@mapier/imsg-sdk 0.5.0 → 0.7.0

package/docs/interactions.md

@@ -136,17 +136,20 @@ corrections changed which kinds `agentUsable()` returns.
   Flagged as the catalog's highest-value unbuilt seam: richer than any `native-balloon` kind,
   with `web-surface`'s zero install cost.
 - **`host-extension-card`** — renamed from an earlier draft's `extension-card`. `tier:
-  'extension'`, `requiresRecipientInstall: true`, `status: 'unbuilt'`. Modeled on Photon's
-  Spectrum host-extension pattern (cited above) — external product, cited as provenance. The
-  2026-07-14 spike (`imsg-agent` `docs/parking-lot.md`, cross-repo context) already ran and
-  returned a **verdict against building a bespoke per-feature extension**: Apple's own
-  `MSMessageLiveLayout` docs confirm a live/interactive card only renders on a device with the
-  *sending* extension installed, and there is no reverse-engineering precedent anywhere
-  (BlueBubbles/mautrix/jesec/Project Zero) for injecting a third-party extension balloon via
-  private API. The host model doesn't remove the install wall — it only amortizes it across
-  every future mini-app instead of paying it per card, which is a real difference in economics
-  but not in Apple's gate. `status` stays `unbuilt`; unlike the `app-clip` seam, this one is not
-  currently prioritized. `fallback: 'web-url'`.
+  'extension'`, `requiresRecipientInstall: true`, `outbound: 'agent'`, `status: 'fake-only'`.
+  Modeled on Photon's Spectrum host-extension pattern (cited above) — external product, cited as
+  provenance. **No longer an unbuilt seam** (M2B-46): `Gateway.sendExtensionCard` sends a card
+  for a third-party iMessage app extension and updates it in place, which is exactly the
+  injection the 2026-07-14 spike found no precedent for. That spike's verdict is **overturned on
+  the mechanism, upheld on the wall**: a Mac-injected card for a non-Apple extension was observed
+  on real phones on 2026-09-20 sending, delivering, drawing, and opening the installed app
+  in-thread — but Apple's gate is exactly where `MSMessageLiveLayout` said it was. With the app
+  installed the extension draws the card itself; with `liveLayout:false` the recipient sees the
+  app's icon beside *our* caption; without the app they get a small static card (App Store link
+  only when `appStoreId` is supplied). So the host model still amortizes the install across every
+  future mini-app rather than removing it. `status` is `fake-only`, not `host-smoked`: the SDK
+  verb has only been exercised against `FakeGateway` and its unit tests — the host run is
+  pending, which is why this row stays out of `agentUsable()`. `fallback: 'web-url'`.
 
 ## Adding a kind
 
@@ -163,14 +166,13 @@ Mirrors `docs/gateway-contract.md` §4's contributor discipline:
    `InteractionRegistry`/`InteractionHarness`.
 4. **This doc.** Update the row's writeup here with the citation.
 
-A row may enter the catalog as `status: 'unbuilt'` only as a documented seam — e.g. `app-clip`,
-`host-extension-card` — never as a placeholder for something already claimed to work elsewhere
-(the mistake the original `poll` and `effect` drafts made).
+A row may enter the catalog as `status: 'unbuilt'` only as a documented seam — e.g. `app-clip` —
+never as a placeholder for something already claimed to work elsewhere (the mistake the original
+`poll` and `effect` drafts made).
 
 ## Unbuilt seams: priority note
 
-`app-clip` (zero-install, native, richer than any balloon) is the highest-value unbuilt lever in
-this catalog. `host-extension-card` (real MSMessages host extension) stays cataloged as a
-documented, deliberately `unbuilt` seam — the 2026-07-14 spike found the install wall real and
-not currently worth paying for a bespoke extension — but is not prioritized the way `app-clip`
-is.
+`app-clip` (zero-install, native, richer than any balloon) is now the only unbuilt row left, and
+the highest-value lever in this catalog. `host-extension-card` left this list in M2B-46: the
+mechanism is built (`Gateway.sendExtensionCard`) and climbing the ladder — `fake-only` until the
+host run — rather than deliberately unbuilt.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mapier/imsg-sdk",
-  "version": "0.5.0",
+  "version": "0.7.0",
   "description": "TypeScript SDK for iMessage automation on macOS: the Gateway contract, ImsgGateway (real), and a device-free FakeGateway.",
   "license": "MIT",
   "repository": {