openclaw-brokerkit 0.3.0 → 0.3.2

package/README.md

@@ -187,9 +187,12 @@ Because the packaged UI has an opaque origin under the required scripts-only
 sandbox, a delegated host must accept only the expected `Origin: null`,
 return `Access-Control-Allow-Origin: null`, allow `BrokerKit-Session` and
 `Content-Type` in preflight responses, allow only its fixed route methods,
-and set `Vary: Origin` plus `Cache-Control: no-store`. It must not return
-`Access-Control-Allow-Credentials: true`; delegated API requests deliberately
-omit cookies.
+set `Access-Control-Allow-Credentials: true`, and set `Vary: Origin` plus
+`Cache-Control: no-store`. Delegated API requests use `credentials: "include"`
+so a private hosting edge can receive its own access cookie. The host must not
+treat that cookie as BrokerKit authorization: every delegated route still
+requires and validates the short-lived `BrokerKit-Session`. Direct mode keeps
+using `credentials: "omit"`.
 
 ### Parent session bridge
 
@@ -206,3 +209,19 @@ frame and must bind each response to the supplied 128-bit nonce. `session` is
 the same `brokerkit.io/delegated-web/v1` object returned by
 `POST <basePath>/session`. The bridge is a BrokerKit interface; it contains
 no host-product namespace or host-specific payload.
+
+### Session rebootstrap
+
+A direct-renewal token can expire while a browser tab is suspended. If the
+host rejects renewal with `not_authorized`, a framed UI sends this
+credential-free message once:
+
+```text
+{ type: "brokerkit.delegated-web.rebootstrap", version: 1 }
+```
+
+The host must accept it only from the embedded BrokerKit frame and reload only
+that protected frame so its HTML response can inject a fresh session. Hosts
+must rate-limit reloads and must not return a token through this message. This
+keeps rebootstrap host-neutral while leaving session issuance at the trusted
+HTTP boundary.