@validate.qa/runner 1.0.37 → 1.0.38

package/dist/cli.js

@@ -241,6 +241,9 @@ var require_ai_provider = __commonJS({
     exports2.getAvailableModels = getAvailableModels;
     exports2.getAvailableOrchestratorModels = getAvailableOrchestratorModels;
     exports2.isAvailableModelId = isAvailableModelId;
+    exports2.resolveWhisperProvider = resolveWhisperProvider;
+    exports2.isWhisperConfigured = isWhisperConfigured;
+    exports2.getWhisperModel = getWhisperModel;
     exports2.getOpenAIWhisperClient = getOpenAIWhisperClient;
     exports2.resetAIClient = resetAIClient;
     exports2.getServerProxiedAIClient = getServerProxiedAIClient;
@@ -570,20 +573,70 @@ var require_ai_provider = __commonJS({
     function isAvailableModelId(modelId) {
       return getAvailableModels().some((model) => model.id === modelId);
     }
+    var GROQ_API_BASE_DEFAULT = "https://api.groq.com/openai/v1";
+    var GROQ_WHISPER_DEFAULT = "whisper-large-v3-turbo";
+    var OPENAI_WHISPER_DEFAULT = "whisper-1";
+    function isUsableApiKey(value) {
+      if (!value)
+        return false;
+      const trimmed = value.trim();
+      if (!trimmed)
+        return false;
+      if (/your[-_]?.*(key|api|secret)/i.test(trimmed))
+        return false;
+      if (trimmed === "sk-..." || trimmed === "gsk_...")
+        return false;
+      return true;
+    }
+    function resolveWhisperProvider() {
+      const forced = (process.env.STT_PROVIDER ?? process.env.WHISPER_PROVIDER ?? "").trim().toLowerCase();
+      const hasGroq = isUsableApiKey(process.env.GROQ_API_KEY);
+      const hasOpenAI = isUsableApiKey(process.env.OPENAI_API_KEY);
+      if (forced === "groq")
+        return hasGroq ? "groq" : null;
+      if (forced === "openai")
+        return hasOpenAI ? "openai" : null;
+      if (hasGroq)
+        return "groq";
+      if (hasOpenAI)
+        return "openai";
+      return null;
+    }
+    function isWhisperConfigured() {
+      return resolveWhisperProvider() !== null;
+    }
+    function getWhisperModel(provider) {
+      const p = provider ?? resolveWhisperProvider();
+      if (p === "groq") {
+        return process.env.GROQ_WHISPER_MODEL?.trim() || process.env.OPENAI_WHISPER_MODEL?.trim() || GROQ_WHISPER_DEFAULT;
+      }
+      return process.env.OPENAI_WHISPER_MODEL?.trim() || OPENAI_WHISPER_DEFAULT;
+    }
     var _whisperClient = null;
+    var _whisperClientProvider = null;
     function getOpenAIWhisperClient() {
-      if (_whisperClient)
+      const provider = resolveWhisperProvider();
+      if (!provider) {
+        throw new Error("Speech transcription is not configured (set GROQ_API_KEY or OPENAI_API_KEY)");
+      }
+      if (_whisperClient && _whisperClientProvider === provider) {
         return _whisperClient;
-      const apiKey = process.env.OPENAI_API_KEY;
-      if (!apiKey)
-        throw new Error("OPENAI_API_KEY is required for Whisper transcription");
-      _whisperClient = new openai_1.default({ apiKey });
+      }
+      if (provider === "groq") {
+        const apiKey = process.env.GROQ_API_KEY;
+        const baseURL = process.env.GROQ_API_BASE?.trim() || GROQ_API_BASE_DEFAULT;
+        _whisperClient = new openai_1.default({ apiKey, baseURL });
+      } else {
+        _whisperClient = new openai_1.default({ apiKey: process.env.OPENAI_API_KEY });
+      }
+      _whisperClientProvider = provider;
       return _whisperClient;
     }
     var _serverProxiedClient = null;
     function resetAIClient() {
       _clientCache.clear();
       _whisperClient = null;
+      _whisperClientProvider = null;
       _serverProxiedClient = null;
     }
     function buildServerProxiedClient() {
@@ -1682,6 +1735,7 @@ var init_constants = __esm({
       "DATABASE_URL",
       "JWT_SECRET",
       "OPENAI_API_KEY",
+      "GROQ_API_KEY",
       "GEMINI_API_KEY",
       "XAI_API_KEY",
       "GROK_API_KEY",
@@ -3248,8 +3302,10 @@ var init_audit_pricing = __esm({
       "MiniMax-M2.7-highspeed": { input: 0.6, output: 2.4 },
       "MiniMax-M2": { input: 0.3, output: 1.2 },
       "deepseek-v4-flash": { input: 0.14, output: 0.28 },
-      // Whisper bills per-minute, not per-token
+      // Whisper bills per-minute, not per-token (OpenAI + Groq)
       "whisper-1": null,
+      "whisper-large-v3": null,
+      "whisper-large-v3-turbo": null,
       // Historical / deprecated (kept so old audit rows still show a cost).
       // Deprecated Grok variants priced at the legacy authoritative Grok rate
       // ($0.20/$0.80) those rows were generated under.
@@ -3860,6 +3916,43 @@ function assertedText(stmt) {
   }
   return out.join(" ").toLowerCase();
 }
+function clickedAdditiveAffordance(lines) {
+  const nameRe = /name\s*:\s*(?:['"`]([^'"`]+)['"`]|\/([^/]+)\/)/g;
+  for (const ln of lines) {
+    if (!/\.click\s*\(/.test(ln))
+      continue;
+    nameRe.lastIndex = 0;
+    let m;
+    while (m = nameRe.exec(ln)) {
+      const name = (m[1] ?? m[2]).toLowerCase();
+      if (EXCLUDE_AFFORDANCE.test(name))
+        continue;
+      if (ADDITIVE_AFFORDANCE.test(name))
+        return true;
+    }
+  }
+  return false;
+}
+function matcherText(stmt) {
+  const out = [];
+  const re = /\.(?:toContainText|toHaveText)\s*\(\s*(?:['"`]([^'"`]+)['"`]|\/([^/]+)\/)/g;
+  let m;
+  while (m = re.exec(stmt))
+    out.push(m[1] ?? m[2]);
+  return out.join(" ").toLowerCase();
+}
+function isEmptyStateProof(stmt) {
+  if (NEGATED_ASSERT.test(stmt))
+    return false;
+  if (/\.toHaveCount\s*\(\s*0\s*\)/.test(stmt))
+    return true;
+  if (/\.toBe\s*\(\s*0\s*\)/.test(stmt) && !isChromeTarget(stmt))
+    return true;
+  if (VISIBILITY_MATCHER.test(stmt) || TEXT_CONTENT_MATCHER.test(stmt)) {
+    return EMPTY_STATE_TEXT.test(`${assertedText(stmt)} ${matcherText(stmt)}`);
+  }
+  return false;
+}
 function hasAttributeTransition(stmts) {
   const byAttr = /* @__PURE__ */ new Map();
   for (const { stmt } of stmts) {
@@ -3966,6 +4059,21 @@ function validateAssertionStrength(code, opts = {}) {
   const interacted = mutated || navClicks > 0;
   navOnly = !mutated && navClicks > 0;
   const reloaded = RELOAD.test(body);
+  if (opts.flagContradictedAdditions && mutated && clickedAdditiveAffordance(interactionStmts)) {
+    const empties = stmts.filter(({ stmt }) => isEmptyStateProof(stmt));
+    if (empties.length > 0) {
+      const others = stmts.filter(({ stmt }) => !isEmptyStateProof(stmt));
+      const provesSomethingElse = detectOutcomeProof(others, mutated, false, clickedControlNames(interactionStmts), typedValues(interactionStmts));
+      if (!provesSomethingElse) {
+        return {
+          ok: false,
+          severity: "block",
+          reason: "additive action (add/create/save/favourite) proves no positive outcome \u2014 its only asserted result is that the target collection is still empty; hold @needs-review, do not ship as a passing regression",
+          signals: base2({ interacted, mutated, terminal })
+        };
+      }
+    }
+  }
   const hasOutcomeProof = detectOutcomeProof(stmts, mutated, reloaded, clickedControlNames(interactionStmts), typedValues(interactionStmts));
   const signals = base2({ interacted, mutated, navOnly, hasOutcomeProof, terminal });
   if (hasOutcomeProof) {
@@ -4020,7 +4128,7 @@ function validateAssertionStrength(code, opts = {}) {
     signals
   };
 }
-var ERROR_BANNER, OUTCOME_ALWAYS, FORM_INPUT, ANY_CLICK, NAV_LOCATOR, URL_PROOF, RELOAD, EXPECT_STMT, BLOCK_SCAFFOLD, LOCATOR_BINDING, STATE_MATCHER, CHROME_LOCATOR, CONTENT_ROLE, GET_BY_TEXT, HAS_TEXT_FILTER, OUTCOME_TEXT, MESSAGE_SURFACE, TEXT_CONTENT_MATCHER, VISIBILITY_MATCHER, AUTH_START, AUTH_END, LOGIN_CALL_LINE, NEGATED_ASSERT, TYPED_INPUT, TITLE_LINE, ROLE_NAME_RE, INTERACT_VERB, ROLE_SIG_RE, TRANSIENT_CONTROL_ROLES;
+var ERROR_BANNER, OUTCOME_ALWAYS, FORM_INPUT, ANY_CLICK, NAV_LOCATOR, URL_PROOF, RELOAD, EXPECT_STMT, BLOCK_SCAFFOLD, LOCATOR_BINDING, STATE_MATCHER, CHROME_LOCATOR, CONTENT_ROLE, GET_BY_TEXT, HAS_TEXT_FILTER, OUTCOME_TEXT, MESSAGE_SURFACE, TEXT_CONTENT_MATCHER, VISIBILITY_MATCHER, ADDITIVE_AFFORDANCE, EXCLUDE_AFFORDANCE, EMPTY_STATE_TEXT, AUTH_START, AUTH_END, LOGIN_CALL_LINE, NEGATED_ASSERT, TYPED_INPUT, TITLE_LINE, ROLE_NAME_RE, INTERACT_VERB, ROLE_SIG_RE, TRANSIENT_CONTROL_ROLES;
 var init_assertion_strength = __esm({
   "../shared/dist/assertion-strength.js"() {
     "use strict";
@@ -4064,6 +4172,9 @@ var init_assertion_strength = __esm({
     MESSAGE_SURFACE = /getByText\s*\(|\.filter\s*\(\s*\{\s*hasText\s*:|getByRole\s*\(\s*['"`](?:alert|alertdialog|status|heading|dialog)['"`]/i;
     TEXT_CONTENT_MATCHER = /\.(toHaveText|toContainText)\s*\(/;
     VISIBILITY_MATCHER = /\.toBeVisible\s*\(/;
+    ADDITIVE_AFFORDANCE = /\b(add|adds|added|create|creates|save|saves|favou?rite|favou?rites|invite|invites|upload|uploads|insert|append|bookmark|follow|subscribe|post|posts|new)\b/i;
+    EXCLUDE_AFFORDANCE = /\b(filter|filters|search|searches|sort|view|views|tab|tabs|window|windows|toggle|expand|collapse|column|columns|zoom|layout)\b/i;
+    EMPTY_STATE_TEXT = /\bno\b[\s\S]{0,24}?\b(yet|found|results?|items?|favou?rites?|entries|records?|matches|posts?|comments?)\b|nothing (?:here|yet|to show|found)|\bempty\b|\(\s*0\s*\)|\b0\s+(?:favou?rites?|results?|items?|entries|records?|matches|posts?|comments?)\b/i;
     AUTH_START = /^\s*\/\/\s*>>>\s*VALIDATE_QA_AUTH/;
     AUTH_END = /^\s*\/\/\s*<<<\s*VALIDATE_QA_AUTH/;
     LOGIN_CALL_LINE = /^\s*await\s+__vqaLogin\s*\(\s*page\s*\)\s*;?\s*$/;
@@ -4086,6 +4197,24 @@ var init_assertion_strength = __esm({
 });
 
 // ../shared/dist/run-classification.js
+function pickLatestHealthRun(runs) {
+  for (const run2 of runs) {
+    if (run2.mode === "auth-setup")
+      continue;
+    if (run2.status === "PASSED" || run2.status === "FAILED" || run2.status === "ERROR") {
+      return run2;
+    }
+  }
+  return null;
+}
+function pickDisplayRun(runs) {
+  if (runs.length === 0)
+    return null;
+  const latest = runs[0];
+  if (latest.status === "PENDING" || latest.status === "RUNNING")
+    return latest;
+  return pickLatestHealthRun(runs) ?? latest;
+}
 function isEnvironmentalError(run2) {
   if (!run2)
     return false;
@@ -4547,6 +4676,262 @@ var init_origin_domain = __esm({
   }
 });
 
+// ../shared/dist/voice-config.js
+function normalizeTtsVoiceId(voiceId) {
+  if (!voiceId)
+    return null;
+  const trimmed = voiceId.trim();
+  if (!trimmed)
+    return null;
+  return LEGACY_TTS_VOICE_ID_MAP[trimmed] ?? trimmed;
+}
+function sttModelsForProvider(provider) {
+  if (provider === "openai") {
+    return STT_MODEL_OPTIONS.filter((m) => m.provider === "openai");
+  }
+  if (provider === "groq") {
+    return STT_MODEL_OPTIONS.filter((m) => m.provider === "groq");
+  }
+  return STT_MODEL_OPTIONS;
+}
+function isValidSttProvider(value) {
+  return value === "groq" || value === "openai";
+}
+function isSttModelForProvider(modelId, provider) {
+  if (!modelId)
+    return false;
+  return STT_MODEL_OPTIONS.some((m) => m.id === modelId && m.provider === provider);
+}
+function resolveSttModelForProvider(provider, configuredModel) {
+  if (configuredModel && isSttModelForProvider(configuredModel, provider)) {
+    return configuredModel;
+  }
+  return DEFAULT_STT_MODEL_BY_PROVIDER[provider];
+}
+function sanitizeSttErrorMessage(raw) {
+  if (!raw)
+    return "Speech transcription failed.";
+  let msg = String(raw).replace(/\b(sk-proj-|sk-|gsk_|sk-svcacct-)[A-Za-z0-9_-]{8,}/gi, "$1***").replace(/Incorrect API key provided:\s*\S+/gi, "Incorrect API key provided").replace(/You can find your API key at https?:\/\/\S+/gi, "").replace(/\s+/g, " ").trim();
+  if (/401|incorrect api key|invalid.?api.?key|authentication|unauthorized/i.test(msg)) {
+    return "Speech transcription failed: the speech API key was rejected. Prefer GROQ_API_KEY (same as Copilot voice) or a valid OPENAI_API_KEY on the org server.";
+  }
+  if (/429|rate.?limit|too many requests/i.test(msg)) {
+    return "Speech transcription failed: the speech provider rate-limited the request. Try again in a moment.";
+  }
+  if (/not configured|GROQ_API_KEY or OPENAI_API_KEY/i.test(msg)) {
+    return "Speech transcription is not configured. Set GROQ_API_KEY (preferred) or OPENAI_API_KEY on the org server.";
+  }
+  if (msg.length > 280)
+    msg = `${msg.slice(0, 277)}\u2026`;
+  return msg || "Speech transcription failed.";
+}
+function isValidTtsVoiceId(value) {
+  const normalized = normalizeTtsVoiceId(value);
+  if (!normalized)
+    return false;
+  return TTS_VOICE_OPTIONS.some((v) => v.id === normalized);
+}
+function isValidTtsModel(value) {
+  if (!value)
+    return false;
+  return TTS_MODEL_OPTIONS.some((m) => m.id === value);
+}
+var VOICE_PREVIEW_SAMPLE, DEFAULT_TTS_MODEL, DEFAULT_TTS_VOICE_ID, DEFAULT_TTS_SPEED, LEGACY_TTS_VOICE_ID_MAP, DEFAULT_STT_MODEL_BY_PROVIDER, STT_PROVIDER_OPTIONS, STT_MODEL_OPTIONS, TTS_MODEL_OPTIONS, TTS_VOICE_OPTIONS;
+var init_voice_config = __esm({
+  "../shared/dist/voice-config.js"() {
+    "use strict";
+    VOICE_PREVIEW_SAMPLE = "Hello! I am your Validate Copilot assistant. I can help you run tests, review failures, and generate new coverage for your project.";
+    DEFAULT_TTS_MODEL = "speech-2.6-hd";
+    DEFAULT_TTS_VOICE_ID = "English_Graceful_Lady";
+    DEFAULT_TTS_SPEED = 1;
+    LEGACY_TTS_VOICE_ID_MAP = {
+      English_LivelyGirl: "English_PlayfulGirl",
+      English_Insightful_Man: "English_Insightful_Speaker",
+      English_Deep_Voice_Man: "English_ManWithDeepVoice",
+      English_CasualMan: "English_Jovialman"
+    };
+    DEFAULT_STT_MODEL_BY_PROVIDER = {
+      groq: "whisper-large-v3-turbo",
+      openai: "whisper-1"
+    };
+    STT_PROVIDER_OPTIONS = [
+      {
+        id: "auto",
+        label: "Auto (prefer Groq)",
+        description: "Use Groq when GROQ_API_KEY is set, otherwise OpenAI Whisper."
+      },
+      {
+        id: "groq",
+        label: "Groq Whisper",
+        description: "Free-tier OpenAI-compatible Whisper via Groq. Requires GROQ_API_KEY on org servers."
+      },
+      {
+        id: "openai",
+        label: "OpenAI Whisper",
+        description: "OpenAI whisper-1 API. Requires OPENAI_API_KEY on org servers."
+      }
+    ];
+    STT_MODEL_OPTIONS = [
+      {
+        id: "whisper-large-v3-turbo",
+        label: "Whisper Large V3 Turbo",
+        provider: "groq",
+        description: "Fast, accurate default for Groq (recommended)."
+      },
+      {
+        id: "whisper-large-v3",
+        label: "Whisper Large V3",
+        provider: "groq",
+        description: "Full-size Groq Whisper model \u2014 higher quality, slower."
+      },
+      {
+        id: "distil-whisper-large-v3-en",
+        label: "Distil Whisper Large V3 (EN)",
+        provider: "groq",
+        description: "English-optimized distilled model \u2014 fastest Groq option."
+      },
+      {
+        id: "whisper-1",
+        label: "Whisper 1",
+        provider: "openai",
+        description: "OpenAI hosted Whisper model."
+      }
+    ];
+    TTS_MODEL_OPTIONS = [
+      {
+        id: "speech-2.8-hd",
+        label: "Speech 2.8 HD",
+        provider: "minimax",
+        description: "Latest high-definition model with interjection tags (recommended)."
+      },
+      {
+        id: "speech-2.8-turbo",
+        label: "Speech 2.8 Turbo",
+        provider: "minimax",
+        description: "Latest low-latency model with interjection tags."
+      },
+      {
+        id: "speech-2.6-hd",
+        label: "Speech 2.6 HD",
+        provider: "minimax",
+        description: "High-definition MiniMax voice model."
+      },
+      {
+        id: "speech-2.6-turbo",
+        label: "Speech 2.6 Turbo",
+        provider: "minimax",
+        description: "Lower-latency Speech 2.6 variant."
+      },
+      {
+        id: "speech-02-hd",
+        label: "Speech 02 HD",
+        provider: "minimax",
+        description: "Previous-generation HD model."
+      },
+      {
+        id: "speech-02-turbo",
+        label: "Speech 02 Turbo",
+        provider: "minimax",
+        description: "Lower-latency Speech 02 variant."
+      },
+      {
+        id: "speech-01-hd",
+        label: "Speech 01 HD",
+        provider: "minimax",
+        description: "Legacy HD model."
+      },
+      {
+        id: "speech-01-turbo",
+        label: "Speech 01 Turbo",
+        provider: "minimax",
+        description: "Legacy fast model."
+      }
+    ];
+    TTS_VOICE_OPTIONS = [
+      {
+        id: "English_Graceful_Lady",
+        label: "Graceful Lady",
+        description: "Warm, polished professional tone.",
+        gender: "female",
+        accent: "English",
+        sampleText: VOICE_PREVIEW_SAMPLE
+      },
+      {
+        id: "English_ConfidentWoman",
+        label: "Confident Woman",
+        description: "Assured and direct \u2014 good for technical guidance.",
+        gender: "female",
+        accent: "English",
+        sampleText: VOICE_PREVIEW_SAMPLE
+      },
+      {
+        id: "English_SereneWoman",
+        label: "Serene Woman",
+        description: "Calm and measured delivery.",
+        gender: "female",
+        accent: "English",
+        sampleText: VOICE_PREVIEW_SAMPLE
+      },
+      {
+        id: "English_PlayfulGirl",
+        label: "Playful Girl",
+        description: "Upbeat and energetic.",
+        gender: "female",
+        accent: "English",
+        sampleText: VOICE_PREVIEW_SAMPLE
+      },
+      {
+        id: "English_CalmWoman",
+        label: "Calm Woman",
+        description: "Soft, reassuring cadence.",
+        gender: "female",
+        accent: "English",
+        sampleText: VOICE_PREVIEW_SAMPLE
+      },
+      {
+        id: "English_Insightful_Speaker",
+        label: "Insightful Speaker",
+        description: "Clear analyst-style narration.",
+        gender: "male",
+        accent: "English",
+        sampleText: VOICE_PREVIEW_SAMPLE
+      },
+      {
+        id: "English_ManWithDeepVoice",
+        label: "Deep Voice Man",
+        description: "Rich, authoritative baritone.",
+        gender: "male",
+        accent: "English",
+        sampleText: VOICE_PREVIEW_SAMPLE
+      },
+      {
+        id: "English_Jovialman",
+        label: "Jovial Man",
+        description: "Relaxed conversational style.",
+        gender: "male",
+        accent: "English",
+        sampleText: VOICE_PREVIEW_SAMPLE
+      },
+      {
+        id: "English_PatientMan",
+        label: "Patient Man",
+        description: "Steady, tutorial-friendly pacing.",
+        gender: "male",
+        accent: "English",
+        sampleText: VOICE_PREVIEW_SAMPLE
+      },
+      {
+        id: "English_FriendlyPerson",
+        label: "Friendly Person",
+        description: "Neutral, approachable assistant voice.",
+        gender: "neutral",
+        accent: "English",
+        sampleText: VOICE_PREVIEW_SAMPLE
+      }
+    ];
+  }
+});
+
 // ../shared/dist/index.js
 var dist_exports = {};
 __export(dist_exports, {
@@ -4561,8 +4946,13 @@ __export(dist_exports, {
   CREDIT_PRICES_CENTS: () => CREDIT_PRICES_CENTS,
   DANGEROUS_DEEPLINK_SCHEMES: () => DANGEROUS_DEEPLINK_SCHEMES,
   DB_PRICING_PLAN_MAP: () => DB_PRICING_PLAN_MAP,
+  DEFAULT_STT_MODEL_BY_PROVIDER: () => DEFAULT_STT_MODEL_BY_PROVIDER,
+  DEFAULT_TTS_MODEL: () => DEFAULT_TTS_MODEL,
+  DEFAULT_TTS_SPEED: () => DEFAULT_TTS_SPEED,
+  DEFAULT_TTS_VOICE_ID: () => DEFAULT_TTS_VOICE_ID,
   DEFAULT_UI_VARIANT: () => DEFAULT_UI_VARIANT,
   ENVIRONMENTAL_ERROR_PREFIXES: () => ENVIRONMENTAL_ERROR_PREFIXES,
+  LEGACY_TTS_VOICE_ID_MAP: () => LEGACY_TTS_VOICE_ID_MAP,
   MAX_CREDIT_TOPUP_CENTS: () => MAX_CREDIT_TOPUP_CENTS,
   MAX_DEEPLINK_LENGTH: () => MAX_DEEPLINK_LENGTH,
   MIN_CREDIT_TOPUP_CENTS: () => MIN_CREDIT_TOPUP_CENTS,
@@ -4584,10 +4974,15 @@ __export(dist_exports, {
   PLATFORM_ADMIN_EMAIL: () => PLATFORM_ADMIN_EMAIL,
   SELECTOR_PRIORITIES: () => SELECTOR_PRIORITIES,
   SHARED_PRICING_PLAN_MAP: () => SHARED_PRICING_PLAN_MAP,
+  STT_MODEL_OPTIONS: () => STT_MODEL_OPTIONS,
+  STT_PROVIDER_OPTIONS: () => STT_PROVIDER_OPTIONS,
   SUPPORT_EMAIL: () => SUPPORT_EMAIL,
   TRANSIENT_CONTROL_ROLES: () => TRANSIENT_CONTROL_ROLES,
   TRIAL_DURATION_DAYS: () => TRIAL_DURATION_DAYS,
+  TTS_MODEL_OPTIONS: () => TTS_MODEL_OPTIONS,
+  TTS_VOICE_OPTIONS: () => TTS_VOICE_OPTIONS,
   UI_VARIANTS: () => UI_VARIANTS,
+  VOICE_PREVIEW_SAMPLE: () => VOICE_PREVIEW_SAMPLE,
   accumulateStatements: () => accumulateStatements,
   aiCostToCreditCents: () => aiCostToCreditCents,
   analyzeMobileSelectorQuality: () => analyzeMobileSelectorQuality,
@@ -4650,16 +5045,23 @@ __export(dist_exports, {
   isRunnableStep: () => isRunnableStep,
   isSafeDeepLink: () => isSafeDeepLink,
   isSameRegistrableDomainHost: () => isSameRegistrableDomainHost,
+  isSttModelForProvider: () => isSttModelForProvider,
   isTestReadyForPlatform: () => isTestReadyForPlatform,
   isTrialExpired: () => isTrialExpired,
   isUIVariant: () => isUIVariant,
   isValidMobileAppId: () => isValidMobileAppId,
+  isValidSttProvider: () => isValidSttProvider,
+  isValidTtsModel: () => isValidTtsModel,
+  isValidTtsVoiceId: () => isValidTtsVoiceId,
   mediumForMobilePlatform: () => mediumForMobilePlatform,
   mobileCredentialPlaceholder: () => mobileCredentialPlaceholder,
   mobilePlatformFromMedium: () => mobilePlatformFromMedium,
   normalizeControlName: () => normalizeControlName,
+  normalizeTtsVoiceId: () => normalizeTtsVoiceId,
   otherMobilePlatform: () => otherMobilePlatform,
   parenDepthDelta: () => parenDepthDelta,
+  pickDisplayRun: () => pickDisplayRun,
+  pickLatestHealthRun: () => pickLatestHealthRun,
   placeholderizeRecordedMobileAction: () => placeholderizeRecordedMobileAction,
   placeholderizeRecordedTypeValue: () => placeholderizeRecordedTypeValue,
   planHasBillingPortal: () => planHasBillingPortal,
@@ -4669,7 +5071,9 @@ __export(dist_exports, {
   resolveCrossOriginConfigOverride: () => resolveCrossOriginConfigOverride,
   resolveMobileStepValuePlaceholders: () => resolveMobileStepValuePlaceholders,
   resolvePlatformLocatorBundle: () => resolvePlatformLocatorBundle,
+  resolveSttModelForProvider: () => resolveSttModelForProvider,
   safeOrigin: () => safeOrigin,
+  sanitizeSttErrorMessage: () => sanitizeSttErrorMessage,
   sanitizeTestVariables: () => sanitizeTestVariables,
   selectorCandidatesForStep: () => selectorCandidatesForStep,
   selectorForValue: () => selectorForValue,
@@ -4679,6 +5083,7 @@ __export(dist_exports, {
   stepsNeedingReviewForPlatform: () => stepsNeedingReviewForPlatform,
   stripEnvironmentalPrefix: () => stripEnvironmentalPrefix,
   stripLoginScaffolding: () => stripLoginScaffolding,
+  sttModelsForProvider: () => sttModelsForProvider,
   summarizeHealth: () => summarizeHealth,
   summarizeMobileReadiness: () => summarizeMobileReadiness,
   summarizeRunHealth: () => summarizeRunHealth,
@@ -4703,6 +5108,7 @@ var init_dist = __esm({
     init_agent_env();
     init_test_counting();
     init_origin_domain();
+    init_voice_config();
   }
 });
 
@@ -79521,7 +79927,7 @@ var require_agentic_discovery_prompts = __commonJS({
         "## Test-quality bar",
         "",
         "- ONE `test.describe(<featureName>)` block per file with ONE `test(...)` call inside.",
-        "- Use `await page.goto(<relativePath>)` \u2014 baseURL is set in the runner config; never hardcode the host.",
+        "- Use `await page.goto(<relativePath>)` \u2014 baseURL is set in the runner config; never hardcode the host. If the base URL includes a path (e.g. `https://host/app`), every goto path MUST start with that path: Playwright only prefixes relative paths, so `page.goto('/')` lands on the ORIGIN ROOT outside the app \u2014 the app home is `page.goto('/app')`.",
         "- Every test must contain at least one `expect(...)` assertion.",
         "- **The LAST statement inside the test body MUST be `await expect(...)` that PROVES THE OUTCOME of the test's primary action.** A test ending in `.click()`, `.fill()`, `.press()`, or a `console.log` is INVALID. For an INTERACTION test, re-asserting that the control you just clicked is visible or `aria-selected=true` proves NOTHING (the toggle could be broken and the test would still pass) and is rejected by the assertion-strength gate. Instead verify the post-action state: a before\u2192after count/value change, new content/value that appeared (`getByText` of the revealed value, `toHaveText`/`toContainText`), a created item present or a removed item gone (`toHaveCount`/`not.toBeVisible`), a field value (`toHaveValue`), or a control now disabled (`toBeDisabled`). EXEMPT: a pure navigation/routing test may end on `toHaveURL` + one landmark `toBeVisible`, and the mandatory post-login wait ends on a landmark `toBeVisible` \u2014 those are correct and required. The parent validator REJECTS tests whose last non-trivial line is anything other than `await expect(...)`.",
         "  Prefer: `expect(locator).toBeVisible()`, `expect(page).toHaveURL(/regex/)`, `expect(locator).toHaveText(...)`.",
@@ -81757,7 +82163,7 @@ var require_agentic_discovery_prompts = __commonJS({
       lines.push("## Test-quality bar");
       lines.push("");
       lines.push("- ONE `test.describe(<featureName>)` block per file with ONE `test(...)` inside.");
-      lines.push("- Use `await page.goto(<relativePath>)` \u2014 never hardcode the host.");
+      lines.push("- Use `await page.goto(<relativePath>)` \u2014 never hardcode the host. If the base URL includes a path (e.g. `https://host/app`), every goto path MUST start with that path (`page.goto('/')` escapes to the origin root \u2014 the app home is `page.goto('/app')`).");
       lines.push("- Every test MUST include the `@generated` tag.");
       lines.push("- Each test creates its OWN run-scoped data; never depend on pre-seeded data.");
       lines.push("");
@@ -82311,6 +82717,21 @@ var require_agentic_discovery_prompts = __commonJS({
       lines.push(`Use \`browser_navigate\` with the full URL (prepend ${baseUrl}). In the`);
       lines.push("emitted test code keep URLs RELATIVE (`page.goto('/path')`) \u2014 the Playwright");
       lines.push("config sets `baseURL`.");
+      {
+        const gotoBasePath = (() => {
+          try {
+            const p = new URL(baseUrl).pathname.replace(/\/+$/, "");
+            return p && p !== "/" ? p : void 0;
+          } catch {
+            return void 0;
+          }
+        })();
+        if (gotoBasePath) {
+          lines.push(`IMPORTANT: the base URL has a PATH (\`${gotoBasePath}\`) and a leading-slash path escapes`);
+          lines.push(`it to the origin root. Every \`page.goto\` path MUST start with \`${gotoBasePath}\` \u2014 the`);
+          lines.push(`app home is \`page.goto('${gotoBasePath}')\`, NOT \`page.goto('/')\`.`);
+        }
+      }
       lines.push("");
       lines.push("## The scenario");
       lines.push("");
@@ -82994,12 +83415,14 @@ var require_discover_generator = __commonJS({
     exports2.detectScenarioSignals = detectScenarioSignals;
     exports2.scenarioStepsCoverAuth = scenarioStepsCoverAuth;
     exports2.getLoginCommands = getLoginCommands;
+    exports2.hasConfiguredLoginCredentials = hasConfiguredLoginCredentials;
     exports2.computeSkeletonTags = computeSkeletonTags;
     exports2.shouldReplayAuthRecipe = shouldReplayAuthRecipe;
     exports2.buildPageContext = buildPageContext;
     exports2.stripTypescriptSyntax = stripTypescriptSyntax;
     exports2.stripImportDeclarations = stripImportDeclarations;
     exports2.stripStringsAndComments = stripStringsAndComments;
+    exports2.gotoBasePathFromBaseUrl = gotoBasePathFromBaseUrl;
     exports2.sanitizeCode = sanitizeCode;
     exports2.validateTests = validateTests;
     exports2.formatEvidenceForLiveGenerate = formatEvidenceForLiveGenerate;
@@ -83586,11 +84009,15 @@ var require_discover_generator = __commonJS({
       const replayPlan = (0, auth_recipe_js_1.buildReplayPlan)(login);
       return { ...login, replayPlan };
     }
-    function computeSkeletonTags(targetPages, pages) {
+    function hasConfiguredLoginCredentials(credentials) {
+      return ["TEST_USER_EMAIL", "TEST_USER_PASSWORD"].some((k) => typeof credentials?.[k] === "string" && credentials[k].trim().length > 0);
+    }
+    function computeSkeletonTags(targetPages, pages, opts) {
       const isAuthPage = (p) => p.pageType === "AUTH" || /\/(auth|login|sign-?in)\b/i.test(p.route);
+      const siteHasAuthEvidence = pages.some(isAuthPage) || opts?.extraAuthEvidence === true;
       const targetPagesInSiteMap = pages.filter((p) => targetPages.includes(p.route));
       const hasAuthPage = targetPagesInSiteMap.some(isAuthPage);
-      const hasAuthRequiredPage = targetPagesInSiteMap.some((p) => p.requiresAuth && !isAuthPage(p));
+      const hasAuthRequiredPage = siteHasAuthEvidence && targetPagesInSiteMap.some((p) => p.requiresAuth && !isAuthPage(p));
       if (hasAuthPage && !hasAuthRequiredPage)
         return ["@auth", "@discovered"];
       if (hasAuthRequiredPage)
@@ -83598,7 +84025,7 @@ var require_discover_generator = __commonJS({
       return ["@discovered", "@regression"];
     }
     function shouldReplayAuthRecipe(targetPages, siteMapPages, recipe) {
-      return !!recipe && computeSkeletonTags(targetPages, siteMapPages).includes("@needs-auth");
+      return !!recipe && computeSkeletonTags(targetPages, siteMapPages, { extraAuthEvidence: true }).includes("@needs-auth");
     }
     function isLowConfidenceSnapshotKind(kind) {
       return kind === "missing" || kind === "error" || kind === "timeout" || kind === "empty" || kind === "ai-capture_fallback";
@@ -84044,6 +84471,16 @@ ${elementContext}${formContext}${observationContext}${interactionContext}${lowCo
     function findSensitiveLiteralLeaks(code, testVariables) {
       return buildSensitiveEnvReplacements(testVariables).filter((replacement) => code.includes(replacement.value)).map((replacement) => replacement.key);
     }
+    function gotoBasePathFromBaseUrl(baseUrl) {
+      if (!baseUrl)
+        return void 0;
+      try {
+        const path = new URL(baseUrl).pathname.replace(/\/+$/, "");
+        return path && path !== "/" ? path : void 0;
+      } catch {
+        return void 0;
+      }
+    }
     function sanitizeCode(code, options) {
       let result = code;
       const isNetworkIdleWaitLine = (line) => /^\s*await page\.waitForLoadState\((['"])networkidle\1\);\s*$/.test(line);
@@ -84066,12 +84503,24 @@ ${elementContext}${formContext}${observationContext}${interactionContext}${lowCo
       result = result.replace(/\s*await page\.waitForTimeout\(\d+\);\s*/g, "\n");
       result = result.replace(/(await page\.goto\((?:[^()()]|\([^()]*\))*\);)\s*\n\s*await expect\(page\)\.toHaveURL\((?:[^()()]|\([^()]*\))*\);/g, (_match, gotoLine) => gotoLine);
       result = result.replace(/const baseUrl\s*=\s*process\.env\.BASE_URL[^;]*;\s*\n/g, "");
-      result = result.replace(/page\.goto\(`\$\{baseUrl\}([^`]*)`/g, (_match, path) => `page.goto('${path}'`);
+      result = result.replace(
+        /page\.goto\(`\$\{baseUrl\}([^`]*)`/g,
+        // Empty template path (goto(`${baseUrl}`)) means the app home → '/', which the
+        // path-scoped basePath pass below re-joins to the real base (e.g. '/wing').
+        (_match, path) => `page.goto('${path || "/"}'`
+      );
       result = result.replace(/test\s*\(\s*(['"`].*?['"`])\s*,\s*\{\s*tags\s*:\s*\[/g, (match) => match.replace("tags", "tag"));
       result = result.replace(/page\.goto\(\s*['"]https?:\/\/[^/'"]+(\/[^'"]*)?['"]/g, (_match, path) => `page.goto('${path || "/"}'`);
       result = result.replace(/waitForURL\(\s*['"]https?:\/\/[^/'"]+(\/.+?)['"]\s*\)/g, (_match, path) => `waitForURL(/${path.replace(/\//g, "\\/")}/)`);
       result = result.replace(/toHaveURL\(\s*['"]https?:\/\/[^/'"]+(\/.+?)['"]\s*\)/g, (_match, path) => `toHaveURL(/${path.replace(/\//g, "\\/")}/)`);
       result = result.replace(/(waitForURL|toHaveURL)\(\/(.*?)\\\/\/\)/g, (_match, fn, inner) => `${fn}(/${inner}/)`);
+      const basePath = options?.basePath && options.basePath !== "/" ? options.basePath.replace(/\/+$/, "") : void 0;
+      if (basePath) {
+        result = result.replace(/\b(goto|waitForURL|toHaveURL)\(\s*(['"])(\/(?!\/)[^'"]*)\2/g, (_match, fn, _quote, path) => {
+          const joined = path === basePath || path.startsWith(basePath + "/") ? path : basePath + (path === "/" ? "" : path);
+          return `${fn}('${joined}'`;
+        });
+      }
       result = result.replace(/\)\)\.(first\(\)|nth\(\d+\)|last\(\))\./g, (match, method) => `).${method}).`);
       result = result.replace(/^(\s+)expect\(page\b/gm, "$1await expect(page");
       result = result.replace(/^(\s+)page\.waitForURL\(/gm, "$1await page.waitForURL(");
@@ -84138,7 +84587,8 @@ ${testOpen}`;
         } : void 0;
         const playwrightCode = sanitizeCode(String(test.playwrightCode || ""), {
           sensitiveEnvMap: options?.sensitiveEnvMap,
-          authStamp
+          authStamp,
+          basePath: options?.basePath
         });
         const leakedSensitiveKeys = findSensitiveLiteralLeaks(playwrightCode, options?.sensitiveEnvMap);
         const authGuardStamped = !!options?.authRecipe && rawTags.includes("@needs-auth") && !rawTags.includes("@auth") && process.env.SHARED_AUTH_INJECT === "true";
@@ -85540,7 +85990,11 @@ ${outcomesText}
 ${hasVerifiedRecipe ? "The browser is ALREADY authenticated \u2014 `__vqaLogin(page)` ran first; cookies/session are populated. Do NOT log in again; begin from the authenticated app." : "The browser starts on about:blank with NO cookies, NO session, NO localStorage. You are NOT logged in."}
 The base URL is: ${baseUrl}
 When navigating, use \`browser_navigate\` with the full URL (prepend ${baseUrl}).
-In your generated test code, keep URLs RELATIVE (e.g. \`page.goto('/path')\`) \u2014 Playwright config has baseURL set.
+In your generated test code, keep URLs RELATIVE (e.g. \`page.goto('/path')\`) \u2014 Playwright config has baseURL set.${(() => {
+        const basePath = gotoBasePathFromBaseUrl(baseUrl);
+        return basePath ? `
+IMPORTANT: the base URL has a PATH (\`${basePath}\`), and Playwright's baseURL only prefixes relative paths \u2014 a leading-slash path escapes to the origin root. Every \`page.goto\` path MUST start with \`${basePath}\` (the app home is \`page.goto('${basePath}')\`, NOT \`page.goto('/')\`).` : "";
+      })()}
 
 ${evidenceBlock}${credentialNote}
 ## ASSERTION VERIFICATION WORKFLOW
@@ -85748,7 +86202,9 @@ ${tailBlock}`;
             }
           }
         });
-        const tags = computeSkeletonTags(scenario.targetPages, siteMap.pages);
+        const tags = computeSkeletonTags(scenario.targetPages, siteMap.pages, {
+          extraAuthEvidence: !!opts?.recipe || hasConfiguredLoginCredentials(credentials)
+        });
         const baseSkeletonHadRegression = tags.includes("@regression");
         const hasVerifiedRecipe = !!opts?.recipe && tags.includes("@needs-auth");
         const systemPrompt = buildScenarioSystemPrompt(scenario, baseUrl, credentials, tags, siteMap.pages, { appBrief: opts?.appBrief, availableVariableKeys: opts?.availableVariableKeys, hasVerifiedRecipe, knowledgeContext: opts?.knowledgeContext });
@@ -85957,7 +86413,7 @@ Do NOT add steps you did not execute. Do NOT skip steps from the recording.${led
               const suspectedBugDeclared = toolArgs.suspectedBug === true;
               const bugDescription = String(toolArgs.bugDescription || "").slice(0, 500).replace(/[\u0000-\u001F\u007F]+/g, " ").replace(/\s+/g, " ").trim();
               const testObj = { name, description, playwrightCode: code, tags };
-              const validated = validateTests([testObj], logs2, { sensitiveEnvMap: credentials, authRecipe: opts?.recipe ?? null });
+              const validated = validateTests([testObj], logs2, { sensitiveEnvMap: credentials, authRecipe: opts?.recipe ?? null, basePath: gotoBasePathFromBaseUrl(baseUrl) });
               if (validated.length > 0) {
                 if (actionLedger.length > lastRenderedLedgerEntryCount && actionLedger.length > 0) {
                   const renderedLedger = renderSessionRecording(actionLedger, credentials);
@@ -86076,7 +86532,12 @@ Do NOT add steps you did not execute. Do NOT skip steps from the recording.${led
                 const creditedControlSig = revealVerdict === "revealed" ? assertedSigs.find((s) => revealedControls.has(s)) ?? null : null;
                 let strengthVerdict = null;
                 try {
-                  strengthVerdict = (0, shared_1.validateAssertionStrength)(validated[0].playwrightCode, { revealedControls });
+                  strengthVerdict = (0, shared_1.validateAssertionStrength)(validated[0].playwrightCode, {
+                    revealedControls,
+                    // Opt-in additive-contradiction gate (see assertion-strength.ts). On Fargate this
+                    // env must be dispatcher-forwarded to take effect here; off → byte-identical.
+                    flagContradictedAdditions: process.env.STRENGTH_ADDITIVE_CONTRADICTION_GATE === "true"
+                  });
                 } catch (err) {
                   logs2.push(`    Strength gate errored \u2014 skipping (fail-open): ${String(err)}`);
                 }
@@ -301288,7 +301749,8 @@ ${currentError.slice(0, 2e3)}`
         }
         lastHealedCode = (0, discover_generator_js_1.sanitizeCode)(stripCodeFences(fixedCode), {
           sensitiveEnvMap: testVariables,
-          authStamp: (0, auth_recipe_js_1.buildHealAuthStamp)(playwrightCode, lastFailureError, logs2)
+          authStamp: (0, auth_recipe_js_1.buildHealAuthStamp)(playwrightCode, lastFailureError, logs2),
+          basePath: (0, discover_generator_js_1.gotoBasePathFromBaseUrl)(baseUrl)
         });
         logs2.push("\u{1F680} Running fixed code natively...");
         let verifyResult;
@@ -302742,7 +303204,8 @@ ${errorContent}`;
           }
           const candidateCode = (0, discover_generator_js_1.sanitizeCode)(stripCodeFences(fixedCode), {
             sensitiveEnvMap: testVariables,
-            authStamp: (0, auth_recipe_js_1.buildHealAuthStamp)(playwrightCode, options?.lastFailureError, logs2)
+            authStamp: (0, auth_recipe_js_1.buildHealAuthStamp)(playwrightCode, options?.lastFailureError, logs2),
+            basePath: (0, discover_generator_js_1.gotoBasePathFromBaseUrl)(baseUrl)
           });
           {
             const syntaxCheckCode = (0, discover_generator_js_1.stripTypescriptSyntax)((0, discover_generator_js_1.stripImportDeclarations)(candidateCode));
@@ -304489,7 +304952,8 @@ var require_grok_per_test_healer = __commonJS({
         }
         const healedCode = (0, discover_generator_js_1.sanitizeCode)(payload.playwrightCode, {
           sensitiveEnvMap: secrets,
-          authStamp: (0, auth_recipe_js_1.buildHealAuthStamp)(playwrightCode, options.lastFailureError, logs2)
+          authStamp: (0, auth_recipe_js_1.buildHealAuthStamp)(playwrightCode, options.lastFailureError, logs2),
+          basePath: (0, discover_generator_js_1.gotoBasePathFromBaseUrl)(baseUrl)
         });
         const leakedKey = findLeakedCredential(healedCode, secrets);
         if (leakedKey) {
@@ -305662,7 +306126,8 @@ var require_grok_batch_healer = __commonJS({
       }
       const healedCode = (0, discover_generator_js_1.sanitizeCode)(verdict.playwrightCode, {
         sensitiveEnvMap: secrets,
-        authStamp: (0, auth_recipe_js_1.buildHealAuthStamp)(test.playwrightCode, test.lastFailureError, logs2)
+        authStamp: (0, auth_recipe_js_1.buildHealAuthStamp)(test.playwrightCode, test.lastFailureError, logs2),
+        basePath: (0, discover_generator_js_1.gotoBasePathFromBaseUrl)(baseUrl)
       });
       const leakedKey = findLeakedCredential(healedCode, secrets);
       if (leakedKey) {
@@ -310674,7 +311139,7 @@ var require_discover_explorer = __commonJS({
             },
             requiresAuth: {
               type: "boolean",
-              description: "Whether this page requires authentication"
+              description: "OBSERVED evidence only: true if reaching this page logged-out redirected to a login page, returned 401/403, or showed an explicit sign-in wall. Never infer from content looking account-ish \u2014 a page you read without logging in does NOT require auth."
             },
             observations: {
               type: "array",
@@ -310903,7 +311368,7 @@ You do NOT have a \`record_journey\` tool - your job is mapping, not testing. Do
   2. Action buttons: submit, save, delete, create, edit - include label, triggersSubmit
   3. Navigation links to OTHER pages within the app - include label, triggersNavigation
   4. Skip repeated navigation chrome you already cataloged (sidebar/header links appear on every page)
-- **requiresAuth**: whether the page needs login
+- **requiresAuth**: OBSERVED evidence only \u2014 you were redirected to a login page, got 401/403, or hit a sign-in wall. If you are reading the page without having logged in, it does NOT require auth (account-ish CONTENT is not evidence)
 - **observations**: empty array (you are mapping, not interacting)
 
 ## Loading and readiness
@@ -314601,9 +315066,13 @@ var require_agentic_survey_prompts = __commonJS({
         '      route: string;             // path-only, e.g. "/dashboard/profile"',
         '      type: string;              // "AUTH" | "DASHBOARD" | "FORM" | "LIST" | ...',
         "      summary: string;           // 1-line of key elements/affordances",
-        "      requiresAuth?: boolean;    // true if reaching this page logged-out",
-        "                                 //   redirected to /login OR content was",
-        "                                 //   visibly gated behind authentication",
+        "      requiresAuth?: boolean;    // OBSERVED evidence ONLY: you were redirected",
+        "                                 //   to a login page, got 401/403, or hit an",
+        "                                 //   explicit sign-in wall. NEVER infer it from",
+        "                                 //   content merely LOOKING account-ish \u2014 if you",
+        "                                 //   read the page without logging in, it does",
+        "                                 //   NOT require auth. A site with no login at",
+        "                                 //   all has requiresAuth=false everywhere.",
         "    }>;",
         '    flows?: string[];            // ["/login \u2192 /dashboard (submit form)"]',
         "    observations?: string[];     // things YOU noticed in the loop",
@@ -336171,7 +336640,7 @@ var require_package4 = __commonJS({
   "package.json"(exports2, module2) {
     module2.exports = {
       name: "@validate.qa/runner",
-      version: "1.0.37",
+      version: "1.0.38",
       description: "validate local test runner - execute Playwright tests on your machine, connected to validate.qa cloud.",
       bin: {
         "validate-runner": "dist/cli.js"