mobile-debug-mcp 0.34.0 → 0.36.0

package/docs/specs/031-ios-system-traces/pr102-monitor-evidence.json

@@ -0,0 +1,22 @@
+{
+  "source": "built dist iOS sessions/native adapter; injected monitor failures, real Instruments capture",
+  "device": "F9243BAF-62A8-4990-8A99-17F527F56FDA",
+  "runtime": "v23.11.0",
+  "transient_recovery": {
+    "status": "PASS",
+    "injected_command_failures": 2,
+    "trace_id": "a979b090-3ebb-4a95-92d0-9060c8105d45",
+    "pid": 90191,
+    "sample_rows": 7,
+    "artifact_bytes": 10898587
+  },
+  "repeated_timeout": {
+    "status": "PASS",
+    "reason": "ACTION_TIMEOUT",
+    "cleanup": "complete"
+  },
+  "status": "PASS",
+  "build_sha256": "e735ac25c9b0065797b748934efa5f3fc977a538fffef50e464b31ca4603c64a",
+  "cleanup": "Owned captures stopped; fixture and host artifacts removed; simulator shutdown restored separately",
+  "simulator_restored_to_shutdown": true
+}

package/docs/specs/031-ios-system-traces/simulator-evidence.json

@@ -0,0 +1,47 @@
+{
+  "linked_baseline": "PASS; Ready asserted via built-server journey",
+  "journey": {
+    "status": "PASS",
+    "trace_id": "742664b0-c676-4fe8-9231-26cca3c41009",
+    "correlation_id": "5affcc93-6944-4b58-a4a9-0d6cd0a55954",
+    "ready_at_ms": 1793796042115,
+    "journey_submitted_at_ms": 1793796046237,
+    "outcome": "Done visible via journey UI-tree assertion",
+    "sample_rows": 70,
+    "artifact_bytes": 11961327,
+    "warnings": [
+      "INSTRUMENTS_RUN_WARNING: one or more Instruments warnings; coverage may be incomplete."
+    ]
+  },
+  "stale_id": "PASS; rejected tap left prior fixture label visible",
+  "cancel": "PASS",
+  "expiry": "PASS",
+  "failed_journey": "PASS; failure retained capture for explicit stop",
+  "shutdown": "PASS; owned recording and partial directory removed",
+  "app_survived_cleanup": "PASS",
+  "status": "PASS",
+  "build_sha256": "48eee7b1f71403645ab301def8d83dd14585eec099b221f8ac4f6aaba0941282",
+  "runtime": "v23.11.0",
+  "device": "F9243BAF-62A8-4990-8A99-17F527F56FDA",
+  "server": {
+    "name": "mobile-debug-mcp",
+    "version": "0.35.0"
+  },
+  "physical_device": "UNRUN; unsupported initial matrix",
+  "native_failure_injection": "UNRUN on real target; deterministic unit tests separate",
+  "input_toolchain": "Explicit test companion via IDB_COMPANION; see investigation.md",
+  "cleanup": {
+    "trace_errors": [],
+    "fixture_removed": true,
+    "simulator_shutdown": false,
+    "host_artifacts_removed": true
+  },
+  "task_cleanup": {
+    "original_simulator_state": "Shutdown",
+    "restored_simulator_state": "Shutdown",
+    "fixture_absent": true,
+    "temporary_companion_stopped": true,
+    "temporary_framework_alias_removed": true,
+    "named_probe_artifacts_removed": true
+  }
+}

package/docs/specs/031-ios-system-traces/spec.md

@@ -0,0 +1,135 @@
+# iOS system traces — proposed specification
+
+2026-11-04. **Approved** by the user's second “ok” in this chat, responding to
+the complete specification and implementation approval request.
+[Intent](intent.md) approved by the user's “ok” in this chat.
+Source: [issue #78](https://github.com/clivejefferies/mobile-debug-tools/issues/78).
+[Native investigation and limits](investigation.md).
+
+## Supported scope
+
+Extend the existing five system-trace tools with an Instruments backend on macOS
+with full Xcode. Initial supported combination: booted iOS simulator and Time
+Profiler, attached to an already running development app. Baseline is Xcode 27.2
+and iOS 26.4.1. Other versions require successful prerequisite checks and artifact
+validation; installed templates alone do not establish support.
+
+System Trace is discoverable but not enabled initially: the simulator probe did
+not establish scheduling data. Animation Hitches is unsupported on the tested
+simulator. Hangs is an instrument within Time Profiler here, not a selectable
+standalone template; do not promise detected hangs. Physical-device capture is
+explicitly unsupported in this initial release, with verification unrun because
+no device is available. Report pairing, Developer Mode, signing/profiling and
+symbol prerequisites as applicable setup guidance, never as completed checks.
+Expanding this matrix requires evidence and a specification revision.
+
+No host recording, all-processes mode, custom templates, app launching, automatic
+diagnosis, summaries, arbitrary queries, or public export API. Android retains
+its existing preset, inputs, results and verification requirements.
+
+## Tools and contracts
+
+Keep existing names and strict schemas. Extend capabilities and start inputs with
+optional `appId` (nonblank bundle identifier) and `template` enum
+`System Trace | Time Profiler | Animation Hitches | Hangs`. These fields are
+iOS-only; reject them on Android. iOS start requires explicit `deviceId` and
+`appId`; omitted template defaults to Time Profiler. Capabilities require explicit
+`deviceId` on iOS; `appId` optionally probes running-app readiness. Duration stays
+1,000–120,000 ms, default 30,000. Controls still accept only `traceId`.
+
+iOS capabilities return `backend:xctrace`, resolved simulator/device metadata,
+Xcode version, discovered templates, per-template support/reasons/coverage,
+prerequisite states (`available`, `missing`, `unknown`), and actionable recovery.
+Discovery starts no recording and grants no permissions. Distinguish unavailable
+tooling/target, unsupported matrix, app not running, permission failure and checks
+that only a recording can establish. Do not label unknown permissions as granted.
+
+Reuse session state, completion reasons, IDs, host bounds, cleanup and correlation
+fields. Extend result unions to iOS, `backend:xctrace`, and artifact
+`format:instruments` with absolute `.trace` path, recursive `size_bytes`, and
+`kind:directory|file`. Include pinned `app_id`, PID, executable identity,
+selected template, target type, warnings and validation result. Never return raw
+trace data. Unreached fields are null. Errors use existing MCP `isError` and
+TRACE_* codes; bounded reason/recovery values distinguish setup, permission,
+target disconnect, readiness, export and storage failures without raw stderr.
+
+Resolve bundle identity to one current executable/PID on the pinned simulator;
+ambiguous/missing identity fails. Always pass `--device <UDID>` and revalidate
+identity before starting. Do not retry against a different process/name, template,
+device or host. Exported target UUID, PID and template must match the session.
+
+## Lifecycle, limits and privacy
+
+Use uniquely owned mode-0700 temporary directories and fixed argument arrays.
+Spawn the recorder with `--time-limit`, unique output and unique
+`--notify-tracing-started` notification. Register an owned Darwin-notification
+listener before spawning; return recording only after that notification while
+the recorder remains live. Console “Starting recording” alone is insufficient.
+Notification helper availability is a prerequisite, never a silent fallback.
+
+Allow 35 seconds for readiness, 30 seconds for graceful stop/finalisation and
+30 seconds for validation. Bound every child process and cap captured diagnostic
+output. At requested duration, reconcile and finalise automatically. SIGINT only
+the session-owned recorder; after its grace deadline terminate that owned child
+and report failure/partial output. Never signal the app, by process name, or an
+unrelated Instruments recording. On server shutdown cancel owned sessions under
+one 10-second overall deadline; forced cleanup may leave an unreadable artifact
+and must report that. Crashes provide no cleanup guarantee; no restart-wide sweep.
+
+Share the existing one-session-per-device, four-active-session server limit across
+backends. Serialise controls; retain 100 terminal metadata records for ten minutes.
+Stale/other-server IDs fail. Completed controls are idempotent. Disconnect,
+premature recorder exit and journey failure have explicit outcomes; journey failure
+does not cancel capture. Retry validation only on an existing finalised owned
+bundle, never restart recording. Cancel removes owned partial output; completed
+artifacts remain user-managed.
+
+Poll recursive output size every second; stop/discard on exceeding 256 MiB per
+iOS session, reject starts with less than 1 GiB free in its output filesystem.
+Finalisation can temporarily overshoot the polling threshold: report this as a
+soft bound, reject oversized final output and remove it. No symlink traversal.
+Apply restrictive permissions recursively before returning validated output.
+Instruments may contain system-wide metadata, paths, symbols, logs and signposts
+despite app attachment. Disclose this in tool/skill documentation. No upload,
+telemetry or permission bypass, including `--no-prompt`. User handles any required
+OS permissions outside the tool.
+
+## Artifact and journey evidence
+
+Require successful recorder exit, nonempty bounded output, parseable
+`xctrace export --toc`, matching target/app/template metadata, expected
+`time-sample` schema and successful table export. Record row count, including zero;
+zero samples means no CPU sample evidence, not diagnosed inactivity. Do not call
+a failed recording valid merely because a readable partial bundle exists.
+Expose warnings and unavailable instruments; do not claim symbolication unless
+verified. Validation exports are private temporary data removed after validation.
+
+Keep `run_journey.systemTraceId` explicit. Validate active same-server,
+same-platform/same-UDID session before any journey input. Link journey and step
+evidence through existing trace context and correlation IDs. The trace pins the
+profiled app; journey actions retain their existing targeting semantics and may
+leave that app. Report that limitation. Duration expiry or stop during the journey
+means partial coverage. Host capture bounds and unknown device-clock alignment
+establish association only; no device markers or causal inference.
+
+## Acceptance and verification
+
+1. Capability matrix and rejected inputs are side-effect-free, with exact target
+   and actionable prerequisite reasons; unknown permissions stay unknown.
+2. Updated-server simulator Time Profiler start → existing fixture journey tapping
+   Show loader and asserting Done → stop yields matching IDs, target/app metadata,
+   notification-before-input evidence, readable bundle and exported sample rows.
+3. Deterministic checks cover stale/mismatched IDs preventing all input, ownership,
+   concurrency, expiry, cancellation, partial coverage, disconnect, identity races,
+   notification/start/stop/export/storage failures, retries and shutdown cleanup.
+4. Real simulator checks cover explicit stop, expiry, cancellation and failed
+   journey; unavailable physical/failure-injection evidence is separate from mocks.
+5. Existing Android traces and untraced journeys pass regression checks. Run
+   `npm run verify`, applicable `npm run test:device`, and focused updated-server
+   calls; report actual suite coverage and unrun platforms.
+
+Affected: trace sessions/adapters/types, schemas/registration/handlers, journey and
+evidence integration, shutdown, tests/goldens, tool docs, README, changelog and
+packaged usage skill. Main implementation risks remain notification readiness,
+reliable app identity resolution and finalisation deadlines; feasibility probes
+do not establish these acceptance criteria.

package/docs/specs/032-ios-runtime-debugger/evidence.json

@@ -0,0 +1,176 @@
+{
+  "date": "2026-11-04",
+  "status": "PASS",
+  "transport": "MCP stdio",
+  "runtime": "v23.11.0",
+  "deviceId": "F9243BAF-62A8-4990-8A99-17F527F56FDA",
+  "server_sha256": "6a00a33d994a449ecbb54d5dbf894780f48a1c0e5a89fc871b91dd7048f4ecdc",
+  "source_sha256": "295ff0f30f5670530f9cdd7073b958917c1c574ccca9c7b921e295d0d902b699",
+  "xcode": "Xcode 27.2\nBuild version 27B52",
+  "lldb": "lldb-2103.0.34.407\nApple Swift version 6.4.2 (swiftlang-6.4.2.1.9 clang-2100.4.1.1)",
+  "fixture": "test/fixtures/ios-debugger-app/Main.swift",
+  "fixture_triggers": "Atomic command file; installed idb HID backend unavailable; not proof of successful MCP tap injection",
+  "extended_pause_expiry": true,
+  "process_exit": true,
+  "server_shutdown_recovery": true,
+  "tests_sha256": "37fbda265b5735b1b826aa448aa937359c45db0e55f8f1998a169b1aa3073acc",
+  "observations": [
+    {
+      "reason": "breakpoint",
+      "line": 49,
+      "method": "DebuggerFixture.Controller.calculate() -> ()"
+    },
+    {
+      "reason": "step",
+      "line": 8,
+      "method": "DebuggerFixture.helper(Swift.Int) -> Swift.Int"
+    },
+    {
+      "reason": "step",
+      "line": 9,
+      "method": "DebuggerFixture.helper(Swift.Int) -> Swift.Int"
+    },
+    {
+      "reason": "step",
+      "line": 49,
+      "method": "DebuggerFixture.Controller.calculate() -> ()"
+    },
+    {
+      "reason": "breakpoint",
+      "line": 20,
+      "method": "(1) suspend resume partial function for DebuggerFixture.AsyncWork.calculate(Swift.Int) async -> Swift.Int"
+    },
+    {
+      "reason": "breakpoint",
+      "line": 21,
+      "method": "(3) suspend resume partial function for DebuggerFixture.AsyncWork.calculate(Swift.Int) async -> Swift.Int"
+    },
+    {
+      "reason": "breakpoint",
+      "line": 20,
+      "method": "(1) suspend resume partial function for DebuggerFixture.AsyncWork.calculate(Swift.Int) async -> Swift.Int"
+    },
+    {
+      "reason": "step",
+      "line": 21,
+      "method": "(3) suspend resume partial function for DebuggerFixture.AsyncWork.calculate(Swift.Int) async -> Swift.Int"
+    },
+    {
+      "reason": "breakpoint",
+      "line": 66,
+      "method": "(3) suspend resume partial function for closure #1 () async -> () in DebuggerFixture.Controller.startCancellation() -> ()"
+    },
+    {
+      "reason": "breakpoint",
+      "line": 49,
+      "method": "DebuggerFixture.Controller.calculate() -> ()"
+    },
+    {
+      "reason": "breakpoint",
+      "line": 49,
+      "method": "DebuggerFixture.Controller.calculate() -> ()"
+    }
+  ],
+  "locals": [
+    [
+      {
+        "name": "known",
+        "type": "Swift.Int",
+        "value": "41"
+      }
+    ],
+    [
+      {
+        "name": "seed",
+        "type": "Swift.Int",
+        "value": "42"
+      },
+      {
+        "name": "known",
+        "type": "Swift.Int",
+        "value": "42"
+      }
+    ],
+    [
+      {
+        "name": "seed",
+        "type": "Swift.Int",
+        "value": "42"
+      },
+      {
+        "name": "known",
+        "type": "Swift.Int",
+        "value": "42"
+      },
+      {
+        "name": "after",
+        "type": "Swift.Int",
+        "value": "43"
+      }
+    ],
+    [
+      {
+        "name": "cancelled",
+        "type": "Swift.Bool",
+        "value": "true"
+      }
+    ]
+  ],
+  "async_boundary_step": {
+    "expected_line": 21,
+    "observed": {
+      "source_file": "test/fixtures/ios-debugger-app/Main.swift",
+      "line": 21,
+      "method_name": "(3) suspend resume partial function for DebuggerFixture.AsyncWork.calculate(Swift.Int) async -> Swift.Int",
+      "class_name": null
+    }
+  },
+  "assertions": [
+    "Exact source binding and pending source creation",
+    "Known primitive locals",
+    "Into/over/out",
+    "Stop/frame stale rejection",
+    "Paused tap rejected before dispatch",
+    "Paused readiness without UI acquisition",
+    "Cancelled event wait preserves session",
+    "Before/after await values and nested async child",
+    "Step over await reaches after-await source line",
+    "Task cancellation and fresh Task cancelled UI",
+    "Real 60-second pause expiry and fresh result UI",
+    "Target self-exit, disconnected state and complete cleanup",
+    "Idempotent detach with no remaining resources",
+    "Server shutdown while paused then independent UI recovery"
+  ],
+  "unrun": [
+    "physical iOS devices",
+    "other Xcode/Swift versions",
+    "optimized apps",
+    "installed/published package",
+    "forced host termination",
+    "real device disconnect",
+    "live idle/absolute expiry",
+    "late-loaded-image binding"
+  ],
+  "scope": "Focused real MCP iOS simulator debugger journey, including extended pause expiry",
+  "repository_verification": {
+    "status": "PASS",
+    "unit_files": 96,
+    "command": "npm run verify"
+  },
+  "broader_device_suite": {
+    "status": "FAIL",
+    "observations": [
+      "Initial Android interaction SDK timeout; isolated unchanged retry passed",
+      "Retry failed Android Perfetto shutdown-artifact assertion; isolated baseline and current checks passed"
+    ],
+    "root_cause": "unestablished",
+    "full_suite_pass_claimed": false
+  },
+  "cleanup": {
+    "ios_simulator": "restored to initial shutdown state",
+    "swift_fixture_build_directories_remaining": 0,
+    "owned_adb_forwards_remaining": 0,
+    "owned_perfetto_artifacts_remaining": 0,
+    "unrelated_installed_fixtures": "preserved"
+  }
+}

package/docs/specs/032-ios-runtime-debugger/intent.md

@@ -0,0 +1,38 @@
+# iOS runtime debugger — intent
+
+- Source: [issue #70](https://github.com/clivejefferies/mobile-debug-tools/issues/70), and the user's 2026-11-04 request to take the next Ready ticket with Android-equivalent functionality, including async debugging.
+- Originator: user in this chat.
+- Captured: 2026-11-04.
+- Status: intent approved by the user's “ok” on 2026-11-04 in response to the scope and approval request in this chat. Specification also approved in this chat on 2026-11-04; see spec.md. Issue #70 matches the roadmap and current branch; Ready-column membership could not be checked because GitHub authentication lacks `read:project`.
+
+## Problem and outcome
+
+MCP clients can debug Android development apps but lack equivalent iOS runtime
+inspection. Add an LLDB-backed debugger for iOS simulator development apps,
+reusing the existing debugger tools and session/evidence conventions where
+appropriate. Support attach, source breakpoints and events, bounded stacks and
+shallow locals, stepping, resume and detach, with explicit capabilities and
+actionable setup failures.
+
+## Async parity and success
+
+Verify a deterministic Swift concurrency fixture with source stops and useful
+locals before and after `await`, resumed execution, nested task work, task
+cancellation and application recovery. Assess stepping across suspension and
+report its observed limits. Android's existing coroutine assessment establishes
+execution inspection, not reconstruction of suspended tasks or logical async
+stacks; distinguish those capabilities explicitly on iOS too.
+
+Preserve stale-reference rejection, pause-aware interaction guards, bounded
+waits/cancellation, session isolation, expiry and owned cleanup. Prove the journey
+through actual MCP calls and independent fixture outcomes, and retain Android
+regression coverage. Report unavailable environments honestly.
+
+## Constraints and questions
+
+Physical-device support follows separately. Evaluation, mutation, arbitrary LLDB
+commands and generic suspended-task reconstruction are excluded from this initial
+scope. Inspect LLDB/Xcode support for async frames and stepping before proposing
+the exact capability contract. Debug values remain bounded and sensitive; avoid
+persisting app data in public evidence. Specification approval follows intent
+acceptance under the repository process.

package/docs/specs/032-ios-runtime-debugger/plan.md

@@ -0,0 +1,95 @@
+# iOS runtime debugger — implementation and verification
+
+Scope: [intent](intent.md) and [specification](spec.md), both approved by the user
+on 2026-11-04. Use the repository MCP Builder and Test Authoring skills.
+
+## Implementation
+
+- [x] Establish LLDB Python loading and explicit simulator/process attribution.
+- [x] Add structured LLDB worker, safe inspection, exact breakpoints and watchdogs.
+- [x] Reuse session lifecycle with platform-specific native/worker configuration;
+      update schemas, dispatch, diagnostics, guards and readiness.
+- [x] Add deterministic Swift simulator fixture and MCP runtime/async journeys.
+- [x] Add contract, identity, lifecycle and guard regression tests; update tool
+      compatibility golden only for approved schema changes.
+- [x] Align debugger guide, tool reference, README, changelog and packaging.
+- [x] Review diff, execute required verification and record actual results below.
+      Full-suite success remains unestablished; see the failed checks below.
+
+## Verification matrix
+
+| Spec criterion | Check |
+| --- | --- |
+| Core runtime flow | `MCP_IOS_DEBUGGER_DEVICE=<UDID> node --import tsx test/device/automated/debugger/runtime.ios.test.ts` through built stdio server |
+| Async/cancellation | Same journey with controlled before/after-await values, nested work, cancellation and fresh UI assertions; separate step-boundary result |
+| Identity, failure, references and guards | Focused `test/unit/debugger/*.test.ts`, simulator invalid PID/foreign target, stale frame/stop, guarded input/readiness, event cancellation and detach |
+| Expiry and shutdown | Worker watchdog unit checks plus real pause expiry and server EOF cleanup in fixture journey |
+| Contract/Android regression | `npm run verify`; existing runtime, Kotlin and coroutine Android MCP checks on explicit emulator |
+| Broader device compatibility | `npm run test:device` with selected targets; report the actual covered platforms and skipped prerequisites |
+
+Required: Node 22+, installed Xcode 27.2/Swift 6.4.2/LLDB 2103.0.34.407,
+simulator runtime, development fixture compiled with debug metadata and no
+optimisation. Android regressions require existing JDK/SDK/Kotlin dependencies.
+No physical-device iOS support is claimed. Hosted CI is separate from local checks.
+
+Select existing simulator F9243BAF-62A8-4990-8A99-17F527F56FDA (iPhone 17 Pro,
+iOS 26.4), initially shut down. Boot it for the fixture; preserve existing apps
+and settings, install/remove only fixture-owned app/build files, detach owned
+debuggers, and restore the initial shutdown state. Record exact server/fixture
+hashes, observed stops/locals, independent UI state and cleanup. Simulator access
+requires outside-sandbox native commands; the authorised inventory read succeeded.
+If a prerequisite is unavailable, retain the acceptance criterion and record a
+concrete blocker. Do not treat mock/native readiness checks as live verification.
+
+## Results
+
+- **PASS** `npm run verify`: lint/quality/architecture, build, all 96 unit files,
+  plugin consistency, Node 23.11.0. Log `/tmp/ios-debugger-final-verify.log`.
+- **PASS** `MCP_IOS_DEBUGGER_DEVICE=F9243BAF-62A8-4990-8A99-17F527F56FDA MCP_IOS_DEBUGGER_EXTENDED=1 node --import tsx test/device/automated/debugger/runtime.ios.test.ts`.
+  Exact stable-build hash, stops, locals and asserted cleanup/recovery are in
+  [evidence.json](evidence.json). No HID success is inferred from fixture control.
+- **PASS** focused Android runtime, Kotlin locals and coroutine MCP regressions
+  using the existing fixture/compiler dependencies. The broader suite also reran
+  the final Android runtime debugger successfully.
+- **PASS** unchanged standalone iOS screenshot, log and UI-tree smoke checks.
+- **PASS** package dry-run contents, plugin generation/consistency and diff/link
+  checks. No publication or installed-package verification occurred.
+- **FAIL** broader `ADB_PATH=/Users/clivejefferies/Library/Android/sdk/platform-tools/adb MCP_DEBUGGER_DEVICE=emulator-5554 npm run test:device`: initial Android
+  interaction request timeout; focused unchanged retry passed. The full-suite
+  retry passed that branch and both-platform observations/correlated evidence,
+  then failed Android Perfetto active-shutdown artifact removal. The isolated
+  Perfetto check passed on both unchanged HEAD and current build. These failures
+  remain unreproduced and unexplained; no full-suite pass is claimed.
+- Full-suite opt-in Kotlin/coroutine/iOS debugger checks were **UNRUN** in that
+  invocation; each passed its separate focused run above. iOS system tracing was
+  **UNRUN** (no `IOS_SYSTEM_TRACE_DEVICE` supplied); it is outside this feature.
+- **PASS** owned cleanup: no MCP device trace files or ADB forwards remained;
+  debugger/coroutine packages and Swift build directories removed. Unrelated
+  fixtures preserved; iOS simulator restored to shutdown; Android emulator left
+  running. Temporary baseline source/build copy removed.
+
+See [verification report](report.md) for evidence boundaries, resolved findings,
+unrun variants and original failed observations.
+
+
+## PR #103 review repair
+
+- [x] Cache shared iOS preparation and reset rejected preparation for retry.
+- [x] Add fake-toolchain coverage for concurrent reuse, retry and worker creation.
+- [x] Check real Xcode cached preparation and rerun the focused iOS MCP journey.
+- [x] Complete quiet repository verification (97 unit files); publish the repair to PR #103.
+
+See the [report follow-up](report.md#pr-103-preparation-cache-follow-up--2026-11-04)
+for exact evidence and retained broader-suite limitations.
+
+
+## PR #103 stored-handle pause guard repair
+
+- [x] Validate guard targets through the stored-handle execution lookup.
+- [x] Cover omitted/partial hints, known/racing pauses, platform/device isolation,
+      and explicit mismatches; prove regression detects the original route.
+- [x] Run `npm run verify` (98 unit files) and the updated real iOS MCP journey.
+- [x] Restore fixture/device state and prepare the narrow repair for PR publication.
+
+The finding is in an outside-diff review summary, with no new inline thread to
+resolve. See the [report](report.md) for exact evidence and retained limitations.