feat(catalog): a confirmation that carries its own wait, and a text message

ASK_CONFIRM moves from ValueKind.TEXT to a new ValueKind.CONFIRM: the
question and the seconds it waits for an answer are one decision, and the
editor draws one control per kind, so the wait had to become part of the
kind rather than a special case for one action. Bounds are 5-60 s;
Action.number carries the wait and 0 — every rule saved before the field
existed — means ASK_CONFIRM_DEFAULT_SECONDS (10), not the floor.

SEND_SMS is new, with ValueKind.SMS: the number in text, the contact it was
picked from in displayName, the message in payload. Where it goes was read
off the head unit's own APKs rather than guessed. IBtCall carries twenty-six
transactions and not one of them is a message, so the vendor hands-free
service cannot send one; the system settings service, on the other hand,
manages a "MAP Client" profile (18, UUIDs MAP/MNS/MAS), which is the
Bluetooth Message Access Profile in the role a car takes. So the message
leaves through the paired phone.

No @SupportedOn on SEND_SMS: MAP is AOSP, not SAIC routing, so there is
nothing to declare per firmware generation. Whether it works is a bind read
at runtime, which is the same rule the vendor services already follow.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

Author: malys

CHANGELOG.md

@@ -4,6 +4,27 @@ All notable changes to this project are documented here. Format follows
 [Keep a Changelog](https://keepachangelog.com/en/1.1.0/); versions follow
 [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.3.0] - 2026-08-23
+
+### Added
+
+- `ActionType.SEND_SMS`: send a text message through the paired phone, with `ValueKind.SMS`
+  (recipient in `text`, contact label in `displayName`, message in `payload`). No
+  `@SupportedOn`: the message leaves over the Bluetooth Message Access Profile, not over a
+  SAIC service, so nothing is routed per firmware generation — availability is a bind, read at
+  runtime. Verified against the head unit's own APKs: `IBtCall` carries twenty-six
+  transactions and none of them is a message, while the system settings service manages a
+  "MAP Client" profile (18, UUIDs MAP/MNS/MAS).
+- `ValueKind.CONFIRM`: a yes/no question plus the seconds it waits for an answer. The editor
+  draws one control per kind, so the wait had to become part of the kind rather than a
+  special case for one action.
+
+### Changed
+
+- `ActionType.ASK_CONFIRM` now carries `ValueKind.CONFIRM` (5–60 s) instead of plain text.
+  `Action.number` is the wait; `0` — every rule saved before the field existed — means
+  `ActionType.ASK_CONFIRM_DEFAULT_SECONDS` (10), not the bottom of the range.
+
 ## [1.2.0] - 2026-08-22
 
 ### Added

docs/firmware-matrix.md

@@ -60,6 +60,7 @@
 | SPEAK_TEXT | — | — | — | — | — | — |
 | NAVIGATE_TO | — | — | — | — | — | — |
 | ASK_CONFIRM | — | — | — | — | — | — |
+| SEND_SMS | — | — | — | — | — | — |
 | WEBHOOK | — | — | — | — | — | — |
 | DELAY | — | — | — | — | — | — |
 | APPLY_PROFILE | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ |

lib/src/main/java/com/evsuite/hardware/catalog/ActionType.kt

@@ -439,12 +439,40 @@ enum class ActionType(
      * most of the time and wrong the once, and the driver is the only one who knows which
      * this is. Placed first, it turns an automatic rule into a proposed one.
      *
-     * [Action.text] is the question. No answer within the prompt's own timeout counts as
-     * no — the rest of the rule needs a deliberate yes, not a driver who walked away.
+     * `Action.text` is the question and `Action.number` how many seconds it waits. No answer
+     * within that time counts as no — the rest of the rule needs a deliberate yes, not a
+     * driver who walked away. `0` means [ASK_CONFIRM_DEFAULT_SECONDS]: rules saved before the
+     * wait was configurable carry no value, and the field they never set must not read as an
+     * instant refusal.
      */
     ASK_CONFIRM(
         R.string.act_ask_confirm, ActionGroup.SYSTEM,
-        ValueSpec(ValueKind.TEXT, hintRes = R.string.act_ask_confirm_hint), bridgeAction = null
+        ValueSpec(
+            ValueKind.CONFIRM,
+            min = 5, max = 60,
+            unitRes = R.string.unit_second, hintRes = R.string.act_ask_confirm_hint
+        ),
+        bridgeAction = null
+    ),
+    /**
+     * Sends a text message through the paired phone.
+     *
+     * Same reasoning as [CALL_NUMBER], one profile further out: the head unit has no SIM, so
+     * there is nothing here to send from. The vendor hands-free service does not help either
+     * — its `IBtCall` interface is calls only, with no message transaction to address — so
+     * the message goes out over the Bluetooth Message Access Profile, which the car's own
+     * Bluetooth settings manage as "MAP Client". Whether that profile is up is a bind, not a
+     * table: the action reports itself unsupported on a car or a phone that does not carry it.
+     *
+     * `Action.text` is the number, `Action.displayName` the contact it was picked from, and
+     * `Action.payload` the message.
+     *
+     * Not standstill-gated, for the reason a call is not: it writes nothing to the vehicle,
+     * and the message was written when the rule was, not at the wheel.
+     */
+    SEND_SMS(
+        R.string.act_send_sms, ActionGroup.SYSTEM,
+        ValueSpec(ValueKind.SMS, hintRes = R.string.act_send_sms_hint), bridgeAction = null
     ),
     /**
      * Calls an HTTP(S) endpoint. [Action.flag] carries the verb — false for GET, true for
@@ -498,5 +526,14 @@ enum class ActionType(
         @Suppress("DEPRECATION")
         fun byGroup(): Map<ActionGroup, List<ActionType>> =
             entries.filterNot { it == CALL_CONTACT }.groupBy { it.group }
+
+        /**
+         * The wait [ASK_CONFIRM] uses when its action carries none.
+         *
+         * The spec's own floor (5 s) is not zero: a question that closes before it can be
+         * read is a refusal dressed as a choice. Its ceiling (60 s) holds a rule's cycle for
+         * at most a minute, the same order as the delay budget the engine already enforces.
+         */
+        const val ASK_CONFIRM_DEFAULT_SECONDS = 10
     }
 }

lib/src/main/java/com/evsuite/hardware/catalog/ValueSpec.kt

@@ -42,6 +42,24 @@ enum class ValueKind {
     DESTINATION,
     /** Webhook URL plus an optional POST body. */
     WEBHOOK,
+    /**
+     * A recipient and a message: the number in `text`, the contact it was picked from in
+     * `displayName`, and the message itself in the field a webhook body already uses.
+     *
+     * Two controls rather than one, and no new model field — a message has an addressee, and
+     * it is the same phone-book field [CONTACT] offers, so a number can still be typed where
+     * no contact exists.
+     */
+    SMS,
+    /**
+     * A yes/no question in `text`, and how long it waits for an answer in `number` seconds.
+     *
+     * The wait belongs to the rule, not to the app: a question asked before the doors unlock
+     * is answered at once or not at all, while one asked at the end of a drive has to survive
+     * the driver looking away. `0` — every rule saved before the field existed — means the
+     * default wait.
+     */
+    CONFIRM,
     /**
      * A point and a radius: `text` holds "latitude,longitude", `number` the radius in
      * metres. Two controls rather than one, but no new model field — the flat union in

lib/src/main/res/values-fr/strings.xml

@@ -162,6 +162,8 @@
     <string name="act_ask_confirm_hint">ex. : ouvrir les vitres ?</string>
     <string name="act_webhook">Appeler un webhook</string>
     <string name="act_call">Appeler</string>
+    <string name="act_send_sms">Envoyer un SMS</string>
+    <string name="act_send_sms_hint">ex. : j’arrive</string>
     <string name="act_call_contact">Appeler un contact</string>
     <string name="cond_window_position">Ouverture des vitres</string>
     <string name="cond_doors_locked">Portes verrouillées</string>

lib/src/main/res/values/strings.xml

@@ -162,6 +162,8 @@
     <string name="act_ask_confirm_hint">e.g. Open the windows?</string>
     <string name="act_webhook">Call webhook</string>
     <string name="act_call">Call</string>
+    <string name="act_send_sms">Send a text message</string>
+    <string name="act_send_sms_hint">e.g. On my way</string>
     <string name="act_call_contact">Call a contact</string>
     <string name="cond_window_position">Window opening</string>
     <string name="cond_doors_locked">Doors locked</string>

lib/src/test/java/com/evsuite/hardware/FirmwareSupportTest.kt

@@ -38,7 +38,10 @@ class FirmwareSupportTest {
         ActionType.NAVIGATE_TO,
         ActionType.WEBHOOK,
         ActionType.ASK_CONFIRM,
-        ActionType.DELAY
+        ActionType.DELAY,
+        // Le SMS part par le profil Bluetooth MAP, pas par un service SAIC : rien à router
+        // par génération de firmware. Sa disponibilité se lit au bind, pas dans la matrice.
+        ActionType.SEND_SMS
     )
 
     @Test

lib/src/test/java/com/evsuite/hardware/catalog/CatalogConsistencyTest.kt

@@ -36,11 +36,26 @@ class CatalogConsistencyTest {
     }
 
     @Test
-    fun `la demande de confirmation porte sa question et rien d autre`() {
+    fun `le sms porte un destinataire et un message`() {
+        // Le destinataire est un numéro (ou un contact du répertoire PBAP) et le message est
+        // du texte libre : un seul contrôle ne pourrait pas porter les deux.
+        assertEquals(ValueKind.SMS, ActionType.SEND_SMS.spec.kind)
+        assertTrue(ActionType.SEND_SMS.spec.hintRes != 0)
+        assertFalse("le SMS n'écrit rien dans le véhicule", ActionType.SEND_SMS.gated)
+    }
+
+    @Test
+    fun `la demande de confirmation porte sa question et son delai`() {
         // Le texte EST la question posée au conducteur ; un exemple est indispensable, la
-        // formulation par défaut d'un champ vide n'apprend rien.
-        assertEquals(ValueKind.TEXT, ActionType.ASK_CONFIRM.spec.kind)
+        // formulation par défaut d'un champ vide n'apprend rien. Le nombre est l'attente en
+        // secondes, bornée pour qu'une question reste lisible sans bloquer le cycle.
+        assertEquals(ValueKind.CONFIRM, ActionType.ASK_CONFIRM.spec.kind)
         assertTrue(ActionType.ASK_CONFIRM.spec.hintRes != 0)
+        assertTrue(ActionType.ASK_CONFIRM.spec.min > 0)
+        assertTrue(ActionType.ASK_CONFIRM.spec.max > ActionType.ASK_CONFIRM.spec.min)
+        // Le défaut des règles enregistrées sans délai doit rester dans les bornes offertes.
+        assertTrue(ActionType.ASK_CONFIRM_DEFAULT_SECONDS in
+            ActionType.ASK_CONFIRM.spec.min..ActionType.ASK_CONFIRM.spec.max)
         assertFalse("la question ne touche pas le véhicule", ActionType.ASK_CONFIRM.gated)
     }
 
@@ -51,7 +66,7 @@ class CatalogConsistencyTest {
         val localOnly = setOf(
             ActionType.LAUNCH_APP, ActionType.SHOW_NOTIFICATION, ActionType.SPEAK_TEXT,
             ActionType.NAVIGATE_TO, ActionType.WEBHOOK, ActionType.ASK_CONFIRM,
-            ActionType.DELAY
+            ActionType.DELAY, ActionType.SEND_SMS
         )
 
         ActionType.entries.filterNot { it in localOnly }.forEach { type ->
@@ -64,7 +79,7 @@ class CatalogConsistencyTest {
         listOf(
             ActionType.LAUNCH_APP, ActionType.SHOW_NOTIFICATION, ActionType.SPEAK_TEXT,
             ActionType.NAVIGATE_TO, ActionType.WEBHOOK, ActionType.ASK_CONFIRM,
-            ActionType.DELAY
+            ActionType.DELAY, ActionType.SEND_SMS
         ).forEach { type ->
             assertTrue(
                 "${type.name} ne touche pas le véhicule et ne doit pas avoir de bridgeAction",