@tomflow/proflow-agent-gateway 0.1.17 → 0.1.19

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # @tomflow/proflow-agent-gateway
 
+## 0.1.19
+
+### Patch Changes
+
+- Preserve allowlisted downstream tool error codes across Gateway HTTP translation while keeping unknown failures opaque, and stop generic Gateway logs from fabricating side-effect state.
+
+- Fail closed when the public Gateway role credential store becomes group/world-readable on POSIX systems.
+
+## 0.1.18
+
+### Patch Changes
+
+- Aggregate Browser, Permission, Host-application, Provisioning, Direct Tool, and Gateway observability at stable runtime boundaries, preserving owner truth while enabling one operation-chain diagnosis path without logging sensitive payloads.
+
 ## 0.1.17
 
 ### Patch Changes

package/dist/deployment/adapter.d.ts

@@ -6,7 +6,7 @@ export declare const behaviorAdapter: {
             ok: true;
             status: "SUCCEEDED";
             moduleRef: "agent-gateway";
-            moduleVersion: "0.1.17";
+            moduleVersion: "0.1.19";
             data: {
                 localBaseUrl: string;
                 publicBaseUrl?: string;
@@ -20,7 +20,7 @@ export declare const behaviorAdapter: {
             readonly ok: true;
             readonly status: "SUCCEEDED";
             readonly moduleRef: "agent-gateway";
-            readonly moduleVersion: "0.1.17";
+            readonly moduleVersion: "0.1.19";
         };
         observedEffects: string[];
     }>;
@@ -30,7 +30,7 @@ export declare const behaviorAdapter: {
             ok: true;
             status: "SUCCEEDED";
             moduleRef: "agent-gateway";
-            moduleVersion: "0.1.17";
+            moduleVersion: "0.1.19";
             data: {
                 setupStatus: "BLOCKED" | "READY";
                 runtimeStatus: "RUNNING" | "STOPPED";
@@ -51,7 +51,7 @@ export declare const behaviorAdapter: {
             ok: true;
             status: "SUCCEEDED";
             moduleRef: "agent-gateway";
-            moduleVersion: "0.1.17";
+            moduleVersion: "0.1.19";
             data: {
                 localBaseUrl: string;
                 publicBaseUrl?: string;
@@ -66,7 +66,7 @@ export declare const behaviorAdapter: {
             ok: true;
             status: "SUCCEEDED";
             moduleRef: "agent-gateway";
-            moduleVersion: "0.1.17";
+            moduleVersion: "0.1.19";
             data: {
                 docs: string;
             };
@@ -79,7 +79,7 @@ export declare const behaviorAdapter: {
             ok: true;
             status: "SUCCEEDED";
             moduleRef: "agent-gateway";
-            moduleVersion: "0.1.17";
+            moduleVersion: "0.1.19";
             data: {
                 host: string;
                 port: number;
@@ -90,7 +90,7 @@ export declare const behaviorAdapter: {
         result: {
             contract: "deployment.result.v1";
             moduleRef: "agent-gateway";
-            moduleVersion: "0.1.17";
+            moduleVersion: "0.1.19";
             ok: false;
             status: "FAILED";
             error: {
@@ -107,7 +107,7 @@ export declare const behaviorAdapter: {
             readonly ok: true;
             readonly status: "SUCCEEDED";
             readonly moduleRef: "agent-gateway";
-            readonly moduleVersion: "0.1.17";
+            readonly moduleVersion: "0.1.19";
         };
         observedEffects: string[];
     } | {
@@ -116,11 +116,11 @@ export declare const behaviorAdapter: {
             readonly ok: true;
             readonly status: "SUCCEEDED";
             readonly moduleRef: "agent-gateway";
-            readonly moduleVersion: "0.1.17";
+            readonly moduleVersion: "0.1.19";
         } | {
             contract: "deployment.result.v1";
             moduleRef: "agent-gateway";
-            moduleVersion: "0.1.17";
+            moduleVersion: "0.1.19";
             ok: false;
             status: "FAILED";
             error: {

package/dist/deployment/adapter.js

@@ -1,5 +1,6 @@
 import { existsSync, readFileSync } from "node:fs";
-import { join, resolve } from "node:path";
+import { appendFile, mkdir, stat, rename } from "node:fs/promises";
+import { dirname, join, resolve } from "node:path";
 import { deterministicLoopbackPort, readModuleSharedFacts, writeModuleSharedFacts, } from "@tomflow/proflow-module-contract";
 import { descriptor } from "./descriptor.js";
 const services = new Map();
@@ -72,6 +73,36 @@ async function compose(context) {
     const credentialFile = join(deps.stateRoot, "agent", "secrets", "role-credentials.json");
     if (!existsSync(credentialFile))
         throw new Error("Agent role credential store is not materialized by Platform Host");
+    const logPath = join(deps.stateRoot, "logs", "agent-gateway", "events.jsonl");
+    let logTail = Promise.resolve();
+    let pendingLogs = 0;
+    const log = (entry) => {
+        if (pendingLogs >= 1000)
+            return;
+        pendingLogs++;
+        logTail = logTail
+            .catch(() => undefined)
+            .then(async () => {
+            await mkdir(dirname(logPath), { recursive: true, mode: 0o700 });
+            const target = entry.component === "agent-gateway-process"
+                ? logPath.replace("events.jsonl", "lifecycle.jsonl")
+                : logPath;
+            const info = await stat(target).catch(() => null);
+            if (info &&
+                (info.size >= 5 * 1024 * 1024 ||
+                    Date.now() - info.mtimeMs > 7 * 86400_000))
+                await rename(target, `${target}.1`);
+            await appendFile(target, `${JSON.stringify(entry)}\n`, {
+                encoding: "utf8",
+                mode: 0o600,
+            });
+        })
+            .catch(() => undefined)
+            .finally(() => {
+            pendingLogs--;
+        });
+        void logTail;
+    };
     const { createAgentGatewayProcess, parseAgentGatewayProcessConfig } = await import("../src/process.js");
     const listener = new URL(own.localBaseUrl);
     return createAgentGatewayProcess({
@@ -83,6 +114,8 @@ async function compose(context) {
             credentialFile,
             downstreamCredentialFile: deps.downstreamCredentialFile,
         }),
+        log,
+        operationLog: log,
     });
 }
 const failed = (code, message) => ({

package/dist/deployment/descriptor.d.ts

@@ -3,7 +3,7 @@ export declare const descriptor: {
     readonly contractVersion: "1.0.0";
     readonly moduleRef: "agent-gateway";
     readonly packageName: "@tomflow/proflow-agent-gateway";
-    readonly moduleVersion: "0.1.17";
+    readonly moduleVersion: "0.1.19";
     readonly kind: "service";
     readonly templateVersion: "1.0.0";
     readonly platformCompatibility: ">=1.0.0 <2.0.0";

package/dist/deployment/descriptor.js

@@ -3,7 +3,7 @@ export const descriptor = {
     contractVersion: "1.0.0",
     moduleRef: "agent-gateway",
     packageName: "@tomflow/proflow-agent-gateway",
-    moduleVersion: "0.1.17",
+    moduleVersion: "0.1.19",
     kind: "service",
     templateVersion: "1.0.0",
     platformCompatibility: ">=1.0.0 <2.0.0",

package/dist/src/index.d.ts

@@ -22,6 +22,11 @@ export type GatewayOptions = {
     port?: number;
     now?: () => number;
     actionTimeoutMs?: number;
+    onIngressFailure?: (entry: {
+        status: "FAILED";
+        httpStatus: number;
+        sideEffectState: "NOT_APPLIED";
+    }) => void;
 };
 export declare class AgentGatewayError extends Error {
     readonly code: string;

package/dist/src/index.js

@@ -225,6 +225,7 @@ export async function createAgentGateway(options) {
     };
     const handler = async (request, response) => {
         inFlight += 1;
+        let ownerEntered = false;
         try {
             const url = new URL(request.url ?? "/", `http://${host}`);
             if (request.method === "GET" && url.pathname === "/health") {
@@ -335,6 +336,7 @@ export async function createAgentGateway(options) {
             const propagationReserveMs = Math.min(1_500, Math.max(100, Math.floor(actionTimeoutMs / 10)));
             const deadlineAt = new Date(now() + Math.max(1, actionTimeoutMs - propagationReserveMs)).toISOString();
             const actionSignal = AbortSignal.timeout(actionTimeoutMs);
+            ownerEntered = true;
             const operation = action.uncertain && options.owners.lookupResult
                 ? options.owners.lookupResult(action.operationId, authenticatedRoleRef, canonicalBody)
                 : options.owners.route(action.operationId, authenticatedRoleRef, canonicalBody, {
@@ -383,6 +385,16 @@ export async function createAgentGateway(options) {
             }));
         }
         finally {
+            if (!ownerEntered && response.statusCode >= 400) {
+                try {
+                    options.onIngressFailure?.({
+                        status: "FAILED",
+                        httpStatus: response.statusCode,
+                        sideEffectState: "NOT_APPLIED",
+                    });
+                }
+                catch { }
+            }
             inFlight -= 1;
         }
     };

package/dist/src/process.d.ts

@@ -12,6 +12,7 @@ export declare function createAgentGatewayProcess(input: {
     config: AgentGatewayProcessConfig;
     fetch?: typeof globalThis.fetch;
     log?: (entry: Record<string, unknown>) => void;
+    operationLog?: (entry: Record<string, unknown>) => void;
 }): Promise<Readonly<{
     readiness: () => Promise<{
         status: "NOT_READY" | "READY";

package/dist/src/process.js

@@ -1,4 +1,4 @@
-import { createHash, timingSafeEqual } from "node:crypto";
+import { createHash, timingSafeEqual, randomUUID } from "node:crypto";
 import { readFile, stat } from "node:fs/promises";
 import { resolve } from "node:path";
 import { AgentGatewayError, createAgentGateway } from "./index.js";
@@ -31,6 +31,7 @@ const safeDownstreamErrorCodes = new Set([
     "LOCAL_TOOL_SCOPE_DENIED",
     "LOCAL_TOOL_COMMAND_FAILED",
 ]);
+const directToolOperationIds = new Set(["localDev", "repomix", "codeGraph"]);
 async function boundedDownstreamErrorCode(response) {
     if (!response.body)
         return null;
@@ -82,6 +83,25 @@ function text(value, name) {
         throw new TypeError(`${name} must be a non-empty string`);
     return value;
 }
+function logErrorCode(error) {
+    const value = error instanceof AgentGatewayError
+        ? error.code
+        : error &&
+            typeof error === "object" &&
+            typeof Reflect.get(error, "message") === "string"
+            ? String(Reflect.get(error, "message"))
+            : "GATEWAY_FAILURE";
+    return /^[A-Z][A-Z0-9_.:-]{0,159}$/.test(value) ? value : "GATEWAY_FAILURE";
+}
+function optionalToolOperation(value) {
+    if (typeof value !== "object" ||
+        value === null ||
+        Array.isArray(value) ||
+        typeof Reflect.get(value, "operation") !== "string")
+        return undefined;
+    const operation = String(Reflect.get(value, "operation"));
+    return /^[A-Za-z0-9_.:-]{1,160}$/.test(operation) ? operation : undefined;
+}
 export function parseAgentGatewayProcessConfig(value) {
     const input = record(value, "agent-gateway config");
     const publicBaseUrl = new URL(text(input.publicBaseUrl, "publicBaseUrl"));
@@ -128,6 +148,9 @@ function parseCredentialStore(value) {
     return credentials;
 }
 async function readCurrentCredentialStore(file) {
+    const info = await stat(file);
+    if (process.platform !== "win32" && (info.mode & 0o077) !== 0)
+        throw new Error("ROLE_CREDENTIAL_STORE_PERMISSIONS_INVALID");
     return parseCredentialStore(JSON.parse(await readFile(file, "utf8")));
 }
 async function readDownstreamCredential(file) {
@@ -142,11 +165,6 @@ async function readDownstreamCredential(file) {
 export async function createAgentGatewayProcess(input) {
     const fetchImplementation = input.fetch ?? globalThis.fetch;
     const credentialFile = input.config.credentialFile;
-    // Fail-fast at startup so a malformed configured credential store is rejected
-    // before the process advertises readiness. Authentication re-reads the current
-    // store on every attempt below, so a rotated key takes effect without a restart
-    // and a malformed/half-written store fails closed instead of serving a stale
-    // snapshot.
     await readCurrentCredentialStore(credentialFile);
     if (input.config.downstreamCredentialFile)
         await readDownstreamCredential(input.config.downstreamCredentialFile);
@@ -158,7 +176,7 @@ export async function createAgentGatewayProcess(input) {
             return false;
         }
     };
-    const downstream = async (path, body, signal) => {
+    const downstream = async (path, body, signal, operationRef) => {
         const downstreamCredential = input.config.downstreamCredentialFile
             ? await readDownstreamCredential(input.config.downstreamCredentialFile)
             : undefined;
@@ -167,6 +185,9 @@ export async function createAgentGatewayProcess(input) {
             response = await fetchImplementation(`${input.config.downstreamBaseUrl}${path}`, {
                 method: body === undefined ? "GET" : "POST",
                 headers: {
+                    ...(operationRef
+                        ? { "x-proflow-operation-ref": operationRef }
+                        : {}),
                     ...(body === undefined
                         ? {}
                         : { "content-type": "application/json" }),
@@ -185,21 +206,69 @@ export async function createAgentGatewayProcess(input) {
         }
         if (!response.ok) {
             const downstreamCode = await boundedDownstreamErrorCode(response);
-            const code = response.status >= 500 || response.status === 401
+            const code = response.status === 401
                 ? "OWNER_SERVICE_UNAVAILABLE"
                 : (downstreamCode ??
-                    (response.status === 400
-                        ? "INVALID_REQUEST"
-                        : response.status === 403
-                            ? "ROLE_OPERATION_DENIED"
-                            : "DOWNSTREAM_UNAVAILABLE"));
+                    (response.status >= 500
+                        ? "OWNER_SERVICE_UNAVAILABLE"
+                        : response.status === 400
+                            ? "INVALID_REQUEST"
+                            : response.status === 403
+                                ? "ROLE_OPERATION_DENIED"
+                                : "DOWNSTREAM_UNAVAILABLE"));
             throw Object.assign(new AgentGatewayError(code), {
                 httpStatus: response.status,
             });
         }
         return response.json();
     };
+    const emitOperation = (inputEvent) => {
+        const toolOperation = directToolOperationIds.has(inputEvent.operationId)
+            ? optionalToolOperation(inputEvent.value)
+            : undefined;
+        try {
+            void Promise.resolve(input.operationLog?.({
+                contract: "proflow.operation-boundary.v1",
+                eventId: `gateway-event:${randomUUID()}`,
+                operationRef: inputEvent.operationRef,
+                correlationKind: "EXACT",
+                timestamp: new Date().toISOString(),
+                source: "agent-gateway",
+                component: "agent-gateway-ingress",
+                event: inputEvent.mode === "LOOKUP"
+                    ? "GATEWAY_ACTION_LOOKUP"
+                    : "GATEWAY_ACTION",
+                boundary: directToolOperationIds.has(inputEvent.operationId)
+                    ? "TOOL_INVOCATION"
+                    : "ACTION",
+                status: inputEvent.status,
+                operationId: inputEvent.operationId,
+                roleRef: inputEvent.roleRef,
+                ...(toolOperation ? { toolOperation } : {}),
+                ...(inputEvent.errorCode ? { errorCode: inputEvent.errorCode } : {}),
+                durationMs: inputEvent.durationMs,
+            })).catch(() => undefined);
+        }
+        catch { }
+    };
     const gateway = await createAgentGateway({
+        onIngressFailure(entry) {
+            try {
+                void Promise.resolve(input.operationLog?.({
+                    contract: "proflow.operation-boundary.v1",
+                    timestamp: new Date().toISOString(),
+                    eventId: `gateway-event:${randomUUID()}`,
+                    operationRef: `op:${randomUUID()}`,
+                    correlationKind: "EXACT",
+                    source: "agent-gateway",
+                    component: "agent-gateway-ingress",
+                    event: "GATEWAY_INGRESS_REJECTED",
+                    ...entry,
+                    errorCode: "GATEWAY_INGRESS_REJECTED",
+                })).catch(() => undefined);
+            }
+            catch { }
+        },
         host: input.config.host,
         port: input.config.port,
         relayBaseUrl: `${input.config.publicBaseUrl}/relay/`,
@@ -211,23 +280,74 @@ export async function createAgentGatewayProcess(input) {
                         return roleRef;
                 throw new Error("AUTHENTICATION_FAILED");
             },
-            route(operationId, authenticatedRoleRef, value, context) {
-                return downstream(`/actions/${encodeURIComponent(operationId)}`, {
-                    authenticatedRoleRef,
-                    input: value,
-                    deadlineAt: context?.deadlineAt,
-                    ...(context?.fileMaterializationInputs === undefined
-                        ? {}
-                        : {
-                            fileMaterializationInputs: context.fileMaterializationInputs,
-                        }),
-                }, context?.signal);
+            async route(operationId, authenticatedRoleRef, value, context) {
+                const started = performance.now();
+                const operationRef = `op:${randomUUID()}`;
+                try {
+                    const result = await downstream(`/actions/${encodeURIComponent(operationId)}`, {
+                        authenticatedRoleRef,
+                        input: value,
+                        deadlineAt: context?.deadlineAt,
+                        ...(context?.fileMaterializationInputs === undefined
+                            ? {}
+                            : {
+                                fileMaterializationInputs: context.fileMaterializationInputs,
+                            }),
+                    }, context?.signal, operationRef);
+                    emitOperation({
+                        mode: "ROUTE",
+                        operationRef,
+                        operationId,
+                        roleRef: authenticatedRoleRef,
+                        value,
+                        status: "SUCCEEDED",
+                        durationMs: performance.now() - started,
+                    });
+                    return result;
+                }
+                catch (error) {
+                    emitOperation({
+                        mode: "ROUTE",
+                        operationRef,
+                        operationId,
+                        roleRef: authenticatedRoleRef,
+                        value,
+                        status: "FAILED",
+                        errorCode: logErrorCode(error),
+                        durationMs: performance.now() - started,
+                    });
+                    throw error;
+                }
             },
-            lookupResult(operationId, authenticatedRoleRef, value) {
-                return downstream(`/actions/${encodeURIComponent(operationId)}/result`, {
-                    authenticatedRoleRef,
-                    input: value,
-                });
+            async lookupResult(operationId, authenticatedRoleRef, value) {
+                const started = performance.now();
+                const operationRef = `op:${randomUUID()}`;
+                try {
+                    const result = await downstream(`/actions/${encodeURIComponent(operationId)}/result`, { authenticatedRoleRef, input: value }, undefined, operationRef);
+                    emitOperation({
+                        mode: "LOOKUP",
+                        operationRef,
+                        operationId,
+                        roleRef: authenticatedRoleRef,
+                        value,
+                        status: "SUCCEEDED",
+                        durationMs: performance.now() - started,
+                    });
+                    return result;
+                }
+                catch (error) {
+                    emitOperation({
+                        mode: "LOOKUP",
+                        operationRef,
+                        operationId,
+                        roleRef: authenticatedRoleRef,
+                        value,
+                        status: "FAILED",
+                        errorCode: logErrorCode(error),
+                        durationMs: performance.now() - started,
+                    });
+                    throw error;
+                }
             },
             async readiness() {
                 try {
@@ -260,6 +380,7 @@ export async function createAgentGatewayProcess(input) {
             timestamp: new Date().toISOString(),
             component: "agent-gateway-process",
             event: "SERVICE_STARTED",
+            status: "SUCCEEDED",
             ...address,
         });
         return address;
@@ -270,6 +391,7 @@ export async function createAgentGatewayProcess(input) {
             timestamp: new Date().toISOString(),
             component: "agent-gateway-process",
             event: "SERVICE_STOPPED",
+            status: "SUCCEEDED",
         });
     };
     return Object.freeze({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tomflow/proflow-agent-gateway",
-  "version": "0.1.17",
+  "version": "0.1.19",
   "type": "module",
   "publishConfig": {
     "access": "public"
@@ -28,14 +28,14 @@
     "@tomflow/proflow-module-contract": "^0.1.13"
   },
   "devDependencies": {
-    "@tomflow/proflow-execution-browser-extension": "^0.1.51",
+    "@tomflow/proflow-task-migration-runner": "^0.1.11",
+    "@tomflow/proflow-execution-browser-extension": "^0.1.62",
     "@tomflow/proflow-deployment-conformance": "^0.1.13",
+    "@tomflow/proflow-agent-runtime": "^0.1.17",
+    "@tomflow/proflow-task-store-sqlite": "^0.1.12",
     "@tomflow/proflow-execution-runtime": "^0.1.19",
-    "@tomflow/proflow-agent-runtime": "^0.1.14",
-    "@tomflow/proflow-platform-host": "^0.1.23",
-    "@tomflow/proflow-task-orchestration": "^0.1.11",
-    "@tomflow/proflow-task-migration-runner": "^0.1.11",
-    "@tomflow/proflow-task-store-sqlite": "^0.1.12"
+    "@tomflow/proflow-platform-host": "^0.1.29",
+    "@tomflow/proflow-task-orchestration": "^0.1.11"
   },
   "description": "The sole Custom GPT Actions HTTP ingress and OpenAI transport anti-corruption layer.",
   "keywords": [

package/proflow.module.json

@@ -3,7 +3,7 @@
 	"contractVersion": "1.0.0",
 	"moduleRef": "agent-gateway",
 	"packageName": "@tomflow/proflow-agent-gateway",
-	"moduleVersion": "0.1.17",
+	"moduleVersion": "0.1.19",
 	"kind": "service",
 	"templateVersion": "1.0.0",
 	"platformCompatibility": ">=1.0.0 <2.0.0",