@validate.qa/runner 1.0.88 → 1.0.89

package/dist/cli.mjs

@@ -1798,7 +1798,11 @@ var init_constants = __esm({
       "home",
       "waitForElement",
       "assertVisible",
-      "assertText"
+      "assertText",
+      /** Capture list labels / badge counts into run-local state bag (Phase 1 oracles). */
+      "captureState",
+      /** Assert a prior captureState delta (removed id, count change, etc.). */
+      "assertStateDelta"
     ];
     BLOCKED_ENV_VARS = /* @__PURE__ */ new Set([
       // Execution / code-injection vectors
@@ -2233,7 +2237,10 @@ function readMobileMetadata(value) {
     webCss: typeof value.webCss === "string" && value.webCss.trim() ? value.webCss.trim() : void 0,
     webviewContext: typeof value.webviewContext === "string" && /^WEBVIEW/i.test(value.webviewContext.trim()) ? value.webviewContext.trim() : void 0,
     matchIndex: hasValidMatchPair ? rawMatchIndex : void 0,
-    expectedMatchCount: hasValidMatchPair ? rawExpectedMatchCount : void 0
+    expectedMatchCount: hasValidMatchPair ? rawExpectedMatchCount : void 0,
+    stateKey: typeof value.stateKey === "string" && value.stateKey.trim() ? value.stateKey.trim() : void 0,
+    stateKind: typeof value.stateKind === "string" && value.stateKind.trim() ? value.stateKind.trim() : void 0,
+    expect: typeof value.expect === "string" && value.expect.trim() ? value.expect.trim() : void 0
   };
 }
 function nonEmpty(value) {
@@ -2316,6 +2323,10 @@ function descriptionForStep(action, stepAction, metadata) {
       return `Assert ${label} is visible`;
     case "assertText":
       return `Assert ${label} shows "${action.value ?? action.innerText ?? ""}"`;
+    case "captureState":
+      return `Capture UI state "${metadata.stateKey ?? label}" (${metadata.stateKind ?? "list_ids"})`;
+    case "assertStateDelta":
+      return `Assert state delta "${metadata.stateKey ?? label}" expect=${metadata.expect ?? action.value ?? "changed"}`;
     default:
       return `Execute ${stepAction}`;
   }
@@ -2361,6 +2372,8 @@ function buildMobileStep(action, order) {
     step.assertion = `${labelForAction(action, metadata)} should be visible`;
   } else if (stepAction === "assertText") {
     step.assertion = action.value ?? action.innerText ?? void 0;
+  } else if (stepAction === "assertStateDelta") {
+    step.assertion = metadata.expect ?? action.value ?? "changed";
   }
   if ((stepAction === "swipe" || stepAction === "scroll") && (metadata.direction || metadata.distance)) {
     const stepMetadata = ensureMetadata(step);
@@ -2369,6 +2382,24 @@ function buildMobileStep(action, order) {
     if (metadata.distance)
       stepMetadata.distance = metadata.distance;
   }
+  if (stepAction === "captureState" || stepAction === "assertStateDelta") {
+    const stepMetadata = ensureMetadata(step);
+    const stateKey = nonEmpty(metadata.stateKey) ?? nonEmpty(action.selector) ?? nonEmpty(metadata.targetLabel) ?? `state-${order}`;
+    stepMetadata.stateKey = stateKey;
+    if (stepAction === "captureState") {
+      stepMetadata.stateKind = nonEmpty(metadata.stateKind) ?? "list_ids";
+    }
+    if (stepAction === "assertStateDelta") {
+      stepMetadata.expect = nonEmpty(metadata.expect) ?? nonEmpty(action.value) ?? "changed";
+    }
+    if (!step.target) {
+      step.target = {
+        primary: stateKey,
+        fallbacks: [],
+        screenName: metadata.screenName || "UnknownScreen"
+      };
+    }
+  }
   return step;
 }
 function buildLaunchStep(target, medium, appResetOnLaunch = false) {
@@ -2580,6 +2611,9 @@ function buildAppiumCode(testName, target, steps) {
           used.find = true;
         }
         break;
+      case "captureState":
+      case "assertStateDelta":
+        break;
       default:
         break;
     }
@@ -2698,6 +2732,8 @@ function buildAppiumCode(testName, target, steps) {
       const expectedLiteral = toJsStringLiteral(step.assertion ?? "");
       const replayExpected = step.assertion?.includes("{{") ? `resolveValue(${expectedLiteral})` : expectedLiteral;
       pushAction(`await expectText(driver, ${sel}, ${replayExpected});`);
+    } else if (step.action === "captureState" || step.action === "assertStateDelta") {
+      lines.push(`    // ${step.action}: ${step.description.replace(/\n/g, " ").slice(0, 120)}`);
     } else if (step.action === "back") {
       lines.push(`    await driver.back();`);
     } else if (step.action === "home") {
@@ -3040,7 +3076,9 @@ var init_mobile_test_generation = __esm({
       HOME: "home",
       WAIT_FOR_ELEMENT: "waitForElement",
       ASSERT_VISIBLE: "assertVisible",
-      ASSERT_TEXT: "assertText"
+      ASSERT_TEXT: "assertText",
+      CAPTURE_STATE: "captureState",
+      ASSERT_STATE_DELTA: "assertStateDelta"
     };
     MOBILE_VALUE_PLACEHOLDER_RE = /\{\{([A-Za-z0-9_]+)\}\}/g;
   }
@@ -3271,7 +3309,9 @@ var init_mobile_step_healer = __esm({
       "home",
       "waitForElement",
       "assertVisible",
-      "assertText"
+      "assertText",
+      "captureState",
+      "assertStateDelta"
     ]);
     FOREIGN_PACKAGE_RE = /\b[a-z][a-z0-9_]*(?:\.[a-z][a-z0-9_]*){2,}\b/gi;
     ANDROID_RESOURCE_OWNER_RE = /([a-z][a-z0-9_]*(?:\.[a-z][a-z0-9_]*)+):id\//gi;
@@ -80310,6 +80350,306 @@ ${JSON.stringify(gatePlan)}`;
   }
 });
 
+// ../runner-core/dist/services/mobile/scenario-taxonomy.js
+var require_scenario_taxonomy = __commonJS({
+  "../runner-core/dist/services/mobile/scenario-taxonomy.js"(exports) {
+    "use strict";
+    Object.defineProperty(exports, "__esModule", { value: true });
+    exports.ALL_SCENARIO_KINDS = void 0;
+    exports.extractUiSignals = extractUiSignals;
+    exports.requiredScenarioKinds = requiredScenarioKinds;
+    exports.coverageGaps = coverageGaps;
+    exports.inferScenarioKind = inferScenarioKind;
+    exports.inferScenarioKinds = inferScenarioKinds;
+    exports.isStrongOracleKind = isStrongOracleKind;
+    exports.formatRequiredScenarioKindsPrompt = formatRequiredScenarioKindsPrompt;
+    exports.formatCoverageGapLog = formatCoverageGapLog;
+    exports.ALL_SCENARIO_KINDS = [
+      "smoke_nav",
+      "happy_submit",
+      "negative_validation",
+      "crud_identity",
+      "count_delta",
+      "persistence_roundtrip",
+      "auth_session",
+      "navigation_integrity",
+      "permission_system",
+      "double_submit"
+    ];
+    var DELETE_RE = /\b(delete|remove|archive|trash)\b/i;
+    var EMAIL_RE = /\b(e-?mail|email address)\b/i;
+    var PASSWORD_RE = /\b(password|passcode|pin)\b/i;
+    var SIGN_OUT_RE = /\b(sign\s*out|log\s*out|logout)\b/i;
+    var TOGGLE_RE = /\b(toggle|switch|enable|disable|on\/off)\b/i;
+    var SUBMIT_RE = /\b(submit|save|send|create|confirm|apply|done|update|post)\b/i;
+    var BADGE_OR_COUNT_RE = /\b(\d+)\s*(item|items|open|unread|invoice|message|result|pending|new)\b/i;
+    var BADGE_LABEL_RE = /\b(badge|count|open invoices|unread|notifications?)\b/i;
+    var PERMISSION_RE = /\b(camera|microphone|location|photos?|permission|allow access|not now)\b/i;
+    var SETTINGS_RE = /\b(settings|preferences|profile|account)\b/i;
+    var TAB_RE = /\b(tab|home|catalog|forms|edges|inbox|feed|dashboard)\b/i;
+    function elementText(el) {
+      return [
+        el.label ?? "",
+        el.text ?? "",
+        el.accessibilityId ?? "",
+        el.resourceId ?? "",
+        el.role ?? ""
+      ].join(" ");
+    }
+    function isEditable(el) {
+      const role = el.role ?? "";
+      return /EditText|TextField|SecureTextField|SearchField|AutoComplete|textbox|searchbox/i.test(role) || el.role === "textbox" || el.role === "searchbox";
+    }
+    function isToggle(el) {
+      const role = el.role ?? "";
+      return /Switch|CheckBox|Toggle|RadioButton/i.test(role) || TOGGLE_RE.test(elementText(el));
+    }
+    function isRowAction(el) {
+      const t = elementText(el);
+      return DELETE_RE.test(t) && el.actionable !== false;
+    }
+    function extractUiSignals(graph, appId) {
+      const screens = [...graph.screens.values()].filter((s) => {
+        if (!appId)
+          return true;
+        return s.screenId === appId || s.screenId.startsWith(`${appId}#`) || s.screenId.startsWith(`${appId}.`);
+      });
+      let hasListWithRowActions = false;
+      let hasFormFields = false;
+      let hasEmailField = false;
+      let hasNumericBadge = false;
+      let hasSettingsToggles = false;
+      let hasSignOut = false;
+      let hasDestructiveConfirm = false;
+      let hasPrimarySubmit = false;
+      let hasTabOrDrawerNav = false;
+      let hasPermissionCopy = false;
+      for (const state2 of screens) {
+        const labels = state2.elements.map(elementText);
+        const blob = [state2.screenName ?? "", state2.screenType ?? "", ...state2.observations ?? [], ...labels].join(" ");
+        if (PASSWORD_RE.test(blob) || state2.elements.some(isEditable))
+          hasFormFields = true;
+        if (labels.some((t) => EMAIL_RE.test(t)) || state2.elements.some((el) => isEditable(el) && EMAIL_RE.test(elementText(el)))) {
+          hasEmailField = true;
+          hasFormFields = true;
+        }
+        if (state2.elements.some(isRowAction))
+          hasListWithRowActions = true;
+        if (!hasListWithRowActions && state2.elements.filter((el) => el.actionable).length >= 6 && DELETE_RE.test(blob)) {
+          hasListWithRowActions = true;
+        }
+        if (BADGE_OR_COUNT_RE.test(blob) || BADGE_LABEL_RE.test(blob))
+          hasNumericBadge = true;
+        if (state2.elements.some(isToggle) || SETTINGS_RE.test(blob) && TOGGLE_RE.test(blob)) {
+          hasSettingsToggles = true;
+        }
+        if (SIGN_OUT_RE.test(blob))
+          hasSignOut = true;
+        if (DELETE_RE.test(blob) && /\b(confirm|are you sure|permanently)\b/i.test(blob)) {
+          hasDestructiveConfirm = true;
+        }
+        if (labels.some((t) => SUBMIT_RE.test(t)))
+          hasPrimarySubmit = true;
+        if (TAB_RE.test(blob) || state2.screenType === "TAB" || /\btab\b/i.test(state2.screenName ?? "")) {
+          hasTabOrDrawerNav = true;
+        }
+        if (PERMISSION_RE.test(blob) || state2.screenType === "PERMISSION")
+          hasPermissionCopy = true;
+      }
+      return {
+        hasListWithRowActions,
+        hasFormFields,
+        hasEmailField,
+        hasNumericBadge,
+        hasSettingsToggles,
+        hasSignOut,
+        hasDestructiveConfirm,
+        hasPrimarySubmit,
+        hasTabOrDrawerNav,
+        hasPermissionCopy
+      };
+    }
+    function requiredScenarioKinds(signals) {
+      const kinds = /* @__PURE__ */ new Set(["smoke_nav"]);
+      if (signals.hasFormFields || signals.hasPrimarySubmit) {
+        kinds.add("happy_submit");
+      }
+      if (signals.hasFormFields || signals.hasEmailField) {
+        kinds.add("negative_validation");
+      }
+      if (signals.hasListWithRowActions) {
+        kinds.add("crud_identity");
+      }
+      if (signals.hasNumericBadge) {
+        kinds.add("count_delta");
+      }
+      if (signals.hasSettingsToggles) {
+        kinds.add("persistence_roundtrip");
+      }
+      if (signals.hasSignOut) {
+        kinds.add("auth_session");
+      }
+      if (signals.hasTabOrDrawerNav) {
+        kinds.add("navigation_integrity");
+      }
+      if (signals.hasPermissionCopy) {
+        kinds.add("permission_system");
+      }
+      if (signals.hasPrimarySubmit && signals.hasFormFields) {
+        kinds.add("double_submit");
+      }
+      return exports.ALL_SCENARIO_KINDS.filter((k) => kinds.has(k));
+    }
+    function coverageGaps(signals, plannedKinds) {
+      const planned = new Set(plannedKinds);
+      return requiredScenarioKinds(signals).filter((k) => !planned.has(k));
+    }
+    function inferScenarioKind(scenario) {
+      const text = `${scenario.name} ${scenario.goal} ${scenario.variant ?? ""} ${scenario.type}`.toLowerCase();
+      if (/\b(invalid|empty|required|validation|too short|malformed|reject|error message)\b/.test(text) || scenario.variant === "validation" || scenario.type === "EDGE_CASE" && /\b(empty|invalid|required)\b/.test(text)) {
+        return "negative_validation";
+      }
+      if (/\b(delete|remove|wrong row|entity|archive)\b/.test(text) && /\b(list|row|item|record)\b/.test(text)) {
+        return "crud_identity";
+      }
+      if (/\b(badge|count|unread|open invoices|\+\d|increment|decrement)\b/.test(text)) {
+        return "count_delta";
+      }
+      if (/\b(persist|revisit|return|leave|settings|toggle|favorite|remember)\b/.test(text)) {
+        return "persistence_roundtrip";
+      }
+      if (/\b(sign\s*out|log\s*out|session|sign\s*in|remember me|auth)\b/.test(text) || scenario.type === "HAPPY_PATH" && /\b(login|sign in)\b/.test(text)) {
+        return "auth_session";
+      }
+      if (/\b(tab|navigate|navigation|back|deep link|empty.?state)\b/.test(text)) {
+        return "navigation_integrity";
+      }
+      if (/\b(permission|camera|microphone|location|allow)\b/.test(text)) {
+        return "permission_system";
+      }
+      if (/\b(double|twice|duplicate submit|double.?tap)\b/.test(text)) {
+        return "double_submit";
+      }
+      if (scenario.type === "HAPPY_PATH" || scenario.variant === "happy") {
+        return "happy_submit";
+      }
+      if (scenario.type === "USER_JOURNEY" || scenario.type === "REGRESSION") {
+        return "navigation_integrity";
+      }
+      return "smoke_nav";
+    }
+    function inferScenarioKinds(scenarios) {
+      return [...new Set(scenarios.map(inferScenarioKind))];
+    }
+    function isStrongOracleKind(kind) {
+      return kind !== "smoke_nav" && kind !== "navigation_integrity";
+    }
+    function formatRequiredScenarioKindsPrompt(signals) {
+      const required = requiredScenarioKinds(signals);
+      if (required.length === 0)
+        return "";
+      const lines = required.map((kind) => {
+        switch (kind) {
+          case "smoke_nav":
+            return '- smoke_nav: reach a primary destination and prove it with a durable product signal (not only "tab visible")';
+          case "happy_submit":
+            return "- happy_submit: complete a form/primary action and assert the durable result (new row, saved state, success that outlives a toast)";
+          case "negative_validation":
+            return "- negative_validation: submit empty/invalid input (e.g. empty required, malformed email-like field) and assert error OR blocked submit \u2014 never invent success copy";
+          case "crud_identity":
+            return '- crud_identity: create or note an entity id/label, perform delete/edit on THAT entity, assert identity set changed correctly (not "list still visible")';
+          case "count_delta":
+            return "- count_delta: capture a numeric badge/count, perform an action, assert the number changed as expected";
+          case "persistence_roundtrip":
+            return "- persistence_roundtrip: change a setting/toggle, leave the screen (or relaunch if policy allows), return, assert value persisted";
+          case "auth_session":
+            return "- auth_session: prove sign-in session (profile/sign-out) and/or sign-out leaves only logged-out chrome";
+          case "navigation_integrity":
+            return "- navigation_integrity: tab/drawer/back reaches the intended screen family";
+          case "permission_system":
+            return "- permission_system: permission prompt or settings path behaves honestly (allow/deny/settings)";
+          case "double_submit":
+            return "- double_submit: single user intent must not double-create (assert count +1 not +2, or single confirmation)";
+          default:
+            return `- ${kind}`;
+        }
+      });
+      return "## Required scenario kinds (from observed UI \u2014 fill each or explain impossibility in reasoning)\nThese kinds are derived ONLY from controls/screens the explorer saw. Plan at least one scenario per kind when evidence supports it.\n" + lines.join("\n");
+    }
+    function formatCoverageGapLog(gaps) {
+      if (gaps.length === 0)
+        return "Scenario taxonomy: all required kinds covered by plan";
+      return `Scenario taxonomy coverage gaps (required but not planned): ${gaps.join(", ")}`;
+    }
+  }
+});
+
+// ../runner-core/dist/services/mobile/coverage-map.js
+var require_coverage_map = __commonJS({
+  "../runner-core/dist/services/mobile/coverage-map.js"(exports) {
+    "use strict";
+    Object.defineProperty(exports, "__esModule", { value: true });
+    exports.buildMobileCoverageMap = buildMobileCoverageMap;
+    var scenario_taxonomy_js_1 = require_scenario_taxonomy();
+    function strongLookup(name, map2) {
+      if (!map2)
+        return false;
+      if (map2 instanceof Map)
+        return map2.get(name) === true;
+      return Object.prototype.hasOwnProperty.call(map2, name) && map2[name] === true;
+    }
+    function buildMobileCoverageMap(input) {
+      const signals = (0, scenario_taxonomy_js_1.extractUiSignals)(input.graph, input.appId);
+      const required = (0, scenario_taxonomy_js_1.requiredScenarioKinds)(signals);
+      const planned = input.plannedScenarios ?? [];
+      const plannedKinds = planned.map(scenario_taxonomy_js_1.inferScenarioKind);
+      const plannedSet = new Set(plannedKinds);
+      const gaps = (0, scenario_taxonomy_js_1.coverageGaps)(signals, plannedKinds);
+      const kindsWithStrong = /* @__PURE__ */ new Set();
+      for (const s of planned) {
+        const kind = (0, scenario_taxonomy_js_1.inferScenarioKind)(s);
+        const isStrong = (0, scenario_taxonomy_js_1.isStrongOracleKind)(kind) || strongLookup(s.name, input.strongByScenarioName);
+        if (isStrong)
+          kindsWithStrong.add(kind);
+      }
+      const warnings = [];
+      const entries = required.map((kind) => {
+        const isPlanned = plannedSet.has(kind);
+        const strongPlanned = kindsWithStrong.has(kind);
+        let warning;
+        if (!isPlanned) {
+          warning = `Required kind "${kind}" has no planned scenario`;
+          warnings.push(warning);
+        } else if (!strongPlanned && (0, scenario_taxonomy_js_1.isStrongOracleKind)(kind)) {
+          warning = `Kind "${kind}" is planned but has no strong-oracle scenario (smoke-only coverage)`;
+          warnings.push(warning);
+        }
+        return {
+          kind,
+          required: true,
+          planned: isPlanned,
+          strongPlanned,
+          warning
+        };
+      });
+      if (planned.length > 0 && plannedKinds.every((k) => k === "smoke_nav" || k === "navigation_integrity")) {
+        const w = "All planned scenarios are smoke/nav \u2014 no strong product oracles";
+        if (!warnings.includes(w))
+          warnings.push(w);
+      }
+      const summary = warnings.length === 0 ? `Coverage map: ${required.length} required kinds, all covered with strong scenarios where needed` : `Coverage map: ${warnings.length} warning(s); ${(0, scenario_taxonomy_js_1.formatCoverageGapLog)(gaps)}`;
+      return {
+        signals,
+        requiredKinds: required,
+        gaps,
+        entries,
+        warnings,
+        summary
+      };
+    }
+  }
+});
+
 // ../runner-core/dist/services/mobile/mobile-discovery-prompts.js
 var require_mobile_discovery_prompts = __commonJS({
   "../runner-core/dist/services/mobile/mobile-discovery-prompts.js"(exports) {
@@ -80327,6 +80667,8 @@ var require_mobile_discovery_prompts = __commonJS({
     var ai_provider_js_1 = require_ai_provider();
     var discover_ai_planner_js_1 = require_discover_ai_planner();
     var mobile_observation_js_1 = require_mobile_observation();
+    var scenario_taxonomy_js_1 = require_scenario_taxonomy();
+    var coverage_map_js_1 = require_coverage_map();
     function isTargetAppScreenId(screenId, appId) {
       if (!appId)
         return true;
@@ -80408,7 +80750,7 @@ Return ONLY one valid JSON object matching the schema below. Do NOT include <thi
 9. **No duplicates** - check existing test names before adding
 10. **All tests start from the app launch entry** - every generated test starts by launching the target app. The runner clears app data when the device/reset policy safely supports it; otherwise it performs a terminate + activate relaunch, which can preserve app session data. Therefore scenarios MUST navigate through the app's own UI from whatever launch state is valid, and MUST NOT rely on mutable data from a prior scenario disappearing. Steps must reflect this: say "Launch the app and tap Sign In" not "deep-link to the login screen". Do NOT navigate by deep-link; the app's launch + tab/drawer navigation is the only entry path. \`targetPages\` lists the screen-ids involved in the flow.
 11. **targetPages must be copied CHARACTER-FOR-CHARACTER from the screen-ids in the evidence** (they look like \`com.example.app.MainActivity#ab12cd34\`). NEVER invent, prettify, or abbreviate them \u2014 no "Landing", "AUTH", "Home Screen", or any name that is not literally in the provided screens. A scenario whose targetPages contains even ONE id not present in the evidence is REJECTED WHOLESALE by the validator, so a single made-up route silently destroys the entire scenario. If you are unsure which screen-id a step touches, use the screen-id of the screen where the flow STARTS.
-12. **Happy paths must verify the DURABLE OUTCOME, not just the trigger.** A HAPPY_PATH is NOT complete until it verifies the feature's real output. "Button tapped" / "Sheet opened" / "Spinner appeared" / "Settings screen opened" is NOT a happy path - that is a UI interaction test. Form-mutation happy paths (change password, create/edit/save a record, send a message, checkout, etc.) MUST include typing into the relevant fields AND committing the form (submit/save/send or keyboard Enter/Done) \u2014 navigating to the form screen alone is insufficient. Apply this to any feature where an action produces a result the user then sees or uses: CRUD creates, photo/file uploads, searches that return results, imports, exports, payments, messages sent, AI/ML outputs, generated documents, sync runs, analysis runs, conversion, data processing. The scenario MUST include:
+12. **Happy paths must verify the DURABLE OUTCOME, not just the trigger.** A HAPPY_PATH is NOT complete until it verifies the feature's real output. "Button tapped" / "Sheet opened" / "Spinner appeared" / "Settings screen opened" is NOT a happy path - that is a UI interaction test. When the explorer observed list rows with delete/remove, plan at least one scenario that captures entity identity before the action and asserts that identity is gone or changed afterward (not merely that the list screen is still visible). When numeric badges/counts were observed, plan a before/after count check. Form-mutation happy paths (change password, create/edit/save a record, send a message, checkout, etc.) MUST include typing into the relevant fields AND committing the form (submit/save/send or keyboard Enter/Done) \u2014 navigating to the form screen alone is insufficient. Apply this to any feature where an action produces a result the user then sees or uses: CRUD creates, photo/file uploads, searches that return results, imports, exports, payments, messages sent, AI/ML outputs, generated documents, sync runs, analysis runs, conversion, data processing. The scenario MUST include:
     - The trigger step (Tap Submit / Generate / Send / Upload / Run / Analyze / Save / Pay / etc.)
     - A wait step for the operation to complete. Phrase it by SIGNAL, not wall-clock ("Wait for the result to appear - up to 60 seconds"). Prefer signals the app actually uses: spinner disappears, status badge flips to a success state, a new row appears, an item count increments, a success toast/snackbar shows, the screen transitions to a result screen.
     - A verification step on the DURABLE RESULT - the thing that outlives the transient UI: a new list row, a persisted record, a received message, a committed state change, visible output text. Do NOT assert on the spinner disappearing alone; assert on what replaced it.
@@ -80808,6 +81150,14 @@ SCOPE: this is a feature-focused deep run. Plan scenarios ONLY for the "${contex
         sections.push(`## Operator notes
 ${context.userNotes.trim()}`);
       }
+      if (context.mode === "deep" || context.mode === "full") {
+        const signals = (0, scenario_taxonomy_js_1.extractUiSignals)(graph, context.appId);
+        const requiredBlock = (0, scenario_taxonomy_js_1.formatRequiredScenarioKindsPrompt)(signals);
+        if (requiredBlock) {
+          sections.push(requiredBlock);
+          sections.push('## Scenario kind coverage rules\n1. Prefer scenarios whose expectedOutcomes prove durable product results (state deltas, validation errors, persistence), not only "control X is visible".\n2. For negative_validation: empty required field and/or malformed email-like input when an email field was observed.\n3. For crud_identity: assert the specific entity identity is gone/changed \u2014 never only that the list screen is still visible.\n4. For count_delta: mention the before/after numeric expectation in expectedOutcomes.\n5. If a required kind is impossible given evidence, say so in "reasoning" \u2014 do not invent unobserved screens.');
+        }
+      }
       const orderedScreens = plannableTargetAppScreens(graph, context.appId).sort((a, b) => a.firstSeenIteration - b.firstSeenIteration || a.screenId.localeCompare(b.screenId));
       const includedScreenIds = new Set(orderedScreens.map((state2) => state2.screenId));
       const maxElementsPerScreen = context.mode === "survey" ? SURVEY_MAX_ELEMENTS_PER_SCREEN : MAX_ELEMENTS_PER_SCREEN;
@@ -81531,6 +81881,43 @@ ${constraints.join("\n")}`);
         mobileAdaptationLogs.push(`Dropped ${guestWallFilter.dropped} guest-wall scenario(s) \u2014 explore session was authenticated; re-exec would not see sign-in gates`);
       }
       const plannedScenarios = guestWallFilter.scenarios;
+      let taxonomyGapLogs = [];
+      let taxonomyCoverageGaps = result.coverageGaps ?? [];
+      if (input.mode !== "survey" && plannedScenarios.length > 0) {
+        const signals = (0, scenario_taxonomy_js_1.extractUiSignals)(input.graph, input.appId);
+        const plannedKinds = (0, scenario_taxonomy_js_1.inferScenarioKinds)(plannedScenarios);
+        const gaps = (0, scenario_taxonomy_js_1.coverageGaps)(signals, plannedKinds);
+        const coverageMap = (0, coverage_map_js_1.buildMobileCoverageMap)({
+          graph: input.graph,
+          appId: input.appId,
+          plannedScenarios
+        });
+        taxonomyGapLogs = [(0, scenario_taxonomy_js_1.formatCoverageGapLog)(gaps), coverageMap.summary];
+        if (coverageMap.warnings.length > 0) {
+          taxonomyGapLogs.push(...coverageMap.warnings.slice(0, 12));
+        }
+        if (gaps.length > 0) {
+          taxonomyGapLogs.push(`UI signals: listRowActions=${signals.hasListWithRowActions} forms=${signals.hasFormFields} email=${signals.hasEmailField} badge=${signals.hasNumericBadge} toggles=${signals.hasSettingsToggles} signOut=${signals.hasSignOut} tabs=${signals.hasTabOrDrawerNav}`);
+          const detectedAt = (/* @__PURE__ */ new Date()).toISOString();
+          taxonomyCoverageGaps = [
+            ...taxonomyCoverageGaps,
+            ...gaps.map((kind) => ({
+              scenarioName: `[taxonomy] ${kind}`,
+              reason: `Required scenario kind "${kind}" not represented in the planned set`,
+              suggestion: `Add a ${kind} scenario backed by observed controls, or document impossibility`,
+              unmetPrerequisites: [],
+              detectedAt
+            })),
+            ...coverageMap.warnings.filter((w) => /smoke-only|no strong-oracle/i.test(w)).map((w) => ({
+              scenarioName: "[coverage-map] strong-oracle gap",
+              reason: w,
+              suggestion: "Author durable assertStateDelta/assertText outcomes for this kind",
+              unmetPrerequisites: [],
+              detectedAt
+            }))
+          ];
+        }
+      }
       if (input.mode !== "survey" && plannedScenarios.length === 0 && input.graph.screens.size > 0) {
         const fallbackScenarios = buildMobileFallbackScenarios(input);
         if (fallbackScenarios.length > 0) {
@@ -81589,7 +81976,8 @@ ${constraints.join("\n")}`);
         ...result,
         scenarios: plannedScenarios,
         featureGroups: mobileFeatureGroups,
-        logs: [...result.logs, ...mobileAdaptationLogs]
+        coverageGaps: taxonomyCoverageGaps.length > 0 ? taxonomyCoverageGaps : result.coverageGaps,
+        logs: [...result.logs, ...mobileAdaptationLogs, ...taxonomyGapLogs]
       };
     }
   }
@@ -81668,6 +82056,7 @@ var require_mobile_generator = __commonJS({
     var ai_retry_js_1 = require_ai_retry();
     var mobile_session_keepalive_js_1 = require_mobile_session_keepalive();
     var discovery_lint_flags_js_1 = require_discovery_lint_flags();
+    var scenario_taxonomy_js_1 = require_scenario_taxonomy();
     var mobile_source_parser_js_1 = require_mobile_source_parser();
     var mobile_source_parser_js_2 = require_mobile_source_parser();
     var mobile_observation_js_1 = require_mobile_observation();
@@ -81809,6 +82198,50 @@ var require_mobile_generator = __commonJS({
         }
       }
     };
+    var MOBILE_CAPTURE_STATE_TOOL = {
+      type: "function",
+      function: {
+        name: "mobile_capture_state",
+        description: 'Capture list labels or numeric badge counts into a named state key BEFORE a mutating action (delete/create/toggle). Pair with mobile_assert_state_delta afterward to prove durable identity/count outcomes \u2014 stronger than "list still visible".',
+        parameters: {
+          type: "object",
+          properties: {
+            stateKey: {
+              type: "string",
+              description: 'Short key for this bag entry (e.g. "invoice_list", "open_count"). Reuse the same key in mobile_assert_state_delta.'
+            },
+            kind: {
+              type: "string",
+              enum: ["list_ids", "badge_count"],
+              description: "list_ids = unique visible labels; badge_count = numeric count tokens. Default list_ids."
+            }
+          },
+          required: ["stateKey"]
+        }
+      }
+    };
+    var MOBILE_ASSERT_STATE_DELTA_TOOL = {
+      type: "function",
+      function: {
+        name: "mobile_assert_state_delta",
+        description: "Compare the current screen to a prior mobile_capture_state. Verifies LIVE then records assertStateDelta. Use after delete/create/count-changing actions. expect: changed | entity_removed | count_decreased | count_increased | unchanged | persisted.",
+        parameters: {
+          type: "object",
+          properties: {
+            stateKey: {
+              type: "string",
+              description: "Must match a prior mobile_capture_state stateKey in this scenario."
+            },
+            expect: {
+              type: "string",
+              enum: ["changed", "entity_removed", "count_decreased", "count_increased", "unchanged", "persisted"],
+              description: "What must differ (or persist) vs the prior capture. Default: changed."
+            }
+          },
+          required: ["stateKey"]
+        }
+      }
+    };
     var MOBILE_FILL_CREDENTIAL_TOOL = {
       type: "function",
       function: {
@@ -81831,7 +82264,7 @@ var require_mobile_generator = __commonJS({
       type: "function",
       function: {
         name: "finish_generate",
-        description: "Call when the scenario is fully exercised and its outcome is asserted. verified:true requires you to have called at least one assert tool (mobile_assert_visible / mobile_assert_text) \u2014 claiming verified without any assert is auto-downgraded.",
+        description: "Call when the scenario is fully exercised and its outcome is asserted. verified:true requires you to have called at least one assert tool (mobile_assert_visible / mobile_assert_text / mobile_assert_state_delta) \u2014 claiming verified without any assert is auto-downgraded.",
         parameters: {
           type: "object",
           properties: {
@@ -81863,6 +82296,8 @@ var require_mobile_generator = __commonJS({
       MOBILE_RELAUNCH_TOOL,
       MOBILE_ASSERT_VISIBLE_TOOL,
       MOBILE_ASSERT_TEXT_TOOL,
+      MOBILE_CAPTURE_STATE_TOOL,
+      MOBILE_ASSERT_STATE_DELTA_TOOL,
       FINISH_GENERATE_TOOL
     ];
     var STRUCTURAL_KEY_MAX_ELEMENTS = 16;
@@ -82129,6 +82564,7 @@ The scenario name + goal + steps describe ONE product behavior from survey/disco
    - Navigation scenarios: you MUST land on the destination and assert something unique to it.
 4. PROVE the outcome with an assert tool that matches the scenario \u2014 not ambient chrome:
    - mobile_assert_visible({ref}) / mobile_assert_text({ref, expected})
+   - For list delete/create or count changes: mobile_capture_state({stateKey, kind}) BEFORE the mutation, then mobile_assert_state_delta({stateKey, expect}) AFTER \u2014 proves identity/count change, not only "list screen still visible".
    - After sign-in \u2192 signed-in product signal; after like \u2192 liked/unlike control or durable like state; after open Settings \u2192 a settings-specific control.
    - Do NOT assert bottom-nav tab labels alone, notification badge counts ("N unread"), or one-time empty-state CTAs as the scenario outcome.
 5. Call finish_generate with verified:true ONLY if you completed the goal AND asserted a matching durable outcome. If the app cannot complete the goal, finish with verified:false and explain \u2014 never invent a green path from unrelated screens.
@@ -82242,6 +82678,7 @@ Start by calling mobile_snapshot, then execute ONLY the steps needed for this go
       const { scenario, driver, platform: platform3, maxIterations, agentModel, provider, aiClient, auditGroupId, onAICall, onScreenshot, targetAppId, credentials, redactionCredentials, log: emitLog, allowRelaunch } = args;
       const log2 = (line) => emitLog(redactCredentialValues(line, redactionCredentials));
       const actions = [];
+      const stateBag = /* @__PURE__ */ new Map();
       let assertCount = 0;
       let finish = null;
       let finishIntentRejections = 0;
@@ -82711,7 +83148,9 @@ ${statePacket}`, redactionCredentials) },
         const screenDependentTools = /* @__PURE__ */ new Set([
           ...screenMutatingTools,
           "mobile_assert_visible",
-          "mobile_assert_text"
+          "mobile_assert_text",
+          "mobile_capture_state",
+          "mobile_assert_state_delta"
         ]);
         for (const toolCall of assistantMessage.tool_calls) {
           const toolName = toolCall.function.name;
@@ -82755,7 +83194,7 @@ ${statePacket}`, redactionCredentials) },
               if (intentReason)
                 reasons.push(intentReason);
               if (verifiedWithoutAssert) {
-                reasons.push("claimed verified:true but never called mobile_assert_visible / mobile_assert_text");
+                reasons.push("claimed verified:true but never called mobile_assert_visible / mobile_assert_text / mobile_assert_state_delta");
               }
               if (strengthRejectReason !== null) {
                 reasons.push(`assertion strength: ${strengthRejectReason} \u2014 your only live proof re-checks a control you already used. Assert the scenario OUTCOME instead: an element on the resulting screen, the created/updated row, or the success/error message.`);
@@ -82826,10 +83265,12 @@ ${statePacket}`, redactionCredentials) },
                   }
                 } : action;
                 actions.push((0, shared_1.placeholderizeRecordedMobileAction)(finalizeAction(stamped), credentials));
-                if (action.type === "ASSERT_VISIBLE" || action.type === "ASSERT_TEXT")
+                if (action.type === "ASSERT_VISIBLE" || action.type === "ASSERT_TEXT" || action.type === "ASSERT_STATE_DELTA") {
                   assertCount++;
+                }
               },
               recordedActions: actions,
+              stateBag,
               log: log2
             });
             if (screenMutatingTools.has(toolName))
@@ -82848,7 +83289,7 @@ ${statePacket}`, redactionCredentials) },
       return { actions, assertCount, finish, lastSnapshot: lastTargetSnapshot, lastScreenName: lastTargetScreenName };
     }
     async function dispatchGenerateTool(args) {
-      const { toolName, toolArgs, driver, platform: platform3, targetAppId, latest, absorbObservation, resolveRef, resolveHybridRef, maybeEnrichHybridWeb, setLatest, credentials, screenName, allowRelaunch, recordAction, recordedActions, log: log2 } = args;
+      const { toolName, toolArgs, driver, platform: platform3, targetAppId, latest, absorbObservation, resolveRef, resolveHybridRef, maybeEnrichHybridWeb, setLatest, credentials, screenName, allowRelaunch, recordAction, recordedActions, stateBag, log: log2 } = args;
       const unknownRef = (ref) => ({
         ok: false,
         error: `Unknown element ref "${String(ref)}". Call mobile_snapshot first; refs are only valid for the latest snapshot.`
@@ -83393,10 +83834,170 @@ ${statePacket}`, redactionCredentials) },
             target: metadata.targetLabel
           };
         }
+        case "mobile_capture_state": {
+          const stateKey = nonEmpty3(typeof toolArgs.stateKey === "string" ? toolArgs.stateKey : "");
+          if (!stateKey) {
+            return { ok: false, error: "mobile_capture_state requires a non-empty stateKey." };
+          }
+          const kindRaw = typeof toolArgs.kind === "string" ? toolArgs.kind.trim() : "list_ids";
+          const kind = kindRaw === "badge_count" ? "badge_count" : "list_ids";
+          const snap = latest();
+          if (!snap) {
+            return { ok: false, error: "No snapshot yet \u2014 call mobile_snapshot before mobile_capture_state." };
+          }
+          const values = captureValuesFromElements(snap.screen.elements, kind);
+          stateBag.set(stateKey, { kind, values });
+          recordAction({
+            type: "CAPTURE_STATE",
+            selector: stateKey,
+            metadata: {
+              screenName: screenName(),
+              targetLabel: stateKey,
+              stateKey,
+              stateKind: kind
+            }
+          });
+          log2(`  capture_state: key=${stateKey} kind=${kind} n=${values.length}`);
+          return {
+            ok: true,
+            captured: true,
+            stateKey,
+            kind,
+            sample: values.slice(0, 8),
+            count: values.length
+          };
+        }
+        case "mobile_assert_state_delta": {
+          const stateKey = nonEmpty3(typeof toolArgs.stateKey === "string" ? toolArgs.stateKey : "");
+          if (!stateKey) {
+            return { ok: false, error: "mobile_assert_state_delta requires a non-empty stateKey." };
+          }
+          const prior = stateBag.get(stateKey);
+          if (!prior) {
+            return {
+              ok: false,
+              error: `No prior mobile_capture_state for key "${stateKey}". Capture before the mutating action, then assert.`
+            };
+          }
+          const expectRaw = typeof toolArgs.expect === "string" ? toolArgs.expect.trim() : "changed";
+          const expect = expectRaw || "changed";
+          const snap = latest();
+          if (!snap) {
+            return { ok: false, error: "No snapshot yet \u2014 call mobile_snapshot after the action, then assert_state_delta." };
+          }
+          const current = captureValuesFromElements(snap.screen.elements, prior.kind);
+          const liveError = liveAssertStateDelta(prior.values, current, expect, stateKey);
+          if (liveError) {
+            return {
+              ok: false,
+              error: liveError,
+              beforeSample: prior.values.slice(0, 8),
+              afterSample: current.slice(0, 8)
+            };
+          }
+          recordAction({
+            type: "ASSERT_STATE_DELTA",
+            value: expect,
+            selector: stateKey,
+            metadata: {
+              screenName: screenName(),
+              targetLabel: stateKey,
+              stateKey,
+              stateKind: prior.kind,
+              expect
+            }
+          });
+          log2(`  assert_state_delta: key=${stateKey} expect=${expect}`);
+          return {
+            ok: true,
+            asserted: "state_delta",
+            stateKey,
+            expect,
+            beforeCount: prior.values.length,
+            afterCount: current.length
+          };
+        }
         default:
           return { ok: false, error: `Unknown tool: ${toolName}` };
       }
     }
+    function captureValuesFromElements(elements, kind) {
+      if (kind === "badge_count") {
+        const nums = /* @__PURE__ */ new Set();
+        const preferred = /* @__PURE__ */ new Set();
+        for (const el of elements) {
+          const t = [el.label, el.text, el.accessibilityId].filter(Boolean).join(" ");
+          for (const m of t.matchAll(/\b(\d{1,6})\b/g))
+            nums.add(m[1]);
+          if (/(?:count|badge|open|unread|item|invoice|result|pending)/i.test(t)) {
+            for (const m of t.matchAll(/\b(\d{1,6})\b/g))
+              preferred.add(m[1]);
+          }
+        }
+        return preferred.size > 0 ? [...preferred] : [...nums].slice(0, 20);
+      }
+      const labels = /* @__PURE__ */ new Set();
+      for (const el of elements) {
+        for (const raw of [el.label, el.text, el.accessibilityId]) {
+          const t = raw?.trim() ?? "";
+          if (t.length < 2 || t.length > 80)
+            continue;
+          if (/^(true|false|null|OK|Cancel)$/i.test(t))
+            continue;
+          labels.add(t);
+        }
+      }
+      return [...labels].slice(0, 80);
+    }
+    function liveAssertStateDelta(before, after, expect, key) {
+      const beforeSet = new Set(before);
+      const afterSet = new Set(after);
+      const removed = before.filter((v) => !afterSet.has(v));
+      const added = after.filter((v) => !beforeSet.has(v));
+      const exp = expect.toLowerCase().trim();
+      if (exp === "changed" || exp === "any_change") {
+        if (removed.length === 0 && added.length === 0) {
+          return `assertStateDelta(${key}): expected change, captures identical (${before.length} values)`;
+        }
+        return null;
+      }
+      if (exp === "removed" || exp === "entity_removed" || exp.startsWith("removed:")) {
+        if (removed.length === 0) {
+          return `assertStateDelta(${key}): expected at least one entity removed`;
+        }
+        return null;
+      }
+      if (exp === "count_decreased" || exp === "count-1") {
+        const b = before.map(Number).filter((n) => Number.isFinite(n));
+        const a = after.map(Number).filter((n) => Number.isFinite(n));
+        const bMax = b.length ? Math.max(...b) : NaN;
+        const aMax = a.length ? Math.max(...a) : NaN;
+        if (!Number.isFinite(bMax) || !Number.isFinite(aMax) || aMax >= bMax) {
+          return `assertStateDelta(${key}): expected count decrease (before max=${bMax}, after max=${aMax})`;
+        }
+        return null;
+      }
+      if (exp === "count_increased" || exp === "count+1") {
+        const b = before.map(Number).filter((n) => Number.isFinite(n));
+        const a = after.map(Number).filter((n) => Number.isFinite(n));
+        const bMax = b.length ? Math.max(...b) : NaN;
+        const aMax = a.length ? Math.max(...a) : NaN;
+        if (!Number.isFinite(bMax) || !Number.isFinite(aMax) || aMax <= bMax) {
+          return `assertStateDelta(${key}): expected count increase (before max=${bMax}, after max=${aMax})`;
+        }
+        return null;
+      }
+      if (exp === "unchanged" || exp === "persisted") {
+        if (removed.length > 0 || added.length > 0) {
+          return `assertStateDelta(${key}): expected persistence/unchanged but set changed`;
+        }
+        return null;
+      }
+      if (removed.length === 0 && added.length === 0) {
+        return `assertStateDelta(${key}): expected change (expect=${expect}), state identical`;
+      }
+      return null;
+    }
     function recordAssertVisible(toolArgs, ctx) {
       const { resolveRef, latest, screenName, platform: platform3, recordAction } = ctx;
       const element = resolveRef(toolArgs.ref);
@@ -84376,6 +84977,14 @@ ${statePacket}`, redactionCredentials) },
             lines.push(`  await expect(page.getByText('${expected}')).toBeVisible();`);
             break;
           }
+          case "CAPTURE_STATE":
+            lines.push(`  // captureState ${escape((action.metadata.stateKey ?? label).slice(0, 40))}`);
+            break;
+          case "ASSERT_STATE_DELTA": {
+            const expect = escape((action.metadata.expect ?? action.value ?? "changed").slice(0, 40));
+            lines.push(`  await expect(page.getByText('state:${expect}')).toBeVisible();`);
+            break;
+          }
           case "CLEAR":
             lines.push(`  await page.getByLabel('${label}').fill('');`);
             break;
@@ -84419,6 +85028,22 @@ ${statePacket}`, redactionCredentials) },
       return [action.selector, action.value, action.innerText, action.metadata?.targetLabel].filter((v) => typeof v === "string" && v.trim().length > 0).join(" ");
     }
     function evaluateMobileAssertionStrength(actions) {
+      if (actions.some((a) => a.type === "ASSERT_STATE_DELTA")) {
+        return {
+          ok: true,
+          severity: "none",
+          reason: "state-delta oracle proves a durable product change (identity/count/persistence)",
+          signals: {
+            apiTest: false,
+            interacted: actions.some((a) => a.type === "TAP" || a.type === "TYPE" || a.type === "CLEAR"),
+            mutated: actions.some((a) => a.type === "TYPE" || a.type === "CLEAR" || a.type === "TAP"),
+            navOnly: false,
+            hasOutcomeProof: true,
+            errorBanner: false,
+            terminal: null
+          }
+        };
+      }
       const modelAsserts = actions.filter((a) => a.type === "ASSERT_VISIBLE" || a.type === "ASSERT_TEXT");
       if (modelAsserts.length === 0) {
         return {
@@ -84588,6 +85213,16 @@ ${statePacket}`, redactionCredentials) },
       if (coldResetUnavailable)
         tags.push("@warm-state");
       const strengthBlocked = !strengthVerdict.ok || strengthVerdict.severity === "block" || strengthVerdict.severity === "route-bug" || !verified || coldResetUnavailable;
+      {
+        const kind = (0, scenario_taxonomy_js_1.inferScenarioKind)(scenario);
+        const hasStateOracle = compiled.steps.some((s) => s.action === "assertStateDelta" || s.action === "assertText" || s.action === "captureState");
+        const strong = verified && !strengthBlocked && strengthVerdict.severity === "none" && ((0, scenario_taxonomy_js_1.isStrongOracleKind)(kind) || hasStateOracle);
+        if (strong)
+          tags.push("@strong-oracle");
+        else if (!tags.includes("@smoke") && (kind === "smoke_nav" || kind === "navigation_integrity")) {
+          tags.push("@smoke");
+        }
+      }
       const strengthReason = coldResetUnavailable ? `Cold app-data reset unavailable${coldResetReason ? ` (${coldResetReason})` : ""} \u2014 generation may not match cold-boot replay. ${strengthVerdict.reason}` : !verified && recording.assertCount === 0 ? "Mobile scenario finished unverified \u2014 the agent never proved the scenario outcome live, so the recording may not demonstrate the goal (e.g. a happy path that never completed). Review before promotion." : strengthVerdict.reason;
       const test = {
         name: compiled.name,
@@ -84835,6 +85470,344 @@ Mobile generate phase complete: ${tests.length}/${scenarios.length} test(s) gene
   }
 });
 
+// ../runner-core/dist/services/mobile/failure-triage.js
+var require_failure_triage = __commonJS({
+  "../runner-core/dist/services/mobile/failure-triage.js"(exports) {
+    "use strict";
+    Object.defineProperty(exports, "__esModule", { value: true });
+    exports.hasStrongMobileOracle = hasStrongMobileOracle;
+    exports.isStrongOracleStep = isStrongOracleStep;
+    exports.listStrongOracleKinds = listStrongOracleKinds;
+    exports.triageMobileFailure = triageMobileFailure;
+    exports.triageToHealTerminal = triageToHealTerminal;
+    var STRONG_ACTIONS = /* @__PURE__ */ new Set(["assertStateDelta", "assertText", "captureState"]);
+    var CHROME_VISIBLE_RE = /\b(tab|home|settings|back|menu|navigation|nav bar|bottom nav|status bar)\b/i;
+    function hasStrongMobileOracle(steps) {
+      return steps.some(isStrongOracleStep);
+    }
+    function isStrongOracleStep(step) {
+      if (STRONG_ACTIONS.has(step.action))
+        return true;
+      if (step.action !== "assertVisible")
+        return false;
+      const blob = [
+        step.assertion ?? "",
+        step.description ?? "",
+        step.target?.primary ?? "",
+        ...step.target?.fallbacks ?? []
+      ].join(" ");
+      if (/\b(error|invalid|required|must|cannot|failed|denied|blocked|empty|missing|deleted|removed|saved|success|created|updated)\b/i.test(blob)) {
+        return true;
+      }
+      if (CHROME_VISIBLE_RE.test(blob) && blob.length < 80)
+        return false;
+      return false;
+    }
+    function listStrongOracleKinds(steps) {
+      const kinds = /* @__PURE__ */ new Set();
+      for (const step of steps) {
+        if (step.action === "assertStateDelta")
+          kinds.add("assertStateDelta");
+        else if (step.action === "assertText")
+          kinds.add("assertText");
+        else if (step.action === "captureState")
+          kinds.add("captureState");
+        else if (isStrongOracleStep(step))
+          kinds.add(step.action);
+      }
+      return [...kinds];
+    }
+    function errorText(error2, logs2) {
+      return `${error2 ?? ""}
+${logs2 ?? ""}`.trim();
+    }
+    function leadingPrefix(error2) {
+      if (!error2)
+        return null;
+      const m = error2.match(/^(CONFIG_ISSUE|APP_BUG|RATE_LIMIT_BLOCKED|PREREQ_UNMET|HEAL_SECRET_LEAK)\s*:/i);
+      return m ? m[1].toUpperCase() : null;
+    }
+    function looksLikeConfig(text) {
+      if (/CONFIG_ISSUE\s*:/i.test(text))
+        return true;
+      if (/RATE_LIMIT_BLOCKED\s*:/i.test(text))
+        return true;
+      if (/Missing mobile test variable/i.test(text))
+        return true;
+      if (/\b(quota|rate.?limit|429|lockout)\b/i.test(text))
+        return true;
+      if (/\b(device (?:offline|disconnected|not found)|session (?:not started|terminated|deleted))\b/i.test(text)) {
+        return true;
+      }
+      if (/\b(Appium|adbExec|UiAutomator2|XCUITest)\b/i.test(text) && /\b(ECONNREFUSED|timeout|not available|could not start|driver)\b/i.test(text)) {
+        return true;
+      }
+      return false;
+    }
+    function looksLikePrereq(text) {
+      return /PREREQ_UNMET\s*:/i.test(text) || /\b(prerequisite|fixture missing|no test data|account (?:missing|not provisioned)|required entity)\b/i.test(text);
+    }
+    function looksLikeFlake(text) {
+      return /\b(stale element|animation|transition|intermittent|flaky|race condition)\b/i.test(text) || /\b(element (?:is )?not interactable|obscured|covered by)\b/i.test(text);
+    }
+    function looksLikeLocatorMiss(text) {
+      return /not found|no such element|No identity locator|unable to locate/i.test(text);
+    }
+    function looksLikeOracleFailure(text) {
+      return /assertStateDelta/i.test(text) || /expected state/i.test(text) || /expected (?:["'].+["'] )?(?:to be |text|visible|removed|count)/i.test(text) || /assertion failed|Assert .+ (?:visible|shows|contains)/i.test(text);
+    }
+    function triageMobileFailure(input) {
+      const failureCount = Math.max(1, input.failureCount ?? 1);
+      const tags = input.tags ?? [];
+      const text = errorText(input.error, input.logs);
+      const prefix = leadingPrefix(input.error);
+      const strongKinds = listStrongOracleKinds(input.steps);
+      const hasStrong = strongKinds.length > 0 || tags.some((t) => t === "@strong-oracle" || t === "strong-oracle");
+      const evidence = {
+        hasStrongOracle: hasStrong,
+        strongOracleKinds: strongKinds,
+        failureCount,
+        errorPrefix: prefix
+      };
+      if (prefix === "CONFIG_ISSUE" || prefix === "RATE_LIMIT_BLOCKED") {
+        return {
+          verdict: "config_issue",
+          reason: `Environment/config prefix on error (${prefix})`,
+          shouldHeal: false,
+          healVerdict: "config_issue",
+          evidence
+        };
+      }
+      if (prefix === "APP_BUG") {
+        return {
+          verdict: "app_bug_candidate",
+          reason: "Error already classified APP_BUG",
+          shouldHeal: false,
+          healVerdict: "app_bug",
+          evidence
+        };
+      }
+      if (prefix === "PREREQ_UNMET") {
+        return {
+          verdict: "prereq_unmet",
+          reason: "Error already classified PREREQ_UNMET",
+          shouldHeal: false,
+          healVerdict: "prereq_unmet",
+          evidence
+        };
+      }
+      if (looksLikeConfig(text)) {
+        return {
+          verdict: "config_issue",
+          reason: "Failure matches environment/config/device patterns",
+          shouldHeal: false,
+          healVerdict: "config_issue",
+          evidence
+        };
+      }
+      if (looksLikePrereq(text)) {
+        return {
+          verdict: "prereq_unmet",
+          reason: "Failure matches missing prerequisite / fixture patterns",
+          shouldHeal: false,
+          healVerdict: "prereq_unmet",
+          evidence
+        };
+      }
+      if (input.uiSuccessWithFailedWriteApi && hasStrong) {
+        return {
+          verdict: "app_bug_candidate",
+          reason: "UI path completed but a write API failed (network secondary oracle)",
+          shouldHeal: false,
+          healVerdict: "app_bug",
+          evidence
+        };
+      }
+      if (hasStrong && failureCount >= 2 && (looksLikeOracleFailure(text) || !looksLikeLocatorMiss(text))) {
+        if (looksLikeLocatorMiss(text) && failureCount < 3) {
+          return {
+            verdict: "needs_heal",
+            reason: "Strong oracle present but error looks like a locator miss \u2014 attempt heal",
+            shouldHeal: true,
+            evidence
+          };
+        }
+        return {
+          verdict: "app_bug_candidate",
+          reason: `Strong oracle (${strongKinds.join(", ") || "tagged"}) failed ${failureCount}\xD7 with product-shaped error`,
+          shouldHeal: false,
+          healVerdict: "app_bug",
+          evidence
+        };
+      }
+      if (looksLikeFlake(text) && failureCount === 1 && !hasStrong) {
+        return {
+          verdict: "flake_candidate",
+          reason: "Transient interactability / race signals on a weak-oracle test",
+          shouldHeal: true,
+          // still allow heal, but tag flaky path
+          extraTags: ["@flaky"],
+          evidence
+        };
+      }
+      if (tags.includes("@smoke") && !hasStrong && looksLikeLocatorMiss(text)) {
+        return {
+          verdict: "needs_heal",
+          reason: "Smoke/nav locator failure \u2014 heal allowed",
+          shouldHeal: true,
+          evidence
+        };
+      }
+      return {
+        verdict: "needs_heal",
+        reason: hasStrong ? "Strong oracle first failure \u2014 allow heal once before APP_BUG escalation" : "Default: attempt script/live heal",
+        shouldHeal: true,
+        evidence
+      };
+    }
+    function triageToHealTerminal(triage) {
+      if (triage.shouldHeal || !triage.healVerdict)
+        return null;
+      return {
+        verdict: triage.healVerdict,
+        healReason: triage.reason,
+        extraTags: triage.extraTags
+      };
+    }
+  }
+});
+
+// ../runner-core/dist/services/mobile/oracle-protection.js
+var require_oracle_protection = __commonJS({
+  "../runner-core/dist/services/mobile/oracle-protection.js"(exports) {
+    "use strict";
+    Object.defineProperty(exports, "__esModule", { value: true });
+    exports.fingerprintOracles = fingerprintOracles;
+    exports.rejectOracleWeakeningPatch = rejectOracleWeakeningPatch;
+    exports.oraclesPreserved = oraclesPreserved;
+    var failure_triage_js_1 = require_failure_triage();
+    var EXPECT_STRENGTH = {
+      entity_removed: 5,
+      removed: 5,
+      count_decreased: 4,
+      "count-1": 4,
+      count_increased: 4,
+      "count+1": 4,
+      persisted: 3,
+      unchanged: 3,
+      changed: 2,
+      any_change: 2
+    };
+    function normalizeText(value) {
+      return (value ?? "").trim().toLowerCase().replace(/\s+/g, " ");
+    }
+    function stateKeyOf(step) {
+      const meta = step.metadata;
+      const key = typeof meta?.stateKey === "string" ? meta.stateKey.trim() : "";
+      return key || normalizeText(step.target?.primary) || normalizeText(step.description) || `order-${step.order}`;
+    }
+    function expectOf(step) {
+      const meta = step.metadata;
+      const fromMeta = typeof meta?.expect === "string" ? meta.expect : "";
+      return normalizeText(fromMeta || step.assertion || step.value || "changed");
+    }
+    function fingerprintOracles(steps) {
+      const assertTexts = [];
+      const stateExpects = {};
+      let stateDeltas = 0;
+      let captures = 0;
+      let strongVisible = 0;
+      for (const step of steps) {
+        if (step.action === "assertStateDelta") {
+          stateDeltas += 1;
+          stateExpects[stateKeyOf(step)] = expectOf(step);
+        } else if (step.action === "captureState")
+          captures += 1;
+        else if (step.action === "assertText") {
+          const t = normalizeText(step.assertion ?? step.value ?? step.description);
+          if (t)
+            assertTexts.push(t);
+        } else if (step.action === "assertVisible" && (0, failure_triage_js_1.isStrongOracleStep)(step)) {
+          strongVisible += 1;
+        }
+      }
+      return {
+        stateDeltas,
+        captures,
+        assertTexts,
+        stateExpects,
+        strongVisible,
+        strongTotal: stateDeltas + captures + assertTexts.length + strongVisible
+      };
+    }
+    function expectStrength(expect) {
+      const e = expect.toLowerCase().trim();
+      if (e.startsWith("removed:"))
+        return 5;
+      return EXPECT_STRENGTH[e] ?? 1;
+    }
+    function rejectOracleWeakeningPatch(original, patched) {
+      if (!Array.isArray(patched) || patched.length === 0) {
+        return "healed steps missing \u2014 refusing empty patch that would drop oracles";
+      }
+      const before = fingerprintOracles(original);
+      const after = fingerprintOracles(patched);
+      if (before.stateDeltas > 0 && after.stateDeltas < before.stateDeltas) {
+        return `heal patch removed assertStateDelta oracle(s) (${before.stateDeltas} \u2192 ${after.stateDeltas}) \u2014 refusing to go green by dropping state proof`;
+      }
+      for (const [key, beforeExpect] of Object.entries(before.stateExpects)) {
+        const afterExpect = after.stateExpects[key];
+        if (!afterExpect) {
+          return `heal patch removed assertStateDelta for key "${key}" (expect was ${beforeExpect})`;
+        }
+        if (expectStrength(afterExpect) < expectStrength(beforeExpect)) {
+          return `heal patch softened assertStateDelta expect for "${key}" (${beforeExpect} \u2192 ${afterExpect})`;
+        }
+      }
+      if (before.captures > 0 && after.captures < before.captures && after.stateDeltas === 0) {
+        return `heal patch removed captureState without keeping assertStateDelta (${before.captures} \u2192 ${after.captures})`;
+      }
+      if (before.assertTexts.length > 0) {
+        const afterSet = new Set(after.assertTexts);
+        const lost = before.assertTexts.filter((t) => !afterSet.has(t));
+        if (after.assertTexts.length < before.assertTexts.length) {
+          return `heal patch dropped assertText outcome proof (${before.assertTexts.length} \u2192 ${after.assertTexts.length})`;
+        }
+        if (lost.length > 0) {
+          const softKept = lost.every((t) => after.assertTexts.some((a) => a.includes(t) || t.includes(a)));
+          if (!softKept) {
+            return `heal patch replaced assertText expectations (${lost.slice(0, 2).join("; ")}) \u2014 outcome must stay`;
+          }
+        }
+      }
+      if (before.strongVisible > 0 && after.strongVisible + after.assertTexts.length + after.stateDeltas < before.strongVisible) {
+        return `heal patch weakened strong assertVisible validation oracles (${before.strongVisible} \u2192 ${after.strongVisible})`;
+      }
+      if (before.strongTotal > 0 && after.strongTotal === 0) {
+        return "heal patch removed all strong oracles \u2014 refusing visibility-only green path";
+      }
+      for (const orig of original) {
+        if (orig.action !== "assertStateDelta" && orig.action !== "assertText")
+          continue;
+        const key = normalizeText(orig.description ?? orig.assertion ?? "");
+        if (!key)
+          continue;
+        const stillStrong = patched.some((p) => (p.action === "assertStateDelta" || p.action === "assertText") && normalizeText(p.description ?? p.assertion ?? "") === key);
+        if (stillStrong)
+          continue;
+        const onlyVisible = patched.some((p) => p.action === "assertVisible" && normalizeText(p.description ?? p.assertion ?? "") === key);
+        if (onlyVisible) {
+          return `heal patch downgraded strong oracle "${key.slice(0, 60)}" to assertVisible`;
+        }
+      }
+      return null;
+    }
+    function oraclesPreserved(original, patched) {
+      return rejectOracleWeakeningPatch(original, patched) === null;
+    }
+  }
+});
+
 // ../runner-core/dist/services/mobile/mobile-heal-postprocess.js
 var require_mobile_heal_postprocess = __commonJS({
   "../runner-core/dist/services/mobile/mobile-heal-postprocess.js"(exports) {
@@ -84843,6 +85816,7 @@ var require_mobile_heal_postprocess = __commonJS({
     exports.redactMobileSecretsFromText = redactMobileSecretsFromText;
     exports.detectMobileStepSecretLeak = detectMobileStepSecretLeak;
     exports.computeMobileHealOutcome = computeMobileHealOutcome2;
+    var oracle_protection_js_1 = require_oracle_protection();
     var REDACT_KEY_RE = /email|username|user|phone|password|secret|token|api[_-]?key|access[_-]?key|\bpass\b|credential|bearer|\bpat\b|session|cookie|jwt|otp|pin/i;
     var DETECT_KEY_RE = /password|secret|token|api[_]?key|\bpass\b|credential|bearer|\bpat\b/i;
     var MIN_REDACT_LEN = 4;
@@ -84908,18 +85882,27 @@ var require_mobile_heal_postprocess = __commonJS({
     function computeMobileHealOutcome2(args) {
       const { heal } = args;
       const hasFix = Array.isArray(heal.healedSteps) && heal.healedSteps.length > 0;
-      const isVerifiedFix = heal.passed === true && heal.verdict === "fix" && hasFix;
+      let isVerifiedFix = heal.passed === true && heal.verdict === "fix" && hasFix;
       const secretLeak = isVerifiedFix ? detectMobileStepSecretLeak(heal.healedSteps, args.testVariables) : null;
+      const oracleWeakening = isVerifiedFix && args.originalSteps ? (0, oracle_protection_js_1.rejectOracleWeakeningPatch)(args.originalSteps, heal.healedSteps ?? []) : null;
+      if (oracleWeakening)
+        isVerifiedFix = false;
       const isConfigIssue = heal.verdict === "config_issue";
-      const isAppBug = heal.verdict === "app_bug";
+      const isAppBug = heal.verdict === "app_bug" || Boolean(oracleWeakening && heal.passed);
       const extraTags = new Set((heal.extraTags ?? []).filter((t) => typeof t === "string" && t.length > 0));
       if (secretLeak)
         extraTags.add("@needs-review");
+      if (oracleWeakening) {
+        extraTags.add("@needs-review");
+        extraTags.add("@bug-found");
+      }
       if (!heal.passed && NEEDS_REVIEW_VERDICTS.has(heal.verdict))
         extraTags.add("@needs-review");
       let status;
       if (secretLeak)
         status = "FAILED";
+      else if (oracleWeakening)
+        status = "FAILED";
       else if (isVerifiedFix)
         status = "PASSED";
       else if (isConfigIssue)
@@ -84931,6 +85914,8 @@ var require_mobile_heal_postprocess = __commonJS({
         error2 = void 0;
       } else if (secretLeak) {
         error2 = `HEAL_SECRET_LEAK: healed steps contained a literal secret (${secretLeak}); patch dropped, tagged @needs-review`;
+      } else if (oracleWeakening) {
+        error2 = `APP_BUG: heal attempted to drop strong oracle (${oracleWeakening}); patch refused`;
       } else if (isConfigIssue) {
         error2 = `CONFIG_ISSUE: ${heal.healReason ?? args.finalError ?? args.reproduceError ?? "environment/rate-limit blocker"}`;
       } else if (isAppBug) {
@@ -84947,13 +85932,64 @@ var require_mobile_heal_postprocess = __commonJS({
         error: error2,
         extraTags: extraTags.size > 0 ? [...extraTags] : void 0,
         removeTags: heal.removeTags,
-        shouldPatch: isVerifiedFix && !secretLeak,
+        shouldPatch: isVerifiedFix && !secretLeak && !oracleWeakening,
         secretLeak
       };
     }
   }
 });
 
+// ../runner-core/dist/services/mobile/network-oracle.js
+var require_network_oracle = __commonJS({
+  "../runner-core/dist/services/mobile/network-oracle.js"(exports) {
+    "use strict";
+    Object.defineProperty(exports, "__esModule", { value: true });
+    exports.evaluateNetworkSecondaryOracle = evaluateNetworkSecondaryOracle;
+    exports.uiSuccessWithFailedWriteApi = uiSuccessWithFailedWriteApi;
+    var WRITE_METHODS = /* @__PURE__ */ new Set(["POST", "PUT", "PATCH", "DELETE"]);
+    function isWrite(method) {
+      return WRITE_METHODS.has(method.toUpperCase());
+    }
+    function isServerOrClientError(status) {
+      return status >= 400 && status < 600;
+    }
+    function isNoiseUrl(url) {
+      return /\b(analytics|telemetry|sentry|bugsnag|crashlytics|facebook\.com\/tr|google-analytics|doubleclick|hotjar|segment\.io|amplitude|mixpanel)\b/i.test(url);
+    }
+    function evaluateNetworkSecondaryOracle(input) {
+      const calls = input.apiCalls;
+      if (!calls || calls.length === 0)
+        return null;
+      if (input.uiPathSucceeded === false)
+        return null;
+      for (const call of calls) {
+        const method = String(call.method ?? "GET");
+        const url = String(call.url ?? "");
+        const status = typeof call.status === "number" ? call.status : 0;
+        if (!isWrite(method))
+          continue;
+        if (!isServerOrClientError(status))
+          continue;
+        if (!url || isNoiseUrl(url))
+          continue;
+        if (status === 401 || status === 403)
+          continue;
+        return {
+          kind: "write_api_failed",
+          method: method.toUpperCase(),
+          url: url.slice(0, 200),
+          status,
+          reason: `Write API ${method.toUpperCase()} ${url.slice(0, 120)} returned ${status} while UI path appeared successful`
+        };
+      }
+      return null;
+    }
+    function uiSuccessWithFailedWriteApi(input) {
+      return evaluateNetworkSecondaryOracle(input) !== null;
+    }
+  }
+});
+
 // ../runner-core/dist/services/selector-registry-context.js
 var require_selector_registry_context = __commonJS({
   "../runner-core/dist/services/selector-registry-context.js"(exports) {
@@ -85321,6 +86357,9 @@ var require_mobile_heal_loop = __commonJS({
     var ai_retry_js_1 = require_ai_retry();
     var mobile_source_parser_js_1 = require_mobile_source_parser();
     var mobile_heal_postprocess_js_1 = require_mobile_heal_postprocess();
+    var failure_triage_js_1 = require_failure_triage();
+    var oracle_protection_js_1 = require_oracle_protection();
+    var network_oracle_js_1 = require_network_oracle();
     var mobile_observation_js_1 = require_mobile_observation();
     var selector_registry_context_js_1 = require_selector_registry_context();
     var mobile_session_keepalive_js_1 = require_mobile_session_keepalive();
@@ -85343,7 +86382,12 @@ Reason over steps + error + tree + registry and return working healed steps. Do
 {"verdict":"state_stale","reason":"leftover data blocks a baseline assertion"}
 {"verdict":"test_invalid","reason":"scenario cannot be made to pass"}
 {"verdict":"unhealable_dynamic","reason":"asserted value is inherently volatile (timestamps, counters, feeds) \u2014 no durable locator can exist; needs human review"}
-For a fix, return the COMPLETE steps array (not a diff).`;
+For a fix, return the COMPLETE steps array (not a diff).
+## Strong oracle protection (non-negotiable)
+- NEVER remove or downgrade assertStateDelta, captureState, or assertText outcome proof to go green.
+- NEVER replace a durable outcome assert with mere assertVisible of a tab/header.
+- You MAY fix locators, waits, and navigation around those oracles.
+- If the app truly violates the oracle, return verdict "app_bug" instead of stripping the assert.`;
     var DEFAULT_SCRIPT_MAX_ATTEMPTS = 6;
     var RECOVERABLE_MAX = 3;
     var MAX_CONSECUTIVE_INVALID_VERDICTS = 3;
@@ -85373,7 +86417,9 @@ For a fix, return the COMPLETE steps array (not a diff).`;
       "home",
       "waitForElement",
       "assertVisible",
-      "assertText"
+      "assertText",
+      "captureState",
+      "assertStateDelta"
     ]);
     var MAX_HEALED_STEPS = 300;
     var TERMINAL_VERDICTS = /* @__PURE__ */ new Set([
@@ -85400,6 +86446,28 @@ For a fix, return the COMPLETE steps array (not a diff).`;
     function isMobileHealVerdict(value) {
       return MOBILE_HEAL_VERDICTS.includes(value);
     }
+    function normalizeMobileHealVerdict(raw) {
+      const v = raw.trim().toLowerCase().replace(/[\s-]+/g, "_");
+      if (isMobileHealVerdict(v))
+        return v;
+      if (v === "appbug" || v === "application_bug" || v === "bug_found")
+        return "app_bug";
+      if (v === "config" || v === "configuration_issue" || v === "env" || v === "environment")
+        return "config_issue";
+      if (v === "prereq" || v === "prerequisite" || v === "prereq_missing")
+        return "prereq_unmet";
+      if (v === "stale" || v === "stale_state")
+        return "state_stale";
+      if (v === "invalid_test" || v === "bad_test")
+        return "test_invalid";
+      if (v === "unhealable" || v === "dynamic")
+        return "unhealable_dynamic";
+      if (v === "need_device" || v === "needs_appium" || v === "needs_live")
+        return "needs_device";
+      if (v === "healed" || v === "ok" || v === "pass" || v === "passed")
+        return "fix";
+      return null;
+    }
     function isLocatorNotFound(error2) {
       return /not found|no such element/i.test(error2 ?? "");
     }
@@ -85681,15 +86749,43 @@ For a fix, return the COMPLETE steps array (not a diff).`;
         const sub = extractBracesSubstring(cleaned);
         obj = sub ? safeJsonParse(sub) : void 0;
       }
-      if (!isRecord(obj))
+      if (!isRecord(obj)) {
+        const line = cleaned.match(/\bverdict\s*[:=]\s*["']?([a-zA-Z_ -]+)["']?/i);
+        if (line) {
+          const verdict2 = normalizeMobileHealVerdict(line[1]);
+          if (verdict2) {
+            return {
+              verdict: verdict2,
+              reason: cleaned.slice(0, 2e3)
+            };
+          }
+        }
+        const prefix = cleaned.match(/^\s*(APP_BUG|CONFIG_ISSUE|PREREQ_UNMET|TEST_INVALID|STATE_STALE)\s*:\s*(.*)$/im);
+        if (prefix) {
+          const map2 = {
+            APP_BUG: "app_bug",
+            CONFIG_ISSUE: "config_issue",
+            PREREQ_UNMET: "prereq_unmet",
+            TEST_INVALID: "test_invalid",
+            STATE_STALE: "state_stale"
+          };
+          const verdict2 = map2[prefix[1].toUpperCase()];
+          if (verdict2) {
+            return { verdict: verdict2, reason: (prefix[2] || cleaned).slice(0, 2e3) };
+          }
+        }
+        return null;
+      }
+      const rawVerdict = obj.verdict ?? obj.Verdict ?? obj.status;
+      if (typeof rawVerdict !== "string")
         return null;
-      const rawVerdict = obj.verdict;
-      if (typeof rawVerdict !== "string" || !isMobileHealVerdict(rawVerdict))
+      const verdict = normalizeMobileHealVerdict(rawVerdict);
+      if (!verdict)
         return null;
       return {
-        verdict: rawVerdict,
+        verdict,
         steps: coerceSteps(obj.steps),
-        reason: typeof obj.reason === "string" ? obj.reason : void 0,
+        reason: typeof obj.reason === "string" ? obj.reason : typeof obj.rationale === "string" ? obj.rationale : typeof obj.message === "string" ? obj.message : void 0,
         confidence: typeof obj.confidence === "number" ? obj.confidence : void 0
       };
     }
@@ -86038,7 +87134,7 @@ ${args.directive}`);
             };
           }
           markRecoverableTurn();
-          pendingDirective = "Your last response was not valid JSON matching the verdict schema. Return exactly one JSON verdict object \u2014 no prose, no markdown fences.";
+          pendingDirective = 'SCHEMA REPAIR: Your last response was not a valid heal verdict. Reply with ONLY one JSON object (no markdown fences, no prose) of the form:\n{"verdict":"<one of: fix|app_bug|config_issue|needs_device|prereq_unmet|state_stale|test_invalid|unhealable_dynamic>","reason":"<short string>","steps":[/* optional MobileTestStep[] when verdict is fix */],"confidence":0.0}\nUse lowercase snake_case for verdict. Do not invent other verdict values.';
           continue;
         }
         consecutiveInvalidVerdicts = 0;
@@ -86067,6 +87163,13 @@ ${args.directive}`);
           pendingDirective = 'You returned verdict "fix" but no usable steps array. Return the COMPLETE healed MobileTestStep array.';
           continue;
         }
+        const oracleRejection = (0, oracle_protection_js_1.rejectOracleWeakeningPatch)(steps, healedSteps);
+        if (oracleRejection) {
+          markRecoverableTurn();
+          lastVerdict = "fix";
+          pendingDirective = `ORACLE PROTECTION: ${oracleRejection}. Keep all assertStateDelta/assertText/captureState outcome proof; fix locators/navigation only. If the app violates the oracle, return verdict "app_bug".`;
+          continue;
+        }
         if (activeFailingSource && isLocatorNotFound(activeError) && !isDrift(activeError)) {
           const failingSourceSnapshot = activeFailingSource;
           const missing = timedSync("device-op", `phase1-attempt-${attempt}-static-verify`, options.onProgress, () => {
@@ -86210,6 +87313,28 @@ ${args.directive}`);
       if (invalidAuthSetup) {
         return { passed: false, verdict: "test_invalid", healReason: invalidAuthSetup };
       }
+      const networkBug = (0, network_oracle_js_1.uiSuccessWithFailedWriteApi)({
+        apiCalls: ctx.apiCalls,
+        uiPathSucceeded: ctx.uiPathSucceeded
+      });
+      const triage = (0, failure_triage_js_1.triageMobileFailure)({
+        steps,
+        error: ctx.error,
+        logs: ctx.logs,
+        tags: ctx.tags,
+        failureCount: ctx.failureCount,
+        uiSuccessWithFailedWriteApi: networkBug
+      });
+      options.onProgress?.(`Pre-heal triage: ${triage.verdict} \u2014 ${triage.reason}`);
+      const terminal = (0, failure_triage_js_1.triageToHealTerminal)(triage);
+      if (terminal) {
+        return {
+          passed: false,
+          verdict: terminal.verdict,
+          healReason: terminal.healReason,
+          extraTags: terminal.extraTags
+        };
+      }
       const preflight = await tryRegistryPreflight(steps, target, ctx, options);
       if (preflight)
         return preflight;
@@ -86459,6 +87584,11 @@ For a fix, return the COMPLETE steps array (not a diff). Use "observe" only to r
         if (parsed.verdict !== "fix" || !parsed.steps)
           continue;
         const healedSteps = parsed.steps;
+        const liveOracleRejection = (0, oracle_protection_js_1.rejectOracleWeakeningPatch)(args.steps, healedSteps);
+        if (liveOracleRejection) {
+          options.onProgress?.(`ORACLE PROTECTION (live): ${liveOracleRejection}`);
+          continue;
+        }
         let verify;
         try {
           verify = await timed("reexec", `phase2-pass-${pass}-verify`, options.onProgress, () => runNativeTest({ steps: healedSteps, target, testVariables }));
@@ -353981,7 +355111,7 @@ var require_package4 = __commonJS({
   "package.json"(exports, module) {
     module.exports = {
       name: "@validate.qa/runner",
-      version: "1.0.88",
+      version: "1.0.89",
       description: "validate local test runner - execute Playwright tests on your machine, connected to validate.qa cloud.",
       bin: {
         "validate-runner": "dist/cli.js"
@@ -354842,6 +355972,68 @@ async function waitForUiSettle(sessionPath, opts = {}) {
   }
   return { settled: false, lastFingerprint, frames };
 }
+var SYSTEM_UI_DISMISS_LABELS = [
+  "OK",
+  "Got it",
+  "GOT IT",
+  "Continue",
+  "Close",
+  "Dismiss",
+  "I understand",
+  "Accept",
+  // Android 15+ / 16 KB page-size compatibility dialog primary action.
+  "OK, got it"
+];
+function extractElementId(value) {
+  if (!value || typeof value !== "object") return null;
+  const v = value;
+  const elementId = v.ELEMENT ?? v["element-6066-11e4-a52e-4f735466cecf"] ?? null;
+  if (typeof elementId !== "string" || !ELEMENT_ID_PATTERN.test(elementId)) return null;
+  return elementId;
+}
+async function dismissBlockingSystemUi(sessionPath, platform3, opts = {}) {
+  const maxDismisses = Math.max(1, Math.min(5, opts.maxDismisses ?? 3));
+  const dismissed = [];
+  for (let i = 0; i < maxDismisses; i++) {
+    let tapped = false;
+    for (const label of SYSTEM_UI_DISMISS_LABELS) {
+      try {
+        const strategies = platform3 === "ANDROID" ? [
+          { using: "-android uiautomator", value: `new UiSelector().text("${label.replace(/"/g, '\\"')}")` },
+          { using: "accessibility id", value: label }
+        ] : [
+          { using: "accessibility id", value: label },
+          { using: "-ios predicate string", value: `label == "${label.replace(/"/g, '\\"')}" OR name == "${label.replace(/"/g, '\\"')}"` }
+        ];
+        for (const strategy of strategies) {
+          try {
+            const elResult = await appiumRequest(`${sessionPath}/element`, {
+              method: "POST",
+              body: JSON.stringify(strategy)
+            });
+            const elementId = extractElementId(readValue(elResult));
+            if (!elementId) continue;
+            await appiumRequest(`${sessionPath}/element/${elementId}/click`, {
+              method: "POST",
+              body: "{}"
+            });
+            dismissed.push(label);
+            tapped = true;
+            await waitForUiSettle(sessionPath, { timeoutMs: 1200, pollMs: 200, minStableFrames: 1 });
+            break;
+          } catch (err) {
+            if (isAppiumDriverDeadError(err)) throw err;
+          }
+        }
+        if (tapped) break;
+      } catch (err) {
+        if (isAppiumDriverDeadError(err)) throw err;
+      }
+    }
+    if (!tapped) break;
+  }
+  return { dismissed, ok: dismissed.length > 0 };
+}
 async function waitForColdBootSettle(sessionPath) {
   await waitForUiSettle(sessionPath, {
     timeoutMs: MOBILE_COLD_BOOT_SETTLE_MS,
@@ -357582,6 +358774,107 @@ async function waitForColdBootContent(sessionId, log2, timeoutMs = 2e4) {
   }
   log2(`  Cold-boot wait timed out after ${timeoutMs}ms (last tree had ${lastCount} node(s)) \u2014 proceeding anyway.`);
 }
+async function dismissSystemUiAfterColdBoot(sessionId, platform3, log2) {
+  try {
+    const result = await dismissBlockingSystemUi(`/session/${sessionId}`, platform3);
+    if (result.dismissed.length > 0) {
+      log2(`  Dismissed system UI: ${result.dismissed.join(" \u2192 ")}`);
+    }
+  } catch (err) {
+    log2(`  System UI dismiss skipped (${err instanceof Error ? err.message : String(err)})`);
+  }
+}
+async function captureMobileStateValues(sessionId, kind) {
+  const res = await wdRequest(`/session/${sessionId}/source`);
+  const xml = typeof res?.value === "string" ? res.value : "";
+  if (kind === "badge_count") {
+    const nums = /* @__PURE__ */ new Set();
+    for (const m of xml.matchAll(/\b(\d{1,6})\b/g)) {
+      nums.add(m[1]);
+    }
+    const preferred = /* @__PURE__ */ new Set();
+    for (const m of xml.matchAll(/(?:count|badge|open|unread|item|invoice|result|pending)[^>]{0,80}?\b(\d{1,6})\b/gi)) {
+      preferred.add(m[1]);
+    }
+    for (const m of xml.matchAll(/\b(\d{1,6})\b[^>]{0,80}?(?:count|badge|open|unread|items?)/gi)) {
+      preferred.add(m[1]);
+    }
+    return preferred.size > 0 ? [...preferred] : [...nums].slice(0, 20);
+  }
+  const labels = /* @__PURE__ */ new Set();
+  const attrRe = /(?:text|content-desc|name|label)="([^"]{2,80})"/gi;
+  for (const m of xml.matchAll(attrRe)) {
+    const t = m[1].trim();
+    if (t.length < 2 || t.length > 80) continue;
+    if (/^(true|false|null|OK|Cancel)$/i.test(t)) continue;
+    labels.add(t);
+  }
+  return [...labels].slice(0, 80);
+}
+function assertMobileStateDelta(before, after, expect, key, log2) {
+  const beforeSet = new Set(before);
+  const afterSet = new Set(after);
+  const removed = before.filter((v) => !afterSet.has(v));
+  const added = after.filter((v) => !beforeSet.has(v));
+  log2(`  assertStateDelta key=${key} expect=${expect} removed=${removed.length} added=${added.length}`);
+  const exp = expect.toLowerCase().trim();
+  if (exp === "changed" || exp === "any_change") {
+    if (removed.length === 0 && added.length === 0) {
+      throw new Error(`assertStateDelta(${key}): expected state to change, but capture is identical (${before.length} values)`);
+    }
+    return;
+  }
+  if (exp === "removed" || exp === "entity_removed" || exp.startsWith("removed:")) {
+    const target = exp.startsWith("removed:") ? expect.slice("removed:".length).trim() : "";
+    if (target) {
+      if (!removed.includes(target) && afterSet.has(target)) {
+        throw new Error(`assertStateDelta(${key}): expected "${target}" removed, but it is still present`);
+      }
+      if (!beforeSet.has(target)) {
+        throw new Error(`assertStateDelta(${key}): expected "${target}" to have been in the prior capture`);
+      }
+      if (afterSet.has(target)) {
+        throw new Error(`assertStateDelta(${key}): "${target}" was not removed`);
+      }
+      return;
+    }
+    if (removed.length === 0) {
+      throw new Error(`assertStateDelta(${key}): expected at least one entity removed`);
+    }
+    return;
+  }
+  if (exp === "count_decreased" || exp === "count-1") {
+    const b = before.map(Number).filter((n) => Number.isFinite(n));
+    const a = after.map(Number).filter((n) => Number.isFinite(n));
+    const bMax = b.length ? Math.max(...b) : NaN;
+    const aMax = a.length ? Math.max(...a) : NaN;
+    if (!Number.isFinite(bMax) || !Number.isFinite(aMax) || aMax >= bMax) {
+      throw new Error(`assertStateDelta(${key}): expected count decrease (before max=${bMax}, after max=${aMax})`);
+    }
+    return;
+  }
+  if (exp === "count_increased" || exp === "count+1") {
+    const b = before.map(Number).filter((n) => Number.isFinite(n));
+    const a = after.map(Number).filter((n) => Number.isFinite(n));
+    const bMax = b.length ? Math.max(...b) : NaN;
+    const aMax = a.length ? Math.max(...a) : NaN;
+    if (!Number.isFinite(bMax) || !Number.isFinite(aMax) || aMax <= bMax) {
+      throw new Error(`assertStateDelta(${key}): expected count increase (before max=${bMax}, after max=${aMax})`);
+    }
+    return;
+  }
+  if (exp === "unchanged" || exp === "persisted") {
+    if (removed.length > 0 || added.length > 0) {
+      throw new Error(
+        `assertStateDelta(${key}): expected persistence/unchanged, but removed=[${removed.slice(0, 5).join(", ")}] added=[${added.slice(0, 5).join(", ")}]`
+      );
+    }
+    return;
+  }
+  if (removed.length === 0 && added.length === 0) {
+    throw new Error(`assertStateDelta(${key}): expected change (expect=${expect}), state identical`);
+  }
+}
 async function restoreTargetAppIfExternal(sessionId, target, log2, source, failOnExternal) {
   let boundary = null;
   try {
@@ -358727,6 +360020,7 @@ async function executeMobileTest(options) {
   }
   const stepResults = [];
   const screenshots = [];
+  const stateBag = /* @__PURE__ */ new Map();
   let apiCalls = [];
   let sessionId = null;
   let selectedDevice;
@@ -358937,6 +360231,9 @@ async function executeMobileTest(options) {
     if (clearedAppDataBeforeLaunch) {
       await waitForColdBootContent(sessionId, log2);
     }
+    if (options.target.launchMode !== "RESUME") {
+      await dismissSystemUiAfterColdBoot(sessionId, options.target.platform, log2);
+    }
     if (options.target.launchMode === "DEEP_LINK" && options.target.deeplink) {
       try {
         log2(`Opening deep link: ${options.target.deeplink}`);
@@ -359031,6 +360328,25 @@ async function executeMobileTest(options) {
           case "assertText":
             await executeAssertText(sessionId, step, runPlatform, isCrossPlatform);
             break;
+          case "captureState": {
+            const key = String(step.metadata?.stateKey ?? step.target?.primary ?? `state-${step.order}`);
+            const kind = String(step.metadata?.stateKind ?? "list_ids");
+            const values = await captureMobileStateValues(sessionId, kind);
+            stateBag.set(key, { kind, values, capturedAt: Date.now() });
+            log2(`  captureState key=${key} kind=${kind} n=${values.length}`);
+            break;
+          }
+          case "assertStateDelta": {
+            const key = String(step.metadata?.stateKey ?? step.target?.primary ?? "");
+            const expect = String(step.metadata?.expect ?? step.assertion ?? "changed");
+            const prior = stateBag.get(key);
+            if (!prior) {
+              throw new Error(`assertStateDelta: no prior captureState for key "${key}"`);
+            }
+            const current = await captureMobileStateValues(sessionId, prior.kind);
+            assertMobileStateDelta(prior.values, current, expect, key, log2);
+            break;
+          }
           default: {
             const _exhaustive = step.action;
             status = "failed";
@@ -359209,6 +360525,10 @@ async function createMobileDiscoverySession(target, options) {
       );
     }
   }
+  try {
+    await dismissBlockingSystemUi(`/session/${sessionId}`, target.platform);
+  } catch {
+  }
   let stopped = false;
   return {
     sessionId,
@@ -359346,6 +360666,8 @@ async function driveHarvestStep(sessionId, step, elementId, platform3) {
     case "waitForElement":
     case "assertVisible":
     case "assertText":
+    case "captureState":
+    case "assertStateDelta":
       return true;
   }
 }
@@ -359379,6 +360701,7 @@ async function harvestPlatformLocators(options) {
   try {
     options.onSessionReady?.(session.sessionId, session.deviceId, platform3);
     await freshLaunchTargetApp(session.sessionId, platform3, options.target.appId, log2);
+    await dismissSystemUiAfterColdBoot(session.sessionId, platform3, log2);
     if (options.target.launchMode === "DEEP_LINK" && options.target.deeplink) {
       await openDeepLink(session.sessionId, platform3, options.target.deeplink, options.target.appId);
     }
@@ -359654,7 +360977,9 @@ function decideMobileDeviceGate(input) {
     }
   }
   const isHealForHeldTest = runMode === "heal" && !!testCaseId && healHoldTestCaseIds.has(testCaseId);
-  const reservedForHeals = isHealForHeldTest ? Math.max(0, healHoldTestCaseIds.size - 1) : healHoldTestCaseIds.size;
+  const rawReservedForHeals = isHealForHeldTest ? Math.max(0, healHoldTestCaseIds.size - 1) : healHoldTestCaseIds.size;
+  const maxHealReserve = capacity <= 1 ? capacity : Math.max(1, capacity - 1);
+  const reservedForHeals = Math.min(rawReservedForHeals, maxHealReserve);
   if (activeMobileOps + reservedForHeals >= capacity) {
     const reason = reservedForHeals > 0 ? `capacity reserved for pending auto-heal: ${activeMobileOps}+${reservedForHeals}/${capacity}` : `mobile capacity reached: ${activeMobileOps}/${capacity} in use`;
     return { claim: false, disposition: "defer", reason };
@@ -361490,6 +362815,11 @@ var MobileBridgeDriver = class {
       } catch (err) {
         if (isRecoverableAppiumSessionFailure(err)) throw err;
       }
+      try {
+        await dismissBlockingSystemUi(this.sessionPath, this.platform);
+      } catch (err) {
+        if (isRecoverableAppiumSessionFailure(err) || isAppiumDriverDeadError(err)) throw err;
+      }
     });
   }
   /**
@@ -361527,6 +362857,11 @@ var MobileBridgeDriver = class {
         } catch (err) {
           if (isRecoverableAppiumSessionFailure(err)) throw err;
         }
+        try {
+          await dismissBlockingSystemUi(this.sessionPath, this.platform);
+        } catch (err) {
+          if (isRecoverableAppiumSessionFailure(err) || isAppiumDriverDeadError(err)) throw err;
+        }
         return true;
       } catch (err) {
         if (isRecoverableAppiumSessionFailure(err)) throw err;
@@ -364886,6 +366221,17 @@ ${finalVerifyResult.logs ?? ""}`;
             }
           };
           log.info("\u{1FA7A} Mobile AI heal \u2014 Phase 1 (script) \u2192 Phase 2 (live device, lazy)...");
+          const tagList = Array.isArray(run2.tags) ? run2.tags : [];
+          const failureCount = Math.max(
+            1,
+            typeof run2.consecutiveFails === "number" && run2.consecutiveFails > 0 ? run2.consecutiveFails : tagList.includes("@bug-found") ? 2 : 1
+          );
+          const reproduceApiCalls = Array.isArray(nativeVerify.last?.apiCalls) ? nativeVerify.last.apiCalls.map((c) => ({
+            method: typeof c.method === "string" ? c.method : void 0,
+            url: typeof c.url === "string" ? c.url : void 0,
+            status: typeof c.status === "number" ? c.status : void 0
+          })) : void 0;
+          const uiPathSucceeded = Array.isArray(reproduce.stepResults) && reproduce.stepResults.filter((s) => s.status === "passed").length >= Math.max(1, reproduce.stepResults.length - 1);
           const heal = await (0, import_runner_core14.executeMobileTestWithHealing)(
             mobileSteps,
             healTarget,
@@ -364894,7 +366240,11 @@ ${finalVerifyResult.logs ?? ""}`;
               logs: reproduce.logs,
               failingSource: reproduce.failingSource,
               testVariables: run2.testVariables,
-              testName: run2.testName
+              testName: run2.testName,
+              tags: tagList,
+              failureCount,
+              apiCalls: reproduceApiCalls,
+              uiPathSucceeded
             },
             healerOptions
           );
@@ -364903,7 +366253,8 @@ ${finalVerifyResult.logs ?? ""}`;
             heal,
             finalError: finalRes?.error ?? null,
             reproduceError,
-            testVariables: run2.testVariables
+            testVariables: run2.testVariables,
+            originalSteps: mobileSteps
           });
           await postResult(opts.serverUrl, headers, run2.runId, {
             status: outcome.status,