@mhome/app-facade-protocol 1.8.0 → 1.10.0

package/README.md

@@ -65,3 +65,26 @@ supervise Hub and Node processes, but it is not a public App Facade executor;
 Host process management remains an implementation detail behind the selected
 Hub. Lion's legacy controller annotations and non-`/app/*` protocols are
 outside this contract.
+
+### System plugin catalog
+
+`/app/plugin/catalog/list` returns `manifest/plugin-catalog.v1.json` from Cloud,
+without requiring a local Space or connected Hub. Authentication and Space
+membership still apply. Core also serves this catalog for clients with an older
+routing manifest. The response schema is `schema/plugin-catalog.v1.schema.json`.
+
+The catalog describes supported types, not installed software or bindings.
+`componentId` joins to Host runtime inspection; `nodeType` joins to existing
+Plugin candidate and installed/binding queries. Platform installability and
+versions come from the Host release catalog, not this directory. Host inventory
+is a native management API, not a portable App Facade executor.
+
+Core and Cloud embed generated copies. After editing the catalog, run
+`node scripts/sync-plugin-catalog.mjs --write <core-resource> <cloud-resource>`
+from the Foundation root; omit `--write` to check conformance. Resource paths are
+`src/application/plugin-catalog.v1.json` (Core) and
+`src/main/resources/app/plugin-catalog.v1.json` (Cloud module-service).
+
+## Shared messaging codes (1.10)
+
+Code creation may omit bot/account and group/surface identifiers. The receiving authenticated provider determines the bot; shared candidates are confirmed in the App. The existing actor link claim status/confirm/event endpoints carry both kinds, distinguished by `kind` (`link` by default, or `bind`). Bind code responses include `challengeId`; completed bind claims omit `linkId`. Private link completes on receipt. A code is single-use within its provider and service deployment, never a cross-provider or cross-Hub credential.

package/fixtures/shared-code-bind-create.request.json

@@ -0,0 +1,9 @@
+{
+  "target": "/app/messaging/surface/bind-code/create",
+  "direction": "request",
+  "body": {
+    "provider": "feishu",
+    "placement": "local",
+    "scopeId": "scope_a"
+  }
+}

package/fixtures/shared-code-link-create.request.json

@@ -0,0 +1,11 @@
+{
+  "target": "/app/messaging/actor/link-code/create",
+  "direction": "request",
+  "body": {
+    "provider": "telegram",
+    "placement": "local",
+    "target": {
+      "audience": "shared"
+    }
+  }
+}

package/manifest/app-facade.v1.json

@@ -1,6 +1,6 @@
 {
   "manifest": "mhome.app-facade.v1",
-  "contractVersion": "1.8.0",
+  "contractVersion": "1.10.0",
   "callSchema": "schema/facade-call.v1.schema.json",
   "routing": "manifest/routing.v1.json",
   "routingSchema": "schema/routing.v1.schema.json",
@@ -20,7 +20,10 @@
     "plugin": {
       "extensionVersion": "v1",
       "targetPrefix": "/app/plugin",
+      "catalog": "manifest/plugin-catalog.v1.json",
+      "catalogSchema": "schema/plugin-catalog.v1.schema.json",
       "exactRequestTargets": [
+        "/app/plugin/catalog/list",
         "/app/plugin/installed/list",
         "/app/plugin/detail/get",
         "/app/plugin/candidate/list",

package/manifest/routing.v1.json

@@ -1,6 +1,6 @@
 {
   "manifest": "mhome.app-facade.routing.v1",
-  "contractVersion": "1.8.0",
+  "contractVersion": "1.10.0",
   "targetPrefix": "/app/",
   "default": {
     "execution": "scopeMode",
@@ -19,6 +19,7 @@
       "/app/hub/cache/clear",
       "/app/hub/get",
       "/app/hub/remove",
+      "/app/plugin/catalog/list",
       "/app/system/feedback/submit",
       "/app/timeline/entity/latest/list"
     ],

package/manifest/targets.v1.json

@@ -1,6 +1,6 @@
 {
   "manifest": "mhome.messaging.targets.v1",
-  "contractVersion": "1.8.0",
+  "contractVersion": "1.10.0",
   "requestTargets": [
     "/app/messaging/provider/list",
     "/app/messaging/provider-account/list",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mhome/app-facade-protocol",
-  "version": "1.8.0",
+  "version": "1.10.0",
   "description": "Build-time protocol artifacts for mhome.app-facade",
   "license": "MIT",
   "repository": {

package/protocol.json

@@ -1,6 +1,6 @@
 {
   "protocol": "mhome.app-facade",
-  "contractVersion": "1.8.0",
+  "contractVersion": "1.10.0",
   "manifest": "manifest/app-facade.v1.json",
   "schemas": {
     "call": "schema/facade-call.v1.schema.json",

package/schema/messaging-frame.v3.schema.json

@@ -663,6 +663,9 @@
         "expiresAtMs": {
           "type": "integer",
           "minimum": 0
+        },
+        "challengeId": {
+          "$ref": "#/$defs/id"
         }
       }
     },
@@ -1054,7 +1057,6 @@
       "required": [
         "provider",
         "placement",
-        "surfaceId",
         "scopeId"
       ],
       "properties": {
@@ -1078,7 +1080,6 @@
       "required": [
         "provider",
         "placement",
-        "accountId",
         "target"
       ],
       "properties": {
@@ -2305,8 +2306,7 @@
           "type": "object",
           "additionalProperties": false,
           "required": [
-            "audience",
-            "surfaceId"
+            "audience"
           ],
           "properties": {
             "audience": {
@@ -2396,7 +2396,6 @@
         "challengeId",
         "provider",
         "placement",
-        "accountId",
         "target",
         "expiresAtMs",
         "lifecycle"
@@ -2423,6 +2422,12 @@
         },
         "lifecycle": {
           "$ref": "#/$defs/actorLinkClaimLifecycle"
+        },
+        "kind": {
+          "enum": [
+            "link",
+            "bind"
+          ]
         }
       }
     },
@@ -2662,8 +2667,7 @@
           "additionalProperties": false,
           "required": [
             "state",
-            "candidate",
-            "linkId"
+            "candidate"
           ],
           "properties": {
             "state": {