@tomflow/proflow-execution-runtime 0.1.5 → 0.1.7

package/DOCS.md

@@ -0,0 +1,27 @@
+# @tomflow/proflow-execution-runtime — Module Docs
+
+Module ref: `execution-runtime`  
+Domain: `execution`  
+Kind: `service`
+
+Durable, policy-controlled Execution Core orchestration over SQLite and controlled executor ports.
+
+## Standard management surface
+
+`install / uninstall / status / setup / docs / start / stop`
+
+## Provides
+
+- `execution` `1.0.0`
+
+## Requires
+
+- `execution-local` `>=1.0.0 <2.0.0`
+
+## Public setup inputs
+
+- None. Deterministic/private values and cross-Module shared facts are not public configuration.
+
+## Ownership boundary
+
+Module business APIs and any module-specific extra commands remain package-owned. Platform does not proxy or interpret them. Current human/external preparation is documented in `SETUP.md`.

package/SETUP.md

@@ -0,0 +1,7 @@
+# @tomflow/proflow-execution-runtime — Module Setup
+
+No user or external setup is required by the current frozen Module contract. `Module.install` completes deterministic preparation; `Module.setup` only re-observes current reality and must not ask the user to supply private paths, loopback endpoints, tokens or cross-Module facts.
+
+## Completion
+
+Setup is complete only when the Module's own `status` reports `setupStatus=READY`. Re-running setup must re-observe reality; it must not resume from a blind historical step index.

package/dist/deployment/adapter.d.ts

@@ -1,362 +1,134 @@
-type ProcessService = {
-    start(): Promise<{
-        host: string;
-        port: number;
-    }>;
-    stop(): Promise<void>;
-    restart(): Promise<{
-        host: string;
-        port: number;
-    }>;
-    status(): {
-        readiness: "READY" | "NOT_READY";
-    };
-};
-export declare function createBehaviorAdapter(service?: ProcessService, config?: Record<string, string>, configValid?: boolean): {
-    describe: () => {
-        result: {
-            readonly contract: "deployment.result.v1";
-            readonly ok: true;
-            readonly status: "SUCCEEDED";
-            readonly moduleRef: "execution-runtime";
-            readonly moduleVersion: "0.1.5";
-        };
-        observedEffects: never[];
-    };
-    preflight: () => {
-        result: {
-            readonly contract: "deployment.result.v1";
-            readonly ok: true;
-            readonly status: "SUCCEEDED";
-            readonly moduleRef: "execution-runtime";
-            readonly moduleVersion: "0.1.5";
-        };
-        observedEffects: never[];
-    };
-    status: () => {
+import { type ModuleCommandContext } from "@tomflow/proflow-module-contract";
+export declare const behaviorAdapter: {
+    readonly install: (context: ModuleCommandContext) => Promise<{
         result: {
             contract: "deployment.result.v1";
             ok: true;
             status: "SUCCEEDED";
             moduleRef: "execution-runtime";
-            moduleVersion: "0.1.5";
+            moduleVersion: "0.1.7";
             data: {
-                configStatus: "INCOMPLETE" | "INVALID" | "READY";
-                missingConfig?: string[] | undefined;
-                runtimeStatus: "FAILED" | "RUNNING" | "STOPPED" | "UNKNOWN";
-            };
-        };
-        observedEffects: never[];
-    };
-    verify: () => {
-        result: {
-            contract: "deployment.result.v1";
-            ok: true;
-            status: "SUCCEEDED";
-            moduleRef: "execution-runtime";
-            moduleVersion: "0.1.5";
-            checks: {
-                id: string;
-                status: "FAIL" | "PASS";
-                message: string;
-            }[];
-        } | {
-            contract: "deployment.result.v1";
-            moduleRef: "execution-runtime";
-            moduleVersion: "0.1.5";
-            ok: false;
-            status: "ACTION_REQUIRED";
-            actionRequired: {
-                readonly action: "bind-runtime";
-                readonly description: "Bind a configured Execution Runtime service";
-            };
-            checks: {
-                id: string;
-                status: "FAIL" | "PASS";
-                message: string;
-            }[];
-        } | {
-            contract: "deployment.result.v1";
-            moduleRef: "execution-runtime";
-            moduleVersion: "0.1.5";
-            ok: false;
-            status: "ACTION_REQUIRED";
-            actionRequired: {
-                action: string;
-                description: string;
+                endpoint: string;
+                transportCredentialFile: string;
+                databasePath: string;
+                projectRoot: string;
+                artifactRoot: string;
             };
-            checks: {
-                id: string;
-                status: "FAIL" | "PASS";
-                message: string;
-            }[];
         };
         observedEffects: never[];
-    };
-    doctor: () => {
+    }>;
+    readonly uninstall: (context: ModuleCommandContext) => Promise<{
         result: {
             readonly contract: "deployment.result.v1";
             readonly ok: true;
             readonly status: "SUCCEEDED";
             readonly moduleRef: "execution-runtime";
-            readonly moduleVersion: "0.1.5";
+            readonly moduleVersion: "0.1.7";
         };
-        observedEffects: never[];
-    };
-    start: () => Promise<{
+        observedEffects: ("Persists execution state, output references and evidence in WAL SQLite" | "Runs the single backend Execution Runtime service")[];
+    }>;
+    readonly status: (context: ModuleCommandContext) => Promise<{
         result: {
-            readonly contract: "deployment.result.v1";
-            readonly moduleRef: "execution-runtime";
-            readonly moduleVersion: "0.1.5";
-            readonly ok: false;
-            readonly status: "ACTION_REQUIRED";
-            readonly actionRequired: {
-                readonly action: "bind-runtime";
-                readonly description: "Bind a configured Execution Runtime service";
-            };
-        } | {
             contract: "deployment.result.v1";
             ok: true;
             status: "SUCCEEDED";
             moduleRef: "execution-runtime";
-            moduleVersion: "0.1.5";
+            moduleVersion: "0.1.7";
             data: {
-                host: string;
-                port: number;
+                setupStatus: "FAILED" | "READY";
+                runtimeStatus: "RUNNING" | "STOPPED";
             };
         };
-        observedEffects: ("Persists execution state, output references and evidence in WAL SQLite" | "Runs the single backend Execution Runtime service")[];
-    }>;
-    stop: () => Promise<{
-        result: {
-            readonly contract: "deployment.result.v1";
-            readonly ok: true;
-            readonly status: "SUCCEEDED";
-            readonly moduleRef: "execution-runtime";
-            readonly moduleVersion: "0.1.5";
-        } | {
-            readonly contract: "deployment.result.v1";
-            readonly moduleRef: "execution-runtime";
-            readonly moduleVersion: "0.1.5";
-            readonly ok: false;
-            readonly status: "ACTION_REQUIRED";
-            readonly actionRequired: {
-                readonly action: "bind-runtime";
-                readonly description: "Bind a configured Execution Runtime service";
-            };
-        };
-        observedEffects: ("Persists execution state, output references and evidence in WAL SQLite" | "Runs the single backend Execution Runtime service")[];
+        observedEffects: never[];
     }>;
-    uninstall: () => Promise<{
+    readonly setup: (context: ModuleCommandContext) => Promise<{
         result: {
             readonly contract: "deployment.result.v1";
             readonly ok: true;
             readonly status: "SUCCEEDED";
             readonly moduleRef: "execution-runtime";
-            readonly moduleVersion: "0.1.5";
-        };
-        observedEffects: "Runs the single backend Execution Runtime service"[];
-    }>;
-    restart: () => Promise<{
-        result: {
-            readonly contract: "deployment.result.v1";
-            readonly moduleRef: "execution-runtime";
-            readonly moduleVersion: "0.1.5";
-            readonly ok: false;
-            readonly status: "ACTION_REQUIRED";
-            readonly actionRequired: {
-                readonly action: "bind-runtime";
-                readonly description: "Bind a configured Execution Runtime service";
-            };
+            readonly moduleVersion: "0.1.7";
         } | {
             contract: "deployment.result.v1";
-            ok: true;
-            status: "SUCCEEDED";
             moduleRef: "execution-runtime";
-            moduleVersion: "0.1.5";
-            data: {
-                host: string;
-                port: number;
+            moduleVersion: "0.1.7";
+            ok: false;
+            status: "FAILED";
+            error: {
+                code: "SETUP_FAILED" | "START_FAILED" | "STOP_FAILED";
+                message: string;
+                retryable: boolean;
             };
         };
-        observedEffects: ("Persists execution state, output references and evidence in WAL SQLite" | "Runs the single backend Execution Runtime service")[];
-    }>;
-};
-export declare const behaviorAdapter: {
-    describe: () => {
-        result: {
-            readonly contract: "deployment.result.v1";
-            readonly ok: true;
-            readonly status: "SUCCEEDED";
-            readonly moduleRef: "execution-runtime";
-            readonly moduleVersion: "0.1.5";
-        };
-        observedEffects: never[];
-    };
-    preflight: () => {
-        result: {
-            readonly contract: "deployment.result.v1";
-            readonly ok: true;
-            readonly status: "SUCCEEDED";
-            readonly moduleRef: "execution-runtime";
-            readonly moduleVersion: "0.1.5";
-        };
         observedEffects: never[];
-    };
-    status: () => {
+    }>;
+    readonly docs: (_context: ModuleCommandContext) => Promise<{
         result: {
             contract: "deployment.result.v1";
             ok: true;
             status: "SUCCEEDED";
             moduleRef: "execution-runtime";
-            moduleVersion: "0.1.5";
+            moduleVersion: "0.1.7";
             data: {
-                configStatus: "INCOMPLETE" | "INVALID" | "READY";
-                missingConfig?: string[] | undefined;
-                runtimeStatus: "FAILED" | "RUNNING" | "STOPPED" | "UNKNOWN";
+                docs: string;
+                setup: string;
             };
         };
         observedEffects: never[];
-    };
-    verify: () => {
+    }>;
+    readonly start: (context: ModuleCommandContext) => Promise<{
         result: {
             contract: "deployment.result.v1";
             ok: true;
             status: "SUCCEEDED";
             moduleRef: "execution-runtime";
-            moduleVersion: "0.1.5";
-            checks: {
-                id: string;
-                status: "FAIL" | "PASS";
-                message: string;
-            }[];
-        } | {
+            moduleVersion: "0.1.7";
+            data: unknown;
+        };
+        observedEffects: ("Persists execution state, output references and evidence in WAL SQLite" | "Runs the single backend Execution Runtime service")[];
+    } | {
+        result: {
             contract: "deployment.result.v1";
             moduleRef: "execution-runtime";
-            moduleVersion: "0.1.5";
+            moduleVersion: "0.1.7";
             ok: false;
-            status: "ACTION_REQUIRED";
-            actionRequired: {
-                readonly action: "bind-runtime";
-                readonly description: "Bind a configured Execution Runtime service";
-            };
-            checks: {
-                id: string;
-                status: "FAIL" | "PASS";
+            status: "FAILED";
+            error: {
+                code: "SETUP_FAILED" | "START_FAILED" | "STOP_FAILED";
                 message: string;
-            }[];
-        } | {
-            contract: "deployment.result.v1";
-            moduleRef: "execution-runtime";
-            moduleVersion: "0.1.5";
-            ok: false;
-            status: "ACTION_REQUIRED";
-            actionRequired: {
-                action: string;
-                description: string;
+                retryable: boolean;
             };
-            checks: {
-                id: string;
-                status: "FAIL" | "PASS";
-                message: string;
-            }[];
         };
         observedEffects: never[];
-    };
-    doctor: () => {
-        result: {
-            readonly contract: "deployment.result.v1";
-            readonly ok: true;
-            readonly status: "SUCCEEDED";
-            readonly moduleRef: "execution-runtime";
-            readonly moduleVersion: "0.1.5";
-        };
-        observedEffects: never[];
-    };
-    start: () => Promise<{
-        result: {
-            readonly contract: "deployment.result.v1";
-            readonly moduleRef: "execution-runtime";
-            readonly moduleVersion: "0.1.5";
-            readonly ok: false;
-            readonly status: "ACTION_REQUIRED";
-            readonly actionRequired: {
-                readonly action: "bind-runtime";
-                readonly description: "Bind a configured Execution Runtime service";
-            };
-        } | {
-            contract: "deployment.result.v1";
-            ok: true;
-            status: "SUCCEEDED";
-            moduleRef: "execution-runtime";
-            moduleVersion: "0.1.5";
-            data: {
-                host: string;
-                port: number;
-            };
-        };
-        observedEffects: ("Persists execution state, output references and evidence in WAL SQLite" | "Runs the single backend Execution Runtime service")[];
     }>;
-    stop: () => Promise<{
+    readonly stop: (context: ModuleCommandContext) => Promise<{
         result: {
             readonly contract: "deployment.result.v1";
             readonly ok: true;
             readonly status: "SUCCEEDED";
             readonly moduleRef: "execution-runtime";
-            readonly moduleVersion: "0.1.5";
-        } | {
-            readonly contract: "deployment.result.v1";
-            readonly moduleRef: "execution-runtime";
-            readonly moduleVersion: "0.1.5";
-            readonly ok: false;
-            readonly status: "ACTION_REQUIRED";
-            readonly actionRequired: {
-                readonly action: "bind-runtime";
-                readonly description: "Bind a configured Execution Runtime service";
-            };
+            readonly moduleVersion: "0.1.7";
         };
         observedEffects: ("Persists execution state, output references and evidence in WAL SQLite" | "Runs the single backend Execution Runtime service")[];
-    }>;
-    uninstall: () => Promise<{
+    } | {
         result: {
             readonly contract: "deployment.result.v1";
             readonly ok: true;
             readonly status: "SUCCEEDED";
             readonly moduleRef: "execution-runtime";
-            readonly moduleVersion: "0.1.5";
-        };
-        observedEffects: "Runs the single backend Execution Runtime service"[];
-    }>;
-    restart: () => Promise<{
-        result: {
-            readonly contract: "deployment.result.v1";
-            readonly moduleRef: "execution-runtime";
-            readonly moduleVersion: "0.1.5";
-            readonly ok: false;
-            readonly status: "ACTION_REQUIRED";
-            readonly actionRequired: {
-                readonly action: "bind-runtime";
-                readonly description: "Bind a configured Execution Runtime service";
-            };
+            readonly moduleVersion: "0.1.7";
         } | {
             contract: "deployment.result.v1";
-            ok: true;
-            status: "SUCCEEDED";
             moduleRef: "execution-runtime";
-            moduleVersion: "0.1.5";
-            data: {
-                host: string;
-                port: number;
+            moduleVersion: "0.1.7";
+            ok: false;
+            status: "FAILED";
+            error: {
+                code: "SETUP_FAILED" | "START_FAILED" | "STOP_FAILED";
+                message: string;
+                retryable: boolean;
             };
         };
-        observedEffects: ("Persists execution state, output references and evidence in WAL SQLite" | "Runs the single backend Execution Runtime service")[];
+        observedEffects: never[];
     }>;
 };
-export declare function createProductionBinding(input: {
-    moduleRef: string;
-    config: Record<string, string>;
-    configByModuleRef: ReadonlyMap<string, Record<string, string>>;
-}): Promise<{
-    behaviorAdapter: Record<string, unknown>;
-}>;
-export {};

package/dist/deployment/adapter.js

@@ -1,6 +1,8 @@
-import { createServer } from "node:net";
-import { observeDeclaredModuleStatus } from "@tomflow/proflow-module-contract";
+import { mkdir, readFile } from "node:fs/promises";
+import { join, resolve } from "node:path";
+import { deterministicLoopbackPort, ensureModuleSecretFile, moduleWorkspaceStateDirectory, readModuleSharedFacts, writeModuleSharedFacts, } from "@tomflow/proflow-module-contract";
 import { descriptor } from "./descriptor.js";
+const services = new Map();
 const base = {
     contract: "deployment.result.v1",
     ok: true,
@@ -8,247 +10,182 @@ const base = {
     moduleRef: descriptor.moduleRef,
     moduleVersion: descriptor.moduleVersion,
 };
-const unbound = {
-    ...base,
-    ok: false,
-    status: "ACTION_REQUIRED",
-    actionRequired: {
-        action: "bind-runtime",
-        description: "Bind a configured Execution Runtime service",
-    },
-};
-async function listenerPreflight(listener) {
-    const port = listener.port === "" ? 80 : Number(listener.port);
-    const host = listener.hostname.replace(/^\[(.*)\]$/, "$1");
-    const address = `${host}:${port}`;
+const key = (context) => resolve(context.workspaceRoot);
+const factString = (facts, name) => (typeof facts?.[name] === "string" ? String(facts[name]) : undefined);
+async function ownFacts(context) {
+    const state = moduleWorkspaceStateDirectory(context, descriptor.moduleRef);
+    await mkdir(state, { recursive: true, mode: 0o700 });
+    const facts = {
+        endpoint: `http://127.0.0.1:${deterministicLoopbackPort(context, descriptor.moduleRef)}`,
+        transportCredentialFile: await ensureModuleSecretFile(context, descriptor.moduleRef, "transport"),
+        databasePath: join(state, "execution.sqlite"),
+        projectRoot: key(context),
+        artifactRoot: join(key(context), ".proflow", "artifacts", "execution"),
+    };
+    await mkdir(facts.artifactRoot, { recursive: true, mode: 0o700 });
+    await writeModuleSharedFacts(context, descriptor.moduleRef, facts);
+    return facts;
+}
+async function baseDependencies(context) {
+    const host = await readModuleSharedFacts(context, "platform-host");
+    const model = await readModuleSharedFacts(context, "model-runtime");
+    const identityEndpoint = factString(host, "endpoint");
+    const identityTokenFile = factString(host, "identityTokenFile");
+    const modelEndpoint = factString(model, "endpoint");
+    const modelCredentialFile = factString(model, "transportCredentialFile");
+    return identityEndpoint &&
+        identityTokenFile &&
+        modelEndpoint &&
+        modelCredentialFile
+        ? {
+            identityEndpoint,
+            identityTokenFile,
+            modelEndpoint,
+            modelCredentialFile,
+        }
+        : undefined;
+}
+async function dependencies(context) {
+    const base = await baseDependencies(context);
+    const browser = await readModuleSharedFacts(context, "execution-browser-extension");
+    const browserExecutorConfigPath = factString(browser, "browserExecutorConfigPath");
+    return base && browserExecutorConfigPath
+        ? {
+            ...base,
+            browserExecutorConfigPath,
+        }
+        : undefined;
+}
+async function running(context) {
+    const own = await ownFacts(context);
     try {
-        const response = await fetch(new URL("/ready", listener), {
+        const token = (await readFile(own.transportCredentialFile, "utf8")).trim();
+        return (await fetch(`${own.endpoint}/ready`, {
+            headers: { authorization: `Bearer ${token}` },
             signal: AbortSignal.timeout(500),
-        });
-        if (response.ok)
-            return {
-                result: {
-                    ...base,
-                    checks: [
-                        {
-                            id: "execution-runtime-listener",
-                            status: "PASS",
-                            message: `Execution Runtime listener ${address} is already READY`,
-                        },
-                    ],
-                },
-                observedEffects: [],
-            };
+        })).ok;
     }
     catch {
-        // A stopped runtime is expected here; continue with a bind-only port probe.
+        return false;
     }
-    const probe = await new Promise((resolve) => {
-        const server = createServer();
-        server.once("error", (error) => resolve({
-            available: false,
-            message: error instanceof Error ? error.message : String(error),
-        }));
-        server.listen({ host, port, exclusive: true }, () => server.close(() => resolve({
-            available: true,
-            message: `Execution Runtime listener ${address} is available`,
-        })));
-    });
-    return probe.available
-        ? {
-            result: {
-                ...base,
-                checks: [
-                    {
-                        id: "execution-runtime-listener",
-                        status: "PASS",
-                        message: probe.message,
-                    },
-                ],
+}
+async function compose(context) {
+    const own = await ownFacts(context);
+    const deps = await dependencies(context);
+    if (!deps)
+        throw new Error("required Platform Host, Model Runtime, or Browser Executor shared facts are unavailable");
+    const [{ createFormalExecutionRuntimeLifecycle }, { parseExecutionRuntimeProcessConfig },] = await Promise.all([
+        import("../src/formal-process.js"),
+        import("../src/service.js"),
+    ]);
+    const url = new URL(own.endpoint);
+    return createFormalExecutionRuntimeLifecycle({
+        config: parseExecutionRuntimeProcessConfig({
+            host: url.hostname,
+            port: Number(url.port),
+            databasePath: own.databasePath,
+            projectRoot: own.projectRoot,
+            artifactRoot: own.artifactRoot,
+            browserExecutorConfigPath: deps.browserExecutorConfigPath,
+            transportCredentialFile: own.transportCredentialFile,
+            identity: {
+                endpoint: deps.identityEndpoint,
+                tokenFile: deps.identityTokenFile,
             },
-            observedEffects: [],
-        }
-        : {
-            result: {
-                ...base,
-                ok: false,
-                status: "ACTION_REQUIRED",
-                actionRequired: {
-                    action: "free-execution-runtime-port",
-                    description: `Execution Runtime listener ${address} is unavailable (${probe.message}); stop the conflicting process or configure a different endpoint before platform start`,
-                },
-                checks: [
-                    {
-                        id: "execution-runtime-listener",
-                        status: "FAIL",
-                        message: probe.message,
-                    },
-                ],
+            modelDecision: {
+                endpoint: deps.modelEndpoint,
+                credentialFile: deps.modelCredentialFile,
             },
-            observedEffects: [],
-        };
+            exactNetworkTargets: [],
+        }),
+    });
 }
-export function createBehaviorAdapter(service, config, configValid = true) {
-    return {
-        describe: () => ({ result: base, observedEffects: [] }),
-        preflight: () => ({ result: base, observedEffects: [] }),
-        status: () => {
-            const status = service?.status();
-            const ready = status?.readiness === "READY";
-            const data = observeDeclaredModuleStatus(descriptor, config, ready ? "RUNNING" : service ? "FAILED" : "UNKNOWN", configValid);
+const failed = (code, message) => ({
+    ...base,
+    ok: false,
+    status: "FAILED",
+    error: { code, message, retryable: true },
+});
+export const behaviorAdapter = {
+    install: async (context) => ({
+        result: { ...base, data: await ownFacts(context) },
+        observedEffects: [],
+    }),
+    uninstall: async (context) => {
+        const service = services.get(key(context));
+        if (service) {
+            await service.stop();
+            services.delete(key(context));
+        }
+        return {
+            result: base,
+            observedEffects: service
+                ? [...descriptor.effects.map((item) => item.description)]
+                : [],
+        };
+    },
+    status: async (context) => ({
+        result: {
+            ...base,
+            data: {
+                setupStatus: (await dependencies(context))
+                    ? "READY"
+                    : "FAILED",
+                runtimeStatus: (await running(context))
+                    ? "RUNNING"
+                    : "STOPPED",
+            },
+        },
+        observedEffects: [],
+    }),
+    setup: async (context) => ({
+        result: (await dependencies(context))
+            ? base
+            : failed("SETUP_FAILED", "required producer shared facts are unavailable"),
+        observedEffects: [],
+    }),
+    docs: async (_context) => ({
+        result: { ...base, data: { docs: "DOCS.md", setup: "SETUP.md" } },
+        observedEffects: [],
+    }),
+    start: async (context) => {
+        try {
+            const service = await compose(context);
+            const data = await service.start();
+            services.set(key(context), service);
             return {
                 result: { ...base, data },
-                observedEffects: [],
+                observedEffects: [
+                    ...descriptor.effects.map((item) => item.description),
+                ],
             };
-        },
-        verify: () => {
-            const status = service?.status();
-            const ready = status?.readiness === "READY";
+        }
+        catch (error) {
             return {
-                result: {
-                    ...(service && ready
-                        ? base
-                        : service
-                            ? {
-                                ...base,
-                                ok: false,
-                                status: "ACTION_REQUIRED",
-                                actionRequired: {
-                                    action: "repair-execution-runtime",
-                                    description: "Execution Runtime is not READY",
-                                },
-                            }
-                            : unbound),
-                    checks: [
-                        {
-                            id: "execution-runtime-critical-proofs",
-                            status: ready ? "PASS" : "FAIL",
-                            message: service
-                                ? `Execution Runtime readiness is ${status?.readiness ?? "NOT_READY"}`
-                                : "No configured Execution Runtime process is bound",
-                        },
-                    ],
-                },
+                result: failed("START_FAILED", error instanceof Error
+                    ? error.message
+                    : "execution-runtime start failed"),
                 observedEffects: [],
             };
-        },
-        doctor: () => ({ result: base, observedEffects: [] }),
-        start: async () => ({
-            result: service ? { ...base, data: await service.start() } : unbound,
-            observedEffects: service
-                ? [...descriptor.effects.map((item) => item.description)]
-                : [],
-        }),
-        stop: async () => {
-            if (service)
-                await service.stop();
-            return {
-                result: service ? base : unbound,
-                observedEffects: service
-                    ? [...descriptor.effects.map((item) => item.description)]
-                    : [],
-            };
-        },
-        uninstall: async () => {
-            if (service)
-                await service.stop();
+        }
+    },
+    stop: async (context) => {
+        const service = services.get(key(context));
+        if (service) {
+            await service.stop();
+            services.delete(key(context));
             return {
-                // Uninstall is idempotent: an unbound service means there is no
-                // process to stop before package removal. Runtime readiness still
-                // fails closed in status/start/verify.
                 result: base,
-                observedEffects: service
-                    ? descriptor.effects
-                        .filter((item) => item.retention === "remove")
-                        .map((item) => item.description)
-                    : [],
+                observedEffects: [
+                    ...descriptor.effects.map((item) => item.description),
+                ],
             };
-        },
-        restart: async () => ({
-            result: service ? { ...base, data: await service.restart() } : unbound,
-            observedEffects: service
-                ? [...descriptor.effects.map((item) => item.description)]
-                : [],
-        }),
-    };
-}
-export const behaviorAdapter = createBehaviorAdapter();
-export async function createProductionBinding(input) {
-    const unboundBinding = (configValid = true) => ({
-        behaviorAdapter: createBehaviorAdapter(undefined, input.config, configValid),
-    });
-    const required = [
-        "databasePath",
-        "projectRoot",
-        "artifactRoot",
-        "browserExecutorConfigPath",
-        "transportCredentialFile",
-        "identity.endpoint",
-        "identity.tokenFile",
-        "modelDecision.endpoint",
-        "modelDecision.credentialFile",
-    ];
-    if (!required.every((key) => input.config[key]))
-        return unboundBinding();
-    for (const key of ["identity.endpoint", "modelDecision.endpoint"]) {
-        try {
-            const endpoint = new URL(input.config[key] ?? "");
-            if (endpoint.protocol !== "http:")
-                return unboundBinding(false);
         }
-        catch {
-            return unboundBinding(false);
-        }
-    }
-    const platformHost = input.configByModuleRef.get("platform-host");
-    const advertised = platformHost?.executionBaseUrl;
-    if (!advertised)
-        return unboundBinding();
-    let listener;
-    try {
-        listener = new URL(advertised);
-    }
-    catch {
-        return unboundBinding();
-    }
-    if (listener.protocol !== "http:" || listener.pathname !== "/")
-        return unboundBinding();
-    const port = listener.port === "" ? 80 : Number(listener.port);
-    if (!Number.isInteger(port) || port <= 0 || port > 65_535)
-        return unboundBinding();
-    const [{ createFormalExecutionRuntimeLifecycle }, { parseExecutionRuntimeProcessConfig },] = await Promise.all([
-        import("../src/formal-process.js"),
-        import("../src/service.js"),
-    ]);
-    let service;
-    try {
-        service = createFormalExecutionRuntimeLifecycle({
-            config: parseExecutionRuntimeProcessConfig({
-                host: listener.hostname,
-                port,
-                databasePath: input.config.databasePath,
-                projectRoot: input.config.projectRoot,
-                artifactRoot: input.config.artifactRoot,
-                browserExecutorConfigPath: input.config.browserExecutorConfigPath,
-                transportCredentialFile: input.config.transportCredentialFile,
-                identity: {
-                    endpoint: input.config["identity.endpoint"],
-                    tokenFile: input.config["identity.tokenFile"],
-                },
-                modelDecision: {
-                    endpoint: input.config["modelDecision.endpoint"],
-                    credentialFile: input.config["modelDecision.credentialFile"],
-                },
-            }),
-        });
-    }
-    catch {
-        return unboundBinding(false);
-    }
-    return {
-        behaviorAdapter: {
-            ...createBehaviorAdapter(service, input.config),
-            preflight: () => listenerPreflight(listener),
-        },
-    };
-}
+        return {
+            result: (await running(context))
+                ? failed("STOP_FAILED", "execution-runtime is running without an owned lifecycle handle")
+                : base,
+            observedEffects: [],
+        };
+    },
+};

package/dist/deployment/descriptor.d.ts

@@ -3,7 +3,7 @@ export declare const descriptor: {
     readonly contractVersion: "1.0.0";
     readonly moduleRef: "execution-runtime";
     readonly packageName: "@tomflow/proflow-execution-runtime";
-    readonly moduleVersion: "0.1.5";
+    readonly moduleVersion: "0.1.7";
     readonly kind: "service";
     readonly templateVersion: "1.0.0";
     readonly platformCompatibility: ">=1.0.0 <2.0.0";
@@ -28,65 +28,7 @@ export declare const descriptor: {
         readonly path: ".proflow";
         readonly access: "read-write";
     }];
-    readonly configSlots: readonly [{
-        readonly key: "databasePath";
-        readonly type: "path";
-        readonly required: true;
-        readonly description: "Execution SQLite database";
-    }, {
-        readonly key: "projectRoot";
-        readonly type: "path";
-        readonly required: true;
-        readonly description: "Canonical project boundary consumed by the local executor";
-    }, {
-        readonly key: "artifactRoot";
-        readonly type: "path";
-        readonly required: true;
-        readonly description: "Execution-owned Artifact/Evidence filesystem root";
-    }, {
-        readonly key: "browserExecutorConfigPath";
-        readonly type: "path";
-        readonly required: true;
-        readonly description: "Absolute configuration path for the formal Browser Reality Bridge composition";
-    }, {
-        readonly key: "transportCredentialFile";
-        readonly type: "path";
-        readonly required: true;
-        readonly sensitive: true;
-        readonly description: "File containing the Execution Runtime transport credential";
-    }, {
-        readonly key: "identity.endpoint";
-        readonly type: "url";
-        readonly required: true;
-        readonly description: "Loopback platform-host execution identity endpoint";
-    }, {
-        readonly key: "identity.tokenFile";
-        readonly type: "path";
-        readonly required: true;
-        readonly sensitive: true;
-        readonly description: "File containing the Execution-to-platform-host identity transport credential";
-    }, {
-        readonly key: "modelDecision.endpoint";
-        readonly type: "url";
-        readonly required: true;
-        readonly description: "Loopback Model Runtime endpoint used by execution.command-risk.v1";
-    }, {
-        readonly key: "modelDecision.credentialFile";
-        readonly type: "path";
-        readonly required: true;
-        readonly sensitive: true;
-        readonly description: "File containing the Execution-to-Model transport credential";
-    }];
-    readonly lifecycle: {
-        readonly supported: readonly ["describe", "preflight", "status", "verify", "doctor", "start", "stop", "restart", "uninstall"];
-    };
-    readonly verification: {
-        readonly checks: readonly [{
-            readonly id: "execution-runtime-critical-proofs";
-            readonly description: "Execution Runtime critical proofs pass";
-            readonly lifecycle: "verify";
-        }];
-    };
+    readonly configSlots: readonly [];
     readonly effects: readonly [{
         readonly kind: "process";
         readonly description: "Runs the single backend Execution Runtime service";
@@ -96,13 +38,8 @@ export declare const descriptor: {
         readonly description: "Persists execution state, output references and evidence in WAL SQLite";
         readonly retention: "preserve";
     }];
-    readonly documentation: readonly [{
-        readonly id: "overview";
-        readonly path: "./README.md";
-        readonly description: "Execution Runtime package overview";
-    }, {
-        readonly id: "configuration";
-        readonly path: "./CONFIGURATION.md";
-        readonly description: "Module configuration fields, sources and materialization instructions";
-    }];
+    readonly documentation: {
+        readonly docs: "DOCS.md";
+        readonly setup: "SETUP.md";
+    };
 };

package/dist/deployment/descriptor.js

@@ -3,7 +3,7 @@ export const descriptor = {
     contractVersion: "1.0.0",
     moduleRef: "execution-runtime",
     packageName: "@tomflow/proflow-execution-runtime",
-    moduleVersion: "0.1.5",
+    moduleVersion: "0.1.7",
     kind: "service",
     templateVersion: "1.0.0",
     platformCompatibility: ">=1.0.0 <2.0.0",
@@ -35,87 +35,7 @@ export const descriptor = {
             access: "read-write",
         },
     ],
-    configSlots: [
-        {
-            key: "databasePath",
-            type: "path",
-            required: true,
-            description: "Execution SQLite database",
-        },
-        {
-            key: "projectRoot",
-            type: "path",
-            required: true,
-            description: "Canonical project boundary consumed by the local executor",
-        },
-        {
-            key: "artifactRoot",
-            type: "path",
-            required: true,
-            description: "Execution-owned Artifact/Evidence filesystem root",
-        },
-        {
-            key: "browserExecutorConfigPath",
-            type: "path",
-            required: true,
-            description: "Absolute configuration path for the formal Browser Reality Bridge composition",
-        },
-        {
-            key: "transportCredentialFile",
-            type: "path",
-            required: true,
-            sensitive: true,
-            description: "File containing the Execution Runtime transport credential",
-        },
-        {
-            key: "identity.endpoint",
-            type: "url",
-            required: true,
-            description: "Loopback platform-host execution identity endpoint",
-        },
-        {
-            key: "identity.tokenFile",
-            type: "path",
-            required: true,
-            sensitive: true,
-            description: "File containing the Execution-to-platform-host identity transport credential",
-        },
-        {
-            key: "modelDecision.endpoint",
-            type: "url",
-            required: true,
-            description: "Loopback Model Runtime endpoint used by execution.command-risk.v1",
-        },
-        {
-            key: "modelDecision.credentialFile",
-            type: "path",
-            required: true,
-            sensitive: true,
-            description: "File containing the Execution-to-Model transport credential",
-        },
-    ],
-    lifecycle: {
-        supported: [
-            "describe",
-            "preflight",
-            "status",
-            "verify",
-            "doctor",
-            "start",
-            "stop",
-            "restart",
-            "uninstall",
-        ],
-    },
-    verification: {
-        checks: [
-            {
-                id: "execution-runtime-critical-proofs",
-                description: "Execution Runtime critical proofs pass",
-                lifecycle: "verify",
-            },
-        ],
-    },
+    configSlots: [],
     effects: [
         {
             kind: "process",
@@ -128,16 +48,8 @@ export const descriptor = {
             retention: "preserve",
         },
     ],
-    documentation: [
-        {
-            id: "overview",
-            path: "./README.md",
-            description: "Execution Runtime package overview",
-        },
-        {
-            id: "configuration",
-            path: "./CONFIGURATION.md",
-            description: "Module configuration fields, sources and materialization instructions",
-        },
-    ],
+    documentation: {
+        docs: "DOCS.md",
+        setup: "SETUP.md",
+    },
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tomflow/proflow-execution-runtime",
-  "version": "0.1.5",
+  "version": "0.1.7",
   "type": "module",
   "publishConfig": {
     "access": "public"
@@ -20,17 +20,18 @@
     "proflow.module.json",
     "conformance.json",
     "README.md",
-    "CONFIGURATION.md"
+    "DOCS.md",
+    "SETUP.md"
   ],
   "dependencies": {
-    "@tomflow/proflow-execution-contracts": "^0.1.2",
-    "@tomflow/proflow-module-contract": "^0.1.1",
-    "@tomflow/proflow-model-contracts": "^0.1.2",
-    "@tomflow/proflow-execution-local": "^0.1.3",
-    "@tomflow/proflow-execution-browser-extension": "^0.1.3"
+    "@tomflow/proflow-module-contract": "^0.1.4",
+    "@tomflow/proflow-execution-browser-extension": "^0.1.5",
+    "@tomflow/proflow-execution-contracts": "^0.1.4",
+    "@tomflow/proflow-model-contracts": "^0.1.4",
+    "@tomflow/proflow-execution-local": "^0.1.5"
   },
   "devDependencies": {
-    "@tomflow/proflow-deployment-conformance": "^0.1.2"
+    "@tomflow/proflow-deployment-conformance": "^0.1.4"
   },
   "description": "Durable, policy-controlled Execution Core orchestration over SQLite and controlled executor ports.",
   "keywords": [

package/proflow.module.json

@@ -3,7 +3,7 @@
 	"contractVersion": "1.0.0",
 	"moduleRef": "execution-runtime",
 	"packageName": "@tomflow/proflow-execution-runtime",
-	"moduleVersion": "0.1.5",
+	"moduleVersion": "0.1.7",
 	"kind": "service",
 	"templateVersion": "1.0.0",
 	"platformCompatibility": ">=1.0.0 <2.0.0",
@@ -35,87 +35,7 @@
 			"access": "read-write"
 		}
 	],
-	"configSlots": [
-		{
-			"key": "databasePath",
-			"type": "path",
-			"required": true,
-			"description": "Execution SQLite database"
-		},
-		{
-			"key": "projectRoot",
-			"type": "path",
-			"required": true,
-			"description": "Canonical project boundary consumed by the local executor"
-		},
-		{
-			"key": "artifactRoot",
-			"type": "path",
-			"required": true,
-			"description": "Execution-owned Artifact/Evidence filesystem root"
-		},
-		{
-			"key": "browserExecutorConfigPath",
-			"type": "path",
-			"required": true,
-			"description": "Absolute configuration path for the formal Browser Reality Bridge composition"
-		},
-		{
-			"key": "transportCredentialFile",
-			"type": "path",
-			"required": true,
-			"sensitive": true,
-			"description": "File containing the Execution Runtime transport credential"
-		},
-		{
-			"key": "identity.endpoint",
-			"type": "url",
-			"required": true,
-			"description": "Loopback platform-host execution identity endpoint"
-		},
-		{
-			"key": "identity.tokenFile",
-			"type": "path",
-			"required": true,
-			"sensitive": true,
-			"description": "File containing the Execution-to-platform-host identity transport credential"
-		},
-		{
-			"key": "modelDecision.endpoint",
-			"type": "url",
-			"required": true,
-			"description": "Loopback Model Runtime endpoint used by execution.command-risk.v1"
-		},
-		{
-			"key": "modelDecision.credentialFile",
-			"type": "path",
-			"required": true,
-			"sensitive": true,
-			"description": "File containing the Execution-to-Model transport credential"
-		}
-	],
-	"lifecycle": {
-		"supported": [
-			"describe",
-			"preflight",
-			"status",
-			"verify",
-			"doctor",
-			"start",
-			"stop",
-			"restart",
-			"uninstall"
-		]
-	},
-	"verification": {
-		"checks": [
-			{
-				"id": "execution-runtime-critical-proofs",
-				"description": "Execution Runtime critical proofs pass",
-				"lifecycle": "verify"
-			}
-		]
-	},
+	"configSlots": [],
 	"effects": [
 		{
 			"kind": "process",
@@ -128,16 +48,8 @@
 			"retention": "preserve"
 		}
 	],
-	"documentation": [
-		{
-			"id": "overview",
-			"path": "./README.md",
-			"description": "Execution Runtime package overview"
-		},
-		{
-			"id": "configuration",
-			"path": "./CONFIGURATION.md",
-			"description": "Module configuration fields, sources and materialization instructions"
-		}
-	]
+	"documentation": {
+		"docs": "DOCS.md",
+		"setup": "SETUP.md"
+	}
 }

package/CONFIGURATION.md

@@ -1,31 +0,0 @@
-# execution-runtime configuration
-
-Canonical public config: `.proflow/config/execution-runtime.json`
-
-This file is Workspace-owned data. `platform uninstall` does not delete it. Values are JSON strings. Raw secrets must not be stored here; `secretRef` fields contain opaque references only.
-
-## Fields
-
-| Key | Type | Required | Sensitive | Source | Meaning |
-|---|---|---:|---:|---|---|
-| `databasePath` | `path` | yes | no | User or owning Module supplies an absolute/local path that exists on this Workspace. | Execution SQLite database |
-| `projectRoot` | `path` | yes | no | User or owning Module supplies an absolute/local path that exists on this Workspace. | Canonical project boundary consumed by the local executor |
-| `artifactRoot` | `path` | yes | no | User or owning Module supplies an absolute/local path that exists on this Workspace. | Execution-owned Artifact/Evidence filesystem root |
-| `browserExecutorConfigPath` | `path` | yes | no | User or owning Module supplies an absolute/local path that exists on this Workspace. | Absolute configuration path for the formal Browser Reality Bridge composition |
-| `transportCredentialFile` | `path` | yes | yes | User or owning Module supplies an absolute/local path that exists on this Workspace. | File containing the Execution Runtime transport credential |
-| `identity.endpoint` | `url` | yes | no | User or owning external/runtime Module supplies the reachable endpoint URL. | Loopback platform-host execution identity endpoint |
-| `identity.tokenFile` | `path` | yes | yes | User or owning Module supplies an absolute/local path that exists on this Workspace. | File containing the Execution-to-platform-host identity transport credential |
-| `modelDecision.endpoint` | `url` | yes | no | User or owning external/runtime Module supplies the reachable endpoint URL. | Loopback Model Runtime endpoint used by execution.command-risk.v1 |
-| `modelDecision.credentialFile` | `path` | yes | yes | User or owning Module supplies an absolute/local path that exists on this Workspace. | File containing the Execution-to-Model transport credential |
-
-## Materialize
-
-Create or update the canonical JSON object at:
-
-`.proflow/config/execution-runtime.json`
-
-Use only declared keys and string values. Do not create a second Platform configuration database.
-
-## Base completion check
-
-Run `platform modules`. This Module should no longer report required keys in `missingConfig`. `platform start` performs the authoritative Module-owned validation before starting anything.