@jevitate/cli 0.21.1 → 0.23.0

package/dist/bin.js

@@ -35260,9 +35260,9 @@ async function confineFixture(raw, root2) {
   }
   if (!isFile)
     throw fixtureNotFound(candidate, root2);
-  const sensitive = fixtureSensitiveReason(real, realRoot) ?? (isInsideRoot(candidate, resolve3(root2)) ? fixtureSensitiveReason(candidate, resolve3(root2)) : null);
-  if (sensitive !== null)
-    throw fixtureSensitive(candidate, root2, sensitive);
+  const sensitive2 = fixtureSensitiveReason(real, realRoot) ?? (isInsideRoot(candidate, resolve3(root2)) ? fixtureSensitiveReason(candidate, resolve3(root2)) : null);
+  if (sensitive2 !== null)
+    throw fixtureSensitive(candidate, root2, sensitive2);
   return real;
 }
 function fixtureEscapesRoot(raw, root2) {
@@ -37855,6 +37855,7 @@ var MESSAGE_FIELD = /\b(reply|message|ask|chat|inquiry|prompt|say|talk|conversat
 var MESSAGE_INPUT_TYPES = /* @__PURE__ */ new Set(["", "text", "search"]);
 var SUBMIT_NAME = /\b(send|submit|reply|ask|post)\b|[→➤➔↑]|^\s*(go|ok)\s*$/i;
 var PAIRED_SUBMIT_DISTANCE = 6;
+var RECIPIENT_NAME = /^\s*(to|cc|bcc)\b|\b(recipients?|contacts?|addressee|send to)\b/i;
 function composerEvidence(node2, args) {
   const el = node2;
   const norm6 = (s3) => s3 === null ? "" : s3.replace(/\s+/g, " ").trim();
@@ -37886,6 +37887,29 @@ function composerEvidence(node2, args) {
     parents.set(item.parentElement, n3);
   }
   const submit2 = new RegExp(args.submit, "i");
+  const recipient = new RegExp(args.recipient, "i");
+  const labelOf2 = (a) => {
+    const aria = norm6(a.getAttribute("aria-label"));
+    if (aria !== "")
+      return aria;
+    const by = norm6(a.getAttribute("aria-labelledby"));
+    if (by !== "") {
+      const text2 = by.split(" ").map((id2) => norm6(document.getElementById(id2)?.textContent ?? null)).join(" ").trim();
+      if (text2 !== "")
+        return text2;
+    }
+    const id = a.getAttribute("id");
+    if (id !== null && id !== "") {
+      const forLabel = Array.from(document.querySelectorAll("label")).find((l2) => l2.htmlFor === id);
+      if (forLabel !== void 0)
+        return norm6(forLabel.textContent);
+    }
+    const wrap = a.closest("label");
+    if (wrap !== null)
+      return norm6(wrap.textContent);
+    return norm6(a.getAttribute("placeholder")) || norm6(a.getAttribute("name"));
+  };
+  const addressed = (container) => Array.from(container.querySelectorAll('select, input:not([type="hidden"]):not([type="submit"]):not([type="button"]), [role="combobox"], [role="listbox"]')).some((f2) => f2 !== el && !f2.contains(el) && rendered(f2) && recipient.test(labelOf2(f2)));
   const up4 = (a) => {
     const out = [];
     for (let cur = a; cur !== null; cur = parentOf(cur))
@@ -37903,7 +37927,7 @@ function composerEvidence(node2, args) {
     for (let i = 0; i < fieldPath.length && i <= args.distance; i++) {
       const j = bp.indexOf(fieldPath[i]);
       if (j >= 0) {
-        if (i + j <= args.distance)
+        if (i + j <= args.distance && !addressed(fieldPath[i]))
           return true;
         break;
       }
@@ -38535,7 +38559,7 @@ async function readSnapshot(page, opts) {
       const value = raw.valueBearing && !isSecretField(raw.inputType, raw.autocomplete, [raw.name]) ? await handle.evaluate(readControlValue) : null;
       const facts = { ...raw, value };
       const textEntry = raw.tag === "textarea" || raw.tag === "input" && MESSAGE_INPUT_TYPES.has(raw.inputType ?? "") || raw.role === "textbox";
-      const conversational = textEntry && MESSAGE_FIELD.test(raw.name) ? await handle.evaluate(composerEvidence, { submit: SUBMIT_NAME.source, distance: PAIRED_SUBMIT_DISTANCE }).catch(() => false) : null;
+      const conversational = textEntry && MESSAGE_FIELD.test(raw.name) ? await handle.evaluate(composerEvidence, { submit: SUBMIT_NAME.source, distance: PAIRED_SUBMIT_DISTANCE, recipient: RECIPIENT_NAME.source }).catch(() => false) : null;
       const computed = await computeDescriptor(page, handle, { primaryOnly: true });
       const control = {
         index: controls.length,
@@ -39568,6 +39592,59 @@ async function clockBounded(work, ms, onTimeout) {
   }
 }
 
+// ../explore/dist/request-body-values.js
+var MIN_VALUE_CHARS = 3;
+var MAX_VALUES = 50;
+var MAX_BODY_CHARS = 64e3;
+var SENSITIVE_WORDS = /* @__PURE__ */ new Set(["pass", "password", "passwd", "pwd", "secret", "token", "auth", "authorization", "apikey", "key", "otp", "pin", "cvv", "cvc", "card", "ssn", "session", "cookie", "signature", "credential", "credentials"]);
+function sensitive(key2) {
+  return key2.split(/[^A-Za-z0-9]+|(?<=[a-z0-9])(?=[A-Z])/).some((w) => SENSITIVE_WORDS.has(w.toLowerCase()));
+}
+function keep(out, key2, value) {
+  if (out.length >= MAX_VALUES)
+    return;
+  if (key2 !== null && sensitive(key2))
+    return;
+  const v = value.replace(/\s+/g, " ").trim();
+  if (v.length >= MIN_VALUE_CHARS)
+    out.push(v);
+}
+function walk(out, key2, node2) {
+  if (out.length >= MAX_VALUES)
+    return;
+  if (typeof node2 === "string")
+    keep(out, key2, node2);
+  else if (Array.isArray(node2))
+    for (const item of node2)
+      walk(out, key2, item);
+  else if (node2 !== null && typeof node2 === "object") {
+    for (const [k, v] of Object.entries(node2)) {
+      if (sensitive(k))
+        continue;
+      walk(out, k, v);
+    }
+  }
+}
+function bodyValues(body, contentType) {
+  if (body === null || body === "" || body.length > MAX_BODY_CHARS)
+    return [];
+  const type = (contentType ?? "").toLowerCase();
+  const out = [];
+  if (type.includes("application/x-www-form-urlencoded")) {
+    for (const [k, v] of new URLSearchParams(body))
+      keep(out, k, v);
+    return out;
+  }
+  if (type === "" || type.includes("json")) {
+    try {
+      walk(out, null, JSON.parse(body));
+    } catch {
+      return [];
+    }
+  }
+  return out;
+}
+
 // ../explore/dist/page-monitor.js
 var RPC_TRAILER_READ_MS = 2e3;
 var INTERACTIVE_SELECTOR2 = "a[href],button,input:not([type=hidden]),select,textarea,[role=button],[role=link],[role=textbox],[role=checkbox],[role=combobox],[contenteditable=true]";
@@ -39773,6 +39850,8 @@ function pathOf3(url2) {
     return url2.split(/[?#]/)[0] ?? url2;
   }
 }
+var BODY_METHODS = /* @__PURE__ */ new Set(["POST", "PUT", "PATCH"]);
+var MAX_WRITE_BODIES = 200;
 function requestContentTypeOf(r) {
   try {
     const v = r.headers()["content-type"];
@@ -39785,6 +39864,8 @@ var RECENT_REQUESTS_MS = 6e4;
 var PageMonitor = class {
   #page;
   #inflight = /* @__PURE__ */ new Map();
+  /** #649: the string values recent writes sent in their bodies (memory only; never persisted). */
+  #writeBodies = [];
   #completed = [];
   #wakers = /* @__PURE__ */ new Set();
   #statuses = /* @__PURE__ */ new WeakMap();
@@ -39822,6 +39903,18 @@ var PageMonitor = class {
         startedAt,
         ...requestContentType2 === void 0 ? {} : { requestContentType: requestContentType2 }
       });
+      if (BODY_METHODS.has(r.method().toUpperCase())) {
+        let values2 = [];
+        try {
+          values2 = bodyValues(r.postData(), requestContentType2);
+        } catch {
+        }
+        if (values2.length > 0) {
+          this.#writeBodies.push({ startedAt, url: r.url(), values: values2 });
+          if (this.#writeBodies.length > MAX_WRITE_BODIES)
+            this.#writeBodies.shift();
+        }
+      }
       for (const c of this.#captures) {
         c.began(r, {
           method: r.method().toUpperCase(),
@@ -40073,6 +40166,10 @@ var PageMonitor = class {
         clock.clearTimeout(timer);
     }
   }
+  /** #649: the string values the writes started since `sinceMs` sent, from URLs `keep` accepts. */
+  writeBodyValuesSince(sinceMs, keep2) {
+    return this.#writeBodies.filter((w) => w.startedAt >= sinceMs && keep2(w.url)).flatMap((w) => w.values);
+  }
   /** Requests that ended since `sinceMs` (wall clock). */
   completedSince(sinceMs) {
     return this.#completed.filter((r) => r.endedAt >= sinceMs);
@@ -41105,8 +41202,8 @@ function boundCandidates(candidates, opts) {
     return s3;
   };
   const ranked = candidates.map((c, i) => ({ c, i, s: score2(c, i) })).sort((a, b2) => b2.s - a.s || a.i - b2.i).slice(0, Math.max(0, opts.limit));
-  const keep = new Set(ranked.map((r) => r.i));
-  return { kept: candidates.filter((_, i) => keep.has(i)), omitted: candidates.length - keep.size };
+  const keep2 = new Set(ranked.map((r) => r.i));
+  return { kept: candidates.filter((_, i) => keep2.has(i)), omitted: candidates.length - keep2.size };
 }
 
 // ../explore/dist/stuck-actions.js
@@ -41391,7 +41488,8 @@ var SideEffectGuard = class {
     const own2 = requests.filter((r) => this.#ours(r));
     const settled = !inflightAny && own2.every((r) => r.status !== null && r.status >= 200 && r.status < 300);
     const completedOk = own2.length > 0 && settled;
-    this.#lastClick = { requestSent: requests.length > 0 || inflightAny, writes: [...done, ...pending], completedOk, settled };
+    const sentValues = this.#monitor.writeBodyValuesSince(o.at, (url2) => this.#ours({ url: url2 }));
+    this.#lastClick = { requestSent: requests.length > 0 || inflightAny, writes: [...done, ...pending], completedOk, settled, sentValues };
     if (done.length + pending.length === 0)
       return;
     this.#fired.set(o.key, {
@@ -41897,6 +41995,7 @@ var UnsubmittedTypeTracker = class {
 var GOAL_MET_THRESHOLD = 0.75;
 var GOAL_CHECK_TRIGGER = 0.5;
 var WRITES_DONE_NOTE = "the job's writes succeeded; the page shows no change (repeat data?)";
+var READ_BACK_DONE_NOTE = "the job's writes succeeded and a page loaded from the server shows what they sent";
 function groundDone(e) {
   if (e.unsubmitted.length > 0) {
     return { accept: false, reason: `typed text in ${e.unsubmitted.map((l2) => `"${l2}"`).join(", ")} was never submitted` };
@@ -41922,6 +42021,9 @@ function groundDone(e) {
   if (w !== void 0 && writesAllSucceeded(w) && w.goalIsWrites !== null && w.goalIsWrites >= GOAL_MET_THRESHOLD) {
     return { accept: true, outcome: { status: "completed", verifiedBy: "succeeded-writes", note: WRITES_DONE_NOTE } };
   }
+  if (w !== void 0 && writesAllSucceeded(w) && e.readBack === true && p >= GOAL_CHECK_TRIGGER) {
+    return { accept: true, outcome: { status: "completed", verifiedBy: "succeeded-writes", note: READ_BACK_DONE_NOTE } };
+  }
   const notMet = `the goal is not observably achieved on this page (p=${p.toFixed(2)})`;
   if (w !== void 0 && writesAllSucceeded(w) && w.goalIsWrites !== null) {
     return { accept: false, reason: `${notMet}; the job's writes succeeded, but they are not judged to be the whole goal (p=${w.goalIsWrites.toFixed(2)})` };
@@ -45461,6 +45563,19 @@ function pageStatusOf(ctx) {
   const parts2 = [...isEmptyStatus(ctx.status) ? [] : [describeStatus(ctx.status)], ...[formMessageStatus(ctx)].filter((x) => x !== null)];
   return parts2.length === 0 ? {} : { pageStatus: parts2.join("; ") };
 }
+var DOCUMENT_LOADS = /* @__PURE__ */ new WeakMap();
+async function documentOf(page) {
+  let loads = DOCUMENT_LOADS.get(page);
+  if (loads === void 0) {
+    const counter = { count: 0 };
+    page.on("domcontentloaded", () => {
+      counter.count += 1;
+    });
+    DOCUMENT_LOADS.set(page, counter);
+    loads = counter;
+  }
+  return loads.count;
+}
 
 // ../explore/dist/goal-loop/context/conversation.js
 function initConversation(ctx, cfg) {
@@ -45485,6 +45600,7 @@ function initConversation(ctx, cfg) {
 }
 
 // ../explore/dist/answer.js
+var UNCONFIRMED_WRITE = "the quote shows what the run itself sent";
 var ANSWER_PAGES_CHARS = 8e3;
 var MAX_OBSERVED_PAGES = 30;
 var OBSERVED_PAGE_CHARS = 2e4;
@@ -45526,9 +45642,94 @@ var ObservedPages = class {
     if (v !== "")
       this.#ownInputs.add(v);
   }
-  /** #239: a submit the run clicked fired writes that all succeeded (2xx): what it typed was sent and saved. */
-  confirmOwnInputs() {
+  /**
+   * #647: values a 2xx write sent that no page loaded from the server has shown since. A 2xx says the
+   * request was accepted, not that the app kept it: until a later document shows the value, a page
+   * showing it may only be the client's own rendering of what the run sent.
+   */
+  #unread = /* @__PURE__ */ new Set();
+  /** #647: the document the last such write was sent from. */
+  #writeDocument = null;
+  /**
+   * #239: a submit the run clicked fired writes that all succeeded (2xx): what it typed was sent. #647:
+   * it is read back only when a page from a later document load (`document`) shows it.
+   */
+  confirmOwnInputs(document2) {
+    for (const v of this.#ownInputs)
+      this.#unread.add(v);
     this.#ownInputs.clear();
+    if (document2 !== void 0)
+      this.#writeDocument = document2;
+  }
+  /**
+   * #649: a sent value the run did not type (a write's request body: a prefilled import's rows) that
+   * a page on the write's own route already showed before the write — its source, not a copy the app
+   * kept. Only a page on another route reads it back: reloading the source shows it either way.
+   */
+  #sourceRoute = /* @__PURE__ */ new Map();
+  /** #649: a write's body values the run did not type, decided on the next page seen (see `add`). */
+  #pendingSent = null;
+  /**
+   * #649: a successful write the run fired sent `values` in its body, from a page on `url`. One the run
+   * did not type awaits read-back like a typed one only when the next page shows it as NEW text — text
+   * no earlier page on that route showed (an import's rows listed from its CSV; never a form's
+   * untouched prefilled fields, still only in their fields). Decided when that page is added.
+   */
+  noteSentValues(values2, url2) {
+    const own2 = /* @__PURE__ */ new Set([...this.#ownInputs, ...this.#unread]);
+    const fresh = values2.map((value) => fold(redactContext(value, this.secrets).slice(0, OBSERVED_FIELD_CHARS))).filter((v) => v !== "" && !own2.has(v));
+    this.#pendingSent = fresh.length === 0 ? null : { route: routeOf(url2), values: fresh };
+  }
+  /** #649: the pending body values `text` (the page after the write) newly shows await read-back. */
+  #settleSent(text2) {
+    const pending = this.#pendingSent;
+    if (pending === null)
+      return;
+    this.#pendingSent = null;
+    const now2 = fold(text2);
+    const before = this.#pages.filter((p) => routeOf(p.url) === pending.route);
+    for (const v of pending.values) {
+      if (!now2.includes(v) || before.some((p) => fold(p.text).includes(v)))
+        continue;
+      this.#unread.add(v);
+      if (before.some((p) => (p.fields ?? []).some((f2) => fold(f2.value).includes(v))))
+        this.#sourceRoute.set(v, pending.route);
+    }
+  }
+  /** #647: the run's sent values (folded) that no page loaded from the server since has shown. */
+  unreadWrites() {
+    return this.#unread;
+  }
+  /** #647: the unread sent values (folded) that `shown` (a page's text, or field values) displays. */
+  unreadShownIn(shown2) {
+    const text2 = fold(shown2);
+    return [...this.#unread].filter((v) => text2.includes(v));
+  }
+  /**
+   * #647: a page from a later document load than the write shows `shown` (its visible text, or field
+   * values): the sent values it contains are read back from the app. Returns those values.
+   */
+  readBack(document2, shown2, url2) {
+    if (this.#unread.size === 0 || document2 === void 0 || document2 === this.#writeDocument)
+      return [];
+    const text2 = fold(shown2);
+    const route = url2 === void 0 ? void 0 : routeOf(url2);
+    const back = [...this.#unread].filter((v) => text2.includes(v) && (route === void 0 || this.#sourceRoute.get(v) !== route));
+    for (const v of back) {
+      this.#unread.delete(v);
+      this.#sourceRoute.delete(v);
+    }
+    this.#readBackCount += back.length;
+    return back;
+  }
+  /** #645: how many sent values a page loaded from the server has shown again. */
+  #readBackCount = 0;
+  /**
+   * #645: the app was seen to keep what the run's writes sent — at least one value was read back and
+   * none is still unread. Code evidence the page judgment lacks (see `groundDone`).
+   */
+  readBackConfirmed() {
+    return this.#readBackCount > 0 && this.#unread.size === 0;
   }
   /** #239: the run's own typed, not-yet-saved values (folded). */
   ownInputs() {
@@ -45542,9 +45743,9 @@ var ObservedPages = class {
     const clip5 = (h) => redactContext((h ?? "").replace(/\s+/g, " ").trim(), this.secrets).slice(0, HEADING_CHARS);
     const heading = clip5(headings2.heading);
     const title = clip5(headings2.title);
-    const keep = (xs) => (xs ?? []).slice(0, MAX_OBSERVED_CONTROLS).map((n3) => redactContext(n3.replace(/\s+/g, " ").trim(), this.secrets).slice(0, OBSERVED_FIELD_CHARS)).filter((n3) => n3 !== "");
-    const names = keep(headings2.controlNames);
-    const links = keep(headings2.contentLinks);
+    const keep2 = (xs) => (xs ?? []).slice(0, MAX_OBSERVED_CONTROLS).map((n3) => redactContext(n3.replace(/\s+/g, " ").trim(), this.secrets).slice(0, OBSERVED_FIELD_CHARS)).filter((n3) => n3 !== "");
+    const names = keep2(headings2.controlNames);
+    const links = keep2(headings2.contentLinks);
     const capped = (headings2.controlNames ?? []).length > MAX_OBSERVED_CONTROLS || (headings2.contentLinks ?? []).length > MAX_OBSERVED_CONTROLS;
     const incomplete = [headings2.inventoryIncomplete ?? "", capped ? `more than ${MAX_OBSERVED_CONTROLS} controls were kept` : ""].filter((x) => x !== "").join("; ");
     const status = headings2.status;
@@ -45564,6 +45765,8 @@ var ObservedPages = class {
       if (nav.length > 0)
         this.#topNav = nav;
     }
+    this.#settleSent(page.text);
+    this.readBack(headings2.document, [page.text, ...kept.map((f2) => f2.value)].join("\n"), url2);
     if (page.text.trim() === "" && kept.length === 0)
       return;
     const same = (p) => JSON.stringify(p.fields ?? []) === JSON.stringify(page.fields ?? []) && p.heading === page.heading && p.title === page.title && p.status === page.status && JSON.stringify(p.controls ?? []) === JSON.stringify(page.controls ?? []) && JSON.stringify(p.contentLinks ?? []) === JSON.stringify(page.contentLinks ?? []) && p.inventoryIncomplete === page.inventoryIncomplete;
@@ -45579,6 +45782,13 @@ var ObservedPages = class {
     return [...this.#pages].reverse();
   }
 };
+function routeOf(url2) {
+  try {
+    return new URL(url2).pathname;
+  } catch {
+    return url2.split(/[?#]/)[0] ?? url2;
+  }
+}
 function pathOf6(url2) {
   try {
     const u = new URL(url2);
@@ -45918,14 +46128,14 @@ function errorPageReason(page) {
     return `the page it is on is an error page (title "${page.title}")`;
   return null;
 }
-function groundClaim(claim2, quote6, pages, given, goal, answer, own2, absent) {
+function groundClaim(claim2, quote6, pages, given, goal, answer, own2, unread, absent) {
   const name = (absent ?? "").replace(/\s+/g, " ").trim();
   if (name !== "")
     return { evidence: groundAbsence(claim2, name, pages, goal), notAnswer: false };
-  const r = groundClaimOn(claim2, quote6, pages, given, goal, answer, own2);
+  const r = groundClaimOn(claim2, quote6, pages, given, goal, answer, own2, unread);
   return "evidence" in r ? r : { evidence: r, notAnswer: false };
 }
-function groundClaimOn(claim2, quote6, pages, given, goal, answer, own2) {
+function groundClaimOn(claim2, quote6, pages, given, goal, answer, own2, unread) {
   const q = bareQuote(quote6);
   const base = { claim: claim2, quote: quote6 };
   if (q.replace(/\s/g, "").length < MIN_QUOTE_CHARS)
@@ -45943,6 +46153,11 @@ function groundClaimOn(claim2, quote6, pages, given, goal, answer, own2) {
     const why = `the quote is the run's own typed input in "${found.control ?? "a form field"}", never saved \u2014 it shows what the run entered, not what the app recorded (submit it, then report what the app shows)`;
     return { ...base, url: page.url, grounded: false, ...where, why };
   }
+  const sent = [...unread].find((v) => v.length >= MIN_QUOTE_CHARS && q.includes(v));
+  if (sent !== void 0) {
+    const why = `${UNCONFIRMED_WRITE} ("${sent}"), and no page loaded since the write has shown it \u2014 the app may not have kept it (reload, or open the page where the app lists it, and report what that shows)`;
+    return { ...base, url: page.url, grounded: false, ...where, why };
+  }
   if (found.source === "page-text" && !CONTROL_GOAL.test(goal) && quoteIsOnlyControlNames(quote6, found.page)) {
     const why = "the quote is only a control's label (a button, a field label or a navigation link), not page content that answers the question";
     return { evidence: { ...base, url: page.url, grounded: false, ...where, why }, notAnswer: true };
@@ -45970,7 +46185,8 @@ function groundAnswer(proposed, pages, opts = {}) {
     return { accept: false, reason: NO_ANSWER_REASON, answer: null };
   const given = new Set(numbersIn(opts.goal ?? ""));
   const own2 = opts.ownInputs ?? /* @__PURE__ */ new Set();
-  const grounded_ = proposed.claims.map((c) => groundClaim(c.claim, c.quote, pages, given, opts.goal ?? "", text2, own2, c.absent));
+  const unread = opts.unreadWrites ?? /* @__PURE__ */ new Set();
+  const grounded_ = proposed.claims.map((c) => groundClaim(c.claim, c.quote, pages, given, opts.goal ?? "", text2, own2, unread, c.absent));
   const evidence = grounded_.map((g) => g.evidence);
   const answer = { text: text2, evidence };
   if (evidence.length === 0)
@@ -45979,6 +46195,8 @@ function groundAnswer(proposed, pages, opts = {}) {
   if (badAt >= 0) {
     const bad = evidence[badAt];
     const reason = `the answer is not grounded: "${bad.claim}" \u2014 ${bad.why ?? "ungrounded"}`;
+    if (bad.why?.startsWith(UNCONFIRMED_WRITE) === true)
+      return { accept: false, reason, answer, unconfirmedWrite: true };
     return grounded_[badAt].notAnswer ? { accept: false, reason, answer, notAnswer: true } : { accept: false, reason, answer };
   }
   const grounded = new Set(evidence.flatMap((e) => numbersIn(e.quote)));
@@ -46157,7 +46375,11 @@ async function reportAnswer(gen, input2) {
     answer: out.answer === null ? null : r(out.answer),
     claims: out.claims.map((c) => ({ claim: r(c.claim), quote: r(c.quote), ...c.absent == null ? {} : { absent: r(c.absent) } }))
   });
-  const grounding = { goal: input2.goal, ...input2.ownInputs === void 0 ? {} : { ownInputs: input2.ownInputs } };
+  const grounding = {
+    goal: input2.goal,
+    ...input2.ownInputs === void 0 ? {} : { ownInputs: input2.ownInputs },
+    ...input2.unreadWrites === void 0 ? {} : { unreadWrites: input2.unreadWrites }
+  };
   const res = await gen.generate("goal.answer", ask);
   const verdict = await vetoed(groundAnswer(scrub3(res.output), input2.pages, grounding), input2.judge, vet, vetoes);
   if (verdict.accept)
@@ -46267,6 +46489,7 @@ function initAnswers(ctx, cfg) {
   ctx.settledClick = null;
   ctx.clickedRegion = null;
   ctx.wroteOk = false;
+  ctx.readBackAsked = false;
   ctx.writeGoal = goalAsksToWrite(cfg.goal);
   ctx.vetoes = new VetoedAnswers();
   ctx.replies = new ObservedPages(ctx.secrets);
@@ -48076,7 +48299,8 @@ function newStep(ctx, input2) {
       ...goalMet === void 0 ? {} : { goalMetProbability: goalMet },
       ...signIn === null || goalMet === void 0 ? {} : { signIn: { completed: signIn.completed, goalIsSignIn } },
       ...saved === null || goalMet === void 0 ? {} : { save: { completed: saved.completed, goalIsSave } },
-      ...writes === void 0 || goalMet === void 0 ? {} : { writes: { ...writes, goalIsWrites } }
+      ...writes === void 0 || goalMet === void 0 ? {} : { writes: { ...writes, goalIsWrites } },
+      ...writes === void 0 ? {} : { readBack: ctx.observed.readBackConfirmed() }
     });
     const judgments = {};
     if (goalMet !== void 0 && goalMet !== null)
@@ -48116,6 +48340,29 @@ function deferEnding(ctx, step, ending) {
   return note;
 }
 
+// ../explore/dist/goal-loop/read-back.js
+function shownOn(step) {
+  return [step.visibleText, ...step.snap.controls.map((c) => c.value ?? "")].join("\n");
+}
+async function readBackProbe(ctx, step) {
+  const unread = ctx.observed.unreadShownIn(shownOn(step));
+  if (unread.length === 0 || ctx.sideEffects.inflight().length > 0)
+    return [];
+  const r = await act(ctx.cfg.actor, { op: "reload", control: null });
+  if (!r.ok)
+    return [];
+  const text2 = await readPageText(ctx.page, ctx.secrets).catch(() => "");
+  const values2 = await ctx.page.evaluate(() => Array.from(document.querySelectorAll("input, textarea, select")).filter((e) => e.type !== "password").map((e) => e.value ?? "")).catch(() => []);
+  const back = ctx.observed.readBack(await documentOf(ctx.page), redactPageText([text2, ...values2].join("\n"), ctx.secrets), ctx.page.url());
+  const listed2 = (vs) => vs.map((v) => `"${v}"`).join(", ");
+  const missing = unread.filter((v) => !back.includes(v));
+  ctx.history.push(missing.length === 0 ? `read back after a reload: the page loaded from the server shows what the run sent (${listed2(back)})` : `after a reload, the page loaded from the server no longer shows what the run sent (${listed2(missing)})`);
+  return back;
+}
+function unreadShown(ctx, step) {
+  return ctx.observed.unreadShownIn(shownOn(step));
+}
+
 // ../explore/dist/goal-loop/handle-report.js
 async function handleReport(ctx, step) {
   const { cfg } = ctx;
@@ -48137,6 +48384,8 @@ async function handleReport(ctx, step) {
     ctx.noteReplyText(snap.url, await readPageText(ctx.page, ctx.secrets));
   }
   const replyPages = ctx.replyGoal ? ctx.replies.pages() : null;
+  if (replyPages === null)
+    await readBackProbe(ctx, step);
   const verdict = replyPages !== null && replyPages.length === 0 ? {
     accept: false,
     reason: ctx.preSend === null ? "no reply observed: no message was sent yet \u2014 text on the page before the conversation is not a reply" : `no reply observed: no new message appeared after the send within the reply wait (${Math.round(ctx.replyWaitMs / 1e3)}s)`,
@@ -48150,7 +48399,7 @@ async function handleReport(ctx, step) {
     judge: cfg.judge,
     vetoes: ctx.vetoes,
     // #238: "none exists" is an answer only on observed pages that cover the app enough.
-    ...replyPages === null ? { topNav: ctx.observed.topNavigation(), ownInputs: ctx.observed.ownInputs() } : {}
+    ...replyPages === null ? { topNav: ctx.observed.topNavigation(), ownInputs: ctx.observed.ownInputs(), unreadWrites: ctx.observed.unreadWrites() } : {}
   }).then((v) => v.accept && ctx.writeGoal && !ctx.wroteOk && v.answer.absent !== true ? { accept: false, reason: UNSAVED_WRITE_REASON, answer: v.answer } : v).catch((e) => ({ accept: false, reason: `no answer could be generated: ${firstLine(e)}`, answer: null }));
   if (verdict.accept) {
     const deferred = deferEnding(ctx, step, "report");
@@ -48170,6 +48419,12 @@ async function handleReport(ctx, step) {
     ctx.stop = "done";
     return "stop";
   }
+  if (verdict.unconfirmedWrite === true && !ctx.readBackAsked) {
+    ctx.readBackAsked = true;
+    ctx.history.push(`report deferred: ${verdict.reason}`);
+    record2(false, `report deferred: ${verdict.reason}`, { answer: verdict.answer, origin: "engine" });
+    return "continue";
+  }
   ctx.reportRejections += 1;
   for (const e of verdict.answer?.evidence ?? [])
     if (e.grounded)
@@ -48189,6 +48444,15 @@ async function handleReport(ctx, step) {
 }
 
 // ../explore/dist/goal-loop/handle-done.js
+async function unreadWriteHold(ctx, step, outcome) {
+  if (outcome.status === "completed" && outcome.verifiedBy === "success-condition")
+    return null;
+  await readBackProbe(ctx, step);
+  const unread = unreadShown(ctx, step);
+  if (unread.length === 0)
+    return null;
+  return `what the run sent (${unread.map((v) => `"${v}"`).join(", ")}) has not shown on a page loaded since the write \u2014 the app may not have kept it (open the page where the app lists it)`;
+}
 async function handleDone(ctx, step) {
   const { cfg } = ctx;
   const { snap, decision, record: record2, signIn, pendingNote, acceptedBy, groundGoal } = step;
@@ -48200,7 +48464,7 @@ async function handleDone(ctx, step) {
   !(cfg.successCheck === void 0 && ctx.minEffort !== null && ctx.depth.report(ctx.tracker.actions, ctx.tracker.decisions, ctx.minEffort).minimum?.met === false)) {
     ctx.goalChecked.add(snap.signature);
     const { verdict, judgments } = await groundGoal();
-    if (verdict.accept) {
+    if (verdict.accept && await unreadWriteHold(ctx, step, verdict.outcome) === null) {
       record2(true, `goal already met \u2014 stopped instead of "${decision.op}": ${acceptedBy(verdict.outcome)}`, {
         op: "done",
         control: null,
@@ -48236,7 +48500,19 @@ async function handleDone(ctx, step) {
     }
   }
   if (decision.op === "done") {
-    const { verdict, judgments } = await groundGoal(false, true);
+    const grounded = await groundGoal(false, true);
+    const { judgments } = grounded;
+    let verdict = grounded.verdict;
+    const hold = verdict.accept ? await unreadWriteHold(ctx, step, verdict.outcome) : null;
+    if (hold !== null) {
+      if (!ctx.readBackAsked) {
+        ctx.readBackAsked = true;
+        ctx.history.push(`done deferred: ${hold}`);
+        record2(false, `done deferred: ${hold}`, { origin: "engine" });
+        return "continue";
+      }
+      verdict = { accept: false, reason: hold };
+    }
     if (verdict.accept) {
       record2(true, `done accepted${pendingNote(verdict.outcome) === null ? "" : " provisionally"}: ${acceptedBy(verdict.outcome)}`, {
         ...judgments === void 0 ? {} : { judgments }
@@ -48943,10 +49219,20 @@ async function handleSelectOption(ctx, step, op) {
     return "continue";
   }
   const named = text2 === null ? null : matchOption(text2, options);
+  const field3 = control.name || control.summary;
+  const noop2 = `${quote(named ?? "", 60)} is already selected in ${field3} \u2014 nothing to change`;
+  const setByRun = () => ctx.transcript.entries().some((e) => e.op === "select" && e.actOk && e.value === named && (e.target ?? "").includes(`"${control.name}"`));
+  if (named !== null && named === current2 && !isPlaceholderOption(named) && !ctx.history.includes(noop2) && !setByRun()) {
+    ctx.fillHelper.commit();
+    ctx.history.push(noop2);
+    record2(true, noop2, { value: named });
+    ctx.lastActedOp = op;
+    return "continue";
+  }
   if (named !== null && !choices.includes(named)) {
     ctx.fillHelper.commit();
     const why = named === current2 ? `${quote(named, 60)} is already selected` : `${quote(named, 60)} is a placeholder, not a choice`;
-    const reason = `select refused: ${why} in ${control.name || control.summary} \u2014 options not tried: ${untried()}`;
+    const reason = `select refused: ${why} in ${field3} \u2014 options not tried: ${untried()}`;
     ctx.history.push(reason);
     record2(false, reason, { origin: "engine", value: named });
     ctx.lastActedOp = op;
@@ -49245,7 +49531,8 @@ async function perceiveStep(ctx) {
     if (lc !== null && lc !== ctx.settledClick) {
       ctx.settledClick = lc;
       if (lc.writes.length > 0 && lc.writes.every((w) => w.status !== null && w.status >= 200 && w.status < 300)) {
-        ctx.observed.confirmOwnInputs();
+        ctx.observed.noteSentValues(lc.sentValues, ctx.page.url());
+        ctx.observed.confirmOwnInputs(await documentOf(ctx.page));
         ctx.wroteOk = true;
       }
     }
@@ -49696,6 +49983,7 @@ var APPEARED_CHARS = 400;
 function clipLine(s3) {
   return s3.length <= APPEARED_CHARS ? s3 : `${s3.slice(0, APPEARED_CHARS - 1)}\u2026`;
 }
+var PROGRESS_LINE = /\b\d+\s*(?:of|\/)\s*\d+\b|\b(?:step|question|page|part|stage|section|confirmation)\s+\d+\b/i;
 function appearedLines(before, after) {
   const lines = (t) => t.split("\n").map((l2) => l2.replace(/\s+/g, " ").trim()).filter((l2) => l2 !== "");
   const shape3 = (l2) => l2.replace(/\d+/g, "#");
@@ -49710,7 +49998,10 @@ function appearedLines(before, after) {
     else
       out.push(l2);
   }
-  return out;
+  if (out.length > 0)
+    return out;
+  const was = new Set(lines(before));
+  return lines(after).filter((l2) => PROGRESS_LINE.test(l2) && !was.has(l2));
 }
 
 // ../explore/dist/goal-loop/page-view.js
@@ -49791,8 +50082,12 @@ async function viewPage(ctx, step) {
     ctx.chrome.observe(new URL(snap.url).pathname, snap.controls);
   } catch {
   }
+  const document2 = await documentOf(ctx.page);
+  const unreadBefore = [...ctx.observed.unreadWrites()];
   ctx.observed.add(snap.url, visibleText, [...controlFields(snap.controls), ...richFields], {
     ...await readPageHeadings(ctx.page, ctx.secrets),
+    // #647: which document load this is — a later one that shows a sent value reads it back.
+    ...document2 === void 0 ? {} : { document: document2 },
     // #223: the action / label names (a quote made only of them is a label, not an answer) and
     // the document's status (an answer on a 404 page is no answer). A link that is page content
     // (in the main content, a list, a table, a card) is NOT one: its text may be the answer.
@@ -49805,6 +50100,13 @@ async function viewPage(ctx, step) {
     navLinks: snap.controls.filter((c) => c.role === "link" && (c.landmark === "navigation" || c.landmark === "banner")).flatMap((c) => typeof c.href === "string" && c.href !== "" ? [c.href] : []),
     ...ctx.documentStatus.has(ctx.docKey(ctx.page.url())) ? { status: ctx.documentStatus.get(ctx.docKey(ctx.page.url())) } : {}
   });
+  {
+    const now2 = ctx.observed.unreadWrites();
+    const back = unreadBefore.filter((v) => !now2.has(v));
+    if (back.length > 0) {
+      ctx.history.push(`read back: this page, loaded from the server, shows what the run sent (${back.map((v) => `"${v}"`).join(", ")}) \u2014 the app kept it`);
+    }
+  }
   ctx.noteReplyText(snap.url, visibleText);
   ctx.depth.noteState(snap.signature, snap.url);
   {
@@ -53099,13 +53401,13 @@ function lintUploadFixtures(journey, baseDir) {
       });
       continue;
     }
-    const sensitive = fixtureSensitiveReason(real, realRootOf(baseDir)) ?? fixtureSensitiveReason(candidate, resolve5(baseDir));
-    if (sensitive !== null) {
+    const sensitive2 = fixtureSensitiveReason(real, realRootOf(baseDir)) ?? fixtureSensitiveReason(candidate, resolve5(baseDir));
+    if (sensitive2 !== null) {
       findings.push({
         rule: "upload-sensitive-file",
         level: "error",
         step: i + 1,
-        message: `step ${i + 1}: upload fixture ${candidate} looks sensitive (${sensitive})`,
+        message: `step ${i + 1}: upload fixture ${candidate} looks sensitive (${sensitive2})`,
         fix: "use a dedicated test fixture file"
       });
       continue;
@@ -53230,7 +53532,7 @@ function lintJourney(journey, opts = {}) {
   const refsBound = (a) => assertionRefsBound(journey, a);
   const effects = sites.filter((site) => isEffectSite(site, site.where === "step" ? stepOf(site.step) : void 0, refsBound));
   const endEffects = effects.filter((site) => site.where === "end-state");
-  const effectAt = (n3) => effects.some((site) => (site.where === "step" || site.where === "step-request") && site.step === n3);
+  const effectAt = (n3) => recorded[n3 - 1]?.step.kind === "waitFor" || effects.some((site) => (site.where === "step" || site.where === "step-request") && site.step === n3);
   const writeRequests = recorded.map((r) => writeRequestsOf(r, classify2));
   const isWrite2 = recorded.map((r, i) => isWriteStep(r, classify2, writeRequests[i]));
   const lastWrite = isWrite2.lastIndexOf(true) + 1;
@@ -53433,9 +53735,9 @@ function splitBudget(total, stops) {
 var CLAIM_KEYS = /* @__PURE__ */ new Set(["expect", "check", "resume", "waitFor"]);
 function actionRefs(step) {
   const out = /* @__PURE__ */ new Set();
-  const walk = (v) => {
+  const walk2 = (v) => {
     if (Array.isArray(v)) {
-      v.forEach(walk);
+      v.forEach(walk2);
       return;
     }
     if (v === null || typeof v !== "object")
@@ -53450,9 +53752,9 @@ function actionRefs(step) {
         out.add(n3);
     for (const [k, x] of Object.entries(o))
       if (!CLAIM_KEYS.has(k))
-        walk(x);
+        walk2(x);
   };
-  walk(step);
+  walk2(step);
   return [...out];
 }
 function sitePageAssertion(site) {
@@ -57249,7 +57551,7 @@ function seedPath(seedUrl) {
 }
 
 // ../explore/dist/adversarial/scope.js
-function routeOf(url2) {
+function routeOf2(url2) {
   const path2 = new URL(url2).pathname;
   return path2.length > 1 && path2.endsWith("/") ? path2.slice(0, -1) : path2;
 }
@@ -57269,7 +57571,7 @@ function startRouteGlobs(startUrl) {
   if (parsed.protocol !== "http:" && parsed.protocol !== "https:") {
     throw new ScopeUnderivableError(`a ${parsed.protocol} URL has no route`);
   }
-  const route = routeOf(startUrl);
+  const route = routeOf2(startUrl);
   return route === "/" ? ["/", "/**"] : [route, `${route}/`, `${route}/**`];
 }
 function scopeGlobs(startUrl, extra = []) {
@@ -59401,7 +59703,7 @@ var CoverageTracker = class {
       if (this.#counts(c))
         this.#controls.add(key2);
     }
-    const route = routeOf(snapshot2.url);
+    const route = routeOf2(snapshot2.url);
     const formControls = this.#region === void 0 ? snapshot2.controls : snapshot2.controls.filter((c) => c.inRegion === true);
     for (const f2 of detectForms(formControls, this.#inScope))
       this.#forms.add(`${route}|${f2.key}`);
@@ -59434,7 +59736,7 @@ var CoverageTracker = class {
   submitted(url2, formKey) {
     if (!this.#inScope(url2))
       return;
-    this.#submitted.add(`${routeOf(url2)}|${formKey}`);
+    this.#submitted.add(`${routeOf2(url2)}|${formKey}`);
   }
   /**
    * A submit of `formKey` (on page `url`) never reached the server, so it never counts toward
@@ -59445,7 +59747,7 @@ var CoverageTracker = class {
   blocked(url2, formKey, message2, why = "validation") {
     if (!this.#inScope(url2))
       return;
-    const form = `${routeOf(url2)}|${formKey}`;
+    const form = `${routeOf2(url2)}|${formKey}`;
     const key2 = `${form}|${why}`;
     const cur = this.#blocked.get(key2);
     this.#blocked.set(key2, { form, why, count: (cur?.count ?? 0) + 1, message: cur?.message ?? message2 });
@@ -60249,6 +60551,16 @@ function submitRequestSent(monitor, sinceMs) {
     return true;
   return false;
 }
+var SUBMIT_REQUEST_POLL_MS = 50;
+async function submitRequestSentWithin(monitor, sinceMs, boundMs) {
+  const deadline = clock.now() + boundMs;
+  while (!submitRequestSent(monitor, sinceMs)) {
+    if (clock.now() >= deadline)
+      return false;
+    await clock.sleep(SUBMIT_REQUEST_POLL_MS);
+  }
+  return true;
+}
 async function nativeValidationMessage(page) {
   return page.evaluate(() => {
     const fields = Array.from(document.querySelectorAll("input,select,textarea"));
@@ -61468,6 +61780,7 @@ async function refuseMisuseStep(ctx, ep, turn, s3) {
 }
 
 // ../explore/dist/missions/adversarial-hunt/episode.js
+var SUBMIT_REQUEST_GRACE_MS = 1e3;
 async function runEpisode(ctx, overlay, turn) {
   const ep = {};
   const { ran, planning, episode } = turn;
@@ -61550,10 +61863,12 @@ async function runEpisode(ctx, overlay, turn) {
     if (result.ok)
       ctx.cov.acted(ep.stepSnap.url, s3.control);
     if (result.ok && s3.submitsForm !== void 0) {
-      if (submitRequestSent(monitorFor(ctx.sessions.page), at3)) {
+      const monitor = monitorFor(ctx.sessions.page);
+      const invalid = submitRequestSent(monitor, at3) ? void 0 : await nativeValidationMessage(ctx.sessions.page);
+      if (invalid === void 0 && await submitRequestSentWithin(monitor, at3, SUBMIT_REQUEST_GRACE_MS)) {
         ctx.cov.submitted(ep.stepSnap.url, s3.submitsForm);
       } else {
-        ctx.cov.blocked(ep.stepSnap.url, s3.submitsForm, await nativeValidationMessage(ctx.sessions.page));
+        ctx.cov.blocked(ep.stepSnap.url, s3.submitsForm, invalid);
       }
     }
     if (ran === "visit-route" && s3.control !== null)
@@ -62744,9 +63059,9 @@ function hostStarvedFailure(failure3, health) {
 }
 
 // src/build-info.generated.ts
-var GENERATED_COMMIT = "3dd5b59";
-var GENERATED_TREE = "d1ca79a";
-var GENERATED_BUILT_AT = "2026-10-23T00:39:12.107Z";
+var GENERATED_COMMIT = "ad72163";
+var GENERATED_TREE = "379caf5";
+var GENERATED_BUILT_AT = "2026-10-23T21:02:56.700Z";
 
 // src/version.ts
 import { readFileSync as readFileSync5 } from "node:fs";
@@ -62768,13 +63083,13 @@ function readCliVersion() {
 
 // src/engine.ts
 function bundledCommit() {
-  return true ? "3dd5b59" : void 0;
+  return true ? "ad72163" : void 0;
 }
 function bundledBuiltAt() {
-  return true ? "2026-10-23T00:39:12.107Z" : void 0;
+  return true ? "2026-10-23T21:02:56.700Z" : void 0;
 }
 function bundledTree() {
-  return true ? "d1ca79a" : void 0;
+  return true ? "379caf5" : void 0;
 }
 function currentBuildTree() {
   return bundledTree() ?? GENERATED_TREE;
@@ -85907,7 +86222,7 @@ var FINGERPRINT_MS = 1e4;
 function oneLine2(s3) {
   return s3.replace(/\s+/g, " ").trim();
 }
-function routeOf2(url2) {
+function routeOf3(url2) {
   try {
     const u = new URL(url2);
     return u.pathname + (u.search === "" ? "" : u.search);
@@ -85984,7 +86299,7 @@ var RunScreenshots = class {
     this.#entries.push({
       n: n3,
       step: at3.step,
-      route: this.#redact(redactUrl(routeOf2(url2))),
+      route: this.#redact(redactUrl(routeOf3(url2))),
       what: this.#redact(oneLine2(at3.what)).slice(0, 300),
       path: path2
     });
@@ -86308,7 +86623,7 @@ function invariantSetupTexts(spec) {
   return Object.fromEntries(specStrings(spec, "", []).filter(([, s3]) => s3.includes("${setup.")).map(([p, s3]) => [`--invariants ${p}`, s3]));
 }
 function substituteSpecSetupRefs(spec, b2, baseUrl) {
-  const walk = (v, path2) => {
+  const walk2 = (v, path2) => {
     if (typeof v === "string") {
       if (!v.includes("${setup.")) return v;
       const where = `--invariants ${path2}`;
@@ -86323,11 +86638,11 @@ function substituteSpecSetupRefs(spec, b2, baseUrl) {
       if (before !== after) throw new UnboundSetupRefError(`${where}: a \${setup.*} value may fill the path or query, never the origin`);
       return out;
     }
-    if (Array.isArray(v)) return v.map((x, i) => walk(x, `${path2}[${i}]`));
-    if (v !== null && typeof v === "object") return Object.fromEntries(Object.entries(v).map(([k, x]) => [k, walk(x, path2 === "" ? k : `${path2}.${k}`)]));
+    if (Array.isArray(v)) return v.map((x, i) => walk2(x, `${path2}[${i}]`));
+    if (v !== null && typeof v === "object") return Object.fromEntries(Object.entries(v).map(([k, x]) => [k, walk2(x, path2 === "" ? k : `${path2}.${k}`)]));
     return v;
   };
-  return walk(spec, "");
+  return walk2(spec, "");
 }
 function fixtureSetupFailedResult(err, fx) {
   const reason = err instanceof FixtureSetupError ? err.message : `fixture setup failed: ${err.message}`;
@@ -87627,6 +87942,7 @@ var ServerLogRuntime = class {
     };
   }
 };
+var NON_ACTING_OPS = /* @__PURE__ */ new Set(["done", "blocked", null]);
 function stepWindows(transcript, stepEpoch, missionStartEpochMs, drainMs) {
   const windows = [];
   let prevEnd = missionStartEpochMs;
@@ -87635,7 +87951,9 @@ function stepWindows(transcript, stepEpoch, missionStartEpochMs, drainMs) {
     const settle2 = stepEpoch.get(entry.step) ?? prevEnd;
     const isLast = i === transcript.length - 1;
     const endMs = isLast ? settle2 + drainMs : settle2;
-    windows.push({ step: entry.step, startMs: prevEnd, endMs });
+    const acting = windows[windows.length - 1];
+    if (NON_ACTING_OPS.has(entry.op) && acting !== void 0) acting.endMs = endMs;
+    else windows.push({ step: entry.step, startMs: prevEnd, endMs });
     prevEnd = settle2;
   }
   return windows;
@@ -88532,7 +88850,7 @@ function findingIdentity(f2) {
 function str2(v, fallback = "") {
   return typeof v === "string" ? v : fallback;
 }
-function routeOf3(item) {
+function routeOf4(item) {
   if (typeof item.route === "string") return item.route;
   if (typeof item.url === "string") return normalizeRoute(item.url);
   return "/";
@@ -88544,7 +88862,7 @@ function extractRunFindings(data) {
     if (!Array.isArray(list2)) return;
     for (const item of list2) {
       if (!isRecord(item) || typeof item.fingerprint !== "string") continue;
-      out.push({ kind: kindOf(item), fingerprint: item.fingerprint, route: routeOf3(item), title: str2(item.title, item.fingerprint) });
+      out.push({ kind: kindOf(item), fingerprint: item.fingerprint, route: routeOf4(item), title: str2(item.title, item.fingerprint) });
     }
   };
   fingerprinted(data.defects, (d) => d.kind === "invariant" ? "invariant" : `defect/${str2(d.kind, "unknown")}`);
@@ -88553,14 +88871,14 @@ function extractRunFindings(data) {
   if (isRecord(data.coverage) && Array.isArray(data.coverage.defects)) {
     for (const d of data.coverage.defects) {
       if (!isRecord(d) || typeof d.stateFingerprint !== "string") continue;
-      out.push({ kind: "coverage-defect", fingerprint: d.stateFingerprint, route: routeOf3(d), title: str2(d.reason, "looks broken") });
+      out.push({ kind: "coverage-defect", fingerprint: d.stateFingerprint, route: routeOf4(d), title: str2(d.reason, "looks broken") });
     }
   }
   if (isRecord(data.report) && Array.isArray(data.report.findings)) {
     for (const f2 of data.report.findings) {
       if (!isRecord(f2) || typeof f2.rubricItemId !== "string") continue;
       const controls = Array.isArray(f2.controls) ? f2.controls.filter((c) => typeof c === "string") : [];
-      out.push({ kind: "ux", route: routeOf3(f2), title: str2(f2.observation, f2.rubricItemId), rubricItemId: f2.rubricItemId, controls });
+      out.push({ kind: "ux", route: routeOf4(f2), title: str2(f2.observation, f2.rubricItemId), rubricItemId: f2.rubricItemId, controls });
     }
   }
   return out;
@@ -91645,18 +91963,18 @@ function rebaseRecording(recording, env) {
     if (mustBeAllowed && !env.allowedOrigins.includes(u.origin)) refusals.push(`${where} is on ${u.origin}`);
     return raw;
   };
-  const walk = (v, where) => {
-    if (Array.isArray(v)) return v.map((x, i) => walk(x, `${where}[${i}]`));
+  const walk2 = (v, where) => {
+    if (Array.isArray(v)) return v.map((x, i) => walk2(x, `${where}[${i}]`));
     if (v === null || typeof v !== "object") return v;
     const o = v;
     const out = {};
-    for (const [k, x] of Object.entries(o)) out[k] = walk(x, `${where}.${k}`);
+    for (const [k, x] of Object.entries(o)) out[k] = walk2(x, `${where}.${k}`);
     if (o.kind === "navigate" && typeof o.url === "string") out.url = move(o.url, `${where} (navigate ${o.url})`, true);
     if (o.kind === "urlIncludes" && typeof o.text === "string") out.text = move(o.text, `${where}.text`, false);
     return out;
   };
   const pages = recording.pages.map((p, i) => ({
-    ...walk(p, `pages[${i}]`),
+    ...walk2(p, `pages[${i}]`),
     url: move(p.url, `pages[${i}] (${p.url})`, true)
   }));
   if (refusals.length > 0) {
@@ -94428,7 +94746,7 @@ function classifyTarget(d, testIdAttributes, via) {
 function kebabCase(s3) {
   return s3.normalize("NFKD").replace(/[̀-ͯ]/g, "").replace(/([a-z0-9])([A-Z])/g, "$1-$2").toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 40).replace(/-+$/g, "");
 }
-function routeOf4(url2) {
+function routeOf5(url2) {
   if (url2 === void 0 || url2 === "") return void 0;
   try {
     return new URL(url2).pathname;
@@ -94526,7 +94844,7 @@ function dedupeSuggestions(lists) {
   return [...byKey.values()].sort((a, b2) => b2.occurrences.length - a.occurrences.length || a.key.localeCompare(b2.key));
 }
 function flatWithRoute(rec) {
-  return rec.pages.flatMap((p) => p.steps.map((recorded) => ({ recorded, route: routeOf4(p.url) })));
+  return rec.pages.flatMap((p) => p.steps.map((recorded) => ({ recorded, route: routeOf5(p.url) })));
 }
 function healthLine(h) {
   const total = h.stable + h.brittle;
@@ -96830,6 +97148,43 @@ function reportSlowness(replays) {
 import { mkdir as mkdir22, writeFile as writeFile25 } from "node:fs/promises";
 import { join as join52, resolve as resolve16 } from "node:path";
 
+// src/outcome-targets.ts
+function evaluateOutcomeTargets(outcomes, baseline) {
+  return outcomes.map((o) => evaluateOne(o, baseline));
+}
+function evaluateOne(o, baseline) {
+  const metric = o.metric;
+  const target = o.target;
+  if (metric === void 0 || target === void 0) {
+    return { outcomeId: o.id, status: "not-decidable-by-replay", reason: "no metric or no target" };
+  }
+  const written2 = `${target.op} ${target.value} ${target.unit}`;
+  if (metric.kind !== "duration") {
+    return { outcomeId: o.id, status: "not-decidable-by-replay", target: written2, reason: `a ${metric.kind} metric needs real users, not a replay` };
+  }
+  const at3 = (name) => baseline.anchors.find((a) => a.name === name)?.atMs;
+  const from = at3(metric.from);
+  const to = at3(metric.to);
+  const missing = from === void 0 ? metric.from : to === void 0 ? metric.to : null;
+  if (missing !== null || from === void 0 || to === void 0) {
+    return { outcomeId: o.id, status: "unmeasured", target: written2, reason: `anchor '${missing}' is not in the replay's baseline` };
+  }
+  const floorSeconds = Math.max(0, to - from) / 1e3;
+  const floor = `the replay took ${floorSeconds}s from '${metric.from}' to '${metric.to}'`;
+  if (metric.stat === "share_under") {
+    const wantsShare = (target.op === ">" || target.op === ">=") && target.unit === "percent" && target.value > 0;
+    if (!wantsShare || metric.threshold === void 0) {
+      return { outcomeId: o.id, status: "not-decidable-by-replay", floorSeconds, target: written2, reason: "only a lower bound on the share under a threshold is decidable" };
+    }
+    return metric.threshold < floorSeconds ? { outcomeId: o.id, status: "miss", floorSeconds, target: written2, reason: `${floor}, over the ${metric.threshold}s threshold: no one finishes under it` } : { outcomeId: o.id, status: "not-decidable", floorSeconds, target: written2, reason: `${floor}, within the ${metric.threshold}s threshold` };
+  }
+  if (target.unit !== "s" || target.op !== "<" && target.op !== "<=") {
+    return { outcomeId: o.id, status: "not-decidable-by-replay", floorSeconds, target: written2, reason: "only an upper bound in seconds is decidable" };
+  }
+  const breaks = target.op === "<" ? floorSeconds >= target.value : floorSeconds > target.value;
+  return breaks ? { outcomeId: o.id, status: "miss", floorSeconds, target: written2, reason: `${floor}: the fastest path already breaks ${written2}` } : { outcomeId: o.id, status: "not-decidable", floorSeconds, target: written2, reason: `${floor}, within ${written2}` };
+}
+
 // src/ux-usability/setup.ts
 import { join as join46, resolve as resolvePath11 } from "node:path";
 
@@ -97259,7 +97614,7 @@ function controlKey2(c) {
 }
 
 // ../ux/dist/route.js
-function routeOf5(url2) {
+function routeOf6(url2) {
   try {
     return urlTemplate(new URL(url2).pathname || "/");
   } catch {
@@ -97408,7 +97763,7 @@ function a11yChecks(evidence, rubric) {
     const q = rubric.get(id)?.questions[0];
     return q?.severity ?? "minor";
   };
-  const route = routeOf5(evidence.url);
+  const route = routeOf6(evidence.url);
   const controlByRef = new Map(evidence.controls.map((c) => [`control:${c.index}`, c]));
   const labelOf2 = (refId) => {
     const c = controlByRef.get(refId);
@@ -97709,6 +98064,7 @@ var SIGNAL_RULES = {
   "duplicate-create": { id: "signal-duplicate-create", principle: "Error prevention", citation: NNG, severity: "major" },
   "failed-submit": { id: "signal-failed-submit", principle: "Help users recognize, diagnose, and recover from errors", citation: NNG, severity: "major" },
   "url-mismatch": { id: "signal-url-mismatch", principle: "Consistency and standards", citation: NNG, severity: "minor" },
+  "repeated-advance": { id: "signal-repeated-advance", principle: "Flexibility and efficiency of use", citation: NNG, severity: "minor" },
   "horizontal-overflow": { id: "signal-horizontal-overflow", principle: "Flexibility and efficiency of use", citation: NNG, severity: "major" },
   "vertical-clipping": { id: "signal-vertical-clipping", principle: "Visibility of system status", citation: NNG, severity: "major" }
 };
@@ -97750,7 +98106,7 @@ function makeSignalFinding(input2) {
     recommendation: input2.recommendation.trim(),
     tier: "signal",
     screenId: input2.screenId,
-    route: routeOf5(input2.url),
+    route: routeOf6(input2.url),
     controls: [...input2.controls ?? []],
     quotes: [...input2.quotes ?? []],
     occurrences: input2.occurrences ?? 1,
@@ -97791,6 +98147,14 @@ function quoteLine(text2, needle) {
   const t = line2.replace(/\s+/g, " ").trim();
   return t.length <= 160 ? t : `${t.slice(0, 157)}...`;
 }
+function labelOf(s3) {
+  const quoted = /"([^"]{2,160})"/.exec(s3.target ?? "")?.[1];
+  const raw = quoted ?? s3.descriptor?.name ?? s3.descriptor?.text ?? null;
+  if (raw === null || raw === void 0)
+    return null;
+  const t = raw.replace(/[→←↗›»…]+/g, " ").replace(/\s+/g, " ").trim();
+  return t.length >= 2 ? t : null;
+}
 
 // ../ux/dist/signals/basic.js
 function detectHungRequests(capture2, opts = {}) {
@@ -97979,7 +98343,7 @@ function detectInternalIds(capture2) {
         if (typed.includes(id))
           continue;
         const line2 = quoteLine(screen.visibleText, id);
-        const key2 = `${routeOf5(screen.url)}|${pattern.name}`;
+        const key2 = `${routeOf6(screen.url)}|${pattern.name}`;
         const g = groups.get(key2) ?? { pattern, ids: /* @__PURE__ */ new Set(), lines: /* @__PURE__ */ new Set(), screens: [], intentional: true };
         g.ids.add(id);
         g.lines.add(line2);
@@ -98080,6 +98444,71 @@ function detectInertControls(capture2) {
   return out;
 }
 
+// ../ux/dist/signals/effort.js
+var REPEATED_ADVANCE_MIN = 3;
+var ADVANCE_NAME = /^(continue|next|next step|confirm|ok|okay|proceed|yes|go on)$/i;
+var INPUT_OPS = /* @__PURE__ */ new Set(["type", "select", "send", "upload", "fill", "edit_text", "check", "uncheck"]);
+var PASSIVE_OPS = /* @__PURE__ */ new Set(["wait", "scroll_down", "scroll_up"]);
+function advanced(capture2, s3) {
+  const before = capture2.screens.filter((x) => x.step === s3.step).pop();
+  const after = capture2.screens.find((x) => x.step > s3.step);
+  if (before === void 0 || after === void 0 || routeOf6(after.url) !== routeOf6(before.url))
+    return void 0;
+  return after.visibleText !== before.visibleText ? after : void 0;
+}
+function detectRepeatedAdvances(capture2) {
+  const streaks = [];
+  let current2 = [];
+  let key2 = null;
+  const close = () => {
+    if (current2.length >= REPEATED_ADVANCE_MIN)
+      streaks.push(current2);
+    current2 = [];
+    key2 = null;
+  };
+  for (const s3 of capture2.steps) {
+    if (s3.op !== null && PASSIVE_OPS.has(s3.op))
+      continue;
+    const label2 = s3.op === "click" && s3.actOk ? labelOf(s3) : null;
+    const after = label2 !== null && ADVANCE_NAME.test(label2) ? advanced(capture2, s3) : void 0;
+    if (label2 === null || after === void 0 || s3.op !== null && INPUT_OPS.has(s3.op)) {
+      close();
+      continue;
+    }
+    const k = `${routeOf6(s3.url)}|${label2.toLowerCase()}`;
+    if (key2 !== null && k !== key2)
+      close();
+    key2 = k;
+    current2.push({ step: s3, after });
+  }
+  close();
+  return streaks.map((hits) => {
+    const label2 = labelOf(hits[0].step) ?? "the advance control";
+    const n3 = hits.length;
+    const steps = hits.map((h) => h.step.step);
+    const last = hits[n3 - 1];
+    return makeSignalFinding({
+      kind: "repeated-advance",
+      confidence: n3 >= 5 ? 0.8 : n3 === 4 ? 0.7 : 0.6,
+      url: last.after.url,
+      screenId: last.after.signature,
+      observation: `The flow needed "${label2}" ${n3} times in a row (steps ${steps.join(", ")}) with nothing entered between them, each only moving to the next screen.`,
+      userImpact: "Every extra confirmation costs the user time and attention without adding a decision; repeated identical steps also read as the page not responding.",
+      recommendation: `Fold the repeated "${label2}" screens into one step, or let the user confirm once.`,
+      controls: [label2],
+      occurrences: n3,
+      screenIds: [...new Set(hits.map((h) => h.after.signature))],
+      evidence: {
+        kind: "repeated-advance",
+        steps,
+        requests: [],
+        ...last.after.screenshot === void 0 ? {} : { screenshot: last.after.screenshot },
+        detail: `${n3} consecutive successful "${label2}" clicks on ${routeOf6(last.after.url)} with no input between them, each changing the page text`
+      }
+    });
+  });
+}
+
 // ../ux/dist/signals/journey.js
 var ERROR_TEXT = /\b(error|errors|failed|failure|went wrong|unavailable|couldn['’]?t|could not|can['’]?t|cannot|unable|try again|invalid|problem|denied|forbidden|expired|not (?:be )?(?:saved|sent|found|recorded))\b/i;
 var GENERIC_ERROR = /\b(something went wrong|an? (?:unexpected |unknown )?error (?:has )?occurred|unexpected error|oops|try again later)\b/i;
@@ -98088,14 +98517,6 @@ var FIELD_OPS = /* @__PURE__ */ new Set(["type", "select"]);
 function normLine(s3) {
   return s3.replace(/\s+/g, " ").trim().toLowerCase();
 }
-function labelOf(s3) {
-  const quoted = /"([^"]{2,160})"/.exec(s3.target ?? "")?.[1];
-  const raw = quoted ?? s3.descriptor?.name ?? s3.descriptor?.text ?? null;
-  if (raw === null || raw === void 0)
-    return null;
-  const t = raw.replace(/[→←↗›»…]+/g, " ").replace(/\s+/g, " ").trim();
-  return t.length >= 2 ? t : null;
-}
 function screenBefore(capture2, step) {
   return capture2.screens.filter((s3) => s3.step <= step).pop();
 }
@@ -98134,7 +98555,7 @@ function detectStuckJobs(capture2, opts = {}) {
     const label2 = labelOf(start);
     if (label2 === null)
       continue;
-    const route = routeOf5(start.url);
+    const route = routeOf6(start.url);
     const key2 = `${route}|${normLine(label2)}`;
     if (reported.has(key2))
       continue;
@@ -98143,7 +98564,7 @@ function detectStuckJobs(capture2, opts = {}) {
       continue;
     const window2 = [];
     for (const s3 of capture2.steps.filter((x) => x.step > start.step)) {
-      if (routeOf5(s3.url) !== route)
+      if (routeOf6(s3.url) !== route)
         break;
       const other = s3.op !== null && START_OPS.has(s3.op) && controlKey3(s3) !== controlKey3(start);
       if (other && capture2.requests.some((r) => r.step === s3.step && isWrite(r) && okStatus(r)))
@@ -98151,7 +98572,7 @@ function detectStuckJobs(capture2, opts = {}) {
       window2.push(s3);
     }
     const lastStep = window2.length > 0 ? window2[window2.length - 1].step : start.step;
-    const screens = capture2.screens.filter((s3) => s3.step > start.step && s3.step <= lastStep + 1 && routeOf5(s3.url) === route);
+    const screens = capture2.screens.filter((s3) => s3.step > start.step && s3.step <= lastStep + 1 && routeOf6(s3.url) === route);
     if (screens.length === 0)
       continue;
     const reclicks = window2.filter((s3) => s3.op === start.op && s3.actOk && controlKey3(s3) === controlKey3(start));
@@ -98163,7 +98584,17 @@ function detectStuckJobs(capture2, opts = {}) {
     }
     const polls = [...polled.values()].sort((a, b2) => b2.length - a.length)[0] ?? [];
     const inProgress = reclicks.length > 0 || waits.length > 0 || busy.length > 0 || polls.length >= 3;
+    const before = screenBefore(capture2, start.step);
+    const was = new Set(before === void 0 ? [] : linesOf(before.visibleText).map(normLine));
+    const labelLine = normLine(label2);
+    const own2 = new Set([start.value, start.message, ...capture2.typedValues ?? []].filter((v) => v !== void 0 && v.trim().length > 0).map(normLine));
     const last = screens[screens.length - 1];
+    const completed = before !== void 0 && !last.busy && !BUSY_TEXT2.test(last.visibleText) && screens.some((s3) => linesOf(s3.visibleText).some((line2) => {
+      const n3 = normLine(line2);
+      return n3.length >= 2 && n3 !== labelLine && !was.has(n3) && !own2.has(n3) && !BUSY_TEXT2.test(line2);
+    }));
+    if (completed)
+      continue;
     const offered = reclicks.length > 0 || normLine(last.visibleText).includes(normLine(label2));
     const endedHere = !capture2.screens.some((s3) => s3.step > last.step);
     const startedAt = Math.min(...writes.map((w) => w.startedAt));
@@ -98342,7 +98773,7 @@ function detectFailedSubmits(capture2) {
     const after = screenAfter(capture2, s3.step);
     if (after === void 0)
       continue;
-    if (before !== void 0 && routeOf5(after.url) !== routeOf5(before.url))
+    if (before !== void 0 && routeOf6(after.url) !== routeOf6(before.url))
       continue;
     const lines = linesOf(`${after.visibleText}
 ${s3.reply ?? ""}`);
@@ -98411,15 +98842,15 @@ function headingOf(s3) {
 function detectUrlMismatches(capture2) {
   const hits = /* @__PURE__ */ new Map();
   capture2.screens.forEach((b2, i) => {
-    const route = routeOf5(b2.url);
+    const route = routeOf6(b2.url);
     const heading = headingOf(b2);
     if (heading.length < 3)
       return;
     const { words: words3, known } = routeWords2(route);
     if (words3.length === 0 || relates(heading, words3))
       return;
-    const other = capture2.screens.find((s3) => routeOf5(s3.url) !== route && normLine(headingOf(s3)) === normLine(heading) && relates(heading, routeWords2(routeOf5(s3.url)).words));
-    const prior = capture2.screens.slice(0, i).reverse().find((s3) => routeOf5(s3.url) === route && normLine(headingOf(s3)) !== normLine(heading));
+    const other = capture2.screens.find((s3) => routeOf6(s3.url) !== route && normLine(headingOf(s3)) === normLine(heading) && relates(heading, routeWords2(routeOf6(s3.url)).words));
+    const prior = capture2.screens.slice(0, i).reverse().find((s3) => routeOf6(s3.url) === route && normLine(headingOf(s3)) !== normLine(heading));
     const transitioned = known && prior !== void 0 && relates(headingOf(prior), words3);
     if (other === void 0 && !transitioned)
       return;
@@ -98430,7 +98861,7 @@ function detectUrlMismatches(capture2) {
       route,
       known,
       ...transitioned ? { was: headingOf(prior) } : {},
-      ...other === void 0 ? {} : { elsewhere: routeOf5(other.url) }
+      ...other === void 0 ? {} : { elsewhere: routeOf6(other.url) }
     };
     g.screens.push(b2);
     hits.set(k, g);
@@ -98475,6 +98906,7 @@ function detectSignals(capture2, opts = {}) {
     ...withoutSubsumedDuplicateWrites(detectDuplicateWrites(capture2, opts), journey),
     ...detectInternalIds(capture2),
     ...detectInertControls(capture2),
+    ...detectRepeatedAdvances(capture2),
     ...journey
   ];
 }
@@ -98506,6 +98938,7 @@ var SIGNAL_IMPACT = {
   "internal-id": "confused",
   "inert-control": "confused",
   "url-mismatch": "confused",
+  "repeated-advance": "slowed",
   "horizontal-overflow": "confused",
   "vertical-clipping": "confused"
 };
@@ -98533,7 +98966,7 @@ function detectFriction(capture2, outcome) {
   };
   const routesAt = (nums) => {
     const set2 = new Set(nums);
-    return [.../* @__PURE__ */ new Set([...steps.filter((s3) => set2.has(s3.step)).map((s3) => routeOf5(s3.url)), ...capture2.screens.filter((s3) => set2.has(s3.step)).map((s3) => routeOf5(s3.url))])];
+    return [.../* @__PURE__ */ new Set([...steps.filter((s3) => set2.has(s3.step)).map((s3) => routeOf6(s3.url)), ...capture2.screens.filter((s3) => set2.has(s3.step)).map((s3) => routeOf6(s3.url))])];
   };
   const add = (kind, impact, nums, detail) => {
     const sorted2 = [...new Set(nums)].filter((n3) => n3 > 0).sort((a, b2) => a - b2);
@@ -98624,7 +99057,7 @@ function detectFriction(capture2, outcome) {
     const blocking = reqs.some((r) => WRITE_METHODS3.has(r.method.toUpperCase()) && (r.failed === true || (r.status ?? 0) >= 500));
     add("error", blocking ? "blocked" : "slowed", [step], `${reqs.map((r) => `${r.endpoint} \u2192 ${r.failed === true ? "failed" : r.status}`).join(", ")} after step ${step}`);
   }
-  const seq = capture2.screens.map((s3) => ({ route: routeOf5(s3.url), step: s3.step }));
+  const seq = capture2.screens.map((s3) => ({ route: routeOf6(s3.url), step: s3.step }));
   for (let x = 2; x < seq.length; x++) {
     const here = seq[x];
     if (seq[x - 1].route === here.route)
@@ -98651,7 +99084,7 @@ function detectFriction(capture2, outcome) {
       continue;
     if (between.some((r) => r.actOk && (r.op === "click" || r.op === "send" || r.op === "select")))
       continue;
-    add("abandoned", "confused", [s3.step, rest[leftAt].step], `a value typed at step ${s3.step} was left unsubmitted when the run moved to ${routeOf5(rest[leftAt].url)}`);
+    add("abandoned", "confused", [s3.step, rest[leftAt].step], `a value typed at step ${s3.step} was left unsubmitted when the run moved to ${routeOf6(rest[leftAt].url)}`);
   }
   if (outcome?.status === "incomplete" && steps.length > 0) {
     const tail = steps.slice(-3).map((s3) => s3.step);
@@ -99229,8 +99662,8 @@ function boundTargetOptions(controls, point, steps, limit = MAX_CHOICE_OPTIONS -
   const acted = steps.filter((s3) => point.steps.includes(s3.step));
   const words3 = new Set(normalizeText(point.detail).split(" ").filter((w) => w.length >= 3));
   const score2 = (c) => (acted.some((s3) => stepNames(s3, c)) ? 400 : 0) + (normalizeText(c.name).split(" ").some((w) => words3.has(w)) ? 60 : 0) + (c.enabled ? 10 : 0);
-  const keep = new Set(controls.map((c, i) => ({ c, i, s: score2(c) })).sort((a, b2) => b2.s - a.s || a.i - b2.i).slice(0, limit).map((x) => x.c.index));
-  return controls.filter((c) => keep.has(c.index));
+  const keep2 = new Set(controls.map((c, i) => ({ c, i, s: score2(c) })).sort((a, b2) => b2.s - a.s || a.i - b2.i).slice(0, limit).map((x) => x.c.index));
+  return controls.filter((c) => keep2.has(c.index));
 }
 function frictionText(p) {
   return `${p.kind} (steps ${p.steps.join(", ")}): ${p.detail}`.slice(0, 600);
@@ -99259,7 +99692,7 @@ async function analyzeClaims(request, deps) {
   for (const raw of request.screens) {
     try {
       const red = redactEvidence(raw, secrets, deps.redactor);
-      screens.push({ raw, red, route: routeOf5(red.url) });
+      screens.push({ raw, red, route: routeOf6(red.url) });
     } catch (cause) {
       return { kind: "failed", reason: `redaction failed: ${message(cause)}`, screenId: raw.screenId };
     }
@@ -99749,7 +100182,7 @@ ${f2.route}
 ${element}`, "utf8").digest("hex").slice(0, 16);
 }
 function contractRouteTemplate(urlOrRoute) {
-  return routeOf5(urlOrRoute).split("/").map((seg) => /^:[A-Za-z][A-Za-z0-9_]{0,63}$/.test(seg) ? `{${seg.slice(1)}}` : seg).join("/");
+  return routeOf6(urlOrRoute).split("/").map((seg) => /^:[A-Za-z][A-Za-z0-9_]{0,63}$/.test(seg) ? `{${seg.slice(1)}}` : seg).join("/");
 }
 
 // ../ux/dist/rubric/schema.js
@@ -101091,7 +101524,7 @@ function planGuardProbes(screens, secrets, safety) {
   const refused = [];
   for (const screen of screens) {
     const red = redactEvidence(screen, secrets);
-    const route = routeOf5(red.url);
+    const route = routeOf6(red.url);
     screen.controls.forEach((c, i) => {
       if (controlRisk(c.name, c.role)?.risk !== "destructive") return;
       const rc = red.controls[i];
@@ -101850,11 +102283,11 @@ var MAX_SCAN_DEPTH = 8;
 function scanRuns(dirs) {
   const seen = /* @__PURE__ */ new Set();
   const runs = [];
-  const walk = (dir, depth) => {
+  const walk2 = (dir, depth) => {
     for (const entry of readdirSync8(dir, { withFileTypes: true }).sort((a, b2) => a.name.localeCompare(b2.name))) {
       const path2 = resolve13(dir, entry.name);
       if (entry.isDirectory()) {
-        if (depth < MAX_SCAN_DEPTH && !entry.name.startsWith(".") && entry.name !== "node_modules") walk(path2, depth + 1);
+        if (depth < MAX_SCAN_DEPTH && !entry.name.startsWith(".") && entry.name !== "node_modules") walk2(path2, depth + 1);
         continue;
       }
       if (!entry.isFile() || !isResultName(entry.name) || seen.has(path2)) continue;
@@ -101866,7 +102299,7 @@ function scanRuns(dirs) {
   };
   for (const dir of dirs) {
     if (!existsSync23(dir) || !statSync9(dir).isDirectory()) continue;
-    walk(dir, 0);
+    walk2(dir, 0);
   }
   return runs.sort((a, b2) => (a.startedAt ?? "").localeCompare(b2.startedAt ?? "") || a.runId.localeCompare(b2.runId));
 }
@@ -103328,6 +103761,29 @@ var REAL_RUNNERS = {
   usability: runUsabilityMission,
   verifyFix: runVerifyFix
 };
+async function addOutcomeTargets(items, executed, opts) {
+  const catalogDir = opts.projectDir === void 0 ? findProjectDir() : opts.projectDir;
+  if (catalogDir === null) return;
+  const catalogs = /* @__PURE__ */ new Map();
+  const catalogFor = (journeysDir) => {
+    const dir = resolve16(journeysDir);
+    let c = catalogs.get(dir);
+    if (c === void 0) {
+      c = loadCatalog(catalogDir, dir).catch(() => null);
+      catalogs.set(dir, c);
+    }
+    return c;
+  };
+  for (const [idx, { item }] of executed.entries()) {
+    const report2 = items[idx];
+    if (report2 === void 0 || item.kind !== "journey" || report2.baseline === void 0) continue;
+    const catalog = await catalogFor(item.t.target.journeysDir ?? opts.journeysDir);
+    const jobId = catalog?.journeys.find((j) => j.id === item.name)?.job;
+    const outcomes = catalog === null || jobId === void 0 ? void 0 : findJob(catalog, jobId)?.job.desiredOutcomes;
+    if (outcomes === void 0 || outcomes.length === 0) continue;
+    items[idx] = { ...report2, outcomeTargets: evaluateOutcomeTargets(outcomes, report2.baseline) };
+  }
+}
 async function approvalDefects(opts, req) {
   const dirs = [...new Set([opts.journeysDir, ...opts.suite.targets.flatMap((t) => t.journeysDir === void 0 ? [] : [t.journeysDir])].map((d) => resolve16(d)))];
   const catalogs = [];
@@ -103553,6 +104009,7 @@ async function runCheck(opts) {
       ...ex.locatorHealth === void 0 ? {} : { locatorHealth: ex.locatorHealth }
     };
   });
+  await addOutcomeTargets(itemReports, executed, opts);
   const details = executed.flatMap(
     ({ item, ex }) => item.kind === "journey" && ex?.locatorDetail !== void 0 ? [{ name: item.name, detail: ex.locatorDetail }] : []
   );
@@ -104321,8 +104778,8 @@ function bundleDemos(input2, journeys, warn) {
   if (demos.length > LIMITS.demos) {
     warn.push(`${demos.length} demos: only the first ${LIMITS.demos} are exported`);
     const kept = new Set(demos.slice(0, LIMITS.demos).map((d) => `media/${d.journey}/`));
-    const keep = (p) => [...kept].some((k) => p.startsWith(k));
-    return { demos: demos.slice(0, LIMITS.demos), files: files.filter((f2) => keep(f2.path)), media: media.filter((m) => keep(m.path)) };
+    const keep2 = (p) => [...kept].some((k) => p.startsWith(k));
+    return { demos: demos.slice(0, LIMITS.demos), files: files.filter((f2) => keep2(f2.path)), media: media.filter((m) => keep2(m.path)) };
   }
   return { demos, files, media };
 }
@@ -105018,7 +105475,7 @@ function findingDropWarning(fingerprint2, kind, issues) {
 function bundleFindings(src) {
   const warnings = [];
   const latest = /* @__PURE__ */ new Map();
-  const keep = (m) => {
+  const keep2 = (m) => {
     if (m === null) return;
     if ("drop" in m) {
       warnings.push(`${m.drop} \u2014 left out of the bundle`);
@@ -105033,10 +105490,10 @@ function bundleFindings(src) {
     if (prev === void 0 || prev.at <= m.finding.at) latest.set(m.finding.fingerprint, m.finding);
   };
   const byPath = new Map(src.runs.map((r) => [r.path, r]));
-  for (const d of consolidate(src.runs)) keep(defectFinding(d, byPath));
+  for (const d of consolidate(src.runs)) keep2(defectFinding(d, byPath));
   for (const { report: report2, run } of src.uxReports) {
     if (!isRecord(report2) || !Array.isArray(report2.findings)) continue;
-    for (const f2 of report2.findings) if (isRecord(f2)) keep(uxFinding(f2, run));
+    for (const f2 of report2.findings) if (isRecord(f2)) keep2(uxFinding(f2, run));
   }
   let findings = [...latest.values()].sort((a, b2) => a.at.localeCompare(b2.at) || a.fingerprint.localeCompare(b2.fingerprint));
   if (findings.length > MAX_FINDINGS) {
@@ -116451,8 +116908,8 @@ function confineSweepFixture(raw, root2) {
     realRoot = realpathSync5(root2);
   } catch {
   }
-  const sensitive = fixtureSensitiveReason(real, realRoot) ?? fixtureSensitiveReason(absolute, resolve23(root2));
-  if (sensitive !== null) throw fixtureSensitive(absolute, root2, sensitive);
+  const sensitive2 = fixtureSensitiveReason(real, realRoot) ?? fixtureSensitiveReason(absolute, resolve23(root2));
+  if (sensitive2 !== null) throw fixtureSensitive(absolute, root2, sensitive2);
   return absolute;
 }
 function tsvTags(cell2, where, problems) {