@validate.qa/runner 1.0.100 → 1.0.102

package/dist/cli.mjs

@@ -1,5 +1,7 @@
 #!/usr/bin/env node
 import {
+  init_public_address,
+  public_address_exports,
   require_ai_queue,
   require_api_auth_headers,
   require_api_call_redaction,
@@ -12,6 +14,7 @@ import {
   require_failure_triage,
   require_fetch_cli_subscription,
   require_framework_import_runner,
+  require_google_local_signin,
   require_grok_repo_enrichment_runner,
   require_inbox_stamp,
   require_live_browser_registry,
@@ -30,21 +33,23 @@ import {
   require_resource_governor,
   require_result_api_call_bodies,
   require_result_shed
-} from "./chunk-5P4ANVDY.mjs";
+} from "./chunk-DN3O6EYT.mjs";
 import {
   require_tar_isolated
 } from "./chunk-AAUHXGDS.mjs";
 import "./chunk-EXRFHATN.mjs";
 import {
-  require_browser_config
-} from "./chunk-6NIT2CCH.mjs";
-import "./chunk-II7QW7MZ.mjs";
-import "./chunk-MHFP3QXU.mjs";
-import "./chunk-MAO6ADAO.mjs";
-import "./chunk-HMUC3DKS.mjs";
-import "./chunk-WDXLAZ2J.mjs";
-import "./chunk-2XD63NU5.mjs";
-import "./chunk-GIIIVO2W.mjs";
+  require_browser_config,
+  require_cloud_runner
+} from "./chunk-ZZYBRIBT.mjs";
+import "./chunk-BXLEPT4M.mjs";
+import "./chunk-5DFBEL72.mjs";
+import "./chunk-CBVHPYVJ.mjs";
+import "./chunk-HJ6FKHMM.mjs";
+import "./chunk-PWFWMVZU.mjs";
+import "./chunk-E2VEMBQQ.mjs";
+import "./chunk-4WLP3RWN.mjs";
+import "./chunk-E2RRAE27.mjs";
 import {
   LIVE_FRAME_IDLE_PUSH_INTERVAL_MS,
   MOBILE_COLD_BOOT_SETTLE_MS,
@@ -57,17 +62,12 @@ import {
   buildAppiumCode,
   clampMobileSwipeDistance,
   classifyErrorMessage,
-  coldSessionConfigMessage,
   computeMobileSwipePointers,
   decideHarPosted,
   deriveAuthPlan,
-  detectApiColdSessionBlock,
-  detectAuthBlock,
-  detectSkippedApiCoverage,
   hasPlatformLocator,
   init_dist,
   isAppOriginResolutionEnabled,
-  isAuthReadinessGuardEnabled,
   isConfigLikeReason,
   isEditableMobileClassName,
   isRepositoryCli,
@@ -84,18 +84,175 @@ import {
   stepAppliesToPlatform,
   stepsMissingPlatformLocators,
   stepsNeedingReviewForPlatform
-} from "./chunk-MBKGTELT.mjs";
+} from "./chunk-3JM6XTSZ.mjs";
 import {
   __commonJS,
+  __require,
+  __toCommonJS,
   __toESM
 } from "./chunk-WQXBGQU4.mjs";
 
+// ../runner-core/dist/utils/playwright-signal-handlers.js
+var require_playwright_signal_handlers = __commonJS({
+  "../runner-core/dist/utils/playwright-signal-handlers.js"(exports) {
+    "use strict";
+    Object.defineProperty(exports, "__esModule", { value: true });
+    exports.patchBrowserTypeSignalDefaults = patchBrowserTypeSignalDefaults;
+    exports.disablePlaywrightSignalHandlers = disablePlaywrightSignalHandlers2;
+    var playwright_1 = __require("playwright");
+    var PATCHED = /* @__PURE__ */ Symbol.for("validateqa.playwrightSignalDefaults");
+    var LAUNCH_METHODS = { launch: 0, launchPersistentContext: 1 };
+    function patchBrowserTypeSignalDefaults(browserType) {
+      const target = browserType;
+      if (target[PATCHED])
+        return;
+      for (const [method, optionsIndex] of Object.entries(LAUNCH_METHODS)) {
+        const original = target[method];
+        if (typeof original !== "function")
+          continue;
+        target[method] = function(...args) {
+          const given = args[optionsIndex];
+          args[optionsIndex] = { handleSIGINT: false, handleSIGTERM: false, ...given && typeof given === "object" ? given : {} };
+          return original.apply(this, args);
+        };
+      }
+      target[PATCHED] = true;
+    }
+    function disablePlaywrightSignalHandlers2() {
+      patchBrowserTypeSignalDefaults(Object.getPrototypeOf(playwright_1.chromium));
+    }
+  }
+});
+
+// ../runner-core/dist/utils/tls-cert-probe.js
+var require_tls_cert_probe = __commonJS({
+  "../runner-core/dist/utils/tls-cert-probe.js"(exports) {
+    "use strict";
+    var __importDefault = exports && exports.__importDefault || function(mod) {
+      return mod && mod.__esModule ? mod : { "default": mod };
+    };
+    Object.defineProperty(exports, "__esModule", { value: true });
+    exports.RUN_NOTE_WAIT_MS = void 0;
+    exports.probeTargetCertificate = probeTargetCertificate;
+    exports.tlsCertFindingLine = tlsCertFindingLine;
+    exports.targetCertificateNote = targetCertificateNote2;
+    exports.noteWithinCap = noteWithinCap2;
+    exports.withRunNote = withRunNote2;
+    var node_dns_1 = __require("dns");
+    var node_net_1 = __importDefault(__require("net"));
+    var node_tls_1 = __importDefault(__require("tls"));
+    var public_address_1 = (init_public_address(), __toCommonJS(public_address_exports));
+    var cloud_runner_js_1 = require_cloud_runner();
+    var PROBE_TIMEOUT_MS = 5e3;
+    var CERT_ERROR_CODES = /* @__PURE__ */ new Set([
+      "CERT_HAS_EXPIRED",
+      "CERT_NOT_YET_VALID",
+      "CERT_REVOKED",
+      "CERT_REJECTED",
+      "CERT_UNTRUSTED",
+      "CERT_SIGNATURE_FAILURE",
+      "CERT_CHAIN_TOO_LONG",
+      "DEPTH_ZERO_SELF_SIGNED_CERT",
+      "SELF_SIGNED_CERT_IN_CHAIN",
+      "UNABLE_TO_VERIFY_LEAF_SIGNATURE",
+      "UNABLE_TO_GET_ISSUER_CERT",
+      "UNABLE_TO_GET_ISSUER_CERT_LOCALLY",
+      "UNABLE_TO_DECRYPT_CERT_SIGNATURE",
+      "UNABLE_TO_DECODE_ISSUER_PUBLIC_KEY",
+      "ERROR_IN_CERT_NOT_BEFORE_FIELD",
+      "ERROR_IN_CERT_NOT_AFTER_FIELD",
+      "INVALID_CA",
+      "INVALID_PURPOSE",
+      "PATH_LENGTH_EXCEEDED",
+      "HOSTNAME_MISMATCH",
+      "ERR_TLS_CERT_ALTNAME_INVALID"
+    ]);
+    async function probeTargetCertificate(baseUrl, opts = {}) {
+      let url;
+      try {
+        url = new URL(baseUrl);
+      } catch {
+        return null;
+      }
+      if (url.protocol !== "https:" || !url.hostname)
+        return null;
+      const hostname = url.hostname.replace(/^\[|\]$/g, "");
+      const port = url.port ? Number(url.port) : 443;
+      const shared = opts.shared ?? (0, cloud_runner_js_1.isSharedCloudRunner)();
+      const ipLiteral = node_net_1.default.isIP(hostname) !== 0;
+      if (shared && ipLiteral && (0, public_address_1.isPrivateOrLocalIpAddress)(hostname))
+        return null;
+      return new Promise((resolve3) => {
+        let settled = false;
+        let socket = null;
+        const finish = (finding) => {
+          if (settled)
+            return;
+          settled = true;
+          clearTimeout(timer);
+          socket?.destroy();
+          resolve3(finding);
+        };
+        const timer = setTimeout(() => finish(null), opts.timeoutMs ?? PROBE_TIMEOUT_MS);
+        try {
+          socket = node_tls_1.default.connect({
+            host: hostname,
+            port,
+            ...ipLiteral ? {} : { servername: hostname },
+            rejectUnauthorized: true,
+            ...opts.ca ? { ca: opts.ca } : {},
+            ...shared ? { lookup: (0, public_address_1.createPublicOnlyLookup)((name, o, cb) => (0, node_dns_1.lookup)(name, o, cb)) } : {},
+            ALPNProtocols: ["http/1.1"]
+          });
+        } catch {
+          finish(null);
+          return;
+        }
+        socket.once("secureConnect", () => finish(null));
+        socket.once("error", (err) => {
+          const code = typeof err.code === "string" ? err.code : "";
+          finish(CERT_ERROR_CODES.has(code) ? { host: url.host, code, detail: err.message.replace(/\s+/g, " ").trim().slice(0, 300) } : null);
+        });
+      });
+    }
+    function tlsCertFindingLine(finding) {
+      return `\u26A0\uFE0F TLS certificate: ${finding.host} presented a certificate that strict TLS rejects (${finding.code}: ${finding.detail}). The run went ahead because test browsers ignore HTTPS errors, so this is not a failure. A visitor's browser may show a certificate warning: this check does not fetch a missing intermediate certificate and does not use the operating system's trust store (a private CA the visitor's machine trusts), so a browser can accept a certificate it rejects.`;
+    }
+    async function targetCertificateNote2(baseUrl, opts = {}) {
+      try {
+        const finding = await probeTargetCertificate(baseUrl, opts);
+        return finding ? tlsCertFindingLine(finding) : null;
+      } catch {
+        return null;
+      }
+    }
+    exports.RUN_NOTE_WAIT_MS = 250;
+    async function noteWithinCap2(note, capMs = exports.RUN_NOTE_WAIT_MS) {
+      let timer;
+      const cap = new Promise((resolve3) => {
+        timer = setTimeout(() => resolve3(null), capMs);
+      });
+      try {
+        return await Promise.race([note.catch(() => null), cap]);
+      } finally {
+        clearTimeout(timer);
+      }
+    }
+    function withRunNote2(result, note) {
+      if (!note)
+        return result;
+      return { ...result, logs: result.logs ? `${note}
+${result.logs}` : note };
+    }
+  }
+});
+
 // package.json
 var require_package = __commonJS({
   "package.json"(exports, module) {
     module.exports = {
       name: "@validate.qa/runner",
-      version: "1.0.100",
+      version: "1.0.102",
       description: "validate local test runner - execute Playwright tests on your machine, connected to validate.qa cloud.",
       bin: {
         "validate-runner": "dist/cli.js"
@@ -103,8 +260,9 @@ var require_package = __commonJS({
       scripts: {
         build: "tsup",
         dev: "tsx src/cli.ts",
-        test: "node --import tsx --test src/supervisor-child-argv.test.ts src/audit-scrub.test.ts src/retry-on-429.test.ts src/version-check.test.ts src/poll-interval.test.ts src/node-version-notice.test.ts src/services/auth-state.test.ts src/run-no-longer-active.test.ts src/mode-abort-no-verdict.test.ts src/heartbeat-active-runs.test.ts src/result-post-structure-413.test.ts src/result-shed-routes-413.test.ts src/result-post-retry.test.ts src/result-media-stale-epoch.test.ts src/run-write-guard-bundle.test.ts src/spec-driver-bundle.test.ts src/mcp-servers-bundle.test.ts src/codex-files-mcp-server-bundle.test.ts src/claim-nonce-not-logged.test.ts src/sign-in-capture.test.ts src/run-status-verdicts.test.ts src/sign-in-failure.test.ts src/mobile-ui-path-succeeded.test.ts src/supervisor-policy.test.ts src/login-check.test.ts src/heal-post-lost-ack.test.ts src/heal-log-stream-chunks.test.ts src/shutdown-claim-window.test.ts",
-        "test:mobile": "node --import tsx --test --test-concurrency=2 src/runner.mobile-ai-env.test.ts src/mobile-device-queue.test.ts src/device-lease.test.ts src/runner-watchdog.test.ts src/result-payload-budget.test.ts src/result-media-upload.test.ts src/services/appium-*.test.ts src/services/*mobile*.test.ts src/services/mobile/*.test.ts",
+        lint: "eslint .",
+        test: "node --import tsx --test src/supervisor-child-argv.test.ts src/audit-scrub.test.ts src/retry-on-429.test.ts src/version-check.test.ts src/poll-interval.test.ts src/node-version-notice.test.ts src/services/auth-state.test.ts src/run-no-longer-active.test.ts src/mode-abort-no-verdict.test.ts src/discovery-render-type.test.ts src/batch-heal-no-start.test.ts src/heartbeat-active-runs.test.ts src/result-post-structure-413.test.ts src/result-shed-routes-413.test.ts src/result-post-retry.test.ts src/result-media-stale-epoch.test.ts src/run-write-guard-bundle.test.ts src/spec-driver-bundle.test.ts src/mcp-servers-bundle.test.ts src/codex-files-mcp-server-bundle.test.ts src/claim-nonce-not-logged.test.ts src/sign-in-capture.test.ts src/run-status-verdicts.test.ts src/sign-in-failure.test.ts src/mobile-ui-path-succeeded.test.ts src/supervisor-policy.test.ts src/login-check.test.ts src/heal-post-lost-ack.test.ts src/ui-heal-result-video.test.ts src/heal-log-stream-chunks.test.ts src/shutdown-claim-window.test.ts src/result-post-redeploy-budget.test.ts src/shutdown-signals.test.ts",
+        "test:mobile": "node --import tsx --test --test-concurrency=2 src/runner.mobile-ai-env.test.ts src/runner.mobile-heal-audit-wiring.test.ts src/mobile-device-queue.test.ts src/device-lease.test.ts src/runner-watchdog.test.ts src/result-payload-budget.test.ts src/result-media-upload.test.ts src/services/appium-*.test.ts src/services/*mobile*.test.ts src/services/mobile/*.test.ts",
         "smoke:installed": "node scripts/installed-run-smoke.mjs",
         "check:packed-mcp": "node scripts/packed-install-check.mjs",
         prepublishOnly: "npm run build"
@@ -315,17 +473,19 @@ var import_playwright_native = __toESM(require_playwright_native());
 var import_runner_core = __toESM(require_dist());
 
 // src/runner.ts
-var import_runner_core6 = __toESM(require_dist());
 var import_runner_core7 = __toESM(require_dist());
+var import_runner_core8 = __toESM(require_dist());
+var import_runner_core9 = __toESM(require_dist());
 var import_framework_import_runner = __toESM(require_framework_import_runner());
 var import_grok_repo_enrichment_runner = __toESM(require_grok_repo_enrichment_runner());
 var import_repo_brief_execution = __toESM(require_repo_brief_execution());
 var import_repo_read_log = __toESM(require_repo_read_log());
 var import_cli_session_failure = __toESM(require_cli_session_failure());
+var import_playwright_signal_handlers = __toESM(require_playwright_signal_handlers());
 var import_cli_limit = __toESM(require_cli_limit());
 var import_fetch_cli_subscription = __toESM(require_fetch_cli_subscription());
 var import_codex_cli = __toESM(require_codex_cli());
-var import_runner_core8 = __toESM(require_dist());
+var import_runner_core10 = __toESM(require_dist());
 
 // src/services/regression-runner.ts
 var import_regression_runner = __toESM(require_regression_runner());
@@ -383,6 +543,7 @@ var EXIT_TERMINAL = 64;
 var SUPERVISOR_WINDOW_MS = 36e5;
 var SUPERVISOR_HEALTHY_MS = 10 * 6e4;
 function nextSupervisorAction(input, state2, limits) {
+  if (input.signalled) return { action: "stop", exitCode: 0, reason: "clean" };
   if (input.code === 0) return { action: "stop", exitCode: 0, reason: "clean" };
   if (input.code === EXIT_TERMINAL) return { action: "stop", exitCode: EXIT_TERMINAL, reason: "terminal" };
   const restartTimes = [...state2.restartTimes.filter((t) => input.now - t < SUPERVISOR_WINDOW_MS), input.now];
@@ -534,6 +695,24 @@ function upgradeAction(activeRuns) {
   return activeRuns > 0 ? "drain" : "exit";
 }
 
+// src/shutdown-signals.ts
+var REPEAT_SIGNAL_WINDOW_MS = 1e3;
+function installShutdownSignals(target, onShutdown, opts) {
+  const now = opts.now ?? Date.now;
+  const windowMs = opts.repeatWindowMs ?? REPEAT_SIGNAL_WINDOW_MS;
+  let firstAt = null;
+  const handle = () => {
+    if (firstAt === null) {
+      firstAt = now();
+      onShutdown();
+      return;
+    }
+    if (now() - firstAt > windowMs) opts.forceExit();
+  };
+  target.on("SIGINT", handle);
+  target.on("SIGTERM", handle);
+}
+
 // src/runner.ts
 init_dist();
 
@@ -680,6 +859,9 @@ function computeMobileUiPathSucceeded(stepResults, authoredSteps) {
   return passedBefore > 0;
 }
 
+// src/post-heal-outcome.ts
+var import_runner_core5 = __toESM(require_dist());
+
 // src/run-no-longer-active.ts
 var RunNoLongerActiveError = class extends Error {
 };
@@ -691,39 +873,19 @@ function withClaimEpoch(body, claimEpoch) {
 }
 
 // src/post-heal-outcome.ts
-async function postHealOutcome(options) {
-  const { postRunResult, postHealResult: postHealResult2, passed, healedCode, testCaseId, log: log2 } = options;
-  const tryPostPatch = async () => {
-    if (passed && healedCode && testCaseId) {
-      try {
-        await postHealResult2(healedCode, testCaseId);
-        log2?.ok?.(`\u{1FA7A} Healed code auto-patched for test ${testCaseId}`);
-      } catch (patchErr) {
-        const patchMsg = patchErr instanceof Error ? patchErr.message : String(patchErr);
-        log2?.warn?.(`Failed to auto-patch healed code: ${patchMsg}`);
-      }
-    }
-  };
-  try {
-    await postRunResult();
-  } catch (err) {
-    if (err instanceof RunNoLongerActiveError) {
-      await tryPostPatch();
-    }
-    throw err;
-  }
-  await tryPostPatch();
+function postHealOutcome(options) {
+  return (0, import_runner_core5.postHealOutcome)({ ...options, isRunGone: (err) => err instanceof RunNoLongerActiveError });
 }
 
 // src/run-status-verdicts.ts
-var import_runner_core5 = __toESM(require_dist());
+var import_runner_core6 = __toESM(require_dist());
 function runStatusVerdicts(body, heldEpoch) {
   const rows = body?.runs;
   if (!Array.isArray(rows)) return [];
   const verdicts = [];
   for (const row of rows) {
     if (!row || typeof row.id !== "string" || typeof row.status !== "string") continue;
-    const reason = (0, import_runner_core5.runStatusAbortReason)(row, heldEpoch(row.id));
+    const reason = (0, import_runner_core6.runStatusAbortReason)(row, heldEpoch(row.id));
     if (!reason) continue;
     verdicts.push({
       runId: row.id,
@@ -1646,7 +1808,8 @@ async function clearField(sessionPath, bounds) {
   } catch (err) {
     if (isAppiumDriverDeadError(err)) throw err;
     throw new Error(
-      `No focused element available for CLEAR. Tap an input field first.${err instanceof Error ? ` (${err.message})` : ""}`
+      `No focused element available for CLEAR. Tap an input field first.${err instanceof Error ? ` (${err.message})` : ""}`,
+      { cause: err }
     );
   }
 }
@@ -3876,7 +4039,7 @@ async function getWindowSize2(sessionId, retries = 3) {
     } catch (err) {
       if (attempt === retries - 1) {
         if (isTransportError(err)) throw err;
-        throw new Error(`Failed to get window size after ${retries} attempts: ${err instanceof Error ? err.message : String(err)}`);
+        throw new Error(`Failed to get window size after ${retries} attempts: ${err instanceof Error ? err.message : String(err)}`, { cause: err });
       }
       await new Promise((resolve3) => setTimeout(resolve3, Math.pow(2, attempt) * 100));
     }
@@ -5243,7 +5406,7 @@ async function executeSwipe(sessionId, step) {
     screenH = windowSize.height;
   } catch (err) {
     if (isTransportError(err)) throw err;
-    throw new Error(`Swipe action failed: could not determine screen dimensions. ${err instanceof Error ? err.message : String(err)}`);
+    throw new Error(`Swipe action failed: could not determine screen dimensions. ${err instanceof Error ? err.message : String(err)}`, { cause: err });
   }
   const { startX, startY, endX, endY } = computeMobileSwipePointers(screenW, screenH, direction, distance);
   await wdRequest(`/session/${sessionId}/actions`, {
@@ -5562,12 +5725,12 @@ async function executeMobileTest(options) {
       const base = err instanceof Error ? err.message : String(err);
       if (selectedDevice.isPhysical) {
         const guidance = platformFilter === "IOS" ? `Real iOS devices require a signed WebDriverAgent (configure signing in Xcode, or pass appium:xcodeOrgId / appium:xcodeSigningId) and the app (${options.target.appId}) must be installed and trusted on the device.` : `Ensure ${selectedDevice.name} is authorized for USB debugging and ${options.target.appId} is installed.`;
-        throw new Error(`${base} \u2014 could not start an Appium session on the physical device ${selectedDevice.name}. ${guidance}`);
+        throw new Error(`${base} \u2014 could not start an Appium session on the physical device ${selectedDevice.name}. ${guidance}`, { cause: err });
       }
       const appListUnknown = !selectedDevice.installedApps || selectedDevice.installedApps.length === 0;
       if (appListUnknown) {
         const installHint = platformFilter === "IOS" ? `xcrun simctl install ${selectedDevice.id} <app-path>` : `adb -s ${selectedDevice.id} install <apk-path>`;
-        throw new Error(`${base} \u2014 could not confirm ${options.target.appId} is installed on ${selectedDevice.name}; if it is missing, install it first: ${installHint}`);
+        throw new Error(`${base} \u2014 could not confirm ${options.target.appId} is installed on ${selectedDevice.name}; if it is missing, install it first: ${installHint}`, { cause: err });
       }
       throw err;
     }
@@ -5607,7 +5770,7 @@ async function executeMobileTest(options) {
             detail,
             recordedFromClearedState
           );
-          if (requirementError) throw new Error(requirementError);
+          if (requirementError) throw new Error(requirementError, { cause: err });
           log2(`App-data clear failed (AUTO continues with plain fresh launch): ${detail}`);
         }
       } else {
@@ -5642,7 +5805,8 @@ async function executeMobileTest(options) {
         await openDeepLink(sessionId, options.target.platform, options.target.deeplink, options.target.appId);
       } catch (err) {
         throw new Error(
-          `Deep-link launch failed; refusing to replay from the wrong entry screen: ${err instanceof Error ? err.message : String(err)}`
+          `Deep-link launch failed; refusing to replay from the wrong entry screen: ${err instanceof Error ? err.message : String(err)}`,
+          { cause: err }
         );
       }
     }
@@ -5923,7 +6087,8 @@ async function createMobileDiscoverySession(target, options) {
       });
       releaseControlPortSlot(discoveryPortSlotDeviceId);
       throw new Error(
-        `Deep-link launch failed for mobile discovery: ${err instanceof Error ? err.message : String(err)}`
+        `Deep-link launch failed for mobile discovery: ${err instanceof Error ? err.message : String(err)}`,
+        { cause: err }
       );
     }
   }
@@ -6979,7 +7144,8 @@ async function startSession(validated, res) {
       } catch (err) {
         const detail = err instanceof Error ? err.message : String(err);
         throw new Error(
-          `Failed to open the configured deep link before recording (${detail}). The Appium session was closed; verify the URL and app deep-link configuration, then try again.`
+          `Failed to open the configured deep link before recording (${detail}). The Appium session was closed; verify the URL and app deep-link configuration, then try again.`,
+          { cause: err }
         );
       }
     }
@@ -8907,23 +9073,42 @@ function withMediaReferences(result, refs) {
 // src/result-post-retry.ts
 var RESULT_POST_MAX_ATTEMPTS = 3;
 var RESULT_POST_BACKOFF_BASE_MS = 1e3;
+var RESULT_POST_BACKOFF_CAP_MS = 15e3;
+var RESULT_POST_RETRY_BUDGET_DEFAULT_MS = 15e4;
+function resultPostRetryBudgetMs(env = process.env) {
+  return Math.max(1e4, Number.parseInt(env.RUNNER_RESULT_RETRY_BUDGET_MS ?? "", 10) || RESULT_POST_RETRY_BUDGET_DEFAULT_MS);
+}
+function defaultResultPostBudgetMs(backoffBaseMs) {
+  return backoffBaseMs > 0 ? resultPostRetryBudgetMs() : 0;
+}
+function nextResultPostDelay(attempt, opts) {
+  const delay = Math.min(RESULT_POST_BACKOFF_CAP_MS, Math.pow(2, attempt) * opts.backoffBaseMs);
+  if (attempt < opts.maxAttempts) return delay;
+  const left = opts.startedAt + opts.budgetMs - (opts.now ?? Date.now());
+  if (left <= 0) return null;
+  return Math.min(delay, left);
+}
 function isTransientResultPostStatus(status) {
   return status === 408 || status === 429 || status >= 500;
 }
-async function postRetryingTransient(send, label, backoffBaseMs = RESULT_POST_BACKOFF_BASE_MS) {
+async function postRetryingTransient(send, label, backoffBaseMs = RESULT_POST_BACKOFF_BASE_MS, budgetMs = defaultResultPostBudgetMs(backoffBaseMs)) {
+  const startedAt = Date.now();
   for (let attempt = 1; ; attempt++) {
     let failure;
+    let delay;
     try {
       const res = await send();
-      if (!isTransientResultPostStatus(res.status) || attempt >= RESULT_POST_MAX_ATTEMPTS) return res;
+      if (!isTransientResultPostStatus(res.status)) return res;
+      delay = nextResultPostDelay(attempt, { maxAttempts: RESULT_POST_MAX_ATTEMPTS, startedAt, budgetMs, backoffBaseMs });
+      if (delay === null) return res;
       await res.body?.cancel().catch(() => {
       });
       failure = `HTTP ${res.status}`;
     } catch (err) {
-      if (attempt >= RESULT_POST_MAX_ATTEMPTS) throw err;
+      delay = nextResultPostDelay(attempt, { maxAttempts: RESULT_POST_MAX_ATTEMPTS, startedAt, budgetMs, backoffBaseMs });
+      if (delay === null) throw err;
       failure = err instanceof Error ? err.message : String(err);
     }
-    const delay = Math.pow(2, attempt) * backoffBaseMs;
     console.warn(`[runner] ${label} post attempt ${attempt} failed (${failure}), retrying in ${delay}ms...`);
     await new Promise((resolve3) => setTimeout(resolve3, delay));
   }
@@ -8956,6 +9141,7 @@ function clampPollInterval(value) {
 init_dist();
 var import_ai_queue = __toESM(require_ai_queue());
 var import_base_url_check = __toESM(require_base_url_check());
+var import_tls_cert_probe = __toESM(require_tls_cert_probe());
 var import_rate_limit_detector = __toESM(require_rate_limit_detector());
 var import_resource_governor = __toESM(require_resource_governor());
 var import_process_inventory = __toESM(require_process_inventory());
@@ -9170,7 +9356,7 @@ async function claimRun(serverUrl, headers, runId) {
   if (typeof body.claimNonce === "string" && body.claimNonce) claimNonces.set(runId, body.claimNonce);
   return body.claimEpoch;
 }
-async function postResult(serverUrl, headers, runId, result, claimEpoch, maxAttemptsArg = 3, backoffBaseMs = 1e3) {
+async function postResult(serverUrl, headers, runId, result, claimEpoch, maxAttemptsArg = 3, backoffBaseMs = 1e3, budgetMs = defaultResultPostBudgetMs(backoffBaseMs)) {
   let maxAttempts = maxAttemptsArg;
   let verdictOnlyApplied = false;
   let lastError;
@@ -9189,8 +9375,10 @@ async function postResult(serverUrl, headers, runId, result, claimEpoch, maxAtte
   }
   let payload = budgeted.payload;
   let apiCallBodiesStripped = false;
+  const startedAt = Date.now();
   for (let attempt = 1; attempt <= maxAttempts; attempt++) {
     attemptsMade = attempt;
+    let transient = false;
     try {
       const res = await fetchRetrying429(`${serverUrl}/api/runner/runs/${runId}/result`, () => ({
         method: "POST",
@@ -9242,15 +9430,17 @@ async function postResult(serverUrl, headers, runId, result, claimEpoch, maxAtte
         throw new RunNoLongerActiveError(`Run ${runId} is no longer active on the server (HTTP ${res.status})`);
       }
       lastError = new Error(`HTTP ${res.status}`);
+      transient = isTransientResultPostStatus(res.status);
     } catch (err) {
       if (err instanceof RunNoLongerActiveError) throw err;
       lastError = err instanceof Error ? err : new Error(String(err));
+      transient = true;
     }
-    if (attempt < maxAttempts) {
-      const delay = Math.pow(2, attempt) * backoffBaseMs;
-      console.warn(`[runner] postResult attempt ${attempt} failed (${lastError.message}), retrying in ${delay}ms...`);
-      await new Promise((resolve3) => setTimeout(resolve3, delay));
-    }
+    const delay = nextResultPostDelay(attempt, { maxAttempts, startedAt, budgetMs: transient ? budgetMs : 0, backoffBaseMs });
+    if (delay === null) break;
+    if (attempt >= maxAttempts) maxAttempts++;
+    console.warn(`[runner] postResult attempt ${attempt} failed (${lastError.message}), retrying in ${delay}ms...`);
+    await new Promise((resolve3) => setTimeout(resolve3, delay));
   }
   throw new Error(`Failed to post result after ${attemptsMade} attempts: ${lastError?.message}`);
 }
@@ -9280,7 +9470,7 @@ async function postHealResult(serverUrl, headers, runId, healedCode, testCaseId,
   }
   throw new Error(`Failed to post heal result after ${MAX_ATTEMPTS} attempts: ${lastError?.message}`);
 }
-async function postMobileHealResult(serverUrl, headers, runId, body) {
+async function postMobileHealResult(serverUrl, headers, runId, body, claimEpoch) {
   const MAX_ATTEMPTS = 3;
   let lastError;
   for (let attempt = 1; attempt <= MAX_ATTEMPTS; attempt++) {
@@ -9288,7 +9478,7 @@ async function postMobileHealResult(serverUrl, headers, runId, body) {
       const res = await fetch(`${serverUrl}/api/runner/runs/${runId}/mobile-heal-result`, {
         method: "POST",
         headers,
-        body: JSON.stringify(body),
+        body: JSON.stringify(withClaimEpoch(body, claimEpoch)),
         signal: AbortSignal.timeout(6e4)
       });
       if (res.ok) return;
@@ -9307,12 +9497,13 @@ async function postMobileHealResult(serverUrl, headers, runId, body) {
 function narrowMobileLaunchMode(mode) {
   return mode === "LAUNCH_APP" || mode === "DEEP_LINK" || mode === "RESUME" ? mode : void 0;
 }
-async function postBatchHealResult(serverUrl, headers, runId, body, backoffBaseMs = RESULT_POST_BACKOFF_BASE_MS) {
+async function postBatchHealResult(serverUrl, headers, runId, body, backoffBaseMs = RESULT_POST_BACKOFF_BASE_MS, claimEpoch) {
   const progress = { body, fromRung: 0 };
   const res = await postRetryingTransient(() => postShedOn413((payload) => fetchRetrying429(`${serverUrl}/api/runner/runs/${runId}/batch-heal-result`, () => ({
     method: "POST",
     headers,
-    body: JSON.stringify(payload),
+    // At send time, not in the body: the verdict-only rung keeps a fixed list of fields and would drop it.
+    body: JSON.stringify(withClaimEpoch(payload, claimEpoch)),
     signal: AbortSignal.timeout(12e4)
   })), progress.body, "batch heal result", import_result_shed.BATCH_HEAL_SHED_LADDER, progress), "batch heal result", backoffBaseMs);
   throwUnlessResultLanded(res, runId, "batch heal result");
@@ -9324,11 +9515,11 @@ function throwUnlessResultLanded(res, runId, label) {
   }
   throw new Error(`Failed to post ${label}: ${res.status}`);
 }
-async function postBatchHealPartial(serverUrl, headers, runId, result) {
+async function postBatchHealPartial(serverUrl, headers, runId, result, claimEpoch) {
   const res = await postShedOn413((payload) => fetchRetrying429(`${serverUrl}/api/runner/runs/${runId}/batch-heal-partial`, () => ({
     method: "POST",
     headers,
-    body: JSON.stringify(payload),
+    body: JSON.stringify(withClaimEpoch(payload, claimEpoch)),
     // Fires per verdict: a slow server must not hold up the next test.
     signal: AbortSignal.timeout(3e4)
   })), { result }, "batch heal partial", import_result_shed.BATCH_HEAL_PARTIAL_SHED_LADDER);
@@ -9349,11 +9540,11 @@ async function fetchBatchHealAppliedIds(serverUrl, headers, runId, projectId) {
     return /* @__PURE__ */ new Set();
   }
 }
-function batchHealPartialHooks(serverUrl, headers, runId, projectId, warn = (msg) => log.warn(msg)) {
+function batchHealPartialHooks(serverUrl, headers, runId, projectId, warn = (msg) => log.warn(msg), claimEpoch) {
   return {
     onPartialResult: async (result) => {
       try {
-        await postBatchHealPartial(serverUrl, headers, runId, result);
+        await postBatchHealPartial(serverUrl, headers, runId, result, claimEpoch);
       } catch (err) {
         warn(`batch-heal partial post failed for ${result.testCaseId}: ${err instanceof Error ? err.message : String(err)}`);
       }
@@ -9361,6 +9552,28 @@ function batchHealPartialHooks(serverUrl, headers, runId, projectId, warn = (msg
     resumeLookup: () => fetchBatchHealAppliedIds(serverUrl, headers, runId, projectId)
   };
 }
+function batchHealNoStart(tests, baseUrl) {
+  if (tests.length === 0) {
+    return {
+      body: { perTest: [], systemicDiagnosis: "batch-heal dispatched with empty tests list", logs: "no tests to heal", durationMs: 0 },
+      level: "warn",
+      logLine: "batch-heal: empty payload, posting no-op result"
+    };
+  }
+  if (!baseUrl) {
+    return {
+      body: {
+        perTest: [],
+        systemicDiagnosis: "batch-heal aborted: BASE_URL missing for project (set BASE_URL in Test Data or FrameworkRepo.baseUrl)",
+        logs: "batch-heal aborted: empty baseUrl",
+        durationMs: 0
+      },
+      level: "fail",
+      logLine: "batch-heal aborted \u2014 BASE_URL is empty in /pending payload"
+    };
+  }
+  return null;
+}
 var LOG_APPEND_MAX_LINES = 100;
 var LOG_APPEND_MAX_LINE_LEN = 8 * 1024;
 var LOG_APPEND_MAX_BODY_BYTES = 200 * 1024;
@@ -9427,18 +9640,25 @@ function createHealLogStreamer(serverUrl, headers, runId) {
   };
   return { onLog, flushNow };
 }
-async function postShedOn413(send, body, label, ladder = import_result_shed.CAPTURE_SHED_LADDER, progress) {
+async function postShedOn413(send, body, label, ladder = import_result_shed.CAPTURE_SHED_LADDER, progress, onPlain413) {
   let current = progress?.body ?? body;
   let fromRung = progress?.fromRung ?? 0;
   let res = await send(current);
-  while (res.status === 413 && await (0, import_result_api_call_bodies2.isResultStructureTooCostlyResponse)(res)) {
-    const next = (0, import_result_shed.nextShedPayload)(current, ladder, fromRung);
-    if (!next) break;
-    console.warn(
-      `[runner] Server refused ${label} as too costly to parse (413 ${import_result_api_call_bodies2.RESULT_STRUCTURE_TOO_COSTLY}); retrying a lighter form (shed level ${next.level}, ${next.shed} item${next.shed === 1 ? "" : "s"} removed).`
-    );
-    current = next.payload;
-    fromRung = next.nextRung;
+  while (res.status === 413) {
+    if (await (0, import_result_api_call_bodies2.isResultStructureTooCostlyResponse)(res)) {
+      const next = (0, import_result_shed.nextShedPayload)(current, ladder, fromRung);
+      if (!next) break;
+      console.warn(
+        `[runner] Server refused ${label} as too costly to parse (413 ${import_result_api_call_bodies2.RESULT_STRUCTURE_TOO_COSTLY}); retrying a lighter form (shed level ${next.level}, ${next.shed} item${next.shed === 1 ? "" : "s"} removed).`
+      );
+      current = next.payload;
+      fromRung = next.nextRung;
+    } else {
+      const lighter = onPlain413?.(current) ?? null;
+      if (!lighter) break;
+      console.warn(`[runner] Server refused ${label} as too large (413); retrying it without its media.`);
+      current = lighter;
+    }
     if (progress) {
       progress.body = current;
       progress.fromRung = fromRung;
@@ -9457,22 +9677,24 @@ async function postCaptureResult(serverUrl, headers, runId, result, backoffBaseM
   })), progress.body, "capture result", import_result_shed.CAPTURE_SHED_LADDER, progress), "capture result", backoffBaseMs);
   throwUnlessResultLanded(res, runId, "capture result");
 }
-async function postRegressionResult(serverUrl, headers, runId, body, backoffBaseMs = RESULT_POST_BACKOFF_BASE_MS) {
-  const progress = { body: withBrowsersPathHint(body), fromRung: 0 };
+async function postRegressionResult(serverUrl, headers, runId, body, backoffBaseMs = RESULT_POST_BACKOFF_BASE_MS, claimEpoch) {
+  const fit = (0, import_result_shed.fitRegressionScreenshots)(withBrowsersPathHint(body));
+  if (fit.dropped > 0) console.warn(`[runner] Regression result over the route's body limit: ${fit.dropped} failing spec(s)' screenshot left out.`);
+  const progress = { body: fit.payload, fromRung: 0 };
   const res = await postRetryingTransient(() => postShedOn413((payload) => fetchRetrying429(`${serverUrl}/api/runner/runs/${runId}/regression-result`, () => ({
     method: "POST",
     headers,
-    body: JSON.stringify(payload),
+    body: JSON.stringify(withClaimEpoch(payload, claimEpoch)),
     signal: AbortSignal.timeout(6e4)
-  })), progress.body, "regression result", import_result_shed.REGRESSION_SHED_LADDER, progress), "regression result", backoffBaseMs);
+  })), progress.body, "regression result", import_result_shed.REGRESSION_SHED_LADDER, progress, import_result_shed.withoutRegressionScreenshots), "regression result", backoffBaseMs);
   throwUnlessResultLanded(res, runId, "regression result");
 }
-function postLiveSuiteResult(serverUrl, headers, runId, body, backoffBaseMs = RESULT_POST_BACKOFF_BASE_MS) {
+function postLiveSuiteResult(serverUrl, headers, runId, body, backoffBaseMs = RESULT_POST_BACKOFF_BASE_MS, claimEpoch) {
   const progress = { body, fromRung: 0 };
   return postRetryingTransient(() => postShedOn413((payload) => fetchRetrying429(`${serverUrl}/api/runner/runs/${runId}/live-suite-result`, () => ({
     method: "POST",
     headers,
-    body: JSON.stringify(payload),
+    body: JSON.stringify(withClaimEpoch(payload, claimEpoch)),
     signal: AbortSignal.timeout(6e4)
   })), progress.body, "live suite result", import_result_shed.LIVE_SUITE_SHED_LADDER, progress), "live suite result", backoffBaseMs);
 }
@@ -9688,6 +9910,12 @@ function pruneCollectedPageForPost(page) {
   if (Array.isArray(out.observations)) out.observations = out.observations.slice(-200).map((obs) => compactForAudit(obs));
   return out;
 }
+function discoveryRenderTypeFields(input) {
+  if (input.err instanceof import_runner_core7.UnsupportedRendererError) {
+    return { detectedAppRenderType: input.err.renderType, appRenderDetectionSignals: input.err.signals };
+  }
+  return input.appRenderType ? { detectedAppRenderType: input.appRenderType } : {};
+}
 function prepareDiscoveryResultForPost(result, logs2, options = {}) {
   const safe = { ...result, logs: truncateTextTail(logs2, RESULT_LOG_MAX_CHARS, "discovery result log") };
   if (Array.isArray(safe.collectedPages)) safe.collectedPages = safe.collectedPages.map(pruneCollectedPageForPost);
@@ -9864,15 +10092,16 @@ function toLiveBrowserMode(mode) {
 async function executeRun(run2, opts, headers, requestLiveBrowserHeartbeat = () => {
 }, onMobileHealPending = () => {
 }, assignedDeviceId, mobileLeaseError, signal) {
-  if (signal && (0, import_runner_core7.currentRunAbortSignal)() !== signal) {
-    return (0, import_runner_core7.runWithAbortScope)({ signal, runId: run2.runId }, () => executeRun(run2, opts, headers, requestLiveBrowserHeartbeat, onMobileHealPending, assignedDeviceId, mobileLeaseError, signal));
+  if (signal && (0, import_runner_core9.currentRunAbortSignal)() !== signal) {
+    return (0, import_runner_core9.runWithAbortScope)({ signal, runId: run2.runId }, () => executeRun(run2, opts, headers, requestLiveBrowserHeartbeat, onMobileHealPending, assignedDeviceId, mobileLeaseError, signal));
   }
   const runMode = run2.mode ?? "run";
   const RUNNER_MODE = opts.runnerMode ?? "playwright-native";
   const runLabel = run2.testCaseId ?? run2.testName ?? (runMode === "run" ? "auth-setup" : runMode);
   const modeLabel = runMode === "run" ? RUNNER_MODE : runMode;
   log.info(`Running test: ${runLabel} (run ${run2.runId}) [mode: ${modeLabel}]`);
-  const postRunResult = (result) => postResult(opts.serverUrl, headers, run2.runId, result, run2.claimEpoch);
+  let tlsCertNote = Promise.resolve(null);
+  const postRunResult = async (result) => postResult(opts.serverUrl, headers, run2.runId, (0, import_tls_cert_probe.withRunNote)(result, await (0, import_tls_cert_probe.noteWithinCap)(tlsCertNote)), run2.claimEpoch);
   const browserlessRepositoryRead = (0, import_live_browser_registry.isBrowserlessRepositoryRead)(run2.discoveryContext?.frameworkImport?.kind);
   const liveBrowserHandle = browserlessRepositoryRead ? import_live_browser_registry.NO_LIVE_BROWSER : import_live_browser_registry.liveBrowserRegistry.register({
     sessionId: `${run2.runId}`,
@@ -9920,10 +10149,12 @@ async function executeRun(run2, opts, headers, requestLiveBrowserHeartbeat = ()
     authStandingMode: authPlan.standingHeadersMode,
     storageStatePath: wrapperStorageStatePath,
     apiBaseUrl: run2.apiBaseUrl,
+    // The run's own @api tag: an imported API spec's code may not say so (see executeNativeOnce's apiTest).
+    apiTest: Array.isArray(run2.tags) && run2.tags.includes("@api"),
     ...nativeOptions,
     liveBrowserHandle,
     onLiveBrowserSnapshot: requestLiveBrowserHeartbeat,
-    signal: (0, import_runner_core7.linkRunAbort)(nativeOptions.signal) ?? signal
+    signal: (0, import_runner_core9.linkRunAbort)(nativeOptions.signal) ?? signal
   });
   const callbackContext = {
     runId: run2.runId,
@@ -9936,7 +10167,7 @@ async function executeRun(run2, opts, headers, requestLiveBrowserHeartbeat = ()
   };
   const startTime = Date.now();
   try {
-    (0, import_runner_core7.throwIfRunAborted)();
+    (0, import_runner_core9.throwIfRunAborted)();
     if (mobileLeaseError) {
       await postRunResult({
         status: "ERROR",
@@ -9994,6 +10225,10 @@ async function executeRun(run2, opts, headers, requestLiveBrowserHeartbeat = ()
       } else if (preflight.note) {
         log.info(preflight.note);
       }
+      tlsCertNote = (0, import_tls_cert_probe.targetCertificateNote)(run2.baseUrl);
+      void tlsCertNote.then((note) => {
+        if (note) log.warn(note);
+      });
     }
     if (runMode === "auth-setup") {
       if (!run2.playwrightCode) {
@@ -10052,7 +10287,7 @@ async function executeRun(run2, opts, headers, requestLiveBrowserHeartbeat = ()
           releaseAuthLock2
         );
         const duration2 = Date.now() - startTime;
-        (0, import_runner_core7.throwIfRunAborted)();
+        (0, import_runner_core9.throwIfRunAborted)();
         await postRunResult({
           status: result2.passed ? "PASSED" : "FAILED",
           apiCalls: result2.apiCalls,
@@ -10072,14 +10307,10 @@ async function executeRun(run2, opts, headers, requestLiveBrowserHeartbeat = ()
     if (runMode === "batch-heal") {
       const tests = run2.batchHealTests ?? [];
       log.info(`Heal engine: GROK BATCH (${tests.length} tests, healerModel=${run2.healerModel ?? "null"})`);
-      if (tests.length === 0) {
-        await postBatchHealResult(opts.serverUrl, headers, run2.runId, {
-          perTest: [],
-          systemicDiagnosis: "batch-heal dispatched with empty tests list",
-          logs: "no tests to heal",
-          durationMs: 0
-        });
-        log.warn("batch-heal: empty payload, posting no-op result");
+      const noStart = batchHealNoStart(tests, run2.baseUrl);
+      if (noStart) {
+        await postBatchHealResult(opts.serverUrl, headers, run2.runId, noStart.body, RESULT_POST_BACKOFF_BASE_MS, run2.claimEpoch);
+        log[noStart.level](noStart.logLine);
         return;
       }
       const healLogStream = createHealLogStreamer(opts.serverUrl, headers, run2.runId);
@@ -10101,10 +10332,10 @@ async function executeRun(run2, opts, headers, requestLiveBrowserHeartbeat = ()
           completionTokens: info.completionTokens,
           totalTokens: info.totalTokens,
           requestBody: { iteration: info.iteration, toolCalls: info.toolCalls, session: info.requestMessages?.[0] ?? null },
-          metadata: { phase: "heal", groupId: info.groupId, iteration: info.iteration, healMode: "batch", ...(0, import_runner_core7.cliAuditMetadata)(info) }
+          metadata: { phase: "heal", groupId: info.groupId, iteration: info.iteration, healMode: "batch", ...(0, import_runner_core9.cliAuditMetadata)(info) }
         });
       };
-      const batchResult = await (0, import_runner_core7.executeGrokPerBatchHeal)(tests, run2.baseUrl, {
+      const batchResult = await (0, import_runner_core9.executeGrokPerBatchHeal)(tests, run2.baseUrl, {
         onAICall: batchHealAudit,
         testVariables: run2.testVariables,
         runNativeTest: runNativeWithLiveBrowser,
@@ -10113,9 +10344,9 @@ async function executeRun(run2, opts, headers, requestLiveBrowserHeartbeat = ()
         saveRefreshedLogin: grokLogin?.saveRefreshed,
         engineSpec: run2.healerModel,
         // Returns HEAL_TIMEOUT: for the tests not reached instead of dying at the runner's batch-heal deadline.
-        deadlineAt: (0, import_runner_core6.batchHealDeadlineAt)(startTime),
+        deadlineAt: (0, import_runner_core7.batchHealDeadlineAt)(startTime),
         onLog: healLogStream.onLog,
-        ...batchHealPartialHooks(opts.serverUrl, headers, run2.runId, run2.projectId || void 0)
+        ...batchHealPartialHooks(opts.serverUrl, headers, run2.runId, run2.projectId || void 0, void 0, run2.claimEpoch)
       });
       await healLogStream.flushNow();
       try {
@@ -10123,15 +10354,15 @@ async function executeRun(run2, opts, headers, requestLiveBrowserHeartbeat = ()
       } catch (drainErr) {
         console.warn(`[batch-heal] audit flush failed: ${drainErr instanceof Error ? drainErr.message : String(drainErr)}`);
       }
-      (0, import_runner_core7.throwIfRunAborted)();
+      (0, import_runner_core9.throwIfRunAborted)();
       try {
         await postBatchHealResult(opts.serverUrl, headers, run2.runId, {
           perTest: batchResult.perTest,
           systemicDiagnosis: batchResult.systemicDiagnosis,
           logs: batchResult.logs,
           durationMs: batchResult.totalDurationMs
-        });
-        log.ok((0, import_runner_core7.batchHealCompleteLine)(batchResult.perTest, tests.length, batchResult.totalDurationMs));
+        }, RESULT_POST_BACKOFF_BASE_MS, run2.claimEpoch);
+        log.ok((0, import_runner_core9.batchHealCompleteLine)(batchResult.perTest, tests.length, batchResult.totalDurationMs));
       } catch (err) {
         log.fail(`Failed to post batch heal result: ${err instanceof Error ? err.message : String(err)}`);
       }
@@ -10164,6 +10395,8 @@ async function executeRun(run2, opts, headers, requestLiveBrowserHeartbeat = ()
         }, run2.runId) : void 0;
         const apiHealStorageStatePath = apiHealAuthPaths ? (0, import_local_auth_state.getValidLocalAuthState)(apiHealAuthPaths.cachePath) : void 0;
         if (apiHealStorageStatePath) log.info("API heal verification is using saved auth state");
+        const apiHealAuthSession = (0, import_runner_core8.sharedAuthSessionStamp)(apiHealStorageStatePath, false, sharedAuthInjectEnabled());
+        const apiHealAuthPlan = authPlanFor(run2.tags, run2.playwrightCode);
         const stickyAppBugs = /* @__PURE__ */ new Map();
         const lastChangeByTitle = /* @__PURE__ */ new Map();
         let currentError = run2.lastFailureError ?? "Test failed";
@@ -10278,25 +10511,42 @@ ${finalVerifyResult.logs ?? ""}`;
             continue;
           }
           if (result3.verdict === "app_bug") {
-            log.warn(`  APP BUG detected (legacy schema): ${result3.bugDescription}`);
             const duration4 = Date.now() - startTime;
+            const legacyCold = (0, import_runner_core8.apiHealColdSessionRelabel)("legacy", {
+              tags: run2.tags ?? [],
+              authStateExpected: apiHealAuthPlan.needsCookieState,
+              authStateInjected: (0, import_runner_core8.storageStateDelivered)(apiHealStorageStatePath, finalVerifyResult),
+              needsStandingHeaders: apiHealAuthPlan.needsStandingHeaders,
+              standingHeadersInjected: !!finalVerifyResult?.authDelivery?.standingHeadersInjected,
+              error: result3.bugDescription ?? null,
+              logs: finalVerifyResult?.logs ?? null,
+              apiCalls: null
+            });
+            if (legacyCold) {
+              log.warn(legacyCold.logLine);
+              await postRunResult({ status: legacyCold.status, error: legacyCold.error, duration: duration4, authSession: apiHealAuthSession });
+              return;
+            }
+            log.warn(`  APP BUG detected (legacy schema): ${result3.bugDescription}`);
             await postRunResult({
               status: "FAILED",
               error: `APP_BUG: ${result3.bugDescription}`,
-              duration: duration4
+              duration: duration4,
+              authSession: apiHealAuthSession
             });
             return;
           }
           if (result3.verdict === "unfixable") {
             log.fail(`  Unfixable: ${result3.reason}`);
-            finalUnfixableReason = result3.reason;
+            finalUnfixableReason = result3.reason ?? "AI could not fix the test";
             break;
           }
           lastHealedCode = result3.playwrightCode ?? result3.healedCode;
           lastChangeDescription = result3.changeDescription;
           if (!lastHealedCode) {
-            log.fail("  AI returned fix verdict but no code");
-            break;
+            log.warn(`  Attempt ${attempt}: AI returned fix verdict but no code \u2014 retrying with prompt`);
+            currentError = `Attempt ${attempt} failed: You described a fix but did not include the \`playwrightCode\` field. Please provide the complete updated test file as \`playwrightCode\`.`;
+            continue;
           }
           finalVerifyResult = await runNativeWithLiveBrowser({
             playwrightCode: lastHealedCode,
@@ -10353,7 +10603,7 @@ ${finalVerifyResult.logs ?? ""}`;
         let apiHealStatus = passed ? "PASSED" : "FAILED";
         let apiHealError = composedError;
         if (!passed) {
-          if (finalUnfixableReason?.startsWith(import_runner_core6.HEAL_AI_NO_ANSWER_ERROR_PREFIX)) {
+          if (finalUnfixableReason?.startsWith(import_runner_core7.HEAL_AI_NO_ANSWER_ERROR_PREFIX) || (0, import_runner_core7.isHealAiQuotaError)(finalUnfixableReason)) {
             apiHealStatus = "ERROR";
             apiHealError = finalUnfixableReason;
           } else if (isConfigLikeReason(classifyErrorMessage(composedError ?? null))) {
@@ -10390,6 +10640,23 @@ ${finalVerifyResult.logs ?? ""}`;
             }
           }
         }
+        if (apiHealStatus === "FAILED") {
+          const cold = (0, import_runner_core8.apiHealColdSessionRelabel)("verified", {
+            tags: run2.tags ?? [],
+            authStateExpected: apiHealAuthPlan.needsCookieState,
+            authStateInjected: (0, import_runner_core8.storageStateDelivered)(apiHealStorageStatePath, finalVerifyResult),
+            needsStandingHeaders: apiHealAuthPlan.needsStandingHeaders,
+            standingHeadersInjected: !!finalVerifyResult?.authDelivery?.standingHeadersInjected,
+            error: apiHealError ?? finalVerifyResult?.error,
+            logs: finalVerifyResult?.logs,
+            apiCalls: rawSteps.flatMap((s) => s.apiCalls ?? [])
+          });
+          if (cold) {
+            apiHealStatus = cold.status;
+            apiHealError = cold.error;
+            log.warn(`${cold.logLine} (was "${composedError?.slice(0, 60)}\u2026")`);
+          }
+        }
         await postHealOutcome({
           postRunResult: () => postRunResult({
             status: apiHealStatus,
@@ -10401,9 +10668,10 @@ ${finalVerifyResult.logs ?? ""}`;
             // Preserve healedCode on ALL heal outcomes - including app-bug-only -
             // so the file with test.fixme wraps gets committed and audited.
             healedCode: lastHealedCode,
-            duration: duration3
+            duration: duration3,
+            authSession: apiHealAuthSession
           }),
-          postHealResult: (healedCode, testCaseId) => postHealResult(opts.serverUrl, headers, run2.runId, healedCode, testCaseId),
+          postHealResult: (healedCode, testCaseId) => postHealResult(opts.serverUrl, headers, run2.runId, healedCode, testCaseId, void 0, void 0, run2.claimEpoch),
           passed,
           healedCode: lastHealedCode,
           testCaseId: run2.testCaseId,
@@ -10439,11 +10707,11 @@ ${finalVerifyResult.logs ?? ""}`;
           completionTokens: info.completionTokens,
           totalTokens: info.totalTokens,
           ...hasTurnDetails ? buildAuditTurnPayload(info, run2.testVariables) : { requestBody: { iteration: info.iteration, toolCalls: info.toolCalls } },
-          metadata: { groupId: info.groupId, iteration: info.iteration, testName: run2.testCaseId, ...(0, import_runner_core7.cliAuditMetadata)(info) }
+          metadata: { groupId: info.groupId, iteration: info.iteration, testName: run2.testCaseId, ...(0, import_runner_core9.cliAuditMetadata)(info) }
         });
       };
       const envOverride = (process.env.USE_GROK_PER_TEST_HEAL ?? "").trim().toLowerCase();
-      const useGrokHeal = envOverride === "true" ? true : envOverride === "false" ? false : (0, import_runner_core7.getAgenticEngine)(run2.healerModel) === "grok-build";
+      const useGrokHeal = envOverride === "true" ? true : envOverride === "false" ? false : (0, import_runner_core9.getAgenticEngine)(run2.healerModel) === "grok-build";
       const healOpts = {
         testName: run2.testName ?? run2.testCaseId ?? void 0,
         tags: run2.tags ?? [],
@@ -10466,19 +10734,19 @@ ${finalVerifyResult.logs ?? ""}`;
         // Whole-heal deadline: the runner's heal deadline minus a margin for the result
         // post (heal-deadline.ts). The healer stops both phases inside it and returns a
         // HEAL_TIMEOUT: result instead of dying as a reclaimed task.
-        deadlineAt: (0, import_runner_core6.healDeadlineAt)(startTime)
+        deadlineAt: (0, import_runner_core7.healDeadlineAt)(startTime)
       };
       if (useGrokHeal) {
         const source = envOverride === "true" ? "env USE_GROK_PER_TEST_HEAL=true" : `healerModel=${run2.healerModel ?? "null"}`;
         log.info(`Heal engine: GROK (${source})`);
       }
       const grokHealLogStream = useGrokHeal ? createHealLogStreamer(opts.serverUrl, headers, run2.runId) : null;
-      const httpFallback = run2.healerFallbackModel && (0, import_runner_core7.getAgenticEngine)(run2.healerFallbackModel) === "native" ? run2.healerFallbackModel : null;
+      const httpFallback = run2.healerFallbackModel && (0, import_runner_core9.getAgenticEngine)(run2.healerFallbackModel) === "native" ? run2.healerFallbackModel : null;
       let result2;
       if (useGrokHeal) {
         try {
           const grokLogin = await (0, import_fetch_cli_subscription.fetchCliSubscription)({ serverUrl: opts.serverUrl, runId: run2.runId, headers, cli: "grok-build", onLog: grokHealLogStream?.onLog });
-          result2 = await (0, import_runner_core7.executeGrokPerTestHeal)(run2.playwrightCode, run2.steps, run2.baseUrl, {
+          result2 = await (0, import_runner_core9.executeGrokPerTestHeal)(run2.playwrightCode, run2.steps, run2.baseUrl, {
             ...healOpts,
             subscriptionSecret: grokLogin?.value,
             saveRefreshedLogin: grokLogin?.saveRefreshed,
@@ -10523,28 +10791,42 @@ ${finalVerifyResult.logs ?? ""}`;
         console.warn(`[runner]${auditDrainError}`);
       }
       const isConfigIssue = !result2.passed && isConfigLikeReason(classifyErrorMessage(result2.error ?? null));
-      let healStatus = (0, import_runner_core6.healRunStatus)({ passed: result2.passed, error: result2.error, isConfigIssue });
+      let healStatus = (0, import_runner_core7.healRunStatus)({ passed: result2.passed, error: result2.error, isConfigIssue });
       let healError = result2.error;
-      if (!result2.passed && !isConfigIssue && !(0, import_runner_core6.isHealAiQuotaError)(result2.error)) {
-        const rlDetection = (0, import_rate_limit_detector.detectRateLimitBlock)({
-          testName: run2.testName ?? run2.testCaseId ?? void 0,
-          tags: run2.tags ?? [],
-          error: result2.error,
-          logs: result2.logs,
-          stepResults: result2.stepResults,
-          apiCalls: result2.apiCalls
-        });
-        if (rlDetection.detected) {
-          healStatus = "ERROR";
-          healError = `RATE_LIMIT_BLOCKED: Heal-mode rate-limit detected (overriding AI verdict). Retry after ${rlDetection.retryAfterSeconds}s. Evidence: ${rlDetection.evidence.join("; ")}`;
-          log.warn(`\u26A0 Heal rate-limit override \u2014 was ${result2.error?.slice(0, 60)}\u2026, now ERROR/RATE_LIMIT_BLOCKED`);
-        }
+      const rateLimitRelabel = (0, import_runner_core8.uiHealRateLimitRelabel)({
+        passed: result2.passed,
+        isConfigIssue,
+        testName: run2.testName ?? run2.testCaseId ?? void 0,
+        tags: run2.tags ?? [],
+        error: result2.error,
+        logs: result2.logs,
+        stepResults: result2.stepResults,
+        apiCalls: result2.apiCalls
+      });
+      if (rateLimitRelabel) {
+        healStatus = rateLimitRelabel.status;
+        healError = rateLimitRelabel.error;
+        log.warn(rateLimitRelabel.logLine);
+      }
+      const loginRelabel = (0, import_runner_core8.uiHealLoginRelabel)({
+        status: healStatus,
+        testName: run2.testName ?? run2.testCaseId ?? void 0,
+        tags: run2.tags ?? [],
+        error: healError,
+        logs: result2.logs,
+        stepResults: result2.stepResults
+      });
+      if (loginRelabel) {
+        healStatus = loginRelabel.status;
+        healError = loginRelabel.error;
+        log.warn(loginRelabel.logLine);
       }
       await postHealOutcome({
         postRunResult: () => postRunResult({
           status: healStatus,
           stepResults: result2.stepResults,
           screenshots: result2.screenshots,
+          video: result2.video,
           apiCalls: result2.apiCalls,
           logs: (result2.logs ?? "") + auditDrainError,
           error: healError,
@@ -10565,7 +10847,7 @@ ${finalVerifyResult.logs ?? ""}`;
       });
       if (result2.logs) {
         const phaseLines = result2.logs.split("\n").filter(
-          (l) => l.includes("Phase 1: Script-driven") || l.includes("Phase 2: Escalating") || l.includes("Phase 2: Script + MCP") || l.includes("Phase 1 succeeded") || l.includes("Phase 2 iteration") || l.includes("\u{1F916} Verdict:") || l.includes("\u{1F916} finish_fix:") || l.includes("native verification PASSED") || l.includes("native verification FAILED") || l.includes("Native run PASSED") || l.includes("Native run FAILED") || l.includes("APP_BUG") || l.includes("CONFIG_ISSUE") || l.includes("needs_browser") || l.includes("--- Attempt") || l.includes("Proven commands") || l.includes("Proven fix:") || l.includes("Same error repeated") || l.includes("aborting heal")
+          (l) => l.includes("Phase 1: Script-driven") || l.includes("Phase 2: Escalating") || l.includes("Phase 2: Script + MCP") || l.includes("Phase 1 succeeded") || l.includes("Phase 2 iteration") || l.includes("\u{1F916} Verdict:") || l.includes("\u{1F916} finish_fix:") || l.includes("Preflight:") || l.includes("native verification PASSED") || l.includes("native verification FAILED") || l.includes("Native run PASSED") || l.includes("Native run FAILED") || l.includes("APP_BUG") || l.includes("CONFIG_ISSUE") || l.includes("needs_browser") || l.includes("--- Attempt") || l.includes("Proven commands") || l.includes("Proven fix:") || l.includes("Same error repeated") || l.includes("aborting heal")
         );
         if (phaseLines.length > 0) {
           console.log(`${C2.gray}\u2500\u2500 Heal summary \u2500\u2500${C2.reset}`);
@@ -10578,7 +10860,7 @@ ${finalVerifyResult.logs ?? ""}`;
       );
       return;
     }
-    if (runMode === "regression-suite") {
+    if (runMode === "regression-suite" || runMode === "system-regression-suite") {
       if (!run2.repoOwner || !run2.repoName) {
         await postRunResult({ status: "ERROR", error: "No framework repo configured" });
         log.fail("ERROR - No framework repo configured");
@@ -10600,8 +10882,8 @@ ${finalVerifyResult.logs ?? ""}`;
         // A cancel, a newer claim or a shutdown kills the suite instead of letting it run on for up to 85 min.
         signal
       });
-      const overall = result2.error && result2.testResults.length === 0 ? "ERROR" : result2.passed ? "PASSED" : "FAILED";
-      (0, import_runner_core7.throwIfRunAborted)();
+      const overall = (0, import_regression_runner.regressionSuiteOverall)(result2);
+      (0, import_runner_core9.throwIfRunAborted)();
       await postRegressionResult(opts.serverUrl, headers, run2.runId, {
         overall,
         logs: result2.logs,
@@ -10609,7 +10891,7 @@ ${finalVerifyResult.logs ?? ""}`;
         error: result2.error,
         testResults: result2.testResults,
         skippedSpecs: result2.skippedSpecs
-      });
+      }, RESULT_POST_BACKOFF_BASE_MS, run2.claimEpoch);
       log[result2.passed ? "ok" : "fail"](
         `Regression ${result2.passed ? "PASSED" : "FAILED"} (${result2.duration}ms) - ${result2.testResults.length} specs`
       );
@@ -10631,9 +10913,9 @@ ${finalVerifyResult.logs ?? ""}`;
         `${opts.serverUrl}/api/runner/runs/${run2.runId}/ai-audit-batch`,
         headers
       );
-      const suiteQuotaFallback = (0, import_runner_core6.createQuotaFallbackState)(run2.quotaFallbackModel);
+      const suiteQuotaFallback = (0, import_runner_core7.createQuotaFallbackState)(run2.quotaFallbackModel);
       for (const failedTest of failedTests) {
-        (0, import_runner_core7.throwIfRunAborted)();
+        (0, import_runner_core9.throwIfRunAborted)();
         const testStart = Date.now();
         log.info(`  Healing: ${failedTest.name ?? failedTest.testCaseId}`);
         const isApiTest = Array.isArray(failedTest.tags) && failedTest.tags.includes("@api");
@@ -10645,8 +10927,18 @@ ${finalVerifyResult.logs ?? ""}`;
               body: JSON.stringify({ error: String(failedTest.error ?? "").slice(0, 5e5), testCaseId: failedTest.testCaseId }),
               signal: AbortSignal.timeout(6e4)
             });
-            if (healRes.ok) {
-              const { healedCode } = await healRes.json();
+            const healBody = healRes.ok ? await healRes.json() : null;
+            if (healBody?.verdict === "unfixable" && (0, import_runner_core7.isHealAiQuotaError)(healBody.reason)) {
+              results.push({
+                testCaseId: failedTest.testCaseId,
+                status: "unfixable",
+                error: healBody.reason,
+                diagnosis: healBody.reason,
+                duration: Date.now() - testStart
+              });
+              log.warn(`    Not healed (AI provider quota): ${failedTest.name}`);
+            } else if (healBody) {
+              const { healedCode } = healBody;
               const failedTestPlan = authPlanFor(failedTest.tags, healedCode);
               const verifyResult = await runNativeWithLiveBrowser({
                 playwrightCode: healedCode,
@@ -10701,12 +10993,12 @@ ${finalVerifyResult.logs ?? ""}`;
               completionTokens: info.completionTokens,
               totalTokens: info.totalTokens,
               ...hasTurnDetails ? buildAuditTurnPayload(info, run2.testVariables) : { requestBody: { iteration: info.iteration, toolCalls: info.toolCalls } },
-              metadata: { groupId: info.groupId, testCaseId: failedTest.testCaseId, ...(0, import_runner_core7.cliAuditMetadata)(info) }
+              metadata: { groupId: info.groupId, testCaseId: failedTest.testCaseId, ...(0, import_runner_core9.cliAuditMetadata)(info) }
             });
           };
           try {
             const envOverrideSuite = (process.env.USE_GROK_PER_TEST_HEAL ?? "").trim().toLowerCase();
-            const useGrokHealSuite = envOverrideSuite === "true" ? true : envOverrideSuite === "false" ? false : (0, import_runner_core7.getAgenticEngine)(run2.healerModel) === "grok-build";
+            const useGrokHealSuite = envOverrideSuite === "true" ? true : envOverrideSuite === "false" ? false : (0, import_runner_core9.getAgenticEngine)(run2.healerModel) === "grok-build";
             const suiteHealOpts = {
               testName: failedTest.name ?? failedTest.testCaseId,
               tags: failedTest.tags ?? [],
@@ -10714,6 +11006,10 @@ ${finalVerifyResult.logs ?? ""}`;
               healingContext: failedTest.healingContext ?? null,
               selectorRegistryContext: failedTest.selectorRegistryContext ?? null,
               lastFailureError: failedTest.error,
+              // A suite heal reports fixed / app-bug / config-issue / unfixable only (/live-suite-result has no
+              // entry for a test that passed unchanged), so the original re-run preflight stays off here: a
+              // TRANSIENT_PASS would otherwise be posted as "unfixable". Heal mode keeps the preflight.
+              originalRerun: false,
               testVariables: run2.testVariables,
               onAICall: healAudit,
               modelOverride: run2.healerModel,
@@ -10724,12 +11020,12 @@ ${finalVerifyResult.logs ?? ""}`;
               liveBrowserHandle,
               runNativeTest: runNativeWithLiveBrowser
             };
-            const suiteHttpFallback = run2.healerFallbackModel && (0, import_runner_core7.getAgenticEngine)(run2.healerFallbackModel) === "native" ? run2.healerFallbackModel : null;
+            const suiteHttpFallback = run2.healerFallbackModel && (0, import_runner_core9.getAgenticEngine)(run2.healerFallbackModel) === "native" ? run2.healerFallbackModel : null;
             let healResult;
             if (useGrokHealSuite) {
               try {
                 const grokLogin = await (0, import_fetch_cli_subscription.fetchCliSubscription)({ serverUrl: opts.serverUrl, runId: run2.runId, headers, cli: "grok-build", onLog: log.warn });
-                healResult = await (0, import_runner_core7.executeGrokPerTestHeal)(
+                healResult = await (0, import_runner_core9.executeGrokPerTestHeal)(
                   failedTest.playwrightCode,
                   failedTest.steps ?? [],
                   run2.baseUrl,
@@ -10769,11 +11065,12 @@ ${finalVerifyResult.logs ?? ""}`;
               });
               log.ok(`    Fixed: ${failedTest.name}`);
             } else {
-              const quotaStopped = (0, import_runner_core6.isHealAiQuotaError)(healResult.error);
-              const isAppBug = !quotaStopped && (0, import_runner_core6.isAppBugHealError)(healResult.error);
+              const quotaStopped = (0, import_runner_core7.isHealAiQuotaError)(healResult.error);
+              const timeoutStopped = (0, import_runner_core7.isHealTimeoutError)(healResult.error);
+              const isAppBug = !quotaStopped && !timeoutStopped && (0, import_runner_core7.isAppBugHealError)(healResult.error);
               const isConfigIssue = isConfigLikeReason(classifyErrorMessage(healResult.error ?? null));
               const status = isAppBug ? "app-bug" : isConfigIssue ? "config-issue" : "unfixable";
-              const diagnosisMsg = isAppBug ? "Application error detected" : isConfigIssue ? "Configuration issue detected" : quotaStopped && healResult.error ? healResult.error : "Could not heal after AI attempts";
+              const diagnosisMsg = isAppBug ? "Application error detected" : isConfigIssue ? "Configuration issue detected" : (quotaStopped || timeoutStopped) && healResult.error ? healResult.error : "Could not heal after AI attempts";
               results.push({
                 testCaseId: failedTest.testCaseId,
                 status,
@@ -10781,7 +11078,7 @@ ${finalVerifyResult.logs ?? ""}`;
                 diagnosis: diagnosisMsg,
                 duration: Date.now() - testStart
               });
-              log[isAppBug || isConfigIssue || quotaStopped ? "warn" : "fail"](`    ${isAppBug ? "App bug" : isConfigIssue ? "Config issue" : quotaStopped ? "Not healed (AI provider quota)" : "Could not fix"}: ${failedTest.name}`);
+              log[isAppBug || isConfigIssue || quotaStopped || timeoutStopped ? "warn" : "fail"](`    ${isAppBug ? "App bug" : isConfigIssue ? "Config issue" : quotaStopped ? "Not healed (AI provider quota)" : timeoutStopped ? "Not healed (heal time budget)" : "Could not fix"}: ${failedTest.name}`);
             }
           } catch (err) {
             results.push({
@@ -10794,7 +11091,7 @@ ${finalVerifyResult.logs ?? ""}`;
             log.fail(`    Heal crashed: ${failedTest.name}`);
           }
         }
-        (0, import_runner_core7.throwIfRunAborted)();
+        (0, import_runner_core9.throwIfRunAborted)();
         const lastResult = results[results.length - 1];
         if (lastResult) {
           fetch(`${opts.serverUrl}/api/runner/runs/${run2.runId}/live-suite-progress`, {
@@ -10823,7 +11120,7 @@ ${finalVerifyResult.logs ?? ""}`;
         auditDrainWarning = drainErr instanceof Error ? drainErr.message : String(drainErr);
         console.warn(`[runner] ${auditDrainWarning}`);
       }
-      (0, import_runner_core7.throwIfRunAborted)();
+      (0, import_runner_core9.throwIfRunAborted)();
       const liveRes = await postLiveSuiteResult(opts.serverUrl, headers, run2.runId, {
         overall,
         duration: totalDuration,
@@ -10832,7 +11129,7 @@ ${finalVerifyResult.logs ?? ""}`;
           `Live suite heal: ${fixedCount} fixed, ${appBugCount} app bugs, ${configIssueCount} config issues, ${unfixableCount} unfixable`,
           auditDrainWarning
         ].filter(Boolean).join("\n")
-      });
+      }, RESULT_POST_BACKOFF_BASE_MS, run2.claimEpoch);
       if (!liveRes.ok) {
         log.warn(`Failed to post live-suite result: ${liveRes.status}`);
       }
@@ -10914,7 +11211,8 @@ ${finalVerifyResult.logs ?? ""}`;
             const res = await fetchRetrying429(`${opts.serverUrl}/api/runner/runs/${run2.runId}/locator-discovery-result`, () => ({
               method: "POST",
               headers: { ...headers, "Content-Type": "application/json" },
-              body: JSON.stringify({
+              // The epoch /claim returned: the server refuses a harvest whose run was re-claimed since (stale worker).
+              body: JSON.stringify(withClaimEpoch({
                 bundles: harvest.bundles,
                 // A divergence mark is durable (it blocks auto re-harvest and can
                 // flip the test to needs_manual_authoring), so an environmentally
@@ -10932,7 +11230,7 @@ ${finalVerifyResult.logs ?? ""}`;
                 reachedOrder: harvest.reachedOrder,
                 logs: harvest.logs,
                 ...harvest.environmentalError ? { environmentalError: harvest.environmentalError } : {}
-              }),
+              }, run2.claimEpoch)),
               signal: AbortSignal.timeout(3e4)
             }));
             if (res.ok) {
@@ -10997,7 +11295,7 @@ ${finalVerifyResult.logs ?? ""}`;
           }
           return await res.json();
         };
-        ctx.smsReserve = (0, import_runner_core7.createHttpSmsReserveTransport)({ serverUrl: opts.serverUrl, headers, runId: run2.runId });
+        ctx.smsReserve = (0, import_runner_core9.createHttpSmsReserveTransport)({ serverUrl: opts.serverUrl, headers, runId: run2.runId });
       }
       const canonicalBase = await (0, import_base_url_check.canonicalDiscoveryBaseUrl)(
         { runMode, baseUrl: ctx.baseUrl, native: ctx.medium === "IOS_NATIVE" || ctx.medium === "ANDROID_NATIVE" || run2.framework === "APPIUM" }
@@ -11059,7 +11357,7 @@ ${finalVerifyResult.logs ?? ""}`;
             ...info.exitReason ? { exitReason: info.exitReason } : {},
             // Engine cost, engine id, step, cache + reasoning tokens: same helper as the server's
             // Fargate path (execute-run.ts), so the two rows agree.
-            ...(0, import_runner_core7.cliAuditMetadata)(info),
+            ...(0, import_runner_core9.cliAuditMetadata)(info),
             ...ledgerAudit ? {
               ledger: ledgerAudit.entries,
               ledgerEntryCount: ledgerAudit.originalLength,
@@ -11143,7 +11441,8 @@ ${finalVerifyResult.logs ?? ""}`;
           headers: { ...headers, "Content-Type": "application/json" },
           // Framework-import runs span MANY features in one Session, so each test
           // carries its own suiteName; per-feature deep runs fall back to ctx.featureName.
-          body: JSON.stringify({ ...test, suiteName: test.suiteName ?? ctx.featureName, phase }),
+          // claimEpoch: the server fences each save to this claim (a re-claimed run refuses it with 409).
+          body: JSON.stringify(withClaimEpoch({ ...test, suiteName: test.suiteName ?? ctx.featureName, phase }, run2.claimEpoch)),
           signal: AbortSignal.timeout(3e4)
         });
         if (res.status === 402) throw new import_discovery.PlanLimitReached();
@@ -11300,7 +11599,8 @@ ${finalVerifyResult.logs ?? ""}`;
             healthObservations: rest.healthObservations
           },
           // Only send tests that were NOT confirmed streamed to avoid duplicates
-          tests: rest.tests.filter((t) => !streamedTestKeys.has(fingerprintTest(t)))
+          tests: rest.tests.filter((t) => !streamedTestKeys.has(fingerprintTest(t))),
+          ...discoveryRenderTypeFields({ appRenderType: ctx.appRenderType })
         }, logs2, { omitScreenshots: isNativeDiscovery });
       };
       const acquireLoginBrowser = async () => {
@@ -11602,7 +11902,7 @@ ${line}`)
             };
           } else if (ctx.frameworkImport?.kind === "app-map") {
             log.info("Building the app map.");
-            discoveryResult = await (0, import_runner_core7.runAppMapOnRunner)(ctx, { onLog: (line) => log.info(line) });
+            discoveryResult = await (0, import_runner_core9.runAppMapOnRunner)(ctx, { onLog: (line) => log.info(line) });
           } else if (ctx.frameworkImport?.kind === "repo-enrichment") {
             const frameworkImport = ctx.frameworkImport;
             const primaryCli = isRepositoryCli(frameworkImport.repoHuntCli) ? frameworkImport.repoHuntCli : "claude-code";
@@ -11627,7 +11927,7 @@ ${line}`)
               })
             });
           } else {
-            const runRepoImport = ctx.frameworkImport?.kind === "repo-analysis" ? import_runner_core7.runRepoAnalysisOnRunner : import_framework_import_runner.runFrameworkImportOnRunner;
+            const runRepoImport = ctx.frameworkImport?.kind === "repo-analysis" ? import_runner_core9.runRepoAnalysisOnRunner : import_framework_import_runner.runFrameworkImportOnRunner;
             discoveryResult = await runRepoImport(ctx, { onTestGenerated, acquireLoginBrowser, onAudit: discoveryAudit }, {
               archiveUrl: ctx.frameworkImport?.source === "upload" ? `${opts.serverUrl}/api/runner/runs/${run2.runId}/import-archive` : void 0,
               archiveAuthHeader: headers.Authorization,
@@ -11689,7 +11989,7 @@ ${line}`)
           }
           const resolveCliSubscription = (engine, logLine) => (0, import_fetch_cli_subscription.fetchCliSubscription)({ serverUrl: opts.serverUrl, runId: run2.runId, headers, cli: engine, onLog: logLine });
           const claimNonce = claimNonceFor(run2.runId);
-          savedSignIn = ["survey", "deep", "full"].includes(ctx.mode) && claimNonce && typeof run2.claimEpoch === "number" ? await (0, import_runner_core7.openSavedSignInSession)((0, import_runner_core7.createSavedSignInClient)({
+          savedSignIn = ["survey", "deep", "full"].includes(ctx.mode) && claimNonce && typeof run2.claimEpoch === "number" ? await (0, import_runner_core9.openSavedSignInSession)((0, import_runner_core9.createSavedSignInClient)({
             serverUrl: opts.serverUrl,
             runId: run2.runId,
             claimEpoch: run2.claimEpoch,
@@ -11709,7 +12009,7 @@ ${line}`)
           if (ctx.repoBrief) discoveryResult.repoBrief = ctx.repoBrief;
           if (ctx.repoRouteManifest) discoveryResult.repoRouteManifest = ctx.repoRouteManifest;
         }
-        discoveryResult = (0, import_runner_core7.redactDiscoveryCaptureNeedles)(discoveryResult, {
+        discoveryResult = (0, import_runner_core9.redactDiscoveryCaptureNeedles)(discoveryResult, {
           ...run2.testVariables,
           // The saved sign-in's values, with every one it rotated to during the run.
           ...savedSignIn?.loaded ? savedSignIn.secrets() : {}
@@ -11786,7 +12086,7 @@ ${line}`)
           log.warn("[runner] discovery-har POST failed - final /discovery-result will carry HAR fallback");
         }
         const finalBody = buildFinalBody(discoveryResult, void 0, discoveryAuditWarning || void 0, auditDroppedCount);
-        const postOk = await postDiscoveryFinalResult(opts.serverUrl, headers, run2.runId, finalBody);
+        const postOk = await postDiscoveryFinalResult(opts.serverUrl, headers, run2.runId, withClaimEpoch(finalBody, run2.claimEpoch));
         if (!postOk) throw new Error("Failed to post discovery result (3 attempts, or refused with 413)");
         const discoveryError = discoveryResult.error ?? (discoveryResult.summary?.startsWith("Fatal error:") ? discoveryResult.summary : void 0);
         if (discoveryError) {
@@ -11825,14 +12125,15 @@ ${line}`)
           cliLimit: (0, import_cli_limit.cliLimitFromError)(err),
           streamedTestCount: streamedTestKeys.size,
           streamedTestCaseIds: Array.from(streamedTestCaseIds),
-          exploreAlreadySaved: explorePosted
+          exploreAlreadySaved: explorePosted,
+          ...discoveryRenderTypeFields({ err })
         }, `Fatal error: ${msg}${drainMsg}`);
         await postShedOn413((body) => fetchRetrying429(`${opts.serverUrl}/api/runner/runs/${run2.runId}/discovery-result`, () => ({
           method: "POST",
           headers: { ...headers, "Content-Type": "application/json" },
           body: JSON.stringify(body),
           signal: AbortSignal.timeout(12e4)
-        })), errorBody, "discovery error result", import_result_shed.DISCOVERY_SHED_LADDER).catch(() => {
+        })), withClaimEpoch(errorBody, run2.claimEpoch), "discovery error result", import_result_shed.DISCOVERY_SHED_LADDER).catch(() => {
         });
       } finally {
         if (poolBrowser) browserPool.release(poolBrowser);
@@ -11866,7 +12167,7 @@ ${line}`)
           completionTokens: info.completionTokens,
           totalTokens: info.totalTokens,
           ...hasTurnDetails ? buildAuditTurnPayload(info, run2.testVariables) : { requestBody: { iteration: info.iteration, toolCalls: info.toolCalls } },
-          metadata: { groupId: info.groupId, iteration: info.iteration, phase: "capture", featureName: ctx.featureName, ...(0, import_runner_core7.cliAuditMetadata)(info) }
+          metadata: { groupId: info.groupId, iteration: info.iteration, phase: "capture", featureName: ctx.featureName, ...(0, import_runner_core9.cliAuditMetadata)(info) }
         });
       };
       const logBuffer = [];
@@ -11965,7 +12266,7 @@ ${line}`)
       if (mobileSteps.length === 0) {
         await postRunResult({
           status: "ERROR",
-          error: "No mobile test steps found."
+          error: "CONFIG_ISSUE: No mobile test steps found."
         });
         log.fail("ERROR - No mobile steps");
         return;
@@ -12041,7 +12342,7 @@ ${line}`)
                 verdict: "fix",
                 recovered: true,
                 priorStepsHash: run2.priorStepsHash
-              });
+              }, run2.claimEpoch);
               log.ok("\u{1FA7A} Reproduce PASSED \u2014 test recovered (flaky); promotion posted");
             } catch (patchErr) {
               log.warn(`Failed to post recovered heal result: ${patchErr instanceof Error ? patchErr.message : String(patchErr)}`);
@@ -12083,7 +12384,7 @@ ${line}`)
                 completionTokens: info.completionTokens,
                 totalTokens: info.totalTokens,
                 ...hasTurnDetails ? buildAuditTurnPayload(info, run2.testVariables) : { requestBody: { iteration: info.iteration, toolCalls: info.toolCalls } },
-                metadata: { groupId: info.groupId, iteration: info.iteration, testName: run2.testCaseId, platform: "mobile", ...(0, import_runner_core7.cliAuditMetadata)(info) }
+                metadata: { groupId: info.groupId, iteration: info.iteration, testName: run2.testCaseId, platform: "mobile", ...(0, import_runner_core9.cliAuditMetadata)(info) }
               });
             },
             runLiveHeal: async (a) => {
@@ -12278,7 +12579,7 @@ ${line}`)
                 extraTags: heal.extraTags,
                 removeTags: heal.removeTags,
                 priorStepsHash: run2.priorStepsHash
-              });
+              }, run2.claimEpoch);
               log.ok(`\u{1FA7A} Mobile heal patch posted for test ${run2.testCaseId ?? "(unknown)"} (verdict: ${heal.verdict})`);
             } catch (patchErr) {
               log.warn(`Failed to post mobile heal patch: ${patchErr instanceof Error ? patchErr.message : String(patchErr)}`);
@@ -12425,6 +12726,7 @@ ${result2.logs}`);
     if (storageStatePath) {
       log.info(`Using auth state for project ${projectId}`);
     }
+    const authSession = (0, import_runner_core8.sharedAuthSessionStamp)(storageStatePath, captureAuth, sharedAuthInjectEnabled());
     const runAuthPath = captureAuth ? authPaths?.capturePath : void 0;
     const result = await (async () => {
       try {
@@ -12483,49 +12785,25 @@ ${result2.logs}`);
       runStatus = "ERROR";
       log.warn(`\u26A0 CONFIG_ISSUE from native execution - posting ERROR (not FAILED) to skip heal/quarantine`);
     }
-    if (isAuthReadinessGuardEnabled()) {
-      if (runStatus === "FAILED") {
-        const ab = detectAuthBlock({
-          testName: run2.testName ?? run2.testCaseId ?? void 0,
-          tags: run2.tags ?? [],
-          error: runError,
-          logs: result.logs,
-          stepResults: result.stepResults
-        });
-        if (ab.detected) {
-          runStatus = "ERROR";
-          runError = `CONFIG_ISSUE: Login prerequisite failed (${ab.reason}) \u2014 authed tests can't run until credentials/verification are fixed. Evidence: ${ab.evidence.join("; ")}`;
-          log.warn(`\u26A0 Auth-block detected - posting ERROR/CONFIG_ISSUE (not FAILED) to skip heal + avoid login hammering`);
-        }
-      }
-      if (runStatus === "FAILED") {
-        const cold = detectApiColdSessionBlock({
-          tags: run2.tags ?? [],
-          authStateExpected,
-          authStateInjected: !!storageStatePath,
-          needsStandingHeaders: normalRunAuthPlan.needsStandingHeaders,
-          standingHeadersInjected: !!result.authDelivery?.standingHeadersInjected,
-          error: runError,
-          logs: result.logs,
-          stepResults: result.stepResults,
-          apiCalls: result.apiCalls
-        });
-        if (cold.detected) {
-          runStatus = "ERROR";
-          runError = coldSessionConfigMessage("Authenticated @api test ran", cold.reason, cold.evidence);
-          log.warn(`\u26A0 Cold @api session detected - posting ERROR/CONFIG_ISSUE (not FAILED) to skip heal + avoid a false app_bug`);
-        }
-      }
-      if (runStatus === "PASSED" && Array.isArray(run2.tags) && run2.tags.includes("@api")) {
-        const skipCoverage = detectSkippedApiCoverage(result.stepResults ?? []);
-        if (skipCoverage.detected) {
-          runStatus = "ERROR";
-          runError = skipCoverage.error;
-          log.warn(`\u26A0 ${skipCoverage.logLine}`);
-        }
-      }
+    const authRelabel = (0, import_runner_core8.authReadinessRelabel)({
+      status: runStatus,
+      error: runError,
+      testName: run2.testName ?? run2.testCaseId ?? void 0,
+      tags: run2.tags ?? [],
+      logs: result.logs,
+      stepResults: result.stepResults,
+      apiCalls: result.apiCalls,
+      authStateExpected,
+      authStateInjected: (0, import_runner_core8.storageStateDelivered)(storageStatePath, result),
+      needsStandingHeaders: normalRunAuthPlan.needsStandingHeaders,
+      standingHeadersInjected: !!result.authDelivery?.standingHeadersInjected
+    });
+    if (authRelabel) {
+      runStatus = authRelabel.status;
+      runError = authRelabel.error;
+      log.warn(authRelabel.logLine);
     }
-    (0, import_runner_core7.throwIfRunAborted)();
+    (0, import_runner_core9.throwIfRunAborted)();
     await postRunResult({
       status: runStatus,
       stepResults: result.stepResults,
@@ -12542,7 +12820,8 @@ ${result2.logs}`);
       expectedFailure: result.passed ? result.expectedFailure === true : void 0,
       expectedFailureReason: result.passed && result.expectedFailure ? result.expectedFailureReason : void 0,
       unexpectedPass: result.passed ? void 0 : result.unexpectedPass === true,
-      bugTestBroken: result.passed ? void 0 : result.bugTestBroken === true
+      bugTestBroken: result.passed ? void 0 : result.bugTestBroken === true,
+      authSession
     });
     if (result.passed) {
       log.ok(`PASSED  (${duration}ms)${result.suspiciousPass ? ` \u26A0 suspicious-pass (viewport ${Math.round(result.suspiciousPass.emptyRatio * 100)}% blank)` : ""}`);
@@ -12558,14 +12837,14 @@ ${result2.logs}`);
     }
   } catch (err) {
     if (err instanceof RunNoLongerActiveError) throw err;
-    const abortOutcome = (0, import_runner_core7.runAbortOutcome)(err, signal);
+    const abortOutcome = (0, import_runner_core9.runAbortOutcome)(err, signal);
     if (abortOutcome === "discard") {
-      throw new RunNoLongerActiveError((0, import_runner_core7.isSupersededRunAbort)(signal) ? `Run ${run2.runId} was superseded by a newer claim` : `Run ${run2.runId} was cancelled on the server`);
+      throw new RunNoLongerActiveError((0, import_runner_core9.isSupersededRunAbort)(signal) ? `Run ${run2.runId} was superseded by a newer claim` : `Run ${run2.runId} was cancelled on the server`);
     }
     if (abortOutcome === "interrupt") {
       await postRunResult({
         status: "ERROR",
-        error: import_runner_core7.RUNNER_SHUTDOWN_INTERRUPT_ERROR,
+        error: import_runner_core9.RUNNER_SHUTDOWN_INTERRUPT_ERROR,
         duration: Date.now() - startTime
       });
       throw err;
@@ -12587,6 +12866,7 @@ ${result2.logs}`);
   }
 }
 async function startRunner(opts) {
+  (0, import_playwright_signal_handlers.disablePlaywrightSignalHandlers)();
   const { serverUrl, authToken, projectId, enableMobile = false, enableMobileTunnel = false } = opts;
   const pollIntervalMs = clampPollInterval(opts.pollIntervalMs);
   process.env.SERVER_URL = serverUrl;
@@ -13042,7 +13322,7 @@ async function startRunner(opts) {
       }
     });
   };
-  const removeSupersededRunFetchFence = (0, import_runner_core7.installSupersededRunFetchFence)(serverUrl);
+  const removeSupersededRunFetchFence = (0, import_runner_core9.installSupersededRunFetchFence)(serverUrl);
   const heartbeat = setInterval(sendHeartbeat, 3e4);
   sendHeartbeat();
   let shuttingDown = false;
@@ -13054,7 +13334,7 @@ async function startRunner(opts) {
         headers: { ...headers, "Content-Type": "application/json" },
         body: JSON.stringify(withClaimEpoch({
           status: "ERROR",
-          error: import_runner_core7.RUNNER_SHUTDOWN_INTERRUPT_ERROR
+          error: import_runner_core9.RUNNER_SHUTDOWN_INTERRUPT_ERROR
         }, claimEpoch)),
         signal: AbortSignal.timeout(5e3)
       }));
@@ -13070,7 +13350,7 @@ async function startRunner(opts) {
     setTimeout(() => {
       console.error("Shutdown grace elapsed \u2014 forcing exit");
       process.exit(0);
-    }, (0, import_runner_core7.shutdownForceExitMs)(SHUTDOWN_FINISH_MS, SHUTDOWN_GRACE_MS)).unref();
+    }, (0, import_runner_core9.shutdownForceExitMs)(SHUTDOWN_FINISH_MS, SHUTDOWN_GRACE_MS)).unref();
     clearInterval(heartbeat);
     heartbeatKeepalive.stop();
     if (liveBrowserHeartbeatTimer) {
@@ -13088,7 +13368,7 @@ async function startRunner(opts) {
     if (claimPending) {
       await Promise.race([claimPending, new Promise((resolve3) => setTimeout(resolve3, SHUTDOWN_FINISH_MS))]);
     }
-    await (0, import_runner_core7.drainAbortedRuns)({
+    await (0, import_runner_core9.drainAbortedRuns)({
       finishMs: SHUTDOWN_FINISH_MS,
       graceMs: SHUTDOWN_GRACE_MS,
       inFlight: activeWebRuns,
@@ -13105,17 +13385,19 @@ async function startRunner(opts) {
       await stopAppiumServer();
     }
     await browserPool.shutdown();
-    await (0, import_runner_core8.closeLocalGoogleBroker)().catch(() => {
+    await (0, import_runner_core10.closeLocalGoogleBroker)().catch(() => {
     });
     removeSupersededRunFetchFence();
     log.info("Runner stopped.");
     process.exit(0);
   };
-  process.once("SIGINT", () => {
-    void cleanup();
-  });
-  process.once("SIGTERM", () => {
+  installShutdownSignals(process, () => {
     void cleanup();
+  }, {
+    forceExit: () => {
+      console.error("Second interrupt \u2014 forcing exit");
+      process.exit(0);
+    }
   });
   const PIDS_WATCHDOG_INTERVAL_MS = Math.max(5e3, envInt("RUNNER_PIDS_WATCHDOG_INTERVAL_MS", 3e4));
   const PIDS_SOFT_WARN_PCT = Math.max(0, Math.min(100, envInt("RUNNER_PIDS_SOFT_WARN_PCT", 70)));
@@ -13167,7 +13449,7 @@ async function startRunner(opts) {
   const abortSupersededRun = (runId, status, serverEpoch) => {
     const controller = activeWebRuns.get(runId);
     const already = !controller || controller.signal.aborted;
-    if (controller) (0, import_runner_core7.abortRun)(controller, "superseded", runId);
+    if (controller) (0, import_runner_core9.abortRun)(controller, "superseded", runId);
     activeMobileRuns.get(runId)?.triggerAbort(`was superseded by a newer claim (epoch ${serverEpoch ?? "?"}, status ${status})`);
     if (!already) {
       log.warn(`Run ${runId} was superseded by a newer claim (server epoch ${serverEpoch ?? "?"}, ours ${claimedRunEpochs.get(runId) ?? "?"}) \u2014 stopping it; this runner posts nothing more for it.`);
@@ -13183,7 +13465,7 @@ async function startRunner(opts) {
     (runId, status) => {
       const controller = activeWebRuns.get(runId);
       const already = !controller || controller.signal.aborted;
-      if (controller) (0, import_runner_core7.abortRun)(controller, "cancelled", runId);
+      if (controller) (0, import_runner_core9.abortRun)(controller, "cancelled", runId);
       activeMobileRuns.get(runId)?.triggerAbort(`was cancelled server-side (status ${status})`);
       if (!already) log.warn(`Run ${runId} was cancelled server-side (status ${status}) \u2014 stopping it.`);
     }
@@ -13226,6 +13508,10 @@ async function startRunner(opts) {
           for (const run2 of pending) {
             if (shuttingDown) break;
             if (activeRuns >= MAX_CONCURRENT) break;
+            if (activeWebRuns.has(run2.runId)) {
+              logDeferredOnce(run2.runId, `  Deferred ${run2.runId} (an earlier claim of it is still settling on this runner)`);
+              continue;
+            }
             const runMode = run2.mode ?? "run";
             const isMobileOp = enableMobile && isMobileDeviceOp(run2);
             const discoveryKind = isMobileOp ? discoveryKindOf(run2.discoveryContext) : null;
@@ -13437,9 +13723,9 @@ async function startRunner(opts) {
               runWatchdog.start();
             }
             activeWebRuns.set(run2.runId, runAbort);
-            const runWritePolicy = (0, import_runner_core7.parseRunWritePolicy)(run2.runWritePolicy);
-            const runSignInSecrets = runWritePolicy ? (0, import_runner_core7.signInSecretsOf)({ ...run2.discoveryContext?.variableContext?.allTestVariables ?? {}, ...run2.testVariables ?? {} }) : [];
-            (0, import_runner_core7.withRunWritePolicyScope)(runWritePolicy, () => (0, import_runner_core8.withLocalGoogleScope)({ baseUrl: run2.baseUrl, runId: run2.runId }, () => executeRun(run2, opts, headers, requestLiveBrowserHeartbeat, (testCaseId) => {
+            const runWritePolicy = (0, import_runner_core9.parseRunWritePolicy)(run2.runWritePolicy);
+            const runSignInSecrets = runWritePolicy ? (0, import_runner_core9.signInSecretsOf)({ ...run2.discoveryContext?.variableContext?.allTestVariables ?? {}, ...run2.testVariables ?? {} }) : [];
+            (0, import_runner_core9.withRunWritePolicyScope)(runWritePolicy, () => (0, import_runner_core10.withLocalGoogleScope)({ baseUrl: run2.baseUrl, runId: run2.runId }, () => executeRun(run2, opts, headers, requestLiveBrowserHeartbeat, (testCaseId) => {
               if (mobilePlatform) {
                 mobileHealHold.set(testCaseId, { expiry: Date.now() + MOBILE_HEAL_HOLD_MS, platform: mobilePlatform });
               }
@@ -13447,11 +13733,11 @@ async function startRunner(opts) {
               runsCompleted++;
             }).catch((err) => {
               const abortReason = runAbort.signal.reason;
-              if ((0, import_runner_core7.isRunAbortError)(abortReason) && abortReason.reason === "shutdown") {
+              if ((0, import_runner_core9.isRunAbortError)(abortReason) && abortReason.reason === "shutdown") {
                 log.info(`Run ${run2.runId} was interrupted by runner shutdown.`);
                 return;
               }
-              if ((0, import_runner_core7.isSupersededRunAbort)(runAbort.signal)) {
+              if ((0, import_runner_core9.isSupersededRunAbort)(runAbort.signal)) {
                 log.info(`Run ${run2.runId} was superseded by a newer claim; this runner posted nothing more for it.`);
                 return;
               }
@@ -13489,7 +13775,7 @@ async function startRunner(opts) {
         const action = authRefusalAction({
           consecutive: consecutiveAuthRefusals,
           activeRuns,
-          cloud: process.env.RUNNER_CLOUD === "true"
+          cloud: IS_CLOUD
         });
         if (action === "exit") {
           log.fail(`${message} (the server refused it ${consecutiveAuthRefusals} times in a row)`);
@@ -13545,14 +13831,15 @@ async function checkRunnerLogin(serverUrl, token, fetchImpl = fetch) {
 
 // src/services/sign-in-capture.ts
 var import_browser_config3 = __toESM(require_browser_config());
+var import_google_local_signin = __toESM(require_google_local_signin());
 import { chromium } from "playwright";
 async function captureSignInInteractively(url, ready, opts = {}) {
   const target = new URL(url);
   let browser;
   try {
-    browser = await chromium.launch({ headless: false, ignoreDefaultArgs: ["--enable-automation"], channel: "chrome", env: (0, import_browser_config3.browserLaunchEnv)() });
+    browser = await chromium.launch({ headless: false, ignoreDefaultArgs: ["--enable-automation"], args: [...import_google_local_signin.SIGN_IN_WINDOW_ARGS], channel: "chrome", env: (0, import_browser_config3.browserLaunchEnv)() });
   } catch {
-    browser = await chromium.launch({ headless: false, ignoreDefaultArgs: ["--enable-automation"], env: (0, import_browser_config3.browserLaunchEnv)() });
+    browser = await chromium.launch({ headless: false, ignoreDefaultArgs: ["--enable-automation"], args: [...import_google_local_signin.SIGN_IN_WINDOW_ARGS], env: (0, import_browser_config3.browserLaunchEnv)() });
   }
   return captureFromBrowser(browser, target, ready, opts.timeoutMs ?? SIGN_IN_TIMEOUT_MS);
 }
@@ -13813,7 +14100,9 @@ async function superviseRunnerStart(argv, authTokenForChild) {
       stdio: "inherit",
       env: childEnv
     });
+    let signalled = false;
     const onSignal = (sig) => {
+      signalled = true;
       try {
         child.kill(sig);
       } catch {
@@ -13825,19 +14114,19 @@ async function superviseRunnerStart(argv, authTokenForChild) {
       process.removeListener("SIGINT", onSignal);
       process.removeListener("SIGTERM", onSignal);
       if (signal === "SIGINT" || signal === "SIGTERM") {
-        resolve3(0);
+        resolve3({ code: 0, signalled: true });
         return;
       }
-      resolve3(code ?? 1);
+      resolve3({ code: code ?? 1, signalled });
     });
   });
   console.log("\u{1F6E1}  Runner supervisor enabled \u2014 will auto-restart on crash/stuck exit");
   console.log("   (disable with --no-supervise or VALIDATE_RUNNER_SUPERVISE=0)");
   for (; ; ) {
     const startedAt = Date.now();
-    const code = await runOnce();
+    const { code, signalled } = await runOnce();
     const next = nextSupervisorAction(
-      { code, ranMs: Date.now() - startedAt, now: Date.now() },
+      { code, ranMs: Date.now() - startedAt, now: Date.now(), signalled },
       state2,
       { maxRestartsPerHour, minBackoffMs, maxBackoffMs }
     );
@@ -13918,7 +14207,7 @@ program.command("start").description("Start the local test runner").option("--to
     console.warn("\u26A0  --tunnel has no effect without --mobile (the mobile bridge it exposes only starts with --mobile). Ignoring --tunnel.");
   }
   {
-    const { hasLocalGoogleLogin, GOOGLE_LOGIN_COMMAND } = await import("./dist-DFNLMH6L.mjs");
+    const { hasLocalGoogleLogin, GOOGLE_LOGIN_COMMAND } = await import("./dist-52M5RDZ6.mjs");
     if (process.stdout.isTTY && !await hasLocalGoogleLogin()) {
       console.log(`Tip: for apps with "Continue with Google", sign in to Google once on this machine: ${GOOGLE_LOGIN_COMMAND}`);
     }
@@ -13948,7 +14237,7 @@ async function askLine(question) {
   }
 }
 program.command("google-login").description('Sign in to a TEST Google account once on this machine, for tests of apps with "Continue with Google"').option("--site <url...>", "The app address(es) this sign-in may be used for, e.g. https://app.example.com").option("--allow-file-storage", "Keep the sign-in in a plain file (only you can read it) when the system keychain is not available").option("--yes", "Confirm without asking that this is a dedicated test Google account").action(async (opts) => {
-  const { signInLocalGoogle, LOCAL_GOOGLE_WARNING, grantedSite, defaultStoreKind } = await import("./dist-DFNLMH6L.mjs");
+  const { signInLocalGoogle, LOCAL_GOOGLE_WARNING, grantedSite, defaultStoreKind } = await import("./dist-52M5RDZ6.mjs");
   console.log(LOCAL_GOOGLE_WARNING);
   if (!opts.yes) {
     const answer = await askLine('Is this a dedicated test Google account? Type "yes" to continue: ');
@@ -13983,7 +14272,7 @@ program.command("google-login").description('Sign in to a TEST Google account on
   }
 });
 program.command("google-allow-site <url>").description("Let the Google sign-in on this machine be used for one more app address").action(async (url) => {
-  const { allowLocalGoogleSites, grantedSite } = await import("./dist-DFNLMH6L.mjs");
+  const { allowLocalGoogleSites, grantedSite } = await import("./dist-52M5RDZ6.mjs");
   const site = grantedSite(url);
   if (!site) {
     console.error("\u2717  Not a web address: give it like https://app.example.com");
@@ -13997,7 +14286,7 @@ program.command("google-allow-site <url>").description("Let the Google sign-in o
   console.log(`\u2713  Tests on this machine may now use the Google sign-in for: ${sites.join(", ")}`);
 });
 program.command("google-logout").description("Forget the Google sign-in saved on this machine").action(async () => {
-  const { deleteLocalGoogleLogin } = await import("./dist-DFNLMH6L.mjs");
+  const { deleteLocalGoogleLogin } = await import("./dist-52M5RDZ6.mjs");
   await deleteLocalGoogleLogin();
   console.log("\u2713  Google sign-in removed from this machine");
 });