codex-chatgpt-control 0.5.1-alpha.3 → 0.5.1-alpha.4

package/CHANGELOG.md

@@ -1,5 +1,32 @@
 # Changelog
 
+## 0.5.1-alpha.4
+
+- Detects Chrome's explicit blocked-download error page, avoids alternate
+  download attempts, and keeps signed download URLs out of rejected-page results.
+- Requires filename-scoped workbook previews when browser filtering is absent.
+- Repairs Chat detection and configuration when current Power or Advanced
+  menus are open, preserving scoped Work evidence and verified effort changes.
+- Recognizes current Work model/Power menus and the independent Fast-mode
+  checkbox, with verified selection/restoration and legacy Advanced support.
+- Recovers an unconfirmed Send through a fresh client using the authenticated
+  saved tab, baseline, unique turn and matching prompt, without sending again.
+- Adds an explicit authenticated journal service and packaged CLI for browser
+  hosts without process identity. Journal files and locks remain owned by real
+  Node; browser capabilities remain in the active browser host.
+- Supports the new private-file journal transport on macOS/Linux; Windows
+  returns an explicit unsupported-platform error before filesystem access.
+- Preserves multiline composer text, recognizes zero-file composer state,
+  and forwards the requested response format during exact-turn collection.
+- Bounds native download completion receipt waits and reports unverified
+  completion without repeating the download or switching strategies.
+- Uses one journal-call deadline across queued admission and dispatch and
+  bounds concurrent turn evidence requests while preserving digest identities.
+- Adds transactional live qualification with durable Send inspection, guarded
+  same-ID recovery, owned receipts and duplicate-submission checks.
+- Preserves journal-unavailable and indeterminate-write results across Node
+  and Python through shared fixtures, with bounded transport and private reports.
+
 ## 0.5.1-alpha.3
 
 - Adds the transactional `operations.submit`, `collect`, `inspect`, `control`,

package/README.md

@@ -56,6 +56,22 @@ is unavailable. See
 for request schemas, concurrency, recovery, privacy, transport bounds, and the
 stricter transactional artifact-provider capability matrix.
 
+If the browser host lacks process identity, start `codex-chatgpt-control-journal`
+in an ordinary Node terminal with `--state-root /absolute/private/state` and
+`--directory /absolute/private/new-session`. Then configure
+`operations: { journalService: { descriptorPath: "/absolute/private/new-session/connection.json" } }`
+on the browser client. The explicit private-file connection keeps browser
+control in the active host and durable journal authority in the Node process.
+Keep the descriptor secret and reuse the same operation identity after any
+uncertain write. See [the journal service runbook](references/2026-09-06-journal-service.md)
+for startup, recovery and qualification. Without a configured service, an
+unsupported local journal returns `journal_runtime_unavailable` before browser
+work.
+
+The private-file journal service supports macOS/Linux. On Windows it returns
+`journal_rpc_unsupported_platform` before filesystem access; the existing local
+Node journal path is unchanged.
+
 Inspect the visible surface and apply verified configuration:
 
 ```ts

package/contracts/v1/fixtures/download-blocked-by-browser.json

@@ -0,0 +1,22 @@
+{
+  "result": {
+    "blocker": {
+      "code": "download_blocked_by_browser",
+      "kind": "download_unavailable",
+      "message": "Chrome displayed ERR_BLOCKED_BY_CLIENT during the download. Inspect the existing download and Chrome restrictions before retrying; completion is unverified.",
+      "resumable": false
+    },
+    "context": {
+      "timestamp": "2026-06-06T00:00:00.000Z"
+    },
+    "error": {
+      "message": "Chrome displayed ERR_BLOCKED_BY_CLIENT during the download. Inspect the existing download and Chrome restrictions before retrying; completion is unverified.",
+      "name": "DownloadBrowserBlockedError",
+      "recoverable": false
+    },
+    "ok": false,
+    "status": "blocked",
+    "warnings": []
+  },
+  "schemaVersion": "chatgpt.browser_control.command_result.v1"
+}

package/contracts/v1/fixtures/download-receipt-failed.json

@@ -0,0 +1,22 @@
+{
+  "result": {
+    "blocker": {
+      "code": "download_receipt_failed",
+      "kind": "download_unavailable",
+      "message": "The browser did not provide a verified download receipt. Inspect the existing download before retrying; completion is unverified.",
+      "resumable": false
+    },
+    "context": {
+      "timestamp": "2026-06-06T00:00:00.000Z"
+    },
+    "error": {
+      "message": "The browser did not provide a verified download receipt. Inspect the existing download before retrying; completion is unverified.",
+      "name": "DownloadReceiptFailedError",
+      "recoverable": false
+    },
+    "ok": false,
+    "status": "blocked",
+    "warnings": []
+  },
+  "schemaVersion": "chatgpt.browser_control.command_result.v1"
+}

package/contracts/v1/fixtures/download-receipt-timeout.json

@@ -0,0 +1,22 @@
+{
+  "result": {
+    "blocker": {
+      "code": "download_receipt_timeout",
+      "kind": "download_unavailable",
+      "message": "Download event receipt did not complete before the deadline. Completion is unverified; inspect the existing download before retrying.",
+      "resumable": false
+    },
+    "context": {
+      "timestamp": "2026-06-06T00:00:00.000Z"
+    },
+    "error": {
+      "message": "Download event receipt did not complete before the deadline. Completion is unverified; inspect the existing download before retrying.",
+      "name": "DownloadReceiptTimeoutError",
+      "recoverable": false
+    },
+    "ok": false,
+    "status": "blocked",
+    "warnings": []
+  },
+  "schemaVersion": "chatgpt.browser_control.command_result.v1"
+}

package/contracts/v1/fixtures/journal-rpc-indeterminate.json

@@ -0,0 +1,32 @@
+{
+  "result": {
+    "blocker": {
+      "code": "journal_rpc_outcome_indeterminate",
+      "kind": "unknown",
+      "message": "The journal service connection ended without confirming a durable write. Preserve the operation identity and reconcile its state before any further browser action.",
+      "remediation": [
+        {
+          "instruction": "Restore the private journal-service connection, then inspect or reconcile the same operation identity. Never create a new operation ID to retry an uncertain Send.",
+          "label": "Reconnect the same journal",
+          "userActionRequired": false
+        }
+      ],
+      "resumable": false
+    },
+    "context": {
+      "timestamp": "2026-06-06T00:00:00.000Z"
+    },
+    "data": {
+      "operationId": "123e4567-e89b-42d3-a456-426614174000"
+    },
+    "error": {
+      "message": "The journal service connection ended without confirming a durable write. Preserve the operation identity and reconcile its state before any further browser action.",
+      "name": "OperationError",
+      "recoverable": false
+    },
+    "ok": false,
+    "status": "partial",
+    "warnings": []
+  },
+  "schemaVersion": "chatgpt.browser_control.command_result.v1"
+}

package/contracts/v1/fixtures/journal-rpc-unsupported-platform.json

@@ -0,0 +1,32 @@
+{
+  "result": {
+    "blocker": {
+      "code": "journal_rpc_unsupported_platform",
+      "kind": "unknown",
+      "message": "The private-file journal service requires POSIX file ownership and permissions and is unavailable on Windows.",
+      "remediation": [
+        {
+          "instruction": "On Windows, use the local journal in an ordinary Node browser host without operations.journalService. The private-file journal service requires a POSIX host. Preserve any existing operation identity.",
+          "label": "Use a supported journal host",
+          "userActionRequired": false
+        }
+      ],
+      "resumable": false
+    },
+    "context": {
+      "timestamp": "2026-06-06T00:00:00.000Z"
+    },
+    "data": {
+      "operationId": "123e4567-e89b-42d3-a456-426614174000"
+    },
+    "error": {
+      "message": "The private-file journal service requires POSIX file ownership and permissions and is unavailable on Windows.",
+      "name": "OperationError",
+      "recoverable": false
+    },
+    "ok": false,
+    "status": "blocked",
+    "warnings": []
+  },
+  "schemaVersion": "chatgpt.browser_control.command_result.v1"
+}

package/contracts/v1/fixtures/journal-runtime-unavailable.json

@@ -0,0 +1,32 @@
+{
+  "result": {
+    "blocker": {
+      "code": "journal_runtime_unavailable",
+      "kind": "unknown",
+      "message": "Transactional operations require a Node host with process identity, file ownership, and process liveness APIs. This host cannot safely open the operation journal.",
+      "remediation": [
+        {
+          "instruction": "Start the packaged journal service in a supported Node host and configure operations.journalService.descriptorPath in the browser client.",
+          "label": "Use a supported transactional host",
+          "userActionRequired": false
+        }
+      ],
+      "resumable": false
+    },
+    "context": {
+      "timestamp": "2026-06-06T00:00:00.000Z"
+    },
+    "data": {
+      "operationId": "123e4567-e89b-42d3-a456-426614174000"
+    },
+    "error": {
+      "message": "Transactional operations require a Node host with process identity, file ownership, and process liveness APIs. This host cannot safely open the operation journal.",
+      "name": "OperationError",
+      "recoverable": false
+    },
+    "ok": false,
+    "status": "blocked",
+    "warnings": []
+  },
+  "schemaVersion": "chatgpt.browser_control.command_result.v1"
+}

package/contracts/v1/manifest.json

@@ -56,6 +56,21 @@
       "file": "doctor-scenario-preflight.json",
       "schema": "commandResult"
     },
+    {
+      "case": "download_blocked_by_browser",
+      "file": "download-blocked-by-browser.json",
+      "schema": "commandResult"
+    },
+    {
+      "case": "download_receipt_failed",
+      "file": "download-receipt-failed.json",
+      "schema": "commandResult"
+    },
+    {
+      "case": "download_receipt_timeout",
+      "file": "download-receipt-timeout.json",
+      "schema": "commandResult"
+    },
     {
       "case": "existing_tab_diagnostics_blocker",
       "file": "existing-tab-diagnostics-blocker.json",
@@ -76,6 +91,21 @@
       "file": "help-root.json",
       "schema": "backendResponse"
     },
+    {
+      "case": "journal_rpc_indeterminate",
+      "file": "journal-rpc-indeterminate.json",
+      "schema": "commandResult"
+    },
+    {
+      "case": "journal_rpc_unsupported_platform",
+      "file": "journal-rpc-unsupported-platform.json",
+      "schema": "commandResult"
+    },
+    {
+      "case": "journal_runtime_unavailable",
+      "file": "journal-runtime-unavailable.json",
+      "schema": "commandResult"
+    },
     {
       "case": "messages_stop_indeterminate",
       "file": "messages-stop-indeterminate.json",

package/contracts/v1/parity-suite.json

@@ -186,6 +186,9 @@
         "blocker-explanation-profiles.json",
         "doctor-bridge-upload.json",
         "doctor-scenario-preflight.json",
+        "download-receipt-timeout.json",
+        "download-blocked-by-browser.json",
+        "download-receipt-failed.json",
         "existing-tab-diagnostics-blocker.json",
         "files-preflight-success.json",
         "project-sources-plan-add.json",
@@ -430,7 +433,7 @@
     },
     "ask": {
       "surface": "workflows-primitives-diagnostics",
-      "fixtures": ["workflow-ask-success.json", "command-descriptors.json"],
+      "fixtures": ["workflow-ask-success.json", "journal-runtime-unavailable.json", "journal-rpc-indeterminate.json", "journal-rpc-unsupported-platform.json", "command-descriptors.json"],
       "nodeTests": ["tests/unit/client.test.ts", "tests/unit/sequence.test.ts", "tests/unit/backend-conformance.test.ts"],
       "pythonTests": ["tests/test_workflows.py", "tests/test_async_client.py"],
       "docs": ["references/backend-protocol.md", "references/python-parity.md", "../../README.md"]
@@ -745,9 +748,9 @@
     },
     "artifacts.downloadLatest": {
       "surface": "workflows-primitives-diagnostics",
-      "fixtures": ["command-descriptors.json"],
-      "nodeTests": ["tests/unit/artifacts.test.ts", "tests/unit/files.test.ts"],
-      "pythonTests": ["tests/test_primitives.py", "tests/test_async_client.py"],
+      "fixtures": ["command-descriptors.json", "download-receipt-timeout.json", "download-blocked-by-browser.json", "download-receipt-failed.json"],
+      "nodeTests": ["tests/unit/artifacts.test.ts", "tests/unit/files.test.ts", "tests/unit/browser-downloads.test.ts"],
+      "pythonTests": ["tests/test_primitives.py", "tests/test_async_client.py", "tests/test_parity_snapshots.py"],
       "docs": ["references/backend-protocol.md", "references/python-parity.md"]
     },
     "files.preflight": {
@@ -766,9 +769,9 @@
     },
     "files.downloadLatest": {
       "surface": "workflows-primitives-diagnostics",
-      "fixtures": ["command-descriptors.json"],
-      "nodeTests": ["tests/unit/files.test.ts", "tests/unit/client.test.ts"],
-      "pythonTests": ["tests/test_primitives.py"],
+      "fixtures": ["command-descriptors.json", "download-receipt-timeout.json", "download-blocked-by-browser.json", "download-receipt-failed.json"],
+      "nodeTests": ["tests/unit/files.test.ts", "tests/unit/client.test.ts", "tests/unit/browser-downloads.test.ts"],
+      "pythonTests": ["tests/test_primitives.py", "tests/test_parity_snapshots.py"],
       "docs": ["references/backend-protocol.md", "references/troubleshooting.md", "references/python-parity.md"]
     },
     "projects.sources.list": {