@mhome/app-facade-protocol 1.34.0 → 1.34.1

package/contract/pod-commissioning-v1.md

@@ -282,8 +282,17 @@ and unexpired pending pods, each
   channel. Either close only ends that connection; whether the pod is revoked
   is decided by its next refresh.
 - `/api/v1/hub/token/exchange` with a pod access token returns a Hub JWT with
-  `clientKind` = `pod` and `podId` claims and a 24-hour lifetime. Hub JWTs for
-  user tokens are unchanged.
+  `clientKind` = `pod` and `podId` claims and the same lifetime as a Hub JWT
+  for a user token.
+- Revoking a pod credential, by any path, also revokes the pod on the Hubs of
+  its user's local Spaces. Before committing the revocation Lion marks the
+  `scope.pods` resource dirty for each such Space; after it commits, Lion
+  notifies the Hub through the pull-sync contract. A Hub that is offline pulls
+  the marker when its bridge reconnects. `scope.pods` is a snapshot
+  `{"podIds":[…]}` of the active pods of the Space's members. The Hub revokes
+  the local tokens it issued to any other pod before the pull, disables the
+  local auth of that pod's app client once no active token is left, and refuses
+  and stops renewing that pod's local connections.
 
 ## 6. Pod runtime authentication
 
@@ -299,11 +308,14 @@ and unexpired pending pods, each
   re-sends `/focus`; it keeps one Hub JWT and Hub key per Hub and Space.
 - Local Hub: the Hub identity endpoint `POST /api/v1/hub/identity/get`
   (`{"hubId","tenantId","scopeId"}`) is public and needs no token. The pod
-  proves the Hub identity, obtains a Hub JWT from `/api/v1/hub/token/exchange`
-  over HTTPS with its pod access token and `ScopeId`, and authenticates to the
-  local Hub only with that Hub JWT (`source=local`, `clientSource=pod`). The
-  cloud access token is never sent over the local link. The pod exchanges a new
-  Hub JWT before the current one expires and after a local rejection.
+  proves the Hub identity, then authenticates to the local Hub the way a Client
+  does: the first local `/auth` carries its pod access token with
+  `source=cloud` (`clientSource=pod`, `deviceId`, `tenantId`, `scopeId`,
+  `hubId`). The Hub exchanges that token with the cloud and returns a
+  long-lived local Hub JWT in `jwtToken`, which the pod stores per Hub. Later
+  local `/auth` requests use only that JWT with `source=local`. When the stored
+  JWT is about to expire or the Hub rejects it, the pod discards it and
+  authenticates with `source=cloud` again.
 
 ## 7. Native Client targets
 

package/manifest/app-facade.v1.json

@@ -1,6 +1,6 @@
 {
   "manifest": "mhome.app-facade.v1",
-  "contractVersion": "1.34.0",
+  "contractVersion": "1.34.1",
   "callSchema": "schema/facade-call.v1.schema.json",
   "routing": "manifest/routing.v1.json",
   "routingSchema": "schema/routing.v1.schema.json",

package/manifest/host-provision-targets.v1.json

@@ -1,6 +1,6 @@
 {
   "manifest": "mhome.host-provision.targets.v1",
-  "contractVersion": "1.34.0",
+  "contractVersion": "1.34.1",
   "contract": "contract/host-provisioning-v1.md",
   "localTargets": [
     "/local/host/provision/start",

package/manifest/hub-targets.v1.json

@@ -1,6 +1,6 @@
 {
   "manifest": "mhome.hub.targets.v1",
-  "contractVersion": "1.34.0",
+  "contractVersion": "1.34.1",
   "appTargets": [
     "/app/hub/get",
     "/app/hub/remove",

package/manifest/pod-targets.v1.json

@@ -1,6 +1,6 @@
 {
   "manifest": "mhome.pod.targets.v1",
-  "contractVersion": "1.34.0",
+  "contractVersion": "1.34.1",
   "contract": "contract/pod-commissioning-v1.md",
   "localTargets": [
     "/local/pod/discovery/start",

package/manifest/routing.v1.json

@@ -1,6 +1,6 @@
 {
   "manifest": "mhome.app-facade.routing.v1",
-  "contractVersion": "1.34.0",
+  "contractVersion": "1.34.1",
   "targetPrefix": "/app/",
   "default": {
     "execution": "scopeMode",

package/manifest/targets.v1.json

@@ -1,6 +1,6 @@
 {
   "manifest": "mhome.messaging.targets.v1",
-  "contractVersion": "1.34.0",
+  "contractVersion": "1.34.1",
   "requestTargets": [
     "/app/messaging/provider/list",
     "/app/messaging/provider-account/list",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mhome/app-facade-protocol",
-  "version": "1.34.0",
+  "version": "1.34.1",
   "description": "Build-time protocol artifacts for mhome.app-facade",
   "license": "MIT",
   "repository": {

package/protocol.json

@@ -1,6 +1,6 @@
 {
   "protocol": "mhome.app-facade",
-  "contractVersion": "1.34.0",
+  "contractVersion": "1.34.1",
   "manifest": "manifest/app-facade.v1.json",
   "schemas": {
     "capabilityDescriptor": "schema/capability-descriptor.v1.schema.json",