@sun-asterisk/sungen 3.2.32 → 3.2.33

package/dist/orchestrator/templates/specs-url-assert.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"specs-url-assert.d.ts","sourceRoot":"","sources":["../../../src/orchestrator/templates/specs-url-assert.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;;;;;;;GAkBG;AAIH,MAAM,WAAW,cAAc;IAC7B;;;;;OAKG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;;;;OAQG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,6FAA6F;IAC7F,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAYrF;AAwBD;;;;;;;;;;GAUG;AACH,wBAAgB,UAAU,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,cAAc,GAAG,CAAC,CAAC,EAAE,GAAG,KAAK,OAAO,CAuCzG;AAED,oGAAoG;AACpG,KAAK,cAAc,GAAG;IACpB,GAAG,IAAI,MAAM,CAAC;IACd,gBAAgB,CAAC,KAAK,EAAE,aAAa,EAAE,IAAI,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACpF,CAAC;AAEF,uDAAuD;AACvD,UAAU,UAAU;IAAG,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAA;CAAE;AAgDlE;;;;;;GAMG;AACH,wBAAsB,UAAU,CAC9B,IAAI,EAAE,cAAc,EACpB,WAAW,EAAE,cAAc,EAC3B,IAAI,GAAE,UAAU,GAAG;IAAE,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;CAAO,GACtF,OAAO,CAAC,IAAI,CAAC,CAQf;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,WAAW,CAC/B,IAAI,EAAE,cAAc,GAAG;IAAE,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,OAAO,EAAE,IAAI,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,EAC3G,WAAW,EAAE,cAAc,EAC3B,IAAI,GAAE,UAAU,GAAG;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;CAAO,GACtG,OAAO,CAAC,IAAI,CAAC,CASf"}
+{"version":3,"file":"specs-url-assert.d.ts","sourceRoot":"","sources":["../../../src/orchestrator/templates/specs-url-assert.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;;;;;;;GAkBG;AAIH,MAAM,WAAW,cAAc;IAC7B;;;;;OAKG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;;;;OAQG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,6FAA6F;IAC7F,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;;;;OAQG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAYrF;AAwBD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,UAAU,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE,cAAc,GAAG,CAAC,CAAC,EAAE,GAAG,KAAK,OAAO,CA6CtH;AAED,oGAAoG;AACpG,KAAK,cAAc,GAAG;IACpB,GAAG,IAAI,MAAM,CAAC;IACd,gBAAgB,CAAC,KAAK,EAAE,aAAa,EAAE,IAAI,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACpF,CAAC;AAEF,uDAAuD;AACvD,UAAU,UAAU;IAAG,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAA;CAAE;AAgDlE;;;;;;GAMG;AACH,wBAAsB,UAAU,CAC9B,IAAI,EAAE,cAAc,EACpB,WAAW,EAAE,cAAc,EAC3B,IAAI,GAAE,UAAU,GAAG;IAAE,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;CAAO,GACtF,OAAO,CAAC,IAAI,CAAC,CAQf;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,WAAW,CAC/B,IAAI,EAAE,cAAc,GAAG;IAAE,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,OAAO,EAAE,IAAI,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,EAC3G,WAAW,EAAE,cAAc,EAC3B,IAAI,GAAE,UAAU,GAAG;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;CAAO,GACtG,OAAO,CAAC,IAAI,CAAC,CASf"}

package/dist/orchestrator/templates/specs-url-assert.js

@@ -93,8 +93,14 @@ function locationMatches(pathname, hostname, u) {
  *                      tracking/UTM param the test never cared about cannot turn it red.
  *                      A declared fragment is asserted too; a declared value carrying no query
  *                      at all constrains the path only (the compiler warns: SG-W014).
+ *
+ * `query: any` on the page's selector entry overrides the FIRST rule only (#748): silence then
+ * means "the query is not mine to judge" instead of "there must be none". It is the escape hatch
+ * for a page whose query is generated at run time — `/admins/detail?id=<the row just clicked>` —
+ * which the strict rule makes unassertable and `with {{v}}` cannot express, since that asserts a
+ * literal. The second rule is untouched: declare params and they are still all checked.
  */
-function urlMatches({ pathname, hostname, declared, dataRef }) {
+function urlMatches({ pathname, hostname, declared, dataRef, ignoreQuery }) {
     return (u) => {
         if (!locationMatches(pathname, hostname, u))
             return false;
@@ -103,8 +109,14 @@ function urlMatches({ pathname, hostname, declared, dataRef }) {
         // undefined, and they mean opposite things: the first is a real assertion (a bare page must be
         // bare), the second is broken test-data. Only the generator knows which, and it says so by
         // emitting `dataRef` exactly when the step carried a `with {{v}}`.
+        // `query: any` on the page entry (#748): the query is not part of this page's identity, so
+        // silence from the step is not an assertion about it. Without this there is NO way to express
+        // "this path, whatever the query" — `with {{v}}` asserts a LITERAL value, and a detail page
+        // keyed by `?id=<the row just clicked>` has no literal to declare. Checked before the bare-page
+        // rule, never instead of the declared-value rule below: a step that names params still asserts
+        // them here exactly as anywhere else.
         if (!dataRef)
-            return u.search === '';
+            return ignoreQuery ? true : u.search === '';
         // Silence is the whole bug class this assertion exists to kill, so an unusable declared value
         // is an ERROR, not a quiet verdict. Returning false would read as "the app is wrong"; these
         // throws say "your test-data is wrong, and here is the key". An empty value used to parse to

package/dist/orchestrator/templates/specs-url-assert.js.map

@@ -1 +1 @@
-{"version":3,"file":"specs-url-assert.js","sourceRoot":"","sources":["../../../src/orchestrator/templates/specs-url-assert.ts"],"names":[],"mappings":";AAAA,oBAAoB;AACpB;;;;;;;;;;;;;;;;;;GAkBG;;AAkDH,4BAYC;AAmCD,gCAuCC;AAgED,gCAYC;AAgBD,kCAaC;AA/OD,2CAAqD;AA6BrD;;;;;;;;;;;;;;;;;;GAkBG;AACH,SAAgB,QAAQ,CAAC,IAAY,EAAE,IAAY,EAAE,QAAwB;IAC3E,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,KAAK,EAAE;QAAE,OAAO,IAAI,GAAG,IAAI,CAAC;IACvF,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC/B,2FAA2F;IAC3F,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,GAAG,IAAI,GAAG,KAAK,CAAC;IAC/E,yEAAyE;IACzE,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9C,0FAA0F;IAC1F,qEAAqE;IACrE,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,GAAG,KAAK,CAAC;IAC/C,4DAA4D;IAC5D,OAAO,IAAI,GAAG,IAAI,GAAG,KAAK,CAAC;AAC7B,CAAC;AAED;;;;GAIG;AACH,SAAS,WAAW,CAAC,QAAgB;IACnC,IAAI,CAAC;QACH,OAAO,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,QAAQ,CAAC;IAClB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,eAAe,CAAC,QAAgB,EAAE,QAA4B,EAAE,CAAM;IAC7E,IAAI,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IACzD,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;AAC7E,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAgB,UAAU,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAkB;IAClF,OAAO,CAAC,CAAM,EAAW,EAAE;QACzB,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QAE1D,8FAA8F;QAC9F,sFAAsF;QACtF,+FAA+F;QAC/F,2FAA2F;QAC3F,mEAAmE;QACnE,IAAI,CAAC,OAAO;YAAE,OAAO,CAAC,CAAC,MAAM,KAAK,EAAE,CAAC;QAErC,8FAA8F;QAC9F,4FAA4F;QAC5F,6FAA6F;QAC7F,2FAA2F;QAC3F,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CAAC,iCAAiC,OAAO,kCAAkC,CAAC,CAAC;QAC9F,CAAC;QACD,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,iCAAiC,OAAO,gCAAgC,CAAC,CAAC;QAC5F,CAAC;QAED,6FAA6F;QAC7F,6FAA6F;QAC7F,wFAAwF;QACxF,iFAAiF;QACjF,uFAAuF;QACvF,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,uBAAuB,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;QAE1E,4FAA4F;QAC5F,4FAA4F;QAC5F,0FAA0F;QAC1F,yDAAyD;QACzD,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QAE5F,uDAAuD;QACvD,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,CAAC;QAC5C,OAAO,OAAO,IAAI,MAAM,CAAC;IAC3B,CAAC,CAAC;AACJ,CAAC;AAWD;;;;;;;;;;;;;;;;;;GAkBG;AACH,KAAK,UAAU,aAAa,CAC1B,IAAoB,EACpB,OAA4B,EAC5B,IAAgB,EAChB,KAAa,EACb,WAAmB;IAEnB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,IAAI,CAAC,CAAC;IACnF,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,IAAI,CAAC,CAAC;IAClG,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE7B,MAAM,IAAI,CAAC,gBAAgB,CAAC,aAAa,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAE9F,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3B,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,GAAG,QAAQ,EAAE,CAAC;QACvC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,aAAa,SAAS,sBAAsB,GAAG,UAAU,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,OAAO;kBAC1F,+FAA+F;kBAC/F,YAAY,WAAW,EAAE,CAC5B,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAC9C,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACI,KAAK,UAAU,UAAU,CAC9B,IAAoB,EACpB,WAA2B,EAC3B,OAAqF,EAAE;IAEvF,MAAM,OAAO,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;IACxC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,KAAK,EAAE,CAAsB,EAAE,EAAE,GAAG,MAAM,IAAA,aAAM,EAAC,IAAuB,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAEhI,MAAM,SAAS,CAAC,OAAO,CAAC,CAAC;IACzB,MAAM,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,gBAAgB,EACvD,+DAA+D,CAAC,CAAC;IACnE,MAAM,SAAS,CAAC,OAAO,CAAC,CAAC;AAC3B,CAAC;AAED;;;;;;;;;;;;;GAaG;AACI,KAAK,UAAU,WAAW,CAC/B,IAA2G,EAC3G,WAA2B,EAC3B,OAAqG,EAAE;IAEvG,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,WAAW,CAAC;IAC3C,MAAM,OAAO,GAAG,CAAC,CAAM,EAAW,EAAE,CAAC,eAAe,CAAC,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;IAC5E,sFAAsF;IACtF,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,IAAI,CAAC,KAAK,EAAE,CAAsB,EAAE,EAAE,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAE5H,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC;IACtB,MAAM,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAClD,8FAA8F,CAAC,CAAC;AACpG,CAAC"}
+{"version":3,"file":"specs-url-assert.js","sourceRoot":"","sources":["../../../src/orchestrator/templates/specs-url-assert.ts"],"names":[],"mappings":";AAAA,oBAAoB;AACpB;;;;;;;;;;;;;;;;;;GAkBG;;AA4DH,4BAYC;AAyCD,gCA6CC;AAgED,gCAYC;AAgBD,kCAaC;AArQD,2CAAqD;AAuCrD;;;;;;;;;;;;;;;;;;GAkBG;AACH,SAAgB,QAAQ,CAAC,IAAY,EAAE,IAAY,EAAE,QAAwB;IAC3E,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,KAAK,EAAE;QAAE,OAAO,IAAI,GAAG,IAAI,CAAC;IACvF,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC/B,2FAA2F;IAC3F,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,GAAG,IAAI,GAAG,KAAK,CAAC;IAC/E,yEAAyE;IACzE,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9C,0FAA0F;IAC1F,qEAAqE;IACrE,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,GAAG,KAAK,CAAC;IAC/C,4DAA4D;IAC5D,OAAO,IAAI,GAAG,IAAI,GAAG,KAAK,CAAC;AAC7B,CAAC;AAED;;;;GAIG;AACH,SAAS,WAAW,CAAC,QAAgB;IACnC,IAAI,CAAC;QACH,OAAO,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,QAAQ,CAAC;IAClB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,eAAe,CAAC,QAAgB,EAAE,QAA4B,EAAE,CAAM;IAC7E,IAAI,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IACzD,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;AAC7E,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,SAAgB,UAAU,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAkB;IAC/F,OAAO,CAAC,CAAM,EAAW,EAAE;QACzB,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QAE1D,8FAA8F;QAC9F,sFAAsF;QACtF,+FAA+F;QAC/F,2FAA2F;QAC3F,mEAAmE;QACnE,2FAA2F;QAC3F,8FAA8F;QAC9F,4FAA4F;QAC5F,gGAAgG;QAChG,+FAA+F;QAC/F,sCAAsC;QACtC,IAAI,CAAC,OAAO;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,EAAE,CAAC;QAE1D,8FAA8F;QAC9F,4FAA4F;QAC5F,6FAA6F;QAC7F,2FAA2F;QAC3F,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CAAC,iCAAiC,OAAO,kCAAkC,CAAC,CAAC;QAC9F,CAAC;QACD,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,iCAAiC,OAAO,gCAAgC,CAAC,CAAC;QAC5F,CAAC;QAED,6FAA6F;QAC7F,6FAA6F;QAC7F,wFAAwF;QACxF,iFAAiF;QACjF,uFAAuF;QACvF,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,uBAAuB,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;QAE1E,4FAA4F;QAC5F,4FAA4F;QAC5F,0FAA0F;QAC1F,yDAAyD;QACzD,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QAE5F,uDAAuD;QACvD,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,CAAC;QAC5C,OAAO,OAAO,IAAI,MAAM,CAAC;IAC3B,CAAC,CAAC;AACJ,CAAC;AAWD;;;;;;;;;;;;;;;;;;GAkBG;AACH,KAAK,UAAU,aAAa,CAC1B,IAAoB,EACpB,OAA4B,EAC5B,IAAgB,EAChB,KAAa,EACb,WAAmB;IAEnB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,IAAI,CAAC,CAAC;IACnF,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,IAAI,CAAC,CAAC;IAClG,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE7B,MAAM,IAAI,CAAC,gBAAgB,CAAC,aAAa,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAE9F,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3B,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,GAAG,QAAQ,EAAE,CAAC;QACvC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,aAAa,SAAS,sBAAsB,GAAG,UAAU,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,OAAO;kBAC1F,+FAA+F;kBAC/F,YAAY,WAAW,EAAE,CAC5B,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAC9C,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACI,KAAK,UAAU,UAAU,CAC9B,IAAoB,EACpB,WAA2B,EAC3B,OAAqF,EAAE;IAEvF,MAAM,OAAO,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;IACxC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,KAAK,EAAE,CAAsB,EAAE,EAAE,GAAG,MAAM,IAAA,aAAM,EAAC,IAAuB,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAEhI,MAAM,SAAS,CAAC,OAAO,CAAC,CAAC;IACzB,MAAM,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,gBAAgB,EACvD,+DAA+D,CAAC,CAAC;IACnE,MAAM,SAAS,CAAC,OAAO,CAAC,CAAC;AAC3B,CAAC;AAED;;;;;;;;;;;;;GAaG;AACI,KAAK,UAAU,WAAW,CAC/B,IAA2G,EAC3G,WAA2B,EAC3B,OAAqG,EAAE;IAEvG,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,WAAW,CAAC;IAC3C,MAAM,OAAO,GAAG,CAAC,CAAM,EAAW,EAAE,CAAC,eAAe,CAAC,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;IAC5E,sFAAsF;IACtF,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,IAAI,CAAC,KAAK,EAAE,CAAsB,EAAE,EAAE,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAE5H,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC;IACtB,MAAM,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAClD,8FAA8F,CAAC,CAAC;AACpG,CAAC"}

package/dist/orchestrator/templates/specs-url-assert.ts

@@ -46,6 +46,16 @@ export interface UrlExpectation {
   declared?: string;
   /** The test-data key behind `declared`, so a failure can name what an author must go fix. */
   dataRef?: string;
+  /**
+   * The page selector declared `query: any` — the query string is not part of this page's identity,
+   * so SILENCE from the step stops meaning "there must be no query" (#748).
+   *
+   * Emitted only for a page whose entry says so. The default stays strict: a bare page means a bare
+   * page, which is the #464 assertion and the reason a filter regression cannot read as green.
+   * It is the no-`dataRef` branch alone that this relaxes — a step that declares `with {{v}}` still
+   * asserts every param it names, on this page as on any other.
+   */
+  ignoreQuery?: boolean;
 }
 
 /**
@@ -113,8 +123,14 @@ function locationMatches(pathname: RegExp, hostname: RegExp | undefined, u: URL)
  *                      tracking/UTM param the test never cared about cannot turn it red.
  *                      A declared fragment is asserted too; a declared value carrying no query
  *                      at all constrains the path only (the compiler warns: SG-W014).
+ *
+ * `query: any` on the page's selector entry overrides the FIRST rule only (#748): silence then
+ * means "the query is not mine to judge" instead of "there must be none". It is the escape hatch
+ * for a page whose query is generated at run time — `/admins/detail?id=<the row just clicked>` —
+ * which the strict rule makes unassertable and `with {{v}}` cannot express, since that asserts a
+ * literal. The second rule is untouched: declare params and they are still all checked.
  */
-export function urlMatches({ pathname, hostname, declared, dataRef }: UrlExpectation): (u: URL) => boolean {
+export function urlMatches({ pathname, hostname, declared, dataRef, ignoreQuery }: UrlExpectation): (u: URL) => boolean {
   return (u: URL): boolean => {
     if (!locationMatches(pathname, hostname, u)) return false;
 
@@ -123,7 +139,13 @@ export function urlMatches({ pathname, hostname, declared, dataRef }: UrlExpecta
     // undefined, and they mean opposite things: the first is a real assertion (a bare page must be
     // bare), the second is broken test-data. Only the generator knows which, and it says so by
     // emitting `dataRef` exactly when the step carried a `with {{v}}`.
-    if (!dataRef) return u.search === '';
+    // `query: any` on the page entry (#748): the query is not part of this page's identity, so
+    // silence from the step is not an assertion about it. Without this there is NO way to express
+    // "this path, whatever the query" — `with {{v}}` asserts a LITERAL value, and a detail page
+    // keyed by `?id=<the row just clicked>` has no literal to declare. Checked before the bare-page
+    // rule, never instead of the declared-value rule below: a step that names params still asserts
+    // them here exactly as anywhere else.
+    if (!dataRef) return ignoreQuery ? true : u.search === '';
 
     // Silence is the whole bug class this assertion exists to kill, so an unusable declared value
     // is an ERROR, not a quiet verdict. Returning false would read as "the app is wrong"; these

package/dist/orchestrator/templates/wdio.conf.ts

@@ -48,6 +48,14 @@ function evidenceSlug(s: string): string {
     .slice(0, 80) || 'unnamed';
 }
 
+/**
+ * True only in the launcher process. `@wdio/runner` re-parses this very config inside EVERY worker
+ * it spawns, so anything logged at module scope prints once per spec unless it is gated. WDIO's own
+ * "am I a worker" test is this env var (`@wdio/local-runner` sets it when spawning; `@wdio/utils`
+ * reads it) — reuse it rather than inventing a second signal.
+ */
+const IS_LAUNCHER = !process.env.WDIO_WORKER_ID;
+
 /**
  * Auto-select MOBILE specs and classify each by its target OS (dual-target routing).
  *
@@ -82,7 +90,12 @@ function classifyMobileSpecs(root: string): Array<{ file: string; platform: stri
     .filter((full) => {
       try {
         return fs.readFileSync(full, 'utf-8').includes('@wdio/globals');
-      } catch {
+      } catch (e) {
+        // A spec listed by readdir that cannot be read cannot be classified, so it is excluded.
+        // Excluding it SILENTLY is the fault: WDIO only fails the run when the spec list is
+        // EMPTY ("No specs found to run"), so dropping one spec out of ten leaves a green suite
+        // containing a test that never executed. Name it, and let the count below show the shortfall.
+        if (IS_LAUNCHER) console.warn(`[sungen] could not read ${full} — EXCLUDED from this run: ${(e as Error).message}`);
         return false;
       }
     })
@@ -98,6 +111,16 @@ const androidSpecs = specEntries.filter((e) => e.platform !== 'ios').map((e) =>
 const iosSpecs = specEntries.filter((e) => e.platform !== 'android').map((e) => e.file);
 const mobileSpecs = specEntries.map((e) => e.file); // union — top-level fallback
 
+// What DISCOVERY found — a mobile suite is only trustworthy if you can see how many specs it
+// resolved: WDIO fails loudly on an EMPTY list but says nothing when the list is merely short,
+// which is exactly what a dropped spec looks like.
+//
+// Two things this number is not. It is not an error on 0: WDIO already exits 1 there
+// ("No specs found to run"), and a `--shard` that legitimately receives none must still return 0.
+// And under `--shard` it is the PRE-SHARD total, because ConfigParser slices `specs` down to the
+// shard's portion only after this file has finished evaluating.
+if (IS_LAUNCHER) console.log(`[sungen] specs: ${specEntries.length} mobile spec(s) — android ${androidSpecs.length}, ios ${iosSpecs.length}`);
+
 // App under test — env overrides the init-configured defaults.
 const APP_PACKAGE = process.env.APP_PACKAGE || '__APP_PACKAGE__';
 const APP_ACTIVITY = process.env.APP_ACTIVITY || '__APP_ACTIVITY__';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sun-asterisk/sungen",
-  "version": "3.2.32",
+  "version": "3.2.33",
   "description": "Deterministic E2E Test Compiler - Gherkin + Selectors → Playwright tests",
   "main": "src/index.ts",
   "types": "src/index.ts",
@@ -40,8 +40,8 @@
     "@babel/types": "^7.28.5",
     "@cucumber/gherkin": "^37.0.0",
     "@cucumber/messages": "^31.0.0",
-    "@sungen/driver-data-factory": "3.2.32",
-    "@sungen/driver-ui": "3.2.32",
+    "@sungen/driver-data-factory": "3.2.33",
+    "@sungen/driver-ui": "3.2.33",
     "chalk": "^5.6.2",
     "commander": "^14.0.2",
     "dotenv": "^17.2.3",

package/src/cli/commands/audit.ts

@@ -7,8 +7,11 @@ import { acceptViewpointBaseline } from '../../harness/viewpoint-baseline';
 import { findUnitDir } from '../resolve-unit';
 
 
-function bar(ratio: number, width = 20): string {
-  const n = Math.round(ratio * width);
+export function bar(ratio: number, width = 20): string {
+  // A display helper must not be able to take the CLI down whatever the model hands it: an
+  // out-of-range ratio made `String.repeat` throw `Invalid count value: -5`, which killed the
+  // run mid-scorecard so the gate, the findings and the next-step hint never printed (#762).
+  const n = Math.max(0, Math.min(width, Math.round((Number.isFinite(ratio) ? ratio : 0) * width)));
   return '█'.repeat(n) + '░'.repeat(width - n);
 }
 
@@ -47,6 +50,11 @@ function render(r: AuditReport): void {
   L(`  ① Viewpoint Gate — page-type: ${r.gate.pageType ?? 'unknown'} — themes ${r.gate.themesCovered}/${r.gate.themesTotal} covered`);
   if (r.gate.gaps.length) for (const g of r.gate.gaps) L(`      ✗ ${g.status === 'shallow' ? 'SHALLOW' : 'MISSING'}: ${g.theme}`);
   else L('      ✓ all critical themes covered (with data assertions)');
+  // Name the scenario behind each covered theme (#776). A bare count gives a reviewer nothing to
+  // check, so a keyword matching something absurd stays invisible; the evidence line makes it
+  // obvious. Second line of defence — it holds even if the matcher is wrong again.
+  for (const c of r.gate.coveredBy ?? [])
+    L(`      ✓ ${c.theme} ← [${c.keyword}] ${c.by.length > 88 ? `${c.by.slice(0, 88)}…` : c.by}`);
   L('');
   if (r.flowQuality?.hasContract) {
     const fq = r.flowQuality;

package/src/cli/commands/capability.ts

@@ -4,7 +4,8 @@ import { createRequire } from 'module';
 import * as fs from 'fs';
 import * as path from 'path';
 import {
-  readCapabilities, writeCapabilities, loadDriverCatalog, driverMeta,
+  readCapabilities, writeCapabilities, loadDriverCatalog, driverMeta, capabilitiesPath,
+  type CapabilityProfile,
 } from '../../harness/capability';
 import { buildPlan, MANUAL_REASONS } from '../../harness/capability-plan';
 import { adapterRegistry } from '../../generators/test-generator/adapters';
@@ -12,26 +13,37 @@ import { emitMobileRuntime, installMobileDriver } from '../../orchestrator/mobil
 import { emitAppiumEnvironment, runAppiumEnvironmentSetup } from '../../orchestrator/appium-environment-setup';
 import { coreVersion, resolveDriverVersion } from '../../orchestrator/lockstep-version';
 import { findUnitDir, resolveUnit } from '../resolve-unit';
+import { readTextFile } from '../../harness/read-text';
 
 /**
- * Add `test:mobile` to the project's package.json scripts (if absent).
- * Idempotent — skips if the script is already set.
- * Returns true if the script was added, false if already present or no package.json.
+ * Add `test:mobile` to the project's package.json scripts (if absent). Idempotent.
+ *
+ * Four outcomes, not two. The old boolean collapsed "already present", "no package.json" and
+ * "could not parse it" into a single `false`, and the caller rendered that as
+ * `– skipped  package.json scripts[test:mobile] (already exists)` — which, on a malformed
+ * package.json, states the exact opposite of the truth: the script is absent, the command promised
+ * it, and the next thing the user sees is `npm error Missing script: "test:mobile"`.
  */
-function addMobileScript(cwd: string): boolean {
+type MobileScriptOutcome =
+  | { state: 'added' }
+  | { state: 'already-present' }
+  | { state: 'no-package-json' }
+  | { state: 'unreadable'; error: string };
+
+function addMobileScript(cwd: string): MobileScriptOutcome {
   const pkgPath = path.join(cwd, 'package.json');
-  if (!fs.existsSync(pkgPath)) return false;
+  if (!fs.existsSync(pkgPath)) return { state: 'no-package-json' };
   let pkg: Record<string, any>;
   try {
-    pkg = JSON.parse(fs.readFileSync(pkgPath, 'utf-8'));
-  } catch {
-    return false;
+    pkg = JSON.parse(readTextFile(pkgPath));   // BOM-tolerant: npm reads such a file fine, so must we
+  } catch (e) {
+    return { state: 'unreadable', error: (e as Error).message.split('\n')[0] };
   }
   if (!pkg.scripts || typeof pkg.scripts !== 'object') pkg.scripts = {};
-  if (pkg.scripts['test:mobile']) return false;
+  if (pkg.scripts['test:mobile']) return { state: 'already-present' };
   pkg.scripts['test:mobile'] = 'wdio run wdio.conf.ts';
   fs.writeFileSync(pkgPath, JSON.stringify(pkg, null, 2) + '\n', 'utf-8');
-  return true;
+  return { state: 'added' };
 }
 
 /**
@@ -221,9 +233,13 @@ export function registerCapabilityCommand(program: Command): void {
         }
 
         const profile = readCapabilities(cwd);
+        assertProfileWritable(profile, cwd);
         const enabled = Array.from(new Set([...profile.enabled, driver]));
         const platform = meta.kind === 'platform' ? driver : profile.platform;
-        writeCapabilities(cwd, { platform, enabled });
+        // Carry `verification` through. It is the recorded TEST TYPE, not a derived value: dropping
+        // it here silently re-derives the scope from `enabled`, handing an E2E-only project the
+        // @api/@query verification it had explicitly narrowed away.
+        writeCapabilities(cwd, { platform, enabled, verification: profile.verification });
         console.log(`✓ capability "${driver}" enabled${meta.kind === 'platform' ? ` (platform=${driver})` : ''}.`);
 
         // Emit the mobile runtime harness when the mobile platform driver is added.
@@ -236,11 +252,11 @@ export function registerCapabilityCommand(program: Command): void {
           for (const f of result.skipped) console.log(`  – skipped  ${f} (already exists)`);
 
           // Add test:mobile script to package.json (idempotent)
-          if (addMobileScript(cwd)) {
-            console.log('  ✓ created  package.json scripts[test:mobile]');
-          } else {
-            console.log('  – skipped  package.json scripts[test:mobile] (already exists)');
-          }
+          const script = addMobileScript(cwd);
+          if (script.state === 'added') console.log('  ✓ created  package.json scripts[test:mobile]');
+          else if (script.state === 'already-present') console.log('  – skipped  package.json scripts[test:mobile] (already exists)');
+          else if (script.state === 'no-package-json') console.log('  ✗ NOT added  package.json scripts[test:mobile] — no package.json here; run `npm init -y` first, then add: "test:mobile": "wdio run wdio.conf.ts"');
+          else console.log(`  ✗ NOT added  package.json scripts[test:mobile] — package.json is not valid JSON (${script.error}); fix it, then add: "test:mobile": "wdio run wdio.conf.ts"`);
 
           // appium-environment/ provisioning bundle (idempotent per file) — emitted before the driver
           // install, run after it so its Appium step finds the project-local CLI.
@@ -262,6 +278,22 @@ export function registerCapabilityCommand(program: Command): void {
       }
     });
 
+/**
+ * Every path that WRITES qa/capabilities.yaml first reads it, edits one field, and writes the whole
+ * file back. That round-trip is only safe when the read succeeded: an unreadable profile reads as
+ * "no platform, no drivers", so the write-back would replace the user's declaration with just the
+ * one driver being added — and `remove` would replace it with nothing at all. Refuse instead.
+ */
+function assertProfileWritable(profile: CapabilityProfile, cwd: string): void {
+  if (profile.source !== 'unreadable') return;
+  console.error(
+    `✗ ${path.relative(cwd, capabilitiesPath(cwd))} exists but could not be parsed.\n` +
+    `  Refusing to rewrite it: this command replaces the whole file, so it would discard the\n` +
+    `  platform, drivers and verification scope you declared. Fix the YAML and re-run.`,
+  );
+  process.exit(1);
+}
+
   // ── remove ─────────────────────────────────────────────────────────────
   cap
     .command('remove <driver>')
@@ -271,9 +303,10 @@ export function registerCapabilityCommand(program: Command): void {
       try {
         const cwd = process.cwd();
         const profile = readCapabilities(cwd);
+        assertProfileWritable(profile, cwd);
         const enabled = profile.enabled.filter((d) => d !== driver);
         const platform = profile.platform === driver ? undefined : profile.platform;
-        writeCapabilities(cwd, { platform, enabled });
+        writeCapabilities(cwd, { platform, enabled, verification: profile.verification });
         const meta = driverMeta(driver);
         if (o.uninstall && meta && !adapterRegistry.hasAdapter(meta.adapter || meta.id)) {
           spawnSync('npm', ['uninstall', meta.package], { stdio: 'inherit', shell: true });

package/src/cli/commands/delivery.ts

@@ -26,7 +26,7 @@ import { loadApiCatalog } from '../../exporters/api-catalog-loader';
 import { resolveApiEnvironment } from '../../exporters/api-environment';
 import { resolveWebBaseUrl } from '../../exporters/env-qa';
 import { resolvePlatformAppId } from '../../exporters/mobile-app-id';
-import { scanTestDataSecrets } from '../../harness/secret-scan';
+import { scanTestDataSecrets, formatSecretScan, type SecretScanResult } from '../../harness/secret-scan';
 import { EnvironmentInfo, PreflightCheck, ScreenSummary, TestCaseRow, ApiCatalogEntry } from '../../exporters/types';
 import { mapFilePath } from '../../exporters/matrix/map-loader';
 import {
@@ -39,7 +39,9 @@ import {
   hasReview,
 } from '../../exporters/matrix/export';
 import { MatrixFinding } from '../../exporters/matrix/types';
+import { ManualCarryReport } from '../../exporters/matrix/carry-manual-results';
 import { formatTestOutcome, resultTotals } from '../../exporters/matrix/result-totals';
+import { readCapabilities } from '../../harness/capability';
 
 const COLOR = {
   reset: '\x1b[0m',
@@ -375,14 +377,11 @@ function getEnvironment(cwd: string): EnvironmentInfo {
  * emits one csv+xlsx per OS and skips the (empty/misleading) base aggregate.
  */
 function isMobileProject(cwd: string): boolean {
-  try {
-    const p = path.join(cwd, 'qa', 'capabilities.yaml');
-    if (!fs.existsSync(p)) return false;
-    const parsed = parseYaml(fs.readFileSync(p, 'utf-8')) as { platform?: string } | null;
-    return parsed?.platform === 'mobile';
-  } catch {
-    return false;
-  }
+  // Reads through `readCapabilities` rather than re-parsing the file: the third copy of this parse
+  // was the third place a malformed capabilities.yaml quietly read as "web". The shared reader
+  // reports the breakage once per process; here it still degrades to web, which is the safe
+  // direction (per-OS delivery is skipped, nothing is deleted).
+  return readCapabilities(cwd).platform === 'mobile';
 }
 
 /**
@@ -736,11 +735,20 @@ async function exportMatrixTarget(
     return null;
   }
 
-  const { csvPath, xlsxPath } = await writeMatrixDeliverables(paths, model, opts.format ?? 'xlsx');
+  let deliverables: Awaited<ReturnType<typeof writeMatrixDeliverables>>;
+  try {
+    deliverables = await writeMatrixDeliverables(paths, model, opts.format ?? 'xlsx');
+  } catch (e) {
+    // The existing workbook could not be read, so writing would destroy its Manual results.
+    log(`  ${COLOR.red}not written:${COLOR.reset} ${(e as Error).message}`);
+    return null;
+  }
+  const { csvPath, xlsxPath, manualCarry } = deliverables;
   const passed = model.items.reduce((a, i) => a + i.resultCounts.passed, 0);
   const failed = model.items.reduce((a, i) => a + i.resultCounts.failed, 0);
   const written = [xlsxPath, csvPath].filter((p): p is string => !!p).map((p) => path.relative(cwd, p));
   for (const rel of written) log(`  ${COLOR.green}→ ${rel}${COLOR.reset}`);
+  if (manualCarry) printManualCarry(manualCarry);
   return {
     label: paths.label,
     items: model.manifest.itemCount,
@@ -751,6 +759,23 @@ async function exportMatrixTarget(
   };
 }
 
+/** What happened to the tester's hand-entered Manual results on this write (#756). */
+function printManualCarry(r: ManualCarryReport): void {
+  const kept = r.carried + r.unchecked;
+  if (kept + r.reset.length + r.notPlaced.length + r.duplicates.length === 0) return;
+  const list = (refs: string[]) => `${refs.slice(0, 4).join(', ')}${refs.length > 4 ? ', …' : ''}`;
+  log(`  Manual results: ${kept} kept${r.unchecked > 0 ? ` (${r.unchecked} without a drift check — the file predates the fingerprint stamp)` : ''}`);
+  if (r.reset.length > 0) {
+    log(`  ${COLOR.yellow}reset to Pending${COLOR.reset} — procedure changed since the result was recorded (${r.reset.length}): ${list(r.reset)}; the previous result is kept in Note`);
+  }
+  if (r.notPlaced.length > 0) {
+    log(`  ${COLOR.yellow}not carried${COLOR.reset} — no matching manual case in the feature any more (${r.notPlaced.length}): ${list(r.notPlaced.map((n) => `${n.ref} was ${n.result}`))}`);
+  }
+  if (r.duplicates.length > 0) {
+    log(`  ${COLOR.yellow}not carried${COLOR.reset} — a second row for the same case; only the first was kept (${r.duplicates.length}): ${list(r.duplicates.map((n) => `${n.ref} was ${n.result}`))}`);
+  }
+}
+
 /**
  * One place that accounts for every target the run did NOT write, so a sweep is
  * never silently partial: scaffolds skipped by preflight and units whose gates /
@@ -934,12 +959,9 @@ export function registerDeliveryCommand(program: Command): void {
         // Deliverables are COMMITTED files; delivery is the last stop before a
         // hardcoded credential lands in one. Same scan `generate` runs.
         const scanDirs = [...new Set(toExport.map((t) => qaDir(cwd, t)))];
-        const secretHits = scanDirs.flatMap((d) => scanTestDataSecrets(d));
-        if (secretHits.length) {
-          log(`\n⚠️  Possible secret(s) in committed test-data (review — do NOT commit real credentials):`);
-          for (const h of secretHits.slice(0, 10)) log(`   ${h.file}:${h.line} — ${h.reason}`);
-          log(`   Move real secrets to an env overlay / CI secret; keep test-data placeholders only.\n`);
-        }
+        const secretScan = scanDirs.map((d) => scanTestDataSecrets(d))
+          .reduce<SecretScanResult>((a, r) => ({ hits: [...a.hits, ...r.hits], unscanned: [...a.unscanned, ...r.unscanned] }), { hits: [], unscanned: [] });
+        for (const line of formatSecretScan(secretScan)) log(line);
 
         // 3. Export
         const legacy = options.legacy || options.full;

package/src/cli/commands/generate.ts

@@ -3,7 +3,7 @@ import * as path from 'path';
 import * as fs from 'fs';
 import { CodeGenerator } from '../../generators/test-generator/code-generator';
 import { adapterRegistry } from '../../generators/test-generator/adapters';
-import { scanTestDataSecrets } from '../../harness/secret-scan';
+import { scanTestDataSecrets, formatSecretScan, type SecretScanResult } from '../../harness/secret-scan';
 import { capabilityRegistry } from '../../capabilities/registry';
 import { discoverAndRegisterCapabilities } from '../../capabilities/discover';
 import { readCapabilities, writeCapabilities, driverMeta, loadDriverCatalog } from '../../harness/capability';
@@ -160,6 +160,17 @@ export function registerGenerateCommand(program: Command): void {
           const cap = readCapabilities(cwd);
           if (cap.platform) {
             platform = cap.platform;
+          } else if (cap.source === 'unreadable') {
+            // The file EXISTS and we failed to parse it. Scaffolding the web default here would
+            // overwrite whatever the user declared — a mobile project's platform, drivers and
+            // verification scope, gone, while the notice claimed the file was missing. Refuse:
+            // the one thing we know is that we do not know what this project is.
+            throw new Error(
+              `qa/capabilities.yaml exists but could not be parsed — fix the YAML and re-run.\n` +
+              `   Refusing to scaffold a default over it: that would discard the platform, drivers ` +
+              `and verification scope it declares.\n` +
+              `   To compile without reading it, pass --framework <web|mobile|…>.`,
+            );
           } else {
             platform = 'web';
             writeCapabilities(cwd, { platform: 'web', enabled: ['web'] });
@@ -225,12 +236,9 @@ export function registerGenerateCommand(program: Command): void {
             if (fs.existsSync(d)) for (const n of fs.readdirSync(d)) scanDirs.push(path.join(d, n));
           }
         }
-        const secretHits = scanDirs.flatMap((d) => scanTestDataSecrets(d));
-        if (secretHits.length) {
-          console.log(`\n⚠️  Possible secret(s) in committed test-data (review — do NOT commit real credentials):`);
-          for (const h of secretHits.slice(0, 10)) console.log(`   ${h.file}:${h.line} — ${h.reason}`);
-          console.log(`   Move real secrets to an env overlay / CI secret; keep test-data placeholders only.`);
-        }
+        const secretScan = scanDirs.map((d) => scanTestDataSecrets(d))
+          .reduce<SecretScanResult>((a, r) => ({ hits: [...a.hits, ...r.hits], unscanned: [...a.unscanned, ...r.unscanned] }), { hits: [], unscanned: [] });
+        for (const line of formatSecretScan(secretScan)) console.log(line);
 
         // Advisory harness sensors (e.g. @cases/@query lint) — run via the Capability SPI,
         // never block generation. Each capability registers its own; the kernel just runs them.

package/src/cli/commands/results-merge.ts

@@ -13,6 +13,7 @@ import { detectReportRoot, sanitizeReportPaths } from '../../exporters/report-pa
 import { registerResultsSanitizeCommand } from './results-sanitize';
 import { resolveResultsPath } from '../../exporters/playwright-report-parser';
 import { parseSpecFile } from '../../exporters/spec-parser';
+import { writeFileAtomic } from '../../harness/write-atomic';
 
 interface MergeCliOptions {
   out?: string;
@@ -125,14 +126,7 @@ export function runResultsMerge(baseArg: string | undefined, newArg: string | un
   // that file is the single source of execution truth for delivery/dashboard.
   // (Same-dir rename = same device; concurrent merges are last-rename-wins.)
   const outFile = opts.out ?? baseFile;
-  const tmp = `${outFile}.tmp-${process.pid}`;
-  try {
-    fs.writeFileSync(tmp, JSON.stringify(merged, null, 2));
-    fs.renameSync(tmp, outFile);
-  } catch (err) {
-    try { fs.rmSync(tmp, { force: true }); } catch { /* best-effort cleanup */ }
-    throw err;
-  }
+  writeFileAtomic(outFile, JSON.stringify(merged, null, 2));
 
   console.log(`✓ merged ${path.basename(newFile)} into ${path.relative(cwd, outFile)} — ${replaced.length} updated, ${added.length} added, ${kept.length} kept`);
   return outFile;

package/src/cli/commands/results-sanitize.ts

@@ -16,6 +16,7 @@ import * as fs from 'fs';
 import * as path from 'path';
 import fg from 'fast-glob';
 import { detectReportRoot, sanitizeReportPaths } from '../../exporters/report-path-sanitizer';
+import { writeFileAtomic } from '../../harness/write-atomic';
 
 /** Where a project keeps the JSON files that carry paths. */
 export const DEFAULT_REPORT_GLOBS = [
@@ -50,15 +51,7 @@ export function runResultsSanitize(files: string[] | undefined, cwd: string = pr
     const root = detectReportRoot(doc) ?? nearestProjectRoot(path.dirname(file)) ?? cwd;
     const { doc: clean, rewritten } = sanitizeReportPaths(doc, { root });
     if (rewritten > 0) {
-      // Atomic write, same as `results merge`: a crash mid-write must never leave a truncated report.
-      const tmp = `${file}.tmp-${process.pid}`;
-      try {
-        fs.writeFileSync(tmp, JSON.stringify(clean, null, 2) + (raw.endsWith('\n') ? '\n' : ''));
-        fs.renameSync(tmp, file);
-      } catch (err) {
-        try { fs.rmSync(tmp, { force: true }); } catch { /* best-effort cleanup */ }
-        throw err;
-      }
+      writeFileAtomic(file, JSON.stringify(clean, null, 2) + (raw.endsWith('\n') ? '\n' : ''));
     }
     out.push({ file: path.relative(cwd, file), rewritten });
   }

package/src/dashboard/snapshot-builder.ts

@@ -29,6 +29,7 @@ import { resolvePlatformAppId } from '../exporters/mobile-app-id';
 import { discoverLocaleVariants, LocaleVariant } from '../exporters/locale-variants';
 import { getPackageVersion } from '../exporters/package-info';
 import { ApiCatalogEntry, EnvironmentInfo } from '../exporters/types';
+import { readCapabilities } from '../harness/capability';
 import {
   AggregateSummary,
   DashboardSnapshot,
@@ -98,14 +99,11 @@ export function buildDashboardSnapshot(options: BuildSnapshotOptions): Dashboard
  * Mirrors `isMobileProject` in src/cli/commands/delivery.ts.
  */
 function isMobileProject(cwd: string): boolean {
-  try {
-    const p = path.join(cwd, 'qa', 'capabilities.yaml');
-    if (!fs.existsSync(p)) return false;
-    const parsed = parseYaml(fs.readFileSync(p, 'utf-8')) as { platform?: string } | null;
-    return parsed?.platform === 'mobile';
-  } catch {
-    return false;
-  }
+  // Reads through `readCapabilities` rather than re-parsing the file: the third copy of this parse
+  // was the third place a malformed capabilities.yaml quietly read as "web". The shared reader
+  // reports the breakage once per process; here it still degrades to web, which is the safe
+  // direction (per-OS delivery is skipped, nothing is deleted).
+  return readCapabilities(cwd).platform === 'mobile';
 }
 
 function buildOneScreen(

package/src/exporters/feature-parser.ts

@@ -3,9 +3,39 @@
  * Reuses the existing GherkinParser.
  */
 
-import { GherkinParser, ParsedFeature, ParsedScenario } from '../generators/gherkin-parser';
+import { GherkinParser, ParsedDataTable, ParsedFeature, ParsedScenario } from '../generators/gherkin-parser';
 import { FeatureMetadata, OrderedStep, ScenarioMetadata } from './types';
 
+/**
+ * Fold a step's data table into the text the exporters carry (#771). The table
+ * IS the step's content — `tab order:` names every stop, `table match data:`
+ * every expected row — so without it a delivered case says "See tab order:."
+ * and a table edit leaves the scenario fingerprint unchanged.
+ *
+ * Folded once, here, so every consumer (matrix + legacy cells, fingerprint,
+ * oracle shape) sees the same thing. A step with no table keeps its text
+ * byte-identical: no existing fingerprint moves on upgrade.
+ *
+ *   `tab order:` | Ref | [A] | [B] |  → `tab order: [A] → [B]`   (order is the meaning;
+ *                                         `Ref` is a keyword header, not a column name)
+ *   any other    | Name | Age | …      → `…: Name: Alice, Age: 30; Name: Bob, Age: 25`
+ *                (one column too: `Title: x; Title: y` — its header names what x is)
+ *
+ * A blank cell renders as `(empty)` — the matrix's data-fidelity word. Left blank it would
+ * read `Age: ;`, indistinguishable from the truncation this fixes, and in `table match
+ * data:` a blank cell is itself an assertion (the cell is empty).
+ */
+export function withDataTable(text: string, table: ParsedDataTable | undefined): string {
+  if (!table || table.rows.length === 0) return text;
+  const base = text.replace(/\s*:\s*$/, '');
+  const cell = (v: string | undefined): string => (v === undefined || v.trim() === '' ? '(empty)' : v);
+  // Only `tab order` is a sequence of refs — the one shape matrix/wording.ts reads as `→`.
+  const body = /\btab order$/i.test(base)
+    ? table.rows.map((r) => cell(r.cells[0])).join(' → ')
+    : table.rows.map((r) => table.headers.map((h, i) => `${h}: ${cell(r.cells[i])}`).join(', ')).join('; ');
+  return `${base}: ${body}`;
+}
+
 /**
  * Variables referenced in a scenario: find all {{var_name}} in step text.
  */
@@ -60,7 +90,7 @@ function classifySteps(scenario: ParsedScenario): OrderedStep[] {
     else if (keyword === 'Then') currentBucket = 'then';
     // And / But → inherit currentBucket
 
-    ordered.push({ text: step.text, bucket: currentBucket });
+    ordered.push({ text: withDataTable(step.text, step.dataTable), bucket: currentBucket });
   }
 
   return ordered;