Keep method-independent site limits and redirect diagnostic history apart
from the current HTTP method. Compute SameSite outcomes and both diagnostic
tracks when read, with one canonical method input. Method overrides no
longer reverse-repair cached SameSite results or duplicated metadata.
Preserve explicit CrossSite restrictions, scope rebinding, partition keys,
and historical downgrade diagnostics. Keep cache key material unchanged
while moving consumers to the computed context API.
Cover method round trips without history mutation and retain distinct
diagnostics when different histories end with the same CrossSite result.
Run current-request tests through network_cookie_context and redirected tests
through follow_redirect, preserving Cookie header and diagnostic assertions.
Remove the test-only effective_cookie_context implementation.
Add an initiator-only update that preserves browser scope and partitioning.
Share per-track metadata operations, advance contexts without cloning URLs,
and use request-type accessors instead of constructing throwaway contexts.
Require the actual next-hop method in advance_cookie_request_context and
update method safety and both metadata tracks before preserving site limits.
Remove the repeated synchronization from the five HTTP redirect branches;
pass the actual method through HTTPS upgrades and caller-followed redirects.
Cover GET-to-POST and POST-to-GET overrides starting from computed Lax/Unsafe
contexts, including explicit CrossSite limits. Check actual Cookie headers
in every transport, distinguishing fresh and aged default cookies from Lax.
Record and preserve cookie creation time across updates, browser imports and cache persistence. Apply modern Lax-by-default request inclusion, including the age-bounded unsafe top-level navigation allowance; keep explicit Lax and Strict semantics, raw cookie visibility and diagnostic exclusion reasons. Cover age boundaries, updates, imports, persistence and navigation contexts.
Keep the latest Put or Delete for each key rather than eliding transient-row
deletes. Remove existed from Cookie and localStorage deltas and Cookie mutation
observers, then remove the shared uncertain-commit correction hook. Preserve
Cookie Touch composition and atomic, idempotent retry behavior.
Replace optimization-specific assertions with actual SQL replay tests covering
a published put followed by deletion and clear followed by a newer put.
Match CDP deletion filters literally, validate required fields, and resolve cookies through the owning session. Prefer a nonempty domain over the URL while preserving shared storage and WebDriver deletion semantics.
Carry raw response header values through fetch, caches, redirects,
renderer delivery, workers, and protocol records. Convert explicitly
at WebIDL and protocol text boundaries while preserving opaque bytes.
Keep legacy CacheStorage and service worker metadata readable, and
advance the HTTP cache format for raw header values.
Validation:
- cargo fmt --all
- cargo clippy --workspace --all-targets --all-features -- -D warnings
- cargo nextest run --no-fail-fast