@tomflow/proflow-execution-browser-extension 0.1.34 → 0.1.36

package/dist/deployment/adapter.d.ts

@@ -47,7 +47,7 @@ export declare const behaviorAdapter: {
             ok: true;
             status: "SUCCEEDED";
             moduleRef: "execution-browser-extension";
-            moduleVersion: "0.1.34";
+            moduleVersion: "0.1.36";
             data: {
                 loadDir: string;
             };
@@ -60,7 +60,7 @@ export declare const behaviorAdapter: {
             readonly ok: true;
             readonly status: "SUCCEEDED";
             readonly moduleRef: "execution-browser-extension";
-            readonly moduleVersion: "0.1.34";
+            readonly moduleVersion: "0.1.36";
         };
         observedEffects: never[];
     }>;
@@ -70,7 +70,7 @@ export declare const behaviorAdapter: {
             ok: true;
             status: "SUCCEEDED";
             moduleRef: "execution-browser-extension";
-            moduleVersion: "0.1.34";
+            moduleVersion: "0.1.36";
             data: {
                 setupStatus: "ACTION_REQUIRED" | "READY";
                 runtimeStatus: "NOT_APPLICABLE";
@@ -95,7 +95,7 @@ export declare const behaviorAdapter: {
         result: {
             contract: "deployment.result.v1";
             moduleRef: "execution-browser-extension";
-            moduleVersion: "0.1.34";
+            moduleVersion: "0.1.36";
             ok: false;
             status: "ACTION_REQUIRED";
             data: {
@@ -127,14 +127,14 @@ export declare const behaviorAdapter: {
             readonly ok: true;
             readonly status: "SUCCEEDED";
             readonly moduleRef: "execution-browser-extension";
-            readonly moduleVersion: "0.1.34";
+            readonly moduleVersion: "0.1.36";
         };
         observedEffects: string[];
     } | {
         result: {
             contract: "deployment.result.v1";
             moduleRef: "execution-browser-extension";
-            moduleVersion: "0.1.34";
+            moduleVersion: "0.1.36";
             ok: false;
             status: "FAILED";
             error: {
@@ -167,7 +167,7 @@ export declare const behaviorAdapter: {
             ok: true;
             status: "SUCCEEDED";
             moduleRef: "execution-browser-extension";
-            moduleVersion: "0.1.34";
+            moduleVersion: "0.1.36";
             data: {
                 docs: string;
             };
@@ -180,11 +180,11 @@ export declare const behaviorAdapter: {
             readonly ok: true;
             readonly status: "SUCCEEDED";
             readonly moduleRef: "execution-browser-extension";
-            readonly moduleVersion: "0.1.34";
+            readonly moduleVersion: "0.1.36";
         } | {
             contract: "deployment.result.v1";
             moduleRef: "execution-browser-extension";
-            moduleVersion: "0.1.34";
+            moduleVersion: "0.1.36";
             ok: false;
             status: "FAILED";
             error: {
@@ -201,7 +201,7 @@ export declare const behaviorAdapter: {
             readonly ok: true;
             readonly status: "SUCCEEDED";
             readonly moduleRef: "execution-browser-extension";
-            readonly moduleVersion: "0.1.34";
+            readonly moduleVersion: "0.1.36";
         };
         observedEffects: never[];
     }>;

package/dist/deployment/descriptor.d.ts

@@ -3,7 +3,7 @@ export declare const descriptor: {
     readonly contractVersion: "1.0.0";
     readonly moduleRef: "execution-browser-extension";
     readonly packageName: "@tomflow/proflow-execution-browser-extension";
-    readonly moduleVersion: "0.1.34";
+    readonly moduleVersion: "0.1.36";
     readonly kind: "browser-extension";
     readonly templateVersion: "1.0.0";
     readonly platformCompatibility: ">=1.0.0 <2.0.0";

package/dist/deployment/descriptor.js

@@ -3,7 +3,7 @@ export const descriptor = {
     contractVersion: "1.0.0",
     moduleRef: "execution-browser-extension",
     packageName: "@tomflow/proflow-execution-browser-extension",
-    moduleVersion: "0.1.34",
+    moduleVersion: "0.1.36",
     kind: "browser-extension",
     templateVersion: "1.0.0",
     platformCompatibility: ">=1.0.0 <2.0.0",

package/dist/extension/background.js

@@ -13878,6 +13878,7 @@ var extensionInstanceId = `extension:${crypto.randomUUID()}`;
 var sessions = /* @__PURE__ */ new Map();
 var BROWSER_CARRIER_KEEPALIVE_KEY = "proflowBrowserSnapshot";
 var BROWSER_CARRIER_KEEPALIVE_MS = 2e4;
+var BROWSER_BRIDGE_FETCH_TIMEOUT_MS = 5e3;
 var sleep = (milliseconds) => new Promise((resolve) => setTimeout(resolve, milliseconds));
 async function persistSnapshot() {
   await chrome.storage.session.set({
@@ -14491,6 +14492,7 @@ async function executeProvisioningCommand(command) {
 async function bridgeFetch(config2, path, init = {}) {
   return fetch(`${config2.endpoint}${path}`, {
     ...init,
+    signal: init.signal ?? AbortSignal.timeout(BROWSER_BRIDGE_FETCH_TIMEOUT_MS),
     headers: {
       authorization: `Bearer ${config2.token}`,
       "content-type": "application/json",
@@ -14503,7 +14505,7 @@ async function runBridgeLoop() {
   if (bridgeLoopStarted) return;
   bridgeLoopStarted = true;
   while (true) {
-    const config2 = await bridgeConfig();
+    const config2 = await bridgeConfig().catch(() => null);
     if (!config2) {
       await sleep(1e3);
       continue;
@@ -14518,8 +14520,8 @@ async function runBridgeLoop() {
         })
       });
       if (!hello.ok) throw new Error("BRIDGE_HELLO_REJECTED");
-      let lastHeartbeatAt = 0;
-      let lastExtensionKeepaliveAt = 0;
+      let lastHeartbeatAt = Date.now();
+      let lastExtensionKeepaliveAt = Date.now();
       while (true) {
         if (Date.now() - lastExtensionKeepaliveAt >= BROWSER_CARRIER_KEEPALIVE_MS) {
           await chrome.storage.session.get(BROWSER_CARRIER_KEEPALIVE_KEY).catch(() => ({}));

package/dist/src/bridge.d.ts

@@ -25,6 +25,8 @@ export declare function createBrowserRealityBridgeServer(options: BrowserReality
     browser: BrowserRealityPort;
     status(): {
         online: boolean;
+        sessionOnline: boolean;
+        commandConsumerReady: boolean;
         extensionInstanceId: string | null;
         queuedCommands: number;
         pendingCommands: number;

package/dist/src/bridge.js

@@ -118,6 +118,7 @@ export async function createBrowserRealityBridgeServer(options) {
     let lastCommandPollAt = null;
     let lastCommandDeliveredAt = null;
     let lastCommandResultAt = null;
+    let lastCommandConsumerAt = null;
     let closed = false;
     let endpoint = "";
     const taskBootstrap = new Map();
@@ -125,6 +126,13 @@ export async function createBrowserRealityBridgeServer(options) {
     const taskCookie = "proflow_tasks_session";
     const taskBootstrapTtlMs = 60_000;
     const taskSessionTtlMs = 8 * 60 * 60_000;
+    const sessionOnline = () => !closed &&
+        session !== undefined &&
+        now().getTime() - session.lastHeartbeatAt <= freshnessMs;
+    const commandConsumerReady = () => sessionOnline() &&
+        lastCommandConsumerAt !== null &&
+        now().getTime() - lastCommandConsumerAt <= freshnessMs;
+    const online = commandConsumerReady;
     const pruneTaskWebState = () => {
         const current = now().getTime();
         for (const [key, expiresAt] of taskBootstrap)
@@ -144,9 +152,13 @@ export async function createBrowserRealityBridgeServer(options) {
         const origin = request.headers.origin;
         if (!authorization?.startsWith("Bearer ") ||
             !safeEqual(authorization.slice(7), options.token) ||
-            origin !== expectedOrigin)
+            (origin !== undefined && origin !== expectedOrigin))
             throw new BrowserRealityBridgeError("BRIDGE_AUTH_INVALID", "bridge authentication failed");
     };
+    const requireExtensionOrigin = (request) => {
+        if (request.headers.origin !== expectedOrigin)
+            throw new BrowserRealityBridgeError("BRIDGE_AUTH_INVALID", "bridge extension origin is required");
+    };
     const server = createServer(async (request, response) => {
         try {
             const url = new URL(request.url ?? "/", "http://127.0.0.1");
@@ -189,7 +201,9 @@ export async function createBrowserRealityBridgeServer(options) {
                             approvalApplicationConfigured: true,
                             systemObserver: null,
                             browserCarrier: {
-                                online: session !== undefined && now().getTime() - session.lastHeartbeatAt <= freshnessMs,
+                                online: commandConsumerReady(),
+                                sessionOnline: sessionOnline(),
+                                commandConsumerReady: commandConsumerReady(),
                                 extensionInstanceId: session?.extensionInstanceId ?? null,
                                 queuedCommands: queue.length,
                                 pendingCommands: pending.size,
@@ -236,6 +250,7 @@ export async function createBrowserRealityBridgeServer(options) {
                 return;
             }
             if (request.method === "POST" && url.pathname === "/v1/session/hello") {
+                requireExtensionOrigin(request);
                 const body = await readJson(request);
                 if (!isRecord(body) ||
                     stringField(body, "extensionId") !== options.extensionId)
@@ -245,6 +260,7 @@ export async function createBrowserRealityBridgeServer(options) {
                     lastCommandPollAt = null;
                     lastCommandDeliveredAt = null;
                     lastCommandResultAt = null;
+                    lastCommandConsumerAt = null;
                 }
                 session = {
                     extensionInstanceId,
@@ -254,10 +270,10 @@ export async function createBrowserRealityBridgeServer(options) {
                 return;
             }
             if (request.method === "GET" && url.pathname === "/v1/session/status") {
-                const online = session !== undefined &&
-                    now().getTime() - session.lastHeartbeatAt <= freshnessMs;
                 send(response, 200, {
-                    online,
+                    online: commandConsumerReady(),
+                    sessionOnline: sessionOnline(),
+                    commandConsumerReady: commandConsumerReady(),
                     extensionInstanceId: session?.extensionInstanceId ?? null,
                 });
                 return;
@@ -276,6 +292,7 @@ export async function createBrowserRealityBridgeServer(options) {
             if (request.method === "GET" && url.pathname === "/v1/commands/next") {
                 const stamp = now();
                 session.lastHeartbeatAt = stamp.getTime();
+                lastCommandConsumerAt = stamp.getTime();
                 lastCommandPollAt = stamp.toISOString();
                 const command = queue.shift();
                 if (command) {
@@ -297,7 +314,10 @@ export async function createBrowserRealityBridgeServer(options) {
                     throw new BrowserRealityBridgeError("BRIDGE_INPUT_INVALID", "command result is stale or unknown");
                 pending.delete(commandId);
                 clearTimeout(command.timer);
-                lastCommandResultAt = now().toISOString();
+                const resultStamp = now();
+                session.lastHeartbeatAt = resultStamp.getTime();
+                lastCommandConsumerAt = resultStamp.getTime();
+                lastCommandResultAt = resultStamp.toISOString();
                 if (body.ok === true)
                     command.resolve(body.value);
                 else
@@ -329,12 +349,9 @@ export async function createBrowserRealityBridgeServer(options) {
     if (!address || typeof address === "string")
         throw new Error("bridge address missing");
     endpoint = `http://127.0.0.1:${address.port}`;
-    const online = () => !closed &&
-        session !== undefined &&
-        now().getTime() - session.lastHeartbeatAt <= freshnessMs;
     const requestCommand = (command) => {
         if (!online())
-            return Promise.reject(new BrowserRealityBridgeError("BRIDGE_OFFLINE", "extension heartbeat is not fresh"));
+            return Promise.reject(new BrowserRealityBridgeError("BRIDGE_OFFLINE", "extension command consumer is not ready"));
         const commandId = `browser-command:${idFactory()}`;
         return new Promise((resolve, reject) => {
             const timer = setTimeout(() => {
@@ -406,6 +423,8 @@ export async function createBrowserRealityBridgeServer(options) {
         status() {
             return {
                 online: online(),
+                sessionOnline: sessionOnline(),
+                commandConsumerReady: commandConsumerReady(),
                 extensionInstanceId: session?.extensionInstanceId ?? null,
                 queuedCommands: queue.length,
                 pendingCommands: pending.size,

package/dist/src/pairing.js

@@ -34,9 +34,9 @@ function text(value) {
 }
 function extensionIdentity(request) {
     const origin = request.headers.origin;
-    const match = typeof origin === "string"
-        ? /^chrome-extension:\/\/([a-z]{32})$/.exec(origin)
-        : null;
+    if (origin === undefined)
+        return undefined;
+    const match = /^chrome-extension:\/\/([a-z]{32})$/.exec(origin);
     if (!match)
         throw new Error("PAIRING_AUTH_INVALID");
     return match[1];
@@ -47,7 +47,6 @@ function authenticate(request, token) {
         !safeEqual(authorization.slice(7), token)) {
         throw new Error("PAIRING_AUTH_INVALID");
     }
-    return extensionIdentity(request);
 }
 export async function createBrowserExtensionPairingServer(options) {
     if (options.token.length < 32) {
@@ -75,9 +74,13 @@ export async function createBrowserExtensionPairingServer(options) {
     const server = createServer(async (request, response) => {
         try {
             const originId = extensionIdentity(request);
-            response.setHeader("access-control-allow-origin", `chrome-extension://${originId}`);
-            response.setHeader("vary", "origin");
+            if (originId) {
+                response.setHeader("access-control-allow-origin", `chrome-extension://${originId}`);
+                response.setHeader("vary", "origin");
+            }
             if (request.method === "OPTIONS") {
+                if (!originId)
+                    throw new Error("PAIRING_AUTH_INVALID");
                 response.setHeader("access-control-allow-headers", "authorization, content-type");
                 response.setHeader("access-control-allow-methods", "GET, POST, OPTIONS");
                 response.writeHead(204);
@@ -90,7 +93,7 @@ export async function createBrowserExtensionPairingServer(options) {
                 const body = await readJson(request);
                 const extensionId = text(body.extensionId);
                 const extensionInstanceId = text(body.extensionInstanceId);
-                if (extensionId !== originId)
+                if (!originId || extensionId !== originId)
                     throw new Error("PAIRING_AUTH_INVALID");
                 if (identity && identity.extensionId !== extensionId) {
                     throw new Error("PAIRING_AUTH_INVALID");
@@ -99,7 +102,8 @@ export async function createBrowserExtensionPairingServer(options) {
                 send(response, 200, { accepted: true });
                 return;
             }
-            if (!identity || originId !== identity.extensionId) {
+            if (!identity ||
+                (originId !== undefined && originId !== identity.extensionId)) {
                 throw new Error("PAIRING_AUTH_INVALID");
             }
             if (url.searchParams.get("extensionInstanceId") !==

package/dist/src/runtime-composition.d.ts

@@ -88,6 +88,8 @@ export declare function createBrowserExecutorComposition(options: BrowserExecuto
     bridgeEndpoint: string;
     bridgeStatus: () => {
         online: boolean;
+        sessionOnline: boolean;
+        commandConsumerReady: boolean;
         extensionInstanceId: string | null;
         queuedCommands: number;
         pendingCommands: number;

package/extension/background.ts

@@ -143,6 +143,7 @@ const extensionInstanceId = `extension:${crypto.randomUUID()}`;
 const sessions = new Map<number, ContentObservation>();
 const BROWSER_CARRIER_KEEPALIVE_KEY = "proflowBrowserSnapshot";
 const BROWSER_CARRIER_KEEPALIVE_MS = 20_000;
+const BROWSER_BRIDGE_FETCH_TIMEOUT_MS = 5_000;
 
 const sleep = (milliseconds: number) =>
 	new Promise<void>((resolve) => setTimeout(resolve, milliseconds));
@@ -978,6 +979,7 @@ async function bridgeFetch(
 ): Promise<Response> {
 	return fetch(`${config.endpoint}${path}`, {
 		...init,
+		signal: init.signal ?? AbortSignal.timeout(BROWSER_BRIDGE_FETCH_TIMEOUT_MS),
 		headers: {
 			authorization: `Bearer ${config.token}`,
 			"content-type": "application/json",
@@ -991,7 +993,7 @@ async function runBridgeLoop() {
 	if (bridgeLoopStarted) return;
 	bridgeLoopStarted = true;
 	while (true) {
-		const config = await bridgeConfig();
+		const config = await bridgeConfig().catch(() => null);
 		if (!config) {
 			await sleep(1_000);
 			continue;
@@ -1006,8 +1008,10 @@ async function runBridgeLoop() {
 				}),
 			});
 			if (!hello.ok) throw new Error("BRIDGE_HELLO_REJECTED");
-			let lastHeartbeatAt = 0;
-			let lastExtensionKeepaliveAt = 0;
+			// Hello only establishes a session. The first inner-loop action must be
+			// a real command poll so Runtime readiness cannot be granted by hello alone.
+			let lastHeartbeatAt = Date.now();
+			let lastExtensionKeepaliveAt = Date.now();
 			while (true) {
 				if (
 					Date.now() - lastExtensionKeepaliveAt >=

package/manifest.json

@@ -1,7 +1,7 @@
 {
 	"manifest_version": 3,
 	"name": "ProFlow Execution Browser",
-	"version": "0.1.34",
+	"version": "0.1.36",
 	"permissions": [
 		"tabs",
 		"storage"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tomflow/proflow-execution-browser-extension",
-  "version": "0.1.34",
+  "version": "0.1.36",
   "description": "Execution-owned MV3 Browser executor, evidence provider and browser application surface.",
   "type": "module",
   "publishConfig": {
@@ -31,8 +31,8 @@
     "@tomflow/proflow-module-contract": "^0.1.13"
   },
   "devDependencies": {
-    "@tomflow/proflow-deployment-conformance": "^0.1.13",
-    "@tomflow/proflow-execution-runtime": "^0.1.16"
+    "@tomflow/proflow-execution-runtime": "^0.1.16",
+    "@tomflow/proflow-deployment-conformance": "^0.1.13"
   },
   "keywords": [
     "proflow",

package/proflow.module.json

@@ -3,7 +3,7 @@
 	"contractVersion": "1.0.0",
 	"moduleRef": "execution-browser-extension",
 	"packageName": "@tomflow/proflow-execution-browser-extension",
-	"moduleVersion": "0.1.34",
+	"moduleVersion": "0.1.36",
 	"kind": "browser-extension",
 	"templateVersion": "1.0.0",
 	"platformCompatibility": ">=1.0.0 <2.0.0",