@tomflow/proflow-platform-host 0.1.15 → 0.1.17

package/CHANGELOG.md

@@ -1,55 +1,7 @@
 # @tomflow/proflow-platform-host
 
-## 0.1.15
+## 0.1.17
 
 ### Patch Changes
 
-- Close the Real-3 source candidate and real-workspace loop: fail-closed Browser submit verification, worker-bound Task mutation and WAKE confirmation, detached platform start ownership with shell return, discoverable docs, and targeted single-package Workspace update.
-
-## 0.1.14
-
-### Patch Changes
-
-- Retire the obsolete Carrier package and Browser standalone management CLI, make Platform setup/status preserve owner and dependency semantics, and enforce read-only status observation across the final Real-3 deployment closeout.
-
-## 0.1.13
-
-### Patch Changes
-
-- Ship the Phase 3 browser, tunnel, model automation, platform readiness, and documentation closure as one verifiable platform snapshot.
-
-## 0.1.12
-
-### Patch Changes
-
-- Distinguish dependency blocking from verified failure, expose Module-owned status diagnostics, remove automatic docs paging, consolidate start checks, add contextual help, and clarify uninstall output.
-
-## 0.1.11
-
-### Patch Changes
-
-- Upgrade the ProFlow terminal experience, stream Registry and package-manager progress, publish structured Chinese Module documentation, and provide numbered package-owned Setup assistants.
-
-## 0.1.10
-
-### Patch Changes
-
-- Improve terminal progress and localized status output, publish readable Chinese module docs, and add guided setup assistants for external resources.
-
-## 0.1.9
-
-### Patch Changes
-
-- Resolve DOCS.md from both source and built deployment adapters, prove all 24 built adapters return the published body, and announce package synchronization before the package manager blocks.
-
-## 0.1.8
-
-### Patch Changes
-
-- Replace JSON terminal protocols with typed CLI outcomes, add real-time Chinese progress and lifecycle summaries, publish DOCS content, standardize executable setup plans and package-owned setup commands, and preserve only user-owned pnpm policy during uninstall.
-
-## 0.1.7
-
-### Patch Changes
-
-- Align all Modules to the seven-command setup contract with executable package-owned setup guidance and full Platform setup aggregation.
+- Harden Real-3 Browser Carrier reality: controlled ChatGPT composer submission, authoritative action-permission classification, bounded binding-race deferral, Carrier Attention web relay and restart recovery, and human-deny precedence across automatic recovery.

package/dist/deployment/adapter.d.ts

@@ -6,7 +6,7 @@ export declare const behaviorAdapter: {
             ok: true;
             status: "SUCCEEDED";
             moduleRef: "platform-host";
-            moduleVersion: "0.1.15";
+            moduleVersion: "0.1.17";
             data: {
                 endpoint: string;
                 stateRoot: string;
@@ -24,7 +24,7 @@ export declare const behaviorAdapter: {
             readonly ok: true;
             readonly status: "SUCCEEDED";
             readonly moduleRef: "platform-host";
-            readonly moduleVersion: "0.1.15";
+            readonly moduleVersion: "0.1.17";
         };
         observedEffects: string[];
     }>;
@@ -34,7 +34,7 @@ export declare const behaviorAdapter: {
             ok: true;
             status: "SUCCEEDED";
             moduleRef: "platform-host";
-            moduleVersion: "0.1.15";
+            moduleVersion: "0.1.17";
             data: {
                 setupStatus: "READY";
                 runtimeStatus: "RUNNING" | "STOPPED";
@@ -55,7 +55,7 @@ export declare const behaviorAdapter: {
             ok: true;
             status: "SUCCEEDED";
             moduleRef: "platform-host";
-            moduleVersion: "0.1.15";
+            moduleVersion: "0.1.17";
             data: {
                 endpoint: string;
                 stateRoot: string;
@@ -73,7 +73,7 @@ export declare const behaviorAdapter: {
             ok: true;
             status: "SUCCEEDED";
             moduleRef: "platform-host";
-            moduleVersion: "0.1.15";
+            moduleVersion: "0.1.17";
             data: {
                 docs: string;
             };
@@ -86,7 +86,7 @@ export declare const behaviorAdapter: {
             ok: true;
             status: "SUCCEEDED";
             moduleRef: "platform-host";
-            moduleVersion: "0.1.15";
+            moduleVersion: "0.1.17";
             data: {
                 host: string;
                 port: number;
@@ -97,7 +97,7 @@ export declare const behaviorAdapter: {
         result: {
             contract: "deployment.result.v1";
             moduleRef: "platform-host";
-            moduleVersion: "0.1.15";
+            moduleVersion: "0.1.17";
             ok: false;
             status: "FAILED";
             error: {
@@ -114,7 +114,7 @@ export declare const behaviorAdapter: {
             readonly ok: true;
             readonly status: "SUCCEEDED";
             readonly moduleRef: "platform-host";
-            readonly moduleVersion: "0.1.15";
+            readonly moduleVersion: "0.1.17";
         };
         observedEffects: string[];
     } | {
@@ -123,11 +123,11 @@ export declare const behaviorAdapter: {
             readonly ok: true;
             readonly status: "SUCCEEDED";
             readonly moduleRef: "platform-host";
-            readonly moduleVersion: "0.1.15";
+            readonly moduleVersion: "0.1.17";
         } | {
             contract: "deployment.result.v1";
             moduleRef: "platform-host";
-            moduleVersion: "0.1.15";
+            moduleVersion: "0.1.17";
             ok: false;
             status: "FAILED";
             error: {

package/dist/deployment/descriptor.d.ts

@@ -3,7 +3,7 @@ export declare const descriptor: {
     readonly contractVersion: "1.0.0";
     readonly moduleRef: "platform-host";
     readonly packageName: "@tomflow/proflow-platform-host";
-    readonly moduleVersion: "0.1.15";
+    readonly moduleVersion: "0.1.17";
     readonly kind: "service";
     readonly templateVersion: "1.0.0";
     readonly platformCompatibility: ">=1.0.0 <2.0.0";

package/dist/deployment/descriptor.js

@@ -3,7 +3,7 @@ export const descriptor = {
     contractVersion: "1.0.0",
     moduleRef: "platform-host",
     packageName: "@tomflow/proflow-platform-host",
-    moduleVersion: "0.1.15",
+    moduleVersion: "0.1.17",
     kind: "service",
     templateVersion: "1.0.0",
     platformCompatibility: ">=1.0.0 <2.0.0",

package/dist/src/browser-permission-policy.d.ts

@@ -0,0 +1,36 @@
+import { type RolePackageRef } from "./role-operations.ts";
+export type BrowserPermissionRole = {
+    agentPackageRef: RolePackageRef;
+    registeredPackageVersion: string;
+    roleRef: string;
+    carrierUrl: string;
+};
+export type RoleCarrierValidation = {
+    agentPackageRef: string;
+    registeredPackageVersion: string;
+    roleRef: string;
+    carrierUrl: string;
+    gatewayUrl: string;
+};
+export type BrowserPermissionDecision = {
+    decision: "AUTO_ALLOW" | "DEFER" | "HUMAN_REQUIRED";
+    reason: "KNOWN_PROFLOW_ACTION" | "TASK_BINDING_PENDING" | "ROLE_VALIDATION_MISMATCH" | "GATEWAY_MISMATCH" | "OPERATION_NOT_AUTHORIZED" | "CONTEXT_MISMATCH";
+};
+export type BrowserPermissionContext = {
+    conversationLocator: string;
+    workerRef: string | null;
+    taskBinding: {
+        agentPackageRef: string;
+        roleRef: string;
+        workerRef: string | null;
+        conversationLocator: string | null;
+    } | null;
+};
+export declare function classifyBrowserPermission(input: {
+    role: BrowserPermissionRole;
+    validation: RoleCarrierValidation | null;
+    targetHost: string | null;
+    currentGatewayUrl: string | null;
+    operationId: string;
+    context: BrowserPermissionContext;
+}): BrowserPermissionDecision;

package/dist/src/browser-permission-policy.js

@@ -0,0 +1,82 @@
+import { roleOperations } from "./role-operations.js";
+const loopbackHosts = new Set(["localhost", "127.0.0.1", "::1", "[::1]"]);
+function validWorkerConversation(role, context) {
+    const workerRef = context.workerRef;
+    if (!workerRef)
+        return false;
+    try {
+        const locator = new URL(context.conversationLocator);
+        const segments = locator.pathname.split("/").filter(Boolean);
+        return (locator.protocol === "https:" &&
+            locator.hostname === "chatgpt.com" &&
+            locator.username === "" &&
+            locator.password === "" &&
+            locator.search === "" &&
+            locator.hash === "" &&
+            segments.length === 4 &&
+            segments[0] === "g" &&
+            segments[1] === role.roleRef &&
+            segments[2] === "c" &&
+            segments[3] === workerRef);
+    }
+    catch {
+        return false;
+    }
+}
+function classifyContext(role, context) {
+    if (!validWorkerConversation(role, context))
+        return { decision: "HUMAN_REQUIRED", reason: "CONTEXT_MISMATCH" };
+    const binding = context.taskBinding;
+    if (binding === null ||
+        binding.agentPackageRef !== role.agentPackageRef ||
+        binding.roleRef !== role.roleRef)
+        return { decision: "HUMAN_REQUIRED", reason: "CONTEXT_MISMATCH" };
+    if (binding.workerRef === null && binding.conversationLocator === null)
+        return { decision: "DEFER", reason: "TASK_BINDING_PENDING" };
+    if (binding.workerRef !== context.workerRef ||
+        binding.conversationLocator !== context.conversationLocator)
+        return { decision: "HUMAN_REQUIRED", reason: "CONTEXT_MISMATCH" };
+    return { decision: "AUTO_ALLOW", reason: "KNOWN_PROFLOW_ACTION" };
+}
+export function classifyBrowserPermission(input) {
+    const validation = input.validation;
+    if (validation === null ||
+        validation.agentPackageRef !== input.role.agentPackageRef ||
+        validation.registeredPackageVersion !==
+            input.role.registeredPackageVersion ||
+        validation.roleRef !== input.role.roleRef ||
+        validation.carrierUrl !== input.role.carrierUrl)
+        return { decision: "HUMAN_REQUIRED", reason: "ROLE_VALIDATION_MISMATCH" };
+    let trustedHost;
+    try {
+        const gateway = new URL(validation.gatewayUrl);
+        const currentGateway = new URL(input.currentGatewayUrl ?? "");
+        const trustedTransport = gateway.protocol === "https:" ||
+            (gateway.protocol === "http:" && loopbackHosts.has(gateway.hostname));
+        if (!trustedTransport ||
+            currentGateway.origin !== gateway.origin ||
+            gateway.pathname !== "/" ||
+            gateway.search !== "" ||
+            gateway.hash !== "" ||
+            gateway.username !== "" ||
+            gateway.password !== "" ||
+            currentGateway.pathname !== "/" ||
+            currentGateway.search !== "" ||
+            currentGateway.hash !== "" ||
+            currentGateway.username !== "" ||
+            currentGateway.password !== "")
+            return { decision: "HUMAN_REQUIRED", reason: "GATEWAY_MISMATCH" };
+        trustedHost = gateway.hostname.toLowerCase();
+    }
+    catch {
+        return { decision: "HUMAN_REQUIRED", reason: "GATEWAY_MISMATCH" };
+    }
+    if (input.targetHost?.toLowerCase() !== trustedHost)
+        return { decision: "HUMAN_REQUIRED", reason: "GATEWAY_MISMATCH" };
+    if (!roleOperations[input.role.agentPackageRef].has(input.operationId))
+        return {
+            decision: "HUMAN_REQUIRED",
+            reason: "OPERATION_NOT_AUTHORIZED",
+        };
+    return classifyContext(input.role, input.context);
+}

package/dist/src/index.js

@@ -9,8 +9,12 @@ import { createTaskServices, publicOperationNames, } from "@tomflow/proflow-task
 import { SqliteTaskStore } from "@tomflow/proflow-task-store-sqlite";
 import { taskMigrations } from "@tomflow/proflow-task-store-sqlite/migrations";
 import { z } from "zod";
+import { classifyBrowserPermission, } from "./browser-permission-policy.js";
 import { roleOperations, rolePackageRefs, } from "./role-operations.js";
 const loopbackHosts = new Set(["localhost", "127.0.0.1", "::1", "[::1]"]);
+// Business owner calls are Promise-driven. This is only a last-resort transport
+// watchdog for a hung local call, not a normal workflow deadline.
+const OWNER_INVOKE_WATCHDOG_MS = 120_000;
 const systemObserverReasonResultSchema = z
     .object({
     scope: z.string().min(1).max(240).optional(),
@@ -305,7 +309,7 @@ function createOwnerHttpClient(owner, baseUrl, credential) {
                         body: JSON.stringify(requestBody),
                     }
                     : {}),
-                signal: AbortSignal.timeout(45_000),
+                signal: AbortSignal.timeout(OWNER_INVOKE_WATCHDOG_MS),
             }));
         },
     });
@@ -913,6 +917,47 @@ async function constructGraph(config, executionCredential, modelCredential) {
             throw new Error("ROLE_NOT_FOUND");
         return role;
     };
+    const browserPermissionRole = (roleRef) => {
+        const role = agent
+            .listRegisteredRoles()
+            .find((candidate) => candidate.roleRef === roleRef);
+        if (!role ||
+            !rolePackageRefs.includes(role.agentPackageRef))
+            return null;
+        return { ...role, agentPackageRef: role.agentPackageRef };
+    };
+    const roleCarrierValidation = async (agentPackageRef) => {
+        try {
+            const value = object(JSON.parse(await readFile(join(config.workspaceRoot, ".proflow", "state", "agent", "role-carrier-validation", `${encodeURIComponent(agentPackageRef)}.json`), "utf8")), "role carrier validation evidence");
+            if (value.contract !== "proflow.role-carrier-validation.v1")
+                return null;
+            return {
+                agentPackageRef: string(value.agentPackageRef, "agentPackageRef"),
+                registeredPackageVersion: string(value.registeredPackageVersion, "registeredPackageVersion"),
+                roleRef: string(value.roleRef, "roleRef"),
+                carrierUrl: string(value.carrierUrl, "carrierUrl"),
+                gatewayUrl: string(value.gatewayUrl, "gatewayUrl"),
+            };
+        }
+        catch {
+            return null;
+        }
+    };
+    const currentAgentGatewayUrl = async () => {
+        try {
+            const value = object(JSON.parse(await readFile(join(config.workspaceRoot, ".proflow", "runtime", "modules", "agent-gateway", "shared-facts.json"), "utf8")), "agent gateway shared facts");
+            if (value.contract !== "proflow.module-shared-facts.v1" ||
+                value.moduleRef !== "agent-gateway")
+                return null;
+            const facts = object(value.facts, "agent gateway facts");
+            return typeof facts.publicBaseUrl === "string"
+                ? facts.publicBaseUrl
+                : null;
+        }
+        catch {
+            return null;
+        }
+    };
     const roleManagement = Object.freeze({
         async invoke(operation, rawInput) {
             const value = object(rawInput, "role management input");
@@ -1119,6 +1164,41 @@ async function constructGraph(config, executionCredential, modelCredential) {
             const value = object(rawInput, "observer application input");
             if (operation === "task.projection")
                 return taskDriverPorts.getTaskDriveProjection(string(value.taskId, "taskId"));
+            if (operation === "browser.permission.classify") {
+                const roleRef = string(value.roleRef, "roleRef");
+                const taskId = string(value.taskId, "taskId");
+                const operationId = string(value.operationId, "operationId");
+                const conversationLocator = string(value.conversationLocator, "conversationLocator");
+                const workerRef = typeof value.workerRef === "string" ? value.workerRef : null;
+                const role = browserPermissionRole(roleRef);
+                if (!role)
+                    return {
+                        decision: "HUMAN_REQUIRED",
+                        reason: "ROLE_VALIDATION_MISMATCH",
+                    };
+                let taskBinding = null;
+                try {
+                    const current = unwrap(task.queries.getTask({ taskId }));
+                    taskBinding =
+                        current.roleBindings.find((candidate) => candidate.roleRef === roleRef &&
+                            candidate.agentPackageRef === role.agentPackageRef) ?? null;
+                }
+                catch {
+                    taskBinding = null;
+                }
+                const [validation, currentGatewayUrl] = await Promise.all([
+                    roleCarrierValidation(role.agentPackageRef),
+                    currentAgentGatewayUrl(),
+                ]);
+                return classifyBrowserPermission({
+                    role,
+                    validation,
+                    targetHost: typeof value.targetHost === "string" ? value.targetHost : null,
+                    currentGatewayUrl,
+                    operationId,
+                    context: { conversationLocator, workerRef, taskBinding },
+                });
+            }
             if (operation === "browser.binding")
                 return browserOwnerPorts.task.getWorkerBinding(string(value.taskId, "taskId"), string(value.roleRef, "roleRef"));
             if (operation === "browser.bindWorker") {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tomflow/proflow-platform-host",
-  "version": "0.1.15",
+  "version": "0.1.17",
   "type": "module",
   "publishConfig": {
     "access": "public"
@@ -24,19 +24,19 @@
   ],
   "dependencies": {
     "zod": "4.1.12",
-    "@tomflow/proflow-agent-runtime": "^0.1.13",
-    "@tomflow/proflow-execution-contracts": "^0.1.10",
-    "@tomflow/proflow-module-contract": "^0.1.13",
     "@tomflow/proflow-task-migration-runner": "^0.1.11",
+    "@tomflow/proflow-execution-browser-extension": "^0.1.38",
     "@tomflow/proflow-task-orchestration": "^0.1.10",
     "@tomflow/proflow-task-store-sqlite": "^0.1.11",
-    "@tomflow/proflow-execution-browser-extension": "^0.1.26"
+    "@tomflow/proflow-agent-runtime": "^0.1.13",
+    "@tomflow/proflow-module-contract": "^0.1.13",
+    "@tomflow/proflow-execution-contracts": "^0.1.10"
   },
   "devDependencies": {
-    "@tomflow/proflow-agent-gateway": "^0.1.15",
+    "@tomflow/proflow-model-runtime": "^0.1.22",
     "@tomflow/proflow-deployment-conformance": "^0.1.13",
-    "@tomflow/proflow-execution-runtime": "^0.1.15",
-    "@tomflow/proflow-model-runtime": "^0.1.20"
+    "@tomflow/proflow-agent-gateway": "^0.1.15",
+    "@tomflow/proflow-execution-runtime": "^0.1.17"
   },
   "description": "Provides the ProFlow local application composition root that binds Task, Agent, Execution and Model owner transports.",
   "keywords": [

package/proflow.module.json

@@ -3,7 +3,7 @@
 	"contractVersion": "1.0.0",
 	"moduleRef": "platform-host",
 	"packageName": "@tomflow/proflow-platform-host",
-	"moduleVersion": "0.1.15",
+	"moduleVersion": "0.1.17",
 	"kind": "service",
 	"templateVersion": "1.0.0",
 	"platformCompatibility": ">=1.0.0 <2.0.0",