@apps-in-toss/devtools 3.0.5 → 3.1.0-beta.1

package/dist/mock/3x.js

@@ -1,30 +1,3 @@
-//#region src/mock/deep-merge.ts
-function isPlainObject(value) {
-	return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-function mergeValue(base, override) {
-	if (override === void 0) return base;
-	if (Array.isArray(override)) return override;
-	if (isPlainObject(base) && isPlainObject(override)) {
-		const result = { ...base };
-		for (const key of Object.keys(override)) {
-			if (!(key in base)) continue;
-			result[key] = mergeValue(base[key], override[key]);
-		}
-		return result;
-	}
-	return override;
-}
-/**
-* `base`(보통 `DEFAULT_STATE`)에 `override`를 재귀 병합한 새 객체를
-* 반환한다. `base`는 변형하지 않는다(불변). `override`가 `undefined`이면
-* `base`를 그대로 반환한다.
-*/
-function deepMergeState(base, override) {
-	if (override === void 0) return base;
-	return mergeValue(base, override);
-}
-//#endregion
 //#region src/mock/throttle-registry.ts
 /**
 * throttle 레지스트리 (devtools#834).
@@ -54,10 +27,6 @@ function resetThrottleRegistry() {
 }
 //#endregion
 //#region src/mock/state.ts
-/**
-* @apps-in-toss/devtools 중앙 상태 관리
-* DevTools Panel과 mock 구현체가 이 상태를 공유한다.
-*/
 /** SDK 호출 로그 ring buffer 상한 */
 const SDK_CALL_LOG_MAX = 200;
 const DEFAULT_STATE = {
@@ -117,14 +86,6 @@ const DEFAULT_STATE = {
 			displayAmount: "1,000원",
 			iconUrl: "",
 			description: "게임에서 사용할 수 있는 보석 100개"
-		}, {
-			sku: "mock-sub-monthly",
-			type: "SUBSCRIPTION",
-			displayName: "월간 구독",
-			displayAmount: "4,900원",
-			iconUrl: "",
-			description: "매달 자동으로 갱신되는 구독 상품",
-			renewalCycle: "MONTHLY"
 		}],
 		nextResult: "success",
 		pendingOrders: [],
@@ -187,22 +148,6 @@ const DEFAULT_STATE = {
 	},
 	failureModes: { sdkLine: "2.x" }
 };
-/**
-* `initialState` unplugin 옵션(Vite `define`로 주입된 `__AIT_INITIAL_STATE__`)이
-* 있으면 `DEFAULT_STATE`에 재귀 병합한 결과를, 없으면 `DEFAULT_STATE`를 그대로
-* 반환한다. devtools 자체 빌드/테스트에는 이 define이 없으므로
-* `typeof` 가드로 ReferenceError를 막는다(env.d.ts 참고).
-*
-* 모듈 로드 시 한 번만 계산해 생성자·`reset()` 양쪽에서 재사용한다 — `reset()`도
-* 이 병합된 값으로 되돌아가야, 소비자가 선언한 커스텀 카탈로그가 패널의
-* "초기화" 이후에도 사라지지 않는다(초기화는 "SDK 기본값"이 아니라 "이
-* 프로젝트가 선언한 기본값"으로 돌아가는 것이 사용자 기대에 맞다).
-*/
-function resolveDefaultState() {
-	const override = typeof __AIT_INITIAL_STATE__ !== "undefined" ? __AIT_INITIAL_STATE__ : void 0;
-	return override ? deepMergeState(DEFAULT_STATE, override) : DEFAULT_STATE;
-}
-const RESOLVED_DEFAULT_STATE = resolveDefaultState();
 function generateDeviceId() {
 	const stored = localStorage.getItem("__ait_device_id");
 	if (stored) return stored;
@@ -215,7 +160,7 @@ var AitStateManager = class {
 	_listeners = /* @__PURE__ */ new Set();
 	_inTransaction = false;
 	constructor() {
-		this._state = structuredClone(RESOLVED_DEFAULT_STATE);
+		this._state = structuredClone(DEFAULT_STATE);
 		try {
 			this._state.deviceId = generateDeviceId();
 		} catch {
@@ -311,7 +256,7 @@ var AitStateManager = class {
 	reset() {
 		const deviceId = this._state.deviceId;
 		this._state = {
-			...structuredClone(RESOLVED_DEFAULT_STATE),
+			...structuredClone(DEFAULT_STATE),
 			deviceId
 		};
 		resetThrottleRegistry();
@@ -328,6 +273,83 @@ if (!globalRef[SINGLETON_KEY]) globalRef[SINGLETON_KEY] = new AitStateManager();
 const aitState = globalRef[SINGLETON_KEY];
 if (typeof window !== "undefined") window.__ait = aitState;
 //#endregion
+//#region src/mock/device/_helpers.ts
+/**
+* 디바이스 모듈 내부 공유 헬퍼
+*/
+function generatePlaceholderImage(width, height, text, color) {
+	const canvas = document.createElement("canvas");
+	canvas.width = width;
+	canvas.height = height;
+	const ctx = canvas.getContext("2d");
+	if (!ctx) {
+		const svg = `<svg xmlns="http://www.w3.org/2000/svg" width="${width}" height="${height}"><rect fill="${color}" width="${width}" height="${height}"/><text x="50%" y="50%" fill="white" font-size="16" text-anchor="middle" dominant-baseline="middle">${text}</text></svg>`;
+		return `data:image/svg+xml;base64,${btoa(svg)}`;
+	}
+	ctx.fillStyle = color;
+	ctx.fillRect(0, 0, width, height);
+	ctx.fillStyle = "white";
+	ctx.font = "16px sans-serif";
+	ctx.textAlign = "center";
+	ctx.textBaseline = "middle";
+	ctx.fillText(text, width / 2, height / 2);
+	return canvas.toDataURL("image/png");
+}
+const DEFAULT_PLACEHOLDERS = [
+	{
+		text: "Mock Photo 1",
+		color: "#3182F6"
+	},
+	{
+		text: "Mock Photo 2",
+		color: "#27ae60"
+	},
+	{
+		text: "Mock Photo 3",
+		color: "#e67e22"
+	}
+];
+let cachedPlaceholders = null;
+function getDefaultPlaceholderImages() {
+	if (!cachedPlaceholders) cachedPlaceholders = DEFAULT_PLACEHOLDERS.map((p) => generatePlaceholderImage(320, 240, p.text, p.color));
+	return [...cachedPlaceholders];
+}
+/** @internal device 모듈 내부 전용 */
+function getMockImages() {
+	const images = aitState.state.mockData.images;
+	if (images.length > 0) return images;
+	return getDefaultPlaceholderImages();
+}
+const PROMPT_TIMEOUT_MS = 3e4;
+/** @internal device 모듈 내부 전용 */
+function waitForPromptResponse(type) {
+	return new Promise((resolve, reject) => {
+		const eventName = `__ait:prompt-response:${type}`;
+		const cancelName = "__ait:prompt-cancel";
+		function cleanup() {
+			clearTimeout(timer);
+			window.removeEventListener(eventName, handler);
+			window.removeEventListener(cancelName, cancelHandler);
+		}
+		const timer = setTimeout(() => {
+			cleanup();
+			const hint = !!document.querySelector(".ait-panel") ? "Please provide input via the DevTools panel." : "Is @apps-in-toss/devtools/panel imported?";
+			reject(/* @__PURE__ */ new Error(`[@apps-in-toss/devtools] Prompt timeout for "${type}" after ${PROMPT_TIMEOUT_MS / 1e3}s. ${hint}`));
+		}, PROMPT_TIMEOUT_MS);
+		const handler = (e) => {
+			cleanup();
+			resolve(e.detail);
+		};
+		const cancelHandler = () => {
+			cleanup();
+			reject(/* @__PURE__ */ new Error(`[@apps-in-toss/devtools] Prompt cancelled for "${type}"`));
+		};
+		window.addEventListener(eventName, handler);
+		window.addEventListener(cancelName, cancelHandler);
+		window.dispatchEvent(new CustomEvent("__ait:prompt-request", { detail: { type } }));
+	});
+}
+//#endregion
 //#region src/mock/native-error.ts
 /**
 * 실패-모드 다이얼 — 네이티브 에러 envelope 조립 (devtools#770).
@@ -428,118 +450,313 @@ function buildNativeError(code) {
 	return err;
 }
 //#endregion
-//#region src/mock/observe.ts
+//#region src/mock/permissions.ts
 /**
-* fn을 observe로 감싼다.
-*
-* @param apiName  - 로그에 기록할 SDK 메서드 이름 (예: `'setScreenAwakeMode'`)
-* @param fidelity - 이 mock의 fidelity grade ('faithful' | 'partial' | 'inert')
-* @param fn       - 실제 mock 구현체. 시그니처를 그대로 통과시킨다.
-* @returns fn과 동일한 타입의 래퍼 함수
+* web-framework 3.0+ 권한 에러 기반 클래스.
+* `instanceof PermissionError`로 체크하는 코드와 호환된다.
 */
-function observe(apiName, fidelity, fn) {
-	return (...args) => {
-		const timestamp = Date.now();
-		const safeArgs = args.map((a) => safeSerialize(a));
-		const result = fn(...args);
-		if (result instanceof Promise) {
-			aitState.logSdkCall({
-				method: apiName,
-				args: safeArgs,
-				timestamp,
-				status: "pending",
-				fidelity
-			});
-			result.then((value) => {
-				aitState.logSdkCall({
-					method: apiName,
-					args: safeArgs,
-					timestamp,
-					status: "resolved",
-					result: safeSerialize(value),
-					fidelity
-				});
-			}, (err) => {
-				aitState.logSdkCall({
-					method: apiName,
-					args: safeArgs,
-					timestamp,
-					status: "rejected",
-					error: err instanceof Error ? err.message : String(err),
-					fidelity
-				});
-			});
-			return result;
-		}
-		aitState.logSdkCall({
-			method: apiName,
-			args: safeArgs,
-			timestamp,
-			status: "resolved",
-			result: safeSerialize(result),
-			fidelity
-		});
-		return result;
-	};
+var PermissionError = class extends Error {
+	constructor({ methodName, message }) {
+		super(message ?? `${methodName}: permission denied`);
+		this.name = `${methodName}PermissionError`;
+	}
+};
+/** openCamera 권한 에러 */
+var OpenCameraPermissionError = class extends PermissionError {
+	constructor() {
+		super({ methodName: "openCamera" });
+	}
+};
+/** fetchAlbumPhotos 권한 에러 */
+var FetchAlbumPhotosPermissionError = class extends PermissionError {
+	constructor() {
+		super({ methodName: "fetchAlbumPhotos" });
+	}
+};
+/** fetchContacts 권한 에러 */
+var FetchContactsPermissionError = class extends PermissionError {
+	constructor() {
+		super({ methodName: "fetchContacts" });
+	}
+};
+/** getCurrentLocation 권한 에러 */
+var GetCurrentLocationPermissionError = class extends PermissionError {
+	constructor() {
+		super({ methodName: "getCurrentLocation" });
+	}
+};
+/** getClipboardText 권한 에러 */
+var GetClipboardTextPermissionError = class extends PermissionError {
+	constructor() {
+		super({ methodName: "getClipboardText" });
+	}
+};
+/** setClipboardText 권한 에러 */
+var SetClipboardTextPermissionError = class extends PermissionError {
+	constructor() {
+		super({ methodName: "setClipboardText" });
+	}
+};
+/**
+* startUpdateLocation 권한 에러.
+* web-framework 3.0에서 GetCurrentLocationPermissionError의 alias.
+*/
+const StartUpdateLocationPermissionError = GetCurrentLocationPermissionError;
+const permissionErrorMap = {
+	openCamera: OpenCameraPermissionError,
+	fetchAlbumPhotos: FetchAlbumPhotosPermissionError,
+	fetchAlbumItems: FetchAlbumPhotosPermissionError,
+	fetchContacts: FetchContactsPermissionError,
+	getCurrentLocation: GetCurrentLocationPermissionError,
+	getClipboardText: GetClipboardTextPermissionError,
+	setClipboardText: SetClipboardTextPermissionError
+};
+async function getPermission(permission) {
+	const failureCode = permissionGateCode(permission);
+	if (failureCode) throw buildNativeError(failureCode);
+	return aitState.state.permissions[permission.name];
 }
 /**
-* 값을 JSON-safe한 형태로 변환한다.
-* - null / primitive — 그대로.
-* - 함수 — `'[Function: name]'` 문자열.
-* - 기타 객체 — JSON.stringify 실패 시 `'[unserializable]'`.
+* 선언 게이트에 걸리는 이름·access 조합이면 다이얼에 등록된 native errorCode를
+* 돌려준다. 세 권한 API(`getPermission`/`requestPermission`/`openPermissionDialog`)가
+* **걸리는 조건**은 공유하지만 **떨어지는 코드**는 공유하지 않는다 — 아래 참조.
 */
-function safeSerialize(value) {
-	if (value === null || value === void 0) return value;
-	if (typeof value === "function") return `[Function: ${value.name || "anonymous"}]`;
-	if (typeof value !== "object") return value;
-	try {
-		return JSON.parse(JSON.stringify(value));
-	} catch {
-		return "[unserializable]";
-	}
+function permissionGateCode(permission) {
+	if (permission.access === "access") return;
+	return aitState.state.failureModes.getPermission?.[permission.name];
 }
-//#endregion
-//#region src/mock/proxy.ts
 /**
-* 미구현 API용 Proxy 트립와이어.
+* `openPermissionDialog`가 선언 게이트에 걸렸을 때의 코드.
 *
-* 미구현 프로퍼티에 접근하면 throw한다. 이는 "devtools에서는 멀쩡히 돌지만
-* 실 SDK에선 실제로 동작하는" 시나리오를 차단하기 위한 의도적 선택이다.
-* mock이 미구현인 API는 실 SDK에서는 존재할 수 있고, 사용자가 이를 인지하지
-* 못한 채 개발을 이어가면 배포 시점에 놀라게 된다. 에러 메시지에 이슈 URL을
-* 포함해 사용자가 mock 누락을 제보할 수 있게 한다.
+* 형제 API와 갈린다 — env3 run11 실측(2.x/iOS, sdk-example#313에서 시나리오 키가
+* 통일되며 비교 대상에 들어온 값):
 *
-* ## KNOWN_UNIMPLEMENTED 정책
-* SDK에 존재하는 것으로 알려져 있으나 현재 mock이 없는 API 이름만 이 집합에 둔다.
-* 이 경우에만 throw 대신 🔴 inert no-op을 반환하고 sdkCallLog에 기록한다.
-* 완전히 미지의 이름은 여전히 throw — "잘 되는 척" 방지.
+*   getPermission        { geolocation, read }   → rejected NO_PERMISSION
+*   requestPermission    { geolocation, read }   → rejected NO_PERMISSION
+*   openPermissionDialog { geolocation, read }   → rejected INVALID_REQUEST
+*   openPermissionDialog { camera, access }      → resolved
+*
+* 즉 **걸리는 조건은 셋이 같고(access 축 모델 그대로) 코드만 갈린다.** 처음엔
+* `requestPermission`이 `openPermissionDialog`에 위임하니 게이트도 위임하면
+* 된다고 보고 한 지점에만 배선했는데, 그 모델은 코드 층위에서 실측과 어긋났다
+* (env1 NO_PERMISSION ↔ env3 INVALID_REQUEST). 그래서 `requestPermission`은
+* 위임 **전에** 자기 게이트를 먼저 타고, 다이얼로그를 여는 호출만 이 코드를 쓴다.
+*
+* 관측이 geolocation/read 한 조합뿐이라 이름·access별 분기는 두지 않는다 —
+* 근거 없는 확장은 #783에서 이름 단위 맵을 택한 원칙에 어긋난다.
 */
-const ISSUES_URL = "https://github.com/apps-in-toss-community/devtools/issues";
-/**
-* SDK에 존재하나 mock이 아직 없는 것으로 확인된 이름 목록.
-* 새 API가 SDK에 추가되면 여기에 추가하고 별도 PR에서 mock 구현으로 이동한다.
-* 확인되지 않은 이름은 절대 여기에 추가하지 않는다 — throw가 더 안전하다.
+const OPEN_DIALOG_GATE_CODE = "INVALID_REQUEST";
+async function openPermissionDialog(permission) {
+	if (permissionGateCode(permission)) throw buildNativeError(OPEN_DIALOG_GATE_CODE);
+	if (aitState.state.permissions[permission.name] === "allowed") return "allowed";
+	aitState.patch("permissions", { [permission.name]: "allowed" });
+	return "allowed";
+}
+async function requestPermission(permission) {
+	const failureCode = permissionGateCode(permission);
+	if (failureCode) throw buildNativeError(failureCode);
+	return openPermissionDialog(permission);
+}
+/** 권한이 필요한 함수에 .getPermission(), .openPermissionDialog()를 부착 */
+function withPermission(fn, permissionName) {
+	const enhanced = fn;
+	enhanced.getPermission = () => getPermission({
+		name: permissionName,
+		access: "access"
+	});
+	enhanced.openPermissionDialog = () => openPermissionDialog({
+		name: permissionName,
+		access: "access"
+	});
+	return enhanced;
+}
+/**
+* 권한 체크 후 denied면 per-API *PermissionError 서브클래스를 throw한다.
+* 실 3.0 SDK 동작과 일치 — `instanceof PermissionError` 분기가 mock에서도 동작한다 (#372).
 */
-const KNOWN_UNIMPLEMENTED = /* @__PURE__ */ new Set([]);
-function createMockProxy(moduleName, implementations) {
-	return new Proxy(implementations, { get(target, prop) {
-		if (typeof prop === "symbol") return void 0;
-		if (prop in target) return target[prop];
-		const name = String(prop);
-		if (KNOWN_UNIMPLEMENTED.has(name)) return (...args) => {
-			console.warn(`[@apps-in-toss/devtools] ${moduleName}.${name} is known-unimplemented (🔴 inert). Returning undefined. Please file or upvote an issue: ${ISSUES_URL}`);
-			aitState.logSdkCall({
-				method: `${moduleName}.${name}`,
-				args,
-				timestamp: Date.now(),
-				status: "resolved",
-				result: void 0,
-				fidelity: "inert"
+function checkPermission(name, fnName) {
+	if (aitState.state.permissions[name] === "denied") {
+		const ErrorClass = permissionErrorMap[fnName];
+		if (ErrorClass) throw new ErrorClass();
+		throw new PermissionError({ methodName: fnName });
+	}
+}
+//#endregion
+//#region src/mock/device/camera.ts
+/**
+* Camera & Album Photos & Album Items mock
+* mock/web/prompt 모드 지원
+*/
+async function openCameraMock() {
+	const images = getMockImages();
+	return {
+		id: crypto.randomUUID(),
+		dataUri: images[0]
+	};
+}
+async function openCameraWeb() {
+	return new Promise((resolve, reject) => {
+		const input = document.createElement("input");
+		input.type = "file";
+		input.accept = "image/*";
+		input.capture = "environment";
+		let settled = false;
+		input.onchange = () => {
+			settled = true;
+			const file = input.files?.[0];
+			if (!file) {
+				reject(/* @__PURE__ */ new Error("No file selected"));
+				return;
+			}
+			const reader = new FileReader();
+			reader.onload = () => resolve({
+				id: crypto.randomUUID(),
+				dataUri: reader.result
 			});
+			reader.onerror = () => reject(/* @__PURE__ */ new Error("Failed to read file"));
+			reader.readAsDataURL(file);
 		};
-		throw new Error(`[@apps-in-toss/devtools] ${moduleName}.${prop} is not mocked. This API may exist in @apps-in-toss/web-framework, but devtools' mock does not cover it yet. Please file an issue: ${ISSUES_URL}`);
-	} });
+		const onFocus = () => {
+			setTimeout(() => {
+				if (!settled) reject(/* @__PURE__ */ new Error("File picker cancelled"));
+				window.removeEventListener("focus", onFocus);
+			}, 300);
+		};
+		window.addEventListener("focus", onFocus);
+		input.click();
+	});
+}
+async function openCameraPrompt() {
+	const dataUri = await waitForPromptResponse("camera");
+	return {
+		id: crypto.randomUUID(),
+		dataUri
+	};
+}
+const _openCamera = async (_options) => {
+	checkPermission("camera", "openCamera");
+	const mode = aitState.state.deviceModes.camera;
+	if (mode === "web") return openCameraWeb();
+	if (mode === "prompt") return openCameraPrompt();
+	return openCameraMock();
+};
+const openCamera = withPermission(_openCamera, "camera");
+async function fetchAlbumPhotosMock(maxCount) {
+	return getMockImages().slice(0, maxCount).map((dataUri) => ({
+		id: crypto.randomUUID(),
+		dataUri
+	}));
+}
+async function fetchAlbumPhotosWeb(maxCount) {
+	return new Promise((resolve, reject) => {
+		const input = document.createElement("input");
+		input.type = "file";
+		input.accept = "image/*";
+		input.multiple = true;
+		let settled = false;
+		input.onchange = async () => {
+			settled = true;
+			const files = Array.from(input.files ?? []).slice(0, maxCount);
+			if (files.length === 0) {
+				reject(/* @__PURE__ */ new Error("No files selected"));
+				return;
+			}
+			resolve(await Promise.all(files.map((file) => new Promise((res, rej) => {
+				const reader = new FileReader();
+				reader.onload = () => res({
+					id: crypto.randomUUID(),
+					dataUri: reader.result
+				});
+				reader.onerror = () => rej(/* @__PURE__ */ new Error("Failed to read file"));
+				reader.readAsDataURL(file);
+			}))));
+		};
+		const onFocus = () => {
+			setTimeout(() => {
+				if (!settled) reject(/* @__PURE__ */ new Error("File picker cancelled"));
+				window.removeEventListener("focus", onFocus);
+			}, 300);
+		};
+		window.addEventListener("focus", onFocus);
+		input.click();
+	});
+}
+async function fetchAlbumPhotosPrompt(maxCount) {
+	return (await waitForPromptResponse("photos")).slice(0, maxCount).map((dataUri) => ({
+		id: crypto.randomUUID(),
+		dataUri
+	}));
+}
+const _fetchAlbumPhotos = async (options) => {
+	checkPermission("photos", "fetchAlbumPhotos");
+	const maxCount = options?.maxCount ?? 10;
+	const mode = aitState.state.deviceModes.photos;
+	if (mode === "web") return fetchAlbumPhotosWeb(maxCount);
+	if (mode === "prompt") return fetchAlbumPhotosPrompt(maxCount);
+	return fetchAlbumPhotosMock(maxCount);
+};
+const fetchAlbumPhotos = withPermission(_fetchAlbumPhotos, "photos");
+async function fetchAlbumItemsMock(maxCount, types) {
+	return getMockImages().slice(0, maxCount).filter(() => types.includes("PHOTO")).map((dataUri) => ({
+		id: crypto.randomUUID(),
+		dataUri,
+		type: "PHOTO"
+	}));
+}
+async function fetchAlbumItemsWeb(maxCount, types) {
+	return new Promise((resolve) => {
+		const input = document.createElement("input");
+		input.type = "file";
+		input.accept = types.includes("VIDEO") ? "image/*,video/*" : "image/*";
+		input.multiple = true;
+		let settled = false;
+		input.onchange = async () => {
+			settled = true;
+			const files = Array.from(input.files ?? []).slice(0, maxCount);
+			if (files.length === 0) {
+				resolve([]);
+				return;
+			}
+			resolve(await Promise.all(files.map((file) => new Promise((res, rej) => {
+				const itemType = file.type.startsWith("video/") ? "VIDEO" : "PHOTO";
+				const reader = new FileReader();
+				reader.onload = () => res({
+					id: crypto.randomUUID(),
+					dataUri: reader.result,
+					type: itemType
+				});
+				reader.onerror = () => rej(/* @__PURE__ */ new Error("Failed to read file"));
+				reader.readAsDataURL(file);
+			}))));
+		};
+		const onFocus = () => {
+			setTimeout(() => {
+				if (!settled) resolve([]);
+				window.removeEventListener("focus", onFocus);
+			}, 300);
+		};
+		window.addEventListener("focus", onFocus);
+		input.click();
+	});
 }
+async function fetchAlbumItemsPrompt(maxCount) {
+	return (await waitForPromptResponse("photos")).slice(0, maxCount).map((dataUri) => ({
+		id: crypto.randomUUID(),
+		dataUri,
+		type: "PHOTO"
+	}));
+}
+const _fetchAlbumItems = async (options) => {
+	checkPermission("photos", "fetchAlbumItems");
+	const maxCount = options?.maxCount ?? 10;
+	const types = options?.types ?? ["PHOTO"];
+	const mode = aitState.state.deviceModes.photos;
+	if (mode === "web") return fetchAlbumItemsWeb(maxCount, types);
+	if (mode === "prompt") return fetchAlbumItemsPrompt(maxCount);
+	return fetchAlbumItemsMock(maxCount, types);
+};
+const _fetchAlbumItemsWithPermission = withPermission(_fetchAlbumItems, "photos");
+const fetchAlbumItems = Object.assign(_fetchAlbumItemsWithPermission, { isSupported: () => true });
 //#endregion
 //#region src/mock/throttle.ts
 /**
@@ -585,1017 +802,1195 @@ function checkThrottle(method) {
 	if (err) throw err;
 }
 //#endregion
-//#region src/mock/ads/index.ts
-function withIsSupported(fn) {
-	fn.isSupported = () => true;
-	return fn;
-}
-const _slotRegistry = /* @__PURE__ */ new Map();
-let _slotCounter = 0;
-function _nextSlotId(adGroupId) {
-	_slotCounter += 1;
-	return `mock-slot-${adGroupId}-${_slotCounter}`;
-}
-const GoogleAdMob$1 = createMockProxy("GoogleAdMob", {
-	loadAppsInTossAdMob: withIsSupported(observe("GoogleAdMob.loadAppsInTossAdMob", "faithful", (args) => {
-		setTimeout(() => {
-			const failureCode = aitState.state.failureModes.loadAdMob;
-			if (failureCode) {
-				args.onError(buildNativeError(failureCode));
-				return;
-			}
-			const throttleError = throttleErrorFor("loadAppsInTossAdMob");
-			if (throttleError) {
-				args.onError(throttleError);
-				return;
-			}
-			if (aitState.state.ads.forceNoFill) {
-				args.onError(/* @__PURE__ */ new Error("No fill"));
-				return;
-			}
-			aitState.patch("ads", { isLoaded: true });
-			args.onEvent({
-				type: "loaded",
-				data: {
-					adGroupId: args.options.adGroupId,
-					adUnitId: `mock-unit-${args.options.adGroupId}`,
-					responseInfo: {
-						responseId: `mock-response-${args.options.adGroupId}`,
-						adNetworkInfoArray: [],
-						loadedAdNetworkInfo: null
-					}
-				}
-			});
-		}, 200);
-		return () => {};
-	})),
-	showAppsInTossAdMob: withIsSupported(observe("GoogleAdMob.showAppsInTossAdMob", "faithful", (args) => {
-		if (!aitState.state.ads.isLoaded) {
-			args.onError(/* @__PURE__ */ new Error("Ad not loaded"));
-			return () => {};
-		}
-		const { rewardUnitType, rewardAmount } = aitState.state.ads;
-		setTimeout(() => args.onEvent({
-			type: "userEarnedReward",
-			data: {
-				unitType: rewardUnitType,
-				unitAmount: rewardAmount
-			}
-		}), 1e3);
-		setTimeout(() => {
-			args.onEvent({ type: "dismissed" });
-			aitState.patch("ads", { isLoaded: false });
-		}, 1500);
-		return () => {};
-	})),
-	isAppsInTossAdMobLoaded: withIsSupported(observe("GoogleAdMob.isAppsInTossAdMobLoaded", "faithful", async (_options) => {
-		if (_options?.adGroupId !== void 0 && _options.adGroupId.trim() === "") throw buildNativeError("INVALID_REQUEST");
-		return aitState.state.ads.isLoaded;
-	}))
-});
-const TossAds = createMockProxy("TossAds", {
-	initialize: withIsSupported(observe("TossAds.initialize", "partial", (options) => {
-		if (aitState.state.ads.forceNoFill) {
-			options.callbacks?.onInitializationFailed?.(/* @__PURE__ */ new Error("No fill"));
-			return;
-		}
-		options.callbacks?.onInitialized?.();
-	})),
-	attach: withIsSupported(observe("TossAds.attach", "partial", (_adGroupId, target, _options) => {
-		const el = typeof target === "string" ? document.querySelector(target) : target;
-		if (el) {
-			const placeholder = document.createElement("div");
-			placeholder.style.cssText = "background:#f0f0f0;border:1px dashed #999;padding:16px;text-align:center;color:#666;font-size:14px;";
-			placeholder.textContent = "[@apps-in-toss/devtools] TossAds Placeholder";
-			el.appendChild(placeholder);
-		}
-	})),
-	attachBanner: withIsSupported(observe("TossAds.attachBanner", "faithful", (adGroupId, target, options) => {
-		const el = typeof target === "string" ? document.querySelector(target) : target;
-		const slotId = _nextSlotId(adGroupId);
-		const placeholder = document.createElement("div");
-		const theme = options?.theme ?? "auto";
-		const variant = options?.variant ?? "card";
-		const isDark = theme === "dark" || theme === "auto" && typeof window !== "undefined" && window.matchMedia?.("(prefers-color-scheme: dark)").matches;
-		const bg = isDark ? "#1a1a1a" : "#f0f0f0";
-		const textColor = isDark ? "#aaa" : "#666";
-		const borderColor = isDark ? "#555" : "#999";
-		const height = variant === "expanded" ? "120px" : "60px";
-		placeholder.dataset.aitSlotId = slotId;
-		placeholder.style.cssText = `background:${bg};border:1px dashed ${borderColor};padding:8px 12px;text-align:center;color:${textColor};font-size:12px;min-height:${height};display:flex;align-items:center;justify-content:center;`;
-		placeholder.textContent = `[@apps-in-toss/devtools] Banner Ad (${variant})`;
-		if (el) {
-			el.appendChild(placeholder);
-			_slotRegistry.set(slotId, placeholder);
-		}
-		const destroySlot = () => {
-			const registered = _slotRegistry.get(slotId);
-			if (registered) {
-				registered.remove();
-				_slotRegistry.delete(slotId);
-			}
-		};
-		setTimeout(() => {
-			if (aitState.state.ads.forceNoFill) {
-				options?.callbacks?.onNoFill?.({
-					slotId,
-					adGroupId,
-					adMetadata: {}
-				});
-				options?.callbacks?.onAdFailedToRender?.({
-					slotId,
-					adGroupId,
-					adMetadata: {},
-					error: {
-						code: 0,
-						message: "No fill"
-					}
-				});
-				return;
-			}
-			const eventPayload = {
-				slotId,
-				adGroupId,
-				adMetadata: {
-					creativeId: `mock-creative-${slotId}`,
-					requestId: `mock-req-${slotId}`
-				}
-			};
-			options?.callbacks?.onAdRendered?.(eventPayload);
-			options?.callbacks?.onAdImpression?.(eventPayload);
-		}, 100);
-		return { destroy: destroySlot };
-	})),
-	destroy: withIsSupported(observe("TossAds.destroy", "faithful", (slotId) => {
-		const el = _slotRegistry.get(slotId);
-		if (el) {
-			el.remove();
-			_slotRegistry.delete(slotId);
-		}
-	})),
-	destroyAll: withIsSupported(observe("TossAds.destroyAll", "faithful", () => {
-		for (const el of _slotRegistry.values()) el.remove();
-		_slotRegistry.clear();
-	}))
-});
-const loadFullScreenAd$1 = observe("loadFullScreenAd", "faithful", (args) => {
-	setTimeout(() => {
-		const failureCode = aitState.state.failureModes.loadFullScreenAd;
-		if (failureCode) {
-			args.onError(buildNativeError(failureCode));
-			return;
-		}
-		const throttleError = throttleErrorFor("loadFullScreenAd");
-		if (throttleError) {
-			args.onError(throttleError);
-			return;
-		}
-		if (aitState.state.ads.forceNoFill) {
-			args.onError(/* @__PURE__ */ new Error("No fill"));
-			return;
-		}
-		aitState.patch("ads", { isLoaded: true });
-		args.onEvent({ type: "loaded" });
-	}, 200);
-	return () => {};
-});
-const showFullScreenAd$1 = withIsSupported(observe("showFullScreenAd", "faithful", (args) => {
-	if (!aitState.state.ads.isLoaded) {
-		args.onError(/* @__PURE__ */ new Error("Ad not loaded"));
-		return () => {};
-	}
-	setTimeout(() => args.onEvent({ type: "clicked" }), 100);
-	setTimeout(() => args.onEvent({ type: "dismissed" }), 1500);
-	return () => {};
-}));
-//#endregion
-//#region src/mock/analytics/index.ts
+//#region src/mock/device/clipboard.ts
 /**
-* Analytics mock
+* Clipboard mock
+* mock/web 모드 지원
 */
-const Analytics$1 = {
-	screen: (params) => {
-		aitState.logAnalytics({
-			type: "screen",
-			params: params ?? {}
-		});
-		return Promise.resolve(null);
-	},
-	impression: (params) => {
-		aitState.logAnalytics({
-			type: "impression",
-			params: params ?? {}
-		});
-		return Promise.resolve(null);
-	},
-	click: (params) => {
-		aitState.logAnalytics({
-			type: "click",
-			params: params ?? {}
-		});
-		return Promise.resolve(null);
+const _getClipboardText = async () => {
+	checkPermission("clipboard", "getClipboardText");
+	checkThrottle("getClipboardText");
+	if (aitState.state.deviceModes.clipboard === "mock") return aitState.state.mockData.clipboardText;
+	try {
+		return await navigator.clipboard.readText();
+	} catch {
+		return "";
 	}
 };
-async function eventLog(params) {
-	aitState.logAnalytics({
-		type: params.log_type,
-		params: {
-			log_name: params.log_name,
-			...params.params
-		}
-	});
-	return null;
-}
+const getClipboardText = withPermission(_getClipboardText, "clipboard");
+const _setClipboardText = async (text) => {
+	checkPermission("clipboard", "setClipboardText");
+	checkThrottle("setClipboardText");
+	if (aitState.state.deviceModes.clipboard === "mock") {
+		aitState.patch("mockData", { clipboardText: text });
+		return { text };
+	}
+	await navigator.clipboard.writeText(text);
+	return { text };
+};
+const setClipboardText = withPermission(_setClipboardText, "clipboard");
 //#endregion
-//#region src/mock/auth/index.ts
-/**
-* 인증/로그인 mock
-*/
-async function appLogin() {
-	const failureCode = aitState.state.failureModes.appLogin;
-	if (failureCode) throw buildNativeError(failureCode);
-	return {
-		authorizationCode: `mock-auth-${crypto.randomUUID()}`,
-		referrer: aitState.state.environment === "toss" ? "DEFAULT" : "SANDBOX"
-	};
-}
-async function getIsTossLoginIntegratedService$1() {
-	const failureCode = aitState.state.failureModes.getIsTossLoginIntegratedService;
-	if (failureCode) throw buildNativeError(failureCode);
-	return aitState.state.auth.isTossLoginIntegrated;
-}
-async function getUserKeyForGame$1() {
-	return {
-		hash: aitState.state.auth.userKeyHash ?? "",
-		type: "HASH"
-	};
-}
-async function getAnonymousKey$1() {
-	if (!aitState.state.auth.anonymousKeyHash) return void 0;
+//#region src/mock/device/contacts.ts
+const _fetchContacts = async (options) => {
+	checkPermission("contacts", "fetchContacts");
+	let contacts = aitState.state.contacts;
+	if (options.query?.contains) {
+		const q = options.query.contains.toLowerCase();
+		contacts = contacts.filter((c) => c.name.toLowerCase().includes(q) || c.phoneNumber.includes(q));
+	}
+	const sliced = contacts.slice(options.offset, options.offset + options.size);
+	const nextOffset = options.offset + options.size;
 	return {
-		hash: aitState.state.auth.anonymousKeyHash,
-		type: "HASH"
+		result: sliced,
+		nextOffset: nextOffset < contacts.length ? nextOffset : null,
+		done: nextOffset >= contacts.length
 	};
-}
-async function appsInTossSignTossCert$1(_params) {
-	console.log("[@apps-in-toss/devtools] appsInTossSignTossCert called (no-op in mock)");
-}
+};
 /**
-* 사용자 동의 기반 데이터 mock (devtools#798 — env1에 배선 부재였던 실 export).
+* 상류 SDK는 `fetchContacts`의 타입에 `.getPermission`/`.openPermissionDialog`를
+* `PermissionFunctionWithDialog`로 선언하지만, 실기기(2.x×iOS)에는 그 메서드가
+* **런타임에 붙어 있지 않다**(devtools#795 — 호출 시 `fetchContacts.getPermission
+* is not a function` native `TypeError`). standalone `getPermission({name:
+* 'contacts', access: 'access'})`는 실기기에서 정상 resolve하므로(env3 run11,
+* `../permissions.ts`) 부재는 fetchContacts에 **부착된** 메서드에만 해당하는
+* 상류 타입↔런타임 불일치다.
 *
-* SDK는 이 API를 `@apps-in-toss/web-bridge` 호환 export로 노출하며 2.x와 3.x GA
-* 양쪽 facade에서 제공한다. 선언 시그니처는 `Promise<Partial<Record<ConsentedUserDataKey, string>>
-* | undefined>` — appLogin과 같은 async bridge 모양이라 항상 resolve하는 낙관적
-* 패턴을 따른다.
+* mock은 다른 device API처럼 `withPermission()`으로 감싸지 않고, bare async fn을
+* 상류 시그니처로만 캐스트한다 — `.getPermission`/`.openPermissionDialog` 접근은
+* `undefined`가 되고, 호출하면 `undefined()` → native `TypeError`로 떨어져
+* 실기기와 일치한다(`__typecheck.ts`/`__typecheck-2x.ts`는 캐스트 타입에 두
+* 메서드가 여전히 남아 있어 그대로 통과). `_fetchContacts` 내부에서 이미
+* `checkPermission`을 호출하므로 메인 동작(권한 거부 시
+* `FetchContactsPermissionError`)은 변화 없다.
 *
-* 어떤 키가 채워지는지는 콘솔에 등록된 동의문/데이터 묶음(`consentedUserDataKey`)에
-* 달려 있고 그 매핑은 서버 쪽 설정이라 mock이 알 수 없다 — 호출 파라미터와 무관하게
-* 상태에 저장된 최소 plausible 객체를 그대로 resolve한다. SDK 선언 밖의 필드는
-* 추가하지 않는다(devtools#783 — 실측/타입 밖 추정 금지).
+* 직접 관측된 것은 `getPermission` 부재뿐이다. `openPermissionDialog` 부재는
+* "상류가 fetchContacts에 권한 헬퍼 전체를 붙이지 않는다"는 합리적 추론이지
+* 별도 실측은 아니다. 다른 `withPermission` API(clipboard/camera/location)로는
+* 이 부재를 확장하지 않는다 — 그쪽 부착 메서드가 실기기에서 없다는 관측은
+* 없다(#783 "측정 밖 확장 금지" 원칙).
 */
-async function getConsentedUserData$1(_options) {
-	return aitState.state.auth.consentedUserData;
-}
-async function getDeclaredAgeRange$1(_params) {
-	return { ...aitState.state.auth.declaredAgeRange };
-}
+const fetchContacts = _fetchContacts;
 //#endregion
-//#region src/mock/device/_helpers.ts
+//#region src/mock/device/haptic.ts
 /**
-* 디바이스 모듈 내부 공유 헬퍼
+* Haptic Feedback & saveBase64Data mock
+*
+* generateHapticFeedback — 영역 3 (하드웨어 API 관측):
+*   - 10종 HapticFeedbackType을 navigator.vibrate 패턴으로 매핑(근사, best-effort).
+*   - `typeof navigator.vibrate === 'function'` 가드 — API 없는 환경에서 throw 없이 skip.
+*   - @ait-co/polyfill 동시 사용 시 재귀 방지: polyfill이 navigator.vibrate를 override하고
+*     내부에서 mock의 generateHapticFeedback을 호출하므로 무한 재귀가 발생한다. polyfill이
+*     원본 vibrate를 BACKUP_KEY(Symbol.for('@ait-co/polyfill/vibrate.original'))에 저장하면
+*     그 원본을 직접 호출해 재귀를 끊는다.
+*   - sdkCallLog에 🟡(partial)로 기록. params: { hapticType, vibrated: boolean }.
+*   - 시그니처 불변 — __typecheck.ts의 Assert<Mock, Original> 통과.
 */
-function generatePlaceholderImage(width, height, text, color) {
-	const canvas = document.createElement("canvas");
-	canvas.width = width;
-	canvas.height = height;
-	const ctx = canvas.getContext("2d");
-	if (!ctx) {
-		const svg = `<svg xmlns="http://www.w3.org/2000/svg" width="${width}" height="${height}"><rect fill="${color}" width="${width}" height="${height}"/><text x="50%" y="50%" fill="white" font-size="16" text-anchor="middle" dominant-baseline="middle">${text}</text></svg>`;
-		return `data:image/svg+xml;base64,${btoa(svg)}`;
-	}
-	ctx.fillStyle = color;
-	ctx.fillRect(0, 0, width, height);
-	ctx.fillStyle = "white";
-	ctx.font = "16px sans-serif";
-	ctx.textAlign = "center";
-	ctx.textBaseline = "middle";
-	ctx.fillText(text, width / 2, height / 2);
-	return canvas.toDataURL("image/png");
-}
-const DEFAULT_PLACEHOLDERS = [
-	{
-		text: "Mock Photo 1",
-		color: "#3182F6"
-	},
-	{
-		text: "Mock Photo 2",
-		color: "#27ae60"
-	},
-	{
-		text: "Mock Photo 3",
-		color: "#e67e22"
-	}
-];
-let cachedPlaceholders = null;
-function getDefaultPlaceholderImages() {
-	if (!cachedPlaceholders) cachedPlaceholders = DEFAULT_PLACEHOLDERS.map((p) => generatePlaceholderImage(320, 240, p.text, p.color));
-	return [...cachedPlaceholders];
-}
-/** @internal device 모듈 내부 전용 */
-function getMockImages() {
-	const images = aitState.state.mockData.images;
-	if (images.length > 0) return images;
-	return getDefaultPlaceholderImages();
-}
-const PROMPT_TIMEOUT_MS = 3e4;
-/** @internal device 모듈 내부 전용 */
-function waitForPromptResponse(type) {
-	return new Promise((resolve, reject) => {
-		const eventName = `__ait:prompt-response:${type}`;
-		const cancelName = "__ait:prompt-cancel";
-		function cleanup() {
-			clearTimeout(timer);
-			window.removeEventListener(eventName, handler);
-			window.removeEventListener(cancelName, cancelHandler);
-		}
-		const timer = setTimeout(() => {
-			cleanup();
-			const hint = !!document.querySelector(".ait-panel") ? "Please provide input via the DevTools panel." : "Is @apps-in-toss/devtools/panel imported?";
-			reject(/* @__PURE__ */ new Error(`[@apps-in-toss/devtools] Prompt timeout for "${type}" after ${PROMPT_TIMEOUT_MS / 1e3}s. ${hint}`));
-		}, PROMPT_TIMEOUT_MS);
-		const handler = (e) => {
-			cleanup();
-			resolve(e.detail);
-		};
-		const cancelHandler = () => {
-			cleanup();
-			reject(/* @__PURE__ */ new Error(`[@apps-in-toss/devtools] Prompt cancelled for "${type}"`));
-		};
-		window.addEventListener(eventName, handler);
-		window.addEventListener(cancelName, cancelHandler);
-		window.dispatchEvent(new CustomEvent("__ait:prompt-request", { detail: { type } }));
-	});
-}
-//#endregion
-//#region src/mock/permissions.ts
 /**
-* web-framework 3.0+ 권한 에러 기반 클래스.
-* `instanceof PermissionError`로 체크하는 코드와 호환된다.
+* HapticFeedbackType 10종 → navigator.vibrate 패턴 매핑.
+* 숫자: 진동 ms. 배열: [진동, 정지, 진동, …] 교대 패턴.
 */
-var PermissionError = class extends Error {
-	constructor({ methodName, message }) {
-		super(message ?? `${methodName}: permission denied`);
-		this.name = `${methodName}PermissionError`;
-	}
-};
-/** openCamera 권한 에러 */
-var OpenCameraPermissionError = class extends PermissionError {
-	constructor() {
-		super({ methodName: "openCamera" });
-	}
-};
-/** fetchAlbumPhotos 권한 에러 */
-var FetchAlbumPhotosPermissionError = class extends PermissionError {
-	constructor() {
-		super({ methodName: "fetchAlbumPhotos" });
-	}
-};
-/** fetchContacts 권한 에러 */
-var FetchContactsPermissionError = class extends PermissionError {
-	constructor() {
-		super({ methodName: "fetchContacts" });
-	}
-};
-/** getCurrentLocation 권한 에러 */
-var GetCurrentLocationPermissionError = class extends PermissionError {
-	constructor() {
-		super({ methodName: "getCurrentLocation" });
-	}
-};
-/** getClipboardText 권한 에러 */
-var GetClipboardTextPermissionError = class extends PermissionError {
-	constructor() {
-		super({ methodName: "getClipboardText" });
-	}
-};
-/** setClipboardText 권한 에러 */
-var SetClipboardTextPermissionError = class extends PermissionError {
-	constructor() {
-		super({ methodName: "setClipboardText" });
-	}
+const HAPTIC_VIBRATE_PATTERN = {
+	tickWeak: 10,
+	tap: 20,
+	tickMedium: 30,
+	softMedium: 40,
+	basicWeak: 15,
+	basicMedium: 50,
+	success: [
+		10,
+		40,
+		10
+	],
+	error: [
+		40,
+		30,
+		40
+	],
+	wiggle: [
+		20,
+		20,
+		20,
+		20,
+		20
+	],
+	confetti: [
+		10,
+		20,
+		10,
+		20,
+		10,
+		20,
+		10
+	]
 };
 /**
-* startUpdateLocation 권한 에러.
-* web-framework 3.0에서 GetCurrentLocationPermissionError의 alias.
+* navigator.vibrate를 안전하게 호출한다.
+*
+* @ait-co/polyfill/auto가 설치된 환경에서는 navigator.vibrate가 polyfill shim으로
+* override되어 있고, 그 shim은 내부적으로 mock의 generateHapticFeedback을 호출한다.
+* mock이 다시 navigator.vibrate(현재 = shim)를 호출하면 무한 재귀가 발생한다.
+* polyfill은 원본 vibrate를 BACKUP_KEY에 저장하므로 그쪽을 직접 호출한다.
 */
-const StartUpdateLocationPermissionError = GetCurrentLocationPermissionError;
-const permissionErrorMap = {
-	openCamera: OpenCameraPermissionError,
-	fetchAlbumPhotos: FetchAlbumPhotosPermissionError,
-	fetchAlbumItems: FetchAlbumPhotosPermissionError,
-	fetchContacts: FetchContactsPermissionError,
-	getCurrentLocation: GetCurrentLocationPermissionError,
-	getClipboardText: GetClipboardTextPermissionError,
-	setClipboardText: SetClipboardTextPermissionError
-};
-async function getPermission(permission) {
-	const failureCode = permissionGateCode(permission);
-	if (failureCode) throw buildNativeError(failureCode);
-	return aitState.state.permissions[permission.name];
+const POLYFILL_VIBRATE_BACKUP = Symbol.for("@ait-co/polyfill/vibrate.original");
+function callVibrate(pattern) {
+	if (typeof navigator === "undefined") return false;
+	const nav = navigator;
+	const original = POLYFILL_VIBRATE_BACKUP in nav ? nav[POLYFILL_VIBRATE_BACKUP] : null;
+	if (typeof original === "function") return original(pattern);
+	return typeof navigator.vibrate === "function" ? navigator.vibrate(pattern) : false;
 }
-/**
-* 선언 게이트에 걸리는 이름·access 조합이면 다이얼에 등록된 native errorCode를
-* 돌려준다. 세 권한 API(`getPermission`/`requestPermission`/`openPermissionDialog`)가
-* **걸리는 조건**은 공유하지만 **떨어지는 코드**는 공유하지 않는다 — 아래 참조.
-*/
-function permissionGateCode(permission) {
-	if (permission.access === "access") return;
-	return aitState.state.failureModes.getPermission?.[permission.name];
+async function generateHapticFeedback(options) {
+	if (!Object.hasOwn(HAPTIC_VIBRATE_PATTERN, options.type)) throw buildNativeError("EXECUTION_ERROR");
+	const timestamp = Date.now();
+	aitState.logAnalytics({
+		type: "haptic",
+		params: { hapticType: options.type }
+	});
+	const vibrated = callVibrate(HAPTIC_VIBRATE_PATTERN[options.type] ?? 30);
+	aitState.logSdkCall({
+		method: "generateHapticFeedback",
+		args: [{ type: options.type }],
+		timestamp,
+		status: "resolved",
+		result: {
+			hapticType: options.type,
+			vibrated
+		},
+		fidelity: "partial"
+	});
 }
-/**
-* `openPermissionDialog`가 선언 게이트에 걸렸을 때의 코드.
-*
-* 형제 API와 갈린다 — env3 run11 실측(2.x/iOS, sdk-example#313에서 시나리오 키가
-* 통일되며 비교 대상에 들어온 값):
-*
-*   getPermission        { geolocation, read }   → rejected NO_PERMISSION
-*   requestPermission    { geolocation, read }   → rejected NO_PERMISSION
-*   openPermissionDialog { geolocation, read }   → rejected INVALID_REQUEST
-*   openPermissionDialog { camera, access }      → resolved
-*
-* 즉 **걸리는 조건은 셋이 같고(access 축 모델 그대로) 코드만 갈린다.** 처음엔
-* `requestPermission`이 `openPermissionDialog`에 위임하니 게이트도 위임하면
-* 된다고 보고 한 지점에만 배선했는데, 그 모델은 코드 층위에서 실측과 어긋났다
-* (env1 NO_PERMISSION ↔ env3 INVALID_REQUEST). 그래서 `requestPermission`은
-* 위임 **전에** 자기 게이트를 먼저 타고, 다이얼로그를 여는 호출만 이 코드를 쓴다.
-*
-* 관측이 geolocation/read 한 조합뿐이라 이름·access별 분기는 두지 않는다 —
-* 근거 없는 확장은 #783에서 이름 단위 맵을 택한 원칙에 어긋난다.
-*/
-const OPEN_DIALOG_GATE_CODE = "INVALID_REQUEST";
-async function openPermissionDialog(permission) {
-	if (permissionGateCode(permission)) throw buildNativeError(OPEN_DIALOG_GATE_CODE);
-	if (aitState.state.permissions[permission.name] === "allowed") return "allowed";
-	aitState.patch("permissions", { [permission.name]: "allowed" });
-	return "allowed";
-}
-async function requestPermission(permission) {
-	const failureCode = permissionGateCode(permission);
-	if (failureCode) throw buildNativeError(failureCode);
-	return openPermissionDialog(permission);
-}
-/** 권한이 필요한 함수에 .getPermission(), .openPermissionDialog()를 부착 */
-function withPermission(fn, permissionName) {
-	const enhanced = fn;
-	enhanced.getPermission = () => getPermission({
-		name: permissionName,
-		access: "access"
-	});
-	enhanced.openPermissionDialog = () => openPermissionDialog({
-		name: permissionName,
-		access: "access"
-	});
-	return enhanced;
-}
-/**
-* 권한 체크 후 denied면 per-API *PermissionError 서브클래스를 throw한다.
-* 실 3.0 SDK 동작과 일치 — `instanceof PermissionError` 분기가 mock에서도 동작한다 (#372).
-*/
-function checkPermission(name, fnName) {
-	if (aitState.state.permissions[name] === "denied") {
-		const ErrorClass = permissionErrorMap[fnName];
-		if (ErrorClass) throw new ErrorClass();
-		throw new PermissionError({ methodName: fnName });
-	}
+async function saveBase64Data$1(params) {
+	if (params.data === "") throw buildNativeError("INVALID_DATA");
+	const a = document.createElement("a");
+	a.href = `data:${params.mimeType};base64,${params.data}`;
+	a.download = params.fileName;
+	a.click();
 }
 //#endregion
-//#region src/mock/device/camera.ts
+//#region src/mock/device/location.ts
 /**
-* Camera & Album Photos & Album Items mock
+* Location mock (getCurrentLocation, startUpdateLocation)
 * mock/web/prompt 모드 지원
 */
-async function openCameraMock() {
-	const images = getMockImages();
+var Accuracy = /* @__PURE__ */ function(Accuracy) {
+	Accuracy[Accuracy["Lowest"] = 1] = "Lowest";
+	Accuracy[Accuracy["Low"] = 2] = "Low";
+	Accuracy[Accuracy["Balanced"] = 3] = "Balanced";
+	Accuracy[Accuracy["High"] = 4] = "High";
+	Accuracy[Accuracy["Highest"] = 5] = "Highest";
+	Accuracy[Accuracy["BestForNavigation"] = 6] = "BestForNavigation";
+	return Accuracy;
+}(Accuracy || {});
+function buildLocation() {
 	return {
-		id: crypto.randomUUID(),
-		dataUri: images[0]
+		coords: { ...aitState.state.location.coords },
+		timestamp: Date.now(),
+		accessLocation: aitState.state.location.accessLocation
 	};
 }
-async function openCameraWeb() {
-	return new Promise((resolve, reject) => {
-		const input = document.createElement("input");
-		input.type = "file";
-		input.accept = "image/*";
-		input.capture = "environment";
-		let settled = false;
-		input.onchange = () => {
-			settled = true;
-			const file = input.files?.[0];
-			if (!file) {
-				reject(/* @__PURE__ */ new Error("No file selected"));
-				return;
-			}
-			const reader = new FileReader();
-			reader.onload = () => resolve({
-				id: crypto.randomUUID(),
-				dataUri: reader.result
+async function getCurrentLocationMock() {
+	const { coords, timestamp } = buildLocation();
+	return {
+		coords,
+		timestamp
+	};
+}
+async function getCurrentLocationWeb() {
+	return new Promise((resolve) => {
+		if (!navigator.geolocation) {
+			console.warn("[@apps-in-toss/devtools] Geolocation API not available, falling back to mock");
+			resolve(buildLocation());
+			return;
+		}
+		navigator.geolocation.getCurrentPosition((pos) => {
+			resolve({
+				coords: {
+					latitude: pos.coords.latitude,
+					longitude: pos.coords.longitude,
+					altitude: pos.coords.altitude ?? 0,
+					accuracy: pos.coords.accuracy,
+					altitudeAccuracy: pos.coords.altitudeAccuracy ?? 0,
+					heading: pos.coords.heading ?? 0
+				},
+				timestamp: pos.timestamp
 			});
-			reader.onerror = () => reject(/* @__PURE__ */ new Error("Failed to read file"));
-			reader.readAsDataURL(file);
-		};
-		const onFocus = () => {
-			setTimeout(() => {
-				if (!settled) reject(/* @__PURE__ */ new Error("File picker cancelled"));
-				window.removeEventListener("focus", onFocus);
-			}, 300);
-		};
-		window.addEventListener("focus", onFocus);
-		input.click();
+		}, () => {
+			console.warn("[@apps-in-toss/devtools] Geolocation failed, falling back to mock");
+			resolve(buildLocation());
+		});
 	});
 }
-async function openCameraPrompt() {
-	const dataUri = await waitForPromptResponse("camera");
+async function getCurrentLocationPrompt() {
+	const { coords, timestamp } = await waitForPromptResponse("location");
 	return {
-		id: crypto.randomUUID(),
-		dataUri
+		coords,
+		timestamp
 	};
 }
-const _openCamera = async (_options) => {
-	checkPermission("camera", "openCamera");
-	const mode = aitState.state.deviceModes.camera;
-	if (mode === "web") return openCameraWeb();
-	if (mode === "prompt") return openCameraPrompt();
-	return openCameraMock();
+const _getCurrentLocation = async (_options) => {
+	checkPermission("geolocation", "getCurrentLocation");
+	checkThrottle("getCurrentLocation");
+	const mode = aitState.state.deviceModes.location;
+	if (mode === "web") return getCurrentLocationWeb();
+	if (mode === "prompt") return getCurrentLocationPrompt();
+	return getCurrentLocationMock();
 };
-const openCamera = withPermission(_openCamera, "camera");
-async function fetchAlbumPhotosMock(maxCount) {
-	return getMockImages().slice(0, maxCount).map((dataUri) => ({
-		id: crypto.randomUUID(),
-		dataUri
-	}));
+const getCurrentLocation = withPermission(_getCurrentLocation, "geolocation");
+function startUpdateLocationMock(eventParams) {
+	const { onEvent, options } = eventParams;
+	const interval = Math.max(options.timeInterval, 500);
+	const id = setInterval(() => {
+		const loc = buildLocation();
+		loc.coords.latitude += (Math.random() - .5) * 1e-4;
+		loc.coords.longitude += (Math.random() - .5) * 1e-4;
+		onEvent(loc);
+	}, interval);
+	return () => clearInterval(id);
 }
-async function fetchAlbumPhotosWeb(maxCount) {
-	return new Promise((resolve, reject) => {
-		const input = document.createElement("input");
-		input.type = "file";
-		input.accept = "image/*";
-		input.multiple = true;
-		let settled = false;
-		input.onchange = async () => {
-			settled = true;
-			const files = Array.from(input.files ?? []).slice(0, maxCount);
-			if (files.length === 0) {
-				reject(/* @__PURE__ */ new Error("No files selected"));
-				return;
-			}
-			resolve(await Promise.all(files.map((file) => new Promise((res, rej) => {
-				const reader = new FileReader();
-				reader.onload = () => res({
-					id: crypto.randomUUID(),
-					dataUri: reader.result
-				});
-				reader.onerror = () => rej(/* @__PURE__ */ new Error("Failed to read file"));
-				reader.readAsDataURL(file);
-			}))));
-		};
-		const onFocus = () => {
-			setTimeout(() => {
-				if (!settled) reject(/* @__PURE__ */ new Error("File picker cancelled"));
-				window.removeEventListener("focus", onFocus);
-			}, 300);
-		};
-		window.addEventListener("focus", onFocus);
-		input.click();
-	});
+function startUpdateLocationWeb(eventParams) {
+	const { onEvent, onError } = eventParams;
+	if (!navigator.geolocation) {
+		console.warn("[@apps-in-toss/devtools] Geolocation API not available, falling back to mock");
+		return startUpdateLocationMock(eventParams);
+	}
+	const watchId = navigator.geolocation.watchPosition((pos) => {
+		onEvent({
+			coords: {
+				latitude: pos.coords.latitude,
+				longitude: pos.coords.longitude,
+				altitude: pos.coords.altitude ?? 0,
+				accuracy: pos.coords.accuracy,
+				altitudeAccuracy: pos.coords.altitudeAccuracy ?? 0,
+				heading: pos.coords.heading ?? 0
+			},
+			timestamp: pos.timestamp,
+			accessLocation: "FINE"
+		});
+	}, (err) => onError(err));
+	return () => navigator.geolocation.clearWatch(watchId);
 }
-async function fetchAlbumPhotosPrompt(maxCount) {
-	return (await waitForPromptResponse("photos")).slice(0, maxCount).map((dataUri) => ({
-		id: crypto.randomUUID(),
-		dataUri
-	}));
+function startUpdateLocationPrompt(eventParams) {
+	const { onEvent } = eventParams;
+	const handler = (e) => {
+		onEvent(e.detail);
+	};
+	window.addEventListener("__ait:prompt-response:location-update", handler);
+	window.dispatchEvent(new CustomEvent("__ait:prompt-request", { detail: { type: "location-update" } }));
+	return () => window.removeEventListener("__ait:prompt-response:location-update", handler);
 }
-const _fetchAlbumPhotos = async (options) => {
-	checkPermission("photos", "fetchAlbumPhotos");
-	const maxCount = options?.maxCount ?? 10;
-	const mode = aitState.state.deviceModes.photos;
-	if (mode === "web") return fetchAlbumPhotosWeb(maxCount);
-	if (mode === "prompt") return fetchAlbumPhotosPrompt(maxCount);
-	return fetchAlbumPhotosMock(maxCount);
-};
-const fetchAlbumPhotos = withPermission(_fetchAlbumPhotos, "photos");
-async function fetchAlbumItemsMock(maxCount, types) {
-	return getMockImages().slice(0, maxCount).filter(() => types.includes("PHOTO")).map((dataUri) => ({
-		id: crypto.randomUUID(),
-		dataUri,
-		type: "PHOTO"
-	}));
-}
-async function fetchAlbumItemsWeb(maxCount, types) {
-	return new Promise((resolve) => {
-		const input = document.createElement("input");
-		input.type = "file";
-		input.accept = types.includes("VIDEO") ? "image/*,video/*" : "image/*";
-		input.multiple = true;
-		let settled = false;
-		input.onchange = async () => {
-			settled = true;
-			const files = Array.from(input.files ?? []).slice(0, maxCount);
-			if (files.length === 0) {
-				resolve([]);
-				return;
-			}
-			resolve(await Promise.all(files.map((file) => new Promise((res, rej) => {
-				const itemType = file.type.startsWith("video/") ? "VIDEO" : "PHOTO";
-				const reader = new FileReader();
-				reader.onload = () => res({
-					id: crypto.randomUUID(),
-					dataUri: reader.result,
-					type: itemType
-				});
-				reader.onerror = () => rej(/* @__PURE__ */ new Error("Failed to read file"));
-				reader.readAsDataURL(file);
-			}))));
-		};
-		const onFocus = () => {
-			setTimeout(() => {
-				if (!settled) resolve([]);
-				window.removeEventListener("focus", onFocus);
-			}, 300);
-		};
-		window.addEventListener("focus", onFocus);
-		input.click();
-	});
-}
-async function fetchAlbumItemsPrompt(maxCount) {
-	return (await waitForPromptResponse("photos")).slice(0, maxCount).map((dataUri) => ({
-		id: crypto.randomUUID(),
-		dataUri,
-		type: "PHOTO"
-	}));
-}
-const _fetchAlbumItems = async (options) => {
-	checkPermission("photos", "fetchAlbumItems");
-	const maxCount = options?.maxCount ?? 10;
-	const types = options?.types ?? ["PHOTO"];
-	const mode = aitState.state.deviceModes.photos;
-	if (mode === "web") return fetchAlbumItemsWeb(maxCount, types);
-	if (mode === "prompt") return fetchAlbumItemsPrompt(maxCount);
-	return fetchAlbumItemsMock(maxCount, types);
+const _startUpdateLocation = (eventParams) => {
+	const mode = aitState.state.deviceModes.location;
+	if (mode === "web") return startUpdateLocationWeb(eventParams);
+	if (mode === "prompt") return startUpdateLocationPrompt(eventParams);
+	return startUpdateLocationMock(eventParams);
 };
-const _fetchAlbumItemsWithPermission = withPermission(_fetchAlbumItems, "photos");
-const fetchAlbumItems = Object.assign(_fetchAlbumItemsWithPermission, { isSupported: () => true });
+const startUpdateLocation = withPermission(_startUpdateLocation, "geolocation");
 //#endregion
-//#region src/mock/device/clipboard.ts
+//#region src/mock/device/network.ts
 /**
-* Clipboard mock
-* mock/web 모드 지원
+* Network Status mock (mode-aware helper)
+* navigation 모듈에서 사용. circular dep 방지를 위해 device에 위치.
 */
-const _getClipboardText = async () => {
-	checkPermission("clipboard", "getClipboardText");
-	checkThrottle("getClipboardText");
-	if (aitState.state.deviceModes.clipboard === "mock") return aitState.state.mockData.clipboardText;
-	try {
-		return await navigator.clipboard.readText();
-	} catch {
-		return "";
-	}
-};
-const getClipboardText = withPermission(_getClipboardText, "clipboard");
-const _setClipboardText = async (text) => {
-	checkPermission("clipboard", "setClipboardText");
-	checkThrottle("setClipboardText");
-	if (aitState.state.deviceModes.clipboard === "mock") {
-		aitState.patch("mockData", { clipboardText: text });
-		return { text };
+/**
+* Web mode: uses navigator.connection.effectiveType (4g/3g/2g) and navigator.onLine.
+* Limitations: WIFI, 5G, WWAN cannot be detected via the Network Information API.
+* Falls back to state-based value when effectiveType is unavailable.
+*/
+function getNetworkStatusByMode() {
+	const mode = aitState.state.deviceModes.network;
+	if (mode === "mock") return null;
+	if (mode === "web") {
+		if (!navigator.onLine) return "OFFLINE";
+		const conn = navigator.connection;
+		if (conn?.effectiveType) return {
+			"4g": "4G",
+			"3g": "3G",
+			"2g": "2G",
+			"slow-2g": "2G"
+		}[conn.effectiveType] ?? "UNKNOWN";
+		return aitState.state.networkStatus;
 	}
-	await navigator.clipboard.writeText(text);
-	return { text };
-};
-const setClipboardText = withPermission(_setClipboardText, "clipboard");
+	return null;
+}
 //#endregion
-//#region src/mock/device/contacts.ts
-const _fetchContacts = async (options) => {
-	checkPermission("contacts", "fetchContacts");
-	let contacts = aitState.state.contacts;
-	if (options.query?.contains) {
-		const q = options.query.contains.toLowerCase();
-		contacts = contacts.filter((c) => c.name.toLowerCase().includes(q) || c.phoneNumber.includes(q));
-	}
-	const sliced = contacts.slice(options.offset, options.offset + options.size);
-	const nextOffset = options.offset + options.size;
-	return {
-		result: sliced,
-		nextOffset: nextOffset < contacts.length ? nextOffset : null,
-		done: nextOffset >= contacts.length
-	};
-};
+//#region src/mock/device/pdf.ts
 /**
-* 상류 SDK는 `fetchContacts`의 타입에 `.getPermission`/`.openPermissionDialog`를
-* `PermissionFunctionWithDialog`로 선언하지만, 실기기(2.x×iOS)에는 그 메서드가
-* **런타임에 붙어 있지 않다**(devtools#795 — 호출 시 `fetchContacts.getPermission
-* is not a function` native `TypeError`). standalone `getPermission({name:
-* 'contacts', access: 'access'})`는 실기기에서 정상 resolve하므로(env3 run11,
-* `../permissions.ts`) 부재는 fetchContacts에 **부착된** 메서드에만 해당하는
-* 상류 타입↔런타임 불일치다.
-*
-* mock은 다른 device API처럼 `withPermission()`으로 감싸지 않고, bare async fn을
-* 상류 시그니처로만 캐스트한다 — `.getPermission`/`.openPermissionDialog` 접근은
-* `undefined`가 되고, 호출하면 `undefined()` → native `TypeError`로 떨어져
-* 실기기와 일치한다(`__typecheck.ts`/`__typecheck-2x.ts`는 캐스트 타입에 두
-* 메서드가 여전히 남아 있어 그대로 통과). `_fetchContacts` 내부에서 이미
-* `checkPermission`을 호출하므로 메인 동작(권한 거부 시
-* `FetchContactsPermissionError`)은 변화 없다.
-*
-* 직접 관측된 것은 `getPermission` 부재뿐이다. `openPermissionDialog` 부재는
-* "상류가 fetchContacts에 권한 헬퍼 전체를 붙이지 않는다"는 합리적 추론이지
-* 별도 실측은 아니다. 다른 `withPermission` API(clipboard/camera/location)로는
-* 이 부재를 확장하지 않는다 — 그쪽 부착 메서드가 실기기에서 없다는 관측은
-* 없다(#783 "측정 밖 확장 금지" 원칙).
+* Base64로 인코딩된 PDF 데이터를 네이티브 PDF 뷰어로 여는 mock.
+* mock 환경에서는 즉시 `'CLOSE'`를 반환한다.
 */
-const fetchContacts = _fetchContacts;
+const _openPDFViewerImpl = async (_params) => {
+	await Promise.resolve();
+	return "CLOSE";
+};
+const openPDFViewer$1 = Object.assign(_openPDFViewerImpl, { isSupported: () => true });
 //#endregion
-//#region src/mock/device/haptic.ts
+//#region src/mock/proxy.ts
 /**
-* Haptic Feedback & saveBase64Data mock
+* 미구현 API용 Proxy 트립와이어.
 *
-* generateHapticFeedback — 영역 3 (하드웨어 API 관측):
-*   - 10종 HapticFeedbackType을 navigator.vibrate 패턴으로 매핑(근사, best-effort).
-*   - `typeof navigator.vibrate === 'function'` 가드 — API 없는 환경에서 throw 없이 skip.
-*   - @ait-co/polyfill 동시 사용 시 재귀 방지: polyfill이 navigator.vibrate를 override하고
-*     내부에서 mock의 generateHapticFeedback을 호출하므로 무한 재귀가 발생한다. polyfill이
-*     원본 vibrate를 BACKUP_KEY(Symbol.for('@ait-co/polyfill/vibrate.original'))에 저장하면
-*     그 원본을 직접 호출해 재귀를 끊는다.
-*   - sdkCallLog에 🟡(partial)로 기록. params: { hapticType, vibrated: boolean }.
-*   - 시그니처 불변 — __typecheck.ts의 Assert<Mock, Original> 통과.
+* 미구현 프로퍼티에 접근하면 throw한다. 이는 "devtools에서는 멀쩡히 돌지만
+* 실 SDK에선 실제로 동작하는" 시나리오를 차단하기 위한 의도적 선택이다.
+* mock이 미구현인 API는 실 SDK에서는 존재할 수 있고, 사용자가 이를 인지하지
+* 못한 채 개발을 이어가면 배포 시점에 놀라게 된다. 에러 메시지에 이슈 URL을
+* 포함해 사용자가 mock 누락을 제보할 수 있게 한다.
+*
+* ## KNOWN_UNIMPLEMENTED 정책
+* SDK에 존재하는 것으로 알려져 있으나 현재 mock이 없는 API 이름만 이 집합에 둔다.
+* 이 경우에만 throw 대신 🔴 inert no-op을 반환하고 sdkCallLog에 기록한다.
+* 완전히 미지의 이름은 여전히 throw — "잘 되는 척" 방지.
 */
+const ISSUES_URL = "https://github.com/apps-in-toss-community/devtools/issues";
 /**
-* HapticFeedbackType 10종 → navigator.vibrate 패턴 매핑.
-* 숫자: 진동 ms. 배열: [진동, 정지, 진동, …] 교대 패턴.
+* SDK에 존재하나 mock이 아직 없는 것으로 확인된 이름 목록.
+* 새 API가 SDK에 추가되면 여기에 추가하고 별도 PR에서 mock 구현으로 이동한다.
+* 확인되지 않은 이름은 절대 여기에 추가하지 않는다 — throw가 더 안전하다.
 */
-const HAPTIC_VIBRATE_PATTERN = {
-	tickWeak: 10,
-	tap: 20,
-	tickMedium: 30,
-	softMedium: 40,
-	basicWeak: 15,
-	basicMedium: 50,
-	success: [
-		10,
-		40,
-		10
-	],
-	error: [
-		40,
-		30,
-		40
-	],
-	wiggle: [
-		20,
-		20,
-		20,
-		20,
-		20
-	],
-	confetti: [
-		10,
-		20,
-		10,
-		20,
-		10,
-		20,
-		10
-	]
-};
+const KNOWN_UNIMPLEMENTED = /* @__PURE__ */ new Set([]);
+function createMockProxy(moduleName, implementations) {
+	return new Proxy(implementations, { get(target, prop) {
+		if (typeof prop === "symbol") return void 0;
+		if (prop in target) return target[prop];
+		const name = String(prop);
+		if (KNOWN_UNIMPLEMENTED.has(name)) return (...args) => {
+			console.warn(`[@apps-in-toss/devtools] ${moduleName}.${name} is known-unimplemented (🔴 inert). Returning undefined. Please file or upvote an issue: ${ISSUES_URL}`);
+			aitState.logSdkCall({
+				method: `${moduleName}.${name}`,
+				args,
+				timestamp: Date.now(),
+				status: "resolved",
+				result: void 0,
+				fidelity: "inert"
+			});
+		};
+		throw new Error(`[@apps-in-toss/devtools] ${moduleName}.${prop} is not mocked. This API may exist in @apps-in-toss/web-framework, but devtools' mock does not cover it yet. Please file an issue: ${ISSUES_URL}`);
+	} });
+}
+//#endregion
+//#region src/mock/device/storage.ts
 /**
-* navigator.vibrate를 안전하게 호출한다.
+* Storage mock
+* localStorage에 `__ait_storage:` prefix로 저장하여 앱 자체 localStorage와 분리
 *
-* @ait-co/polyfill/auto가 설치된 환경에서는 navigator.vibrate가 polyfill shim으로
-* override되어 있고, 그 shim은 내부적으로 mock의 generateHapticFeedback을 호출한다.
-* mock이 다시 navigator.vibrate(현재 = shim)를 호출하면 무한 재귀가 발생한다.
-* polyfill은 원본 vibrate를 BACKUP_KEY에 저장하므로 그쪽을 직접 호출한다.
+* 실기기(2.x×iOS) capture는 `setItem`/`removeItem`/`clearItems` 세 메서드가
+* `undefined`가 아니라 `null`로 resolve됨을 보였다(devtools#770). 원본 SDK 타입
+* 선언은 여전히 `Promise<void>`이므로 시그니처는 그대로 두고, 런타임 반환값만
+* `null`로 캐스트해 실측과 동치시킨다 — Analytics·setClipboardText와 같은 처리(#775).
+* `getItem`은 이미 `string | null`이라 실측과 일치하므로 손대지 않는다.
 */
-const POLYFILL_VIBRATE_BACKUP = Symbol.for("@ait-co/polyfill/vibrate.original");
-function callVibrate(pattern) {
-	if (typeof navigator === "undefined") return false;
-	const nav = navigator;
-	const original = POLYFILL_VIBRATE_BACKUP in nav ? nav[POLYFILL_VIBRATE_BACKUP] : null;
-	if (typeof original === "function") return original(pattern);
-	return typeof navigator.vibrate === "function" ? navigator.vibrate(pattern) : false;
-}
-async function generateHapticFeedback(options) {
-	if (!Object.hasOwn(HAPTIC_VIBRATE_PATTERN, options.type)) throw buildNativeError("EXECUTION_ERROR");
-	const timestamp = Date.now();
-	aitState.logAnalytics({
-		type: "haptic",
-		params: { hapticType: options.type }
-	});
-	const vibrated = callVibrate(HAPTIC_VIBRATE_PATTERN[options.type] ?? 30);
-	aitState.logSdkCall({
-		method: "generateHapticFeedback",
-		args: [{ type: options.type }],
-		timestamp,
-		status: "resolved",
-		result: {
-			hapticType: options.type,
-			vibrated
-		},
-		fidelity: "partial"
-	});
-}
-async function saveBase64Data$1(params) {
-	if (params.data === "") throw buildNativeError("INVALID_DATA");
-	const a = document.createElement("a");
-	a.href = `data:${params.mimeType};base64,${params.data}`;
-	a.download = params.fileName;
-	a.click();
-}
+const Storage = createMockProxy("Storage", {
+	getItem: async (key) => {
+		return localStorage.getItem(`__ait_storage:${key}`);
+	},
+	setItem: async (key, value) => {
+		localStorage.setItem(`__ait_storage:${key}`, value);
+		return null;
+	},
+	removeItem: async (key) => {
+		localStorage.removeItem(`__ait_storage:${key}`);
+		return null;
+	},
+	clearItems: async () => {
+		const keys = Object.keys(localStorage).filter((k) => k.startsWith("__ait_storage:"));
+		for (const k of keys) localStorage.removeItem(k);
+		return null;
+	}
+});
 //#endregion
-//#region src/mock/device/location.ts
+//#region src/mock/observe.ts
 /**
-* Location mock (getCurrentLocation, startUpdateLocation)
-* mock/web/prompt 모드 지원
+* fn을 observe로 감싼다.
+*
+* @param apiName  - 로그에 기록할 SDK 메서드 이름 (예: `'setScreenAwakeMode'`)
+* @param fidelity - 이 mock의 fidelity grade ('faithful' | 'partial' | 'inert')
+* @param fn       - 실제 mock 구현체. 시그니처를 그대로 통과시킨다.
+* @returns fn과 동일한 타입의 래퍼 함수
 */
-var Accuracy = /* @__PURE__ */ function(Accuracy) {
-	Accuracy[Accuracy["Lowest"] = 1] = "Lowest";
-	Accuracy[Accuracy["Low"] = 2] = "Low";
-	Accuracy[Accuracy["Balanced"] = 3] = "Balanced";
-	Accuracy[Accuracy["High"] = 4] = "High";
-	Accuracy[Accuracy["Highest"] = 5] = "Highest";
-	Accuracy[Accuracy["BestForNavigation"] = 6] = "BestForNavigation";
-	return Accuracy;
-}(Accuracy || {});
-function buildLocation() {
-	return {
-		coords: { ...aitState.state.location.coords },
-		timestamp: Date.now(),
-		accessLocation: aitState.state.location.accessLocation
-	};
-}
-async function getCurrentLocationMock() {
-	const { coords, timestamp } = buildLocation();
-	return {
-		coords,
-		timestamp
-	};
-}
-async function getCurrentLocationWeb() {
-	return new Promise((resolve) => {
-		if (!navigator.geolocation) {
-			console.warn("[@apps-in-toss/devtools] Geolocation API not available, falling back to mock");
-			resolve(buildLocation());
-			return;
-		}
-		navigator.geolocation.getCurrentPosition((pos) => {
-			resolve({
-				coords: {
-					latitude: pos.coords.latitude,
-					longitude: pos.coords.longitude,
-					altitude: pos.coords.altitude ?? 0,
-					accuracy: pos.coords.accuracy,
-					altitudeAccuracy: pos.coords.altitudeAccuracy ?? 0,
-					heading: pos.coords.heading ?? 0
-				},
-				timestamp: pos.timestamp
+function observe(apiName, fidelity, fn) {
+	return (...args) => {
+		const timestamp = Date.now();
+		const safeArgs = args.map((a) => safeSerialize(a));
+		const result = fn(...args);
+		if (result instanceof Promise) {
+			aitState.logSdkCall({
+				method: apiName,
+				args: safeArgs,
+				timestamp,
+				status: "pending",
+				fidelity
 			});
-		}, () => {
-			console.warn("[@apps-in-toss/devtools] Geolocation failed, falling back to mock");
-			resolve(buildLocation());
+			result.then((value) => {
+				aitState.logSdkCall({
+					method: apiName,
+					args: safeArgs,
+					timestamp,
+					status: "resolved",
+					result: safeSerialize(value),
+					fidelity
+				});
+			}, (err) => {
+				aitState.logSdkCall({
+					method: apiName,
+					args: safeArgs,
+					timestamp,
+					status: "rejected",
+					error: err instanceof Error ? err.message : String(err),
+					fidelity
+				});
+			});
+			return result;
+		}
+		aitState.logSdkCall({
+			method: apiName,
+			args: safeArgs,
+			timestamp,
+			status: "resolved",
+			result: safeSerialize(result),
+			fidelity
 		});
-	});
-}
-async function getCurrentLocationPrompt() {
-	const { coords, timestamp } = await waitForPromptResponse("location");
-	return {
-		coords,
-		timestamp
+		return result;
 	};
 }
-const _getCurrentLocation = async (_options) => {
-	checkPermission("geolocation", "getCurrentLocation");
-	checkThrottle("getCurrentLocation");
-	const mode = aitState.state.deviceModes.location;
-	if (mode === "web") return getCurrentLocationWeb();
-	if (mode === "prompt") return getCurrentLocationPrompt();
-	return getCurrentLocationMock();
-};
-const getCurrentLocation = withPermission(_getCurrentLocation, "geolocation");
-function startUpdateLocationMock(eventParams) {
-	const { onEvent, options } = eventParams;
-	const interval = Math.max(options.timeInterval, 500);
-	const id = setInterval(() => {
-		const loc = buildLocation();
-		loc.coords.latitude += (Math.random() - .5) * 1e-4;
-		loc.coords.longitude += (Math.random() - .5) * 1e-4;
-		onEvent(loc);
-	}, interval);
-	return () => clearInterval(id);
+/**
+* 값을 JSON-safe한 형태로 변환한다.
+* - null / primitive — 그대로.
+* - 함수 — `'[Function: name]'` 문자열.
+* - 기타 객체 — JSON.stringify 실패 시 `'[unserializable]'`.
+*/
+function safeSerialize(value) {
+	if (value === null || value === void 0) return value;
+	if (typeof value === "function") return `[Function: ${value.name || "anonymous"}]`;
+	if (typeof value !== "object") return value;
+	try {
+		return JSON.parse(JSON.stringify(value));
+	} catch {
+		return "[unserializable]";
+	}
 }
-function startUpdateLocationWeb(eventParams) {
-	const { onEvent, onError } = eventParams;
-	if (!navigator.geolocation) {
-		console.warn("[@apps-in-toss/devtools] Geolocation API not available, falling back to mock");
-		return startUpdateLocationMock(eventParams);
+//#endregion
+//#region src/mock/navigation/index.ts
+async function closeView() {
+	console.log("[@apps-in-toss/devtools] closeView called");
+	window.history.back();
+}
+async function openURL(url) {
+	console.log("[@apps-in-toss/devtools] openURL:", url);
+	window.open(url, "_blank");
+}
+async function share(message) {
+	if (navigator.share) {
+		await navigator.share({ text: message.message });
+		return;
 	}
-	const watchId = navigator.geolocation.watchPosition((pos) => {
-		onEvent({
-			coords: {
-				latitude: pos.coords.latitude,
-				longitude: pos.coords.longitude,
-				altitude: pos.coords.altitude ?? 0,
-				accuracy: pos.coords.accuracy,
-				altitudeAccuracy: pos.coords.altitudeAccuracy ?? 0,
-				heading: pos.coords.heading ?? 0
-			},
-			timestamp: pos.timestamp,
-			accessLocation: "FINE"
-		});
-	}, (err) => onError(err));
-	return () => navigator.geolocation.clearWatch(watchId);
+	console.log("[@apps-in-toss/devtools] share:", message.message);
 }
-function startUpdateLocationPrompt(eventParams) {
-	const { onEvent } = eventParams;
-	const handler = (e) => {
-		onEvent(e.detail);
-	};
-	window.addEventListener("__ait:prompt-response:location-update", handler);
-	window.dispatchEvent(new CustomEvent("__ait:prompt-request", { detail: { type: "location-update" } }));
-	return () => window.removeEventListener("__ait:prompt-response:location-update", handler);
+const URI_SCHEME_PATTERN = /^[a-zA-Z][a-zA-Z0-9+.-]*:/;
+async function getTossShareLink(path, _ogImageUrl) {
+	if (!URI_SCHEME_PATTERN.test(path)) throw buildNativeError("EXECUTION_ERROR");
+	return `https://toss.im/share/mock${path}`;
 }
-const _startUpdateLocation = (eventParams) => {
-	const mode = aitState.state.deviceModes.location;
-	if (mode === "web") return startUpdateLocationWeb(eventParams);
-	if (mode === "prompt") return startUpdateLocationPrompt(eventParams);
-	return startUpdateLocationMock(eventParams);
-};
-const startUpdateLocation = withPermission(_startUpdateLocation, "geolocation");
-//#endregion
-//#region src/mock/device/network.ts
-/**
-* Network Status mock (mode-aware helper)
-* navigation 모듈에서 사용. circular dep 방지를 위해 device에 위치.
-*/
+async function setIosSwipeGestureEnabled(options) {
+	console.log("[@apps-in-toss/devtools] setIosSwipeGestureEnabled:", options.isEnabled);
+	aitState.patch("navigation", { iosSwipeGestureEnabled: options.isEnabled });
+}
+async function setDeviceOrientation$1(options) {
+	const current = aitState.state.viewport.orientation;
+	if (current === "auto") {
+		console.log("[@apps-in-toss/devtools] setDeviceOrientation:", options.type);
+		aitState.patch("viewport", { appOrientation: options.type });
+		return;
+	}
+	console.warn(`[@apps-in-toss/devtools] setDeviceOrientation(${options.type}) ignored — Panel is forcing "${current}". Change the Viewport tab's orientation to "auto" to let the app control rotation.`);
+}
+const setScreenAwakeMode = observe("setScreenAwakeMode", "inert", async (options) => {
+	console.log("[@apps-in-toss/devtools] setScreenAwakeMode:", options.enabled);
+	return { enabled: options.enabled };
+});
+const setSecureScreen = observe("setSecureScreen", "inert", async (options) => {
+	console.log("[@apps-in-toss/devtools] setSecureScreen:", options.enabled);
+	return { enabled: options.enabled };
+});
+const requestReview$1 = observe("requestReview", "inert", async () => {
+	console.log("[@apps-in-toss/devtools] requestReview called");
+});
+requestReview$1.isSupported = () => true;
+function getTossAppVersion() {
+	return aitState.state.appVersion;
+}
+function getGroupId() {
+	return aitState.state.groupId;
+}
+async function getNetworkStatus() {
+	const modeResult = getNetworkStatusByMode();
+	if (modeResult) return modeResult;
+	return aitState.state.networkStatus;
+}
+const _getServerTimeImpl = async () => {
+	return Date.now();
+};
+const getServerTime$1 = Object.assign(_getServerTimeImpl, { isSupported: () => true });
+/**
+* 현재 backEvent 구독자 수. graniteEvent.addEventListener('backEvent', …)가
+* 증가시키고, 반환된 cleanup이 감소시킨다. 호스트 back 메시지 처리 시 인터셉트
+* 여부를 판단하는 데 쓰인다.
+*
+* @internal 테스트 및 safe-area-bridge에서만 사용.
+*/
+let _backEventSubscriberCount = 0;
+const graniteEvent = { addEventListener(event, { onEvent, onError }) {
+	const handler = () => {
+		try {
+			onEvent();
+		} catch (e) {
+			onError?.(e instanceof Error ? e : new Error(String(e)));
+		}
+	};
+	window.addEventListener(`__ait:${event}`, handler);
+	if (event === "backEvent") _backEventSubscriberCount++;
+	let cleaned = false;
+	return () => {
+		if (cleaned) return;
+		cleaned = true;
+		window.removeEventListener(`__ait:${event}`, handler);
+		if (event === "backEvent") _backEventSubscriberCount--;
+	};
+} };
+/**
+* 호스트 back 내비게이션을 처리한다.
+*
+* backEvent 구독자가 1명 이상이면 `window.dispatchEvent(new CustomEvent('__ait:backEvent'))`만
+* 발사한다 — 미니앱이 back을 가로채는(intercept) 채널이고 실제 토스 호스트와 동일한 시맨틱.
+* 구독자가 없으면 `history.back()`을 호출해 기본 브라우저 뒤로가기를 수행한다.
+*
+* env 1 패널의 back 버튼(`src/panel/viewport.ts` `aitState.trigger('backEvent')`)과
+* 동일한 경로를 거쳐 back 시맨틱의 단일 소유처를 navigation 모듈에 유지한다.
+*/
+function dispatchHostBackNavigation() {
+	if (_backEventSubscriberCount > 0) window.dispatchEvent(new CustomEvent("__ait:backEvent"));
+	else history.back();
+}
+const appsInTossEvent = { addEventListener(_event, _handlers) {
+	return () => {};
+} };
+const tdsEvent = { addEventListener(event, { onEvent }) {
+	const handler = (e) => {
+		const detail = e.detail;
+		onEvent(detail);
+	};
+	window.addEventListener(`__ait:${event}`, handler);
+	return () => window.removeEventListener(`__ait:${event}`, handler);
+} };
+/**
+* @deprecated web-framework 3.0 에서 제거됨. 2.x 소비자 back-compat용으로 유지.
+*/
+function onVisibilityChangedByTransparentServiceWeb(eventParams) {
+	const handler = () => eventParams.onEvent(!document.hidden);
+	document.addEventListener("visibilitychange", handler);
+	return () => document.removeEventListener("visibilitychange", handler);
+}
+const env = { getDeploymentId: () => aitState.state.deploymentId };
+function getAppsInTossGlobals() {
+	return {
+		deploymentId: aitState.state.deploymentId,
+		brandDisplayName: aitState.state.brand.displayName,
+		brandIcon: aitState.state.brand.icon,
+		brandPrimaryColor: aitState.state.brand.primaryColor
+	};
+}
+const SafeAreaInsets = {
+	get: () => ({ ...aitState.state.safeAreaInsets }),
+	subscribe: ({ onEvent }) => {
+		return aitState.subscribe(() => onEvent({ ...aitState.state.safeAreaInsets }));
+	}
+};
+//#endregion
+//#region src/mock/safe-area-bridge.ts
+/**
+* env-2 postMessage bridges (#484, #510).
+*
+* In the AITC Sandbox PWA (env 2) the dev app runs inside the launcher's
+* full-viewport `<iframe>`. The launcher is the top-level document, so its
+* `env(safe-area-inset-*)` measurement is the ground truth for the real device
+* geometry. The framed page's mock would otherwise report a synthetic preset
+* value (e.g. top=54), which sdk-example then double-pads on top of a viewport
+* that already starts below the status bar — the env-2 "dead band" defect.
+*
+* This module installs receive-half listeners for two message types:
+*
+* 1. `ait:safe-area-insets` (#484): the launcher forwards its real env() insets
+*    to the framed page on iframe load and resize/orientationchange. Validates the
+*    envelope and writes real insets into the mock SafeAreaInsets state, firing the
+*    subscribe path (see navigation/index.ts) so apps that subscribe re-read the
+*    corrected values.
+*
+* 2. `ait:navigate-back` (#510): the launcher partner bar's `←` button posts this
+*    command to the framed page. The receive half calls `dispatchHostBackNavigation()`
+*    (navigation/index.ts): if backEvent subscribers are present, a `__ait:backEvent`
+*    CustomEvent is dispatched (the mini-app intercept channel, matching the env-1
+*    panel path); otherwise `history.back()` is called. No data other than `type` is
+*    read from or written to the message — shape validation rejects anything that
+*    carries extra fields with the wrong type. Apps that do not install this mock
+*    (older builds) silently ignore the message (natural no-op).
+*
+* Origin policy: neither message type carries sensitive data, so we do NOT
+* restrict by origin — the launcher posts cross-origin from a *.trycloudflare.com
+* tunnel with targetOrigin '*'. Shape validation is still mandatory: a malformed
+* or out-of-range message is silently ignored so a stray postMessage can never
+* corrupt the mock state or trigger spurious navigation.
+*
+* Message-driven by design: env 1 (desktop browser, no launcher) never receives
+* these messages, so the panel preset stays authoritative there with zero special
+* casing here.
+*/
+/** The postMessage envelope the launcher posts to the framed dev app (inset forward). */
+const SAFE_AREA_INSETS_MESSAGE_TYPE = "ait:safe-area-insets";
+/**
+* The postMessage command the launcher partner bar's `←` button sends to the
+* framed dev app (#510). The framed page calls `history.back()` in response.
+*
+* Protocol: only `{ type: 'ait:navigate-back' }` is valid. No other fields are
+* read or acted on — extra fields are silently ignored by the shape guard.
+* Game variant never sends this message (back button is partner-bar-only).
+*/
+const NAVIGATE_BACK_MESSAGE_TYPE = "ait:navigate-back";
+/**
+* The postMessage envelope the framed mini-app self-reports its webViewType
+* with (#580). The mini-app knows its own type from the build constant
+* `__WEB_VIEW_TYPE__` (`granite.config.ts`'s `webViewProps.type`, injected by
+* the devtools unplugin). The launcher is cross-origin so it cannot read that
+* constant directly — the mini-app posts it to `window.parent` once so the
+* launcher (env-2 PWA shell) switches to game mode automatically, with no
+* manual `?navBarType=game` URL edit.
+*
+* Direction: this is the SEND side's contract (posted from inside the iframe by
+* `@ait-co/debug-console`'s `packages/debug-console/src/attach.ts`). The
+* launcher's receive half lives in
+* `e2e/fixture/launcher/Launcher.tsx` and mirrors the same value enum inline,
+* staying decoupled from the mock package internals — the same pattern the
+* other launcher message types follow.
+*
+* Value enum: only `'partner'` and `'game'` are valid. The SDK's deprecated
+* `'external'` alias of `partner` (web-framework 2.6.1) is mapped to `'partner'`
+* at the send site so the wire only ever carries the two shapes the launcher
+* emulates.
+*/
+const WEB_VIEW_TYPE_MESSAGE_TYPE = "ait:web-view-type";
+const MAX_INSET_PX = 200;
+function isValidInset(value) {
+	return typeof value === "number" && Number.isFinite(value) && value >= 0 && value <= MAX_INSET_PX;
+}
+/**
+* Parse + validate a raw postMessage payload into a `SafeAreaInsets`, or return
+* null when it is not a well-formed `ait:safe-area-insets` message. Pure — unit
+* tested without a real MessageEvent.
+*/
+function parseSafeAreaInsetsMessage(data) {
+	if (typeof data !== "object" || data === null) return null;
+	if (data.type !== "ait:safe-area-insets") return null;
+	const insets = data.insets;
+	if (typeof insets !== "object" || insets === null) return null;
+	const { top, bottom, left, right } = insets;
+	if (!isValidInset(top) || !isValidInset(bottom) || !isValidInset(left) || !isValidInset(right)) return null;
+	return {
+		top,
+		bottom,
+		left,
+		right
+	};
+}
+/**
+* Parse + validate a raw postMessage payload into a webViewType value
+* (`'partner'` | `'game'`), or return `null` when it is not a well-formed
+* `ait:web-view-type` message (#580). Pure — unit tested without a real
+* MessageEvent.
+*
+* Strict shape guard (the safety boundary for the cross-origin receive path):
+* the payload must be a non-null object whose `type` is exactly
+* {@link WEB_VIEW_TYPE_MESSAGE_TYPE} and whose `value` is exactly `'partner'`
+* or `'game'` (an enum allow-list). Anything else — a foreign type, a missing
+* or non-string value, the deprecated `'external'` alias, or any other string —
+* returns `null` so a stray postMessage can never flip the launcher's visual
+* mode. The send site is responsible for collapsing `'external'` → `'partner'`
+* before posting; the parser does NOT silently accept it.
+*/
+function parseWebViewTypeMessage(data) {
+	if (typeof data !== "object" || data === null) return null;
+	if (data.type !== "ait:web-view-type") return null;
+	const value = data.value;
+	if (value === "partner" || value === "game") return value;
+	return null;
+}
+/**
+* Apply forwarded insets to the mock state. Skips the write (and the resulting
+* subscribe notify) when nothing changed, so repeated identical messages from a
+* resize storm don't churn subscribers.
+*/
+function applyForwardedSafeAreaInsets(insets) {
+	const current = aitState.state.safeAreaInsets;
+	if (current.top === insets.top && current.bottom === insets.bottom && current.left === insets.left && current.right === insets.right) return;
+	aitState.update({ safeAreaInsets: insets });
+}
+/**
+* The `id` attribute of the `<style>` element injected by
+* {@link applyEnv2Compensation}. Using a stable id makes the injection
+* idempotent — the element is reused on every subsequent message rather than
+* accumulating multiple `<style>` nodes.
+*/
+const ENV2_COMPENSATION_STYLE_ID = "ait-env2-safe-area-compensation";
+/**
+* The CSS text injected when the launcher forwards partner-mode insets
+* (`top === 0`). The negative margin pulls the mini-app document up by exactly
+* the device's status-bar inset so the launcher's own bar offset is not
+* double-counted.
+*
+* jsdom cannot evaluate `env()` expressions, so unit tests assert on this
+* string literal rather than computed geometry.
+*/
+const ENV2_COMPENSATION_CSS = "body { margin-top: calc(-1 * env(safe-area-inset-top)); }";
+/**
+* Inject or remove the env-2 safe-area compensation `<style>` based on the
+* forwarded insets received from the launcher.
+*
+* ### Why this is needed
+*
+* In env 2 (AITC Sandbox PWA) the launcher frames the mini-app in a
+* full-bleed `<iframe>` whose top edge is already positioned BELOW the
+* launcher's partner bar (at `env(safe-area-inset-top) + 54px`). However,
+* inside the cross-origin child iframe, CSS `env(safe-area-inset-top)` STILL
+* reports the full device status-bar inset (e.g. 62 px on an iPhone 15). Any
+* mini-app that pads itself by that CSS `env()` value ends up double-counting
+* the status-bar, producing a ≈62 px white dead-band between the partner bar
+* and the first content.
+*
+* The fix is a compensating negative margin on `body` inside the iframe. When
+* the launcher forwards partner insets (`top === 0`, meaning "the iframe
+* already starts below the bar"), we inject:
+*
+* ```css
+* body { margin-top: calc(-1 * env(safe-area-inset-top)); }
+* ```
+*
+* This cancels the duplicate padding without knowing the app's internal DOM
+* structure. The launcher's html/body `screen.height` force (#527) lives in the
+* LAUNCHER document (cross-origin) and never touches the mini-app document, so
+* margin and height force compose independently — they cannot interfere.
+*
+* ### Gating
+*
+* - **`top === 0`** (partner mode) → install the style (dead-band compensation).
+* - **`top > 0`** (game mode — launcher forwards the raw device inset for the
+*   floating status-bar capsule) → remove any previously installed style so
+*   `env()` is the authoritative clearance and nothing is double-removed.
+*
+* On every insets message (resize/orientation re-post) this function is called
+* so the gate is re-evaluated and the style toggled accordingly.
+*
+* ### env 1 / env 3 / env 4 no-regression
+*
+* This function is only called from the `message` listener installed by
+* {@link installSafeAreaInsetsBridge}. That listener fires only when the
+* launcher posts an `ait:safe-area-insets` message, which never happens in
+* env 1 (desktop browser, no launcher), env 3 (intoss-private WebView), or
+* env 4 (live relay) — they have no launcher posting to the iframe.
+*
+* @param top - The forwarded `top` inset value from the launcher message.
+*/
+function applyEnv2Compensation(top) {
+	if (typeof document === "undefined") return;
+	const existing = document.getElementById(ENV2_COMPENSATION_STYLE_ID);
+	if (top === 0) {
+		if (existing !== null) return;
+		const style = document.createElement("style");
+		style.id = ENV2_COMPENSATION_STYLE_ID;
+		style.textContent = ENV2_COMPENSATION_CSS;
+		document.head.appendChild(style);
+	} else if (existing !== null) existing.remove();
+}
+let installed = false;
+/**
+* Install the window `message` listener that receives forwarded insets. Safe to
+* call multiple times (idempotent) and a no-op outside a browser (SSR/jsdom
+* without a window). Imported for its side effect by the mock barrel so any
+* consumer that aliases `@apps-in-toss/web-framework` to the mock gets it wired.
+*
+* On each valid `ait:safe-area-insets` message:
+* 1. Writes the corrected insets into the mock `SafeAreaInsets` state
+*    (existing #484 behaviour — for apps that still read SDK insets).
+* 2. Drives the env-2 dead-band compensation style via
+*    {@link applyEnv2Compensation} — injects a `body { margin-top: calc(-1 *
+*    env(safe-area-inset-top)) }` style when `top === 0` (partner mode) and
+*    removes it when `top > 0` (game / full-bleed mode).
+*/
+function installSafeAreaInsetsBridge() {
+	if (installed || typeof window === "undefined") return;
+	installed = true;
+	window.addEventListener("message", (event) => {
+		const insets = parseSafeAreaInsetsMessage(event.data);
+		if (insets) {
+			applyForwardedSafeAreaInsets(insets);
+			applyEnv2Compensation(insets.top);
+		}
+	});
+}
+/**
+* Parse a raw postMessage payload as an `ait:navigate-back` command.
+*
+* Returns true when the payload is a well-formed navigate-back command
+* (`{ type: 'ait:navigate-back' }`), false otherwise. Pure — unit tested
+* without a real MessageEvent.
+*
+* Shape guard: only the `type` field is inspected; any extra fields are
+* ignored so future extensions do not break older receivers. The function
+* does NOT read any data field beyond `type` — no sensitive values, no host
+* disclosure (same principle as the insets bridge).
+*/
+function isNavigateBackMessage(data) {
+	if (typeof data !== "object" || data === null) return false;
+	return data.type === NAVIGATE_BACK_MESSAGE_TYPE;
+}
+let navigateBackInstalled = false;
+/**
+* Install the window `message` listener that handles `ait:navigate-back`
+* commands (#510). When the launcher partner bar's `←` button is clicked it
+* posts `{ type: 'ait:navigate-back' }` to the framed dev app; this listener
+* calls `dispatchHostBackNavigation()` from the navigation module.
+*
+* Dispatch semantics: if there are any `graniteEvent.addEventListener('backEvent', …)`
+* subscribers the CustomEvent `__ait:backEvent` is fired (same path as the env-1
+* panel back button — the mini-app intercept channel). When there are no
+* subscribers `history.back()` is called as the fallback. Back semantics are
+* owned entirely by the navigation module; this bridge only delegates.
+*
+* Safe to call multiple times (idempotent) and a no-op outside a browser.
+* Installed together with the inset bridge by `installBridges()` so any consumer
+* of the mock barrel gets both wired automatically.
+*
+* No-op on apps that predate this bridge — the launcher posts the message but
+* older mocks simply have no listener (harmless).
+*/
+function installNavigateBackBridge() {
+	if (navigateBackInstalled || typeof window === "undefined") return;
+	navigateBackInstalled = true;
+	window.addEventListener("message", (event) => {
+		if (isNavigateBackMessage(event.data)) dispatchHostBackNavigation();
+	});
+}
+/**
+* Install both env-2 postMessage bridges in one call (#484 insets + #510
+* navigate-back). The mock barrel calls this at import time so consumers get
+* all bridges wired without any explicit setup.
+*/
+function installBridges() {
+	installSafeAreaInsetsBridge();
+	installNavigateBackBridge();
+}
+//#endregion
+//#region src/mock/ads/index.ts
+function withIsSupported(fn) {
+	fn.isSupported = () => true;
+	return fn;
+}
+const _slotRegistry = /* @__PURE__ */ new Map();
+let _slotCounter = 0;
+function _nextSlotId(adGroupId) {
+	_slotCounter += 1;
+	return `mock-slot-${adGroupId}-${_slotCounter}`;
+}
+const GoogleAdMob$1 = createMockProxy("GoogleAdMob", {
+	loadAppsInTossAdMob: withIsSupported(observe("GoogleAdMob.loadAppsInTossAdMob", "faithful", (args) => {
+		setTimeout(() => {
+			const failureCode = aitState.state.failureModes.loadAdMob;
+			if (failureCode) {
+				args.onError(buildNativeError(failureCode));
+				return;
+			}
+			const throttleError = throttleErrorFor("loadAppsInTossAdMob");
+			if (throttleError) {
+				args.onError(throttleError);
+				return;
+			}
+			if (aitState.state.ads.forceNoFill) {
+				args.onError(/* @__PURE__ */ new Error("No fill"));
+				return;
+			}
+			aitState.patch("ads", { isLoaded: true });
+			args.onEvent({
+				type: "loaded",
+				data: {
+					adGroupId: args.options.adGroupId,
+					adUnitId: `mock-unit-${args.options.adGroupId}`,
+					responseInfo: {
+						responseId: `mock-response-${args.options.adGroupId}`,
+						adNetworkInfoArray: [],
+						loadedAdNetworkInfo: null
+					}
+				}
+			});
+		}, 200);
+		return () => {};
+	})),
+	showAppsInTossAdMob: withIsSupported(observe("GoogleAdMob.showAppsInTossAdMob", "faithful", (args) => {
+		if (!aitState.state.ads.isLoaded) {
+			args.onError(/* @__PURE__ */ new Error("Ad not loaded"));
+			return () => {};
+		}
+		const { rewardUnitType, rewardAmount } = aitState.state.ads;
+		setTimeout(() => args.onEvent({
+			type: "userEarnedReward",
+			data: {
+				unitType: rewardUnitType,
+				unitAmount: rewardAmount
+			}
+		}), 1e3);
+		setTimeout(() => {
+			args.onEvent({ type: "dismissed" });
+			aitState.patch("ads", { isLoaded: false });
+		}, 1500);
+		return () => {};
+	})),
+	isAppsInTossAdMobLoaded: withIsSupported(observe("GoogleAdMob.isAppsInTossAdMobLoaded", "faithful", async (_options) => {
+		if (_options?.adGroupId !== void 0 && _options.adGroupId.trim() === "") throw buildNativeError("INVALID_REQUEST");
+		return aitState.state.ads.isLoaded;
+	}))
+});
+const TossAds = createMockProxy("TossAds", {
+	initialize: withIsSupported(observe("TossAds.initialize", "partial", (options) => {
+		if (aitState.state.ads.forceNoFill) {
+			options.callbacks?.onInitializationFailed?.(/* @__PURE__ */ new Error("No fill"));
+			return;
+		}
+		options.callbacks?.onInitialized?.();
+	})),
+	attach: withIsSupported(observe("TossAds.attach", "partial", (_adGroupId, target, _options) => {
+		const el = typeof target === "string" ? document.querySelector(target) : target;
+		if (el) {
+			const placeholder = document.createElement("div");
+			placeholder.style.cssText = "background:#f0f0f0;border:1px dashed #999;padding:16px;text-align:center;color:#666;font-size:14px;";
+			placeholder.textContent = "[@apps-in-toss/devtools] TossAds Placeholder";
+			el.appendChild(placeholder);
+		}
+	})),
+	attachBanner: withIsSupported(observe("TossAds.attachBanner", "faithful", (adGroupId, target, options) => {
+		const el = typeof target === "string" ? document.querySelector(target) : target;
+		const slotId = _nextSlotId(adGroupId);
+		const placeholder = document.createElement("div");
+		const theme = options?.theme ?? "auto";
+		const variant = options?.variant ?? "card";
+		const isDark = theme === "dark" || theme === "auto" && typeof window !== "undefined" && window.matchMedia?.("(prefers-color-scheme: dark)").matches;
+		const bg = isDark ? "#1a1a1a" : "#f0f0f0";
+		const textColor = isDark ? "#aaa" : "#666";
+		const borderColor = isDark ? "#555" : "#999";
+		const height = variant === "expanded" ? "120px" : "60px";
+		placeholder.dataset.aitSlotId = slotId;
+		placeholder.style.cssText = `background:${bg};border:1px dashed ${borderColor};padding:8px 12px;text-align:center;color:${textColor};font-size:12px;min-height:${height};display:flex;align-items:center;justify-content:center;`;
+		placeholder.textContent = `[@apps-in-toss/devtools] Banner Ad (${variant})`;
+		if (el) {
+			el.appendChild(placeholder);
+			_slotRegistry.set(slotId, placeholder);
+		}
+		const destroySlot = () => {
+			const registered = _slotRegistry.get(slotId);
+			if (registered) {
+				registered.remove();
+				_slotRegistry.delete(slotId);
+			}
+		};
+		setTimeout(() => {
+			if (aitState.state.ads.forceNoFill) {
+				options?.callbacks?.onNoFill?.({
+					slotId,
+					adGroupId,
+					adMetadata: {}
+				});
+				options?.callbacks?.onAdFailedToRender?.({
+					slotId,
+					adGroupId,
+					adMetadata: {},
+					error: {
+						code: 0,
+						message: "No fill"
+					}
+				});
+				return;
+			}
+			const eventPayload = {
+				slotId,
+				adGroupId,
+				adMetadata: {
+					creativeId: `mock-creative-${slotId}`,
+					requestId: `mock-req-${slotId}`
+				}
+			};
+			options?.callbacks?.onAdRendered?.(eventPayload);
+			options?.callbacks?.onAdImpression?.(eventPayload);
+		}, 100);
+		return { destroy: destroySlot };
+	})),
+	destroy: withIsSupported(observe("TossAds.destroy", "faithful", (slotId) => {
+		const el = _slotRegistry.get(slotId);
+		if (el) {
+			el.remove();
+			_slotRegistry.delete(slotId);
+		}
+	})),
+	destroyAll: withIsSupported(observe("TossAds.destroyAll", "faithful", () => {
+		for (const el of _slotRegistry.values()) el.remove();
+		_slotRegistry.clear();
+	}))
+});
+const loadFullScreenAd$1 = observe("loadFullScreenAd", "faithful", (args) => {
+	setTimeout(() => {
+		const failureCode = aitState.state.failureModes.loadFullScreenAd;
+		if (failureCode) {
+			args.onError(buildNativeError(failureCode));
+			return;
+		}
+		const throttleError = throttleErrorFor("loadFullScreenAd");
+		if (throttleError) {
+			args.onError(throttleError);
+			return;
+		}
+		if (aitState.state.ads.forceNoFill) {
+			args.onError(/* @__PURE__ */ new Error("No fill"));
+			return;
+		}
+		aitState.patch("ads", { isLoaded: true });
+		args.onEvent({ type: "loaded" });
+	}, 200);
+	return () => {};
+});
+const showFullScreenAd$1 = withIsSupported(observe("showFullScreenAd", "faithful", (args) => {
+	if (!aitState.state.ads.isLoaded) {
+		args.onError(/* @__PURE__ */ new Error("Ad not loaded"));
+		return () => {};
+	}
+	setTimeout(() => args.onEvent({ type: "clicked" }), 100);
+	setTimeout(() => args.onEvent({ type: "dismissed" }), 1500);
+	return () => {};
+}));
+const Ads$1 = createMockProxy("Ads", {
+	showTossAdOrShoppingAds: withIsSupported(observe("Ads.showTossAdOrShoppingAds", "faithful", (args) => {
+		if (!aitState.state.ads.isLoaded) {
+			args.onError(/* @__PURE__ */ new Error("Ad not loaded"));
+			return () => {};
+		}
+		const { rewardUnitType, rewardAmount } = aitState.state.ads;
+		setTimeout(() => args.onEvent({
+			type: "userEarnedReward",
+			data: {
+				unitType: rewardUnitType,
+				unitAmount: rewardAmount
+			}
+		}), 1e3);
+		setTimeout(() => {
+			args.onEvent({ type: "dismissed" });
+			aitState.patch("ads", { isLoaded: false });
+		}, 1500);
+		return () => {};
+	})),
+	showTossShoppingAds: withIsSupported(observe("Ads.showTossShoppingAds", "faithful", (args) => {
+		const { rewardUnitType, rewardAmount } = aitState.state.ads;
+		setTimeout(() => args.onEvent({
+			type: "userEarnedReward",
+			data: {
+				unitType: rewardUnitType,
+				unitAmount: rewardAmount
+			}
+		}), 1e3);
+		setTimeout(() => args.onEvent({ type: "dismissed" }), 1500);
+		return () => {};
+	}))
+});
+//#endregion
+//#region src/mock/analytics/index.ts
 /**
-* Web mode: uses navigator.connection.effectiveType (4g/3g/2g) and navigator.onLine.
-* Limitations: WIFI, 5G, WWAN cannot be detected via the Network Information API.
-* Falls back to state-based value when effectiveType is unavailable.
+* Analytics mock
 */
-function getNetworkStatusByMode() {
-	const mode = aitState.state.deviceModes.network;
-	if (mode === "mock") return null;
-	if (mode === "web") {
-		if (!navigator.onLine) return "OFFLINE";
-		const conn = navigator.connection;
-		if (conn?.effectiveType) return {
-			"4g": "4G",
-			"3g": "3G",
-			"2g": "2G",
-			"slow-2g": "2G"
-		}[conn.effectiveType] ?? "UNKNOWN";
-		return aitState.state.networkStatus;
+const Analytics$1 = {
+	screen: (params) => {
+		aitState.logAnalytics({
+			type: "screen",
+			params: params ?? {}
+		});
+		return Promise.resolve(null);
+	},
+	impression: (params) => {
+		aitState.logAnalytics({
+			type: "impression",
+			params: params ?? {}
+		});
+		return Promise.resolve(null);
+	},
+	click: (params) => {
+		aitState.logAnalytics({
+			type: "click",
+			params: params ?? {}
+		});
+		return Promise.resolve(null);
 	}
+};
+async function eventLog(params) {
+	aitState.logAnalytics({
+		type: params.log_type,
+		params: {
+			log_name: params.log_name,
+			...params.params
+		}
+	});
 	return null;
 }
 //#endregion
-//#region src/mock/device/pdf.ts
+//#region src/mock/auth/index.ts
 /**
-* Base64로 인코딩된 PDF 데이터를 네이티브 PDF 뷰어로 여는 mock.
-* mock 환경에서는 즉시 `'CLOSE'`를 반환한다.
+* 인증/로그인 mock
 */
-const _openPDFViewerImpl = async (_params) => {
-	await Promise.resolve();
-	return "CLOSE";
-};
-const openPDFViewer$1 = Object.assign(_openPDFViewerImpl, { isSupported: () => true });
-//#endregion
-//#region src/mock/device/storage.ts
+async function appLogin() {
+	const failureCode = aitState.state.failureModes.appLogin;
+	if (failureCode) throw buildNativeError(failureCode);
+	return {
+		authorizationCode: `mock-auth-${crypto.randomUUID()}`,
+		referrer: aitState.state.environment === "toss" ? "DEFAULT" : "SANDBOX"
+	};
+}
+async function getIsTossLoginIntegratedService$1() {
+	const failureCode = aitState.state.failureModes.getIsTossLoginIntegratedService;
+	if (failureCode) throw buildNativeError(failureCode);
+	return aitState.state.auth.isTossLoginIntegrated;
+}
+async function getUserKeyForGame$1() {
+	return {
+		hash: aitState.state.auth.userKeyHash ?? "",
+		type: "HASH"
+	};
+}
+async function getAnonymousKey$1() {
+	if (!aitState.state.auth.anonymousKeyHash) return void 0;
+	return {
+		hash: aitState.state.auth.anonymousKeyHash,
+		type: "HASH"
+	};
+}
+async function appsInTossSignTossCert$1(_params) {
+	console.log("[@apps-in-toss/devtools] appsInTossSignTossCert called (no-op in mock)");
+}
 /**
-* Storage mock
-* localStorage에 `__ait_storage:` prefix로 저장하여 앱 자체 localStorage와 분리
+* 사용자 동의 기반 데이터 mock (devtools#798 — env1에 배선 부재였던 실 export).
 *
-* 실기기(2.x×iOS) capture는 `setItem`/`removeItem`/`clearItems` 세 메서드가
-* `undefined`가 아니라 `null`로 resolve됨을 보였다(devtools#770). 원본 SDK 타입
-* 선언은 여전히 `Promise<void>`이므로 시그니처는 그대로 두고, 런타임 반환값만
-* `null`로 캐스트해 실측과 동치시킨다 — Analytics·setClipboardText와 같은 처리(#775).
-* `getItem`은 이미 `string | null`이라 실측과 일치하므로 손대지 않는다.
+* SDK는 이 API를 `@apps-in-toss/web-bridge` 호환 export로 노출하며 2.x와 3.x GA
+* 양쪽 facade에서 제공한다. 선언 시그니처는 `Promise<Partial<Record<ConsentedUserDataKey, string>>
+* | undefined>` — appLogin과 같은 async bridge 모양이라 항상 resolve하는 낙관적
+* 패턴을 따른다.
+*
+* 어떤 키가 채워지는지는 콘솔에 등록된 동의문/데이터 묶음(`consentedUserDataKey`)에
+* 달려 있고 그 매핑은 서버 쪽 설정이라 mock이 알 수 없다 — 호출 파라미터와 무관하게
+* 상태에 저장된 최소 plausible 객체를 그대로 resolve한다. SDK 선언 밖의 필드는
+* 추가하지 않는다(devtools#783 — 실측/타입 밖 추정 금지).
 */
-const Storage = createMockProxy("Storage", {
-	getItem: async (key) => {
-		return localStorage.getItem(`__ait_storage:${key}`);
-	},
-	setItem: async (key, value) => {
-		localStorage.setItem(`__ait_storage:${key}`, value);
-		return null;
-	},
-	removeItem: async (key) => {
-		localStorage.removeItem(`__ait_storage:${key}`);
-		return null;
-	},
-	clearItems: async () => {
-		const keys = Object.keys(localStorage).filter((k) => k.startsWith("__ait_storage:"));
-		for (const k of keys) localStorage.removeItem(k);
-		return null;
-	}
-});
+async function getConsentedUserData$1(_options) {
+	return aitState.state.auth.consentedUserData;
+}
+async function getDeclaredAgeRange$1(_params) {
+	return { ...aitState.state.auth.declaredAgeRange };
+}
 //#endregion
 //#region src/mock/iap/index.ts
 let orderCounter = 0;
@@ -1730,133 +2125,6 @@ const requestTossPayPaysBilling$1 = Object.assign(async function requestTossPayP
 	};
 }, { isSupported: () => true });
 //#endregion
-//#region src/mock/navigation/index.ts
-async function closeView() {
-	console.log("[@apps-in-toss/devtools] closeView called");
-	window.history.back();
-}
-async function openURL(url) {
-	console.log("[@apps-in-toss/devtools] openURL:", url);
-	window.open(url, "_blank");
-}
-async function share(message) {
-	if (navigator.share) {
-		await navigator.share({ text: message.message });
-		return;
-	}
-	console.log("[@apps-in-toss/devtools] share:", message.message);
-}
-const URI_SCHEME_PATTERN = /^[a-zA-Z][a-zA-Z0-9+.-]*:/;
-async function getTossShareLink(path, _ogImageUrl) {
-	if (!URI_SCHEME_PATTERN.test(path)) throw buildNativeError("EXECUTION_ERROR");
-	return `https://toss.im/share/mock${path}`;
-}
-async function setIosSwipeGestureEnabled(options) {
-	console.log("[@apps-in-toss/devtools] setIosSwipeGestureEnabled:", options.isEnabled);
-	aitState.patch("navigation", { iosSwipeGestureEnabled: options.isEnabled });
-}
-async function setDeviceOrientation$1(options) {
-	const current = aitState.state.viewport.orientation;
-	if (current === "auto") {
-		console.log("[@apps-in-toss/devtools] setDeviceOrientation:", options.type);
-		aitState.patch("viewport", { appOrientation: options.type });
-		return;
-	}
-	console.warn(`[@apps-in-toss/devtools] setDeviceOrientation(${options.type}) ignored — Panel is forcing "${current}". Change the Viewport tab's orientation to "auto" to let the app control rotation.`);
-}
-let _wakeLockSentinel = null;
-const setScreenAwakeMode = observe("setScreenAwakeMode", "partial", async (options) => {
-	console.log("[@apps-in-toss/devtools] setScreenAwakeMode:", options.enabled);
-	const wakeLock = navigator.wakeLock;
-	if (options.enabled) {
-		if (wakeLock && !_wakeLockSentinel) try {
-			_wakeLockSentinel = await wakeLock.request("screen");
-		} catch (err) {
-			console.warn("[@apps-in-toss/devtools] setScreenAwakeMode: wakeLock.request 실패 (무시됨):", err);
-		}
-	} else if (_wakeLockSentinel) {
-		const sentinel = _wakeLockSentinel;
-		_wakeLockSentinel = null;
-		try {
-			await sentinel.release();
-		} catch {}
-	}
-	return { enabled: options.enabled };
-});
-const setSecureScreen = observe("setSecureScreen", "inert", async (options) => {
-	console.log("[@apps-in-toss/devtools] setSecureScreen:", options.enabled);
-	return { enabled: options.enabled };
-});
-const requestReview$1 = observe("requestReview", "inert", async () => {
-	console.log("[@apps-in-toss/devtools] requestReview called");
-});
-requestReview$1.isSupported = () => true;
-function getTossAppVersion() {
-	return aitState.state.appVersion;
-}
-function getGroupId() {
-	return aitState.state.groupId;
-}
-async function getNetworkStatus() {
-	const modeResult = getNetworkStatusByMode();
-	if (modeResult) return modeResult;
-	return aitState.state.networkStatus;
-}
-const _getServerTimeImpl = async () => {
-	return Date.now();
-};
-const getServerTime$1 = Object.assign(_getServerTimeImpl, { isSupported: () => true });
-const graniteEvent = { addEventListener(event, { onEvent, onError }) {
-	const handler = () => {
-		try {
-			onEvent();
-		} catch (e) {
-			onError?.(e instanceof Error ? e : new Error(String(e)));
-		}
-	};
-	window.addEventListener(`__ait:${event}`, handler);
-	let cleaned = false;
-	return () => {
-		if (cleaned) return;
-		cleaned = true;
-		window.removeEventListener(`__ait:${event}`, handler);
-	};
-} };
-const appsInTossEvent = { addEventListener(_event, _handlers) {
-	return () => {};
-} };
-const tdsEvent = { addEventListener(event, { onEvent }) {
-	const handler = (e) => {
-		const detail = e.detail;
-		onEvent(detail);
-	};
-	window.addEventListener(`__ait:${event}`, handler);
-	return () => window.removeEventListener(`__ait:${event}`, handler);
-} };
-/**
-* @deprecated web-framework 3.0 에서 제거됨. 2.x 소비자 back-compat용으로 유지.
-*/
-function onVisibilityChangedByTransparentServiceWeb(eventParams) {
-	const handler = () => eventParams.onEvent(!document.hidden);
-	document.addEventListener("visibilitychange", handler);
-	return () => document.removeEventListener("visibilitychange", handler);
-}
-const env = { getDeploymentId: () => aitState.state.deploymentId };
-function getAppsInTossGlobals() {
-	return {
-		deploymentId: aitState.state.deploymentId,
-		brandDisplayName: aitState.state.brand.displayName,
-		brandIcon: aitState.state.brand.icon,
-		brandPrimaryColor: aitState.state.brand.primaryColor
-	};
-}
-const SafeAreaInsets = {
-	get: () => ({ ...aitState.state.safeAreaInsets }),
-	subscribe: ({ onEvent }) => {
-		return aitState.subscribe(() => onEvent({ ...aitState.state.safeAreaInsets }));
-	}
-};
-//#endregion
 //#region src/mock/bridge-factories.ts
 /** Generic bridge escape hatches exposed by both SDK lines. */
 const asyncBridgeRegistry = {
@@ -2005,36 +2273,13 @@ const _requestNotificationAgreementImpl = (params) => {
 const requestNotificationAgreement$1 = Object.assign(_requestNotificationAgreementImpl, { isSupported: () => true });
 //#endregion
 //#region src/mock/partner/index.ts
-/**
-* Partner / TDS mock
-*/
-/** navigationAccessoryEvent 브릿지 이벤트 이름 — tdsEvent.addEventListener가 구독하는
-* `__ait:${event}` 컨벤션(state.ts의 `trigger()`)을 따른다. 이벤트 payload 계약
-* (`{ id: string }`)은 web-framework의 `TdsEvent['navigationAccessoryEvent']`와 동일. */
-const NAVIGATION_ACCESSORY_EVENT = "navigationAccessoryEvent";
-let _accessoryButtonEl = null;
-function removeAccessoryButtonEl() {
-	_accessoryButtonEl?.remove();
-	_accessoryButtonEl = null;
-}
 const partner = {
-	addAccessoryButton: observe("partner.addAccessoryButton", "partial", async (options) => {
-		removeAccessoryButtonEl();
-		const button = document.createElement("button");
-		button.type = "button";
-		button.dataset.aitAccessoryButtonId = options.id;
-		button.textContent = options.title;
-		button.title = `[@apps-in-toss/devtools] partner.addAccessoryButton (icon: ${options.icon.name})`;
-		button.style.cssText = "position:fixed;top:8px;right:8px;z-index:2147483000;padding:6px 10px;border:1px dashed #999;border-radius:6px;background:#f0f0f0;color:#333;font-size:12px;line-height:1.4;cursor:pointer;";
-		button.addEventListener("click", () => {
-			window.dispatchEvent(new CustomEvent(`__ait:${NAVIGATION_ACCESSORY_EVENT}`, { detail: { id: options.id } }));
-		});
-		document.body.appendChild(button);
-		_accessoryButtonEl = button;
-	}),
-	removeAccessoryButton: observe("partner.removeAccessoryButton", "partial", async () => {
-		removeAccessoryButtonEl();
-	})
+	async addAccessoryButton(options) {
+		console.log("[@apps-in-toss/devtools] partner.addAccessoryButton:", options);
+	},
+	async removeAccessoryButton() {
+		console.log("[@apps-in-toss/devtools] partner.removeAccessoryButton");
+	}
 };
 //#endregion
 //#region src/mock/preset-store.ts
@@ -2312,6 +2557,15 @@ function captureCurrentState(snapshot) {
 	};
 }
 //#endregion
+//#region src/mock/index.ts
+/**
+* @apps-in-toss/devtools/mock
+*
+* @apps-in-toss/web-framework의 모든 export를 mock으로 대체한다.
+* 번들러 alias로 원본 대신 이 모듈이 resolve된다.
+*/
+installBridges();
+//#endregion
 //#region src/mock/sdk-support.ts
 /**
 * Attach the metadata exposed by web-framework 3.x without wrapping the
@@ -2472,6 +2726,14 @@ const showFullScreenAd = Object.assign((args) => showFullScreenAd$1({
 	options: args.options ?? { adGroupId: "mock-ad-group" },
 	onError: (error) => args.onError(error instanceof Error ? error : new Error(String(error)))
 }), { isSupported: () => true });
+const shoppingAdsMin = {
+	android: "5.273.0",
+	ios: "5.273.0"
+};
+const Ads = {
+	showTossAdOrShoppingAds: supported(Ads$1.showTossAdOrShoppingAds, shoppingAdsMin),
+	showTossShoppingAds: supported(Ads$1.showTossShoppingAds, shoppingAdsMin)
+};
 const IAP = {
 	createOneTimePurchaseOrder: supported(IAP$1.createOneTimePurchaseOrder, V.iapOneTime),
 	createSubscriptionPurchaseOrder: supported(IAP$1.createSubscriptionPurchaseOrder, V.iapSubscription),
@@ -2577,4 +2839,4 @@ const User = {
 	getDeclaredAgeRange
 };
 //#endregion
-export { Accuracy, Analytics, Clipboard, Device, Environment, FetchAlbumPhotosPermissionError, FetchContactsPermissionError, File, Game, GetClipboardTextPermissionError, GetCurrentLocationPermissionError, GoogleAdMob, IAP, Notification, OpenCameraPermissionError, PermissionError, Promotion, Review, SafeArea, SafeAreaInsets, Screen, SetClipboardTextPermissionError, Share, StartUpdateLocationPermissionError, Storage, TossAds, TossAuth, TossPay, User, aitState, appLogin, applyPreset, appsInTossEvent, appsInTossSignTossCert, builtInPresets, captureCurrentState, checkoutPayment, closeView, contactsViral, createAsyncBridge, createConstantBridge, createEventBridge, deleteUserPreset, env, eventLog, fetchAlbumItems, fetchAlbumPhotos, fetchContacts, generateHapticFeedback, getAnonymousKey, getAppsInTossGlobals, getClipboardText, getConsentedUserData, getCurrentLocation, getDeclaredAgeRange, getDefaultPlaceholderImages, getDeviceId, getGameCenterGameProfile, getGroupId, getIsTossLoginIntegratedService, getLocale, getNetworkStatus, getOperationalEnvironment, getPermission, getPlatformOS, getSafeAreaInsets, getSchemeUri, getServerTime, getTossAppVersion, getTossShareLink, getUserKeyForGame, graniteEvent, grantPromotionReward, grantPromotionRewardForGame, isMinVersionSupported, listUserPresets, loadFullScreenAd, matchesPreset, onVisibilityChangedByTransparentServiceWeb, openCamera, openGameCenterLeaderboard, openPDFViewer, openPermissionDialog, openURL, partner, requestNotificationAgreement, requestPermission, requestReview, requestTossPayPaysBilling, saveBase64Data, saveUserPreset, setClipboardText, setDeviceOrientation, setIosSwipeGestureEnabled, setScreenAwakeMode, setSecureScreen, share, showFullScreenAd, startUpdateLocation, submitGameCenterLeaderBoardScore, tdsEvent };
+export { Accuracy, Ads, Analytics, Clipboard, Device, Environment, FetchAlbumPhotosPermissionError, FetchContactsPermissionError, File, Game, GetClipboardTextPermissionError, GetCurrentLocationPermissionError, GoogleAdMob, IAP, NAVIGATE_BACK_MESSAGE_TYPE, Notification, OpenCameraPermissionError, PermissionError, Promotion, Review, SAFE_AREA_INSETS_MESSAGE_TYPE, SafeArea, SafeAreaInsets, Screen, SetClipboardTextPermissionError, Share, StartUpdateLocationPermissionError, Storage, TossAds, TossAuth, TossPay, User, WEB_VIEW_TYPE_MESSAGE_TYPE, aitState, appLogin, applyForwardedSafeAreaInsets, applyPreset, appsInTossEvent, appsInTossSignTossCert, builtInPresets, captureCurrentState, checkoutPayment, closeView, contactsViral, createAsyncBridge, createConstantBridge, createEventBridge, deleteUserPreset, env, eventLog, fetchAlbumItems, fetchAlbumPhotos, fetchContacts, generateHapticFeedback, getAnonymousKey, getAppsInTossGlobals, getClipboardText, getConsentedUserData, getCurrentLocation, getDeclaredAgeRange, getDefaultPlaceholderImages, getDeviceId, getGameCenterGameProfile, getGroupId, getIsTossLoginIntegratedService, getLocale, getNetworkStatus, getOperationalEnvironment, getPermission, getPlatformOS, getSafeAreaInsets, getSchemeUri, getServerTime, getTossAppVersion, getTossShareLink, getUserKeyForGame, graniteEvent, grantPromotionReward, grantPromotionRewardForGame, installBridges, installNavigateBackBridge, installSafeAreaInsetsBridge, isMinVersionSupported, isNavigateBackMessage, listUserPresets, loadFullScreenAd, matchesPreset, onVisibilityChangedByTransparentServiceWeb, openCamera, openGameCenterLeaderboard, openPDFViewer, openPermissionDialog, openURL, parseSafeAreaInsetsMessage, parseWebViewTypeMessage, partner, requestNotificationAgreement, requestPermission, requestReview, requestTossPayPaysBilling, saveBase64Data, saveUserPreset, setClipboardText, setDeviceOrientation, setIosSwipeGestureEnabled, setScreenAwakeMode, setSecureScreen, share, showFullScreenAd, startUpdateLocation, submitGameCenterLeaderBoardScore, tdsEvent };