@tomflow/proflow-execution-browser-extension 0.1.39 → 0.1.41

package/CHANGELOG.md

@@ -0,0 +1,13 @@
+# @tomflow/proflow-execution-browser-extension
+
+## 0.1.41
+
+### Patch Changes
+
+- Resume the existing Task Observer after successful Tasks web mutations so READY nodes receive their normal NODE_READY or REOPEN wake without manual recovery.
+
+## 0.1.40
+
+### Patch Changes
+
+- Make the authenticated ProFlow Tasks web app self-contained so its published browser module no longer escapes the `/tasks` session surface through a runtime relative import.

package/dist/deployment/adapter.d.ts

@@ -47,7 +47,7 @@ export declare const behaviorAdapter: {
             ok: true;
             status: "SUCCEEDED";
             moduleRef: "execution-browser-extension";
-            moduleVersion: "0.1.39";
+            moduleVersion: "0.1.41";
             data: {
                 loadDir: string;
             };
@@ -60,7 +60,7 @@ export declare const behaviorAdapter: {
             readonly ok: true;
             readonly status: "SUCCEEDED";
             readonly moduleRef: "execution-browser-extension";
-            readonly moduleVersion: "0.1.39";
+            readonly moduleVersion: "0.1.41";
         };
         observedEffects: never[];
     }>;
@@ -70,7 +70,7 @@ export declare const behaviorAdapter: {
             ok: true;
             status: "SUCCEEDED";
             moduleRef: "execution-browser-extension";
-            moduleVersion: "0.1.39";
+            moduleVersion: "0.1.41";
             data: {
                 setupStatus: "ACTION_REQUIRED" | "READY";
                 runtimeStatus: "NOT_APPLICABLE";
@@ -95,7 +95,7 @@ export declare const behaviorAdapter: {
         result: {
             contract: "deployment.result.v1";
             moduleRef: "execution-browser-extension";
-            moduleVersion: "0.1.39";
+            moduleVersion: "0.1.41";
             ok: false;
             status: "ACTION_REQUIRED";
             data: {
@@ -127,14 +127,14 @@ export declare const behaviorAdapter: {
             readonly ok: true;
             readonly status: "SUCCEEDED";
             readonly moduleRef: "execution-browser-extension";
-            readonly moduleVersion: "0.1.39";
+            readonly moduleVersion: "0.1.41";
         };
         observedEffects: string[];
     } | {
         result: {
             contract: "deployment.result.v1";
             moduleRef: "execution-browser-extension";
-            moduleVersion: "0.1.39";
+            moduleVersion: "0.1.41";
             ok: false;
             status: "FAILED";
             error: {
@@ -167,7 +167,7 @@ export declare const behaviorAdapter: {
             ok: true;
             status: "SUCCEEDED";
             moduleRef: "execution-browser-extension";
-            moduleVersion: "0.1.39";
+            moduleVersion: "0.1.41";
             data: {
                 docs: string;
             };
@@ -180,11 +180,11 @@ export declare const behaviorAdapter: {
             readonly ok: true;
             readonly status: "SUCCEEDED";
             readonly moduleRef: "execution-browser-extension";
-            readonly moduleVersion: "0.1.39";
+            readonly moduleVersion: "0.1.41";
         } | {
             contract: "deployment.result.v1";
             moduleRef: "execution-browser-extension";
-            moduleVersion: "0.1.39";
+            moduleVersion: "0.1.41";
             ok: false;
             status: "FAILED";
             error: {
@@ -201,7 +201,7 @@ export declare const behaviorAdapter: {
             readonly ok: true;
             readonly status: "SUCCEEDED";
             readonly moduleRef: "execution-browser-extension";
-            readonly moduleVersion: "0.1.39";
+            readonly moduleVersion: "0.1.41";
         };
         observedEffects: never[];
     }>;

package/dist/deployment/descriptor.d.ts

@@ -3,7 +3,7 @@ export declare const descriptor: {
     readonly contractVersion: "1.0.0";
     readonly moduleRef: "execution-browser-extension";
     readonly packageName: "@tomflow/proflow-execution-browser-extension";
-    readonly moduleVersion: "0.1.39";
+    readonly moduleVersion: "0.1.41";
     readonly kind: "browser-extension";
     readonly templateVersion: "1.0.0";
     readonly platformCompatibility: ">=1.0.0 <2.0.0";

package/dist/deployment/descriptor.js

@@ -3,7 +3,7 @@ export const descriptor = {
     contractVersion: "1.0.0",
     moduleRef: "execution-browser-extension",
     packageName: "@tomflow/proflow-execution-browser-extension",
-    moduleVersion: "0.1.39",
+    moduleVersion: "0.1.41",
     kind: "browser-extension",
     templateVersion: "1.0.0",
     platformCompatibility: ">=1.0.0 <2.0.0",

package/dist/extension/background.js

@@ -132,6 +132,63 @@ function createCarrierContinuationControl(initial) {
   });
 }
 
+// packages/execution-browser-extension/src/carrier-identity.ts
+function canonicalRoleRef(segment) {
+  if (!/^g-[A-Za-z0-9_-]+$/.test(segment)) return null;
+  return /^(g-[A-Za-z0-9_-]{32})(?:-.+)?$/.exec(segment)?.[1] ?? segment;
+}
+function parseChatGptCarrierIdentity(raw) {
+  let url2;
+  try {
+    url2 = new URL(raw);
+  } catch {
+    return null;
+  }
+  if (url2.protocol !== "https:" || url2.hostname !== "chatgpt.com") return null;
+  const segments = url2.pathname.split("/").filter(Boolean);
+  if (segments[0] !== "g" || !segments[1]) return null;
+  const roleRef = canonicalRoleRef(segments[1]);
+  if (!roleRef) return null;
+  if (segments.length === 2) return { roleRef, workerRef: null };
+  if (segments.length !== 4 || segments[2] !== "c" || !segments[3] || segments[3].length > 512 || !/^[A-Za-z0-9_-]+$/.test(segments[3]))
+    return null;
+  return { roleRef, workerRef: segments[3] };
+}
+function sameChatGptCarrierTarget(left, right) {
+  const leftIdentity = parseChatGptCarrierIdentity(left);
+  const rightIdentity = parseChatGptCarrierIdentity(right);
+  if (leftIdentity && rightIdentity)
+    return leftIdentity.roleRef === rightIdentity.roleRef && leftIdentity.workerRef === rightIdentity.workerRef;
+  try {
+    return new URL(left).href === new URL(right).href;
+  } catch {
+    return false;
+  }
+}
+function createBrowserOpenObservationGate() {
+  let receiptGeneration = 0;
+  const receipts = /* @__PURE__ */ new Map();
+  return Object.freeze({
+    beginOpen(requestedUrl) {
+      return Object.freeze({ requestedUrl, receiptGeneration });
+    },
+    recordReceipt(observation) {
+      receiptGeneration += 1;
+      receipts.set(
+        observation.tabId,
+        Object.freeze({
+          url: observation.url,
+          receiptGeneration
+        })
+      );
+    },
+    accepts(tabId, boundary) {
+      const receipt = receipts.get(tabId);
+      return receipt !== void 0 && receipt.receiptGeneration > boundary.receiptGeneration && sameChatGptCarrierTarget(boundary.requestedUrl, receipt.url);
+    }
+  });
+}
+
 // packages/execution-browser-extension/src/carrier-permission-attempt.ts
 function parsedAttempts(value) {
   const result = /* @__PURE__ */ new Map();
@@ -14118,6 +14175,7 @@ function createTaskObserver(options) {
 // packages/execution-browser-extension/extension/background.ts
 var extensionInstanceId = `extension:${crypto.randomUUID()}`;
 var sessions = /* @__PURE__ */ new Map();
+var browserOpenObservationGate = createBrowserOpenObservationGate();
 var permissionHandling = /* @__PURE__ */ new Map();
 var permissionAutoAttempts = createCarrierPermissionAttemptRegistry();
 var carrierAttentions = createCarrierAttentionRegistry();
@@ -14595,27 +14653,13 @@ async function contentCommand(tabId, command) {
   }
   return response.value;
 }
-function carrierIdentity(url2) {
-  try {
-    const parsed = new URL(url2);
-    const segments = parsed.pathname.split("/").filter(Boolean);
-    if (parsed.protocol !== "https:" || parsed.hostname !== "chatgpt.com" || segments[0] !== "g" || !segments[1]?.startsWith("g-"))
-      return null;
-    return {
-      roleRef: segments[1],
-      workerRef: segments[2] === "c" && segments[3] ? segments[3] : null
-    };
-  } catch {
-    return null;
-  }
-}
 function permissionAttemptKey(observed) {
   return observed.blockerFacts ? `${observed.url}:${observed.blockerFacts.fingerprint}` : null;
 }
 function setCarrierAttention(observed, reason) {
   const facts = observed.blockerFacts;
   if (!facts) return;
-  const identity = carrierIdentity(observed.url);
+  const identity = parseChatGptCarrierIdentity(observed.url);
   carrierAttentions.derive({
     tabId: observed.tabId,
     contentInstanceId: observed.contentInstanceId,
@@ -14737,7 +14781,7 @@ async function handleActionPermission(observed) {
     return;
   permissionHandling.set(observed.tabId, key);
   try {
-    const identity = carrierIdentity(observed.url);
+    const identity = parseChatGptCarrierIdentity(observed.url);
     const humanDenied = () => carrierContinuationControl.hasMatchingPermissionDenial({
       tabId: observed.tabId,
       contentInstanceId: observed.contentInstanceId,
@@ -14829,6 +14873,7 @@ function handleCarrierBlocker(observed) {
 function processContentObservation(observed, triggerRecovery) {
   const previous = sessions.get(observed.tabId);
   sessions.set(observed.tabId, observed);
+  browserOpenObservationGate.recordReceipt(observed);
   permissionAutoAttempts.observe(
     observed.tabId,
     permissionAttemptKey(observed)
@@ -14954,6 +14999,10 @@ function text(value, name) {
   return value;
 }
 async function executeCommand(command) {
+  if (command.type === "TASK_OBSERVER_RECOVER") {
+    void runObserverRecovery();
+    return { scheduled: true };
+  }
   if (command.type === "CARRIER_ATTENTION_ACTION") {
     if (command.action !== "allowOnce" && command.action !== "deny")
       throw new Error("ATTENTION_ACTION_INVALID");
@@ -14971,8 +15020,13 @@ async function executeCommand(command) {
     const parsed = new URL(url2);
     if (parsed.protocol !== "https:" || parsed.hostname !== "chatgpt.com")
       throw new Error("URL_SCOPE_DENIED");
+    const boundary = browserOpenObservationGate.beginOpen(url2);
     const tab = await chrome.tabs.create({ url: url2, active: true });
-    return waitForObservation(numeric(tab.id, "TAB_ID"));
+    const tabId2 = numeric(tab.id, "TAB_ID");
+    return waitForObservation(
+      tabId2,
+      () => browserOpenObservationGate.accepts(tabId2, boundary)
+    );
   }
   const tabId = numeric(command.tabId, "TAB_ID");
   if (command.type === "OBSERVE")

package/dist/extension/tasks.js

@@ -1,4 +1,60 @@
-import { parseCarrierAttentionViews } from "../src/carrier-attention-view.js";
+// The loopback Tasks surface publishes this entry as one authenticated
+// `/tasks/app.js` module. A runtime relative import would escape `/tasks`, so keep
+// the bounded parser local while sharing only the erased TypeScript type above.
+function nullableString(value) {
+    return value === null || typeof value === "string";
+}
+function parseCarrierAttentionView(value) {
+    if (typeof value !== "object" || value === null || Array.isArray(value))
+        return null;
+    const attentionRef = Reflect.get(value, "attentionRef");
+    const occurrenceRef = Reflect.get(value, "occurrenceRef");
+    const taskId = Reflect.get(value, "taskId");
+    const roleRef = Reflect.get(value, "roleRef");
+    const workerRef = Reflect.get(value, "workerRef");
+    const targetHost = Reflect.get(value, "targetHost");
+    const operationId = Reflect.get(value, "operationId");
+    const reason = Reflect.get(value, "reason");
+    const actions = Reflect.get(value, "actions");
+    const observedAt = Reflect.get(value, "observedAt");
+    if (typeof attentionRef !== "string" ||
+        attentionRef.length === 0 ||
+        typeof occurrenceRef !== "string" ||
+        occurrenceRef.length === 0 ||
+        !nullableString(taskId) ||
+        !nullableString(roleRef) ||
+        !nullableString(workerRef) ||
+        !nullableString(targetHost) ||
+        typeof operationId !== "string" ||
+        operationId.length === 0 ||
+        typeof reason !== "string" ||
+        reason.length === 0 ||
+        !Array.isArray(actions) ||
+        actions.some((action) => action !== "allowOnce" && action !== "deny") ||
+        typeof observedAt !== "string" ||
+        observedAt.length === 0)
+        return null;
+    return {
+        attentionRef,
+        occurrenceRef,
+        taskId,
+        roleRef,
+        workerRef,
+        targetHost,
+        operationId,
+        reason,
+        actions: [...actions],
+        observedAt,
+    };
+}
+function parseCarrierAttentionViews(value) {
+    if (!Array.isArray(value))
+        return [];
+    return value
+        .slice(0, 128)
+        .map(parseCarrierAttentionView)
+        .filter((item) => item !== null);
+}
 const extensionRuntime = typeof chrome === "undefined" ? null : chrome.runtime;
 function element(selector) {
     const value = document.querySelector(selector);
@@ -356,3 +412,4 @@ void run(refreshBrowserStatus);
 setInterval(() => {
     void run(refreshBrowserStatus);
 }, 5_000);
+export {};

package/dist/src/bridge.js

@@ -1,6 +1,12 @@
 import { randomUUID, timingSafeEqual } from "node:crypto";
 import { createServer, } from "node:http";
 import { parseCarrierAttentionViews, } from "./carrier-attention-view.js";
+const taskWebObserverRecoveryOperations = new Set([
+    "task.create",
+    "task.start",
+    "task.ensureWorkers",
+    "node.reopen",
+]);
 export class BrowserRealityBridgeError extends Error {
     code;
     constructor(code, message) {
@@ -257,9 +263,18 @@ export async function createBrowserRealityBridgeServer(options) {
                         typeof body.operation !== "string" ||
                         !isRecord(body.input))
                         throw new BrowserRealityBridgeError("BRIDGE_INPUT_INVALID", "task web request is invalid");
-                    const value = url.pathname.endsWith("/task")
+                    const taskRequest = url.pathname.endsWith("/task");
+                    const value = taskRequest
                         ? await options.taskWeb.invokeTask(body.operation, body.input)
                         : await options.taskWeb.invokeApproval(body.operation, body.input);
+                    if (taskRequest &&
+                        taskWebObserverRecoveryOperations.has(body.operation) &&
+                        commandConsumerReady()) {
+                        // The Task mutation is already durable and must not be coupled to
+                        // transient Browser delivery. Notify the Extension asynchronously so
+                        // its existing Task Observer can derive the next NODE_READY/REOPEN wake.
+                        void requestCommand({ type: "TASK_OBSERVER_RECOVER" }).catch(() => undefined);
+                    }
                     send(response, 200, { ok: true, value });
                     return;
                 }

package/dist/src/carrier-identity.d.ts

@@ -0,0 +1,21 @@
+export type ChatGptCarrierIdentity = {
+    roleRef: string;
+    workerRef: string | null;
+};
+export declare function parseChatGptCarrierIdentity(raw: string): ChatGptCarrierIdentity | null;
+export declare function sameChatGptCarrierTarget(left: string, right: string): boolean;
+type BrowserOpenBoundary = Readonly<{
+    requestedUrl: string;
+    receiptGeneration: number;
+}>;
+type BrowserObservationReceipt = Readonly<{
+    tabId: number;
+    url: string;
+    observedAt: string;
+}>;
+export declare function createBrowserOpenObservationGate(): Readonly<{
+    beginOpen(requestedUrl: string): BrowserOpenBoundary;
+    recordReceipt(observation: BrowserObservationReceipt): void;
+    accepts(tabId: number, boundary: BrowserOpenBoundary): boolean;
+}>;
+export {};

package/dist/src/carrier-identity.js

@@ -0,0 +1,68 @@
+function canonicalRoleRef(segment) {
+    if (!/^g-[A-Za-z0-9_-]+$/.test(segment))
+        return null;
+    // ChatGPT may decorate a real 32-character GPT id with a readable slug.
+    // Preserve short synthetic refs used by tests while normalizing real URLs.
+    return /^(g-[A-Za-z0-9_-]{32})(?:-.+)?$/.exec(segment)?.[1] ?? segment;
+}
+export function parseChatGptCarrierIdentity(raw) {
+    let url;
+    try {
+        url = new URL(raw);
+    }
+    catch {
+        return null;
+    }
+    if (url.protocol !== "https:" || url.hostname !== "chatgpt.com")
+        return null;
+    const segments = url.pathname.split("/").filter(Boolean);
+    if (segments[0] !== "g" || !segments[1])
+        return null;
+    const roleRef = canonicalRoleRef(segments[1]);
+    if (!roleRef)
+        return null;
+    if (segments.length === 2)
+        return { roleRef, workerRef: null };
+    if (segments.length !== 4 ||
+        segments[2] !== "c" ||
+        !segments[3] ||
+        segments[3].length > 512 ||
+        !/^[A-Za-z0-9_-]+$/.test(segments[3]))
+        return null;
+    return { roleRef, workerRef: segments[3] };
+}
+export function sameChatGptCarrierTarget(left, right) {
+    const leftIdentity = parseChatGptCarrierIdentity(left);
+    const rightIdentity = parseChatGptCarrierIdentity(right);
+    if (leftIdentity && rightIdentity)
+        return (leftIdentity.roleRef === rightIdentity.roleRef &&
+            leftIdentity.workerRef === rightIdentity.workerRef);
+    try {
+        return new URL(left).href === new URL(right).href;
+    }
+    catch {
+        return false;
+    }
+}
+export function createBrowserOpenObservationGate() {
+    let receiptGeneration = 0;
+    const receipts = new Map();
+    return Object.freeze({
+        beginOpen(requestedUrl) {
+            return Object.freeze({ requestedUrl, receiptGeneration });
+        },
+        recordReceipt(observation) {
+            receiptGeneration += 1;
+            receipts.set(observation.tabId, Object.freeze({
+                url: observation.url,
+                receiptGeneration,
+            }));
+        },
+        accepts(tabId, boundary) {
+            const receipt = receipts.get(tabId);
+            return (receipt !== undefined &&
+                receipt.receiptGeneration > boundary.receiptGeneration &&
+                sameChatGptCarrierTarget(boundary.requestedUrl, receipt.url));
+        },
+    });
+}

package/dist/src/index.js

@@ -1,5 +1,6 @@
 import { randomUUID } from "node:crypto";
 import { browserCapabilityIds, executeCapabilityRequestSchema, } from "@tomflow/proflow-execution-contracts";
+import { parseChatGptCarrierIdentity } from "./carrier-identity.js";
 import { deferVisionObservation, isVisionObservationVerified, parseCapturedScreenshot, } from "./vision.js";
 export { BrowserRealityBridgeError, createBrowserRealityBridgeServer, } from "./bridge.js";
 export { createCollaborationCarrierApplication, } from "./collaboration-carrier.js";
@@ -24,27 +25,10 @@ const workerWakeTriggerTypes = new Set([
     "RECOVERY_RESUME",
 ]);
 function parseCarrierIdentity(raw) {
-    let url;
-    try {
-        url = new URL(raw);
-    }
-    catch {
-        throw new ExecutionBrowserError("PRECONDITION_FAILED", "CARRIER_URL_INVALID");
-    }
-    if (url.protocol !== "https:" || url.hostname !== "chatgpt.com")
+    const identity = parseChatGptCarrierIdentity(raw);
+    if (!identity)
         throw new ExecutionBrowserError("PRECONDITION_FAILED", "CARRIER_URL_INVALID");
-    const segments = url.pathname.split("/").filter(Boolean);
-    if (segments[0] !== "g" || !segments[1]?.startsWith("g-"))
-        throw new ExecutionBrowserError("PRECONDITION_FAILED", "ROLE_URL_INVALID");
-    if (segments.length === 2)
-        return { roleRef: segments[1], workerRef: null };
-    if (segments[2] !== "c" ||
-        !segments[3] ||
-        segments[3].length > 512 ||
-        !/^[A-Za-z0-9_-]+$/.test(segments[3]) ||
-        segments.length !== 4)
-        throw new ExecutionBrowserError("PRECONDITION_FAILED", "WORKER_URL_INVALID");
-    return { roleRef: segments[1], workerRef: segments[3] };
+    return identity;
 }
 function browserEvidence(idFactory, observation, verified) {
     return {
@@ -239,6 +223,10 @@ export function createExecutionBrowserExtension(options) {
                     roleIdentity.workerRef)
                     throw new ExecutionBrowserError("PRECONDITION_FAILED", "ROLE_URL_MISMATCH");
                 const opened = await options.browser.open(request.input.roleUrl);
+                const openedIdentity = parseCarrierIdentity(opened.url);
+                if (openedIdentity.roleRef !== request.input.roleRef ||
+                    openedIdentity.workerRef !== null)
+                    throw new ExecutionBrowserError("PRECONDITION_FAILED", "OPENED_ROLE_IDENTITY_MISMATCH");
                 const precondition = await effectStarted(raw);
                 const submitted = await options.browser.submit(opened.tabId, `WORKER_BIND ${request.input.bootstrapFingerprint}`, request.input.bootstrapFingerprint);
                 if (!(await options.browser.hasMessage(submitted.tabId, request.input.bootstrapFingerprint)))

package/extension/background.ts

@@ -3,6 +3,10 @@ import {
 	type CarrierContinuationDenial,
 	createCarrierContinuationControl,
 } from "../src/carrier-continuation-control.js";
+import {
+	createBrowserOpenObservationGate,
+	parseChatGptCarrierIdentity,
+} from "../src/carrier-identity.js";
 import type {
 	ActionPermissionFacts,
 	PermissionSemanticAction,
@@ -72,7 +76,8 @@ type BridgeCommand = {
 		| "VERIFY"
 		| "SCREENSHOT"
 		| "PERFORM"
-		| "CARRIER_ATTENTION_ACTION";
+		| "CARRIER_ATTENTION_ACTION"
+		| "TASK_OBSERVER_RECOVER";
 	tabId?: number;
 	url?: string;
 	text?: string;
@@ -176,6 +181,7 @@ declare const chrome: ChromeRuntime;
 
 const extensionInstanceId = `extension:${crypto.randomUUID()}`;
 const sessions = new Map<number, ContentObservation>();
+const browserOpenObservationGate = createBrowserOpenObservationGate();
 const permissionHandling = new Map<number, string>();
 const permissionAutoAttempts = createCarrierPermissionAttemptRegistry();
 const carrierAttentions = createCarrierAttentionRegistry();
@@ -839,28 +845,6 @@ async function contentCommand(
 	return response.value;
 }
 
-function carrierIdentity(
-	url: string,
-): { roleRef: string; workerRef: string | null } | null {
-	try {
-		const parsed = new URL(url);
-		const segments = parsed.pathname.split("/").filter(Boolean);
-		if (
-			parsed.protocol !== "https:" ||
-			parsed.hostname !== "chatgpt.com" ||
-			segments[0] !== "g" ||
-			!segments[1]?.startsWith("g-")
-		)
-			return null;
-		return {
-			roleRef: segments[1],
-			workerRef: segments[2] === "c" && segments[3] ? segments[3] : null,
-		};
-	} catch {
-		return null;
-	}
-}
-
 function permissionAttemptKey(observed: ContentObservation): string | null {
 	return observed.blockerFacts
 		? `${observed.url}:${observed.blockerFacts.fingerprint}`
@@ -873,7 +857,7 @@ function setCarrierAttention(
 ): void {
 	const facts = observed.blockerFacts;
 	if (!facts) return;
-	const identity = carrierIdentity(observed.url);
+	const identity = parseChatGptCarrierIdentity(observed.url);
 	carrierAttentions.derive({
 		tabId: observed.tabId,
 		contentInstanceId: observed.contentInstanceId,
@@ -1049,7 +1033,7 @@ async function handleActionPermission(
 		return;
 	permissionHandling.set(observed.tabId, key);
 	try {
-		const identity = carrierIdentity(observed.url);
+		const identity = parseChatGptCarrierIdentity(observed.url);
 		const humanDenied = () =>
 			carrierContinuationControl.hasMatchingPermissionDenial({
 				tabId: observed.tabId,
@@ -1166,6 +1150,7 @@ function processContentObservation(
 ): void {
 	const previous = sessions.get(observed.tabId);
 	sessions.set(observed.tabId, observed);
+	browserOpenObservationGate.recordReceipt(observed);
 	permissionAutoAttempts.observe(
 		observed.tabId,
 		permissionAttemptKey(observed),
@@ -1328,6 +1313,10 @@ function text(value: unknown, name: string): string {
 }
 
 async function executeCommand(command: BridgeCommand): Promise<unknown> {
+	if (command.type === "TASK_OBSERVER_RECOVER") {
+		void runObserverRecovery();
+		return { scheduled: true };
+	}
 	if (command.type === "CARRIER_ATTENTION_ACTION") {
 		if (command.action !== "allowOnce" && command.action !== "deny")
 			throw new Error("ATTENTION_ACTION_INVALID");
@@ -1349,8 +1338,12 @@ async function executeCommand(command: BridgeCommand): Promise<unknown> {
 		const parsed = new URL(url);
 		if (parsed.protocol !== "https:" || parsed.hostname !== "chatgpt.com")
 			throw new Error("URL_SCOPE_DENIED");
+		const boundary = browserOpenObservationGate.beginOpen(url);
 		const tab = await chrome.tabs.create({ url, active: true });
-		return waitForObservation(numeric(tab.id, "TAB_ID"));
+		const tabId = numeric(tab.id, "TAB_ID");
+		return waitForObservation(tabId, () =>
+			browserOpenObservationGate.accepts(tabId, boundary),
+		);
 	}
 	const tabId = numeric(command.tabId, "TAB_ID");
 	if (command.type === "OBSERVE")

package/extension/tasks.ts

@@ -1,4 +1,67 @@
-import { parseCarrierAttentionViews } from "../src/carrier-attention-view.js";
+import type { CarrierAttentionView } from "../src/carrier-attention-view.js";
+
+// The loopback Tasks surface publishes this entry as one authenticated
+// `/tasks/app.js` module. A runtime relative import would escape `/tasks`, so keep
+// the bounded parser local while sharing only the erased TypeScript type above.
+function nullableString(value: unknown): value is string | null {
+	return value === null || typeof value === "string";
+}
+
+function parseCarrierAttentionView(
+	value: unknown,
+): CarrierAttentionView | null {
+	if (typeof value !== "object" || value === null || Array.isArray(value))
+		return null;
+	const attentionRef = Reflect.get(value, "attentionRef");
+	const occurrenceRef = Reflect.get(value, "occurrenceRef");
+	const taskId = Reflect.get(value, "taskId");
+	const roleRef = Reflect.get(value, "roleRef");
+	const workerRef = Reflect.get(value, "workerRef");
+	const targetHost = Reflect.get(value, "targetHost");
+	const operationId = Reflect.get(value, "operationId");
+	const reason = Reflect.get(value, "reason");
+	const actions = Reflect.get(value, "actions");
+	const observedAt = Reflect.get(value, "observedAt");
+	if (
+		typeof attentionRef !== "string" ||
+		attentionRef.length === 0 ||
+		typeof occurrenceRef !== "string" ||
+		occurrenceRef.length === 0 ||
+		!nullableString(taskId) ||
+		!nullableString(roleRef) ||
+		!nullableString(workerRef) ||
+		!nullableString(targetHost) ||
+		typeof operationId !== "string" ||
+		operationId.length === 0 ||
+		typeof reason !== "string" ||
+		reason.length === 0 ||
+		!Array.isArray(actions) ||
+		actions.some((action) => action !== "allowOnce" && action !== "deny") ||
+		typeof observedAt !== "string" ||
+		observedAt.length === 0
+	)
+		return null;
+	return {
+		attentionRef,
+		occurrenceRef,
+		taskId,
+		roleRef,
+		workerRef,
+		targetHost,
+		operationId,
+		reason,
+		actions: [...actions],
+		observedAt,
+	};
+}
+
+function parseCarrierAttentionViews(value: unknown): CarrierAttentionView[] {
+	if (!Array.isArray(value)) return [];
+	return value
+		.slice(0, 128)
+		.map(parseCarrierAttentionView)
+		.filter((item): item is CarrierAttentionView => item !== null);
+}
 
 type ChromePanel = {
 	runtime: { sendMessage(message: unknown): Promise<unknown> };

package/manifest.json

@@ -1,7 +1,7 @@
 {
 	"manifest_version": 3,
 	"name": "ProFlow Execution Browser",
-	"version": "0.1.39",
+	"version": "0.1.41",
 	"permissions": [
 		"tabs",
 		"storage"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tomflow/proflow-execution-browser-extension",
-  "version": "0.1.39",
+  "version": "0.1.41",
   "description": "Execution-owned MV3 Browser executor, evidence provider and browser application surface.",
   "type": "module",
   "publishConfig": {

package/proflow.module.json

@@ -3,7 +3,7 @@
 	"contractVersion": "1.0.0",
 	"moduleRef": "execution-browser-extension",
 	"packageName": "@tomflow/proflow-execution-browser-extension",
-	"moduleVersion": "0.1.39",
+	"moduleVersion": "0.1.41",
 	"kind": "browser-extension",
 	"templateVersion": "1.0.0",
 	"platformCompatibility": ">=1.0.0 <2.0.0",