@tomflow/proflow-agent-gateway 0.1.4 → 0.1.6

package/DOCS.md

@@ -0,0 +1,29 @@
+# @tomflow/proflow-agent-gateway — Module Docs
+
+Module ref: `agent-gateway`  
+Domain: `agent-runtime-collaboration`  
+Kind: `service`
+
+The sole Custom GPT Actions HTTP ingress and OpenAI transport anti-corruption layer.
+
+## Standard management surface
+
+`install / uninstall / status / setup / docs / start / stop`
+
+## Provides
+
+- `custom-gpt-actions-gateway` `1.0.0`
+
+## Requires
+
+- `agent-runtime` `>=1.0.0 <2.0.0`
+- `task-orchestration` `>=1.0.0 <2.0.0`
+- `execution` `>=1.0.0 <2.0.0`
+
+## Public setup inputs
+
+- None. Deterministic/private values and cross-Module shared facts are not public configuration.
+
+## Ownership boundary
+
+Module business APIs and any module-specific extra commands remain package-owned. Platform does not proxy or interpret them. Current human/external preparation is documented in `SETUP.md`.

package/SETUP.md

@@ -0,0 +1,7 @@
+# @tomflow/proflow-agent-gateway — Module Setup
+
+No user or external setup is required by the current frozen Module contract. `Module.install` completes deterministic preparation; `Module.setup` only re-observes current reality and must not ask the user to supply private paths, loopback endpoints, tokens or cross-Module facts.
+
+## Completion
+
+Setup is complete only when the Module's own `status` reports `setupStatus=READY`. Re-running setup must re-observe reality; it must not resume from a blind historical step index.

package/dist/deployment/adapter.d.ts

@@ -1,364 +1,134 @@
-type GatewayProcess = {
-    start(): Promise<{
-        host: string;
-        port: number;
-    }>;
-    stop(): Promise<void>;
-    restart(): Promise<{
-        host: string;
-        port: number;
-    }>;
-    readiness(): Promise<{
-        status: "READY" | "NOT_READY";
-    }>;
-    status(): unknown;
-};
-export declare function createBehaviorAdapter(service?: GatewayProcess, config?: Record<string, string>, configValid?: boolean): {
-    describe: () => {
-        result: {
-            readonly contract: "deployment.result.v1";
-            readonly ok: true;
-            readonly status: "SUCCEEDED";
-            readonly moduleRef: "agent-gateway";
-            readonly moduleVersion: "0.1.4";
-        };
-        observedEffects: never[];
-    };
-    preflight: () => {
-        result: {
-            readonly contract: "deployment.result.v1";
-            readonly ok: true;
-            readonly status: "SUCCEEDED";
-            readonly moduleRef: "agent-gateway";
-            readonly moduleVersion: "0.1.4";
-        };
-        observedEffects: never[];
-    };
-    status: () => Promise<{
+import { type ModuleCommandContext } from "@tomflow/proflow-module-contract";
+export declare const behaviorAdapter: {
+    readonly install: (context: ModuleCommandContext) => Promise<{
         result: {
             contract: "deployment.result.v1";
             ok: true;
             status: "SUCCEEDED";
             moduleRef: "agent-gateway";
-            moduleVersion: "0.1.4";
+            moduleVersion: "0.1.6";
             data: {
-                configStatus: "INCOMPLETE" | "INVALID" | "READY";
-                missingConfig?: string[] | undefined;
-                runtimeStatus: "FAILED" | "RUNNING" | "STOPPED" | "UNKNOWN";
+                localBaseUrl: string;
+                publicBaseUrl?: string;
             };
         };
         observedEffects: never[];
     }>;
-    verify: () => Promise<{
-        result: {
-            contract: "deployment.result.v1";
-            ok: true;
-            status: "SUCCEEDED";
-            moduleRef: "agent-gateway";
-            moduleVersion: "0.1.4";
-            checks: {
-                id: string;
-                status: "FAIL" | "PASS";
-                message: string;
-            }[];
-        } | {
-            contract: "deployment.result.v1";
-            moduleRef: "agent-gateway";
-            moduleVersion: "0.1.4";
-            ok: false;
-            status: "ACTION_REQUIRED";
-            actionRequired: {
-                readonly action: "compose-gateway";
-                readonly description: "Provide owner ports and process configuration";
-            };
-            checks: {
-                id: string;
-                status: "FAIL" | "PASS";
-                message: string;
-            }[];
-        } | {
-            contract: "deployment.result.v1";
-            moduleRef: "agent-gateway";
-            moduleVersion: "0.1.4";
-            ok: false;
-            status: "ACTION_REQUIRED";
-            actionRequired: {
-                action: string;
-                description: string;
-            };
-            checks: {
-                id: string;
-                status: "FAIL" | "PASS";
-                message: string;
-            }[];
-        };
-        observedEffects: never[];
-    }>;
-    doctor: () => {
-        result: {
-            readonly contract: "deployment.result.v1";
-            readonly ok: true;
-            readonly status: "SUCCEEDED";
-            readonly moduleRef: "agent-gateway";
-            readonly moduleVersion: "0.1.4";
-        };
-        observedEffects: never[];
-    };
-    start: () => Promise<{
-        result: {
-            contract: "deployment.result.v1";
-            ok: true;
-            status: "SUCCEEDED";
-            moduleRef: "agent-gateway";
-            moduleVersion: "0.1.4";
-            data: {
-                host: string;
-                port: number;
-            };
-        } | {
-            contract: "deployment.result.v1";
-            moduleRef: "agent-gateway";
-            moduleVersion: "0.1.4";
-            status: "ACTION_REQUIRED";
-            ok: boolean;
-            actionRequired: {
-                action: string;
-                description: string;
-            };
-        };
-        observedEffects: string[];
-    }>;
-    stop: () => Promise<{
-        result: {
-            readonly contract: "deployment.result.v1";
-            readonly ok: true;
-            readonly status: "SUCCEEDED";
-            readonly moduleRef: "agent-gateway";
-            readonly moduleVersion: "0.1.4";
-        } | {
-            readonly contract: "deployment.result.v1";
-            readonly moduleRef: "agent-gateway";
-            readonly moduleVersion: "0.1.4";
-            readonly ok: false;
-            readonly status: "ACTION_REQUIRED";
-            readonly actionRequired: {
-                readonly action: "compose-gateway";
-                readonly description: "Provide owner ports and process configuration";
-            };
-        };
-        observedEffects: string[];
-    }>;
-    uninstall: () => Promise<{
+    readonly uninstall: (context: ModuleCommandContext) => Promise<{
         result: {
             readonly contract: "deployment.result.v1";
             readonly ok: true;
             readonly status: "SUCCEEDED";
             readonly moduleRef: "agent-gateway";
-            readonly moduleVersion: "0.1.4";
+            readonly moduleVersion: "0.1.6";
         };
         observedEffects: string[];
     }>;
-    restart: () => Promise<{
+    readonly status: (context: ModuleCommandContext) => Promise<{
         result: {
             contract: "deployment.result.v1";
             ok: true;
             status: "SUCCEEDED";
             moduleRef: "agent-gateway";
-            moduleVersion: "0.1.4";
+            moduleVersion: "0.1.6";
             data: {
-                host: string;
-                port: number;
-            };
-        } | {
-            contract: "deployment.result.v1";
-            moduleRef: "agent-gateway";
-            moduleVersion: "0.1.4";
-            status: "ACTION_REQUIRED";
-            ok: boolean;
-            actionRequired: {
-                action: string;
-                description: string;
+                setupStatus: "FAILED" | "READY";
+                runtimeStatus: "RUNNING" | "STOPPED";
             };
         };
-        observedEffects: string[];
-    }>;
-};
-export declare const behaviorAdapter: {
-    describe: () => {
-        result: {
-            readonly contract: "deployment.result.v1";
-            readonly ok: true;
-            readonly status: "SUCCEEDED";
-            readonly moduleRef: "agent-gateway";
-            readonly moduleVersion: "0.1.4";
-        };
         observedEffects: never[];
-    };
-    preflight: () => {
+    }>;
+    readonly setup: (context: ModuleCommandContext) => Promise<{
         result: {
             readonly contract: "deployment.result.v1";
             readonly ok: true;
             readonly status: "SUCCEEDED";
             readonly moduleRef: "agent-gateway";
-            readonly moduleVersion: "0.1.4";
-        };
-        observedEffects: never[];
-    };
-    status: () => Promise<{
-        result: {
+            readonly moduleVersion: "0.1.6";
+        } | {
             contract: "deployment.result.v1";
-            ok: true;
-            status: "SUCCEEDED";
             moduleRef: "agent-gateway";
-            moduleVersion: "0.1.4";
-            data: {
-                configStatus: "INCOMPLETE" | "INVALID" | "READY";
-                missingConfig?: string[] | undefined;
-                runtimeStatus: "FAILED" | "RUNNING" | "STOPPED" | "UNKNOWN";
+            moduleVersion: "0.1.6";
+            ok: false;
+            status: "FAILED";
+            error: {
+                code: "SETUP_FAILED" | "START_FAILED" | "STOP_FAILED";
+                message: string;
+                retryable: boolean;
             };
         };
         observedEffects: never[];
     }>;
-    verify: () => Promise<{
+    readonly docs: (_context: ModuleCommandContext) => Promise<{
         result: {
             contract: "deployment.result.v1";
             ok: true;
             status: "SUCCEEDED";
             moduleRef: "agent-gateway";
-            moduleVersion: "0.1.4";
-            checks: {
-                id: string;
-                status: "FAIL" | "PASS";
-                message: string;
-            }[];
-        } | {
-            contract: "deployment.result.v1";
-            moduleRef: "agent-gateway";
-            moduleVersion: "0.1.4";
-            ok: false;
-            status: "ACTION_REQUIRED";
-            actionRequired: {
-                readonly action: "compose-gateway";
-                readonly description: "Provide owner ports and process configuration";
-            };
-            checks: {
-                id: string;
-                status: "FAIL" | "PASS";
-                message: string;
-            }[];
-        } | {
-            contract: "deployment.result.v1";
-            moduleRef: "agent-gateway";
-            moduleVersion: "0.1.4";
-            ok: false;
-            status: "ACTION_REQUIRED";
-            actionRequired: {
-                action: string;
-                description: string;
+            moduleVersion: "0.1.6";
+            data: {
+                docs: string;
+                setup: string;
             };
-            checks: {
-                id: string;
-                status: "FAIL" | "PASS";
-                message: string;
-            }[];
         };
         observedEffects: never[];
     }>;
-    doctor: () => {
-        result: {
-            readonly contract: "deployment.result.v1";
-            readonly ok: true;
-            readonly status: "SUCCEEDED";
-            readonly moduleRef: "agent-gateway";
-            readonly moduleVersion: "0.1.4";
-        };
-        observedEffects: never[];
-    };
-    start: () => Promise<{
+    readonly start: (context: ModuleCommandContext) => Promise<{
         result: {
             contract: "deployment.result.v1";
             ok: true;
             status: "SUCCEEDED";
             moduleRef: "agent-gateway";
-            moduleVersion: "0.1.4";
+            moduleVersion: "0.1.6";
             data: {
                 host: string;
                 port: number;
             };
-        } | {
+        };
+        observedEffects: string[];
+    } | {
+        result: {
             contract: "deployment.result.v1";
             moduleRef: "agent-gateway";
-            moduleVersion: "0.1.4";
-            status: "ACTION_REQUIRED";
-            ok: boolean;
-            actionRequired: {
-                action: string;
-                description: string;
+            moduleVersion: "0.1.6";
+            ok: false;
+            status: "FAILED";
+            error: {
+                code: "SETUP_FAILED" | "START_FAILED" | "STOP_FAILED";
+                message: string;
+                retryable: boolean;
             };
         };
-        observedEffects: string[];
+        observedEffects: never[];
     }>;
-    stop: () => Promise<{
+    readonly stop: (context: ModuleCommandContext) => Promise<{
         result: {
             readonly contract: "deployment.result.v1";
             readonly ok: true;
             readonly status: "SUCCEEDED";
             readonly moduleRef: "agent-gateway";
-            readonly moduleVersion: "0.1.4";
-        } | {
-            readonly contract: "deployment.result.v1";
-            readonly moduleRef: "agent-gateway";
-            readonly moduleVersion: "0.1.4";
-            readonly ok: false;
-            readonly status: "ACTION_REQUIRED";
-            readonly actionRequired: {
-                readonly action: "compose-gateway";
-                readonly description: "Provide owner ports and process configuration";
-            };
+            readonly moduleVersion: "0.1.6";
         };
         observedEffects: string[];
-    }>;
-    uninstall: () => Promise<{
+    } | {
         result: {
             readonly contract: "deployment.result.v1";
             readonly ok: true;
             readonly status: "SUCCEEDED";
             readonly moduleRef: "agent-gateway";
-            readonly moduleVersion: "0.1.4";
-        };
-        observedEffects: string[];
-    }>;
-    restart: () => Promise<{
-        result: {
-            contract: "deployment.result.v1";
-            ok: true;
-            status: "SUCCEEDED";
-            moduleRef: "agent-gateway";
-            moduleVersion: "0.1.4";
-            data: {
-                host: string;
-                port: number;
-            };
+            readonly moduleVersion: "0.1.6";
         } | {
             contract: "deployment.result.v1";
             moduleRef: "agent-gateway";
-            moduleVersion: "0.1.4";
-            status: "ACTION_REQUIRED";
-            ok: boolean;
-            actionRequired: {
-                action: string;
-                description: string;
+            moduleVersion: "0.1.6";
+            ok: false;
+            status: "FAILED";
+            error: {
+                code: "SETUP_FAILED" | "START_FAILED" | "STOP_FAILED";
+                message: string;
+                retryable: boolean;
             };
         };
-        observedEffects: string[];
+        observedEffects: never[];
     }>;
 };
-export declare function createProductionBinding(input: {
-    moduleRef: string;
-    config: Record<string, string>;
-    workspaceRoot: string;
-    configByModuleRef: ReadonlyMap<string, Record<string, string>>;
-}): Promise<{
-    behaviorAdapter: Record<string, unknown>;
-}>;
-export {};

package/dist/deployment/adapter.js

@@ -1,5 +1,8 @@
-import { observeDeclaredModuleStatus } from "@tomflow/proflow-module-contract";
+import { existsSync } from "node:fs";
+import { join, resolve } from "node:path";
+import { deterministicLoopbackPort, readModuleSharedFacts, writeModuleSharedFacts, } from "@tomflow/proflow-module-contract";
 import { descriptor } from "./descriptor.js";
+const services = new Map();
 const base = {
     contract: "deployment.result.v1",
     ok: true,
@@ -7,170 +10,141 @@ const base = {
     moduleRef: descriptor.moduleRef,
     moduleVersion: descriptor.moduleVersion,
 };
-const unbound = {
+const key = (context) => resolve(context.workspaceRoot);
+const factString = (facts, name) => (typeof facts?.[name] === "string" ? String(facts[name]) : undefined);
+async function ownFacts(context) {
+    const localBaseUrl = `http://127.0.0.1:${deterministicLoopbackPort(context, descriptor.moduleRef)}`;
+    const tunnel = await readModuleSharedFacts(context, "dev-tunnel");
+    const publicBaseUrl = factString(tunnel, "publicBaseUrl");
+    const facts = { localBaseUrl, ...(publicBaseUrl ? { publicBaseUrl } : {}) };
+    await writeModuleSharedFacts(context, descriptor.moduleRef, facts);
+    return facts;
+}
+async function dependencies(context) {
+    const tunnel = await readModuleSharedFacts(context, "dev-tunnel");
+    const host = await readModuleSharedFacts(context, "platform-host");
+    const publicBaseUrl = factString(tunnel, "publicBaseUrl");
+    const downstreamBaseUrl = factString(host, "endpoint");
+    const downstreamCredentialFile = factString(host, "gatewayTransportCredentialFile");
+    const stateRoot = factString(host, "stateRoot");
+    return publicBaseUrl &&
+        downstreamBaseUrl &&
+        downstreamCredentialFile &&
+        stateRoot
+        ? { publicBaseUrl, downstreamBaseUrl, downstreamCredentialFile, stateRoot }
+        : undefined;
+}
+async function running(context) {
+    const own = await ownFacts(context);
+    try {
+        return (await fetch(`${own.localBaseUrl}/ready`, {
+            signal: AbortSignal.timeout(500),
+        })).ok;
+    }
+    catch {
+        return false;
+    }
+}
+async function compose(context) {
+    const own = await ownFacts(context);
+    const deps = await dependencies(context);
+    if (!deps)
+        throw new Error("public-ingress or platform-host shared facts are unavailable");
+    const credentialFile = join(deps.stateRoot, "agent", "secrets", "role-credentials.json");
+    if (!existsSync(credentialFile))
+        throw new Error("Agent role credential store is not materialized by Platform Host");
+    const { createAgentGatewayProcess, parseAgentGatewayProcessConfig } = await import("../src/process.js");
+    const listener = new URL(own.localBaseUrl);
+    return createAgentGatewayProcess({
+        config: parseAgentGatewayProcessConfig({
+            host: listener.hostname,
+            port: Number(listener.port),
+            publicBaseUrl: deps.publicBaseUrl,
+            downstreamBaseUrl: deps.downstreamBaseUrl,
+            credentialFile,
+            downstreamCredentialFile: deps.downstreamCredentialFile,
+        }),
+    });
+}
+const failed = (code, message) => ({
     ...base,
     ok: false,
-    status: "ACTION_REQUIRED",
-    actionRequired: {
-        action: "compose-gateway",
-        description: "Provide owner ports and process configuration",
+    status: "FAILED",
+    error: { code, message, retryable: true },
+});
+export const behaviorAdapter = {
+    install: async (context) => ({
+        result: { ...base, data: await ownFacts(context) },
+        observedEffects: [],
+    }),
+    uninstall: async (context) => {
+        const service = services.get(key(context));
+        if (service) {
+            await service.stop();
+            services.delete(key(context));
+        }
+        return {
+            result: base,
+            observedEffects: service ? ["Manage the declared service process"] : [],
+        };
     },
-};
-export function createBehaviorAdapter(service, config, configValid = true) {
-    return {
-        describe: () => ({ result: base, observedEffects: [] }),
-        preflight: () => ({ result: base, observedEffects: [] }),
-        status: async () => {
-            const readiness = service ? await service.readiness() : undefined;
-            const ready = readiness?.status === "READY";
-            const data = observeDeclaredModuleStatus(descriptor, config, ready ? "RUNNING" : service ? "FAILED" : "UNKNOWN", configValid);
+    status: async (context) => ({
+        result: {
+            ...base,
+            data: {
+                setupStatus: (await dependencies(context))
+                    ? "READY"
+                    : "FAILED",
+                runtimeStatus: (await running(context))
+                    ? "RUNNING"
+                    : "STOPPED",
+            },
+        },
+        observedEffects: [],
+    }),
+    setup: async (context) => ({
+        result: (await dependencies(context))
+            ? base
+            : failed("SETUP_FAILED", "public-ingress or platform-host producer shared facts are unavailable"),
+        observedEffects: [],
+    }),
+    docs: async (_context) => ({
+        result: { ...base, data: { docs: "DOCS.md", setup: "SETUP.md" } },
+        observedEffects: [],
+    }),
+    start: async (context) => {
+        try {
+            const service = await compose(context);
+            const data = await service.start();
+            services.set(key(context), service);
+            await ownFacts(context);
             return {
                 result: { ...base, data },
-                observedEffects: [],
+                observedEffects: ["Manage the declared service process"],
             };
-        },
-        verify: async () => {
-            const readiness = service ? await service.readiness() : undefined;
-            const ready = readiness?.status === "READY";
+        }
+        catch (error) {
             return {
-                result: {
-                    ...(service && ready
-                        ? base
-                        : service
-                            ? {
-                                ...base,
-                                ok: false,
-                                status: "ACTION_REQUIRED",
-                                actionRequired: {
-                                    action: "repair-gateway",
-                                    description: "Gateway is not READY",
-                                },
-                            }
-                            : unbound),
-                    checks: [
-                        {
-                            id: "gateway-readiness",
-                            status: ready ? "PASS" : "FAIL",
-                            message: service
-                                ? `Gateway readiness is ${readiness?.status ?? "NOT_READY"}`
-                                : "No configured Gateway process is bound",
-                        },
-                    ],
-                },
+                result: failed("START_FAILED", error instanceof Error ? error.message : "agent-gateway start failed"),
                 observedEffects: [],
             };
-        },
-        doctor: () => ({ result: base, observedEffects: [] }),
-        start: async () => ({
-            result: {
-                ...base,
-                ...(service
-                    ? { data: await service.start() }
-                    : {
-                        status: "ACTION_REQUIRED",
-                        ok: false,
-                        actionRequired: {
-                            action: "compose-gateway",
-                            description: "Provide owner ports before starting Gateway",
-                        },
-                    }),
-            },
-            observedEffects: service ? ["Manage the declared service process"] : [],
-        }),
-        stop: async () => {
-            if (service)
-                await service.stop();
-            return {
-                result: service ? base : unbound,
-                observedEffects: service ? ["Manage the declared service process"] : [],
-            };
-        },
-        uninstall: async () => {
-            if (service)
-                await service.stop();
+        }
+    },
+    stop: async (context) => {
+        const service = services.get(key(context));
+        if (service) {
+            await service.stop();
+            services.delete(key(context));
             return {
-                // Uninstall is idempotent: an unbound service means there is no
-                // process to stop before package removal. Runtime readiness still
-                // fails closed in status/start/verify.
                 result: base,
-                observedEffects: service ? ["Manage the declared service process"] : [],
+                observedEffects: ["Manage the declared service process"],
             };
-        },
-        restart: async () => ({
-            result: {
-                ...base,
-                ...(service
-                    ? { data: await service.restart() }
-                    : {
-                        status: "ACTION_REQUIRED",
-                        ok: false,
-                        actionRequired: {
-                            action: "compose-gateway",
-                            description: "Provide owner ports before restarting Gateway",
-                        },
-                    }),
-            },
-            observedEffects: service ? ["Manage the declared service process"] : [],
-        }),
-    };
-}
-export const behaviorAdapter = createBehaviorAdapter();
-export async function createProductionBinding(input) {
-    const unboundBinding = (configValid = true) => ({
-        behaviorAdapter: createBehaviorAdapter(undefined, input.config, configValid),
-    });
-    const localBaseUrl = input.config.localBaseUrl;
-    const publicBaseUrl = input.config.publicBaseUrl;
-    const downstreamCredentialFile = input.config.downstreamCredentialFile;
-    if (!localBaseUrl || !publicBaseUrl || !downstreamCredentialFile)
-        return unboundBinding();
-    let listener;
-    let publicUrl;
-    try {
-        listener = new URL(localBaseUrl);
-        publicUrl = new URL(publicBaseUrl);
-    }
-    catch {
-        return unboundBinding(false);
-    }
-    if (listener.protocol !== "http:" ||
-        !new Set(["127.0.0.1", "localhost", "::1", "[::1]"]).has(listener.hostname) ||
-        listener.pathname !== "/" ||
-        publicUrl.protocol !== "https:")
-        return unboundBinding(false);
-    const port = listener.port === "" ? 80 : Number(listener.port);
-    if (!Number.isInteger(port) || port <= 0 || port > 65_535)
-        return unboundBinding(false);
-    const platformHost = input.configByModuleRef.get("platform-host");
-    const executionRuntime = input.configByModuleRef.get("execution-runtime");
-    const stateRoot = platformHost?.stateRoot;
-    const downstreamBaseUrl = executionRuntime?.["identity.endpoint"];
-    if (!stateRoot || !downstreamBaseUrl)
-        return unboundBinding();
-    try {
-        const downstream = new URL(downstreamBaseUrl);
-        if (downstream.protocol !== "http:" ||
-            !["localhost", "127.0.0.1", "::1"].includes(downstream.hostname))
-            return unboundBinding();
-    }
-    catch {
-        return unboundBinding();
-    }
-    const [{ join }, { createAgentGatewayProcess, parseAgentGatewayProcessConfig },] = await Promise.all([import("node:path"), import("../src/process.js")]);
-    let processConfig;
-    try {
-        processConfig = parseAgentGatewayProcessConfig({
-            host: listener.hostname,
-            port,
-            publicBaseUrl,
-            downstreamBaseUrl,
-            credentialFile: join(stateRoot, "agent", "secrets", "role-credentials.json"),
-            downstreamCredentialFile,
-        });
-    }
-    catch {
-        return unboundBinding(false);
-    }
-    const service = await createAgentGatewayProcess({ config: processConfig });
-    return { behaviorAdapter: createBehaviorAdapter(service, input.config) };
-}
+        }
+        return {
+            result: (await running(context))
+                ? failed("STOP_FAILED", "agent-gateway is running without an owned lifecycle handle")
+                : base,
+            observedEffects: [],
+        };
+    },
+};

package/dist/deployment/descriptor.d.ts

@@ -3,7 +3,7 @@ export declare const descriptor: {
     readonly contractVersion: "1.0.0";
     readonly moduleRef: "agent-gateway";
     readonly packageName: "@tomflow/proflow-agent-gateway";
-    readonly moduleVersion: "0.1.4";
+    readonly moduleVersion: "0.1.6";
     readonly kind: "service";
     readonly templateVersion: "1.0.0";
     readonly platformCompatibility: ">=1.0.0 <2.0.0";
@@ -24,57 +24,26 @@ export declare const descriptor: {
     }, {
         readonly contractRef: "execution";
         readonly versionRange: ">=1.0.0 <2.0.0";
+    }, {
+        readonly contractRef: "platform-host";
+        readonly versionRange: ">=1.0.0 <2.0.0";
+    }, {
+        readonly contractRef: "public-ingress";
+        readonly versionRange: ">=1.0.0 <2.0.0";
     }];
     readonly requirements: readonly [{
         readonly kind: "runtime";
         readonly runtime: "node";
         readonly versionRange: ">=24.19.0";
     }];
-    readonly configSlots: readonly [{
-        readonly key: "localBaseUrl";
-        readonly type: "url";
-        readonly required: true;
-        readonly description: "Loopback HTTP listener URL owned by Agent Gateway and targeted by the public ingress resource";
-    }, {
-        readonly key: "publicBaseUrl";
-        readonly type: "url";
-        readonly required: true;
-        readonly description: "Public HTTPS URL supplied by the dev-tunnel resource";
-    }, {
-        readonly key: "downstreamCredentialFile";
-        readonly type: "path";
-        readonly required: true;
-        readonly sensitive: true;
-        readonly description: "File containing the dedicated Gateway-to-platform-host transport credential";
-    }, {
-        readonly key: "publicIngressModuleRef";
-        readonly type: "moduleRef";
-        readonly required: false;
-        readonly description: "External resource module governing the public ingress";
-        readonly default: "dev-tunnel";
-    }];
-    readonly lifecycle: {
-        readonly supported: readonly ["describe", "preflight", "status", "verify", "doctor", "start", "stop", "restart", "uninstall"];
-    };
-    readonly verification: {
-        readonly checks: readonly [{
-            readonly id: "gateway-readiness";
-            readonly description: "Gateway dependencies and transport guards are ready";
-            readonly lifecycle: "verify";
-        }];
-    };
+    readonly configSlots: readonly [];
     readonly effects: readonly [{
         readonly kind: "process";
         readonly description: "Manage the declared service process";
         readonly retention: "remove";
     }];
-    readonly documentation: readonly [{
-        readonly id: "overview";
-        readonly path: "./README.md";
-        readonly description: "Agent Gateway package overview";
-    }, {
-        readonly id: "configuration";
-        readonly path: "./CONFIGURATION.md";
-        readonly description: "Module configuration fields, sources and materialization instructions";
-    }];
+    readonly documentation: {
+        readonly docs: "DOCS.md";
+        readonly setup: "SETUP.md";
+    };
 };

package/dist/deployment/descriptor.js

@@ -3,7 +3,7 @@ export const descriptor = {
     contractVersion: "1.0.0",
     moduleRef: "agent-gateway",
     packageName: "@tomflow/proflow-agent-gateway",
-    moduleVersion: "0.1.4",
+    moduleVersion: "0.1.6",
     kind: "service",
     templateVersion: "1.0.0",
     platformCompatibility: ">=1.0.0 <2.0.0",
@@ -30,6 +30,14 @@ export const descriptor = {
             contractRef: "execution",
             versionRange: ">=1.0.0 <2.0.0",
         },
+        {
+            contractRef: "platform-host",
+            versionRange: ">=1.0.0 <2.0.0",
+        },
+        {
+            contractRef: "public-ingress",
+            versionRange: ">=1.0.0 <2.0.0",
+        },
     ],
     requirements: [
         {
@@ -38,56 +46,7 @@ export const descriptor = {
             versionRange: ">=24.19.0",
         },
     ],
-    configSlots: [
-        {
-            key: "localBaseUrl",
-            type: "url",
-            required: true,
-            description: "Loopback HTTP listener URL owned by Agent Gateway and targeted by the public ingress resource",
-        },
-        {
-            key: "publicBaseUrl",
-            type: "url",
-            required: true,
-            description: "Public HTTPS URL supplied by the dev-tunnel resource",
-        },
-        {
-            key: "downstreamCredentialFile",
-            type: "path",
-            required: true,
-            sensitive: true,
-            description: "File containing the dedicated Gateway-to-platform-host transport credential",
-        },
-        {
-            key: "publicIngressModuleRef",
-            type: "moduleRef",
-            required: false,
-            description: "External resource module governing the public ingress",
-            default: "dev-tunnel",
-        },
-    ],
-    lifecycle: {
-        supported: [
-            "describe",
-            "preflight",
-            "status",
-            "verify",
-            "doctor",
-            "start",
-            "stop",
-            "restart",
-            "uninstall",
-        ],
-    },
-    verification: {
-        checks: [
-            {
-                id: "gateway-readiness",
-                description: "Gateway dependencies and transport guards are ready",
-                lifecycle: "verify",
-            },
-        ],
-    },
+    configSlots: [],
     effects: [
         {
             kind: "process",
@@ -95,16 +54,8 @@ export const descriptor = {
             retention: "remove",
         },
     ],
-    documentation: [
-        {
-            id: "overview",
-            path: "./README.md",
-            description: "Agent Gateway package overview",
-        },
-        {
-            id: "configuration",
-            path: "./CONFIGURATION.md",
-            description: "Module configuration fields, sources and materialization instructions",
-        },
-    ],
+    documentation: {
+        docs: "DOCS.md",
+        setup: "SETUP.md",
+    },
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tomflow/proflow-agent-gateway",
-  "version": "0.1.4",
+  "version": "0.1.6",
   "type": "module",
   "publishConfig": {
     "access": "public"
@@ -20,22 +20,23 @@
     "proflow.module.json",
     "conformance.json",
     "README.md",
-    "CONFIGURATION.md"
+    "DOCS.md",
+    "SETUP.md"
   ],
   "dependencies": {
     "zod": "4.1.12",
-    "@tomflow/proflow-module-contract": "^0.1.1"
+    "@tomflow/proflow-module-contract": "^0.1.4"
   },
   "devDependencies": {
-    "@tomflow/proflow-agent-runtime": "^0.1.2",
-    "@tomflow/proflow-execution-local": "^0.1.3",
-    "@tomflow/proflow-deployment-conformance": "^0.1.2",
-    "@tomflow/proflow-task-store-sqlite": "^0.1.2",
-    "@tomflow/proflow-task-migration-runner": "^0.1.2",
-    "@tomflow/proflow-task-orchestration": "^0.1.1",
-    "@tomflow/proflow-execution-browser-extension": "^0.1.3",
-    "@tomflow/proflow-platform-host": "^0.1.4",
-    "@tomflow/proflow-execution-runtime": "^0.1.5"
+    "@tomflow/proflow-agent-runtime": "^0.1.4",
+    "@tomflow/proflow-execution-browser-extension": "^0.1.5",
+    "@tomflow/proflow-platform-host": "^0.1.6",
+    "@tomflow/proflow-execution-local": "^0.1.5",
+    "@tomflow/proflow-task-migration-runner": "^0.1.4",
+    "@tomflow/proflow-execution-runtime": "^0.1.7",
+    "@tomflow/proflow-deployment-conformance": "^0.1.4",
+    "@tomflow/proflow-task-store-sqlite": "^0.1.4",
+    "@tomflow/proflow-task-orchestration": "^0.1.3"
   },
   "description": "The sole Custom GPT Actions HTTP ingress and OpenAI transport anti-corruption layer.",
   "keywords": [

package/proflow.module.json

@@ -3,7 +3,7 @@
 	"contractVersion": "1.0.0",
 	"moduleRef": "agent-gateway",
 	"packageName": "@tomflow/proflow-agent-gateway",
-	"moduleVersion": "0.1.4",
+	"moduleVersion": "0.1.6",
 	"kind": "service",
 	"templateVersion": "1.0.0",
 	"platformCompatibility": ">=1.0.0 <2.0.0",
@@ -29,6 +29,14 @@
 		{
 			"contractRef": "execution",
 			"versionRange": ">=1.0.0 <2.0.0"
+		},
+		{
+			"contractRef": "platform-host",
+			"versionRange": ">=1.0.0 <2.0.0"
+		},
+		{
+			"contractRef": "public-ingress",
+			"versionRange": ">=1.0.0 <2.0.0"
 		}
 	],
 	"requirements": [
@@ -38,56 +46,7 @@
 			"versionRange": ">=24.19.0"
 		}
 	],
-	"configSlots": [
-		{
-			"key": "localBaseUrl",
-			"type": "url",
-			"required": true,
-			"description": "Loopback HTTP listener URL owned by Agent Gateway and targeted by the public ingress resource"
-		},
-		{
-			"key": "publicBaseUrl",
-			"type": "url",
-			"required": true,
-			"description": "Public HTTPS URL supplied by the dev-tunnel resource"
-		},
-		{
-			"key": "downstreamCredentialFile",
-			"type": "path",
-			"required": true,
-			"sensitive": true,
-			"description": "File containing the dedicated Gateway-to-platform-host transport credential"
-		},
-		{
-			"key": "publicIngressModuleRef",
-			"type": "moduleRef",
-			"required": false,
-			"description": "External resource module governing the public ingress",
-			"default": "dev-tunnel"
-		}
-	],
-	"lifecycle": {
-		"supported": [
-			"describe",
-			"preflight",
-			"status",
-			"verify",
-			"doctor",
-			"start",
-			"stop",
-			"restart",
-			"uninstall"
-		]
-	},
-	"verification": {
-		"checks": [
-			{
-				"id": "gateway-readiness",
-				"description": "Gateway dependencies and transport guards are ready",
-				"lifecycle": "verify"
-			}
-		]
-	},
+	"configSlots": [],
 	"effects": [
 		{
 			"kind": "process",
@@ -95,16 +54,8 @@
 			"retention": "remove"
 		}
 	],
-	"documentation": [
-		{
-			"id": "overview",
-			"path": "./README.md",
-			"description": "Agent Gateway package overview"
-		},
-		{
-			"id": "configuration",
-			"path": "./CONFIGURATION.md",
-			"description": "Module configuration fields, sources and materialization instructions"
-		}
-	]
+	"documentation": {
+		"docs": "DOCS.md",
+		"setup": "SETUP.md"
+	}
 }

package/CONFIGURATION.md

@@ -1,26 +0,0 @@
-# agent-gateway configuration
-
-Canonical public config: `.proflow/config/agent-gateway.json`
-
-This file is Workspace-owned data. `platform uninstall` does not delete it. Values are JSON strings. Raw secrets must not be stored here; `secretRef` fields contain opaque references only.
-
-## Fields
-
-| Key | Type | Required | Sensitive | Source | Meaning |
-|---|---|---:|---:|---|---|
-| `localBaseUrl` | `url` | yes | no | User or owning external/runtime Module supplies the reachable endpoint URL. | Loopback HTTP listener URL owned by Agent Gateway and targeted by the public ingress resource |
-| `publicBaseUrl` | `url` | yes | no | User or owning external/runtime Module supplies the reachable endpoint URL. | Public HTTPS URL supplied by the dev-tunnel resource |
-| `downstreamCredentialFile` | `path` | yes | yes | User or owning Module supplies an absolute/local path that exists on this Workspace. | File containing the dedicated Gateway-to-platform-host transport credential |
-| `publicIngressModuleRef` | `moduleRef` | no | no | Another installed ProFlow Module reference selected from `platform docs` / Module topology. | External resource module governing the public ingress |
-
-## Materialize
-
-Create or update the canonical JSON object at:
-
-`.proflow/config/agent-gateway.json`
-
-Use only declared keys and string values. Do not create a second Platform configuration database.
-
-## Base completion check
-
-Run `platform modules`. This Module should no longer report required keys in `missingConfig`. `platform start` performs the authoritative Module-owned validation before starting anything.