0.7.1 integration: protected-content provisioning, Home first-run seed, Home Agent on the typed model contract

AGENTS.md

@@ -187,11 +187,14 @@ capsules, provider config, and `components.json`.
 - Avoid volatile proof logs in durable docs. Store open work in `TASKS.md`,
   verified current truth in `state.md`, and release history in
   `elastos/CHANGELOG.md`.
-- Keep standing instructions, READMEs, contracts and roadmaps independent of
-  the current release. Branch heads, PR numbers, commit IDs, CI results and
-  installation snapshots belong in `state.md` or a dated evidence record.
-  Contract versions, dependency pins and artifact provenance stay with the
-  contract or artifact they identify.
+- Keep product documentation release-neutral. Use version numbers only for
+  exact release state, compatibility or migration, release notes or changelogs,
+  manifests, and exact Git refs or evidence. Keep standing instructions,
+  READMEs, contracts, and roadmaps independent of the current release.
+  Branch heads, PR numbers, commit IDs, CI results, and installation snapshots
+  belong in `state.md` or a dated evidence record. Contract versions,
+  dependency pins, and artifact provenance stay with the contract or artifact
+  they identify.
 
 ## Verification Gate
 

capsules/browser-engine-adapter/capsule.json

@@ -7,6 +7,7 @@
   "role": "provider",
   "type": "microvm",
   "entrypoint": "rootfs.ext4",
+  "icon": "icons",
   "provides": "elastos://browser-engine/*",
   "authority": {
     "reason": "Defines the internal browser-engine adapter contract without exposing raw sockets, host browser APIs, wallet injection, filesystem access, or host internet access to app capsules.",

capsules/chain-provider/capsule.json

@@ -7,6 +7,7 @@
   "role": "provider",
   "type": "microvm",
   "entrypoint": "rootfs.ext4",
+  "icon": "icons",
   "provides": "elastos://chain/*",
   "authority": {
     "reason": "Provides typed chain status, proofs, transaction intents, broadcasts, and managed node lifecycle without exposing raw node RPC URLs to app capsules.",

capsules/chat-room/browser/style.css

@@ -135,7 +135,9 @@ p {
   min-height: 0;
   flex-direction: column;
   gap: 0.45rem;
-  padding: 12px 10px 14px;
+  /* Unified-sidebar chrome paints the traffic lights over the first 52px;
+     capsule-local value on purpose (see home-entropy-check: Chat/Inbox). */
+  padding: 52px 10px 14px;
   overflow: auto;
   border-right: 1px solid color-mix(in srgb, var(--line) 55%, transparent);
   background: var(--sidebar-bg);

capsules/content-block-graph-provider/capsule.json

@@ -7,6 +7,7 @@
   "role": "provider",
   "type": "microvm",
   "entrypoint": "rootfs.ext4",
+  "icon": "icons",
   "provides": "elastos://block-graph/*",
   "authority": {
     "reason": "Exports and imports bounded content block graphs for provider-to-provider repair without exposing raw Kubo/IPFS, filesystem, or peer authority to app capsules.",

capsules/custody-provider/src/lib.rs

@@ -3,11 +3,14 @@ use std::io::{Read as _, Write as _};
 use std::path::{Component, Path, PathBuf};
 
 use ed25519_dalek::SigningKey;
-use elastos_protected_content_contracts::{
-    NodeCustodyPublicKeyV1, NodePublicKey, RuntimeOperationIssuerKeyV1,
-    PQ_HYBRID_WRAP_PUBLIC_KEY_BYTES,
-};
+use elastos_protected_content_contracts::{NodePublicKey, RuntimeOperationIssuerKeyV1};
 use elastos_protected_content_custody::NodeCustodySecretKeyV1;
+pub use elastos_protected_content_provider_contracts::{
+    parse_and_verify_provisioning_output, provisioning_receipt,
+    ProvisionedCustodyProviderPublicKeys, ProvisioningOutputError,
+    CUSTODY_PROVIDER_PROVISIONING_RECEIPT_PROVIDER_ID_V1 as PROVISIONING_PROVIDER_ID,
+    CUSTODY_PROVIDER_PROVISIONING_RECEIPT_SCHEMA_V1 as PROVISIONING_SCHEMA_V1,
+};
 use serde::Deserialize;
 use zeroize::Zeroizing;
 
@@ -18,8 +21,6 @@ const TRUSTED_RUNTIME_ISSUER_FILE: &str = "trusted-runtime-issuer";
 const NODE_CUSTODY_SECRET_FILE: &str = "node-custody-secret";
 const NODE_SIGNING_KEY_FILE: &str = "node-signing-key";
 const DATA_ROOT_DIR: &str = "data";
-pub const PROVISIONING_SCHEMA_V1: &str = "elastos.custody-provider.provisioning-receipt/v1";
-pub const PROVISIONING_PROVIDER_ID: &str = "custody";
 
 #[derive(Debug, Clone, PartialEq, Eq)]
 pub enum CustodyProviderStateRootError {
@@ -50,29 +51,6 @@ pub struct LoadedCustodyProviderState {
     pub data_root: PathBuf,
 }
 
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct ProvisionedCustodyProviderPublicKeys {
-    pub node_public_key: NodePublicKey,
-    pub node_custody_public_key: NodeCustodyPublicKeyV1,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub enum ProvisioningOutputError {
-    InvalidOutput,
-    InvalidReceipt,
-}
-
-impl std::fmt::Display for ProvisioningOutputError {
-    fn fmt(&self, formatter: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
-        formatter.write_str(match self {
-            Self::InvalidOutput => "custody provider provisioning output is invalid",
-            Self::InvalidReceipt => "custody provider provisioning receipt is invalid",
-        })
-    }
-}
-
-impl std::error::Error for ProvisioningOutputError {}
-
 #[derive(Debug, Clone, Deserialize)]
 #[serde(deny_unknown_fields)]
 struct ProviderInitConfigV1 {
@@ -132,74 +110,6 @@ pub fn parse_runtime_issuer_hex(
         .map_err(|_| CustodyProviderStateRootError::InvalidConfig)
 }
 
-pub fn provisioning_receipt(
-    runtime_issuer: RuntimeOperationIssuerKeyV1,
-    node_public_key: NodePublicKey,
-    node_custody_public_key: NodeCustodyPublicKeyV1,
-) -> [u8; 32] {
-    use sha2::Digest as _;
-
-    let mut hasher = sha2::Sha256::new();
-    hasher.update(PROVISIONING_SCHEMA_V1.as_bytes());
-    hasher.update(runtime_issuer.as_bytes());
-    hasher.update(node_public_key.as_bytes());
-    hasher.update(node_custody_public_key.as_bytes());
-    hasher.finalize().into()
-}
-
-pub fn parse_and_verify_provisioning_output(
-    value: &serde_json::Value,
-    expected_runtime_issuer: RuntimeOperationIssuerKeyV1,
-) -> Result<ProvisionedCustodyProviderPublicKeys, ProvisioningOutputError> {
-    let object = value
-        .as_object()
-        .ok_or(ProvisioningOutputError::InvalidOutput)?;
-    if object.len() != 2 || object.get("status").and_then(serde_json::Value::as_str) != Some("ok") {
-        return Err(ProvisioningOutputError::InvalidOutput);
-    }
-    let data = object
-        .get("data")
-        .and_then(serde_json::Value::as_object)
-        .ok_or(ProvisioningOutputError::InvalidOutput)?;
-    if data.len() != 5
-        || data.get("schema").and_then(serde_json::Value::as_str) != Some(PROVISIONING_SCHEMA_V1)
-        || data.get("provider").and_then(serde_json::Value::as_str)
-            != Some(PROVISIONING_PROVIDER_ID)
-    {
-        return Err(ProvisioningOutputError::InvalidOutput);
-    }
-    let node_public_key = NodePublicKey::new(parse_exact_hex_bytes::<32>(
-        data.get("node_public_key")
-            .and_then(serde_json::Value::as_str)
-            .ok_or(ProvisioningOutputError::InvalidOutput)?,
-    )?)
-    .map_err(|_| ProvisioningOutputError::InvalidOutput)?;
-    let node_custody_public_key =
-        NodeCustodyPublicKeyV1::new(parse_exact_hex_bytes::<PQ_HYBRID_WRAP_PUBLIC_KEY_BYTES>(
-            data.get("node_custody_public_key")
-                .and_then(serde_json::Value::as_str)
-                .ok_or(ProvisioningOutputError::InvalidOutput)?,
-        )?)
-        .map_err(|_| ProvisioningOutputError::InvalidOutput)?;
-    let receipt = parse_exact_hex_bytes::<32>(
-        data.get("receipt")
-            .and_then(serde_json::Value::as_str)
-            .ok_or(ProvisioningOutputError::InvalidOutput)?,
-    )?;
-    let expected = provisioning_receipt(
-        expected_runtime_issuer,
-        node_public_key,
-        node_custody_public_key,
-    );
-    if receipt != expected {
-        return Err(ProvisioningOutputError::InvalidReceipt);
-    }
-    Ok(ProvisionedCustodyProviderPublicKeys {
-        node_public_key,
-        node_custody_public_key,
-    })
-}
-
 pub fn validate_state_root_path(root: &Path) -> Result<(), CustodyProviderStateRootError> {
     validate_absolute_path_syntax(root)?;
     validate_existing_path_components(root)?;
@@ -339,26 +249,6 @@ fn create_stage_root(parent: &Path) -> Result<PathBuf, CustodyProviderStateRootE
     Err(CustodyProviderStateRootError::ProvisioningFailed)
 }
 
-fn parse_exact_hex_bytes<const N: usize>(value: &str) -> Result<[u8; N], ProvisioningOutputError> {
-    let hex = value
-        .strip_prefix("0x")
-        .ok_or(ProvisioningOutputError::InvalidOutput)?;
-    if hex.len() != N * 2
-        || !hex
-            .bytes()
-            .all(|byte| byte.is_ascii_hexdigit() && !byte.is_ascii_uppercase())
-    {
-        return Err(ProvisioningOutputError::InvalidOutput);
-    }
-    let mut decoded = [0u8; N];
-    for (index, pair) in hex.as_bytes().chunks_exact(2).enumerate() {
-        decoded[index] =
-            (hex_nibble(pair[0]).map_err(|_| ProvisioningOutputError::InvalidOutput)? << 4)
-                | hex_nibble(pair[1]).map_err(|_| ProvisioningOutputError::InvalidOutput)?;
-    }
-    Ok(decoded)
-}
-
 fn remove_created_stage_root(path: &Path) -> Result<(), CustodyProviderStateRootError> {
     let file_name = path
         .file_name()

capsules/did-provider/capsule.json

@@ -7,6 +7,7 @@
   "role": "provider",
   "type": "microvm",
   "entrypoint": "rootfs.ext4",
+  "icon": "icons",
   "provides": "elastos://did/*",
   "authority": {
     "reason": "Mediates device-backed DID identity and local persona metadata from runtime-managed identity storage.",