@aarwitz/tapp 0.17.6 → 0.17.7

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "tapp",
   "description": "Give Claude hands and eyes on iOS, Android, and web apps, with exploration, replayable flows, evidence, and deterministic CI gates.",
-  "version": "0.17.6",
+  "version": "0.17.7",
   "author": {
     "name": "Aaron Horowitz",
     "url": "https://github.com/aarwitz"
@@ -24,7 +24,7 @@
       "command": "npx",
       "args": [
         "-y",
-        "@aarwitz/tapp@0.17.6",
+        "@aarwitz/tapp@0.17.7",
         "mcp"
       ],
       "cwd": "${CLAUDE_PROJECT_DIR}"

package/README.md

@@ -348,7 +348,7 @@ jobs:
     timeout-minutes: 45
     steps:
       - uses: actions/checkout@v4
-      - uses: aarwitz/tapp@v0.17.6 # or pin the reviewed release commit SHA
+      - uses: aarwitz/tapp@v0.17.7 # or pin the reviewed release commit SHA
         with:
           project: MyApp.xcodeproj # or MyApp.xcworkspace
           scheme: MyApp
@@ -398,7 +398,7 @@ Android CI runs on Linux with an emulator/device already connected. The Action c
 or accept a prebuilt one:
 
 ```yaml
-- uses: aarwitz/tapp@v0.17.6 # or pin the reviewed release commit SHA
+- uses: aarwitz/tapp@v0.17.7 # or pin the reviewed release commit SHA
   with:
     platform: android
     android-app-id: com.acme.app

package/bin/tapp.js

@@ -270,10 +270,10 @@ function safeCommandUsage(verb) {
     shot: "tapp shot [--out FILE]",
     apps: "tapp apps",
     build: "tapp build [repo] [--scheme NAME] [--configuration NAME]",
-    flow: "tapp flow example\ntapp flow validate FILE [--platform PLATFORM] [--map FILE]\ntapp flow run FILE [--actor NAME] [--email VALUE] [--password VALUE] [--device \"iPhone 13\"] [--viewport 390x844]",
+    flow: "tapp flow example\ntapp flow validate FILE [--platform PLATFORM] [--map FILE]\ntapp flow run FILE [--actor NAME] [--email VALUE] [--password VALUE] [--device \"iPhone 13\"] [--viewport 390x844]\n  Exit codes: 0 replay passed · 1 replay failed · 2 infrastructure/usage error",
     task: "tapp task validate FILE [--platform PLATFORM] [--map FILE]\ntapp task compile FILE --platform PLATFORM [--inputs JSON] [--out FILE]\ntapp task run FILE --platform PLATFORM [--url URL|--bundle-id ID|--app-id ID] [--inputs JSON]",
-    contract: "tapp contract validate FILE [--platform PLATFORM] [--map FILE]\ntapp contract compile FILE --platform PLATFORM [--out FILE]\ntapp contract run FILE --platform PLATFORM [--url URL|--bundle-id ID|--app-id ID]",
-    scenario: "tapp scenario validate FILE [--project-dir DIR]\ntapp scenario run FILE --platform web --url URL [--project-dir DIR]",
+    contract: "tapp contract validate FILE [--platform PLATFORM] [--map FILE]\ntapp contract compile FILE --platform PLATFORM [--out FILE]\ntapp contract run FILE --platform PLATFORM [--url URL|--bundle-id ID|--app-id ID]\n  Exit codes: 0 contract held · 1 contract failed · 2 infrastructure/usage error",
+    scenario: "tapp scenario validate FILE [--project-dir DIR]\ntapp scenario run FILE --platform web --url URL [--project-dir DIR]\n  Exit codes: 0 scenario passed · 1 scenario failed · 2 infrastructure/usage error",
     map: "tapp map build MARKERS [--platform PLATFORM] [--out FILE] [--replace]\ntapp map inspect [FILE]\ntapp map diff BEFORE AFTER [--comparable]",
     pr: "tapp pr plan [--base REF|--changed-files FILE] [--head REF] [--platform PLATFORM] [--out FILE]\ntapp pr gate PLAN [gate target/options]\ntapp pr adopt PLAN --item ID [--project-dir DIR]",
     plan: "tapp plan show [FILE]\ntapp plan review [FILE] --approve NAME[,NAME] --reject NAME[,NAME] --defer NAME[,NAME]\ntapp plan generate|validate|promote [FILE] [options]",
@@ -282,7 +282,7 @@ function safeCommandUsage(verb) {
     actor: "tapp actor set NAME --email-env ENV --password-env ENV [--replace] [--project-dir DIR]\ntapp actor list [repo]",
     app: "tapp app [repo] [--no-open] [--port PORT]",
     report: "tapp report [captureId|latest]",
-    doctor: "tapp doctor",
+    doctor: "tapp doctor [--json]\n  Exit codes: 0 environment healthy · 1 blocked (fix ❌ items)",
     install: "tapp install",
     mcp: "tapp mcp",
   };
@@ -1425,37 +1425,51 @@ switch (command) {
   }
 
   case "doctor": {
-    console.log(`tapp v${pkg.version} — doctor\n`);
+    const { flags: doctorFlags } = parseVerbArgs(rest);
+    const jsonMode = doctorFlags.json === true;
+    const report = { version: pkg.version, healthy: true, node: {}, python3: {}, disk: {},
+      platforms: { ios: {}, android: {}, web: {} }, home: tappHome };
+    const say = (line) => { if (!jsonMode) console.log(line); };
+    const sayOk = (label, detail = "") => { if (!jsonMode) ok(label, detail); };
+    const sayBad = (label, detail = "") => { if (!jsonMode) bad(label, detail); };
+    say(`tapp v${pkg.version} — doctor\n`);
     let healthy = true;
 
     const major = Number(process.versions.node.split(".")[0]);
-    major >= 18 ? ok("Node", `v${process.versions.node}`) : (bad("Node", `v${process.versions.node} (need >= 18)`), (healthy = false));
+    report.node = { ok: major >= 18, version: process.versions.node };
+    major >= 18 ? sayOk("Node", `v${process.versions.node}`) : (sayBad("Node", `v${process.versions.node} (need >= 18)`), (healthy = false));
 
     const python = run("python3", ["--version"]);
-    python.code === 0 ? ok("python3", `${python.stdout} (used by Flows)`) : bad("python3", "not found — Flow replay needs python3 + pyyaml (everything else works)");
+    report.python3 = { ok: python.code === 0, version: python.code === 0 ? python.stdout : null };
+    python.code === 0 ? sayOk("python3", `${python.stdout} (used by Flows)`) : sayBad("python3", "not found — Flow replay needs python3 + pyyaml (everything else works)");
 
     const { storagePreflight } = await import(path.join(packageRoot, "mcp-server", "src", "environment-preflight.js"));
     const storage = storagePreflight(tappHome);
-    if (storage.level === "blocked") { bad("Disk space", storage.message); healthy = false; }
-    else if (storage.level === "warning") console.log(`  ⚠️  Disk space — ${storage.message}`);
-    else if (storage.level === "ok") ok("Disk space", storage.message);
-    else console.log(`  ⬜ Disk space — ${storage.message || "could not be checked"}`);
+    report.disk = { level: storage.level, message: storage.message || null };
+    if (storage.level === "blocked") { sayBad("Disk space", storage.message); healthy = false; }
+    else if (storage.level === "warning") say(`  ⚠️  Disk space — ${storage.message}`);
+    else if (storage.level === "ok") sayOk("Disk space", storage.message);
+    else say(`  ⬜ Disk space — ${storage.message || "could not be checked"}`);
 
-    console.log("\n  Platforms:");
+    say("\n  Platforms:");
     if (process.platform === "darwin") {
       const xcode = run("xcode-select", ["-p"]);
       const simctl = run("xcrun", ["simctl", "help"]);
       if (xcode.code === 0 && simctl.code === 0) {
         const ver = run("xcodebuild", ["-version"]).stdout.split("\n")[0];
         const booted = bootedSims();
-        ok("iOS", `${ver || "Xcode"}; ${booted.length ? `${booted[0].name} booted` : "no simulator booted yet"}`);
         const xctestrun = harnessXctestrun();
-        xctestrun ? ok("iOS harness cache", xctestrun) : console.log("  ⬜ iOS harness cache — builds on first use (or: npx -y @aarwitz/tapp@latest install)");
+        report.platforms.ios = { available: true, xcode: ver || "Xcode",
+          bootedSimulator: booted.length ? booted[0].name : null, harnessCache: Boolean(xctestrun) };
+        sayOk("iOS", `${ver || "Xcode"}; ${booted.length ? `${booted[0].name} booted` : "no simulator booted yet"}`);
+        xctestrun ? sayOk("iOS harness cache", xctestrun) : say("  ⬜ iOS harness cache — builds on first use (or: npx -y @aarwitz/tapp@latest install)");
       } else {
-        console.log("  ⬜ iOS — unavailable (install Xcode + simulator runtime)");
+        report.platforms.ios = { available: false, reason: "install Xcode + simulator runtime" };
+        say("  ⬜ iOS — unavailable (install Xcode + simulator runtime)");
       }
     } else {
-      console.log(`  ⬜ iOS — requires macOS (this host: ${process.platform})`);
+      report.platforms.ios = { available: false, reason: `requires macOS (this host: ${process.platform})` };
+      say(`  ⬜ iOS — requires macOS (this host: ${process.platform})`);
     }
 
     const { resolveAdbPath, resolveAndroidSdkRoot } = await import(path.join(packageRoot, "mcp-server", "src", "android-driver.js"));
@@ -1463,17 +1477,20 @@ switch (command) {
     const adb = adbPath ? run(adbPath, ["devices"]) : { code: 1, stdout: "" };
     if (adb.code === 0) {
       const devices = adb.stdout.split(/\r?\n/).slice(1).filter((line) => /\sdevice(?:\s|$)/.test(line));
-      ok("Android", devices.length ? `${devices.length} connected emulator/device` : "adb available; no device connected");
+      report.platforms.android = { adb: true, devicesConnected: devices.length };
+      sayOk("Android", devices.length ? `${devices.length} connected emulator/device` : "adb available; no device connected");
     } else {
-      console.log("  ⬜ Android — adb not found (install Android SDK platform-tools)");
+      report.platforms.android = { adb: false, devicesConnected: 0 };
+      say("  ⬜ Android — adb not found (install Android SDK platform-tools)");
     }
     const { resolveJavaRuntime } = await import(path.join(packageRoot, "mcp-server", "src", "environment-preflight.js"));
     const java = resolveJavaRuntime();
     const androidSdkRoot = resolveAndroidSdkRoot();
-    if (java && androidSdkRoot) ok("Android source builds", `${java.version || java.javaHome}; SDK ${androidSdkRoot}`);
+    report.platforms.android.sourceBuilds = Boolean(java && androidSdkRoot);
+    if (java && androidSdkRoot) sayOk("Android source builds", `${java.version || java.javaHome}; SDK ${androidSdkRoot}`);
     else {
       const missing = [!java ? "JDK 17" : "", !androidSdkRoot ? "Android SDK root" : ""].filter(Boolean).join(" and ");
-      console.log(`  ⬜ Android source builds — install/configure ${missing} (prebuilt APK testing still works)`);
+      say(`  ⬜ Android source builds — install/configure ${missing} (prebuilt APK testing still works)`);
     }
 
     try {
@@ -1481,18 +1498,26 @@ switch (command) {
       let executable = "";
       try { executable = chromium.executablePath(); } catch { /* report the missing browser below */ }
       if (executable && fs.existsSync(executable)) {
-        ok("Web", `Playwright + Chromium (${executable})`);
+        report.platforms.web = { available: true, chromium: executable };
+        sayOk("Web", `Playwright + Chromium (${executable})`);
       } else {
-        console.log("  ⬜ Web — Playwright installed; Chromium browser missing (run: npx playwright install chromium)");
+        report.platforms.web = { available: false, reason: "Chromium browser missing (run: npx playwright install chromium)" };
+        say("  ⬜ Web — Playwright installed; Chromium browser missing (run: npx playwright install chromium)");
       }
     } catch {
-      console.log("  ⬜ Web — install Playwright in the app workspace: npm install -D playwright && npx playwright install chromium");
+      report.platforms.web = { available: false, reason: "Playwright not installed" };
+      say("  ⬜ Web — install Playwright in the app workspace: npm install -D playwright && npx playwright install chromium");
     }
 
-    console.log(`\n  Home: ${tappHome}`);
-    console.log(healthy
-      ? "\nReady. Start with:\n  npx -y @aarwitz/tapp@latest open [target]\n  npx -y @aarwitz/tapp@latest explore [target]"
-      : "\nFix the ❌ items above, then re-run: npx -y @aarwitz/tapp@latest doctor");
+    report.healthy = healthy;
+    if (jsonMode) {
+      console.log(JSON.stringify(report, null, 2));
+    } else {
+      console.log(`\n  Home: ${tappHome}`);
+      console.log(healthy
+        ? "\nReady. Start with:\n  npx -y @aarwitz/tapp@latest open [target]\n  npx -y @aarwitz/tapp@latest explore [target]"
+        : "\nFix the ❌ items above, then re-run: npx -y @aarwitz/tapp@latest doctor");
+    }
     process.exit(healthy ? 0 : 1);
   }
 

package/docs/scenarios.md

@@ -74,7 +74,7 @@ tapp ci --platform web --url http://127.0.0.1:4180 \
 GitHub Action:
 
 ```yaml
-- uses: aarwitz/tapp@v0.17.6 # or pin the reviewed release commit SHA
+- uses: aarwitz/tapp@v0.17.7 # or pin the reviewed release commit SHA
   with:
     platform: web
     url: http://127.0.0.1:4180

package/mcp-server/src/ci-report.js

@@ -178,6 +178,7 @@ function loadBaseline(baselinePath) {
     actionsPerformed: parsed.actionsPerformed || 0,
     platform: parsed.baselineIdentity?.platform || parsed.platform || null,
     targetKey: parsed.baselineIdentity?.targetId || parsed.targetKey || null,
+    capture: parsed.capture || null,
   };
 }
 
@@ -399,6 +400,10 @@ function renderMarkdown(report, regression, flows, scenarios, contracts, prPlan,
     lines.push(`### Since baseline — ${regFailed ? "🔴 regression gate FAILED" : "🟢 regression gate passed"}`);
     lines.push(`+${regression.counts.new} new · ${regression.counts.persisting} persisting · ${regression.counts.resolved} resolved` +
       (regFailed ? ` — **${newCritical} new critical, ${newHigh} new high**` : ""));
+    if (regression.captureMismatch) {
+      const describe = (c) => [c?.device, c?.viewport ? `${c.viewport.width}x${c.viewport.height}` : null, c?.deviceScaleFactor ? `@${c.deviceScaleFactor}x` : null].filter(Boolean).join(" ") || "unknown";
+      lines.push(`⚠️ **Capture mismatch**: baseline was captured at ${describe(regression.captureMismatch.baseline)}, this run at ${describe(regression.captureMismatch.current)}. "Resolved" findings may reflect layout differences at the new size, not fixes — re-baseline at the same device/viewport to compare honestly.`);
+    }
     for (const f of regression.newFindings) {
       lines.push(`- NEW ${SEV_ICON[f.severity] || ""} ${f.severity}: ${f.title} (${f.screen ?? "—"})`);
     }
@@ -491,7 +496,11 @@ function renderMarkdown(report, regression, flows, scenarios, contracts, prPlan,
   lines.push(`**Gate (${gate.policy}): ${badge}**${gate.reasons.length ? " — " + gate.reasons.join("; ") : ""}${ignoredNote}`);
   // The gate is only authoritative about what it actually ran — record the scope explicitly.
   const rev = gate.revision?.sha ? `${String(gate.revision.sha).slice(0, 12)}${gate.revision.dirty ? "-dirty" : ""}` : "unknown";
-  lines.push(`_target: ${gate.target || "—"} · revision: ${rev} · policy: ${gate.policy} v${gate.policyVersion || "?"}_`);
+  const captured = report.capture
+    ? ` · capture: ${[report.capture.device, report.capture.viewport ? `${report.capture.viewport.width}x${report.capture.viewport.height}` : null, report.capture.deviceScaleFactor ? `@${report.capture.deviceScaleFactor}x` : null].filter(Boolean).join(" ")}`
+    : "";
+  const stableId = report.targetKey && report.targetKey !== gate.target ? ` (${report.targetKey})` : "";
+  lines.push(`_target: ${gate.target || "—"}${stableId} · revision: ${rev} · policy: ${gate.policy} v${gate.policyVersion || "?"}${captured}_`);
   if (Array.isArray(gate.checked) && gate.checked.length) lines.push(`_Checked: ${gate.checked.join(" · ")}_`);
   if (Array.isArray(gate.notChecked) && gate.notChecked.length) lines.push(`_Not checked: ${gate.notChecked.join(" · ")}_`);
   return lines.join("\n");
@@ -550,6 +559,12 @@ if (collapsed.length) {
   report.headline = `${collapsed.length} screen(s) regressed vs. baseline (content collapsed or became unreachable).`;
 }
 const regression = computeRegression(report.findings, baseline?.findings ?? null);
+// A baseline captured at a different device/viewport is a layout comparison, not a regression
+// signal: a phone run legitimately hides desktop nav links, so its "resolved" list lies. Keep
+// the diff (new findings still gate) but stamp the mismatch so every consumer can see it.
+if (regression && baseline?.capture && report.capture && JSON.stringify(baseline.capture) !== JSON.stringify(report.capture)) {
+  regression.captureMismatch = { baseline: baseline.capture, current: report.capture };
+}
 const runs = args.flowLogs.map(parseFlowLog);
 const contracts = runs.filter((run) => run.kind === "release-contract");
 const flows = runs.filter((run) => !["scenario", "release-contract"].includes(run.kind));
@@ -572,7 +587,9 @@ try {
 const decision = evaluateGate({ report, regression, flows, scenarios, contracts, prPlan, baseline, failOn: args.failOn });
 const gate = {
   ...decision,
-  target: args.targetKey || report.target || null,
+  // Display identity is the URL/bundle the run exercised; the stable application-model id
+  // stays on report.targetKey for baseline matching (a hash is not a target name).
+  target: report.target || args.targetKey || null,
   revision: gitRevision(args.projectDir),
   checked: report.checkedFor,
   notChecked: report.notChecked,

package/mcp-server/src/html-report.js

@@ -140,6 +140,7 @@ ${r.conditionsNotReached?.length ? `<div><h2>Conditions not reached</h2><ul>${sc
 <h1>${esc(observationBadge(r))} <span class="dim">· ${esc(observationSummary(r))}</span></h1>
 <div class="meta">${esc(label)} · evidence page (observation, not a release decision)</div>
 ${r.platform === "web" ? `<div class="meta">Deterministic basis: ${r.deterministicFindingCounts?.total || 0} deterministic finding(s); ${r.sampledFindingCounts?.total || 0} sampled probe finding(s) are advisory.</div>` : ""}
+${r.capture ? `<div class="meta">Captured at ${esc([r.capture.device, r.capture.viewport ? `${r.capture.viewport.width}×${r.capture.viewport.height}` : null, r.capture.deviceScaleFactor ? `@${r.capture.deviceScaleFactor}x` : null].filter(Boolean).join(" "))} — every screenshot on this page shares these conditions.</div>` : ""}
 <div class="headline">${esc(r.headline)}</div>
 ${r.credentialWarning ? `<div class="warning">${esc(r.credentialWarning)}</div>` : ""}
 ${scopeHtml}

package/mcp-server/src/index.js

@@ -1721,9 +1721,10 @@ async function writeRunUiMap({ markersPath, platform, target, runId, outDir }) {
 /** One-line "3 buttons · 2 fields · 8 text" breakdown of an accessibility element list. */
 function elementBreakdown(elements) {
   const has = (e, ...pats) => pats.some((p) => String(e.type || "").includes(p));
-  let buttons = 0, fields = 0, texts = 0, cells = 0, other = 0;
+  let buttons = 0, links = 0, fields = 0, texts = 0, cells = 0, other = 0;
   for (const e of elements || []) {
-    if (has(e, "Button", "rawValue: 9", "Link", "rawValue: 39")) buttons++;
+    if (has(e, "Link", "rawValue: 39")) links++;
+    else if (has(e, "Button", "rawValue: 9")) buttons++;
     else if (has(e, "TextField", "rawValue: 49", "rawValue: 50", "SecureTextField")) fields++;
     else if (has(e, "StaticText", "rawValue: 48")) texts++;
     else if (has(e, "Cell", "rawValue: 75")) cells++;
@@ -1731,6 +1732,7 @@ function elementBreakdown(elements) {
   }
   return [
     buttons && `${buttons} button${buttons > 1 ? "s" : ""}`,
+    links && `${links} link${links > 1 ? "s" : ""}`,
     fields && `${fields} field${fields > 1 ? "s" : ""}`,
     cells && `${cells} cell${cells > 1 ? "s" : ""}`,
     texts && `${texts} text`,

package/mcp-server/src/report.js

@@ -30,6 +30,7 @@ export function parseOcqaMarkers(markersFilePath) {
   const transitions = [];
   const issues = [];
   let complete = null;
+  let context = null;
 
   for (const line of lines) {
     if (!line.startsWith("OCQA_")) continue;
@@ -57,6 +58,7 @@ export function parseOcqaMarkers(markersFilePath) {
     if (category === "TRANSITION") transitions.push(parsed);
     if (category === "ISSUE") issues.push(parsed);
     if (category === "COMPLETE") complete = parsed;
+    if (category === "CONTEXT") context = parsed;
   }
 
   return {
@@ -72,6 +74,7 @@ export function parseOcqaMarkers(markersFilePath) {
       )
     ),
     complete,
+    context,
     actions,
     recentActions: actions.slice(-5),
     recentTransitions: transitions.slice(-5),
@@ -101,7 +104,11 @@ export const ISSUE_CATEGORY = {
   explore_timeout: "performance_timeout",
 };
 export const CRITICAL_ISSUE_TYPES = new Set(["crash"]);
-export const WEB_SAMPLED_ISSUE_TYPES = new Set(["unresponsive_element", "outbound_unavailable"]);
+// outbound_unavailable graduated to the deterministic tier in policy v4: since 0.17.6 the
+// outbound audit renders each link in the live browser, so the unavailable-shell phrase match
+// is a stable observation of the page, not a sampled probe — and a dead social link is exactly
+// the broken-link class the web fail-on default exists to block.
+export const WEB_SAMPLED_ISSUE_TYPES = new Set(["unresponsive_element"]);
 
 export function severityRank(s) {
   return { critical: 0, high: 1, medium: 2, low: 3 }[s] ?? 4;
@@ -401,6 +408,12 @@ export function buildQaReport(markersFilePath, { platform = "ios", target = null
         ...(action.reason ? { reason: action.reason } : {}),
       })),
     evidence: { markers: base.relativeMarkersFilePath },
+    // Capture conditions shared by every screenshot/marker in this run (web: from the driver's
+    // CONTEXT marker). A baseline diff across different captures is a layout comparison, not a
+    // regression signal — consumers must be able to see that.
+    capture: base.context && typeof base.context === "object"
+      ? { device: base.context.device || null, viewport: base.context.viewport || null, deviceScaleFactor: base.context.deviceScaleFactor ?? null }
+      : null,
     uiMap: null,
     comparison: null,
     checkedFor,
@@ -548,7 +561,7 @@ export const GATE_EXIT = { pass: 0, fail: 1, error: 2, inconclusive: 3 };
 // finding at or above that severity, and the CLI defaults web targets to `medium` — a 404 in the
 // nav is the release blocker on a website, and a field-tested green PASS over six deterministic
 // findings was exactly the dishonest verdict this product refuses to render.
-export const GATE_POLICY_VERSION = "3";
+export const GATE_POLICY_VERSION = "4";
 
 // Pure gate evaluator: frozen evidence + policy → a GateRun decision. Extracted verbatim from the
 // former inline logic in ci-report.js so the `[char]` characterization tests keep passing — the

package/mcp-server/src/web-explorer.js

@@ -576,7 +576,12 @@ export async function exploreWeb({ url, maxActions = 40, timeoutSec = 300, outDi
 
   const { chromium, devices } = await loadPlaywright();
   const browser = await chromium.launch(webBrowserLaunchOptions(process.env, { watch }));
-  const context = await browser.newContext(webContextOptions({ device, viewport, devices }));
+  const captureProfile = webContextOptions({ device, viewport, devices });
+  // Evidence is only comparable when the capture conditions are on record: a desktop run and a
+  // phone run legitimately disagree about which nav links exist, and a baseline diff across
+  // them must be able to say so instead of reporting "resolved".
+  emit("CONTEXT", { ...(String(device || "").trim() ? { device: String(device).trim() } : {}), viewport: captureProfile.viewport, deviceScaleFactor: captureProfile.deviceScaleFactor ?? 1 });
+  const context = await browser.newContext(captureProfile);
   await installWebListenerTracking(context);
   if (watch) await installWebWatchUi(context);
   const page = await context.newPage();
@@ -1040,7 +1045,7 @@ export async function exploreWeb({ url, maxActions = 40, timeoutSec = 300, outDi
         await auditPage.waitForTimeout(400); // let client-rendered shells paint their copy
         const text = await auditPage.evaluate(() => (document.body && document.body.innerText || "").slice(0, 120000)).catch(() => "");
         const phrase = webUnavailableShellPhrase(text);
-        if (phrase) issue("outbound_unavailable", "low", `Outbound link returns 200 but shows "${phrase}": ${href.slice(0, 100)}`, meta.screen, href, meta.sourceUrl);
+        if (phrase) issue("outbound_unavailable", "medium", `Outbound link returns 200 but shows "${phrase}": ${href.slice(0, 100)}`, meta.screen, href, meta.sourceUrl);
       }
       await auditPage.close().catch(() => {});
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aarwitz/tapp",
-  "version": "0.17.6",
+  "version": "0.17.7",
   "mcpName": "io.github.aarwitz/tapp",
   "description": "Let coding agents verify UI changes on real iOS, Android, and web surfaces, then enforce reviewed proof in deterministic CI.",
   "license": "MIT",