@tomflow/proflow-dev-tunnel 0.1.4 → 0.1.6

package/CONFIGURATION.md

@@ -0,0 +1,25 @@
+# dev-tunnel configuration
+
+Canonical public config: `.proflow/config/dev-tunnel.json`
+
+This file is Workspace-owned data. `platform uninstall` does not delete it. Values are JSON strings. Raw secrets must not be stored here; `secretRef` fields contain opaque references only.
+
+## Fields
+
+| Key | Type | Required | Sensitive | Source | Meaning |
+|---|---|---:|---:|---|---|
+| `publicBaseUrl` | `url` | yes | no | User or owning external/runtime Module supplies the reachable endpoint URL. | Public HTTPS URL supplied by the dev-tunnel resource |
+| `tunnelId` | `string` | no | no | User or owning Module supplies this value according to the field description. | Persistent Microsoft Dev Tunnel identifier used when this adapter owns lifecycle start/stop |
+| `verificationEvidenceFile` | `path` | no | no | User or owning Module supplies an absolute/local path that exists on this Workspace. | JSON evidence for real file-relay and 429/5xx verification behind the configured public ingress |
+
+## Materialize
+
+Create or update the canonical JSON object at:
+
+`.proflow/config/dev-tunnel.json`
+
+Use only declared keys and string values. Do not create a second Platform configuration database.
+
+## Base completion check
+
+Run `platform modules`. This Module should no longer report required keys in `missingConfig`. `platform start` performs the authoritative Module-owned validation before starting anything.

package/dist/deployment/adapter.d.ts

@@ -1,4 +1,4 @@
-import type { ModuleOperationResult } from "@tomflow/proflow-module-contract";
+import { type ModuleOperationResult } from "@tomflow/proflow-module-contract";
 import type { DevTunnelRuntime, ErrorSemanticsProof, FileRelayProof } from "../src/resource-adapter.ts";
 type DevTunnelVerificationEvidence = {
     contract: "proflow.dev-tunnel-verification.v1";
@@ -13,7 +13,7 @@ export declare function createBehaviorAdapter(input?: {
     runtime: DevTunnelRuntime;
     verifyErrorSemantics?: () => Promise<ErrorSemanticsProof>;
     verifyFileRelay?: () => Promise<FileRelayProof>;
-}): {
+}, config?: Record<string, string>): {
     describe: () => {
         result: ModuleOperationResult;
         observedEffects: never[];

package/dist/deployment/adapter.js

@@ -1,5 +1,6 @@
 import { readFile } from "node:fs/promises";
 import { join } from "node:path";
+import { observeDeclaredModuleStatus, } from "@tomflow/proflow-module-contract";
 import { verifyPublicIngress } from "../src/resource-adapter.js";
 import { descriptor } from "./descriptor.js";
 const success = (data) => ({
@@ -44,7 +45,7 @@ export async function readDevTunnelVerificationEvidence(file, publicBaseUrl) {
         return undefined;
     }
 }
-export function createBehaviorAdapter(input) {
+export function createBehaviorAdapter(input, config) {
     return {
         describe: () => ({
             result: success({
@@ -59,26 +60,16 @@ export function createBehaviorAdapter(input) {
             observedEffects: [],
         }),
         status: async () => {
-            if (!input) {
-                return {
-                    result: actionRequired("configure-tunnel", "No dev-tunnel resource is bound"),
-                    observedEffects: [],
-                };
-            }
-            const observation = await input.runtime.status();
+            const observation = input ? await input.runtime.status() : undefined;
+            const runtimeStatus = observation?.state === "RUNNING"
+                ? "RUNNING"
+                : observation?.state === "STOPPED"
+                    ? "STOPPED"
+                    : input
+                        ? "FAILED"
+                        : "UNKNOWN";
             return {
-                result: {
-                    ...success(),
-                    checks: [
-                        {
-                            id: "tunnel-status",
-                            status: observation.state === "RUNNING"
-                                ? "PASS"
-                                : "WARN",
-                            message: `dev-tunnel state is ${observation.state}`,
-                        },
-                    ],
-                },
+                result: success(observeDeclaredModuleStatus(descriptor, config, runtimeStatus)),
                 observedEffects: [],
             };
         },
@@ -302,6 +293,6 @@ export async function createProductionBinding(input) {
                 server5xxVerified: false,
                 message: "dev-tunnel verification evidence is missing, stale, or invalid",
             },
-        }),
+        }, input.config),
     };
 }

package/dist/deployment/descriptor.d.ts

@@ -3,11 +3,10 @@ export declare const descriptor: {
     readonly contractVersion: "1.0.0";
     readonly moduleRef: "dev-tunnel";
     readonly packageName: "@tomflow/proflow-dev-tunnel";
-    readonly moduleVersion: "0.1.4";
+    readonly moduleVersion: "0.1.6";
     readonly kind: "external-resource";
     readonly templateVersion: "1.0.0";
     readonly platformCompatibility: ">=1.0.0 <2.0.0";
-    readonly installClass: "core";
     readonly identity: {
         readonly domain: "deployment-governance";
         readonly summary: "Governs the Microsoft Dev Tunnel public HTTPS ingress resource and its managed local host process.";
@@ -76,5 +75,9 @@ export declare const descriptor: {
         readonly id: "overview";
         readonly path: "./README.md";
         readonly description: "Dev Tunnel module overview";
+    }, {
+        readonly id: "configuration";
+        readonly path: "./CONFIGURATION.md";
+        readonly description: "Module configuration fields, sources and materialization instructions";
     }];
 };

package/dist/deployment/descriptor.js

@@ -3,11 +3,10 @@ export const descriptor = {
     contractVersion: "1.0.0",
     moduleRef: "dev-tunnel",
     packageName: "@tomflow/proflow-dev-tunnel",
-    moduleVersion: "0.1.4",
+    moduleVersion: "0.1.6",
     kind: "external-resource",
     templateVersion: "1.0.0",
     platformCompatibility: ">=1.0.0 <2.0.0",
-    installClass: "core",
     identity: {
         domain: "deployment-governance",
         summary: "Governs the Microsoft Dev Tunnel public HTTPS ingress resource and its managed local host process.",
@@ -15,7 +14,10 @@ export const descriptor = {
     provides: [],
     requires: [],
     requirements: [
-        { kind: "executable", command: "devtunnel" },
+        {
+            kind: "executable",
+            command: "devtunnel",
+        },
         {
             kind: "human",
             action: "Complete Microsoft Dev Tunnel login when required",
@@ -101,5 +103,10 @@ export const descriptor = {
             path: "./README.md",
             description: "Dev Tunnel module overview",
         },
+        {
+            id: "configuration",
+            path: "./CONFIGURATION.md",
+            description: "Module configuration fields, sources and materialization instructions",
+        },
     ],
 };

package/dist/src/resource-adapter.js

@@ -223,7 +223,7 @@ export function createDevTunnelRuntime(input) {
                 if (processStateFile)
                     await rm(processStateFile, { force: true });
                 child = undefined;
-                return observe("UNKNOWN");
+                return observe("STOPPED");
             }
             try {
                 process.kill(pid, "SIGTERM");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tomflow/proflow-dev-tunnel",
-  "version": "0.1.4",
+  "version": "0.1.6",
   "type": "module",
   "publishConfig": {
     "access": "public"
@@ -15,13 +15,13 @@
     "proflow.module.json",
     "conformance.json",
     "README.md",
-    "self-install.mjs"
+    "CONFIGURATION.md"
   ],
   "dependencies": {
-    "@tomflow/proflow-module-contract": "^0.1.1"
+    "@tomflow/proflow-module-contract": "^0.1.2"
   },
   "devDependencies": {
-    "@tomflow/proflow-deployment-conformance": "^0.1.2"
+    "@tomflow/proflow-deployment-conformance": "^0.1.3"
   },
   "description": "Governs the Microsoft Dev Tunnel public HTTPS ingress resource and its managed local host process.",
   "keywords": [
@@ -31,16 +31,9 @@
   ],
   "proflow": {
     "module": true,
-    "installClass": "core",
-    "installRequires": [
-      "@tomflow/proflow-module-contract"
-    ],
     "descriptor": "./dist/deployment/descriptor.js",
     "manifest": "./proflow.module.json"
   },
-  "bin": {
-    "proflow-dev-tunnel": "./self-install.mjs"
-  },
   "scripts": {
     "test": "node --test tests/**/*.test.ts",
     "typecheck": "tsc --noEmit"

package/proflow.module.json

@@ -3,11 +3,10 @@
 	"contractVersion": "1.0.0",
 	"moduleRef": "dev-tunnel",
 	"packageName": "@tomflow/proflow-dev-tunnel",
-	"moduleVersion": "0.1.4",
+	"moduleVersion": "0.1.6",
 	"kind": "external-resource",
 	"templateVersion": "1.0.0",
 	"platformCompatibility": ">=1.0.0 <2.0.0",
-	"installClass": "core",
 	"identity": {
 		"domain": "deployment-governance",
 		"summary": "Governs the Microsoft Dev Tunnel public HTTPS ingress resource and its managed local host process."
@@ -103,6 +102,11 @@
 			"id": "overview",
 			"path": "./README.md",
 			"description": "Dev Tunnel module overview"
+		},
+		{
+			"id": "configuration",
+			"path": "./CONFIGURATION.md",
+			"description": "Module configuration fields, sources and materialization instructions"
 		}
 	]
 }

package/CHANGELOG.md

@@ -1,25 +0,0 @@
-# @tomflow/proflow-dev-tunnel
-
-## 0.1.4
-
-### Patch Changes
-
-- Detach the managed dev-tunnel host from the short-lived Platform CLI process and persist an ownership-checked process record so later status/stop/restart invocations can manage the same tunnel without turning `platform start` into a daemon.
-
-## 0.1.3
-
-### Patch Changes
-
-- Bind production dev-tunnel verification to an explicit evidence file for the frozen file-relay and 429/5xx proofs, while retaining live HTTPS/TLS/latency/size checks.
-
-## 0.1.2
-
-### Patch Changes
-
-- Real-1 final remediation and black-box release closure
-
-## 0.1.1
-
-### Patch Changes
-
-- Close the Real-1 global Platform control-plane contract across every published ProFlow package. Platform CLI now owns one durable global Workspace binding with canonical identity, cross-process operation locking, cwd/`--workspace` install targeting, cross-directory instance commands, whole-instance uninstall/rebind, and deterministic npm/yarn/pnpm Workspace package-manager selection. Every package-owned install entry, including newly generated Module Template packages, delegates to the Shell-global `platform` command and fails closed when that global CLI is unavailable; Deployment Conformance and the formal test plans mechanically enforce the same rule across all 24 packages.

package/self-install.mjs

@@ -1,29 +0,0 @@
-#!/usr/bin/env node
-import { spawnSync } from "node:child_process";
-
-const [command, ...rest] = process.argv.slice(2);
-const usage = "Usage: npx @tomflow/proflow-dev-tunnel install\n";
-if (command === "--help" || command === "-h") {
-	process.stdout.write(usage);
-	process.exit(0);
-}
-if (command !== "install" || rest.length > 0) {
-	process.stderr.write(usage);
-	process.exit(2);
-}
-const executable = process.platform === "win32" ? "platform.cmd" : "platform";
-const result = spawnSync(
-	executable,
-	["install", "@tomflow/proflow-dev-tunnel", "--workspace", process.cwd()],
-	{ cwd: process.cwd(), env: process.env, stdio: "inherit" },
-);
-if (result.error) {
-	if (result.error.code === "ENOENT") {
-		process.stderr.write(
-			"GLOBAL_PLATFORM_CLI_REQUIRED: install @tomflow/proflow-platform-cli globally before package-owned install\n",
-		);
-		process.exit(127);
-	}
-	throw result.error;
-}
-process.exit(result.status ?? 1);