@mhome/app-facade-protocol 1.59.0 → 1.61.0

package/README.md

@@ -17,6 +17,27 @@ owns public targets, request/response/event schemas, and stable operation
 identity. Core-to-Node routes and provider runtime models belong to
 `mhome-core-api` instead.
 
+## Business DTO ownership
+
+A Facade owns the public business DTO for an operation. Native Agent tools, MCP,
+CLI and UI SDK adapters forward that DTO; they do not rename its fields, regroup
+its rows or add a client-selected Space ID. Full/essential selection is a Facade
+presentation concern. The same operation and caller context have the same DTO
+across these surfaces. Internal bridge/storage DTOs may use different names;
+conversion belongs at the Facade implementation boundary.
+
+Agent Profile get/save use `content` for the complete document. LLM mode get/save
+use `llmMode`; summary and default-provider metadata use that same field.
+`control.mode` and `agentModelMode` are separate concepts. The existing
+`/app/agent/llm/summary` operation owns the combined LLM read used by UI and CLI.
+See the Agent cases in the shared [presentation fixtures](fixtures/presentation/cases.json).
+
+Client workflows may coordinate input, login, polling and local files. Native
+Profile updates may run model-based merging. These workflows own explicit final
+results and compose real Facade calls; they are not alternative DTOs for a single
+Facade operation. A UI view model may derive display state after the SDK boundary.
+Composition does not imply a distributed transaction or automatic rollback.
+
 ## App result contract
 
 `control.responseDetail` selects information depth: `full` (default) returns
@@ -57,6 +78,24 @@ Device brief-list essential retains identity, room, capability IDs, Integration
 availability, omitting `connectId`, `manufacturerId` and `manufacturerName`.
 Selected Device detail, history, recent activity and mutation outcomes keep their
 public business fields. Device bulk list remains a CLI-only surface.
+Space preference updates retain only the submitted preference keys in essential,
+with `updatedFields` unchanged. Location updates omit the previous name/address;
+the current Location remains complete. Hub, Pod, Messaging identity/account reads
+and compact mutation DTOs retain their business fields, including unknown states,
+source errors, failed invitations, one-use commands and expiry.
+
+Host list essential retains every row, observation error, component state, permission
+and operation outcome. It omits the runtime root and duplicate per-file component
+checks. Completed service installation results omit Catalog receipts and downloadable
+assets/manifests from the plan, retaining selected components, versions, compatibility,
+actions and warnings. Queued/running/failed remain resource states, never inferred success.
+
+Card skin selection and release-list essential omit delivery URLs, entry files,
+asset manifests and renderer configuration schemas. Selected release detail keeps
+`configSchema` (including defaults) so callers can construct valid overrides.
+Revisions, installation IDs, existing override config and supported patterns remain.
+Empty mutation acknowledgements remain empty; they do not invent a new revision.
+
 Targets without a dedicated projection retain their business fields in YAML;
 essential does not promise a smaller field set for every domain. Targets own that selection.
 

package/fixtures/authorization/decisions.json

@@ -1,6 +1,6 @@
 [
   {
-    "name": "owner:/app/device/list",
+    "name": "owner:/app/device/brief/list",
     "principal": {
       "kind": "user",
       "userId": "owner"
@@ -8,7 +8,7 @@
     "memberRole": "OWNER",
     "tenantId": "tenant",
     "scopeId": "space",
-    "target": "/app/device/list",
+    "target": "/app/device/brief/list",
     "allowed": true
   },
   {
@@ -84,7 +84,7 @@
     "allowed": false
   },
   {
-    "name": "member:/app/device/list",
+    "name": "member:/app/device/brief/list",
     "principal": {
       "kind": "user",
       "userId": "member"
@@ -92,7 +92,7 @@
     "memberRole": "MEMBER",
     "tenantId": "tenant",
     "scopeId": "space",
-    "target": "/app/device/list",
+    "target": "/app/device/brief/list",
     "allowed": true
   },
   {
@@ -168,7 +168,7 @@
     "allowed": false
   },
   {
-    "name": "removed:/app/device/list",
+    "name": "removed:/app/device/brief/list",
     "principal": {
       "kind": "user",
       "userId": "former"
@@ -176,7 +176,7 @@
     "memberRole": null,
     "tenantId": "tenant",
     "scopeId": "space",
-    "target": "/app/device/list",
+    "target": "/app/device/brief/list",
     "allowed": false
   },
   {
@@ -252,7 +252,7 @@
     "allowed": false
   },
   {
-    "name": "space:/app/device/list",
+    "name": "space:/app/device/brief/list",
     "principal": {
       "kind": "space",
       "tenantId": "tenant",
@@ -261,7 +261,7 @@
     "memberRole": null,
     "tenantId": "tenant",
     "scopeId": "space",
-    "target": "/app/device/list",
+    "target": "/app/device/brief/list",
     "allowed": true
   },
   {
@@ -343,7 +343,7 @@
     "allowed": false
   },
   {
-    "name": "space-cannot-borrow-owner:/app/device/list",
+    "name": "space-cannot-borrow-owner:/app/device/brief/list",
     "principal": {
       "kind": "space",
       "tenantId": "tenant",
@@ -352,7 +352,7 @@
     "memberRole": "OWNER",
     "tenantId": "tenant",
     "scopeId": "space",
-    "target": "/app/device/list",
+    "target": "/app/device/brief/list",
     "allowed": true
   },
   {
@@ -434,7 +434,7 @@
     "allowed": false
   },
   {
-    "name": "foreign-space:/app/device/list",
+    "name": "foreign-space:/app/device/brief/list",
     "principal": {
       "kind": "space",
       "tenantId": "tenant",
@@ -443,7 +443,7 @@
     "memberRole": null,
     "tenantId": "tenant",
     "scopeId": "space",
-    "target": "/app/device/list",
+    "target": "/app/device/brief/list",
     "allowed": false
   },
   {
@@ -525,7 +525,7 @@
     "allowed": false
   },
   {
-    "name": "foreign-tenant:/app/device/list",
+    "name": "foreign-tenant:/app/device/brief/list",
     "principal": {
       "kind": "space",
       "tenantId": "other",
@@ -534,7 +534,7 @@
     "memberRole": null,
     "tenantId": "tenant",
     "scopeId": "space",
-    "target": "/app/device/list",
+    "target": "/app/device/brief/list",
     "allowed": false
   },
   {