@fabricorg/platform-host 0.5.0 → 0.6.0

package/CHANGELOG.md

@@ -1,5 +1,15 @@
 # @fabricorg/platform-host
 
+## 0.6.0
+
+- Persist governance, Host, provider-bridge, package, and policy-ruleset generations with every new invocation.
+- Add PostgreSQL `runtime_evidence` migration and in-memory/PostgreSQL conformance coverage.
+- Run the shared external-mutation fixture used by the .NET parity suite.
+
+## 0.5.1 — 2026-07-20
+
+- Include the audit-safe, redacted adapter input in execution-attestation extraction so integrations can identify external resources even when provider responses are minimal.
+
 ## 0.5.0 — 2026-07-20
 
 - Persist resolved mutation footprints and execution-principal delegation.

package/README.md

@@ -3,7 +3,7 @@
 The canonical host for the `@fabricorg/platform` mutation pipeline.
 
 ```bash
-pnpm add @fabricorg/platform@^0.7.0 @fabricorg/platform-host@^0.4.1
+pnpm add @fabricorg/platform@^0.9.0 @fabricorg/platform-host@^0.6.0
 ```
 
 Vertical packages register `FabricModule` definitions. Host applications provide tenant authorization,
@@ -91,13 +91,29 @@ whose ingress is adjacent to secret material; redaction runs before the invocati
 Hosts can configure `resolveMutationGovernance` to persist an approved, provider-neutral
 `MutationFootprint` and `ExecutionPrincipal` after schema validation. `resolvePolicyObligations`
 makes required controls durable. `extractExecutionAttestation` converts successful adapter output
-into audit-safe external evidence and can satisfy named obligations. Required obligations that are
+and the already-redacted adapter input into audit-safe external evidence and can satisfy named obligations. Required obligations that are
 still pending or failed prevent completion.
 
 The built-in stores persist footprints, delegation, obligations, attestations, and reconciliation
 observations. Provider-specific authentication and clients do not belong here. For Databricks, use
 the optional Platform integration exported by `@fabric-harness/databricks`.
 
+Every newly submitted invocation also records `runtimeEvidence`. The host always supplies the
+portable governance and host contract generations; applications should add the deployed host
+package version, policy ruleset version, and provider bridge identity. This makes an audit record
+explain which contract and provider adapter governed a mutation after dependencies have moved on.
+
+```ts
+const host = createGovernedActionHost({
+  // ...
+  runtimeEvidence: {
+    hostPackageVersion: "0.6.0",
+    policyRulesetVersion: "gtm-rules.v8",
+    providerBridge: { name: "@fabric-harness/databricks", version: "1" },
+  },
+});
+```
+
 `MemoryPlatformHostStore` is for tests and local demos. Production control planes use
 `PostgresPlatformHostStore` with Databricks Lakebase (or standard Postgres), call
 `ensureSchema()` at startup, and hydrate projections from `listEvents()`.

package/dist/index.cjs

@@ -2,6 +2,11 @@
 
 var platform = require('@fabricorg/platform');
 
+// src/host.ts
+
+// src/types.ts
+var PLATFORM_HOST_CONTRACT_VERSION = 1;
+
 // src/host.ts
 var DEFAULT_EXTRACT_EVENTS = (data) => {
   const value = data._events;
@@ -27,6 +32,12 @@ function createGovernedActionHost(options) {
     const actionInvocationId = platform.createFabricId("act");
     const correlationId = input.correlationId ?? platform.createFabricId("corr");
     const durableParameters = options.redactActionParameters ? options.redactActionParameters(input.actionId, input.parameters) : input.parameters;
+    const runtimeEvidence = {
+      governanceContractVersion: platform.FABRIC_GOVERNANCE_CONTRACT_VERSION,
+      hostContractVersion: PLATFORM_HOST_CONTRACT_VERSION,
+      ...options.runtimeEvidence
+    };
+    platform.assertGovernanceRuntimeEvidence(runtimeEvidence);
     const durableInvocation = await options.store.createActionInvocation({
       id: actionInvocationId,
       tenantId: input.tenantId,
@@ -38,6 +49,7 @@ function createGovernedActionHost(options) {
       status: "pending",
       parameters: durableParameters,
       result: {},
+      runtimeEvidence,
       correlationId,
       ...input.causationId ? { causationId: input.causationId } : {},
       ...input.idempotencyKey ? { idempotencyKey: input.idempotencyKey } : {}
@@ -418,6 +430,7 @@ function createGovernedActionHost(options) {
               adapterType: step.adapterType,
               operation: step.operation,
               vendor: adapter.vendor,
+              input: recordedInput,
               startedAt,
               completedAt: now(),
               output
@@ -872,7 +885,7 @@ var PostgresPlatformHostStore = class {
 				attempt_count integer NOT NULL DEFAULT 0, lease_owner text,
 				lease_expires_at timestamptz, hitl_route text, hitl_risk_tier text,
 				hitl_reason text, hitl_policy_version text, approval_decision jsonb,
-				mutation_footprint jsonb, execution_principal jsonb,
+				mutation_footprint jsonb, execution_principal jsonb, runtime_evidence jsonb,
 				created_at timestamptz NOT NULL, updated_at timestamptz NOT NULL
 			);
 			ALTER TABLE fabric_platform.action_invocations
@@ -886,7 +899,8 @@ var PostgresPlatformHostStore = class {
 				ADD COLUMN IF NOT EXISTS hitl_policy_version text,
 				ADD COLUMN IF NOT EXISTS approval_decision jsonb,
 				ADD COLUMN IF NOT EXISTS mutation_footprint jsonb,
-				ADD COLUMN IF NOT EXISTS execution_principal jsonb;
+				ADD COLUMN IF NOT EXISTS execution_principal jsonb,
+				ADD COLUMN IF NOT EXISTS runtime_evidence jsonb;
 			CREATE UNIQUE INDEX IF NOT EXISTS action_invocations_idempotency_idx
 				ON fabric_platform.action_invocations
 				(tenant_id, space_id, action_id, idempotency_key)
@@ -950,8 +964,8 @@ var PostgresPlatformHostStore = class {
     const result = await this.sql.query(
       `INSERT INTO fabric_platform.action_invocations
 			 (id,tenant_id,space_id,action_id,action_version,actor_id,actor_type,status,
-			  parameters,result,correlation_id,causation_id,idempotency_key,error,created_at,updated_at)
-			 VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9::jsonb,$10::jsonb,$11,$12,$13,$14,$15,$15)
+				  parameters,result,correlation_id,causation_id,idempotency_key,error,runtime_evidence,created_at,updated_at)
+				 VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9::jsonb,$10::jsonb,$11,$12,$13,$14,$15::jsonb,$16,$16)
 			 ON CONFLICT (tenant_id,space_id,action_id,idempotency_key)
 			 WHERE idempotency_key IS NOT NULL DO UPDATE SET id=fabric_platform.action_invocations.id
 			 RETURNING *`,
@@ -970,6 +984,7 @@ var PostgresPlatformHostStore = class {
         input.causationId ?? null,
         input.idempotencyKey ?? null,
         input.error ?? null,
+        input.runtimeEvidence ? JSON.stringify(input.runtimeEvidence) : null,
         now
       ]
     );
@@ -1341,6 +1356,7 @@ function toActionRecord(row) {
     ...row.approval_decision ? { approvalDecision: toApprovalDecision(row.approval_decision) } : {},
     ...row.mutation_footprint ? { mutationFootprint: row.mutation_footprint } : {},
     ...row.execution_principal ? { executionPrincipal: row.execution_principal } : {},
+    ...row.runtime_evidence ? { runtimeEvidence: row.runtime_evidence } : {},
     ...row.error ? { error: String(row.error) } : {},
     createdAt: new Date(row.created_at),
     updatedAt: new Date(row.updated_at)
@@ -1475,6 +1491,7 @@ async function abortableDelay(milliseconds, signal) {
 }
 
 exports.MemoryPlatformHostStore = MemoryPlatformHostStore;
+exports.PLATFORM_HOST_CONTRACT_VERSION = PLATFORM_HOST_CONTRACT_VERSION;
 exports.PostgresPlatformHostStore = PostgresPlatformHostStore;
 exports.createGovernedActionHost = createGovernedActionHost;
 exports.createStoreBackedActionDispatcher = createStoreBackedActionDispatcher;