@qawolf/cli 1.35.0 → 1.36.0

package/dist/runner-sdk.js

@@ -2462,7 +2462,6 @@ var bigint = /^-?\d+n?$/;
 var integer = /^-?\d+$/;
 var number = /^-?\d+(?:\.\d+)?$/;
 var boolean = /^(?:true|false)$/i;
-var _null = /^null$/i;
 var lowercase = /^[^A-Z]*$/;
 var uppercase = /^[^a-z]*$/;
 
@@ -3383,23 +3382,6 @@ var $ZodBigInt = /* @__PURE__ */ $constructor("$ZodBigInt", (inst, def) => {
     return payload;
   };
 });
-var $ZodNull = /* @__PURE__ */ $constructor("$ZodNull", (inst, def) => {
-  $ZodType.init(inst, def);
-  inst._zod.pattern = _null;
-  inst._zod.values = new Set([null]);
-  inst._zod.parse = (payload, _ctx) => {
-    const input = payload.value;
-    if (input === null)
-      return payload;
-    payload.issues.push({
-      expected: "null",
-      code: "invalid_type",
-      input,
-      inst
-    });
-    return payload;
-  };
-});
 var $ZodUnknown = /* @__PURE__ */ $constructor("$ZodUnknown", (inst, def) => {
   $ZodType.init(inst, def);
   inst._zod.parse = (payload) => payload;
@@ -4884,12 +4866,6 @@ function _coercedBigint(Class, params) {
     ...normalizeParams(params)
   });
 }
-function _null2(Class, params) {
-  return new Class({
-    type: "null",
-    ...normalizeParams(params)
-  });
-}
 function _unknown(Class) {
   return new Class({
     type: "unknown"
@@ -6519,14 +6495,6 @@ var ZodBigInt = /* @__PURE__ */ $constructor("ZodBigInt", (inst, def) => {
   inst.maxValue = bag.maximum ?? null;
   inst.format = bag.format ?? null;
 });
-var ZodNull = /* @__PURE__ */ $constructor("ZodNull", (inst, def) => {
-  $ZodNull.init(inst, def);
-  ZodType.init(inst, def);
-  inst._zod.processJSONSchema = (ctx, json, params) => nullProcessor(inst, ctx, json, params);
-});
-function _null3(params) {
-  return _null2(ZodNull, params);
-}
 var ZodUnknown = /* @__PURE__ */ $constructor("ZodUnknown", (inst, def) => {
   $ZodUnknown.init(inst, def);
   ZodType.init(inst, def);
@@ -6957,12 +6925,6 @@ function refine(fn, _params = {}) {
 function superRefine(fn, params) {
   return _superRefine(fn, params);
 }
-function json(params) {
-  const jsonSchema = lazy(() => {
-    return union([string2(params), number2(), boolean2(), _null3(), array(jsonSchema), record(string2(), jsonSchema)]);
-  });
-  return jsonSchema;
-}
 // node_modules/zod/v4/classic/coerce.js
 var exports_coerce = {};
 __export(exports_coerce, {
@@ -7009,6 +6971,75 @@ var agentReplySchema = object({
 var maxAgentWaitSeconds = 45;
 var agentWakeReasonSchema = _enum(["reply", "status", "timeout"]).describe('Why a held check answered. "reply" means the AI said something new, "status" means the session settled or needs you, "timeout" means the hold ran out with nothing new.');
 
+// node_modules/@qawolf/api-contracts/dist/v1/run/summary.js
+var publicRunStatusValues = [
+  "queued",
+  "running",
+  "passed",
+  "failed",
+  "canceled"
+];
+var makeRunSummaryFields = (ids) => ({
+  completedAt: exports_iso.datetime().optional().describe("When the run finished executing. Absent while queued or running, and also absent for a terminal run that never completed execution (e.g. every flow was canceled or skipped)."),
+  createdAt: exports_iso.datetime(),
+  git: object({
+    branch: string2().optional(),
+    commitMessage: string2().optional(),
+    commitSha: string2().optional(),
+    commitUrl: string2().optional().describe("Link to the commit on the code host.")
+  }).describe("The branch and commit under test. The fields are present when a deploy notification started the run, and absent for runs started another way, for example manually or with run.create."),
+  needsReview: boolean2().optional().describe("True once every flow has finished its attempts and at least one failed flow still has no diagnosis, including one whose investigation carried over to a later run. `status` stays `running` until that failure is diagnosed, so a caller that is not waiting for a diagnosis can stop polling here and read the run's failed flows."),
+  runId: ids.run,
+  status: _enum(publicRunStatusValues).describe("Whole-run status, and the value to gate a pipeline on. Terminal statuses are passed, failed, and canceled; poll until one is reached. `failed` means the run found a bug that is still open and serious enough to block — a lower-priority bug, or one since resolved, reads `passed`, and the per-flow diagnoses are still in `flows`. The run stays `running` while any investigation is unresolved, including one that carried over to a later run, so a terminal status always means a settled answer. `needsReview` tells such a run apart from one that is still executing.")
+});
+
+// node_modules/@qawolf/api-contracts/dist/v1/deployment/didNotRunReason.js
+var didNotRunReasonSchema = _enum([
+  "billing-prevented",
+  "branch-still-syncing",
+  "deployment-no-longer-live",
+  "duplicate-run",
+  "environment-not-linked-to-branch",
+  "environment-not-ready",
+  "environment-terminated",
+  "internal-error",
+  "low-risk-change",
+  "no-flows-to-run",
+  "no-matching-trigger",
+  "no-pull-request",
+  "no-relevant-flows",
+  "rate-limited",
+  "run-not-created",
+  "skipped",
+  "test-configuration-error",
+  "trigger-not-found",
+  "workspace-inactive",
+  "workspace-not-ready"
+]).describe([
+  "Why the matched trigger created no run, as a stable value safe to branch on in a CI pipeline. The accompanying `message` is the wording for a person to read and may be reworded at any time; this value will not be.",
+  "billing-prevented: a billing restriction on the workspace stopped the run.",
+  "branch-still-syncing: the environment was still syncing its flows.",
+  "deployment-no-longer-live: the deployment was torn down or replaced by a newer one before the run started.",
+  "duplicate-run: another run already covered this same deployment.",
+  "environment-not-linked-to-branch: the environment has no branch to take flows from yet.",
+  "environment-not-ready: the environment was still being prepared; retrying later can succeed.",
+  "environment-terminated: the environment for the run is terminated.",
+  "internal-error: QA Wolf could not start the run and the cause is on our side.",
+  "low-risk-change: adaptive flow selection assessed the change as low risk, so nothing needed to run.",
+  "no-flows-to-run: no flow was eligible, because the trigger's flows are in maintenance, still drafts, or missing on this branch.",
+  "no-matching-trigger: no deployment trigger matched.",
+  "no-pull-request: the trigger uses adaptive flow selection, which needs an open pull request, and this deployment had none.",
+  "no-relevant-flows: adaptive flow selection found no existing flow covering this change.",
+  "rate-limited: too many runs were requested at once; retrying later can succeed.",
+  "run-not-created: the run never reached a decision.",
+  "skipped: the run was skipped for a reason with no more specific value.",
+  "test-configuration-error: the workspace's flows or dependency rules need fixing before this can run.",
+  "trigger-not-found: the trigger no longer exists.",
+  "workspace-inactive: the workspace is not active.",
+  "workspace-not-ready: the workspace has not finished setting up."
+].join(`
+`));
+
 // node_modules/@qawolf/api-contracts/dist/v1/resource.js
 function resource(fields, { urlFieldDescription = "Absolute URL." } = {}) {
   return object({
@@ -7351,7 +7382,8 @@ var runnerNameSchema = _enum([
   "basic",
   "playwright",
   "android",
-  "ios"
+  "ios",
+  "windows"
 ]);
 var runnerWorkspaceRequirement = "Read it from whoami.";
 var runnerWorkspaceIdDescription = `The workspace the runner belongs to. ${runnerWorkspaceRequirement}`;
@@ -7473,7 +7505,11 @@ function makeRunnerFailureSchema(reasons) {
 
 // node_modules/@qawolf/api-contracts/dist/v1/runner/inspectMobile.js
 var maxElementTextLength = 500;
-var selectorStrategySchema = _enum(["ios-predicate", "shadow", "xpath"]);
+var selectorStrategySchema = _enum([
+  "ios-predicate",
+  "shadow",
+  "xpath"
+]);
 var elementsRequestSchema = discriminatedUnion("by", [
   object({
     by: literal("point"),
@@ -7638,6 +7674,65 @@ var runFilesSchema = record(string2(), string2()).superRefine((files, refinement
 }).refine((files) => runFilesByteLength(files) <= maxRunFilesByteLength, {
   error: `The files in one request may carry at most ${maxRunFilesByteLength} bytes in total.`
 });
+// node_modules/@qawolf/api-contracts/dist/v1/runner/runnerAction.js
+var maxSwipeDurationMs = 1e4;
+var selectorSchema2 = string2().min(1).max(maxSelectorLength).describe("The element to act on, resolved the way a screen object's own selector is.");
+var strategySchema = selectorStrategySchema.optional().describe("How `selector` is resolved. Defaults to `xpath`.");
+function refuseStrategyWithoutSelector(action, context) {
+  if (action.strategy !== undefined && action.selector === undefined) {
+    context.addIssue({
+      code: "custom",
+      message: "`strategy` says how to resolve a `selector`, so it needs one.",
+      path: ["strategy"]
+    });
+  }
+}
+var tapActionSchema = strictObject({
+  selector: selectorSchema2.optional(),
+  strategy: strategySchema,
+  type: literal("tap"),
+  x: screenCoordinateSchema.optional(),
+  y: screenCoordinateSchema.optional()
+}).superRefine((tap, context) => {
+  refuseStrategyWithoutSelector(tap, context);
+  const hasPoint = tap.x !== undefined || tap.y !== undefined;
+  if (tap.selector !== undefined && hasPoint) {
+    context.addIssue({
+      code: "custom",
+      message: "A tap aims at `x` and `y` or at a `selector`, not both.",
+      path: ["selector"]
+    });
+  }
+  if (tap.selector === undefined && (tap.x === undefined || tap.y === undefined)) {
+    context.addIssue({
+      code: "custom",
+      message: "A tap needs both `x` and `y`, or a `selector`.",
+      path: [tap.x === undefined ? "x" : "y"]
+    });
+  }
+});
+var swipeActionSchema = strictObject({
+  duration_ms: int().positive().max(maxSwipeDurationMs).optional().describe("How long the swipe takes, in milliseconds. A slow one scrolls, a fast one flings. The device's default is 300."),
+  from: screenPointSchema,
+  to: screenPointSchema,
+  type: literal("swipe")
+}).refine(({ from, to }) => from.x !== to.x || from.y !== to.y, {
+  message: "A swipe whose `from` and `to` are the same travels nowhere.",
+  path: ["to"]
+});
+var fillActionSchema = strictObject({
+  selector: selectorSchema2,
+  strategy: strategySchema,
+  text: string2().max(maxTypedTextLength).describe("What the field holds afterwards, in place of its old value. Empty clears it."),
+  type: literal("fill")
+});
+var runnerActionSchema = discriminatedUnion("type", [
+  ...browserActionSchema.options,
+  tapActionSchema,
+  swipeActionSchema,
+  fillActionSchema
+]);
+
 // node_modules/@qawolf/api-contracts/dist/v1/runner/screen.js
 var screenFailureReasons = [
   "runner-has-no-screen",
@@ -7646,17 +7741,18 @@ var screenFailureReasons = [
 ];
 var screenNotReadyDescription = "`screen-not-ready` if the runner has a screen that cannot serve this instant. Retry in a second or two: the desktop restarts when a run changes the display size, and it serves one see-or-act request at a time, so a screenshot or action already in flight is the usual reason. Do not submit a run to clear this — a run may restart the display and discard what is on it.";
 var screenNeedsARunDescription = "`screen-needs-a-run` if the runner's virtual desktop has never started. Waiting will not change this and retrying is pointless — call `runner.runFlow` with a flow that opens a browser, then ask for the screen again. On a runner image with a browser that has never run anything, any `runner.performAction` also starts the browser itself. Evaluating a snippet does not start the desktop.";
-var runnerHasNoScreenDescription = "`runner-has-no-screen` if this runner is not one that runs a browser on a virtual desktop. Nothing about it can be seen or driven, and retrying will never help — launch a `playwright` runner instead.";
+var runnerHasNoScreenDescription = "`runner-has-no-screen` if this runner has no browser desktop to see or drive, and retrying will never help. Launch a `playwright` runner, or on `windows` use `runner.runFlow`.";
 var screenshotImageSchema = string2().min(1).describe("The screenshot, as a base64-encoded JPEG. Decode it and write the bytes to a `.jpg` file — writing this string to the file leaves you with base64 text rather than an image.");
 
 // node_modules/@qawolf/api-contracts/dist/v1/runner/performAction.js
 var unreachableDescription = "`runner-unreachable` if the runner could not be reached: it may still be starting, it may have terminated after inactivity, or it may have stopped answering mid-action. This does not mean the action was not performed — take a screenshot before repeating it.";
-var notSupportedOnMobileDescription = "`action-not-supported-on-mobile` if the runner is a mobile device and this action has no touchscreen equivalent: `double_click`, `scroll`, `move`, `keypress` and `navigate`, and a `click` whose `button` is not `left`, are all pointer-device concepts a touchscreen has nothing to offer for. `click` taps, `drag` swipes between its path's first and last point, and `type` types into whatever the last tap focused.";
+var notSupportedOnMobileDescription = "`action-not-supported-on-mobile` if the runner is a mobile device and this action has no touchscreen equivalent: `double_click`, `scroll`, `move`, `keypress` and `navigate`, and a `click` whose `button` is not `left`, are all pointer-device concepts a touchscreen has nothing to offer for. `type` types into whatever the last tap focused. Deprecated on mobile and to be removed: `click` taps and `drag` swipes between its path's first and last point; send `tap` and `swipe` instead.";
+var mobileActionsDescription = "Only a mobile runner performs `tap`, `swipe` and `fill`: `tap` touches a point or the element a `selector` names, `swipe` moves from one point to another over `duration_ms`, and `fill` replaces the value of the field a `selector` names. A browser runner answers them with `action-not-supported-on-browser`.";
 var withScreenshotDescription = "With `withScreenshot: true`, the answer also carries `imageJpegBase64`: a screenshot taken after the action. One call instead of `runner.performAction` followed by `runner.takeScreenshot`. The action itself is performed exactly as without the option; if the screen could serve no frame after it — a display restart, or a `navigate` on a desktop that is still starting — the action's result comes back without `imageJpegBase64`, so take a screenshot separately rather than repeating the action. On a mobile runner the screenshot is the device's own, taken right after a performed action.";
 var maxActionErrorMessageLength = 1000;
 var makePerformActionOnRunnerContract = (ids) => {
   const input = object({
-    action: browserActionSchema.describe(`The action to perform. Coordinates are whole pixels on the runner's virtual desktop, in the same space as \`runner.takeScreenshot\`. The action shapes follow the computer-use vocabulary, minus \`screenshot\` (use \`runner.takeScreenshot\`) and \`wait\` (delay on the caller's side). A \`navigate\` does not go through the screen, so a screen that is not ready does not stop it. ${notSupportedOnMobileDescription}`),
+    action: runnerActionSchema.describe(`The action to perform. Coordinates are whole pixels on the runner's virtual desktop, in the same space as \`runner.takeScreenshot\`. The browser action shapes follow the computer-use vocabulary, minus \`screenshot\` (use \`runner.takeScreenshot\`) and \`wait\` (delay on the caller's side). A \`navigate\` does not go through the screen, so a screen that is not ready does not stop it. ${notSupportedOnMobileDescription} ${mobileActionsDescription}`),
     id: runnerIdSchema.describe("Id of the runner to act on."),
     withScreenshot: boolean2().optional().describe(withScreenshotDescription),
     workspaceId: ids.workspace.optional().describe(runnerWorkspaceIdDescription)
@@ -7672,6 +7768,7 @@ var makePerformActionOnRunnerContract = (ids) => {
     makeRunnerFailureSchema([
       ...screenFailureReasons,
       "action-not-supported-on-mobile",
+      "action-not-supported-on-browser",
       runnerUnreachableFailureReason
     ])
   ]);
@@ -7688,7 +7785,7 @@ var makePerformActionOnRunnerContract = (ids) => {
       openWorldHint: true,
       readOnlyHint: false
     },
-    description: `Perform one raw browser action on an interactive runner: click, double_click, move, drag, scroll, keypress, type, or navigate. One action per request, and the runner serves one at a time. A success means the action took effect. \`action-failed\`, with a reason, if it reached the runner and did not take effect. On a runner image with a browser, the first action on a runner that has never run anything starts its browser and waits for it, so it can take up to a minute to answer — no \`runner.runFlow\` is needed before acting; if the browser is still starting when the wait runs out, the answer is \`screen-not-ready\` and retrying converges. On a mobile runner, the same \`screen-needs-a-run\` and \`screen-not-ready\` outcomes mean no Appium session has started yet, or it did not answer this instant; \`runner.runFlow\` is what starts one, same as a browser. \`screen-needs-a-run\` if the browser could not be started that way — usually a runner whose runs all finished without starting its desktop; call \`runner.runFlow\` with a flow that opens a browser. ${screenNotReadyDescription} ${runnerHasNoScreenDescription} ${unreachableDescription}`,
+    description: `Perform one raw action on an interactive runner: click, double_click, move, drag, scroll, keypress, type, or navigate; on mobile, tap, swipe, fill, or type. One action per request, and the runner serves one at a time. A success means the action took effect. \`action-failed\`, with a reason, if it reached the runner and did not take effect. On a runner image with a browser, the first action on a runner that has never run anything starts its browser and waits for it, so it can take up to a minute to answer — no \`runner.runFlow\` is needed before acting; if the browser is still starting when the wait runs out, the answer is \`screen-not-ready\` and retrying converges. On a mobile runner, the same \`screen-needs-a-run\` and \`screen-not-ready\` outcomes mean no Appium session has started yet, or it did not answer this instant; \`runner.runFlow\` is what starts one, same as a browser. \`screen-needs-a-run\` if the browser could not be started that way — usually a runner whose runs all finished without starting its desktop; call \`runner.runFlow\` with a flow that opens a browser. ${screenNotReadyDescription} ${runnerHasNoScreenDescription} ${unreachableDescription}`,
     input,
     kind: "write",
     name: "runner.performAction",
@@ -7951,7 +8048,7 @@ var makeTriggerScheduleFields = (ids) => ({
   environmentId: ids.environmentId.describe("The environment the scheduled runs happen in."),
   minuteOfHour: number2().int().min(0).max(59).optional().describe("Minutes past the hour an hourly schedule fires. Defaults to 0."),
   timeOfDay: string2().regex(/^([01]\d|2[0-3]):[0-5]\d$/).optional().describe('The wall clock time a daily or weekly schedule fires, as "HH:mm". Required when cadence is daily or weekly.'),
-  timezoneId: string2().min(1).refine(isTimezone, "Expected an IANA timezone, such as America/New_York.").optional().describe("The IANA timezone the schedule is read in, such as America/New_York. Required when cadence is daily or weekly, and when an hourly schedule names daysOfWeek, whose day boundaries it sets. An hourly schedule firing on every day needs none, and is read in America/Los_Angeles.")
+  timezoneId: string2().min(1).refine(isTimezone, "Expected an IANA timezone, such as America/New_York.").optional().describe("The IANA timezone the schedule is read in, such as America/New_York. Required for every cadence: it sets the day boundaries daysOfWeek is read against, and the wall clock timeOfDay is read against.")
 });
 var makeTriggerDeploymentFields = (ids) => ({
   action: makeTriggerActionSchema(ids),
@@ -7992,12 +8089,12 @@ var checkAction = (action, ctx) => {
 };
 var requiredScheduleFields = {
   daily: ["timeOfDay", "timezoneId"],
-  hourly: [],
+  hourly: ["timezoneId"],
   weekly: ["dayOfWeek", "timeOfDay", "timezoneId"]
 };
 var optionalScheduleFields = {
   daily: ["daysOfWeek"],
-  hourly: ["daysOfWeek", "minuteOfHour", "timezoneId"],
+  hourly: ["daysOfWeek", "minuteOfHour"],
   weekly: []
 };
 var cadencesUsingField = {
@@ -8038,18 +8135,8 @@ var checkScheduleFields = (value, ctx) => {
     }
   }
 };
-var checkHourlyZone = (value, ctx) => {
-  if (value.cadence !== "hourly" || value.daysOfWeek === undefined || value.timezoneId !== undefined)
-    return;
-  ctx.addIssue({
-    code: "custom",
-    message: "timezoneId is required when an hourly cadence names daysOfWeek.",
-    path: ["timezoneId"]
-  });
-};
 var checkSchedule = (value, ctx) => {
   checkScheduleFields(value, ctx);
-  checkHourlyZone(value, ctx);
   if (value.action.kind === "generativeSuite") {
     ctx.addIssue({
       code: "custom",
@@ -8452,53 +8539,6 @@ var makeFindDeploymentsContract = (ids) => {
   };
 };
 
-// node_modules/@qawolf/api-contracts/dist/v1/deployment/didNotRunReason.js
-var didNotRunReasonSchema = _enum([
-  "billing-prevented",
-  "branch-still-syncing",
-  "deployment-no-longer-live",
-  "duplicate-run",
-  "environment-not-linked-to-branch",
-  "environment-not-ready",
-  "environment-terminated",
-  "internal-error",
-  "low-risk-change",
-  "no-flows-to-run",
-  "no-matching-trigger",
-  "no-pull-request",
-  "no-relevant-flows",
-  "rate-limited",
-  "run-not-created",
-  "skipped",
-  "test-configuration-error",
-  "trigger-not-found",
-  "workspace-inactive",
-  "workspace-not-ready"
-]).describe([
-  "Why the matched trigger created no run, as a stable value safe to branch on in a CI pipeline. The accompanying `message` is the wording for a person to read and may be reworded at any time; this value will not be.",
-  "billing-prevented: a billing restriction on the workspace stopped the run.",
-  "branch-still-syncing: the environment was still syncing its flows.",
-  "deployment-no-longer-live: the deployment was torn down or replaced by a newer one before the run started.",
-  "duplicate-run: another run already covered this same deployment.",
-  "environment-not-linked-to-branch: the environment has no branch to take flows from yet.",
-  "environment-not-ready: the environment was still being prepared; retrying later can succeed.",
-  "environment-terminated: the environment for the run is terminated.",
-  "internal-error: QA Wolf could not start the run and the cause is on our side.",
-  "low-risk-change: adaptive flow selection assessed the change as low risk, so nothing needed to run.",
-  "no-flows-to-run: no flow was eligible, because the trigger's flows are in maintenance, still drafts, or missing on this branch.",
-  "no-matching-trigger: no deployment trigger matched.",
-  "no-pull-request: the trigger uses adaptive flow selection, which needs an open pull request, and this deployment had none.",
-  "no-relevant-flows: adaptive flow selection found no existing flow covering this change.",
-  "rate-limited: too many runs were requested at once; retrying later can succeed.",
-  "run-not-created: the run never reached a decision.",
-  "skipped: the run was skipped for a reason with no more specific value.",
-  "test-configuration-error: the workspace's flows or dependency rules need fixing before this can run.",
-  "trigger-not-found: the trigger no longer exists.",
-  "workspace-inactive: the workspace is not active.",
-  "workspace-not-ready: the workspace has not finished setting up."
-].join(`
-`));
-
 // node_modules/@qawolf/api-contracts/dist/v1/deployment/listTriggerEvaluations.js
 var conditionKindSchema = _enum(["environment", "deployTarget", "branch", "service"]).describe("What the condition checks on the deployment: the environment it reported into, the deploy target it serves, the git branch of the deployed commit, or the service it deployed.");
 var conditionVerdictSchema = discriminatedUnion("outcome", [
@@ -9376,7 +9416,7 @@ var makeCreateIssueContract = (ids) => {
   const commonFields = {
     description: string2().optional().describe("The issue description as plain text; each line becomes a paragraph. Markdown is not parsed."),
     name: string2().trim().min(1).max(255),
-    priority: issuePrioritySchema.optional().describe('Defaults to "unprioritized".'),
+    priority: issuePrioritySchema.optional().describe('Defaults to "unprioritized" for bug reports and coverage requests.'),
     workspaceId: ids.workspace.optional().describe("The workspace to create the issue in. Required when authenticating with an organization or user API key.")
   };
   const input = discriminatedUnion("type", [
@@ -9388,6 +9428,13 @@ var makeCreateIssueContract = (ids) => {
       ...commonFields,
       estimatedDueDate: exports_iso.date().optional().describe("The calendar date the coverage is estimated to be complete, as YYYY-MM-DD."),
       type: literal("coverageRequest")
+    }),
+    object({
+      ...commonFields,
+      effort: _enum(["extraSmall", "small", "medium", "large", "extraLarge"]).describe("The effort to repair the flows."),
+      priority: _enum(["low", "medium", "high", "urgent"]),
+      reason: _enum(["dataChanged", "flowNeedsWork", "other", "uiChanged"]).describe("Why the flows need maintenance."),
+      type: literal("maintenance")
     })
   ]);
   const output = object({
@@ -9399,7 +9446,7 @@ var makeCreateIssueContract = (ids) => {
       openWorldHint: true,
       readOnlyHint: false
     },
-    description: "Create a bug or coverage request issue for the caller's team. " + "Maintenance issues cannot be created through the public API.",
+    description: "Create a bug report, maintenance report, or coverage request issue for the caller's team. " + "A user can create a maintenance report only when they can see the workspace's maintenance reports; " + "a team or organization API key credits it to the workspace's automation user. " + "Link its failed flows afterwards with run.diagnose.",
     input,
     kind: "write",
     name: "issue.create",
@@ -9488,6 +9535,8 @@ var makeLegacyTriggerSchema = (ids) => {
     isPaused: boolean2(),
     name: string2(),
     pausedAt: exports_iso.datetime().optional(),
+    runConcurrencyLimit: string2().describe(`How many of the trigger's runs may execute at once: a whole number, "unlimited", or a concurrency expression. A trigger that stores no limit reads as "unlimited", which leaves the environment's limit in charge. Copy a number or an expression onto the current trigger action's runConcurrencyLimit, and omit that field when this reads "unlimited".`),
+    shouldTriage: boolean2().describe("Whether QA Wolf investigates the failures of the runs this trigger creates. It becomes the current trigger action's investigateFailures, which is on unless the trigger says otherwise."),
     tags: array(namedIdentity)
   };
   return union([
@@ -9604,27 +9653,6 @@ var makeDiagnoseRunContract = (ids) => {
   };
 };
 
-// node_modules/@qawolf/api-contracts/dist/v1/run/summary.js
-var publicRunStatusValues = [
-  "queued",
-  "running",
-  "passed",
-  "failed",
-  "canceled"
-];
-var makeRunSummaryFields = (ids) => ({
-  completedAt: exports_iso.datetime().optional().describe("When the run finished executing. Absent while queued or running, and also absent for a terminal run that never completed execution (e.g. every flow was canceled or skipped)."),
-  createdAt: exports_iso.datetime(),
-  git: object({
-    branch: string2().optional(),
-    commitMessage: string2().optional(),
-    commitSha: string2().optional(),
-    commitUrl: string2().optional().describe("Link to the commit on the code host.")
-  }).describe("The branch and commit under test. The fields are present when a deploy notification started the run, and absent for runs started another way, for example manually or with run.create."),
-  runId: ids.run,
-  status: _enum(publicRunStatusValues).describe("Whole-run status, and the value to gate a pipeline on. Terminal statuses are passed, failed, and canceled; poll until one is reached. `failed` means the run found a bug that is still open and serious enough to block — a lower-priority bug, or one since resolved, reads `passed`, and the per-flow diagnoses are still in `flows`. The run stays `running` while any investigation is unresolved, including one that carried over to a later run, so a terminal status always means a settled answer.")
-});
-
 // node_modules/@qawolf/api-contracts/dist/v1/run/find.js
 var makeFindRunsContract = (ids) => {
   const input = object({
@@ -9782,54 +9810,6 @@ var makeStopRunContract = (ids) => {
   };
 };
 
-// node_modules/@qawolf/api-contracts/dist/v1/run/triage.js
-var probability = number2().min(0).max(1);
-var verdictAnswer = object({
-  choice: _enum(["bug", "maintenance"]),
-  confidence: probability,
-  probabilities: record(string2(), probability),
-  type: literal("choice")
-});
-var makeTriageRunContract = (ids) => {
-  const input = object({
-    flowId: ids.flow.describe("The flow that failed in the run."),
-    runId: ids.run
-  });
-  const decision = discriminatedUnion("type", [
-    object({
-      diagnosis: _enum(["bug", "maintenance"]),
-      type: literal("diagnose")
-    }),
-    object({
-      diagnosis: _enum(["bug", "maintenance"]),
-      type: literal("suggest")
-    }),
-    object({
-      type: literal("needsHuman")
-    })
-  ]);
-  const output = object({
-    answers: object({
-      verdict: verdictAnswer
-    }),
-    decision: decision.describe("What the triage would do with the verdict. The prototype records nothing; it only reports."),
-    model: string2(),
-    state: json().describe("The context that was sent to the model, for inspection.")
-  });
-  return {
-    annotations: {
-      destructiveHint: false,
-      openWorldHint: false,
-      readOnlyHint: true
-    },
-    description: "Prototype. Ask Jev, a TypeSafe System One model, whether a flow failure in a run is a bug in the product " + "or a test that needs maintenance. Compares the failing attempt with the flow's last passing run in the " + "same environment. Records nothing.",
-    input,
-    kind: "read",
-    name: "run.triage",
-    output
-  };
-};
-
 // node_modules/@qawolf/api-contracts/dist/v1/runner/evaluateSnippet.js
 var maxSnippetCodeLength = 64 * 1024;
 var makeEvaluateSnippetOnRunnerContract = (ids) => {
@@ -10397,8 +10377,7 @@ var makeContractsV1 = (ids) => {
       find: makeFindRunsContract(resolvedIds),
       get: makeGetRunContract(resolvedIds),
       reattempt: makeReattemptRunContract(resolvedIds),
-      stop: makeStopRunContract(resolvedIds),
-      triage: makeTriageRunContract(resolvedIds)
+      stop: makeStopRunContract(resolvedIds)
     },
     runner: makeRunnerContracts(resolvedIds),
     skill: makeSkillContracts(),
@@ -10711,7 +10690,8 @@ var interactMessages = {
   actionFlagsWithStdin: '"-" reads the whole action from stdin, so an action flag passed alongside it would be ignored. Pipe the action in on its own, or name the action type and use flags.',
   actionMayHaveHappened: "The runner could not be reached, which does not mean the action was not performed: it may have stopped answering mid-action. Take a screenshot before repeating it.",
   actionNotJson: `Stdin did not hold a JSON action. Pipe one object, for example '{"type":"click","button":"left","x":480,"y":260}'.`,
-  actionNotSupportedOnMobile: (type) => `A mobile runner has a touchscreen, so it cannot perform ${type} as asked. It taps with a left-button click, swipes with drag, and types into whatever the last tap focused.`,
+  actionNotSupportedOnBrowser: (type) => `Only a mobile runner performs ${type}. On a browser runner, click at --x and --y, drag along a --path, and type into whatever has focus.`,
+  actionNotSupportedOnMobile: (type) => `A mobile runner has a touchscreen, so it cannot perform ${type} as asked. Use tap, swipe, fill, or type into whatever the last tap focused.`,
   actionFailedScreenshotToStdout: "Its screen was written to stdout as a JPEG, so look at that rather than sending the action again.",
   actionFailedScreenshotUnwritten: (detail) => `Its screen could not be written, because ${detail}, so take one with qawolf runner screenshot rather than sending the action again.`,
   actionFailedScreenshotWritten: (path) => `Its screen was written to ${path}, so look at that rather than sending the action again.`,
@@ -15031,4 +15011,4 @@ export {
   createRunnerSdk
 };
 
-//# debugId=CF6139275CB5B8DC64756E2164756E21
+//# debugId=CBFC365D381BD6E864756E2164756E21

package/dist/types/runnerSdk/types.d.ts

@@ -1,4 +1,4 @@
-import type { BrowserAction, InspectOnRunnerRequest, JournalStream, PublicApiInput, PublicApiOutput, ReadJournalResponse, RunnerNameForPublicApi, publicContractsV1 } from "@qawolf/api-contracts/v1";
+import type { InspectOnRunnerRequest, JournalStream, PublicApiInput, PublicApiOutput, ReadJournalResponse, RunnerAction, RunnerNameForPublicApi, publicContractsV1 } from "@qawolf/api-contracts/v1";
 type Runner = typeof publicContractsV1.runner;
 export type RunnerSdkOptions = {
     /** A QA Wolf team API key. The SDK never reads the CLI's stored credentials. */
@@ -77,7 +77,7 @@ export type EventsRequest = RunnerRequest & {
     window: JournalWindow;
 };
 export type ActRequest = RunnerRequest & {
-    action: BrowserAction;
+    action: RunnerAction;
     /**
      * Ask the runner to answer with a screenshot taken after the action, on
      * `imageJpegBase64`. One call instead of an act and a screenshot, with no

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@qawolf/cli",
-  "version": "1.35.0",
+  "version": "1.36.0",
   "description": "Run and manage QA Wolf flows from the terminal, CI, or an AI agent",
   "keywords": [
     "automation",
@@ -71,7 +71,7 @@
     "@clack/prompts": "1.5.1",
     "@napi-rs/keyring": "1.3.0",
     "@oxc-node/core": "0.1.0",
-    "@qawolf/api-contracts": "0.70.0",
+    "@qawolf/api-contracts": "0.73.0",
     "@qawolf/emails": "1.1.1",
     "@qawolf/flow-targets": "1.0.0",
     "@qawolf/flows": "0.1.4",

package/skills/qawolf-cli/SKILL.md

@@ -168,7 +168,7 @@ that `url`; never guess a route and never send a repository link in its place.
 | `qawolf install clear` | local | Remove the managed runtime cache (all installed runtime versions) |
 | `qawolf investigation get` | read | Read what the QA Wolf AI investigating a run has concluded: one finding per cause of its failures, with the question waiting for a person and any answer or dispute the investigation hasn't acted on yet. |
 | `qawolf issue addFlows` | write | Add flows to a coverage request owned by the caller's team. Flows already covered stay covered. Bug and maintenance reports link to flows through the runs that reproduce them; use run.diagnose to record one. |
-| `qawolf issue create` | write | Create a bug or coverage request issue for the caller's team. Maintenance issues cannot be created through the public API. |
+| `qawolf issue create` | write | Create a bug report, maintenance report, or coverage request issue for the caller's team. A user can create a maintenance report only when they can see the workspace's maintenance reports; a team or organization API key credits it to the workspace's automation user. Link its failed flows afterwards with run.diagnose. |
 | `qawolf issue find` | read | List the team's bug reports, maintenance reports, or coverage requests, newest first. |
 | `qawolf issue get` | read | Get an issue by id. |
 | `qawolf issue removeFlows` | write | Remove flows from a coverage request owned by the caller's team. Flows the request does not cover are left alone. Bug and maintenance reports link to flows through the runs that reproduce them, so their flows cannot be set directly. |
@@ -182,8 +182,7 @@ that `url`; never guess a route and never send a repository link in its place.
 | `qawolf run get` | read | Get a run's status, per-flow results, links, and how many of its bugs are blocking. |
 | `qawolf run reattempt` | write | Request new attempts for a run's flows, in the same run. A flow is eligible once its result is failed or canceled and QA Wolf's automatic retries have finished. A fully investigated run no longer accepts reattempts. Attempts run with the latest flow code. Poll run.get for results. |
 | `qawolf run stop` | write | Stop a run, including its queued flows and automatic retries. Stopping is asynchronous and can update run-status messages and commit statuses in connected integrations. Repeated requests are safe, and finished runs keep their results. A run that is still being created returns not found; retry once run.get returns the run. If run.get returns a different runId, use that ID. Poll run.get for results. |
-| `qawolf run triage` | read | Prototype. Ask Jev, a TypeSafe System One model, whether a flow failure in a run is a bug in the product or a test that needs maintenance. Compares the failing attempt with the flow's last passing run in the same environment. Records nothing. |
-| `qawolf runner act` | write | Perform one raw action on a runner's screen: click, double_click, scroll, move, drag, keypress, navigate or type. Use - to read a whole action as JSON from stdin. On a mobile runner only click (button left), drag and type have a touchscreen equivalent; the rest answer action-not-supported-on-mobile |
+| `qawolf runner act` | write | Perform one raw action on a runner's screen. A browser runner takes click, double_click, scroll, move, drag, keypress, navigate and type; a mobile runner takes tap, swipe, fill and type. A browser runner answers mobile actions with action-not-supported-on-browser; a mobile runner answers the other browser actions with action-not-supported-on-mobile. Use - to read a whole action as JSON from stdin |
 | `qawolf runner actions` | write | Perform a sequence of up to ten raw actions on a runner's screen in one request, as a JSON array of the same actions `runner act` takes. Use - to read the array from stdin. Actions run back to back, so batch only steps whose targets are on the screen you last saw, and end the sequence at the step that changes the page. Each result carries an effect: performed, not-performed, or unknown when the runner stopped answering and the action may have landed |
 | `qawolf runner events` | read | Print a runner's journal, one entry per line. QA Wolf writes console, recorder, run-events, run-logs, run-status |
 | `qawolf runner exec` | write | Evaluate a snippet against a runner's live page. Use - to read the snippet from stdin |

package/skills/qawolf-cli/references/run-results.md

@@ -183,6 +183,7 @@ Every documented field of the `run.get` response. `[]` marks an array, so
 - `completedAt` — When the run finished executing. Absent while queued or running, and also absent for a terminal run that never completed execution (e.g. every flow was canceled or skipped).
 - `git` — The branch and commit under test. The fields are present when a deploy notification started the run, and absent for runs started another way, for example manually or with run.create.
 - `git.commitUrl` — Link to the commit on the code host.
+- `needsReview` — True once every flow has finished its attempts and at least one failed flow still has no diagnosis, including one whose investigation carried over to a later run. `status` stays `running` until that failure is diagnosed, so a caller that is not waiting for a diagnosis can stop polling here and read the run's failed flows.
 - `runId` — The run this response describes. Treat it as canonical: it can differ from the id you asked for. A deploy notification returns a run id before the run exists, and if a second notification for the same commit is folded into an earlier run, that id resolves to the earlier run instead.
 - `status` — One of: queued, running, passed, failed, canceled
 - `blockingBugCount` — How many bugs this run found are blocking: still open, and priority urgent, high, or unprioritized — unprioritized counts because nobody has ruled it out yet. This is what `failed` is derived from, so it explains a failure rather than adding a second verdict: gate on `status`, then read this to say how many bugs are holding the build. It counts a bug filed against a later run by an investigation that carried over from this one, and it drops a bug once that bug is resolved.

package/skills/qawolf-cli/references/runner.md

@@ -126,7 +126,7 @@ Retry on the exit code, not on the message text:
   launch the id or name one that is running. The message says which runner was
   meant and whether `--runner`, `QAWOLF_RUNNER_ID` or this directory's stored
   default chose it — read that line before you pick an id to launch.
-- `2` will not clear on its own. Nothing has run on this runner yet, so run a flow; or the runner has no browser at all, so launch with `--name playwright` instead; or the action has no touchscreen equivalent on a mobile runner, so reach for one that has. A `runner actions` sequence also exits `2` before it sends anything, for an argument that is not a JSON array, an array of more than ten actions, and `--screenshot` flags that contradict each other. The message says which.
+- `2` will not clear on its own. Nothing has run on this runner yet, so run a flow; or the runner has no browser at all, so launch with `--name playwright` instead; or the action belongs to the other runner family, so send `tap`, `swipe` or `fill` to a mobile runner and the browser actions to a browser runner. A `runner actions` sequence also exits `2` before it sends anything, for an argument that is not a JSON array, an array of more than ten actions, and `--screenshot` flags that contradict each other. The message says which.
 
 ## Seeing and acting: the loop is yours
 
@@ -167,17 +167,18 @@ Coordinates are pixels on the same screenshot you just read. The runner serves o
 
 `act`, `actions`, `run` and `exec` are the commands whose lost answer may still have taken effect. On a `4` from `act` or `actions`, take a screenshot before repeating a click. `exec`'s message says the snippet could not be evaluated, but a lost answer looks the same from outside, so treat a `4` from a snippet that changes something as "may have run" rather than "did not run".
 
-A mobile runner has a touchscreen, not a mouse, so only three of the eight
-actions have a touchscreen equivalent and go through: `click` with
-`button: "left"` taps, `drag` swipes, and `type` types into whatever the last
-tap focused. The rest — `double_click`, `scroll`, `move`, `keypress`,
-`navigate` — answer `action-not-supported-on-mobile` rather than doing
-something approximate. `navigate` is the one to watch for, since it works on a
-browser runner without a run first but has no meaning on mobile at all.
+A mobile runner has a touchscreen, not a mouse, so it has actions of its own:
+
+- `tap` touches a point (`--x`, `--y`) or the element `--selector` names. Check the selector first with `inspect elements --selector`, and pass `--strategy ios-predicate` or `shadow` when it is not XPath.
+- `swipe --from x,y --to x,y` moves in a straight line between two points. `--duration-ms` sets how long it takes, up to 10000: a slow swipe scrolls, a fast one flings.
+- `fill --selector ... --text ...` replaces the value of that field, and `--text ""` clears it. To add to what a field already holds, `tap` it and then `type`.
+- `type` types into whatever the last tap focused, the same as on a browser.
+
+The browser actions `double_click`, `scroll`, `move`, `keypress` and `navigate` answer `action-not-supported-on-mobile` rather than doing something approximate. `navigate` is the one to watch for, since it works on a browser runner without a run first but has no meaning on mobile at all. `click` with `button: "left"` and `drag` still tap and swipe on mobile, but they are deprecated there, so send `tap` and `swipe`. A browser runner answers `tap`, `swipe` and `fill` with `action-not-supported-on-browser`.
 
 ### Several steps in one request: `runner actions`
 
-`qawolf runner actions '<json array>'` performs up to ten of those same actions back to back in one request, for the steps you already know: click the field, type into it, press Enter. One round trip instead of three, with no delay to guess at between them, and `-` reads the array from stdin the way `act -` reads one action.
+`qawolf runner actions '<json array>'` performs up to ten of the browser actions back to back in one request (not `tap`, `swipe` or `fill`), for the steps you already know: click the field, type into it, press Enter. One round trip instead of three, with no delay to guess at between them, and `-` reads the array from stdin the way `act -` reads one action.
 
 ```sh
 qawolf runner actions '[{"type":"click","button":"left","x":480,"y":260},{"type":"type","text":"me@example.com"},{"type":"keypress","keys":["Enter"]}]' --screenshot after-login.jpg