@validate.qa/runner 1.0.40 → 1.0.42

package/dist/cli.js

@@ -1583,6 +1583,9 @@ var init_types = __esm({
 });
 
 // ../shared/dist/constants.js
+function isEmailFromIdentity(value) {
+  return typeof value === "string" && EMAIL_FROM_IDENTITIES.includes(value);
+}
 function isValidMobileAppId(appId) {
   return appId.length > 0 && appId.length <= MOBILE_APP_ID_MAX_LENGTH && MOBILE_APP_ID_PATTERN.test(appId);
 }
@@ -1641,13 +1644,22 @@ function escapeEnvValue(value) {
   const escaped = value.replace(/\\/g, "\\\\").replace(/"/g, '\\"').replace(/\n/g, "\\n").replace(/\r/g, "\\r");
   return `"${escaped}"`;
 }
-var API_PREFIX, SUPPORT_EMAIL, PLATFORM_ADMIN_EMAIL, AUDIO_CHUNK_DURATION_MS, ACTION_BATCH_INTERVAL_MS, ACTION_BATCH_MAX_SIZE, MOBILE_SCREENSHOT_INTERVAL_MS, MOBILE_ACTION_BATCH_MAX_SIZE, MOBILE_BRIDGE_PORT, MOBILE_SNAPSHOT_MAX_SIZE_BYTES, MOBILE_APP_ID_MAX_LENGTH, MOBILE_APP_ID_PATTERN, MOBILE_FOCUS_SETTLE_MS, MOBILE_POST_ACTION_SETTLE_MS, MOBILE_COLD_BOOT_SETTLE_MS, MOBILE_DEFAULT_SWIPE_DISTANCE, MOBILE_MAX_SWIPE_DISTANCE, SELECTOR_PRIORITIES, MOBILE_STEP_TYPES, BLOCKED_ENV_VARS, SPAWNED_ENV_ALLOWLIST;
+var API_PREFIX, SUPPORT_EMAIL, PLATFORM_ADMIN_EMAIL, NOREPLY_EMAIL, EMAIL_FROM_IDENTITIES, ADMIN_EMAIL_LIMITS, AUDIO_CHUNK_DURATION_MS, ACTION_BATCH_INTERVAL_MS, ACTION_BATCH_MAX_SIZE, MOBILE_SCREENSHOT_INTERVAL_MS, MOBILE_ACTION_BATCH_MAX_SIZE, MOBILE_BRIDGE_PORT, MOBILE_SNAPSHOT_MAX_SIZE_BYTES, MOBILE_APP_ID_MAX_LENGTH, MOBILE_APP_ID_PATTERN, MOBILE_FOCUS_SETTLE_MS, MOBILE_POST_ACTION_SETTLE_MS, MOBILE_COLD_BOOT_SETTLE_MS, MOBILE_DEFAULT_SWIPE_DISTANCE, MOBILE_MAX_SWIPE_DISTANCE, SELECTOR_PRIORITIES, MOBILE_STEP_TYPES, BLOCKED_ENV_VARS, SPAWNED_ENV_ALLOWLIST;
 var init_constants = __esm({
   "../shared/dist/constants.js"() {
     "use strict";
     API_PREFIX = "/api";
     SUPPORT_EMAIL = "support@validate.qa";
     PLATFORM_ADMIN_EMAIL = "admin@validate.qa";
+    NOREPLY_EMAIL = "noreply@validate.qa";
+    EMAIL_FROM_IDENTITIES = ["noreply", "support", "admin"];
+    ADMIN_EMAIL_LIMITS = {
+      recipientsPerSend: 100,
+      recipientNameLength: 200,
+      subjectLength: 200,
+      bodyLength: 5e4,
+      templateNameLength: 120
+    };
     AUDIO_CHUNK_DURATION_MS = 3e4;
     ACTION_BATCH_INTERVAL_MS = 2e3;
     ACTION_BATCH_MAX_SIZE = 10;
@@ -1786,6 +1798,83 @@ var init_constants = __esm({
   }
 });
 
+// ../shared/dist/project-key.js
+function isValidProjectKey(key) {
+  return typeof key === "string" && PROJECT_KEY_PATTERN.test(key) && !RESERVED_PROJECT_KEYS.has(key);
+}
+function randomChar(rng) {
+  return KEY_ALPHABET[Math.floor(rng() * KEY_ALPHABET.length)] ?? "0";
+}
+function randomKey(length, rng) {
+  let out = "";
+  for (let i = 0; i < length; i++)
+    out += randomChar(rng);
+  return out;
+}
+function alnumLower(name) {
+  return (name ?? "").toLowerCase().replace(/[^a-z0-9]/g, "");
+}
+function deriveProjectKey(name, rng = Math.random) {
+  const base2 = alnumLower(name).slice(0, 3);
+  return base2.length >= PROJECT_KEY_MIN_LENGTH ? base2 : randomKey(3, rng);
+}
+function generateUniqueProjectKey(name, taken, rng = Math.random) {
+  const isFree = (k) => isValidProjectKey(k) && !taken.has(k);
+  const primary = deriveProjectKey(name, rng);
+  if (isFree(primary))
+    return primary;
+  const prefix2 = alnumLower(name).slice(0, 2);
+  for (const suffixLen of [1, 2]) {
+    for (let attempt = 0; attempt < 40; attempt++) {
+      const stem = prefix2.length >= 1 ? prefix2 : deriveProjectKey(name, rng).slice(0, 2);
+      const candidate = stem + randomKey(suffixLen, rng);
+      if (isFree(candidate))
+        return candidate;
+    }
+  }
+  for (let len = 4; len <= PROJECT_KEY_MAX_LENGTH; len++) {
+    for (let attempt = 0; attempt < 100; attempt++) {
+      const candidate = randomKey(len, rng);
+      if (isFree(candidate))
+        return candidate;
+    }
+  }
+  throw new Error("Unable to generate a unique project key");
+}
+var RESERVED_PROJECT_KEYS, PROJECT_KEY_MIN_LENGTH, PROJECT_KEY_MAX_LENGTH, PROJECT_KEY_PATTERN, KEY_ALPHABET;
+var init_project_key = __esm({
+  "../shared/dist/project-key.js"() {
+    "use strict";
+    RESERVED_PROJECT_KEYS = /* @__PURE__ */ new Set([
+      "tests",
+      "sessions",
+      "settings",
+      "reports",
+      "account",
+      "notifications",
+      "support",
+      "site-map",
+      "api-intelligence",
+      "selector-registry",
+      "project-knowledge",
+      "test-data",
+      "audit",
+      "validate-copilot",
+      "qa-copilot",
+      "insights",
+      "regression",
+      "reviews",
+      "admin",
+      "login",
+      "admin-view"
+    ]);
+    PROJECT_KEY_MIN_LENGTH = 2;
+    PROJECT_KEY_MAX_LENGTH = 12;
+    PROJECT_KEY_PATTERN = /^[a-z0-9](?:[a-z0-9-]{0,10}[a-z0-9])$/;
+    KEY_ALPHABET = "abcdefghijklmnopqrstuvwxyz0123456789";
+  }
+});
+
 // ../shared/dist/mobile-deeplink.js
 function isSafeDeepLink(value) {
   if (typeof value !== "string")
@@ -4941,6 +5030,7 @@ __export(dist_exports, {
   ACTION_BATCH_INTERVAL_MS: () => ACTION_BATCH_INTERVAL_MS,
   ACTION_BATCH_MAX_SIZE: () => ACTION_BATCH_MAX_SIZE,
   ADDON_DEFINITIONS: () => ADDON_DEFINITIONS,
+  ADMIN_EMAIL_LIMITS: () => ADMIN_EMAIL_LIMITS,
   AI_CREDIT_MARGIN: () => AI_CREDIT_MARGIN,
   API_PREFIX: () => API_PREFIX,
   AUDIO_CHUNK_DURATION_MS: () => AUDIO_CHUNK_DURATION_MS,
@@ -4954,6 +5044,7 @@ __export(dist_exports, {
   DEFAULT_TTS_SPEED: () => DEFAULT_TTS_SPEED,
   DEFAULT_TTS_VOICE_ID: () => DEFAULT_TTS_VOICE_ID,
   DEFAULT_UI_VARIANT: () => DEFAULT_UI_VARIANT,
+  EMAIL_FROM_IDENTITIES: () => EMAIL_FROM_IDENTITIES,
   ENVIRONMENTAL_ERROR_PREFIXES: () => ENVIRONMENTAL_ERROR_PREFIXES,
   LEGACY_TTS_VOICE_ID_MAP: () => LEGACY_TTS_VOICE_ID_MAP,
   MAX_CREDIT_TOPUP_CENTS: () => MAX_CREDIT_TOPUP_CENTS,
@@ -4972,9 +5063,14 @@ __export(dist_exports, {
   MOBILE_SCREENSHOT_INTERVAL_MS: () => MOBILE_SCREENSHOT_INTERVAL_MS,
   MOBILE_SNAPSHOT_MAX_SIZE_BYTES: () => MOBILE_SNAPSHOT_MAX_SIZE_BYTES,
   MOBILE_STEP_TYPES: () => MOBILE_STEP_TYPES,
+  NOREPLY_EMAIL: () => NOREPLY_EMAIL,
   PLAN_DEFINITIONS: () => PLAN_DEFINITIONS,
   PLAN_ORDER: () => PLAN_ORDER,
   PLATFORM_ADMIN_EMAIL: () => PLATFORM_ADMIN_EMAIL,
+  PROJECT_KEY_MAX_LENGTH: () => PROJECT_KEY_MAX_LENGTH,
+  PROJECT_KEY_MIN_LENGTH: () => PROJECT_KEY_MIN_LENGTH,
+  PROJECT_KEY_PATTERN: () => PROJECT_KEY_PATTERN,
+  RESERVED_PROJECT_KEYS: () => RESERVED_PROJECT_KEYS,
   SELECTOR_PRIORITIES: () => SELECTOR_PRIORITIES,
   SHARED_PRICING_PLAN_MAP: () => SHARED_PRICING_PLAN_MAP,
   STT_MODEL_OPTIONS: () => STT_MODEL_OPTIONS,
@@ -5008,6 +5104,7 @@ __export(dist_exports, {
   controlSignature: () => controlSignature,
   countInnerTests: () => countInnerTests,
   decideHarPosted: () => decideHarPosted,
+  deriveProjectKey: () => deriveProjectKey,
   detectCrossOriginHtmlAsJson: () => detectCrossOriginHtmlAsJson,
   detectsErrorBannerAssertion: () => detectsErrorBannerAssertion,
   effectiveTestCount: () => effectiveTestCount,
@@ -5024,6 +5121,7 @@ __export(dist_exports, {
   formatLimit: () => formatLimit,
   fromDbPricingPlan: () => fromDbPricingPlan,
   generateMobileTestFromSession: () => generateMobileTestFromSession,
+  generateUniqueProjectKey: () => generateUniqueProjectKey,
   getDefaultPlanForTier: () => getDefaultPlanForTier,
   getDeploymentTierForPlan: () => getDeploymentTierForPlan,
   getPlanChangeType: () => getPlanChangeType,
@@ -5042,6 +5140,7 @@ __export(dist_exports, {
   isCreditPackAmountCents: () => isCreditPackAmountCents,
   isDbPricingPlan: () => isDbPricingPlan,
   isEditableMobileClassName: () => isEditableMobileClassName,
+  isEmailFromIdentity: () => isEmailFromIdentity,
   isEnvironmentalError: () => isEnvironmentalError,
   isMobilePlatform: () => isMobilePlatform,
   isPricingPlan: () => isPricingPlan,
@@ -5053,6 +5152,7 @@ __export(dist_exports, {
   isTrialExpired: () => isTrialExpired,
   isUIVariant: () => isUIVariant,
   isValidMobileAppId: () => isValidMobileAppId,
+  isValidProjectKey: () => isValidProjectKey,
   isValidSttProvider: () => isValidSttProvider,
   isValidTtsModel: () => isValidTtsModel,
   isValidTtsVoiceId: () => isValidTtsVoiceId,
@@ -5098,6 +5198,7 @@ var init_dist = __esm({
     "use strict";
     init_types();
     init_constants();
+    init_project_key();
     init_mobile_test_generation();
     init_mobile_step_healer();
     init_mobile_cross_platform();
@@ -5888,17 +5989,27 @@ var require_mobile_session_keepalive = __commonJS({
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.MOBILE_KEEPALIVE_INTERVAL_MS = void 0;
+    exports2.computeKeepAliveIntervalMs = computeKeepAliveIntervalMs;
     exports2.withMobileSessionKeepAlive = withMobileSessionKeepAlive;
-    exports2.MOBILE_KEEPALIVE_INTERVAL_MS = (() => {
-      const raw = Number(process.env.VALIDATEQA_MOBILE_KEEPALIVE_MS);
-      return Number.isFinite(raw) && raw >= 0 ? Math.floor(raw) : 12e4;
-    })();
+    function computeKeepAliveIntervalMs(keepaliveMsRaw, newCommandTimeoutSecondsRaw) {
+      const explicit = keepaliveMsRaw?.trim() ? Number(keepaliveMsRaw) : NaN;
+      if (Number.isFinite(explicit) && explicit >= 0)
+        return Math.floor(explicit);
+      const timeoutSeconds = Number(newCommandTimeoutSecondsRaw);
+      const reapWindowMs = Number.isFinite(timeoutSeconds) && timeoutSeconds > 0 ? Math.floor(timeoutSeconds) * 1e3 : 6e5;
+      return Math.min(12e4, Math.max(5e3, Math.floor(reapWindowMs / 3)));
+    }
+    exports2.MOBILE_KEEPALIVE_INTERVAL_MS = computeKeepAliveIntervalMs(process.env.VALIDATEQA_MOBILE_KEEPALIVE_MS, process.env.VALIDATEQA_MOBILE_NEW_COMMAND_TIMEOUT);
     async function withMobileSessionKeepAlive(driver, fn, intervalMs = exports2.MOBILE_KEEPALIVE_INTERVAL_MS) {
       if (intervalMs <= 0)
         return fn();
       const timer = setInterval(() => {
-        void driver.windowSize().catch(() => {
-        });
+        try {
+          const probe = driver.keepAlivePing ? driver.keepAlivePing() : driver.windowSize();
+          void probe.catch(() => {
+          });
+        } catch {
+        }
       }, intervalMs);
       timer.unref?.();
       try {
@@ -73993,6 +74104,7 @@ var require_mobile_heal_loop = __commonJS({
     var mobile_heal_postprocess_js_1 = require_mobile_heal_postprocess();
     var mobile_observation_js_1 = require_mobile_observation();
     var selector_registry_context_js_1 = require_selector_registry_context();
+    var mobile_session_keepalive_js_1 = require_mobile_session_keepalive();
     exports2.MOBILE_SCRIPT_HEAL_SYSTEM_PROMPT = `You are a QA engineer fixing a failing Appium (mobile UI automation) test. You receive: the test STEPS as JSON, the failure ERROR + step-level results, and the PAGE-SOURCE accessibility tree captured at the moment of failure (this tree is your 'screenshot'), plus optional known-good selector candidates from a registry.
 ## You MUST try to fix the steps
 Reason over steps + error + tree + registry and return working healed steps. Do NOT return needs_device unless you have genuinely exhausted that reasoning (and NEVER before your final attempt).
@@ -74884,6 +74996,19 @@ For a fix, return the COMPLETE steps array (not a diff). Use "observe" only to r
         };
       }
       const maxPasses = envInt2("MOBILE_HEAL_PHASE2_MAX_PASSES") ?? DEFAULT_PHASE2_MAX_PASSES;
+      const keepAlivePingable = {
+        ...typeof liveDriver.keepAlivePing === "function" ? { keepAlivePing: liveDriver.keepAlivePing.bind(liveDriver) } : {},
+        // WARNING: this fallback routes through snapshot(), which sits inside
+        // withSessionRecovery on the real driver — a failed tick could consume the
+        // bounded recovery budget, the exact bug keepAlivePing exists to avoid.
+        // Every current MobileLiveDriverLike provides keepAlivePing, so this only
+        // exists for structural compatibility; implement keepAlivePing on any new
+        // facade rather than relying on it.
+        windowSize: async () => {
+          await liveDriver.snapshot();
+          return null;
+        }
+      };
       let baseSteps = args.steps;
       let priorError = args.priorError ?? null;
       let bestSteps;
@@ -74918,10 +75043,10 @@ For a fix, return the COMPLETE steps array (not a diff). Use "observe" only to r
         ];
         let content;
         try {
-          const response = await (0, ai_retry_js_1.resilientAICall)((signal, arm) => (0, ai_queue_js_1.queuedAICall)(() => {
+          const response = await (0, mobile_session_keepalive_js_1.withMobileSessionKeepAlive)(keepAlivePingable, () => (0, ai_retry_js_1.resilientAICall)((signal, arm) => (0, ai_queue_js_1.queuedAICall)(() => {
             arm();
             return aiClient.chat.completions.create({ model, messages, max_tokens: 8e3, temperature: 0.1 }, { signal });
-          }), { label: `mobile-live-heal-pass-${pass}`, deferTimeoutUntilArmed: true });
+          }), { label: `mobile-live-heal-pass-${pass}`, deferTimeoutUntilArmed: true }));
           content = response?.choices?.[0]?.message?.content ?? "";
         } catch {
           continue;
@@ -84724,6 +84849,51 @@ var require_discover_generator = __commonJS({
       }
       return s.length;
     }
+    function lineParenDeficit(line) {
+      const stack = [];
+      let regexSkips = 0;
+      for (let i = 0; i < line.length; i++) {
+        const ch = line[i];
+        if (ch === "'" || ch === '"' || ch === "`") {
+          i = skipQuotedLiteral(line, i) - 1;
+          continue;
+        }
+        if (ch === "/" && line[i + 1] === "/") {
+          i = skipLineComment(line, i) - 1;
+          continue;
+        }
+        if (ch === "/" && line[i + 1] === "*") {
+          i = skipBlockComment(line, i) - 1;
+          continue;
+        }
+        if (ch === "/" && isRegexStart(line, i)) {
+          regexSkips++;
+          i = skipRegexLiteral(line, i) - 1;
+          continue;
+        }
+        if (ch === "(" || ch === "{" || ch === "[") {
+          stack.push(ch);
+          continue;
+        }
+        if (ch === ")" || ch === "}" || ch === "]") {
+          if (stack[stack.length - 1] !== CLOSE_TO_OPEN[ch])
+            return { deficit: 0, regexSkips };
+          stack.pop();
+        }
+      }
+      const deficit = stack.length > 0 && stack.every((open) => open === "(") ? stack.length : 0;
+      return { deficit, regexSkips };
+    }
+    function parsesAsAsyncStatement(line) {
+      try {
+        new Function(`return (async () => {
+${line}
+})`);
+        return true;
+      } catch {
+        return false;
+      }
+    }
     function closeUnclosedRegexLiterals(code) {
       const anchors = [
         { rx: /\b(?:waitForURL|toHaveURL)\(\//g, mode: "url" },
@@ -84762,12 +84932,33 @@ var require_discover_generator = __commonJS({
         const term = findRegexTerminator(code, slash, TERMINATORS[mode]);
         out.push(code.slice(cursor, slash));
         const raw = code.slice(slash + 1, term).replace(/\s+$/, "");
+        let closedLiteral;
         if (mode === "url") {
           const escaped = raw.replace(/(?<!\\)\//g, "\\/");
           const finalBody = escaped.startsWith("\\/") ? escaped : `\\/${escaped}`;
-          out.push(`/${finalBody}/`);
+          closedLiteral = `/${finalBody}/`;
         } else {
-          out.push(`/${raw}/`);
+          closedLiteral = `/${raw}/`;
+        }
+        out.push(closedLiteral);
+        if (code[term] === ")") {
+          const lineStart = code.lastIndexOf("\n", slash) + 1;
+          const nextNewline = code.indexOf("\n", term);
+          const lineEnd = nextNewline === -1 ? code.length : nextNewline;
+          const tail = code.slice(term, lineEnd);
+          const physicalLine = code.slice(lineStart, lineEnd);
+          const lineIsPlain = !physicalLine.includes("`") && !physicalLine.includes("/*") && !physicalLine.includes("*/");
+          const soleAnchorOnLine = !hits.some((h) => h.slash !== slash && h.slash >= lineStart && h.slash < lineEnd);
+          if (lineIsPlain && soleAnchorOnLine && /;\s*$/.test(tail)) {
+            const repairedLine = code.slice(lineStart, slash) + "/x/" + tail;
+            const { deficit, regexSkips } = lineParenDeficit(repairedLine);
+            if (deficit > 0 && deficit <= 3 && regexSkips === 1) {
+              const candidateLine = code.slice(lineStart, slash) + closedLiteral + ")".repeat(deficit) + tail;
+              if (parsesAsAsyncStatement(candidateLine)) {
+                out.push(")".repeat(deficit));
+              }
+            }
+          }
         }
         cursor = term;
       }
@@ -337145,7 +337336,7 @@ var require_package4 = __commonJS({
   "package.json"(exports2, module2) {
     module2.exports = {
       name: "@validate.qa/runner",
-      version: "1.0.40",
+      version: "1.0.42",
       description: "validate local test runner - execute Playwright tests on your machine, connected to validate.qa cloud.",
       bin: {
         "validate-runner": "dist/cli.js"
@@ -337154,7 +337345,7 @@ var require_package4 = __commonJS({
         build: "tsup",
         dev: "tsx src/cli.ts",
         test: "node --import tsx --test src/version-check.test.ts",
-        "test:mobile": "node --import tsx --test src/runner.mobile-ai-env.test.ts src/mobile-device-queue.test.ts src/device-lease.test.ts src/result-payload-budget.test.ts src/services/appium-*.test.ts src/services/*mobile*.test.ts src/services/mobile/*.test.ts",
+        "test:mobile": "node --import tsx --test --test-concurrency=2 src/runner.mobile-ai-env.test.ts src/mobile-device-queue.test.ts src/device-lease.test.ts src/result-payload-budget.test.ts src/services/appium-*.test.ts src/services/*mobile*.test.ts src/services/mobile/*.test.ts",
         prepublishOnly: "npm run build"
       },
       files: [
@@ -343302,6 +343493,17 @@ var MobileBridgeDriver = class {
       return size;
     });
   }
+  /**
+   * Recovery-free liveness probe for keep-alive ticks (mobile-session-keepalive).
+   * Deliberately NOT wrapped in withSessionRecovery: keep-alive ticks are
+   * fire-and-forget, so a failing probe must never consume the bounded recovery
+   * budget or relaunch the app from the background — a genuinely dead session
+   * surfaces (with its precise error) on the caller's next REAL command, which
+   * still runs the full recovery path.
+   */
+  async keepAlivePing() {
+    await this.assertSessionReachable();
+  }
   // ── Action result wrapper ──────────────────────────────
   /**
    * Run an action body, let the UI tree settle, then capture the post-action
@@ -345859,6 +346061,7 @@ ${finalVerifyResult.logs ?? ""}`;
           setExecutorBusy(true);
           let session = null;
           let capture = null;
+          let discoveryTeardownStarted = false;
           try {
             const discoverySessionTarget = {
               appId: mobileTarget.appId,
@@ -345910,6 +346113,9 @@ ${finalVerifyResult.logs ?? ""}`;
               allowAppReset: mobileTarget.resetPolicy !== "PRESERVE_APP_DATA" && shouldResetMobileAppData(platform3, session.deviceId),
               maxSessionRecoveries: 1,
               recoverSession: async (cause) => {
+                if (discoveryTeardownStarted) {
+                  throw new Error("discovery teardown already started \u2014 not recreating the Appium session");
+                }
                 const lost = session;
                 mobileOnLog(
                   `[appium] discovery session lost (${cause.message}); recreating once on the leased device`
@@ -345923,6 +346129,13 @@ ${finalVerifyResult.logs ?? ""}`;
                   }
                 }
                 const replacement = await openDiscoverySession();
+                if (discoveryTeardownStarted) {
+                  try {
+                    await replacement.stop();
+                  } catch {
+                  }
+                  throw new Error("discovery teardown started during session recovery \u2014 replacement session closed");
+                }
                 session = replacement;
                 attachMirrorSession(replacement.sessionId, platform3, replacement.deviceId);
                 liveBrowserHandle.patch({
@@ -345962,6 +346175,7 @@ ${finalVerifyResult.logs ?? ""}`;
               onPlanReady
             });
           } finally {
+            discoveryTeardownStarted = true;
             const TEARDOWN_STEP_TIMEOUT = /* @__PURE__ */ Symbol("vqa-teardown-timeout");
             const timeboxed = async (step) => Promise.race([
               step,
@@ -345997,8 +346211,12 @@ ${finalVerifyResult.logs ?? ""}`;
             }
             if (session) {
               detachMirrorSession(session.deviceId);
+              const closing = session;
               try {
-                await timeboxed(session.stop());
+                const stopped = await timeboxed(closing.stop());
+                if (stopped === TEARDOWN_STEP_TIMEOUT) {
+                  mobileOnLog(`[appium] session ${closing.sessionId} stop timed out after 45s \u2014 releasing device ${closing.deviceId} anyway; Appium may hold the session until newCommandTimeout reaps it`);
+                }
               } catch {
               }
             }
@@ -346436,7 +346654,13 @@ ${finalVerifyResult.logs ?? ""}`;
                   relaunch: async () => {
                     await currentDriver().relaunch();
                   },
-                  resetAppState: async () => target.resetPolicy === "PRESERVE_APP_DATA" ? false : currentDriver().resetAppState()
+                  resetAppState: async () => target.resetPolicy === "PRESERVE_APP_DATA" ? false : currentDriver().resetAppState(),
+                  // Recovery-free liveness probe so the loop's keep-alive can span
+                  // long AI waits without touching the driver's recovery machinery
+                  // (see mobile-session-keepalive.ts).
+                  keepAlivePing: async () => {
+                    await currentDriver().keepAlivePing();
+                  }
                 };
                 const runNativeWithSessionHandoff = async (verifyArgs) => {
                   await closeLiveSession();

package/dist/cli.mjs

@@ -1588,6 +1588,9 @@ var init_types = __esm({
 });
 
 // ../shared/dist/constants.js
+function isEmailFromIdentity(value) {
+  return typeof value === "string" && EMAIL_FROM_IDENTITIES.includes(value);
+}
 function isValidMobileAppId(appId) {
   return appId.length > 0 && appId.length <= MOBILE_APP_ID_MAX_LENGTH && MOBILE_APP_ID_PATTERN.test(appId);
 }
@@ -1646,13 +1649,22 @@ function escapeEnvValue(value) {
   const escaped = value.replace(/\\/g, "\\\\").replace(/"/g, '\\"').replace(/\n/g, "\\n").replace(/\r/g, "\\r");
   return `"${escaped}"`;
 }
-var API_PREFIX, SUPPORT_EMAIL, PLATFORM_ADMIN_EMAIL, AUDIO_CHUNK_DURATION_MS, ACTION_BATCH_INTERVAL_MS, ACTION_BATCH_MAX_SIZE, MOBILE_SCREENSHOT_INTERVAL_MS, MOBILE_ACTION_BATCH_MAX_SIZE, MOBILE_BRIDGE_PORT, MOBILE_SNAPSHOT_MAX_SIZE_BYTES, MOBILE_APP_ID_MAX_LENGTH, MOBILE_APP_ID_PATTERN, MOBILE_FOCUS_SETTLE_MS, MOBILE_POST_ACTION_SETTLE_MS, MOBILE_COLD_BOOT_SETTLE_MS, MOBILE_DEFAULT_SWIPE_DISTANCE, MOBILE_MAX_SWIPE_DISTANCE, SELECTOR_PRIORITIES, MOBILE_STEP_TYPES, BLOCKED_ENV_VARS, SPAWNED_ENV_ALLOWLIST;
+var API_PREFIX, SUPPORT_EMAIL, PLATFORM_ADMIN_EMAIL, NOREPLY_EMAIL, EMAIL_FROM_IDENTITIES, ADMIN_EMAIL_LIMITS, AUDIO_CHUNK_DURATION_MS, ACTION_BATCH_INTERVAL_MS, ACTION_BATCH_MAX_SIZE, MOBILE_SCREENSHOT_INTERVAL_MS, MOBILE_ACTION_BATCH_MAX_SIZE, MOBILE_BRIDGE_PORT, MOBILE_SNAPSHOT_MAX_SIZE_BYTES, MOBILE_APP_ID_MAX_LENGTH, MOBILE_APP_ID_PATTERN, MOBILE_FOCUS_SETTLE_MS, MOBILE_POST_ACTION_SETTLE_MS, MOBILE_COLD_BOOT_SETTLE_MS, MOBILE_DEFAULT_SWIPE_DISTANCE, MOBILE_MAX_SWIPE_DISTANCE, SELECTOR_PRIORITIES, MOBILE_STEP_TYPES, BLOCKED_ENV_VARS, SPAWNED_ENV_ALLOWLIST;
 var init_constants = __esm({
   "../shared/dist/constants.js"() {
     "use strict";
     API_PREFIX = "/api";
     SUPPORT_EMAIL = "support@validate.qa";
     PLATFORM_ADMIN_EMAIL = "admin@validate.qa";
+    NOREPLY_EMAIL = "noreply@validate.qa";
+    EMAIL_FROM_IDENTITIES = ["noreply", "support", "admin"];
+    ADMIN_EMAIL_LIMITS = {
+      recipientsPerSend: 100,
+      recipientNameLength: 200,
+      subjectLength: 200,
+      bodyLength: 5e4,
+      templateNameLength: 120
+    };
     AUDIO_CHUNK_DURATION_MS = 3e4;
     ACTION_BATCH_INTERVAL_MS = 2e3;
     ACTION_BATCH_MAX_SIZE = 10;
@@ -1791,6 +1803,83 @@ var init_constants = __esm({
   }
 });
 
+// ../shared/dist/project-key.js
+function isValidProjectKey(key) {
+  return typeof key === "string" && PROJECT_KEY_PATTERN.test(key) && !RESERVED_PROJECT_KEYS.has(key);
+}
+function randomChar(rng) {
+  return KEY_ALPHABET[Math.floor(rng() * KEY_ALPHABET.length)] ?? "0";
+}
+function randomKey(length, rng) {
+  let out = "";
+  for (let i = 0; i < length; i++)
+    out += randomChar(rng);
+  return out;
+}
+function alnumLower(name) {
+  return (name ?? "").toLowerCase().replace(/[^a-z0-9]/g, "");
+}
+function deriveProjectKey(name, rng = Math.random) {
+  const base2 = alnumLower(name).slice(0, 3);
+  return base2.length >= PROJECT_KEY_MIN_LENGTH ? base2 : randomKey(3, rng);
+}
+function generateUniqueProjectKey(name, taken, rng = Math.random) {
+  const isFree = (k) => isValidProjectKey(k) && !taken.has(k);
+  const primary = deriveProjectKey(name, rng);
+  if (isFree(primary))
+    return primary;
+  const prefix2 = alnumLower(name).slice(0, 2);
+  for (const suffixLen of [1, 2]) {
+    for (let attempt = 0; attempt < 40; attempt++) {
+      const stem = prefix2.length >= 1 ? prefix2 : deriveProjectKey(name, rng).slice(0, 2);
+      const candidate = stem + randomKey(suffixLen, rng);
+      if (isFree(candidate))
+        return candidate;
+    }
+  }
+  for (let len = 4; len <= PROJECT_KEY_MAX_LENGTH; len++) {
+    for (let attempt = 0; attempt < 100; attempt++) {
+      const candidate = randomKey(len, rng);
+      if (isFree(candidate))
+        return candidate;
+    }
+  }
+  throw new Error("Unable to generate a unique project key");
+}
+var RESERVED_PROJECT_KEYS, PROJECT_KEY_MIN_LENGTH, PROJECT_KEY_MAX_LENGTH, PROJECT_KEY_PATTERN, KEY_ALPHABET;
+var init_project_key = __esm({
+  "../shared/dist/project-key.js"() {
+    "use strict";
+    RESERVED_PROJECT_KEYS = /* @__PURE__ */ new Set([
+      "tests",
+      "sessions",
+      "settings",
+      "reports",
+      "account",
+      "notifications",
+      "support",
+      "site-map",
+      "api-intelligence",
+      "selector-registry",
+      "project-knowledge",
+      "test-data",
+      "audit",
+      "validate-copilot",
+      "qa-copilot",
+      "insights",
+      "regression",
+      "reviews",
+      "admin",
+      "login",
+      "admin-view"
+    ]);
+    PROJECT_KEY_MIN_LENGTH = 2;
+    PROJECT_KEY_MAX_LENGTH = 12;
+    PROJECT_KEY_PATTERN = /^[a-z0-9](?:[a-z0-9-]{0,10}[a-z0-9])$/;
+    KEY_ALPHABET = "abcdefghijklmnopqrstuvwxyz0123456789";
+  }
+});
+
 // ../shared/dist/mobile-deeplink.js
 function isSafeDeepLink(value) {
   if (typeof value !== "string")
@@ -4946,6 +5035,7 @@ __export(dist_exports, {
   ACTION_BATCH_INTERVAL_MS: () => ACTION_BATCH_INTERVAL_MS,
   ACTION_BATCH_MAX_SIZE: () => ACTION_BATCH_MAX_SIZE,
   ADDON_DEFINITIONS: () => ADDON_DEFINITIONS,
+  ADMIN_EMAIL_LIMITS: () => ADMIN_EMAIL_LIMITS,
   AI_CREDIT_MARGIN: () => AI_CREDIT_MARGIN,
   API_PREFIX: () => API_PREFIX,
   AUDIO_CHUNK_DURATION_MS: () => AUDIO_CHUNK_DURATION_MS,
@@ -4959,6 +5049,7 @@ __export(dist_exports, {
   DEFAULT_TTS_SPEED: () => DEFAULT_TTS_SPEED,
   DEFAULT_TTS_VOICE_ID: () => DEFAULT_TTS_VOICE_ID,
   DEFAULT_UI_VARIANT: () => DEFAULT_UI_VARIANT,
+  EMAIL_FROM_IDENTITIES: () => EMAIL_FROM_IDENTITIES,
   ENVIRONMENTAL_ERROR_PREFIXES: () => ENVIRONMENTAL_ERROR_PREFIXES,
   LEGACY_TTS_VOICE_ID_MAP: () => LEGACY_TTS_VOICE_ID_MAP,
   MAX_CREDIT_TOPUP_CENTS: () => MAX_CREDIT_TOPUP_CENTS,
@@ -4977,9 +5068,14 @@ __export(dist_exports, {
   MOBILE_SCREENSHOT_INTERVAL_MS: () => MOBILE_SCREENSHOT_INTERVAL_MS,
   MOBILE_SNAPSHOT_MAX_SIZE_BYTES: () => MOBILE_SNAPSHOT_MAX_SIZE_BYTES,
   MOBILE_STEP_TYPES: () => MOBILE_STEP_TYPES,
+  NOREPLY_EMAIL: () => NOREPLY_EMAIL,
   PLAN_DEFINITIONS: () => PLAN_DEFINITIONS,
   PLAN_ORDER: () => PLAN_ORDER,
   PLATFORM_ADMIN_EMAIL: () => PLATFORM_ADMIN_EMAIL,
+  PROJECT_KEY_MAX_LENGTH: () => PROJECT_KEY_MAX_LENGTH,
+  PROJECT_KEY_MIN_LENGTH: () => PROJECT_KEY_MIN_LENGTH,
+  PROJECT_KEY_PATTERN: () => PROJECT_KEY_PATTERN,
+  RESERVED_PROJECT_KEYS: () => RESERVED_PROJECT_KEYS,
   SELECTOR_PRIORITIES: () => SELECTOR_PRIORITIES,
   SHARED_PRICING_PLAN_MAP: () => SHARED_PRICING_PLAN_MAP,
   STT_MODEL_OPTIONS: () => STT_MODEL_OPTIONS,
@@ -5013,6 +5109,7 @@ __export(dist_exports, {
   controlSignature: () => controlSignature,
   countInnerTests: () => countInnerTests,
   decideHarPosted: () => decideHarPosted,
+  deriveProjectKey: () => deriveProjectKey,
   detectCrossOriginHtmlAsJson: () => detectCrossOriginHtmlAsJson,
   detectsErrorBannerAssertion: () => detectsErrorBannerAssertion,
   effectiveTestCount: () => effectiveTestCount,
@@ -5029,6 +5126,7 @@ __export(dist_exports, {
   formatLimit: () => formatLimit,
   fromDbPricingPlan: () => fromDbPricingPlan,
   generateMobileTestFromSession: () => generateMobileTestFromSession,
+  generateUniqueProjectKey: () => generateUniqueProjectKey,
   getDefaultPlanForTier: () => getDefaultPlanForTier,
   getDeploymentTierForPlan: () => getDeploymentTierForPlan,
   getPlanChangeType: () => getPlanChangeType,
@@ -5047,6 +5145,7 @@ __export(dist_exports, {
   isCreditPackAmountCents: () => isCreditPackAmountCents,
   isDbPricingPlan: () => isDbPricingPlan,
   isEditableMobileClassName: () => isEditableMobileClassName,
+  isEmailFromIdentity: () => isEmailFromIdentity,
   isEnvironmentalError: () => isEnvironmentalError,
   isMobilePlatform: () => isMobilePlatform,
   isPricingPlan: () => isPricingPlan,
@@ -5058,6 +5157,7 @@ __export(dist_exports, {
   isTrialExpired: () => isTrialExpired,
   isUIVariant: () => isUIVariant,
   isValidMobileAppId: () => isValidMobileAppId,
+  isValidProjectKey: () => isValidProjectKey,
   isValidSttProvider: () => isValidSttProvider,
   isValidTtsModel: () => isValidTtsModel,
   isValidTtsVoiceId: () => isValidTtsVoiceId,
@@ -5103,6 +5203,7 @@ var init_dist = __esm({
     "use strict";
     init_types();
     init_constants();
+    init_project_key();
     init_mobile_test_generation();
     init_mobile_step_healer();
     init_mobile_cross_platform();
@@ -5893,17 +5994,27 @@ var require_mobile_session_keepalive = __commonJS({
     "use strict";
     Object.defineProperty(exports, "__esModule", { value: true });
     exports.MOBILE_KEEPALIVE_INTERVAL_MS = void 0;
+    exports.computeKeepAliveIntervalMs = computeKeepAliveIntervalMs;
     exports.withMobileSessionKeepAlive = withMobileSessionKeepAlive;
-    exports.MOBILE_KEEPALIVE_INTERVAL_MS = (() => {
-      const raw = Number(process.env.VALIDATEQA_MOBILE_KEEPALIVE_MS);
-      return Number.isFinite(raw) && raw >= 0 ? Math.floor(raw) : 12e4;
-    })();
+    function computeKeepAliveIntervalMs(keepaliveMsRaw, newCommandTimeoutSecondsRaw) {
+      const explicit = keepaliveMsRaw?.trim() ? Number(keepaliveMsRaw) : NaN;
+      if (Number.isFinite(explicit) && explicit >= 0)
+        return Math.floor(explicit);
+      const timeoutSeconds = Number(newCommandTimeoutSecondsRaw);
+      const reapWindowMs = Number.isFinite(timeoutSeconds) && timeoutSeconds > 0 ? Math.floor(timeoutSeconds) * 1e3 : 6e5;
+      return Math.min(12e4, Math.max(5e3, Math.floor(reapWindowMs / 3)));
+    }
+    exports.MOBILE_KEEPALIVE_INTERVAL_MS = computeKeepAliveIntervalMs(process.env.VALIDATEQA_MOBILE_KEEPALIVE_MS, process.env.VALIDATEQA_MOBILE_NEW_COMMAND_TIMEOUT);
     async function withMobileSessionKeepAlive(driver, fn, intervalMs = exports.MOBILE_KEEPALIVE_INTERVAL_MS) {
       if (intervalMs <= 0)
         return fn();
       const timer = setInterval(() => {
-        void driver.windowSize().catch(() => {
-        });
+        try {
+          const probe = driver.keepAlivePing ? driver.keepAlivePing() : driver.windowSize();
+          void probe.catch(() => {
+          });
+        } catch {
+        }
       }, intervalMs);
       timer.unref?.();
       try {
@@ -73998,6 +74109,7 @@ var require_mobile_heal_loop = __commonJS({
     var mobile_heal_postprocess_js_1 = require_mobile_heal_postprocess();
     var mobile_observation_js_1 = require_mobile_observation();
     var selector_registry_context_js_1 = require_selector_registry_context();
+    var mobile_session_keepalive_js_1 = require_mobile_session_keepalive();
     exports.MOBILE_SCRIPT_HEAL_SYSTEM_PROMPT = `You are a QA engineer fixing a failing Appium (mobile UI automation) test. You receive: the test STEPS as JSON, the failure ERROR + step-level results, and the PAGE-SOURCE accessibility tree captured at the moment of failure (this tree is your 'screenshot'), plus optional known-good selector candidates from a registry.
 ## You MUST try to fix the steps
 Reason over steps + error + tree + registry and return working healed steps. Do NOT return needs_device unless you have genuinely exhausted that reasoning (and NEVER before your final attempt).
@@ -74889,6 +75001,19 @@ For a fix, return the COMPLETE steps array (not a diff). Use "observe" only to r
         };
       }
       const maxPasses = envInt2("MOBILE_HEAL_PHASE2_MAX_PASSES") ?? DEFAULT_PHASE2_MAX_PASSES;
+      const keepAlivePingable = {
+        ...typeof liveDriver.keepAlivePing === "function" ? { keepAlivePing: liveDriver.keepAlivePing.bind(liveDriver) } : {},
+        // WARNING: this fallback routes through snapshot(), which sits inside
+        // withSessionRecovery on the real driver — a failed tick could consume the
+        // bounded recovery budget, the exact bug keepAlivePing exists to avoid.
+        // Every current MobileLiveDriverLike provides keepAlivePing, so this only
+        // exists for structural compatibility; implement keepAlivePing on any new
+        // facade rather than relying on it.
+        windowSize: async () => {
+          await liveDriver.snapshot();
+          return null;
+        }
+      };
       let baseSteps = args.steps;
       let priorError = args.priorError ?? null;
       let bestSteps;
@@ -74923,10 +75048,10 @@ For a fix, return the COMPLETE steps array (not a diff). Use "observe" only to r
         ];
         let content;
         try {
-          const response = await (0, ai_retry_js_1.resilientAICall)((signal, arm) => (0, ai_queue_js_1.queuedAICall)(() => {
+          const response = await (0, mobile_session_keepalive_js_1.withMobileSessionKeepAlive)(keepAlivePingable, () => (0, ai_retry_js_1.resilientAICall)((signal, arm) => (0, ai_queue_js_1.queuedAICall)(() => {
             arm();
             return aiClient.chat.completions.create({ model, messages, max_tokens: 8e3, temperature: 0.1 }, { signal });
-          }), { label: `mobile-live-heal-pass-${pass}`, deferTimeoutUntilArmed: true });
+          }), { label: `mobile-live-heal-pass-${pass}`, deferTimeoutUntilArmed: true }));
           content = response?.choices?.[0]?.message?.content ?? "";
         } catch {
           continue;
@@ -84729,6 +84854,51 @@ var require_discover_generator = __commonJS({
       }
       return s.length;
     }
+    function lineParenDeficit(line) {
+      const stack = [];
+      let regexSkips = 0;
+      for (let i = 0; i < line.length; i++) {
+        const ch = line[i];
+        if (ch === "'" || ch === '"' || ch === "`") {
+          i = skipQuotedLiteral(line, i) - 1;
+          continue;
+        }
+        if (ch === "/" && line[i + 1] === "/") {
+          i = skipLineComment(line, i) - 1;
+          continue;
+        }
+        if (ch === "/" && line[i + 1] === "*") {
+          i = skipBlockComment(line, i) - 1;
+          continue;
+        }
+        if (ch === "/" && isRegexStart(line, i)) {
+          regexSkips++;
+          i = skipRegexLiteral(line, i) - 1;
+          continue;
+        }
+        if (ch === "(" || ch === "{" || ch === "[") {
+          stack.push(ch);
+          continue;
+        }
+        if (ch === ")" || ch === "}" || ch === "]") {
+          if (stack[stack.length - 1] !== CLOSE_TO_OPEN[ch])
+            return { deficit: 0, regexSkips };
+          stack.pop();
+        }
+      }
+      const deficit = stack.length > 0 && stack.every((open) => open === "(") ? stack.length : 0;
+      return { deficit, regexSkips };
+    }
+    function parsesAsAsyncStatement(line) {
+      try {
+        new Function(`return (async () => {
+${line}
+})`);
+        return true;
+      } catch {
+        return false;
+      }
+    }
     function closeUnclosedRegexLiterals(code) {
       const anchors = [
         { rx: /\b(?:waitForURL|toHaveURL)\(\//g, mode: "url" },
@@ -84767,12 +84937,33 @@ var require_discover_generator = __commonJS({
         const term = findRegexTerminator(code, slash, TERMINATORS[mode]);
         out.push(code.slice(cursor, slash));
         const raw = code.slice(slash + 1, term).replace(/\s+$/, "");
+        let closedLiteral;
         if (mode === "url") {
           const escaped = raw.replace(/(?<!\\)\//g, "\\/");
           const finalBody = escaped.startsWith("\\/") ? escaped : `\\/${escaped}`;
-          out.push(`/${finalBody}/`);
+          closedLiteral = `/${finalBody}/`;
         } else {
-          out.push(`/${raw}/`);
+          closedLiteral = `/${raw}/`;
+        }
+        out.push(closedLiteral);
+        if (code[term] === ")") {
+          const lineStart = code.lastIndexOf("\n", slash) + 1;
+          const nextNewline = code.indexOf("\n", term);
+          const lineEnd = nextNewline === -1 ? code.length : nextNewline;
+          const tail = code.slice(term, lineEnd);
+          const physicalLine = code.slice(lineStart, lineEnd);
+          const lineIsPlain = !physicalLine.includes("`") && !physicalLine.includes("/*") && !physicalLine.includes("*/");
+          const soleAnchorOnLine = !hits.some((h) => h.slash !== slash && h.slash >= lineStart && h.slash < lineEnd);
+          if (lineIsPlain && soleAnchorOnLine && /;\s*$/.test(tail)) {
+            const repairedLine = code.slice(lineStart, slash) + "/x/" + tail;
+            const { deficit, regexSkips } = lineParenDeficit(repairedLine);
+            if (deficit > 0 && deficit <= 3 && regexSkips === 1) {
+              const candidateLine = code.slice(lineStart, slash) + closedLiteral + ")".repeat(deficit) + tail;
+              if (parsesAsAsyncStatement(candidateLine)) {
+                out.push(")".repeat(deficit));
+              }
+            }
+          }
         }
         cursor = term;
       }
@@ -337150,7 +337341,7 @@ var require_package4 = __commonJS({
   "package.json"(exports, module) {
     module.exports = {
       name: "@validate.qa/runner",
-      version: "1.0.40",
+      version: "1.0.42",
       description: "validate local test runner - execute Playwright tests on your machine, connected to validate.qa cloud.",
       bin: {
         "validate-runner": "dist/cli.js"
@@ -337159,7 +337350,7 @@ var require_package4 = __commonJS({
         build: "tsup",
         dev: "tsx src/cli.ts",
         test: "node --import tsx --test src/version-check.test.ts",
-        "test:mobile": "node --import tsx --test src/runner.mobile-ai-env.test.ts src/mobile-device-queue.test.ts src/device-lease.test.ts src/result-payload-budget.test.ts src/services/appium-*.test.ts src/services/*mobile*.test.ts src/services/mobile/*.test.ts",
+        "test:mobile": "node --import tsx --test --test-concurrency=2 src/runner.mobile-ai-env.test.ts src/mobile-device-queue.test.ts src/device-lease.test.ts src/result-payload-budget.test.ts src/services/appium-*.test.ts src/services/*mobile*.test.ts src/services/mobile/*.test.ts",
         prepublishOnly: "npm run build"
       },
       files: [
@@ -343310,6 +343501,17 @@ var MobileBridgeDriver = class {
       return size;
     });
   }
+  /**
+   * Recovery-free liveness probe for keep-alive ticks (mobile-session-keepalive).
+   * Deliberately NOT wrapped in withSessionRecovery: keep-alive ticks are
+   * fire-and-forget, so a failing probe must never consume the bounded recovery
+   * budget or relaunch the app from the background — a genuinely dead session
+   * surfaces (with its precise error) on the caller's next REAL command, which
+   * still runs the full recovery path.
+   */
+  async keepAlivePing() {
+    await this.assertSessionReachable();
+  }
   // ── Action result wrapper ──────────────────────────────
   /**
    * Run an action body, let the UI tree settle, then capture the post-action
@@ -345867,6 +346069,7 @@ ${finalVerifyResult.logs ?? ""}`;
           setExecutorBusy(true);
           let session = null;
           let capture = null;
+          let discoveryTeardownStarted = false;
           try {
             const discoverySessionTarget = {
               appId: mobileTarget.appId,
@@ -345918,6 +346121,9 @@ ${finalVerifyResult.logs ?? ""}`;
               allowAppReset: mobileTarget.resetPolicy !== "PRESERVE_APP_DATA" && shouldResetMobileAppData(platform3, session.deviceId),
               maxSessionRecoveries: 1,
               recoverSession: async (cause) => {
+                if (discoveryTeardownStarted) {
+                  throw new Error("discovery teardown already started \u2014 not recreating the Appium session");
+                }
                 const lost = session;
                 mobileOnLog(
                   `[appium] discovery session lost (${cause.message}); recreating once on the leased device`
@@ -345931,6 +346137,13 @@ ${finalVerifyResult.logs ?? ""}`;
                   }
                 }
                 const replacement = await openDiscoverySession();
+                if (discoveryTeardownStarted) {
+                  try {
+                    await replacement.stop();
+                  } catch {
+                  }
+                  throw new Error("discovery teardown started during session recovery \u2014 replacement session closed");
+                }
                 session = replacement;
                 attachMirrorSession(replacement.sessionId, platform3, replacement.deviceId);
                 liveBrowserHandle.patch({
@@ -345970,6 +346183,7 @@ ${finalVerifyResult.logs ?? ""}`;
               onPlanReady
             });
           } finally {
+            discoveryTeardownStarted = true;
             const TEARDOWN_STEP_TIMEOUT = /* @__PURE__ */ Symbol("vqa-teardown-timeout");
             const timeboxed = async (step) => Promise.race([
               step,
@@ -346005,8 +346219,12 @@ ${finalVerifyResult.logs ?? ""}`;
             }
             if (session) {
               detachMirrorSession(session.deviceId);
+              const closing = session;
               try {
-                await timeboxed(session.stop());
+                const stopped = await timeboxed(closing.stop());
+                if (stopped === TEARDOWN_STEP_TIMEOUT) {
+                  mobileOnLog(`[appium] session ${closing.sessionId} stop timed out after 45s \u2014 releasing device ${closing.deviceId} anyway; Appium may hold the session until newCommandTimeout reaps it`);
+                }
               } catch {
               }
             }
@@ -346444,7 +346662,13 @@ ${finalVerifyResult.logs ?? ""}`;
                   relaunch: async () => {
                     await currentDriver().relaunch();
                   },
-                  resetAppState: async () => target.resetPolicy === "PRESERVE_APP_DATA" ? false : currentDriver().resetAppState()
+                  resetAppState: async () => target.resetPolicy === "PRESERVE_APP_DATA" ? false : currentDriver().resetAppState(),
+                  // Recovery-free liveness probe so the loop's keep-alive can span
+                  // long AI waits without touching the driver's recovery machinery
+                  // (see mobile-session-keepalive.ts).
+                  keepAlivePing: async () => {
+                    await currentDriver().keepAlivePing();
+                  }
                 };
                 const runNativeWithSessionHandoff = async (verifyArgs) => {
                   await closeLiveSession();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@validate.qa/runner",
-  "version": "1.0.40",
+  "version": "1.0.42",
   "description": "validate local test runner - execute Playwright tests on your machine, connected to validate.qa cloud.",
   "bin": {
     "validate-runner": "dist/cli.js"
@@ -9,7 +9,7 @@
     "build": "tsup",
     "dev": "tsx src/cli.ts",
     "test": "node --import tsx --test src/version-check.test.ts",
-    "test:mobile": "node --import tsx --test src/runner.mobile-ai-env.test.ts src/mobile-device-queue.test.ts src/device-lease.test.ts src/result-payload-budget.test.ts src/services/appium-*.test.ts src/services/*mobile*.test.ts src/services/mobile/*.test.ts",
+    "test:mobile": "node --import tsx --test --test-concurrency=2 src/runner.mobile-ai-env.test.ts src/mobile-device-queue.test.ts src/device-lease.test.ts src/result-payload-budget.test.ts src/services/appium-*.test.ts src/services/*mobile*.test.ts src/services/mobile/*.test.ts",
     "prepublishOnly": "npm run build"
   },
   "files": [