@validate.qa/runner 1.0.100 → 1.0.101

package/dist/cli.mjs

@@ -12,6 +12,7 @@ import {
   require_failure_triage,
   require_fetch_cli_subscription,
   require_framework_import_runner,
+  require_google_local_signin,
   require_grok_repo_enrichment_runner,
   require_inbox_stamp,
   require_live_browser_registry,
@@ -30,21 +31,22 @@ import {
   require_resource_governor,
   require_result_api_call_bodies,
   require_result_shed
-} from "./chunk-5P4ANVDY.mjs";
+} from "./chunk-4SZC5ZX3.mjs";
 import {
   require_tar_isolated
 } from "./chunk-AAUHXGDS.mjs";
 import "./chunk-EXRFHATN.mjs";
 import {
   require_browser_config
-} from "./chunk-6NIT2CCH.mjs";
-import "./chunk-II7QW7MZ.mjs";
-import "./chunk-MHFP3QXU.mjs";
-import "./chunk-MAO6ADAO.mjs";
-import "./chunk-HMUC3DKS.mjs";
-import "./chunk-WDXLAZ2J.mjs";
-import "./chunk-2XD63NU5.mjs";
-import "./chunk-GIIIVO2W.mjs";
+} from "./chunk-TPU42VH2.mjs";
+import "./chunk-M3VZGHZQ.mjs";
+import "./chunk-XZUUBMP3.mjs";
+import "./chunk-FQUH2PU2.mjs";
+import "./chunk-CYWHPXNZ.mjs";
+import "./chunk-CO5KHIVX.mjs";
+import "./chunk-2OKZY3WN.mjs";
+import "./chunk-BBTK6OX6.mjs";
+import "./chunk-SN3PN4G4.mjs";
 import {
   LIVE_FRAME_IDLE_PUSH_INTERVAL_MS,
   MOBILE_COLD_BOOT_SETTLE_MS,
@@ -57,17 +59,12 @@ import {
   buildAppiumCode,
   clampMobileSwipeDistance,
   classifyErrorMessage,
-  coldSessionConfigMessage,
   computeMobileSwipePointers,
   decideHarPosted,
   deriveAuthPlan,
-  detectApiColdSessionBlock,
-  detectAuthBlock,
-  detectSkippedApiCoverage,
   hasPlatformLocator,
   init_dist,
   isAppOriginResolutionEnabled,
-  isAuthReadinessGuardEnabled,
   isConfigLikeReason,
   isEditableMobileClassName,
   isRepositoryCli,
@@ -84,7 +81,7 @@ import {
   stepAppliesToPlatform,
   stepsMissingPlatformLocators,
   stepsNeedingReviewForPlatform
-} from "./chunk-MBKGTELT.mjs";
+} from "./chunk-IGXGSDE3.mjs";
 import {
   __commonJS,
   __toESM
@@ -95,7 +92,7 @@ var require_package = __commonJS({
   "package.json"(exports, module) {
     module.exports = {
       name: "@validate.qa/runner",
-      version: "1.0.100",
+      version: "1.0.101",
       description: "validate local test runner - execute Playwright tests on your machine, connected to validate.qa cloud.",
       bin: {
         "validate-runner": "dist/cli.js"
@@ -103,8 +100,8 @@ var require_package = __commonJS({
       scripts: {
         build: "tsup",
         dev: "tsx src/cli.ts",
-        test: "node --import tsx --test src/supervisor-child-argv.test.ts src/audit-scrub.test.ts src/retry-on-429.test.ts src/version-check.test.ts src/poll-interval.test.ts src/node-version-notice.test.ts src/services/auth-state.test.ts src/run-no-longer-active.test.ts src/mode-abort-no-verdict.test.ts src/heartbeat-active-runs.test.ts src/result-post-structure-413.test.ts src/result-shed-routes-413.test.ts src/result-post-retry.test.ts src/result-media-stale-epoch.test.ts src/run-write-guard-bundle.test.ts src/spec-driver-bundle.test.ts src/mcp-servers-bundle.test.ts src/codex-files-mcp-server-bundle.test.ts src/claim-nonce-not-logged.test.ts src/sign-in-capture.test.ts src/run-status-verdicts.test.ts src/sign-in-failure.test.ts src/mobile-ui-path-succeeded.test.ts src/supervisor-policy.test.ts src/login-check.test.ts src/heal-post-lost-ack.test.ts src/heal-log-stream-chunks.test.ts src/shutdown-claim-window.test.ts",
-        "test:mobile": "node --import tsx --test --test-concurrency=2 src/runner.mobile-ai-env.test.ts src/mobile-device-queue.test.ts src/device-lease.test.ts src/runner-watchdog.test.ts src/result-payload-budget.test.ts src/result-media-upload.test.ts src/services/appium-*.test.ts src/services/*mobile*.test.ts src/services/mobile/*.test.ts",
+        test: "node --import tsx --test src/supervisor-child-argv.test.ts src/audit-scrub.test.ts src/retry-on-429.test.ts src/version-check.test.ts src/poll-interval.test.ts src/node-version-notice.test.ts src/services/auth-state.test.ts src/run-no-longer-active.test.ts src/mode-abort-no-verdict.test.ts src/discovery-render-type.test.ts src/batch-heal-no-start.test.ts src/heartbeat-active-runs.test.ts src/result-post-structure-413.test.ts src/result-shed-routes-413.test.ts src/result-post-retry.test.ts src/result-media-stale-epoch.test.ts src/run-write-guard-bundle.test.ts src/spec-driver-bundle.test.ts src/mcp-servers-bundle.test.ts src/codex-files-mcp-server-bundle.test.ts src/claim-nonce-not-logged.test.ts src/sign-in-capture.test.ts src/run-status-verdicts.test.ts src/sign-in-failure.test.ts src/mobile-ui-path-succeeded.test.ts src/supervisor-policy.test.ts src/login-check.test.ts src/heal-post-lost-ack.test.ts src/heal-log-stream-chunks.test.ts src/shutdown-claim-window.test.ts",
+        "test:mobile": "node --import tsx --test --test-concurrency=2 src/runner.mobile-ai-env.test.ts src/runner.mobile-heal-audit-wiring.test.ts src/mobile-device-queue.test.ts src/device-lease.test.ts src/runner-watchdog.test.ts src/result-payload-budget.test.ts src/result-media-upload.test.ts src/services/appium-*.test.ts src/services/*mobile*.test.ts src/services/mobile/*.test.ts",
         "smoke:installed": "node scripts/installed-run-smoke.mjs",
         "check:packed-mcp": "node scripts/packed-install-check.mjs",
         prepublishOnly: "npm run build"
@@ -315,8 +312,9 @@ var import_playwright_native = __toESM(require_playwright_native());
 var import_runner_core = __toESM(require_dist());
 
 // src/runner.ts
-var import_runner_core6 = __toESM(require_dist());
 var import_runner_core7 = __toESM(require_dist());
+var import_runner_core8 = __toESM(require_dist());
+var import_runner_core9 = __toESM(require_dist());
 var import_framework_import_runner = __toESM(require_framework_import_runner());
 var import_grok_repo_enrichment_runner = __toESM(require_grok_repo_enrichment_runner());
 var import_repo_brief_execution = __toESM(require_repo_brief_execution());
@@ -325,7 +323,7 @@ var import_cli_session_failure = __toESM(require_cli_session_failure());
 var import_cli_limit = __toESM(require_cli_limit());
 var import_fetch_cli_subscription = __toESM(require_fetch_cli_subscription());
 var import_codex_cli = __toESM(require_codex_cli());
-var import_runner_core8 = __toESM(require_dist());
+var import_runner_core10 = __toESM(require_dist());
 
 // src/services/regression-runner.ts
 var import_regression_runner = __toESM(require_regression_runner());
@@ -680,6 +678,9 @@ function computeMobileUiPathSucceeded(stepResults, authoredSteps) {
   return passedBefore > 0;
 }
 
+// src/post-heal-outcome.ts
+var import_runner_core5 = __toESM(require_dist());
+
 // src/run-no-longer-active.ts
 var RunNoLongerActiveError = class extends Error {
 };
@@ -691,39 +692,19 @@ function withClaimEpoch(body, claimEpoch) {
 }
 
 // src/post-heal-outcome.ts
-async function postHealOutcome(options) {
-  const { postRunResult, postHealResult: postHealResult2, passed, healedCode, testCaseId, log: log2 } = options;
-  const tryPostPatch = async () => {
-    if (passed && healedCode && testCaseId) {
-      try {
-        await postHealResult2(healedCode, testCaseId);
-        log2?.ok?.(`\u{1FA7A} Healed code auto-patched for test ${testCaseId}`);
-      } catch (patchErr) {
-        const patchMsg = patchErr instanceof Error ? patchErr.message : String(patchErr);
-        log2?.warn?.(`Failed to auto-patch healed code: ${patchMsg}`);
-      }
-    }
-  };
-  try {
-    await postRunResult();
-  } catch (err) {
-    if (err instanceof RunNoLongerActiveError) {
-      await tryPostPatch();
-    }
-    throw err;
-  }
-  await tryPostPatch();
+function postHealOutcome(options) {
+  return (0, import_runner_core5.postHealOutcome)({ ...options, isRunGone: (err) => err instanceof RunNoLongerActiveError });
 }
 
 // src/run-status-verdicts.ts
-var import_runner_core5 = __toESM(require_dist());
+var import_runner_core6 = __toESM(require_dist());
 function runStatusVerdicts(body, heldEpoch) {
   const rows = body?.runs;
   if (!Array.isArray(rows)) return [];
   const verdicts = [];
   for (const row of rows) {
     if (!row || typeof row.id !== "string" || typeof row.status !== "string") continue;
-    const reason = (0, import_runner_core5.runStatusAbortReason)(row, heldEpoch(row.id));
+    const reason = (0, import_runner_core6.runStatusAbortReason)(row, heldEpoch(row.id));
     if (!reason) continue;
     verdicts.push({
       runId: row.id,
@@ -9280,7 +9261,7 @@ async function postHealResult(serverUrl, headers, runId, healedCode, testCaseId,
   }
   throw new Error(`Failed to post heal result after ${MAX_ATTEMPTS} attempts: ${lastError?.message}`);
 }
-async function postMobileHealResult(serverUrl, headers, runId, body) {
+async function postMobileHealResult(serverUrl, headers, runId, body, claimEpoch) {
   const MAX_ATTEMPTS = 3;
   let lastError;
   for (let attempt = 1; attempt <= MAX_ATTEMPTS; attempt++) {
@@ -9288,7 +9269,7 @@ async function postMobileHealResult(serverUrl, headers, runId, body) {
       const res = await fetch(`${serverUrl}/api/runner/runs/${runId}/mobile-heal-result`, {
         method: "POST",
         headers,
-        body: JSON.stringify(body),
+        body: JSON.stringify(withClaimEpoch(body, claimEpoch)),
         signal: AbortSignal.timeout(6e4)
       });
       if (res.ok) return;
@@ -9361,6 +9342,28 @@ function batchHealPartialHooks(serverUrl, headers, runId, projectId, warn = (msg
     resumeLookup: () => fetchBatchHealAppliedIds(serverUrl, headers, runId, projectId)
   };
 }
+function batchHealNoStart(tests, baseUrl) {
+  if (tests.length === 0) {
+    return {
+      body: { perTest: [], systemicDiagnosis: "batch-heal dispatched with empty tests list", logs: "no tests to heal", durationMs: 0 },
+      level: "warn",
+      logLine: "batch-heal: empty payload, posting no-op result"
+    };
+  }
+  if (!baseUrl) {
+    return {
+      body: {
+        perTest: [],
+        systemicDiagnosis: "batch-heal aborted: BASE_URL missing for project (set BASE_URL in Test Data or FrameworkRepo.baseUrl)",
+        logs: "batch-heal aborted: empty baseUrl",
+        durationMs: 0
+      },
+      level: "fail",
+      logLine: "batch-heal aborted \u2014 BASE_URL is empty in /pending payload"
+    };
+  }
+  return null;
+}
 var LOG_APPEND_MAX_LINES = 100;
 var LOG_APPEND_MAX_LINE_LEN = 8 * 1024;
 var LOG_APPEND_MAX_BODY_BYTES = 200 * 1024;
@@ -9688,6 +9691,12 @@ function pruneCollectedPageForPost(page) {
   if (Array.isArray(out.observations)) out.observations = out.observations.slice(-200).map((obs) => compactForAudit(obs));
   return out;
 }
+function discoveryRenderTypeFields(input) {
+  if (input.err instanceof import_runner_core7.UnsupportedRendererError) {
+    return { detectedAppRenderType: input.err.renderType, appRenderDetectionSignals: input.err.signals };
+  }
+  return input.appRenderType ? { detectedAppRenderType: input.appRenderType } : {};
+}
 function prepareDiscoveryResultForPost(result, logs2, options = {}) {
   const safe = { ...result, logs: truncateTextTail(logs2, RESULT_LOG_MAX_CHARS, "discovery result log") };
   if (Array.isArray(safe.collectedPages)) safe.collectedPages = safe.collectedPages.map(pruneCollectedPageForPost);
@@ -9864,8 +9873,8 @@ function toLiveBrowserMode(mode) {
 async function executeRun(run2, opts, headers, requestLiveBrowserHeartbeat = () => {
 }, onMobileHealPending = () => {
 }, assignedDeviceId, mobileLeaseError, signal) {
-  if (signal && (0, import_runner_core7.currentRunAbortSignal)() !== signal) {
-    return (0, import_runner_core7.runWithAbortScope)({ signal, runId: run2.runId }, () => executeRun(run2, opts, headers, requestLiveBrowserHeartbeat, onMobileHealPending, assignedDeviceId, mobileLeaseError, signal));
+  if (signal && (0, import_runner_core9.currentRunAbortSignal)() !== signal) {
+    return (0, import_runner_core9.runWithAbortScope)({ signal, runId: run2.runId }, () => executeRun(run2, opts, headers, requestLiveBrowserHeartbeat, onMobileHealPending, assignedDeviceId, mobileLeaseError, signal));
   }
   const runMode = run2.mode ?? "run";
   const RUNNER_MODE = opts.runnerMode ?? "playwright-native";
@@ -9923,7 +9932,7 @@ async function executeRun(run2, opts, headers, requestLiveBrowserHeartbeat = ()
     ...nativeOptions,
     liveBrowserHandle,
     onLiveBrowserSnapshot: requestLiveBrowserHeartbeat,
-    signal: (0, import_runner_core7.linkRunAbort)(nativeOptions.signal) ?? signal
+    signal: (0, import_runner_core9.linkRunAbort)(nativeOptions.signal) ?? signal
   });
   const callbackContext = {
     runId: run2.runId,
@@ -9936,7 +9945,7 @@ async function executeRun(run2, opts, headers, requestLiveBrowserHeartbeat = ()
   };
   const startTime = Date.now();
   try {
-    (0, import_runner_core7.throwIfRunAborted)();
+    (0, import_runner_core9.throwIfRunAborted)();
     if (mobileLeaseError) {
       await postRunResult({
         status: "ERROR",
@@ -10052,7 +10061,7 @@ async function executeRun(run2, opts, headers, requestLiveBrowserHeartbeat = ()
           releaseAuthLock2
         );
         const duration2 = Date.now() - startTime;
-        (0, import_runner_core7.throwIfRunAborted)();
+        (0, import_runner_core9.throwIfRunAborted)();
         await postRunResult({
           status: result2.passed ? "PASSED" : "FAILED",
           apiCalls: result2.apiCalls,
@@ -10072,14 +10081,10 @@ async function executeRun(run2, opts, headers, requestLiveBrowserHeartbeat = ()
     if (runMode === "batch-heal") {
       const tests = run2.batchHealTests ?? [];
       log.info(`Heal engine: GROK BATCH (${tests.length} tests, healerModel=${run2.healerModel ?? "null"})`);
-      if (tests.length === 0) {
-        await postBatchHealResult(opts.serverUrl, headers, run2.runId, {
-          perTest: [],
-          systemicDiagnosis: "batch-heal dispatched with empty tests list",
-          logs: "no tests to heal",
-          durationMs: 0
-        });
-        log.warn("batch-heal: empty payload, posting no-op result");
+      const noStart = batchHealNoStart(tests, run2.baseUrl);
+      if (noStart) {
+        await postBatchHealResult(opts.serverUrl, headers, run2.runId, noStart.body);
+        log[noStart.level](noStart.logLine);
         return;
       }
       const healLogStream = createHealLogStreamer(opts.serverUrl, headers, run2.runId);
@@ -10101,10 +10106,10 @@ async function executeRun(run2, opts, headers, requestLiveBrowserHeartbeat = ()
           completionTokens: info.completionTokens,
           totalTokens: info.totalTokens,
           requestBody: { iteration: info.iteration, toolCalls: info.toolCalls, session: info.requestMessages?.[0] ?? null },
-          metadata: { phase: "heal", groupId: info.groupId, iteration: info.iteration, healMode: "batch", ...(0, import_runner_core7.cliAuditMetadata)(info) }
+          metadata: { phase: "heal", groupId: info.groupId, iteration: info.iteration, healMode: "batch", ...(0, import_runner_core9.cliAuditMetadata)(info) }
         });
       };
-      const batchResult = await (0, import_runner_core7.executeGrokPerBatchHeal)(tests, run2.baseUrl, {
+      const batchResult = await (0, import_runner_core9.executeGrokPerBatchHeal)(tests, run2.baseUrl, {
         onAICall: batchHealAudit,
         testVariables: run2.testVariables,
         runNativeTest: runNativeWithLiveBrowser,
@@ -10113,7 +10118,7 @@ async function executeRun(run2, opts, headers, requestLiveBrowserHeartbeat = ()
         saveRefreshedLogin: grokLogin?.saveRefreshed,
         engineSpec: run2.healerModel,
         // Returns HEAL_TIMEOUT: for the tests not reached instead of dying at the runner's batch-heal deadline.
-        deadlineAt: (0, import_runner_core6.batchHealDeadlineAt)(startTime),
+        deadlineAt: (0, import_runner_core7.batchHealDeadlineAt)(startTime),
         onLog: healLogStream.onLog,
         ...batchHealPartialHooks(opts.serverUrl, headers, run2.runId, run2.projectId || void 0)
       });
@@ -10123,7 +10128,7 @@ async function executeRun(run2, opts, headers, requestLiveBrowserHeartbeat = ()
       } catch (drainErr) {
         console.warn(`[batch-heal] audit flush failed: ${drainErr instanceof Error ? drainErr.message : String(drainErr)}`);
       }
-      (0, import_runner_core7.throwIfRunAborted)();
+      (0, import_runner_core9.throwIfRunAborted)();
       try {
         await postBatchHealResult(opts.serverUrl, headers, run2.runId, {
           perTest: batchResult.perTest,
@@ -10131,7 +10136,7 @@ async function executeRun(run2, opts, headers, requestLiveBrowserHeartbeat = ()
           logs: batchResult.logs,
           durationMs: batchResult.totalDurationMs
         });
-        log.ok((0, import_runner_core7.batchHealCompleteLine)(batchResult.perTest, tests.length, batchResult.totalDurationMs));
+        log.ok((0, import_runner_core9.batchHealCompleteLine)(batchResult.perTest, tests.length, batchResult.totalDurationMs));
       } catch (err) {
         log.fail(`Failed to post batch heal result: ${err instanceof Error ? err.message : String(err)}`);
       }
@@ -10164,6 +10169,8 @@ async function executeRun(run2, opts, headers, requestLiveBrowserHeartbeat = ()
         }, run2.runId) : void 0;
         const apiHealStorageStatePath = apiHealAuthPaths ? (0, import_local_auth_state.getValidLocalAuthState)(apiHealAuthPaths.cachePath) : void 0;
         if (apiHealStorageStatePath) log.info("API heal verification is using saved auth state");
+        const apiHealAuthSession = (0, import_runner_core8.sharedAuthSessionStamp)(apiHealStorageStatePath, false, sharedAuthInjectEnabled());
+        const apiHealAuthPlan = authPlanFor(run2.tags, run2.playwrightCode);
         const stickyAppBugs = /* @__PURE__ */ new Map();
         const lastChangeByTitle = /* @__PURE__ */ new Map();
         let currentError = run2.lastFailureError ?? "Test failed";
@@ -10278,12 +10285,28 @@ ${finalVerifyResult.logs ?? ""}`;
             continue;
           }
           if (result3.verdict === "app_bug") {
-            log.warn(`  APP BUG detected (legacy schema): ${result3.bugDescription}`);
             const duration4 = Date.now() - startTime;
+            const legacyCold = (0, import_runner_core8.apiHealColdSessionRelabel)("legacy", {
+              tags: run2.tags ?? [],
+              authStateExpected: apiHealAuthPlan.needsCookieState,
+              authStateInjected: !!apiHealStorageStatePath,
+              needsStandingHeaders: apiHealAuthPlan.needsStandingHeaders,
+              standingHeadersInjected: !!finalVerifyResult?.authDelivery?.standingHeadersInjected,
+              error: result3.bugDescription ?? null,
+              logs: finalVerifyResult?.logs ?? null,
+              apiCalls: null
+            });
+            if (legacyCold) {
+              log.warn(legacyCold.logLine);
+              await postRunResult({ status: legacyCold.status, error: legacyCold.error, duration: duration4, authSession: apiHealAuthSession });
+              return;
+            }
+            log.warn(`  APP BUG detected (legacy schema): ${result3.bugDescription}`);
             await postRunResult({
               status: "FAILED",
               error: `APP_BUG: ${result3.bugDescription}`,
-              duration: duration4
+              duration: duration4,
+              authSession: apiHealAuthSession
             });
             return;
           }
@@ -10353,7 +10376,7 @@ ${finalVerifyResult.logs ?? ""}`;
         let apiHealStatus = passed ? "PASSED" : "FAILED";
         let apiHealError = composedError;
         if (!passed) {
-          if (finalUnfixableReason?.startsWith(import_runner_core6.HEAL_AI_NO_ANSWER_ERROR_PREFIX)) {
+          if (finalUnfixableReason?.startsWith(import_runner_core7.HEAL_AI_NO_ANSWER_ERROR_PREFIX)) {
             apiHealStatus = "ERROR";
             apiHealError = finalUnfixableReason;
           } else if (isConfigLikeReason(classifyErrorMessage(composedError ?? null))) {
@@ -10390,6 +10413,23 @@ ${finalVerifyResult.logs ?? ""}`;
             }
           }
         }
+        if (apiHealStatus === "FAILED") {
+          const cold = (0, import_runner_core8.apiHealColdSessionRelabel)("verified", {
+            tags: run2.tags ?? [],
+            authStateExpected: apiHealAuthPlan.needsCookieState,
+            authStateInjected: !!apiHealStorageStatePath,
+            needsStandingHeaders: apiHealAuthPlan.needsStandingHeaders,
+            standingHeadersInjected: !!finalVerifyResult?.authDelivery?.standingHeadersInjected,
+            error: apiHealError ?? finalVerifyResult?.error,
+            logs: finalVerifyResult?.logs,
+            apiCalls: rawSteps.flatMap((s) => s.apiCalls ?? [])
+          });
+          if (cold) {
+            apiHealStatus = cold.status;
+            apiHealError = cold.error;
+            log.warn(`${cold.logLine} (was "${composedError?.slice(0, 60)}\u2026")`);
+          }
+        }
         await postHealOutcome({
           postRunResult: () => postRunResult({
             status: apiHealStatus,
@@ -10401,9 +10441,10 @@ ${finalVerifyResult.logs ?? ""}`;
             // Preserve healedCode on ALL heal outcomes - including app-bug-only -
             // so the file with test.fixme wraps gets committed and audited.
             healedCode: lastHealedCode,
-            duration: duration3
+            duration: duration3,
+            authSession: apiHealAuthSession
           }),
-          postHealResult: (healedCode, testCaseId) => postHealResult(opts.serverUrl, headers, run2.runId, healedCode, testCaseId),
+          postHealResult: (healedCode, testCaseId) => postHealResult(opts.serverUrl, headers, run2.runId, healedCode, testCaseId, void 0, void 0, run2.claimEpoch),
           passed,
           healedCode: lastHealedCode,
           testCaseId: run2.testCaseId,
@@ -10439,11 +10480,11 @@ ${finalVerifyResult.logs ?? ""}`;
           completionTokens: info.completionTokens,
           totalTokens: info.totalTokens,
           ...hasTurnDetails ? buildAuditTurnPayload(info, run2.testVariables) : { requestBody: { iteration: info.iteration, toolCalls: info.toolCalls } },
-          metadata: { groupId: info.groupId, iteration: info.iteration, testName: run2.testCaseId, ...(0, import_runner_core7.cliAuditMetadata)(info) }
+          metadata: { groupId: info.groupId, iteration: info.iteration, testName: run2.testCaseId, ...(0, import_runner_core9.cliAuditMetadata)(info) }
         });
       };
       const envOverride = (process.env.USE_GROK_PER_TEST_HEAL ?? "").trim().toLowerCase();
-      const useGrokHeal = envOverride === "true" ? true : envOverride === "false" ? false : (0, import_runner_core7.getAgenticEngine)(run2.healerModel) === "grok-build";
+      const useGrokHeal = envOverride === "true" ? true : envOverride === "false" ? false : (0, import_runner_core9.getAgenticEngine)(run2.healerModel) === "grok-build";
       const healOpts = {
         testName: run2.testName ?? run2.testCaseId ?? void 0,
         tags: run2.tags ?? [],
@@ -10466,19 +10507,19 @@ ${finalVerifyResult.logs ?? ""}`;
         // Whole-heal deadline: the runner's heal deadline minus a margin for the result
         // post (heal-deadline.ts). The healer stops both phases inside it and returns a
         // HEAL_TIMEOUT: result instead of dying as a reclaimed task.
-        deadlineAt: (0, import_runner_core6.healDeadlineAt)(startTime)
+        deadlineAt: (0, import_runner_core7.healDeadlineAt)(startTime)
       };
       if (useGrokHeal) {
         const source = envOverride === "true" ? "env USE_GROK_PER_TEST_HEAL=true" : `healerModel=${run2.healerModel ?? "null"}`;
         log.info(`Heal engine: GROK (${source})`);
       }
       const grokHealLogStream = useGrokHeal ? createHealLogStreamer(opts.serverUrl, headers, run2.runId) : null;
-      const httpFallback = run2.healerFallbackModel && (0, import_runner_core7.getAgenticEngine)(run2.healerFallbackModel) === "native" ? run2.healerFallbackModel : null;
+      const httpFallback = run2.healerFallbackModel && (0, import_runner_core9.getAgenticEngine)(run2.healerFallbackModel) === "native" ? run2.healerFallbackModel : null;
       let result2;
       if (useGrokHeal) {
         try {
           const grokLogin = await (0, import_fetch_cli_subscription.fetchCliSubscription)({ serverUrl: opts.serverUrl, runId: run2.runId, headers, cli: "grok-build", onLog: grokHealLogStream?.onLog });
-          result2 = await (0, import_runner_core7.executeGrokPerTestHeal)(run2.playwrightCode, run2.steps, run2.baseUrl, {
+          result2 = await (0, import_runner_core9.executeGrokPerTestHeal)(run2.playwrightCode, run2.steps, run2.baseUrl, {
             ...healOpts,
             subscriptionSecret: grokLogin?.value,
             saveRefreshedLogin: grokLogin?.saveRefreshed,
@@ -10523,9 +10564,9 @@ ${finalVerifyResult.logs ?? ""}`;
         console.warn(`[runner]${auditDrainError}`);
       }
       const isConfigIssue = !result2.passed && isConfigLikeReason(classifyErrorMessage(result2.error ?? null));
-      let healStatus = (0, import_runner_core6.healRunStatus)({ passed: result2.passed, error: result2.error, isConfigIssue });
+      let healStatus = (0, import_runner_core7.healRunStatus)({ passed: result2.passed, error: result2.error, isConfigIssue });
       let healError = result2.error;
-      if (!result2.passed && !isConfigIssue && !(0, import_runner_core6.isHealAiQuotaError)(result2.error)) {
+      if (!result2.passed && !isConfigIssue && !(0, import_runner_core7.isHealAiQuotaError)(result2.error)) {
         const rlDetection = (0, import_rate_limit_detector.detectRateLimitBlock)({
           testName: run2.testName ?? run2.testCaseId ?? void 0,
           tags: run2.tags ?? [],
@@ -10540,6 +10581,19 @@ ${finalVerifyResult.logs ?? ""}`;
           log.warn(`\u26A0 Heal rate-limit override \u2014 was ${result2.error?.slice(0, 60)}\u2026, now ERROR/RATE_LIMIT_BLOCKED`);
         }
       }
+      const loginRelabel = (0, import_runner_core8.uiHealLoginRelabel)({
+        status: healStatus,
+        testName: run2.testName ?? run2.testCaseId ?? void 0,
+        tags: run2.tags ?? [],
+        error: healError,
+        logs: result2.logs,
+        stepResults: result2.stepResults
+      });
+      if (loginRelabel) {
+        healStatus = loginRelabel.status;
+        healError = loginRelabel.error;
+        log.warn(loginRelabel.logLine);
+      }
       await postHealOutcome({
         postRunResult: () => postRunResult({
           status: healStatus,
@@ -10565,7 +10619,7 @@ ${finalVerifyResult.logs ?? ""}`;
       });
       if (result2.logs) {
         const phaseLines = result2.logs.split("\n").filter(
-          (l) => l.includes("Phase 1: Script-driven") || l.includes("Phase 2: Escalating") || l.includes("Phase 2: Script + MCP") || l.includes("Phase 1 succeeded") || l.includes("Phase 2 iteration") || l.includes("\u{1F916} Verdict:") || l.includes("\u{1F916} finish_fix:") || l.includes("native verification PASSED") || l.includes("native verification FAILED") || l.includes("Native run PASSED") || l.includes("Native run FAILED") || l.includes("APP_BUG") || l.includes("CONFIG_ISSUE") || l.includes("needs_browser") || l.includes("--- Attempt") || l.includes("Proven commands") || l.includes("Proven fix:") || l.includes("Same error repeated") || l.includes("aborting heal")
+          (l) => l.includes("Phase 1: Script-driven") || l.includes("Phase 2: Escalating") || l.includes("Phase 2: Script + MCP") || l.includes("Phase 1 succeeded") || l.includes("Phase 2 iteration") || l.includes("\u{1F916} Verdict:") || l.includes("\u{1F916} finish_fix:") || l.includes("Preflight:") || l.includes("native verification PASSED") || l.includes("native verification FAILED") || l.includes("Native run PASSED") || l.includes("Native run FAILED") || l.includes("APP_BUG") || l.includes("CONFIG_ISSUE") || l.includes("needs_browser") || l.includes("--- Attempt") || l.includes("Proven commands") || l.includes("Proven fix:") || l.includes("Same error repeated") || l.includes("aborting heal")
         );
         if (phaseLines.length > 0) {
           console.log(`${C2.gray}\u2500\u2500 Heal summary \u2500\u2500${C2.reset}`);
@@ -10578,7 +10632,7 @@ ${finalVerifyResult.logs ?? ""}`;
       );
       return;
     }
-    if (runMode === "regression-suite") {
+    if (runMode === "regression-suite" || runMode === "system-regression-suite") {
       if (!run2.repoOwner || !run2.repoName) {
         await postRunResult({ status: "ERROR", error: "No framework repo configured" });
         log.fail("ERROR - No framework repo configured");
@@ -10600,8 +10654,8 @@ ${finalVerifyResult.logs ?? ""}`;
         // A cancel, a newer claim or a shutdown kills the suite instead of letting it run on for up to 85 min.
         signal
       });
-      const overall = result2.error && result2.testResults.length === 0 ? "ERROR" : result2.passed ? "PASSED" : "FAILED";
-      (0, import_runner_core7.throwIfRunAborted)();
+      const overall = (0, import_regression_runner.regressionSuiteOverall)(result2);
+      (0, import_runner_core9.throwIfRunAborted)();
       await postRegressionResult(opts.serverUrl, headers, run2.runId, {
         overall,
         logs: result2.logs,
@@ -10631,9 +10685,9 @@ ${finalVerifyResult.logs ?? ""}`;
         `${opts.serverUrl}/api/runner/runs/${run2.runId}/ai-audit-batch`,
         headers
       );
-      const suiteQuotaFallback = (0, import_runner_core6.createQuotaFallbackState)(run2.quotaFallbackModel);
+      const suiteQuotaFallback = (0, import_runner_core7.createQuotaFallbackState)(run2.quotaFallbackModel);
       for (const failedTest of failedTests) {
-        (0, import_runner_core7.throwIfRunAborted)();
+        (0, import_runner_core9.throwIfRunAborted)();
         const testStart = Date.now();
         log.info(`  Healing: ${failedTest.name ?? failedTest.testCaseId}`);
         const isApiTest = Array.isArray(failedTest.tags) && failedTest.tags.includes("@api");
@@ -10701,12 +10755,12 @@ ${finalVerifyResult.logs ?? ""}`;
               completionTokens: info.completionTokens,
               totalTokens: info.totalTokens,
               ...hasTurnDetails ? buildAuditTurnPayload(info, run2.testVariables) : { requestBody: { iteration: info.iteration, toolCalls: info.toolCalls } },
-              metadata: { groupId: info.groupId, testCaseId: failedTest.testCaseId, ...(0, import_runner_core7.cliAuditMetadata)(info) }
+              metadata: { groupId: info.groupId, testCaseId: failedTest.testCaseId, ...(0, import_runner_core9.cliAuditMetadata)(info) }
             });
           };
           try {
             const envOverrideSuite = (process.env.USE_GROK_PER_TEST_HEAL ?? "").trim().toLowerCase();
-            const useGrokHealSuite = envOverrideSuite === "true" ? true : envOverrideSuite === "false" ? false : (0, import_runner_core7.getAgenticEngine)(run2.healerModel) === "grok-build";
+            const useGrokHealSuite = envOverrideSuite === "true" ? true : envOverrideSuite === "false" ? false : (0, import_runner_core9.getAgenticEngine)(run2.healerModel) === "grok-build";
             const suiteHealOpts = {
               testName: failedTest.name ?? failedTest.testCaseId,
               tags: failedTest.tags ?? [],
@@ -10714,6 +10768,10 @@ ${finalVerifyResult.logs ?? ""}`;
               healingContext: failedTest.healingContext ?? null,
               selectorRegistryContext: failedTest.selectorRegistryContext ?? null,
               lastFailureError: failedTest.error,
+              // A suite heal reports fixed / app-bug / config-issue / unfixable only (/live-suite-result has no
+              // entry for a test that passed unchanged), so the original re-run preflight stays off here: a
+              // TRANSIENT_PASS would otherwise be posted as "unfixable". Heal mode keeps the preflight.
+              originalRerun: false,
               testVariables: run2.testVariables,
               onAICall: healAudit,
               modelOverride: run2.healerModel,
@@ -10724,12 +10782,12 @@ ${finalVerifyResult.logs ?? ""}`;
               liveBrowserHandle,
               runNativeTest: runNativeWithLiveBrowser
             };
-            const suiteHttpFallback = run2.healerFallbackModel && (0, import_runner_core7.getAgenticEngine)(run2.healerFallbackModel) === "native" ? run2.healerFallbackModel : null;
+            const suiteHttpFallback = run2.healerFallbackModel && (0, import_runner_core9.getAgenticEngine)(run2.healerFallbackModel) === "native" ? run2.healerFallbackModel : null;
             let healResult;
             if (useGrokHealSuite) {
               try {
                 const grokLogin = await (0, import_fetch_cli_subscription.fetchCliSubscription)({ serverUrl: opts.serverUrl, runId: run2.runId, headers, cli: "grok-build", onLog: log.warn });
-                healResult = await (0, import_runner_core7.executeGrokPerTestHeal)(
+                healResult = await (0, import_runner_core9.executeGrokPerTestHeal)(
                   failedTest.playwrightCode,
                   failedTest.steps ?? [],
                   run2.baseUrl,
@@ -10769,8 +10827,8 @@ ${finalVerifyResult.logs ?? ""}`;
               });
               log.ok(`    Fixed: ${failedTest.name}`);
             } else {
-              const quotaStopped = (0, import_runner_core6.isHealAiQuotaError)(healResult.error);
-              const isAppBug = !quotaStopped && (0, import_runner_core6.isAppBugHealError)(healResult.error);
+              const quotaStopped = (0, import_runner_core7.isHealAiQuotaError)(healResult.error);
+              const isAppBug = !quotaStopped && (0, import_runner_core7.isAppBugHealError)(healResult.error);
               const isConfigIssue = isConfigLikeReason(classifyErrorMessage(healResult.error ?? null));
               const status = isAppBug ? "app-bug" : isConfigIssue ? "config-issue" : "unfixable";
               const diagnosisMsg = isAppBug ? "Application error detected" : isConfigIssue ? "Configuration issue detected" : quotaStopped && healResult.error ? healResult.error : "Could not heal after AI attempts";
@@ -10794,7 +10852,7 @@ ${finalVerifyResult.logs ?? ""}`;
             log.fail(`    Heal crashed: ${failedTest.name}`);
           }
         }
-        (0, import_runner_core7.throwIfRunAborted)();
+        (0, import_runner_core9.throwIfRunAborted)();
         const lastResult = results[results.length - 1];
         if (lastResult) {
           fetch(`${opts.serverUrl}/api/runner/runs/${run2.runId}/live-suite-progress`, {
@@ -10823,7 +10881,7 @@ ${finalVerifyResult.logs ?? ""}`;
         auditDrainWarning = drainErr instanceof Error ? drainErr.message : String(drainErr);
         console.warn(`[runner] ${auditDrainWarning}`);
       }
-      (0, import_runner_core7.throwIfRunAborted)();
+      (0, import_runner_core9.throwIfRunAborted)();
       const liveRes = await postLiveSuiteResult(opts.serverUrl, headers, run2.runId, {
         overall,
         duration: totalDuration,
@@ -10914,7 +10972,8 @@ ${finalVerifyResult.logs ?? ""}`;
             const res = await fetchRetrying429(`${opts.serverUrl}/api/runner/runs/${run2.runId}/locator-discovery-result`, () => ({
               method: "POST",
               headers: { ...headers, "Content-Type": "application/json" },
-              body: JSON.stringify({
+              // The epoch /claim returned: the server refuses a harvest whose run was re-claimed since (stale worker).
+              body: JSON.stringify(withClaimEpoch({
                 bundles: harvest.bundles,
                 // A divergence mark is durable (it blocks auto re-harvest and can
                 // flip the test to needs_manual_authoring), so an environmentally
@@ -10932,7 +10991,7 @@ ${finalVerifyResult.logs ?? ""}`;
                 reachedOrder: harvest.reachedOrder,
                 logs: harvest.logs,
                 ...harvest.environmentalError ? { environmentalError: harvest.environmentalError } : {}
-              }),
+              }, run2.claimEpoch)),
               signal: AbortSignal.timeout(3e4)
             }));
             if (res.ok) {
@@ -10997,7 +11056,7 @@ ${finalVerifyResult.logs ?? ""}`;
           }
           return await res.json();
         };
-        ctx.smsReserve = (0, import_runner_core7.createHttpSmsReserveTransport)({ serverUrl: opts.serverUrl, headers, runId: run2.runId });
+        ctx.smsReserve = (0, import_runner_core9.createHttpSmsReserveTransport)({ serverUrl: opts.serverUrl, headers, runId: run2.runId });
       }
       const canonicalBase = await (0, import_base_url_check.canonicalDiscoveryBaseUrl)(
         { runMode, baseUrl: ctx.baseUrl, native: ctx.medium === "IOS_NATIVE" || ctx.medium === "ANDROID_NATIVE" || run2.framework === "APPIUM" }
@@ -11059,7 +11118,7 @@ ${finalVerifyResult.logs ?? ""}`;
             ...info.exitReason ? { exitReason: info.exitReason } : {},
             // Engine cost, engine id, step, cache + reasoning tokens: same helper as the server's
             // Fargate path (execute-run.ts), so the two rows agree.
-            ...(0, import_runner_core7.cliAuditMetadata)(info),
+            ...(0, import_runner_core9.cliAuditMetadata)(info),
             ...ledgerAudit ? {
               ledger: ledgerAudit.entries,
               ledgerEntryCount: ledgerAudit.originalLength,
@@ -11143,7 +11202,8 @@ ${finalVerifyResult.logs ?? ""}`;
           headers: { ...headers, "Content-Type": "application/json" },
           // Framework-import runs span MANY features in one Session, so each test
           // carries its own suiteName; per-feature deep runs fall back to ctx.featureName.
-          body: JSON.stringify({ ...test, suiteName: test.suiteName ?? ctx.featureName, phase }),
+          // claimEpoch: the server fences each save to this claim (a re-claimed run refuses it with 409).
+          body: JSON.stringify(withClaimEpoch({ ...test, suiteName: test.suiteName ?? ctx.featureName, phase }, run2.claimEpoch)),
           signal: AbortSignal.timeout(3e4)
         });
         if (res.status === 402) throw new import_discovery.PlanLimitReached();
@@ -11300,7 +11360,8 @@ ${finalVerifyResult.logs ?? ""}`;
             healthObservations: rest.healthObservations
           },
           // Only send tests that were NOT confirmed streamed to avoid duplicates
-          tests: rest.tests.filter((t) => !streamedTestKeys.has(fingerprintTest(t)))
+          tests: rest.tests.filter((t) => !streamedTestKeys.has(fingerprintTest(t))),
+          ...discoveryRenderTypeFields({ appRenderType: ctx.appRenderType })
         }, logs2, { omitScreenshots: isNativeDiscovery });
       };
       const acquireLoginBrowser = async () => {
@@ -11602,7 +11663,7 @@ ${line}`)
             };
           } else if (ctx.frameworkImport?.kind === "app-map") {
             log.info("Building the app map.");
-            discoveryResult = await (0, import_runner_core7.runAppMapOnRunner)(ctx, { onLog: (line) => log.info(line) });
+            discoveryResult = await (0, import_runner_core9.runAppMapOnRunner)(ctx, { onLog: (line) => log.info(line) });
           } else if (ctx.frameworkImport?.kind === "repo-enrichment") {
             const frameworkImport = ctx.frameworkImport;
             const primaryCli = isRepositoryCli(frameworkImport.repoHuntCli) ? frameworkImport.repoHuntCli : "claude-code";
@@ -11627,7 +11688,7 @@ ${line}`)
               })
             });
           } else {
-            const runRepoImport = ctx.frameworkImport?.kind === "repo-analysis" ? import_runner_core7.runRepoAnalysisOnRunner : import_framework_import_runner.runFrameworkImportOnRunner;
+            const runRepoImport = ctx.frameworkImport?.kind === "repo-analysis" ? import_runner_core9.runRepoAnalysisOnRunner : import_framework_import_runner.runFrameworkImportOnRunner;
             discoveryResult = await runRepoImport(ctx, { onTestGenerated, acquireLoginBrowser, onAudit: discoveryAudit }, {
               archiveUrl: ctx.frameworkImport?.source === "upload" ? `${opts.serverUrl}/api/runner/runs/${run2.runId}/import-archive` : void 0,
               archiveAuthHeader: headers.Authorization,
@@ -11689,7 +11750,7 @@ ${line}`)
           }
           const resolveCliSubscription = (engine, logLine) => (0, import_fetch_cli_subscription.fetchCliSubscription)({ serverUrl: opts.serverUrl, runId: run2.runId, headers, cli: engine, onLog: logLine });
           const claimNonce = claimNonceFor(run2.runId);
-          savedSignIn = ["survey", "deep", "full"].includes(ctx.mode) && claimNonce && typeof run2.claimEpoch === "number" ? await (0, import_runner_core7.openSavedSignInSession)((0, import_runner_core7.createSavedSignInClient)({
+          savedSignIn = ["survey", "deep", "full"].includes(ctx.mode) && claimNonce && typeof run2.claimEpoch === "number" ? await (0, import_runner_core9.openSavedSignInSession)((0, import_runner_core9.createSavedSignInClient)({
             serverUrl: opts.serverUrl,
             runId: run2.runId,
             claimEpoch: run2.claimEpoch,
@@ -11709,7 +11770,7 @@ ${line}`)
           if (ctx.repoBrief) discoveryResult.repoBrief = ctx.repoBrief;
           if (ctx.repoRouteManifest) discoveryResult.repoRouteManifest = ctx.repoRouteManifest;
         }
-        discoveryResult = (0, import_runner_core7.redactDiscoveryCaptureNeedles)(discoveryResult, {
+        discoveryResult = (0, import_runner_core9.redactDiscoveryCaptureNeedles)(discoveryResult, {
           ...run2.testVariables,
           // The saved sign-in's values, with every one it rotated to during the run.
           ...savedSignIn?.loaded ? savedSignIn.secrets() : {}
@@ -11825,7 +11886,8 @@ ${line}`)
           cliLimit: (0, import_cli_limit.cliLimitFromError)(err),
           streamedTestCount: streamedTestKeys.size,
           streamedTestCaseIds: Array.from(streamedTestCaseIds),
-          exploreAlreadySaved: explorePosted
+          exploreAlreadySaved: explorePosted,
+          ...discoveryRenderTypeFields({ err })
         }, `Fatal error: ${msg}${drainMsg}`);
         await postShedOn413((body) => fetchRetrying429(`${opts.serverUrl}/api/runner/runs/${run2.runId}/discovery-result`, () => ({
           method: "POST",
@@ -11866,7 +11928,7 @@ ${line}`)
           completionTokens: info.completionTokens,
           totalTokens: info.totalTokens,
           ...hasTurnDetails ? buildAuditTurnPayload(info, run2.testVariables) : { requestBody: { iteration: info.iteration, toolCalls: info.toolCalls } },
-          metadata: { groupId: info.groupId, iteration: info.iteration, phase: "capture", featureName: ctx.featureName, ...(0, import_runner_core7.cliAuditMetadata)(info) }
+          metadata: { groupId: info.groupId, iteration: info.iteration, phase: "capture", featureName: ctx.featureName, ...(0, import_runner_core9.cliAuditMetadata)(info) }
         });
       };
       const logBuffer = [];
@@ -12041,7 +12103,7 @@ ${line}`)
                 verdict: "fix",
                 recovered: true,
                 priorStepsHash: run2.priorStepsHash
-              });
+              }, run2.claimEpoch);
               log.ok("\u{1FA7A} Reproduce PASSED \u2014 test recovered (flaky); promotion posted");
             } catch (patchErr) {
               log.warn(`Failed to post recovered heal result: ${patchErr instanceof Error ? patchErr.message : String(patchErr)}`);
@@ -12083,7 +12145,7 @@ ${line}`)
                 completionTokens: info.completionTokens,
                 totalTokens: info.totalTokens,
                 ...hasTurnDetails ? buildAuditTurnPayload(info, run2.testVariables) : { requestBody: { iteration: info.iteration, toolCalls: info.toolCalls } },
-                metadata: { groupId: info.groupId, iteration: info.iteration, testName: run2.testCaseId, platform: "mobile", ...(0, import_runner_core7.cliAuditMetadata)(info) }
+                metadata: { groupId: info.groupId, iteration: info.iteration, testName: run2.testCaseId, platform: "mobile", ...(0, import_runner_core9.cliAuditMetadata)(info) }
               });
             },
             runLiveHeal: async (a) => {
@@ -12278,7 +12340,7 @@ ${line}`)
                 extraTags: heal.extraTags,
                 removeTags: heal.removeTags,
                 priorStepsHash: run2.priorStepsHash
-              });
+              }, run2.claimEpoch);
               log.ok(`\u{1FA7A} Mobile heal patch posted for test ${run2.testCaseId ?? "(unknown)"} (verdict: ${heal.verdict})`);
             } catch (patchErr) {
               log.warn(`Failed to post mobile heal patch: ${patchErr instanceof Error ? patchErr.message : String(patchErr)}`);
@@ -12425,6 +12487,7 @@ ${result2.logs}`);
     if (storageStatePath) {
       log.info(`Using auth state for project ${projectId}`);
     }
+    const authSession = (0, import_runner_core8.sharedAuthSessionStamp)(storageStatePath, captureAuth, sharedAuthInjectEnabled());
     const runAuthPath = captureAuth ? authPaths?.capturePath : void 0;
     const result = await (async () => {
       try {
@@ -12483,49 +12546,25 @@ ${result2.logs}`);
       runStatus = "ERROR";
       log.warn(`\u26A0 CONFIG_ISSUE from native execution - posting ERROR (not FAILED) to skip heal/quarantine`);
     }
-    if (isAuthReadinessGuardEnabled()) {
-      if (runStatus === "FAILED") {
-        const ab = detectAuthBlock({
-          testName: run2.testName ?? run2.testCaseId ?? void 0,
-          tags: run2.tags ?? [],
-          error: runError,
-          logs: result.logs,
-          stepResults: result.stepResults
-        });
-        if (ab.detected) {
-          runStatus = "ERROR";
-          runError = `CONFIG_ISSUE: Login prerequisite failed (${ab.reason}) \u2014 authed tests can't run until credentials/verification are fixed. Evidence: ${ab.evidence.join("; ")}`;
-          log.warn(`\u26A0 Auth-block detected - posting ERROR/CONFIG_ISSUE (not FAILED) to skip heal + avoid login hammering`);
-        }
-      }
-      if (runStatus === "FAILED") {
-        const cold = detectApiColdSessionBlock({
-          tags: run2.tags ?? [],
-          authStateExpected,
-          authStateInjected: !!storageStatePath,
-          needsStandingHeaders: normalRunAuthPlan.needsStandingHeaders,
-          standingHeadersInjected: !!result.authDelivery?.standingHeadersInjected,
-          error: runError,
-          logs: result.logs,
-          stepResults: result.stepResults,
-          apiCalls: result.apiCalls
-        });
-        if (cold.detected) {
-          runStatus = "ERROR";
-          runError = coldSessionConfigMessage("Authenticated @api test ran", cold.reason, cold.evidence);
-          log.warn(`\u26A0 Cold @api session detected - posting ERROR/CONFIG_ISSUE (not FAILED) to skip heal + avoid a false app_bug`);
-        }
-      }
-      if (runStatus === "PASSED" && Array.isArray(run2.tags) && run2.tags.includes("@api")) {
-        const skipCoverage = detectSkippedApiCoverage(result.stepResults ?? []);
-        if (skipCoverage.detected) {
-          runStatus = "ERROR";
-          runError = skipCoverage.error;
-          log.warn(`\u26A0 ${skipCoverage.logLine}`);
-        }
-      }
+    const authRelabel = (0, import_runner_core8.authReadinessRelabel)({
+      status: runStatus,
+      error: runError,
+      testName: run2.testName ?? run2.testCaseId ?? void 0,
+      tags: run2.tags ?? [],
+      logs: result.logs,
+      stepResults: result.stepResults,
+      apiCalls: result.apiCalls,
+      authStateExpected,
+      authStateInjected: !!storageStatePath,
+      needsStandingHeaders: normalRunAuthPlan.needsStandingHeaders,
+      standingHeadersInjected: !!result.authDelivery?.standingHeadersInjected
+    });
+    if (authRelabel) {
+      runStatus = authRelabel.status;
+      runError = authRelabel.error;
+      log.warn(authRelabel.logLine);
     }
-    (0, import_runner_core7.throwIfRunAborted)();
+    (0, import_runner_core9.throwIfRunAborted)();
     await postRunResult({
       status: runStatus,
       stepResults: result.stepResults,
@@ -12542,7 +12581,8 @@ ${result2.logs}`);
       expectedFailure: result.passed ? result.expectedFailure === true : void 0,
       expectedFailureReason: result.passed && result.expectedFailure ? result.expectedFailureReason : void 0,
       unexpectedPass: result.passed ? void 0 : result.unexpectedPass === true,
-      bugTestBroken: result.passed ? void 0 : result.bugTestBroken === true
+      bugTestBroken: result.passed ? void 0 : result.bugTestBroken === true,
+      authSession
     });
     if (result.passed) {
       log.ok(`PASSED  (${duration}ms)${result.suspiciousPass ? ` \u26A0 suspicious-pass (viewport ${Math.round(result.suspiciousPass.emptyRatio * 100)}% blank)` : ""}`);
@@ -12558,14 +12598,14 @@ ${result2.logs}`);
     }
   } catch (err) {
     if (err instanceof RunNoLongerActiveError) throw err;
-    const abortOutcome = (0, import_runner_core7.runAbortOutcome)(err, signal);
+    const abortOutcome = (0, import_runner_core9.runAbortOutcome)(err, signal);
     if (abortOutcome === "discard") {
-      throw new RunNoLongerActiveError((0, import_runner_core7.isSupersededRunAbort)(signal) ? `Run ${run2.runId} was superseded by a newer claim` : `Run ${run2.runId} was cancelled on the server`);
+      throw new RunNoLongerActiveError((0, import_runner_core9.isSupersededRunAbort)(signal) ? `Run ${run2.runId} was superseded by a newer claim` : `Run ${run2.runId} was cancelled on the server`);
     }
     if (abortOutcome === "interrupt") {
       await postRunResult({
         status: "ERROR",
-        error: import_runner_core7.RUNNER_SHUTDOWN_INTERRUPT_ERROR,
+        error: import_runner_core9.RUNNER_SHUTDOWN_INTERRUPT_ERROR,
         duration: Date.now() - startTime
       });
       throw err;
@@ -13042,7 +13082,7 @@ async function startRunner(opts) {
       }
     });
   };
-  const removeSupersededRunFetchFence = (0, import_runner_core7.installSupersededRunFetchFence)(serverUrl);
+  const removeSupersededRunFetchFence = (0, import_runner_core9.installSupersededRunFetchFence)(serverUrl);
   const heartbeat = setInterval(sendHeartbeat, 3e4);
   sendHeartbeat();
   let shuttingDown = false;
@@ -13054,7 +13094,7 @@ async function startRunner(opts) {
         headers: { ...headers, "Content-Type": "application/json" },
         body: JSON.stringify(withClaimEpoch({
           status: "ERROR",
-          error: import_runner_core7.RUNNER_SHUTDOWN_INTERRUPT_ERROR
+          error: import_runner_core9.RUNNER_SHUTDOWN_INTERRUPT_ERROR
         }, claimEpoch)),
         signal: AbortSignal.timeout(5e3)
       }));
@@ -13070,7 +13110,7 @@ async function startRunner(opts) {
     setTimeout(() => {
       console.error("Shutdown grace elapsed \u2014 forcing exit");
       process.exit(0);
-    }, (0, import_runner_core7.shutdownForceExitMs)(SHUTDOWN_FINISH_MS, SHUTDOWN_GRACE_MS)).unref();
+    }, (0, import_runner_core9.shutdownForceExitMs)(SHUTDOWN_FINISH_MS, SHUTDOWN_GRACE_MS)).unref();
     clearInterval(heartbeat);
     heartbeatKeepalive.stop();
     if (liveBrowserHeartbeatTimer) {
@@ -13088,7 +13128,7 @@ async function startRunner(opts) {
     if (claimPending) {
       await Promise.race([claimPending, new Promise((resolve3) => setTimeout(resolve3, SHUTDOWN_FINISH_MS))]);
     }
-    await (0, import_runner_core7.drainAbortedRuns)({
+    await (0, import_runner_core9.drainAbortedRuns)({
       finishMs: SHUTDOWN_FINISH_MS,
       graceMs: SHUTDOWN_GRACE_MS,
       inFlight: activeWebRuns,
@@ -13105,7 +13145,7 @@ async function startRunner(opts) {
       await stopAppiumServer();
     }
     await browserPool.shutdown();
-    await (0, import_runner_core8.closeLocalGoogleBroker)().catch(() => {
+    await (0, import_runner_core10.closeLocalGoogleBroker)().catch(() => {
     });
     removeSupersededRunFetchFence();
     log.info("Runner stopped.");
@@ -13167,7 +13207,7 @@ async function startRunner(opts) {
   const abortSupersededRun = (runId, status, serverEpoch) => {
     const controller = activeWebRuns.get(runId);
     const already = !controller || controller.signal.aborted;
-    if (controller) (0, import_runner_core7.abortRun)(controller, "superseded", runId);
+    if (controller) (0, import_runner_core9.abortRun)(controller, "superseded", runId);
     activeMobileRuns.get(runId)?.triggerAbort(`was superseded by a newer claim (epoch ${serverEpoch ?? "?"}, status ${status})`);
     if (!already) {
       log.warn(`Run ${runId} was superseded by a newer claim (server epoch ${serverEpoch ?? "?"}, ours ${claimedRunEpochs.get(runId) ?? "?"}) \u2014 stopping it; this runner posts nothing more for it.`);
@@ -13183,7 +13223,7 @@ async function startRunner(opts) {
     (runId, status) => {
       const controller = activeWebRuns.get(runId);
       const already = !controller || controller.signal.aborted;
-      if (controller) (0, import_runner_core7.abortRun)(controller, "cancelled", runId);
+      if (controller) (0, import_runner_core9.abortRun)(controller, "cancelled", runId);
       activeMobileRuns.get(runId)?.triggerAbort(`was cancelled server-side (status ${status})`);
       if (!already) log.warn(`Run ${runId} was cancelled server-side (status ${status}) \u2014 stopping it.`);
     }
@@ -13437,9 +13477,9 @@ async function startRunner(opts) {
               runWatchdog.start();
             }
             activeWebRuns.set(run2.runId, runAbort);
-            const runWritePolicy = (0, import_runner_core7.parseRunWritePolicy)(run2.runWritePolicy);
-            const runSignInSecrets = runWritePolicy ? (0, import_runner_core7.signInSecretsOf)({ ...run2.discoveryContext?.variableContext?.allTestVariables ?? {}, ...run2.testVariables ?? {} }) : [];
-            (0, import_runner_core7.withRunWritePolicyScope)(runWritePolicy, () => (0, import_runner_core8.withLocalGoogleScope)({ baseUrl: run2.baseUrl, runId: run2.runId }, () => executeRun(run2, opts, headers, requestLiveBrowserHeartbeat, (testCaseId) => {
+            const runWritePolicy = (0, import_runner_core9.parseRunWritePolicy)(run2.runWritePolicy);
+            const runSignInSecrets = runWritePolicy ? (0, import_runner_core9.signInSecretsOf)({ ...run2.discoveryContext?.variableContext?.allTestVariables ?? {}, ...run2.testVariables ?? {} }) : [];
+            (0, import_runner_core9.withRunWritePolicyScope)(runWritePolicy, () => (0, import_runner_core10.withLocalGoogleScope)({ baseUrl: run2.baseUrl, runId: run2.runId }, () => executeRun(run2, opts, headers, requestLiveBrowserHeartbeat, (testCaseId) => {
               if (mobilePlatform) {
                 mobileHealHold.set(testCaseId, { expiry: Date.now() + MOBILE_HEAL_HOLD_MS, platform: mobilePlatform });
               }
@@ -13447,11 +13487,11 @@ async function startRunner(opts) {
               runsCompleted++;
             }).catch((err) => {
               const abortReason = runAbort.signal.reason;
-              if ((0, import_runner_core7.isRunAbortError)(abortReason) && abortReason.reason === "shutdown") {
+              if ((0, import_runner_core9.isRunAbortError)(abortReason) && abortReason.reason === "shutdown") {
                 log.info(`Run ${run2.runId} was interrupted by runner shutdown.`);
                 return;
               }
-              if ((0, import_runner_core7.isSupersededRunAbort)(runAbort.signal)) {
+              if ((0, import_runner_core9.isSupersededRunAbort)(runAbort.signal)) {
                 log.info(`Run ${run2.runId} was superseded by a newer claim; this runner posted nothing more for it.`);
                 return;
               }
@@ -13489,7 +13529,7 @@ async function startRunner(opts) {
         const action = authRefusalAction({
           consecutive: consecutiveAuthRefusals,
           activeRuns,
-          cloud: process.env.RUNNER_CLOUD === "true"
+          cloud: IS_CLOUD
         });
         if (action === "exit") {
           log.fail(`${message} (the server refused it ${consecutiveAuthRefusals} times in a row)`);
@@ -13545,14 +13585,15 @@ async function checkRunnerLogin(serverUrl, token, fetchImpl = fetch) {
 
 // src/services/sign-in-capture.ts
 var import_browser_config3 = __toESM(require_browser_config());
+var import_google_local_signin = __toESM(require_google_local_signin());
 import { chromium } from "playwright";
 async function captureSignInInteractively(url, ready, opts = {}) {
   const target = new URL(url);
   let browser;
   try {
-    browser = await chromium.launch({ headless: false, ignoreDefaultArgs: ["--enable-automation"], channel: "chrome", env: (0, import_browser_config3.browserLaunchEnv)() });
+    browser = await chromium.launch({ headless: false, ignoreDefaultArgs: ["--enable-automation"], args: [...import_google_local_signin.SIGN_IN_WINDOW_ARGS], channel: "chrome", env: (0, import_browser_config3.browserLaunchEnv)() });
   } catch {
-    browser = await chromium.launch({ headless: false, ignoreDefaultArgs: ["--enable-automation"], env: (0, import_browser_config3.browserLaunchEnv)() });
+    browser = await chromium.launch({ headless: false, ignoreDefaultArgs: ["--enable-automation"], args: [...import_google_local_signin.SIGN_IN_WINDOW_ARGS], env: (0, import_browser_config3.browserLaunchEnv)() });
   }
   return captureFromBrowser(browser, target, ready, opts.timeoutMs ?? SIGN_IN_TIMEOUT_MS);
 }
@@ -13918,7 +13959,7 @@ program.command("start").description("Start the local test runner").option("--to
     console.warn("\u26A0  --tunnel has no effect without --mobile (the mobile bridge it exposes only starts with --mobile). Ignoring --tunnel.");
   }
   {
-    const { hasLocalGoogleLogin, GOOGLE_LOGIN_COMMAND } = await import("./dist-DFNLMH6L.mjs");
+    const { hasLocalGoogleLogin, GOOGLE_LOGIN_COMMAND } = await import("./dist-VTPBY2C4.mjs");
     if (process.stdout.isTTY && !await hasLocalGoogleLogin()) {
       console.log(`Tip: for apps with "Continue with Google", sign in to Google once on this machine: ${GOOGLE_LOGIN_COMMAND}`);
     }
@@ -13948,7 +13989,7 @@ async function askLine(question) {
   }
 }
 program.command("google-login").description('Sign in to a TEST Google account once on this machine, for tests of apps with "Continue with Google"').option("--site <url...>", "The app address(es) this sign-in may be used for, e.g. https://app.example.com").option("--allow-file-storage", "Keep the sign-in in a plain file (only you can read it) when the system keychain is not available").option("--yes", "Confirm without asking that this is a dedicated test Google account").action(async (opts) => {
-  const { signInLocalGoogle, LOCAL_GOOGLE_WARNING, grantedSite, defaultStoreKind } = await import("./dist-DFNLMH6L.mjs");
+  const { signInLocalGoogle, LOCAL_GOOGLE_WARNING, grantedSite, defaultStoreKind } = await import("./dist-VTPBY2C4.mjs");
   console.log(LOCAL_GOOGLE_WARNING);
   if (!opts.yes) {
     const answer = await askLine('Is this a dedicated test Google account? Type "yes" to continue: ');
@@ -13983,7 +14024,7 @@ program.command("google-login").description('Sign in to a TEST Google account on
   }
 });
 program.command("google-allow-site <url>").description("Let the Google sign-in on this machine be used for one more app address").action(async (url) => {
-  const { allowLocalGoogleSites, grantedSite } = await import("./dist-DFNLMH6L.mjs");
+  const { allowLocalGoogleSites, grantedSite } = await import("./dist-VTPBY2C4.mjs");
   const site = grantedSite(url);
   if (!site) {
     console.error("\u2717  Not a web address: give it like https://app.example.com");
@@ -13997,7 +14038,7 @@ program.command("google-allow-site <url>").description("Let the Google sign-in o
   console.log(`\u2713  Tests on this machine may now use the Google sign-in for: ${sites.join(", ")}`);
 });
 program.command("google-logout").description("Forget the Google sign-in saved on this machine").action(async () => {
-  const { deleteLocalGoogleLogin } = await import("./dist-DFNLMH6L.mjs");
+  const { deleteLocalGoogleLogin } = await import("./dist-VTPBY2C4.mjs");
   await deleteLocalGoogleLogin();
   console.log("\u2713  Google sign-in removed from this machine");
 });