@validate.qa/runner 1.0.59 → 1.0.60

package/dist/cli.js

@@ -73342,6 +73342,58 @@ var require_verification_inbox = __commonJS({
   }
 });
 
+// ../runner-core/dist/services/brokered-inbox-reader.js
+var require_brokered_inbox_reader = __commonJS({
+  "../runner-core/dist/services/brokered-inbox-reader.js"(exports2) {
+    "use strict";
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.BrokeredInboxReader = void 0;
+    var BROKERED_WAIT_CHUNK_MS = 55e3;
+    var BrokeredInboxReader = class {
+      transport;
+      constructor(transport) {
+        this.transport = transport;
+      }
+      async getUidWatermark() {
+        const value = await this.transport("getUidWatermark", {});
+        const record = value ?? {};
+        return {
+          uid: typeof record.uid === "number" ? record.uid : 0,
+          uidValidity: typeof record.uidValidity === "number" ? record.uidValidity : 0
+        };
+      }
+      async search(opts) {
+        const value = await this.transport("search", { opts });
+        return Array.isArray(value) ? value : [];
+      }
+      async getLatest(opts) {
+        const value = await this.transport("getLatest", { opts });
+        return value ?? null;
+      }
+      async getById(uid, address, altAddress, freshness) {
+        const value = await this.transport("getById", { uid, address, altAddress, freshness });
+        return value ?? null;
+      }
+      async waitForMessage(opts) {
+        const totalBudgetMs = Math.max(opts.maxWaitMs ?? 9e4, 1e3);
+        const deadline = Date.now() + totalBudgetMs;
+        for (; ; ) {
+          const remaining = deadline - Date.now();
+          if (remaining <= 0)
+            return null;
+          const chunkMs = Math.min(remaining, BROKERED_WAIT_CHUNK_MS);
+          const value = await this.transport("waitForMessage", {
+            opts: { ...opts, maxWaitMs: chunkMs }
+          });
+          if (value)
+            return value;
+        }
+      }
+    };
+    exports2.BrokeredInboxReader = BrokeredInboxReader;
+  }
+});
+
 // ../runner-core/dist/services/inbox-tools.js
 var require_inbox_tools = __commonJS({
   "../runner-core/dist/services/inbox-tools.js"(exports2) {
@@ -74051,6 +74103,7 @@ var require_mobile_explorer = __commonJS({
     var mobile_auth_coverage_js_1 = require_mobile_auth_coverage();
     var mobile_driver_errors_js_1 = require_mobile_driver_errors();
     var verification_inbox_js_1 = require_verification_inbox();
+    var brokered_inbox_reader_js_1 = require_brokered_inbox_reader();
     var inbox_tools_js_1 = require_inbox_tools();
     var mobile_discovery_auth_js_1 = require_mobile_discovery_auth();
     var MAX_MOBILE_ITERATIONS_SURVEY = 40;
@@ -75372,6 +75425,23 @@ ${existingScreens.slice(0, 100).map((s) => `- ${s.screenId}${s.name ? ` "${s.nam
           log: (line) => log2(line)
         });
         log2("Verification inbox ENABLED for registration \u2014 monitored identity provisioned.");
+      } else if (registerRequested && ctx.inboxBroker?.address && ctx.inboxBrokerRead) {
+        inboxState = (0, inbox_tools_js_1.createInboxRunState)({ address: ctx.inboxBroker.address }, {
+          tagSeed: targetAppId ?? ctx.projectId,
+          projectScope: ctx.projectId
+        });
+        inboxReader = new brokered_inbox_reader_js_1.BrokeredInboxReader(ctx.inboxBrokerRead);
+        await (0, inbox_tools_js_1.applyAndPersistInboxIdentity)({
+          variableContext: ctx.variableContext,
+          registration: {
+            email: inboxState.email,
+            legacyEmail: inboxState.legacyEmail,
+            passwordKey: inboxState.passwordKey ?? "TEST_USER_PASSWORD"
+          },
+          persist: ctx.onCredentialUpdate,
+          log: (line) => log2(line)
+        });
+        log2("Verification inbox ENABLED via server broker \u2014 monitored identity provisioned (IMAP credentials stay server-side).");
       } else if (registerRequested) {
         log2("Registration requested without a verification inbox \u2014 preserving the seeded credential identity and reporting any verification wall as unauthenticated.");
       }
@@ -84286,12 +84356,14 @@ ${args.directive}`);
           { role: "user", content: userContent }
         ];
         let content;
+        let finishReason;
         try {
           const response = await (0, ai_retry_js_1.resilientAICall)((signal, arm) => (0, ai_queue_js_1.queuedAICall)(() => {
             arm();
             return aiClient.chat.completions.create({ model, messages, max_tokens: 8e3, temperature: 0.1 }, { signal });
           }), { label: `mobile-heal-attempt-${attempt}`, deferTimeoutUntilArmed: true });
           content = response?.choices?.[0]?.message?.content ?? "";
+          finishReason = response?.choices?.[0]?.finish_reason ?? void 0;
         } catch {
           options.onProgress?.(`Phase 1 attempt ${attempt}: model call failed in transport \u2014 granting a recovery turn`);
           markRecoverableTurn();
@@ -84301,7 +84373,7 @@ ${args.directive}`);
         aiResponseCount += 1;
         const parsed = parseHealVerdict(content);
         if (!parsed) {
-          options.onProgress?.(`Phase 1 attempt ${attempt}: response was not a valid verdict \u2014 granting a recovery turn`);
+          options.onProgress?.(`Phase 1 attempt ${attempt}: response was not a valid verdict (${content.length} chars, finish=${finishReason ?? "unknown"}) \u2014 granting a recovery turn`);
           markRecoverableTurn();
           pendingDirective = "Your last response was not valid JSON matching the verdict schema. Return exactly one JSON verdict object.";
           continue;
@@ -349952,7 +350024,7 @@ var require_dist2 = __commonJS({
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.resolveRefFromSnapshot = exports2.replayAuthRecipeIntoBrowser = exports2.runRegisterCaptureRun = exports2.runLoginCaptureRun = exports2.filterLoginCaptureCredentials = exports2.buildLoginCaptureCredentials = exports2.isReservedRunnerEnvVar = exports2.RESERVED_RUNNER_ENV_VARS = exports2.AUTH_MARKER_VERSION = exports2.buildHealAuthStamp = exports2.extractAuthRegion = exports2.upsertAuthBlock = exports2.buildAuthRecipe = exports2.commandToReplayStep = exports2.buildReplayPlan = exports2.absoluteRoute = exports2.renderReplaySettleArrow = exports2.renderReplayClickArrow = exports2.renderAuthFn = exports2.filterFeatureGroupsToPathScope = exports2.isAuthFlowRoute = exports2.deriveSurveyPathScope = exports2.canonicalizeRoute = exports2.codeUsesInboxHelper = exports2.codeUsesTestInboxIdentity = exports2.codeSelfProvisionsRegistration = exports2.executeGrokPerBatchHeal = exports2.executeGrokPerTestHeal = exports2.headerVal = exports2.classifyAuthType = exports2.isTextExcerptable = exports2.isStaticAssetByExt = exports2.isApiCall = exports2.buildApiCallSummary = exports2.computeMobileHealOutcome = exports2.detectMobileStepSecretLeak = exports2.redactMobileSecretsFromText = exports2.MOBILE_LIVE_HEAL_SYSTEM_PROMPT = exports2.MOBILE_SCRIPT_HEAL_SYSTEM_PROMPT = exports2.executeMobileLiveHeal = exports2.executeMobileTestWithHealing = exports2.executeMobileScriptDrivenHeal = exports2.prepareMobileScenarioAppState = exports2.runMobileGeneratePhase = exports2.runMobileAIPlanner = exports2.buildMobileSiteMap = exports2.formatMobileEvidenceForPlanner = exports2.MOBILE_SCENARIO_SYSTEM_PROMPT = exports2.MOBILE_SURVEY_SYSTEM_PROMPT = exports2.runMobileExplorePhase = void 0;
     exports2.MAX_MANIFEST_FILES = exports2.toDiffSummary = exports2.isLikelyTestFile = exports2.sanitizeRepoRelPath = exports2.sha256Hex = exports2.hashFiles = exports2.enumerateTestFiles = exports2.buildNextManifest = exports2.detectRepoSwitch = exports2.classifyImportDiff = exports2.parseImportManifest = exports2.validateAuthoredMobileTest = exports2.buildMobileRepoAuthorSystemRules = exports2.buildMobileRepoAuthorKickoff = exports2.buildMobileRepoAuthorContractMd = exports2.REPO_ANALYSIS_SCHEMA_VERSION = exports2.validateSourceEndpoints = exports2.validateAuthoredTest = exports2.validateRepoMapFile = exports2.validateRepoMemoryFile = exports2.buildTestingStandardsSection = exports2.buildRepoAuthorSystemRules = exports2.buildRepoAuthorKickoff = exports2.buildRepoAuthorContractMd = exports2.buildRepoMapSystemRules = exports2.buildRepoMapKickoff = exports2.buildRepoMapContractMd = exports2.buildRepoMemorySystemRules = exports2.buildRepoMemoryKickoff = exports2.buildRepoMemoryContractMd = exports2.runRepoAnalysisOnRunner = exports2.MOBILE_IMPORT_SCHEMA_VERSION = exports2.validateImportedMobileTest = exports2.buildMobileImportSystemRules = exports2.buildMobileImportKickoff = exports2.buildMobileImportContractMd = exports2.IMPORT_SCHEMA_VERSION = exports2.validateImportResultFile = exports2.validateImportedTest = exports2.buildImportSystemRules = exports2.buildImportKickoff = exports2.buildImportContractMd = exports2.MAX_ARCHIVE_BYTES = exports2.isUnsafeEntryName = exports2.extractZipSafely = exports2.downloadArchiveCapped = exports2.detectArchiveKind = exports2.acquireRepoForImport = exports2.runFrameworkImportOnRunner = exports2.getAgenticEngine = void 0;
-    exports2.UNSUPPORTED_RENDERER_PREFIX = exports2.UnsupportedRendererError = exports2.buildCanvasModeAuthoringAddendum = exports2.buildUnsupportedRendererMessage = exports2.modelSupportsVision = exports2.decideCanvasStrategy = exports2.decideAppRenderType = exports2.detectCanvasApp = exports2.detectRateLimitBlock = exports2.isSafeCanonicalRedirect = exports2.resolveBaseUrlPreflight = exports2.checkBaseUrlRedirect = exports2.stripJsonFences = exports2.scrubCredentials = exports2.withAIRetry = exports2.snapshotMatchingChildren = exports2.findNewChromiumChildPid = exports2.killProcessTree = exports2.gracefulCloseWithTreeKill = exports2.liveBrowserRegistry = exports2.REPO_SWITCH_REMOVED_FRACTION = void 0;
+    exports2.BrokeredInboxReader = exports2.applyPlusTag = exports2.deriveProjectInboxTag = exports2.deriveInboxTag = exports2.loadVerificationInboxConfig = exports2.VerificationInboxReader = exports2.UNSUPPORTED_RENDERER_PREFIX = exports2.UnsupportedRendererError = exports2.buildCanvasModeAuthoringAddendum = exports2.buildUnsupportedRendererMessage = exports2.modelSupportsVision = exports2.decideCanvasStrategy = exports2.decideAppRenderType = exports2.detectCanvasApp = exports2.detectRateLimitBlock = exports2.isSafeCanonicalRedirect = exports2.resolveBaseUrlPreflight = exports2.checkBaseUrlRedirect = exports2.stripJsonFences = exports2.scrubCredentials = exports2.withAIRetry = exports2.snapshotMatchingChildren = exports2.findNewChromiumChildPid = exports2.killProcessTree = exports2.gracefulCloseWithTreeKill = exports2.liveBrowserRegistry = exports2.REPO_SWITCH_REMOVED_FRACTION = void 0;
     __exportStar(require_ai_provider(), exports2);
     __exportStar(require_mobile_types(), exports2);
     __exportStar(require_mobile_source_parser(), exports2);
@@ -350374,6 +350446,26 @@ var require_dist2 = __commonJS({
     Object.defineProperty(exports2, "UNSUPPORTED_RENDERER_PREFIX", { enumerable: true, get: function() {
       return canvas_detector_js_1.UNSUPPORTED_RENDERER_PREFIX;
     } });
+    var verification_inbox_js_1 = require_verification_inbox();
+    Object.defineProperty(exports2, "VerificationInboxReader", { enumerable: true, get: function() {
+      return verification_inbox_js_1.VerificationInboxReader;
+    } });
+    Object.defineProperty(exports2, "loadVerificationInboxConfig", { enumerable: true, get: function() {
+      return verification_inbox_js_1.loadVerificationInboxConfig;
+    } });
+    Object.defineProperty(exports2, "deriveInboxTag", { enumerable: true, get: function() {
+      return verification_inbox_js_1.deriveInboxTag;
+    } });
+    Object.defineProperty(exports2, "deriveProjectInboxTag", { enumerable: true, get: function() {
+      return verification_inbox_js_1.deriveProjectInboxTag;
+    } });
+    Object.defineProperty(exports2, "applyPlusTag", { enumerable: true, get: function() {
+      return verification_inbox_js_1.applyPlusTag;
+    } });
+    var brokered_inbox_reader_js_1 = require_brokered_inbox_reader();
+    Object.defineProperty(exports2, "BrokeredInboxReader", { enumerable: true, get: function() {
+      return brokered_inbox_reader_js_1.BrokeredInboxReader;
+    } });
   }
 });
 
@@ -350382,7 +350474,7 @@ var require_package4 = __commonJS({
   "package.json"(exports2, module2) {
     module2.exports = {
       name: "@validate.qa/runner",
-      version: "1.0.59",
+      version: "1.0.60",
       description: "validate local test runner - execute Playwright tests on your machine, connected to validate.qa cloud.",
       bin: {
         "validate-runner": "dist/cli.js"
@@ -358915,6 +359007,20 @@ ${finalVerifyResult.logs ?? ""}`;
         { ...input, actor: "ai-explorer" },
         run2.claimEpoch
       );
+      if (ctx.inboxBroker?.address) {
+        ctx.inboxBrokerRead = async (op, payload) => {
+          const res = await fetch(`${opts.serverUrl}/api/runner/inbox/read`, {
+            method: "POST",
+            headers: { ...headers, "Content-Type": "application/json" },
+            body: JSON.stringify({ runId: run2.runId, op, payload })
+          });
+          if (!res.ok) {
+            const detail = await res.text().catch(() => "");
+            throw new Error(`inbox broker ${op} failed: HTTP ${res.status}${detail ? ` \u2014 ${detail.slice(0, 200)}` : ""}`);
+          }
+          return (await res.json()).value ?? null;
+        };
+      }
       log.info(`Discovery (${ctx.mode}) on ${ctx.baseUrl}`);
       const { push: pushAudit, drain: drainAudit } = createAuditFlusher(
         `${opts.serverUrl}/api/runner/runs/${run2.runId}/ai-audit-batch`,

package/dist/cli.mjs

@@ -73347,6 +73347,58 @@ var require_verification_inbox = __commonJS({
   }
 });
 
+// ../runner-core/dist/services/brokered-inbox-reader.js
+var require_brokered_inbox_reader = __commonJS({
+  "../runner-core/dist/services/brokered-inbox-reader.js"(exports) {
+    "use strict";
+    Object.defineProperty(exports, "__esModule", { value: true });
+    exports.BrokeredInboxReader = void 0;
+    var BROKERED_WAIT_CHUNK_MS = 55e3;
+    var BrokeredInboxReader = class {
+      transport;
+      constructor(transport) {
+        this.transport = transport;
+      }
+      async getUidWatermark() {
+        const value = await this.transport("getUidWatermark", {});
+        const record = value ?? {};
+        return {
+          uid: typeof record.uid === "number" ? record.uid : 0,
+          uidValidity: typeof record.uidValidity === "number" ? record.uidValidity : 0
+        };
+      }
+      async search(opts) {
+        const value = await this.transport("search", { opts });
+        return Array.isArray(value) ? value : [];
+      }
+      async getLatest(opts) {
+        const value = await this.transport("getLatest", { opts });
+        return value ?? null;
+      }
+      async getById(uid, address, altAddress, freshness) {
+        const value = await this.transport("getById", { uid, address, altAddress, freshness });
+        return value ?? null;
+      }
+      async waitForMessage(opts) {
+        const totalBudgetMs = Math.max(opts.maxWaitMs ?? 9e4, 1e3);
+        const deadline = Date.now() + totalBudgetMs;
+        for (; ; ) {
+          const remaining = deadline - Date.now();
+          if (remaining <= 0)
+            return null;
+          const chunkMs = Math.min(remaining, BROKERED_WAIT_CHUNK_MS);
+          const value = await this.transport("waitForMessage", {
+            opts: { ...opts, maxWaitMs: chunkMs }
+          });
+          if (value)
+            return value;
+        }
+      }
+    };
+    exports.BrokeredInboxReader = BrokeredInboxReader;
+  }
+});
+
 // ../runner-core/dist/services/inbox-tools.js
 var require_inbox_tools = __commonJS({
   "../runner-core/dist/services/inbox-tools.js"(exports) {
@@ -74056,6 +74108,7 @@ var require_mobile_explorer = __commonJS({
     var mobile_auth_coverage_js_1 = require_mobile_auth_coverage();
     var mobile_driver_errors_js_1 = require_mobile_driver_errors();
     var verification_inbox_js_1 = require_verification_inbox();
+    var brokered_inbox_reader_js_1 = require_brokered_inbox_reader();
     var inbox_tools_js_1 = require_inbox_tools();
     var mobile_discovery_auth_js_1 = require_mobile_discovery_auth();
     var MAX_MOBILE_ITERATIONS_SURVEY = 40;
@@ -75377,6 +75430,23 @@ ${existingScreens.slice(0, 100).map((s) => `- ${s.screenId}${s.name ? ` "${s.nam
           log: (line) => log2(line)
         });
         log2("Verification inbox ENABLED for registration \u2014 monitored identity provisioned.");
+      } else if (registerRequested && ctx.inboxBroker?.address && ctx.inboxBrokerRead) {
+        inboxState = (0, inbox_tools_js_1.createInboxRunState)({ address: ctx.inboxBroker.address }, {
+          tagSeed: targetAppId ?? ctx.projectId,
+          projectScope: ctx.projectId
+        });
+        inboxReader = new brokered_inbox_reader_js_1.BrokeredInboxReader(ctx.inboxBrokerRead);
+        await (0, inbox_tools_js_1.applyAndPersistInboxIdentity)({
+          variableContext: ctx.variableContext,
+          registration: {
+            email: inboxState.email,
+            legacyEmail: inboxState.legacyEmail,
+            passwordKey: inboxState.passwordKey ?? "TEST_USER_PASSWORD"
+          },
+          persist: ctx.onCredentialUpdate,
+          log: (line) => log2(line)
+        });
+        log2("Verification inbox ENABLED via server broker \u2014 monitored identity provisioned (IMAP credentials stay server-side).");
       } else if (registerRequested) {
         log2("Registration requested without a verification inbox \u2014 preserving the seeded credential identity and reporting any verification wall as unauthenticated.");
       }
@@ -84291,12 +84361,14 @@ ${args.directive}`);
           { role: "user", content: userContent }
         ];
         let content;
+        let finishReason;
         try {
           const response = await (0, ai_retry_js_1.resilientAICall)((signal, arm) => (0, ai_queue_js_1.queuedAICall)(() => {
             arm();
             return aiClient.chat.completions.create({ model, messages, max_tokens: 8e3, temperature: 0.1 }, { signal });
           }), { label: `mobile-heal-attempt-${attempt}`, deferTimeoutUntilArmed: true });
           content = response?.choices?.[0]?.message?.content ?? "";
+          finishReason = response?.choices?.[0]?.finish_reason ?? void 0;
         } catch {
           options.onProgress?.(`Phase 1 attempt ${attempt}: model call failed in transport \u2014 granting a recovery turn`);
           markRecoverableTurn();
@@ -84306,7 +84378,7 @@ ${args.directive}`);
         aiResponseCount += 1;
         const parsed = parseHealVerdict(content);
         if (!parsed) {
-          options.onProgress?.(`Phase 1 attempt ${attempt}: response was not a valid verdict \u2014 granting a recovery turn`);
+          options.onProgress?.(`Phase 1 attempt ${attempt}: response was not a valid verdict (${content.length} chars, finish=${finishReason ?? "unknown"}) \u2014 granting a recovery turn`);
           markRecoverableTurn();
           pendingDirective = "Your last response was not valid JSON matching the verdict schema. Return exactly one JSON verdict object.";
           continue;
@@ -349957,7 +350029,7 @@ var require_dist2 = __commonJS({
     Object.defineProperty(exports, "__esModule", { value: true });
     exports.resolveRefFromSnapshot = exports.replayAuthRecipeIntoBrowser = exports.runRegisterCaptureRun = exports.runLoginCaptureRun = exports.filterLoginCaptureCredentials = exports.buildLoginCaptureCredentials = exports.isReservedRunnerEnvVar = exports.RESERVED_RUNNER_ENV_VARS = exports.AUTH_MARKER_VERSION = exports.buildHealAuthStamp = exports.extractAuthRegion = exports.upsertAuthBlock = exports.buildAuthRecipe = exports.commandToReplayStep = exports.buildReplayPlan = exports.absoluteRoute = exports.renderReplaySettleArrow = exports.renderReplayClickArrow = exports.renderAuthFn = exports.filterFeatureGroupsToPathScope = exports.isAuthFlowRoute = exports.deriveSurveyPathScope = exports.canonicalizeRoute = exports.codeUsesInboxHelper = exports.codeUsesTestInboxIdentity = exports.codeSelfProvisionsRegistration = exports.executeGrokPerBatchHeal = exports.executeGrokPerTestHeal = exports.headerVal = exports.classifyAuthType = exports.isTextExcerptable = exports.isStaticAssetByExt = exports.isApiCall = exports.buildApiCallSummary = exports.computeMobileHealOutcome = exports.detectMobileStepSecretLeak = exports.redactMobileSecretsFromText = exports.MOBILE_LIVE_HEAL_SYSTEM_PROMPT = exports.MOBILE_SCRIPT_HEAL_SYSTEM_PROMPT = exports.executeMobileLiveHeal = exports.executeMobileTestWithHealing = exports.executeMobileScriptDrivenHeal = exports.prepareMobileScenarioAppState = exports.runMobileGeneratePhase = exports.runMobileAIPlanner = exports.buildMobileSiteMap = exports.formatMobileEvidenceForPlanner = exports.MOBILE_SCENARIO_SYSTEM_PROMPT = exports.MOBILE_SURVEY_SYSTEM_PROMPT = exports.runMobileExplorePhase = void 0;
     exports.MAX_MANIFEST_FILES = exports.toDiffSummary = exports.isLikelyTestFile = exports.sanitizeRepoRelPath = exports.sha256Hex = exports.hashFiles = exports.enumerateTestFiles = exports.buildNextManifest = exports.detectRepoSwitch = exports.classifyImportDiff = exports.parseImportManifest = exports.validateAuthoredMobileTest = exports.buildMobileRepoAuthorSystemRules = exports.buildMobileRepoAuthorKickoff = exports.buildMobileRepoAuthorContractMd = exports.REPO_ANALYSIS_SCHEMA_VERSION = exports.validateSourceEndpoints = exports.validateAuthoredTest = exports.validateRepoMapFile = exports.validateRepoMemoryFile = exports.buildTestingStandardsSection = exports.buildRepoAuthorSystemRules = exports.buildRepoAuthorKickoff = exports.buildRepoAuthorContractMd = exports.buildRepoMapSystemRules = exports.buildRepoMapKickoff = exports.buildRepoMapContractMd = exports.buildRepoMemorySystemRules = exports.buildRepoMemoryKickoff = exports.buildRepoMemoryContractMd = exports.runRepoAnalysisOnRunner = exports.MOBILE_IMPORT_SCHEMA_VERSION = exports.validateImportedMobileTest = exports.buildMobileImportSystemRules = exports.buildMobileImportKickoff = exports.buildMobileImportContractMd = exports.IMPORT_SCHEMA_VERSION = exports.validateImportResultFile = exports.validateImportedTest = exports.buildImportSystemRules = exports.buildImportKickoff = exports.buildImportContractMd = exports.MAX_ARCHIVE_BYTES = exports.isUnsafeEntryName = exports.extractZipSafely = exports.downloadArchiveCapped = exports.detectArchiveKind = exports.acquireRepoForImport = exports.runFrameworkImportOnRunner = exports.getAgenticEngine = void 0;
-    exports.UNSUPPORTED_RENDERER_PREFIX = exports.UnsupportedRendererError = exports.buildCanvasModeAuthoringAddendum = exports.buildUnsupportedRendererMessage = exports.modelSupportsVision = exports.decideCanvasStrategy = exports.decideAppRenderType = exports.detectCanvasApp = exports.detectRateLimitBlock = exports.isSafeCanonicalRedirect = exports.resolveBaseUrlPreflight = exports.checkBaseUrlRedirect = exports.stripJsonFences = exports.scrubCredentials = exports.withAIRetry = exports.snapshotMatchingChildren = exports.findNewChromiumChildPid = exports.killProcessTree = exports.gracefulCloseWithTreeKill = exports.liveBrowserRegistry = exports.REPO_SWITCH_REMOVED_FRACTION = void 0;
+    exports.BrokeredInboxReader = exports.applyPlusTag = exports.deriveProjectInboxTag = exports.deriveInboxTag = exports.loadVerificationInboxConfig = exports.VerificationInboxReader = exports.UNSUPPORTED_RENDERER_PREFIX = exports.UnsupportedRendererError = exports.buildCanvasModeAuthoringAddendum = exports.buildUnsupportedRendererMessage = exports.modelSupportsVision = exports.decideCanvasStrategy = exports.decideAppRenderType = exports.detectCanvasApp = exports.detectRateLimitBlock = exports.isSafeCanonicalRedirect = exports.resolveBaseUrlPreflight = exports.checkBaseUrlRedirect = exports.stripJsonFences = exports.scrubCredentials = exports.withAIRetry = exports.snapshotMatchingChildren = exports.findNewChromiumChildPid = exports.killProcessTree = exports.gracefulCloseWithTreeKill = exports.liveBrowserRegistry = exports.REPO_SWITCH_REMOVED_FRACTION = void 0;
     __exportStar(require_ai_provider(), exports);
     __exportStar(require_mobile_types(), exports);
     __exportStar(require_mobile_source_parser(), exports);
@@ -350379,6 +350451,26 @@ var require_dist2 = __commonJS({
     Object.defineProperty(exports, "UNSUPPORTED_RENDERER_PREFIX", { enumerable: true, get: function() {
       return canvas_detector_js_1.UNSUPPORTED_RENDERER_PREFIX;
     } });
+    var verification_inbox_js_1 = require_verification_inbox();
+    Object.defineProperty(exports, "VerificationInboxReader", { enumerable: true, get: function() {
+      return verification_inbox_js_1.VerificationInboxReader;
+    } });
+    Object.defineProperty(exports, "loadVerificationInboxConfig", { enumerable: true, get: function() {
+      return verification_inbox_js_1.loadVerificationInboxConfig;
+    } });
+    Object.defineProperty(exports, "deriveInboxTag", { enumerable: true, get: function() {
+      return verification_inbox_js_1.deriveInboxTag;
+    } });
+    Object.defineProperty(exports, "deriveProjectInboxTag", { enumerable: true, get: function() {
+      return verification_inbox_js_1.deriveProjectInboxTag;
+    } });
+    Object.defineProperty(exports, "applyPlusTag", { enumerable: true, get: function() {
+      return verification_inbox_js_1.applyPlusTag;
+    } });
+    var brokered_inbox_reader_js_1 = require_brokered_inbox_reader();
+    Object.defineProperty(exports, "BrokeredInboxReader", { enumerable: true, get: function() {
+      return brokered_inbox_reader_js_1.BrokeredInboxReader;
+    } });
   }
 });
 
@@ -350387,7 +350479,7 @@ var require_package4 = __commonJS({
   "package.json"(exports, module) {
     module.exports = {
       name: "@validate.qa/runner",
-      version: "1.0.59",
+      version: "1.0.60",
       description: "validate local test runner - execute Playwright tests on your machine, connected to validate.qa cloud.",
       bin: {
         "validate-runner": "dist/cli.js"
@@ -358923,6 +359015,20 @@ ${finalVerifyResult.logs ?? ""}`;
         { ...input, actor: "ai-explorer" },
         run2.claimEpoch
       );
+      if (ctx.inboxBroker?.address) {
+        ctx.inboxBrokerRead = async (op, payload) => {
+          const res = await fetch(`${opts.serverUrl}/api/runner/inbox/read`, {
+            method: "POST",
+            headers: { ...headers, "Content-Type": "application/json" },
+            body: JSON.stringify({ runId: run2.runId, op, payload })
+          });
+          if (!res.ok) {
+            const detail = await res.text().catch(() => "");
+            throw new Error(`inbox broker ${op} failed: HTTP ${res.status}${detail ? ` \u2014 ${detail.slice(0, 200)}` : ""}`);
+          }
+          return (await res.json()).value ?? null;
+        };
+      }
       log.info(`Discovery (${ctx.mode}) on ${ctx.baseUrl}`);
       const { push: pushAudit, drain: drainAudit } = createAuditFlusher(
         `${opts.serverUrl}/api/runner/runs/${run2.runId}/ai-audit-batch`,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@validate.qa/runner",
-  "version": "1.0.59",
+  "version": "1.0.60",
   "description": "validate local test runner - execute Playwright tests on your machine, connected to validate.qa cloud.",
   "bin": {
     "validate-runner": "dist/cli.js"