@tomflow/proflow-execution-browser-extension 0.1.40 → 0.1.42

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # @tomflow/proflow-execution-browser-extension
 
+## 0.1.42
+
+### Patch Changes
+
+- Close Real-3 node generation identity fencing across Platform Host admission, durable Execution idempotency, and Observer/Approval resume provenance.
+
+## 0.1.41
+
+### Patch Changes
+
+- Resume the existing Task Observer after successful Tasks web mutations so READY nodes receive their normal NODE_READY or REOPEN wake without manual recovery.
+
 ## 0.1.40
 
 ### Patch Changes

package/dist/deployment/adapter.d.ts

@@ -47,7 +47,7 @@ export declare const behaviorAdapter: {
             ok: true;
             status: "SUCCEEDED";
             moduleRef: "execution-browser-extension";
-            moduleVersion: "0.1.40";
+            moduleVersion: "0.1.42";
             data: {
                 loadDir: string;
             };
@@ -60,7 +60,7 @@ export declare const behaviorAdapter: {
             readonly ok: true;
             readonly status: "SUCCEEDED";
             readonly moduleRef: "execution-browser-extension";
-            readonly moduleVersion: "0.1.40";
+            readonly moduleVersion: "0.1.42";
         };
         observedEffects: never[];
     }>;
@@ -70,7 +70,7 @@ export declare const behaviorAdapter: {
             ok: true;
             status: "SUCCEEDED";
             moduleRef: "execution-browser-extension";
-            moduleVersion: "0.1.40";
+            moduleVersion: "0.1.42";
             data: {
                 setupStatus: "ACTION_REQUIRED" | "READY";
                 runtimeStatus: "NOT_APPLICABLE";
@@ -95,7 +95,7 @@ export declare const behaviorAdapter: {
         result: {
             contract: "deployment.result.v1";
             moduleRef: "execution-browser-extension";
-            moduleVersion: "0.1.40";
+            moduleVersion: "0.1.42";
             ok: false;
             status: "ACTION_REQUIRED";
             data: {
@@ -127,14 +127,14 @@ export declare const behaviorAdapter: {
             readonly ok: true;
             readonly status: "SUCCEEDED";
             readonly moduleRef: "execution-browser-extension";
-            readonly moduleVersion: "0.1.40";
+            readonly moduleVersion: "0.1.42";
         };
         observedEffects: string[];
     } | {
         result: {
             contract: "deployment.result.v1";
             moduleRef: "execution-browser-extension";
-            moduleVersion: "0.1.40";
+            moduleVersion: "0.1.42";
             ok: false;
             status: "FAILED";
             error: {
@@ -167,7 +167,7 @@ export declare const behaviorAdapter: {
             ok: true;
             status: "SUCCEEDED";
             moduleRef: "execution-browser-extension";
-            moduleVersion: "0.1.40";
+            moduleVersion: "0.1.42";
             data: {
                 docs: string;
             };
@@ -180,11 +180,11 @@ export declare const behaviorAdapter: {
             readonly ok: true;
             readonly status: "SUCCEEDED";
             readonly moduleRef: "execution-browser-extension";
-            readonly moduleVersion: "0.1.40";
+            readonly moduleVersion: "0.1.42";
         } | {
             contract: "deployment.result.v1";
             moduleRef: "execution-browser-extension";
-            moduleVersion: "0.1.40";
+            moduleVersion: "0.1.42";
             ok: false;
             status: "FAILED";
             error: {
@@ -201,7 +201,7 @@ export declare const behaviorAdapter: {
             readonly ok: true;
             readonly status: "SUCCEEDED";
             readonly moduleRef: "execution-browser-extension";
-            readonly moduleVersion: "0.1.40";
+            readonly moduleVersion: "0.1.42";
         };
         observedEffects: never[];
     }>;

package/dist/deployment/descriptor.d.ts

@@ -3,7 +3,7 @@ export declare const descriptor: {
     readonly contractVersion: "1.0.0";
     readonly moduleRef: "execution-browser-extension";
     readonly packageName: "@tomflow/proflow-execution-browser-extension";
-    readonly moduleVersion: "0.1.40";
+    readonly moduleVersion: "0.1.42";
     readonly kind: "browser-extension";
     readonly templateVersion: "1.0.0";
     readonly platformCompatibility: ">=1.0.0 <2.0.0";

package/dist/deployment/descriptor.js

@@ -3,7 +3,7 @@ export const descriptor = {
     contractVersion: "1.0.0",
     moduleRef: "execution-browser-extension",
     packageName: "@tomflow/proflow-execution-browser-extension",
-    moduleVersion: "0.1.40",
+    moduleVersion: "0.1.42",
     kind: "browser-extension",
     templateVersion: "1.0.0",
     platformCompatibility: ">=1.0.0 <2.0.0",

package/dist/extension/background.js

@@ -14090,6 +14090,8 @@ var NODE_READY_TRIGGER = "NODE_READY";
 var REOPEN_TRIGGER = "REOPEN";
 function createTaskObserver(options) {
   const advance = async (taskId, resumeSignal, anomalySignal) => {
+    if (resumeSignal && (typeof resumeSignal.nodeId !== "string" || resumeSignal.nodeId.length === 0 || !Number.isInteger(resumeSignal.runNo) || resumeSignal.runNo <= 0))
+      return { kind: "NOOP", taskId, reason: "RESUME_GENERATION_REQUIRED" };
     const projection = await options.owner.getTaskDriveProjection(taskId);
     if (projection.terminal || projection.currentNode === null)
       return { kind: "STOP_DRIVING", taskId, reason: "TERMINAL" };
@@ -14119,9 +14121,11 @@ function createTaskObserver(options) {
       };
     }
     const binding = projection.roleBinding;
-    if (!projection.canDrive || !binding?.workerRef || !binding.conversationLocator)
+    if (!binding?.workerRef || !binding.conversationLocator || binding.agentPackageRef !== node.requiredAgentPackageRef)
       return { kind: "NOOP", taskId, reason: "BINDING_NOT_READY" };
     if (node.status === "READY") {
+      if (!projection.canDrive)
+        return { kind: "NOOP", taskId, reason: "BINDING_NOT_READY" };
       return {
         kind: "WAKE",
         taskId,
@@ -14134,6 +14138,14 @@ function createTaskObserver(options) {
       };
     }
     if (resumeSignal) {
+      if (projection.taskStatus !== "ACTIVE" || node.status !== "IN_PROGRESS")
+        return { kind: "NOOP", taskId, reason: "BINDING_NOT_READY" };
+      if (resumeSignal.nodeId !== node.nodeId || resumeSignal.runNo !== node.runNo)
+        return {
+          kind: "NOOP",
+          taskId,
+          reason: "RESUME_GENERATION_MISMATCH"
+        };
       if (resumeSignal.targetWorkerRef !== binding.workerRef)
         return {
           kind: "NOOP",
@@ -14445,6 +14457,20 @@ var taskObserver = createTaskObserver({
     }
   }
 });
+async function resumeAfterApprovalDecision(approvalRef) {
+  const context = await invokeObserverApplication("approval.executionContext", {
+    approvalRef
+  });
+  if (!isRecord(context) || typeof context.executionRef !== "string" || typeof context.taskId !== "string" || typeof context.nodeId !== "string" || !Number.isInteger(context.runNo) || Number(context.runNo) <= 0 || typeof context.roleRef !== "string" || typeof context.workerRef !== "string")
+    throw new Error("APPROVAL_EXECUTION_GENERATION_REQUIRED");
+  return taskObserver.drive(context.taskId, {
+    trigger: "RECOVERY_RESUME",
+    ref: approvalRef,
+    targetWorkerRef: context.workerRef,
+    nodeId: context.nodeId,
+    runNo: Number(context.runNo)
+  });
+}
 var collaborationCarrier = createCollaborationCarrierApplication({
   task: {
     async getWorkerBinding(taskId, roleRef) {
@@ -14558,18 +14584,31 @@ function runObserverRecovery() {
             (denial) => denial.taskId === candidate.taskId && denial.workerRef === candidate.workerRef
           ))
             continue;
-          const decision = candidate.kind === "RECOVERY_RESUME" ? await taskObserver.drive(candidate.taskId, {
-            trigger: "RECOVERY_RESUME",
-            ref: candidate.executionRef,
-            targetWorkerRef: candidate.workerRef
-          }) : candidate.kind === "UNKNOWN_REALITY" ? await taskObserver.drive(candidate.taskId, void 0, {
-            kind: "UNKNOWN_REALITY",
-            ref: candidate.executionRef,
-            facts: {
-              executionRef: candidate.executionRef,
-              summary: `Execution ${candidate.executionRef} recovery remains UNKNOWN`
+          let decision;
+          if (candidate.kind === "RECOVERY_RESUME") {
+            if (typeof candidate.nodeId !== "string" || typeof candidate.runNo !== "number") {
+              await invokeObserverApplication("execution.ackSignal", {
+                signalRef: candidate.signalRef
+              });
+              continue;
             }
-          }) : null;
+            decision = await taskObserver.drive(candidate.taskId, {
+              trigger: "RECOVERY_RESUME",
+              ref: candidate.executionRef,
+              targetWorkerRef: candidate.workerRef,
+              nodeId: candidate.nodeId,
+              runNo: candidate.runNo
+            });
+          } else if (candidate.kind === "UNKNOWN_REALITY")
+            decision = await taskObserver.drive(candidate.taskId, void 0, {
+              kind: "UNKNOWN_REALITY",
+              ref: candidate.executionRef,
+              facts: {
+                executionRef: candidate.executionRef,
+                summary: `Execution ${candidate.executionRef} recovery remains UNKNOWN`
+              }
+            });
+          else decision = null;
           if (!decision) continue;
           if (decision.kind === "NOOP" && (decision.reason === "BINDING_NOT_READY" || decision.reason === "RESUME_TARGET_NOT_CURRENT_WORKER" || decision.reason === "DIAGNOSTIC_UNAVAILABLE" || decision.reason.startsWith("DIAGNOSTIC_DEFERRED:")))
             continue;
@@ -14999,6 +15038,10 @@ function text(value, name) {
   return value;
 }
 async function executeCommand(command) {
+  if (command.type === "TASK_OBSERVER_RECOVER") {
+    void runObserverRecovery();
+    return { scheduled: true };
+  }
   if (command.type === "CARRIER_ATTENTION_ACTION") {
     if (command.action !== "allowOnce" && command.action !== "deny")
       throw new Error("ATTENTION_ACTION_INVALID");
@@ -15458,12 +15501,10 @@ chrome.runtime.onMessage.addListener((message, sender, sendResponse) => {
     }
     void invokeApprovalApplication(message.operation, message.input).then(
       (value) => {
-        if ((message.operation === "approval.allow" || message.operation === "approval.deny" || message.operation === "approval.revoke") && isRecord(value) && typeof value.approvalRef === "string" && typeof value.taskId === "string" && typeof value.workerRef === "string")
-          void taskObserver.drive(value.taskId, {
-            trigger: "RECOVERY_RESUME",
-            ref: value.approvalRef,
-            targetWorkerRef: value.workerRef
-          }).catch(() => void 0);
+        if ((message.operation === "approval.allow" || message.operation === "approval.deny" || message.operation === "approval.revoke") && isRecord(value) && typeof value.approvalRef === "string")
+          void resumeAfterApprovalDecision(value.approvalRef).catch(
+            () => void 0
+          );
         sendResponse({ ok: true, value });
       },
       (error46) => sendResponse({

package/dist/src/bridge.js

@@ -1,6 +1,12 @@
 import { randomUUID, timingSafeEqual } from "node:crypto";
 import { createServer, } from "node:http";
 import { parseCarrierAttentionViews, } from "./carrier-attention-view.js";
+const taskWebObserverRecoveryOperations = new Set([
+    "task.create",
+    "task.start",
+    "task.ensureWorkers",
+    "node.reopen",
+]);
 export class BrowserRealityBridgeError extends Error {
     code;
     constructor(code, message) {
@@ -257,9 +263,18 @@ export async function createBrowserRealityBridgeServer(options) {
                         typeof body.operation !== "string" ||
                         !isRecord(body.input))
                         throw new BrowserRealityBridgeError("BRIDGE_INPUT_INVALID", "task web request is invalid");
-                    const value = url.pathname.endsWith("/task")
+                    const taskRequest = url.pathname.endsWith("/task");
+                    const value = taskRequest
                         ? await options.taskWeb.invokeTask(body.operation, body.input)
                         : await options.taskWeb.invokeApproval(body.operation, body.input);
+                    if (taskRequest &&
+                        taskWebObserverRecoveryOperations.has(body.operation) &&
+                        commandConsumerReady()) {
+                        // The Task mutation is already durable and must not be coupled to
+                        // transient Browser delivery. Notify the Extension asynchronously so
+                        // its existing Task Observer can derive the next NODE_READY/REOPEN wake.
+                        void requestCommand({ type: "TASK_OBSERVER_RECOVER" }).catch(() => undefined);
+                    }
                     send(response, 200, { ok: true, value });
                     return;
                 }

package/dist/src/task-observer.d.ts

@@ -32,6 +32,8 @@ export type TaskObserverResumeSignal = {
     trigger: "EXECUTION_RESULT_READY" | "PEER_REPLY_READY" | "RECOVERY_RESUME";
     ref: string;
     targetWorkerRef: string;
+    nodeId: string;
+    runNo: number;
 };
 export type TaskObserverAnomalySignal = {
     kind: "FACT_CONFLICT" | "UNKNOWN_REALITY" | "STALLED" | "RECOVERY_FAILED";

package/dist/src/task-observer.js

@@ -11,6 +11,12 @@ const NODE_READY_TRIGGER = "NODE_READY";
 const REOPEN_TRIGGER = "REOPEN";
 export function createTaskObserver(options) {
     const advance = async (taskId, resumeSignal, anomalySignal) => {
+        if (resumeSignal &&
+            (typeof resumeSignal.nodeId !== "string" ||
+                resumeSignal.nodeId.length === 0 ||
+                !Number.isInteger(resumeSignal.runNo) ||
+                resumeSignal.runNo <= 0))
+            return { kind: "NOOP", taskId, reason: "RESUME_GENERATION_REQUIRED" };
         const projection = await options.owner.getTaskDriveProjection(taskId);
         // Terminal Tasks stop driving; history and bindings are retained.
         if (projection.terminal || projection.currentNode === null)
@@ -43,11 +49,13 @@ export function createTaskObserver(options) {
             };
         }
         const binding = projection.roleBinding;
-        if (!projection.canDrive ||
-            !binding?.workerRef ||
-            !binding.conversationLocator)
+        if (!binding?.workerRef ||
+            !binding.conversationLocator ||
+            binding.agentPackageRef !== node.requiredAgentPackageRef)
             return { kind: "NOOP", taskId, reason: "BINDING_NOT_READY" };
         if (node.status === "READY") {
+            if (!projection.canDrive)
+                return { kind: "NOOP", taskId, reason: "BINDING_NOT_READY" };
             // WAKE the correct Worker with a minimal trigger; the Worker then
             // performs formal work acceptance through the Task owner. A reopened
             // run reuses the same TaskRoleBinding/Conversation but keeps the reason
@@ -64,6 +72,15 @@ export function createTaskObserver(options) {
             };
         }
         if (resumeSignal) {
+            if (projection.taskStatus !== "ACTIVE" || node.status !== "IN_PROGRESS")
+                return { kind: "NOOP", taskId, reason: "BINDING_NOT_READY" };
+            if (resumeSignal.nodeId !== node.nodeId ||
+                resumeSignal.runNo !== node.runNo)
+                return {
+                    kind: "NOOP",
+                    taskId,
+                    reason: "RESUME_GENERATION_MISMATCH",
+                };
             if (resumeSignal.targetWorkerRef !== binding.workerRef)
                 return {
                     kind: "NOOP",

package/extension/background.ts

@@ -76,7 +76,8 @@ type BridgeCommand = {
 		| "VERIFY"
 		| "SCREENSHOT"
 		| "PERFORM"
-		| "CARRIER_ATTENTION_ACTION";
+		| "CARRIER_ATTENTION_ACTION"
+		| "TASK_OBSERVER_RECOVER";
 	tabId?: number;
 	url?: string;
 	text?: string;
@@ -539,6 +540,30 @@ const taskObserver = createTaskObserver({
 	},
 });
 
+async function resumeAfterApprovalDecision(approvalRef: string) {
+	const context = await invokeObserverApplication("approval.executionContext", {
+		approvalRef,
+	});
+	if (
+		!isRecord(context) ||
+		typeof context.executionRef !== "string" ||
+		typeof context.taskId !== "string" ||
+		typeof context.nodeId !== "string" ||
+		!Number.isInteger(context.runNo) ||
+		Number(context.runNo) <= 0 ||
+		typeof context.roleRef !== "string" ||
+		typeof context.workerRef !== "string"
+	)
+		throw new Error("APPROVAL_EXECUTION_GENERATION_REQUIRED");
+	return taskObserver.drive(context.taskId, {
+		trigger: "RECOVERY_RESUME",
+		ref: approvalRef,
+		targetWorkerRef: context.workerRef,
+		nodeId: context.nodeId,
+		runNo: Number(context.runNo),
+	});
+}
+
 const collaborationCarrier = createCollaborationCarrierApplication({
 	task: {
 		async getWorkerBinding(taskId, roleRef) {
@@ -709,23 +734,37 @@ function runObserverRecovery() {
 						)
 					)
 						continue;
-					const decision =
-						candidate.kind === "RECOVERY_RESUME"
-							? await taskObserver.drive(candidate.taskId, {
-									trigger: "RECOVERY_RESUME",
-									ref: candidate.executionRef,
-									targetWorkerRef: candidate.workerRef,
-								})
-							: candidate.kind === "UNKNOWN_REALITY"
-								? await taskObserver.drive(candidate.taskId, undefined, {
-										kind: "UNKNOWN_REALITY",
-										ref: candidate.executionRef,
-										facts: {
-											executionRef: candidate.executionRef,
-											summary: `Execution ${candidate.executionRef} recovery remains UNKNOWN`,
-										},
-									})
-								: null;
+					let decision;
+					if (candidate.kind === "RECOVERY_RESUME") {
+						if (
+							typeof candidate.nodeId !== "string" ||
+							typeof candidate.runNo !== "number"
+						) {
+							// Missing generation is a permanent malformed resume intent, not a
+							// transient binding condition. Dispose it without ever waking a Worker
+							// so an old signal cannot occupy the bounded pending queue forever.
+							await invokeObserverApplication("execution.ackSignal", {
+								signalRef: candidate.signalRef,
+							});
+							continue;
+						}
+						decision = await taskObserver.drive(candidate.taskId, {
+							trigger: "RECOVERY_RESUME",
+							ref: candidate.executionRef,
+							targetWorkerRef: candidate.workerRef,
+							nodeId: candidate.nodeId,
+							runNo: candidate.runNo,
+						});
+					} else if (candidate.kind === "UNKNOWN_REALITY")
+						decision = await taskObserver.drive(candidate.taskId, undefined, {
+							kind: "UNKNOWN_REALITY",
+							ref: candidate.executionRef,
+							facts: {
+								executionRef: candidate.executionRef,
+								summary: `Execution ${candidate.executionRef} recovery remains UNKNOWN`,
+							},
+						});
+					else decision = null;
 					if (!decision) continue;
 					if (
 						decision.kind === "NOOP" &&
@@ -1312,6 +1351,10 @@ function text(value: unknown, name: string): string {
 }
 
 async function executeCommand(command: BridgeCommand): Promise<unknown> {
+	if (command.type === "TASK_OBSERVER_RECOVER") {
+		void runObserverRecovery();
+		return { scheduled: true };
+	}
 	if (command.type === "CARRIER_ATTENTION_ACTION") {
 		if (command.action !== "allowOnce" && command.action !== "deny")
 			throw new Error("ATTENTION_ACTION_INVALID");
@@ -1869,17 +1912,11 @@ chrome.runtime.onMessage.addListener((message, sender, sendResponse) => {
 						message.operation === "approval.deny" ||
 						message.operation === "approval.revoke") &&
 					isRecord(value) &&
-					typeof value.approvalRef === "string" &&
-					typeof value.taskId === "string" &&
-					typeof value.workerRef === "string"
+					typeof value.approvalRef === "string"
 				)
-					void taskObserver
-						.drive(value.taskId, {
-							trigger: "RECOVERY_RESUME",
-							ref: value.approvalRef,
-							targetWorkerRef: value.workerRef,
-						})
-						.catch(() => undefined);
+					void resumeAfterApprovalDecision(value.approvalRef).catch(
+						() => undefined,
+					);
 				sendResponse({ ok: true, value });
 			},
 			(error: unknown) =>

package/manifest.json

@@ -1,7 +1,7 @@
 {
 	"manifest_version": 3,
 	"name": "ProFlow Execution Browser",
-	"version": "0.1.40",
+	"version": "0.1.42",
 	"permissions": [
 		"tabs",
 		"storage"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tomflow/proflow-execution-browser-extension",
-  "version": "0.1.40",
+  "version": "0.1.42",
   "description": "Execution-owned MV3 Browser executor, evidence provider and browser application surface.",
   "type": "module",
   "publishConfig": {
@@ -27,12 +27,12 @@
     "SETUP.md"
   ],
   "dependencies": {
-    "@tomflow/proflow-execution-contracts": "^0.1.10",
-    "@tomflow/proflow-module-contract": "^0.1.13"
+    "@tomflow/proflow-module-contract": "^0.1.13",
+    "@tomflow/proflow-execution-contracts": "^0.1.10"
   },
   "devDependencies": {
     "@tomflow/proflow-deployment-conformance": "^0.1.13",
-    "@tomflow/proflow-execution-runtime": "^0.1.17"
+    "@tomflow/proflow-execution-runtime": "^0.1.18"
   },
   "keywords": [
     "proflow",

package/proflow.module.json

@@ -3,7 +3,7 @@
 	"contractVersion": "1.0.0",
 	"moduleRef": "execution-browser-extension",
 	"packageName": "@tomflow/proflow-execution-browser-extension",
-	"moduleVersion": "0.1.40",
+	"moduleVersion": "0.1.42",
 	"kind": "browser-extension",
 	"templateVersion": "1.0.0",
 	"platformCompatibility": ">=1.0.0 <2.0.0",