@validate.qa/runner 1.0.30 → 1.0.32

package/dist/cli.js

@@ -2344,40 +2344,40 @@ var init_plans = __esm({
         type: "extra_projects",
         label: "Extra Projects",
         description: "Add more projects to your workspace",
-        priceLabel: "$19.99 / month",
-        monthlyPriceUsd: 19.99,
+        priceLabel: "$24.99 / month",
+        monthlyPriceUsd: 24.99,
         limitIncrement: 1
       },
       extra_tests: {
         type: "extra_tests",
         label: "Extra Tests",
         description: "Increase tests per project limit",
-        priceLabel: "$4.99 / month",
-        monthlyPriceUsd: 4.99,
-        limitIncrement: 100
+        priceLabel: "$12.99 / month",
+        monthlyPriceUsd: 12.99,
+        limitIncrement: 50
       },
       extra_suite_runs: {
         type: "extra_suite_runs",
         label: "Extra Suite Runs",
         description: "Increase daily suite run limit",
-        priceLabel: "$7.99 / month",
-        monthlyPriceUsd: 7.99,
+        priceLabel: "$12.99 / month",
+        monthlyPriceUsd: 12.99,
         limitIncrement: 5
       },
       extra_discovery_runs: {
         type: "extra_discovery_runs",
         label: "Extra Discovery Runs",
         description: "Increase discovery run limit",
-        priceLabel: "$6.99 / month",
-        monthlyPriceUsd: 6.99,
+        priceLabel: "$19.99 / month",
+        monthlyPriceUsd: 19.99,
         limitIncrement: 5
       },
       extra_test_executions: {
         type: "extra_test_executions",
         label: "Extra Test Executions",
         description: "+100 manual test runs per day, on top of your plan\u2019s daily dashboard run budget",
-        priceLabel: "$9.99 / month",
-        monthlyPriceUsd: 9.99,
+        priceLabel: "$14.99 / month",
+        monthlyPriceUsd: 14.99,
         limitIncrement: 100
       }
     };
@@ -2402,16 +2402,16 @@ var init_plans = __esm({
     PLAN_DEFINITIONS = {
       standard: {
         code: "standard",
-        label: "Standard Trial",
+        label: "Standard",
         priceLabel: "Free",
         monthlyPriceUsd: 0,
         billingModel: "free",
-        summary: "For curious developers. Get the full platform - MCP, Discovery, Voice, self-heal - with enough headroom for one real project.",
+        summary: "For curious developers. Get the full platform - MCP, Discovery, Voice, self-heal - with a starter budget for one real project.",
         maxProjects: 1,
-        maxTestsPerProject: 100,
+        maxTestsPerProject: 20,
         maxSuiteRunsPerDay: 1,
-        maxTestExecutionsPerDay: 50,
-        // 25 regression / 25 manual at the default 50/50 split
+        maxTestExecutionsPerDay: 10,
+        // 5 regression / 5 manual at the default 50/50 split
         maxDiscoveryRunsPerDay: 1,
         // Per day
         maxConcurrentDiscoveries: 1,
@@ -2493,14 +2493,14 @@ var init_plans = __esm({
     };
     TRIAL_DURATION_DAYS = 30;
     CREDIT_PRICES_CENTS = {
-      discovery_run: 50,
+      discovery_run: 200,
+      // $2.00
+      suite_run: 50,
       // $0.50
-      suite_run: 10,
-      // $0.10
-      test_run: 10,
-      // $0.10
-      heal: 10
-      // $0.10
+      test_run: 15,
+      // $0.15
+      heal: 75
+      // $0.75
     };
     AI_CREDIT_MARGIN = 1.5;
     CREDIT_PACKS_CENTS = [2e3, 5e3, 1e4];
@@ -5001,6 +5001,29 @@ var require_mobile_observation = __commonJS({
   }
 });
 
+// ../runner-core/dist/services/mobile/mobile-keyboard.js
+var require_mobile_keyboard = __commonJS({
+  "../runner-core/dist/services/mobile/mobile-keyboard.js"(exports2) {
+    "use strict";
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.shouldRetryTapAfterKeyboardDismiss = shouldRetryTapAfterKeyboardDismiss;
+    exports2.dismissKeyboardForRetry = dismissKeyboardForRetry;
+    var EDITABLE_FOCUSED_ROLE_RE = /(EditText|TextField|SecureTextField|SearchField|TextView)$/i;
+    var OUTSIDE_VIEWPORT_ERROR_RE = /(outside|out of).*?(bounds|viewport|visible|screen|window)|coordinate.*?(invalid|outside)/i;
+    function shouldRetryTapAfterKeyboardDismiss(error2, elements) {
+      if (!error2 || !OUTSIDE_VIEWPORT_ERROR_RE.test(error2))
+        return false;
+      return elements.some((el) => el.focused === true && EDITABLE_FOCUSED_ROLE_RE.test(el.role));
+    }
+    async function dismissKeyboardForRetry(driver) {
+      if (typeof driver.dismissKeyboard === "function") {
+        return driver.dismissKeyboard();
+      }
+      return driver.back();
+    }
+  }
+});
+
 // ../runner-core/dist/utils/scrub-credentials.js
 var require_scrub_credentials = __commonJS({
   "../runner-core/dist/utils/scrub-credentials.js"(exports2) {
@@ -61982,6 +62005,7 @@ var require_mobile_explorer = __commonJS({
     var mobile_source_parser_js_1 = require_mobile_source_parser();
     var mobile_observation_js_1 = require_mobile_observation();
     var mobile_boundary_js_1 = require_mobile_boundary();
+    var mobile_keyboard_js_1 = require_mobile_keyboard();
     var credential_tools_js_1 = require_credential_tools();
     var verification_inbox_js_1 = require_verification_inbox();
     var inbox_tools_js_1 = require_inbox_tools();
@@ -61991,6 +62015,7 @@ var require_mobile_explorer = __commonJS({
     var MAX_RECENT_EXCHANGES = 24;
     var OBSERVATION_MAX_ELEMENTS = 50;
     var NO_SNAPSHOT_NUDGE_THRESHOLD = 4;
+    var EXTERNAL_APP_RECOVERY_ATTEMPTS = 2;
     var MOBILE_SNAPSHOT_TOOL = {
       type: "function",
       function: {
@@ -62556,9 +62581,46 @@ ${existingScreens.slice(0, 100).map((s) => `- ${s.screenId}${s.name ? ` "${s.nam
               externalOwner: boundary.owner
             };
           }
-          log2(`   Relaunch still outside target app (${recoveredBoundary.owner}); no screen recorded.`);
+          let lastExternalOwner = recoveredBoundary.owner;
+          for (let attempt = 1; attempt <= EXTERNAL_APP_RECOVERY_ATTEMPTS; attempt += 1) {
+            try {
+              await driver.launchApp();
+              const retrySnap = await driver.snapshot();
+              const retryRecovered = buildResolved(retrySnap.xml, retrySnap.windowSize, retrySnap.screenSignal);
+              if (!retryRecovered)
+                continue;
+              const retryBoundary = (0, mobile_boundary_js_1.classifyMobileScreenBoundary)(retryRecovered.signal, targetAppId, platform3);
+              latest = retryRecovered;
+              lastSnapshotIteration = iterationForObservation;
+              if (retryBoundary.kind === "target" || retryBoundary.kind === "unknown") {
+                const screenId = ingestSnapshot(retryRecovered, iterationForObservation);
+                captureScreenshot(retrySnap.screenshot, screenId);
+                log2(`   Recovered target app after ${attempt} additional activation attempt(s).`);
+                return {
+                  observation: retryRecovered.observation,
+                  screenId,
+                  externalBlocked: true,
+                  externalOwner: boundary.owner
+                };
+              }
+              if (retryBoundary.kind === "transient_external") {
+                log2(`   Recovery surfaced system overlay ${retryBoundary.owner}; not adding it to target-app survey evidence.`);
+                return {
+                  observation: `${retryRecovered.observation}${(0, mobile_boundary_js_1.mobileBoundaryNote)(retryBoundary)}`,
+                  screenId: null,
+                  externalBlocked: true,
+                  transientExternal: true,
+                  externalOwner: boundary.owner
+                };
+              }
+              lastExternalOwner = retryBoundary.owner;
+            } catch (err) {
+              log2(`   Target app recovery attempt ${attempt} failed: ${err instanceof Error ? err.message : String(err)}`);
+            }
+          }
+          log2(`   Relaunch still outside target app (${lastExternalOwner}); no screen recorded.`);
           return {
-            observation: `(left target app ${boundary.targetAppId} for ${boundary.owner}; relaunch still showed ${recoveredBoundary.owner}, so no screen was recorded)`,
+            observation: `(left target app ${boundary.targetAppId} for ${boundary.owner}; relaunch still showed ${lastExternalOwner}, so no screen was recorded)`,
             screenId: null,
             externalBlocked: true,
             externalOwner: boundary.owner
@@ -62936,7 +62998,19 @@ Exploration complete: ${summary}`);
           const fromScreenId = state2.getCurrentScreenId();
           const boundaryBeforeAction = currentBoundary();
           const startedOutsideTarget = boundaryBeforeAction.kind !== "target" && boundaryBeforeAction.kind !== "unknown";
-          const actionResult = await driver.tap(resolved.bounds);
+          let actionResult = await driver.tap(resolved.bounds);
+          if (!actionResult.ok && (0, mobile_keyboard_js_1.shouldRetryTapAfterKeyboardDismiss)(actionResult.error, latest()?.screen.elements ?? [])) {
+            log2("   Tap target was outside the visible viewport while an input was focused; dismissing keyboard and retrying once.");
+            const dismissResult = await (0, mobile_keyboard_js_1.dismissKeyboardForRetry)(driver);
+            const retryResult = await driver.tap(resolved.bounds);
+            actionResult = retryResult.ok ? retryResult : {
+              ...retryResult,
+              error: retryResult.error ? `${retryResult.error} (retry after keyboard dismiss also failed)` : "Tap retry after keyboard dismiss failed",
+              source: retryResult.source ?? dismissResult.source,
+              screenshot: retryResult.screenshot ?? dismissResult.screenshot,
+              screenSignal: retryResult.screenSignal ?? dismissResult.screenSignal
+            };
+          }
           const absorbed = await absorbActionResult(actionResult, "mobile_tap");
           const { observation, screenId } = absorbed;
           if (!startedOutsideTarget && !absorbed.externalBlocked && !absorbed.transientExternal) {
@@ -64542,6 +64616,78 @@ var require_discover_ai_planner = __commonJS({
     function meaningfulTokens(name) {
       return name.toLowerCase().split(/[\s\--_]+/).filter((t) => t.length > 2 && !JOURNEY_MATCH_STOPWORDS.has(t));
     }
+    function textIncludesCredentialField(text, field) {
+      return field === "email" ? /\b(e-?mail|username|user\s*name|login\s*id)\b/i.test(text) : /\bpassword|passcode|pin\b/i.test(text);
+    }
+    function textIncludesCredentialSubmit(text) {
+      return /\b(click|tap|press|submit|send)\b[^.]{0,80}\b(sign[ -]?in|signin|log[ -]?in|login|submit|continue)\b/i.test(text) || /\b(sign[ -]?in|signin|log[ -]?in|login|submit|continue)\b[^.]{0,80}\b(button|cta|form)\b/i.test(text) || /\b(submit|sign[ -]?in|signin|log[ -]?in|login)\b[^.]{0,80}\b(test\s+)?credentials\b/i.test(text) || /\b(test\s+)?credentials\b[^.]{0,80}\b(submit|sign[ -]?in|signin|log[ -]?in|login)\b/i.test(text);
+    }
+    function targetPagesHaveCredentialControls(siteMap, targetPages) {
+      const targetSet = new Set(targetPages.map(normalizePlannerRoute));
+      let hasEmail = false;
+      let hasPassword = false;
+      let hasSubmit = false;
+      for (const page of siteMap.pages) {
+        if (!targetSet.has(normalizePlannerRoute(page.route)))
+          continue;
+        for (const element of page.elements ?? []) {
+          const label = [
+            element.label,
+            element.role,
+            element.testId,
+            element.name
+          ].filter(Boolean).join(" ");
+          if (!label)
+            continue;
+          if (textIncludesCredentialField(label, "email"))
+            hasEmail = true;
+          if (textIncludesCredentialField(label, "password"))
+            hasPassword = true;
+          if (/\b(sign[ -]?in|signin|log[ -]?in|login|submit|continue)\b/i.test(label) && !/\b(google|apple|facebook|github|sso|oauth|magic\s*link)\b/i.test(label)) {
+            hasSubmit = true;
+          }
+        }
+      }
+      return hasEmail && hasPassword && hasSubmit;
+    }
+    function journeyCoversCredentialSubmit(journey) {
+      if (!journey)
+        return false;
+      const text = [
+        journey.name,
+        journey.expectedOutcome,
+        ...journey.steps ?? [],
+        ...journey.provenCommands ?? []
+      ].join(" ");
+      const hasCredentialPair = /\bcredentials\b/i.test(text) || textIncludesCredentialField(text, "email") && textIncludesCredentialField(text, "password");
+      return hasCredentialPair && textIncludesCredentialSubmit(text);
+    }
+    function scenarioAuthCredentialPolicy(scenario, steps) {
+      const text = [
+        scenario.name,
+        scenario.goal,
+        scenario.type,
+        scenario.variant,
+        ...steps.map((step) => step.action)
+      ].filter(Boolean).join(" ");
+      if (!/\b(auth|authentication|sign[ -]?in|signin|log[ -]?in|login|session)\b/i.test(text)) {
+        return { needsCredentialEvidence: false, needsSubmitStep: false, reason: "" };
+      }
+      if (/\b(log[ -]?out|logout|sign[ -]?out|signout|forgot|reset|recover|magic\s*link|otp|mfa|2fa|sso|google|apple|facebook)\b/i.test(text)) {
+        return { needsCredentialEvidence: false, needsSubmitStep: false, reason: "" };
+      }
+      if (!/\b(credential|e-?mail|username|user\s*name|password|valid|invalid|empty|required|wrong|case|special|leading|trailing)\b/i.test(text)) {
+        return { needsCredentialEvidence: false, needsSubmitStep: false, reason: "" };
+      }
+      const uiOnly = /\b(mask|masked|visibility|show password|hide password|toggle|keyboard|keypad|max(?:imum)?\s*length|field focus|autofill)\b/i.test(text);
+      const negative = /\b(invalid|empty|required|missing|wrong|error|validation|case|special|leading|trailing)\b/i.test(text);
+      const happy = /\b(happy|valid\s+credentials|success|successful)\b/i.test(text) || scenario.type === "HAPPY_PATH" || scenario.variant === "happy";
+      return {
+        needsCredentialEvidence: true,
+        needsSubmitStep: !uiOnly && (happy || negative),
+        reason: uiOnly ? "credential UI scenario" : negative ? "credential validation scenario" : "credential sign-in scenario"
+      };
+    }
     function truncateOutcome(text, limit) {
       const normalized = text.replace(/\s+/g, " ").trim();
       if (normalized.length <= limit)
@@ -65307,6 +65453,18 @@ Each entry is exactly one of:
         if (matchSource === "route") {
           warnings.push(`"${sc.name}" matched to journey "${matchingSuggestion.name}" by route overlap only - evidence may be weak`);
         }
+        const authCredentialPolicy = scenarioAuthCredentialPolicy(sc, steps);
+        if (authCredentialPolicy.needsCredentialEvidence) {
+          const hasCredentialEvidence = targetPagesHaveCredentialControls(siteMap, sc.targetPages) || journeyCoversCredentialSubmit(matchingSuggestion);
+          if (!hasCredentialEvidence) {
+            warnings.push(`Rejected "${sc.name}": ${authCredentialPolicy.reason} lacks observed email/password/sign-in controls or a recorded credential journey`);
+            continue;
+          }
+          if (authCredentialPolicy.needsSubmitStep && !steps.some((step) => textIncludesCredentialSubmit(step.action)) && !journeyCoversCredentialSubmit(matchingSuggestion)) {
+            warnings.push(`Rejected "${sc.name}": ${authCredentialPolicy.reason} does not include a concrete sign-in submit step`);
+            continue;
+          }
+        }
         const evidence = (0, discover_planner_js_1.extractScenarioEvidence)(
           siteMap.pages,
           sc.targetPages,
@@ -65852,6 +66010,25 @@ var require_mobile_discovery_prompts = __commonJS({
     function targetAppScreens(graph, appId) {
       return [...graph.screens.values()].filter((state2) => isTargetAppScreenId(state2.screenId, appId));
     }
+    function isGenericNonFeatureScreen(state2) {
+      const type = state2.screenType?.trim().toLowerCase();
+      if (type === "error" || type === "permission")
+        return true;
+      if (type && type !== "unknown")
+        return false;
+      const actionableCount = state2.elements.filter((el) => el.actionable).length;
+      if (actionableCount > 0)
+        return false;
+      const evidenceText = [
+        state2.screenName,
+        state2.screenType,
+        ...state2.observations ?? []
+      ].filter((value) => typeof value === "string" && value.trim().length > 0).join(" ");
+      return /\b(empty|loading|blank|spinner|intermediate|placeholder|no actionable)\b/i.test(evidenceText);
+    }
+    function plannableTargetAppScreens(graph, appId) {
+      return targetAppScreens(graph, appId).filter((state2) => !isGenericNonFeatureScreen(state2));
+    }
     exports2.MOBILE_SURVEY_SYSTEM_PROMPT = `You are a feature analyst for a native mobile application (iOS or Android). You receive evidence from an AI explorer that mapped the app's screens by tapping, typing, and swiping through the live UI. Your job is to organize screens into meaningful feature groups.
 
 ## Output Discipline
@@ -65871,8 +66048,8 @@ Return ONLY one valid JSON object matching the schema below. Do NOT include <thi
 5. CRUD screens for the same entity belong together
 6. Do NOT merge screens into one feature just because they serve a similar broader goal. Treat areas as separate features when the evidence shows separate primary navigation destinations (e.g. separate tab-bar items or drawer links), separate screen families for distinct entities, or different CRUD entities/forms. Keep screens together when they share one navigational area and operate on the same entity (e.g. a list screen, its filter/sort sheet, and its detail screen all belong together).
 7. Feature descriptions MUST reference actual element labels / accessibility-ids from the evidence
-8. Do NOT create standalone features for generic error / empty screens (network-error, permission-denied). If a feature screen is broken or crashes, keep it in its intended feature and note the failure in the description.
-9. COVER EVERY SCREEN: every explored screen except generic error / permission screens MUST appear in exactly one feature group's routes. Do not leave screens ungrouped \u2014 a screen the explorer reached is part of SOME feature. Attach an ambiguous screen to its most closely related feature and note the ambiguity in that feature's description. Sign-in / sign-up / forgot-password screens form an "Authentication" group even when they were only reached via links from other screens.
+8. Do NOT create standalone features for generic error / empty / loading / intermediate screens (network-error, permission-denied, blank WebView, spinner-only loading). If a feature screen is broken or crashes, keep it in its intended feature and note the failure in the description. If a screen has no actionable controls and only says it is empty/loading/intermediate, omit it from featureGroups.routes unless it is the only evidence for a real product feature.
+9. COVER EVERY PRODUCT SCREEN: every explored product screen except generic error / permission / empty / loading / intermediate screens MUST appear in exactly one feature group's routes. Do not leave usable screens ungrouped \u2014 a screen the explorer reached is part of SOME feature. Attach an ambiguous usable screen to its most closely related feature and note the ambiguity in that feature's description. Sign-in / sign-up / forgot-password screens form an "Authentication" group even when they were only reached via links from other screens.
 10. LOGGED-OUT vs LOGGED-IN SEPARATION: screens shown BEFORE the user is signed in (splash, landing/welcome, theme or language pickers, walkthroughs, sign-up, sign-in, forgot-password, demo/preview screens) must NEVER share a feature group with the signed-in app. Put sign-in / sign-up / forgot-password in "Authentication" (rule 4) and the remaining pre-login screens in an "Onboarding" group. Features named after signed-in areas (feeds, dashboards, tabs, settings) must contain ONLY screens reached after authentication. A pre-login flow is a linear sequence, not a navigation destination \u2014 do not let it swallow the app's main features.
 
 ## Output JSON Schema
@@ -65972,6 +66149,7 @@ Return ONLY one valid JSON object matching the schema below. Do NOT include <thi
 ## Coverage Strategy
 - For every form: at least 1 HAPPY_PATH (submit valid data AND verify durable result per rule 12) + 1 EDGE_CASE (empty/invalid submission)
 - For auth flows: sign-in happy path (verify the target screen AND a concrete signed-in/session signal per rule 13) + validation (wrong password, empty fields)
+- For credential sign-in flows: only plan credential scenarios when evidence shows the credential path itself \u2014 an email/username field, a password field, and a native Sign In/Login/Submit control on the target screen, or an Explorer-Recorded Journey that typed those fields and submitted them. Do NOT treat Google/Apple/Facebook/SSO buttons, magic-link entry, logout menus, profile menus, or already-signed-in screens as evidence for credential sign-in. If the explorer only observed signed-in menu/logout/session surfaces, plan session/logout scenarios only; surface missing credential coverage as a gap instead of inventing credential sign-in variants.
 - For CRUD: each scenario MUST own the entity it operates on. Read/search/update/delete/cancel-on-existing/view-existing scenarios MUST include a create step earlier in the same scenario (or declare an immutable seed fixture by name). Never assume a record from prior runs or sibling tests exists. When create/delete are tightly coupled, bundle into a single USER_JOURNEY: create \u2192 verify \u2192 delete \u2192 verify removal.
 - For AI/async features (Generate, Analyze, Process, Import, Sync): happy path MUST complete the flow per rule 12 - never stop at "button tapped" or "sheet opened"
 - For navigation: multi-screen user journeys within the feature scope (do NOT drift into unrelated features)
@@ -66138,7 +66316,7 @@ ${targetBits.length > 0 ? targetBits.join(" ") : "native mobile app"}`);
         sections.push(`## Feature: ${context.featureName}
 SCOPE: this is a feature-focused deep run. Plan scenarios ONLY for the "${context.featureName}" feature \u2014 its screens, forms, and flows. Screens belonging to other features are navigation context / prerequisites only; do NOT plan scenarios whose primary goal exercises another feature.`);
       }
-      const orderedScreens = targetAppScreens(graph, context.appId).sort((a, b) => a.firstSeenIteration - b.firstSeenIteration);
+      const orderedScreens = plannableTargetAppScreens(graph, context.appId).sort((a, b) => a.firstSeenIteration - b.firstSeenIteration);
       const includedScreenIds = new Set(orderedScreens.map((state2) => state2.screenId));
       sections.push(`## Screens Discovered (${orderedScreens.length})`);
       for (const state2 of orderedScreens) {
@@ -66247,7 +66425,7 @@ ${constraints.join("\n")}`);
       const now = /* @__PURE__ */ new Date();
       const idByScreen = /* @__PURE__ */ new Map();
       let pageSeq = 0;
-      const orderedScreens = targetAppScreens(graph, meta.appId).sort((a, b) => a.firstSeenIteration - b.firstSeenIteration);
+      const orderedScreens = plannableTargetAppScreens(graph, meta.appId).sort((a, b) => a.firstSeenIteration - b.firstSeenIteration);
       for (const state2 of orderedScreens) {
         idByScreen.set(state2.screenId, `mpage-${pageSeq++}`);
       }
@@ -66308,7 +66486,7 @@ ${constraints.join("\n")}`);
     }
     function buildMobileFeatureGroupsFromGraph(graph, appId) {
       const groups = /* @__PURE__ */ new Map();
-      const orderedScreens = targetAppScreens(graph, appId).filter((state2) => state2.screenType?.toLowerCase() !== "error").sort((a, b) => a.firstSeenIteration - b.firstSeenIteration);
+      const orderedScreens = plannableTargetAppScreens(graph, appId).sort((a, b) => a.firstSeenIteration - b.firstSeenIteration);
       const includedScreenIds = new Set(orderedScreens.map((state2) => state2.screenId));
       for (const state2 of orderedScreens) {
         const screenTypeLower = state2.screenType?.toLowerCase();
@@ -66355,7 +66533,7 @@ ${constraints.join("\n")}`);
         return [];
       if (input.featureName?.trim())
         return [];
-      const orderedScreens = targetAppScreens(input.graph, input.appId).filter((state2) => state2.screenType?.toLowerCase() !== "error").filter((state2) => state2.visited || state2.firstSeenIteration === 0).sort((a, b) => a.firstSeenIteration - b.firstSeenIteration);
+      const orderedScreens = plannableTargetAppScreens(input.graph, input.appId).filter((state2) => state2.visited || state2.firstSeenIteration === 0).sort((a, b) => a.firstSeenIteration - b.firstSeenIteration);
       if (orderedScreens.length === 0)
         return [];
       const entryScreenId = orderedScreens[0].screenId;
@@ -66557,9 +66735,11 @@ var require_mobile_generator = __commonJS({
     var mobile_source_parser_js_2 = require_mobile_source_parser();
     var mobile_observation_js_1 = require_mobile_observation();
     var mobile_boundary_js_1 = require_mobile_boundary();
+    var mobile_keyboard_js_1 = require_mobile_keyboard();
     var MAX_SCENARIO_ITERATIONS = 30;
     var MAX_CONSECUTIVE_INFRA_FAILURES = 3;
     var MAX_RECENT_EXCHANGES = 24;
+    var EXTERNAL_APP_RECOVERY_ATTEMPTS = 2;
     var OBSERVATION_MAX_ELEMENTS = 50;
     function finalizeAction(input) {
       return { ...input, url: "", selector: input.selector ?? "" };
@@ -66975,10 +67155,47 @@ Start by calling mobile_snapshot, then execute the steps above \u2014 the minimu
               externalOwner: boundary.owner
             };
           }
-          log2(`  relaunch still outside target app (${recoveredBoundary.owner}); no target-app step recorded.`);
+          let lastExternalOwner = recoveredBoundary.owner;
+          let lastRecovered = recovered;
+          for (let attempt = 1; attempt <= EXTERNAL_APP_RECOVERY_ATTEMPTS; attempt += 1) {
+            try {
+              await driver.launchApp();
+              const retrySnap = await driver.snapshot();
+              const retryRecovered = buildResolved(retrySnap.xml, retrySnap.screenSignal, retrySnap.windowSize);
+              if (!retryRecovered)
+                continue;
+              lastRecovered = retryRecovered;
+              const retryBoundary = (0, mobile_boundary_js_1.classifyMobileScreenBoundary)(retryRecovered.signal, targetAppId, platform3);
+              setLatest(retryRecovered);
+              if ((0, mobile_boundary_js_1.isTargetLikeMobileBoundary)(retryBoundary)) {
+                emitScreenshot(retrySnap.screenshot);
+                log2(`  recovered target app after ${attempt} additional activation attempt(s).`);
+                return {
+                  resolved: retryRecovered,
+                  observation: retryRecovered.observation,
+                  externalBlocked: true,
+                  externalOwner: boundary.owner
+                };
+              }
+              if (retryBoundary.kind === "transient_external") {
+                log2(`  recovery surfaced system overlay ${retryBoundary.owner}; not recording it as a target-app step.`);
+                return {
+                  resolved: retryRecovered,
+                  observation: `${retryRecovered.observation}${(0, mobile_boundary_js_1.mobileBoundaryNote)(retryBoundary)}`,
+                  externalBlocked: true,
+                  transientExternal: true,
+                  externalOwner: boundary.owner
+                };
+              }
+              lastExternalOwner = retryBoundary.owner;
+            } catch (err) {
+              log2(`  target app recovery attempt ${attempt} failed: ${err instanceof Error ? err.message : String(err)}`);
+            }
+          }
+          log2(`  relaunch still outside target app (${lastExternalOwner}); no target-app step recorded.`);
           return {
-            resolved: recovered,
-            observation: `(left target app ${boundary.targetAppId} for ${boundary.owner}; relaunch still showed ${recoveredBoundary.owner}, so no target-app step was recorded)`,
+            resolved: lastRecovered,
+            observation: `(left target app ${boundary.targetAppId} for ${boundary.owner}; relaunch still showed ${lastExternalOwner}, so no target-app step was recorded)`,
             externalBlocked: true,
             externalOwner: boundary.owner
           };
@@ -67192,7 +67409,19 @@ ${statePacket}` },
             return unknownRef(toolArgs.ref);
           const beforeScreenName = screenName();
           const before = latest();
-          const result = await driver.tap(element.bounds);
+          let result = await driver.tap(element.bounds);
+          if (!result.ok && (0, mobile_keyboard_js_1.shouldRetryTapAfterKeyboardDismiss)(result.error, before?.screen.elements ?? [])) {
+            log2("  tap target was outside the visible viewport while an input was focused; dismissing keyboard and retrying once.");
+            const dismissResult = await (0, mobile_keyboard_js_1.dismissKeyboardForRetry)(driver);
+            const retryResult = await driver.tap(element.bounds);
+            result = retryResult.ok ? retryResult : {
+              ...retryResult,
+              error: retryResult.error ? `${retryResult.error} (retry after keyboard dismiss also failed)` : "Tap retry after keyboard dismiss failed",
+              source: retryResult.source ?? dismissResult.source,
+              screenshot: retryResult.screenshot ?? dismissResult.screenshot,
+              screenSignal: retryResult.screenSignal ?? dismissResult.screenSignal
+            };
+          }
           const absorbed = await absorbObservation(result.source, result.screenSignal, latest()?.screen.windowSize ?? null, result.screenshot, "mobile_tap");
           if (shouldRecordAction(result, absorbed) && changedScreen(before, absorbed)) {
             recordAction({
@@ -67448,7 +67677,7 @@ ${statePacket}` },
       "react-root",
       "application"
     ]);
-    var STRUCTURAL_ASSERT_ID_RE = /^(?:step[-_]\d+|(?:auth|form|wizard)[-_]?step(?:[-_]\d+)?|(?:main[-_]?content|root|app[-_]?root|__next|react[-_]?root|application|content|container|wrapper|webview|layout|view|screen|page)(?:[-_]\d+)?)$/i;
+    var STRUCTURAL_ASSERT_ID_RE = /^(?:skip\s*to\s*main\s*content|skip[-_]?to[-_]?main[-_]?content|step[-_]\d+|(?:auth|form|wizard)[-_]?step(?:[-_]\d+)?|(?:main[-_]?content|root|app[-_]?root|__next|react[-_]?root|application|content|container|wrapper|webview|layout|view|screen|page)(?:[-_]\d+)?)$/i;
     function locatorLocalName(value) {
       const trimmed = value.trim();
       const withoutStrategy = trimmed.startsWith("id=") ? trimmed.slice(3) : trimmed.startsWith("~") ? trimmed.slice(1) : trimmed;
@@ -67528,6 +67757,88 @@ ${statePacket}` },
       }));
       return true;
     }
+    function scenarioText(scenario) {
+      return [
+        scenario.name,
+        scenario.goal,
+        ...scenario.steps.flatMap((step) => [step.action, step.target, step.hint]),
+        ...scenario.expectedOutcomes.flatMap((outcome) => [outcome.description, outcome.hint])
+      ].filter((value) => typeof value === "string" && value.trim().length > 0).join(" ").toLowerCase();
+    }
+    function actionText(action) {
+      const bundle = action.metadata.locatorBundle;
+      return [
+        action.type,
+        action.selector,
+        action.value,
+        action.innerText,
+        action.metadata.targetLabel,
+        bundle?.text,
+        bundle?.contentDesc,
+        bundle?.accessibilityId,
+        bundle?.resourceId,
+        bundle?.className,
+        bundle?.xpath
+      ].filter((value) => typeof value === "string" && value.trim().length > 0).join(" ").toLowerCase();
+    }
+    function scenarioIntentMismatchReason(scenario, actions) {
+      const text = scenarioText(scenario);
+      const isCredentialSignIn = /\b(sign\s*in|log\s*in|login|authenticate|auth)\b/.test(text) && /\b(email|e-mail|password|credential|valid credentials?)\b/.test(text) && !/\b(reset|forgot|recover|logout|log\s*out|sign\s*out)\b/.test(text);
+      const typedEmailIndexes = [];
+      const typedPasswordIndexes = [];
+      actions.forEach((action, index) => {
+        if (action.type !== "TYPE")
+          return;
+        const textForAction = actionText(action);
+        if (/\b(email|e-mail|username|user name|login)\b|\{\{test_user_email\}\}/i.test(textForAction)) {
+          typedEmailIndexes.push(index);
+        }
+        if (/\b(password|passcode|pin)\b|\{\{test_user_password\}\}/i.test(textForAction)) {
+          typedPasswordIndexes.push(index);
+        }
+      });
+      const lastCredentialIndex = Math.max(...typedEmailIndexes, ...typedPasswordIndexes);
+      const hasAnyCredentialEntry = Number.isFinite(lastCredentialIndex);
+      const submitAfterCredentials = actions.some((action, index) => {
+        if (action.type !== "TAP" || index <= lastCredentialIndex)
+          return false;
+        const textForAction = actionText(action);
+        if (!/\b(sign\s*in|log\s*in|login|continue|submit)\b/.test(textForAction))
+          return false;
+        return !/\b(with\s+(email|e-mail|google|facebook|apple)|email\s+form|showemailformbtn)\b/i.test(textForAction);
+      });
+      const isAuthLikeScenario = /\b(sign(?:ed)?\s*in|log(?:ged)?\s*in|login|authenticate|auth|credential|email|e-mail|password)\b/.test(text);
+      if (isAuthLikeScenario && hasAnyCredentialEntry && !submitAfterCredentials) {
+        return "credential fields were filled but no sign-in submit tap was recorded after them";
+      }
+      const uiOnlyCredentialScenario = /\b(mask|masked|visibility|show password|hide password|toggle|keyboard|keypad|max(?:imum)?\s*length|field focus|autofill)\b/.test(text);
+      const emptyFieldValidationScenario = /\b(empty|required|missing|blank)\b/.test(text);
+      const sessionLifecycleScenario = /\b(logout|log\s*out|sign\s*out|session persistence|remain(?:s)? signed in|remember me)\b/.test(text);
+      const loginTapWithoutCredentialPath = actions.some((action) => {
+        if (action.type !== "TAP")
+          return false;
+        const textForAction = actionText(action);
+        if (/\b(logout|log\s*out|sign\s*out)\b/.test(textForAction))
+          return false;
+        return /\b(sign\s*in|log\s*in|login)\b/.test(textForAction);
+      });
+      if (loginTapWithoutCredentialPath && !hasAnyCredentialEntry && !uiOnlyCredentialScenario && !emptyFieldValidationScenario && (sessionLifecycleScenario || /\b(valid credentials?|happy path|successful sign\s*in|successful login)\b/.test(text))) {
+        return "auth/session scenario tapped a login or sign-in control without recording a credential path";
+      }
+      if (!isCredentialSignIn)
+        return null;
+      const typedEmail = typedEmailIndexes.length > 0;
+      const typedPassword = typedPasswordIndexes.length > 0;
+      const tappedSubmit = submitAfterCredentials;
+      if (typedEmail && typedPassword && tappedSubmit)
+        return null;
+      const missing = [
+        typedEmail ? null : "email/username entry",
+        typedPassword ? null : "password entry",
+        tappedSubmit ? null : "sign-in submit tap"
+      ].filter((value) => value !== null);
+      return `credential sign-in scenario did not record ${missing.join(", ")}`;
+    }
     function actionCycleKey(action) {
       return `${action.type}|${action.selector}|${action.value ?? ""}`;
     }
@@ -67581,6 +67892,11 @@ ${statePacket}` },
       if (actions.length < beforeContainerDrop) {
         log2(`  dropped ${beforeContainerDrop - actions.length} bare-container tap step(s) (no identity \u2014 un-replayable ambient taps).`);
       }
+      const intentMismatch = scenarioIntentMismatchReason(scenario, actions);
+      if (intentMismatch) {
+        log2(`  skipped scenario "${scenario.name}": ${intentMismatch}.`);
+        return null;
+      }
       const floorAppended = appendHybridFloor(actions, recording, platform3);
       if (floorAppended) {
         log2("  appended hybrid durable-outcome floor (landing-screen ASSERT_VISIBLE).");
@@ -68278,7 +68594,8 @@ Reason over steps + error + tree + registry and return working healed steps. Do
 2. STEP RESULTS: which steps passed before the failure.
 3. TREE: does the current screen match what the failed step expects?
 3b. STALE EMPTY-STATE ASSERT: a failing assert on one-time / data-dependent UI (empty-state CTAs, first-run prompts, onboarding banners) is NOT a locator problem \u2014 the element is gone because the account now has data. REPLACE the assertion with a durable landing-screen anchor (tab label, header, nav bar) that proves the same outcome (verdict fix).
-4. ENTRY-SCREEN DRIFT ("unexpected screen"/"screen drift"): the app started on a DIFFERENT screen than recorded; the fix is usually a MISSING NAVIGATION step (e.g. tap the onboarding/welcome CTA present in the tree before the recorded first step). Author it from the tree if you can (verdict fix); if a single static tree is insufficient, return needs_device.
+4. EXTERNAL AUTH HANDOFF: if the failure says the foreground app changed outside the target app after a Login / Sign In tap, and the steps never enter email/password credentials, do NOT heal by choosing Google/Apple/Facebook/SSO or another external app. If the test later expects Logout/session state, return test_invalid or prereq_unmet: the recorded test lacks a real credential setup.
+5. ENTRY-SCREEN DRIFT ("unexpected screen"/"screen drift"): the app started on a DIFFERENT screen than recorded; the fix is usually a MISSING NAVIGATION step (e.g. tap the onboarding/welcome CTA present in the tree before the recorded first step). Author it from the tree if you can (verdict fix); if a single static tree is insufficient, return needs_device.
 ## Response \u2014 STRICT JSON, exactly one verdict:
 {"verdict":"fix","steps":[<FULL healed MobileTestStep array, all steps, your changes applied, order/metadata preserved>],"reason":"what changed and why","confidence":0.0-1.0}
 {"verdict":"app_bug","reason":"app crashed/blank/5xx (NOT rate-limit)"}
@@ -68335,6 +68652,104 @@ For a fix, return the COMPLETE steps array (not a diff).`;
     function isDrift(error2) {
       return /unexpected screen|screen drift/i.test(error2 ?? "");
     }
+    function mobileStepSearchText(step) {
+      const rawTarget = step.target;
+      const structuredTarget = rawTarget && typeof rawTarget === "object" ? rawTarget : void 0;
+      const bundle = structuredTarget?.locatorBundle;
+      const stepValue = step.value;
+      return [
+        step.action,
+        step.description,
+        typeof stepValue === "string" ? stepValue : void 0,
+        typeof rawTarget === "string" ? rawTarget : void 0,
+        structuredTarget?.primary,
+        bundle?.text,
+        bundle?.contentDesc,
+        bundle?.accessibilityId,
+        bundle?.resourceId,
+        bundle?.className,
+        bundle?.xpath
+      ].filter((value) => typeof value === "string" && value.trim().length > 0).join(" ").toLowerCase();
+    }
+    function detectInvalidExternalAuthSetup(steps, error2) {
+      if (!/foreground app changed|outside target app|com\.google\.android\.gms|external app/i.test(error2 ?? "")) {
+        return null;
+      }
+      const hasBareLoginTap = steps.some((step) => {
+        if (!/\btap\b/i.test(step.action))
+          return false;
+        const text = mobileStepSearchText(step);
+        if (/\b(logout|log\s*out|sign\s*out)\b/.test(text))
+          return false;
+        return /\b(sign\s*in|signin|log\s*in|login)\b/.test(text);
+      });
+      if (!hasBareLoginTap)
+        return null;
+      const hasCredentialEntry = steps.some((step) => {
+        if (!/\b(type|fill|input|enter)\b/i.test(step.action))
+          return false;
+        const text = mobileStepSearchText(step);
+        return /\b(email|e-mail|username|user\s*name|password|passcode|pin|\{\{test_user_email\}\}|\{\{test_user_password\}\})\b/.test(text);
+      });
+      if (hasCredentialEntry)
+        return null;
+      return "bare Login/Sign In tap left the target app without any recorded credential setup; auth test is invalid until discovery records a real credential path";
+    }
+    function isCredentialFieldStep(step) {
+      const text = mobileStepSearchText(step);
+      return /\b(email|e-mail|username|user\s*name|password|passcode|pin|\{\{test_user_email\}\}|\{\{test_user_password\}\})\b/.test(text);
+    }
+    function isCredentialSubmitTap(step) {
+      if (!/\b(tap|click|press)\b/i.test(step.action))
+        return false;
+      const text = mobileStepSearchText(step);
+      if (/\b(logout|log\s*out|sign\s*out|reset|forgot|google|apple|facebook|github|sso|showemailform|with\s+email|email\s+form)\b/.test(text)) {
+        return false;
+      }
+      return /\b(sign\s*in|signin|log\s*in|login|continue|submit)\b/.test(text);
+    }
+    function detectInvalidAuthValidationSetup(steps, error2) {
+      if (!/\b(element not found|no such element|not visible|timeout|assert|could not be located|unexpected screen|screen drift)\b/i.test(error2 ?? "")) {
+        return null;
+      }
+      const allText = steps.map(mobileStepSearchText).join(" ");
+      if (!/\b(email|e-mail|username|user\s*name|password|passcode|pin)\b/.test(allText))
+        return null;
+      const uiOnlyCredentialScenario = /\b(mask|masked|unmask|visibility|visible password|show password|hide password|keyboard|ime|input type|max length|maxlength|character limit)\b/.test(allText);
+      let lastCredentialEditOrder = -1;
+      for (const step of steps) {
+        if (!/\b(type|fill|input|enter|clear)\b/i.test(step.action))
+          continue;
+        if (!isCredentialFieldStep(step))
+          continue;
+        lastCredentialEditOrder = Math.max(lastCredentialEditOrder, step.order ?? -1);
+      }
+      if (lastCredentialEditOrder < 0)
+        return null;
+      if (uiOnlyCredentialScenario) {
+        const hasCredentialFormEvidence = steps.some((step) => {
+          if ((step.order ?? -1) >= lastCredentialEditOrder)
+            return false;
+          const text = mobileStepSearchText(step);
+          return /\b(showemailformbtn|with\s+email|email\s+form|sign in with email|loginform|login form|email|e-mail|username|user\s*name)\b/.test(text);
+        });
+        if (hasCredentialFormEvidence)
+          return null;
+        return "credential-control test edits a credential field without recording a path to the email/password form; stale auth-control test is invalid until generation records a complete form path";
+      }
+      const hasSubmitAfterCredentialEdit = steps.some((step) => (step.order ?? -1) > lastCredentialEditOrder && isCredentialSubmitTap(step));
+      if (hasSubmitAfterCredentialEdit)
+        return null;
+      const hasValidationAssertion = steps.some((step) => {
+        if (!/\b(assert|wait)\b/i.test(step.action))
+          return false;
+        const text = mobileStepSearchText(step);
+        return /\b(invalid|required|error|empty|missing|incorrect|wrong|try again|validation|must enter|enter (an )?(email|password)|email is required|password is required)\b/.test(text);
+      });
+      if (hasValidationAssertion)
+        return null;
+      return "credential field was edited but the test never submits the form or asserts a validation result; stale auth-validation test is invalid until generation records a complete flow";
+    }
     function stripCodeFences(text) {
       const trimmed = text.trim();
       const fenced = /^```(?:json)?\s*([\s\S]*?)\s*```$/m.exec(trimmed);
@@ -68593,6 +69008,24 @@ ${args.directive}`);
       const registryPresent = options.selectorRegistryContext != null;
       const platform3 = target.platform;
       const trimmedLogs = tailLimit(ctx.logs ?? "", MAX_LOG_CHARS);
+      const invalidExternalAuthSetup = detectInvalidExternalAuthSetup(steps, ctx.error);
+      if (invalidExternalAuthSetup) {
+        return {
+          passed: false,
+          verdict: "test_invalid",
+          healReason: invalidExternalAuthSetup,
+          attemptsUsed: 0
+        };
+      }
+      const invalidAuthValidationSetup = detectInvalidAuthValidationSetup(steps, ctx.error);
+      if (invalidAuthValidationSetup) {
+        return {
+          passed: false,
+          verdict: "test_invalid",
+          healReason: invalidAuthValidationSetup,
+          attemptsUsed: 0
+        };
+      }
       let attemptCap = base2;
       let recoverableUsed = 0;
       let bonusUsed = 0;
@@ -68778,7 +69211,7 @@ ${args.directive}`);
         removeTags: script.removeTags
       };
     }
-    var DEFAULT_PHASE2_MAX_PASSES = 6;
+    var DEFAULT_PHASE2_MAX_PASSES = 4;
     exports2.MOBILE_LIVE_HEAL_SYSTEM_PROMPT = `You are a QA engineer fixing a failing Appium (mobile UI automation) test with LIVE device access (Phase 2). You receive: the failing test STEPS as JSON, the PRIOR failure error, and the LIVE current screen accessibility tree observed on-device RIGHT NOW. Unlike a frozen failure snapshot, this LIVE tree is the REAL screen the app is on this instant.
 ## Key insight \u2014 ENTRY-SCREEN DRIFT
 The recorded flow may have expected a DIFFERENT starting screen than the one shown. When the LIVE screen is an earlier/other screen (e.g. an onboarding / welcome / splash screen), the fix is almost always a MISSING NAVIGATION step: AUTHOR the leading step(s) (e.g. a tap on the onboarding CTA present in the tree) that reach the recorded first screen, then keep the recorded steps. This is exactly what a static failing-source cannot reveal but a LIVE screen can.
@@ -68787,7 +69220,8 @@ The recorded flow may have expected a DIFFERENT starting screen than the one sho
 2. If they differ, PREPEND the missing navigation step(s), authored from IDENTITY locators (resource-id, accessibility-id, or EXACT @text=) that are PRESENT in the LIVE tree \u2014 never a loose contains().
 3. If a locator is simply wrong, swap it for a stronger identity locator present in the LIVE tree.
 3b. If the failing step ASSERTS one-time / data-dependent UI (an empty-state CTA or first-run prompt) that is absent from the LIVE tree while the screen is otherwise correct, the assert is STALE \u2014 replace it with a durable element of the same screen (tab label, header, nav bar) and keep the rest.
-4. If you cannot yet SEE the screen you need, use "observe" to advance ONE step, then you will be re-shown the new live screen.
+4. If the prior failure says the foreground app changed outside the target app after a Login / Sign In tap, and the steps never enter email/password credentials, do NOT observe/tap Google/Apple/Facebook/SSO. For logout/session tests, return test_invalid or prereq_unmet because the recorded test lacks a real credential setup.
+5. If you cannot yet SEE the screen you need, use "observe" to advance ONE step, then you will be re-shown the new live screen.
 ## Response \u2014 STRICT JSON, exactly one verdict:
 {"verdict":"fix","steps":[<FULL healed MobileTestStep array, all steps incl. any prepended navigation, order/metadata coherent>],"reason":"what changed and why","confidence":0.0-1.0}
 {"verdict":"observe","action":{"type":"tap","target":"mobile.text('<exact label visible in the live tree>')"}}
@@ -315122,8 +315556,8 @@ var require_mobile_discovery_agent = __commonJS({
           };
         }
         log2("\n\u2500\u2500 Phase 1: EXPLORE \u2500\u2500");
-        const exploreAppDataCleared = await prepareMobileAppStateForDiscovery(driver, target, "explore", log2);
-        log2(exploreAppDataCleared ? "App data cleared \u2014 exploring from a deterministic cold (logged-out) state." : target?.resetPolicy === "PRESERVE_APP_DATA" ? "App data reset skipped by policy \u2014 exploring with preserved app data." : "App data reset unavailable (platform/device policy) \u2014 exploring the app in its current state.");
+        const exploreAppDataCleared = await prepareMobileAppStateForDiscovery(driver, target, "explore", mode, log2);
+        log2(exploreAppDataCleared ? "App data cleared \u2014 exploring from a deterministic cold (logged-out) state." : target?.resetPolicy === "PRESERVE_APP_DATA" ? "App data reset skipped by policy \u2014 exploring with preserved app data." : mode === "survey" && (target?.resetPolicy ?? "AUTO") === "AUTO" ? "App data reset skipped for mobile survey AUTO \u2014 exploring with preserved app data. Use resetPolicy=CLEAR_APP_DATA for a cold logged-out survey." : "App data reset unavailable (platform/device policy) \u2014 exploring the app in its current state.");
         const state2 = new mobile_exploration_state_js_1.MobileExplorationState();
         const maxIterations = getMobileExploreBudget(mode, ctx.incremental);
         const existingScreens = isSurvey && ctx.incremental ? compactExistingScreens(ctx.existingSiteMap) : void 0;
@@ -315365,10 +315799,11 @@ Fatal error: ${msg}`);
         };
       }
     }
-    async function prepareMobileAppStateForDiscovery(driver, target, phase, log2) {
+    async function prepareMobileAppStateForDiscovery(driver, target, phase, mode, log2) {
       void phase;
       const resetPolicy = target?.resetPolicy ?? "AUTO";
-      if (resetPolicy === "PRESERVE_APP_DATA") {
+      const shouldPreserveAppData = resetPolicy === "PRESERVE_APP_DATA" || mode === "survey" && resetPolicy === "AUTO";
+      if (shouldPreserveAppData) {
         try {
           await driver.relaunch();
         } catch (err) {
@@ -329889,7 +330324,7 @@ var require_package4 = __commonJS({
   "package.json"(exports2, module2) {
     module2.exports = {
       name: "@validate.qa/runner",
-      version: "1.0.30",
+      version: "1.0.32",
       description: "validate local test runner - execute Playwright tests on your machine, connected to validate.qa cloud.",
       bin: {
         "validate-runner": "dist/cli.js"
@@ -330038,6 +330473,8 @@ var MAX_RETRIES = 3;
 var STARTUP_TIMEOUT_MS = 3e4;
 var HEALTH_CHECK_INTERVAL_MS = 5e3;
 var STABLE_AFTER_MS = 6e4;
+var DEFAULT_APPIUM_LOG_LEVEL = "warn";
+var MAX_APPIUM_LOG_LINE_CHARS = 4e3;
 var appiumProcess = null;
 var serverState = {
   running: false,
@@ -330097,6 +330534,23 @@ function appendLog(line) {
     logs = logs.slice(-MAX_LOG_LINES);
   }
 }
+function resolveAppiumLogLevel() {
+  const raw = process.env.APPIUM_LOG_LEVEL?.trim();
+  if (raw && /^[a-z]+(?::[a-z]+)?$/i.test(raw)) return raw;
+  return DEFAULT_APPIUM_LOG_LEVEL;
+}
+function buildAppiumArgs(port, drivers) {
+  const args = ["--port", String(port), "--log-level", resolveAppiumLogLevel()];
+  if (drivers && drivers.length > 0) {
+    args.push("--use-drivers", drivers.join(","));
+  }
+  return args;
+}
+function sanitizeAppiumLogLine(line) {
+  const redacted = line.replace(/"text"\s*:\s*"[^"]*"/g, '"text":"[REDACTED]"').replace(/"password"\s*:\s*"[^"]*"/gi, '"password":"[REDACTED]"').replace(/"token"\s*:\s*"[^"]*"/gi, '"token":"[REDACTED]"').replace(/"value"\s*:\s*\[(?:"[^"]*",?){8,}\]/g, '"value":["[REDACTED]"]').replace(/"value"\s*:\s*"[A-Za-z0-9+/=]{512,}"/g, '"value":"[BASE64_REDACTED]"');
+  if (redacted.length <= MAX_APPIUM_LOG_LINE_CHARS) return redacted;
+  return `${redacted.slice(0, MAX_APPIUM_LOG_LINE_CHARS)}\u2026 [truncated ${redacted.length - MAX_APPIUM_LOG_LINE_CHARS} chars]`;
+}
 async function checkAppiumHealth(port = serverState.port) {
   try {
     const controller = new AbortController();
@@ -330129,10 +330583,7 @@ async function startAppiumServer(options) {
     return serverState;
   }
   const port = options?.port ?? APPIUM_PORT;
-  const args = ["--port", String(port)];
-  if (options?.drivers && options.drivers.length > 0) {
-    args.push("--use-drivers", options.drivers.join(","));
-  }
+  const args = buildAppiumArgs(port, options?.drivers);
   intentionalStop = false;
   lastStartOptions = { ...lastStartOptions, ...options };
   if (appiumGaveUp) {
@@ -330151,14 +330602,14 @@ async function startAppiumServer(options) {
       serverState.pid = appiumProcess.pid ?? null;
       serverState.port = port;
       appiumProcess.stdout?.on("data", (data) => {
-        const line = data.toString().trim();
+        const line = sanitizeAppiumLogLine(data.toString().trim());
         if (line) {
           appendLog(`[appium:stdout] ${line}`);
           options?.onLog?.(line);
         }
       });
       appiumProcess.stderr?.on("data", (data) => {
-        const line = data.toString().trim();
+        const line = sanitizeAppiumLogLine(data.toString().trim());
         if (line) {
           appendLog(`[appium:stderr] ${line}`);
           options?.onLog?.(line);
@@ -330317,6 +330768,17 @@ function resetServerState(port = APPIUM_PORT, restartCount = 0) {
 // src/services/mobile/appium-actions.ts
 var APPIUM_REQUEST_TIMEOUT_MS = 1e4;
 var ELEMENT_ID_PATTERN = /^[A-Za-z0-9._:-]{1,128}$/;
+var APPIUM_DRIVER_DEAD_RE = /instrumentation process is not running|cannot be proxied to UiAutomator2 server|socket hang up|ECONNRESET|invalid session id|no such session/i;
+var AppiumDriverDeadError = class extends Error {
+  isAppiumDriverDead = true;
+  constructor(message) {
+    super(message);
+    this.name = "AppiumDriverDeadError";
+  }
+};
+function isAppiumDriverDeadError(err) {
+  return err instanceof AppiumDriverDeadError || typeof err === "object" && err !== null && err.isAppiumDriverDead === true;
+}
 async function appiumRequest(path, options) {
   const url = `http://localhost:${getAppiumState().port}${path}`;
   const res = await fetch(url, {
@@ -330326,6 +330788,9 @@ async function appiumRequest(path, options) {
   });
   if (!res.ok) {
     const body = await res.text().catch(() => "");
+    if (APPIUM_DRIVER_DEAD_RE.test(body)) {
+      throw new AppiumDriverDeadError(`Appium driver session is not usable (${res.status}): ${body.slice(0, 200)}`);
+    }
     throw new Error(`Appium error ${res.status}: ${body.slice(0, 200)}`);
   }
   return res.json();
@@ -330340,7 +330805,8 @@ async function getScreenshot(sessionPath) {
   try {
     const value = readValue(await appiumRequest(`${sessionPath}/screenshot`));
     return typeof value === "string" ? value : null;
-  } catch {
+  } catch (err) {
+    if (isAppiumDriverDeadError(err)) throw err;
     return null;
   }
 }
@@ -330348,7 +330814,8 @@ async function getPageSource(sessionPath) {
   try {
     const value = readValue(await appiumRequest(`${sessionPath}/source`));
     return typeof value === "string" ? value : null;
-  } catch {
+  } catch (err) {
+    if (isAppiumDriverDeadError(err)) throw err;
     return null;
   }
 }
@@ -330364,7 +330831,8 @@ async function getWindowSize(sessionPath) {
           return { width: w, height: h };
         }
       }
-    } catch {
+    } catch (err) {
+      if (isAppiumDriverDeadError(err)) throw err;
     }
     if (attempt < retries - 1) {
       await new Promise((resolve) => setTimeout(resolve, Math.pow(2, attempt) * 100));
@@ -330520,6 +330988,37 @@ async function swipe(sessionPath, direction, distance, windowSize) {
 async function pressBack(sessionPath) {
   await appiumRequest(`${sessionPath}/back`, { method: "POST", body: "{}" });
 }
+function isKeyboardAlreadyHiddenError(err) {
+  const message = err instanceof Error ? err.message : String(err);
+  return /keyboard.*(not|already).*(shown|visible|present|open)|no.*keyboard/i.test(message);
+}
+async function dismissKeyboard(sessionPath, platform3) {
+  if (platform3 === "ANDROID") {
+    await pressBack(sessionPath);
+    return;
+  }
+  try {
+    await appiumRequest(`${sessionPath}/appium/device/hide_keyboard`, {
+      method: "POST",
+      body: "{}"
+    });
+    return;
+  } catch (err) {
+    if (isAppiumDriverDeadError(err)) throw err;
+    if (isKeyboardAlreadyHiddenError(err)) return;
+  }
+  try {
+    await appiumRequest(`${sessionPath}/execute/sync`, {
+      method: "POST",
+      body: JSON.stringify({ script: "mobile: hideKeyboard", args: [{}] })
+    });
+    return;
+  } catch (err) {
+    if (isAppiumDriverDeadError(err)) throw err;
+    if (isKeyboardAlreadyHiddenError(err)) return;
+  }
+  await pressBack(sessionPath);
+}
 async function pressHome(sessionPath, platform3) {
   if (platform3 === "IOS") {
     await appiumRequest(`${sessionPath}/execute/sync`, {
@@ -331705,6 +332204,7 @@ var COLD_BOOT_ENTRY_TIMEOUT_MS = 3e4;
 var VERIFICATION_ACTIONS = /* @__PURE__ */ new Set(["assertVisible", "assertText", "waitForElement"]);
 var WD_SESSION_CREATE_TIMEOUT_MS = 12e4;
 var WD_ACTION_TIMEOUT_MS = 3e4;
+var APPIUM_DRIVER_DEAD_RE2 = /instrumentation process is not running|cannot be proxied to UiAutomator2 server|socket hang up|ECONNRESET/i;
 var MAX_SESSION_CREATE_ATTEMPTS = 3;
 var execFileAsync2 = (0, import_node_util2.promisify)(import_node_child_process2.execFile);
 var MOBILE_TEXT_ATTRIBUTE_NAMES = ["text", "content-desc", "contentDescription", "name", "label", "value"];
@@ -331741,6 +332241,9 @@ async function wdRequest(path, options) {
     if (res.status === 404 && /no such session|invalid session id|session is either terminated|deleted session/i.test(body)) {
       throw new WebDriverTransportError(`WebDriver session is no longer available: ${body.slice(0, 200)}`);
     }
+    if (res.status === 500 && APPIUM_DRIVER_DEAD_RE2.test(body)) {
+      throw new WebDriverTransportError(`WebDriver driver process is not usable: ${body.slice(0, 200)}`);
+    }
     if (res.status === 502 || res.status === 503 || res.status === 504) {
       throw new WebDriverTransportError(`Appium server unavailable (${res.status}): ${body.slice(0, 200)}`);
     }
@@ -334509,6 +335012,10 @@ var MobileBridgeDriver = class {
   async back() {
     return this.runAction(() => pressBack(this.sessionPath));
   }
+  /** Platform-aware software keyboard dismissal. */
+  async dismissKeyboard() {
+    return this.runAction(() => dismissKeyboard(this.sessionPath, this.platform));
+  }
   /** System Home — backgrounds the app only (use `relaunch` for hermetic reset). */
   async home() {
     return this.runAction(() => pressHome(this.sessionPath, this.platform));
@@ -334894,8 +335401,12 @@ function attachMobileDiscoveryNetworkContext(calls, result, appId) {
     pageUrl: call.pageUrl ?? pageUrl
   }));
 }
+var runnerPackage = require_package4();
 var SECRET_VAR_PATTERN = /password|secret|token|api[_]?key|pass\b|credential|bearer|pat\b/i;
 var IS_CLOUD = process.env.RUNNER_CLOUD === "true";
+var RUNNER_NAME = runnerPackage.name ?? "@validate.qa/runner";
+var RUNNER_VERSION = runnerPackage.version ?? "0.0.0";
+var RUNNER_BUILD_ID = process.env.VALIDATE_RUNNER_BUILD_ID ?? process.env.RAILWAY_GIT_COMMIT_SHA ?? process.env.GIT_COMMIT_SHA ?? process.env.SOURCE_VERSION;
 var DEFAULT_MAX_CONCURRENT = IS_CLOUD ? 4 : 40;
 var DEFAULT_TYPE_LIMITS = {
   discovery: IS_CLOUD ? 2 : 15,
@@ -336698,7 +337209,14 @@ ${finalVerifyResult.logs ?? ""}`;
           if (getBridgeState().hasActiveSession) {
             throw new Error("CONFIG_ISSUE: the shared mobile device is busy with an active recording session; mobile discovery will retry once it ends.");
           }
-          const mobileOnLog = (line) => onLog("progress", line);
+          const mobileProgressLines = [];
+          const mobileOnLog = (line) => {
+            mobileProgressLines.push(line);
+            if (mobileProgressLines.length > 500) {
+              mobileProgressLines.splice(0, mobileProgressLines.length - 500);
+            }
+            onLog("progress", mobileProgressLines.join("\n"));
+          };
           liveBrowserHandle.patch({
             mode: ctx.mode === "survey" ? "survey" : "discovery",
             testName: ctx.featureName ?? "Mobile discovery",
@@ -337722,6 +338240,9 @@ async function startRunner(opts) {
         method: "POST",
         headers,
         body: JSON.stringify({
+          runnerName: RUNNER_NAME,
+          runnerVersion: RUNNER_VERSION,
+          runnerBuildId: RUNNER_BUILD_ID,
           runsCompleted,
           activeRuns,
           maxConcurrent: MAX_CONCURRENT,