@mearl/browser-core 3.0.0-beta.1 → 3.0.0-beta.10

package/README.md

@@ -1,11 +1,13 @@
 # @mearl/browser-core
 
-浏览器与 Node 可共享的页面控制逻辑和协议：DOM/AX 快照、动作观察、输入、滚动、导航、请求序列化、捕获游标、设备模拟、通用设备外观、Cookie/域名权限和插件任务、页面、状态合同。模块没有浏览器扩展或本机进程的安装副作用。
+[English](README.md) | [简体中文](README.zh-CN.md)
 
-`APP_PROFILE_NAMES` 只列出飞猪、淘宝、微信、支付宝四个基础身份；动态档案 ID 由宿主的已激活能力目录校验。App 档案 schema、显式选项、revision 和页面运行时绑定是数据合同，完整桥实现由独立能力包提供。
+Page control logic and protocols shared by browsers and Node: DOM/AX snapshots, action observation, input, scrolling, navigation, request serialization, capture cursors, device simulation, generic device appearance, Cookie/domain permissions, and plugin task, page, and state contracts. Modules have no browser extension or native process installation side effects.
 
-`@mearl/browser-core/appProfileRuntime` 的内置安装器只同步 UA、navigator.appVersion、navigator.platform 和触摸点，不安装 App 桥、业务全局变量、容器栈或授权处理。有 pageRuntime 绑定时，宿主必须先从已安装的能力包准备确切代码，再通过页面运行时派发器执行；不能调用基础安装器代替。资源准备和派发见 [能力包](../../docs/browser-bundles.md#页面运行时)。
+The core includes no preset App identities. The host validates profile IDs against its active capability catalog. App profile schemas, explicit options, revisions, and page runtime bindings are data contracts; independent capability packages supply complete bridge implementations.
 
-默认代理授权地址只有 localhost 与 127.0.0.1。其余站点由宿主取得权限后传入授权列表；组织域名和员工身份不属于本包默认值。业务请求辅助、业务事件解析、测试账号登录及用户 Cookie 身份推导留在独立能力中。
+The built-in installer at `@mearl/browser-core/appProfileRuntime` synchronizes only UA, navigator.appVersion, navigator.platform, and touch points. It does not install App bridges, business globals, container stacks, or authorization handlers. With a pageRuntime binding, the host must prepare the exact code from the installed capability package and execute it through the page runtime dispatcher; the base installer cannot substitute for this. See [browser bundles](../../docs/browser-bundles.md#page-runtimes) for resource preparation and dispatch.
 
-Agent 合同源在本包的 agentChat.ts、agentSkills.ts 和 pluginModels.ts；分别通过同名子路径导出，agent-runtime 使用这些合同，避免并行维护副本。可序列化的页面函数保持自包含，便于 Extension 与 CDP 共同使用。
+The default proxy authorization addresses are localhost and 127.0.0.1. Hosts obtain permission for other sites and pass them in the authorization list. The core includes Aplus/RUM/ARMS event parsers; additional parsers register through capability packages.
+
+Agent contracts are defined in agentChat.ts, agentSkills.ts, and pluginModels.ts and exported through the corresponding subpaths. agent-runtime uses these contracts to avoid duplicate definitions. Serializable page functions remain self-contained for shared use by the Extension and CDP.

package/README.zh-CN.md

@@ -0,0 +1,13 @@
+# @mearl/browser-core
+
+[English](README.md) | [简体中文](README.zh-CN.md)
+
+浏览器与 Node 可共享的页面控制逻辑和协议：DOM/AX 快照、动作观察、输入、滚动、导航、请求序列化、捕获游标、设备模拟、通用设备外观、Cookie/域名权限和插件任务、页面、状态合同。模块没有浏览器扩展或本机进程的安装副作用。
+
+核心不预置 App 身份；档案 ID 由宿主的已激活能力目录校验。App 档案 schema、显式选项、revision 和页面运行时绑定是数据合同，完整桥实现由独立能力包提供。
+
+`@mearl/browser-core/appProfileRuntime` 的内置安装器只同步 UA、navigator.appVersion、navigator.platform 和触摸点，不安装 App 桥、业务全局变量、容器栈或授权处理。有 pageRuntime 绑定时，宿主必须先从已安装的能力包准备确切代码，再通过页面运行时派发器执行；不能调用基础安装器代替。资源准备和派发见 [能力包](../../docs/browser-bundles.zh-CN.md#页面运行时)。
+
+默认代理授权地址为 localhost 与 127.0.0.1。其余站点由宿主取得权限后传入授权列表。核心内置 Aplus/RUM/ARMS 事件解析；扩展解析器通过能力包注册。
+
+Agent 合同源在本包的 agentChat.ts、agentSkills.ts 和 pluginModels.ts；分别通过同名子路径导出，agent-runtime 使用这些合同，避免并行维护副本。可序列化的页面函数保持自包含，便于 Extension 与 CDP 共同使用。

package/dist/agentChat.d.ts

@@ -1,5 +1,7 @@
 export type AgentChatEventKind = 'lifecycle' | 'notification' | 'request' | 'error';
 export type AgentChatSessionStatus = 'idle' | 'running' | 'waiting' | 'error';
+export declare function isQoderAuthenticationError(message: unknown): boolean;
+export declare function isQoderMissingSessionError(message: unknown): boolean;
 export type AgentChatCapabilitySupport = boolean | 'runtime';
 export declare const AGENT_CHAT_MAX_PAGE_URL_CHARS = 16384;
 export declare const AGENT_CHAT_MAX_PAGE_TITLE_CHARS = 2048;
@@ -15,6 +17,8 @@ export interface AgentChatProviderDescriptor {
     id: string;
     name: string;
     available: boolean;
+    /** False while accepted conversations retain a removed or superseded runtime. */
+    acceptsNewSessions?: boolean;
     capabilities: {
         streaming: boolean;
         resume: boolean;
@@ -26,7 +30,8 @@ export interface AgentChatProviderDescriptor {
     };
     error?: string;
     setup?: {
-        installCommand: string;
+        installCommand?: string;
+        canInstall?: boolean;
         loginCommand?: string;
         docsUrl?: string;
     };
@@ -89,6 +94,7 @@ export interface AgentChatSendOptions {
     message: string;
     images?: AgentChatImageInput[];
     displayMessage?: string;
+    hasAdditionalContext?: boolean;
     clientMessageId?: string;
 }
 export interface AgentChatRunOptions {
@@ -155,6 +161,9 @@ export interface AgentChatStatus {
     sessions: AgentChatSession[];
 }
 export interface AgentChatKnownEventParams {
+    'session/reconnected': {
+        providerSessionId: string;
+    };
     'turn/started': {
         turn: {
             id: string;

package/dist/agentChat.js

@@ -1,3 +1,10 @@
+export function isQoderAuthenticationError(message) {
+    return (typeof message === 'string' &&
+        /^(?:Authentication (?:is )?required|Unauthenticated|Sign-in required)(?:[:.\s]|$)/i.test(message));
+}
+export function isQoderMissingSessionError(message) {
+    return typeof message === 'string' && /^(?:Invalid params:\s*)?Invalid session identifier\b/i.test(message);
+}
 export const AGENT_CHAT_MAX_PAGE_URL_CHARS = 16_384;
 export const AGENT_CHAT_MAX_PAGE_TITLE_CHARS = 2_048;
 export const AGENT_CHAT_MAX_TOOLBOX_CONTEXT_CHARS = 65_536;
@@ -123,6 +130,7 @@ function readAgentChatRequestParams(params) {
     return { ...params, requestId: params.requestId };
 }
 const AGENT_CHAT_EVENT_PARAM_READERS = {
+    'session/reconnected': params => typeof params.providerSessionId === 'string' ? { providerSessionId: params.providerSessionId } : null,
     'turn/started': readAgentChatTurnParams,
     'turn/completed': readAgentChatTurnParams,
     'session/model/updated': readAgentChatModelParams,

package/dist/agentServiceProtocol.d.ts

@@ -11,6 +11,18 @@ export interface AgentServiceActionMap {
         request: undefined;
         response: AgentChatStatus;
     };
+    agent_chat_install_provider: {
+        request: {
+            providerId: string;
+        };
+        response: AgentChatStatus;
+    };
+    agent_chat_login_qoder: {
+        request: undefined;
+        response: {
+            url: string | null;
+        };
+    };
     agent_chat_prepare: {
         request: AgentChatPrepareOptions;
         response: {
@@ -51,6 +63,14 @@ export interface AgentServiceActionMap {
         request: AgentChatEventsOptions;
         response: AgentChatEventsResult;
     };
+    agent_chat_read_visualization: {
+        request: {
+            path: string;
+        };
+        response: {
+            html: string;
+        };
+    };
     agent_chat_refresh: {
         request: AgentChatEventsOptions;
         response: AgentChatRefreshResult;
@@ -112,6 +132,8 @@ export type AgentServiceHandlerMap = {
 export declare const AGENT_SERVICE_ACTIONS: {
     readonly agent_chat_pick_directory: true;
     readonly agent_chat_status: true;
+    readonly agent_chat_install_provider: true;
+    readonly agent_chat_login_qoder: true;
     readonly agent_chat_prepare: true;
     readonly agent_chat_list_sessions: true;
     readonly agent_chat_start: true;
@@ -120,6 +142,7 @@ export declare const AGENT_SERVICE_ACTIONS: {
     readonly agent_chat_interrupt: true;
     readonly agent_chat_close: true;
     readonly agent_chat_events: true;
+    readonly agent_chat_read_visualization: true;
     readonly agent_chat_refresh: true;
     readonly agent_chat_open_app: true;
     readonly agent_chat_open_workspace: true;

package/dist/agentServiceProtocol.js

@@ -1,6 +1,8 @@
 export const AGENT_SERVICE_ACTIONS = {
     agent_chat_pick_directory: true,
     agent_chat_status: true,
+    agent_chat_install_provider: true,
+    agent_chat_login_qoder: true,
     agent_chat_prepare: true,
     agent_chat_list_sessions: true,
     agent_chat_start: true,
@@ -9,6 +11,7 @@ export const AGENT_SERVICE_ACTIONS = {
     agent_chat_interrupt: true,
     agent_chat_close: true,
     agent_chat_events: true,
+    agent_chat_read_visualization: true,
     agent_chat_refresh: true,
     agent_chat_open_app: true,
     agent_chat_open_workspace: true,

package/dist/agentSkills.d.ts

@@ -1,4 +1,4 @@
-export type AgentSkillProviderId = 'codex' | 'qoder';
+export type AgentSkillProviderId = string;
 export type AgentSkillScope = 'project' | 'global';
 export type AgentInstalledSkillScope = AgentSkillScope | 'system' | 'admin' | 'built-in' | 'unknown';
 export interface AgentInstalledSkill {

package/dist/app-profile-runtime/types.d.ts

@@ -2,15 +2,16 @@ import type { AppProfileBinding, AppProfilePolicies, AppProfileSetting } from '.
 import type { BrowserDevicePresetName } from '../browserActionProtocol.js';
 import type { DeviceCutout } from '../deviceEmulation.js';
 /** 桥调用风格，与页面适配器使用的端内调用约定一一对应。 */
-export type AppBridgeStyle = 'windvane' | 'fliggy' | 'alipay' | 'callback' | 'btrip' | 'invoke' | 'callHandler' | 'amap' | 'didi' | 'easybikeNative' | 'mega' | 'wechat' | 'wechatMiniProgram';
+export type AppBridgeStyle = string;
 export interface AppBridgeSpec {
     global: string;
     style: AppBridgeStyle;
     /** 页面脚本重设全局对象时仍保留桥叶子，同时接纳页面对象上的其他 API。 */
     persistent?: boolean;
 }
-export type AppBridgeBehavior = 'navigate' | 'closeAll' | 'closeBackData' | 'postMessage' | 'notifySubscribe' | 'notifyUnsubscribe' | 'notifyPost' | 'sharedFileRead' | 'sharedFileWrite' | 'sharedDataGet' | 'sharedDataSet' | 'legacyBroadcastCreate' | 'legacyBroadcastPost' | 'legacyBroadcastClose' | 'memoryGet' | 'memorySet' | 'memoryDelete' | 'availabilityMap' | 'userInfo' | 'authCode' | 'networkInfo' | 'geolocation' | 'permission' | 'imagePicker' | 'prefetch' | 'fptTrack' | 'mtopStream' | 'previewFile' | 'toast' | 'unsupportedNativeInput' | 'payment' | 'userTrack' | 'calendar' | 'networkQualityMonitor' | 'beaconRequest' | 'voiceRecognition';
-/** 桥方法名到标准化动作的映射。WindVane 风格使用 `Class.method`，其余使用 api 名。 */
+/** Provider-defined identifier, interpreted by its installed page runtime. */
+export type AppBridgeBehavior = string;
+/** 桥方法名到标准化动作的映射。命名空间桥使用 `Class.method`，其余使用 api 名。 */
 export interface BridgeActionMap {
     open: string[];
     close: string[];
@@ -18,7 +19,7 @@ export interface BridgeActionMap {
     navigationBar?: string[];
     statusBar?: string[];
     systemInfo: string[];
-    mtop: string[];
+    protocol: string[];
     kvGet?: string[];
     kvSet?: string[];
     kvDelete?: string[];
@@ -68,14 +69,14 @@ export interface AppMiniProgramMessageRule {
 }
 export type AppMiniProgramNativeAction = 'navigateMiniProgram' | 'subscribeMessage';
 export interface AppMiniProgramNativeRoute {
-    /** 承接微信原生能力的小程序页面 pathname。 */
+    /** 承接原生能力的小程序页面 pathname。 */
     pathname: string;
     /** 该页面允许模拟的固定原生动作，动作名读取 URL 的 action 参数。 */
     actions: AppMiniProgramNativeAction[];
     /** 限制业务根域，避免其他小程序的同名页面被接管。 */
     hostSuffixes?: string[];
 }
-/** 微信小程序容器相关规则统一收口，避免为每种业务页增加顶层配置。 */
+/** 小程序容器相关规则统一收口，避免为每种业务页增加顶层配置。 */
 export interface AppMiniProgramConfig {
     paymentRoutes?: AppMiniProgramPaymentRoute[];
     nativeRoutes?: AppMiniProgramNativeRoute[];
@@ -187,6 +188,8 @@ export interface InjectedAppProfileConfig {
     binding?: AppProfileBinding;
     policies?: AppProfilePolicies;
     settings?: AppProfileSetting[];
+    settingsUi?: 'runtime';
+    settingsGroup?: string;
     profile: string;
     label: string;
     globals: Record<string, string>;
@@ -207,11 +210,6 @@ export interface InjectedAppProfileConfig {
     schemes: AppSchemeRule[];
     miniProgram?: AppMiniProgramConfig;
     imagePicker?: AppImagePickerConfig;
-    /** 原生定位返回地址时使用的逆地理编码服务，复用容器的 MTop 传输。 */
-    geolocation?: {
-        reverseGeocodeApi: string;
-        version: string;
-    };
     overlay?: AppOverlayConfig;
     /** URL 参数为真时以新 WebView 替换当前业务层。 */
     popBeforeOpenParam?: string;
@@ -221,7 +219,7 @@ export interface InjectedAppProfileConfig {
     layerUrlProxy?: AppLayerUrlProxyConfig;
     urlSyncHostSuffixes?: string[];
     animationMs?: number;
-    forceH5Mtop?: boolean;
+    runtimeOptions?: Record<string, unknown>;
     titleBar?: AppTitleBarConfig;
     rootContainer?: AppRootContainerConfig;
     simulateSystemBars?: boolean;

package/dist/appProfileDefinition.d.ts

@@ -1,9 +1,9 @@
 import type { BrowserDevicePresetName, AppBridgeConfig } from './browserActionProtocol.js';
 import type { AppBridgeSpec, AppImagePickerConfig, AppLayerUrlProxyConfig, AppMiniProgramConfig, AppNativeBackConfig, AppOverlayConfig, AppSchemeRule, AppTitleBarHostStyle, BridgeActionMap } from './app-profile-runtime/types.js';
 export interface AppProfilePolicies {
-    titleBar?: 'default' | 'taobao' | 'fliggy' | 'alipay' | 'wechat';
+    titleBar?: string;
     navigatorLanguage?: boolean;
-    networkResult?: 'default' | 'alipay';
+    networkResult?: string;
     languages?: string[];
     defaultLanguage?: string;
 }
@@ -56,28 +56,49 @@ export interface AppProfileCatalogEntry {
     revision: string;
     definition: AppProfileDefinition;
 }
+/** Short, author-supplied guidance; discovery does not load Skills or follow links. */
+export interface AppProfileUsage {
+    description?: string;
+    limitations?: string[];
+    skills?: string[];
+    documentation?: Array<{
+        title: string;
+        url: string;
+    }>;
+}
 /** 单容器档案（纯数据） */
 export interface AppProfileDefinition {
     name: string;
+    usage?: AppProfileUsage;
     /** Content-addressed installer supplied by the selected browser capability package. */
     pageRuntime?: {
         id: string;
         sha256: string;
     };
     label: string;
-    /** 容器的应用标识，如 LX / TB / AP / WeChat */
+    actionIcon?: string;
+    labels?: {
+        en: string;
+        zh_CN?: string;
+    };
+    /** 容器的应用标识，由能力包定义 */
     appName: string;
     defaultAppVersion: string;
-    /** UA 主体格式；默认使用 AliApp(appName/version) */
-    uaFamily?: 'aliapp' | 'wechatMiniProgram';
+    /** UA 主体格式；未提供时使用标准浏览器 UA */
+    uaFamily?: string;
     uaTemplate?: {
         ios: string;
         android: string;
     };
     policies?: AppProfilePolicies;
     settings?: AppProfileSetting[];
-    settingsGroup?: 'fliggy' | 'alipay';
-    /** AliApp UA 主体之后追加的 token，{v} 占位会被替换为 appVersion */
+    authorization?: {
+        hook: string;
+        method: string;
+    };
+    settingsUi?: 'runtime';
+    settingsGroup?: string;
+    /** UA 主体之后追加的 token，{v} 占位会被替换为 appVersion */
     uaTokens: string[];
     /** 额外注入到 window 的变量（公共变量由 resolve 统一生成） */
     globals: Record<string, string>;
@@ -90,10 +111,6 @@ export interface AppProfileDefinition {
     miniProgram?: AppMiniProgramConfig;
     /** 原生图片页 scheme 的浏览器选图与上传配置 */
     imagePicker?: AppImagePickerConfig;
-    geolocation?: {
-        reverseGeocodeApi: string;
-        version: string;
-    };
     /**
      * 地址栏借位同步的可选 host 白名单：容器栈顶 URL 的 host 命中时，地址栏借 top
      * 域名同步其 path+query+hash（pushState 同源约束下保持域名不变只改 path）；
@@ -124,10 +141,11 @@ export interface AppProfileDefinition {
     statusBarBackgroundColors?: Record<string, string>;
     /** 按业务根域配置标题栏与状态栏样式。 */
     titleBarHostStyles?: AppTitleBarHostStyle[];
-    /** 桥存在时仍将 MTOP 传输固定在浏览器 H5 通道 */
-    forceH5Mtop?: boolean;
+    /** Opaque configuration owned by the installed page runtime. */
+    runtimeOptions?: Record<string, unknown>;
 }
-export declare const APP_BRIDGE_BEHAVIORS: readonly ["navigate", "closeAll", "closeBackData", "postMessage", "notifySubscribe", "notifyUnsubscribe", "notifyPost", "sharedFileRead", "sharedFileWrite", "sharedDataGet", "sharedDataSet", "legacyBroadcastCreate", "legacyBroadcastPost", "legacyBroadcastClose", "memoryGet", "memorySet", "memoryDelete", "availabilityMap", "userInfo", "authCode", "networkInfo", "geolocation", "permission", "imagePicker", "prefetch", "fptTrack", "mtopStream", "previewFile", "toast", "unsupportedNativeInput", "payment", "userTrack", "calendar", "networkQualityMonitor", "beaconRequest", "voiceRecognition"];
+/** Behavior IDs belong to the installed page runtime, never to a host-side enum. */
+export declare function isAppBridgeBehavior(value: unknown): value is string;
 /** Validate plain data before registration or compiling a document-start configuration. */
 export declare function validateAppProfileDefinition(value: unknown): AppProfileDefinition;
 export declare function validateAppProfileContribution(value: unknown): AppProfileContribution | undefined;

package/dist/appProfileDefinition.js

@@ -1,57 +1,7 @@
-const BRIDGE_STYLES = new Set([
-    'windvane',
-    'fliggy',
-    'alipay',
-    'callback',
-    'btrip',
-    'invoke',
-    'callHandler',
-    'amap',
-    'didi',
-    'easybikeNative',
-    'mega',
-    'wechat',
-    'wechatMiniProgram',
-]);
-export const APP_BRIDGE_BEHAVIORS = [
-    'navigate',
-    'closeAll',
-    'closeBackData',
-    'postMessage',
-    'notifySubscribe',
-    'notifyUnsubscribe',
-    'notifyPost',
-    'sharedFileRead',
-    'sharedFileWrite',
-    'sharedDataGet',
-    'sharedDataSet',
-    'legacyBroadcastCreate',
-    'legacyBroadcastPost',
-    'legacyBroadcastClose',
-    'memoryGet',
-    'memorySet',
-    'memoryDelete',
-    'availabilityMap',
-    'userInfo',
-    'authCode',
-    'networkInfo',
-    'geolocation',
-    'permission',
-    'imagePicker',
-    'prefetch',
-    'fptTrack',
-    'mtopStream',
-    'previewFile',
-    'toast',
-    'unsupportedNativeInput',
-    'payment',
-    'userTrack',
-    'calendar',
-    'networkQualityMonitor',
-    'beaconRequest',
-    'voiceRecognition',
-];
-const BEHAVIORS = new Set(APP_BRIDGE_BEHAVIORS);
+/** Behavior IDs belong to the installed page runtime, never to a host-side enum. */
+export function isAppBridgeBehavior(value) {
+    return typeof value === 'string' && /^[a-zA-Z][a-zA-Z0-9_.:-]{0,95}$/.test(value);
+}
 function record(value) {
     return value !== null && typeof value === 'object' && !Array.isArray(value);
 }
@@ -95,7 +45,7 @@ function validateActions(value) {
         'navigationBar',
         'statusBar',
         'systemInfo',
-        'mtop',
+        'protocol',
         'kvGet',
         'kvSet',
         'kvDelete',
@@ -103,7 +53,7 @@ function validateActions(value) {
         'noop',
         'silent',
     ];
-    fields(value, ['open', 'close', 'title', 'systemInfo', 'mtop', 'noop'], [...arrays, 'responses', 'behaviors'], 'actions');
+    fields(value, ['open', 'close', 'title', 'systemInfo', 'protocol', 'noop'], [...arrays, 'responses', 'behaviors'], 'actions');
     for (const key of arrays)
         if (value[key] !== undefined && !strings(value[key]))
             invalid(`actions.${key}`);
@@ -111,7 +61,7 @@ function validateActions(value) {
         invalid('actions.responses');
     if (value.behaviors !== undefined &&
         (!stringMap(value.behaviors) ||
-            !Object.values(value.behaviors).every(item => BEHAVIORS.has(item))))
+            !Object.values(value.behaviors).every(item => isAppBridgeBehavior(item))))
         invalid('actions.behaviors');
 }
 /** Validate plain data before registration or compiling a document-start configuration. */
@@ -133,15 +83,19 @@ export function validateAppProfileDefinition(value) {
         'schemes',
     ];
     const optional = [
+        'usage',
+        'actionIcon',
+        'labels',
         'pageRuntime',
         'uaFamily',
         'uaTemplate',
         'policies',
         'settings',
         'settingsGroup',
+        'settingsUi',
+        'authorization',
         'miniProgram',
         'imagePicker',
-        'geolocation',
         'urlSyncHostSuffixes',
         'overlay',
         'popBeforeOpenParam',
@@ -152,7 +106,7 @@ export function validateAppProfileDefinition(value) {
         'titleBarHiddenPathnames',
         'statusBarBackgroundColors',
         'titleBarHostStyles',
-        'forceH5Mtop',
+        'runtimeOptions',
     ];
     fields(value, required, optional, 'definition');
     for (const key of ['name', 'label', 'appName', 'defaultAppVersion'])
@@ -160,6 +114,37 @@ export function validateAppProfileDefinition(value) {
             invalid(key);
     if (!/^[a-z][a-z0-9-]*(?:\/[a-z][a-z0-9-]*)?$/.test(value.name))
         invalid('name');
+    if (value.usage !== undefined) {
+        const usage = value.usage;
+        fields(usage, [], ['description', 'limitations', 'skills', 'documentation'], 'usage');
+        if (new TextEncoder().encode(JSON.stringify(usage)).byteLength > 4096)
+            invalid('usage exceeds 4 KiB');
+        if (usage.description !== undefined && (!text(usage.description) || usage.description.length > 512))
+            invalid('usage.description');
+        for (const key of ['limitations', 'skills']) {
+            const items = usage[key];
+            if (items !== undefined && (!Array.isArray(items) || items.length > 8 || items.some(item => !text(item) || !item || item.length > 256)))
+                invalid(`usage.${key}`);
+        }
+        if (usage.documentation !== undefined) {
+            if (!Array.isArray(usage.documentation) || usage.documentation.length > 8)
+                invalid('usage.documentation');
+            for (const link of usage.documentation) {
+                fields(link, ['title', 'url'], [], 'usage.documentation');
+                if (!text(link.title) || !link.title || link.title.length > 128 || !text(link.url) || link.url.length > 1024)
+                    invalid('usage.documentation');
+                let url;
+                try {
+                    url = new URL(link.url);
+                }
+                catch {
+                    invalid('usage.documentation.url');
+                }
+                if (url.protocol !== 'https:' || url.username || url.password)
+                    invalid('usage.documentation.url');
+            }
+        }
+    }
     if (value.pageRuntime !== undefined) {
         fields(value.pageRuntime, ['id', 'sha256'], [], 'pageRuntime');
         const runtime = value.pageRuntime;
@@ -191,17 +176,28 @@ export function validateAppProfileDefinition(value) {
                 .split('.')
                 .some(part => ['__proto__', 'prototype', 'constructor'].includes(part)) ||
             globals.has(bridge.global) ||
-            !BRIDGE_STYLES.has(bridge.style) ||
+            (typeof bridge.style !== 'string' || !/^[a-zA-Z][a-zA-Z0-9-]{0,63}$/.test(bridge.style)) ||
             (bridge.persistent !== undefined && typeof bridge.persistent !== 'boolean'))
             invalid('bridge');
         globals.add(bridge.global);
     }
     validateActions(value.actions);
+    if (value.labels !== undefined) {
+        fields(value.labels, ['en'], ['zh_CN'], 'labels');
+        if (!text(value.labels.en) || !value.labels.en || value.labels.en.length > 120 || value.labels.zh_CN !== undefined && (!text(value.labels.zh_CN) || value.labels.zh_CN.length > 120))
+            invalid('labels');
+    }
+    if (value.actionIcon !== undefined && (typeof value.actionIcon !== 'string' || value.actionIcon.length > 32768 || !/^data:image\/png;base64,iVBORw0KGgo[A-Za-z0-9+/]*={0,2}$/.test(value.actionIcon)))
+        invalid('actionIcon');
+    if (value.authorization !== undefined && (!record(value.authorization) || Object.keys(value.authorization).sort().join(',') !== 'hook,method' || typeof value.authorization.hook !== 'string' || !/^[a-z][a-zA-Z0-9_.-]{0,95}$/.test(value.authorization.hook) || typeof value.authorization.method !== 'string' || !value.authorization.method || value.authorization.method.length > 200))
+        invalid('authorization');
+    if (value.settingsUi !== undefined && value.settingsUi !== 'runtime')
+        throw new Error('Invalid App settings UI');
     if (value.settingsGroup !== undefined &&
-        !['fliggy', 'alipay'].includes(value.settingsGroup))
+        (typeof value.settingsGroup !== 'string' || value.settingsGroup.length > 64))
         invalid('settingsGroup');
     if (value.uaFamily !== undefined &&
-        !['aliapp', 'wechatMiniProgram'].includes(value.uaFamily))
+        (typeof value.uaFamily !== 'string' || value.uaFamily.length > 64))
         invalid('uaFamily');
     if (value.uaTemplate !== undefined) {
         fields(value.uaTemplate, ['ios', 'android'], [], 'uaTemplate');
@@ -212,9 +208,9 @@ export function validateAppProfileDefinition(value) {
         fields(value.policies, [], ['titleBar', 'navigatorLanguage', 'networkResult', 'languages', 'defaultLanguage'], 'policies');
         const p = value.policies;
         if (p.titleBar !== undefined &&
-            !['default', 'taobao', 'fliggy', 'alipay', 'wechat'].includes(p.titleBar))
+            (typeof p.titleBar !== 'string' || p.titleBar.length > 64))
             invalid('policies.titleBar');
-        if (p.networkResult !== undefined && !['default', 'alipay'].includes(p.networkResult))
+        if (p.networkResult !== undefined && (typeof p.networkResult !== 'string' || p.networkResult.length > 64))
             invalid('policies.networkResult');
         if (p.navigatorLanguage !== undefined && typeof p.navigatorLanguage !== 'boolean')
             invalid('policies.navigatorLanguage');
@@ -281,7 +277,7 @@ export function validateAppProfileDefinition(value) {
                     'navigationBar',
                     'statusBar',
                     'systemInfo',
-                    'mtop',
+                    'protocol',
                     'kvGet',
                     'kvSet',
                     'kvDelete',
@@ -307,9 +303,8 @@ export function validateAppProfileDefinition(value) {
                 invalid('setting.option type');
         }
     }
-    for (const key of ['forceH5Mtop'])
-        if (value[key] !== undefined && typeof value[key] !== 'boolean')
-            invalid(key);
+    if (value.runtimeOptions !== undefined && (!record(value.runtimeOptions) || !json(value.runtimeOptions)))
+        invalid('runtimeOptions');
     for (const key of ['popBeforeOpenParam', 'messageEvent'])
         if (value[key] !== undefined && !text(value[key]))
             invalid(key);
@@ -321,7 +316,6 @@ export function validateAppProfileDefinition(value) {
 function validateStructuredOptions(value) {
     const shapes = {
         nativeBack: [[], ['event', 'controlFunction', 'handler']],
-        geolocation: [['reverseGeocodeApi', 'version'], []],
         layerUrlProxy: [
             ['sourceHostPrefix', 'pathPrefix', 'targetHostSuffixes'],
             ['defaultTargetHost'],

package/dist/axSnapshot.js

@@ -290,7 +290,7 @@ export function resolvePageSnapshotQuery(query) {
     if (query === undefined)
         return undefined;
     if (!query || typeof query !== 'object' || Array.isArray(query)) {
-        throw new Error('page_snapshot: query must be an object');
+        throw new Error('page_snapshot: query must be an object, for example {"query":{"text":"提交","exact":false}}.');
     }
     const { text, role, exact } = query;
     if (text !== undefined && (typeof text !== 'string' || !text.trim())) {

package/dist/boundedRequestBuffer.d.ts

@@ -1,4 +1,4 @@
-import type { MtopRequest } from './types.js';
+import type { CapturedRequest } from './types.js';
 export declare const REQUEST_BUFFER_MAX_ENTRIES = 500;
 export declare const REQUEST_BUFFER_MAX_BYTES: number;
 export declare const REQUEST_BUFFER_MAX_FIELD_BYTES: number;
@@ -12,7 +12,7 @@ export interface RequestBufferLimits {
     maxFieldBytes?: number;
 }
 export declare function limitBufferedField(value: any, maxBytes: number): any;
-export declare function estimateRequestBufferBytes(request: MtopRequest): number;
+export declare function estimateRequestBufferBytes(request: CapturedRequest): number;
 export declare function createRequestBufferAccounting(): RequestBufferAccounting;
-export declare function appendRequestToBuffer(requests: MtopRequest[], accounting: RequestBufferAccounting, request: MtopRequest, limits?: RequestBufferLimits): MtopRequest[];
-export declare function refreshRequestInBuffer(requests: MtopRequest[], accounting: RequestBufferAccounting, request: MtopRequest, limits?: RequestBufferLimits): MtopRequest[];
+export declare function appendRequestToBuffer(requests: CapturedRequest[], accounting: RequestBufferAccounting, request: CapturedRequest, limits?: RequestBufferLimits): CapturedRequest[];
+export declare function refreshRequestInBuffer(requests: CapturedRequest[], accounting: RequestBufferAccounting, request: CapturedRequest, limits?: RequestBufferLimits): CapturedRequest[];