9fd04b0ce4
Add the owner-only AF_UNIX Reyna CLI privacy host, strict signed-app installation, and typed native routing for Calendar, Contacts, and Reminders.\n\nAdd bounded system-status paths and config-only direct local-service wrappers. Preserve MacMiniMCP pending explicit cutover approval.\n\nApple Notes is intentionally deferred: no native Notes operations, Apple Events declaration, or Automation helper are included; legacy Notes handling remains untouched.
31 lines
2.0 KiB
Markdown
31 lines
2.0 KiB
Markdown
# MacMiniMCP → Reyna CLI Coverage Matrix
|
|
|
|
_Status: 2026-08-03. This document records the current owned boundary; it does not authorize retirement of MacMiniMCP._
|
|
|
|
## Completed native privacy-host capabilities
|
|
|
|
- **Calendar** — native EventKit through the signed Reyna CLI host. Authorization is explicit; normal reads do not prompt.
|
|
- **Contacts** — native Contacts framework through the signed host. Authorization is explicit; normal reads do not prompt.
|
|
- **Reminders** — native EventKit Reminders through the signed host. Authorization is explicit; list/list-item calls are read-only; creation requires an explicit writable list.
|
|
- **System status** — bounded, whitelisted native status paths only.
|
|
|
|
The host remains owner-only AF_UNIX IPC. It does not expose TCP or a LAN service.
|
|
|
|
## Direct local-service ownership (no MacMiniMCP)
|
|
|
|
- Speech / Kokoro / Voicebox / image / Apple-LLM wrappers are configuration and offline-status paths only. They do not change service lifecycle, synthesize audio, perform network work, or disclose configuration-sensitive values merely for status.
|
|
- Deco retains its direct client path.
|
|
|
|
## Deliberately deferred
|
|
|
|
| Integration | Status | Boundary |
|
|
|---|---|---|
|
|
| **Apple Notes** | **Deferred — legacy untouched** | Reyna CLI has no Apple Notes capability, no Apple Events usage declaration, no AppKit Automation helper, and will not request Notes permission. Legacy MacMiniMCP Notes/JXA handling remains unchanged and is not part of this consolidation. |
|
|
| Apple Mail | Deferred / out of scope | Legacy Apple Mail automation remains unchanged; separate Thunderbird-local support is not a privacy-host migration. |
|
|
| SpeechTranscriber live/file flows | Separate local service | Not part of the native privacy host. |
|
|
| Codex/Gemini image generation | Out of scope | Creative/external-service work, not privacy-host scope. |
|
|
|
|
## Cutover rule
|
|
|
|
MacMiniMCP remains active. It may be retired only after a live caller inventory and validation matrix establish full replacement coverage and the owner explicitly approves cutover.
|