ruvnet/RuView v2051

Release v2051 — HOMECORE platform runtime

on GitHub

HOMECORE platform runtime

This release completes the HOMECORE server platform foundation introduced in v2050.

Highlights

• Signed, bounded server-side plugin discovery with compiled-in native plugins and Wasmtime 36.0.12 component loading
• Opt-in network HAP server with persisted identity, SRP Pair-Setup, encrypted Pair-Verify sessions, controller management, revocation, accessory synchronization, and mDNS
• Expanded Home Assistant REST/WebSocket compatibility for core state, service, event, template, history, logbook, calendar, registry, panel, and intent contracts
• Deterministic startup restoration for registries and recorder state
• Forward-compatible device/config-entry migrations with atomic writes
• Bounded STT/TTS provider contracts and authenticated satellite voice sessions
• Updated capability documentation, ADRs, compatibility reporting, and security guardrails

Validation

• 35 plugin/Wasmtime tests passed
• 45 HAP tests passed, including encrypted TCP access and replay rejection
• 22 all-feature server tests passed
• Core, migration, recorder, assist, REST, authentication, and WebSocket suites passed
• Strict clippy passed for all changed crates and enabled features on Rust 1.89
• Optimized homecore-server release build passed with wasmtime,hap-server

Compatibility boundaries

HOMECORE implements the documented core Home Assistant API surface represented in its compatibility manifest, not every third-party integration or frontend-specific extension. HAP is not Apple-certified and still documents timed writes, /resource, current external-controller testing, and hardware-backed key storage as follow-up work.

Security audit note: the enabled HOMECORE server graph does not include the remaining vulnerable packages reported in unrelated or optional monorepo dependency graphs.

Full change: #1451