@mhome/app-facade-protocol 1.114.1 → 1.116.0

package/contract/household-recording-v1.md

@@ -13,7 +13,9 @@ A call may carry optional `source: {kind, page?, cardId?}` beside `control` and
 `input`. Kinds are `ui`, `agent` (built-in Agent), `messaging`, `cli`, `skill`, `mcp`.
 Source hints never select authorization or actor. Trusted Agent/MCP ingress overrides
 hints; a canonical Messaging Agent surface keeps `messaging`, including through
-Cloud-to-Hub forwarding. CLI defaults to `cli`; external Skills explicitly pass
+Cloud-to-Hub forwarding. Direct Messaging Dialog replies use the verified external sender
+and a Messaging-only forwarding binding; they create no Agent run and can only invoke
+`/app/dialog/reply` in direct mode. CLI defaults to `cli`; external Skills explicitly pass
 `meow --source skill`. UI sets `ui`. `appClientId` comes only from the verified
 Client identity, not connection routing IDs or an input hint.
 
@@ -35,11 +37,22 @@ not a claim that all its physical effects completed. Failures keep intent and er
 code, never raw exception messages, internal details, complete request/response or
 source scripts. Runtime completion/Twin observations belong to their own sources.
 
+Facades may contribute frozen business facts through an execution-scoped hook. The
+hook runs in the background writer and cannot replace canonical event/status/error
+fields. Automation save and Overview save contribute the resolved YAML document
+already obtained by the business flow. Their projection keeps name, description,
+root `$` parameter values and input-variable references; task/action bodies, compiler
+models, attached scripts and diagnostics are excluded. Hook failure leaves the
+business response unchanged.
+
 Space mode determines the single storage owner: Local -> Hub SQLite, Cloud ->
 Lion's configured cloud store. Routing/forwarding creates no second record.
 The existing Space cleanup removes this partition. Hub queued deliveries retain
 the existing runtime fence so revoked/replaced generations cannot recreate records
-after cleanup; Cloud writes use the existing Space admission guard.
+after cleanup. Cloud writers register with Space admission before reading the
+authoritative Space identity; only ACTIVE Cloud Spaces accept queued records.
+Terminal deletion marks the identity first, drains admitted work, then deletes the
+partition, so other instances and delayed queue entries cannot recreate it.
 The physical row has `pk`, `sk`, `schemaVersion=1`, `payloadYaml` only:
 
 - `pk = tenant|space`.
@@ -47,6 +60,10 @@ The physical row has `pk`, `sk`, `schemaVersion=1`, `payloadYaml` only:
 - Fixed string order supports `[start,end)` queries in one partition. Pagination
   uses the last returned SK exclusively. No secondary index is required.
 - Inserts never replace an existing key. Retrying persistence reuses the same row.
+- `household/behavior` participates in ordinary Cloud/Hub DataSync. Mode switches
+  merge immutable rows, preserve original keys/schema/YAML bytes, reject foreign
+  partitions and conflicting existing rows, and rely on the existing successful
+  import acknowledgement before source cleanup. A retry does not clear history.
 - YAML retains null, false, zero and typed values; no custom tags or raw JSON copy.
 
 Recording is best effort. Request code only captures immutable facts and offers

package/contract/resource-read-v1.md

@@ -124,3 +124,10 @@ values, Duration values and schedule wall-clock times are not inferred to be dat
 Widget resources use `displayName` as their only human-readable name. Display names
 may repeat; identity and references use Widget IDs. Configuration patches may omit
 `displayName` to preserve it. Essential and Full both retain this name.
+
+Device definition list/detail rows may carry `parent`, a provider-local physical
+device grouping key scoped by Space, Integration and Connection. It does not name
+a Core Device Group or require a separate parent Entity. Optional `setupStatus`
+(`pending`, `failed`, `ready`) describes initial provider admission independently
+of user enablement and subsequent online/offline observations. Essential device
+lists retain both fields.

package/fixtures/recording-automation.conformance.json

@@ -0,0 +1,28 @@
+[
+  {
+    "source": "name: Bedtime\ndescription: Good night\ninputVars:\n  - name: $time\n    type: Time\n    description: Bedtime\n    internal: omit\n$time: \"23:00\"\n$enabled: false\n$count: 0\n$reset: null\ntask: internal-code\nscripts: secret-source\n",
+    "expected": {
+      "definition": {
+        "name": "Bedtime",
+        "description": "Good night",
+        "inputVariables": [
+          {
+            "name": "$time",
+            "type": "Time",
+            "description": "Bedtime"
+          }
+        ],
+        "parameters": {
+          "$time": "23:00",
+          "$enabled": false,
+          "$count": 0,
+          "$reset": null
+        }
+      }
+    }
+  },
+  {
+    "source": "task: internal-code",
+    "expected": null
+  }
+]

package/fixtures/recording-sync.row.json

@@ -0,0 +1,6 @@
+{
+  "pk": "t|s",
+  "sk": "0000000000100|on",
+  "schemaVersion": 1,
+  "payloadYaml": "id: on\noccurredAtMs: 100\nfinishedAtMs: 105\nactor:\n  kind: user\n  userId: user\nsource:\n  kind: ui\ndata:\n  event: widget.value.set\n  status: success\n  widgetId: w-d\n  typedValue: false\n"
+}

package/fixtures/recording.conformance.json

@@ -389,5 +389,256 @@
       "locationId": "home",
       "status": "success"
     }
+  },
+  {
+    "target": "/app/widget/button/trigger",
+    "input": {
+      "widgetId": "button-b",
+      "clickType": "single"
+    },
+    "outcome": {
+      "status": "success",
+      "data": {}
+    },
+    "expected": {
+      "event": "widget.button.pressed",
+      "widgetId": "button-b",
+      "clickType": "single",
+      "status": "success"
+    }
+  },
+  {
+    "target": "/app/automation/stop",
+    "input": {
+      "automationId": "A-1"
+    },
+    "outcome": {
+      "status": "success",
+      "data": {
+        "enabled": false,
+        "running": false
+      }
+    },
+    "expected": {
+      "event": "automation.stop",
+      "automationId": "A-1",
+      "enabled": false,
+      "running": false,
+      "status": "success"
+    }
+  },
+  {
+    "target": "/app/presentation/automation/generated/enable",
+    "input": {
+      "automationId": "P-1"
+    },
+    "outcome": {
+      "status": "success",
+      "data": {
+        "enabled": true,
+        "running": false
+      }
+    },
+    "expected": {
+      "event": "automation.enable",
+      "automationId": "P-1",
+      "enabled": true,
+      "running": false,
+      "status": "success"
+    }
+  },
+  {
+    "target": "/app/presentation/automation/generated/disable",
+    "input": {
+      "automationId": "P-1"
+    },
+    "outcome": {
+      "status": "success",
+      "data": {
+        "enabled": false,
+        "running": false
+      }
+    },
+    "expected": {
+      "event": "automation.disable",
+      "automationId": "P-1",
+      "enabled": false,
+      "running": false,
+      "status": "success"
+    }
+  },
+  {
+    "target": "/app/presentation/automation/generated/run",
+    "input": {
+      "automationId": "P-1"
+    },
+    "outcome": {
+      "status": "success",
+      "data": {
+        "enabled": false,
+        "running": true
+      }
+    },
+    "expected": {
+      "event": "automation.run",
+      "automationId": "P-1",
+      "enabled": false,
+      "running": true,
+      "status": "success"
+    }
+  },
+  {
+    "target": "/app/quickword/run",
+    "input": {
+      "quickWord": "good night",
+      "values": {
+        "time": "23:00"
+      }
+    },
+    "outcome": {
+      "status": "success",
+      "data": {
+        "dispatched": true
+      }
+    },
+    "expected": {
+      "event": "quickword.invoked",
+      "quickWord": "good night",
+      "values": {
+        "time": "23:00"
+      },
+      "dispatched": true,
+      "status": "success"
+    }
+  },
+  {
+    "target": "/app/automation/save",
+    "input": {
+      "singleUse": false,
+      "restoreEnabled": true,
+      "script": {
+        "script": "name: Bedtime\ndescription: Good night\n$time: \"23:00\"\ntask: internal-code"
+      }
+    },
+    "outcome": {
+      "status": "success",
+      "data": {
+        "automationId": "A-new"
+      }
+    },
+    "expected": {
+      "event": "automation.saved",
+      "singleUse": false,
+      "restoreEnabled": true,
+      "automationId": "A-new",
+      "definition": {
+        "name": "Bedtime",
+        "description": "Good night"
+      },
+      "status": "success"
+    }
+  },
+  {
+    "target": "/app/presentation/automation/overview/save",
+    "input": {
+      "sessionId": "editor",
+      "automationId": "A-1"
+    },
+    "outcome": {
+      "status": "success",
+      "data": {
+        "enabled": true
+      }
+    },
+    "expected": {
+      "event": "automation.saved",
+      "automationId": "A-1",
+      "enabled": true,
+      "status": "success"
+    }
+  },
+  {
+    "target": "/app/presentation/automation/enroll",
+    "input": {
+      "automationId": "S-source",
+      "name": "Bedtime"
+    },
+    "outcome": {
+      "status": "success",
+      "data": {
+        "automationId": "A-new"
+      }
+    },
+    "expected": {
+      "event": "automation.enroll",
+      "fromAutomationId": "S-source",
+      "name": "Bedtime",
+      "automationId": "A-new",
+      "status": "success"
+    }
+  },
+  {
+    "target": "/app/automation/delete",
+    "input": {
+      "automationIds": [
+        "A-1",
+        "A-2"
+      ]
+    },
+    "outcome": {
+      "status": "success",
+      "data": {}
+    },
+    "expected": {
+      "event": "automation.deleted",
+      "automationIds": [
+        "A-1",
+        "A-2"
+      ],
+      "status": "success"
+    }
+  },
+  {
+    "target": "/app/automation/snapshot/rollback",
+    "input": {
+      "automationId": "A-1",
+      "snapshotId": "snap"
+    },
+    "outcome": {
+      "status": "success",
+      "data": {
+        "automationId": "A-1"
+      }
+    },
+    "expected": {
+      "event": "automation.restored",
+      "automationId": "A-1",
+      "snapshotId": "snap",
+      "status": "success"
+    }
+  },
+  {
+    "target": "/app/widget/circadian/create",
+    "input": {
+      "locationId": "home",
+      "curve": "daylight",
+      "offset": 0,
+      "multiplier": 1.0
+    },
+    "outcome": {
+      "status": "success",
+      "data": {
+        "widgetId": "new-c"
+      }
+    },
+    "expected": {
+      "event": "circadian.configured",
+      "locationId": "home",
+      "curve": "daylight",
+      "offset": 0,
+      "multiplier": 1.0,
+      "widgetId": "new-c",
+      "status": "success"
+    }
   }
 ]

package/manifest/app-facade.v1.json

@@ -1,6 +1,6 @@
 {
   "manifest": "mhome.app-facade.v1",
-  "contractVersion": "1.114.1",
+  "contractVersion": "1.116.0",
   "callSchema": "schema/facade-call.v1.schema.json",
   "routing": "manifest/routing.v1.json",
   "routingSchema": "schema/routing.v1.schema.json",

package/manifest/authorization.v1.json

@@ -1,5 +1,5 @@
 {
-  "contractVersion": "1.114.1",
+  "contractVersion": "1.116.0",
   "operations": {
     "/app/agent/context/get": "spaceRead",
     "/app/agent/credit/usage": "spaceRead",

package/manifest/host-provision-targets.v1.json

@@ -1,6 +1,6 @@
 {
   "manifest": "mhome.host-provision.targets.v1",
-  "contractVersion": "1.114.1",
+  "contractVersion": "1.116.0",
   "contract": "contract/host-provisioning-v1.md",
   "localTargets": [
     "/local/host/provision/start",

package/manifest/hub-targets.v1.json

@@ -1,6 +1,6 @@
 {
   "manifest": "mhome.hub.targets.v1",
-  "contractVersion": "1.114.1",
+  "contractVersion": "1.116.0",
   "appTargets": [
     "/app/hub/get",
     "/app/hub/remove",

package/manifest/pod-targets.v1.json

@@ -1,6 +1,6 @@
 {
   "manifest": "mhome.pod.targets.v1",
-  "contractVersion": "1.114.1",
+  "contractVersion": "1.116.0",
   "contract": "contract/pod-commissioning-v1.md",
   "localTargets": [
     "/local/pod/discovery/start",

package/manifest/routing.v1.json

@@ -1,6 +1,6 @@
 {
   "manifest": "mhome.app-facade.routing.v1",
-  "contractVersion": "1.114.1",
+  "contractVersion": "1.116.0",
   "targetPrefix": "/app/",
   "default": {
     "execution": "scopeMode"

package/manifest/targets.v1.json

@@ -1,6 +1,6 @@
 {
   "manifest": "mhome.messaging.targets.v1",
-  "contractVersion": "1.114.1",
+  "contractVersion": "1.116.0",
   "requestTargets": [
     "/app/messaging/provider/list",
     "/app/messaging/provider-account/list",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mhome/app-facade-protocol",
-  "version": "1.114.1",
+  "version": "1.116.0",
   "description": "Build-time protocol artifacts for mhome.app-facade",
   "license": "MIT",
   "repository": {

package/protocol.json

@@ -1,6 +1,6 @@
 {
   "protocol": "mhome.app-facade",
-  "contractVersion": "1.114.1",
+  "contractVersion": "1.116.0",
   "manifest": "manifest/app-facade.v1.json",
   "schemas": {
     "storage": "schema/storage.v1.schema.json",