@fabricorg/platform-host 0.7.0 → 1.0.0

package/CHANGELOG.md

@@ -1,5 +1,25 @@
 # @fabricorg/platform-host
 
+## 1.0.0
+
+### Minor Changes
+
+- fdd3e69: Add provider-neutral external mutation footprints, delegated principals, enforceable obligations,
+  execution attestations, and reconciliation evidence with durable host-store support.
+- 714ad06: Add enforceable Fabric-family compatibility controls and durable runtime contract-version evidence.
+- 82aa9c8: Add parameter-aware execution-time authorization, opaque durable admission bindings, and an
+  application-bound PostgreSQL unit of work for atomic domain/event persistence and recoverable
+  after-adapter finalization.
+
+### Patch Changes
+
+- Updated dependencies [bc7d3ab]
+- Updated dependencies [fdd3e69]
+- Updated dependencies [714ad06]
+- Updated dependencies [43c5770]
+- Updated dependencies [986636b]
+  - @fabricorg/platform@0.10.0
+
 ## 0.7.0 — 2026-07-27
 
 - Add parameter-aware execution authorization immediately before policies and mutation execution,

package/README.md

@@ -6,6 +6,20 @@ The canonical host for the `@fabricorg/platform` mutation pipeline.
 pnpm add @fabricorg/platform@^0.9.0 @fabricorg/platform-host@^0.7.0
 ```
 
+## AI agent integration boundary
+
+Application and vertical owners install this package. Hermes, Fabric Harness, and other external agent
+runtimes do not import Platform Host merely to call a deployed application. They connect to the
+application's authenticated REST or MCP gateway, discover only the actions allowed by their
+registration, and submit stable idempotent commands. The gateway derives tenant and actor identity and
+calls `submitAction()`; an agent must never call handlers, adapters, workflow internals, or database
+writes directly.
+
+See the [Platform Host 0.7 agent integration
+guide](https://platform.fabric.pro/docs/platform/reference/platform-host) for application wiring,
+execution-time authorization, the PostgreSQL transaction binder, recovery semantics, and the external
+gateway contract.
+
 Vertical packages register `FabricModule` definitions. Host applications provide tenant authorization,
 module entitlements, persistence, projections, and an optional durable dispatcher. The package owns the
 ordering and lifecycle invariant:
@@ -64,6 +78,11 @@ When `authorizeExecution` is absent, the Host reuses `authorize` at the executio
 completed idempotent replay returns its existing result without creating or executing a new
 mutation.
 
+External gateways should persist a compact admission record bound to the tenant, registration, actor,
+action, canonical parameter hash, resource scope, and expiry, then pass its opaque non-secret identifier
+as `authorizationBindingId` to `submitAction()`. Credentials and signed principal proofs do not belong
+in action parameters or workflow history.
+
 ## Atomic mutation unit of work
 
 Production stores can implement `AtomicMutationPlatformHostStore.transactionWithEvents`. The

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fabricorg/platform-host",
-  "version": "0.7.0",
+  "version": "1.0.0",
   "description": "Canonical governed mutation host for @fabricorg/platform: durable invocation, policy, state-machine, handler, event, and adapter orchestration behind persistence ports.",
   "keywords": [
     "fabric",
@@ -43,14 +43,14 @@
     "LICENSE"
   ],
   "peerDependencies": {
-    "@fabricorg/platform": "^0.9.0"
+    "@fabricorg/platform": "^0.10.0"
   },
   "devDependencies": {
     "@types/node": "^22.10.0",
     "tsup": "^8.5.0",
     "typescript": "^5.7.3",
     "vitest": "^4.1.5",
-    "@fabricorg/platform": "0.9.0"
+    "@fabricorg/platform": "0.10.0"
   },
   "engines": {
     "node": ">=20"