fix(homecore): harden runtime and publish truthful capabilities (#1450)

v2/crates/homecore-api/src/state.rs

@@ -1,5 +1,5 @@
-use std::sync::Arc;
 use homecore::HomeCore;
+use std::sync::Arc;
 
 use crate::tokens::LongLivedTokenStore;
 
@@ -28,15 +28,13 @@ impl SharedState {
         location_name: impl Into<String>,
         homecore_version: impl Into<String>,
     ) -> Self {
-        // P2 default: dev-mode token store (accepts any non-empty
-        // bearer) so existing smoke tests still work; the
-        // `homecore-server` binary uses with_tokens() to provision a
-        // real store at boot.
+        // Fail closed by default. Tests and explicitly insecure local
+        // development must opt into `allow_any_non_empty()` themselves.
         Self::with_tokens(
             homecore,
             location_name,
             homecore_version,
-            LongLivedTokenStore::allow_any_non_empty(),
+            LongLivedTokenStore::empty(),
         )
     }
 
@@ -56,8 +54,16 @@ impl SharedState {
         }
     }
 
-    pub fn homecore(&self) -> &HomeCore { &self.inner.homecore }
-    pub fn version(&self) -> &str { &self.inner.homecore_version }
-    pub fn location_name(&self) -> &str { &self.inner.location_name }
-    pub fn tokens(&self) -> &LongLivedTokenStore { &self.inner.tokens }
+    pub fn homecore(&self) -> &HomeCore {
+        &self.inner.homecore
+    }
+    pub fn version(&self) -> &str {
+        &self.inner.homecore_version
+    }
+    pub fn location_name(&self) -> &str {
+        &self.inner.location_name
+    }
+    pub fn tokens(&self) -> &LongLivedTokenStore {
+        &self.inner.tokens
+    }
 }