@fabricorg/platform-host 8.7.0 → 8.8.0

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @fabricorg/platform-host
 
+## 8.8.0
+
+### Minor Changes
+
+- 385a989: Expose the optional execution lease owner and token in adapter execution context, using the same frozen identity as Host write fencing and omitting the key for unleased execution. Platform Host 8.8.0 is the first Host that supplies it, so with an older Host the key is also absent: an adapter that requires fencing must treat a missing lease as "cannot fence", not as "safe". Every new claim of the invocation, including a takeover by another worker, rotates the token. Adapters can check this evidence in the transaction that claims their domain row immediately before a provider call; Host does not check the lease during the adapter call.
+
 ## 8.7.0
 
 ### Minor Changes

package/README.md

@@ -496,6 +496,18 @@ Expiry before an attempt prevents that attempt; an aborted call that throws foll
 the existing ambiguous-outcome reconciliation path. With no step duration and an
 unset or zero Host duration, neither context field is supplied.
 
+When Host executes under a lease, `AdapterExecutionContext.lease` contains the
+`leaseOwner` and `leaseToken` used to fence Host's own writes (Host 8.8.0 and
+later). The key is absent for unleased execution and on older Hosts, so an adapter
+that requires fencing must treat a missing lease as "cannot fence", not as "safe".
+Every new claim of the invocation, such as a takeover by another worker, changes
+`leaseToken`.
+An adapter guarding a provider call should check this identity immediately before
+that call, in the same transaction as its own domain claim (for example, by locking
+the Host lease row and comparing owner and token). Host does not check the lease
+during the adapter call; this context is evidence for the adapter's transaction,
+not a guarantee that a provider operation remains protected after that transaction.
+
 ## Execution authorization
 
 Submission authorization proves that a caller may create an invocation. Applications that delegate

package/dist/index.cjs

@@ -3148,6 +3148,7 @@ function createGovernedActionHost(options) {
 									...invocation.causationId ? { causationId: invocation.causationId } : {},
 									attempt,
 									maxAttempts,
+									...executionLease ? { lease: executionLease } : {},
 									...deadlineMs ? { deadlineMs } : {},
 									...adapterController ? { signal: adapterController.signal } : {}
 								});