import type { VaultMemoryApi } from './cloud.js'; import { type DeploymentVerification } from './deployment-verification.js'; /** Audited against source, not the upstream README's stale tool count. */ export declare const CAPABILITIES: { readonly reference: { readonly product: "Vault Memory"; readonly auditedAt: "2026-09-27"; }; readonly verification: { readonly capabilityVersion: "2026-09-20.1"; readonly cacheTtlMs: number; readonly scope: "Authenticated Vault API and memory-engine contracts only. Provider logins, model quality, Telegram delivery and local watcher configuration are separate runtime dependencies."; readonly interpretation: "A passing check confirms that the authenticated route and response contract were available at probe time; it does not certify full behavior or external-service configuration."; }; readonly capabilities: readonly [{ readonly upstream: readonly ["important_workflow"]; readonly status: "available"; readonly tools: readonly ["vault_go_workflow"]; }, { readonly upstream: readonly ["search", "get_observations", "timeline"]; readonly status: "available"; readonly tools: readonly ["vault_go_search_index", "vault_go_observations", "vault_go_timeline", "vault_go_feed"]; readonly difference: "Vault uses UUID identifiers. Search accepts an optional query, offset and date ordering; timeline accepts an explicit UUID or resolves an anchor from a query; feed uses stable cursor pagination."; }, { readonly upstream: readonly ["automatic retrieval routing", "typed memory decisions"]; readonly status: "available"; readonly tools: readonly ["vault_go_retrieve", "vault_go_decision_status", "vault_go_decide"]; readonly requires: "Jev runs only in the central memory engine. Status is sanitized; deployment availability does not prove provider health or decision quality. vault_go_decide forwards caller-authored typed questions only in full rollout and refuses protected content. Explicit retrieval tools remain available."; }, { readonly upstream: readonly ["get_tool_uses"]; readonly status: "available"; readonly tools: readonly ["vault_go_tool_uses"]; readonly requires: "Verified POST /memory/events/batch contract. Historical output exists only when captured; private fields and secrets are redacted from retrieval."; }, { readonly upstream: readonly ["session_start_context", "multi-project context"]; readonly status: "available"; readonly tools: readonly ["vault_go_session_start_context", "vault_go_context", "vault_go_file_context", "vault_go_context_chain", "vault_go_context_chain_configure"]; readonly requires: "Context chains require explicit local configuration and share one bounded character budget. Native hooks cover Claude, Codex, Grok, Agy and Gemini, including Setup and SessionEnd. OpenCode captures prompts, reads, tool results and session end. Cursor, Windsurf, OpenClaw and Hermes receive the same hook command when their config directory already exists."; }, { readonly upstream: readonly ["smart_search", "smart_outline", "smart_unfold"]; readonly status: "available"; readonly tools: readonly ["vault_go_smart_search", "vault_go_smart_outline", "vault_go_smart_unfold", "vault_go_smart_languages"]; readonly requires: "Real grammars for all 24 upstream languages plus HTML. Availability is reported per running platform; SCSS has no Linux ARM64 prebuild. Workspace reads and results are bounded."; }, { readonly upstream: readonly ["observation_add", "observation_record_event", "observation_search", "observation_context"]; readonly status: "available"; readonly tools: readonly ["vault_go_remember", "vault_go_event", "vault_go_search", "vault_go_context"]; readonly requires: "generate:false prevents duplicate server processing on an updated engine. summaryMode=off preserves captured text without model extraction."; }, { readonly upstream: readonly ["automatic updates"]; readonly status: "available"; readonly tools: readonly ["vault_go_update_status", "vault_go_update_check", "vault_go_update_install", "vault_go_update_configure"]; readonly requires: "Local worker running, npm installed and official registry reachable. Activation waits for idle state and rolls back failed runtimes."; }, { readonly upstream: readonly ["observation_generation_status"]; readonly status: "available"; readonly tools: readonly ["vault_go_jobs", "vault_go_job", "vault_go_processing_status"]; readonly difference: "Cloud generation jobs and the local selected-model queue are intentionally reported as separate queues."; }, { readonly upstream: readonly ["build_corpus", "list_corpora", "rebuild_corpus"]; readonly status: "available"; readonly tools: readonly ["vault_go_knowledge_build", "vault_go_knowledge_bases", "vault_go_knowledge_rebuild"]; }, { readonly upstream: readonly ["prime_corpus", "query_corpus", "reprime_corpus"]; readonly status: "available"; readonly tools: readonly ["vault_go_prime_corpus", "vault_go_query_corpus", "vault_go_reprime_corpus"]; readonly requires: "Uses the selected authenticated model. Conversation history is encrypted locally, isolated by account and corpus, bounded to 12 turns, and factual answers must cite retrieved memory IDs. Corpus loading is limited to an 8 MiB HTTP response; selected source JSON is limited to 16,000 characters."; }, { readonly upstream: readonly ["provider selection", "automatic observation processing"]; readonly status: "available"; readonly tools: readonly ["vault_go_engines", "vault_go_engine_select", "vault_go_generate_context", "vault_go_processing_status"]; readonly requires: "Local worker running and the selected provider authenticated. Model availability and subscription or API billing are not covered by deployment verification."; }, { readonly upstream: readonly ["privacy", "capture modes", "context settings"]; readonly status: "available"; readonly tools: readonly ["vault_go_preferences", "vault_go_preferences_update", "vault_go_custom_modes", "vault_go_custom_mode_get", "vault_go_custom_mode_save", "vault_go_custom_mode_select", "vault_go_custom_mode_delete"]; readonly requires: "Private-tag redaction and inherited custom taxonomies apply to future local processing. Preference updates require session authentication."; }, { readonly upstream: readonly ["import", "export"]; readonly status: "available"; readonly tools: readonly ["vault_go_import", "vault_go_export", "vault_go_archive_export", "vault_go_archive_import", "vault_go_backup_create", "vault_go_backup_restore"]; readonly difference: "Legacy bounded batches remain available. vault_go_archive_export groups the same account data into observations, sessions, summaries and prompts. Backup v2 creates a complete, paginated, server-materialized same-owner memory-data snapshot with declared limits, local 0600 file and SHA-256. It is not an offline SQLite replica; embeddings, transient jobs, credentials, audit logs and blobs are intentionally omitted."; }, { readonly upstream: readonly ["cloud sync"]; readonly status: "partial"; readonly tools: readonly []; readonly difference: "Vault stores authoritative memories in its authenticated cloud and persists local processing queues. External sync protocols and a complete offline replica are not part of this runtime."; }, { readonly upstream: readonly ["Telegram"]; readonly status: "available"; readonly tools: readonly ["vault_go_telegram_status", "vault_go_telegram_configure", "vault_go_telegram_disable", "vault_go_telegram_test"]; readonly requires: "Explicit configuration, private bot credential environment and user-authorized test delivery. Deployment verification does not contact Telegram."; }, { readonly upstream: readonly ["CCS Align"]; readonly status: "available"; readonly tools: readonly ["vault_go_ccs_align_health", "vault_go_ccs_align_cycle", "vault_go_ccs_align_exclude", "vault_go_ccs_align_restore", "vault_go_ccs_align_rules_check"]; readonly requires: "Local private middle cache and explicit cycle execution; rule checks report conflicts without modifying source rules."; }, { readonly upstream: readonly ["transcript watchers"]; readonly status: "available"; readonly tools: readonly ["vault_go_transcripts_status", "vault_go_transcripts_configure", "vault_go_transcripts_poll"]; readonly difference: "Persistent, consented and resumable watchers read Claude, Codex and Cursor JSONL transcripts. Cursor rows use the Claude message shape. Other transcript formats are not claimed."; }, { readonly upstream: readonly ["Grok awareness push"]; readonly status: "available"; readonly tools: readonly ["vault_go_grok_awareness_status", "vault_go_grok_awareness_configure", "vault_go_grok_awareness_push"]; readonly requires: "Explicit consent, an allowlisted agent UUID and a local agent-data root. Monthly awareness logs are bounded, private and separate from Telegram."; }, { readonly upstream: readonly ["development/report/presentation skills", "babysit", "mem-search", "agent-cost-report"]; readonly status: "available"; readonly tools: readonly ["vault_go_modes", "vault_go_mode", "vault_go_agent_cost_report"]; readonly difference: "Setup writes managed SKILL.md files for Claude, Grok and shared agent skill directories. mem-search uses vault_go_search_index → vault_go_timeline → vault_go_observations → vault_go_tool_uses. babysit is a session loop with gh, not a Vault background daemon. agent-cost-report prices local JSONL usage with a published list rate and reports missing usage as unavailable."; }, { readonly upstream: readonly ["viewer", "statusline"]; readonly status: "available"; readonly tools: readonly []; readonly difference: "The local worker serves /viewer and /statusline on its loopback port. Semantic search stays on the Vault account index. A second local vector database is not shipped."; }, { readonly upstream: readonly ["private skills library"]; readonly status: "available"; readonly tools: readonly ["vault_go_skills", "vault_go_skill_folders", "vault_go_skill_read", "vault_go_skill_file", "vault_go_skill_save", "vault_go_skill_organize", "vault_go_skill_install", "vault_go_skill_sync"]; readonly requires: "Account skill packages organized by folders and linked to projects (/v1/skills). Saving publishes a new immutable version; deleting is only available in the Vault apps. Local install verifies sha256 and manifest digest and never replaces a skill the Vault did not install."; }]; }; /** API tools verify by default. Resources pass verify=false and never perform network I/O. */ export declare function getCapabilities(home: string, cloud: VaultMemoryApi, verify?: boolean): Promise<{ deploymentVerified: boolean; deploymentVerification: DeploymentVerification; reference: { readonly product: "Vault Memory"; readonly auditedAt: "2026-09-27"; }; verification: { readonly capabilityVersion: "2026-09-20.1"; readonly cacheTtlMs: number; readonly scope: "Authenticated Vault API and memory-engine contracts only. Provider logins, model quality, Telegram delivery and local watcher configuration are separate runtime dependencies."; readonly interpretation: "A passing check confirms that the authenticated route and response contract were available at probe time; it does not certify full behavior or external-service configuration."; }; capabilities: readonly [{ readonly upstream: readonly ["important_workflow"]; readonly status: "available"; readonly tools: readonly ["vault_go_workflow"]; }, { readonly upstream: readonly ["search", "get_observations", "timeline"]; readonly status: "available"; readonly tools: readonly ["vault_go_search_index", "vault_go_observations", "vault_go_timeline", "vault_go_feed"]; readonly difference: "Vault uses UUID identifiers. Search accepts an optional query, offset and date ordering; timeline accepts an explicit UUID or resolves an anchor from a query; feed uses stable cursor pagination."; }, { readonly upstream: readonly ["automatic retrieval routing", "typed memory decisions"]; readonly status: "available"; readonly tools: readonly ["vault_go_retrieve", "vault_go_decision_status", "vault_go_decide"]; readonly requires: "Jev runs only in the central memory engine. Status is sanitized; deployment availability does not prove provider health or decision quality. vault_go_decide forwards caller-authored typed questions only in full rollout and refuses protected content. Explicit retrieval tools remain available."; }, { readonly upstream: readonly ["get_tool_uses"]; readonly status: "available"; readonly tools: readonly ["vault_go_tool_uses"]; readonly requires: "Verified POST /memory/events/batch contract. Historical output exists only when captured; private fields and secrets are redacted from retrieval."; }, { readonly upstream: readonly ["session_start_context", "multi-project context"]; readonly status: "available"; readonly tools: readonly ["vault_go_session_start_context", "vault_go_context", "vault_go_file_context", "vault_go_context_chain", "vault_go_context_chain_configure"]; readonly requires: "Context chains require explicit local configuration and share one bounded character budget. Native hooks cover Claude, Codex, Grok, Agy and Gemini, including Setup and SessionEnd. OpenCode captures prompts, reads, tool results and session end. Cursor, Windsurf, OpenClaw and Hermes receive the same hook command when their config directory already exists."; }, { readonly upstream: readonly ["smart_search", "smart_outline", "smart_unfold"]; readonly status: "available"; readonly tools: readonly ["vault_go_smart_search", "vault_go_smart_outline", "vault_go_smart_unfold", "vault_go_smart_languages"]; readonly requires: "Real grammars for all 24 upstream languages plus HTML. Availability is reported per running platform; SCSS has no Linux ARM64 prebuild. Workspace reads and results are bounded."; }, { readonly upstream: readonly ["observation_add", "observation_record_event", "observation_search", "observation_context"]; readonly status: "available"; readonly tools: readonly ["vault_go_remember", "vault_go_event", "vault_go_search", "vault_go_context"]; readonly requires: "generate:false prevents duplicate server processing on an updated engine. summaryMode=off preserves captured text without model extraction."; }, { readonly upstream: readonly ["automatic updates"]; readonly status: "available"; readonly tools: readonly ["vault_go_update_status", "vault_go_update_check", "vault_go_update_install", "vault_go_update_configure"]; readonly requires: "Local worker running, npm installed and official registry reachable. Activation waits for idle state and rolls back failed runtimes."; }, { readonly upstream: readonly ["observation_generation_status"]; readonly status: "available"; readonly tools: readonly ["vault_go_jobs", "vault_go_job", "vault_go_processing_status"]; readonly difference: "Cloud generation jobs and the local selected-model queue are intentionally reported as separate queues."; }, { readonly upstream: readonly ["build_corpus", "list_corpora", "rebuild_corpus"]; readonly status: "available"; readonly tools: readonly ["vault_go_knowledge_build", "vault_go_knowledge_bases", "vault_go_knowledge_rebuild"]; }, { readonly upstream: readonly ["prime_corpus", "query_corpus", "reprime_corpus"]; readonly status: "available"; readonly tools: readonly ["vault_go_prime_corpus", "vault_go_query_corpus", "vault_go_reprime_corpus"]; readonly requires: "Uses the selected authenticated model. Conversation history is encrypted locally, isolated by account and corpus, bounded to 12 turns, and factual answers must cite retrieved memory IDs. Corpus loading is limited to an 8 MiB HTTP response; selected source JSON is limited to 16,000 characters."; }, { readonly upstream: readonly ["provider selection", "automatic observation processing"]; readonly status: "available"; readonly tools: readonly ["vault_go_engines", "vault_go_engine_select", "vault_go_generate_context", "vault_go_processing_status"]; readonly requires: "Local worker running and the selected provider authenticated. Model availability and subscription or API billing are not covered by deployment verification."; }, { readonly upstream: readonly ["privacy", "capture modes", "context settings"]; readonly status: "available"; readonly tools: readonly ["vault_go_preferences", "vault_go_preferences_update", "vault_go_custom_modes", "vault_go_custom_mode_get", "vault_go_custom_mode_save", "vault_go_custom_mode_select", "vault_go_custom_mode_delete"]; readonly requires: "Private-tag redaction and inherited custom taxonomies apply to future local processing. Preference updates require session authentication."; }, { readonly upstream: readonly ["import", "export"]; readonly status: "available"; readonly tools: readonly ["vault_go_import", "vault_go_export", "vault_go_archive_export", "vault_go_archive_import", "vault_go_backup_create", "vault_go_backup_restore"]; readonly difference: "Legacy bounded batches remain available. vault_go_archive_export groups the same account data into observations, sessions, summaries and prompts. Backup v2 creates a complete, paginated, server-materialized same-owner memory-data snapshot with declared limits, local 0600 file and SHA-256. It is not an offline SQLite replica; embeddings, transient jobs, credentials, audit logs and blobs are intentionally omitted."; }, { readonly upstream: readonly ["cloud sync"]; readonly status: "partial"; readonly tools: readonly []; readonly difference: "Vault stores authoritative memories in its authenticated cloud and persists local processing queues. External sync protocols and a complete offline replica are not part of this runtime."; }, { readonly upstream: readonly ["Telegram"]; readonly status: "available"; readonly tools: readonly ["vault_go_telegram_status", "vault_go_telegram_configure", "vault_go_telegram_disable", "vault_go_telegram_test"]; readonly requires: "Explicit configuration, private bot credential environment and user-authorized test delivery. Deployment verification does not contact Telegram."; }, { readonly upstream: readonly ["CCS Align"]; readonly status: "available"; readonly tools: readonly ["vault_go_ccs_align_health", "vault_go_ccs_align_cycle", "vault_go_ccs_align_exclude", "vault_go_ccs_align_restore", "vault_go_ccs_align_rules_check"]; readonly requires: "Local private middle cache and explicit cycle execution; rule checks report conflicts without modifying source rules."; }, { readonly upstream: readonly ["transcript watchers"]; readonly status: "available"; readonly tools: readonly ["vault_go_transcripts_status", "vault_go_transcripts_configure", "vault_go_transcripts_poll"]; readonly difference: "Persistent, consented and resumable watchers read Claude, Codex and Cursor JSONL transcripts. Cursor rows use the Claude message shape. Other transcript formats are not claimed."; }, { readonly upstream: readonly ["Grok awareness push"]; readonly status: "available"; readonly tools: readonly ["vault_go_grok_awareness_status", "vault_go_grok_awareness_configure", "vault_go_grok_awareness_push"]; readonly requires: "Explicit consent, an allowlisted agent UUID and a local agent-data root. Monthly awareness logs are bounded, private and separate from Telegram."; }, { readonly upstream: readonly ["development/report/presentation skills", "babysit", "mem-search", "agent-cost-report"]; readonly status: "available"; readonly tools: readonly ["vault_go_modes", "vault_go_mode", "vault_go_agent_cost_report"]; readonly difference: "Setup writes managed SKILL.md files for Claude, Grok and shared agent skill directories. mem-search uses vault_go_search_index → vault_go_timeline → vault_go_observations → vault_go_tool_uses. babysit is a session loop with gh, not a Vault background daemon. agent-cost-report prices local JSONL usage with a published list rate and reports missing usage as unavailable."; }, { readonly upstream: readonly ["viewer", "statusline"]; readonly status: "available"; readonly tools: readonly []; readonly difference: "The local worker serves /viewer and /statusline on its loopback port. Semantic search stays on the Vault account index. A second local vector database is not shipped."; }, { readonly upstream: readonly ["private skills library"]; readonly status: "available"; readonly tools: readonly ["vault_go_skills", "vault_go_skill_folders", "vault_go_skill_read", "vault_go_skill_file", "vault_go_skill_save", "vault_go_skill_organize", "vault_go_skill_install", "vault_go_skill_sync"]; readonly requires: "Account skill packages organized by folders and linked to projects (/v1/skills). Saving publishes a new immutable version; deleting is only available in the Vault apps. Local install verifies sha256 and manifest digest and never replaces a skill the Vault did not install."; }]; }>; export declare const WORKFLOW: { steps: string[]; guidance: string; };