codex-chatgpt-control 0.5.1-alpha.2 → 0.5.1-alpha.4

package/CHANGELOG.md

@@ -1,5 +1,47 @@
 # Changelog
 
+## 0.5.1-alpha.4
+
+- Detects Chrome's explicit blocked-download error page, avoids alternate
+  download attempts, and keeps signed download URLs out of rejected-page results.
+- Requires filename-scoped workbook previews when browser filtering is absent.
+- Repairs Chat detection and configuration when current Power or Advanced
+  menus are open, preserving scoped Work evidence and verified effort changes.
+- Recognizes current Work model/Power menus and the independent Fast-mode
+  checkbox, with verified selection/restoration and legacy Advanced support.
+- Recovers an unconfirmed Send through a fresh client using the authenticated
+  saved tab, baseline, unique turn and matching prompt, without sending again.
+- Adds an explicit authenticated journal service and packaged CLI for browser
+  hosts without process identity. Journal files and locks remain owned by real
+  Node; browser capabilities remain in the active browser host.
+- Supports the new private-file journal transport on macOS/Linux; Windows
+  returns an explicit unsupported-platform error before filesystem access.
+- Preserves multiline composer text, recognizes zero-file composer state,
+  and forwards the requested response format during exact-turn collection.
+- Bounds native download completion receipt waits and reports unverified
+  completion without repeating the download or switching strategies.
+- Uses one journal-call deadline across queued admission and dispatch and
+  bounds concurrent turn evidence requests while preserving digest identities.
+- Adds transactional live qualification with durable Send inspection, guarded
+  same-ID recovery, owned receipts and duplicate-submission checks.
+- Preserves journal-unavailable and indeterminate-write results across Node
+  and Python through shared fixtures, with bounded transport and private reports.
+
+## 0.5.1-alpha.3
+
+- Adds the transactional `operations.submit`, `collect`, `inspect`, `control`,
+  and `run` surface with durable request identity, monotonic mutation
+  boundaries, exact ownership, non-repetition, and redacted recovery receipts.
+- Adds capability-aware runtime identity, correlated multiplexed backend
+  traffic, process-scoped tab coordination, bounded DOM/file/artifact
+  observation, and deterministic configuration restoration.
+- Hardens browser acquisition and attachment input scoping, acts-then-throws
+  settlement, late deadline behavior, output path validation, journal quotas,
+  lifecycle controls, and visible blocker classification.
+- Extends release-canary coverage with exact per-scenario tab cleanup and
+  independent Chat/Work/configuration postconditions; refreshes all four plugin
+  runtime bundles from the qualified source.
+
 ## 0.5.1-alpha.2
 
 - Adds confirmation-gated, fail-closed `messages.stop` lifecycle control with

package/README.md

@@ -29,6 +29,49 @@ const result = await chatgpt.runner.run(reviewer, {
 });
 ```
 
+## Transactional operation preview
+
+Supported Chat, Work, Runner, and Responses workflows accept an optional
+caller-owned canonical UUID `operationId`. Supplying it opts that invocation
+into durable submit-once recovery and exact-turn collection; omitting it keeps
+the compatibility path.
+
+```ts
+const result = await chatgpt.ask({
+  operationId: "123e4567-e89b-42d3-a456-426614174000",
+  prompt: "Summarize the visible thread.",
+  thread: { type: "conversationId", conversationId: "caller-owned-conversation-id" },
+  wait: false,
+  read: false
+});
+```
+
+The direct `chatgpt.operations` surface exposes `submit`, `collect`, `inspect`,
+`control`, and SDK-composed `run`. Persist and reuse the fresh returned handle
+after partial or uncertain results; never retry the same logical Send under a
+new ID. `operations.inspect` is browser-free. Browser-touching calls fail
+closed when bridge access, target evidence, or a required provider primitive
+is unavailable. See
+[Transactional browser operations](references/2026-08-16-transactional-operations.md)
+for request schemas, concurrency, recovery, privacy, transport bounds, and the
+stricter transactional artifact-provider capability matrix.
+
+If the browser host lacks process identity, start `codex-chatgpt-control-journal`
+in an ordinary Node terminal with `--state-root /absolute/private/state` and
+`--directory /absolute/private/new-session`. Then configure
+`operations: { journalService: { descriptorPath: "/absolute/private/new-session/connection.json" } }`
+on the browser client. The explicit private-file connection keeps browser
+control in the active host and durable journal authority in the Node process.
+Keep the descriptor secret and reuse the same operation identity after any
+uncertain write. See [the journal service runbook](references/2026-09-06-journal-service.md)
+for startup, recovery and qualification. Without a configured service, an
+unsupported local journal returns `journal_runtime_unavailable` before browser
+work.
+
+The private-file journal service supports macOS/Linux. On Windows it returns
+`journal_rpc_unsupported_platform` before filesystem access; the existing local
+Node journal path is unchanged.
+
 Inspect the visible surface and apply verified configuration:
 
 ```ts

package/contracts/v1/fixtures/backend-capabilities.json

@@ -1,8 +1,16 @@
 {
+  "backendSessionId": "fixture-backend-session",
+  "buildDigest": "unknown",
+  "cancellation": {
+    "requests": false,
+    "streams": false,
+    "supported": false
+  },
   "commands": [
     "backend.version",
     "backend.health",
     "backend.capabilities",
+    "backend.hello",
     "runner.run",
     "runner.plan",
     "runner.stream",
@@ -58,15 +66,46 @@
     "modes.set",
     "modes.get",
     "tools.select",
-    "response.copy"
+    "response.copy",
+    "operations.submit",
+    "operations.collect",
+    "operations.inspect",
+    "operations.control"
   ],
+  "multiplexing": {
+    "streams": true,
+    "unary": true
+  },
+  "packageName": "codex-chatgpt-control",
+  "packageVersion": "unknown",
   "protocolVersion": "chatgpt.browser_control.backend_request.v1",
+  "requestIds": {
+    "required": true,
+    "scope": "connection"
+  },
+  "runtime": "node",
+  "runtimeVersion": "fixture-runtime",
   "streaming": {
     "modes": [
       "ndjson"
     ],
     "tokenDeltas": false
   },
+  "supportedProtocolVersions": [
+    "chatgpt.browser_control.backend_request.v1"
+  ],
+  "tabs": {
+    "authoritativeClaim": false,
+    "concurrent": false,
+    "concurrentTabs": false,
+    "coordination": false,
+    "coordinationScope": "none",
+    "fencing": false,
+    "stableBrowserIdentity": false,
+    "stableIdentity": false,
+    "stableProviderIdentity": false,
+    "stableTabIdentity": false
+  },
   "transports": [
     "stdio"
   ]

package/contracts/v1/fixtures/backend-compatibility.json

@@ -0,0 +1,21 @@
+{
+  "schemaVersion": "chatgpt.browser_control.backend_compatibility.v1",
+  "status": "warning",
+  "mode": "multiplexed",
+  "protocolVersion": "chatgpt.browser_control.backend_request.v1",
+  "backendSessionId": "fixture-backend-session",
+  "packageName": "codex-chatgpt-control",
+  "packageVersion": "0.5.1-alpha.2",
+  "runtime": "node",
+  "runtimeVersion": "v22.14.0",
+  "buildDigest": "sha256:backend-build",
+  "warnings": [
+    {
+      "code": "build_digest_mismatch",
+      "field": "buildDigest",
+      "expected": "sha256:expected-build",
+      "received": "sha256:backend-build",
+      "message": "Backend build digest differs from the expected runtime (sha256:expected-build versus sha256:backend-build)."
+    }
+  ]
+}

package/contracts/v1/fixtures/backend-version.json

@@ -2,9 +2,14 @@
   "ok": true,
   "requestId": "req_backend_version",
   "result": {
+    "backendSessionId": "fixture-backend-session",
+    "buildDigest": "unknown",
     "name": "codex-chatgpt-control-backend",
+    "packageName": "codex-chatgpt-control",
+    "packageVersion": "unknown",
     "protocolVersion": "chatgpt.browser_control.backend_request.v1",
-    "runtime": "node"
+    "runtime": "node",
+    "runtimeVersion": "fixture-runtime"
   },
   "schemaVersion": "chatgpt.browser_control.backend_response.v1"
 }

package/contracts/v1/fixtures/download-blocked-by-browser.json

@@ -0,0 +1,22 @@
+{
+  "result": {
+    "blocker": {
+      "code": "download_blocked_by_browser",
+      "kind": "download_unavailable",
+      "message": "Chrome displayed ERR_BLOCKED_BY_CLIENT during the download. Inspect the existing download and Chrome restrictions before retrying; completion is unverified.",
+      "resumable": false
+    },
+    "context": {
+      "timestamp": "2026-06-06T00:00:00.000Z"
+    },
+    "error": {
+      "message": "Chrome displayed ERR_BLOCKED_BY_CLIENT during the download. Inspect the existing download and Chrome restrictions before retrying; completion is unverified.",
+      "name": "DownloadBrowserBlockedError",
+      "recoverable": false
+    },
+    "ok": false,
+    "status": "blocked",
+    "warnings": []
+  },
+  "schemaVersion": "chatgpt.browser_control.command_result.v1"
+}

package/contracts/v1/fixtures/download-receipt-failed.json

@@ -0,0 +1,22 @@
+{
+  "result": {
+    "blocker": {
+      "code": "download_receipt_failed",
+      "kind": "download_unavailable",
+      "message": "The browser did not provide a verified download receipt. Inspect the existing download before retrying; completion is unverified.",
+      "resumable": false
+    },
+    "context": {
+      "timestamp": "2026-06-06T00:00:00.000Z"
+    },
+    "error": {
+      "message": "The browser did not provide a verified download receipt. Inspect the existing download before retrying; completion is unverified.",
+      "name": "DownloadReceiptFailedError",
+      "recoverable": false
+    },
+    "ok": false,
+    "status": "blocked",
+    "warnings": []
+  },
+  "schemaVersion": "chatgpt.browser_control.command_result.v1"
+}

package/contracts/v1/fixtures/download-receipt-timeout.json

@@ -0,0 +1,22 @@
+{
+  "result": {
+    "blocker": {
+      "code": "download_receipt_timeout",
+      "kind": "download_unavailable",
+      "message": "Download event receipt did not complete before the deadline. Completion is unverified; inspect the existing download before retrying.",
+      "resumable": false
+    },
+    "context": {
+      "timestamp": "2026-06-06T00:00:00.000Z"
+    },
+    "error": {
+      "message": "Download event receipt did not complete before the deadline. Completion is unverified; inspect the existing download before retrying.",
+      "name": "DownloadReceiptTimeoutError",
+      "recoverable": false
+    },
+    "ok": false,
+    "status": "blocked",
+    "warnings": []
+  },
+  "schemaVersion": "chatgpt.browser_control.command_result.v1"
+}

package/contracts/v1/fixtures/journal-rpc-indeterminate.json

@@ -0,0 +1,32 @@
+{
+  "result": {
+    "blocker": {
+      "code": "journal_rpc_outcome_indeterminate",
+      "kind": "unknown",
+      "message": "The journal service connection ended without confirming a durable write. Preserve the operation identity and reconcile its state before any further browser action.",
+      "remediation": [
+        {
+          "instruction": "Restore the private journal-service connection, then inspect or reconcile the same operation identity. Never create a new operation ID to retry an uncertain Send.",
+          "label": "Reconnect the same journal",
+          "userActionRequired": false
+        }
+      ],
+      "resumable": false
+    },
+    "context": {
+      "timestamp": "2026-06-06T00:00:00.000Z"
+    },
+    "data": {
+      "operationId": "123e4567-e89b-42d3-a456-426614174000"
+    },
+    "error": {
+      "message": "The journal service connection ended without confirming a durable write. Preserve the operation identity and reconcile its state before any further browser action.",
+      "name": "OperationError",
+      "recoverable": false
+    },
+    "ok": false,
+    "status": "partial",
+    "warnings": []
+  },
+  "schemaVersion": "chatgpt.browser_control.command_result.v1"
+}

package/contracts/v1/fixtures/journal-rpc-unsupported-platform.json

@@ -0,0 +1,32 @@
+{
+  "result": {
+    "blocker": {
+      "code": "journal_rpc_unsupported_platform",
+      "kind": "unknown",
+      "message": "The private-file journal service requires POSIX file ownership and permissions and is unavailable on Windows.",
+      "remediation": [
+        {
+          "instruction": "On Windows, use the local journal in an ordinary Node browser host without operations.journalService. The private-file journal service requires a POSIX host. Preserve any existing operation identity.",
+          "label": "Use a supported journal host",
+          "userActionRequired": false
+        }
+      ],
+      "resumable": false
+    },
+    "context": {
+      "timestamp": "2026-06-06T00:00:00.000Z"
+    },
+    "data": {
+      "operationId": "123e4567-e89b-42d3-a456-426614174000"
+    },
+    "error": {
+      "message": "The private-file journal service requires POSIX file ownership and permissions and is unavailable on Windows.",
+      "name": "OperationError",
+      "recoverable": false
+    },
+    "ok": false,
+    "status": "blocked",
+    "warnings": []
+  },
+  "schemaVersion": "chatgpt.browser_control.command_result.v1"
+}

package/contracts/v1/fixtures/journal-runtime-unavailable.json

@@ -0,0 +1,32 @@
+{
+  "result": {
+    "blocker": {
+      "code": "journal_runtime_unavailable",
+      "kind": "unknown",
+      "message": "Transactional operations require a Node host with process identity, file ownership, and process liveness APIs. This host cannot safely open the operation journal.",
+      "remediation": [
+        {
+          "instruction": "Start the packaged journal service in a supported Node host and configure operations.journalService.descriptorPath in the browser client.",
+          "label": "Use a supported transactional host",
+          "userActionRequired": false
+        }
+      ],
+      "resumable": false
+    },
+    "context": {
+      "timestamp": "2026-06-06T00:00:00.000Z"
+    },
+    "data": {
+      "operationId": "123e4567-e89b-42d3-a456-426614174000"
+    },
+    "error": {
+      "message": "Transactional operations require a Node host with process identity, file ownership, and process liveness APIs. This host cannot safely open the operation journal.",
+      "name": "OperationError",
+      "recoverable": false
+    },
+    "ok": false,
+    "status": "blocked",
+    "warnings": []
+  },
+  "schemaVersion": "chatgpt.browser_control.command_result.v1"
+}

package/contracts/v1/fixtures/operation-action-prepared-event.json

@@ -0,0 +1,42 @@
+{
+  "schemaVersion": "chatgpt.browser_control.operation_event.v1",
+  "revision": 5,
+  "previousEventDigest": "hmac-sha256:3333333333333333333333333333333333333333333333333333333333333333",
+  "eventDigest": "hmac-sha256:4444444444444444444444444444444444444444444444444444444444444444",
+  "event": {
+    "type": "action_prepared",
+    "action": {
+      "actionId": "33333333-3333-4333-8333-333333333333",
+      "kind": "send",
+      "repeatPolicy": "observe_only_after_intent",
+      "requestDigest": "hmac-sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+      "targetDigest": "hmac-sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"
+    },
+    "intentAt": "2026-08-16T00:00:01.000Z",
+    "baseline": {
+      "schemaVersion": "chatgpt.browser_control.operation_ownership_baseline.v1",
+      "operationId": "11111111-1111-4111-8111-111111111111",
+      "requestDigest": "hmac-sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+      "targetBindingDigest": "hmac-sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+      "actionId": "33333333-3333-4333-8333-333333333333",
+      "baseline": {
+        "schemaVersion": "chatgpt.browser_control.turn_ownership.v1",
+        "snapshotDigest": "hmac-sha256:1212121212121212121212121212121212121212121212121212121212121212",
+        "target": {
+          "provider": { "status": "available", "value": "chrome" },
+          "browser": { "status": "available", "value": "browser-1" },
+          "tab": { "status": "available", "value": "tab-1" },
+          "thread": { "status": "available", "value": "conversation-1" },
+          "conversation": { "status": "available", "value": "conversation-1" },
+          "canonicalThreadUrl": { "status": "available", "value": "https://chatgpt.com/c/sanitized" },
+          "authoritativeTabClaim": { "status": "unavailable", "reason": "not_exposed" },
+          "coordinationScope": "process"
+        },
+        "userTurns": [],
+        "assistantTurns": [],
+        "completeness": "complete"
+      },
+      "observedAt": "2026-08-16T00:00:01.000Z"
+    }
+  }
+}

package/contracts/v1/fixtures/operation-action.json

@@ -0,0 +1,13 @@
+{
+  "actionId": "33333333-3333-4333-8333-333333333333",
+  "kind": "file_handoff",
+  "repeatPolicy": "observe_only_after_intent",
+  "requestDigest": "hmac-sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+  "targetDigest": "hmac-sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+  "intentRevision": 4,
+  "intentAt": "2026-08-16T00:00:01.000Z",
+  "outcome": "satisfied",
+  "receiptRevision": 5,
+  "receiptAt": "2026-08-16T00:00:02.000Z",
+  "evidenceDigest": "hmac-sha256:cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
+}

package/contracts/v1/fixtures/operation-artifact-receipt.json

@@ -0,0 +1,14 @@
+{
+  "schemaVersion": "chatgpt.browser_control.operation_artifact_receipt.v1",
+  "operationId": "11111111-1111-4111-8111-111111111111",
+  "artifactKey": "artifact-0",
+  "assistantTurnId": "assistant-turn-1",
+  "sourceIdentityDigest": "hmac-sha256:abababababababababababababababababababababababababababababababab",
+  "kind": "file",
+  "ordinal": 0,
+  "outputKey": "operation-11111111-result.bin",
+  "mimeType": "application/octet-stream",
+  "bytes": 32,
+  "sha256": "dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd",
+  "status": "transferred"
+}

package/contracts/v1/fixtures/operation-artifact-transfer-intent-event.json

@@ -0,0 +1,24 @@
+{
+  "schemaVersion": "chatgpt.browser_control.operation_event.v1",
+  "revision": 5,
+  "previousEventDigest": "hmac-sha256:3333333333333333333333333333333333333333333333333333333333333333",
+  "eventDigest": "hmac-sha256:4444444444444444444444444444444444444444444444444444444444444444",
+  "event": {
+    "type": "artifact_transfer_intent",
+    "intent": {
+      "schemaVersion": "chatgpt.browser_control.artifact_transfer_intent.v1",
+      "operationId": "11111111-1111-4111-8111-111111111111",
+      "requestDigest": "hmac-sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+      "targetBindingDigest": "hmac-sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+      "assistantTurnId": "assistant-turn-1",
+      "sourceIdentityDigest": "hmac-sha256:cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc",
+      "kind": "file",
+      "ordinal": 0,
+      "transferActionId": "66666666-6666-4666-8666-666666666666",
+      "destinationIdentityDigest": "hmac-sha256:dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd",
+      "actionKind": "local_output_commit",
+      "repeatPolicy": "reconcile_local_effect",
+      "intentAt": "2026-08-16T00:00:03.000Z"
+    }
+  }
+}

package/contracts/v1/fixtures/operation-artifact-transfer-receipt-event.json

@@ -0,0 +1,26 @@
+{
+  "schemaVersion": "chatgpt.browser_control.operation_event.v1",
+  "revision": 6,
+  "previousEventDigest": "hmac-sha256:4444444444444444444444444444444444444444444444444444444444444444",
+  "eventDigest": "hmac-sha256:5555555555555555555555555555555555555555555555555555555555555555",
+  "event": {
+    "type": "artifact_transfer_receipt",
+    "receipt": {
+      "schemaVersion": "chatgpt.browser_control.artifact_transfer_receipt.v1",
+      "operationId": "11111111-1111-4111-8111-111111111111",
+      "requestDigest": "hmac-sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+      "targetBindingDigest": "hmac-sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+      "assistantTurnId": "assistant-turn-1",
+      "sourceIdentityDigest": "hmac-sha256:cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc",
+      "kind": "file",
+      "ordinal": 0,
+      "transferActionId": "66666666-6666-4666-8666-666666666666",
+      "destinationIdentityDigest": "hmac-sha256:dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd",
+      "outputKey": "artifact-transfer-1",
+      "bytes": 12,
+      "sha256": "ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff",
+      "status": "transferred",
+      "observedAt": "2026-08-16T00:00:04.000Z"
+    }
+  }
+}