@fabricorg/platform-host 0.5.0 → 0.6.0

package/dist/index.d.cts

@@ -1,5 +1,7 @@
-import { ActorType, ActionId, ActionStatus, AgentActionRoute, AgentActionRiskTier, MutationFootprint, ExecutionPrincipal, PolicyOutcome, AssetEventEnvelope, ExecutionAttestation, ExternalReconciliation, PolicyObligation, PolicyObligationStatus, ActionDefinition, AdapterImplementation, FabricRuntimeServices, AgentActionPolicyEvaluator, MutationGovernanceResolver, RuntimePolicyDefinition } from '@fabricorg/platform';
+import { ActorType, ActionId, ActionStatus, AgentActionRoute, AgentActionRiskTier, MutationFootprint, ExecutionPrincipal, GovernanceRuntimeEvidence, PolicyOutcome, AssetEventEnvelope, ExecutionAttestation, ExternalReconciliation, PolicyObligation, PolicyObligationStatus, ActionDefinition, AdapterImplementation, FabricRuntimeServices, AgentActionPolicyEvaluator, MutationGovernanceResolver, RuntimePolicyDefinition } from '@fabricorg/platform';
 
+/** Durable Host lifecycle generation, independent from the npm package version. */
+declare const PLATFORM_HOST_CONTRACT_VERSION: 1;
 interface PendingAssetEvent {
     eventType: string;
     subjectType: string;
@@ -31,6 +33,7 @@ interface ActionInvocationRecord {
     approvalDecision?: PersistedActionApprovalDecision;
     mutationFootprint?: MutationFootprint;
     executionPrincipal?: ExecutionPrincipal;
+    runtimeEvidence?: GovernanceRuntimeEvidence;
     error?: string;
     createdAt: Date;
     updatedAt: Date;
@@ -274,10 +277,14 @@ interface PlatformHostOptions<TDb> {
         adapterType: string;
         operation: string;
         vendor: string;
+        /** Audit-safe adapter input after redactAdapterInput has been applied. */
+        input: Record<string, unknown>;
         startedAt: Date;
         completedAt: Date;
         output: Record<string, unknown>;
     }) => Promise<ExecutionAttestation | undefined> | ExecutionAttestation | undefined;
+    /** Package/provider/ruleset generations persisted with every newly created invocation. */
+    runtimeEvidence?: Partial<GovernanceRuntimeEvidence>;
     /** Lease held while an approved invocation resumes; defaults to five minutes. */
     approvalResumeLeaseDurationMs?: number;
     /** Remove forbidden/sensitive fields before durable invocation persistence. */
@@ -394,4 +401,4 @@ declare function runPlatformActionWorkerCycle<TDb>(options: PlatformActionWorker
 /** Poll until aborted. Each iteration is bounded and waits without busy-spinning. */
 declare function runPlatformActionWorker<TDb>(options: PlatformActionWorkerOptions<TDb>): Promise<void>;
 
-export { type ActionApprovalDecision, type ActionAuthorizationInput, type ActionInvocationRecord, type AdapterInvocationRecord, type AdapterInvocationStatus, type ApprovalDecisionTransitionResult, type ApprovalPlatformHostStore, type BeginApprovalDecisionInput, type ClaimActionInvocationsInput, type CreateActionInvocationInput, type DispatchActionInput, type DispatchActionResult, type ExecuteActionResult, type ExecuteInvocationOptions, type ExecutionAttestationRecord, type ExternalReconciliationRecord, type GovernancePlatformHostStore, type GovernedActionHost, type HitlDecisionEvidence, type ListActionInvocationsInput, MemoryPlatformHostStore, type PendingAssetEvent, type PersistedActionApprovalDecision, type PlatformActionDispatcher, type PlatformActionWorkerCycleResult, type PlatformActionWorkerOptions, type PlatformHostAuthorization, type PlatformHostOptions, type PlatformHostSqlClient, type PlatformHostSqlResult, type PlatformHostStore, type PolicyEvaluationRecord, type PolicyObligationRecord, PostgresPlatformHostStore, type RecoverablePlatformHostStore, type SubmitActionInput, type SubmitActionResult, createGovernedActionHost, createStoreBackedActionDispatcher, runPlatformActionWorker, runPlatformActionWorkerCycle };
+export { type ActionApprovalDecision, type ActionAuthorizationInput, type ActionInvocationRecord, type AdapterInvocationRecord, type AdapterInvocationStatus, type ApprovalDecisionTransitionResult, type ApprovalPlatformHostStore, type BeginApprovalDecisionInput, type ClaimActionInvocationsInput, type CreateActionInvocationInput, type DispatchActionInput, type DispatchActionResult, type ExecuteActionResult, type ExecuteInvocationOptions, type ExecutionAttestationRecord, type ExternalReconciliationRecord, type GovernancePlatformHostStore, type GovernedActionHost, type HitlDecisionEvidence, type ListActionInvocationsInput, MemoryPlatformHostStore, PLATFORM_HOST_CONTRACT_VERSION, type PendingAssetEvent, type PersistedActionApprovalDecision, type PlatformActionDispatcher, type PlatformActionWorkerCycleResult, type PlatformActionWorkerOptions, type PlatformHostAuthorization, type PlatformHostOptions, type PlatformHostSqlClient, type PlatformHostSqlResult, type PlatformHostStore, type PolicyEvaluationRecord, type PolicyObligationRecord, PostgresPlatformHostStore, type RecoverablePlatformHostStore, type SubmitActionInput, type SubmitActionResult, createGovernedActionHost, createStoreBackedActionDispatcher, runPlatformActionWorker, runPlatformActionWorkerCycle };

package/dist/index.d.ts

@@ -1,5 +1,7 @@
-import { ActorType, ActionId, ActionStatus, AgentActionRoute, AgentActionRiskTier, MutationFootprint, ExecutionPrincipal, PolicyOutcome, AssetEventEnvelope, ExecutionAttestation, ExternalReconciliation, PolicyObligation, PolicyObligationStatus, ActionDefinition, AdapterImplementation, FabricRuntimeServices, AgentActionPolicyEvaluator, MutationGovernanceResolver, RuntimePolicyDefinition } from '@fabricorg/platform';
+import { ActorType, ActionId, ActionStatus, AgentActionRoute, AgentActionRiskTier, MutationFootprint, ExecutionPrincipal, GovernanceRuntimeEvidence, PolicyOutcome, AssetEventEnvelope, ExecutionAttestation, ExternalReconciliation, PolicyObligation, PolicyObligationStatus, ActionDefinition, AdapterImplementation, FabricRuntimeServices, AgentActionPolicyEvaluator, MutationGovernanceResolver, RuntimePolicyDefinition } from '@fabricorg/platform';
 
+/** Durable Host lifecycle generation, independent from the npm package version. */
+declare const PLATFORM_HOST_CONTRACT_VERSION: 1;
 interface PendingAssetEvent {
     eventType: string;
     subjectType: string;
@@ -31,6 +33,7 @@ interface ActionInvocationRecord {
     approvalDecision?: PersistedActionApprovalDecision;
     mutationFootprint?: MutationFootprint;
     executionPrincipal?: ExecutionPrincipal;
+    runtimeEvidence?: GovernanceRuntimeEvidence;
     error?: string;
     createdAt: Date;
     updatedAt: Date;
@@ -274,10 +277,14 @@ interface PlatformHostOptions<TDb> {
         adapterType: string;
         operation: string;
         vendor: string;
+        /** Audit-safe adapter input after redactAdapterInput has been applied. */
+        input: Record<string, unknown>;
         startedAt: Date;
         completedAt: Date;
         output: Record<string, unknown>;
     }) => Promise<ExecutionAttestation | undefined> | ExecutionAttestation | undefined;
+    /** Package/provider/ruleset generations persisted with every newly created invocation. */
+    runtimeEvidence?: Partial<GovernanceRuntimeEvidence>;
     /** Lease held while an approved invocation resumes; defaults to five minutes. */
     approvalResumeLeaseDurationMs?: number;
     /** Remove forbidden/sensitive fields before durable invocation persistence. */
@@ -394,4 +401,4 @@ declare function runPlatformActionWorkerCycle<TDb>(options: PlatformActionWorker
 /** Poll until aborted. Each iteration is bounded and waits without busy-spinning. */
 declare function runPlatformActionWorker<TDb>(options: PlatformActionWorkerOptions<TDb>): Promise<void>;
 
-export { type ActionApprovalDecision, type ActionAuthorizationInput, type ActionInvocationRecord, type AdapterInvocationRecord, type AdapterInvocationStatus, type ApprovalDecisionTransitionResult, type ApprovalPlatformHostStore, type BeginApprovalDecisionInput, type ClaimActionInvocationsInput, type CreateActionInvocationInput, type DispatchActionInput, type DispatchActionResult, type ExecuteActionResult, type ExecuteInvocationOptions, type ExecutionAttestationRecord, type ExternalReconciliationRecord, type GovernancePlatformHostStore, type GovernedActionHost, type HitlDecisionEvidence, type ListActionInvocationsInput, MemoryPlatformHostStore, type PendingAssetEvent, type PersistedActionApprovalDecision, type PlatformActionDispatcher, type PlatformActionWorkerCycleResult, type PlatformActionWorkerOptions, type PlatformHostAuthorization, type PlatformHostOptions, type PlatformHostSqlClient, type PlatformHostSqlResult, type PlatformHostStore, type PolicyEvaluationRecord, type PolicyObligationRecord, PostgresPlatformHostStore, type RecoverablePlatformHostStore, type SubmitActionInput, type SubmitActionResult, createGovernedActionHost, createStoreBackedActionDispatcher, runPlatformActionWorker, runPlatformActionWorkerCycle };
+export { type ActionApprovalDecision, type ActionAuthorizationInput, type ActionInvocationRecord, type AdapterInvocationRecord, type AdapterInvocationStatus, type ApprovalDecisionTransitionResult, type ApprovalPlatformHostStore, type BeginApprovalDecisionInput, type ClaimActionInvocationsInput, type CreateActionInvocationInput, type DispatchActionInput, type DispatchActionResult, type ExecuteActionResult, type ExecuteInvocationOptions, type ExecutionAttestationRecord, type ExternalReconciliationRecord, type GovernancePlatformHostStore, type GovernedActionHost, type HitlDecisionEvidence, type ListActionInvocationsInput, MemoryPlatformHostStore, PLATFORM_HOST_CONTRACT_VERSION, type PendingAssetEvent, type PersistedActionApprovalDecision, type PlatformActionDispatcher, type PlatformActionWorkerCycleResult, type PlatformActionWorkerOptions, type PlatformHostAuthorization, type PlatformHostOptions, type PlatformHostSqlClient, type PlatformHostSqlResult, type PlatformHostStore, type PolicyEvaluationRecord, type PolicyObligationRecord, PostgresPlatformHostStore, type RecoverablePlatformHostStore, type SubmitActionInput, type SubmitActionResult, createGovernedActionHost, createStoreBackedActionDispatcher, runPlatformActionWorker, runPlatformActionWorkerCycle };

package/dist/index.js

@@ -1,4 +1,9 @@
-import { AdapterRegistry, resolveAction, createFabricId, assertMutationGovernanceContext, evaluatePolicyDefinitions, aggregatePolicyOutcomes, validateTransition, executeWithAdapterRetry, resolveStateMachine } from '@fabricorg/platform';
+import { AdapterRegistry, resolveAction, createFabricId, assertGovernanceRuntimeEvidence, FABRIC_GOVERNANCE_CONTRACT_VERSION, assertMutationGovernanceContext, evaluatePolicyDefinitions, aggregatePolicyOutcomes, validateTransition, executeWithAdapterRetry, resolveStateMachine } from '@fabricorg/platform';
+
+// src/host.ts
+
+// src/types.ts
+var PLATFORM_HOST_CONTRACT_VERSION = 1;
 
 // src/host.ts
 var DEFAULT_EXTRACT_EVENTS = (data) => {
@@ -25,6 +30,12 @@ function createGovernedActionHost(options) {
     const actionInvocationId = createFabricId("act");
     const correlationId = input.correlationId ?? createFabricId("corr");
     const durableParameters = options.redactActionParameters ? options.redactActionParameters(input.actionId, input.parameters) : input.parameters;
+    const runtimeEvidence = {
+      governanceContractVersion: FABRIC_GOVERNANCE_CONTRACT_VERSION,
+      hostContractVersion: PLATFORM_HOST_CONTRACT_VERSION,
+      ...options.runtimeEvidence
+    };
+    assertGovernanceRuntimeEvidence(runtimeEvidence);
     const durableInvocation = await options.store.createActionInvocation({
       id: actionInvocationId,
       tenantId: input.tenantId,
@@ -36,6 +47,7 @@ function createGovernedActionHost(options) {
       status: "pending",
       parameters: durableParameters,
       result: {},
+      runtimeEvidence,
       correlationId,
       ...input.causationId ? { causationId: input.causationId } : {},
       ...input.idempotencyKey ? { idempotencyKey: input.idempotencyKey } : {}
@@ -416,6 +428,7 @@ function createGovernedActionHost(options) {
               adapterType: step.adapterType,
               operation: step.operation,
               vendor: adapter.vendor,
+              input: recordedInput,
               startedAt,
               completedAt: now(),
               output
@@ -870,7 +883,7 @@ var PostgresPlatformHostStore = class {
 				attempt_count integer NOT NULL DEFAULT 0, lease_owner text,
 				lease_expires_at timestamptz, hitl_route text, hitl_risk_tier text,
 				hitl_reason text, hitl_policy_version text, approval_decision jsonb,
-				mutation_footprint jsonb, execution_principal jsonb,
+				mutation_footprint jsonb, execution_principal jsonb, runtime_evidence jsonb,
 				created_at timestamptz NOT NULL, updated_at timestamptz NOT NULL
 			);
 			ALTER TABLE fabric_platform.action_invocations
@@ -884,7 +897,8 @@ var PostgresPlatformHostStore = class {
 				ADD COLUMN IF NOT EXISTS hitl_policy_version text,
 				ADD COLUMN IF NOT EXISTS approval_decision jsonb,
 				ADD COLUMN IF NOT EXISTS mutation_footprint jsonb,
-				ADD COLUMN IF NOT EXISTS execution_principal jsonb;
+				ADD COLUMN IF NOT EXISTS execution_principal jsonb,
+				ADD COLUMN IF NOT EXISTS runtime_evidence jsonb;
 			CREATE UNIQUE INDEX IF NOT EXISTS action_invocations_idempotency_idx
 				ON fabric_platform.action_invocations
 				(tenant_id, space_id, action_id, idempotency_key)
@@ -948,8 +962,8 @@ var PostgresPlatformHostStore = class {
     const result = await this.sql.query(
       `INSERT INTO fabric_platform.action_invocations
 			 (id,tenant_id,space_id,action_id,action_version,actor_id,actor_type,status,
-			  parameters,result,correlation_id,causation_id,idempotency_key,error,created_at,updated_at)
-			 VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9::jsonb,$10::jsonb,$11,$12,$13,$14,$15,$15)
+				  parameters,result,correlation_id,causation_id,idempotency_key,error,runtime_evidence,created_at,updated_at)
+				 VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9::jsonb,$10::jsonb,$11,$12,$13,$14,$15::jsonb,$16,$16)
 			 ON CONFLICT (tenant_id,space_id,action_id,idempotency_key)
 			 WHERE idempotency_key IS NOT NULL DO UPDATE SET id=fabric_platform.action_invocations.id
 			 RETURNING *`,
@@ -968,6 +982,7 @@ var PostgresPlatformHostStore = class {
         input.causationId ?? null,
         input.idempotencyKey ?? null,
         input.error ?? null,
+        input.runtimeEvidence ? JSON.stringify(input.runtimeEvidence) : null,
         now
       ]
     );
@@ -1339,6 +1354,7 @@ function toActionRecord(row) {
     ...row.approval_decision ? { approvalDecision: toApprovalDecision(row.approval_decision) } : {},
     ...row.mutation_footprint ? { mutationFootprint: row.mutation_footprint } : {},
     ...row.execution_principal ? { executionPrincipal: row.execution_principal } : {},
+    ...row.runtime_evidence ? { runtimeEvidence: row.runtime_evidence } : {},
     ...row.error ? { error: String(row.error) } : {},
     createdAt: new Date(row.created_at),
     updatedAt: new Date(row.updated_at)
@@ -1472,6 +1488,6 @@ async function abortableDelay(milliseconds, signal) {
   });
 }
 
-export { MemoryPlatformHostStore, PostgresPlatformHostStore, createGovernedActionHost, createStoreBackedActionDispatcher, runPlatformActionWorker, runPlatformActionWorkerCycle };
+export { MemoryPlatformHostStore, PLATFORM_HOST_CONTRACT_VERSION, PostgresPlatformHostStore, createGovernedActionHost, createStoreBackedActionDispatcher, runPlatformActionWorker, runPlatformActionWorkerCycle };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map