@qoniai/qoni 0.7.0 → 0.9.0

package/CHANGELOG.md

@@ -1,5 +1,128 @@
 # Changelog
 
+## 0.9.0 - 2026-10-07
+
+DoAnything interactions are now typed by what the user has to do, never by
+business: `site_login`, `take_control`, `ask_user`, `confirmation`, plus the
+system `wait`.
+
+### Changed
+
+- `Interaction` is a union distributed over `type`: `switch (interaction.type)`
+  narrows `payload` in each branch, including `handle.interaction` inside
+  `onInteraction`. `Interaction<"site_login">` still picks one member.
+  `TypedInteraction` names the union. Because it is now a type alias, not an
+  interface, `interface X extends Interaction` no longer compiles (TS2312):
+  use `type X = Interaction & { ... }`. Code that builds an `Interaction` from a
+  separate `type` and `payload` must narrow them together or cast the object.
+- The wire's `clarification` is presented as `ask_user`, with payload
+  `{ question, answerType, options? }`. `answerType` is `text`, `number`,
+  `boolean`, `single_choice` or `multiple_choice`, and options are
+  `{ value, label }`. A clarification with choices becomes `single_choice`; one
+  without choices is `text`. A native `ask_user` keeps the `answer_type` it
+  sends, and every string option value is kept, including `""`.
+  Migration: compare `type` with `"ask_user"` instead of `"clarification"`
+  (TypeScript no longer compiles the old comparison); read
+  `payload.answerType` / `payload.options` instead of `payload.inputType`
+  (removed) or the answer action's `inputSchema` enum.
+  `InteractionTypes.Clarification` is deprecated and now equals
+  `InteractionTypes.AskUser`: it still matches interactions the SDK hands out,
+  but not a raw wire `type` or a `"clarification"` string you stored.
+  `ClarificationPayload` is a deprecated alias of `AskUserPayload`, which
+  requires `answerType`.
+- `InteractionHandle.answer(value)` accepts the structured value its
+  `answerType` names (string, number, boolean, one option value, or an array of
+  option values) and throws `QoniValidationError` before sending a value that
+  does not fit.
+- `InteractionHandle.confirmSignedIn()` saves the login opened by `openLogin()`
+  on the same interaction (`POST /profiles/{profileId}/confirm`, scope
+  `webagent.site_login:confirm`), then tells the agent to recheck. Sign-in is
+  `openLogin()` → `confirmSignedIn()`:
+  - It saves once and rechecks once per login session, however many handles
+    or concurrent calls ask; the deprecated `OpenLoginResult.confirm()` shares
+    the same save.
+  - A user who is not signed in yet, or 409 `no_pending_login`, still gets a
+    recheck: the agent raises a new `site_login` when needed.
+  - When the backend keeps the session but could not save it
+    (`probeResult: "release_failed"`), it throws a retryable `QoniError` coded
+    `site_login.save_failed` and does not tell the agent to go on; calling it
+    again saves again. Any other save failure is thrown as well.
+  - When `openLogin()` calls overlap, the latest call that succeeds owns the
+    session, whichever response arrives last.
+  - Reopening that returns the same backend session shares its save; when a
+    newer backend session replaces it, `confirm()` on the old result throws
+    `QoniValidationError` instead of saving. If the login is reopened while a
+    `confirmSignedIn()` is still saving, that call throws a retryable
+    `QoniError` coded `site_login.session_replaced` without telling the agent
+    to go on; call it again to save the newer login.
+  - Handles from the same `RunHandle` or `MonitorHandle` share the login
+    session, so a handle from a later callback saves it too. A RunHandle from
+    another `attach()` or process does not.
+- `connectControl()` and `refreshControl()` resolve to a `ControlSession`
+  (`{ liveUrl, expiresAt?, status?, raw }`, the signed URL of the browser the
+  user now controls) instead of `void`. `await handle.connectControl()` is
+  unaffected; code that returns the call where `Promise<void>` is expected,
+  such as `const cb: () => Promise<void> = () => handle.connectControl()`, no
+  longer compiles (TS2322) — wrap it: `async () => { await handle.connectControl(); }`.
+- `run.events()`, `wait({ onInteraction })` and `monitor.events()` keep an
+  interaction's type and content when the backend settles it with an empty
+  shell (a resolve labelled `clarification` with an empty question, or a
+  `site_login` with one empty site): only `status`, `resolvedAt` and `actions`
+  change. A settled update with content of its own, such as an expired
+  take-over with its reason, replaces the card as before. Run and monitor
+  handles keep about 256 interactions, forgetting settled cards first, and
+  logins once they are saved or their interaction ended; a pending card or a
+  login still in progress is never dropped.
+
+### Added
+
+- `QoniScopes.USER_PROFILE_READ` (`user.profile:read`), `USER_PROFILE_WRITE`
+  (`user.profile:write`), `USER_PAYMENT_USE` (`user.payment:use`),
+  `AGENT_MAIL_READ` (`agent.mail:read`) and `AGENT_MAIL_SEND`
+  (`agent.mail:send`). They belong to no product bundle: request them
+  explicitly, and allow them in the AccessKey policy. The constants only name
+  the scopes; requesting them does not by itself enable Profile, payment or
+  mailbox access in a run.
+- Exported types `AskUserPayload`, `AskUserOption`, `AskUserAnswer`,
+  `AskUserAnswerType`, `InteractionBase`, `TypedInteraction` and
+  `ControlSession`.
+
+### Fixed
+
+- A scope written without its service prefix names every matching scope:
+  `profile:read` suggests both `gumem.profile:read` and `user.profile:read`.
+
+### Deprecated
+
+- `user` / `userId` on interactive delegation input: the authorization page
+  identifies the signed-in user, and the delegation service ignores them.
+- `DelegateTokenResponse.grantedScopes`: the delegation service does not return
+  it. Read `qoni.genauth.introspectDelegationToken({ token }).data.scope`.
+- `OpenLoginResult.confirm()`: `confirmSignedIn()` saves the login itself.
+
+## 0.8.0 - 2026-10-04
+
+### Added
+
+- `qoni.genauth.delegateAgent(input)` returns the grant directly (`grant.token`),
+  or an interactive authorization request, through the existing signed endpoint.
+- `agentKey` is an alias for `agent`. Existing root and `qoni.qoni` entries keep
+  their `QoniResponse` envelopes. Conflicting Agent labels are rejected;
+  the existing top-level `userId` precedence is unchanged.
+
+### Fixed
+
+- Expiry strings such as `"15m"` are converted to integer seconds; valid
+  durations are 60–86400 seconds, matching the GenAuth DTO.
+- Unsupported `deniedScopes` is rejected rather than forwarding an unenforced
+  deny policy. Legacy `mailbox.*`, `web.search`, and `web.extract` scopes are rejected without mapping to product scopes.
+
+### Changed
+
+- Expiry validation now happens locally before signing. Invalid formats and
+  values outside 60–86400 seconds throw `QoniValidationError`; numeric seconds
+  strings are sent as integers.
+
 ## 0.7.0 - 2026-10-02
 
 ### Changed
@@ -127,7 +250,7 @@ compatible fixes.
 - Optional abort signals on product run-detail and artifact-list wire reads;
   existing calls without a signal remain compatible.
 
-## Unreleased
+## Earlier changes
 
 ### Breaking
 
@@ -136,8 +259,8 @@ compatible fixes.
 
 ### Changed
 
-- The default Qoni host is now `https://dashboard.qoni.ai` (was
-  `https://anima.eazo.ai/dashboard`). Callers that never passed an explicit `host`
+- The default Qoni host is now `https://dashboard.qoni.ai`.
+  Callers that never passed an explicit `host`
   reach a different control plane after upgrading. Note that the new default has
   no `/dashboard` path segment — pass `host` explicitly for private or local
   deployments.

package/README.md

@@ -151,7 +151,7 @@ const run = await qoni.doAnything.run({
 
 const result = await run.wait({
   onScreenshot: (img, i) => fs.writeFileSync(`step-${i}.jpg`, img.bytes),
-  onInteraction: (i) => {                 // login / clarify / confirm / take-control
+  onInteraction: (i) => {                 // site_login / take_control / ask_user / confirmation
     if (i.can("confirm_signed_in")) return i.confirmSignedIn();
     if (i.can("confirm")) return i.confirm();
   },
@@ -251,7 +251,7 @@ Silent product calls receive `token: delegation.data.token`. If that token is an
 
 - **Silent** (`mode: "silent"`, the default) — acts for one end user, so a user
   is **required**: pass `user: { id: <genauthUserId> }` (preferred) or the
-  deprecated top-level `userId`. Omitting it throws `QoniValidationError`
+  top-level `userId`. Omitting it throws `QoniValidationError`
   locally before any request. Authorize with the `products` sugar and/or
   explicit `scopes`.
 - **Interactive** (`mode: "interactive"`) — pass `redirectUri`, `state`,
@@ -286,18 +286,27 @@ const grant = await qoni.delegateToken({
   scopes: ["gumem.memory:read", "webagent.do_anything:manage"],
 });
 
+// The callback will not carry grantId: save it with your business state, keyed by grantState.
+await savePendingGrant(grant.data.grantState, {
+  grantId: grant.data.grantId,
+  businessState: "business-csrf-state",
+});
 redirectUserTo(grant.data.authorizationUrl);
 ```
 
-The user visits `authorizationUrl` in Qoni Console/BFF. If they are not logged in, Console/BFF sends them through GenAuth login, confirms authorization, completes the grant internally, then redirects back to your `redirectUri` with a one-time `code`, your `state`, and `grant_state`/`grantId`. The browser never receives a delegation token.
+The user visits `authorizationUrl` in Qoni Console/BFF. If they are not logged in, Console/BFF sends them through GenAuth login, confirms authorization, completes the grant internally, then redirects back to your `redirectUri` with a one-time `code`, your `state`, and `grant_state`. The callback does **not** carry `grantId`, so look up the record you saved by `grant_state`. The browser never receives a delegation token.
 
 Your callback handler runs on the server and exchanges the callback fields with AK/SK:
 
 ```ts
+const pending = await loadPendingGrant(String(req.query.grant_state));
+// Your business state comes back unchanged; reject forged or mixed-up callbacks.
+if (!pending || req.query.state !== pending.businessState) throw new Error("Invalid delegation callback");
+
 const completed = await qoni.completeDelegateToken({
-  grantId: String(req.query.grantId ?? req.query.grant_id),
+  grantId: pending.grantId,
   code: String(req.query.code),
-  state: String(req.query.state),
+  state: String(req.query.grant_state), // grant_state, not your business state
 });
 
 await qoni.gumem.recall({
@@ -306,7 +315,35 @@ await qoni.gumem.recall({
 });
 ```
 
-`completeDelegateToken` is the recommended server callback helper. `delegateAgent` and `completeDelegateAgent` remain as deprecated compatibility names, but the current callback contract is `{ grantId, code, state }`; old `{ code, state }` completion is not supported.
+`completeDelegateToken` is the recommended server callback helper. Root `qoni.delegateAgent` and `qoni.completeDelegateAgent` remain as deprecated compatibility names, but the current callback contract is `{ grantId, code, state }`; old `{ code, state }` completion is not supported.
+
+## Original delegation style (0.8.0+)
+
+```ts
+const grant = await qoni.genauth.delegateAgent({
+  userId: process.env.QONI_USER_ID!, // The current user's GenAuth ID
+  agentKey: "email-assistant", // Agent audit label; alias for agent
+  scopes: [
+    "webagent.do_anything:read", // Read status, events, and artifacts
+    "webagent.do_anything:manage", // Start/cancel tasks and respond to interactions
+  ],
+  expiresIn: "15m", // Converted to 900 seconds before signing
+});
+console.log(grant.grantId, grant.auditId);
+```
+
+This entry returns the grant directly; root `delegateToken` still returns
+`QoniResponse`, with the token in `response.data.token`. Interactive mode returns
+the authorization request directly; use `completeDelegateToken()` in the server
+callback after consent. `agentKey` aliases `agent`; both labels must agree when
+supplied together. Top-level `userId` retains precedence over `user.id`.
+Expiry accepts integer seconds or whole-number
+`s/m/h/d` durations, between 60 and 86400 seconds. These additions are available
+in the published `@qoniai/qoni@0.8.0` release.
+
+Legacy `mailbox.*`, `web.search`, and `web.extract` scopes, and `deniedScopes`, are unsupported and rejected.
+They are never expanded into broader product permissions. Product scopes do not
+prohibit email sending or deletion; a prompt is not an enforced deny policy.
 
 ## Choosing Scopes
 
@@ -320,7 +357,9 @@ await qoni.delegateToken({
 });
 ```
 
-Scope strings are validated locally before any request: a scope missing its service prefix (e.g. `do_anything:manage` instead of `webagent.do_anything:manage`) throws `QoniValidationError` immediately with the correct form in the message.
+Scope strings are validated locally before any request: a scope missing its service prefix (e.g. `do_anything:manage` instead of `webagent.do_anything:manage`) throws `QoniValidationError` immediately with the correct form in the message — every candidate when the short form is ambiguous (`profile:read` → `gumem.profile:read` or `user.profile:read`).
+
+The site-login, user Profile, payment and Agent mailbox scopes (`QoniScopes.SITE_LOGIN_*`, `USER_PROFILE_READ`, `USER_PROFILE_WRITE`, `USER_PAYMENT_USE`, `AGENT_MAIL_READ`, `AGENT_MAIL_SEND`) belong to no product: request them explicitly in `scopes`, and allow them in the AccessKey policy. The user Profile, payment and Agent mailbox constants only name the scopes; requesting them does not by itself enable Profile, payment or mailbox access in a run.
 
 Use explicit scope strings when the requested permission boundary should be visible in code.
 
@@ -332,6 +371,10 @@ Use explicit scope strings when the requested permission boundary should be visi
 | Search public web | `webagent.web_search:read`, `webagent.web_search:manage` | Agent can search public pages and read search results. |
 | Run a bounded web task | `webagent.do_anything:read`, `webagent.do_anything:manage` | Agent can run a visible web task, read progress, stop it, and intervene when needed. |
 | Create a monitor | `webagent.track:read`, `webagent.track:manage` | Agent can configure monitors, read events, run checks, and stop monitors. |
+| Sign in to sites during a run | `webagent.site_login:request`, `webagent.site_login:confirm` | The user signs in through a live browser; the login is saved for later tasks. |
+| Use the user's Profile | `user.profile:read`, `user.profile:write` | Agent can read the user's saved details (name, phone, shipping address, card brand and last 4) and save new ones the user provides. |
+| Pay with the user's saved card | `user.payment:use` | After the user approves a payment, the saved card is filled in for them. |
+| Use the Agent's own mailbox | `agent.mail:read`, `agent.mail:send` | Agent can read mail sent to its own address (such as verification codes) and send mail from it. |
 
 Silent mode is usually appropriate for low-risk actions such as reading current-user memory, writing a confirmed summary, or searching public web pages.
 
@@ -606,81 +649,113 @@ the backend contract.
 
 ### Interactions (HITL)
 
-When a run needs the user — sign in to a site, answer a clarification, approve a
-plan, take over the browser, or wait — it emits an `interaction` event whose
-`event.data` is a typed `Interaction` (discriminated by `type`: `site_login` /
-`clarification` / `confirmation` / `take_control` / `wait`). Wrap it in a handle
-and call the action methods; each posts to the endpoint the backend declared in
-the interaction's `actions[]`, so you never hard-code a route:
+When a run needs the user, it pauses and emits an `interaction` event whose
+`event.data` is a typed `Interaction`. Interactions are typed by what the user
+has to do, never by business, so one handler covers every task:
 
-```ts
-for await (const event of run.events()) {
-  if (event.type === "interaction") {
-    const i = run.interactionHandle(event.data);   // event.data is the Interaction
-    if (i.type === "clarification" && i.can("answer")) await i.answer("the blue button");
-    else if (i.can("confirm")) await i.confirm();
-    else if (i.can("confirm_signed_in")) await i.confirmSignedIn();
-    else if (i.can("release_control")) await i.releaseControl();
-  }
-}
-```
-
-Methods: `answer(text)`, `skip()`, `confirm()`, `reject()`, `openLogin({ siteId?, profileId? })`,
-`confirmSignedIn()`, `connectControl()`, `refreshControl()`, `releaseControl()`,
-`retry()`, `switchProfile()`. `i.can(kind)` reports whether the interaction
-currently offers that action; calling a method the backend did NOT declare
-throws (so a "recovery" button only exists when it actually works).
+| `type` | The user… | Methods |
+| --- | --- | --- |
+| `site_login` | signs in to a site in the live browser | `openLogin()`, `confirmSignedIn()` |
+| `take_control` | operates the browser by hand (captcha, 2FA, …) | `connectControl()`, `refreshControl()`, `releaseControl()` |
+| `ask_user` | answers a question shaped by `answerType` / `options` | `answer()`, `skip()` |
+| `confirmation` | allows or rejects an action | `confirm()`, `reject()` |
+| `wait` | nothing — the system is waiting (rate limit, external event) | `retry()` |
 
-`openLogin()` starts an interactive login session for a `site_login`
-interaction of a run. Pass `siteId` (one of
-`i.interaction.payload.sites[].siteId`), or omit it when exactly one site is
-listed. Show the returned `liveUrl` to the user; after they sign in, persist the
-login with `login.confirm()`, then tell the agent with `confirmSignedIn()`:
+`Interaction` is a union distributed over `type`, so `switch (request.type)`
+narrows `request.payload` in each branch. Each method posts to the endpoint the
+backend declared in the interaction's `actions[]`, so you never hard-code a route:
 
 ```ts
-import { QoniError } from "@qoniai/qoni";
+import type { InteractionHandle } from "@qoniai/qoni";
 
-const login = await i.openLogin();          // { profileId, siteId, sessionId, liveUrl }
-showToUser(login.liveUrl);                  // the user signs in there
-await waitForUserToFinish();
-let result;
-try {
-  result = await login.confirm();           // ends the session; saves the login if found
-} catch (error) {
-  // 409: no pending login for this profile (session already ended, or profile gone).
-  if (!(error instanceof QoniError && error.code === "no_pending_login")) throw error;
-}
-if (!result || result.active || result.probeResult === "no_session") {
-  await i.confirmSignedIn();                // the agent rechecks; it asks again if still signed out
-} else {
-  // The user was not signed in, and confirm() closed that session's browser.
-  const retry = await i.openLogin({ siteId: login.siteId, profileId: login.profileId });
-  showToUser(retry.liveUrl);                // a new session for the same profile
+const handled = new Set<string>();
+
+async function handleInteraction(handle: InteractionHandle) {
+  const request = handle.interaction;
+  // Creation, status updates and replays all call back: act once per pending id.
+  if (request.status !== "pending" || handled.has(request.id)) return;
+  handled.add(request.id);
+
+  switch (request.type) {
+    case "site_login": {
+      const login = await handle.openLogin();   // { liveUrl, ... } of a live login browser
+      await showToUser(login.liveUrl);          // resolves when the user clicks "I'm signed in"
+      await handle.confirmSignedIn();           // saves the login, then the agent rechecks and continues
+      break;
+    }
+    case "take_control": {
+      // connectControl() resolves to the signed control URL, when the backend offers it
+      const control = handle.can("connect_control") ? await handle.connectControl() : undefined;
+      await showToUser(control?.liveUrl ?? request.payload.liveUrl);
+      await handle.releaseControl();            // hand the browser back
+      break;
+    }
+    case "ask_user":                            // payload: { question, answerType, options? }
+      await handle.answer(await askUser(request.payload));
+      break;
+    case "confirmation":                        // payload: { summary }
+      if (await approve(request.payload.summary)) await handle.confirm();
+      else await handle.reject();
+      break;
+  }
 }
-```
 
-`probeResult: "no_session"` means the backend no longer holds the login session —
-it may already have saved the login on its own once it detected the sign-in, or
-it restarted. Some browser providers instead reject `confirm()` with a
-`QoniError` coded `no_pending_login` (HTTP 409), which the backend also uses when
-the profile no longer exists for this user; the example handles it the same way,
-because the agent rechecks and asks again if the site is still signed out. Delegate
+const result = await run.wait({ onInteraction: handleInteraction });
+```
+
+Interactions arrive one at a time: the run waits until the current one is
+handled. The same interaction calls back again on every status change and on
+reconnect replays, always with the same `id` and `type` — key your UI cards by
+`request.id`. An update with content of its own replaces the card (a take-over
+that became `active` carries its new `liveUrl`); when the backend settles an
+interaction with an empty shell, the card keeps its original `payload`. A
+`take_control` that arrives already `active` was started by the user, for
+example from Console; show it if your UI offers control there. Methods: `answer(value)`, `skip()`, `confirm()`,
+`reject()`, `openLogin({ siteId?, profileId? })`, `confirmSignedIn()`,
+`connectControl()`, `refreshControl()`, `releaseControl()`, `retry()`,
+`switchProfile()`. `connectControl()` and `refreshControl()` resolve to
+`{ liveUrl, expiresAt?, status?, raw }`: the signed URL of the browser the user
+now controls. `handle.can(kind)` reports whether the interaction currently
+offers that action; calling a method the backend did NOT declare throws (so a
+"recovery" button only exists when it actually works).
+
+**`ask_user` answers are structured.** `answer()` takes the value matching
+`payload.answerType` — `text` → string, `number` → number, `boolean` → boolean,
+`single_choice` → one `options[].value`, `multiple_choice` → an array of option
+values — and throws `QoniValidationError` before sending anything that does not
+fit. The wire still calls this type `clarification`; the SDK presents it as
+`ask_user` (choices arrive as `{ value, label }` options).
+
+**Sign-in takes two calls.** `openLogin()` opens a live login browser for the
+`site_login` interaction (pass `siteId` from `payload.sites[].siteId`, or omit it
+when exactly one site is listed). Once the user is signed in, `confirmSignedIn()`
+saves the login so later tasks reuse it, then tells the agent to recheck the site
+and continue; if the user turns out not to be signed in, the agent raises a new
+`site_login`. It saves once and rechecks once per login session, however many
+times it is called. If the backend could not save the login yet, it throws a
+retryable `QoniError` coded `site_login.save_failed` without telling the agent to
+go on; call it again. The same holds for `site_login.session_replaced`, thrown
+when the login was reopened while it was being saved. Handles from the same `RunHandle` (or `MonitorHandle`)
+share the login session, so `confirmSignedIn()` also works on the handle of a
+later callback; a RunHandle from a new `attach()` does not. Delegate
 `QoniScopes.SITE_LOGIN_REQUEST` and `QoniScopes.SITE_LOGIN_CONFIRM`, and allow
-both in the AccessKey policy.
-
-The discriminant strings used above are also exported as constants so you can
-avoid bare literals: `InteractionTypes` (`site_login` / `clarification` /
-`confirmation` / `take_control` / `wait`), `InteractionStatuses`, and
-`ActionKinds` (the `i.can(...)` action names). Authorization scope strings have
-the same treatment — `QoniScopes` (every individual scope), `QoniProductScopes`
-(the per-product `read`+`manage` pairs the `products` sugar expands to), and
-`QoniScopeBundles` (curated bundles). Use them in place of hand-typed strings:
+both in the AccessKey policy. `openLogin()`'s result still offers `confirm()` for
+callers that save the login themselves; it is deprecated.
+
+The discriminant strings are also exported as constants so you can avoid bare
+literals: `InteractionTypes` (`SiteLogin` / `TakeControl` / `AskUser` /
+`Confirmation` / `Wait`; the deprecated `Clarification` now equals `AskUser`),
+`InteractionStatuses`, and `ActionKinds` (the `handle.can(...)` action names).
+Authorization scope strings have the same treatment — `QoniScopes` (every
+individual scope), `QoniProductScopes` (the per-product `read`+`manage` pairs the
+`products` sugar expands to), and `QoniScopeBundles` (curated bundles). Use them in
+place of hand-typed strings:
 
 ```ts
 import { InteractionTypes, ActionKinds, QoniScopes } from "@qoniai/qoni";
 
-if (i.type === InteractionTypes.Clarification && i.can(ActionKinds.answer)) {
-  await i.answer("the blue button");
+if (handle.type === InteractionTypes.AskUser && handle.can(ActionKinds.answer)) {
+  await handle.answer("the blue button");
 }
 ```
 
@@ -690,7 +765,7 @@ The 1:1 low-level methods live under `qoni.<product>.api.*` (e.g. `qoni.doAnythi
 
 `event.raw.event` is the **raw wire event type** — an internal transport name (`run.action.started`, `run.section_completed`, …) whose naming is historical and inconsistent, exposed as a plain string. This is an implementation detail, not the product API: developers match on the curated `event.type` above. The full wire-type catalog is intentionally NOT exported — reach for `event.raw.event` (a string) only when you need an exact wire match the curated layer folds into `progress` (e.g. telling a specific browser action apart).
 
-Browser Use scopes are reserved until their product runtime SDK methods are exported. Site Login scopes (`QoniScopes.SITE_LOGIN_REQUEST`, `QoniScopes.SITE_LOGIN_CONFIRM`) back `InteractionHandle.openLogin()` and `confirm()` on run interactions.
+Browser Use scopes are reserved until their product runtime SDK methods are exported. Site Login scopes (`QoniScopes.SITE_LOGIN_REQUEST`, `QoniScopes.SITE_LOGIN_CONFIRM`) back `InteractionHandle.openLogin()` and `confirmSignedIn()` on run interactions.
 
 ### Response Shape