@validate.qa/runner 1.0.33 → 1.0.34

package/dist/cli.js

@@ -65163,7 +65163,7 @@ Return ONLY one valid JSON object matching the schema below. Do NOT include <thi
     Example - BAD happy path: \`["Navigate to /feature", "Click Create", "Verify dialog opens"]\` \u2192 only tests the trigger.
     Example - GOOD happy path (generic, async): \`["Navigate to landing and log in", "Navigate to the feature page", "Note the current count of items on the list", "Click the primary action button", "Fill required inputs and submit", "Wait for completion signal (up to 60s)", "Verify the item count increased by 1", "Open the newly created item", "Verify its content is non-empty and contains the input I provided"]\`
     Example - GOOD happy path (sync CRUD): \`["Navigate to landing and log in", "Navigate to the list page", "Click New", "Fill required fields", "Click Save", "Verify the new record appears in the list", "Click the record and verify its detail view shows the values I entered"]\`
-12. **Auth happy paths require concrete session proof.** A login/auth HAPPY_PATH is incomplete if it only proves "user reaches dashboard" or "authenticated page is visible." It MUST verify at least one durable signed-in signal that was observed in the evidence: user/account menu opens, Logout/Sign out is available, the observed display name/email/avatar/account item is present, authenticated navigation remains available after a reload, or another app-specific session control is usable. Prefer concrete observed labels from the evidence (for example "Logout", "Demo User", "Account", "Profile") over generic phrases like "personalized content." If the explorer only observed a redirect and no signed-in signal, keep the route outcome but mark the session-proof outcome reliability "low" and state what concrete signal was missing.
+12. **Auth happy paths require concrete session proof.** A login/auth HAPPY_PATH is incomplete if it only proves "user reaches dashboard" or "authenticated page is visible." It MUST verify at least one durable signed-in signal that was observed in the evidence: user/account menu opens, Logout/Sign out is available, the observed display name/email/avatar/account item is present, authenticated navigation remains available after a reload, or another app-specific session control is usable. Prefer concrete observed labels from the evidence (for example "Logout", "Sign out", "Account", "Profile", or the user's own displayed name/email from evidence) over generic phrases like "personalized content." If the explorer only observed a redirect and no signed-in signal, keep the route outcome but mark the session-proof outcome reliability "low" and state what concrete signal was missing.
 13. **Independent execution contract.** Every scenario MUST pass when run alone, first, last, in random order, and in parallel against an environment with no relevant feature data except explicitly guaranteed immutable fixtures. A scenario that depends on a sibling scenario's side effects (e.g. "delete the conversation that another test created") is invalid. If two flows are inherently coupled, bundle them as a single USER_JOURNEY scenario.
 14. **Scenario-owned state.** If a scenario reads, searches, opens, updates, messages, cancels, or deletes an entity, that scenario MUST create or seed the entity in its own setup steps. "Use an existing record" / "the conversation in the demo account" / "the existing user named X" are forbidden phrasings \u2014 they assume mutable pre-existing app data. Carve-out: baseline observations (current count, list length, "the dashboard heading is visible") are allowed as prerequisite reads ONLY when the durable assertion targets a self-created entity. Phrase setup as: "Click New, fill required fields with run-scoped values, submit and verify the new record appears, THEN proceed to <feature under test>."
 15. **Run-scoped test data.** Generated entities MUST use unique, run-scoped identifiers \u2014 phrase as "test message <Date.now()>" or "QA-<unique id>" in steps. Subsequent assertions MUST target that unique identifier, not "the first item", "the latest message", "the last row", or any visible display name observed during exploration. Hardcoding any specific display name, username, email, conversation title, or other identifier observed in the explorer's snapshot is forbidden \u2014 that data is incidental, not a stable contract. The same identifiers will not exist (or will look different) when the test runs in a fresh environment or against a different account.
@@ -66123,7 +66123,7 @@ Return ONLY one valid JSON object matching the schema below. Do NOT include <thi
 9. **No duplicates** - check existing test names before adding
 10. **All tests start from the app launch entry** - every generated test starts by launching the target app. The runner clears app data when the device/reset policy safely supports it; otherwise it performs a terminate + activate relaunch, which can preserve app session data. Therefore scenarios MUST navigate through the app's own UI from whatever launch state is valid, and MUST NOT rely on mutable data from a prior scenario disappearing. Steps must reflect this: say "Launch the app and tap Sign In" not "deep-link to the login screen". Do NOT navigate by deep-link; the app's launch + tab/drawer navigation is the only entry path. \`targetPages\` lists the screen-ids involved in the flow.
 11. **targetPages must be copied CHARACTER-FOR-CHARACTER from the screen-ids in the evidence** (they look like \`com.example.app.MainActivity#ab12cd34\`). NEVER invent, prettify, or abbreviate them \u2014 no "Landing", "AUTH", "Home Screen", or any name that is not literally in the provided screens. A scenario whose targetPages contains even ONE id not present in the evidence is REJECTED WHOLESALE by the validator, so a single made-up route silently destroys the entire scenario. If you are unsure which screen-id a step touches, use the screen-id of the screen where the flow STARTS.
-12. **Happy paths must verify the DURABLE OUTCOME, not just the trigger.** A HAPPY_PATH is NOT complete until it verifies the feature's real output. "Button tapped" / "Sheet opened" / "Spinner appeared" is NOT a happy path - that is a UI interaction test. Apply this to any feature where an action produces a result the user then sees or uses: CRUD creates, photo/file uploads, searches that return results, imports, exports, payments, messages sent, AI/ML outputs, generated documents, sync runs, analysis runs, conversion, data processing. The scenario MUST include:
+12. **Happy paths must verify the DURABLE OUTCOME, not just the trigger.** A HAPPY_PATH is NOT complete until it verifies the feature's real output. "Button tapped" / "Sheet opened" / "Spinner appeared" / "Settings screen opened" is NOT a happy path - that is a UI interaction test. Form-mutation happy paths (change password, create/edit/save a record, send a message, checkout, etc.) MUST include typing into the relevant fields AND committing the form (submit/save/send or keyboard Enter/Done) \u2014 navigating to the form screen alone is insufficient. Apply this to any feature where an action produces a result the user then sees or uses: CRUD creates, photo/file uploads, searches that return results, imports, exports, payments, messages sent, AI/ML outputs, generated documents, sync runs, analysis runs, conversion, data processing. The scenario MUST include:
     - The trigger step (Tap Submit / Generate / Send / Upload / Run / Analyze / Save / Pay / etc.)
     - A wait step for the operation to complete. Phrase it by SIGNAL, not wall-clock ("Wait for the result to appear - up to 60 seconds"). Prefer signals the app actually uses: spinner disappears, status badge flips to a success state, a new row appears, an item count increments, a success toast/snackbar shows, the screen transitions to a result screen.
     - A verification step on the DURABLE RESULT - the thing that outlives the transient UI: a new list row, a persisted record, a received message, a committed state change, visible output text. Do NOT assert on the spinner disappearing alone; assert on what replaced it.
@@ -66794,6 +66794,9 @@ var require_mobile_generator = __commonJS({
   "../runner-core/dist/services/mobile/mobile-generator.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.collapseConsecutiveBacks = collapseConsecutiveBacks;
+    exports2.scenarioIntentMismatchReason = scenarioIntentMismatchReason;
+    exports2.dedupeConsecutiveIdenticalActions = dedupeConsecutiveIdenticalActions;
     exports2.collapseRetryCycles = collapseRetryCycles;
     exports2.runMobileGeneratePhase = runMobileGeneratePhase;
     var crypto_1 = require("crypto");
@@ -67064,7 +67067,7 @@ var require_mobile_generator = __commonJS({
 ## Your job
 1. mobile_snapshot the current screen.
 2. Execute the scenario's steps using the real UI: tap buttons, fill fields (mobile_type), submit, navigate.
-3. COMPLETE THE ACTION the scenario is about \u2014 do not stop half-way. If the scenario submits a form (sign in, sign up, search, create), you MUST tap the submit/primary button; filling fields is NOT the behavior under test. If it navigates, you MUST land on the destination. A "happy path" that fills a login form but never taps "Sign In" is WRONG.
+3. COMPLETE THE ACTION the scenario is about \u2014 do not stop half-way. If the scenario submits a form (sign in, sign up, search, create, change password, edit profile), you MUST commit it \u2014 tap the submit/primary button OR press the keyboard's Enter/Done action on the last field (mobile_type with a trailing newline on the focused field when no button is visible). Filling fields alone is NOT the behavior under test. Navigating to a form screen without changing its fields is also NOT enough for mutation scenarios (change/create/update/edit). If it navigates, you MUST land on the destination. A "happy path" that fills a form but never commits \u2014 or only opens the form without typing \u2014 is WRONG.
 4. When you reach the target screen / complete the flow, PROVE the outcome with an assert tool:
    - mobile_assert_visible({ref}) \u2014 the target screen's stable element is on screen.
    - mobile_assert_text({ref, expected}) \u2014 an element contains expected text (only durable when the element has a stable accessibility-id / resource-id).
@@ -67079,6 +67082,8 @@ var require_mobile_generator = __commonJS({
 - Stay inside this app.${targetLine} Do not open or use app stores, browsers, email apps, settings, or any other app. If an action leaves the target app, the runner will relaunch the target app and reject that action.
 - NEVER tap the phone's home screen / launcher (app icons, "Predicted app" chips, search bars, widgets). Those are NOT part of the app under test \u2014 tapping them is junk that poisons the test. If the app ever backgrounds or you find yourself on the launcher, use mobile_relaunch to cold-start the app; do NOT tap a launcher icon or app-prediction to get back in.
 - Do NOT re-do a sequence you already completed. If you filled a form then navigated away, do NOT come back and fill it again \u2014 the scenario needs ONE clean pass. Filling the login form, going back, and re-filling it is exactly the kind of wandering that produces a bloated, broken test.
+- Do NOT thrash the system Back button. One intentional back/navigation is fine; a chain of backs while lost is not a test \u2014 re-snapshot, re-orient, and take the productive path once.
+- Prefer product identity locators (accessibility-id, resource-id, visible label). Never assert on bare hierarchy roots or unlabeled full-screen containers \u2014 those prove nothing.
 - Do ONLY the actions this scenario needs. Do NOT re-open a menu you already opened, re-select an option that is already selected, toggle a setting back and forth, or repeat a step that already succeeded \u2014 EVERY action you take is baked into the generated test verbatim, so each extra action becomes a permanent junk step.
 - Each action must make NEW progress toward the goal. If an action leaves the screen unchanged, do NOT repeat it \u2014 pick a different element or move on.
 - Finish promptly once the outcome is proven: the instant the expected outcome is visible, assert it and call finish_generate. Do not keep exploring after the goal is proven.
@@ -67097,7 +67102,7 @@ This app has stored login credentials under these keys:
 ${keyList}
 
 When a scenario needs a signed-in session, complete the FULL login sequence \u2014 filling the fields alone does NOT log you in:
-1. Reach the email/password form. 2. Fill each credential field with \`mobile_fill_credential\` (pass the field ref and the KEY, e.g. \`{ ref: "e5", credentialKey: "TEST_USER_EMAIL" }\`) \u2014 the runner types the real value on the device and the generated test stores a \`{{KEY}}\` placeholder that replay resolves; you never see the secret. 3. TAP THE SUBMIT button (Sign In / Log In / Continue). 4. Re-snapshot and VERIFY an authenticated screen appeared. If login fails twice, do NOT keep retrying or wander: call finish_generate with verified:false and say the login could not be completed (the credentials may be invalid for this app).
+1. Reach the email/password form. 2. Fill each credential field with \`mobile_fill_credential\` (pass the field ref and the KEY, e.g. \`{ ref: "e5", credentialKey: "TEST_USER_EMAIL" }\`) \u2014 the runner types the real value on the device and the generated test stores a \`{{KEY}}\` placeholder that replay resolves; you never see the secret. 3. COMMIT the form \u2014 tap the submit/primary button (Sign In / Log In / Continue) OR, if no button is visible, focus the last field and \`mobile_type\` a trailing newline (\`\\n\`) to trigger the keyboard's Enter/Done action. 4. Re-snapshot and VERIFY an authenticated screen appeared. If login fails twice, do NOT keep retrying or wander: call finish_generate with verified:false and say the login could not be completed (the credentials may be invalid for this app).
 
 SECURITY RULES:
 - NEVER call \`mobile_type\` with a real email, password, or token value \u2014 the runner will REJECT the call and you lose an iteration. Use \`mobile_fill_credential\` for every credential field.
@@ -67447,6 +67452,7 @@ ${statePacket}` },
                 if (action.type === "ASSERT_VISIBLE" || action.type === "ASSERT_TEXT")
                   assertCount++;
               },
+              recordedActions: actions,
               log: log2
             });
             pushResult(dispatchResult);
@@ -67462,7 +67468,7 @@ ${statePacket}` },
       return { actions, assertCount, finish, lastSnapshot: getLatest(), lastScreenName };
     }
     async function dispatchGenerateTool(args) {
-      const { toolName, toolArgs, driver, platform: platform3, latest, absorbObservation, resolveRef, credentials, screenName, recordAction, log: log2 } = args;
+      const { toolName, toolArgs, driver, platform: platform3, latest, absorbObservation, resolveRef, credentials, screenName, recordAction, recordedActions, log: log2 } = args;
       const unknownRef = (ref) => ({
         ok: false,
         error: `Unknown element ref "${String(ref)}". Call mobile_snapshot first; refs are only valid for the latest snapshot.`
@@ -67527,14 +67533,23 @@ ${statePacket}` },
           const screenChanged = changedScreen(before, absorbed);
           const identityTap = isIdentityBearingTapTarget(element);
           if (shouldRecordAction(result, absorbed) && (screenChanged || identityTap)) {
-            if (!screenChanged && identityTap) {
-              log2(`  tap left content signature unchanged but target has identity \u2014 recording commit control "${labelForElement(element)}".`);
-            }
-            recordAction({
+            const tapAction = {
               type: "TAP",
               selector: (0, mobile_source_parser_js_2.preferredLocator)(element),
-              metadata: metadataForElement(element, beforeScreenName, platform3)
-            });
+              metadata: metadataForElement(element, beforeScreenName, platform3),
+              innerText: null,
+              url: "",
+              value: null
+            };
+            const lastRecorded = recordedActions[recordedActions.length - 1];
+            if (lastRecorded && actionCycleKey(lastRecorded) === actionCycleKey(tapAction)) {
+              log2(`  tap left content signature unchanged but duplicates the prior step \u2014 not recording again.`);
+            } else if (!screenChanged && identityTap) {
+              log2(`  tap left content signature unchanged but target has identity \u2014 recording commit control "${labelForElement(element)}".`);
+              recordAction(tapAction);
+            } else {
+              recordAction(tapAction);
+            }
           } else if (shouldRecordAction(result, absorbed)) {
             log2("  tap changed nothing on screen \u2014 not recording it as a step (dead action).");
           }
@@ -67878,6 +67893,105 @@ ${statePacket}` },
         ...scenario.expectedOutcomes.flatMap((outcome) => [outcome.description, outcome.hint])
       ].filter((value) => typeof value === "string" && value.trim().length > 0).join(" ").toLowerCase();
     }
+    var INSPECTION_OUTCOME_TYPES = /* @__PURE__ */ new Set([
+      "element-visible",
+      "text-visible",
+      "element-hidden",
+      "screen-visible"
+    ]);
+    function isInspectionOnlyScenario(scenario, actions) {
+      if (actions.length === 0 || scenario.expectedOutcomes.length === 0)
+        return false;
+      if (!scenario.expectedOutcomes.every((o) => INSPECTION_OUTCOME_TYPES.has(o.type))) {
+        return false;
+      }
+      if (actions.some((a) => a.type === "TYPE" || a.type === "CLEAR")) {
+        return false;
+      }
+      const text = scenarioText(scenario);
+      const visibilityOnlyGoal = (/\b(entry\s+points?|providers?|options?|provider\s+buttons?)\b/.test(text) || /\b(show|display)\s+(all|the)?\s*(provider|option|button|link|entry)/.test(text) || /\b(all\s+(three\s+)?providers?)\b/.test(text)) && !/\b(change|update|create|save|send|register|edit|with\s+valid|successful\s+(sign|log)|complete\s+(the\s+)?(login|sign[- ]?in)|submit\s+(the\s+)?(form|credentials)|enter\s+(an?\s+)?(email|password))\b/.test(text);
+      if (visibilityOnlyGoal) {
+        const assertCount2 = actions.filter((a) => a.type === "ASSERT_VISIBLE" || a.type === "ASSERT_TEXT").length;
+        return assertCount2 > 0;
+      }
+      const completionIntent = scenario.type === "HAPPY_PATH" || /\b(happy\s*path|successful|with\s+valid|complete\s+(the\s+)?(login|sign[- ]?in|registration|checkout|purchase))\b/.test(text);
+      const formIntent = /\b(sign\s*in|log\s*in|login|authenticate|register|sign\s*up|checkout|create|save|submit|send|change|update|edit)\b/.test(text);
+      if (completionIntent && formIntent)
+        return false;
+      const assertCount = actions.filter((a) => a.type === "ASSERT_VISIBLE" || a.type === "ASSERT_TEXT").length;
+      return assertCount > 0;
+    }
+    function isNavigationFocusedScenario(scenario) {
+      const text = scenarioText(scenario);
+      const navigates = /\b(back|return|go\s+home|navigate\s+back|leave|exit|cancel\s+out|dismiss|previous\s+screen)\b/.test(text);
+      const completesFlow = /\b(happy\s*path|successful|complete\s+(the\s+)?(login|sign[- ]?in|registration|checkout)|with\s+valid)\b/.test(text);
+      return navigates && !completesFlow;
+    }
+    function isFormValidationScenario(scenario) {
+      if (scenario.variant === "validation")
+        return true;
+      if (scenario.type !== "EDGE_CASE")
+        return false;
+      const text = scenarioText(scenario);
+      return /\b(empty|required|missing|blank|invalid|reject|error|validation|wrong|incorrect|mismatch)\b/.test(text);
+    }
+    function isFormMutationHappyPath(scenario) {
+      if (isNavigationFocusedScenario(scenario))
+        return false;
+      if (isFormValidationScenario(scenario))
+        return false;
+      const text = scenarioText(scenario);
+      const isHappy = scenario.type === "HAPPY_PATH" || /\b(happy\s*path|successful|success)\b/.test(text);
+      if (!isHappy)
+        return false;
+      if (/\b(sign\s*in|log\s*in|login|authenticate|sign\s*out|log\s*out)\b/.test(text) && !/\b(change|update|reset)\s+(the\s+)?password\b/.test(text)) {
+        return false;
+      }
+      if (/\b(show|display|visible|options?|providers?|links?)\b/.test(text) && !/\b(change|update|create|save|send|register|edit|post|write|compose|delete|add|set)\b/.test(text)) {
+        return false;
+      }
+      const mutates = /\b(change|update|create|save|send|register|sign\s*up|checkout|edit|post|write|compose|set|add|delete|remove)\b/.test(text);
+      const hasObject = /\b(password|email|profile|message|post|item|record|form|settings|account|name|title|description|comment|bio|phone|address|payment|card|user|note|task|entry)\b/.test(text);
+      return mutates && hasObject;
+    }
+    function isNavigationChromeTap(action) {
+      if (action.type !== "TAP")
+        return false;
+      const textForAction = actionText(action);
+      return /\b(go\s+back|back\s+to|←|return\s+to|cancel|close|dismiss|not\s+now|skip|maybe\s+later)\b/.test(textForAction);
+    }
+    function isAuthMethodChooserTap(action) {
+      if (action.type !== "TAP")
+        return false;
+      const textForAction = actionText(action);
+      if (/\b(submit|confirm|sign\s*in|log\s*in|login)\b/.test(textForAction) && !/\b(with|using|via)\b/.test(textForAction)) {
+        return false;
+      }
+      return /\b(continue\s+with|sign\s+in\s+with|log\s+in\s+with|use\s+(email|phone)|choose|pick|select)\b/.test(textForAction);
+    }
+    function isCredentialSubmitTap(action) {
+      if (action.type !== "TAP")
+        return false;
+      if (isNavigationChromeTap(action) || isAuthMethodChooserTap(action))
+        return false;
+      const textForAction = actionText(action);
+      return /\b(sign\s*in|log\s*in|login|continue|submit|done|next|confirm)\b/.test(textForAction);
+    }
+    function isKeyboardFormCommit(action) {
+      return action.type === "TYPE" && (action.value ?? "").endsWith("\n");
+    }
+    function isFormCommitAction(action) {
+      if (isKeyboardFormCommit(action))
+        return true;
+      if (isCredentialSubmitTap(action))
+        return true;
+      if (action.type !== "TAP")
+        return false;
+      if (isNavigationChromeTap(action) || isAuthMethodChooserTap(action))
+        return false;
+      const textForAction = actionText(action);
+      return /\b(save|create|send|confirm|next|apply|post|checkout|pay|finish|update|register|sign\s*up|done|continue|submit)\b/i.test(textForAction);
+    }
     function actionText(action) {
       const bundle = action.metadata.locatorBundle;
       return [
@@ -67894,9 +68008,80 @@ ${statePacket}` },
         bundle?.xpath
       ].filter((value) => typeof value === "string" && value.trim().length > 0).join(" ").toLowerCase();
     }
+    function isStructuralOnlyAssert(action) {
+      if (action.type !== "ASSERT_VISIBLE" && action.type !== "ASSERT_TEXT")
+        return false;
+      const sel = (action.selector ?? "").trim();
+      if (/^\/hierarchy(\[\d+\])?(\/android\.widget\.FrameLayout\[\d+\])*$/i.test(sel))
+        return true;
+      if (isStructuralAssertionIdentity(sel) || isStructuralAssertionIdentity(action.metadata.targetLabel)) {
+        const bundle = action.metadata.locatorBundle;
+        const human = Boolean(nonEmpty2(action.innerText) || nonEmpty2(action.metadata.targetLabel) || nonEmpty2(bundle?.text) || nonEmpty2(bundle?.contentDesc));
+        if (!human)
+          return true;
+      }
+      if (/^\/hierarchy/i.test(sel)) {
+        const bundle = action.metadata.locatorBundle;
+        const hasIdentity = Boolean(nonEmpty2(action.metadata.targetLabel) || nonEmpty2(action.innerText) || nonEmpty2(bundle?.text) || nonEmpty2(bundle?.contentDesc) || nonEmpty2(bundle?.accessibilityId) || nonEmpty2(bundle?.resourceId) && !isStructuralAssertionIdentity(bundle?.resourceId));
+        if (!hasIdentity)
+          return true;
+      }
+      return false;
+    }
+    function collapseConsecutiveBacks(actions) {
+      if (actions.length <= 1)
+        return actions;
+      const out = [actions[0]];
+      for (let i = 1; i < actions.length; i++) {
+        if (actions[i].type === "BACK" && out[out.length - 1].type === "BACK")
+          continue;
+        out.push(actions[i]);
+      }
+      return out;
+    }
     function scenarioIntentMismatchReason(scenario, actions) {
       const text = scenarioText(scenario);
-      const isCredentialSignIn = /\b(sign\s*in|log\s*in|login|authenticate|auth)\b/.test(text) && /\b(email|e-mail|password|credential|valid credentials?)\b/.test(text) && !/\b(reset|forgot|recover|logout|log\s*out|sign\s*out)\b/.test(text);
+      if (isInspectionOnlyScenario(scenario, actions)) {
+        return null;
+      }
+      if (isNavigationFocusedScenario(scenario)) {
+        return null;
+      }
+      if (isFormValidationScenario(scenario)) {
+        const typedFields = actions.some((a) => a.type === "TYPE");
+        const hasCommit = actions.some((a) => isFormCommitAction(a));
+        const hasValidationAssert = actions.some((a) => {
+          if (a.type !== "ASSERT_VISIBLE" && a.type !== "ASSERT_TEXT")
+            return false;
+          return /\b(error|required|invalid|empty|missing|incorrect|wrong|try again|mismatch|does not match|must match)\b/.test(actionText(a));
+        });
+        const emptyFieldIntent = /\b(empty|required|missing|blank)\b/.test(text);
+        const invalidValueIntent = /\b(wrong|incorrect|invalid|mismatch|reject)\b/.test(text);
+        if (emptyFieldIntent && !invalidValueIntent) {
+          if (!hasCommit && !hasValidationAssert) {
+            return "validation scenario did not record a form commit or validation outcome";
+          }
+          return null;
+        }
+        if (typedFields && !hasCommit) {
+          return "validation scenario filled fields but never committed the form";
+        }
+        if (!hasCommit && !hasValidationAssert) {
+          return "validation scenario did not record a form commit or validation outcome";
+        }
+        return null;
+      }
+      if (isFormMutationHappyPath(scenario)) {
+        const hasType = actions.some((a) => a.type === "TYPE");
+        const hasCommit = actions.some((a) => isFormCommitAction(a));
+        if (!hasType) {
+          return "form-mutation happy path did not record any field entry";
+        }
+        if (!hasCommit) {
+          return "form-mutation happy path did not record a form commit";
+        }
+      }
+      const isCredentialSignIn = /\b(sign\s*in|log\s*in|login|authenticate|auth)\b/.test(text) && /\b(email|e-mail|password|credential|valid credentials?)\b/.test(text) && !/\b(reset|forgot|recover|logout|log\s*out|sign\s*out|change\s+password|update\s+password)\b/.test(text);
       const typedEmailIndexes = [];
       const typedPasswordIndexes = [];
       actions.forEach((action, index) => {
@@ -67913,19 +68098,19 @@ ${statePacket}` },
       const lastCredentialIndex = Math.max(...typedEmailIndexes, ...typedPasswordIndexes);
       const hasAnyCredentialEntry = Number.isFinite(lastCredentialIndex);
       const submitAfterCredentials = actions.some((action, index) => {
-        if (action.type !== "TAP" || index <= lastCredentialIndex)
+        if (index < lastCredentialIndex)
           return false;
-        const textForAction = actionText(action);
-        if (!/\b(sign\s*in|log\s*in|login|continue|submit)\b/.test(textForAction))
+        if (!isFormCommitAction(action))
           return false;
-        return !/\b(with\s+(email|e-mail|google|facebook|apple)|email\s+form|showemailformbtn)\b/i.test(textForAction);
+        if (action.type === "TYPE" && index === lastCredentialIndex)
+          return true;
+        return index > lastCredentialIndex;
       });
       const isAuthLikeScenario = /\b(sign(?:ed)?\s*in|log(?:ged)?\s*in|login|authenticate|auth|credential|email|e-mail|password)\b/.test(text);
       if (isAuthLikeScenario && hasAnyCredentialEntry && !submitAfterCredentials) {
-        return "credential fields were filled but no sign-in submit tap was recorded after them";
+        return "credential fields were filled but no form commit was recorded after them";
       }
       const uiOnlyCredentialScenario = /\b(mask|masked|visibility|show password|hide password|toggle|keyboard|keypad|max(?:imum)?\s*length|field focus|autofill)\b/.test(text);
-      const emptyFieldValidationScenario = /\b(empty|required|missing|blank)\b/.test(text);
       const sessionLifecycleScenario = /\b(logout|log\s*out|sign\s*out|session persistence|remain(?:s)? signed in|remember me)\b/.test(text);
       const loginTapWithoutCredentialPath = actions.some((action) => {
         if (action.type !== "TAP")
@@ -67933,9 +68118,11 @@ ${statePacket}` },
         const textForAction = actionText(action);
         if (/\b(logout|log\s*out|sign\s*out)\b/.test(textForAction))
           return false;
+        if (isAuthMethodChooserTap(action) || isNavigationChromeTap(action))
+          return false;
         return /\b(sign\s*in|log\s*in|login)\b/.test(textForAction);
       });
-      if (loginTapWithoutCredentialPath && !hasAnyCredentialEntry && !uiOnlyCredentialScenario && !emptyFieldValidationScenario && (sessionLifecycleScenario || /\b(valid credentials?|happy path|successful sign\s*in|successful login)\b/.test(text))) {
+      if (loginTapWithoutCredentialPath && !hasAnyCredentialEntry && !uiOnlyCredentialScenario && (sessionLifecycleScenario || /\b(valid credentials?|happy path|successful sign\s*in|successful login)\b/.test(text))) {
         return "auth/session scenario tapped a login or sign-in control without recording a credential path";
       }
       if (isCredentialSignIn) {
@@ -67947,7 +68134,7 @@ ${statePacket}` },
           const missing = [
             typedEmail ? null : "email/username entry",
             typedPassword ? null : "password entry",
-            tappedSubmit ? null : "sign-in submit tap"
+            tappedSubmit ? null : "form commit (submit tap or keyboard Enter)"
           ].filter((value) => value !== null);
           return `credential sign-in scenario did not record ${missing.join(", ")}`;
         }
@@ -67968,11 +68155,12 @@ ${statePacket}` },
       const typeScreen = actions[lastTypeIndex]?.metadata?.screenName?.trim() ?? "";
       const assertScreen = actions[lastAssertIndex]?.metadata?.screenName?.trim() ?? "";
       const screensDiffer = typeScreen !== "" && assertScreen !== "" && typeScreen !== assertScreen;
-      const commitAfterType = actions.some((action, index) => {
-        if (action.type !== "TAP" || index <= lastTypeIndex || index >= lastAssertIndex)
+      const lastTypeAction = actions[lastTypeIndex];
+      const keyboardCommitOnLastType = lastTypeAction != null && isKeyboardFormCommit(lastTypeAction);
+      const commitAfterType = keyboardCommitOnLastType || actions.some((action, index) => {
+        if (index <= lastTypeIndex || index >= lastAssertIndex)
           return false;
-        const textForAction = actionText(action);
-        return /\b(sign\s*in|log\s*in|login|continue|submit|save|create|send|confirm|done|next|apply|post|checkout|pay|finish|update|register|sign\s*up)\b/i.test(textForAction);
+        return isFormCommitAction(action);
       });
       if (screensDiffer && !commitAfterType) {
         return "form fields were filled then a success assert was recorded without a commit/submit tap between them";
@@ -67983,6 +68171,17 @@ ${statePacket}` },
       return `${action.type}|${action.selector}|${action.value ?? ""}`;
     }
     var MAX_RETRY_CYCLE_LENGTH = 8;
+    function dedupeConsecutiveIdenticalActions(actions) {
+      if (actions.length <= 1)
+        return actions;
+      const out = [actions[0]];
+      for (let i = 1; i < actions.length; i++) {
+        if (actionCycleKey(actions[i]) === actionCycleKey(out[out.length - 1]))
+          continue;
+        out.push(actions[i]);
+      }
+      return out;
+    }
     function collapseRetryCycles(actions) {
       const out = [...actions];
       let changed = true;
@@ -68023,15 +68222,30 @@ ${statePacket}` },
     }
     function assembleTest(args) {
       const { scenario, recording, ctx, platform: platform3, appDataCleared, log: log2 } = args;
-      let actions = collapseRetryCycles(recording.actions);
+      let actions = dedupeConsecutiveIdenticalActions(recording.actions);
       if (actions.length < recording.actions.length) {
-        log2(`  collapsed ${recording.actions.length - actions.length} retry-cycle step(s) out of the recorded trace (${recording.actions.length} \u2192 ${actions.length}).`);
+        log2(`  deduped ${recording.actions.length - actions.length} consecutive identical step(s) (${recording.actions.length} \u2192 ${actions.length}).`);
+      }
+      const beforeBackCollapse = actions.length;
+      actions = collapseConsecutiveBacks(actions);
+      if (actions.length < beforeBackCollapse) {
+        log2(`  collapsed ${beforeBackCollapse - actions.length} consecutive BACK step(s) (${beforeBackCollapse} \u2192 ${actions.length}).`);
+      }
+      const beforeCycleCollapse = actions.length;
+      actions = collapseRetryCycles(actions);
+      if (actions.length < beforeCycleCollapse) {
+        log2(`  collapsed ${beforeCycleCollapse - actions.length} retry-cycle step(s) out of the recorded trace (${beforeCycleCollapse} \u2192 ${actions.length}).`);
       }
       const beforeContainerDrop = actions.length;
       actions = actions.filter((a) => !isBareContainerTap(a));
       if (actions.length < beforeContainerDrop) {
         log2(`  dropped ${beforeContainerDrop - actions.length} bare-container tap step(s) (no identity \u2014 un-replayable ambient taps).`);
       }
+      const beforeWeakAssertDrop = actions.length;
+      actions = actions.filter((a) => !isStructuralOnlyAssert(a));
+      if (actions.length < beforeWeakAssertDrop) {
+        log2(`  dropped ${beforeWeakAssertDrop - actions.length} structural-only assert step(s) (no product identity).`);
+      }
       const intentMismatch = scenarioIntentMismatchReason(scenario, actions);
       if (intentMismatch) {
         log2(`  skipped scenario "${scenario.name}": ${intentMismatch}.`);
@@ -68843,10 +69057,22 @@ For a fix, return the COMPLETE steps array (not a diff).`;
       if (!/\b(tap|click|press)\b/i.test(step.action))
         return false;
       const text = mobileStepSearchText(step);
-      if (/\b(logout|log\s*out|sign\s*out|reset|forgot|google|apple|facebook|github|sso|showemailform|with\s+email|email\s+form)\b/.test(text)) {
+      if (/\b(logout|log\s*out|sign\s*out|reset|forgot|go\s+back|back\s+to|cancel|close|dismiss)\b/.test(text)) {
         return false;
       }
-      return /\b(sign\s*in|signin|log\s*in|login|continue|submit)\b/.test(text);
+      if (/\b(continue\s+with|sign\s+in\s+with|log\s+in\s+with|use\s+(email|phone)|choose|pick|select)\b/.test(text) && !/\b(submit|confirm)\b/.test(text)) {
+        return false;
+      }
+      return /\b(sign\s*in|signin|log\s*in|login|continue|submit|done|next|confirm)\b/.test(text);
+    }
+    function isKeyboardFormCommitStep(step) {
+      if (!/\b(type|fill|input|enter)\b/i.test(step.action))
+        return false;
+      const value = typeof step.value === "string" ? step.value : "";
+      return value.endsWith("\n");
+    }
+    function isFormCommitStep(step) {
+      return isCredentialSubmitTap(step) || isKeyboardFormCommitStep(step);
     }
     function detectInvalidAuthValidationSetup(steps, error2) {
       if (!/\b(element not found|no such element|not visible|timeout|assert|could not be located|unexpected screen|screen drift)\b/i.test(error2 ?? "")) {
@@ -68871,20 +69097,23 @@ For a fix, return the COMPLETE steps array (not a diff).`;
           if ((step.order ?? -1) >= lastCredentialEditOrder)
             return false;
           const text = mobileStepSearchText(step);
-          return /\b(showemailformbtn|with\s+email|email\s+form|sign in with email|loginform|login form|email|e-mail|username|user\s*name)\b/.test(text);
+          return /\b(sign\s+in\s+with\s+email|log\s+in\s+with\s+email|email\s+and\s+password|login\s+form|credential\s+form|email|e-mail|username|user\s*name)\b/.test(text);
         });
         if (hasCredentialFormEvidence)
           return null;
         return "credential-control test edits a credential field without recording a path to the email/password form; stale auth-control test is invalid until generation records a complete form path";
       }
-      const hasSubmitAfterCredentialEdit = steps.some((step) => (step.order ?? -1) > lastCredentialEditOrder && isCredentialSubmitTap(step));
+      const hasSubmitAfterCredentialEdit = steps.some((step) => (step.order ?? -1) > lastCredentialEditOrder && isFormCommitStep(step));
       if (hasSubmitAfterCredentialEdit)
         return null;
+      const hasKeyboardCommitOnCredential = steps.some((step) => (step.order ?? -1) === lastCredentialEditOrder && isKeyboardFormCommitStep(step));
+      if (hasKeyboardCommitOnCredential)
+        return null;
       const hasValidationAssertion = steps.some((step) => {
         if (!/\b(assert|wait)\b/i.test(step.action))
           return false;
         const text = mobileStepSearchText(step);
-        return /\b(invalid|required|error|empty|missing|incorrect|wrong|try again|validation|must enter|enter (an )?(email|password)|email is required|password is required)\b/.test(text);
+        return /\b(invalid|required|error|empty|missing|incorrect|wrong|try again|validation|must enter|enter (an )?(email|password)|email is required|password is required|mismatch|does not match)\b/.test(text);
       });
       if (hasValidationAssertion)
         return null;
@@ -330644,7 +330873,7 @@ var require_package4 = __commonJS({
   "package.json"(exports2, module2) {
     module2.exports = {
       name: "@validate.qa/runner",
-      version: "1.0.33",
+      version: "1.0.34",
       description: "validate local test runner - execute Playwright tests on your machine, connected to validate.qa cloud.",
       bin: {
         "validate-runner": "dist/cli.js"

package/dist/cli.mjs

@@ -65168,7 +65168,7 @@ Return ONLY one valid JSON object matching the schema below. Do NOT include <thi
     Example - BAD happy path: \`["Navigate to /feature", "Click Create", "Verify dialog opens"]\` \u2192 only tests the trigger.
     Example - GOOD happy path (generic, async): \`["Navigate to landing and log in", "Navigate to the feature page", "Note the current count of items on the list", "Click the primary action button", "Fill required inputs and submit", "Wait for completion signal (up to 60s)", "Verify the item count increased by 1", "Open the newly created item", "Verify its content is non-empty and contains the input I provided"]\`
     Example - GOOD happy path (sync CRUD): \`["Navigate to landing and log in", "Navigate to the list page", "Click New", "Fill required fields", "Click Save", "Verify the new record appears in the list", "Click the record and verify its detail view shows the values I entered"]\`
-12. **Auth happy paths require concrete session proof.** A login/auth HAPPY_PATH is incomplete if it only proves "user reaches dashboard" or "authenticated page is visible." It MUST verify at least one durable signed-in signal that was observed in the evidence: user/account menu opens, Logout/Sign out is available, the observed display name/email/avatar/account item is present, authenticated navigation remains available after a reload, or another app-specific session control is usable. Prefer concrete observed labels from the evidence (for example "Logout", "Demo User", "Account", "Profile") over generic phrases like "personalized content." If the explorer only observed a redirect and no signed-in signal, keep the route outcome but mark the session-proof outcome reliability "low" and state what concrete signal was missing.
+12. **Auth happy paths require concrete session proof.** A login/auth HAPPY_PATH is incomplete if it only proves "user reaches dashboard" or "authenticated page is visible." It MUST verify at least one durable signed-in signal that was observed in the evidence: user/account menu opens, Logout/Sign out is available, the observed display name/email/avatar/account item is present, authenticated navigation remains available after a reload, or another app-specific session control is usable. Prefer concrete observed labels from the evidence (for example "Logout", "Sign out", "Account", "Profile", or the user's own displayed name/email from evidence) over generic phrases like "personalized content." If the explorer only observed a redirect and no signed-in signal, keep the route outcome but mark the session-proof outcome reliability "low" and state what concrete signal was missing.
 13. **Independent execution contract.** Every scenario MUST pass when run alone, first, last, in random order, and in parallel against an environment with no relevant feature data except explicitly guaranteed immutable fixtures. A scenario that depends on a sibling scenario's side effects (e.g. "delete the conversation that another test created") is invalid. If two flows are inherently coupled, bundle them as a single USER_JOURNEY scenario.
 14. **Scenario-owned state.** If a scenario reads, searches, opens, updates, messages, cancels, or deletes an entity, that scenario MUST create or seed the entity in its own setup steps. "Use an existing record" / "the conversation in the demo account" / "the existing user named X" are forbidden phrasings \u2014 they assume mutable pre-existing app data. Carve-out: baseline observations (current count, list length, "the dashboard heading is visible") are allowed as prerequisite reads ONLY when the durable assertion targets a self-created entity. Phrase setup as: "Click New, fill required fields with run-scoped values, submit and verify the new record appears, THEN proceed to <feature under test>."
 15. **Run-scoped test data.** Generated entities MUST use unique, run-scoped identifiers \u2014 phrase as "test message <Date.now()>" or "QA-<unique id>" in steps. Subsequent assertions MUST target that unique identifier, not "the first item", "the latest message", "the last row", or any visible display name observed during exploration. Hardcoding any specific display name, username, email, conversation title, or other identifier observed in the explorer's snapshot is forbidden \u2014 that data is incidental, not a stable contract. The same identifiers will not exist (or will look different) when the test runs in a fresh environment or against a different account.
@@ -66128,7 +66128,7 @@ Return ONLY one valid JSON object matching the schema below. Do NOT include <thi
 9. **No duplicates** - check existing test names before adding
 10. **All tests start from the app launch entry** - every generated test starts by launching the target app. The runner clears app data when the device/reset policy safely supports it; otherwise it performs a terminate + activate relaunch, which can preserve app session data. Therefore scenarios MUST navigate through the app's own UI from whatever launch state is valid, and MUST NOT rely on mutable data from a prior scenario disappearing. Steps must reflect this: say "Launch the app and tap Sign In" not "deep-link to the login screen". Do NOT navigate by deep-link; the app's launch + tab/drawer navigation is the only entry path. \`targetPages\` lists the screen-ids involved in the flow.
 11. **targetPages must be copied CHARACTER-FOR-CHARACTER from the screen-ids in the evidence** (they look like \`com.example.app.MainActivity#ab12cd34\`). NEVER invent, prettify, or abbreviate them \u2014 no "Landing", "AUTH", "Home Screen", or any name that is not literally in the provided screens. A scenario whose targetPages contains even ONE id not present in the evidence is REJECTED WHOLESALE by the validator, so a single made-up route silently destroys the entire scenario. If you are unsure which screen-id a step touches, use the screen-id of the screen where the flow STARTS.
-12. **Happy paths must verify the DURABLE OUTCOME, not just the trigger.** A HAPPY_PATH is NOT complete until it verifies the feature's real output. "Button tapped" / "Sheet opened" / "Spinner appeared" is NOT a happy path - that is a UI interaction test. Apply this to any feature where an action produces a result the user then sees or uses: CRUD creates, photo/file uploads, searches that return results, imports, exports, payments, messages sent, AI/ML outputs, generated documents, sync runs, analysis runs, conversion, data processing. The scenario MUST include:
+12. **Happy paths must verify the DURABLE OUTCOME, not just the trigger.** A HAPPY_PATH is NOT complete until it verifies the feature's real output. "Button tapped" / "Sheet opened" / "Spinner appeared" / "Settings screen opened" is NOT a happy path - that is a UI interaction test. Form-mutation happy paths (change password, create/edit/save a record, send a message, checkout, etc.) MUST include typing into the relevant fields AND committing the form (submit/save/send or keyboard Enter/Done) \u2014 navigating to the form screen alone is insufficient. Apply this to any feature where an action produces a result the user then sees or uses: CRUD creates, photo/file uploads, searches that return results, imports, exports, payments, messages sent, AI/ML outputs, generated documents, sync runs, analysis runs, conversion, data processing. The scenario MUST include:
     - The trigger step (Tap Submit / Generate / Send / Upload / Run / Analyze / Save / Pay / etc.)
     - A wait step for the operation to complete. Phrase it by SIGNAL, not wall-clock ("Wait for the result to appear - up to 60 seconds"). Prefer signals the app actually uses: spinner disappears, status badge flips to a success state, a new row appears, an item count increments, a success toast/snackbar shows, the screen transitions to a result screen.
     - A verification step on the DURABLE RESULT - the thing that outlives the transient UI: a new list row, a persisted record, a received message, a committed state change, visible output text. Do NOT assert on the spinner disappearing alone; assert on what replaced it.
@@ -66799,6 +66799,9 @@ var require_mobile_generator = __commonJS({
   "../runner-core/dist/services/mobile/mobile-generator.js"(exports) {
     "use strict";
     Object.defineProperty(exports, "__esModule", { value: true });
+    exports.collapseConsecutiveBacks = collapseConsecutiveBacks;
+    exports.scenarioIntentMismatchReason = scenarioIntentMismatchReason;
+    exports.dedupeConsecutiveIdenticalActions = dedupeConsecutiveIdenticalActions;
     exports.collapseRetryCycles = collapseRetryCycles;
     exports.runMobileGeneratePhase = runMobileGeneratePhase;
     var crypto_1 = __require("crypto");
@@ -67069,7 +67072,7 @@ var require_mobile_generator = __commonJS({
 ## Your job
 1. mobile_snapshot the current screen.
 2. Execute the scenario's steps using the real UI: tap buttons, fill fields (mobile_type), submit, navigate.
-3. COMPLETE THE ACTION the scenario is about \u2014 do not stop half-way. If the scenario submits a form (sign in, sign up, search, create), you MUST tap the submit/primary button; filling fields is NOT the behavior under test. If it navigates, you MUST land on the destination. A "happy path" that fills a login form but never taps "Sign In" is WRONG.
+3. COMPLETE THE ACTION the scenario is about \u2014 do not stop half-way. If the scenario submits a form (sign in, sign up, search, create, change password, edit profile), you MUST commit it \u2014 tap the submit/primary button OR press the keyboard's Enter/Done action on the last field (mobile_type with a trailing newline on the focused field when no button is visible). Filling fields alone is NOT the behavior under test. Navigating to a form screen without changing its fields is also NOT enough for mutation scenarios (change/create/update/edit). If it navigates, you MUST land on the destination. A "happy path" that fills a form but never commits \u2014 or only opens the form without typing \u2014 is WRONG.
 4. When you reach the target screen / complete the flow, PROVE the outcome with an assert tool:
    - mobile_assert_visible({ref}) \u2014 the target screen's stable element is on screen.
    - mobile_assert_text({ref, expected}) \u2014 an element contains expected text (only durable when the element has a stable accessibility-id / resource-id).
@@ -67084,6 +67087,8 @@ var require_mobile_generator = __commonJS({
 - Stay inside this app.${targetLine} Do not open or use app stores, browsers, email apps, settings, or any other app. If an action leaves the target app, the runner will relaunch the target app and reject that action.
 - NEVER tap the phone's home screen / launcher (app icons, "Predicted app" chips, search bars, widgets). Those are NOT part of the app under test \u2014 tapping them is junk that poisons the test. If the app ever backgrounds or you find yourself on the launcher, use mobile_relaunch to cold-start the app; do NOT tap a launcher icon or app-prediction to get back in.
 - Do NOT re-do a sequence you already completed. If you filled a form then navigated away, do NOT come back and fill it again \u2014 the scenario needs ONE clean pass. Filling the login form, going back, and re-filling it is exactly the kind of wandering that produces a bloated, broken test.
+- Do NOT thrash the system Back button. One intentional back/navigation is fine; a chain of backs while lost is not a test \u2014 re-snapshot, re-orient, and take the productive path once.
+- Prefer product identity locators (accessibility-id, resource-id, visible label). Never assert on bare hierarchy roots or unlabeled full-screen containers \u2014 those prove nothing.
 - Do ONLY the actions this scenario needs. Do NOT re-open a menu you already opened, re-select an option that is already selected, toggle a setting back and forth, or repeat a step that already succeeded \u2014 EVERY action you take is baked into the generated test verbatim, so each extra action becomes a permanent junk step.
 - Each action must make NEW progress toward the goal. If an action leaves the screen unchanged, do NOT repeat it \u2014 pick a different element or move on.
 - Finish promptly once the outcome is proven: the instant the expected outcome is visible, assert it and call finish_generate. Do not keep exploring after the goal is proven.
@@ -67102,7 +67107,7 @@ This app has stored login credentials under these keys:
 ${keyList}
 
 When a scenario needs a signed-in session, complete the FULL login sequence \u2014 filling the fields alone does NOT log you in:
-1. Reach the email/password form. 2. Fill each credential field with \`mobile_fill_credential\` (pass the field ref and the KEY, e.g. \`{ ref: "e5", credentialKey: "TEST_USER_EMAIL" }\`) \u2014 the runner types the real value on the device and the generated test stores a \`{{KEY}}\` placeholder that replay resolves; you never see the secret. 3. TAP THE SUBMIT button (Sign In / Log In / Continue). 4. Re-snapshot and VERIFY an authenticated screen appeared. If login fails twice, do NOT keep retrying or wander: call finish_generate with verified:false and say the login could not be completed (the credentials may be invalid for this app).
+1. Reach the email/password form. 2. Fill each credential field with \`mobile_fill_credential\` (pass the field ref and the KEY, e.g. \`{ ref: "e5", credentialKey: "TEST_USER_EMAIL" }\`) \u2014 the runner types the real value on the device and the generated test stores a \`{{KEY}}\` placeholder that replay resolves; you never see the secret. 3. COMMIT the form \u2014 tap the submit/primary button (Sign In / Log In / Continue) OR, if no button is visible, focus the last field and \`mobile_type\` a trailing newline (\`\\n\`) to trigger the keyboard's Enter/Done action. 4. Re-snapshot and VERIFY an authenticated screen appeared. If login fails twice, do NOT keep retrying or wander: call finish_generate with verified:false and say the login could not be completed (the credentials may be invalid for this app).
 
 SECURITY RULES:
 - NEVER call \`mobile_type\` with a real email, password, or token value \u2014 the runner will REJECT the call and you lose an iteration. Use \`mobile_fill_credential\` for every credential field.
@@ -67452,6 +67457,7 @@ ${statePacket}` },
                 if (action.type === "ASSERT_VISIBLE" || action.type === "ASSERT_TEXT")
                   assertCount++;
               },
+              recordedActions: actions,
               log: log2
             });
             pushResult(dispatchResult);
@@ -67467,7 +67473,7 @@ ${statePacket}` },
       return { actions, assertCount, finish, lastSnapshot: getLatest(), lastScreenName };
     }
     async function dispatchGenerateTool(args) {
-      const { toolName, toolArgs, driver, platform: platform3, latest, absorbObservation, resolveRef, credentials, screenName, recordAction, log: log2 } = args;
+      const { toolName, toolArgs, driver, platform: platform3, latest, absorbObservation, resolveRef, credentials, screenName, recordAction, recordedActions, log: log2 } = args;
       const unknownRef = (ref) => ({
         ok: false,
         error: `Unknown element ref "${String(ref)}". Call mobile_snapshot first; refs are only valid for the latest snapshot.`
@@ -67532,14 +67538,23 @@ ${statePacket}` },
           const screenChanged = changedScreen(before, absorbed);
           const identityTap = isIdentityBearingTapTarget(element);
           if (shouldRecordAction(result, absorbed) && (screenChanged || identityTap)) {
-            if (!screenChanged && identityTap) {
-              log2(`  tap left content signature unchanged but target has identity \u2014 recording commit control "${labelForElement(element)}".`);
-            }
-            recordAction({
+            const tapAction = {
               type: "TAP",
               selector: (0, mobile_source_parser_js_2.preferredLocator)(element),
-              metadata: metadataForElement(element, beforeScreenName, platform3)
-            });
+              metadata: metadataForElement(element, beforeScreenName, platform3),
+              innerText: null,
+              url: "",
+              value: null
+            };
+            const lastRecorded = recordedActions[recordedActions.length - 1];
+            if (lastRecorded && actionCycleKey(lastRecorded) === actionCycleKey(tapAction)) {
+              log2(`  tap left content signature unchanged but duplicates the prior step \u2014 not recording again.`);
+            } else if (!screenChanged && identityTap) {
+              log2(`  tap left content signature unchanged but target has identity \u2014 recording commit control "${labelForElement(element)}".`);
+              recordAction(tapAction);
+            } else {
+              recordAction(tapAction);
+            }
           } else if (shouldRecordAction(result, absorbed)) {
             log2("  tap changed nothing on screen \u2014 not recording it as a step (dead action).");
           }
@@ -67883,6 +67898,105 @@ ${statePacket}` },
         ...scenario.expectedOutcomes.flatMap((outcome) => [outcome.description, outcome.hint])
       ].filter((value) => typeof value === "string" && value.trim().length > 0).join(" ").toLowerCase();
     }
+    var INSPECTION_OUTCOME_TYPES = /* @__PURE__ */ new Set([
+      "element-visible",
+      "text-visible",
+      "element-hidden",
+      "screen-visible"
+    ]);
+    function isInspectionOnlyScenario(scenario, actions) {
+      if (actions.length === 0 || scenario.expectedOutcomes.length === 0)
+        return false;
+      if (!scenario.expectedOutcomes.every((o) => INSPECTION_OUTCOME_TYPES.has(o.type))) {
+        return false;
+      }
+      if (actions.some((a) => a.type === "TYPE" || a.type === "CLEAR")) {
+        return false;
+      }
+      const text = scenarioText(scenario);
+      const visibilityOnlyGoal = (/\b(entry\s+points?|providers?|options?|provider\s+buttons?)\b/.test(text) || /\b(show|display)\s+(all|the)?\s*(provider|option|button|link|entry)/.test(text) || /\b(all\s+(three\s+)?providers?)\b/.test(text)) && !/\b(change|update|create|save|send|register|edit|with\s+valid|successful\s+(sign|log)|complete\s+(the\s+)?(login|sign[- ]?in)|submit\s+(the\s+)?(form|credentials)|enter\s+(an?\s+)?(email|password))\b/.test(text);
+      if (visibilityOnlyGoal) {
+        const assertCount2 = actions.filter((a) => a.type === "ASSERT_VISIBLE" || a.type === "ASSERT_TEXT").length;
+        return assertCount2 > 0;
+      }
+      const completionIntent = scenario.type === "HAPPY_PATH" || /\b(happy\s*path|successful|with\s+valid|complete\s+(the\s+)?(login|sign[- ]?in|registration|checkout|purchase))\b/.test(text);
+      const formIntent = /\b(sign\s*in|log\s*in|login|authenticate|register|sign\s*up|checkout|create|save|submit|send|change|update|edit)\b/.test(text);
+      if (completionIntent && formIntent)
+        return false;
+      const assertCount = actions.filter((a) => a.type === "ASSERT_VISIBLE" || a.type === "ASSERT_TEXT").length;
+      return assertCount > 0;
+    }
+    function isNavigationFocusedScenario(scenario) {
+      const text = scenarioText(scenario);
+      const navigates = /\b(back|return|go\s+home|navigate\s+back|leave|exit|cancel\s+out|dismiss|previous\s+screen)\b/.test(text);
+      const completesFlow = /\b(happy\s*path|successful|complete\s+(the\s+)?(login|sign[- ]?in|registration|checkout)|with\s+valid)\b/.test(text);
+      return navigates && !completesFlow;
+    }
+    function isFormValidationScenario(scenario) {
+      if (scenario.variant === "validation")
+        return true;
+      if (scenario.type !== "EDGE_CASE")
+        return false;
+      const text = scenarioText(scenario);
+      return /\b(empty|required|missing|blank|invalid|reject|error|validation|wrong|incorrect|mismatch)\b/.test(text);
+    }
+    function isFormMutationHappyPath(scenario) {
+      if (isNavigationFocusedScenario(scenario))
+        return false;
+      if (isFormValidationScenario(scenario))
+        return false;
+      const text = scenarioText(scenario);
+      const isHappy = scenario.type === "HAPPY_PATH" || /\b(happy\s*path|successful|success)\b/.test(text);
+      if (!isHappy)
+        return false;
+      if (/\b(sign\s*in|log\s*in|login|authenticate|sign\s*out|log\s*out)\b/.test(text) && !/\b(change|update|reset)\s+(the\s+)?password\b/.test(text)) {
+        return false;
+      }
+      if (/\b(show|display|visible|options?|providers?|links?)\b/.test(text) && !/\b(change|update|create|save|send|register|edit|post|write|compose|delete|add|set)\b/.test(text)) {
+        return false;
+      }
+      const mutates = /\b(change|update|create|save|send|register|sign\s*up|checkout|edit|post|write|compose|set|add|delete|remove)\b/.test(text);
+      const hasObject = /\b(password|email|profile|message|post|item|record|form|settings|account|name|title|description|comment|bio|phone|address|payment|card|user|note|task|entry)\b/.test(text);
+      return mutates && hasObject;
+    }
+    function isNavigationChromeTap(action) {
+      if (action.type !== "TAP")
+        return false;
+      const textForAction = actionText(action);
+      return /\b(go\s+back|back\s+to|←|return\s+to|cancel|close|dismiss|not\s+now|skip|maybe\s+later)\b/.test(textForAction);
+    }
+    function isAuthMethodChooserTap(action) {
+      if (action.type !== "TAP")
+        return false;
+      const textForAction = actionText(action);
+      if (/\b(submit|confirm|sign\s*in|log\s*in|login)\b/.test(textForAction) && !/\b(with|using|via)\b/.test(textForAction)) {
+        return false;
+      }
+      return /\b(continue\s+with|sign\s+in\s+with|log\s+in\s+with|use\s+(email|phone)|choose|pick|select)\b/.test(textForAction);
+    }
+    function isCredentialSubmitTap(action) {
+      if (action.type !== "TAP")
+        return false;
+      if (isNavigationChromeTap(action) || isAuthMethodChooserTap(action))
+        return false;
+      const textForAction = actionText(action);
+      return /\b(sign\s*in|log\s*in|login|continue|submit|done|next|confirm)\b/.test(textForAction);
+    }
+    function isKeyboardFormCommit(action) {
+      return action.type === "TYPE" && (action.value ?? "").endsWith("\n");
+    }
+    function isFormCommitAction(action) {
+      if (isKeyboardFormCommit(action))
+        return true;
+      if (isCredentialSubmitTap(action))
+        return true;
+      if (action.type !== "TAP")
+        return false;
+      if (isNavigationChromeTap(action) || isAuthMethodChooserTap(action))
+        return false;
+      const textForAction = actionText(action);
+      return /\b(save|create|send|confirm|next|apply|post|checkout|pay|finish|update|register|sign\s*up|done|continue|submit)\b/i.test(textForAction);
+    }
     function actionText(action) {
       const bundle = action.metadata.locatorBundle;
       return [
@@ -67899,9 +68013,80 @@ ${statePacket}` },
         bundle?.xpath
       ].filter((value) => typeof value === "string" && value.trim().length > 0).join(" ").toLowerCase();
     }
+    function isStructuralOnlyAssert(action) {
+      if (action.type !== "ASSERT_VISIBLE" && action.type !== "ASSERT_TEXT")
+        return false;
+      const sel = (action.selector ?? "").trim();
+      if (/^\/hierarchy(\[\d+\])?(\/android\.widget\.FrameLayout\[\d+\])*$/i.test(sel))
+        return true;
+      if (isStructuralAssertionIdentity(sel) || isStructuralAssertionIdentity(action.metadata.targetLabel)) {
+        const bundle = action.metadata.locatorBundle;
+        const human = Boolean(nonEmpty2(action.innerText) || nonEmpty2(action.metadata.targetLabel) || nonEmpty2(bundle?.text) || nonEmpty2(bundle?.contentDesc));
+        if (!human)
+          return true;
+      }
+      if (/^\/hierarchy/i.test(sel)) {
+        const bundle = action.metadata.locatorBundle;
+        const hasIdentity = Boolean(nonEmpty2(action.metadata.targetLabel) || nonEmpty2(action.innerText) || nonEmpty2(bundle?.text) || nonEmpty2(bundle?.contentDesc) || nonEmpty2(bundle?.accessibilityId) || nonEmpty2(bundle?.resourceId) && !isStructuralAssertionIdentity(bundle?.resourceId));
+        if (!hasIdentity)
+          return true;
+      }
+      return false;
+    }
+    function collapseConsecutiveBacks(actions) {
+      if (actions.length <= 1)
+        return actions;
+      const out = [actions[0]];
+      for (let i = 1; i < actions.length; i++) {
+        if (actions[i].type === "BACK" && out[out.length - 1].type === "BACK")
+          continue;
+        out.push(actions[i]);
+      }
+      return out;
+    }
     function scenarioIntentMismatchReason(scenario, actions) {
       const text = scenarioText(scenario);
-      const isCredentialSignIn = /\b(sign\s*in|log\s*in|login|authenticate|auth)\b/.test(text) && /\b(email|e-mail|password|credential|valid credentials?)\b/.test(text) && !/\b(reset|forgot|recover|logout|log\s*out|sign\s*out)\b/.test(text);
+      if (isInspectionOnlyScenario(scenario, actions)) {
+        return null;
+      }
+      if (isNavigationFocusedScenario(scenario)) {
+        return null;
+      }
+      if (isFormValidationScenario(scenario)) {
+        const typedFields = actions.some((a) => a.type === "TYPE");
+        const hasCommit = actions.some((a) => isFormCommitAction(a));
+        const hasValidationAssert = actions.some((a) => {
+          if (a.type !== "ASSERT_VISIBLE" && a.type !== "ASSERT_TEXT")
+            return false;
+          return /\b(error|required|invalid|empty|missing|incorrect|wrong|try again|mismatch|does not match|must match)\b/.test(actionText(a));
+        });
+        const emptyFieldIntent = /\b(empty|required|missing|blank)\b/.test(text);
+        const invalidValueIntent = /\b(wrong|incorrect|invalid|mismatch|reject)\b/.test(text);
+        if (emptyFieldIntent && !invalidValueIntent) {
+          if (!hasCommit && !hasValidationAssert) {
+            return "validation scenario did not record a form commit or validation outcome";
+          }
+          return null;
+        }
+        if (typedFields && !hasCommit) {
+          return "validation scenario filled fields but never committed the form";
+        }
+        if (!hasCommit && !hasValidationAssert) {
+          return "validation scenario did not record a form commit or validation outcome";
+        }
+        return null;
+      }
+      if (isFormMutationHappyPath(scenario)) {
+        const hasType = actions.some((a) => a.type === "TYPE");
+        const hasCommit = actions.some((a) => isFormCommitAction(a));
+        if (!hasType) {
+          return "form-mutation happy path did not record any field entry";
+        }
+        if (!hasCommit) {
+          return "form-mutation happy path did not record a form commit";
+        }
+      }
+      const isCredentialSignIn = /\b(sign\s*in|log\s*in|login|authenticate|auth)\b/.test(text) && /\b(email|e-mail|password|credential|valid credentials?)\b/.test(text) && !/\b(reset|forgot|recover|logout|log\s*out|sign\s*out|change\s+password|update\s+password)\b/.test(text);
       const typedEmailIndexes = [];
       const typedPasswordIndexes = [];
       actions.forEach((action, index) => {
@@ -67918,19 +68103,19 @@ ${statePacket}` },
       const lastCredentialIndex = Math.max(...typedEmailIndexes, ...typedPasswordIndexes);
       const hasAnyCredentialEntry = Number.isFinite(lastCredentialIndex);
       const submitAfterCredentials = actions.some((action, index) => {
-        if (action.type !== "TAP" || index <= lastCredentialIndex)
+        if (index < lastCredentialIndex)
           return false;
-        const textForAction = actionText(action);
-        if (!/\b(sign\s*in|log\s*in|login|continue|submit)\b/.test(textForAction))
+        if (!isFormCommitAction(action))
           return false;
-        return !/\b(with\s+(email|e-mail|google|facebook|apple)|email\s+form|showemailformbtn)\b/i.test(textForAction);
+        if (action.type === "TYPE" && index === lastCredentialIndex)
+          return true;
+        return index > lastCredentialIndex;
       });
       const isAuthLikeScenario = /\b(sign(?:ed)?\s*in|log(?:ged)?\s*in|login|authenticate|auth|credential|email|e-mail|password)\b/.test(text);
       if (isAuthLikeScenario && hasAnyCredentialEntry && !submitAfterCredentials) {
-        return "credential fields were filled but no sign-in submit tap was recorded after them";
+        return "credential fields were filled but no form commit was recorded after them";
       }
       const uiOnlyCredentialScenario = /\b(mask|masked|visibility|show password|hide password|toggle|keyboard|keypad|max(?:imum)?\s*length|field focus|autofill)\b/.test(text);
-      const emptyFieldValidationScenario = /\b(empty|required|missing|blank)\b/.test(text);
       const sessionLifecycleScenario = /\b(logout|log\s*out|sign\s*out|session persistence|remain(?:s)? signed in|remember me)\b/.test(text);
       const loginTapWithoutCredentialPath = actions.some((action) => {
         if (action.type !== "TAP")
@@ -67938,9 +68123,11 @@ ${statePacket}` },
         const textForAction = actionText(action);
         if (/\b(logout|log\s*out|sign\s*out)\b/.test(textForAction))
           return false;
+        if (isAuthMethodChooserTap(action) || isNavigationChromeTap(action))
+          return false;
         return /\b(sign\s*in|log\s*in|login)\b/.test(textForAction);
       });
-      if (loginTapWithoutCredentialPath && !hasAnyCredentialEntry && !uiOnlyCredentialScenario && !emptyFieldValidationScenario && (sessionLifecycleScenario || /\b(valid credentials?|happy path|successful sign\s*in|successful login)\b/.test(text))) {
+      if (loginTapWithoutCredentialPath && !hasAnyCredentialEntry && !uiOnlyCredentialScenario && (sessionLifecycleScenario || /\b(valid credentials?|happy path|successful sign\s*in|successful login)\b/.test(text))) {
         return "auth/session scenario tapped a login or sign-in control without recording a credential path";
       }
       if (isCredentialSignIn) {
@@ -67952,7 +68139,7 @@ ${statePacket}` },
           const missing = [
             typedEmail ? null : "email/username entry",
             typedPassword ? null : "password entry",
-            tappedSubmit ? null : "sign-in submit tap"
+            tappedSubmit ? null : "form commit (submit tap or keyboard Enter)"
           ].filter((value) => value !== null);
           return `credential sign-in scenario did not record ${missing.join(", ")}`;
         }
@@ -67973,11 +68160,12 @@ ${statePacket}` },
       const typeScreen = actions[lastTypeIndex]?.metadata?.screenName?.trim() ?? "";
       const assertScreen = actions[lastAssertIndex]?.metadata?.screenName?.trim() ?? "";
       const screensDiffer = typeScreen !== "" && assertScreen !== "" && typeScreen !== assertScreen;
-      const commitAfterType = actions.some((action, index) => {
-        if (action.type !== "TAP" || index <= lastTypeIndex || index >= lastAssertIndex)
+      const lastTypeAction = actions[lastTypeIndex];
+      const keyboardCommitOnLastType = lastTypeAction != null && isKeyboardFormCommit(lastTypeAction);
+      const commitAfterType = keyboardCommitOnLastType || actions.some((action, index) => {
+        if (index <= lastTypeIndex || index >= lastAssertIndex)
           return false;
-        const textForAction = actionText(action);
-        return /\b(sign\s*in|log\s*in|login|continue|submit|save|create|send|confirm|done|next|apply|post|checkout|pay|finish|update|register|sign\s*up)\b/i.test(textForAction);
+        return isFormCommitAction(action);
       });
       if (screensDiffer && !commitAfterType) {
         return "form fields were filled then a success assert was recorded without a commit/submit tap between them";
@@ -67988,6 +68176,17 @@ ${statePacket}` },
       return `${action.type}|${action.selector}|${action.value ?? ""}`;
     }
     var MAX_RETRY_CYCLE_LENGTH = 8;
+    function dedupeConsecutiveIdenticalActions(actions) {
+      if (actions.length <= 1)
+        return actions;
+      const out = [actions[0]];
+      for (let i = 1; i < actions.length; i++) {
+        if (actionCycleKey(actions[i]) === actionCycleKey(out[out.length - 1]))
+          continue;
+        out.push(actions[i]);
+      }
+      return out;
+    }
     function collapseRetryCycles(actions) {
       const out = [...actions];
       let changed = true;
@@ -68028,15 +68227,30 @@ ${statePacket}` },
     }
     function assembleTest(args) {
       const { scenario, recording, ctx, platform: platform3, appDataCleared, log: log2 } = args;
-      let actions = collapseRetryCycles(recording.actions);
+      let actions = dedupeConsecutiveIdenticalActions(recording.actions);
       if (actions.length < recording.actions.length) {
-        log2(`  collapsed ${recording.actions.length - actions.length} retry-cycle step(s) out of the recorded trace (${recording.actions.length} \u2192 ${actions.length}).`);
+        log2(`  deduped ${recording.actions.length - actions.length} consecutive identical step(s) (${recording.actions.length} \u2192 ${actions.length}).`);
+      }
+      const beforeBackCollapse = actions.length;
+      actions = collapseConsecutiveBacks(actions);
+      if (actions.length < beforeBackCollapse) {
+        log2(`  collapsed ${beforeBackCollapse - actions.length} consecutive BACK step(s) (${beforeBackCollapse} \u2192 ${actions.length}).`);
+      }
+      const beforeCycleCollapse = actions.length;
+      actions = collapseRetryCycles(actions);
+      if (actions.length < beforeCycleCollapse) {
+        log2(`  collapsed ${beforeCycleCollapse - actions.length} retry-cycle step(s) out of the recorded trace (${beforeCycleCollapse} \u2192 ${actions.length}).`);
       }
       const beforeContainerDrop = actions.length;
       actions = actions.filter((a) => !isBareContainerTap(a));
       if (actions.length < beforeContainerDrop) {
         log2(`  dropped ${beforeContainerDrop - actions.length} bare-container tap step(s) (no identity \u2014 un-replayable ambient taps).`);
       }
+      const beforeWeakAssertDrop = actions.length;
+      actions = actions.filter((a) => !isStructuralOnlyAssert(a));
+      if (actions.length < beforeWeakAssertDrop) {
+        log2(`  dropped ${beforeWeakAssertDrop - actions.length} structural-only assert step(s) (no product identity).`);
+      }
       const intentMismatch = scenarioIntentMismatchReason(scenario, actions);
       if (intentMismatch) {
         log2(`  skipped scenario "${scenario.name}": ${intentMismatch}.`);
@@ -68848,10 +69062,22 @@ For a fix, return the COMPLETE steps array (not a diff).`;
       if (!/\b(tap|click|press)\b/i.test(step.action))
         return false;
       const text = mobileStepSearchText(step);
-      if (/\b(logout|log\s*out|sign\s*out|reset|forgot|google|apple|facebook|github|sso|showemailform|with\s+email|email\s+form)\b/.test(text)) {
+      if (/\b(logout|log\s*out|sign\s*out|reset|forgot|go\s+back|back\s+to|cancel|close|dismiss)\b/.test(text)) {
         return false;
       }
-      return /\b(sign\s*in|signin|log\s*in|login|continue|submit)\b/.test(text);
+      if (/\b(continue\s+with|sign\s+in\s+with|log\s+in\s+with|use\s+(email|phone)|choose|pick|select)\b/.test(text) && !/\b(submit|confirm)\b/.test(text)) {
+        return false;
+      }
+      return /\b(sign\s*in|signin|log\s*in|login|continue|submit|done|next|confirm)\b/.test(text);
+    }
+    function isKeyboardFormCommitStep(step) {
+      if (!/\b(type|fill|input|enter)\b/i.test(step.action))
+        return false;
+      const value = typeof step.value === "string" ? step.value : "";
+      return value.endsWith("\n");
+    }
+    function isFormCommitStep(step) {
+      return isCredentialSubmitTap(step) || isKeyboardFormCommitStep(step);
     }
     function detectInvalidAuthValidationSetup(steps, error2) {
       if (!/\b(element not found|no such element|not visible|timeout|assert|could not be located|unexpected screen|screen drift)\b/i.test(error2 ?? "")) {
@@ -68876,20 +69102,23 @@ For a fix, return the COMPLETE steps array (not a diff).`;
           if ((step.order ?? -1) >= lastCredentialEditOrder)
             return false;
           const text = mobileStepSearchText(step);
-          return /\b(showemailformbtn|with\s+email|email\s+form|sign in with email|loginform|login form|email|e-mail|username|user\s*name)\b/.test(text);
+          return /\b(sign\s+in\s+with\s+email|log\s+in\s+with\s+email|email\s+and\s+password|login\s+form|credential\s+form|email|e-mail|username|user\s*name)\b/.test(text);
         });
         if (hasCredentialFormEvidence)
           return null;
         return "credential-control test edits a credential field without recording a path to the email/password form; stale auth-control test is invalid until generation records a complete form path";
       }
-      const hasSubmitAfterCredentialEdit = steps.some((step) => (step.order ?? -1) > lastCredentialEditOrder && isCredentialSubmitTap(step));
+      const hasSubmitAfterCredentialEdit = steps.some((step) => (step.order ?? -1) > lastCredentialEditOrder && isFormCommitStep(step));
       if (hasSubmitAfterCredentialEdit)
         return null;
+      const hasKeyboardCommitOnCredential = steps.some((step) => (step.order ?? -1) === lastCredentialEditOrder && isKeyboardFormCommitStep(step));
+      if (hasKeyboardCommitOnCredential)
+        return null;
       const hasValidationAssertion = steps.some((step) => {
         if (!/\b(assert|wait)\b/i.test(step.action))
           return false;
         const text = mobileStepSearchText(step);
-        return /\b(invalid|required|error|empty|missing|incorrect|wrong|try again|validation|must enter|enter (an )?(email|password)|email is required|password is required)\b/.test(text);
+        return /\b(invalid|required|error|empty|missing|incorrect|wrong|try again|validation|must enter|enter (an )?(email|password)|email is required|password is required|mismatch|does not match)\b/.test(text);
       });
       if (hasValidationAssertion)
         return null;
@@ -330649,7 +330878,7 @@ var require_package4 = __commonJS({
   "package.json"(exports, module) {
     module.exports = {
       name: "@validate.qa/runner",
-      version: "1.0.33",
+      version: "1.0.34",
       description: "validate local test runner - execute Playwright tests on your machine, connected to validate.qa cloud.",
       bin: {
         "validate-runner": "dist/cli.js"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@validate.qa/runner",
-  "version": "1.0.33",
+  "version": "1.0.34",
   "description": "validate local test runner - execute Playwright tests on your machine, connected to validate.qa cloud.",
   "bin": {
     "validate-runner": "dist/cli.js"