@tomflow/proflow-execution-browser-extension 0.1.24 → 0.1.26

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # @tomflow/proflow-execution-browser-extension
 
+## 0.1.26
+
+### Patch Changes
+
+- Close the Real-3 source candidate and real-workspace loop: fail-closed Browser submit verification, worker-bound Task mutation and WAKE confirmation, detached platform start ownership with shell return, discoverable docs, and targeted single-package Workspace update.
+
+## 0.1.25
+
+### Patch Changes
+
+- Preserve irreversible Custom GPT role authority and revalidate existing roles without duplicate creation
+
 ## 0.1.24
 
 ### Patch Changes

package/dist/deployment/adapter.d.ts

@@ -47,7 +47,7 @@ export declare const behaviorAdapter: {
             ok: true;
             status: "SUCCEEDED";
             moduleRef: "execution-browser-extension";
-            moduleVersion: "0.1.24";
+            moduleVersion: "0.1.26";
             data: {
                 loadDir: string;
             };
@@ -60,7 +60,7 @@ export declare const behaviorAdapter: {
             readonly ok: true;
             readonly status: "SUCCEEDED";
             readonly moduleRef: "execution-browser-extension";
-            readonly moduleVersion: "0.1.24";
+            readonly moduleVersion: "0.1.26";
         };
         observedEffects: never[];
     }>;
@@ -70,7 +70,7 @@ export declare const behaviorAdapter: {
             ok: true;
             status: "SUCCEEDED";
             moduleRef: "execution-browser-extension";
-            moduleVersion: "0.1.24";
+            moduleVersion: "0.1.26";
             data: {
                 setupStatus: "ACTION_REQUIRED" | "READY";
                 runtimeStatus: "NOT_APPLICABLE";
@@ -95,7 +95,7 @@ export declare const behaviorAdapter: {
         result: {
             contract: "deployment.result.v1";
             moduleRef: "execution-browser-extension";
-            moduleVersion: "0.1.24";
+            moduleVersion: "0.1.26";
             ok: false;
             status: "ACTION_REQUIRED";
             data: {
@@ -127,14 +127,14 @@ export declare const behaviorAdapter: {
             readonly ok: true;
             readonly status: "SUCCEEDED";
             readonly moduleRef: "execution-browser-extension";
-            readonly moduleVersion: "0.1.24";
+            readonly moduleVersion: "0.1.26";
         };
         observedEffects: string[];
     } | {
         result: {
             contract: "deployment.result.v1";
             moduleRef: "execution-browser-extension";
-            moduleVersion: "0.1.24";
+            moduleVersion: "0.1.26";
             ok: false;
             status: "FAILED";
             error: {
@@ -167,7 +167,7 @@ export declare const behaviorAdapter: {
             ok: true;
             status: "SUCCEEDED";
             moduleRef: "execution-browser-extension";
-            moduleVersion: "0.1.24";
+            moduleVersion: "0.1.26";
             data: {
                 docs: string;
             };
@@ -180,11 +180,11 @@ export declare const behaviorAdapter: {
             readonly ok: true;
             readonly status: "SUCCEEDED";
             readonly moduleRef: "execution-browser-extension";
-            readonly moduleVersion: "0.1.24";
+            readonly moduleVersion: "0.1.26";
         } | {
             contract: "deployment.result.v1";
             moduleRef: "execution-browser-extension";
-            moduleVersion: "0.1.24";
+            moduleVersion: "0.1.26";
             ok: false;
             status: "FAILED";
             error: {
@@ -201,7 +201,7 @@ export declare const behaviorAdapter: {
             readonly ok: true;
             readonly status: "SUCCEEDED";
             readonly moduleRef: "execution-browser-extension";
-            readonly moduleVersion: "0.1.24";
+            readonly moduleVersion: "0.1.26";
         };
         observedEffects: never[];
     }>;

package/dist/deployment/descriptor.d.ts

@@ -3,7 +3,7 @@ export declare const descriptor: {
     readonly contractVersion: "1.0.0";
     readonly moduleRef: "execution-browser-extension";
     readonly packageName: "@tomflow/proflow-execution-browser-extension";
-    readonly moduleVersion: "0.1.24";
+    readonly moduleVersion: "0.1.26";
     readonly kind: "browser-extension";
     readonly templateVersion: "1.0.0";
     readonly platformCompatibility: ">=1.0.0 <2.0.0";

package/dist/deployment/descriptor.js

@@ -3,7 +3,7 @@ export const descriptor = {
     contractVersion: "1.0.0",
     moduleRef: "execution-browser-extension",
     packageName: "@tomflow/proflow-execution-browser-extension",
-    moduleVersion: "0.1.24",
+    moduleVersion: "0.1.26",
     kind: "browser-extension",
     templateVersion: "1.0.0",
     platformCompatibility: ">=1.0.0 <2.0.0",

package/dist/extension/background.js

@@ -14190,6 +14190,7 @@ var observerRecoveryRetryCount = 0;
 function runObserverRecovery() {
   if (observerRecoveryInFlight) return observerRecoveryInFlight;
   observerRecoveryInFlight = (async () => {
+    let recoveryNeedsRetry = false;
     await collaborationCarrier.recoverPending(50).catch(() => void 0);
     const signalBatch = await invokeObserverApplication(
       "execution.listSignals",
@@ -14219,18 +14220,14 @@ function runObserverRecovery() {
             signalRef: candidate.signalRef
           });
         } catch {
+          recoveryNeedsRetry = true;
         }
       }
     }
     const listed = await invokeTaskApplication("task.list", {}).catch(
       () => null
     );
-    if (listed === null && observerRecoveryRetryCount < 6) {
-      observerRecoveryRetryCount += 1;
-      setTimeout(() => void runObserverRecovery(), 2e3);
-    } else if (listed !== null) {
-      observerRecoveryRetryCount = 0;
-    }
+    if (listed === null) recoveryNeedsRetry = true;
     if (isRecord(listed) && Array.isArray(listed.tasks)) {
       for (const candidate of listed.tasks.slice(0, 100)) {
         if (!isRecord(candidate) || typeof candidate.taskId !== "string")
@@ -14239,10 +14236,20 @@ function runObserverRecovery() {
           continue;
         await invokeTaskApplication("task.ensureWorkers", {
           taskId: candidate.taskId
-        }).catch(() => void 0);
-        await taskObserver.drive(candidate.taskId).catch(() => void 0);
+        }).catch(() => {
+          recoveryNeedsRetry = true;
+        });
+        await taskObserver.drive(candidate.taskId).catch(() => {
+          recoveryNeedsRetry = true;
+        });
       }
     }
+    if (recoveryNeedsRetry && observerRecoveryRetryCount < 6) {
+      observerRecoveryRetryCount += 1;
+      setTimeout(() => void runObserverRecovery(), 2e3);
+    } else if (!recoveryNeedsRetry) {
+      observerRecoveryRetryCount = 0;
+    }
     const previousSystemState = await loadSystemObserverState().catch(
       () => null
     );
@@ -14285,6 +14292,21 @@ async function contentCommand(tabId, command) {
   }
   return response.value;
 }
+async function waitForSubmittedMessage(tabId, fingerprint) {
+  for (let attempt = 0; attempt < 60; attempt += 1) {
+    try {
+      const value = await contentCommand(tabId, {
+        operation: "verify",
+        fingerprint
+      });
+      if (isRecord(value) && value.verified === true)
+        return observationFor(tabId);
+    } catch {
+    }
+    await sleep(250);
+  }
+  throw new Error("MESSAGE_SUBMIT_REALITY_UNCONFIRMED");
+}
 function numeric(value, name) {
   if (!Number.isInteger(value)) throw new Error(`${name}_INVALID`);
   return value;
@@ -14312,11 +14334,12 @@ async function executeCommand(command) {
     return contentCommand(tabId, { operation: "observe" });
   if (command.type === "SUBMIT") {
     const before = observationFor(tabId);
+    const fingerprint = text(command.fingerprint, "FINGERPRINT");
     try {
       await contentCommand(tabId, {
         operation: "submit",
         value: text(command.text, "TEXT"),
-        fingerprint: text(command.fingerprint, "FINGERPRINT")
+        fingerprint
       });
     } catch (error46) {
       const replacement = await waitForObservation(
@@ -14325,7 +14348,7 @@ async function executeCommand(command) {
       ).catch(() => null);
       if (!replacement) throw error46;
     }
-    return waitForObservation(tabId);
+    return waitForSubmittedMessage(tabId, fingerprint);
   }
   if (command.type === "VERIFY")
     return contentCommand(tabId, {

package/dist/extension/content.js

@@ -1,3 +1,4 @@
+import { containsSubmittedFingerprint } from "../src/submitted-message.js";
 const contentInstanceId = `content:${crypto.randomUUID()}`;
 function pageState() {
     if (document.querySelector('[role="dialog"]'))
@@ -25,7 +26,10 @@ function safeElement(selector) {
     return element;
 }
 function hasFingerprint(fingerprint) {
-    return Boolean(fingerprint && document.body.innerText.includes(fingerprint));
+    return containsSubmittedFingerprint([...document.querySelectorAll('[data-message-author-role="user"]')].map((element) => ({
+        authorRole: element.getAttribute("data-message-author-role"),
+        textContent: element.textContent,
+    })), fingerprint);
 }
 chrome.runtime.onMessage.addListener((command, _sender, sendResponse) => {
     void (async () => {

package/dist/src/custom-gpt-role.js

@@ -33,7 +33,6 @@ export async function createCustomGptRole(input, ports) {
                 : { onlineTimeoutMs: input.onlineTimeoutMs }),
         });
         let result;
-        let rollbackSavedRole;
         let credential = "";
         try {
             const prepared = await ports.roleRegistry.prepareCredential();
@@ -55,7 +54,6 @@ export async function createCustomGptRole(input, ports) {
                 roleRef: result.gptId,
                 carrierUrl: result.carrierUrl,
             }, credential);
-            rollbackSavedRole = saved.rollback;
             if (typeof saved.credential !== "string" || saved.credential.length < 32)
                 throw new Error("WORKSPACE_ROLE_CREDENTIAL_INVALID");
             if (saved.credential !== credential)
@@ -79,18 +77,10 @@ export async function createCustomGptRole(input, ports) {
             });
             return result;
         }
-        catch (error) {
-            if (rollbackSavedRole) {
-                try {
-                    await rollbackSavedRole();
-                }
-                catch {
-                    throw new Error("WORKSPACE_ROLE_ROLLBACK_FAILED");
-                }
-            }
-            throw error;
-        }
         finally {
+            // Remote GPT creation is irreversible from this host. Do not roll the durable
+            // Role back after post-create validation failure; the caller can safely revalidate
+            // that same Role on the next setup instead of creating a duplicate GPT.
             credential = "";
             await host.close();
         }

package/dist/src/index.js

@@ -240,7 +240,9 @@ export function createExecutionBrowserExtension(options) {
                     throw new ExecutionBrowserError("PRECONDITION_FAILED", "ROLE_URL_MISMATCH");
                 const precondition = await effectStarted(raw);
                 const opened = await options.browser.open(request.input.roleUrl);
-                await options.browser.submit(opened.tabId, `WORKER_BIND ${request.input.bootstrapFingerprint}`, request.input.bootstrapFingerprint);
+                const submitted = await options.browser.submit(opened.tabId, `WORKER_BIND ${request.input.bootstrapFingerprint}`, request.input.bootstrapFingerprint);
+                if (!(await options.browser.hasMessage(submitted.tabId, request.input.bootstrapFingerprint)))
+                    throw new ExecutionBrowserError("UNKNOWN_SIDE_EFFECT", "CREATE_MESSAGE_REALITY_UNCONFIRMED");
                 const observed = await options.browser.observe(opened.tabId);
                 const identity = parseCarrierIdentity(observed.url);
                 if (identity.roleRef !== request.input.roleRef || !identity.workerRef)

package/dist/src/submitted-message.d.ts

@@ -0,0 +1,5 @@
+export type SubmittedMessageCandidate = {
+    authorRole: string | null;
+    textContent: string | null;
+};
+export declare function containsSubmittedFingerprint(candidates: Iterable<SubmittedMessageCandidate>, fingerprint: string | undefined): boolean;

package/dist/src/submitted-message.js

@@ -0,0 +1,10 @@
+export function containsSubmittedFingerprint(candidates, fingerprint) {
+    if (!fingerprint)
+        return false;
+    for (const candidate of candidates) {
+        if (candidate.authorRole === "user" &&
+            candidate.textContent?.includes(fingerprint))
+            return true;
+    }
+    return false;
+}

package/extension/background.ts

@@ -587,6 +587,7 @@ let observerRecoveryRetryCount = 0;
 function runObserverRecovery() {
 	if (observerRecoveryInFlight) return observerRecoveryInFlight;
 	observerRecoveryInFlight = (async () => {
+		let recoveryNeedsRetry = false;
 		await collaborationCarrier.recoverPending(50).catch(() => undefined);
 		const signalBatch = await invokeObserverApplication(
 			"execution.listSignals",
@@ -634,18 +635,14 @@ function runObserverRecovery() {
 					});
 				} catch {
 					// Leave the durable signal unacknowledged for the next bounded recovery pass.
+					recoveryNeedsRetry = true;
 				}
 			}
 		}
 		const listed = await invokeTaskApplication("task.list", {}).catch(
 			() => null,
 		);
-		if (listed === null && observerRecoveryRetryCount < 6) {
-			observerRecoveryRetryCount += 1;
-			setTimeout(() => void runObserverRecovery(), 2_000);
-		} else if (listed !== null) {
-			observerRecoveryRetryCount = 0;
-		}
+		if (listed === null) recoveryNeedsRetry = true;
 		if (isRecord(listed) && Array.isArray(listed.tasks)) {
 			for (const candidate of listed.tasks.slice(0, 100)) {
 				if (!isRecord(candidate) || typeof candidate.taskId !== "string")
@@ -663,10 +660,22 @@ function runObserverRecovery() {
 				// missing roles are re-provisioned by the Host/Execution path.
 				await invokeTaskApplication("task.ensureWorkers", {
 					taskId: candidate.taskId,
-				}).catch(() => undefined);
-				await taskObserver.drive(candidate.taskId).catch(() => undefined);
+				}).catch(() => {
+					recoveryNeedsRetry = true;
+				});
+				await taskObserver.drive(candidate.taskId).catch(() => {
+					recoveryNeedsRetry = true;
+				});
 			}
 		}
+		// A bounded retry continues the same stable Execution identities. Execution
+		// remains the no-blind-replay authority for APPLIED/NOT_APPLIED/UNKNOWN.
+		if (recoveryNeedsRetry && observerRecoveryRetryCount < 6) {
+			observerRecoveryRetryCount += 1;
+			setTimeout(() => void runObserverRecovery(), 2_000);
+		} else if (!recoveryNeedsRetry) {
+			observerRecoveryRetryCount = 0;
+		}
 		const previousSystemState = await loadSystemObserverState().catch(
 			() => null,
 		);
@@ -724,6 +733,27 @@ async function contentCommand(
 	return response.value;
 }
 
+async function waitForSubmittedMessage(
+	tabId: number,
+	fingerprint: string,
+): Promise<ContentObservation> {
+	for (let attempt = 0; attempt < 60; attempt += 1) {
+		try {
+			const value = await contentCommand(tabId, {
+				operation: "verify",
+				fingerprint,
+			});
+			if (isRecord(value) && value.verified === true)
+				return observationFor(tabId);
+		} catch {
+			// Navigation can replace the content instance after submit. The next
+			// bounded observation/verification pass uses the newly published session.
+		}
+		await sleep(250);
+	}
+	throw new Error("MESSAGE_SUBMIT_REALITY_UNCONFIRMED");
+}
+
 function numeric(value: unknown, name: string): number {
 	if (!Number.isInteger(value)) throw new Error(`${name}_INVALID`);
 	return value as number;
@@ -757,11 +787,12 @@ async function executeCommand(command: BridgeCommand): Promise<unknown> {
 		return contentCommand(tabId, { operation: "observe" });
 	if (command.type === "SUBMIT") {
 		const before = observationFor(tabId);
+		const fingerprint = text(command.fingerprint, "FINGERPRINT");
 		try {
 			await contentCommand(tabId, {
 				operation: "submit",
 				value: text(command.text, "TEXT"),
-				fingerprint: text(command.fingerprint, "FINGERPRINT"),
+				fingerprint,
 			});
 		} catch (error) {
 			const replacement = await waitForObservation(
@@ -770,7 +801,7 @@ async function executeCommand(command: BridgeCommand): Promise<unknown> {
 			).catch(() => null);
 			if (!replacement) throw error;
 		}
-		return waitForObservation(tabId);
+		return waitForSubmittedMessage(tabId, fingerprint);
 	}
 	if (command.type === "VERIFY")
 		return contentCommand(tabId, {

package/extension/content.ts

@@ -1,3 +1,5 @@
+import { containsSubmittedFingerprint } from "../src/submitted-message.js";
+
 type PageState = "IDLE" | "BUSY" | "BLOCKED" | "UNKNOWN";
 type ContentCommand = {
 	type: "PROFLOW_PAGE_COMMAND";
@@ -61,7 +63,15 @@ function safeElement(selector: string | undefined): HTMLElement {
 }
 
 function hasFingerprint(fingerprint: string | undefined): boolean {
-	return Boolean(fingerprint && document.body.innerText.includes(fingerprint));
+	return containsSubmittedFingerprint(
+		[...document.querySelectorAll('[data-message-author-role="user"]')].map(
+			(element) => ({
+				authorRole: element.getAttribute("data-message-author-role"),
+				textContent: element.textContent,
+			}),
+		),
+		fingerprint,
+	);
 }
 
 chrome.runtime.onMessage.addListener((command, _sender, sendResponse) => {

package/manifest.json

@@ -1,7 +1,7 @@
 {
 	"manifest_version": 3,
 	"name": "ProFlow Execution Browser",
-	"version": "0.1.24",
+	"version": "0.1.26",
 	"permissions": [
 		"tabs",
 		"storage",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tomflow/proflow-execution-browser-extension",
-  "version": "0.1.24",
+  "version": "0.1.26",
   "description": "Execution-owned MV3 Browser executor, evidence provider and browser application surface.",
   "type": "module",
   "publishConfig": {

package/proflow.module.json

@@ -3,7 +3,7 @@
 	"contractVersion": "1.0.0",
 	"moduleRef": "execution-browser-extension",
 	"packageName": "@tomflow/proflow-execution-browser-extension",
-	"moduleVersion": "0.1.24",
+	"moduleVersion": "0.1.26",
 	"kind": "browser-extension",
 	"templateVersion": "1.0.0",
 	"platformCompatibility": ">=1.0.0 <2.0.0",