@tomflow/proflow-execution-browser-extension 0.1.2 → 0.1.4

package/dist/src/collaboration-carrier.js

@@ -1,15 +1,15 @@
-import { createHash } from "node:crypto";
 import { parseExecutionRecord, } from "@tomflow/proflow-execution-contracts";
-function contentFingerprint(message) {
-    return `sha256:${createHash("sha256")
-        .update(JSON.stringify({
+async function contentFingerprint(message) {
+    const payload = new TextEncoder().encode(JSON.stringify({
         messageId: message.messageId,
         taskId: message.taskId,
         targetRoleRef: message.targetRoleRef,
         targetWorkerRef: message.targetWorkerRef,
         content: message.content,
-    }))
-        .digest("hex")}`;
+    }));
+    const digest = await globalThis.crypto.subtle.digest("SHA-256", payload);
+    const hex = Array.from(new Uint8Array(digest), (byte) => byte.toString(16).padStart(2, "0")).join("");
+    return `sha256:${hex}`;
 }
 /**
  * Event-driven Collaboration Carrier application.
@@ -59,7 +59,7 @@ export function createCollaborationCarrierApplication(options) {
                 roleRef: message.targetRoleRef,
                 workerRef: message.targetWorkerRef,
                 messageRef: message.messageId,
-                contentFingerprint: contentFingerprint(message),
+                contentFingerprint: await contentFingerprint(message),
             },
         };
         const execution = parseExecutionRecord(await options.execution.execute(request));

package/dist/src/configure.d.ts

@@ -0,0 +1,4 @@
+#!/usr/bin/env node
+export declare function materializeBrowserExtensionConfig(workspaceRoot: string): Promise<{
+    loadDir: string;
+}>;

package/dist/src/configure.js

@@ -0,0 +1,42 @@
+#!/usr/bin/env node
+import { readFile } from "node:fs/promises";
+import { resolve } from "node:path";
+import { materializeProductionConfig } from "../deployment/adapter.js";
+function workspaceFromArgs(args) {
+    if (args[0] !== "materialize-config") {
+        throw new Error("Usage: proflow-execution-browser-extension materialize-config [--workspace /absolute/path]");
+    }
+    const workspaceIndex = args.indexOf("--workspace");
+    if (workspaceIndex < 0)
+        return process.cwd();
+    const value = args[workspaceIndex + 1];
+    if (!value || args.length !== 3) {
+        throw new Error("Usage: proflow-execution-browser-extension materialize-config [--workspace /absolute/path]");
+    }
+    return resolve(value);
+}
+export async function materializeBrowserExtensionConfig(workspaceRoot) {
+    const configPath = resolve(workspaceRoot, ".proflow", "config", "execution-browser-extension.json");
+    const parsed = JSON.parse(await readFile(configPath, "utf8"));
+    if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
+        throw new Error("execution-browser-extension config must be a JSON object");
+    }
+    const config = Object.fromEntries(Object.entries(parsed).map(([key, value]) => {
+        if (typeof value !== "string") {
+            throw new Error(`browser extension config ${key} must be a string`);
+        }
+        return [key, value];
+    }));
+    return materializeProductionConfig({
+        moduleRef: "execution-browser-extension",
+        config,
+        workspaceRoot,
+    });
+}
+async function main() {
+    const workspaceRoot = workspaceFromArgs(process.argv.slice(2));
+    const result = await materializeBrowserExtensionConfig(workspaceRoot);
+    process.stdout.write(`${JSON.stringify({ status: "MATERIALIZED", ...result })}\n`);
+}
+if (import.meta.main)
+    await main();

package/extension/background.ts

@@ -1,15 +1,17 @@
+import { createCollaborationCarrierApplication } from "../src/collaboration-carrier.js";
 import {
-	createCollaborationCarrierApplication,
 	createSystemObserver,
-	createTaskObserver,
 	type SystemObserverReasonFailure,
 	type SystemObserverReasonRequest,
 	type SystemObserverReasonResult,
 	type SystemObserverView,
+} from "../src/system-observer.js";
+import {
+	createTaskObserver,
 	type TaskDriveProjection,
 	type TaskObserverDiagnosticAssessment,
 	type TaskObserverDiagnosticFailure,
-} from "../src/index.js";
+} from "../src/task-observer.js";
 
 type PageState = "IDLE" | "BUSY" | "BLOCKED" | "UNKNOWN";
 type ActivityKind =
@@ -69,6 +71,7 @@ type ChromeTab = { id?: number; windowId?: number; url?: string };
 type ChromeRuntime = {
 	runtime: {
 		id: string;
+		getURL(path: string): string;
 		onMessage: {
 			addListener(
 				listener: (
@@ -153,6 +156,38 @@ function parseConfig(value: unknown): BridgeConfig | null {
 	return { endpoint: endpoint.replace(/\/$/, ""), token };
 }
 
+type ManagedRuntimeConfig = {
+	proflowRuntimeBridge?: unknown;
+	proflowTaskApplication?: unknown;
+	proflowApprovalApplication?: unknown;
+};
+
+async function bootstrapManagedRuntimeConfig(): Promise<void> {
+	let response: Response;
+	try {
+		response = await fetch(chrome.runtime.getURL("runtime-config.json"), {
+			cache: "no-store",
+		});
+	} catch {
+		return;
+	}
+	if (!response.ok) return;
+	const raw = (await response.json()) as unknown;
+	if (!isRecord(raw)) return;
+	const managed = raw as ManagedRuntimeConfig;
+	const bridge = parseConfig(managed.proflowRuntimeBridge);
+	const task = parseConfig(managed.proflowTaskApplication);
+	const approval = parseConfig(managed.proflowApprovalApplication);
+	if (!bridge || !task || !approval) {
+		throw new Error("MANAGED_RUNTIME_CONFIG_INVALID");
+	}
+	await chrome.storage.local.set({
+		proflowRuntimeBridge: bridge,
+		proflowTaskApplication: task,
+		proflowApprovalApplication: approval,
+	});
+}
+
 async function bridgeConfig(): Promise<BridgeConfig | null> {
 	const stored = await chrome.storage.local.get("proflowRuntimeBridge");
 	return parseConfig(stored.proflowRuntimeBridge);
@@ -981,17 +1016,27 @@ chrome.runtime.onMessage.addListener((message, sender, sendResponse) => {
 	}
 });
 
-chrome.runtime.onInstalled.addListener(() => {
-	void chrome.sidePanel.setPanelBehavior({ openPanelOnActionClick: true });
+async function startBackgroundRuntime(): Promise<void> {
+	await bootstrapManagedRuntimeConfig();
+	await persistSnapshot();
 	void runBridgeLoop();
 	void runObserverRecovery();
+}
+
+chrome.runtime.onInstalled.addListener(() => {
+	void chrome.sidePanel.setPanelBehavior({ openPanelOnActionClick: true });
+	void bootstrapManagedRuntimeConfig().then(async () => {
+		await persistSnapshot();
+		void runBridgeLoop();
+		void runObserverRecovery();
+	});
 });
 chrome.runtime.onStartup.addListener(() => {
 	sessions.clear();
-	void persistSnapshot();
-	void runBridgeLoop();
-	void runObserverRecovery();
+	void bootstrapManagedRuntimeConfig().then(async () => {
+		await persistSnapshot();
+		void runBridgeLoop();
+		void runObserverRecovery();
+	});
 });
-void persistSnapshot();
-void runBridgeLoop();
-void runObserverRecovery();
+void startBackgroundRuntime();

package/manifest.json

@@ -1,7 +1,7 @@
 {
 	"manifest_version": 3,
 	"name": "ProFlow Execution Browser",
-	"version": "0.1.2",
+	"version": "0.1.4",
 	"permissions": ["tabs", "storage", "sidePanel"],
 	"host_permissions": ["https://chatgpt.com/*", "http://127.0.0.1/*"],
 	"background": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tomflow/proflow-execution-browser-extension",
-  "version": "0.1.2",
+  "version": "0.1.4",
   "description": "Execution-owned MV3 Browser executor, evidence provider and browser application surface.",
   "type": "module",
   "publishConfig": {
@@ -11,7 +11,8 @@
     "./bridge": "./dist/src/bridge.js",
     "./deployment/adapter": "./dist/deployment/adapter.js",
     "./deployment/descriptor": "./dist/deployment/descriptor.js",
-    "./runtime-composition": "./dist/src/runtime-composition.js"
+    "./runtime-composition": "./dist/src/runtime-composition.js",
+    "./configure": "./dist/src/configure.js"
   },
   "files": [
     "dist",
@@ -21,15 +22,15 @@
     "proflow.module.json",
     "conformance.json",
     "README.md",
-    "self-install.mjs"
+    "CONFIGURATION.md"
   ],
   "dependencies": {
-    "@tomflow/proflow-execution-contracts": "^0.1.2"
+    "@tomflow/proflow-module-contract": "^0.1.2",
+    "@tomflow/proflow-execution-contracts": "^0.1.3"
   },
   "devDependencies": {
-    "@tomflow/proflow-deployment-conformance": "^0.1.2",
-    "@tomflow/proflow-execution-runtime": "^0.1.1",
-    "@tomflow/proflow-module-contract": "^0.1.1"
+    "@tomflow/proflow-deployment-conformance": "^0.1.3",
+    "@tomflow/proflow-execution-runtime": "^0.1.5"
   },
   "keywords": [
     "proflow",
@@ -38,20 +39,11 @@
   ],
   "proflow": {
     "module": true,
-    "installClass": "core",
-    "installRequires": [
-      "@tomflow/proflow-agent-runtime",
-      "@tomflow/proflow-chatgpt-carrier",
-      "@tomflow/proflow-chrome-runtime",
-      "@tomflow/proflow-execution-contracts",
-      "@tomflow/proflow-execution-runtime",
-      "@tomflow/proflow-task-orchestration"
-    ],
     "descriptor": "./dist/deployment/descriptor.js",
     "manifest": "./proflow.module.json"
   },
   "bin": {
-    "proflow-execution-browser-extension": "./self-install.mjs"
+    "proflow-execution-browser-extension": "./dist/src/configure.js"
   },
   "scripts": {
     "test": "node --test tests/**/*.test.ts",

package/proflow.module.json

@@ -3,11 +3,10 @@
 	"contractVersion": "1.0.0",
 	"moduleRef": "execution-browser-extension",
 	"packageName": "@tomflow/proflow-execution-browser-extension",
-	"moduleVersion": "0.1.2",
+	"moduleVersion": "0.1.4",
 	"kind": "browser-extension",
 	"templateVersion": "1.0.0",
 	"platformCompatibility": ">=1.0.0 <2.0.0",
-	"installClass": "core",
 	"identity": {
 		"domain": "execution",
 		"summary": "Execution-owned MV3 Browser executor, evidence provider and browser application surface."
@@ -52,10 +51,10 @@
 		},
 		{
 			"key": "bridge.token",
-			"type": "secretRef",
+			"type": "path",
 			"required": true,
 			"sensitive": true,
-			"description": "Browser Reality Bridge extension token reference"
+			"description": "File containing the Browser Reality Bridge extension token"
 		},
 		{
 			"key": "taskApplication.endpoint",
@@ -65,10 +64,10 @@
 		},
 		{
 			"key": "taskApplication.token",
-			"type": "secretRef",
+			"type": "path",
 			"required": true,
 			"sensitive": true,
-			"description": "Platform Host Task application token reference"
+			"description": "File containing the Platform Host Task application token"
 		},
 		{
 			"key": "approvalApplication.endpoint",
@@ -78,10 +77,16 @@
 		},
 		{
 			"key": "approvalApplication.token",
-			"type": "secretRef",
+			"type": "path",
 			"required": true,
 			"sensitive": true,
-			"description": "Platform Host Approval application token reference"
+			"description": "File containing the Platform Host Approval application token"
+		},
+		{
+			"key": "verificationEvidenceFile",
+			"type": "path",
+			"required": true,
+			"description": "JSON evidence file written after real Chrome loads the Deployment-managed MV3 extension and its Service Worker runs"
 		},
 		{
 			"key": "chromeRuntimeModuleRef",
@@ -122,6 +127,11 @@
 			"id": "overview",
 			"path": "./README.md",
 			"description": "Package-owned module overview"
+		},
+		{
+			"id": "configuration",
+			"path": "./CONFIGURATION.md",
+			"description": "Module configuration fields, sources and materialization instructions"
 		}
 	]
 }

package/CHANGELOG.md

@@ -1,13 +0,0 @@
-# @tomflow/proflow-execution-browser-extension
-
-## 0.1.2
-
-### Patch Changes
-
-- Close the Real-1 global Platform control-plane contract across every published ProFlow package. Platform CLI now owns one durable global Workspace binding with canonical identity, cross-process operation locking, cwd/`--workspace` install targeting, cross-directory instance commands, whole-instance uninstall/rebind, and deterministic npm/yarn/pnpm Workspace package-manager selection. Every package-owned install entry, including newly generated Module Template packages, delegates to the Shell-global `platform` command and fails closed when that global CLI is unavailable; Deployment Conformance and the formal test plans mechanically enforce the same rule across all 24 packages.
-
-## 0.1.1
-
-### Patch Changes
-
-- Close Real-1 deployment graph and Fresh Workspace bootstrap gaps: remove Contract-library runtime-provider aliases, correct Execution/Model dependency direction, materialize logical/moduleRef providers through `installRequires`, enforce repository graph validation, and keep self-install executables stable without package-manager worktree mutation.

package/self-install.mjs

@@ -1,35 +0,0 @@
-#!/usr/bin/env node
-import { spawnSync } from "node:child_process";
-
-const [command, ...rest] = process.argv.slice(2);
-const usage =
-	"Usage: npx @tomflow/proflow-execution-browser-extension install\n";
-if (command === "--help" || command === "-h") {
-	process.stdout.write(usage);
-	process.exit(0);
-}
-if (command !== "install" || rest.length > 0) {
-	process.stderr.write(usage);
-	process.exit(2);
-}
-const executable = process.platform === "win32" ? "platform.cmd" : "platform";
-const result = spawnSync(
-	executable,
-	[
-		"install",
-		"@tomflow/proflow-execution-browser-extension",
-		"--workspace",
-		process.cwd(),
-	],
-	{ cwd: process.cwd(), env: process.env, stdio: "inherit" },
-);
-if (result.error) {
-	if (result.error.code === "ENOENT") {
-		process.stderr.write(
-			"GLOBAL_PLATFORM_CLI_REQUIRED: install @tomflow/proflow-platform-cli globally before package-owned install\n",
-		);
-		process.exit(127);
-	}
-	throw result.error;
-}
-process.exit(result.status ?? 1);