Skip to content

feat(music): prepare Cloud module and Host output contract - #137

Merged
zts212653 merged 9 commits into
mainfrom
feat/f327-music-plugin
Oct 27, 2026
Merged

zts212653 merged 9 commits into
mainfrom
feat/f327-music-plugin

Conversation

@zts212653

@zts212653 zts212653 commented Oct 27, 2026 •

Copy link
Copy Markdown
Owner

Adds the private Google Cloud music module and the paired Contract/SDK declaration for bounded Host-mediated project output. Manager supports existing authorization reuse or background connection; the plugin retains generated audio and reports pending, refusal, unknown completion and recoverable delivery without automatic paid replay. Host owns project authorization and file delivery.

The CVO adopted bounded Host-mediated audio/provenance delivery in direct message thread_mvosmqalhrabbmvd#0001793099450295-001442-732568e1. Both original PRs are merged: Host 3608aa08d179029cd028c53e02d08864ea4dee30 and public plugin source 8450bdf57b26671ea43970dcee74f90e3e071b53. This does not restore Contract 0.3's retired API grant tables or native method allowlists.

Companion previews are published and independently downloaded from the official registry. Contract 0.3.1-candidate.0 SHA256 3edd45d1c7ba35dae56ccafd10225be52acc7689f91f8bcad7483c0fa84300af and SDK 0.3.0-beta.2-candidate.0 SHA256 41f00c4d8dd62d0fb0cc5140a091501ca569f818193df1c2191539b500407f52 exactly match the reviewed archives. Publish run 40494590987 failed only at its final catalog-activation audit; existing immutable versions are not republished. Music remains a private archive outside the catalog.

Validation and approval: author build plus 71 isolated Host checks passed; Argon approved Host exact 3aca381f4d64f503d9077a2349f5530900084533 with independently managed 10/10 and API TypeScript, receipt 0001793096226663-001362-3ae04d67. Public product approval covers 101e241a (receipt 0001793091725029-001227-56bce04d); final e60a4e40 changed a release-test assertion only, with identical production/workflow/package bytes and actual green CI. Review accepted source was docs/features/F327-google-family-suite.md@28e8f3f3806318b482387f71fee31fcdf1523d33. Original AGY step65's 9-second RED still lacks a retained stack/exit; independently repaired cleanup is not claimed as that unknown initiating cause. Billing-only Host zero-step CI retains its documented external-infrastructure disposition.

Real acceptance remains open under original Task2559: the private archive installed through the actual named-Alpha Manager, but confirmed reuse of the already authorized Cloud account returned invalid_response. Credentials were not saved, the plugin stayed disabled and no generation was issued. Public fix #145 and paired Host archive #6247 request bounded readiness fields without changing OAuth or generation retries. They require their own scoped review and post-integration real reconnection, explicit enablement and native-cat generation. Actual charges and Ultra credit deduction remain unverified; Flow/Flow Music web delivery remains separate and undelivered.

Current evidence: F327 connection verification. Current source truth: docs/features/F327-google-family-suite.md@f2417cd7ab1b38164f92bda5fe86c6dcdf7d8f49.

zts212653 and others added 9 commits October 26, 2026 18:40
Why: preserve one consent flow across disposed settings requests, fence stale callbacks after project changes, and retain expiry/cancellation history without storing provider credentials. This private candidate has no manifest, real callback helper, public file-write capability, installation or generation path.

Author: codex61-sol / gpt-6.1-sol
Why: Deliver the F327 setup and recovery journey as an installable F202 module, with Host-authorized project output instead of provider business in Host. This is an unpublished candidate; public permission adoption and final review remain required.
Why: A new unpublished Contract and SDK candidate must not replace the already published dependency bytes frozen by the Feishu connector shrinkwrap during its registry consumer test.
Why: Keep the installed English usage guide readable and consistent with the package inventory language check.
Why: Keep cats on the authorized Cloud music entrypoint and prevent an unknown result from becoming a replacement paid generation.
Why: Upstream retired duplicated API grant tables and native method lists. Preserve that model and bind project outputs to actual native/media declarations within one feature instead. Keep paid generation behind Host output admission, use fresh candidate package identities, and verify frozen consumers against their exact published bytes rather than local ignored archives. Contract, SDK, music module and conformance checks pass without live Cloud calls.
Why: Contract 0.3 removes the old API permission summary. The existing setup card must explain that explicit enable permits the current call to create audio and provenance in its authorized project, with no overwrite or automatic paid replay.
Why: Registry compatibility CI equated the explicit 0.3.0 stable-publish exception with the current prerelease package version and rejected the F327 candidate. Freeze the authorized stable exception while leaving prerelease publishing and dependency order unchanged. The observed failure now passes with all 66 registry/release checks, and canonical Contract, SDK and music archives remain byte-identical to the independently reviewed candidate.
@zts212653
zts212653 marked this pull request as ready for review October 27, 2026 10:25
@zts212653
zts212653 requested a review from mindfn as a code owner October 27, 2026 10:25
@zts212653
zts212653 merged commit 8450bdf into main Oct 27, 2026
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant