@mhome/core-protocol 1.38.3 → 1.39.0

package/README.md

@@ -136,11 +136,13 @@ only the canonical DTOs cross HTTP/IPC boundaries. The permissions contract is i
 `contract/host-permissions.md`; runtime permission handlers remain a separate
 implementation step. The existing Core external runtime protocol stays at 15.
 
-## Offline Host authorization (core-api 1.15.0)
+## Host management authorization
 
-`host::auth` is the language-neutral Client–Host authorization payload contract.
-See [`contract/host-offline-auth.md`](contract/host-offline-auth.md). This crate
-does not implement signing, key storage, or transport.
+`host::access` owns cloud-issued short User tokens, fixed Admin/Space modes,
+signed challenge/claim/receipt types and permissions. `host::auth` owns Host public
+keys and the cloud signing-key directory. See
+[`contract/host-management-auth.md`](contract/host-management-auth.md).
+Business Client–Core identities are a separate protocol.
 
 ## Native Client Host management
 
@@ -153,4 +155,4 @@ Desktop/CLI use Clientd IPC `host.list` and `host.runtime`; mobile Clients expos
 same operations through `hostList` / `hostRuntime`. None accepts a Space ID. Clients
 discover `_mhome-host._tcp`, verify reply Host IDs, and unwrap the HTTP runtime envelope.
 Install/restart submissions are not automatically replayed after transport failure.
-Existing LAN access semantics remain; this release does not add a trust/pairing protocol.
+First claim is direct LAN only; daily User management can use the current Core as a token-forwarding proxy.

package/contract/host-management-v1.json

@@ -44,6 +44,34 @@
     "restartOperation": {
       "path": "/v1/runtime",
       "method": "POST"
+    },
+    "administratorRemove": {
+      "path": "/v1/runtime",
+      "method": "POST"
+    },
+    "administratorRequest": {
+      "path": "/v1/auth/administrators",
+      "method": "POST"
+    },
+    "administratorRequestStatus": {
+      "path": "/v1/auth/administrators",
+      "method": "POST"
+    },
+    "administratorRequestCancel": {
+      "path": "/v1/auth/administrators",
+      "method": "POST"
+    },
+    "administrators": {
+      "path": "/v1/runtime",
+      "method": "POST"
+    },
+    "administratorDecide": {
+      "path": "/v1/runtime",
+      "method": "POST"
+    },
+    "configureService": {
+      "path": "/v1/runtime",
+      "method": "POST"
     }
   },
   "requestFields": [
@@ -53,7 +81,13 @@
     "all",
     "planId",
     "operationId",
-    "component"
+    "component",
+    "proof",
+    "userId",
+    "requestId",
+    "approve",
+    "serviceId",
+    "enabled"
   ],
   "listResponse": {
     "hosts": "array of HostListEntry",
@@ -65,8 +99,10 @@
     ],
     "info": "HostInfo or null",
     "infoError": "string or null",
-    "claimable": "boolean; verified empty-ACL challenge, not a permission result",
-    "identityUnverified": "boolean; blocks automatic TOFU and management; an explicit native reauthorization may start a new claim"
+    "claimable": "boolean; verified unclaimed Host status",
+    "identityUnverified": "boolean; blocks automatic TOFU and management; an explicit native reauthorization may start a new claim",
+    "authorization": "verified HostStatus or null: mode, claim, env, generation and host key id",
+    "claimPending": "boolean; this native Client has an unfinished claim that can be resumed"
   },
   "runtimeResponse": {
     "metrics": "HostMetrics",
@@ -78,13 +114,15 @@
     "mutationsAutomaticallyRetried": false
   },
   "claimRequest": {
-    "hostId": "non-empty string; no scope or endpoint accepted",
+    "hostId": "non-empty string; endpoint resolved from native LAN discovery",
     "claimToken": "optional string from a completed Bluetooth setup; forwarded to the Host claim unchanged",
-    "recoverIdentity": "optional boolean, default false; only an explicit user reauthorization may replace this account’s old Host key; never enable for background/Bluetooth automatic claim"
+    "recoverIdentity": "optional boolean, default false; only an explicit user reauthorization may replace this account\u2019s old Host key; never enable for background/Bluetooth automatic claim",
+    "scopeId": "optional selected Space id; required for Space Hosts. Cloud derives the tenant from the authenticated user and checks ownership."
   },
   "claimResponse": {
-    "claimed": "true only after Host persistence and cloud receipt commit",
+    "claimed": "true only after Host persistence and cloud receipt commit; false when explicit identity recovery submitted an administrator application awaiting approval/confirmation",
+    "application": "present for explicit recovery on an already claimed Admin Host; the Host administrator request result. The App confirms an approved receipt through /app/host/authorization before treating it as claimed",
     "hostId": "requested Host identity when supplied",
-    "identityConflict": "HOST_IDENTITY_CHANGED requires explicit reauthorization; failure never changes the trusted key"
+    "identityConflict": "HOST_IDENTITY_CHANGED requires explicit native LAN reauthorization. A new locally confirmed pin and unfinished-confirmation marker persist before submitting the mutation; retries remain bound to that pin. The cloud directory changes only after a Host approval receipt"
   }
 }

package/manifest/core.v1.json

@@ -1,6 +1,6 @@
 {
   "manifest": "mhome.core.v1",
-  "contractVersion": "1.38.3",
+  "contractVersion": "1.39.0",
   "protocols": {
     "agentGateway": {
       "submitTarget": "/agent/submit",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mhome/core-protocol",
-  "version": "1.38.3",
+  "version": "1.39.0",
   "description": "Build-time protocol artifacts for mhome.core",
   "license": "MIT",
   "repository": {

package/protocol.json

@@ -1,6 +1,6 @@
 {
   "protocol": "mhome.core",
-  "contractVersion": "1.38.3",
+  "contractVersion": "1.39.0",
   "manifest": "manifest/core.v1.json",
   "schemas": {
     "hostManagementRequest": "schema/host-management-request.v1.schema.json",

package/schema/host-management-request.v1.schema.json

@@ -133,6 +133,172 @@
           "minLength": 1
         }
       }
+    },
+    {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "hostId",
+        "action",
+        "userId"
+      ],
+      "properties": {
+        "hostId": {
+          "type": "string",
+          "minLength": 1
+        },
+        "action": {
+          "const": "administratorRemove"
+        },
+        "userId": {
+          "type": "string",
+          "minLength": 1
+        }
+      }
+    },
+    {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "hostId",
+        "action",
+        "proof"
+      ],
+      "properties": {
+        "hostId": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 256
+        },
+        "action": {
+          "const": "administratorRequest"
+        },
+        "proof": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 16384
+        }
+      }
+    },
+    {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "hostId",
+        "action",
+        "proof"
+      ],
+      "properties": {
+        "hostId": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 256
+        },
+        "action": {
+          "const": "administratorRequestStatus"
+        },
+        "proof": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 16384
+        }
+      }
+    },
+    {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "hostId",
+        "action",
+        "proof"
+      ],
+      "properties": {
+        "hostId": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 256
+        },
+        "action": {
+          "const": "administratorRequestCancel"
+        },
+        "proof": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 16384
+        }
+      }
+    },
+    {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "hostId",
+        "action"
+      ],
+      "properties": {
+        "hostId": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 256
+        },
+        "action": {
+          "const": "administrators"
+        }
+      }
+    },
+    {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "hostId",
+        "action",
+        "requestId",
+        "approve"
+      ],
+      "properties": {
+        "hostId": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 256
+        },
+        "action": {
+          "const": "administratorDecide"
+        },
+        "requestId": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 256
+        },
+        "approve": {
+          "type": "boolean"
+        }
+      }
+    },
+    {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "hostId",
+        "action",
+        "serviceId",
+        "enabled"
+      ],
+      "properties": {
+        "hostId": {
+          "type": "string",
+          "minLength": 1
+        },
+        "action": {
+          "const": "configureService"
+        },
+        "serviceId": {
+          "type": "string",
+          "minLength": 1
+        },
+        "enabled": {
+          "type": "boolean"
+        }
+      }
     }
   ]
 }