feat(browser): self-heal sessions after camofox restarts (BR-3)

- Any session operation that hits 404/410 (or finds no open tab) reconciles
  tabs; if none survive it re-injects the account cookies (BR-2), opens a new
  tab under the same userId/sessionKey, returns to the recorded URL (site home
  otherwise), marks old tabs lost and retries the operation once. Failure
  returns 503 browser_reconnect_failed with the reason, with a 10s backoff.
- Restart detection: umt plugin GET /umt/instance (fallback /health fields);
  a changed instance id marks every open session needsReconnect.
- POST /browser/sessions/{id}/reconnect (idempotent); session view exposes
  needsReconnect and reconnect {status, trigger, at, reason, humanNotice}.
- Controller and lease are kept; reconnecting during takeover asks the human
  to double-check the reloaded page.
- Web: screenshot and desktop modes show "reconnecting", auto-reconnect once,
  pause polling, offer a reconnect button with the reason on failure; desktop
  mode rebuilds the Selkies connection after a reconnect.
- Mock camofox restart(), tests, smoke step and runbook section 10.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

packages/adapters/src/browser/provider.ts

@@ -78,6 +78,31 @@ export interface BrowserProvider {
    * 上游没有接口时报 BrowserError("not_implemented")。
    */
   getCookies?(profileKey: string, urls: string[]): Promise<BrowserCookie[]>;
+
+  // ── BR-3 浏览器服务重启后自愈 ──
+  /**
+   * 浏览器服务实例标识:进程重启后会变(camofox 走 umt 插件 `GET /umt/instance`,否则取 `/health` 里的
+   * instanceId / bootId / startedAt)。取不到(旧镜像)时返回 null,调用方只靠 404/410 被动发现。
+   */
+  instanceId?(): Promise<string | null>;
+  /**
+   * 重建会话的上游上下文:(可选)先把 Cookie 写进该 profile,再在同一会话(同一 userId / sessionKey)开新标签页并导航到 url;
+   * 原有打开中的标签页一律标 lost。不检查控制者(接管中的会话也能重连,控制权不变)。
+   */
+  reopenSession?(sessionId: string, req: ReopenSessionRequest): Promise<ReopenSessionResult>;
+}
+
+export interface ReopenSessionRequest {
+  url: string;
+  budget: NavigationBudget;
+  cookies?: BrowserCookie[];
+}
+
+export interface ReopenSessionResult {
+  tab: BrowserTab;
+  /** 被标 lost 的旧标签页(上游 tabId) */
+  lost: string[];
+  cookies?: { status: "injected" | "unsupported" | "failed"; count: number };
 }
 
 export interface PageMetrics {