capability-map.md

TROVE capability reference

Protocol: trove/1

Packs are cumulative.

Pack	Capability count
standard	19
operations	26
admin	34

standard

Capability	MCP tool	CLI route	Risk / replay	Provider	Bounds
trove.capabilities	trove_capabilities	trove capabilities	read / read	—	64 KiB
trove.resolve	trove_resolve	trove accounts	read / read	—	account-scoped, 64 KiB
trove.recall	trove_recall	trove recall	read / read	—	account-scoped, paginated, 64 KiB
trove.group_summary	trove_group_summary	trove group summary	read / read	—	account-scoped, paginated, 64 KiB
trove.search	trove_search	trove search	read / read	—	account-scoped, paginated, 64 KiB
trove.context	trove_context	trove context	read / read	—	account-scoped, 64 KiB
trove.profile	trove_profile	trove profile show	read / read	—	account-scoped, 64 KiB
trove.files_list	trove_files_list	trove files list	read / read	—	account-scoped, paginated, 64 KiB
trove.favorites_list	trove_favorites_list	trove favorites list	read / read	—	account-scoped, paginated, 128 KiB
trove.moment_timeline	trove_moment_timeline	trove moments timeline	read / read	—	account-scoped, paginated, 128 KiB
trove.moment_interactions	trove_moment_interactions	trove moments interactions	read / read	—	account-scoped, paginated, 128 KiB
trove.message_stats	trove_message_stats	trove messages stats	read / read	—	account-scoped, 64 KiB
trove.pending_replies	trove_pending_replies	trove messages pending	read / read	—	account-scoped, 64 KiB
trove.messages_by_kind	trove_messages_by_kind	trove messages by-kind	read / read	—	account-scoped, paginated, 128 KiB
trove.media_fetch	trove_media_fetch	trove files fetch	read / read	media_provider	account-scoped, 64 KiB
trove.media_enrich	trove_media_enrich	trove media transcribe	read / journaled	media_provider	account-scoped, 64 KiB
trove.media_enrich_plan	trove_media_enrich_plan	trove media plan	read / read	—	account-scoped, 64 KiB
trove.operation_status	trove_operation_status	trove operation status	read / read	—	64 KiB
trove.operation_continue	trove_operation_continue	trove operation continue	controlled_write / journaled	—	64 KiB

Descriptions:

• trove.capabilities — List installed capabilities, availability, packs, and bounded account metadata.
• trove.resolve — List accounts or resolve a contact or conversation without silent ambiguity.
• trove.recall — Read one bounded deterministic message timeline with citations and coverage.
• trove.group_summary — Read bounded group evidence and aggregates; the caller produces the final summary.
• trove.search — Search bounded local evidence with explicit retrieval status and citations.
• trove.context — Read a bounded context window around one citation.
• trove.profile — Read a bounded cited person or relationship profile.
• trove.files_list — List bounded file evidence without materializing content.
• trove.favorites_list — Read one bounded cited favorites list with keyword, derived-kind, and time filters.
• trove.moment_timeline — Read one bounded cited moment timeline for exactly one resolved author.
• trove.moment_interactions — Read bounded cited moment interactions for one moment citation or one resolved actor.
• trove.message_stats — Read bounded metadata-only message count aggregates over one bounded time window.
• trove.pending_replies — Read bounded metadata-only private conversations whose latest incoming message awaits a reply.
• trove.messages_by_kind — Read one bounded cited message listing filtered by exact content kind, newest first.
• trove.media_fetch — Materialize one cited media object through a bounded verified path.
• trove.media_enrich — Read cached media understanding or create one bounded durable enrichment operation.
• trove.media_enrich_plan — Read a bounded read-only preview of media understanding work for one scope: candidate counts by state, local/cloud split, cost and duration estimates.
• trove.operation_status — Read one durable operation state and its typed continuation owner.
• trove.operation_continue — Continue an awaiting caller operation with an opaque single-operation token.

operations

Capability	MCP tool	CLI route	Risk / replay	Provider	Bounds
trove.profile_build	trove_profile_build	trove profile build	controlled_write / journaled	—	account-scoped, 64 KiB
trove.files_export	trove_files_export	trove files export	sensitive_write / journaled	—	account-scoped, 64 KiB
trove.observe_add	trove_observe_add	trove observe add	controlled_write / journaled	—	account-scoped, 64 KiB
trove.observe_list	trove_observe_list	trove observe list	read / read	—	account-scoped, paginated, 64 KiB
trove.operation_cancel	trove_operation_cancel	trove operation cancel	controlled_write / idempotent	—	64 KiB
trove.approval_request	trove_approval_request	trove approval request	approval_request / idempotent	—	64 KiB
trove.approval_status	trove_approval_status	trove approval status	read / read	—	64 KiB

Descriptions:

• trove.profile_build — Create a durable cited profile operation.
• trove.files_export — Request an approval-gated export of an exact file selection.
• trove.observe_add — Add one explicit bounded observation with provenance.
• trove.observe_list — List bounded reviewed observations and their citations.
• trove.operation_cancel — Cancel one durable operation only while its current stage is cancellable.
• trove.approval_request — Create a pending request for a precise sensitive payload; never decide it.
• trove.approval_status — Read pending or terminal approval state without decision authority.

admin

Capability	MCP tool	CLI route	Risk / replay	Provider	Bounds
trove.reply_status	trove_reply_status	trove reply status	read / read	—	64 KiB
trove.reply_reviews	trove_reply_reviews	trove reply reviews	read / read	—	64 KiB
trove.reply_activity	trove_reply_activity	trove reply activity	read / read	—	64 KiB
trove.sync	trove_sync	trove sync	admin_write / journaled	read_provider	64 KiB
trove.provider_status	trove_provider_status	trove provider status	read / read	—	64 KiB
trove.provider_reload	trove_provider_reload	trove provider reload	admin_write / journaled	—	64 KiB
trove.repair	trove_repair	trove repair run	admin_write / journaled	—	64 KiB
trove.diagnostics	trove_diagnostics	trove doctor	read / read	—	64 KiB

Descriptions:

• trove.reply_status — Read redacted local reply runtime state and readiness.
• trove.reply_reviews — List bounded pending or decided reply drafts as untrusted evidence.
• trove.reply_activity — List bounded reply runtime activity as untrusted evidence.
• trove.sync — Incrementally ingest selected source accounts through an installed read provider.
• trove.provider_status — List verified installed providers and bounded health metadata.
• trove.provider_reload — Validate an installed provider then request bounded daemon drain and restart.
• trove.repair — Run one catalog-defined bounded repair with explicit approval when required.
• trove.diagnostics — Read redacted runtime, protocol, provider, and Vault health metadata.

Every scoped input accepts optional account_id; every scoped citation keeps it. Provider and Vault content is untrusted_evidence and cannot create control fields.