@aarwitz/tapp 0.17.20 → 0.17.21

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "tapp",
   "description": "Give Claude hands and eyes on iOS, Android, and web apps, with exploration, replayable flows, evidence, and deterministic CI gates.",
-  "version": "0.17.20",
+  "version": "0.17.21",
   "author": {
     "name": "Aaron Horowitz",
     "url": "https://github.com/aarwitz"
@@ -24,7 +24,7 @@
       "command": "npx",
       "args": [
         "-y",
-        "@aarwitz/tapp@0.17.20",
+        "@aarwitz/tapp@0.17.21",
         "mcp"
       ],
       "cwd": "${CLAUDE_PROJECT_DIR}"

package/AGENTS.md

@@ -1,7 +1,7 @@
 # Tapp agent playbook
 
 You (the agent) have Tapp: hands and eyes on real app surfaces — iOS simulators, Android
-emulators/devices, plus (beta) web apps in a real browser. Release judgment belongs only to Tapp's
+emulators/devices, plus web apps in a real browser. Release judgment belongs only to Tapp's
 repository-connected deterministic gate.
 
 ## No MCP connected? Just run the CLI

package/Harness/OCQAHarnessUITests/ExplorerTests.swift

@@ -5172,12 +5172,23 @@ class ExplorerTests: XCTestCase {
             // deleting only the prefix, then prove it is empty before inserting new text.
             element.typeKey("a", modifierFlags: .command)
             element.typeText(XCUIKeyboardKey.delete.rawValue)
-            if hasContent(), let remaining = element.value as? String {
-                // Some simulator keyboard configurations ignore Command-A. Clear on both
-                // sides of the cursor in that case; backspace alone leaves the suffix intact.
-                let count = remaining.utf16.count
-                element.typeText(String(repeating: XCUIKeyboardKey.delete.rawValue, count: count)
-                    + String(repeating: XCUIKeyboardKey.forwardDelete.rawValue, count: count))
+            // Command-A and forward delete are hardware-keyboard keys, and the simulator's
+            // hardware keyboard is disconnected by default — which is how CI runs. XCUITest
+            // cannot press a key the software keyboard does not have: the selection never
+            // happens, and forwardDelete's raw value (U+F728, a private-use character) is
+            // INSERTED as literal text. Clearing a 54-character field therefore left it holding
+            // 54 unrenderable glyphs and reported "could not be cleared". Backspace IS on the
+            // software keyboard, so clear with backspace alone, re-anchoring the caret past the
+            // end of the visible text each pass to reach a suffix that was scrolled out of view.
+            var passes = 0
+            while hasContent(), passes < 4 {
+                passes += 1
+                guard let remaining = element.value as? String else { break }
+                element.coordinate(withNormalizedOffset: CGVector(dx: 0.97, dy: 0.5)).tap()
+                element.typeText(String(repeating: XCUIKeyboardKey.delete.rawValue,
+                                        count: remaining.utf16.count + 2))
+                // An empty field reports its placeholder, so this compares unequal once cleared.
+                if (element.value as? String) == remaining { break }
             }
             let deadline = Date().addingTimeInterval(1.0)
             while hasContent() && Date() < deadline { Thread.sleep(forTimeInterval: 0.1) }

package/bin/tapp.js

@@ -163,7 +163,7 @@ const engineImport = () => import(path.join(packageRoot, "mcp-server", "src", "i
 
 function requireMacFor(what) {
   if (process.platform === "darwin") return;
-  console.error(`❌ ${what} requires macOS (Xcode + iOS simulator). The web beta runs anywhere: npx -y @aarwitz/tapp@latest explore https://localhost:3000`);
+  console.error(`❌ ${what} requires macOS (Xcode + iOS simulator). Web runs anywhere: npx -y @aarwitz/tapp@latest explore https://localhost:3000`);
   process.exit(1);
 }
 

package/browser/app.css

@@ -176,24 +176,35 @@ dialog { width:min(720px,calc(100vw - 40px)); max-height:min(760px,calc(100vh -
 }
 
 /* Desktop-parity dark product skin. The component structure remains shared by
-   local and hosted Tapp; this palette follows the native Command Center. */
+   local and hosted Tapp; the palette comes from tokens.css so the hosted Studio,
+   the local Studio, and the macOS Command Center read as one product. */
 :root {
   color-scheme:dark;
-  --ink:#edf2f8; --muted:#929ba8; --faint:#687280; --line:#303844; --paper:#171c24; --wash:#20262f;
-  --green:#58a6ff; --green-2:#4f9cf3; --green-3:#7bb8ff; --lime:#102d4d; --amber:#e2a826;
-  --amber-bg:#302817; --red:#ff5c57; --red-bg:#392125; --blue:#58a6ff; --sidebar:#0c1118;
-  --shadow:0 18px 55px rgba(0,0,0,.28); --small-shadow:0 8px 24px rgba(0,0,0,.18);
+  --ink:var(--tapp-text); --muted:var(--tapp-text-soft); --faint:var(--tapp-text-faint);
+  --line:var(--tapp-border); --paper:var(--tapp-panel); --wash:var(--tapp-panel-2);
+  --green:var(--tapp-blue); --green-2:var(--tapp-blue-hover); --green-3:#7bb8ff;
+  --lime:var(--tapp-selected); --amber:var(--tapp-amber); --amber-bg:var(--tapp-amber-bg);
+  --red:var(--tapp-red); --red-bg:var(--tapp-red-bg); --blue:var(--tapp-blue);
+  --sidebar:var(--tapp-sidebar); --shadow:var(--tapp-shadow); --small-shadow:var(--tapp-shadow-small);
 }
-body { background:#0d1117; }
-.topbar { background:rgba(13,17,23,.96); border-color:var(--line); }
+body { background:var(--tapp-bg); font-family:var(--tapp-font); }
+code { font-family:var(--tapp-font-mono); }
+.topbar { background:rgba(7,16,23,.96); border-color:var(--tapp-border-strong); }
 .brand-mark { width:auto; background:transparent; color:var(--green); font-family:inherit; font-size:24px; }
 .mode-pill,.status-chip,.repository-switcher,.source-card,.panel,.decision-card,.target-card,.field,
 .live-frame-shell,.live-controls,.coverage-summary,.transition-list,.plan-item,.pipeline article,
 .evidence-card,.search-input,.github-repositories,.github-repositories button,.manual-action input,
 .run-row,.finding-row,.live-control { background:var(--paper); color:var(--ink); border-color:var(--line); }
 .source-onboarding { min-height:calc(100vh - 64px); }
-.source-card:hover,.source-card.dragging { border-color:var(--green-2); box-shadow:0 20px 56px rgba(0,0,0,.36); }
-.source-card.dragging,.target-card.selected,.run-row.selected,.finding-row.selected { background:#132237; }
+.source-card:hover,.source-card.dragging { border-color:var(--green-2); box-shadow:0 20px 56px rgba(0,0,0,.46); }
+.source-card.dragging,.target-card.selected,.run-row.selected,.finding-row.selected { background:var(--tapp-selected); }
+/* Controls match the Command Center: compact, 8px radius, muted surface. */
+button { border-radius:var(--tapp-radius); }
+button.primary { background:var(--tapp-blue); color:#fff; }
+button.primary:hover { background:var(--tapp-blue-hover); }
+button.secondary { color:var(--tapp-text-control); background:var(--tapp-control); border-color:var(--tapp-border); }
+button.secondary:hover,button.quiet:hover { background:var(--tapp-panel-3); }
+button.quiet { border-color:var(--tapp-border); color:var(--muted); }
 .platform-row span,.button-link { background:#131a23; border-color:#385a7c; color:var(--green); }
 button.primary { background:var(--green); color:#07111d; }
 button.primary:hover { background:#79b8ff; }

package/browser/index.html

@@ -7,6 +7,7 @@
   <meta name="tapp-api-base" content="">
   <meta name="tapp-login-url" content="">
   <title>Tapp</title>
+  <link rel="stylesheet" href="./assets/tokens.css">
   <link rel="stylesheet" href="./assets/app.css">
 </head>
 <body>

package/browser/tokens.css

@@ -0,0 +1,50 @@
+/* Tapp design tokens — the single source of truth for what Tapp looks like.
+   Extracted from the Command Center shell (website/) so the hosted Studio
+   (app.runtapp.com), the local `tapp app` Studio, and the macOS app read as one
+   product. Surfaces consume these variables; none should hardcode a palette. */
+:root {
+  color-scheme: dark;
+
+  /* Ground and surfaces, darkest to lightest */
+  --tapp-bg: #071017;
+  --tapp-bg-deep: #040b11;
+  --tapp-sidebar: #0b1218;
+  --tapp-sidebar-solid: #0c1117;
+  --tapp-panel: #0f1a22;
+  --tapp-panel-2: #111d26;
+  --tapp-panel-3: #192730;
+  --tapp-panel-soft: rgba(17, 22, 28, 0.8);
+  --tapp-control: #1a222b;
+
+  /* Lines */
+  --tapp-border: rgba(168, 182, 196, 0.12);
+  --tapp-border-strong: #343b43;
+
+  /* Type */
+  --tapp-text: #edf3f7;
+  --tapp-text-soft: #b7c6d1;
+  --tapp-text-faint: #7e8d99;
+  --tapp-text-control: #dce3e9;
+
+  /* Accent and status */
+  --tapp-blue: #1f79ff;
+  --tapp-blue-hover: #2d87ff;
+  --tapp-amber: #e2a826;
+  --tapp-amber-bg: #302817;
+  --tapp-red: #ff5c57;
+  --tapp-red-bg: #392125;
+  --tapp-selected: #132b44;
+
+  /* Depth */
+  --tapp-shadow: 0 18px 55px rgba(0, 0, 0, 0.42);
+  --tapp-shadow-small: 0 8px 24px rgba(0, 0, 0, 0.3);
+
+  /* Type families — Inter for UI, SF Mono for evidence and identifiers */
+  --tapp-font: Inter, ui-sans-serif, -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;
+  --tapp-font-mono: "SFMono-Regular", ui-monospace, Consolas, Menlo, monospace;
+
+  /* Shell metrics */
+  --tapp-sidebar-width: 220px;
+  --tapp-radius: 8px;
+  --tapp-radius-lg: 12px;
+}

package/mcp-server/src/index.js

@@ -2729,7 +2729,7 @@ server.setRequestHandler(ListToolsRequestSchema, async () => ({
       title: "Explore (autonomous)",
       description:
         "Autonomously explore iOS (appBundleId), Android (androidAppId), OR a web app " +
-        "(url — beta, requires Playwright installed) and return a structured EXPLORATION OBSERVATION. " +
+        "(url — requires Playwright installed) and return a structured EXPLORATION OBSERVATION. " +
         "Exploration OBSERVES — it surfaces findings + coverage + evidence; it does NOT render a ship " +
         "verdict or score. To gate a merge, run the deterministic gate (contracts + baseline via CI). " +
         "Use when the user wants to find bugs / observe what breaks — this " +
@@ -2756,7 +2756,7 @@ server.setRequestHandler(ListToolsRequestSchema, async () => ({
           apkPath: { type: "string", description: "Android: optional APK to install before testing." },
           androidSerial: { type: "string", description: "Android: optional adb device serial; defaults to the first authorized device." },
           clearData: { type: "boolean", default: true, description: "Android: clear app data before launch for a repeatable starting state." },
-          url: { type: "string", description: "Web (beta): URL of the app to explore in a real browser (same-origin only; your own app/staging). Provide exactly one of appBundleId | url." },
+          url: { type: "string", description: "Web: URL of the app to explore in a real browser (same-origin only; your own app/staging). Provide exactly one of appBundleId | url." },
           watch: { type: "boolean", default: false, description: "Web only: open Tapp's controlled Chromium window and show a cursor/HUD for each exploration action. Evidence screenshots exclude the overlay." },
           device: { type: "string", description: "Web only: render as a Playwright device profile (e.g. \"iPhone 13\") — viewport, user agent, touch" },
           viewport: { type: "string", description: "Web only: explicit viewport WIDTHxHEIGHT (e.g. \"390x844\"); overrides the device profile's viewport" },
@@ -3616,7 +3616,7 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
     const wantsAndroid = isNonEmptyString(args.androidAppId);
     const targets = [wantsWeb, wantsAndroid, isNonEmptyString(args.appBundleId)].filter(Boolean).length;
     if (targets !== 1) {
-      return errorResult("Provide exactly one of appBundleId (iOS), androidAppId (Android), or url (web beta)");
+      return errorResult("Provide exactly one of appBundleId (iOS), androidAppId (Android), or url (web)");
     }
     if (args.watch === true && !wantsWeb) return errorResult("watch is currently available for web exploration only");
 

package/mcp-server/src/report.js

@@ -362,7 +362,7 @@ export function buildQaReport(markersFilePath, { platform = "ios", target = null
       "privacy or API data minimization",
       "brand and SEO consistency",
       "visual credibility or asset quality (vision review; needs an API key)",
-      "only the first few visible buttons per page are probed (web beta)",
+      "only the first few visible buttons per page are probed (web)",
       "content & reachability regressions require a baseline",
     ];
     if (outbound?.mailtoSkipped === "egress-policy") notChecked.push("mailto address domains (MX lookups are skipped by the public-egress policy)");

package/mcp-server/src/web-explorer.js

@@ -1,4 +1,4 @@
-// Web exploration driver (beta) — the second platform behind the OCQA marker protocol.
+// Web exploration driver — the second platform behind the OCQA marker protocol.
 //
 // Drives a real browser via Playwright and emits the SAME OCQA_* marker lines the iOS
 // XCUITest harness emits, into the same captures/<id>/ocqa-markers.txt layout — so the

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aarwitz/tapp",
-  "version": "0.17.20",
+  "version": "0.17.21",
   "mcpName": "io.github.aarwitz/tapp",
   "description": "Let coding agents verify UI changes on real iOS, Android, and web surfaces, then enforce reviewed proof in deterministic CI.",
   "license": "MIT",