@aarwitz/tapp 0.17.6 → 0.17.8

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "tapp",
   "description": "Give Claude hands and eyes on iOS, Android, and web apps, with exploration, replayable flows, evidence, and deterministic CI gates.",
-  "version": "0.17.6",
+  "version": "0.17.8",
   "author": {
     "name": "Aaron Horowitz",
     "url": "https://github.com/aarwitz"
@@ -24,7 +24,7 @@
       "command": "npx",
       "args": [
         "-y",
-        "@aarwitz/tapp@0.17.6",
+        "@aarwitz/tapp@0.17.8",
         "mcp"
       ],
       "cwd": "${CLAUDE_PROJECT_DIR}"

package/AGENTS.md

@@ -133,6 +133,10 @@ advisory). Report the finding counts and coverage; do not invent a scalar or a s
   (e.g. `["--uitesting"]` if the app has a test bypass), and/or `appLaunchEnv` (e.g. a staging
   backend URL). If the result shows `inputFieldsEncountered` and you have no credentials, **ask
   the user** for them rather than re-running blind.
+- Credential surfaces are catalogue-only without credentials, on every platform: with no
+  `testEmail`/`testPassword` supplied, exploration records a login/signup form's fields but does
+  not type into them, submit them, or open recovery/third-party-auth flows — a bare-app run may
+  be pointed at production. Supplying credentials is the explicit opt-in that enables sign-in.
 - Diff two runs: pass the previous run's `findings` as `baselineFindings` → you get a
   `regression` **comparison** (`new` / `persisting` / `resolved`) — an observation, not a gate. To gate
   a merge on regressions, run the CI gate (`tapp ci` / the GitHub Action).

package/Harness/OCQAHarnessUITests/ExplorerTests.swift

@@ -1327,10 +1327,16 @@ class ExplorerTests: XCTestCase {
             beelineToTarget(target: targetScreen, route: route, actionCount: &actionCount, maxActions: maxActions)
         }
 
+        // Honest stop accounting: "action-budget" only survives when the while-condition itself
+        // ends the loop; every break records what actually stopped exploration so the report can
+        // say "navigation-trap" or "frontier-drained" instead of blessing a 15/20 run "completed".
+        var explorationStopCause = "action-budget"
+        var leftAppObservations = 0
         while actionCount < maxActions {
             // Subtract time spent paused for interactive input so human typing never eats the budget.
             if Date().timeIntervalSince(startTime) - totalWaitSeconds > timeoutSeconds {
                 print("OCQA_STATE:timeout_reached")
+                explorationStopCause = "time-budget"
                 break
             }
 
@@ -1374,6 +1380,32 @@ class ExplorerTests: XCTestCase {
                 }
             }
 
+            // ---- Left-app handoff: an observation, not a defect ----
+            // A tapped control can legitimately hand the user to a system surface or another
+            // app (mail composer, Settings, App Store, share sheet). Without this check the
+            // next tree read sees a backgrounded app, titles the screen "Unknown", and the
+            // hang/blank detectors file false HIGH findings (field report № 6 #26). Record
+            // the handoff against the action that caused it, come back, and keep exploring.
+            if app.state != .runningForeground {
+                leftAppObservations += 1
+                let causeAction = pendingTransitionFrom?.actionKey ?? "previous action"
+                let causeScreen = pendingTransitionFrom?.title ?? "Unknown"
+                print("OCQA_ACTION:{\"type\":\"left_app\",\"target\":\"\(escapeJSON(causeAction))\",\"screen\":\"\(escapeJSON(causeScreen))\",\"step\":\(actionCount),\"narrative\":\"\(escapeJSON("'\(causeAction)' handed off to a system surface or another app — returning to the app under test."))\"}")
+                pendingTransitionFrom = nil
+                app.activate()
+                _ = app.wait(for: .runningForeground, timeout: 5)
+                Thread.sleep(forTimeInterval: 1.0)
+                if app.state == .runningForeground {
+                    emitProgress(action: actionCount, maxActions: maxActions, states: visitedStates.count)
+                    continue
+                }
+                if leftAppObservations >= 3 {
+                    explorationStopCause = "left-app-unrecovered"
+                    break
+                }
+                continue
+            }
+
             var elements = readUITree(app)
             if elements.isEmpty {
                 // App may have gone to background, crashed, or be unresponsive.
@@ -1399,6 +1431,7 @@ class ExplorerTests: XCTestCase {
                             print("OCQA_ISSUE:{\"type\":\"crash\",\"severity\":\"critical\",\"title\":\"\(escapeJSON("App crashed during \(where_)"))\",\"screen\":\"\(escapeJSON(where_))\",\"step\":\(actionCount)}")
                         }
                     }
+                    explorationStopCause = "app-crashed"
                     break
                 }
             }
@@ -1528,6 +1561,7 @@ class ExplorerTests: XCTestCase {
                     emitProgress(action: actionCount, maxActions: maxActions, states: visitedStates.count)
                     continue
                 }
+                explorationStopCause = "stuck-no-progress"
                 break
             }
 
@@ -1554,6 +1588,7 @@ class ExplorerTests: XCTestCase {
             // for an impossible back path or expecting credentials to persist after logout.
             if authSucceeded && detectedInputs.contains(where: { $0.secure }) {
                 print("OCQA_STATE:auth_cycle_complete screen=\(escapedTitle) step=\(actionCount)")
+                explorationStopCause = "auth-cycle-complete"
                 break
             }
 
@@ -1844,6 +1879,7 @@ class ExplorerTests: XCTestCase {
                     // All tab positions tried — truly stuck
                     print("OCQA_STATE:truly_stuck_dead_end screen=\(escapedTitle) step=\(actionCount)")
                     emitNavigationTrap(titleStr: titleStr, escapedTitle: escapedTitle, step: actionCount, reported: &reportedIssueKeys, issues: &issues)
+                    explorationStopCause = "navigation-trap"
                     break
                 }
 
@@ -2190,6 +2226,7 @@ class ExplorerTests: XCTestCase {
                     // Truly stuck — break
                     print("OCQA_STATE:truly_stuck screen=\(escapedTitle) step=\(actionCount)")
                     emitNavigationTrap(titleStr: titleStr, escapedTitle: escapedTitle, step: actionCount, reported: &reportedIssueKeys, issues: &issues)
+                    explorationStopCause = "navigation-trap"
                     break
                 }
             }
@@ -2201,6 +2238,23 @@ class ExplorerTests: XCTestCase {
                                             persistentThreshold: persistentThreshold,
                                             screenBounds: screenBounds)
 
+            // ---- Credential-surface policy: catalogue, don't exercise (parity with web). ----
+            // Without explicitly supplied credentials — or interactive overrides for this screen —
+            // a login/signup surface is evidence, not a playground: typing sample values and
+            // tapping Sign In / Forgot Password fires real requests against whatever backend the
+            // build points at (production, for a bare-app run). Fields are still catalogued into
+            // STATE, the report says sign-in was not checked, and navigation away stays allowed.
+            let credentialFlowLocked = (screenRole == "login" || screenRole == "signup" || detectedInputs.contains { $0.secure })
+                && (testEmail.isEmpty || testPassword.isEmpty)
+                && !detectedInputs.contains(where: { !hasNoOverride(key: $0.key, screen: titleStr, in: inputOverrides) })
+            if credentialFlowLocked {
+                if !reportedIssueKeys.contains("credlock:\(titleStr)") {
+                    reportedIssueKeys.insert("credlock:\(titleStr)")
+                    print("OCQA_STATE:credential_form_catalogued screen=\(escapedTitle) fields=\(detectedInputs.count)")
+                }
+                sorted = sorted.filter { !isTextField($0.type) && !isCredentialFlowControl($0) }
+            }
+
             // ---- Form-completion steering ----
             // A half-filled form is one tap from progress (submit) or oblivion (Close/Cancel
             // discards everything typed). While the screen has unfilled text fields, fill the
@@ -2214,8 +2268,8 @@ class ExplorerTests: XCTestCase {
             // screen or it abandons a form whose remaining field the pool has dropped (observed:
             // signup's Confirm Password missing from the pool while hittable in the tree).
             // Termination is per-field via typedFieldKeys, so this can never loop.
-            let treeHasFields = elements.contains(where: { isTextField($0.type) })
-            let unfilledFields = elements.filter {
+            let treeHasFields = !credentialFlowLocked && elements.contains(where: { isTextField($0.type) })
+            let unfilledFields = credentialFlowLocked ? [SimpleElement]() : elements.filter {
                 isTextField($0.type) && $0.isEnabled && $0.isHittable
                     && fieldLooksUnfilled($0, screen: titleStr, typedKeys: typedFieldKeys)
             }
@@ -2287,7 +2341,7 @@ class ExplorerTests: XCTestCase {
                 if !numericCells.isEmpty { sorted = others + numericCells }
             }
 
-            guard let target = sorted.first else { break }
+            guard let target = sorted.first else { explorationStopCause = "frontier-drained"; break }
 
             if !isTextField(target.type) {
                 dismissKeyboardIfNeeded()
@@ -2360,6 +2414,7 @@ class ExplorerTests: XCTestCase {
                                        desc: "The app terminated after \(actionType) '\(targetName)' on '\(titleStr)' and did not recover on relaunch."))
                         print("OCQA_ISSUE:{\"type\":\"crash\",\"severity\":\"critical\",\"title\":\"\(escapeJSON("App crashed after \(actionType) on \(titleStr)"))\",\"screen\":\"\(escapedTitle)\",\"control\":\"\(escapedTarget)\",\"step\":\(actionCount)}")
                     }
+                    explorationStopCause = "app-crashed"
                     break
                 }
                 print("OCQA_STATE:app_reactivated step=\(actionCount)")
@@ -2479,6 +2534,7 @@ class ExplorerTests: XCTestCase {
                                        desc: "App left foreground after: \(actionDesc)"))
                         print("OCQA_ISSUE:{\"type\":\"crash\",\"severity\":\"critical\",\"title\":\"App not recoverable\",\"action\":\"\(escapedTarget)\",\"step\":\(actionCount)}")
                     }
+                    explorationStopCause = "app-crashed"
                     break
                 }
                 print("OCQA_STATE:app_reactivated step=\(actionCount)")
@@ -2529,7 +2585,7 @@ class ExplorerTests: XCTestCase {
         let uniqueScreens = screenTitles.values
         let screenList = Array(Set(uniqueScreens)).sorted().joined(separator: ",")
         didEmitComplete = true
-        print("OCQA_COMPLETE:{\"actions\":\(actionCount),\"states\":\(visitedStates.count),\"issues\":\(issues.count),\"screens\":\"\(screenList)\"}")
+        print("OCQA_COMPLETE:{\"actions\":\(actionCount),\"states\":\(visitedStates.count),\"issues\":\(issues.count),\"screens\":\"\(screenList)\",\"stop\":\"\(explorationStopCause)\",\"timedOut\":\(explorationStopCause == "time-budget" ? "true" : "false")}")
 
         let finalScreenshot = app.screenshot()
         let finalAttachment = XCTAttachment(screenshot: finalScreenshot)
@@ -3380,6 +3436,19 @@ class ExplorerTests: XCTestCase {
 
     /// Dismiss-style controls (Close/Cancel/X) that discard a form in progress. Deprioritized —
     /// never excluded — while unfilled fields remain, so they stay available as an escape hatch.
+    /// Any control that advances a credential flow: submitting, account recovery, account
+    /// creation, or third-party auth. Used by the credential-surface lock — none of these may
+    /// fire when no credentials were supplied, because each one sends real traffic to the
+    /// app's live backend. Navigation controls (tabs, Skip, Continue as guest) do not match.
+    private func isCredentialFlowControl(_ element: SimpleElement) -> Bool {
+        if isLikelySubmitControl(element) { return true }
+        let text = (element.label + " " + element.identifier).lowercased()
+        let flowTokens = ["forgot", "reset password", "recover", "with apple", "with google",
+                          "with facebook", "create account", "sign up", "verification code",
+                          "magic link", "resend"]
+        return flowTokens.contains(where: { text.contains($0) })
+    }
+
     private func isDismissControl(_ element: SimpleElement) -> Bool {
         let label = element.label.trimmingCharacters(in: .whitespacesAndNewlines).lowercased()
         let id = element.identifier.trimmingCharacters(in: .whitespacesAndNewlines).lowercased()

package/README.md

@@ -29,10 +29,11 @@ Supported targets:
 |---|---|
 | iOS | Simulator on macOS with Xcode; driven through XCUITest and accessibility |
 | Android | Connected emulator or device with `adb`; driven through UIAutomator |
-| Web (beta) | Owned browser app in Playwright Chromium |
+| Web | Owned browser app in Playwright Chromium |
+| Windows desktop | WPF, WinForms, and WinUI apps through Windows UI Automation — early runs are set up through the pilot |
 
-Windows can host Android and web testing when their prerequisites are installed. Windows desktop
-UI applications such as WinForms, WPF, and WinUI are not currently Tapp targets.
+Windows hosts Android and web testing when their prerequisites are installed, and is the home of
+the Windows desktop target.
 
 ## Give Tapp to your coding agent
 
@@ -173,7 +174,7 @@ npx -y @aarwitz/tapp@latest apps            # what's installed on the simulator
 npx -y @aarwitz/tapp@latest build [dir]     # just build + install (scheme auto-detected)
 ```
 
-Web (beta): `npx -y @aarwitz/tapp@latest explore http://localhost:3000` *(one-time setup:
+Web: `npx -y @aarwitz/tapp@latest explore http://localhost:3000` *(one-time setup:
 `npm i -g playwright && npx playwright install chromium`)*. Add `--watch` to open Tapp's controlled,
 isolated Chromium window and follow its clicks with an on-page pointer/action label. Tapp hides that
 watch UI from saved evidence screenshots and does not automate your personal/default browser profile.
@@ -348,7 +349,7 @@ jobs:
     timeout-minutes: 45
     steps:
       - uses: actions/checkout@v4
-      - uses: aarwitz/tapp@v0.17.6 # or pin the reviewed release commit SHA
+      - uses: aarwitz/tapp@v0.17.8 # or pin the reviewed release commit SHA
         with:
           project: MyApp.xcodeproj # or MyApp.xcworkspace
           scheme: MyApp
@@ -398,7 +399,7 @@ Android CI runs on Linux with an emulator/device already connected. The Action c
 or accept a prebuilt one:
 
 ```yaml
-- uses: aarwitz/tapp@v0.17.6 # or pin the reviewed release commit SHA
+- uses: aarwitz/tapp@v0.17.8 # or pin the reviewed release commit SHA
   with:
     platform: android
     android-app-id: com.acme.app
@@ -437,7 +438,7 @@ Every driver speaks one protocol: structured `OCQA_*` markers (state, actions, i
 transitions) that the engine parses into trees, screenshots, findings, coverage, and the gate outcome.
 On **iOS**, a generic **XCUITest harness** attaches to any app by bundle id — no SDK or app code
 changes — and acts through the accessibility tree. On **Android**, ADB + UIAutomator provide the
-same black-box driver contract. On **web** (beta), a deterministic **Playwright crawler** does the
+same black-box driver contract. On **web**, a deterministic **Playwright crawler** does the
 same in a real browser. Same detectors' spirit,
 same dedup, same regression gate, same honest `pass`/`fail`/`inconclusive` outcome. Core exploration,
 evidence collection, and gate evaluation run entirely locally — no telemetry, nothing phones home. Optional AI

package/bin/tapp.js

@@ -270,10 +270,10 @@ function safeCommandUsage(verb) {
     shot: "tapp shot [--out FILE]",
     apps: "tapp apps",
     build: "tapp build [repo] [--scheme NAME] [--configuration NAME]",
-    flow: "tapp flow example\ntapp flow validate FILE [--platform PLATFORM] [--map FILE]\ntapp flow run FILE [--actor NAME] [--email VALUE] [--password VALUE] [--device \"iPhone 13\"] [--viewport 390x844]",
+    flow: "tapp flow example\ntapp flow validate FILE [--platform PLATFORM] [--map FILE]\ntapp flow run FILE [--actor NAME] [--email VALUE] [--password VALUE] [--device \"iPhone 13\"] [--viewport 390x844]\n  Exit codes: 0 replay passed · 1 replay failed · 2 infrastructure/usage error",
     task: "tapp task validate FILE [--platform PLATFORM] [--map FILE]\ntapp task compile FILE --platform PLATFORM [--inputs JSON] [--out FILE]\ntapp task run FILE --platform PLATFORM [--url URL|--bundle-id ID|--app-id ID] [--inputs JSON]",
-    contract: "tapp contract validate FILE [--platform PLATFORM] [--map FILE]\ntapp contract compile FILE --platform PLATFORM [--out FILE]\ntapp contract run FILE --platform PLATFORM [--url URL|--bundle-id ID|--app-id ID]",
-    scenario: "tapp scenario validate FILE [--project-dir DIR]\ntapp scenario run FILE --platform web --url URL [--project-dir DIR]",
+    contract: "tapp contract validate FILE [--platform PLATFORM] [--map FILE]\ntapp contract compile FILE --platform PLATFORM [--out FILE]\ntapp contract run FILE --platform PLATFORM [--url URL|--bundle-id ID|--app-id ID]\n  Exit codes: 0 contract held · 1 contract failed · 2 infrastructure/usage error",
+    scenario: "tapp scenario validate FILE [--project-dir DIR]\ntapp scenario run FILE --platform web --url URL [--project-dir DIR]\n  Exit codes: 0 scenario passed · 1 scenario failed · 2 infrastructure/usage error",
     map: "tapp map build MARKERS [--platform PLATFORM] [--out FILE] [--replace]\ntapp map inspect [FILE]\ntapp map diff BEFORE AFTER [--comparable]",
     pr: "tapp pr plan [--base REF|--changed-files FILE] [--head REF] [--platform PLATFORM] [--out FILE]\ntapp pr gate PLAN [gate target/options]\ntapp pr adopt PLAN --item ID [--project-dir DIR]",
     plan: "tapp plan show [FILE]\ntapp plan review [FILE] --approve NAME[,NAME] --reject NAME[,NAME] --defer NAME[,NAME]\ntapp plan generate|validate|promote [FILE] [options]",
@@ -282,7 +282,7 @@ function safeCommandUsage(verb) {
     actor: "tapp actor set NAME --email-env ENV --password-env ENV [--replace] [--project-dir DIR]\ntapp actor list [repo]",
     app: "tapp app [repo] [--no-open] [--port PORT]",
     report: "tapp report [captureId|latest]",
-    doctor: "tapp doctor",
+    doctor: "tapp doctor [--json]\n  Exit codes: 0 environment healthy · 1 blocked (fix ❌ items)",
     install: "tapp install",
     mcp: "tapp mcp",
   };
@@ -1425,37 +1425,51 @@ switch (command) {
   }
 
   case "doctor": {
-    console.log(`tapp v${pkg.version} — doctor\n`);
+    const { flags: doctorFlags } = parseVerbArgs(rest);
+    const jsonMode = doctorFlags.json === true;
+    const report = { version: pkg.version, healthy: true, node: {}, python3: {}, disk: {},
+      platforms: { ios: {}, android: {}, web: {} }, home: tappHome };
+    const say = (line) => { if (!jsonMode) console.log(line); };
+    const sayOk = (label, detail = "") => { if (!jsonMode) ok(label, detail); };
+    const sayBad = (label, detail = "") => { if (!jsonMode) bad(label, detail); };
+    say(`tapp v${pkg.version} — doctor\n`);
     let healthy = true;
 
     const major = Number(process.versions.node.split(".")[0]);
-    major >= 18 ? ok("Node", `v${process.versions.node}`) : (bad("Node", `v${process.versions.node} (need >= 18)`), (healthy = false));
+    report.node = { ok: major >= 18, version: process.versions.node };
+    major >= 18 ? sayOk("Node", `v${process.versions.node}`) : (sayBad("Node", `v${process.versions.node} (need >= 18)`), (healthy = false));
 
     const python = run("python3", ["--version"]);
-    python.code === 0 ? ok("python3", `${python.stdout} (used by Flows)`) : bad("python3", "not found — Flow replay needs python3 + pyyaml (everything else works)");
+    report.python3 = { ok: python.code === 0, version: python.code === 0 ? python.stdout : null };
+    python.code === 0 ? sayOk("python3", `${python.stdout} (used by Flows)`) : sayBad("python3", "not found — Flow replay needs python3 + pyyaml (everything else works)");
 
     const { storagePreflight } = await import(path.join(packageRoot, "mcp-server", "src", "environment-preflight.js"));
     const storage = storagePreflight(tappHome);
-    if (storage.level === "blocked") { bad("Disk space", storage.message); healthy = false; }
-    else if (storage.level === "warning") console.log(`  ⚠️  Disk space — ${storage.message}`);
-    else if (storage.level === "ok") ok("Disk space", storage.message);
-    else console.log(`  ⬜ Disk space — ${storage.message || "could not be checked"}`);
+    report.disk = { level: storage.level, message: storage.message || null };
+    if (storage.level === "blocked") { sayBad("Disk space", storage.message); healthy = false; }
+    else if (storage.level === "warning") say(`  ⚠️  Disk space — ${storage.message}`);
+    else if (storage.level === "ok") sayOk("Disk space", storage.message);
+    else say(`  ⬜ Disk space — ${storage.message || "could not be checked"}`);
 
-    console.log("\n  Platforms:");
+    say("\n  Platforms:");
     if (process.platform === "darwin") {
       const xcode = run("xcode-select", ["-p"]);
       const simctl = run("xcrun", ["simctl", "help"]);
       if (xcode.code === 0 && simctl.code === 0) {
         const ver = run("xcodebuild", ["-version"]).stdout.split("\n")[0];
         const booted = bootedSims();
-        ok("iOS", `${ver || "Xcode"}; ${booted.length ? `${booted[0].name} booted` : "no simulator booted yet"}`);
         const xctestrun = harnessXctestrun();
-        xctestrun ? ok("iOS harness cache", xctestrun) : console.log("  ⬜ iOS harness cache — builds on first use (or: npx -y @aarwitz/tapp@latest install)");
+        report.platforms.ios = { available: true, xcode: ver || "Xcode",
+          bootedSimulator: booted.length ? booted[0].name : null, harnessCache: Boolean(xctestrun) };
+        sayOk("iOS", `${ver || "Xcode"}; ${booted.length ? `${booted[0].name} booted` : "no simulator booted yet"}`);
+        xctestrun ? sayOk("iOS harness cache", xctestrun) : say("  ⬜ iOS harness cache — builds on first use (or: npx -y @aarwitz/tapp@latest install)");
       } else {
-        console.log("  ⬜ iOS — unavailable (install Xcode + simulator runtime)");
+        report.platforms.ios = { available: false, reason: "install Xcode + simulator runtime" };
+        say("  ⬜ iOS — unavailable (install Xcode + simulator runtime)");
       }
     } else {
-      console.log(`  ⬜ iOS — requires macOS (this host: ${process.platform})`);
+      report.platforms.ios = { available: false, reason: `requires macOS (this host: ${process.platform})` };
+      say(`  ⬜ iOS — requires macOS (this host: ${process.platform})`);
     }
 
     const { resolveAdbPath, resolveAndroidSdkRoot } = await import(path.join(packageRoot, "mcp-server", "src", "android-driver.js"));
@@ -1463,17 +1477,20 @@ switch (command) {
     const adb = adbPath ? run(adbPath, ["devices"]) : { code: 1, stdout: "" };
     if (adb.code === 0) {
       const devices = adb.stdout.split(/\r?\n/).slice(1).filter((line) => /\sdevice(?:\s|$)/.test(line));
-      ok("Android", devices.length ? `${devices.length} connected emulator/device` : "adb available; no device connected");
+      report.platforms.android = { adb: true, devicesConnected: devices.length };
+      sayOk("Android", devices.length ? `${devices.length} connected emulator/device` : "adb available; no device connected");
     } else {
-      console.log("  ⬜ Android — adb not found (install Android SDK platform-tools)");
+      report.platforms.android = { adb: false, devicesConnected: 0 };
+      say("  ⬜ Android — adb not found (install Android SDK platform-tools)");
     }
     const { resolveJavaRuntime } = await import(path.join(packageRoot, "mcp-server", "src", "environment-preflight.js"));
     const java = resolveJavaRuntime();
     const androidSdkRoot = resolveAndroidSdkRoot();
-    if (java && androidSdkRoot) ok("Android source builds", `${java.version || java.javaHome}; SDK ${androidSdkRoot}`);
+    report.platforms.android.sourceBuilds = Boolean(java && androidSdkRoot);
+    if (java && androidSdkRoot) sayOk("Android source builds", `${java.version || java.javaHome}; SDK ${androidSdkRoot}`);
     else {
       const missing = [!java ? "JDK 17" : "", !androidSdkRoot ? "Android SDK root" : ""].filter(Boolean).join(" and ");
-      console.log(`  ⬜ Android source builds — install/configure ${missing} (prebuilt APK testing still works)`);
+      say(`  ⬜ Android source builds — install/configure ${missing} (prebuilt APK testing still works)`);
     }
 
     try {
@@ -1481,18 +1498,26 @@ switch (command) {
       let executable = "";
       try { executable = chromium.executablePath(); } catch { /* report the missing browser below */ }
       if (executable && fs.existsSync(executable)) {
-        ok("Web", `Playwright + Chromium (${executable})`);
+        report.platforms.web = { available: true, chromium: executable };
+        sayOk("Web", `Playwright + Chromium (${executable})`);
       } else {
-        console.log("  ⬜ Web — Playwright installed; Chromium browser missing (run: npx playwright install chromium)");
+        report.platforms.web = { available: false, reason: "Chromium browser missing (run: npx playwright install chromium)" };
+        say("  ⬜ Web — Playwright installed; Chromium browser missing (run: npx playwright install chromium)");
       }
     } catch {
-      console.log("  ⬜ Web — install Playwright in the app workspace: npm install -D playwright && npx playwright install chromium");
+      report.platforms.web = { available: false, reason: "Playwright not installed" };
+      say("  ⬜ Web — install Playwright in the app workspace: npm install -D playwright && npx playwright install chromium");
     }
 
-    console.log(`\n  Home: ${tappHome}`);
-    console.log(healthy
-      ? "\nReady. Start with:\n  npx -y @aarwitz/tapp@latest open [target]\n  npx -y @aarwitz/tapp@latest explore [target]"
-      : "\nFix the ❌ items above, then re-run: npx -y @aarwitz/tapp@latest doctor");
+    report.healthy = healthy;
+    if (jsonMode) {
+      console.log(JSON.stringify(report, null, 2));
+    } else {
+      console.log(`\n  Home: ${tappHome}`);
+      console.log(healthy
+        ? "\nReady. Start with:\n  npx -y @aarwitz/tapp@latest open [target]\n  npx -y @aarwitz/tapp@latest explore [target]"
+        : "\nFix the ❌ items above, then re-run: npx -y @aarwitz/tapp@latest doctor");
+    }
     process.exit(healthy ? 0 : 1);
   }
 

package/docs/scenarios.md

@@ -74,7 +74,7 @@ tapp ci --platform web --url http://127.0.0.1:4180 \
 GitHub Action:
 
 ```yaml
-- uses: aarwitz/tapp@v0.17.6 # or pin the reviewed release commit SHA
+- uses: aarwitz/tapp@v0.17.8 # or pin the reviewed release commit SHA
   with:
     platform: web
     url: http://127.0.0.1:4180

package/mcp-server/src/application-model.js

@@ -913,7 +913,7 @@ function invalidatedGeneration(generation) {
   };
 }
 
-function mergePlanDecisions(next, prior, { invalidateValidation = false } = {}) {
+export function mergePlanDecisions(next, prior, { invalidateValidation = false } = {}) {
   if (!prior || prior.schemaVersion !== 1 || prior.kind !== "tapp-release-plan") return next;
   const priorItems = new Map((prior.items || []).map((item) => [item.id, item]));
   const priorByNameScope = new Map();

package/mcp-server/src/ci-report.js

@@ -178,6 +178,9 @@ function loadBaseline(baselinePath) {
     actionsPerformed: parsed.actionsPerformed || 0,
     platform: parsed.baselineIdentity?.platform || parsed.platform || null,
     targetKey: parsed.baselineIdentity?.targetId || parsed.targetKey || null,
+    // 0.17.7 gate JSONs briefly published the stamp as `capture`; explore JSONs use that key
+    // for the evidence-folder record. Accept the old key only when it is actually a stamp.
+    captureContext: parsed.captureContext || (parsed.capture?.viewport ? parsed.capture : null),
   };
 }
 
@@ -399,6 +402,10 @@ function renderMarkdown(report, regression, flows, scenarios, contracts, prPlan,
     lines.push(`### Since baseline — ${regFailed ? "🔴 regression gate FAILED" : "🟢 regression gate passed"}`);
     lines.push(`+${regression.counts.new} new · ${regression.counts.persisting} persisting · ${regression.counts.resolved} resolved` +
       (regFailed ? ` — **${newCritical} new critical, ${newHigh} new high**` : ""));
+    if (regression.captureMismatch) {
+      const describe = (c) => [c?.device, c?.viewport ? `${c.viewport.width}x${c.viewport.height}` : null, c?.deviceScaleFactor ? `@${c.deviceScaleFactor}x` : null].filter(Boolean).join(" ") || "unknown";
+      lines.push(`⚠️ **Capture mismatch**: baseline was captured at ${describe(regression.captureMismatch.baseline)}, this run at ${describe(regression.captureMismatch.current)}. "Resolved" findings may reflect layout differences at the new size, not fixes — re-baseline at the same device/viewport to compare honestly.`);
+    }
     for (const f of regression.newFindings) {
       lines.push(`- NEW ${SEV_ICON[f.severity] || ""} ${f.severity}: ${f.title} (${f.screen ?? "—"})`);
     }
@@ -491,7 +498,11 @@ function renderMarkdown(report, regression, flows, scenarios, contracts, prPlan,
   lines.push(`**Gate (${gate.policy}): ${badge}**${gate.reasons.length ? " — " + gate.reasons.join("; ") : ""}${ignoredNote}`);
   // The gate is only authoritative about what it actually ran — record the scope explicitly.
   const rev = gate.revision?.sha ? `${String(gate.revision.sha).slice(0, 12)}${gate.revision.dirty ? "-dirty" : ""}` : "unknown";
-  lines.push(`_target: ${gate.target || "—"} · revision: ${rev} · policy: ${gate.policy} v${gate.policyVersion || "?"}_`);
+  const captured = report.captureContext
+    ? ` · capture: ${[report.captureContext.device, report.captureContext.viewport ? `${report.captureContext.viewport.width}x${report.captureContext.viewport.height}` : null, report.captureContext.deviceScaleFactor ? `@${report.captureContext.deviceScaleFactor}x` : null].filter(Boolean).join(" ")}`
+    : "";
+  const stableId = report.targetKey && report.targetKey !== gate.target ? ` (${report.targetKey})` : "";
+  lines.push(`_target: ${gate.target || "—"}${stableId} · revision: ${rev} · policy: ${gate.policy} v${gate.policyVersion || "?"}${captured}_`);
   if (Array.isArray(gate.checked) && gate.checked.length) lines.push(`_Checked: ${gate.checked.join(" · ")}_`);
   if (Array.isArray(gate.notChecked) && gate.notChecked.length) lines.push(`_Not checked: ${gate.notChecked.join(" · ")}_`);
   return lines.join("\n");
@@ -550,6 +561,12 @@ if (collapsed.length) {
   report.headline = `${collapsed.length} screen(s) regressed vs. baseline (content collapsed or became unreachable).`;
 }
 const regression = computeRegression(report.findings, baseline?.findings ?? null);
+// A baseline captured at a different device/viewport is a layout comparison, not a regression
+// signal: a phone run legitimately hides desktop nav links, so its "resolved" list lies. Keep
+// the diff (new findings still gate) but stamp the mismatch so every consumer can see it.
+if (regression && baseline?.captureContext && report.captureContext && JSON.stringify(baseline.captureContext) !== JSON.stringify(report.captureContext)) {
+  regression.captureMismatch = { baseline: baseline.captureContext, current: report.captureContext };
+}
 const runs = args.flowLogs.map(parseFlowLog);
 const contracts = runs.filter((run) => run.kind === "release-contract");
 const flows = runs.filter((run) => !["scenario", "release-contract"].includes(run.kind));
@@ -572,7 +589,9 @@ try {
 const decision = evaluateGate({ report, regression, flows, scenarios, contracts, prPlan, baseline, failOn: args.failOn });
 const gate = {
   ...decision,
-  target: args.targetKey || report.target || null,
+  // Display identity is the URL/bundle the run exercised; the stable application-model id
+  // stays on report.targetKey for baseline matching (a hash is not a target name).
+  target: report.target || args.targetKey || null,
   revision: gitRevision(args.projectDir),
   checked: report.checkedFor,
   notChecked: report.notChecked,

package/mcp-server/src/html-report.js

@@ -140,6 +140,7 @@ ${r.conditionsNotReached?.length ? `<div><h2>Conditions not reached</h2><ul>${sc
 <h1>${esc(observationBadge(r))} <span class="dim">· ${esc(observationSummary(r))}</span></h1>
 <div class="meta">${esc(label)} · evidence page (observation, not a release decision)</div>
 ${r.platform === "web" ? `<div class="meta">Deterministic basis: ${r.deterministicFindingCounts?.total || 0} deterministic finding(s); ${r.sampledFindingCounts?.total || 0} sampled probe finding(s) are advisory.</div>` : ""}
+${r.captureContext ? `<div class="meta">Captured at ${esc([r.captureContext.device, r.captureContext.viewport ? `${r.captureContext.viewport.width}×${r.captureContext.viewport.height}` : null, r.captureContext.deviceScaleFactor ? `@${r.captureContext.deviceScaleFactor}x` : null].filter(Boolean).join(" "))} — every screenshot on this page shares these conditions.</div>` : ""}
 <div class="headline">${esc(r.headline)}</div>
 ${r.credentialWarning ? `<div class="warning">${esc(r.credentialWarning)}</div>` : ""}
 ${scopeHtml}

package/mcp-server/src/index.js

@@ -1721,9 +1721,10 @@ async function writeRunUiMap({ markersPath, platform, target, runId, outDir }) {
 /** One-line "3 buttons · 2 fields · 8 text" breakdown of an accessibility element list. */
 function elementBreakdown(elements) {
   const has = (e, ...pats) => pats.some((p) => String(e.type || "").includes(p));
-  let buttons = 0, fields = 0, texts = 0, cells = 0, other = 0;
+  let buttons = 0, links = 0, fields = 0, texts = 0, cells = 0, other = 0;
   for (const e of elements || []) {
-    if (has(e, "Button", "rawValue: 9", "Link", "rawValue: 39")) buttons++;
+    if (has(e, "Link", "rawValue: 39")) links++;
+    else if (has(e, "Button", "rawValue: 9")) buttons++;
     else if (has(e, "TextField", "rawValue: 49", "rawValue: 50", "SecureTextField")) fields++;
     else if (has(e, "StaticText", "rawValue: 48")) texts++;
     else if (has(e, "Cell", "rawValue: 75")) cells++;
@@ -1731,6 +1732,7 @@ function elementBreakdown(elements) {
   }
   return [
     buttons && `${buttons} button${buttons > 1 ? "s" : ""}`,
+    links && `${links} link${links > 1 ? "s" : ""}`,
     fields && `${fields} field${fields > 1 ? "s" : ""}`,
     cells && `${cells} cell${cells > 1 ? "s" : ""}`,
     texts && `${texts} text`,

package/mcp-server/src/product-operations.js

@@ -10,6 +10,7 @@ import {
   buildInitArtifacts,
   generateApprovedContractProposals,
   mergeGeneratedTaskProposalValidation,
+  mergePlanDecisions,
   promoteValidatedProposals,
   recordContractProposalValidation,
   recordGeneratedTaskProposalValidation,
@@ -411,6 +412,13 @@ export async function initializeProductProject({
     maxContracts: Number(maxContracts),
   });
   let written = null;
+  // Dry-run must preview the SAME plan a real refresh would produce: merge reviewed
+  // decisions from the existing plan (pure, no writes). Returning the raw regenerated
+  // plan told users their approvals would be lost on refresh (field report № 6 #25).
+  let previewPlan = built.plan;
+  if (mode === "inspect" && fs.existsSync(paths.plan)) {
+    previewPlan = mergePlanDecisions(built.plan, readJson(paths.plan));
+  }
   if (mode !== "inspect") {
     const existing = fs.existsSync(paths.model) || fs.existsSync(paths.plan);
     written = writeInitArtifacts({
@@ -422,7 +430,7 @@ export async function initializeProductProject({
     });
   }
   const requirementScope = scopeProductRequirements(built.model, { selectedTargetId: selectedTarget?.id || "" });
-  return { operation: "initialize", mode, model: built.model, plan: written?.plan || built.plan, exploration, selectedTarget, requirementScope, written, project: readProductProject({ projectDir: root, outDir }) };
+  return { operation: "initialize", mode, model: built.model, plan: written?.plan || previewPlan, exploration, selectedTarget, requirementScope, written, project: readProductProject({ projectDir: root, outDir }) };
 }
 
 function resolvePlan(root, outDir, planPath = "") {

package/mcp-server/src/report.js

@@ -30,6 +30,7 @@ export function parseOcqaMarkers(markersFilePath) {
   const transitions = [];
   const issues = [];
   let complete = null;
+  let context = null;
 
   for (const line of lines) {
     if (!line.startsWith("OCQA_")) continue;
@@ -57,6 +58,7 @@ export function parseOcqaMarkers(markersFilePath) {
     if (category === "TRANSITION") transitions.push(parsed);
     if (category === "ISSUE") issues.push(parsed);
     if (category === "COMPLETE") complete = parsed;
+    if (category === "CONTEXT") context = parsed;
   }
 
   return {
@@ -72,6 +74,7 @@ export function parseOcqaMarkers(markersFilePath) {
       )
     ),
     complete,
+    context,
     actions,
     recentActions: actions.slice(-5),
     recentTransitions: transitions.slice(-5),
@@ -101,7 +104,11 @@ export const ISSUE_CATEGORY = {
   explore_timeout: "performance_timeout",
 };
 export const CRITICAL_ISSUE_TYPES = new Set(["crash"]);
-export const WEB_SAMPLED_ISSUE_TYPES = new Set(["unresponsive_element", "outbound_unavailable"]);
+// outbound_unavailable graduated to the deterministic tier in policy v4: since 0.17.6 the
+// outbound audit renders each link in the live browser, so the unavailable-shell phrase match
+// is a stable observation of the page, not a sampled probe — and a dead social link is exactly
+// the broken-link class the web fail-on default exists to block.
+export const WEB_SAMPLED_ISSUE_TYPES = new Set(["unresponsive_element"]);
 
 export function severityRank(s) {
   return { critical: 0, high: 1, medium: 2, low: 3 }[s] ?? 4;
@@ -296,6 +303,9 @@ export function buildQaReport(markersFilePath, { platform = "ios", target = null
     : !coverageFloorMet ? "coverage-floor-not-met"
     : driverStop === "frontier-drained" ? "no-unexplored-in-scope-controls"
     : driverStop === "probe-cap" ? "probe-cap-reached"
+    // Any other driver-signalled cause (navigation-trap, app-crashed, stuck-no-progress …)
+    // passes through verbatim: "completed" is ONLY the exhausted action budget.
+    : driverStop && driverStop !== "action-budget" && driverStop !== "time-budget" ? String(driverStop)
     : "completed";
 
   const headline = timeBudgetExhausted
@@ -401,6 +411,14 @@ export function buildQaReport(markersFilePath, { platform = "ios", target = null
         ...(action.reason ? { reason: action.reason } : {}),
       })),
     evidence: { markers: base.relativeMarkersFilePath },
+    // Capture conditions shared by every screenshot/marker in this run (web: from the driver's
+    // CONTEXT marker). A baseline diff across different captures is a layout comparison, not a
+    // regression signal — consumers must be able to see that. Named captureContext because
+    // exploration consumers already publish `capture` as the evidence-folder record (field
+    // report № 7): the stamp must survive in the file people pass as --baseline.
+    captureContext: base.context && typeof base.context === "object"
+      ? { device: base.context.device || null, viewport: base.context.viewport || null, deviceScaleFactor: base.context.deviceScaleFactor ?? null }
+      : null,
     uiMap: null,
     comparison: null,
     checkedFor,
@@ -548,7 +566,7 @@ export const GATE_EXIT = { pass: 0, fail: 1, error: 2, inconclusive: 3 };
 // finding at or above that severity, and the CLI defaults web targets to `medium` — a 404 in the
 // nav is the release blocker on a website, and a field-tested green PASS over six deterministic
 // findings was exactly the dishonest verdict this product refuses to render.
-export const GATE_POLICY_VERSION = "3";
+export const GATE_POLICY_VERSION = "4";
 
 // Pure gate evaluator: frozen evidence + policy → a GateRun decision. Extracted verbatim from the
 // former inline logic in ci-report.js so the `[char]` characterization tests keep passing — the

package/mcp-server/src/web-explorer.js

@@ -576,7 +576,12 @@ export async function exploreWeb({ url, maxActions = 40, timeoutSec = 300, outDi
 
   const { chromium, devices } = await loadPlaywright();
   const browser = await chromium.launch(webBrowserLaunchOptions(process.env, { watch }));
-  const context = await browser.newContext(webContextOptions({ device, viewport, devices }));
+  const captureProfile = webContextOptions({ device, viewport, devices });
+  // Evidence is only comparable when the capture conditions are on record: a desktop run and a
+  // phone run legitimately disagree about which nav links exist, and a baseline diff across
+  // them must be able to say so instead of reporting "resolved".
+  emit("CONTEXT", { ...(String(device || "").trim() ? { device: String(device).trim() } : {}), viewport: captureProfile.viewport, deviceScaleFactor: captureProfile.deviceScaleFactor ?? 1 });
+  const context = await browser.newContext(captureProfile);
   await installWebListenerTracking(context);
   if (watch) await installWebWatchUi(context);
   const page = await context.newPage();
@@ -1040,7 +1045,7 @@ export async function exploreWeb({ url, maxActions = 40, timeoutSec = 300, outDi
         await auditPage.waitForTimeout(400); // let client-rendered shells paint their copy
         const text = await auditPage.evaluate(() => (document.body && document.body.innerText || "").slice(0, 120000)).catch(() => "");
         const phrase = webUnavailableShellPhrase(text);
-        if (phrase) issue("outbound_unavailable", "low", `Outbound link returns 200 but shows "${phrase}": ${href.slice(0, 100)}`, meta.screen, href, meta.sourceUrl);
+        if (phrase) issue("outbound_unavailable", "medium", `Outbound link returns 200 but shows "${phrase}": ${href.slice(0, 100)}`, meta.screen, href, meta.sourceUrl);
       }
       await auditPage.close().catch(() => {});
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aarwitz/tapp",
-  "version": "0.17.6",
+  "version": "0.17.8",
   "mcpName": "io.github.aarwitz/tapp",
   "description": "Let coding agents verify UI changes on real iOS, Android, and web surfaces, then enforce reviewed proof in deterministic CI.",
   "license": "MIT",

package/scripts/ci-gate.sh

@@ -34,7 +34,9 @@
 #                                                 # blocks; see ci-report.js)
 #                      [--json-out <file.json>]   # write the full report (use as the next baseline)
 #                      [--md-out <file.md>]       # write the rendered markdown report (for a PR comment)
-#                      [--device <name>]          # simulator device to boot if none is (default "iPhone 16 Pro")
+#                      [--device <name>]          # ios: simulator to boot (default "iPhone 16 Pro")
+#                                                 # web: Playwright device profile, same as `tapp explore`
+#                      [--viewport WxH]           # web only: explicit viewport, e.g. 390x844
 #                      [--serial <adb-serial>]    # Android emulator/device (default: first connected device)
 #
 # The app must be a SIMULATOR build (xcodebuild ... -destination 'generic/platform=iOS Simulator').
@@ -47,7 +49,7 @@ usage() {
 
 PLATFORM="ios" APP_PATH="" BUNDLE_ID="" APK_PATH="" APP_ID="" URL="" WEB_TARGET="" TARGET_KEY="" SERIAL="" ACTIONS=40 TIMEOUT=600 FLOWS="" SCENARIOS="" CONTRACTS="" PROJECT_DIR="" BASELINE="" FAIL_ON="gate" JSON_OUT="" MD_OUT="" DEVICE="iPhone 16 Pro" PR_BASE="" PR_HEAD="HEAD" CHANGED_FILES_FILE="" PR_PLAN_OUT=""
 IOS_PR_TARGET_JSON=""
-FLOWS_EXPLICIT=false SCENARIOS_EXPLICIT=false CONTRACTS_EXPLICIT=false PLATFORM_EXPLICIT=false FAIL_ON_EXPLICIT=false
+FLOWS_EXPLICIT=false SCENARIOS_EXPLICIT=false CONTRACTS_EXPLICIT=false PLATFORM_EXPLICIT=false FAIL_ON_EXPLICIT=false DEVICE_EXPLICIT=false VIEWPORT=""
 while [[ $# -gt 0 ]]; do
   case "$1" in
     --platform) PLATFORM="$2"; PLATFORM_EXPLICIT=true; shift 2 ;;
@@ -73,12 +75,14 @@ while [[ $# -gt 0 ]]; do
     --fail-on) FAIL_ON="$2"; FAIL_ON_EXPLICIT=true; shift 2 ;;
     --json-out) JSON_OUT="$2"; shift 2 ;;
     --md-out) MD_OUT="$2"; shift 2 ;;
-    --device) DEVICE="$2"; shift 2 ;;
+    --device) DEVICE="$2"; DEVICE_EXPLICIT=true; shift 2 ;;
+    --viewport) VIEWPORT="$2"; shift 2 ;;
     --help|-h) usage; exit 0 ;;
     *) echo "Unknown argument: $1" >&2; exit 2 ;;
   esac
 done
 [[ "$PLATFORM" == "ios" || "$PLATFORM" == "android" || "$PLATFORM" == "web" ]] || { echo "❌ --platform must be ios|android|web" >&2; exit 2; }
+[[ "$PLATFORM" == "ios" && -n "$VIEWPORT" ]] && { echo "❌ --viewport applies to web gates only; on ios --device selects the simulator" >&2; exit 2; }
 [[ "$ACTIONS" =~ ^[1-9][0-9]*$ ]] || { echo "❌ --actions must be a positive integer" >&2; exit 2; }
 [[ "$TIMEOUT" =~ ^[1-9][0-9]*$ ]] || { echo "❌ --timeout must be a positive integer" >&2; exit 2; }
 [[ "$FAIL_ON" == "gate" || "$FAIL_ON" == "absolute" || "$FAIL_ON" == "any" || "$FAIL_ON" == "high" || "$FAIL_ON" == "medium" ]] || { echo "❌ --fail-on must be gate|absolute|any|high|medium" >&2; exit 2; }
@@ -283,6 +287,16 @@ if [[ "$PLATFORM" != "ios" ]]; then
   [[ -n "$URL" ]] && PLATFORM_ARGS+=(--url "$URL")
   [[ -n "$PROJECT_DIR" ]] && PLATFORM_ARGS+=(--project-dir "$PROJECT_DIR")
   [[ -n "$WEB_TARGET" ]] && PLATFORM_ARGS+=(--web-target "$WEB_TARGET")
+  # On a web gate --device/--viewport carry the SAME meaning as `tapp explore` (a Playwright
+  # rendering profile) — one flag must not silently mean "simulator" here and get dropped.
+  if [[ "$PLATFORM" == "web" ]]; then
+    [[ "$DEVICE_EXPLICIT" == "true" ]] && PLATFORM_ARGS+=(--device "$DEVICE")
+    [[ -n "$VIEWPORT" ]] && PLATFORM_ARGS+=(--viewport "$VIEWPORT")
+  elif [[ "$PLATFORM" == "android" ]]; then
+    if [[ "$DEVICE_EXPLICIT" == "true" || -n "$VIEWPORT" ]]; then
+      echo "❌ --device/--viewport have no meaning on an android gate (use --serial to pick a device)" >&2; exit 2
+    fi
+  fi
   [[ -n "$TARGET_KEY" ]] && PLATFORM_ARGS+=(--target-key "$TARGET_KEY")
   [[ -n "$APP_ID" ]] && PLATFORM_ARGS+=(--app-id "$APP_ID")
   [[ -n "$APK_PATH" ]] && PLATFORM_ARGS+=(--apk "$APK_PATH")

package/scripts/platform-gate.js

@@ -27,6 +27,8 @@ for (let i = 2; i < process.argv.length; i += 1) {
   else if (key === "--project-dir") args.projectDir = value;
   else if (key === "--web-target") args.webTarget = value;
   else if (key === "--target-key") args.targetKey = value;
+  else if (key === "--device") args.device = value;
+  else if (key === "--viewport") args.viewport = value;
   else if (key === "--app-id") args.appId = value;
   else if (key === "--apk") args.apk = value;
   else if (key === "--serial") args.serial = value;
@@ -126,7 +128,7 @@ try {
     exitCode = 2;
   } else {
     const qa = args.platform === "web"
-      ? await runQaWeb({ url: args.url, maxActions: args.actions, timeout: args.timeout, testEmail: process.env.OCQA_TEST_EMAIL, testPassword: process.env.OCQA_TEST_PASSWORD, seedTargets: prExplorationTargets })
+      ? await runQaWeb({ url: args.url, maxActions: args.actions, timeout: args.timeout, testEmail: process.env.OCQA_TEST_EMAIL, testPassword: process.env.OCQA_TEST_PASSWORD, seedTargets: prExplorationTargets, device: args.device || "", viewport: args.viewport || "" })
       : await runQaAndroid({ appId: args.appId, apkPath: args.apk, serial: args.serial, maxActions: args.actions, timeout: args.timeout,
           testEmail: process.env.OCQA_TEST_EMAIL, testPassword: process.env.OCQA_TEST_PASSWORD, seedTargets: prExplorationTargets });
     if (qa.error) {