@fabricorg/platform-host 0.1.0 → 0.3.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md CHANGED
@@ -1,5 +1,17 @@
1
1
  # @fabricorg/platform-host
2
2
 
3
+ ## 0.3.0 — 2026-07-19
4
+
5
+ - Add tenant-scoped stable command idempotency and terminal replay.
6
+ - Add atomic Postgres claim leases, bounded store-backed workers, and expired-work recovery.
7
+ - Add operator listing and event replay capabilities to recoverable stores.
8
+ - Ensure unexpected lifecycle failures, including unregistered adapters, end terminally.
9
+ - Add direct coverage for the Postgres/Lakebase store contract and worker recovery.
10
+
11
+ ## 0.2.0 — 2026-07-19
12
+
13
+ - Add pre-persistence action-parameter redaction so durable audit records cannot retain forbidden secrets.
14
+
3
15
  ## 0.1.0 — 2026-07-19
4
16
 
5
17
  - Add the reusable governed mutation host extracted from the reference Fabric application host.
package/README.md CHANGED
@@ -3,7 +3,7 @@
3
3
  The canonical host for the `@fabricorg/platform` mutation pipeline.
4
4
 
5
5
  ```bash
6
- pnpm add @fabricorg/platform@^0.7.0 @fabricorg/platform-host@^0.1.0
6
+ pnpm add @fabricorg/platform@^0.7.0 @fabricorg/platform-host@^0.2.0
7
7
  ```
8
8
 
9
9
  Vertical packages register `FabricModule` definitions. Host applications provide tenant authorization,
@@ -18,8 +18,16 @@ Actor → ActionInvocation → PolicyEvaluation → StateMachine → Handler →
18
18
  worker entry point. With no dispatcher the host executes inline, which is intended for tests and local
19
19
  development only.
20
20
 
21
+ Production polling workers can use `createStoreBackedActionDispatcher()` plus
22
+ `runPlatformActionWorker()`. The pending invocation row is the durable queue item; workers claim
23
+ bounded batches with an atomic lease and `FOR UPDATE SKIP LOCKED`, and an expired `running` lease is
24
+ recoverable after interruption. Pass a stable `idempotencyKey` to `submitAction()` so retries resolve
25
+ to the original tenant-scoped invocation instead of creating another mutation.
26
+
21
27
  Sensitive values must not be passed as action parameters. Stage them in tenant-bound encrypted storage
22
28
  and pass an opaque identifier instead; action parameters are intentionally durable audit evidence.
29
+ Hosts should additionally configure `redactActionParameters` as a fail-safe allowlist for actions
30
+ whose ingress is adjacent to secret material; redaction runs before the invocation row is created.
23
31
 
24
32
  `MemoryPlatformHostStore` is for tests and local demos. Production control planes use
25
33
  `PostgresPlatformHostStore` with Databricks Lakebase (or standard Postgres), call