Adolfo Reyna
9fd04b0ce4
Add the owner-only AF_UNIX Reyna CLI privacy host, strict signed-app installation, and typed native routing for Calendar, Contacts, and Reminders.\n\nAdd bounded system-status paths and config-only direct local-service wrappers. Preserve MacMiniMCP pending explicit cutover approval.\n\nApple Notes is intentionally deferred: no native Notes operations, Apple Events declaration, or Automation helper are included; legacy Notes handling remains untouched.
2.0 KiB
2.0 KiB
MacMiniMCP → Reyna CLI Coverage Matrix
Status: 2026-08-03. This document records the current owned boundary; it does not authorize retirement of MacMiniMCP.
Completed native privacy-host capabilities
- Calendar — native EventKit through the signed Reyna CLI host. Authorization is explicit; normal reads do not prompt.
- Contacts — native Contacts framework through the signed host. Authorization is explicit; normal reads do not prompt.
- Reminders — native EventKit Reminders through the signed host. Authorization is explicit; list/list-item calls are read-only; creation requires an explicit writable list.
- System status — bounded, whitelisted native status paths only.
The host remains owner-only AF_UNIX IPC. It does not expose TCP or a LAN service.
Direct local-service ownership (no MacMiniMCP)
- Speech / Kokoro / Voicebox / image / Apple-LLM wrappers are configuration and offline-status paths only. They do not change service lifecycle, synthesize audio, perform network work, or disclose configuration-sensitive values merely for status.
- Deco retains its direct client path.
Deliberately deferred
| Integration | Status | Boundary |
|---|---|---|
| Apple Notes | Deferred — legacy untouched | Reyna CLI has no Apple Notes capability, no Apple Events usage declaration, no AppKit Automation helper, and will not request Notes permission. Legacy MacMiniMCP Notes/JXA handling remains unchanged and is not part of this consolidation. |
| Apple Mail | Deferred / out of scope | Legacy Apple Mail automation remains unchanged; separate Thunderbird-local support is not a privacy-host migration. |
| SpeechTranscriber live/file flows | Separate local service | Not part of the native privacy host. |
| Codex/Gemini image generation | Out of scope | Creative/external-service work, not privacy-host scope. |
Cutover rule
MacMiniMCP remains active. It may be retired only after a live caller inventory and validation matrix establish full replacement coverage and the owner explicitly approves cutover.