@fabricorg/platform-host 0.5.1 → 0.7.0

package/dist/index.d.cts

@@ -1,5 +1,7 @@
-import { ActorType, ActionId, ActionStatus, AgentActionRoute, AgentActionRiskTier, MutationFootprint, ExecutionPrincipal, PolicyOutcome, AssetEventEnvelope, ExecutionAttestation, ExternalReconciliation, PolicyObligation, PolicyObligationStatus, ActionDefinition, AdapterImplementation, FabricRuntimeServices, AgentActionPolicyEvaluator, MutationGovernanceResolver, RuntimePolicyDefinition } from '@fabricorg/platform';
+import { ActorType, ActionId, ActionStatus, AgentActionRoute, AgentActionRiskTier, MutationFootprint, ExecutionPrincipal, GovernanceRuntimeEvidence, PolicyOutcome, AssetEventEnvelope, ExecutionAttestation, ExternalReconciliation, PolicyObligation, PolicyObligationStatus, ActionDefinition, AdapterImplementation, FabricRuntimeServices, AgentActionPolicyEvaluator, MutationGovernanceResolver, RuntimePolicyDefinition } from '@fabricorg/platform';
 
+/** Durable Host lifecycle generation, independent from the npm package version. */
+declare const PLATFORM_HOST_CONTRACT_VERSION: 2;
 interface PendingAssetEvent {
     eventType: string;
     subjectType: string;
@@ -21,6 +23,8 @@ interface ActionInvocationRecord {
     correlationId: string;
     causationId?: string;
     idempotencyKey?: string;
+    /** Opaque, non-secret reference used to revalidate delegated execution authority. */
+    authorizationBindingId?: string;
     attemptCount: number;
     leaseOwner?: string;
     leaseExpiresAt?: Date;
@@ -31,6 +35,7 @@ interface ActionInvocationRecord {
     approvalDecision?: PersistedActionApprovalDecision;
     mutationFootprint?: MutationFootprint;
     executionPrincipal?: ExecutionPrincipal;
+    runtimeEvidence?: GovernanceRuntimeEvidence;
     error?: string;
     createdAt: Date;
     updatedAt: Date;
@@ -115,6 +120,31 @@ interface PlatformHostStore<TDb> {
     nextEventSequence(tenantId: string, spaceId: string): Promise<number>;
     getEntityState(tenantId: string, spaceId: string, entityType: string, entityId: string): Promise<string | undefined>;
 }
+/**
+ * Transaction-scoped Host operations used to commit domain writes and their
+ * canonical events as one unit of work.
+ *
+ * The supplied `db` must be bound to the same database transaction as every
+ * lifecycle method on this object. Implementations must roll the whole unit
+ * back when `run` throws.
+ */
+interface PlatformHostMutationTransaction<TDb> {
+    readonly db: TDb;
+    appendEvent(event: AssetEventEnvelope): Promise<void>;
+    nextEventSequence(tenantId: string, spaceId: string): Promise<number>;
+    listEvents(tenantId: string, spaceId: string): Promise<AssetEventEnvelope[]>;
+    updateActionInvocation(id: string, tenantId: string, spaceId: string, patch: Partial<Pick<ActionInvocationRecord, "status" | "result" | "error">>): Promise<void>;
+}
+/**
+ * Optional production capability for atomic domain/event persistence.
+ *
+ * A mutating Host action uses this capability when available. Stores that do
+ * not implement it retain the legacy transaction boundary for compatibility,
+ * but cannot claim atomic domain-write/event persistence.
+ */
+interface AtomicMutationPlatformHostStore<TDb> extends PlatformHostStore<TDb> {
+    transactionWithEvents<TResult>(run: (transaction: PlatformHostMutationTransaction<TDb>) => Promise<TResult>): Promise<TResult>;
+}
 interface BeginApprovalDecisionInput {
     actionInvocationId: string;
     tenantId: string;
@@ -177,9 +207,27 @@ interface ActionAuthorizationInput {
     actorId: string;
     actorType: ActorType;
 }
+type ActionExecutionReason = "initial" | "approval_resume" | "recovery";
+/**
+ * Trusted execution-boundary authorization input.
+ *
+ * Parameters are the schema-parsed durable parameters, never caller-supplied
+ * transient values. `invocation` is the canonical record that will execute.
+ */
+interface ActionExecutionAuthorizationInput extends ActionAuthorizationInput {
+    actionInvocationId: string;
+    parameters: unknown;
+    invocation: Readonly<ActionInvocationRecord>;
+    executionReason: ActionExecutionReason;
+}
 interface PlatformHostAuthorization {
     checkEntitlement(input: ActionAuthorizationInput): Promise<boolean>;
     authorize(input: ActionAuthorizationInput): Promise<boolean>;
+    /**
+     * Optional final authorization immediately before policies and mutation
+     * execution. When absent, the Host reuses `authorize` at this boundary.
+     */
+    authorizeExecution?(input: ActionExecutionAuthorizationInput): Promise<boolean>;
     /** Optional distinct authorization boundary for human/system approval decisions. */
     authorizeApproval?(input: ActionAuthorizationInput & {
         decision: ActionApprovalDecision;
@@ -209,6 +257,8 @@ interface SubmitActionInput {
     causationId?: string;
     /** Stable logical command key. Reusing it returns/re-dispatches the original invocation. */
     idempotencyKey?: string;
+    /** Opaque, non-secret authorization/admission reference persisted with the invocation. */
+    authorizationBindingId?: string;
 }
 interface SubmitActionResult {
     actionInvocationId: string;
@@ -280,6 +330,8 @@ interface PlatformHostOptions<TDb> {
         completedAt: Date;
         output: Record<string, unknown>;
     }) => Promise<ExecutionAttestation | undefined> | ExecutionAttestation | undefined;
+    /** Package/provider/ruleset generations persisted with every newly created invocation. */
+    runtimeEvidence?: Partial<GovernanceRuntimeEvidence>;
     /** Lease held while an approved invocation resumes; defaults to five minutes. */
     approvalResumeLeaseDurationMs?: number;
     /** Remove forbidden/sensitive fields before durable invocation persistence. */
@@ -352,11 +404,26 @@ interface PlatformHostSqlResult<Row = Record<string, unknown>> {
 interface PlatformHostSqlClient {
     query<Row = Record<string, unknown>>(sql: string, values?: unknown[]): Promise<PlatformHostSqlResult<Row>>;
 }
+interface PostgresPlatformHostTransactionContext<TDb> {
+    db: TDb;
+    sql: PlatformHostSqlClient;
+}
+/**
+ * Application-owned transaction binder.
+ *
+ * Platform Host cannot infer how an application's `TDb` is rebound to a
+ * `pg.PoolClient`. Production applications provide this adapter so domain
+ * methods and Host ledger writes share one PostgreSQL transaction.
+ */
+interface PostgresPlatformHostTransactionProvider<TDb> {
+    run<TResult>(run: (context: PostgresPlatformHostTransactionContext<TDb>) => Promise<TResult>): Promise<TResult>;
+}
 /** Durable mutation-pipeline ledger for Databricks Lakebase or standard Postgres. */
 declare class PostgresPlatformHostStore<TDb> implements RecoverablePlatformHostStore<TDb>, ApprovalPlatformHostStore<TDb>, GovernancePlatformHostStore<TDb> {
     readonly db: TDb;
     private readonly sql;
-    constructor(db: TDb, sql: PlatformHostSqlClient);
+    readonly transactionWithEvents?: AtomicMutationPlatformHostStore<TDb>["transactionWithEvents"];
+    constructor(db: TDb, sql: PlatformHostSqlClient, transactionProvider?: PostgresPlatformHostTransactionProvider<TDb>);
     ensureSchema(): Promise<void>;
     transaction<TResult>(run: (db: TDb) => Promise<TResult>): Promise<TResult>;
     createActionInvocation(input: CreateActionInvocationInput): Promise<ActionInvocationRecord>;
@@ -396,4 +463,4 @@ declare function runPlatformActionWorkerCycle<TDb>(options: PlatformActionWorker
 /** Poll until aborted. Each iteration is bounded and waits without busy-spinning. */
 declare function runPlatformActionWorker<TDb>(options: PlatformActionWorkerOptions<TDb>): Promise<void>;
 
-export { type ActionApprovalDecision, type ActionAuthorizationInput, type ActionInvocationRecord, type AdapterInvocationRecord, type AdapterInvocationStatus, type ApprovalDecisionTransitionResult, type ApprovalPlatformHostStore, type BeginApprovalDecisionInput, type ClaimActionInvocationsInput, type CreateActionInvocationInput, type DispatchActionInput, type DispatchActionResult, type ExecuteActionResult, type ExecuteInvocationOptions, type ExecutionAttestationRecord, type ExternalReconciliationRecord, type GovernancePlatformHostStore, type GovernedActionHost, type HitlDecisionEvidence, type ListActionInvocationsInput, MemoryPlatformHostStore, type PendingAssetEvent, type PersistedActionApprovalDecision, type PlatformActionDispatcher, type PlatformActionWorkerCycleResult, type PlatformActionWorkerOptions, type PlatformHostAuthorization, type PlatformHostOptions, type PlatformHostSqlClient, type PlatformHostSqlResult, type PlatformHostStore, type PolicyEvaluationRecord, type PolicyObligationRecord, PostgresPlatformHostStore, type RecoverablePlatformHostStore, type SubmitActionInput, type SubmitActionResult, createGovernedActionHost, createStoreBackedActionDispatcher, runPlatformActionWorker, runPlatformActionWorkerCycle };
+export { type ActionApprovalDecision, type ActionAuthorizationInput, type ActionExecutionAuthorizationInput, type ActionExecutionReason, type ActionInvocationRecord, type AdapterInvocationRecord, type AdapterInvocationStatus, type ApprovalDecisionTransitionResult, type ApprovalPlatformHostStore, type AtomicMutationPlatformHostStore, type BeginApprovalDecisionInput, type ClaimActionInvocationsInput, type CreateActionInvocationInput, type DispatchActionInput, type DispatchActionResult, type ExecuteActionResult, type ExecuteInvocationOptions, type ExecutionAttestationRecord, type ExternalReconciliationRecord, type GovernancePlatformHostStore, type GovernedActionHost, type HitlDecisionEvidence, type ListActionInvocationsInput, MemoryPlatformHostStore, PLATFORM_HOST_CONTRACT_VERSION, type PendingAssetEvent, type PersistedActionApprovalDecision, type PlatformActionDispatcher, type PlatformActionWorkerCycleResult, type PlatformActionWorkerOptions, type PlatformHostAuthorization, type PlatformHostMutationTransaction, type PlatformHostOptions, type PlatformHostSqlClient, type PlatformHostSqlResult, type PlatformHostStore, type PolicyEvaluationRecord, type PolicyObligationRecord, PostgresPlatformHostStore, type PostgresPlatformHostTransactionContext, type PostgresPlatformHostTransactionProvider, type RecoverablePlatformHostStore, type SubmitActionInput, type SubmitActionResult, createGovernedActionHost, createStoreBackedActionDispatcher, runPlatformActionWorker, runPlatformActionWorkerCycle };

package/dist/index.d.ts

@@ -1,5 +1,7 @@
-import { ActorType, ActionId, ActionStatus, AgentActionRoute, AgentActionRiskTier, MutationFootprint, ExecutionPrincipal, PolicyOutcome, AssetEventEnvelope, ExecutionAttestation, ExternalReconciliation, PolicyObligation, PolicyObligationStatus, ActionDefinition, AdapterImplementation, FabricRuntimeServices, AgentActionPolicyEvaluator, MutationGovernanceResolver, RuntimePolicyDefinition } from '@fabricorg/platform';
+import { ActorType, ActionId, ActionStatus, AgentActionRoute, AgentActionRiskTier, MutationFootprint, ExecutionPrincipal, GovernanceRuntimeEvidence, PolicyOutcome, AssetEventEnvelope, ExecutionAttestation, ExternalReconciliation, PolicyObligation, PolicyObligationStatus, ActionDefinition, AdapterImplementation, FabricRuntimeServices, AgentActionPolicyEvaluator, MutationGovernanceResolver, RuntimePolicyDefinition } from '@fabricorg/platform';
 
+/** Durable Host lifecycle generation, independent from the npm package version. */
+declare const PLATFORM_HOST_CONTRACT_VERSION: 2;
 interface PendingAssetEvent {
     eventType: string;
     subjectType: string;
@@ -21,6 +23,8 @@ interface ActionInvocationRecord {
     correlationId: string;
     causationId?: string;
     idempotencyKey?: string;
+    /** Opaque, non-secret reference used to revalidate delegated execution authority. */
+    authorizationBindingId?: string;
     attemptCount: number;
     leaseOwner?: string;
     leaseExpiresAt?: Date;
@@ -31,6 +35,7 @@ interface ActionInvocationRecord {
     approvalDecision?: PersistedActionApprovalDecision;
     mutationFootprint?: MutationFootprint;
     executionPrincipal?: ExecutionPrincipal;
+    runtimeEvidence?: GovernanceRuntimeEvidence;
     error?: string;
     createdAt: Date;
     updatedAt: Date;
@@ -115,6 +120,31 @@ interface PlatformHostStore<TDb> {
     nextEventSequence(tenantId: string, spaceId: string): Promise<number>;
     getEntityState(tenantId: string, spaceId: string, entityType: string, entityId: string): Promise<string | undefined>;
 }
+/**
+ * Transaction-scoped Host operations used to commit domain writes and their
+ * canonical events as one unit of work.
+ *
+ * The supplied `db` must be bound to the same database transaction as every
+ * lifecycle method on this object. Implementations must roll the whole unit
+ * back when `run` throws.
+ */
+interface PlatformHostMutationTransaction<TDb> {
+    readonly db: TDb;
+    appendEvent(event: AssetEventEnvelope): Promise<void>;
+    nextEventSequence(tenantId: string, spaceId: string): Promise<number>;
+    listEvents(tenantId: string, spaceId: string): Promise<AssetEventEnvelope[]>;
+    updateActionInvocation(id: string, tenantId: string, spaceId: string, patch: Partial<Pick<ActionInvocationRecord, "status" | "result" | "error">>): Promise<void>;
+}
+/**
+ * Optional production capability for atomic domain/event persistence.
+ *
+ * A mutating Host action uses this capability when available. Stores that do
+ * not implement it retain the legacy transaction boundary for compatibility,
+ * but cannot claim atomic domain-write/event persistence.
+ */
+interface AtomicMutationPlatformHostStore<TDb> extends PlatformHostStore<TDb> {
+    transactionWithEvents<TResult>(run: (transaction: PlatformHostMutationTransaction<TDb>) => Promise<TResult>): Promise<TResult>;
+}
 interface BeginApprovalDecisionInput {
     actionInvocationId: string;
     tenantId: string;
@@ -177,9 +207,27 @@ interface ActionAuthorizationInput {
     actorId: string;
     actorType: ActorType;
 }
+type ActionExecutionReason = "initial" | "approval_resume" | "recovery";
+/**
+ * Trusted execution-boundary authorization input.
+ *
+ * Parameters are the schema-parsed durable parameters, never caller-supplied
+ * transient values. `invocation` is the canonical record that will execute.
+ */
+interface ActionExecutionAuthorizationInput extends ActionAuthorizationInput {
+    actionInvocationId: string;
+    parameters: unknown;
+    invocation: Readonly<ActionInvocationRecord>;
+    executionReason: ActionExecutionReason;
+}
 interface PlatformHostAuthorization {
     checkEntitlement(input: ActionAuthorizationInput): Promise<boolean>;
     authorize(input: ActionAuthorizationInput): Promise<boolean>;
+    /**
+     * Optional final authorization immediately before policies and mutation
+     * execution. When absent, the Host reuses `authorize` at this boundary.
+     */
+    authorizeExecution?(input: ActionExecutionAuthorizationInput): Promise<boolean>;
     /** Optional distinct authorization boundary for human/system approval decisions. */
     authorizeApproval?(input: ActionAuthorizationInput & {
         decision: ActionApprovalDecision;
@@ -209,6 +257,8 @@ interface SubmitActionInput {
     causationId?: string;
     /** Stable logical command key. Reusing it returns/re-dispatches the original invocation. */
     idempotencyKey?: string;
+    /** Opaque, non-secret authorization/admission reference persisted with the invocation. */
+    authorizationBindingId?: string;
 }
 interface SubmitActionResult {
     actionInvocationId: string;
@@ -280,6 +330,8 @@ interface PlatformHostOptions<TDb> {
         completedAt: Date;
         output: Record<string, unknown>;
     }) => Promise<ExecutionAttestation | undefined> | ExecutionAttestation | undefined;
+    /** Package/provider/ruleset generations persisted with every newly created invocation. */
+    runtimeEvidence?: Partial<GovernanceRuntimeEvidence>;
     /** Lease held while an approved invocation resumes; defaults to five minutes. */
     approvalResumeLeaseDurationMs?: number;
     /** Remove forbidden/sensitive fields before durable invocation persistence. */
@@ -352,11 +404,26 @@ interface PlatformHostSqlResult<Row = Record<string, unknown>> {
 interface PlatformHostSqlClient {
     query<Row = Record<string, unknown>>(sql: string, values?: unknown[]): Promise<PlatformHostSqlResult<Row>>;
 }
+interface PostgresPlatformHostTransactionContext<TDb> {
+    db: TDb;
+    sql: PlatformHostSqlClient;
+}
+/**
+ * Application-owned transaction binder.
+ *
+ * Platform Host cannot infer how an application's `TDb` is rebound to a
+ * `pg.PoolClient`. Production applications provide this adapter so domain
+ * methods and Host ledger writes share one PostgreSQL transaction.
+ */
+interface PostgresPlatformHostTransactionProvider<TDb> {
+    run<TResult>(run: (context: PostgresPlatformHostTransactionContext<TDb>) => Promise<TResult>): Promise<TResult>;
+}
 /** Durable mutation-pipeline ledger for Databricks Lakebase or standard Postgres. */
 declare class PostgresPlatformHostStore<TDb> implements RecoverablePlatformHostStore<TDb>, ApprovalPlatformHostStore<TDb>, GovernancePlatformHostStore<TDb> {
     readonly db: TDb;
     private readonly sql;
-    constructor(db: TDb, sql: PlatformHostSqlClient);
+    readonly transactionWithEvents?: AtomicMutationPlatformHostStore<TDb>["transactionWithEvents"];
+    constructor(db: TDb, sql: PlatformHostSqlClient, transactionProvider?: PostgresPlatformHostTransactionProvider<TDb>);
     ensureSchema(): Promise<void>;
     transaction<TResult>(run: (db: TDb) => Promise<TResult>): Promise<TResult>;
     createActionInvocation(input: CreateActionInvocationInput): Promise<ActionInvocationRecord>;
@@ -396,4 +463,4 @@ declare function runPlatformActionWorkerCycle<TDb>(options: PlatformActionWorker
 /** Poll until aborted. Each iteration is bounded and waits without busy-spinning. */
 declare function runPlatformActionWorker<TDb>(options: PlatformActionWorkerOptions<TDb>): Promise<void>;
 
-export { type ActionApprovalDecision, type ActionAuthorizationInput, type ActionInvocationRecord, type AdapterInvocationRecord, type AdapterInvocationStatus, type ApprovalDecisionTransitionResult, type ApprovalPlatformHostStore, type BeginApprovalDecisionInput, type ClaimActionInvocationsInput, type CreateActionInvocationInput, type DispatchActionInput, type DispatchActionResult, type ExecuteActionResult, type ExecuteInvocationOptions, type ExecutionAttestationRecord, type ExternalReconciliationRecord, type GovernancePlatformHostStore, type GovernedActionHost, type HitlDecisionEvidence, type ListActionInvocationsInput, MemoryPlatformHostStore, type PendingAssetEvent, type PersistedActionApprovalDecision, type PlatformActionDispatcher, type PlatformActionWorkerCycleResult, type PlatformActionWorkerOptions, type PlatformHostAuthorization, type PlatformHostOptions, type PlatformHostSqlClient, type PlatformHostSqlResult, type PlatformHostStore, type PolicyEvaluationRecord, type PolicyObligationRecord, PostgresPlatformHostStore, type RecoverablePlatformHostStore, type SubmitActionInput, type SubmitActionResult, createGovernedActionHost, createStoreBackedActionDispatcher, runPlatformActionWorker, runPlatformActionWorkerCycle };
+export { type ActionApprovalDecision, type ActionAuthorizationInput, type ActionExecutionAuthorizationInput, type ActionExecutionReason, type ActionInvocationRecord, type AdapterInvocationRecord, type AdapterInvocationStatus, type ApprovalDecisionTransitionResult, type ApprovalPlatformHostStore, type AtomicMutationPlatformHostStore, type BeginApprovalDecisionInput, type ClaimActionInvocationsInput, type CreateActionInvocationInput, type DispatchActionInput, type DispatchActionResult, type ExecuteActionResult, type ExecuteInvocationOptions, type ExecutionAttestationRecord, type ExternalReconciliationRecord, type GovernancePlatformHostStore, type GovernedActionHost, type HitlDecisionEvidence, type ListActionInvocationsInput, MemoryPlatformHostStore, PLATFORM_HOST_CONTRACT_VERSION, type PendingAssetEvent, type PersistedActionApprovalDecision, type PlatformActionDispatcher, type PlatformActionWorkerCycleResult, type PlatformActionWorkerOptions, type PlatformHostAuthorization, type PlatformHostMutationTransaction, type PlatformHostOptions, type PlatformHostSqlClient, type PlatformHostSqlResult, type PlatformHostStore, type PolicyEvaluationRecord, type PolicyObligationRecord, PostgresPlatformHostStore, type PostgresPlatformHostTransactionContext, type PostgresPlatformHostTransactionProvider, type RecoverablePlatformHostStore, type SubmitActionInput, type SubmitActionResult, createGovernedActionHost, createStoreBackedActionDispatcher, runPlatformActionWorker, runPlatformActionWorkerCycle };

package/dist/index.js

@@ -1,10 +1,18 @@
-import { AdapterRegistry, resolveAction, createFabricId, assertMutationGovernanceContext, evaluatePolicyDefinitions, aggregatePolicyOutcomes, validateTransition, executeWithAdapterRetry, resolveStateMachine } from '@fabricorg/platform';
+import { AdapterRegistry, resolveAction, createFabricId, assertGovernanceRuntimeEvidence, FABRIC_GOVERNANCE_CONTRACT_VERSION, assertMutationGovernanceContext, evaluatePolicyDefinitions, aggregatePolicyOutcomes, validateTransition, executeWithAdapterRetry, resolveStateMachine } from '@fabricorg/platform';
+
+// src/host.ts
+
+// src/types.ts
+var PLATFORM_HOST_CONTRACT_VERSION = 2;
 
 // src/host.ts
 var DEFAULT_EXTRACT_EVENTS = (data) => {
   const value = data._events;
   return Array.isArray(value) ? value : [];
 };
+var RecoverableFinalizationError = class extends Error {
+  name = "RecoverableFinalizationError";
+};
 function createGovernedActionHost(options) {
   const adapters = new AdapterRegistry();
   for (const adapter of options.adapters ?? []) adapters.register(adapter);
@@ -25,6 +33,12 @@ function createGovernedActionHost(options) {
     const actionInvocationId = createFabricId("act");
     const correlationId = input.correlationId ?? createFabricId("corr");
     const durableParameters = options.redactActionParameters ? options.redactActionParameters(input.actionId, input.parameters) : input.parameters;
+    const runtimeEvidence = {
+      governanceContractVersion: FABRIC_GOVERNANCE_CONTRACT_VERSION,
+      hostContractVersion: PLATFORM_HOST_CONTRACT_VERSION,
+      ...options.runtimeEvidence
+    };
+    assertGovernanceRuntimeEvidence(runtimeEvidence);
     const durableInvocation = await options.store.createActionInvocation({
       id: actionInvocationId,
       tenantId: input.tenantId,
@@ -36,9 +50,11 @@ function createGovernedActionHost(options) {
       status: "pending",
       parameters: durableParameters,
       result: {},
+      runtimeEvidence,
       correlationId,
       ...input.causationId ? { causationId: input.causationId } : {},
-      ...input.idempotencyKey ? { idempotencyKey: input.idempotencyKey } : {}
+      ...input.idempotencyKey ? { idempotencyKey: input.idempotencyKey } : {},
+      ...input.authorizationBindingId ? { authorizationBindingId: input.authorizationBindingId } : {}
     });
     const durableWorkflowId = `action-invocation-${durableInvocation.id}`;
     if (durableInvocation.id !== actionInvocationId && isTerminal(durableInvocation.status)) {
@@ -86,7 +102,7 @@ function createGovernedActionHost(options) {
     );
     return { ...executed, workflowId: durableWorkflowId };
   }
-  async function executeInvocation(actionInvocationId, tenantId, spaceId, executionOptions = {}) {
+  async function executeInvocation(actionInvocationId, tenantId, spaceId, executionOptions = {}, executionReasonOverride) {
     const loadedInvocation = await options.store.getActionInvocation(
       actionInvocationId,
       tenantId,
@@ -95,6 +111,7 @@ function createGovernedActionHost(options) {
     if (!loadedInvocation) {
       throw new Error(`ActionInvocation not found: ${actionInvocationId}`);
     }
+    const resumingRunningInvocation = loadedInvocation.status === "running";
     let invocation = loadedInvocation;
     if (isTerminal(invocation.status) || invocation.status === "waiting_for_approval") {
       return actionResult(invocation);
@@ -196,6 +213,28 @@ function createGovernedActionHost(options) {
         }
       }
       const authorizationInput = toAuthorizationInput(action, invocation);
+      const executionReason = executionReasonOverride ?? (invocation.attemptCount > 1 || resumingRunningInvocation && invocation.attemptCount === 0 ? "recovery" : "initial");
+      if (!await options.authorization.checkEntitlement(authorizationInput)) {
+        return fail(
+          invocation,
+          "failed",
+          `Module "${action.namespace}" is no longer enabled for tenant ${tenantId}`
+        );
+      }
+      const executionAuthorized = options.authorization.authorizeExecution ? await options.authorization.authorizeExecution({
+        ...authorizationInput,
+        actionInvocationId,
+        parameters: parsed.data,
+        invocation,
+        executionReason
+      }) : await options.authorization.authorize(authorizationInput);
+      if (!executionAuthorized) {
+        return fail(
+          invocation,
+          "failed",
+          `Actor ${invocation.actorId} is not authorized to execute action ${action.actionId}`
+        );
+      }
       const definitions = options.resolvePolicies ? await options.resolvePolicies({
         ...authorizationInput,
         declaredPolicyIds: action.policies ?? []
@@ -280,8 +319,8 @@ function createGovernedActionHost(options) {
       let data;
       let domainEvents = [];
       try {
-        const handlerResult = await options.store.transaction(
-          (db) => action.handler ? action.handler(
+        const runHandler = async (db, transaction) => {
+          const handlerResult = action.handler ? await action.handler(
             {
               actionInvocationId,
               tenantId,
@@ -294,28 +333,39 @@ function createGovernedActionHost(options) {
               services: options.services
             },
             parsed.data
-          ) : Promise.resolve({ success: true, data: {} })
-        );
-        if (!handlerResult.success) {
-          return fail(invocation, "failed", handlerResult.error ?? "Action handler failed");
-        }
-        data = handlerResult.data ?? {};
-        domainEvents = extractEvents(data);
-        const undeclaredEvent = domainEvents.find(
-          (event) => !action.emitsEvents.includes(event.eventType)
-        );
-        if (undeclaredEvent) {
-          return fail(
-            invocation,
-            "failed",
-            `${action.actionId} emitted undeclared event type ${undeclaredEvent.eventType}`
+          ) : { success: true, data: {} };
+          if (!handlerResult.success) {
+            throw new Error(handlerResult.error ?? "Action handler failed");
+          }
+          const handlerData = handlerResult.data ?? {};
+          const events = extractEvents(handlerData);
+          const undeclaredEvent = events.find(
+            (event) => !action.emitsEvents.includes(event.eventType)
           );
-        }
-        if (action.eventPhase !== "after_adapters") {
-          for (const [index, event] of domainEvents.entries()) {
-            await appendEvent(invocation, event, `domain:${index}`, action.version);
+          if (undeclaredEvent) {
+            throw new Error(
+              `${action.actionId} emitted undeclared event type ${undeclaredEvent.eventType}`
+            );
           }
-        }
+          if (action.eventPhase !== "after_adapters") {
+            for (const [index, event] of events.entries()) {
+              await appendEvent(
+                invocation,
+                event,
+                `domain:${index}`,
+                action.version,
+                transaction
+              );
+            }
+          }
+          return { data: handlerData, domainEvents: events };
+        };
+        const atomicStore = asAtomicMutationStore(options.store);
+        const executed = atomicStore ? await atomicStore.transactionWithEvents(
+          (transaction) => runHandler(transaction.db, transaction)
+        ) : await options.store.transaction((db) => runHandler(db));
+        data = executed.data;
+        domainEvents = executed.domainEvents;
       } catch (error) {
         return fail(invocation, "failed", errorMessage(error));
       }
@@ -446,11 +496,6 @@ function createGovernedActionHost(options) {
           return fail(invocation, "failed", message);
         }
       }
-      if (action.eventPhase === "after_adapters") {
-        for (const [index, event] of domainEvents.entries()) {
-          await appendEvent(invocation, event, `domain:${index}`, action.version);
-        }
-      }
       const governanceStore = asGovernanceStore(options.store);
       if (governanceStore && options.resolvePolicyObligations) {
         const obligations = await governanceStore.listPolicyObligations(actionInvocationId, tenantId, spaceId);
@@ -460,10 +505,43 @@ function createGovernedActionHost(options) {
         }
       }
       const result = withoutPrivateHostFields(data, eventResultFields);
-      await options.store.updateActionInvocation(actionInvocationId, tenantId, spaceId, {
-        status: "completed",
-        result
-      });
+      try {
+        const atomicStore = asAtomicMutationStore(options.store);
+        if (action.eventPhase === "after_adapters" && atomicStore) {
+          await atomicStore.transactionWithEvents(async (transaction) => {
+            for (const [index, event] of domainEvents.entries()) {
+              await appendEvent(
+                invocation,
+                event,
+                `domain:${index}`,
+                action.version,
+                transaction
+              );
+            }
+            await transaction.updateActionInvocation(
+              actionInvocationId,
+              tenantId,
+              spaceId,
+              { status: "completed", result }
+            );
+          });
+        } else {
+          if (action.eventPhase === "after_adapters") {
+            for (const [index, event] of domainEvents.entries()) {
+              await appendEvent(invocation, event, `domain:${index}`, action.version);
+            }
+          }
+          await options.store.updateActionInvocation(actionInvocationId, tenantId, spaceId, {
+            status: "completed",
+            result
+          });
+        }
+      } catch (error) {
+        if (action.eventPhase === "after_adapters") {
+          throw new RecoverableFinalizationError(errorMessage(error));
+        }
+        throw error;
+      }
       return {
         actionInvocationId,
         status: "completed",
@@ -472,6 +550,7 @@ function createGovernedActionHost(options) {
         ...invocation.hitlRiskTier ? { hitlRiskTier: invocation.hitlRiskTier } : {}
       };
     } catch (error) {
+      if (error instanceof RecoverableFinalizationError) throw error;
       return fail(invocation, "failed", errorMessage(error));
     }
   }
@@ -536,7 +615,13 @@ function createGovernedActionHost(options) {
       return actionResult(transitioned);
     }
     if (!decision.approved) return actionResult(transitioned);
-    return executeInvocation(actionInvocationId, tenantId, spaceId, { leaseOwner });
+    return executeInvocation(
+      actionInvocationId,
+      tenantId,
+      spaceId,
+      { leaseOwner },
+      "approval_resume"
+    );
   }
   async function recordExecutionAttestation(actionInvocationId, tenantId, spaceId, attestation, adapterInvocationId) {
     const governanceStore = asGovernanceStore(options.store);
@@ -570,7 +655,7 @@ function createGovernedActionHost(options) {
       spaceId
     });
   }
-  async function appendEvent(invocation, event, deduplicationKey, defaultEventSchemaVersion = 1) {
+  async function appendEvent(invocation, event, deduplicationKey, defaultEventSchemaVersion = 1, transaction) {
     const timestamp = now();
     const envelope = {
       id: lifecycleId("evt", invocation.id, deduplicationKey),
@@ -584,7 +669,7 @@ function createGovernedActionHost(options) {
       actorType: invocation.actorType,
       actionInvocationId: invocation.id,
       payload: event.payload,
-      sequence: await options.store.nextEventSequence(
+      sequence: await (transaction ?? options.store).nextEventSequence(
         invocation.tenantId,
         invocation.spaceId
       ),
@@ -593,7 +678,7 @@ function createGovernedActionHost(options) {
       correlationId: invocation.correlationId,
       ...invocation.causationId ? { causationId: invocation.causationId } : {}
     };
-    await options.store.appendEvent(envelope);
+    await (transaction ?? options.store).appendEvent(envelope);
   }
   async function fail(invocation, status, error) {
     await options.store.updateActionInvocation(
@@ -626,6 +711,10 @@ function asApprovalStore(store) {
   const candidate = store;
   return typeof candidate.recordHitlDecision === "function" && typeof candidate.beginApprovalDecision === "function" ? store : void 0;
 }
+function asAtomicMutationStore(store) {
+  const candidate = store;
+  return typeof candidate.transactionWithEvents === "function" ? store : void 0;
+}
 function asGovernanceStore(store) {
   const candidate = store;
   return typeof candidate.recordMutationGovernance === "function" && typeof candidate.appendPolicyObligations === "function" && typeof candidate.appendExecutionAttestation === "function" ? store : void 0;
@@ -852,13 +941,26 @@ var MemoryPlatformHostStore = class {
 };
 
 // src/postgres-store.ts
-var PostgresPlatformHostStore = class {
-  constructor(db, sql) {
+var PostgresPlatformHostStore = class _PostgresPlatformHostStore {
+  constructor(db, sql, transactionProvider) {
     this.db = db;
     this.sql = sql;
+    if (transactionProvider) {
+      this.transactionWithEvents = async (run) => transactionProvider.run(async ({ db: db2, sql: sql2 }) => {
+        const scoped = new _PostgresPlatformHostStore(db2, sql2);
+        return run({
+          db: db2,
+          appendEvent: (event) => scoped.appendEvent(event),
+          nextEventSequence: (tenantId, spaceId) => scoped.nextEventSequence(tenantId, spaceId),
+          listEvents: (tenantId, spaceId) => scoped.listEvents(tenantId, spaceId),
+          updateActionInvocation: (id, tenantId, spaceId, patch) => scoped.updateActionInvocation(id, tenantId, spaceId, patch)
+        });
+      });
+    }
   }
   db;
   sql;
+  transactionWithEvents;
   async ensureSchema() {
     await this.sql.query(`
 			CREATE SCHEMA IF NOT EXISTS fabric_platform;
@@ -867,15 +969,17 @@ var PostgresPlatformHostStore = class {
 				action_id text NOT NULL, action_version integer NOT NULL,
 				actor_id text NOT NULL, actor_type text NOT NULL, status text NOT NULL,
 				parameters jsonb NOT NULL, result jsonb NOT NULL DEFAULT '{}'::jsonb,
-				correlation_id text NOT NULL, causation_id text, idempotency_key text, error text,
+				correlation_id text NOT NULL, causation_id text, idempotency_key text,
+				authorization_binding_id text, error text,
 				attempt_count integer NOT NULL DEFAULT 0, lease_owner text,
 				lease_expires_at timestamptz, hitl_route text, hitl_risk_tier text,
 				hitl_reason text, hitl_policy_version text, approval_decision jsonb,
-				mutation_footprint jsonb, execution_principal jsonb,
+				mutation_footprint jsonb, execution_principal jsonb, runtime_evidence jsonb,
 				created_at timestamptz NOT NULL, updated_at timestamptz NOT NULL
 			);
 			ALTER TABLE fabric_platform.action_invocations
 				ADD COLUMN IF NOT EXISTS idempotency_key text,
+				ADD COLUMN IF NOT EXISTS authorization_binding_id text,
 				ADD COLUMN IF NOT EXISTS attempt_count integer NOT NULL DEFAULT 0,
 				ADD COLUMN IF NOT EXISTS lease_owner text,
 				ADD COLUMN IF NOT EXISTS lease_expires_at timestamptz,
@@ -885,7 +989,8 @@ var PostgresPlatformHostStore = class {
 				ADD COLUMN IF NOT EXISTS hitl_policy_version text,
 				ADD COLUMN IF NOT EXISTS approval_decision jsonb,
 				ADD COLUMN IF NOT EXISTS mutation_footprint jsonb,
-				ADD COLUMN IF NOT EXISTS execution_principal jsonb;
+				ADD COLUMN IF NOT EXISTS execution_principal jsonb,
+				ADD COLUMN IF NOT EXISTS runtime_evidence jsonb;
 			CREATE UNIQUE INDEX IF NOT EXISTS action_invocations_idempotency_idx
 				ON fabric_platform.action_invocations
 				(tenant_id, space_id, action_id, idempotency_key)
@@ -949,8 +1054,9 @@ var PostgresPlatformHostStore = class {
     const result = await this.sql.query(
       `INSERT INTO fabric_platform.action_invocations
 			 (id,tenant_id,space_id,action_id,action_version,actor_id,actor_type,status,
-			  parameters,result,correlation_id,causation_id,idempotency_key,error,created_at,updated_at)
-			 VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9::jsonb,$10::jsonb,$11,$12,$13,$14,$15,$15)
+				  parameters,result,correlation_id,causation_id,idempotency_key,
+				  authorization_binding_id,error,runtime_evidence,created_at,updated_at)
+				 VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9::jsonb,$10::jsonb,$11,$12,$13,$14,$15,$16::jsonb,$17,$17)
 			 ON CONFLICT (tenant_id,space_id,action_id,idempotency_key)
 			 WHERE idempotency_key IS NOT NULL DO UPDATE SET id=fabric_platform.action_invocations.id
 			 RETURNING *`,
@@ -968,7 +1074,9 @@ var PostgresPlatformHostStore = class {
         input.correlationId,
         input.causationId ?? null,
         input.idempotencyKey ?? null,
+        input.authorizationBindingId ?? null,
         input.error ?? null,
+        input.runtimeEvidence ? JSON.stringify(input.runtimeEvidence) : null,
         now
       ]
     );
@@ -1330,6 +1438,7 @@ function toActionRecord(row) {
     correlationId: String(row.correlation_id),
     ...row.causation_id ? { causationId: String(row.causation_id) } : {},
     ...row.idempotency_key ? { idempotencyKey: String(row.idempotency_key) } : {},
+    ...row.authorization_binding_id ? { authorizationBindingId: String(row.authorization_binding_id) } : {},
     attemptCount: Number(row.attempt_count ?? 0),
     ...row.lease_owner ? { leaseOwner: String(row.lease_owner) } : {},
     ...row.lease_expires_at ? { leaseExpiresAt: new Date(row.lease_expires_at) } : {},
@@ -1340,6 +1449,7 @@ function toActionRecord(row) {
     ...row.approval_decision ? { approvalDecision: toApprovalDecision(row.approval_decision) } : {},
     ...row.mutation_footprint ? { mutationFootprint: row.mutation_footprint } : {},
     ...row.execution_principal ? { executionPrincipal: row.execution_principal } : {},
+    ...row.runtime_evidence ? { runtimeEvidence: row.runtime_evidence } : {},
     ...row.error ? { error: String(row.error) } : {},
     createdAt: new Date(row.created_at),
     updatedAt: new Date(row.updated_at)
@@ -1473,6 +1583,6 @@ async function abortableDelay(milliseconds, signal) {
   });
 }
 
-export { MemoryPlatformHostStore, PostgresPlatformHostStore, createGovernedActionHost, createStoreBackedActionDispatcher, runPlatformActionWorker, runPlatformActionWorkerCycle };
+export { MemoryPlatformHostStore, PLATFORM_HOST_CONTRACT_VERSION, PostgresPlatformHostStore, createGovernedActionHost, createStoreBackedActionDispatcher, runPlatformActionWorker, runPlatformActionWorkerCycle };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map