peachsim 0.1.2224 → 0.1.2228

package/cli/bridge-flow-runner.ts

@@ -840,6 +840,38 @@ const MAESTRO_LOCATION_STATUS: Record<
   ],
 }
 
+export type LaunchPermissionStatuses = ReadonlyMap<
+  SystemPermissionKind,
+  SystemPermissionStatus
+>
+
+// the permissions of a flow whose first step is a launchApp that only launches:
+// no state or keychain reset, arguments, runtime reset or foreground. a sim
+// opened for that flow can deposit them before its app first boots.
+export function firstPlainLaunchPermissions(
+  steps: readonly (MaestroStep | string)[],
+): LaunchPermissionStatuses | null {
+  const first = steps[0]
+  if (first === undefined) return null
+  const step = typeof first === 'string' ? normalizeBareStringStep(first) : first
+  if (!step.launchApp || JSON.stringify(step.launchApp).includes('${')) return null
+  return plainLaunchPermissions(step.launchApp)
+}
+
+function plainLaunchPermissions(opts: unknown): LaunchPermissionStatuses | null {
+  if (
+    isObjectRecord(opts) &&
+    (opts.clearState ||
+      opts.clearKeychain === true ||
+      opts.resetRuntime === true ||
+      opts.stopApp === false ||
+      Object.prototype.hasOwnProperty.call(opts, 'arguments'))
+  ) {
+    return null
+  }
+  return maestroLaunchPermissions(isObjectRecord(opts) ? opts.permissions : undefined)
+}
+
 function maestroLaunchPermissions(
   permissions: unknown,
 ): Map<SystemPermissionKind, SystemPermissionStatus> {
@@ -1068,6 +1100,10 @@ class CaptureSetupError extends Error {
 export class SootSimBridgeFlowRunner {
   stepDelay = 0
 
+  // the launch permissions the open that started this sim deposited before
+  // its app booted, while that boot is still the app's only one
+  seededLaunchPermissions: LaunchPermissionStatuses | null = null
+
   // maestro-compatible JS context for the whole flow run (shared with
   // runFlow sub-flows): `${...}` templates, runScript, evalScript, output,
   // maestro.copiedText. one per runner = one per flow file, like upstream.
@@ -3046,7 +3082,10 @@ export class SootSimBridgeFlowRunner {
       if (!this.firstLaunchDone && !this.appStopped) await this.waitForTree(120000)
       await this.clearKeychain()
     }
-    await this.setLaunchPermissions(isObjectRecord(opts) ? opts.permissions : undefined)
+    const bootedByOpen = this.openBootIsLaunch(opts)
+    if (!bootedByOpen) {
+      await this.setLaunchPermissions(isObjectRecord(opts) ? opts.permissions : undefined)
+    }
 
     if (!this.firstLaunchDone) {
       this.firstLaunchDone = true
@@ -3083,8 +3122,9 @@ export class SootSimBridgeFlowRunner {
         await this.waitForTree(120000)
         await this.waitForTree(30000)
       } else {
-        const launched = await this.launchShellAppFromHomeIfNeeded(opts)
-        if (!launched && !wantsForeground) {
+        const launched =
+          !bootedByOpen && (await this.launchShellAppFromHomeIfNeeded(opts))
+        if (!launched && !wantsForeground && !bootedByOpen) {
           await this.waitForTree(120000)
           await this.reloadGuestAppRuntime({
             launchArguments: null,
@@ -3134,6 +3174,19 @@ export class SootSimBridgeFlowRunner {
     }
   }
 
+  // maestro sets permissions and then launches. a sim opened with this
+  // step's permissions already deposited has done both in its one boot.
+  private openBootIsLaunch(opts: unknown): boolean {
+    const seeded = this.seededLaunchPermissions
+    if (!seeded || this.firstLaunchDone || this.appStopped) return false
+    const wanted = plainLaunchPermissions(opts)
+    return (
+      wanted !== null &&
+      wanted.size === seeded.size &&
+      [...wanted].every(([kind, status]) => seeded.get(kind) === status)
+    )
+  }
+
   private async setLaunchPermissions(permissions: unknown) {
     const statuses = maestroLaunchPermissions(permissions)
     const appId = await this.callTest<string>('permissionGuestAppId')

package/cli/commands/control.ts

@@ -8,6 +8,7 @@ import path from 'node:path'
 import { compareSemver } from '@contrast/runtime-delivery'
 import { WebSocket } from 'ws'
 import { formatLockOwner } from '../../../peach-kit/src/agent-identity'
+import { buildPermissionSeedScript } from '../../detox/launch-permissions'
 import { ANDROID_ROOT_MODULE_QUERY_PARAM } from '../../src/androidRootModuleContract'
 import { isAppDeepLinkTarget, openAppUrl } from '../../src/app-url'
 import { isLoopbackHost } from '../../src/backend-origin'
@@ -115,6 +116,7 @@ import {
 } from './shell-url'
 import { hasInstalledPeachSkills } from './skills'
 import type { DriverId, DriverLaunchResult } from '../drivers/types'
+import type { SystemPermissionBootSeed } from '@peach/globals'
 
 interface ControlCommandOptions {
   port?: number
@@ -123,6 +125,8 @@ interface ControlCommandOptions {
 }
 
 export interface OpenCommandResources {
+  // the launch permissions were deposited ahead of the opened app's boot
+  launchPermissionsSeeded?: boolean
   bridge?: ReturnType<typeof spawn>
   bridgeReady?: boolean
   port?: number
@@ -1383,6 +1387,9 @@ async function dispatchAppLink(
 }
 
 type OpenCommandOptions = ControlCommandOptions & {
+  // permissions the app this open boots holds from its first read, as a
+  // test runner sets them before it launches the app
+  launchPermissions?: SystemPermissionBootSeed['presets']
   resources?: OpenCommandResources
   signal?: AbortSignal
   ownerPid?: number
@@ -2270,8 +2277,23 @@ async function openSim(
   }
   const connectWait = resolveDriverConnectWaitOptions()
   opts.signal?.throwIfAborted()
+  // the engine applies an ownerless seed to the app its url boots, on ios
+  const seededLaunchPermissions =
+    driverId === 'playwright' &&
+    shellUrlPlatform(builtShellUrl) === 'ios' &&
+    getCliRuntime().render_worker_app_load.isAppBootTargetUrl(builtShellUrl)
+      ? opts.launchPermissions
+      : undefined
   const result = await driver.launch({
     url: openUrl,
+    bootScript:
+      seededLaunchPermissions &&
+      buildPermissionSeedScript({
+        appId: null,
+        platform: 'ios',
+        presets: seededLaunchPermissions,
+        grantInstallPermissions: false,
+      }),
     // the shell serves the sim page but its WS bridge may have drifted off
     // the shell-port-implied default. inject the bridge this command settled
     // on so the page does not reconnect to a stale world. re-deriving it from
@@ -2300,7 +2322,11 @@ async function openSim(
         : undefined),
     connectTimeoutMs: connectWait.hostTimeoutMs,
   })
-  if (opts.resources) opts.resources.driver = { ...result, driverId }
+  if (opts.resources) {
+    opts.resources.driver = { ...result, driverId }
+    opts.resources.launchPermissionsSeeded =
+      seededLaunchPermissions !== undefined && result.launched
+  }
   opts.signal?.throwIfAborted()
   if (!result.launched) {
     console.error(`  ${driver.name} driver: ${result.message}`)

package/cli/commands/flow.ts

@@ -12,7 +12,9 @@ import { devices, type DeviceModel } from '../../src/device-catalog.ts'
 import { SOOTSIM_SHELL_COMMAND_NAME } from '../../src/menu'
 import { printBridgeFailureDiagnostics } from '../bridge-diagnostics'
 import {
+  firstPlainLaunchPermissions,
   SootSimBridgeFlowRunner,
+  type LaunchPermissionStatuses,
   type MaestroStep,
   type SootSimFlowProfileResult,
   type SootSimFlowTraceStep,
@@ -563,6 +565,11 @@ flow extension:
   let closeFlowOwnedSimAfterRun = false
   let openedSimId: string | undefined
   const ownedSimIds = new Set<string>()
+  // maestro sets a launchApp's permissions and then launches. a sim this run
+  // opens takes them, and the flow's theme, ahead of its app's boot, so that
+  // boot is the launch and the step boots nothing again.
+  const firstLaunchPermissions = firstPlainLaunchPermissions(steps)
+  let seededLaunchPermissions: LaunchPermissionStatuses | null = null
 
   // if we weren't told exactly where to go, and there's already a primary
   // open tab, just reuse it. opening a fresh tab that auto-discovers some
@@ -614,6 +621,12 @@ flow extension:
     const openArgs = [openTarget]
     if (pinnedShellBaseUrl) openArgs.push('--base-url', pinnedShellBaseUrl)
     if (targetDevice) openArgs.push('--device', targetDevice)
+    if (
+      firstLaunchPermissions &&
+      (targetTheme === 'light' || targetTheme === 'dark' || targetTheme === 'auto')
+    ) {
+      openArgs.push('--theme', targetTheme)
+    }
     const iosTarget = getFlag('--ios-target')
     if (iosTarget) openArgs.push('--ios-target', iosTarget)
     const appFontsDir = getFlag('--app-fonts-dir')
@@ -647,6 +660,14 @@ flow extension:
       ...(parsedBridgeArgs.explicitPort ? { port: parsedBridgeArgs.wsPort } : {}),
       timeoutMs: parsedBridgeArgs.commandTimeoutMs,
       resources: openResources,
+      ...(firstLaunchPermissions
+        ? {
+            launchPermissions: [...firstLaunchPermissions].map(([kind, status]) => ({
+              kind,
+              mutation: { status },
+            })),
+          }
+        : {}),
       // a prebuilt bundle file carries its own configuration footer; the registry's
       // copy names files by this checkout's paths and would never match it
       runtimeConfig: openTarget.endsWith('.js')
@@ -654,6 +675,9 @@ flow extension:
         : targetAppResolution.runtimeConfig,
     })
     openedSimId = opened?.simId
+    if (openResources.launchPermissionsSeeded) {
+      seededLaunchPermissions = firstLaunchPermissions
+    }
     // the steps must talk to the bridge open actually settled on, not the
     // pre-open default. without this a default 7668 held by an unrelated
     // server keeps the flow on 7668 while open serves from 7669.
@@ -872,6 +896,8 @@ flow extension:
       }
       const deviceChanged = await applySimSettings()
       if (deviceChanged && !startsWithLaunchApp) await driver.waitForTree(120000)
+      // a device change reloads the page, which is a second boot without the seed
+      if (!deviceChanged) driver.seededLaunchPermissions = seededLaunchPermissions
       // preview replay must reproduce the SAME initial conditions the agent
       // explored from. the explore session runs on a fresh ephemeral profile
       // (cold, logged-out), so its recorded steps assume that cold start —

package/cli/commands/package.ts

@@ -125,11 +125,18 @@ async function primeCodeCache(app: string, home: string): Promise<void> {
     fs.readFileSync(record, 'utf8'),
   )
   const bridgeEnv = { ...env, PEACH_BRIDGE_PORT: String(service.bridgePort) }
-  // the cli finds no sim until the host's page reaches the app's service
+  // the cli finds no sim until the host's page reaches the app's service. a first screen may
+  // animate for as long as it shows (a spinner while it connects), so the launch counts once painted
   for (;;) {
     const ready = spawnSync(
       peach,
-      ['wait', 'ready', '--max-ms', String(Math.max(1000, deadline - Date.now()))],
+      [
+        'wait',
+        'ready',
+        '--painted',
+        '--max-ms',
+        String(Math.max(1000, deadline - Date.now())),
+      ],
       { env: bridgeEnv, encoding: 'utf8' },
     )
     if (ready.status === 0) break

package/cli/drivers/playwright.ts

@@ -272,6 +272,7 @@ async function launch(opts: DriverLaunchOptions): Promise<DriverLaunchResult> {
           PEACH_PW_FETCH_PROXY_SPKI: fetchProxySpki,
           SOOTSIM_PW_BRIDGE_PORT: opts.bridgePort ? String(opts.bridgePort) : '',
           SOOTSIM_PW_HEADLESS: headless ? '1' : '0',
+          PEACH_PW_BOOT_SCRIPT: opts.bootScript ?? '',
           SOOTSIM_PW_USERDATADIR: resolveUserDataDir(opts),
           SOOTSIM_PW_CDP_PORT: cdpPort ? String(cdpPort) : '',
           PEACH_PW_HOST_COMMAND: hostCommand ? JSON.stringify(hostCommand) : '',

package/cli/drivers/types.ts

@@ -71,6 +71,9 @@ export interface DriverLaunchOptions {
   // boot -> bridge on :7669 while the shell kept :5173): the page's own
   // shell-port heuristic would compute the stale :7668 and never connect.
   bridgePort?: number
+  // a script the sim page runs ahead of its own, for state the engine reads
+  // before its first boot. only the playwright driver honors it.
+  bootScript?: string
 }
 
 export interface DriverCompletion {

package/cli/internal-child.ts

@@ -16,6 +16,7 @@ import {
   accessSync,
   constants,
   existsSync,
+  realpathSync,
   readdirSync,
   readFileSync,
   writeFileSync,
@@ -194,8 +195,9 @@ export async function runScript(scriptPath: string, args: string[]): Promise<voi
     const stripper = new (nodeRequire('bun').Transpiler)({ loader: 'ts' })
     nodeModule.stripTypeScriptTypes = (code: string) => stripper.transformSync(code)
   }
-  process.argv = [process.argv[0], scriptPath, ...args]
-  await import(/* @vite-ignore */ pathToFileURL(scriptPath).href)
+  const entryPath = realpathSync(scriptPath)
+  process.argv = [process.argv[0], entryPath, ...args]
+  await import(/* @vite-ignore */ pathToFileURL(entryPath).href)
 }
 
 /** the detached browser host. its source is CJS that resolves playwright from

package/dist-lib/agent-daemon-client.cjs

@@ -1,4 +1,4 @@
-/*! peach v0.1.2224 | (c) 2026 Tamagui LLC | Proprietary; see LICENSE */
+/*! peach v0.1.2228 | (c) 2026 Tamagui LLC | Proprietary; see LICENSE */
 let __sootsim_import_meta_url = '', __sootsim_import_meta_dirname = '', __sootsim_import_meta_filename = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; __sootsim_import_meta_dirname = __dirname; __sootsim_import_meta_filename = __filename; } catch {}
 "use strict";
 var __create = Object.create;

package/dist-lib/agent-events.cjs

@@ -1,4 +1,4 @@
-/*! peach v0.1.2224 | (c) 2026 Tamagui LLC | Proprietary; see LICENSE */
+/*! peach v0.1.2228 | (c) 2026 Tamagui LLC | Proprietary; see LICENSE */
 let __sootsim_import_meta_url = '', __sootsim_import_meta_dirname = '', __sootsim_import_meta_filename = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; __sootsim_import_meta_dirname = __dirname; __sootsim_import_meta_filename = __filename; } catch {}
 "use strict";
 var __defProp = Object.defineProperty;

package/dist-lib/attached-projects.cjs

@@ -1,4 +1,4 @@
-/*! peach v0.1.2224 | (c) 2026 Tamagui LLC | Proprietary; see LICENSE */
+/*! peach v0.1.2228 | (c) 2026 Tamagui LLC | Proprietary; see LICENSE */
 let __sootsim_import_meta_url = '', __sootsim_import_meta_dirname = '', __sootsim_import_meta_filename = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; __sootsim_import_meta_dirname = __dirname; __sootsim_import_meta_filename = __filename; } catch {}
 "use strict";
 var __create = Object.create;

package/dist-lib/auth/shared-session.cjs

@@ -1,4 +1,4 @@
-/*! peach v0.1.2224 | (c) 2026 Tamagui LLC | Proprietary; see LICENSE */
+/*! peach v0.1.2228 | (c) 2026 Tamagui LLC | Proprietary; see LICENSE */
 let __sootsim_import_meta_url = '', __sootsim_import_meta_dirname = '', __sootsim_import_meta_filename = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; __sootsim_import_meta_dirname = __dirname; __sootsim_import_meta_filename = __filename; } catch {}
 "use strict";
 var __create = Object.create;

package/dist-lib/backend-origin.cjs

@@ -1,4 +1,4 @@
-/*! peach v0.1.2224 | (c) 2026 Tamagui LLC | Proprietary; see LICENSE */
+/*! peach v0.1.2228 | (c) 2026 Tamagui LLC | Proprietary; see LICENSE */
 let __sootsim_import_meta_url = '', __sootsim_import_meta_dirname = '', __sootsim_import_meta_filename = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; __sootsim_import_meta_dirname = __dirname; __sootsim_import_meta_filename = __filename; } catch {}
 "use strict";
 var __defProp = Object.defineProperty;

package/dist-lib/beta.cjs

@@ -1,4 +1,4 @@
-/*! peach v0.1.2224 | (c) 2026 Tamagui LLC | Proprietary; see LICENSE */
+/*! peach v0.1.2228 | (c) 2026 Tamagui LLC | Proprietary; see LICENSE */
 let __sootsim_import_meta_url = '', __sootsim_import_meta_dirname = '', __sootsim_import_meta_filename = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; __sootsim_import_meta_dirname = __dirname; __sootsim_import_meta_filename = __filename; } catch {}
 "use strict";
 var __defProp = Object.defineProperty;

package/dist-lib/beta.mjs

@@ -1,4 +1,4 @@
-/*! peach v0.1.2224 | (c) 2026 Tamagui LLC | Proprietary; see LICENSE */
+/*! peach v0.1.2228 | (c) 2026 Tamagui LLC | Proprietary; see LICENSE */
 
 // src/beta.ts
 var IS_BETA = true;

package/dist-lib/bridge-constants.cjs

@@ -1,4 +1,4 @@
-/*! peach v0.1.2224 | (c) 2026 Tamagui LLC | Proprietary; see LICENSE */
+/*! peach v0.1.2228 | (c) 2026 Tamagui LLC | Proprietary; see LICENSE */
 let __sootsim_import_meta_url = '', __sootsim_import_meta_dirname = '', __sootsim_import_meta_filename = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; __sootsim_import_meta_dirname = __dirname; __sootsim_import_meta_filename = __filename; } catch {}
 "use strict";
 var __defProp = Object.defineProperty;

package/dist-lib/bridge-contract-input.cjs

@@ -1,4 +1,4 @@
-/*! peach v0.1.2224 | (c) 2026 Tamagui LLC | Proprietary; see LICENSE */
+/*! peach v0.1.2228 | (c) 2026 Tamagui LLC | Proprietary; see LICENSE */
 let __sootsim_import_meta_url = '', __sootsim_import_meta_dirname = '', __sootsim_import_meta_filename = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; __sootsim_import_meta_dirname = __dirname; __sootsim_import_meta_filename = __filename; } catch {}
 "use strict";
 var __defProp = Object.defineProperty;

package/dist-lib/bridge-contract-input.mjs

@@ -1,4 +1,4 @@
-/*! peach v0.1.2224 | (c) 2026 Tamagui LLC | Proprietary; see LICENSE */
+/*! peach v0.1.2228 | (c) 2026 Tamagui LLC | Proprietary; see LICENSE */
 
 // src/bridge-contract.ts
 var SIM_LONG_PRESS_MAX_MS = 5e3;

package/dist-lib/bridge-contract.cjs

@@ -1,4 +1,4 @@
-/*! peach v0.1.2224 | (c) 2026 Tamagui LLC | Proprietary; see LICENSE */
+/*! peach v0.1.2228 | (c) 2026 Tamagui LLC | Proprietary; see LICENSE */
 let __sootsim_import_meta_url = '', __sootsim_import_meta_dirname = '', __sootsim_import_meta_filename = ''; try { __sootsim_import_meta_url = require('url').pathToFileURL(__filename).href; __sootsim_import_meta_dirname = __dirname; __sootsim_import_meta_filename = __filename; } catch {}
 "use strict";
 var __defProp = Object.defineProperty;

package/dist-lib/bridge-contract.mjs

@@ -1,4 +1,4 @@
-/*! peach v0.1.2224 | (c) 2026 Tamagui LLC | Proprietary; see LICENSE */
+/*! peach v0.1.2228 | (c) 2026 Tamagui LLC | Proprietary; see LICENSE */
 
 // src/bridge-contract.ts
 var REFUSED_PERFORM_STEP_TYPES = [