[KickNext]

Summary

The package could not express the current draft's consequential/debugging annotations or observe ModelContext activation and cancellation. Release 0.3.1 adds both annotations and typed lifecycle events, with native listeners attached only while streams have subscribers. Registration cleanup remains separate from invocation cancellation.

Update the example and deployment/security guidance for the 29 September 2026 draft, including tool replacement, document-wide names, UI state, sensitive inputs, and HTTP headers.

Compatibility

• Additive public API; existing support enum, SDK constraints, and dependencies remain compatible.
• Preserve explicit false annotations and omit null fields.
• Older browsers can register tools without lifecycle events; unsupported event streams are empty.
• Native conformance checks require a browser with the new events and fail if unavailable.

Verification

• Formatting, package/example analysis, and diff checks pass.
• VM/widget tests: 19 passed; controlled browser binding tests: 15 passed.
• Native Chrome for Testing 157.0.8079.0: API availability and iframe ownership/cancellation tests pass. Unregister does not cancel an executing handler; caller abort rejects before the owner's cancellation event.
• Real HTTP fixtures: registration succeeds normally and rejects with NotAllowedError under Permissions-Policy: tools=(), including same-origin descendants. Verified in Canary and the Codex in-app browser.
• CI pins the verified Chrome for Testing build and requires native lifecycle and HTTP policy checks.
• JavaScript and WebAssembly release builds, example hot reload, and publish dry-run pass; zero archive warnings.
• Linux CI validates pana scoring; local Windows pana cannot run its sandbox with drive-letter paths.

The in-app browser/installed Chrome 154 support native registration but lack the new lifecycle events. Those events were verified in Canary with experimental flags and isolated profiles.

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.
To continue using code reviews, add credits to your account and enable them for code reviews in your settings.