@validate.qa/runner 1.0.32 → 1.0.34

package/dist/cli.js

@@ -62285,7 +62285,7 @@ var require_mobile_explorer = __commonJS({
       return { screen, signal, refMap, observation };
     }
     function buildStatePacket(input) {
-      const { state: state2, mode, iteration, maxIterations, latestObservation, journeys, transitions } = input;
+      const { state: state2, mode, iteration, maxIterations, latestObservation, journeys, transitions, featureName, featureContext, userNotes } = input;
       const sections = [];
       sections.push(`## Mobile Exploration Status (iteration ${iteration}/${maxIterations})`);
       sections.push(`Mode: ${mode} | Budget remaining: ${maxIterations - iteration} iterations`);
@@ -62298,10 +62298,46 @@ var require_mobile_explorer = __commonJS({
       sections.push("");
       if (mode === "survey") {
         sections.push("**Mission:** Map every reachable screen. For each new screen: mobile_snapshot -> capture_screen -> record_transition. Get PAST the entry gate into the app's real main content \u2014 the login/landing screens are the ENTRANCE, not the app. If test credentials are provided (see the Test Credentials section), SIGN IN with them FIRST and map the authenticated app; that is the real product surface. Prefer a real login when credentials are provided; only if login genuinely cannot be completed after honest attempts (persistent error, the form will not accept the credential, no valid account) fall back to any guest/demo/skip entry the app offers and map the app fully from there \u2014 reaching the real feature surface that way is far better coverage than getting stuck on the login wall. Do NOT submit forms with junk data or mutate real data. Call finish_exploration ONLY when every reachable screen \u2014 including the authenticated content \u2014 has been captured and no unvisited frontier screens remain.");
+      } else if (featureName?.trim()) {
+        sections.push(`**Mission:** Feature-scoped deep exploration of **"${featureName.trim()}"**. Drive the app like a real user through THIS feature only: tap, type, submit, and observe outcomes. After a meaningful flow, call record_journey. Do NOT deep-dive unrelated features. Call finish_exploration when this feature's flows are covered.`);
       } else {
         sections.push("**Mission:** Use the focus features like a real user. Tap, type, submit, and observe outcomes. After a meaningful flow, call record_journey. Call finish_exploration when the flows are covered.");
       }
       sections.push("");
+      if (mode === "deep" && featureName?.trim()) {
+        sections.push(`## Feature: ${featureName.trim()}`);
+        if (featureContext?.plannerDescription?.trim()) {
+          sections.push(featureContext.plannerDescription.trim());
+        }
+        if (featureContext?.priorInsight?.trim()) {
+          sections.push(`Prior insight: ${featureContext.priorInsight.trim()}`);
+        }
+        if (featureContext?.pageIntel && featureContext.pageIntel.length > 0) {
+          sections.push("### Target screens / routes for this feature");
+          for (const page of featureContext.pageIntel.slice(0, 12)) {
+            sections.push(`- ${page.route} (${page.type}): ${page.summary}`);
+          }
+        }
+        if (featureContext?.flowIntel && featureContext.flowIntel.length > 0) {
+          sections.push("### Known flows");
+          for (const flow of featureContext.flowIntel.slice(0, 8)) {
+            sections.push(`- ${flow}`);
+          }
+        }
+        if (featureContext?.otherFeatures && featureContext.otherFeatures.length > 0) {
+          sections.push("### Other features \u2014 do NOT explore these (navigation context only)");
+          for (const other of featureContext.otherFeatures.slice(0, 12)) {
+            const pages = other.pages?.length ? ` [${other.pages.slice(0, 4).join(", ")}]` : "";
+            sections.push(`- ${other.name}${pages}`);
+          }
+        }
+        sections.push("");
+      }
+      if (userNotes?.trim()) {
+        sections.push(`## Operator notes
+${userNotes.trim()}`);
+        sections.push("");
+      }
       const screenCount = state2.getScreenCount();
       sections.push(`## Screens Mapped: ${screenCount} | Transitions: ${transitions.length} | Journeys: ${journeys.length}`);
       const currentScreenId = state2.getCurrentScreenId();
@@ -62458,7 +62494,7 @@ ${existingScreens.slice(0, 100).map((s) => `- ${s.screenId}${s.name ? ` "${s.nam
         } catch {
         }
       };
-      const mode = ctx.mode === "deep" ? "deep" : "survey";
+      const mode = ctx.mode === "survey" ? "survey" : "deep";
       const platform3 = platformForMedium(ctx.medium);
       const enableRecordJourney = config?.enableRecordJourney ?? mode !== "survey";
       const targetAppId = ctx.target?.appId?.trim() || void 0;
@@ -62746,7 +62782,10 @@ ${existingScreens.slice(0, 100).map((s) => `- ${s.screenId}${s.name ? ` "${s.nam
             maxIterations,
             latestObservation: getLatest()?.observation ?? null,
             journeys,
-            transitions: collectedTransitions
+            transitions: collectedTransitions,
+            featureName: ctx.featureName,
+            featureContext: ctx.featureContext,
+            userNotes: ctx.userNotes
           });
           const messages = [
             { role: "system", content: systemPrompt },
@@ -65124,7 +65163,7 @@ Return ONLY one valid JSON object matching the schema below. Do NOT include <thi
     Example - BAD happy path: \`["Navigate to /feature", "Click Create", "Verify dialog opens"]\` \u2192 only tests the trigger.
     Example - GOOD happy path (generic, async): \`["Navigate to landing and log in", "Navigate to the feature page", "Note the current count of items on the list", "Click the primary action button", "Fill required inputs and submit", "Wait for completion signal (up to 60s)", "Verify the item count increased by 1", "Open the newly created item", "Verify its content is non-empty and contains the input I provided"]\`
     Example - GOOD happy path (sync CRUD): \`["Navigate to landing and log in", "Navigate to the list page", "Click New", "Fill required fields", "Click Save", "Verify the new record appears in the list", "Click the record and verify its detail view shows the values I entered"]\`
-12. **Auth happy paths require concrete session proof.** A login/auth HAPPY_PATH is incomplete if it only proves "user reaches dashboard" or "authenticated page is visible." It MUST verify at least one durable signed-in signal that was observed in the evidence: user/account menu opens, Logout/Sign out is available, the observed display name/email/avatar/account item is present, authenticated navigation remains available after a reload, or another app-specific session control is usable. Prefer concrete observed labels from the evidence (for example "Logout", "Demo User", "Account", "Profile") over generic phrases like "personalized content." If the explorer only observed a redirect and no signed-in signal, keep the route outcome but mark the session-proof outcome reliability "low" and state what concrete signal was missing.
+12. **Auth happy paths require concrete session proof.** A login/auth HAPPY_PATH is incomplete if it only proves "user reaches dashboard" or "authenticated page is visible." It MUST verify at least one durable signed-in signal that was observed in the evidence: user/account menu opens, Logout/Sign out is available, the observed display name/email/avatar/account item is present, authenticated navigation remains available after a reload, or another app-specific session control is usable. Prefer concrete observed labels from the evidence (for example "Logout", "Sign out", "Account", "Profile", or the user's own displayed name/email from evidence) over generic phrases like "personalized content." If the explorer only observed a redirect and no signed-in signal, keep the route outcome but mark the session-proof outcome reliability "low" and state what concrete signal was missing.
 13. **Independent execution contract.** Every scenario MUST pass when run alone, first, last, in random order, and in parallel against an environment with no relevant feature data except explicitly guaranteed immutable fixtures. A scenario that depends on a sibling scenario's side effects (e.g. "delete the conversation that another test created") is invalid. If two flows are inherently coupled, bundle them as a single USER_JOURNEY scenario.
 14. **Scenario-owned state.** If a scenario reads, searches, opens, updates, messages, cancels, or deletes an entity, that scenario MUST create or seed the entity in its own setup steps. "Use an existing record" / "the conversation in the demo account" / "the existing user named X" are forbidden phrasings \u2014 they assume mutable pre-existing app data. Carve-out: baseline observations (current count, list length, "the dashboard heading is visible") are allowed as prerequisite reads ONLY when the durable assertion targets a self-created entity. Phrase setup as: "Click New, fill required fields with run-scoped values, submit and verify the new record appears, THEN proceed to <feature under test>."
 15. **Run-scoped test data.** Generated entities MUST use unique, run-scoped identifiers \u2014 phrase as "test message <Date.now()>" or "QA-<unique id>" in steps. Subsequent assertions MUST target that unique identifier, not "the first item", "the latest message", "the last row", or any visible display name observed during exploration. Hardcoding any specific display name, username, email, conversation title, or other identifier observed in the explorer's snapshot is forbidden \u2014 that data is incidental, not a stable contract. The same identifiers will not exist (or will look different) when the test runs in a fresh environment or against a different account.
@@ -66084,7 +66123,7 @@ Return ONLY one valid JSON object matching the schema below. Do NOT include <thi
 9. **No duplicates** - check existing test names before adding
 10. **All tests start from the app launch entry** - every generated test starts by launching the target app. The runner clears app data when the device/reset policy safely supports it; otherwise it performs a terminate + activate relaunch, which can preserve app session data. Therefore scenarios MUST navigate through the app's own UI from whatever launch state is valid, and MUST NOT rely on mutable data from a prior scenario disappearing. Steps must reflect this: say "Launch the app and tap Sign In" not "deep-link to the login screen". Do NOT navigate by deep-link; the app's launch + tab/drawer navigation is the only entry path. \`targetPages\` lists the screen-ids involved in the flow.
 11. **targetPages must be copied CHARACTER-FOR-CHARACTER from the screen-ids in the evidence** (they look like \`com.example.app.MainActivity#ab12cd34\`). NEVER invent, prettify, or abbreviate them \u2014 no "Landing", "AUTH", "Home Screen", or any name that is not literally in the provided screens. A scenario whose targetPages contains even ONE id not present in the evidence is REJECTED WHOLESALE by the validator, so a single made-up route silently destroys the entire scenario. If you are unsure which screen-id a step touches, use the screen-id of the screen where the flow STARTS.
-12. **Happy paths must verify the DURABLE OUTCOME, not just the trigger.** A HAPPY_PATH is NOT complete until it verifies the feature's real output. "Button tapped" / "Sheet opened" / "Spinner appeared" is NOT a happy path - that is a UI interaction test. Apply this to any feature where an action produces a result the user then sees or uses: CRUD creates, photo/file uploads, searches that return results, imports, exports, payments, messages sent, AI/ML outputs, generated documents, sync runs, analysis runs, conversion, data processing. The scenario MUST include:
+12. **Happy paths must verify the DURABLE OUTCOME, not just the trigger.** A HAPPY_PATH is NOT complete until it verifies the feature's real output. "Button tapped" / "Sheet opened" / "Spinner appeared" / "Settings screen opened" is NOT a happy path - that is a UI interaction test. Form-mutation happy paths (change password, create/edit/save a record, send a message, checkout, etc.) MUST include typing into the relevant fields AND committing the form (submit/save/send or keyboard Enter/Done) \u2014 navigating to the form screen alone is insufficient. Apply this to any feature where an action produces a result the user then sees or uses: CRUD creates, photo/file uploads, searches that return results, imports, exports, payments, messages sent, AI/ML outputs, generated documents, sync runs, analysis runs, conversion, data processing. The scenario MUST include:
     - The trigger step (Tap Submit / Generate / Send / Upload / Run / Analyze / Save / Pay / etc.)
     - A wait step for the operation to complete. Phrase it by SIGNAL, not wall-clock ("Wait for the result to appear - up to 60 seconds"). Prefer signals the app actually uses: spinner disappears, status badge flips to a success state, a new row appears, an item count increments, a success toast/snackbar shows, the screen transitions to a result screen.
     - A verification step on the DURABLE RESULT - the thing that outlives the transient UI: a new list row, a persisted record, a received message, a committed state change, visible output text. Do NOT assert on the spinner disappearing alone; assert on what replaced it.
@@ -66315,6 +66354,34 @@ ${targetBits.length > 0 ? targetBits.join(" ") : "native mobile app"}`);
       if (context.featureName) {
         sections.push(`## Feature: ${context.featureName}
 SCOPE: this is a feature-focused deep run. Plan scenarios ONLY for the "${context.featureName}" feature \u2014 its screens, forms, and flows. Screens belonging to other features are navigation context / prerequisites only; do NOT plan scenarios whose primary goal exercises another feature.`);
+        if (context.featureContext?.plannerDescription?.trim()) {
+          sections.push(context.featureContext.plannerDescription.trim());
+        }
+        if (context.featureContext?.priorInsight?.trim()) {
+          sections.push(`Prior insight: ${context.featureContext.priorInsight.trim()}`);
+        }
+        if (context.featureContext?.pageIntel && context.featureContext.pageIntel.length > 0) {
+          sections.push("### Feature page intel");
+          for (const page of context.featureContext.pageIntel.slice(0, 12)) {
+            sections.push(`- ${page.route} (${page.type}): ${page.summary}`);
+          }
+        }
+        if (context.featureContext?.flowIntel && context.featureContext.flowIntel.length > 0) {
+          sections.push("### Known flows");
+          for (const flow of context.featureContext.flowIntel.slice(0, 8)) {
+            sections.push(`- ${flow}`);
+          }
+        }
+        if (context.featureContext?.otherFeatures && context.featureContext.otherFeatures.length > 0) {
+          sections.push("### Other features (do not plan primary scenarios for these)");
+          for (const other of context.featureContext.otherFeatures.slice(0, 12)) {
+            sections.push(`- ${other.name}`);
+          }
+        }
+      }
+      if (context.userNotes?.trim()) {
+        sections.push(`## Operator notes
+${context.userNotes.trim()}`);
       }
       const orderedScreens = plannableTargetAppScreens(graph, context.appId).sort((a, b) => a.firstSeenIteration - b.firstSeenIteration);
       const includedScreenIds = new Set(orderedScreens.map((state2) => state2.screenId));
@@ -66441,7 +66508,7 @@ ${constraints.join("\n")}`);
           routePattern: null,
           title: state2.screenName ?? null,
           pageType: state2.screenType ?? "UNKNOWN",
-          requiresAuth: false,
+          requiresAuth: state2.screenType?.toLowerCase() === "auth",
           visitCount: state2.visited ? 1 : 0,
           lastVisitedAt: state2.visited ? now : null,
           elementsCovered: 0,
@@ -66461,6 +66528,8 @@ ${constraints.join("\n")}`);
         const toPageId = idByScreen.get(t.toScreenId);
         if (!fromPageId || !toPageId)
           continue;
+        const fromScreen = graph.screens.get(t.fromScreenId);
+        const toScreen = graph.screens.get(t.toScreenId);
         transitions.push({
           id: `mtx-${txSeq++}`,
           fromPageId,
@@ -66468,7 +66537,7 @@ ${constraints.join("\n")}`);
           triggerType: t.action.toUpperCase(),
           triggerLabel: t.viaRef ?? null,
           observedCount: 1,
-          requiresAuth: false
+          requiresAuth: fromScreen?.screenType?.toLowerCase() === "auth" || toScreen?.screenType?.toLowerCase() === "auth"
         });
       }
       return {
@@ -66671,7 +66740,9 @@ ${constraints.join("\n")}`);
           recordedJourneys,
           credentials: input.credentials,
           testBudget: input.testBudget,
-          incremental: input.incremental
+          incremental: input.incremental,
+          userNotes: input.userNotes,
+          featureContext: input.featureContext
         })
       });
       const plannerFeatureGroups = filterFeatureGroupsToSiteMap(result.featureGroups, siteMap, input.graph, input.appId);
@@ -66723,6 +66794,9 @@ var require_mobile_generator = __commonJS({
   "../runner-core/dist/services/mobile/mobile-generator.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.collapseConsecutiveBacks = collapseConsecutiveBacks;
+    exports2.scenarioIntentMismatchReason = scenarioIntentMismatchReason;
+    exports2.dedupeConsecutiveIdenticalActions = dedupeConsecutiveIdenticalActions;
     exports2.collapseRetryCycles = collapseRetryCycles;
     exports2.runMobileGeneratePhase = runMobileGeneratePhase;
     var crypto_1 = require("crypto");
@@ -66930,8 +67004,38 @@ var require_mobile_generator = __commonJS({
       return (labelIsEditableValue ? void 0 : label) ?? nonEmpty2(element.accessibilityId) ?? nonEmpty2(element.resourceId) ?? (editable ? void 0 : text) ?? "element";
     }
     var EDITABLE_ELEMENT_ROLE_RE = /(EditText|AutoCompleteTextView|XCUIElementTypeTextField|XCUIElementTypeSecureTextField|XCUIElementTypeSearchField|XCUIElementTypeTextView)$/;
+    var EDITABLE_IDENTITY_RE = /\b(email|e-?mail|password|passwd|passcode|username|user[_-]?name|login|search|query|otp|pin|phone|mobile|input|textfield|text[_-]?field|edit|typehere)\b/i;
     function isEditableMobileElement(element) {
-      return EDITABLE_ELEMENT_ROLE_RE.test(element.role.trim());
+      if (EDITABLE_ELEMENT_ROLE_RE.test(element.role.trim()))
+        return true;
+      const identity = [element.accessibilityId, element.resourceId, element.label].filter((v) => typeof v === "string" && v.trim().length > 0).join(" ");
+      if (identity && EDITABLE_IDENTITY_RE.test(identity))
+        return true;
+      return false;
+    }
+    function isIdentityBearingTapTarget(element) {
+      if (weakAssertionTargetReason(element))
+        return false;
+      if (isBareContainerLikeElement(element))
+        return false;
+      if (isEditableMobileElement(element))
+        return false;
+      if (/button|link|tab|menuitem|checkbox|switch|radio/i.test(element.role))
+        return true;
+      const label = [
+        element.label,
+        element.text,
+        element.accessibilityId,
+        element.resourceId
+      ].filter((v) => typeof v === "string" && v.trim().length > 0).join(" ");
+      return /\b(sign\s*in|log\s*in|login|submit|save|continue|create|send|confirm|done|next|apply|checkout|pay|finish|update|register|sign\s*up)\b/i.test(label);
+    }
+    function isBareContainerLikeElement(element) {
+      if (BARE_CONTAINER_CLASS_RE.test(element.role)) {
+        const hasIdentity = Boolean(nonEmpty2(element.text) || nonEmpty2(element.label) || nonEmpty2(element.accessibilityId));
+        return !hasIdentity;
+      }
+      return false;
     }
     function nonEmpty2(value) {
       if (typeof value !== "string")
@@ -66963,7 +67067,7 @@ var require_mobile_generator = __commonJS({
 ## Your job
 1. mobile_snapshot the current screen.
 2. Execute the scenario's steps using the real UI: tap buttons, fill fields (mobile_type), submit, navigate.
-3. COMPLETE THE ACTION the scenario is about \u2014 do not stop half-way. If the scenario submits a form (sign in, sign up, search, create), you MUST tap the submit/primary button; filling fields is NOT the behavior under test. If it navigates, you MUST land on the destination. A "happy path" that fills a login form but never taps "Sign In" is WRONG.
+3. COMPLETE THE ACTION the scenario is about \u2014 do not stop half-way. If the scenario submits a form (sign in, sign up, search, create, change password, edit profile), you MUST commit it \u2014 tap the submit/primary button OR press the keyboard's Enter/Done action on the last field (mobile_type with a trailing newline on the focused field when no button is visible). Filling fields alone is NOT the behavior under test. Navigating to a form screen without changing its fields is also NOT enough for mutation scenarios (change/create/update/edit). If it navigates, you MUST land on the destination. A "happy path" that fills a form but never commits \u2014 or only opens the form without typing \u2014 is WRONG.
 4. When you reach the target screen / complete the flow, PROVE the outcome with an assert tool:
    - mobile_assert_visible({ref}) \u2014 the target screen's stable element is on screen.
    - mobile_assert_text({ref, expected}) \u2014 an element contains expected text (only durable when the element has a stable accessibility-id / resource-id).
@@ -66978,6 +67082,8 @@ var require_mobile_generator = __commonJS({
 - Stay inside this app.${targetLine} Do not open or use app stores, browsers, email apps, settings, or any other app. If an action leaves the target app, the runner will relaunch the target app and reject that action.
 - NEVER tap the phone's home screen / launcher (app icons, "Predicted app" chips, search bars, widgets). Those are NOT part of the app under test \u2014 tapping them is junk that poisons the test. If the app ever backgrounds or you find yourself on the launcher, use mobile_relaunch to cold-start the app; do NOT tap a launcher icon or app-prediction to get back in.
 - Do NOT re-do a sequence you already completed. If you filled a form then navigated away, do NOT come back and fill it again \u2014 the scenario needs ONE clean pass. Filling the login form, going back, and re-filling it is exactly the kind of wandering that produces a bloated, broken test.
+- Do NOT thrash the system Back button. One intentional back/navigation is fine; a chain of backs while lost is not a test \u2014 re-snapshot, re-orient, and take the productive path once.
+- Prefer product identity locators (accessibility-id, resource-id, visible label). Never assert on bare hierarchy roots or unlabeled full-screen containers \u2014 those prove nothing.
 - Do ONLY the actions this scenario needs. Do NOT re-open a menu you already opened, re-select an option that is already selected, toggle a setting back and forth, or repeat a step that already succeeded \u2014 EVERY action you take is baked into the generated test verbatim, so each extra action becomes a permanent junk step.
 - Each action must make NEW progress toward the goal. If an action leaves the screen unchanged, do NOT repeat it \u2014 pick a different element or move on.
 - Finish promptly once the outcome is proven: the instant the expected outcome is visible, assert it and call finish_generate. Do not keep exploring after the goal is proven.
@@ -66996,7 +67102,7 @@ This app has stored login credentials under these keys:
 ${keyList}
 
 When a scenario needs a signed-in session, complete the FULL login sequence \u2014 filling the fields alone does NOT log you in:
-1. Reach the email/password form. 2. Fill each credential field with \`mobile_fill_credential\` (pass the field ref and the KEY, e.g. \`{ ref: "e5", credentialKey: "TEST_USER_EMAIL" }\`) \u2014 the runner types the real value on the device and the generated test stores a \`{{KEY}}\` placeholder that replay resolves; you never see the secret. 3. TAP THE SUBMIT button (Sign In / Log In / Continue). 4. Re-snapshot and VERIFY an authenticated screen appeared. If login fails twice, do NOT keep retrying or wander: call finish_generate with verified:false and say the login could not be completed (the credentials may be invalid for this app).
+1. Reach the email/password form. 2. Fill each credential field with \`mobile_fill_credential\` (pass the field ref and the KEY, e.g. \`{ ref: "e5", credentialKey: "TEST_USER_EMAIL" }\`) \u2014 the runner types the real value on the device and the generated test stores a \`{{KEY}}\` placeholder that replay resolves; you never see the secret. 3. COMMIT the form \u2014 tap the submit/primary button (Sign In / Log In / Continue) OR, if no button is visible, focus the last field and \`mobile_type\` a trailing newline (\`\\n\`) to trigger the keyboard's Enter/Done action. 4. Re-snapshot and VERIFY an authenticated screen appeared. If login fails twice, do NOT keep retrying or wander: call finish_generate with verified:false and say the login could not be completed (the credentials may be invalid for this app).
 
 SECURITY RULES:
 - NEVER call \`mobile_type\` with a real email, password, or token value \u2014 the runner will REJECT the call and you lose an iteration. Use \`mobile_fill_credential\` for every credential field.
@@ -67346,6 +67452,7 @@ ${statePacket}` },
                 if (action.type === "ASSERT_VISIBLE" || action.type === "ASSERT_TEXT")
                   assertCount++;
               },
+              recordedActions: actions,
               log: log2
             });
             pushResult(dispatchResult);
@@ -67361,7 +67468,7 @@ ${statePacket}` },
       return { actions, assertCount, finish, lastSnapshot: getLatest(), lastScreenName };
     }
     async function dispatchGenerateTool(args) {
-      const { toolName, toolArgs, driver, platform: platform3, latest, absorbObservation, resolveRef, credentials, screenName, recordAction, log: log2 } = args;
+      const { toolName, toolArgs, driver, platform: platform3, latest, absorbObservation, resolveRef, credentials, screenName, recordAction, recordedActions, log: log2 } = args;
       const unknownRef = (ref) => ({
         ok: false,
         error: `Unknown element ref "${String(ref)}". Call mobile_snapshot first; refs are only valid for the latest snapshot.`
@@ -67423,12 +67530,26 @@ ${statePacket}` },
             };
           }
           const absorbed = await absorbObservation(result.source, result.screenSignal, latest()?.screen.windowSize ?? null, result.screenshot, "mobile_tap");
-          if (shouldRecordAction(result, absorbed) && changedScreen(before, absorbed)) {
-            recordAction({
+          const screenChanged = changedScreen(before, absorbed);
+          const identityTap = isIdentityBearingTapTarget(element);
+          if (shouldRecordAction(result, absorbed) && (screenChanged || identityTap)) {
+            const tapAction = {
               type: "TAP",
               selector: (0, mobile_source_parser_js_2.preferredLocator)(element),
-              metadata: metadataForElement(element, beforeScreenName, platform3)
-            });
+              metadata: metadataForElement(element, beforeScreenName, platform3),
+              innerText: null,
+              url: "",
+              value: null
+            };
+            const lastRecorded = recordedActions[recordedActions.length - 1];
+            if (lastRecorded && actionCycleKey(lastRecorded) === actionCycleKey(tapAction)) {
+              log2(`  tap left content signature unchanged but duplicates the prior step \u2014 not recording again.`);
+            } else if (!screenChanged && identityTap) {
+              log2(`  tap left content signature unchanged but target has identity \u2014 recording commit control "${labelForElement(element)}".`);
+              recordAction(tapAction);
+            } else {
+              recordAction(tapAction);
+            }
           } else if (shouldRecordAction(result, absorbed)) {
             log2("  tap changed nothing on screen \u2014 not recording it as a step (dead action).");
           }
@@ -67567,6 +67688,13 @@ ${statePacket}` },
           const element = resolveRef(toolArgs.ref);
           if (!element)
             return unknownRef(toolArgs.ref);
+          const weakReason = weakAssertionTargetReason(element);
+          if (weakReason) {
+            return {
+              ok: false,
+              error: `Ref ${element.ref} is not a durable assertion target (${weakReason}). Re-snapshot and assert a human-visible label, text, or stable control that proves the screen outcome.`
+            };
+          }
           const expected = nonEmpty2(typeof toolArgs.expected === "string" ? toolArgs.expected : String(toolArgs.expected ?? ""));
           if (!expected)
             return { ok: false, error: "mobile_assert_text needs a non-empty `expected` value." };
@@ -67765,6 +67893,105 @@ ${statePacket}` },
         ...scenario.expectedOutcomes.flatMap((outcome) => [outcome.description, outcome.hint])
       ].filter((value) => typeof value === "string" && value.trim().length > 0).join(" ").toLowerCase();
     }
+    var INSPECTION_OUTCOME_TYPES = /* @__PURE__ */ new Set([
+      "element-visible",
+      "text-visible",
+      "element-hidden",
+      "screen-visible"
+    ]);
+    function isInspectionOnlyScenario(scenario, actions) {
+      if (actions.length === 0 || scenario.expectedOutcomes.length === 0)
+        return false;
+      if (!scenario.expectedOutcomes.every((o) => INSPECTION_OUTCOME_TYPES.has(o.type))) {
+        return false;
+      }
+      if (actions.some((a) => a.type === "TYPE" || a.type === "CLEAR")) {
+        return false;
+      }
+      const text = scenarioText(scenario);
+      const visibilityOnlyGoal = (/\b(entry\s+points?|providers?|options?|provider\s+buttons?)\b/.test(text) || /\b(show|display)\s+(all|the)?\s*(provider|option|button|link|entry)/.test(text) || /\b(all\s+(three\s+)?providers?)\b/.test(text)) && !/\b(change|update|create|save|send|register|edit|with\s+valid|successful\s+(sign|log)|complete\s+(the\s+)?(login|sign[- ]?in)|submit\s+(the\s+)?(form|credentials)|enter\s+(an?\s+)?(email|password))\b/.test(text);
+      if (visibilityOnlyGoal) {
+        const assertCount2 = actions.filter((a) => a.type === "ASSERT_VISIBLE" || a.type === "ASSERT_TEXT").length;
+        return assertCount2 > 0;
+      }
+      const completionIntent = scenario.type === "HAPPY_PATH" || /\b(happy\s*path|successful|with\s+valid|complete\s+(the\s+)?(login|sign[- ]?in|registration|checkout|purchase))\b/.test(text);
+      const formIntent = /\b(sign\s*in|log\s*in|login|authenticate|register|sign\s*up|checkout|create|save|submit|send|change|update|edit)\b/.test(text);
+      if (completionIntent && formIntent)
+        return false;
+      const assertCount = actions.filter((a) => a.type === "ASSERT_VISIBLE" || a.type === "ASSERT_TEXT").length;
+      return assertCount > 0;
+    }
+    function isNavigationFocusedScenario(scenario) {
+      const text = scenarioText(scenario);
+      const navigates = /\b(back|return|go\s+home|navigate\s+back|leave|exit|cancel\s+out|dismiss|previous\s+screen)\b/.test(text);
+      const completesFlow = /\b(happy\s*path|successful|complete\s+(the\s+)?(login|sign[- ]?in|registration|checkout)|with\s+valid)\b/.test(text);
+      return navigates && !completesFlow;
+    }
+    function isFormValidationScenario(scenario) {
+      if (scenario.variant === "validation")
+        return true;
+      if (scenario.type !== "EDGE_CASE")
+        return false;
+      const text = scenarioText(scenario);
+      return /\b(empty|required|missing|blank|invalid|reject|error|validation|wrong|incorrect|mismatch)\b/.test(text);
+    }
+    function isFormMutationHappyPath(scenario) {
+      if (isNavigationFocusedScenario(scenario))
+        return false;
+      if (isFormValidationScenario(scenario))
+        return false;
+      const text = scenarioText(scenario);
+      const isHappy = scenario.type === "HAPPY_PATH" || /\b(happy\s*path|successful|success)\b/.test(text);
+      if (!isHappy)
+        return false;
+      if (/\b(sign\s*in|log\s*in|login|authenticate|sign\s*out|log\s*out)\b/.test(text) && !/\b(change|update|reset)\s+(the\s+)?password\b/.test(text)) {
+        return false;
+      }
+      if (/\b(show|display|visible|options?|providers?|links?)\b/.test(text) && !/\b(change|update|create|save|send|register|edit|post|write|compose|delete|add|set)\b/.test(text)) {
+        return false;
+      }
+      const mutates = /\b(change|update|create|save|send|register|sign\s*up|checkout|edit|post|write|compose|set|add|delete|remove)\b/.test(text);
+      const hasObject = /\b(password|email|profile|message|post|item|record|form|settings|account|name|title|description|comment|bio|phone|address|payment|card|user|note|task|entry)\b/.test(text);
+      return mutates && hasObject;
+    }
+    function isNavigationChromeTap(action) {
+      if (action.type !== "TAP")
+        return false;
+      const textForAction = actionText(action);
+      return /\b(go\s+back|back\s+to|←|return\s+to|cancel|close|dismiss|not\s+now|skip|maybe\s+later)\b/.test(textForAction);
+    }
+    function isAuthMethodChooserTap(action) {
+      if (action.type !== "TAP")
+        return false;
+      const textForAction = actionText(action);
+      if (/\b(submit|confirm|sign\s*in|log\s*in|login)\b/.test(textForAction) && !/\b(with|using|via)\b/.test(textForAction)) {
+        return false;
+      }
+      return /\b(continue\s+with|sign\s+in\s+with|log\s+in\s+with|use\s+(email|phone)|choose|pick|select)\b/.test(textForAction);
+    }
+    function isCredentialSubmitTap(action) {
+      if (action.type !== "TAP")
+        return false;
+      if (isNavigationChromeTap(action) || isAuthMethodChooserTap(action))
+        return false;
+      const textForAction = actionText(action);
+      return /\b(sign\s*in|log\s*in|login|continue|submit|done|next|confirm)\b/.test(textForAction);
+    }
+    function isKeyboardFormCommit(action) {
+      return action.type === "TYPE" && (action.value ?? "").endsWith("\n");
+    }
+    function isFormCommitAction(action) {
+      if (isKeyboardFormCommit(action))
+        return true;
+      if (isCredentialSubmitTap(action))
+        return true;
+      if (action.type !== "TAP")
+        return false;
+      if (isNavigationChromeTap(action) || isAuthMethodChooserTap(action))
+        return false;
+      const textForAction = actionText(action);
+      return /\b(save|create|send|confirm|next|apply|post|checkout|pay|finish|update|register|sign\s*up|done|continue|submit)\b/i.test(textForAction);
+    }
     function actionText(action) {
       const bundle = action.metadata.locatorBundle;
       return [
@@ -67781,9 +68008,80 @@ ${statePacket}` },
         bundle?.xpath
       ].filter((value) => typeof value === "string" && value.trim().length > 0).join(" ").toLowerCase();
     }
+    function isStructuralOnlyAssert(action) {
+      if (action.type !== "ASSERT_VISIBLE" && action.type !== "ASSERT_TEXT")
+        return false;
+      const sel = (action.selector ?? "").trim();
+      if (/^\/hierarchy(\[\d+\])?(\/android\.widget\.FrameLayout\[\d+\])*$/i.test(sel))
+        return true;
+      if (isStructuralAssertionIdentity(sel) || isStructuralAssertionIdentity(action.metadata.targetLabel)) {
+        const bundle = action.metadata.locatorBundle;
+        const human = Boolean(nonEmpty2(action.innerText) || nonEmpty2(action.metadata.targetLabel) || nonEmpty2(bundle?.text) || nonEmpty2(bundle?.contentDesc));
+        if (!human)
+          return true;
+      }
+      if (/^\/hierarchy/i.test(sel)) {
+        const bundle = action.metadata.locatorBundle;
+        const hasIdentity = Boolean(nonEmpty2(action.metadata.targetLabel) || nonEmpty2(action.innerText) || nonEmpty2(bundle?.text) || nonEmpty2(bundle?.contentDesc) || nonEmpty2(bundle?.accessibilityId) || nonEmpty2(bundle?.resourceId) && !isStructuralAssertionIdentity(bundle?.resourceId));
+        if (!hasIdentity)
+          return true;
+      }
+      return false;
+    }
+    function collapseConsecutiveBacks(actions) {
+      if (actions.length <= 1)
+        return actions;
+      const out = [actions[0]];
+      for (let i = 1; i < actions.length; i++) {
+        if (actions[i].type === "BACK" && out[out.length - 1].type === "BACK")
+          continue;
+        out.push(actions[i]);
+      }
+      return out;
+    }
     function scenarioIntentMismatchReason(scenario, actions) {
       const text = scenarioText(scenario);
-      const isCredentialSignIn = /\b(sign\s*in|log\s*in|login|authenticate|auth)\b/.test(text) && /\b(email|e-mail|password|credential|valid credentials?)\b/.test(text) && !/\b(reset|forgot|recover|logout|log\s*out|sign\s*out)\b/.test(text);
+      if (isInspectionOnlyScenario(scenario, actions)) {
+        return null;
+      }
+      if (isNavigationFocusedScenario(scenario)) {
+        return null;
+      }
+      if (isFormValidationScenario(scenario)) {
+        const typedFields = actions.some((a) => a.type === "TYPE");
+        const hasCommit = actions.some((a) => isFormCommitAction(a));
+        const hasValidationAssert = actions.some((a) => {
+          if (a.type !== "ASSERT_VISIBLE" && a.type !== "ASSERT_TEXT")
+            return false;
+          return /\b(error|required|invalid|empty|missing|incorrect|wrong|try again|mismatch|does not match|must match)\b/.test(actionText(a));
+        });
+        const emptyFieldIntent = /\b(empty|required|missing|blank)\b/.test(text);
+        const invalidValueIntent = /\b(wrong|incorrect|invalid|mismatch|reject)\b/.test(text);
+        if (emptyFieldIntent && !invalidValueIntent) {
+          if (!hasCommit && !hasValidationAssert) {
+            return "validation scenario did not record a form commit or validation outcome";
+          }
+          return null;
+        }
+        if (typedFields && !hasCommit) {
+          return "validation scenario filled fields but never committed the form";
+        }
+        if (!hasCommit && !hasValidationAssert) {
+          return "validation scenario did not record a form commit or validation outcome";
+        }
+        return null;
+      }
+      if (isFormMutationHappyPath(scenario)) {
+        const hasType = actions.some((a) => a.type === "TYPE");
+        const hasCommit = actions.some((a) => isFormCommitAction(a));
+        if (!hasType) {
+          return "form-mutation happy path did not record any field entry";
+        }
+        if (!hasCommit) {
+          return "form-mutation happy path did not record a form commit";
+        }
+      }
+      const isCredentialSignIn = /\b(sign\s*in|log\s*in|login|authenticate|auth)\b/.test(text) && /\b(email|e-mail|password|credential|valid credentials?)\b/.test(text) && !/\b(reset|forgot|recover|logout|log\s*out|sign\s*out|change\s+password|update\s+password)\b/.test(text);
       const typedEmailIndexes = [];
       const typedPasswordIndexes = [];
       actions.forEach((action, index) => {
@@ -67800,19 +68098,19 @@ ${statePacket}` },
       const lastCredentialIndex = Math.max(...typedEmailIndexes, ...typedPasswordIndexes);
       const hasAnyCredentialEntry = Number.isFinite(lastCredentialIndex);
       const submitAfterCredentials = actions.some((action, index) => {
-        if (action.type !== "TAP" || index <= lastCredentialIndex)
+        if (index < lastCredentialIndex)
           return false;
-        const textForAction = actionText(action);
-        if (!/\b(sign\s*in|log\s*in|login|continue|submit)\b/.test(textForAction))
+        if (!isFormCommitAction(action))
           return false;
-        return !/\b(with\s+(email|e-mail|google|facebook|apple)|email\s+form|showemailformbtn)\b/i.test(textForAction);
+        if (action.type === "TYPE" && index === lastCredentialIndex)
+          return true;
+        return index > lastCredentialIndex;
       });
       const isAuthLikeScenario = /\b(sign(?:ed)?\s*in|log(?:ged)?\s*in|login|authenticate|auth|credential|email|e-mail|password)\b/.test(text);
       if (isAuthLikeScenario && hasAnyCredentialEntry && !submitAfterCredentials) {
-        return "credential fields were filled but no sign-in submit tap was recorded after them";
+        return "credential fields were filled but no form commit was recorded after them";
       }
       const uiOnlyCredentialScenario = /\b(mask|masked|visibility|show password|hide password|toggle|keyboard|keypad|max(?:imum)?\s*length|field focus|autofill)\b/.test(text);
-      const emptyFieldValidationScenario = /\b(empty|required|missing|blank)\b/.test(text);
       const sessionLifecycleScenario = /\b(logout|log\s*out|sign\s*out|session persistence|remain(?:s)? signed in|remember me)\b/.test(text);
       const loginTapWithoutCredentialPath = actions.some((action) => {
         if (action.type !== "TAP")
@@ -67820,29 +68118,70 @@ ${statePacket}` },
         const textForAction = actionText(action);
         if (/\b(logout|log\s*out|sign\s*out)\b/.test(textForAction))
           return false;
+        if (isAuthMethodChooserTap(action) || isNavigationChromeTap(action))
+          return false;
         return /\b(sign\s*in|log\s*in|login)\b/.test(textForAction);
       });
-      if (loginTapWithoutCredentialPath && !hasAnyCredentialEntry && !uiOnlyCredentialScenario && !emptyFieldValidationScenario && (sessionLifecycleScenario || /\b(valid credentials?|happy path|successful sign\s*in|successful login)\b/.test(text))) {
+      if (loginTapWithoutCredentialPath && !hasAnyCredentialEntry && !uiOnlyCredentialScenario && (sessionLifecycleScenario || /\b(valid credentials?|happy path|successful sign\s*in|successful login)\b/.test(text))) {
         return "auth/session scenario tapped a login or sign-in control without recording a credential path";
       }
-      if (!isCredentialSignIn)
+      if (isCredentialSignIn) {
+        const typedEmail = typedEmailIndexes.length > 0;
+        const typedPassword = typedPasswordIndexes.length > 0;
+        const tappedSubmit = submitAfterCredentials;
+        if (typedEmail && typedPassword && tappedSubmit) {
+        } else {
+          const missing = [
+            typedEmail ? null : "email/username entry",
+            typedPassword ? null : "password entry",
+            tappedSubmit ? null : "form commit (submit tap or keyboard Enter)"
+          ].filter((value) => value !== null);
+          return `credential sign-in scenario did not record ${missing.join(", ")}`;
+        }
+      }
+      const isHappyPath = /\b(happy\s*path|successful|success|create|save|submit|complete|checkout|send|post)\b/.test(text) || scenario.type === "HAPPY_PATH";
+      if (!isHappyPath)
         return null;
-      const typedEmail = typedEmailIndexes.length > 0;
-      const typedPassword = typedPasswordIndexes.length > 0;
-      const tappedSubmit = submitAfterCredentials;
-      if (typedEmail && typedPassword && tappedSubmit)
+      let lastTypeIndex = -1;
+      let lastAssertIndex = -1;
+      actions.forEach((action, index) => {
+        if (action.type === "TYPE")
+          lastTypeIndex = index;
+        if (action.type === "ASSERT_VISIBLE" || action.type === "ASSERT_TEXT")
+          lastAssertIndex = index;
+      });
+      if (lastTypeIndex < 0 || lastAssertIndex <= lastTypeIndex)
         return null;
-      const missing = [
-        typedEmail ? null : "email/username entry",
-        typedPassword ? null : "password entry",
-        tappedSubmit ? null : "sign-in submit tap"
-      ].filter((value) => value !== null);
-      return `credential sign-in scenario did not record ${missing.join(", ")}`;
+      const typeScreen = actions[lastTypeIndex]?.metadata?.screenName?.trim() ?? "";
+      const assertScreen = actions[lastAssertIndex]?.metadata?.screenName?.trim() ?? "";
+      const screensDiffer = typeScreen !== "" && assertScreen !== "" && typeScreen !== assertScreen;
+      const lastTypeAction = actions[lastTypeIndex];
+      const keyboardCommitOnLastType = lastTypeAction != null && isKeyboardFormCommit(lastTypeAction);
+      const commitAfterType = keyboardCommitOnLastType || actions.some((action, index) => {
+        if (index <= lastTypeIndex || index >= lastAssertIndex)
+          return false;
+        return isFormCommitAction(action);
+      });
+      if (screensDiffer && !commitAfterType) {
+        return "form fields were filled then a success assert was recorded without a commit/submit tap between them";
+      }
+      return null;
     }
     function actionCycleKey(action) {
       return `${action.type}|${action.selector}|${action.value ?? ""}`;
     }
     var MAX_RETRY_CYCLE_LENGTH = 8;
+    function dedupeConsecutiveIdenticalActions(actions) {
+      if (actions.length <= 1)
+        return actions;
+      const out = [actions[0]];
+      for (let i = 1; i < actions.length; i++) {
+        if (actionCycleKey(actions[i]) === actionCycleKey(out[out.length - 1]))
+          continue;
+        out.push(actions[i]);
+      }
+      return out;
+    }
     function collapseRetryCycles(actions) {
       const out = [...actions];
       let changed = true;
@@ -67883,15 +68222,30 @@ ${statePacket}` },
     }
     function assembleTest(args) {
       const { scenario, recording, ctx, platform: platform3, appDataCleared, log: log2 } = args;
-      let actions = collapseRetryCycles(recording.actions);
+      let actions = dedupeConsecutiveIdenticalActions(recording.actions);
       if (actions.length < recording.actions.length) {
-        log2(`  collapsed ${recording.actions.length - actions.length} retry-cycle step(s) out of the recorded trace (${recording.actions.length} \u2192 ${actions.length}).`);
+        log2(`  deduped ${recording.actions.length - actions.length} consecutive identical step(s) (${recording.actions.length} \u2192 ${actions.length}).`);
+      }
+      const beforeBackCollapse = actions.length;
+      actions = collapseConsecutiveBacks(actions);
+      if (actions.length < beforeBackCollapse) {
+        log2(`  collapsed ${beforeBackCollapse - actions.length} consecutive BACK step(s) (${beforeBackCollapse} \u2192 ${actions.length}).`);
+      }
+      const beforeCycleCollapse = actions.length;
+      actions = collapseRetryCycles(actions);
+      if (actions.length < beforeCycleCollapse) {
+        log2(`  collapsed ${beforeCycleCollapse - actions.length} retry-cycle step(s) out of the recorded trace (${beforeCycleCollapse} \u2192 ${actions.length}).`);
       }
       const beforeContainerDrop = actions.length;
       actions = actions.filter((a) => !isBareContainerTap(a));
       if (actions.length < beforeContainerDrop) {
         log2(`  dropped ${beforeContainerDrop - actions.length} bare-container tap step(s) (no identity \u2014 un-replayable ambient taps).`);
       }
+      const beforeWeakAssertDrop = actions.length;
+      actions = actions.filter((a) => !isStructuralOnlyAssert(a));
+      if (actions.length < beforeWeakAssertDrop) {
+        log2(`  dropped ${beforeWeakAssertDrop - actions.length} structural-only assert step(s) (no product identity).`);
+      }
       const intentMismatch = scenarioIntentMismatchReason(scenario, actions);
       if (intentMismatch) {
         log2(`  skipped scenario "${scenario.name}": ${intentMismatch}.`);
@@ -68703,10 +69057,22 @@ For a fix, return the COMPLETE steps array (not a diff).`;
       if (!/\b(tap|click|press)\b/i.test(step.action))
         return false;
       const text = mobileStepSearchText(step);
-      if (/\b(logout|log\s*out|sign\s*out|reset|forgot|google|apple|facebook|github|sso|showemailform|with\s+email|email\s+form)\b/.test(text)) {
+      if (/\b(logout|log\s*out|sign\s*out|reset|forgot|go\s+back|back\s+to|cancel|close|dismiss)\b/.test(text)) {
         return false;
       }
-      return /\b(sign\s*in|signin|log\s*in|login|continue|submit)\b/.test(text);
+      if (/\b(continue\s+with|sign\s+in\s+with|log\s+in\s+with|use\s+(email|phone)|choose|pick|select)\b/.test(text) && !/\b(submit|confirm)\b/.test(text)) {
+        return false;
+      }
+      return /\b(sign\s*in|signin|log\s*in|login|continue|submit|done|next|confirm)\b/.test(text);
+    }
+    function isKeyboardFormCommitStep(step) {
+      if (!/\b(type|fill|input|enter)\b/i.test(step.action))
+        return false;
+      const value = typeof step.value === "string" ? step.value : "";
+      return value.endsWith("\n");
+    }
+    function isFormCommitStep(step) {
+      return isCredentialSubmitTap(step) || isKeyboardFormCommitStep(step);
     }
     function detectInvalidAuthValidationSetup(steps, error2) {
       if (!/\b(element not found|no such element|not visible|timeout|assert|could not be located|unexpected screen|screen drift)\b/i.test(error2 ?? "")) {
@@ -68731,20 +69097,23 @@ For a fix, return the COMPLETE steps array (not a diff).`;
           if ((step.order ?? -1) >= lastCredentialEditOrder)
             return false;
           const text = mobileStepSearchText(step);
-          return /\b(showemailformbtn|with\s+email|email\s+form|sign in with email|loginform|login form|email|e-mail|username|user\s*name)\b/.test(text);
+          return /\b(sign\s+in\s+with\s+email|log\s+in\s+with\s+email|email\s+and\s+password|login\s+form|credential\s+form|email|e-mail|username|user\s*name)\b/.test(text);
         });
         if (hasCredentialFormEvidence)
           return null;
         return "credential-control test edits a credential field without recording a path to the email/password form; stale auth-control test is invalid until generation records a complete form path";
       }
-      const hasSubmitAfterCredentialEdit = steps.some((step) => (step.order ?? -1) > lastCredentialEditOrder && isCredentialSubmitTap(step));
+      const hasSubmitAfterCredentialEdit = steps.some((step) => (step.order ?? -1) > lastCredentialEditOrder && isFormCommitStep(step));
       if (hasSubmitAfterCredentialEdit)
         return null;
+      const hasKeyboardCommitOnCredential = steps.some((step) => (step.order ?? -1) === lastCredentialEditOrder && isKeyboardFormCommitStep(step));
+      if (hasKeyboardCommitOnCredential)
+        return null;
       const hasValidationAssertion = steps.some((step) => {
         if (!/\b(assert|wait)\b/i.test(step.action))
           return false;
         const text = mobileStepSearchText(step);
-        return /\b(invalid|required|error|empty|missing|incorrect|wrong|try again|validation|must enter|enter (an )?(email|password)|email is required|password is required)\b/.test(text);
+        return /\b(invalid|required|error|empty|missing|incorrect|wrong|try again|validation|must enter|enter (an )?(email|password)|email is required|password is required|mismatch|does not match)\b/.test(text);
       });
       if (hasValidationAssertion)
         return null;
@@ -68772,8 +69141,21 @@ For a fix, return the COMPLETE steps array (not a diff).`;
     function coerceSteps(value) {
       if (!Array.isArray(value) || value.length === 0)
         return void 0;
-      const allValid = value.every((step) => isRecord(step) && typeof step.action === "string" && typeof step.order === "number");
-      return allValid ? value : void 0;
+      const steps = [];
+      for (let i = 0; i < value.length; i++) {
+        const step = value[i];
+        if (!isRecord(step) || typeof step.action !== "string" || !step.action.trim()) {
+          return void 0;
+        }
+        const orderRaw = step.order;
+        const order = typeof orderRaw === "number" && Number.isFinite(orderRaw) ? orderRaw : typeof orderRaw === "string" && orderRaw.trim() !== "" && Number.isFinite(Number(orderRaw)) ? Number(orderRaw) : i;
+        steps.push({
+          ...step,
+          order,
+          action: step.action
+        });
+      }
+      return steps.map((step, order) => ({ ...step, order }));
     }
     function parseHealVerdict(content) {
       const cleaned = stripCodeFences(content);
@@ -72994,6 +73376,48 @@ var require_snapshot_observation = __commonJS({
     var PROMOTED_FORM_FIELD_CAP = 12;
     var FORM_MEMBER_CONTAINER_SEGMENT_RE = /(?:^|>\s*)(?:form|group)\b/i;
     var DATA_GRID_CONTAINER_SEGMENT_RE = /(?:^|>\s*)(?:table|grid|rowgroup|row|gridcell|cell)\b/i;
+    var DEEP_NONNAV_CAP_CENSUS = 16;
+    var CENSUS_NAV_LINK_CAP = 60;
+    var CENSUS_MIN_ACTION_GROUP = 3;
+    var DESTRUCTIVE_ACTION_VERB_RE = /^(?:delete|remove|destroy|suspend|deactivate|disable|revoke|ban|block|archive|terminate|reject|cancel|reset|purge|wipe|unpublish|unsubscribe)$/i;
+    function leadingActionVerb(label) {
+      if (!label)
+        return null;
+      const m = label.trim().match(/[A-Za-z]+/);
+      return m ? m[0].toLowerCase() : null;
+    }
+    function isNavLinkEntry(entry) {
+      return entry.element.elementType === "LINK" && !!entry.element.triggersNavigation;
+    }
+    function isRowRepeatedControl(element) {
+      return !!element.enrichment?.rowContext || !!element.containerPath && DATA_GRID_CONTAINER_SEGMENT_RE.test(element.containerPath);
+    }
+    function rowContainerScope(containerPath) {
+      if (!containerPath)
+        return null;
+      const m = containerPath.match(/^(.*?)\s*>\s*row\b/i);
+      return m ? m[1].trim() : containerPath.trim();
+    }
+    function containerScopeLabel(scope) {
+      if (!scope)
+        return null;
+      const landmarks = [...scope.matchAll(/(?:table|grid|treegrid|list|listbox|tree|rowgroup):([^>]+)/gi)];
+      if (landmarks.length > 0)
+        return landmarks[landmarks.length - 1][1].trim();
+      const segs = scope.split(">").map((s) => s.trim()).filter(Boolean);
+      return segs.length ? segs[segs.length - 1] : null;
+    }
+    function rowIdentityKey(element) {
+      const rc = element.enrichment?.rowContext;
+      if (rc)
+        return `rc:${rc}`;
+      const cp = element.containerPath;
+      if (cp) {
+        const m = cp.match(/>\s*row:(.+)$/i);
+        return m ? `row:${m[1].trim()}` : `cp:${cp}`;
+      }
+      return element.ref ? `ref:${element.ref}` : "unknown";
+    }
     function isGroupedFormField(element) {
       if (!FORM_CONTROL_ROLE_RE.test(element.role ?? ""))
         return false;
@@ -73009,6 +73433,7 @@ var require_snapshot_observation = __commonJS({
       const sourceKind = page.snapshotMeta?.sourceKind ?? page.snapshotArtifact?.sourceKind ?? "missing";
       const artifact = page.snapshotArtifact;
       const richRender = options.richRender ?? process.env.DISCOVERY_SNAPSHOT_RICH_RENDER === "true";
+      const rowActionCensus = richRender && options.mode !== "survey" && (options.rowActionCensus ?? process.env.DISCOVERY_SNAPSHOT_ROW_CENSUS === "true");
       const activeScope = inferActiveSnapshotScope(page);
       const ranked = rankSnapshotElements(getScopedSnapshotElements(page, activeScope), withScopeContext({ ...context, richRank: richRender }, activeScope));
       const allInteractive = ranked.filter(({ element }) => isInteractiveCandidate(element)).filter(({ element }) => {
@@ -73022,10 +73447,17 @@ var require_snapshot_observation = __commonJS({
       });
       let interactive;
       if (options.mode === "survey") {
-        const navLinks = allInteractive.filter(({ element }) => element.elementType === "LINK" && element.triggersNavigation);
-        const others = allInteractive.filter(({ element }) => !(element.elementType === "LINK" && element.triggersNavigation));
+        const navLinks = allInteractive.filter(isNavLinkEntry);
+        const others = allInteractive.filter((entry) => !isNavLinkEntry(entry));
         const othersCap = richRender ? 6 : 4;
         interactive = [...navLinks, ...others.slice(0, othersCap)];
+      } else if (rowActionCensus) {
+        const navLinks = allInteractive.filter(isNavLinkEntry);
+        const others = allInteractive.filter((entry) => !isNavLinkEntry(entry));
+        interactive = [
+          ...navLinks.slice(0, CENSUS_NAV_LINK_CAP),
+          ...others.slice(0, options.elementLimit ?? DEEP_NONNAV_CAP_CENSUS)
+        ];
       } else {
         interactive = allInteractive.slice(0, options.elementLimit ?? (richRender ? 8 : 6));
       }
@@ -73038,6 +73470,36 @@ var require_snapshot_observation = __commonJS({
           }
         }
       }
+      if (rowActionCensus && interactive.length > 0) {
+        const shownVerbs = new Set(interactive.filter((entry) => !isNavLinkEntry(entry) && isRowRepeatedControl(entry.element)).map(({ element }) => leadingActionVerb(qualifyElementLabel(element))).filter(Boolean));
+        const bestByVerb = /* @__PURE__ */ new Map();
+        for (const entry of allInteractive) {
+          if (isNavLinkEntry(entry) || !isRowRepeatedControl(entry.element))
+            continue;
+          const verb = leadingActionVerb(qualifyElementLabel(entry.element));
+          if (!verb || !DESTRUCTIVE_ACTION_VERB_RE.test(verb))
+            continue;
+          if (shownVerbs.has(verb))
+            continue;
+          if (interactive.includes(entry))
+            continue;
+          const existing = bestByVerb.get(verb);
+          if (!existing) {
+            bestByVerb.set(verb, entry);
+            continue;
+          }
+          if (existing.element.isDisabled && !entry.element.isDisabled)
+            bestByVerb.set(verb, entry);
+        }
+        const swapIns = [...bestByVerb.values()];
+        if (swapIns.length > 0) {
+          const navShown = interactive.filter(isNavLinkEntry);
+          const nonNavShown = interactive.filter((entry) => !isNavLinkEntry(entry));
+          const evictable = Math.min(swapIns.length, nonNavShown.length);
+          const trimmed = nonNavShown.slice(0, nonNavShown.length - evictable);
+          interactive = [...navShown, ...trimmed, ...swapIns.slice(0, evictable)];
+        }
+      }
       const duplicates = detectDuplicateRoleNameGroups(duplicateScanCandidates);
       const allForms = artifact?.formGroups ?? page.formGroups ?? [];
       const forms = allForms.slice(0, options.formLimit ?? 3);
@@ -73337,6 +73799,54 @@ var require_snapshot_observation = __commonJS({
           const hidden = allInteractive.length - interactive.length;
           if (hidden > 0) {
             lines.push(`  # +${hidden} more interactive element(s) not individually listed (capped) \u2014 some may appear in the duplicates block above; if your target isn't here, narrow the scope or act on it by ref.`);
+            if (rowActionCensus) {
+              const shownSet = new Set(interactive.map((entry) => entry.element));
+              const groups = /* @__PURE__ */ new Map();
+              for (const entry of allInteractive) {
+                const el = entry.element;
+                if (!isRowRepeatedControl(el))
+                  continue;
+                const verb = leadingActionVerb(qualifyElementLabel(el));
+                if (!verb)
+                  continue;
+                const role = (el.role ?? el.elementType ?? "control").toLowerCase();
+                const scope = rowContainerScope(el.containerPath);
+                const key = JSON.stringify([scope ?? "", role, verb]);
+                let group = groups.get(key);
+                if (!group) {
+                  group = { verb, role, scopeLabel: containerScopeLabel(scope), rows: /* @__PURE__ */ new Set(), shownRows: /* @__PURE__ */ new Set(), disabledRows: /* @__PURE__ */ new Set(), controls: 0 };
+                  groups.set(key, group);
+                }
+                const rowKey = rowIdentityKey(el);
+                group.rows.add(rowKey);
+                group.controls += 1;
+                if (shownSet.has(el))
+                  group.shownRows.add(rowKey);
+                if (el.isDisabled)
+                  group.disabledRows.add(rowKey);
+              }
+              const collapsed = [...groups.values()].map((g) => ({
+                verb: g.verb,
+                role: g.role,
+                scopeLabel: g.scopeLabel,
+                total: g.rows.size,
+                shown: g.shownRows.size,
+                disabled: g.disabledRows.size,
+                controls: g.controls
+              })).filter((g) => g.total >= CENSUS_MIN_ACTION_GROUP && g.total > g.shown).sort((a, b) => {
+                const aDestructive = DESTRUCTIVE_ACTION_VERB_RE.test(a.verb) ? 0 : 1;
+                const bDestructive = DESTRUCTIVE_ACTION_VERB_RE.test(b.verb) ? 0 : 1;
+                return aDestructive - bDestructive || b.total - b.shown - (a.total - a.shown);
+              });
+              for (const g of collapsed) {
+                const verbLabel = g.verb.charAt(0).toUpperCase() + g.verb.slice(1);
+                const destructiveTag = DESTRUCTIVE_ACTION_VERB_RE.test(g.verb) ? " [destructive]" : "";
+                const where = g.scopeLabel ? ` in ${yamlScalar(g.scopeLabel)}` : "";
+                const controlsNote = g.controls > g.total ? ` (${g.controls} controls across ${g.total} rows)` : "";
+                const disabledNote = g.disabled > 0 ? `; ${g.disabled} disabled at capture` : "";
+                lines.push(`  #   \u21B3 "${verbLabel}" ${g.role}${destructiveTag}${where}: present on ${g.total} rows${controlsNote} \u2014 ${g.shown} listed above, ${g.total - g.shown} collapsed${disabledNote}; the same action repeats down these rows \u2014 target a specific row by its row identity (the row's Edit link / row_context above), not a bare "${verbLabel}" locator.`);
+              }
+            }
           }
         }
       }
@@ -74359,13 +74869,14 @@ var require_auth_recipe = __commonJS({
   "../runner-core/dist/services/auth-recipe.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
-    exports2.AUTH_MARKER_VERSION = void 0;
+    exports2.RESERVED_RUNNER_ENV_VARS = exports2.AUTH_MARKER_VERSION = void 0;
     exports2.computeRecipeHash = computeRecipeHash;
     exports2.buildAuthRecipe = buildAuthRecipe;
     exports2.authProofLocator = authProofLocator;
     exports2.urlProofPredicateExpr = urlProofPredicateExpr;
     exports2.renderAuthProofAssertion = renderAuthProofAssertion;
     exports2.renderAuthFn = renderAuthFn;
+    exports2.isReservedRunnerEnvVar = isReservedRunnerEnvVar;
     exports2.absoluteRoute = absoluteRoute;
     exports2.renderReplayClickArrow = renderReplayClickArrow;
     exports2.renderReplaySettleArrow = renderReplaySettleArrow;
@@ -74484,6 +74995,17 @@ var require_auth_recipe = __commonJS({
       lines.push(END_MARKER);
       return lines.join("\n");
     }
+    exports2.RESERVED_RUNNER_ENV_VARS = /* @__PURE__ */ new Set([
+      "AUTH_FILE",
+      "SHARED_AUTH_INJECT",
+      "VALIDATE_RUN_ID",
+      "VALIDATE_TASK_ARN",
+      "VALIDATE_RUNNER_AUTH",
+      "VALIDATE_SERVER_URL"
+    ]);
+    function isReservedRunnerEnvVar(key) {
+      return key.startsWith("VALIDATE_") || exports2.RESERVED_RUNNER_ENV_VARS.has(key);
+    }
     function absoluteRoute(route2, baseUrl) {
       try {
         return new URL(route2, baseUrl).href;
@@ -315588,9 +316110,15 @@ var require_mobile_discovery_agent = __commonJS({
         log2(`
 Explore complete: ${explore.exploreStats.pagesDiscovered} screens, ${explore.exploreStats.elementsFound} elements, ${explore.exploreStats.transitionsFound} transitions (${exploreElapsed}s)`);
         if (callbacks?.onExploreComplete) {
-          await callbacks.onExploreComplete(toExploreCompleteData(explore, collectedTransitions)).catch((err) => {
-            log2(`[stream] explore-complete callback failed: ${err instanceof Error ? err.message : String(err)}`);
-          });
+          try {
+            await callbacks.onExploreComplete(toExploreCompleteData(explore, collectedTransitions));
+          } catch (err) {
+            const message = checkpointErrorMessage(err);
+            log2(`[stream] explore-complete callback failed: ${message}`);
+            if (isTerminalDiscoveryCheckpointError(err)) {
+              throw err;
+            }
+          }
         }
         if (!isSurvey && shouldPauseAfterTruncatedExplore(explore)) {
           const duration2 = (Date.now() - startTime) / 1e3;
@@ -315618,8 +316146,10 @@ Explore complete: ${explore.exploreStats.pagesDiscovered} screens, ${explore.exp
             pausePhase: "explore"
           };
         }
-        log2("\nRelaunching app for a clean state before planning/generation...");
-        await driver.relaunch();
+        if (!isSurvey) {
+          log2("\nRelaunching app for a clean state before planning/generation...");
+          await driver.relaunch();
+        }
         log2("\n\u2500\u2500 Phase 2: PLAN \u2500\u2500");
         const graph = state2.toScreenGraph();
         const screenMap = state2.buildInMemoryScreenMap();
@@ -315642,7 +316172,9 @@ Explore complete: ${explore.exploreStats.pagesDiscovered} screens, ${explore.exp
             hasPassword: !!ctx.variableContext?.allTestVariables?.TEST_USER_PASSWORD || !!ctx.variableContext?.publicTestVariables?.TEST_USER_PASSWORD
           },
           incremental: ctx.incremental,
-          testBudget
+          testBudget,
+          userNotes: ctx.userNotes,
+          featureContext: ctx.featureContext
         }, {
           modelOverride: ctx.planModel ?? ctx.generateModel,
           onAICall
@@ -315815,10 +316347,20 @@ Fatal error: ${msg}`);
         log2(`App-data reset failed: ${err instanceof Error ? err.message : String(err)}`);
         return false;
       }) ?? false;
-      if (!cleared && resetPolicy === "CLEAR_APP_DATA") {
-        log2("CLEAR_APP_DATA requested but app-data reset was unavailable; continuing without clearing app data.");
+      if (cleared)
+        return true;
+      if (resetPolicy === "CLEAR_APP_DATA") {
+        log2("CLEAR_APP_DATA requested but app-data reset was unavailable; a post-explore relaunch will reset state before planning.");
+      }
+      if (mode !== "survey") {
+        return false;
       }
-      return cleared;
+      try {
+        await driver.relaunch();
+      } catch (err) {
+        log2(`App relaunch failed after unsuccessful app-data reset: ${err instanceof Error ? err.message : String(err)}`);
+      }
+      return false;
     }
     function shouldPauseAfterTruncatedExplore(explore) {
       return explore.truncated === true && (explore.truncatedReason === "rate_limit" || explore.truncatedReason === "timeout");
@@ -315865,6 +316407,7 @@ var require_discover_agent = __commonJS({
     var claude_discovery_runner_js_1 = require_claude_discovery_runner();
     var agentic_cli_constants_js_1 = require_agentic_cli_constants();
     var canvas_detector_js_1 = require_canvas_detector();
+    var auth_recipe_js_1 = require_auth_recipe();
     async function runCanvasPreflight(ctx, sharedBrowser, log2) {
       const cached = ctx.appRenderType ?? null;
       const engine = (0, agentic_cli_constants_js_1.getAgenticEngine)(ctx.exploreModel);
@@ -316560,7 +317103,7 @@ Health: ${healthSummary.totalIssues} issue(s) - ${healthSummary.consoleErrors.le
           }
           if (envRefs.size > 0) {
             const existingKeys = new Set(ctx.variableContext.availableVariableKeys);
-            const missing = [...envRefs].filter((k) => !existingKeys.has(k));
+            const missing = [...envRefs].filter((k) => !existingKeys.has(k) && !(0, auth_recipe_js_1.isReservedRunnerEnvVar)(k));
             if (missing.length > 0) {
               autoVariableDefaults = {};
               for (const key of missing) {
@@ -317076,7 +317619,7 @@ Health: ${healthSummary.totalIssues} issue(s) - ${healthSummary.consoleErrors.le
             envRefs.add(match[1]);
           if (envRefs.size > 0) {
             const existingKeys = new Set(ctx.variableContext.availableVariableKeys);
-            const missing = [...envRefs].filter((k) => !existingKeys.has(k));
+            const missing = [...envRefs].filter((k) => !existingKeys.has(k) && !(0, auth_recipe_js_1.isReservedRunnerEnvVar)(k));
             if (missing.length > 0) {
               autoVariableDefaults = {};
               for (const key of missing) {
@@ -329958,9 +330501,9 @@ var require_dist2 = __commonJS({
       for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports3, p)) __createBinding(exports3, m, p);
     };
     Object.defineProperty(exports2, "__esModule", { value: true });
-    exports2.buildImportSystemRules = exports2.buildImportKickoff = exports2.buildImportContractMd = exports2.MAX_ARCHIVE_BYTES = exports2.isUnsafeEntryName = exports2.extractZipSafely = exports2.downloadArchiveCapped = exports2.detectArchiveKind = exports2.acquireRepoForImport = exports2.runFrameworkImportOnRunner = exports2.getAgenticEngine = exports2.resolveRefFromSnapshot = exports2.replayAuthRecipeIntoBrowser = exports2.runRegisterCaptureRun = exports2.runLoginCaptureRun = exports2.AUTH_MARKER_VERSION = exports2.buildHealAuthStamp = exports2.extractAuthRegion = exports2.upsertAuthBlock = exports2.buildAuthRecipe = exports2.commandToReplayStep = exports2.buildReplayPlan = exports2.absoluteRoute = exports2.renderReplaySettleArrow = exports2.renderReplayClickArrow = exports2.renderAuthFn = exports2.canonicalizeRoute = exports2.executeGrokPerBatchHeal = exports2.executeGrokPerTestHeal = exports2.headerVal = exports2.classifyAuthType = exports2.isTextExcerptable = exports2.isStaticAssetByExt = exports2.isApiCall = exports2.buildApiCallSummary = exports2.computeMobileHealOutcome = exports2.detectMobileStepSecretLeak = exports2.redactMobileSecretsFromText = exports2.MOBILE_LIVE_HEAL_SYSTEM_PROMPT = exports2.MOBILE_SCRIPT_HEAL_SYSTEM_PROMPT = exports2.executeMobileLiveHeal = exports2.executeMobileTestWithHealing = exports2.executeMobileScriptDrivenHeal = exports2.runMobileGeneratePhase = exports2.runMobileAIPlanner = exports2.buildMobileSiteMap = exports2.formatMobileEvidenceForPlanner = exports2.MOBILE_SCENARIO_SYSTEM_PROMPT = exports2.MOBILE_SURVEY_SYSTEM_PROMPT = exports2.runMobileExplorePhase = void 0;
-    exports2.UnsupportedRendererError = exports2.buildCanvasModeAuthoringAddendum = exports2.buildUnsupportedRendererMessage = exports2.modelSupportsVision = exports2.decideCanvasStrategy = exports2.decideAppRenderType = exports2.detectCanvasApp = exports2.detectRateLimitBlock = exports2.isSafeCanonicalRedirect = exports2.resolveBaseUrlPreflight = exports2.checkBaseUrlRedirect = exports2.stripJsonFences = exports2.scrubCredentials = exports2.withAIRetry = exports2.snapshotMatchingChildren = exports2.findNewChromiumChildPid = exports2.killProcessTree = exports2.gracefulCloseWithTreeKill = exports2.liveBrowserRegistry = exports2.REPO_SWITCH_REMOVED_FRACTION = exports2.MAX_MANIFEST_FILES = exports2.toDiffSummary = exports2.isLikelyTestFile = exports2.sanitizeRepoRelPath = exports2.sha256Hex = exports2.hashFiles = exports2.enumerateTestFiles = exports2.buildNextManifest = exports2.detectRepoSwitch = exports2.classifyImportDiff = exports2.parseImportManifest = exports2.REPO_ANALYSIS_SCHEMA_VERSION = exports2.validateSourceEndpoints = exports2.validateAuthoredTest = exports2.validateRepoMapFile = exports2.validateRepoMemoryFile = exports2.buildTestingStandardsSection = exports2.buildRepoAuthorSystemRules = exports2.buildRepoAuthorKickoff = exports2.buildRepoAuthorContractMd = exports2.buildRepoMapSystemRules = exports2.buildRepoMapKickoff = exports2.buildRepoMapContractMd = exports2.buildRepoMemorySystemRules = exports2.buildRepoMemoryKickoff = exports2.buildRepoMemoryContractMd = exports2.runRepoAnalysisOnRunner = exports2.IMPORT_SCHEMA_VERSION = exports2.validateImportResultFile = exports2.validateImportedTest = void 0;
-    exports2.UNSUPPORTED_RENDERER_PREFIX = void 0;
+    exports2.buildImportContractMd = exports2.MAX_ARCHIVE_BYTES = exports2.isUnsafeEntryName = exports2.extractZipSafely = exports2.downloadArchiveCapped = exports2.detectArchiveKind = exports2.acquireRepoForImport = exports2.runFrameworkImportOnRunner = exports2.getAgenticEngine = exports2.resolveRefFromSnapshot = exports2.replayAuthRecipeIntoBrowser = exports2.runRegisterCaptureRun = exports2.runLoginCaptureRun = exports2.isReservedRunnerEnvVar = exports2.RESERVED_RUNNER_ENV_VARS = exports2.AUTH_MARKER_VERSION = exports2.buildHealAuthStamp = exports2.extractAuthRegion = exports2.upsertAuthBlock = exports2.buildAuthRecipe = exports2.commandToReplayStep = exports2.buildReplayPlan = exports2.absoluteRoute = exports2.renderReplaySettleArrow = exports2.renderReplayClickArrow = exports2.renderAuthFn = exports2.canonicalizeRoute = exports2.executeGrokPerBatchHeal = exports2.executeGrokPerTestHeal = exports2.headerVal = exports2.classifyAuthType = exports2.isTextExcerptable = exports2.isStaticAssetByExt = exports2.isApiCall = exports2.buildApiCallSummary = exports2.computeMobileHealOutcome = exports2.detectMobileStepSecretLeak = exports2.redactMobileSecretsFromText = exports2.MOBILE_LIVE_HEAL_SYSTEM_PROMPT = exports2.MOBILE_SCRIPT_HEAL_SYSTEM_PROMPT = exports2.executeMobileLiveHeal = exports2.executeMobileTestWithHealing = exports2.executeMobileScriptDrivenHeal = exports2.runMobileGeneratePhase = exports2.runMobileAIPlanner = exports2.buildMobileSiteMap = exports2.formatMobileEvidenceForPlanner = exports2.MOBILE_SCENARIO_SYSTEM_PROMPT = exports2.MOBILE_SURVEY_SYSTEM_PROMPT = exports2.runMobileExplorePhase = void 0;
+    exports2.buildUnsupportedRendererMessage = exports2.modelSupportsVision = exports2.decideCanvasStrategy = exports2.decideAppRenderType = exports2.detectCanvasApp = exports2.detectRateLimitBlock = exports2.isSafeCanonicalRedirect = exports2.resolveBaseUrlPreflight = exports2.checkBaseUrlRedirect = exports2.stripJsonFences = exports2.scrubCredentials = exports2.withAIRetry = exports2.snapshotMatchingChildren = exports2.findNewChromiumChildPid = exports2.killProcessTree = exports2.gracefulCloseWithTreeKill = exports2.liveBrowserRegistry = exports2.REPO_SWITCH_REMOVED_FRACTION = exports2.MAX_MANIFEST_FILES = exports2.toDiffSummary = exports2.isLikelyTestFile = exports2.sanitizeRepoRelPath = exports2.sha256Hex = exports2.hashFiles = exports2.enumerateTestFiles = exports2.buildNextManifest = exports2.detectRepoSwitch = exports2.classifyImportDiff = exports2.parseImportManifest = exports2.REPO_ANALYSIS_SCHEMA_VERSION = exports2.validateSourceEndpoints = exports2.validateAuthoredTest = exports2.validateRepoMapFile = exports2.validateRepoMemoryFile = exports2.buildTestingStandardsSection = exports2.buildRepoAuthorSystemRules = exports2.buildRepoAuthorKickoff = exports2.buildRepoAuthorContractMd = exports2.buildRepoMapSystemRules = exports2.buildRepoMapKickoff = exports2.buildRepoMapContractMd = exports2.buildRepoMemorySystemRules = exports2.buildRepoMemoryKickoff = exports2.buildRepoMemoryContractMd = exports2.runRepoAnalysisOnRunner = exports2.IMPORT_SCHEMA_VERSION = exports2.validateImportResultFile = exports2.validateImportedTest = exports2.buildImportSystemRules = exports2.buildImportKickoff = void 0;
+    exports2.UNSUPPORTED_RENDERER_PREFIX = exports2.UnsupportedRendererError = exports2.buildCanvasModeAuthoringAddendum = void 0;
     __exportStar(require_ai_provider(), exports2);
     __exportStar(require_mobile_types(), exports2);
     __exportStar(require_mobile_source_parser(), exports2);
@@ -330097,6 +330640,12 @@ var require_dist2 = __commonJS({
     Object.defineProperty(exports2, "AUTH_MARKER_VERSION", { enumerable: true, get: function() {
       return auth_recipe_js_1.AUTH_MARKER_VERSION;
     } });
+    Object.defineProperty(exports2, "RESERVED_RUNNER_ENV_VARS", { enumerable: true, get: function() {
+      return auth_recipe_js_1.RESERVED_RUNNER_ENV_VARS;
+    } });
+    Object.defineProperty(exports2, "isReservedRunnerEnvVar", { enumerable: true, get: function() {
+      return auth_recipe_js_1.isReservedRunnerEnvVar;
+    } });
     var auth_capture_run_js_1 = require_auth_capture_run();
     Object.defineProperty(exports2, "runLoginCaptureRun", { enumerable: true, get: function() {
       return auth_capture_run_js_1.runLoginCaptureRun;
@@ -330324,7 +330873,7 @@ var require_package4 = __commonJS({
   "package.json"(exports2, module2) {
     module2.exports = {
       name: "@validate.qa/runner",
-      version: "1.0.32",
+      version: "1.0.34",
       description: "validate local test runner - execute Playwright tests on your machine, connected to validate.qa cloud.",
       bin: {
         "validate-runner": "dist/cli.js"
@@ -330940,25 +331489,53 @@ async function resolveTypeTargetElementId(sessionPath, bounds) {
   }
   return elementId;
 }
+async function sendKeysToFocusedInput(sessionPath, value) {
+  await appiumRequest(`${sessionPath}/keys`, {
+    method: "POST",
+    body: JSON.stringify({ text: value, value: Array.from(value) })
+  });
+}
 async function typeText(sessionPath, value, bounds) {
   const elementId = await resolveTypeTargetElementId(sessionPath, bounds);
-  if (!elementId) {
-    throw new Error("No focused element available for TYPE. Tap an input field first.");
+  if (elementId) {
+    try {
+      await appiumRequest(`${sessionPath}/element/${elementId}/value`, {
+        method: "POST",
+        body: JSON.stringify({ text: value })
+      });
+      return;
+    } catch (err) {
+      if (isAppiumDriverDeadError(err)) throw err;
+    }
   }
-  await appiumRequest(`${sessionPath}/element/${elementId}/value`, {
-    method: "POST",
-    body: JSON.stringify({ text: value })
-  });
+  await sendKeysToFocusedInput(sessionPath, value);
 }
 async function clearField(sessionPath, bounds) {
   const elementId = await resolveTypeTargetElementId(sessionPath, bounds);
-  if (!elementId) {
-    throw new Error("No focused element available for CLEAR. Tap an input field first.");
+  if (elementId) {
+    try {
+      await appiumRequest(`${sessionPath}/element/${elementId}/clear`, {
+        method: "POST",
+        body: JSON.stringify({})
+      });
+      return;
+    } catch (err) {
+      if (isAppiumDriverDeadError(err)) throw err;
+    }
+  }
+  try {
+    await appiumRequest(`${sessionPath}/keys`, {
+      method: "POST",
+      // Common select-all + delete sequence is platform-dependent; empty keys
+      // after focus is the portable baseline Appium accepts for many hybrids.
+      body: JSON.stringify({ text: "", value: [] })
+    });
+  } catch (err) {
+    if (isAppiumDriverDeadError(err)) throw err;
+    throw new Error(
+      `No focused element available for CLEAR. Tap an input field first.${err instanceof Error ? ` (${err.message})` : ""}`
+    );
   }
-  await appiumRequest(`${sessionPath}/element/${elementId}/clear`, {
-    method: "POST",
-    body: JSON.stringify({})
-  });
 }
 async function swipe(sessionPath, direction, distance, windowSize) {
   const dist = clampMobileSwipeDistance(distance);
@@ -332196,6 +332773,10 @@ async function startMobileNetworkCapture(options) {
 
 // src/services/appium-executor.ts
 var DEFAULT_STEP_TIMEOUT_MS = 1e4;
+var ELEMENT_ID_PATTERN2 = /^[A-Za-z0-9._:-]{1,128}$/;
+function validateElementId(elementId) {
+  return typeof elementId === "string" && ELEMENT_ID_PATTERN2.test(elementId) ? elementId : null;
+}
 var MOBILE_NEW_COMMAND_TIMEOUT_SECONDS = (() => {
   const raw = Number(process.env.VALIDATEQA_MOBILE_NEW_COMMAND_TIMEOUT);
   return Number.isFinite(raw) && raw > 0 ? Math.floor(raw) : 600;
@@ -332330,6 +332911,9 @@ async function createSession(target) {
   });
   const sessionId = result?.value?.sessionId ?? result?.sessionId;
   if (!sessionId) throw new Error("Appium session creation returned no session ID");
+  if (target.platform === "ANDROID") {
+    await prepareAndroidInputEnvironment(target.deviceId);
+  }
   return sessionId;
 }
 var TERMINAL_SESSION_START = /not installed|no such (app|file)|could not confirm|bundle ?id .*(not|missing)|xcodeorgid|signing|provisioning|not authorized|unauthorized/i;
@@ -332717,7 +333301,9 @@ async function findElement(sessionId, target, timeoutMs = DEFAULT_STEP_TIMEOUT_M
           method: "POST",
           body: JSON.stringify({ using: strategy.using, value: strategy.value })
         });
-        const elementId = result?.value?.ELEMENT || result?.value?.["element-6066-11e4-a52e-4f735466cecf"];
+        const elementId = validateElementId(
+          result?.value?.ELEMENT || result?.value?.["element-6066-11e4-a52e-4f735466cecf"]
+        );
         if (elementId) return elementId;
       } catch (err) {
         if (isTransportError(err)) throw err;
@@ -332757,24 +333343,25 @@ async function tapCoordinates(sessionId, bounds) {
     })
   });
 }
-async function getActiveElementId2(sessionId) {
-  try {
-    const activeEl = await wdRequest(`/session/${sessionId}/element/active`);
-    return activeEl?.value?.ELEMENT || activeEl?.value?.["element-6066-11e4-a52e-4f735466cecf"] || null;
-  } catch {
-    return null;
-  }
-}
-async function sendKeysToFocusedInput(sessionId, value) {
-  await wdRequest(`/session/${sessionId}/keys`, {
-    method: "POST",
-    body: JSON.stringify({ text: value, value: Array.from(value) })
-  });
-}
 function encodeAndroidInputText(value) {
   const inputEncoded = value.replace(/%/g, "%25").replace(/\s/g, "%s");
   return `'${inputEncoded.replace(/'/g, `'\\''`)}'`;
 }
+async function prepareAndroidInputEnvironment(deviceId) {
+  if (!deviceId) return;
+  const settingsToDisable = [
+    ["secure", "stylus_handwriting_enabled", "0"]
+  ];
+  for (const [namespace, key, value] of settingsToDisable) {
+    try {
+      await execFileAsync2("adb", ["-s", deviceId, "shell", "settings", "put", namespace, key, value], {
+        timeout: 8e3,
+        windowsHide: true
+      });
+    } catch {
+    }
+  }
+}
 async function sendAndroidTextToFocusedInput(deviceId, value) {
   if (!deviceId) {
     throw new Error("Android keyboard fallback requires a device id");
@@ -332836,100 +333423,28 @@ async function executeType(sessionId, step, context) {
   if (step.value === void 0 || step.value === null || step.value === "") return;
   const value = String(step.value);
   const bounds = boundsForRun(step, context.platform, context.isCrossPlatform ?? false);
-  let elementId = null;
-  let lastInputError = null;
-  let tappedBounds = false;
-  if (bounds) {
-    await tapCoordinates(sessionId, bounds);
-    tappedBounds = true;
-    await new Promise((resolve) => setTimeout(resolve, MOBILE_FOCUS_SETTLE_MS));
-    elementId = await getActiveElementId2(sessionId);
-    if (elementId) {
-      lastInputError = await trySendElementValue(sessionId, elementId, value);
-      if (!lastInputError) return;
-      elementId = null;
-    }
-  }
-  if (step.target) {
-    try {
-      elementId = await findElement(sessionId, step.target, readStepTimeout(step), { platform: context.platform });
-      lastInputError = await trySendElementValue(sessionId, elementId, value);
-      if (!lastInputError) return;
-      elementId = null;
-    } catch (error2) {
-      if (isTransportError(error2) || !bounds || buildLocatorStrategies(step.target, context.platform).length > 0) throw error2;
-      lastInputError = error2;
-    }
-  }
-  if (!elementId && bounds) {
-    await tapCoordinates(sessionId, bounds);
-    tappedBounds = true;
-    await new Promise((resolve) => setTimeout(resolve, MOBILE_FOCUS_SETTLE_MS));
-    elementId = await getActiveElementId2(sessionId);
-  }
-  if (!elementId) {
-    elementId = await getActiveElementId2(sessionId);
-  }
-  if (elementId) {
-    lastInputError = await trySendElementValue(sessionId, elementId, value);
-    if (!lastInputError) return;
-    elementId = null;
-    if (!bounds) {
-      throw lastInputError instanceof Error ? lastInputError : new Error(String(lastInputError));
-    }
-  }
-  if (bounds) {
-    if (!tappedBounds) {
-      await tapCoordinates(sessionId, bounds);
-      tappedBounds = true;
-      await new Promise((resolve) => setTimeout(resolve, MOBILE_FOCUS_SETTLE_MS));
-    }
-    try {
-      await sendKeysToFocusedInput(sessionId, value);
-      return;
-    } catch (error2) {
-      if (isTransportError(error2)) throw error2;
-      lastInputError = error2;
-    }
-  }
-  if (context.platform === "ANDROID" && tappedBounds) {
-    try {
-      context.log?.("  Appium active-element send failed; using Android focused-keyboard input fallback");
-      await sendAndroidTextToFocusedInput(context.deviceId, value);
-      await new Promise((resolve) => setTimeout(resolve, MOBILE_FOCUS_SETTLE_MS));
-      return;
-    } catch (error2) {
-      if (isTransportError(error2)) throw error2;
-      lastInputError = error2;
+  const sessionPath = `/session/${sessionId}`;
+  try {
+    await typeText(sessionPath, value, bounds);
+    return;
+  } catch (error2) {
+    if (isTransportError(error2)) throw error2;
+    if (context.platform === "ANDROID" && bounds) {
+      try {
+        context.log?.("  Appium active-element send failed; using Android focused-keyboard input fallback");
+        await sendAndroidTextToFocusedInput(context.deviceId, value);
+        await new Promise((resolve) => setTimeout(resolve, MOBILE_FOCUS_SETTLE_MS));
+        return;
+      } catch (androidError) {
+        if (isTransportError(androidError)) throw androidError;
+      }
     }
+    throw error2 instanceof Error ? error2 : new Error(String(error2));
   }
-  throw new Error(`TYPE step could not send text to the focused target${lastInputError instanceof Error ? `: ${lastInputError.message}` : ""}`);
 }
 async function executeClear(sessionId, step, platform3, isCrossPlatform = false) {
   const bounds = boundsForRun(step, platform3, isCrossPlatform);
-  let elementId = null;
-  if (step.target) {
-    try {
-      elementId = await findElement(sessionId, step.target, readStepTimeout(step), { platform: platform3 });
-    } catch (error2) {
-      if (isTransportError(error2) || !bounds || buildLocatorStrategies(step.target, platform3).length > 0) throw error2;
-    }
-  }
-  if (!elementId && bounds) {
-    await tapCoordinates(sessionId, bounds);
-    await new Promise((resolve) => setTimeout(resolve, MOBILE_FOCUS_SETTLE_MS));
-    elementId = await getActiveElementId2(sessionId);
-  }
-  if (!elementId) {
-    elementId = await getActiveElementId2(sessionId);
-  }
-  if (!elementId) {
-    throw new Error("CLEAR step could not resolve a target or focused element");
-  }
-  await wdRequest(`/session/${sessionId}/element/${elementId}/clear`, {
-    method: "POST",
-    body: "{}"
-  });
+  await clearField(`/session/${sessionId}`, bounds);
 }
 async function executeSwipe(sessionId, step) {
   const direction = step.metadata?.direction || "up";