@delacour/warden-e2e 0.6.0 → 0.8.0

package/types/core/src/builds/config.schema.d.ts

@@ -114,6 +114,11 @@ export declare const projectConfigSchema: z.ZodObject<{
             jsInputs: z.ZodOptional<z.ZodArray<z.ZodString>>;
         }, z.core.$strict>>;
     }, z.core.$strict>>;
+    ios: z.ZodOptional<z.ZodObject<{
+        device: z.ZodOptional<z.ZodObject<{
+            bundleIdentifier: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
     cacheDirs: z.ZodOptional<z.ZodArray<z.ZodString>>;
 }, z.core.$strict>;
 export declare const wardenConfigSchema: z.ZodObject<{
@@ -202,6 +207,11 @@ export declare const wardenConfigSchema: z.ZodObject<{
                 jsInputs: z.ZodOptional<z.ZodArray<z.ZodString>>;
             }, z.core.$strict>>;
         }, z.core.$strict>>;
+        ios: z.ZodOptional<z.ZodObject<{
+            device: z.ZodOptional<z.ZodObject<{
+                bundleIdentifier: z.ZodOptional<z.ZodString>;
+            }, z.core.$strict>>;
+        }, z.core.$strict>>;
         cacheDirs: z.ZodOptional<z.ZodArray<z.ZodString>>;
     }, z.core.$strict>>>;
     batches: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
@@ -228,8 +238,8 @@ export declare const wardenConfigSchema: z.ZodObject<{
             variant: z.ZodOptional<z.ZodString>;
             kind: z.ZodOptional<z.ZodEnum<{
                 release: "release";
-                dev: "dev";
                 simulator: "simulator";
+                dev: "dev";
             }>>;
         }, z.core.$strict>]>>;
         headless: z.ZodOptional<z.ZodBoolean>;
@@ -237,6 +247,12 @@ export declare const wardenConfigSchema: z.ZodObject<{
             except: z.ZodOptional<z.ZodArray<z.ZodString>>;
             keep: z.ZodOptional<z.ZodArray<z.ZodString>>;
         }, z.core.$strict>]>>;
+        biometrics: z.ZodOptional<z.ZodBoolean>;
+        reclaim: z.ZodOptional<z.ZodEnum<{
+            none: "none";
+            uninstall: "uninstall";
+            erase: "erase";
+        }>>;
         retry: z.ZodOptional<z.ZodNumber>;
         passes: z.ZodOptional<z.ZodNumber>;
         env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
@@ -275,6 +291,9 @@ export declare const wardenConfigSchema: z.ZodObject<{
             count: z.ZodDefault<z.ZodNumber>;
             env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
             default: z.ZodDefault<z.ZodBoolean>;
+            physical: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<true>, z.ZodObject<{
+                ids: z.ZodArray<z.ZodString>;
+            }, z.core.$strict>]>>;
         }, z.core.$strict>>>;
         metro: z.ZodOptional<z.ZodObject<{
             enabled: z.ZodDefault<z.ZodBoolean>;
@@ -291,6 +310,9 @@ export declare const wardenConfigSchema: z.ZodObject<{
             ios: "ios";
             android: "android";
         }>>;
+        physical: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<true>, z.ZodObject<{
+            ids: z.ZodArray<z.ZodString>;
+        }, z.core.$strict>]>>;
         base: z.ZodDefault<z.ZodString>;
         maxDepth: z.ZodOptional<z.ZodNumber>;
         runAll: z.ZodDefault<z.ZodArray<z.ZodString>>;
@@ -321,8 +343,8 @@ export declare const wardenConfigSchema: z.ZodObject<{
             variant: z.ZodOptional<z.ZodString>;
             kind: z.ZodOptional<z.ZodEnum<{
                 release: "release";
-                dev: "dev";
                 simulator: "simulator";
+                dev: "dev";
             }>>;
         }, z.core.$strict>]>>;
         ports: z.ZodOptional<z.ZodArray<z.ZodString>>;
@@ -335,6 +357,12 @@ export declare const wardenConfigSchema: z.ZodObject<{
             except: z.ZodOptional<z.ZodArray<z.ZodString>>;
             keep: z.ZodOptional<z.ZodArray<z.ZodString>>;
         }, z.core.$strict>]>>;
+        biometrics: z.ZodOptional<z.ZodBoolean>;
+        reclaim: z.ZodOptional<z.ZodEnum<{
+            none: "none";
+            uninstall: "uninstall";
+            erase: "erase";
+        }>>;
         warmRunners: z.ZodOptional<z.ZodUndefined>;
         warmDrivers: z.ZodOptional<z.ZodBoolean>;
         headless: z.ZodOptional<z.ZodBoolean>;
@@ -347,6 +375,127 @@ export declare const wardenConfigSchema: z.ZodObject<{
                 peakMemoryMb: z.ZodOptional<z.ZodNumber>;
             }, z.core.$strict>>;
         }, z.core.$strict>>;
+        conditions: z.ZodOptional<z.ZodObject<{
+            network: z.ZodOptional<z.ZodUnion<readonly [z.ZodEnum<{
+                edge: "edge";
+                "3g": "3g";
+                "4g": "4g";
+                lte: "lte";
+                wifi: "wifi";
+                slow: "slow";
+                lossy: "lossy";
+                online: "online";
+                offline: "offline";
+            }>, z.ZodObject<{
+                latencyMs: z.ZodOptional<z.ZodNumber>;
+                jitterMs: z.ZodOptional<z.ZodNumber>;
+                downKbps: z.ZodOptional<z.ZodNumber>;
+                upKbps: z.ZodOptional<z.ZodNumber>;
+                lossPct: z.ZodOptional<z.ZodNumber>;
+            }, z.core.$strict>]>>;
+            location: z.ZodOptional<z.ZodUnion<readonly [z.ZodEnum<{
+                "city-run": "city-run";
+                "city-bike": "city-bike";
+                freeway: "freeway";
+            }>, z.ZodObject<{
+                lat: z.ZodNumber;
+                lon: z.ZodNumber;
+                altM: z.ZodOptional<z.ZodNumber>;
+            }, z.core.$strict>]>>;
+            clock: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+                at: z.ZodString;
+                frozen: z.ZodOptional<z.ZodBoolean>;
+            }, z.core.$strict>, z.ZodObject<{
+                offset: z.ZodString;
+            }, z.core.$strict>]>>;
+            permissions: z.ZodOptional<z.ZodRecord<z.ZodEnum<{
+                location: "location";
+                locationAlways: "locationAlways";
+                camera: "camera";
+                photos: "photos";
+                photosAdd: "photosAdd";
+                contacts: "contacts";
+                contactsLimited: "contactsLimited";
+                notifications: "notifications";
+                microphone: "microphone";
+                calendar: "calendar";
+                reminders: "reminders";
+                motion: "motion";
+                mediaLibrary: "mediaLibrary";
+                siri: "siri";
+            }> & z.core.$partial, z.ZodEnum<{
+                granted: "granted";
+                denied: "denied";
+                unset: "unset";
+            }>>>;
+            locale: z.ZodOptional<z.ZodString>;
+            timezone: z.ZodOptional<z.ZodString>;
+            a11y: z.ZodOptional<z.ZodObject<{
+                textSize: z.ZodOptional<z.ZodUnion<readonly [z.ZodEnum<{
+                    "extra-small": "extra-small";
+                    small: "small";
+                    medium: "medium";
+                    large: "large";
+                    "extra-large": "extra-large";
+                    "extra-extra-large": "extra-extra-large";
+                    "extra-extra-extra-large": "extra-extra-extra-large";
+                    "accessibility-medium": "accessibility-medium";
+                    "accessibility-large": "accessibility-large";
+                    "accessibility-extra-large": "accessibility-extra-large";
+                    "accessibility-extra-extra-large": "accessibility-extra-extra-large";
+                    "accessibility-extra-extra-extra-large": "accessibility-extra-extra-extra-large";
+                }>, z.ZodNumber]>>;
+                boldText: z.ZodOptional<z.ZodBoolean>;
+                contrast: z.ZodOptional<z.ZodEnum<{
+                    increased: "increased";
+                    normal: "normal";
+                }>>;
+                reduceMotion: z.ZodOptional<z.ZodBoolean>;
+            }, z.core.$strict>>;
+        }, z.core.$strict>>;
+        a11y: z.ZodOptional<z.ZodObject<{
+            ignore: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                rule: z.ZodEnum<{
+                    "missing-name": "missing-name";
+                    "image-no-name": "image-no-name";
+                    "target-size": "target-size";
+                    "target-size-platform": "target-size-platform";
+                    "duplicate-name": "duplicate-name";
+                    "role-in-name": "role-in-name";
+                    "label-in-name": "label-in-name";
+                    "hidden-focusable": "hidden-focusable";
+                    "text-clipped": "text-clipped";
+                    native: "native";
+                }>;
+                identifier: z.ZodOptional<z.ZodString>;
+            }, z.core.$strict>>>;
+            minSeverity: z.ZodOptional<z.ZodEnum<{
+                error: "error";
+                warning: "warning";
+            }>>;
+            rules: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                "missing-name": "missing-name";
+                "image-no-name": "image-no-name";
+                "target-size": "target-size";
+                "target-size-platform": "target-size-platform";
+                "duplicate-name": "duplicate-name";
+                "role-in-name": "role-in-name";
+                "label-in-name": "label-in-name";
+                "hidden-focusable": "hidden-focusable";
+                "text-clipped": "text-clipped";
+                native: "native";
+            }>>>;
+        }, z.core.$strict>>;
+        camera: z.ZodOptional<z.ZodObject<{
+            back: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+                path: z.ZodString;
+                loop: z.ZodOptional<z.ZodBoolean>;
+            }, z.core.$strict>]>>;
+            front: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+                path: z.ZodString;
+                loop: z.ZodOptional<z.ZodBoolean>;
+            }, z.core.$strict>]>>;
+        }, z.core.$strict>>;
         required: z.ZodDefault<z.ZodBoolean>;
         specs: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
             entries: z.ZodDefault<z.ZodArray<z.ZodString>>;
@@ -364,6 +513,12 @@ export declare const wardenConfigSchema: z.ZodObject<{
         except: z.ZodOptional<z.ZodArray<z.ZodString>>;
         keep: z.ZodOptional<z.ZodArray<z.ZodString>>;
     }, z.core.$strict>]>>;
+    biometrics: z.ZodOptional<z.ZodBoolean>;
+    reclaim: z.ZodOptional<z.ZodEnum<{
+        none: "none";
+        uninstall: "uninstall";
+        erase: "erase";
+    }>>;
     perf: z.ZodOptional<z.ZodObject<{
         budgets: z.ZodOptional<z.ZodObject<{
             startupColdMs: z.ZodOptional<z.ZodNumber>;
@@ -373,9 +528,127 @@ export declare const wardenConfigSchema: z.ZodObject<{
             peakMemoryMb: z.ZodOptional<z.ZodNumber>;
         }, z.core.$strict>>;
     }, z.core.$strict>>;
+    conditions: z.ZodOptional<z.ZodObject<{
+        network: z.ZodOptional<z.ZodUnion<readonly [z.ZodEnum<{
+            edge: "edge";
+            "3g": "3g";
+            "4g": "4g";
+            lte: "lte";
+            wifi: "wifi";
+            slow: "slow";
+            lossy: "lossy";
+            online: "online";
+            offline: "offline";
+        }>, z.ZodObject<{
+            latencyMs: z.ZodOptional<z.ZodNumber>;
+            jitterMs: z.ZodOptional<z.ZodNumber>;
+            downKbps: z.ZodOptional<z.ZodNumber>;
+            upKbps: z.ZodOptional<z.ZodNumber>;
+            lossPct: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strict>]>>;
+        location: z.ZodOptional<z.ZodUnion<readonly [z.ZodEnum<{
+            "city-run": "city-run";
+            "city-bike": "city-bike";
+            freeway: "freeway";
+        }>, z.ZodObject<{
+            lat: z.ZodNumber;
+            lon: z.ZodNumber;
+            altM: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strict>]>>;
+        clock: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+            at: z.ZodString;
+            frozen: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strict>, z.ZodObject<{
+            offset: z.ZodString;
+        }, z.core.$strict>]>>;
+        permissions: z.ZodOptional<z.ZodRecord<z.ZodEnum<{
+            location: "location";
+            locationAlways: "locationAlways";
+            camera: "camera";
+            photos: "photos";
+            photosAdd: "photosAdd";
+            contacts: "contacts";
+            contactsLimited: "contactsLimited";
+            notifications: "notifications";
+            microphone: "microphone";
+            calendar: "calendar";
+            reminders: "reminders";
+            motion: "motion";
+            mediaLibrary: "mediaLibrary";
+            siri: "siri";
+        }> & z.core.$partial, z.ZodEnum<{
+            granted: "granted";
+            denied: "denied";
+            unset: "unset";
+        }>>>;
+        locale: z.ZodOptional<z.ZodString>;
+        timezone: z.ZodOptional<z.ZodString>;
+        a11y: z.ZodOptional<z.ZodObject<{
+            textSize: z.ZodOptional<z.ZodUnion<readonly [z.ZodEnum<{
+                "extra-small": "extra-small";
+                small: "small";
+                medium: "medium";
+                large: "large";
+                "extra-large": "extra-large";
+                "extra-extra-large": "extra-extra-large";
+                "extra-extra-extra-large": "extra-extra-extra-large";
+                "accessibility-medium": "accessibility-medium";
+                "accessibility-large": "accessibility-large";
+                "accessibility-extra-large": "accessibility-extra-large";
+                "accessibility-extra-extra-large": "accessibility-extra-extra-large";
+                "accessibility-extra-extra-extra-large": "accessibility-extra-extra-extra-large";
+            }>, z.ZodNumber]>>;
+            boldText: z.ZodOptional<z.ZodBoolean>;
+            contrast: z.ZodOptional<z.ZodEnum<{
+                increased: "increased";
+                normal: "normal";
+            }>>;
+            reduceMotion: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
+    a11y: z.ZodOptional<z.ZodObject<{
+        ignore: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            rule: z.ZodEnum<{
+                "missing-name": "missing-name";
+                "image-no-name": "image-no-name";
+                "target-size": "target-size";
+                "target-size-platform": "target-size-platform";
+                "duplicate-name": "duplicate-name";
+                "role-in-name": "role-in-name";
+                "label-in-name": "label-in-name";
+                "hidden-focusable": "hidden-focusable";
+                "text-clipped": "text-clipped";
+                native: "native";
+            }>;
+            identifier: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>>;
+        minSeverity: z.ZodOptional<z.ZodEnum<{
+            error: "error";
+            warning: "warning";
+        }>>;
+        rules: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+            "missing-name": "missing-name";
+            "image-no-name": "image-no-name";
+            "target-size": "target-size";
+            "target-size-platform": "target-size-platform";
+            "duplicate-name": "duplicate-name";
+            "role-in-name": "role-in-name";
+            "label-in-name": "label-in-name";
+            "hidden-focusable": "hidden-focusable";
+            "text-clipped": "text-clipped";
+            native: "native";
+        }>>>;
+    }, z.core.$strict>>;
     android: z.ZodOptional<z.ZodObject<{
         snapshot: z.ZodOptional<z.ZodBoolean>;
     }, z.core.$strict>>;
+    physical: z.ZodOptional<z.ZodObject<{
+        allow: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    }, z.core.$strict>>;
+    ios: z.ZodOptional<z.ZodObject<{
+        teamId: z.ZodOptional<z.ZodString>;
+        runnerBundleId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
 }, z.core.$strict>;
 /** The slice of an Expo `app.json` warden reads (name, bundle ids). */
 export declare const appJsonSchema: z.ZodObject<{

package/types/core/src/builds/define-config.d.ts

@@ -209,6 +209,8 @@ export interface WardenProject {
      * `--kind`. Kinds sit on top of {@link WardenProject.variants}: both keep working, but a build is one or the other.
      */
     kinds?: WardenKinds | undefined;
+    /** iOS-only project settings. */
+    ios?: WardenProjectIos | undefined;
     /** Extra (legacy) cache roots laid out as `<dir>/<hash>/*.app|*.apk`, imported on demand. `~` expands to `$HOME`. */
     cacheDirs?: string[] | undefined;
 }
@@ -318,6 +320,19 @@ export interface WardenBatchPreset {
         except?: string[] | undefined;
         keep?: string[] | undefined;
     } | undefined;
+    /**
+     * Devices of this run have a fingerprint (Android) / Face ID (iOS) enrolled before any app install. Enrolled
+     * devices are a separate pool and golden from plain ones (profile `<profile>+bio`). Overrides the top-level
+     * `biometrics`. Default false.
+     */
+    biometrics?: boolean | undefined;
+    /**
+     * What happens to the state of the devices of this run when they are released: `"erase"` (iOS: shutdown +
+     * `simctl erase`; Android: uninstalls the third-party apps), `"uninstall"` (removes the user-installed apps) or
+     * `"none"`. Only warden-created simulators and emulators are reclaimed, never foreign, golden or physical
+     * devices. Overrides the top-level `reclaim`; `WARDEN_RECLAIM` is the fallback below it. Default `"none"`.
+     */
+    reclaim?: "erase" | "uninstall" | "none" | undefined;
     /** Per-job log dir. */
     logs?: string | undefined;
     /**
@@ -412,6 +427,63 @@ export interface WardenPerfConfig {
     /** Budgets; a metric the report has no number for (its capture did not run) cannot breach. */
     budgets?: WardenPerfBudgets | undefined;
 }
+/** `a11y` (top level, or `e2e.<suite>.a11y`): how accessibility audits judge a screen. */
+export interface WardenA11yConfig {
+    /** Findings to drop: a rule everywhere, or only on the element with that `identifier` (testID). */
+    ignore?: Array<{
+        rule: WardenA11yRule;
+        identifier?: string | undefined;
+    }> | undefined;
+    /** Lowest severity that fails an audit. @default "error" */
+    minSeverity?: "error" | "warning" | undefined;
+    /** Run only these rules (default: all). */
+    rules?: WardenA11yRule[] | undefined;
+}
+/** A rule id an audit reports; `native` = XCUITest / ATF findings. */
+export type WardenA11yRule = "missing-name" | "image-no-name" | "target-size" | "target-size-platform" | "duplicate-name" | "role-in-name" | "label-in-name" | "hidden-focusable" | "text-clipped" | "native";
+/** `conditions.network` as a custom shape: the fields of a `custom` network condition. */
+export interface WardenCustomNetwork {
+    /** Added round-trip time, ms. */
+    latencyMs?: number | undefined;
+    /** Plus or minus spread on the latency, ms. */
+    jitterMs?: number | undefined;
+    /** Download rate, kilobits per second (0 = unlimited). */
+    downKbps?: number | undefined;
+    /** Upload rate, kilobits per second (0 = unlimited). */
+    upKbps?: number | undefined;
+    /** Share of packets lost, 0-100. */
+    lossPct?: number | undefined;
+}
+/**
+ * `conditions` (top level, or `e2e.<suite>.conditions`): the device state every spec of the suite starts from.
+ * `network`, `location` and `clock` are applied before the app launches and put back after each spec;
+ * `permissions`, `locale`, `timezone` and `a11y` are accepted but not applied yet (`warden e2e` says so once).
+ */
+export interface WardenConditionsConfig {
+    /** `online`, `offline`, a preset (`edge`, `3g`, `4g`, `lte`, `wifi`, `slow`, `lossy`) or custom shaping. iOS launches the app with the network dylib so specs can change it later. */
+    network?: "online" | "offline" | "edge" | "3g" | "4g" | "lte" | "wifi" | "slow" | "lossy" | WardenCustomNetwork | undefined;
+    /** A point, or one of the bundled scenarios (`city-run`, `city-bike`, `freeway`). */
+    location?: "city-run" | "city-bike" | "freeway" | {
+        lat: number;
+        lon: number;
+        altM?: number | undefined;
+    } | undefined;
+    /** An ISO instant the clock starts at (and keeps running from), `{ at, frozen }`, or `{ offset }` ("2d") from now. */
+    clock?: string | {
+        at: string;
+        frozen?: boolean | undefined;
+    } | {
+        offset: string;
+    } | undefined;
+    /** Not applied yet. */
+    permissions?: Record<string, "granted" | "denied" | "unset"> | undefined;
+    /** Not applied yet. */
+    locale?: string | undefined;
+    /** Not applied yet. */
+    timezone?: string | undefined;
+    /** Not applied yet. */
+    a11y?: Record<string, unknown> | undefined;
+}
 /** `e2e.<suite>.spec`: how `warden e2e` runs the `*.e2e.ts` specs (`bun test` with `@delacour/warden-e2e`). */
 export interface WardenE2eSpec {
     /** The app under test. Default: the suite project's `bundleId` for the platform. */
@@ -456,6 +528,16 @@ export interface WardenE2eDeviceLeg {
      */
     default?: boolean | undefined;
 }
+/** One camera asset: a path (relative to the config file), or `{ path, loop }`. */
+export type WardenCameraFeed = string | {
+    path: string;
+    loop?: boolean | undefined;
+};
+/** `e2e.<suite>.camera`: the asset each facing plays. At least one of `back` / `front`. */
+export type WardenCameraConfig = {
+    back?: WardenCameraFeed | undefined;
+    front?: WardenCameraFeed | undefined;
+};
 /**
  * `e2e.<suite>`: the specs `warden affected` selects and `warden e2e` runs. Every path and glob is
  * relative to the config file.
@@ -468,6 +550,16 @@ export interface WardenE2eSuite {
     project?: string | undefined;
     /** Perf budgets for this suite; each key replaces the top-level `perf.budgets` one. */
     perf?: WardenPerfConfig | undefined;
+    /** Device conditions every spec of this suite starts from; each area replaces the top-level one. */
+    conditions?: WardenConditionsConfig | undefined;
+    /** Accessibility audit settings for this suite; each key replaces the top-level `a11y` one. */
+    a11y?: WardenA11yConfig | undefined;
+    /**
+     * The simulated camera every spec of this suite starts from, applied before the first `app.open()`: a path, or
+     * `{ path, loop }` (video loop, default true), per facing. Paths are relative to the config file. Android devices of
+     * the suite are claimed with `--camera` (profile `<profile>+cam`, cold boot). png, jpg, heic, mp4 and mov are accepted.
+     */
+    camera?: WardenCameraConfig | undefined;
     /** Directory of specs: `*.e2e.ts(x)` specs whose other `.ts` files are helpers (searched recursively; dot dirs, `node_modules` and `__baselines__` skipped). */
     specsDir: string;
     /** How the specs run: the app under test, its launch arguments and the timeouts. */
@@ -626,6 +718,19 @@ export interface WardenE2eSuite {
         except?: string[] | undefined;
         keep?: string[] | undefined;
     } | undefined;
+    /**
+     * Devices of this run have a fingerprint (Android) / Face ID (iOS) enrolled before any app install. Enrolled
+     * devices are a separate pool and golden from plain ones (profile `<profile>+bio`). Overrides the top-level
+     * `biometrics`. Default false.
+     */
+    biometrics?: boolean | undefined;
+    /**
+     * What happens to the state of the devices of this run when they are released: `"erase"` (iOS: shutdown +
+     * `simctl erase`; Android: uninstalls the third-party apps), `"uninstall"` (removes the user-installed apps) or
+     * `"none"`. Only warden-created simulators and emulators are reclaimed, never foreign, golden or physical
+     * devices. Overrides the top-level `reclaim`; `WARDEN_RECLAIM` is the fallback below it. Default `"none"`.
+     */
+    reclaim?: "erase" | "uninstall" | "none" | undefined;
     /** Removed: renamed `warmDrivers`. */
     warmRunners?: undefined;
     /**
@@ -683,10 +788,64 @@ export interface WardenConfig {
         except?: string[] | undefined;
         keep?: string[] | undefined;
     } | undefined;
+    /**
+     * Devices of this run have a fingerprint (Android) / Face ID (iOS) enrolled before any app install. Enrolled
+     * devices are a separate pool and golden from plain ones (profile `<profile>+bio`). `e2e` suites and `batches` presets
+     * override it. Default false.
+     */
+    biometrics?: boolean | undefined;
+    /**
+     * What happens to the state of the devices of this run when they are released: `"erase"` (iOS: shutdown +
+     * `simctl erase`; Android: uninstalls the third-party apps), `"uninstall"` (removes the user-installed apps) or
+     * `"none"`. Only warden-created simulators and emulators are reclaimed, never foreign, golden or physical
+     * devices. Overrides the top-level `reclaim`; `WARDEN_RECLAIM` is the fallback below it. Default `"none"`.
+     */
+    reclaim?: "erase" | "uninstall" | "none" | undefined;
     /** Perf budgets every `e2e` suite starts from (a suite's own `perf.budgets` replace them per key). */
     perf?: WardenPerfConfig | undefined;
+    /** Device conditions every `e2e` suite starts from (a suite's own `conditions` replace them per area). */
+    conditions?: WardenConditionsConfig | undefined;
+    /** Accessibility audit settings every `e2e` suite starts from (a suite's own `a11y` keys replace them). */
+    a11y?: WardenA11yConfig | undefined;
     /** Android emulator settings. */
     android?: WardenAndroidSettings | undefined;
+    /** Physical iPhone settings. */
+    ios?: WardenIosSettings | undefined;
+    /** Physical phone and tablet settings. */
+    physical?: WardenPhysicalSettings | undefined;
+}
+/** Physical phone and tablet settings (`physical`). */
+export interface WardenPhysicalSettings {
+    /**
+     * Allowlist for `--physical` claims that name no device: only these adb serials / CoreDevice UDIDs are picked.
+     * `WARDEN_PHYSICAL_IDS` (comma-separated) wins over it. Naming a device with `--serial` / `--udid` works for
+     * any device, listed or not.
+     *
+     * @example ["00008140-000A0B0C0D0E0F10", "R5CT123ABC"]
+     */
+    allow?: string[] | undefined;
+}
+/** iOS settings of one project (`projects[].ios`). */
+export interface WardenProjectIos {
+    /** Builds for a physical iPhone (`--physical`, `--udid <iPhone>`). */
+    device?: {
+        bundleIdentifier?: string | undefined;
+    } | undefined;
+}
+/** Physical iPhone settings (`ios`). */
+export interface WardenIosSettings {
+    /**
+     * Apple developer team id (10 characters, e.g. `LN69P7N673`) that signs warden's on-device runner. Without it
+     * (and without `WARDEN_IOS_TEAM_ID`, which wins) warden uses the team of the one `Apple Development` identity
+     * in your keychain and fails `ios_team_ambiguous` when there are several teams.
+     */
+    teamId?: string | undefined;
+    /**
+     * Bundle id of the runner app (its UI-test bundle is `<id>.uitests`).
+     *
+     * @default "nz.co.delacour.warden.runner.<team id, lower case>"
+     */
+    runnerBundleId?: string | undefined;
 }
 /** Android emulator settings (`android`). */
 export interface WardenAndroidSettings {

package/types/core/src/builds/install-device.d.ts

@@ -0,0 +1,37 @@
+import { type AsyncResult } from "../../../types/src/result";
+import type { Exec, ExecResult } from "../exec";
+import type { InstalledApp } from "./resolve";
+/** The temp-file effects of a devicectl call. */
+export type DeviceIo = {
+    /** a fresh private directory */
+    tempDir: () => Promise<string>;
+    read: (path: string) => Promise<string>;
+    remove: (dir: string) => Promise<void>;
+};
+export declare const nodeDeviceIo: DeviceIo;
+export type PhoneDeps = {
+    exec: Exec;
+    io?: DeviceIo;
+};
+export declare const phoneInstallArgv: (udid: string, appPath: string, json: string) => string[];
+export declare const phoneUninstallArgv: (udid: string, bundleId: string, json: string) => string[];
+export declare const phoneAppsArgv: (udid: string, bundleId: string, json: string) => string[];
+/**
+ * A failed devicectl call in words: a locked phone, a phone the provisioning profile does not list, or one of the
+ * classified signing / device states (`classifyRunnerOutput`), each with what to do; else devicectl's first line.
+ */
+export declare function describePhoneFailure(what: string, res: ExecResult): string;
+/** Is `bundleId` on the phone, and which `CFBundleVersion` does it have? */
+export declare function probePhone(deps: PhoneDeps, udid: string, bundleId: string): AsyncResult<InstalledApp>;
+/** Install `appPath`, then confirm `bundleId` is there. */
+export declare function installOnPhone(deps: PhoneDeps, udid: string, appPath: string, bundleId: string): AsyncResult<InstalledApp>;
+/** Remove `bundleId` (the app under test) from the phone. */
+export declare function uninstallFromPhone(deps: PhoneDeps, udid: string, bundleId: string): AsyncResult<void>;
+/** `CFBundleVersion` of an `.app` (one `plutil` spawn); undefined when it cannot be read. */
+export declare function appBundleVersion(exec: Exec, appDir: string): Promise<string | undefined>;
+/**
+ * Is the app on the phone the cached build? The install record already named this build's key; this adds the
+ * `CFBundleVersion` the phone reports against the cached `.app`'s. Anything unreadable counts as a mismatch
+ * (a reinstall is the safe side).
+ */
+export declare function phoneAppMatches(exec: Exec, cachedApp: string, installed: InstalledApp): Promise<boolean>;

package/types/core/src/builds/install.d.ts

@@ -1,10 +1,14 @@
 import { type AsyncResult } from "../../../types/src/result";
 import { type Exec } from "../exec";
 import type { Platform } from "../types";
+import { type DeviceIo } from "./install-device";
 import type { InstalledApp } from "./resolve";
 /** Byte size of a file; undefined when it cannot be read. Injected so identity checks need no `stat` spawns. */
 export type FileSize = (path: string) => Promise<number | undefined>;
 export declare const nodeFileSize: FileSize;
+/** Hex sha256 of a file; undefined when it cannot be read (or is a directory). Injected so tests need no real apk. */
+export type FileDigest = (path: string) => Promise<string | undefined>;
+export declare const nodeFileDigest: FileDigest;
 /** `ino:mtime` of a file; undefined when it cannot be read. Injected so tests need no real container. */
 export type FileStamp = (path: string) => Promise<string | undefined>;
 export declare const nodeFileStamp: FileStamp;
@@ -18,12 +22,19 @@ export type InstallerDeps = {
     env: Record<string, string | undefined>;
     /** default: `node:fs` */
     fileSize?: FileSize;
+    /** the temp files of `devicectl` calls on a physical iPhone (default: node:fs) */
+    deviceIo?: DeviceIo;
+    /** sha256 of the cached apk for the Android identity check (default: `node:fs`) */
+    fileDigest?: FileDigest;
 };
-/** A device to install onto: iOS simulator udid / Android emulator serial. */
+/** A device to install onto: iOS simulator udid / Android emulator or phone serial. `physical`: a real phone (ABI check before installing). */
 export type InstallTarget = {
     platform: Platform;
     deviceId: string;
+    physical?: boolean;
 };
+/** A real iPhone / iPad: installed, probed and removed with `devicectl`, not `simctl`. */
+export declare const isPhoneIos: (target: InstallTarget) => boolean;
 /** `xcrun simctl install <udid> <app>` / `adb -s <serial> install -r <apk>`. */
 export declare function installArgv(target: InstallTarget, appPath: string, env: InstallerDeps["env"]): string[];
 /** `xcrun simctl get_app_container <udid> <bundleId>` / `adb -s <serial> shell pm path <bundleId>`. */
@@ -47,8 +58,9 @@ export declare function appIdentity(deps: InstallerDeps, appDir: string): Promis
  * Is the app on the device the cached `artifactPath` build? iOS: compare `appIdentity` of the
  * installed container with the cached `.app`; pass `installedDir` (the container `probeApp` already
  * found) to skip a second `simctl get_app_container`. Anything unreadable counts as a mismatch
- * (reinstall is the safe side). Android: not checked (always true) — warden's install record is
- * trusted there.
+ * (reinstall is the safe side). Android: the sha256 of the installed `base.apk` (`pm path` + the device's
+ * `sha256sum`) against the cached apk's. The install record is only a hint, never the proof: an emulator
+ * restored from a snapshot, or installed onto by another tool, keeps the record while the app differs.
  */
 export declare function appMatchesArtifact(deps: InstallerDeps, target: InstallTarget, bundleId: string, artifactPath: string, installedDir?: string): AsyncResult<boolean>;
 /** `xcrun simctl uninstall <udid> <bundleId>` / `adb -s <serial> uninstall <bundleId>`. */
@@ -60,6 +72,8 @@ export declare function uninstallArgv(target: InstallTarget, bundleId: string, e
 export declare function uninstallApp(deps: InstallerDeps, target: InstallTarget, bundleId: string): AsyncResult<void>;
 /** Install `appPath`, then confirm `bundleId` is present. */
 export declare function installApp(deps: InstallerDeps, target: InstallTarget, appPath: string, bundleId: string): AsyncResult<void>;
+/** ABI directories under `lib/` in `unzip -Z1` output; empty for a pure-Java APK. */
+export declare function apkAbis(entries: string): string[];
 /** `installApp`, keeping what the confirming probe found (iOS: the new bundle container, 17-7). */
 export declare function installAndProbe(deps: InstallerDeps, target: InstallTarget, appPath: string, bundleId: string): AsyncResult<InstalledApp>;
 /** Filesystem ops the iOS data wipe needs (injected; tests pass fakes). */