From 876dbed1c5f022b0368f369b963f850d6cd0e9ef Mon Sep 17 00:00:00 2001 From: Fredrik Ahlgren Date: Sat, 17 Oct 2026 10:21:27 +0200 Subject: [PATCH 1/2] docs(agents): a consent link or QR code goes straight to review in the app The app no longer asks the owner to type the consent page's code when they open its link or scan its QR code. The code is for an owner who has neither. A link someone else sent reaches the review too, and stops at Face ID and the offer's 10 minutes. Co-Authored-By: Claude Opus 5.5 --- docs/agents.md | 13 ++++++++----- 1 file changed, 8 insertions(+), 5 deletions(-) diff --git a/docs/agents.md b/docs/agents.md index f24415a72..05378e67c 100644 --- a/docs/agents.md +++ b/docs/agents.md @@ -673,11 +673,14 @@ old one signed has expired. | `code` | text | The code on the consent page | | `exp` | int | Wall-clock ms when the offer stops being good, at most 10 minutes after FTW Cloud made it | -- **The app** shows `client`, `clientHost` and whether it is `verified`. On - the universal-link path the owner types the code the consent page shows, - so a link sent by someone else does not reach Face ID; on the QR path the - owner compares it. The app picks the home the owner chooses, asks when - there are several, and refuses a home it does not have. +- **The app** shows `client`, `clientHost`, whether it is `verified`, and + the code. A universal link, tapped or opened by the phone's camera from + the QR code, goes straight to that review. The owner may compare the code + with the page but is not asked to, so a link someone else sent also + reaches the review, and stops at Face ID and the offer's 10 minutes. The + owner types the code only when they have neither the QR code nor the + link. The app picks the home the owner chooses, asks when there are + several, and refuses a home it does not have. - **Support** offers count only from `clientId` `https://cloud.ftw.energy/clients/sourceful-support`, the support tooling's client at FTW Cloud. The app and the box refuse a support offer from any From 09d740c59c2876c5dec570fb2daf5aabb01d7090 Mon Sep 17 00:00:00 2001 From: Fredrik Ahlgren Date: Sat, 17 Oct 2026 10:55:45 +0200 Subject: [PATCH 2/2] docs(agents): the code finds the offer; say what stops a sent link The link and the QR code carry the offer; the code only finds it at FTW Cloud. The app shows the code only for a link, reads the QR code with its own scanner too, and a sent link stops at the pinned-key check, the unverified client's own step, Face ID and the offer's 10 minutes. Co-Authored-By: Claude Opus 5.5 --- docs/agents.md | 24 ++++++++++++++---------- 1 file changed, 14 insertions(+), 10 deletions(-) diff --git a/docs/agents.md b/docs/agents.md index 05378e67c..0728da7b8 100644 --- a/docs/agents.md +++ b/docs/agents.md @@ -636,8 +636,9 @@ route on the box does. ## The grant offer -The MCP consent page shows a short code, a QR code and a universal link. All -three carry one signed offer, which the app shows the owner before Face ID. +The MCP consent page shows a short code, a QR code and a universal link. The +link and the QR code carry one signed offer; the code finds the same offer at +FTW Cloud's code lookup. The app shows the offer to the owner before Face ID. **The signed offer** is CBOR `{o, kid, sig}`, base64url without padding in the link's fragment, and what FTW Cloud's code lookup returns for a code: @@ -673,14 +674,17 @@ old one signed has expired. | `code` | text | The code on the consent page | | `exp` | int | Wall-clock ms when the offer stops being good, at most 10 minutes after FTW Cloud made it | -- **The app** shows `client`, `clientHost`, whether it is `verified`, and - the code. A universal link, tapped or opened by the phone's camera from - the QR code, goes straight to that review. The owner may compare the code - with the page but is not asked to, so a link someone else sent also - reaches the review, and stops at Face ID and the offer's 10 minutes. The - owner types the code only when they have neither the QR code nor the - link. The app picks the home the owner chooses, asks when there are - several, and refuses a home it does not have. +- **The app** shows `client`, `clientHost` and whether it is `verified`. A + universal link, tapped or opened by the phone's camera or the app's own + scanner from the QR code, goes straight to that review, and the review + then also shows the code for an owner who wants to compare it with the + page. Nothing asks them to, so a link someone else sent also reaches the + review. What stops it there: the pinned-key check before anything shows, + for an unverified client the owner's own "I started this" step, Face ID, + and the offer's 10 minutes. The owner types the code only when they have + neither the QR code nor the link. The app picks the home the owner + chooses, asks when there are several, and refuses a home it does not + have. - **Support** offers count only from `clientId` `https://cloud.ftw.energy/clients/sourceful-support`, the support tooling's client at FTW Cloud. The app and the box refuse a support offer from any