@tomflow/proflow-platform-host 0.1.16 → 0.1.18

package/CHANGELOG.md

@@ -0,0 +1,13 @@
+# @tomflow/proflow-platform-host
+
+## 0.1.18
+
+### Patch Changes
+
+- Close Real-3 node generation identity fencing across Platform Host admission, durable Execution idempotency, and Observer/Approval resume provenance.
+
+## 0.1.17
+
+### Patch Changes
+
+- Harden Real-3 Browser Carrier reality: controlled ChatGPT composer submission, authoritative action-permission classification, bounded binding-race deferral, Carrier Attention web relay and restart recovery, and human-deny precedence across automatic recovery.

package/dist/deployment/adapter.d.ts

@@ -6,7 +6,7 @@ export declare const behaviorAdapter: {
             ok: true;
             status: "SUCCEEDED";
             moduleRef: "platform-host";
-            moduleVersion: "0.1.16";
+            moduleVersion: "0.1.18";
             data: {
                 endpoint: string;
                 stateRoot: string;
@@ -24,7 +24,7 @@ export declare const behaviorAdapter: {
             readonly ok: true;
             readonly status: "SUCCEEDED";
             readonly moduleRef: "platform-host";
-            readonly moduleVersion: "0.1.16";
+            readonly moduleVersion: "0.1.18";
         };
         observedEffects: string[];
     }>;
@@ -34,7 +34,7 @@ export declare const behaviorAdapter: {
             ok: true;
             status: "SUCCEEDED";
             moduleRef: "platform-host";
-            moduleVersion: "0.1.16";
+            moduleVersion: "0.1.18";
             data: {
                 setupStatus: "READY";
                 runtimeStatus: "RUNNING" | "STOPPED";
@@ -55,7 +55,7 @@ export declare const behaviorAdapter: {
             ok: true;
             status: "SUCCEEDED";
             moduleRef: "platform-host";
-            moduleVersion: "0.1.16";
+            moduleVersion: "0.1.18";
             data: {
                 endpoint: string;
                 stateRoot: string;
@@ -73,7 +73,7 @@ export declare const behaviorAdapter: {
             ok: true;
             status: "SUCCEEDED";
             moduleRef: "platform-host";
-            moduleVersion: "0.1.16";
+            moduleVersion: "0.1.18";
             data: {
                 docs: string;
             };
@@ -86,7 +86,7 @@ export declare const behaviorAdapter: {
             ok: true;
             status: "SUCCEEDED";
             moduleRef: "platform-host";
-            moduleVersion: "0.1.16";
+            moduleVersion: "0.1.18";
             data: {
                 host: string;
                 port: number;
@@ -97,7 +97,7 @@ export declare const behaviorAdapter: {
         result: {
             contract: "deployment.result.v1";
             moduleRef: "platform-host";
-            moduleVersion: "0.1.16";
+            moduleVersion: "0.1.18";
             ok: false;
             status: "FAILED";
             error: {
@@ -114,7 +114,7 @@ export declare const behaviorAdapter: {
             readonly ok: true;
             readonly status: "SUCCEEDED";
             readonly moduleRef: "platform-host";
-            readonly moduleVersion: "0.1.16";
+            readonly moduleVersion: "0.1.18";
         };
         observedEffects: string[];
     } | {
@@ -123,11 +123,11 @@ export declare const behaviorAdapter: {
             readonly ok: true;
             readonly status: "SUCCEEDED";
             readonly moduleRef: "platform-host";
-            readonly moduleVersion: "0.1.16";
+            readonly moduleVersion: "0.1.18";
         } | {
             contract: "deployment.result.v1";
             moduleRef: "platform-host";
-            moduleVersion: "0.1.16";
+            moduleVersion: "0.1.18";
             ok: false;
             status: "FAILED";
             error: {

package/dist/deployment/descriptor.d.ts

@@ -3,7 +3,7 @@ export declare const descriptor: {
     readonly contractVersion: "1.0.0";
     readonly moduleRef: "platform-host";
     readonly packageName: "@tomflow/proflow-platform-host";
-    readonly moduleVersion: "0.1.16";
+    readonly moduleVersion: "0.1.18";
     readonly kind: "service";
     readonly templateVersion: "1.0.0";
     readonly platformCompatibility: ">=1.0.0 <2.0.0";

package/dist/deployment/descriptor.js

@@ -3,7 +3,7 @@ export const descriptor = {
     contractVersion: "1.0.0",
     moduleRef: "platform-host",
     packageName: "@tomflow/proflow-platform-host",
-    moduleVersion: "0.1.16",
+    moduleVersion: "0.1.18",
     kind: "service",
     templateVersion: "1.0.0",
     platformCompatibility: ">=1.0.0 <2.0.0",

package/dist/src/browser-permission-policy.d.ts

@@ -0,0 +1,36 @@
+import { type RolePackageRef } from "./role-operations.ts";
+export type BrowserPermissionRole = {
+    agentPackageRef: RolePackageRef;
+    registeredPackageVersion: string;
+    roleRef: string;
+    carrierUrl: string;
+};
+export type RoleCarrierValidation = {
+    agentPackageRef: string;
+    registeredPackageVersion: string;
+    roleRef: string;
+    carrierUrl: string;
+    gatewayUrl: string;
+};
+export type BrowserPermissionDecision = {
+    decision: "AUTO_ALLOW" | "DEFER" | "HUMAN_REQUIRED";
+    reason: "KNOWN_PROFLOW_ACTION" | "TASK_BINDING_PENDING" | "ROLE_VALIDATION_MISMATCH" | "GATEWAY_MISMATCH" | "OPERATION_NOT_AUTHORIZED" | "CONTEXT_MISMATCH";
+};
+export type BrowserPermissionContext = {
+    conversationLocator: string;
+    workerRef: string | null;
+    taskBinding: {
+        agentPackageRef: string;
+        roleRef: string;
+        workerRef: string | null;
+        conversationLocator: string | null;
+    } | null;
+};
+export declare function classifyBrowserPermission(input: {
+    role: BrowserPermissionRole;
+    validation: RoleCarrierValidation | null;
+    targetHost: string | null;
+    currentGatewayUrl: string | null;
+    operationId: string;
+    context: BrowserPermissionContext;
+}): BrowserPermissionDecision;

package/dist/src/browser-permission-policy.js

@@ -0,0 +1,82 @@
+import { roleOperations } from "./role-operations.js";
+const loopbackHosts = new Set(["localhost", "127.0.0.1", "::1", "[::1]"]);
+function validWorkerConversation(role, context) {
+    const workerRef = context.workerRef;
+    if (!workerRef)
+        return false;
+    try {
+        const locator = new URL(context.conversationLocator);
+        const segments = locator.pathname.split("/").filter(Boolean);
+        return (locator.protocol === "https:" &&
+            locator.hostname === "chatgpt.com" &&
+            locator.username === "" &&
+            locator.password === "" &&
+            locator.search === "" &&
+            locator.hash === "" &&
+            segments.length === 4 &&
+            segments[0] === "g" &&
+            segments[1] === role.roleRef &&
+            segments[2] === "c" &&
+            segments[3] === workerRef);
+    }
+    catch {
+        return false;
+    }
+}
+function classifyContext(role, context) {
+    if (!validWorkerConversation(role, context))
+        return { decision: "HUMAN_REQUIRED", reason: "CONTEXT_MISMATCH" };
+    const binding = context.taskBinding;
+    if (binding === null ||
+        binding.agentPackageRef !== role.agentPackageRef ||
+        binding.roleRef !== role.roleRef)
+        return { decision: "HUMAN_REQUIRED", reason: "CONTEXT_MISMATCH" };
+    if (binding.workerRef === null && binding.conversationLocator === null)
+        return { decision: "DEFER", reason: "TASK_BINDING_PENDING" };
+    if (binding.workerRef !== context.workerRef ||
+        binding.conversationLocator !== context.conversationLocator)
+        return { decision: "HUMAN_REQUIRED", reason: "CONTEXT_MISMATCH" };
+    return { decision: "AUTO_ALLOW", reason: "KNOWN_PROFLOW_ACTION" };
+}
+export function classifyBrowserPermission(input) {
+    const validation = input.validation;
+    if (validation === null ||
+        validation.agentPackageRef !== input.role.agentPackageRef ||
+        validation.registeredPackageVersion !==
+            input.role.registeredPackageVersion ||
+        validation.roleRef !== input.role.roleRef ||
+        validation.carrierUrl !== input.role.carrierUrl)
+        return { decision: "HUMAN_REQUIRED", reason: "ROLE_VALIDATION_MISMATCH" };
+    let trustedHost;
+    try {
+        const gateway = new URL(validation.gatewayUrl);
+        const currentGateway = new URL(input.currentGatewayUrl ?? "");
+        const trustedTransport = gateway.protocol === "https:" ||
+            (gateway.protocol === "http:" && loopbackHosts.has(gateway.hostname));
+        if (!trustedTransport ||
+            currentGateway.origin !== gateway.origin ||
+            gateway.pathname !== "/" ||
+            gateway.search !== "" ||
+            gateway.hash !== "" ||
+            gateway.username !== "" ||
+            gateway.password !== "" ||
+            currentGateway.pathname !== "/" ||
+            currentGateway.search !== "" ||
+            currentGateway.hash !== "" ||
+            currentGateway.username !== "" ||
+            currentGateway.password !== "")
+            return { decision: "HUMAN_REQUIRED", reason: "GATEWAY_MISMATCH" };
+        trustedHost = gateway.hostname.toLowerCase();
+    }
+    catch {
+        return { decision: "HUMAN_REQUIRED", reason: "GATEWAY_MISMATCH" };
+    }
+    if (input.targetHost?.toLowerCase() !== trustedHost)
+        return { decision: "HUMAN_REQUIRED", reason: "GATEWAY_MISMATCH" };
+    if (!roleOperations[input.role.agentPackageRef].has(input.operationId))
+        return {
+            decision: "HUMAN_REQUIRED",
+            reason: "OPERATION_NOT_AUTHORIZED",
+        };
+    return classifyContext(input.role, input.context);
+}

package/dist/src/index.js

@@ -9,6 +9,7 @@ import { createTaskServices, publicOperationNames, } from "@tomflow/proflow-task
 import { SqliteTaskStore } from "@tomflow/proflow-task-store-sqlite";
 import { taskMigrations } from "@tomflow/proflow-task-store-sqlite/migrations";
 import { z } from "zod";
+import { classifyBrowserPermission, } from "./browser-permission-policy.js";
 import { roleOperations, rolePackageRefs, } from "./role-operations.js";
 const loopbackHosts = new Set(["localhost", "127.0.0.1", "::1", "[::1]"]);
 // Business owner calls are Promise-driven. This is only a last-resort transport
@@ -388,6 +389,7 @@ async function constructGraph(config, executionCredential, modelCredential) {
         return {
             taskId: value.taskId,
             status: value.status,
+            currentNodeId: value.currentNodeId,
             roleBindings: value.roleBindings,
         };
     };
@@ -822,7 +824,11 @@ async function constructGraph(config, executionCredential, modelCredential) {
             if (request.projectRoot &&
                 resolve(request.projectRoot) !== config.workspaceRoot)
                 return false;
-            if ((request.nodeId || request.runNo) && !request.taskId)
+            const nodeScoped = request.nodeId !== undefined || request.runNo !== undefined;
+            if (nodeScoped &&
+                (request.nodeId === undefined || request.runNo === undefined))
+                return false;
+            if (nodeScoped && !request.taskId)
                 return false;
             if (request.workerRef && !request.taskId)
                 return false;
@@ -841,12 +847,30 @@ async function constructGraph(config, executionCredential, modelCredential) {
                         taskId: request.taskId,
                         workerRef: request.workerRef,
                     });
-                if (request.nodeId)
-                    unwrap(task.queries.getNodeContext({
+                if (request.nodeId) {
+                    const nodeContext = unwrap(task.queries.getNodeContext({
                         taskId: request.taskId,
                         nodeId: request.nodeId,
-                        ...(request.runNo ? { runNo: request.runNo } : {}),
                     }));
+                    if (taskFact.status !== "ACTIVE")
+                        return false;
+                    if (taskFact.currentNodeId !== nodeContext.node.nodeId)
+                        return false;
+                    if (request.runNo !== nodeContext.node.runNo)
+                        return false;
+                    if (!browserCapability &&
+                        nodeContext.node.status !== "IN_PROGRESS")
+                        return false;
+                    const nodeBinding = taskFact.roleBindings.find((candidate) => candidate.agentPackageRef ===
+                        nodeContext.node.requiredAgentPackageRef);
+                    if (!nodeBinding?.workerRef)
+                        return false;
+                    const scopedRoleRef = request.roleRef ?? (internalBrowserCaller ? undefined : request.callerRef);
+                    if (scopedRoleRef !== nodeBinding.roleRef)
+                        return false;
+                    if (request.workerRef !== nodeBinding.workerRef)
+                        return false;
+                }
                 const browserInput = object(request.input, "execution input");
                 if (browserCapability) {
                     const targetRoleRef = string(browserInput.roleRef, "input.roleRef");
@@ -860,6 +884,29 @@ async function constructGraph(config, executionCredential, modelCredential) {
                         const targetWorkerRef = string(browserInput.workerRef, "input.workerRef");
                         if (binding.workerRef !== targetWorkerRef)
                             return false;
+                        if (request.capability === "worker.wake" &&
+                            (targetRoleRef !== request.roleRef ||
+                                targetWorkerRef !== request.workerRef ||
+                                browserInput.taskId !== request.taskId ||
+                                browserInput.nodeId !== request.nodeId ||
+                                browserInput.runNo !== request.runNo))
+                            return false;
+                        if (request.capability === "worker.wake") {
+                            const nodeContext = unwrap(task.queries.getNodeContext({
+                                taskId: request.taskId,
+                                nodeId: string(browserInput.nodeId, "input.nodeId"),
+                            }));
+                            const trigger = string(browserInput.trigger, "input.trigger");
+                            const readyWake = nodeContext.node.status === "READY" &&
+                                ((trigger === "NODE_READY" && nodeContext.node.runNo === 1) ||
+                                    (trigger === "REOPEN" && nodeContext.node.runNo > 1));
+                            const resumeWake = nodeContext.node.status === "IN_PROGRESS" &&
+                                (trigger === "RECOVERY_RESUME" ||
+                                    trigger === "EXECUTION_RESULT_READY" ||
+                                    trigger === "PEER_REPLY_READY");
+                            if (!readyWake && !resumeWake)
+                                return false;
+                        }
                     }
                 }
             }
@@ -916,6 +963,47 @@ async function constructGraph(config, executionCredential, modelCredential) {
             throw new Error("ROLE_NOT_FOUND");
         return role;
     };
+    const browserPermissionRole = (roleRef) => {
+        const role = agent
+            .listRegisteredRoles()
+            .find((candidate) => candidate.roleRef === roleRef);
+        if (!role ||
+            !rolePackageRefs.includes(role.agentPackageRef))
+            return null;
+        return { ...role, agentPackageRef: role.agentPackageRef };
+    };
+    const roleCarrierValidation = async (agentPackageRef) => {
+        try {
+            const value = object(JSON.parse(await readFile(join(config.workspaceRoot, ".proflow", "state", "agent", "role-carrier-validation", `${encodeURIComponent(agentPackageRef)}.json`), "utf8")), "role carrier validation evidence");
+            if (value.contract !== "proflow.role-carrier-validation.v1")
+                return null;
+            return {
+                agentPackageRef: string(value.agentPackageRef, "agentPackageRef"),
+                registeredPackageVersion: string(value.registeredPackageVersion, "registeredPackageVersion"),
+                roleRef: string(value.roleRef, "roleRef"),
+                carrierUrl: string(value.carrierUrl, "carrierUrl"),
+                gatewayUrl: string(value.gatewayUrl, "gatewayUrl"),
+            };
+        }
+        catch {
+            return null;
+        }
+    };
+    const currentAgentGatewayUrl = async () => {
+        try {
+            const value = object(JSON.parse(await readFile(join(config.workspaceRoot, ".proflow", "runtime", "modules", "agent-gateway", "shared-facts.json"), "utf8")), "agent gateway shared facts");
+            if (value.contract !== "proflow.module-shared-facts.v1" ||
+                value.moduleRef !== "agent-gateway")
+                return null;
+            const facts = object(value.facts, "agent gateway facts");
+            return typeof facts.publicBaseUrl === "string"
+                ? facts.publicBaseUrl
+                : null;
+        }
+        catch {
+            return null;
+        }
+    };
     const roleManagement = Object.freeze({
         async invoke(operation, rawInput) {
             const value = object(rawInput, "role management input");
@@ -1122,6 +1210,61 @@ async function constructGraph(config, executionCredential, modelCredential) {
             const value = object(rawInput, "observer application input");
             if (operation === "task.projection")
                 return taskDriverPorts.getTaskDriveProjection(string(value.taskId, "taskId"));
+            if (operation === "approval.executionContext") {
+                const approval = object(await execution.invoke("getExecutionApproval", {
+                    approvalRef: string(value.approvalRef, "approvalRef"),
+                }), "approval fact");
+                const executionFact = object(await execution.invoke("getExecution", {
+                    executionRef: string(approval.executionRef, "executionRef"),
+                    callerRef: string(approval.callerRef, "callerRef"),
+                }), "execution fact");
+                const runNo = Number(executionFact.runNo);
+                if (!Number.isInteger(runNo) || runNo <= 0)
+                    throw new Error("EXECUTION_RUN_GENERATION_REQUIRED");
+                return {
+                    executionRef: string(executionFact.executionRef, "executionRef"),
+                    taskId: string(executionFact.taskId, "taskId"),
+                    nodeId: string(executionFact.nodeId, "nodeId"),
+                    runNo,
+                    roleRef: string(executionFact.roleRef, "roleRef"),
+                    workerRef: string(executionFact.workerRef, "workerRef"),
+                };
+            }
+            if (operation === "browser.permission.classify") {
+                const roleRef = string(value.roleRef, "roleRef");
+                const taskId = string(value.taskId, "taskId");
+                const operationId = string(value.operationId, "operationId");
+                const conversationLocator = string(value.conversationLocator, "conversationLocator");
+                const workerRef = typeof value.workerRef === "string" ? value.workerRef : null;
+                const role = browserPermissionRole(roleRef);
+                if (!role)
+                    return {
+                        decision: "HUMAN_REQUIRED",
+                        reason: "ROLE_VALIDATION_MISMATCH",
+                    };
+                let taskBinding = null;
+                try {
+                    const current = unwrap(task.queries.getTask({ taskId }));
+                    taskBinding =
+                        current.roleBindings.find((candidate) => candidate.roleRef === roleRef &&
+                            candidate.agentPackageRef === role.agentPackageRef) ?? null;
+                }
+                catch {
+                    taskBinding = null;
+                }
+                const [validation, currentGatewayUrl] = await Promise.all([
+                    roleCarrierValidation(role.agentPackageRef),
+                    currentAgentGatewayUrl(),
+                ]);
+                return classifyBrowserPermission({
+                    role,
+                    validation,
+                    targetHost: typeof value.targetHost === "string" ? value.targetHost : null,
+                    currentGatewayUrl,
+                    operationId,
+                    context: { conversationLocator, workerRef, taskBinding },
+                });
+            }
             if (operation === "browser.binding")
                 return browserOwnerPorts.task.getWorkerBinding(string(value.taskId, "taskId"), string(value.roleRef, "roleRef"));
             if (operation === "browser.bindWorker") {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tomflow/proflow-platform-host",
-  "version": "0.1.16",
+  "version": "0.1.18",
   "type": "module",
   "publishConfig": {
     "access": "public"
@@ -25,18 +25,18 @@
   "dependencies": {
     "zod": "4.1.12",
     "@tomflow/proflow-agent-runtime": "^0.1.13",
-    "@tomflow/proflow-module-contract": "^0.1.13",
+    "@tomflow/proflow-execution-browser-extension": "^0.1.42",
     "@tomflow/proflow-execution-contracts": "^0.1.10",
-    "@tomflow/proflow-task-orchestration": "^0.1.10",
+    "@tomflow/proflow-module-contract": "^0.1.13",
     "@tomflow/proflow-task-migration-runner": "^0.1.11",
-    "@tomflow/proflow-execution-browser-extension": "^0.1.32",
-    "@tomflow/proflow-task-store-sqlite": "^0.1.11"
+    "@tomflow/proflow-task-store-sqlite": "^0.1.11",
+    "@tomflow/proflow-task-orchestration": "^0.1.10"
   },
   "devDependencies": {
     "@tomflow/proflow-agent-gateway": "^0.1.15",
     "@tomflow/proflow-deployment-conformance": "^0.1.13",
-    "@tomflow/proflow-model-runtime": "^0.1.21",
-    "@tomflow/proflow-execution-runtime": "^0.1.16"
+    "@tomflow/proflow-execution-runtime": "^0.1.18",
+    "@tomflow/proflow-model-runtime": "^0.1.24"
   },
   "description": "Provides the ProFlow local application composition root that binds Task, Agent, Execution and Model owner transports.",
   "keywords": [

package/proflow.module.json

@@ -3,7 +3,7 @@
 	"contractVersion": "1.0.0",
 	"moduleRef": "platform-host",
 	"packageName": "@tomflow/proflow-platform-host",
-	"moduleVersion": "0.1.16",
+	"moduleVersion": "0.1.18",
 	"kind": "service",
 	"templateVersion": "1.0.0",
 	"platformCompatibility": ">=1.0.0 <2.0.0",