{
  "$comment": "Single source of truth for EcoCloud capability status, so humans, agents, and docs read one honest map. status = live | beta | planned. Published at /data/capabilities.json. When a capability ships, flip its status here (and add its endpoint) — surfaces should reference this file rather than re-asserting claims.",
  "updated": "2026-07-02",
  "legend": {
    "live": "implemented and callable now",
    "beta": "callable but may change",
    "planned": "advertised intent, not yet implemented"
  },
  "capabilities": [
    {
      "key": "tasks_api",
      "label": "Agent task read/write over REST + MCP",
      "status": "live",
      "endpoint": "/api/v1/agent/tasks"
    },
    {
      "key": "mcp_server",
      "label": "MCP server (streamable-HTTP)",
      "status": "live",
      "endpoint": "/mcp"
    },
    {
      "key": "scoped_keys",
      "label": "Scoped, per-key rate-limited, audited keys",
      "status": "live",
      "endpoint": "/api/v1/agent/tasks"
    },
    {
      "key": "constitution",
      "label": "Machine-readable workspace constitution gate",
      "status": "live"
    },
    {
      "key": "oauth",
      "label": "OAuth 2.1 for agents",
      "status": "live",
      "endpoint": "/.well-known/oauth-protected-resource"
    },
    {
      "key": "state_balance_proof",
      "label": "Stateless signed state-balance proof",
      "status": "live",
      "endpoint": "/api/v1/agent/proof"
    },
    {
      "key": "conditional_delegation",
      "label": "Time-boxed / aggregate-capped auto-approval",
      "status": "live"
    },
    {
      "key": "webhooks",
      "label": "Signed outbound webhooks + deliveries",
      "status": "live"
    },
    {
      "key": "semantic_search",
      "label": "Vector + hybrid task search",
      "status": "live"
    },
    {
      "key": "trust_kernels",
      "label": "Deterministic policy kernels + Merkle audit",
      "status": "live",
      "endpoint": "/kernel/"
    },
    {
      "key": "readiness",
      "label": "DB-probing readiness + health endpoints",
      "status": "live",
      "endpoint": "/api/v1/ready"
    },
    {
      "key": "metrics",
      "label": "Prometheus metrics (availability + DB probe)",
      "status": "live",
      "endpoint": "/api/v1/metrics"
    },
    {
      "key": "openapi",
      "label": "OpenAPI 3.1 contract + API reference",
      "status": "live",
      "endpoint": "/openapi.json"
    },
    {
      "key": "knowledge",
      "label": "Knowledge bundle (OKF) — agent-readable workspace context",
      "status": "live",
      "endpoint": "/knowledge/okf/manifest.json"
    },
    {
      "key": "imports_csv",
      "label": "Import via CSV — auto-detect source + column map + preview (ClickUp/Asana/Notion/Linear or any export)",
      "status": "live"
    },
    {
      "key": "imports_api",
      "label": "Native one-click OAuth import",
      "status": "planned",
      "endpoint": "/api/v1/imports"
    },
    {
      "key": "stripe_checkout",
      "label": "Self-serve Stripe checkout",
      "status": "planned",
      "endpoint": "/api/v1/checkout"
    },
    {
      "key": "outlook_addin",
      "label": "Outlook add-in (governed dispatch from email)",
      "status": "planned",
      "endpoint": "https://app.ecoclouddev.com/add-ins/outlook/taskpane.html"
    },
    {
      "key": "sso_saml",
      "label": "Enterprise SSO (SAML 2.0) — pilot program, activated per customer",
      "status": "planned",
      "endpoint": "/enterprise/"
    }
  ]
}