[MyPrototypeWhat]

Summary

Syncs the package checks and contributor docs with the MiniMax Code 3.1.5 Mini App contract. The contract is identical in 3.1.5, 3.1.6, and the current Host main. Since both versions are released, this can merge once reviewed.

npm run check

New manifest fields, validated with the Host's rules:

Field	Accepted	Minimum client
engines	{ "mcode": ">=MAJOR.MINOR.PATCH" }	3.1.5, or the bound when higher
toolAccess	["call"]	3.1.5
deviceAccess	["microphone"] (camera / notifications are not released yet)	3.1.5

Fix: agentAccess "session.read" moves from 3.1.4 to 3.1.5. #59 recorded 3.1.4 from a preview build, but the released 3.1.4 still rejects "session.read".

New ACCESS_UNDECLARED check. It scans .js / .mjs / .cjs / .html / .htm files in the page and Node payload for calls whose grant the manifest does not declare. The level depends on whether the call can work on any client that installs the package:

Call	Needs	Level
context.agent / page agent run, answer, reply, cancel, open, models, agents, create	"session.run"	error
agent.sessions(), observe({ all: true }), page session() without an id	"session.read"	error
agent.session(id) / observe({ sessionId }) on the Mini App's own sessions	either agentAccess value	error
context.tool.* / page tool.request()	toolAccess	error
speech.transcribe()	deviceAccess microphone	error
getUserMedia()	deviceAccess microphone	error if the package already needs ≥3.1.5, otherwise warning

Agent findings are reported once per file, naming every missing value. The first five rows never work without their grant, on any client. getUserMedia worked before 3.1.5 and is denied from 3.1.5, so it only becomes an error once nothing older can install the package.

Supporting changes: the payload walk moved from rules/node.mjs to fs.mjs, and version comparison moved to version.mjs. CI is unchanged.

Docs and example

• docs/package-contract.md: new fields, per-item permission switches, the version table, and the declared-access check.
• docs/agent.md: session.read (sessions / session / observe), whenBusy, the 12-turns-per-minute limit, switch-off errors.
• docs/tool.md (new): context.tool list / call / request, the permission prompt, error table.
• docs/client.md: capabilities.has, browser permissions from 3.1.5, speech.transcribe, tool.request.
• docs/runtime.md, docs/security.md, AGENTS.md, CONTRIBUTING*.md, root READMEs: updated to match.
• docs/snippets/audio-capture.ts: the Host's 16 kHz capture helper. It is not in the example, because the example doesn't record.
• hello-miniapp: type snapshots synced to 3.1.6. Only their doc references were edited, to point at this repository's docs.

Effect on existing plugins

Still 0 errors repository-wide. New warnings, all expected:

• webguhui/minimax-video, ACCESS_UNDECLARED: the editor records audio with getUserMedia + MediaRecorder but declares no deviceAccess, so recording fails on 3.1.5+ today. Fixing it means declaring deviceAccess: ["microphone"], which makes the package need 3.1.5. Its README should also mention microphone use. Best done with the author.
• cristinamadureira353-svg/ai-office, ACCESS_UNDECLARED: this is a false positive. The hit is Godot's built-in audio-input glue in game.js. The unpacked game data (32 MB) has no microphone or recording classes, so the game doesn't record. It should not declare the microphone.
• hanzijie/cq-viewer, README_MIN_VERSION_MISSING: it declares "session.read", and its README names 3.1.4-preview.4773. The README should name a release it was tested on at ≥3.1.5.

Verification

• npm run check: 87 tests pass (69 → 87), all 23 plugins and the example validate with 0 errors.
• New tests were written first and watched fail. The session.read 3.1.5 test was confirmed to fail against the old contract.mjs.
• Parity with the Host: 48 inputs for engines / toolAccess / deviceAccess / agentAccess, compared against the Host main source: 0 mismatches. engines uses the Host's parseMcodeEngineRequirement; deviceAccess / agentAccess use its exported predicates. The toolAccess rule is not exported, so it was compared against a copy of the Host's one-line check.
• CLI on a throwaway package, in three stages:
  1. Undeclared calls: 2 errors plus the getUserMedia warning.
  2. All grants declared plus engines >=3.1.6: only the README warning, asking for 3.1.6.
  3. README names 3.1.6: clean.
• tsc --strict passes for audio-capture.ts and both type snapshots. tsc --checkJs passes for the example entry.

Review follow-up (ea6a501)

A two-axis review (repository standards, and the spec checked against the Host source) found:

• Fixed bug: any agentAccess value counted as enough. A package declaring only "session.read" could call context.agent.run() without a report, although that call always fails. Agent calls are now checked per value, with one diagnostic per file.
• Docs completed:
  • the microphone is granted only to audio-only requests from the main frame;
  • an engines bound also withholds mcpEndpoints, and publishing fails with MINIAPP_HOST_TOO_OLD;
  • every declared permission can be switched off;
  • page error codes are now documented;
  • .htm is listed among the scanned file types.
• Refactor: the default miniapp result is built in one place.
• Left as is (judgement calls):
  • the access shape mixes a list with flags;
  • an invalid agentAccess list also triggers ACCESS_UNDECLARED, because the Host grants nothing in that case.

Not verified

• Nothing was installed or run in a real MiniMax Code 3.1.5 / 3.1.6 client.
• ACCESS_UNDECLARED matches source text. It misses calls made through renamed variables, and can flag dormant code, as with ai-office.