@mobileaidev/ai-app-bridge 0.4.0 → 0.4.1

package/README.md

@@ -7,7 +7,9 @@ discovery. Every request checks the mapping before dispatch. Mutating requests
 are never replayed after a missing route or uncertain result. For manual cleanup,
 pass the exact serial and returned Host port to `remove-forward`.
 
-This source version is `0.4.0`; registry publication is a separate release step.
+This source version is `0.4.1`; registry publication is a separate release step.
+It fixes iOS observation ownership and preserves extraction results when
+temporary cleanup fails. Device and Web SDKs share version `0.4.1`; their execution contracts are unchanged.
 The default installation includes the Script/Intent and capture contracts below.
 Local package verification does not change npm dist-tags.
 The supported Node range is `>=26.3.0 <27`; this release was checked on 26.3.0.
@@ -65,7 +67,7 @@ domains, commands, and options, then call `run` with the selected command.
 
 ```bash
 # Install the current stable release; see docs/RELEASE.md for packaging.
-npm install -g @mobileaidev/ai-app-bridge@0.4.0
+npm install -g @mobileaidev/ai-app-bridge@0.4.1
 
 ai-app-bridge status --extract null --package-name io.github.mobileaidev.aiappbridge.sample
 ai-app-bridge tree --extract null --package-name io.github.mobileaidev.aiappbridge.sample

package/bin/command-registry.js

@@ -245,6 +245,8 @@ const commandByName = new Map(commandDefinitions.map(d => [d.command, d]));
 const isolatedByName = new Map(isolatedCommandDefinitions.map(d => [d.command, d]));
 
 function isMutationCommand(command, args = {}) {
+  // iOS observation controls only a bounded SDK capture lease, not a UI action.
+  if (command === 'ios-ui-observation') return false;
   if (require('./ui-observation').commands.has(command)) return args.operation !== 'status';
   if (['android-executor', 'flutter-executor'].includes(command)) return ['open', 'act', 'close'].includes(args.operation);
   if (command === 'web-executor') return ['prepare', 'open', 'act', 'navigate', 'close'].includes(args.operation);

package/bin/extraction/runner.js

@@ -66,7 +66,7 @@ async function runExtraction(prepared, inputs) {
     // every descendant to close its copies of stdout/stderr.
     child?.stdin?.destroy(); child?.stdout?.destroy(); child?.stderr?.destroy();
     try { if (directory) fs.rmSync(directory, { recursive: true, force: true }); }
-    catch (error) { result = { ok: false, error: 'extraction_cleanup_failed', message: error.message }; }
+    catch (error) { result.cleanupError = error.code || 'extraction_cleanup_failed'; }
     finally { active--; }
   }
   const diagnostics = channel?.diagnostics();

package/bin/ios-execution.js

@@ -93,6 +93,12 @@ async function reconcileIOS({ lease, device, args, createPort, readWdaTestSummar
       } catch (error) { return { settled: false, error: 'ios_wda_startup_completion_unavailable', cause: error.code || 'invalid_result' }; }
     }
     if (args.setupResultPath) return { settled: false, error: 'ios_original_completion_identity_required' };
+    if (pending.kind === 'ios-command' && pending.command === 'ios-ui-observation') {
+      // Older Hosts incorrectly journaled bounded capture control as a device
+      // action. Retire only that marker; its observation outcome remains unknown.
+      return { kind: 'ios-ui-observation', settled: true, dispatched: null,
+        reason: 'observation_control_not_device_mutation', observationOutcome: 'unknown' };
+    }
     if (pending.kind === 'ios-command') {
       const invocation = pending.invocation;
       const index = Array.isArray(invocation?.arguments) ? invocation.arguments.indexOf('--json-output') : -1;

package/bin/ios-provider.js

@@ -96,7 +96,7 @@ class IOSBridgeProvider {
         case 'ios-status':
           return await this.runtimeGet(args, '/v1/status');
         case 'ios-ui-observation': {
-          const port = await this.runtimePort(args, context);
+          const port = await this.runtimePort(args, { ...context, mutation: false });
           const result = await port.post(require('./ui-observation').path(args), require('./ui-observation').request(args));
           return { ...result, endpoint: port.endpoint.baseUrl, device: port.endpoint.device, runtimeBinding: port.endpoint.runtimeBinding };
         }
@@ -445,7 +445,8 @@ class IOSBridgeProvider {
 
   async runtimePort(args, options = {}) {
     const endpoint = await this.resolveRuntimeEndpoint(args, options);
-    const httpOptions = { timeoutMs: this.context(args).httpTimeoutMs, headers: bindingHeaders(endpoint.runtimeBinding) };
+    const httpOptions = { timeoutMs: this.context(args).httpTimeoutMs, headers: bindingHeaders(endpoint.runtimeBinding),
+      ...(options.mutation === false ? { mutation: false } : {}) };
     const request = async (method, endpointPath, payload) => {
       let response;
       try {

package/docs/COMMAND_CONTRACT.md

@@ -1743,6 +1743,17 @@ tree or publish cached layout as current UI. Query a provider's observation
 command for its live lease state. These endpoints require rebuilt SDKs;
 installing a new CLI cannot patch an installed application's old SDK.
 
+iOS observation control uses the SDK's bounded capture lease, not physical-device
+action ownership. A rejected control or lost response cannot block later UI
+actions, and its HTTP request does not mark an enclosing UI action dispatched.
+An older Host may have left an `ios-command` / `ios-ui-observation` ownership
+marker. Explicit `ios-execution --operation reconcile` retires only that marker
+after checking the recorded device and any supplied bundle identity. Its receipt
+reports `reason: observation_control_not_device_mutation` and
+`observationOutcome: unknown`; it does not claim that observation started or
+stopped successfully. Other unresolved actions still require their original
+completion proof. Runtime restart alone does not erase the durable journal.
+
 Ordinary CLI/MCP `feedback=full` opens a window before the action and releases
 it in finally. If observation is unavailable, the action is rejected before
 dispatch; acquiring evidence does not mark the enclosing UI action dispatched.

package/docs/INSTALLATION.md

@@ -5,7 +5,8 @@ The same npm package contains CLI and MCP; running only MCP is supported.
 FactStore is an embedded library bundled in that package. There is no separate
 database, FactStore service or CLI process to install first.
 
-This source targets 0.4.0. Registry publication is a separate step; before
+This source targets the coordinated 0.4.1 release.
+Registry publication is a separate step; before
 publication, use the reviewed local tarball instead of expecting this registry
 version to resolve.
 
@@ -14,7 +15,7 @@ version to resolve.
   "mcpServers": {
     "ai-app-bridge": {
       "command": "npx",
-      "args": ["--yes", "--package", "@mobileaidev/ai-app-bridge@0.4.0", "ai-app-bridge-mcp"]
+      "args": ["--yes", "--package", "@mobileaidev/ai-app-bridge@0.4.1", "ai-app-bridge-mcp"]
     }
   }
 }

package/docs/OPTIONAL_EXECUTORS.md

@@ -1,4 +1,4 @@
-# Optional UI executors (0.4.0)
+# Optional UI executors (0.4.1)
 
 Bridge keeps its existing SDK paths and exposes optional executors through `capabilities`, `run`, and JavaScript/Python Script. Select an executor explicitly. No command silently changes a touch into a setter, switches framework after failure, or repeats an uncertain action.
 
@@ -52,9 +52,9 @@ android {
     }
 }
 dependencies {
-    androidTestImplementation("com.github.mobileAiDev.ai-app-bridge:ai-app-bridge-test-instrumentation:0.4.0")
+    androidTestImplementation("com.github.mobileAiDev.ai-app-bridge:ai-app-bridge-test-instrumentation:0.4.1")
     // Optional H5 adapter:
-    androidTestImplementation("com.github.mobileAiDev.ai-app-bridge:ai-app-bridge-test-espresso-web:0.4.0")
+    androidTestImplementation("com.github.mobileAiDev.ai-app-bridge:ai-app-bridge-test-espresso-web:0.4.1")
 }
 ```
 
@@ -109,7 +109,7 @@ Espresso text actions have different semantics. `replaceText` is the framework's
 
 ## Flutter
 
-Add `ai_app_bridge_test: 0.4.0` to the application's `dev_dependencies`. The helper takes `flutter_test` and `integration_test` from the **same Flutter SDK** as the application. It is a Dart test helper, not an additional Android plugin with its own AGP/Kotlin versions.
+Add `ai_app_bridge_test: 0.4.1` to the application's `dev_dependencies`. The helper takes `flutter_test` and `integration_test` from the **same Flutter SDK** as the application. It is a Dart test helper, not an additional Android plugin with its own AGP/Kotlin versions.
 
 The helper declares Flutter **>=3.41.0** and Dart **>=3.11.0 <4.0.0**. The 0.3.8 automatic preparation was exercised with LocalSend on Flutter **3.41.9 / Android API 36**, preserving all 214 production dependency versions. Earlier executor validation covered Flutter 3.41.9 / API 25 and 3.44.8 / API 36. These are specific verified combinations; other SDK versions still need validation with the application's plugin graph.
 

package/docs/RELEASE.md

@@ -1,9 +1,15 @@
-# 0.4.0 改善版发行检查
+# 0.4.1 统一补丁发行检查
 
 源码版本、可发布验收、registry 发布和正在运行的客户端是四个不同状态。
 本文件描述发行操作；源码中的版本号不代表 npm/JitPack/pub.dev 已发布。
-当前实施与放行证据统一记录于仓库 `docs/IMPROVEMENT_RELEASE_V1_2026-09-18.md`
-及各 M1–M5 交付记录。最终 A01–A16 对账未全通过前不宣称完整发布验收。
+0.4.0 改善版的实施与放行证据记录于仓库
+`docs/IMPROVEMENT_RELEASE_V1_2026-09-18.md` 及各 M1–M5 交付记录。
+0.4.1 统一发布全部 Bridge 组件，Host 修复与回归证据见
+`docs/HOST_0.4.0_GROK_REVIEW_2026-09-19.md`；设备及 Web SDK 仅同步版本与依赖。
+
+本次修复 iOS 观察控制误占设备动作 ownership，并为旧误记 marker 提供
+显式 reconcile；提取临时目录清理失败改为 cleanupError，保留原提取结果。
+超预算 reference 交付和 extract 必填合同不变；设备端执行合同不变。
 
 ## 兼容与迁移
 
@@ -20,12 +26,12 @@ read，不重放动作。详见 [公共提取合同与完整示例](RESPONSE_EXT
 
 | 资源 | 源码版本 | 发行渠道 |
 | --- | --- | --- |
-| Desktop CLI/MCP | 0.4.0 | npm @mobileaidev/ai-app-bridge |
+| Desktop CLI/MCP | 0.4.1 | npm @mobileaidev/ai-app-bridge |
 | 嵌入式 native store | 0.2.0 | 随主包 bundleDependencies，包括四个预编译 addon |
-| Android SDK / Gradle plugin / executor modules | 0.4.0 | 同仓库 Git tag / JitPack |
-| iOS Swift 包 | Git tag 0.4.0 | 根 Package.swift |
-| Flutter SDK / test helper | 0.4.0 | pub.dev；Android 固定依赖同版 SDK |
-| Web SDK | 0.4.0 | npm @mobileaidev/ai-app-bridge-web |
+| Android SDK / Gradle plugin / executor modules | 0.4.1 | 同仓库 Git tag / JitPack |
+| iOS Swift 包 | Git tag 0.4.1 | 根 Package.swift |
+| Flutter SDK / test helper | 0.4.1 | pub.dev；Android 固定依赖同版 SDK |
+| Web SDK | 0.4.1 | npm @mobileaidev/ai-app-bridge-web |
 
 UIA bundle、WDA 14.1.1、iOS WDA 模板、Playwright helper 与三类范例随主包。
 未改变代码的设备组件不需要仅为 Host 返回合同重新安装；需要测试新发行
@@ -33,6 +39,10 @@ UIA bundle、WDA 14.1.1、iOS WDA 模板、Playwright helper 与三类范例随
 
 ## 发布前门禁
 
+本次必须通过新增缺陷回归、Host 完整功能/性能组、真实 iPhone 恢复验证及
+最终 tarball 安装检查。SDK 同步版本后重新验证构建与公开依赖；未变更的
+原生 addon 复用 0.4.0 四平台验收，并核实归档字节相同。
+
 1. 固定审核提交，核对工作包和 A01–A16，保留失败与未验证项。完整 npm
    功能组与安静环境串行性能组通过，范例由文档读取实际执行。
 2. 对 [Host 支持矩阵](INSTALLATION.md) 的四个 artifact 校验 checksum 和
@@ -49,11 +59,12 @@ UIA bundle、WDA 14.1.1、iOS WDA 模板、Playwright helper 与三类范例随
 
 ## 对外发布顺序
 
-在已授权的发布操作中，维护者先推送已验收提交和 0.4.0 tag，核实 JitPack
-公开坐标成功解析，再发布依赖它们的 Flutter SDK/helper。Web npm 与主
-CLI/MCP npm 分别发布，并核实 registry 实际返回的 tarball/checksum；设置
-对应 dist-tag 和 GitHub Release。远端流水线成功与设备业务验收分别列明。
-本地构建或 MavenLocal/path 替换不能证明公开坐标可安装。
+本次推送已验收提交与统一 `0.4.1` tag，核实 JitPack 公开坐标成功解析，
+再发布依赖它们的 Flutter SDK/helper。Web npm 与主 CLI/MCP npm 分别发布
+已经验证的 tarball，核实 `latest`/`next` 均为 0.4.1、公开下载 checksum
+与候选包一致，并创建对应 GitHub Release。保留旧 `0.4.0` tag 不动。远端流水线
+成功与设备业务验收分别列明。本地构建或 MavenLocal/path 替换不能证明公开
+坐标可安装。
 
 客户端升级时退出旧 MCP 再重新连接。若是旧客户端碰到新 Runtime，先升
 客户端；只有明确 Runtime 是待升级一侧时，在其任务结束后显式 stop。

package/docs/RESPONSE_EXTRACTION.md

@@ -70,6 +70,10 @@ requested delivery, 1 for validation/failed or unknown execution, and 2 when a
 known successful command could not be extracted/delivered. MCP uses `isError`
 consistently. A successful Script execution is separate from its business verdict.
 
+A temporary-directory removal failure after the worker exits is reported as
+`extraction.cleanupError`. It does not replace a successful value or the original
+extraction error, change the exit code, or replay the command.
+
 Preserve source identity, timestamps, state and coverage needed by the actual
 assertion. A selected successful row does not prove complete business coverage.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mobileaidev/ai-app-bridge",
-  "version": "0.4.0",
+  "version": "0.4.1",
   "description": "Desktop CLI and MCP server for AI App Bridge across Android, iOS, Flutter, WebView, and Web targets.",
   "repository": {
     "type": "git",

package/runtime/executors/playwright/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "ai-app-bridge-playwright-runtime",
-  "version": "0.4.0",
+  "version": "0.4.1",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "ai-app-bridge-playwright-runtime",
-      "version": "0.4.0",
+      "version": "0.4.1",
       "dependencies": {
         "playwright": "1.63.0"
       },

package/runtime/executors/playwright/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ai-app-bridge-playwright-runtime",
-  "version": "0.4.0",
+  "version": "0.4.1",
   "private": true,
   "description": "Optional, isolated browser runtime managed by AI App Bridge.",
   "engines": { "node": ">=26.3.0 <27" },