@condorinst/mobile-bridge 0.19.0 → 0.19.1

package/CHANGELOG.md

@@ -7,6 +7,27 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.19.1] — 2026-09-22
+
+### Changed
+
+- **`limits.maxDevicesPerUser` now states the commercial rule without dressing
+  it up as a platform guarantee.** It was `null` with a note saying no cap
+  exists, which was accurate about the app and unhelpful about what a client
+  will actually see. It is now an object: `enforcedByApp: false`,
+  `currentProductLimit: 2`, and guidance saying explicitly not to hard-code
+  two.
+
+  The distinction is the whole point. The Canvas app enforces no cap — no code
+  path rejects a third device. A commercial rule currently limits a user to two
+  linked devices, and it can be raised with no change to this contract, to the
+  app, or to any version a client could check. A two-slot UI with the slots
+  hard-coded looks correct for as long as the rule holds and breaks silently on
+  the day it does not.
+
+  `docs/limits.md` and the `UserDevicePayload` TSDoc carry the same framing.
+
+
 ## [0.19.0] — 2026-09-22
 
 Documentation release: the package is now consumable by an AI agent building a

package/contract/bridge-contract.json

@@ -1,12 +1,12 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "contractVersion": "0.19.0",
+  "contractVersion": "0.19.1",
   "description": "Machine-readable contract of the Condor Canvas JS<->Native bridge. It states what the TypeScript declarations in dist/index.d.ts cannot express: which keys and commands a sandboxed client can actually reach, which ones need human confirmation, where messages are dropped in silence, the hard limits, and which capability each native version carries. The TypeScript types remain canonical for payload shapes.",
   "audience": "Developers and AI agents building the client bundle that renders inside the Canvas Home.",
 
   "versions": {
     "note": "Four independent numbers coexist. Only nativeVersion tells you what the device can do.",
-    "package": "0.19.0",
+    "package": "0.19.1",
     "shellVersion": "0.6.0",
     "clientProtocolVersion": "0.5.0",
     "nativeVersion": "0.16.0",
@@ -35,8 +35,12 @@
       "nativeVersionRelay": 2000
     },
     "presignedBundleUrlTtlSeconds": 86400,
-    "maxDevicesPerUser": null,
-    "maxDevicesPerUserNote": "Not enforced anywhere in the Canvas app. If a cap exists it is a backend/product rule. Do not assume one."
+    "maxDevicesPerUser": {
+      "enforcedByApp": false,
+      "currentProductLimit": 2,
+      "stability": "commercial rule, may change without a contract version bump",
+      "guidance": "Today a user can link at most two devices, so design for a short list rather than a virtualised one. Do NOT hard-code two: the cap is a commercial rule, not a platform invariant, and raising it requires no change to this contract or to the app. Render whatever userDevice delivers and read its length."
+    }
   },
 
   "storage": {

package/dist/index.d.cts

@@ -233,7 +233,9 @@ interface PingPongPayload {
  * `toMap()` on the Dart side (device config, telemetry, user config), and
  * strict typing for them is deferred until a client needs it.
  *
- * There is no device cap in the app. Do not assume this list is bounded.
+ * The app enforces no device cap. A commercial rule currently limits a user to
+ * two linked devices, but that can change with no signal in this contract — read
+ * the length of the array rather than hard-coding it.
  */
 interface UserDevicePayload {
     lastUpdate: number;

package/dist/index.d.ts

@@ -233,7 +233,9 @@ interface PingPongPayload {
  * `toMap()` on the Dart side (device config, telemetry, user config), and
  * strict typing for them is deferred until a client needs it.
  *
- * There is no device cap in the app. Do not assume this list is bounded.
+ * The app enforces no device cap. A commercial rule currently limits a user to
+ * two linked devices, but that can change with no signal in this contract — read
+ * the length of the array rather than hard-coding it.
  */
 interface UserDevicePayload {
     lastUpdate: number;

package/docs/limits.md

@@ -104,8 +104,17 @@ Verified at `shell.template.html:28`.
 
 ## Devices
 
-There is **no device cap in the Canvas app**. A search for `maxDevices` or
-`deviceLimit` across the app returns nothing. If your product has a limit, it
-comes from the backend or from commercial terms — not from this platform. Do
-not hard-code one, and do not assume the roster you receive is complete or
-bounded.
+Two things are true at once here, and conflating them is how this goes wrong.
+
+**The platform enforces nothing.** A search for `maxDevices` or `deviceLimit`
+across the Canvas app returns nothing. No code path rejects a third device.
+
+**The current commercial rule caps a user at two linked devices.** That is a
+product decision, not a platform invariant. It can be raised without any change
+to this contract, to the app, or to a version number you could check.
+
+So: design for a short list rather than a virtualised one — two cards will be
+the common case — but **read the length of the roster you receive** and let the
+layout grow. A two-slot UI with the slots hard-coded is the failure this section
+exists to prevent: it will look correct for as long as the rule holds, and break
+silently on the day it does not.

package/llms.txt

@@ -7,7 +7,7 @@
 > pagination, permissions, system status and language.
 
 Every URL below is plain text over HTTPS, pinned to a released version, and
-needs no authentication. Replace `0.19.0` with the version you depend on; the
+needs no authentication. Replace `0.19.1` with the version you depend on; the
 contract changes between minors while the package is below 1.0.0.
 
 The same files ship inside the npm tarball, so if you have run
@@ -16,27 +16,27 @@ The same files ship inside the npm tarball, so if you have run
 
 ## Start here
 
-- [AGENTS.md](https://cdn.jsdelivr.net/npm/@condorinst/mobile-bridge@0.19.0/AGENTS.md): The contract in one screen — hard rules, what is unreachable, and the validation loop. Read before writing code.
-- [Agent guide](https://cdn.jsdelivr.net/npm/@condorinst/mobile-bridge@0.19.0/docs/agent-guide.md): Step-by-step construction of a client Home, with the checks to run at each stage.
+- [AGENTS.md](https://cdn.jsdelivr.net/npm/@condorinst/mobile-bridge@0.19.1/AGENTS.md): The contract in one screen — hard rules, what is unreachable, and the validation loop. Read before writing code.
+- [Agent guide](https://cdn.jsdelivr.net/npm/@condorinst/mobile-bridge@0.19.1/docs/agent-guide.md): Step-by-step construction of a client Home, with the checks to run at each stage.
 
 ## Reference
 
-- [Bridge contract](https://cdn.jsdelivr.net/npm/@condorinst/mobile-bridge@0.19.0/docs/bridge-contract.md): Every observable key, every command, the three error shapes, and the capability matrix by native version.
-- [Machine-readable contract](https://cdn.jsdelivr.net/npm/@condorinst/mobile-bridge@0.19.0/contract/bridge-contract.json): The same contract as JSON. Also importable as `@condorinst/mobile-bridge/contract`.
-- [Limits](https://cdn.jsdelivr.net/npm/@condorinst/mobile-bridge@0.19.0/docs/limits.md): Every hard limit — payload size, rate limits, bundle size, timeouts — with what happens when you cross it.
-- [Troubleshooting](https://cdn.jsdelivr.net/npm/@condorinst/mobile-bridge@0.19.0/docs/troubleshooting.md): Why a command did nothing. Silence is the platform's dominant failure mode.
-- [TypeScript declarations](https://cdn.jsdelivr.net/npm/@condorinst/mobile-bridge@0.19.0/dist/index.d.ts): Authoritative payload shapes, with documentation on every member.
+- [Bridge contract](https://cdn.jsdelivr.net/npm/@condorinst/mobile-bridge@0.19.1/docs/bridge-contract.md): Every observable key, every command, the three error shapes, and the capability matrix by native version.
+- [Machine-readable contract](https://cdn.jsdelivr.net/npm/@condorinst/mobile-bridge@0.19.1/contract/bridge-contract.json): The same contract as JSON. Also importable as `@condorinst/mobile-bridge/contract`.
+- [Limits](https://cdn.jsdelivr.net/npm/@condorinst/mobile-bridge@0.19.1/docs/limits.md): Every hard limit — payload size, rate limits, bundle size, timeouts — with what happens when you cross it.
+- [Troubleshooting](https://cdn.jsdelivr.net/npm/@condorinst/mobile-bridge@0.19.1/docs/troubleshooting.md): Why a command did nothing. Silence is the platform's dominant failure mode.
+- [TypeScript declarations](https://cdn.jsdelivr.net/npm/@condorinst/mobile-bridge@0.19.1/dist/index.d.ts): Authoritative payload shapes, with documentation on every member.
 
 ## Guides
 
-- [Client guide](https://cdn.jsdelivr.net/npm/@condorinst/mobile-bridge@0.19.0/docs/client-guide.md): Narrative walkthrough for a developer building the Home by hand.
-- [Pilot onboarding](https://cdn.jsdelivr.net/npm/@condorinst/mobile-bridge@0.19.0/docs/pilot-onboarding.md): Checklist from zero to a bundle delivered to Condor.
-- [README](https://cdn.jsdelivr.net/npm/@condorinst/mobile-bridge@0.19.0/README.md): Package overview, install, quickstart.
-- [CHANGELOG](https://cdn.jsdelivr.net/npm/@condorinst/mobile-bridge@0.19.0/CHANGELOG.md): When each capability was introduced. The most precise record of what a given native version supports.
+- [Client guide](https://cdn.jsdelivr.net/npm/@condorinst/mobile-bridge@0.19.1/docs/client-guide.md): Narrative walkthrough for a developer building the Home by hand.
+- [Pilot onboarding](https://cdn.jsdelivr.net/npm/@condorinst/mobile-bridge@0.19.1/docs/pilot-onboarding.md): Checklist from zero to a bundle delivered to Condor.
+- [README](https://cdn.jsdelivr.net/npm/@condorinst/mobile-bridge@0.19.1/README.md): Package overview, install, quickstart.
+- [CHANGELOG](https://cdn.jsdelivr.net/npm/@condorinst/mobile-bridge@0.19.1/CHANGELOG.md): When each capability was introduced. The most precise record of what a given native version supports.
 
 ## Examples
 
-- [Minimal home](https://cdn.jsdelivr.net/npm/@condorinst/mobile-bridge@0.19.0/examples/minimal-home/src/main.ts): A complete, working client in ~160 lines. Copy this as your starting point.
+- [Minimal home](https://cdn.jsdelivr.net/npm/@condorinst/mobile-bridge@0.19.1/examples/minimal-home/src/main.ts): A complete, working client in ~160 lines. Copy this as your starting point.
 
 ## Optional
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@condorinst/mobile-bridge",
-  "version": "0.19.0",
+  "version": "0.19.1",
   "description": "TypeScript SDK for the JS↔Native bridge of the Condor white-label mobile app.",
   "license": "SEE LICENSE IN LICENSE",
   "private": false,