@mearl/native-host 3.0.0-beta.3 → 3.0.0-beta.5

package/README.md

@@ -158,7 +158,7 @@ try {
 
 `capabilities` 返回 Provider 实际支持的 mode、permissions、结构化输出、流式和取消能力。当前 Codex 只提供显式 `{ provider: 'codex', mode: 'agent', permissions: 'read-only' }`，每次使用临时 app-server 会话，禁用已配置的 MCP、Apps、搜索、插件和相关扩展功能，沙箱禁止写入和网络；人工请求直接失败。它仍有只读 Agent 的本机读取能力，不能承诺完全不调用工具，因此 `mode: 'generate'` 明确拒绝，绝不降级。交互侧边栏保持独立会话生命周期。
 
-请求最多 256 KiB；`outputSchema` 最多 64 KiB，通过 [Codex app-server](https://developers.openai.com/codex/app-server/) 的 `turn/start` 传递。宿主只接受成功 turn 的原始最终消息，并独立解析 JSON、校验 schema，再生成成功任务；Provider 的 willRetry 错误不提前结束执行，终态错误保留具体原因及稳定错误码。`model.delta` 是可缺失的诊断进度，不能拼接成最终结果。最终文本上限 32 MiB，结构化返回 `{ text, output?, provider, mode, model? }`，模型额外业务约束仍由插件校验。
+请求最多 256 KiB；`outputSchema` 最多 64 KiB，通过 [Codex app-server](https://developers.openai.com/codex/app-server/) 的 `turn/start` 传递。宿主只接受成功 turn 的原始最终消息，并解析 JSON，再生成成功任务；outputSchema 的约束交给模型 Provider，插件负责验证最终数据结构和业务约束；Provider 的 willRetry 错误不提前结束执行，终态错误保留具体原因及稳定错误码。`model.delta` 是可缺失的诊断进度，不能拼接成最终结果。最终文本上限 32 MiB，结构化返回 `{ text, output?, provider, mode, model? }`，模型额外业务约束仍由插件校验。
 
 SDK 使用 `PluginModelClient.capabilities/list/start/run`。工具箱使用 `host.model.capabilities/list/start` 和 `waitTask`。`PluginModelClient.run` 的 signal 会取消执行并等待清理，语义与仅停止观察的任务 `wait` 不同。
 
@@ -185,7 +185,7 @@ export default app => {
 };
 ```
 
-`context.checkpoint(data, expectedSequence)` 仅在 service 路由、未绑定页面实例的活动受管理公开命令中可用；子任务可记录检查点，显式恢复仍只接受合格根任务。负载最多 64 KiB，宿主按声明 schema 校验，分配递增检查点序号。数据、版本、宿主计算的 canonical schemaHash、任务快照和 checkpoint 事件写入同一个原子任务记录；并发过期写入明确冲突。检查点不是外部操作的完成证明，与插件 state 事务也不共享提交。外部提交与检查点之间的故障窗口由恢复入口查询操作状态或使用稳定幂等键处理。
+`context.checkpoint(data, expectedSequence)` 仅在 service 路由、未绑定页面实例的活动受管理公开命令中可用；子任务可记录检查点，显式恢复仍只接受合格根任务。负载最多 64 KiB，宿主检查 JSON 和 CAS 序号，分配递增检查点序号；schema 是格式描述与版本身份，插件负责验证检查点数据。数据、版本、宿主计算的 canonical schemaHash、任务快照和 checkpoint 事件写入同一个原子任务记录；并发过期写入明确冲突。检查点不是外部操作的完成证明，与插件 state 事务也不共享提交。外部提交与检查点之间的故障窗口由恢复入口查询操作状态或使用稳定幂等键处理。
 
 SDK 使用 `PluginTaskClient.checkpoint(taskId)` / `resume(taskId, { environment?, revision? })`。resume 只接受失败、取消或中断的根命令，创建新的 taskId 和执行代次，记录 `resumedFrom`，原任务保持终态；相同来源任务只有一个直接后继，重复请求返回已有 attempt，配置不同则冲突。继续恢复失败的新 attempt 时，对新 taskId 调用 resume。
 
@@ -207,7 +207,7 @@ export default app => {
 };
 ```
 
-migrateFrom 最多 16 个不同的旧版本（均低于目标版本），历史 schema 必须与检查点写入时记录的宿主 hash 及保留代码声明一致。即使源码没变，依赖环境等动态声明发生格式漂移也拒绝恢复。迁移和恢复进程调用隐藏 handler 前再次比较目标声明签名，普通 checkpoint 写入也校验执行端声明；Python 每次 run 的 ready ACK 前核对完整加载元数据。迁移返回新检查点的数据，宿主校验 JSON、64 KiB 限制和目标 schema，再将新数据及来源元信息原子写入唯一后继任务；旧任务和检查点不变。没有迁移声明、格式不匹配、转换失败或清理未确认均不接纳新任务。
+migrateFrom 最多 16 个不同的旧版本（均低于目标版本），历史 schema 必须与检查点写入时记录的宿主 hash 及保留代码声明一致。即使源码没变，依赖环境等动态声明发生格式漂移也拒绝恢复。迁移和恢复进程调用隐藏 handler 前再次比较目标声明签名，普通 checkpoint 写入也校验执行端声明；Python 每次 run 的 ready ACK 前核对完整加载元数据。迁移返回新检查点的数据，宿主校验 JSON、64 KiB 限制和目标声明身份，再将新数据及来源元信息原子写入唯一后继任务；旧任务和检查点不变。没有迁移声明、格式不匹配、转换失败或清理未确认均不接纳新任务。
 
 同一源任务的并发恢复按 revision 选择与环境指纹合并，不同意图冲突；已提交后继的重试先核验请求指纹，不重复转换。迁移在独立受管理进程执行，10 秒期限，与声明解析共享最多 8 个进程预算，无等待队列，服务关闭会取消并等待清理。转换和原执行树均确认停止，且安装和双端代码快照再次核验后才接纳新任务。迁移没有宿主 API、模型、state、页面或嵌套插件调用权限；JS/Python 仍是可信本机代码，具备直接文件和网络访问能力，不构成 OS 沙箱。迁移必须是可重复的纯 JSON 转换：提交前崩溃可能再次执行，不承诺转换恰好执行一次。
 
@@ -258,7 +258,7 @@ export default app => {
 
 页面函数的 `host.emit(name, payload)` 返回接收确认；处理结果通过实例事件查询。`context.page.send/get` 始终绑定当前实例，运行时任务的普通页面动作和复合页面入口被拒绝。每次出队、宿主调用和提交结果都重新检查文档。运行时传输保留控制会话归属、暂停与释放检查，并行处理消息和回调；消息顺序由实例与事件策略负责，等待业务消息不会阻塞同文档的校验或取消。页面 `receive(message, { signal, requestId })` 提供每条消息的协作取消信号；任务取消传播到该文档对应请求，插件异步等待后应检查 signal。取消不强制终止页面 JS，已提交的外部操作仍需核对。后台默认每 10 秒并发续租，每实例校验超时 8 秒，浏览器租约 30 秒；续租只更新内存，独立定时器每 5 秒批量保存轻量租约，完整运行时代码与待确认事件只在对应状态变化时持久化。失效时取消排队和运行任务并释放页面资源。
 
-事件负载最多 32 KiB，页面待确认队列 64 条；后台每事件默认待处理 32 条（最多 64），每实例活动事件最多 128，有限并发最多 8。历史最多 256 条及 384 KiB，游标缺口明确返回。Native Messaging 的请求与结果各按 192 KiB 分块并校验 SHA-256，单条页面业务消息/结果最多 24 MiB；浏览器与工具箱回复资源各有 32 MiB 总预算及 30 秒过期。
+事件 schema 保留为格式描述，后台处理器负责验证负载；宿主检查事件绑定、文档归属、大小和调度约束。事件负载最多 32 KiB，页面待确认队列 64 条；后台每事件默认待处理 32 条（最多 64），每实例活动事件最多 128，有限并发最多 8。历史最多 256 条及 384 KiB，游标缺口明确返回。Native Messaging 的请求与结果各按 192 KiB 分块并校验 SHA-256，单条页面业务消息/结果最多 24 MiB；浏览器与工具箱回复资源各有 32 MiB 总预算及 30 秒过期。
 
 SDK 使用 `PluginPageClient`。工具箱调用 `host.page.*`，或 `window.mearl.subscribe('page', { instanceId, cursor? }, listener)` 观察后台事件；`events` 接受 `cursor` 与 `waitMs`（0–25000），无新事件时可等待变化；工具箱订阅先读取快照，随后使用长轮询，退订只结束观察。内部 `page_runtime` 是文档适配协议，业务插件使用 `app.page()`。设计稿叠加已迁移，保存事件无需 Popup 转发。
 
@@ -270,13 +270,13 @@ SDK 使用 `PluginPageClient`。工具箱调用 `host.page.*`，或 `window.mear
 
 ### 状态和激活
 
-插件导出 `stateStorage = { version: 1, collections: { ... } }`，每个集合声明 `scope`（installation/host/browser-session/instance）、`storage`（persistent/cache/memory）、`schemaVersion`、JSON Schema 和可选 `maxEntries/maxBytes/ttlMs`。浏览器会话与实例只接受 cache/memory；memory 只允许这两种作用域，并且只驻留插件执行宿主内存，按需分配，全宿主合计上限 128 MiB / 512 个集合命名空间，宿主重启清空；实例结束释放对应内存。浏览器会话在文档刷新时保留，新的浏览器会话使用独立空间。所有页面作用域都由真实活动页面解析，不能用业务字段伪造。实例结束清理专属缓存；其他缓存默认 TTL 一天，最多七天，读取、定时维护和配额检查会回收过期值。持久配置、缓存、任务记录和二进制资产分别管理。
+schema 是格式元数据，宿主不执行 JSON Schema 关键字校验；状态写入、事件负载、检查点及迁移数据由插件验证。插件导出 `stateStorage = { version: 1, collections: { ... } }`，每个集合声明 `scope`（installation/host/browser-session/instance）、`storage`（persistent/cache/memory）、`schemaVersion`、JSON Schema 和可选 `maxEntries/maxBytes/ttlMs`。浏览器会话与实例只接受 cache/memory；memory 只允许这两种作用域，并且只驻留插件执行宿主内存，按需分配，全宿主合计上限 128 MiB / 512 个集合命名空间，宿主重启清空；实例结束释放对应内存。浏览器会话在文档刷新时保留，新的浏览器会话使用独立空间。所有页面作用域都由真实活动页面解析，不能用业务字段伪造。实例结束清理专属缓存；其他缓存默认 TTL 一天，最多七天，读取、定时维护和配额检查会回收过期值。持久配置、缓存、任务记录和二进制资产分别管理。
 
 同一命名空间已有状态时，memory 与磁盘存储之间切换须使用新的集合名或作用域；不支持跨存储介质迁移。
 
 `get/list/transact` 在用户级任务服务串行处理，集合的值、CAS 版本、schema 版本、TTL 与最近 64 次幂等回执一起写入单个原子记录。每个 put/delete 必须携带读取获得的 opaque `expectedVersion`；集合版本单调递增，删除和过期不会重用版本。多键事务最多 128 项、512 KiB，单值最多 256 KiB，默认每集合 1024 项/8 MiB，磁盘状态每插件总量 64 MiB；memory 按前述全宿主上限管理。list 返回有界分页，调用方带 `expectedRevision` 检测翻页期间的变动。
 
-变更 schema 或存储类型需要提升 `schemaVersion`。迁移事务明确带 `migrateFromVersion` 与 `expectedRevision`，全部保留值通过新 schema 后才原子提交；旧 revision 禁止回写新 schema。同步 handler 也校验加载时的声明签名，避免代码更新期间误写。更换安装不会继承旧安装命名空间。
+变更 schema 或存储类型需要提升 `schemaVersion`。迁移事务明确带 `migrateFromVersion` 与 `expectedRevision`，插件负责验证和转换全部保留值，宿主核验版本及事务约束后原子提交；旧 revision 禁止回写新 schema。同步 handler 也校验加载时的声明签名，避免代码更新期间误写。更换安装不会继承旧安装命名空间。
 
 命令使用 `app.state(collection, operation, input)`，或通过自动绑定当前页面实例的 `context.state(...)` 调用。SDK `PluginStateClient` 与工具箱 `host.state.*` 使用同一服务。设计稿叠加的素材和设置使用 browser-session memory，素材通过有界分块读写。用户显式导出的图片不属于缓存。
 

package/dist/THIRD_PARTY_NOTICES.txt

@@ -196,60 +196,6 @@ Apache License
 
 ----------------------------------------
 
-acorn@8.19.0
-LICENSE
-
-MIT License
-
-Copyright (C) 2012-2022 by various contributors (see AUTHORS)
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in
-all copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
-THE SOFTWARE.
-
-----------------------------------------
-
-ajv@8.20.0
-LICENSE
-
-The MIT License (MIT)
-
-Copyright (c) 2015-2021 Evgeny Poberezkin
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
-
-----------------------------------------
-
 buffer-crc32@0.2.13
 LICENSE
 
@@ -384,69 +330,6 @@ OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 
 ----------------------------------------
 
-fast-deep-equal@3.1.3
-LICENSE
-
-MIT License
-
-Copyright (c) 2017 Evgeny Poberezkin
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
-
-----------------------------------------
-
-fast-uri@3.1.9
-LICENSE
-
-Copyright (c) 2011-2021, Gary Court until https://github.com/garycourt/uri-js/commit/a1acf730b4bba3f1097c9f52e7d9d3aba8cdcaae
-Copyright (c) 2021-present The Fastify team <https://github.com/fastify/fastify#team>
-All rights reserved.
-
-Redistribution and use in source and binary forms, with or without
-modification, are permitted provided that the following conditions are met:
-    * Redistributions of source code must retain the above copyright
-      notice, this list of conditions and the following disclaimer.
-    * Redistributions in binary form must reproduce the above copyright
-      notice, this list of conditions and the following disclaimer in the
-      documentation and/or other materials provided with the distribution.
-    * The names of any contributors may not be used to endorse or promote
-      products derived from this software without specific prior written
-      permission.
-
-THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
-ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
-WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
-DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDERS AND CONTRIBUTORS BE LIABLE FOR ANY
-DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
-(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
-LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
-ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
-(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
-SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
-
-                                  *   *   *
-
-The complete list of contributors can be found at:
-- https://github.com/garycourt/uri-js/graphs/contributors
-
-----------------------------------------
-
 fd-slicer@1.1.0
 LICENSE
 
@@ -504,33 +387,6 @@ THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLI
 
 ----------------------------------------
 
-json-schema-traverse@1.0.0
-LICENSE
-
-MIT License
-
-Copyright (c) 2017 Evgeny Poberezkin
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
-
-----------------------------------------
-
 ms@2.1.3
 license.md
 
@@ -671,6 +527,43 @@ THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLI
 
 ----------------------------------------
 
+tldts@7.4.19
+LICENSE
+
+Copyright (c) 2017 Thomas Parisot, 2018 Rémi Berson
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and
+associated documentation files (the "Software"), to deal in the Software without restriction,
+including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense,
+and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so,
+subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
+ WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+----------------------------------------
+
+tough-cookie@6.0.2
+LICENSE
+
+Copyright (c) 2015, Salesforce.com, Inc.
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:
+
+1. Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.
+
+2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.
+
+3. Neither the name of Salesforce.com nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+----------------------------------------
+
 uqr@0.1.3
 LICENSE
 

package/dist/app-authorization.d.ts

@@ -0,0 +1,8 @@
+export type AppAuthorizationProgress = 'installing' | 'connected' | 'authorizing';
+export declare function startAppAuthorization(hook: string, value: unknown, progress?: (phase: AppAuthorizationProgress) => void): Promise<{
+    browserId: string;
+    qrSvg: string;
+}>;
+export declare function waitAppAuthorization(browserId: string, value: unknown, progress?: (phase: AppAuthorizationProgress) => void): Promise<Record<string, unknown>>;
+export declare function closeAppAuthorization(browserId: string): Promise<void>;
+export declare function closeAppAuthorizations(): Promise<void>;

package/dist/app-profile-catalog.d.ts

@@ -1,7 +1,9 @@
 import { type ResolveAppProfileOptions } from '@mearl/app-profiles';
 import { type AppProfileCatalogEntry } from '@mearl/browser-core';
 export declare function findCapabilityAppProfile(id: string): AppProfileCatalogEntry | undefined;
-export declare function listInstalledAppProfiles(): Promise<{
+export declare function listInstalledAppProfiles(options?: {
+    refresh?: boolean;
+}): Promise<{
     profiles: AppProfileCatalogEntry[];
     errors: Array<{
         plugin: string;

package/dist/capability-contracts.d.ts

@@ -1,4 +1,4 @@
-import type { MtopRequest, ParsedSseEvent, RumEvent, SendMtopRequestParams } from '@mearl/browser-core';
+import type { RequestCookie, MtopRequest, ParsedSseEvent, RumEvent, SendMtopRequestParams } from '@mearl/browser-core';
 export interface ResolvedMtopRequest {
     api: string;
     requestData: unknown;
@@ -47,7 +47,7 @@ export interface MtopStreamCaptureResponse {
 }
 export interface MtopCapability {
     resolveRequest(data: SendMtopRequestParams): ResolvedMtopRequest;
-    prepareRequest(resolved: ResolvedMtopRequest, cookies: Map<string, string>, stream?: boolean): PreparedSignedMtopRequest;
+    prepareRequest(resolved: ResolvedMtopRequest, cookies: readonly RequestCookie[], stream?: boolean): PreparedSignedMtopRequest;
     parseResponse(text: string): unknown;
     consumeResponse(response: Response, onReceive: (event: ParsedSseEvent) => void | Promise<void>): Promise<unknown>;
     createCapture(data: MtopStreamCaptureStart): MtopStreamCapture;

package/dist/cdp-backend/capability-handlers.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/cdp-backend/cdp-utils.d.ts

@@ -4,7 +4,7 @@
  * Contains: HTTP helper (nodeFetch), cookie utilities, page-load waiters,
  * viewport helpers, and serialized function sources for page injection.
  */
-import { type PageClickPointerType, type PageDragPoint, type PageDragPointerType } from '@mearl/browser-core';
+import { type CookieCandidate, type PageClickPointerType, type PageDragPoint, type PageDragPointerType } from '@mearl/browser-core';
 import type { PageSession } from './cdp-session.js';
 export declare const TYPE_INTO_ELEMENT_SRC: string;
 export declare const CLICK_ELEMENT_VIA_JS_SRC: string;
@@ -21,8 +21,9 @@ export declare function nodeFetch(urlStr: string, options?: {
     headers: Record<string, string>;
     body: string;
     bodyBuffer: Buffer;
+    setCookies: string[];
 }>;
-export declare function getCookiesForUrl(session: PageSession, targetUrl: string): Promise<Map<string, string>>;
+export declare function getCookiesForUrl(session: PageSession, targetUrl: string): Promise<CookieCandidate[]>;
 export declare function buildMultipartFormBody(fields: Record<string, string>): {
     contentType: string;
     body: string;

package/dist/cdp-backend/handlers.d.ts

@@ -8,6 +8,7 @@ import './request-handlers.js';
 import './mock-handlers.js';
 import './http-handlers.js';
 import './browser-handlers.js';
+import './capability-handlers.js';
 import './rule-handlers.js';
 import './tab-handlers.js';
 import './interaction-handlers.js';

package/dist/cdp-backend/http-handlers.d.ts

@@ -1,7 +1,8 @@
+import { type ResponseCookieSync } from './response-cookies.js';
 /**
  * CDP HTTP proxy / MTOP request / API schema handlers.
  */
-import type { SendMtopRequestParams, SendRequestParams } from '@mearl/browser-core';
+import { SendMtopRequestParams, SendRequestParams } from '@mearl/browser-core';
 import type { PageSession } from './cdp-session.js';
 export interface CdpMtopStreamRequestMetadata {
     method: 'GET' | 'POST';
@@ -30,4 +31,5 @@ export declare function cdpSendMtopStreamRequest(session: PageSession, data: Sen
     success: true;
     response: unknown;
     requestData: unknown;
+    cookieSync?: ResponseCookieSync;
 }>;

package/dist/cdp-backend/request-cookies.d.ts

@@ -0,0 +1,8 @@
+import { type CookieCandidate } from '@mearl/browser-core';
+/** Background proxy requests use the target URL's first-party, schemeful site. */
+export declare function getRequestCookiePartition(url: string): {
+    topLevelSite: string;
+    hasCrossSiteAncestor: false;
+};
+/** Keep ordinary cookies and only the target site's first-party partition. */
+export declare function selectRequestCookies<T extends CookieCandidate>(cookies: readonly T[], url: string): T[];

package/dist/cdp-backend/response-cookies.d.ts

@@ -0,0 +1,8 @@
+import type { PageSession } from './cdp-session.js';
+export interface ResponseCookieSync {
+    updatedCount: number;
+    rejectedCount: number;
+    failedCount: number;
+}
+/** Apply response cookies to the same browser context that supplied the request's credentials. */
+export declare function syncResponseCookies(session: PageSession, url: string, headers: readonly string[]): Promise<ResponseCookieSync | undefined>;

package/dist/cdp-backend/send-request.d.ts

@@ -1,2 +1,3 @@
-import { type SendRequestParams } from '@mearl/browser-core';
-export declare function executeNodeSendRequest(data: SendRequestParams, cookieMap?: Map<string, string>): Promise<any>;
+import { type RequestCookie, type SendRequestParams } from '@mearl/browser-core';
+import type { ResponseCookieSync } from './response-cookies.js';
+export declare function executeNodeSendRequest(data: SendRequestParams, cookies?: readonly RequestCookie[], onResponseCookies?: (url: string, headers: readonly string[]) => Promise<ResponseCookieSync | undefined>): Promise<any>;

package/dist/control-session-manager.d.ts

@@ -6,7 +6,7 @@ interface Dependencies {
     transport: () => ControlSessionInfo['transport'];
     invoke: (action: string, data: any, transport: ControlSessionInfo['transport']) => Promise<any>;
     deactivate?: (tabs: number[], transport: ControlSessionInfo['transport']) => Promise<void>;
-    cleanup: (tabs: number[], transport: ControlSessionInfo['transport'], preserveEnvironment: boolean) => Promise<void>;
+    cleanup: (tabs: number[], transport: ControlSessionInfo['transport'], preserveEnvironment: boolean, returningToAgent?: boolean) => Promise<void>;
     download: (data: PageDownloadParams, transport: ControlSessionInfo['transport'], origin: string) => Promise<{
         filename: string;
         filePath: string;