@aarwitz/tapp 0.15.0 → 0.15.1

package/Harness/OCQAHarness/AppDelegate.swift

@@ -8,7 +8,7 @@ class AppDelegate: UIResponder, UIApplicationDelegate {
         let vc = UIViewController()
         vc.view.backgroundColor = .black
         let label = UILabel()
-        label.text = "AutoTap Harness"
+        label.text = "Tapp Harness"
         label.textColor = .white
         label.textAlignment = .center
         label.frame = vc.view.bounds

package/Harness/OCQAHarness.xcodeproj/project.pbxproj

@@ -166,7 +166,7 @@
         CODE_SIGN_STYLE = Automatic;
         DEVELOPMENT_TEAM = "";
         INFOPLIST_FILE = OCQAHarness/Info.plist;
-        PRODUCT_BUNDLE_IDENTIFIER = ai.autotap.harness;
+        PRODUCT_BUNDLE_IDENTIFIER = io.github.aarwitz.tapp.harness;
         PRODUCT_NAME = "$(TARGET_NAME)";
         SWIFT_VERSION = 5.0;
         TARGETED_DEVICE_FAMILY = "1,2";
@@ -186,7 +186,7 @@
         CODE_SIGN_STYLE = Automatic;
         DEVELOPMENT_TEAM = "";
         INFOPLIST_FILE = OCQAHarnessUITests/Info.plist;
-        PRODUCT_BUNDLE_IDENTIFIER = ai.autotap.harness.uitests;
+        PRODUCT_BUNDLE_IDENTIFIER = io.github.aarwitz.tapp.harness.uitests;
         PRODUCT_NAME = "$(TARGET_NAME)";
         SWIFT_VERSION = 5.0;
         TARGETED_DEVICE_FAMILY = "1,2";

package/Harness/OCQAHarnessUITests/ExplorerTests.swift

@@ -670,7 +670,7 @@ class ExplorerTests: XCTestCase {
 
     /// Replays an explicit, config-driven login flow (OCQA_LOGIN_STEPS) before exploration — for the
     /// custom login UIs the heuristic preamble can't parse, which are the #1 reason a real app stays
-    /// invisible to AutoTap. Steps are a JSON array of {action: type|tap|wait, target: <id-or-label>,
+    /// invisible to Tapp. Steps are a JSON array of {action: type|tap|wait, target: <id-or-label>,
     /// value?: <text; "$TEST_EMAIL"/"$TEST_PASSWORD" substituted from stored creds>, timeoutMs?}.
     /// Returns true if any step ran (so the caller skips the heuristic preamble). Tolerant: a failed
     /// step is logged but doesn't abort — exploration still proceeds, and the coverage eval reveals
@@ -1320,7 +1320,7 @@ class ExplorerTests: XCTestCase {
                     // so it surfaces here at the next tree read rather than at the early crash check.
                     // Report it against the action that led here instead of breaking silently. (Real:
                     // Wikipedia's WMFCaptchaViewController.refreshImage assertionFailure crashes the
-                    // app during login — a genuine production crash AutoTap must surface.)
+                    // app during login — a genuine production crash Tapp must surface.)
                     if app.state != .runningForeground {
                         let where_ = pendingTransitionFrom?.title ?? "the previous screen"
                         let crashKey = "crash-async:\(where_)"

package/Harness/generate-harness-xcodeproj.rb

@@ -182,7 +182,7 @@ pbxproj = <<~PBX
         CODE_SIGN_STYLE = Automatic;
         DEVELOPMENT_TEAM = "";
         INFOPLIST_FILE = OCQAHarness/Info.plist;
-        PRODUCT_BUNDLE_IDENTIFIER = ai.autotap.harness;
+        PRODUCT_BUNDLE_IDENTIFIER = io.github.aarwitz.tapp.harness;
         PRODUCT_NAME = "$(TARGET_NAME)";
         SWIFT_VERSION = 5.0;
         TARGETED_DEVICE_FAMILY = "1,2";
@@ -202,7 +202,7 @@ pbxproj = <<~PBX
         CODE_SIGN_STYLE = Automatic;
         DEVELOPMENT_TEAM = "";
         INFOPLIST_FILE = OCQAHarnessUITests/Info.plist;
-        PRODUCT_BUNDLE_IDENTIFIER = ai.autotap.harness.uitests;
+        PRODUCT_BUNDLE_IDENTIFIER = io.github.aarwitz.tapp.harness.uitests;
         PRODUCT_NAME = "$(TARGET_NAME)";
         SWIFT_VERSION = 5.0;
         TARGETED_DEVICE_FAMILY = "1,2";
@@ -249,6 +249,6 @@ SCHEME
 File.write("#{scheme_dir}/OCQAHarnessUITests.xcscheme", scheme)
 
 puts "✅ Generated OCQAHarness.xcodeproj"
-puts "   Host app: ai.autotap.harness"
+puts "   Host app: io.github.aarwitz.tapp.harness"
 puts "   Test target: OCQAHarnessUITests"
 puts "   Platform: iOS 16.0+"

package/README.md

@@ -65,8 +65,7 @@ npx -y @aarwitz/tapp qa    # finds your Xcode project → builds → installs on
 ```
 
 The product, executable, and package leaf are all Tapp: npm distributes it as
-`@aarwitz/tapp`, while the installed command remains `tapp`. Existing `npx runtapp ...`
-and `npx tapp-mcp ...` configurations remain supported as deprecated compatibility paths.
+`@aarwitz/tapp`, while the installed command remains `tapp`.
 
 To bootstrap maintained release infrastructure, preview the repository model and grounded plan
 before Tapp writes anything:
@@ -292,7 +291,7 @@ npx -y @aarwitz/tapp ci --app path/to/MyApp.app \
 ```
 
 See the self-test at
-[.github/workflows/autotap-gate-example.yml](.github/workflows/autotap-gate-example.yml) for
+[.github/workflows/tapp-gate-example.yml](.github/workflows/tapp-gate-example.yml) for
 Flows, auth inputs, and other controls. GitHub-hosted iOS runs require a macOS runner; the first
 run also builds the XCUITest harness, so budget roughly 5–10 minutes depending on app size.
 
@@ -317,8 +316,8 @@ environment. Add
 [`docs/scenarios.md`](docs/scenarios.md). Automatic
 baselines are isolated by platform and target, so two same-platform apps are never compared.
 
-**The hosted service at `app.runtapp.com` is under development and is not currently offered for
-customer repositories.** Do not upload private code or credentials to an old preview. The retained
+**The hosted service is under development and is not currently offered for customer repositories.**
+Do not upload private code or credentials to an old preview. The retained
 cloud prototype is not the production SaaS boundary. Use the local Release Studio and the portable
 GitHub Action in infrastructure you control until the new account, tenant authorization, private
 evidence, and isolated-worker boundary passes security review.
@@ -352,8 +351,8 @@ verdict calculation run entirely locally — no telemetry, nothing phones home.
 features are explicit: finding enrichment requires `TAPP_ENABLE_REMOTE_AI=1` (an ambient
 API key alone never changes data handling), and AI flow generation / `assert_ai` only run
 when you invoke them; these send selected metadata (screen names, finding titles) to your
-configured model provider. Env vars: `TAPP_*` preferred; `AUTOTAP_*` accepted as deprecated
-aliases.
+configured model provider. Runtime configuration uses `TAPP_*` environment variables; deprecated
+aliases remain readable for compatibility.
 
 Committed Flow replay, recording a driven session, autonomous exploration, exact assertions,
 regression comparison, and CI gating require **no API key and no coding agent at runtime**. AI is

package/bin/tapp.js

@@ -16,7 +16,6 @@
 //
 // All writable output (captures, harness build cache) goes to ~/.tapp (override
 // with TAPP_HOME). The package directory itself is never written to.
-// (Internally exported as AUTOTAP_HOME — the env name the bundled scripts read.)
 
 import { spawnSync, spawn } from "node:child_process";
 import fs from "node:fs";
@@ -29,10 +28,11 @@ const packageRoot = path.resolve(__dirname, "..");
 const pkg = JSON.parse(fs.readFileSync(path.join(packageRoot, "package.json"), "utf8"));
 
 // Redirect all writable output away from the (possibly read-only) package dir.
-if (!process.env.AUTOTAP_HOME) {
-  process.env.AUTOTAP_HOME = process.env.TAPP_HOME || path.join(os.homedir(), ".tapp");
-}
-fs.mkdirSync(process.env.AUTOTAP_HOME, { recursive: true });
+// The old environment alias remains populated only for older helper integrations.
+const tappHome = (process.env.TAPP_HOME || process.env.AUTOTAP_HOME || path.join(os.homedir(), ".tapp")).trim();
+process.env.TAPP_HOME = tappHome;
+if (!process.env.AUTOTAP_HOME) process.env.AUTOTAP_HOME = tappHome;
+fs.mkdirSync(tappHome, { recursive: true });
 
 const [, , command = "help", ...rest] = process.argv;
 
@@ -88,7 +88,7 @@ function bootBestSimulator(preferredName = "iPhone 16 Pro") {
 }
 
 function harnessXctestrun() {
-  const dir = path.join(process.env.AUTOTAP_HOME, "harness-derived", "Build", "Products");
+  const dir = path.join(tappHome, "harness-derived", "Build", "Products");
   try {
     const found = fs.readdirSync(dir).find((f) => f.endsWith(".xctestrun"));
     return found ? path.join(dir, found) : null;
@@ -171,7 +171,7 @@ function androidTarget(flags, target = "") {
 }
 
 function saveShot(img, outFlag, name) {
-  const out = outFlag || path.join(process.env.AUTOTAP_HOME, "shots", name);
+  const out = outFlag || path.join(tappHome, "shots", name);
   fs.mkdirSync(path.dirname(out), { recursive: true });
   fs.writeFileSync(out, Buffer.from(img.data, "base64"));
   return out;
@@ -472,7 +472,7 @@ switch (command) {
       await driver.forceStop();
       console.log(`🚀 Launched \`${target.appId}\` (Android)\n`);
       console.log(engine.formatScreen(snap.screenTitle, snap.elements));
-      const out = typeof flags.out === "string" ? flags.out : path.join(process.env.AUTOTAP_HOME, "shots", `${target.appId}-${Date.now()}.png`);
+      const out = typeof flags.out === "string" ? flags.out : path.join(tappHome, "shots", `${target.appId}-${Date.now()}.png`);
       fs.mkdirSync(path.dirname(out), { recursive: true });
       fs.writeFileSync(out, data);
       console.log(`\n📸 Screenshot: ${out}`);
@@ -663,7 +663,7 @@ switch (command) {
       url: typeof flags.url === "string" ? flags.url : task.url || "",
       reset: task.reset || "launch", vars: compiled.vars, steps: compiled.steps, taskPlan: compiled.plan,
     };
-    const out = path.resolve(typeof flags.out === "string" ? flags.out : path.join(process.env.AUTOTAP_HOME, "tasks", `${task.name}-${process.pid}-${Date.now()}.json`));
+    const out = path.resolve(typeof flags.out === "string" ? flags.out : path.join(tappHome, "tasks", `${task.name}-${process.pid}-${Date.now()}.json`));
     fs.mkdirSync(path.dirname(out), { recursive: true });
     fs.writeFileSync(out, JSON.stringify(flow, null, 2) + "\n");
     if (verb === "compile") {
@@ -712,8 +712,8 @@ switch (command) {
       break;
     }
     const token = `${process.pid}-${Date.now()}`;
-    const flowLog = path.join(process.env.AUTOTAP_HOME, "flows", `${token}.log`);
-    const evidenceDir = path.join(process.env.AUTOTAP_HOME, "captures", `flow-${platform}-${token}`);
+    const flowLog = path.join(tappHome, "flows", `${token}.log`);
+    const evidenceDir = path.join(tappHome, "captures", `flow-${platform}-${token}`);
     fs.mkdirSync(path.dirname(flowLog), { recursive: true });
     const env = { ...process.env, FLOW_LOG: flowLog, TAPP_FLOW_EVIDENCE_DIR: evidenceDir };
     if (typeof flags.email === "string") env.OCQA_TEST_EMAIL = flags.email;
@@ -779,7 +779,7 @@ switch (command) {
     let compiled;
     try { compiled = compileReleaseContract(contract, { platform, sourcePath: contractPath }); }
     catch (error) { console.error(`❌ Could not compile Release Contract: ${error.message}`); process.exit(2); }
-    const out = path.resolve(typeof flags.out === "string" ? flags.out : path.join(process.env.AUTOTAP_HOME, "contracts", `${contract.name}-${process.pid}-${Date.now()}.json`));
+    const out = path.resolve(typeof flags.out === "string" ? flags.out : path.join(tappHome, "contracts", `${contract.name}-${process.pid}-${Date.now()}.json`));
     fs.mkdirSync(path.dirname(out), { recursive: true });
     fs.writeFileSync(out, JSON.stringify(compiled, null, 2) + "\n");
     if (verb === "compile") {
@@ -893,8 +893,8 @@ switch (command) {
       break;
     }
     const token = `${process.pid}-${Date.now()}`;
-    const flowLog = path.join(process.env.AUTOTAP_HOME, "scenarios", `${token}.log`);
-    const evidenceDir = path.join(process.env.AUTOTAP_HOME, "captures", `scenario-web-${token}`);
+    const flowLog = path.join(tappHome, "scenarios", `${token}.log`);
+    const evidenceDir = path.join(tappHome, "captures", `scenario-web-${token}`);
     const env = { ...process.env, FLOW_LOG: flowLog, TAPP_FLOW_EVIDENCE_DIR: evidenceDir };
     const url = typeof flags.url === "string" ? flags.url : scenario.url || scenario.app || "";
     const result = spawnSync(process.execPath, [path.join(packageRoot, "scripts", "run-web-scenario.js"), absolute, url], { stdio: "inherit", env });
@@ -1007,7 +1007,7 @@ switch (command) {
       console.log("  ⬜ Web — install Playwright in the app workspace: npm install -D playwright && npx playwright install chromium");
     }
 
-    console.log(`\n  Home: ${process.env.AUTOTAP_HOME}`);
+    console.log(`\n  Home: ${tappHome}`);
     console.log(healthy ? "\nReady. Add to your agent:  claude mcp add tapp -- npx -y @aarwitz/tapp mcp" : "\nFix the ❌ items above, then re-run: tapp doctor");
     process.exit(healthy ? 0 : 1);
   }
@@ -1284,7 +1284,7 @@ switch (command) {
 
   case "report": {
     // Regenerate + open the HTML evidence page for a capture (default: the latest).
-    const capturesDir = path.join(process.env.AUTOTAP_HOME, "captures");
+    const capturesDir = path.join(tappHome, "captures");
     const repoCaptures = path.join(packageRoot, "captures");
     const roots = [capturesDir, repoCaptures].filter((d) => fs.existsSync(d));
     const runs = roots

package/docs/BROWSER-PRODUCT.md

@@ -62,7 +62,7 @@ intent.
 
 ## Hosted relationship
 
-`app.runtapp.com` will present the same product journey through a different adapter: application
+The future hosted application will present the same product journey through a different adapter: application
 accounts/organizations, GitHub App repository authorization, private storage, a durable queue, and
 isolated managed workers. It cannot reuse the loopback session, local `gh` authority, filesystem
 boundary, or in-memory ownership assumptions.

package/docs/application-model.md

@@ -184,12 +184,7 @@ plan while preserving fields from newer engine versions; committed contract inte
 through these proposal controls. Flow Map merges the repository `.autotap/ui-map.json` with current
 run evidence instead of building a separate desktop-only graph.
 
-Schema compatibility can be rehearsed headlessly after building the desktop app:
-
-```bash
-AutoTap.app/Contents/MacOS/AutoTap --verify-artifacts /path/to/repository \
-  --out /tmp/tapp-desktop-artifacts.json
-```
+Schema compatibility is exercised by the repository's protocol tests and retained desktop reader.
 
 `plan generate` handles only explicitly approved proposals. Grounded cross-actor proposals preserve
 actor-attributed Task calls, captured output variables, bounded eventual assertions, and the

package/mcp-server/src/browser-product.js

@@ -109,7 +109,7 @@ function assetPath(pathname) {
 }
 
 function captureRoot() {
-  return path.join(process.env.AUTOTAP_HOME || process.env.TAPP_HOME || path.join(os.homedir(), ".tapp"), "captures");
+  return path.join(process.env.TAPP_HOME || process.env.AUTOTAP_HOME || path.join(os.homedir(), ".tapp"), "captures");
 }
 
 function capturePath(captureId, relative = "report.html") {

package/mcp-server/src/enrich.js

@@ -40,7 +40,7 @@ export async function enrichFindings(findings, { backend, callModel, screens = [
         `Title: ${f.title}`;
       try {
         const res = await Promise.race([
-          callModel(backend, { system, userText, model: process.env.AUTOTAP_FINDING_MODEL || "claude-haiku-4-5-20251001", maxTokens: 300 }),
+          callModel(backend, { system, userText, model: process.env.TAPP_FINDING_MODEL || process.env.AUTOTAP_FINDING_MODEL || "claude-haiku-4-5-20251001", maxTokens: 300 }),
           new Promise((r) => setTimeout(() => r({ error: "timeout" }), TIMEOUT_MS)),
         ]);
         const parsed = res && !res.error ? parseEnrichment(res.text) : null;

package/mcp-server/src/index.js

@@ -18,10 +18,10 @@ const __filename = fileURLToPath(import.meta.url);
 const __dirname = path.dirname(__filename);
 const repoRoot = path.resolve(__dirname, "../..");
 const scriptsDir = path.join(repoRoot, "scripts");
-// AUTOTAP_HOME (set by the `tapp` CLI when running as an installed npm package) redirects
-// all writable output to a user dir; unset (repo dev flow) captures stay in the repo.
-const autotapHome = (process.env.AUTOTAP_HOME || "").trim();
-const capturesDir = autotapHome ? path.join(autotapHome, "captures") : path.join(repoRoot, "captures");
+// TAPP_HOME (set by the `tapp` CLI when installed) redirects writable output to a user directory.
+// The old alias remains a read-only fallback; unset repository development stays local.
+const tappHome = (process.env.TAPP_HOME || process.env.AUTOTAP_HOME || "").trim();
+const capturesDir = tappHome ? path.join(tappHome, "captures") : path.join(repoRoot, "captures");
 const MAX_OUTPUT_CHARS = 60_000;
 const requiredAuthToken = (process.env.TAPP_MCP_TOKEN || process.env.AUTOTAP_MCP_TOKEN || "").trim();
 
@@ -83,7 +83,7 @@ function ensureAuthorized(args = {}) {
   const provided = typeof args.authToken === "string" ? args.authToken.trim() : "";
   if (provided !== requiredAuthToken) {
     return errorResult("Unauthorized", {
-      reason: "Provide valid authToken when AUTOTAP_MCP_TOKEN is set",
+      reason: "Provide valid authToken when TAPP_MCP_TOKEN is set",
     });
   }
 
@@ -339,7 +339,7 @@ export async function buildAppForSim({ dir, container, scheme, configuration = "
       };
     }
   }
-  const derived = path.join(autotapHome || os.tmpdir(), "app-builds", schemeName.replace(/[^a-zA-Z0-9]/g, "_"));
+  const derived = path.join(tappHome || os.tmpdir(), "app-builds", schemeName.replace(/[^a-zA-Z0-9]/g, "_"));
   const build = await runCommand(
     "xcodebuild",
     [
@@ -1065,7 +1065,7 @@ export async function captureScreenshotImage(maxWidth) {
 // change data-handling behavior. A subscription token is an explicit tapp choice, and
 // explicitly-invoked AI tools (tapp_flow_generate, assert_ai) carry their own consent.
 export function remoteAiOptedIn(env = process.env) {
-  if ((env.AUTOTAP_SUBSCRIPTION_TOKEN || env.TAPP_SUBSCRIPTION_TOKEN || "").trim()) return true;
+  if ((env.TAPP_SUBSCRIPTION_TOKEN || env.AUTOTAP_SUBSCRIPTION_TOKEN || "").trim()) return true;
   return ["1", "true", "yes"].includes(String(env.TAPP_ENABLE_REMOTE_AI || "").trim().toLowerCase());
 }
 
@@ -1077,9 +1077,9 @@ export function isInsideDir(root, p) {
 }
 
 function resolveModelBackend() {
-  const token = (process.env.AUTOTAP_SUBSCRIPTION_TOKEN || "").trim();
+  const token = (process.env.TAPP_SUBSCRIPTION_TOKEN || process.env.AUTOTAP_SUBSCRIPTION_TOKEN || "").trim();
   if (token) {
-    const base = (process.env.AUTOTAP_PROXY_URL || "http://localhost:8787").replace(/\/$/, "");
+    const base = (process.env.TAPP_PROXY_URL || process.env.AUTOTAP_PROXY_URL || "http://localhost:8787").replace(/\/$/, "");
     const url = base.endsWith("/v1/messages") ? base : base + "/v1/messages";
     return { url, headers: { authorization: `Bearer ${token}`, "content-type": "application/json" } };
   }
@@ -1091,7 +1091,7 @@ function resolveModelBackend() {
 }
 
 async function callModel(backend, { system, userText, model, maxTokens = 1500 }) {
-  const body = JSON.stringify({ model: model || process.env.AUTOTAP_FLOW_MODEL || "claude-sonnet-4-6", max_tokens: maxTokens, system, messages: [{ role: "user", content: userText }] });
+  const body = JSON.stringify({ model: model || process.env.TAPP_FLOW_MODEL || process.env.AUTOTAP_FLOW_MODEL || "claude-sonnet-4-6", max_tokens: maxTokens, system, messages: [{ role: "user", content: userText }] });
   const res = await fetch(backend.url, { method: "POST", headers: backend.headers, body });
   if (!res.ok) return { error: `model HTTP ${res.status}: ${(await res.text()).slice(0, 300)}` };
   const data = await res.json();
@@ -1832,7 +1832,7 @@ export async function startManagedWebTarget({ root, requestedTarget = "", timeou
     command = process.execPath;
     startArgs = [path.join(__dirname, "static-server.js"), startDir, String(port)];
   }
-  const logDir = path.join(autotapHome || os.tmpdir(), "init-runtime");
+  const logDir = path.join(tappHome || os.tmpdir(), "init-runtime");
   fs.mkdirSync(logDir, { recursive: true });
   const logPath = path.join(logDir, `web-${process.pid}-${Date.now()}.log`);
   const child = spawn(command, startArgs, {
@@ -1938,7 +1938,7 @@ server.setRequestHandler(ListToolsRequestSchema, async () => ({
         properties: {
           authToken: {
             type: "string",
-            description: "Required when AUTOTAP_MCP_TOKEN is set",
+            description: "Required when TAPP_MCP_TOKEN is set",
           },
           projectDir: { type: "string", description: "Repo/dir to search for the .xcworkspace/.xcodeproj (default: cwd)" },
           scheme: { type: "string", description: "Scheme to build (default: auto-detected)" },
@@ -1956,7 +1956,7 @@ server.setRequestHandler(ListToolsRequestSchema, async () => ({
         properties: {
           authToken: {
             type: "string",
-            description: "Required when AUTOTAP_MCP_TOKEN is set",
+            description: "Required when TAPP_MCP_TOKEN is set",
           },
           mode: {
             type: "string",
@@ -2075,7 +2075,7 @@ server.setRequestHandler(ListToolsRequestSchema, async () => ({
       inputSchema: {
         type: "object",
         properties: {
-          authToken: { type: "string", description: "Required when AUTOTAP_MCP_TOKEN is set" },
+          authToken: { type: "string", description: "Required when TAPP_MCP_TOKEN is set" },
           appBundleId: { type: "string", description: "iOS: bundle id of the installed app to test, e.g. com.acme.app. Provide exactly one of appBundleId | url." },
           androidAppId: { type: "string", description: "Android: application id installed on a connected emulator/device, e.g. com.acme.app." },
           apkPath: { type: "string", description: "Android: optional APK to install before testing." },
@@ -2137,7 +2137,7 @@ server.setRequestHandler(ListToolsRequestSchema, async () => ({
       inputSchema: {
         type: "object",
         properties: {
-          authToken: { type: "string", description: "Required when AUTOTAP_MCP_TOKEN is set" },
+          authToken: { type: "string", description: "Required when TAPP_MCP_TOKEN is set" },
           operation: { type: "string", enum: ["inspect", "write", "refresh", "explore"], default: "inspect" },
           projectDir: { type: "string", description: "Repo-relative project root; defaults to the MCP workspace root" },
           platform: { type: "string", enum: ["ios", "android", "web"], description: "Optional target filter" },
@@ -2164,7 +2164,7 @@ server.setRequestHandler(ListToolsRequestSchema, async () => ({
       inputSchema: {
         type: "object",
         properties: {
-          authToken: { type: "string", description: "Required when AUTOTAP_MCP_TOKEN is set" },
+          authToken: { type: "string", description: "Required when TAPP_MCP_TOKEN is set" },
           operation: { type: "string", enum: ["read", "set"], default: "read" },
           projectDir: { type: "string", description: "Repo-relative project root; defaults to the MCP workspace root" },
           name: { type: "string", description: "Set: stable actor name" },
@@ -2184,7 +2184,7 @@ server.setRequestHandler(ListToolsRequestSchema, async () => ({
       inputSchema: {
         type: "object",
         properties: {
-          authToken: { type: "string", description: "Required when AUTOTAP_MCP_TOKEN is set" },
+          authToken: { type: "string", description: "Required when TAPP_MCP_TOKEN is set" },
           operation: { type: "string", enum: ["read", "review", "generate", "validate", "promote"], default: "read" },
           planPath: { type: "string", description: "Repo-relative plan path; default .autotap/release-plan.json" },
           projectDir: { type: "string", description: "Generate: repo-relative project root containing the scoped .autotap Task directories" },
@@ -2211,7 +2211,7 @@ server.setRequestHandler(ListToolsRequestSchema, async () => ({
       inputSchema: {
         type: "object",
         properties: {
-          authToken: { type: "string", description: "Required when AUTOTAP_MCP_TOKEN is set" },
+          authToken: { type: "string", description: "Required when TAPP_MCP_TOKEN is set" },
           operation: { type: "string", enum: ["inspect", "install", "baseline"], default: "inspect" },
           projectDir: { type: "string", description: "Repo-relative project root; defaults to the MCP workspace root" },
           modelPath: { type: "string", description: "Repo-relative application model path; defaults to <projectDir>/.autotap/application-model.json" },
@@ -2237,7 +2237,7 @@ server.setRequestHandler(ListToolsRequestSchema, async () => ({
       inputSchema: {
         type: "object",
         properties: {
-          authToken: { type: "string", description: "Required when AUTOTAP_MCP_TOKEN is set" },
+          authToken: { type: "string", description: "Required when TAPP_MCP_TOKEN is set" },
           operation: { type: "string", enum: ["read", "build", "diff"], default: "read" },
           captureId: { type: "string", description: "Read/build from this Tapp capture's ocqa-markers.txt/ui-map.json" },
           mapPath: { type: "string", description: "Repo-relative UI Map path for read, or build output (default .autotap/ui-map.json)" },
@@ -2261,7 +2261,7 @@ server.setRequestHandler(ListToolsRequestSchema, async () => ({
         type: "object",
         required: ["taskPath"],
         properties: {
-          authToken: { type: "string", description: "Required when AUTOTAP_MCP_TOKEN is set" },
+          authToken: { type: "string", description: "Required when TAPP_MCP_TOKEN is set" },
           operation: { type: "string", enum: ["read", "validate", "compile"], default: "validate" },
           taskPath: { type: "string", description: "Repo-relative .autotap/tasks/*.yml|json file" },
           platform: { type: "string", enum: ["ios", "android", "web"], description: "Implementation to validate/compile" },
@@ -2282,7 +2282,7 @@ server.setRequestHandler(ListToolsRequestSchema, async () => ({
         type: "object",
         required: ["contractPath"],
         properties: {
-          authToken: { type: "string", description: "Required when AUTOTAP_MCP_TOKEN is set" },
+          authToken: { type: "string", description: "Required when TAPP_MCP_TOKEN is set" },
           operation: { type: "string", enum: ["read", "validate", "compile", "run"], default: "validate" },
           contractPath: { type: "string", description: "Repo-relative .autotap/contracts/*.contract.ts file" },
           platform: { type: "string", enum: ["ios", "android", "web"], description: "Target platform; optional when the contract declares exactly one" },
@@ -2305,7 +2305,7 @@ server.setRequestHandler(ListToolsRequestSchema, async () => ({
       inputSchema: {
         type: "object",
         properties: {
-          authToken: { type: "string", description: "Required when AUTOTAP_MCP_TOKEN is set" },
+          authToken: { type: "string", description: "Required when TAPP_MCP_TOKEN is set" },
           operation: { type: "string", enum: ["plan", "adopt"], default: "plan" },
           changedFiles: {
             type: "array", minItems: 1,
@@ -2350,7 +2350,7 @@ server.setRequestHandler(ListToolsRequestSchema, async () => ({
       inputSchema: {
         type: "object",
         properties: {
-          authToken: { type: "string", description: "Required when AUTOTAP_MCP_TOKEN is set" },
+          authToken: { type: "string", description: "Required when TAPP_MCP_TOKEN is set" },
           flow: {
             type: "object",
             description:
@@ -2379,7 +2379,7 @@ server.setRequestHandler(ListToolsRequestSchema, async () => ({
       inputSchema: {
         type: "object",
         properties: {
-          authToken: { type: "string", description: "Required when AUTOTAP_MCP_TOKEN is set" },
+          authToken: { type: "string", description: "Required when TAPP_MCP_TOKEN is set" },
           scenario: { type: "object", description: "Inline Scenario with {kind:'scenario', platform:'web', actors, steps, setup?, teardown?}" },
           scenarioPath: { type: "string", description: "Repo-relative path to a .yml/.json Scenario" },
           url: { type: "string", description: "Override the Scenario's web URL" },
@@ -2400,7 +2400,7 @@ server.setRequestHandler(ListToolsRequestSchema, async () => ({
       inputSchema: {
         type: "object",
         properties: {
-          authToken: { type: "string", description: "Required when AUTOTAP_MCP_TOKEN is set" },
+          authToken: { type: "string", description: "Required when TAPP_MCP_TOKEN is set" },
           goal: { type: "string", description: "What the test should do, in plain English (e.g. 'sign in with test creds and reach the dashboard')" },
           appBundleId: { type: "string", description: "Bundle id of the installed app to author against" },
           captureId: { type: "string", description: "Reuse this capture's grounding instead of exploring (from a prior run_qa, faster)" },
@@ -2424,7 +2424,7 @@ server.setRequestHandler(ListToolsRequestSchema, async () => ({
       inputSchema: {
         type: "object",
         properties: {
-          authToken: { type: "string", description: "Required when AUTOTAP_MCP_TOKEN is set" },
+          authToken: { type: "string", description: "Required when TAPP_MCP_TOKEN is set" },
           name: { type: "string", description: "Human name for the flow, e.g. 'Sign in and reach Home'" },
           addFinalAssertion: { type: "boolean", default: true, description: "Append assert_screen for the final screen as a checkpoint" },
           replace: { type: "boolean", default: false, description: "Explicitly replace a Flow with the same generated filename. Existing Flows are preserved by default." },
@@ -2442,7 +2442,7 @@ server.setRequestHandler(ListToolsRequestSchema, async () => ({
       inputSchema: {
         type: "object",
         properties: {
-          authToken: { type: "string", description: "Required when AUTOTAP_MCP_TOKEN is set" },
+          authToken: { type: "string", description: "Required when TAPP_MCP_TOKEN is set" },
           appBundleId: { type: "string", description: "iOS bundle id of the installed app" },
           androidAppId: { type: "string", description: "Android application id of the installed app" },
           androidSerial: { type: "string", description: "Android adb device serial" },
@@ -2459,7 +2459,7 @@ server.setRequestHandler(ListToolsRequestSchema, async () => ({
       inputSchema: {
         type: "object",
         properties: {
-          authToken: { type: "string", description: "Required when AUTOTAP_MCP_TOKEN is set" },
+          authToken: { type: "string", description: "Required when TAPP_MCP_TOKEN is set" },
           maxWidth: { type: "integer", minimum: 200, maximum: 1400, default: 700, description: "Max image width in px (downscaled to keep payload small)" },
         },
       },
@@ -2477,7 +2477,7 @@ server.setRequestHandler(ListToolsRequestSchema, async () => ({
       inputSchema: {
         type: "object",
         properties: {
-          authToken: { type: "string", description: "Required when AUTOTAP_MCP_TOKEN is set" },
+          authToken: { type: "string", description: "Required when TAPP_MCP_TOKEN is set" },
           appBundleId: { type: "string", description: "iOS bundle id of the installed app" },
           androidAppId: { type: "string", description: "Android application id of the installed app" },
           apkPath: { type: "string", description: "Android APK to install before launch" },
@@ -2502,7 +2502,7 @@ server.setRequestHandler(ListToolsRequestSchema, async () => ({
       inputSchema: {
         type: "object",
         properties: {
-          authToken: { type: "string", description: "Required when AUTOTAP_MCP_TOKEN is set" },
+          authToken: { type: "string", description: "Required when TAPP_MCP_TOKEN is set" },
           udid: { type: "string", description: "Simulator UDID (from tapp_list_simulators)" },
           name: { type: "string", description: "Simulator name, e.g. 'iPhone 16 Pro' (used if udid omitted)" },
         },
@@ -2518,7 +2518,7 @@ server.setRequestHandler(ListToolsRequestSchema, async () => ({
       inputSchema: {
         type: "object",
         properties: {
-          authToken: { type: "string", description: "Required when AUTOTAP_MCP_TOKEN is set" },
+          authToken: { type: "string", description: "Required when TAPP_MCP_TOKEN is set" },
           project: { type: "string", description: "Absolute path to .xcodeproj (use this OR workspace)" },
           workspace: { type: "string", description: "Absolute path to .xcworkspace (use this OR project)" },
           scheme: { type: "string", description: "Scheme to build" },
@@ -2542,7 +2542,7 @@ server.setRequestHandler(ListToolsRequestSchema, async () => ({
       inputSchema: {
         type: "object",
         properties: {
-          authToken: { type: "string", description: "Required when AUTOTAP_MCP_TOKEN is set" },
+          authToken: { type: "string", description: "Required when TAPP_MCP_TOKEN is set" },
           appBundleId: { type: "string", description: "Bundle id of the installed app to drive" },
           androidAppId: { type: "string", description: "Android application id to drive (alternative to appBundleId)" },
           apkPath: { type: "string", description: "Android APK to install before starting" },
@@ -2571,7 +2571,7 @@ server.setRequestHandler(ListToolsRequestSchema, async () => ({
       inputSchema: {
         type: "object",
         properties: {
-          authToken: { type: "string", description: "Required when AUTOTAP_MCP_TOKEN is set" },
+          authToken: { type: "string", description: "Required when TAPP_MCP_TOKEN is set" },
           action: { type: "string", enum: ["login", "tap", "type", "swipe", "back", "wait", "tree", "screenshot"] },
           email: { type: "string", description: "login: email/username to sign in with" },
           password: { type: "string", description: "login: password to sign in with" },
@@ -2592,7 +2592,7 @@ server.setRequestHandler(ListToolsRequestSchema, async () => ({
       description: "End the active interactive session (quits the app + harness). Always call this when done.",
       inputSchema: {
         type: "object",
-        properties: { authToken: { type: "string", description: "Required when AUTOTAP_MCP_TOKEN is set" } },
+        properties: { authToken: { type: "string", description: "Required when TAPP_MCP_TOKEN is set" } },
       },
     },
   ],
@@ -3450,7 +3450,7 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
     if (!isNonEmptyString(args.goal)) return errorResult("goal is required");
     if (!isNonEmptyString(args.appBundleId)) return errorResult("appBundleId is required");
     const backend = resolveModelBackend();
-    if (!backend) return errorResult("AI-generate needs a model backend — set an Tapp subscription token (AUTOTAP_SUBSCRIPTION_TOKEN) or ANTHROPIC_API_KEY.");
+    if (!backend) return errorResult("AI-generate needs a model backend — set TAPP_SUBSCRIPTION_TOKEN or ANTHROPIC_API_KEY.");
     const bundleId = args.appBundleId.trim();
 
     // 1) Grounding: reuse a capture's markers, else explore the app to build a screen/control map.

package/mcp-server/src/product-execution.js

@@ -13,7 +13,7 @@ import { compileReleaseContract, loadReleaseContractFile } from "./release-contr
 const packageRoot = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "../..");
 
 function executionHome() {
-  return process.env.AUTOTAP_HOME || process.env.TAPP_HOME || path.join(os.homedir(), ".tapp");
+  return process.env.TAPP_HOME || process.env.AUTOTAP_HOME || path.join(os.homedir(), ".tapp");
 }
 
 function atomicJson(destination, value) {

package/mcp-server/src/product-operations.js

@@ -63,7 +63,7 @@ function artifactPaths(root, outDir = ".autotap") {
 }
 
 function productRunRoot(root) {
-  const home = process.env.AUTOTAP_HOME || process.env.TAPP_HOME || path.join(os.homedir(), ".tapp");
+  const home = process.env.TAPP_HOME || process.env.AUTOTAP_HOME || path.join(os.homedir(), ".tapp");
   const identity = crypto.createHash("sha256").update(root).digest("hex").slice(0, 16);
   return path.join(home, "product-runs", identity);
 }

package/mcp-server/src/report.js

@@ -1,5 +1,5 @@
 // Pure report/gate logic shared by the MCP server (index.js) and the CI gate CLI
-// (ci-report.js). Turns a capture's OCQA markers into the same ship/no-ship report the AutoTap
+// (ci-report.js). Turns a capture's OCQA markers into the same ship/no-ship report the Tapp
 // app produces, and diffs two runs' findings into the CI regression gate. No shell, no server —
 // keep it dependency-free so the CI path stays importable and testable.
 import fs from "fs";
@@ -78,7 +78,7 @@ export function parseOcqaMarkers(markersFilePath) {
   };
 }
 
-// Map harness OCQA_ISSUE `type` -> AutoTap FindingCategory. Crashes are always critical.
+// Map harness OCQA_ISSUE `type` -> Tapp FindingCategory. Crashes are always critical.
 export const ISSUE_CATEGORY = {
   crash: "crash",
   app_hang: "app_hang",
@@ -100,7 +100,7 @@ export function severityRank(s) {
   return { critical: 0, high: 1, medium: 2, low: 3 }[s] ?? 4;
 }
 
-// Turn a capture's OCQA markers into the same ship/no-ship report the AutoTap app produces:
+// Turn a capture's OCQA markers into the same ship/no-ship report Tapp produces:
 // deduped findings + a trustworthy verdict with a coverage floor (mirrors OrchestratorService).
 export function buildQaReport(markersFilePath, { platform = "ios" } = {}) {
   const base = parseOcqaMarkers(markersFilePath);