@fabricorg/platform-host 3.0.0 → 4.0.0

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # @fabricorg/platform-host
 
+## 4.0.0
+
+### Major Changes
+
+- Make the capability runtime vertical-neutral and instance-scoped. Move experience and display
+  semantics into a namespaced companion package, require explicit host registries, replace privacy
+  field defaults with caller-owned policy, add PostgreSQL projection adapters, and generate executable
+  ProjectionHost read and PlatformHost mutation seams.
+
+### Patch Changes
+
+- Updated dependencies
+  - @fabricorg/platform@1.0.0
+
 ## 3.0.0
 
 ### Major Changes

package/README.md

@@ -3,7 +3,7 @@
 The canonical host for the `@fabricorg/platform` mutation pipeline.
 
 ```bash
-pnpm add @fabricorg/platform@^0.12.0 @fabricorg/platform-host@^3.0.0
+pnpm add @fabricorg/platform@^1.0.0 @fabricorg/platform-host@^4.0.0
 ```
 
 ## AI agent integration boundary
@@ -15,7 +15,7 @@ registration, and submit stable idempotent commands. The gateway derives tenant
 calls `submitAction()`; an agent must never call handlers, adapters, workflow internals, or database
 writes directly.
 
-See the [Platform Host 3.x agent integration
+See the [Platform Host 4.x agent integration
 guide](https://platform.fabric.pro/docs/platform/reference/platform-host) for application wiring,
 execution-time authorization, the PostgreSQL transaction binder, recovery semantics, and the external
 gateway contract.
@@ -32,8 +32,8 @@ Actor → ActionInvocation → Schema → Agent HITL → PolicyEvaluation → St
 worker entry point. With no dispatcher the host executes inline, which is intended for tests and local
 development only.
 
-Applications that assemble action catalogs per runtime can provide `resolveAction` instead of
-mutating the process-wide platform registry. A custom `extractEvents` implementation can pair with
+Applications construct a `createModuleRegistry()` per runtime and pass it as `registry`; a narrow
+`resolveAction` function remains available for adapters. No process-wide platform registry exists. A custom `extractEvents` implementation can pair with
 `eventResultFields` so its event carrier is removed from the durable invocation result. Domain events
 without an explicit `eventSchemaVersion` inherit the action version, while host lifecycle events stay
 at version 1. Emitted domain events must appear in the action's `emitsEvents` declaration. The
@@ -81,6 +81,7 @@ by default; `outbox.includeProvenance` is the explicit classification-aware over
 ```ts
 const host = createGovernedActionHost({
   store,
+  registry,
   authorization: {
     checkEntitlement,
     authorize: authorizeSubmission,

package/dist/index.cjs

@@ -31,10 +31,10 @@ function digestParameters(parameters) {
   return crypto.createHash("sha256").update(canonicalJson(parameters)).digest("hex");
 }
 var ATTRIBUTE_NAME = /^[a-z][a-z0-9-]*(?:\.[A-Za-z][A-Za-z0-9_-]*)+$/;
-var INVOCATION_SOURCES = /* @__PURE__ */ new Set(["sdui", "api", "agent", "worker", "system"]);
+var INVOCATION_SOURCE = /^(?:ui|sdui|api|agent|worker|system|[a-z][a-z0-9-]*(?:\.[a-z][a-z0-9-]*)+)$/;
 function normalizeProvenance(input, options) {
   if (!input) return void 0;
-  if (!INVOCATION_SOURCES.has(input.source)) throw new Error(`Invalid invocation provenance source: ${input.source}`);
+  if (!INVOCATION_SOURCE.test(input.source)) throw new Error(`Invalid invocation provenance source: ${input.source}`);
   const maxAttributes = options?.maxAttributes ?? 16;
   const maxValueLength = options?.maxValueLength ?? 256;
   const allowlist = new Set(options?.auditAttributeAllowlist ?? []);
@@ -83,7 +83,10 @@ function createGovernedActionHost(options) {
   for (const adapter of options.adapters ?? []) adapters.register(adapter);
   const now = options.now ?? (() => /* @__PURE__ */ new Date());
   const extractEvents = options.extractEvents ?? DEFAULT_EXTRACT_EVENTS;
-  const actionResolver = options.resolveAction ?? platform.resolveAction;
+  const configuredActionResolver = options.resolveAction ?? options.registry?.resolveAction;
+  if (!configuredActionResolver) throw new Error("Platform Host requires an explicit module registry or resolveAction function.");
+  const actionResolver = configuredActionResolver;
+  const stateMachineResolver = options.registry?.resolveStateMachine ?? (() => void 0);
   const eventResultFields = options.eventResultFields ?? ["_events"];
   async function submitAction(input) {
     if (input.executionReason && !["initial", "offline_replay"].includes(input.executionReason)) {
@@ -388,6 +391,7 @@ function createGovernedActionHost(options) {
         parameters: parsed.data,
         db: options.store.db,
         services: options.services,
+        resolveCodePolicy: options.registry?.resolvePolicy,
         mode: "execute",
         now: now()
       });
@@ -440,10 +444,11 @@ function createGovernedActionHost(options) {
           spaceId,
           binding.entityType,
           entityId
-        ) ?? initialState(binding.entityType) : initialState(binding.entityType);
+        ) ?? initialState(stateMachineResolver(binding.entityType)) : initialState(stateMachineResolver(binding.entityType));
         const targetState = typeof binding.targetState === "function" ? binding.targetState(parsed.data) : binding.targetState;
         if (targetState !== "") {
-          const transition = platform.validateTransition(
+          const transition = platform.validateStateMachineTransition(
+            stateMachineResolver(binding.entityType),
             binding.entityType,
             currentState,
             targetState,
@@ -929,8 +934,7 @@ function declaredPolicies(policyIds) {
     codeEvaluatorPolicyId: policyId
   }));
 }
-function initialState(entityType) {
-  const machine = platform.resolveStateMachine(entityType);
+function initialState(machine) {
   return Object.values(machine?.states ?? {}).find((state) => state.stateClass === "initial")?.id ?? "none";
 }
 function isTerminal(status) {