC;YACH,oBAAoB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,WAAW,IAAI,CAAC,CAAC;YACjB,IAAI,UAAU,KAAK,EAAE;gBAAE,UAAU,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACvF,CAAC;IACH,CAAC;IACD,OAAO;QACL,SAAS,EAAE,IAAI,CAAC,MAAM;QACtB,WAAW;QACX,MAAM,EACJ,WAAW,KAAK,CAAC;YACf,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;gBACjB,CAAC,CAAC,wBAAwB;gBAC1B,CAAC,CAAC,yCAAyC;YAC7C,CAAC,CAAC,GAAG,WAAW,qCAAqC,UAAU,sBAAsB;gBACnF,4EAA4E;gBAC5E,2BAA2B;KAClC,CAAC;AACJ,CAAC;AA6BD;;;;GAIG;AACH,SAAS,kBAAkB,CAAC,KAAyB;IACnD,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACjC,IAAI,KAAK,CAAC,SAAS,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;IACpC,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC3C,OAAO,UAAU,CAAC,MAAM,KAAK,SAAS,IAAI,UAAU,CAAC,YAAY,KAAK,SAAS,CAAC;AAClF,CAAC;AAED,SAAS,kBAAkB,CAAC,UAAuB,EAAE,OAA0B,EAAE;IAC/E,4EAA4E;IAC5E,0DAA0D;IAC1D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,cAAc,EAAE,CAAC;IACjD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,aAAa,CAAC,UAAU,CAAC,CAAC;IACxD,MAAM,gBAAgB,GAAG,MAAM,CAAC,gBAAgB,CAAC;IACjD,MAAM,WAAW,GAAG,gBAAgB,KAAK,IAAI,IAAI,gBAAgB,KAAK,wBAAwB,CAAC;IAC/F,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC;IACxE,MAAM,MAAM,GAAG,WAAW;QACxB,CAAC,CAAC,uFAAuF;QACzF,CAAC,CAAC,UAAU;YACV,CAAC,CAAC,4EAA4E;YAC9E,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe;gBACvB,CAAC,CAAC,IAAI,KAAK,OAAO;oBAChB,CAAC,CAAC,IAAI;oBACN,CAAC,CAAC,yEAAyE;gBAC7E,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO;oBAC1E,CAAC,CAAC,qFAAqF;oBACvF,CAAC,CAAC,MAAM,CAAC,eAAe,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO;wBAChD,CAAC,CAAC,iFAAiF;wBACnF,CAAC,CAAC,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;4BACvC,CAAC,CAAC,iHAAiH;4BACnH,CAAC,CAAC,IAAI,CAAC;IACnB,MAAM,MAAM,GACV,IAAI,KAAK,OAAO;QACd,CAAC,CAAC,0HAA0H;QAC5H,CAAC,CAAC,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,KAAK;YACnC,CAAC,CAAC,8BAA8B;YAChC,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe;gBACvB,CAAC,CAAC,IAAI,KAAK,MAAM;oBACf,CAAC,CAAC,gHAAgH;oBAClH,CAAC,CAAC,kEAAkE;gBACtE,CAAC,CAAC,sBAAsB;oBACpB,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,eAAe,OAAO,CAAC,YAAY,IAAI,SAAS,GAAG,CAAC,CAAC;oBACpF,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,mBAAmB,OAAO,CAAC,YAAY,IAAI,SAAS,GAAG,CAAC,CAAC;iBACpF,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;IAC5B,OAAO;QACL,IAAI;QACJ,OAAO;QACP,MAAM;QACN,gBAAgB;QAChB,eAAe,EAAE,wBAAwB;QACzC,WAAW;QACX,UAAU;QACV,MAAM;QACN,MAAM;KACP,CAAC;AACJ,CAAC;AA0LD;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,OAAyB,EAAE;IACzD,OAAO,mBAAmB,CAAC,IAAI,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,MAAe,EAAE,UAA2B,EAAE;IACrE,4EAA4E;IAC5E,8EAA8E;IAC9E,2EAA2E;IAC3E,wEAAwE;IACxE,MAAM,UAAU,GAAG;QACjB,IAAI,EAAE,cAAc,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,KAAK,EAAE,eAAe,EAAE;QACxB,EAAE,EAAE,YAAY,EAAE;KACnB,CAAC;IACF,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAClC,OAAO;YACL,MAAM,EAAE,IAAI;YACZ,KAAK,EAAE;gBACL,IAAI,EAAE,aAAa;gBACnB,OAAO,EAAE,uCAAuC,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE;gBACxE,WAAW,EAAE,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;aACpD;YACD,QAAQ,EAAE,QAAQ,CAAC,WAAW;YAC9B,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE;SAClD,CAAC;IACJ,CAAC;IACD,qEAAqE;IACrE,uEAAuE;IACvE,MAAM,YAAY,GAAG,cAAc,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAChF,CAAC,CAAC,YAAY,EAAE;QAChB,CAAC,CAAC,IAAI,CAAC;IACT,IAAI,OAA0C,CAAC;IAC/C,IAAI,CAAC;QACH,OAAO;YACL,YAAY,KAAK,IAAI;gBACnB,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,EAAE,EAAE,EAAE;gBAC/D,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACxD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,qBAAqB,EAAE,CAAC;YACzC,OAAO;gBACL,MAAM,EAAE,IAAI;gBACZ,KAAK,EAAE;oBACL,IAAI,EAAE,aAAa;oBACnB,OAAO,EAAE,GAAG,CAAC,OAAO;oBACpB,WAAW,EAAE,wDAAwD;iBACtE;gBACD,QAAQ,EAAE,QAAQ,CAAC,WAAW;gBAC9B,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE;aAClD,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,IAAI,IAAuC,CAAC;IAC5C,IAAI,CAAC;QACH,IAAI;YACF,YAAY,KAAK,IAAI;gBACnB,CAAC,CAAC,EAAE,EAAE,EAAE,oBAAoB,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,KAAI,CAAC,EAAE;gBAChE,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,iBAAiB,EAAE,CAAC;YACrC,OAAO;gBACL,MAAM,EAAE,IAAI;gBACZ,KAAK,EAAE;oBACL,IAAI,EAAE,aAAa;oBACnB,OAAO,EAAE,GAAG,CAAC,OAAO;oBACpB,WAAW,EAAE,2DAA2D;iBACzE;gBACD,QAAQ,EAAE,QAAQ,CAAC,WAAW;gBAC9B,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE;aAClD,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,iBAAiB,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QACzD,uEAAuE;QACvE,oEAAoE;QACpE,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,MAAM,QAAQ,GACZ,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,MAAM,CAAC,mBAAmB,KAAK,WAAW,CAAC,WAAW,CAAC;QACpF,MAAM,iBAAiB,GAAG,QAAQ;YAChC,CAAC,CAAC,eAAe;YACjB,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI;gBACpB,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO;oBACvB,CAAC,CAAC,OAAO;oBACT,CAAC,CAAC,iBAAiB,CAAC;QAC1B,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,KAAK,IAAI,IAAI,QAAQ,CAAC;QACvD,MAAM,UAAU,GAAG,0BAA0B,EAAE,CAAC;QAChD,MAAM,OAAO,GAAG,OAAO,CAAC,WAAW,IAAI,wBAAwB,CAAC,WAAW,CAAC,CAAC;QAC7E,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;QACrC,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,YAAY,GAA6B,EAAE,CAAC;QAClD,KAAK,MAAM,CAAC,IAAI,WAAW,CAAC,MAAM,EAAE,CAAC;YACnC,IAAI,CAAC,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;gBAAE,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC;QACxE,CAAC;QACD,4EAA4E;QAC5E,4EAA4E;QAC5E,4EAA4E;QAC5E,MAAM,WAAW,GAA4B,CAAC,GAAG,EAAE;YACjD,IAAI,MAAM,CAAC,KAAK,IAAI,IAAI,EAAE,CAAC;gBACzB,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;YAC/E,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBACvE,OAAO;oBACL,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG;oBAC3B,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM;oBAC3B,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE;oBACxD,MAAM,EAAE,aAAa,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,KAAK,cAAc,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG;iBAC5E,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO;oBACL,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG;oBAC3B,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM;oBAC3B,QAAQ,EAAE,IAAI;oBACd,MAAM,EACJ,UAAU,MAAM,CAAC,KAAK,CAAC,GAAG,cAAc,MAAM,CAAC,KAAK,CAAC,MAAM,mBAAmB;wBAC9E,sFAAsF;iBACzF,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QACL,MAAM,MAAM,GAAmB;YAC7B,UAAU;YACV,EAAE,EAAE;gBACF,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,eAAe,EAAE,OAAO,CAAC,eAAe;gBACxC,eAAe,EAAE,WAAW,CAAC,eAAe;aAC7C;YACD,WAAW,EAAE;gBACX,MAAM,EAAE,iBAAiB;gBACzB,KAAK,EAAE,WAAW,CAAC,WAAW;gBAC9B,QAAQ,EAAE,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI;gBAC1D,MAAM,EAAE,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;gBACpD,YAAY;aACb;YACD,GAAG,EAAE;gBACH,SAAS,EAAE,UAAU,CAAC,UAAU,CAAC;gBACjC,OAAO,EAAE,UAAU,CAAC,aAAa;gBACjC,gBAAgB,EAAE,MAAM,CAAC,mBAAmB;gBAC5C,eAAe,EACb,UAAU,CAAC,aAAa,KAAK,IAAI;oBACjC,MAAM,CAAC,mBAAmB,KAAK,IAAI;oBACnC,UAAU,CAAC,aAAa,KAAK,MAAM,CAAC,mBAAmB;aAC1D;YACD,MAAM,EAAE;gBACN,OAAO,EAAE,aAAa;gBACtB,MAAM,EAAE,QAAQ;oBACd,CAAC,CAAC,8EAA8E;wBAC9E,gFAAgF;oBAClF,CAAC,CAAC,aAAa;wBACb,CAAC,CAAC,6CAA6C;wBAC/C,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO;4BACvB,CAAC,CAAC,+EAA+E;4BACjF,CAAC,CAAC,2DAA2D;aACpE;YACD,KAAK,EAAE,WAAW;YAClB,YAAY,EAAE;gBACZ,OAAO,EAAE,MAAM,CAAC,iBAAiB;gBACjC,mBAAmB,EAAE,UAAU;gBAC/B,MAAM,EAAE,CAAC,MAAM,CAAC,iBAAiB;oBAC/B,CAAC,CAAC,uFAAuF;oBACzF,CAAC,CAAC,UAAU;wBACV,CAAC,CAAC,6DAA6D;wBAC/D,CAAC,CAAC,iFAAiF;4BACjF,uDAAuD;aAC9D;YACD,WAAW,EAAE;gBACX,OAAO,EAAE,UAAU;gBACnB,iBAAiB,EAAE,WAAW;gBAC9B,OAAO,EAAE,eAAe,CAAC,WAAW,EAAE,UAAU,CAAC;aAClD;YACD,UAAU,EACR,OAAO,CAAC,eAAe,KAAK,IAAI;gBAC9B,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,SAAS,CAAC;gBACpC,CAAC,CAAC;oBACE,MAAM,EAAE,YAAY;oBACpB,MAAM,EACJ,2EAA2E;wBAC3E,mEAAmE;iBACtE;YACP,EAAE,EAAE;gBACF,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC,OAAO;gBAC1B,UAAU,EAAE,eAAe,EAAE;gBAC7B,aAAa,EACX,OAAO,CAAC,kBAAkB,KAAK,IAAI;oBACjC,CAAC,CAAC,kBAAkB,CAAC,OAAO,CAAC,sBAAsB,CAAC;oBACpD,CAAC,CAAC;wBACE,MAAM,EAAE,YAAY;wBACpB,MAAM,EACJ,gFAAgF;4BAChF,+EAA+E;qBAClF;gBACP,oBAAoB,EAAE,wBAAwB;gBAC9C,aAAa,EAAE,iBAAiB,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;oBACzD,EAAE;oBACF,MAAM,EAAE,KAAK,CAAC,MAAM;iBACrB,CAAC,CAAC;gBACH,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,OAAO;oBACvB,CAAC,CAAC,qFAAqF;wBACrF,uEAAuE;oBACzE,CAAC,CAAC,mFAAmF;wBACnF,4DAA4D;aACjE;YACD,YAAY,EAAE;gBACZ,SAAS,EAAE,oBAAoB,CAAC,OAAO,CAAC,YAAY,CAAC;gBACrD,SAAS,EAAE,mBAAmB,CAAC,OAAO,CAAC,YAAY,CAAC;aACrD;YACD,UAAU,EAAE,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC;YACxC,OAAO,EAAE,kBAAkB,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC;YAChE,UAAU,EAAE,iBAAiB,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC;YACxE,KAAK,EAAE,kBAAkB,CAAC,gBAAgB,CAAC,OAAO,CAAC,QAAQ,IAAI,QAAQ,EAAE,CAAC,CAAC;SAC5E,CAAC;QACF,OAAO;YACL,MAAM;YACN,KAAK,EAAE,IAAI;YACX,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY;YAC7D,IAAI,EAAE;gBACJ,SAAS,EAAE,WAAW,CAAC,eAAe;gBACtC,WAAW,EAAE,iBAAiB,KAAK,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAiB;aACrF;SACF,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,IAAI,CAAC,KAAK,EAAE,CAAC;IACf,CAAC;AACH,CAAC"}
+{"version":3,"file":"diagnose.js","sourceRoot":"","sources":["../src/diagnose.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAErC,OAAO,EAAoB,UAAU,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACvE,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvE,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAsB,MAAM,qBAAqB,CAAC;AACxE,OAAO,EAAoB,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAClF,OAAO,EACL,YAAY,EACZ,cAAc,EACd,cAAc,GAEf,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,WAAW,EACX,cAAc,EACd,YAAY,EACZ,mBAAmB,EACnB,eAAe,GAMhB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACvE,OAAO,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AACvE,OAAO,EACL,eAAe,EACf,eAAe,GAGhB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,kBAAkB,GAGnB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,iBAAiB,EACjB,wBAAwB,GAEzB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EACL,mBAAmB,GAGpB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,wBAAwB,EACxB,eAAe,GAIhB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAwC,MAAM,kBAAkB,CAAC;AAC3F,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAqC,MAAM,gBAAgB,CAAC;AAE1F,MAAM,UAAU,GAAG,2BAA2B,CAAC;AAE/C,uEAAuE;AACvE,SAAS,mBAAmB,CAAC,EAE5B;IACC,IAAI,IAA4C,CAAC;IACjD,IAAI,CAAC;QACH,IAAI,GAAG,EAAE;aACN,OAAO,CACN,0FAA0F,CAC3F;aACA,GAAG,EAA4C,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAAC;IACpF,CAAC;IACD,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,UAAU,GAAG,EAAE,CAAC;IACpB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,CAAC;YACH,oBAAoB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,WAAW,IAAI,CAAC,CAAC;YACjB,IAAI,UAAU,KAAK,EAAE;gBAAE,UAAU,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACvF,CAAC;IACH,CAAC;IACD,OAAO;QACL,SAAS,EAAE,IAAI,CAAC,MAAM;QACtB,WAAW;QACX,MAAM,EACJ,WAAW,KAAK,CAAC;YACf,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;gBACjB,CAAC,CAAC,wBAAwB;gBAC1B,CAAC,CAAC,yCAAyC;YAC7C,CAAC,CAAC,GAAG,WAAW,qCAAqC,UAAU,sBAAsB;gBACnF,4EAA4E;gBAC5E,2BAA2B;KAClC,CAAC;AACJ,CAAC;AA6BD;;;;GAIG;AACH,SAAS,kBAAkB,CAAC,KAAyB;IACnD,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACjC,IAAI,KAAK,CAAC,SAAS,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;IACpC,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC3C,OAAO,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,WAAW,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;AAChF,CAAC;AAED;;;;;GAKG;AACH,SAAS,WAAW,CAAC,QAAgB;IACnC,OAAO,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,aAAa,CAAC;AAC9D,CAAC;AAED,SAAS,kBAAkB,CAAC,UAAuB,EAAE,OAA0B,EAAE;IAC/E,4EAA4E;IAC5E,0DAA0D;IAC1D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,cAAc,EAAE,CAAC;IACjD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,aAAa,CAAC,UAAU,CAAC,CAAC;IACxD,MAAM,gBAAgB,GAAG,MAAM,CAAC,gBAAgB,CAAC;IACjD,MAAM,WAAW,GAAG,gBAAgB,KAAK,IAAI,IAAI,gBAAgB,KAAK,wBAAwB,CAAC;IAC/F,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC;IACxE,MAAM,MAAM,GAAG,WAAW;QACxB,CAAC,CAAC,uFAAuF;QACzF,CAAC,CAAC,UAAU;YACV,CAAC,CAAC,4EAA4E;YAC9E,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe;gBACvB,CAAC,CAAC,IAAI,KAAK,OAAO;oBAChB,CAAC,CAAC,IAAI;oBACN,CAAC,CAAC,yEAAyE;gBAC7E,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO;oBAC1E,CAAC,CAAC,qFAAqF;oBACvF,CAAC,CAAC,MAAM,CAAC,eAAe,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO;wBAChD,CAAC,CAAC,iFAAiF;wBACnF,CAAC,CAAC,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;4BACvC,CAAC,CAAC,iHAAiH;4BACnH,CAAC,CAAC,IAAI,CAAC;IACnB,MAAM,MAAM,GACV,IAAI,KAAK,OAAO;QACd,CAAC,CAAC,0HAA0H;QAC5H,CAAC,CAAC,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,KAAK;YACnC,CAAC,CAAC,8BAA8B;YAChC,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe;gBACvB,CAAC,CAAC,IAAI,KAAK,MAAM;oBACf,CAAC,CAAC,gHAAgH;oBAClH,CAAC,CAAC,kEAAkE;gBACtE,CAAC,CAAC,sBAAsB;oBACpB,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,eAAe,OAAO,CAAC,YAAY,IAAI,SAAS,GAAG,CAAC,CAAC;oBACpF,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,mBAAmB,OAAO,CAAC,YAAY,IAAI,SAAS,GAAG,CAAC,CAAC;iBACpF,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;IAC5B,OAAO;QACL,IAAI;QACJ,OAAO;QACP,MAAM;QACN,gBAAgB;QAChB,eAAe,EAAE,wBAAwB;QACzC,WAAW;QACX,UAAU;QACV,MAAM;QACN,MAAM;KACP,CAAC;AACJ,CAAC;AA4LD;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,OAAyB,EAAE;IACzD,OAAO,mBAAmB,CAAC,IAAI,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,MAAe,EAAE,UAA2B,EAAE;IACrE,4EAA4E;IAC5E,8EAA8E;IAC9E,2EAA2E;IAC3E,wEAAwE;IACxE,MAAM,UAAU,GAAG;QACjB,IAAI,EAAE,cAAc,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,uEAAuE;QACvE,yEAAyE;QACzE,KAAK,EAAE,eAAe,EAAE;QACxB,EAAE,EAAE,YAAY,EAAE;KACnB,CAAC;IACF,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAClC,OAAO;YACL,MAAM,EAAE,IAAI;YACZ,KAAK,EAAE;gBACL,IAAI,EAAE,aAAa;gBACnB,OAAO,EAAE,uCAAuC,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE;gBACxE,WAAW,EAAE,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;aACpD;YACD,QAAQ,EAAE,QAAQ,CAAC,WAAW;YAC9B,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE;SAClD,CAAC;IACJ,CAAC;IACD,qEAAqE;IACrE,uEAAuE;IACvE,MAAM,YAAY,GAAG,cAAc,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAChF,CAAC,CAAC,YAAY,EAAE;QAChB,CAAC,CAAC,IAAI,CAAC;IACT,IAAI,OAA0C,CAAC;IAC/C,IAAI,CAAC;QACH,OAAO;YACL,YAAY,KAAK,IAAI;gBACnB,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,EAAE,EAAE,EAAE;gBAC/D,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACxD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,qBAAqB,EAAE,CAAC;YACzC,OAAO;gBACL,MAAM,EAAE,IAAI;gBACZ,KAAK,EAAE;oBACL,IAAI,EAAE,aAAa;oBACnB,OAAO,EAAE,GAAG,CAAC,OAAO;oBACpB,WAAW,EAAE,wDAAwD;iBACtE;gBACD,QAAQ,EAAE,QAAQ,CAAC,WAAW;gBAC9B,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE;aAClD,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,IAAI,IAAuC,CAAC;IAC5C,IAAI,CAAC;QACH,IAAI;YACF,YAAY,KAAK,IAAI;gBACnB,CAAC,CAAC,EAAE,EAAE,EAAE,oBAAoB,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,KAAI,CAAC,EAAE;gBAChE,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,iBAAiB,EAAE,CAAC;YACrC,OAAO;gBACL,MAAM,EAAE,IAAI;gBACZ,KAAK,EAAE;oBACL,IAAI,EAAE,aAAa;oBACnB,OAAO,EAAE,GAAG,CAAC,OAAO;oBACpB,WAAW,EAAE,2DAA2D;iBACzE;gBACD,QAAQ,EAAE,QAAQ,CAAC,WAAW;gBAC9B,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE;aAClD,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,iBAAiB,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QACzD,uEAAuE;QACvE,oEAAoE;QACpE,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,MAAM,QAAQ,GACZ,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,MAAM,CAAC,mBAAmB,KAAK,WAAW,CAAC,WAAW,CAAC;QACpF,MAAM,iBAAiB,GAAG,QAAQ;YAChC,CAAC,CAAC,eAAe;YACjB,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI;gBACpB,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO;oBACvB,CAAC,CAAC,OAAO;oBACT,CAAC,CAAC,iBAAiB,CAAC;QAC1B,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,KAAK,IAAI,IAAI,QAAQ,CAAC;QACvD,MAAM,UAAU,GAAG,0BAA0B,EAAE,CAAC;QAChD,MAAM,OAAO,GAAG,OAAO,CAAC,WAAW,IAAI,wBAAwB,CAAC,WAAW,CAAC,CAAC;QAC7E,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;QACrC,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,YAAY,GAA6B,EAAE,CAAC;QAClD,KAAK,MAAM,CAAC,IAAI,WAAW,CAAC,MAAM,EAAE,CAAC;YACnC,IAAI,CAAC,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;gBAAE,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC;QACxE,CAAC;QACD,4EAA4E;QAC5E,4EAA4E;QAC5E,4EAA4E;QAC5E,MAAM,WAAW,GAA4B,CAAC,GAAG,EAAE;YACjD,IAAI,MAAM,CAAC,KAAK,IAAI,IAAI,EAAE,CAAC;gBACzB,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;YAC/E,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBACvE,OAAO;oBACL,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG;oBAC3B,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM;oBAC3B,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE;oBACxD,MAAM,EAAE,aAAa,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,KAAK,cAAc,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG;iBAC5E,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO;oBACL,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG;oBAC3B,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM;oBAC3B,QAAQ,EAAE,IAAI;oBACd,MAAM,EACJ,UAAU,MAAM,CAAC,KAAK,CAAC,GAAG,cAAc,MAAM,CAAC,KAAK,CAAC,MAAM,mBAAmB;wBAC9E,sFAAsF;iBACzF,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QACL,MAAM,MAAM,GAAmB;YAC7B,UAAU;YACV,EAAE,EAAE;gBACF,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,eAAe,EAAE,OAAO,CAAC,eAAe;gBACxC,eAAe,EAAE,WAAW,CAAC,eAAe;aAC7C;YACD,WAAW,EAAE;gBACX,MAAM,EAAE,iBAAiB;gBACzB,KAAK,EAAE,WAAW,CAAC,WAAW;gBAC9B,QAAQ,EAAE,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI;gBAC1D,MAAM,EAAE,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;gBACpD,YAAY;aACb;YACD,GAAG,EAAE;gBACH,SAAS,EAAE,UAAU,CAAC,UAAU,CAAC;gBACjC,OAAO,EAAE,UAAU,CAAC,aAAa;gBACjC,gBAAgB,EAAE,MAAM,CAAC,mBAAmB;gBAC5C,eAAe,EACb,UAAU,CAAC,aAAa,KAAK,IAAI;oBACjC,MAAM,CAAC,mBAAmB,KAAK,IAAI;oBACnC,UAAU,CAAC,aAAa,KAAK,MAAM,CAAC,mBAAmB;aAC1D;YACD,MAAM,EAAE;gBACN,OAAO,EAAE,aAAa;gBACtB,MAAM,EAAE,QAAQ;oBACd,CAAC,CAAC,8EAA8E;wBAC9E,gFAAgF;oBAClF,CAAC,CAAC,aAAa;wBACb,CAAC,CAAC,6CAA6C;wBAC/C,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO;4BACvB,CAAC,CAAC,+EAA+E;4BACjF,CAAC,CAAC,2DAA2D;aACpE;YACD,KAAK,EAAE,WAAW;YAClB,YAAY,EAAE;gBACZ,OAAO,EAAE,MAAM,CAAC,iBAAiB;gBACjC,mBAAmB,EAAE,UAAU;gBAC/B,MAAM,EAAE,CAAC,MAAM,CAAC,iBAAiB;oBAC/B,CAAC,CAAC,uFAAuF;oBACzF,CAAC,CAAC,UAAU;wBACV,CAAC,CAAC,6DAA6D;wBAC/D,CAAC,CAAC,iFAAiF;4BACjF,uDAAuD;aAC9D;YACD,WAAW,EAAE;gBACX,OAAO,EAAE,UAAU;gBACnB,iBAAiB,EAAE,WAAW;gBAC9B,OAAO,EAAE,eAAe,CAAC,WAAW,EAAE,UAAU,CAAC;aAClD;YACD,UAAU,EACR,OAAO,CAAC,eAAe,KAAK,IAAI;gBAC9B,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,SAAS,CAAC;gBACpC,CAAC,CAAC;oBACE,MAAM,EAAE,YAAY;oBACpB,MAAM,EACJ,2EAA2E;wBAC3E,mEAAmE;iBACtE;YACP,EAAE,EAAE;gBACF,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC,OAAO;gBAC1B,UAAU,EAAE,eAAe,EAAE;gBAC7B,aAAa,EACX,OAAO,CAAC,kBAAkB,KAAK,IAAI;oBACjC,CAAC,CAAC,kBAAkB,CAAC,OAAO,CAAC,sBAAsB,CAAC;oBACpD,CAAC,CAAC;wBACE,MAAM,EAAE,YAAY;wBACpB,MAAM,EACJ,gFAAgF;4BAChF,+EAA+E;qBAClF;gBACP,oBAAoB,EAAE,wBAAwB;gBAC9C,aAAa,EAAE,iBAAiB,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;oBACzD,EAAE;oBACF,MAAM,EAAE,KAAK,CAAC,MAAM;iBACrB,CAAC,CAAC;gBACH,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,OAAO;oBACvB,CAAC,CAAC,qFAAqF;wBACrF,uEAAuE;oBACzE,CAAC,CAAC,mFAAmF;wBACnF,4DAA4D;aACjE;YACD,YAAY,EAAE;gBACZ,iEAAiE;gBACjE,mDAAmD;gBACnD,SAAS,EAAE,mBAAmB,CAAC;oBAC7B,YAAY,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,IAAI;oBACnC,GAAG,OAAO,CAAC,UAAU;iBACtB,CAAC;gBACF,SAAS,EAAE,mBAAmB,CAAC,OAAO,CAAC,YAAY,CAAC;aACrD;YACD,UAAU,EAAE,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC;YACxC,OAAO,EAAE,kBAAkB,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC;YAChE,UAAU,EAAE,iBAAiB,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC;YACxE,KAAK,EAAE,kBAAkB,CAAC,gBAAgB,CAAC,OAAO,CAAC,QAAQ,IAAI,QAAQ,EAAE,CAAC,CAAC;SAC5E,CAAC;QACF,OAAO;YACL,MAAM;YACN,KAAK,EAAE,IAAI;YACX,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY;YAC7D,IAAI,EAAE;gBACJ,SAAS,EAAE,WAAW,CAAC,eAAe;gBACtC,WAAW,EAAE,iBAAiB,KAAK,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAiB;aACrF;SACF,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,IAAI,CAAC,KAAK,EAAE,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/direct-setup.d.ts

@@ -1,7 +1,16 @@
-import { writeCapability, type CapabilityDeps, type ReadCapability } from "./capability.ts";
+import { writeCapability, type CapabilityDeps, type ReadCapability, type UrlSchemeCapability, type WriteCapabilityOptions } from "./capability.ts";
 import { type Wizard } from "./wizard.ts";
 import { type ShortcutsState } from "./write/availability.ts";
-export type SetupLeg = "read-access" | "app-control" | "shortcuts";
+/**
+ * The deadline passed with the app-data dialog still unanswered. Distinct from
+ * a refusal: nothing was decided, the dialog is still on screen, and answering
+ * it later still lands the grant on the host app (APDP1 stage A).
+ */
+export declare class ContainerOpenTimedOut extends Error {
+    readonly timeoutMs: number;
+    constructor(timeoutMs: number);
+}
+export type SetupLeg = "read-access" | "app-control" | "shortcuts" | "url-scheme";
 /**
  * Where a leg stands. `pending` is a HUMAN-pace outcome (a toggle not yet
  * flipped, a sheet not yet clicked) and resumes on a rerun; `denied` means
@@ -41,12 +50,21 @@ export interface DirectSetupDeps extends CapabilityDeps {
     openUrl?: (url: string) => void;
     /** Send the real Apple Event that mints an Automation grant. Throws on failure. */
     sendAutomationProbe?: (timeoutMs: number) => void;
-    /** Open the container database once, deliberately, to provoke the app-data modal. */
-    openContainer?: () => void;
+    /**
+     * Open the container database once, deliberately, to provoke the app-data
+     * modal, waiting no longer than `timeoutMs` for it to be answered. Throws
+     * {@link ContainerOpenTimedOut} at the deadline and any other error when the
+     * open itself failed.
+     */
+    openContainer?: (timeoutMs: number) => void;
+    /** How long the read leg waits for the app-data dialog (default 60s). */
+    containerOpenTimeoutMs?: number;
     /** Open one shortcut's install sheet. */
     openShortcut?: (file: string) => void;
     /** The installed proxy-shortcut census (availability.ts). */
     shortcutProxies?: () => ShortcutsState;
+    /** Things' own 'Enable Things URLs' standing, for leg (d) (capability.ts). */
+    urlSchemeStanding?: () => UrlSchemeCapability;
     automationTimeoutMs?: number;
 }
 export interface SetupSurvey {
@@ -56,6 +74,7 @@ export interface SetupSurvey {
     };
     read: ReadCapability;
     write: ReturnType<typeof writeCapability>;
+    urlScheme: UrlSchemeCapability;
     shortcutsMissing: string[];
     /** The legs that WOULD put something on screen. Empty means a rerun asks nothing. */
     outstanding: SetupLeg[];
@@ -64,8 +83,15 @@ export interface SetupSurvey {
  * What the ceremony would do, established entirely prompt-free. This is the
  * idempotence check (Article V): it is what lets a rerun skip settled legs, and
  * it is what `--dry-run` reports. Raises nothing, ever.
+ *
+ * `purpose` is the one side effect the survey can be asked for: the ceremony
+ * itself passes `dispatch` so a dormant Things is started before the dialogs
+ * are COUNTED (#617) — otherwise a machine whose app happens to be closed is
+ * told "nothing to raise" and then shown a dialog anyway. `--dry-run` keeps the
+ * default and starts nothing at all, at the cost of not knowing where a closed
+ * app's grant stands; it says so through the write verdict it reports.
  */
-export declare function surveySetup(deps?: DirectSetupDeps): SetupSurvey;
+export declare function surveySetup(deps?: DirectSetupDeps, options?: WriteCapabilityOptions): SetupSurvey;
 /**
  * Run the direct-path ceremony. Strict mode: the banner counts what is about
  * to appear, waits are bounded, and an unanswered leg leaves the run nonzero.

package/dist/direct-setup.js

@@ -19,6 +19,17 @@
  *     instead: durable, but it hands the whole disk to a general-purpose host
  *     app, so it is offered, never assumed.
  *
+ *     The provoking open runs in a BOUNDED CHILD process, because macOS parks
+ *     the requesting syscall in the kernel until someone answers the dialog —
+ *     an in-process open would park the ceremony itself for as long as the
+ *     dialog stands. MEASURED (APDP1, docs/lab/apdp1-grant-pinning.md): the
+ *     app-data grant is keyed to the RESPONSIBLE APP INSTANCE, not to the pid
+ *     that opened the file, so what a child provokes belongs to the host app
+ *     and outlives that child — every later process under the same host app
+ *     reads without a dialog. Killing the child at the deadline takes neither
+ *     the dialog nor the grant away: a human who answers Allow afterwards still
+ *     grants the host app, and the next run witnesses it.
+ *
  *     MEASURED: FDA does NOT take effect for a running app. macOS says so in
  *     the Settings sheet itself — "…will not have full disk access until it is
  *     quit", with Later / Quit & Reopen — and the responsible process keeps its
@@ -35,6 +46,12 @@
  *     Settings toggle and the `tccutil` re-arm and leaves the choice to the human.
  *  c. SHORTCUTS. The bundled proxies that carry the operations no other surface
  *     can perform. An install sheet per missing shortcut; no macOS consent.
+ *  d. THINGS URLS. The odd one out: not a macOS grant at all, but Things' own
+ *     Settings ▸ General ▸ "Enable Things URLs". It raises nothing and cannot be
+ *     flipped from here, so this leg only DETECTS and instructs — and it earns
+ *     its place because the off state is otherwise invisible: the app parks
+ *     every URL command in an alert on its own window rather than running it
+ *     (URLEN1, #611), which a fresh install hits on its very first write.
  *
  * There is deliberately NO Accessibility leg: GUI-driving is helpers-only
  * (Article IV), so when `ui.enabled` is set this ceremony says so and points at
@@ -53,10 +70,10 @@
  * inside this ceremony only.
  */
 import { execFileSync } from "node:child_process";
-import { existsSync, openSync, closeSync } from "node:fs";
+import { existsSync } from "node:fs";
 import { join } from "node:path";
 import { fileURLToPath } from "node:url";
-import { hostApp, hostDisplayName, readCapability, writeCapability, } from "./capability.js";
+import { hostApp, hostDisplayName, readCapability, urlSchemeCapability, writeCapability, } from "./capability.js";
 import { loadConfig } from "./config.js";
 import { locateThingsDb } from "./db/locate.js";
 import { clearSessionGrant, witnessSessionGrant } from "./session-grant.js";
@@ -69,6 +86,30 @@ const AUTOMATION_SETTINGS_URL = "x-apple.systempreferences:com.apple.preference.
 /** Package root — one level above src/ AND dist/, so both layouts resolve. */
 const SHORTCUTS_DIR = fileURLToPath(new URL("../shortcuts", import.meta.url));
 const AUTOMATION_TIMEOUT_MS = 60_000;
+/** How long the read leg waits for the app-data dialog before giving up. */
+const CONTAINER_OPEN_TIMEOUT_MS = 60_000;
+/**
+ * The bounded child's whole job: one `open(2)` against the container, then
+ * exit. A dynamic import so the same source runs whether node evaluates `-e`
+ * as CommonJS or as an ES module; the failure path writes ONLY the errno
+ * message, because an unhandled rejection would dump a stack trace whose first
+ * line is a node internal rather than the reason.
+ */
+const CONTAINER_OPEN_CHILD = 'import("node:fs").then((fs) => fs.closeSync(fs.openSync(process.argv[1], "r")))' +
+    ".catch((e) => { process.stderr.write(String((e && e.message) || e)); process.exit(1); });";
+/**
+ * The deadline passed with the app-data dialog still unanswered. Distinct from
+ * a refusal: nothing was decided, the dialog is still on screen, and answering
+ * it later still lands the grant on the host app (APDP1 stage A).
+ */
+export class ContainerOpenTimedOut extends Error {
+    timeoutMs;
+    constructor(timeoutMs) {
+        super(`the app-data dialog was not answered within ${Math.round(timeoutMs / 1000)}s`);
+        this.name = "ContainerOpenTimedOut";
+        this.timeoutMs = timeoutMs;
+    }
+}
 /** The key that picks Full Disk Access over the session grant at the read leg. */
 const FDA_CHOICE_KEY = "f";
 function openUrlBestEffort(url) {
@@ -79,14 +120,47 @@ function openUrlBestEffort(url) {
         // The deep link is a convenience; the written path works without it.
     }
 }
+/** First line of whatever a failed child wrote to stderr. */
+function firstStderrLine(err) {
+    const e = err;
+    const text = typeof e.stderr === "string"
+        ? e.stderr
+        : Buffer.isBuffer(e.stderr)
+            ? e.stderr.toString("utf8")
+            : err instanceof Error
+                ? err.message
+                : String(err);
+    return text.trim().split("\n")[0] ?? "";
+}
 /**
  * The container open the ceremony performs on purpose. This is the ONE place
  * in the package permitted to do it blind — everywhere else the doctrine's
  * Article I corollary forbids it, because the open is what raises the modal.
+ *
+ * It runs in a CHILD process so the wait has a deadline (see the read-access
+ * note at the top of this file): macOS holds the open in the kernel for as long
+ * as the dialog stands, and the grant it lands belongs to the host app rather
+ * than to the pid that asked, so nothing is lost by giving up on the child.
  */
-function openContainerDefault() {
-    const fd = openSync(locateThingsDb().path, "r");
-    closeSync(fd);
+function openContainerDefault(timeoutMs) {
+    const path = locateThingsDb().path;
+    try {
+        execFileSync(process.execPath, ["-e", CONTAINER_OPEN_CHILD, path], {
+            stdio: ["ignore", "ignore", "pipe"],
+            timeout: timeoutMs,
+            killSignal: "SIGKILL",
+        });
+    }
+    catch (err) {
+        const e = err;
+        // spawnSync reports a deadline kill as ETIMEDOUT, as `killed`, or as the
+        // kill signal itself, depending on where it noticed — all three mean the
+        // dialog outlived the wait.
+        if (e.code === "ETIMEDOUT" || e.killed === true || e.signal === "SIGKILL") {
+            throw new ContainerOpenTimedOut(timeoutMs);
+        }
+        throw new Error(firstStderrLine(err) || "the container could not be opened", { cause: err });
+    }
 }
 function sendAutomationProbeDefault(timeoutMs) {
     // `count of areas` dispatches a REAL Apple event. Properties like `version`
@@ -103,14 +177,28 @@ function sendAutomationProbeDefault(timeoutMs) {
  * The two ways to read, offered as a choice rather than a ranking. Enter takes
  * the session grant; `f` takes Full Disk Access, which is the wider grant and
  * the one that costs the human a relaunch.
+ *
+ * The Enter line states what the session grant actually buys, as MEASURED
+ * (APDP1): one Allow covers every process under this host app — this window,
+ * other tabs and windows, and anything they spawn — until the app quits. Under
+ * tmux that app is the one that first started the tmux server rather than
+ * whatever window you are attached from, because macOS fixes responsibility at
+ * spawn and it survives re-parenting; the caveat is printed only when `TMUX`
+ * says so, and nothing is detected to produce it.
  */
-function readAccessChoice(hostName) {
-    return [
+function readAccessChoice(hostName, env) {
+    const lines = [
         "Next: read access to your Things data — two ways:",
-        `  Enter  allow this session only: a dialog asks now; access ends when ${hostName} quits`,
+        `  Enter  allow while ${hostName} runs: one dialog now, then every command under`,
+        `         ${hostName} — any tab, window, or agent it spawns — reads without asking,`,
+        `         until ${hostName} quits`,
         `  f      Full Disk Access: durable, but grants ${hostName} broad file access —`,
         `         flip it in System Settings, then ${hostName} must quit and reopen`,
     ];
+    if ((env["TMUX"] ?? "") !== "") {
+        lines.push(`  note: inside tmux the grant belongs to the app that started the tmux server, and`, `        lasts until THAT app quits — not the window you are attached from`);
+    }
+    return lines;
 }
 /**
  * The `f` branch. Nothing here waits: FDA reaches a process only through a
@@ -135,9 +223,10 @@ function fdaBranch(base, hostName, deps) {
 }
 /**
  * The default branch: provoke the app-data modal on purpose and record the
- * grant only if the open then actually succeeded. The wait is the modal's own —
- * macOS holds the open until someone answers it, which is the premise of a
- * ceremony.
+ * grant only if the open then actually succeeded. The wait is BOUNDED — the
+ * open runs in a child process the ceremony can give up on, and giving up
+ * costs nothing, because a dialog answered afterwards still grants the host
+ * app (APDP1).
  */
 function sessionGrantBranch(base, hostName, deps) {
     const progress = deps.progress ?? (() => { });
@@ -145,18 +234,37 @@ function sessionGrantBranch(base, hostName, deps) {
         "other apps; click Allow");
     const host = hostApp(deps);
     try {
-        (deps.openContainer ?? openContainerDefault)();
+        (deps.openContainer ?? openContainerDefault)(deps.containerOpenTimeoutMs ?? CONTAINER_OPEN_TIMEOUT_MS);
     }
     catch (err) {
         clearSessionGrant(deps.env ?? process.env);
+        if (err instanceof ContainerOpenTimedOut) {
+            // Nothing was decided and the dialog is still up: say so, because the
+            // human's next click still lands the grant on this same host app.
+            progress("read access: no answer yet — the dialog is still on screen");
+            return {
+                ...base,
+                state: "pending",
+                alreadySatisfied: false,
+                detail: `the dialog is still waiting — click Allow and rerun \`things setup\` to confirm it, ` +
+                    "choose Full Disk Access at the read step instead, or run `things helpers setup` to " +
+                    "let a helper hold the grant",
+            };
+        }
         const why = err instanceof Error ? err.message : String(err);
         progress(`read access: still no access — ${why}`);
         return {
             ...base,
             state: "pending",
             alreadySatisfied: false,
-            detail: "no read access yet — rerun and answer the dialog, choose Full Disk Access at the " +
-                "read step instead, or run `things helpers setup` to let a helper hold the grant",
+            // The open failed. Usually that is a Don't Allow — which then stands for
+            // the whole run of this app, every later open failing instantly with no
+            // second dialog (APDP1 stage B) — but the errno could also be something
+            // else entirely, so the copy hedges the cause and states the remedy.
+            detail: `no read access yet — if the dialog was refused, that answer stands for the rest of ` +
+                `this ${hostName} run and macOS will not ask again, so quit and reopen ${hostName} to ` +
+                "be asked; or choose Full Disk Access at the read step, or run `things helpers setup` " +
+                "to let a helper hold the grant",
         };
     }
     const witnessed = witnessSessionGrant(host.bundleId ?? "", deps);
@@ -169,13 +277,15 @@ function sessionGrantBranch(base, hostName, deps) {
                 "grant could be tied to — choose Full Disk Access instead, or run `things helpers setup`",
         };
     }
-    progress("read access: granted for as long as this app stays open");
+    progress(`read access: granted — every command under ${hostName}, in any tab or window, reads ` +
+        `without asking until ${hostName} quits`);
     return {
         ...base,
         state: "granted",
         alreadySatisfied: false,
-        detail: `${hostName} may read the Things data folder until it quits. Full Disk Access makes ` +
-            "it permanent; `things helpers setup` moves it onto a helper that keeps it across restarts",
+        detail: `every command running under ${hostName} — any tab, window, or agent it spawns — may ` +
+            `read the Things data folder until ${hostName} quits. Full Disk Access makes it ` +
+            "permanent; `things helpers setup` moves it onto a helper that keeps it across restarts",
     };
 }
 function readAccessLeg(capability, choice, deps) {
@@ -196,7 +306,8 @@ function readAccessLeg(capability, choice, deps) {
         return { ...base, state: "granted", alreadySatisfied: true, detail: capability.detail };
     }
     if (capability.mode === "session-grant") {
-        progress("read access: already granted for as long as this app stays open");
+        progress(`read access: already granted — every command under ${hostName} reads without asking ` +
+            `until ${hostName} quits`);
         return { ...base, state: "granted", alreadySatisfied: true, detail: capability.detail };
     }
     // Nothing on record: the human's choice decides which grant this leg gathers.
@@ -208,7 +319,11 @@ function readAccessLeg(capability, choice, deps) {
 function appControlLeg(deps) {
     const base = { leg: "app-control", label: "app control" };
     const progress = deps.progress ?? (() => { });
-    const capability = writeCapability(deps);
+    // DISPATCH intent: this leg sends Things a real Apple Event a few lines down,
+    // and an Apple Event to a closed Things launches it WITH focus steal
+    // (A40/A41). Starting it first is both the honest way to read the standing
+    // (#617) and the quieter way to raise the dialog.
+    const capability = writeCapability({ purpose: "dispatch" }, deps);
     const hostName = hostDisplayName(deps);
     if (capability.mode === "deputy") {
         progress("app control: already held by the helpers");
@@ -276,7 +391,7 @@ function appControlLeg(deps) {
         };
     }
     // A zero exit is not believed on its own: re-read what macOS actually records.
-    const after = writeCapability(deps);
+    const after = writeCapability({ purpose: "dispatch" }, deps);
     if (after.mode === "direct-granted" || after.mode === "deputy") {
         progress("app control: granted");
         return { ...base, state: "granted", alreadySatisfied: false, detail: "granted" };
@@ -334,6 +449,40 @@ function shortcutsLeg(deps) {
             : `could not open: ${failures.join(", ")}`,
     };
 }
+// ── Leg (d): Things' own URL authorization ───────────────────────────────────
+/**
+ * The one leg that raises NOTHING. Things' "Enable Things URLs" is the app's own
+ * switch, not a macOS grant: there is no dialog for this ceremony to provoke and
+ * nothing it can flip on the human's behalf. What it can do is SAY SO — because
+ * the state is silent from every other angle. MEASURED (URLEN1): with the
+ * setting off, or never answered, the app puts a "Things URL Scheme" alert on
+ * its own window and PARKS the command behind it, so an unattended write reads
+ * as a silent no-op minutes later (#611). A fresh install has never answered it,
+ * which is precisely when someone is running this ceremony.
+ *
+ * So the leg reports `pending` and names the toggle; the closing line then
+ * carries it as outstanding work and a rerun re-checks it. Settings panes are
+ * not deep-linkable the way System Settings panes are — `things:///preferences`
+ * is not a route (RESID1) — so the copy names the path instead of opening it.
+ */
+function urlSchemeLeg(deps) {
+    const base = { leg: "url-scheme", label: "Things URLs" };
+    const progress = deps.progress ?? (() => { });
+    const standing = (deps.urlSchemeStanding ?? (() => urlSchemeCapability(deps)))();
+    if (standing.mode === "enabled") {
+        progress("things urls: on");
+        return { ...base, state: "granted", alreadySatisfied: true, detail: standing.detail };
+    }
+    if (standing.mode === "unreadable") {
+        // Nothing to report and nothing to ask for: this machine cannot see the
+        // setting, so claiming it is unset would be a guess.
+        return { ...base, state: "skipped", alreadySatisfied: false, detail: standing.detail };
+    }
+    progress("things urls: OFF — turn on Things ▸ Settings ▸ General ▸ Enable Things URLs, then rerun. " +
+        "Until it is on, Things holds URL commands in an alert on its own window instead of " +
+        "running them");
+    return { ...base, state: "pending", alreadySatisfied: false, detail: standing.detail };
+}
 // ── The ceremony ─────────────────────────────────────────────────────────────
 /**
  * What each leg puts on screen, for the upfront banner. Named flatly, in the
@@ -347,6 +496,11 @@ function promptLabel(leg, hostName) {
             return "app control of Things";
         case "shortcuts":
             return "one install sheet per missing shortcut";
+        case "url-scheme":
+            // Unreachable in practice: this leg raises nothing, so it is never put in
+            // `outstanding` — the list this function labels. The case exists because
+            // the union must be covered, not because anything prints it.
+            return "nothing — the Things URLs setting is flipped by hand";
     }
 }
 /** "a", "a and b", "a, b, and c" — the banner reads as a sentence. */
@@ -363,7 +517,8 @@ function listPhrase(items) {
  * strict mode they are never printed; the upfront banner's count stands alone.
  * `{host}` is filled with the detected host app's display name. The read leg is
  * absent because it is a CHOICE rather than an announcement — see
- * {@link readAccessChoice}.
+ * {@link readAccessChoice}; the url-scheme leg is absent because it raises
+ * nothing there is anything to explain in advance of.
  */
 const PROMPT_EXPLAINERS = {
     "app-control": [
@@ -396,12 +551,20 @@ function closingLine(steps, uiEnabled) {
  * What the ceremony would do, established entirely prompt-free. This is the
  * idempotence check (Article V): it is what lets a rerun skip settled legs, and
  * it is what `--dry-run` reports. Raises nothing, ever.
+ *
+ * `purpose` is the one side effect the survey can be asked for: the ceremony
+ * itself passes `dispatch` so a dormant Things is started before the dialogs
+ * are COUNTED (#617) — otherwise a machine whose app happens to be closed is
+ * told "nothing to raise" and then shown a dialog anyway. `--dry-run` keeps the
+ * default and starts nothing at all, at the cost of not knowing where a closed
+ * app's grant stands; it says so through the write verdict it reports.
  */
-export function surveySetup(deps = {}) {
+export function surveySetup(deps = {}, options = {}) {
     const host = hostApp(deps);
     const read = readCapability({}, deps);
-    const write = writeCapability(deps);
+    const write = writeCapability(options, deps);
     const shortcuts = (deps.shortcutProxies ?? readShortcutProxies)();
+    const urlScheme = (deps.urlSchemeStanding ?? (() => urlSchemeCapability(deps)))();
     const outstanding = [];
     if (read.mode !== "direct-fda" && read.mode !== "session-grant" && read.mode !== "helpers") {
         outstanding.push("read-access");
@@ -411,10 +574,14 @@ export function surveySetup(deps = {}) {
         outstanding.push("app-control");
     if (shortcuts.missing.length > 0)
         outstanding.push("shortcuts");
+    // The URL-scheme leg is deliberately NOT added to `outstanding`: that list is
+    // "dialogs this ceremony is about to raise", and this leg raises none. It is
+    // reported as a step and carried by the closing line instead.
     return {
         host: { bundleId: host.bundleId, name: hostDisplayName(deps) },
         read,
         write,
+        urlScheme,
         shortcutsMissing: [...shortcuts.missing],
         outstanding,
     };
@@ -439,7 +606,7 @@ function runCeremony(deps) {
     const hostName = hostDisplayName(withProgress);
     // Survey prompt-free BEFORE raising anything, so whoever started this knows
     // whether they must stay at the screen (Article V).
-    const survey = surveySetup(withProgress);
+    const survey = surveySetup(withProgress, { purpose: "dispatch" });
     const readBefore = survey.read;
     const outstanding = survey.outstanding;
     progress(`setting up direct access for ${hostName}${host.bundleId !== null ? ` (${host.bundleId})` : ""}`);
@@ -460,13 +627,20 @@ function runCeremony(deps) {
     // grant, `f` takes Full Disk Access. Strict mode answers "" without asking,
     // which is the session grant — the only one an absent human can still get.
     const readChoice = willRaise.has("read-access")
-        ? wizard.choose(readAccessChoice(hostName), [FDA_CHOICE_KEY])
+        ? wizard.choose(readAccessChoice(hostName, env), [FDA_CHOICE_KEY])
         : "";
     const readStep = readAccessLeg(readBefore, readChoice, withProgress);
     brief("app-control");
     const appControlStep = appControlLeg(withProgress);
     brief("shortcuts");
-    const steps = [readStep, appControlStep, shortcutsLeg(withProgress)];
+    const steps = [
+        readStep,
+        appControlStep,
+        shortcutsLeg(withProgress),
+        // Last, and never briefed: it raises nothing, so there is no dialog to
+        // explain one leg ahead (Article V) — it only reports and instructs.
+        urlSchemeLeg(withProgress),
+    ];
     const uiEnabled = loadConfig(env).ui.enabled;
     if (uiEnabled) {
         progress("note: GUI-driving is enabled in config, and it is granted only to the helpers — " +