prowl-tools 0.1.6 → 0.1.8

package/dist/lib.cjs

@@ -37,12 +37,12 @@ __export(visual_exports, {
   ensureBaselineDir: () => ensureBaselineDir
 });
 async function compareScreenshots(baselinePath, currentPath, diffPath, threshold) {
-  const baselineData = import_pngjs.PNG.sync.read(import_node_fs8.default.readFileSync(baselinePath));
-  const currentData = import_pngjs.PNG.sync.read(import_node_fs8.default.readFileSync(currentPath));
+  const baselineData = import_pngjs.PNG.sync.read(import_node_fs9.default.readFileSync(baselinePath));
+  const currentData = import_pngjs.PNG.sync.read(import_node_fs9.default.readFileSync(currentPath));
   const { width, height } = baselineData;
   if (currentData.width !== width || currentData.height !== height) {
     const diff2 = new import_pngjs.PNG({ width, height });
-    import_node_fs8.default.writeFileSync(diffPath, import_pngjs.PNG.sync.write(diff2));
+    import_node_fs9.default.writeFileSync(diffPath, import_pngjs.PNG.sync.write(diff2));
     return {
       match: false,
       diffPercentage: 1,
@@ -60,7 +60,7 @@ async function compareScreenshots(baselinePath, currentPath, diffPath, threshold
   );
   const totalPixels = width * height;
   const diffPercentage = diffPixels / totalPixels;
-  import_node_fs8.default.writeFileSync(diffPath, import_pngjs.PNG.sync.write(diff));
+  import_node_fs9.default.writeFileSync(diffPath, import_pngjs.PNG.sync.write(diff));
   return {
     match: diffPercentage <= threshold,
     diffPercentage,
@@ -68,16 +68,16 @@ async function compareScreenshots(baselinePath, currentPath, diffPath, threshold
   };
 }
 function ensureBaselineDir(configDir) {
-  const baselineDir = import_node_path8.default.join(configDir, "baselines");
-  import_node_fs8.default.mkdirSync(baselineDir, { recursive: true });
+  const baselineDir = import_node_path10.default.join(configDir, "baselines");
+  import_node_fs9.default.mkdirSync(baselineDir, { recursive: true });
   return baselineDir;
 }
-var import_node_fs8, import_node_path8, import_pngjs, import_pixelmatch;
+var import_node_fs9, import_node_path10, import_pngjs, import_pixelmatch;
 var init_visual = __esm({
   "src/runner/visual.ts"() {
     "use strict";
-    import_node_fs8 = __toESM(require("fs"), 1);
-    import_node_path8 = __toESM(require("path"), 1);
+    import_node_fs9 = __toESM(require("fs"), 1);
+    import_node_path10 = __toESM(require("path"), 1);
     import_pngjs = require("pngjs");
     import_pixelmatch = __toESM(require("pixelmatch"), 1);
   }
@@ -95,11 +95,17 @@ __export(src_exports, {
   DEFAULT_REQUEST_TIMEOUT_MS: () => DEFAULT_REQUEST_TIMEOUT_MS,
   DEFAULT_SIMULATOR_LOCK_ROOT: () => DEFAULT_SIMULATOR_LOCK_ROOT,
   DEFAULT_WDA_REQUEST_TIMEOUT_MS: () => DEFAULT_WDA_REQUEST_TIMEOUT_MS,
+  HELPER_BINARY: () => HELPER_BINARY,
   INTERACTIVE_ROLES: () => INTERACTIVE_ROLES,
   IOS_INTERACTIVE_TYPES: () => IOS_INTERACTIVE_TYPES,
   IOS_MATCH_DIALECT: () => IOS_MATCH_DIALECT,
   IOS_PRESS_KEYS: () => IOS_PRESS_KEYS,
   IOS_WINDOW_TYPE: () => IOS_WINDOW_TYPE,
+  MACDRIVER_REPO: () => MACDRIVER_REPO,
+  MACDRIVER_SIGNING_AUTHORITY_PREFIX: () => MACDRIVER_SIGNING_AUTHORITY_PREFIX,
+  MACDRIVER_SIGNING_IDENTIFIER: () => MACDRIVER_SIGNING_IDENTIFIER,
+  MACDRIVER_VERSION: () => MACDRIVER_VERSION,
+  MACDRIVER_VERSION_PATTERN: () => MACDRIVER_VERSION_PATTERN,
   MACOS_MATCH_DIALECT: () => MACOS_MATCH_DIALECT,
   NATIVE_ATTRIBUTE_MAP: () => NATIVE_ATTRIBUTE_MAP,
   SpawnMacHelperClient: () => SpawnMacHelperClient,
@@ -129,6 +135,8 @@ __export(src_exports, {
   closeIosSession: () => closeIosSession,
   closeMacSession: () => closeMacSession,
   clusterFailures: () => clusterFailures,
+  codesignVerifier: () => codesignVerifier,
+  collectMacdriverStatus: () => collectMacdriverStatus,
   computeFlakeScore: () => computeFlakeScore,
   configSchema: () => configSchema,
   createAndroidDriver: () => createAndroidDriver,
@@ -142,6 +150,8 @@ __export(src_exports, {
   defaultAgentConnector: () => defaultAgentConnector,
   defaultIosAgentConnector: () => defaultIosAgentConnector,
   defaultWdaTestRunPreparer: () => defaultWdaTestRunPreparer,
+  dittoExtractor: () => dittoExtractor,
+  downloadAndVerify: () => downloadAndVerify,
   escapePredicateArg: () => escapePredicateArg,
   escapeUiSelectorArg: () => escapeUiSelectorArg,
   extractElementId: () => extractElementId,
@@ -152,6 +162,7 @@ __export(src_exports, {
   healSelector: () => healSelector,
   huntSchema: () => huntSchema,
   injectUsePortIntoXctestrun: () => injectUsePortIntoXctestrun,
+  installMacdriver: () => installMacdriver,
   interpolateHunt: () => interpolateHunt,
   iosAppAllowedIdentities: () => iosAppAllowedIdentities,
   iosNodeToNative: () => iosNodeToNative,
@@ -168,7 +179,14 @@ __export(src_exports, {
   loadHunt: () => loadHunt,
   loadHuntMeta: () => loadHuntMeta,
   loadHuntTags: () => loadHuntTags,
+  macdriverAssetName: () => macdriverAssetName,
+  macdriverAssetUrl: () => macdriverAssetUrl,
   macdriverBuildInstructions: () => macdriverBuildInstructions,
+  macdriverChecksumName: () => macdriverChecksumName,
+  macdriverInstallRoot: () => macdriverInstallRoot,
+  macdriverInstalledBinary: () => macdriverInstalledBinary,
+  macdriverReleaseTag: () => macdriverReleaseTag,
+  macdriverVersionDir: () => macdriverVersionDir,
   matchAndroidSelector: () => matchAndroidSelector,
   matchIosSelector: () => matchIosSelector,
   matchNativeTree: () => matchNativeTree,
@@ -178,6 +196,8 @@ __export(src_exports, {
   parseAdbDevices: () => parseAdbDevices,
   parseAndroidHierarchy: () => parseAndroidHierarchy,
   parseAndroidSelector: () => parseAndroidSelector,
+  parseChecksumFile: () => parseChecksumFile,
+  parseCodesignDetails: () => parseCodesignDetails,
   parseForwardPort: () => parseForwardPort,
   parseIosHierarchy: () => parseIosHierarchy,
   parseIosSelector: () => parseIosSelector,
@@ -204,20 +224,27 @@ __export(src_exports, {
   resolveWdaTestRun: () => resolveWdaTestRun,
   runHunt: () => runHunt,
   runSuite: () => runSuite,
+  runVersionProbe: () => runVersionProbe,
   selectDeviceSerial: () => selectDeviceSerial,
   selectSimulatorUdid: () => selectSimulatorUdid,
+  sha256Hex: () => sha256Hex,
   shortIosType: () => shortIosType,
   stepSchema: () => stepSchema,
+  tccGuidance: () => tccGuidance,
   unquoteSelectorValue: () => unquoteSelectorValue,
   unwrapAndroidTextSelector: () => unwrapAndroidTextSelector,
   unwrapIosTextSelector: () => unwrapIosTextSelector,
   unwrapNativeTextSelector: () => unwrapNativeTextSelector,
   updateBacklogFromSuite: () => updateBacklogFromSuite,
+  validateMacdriverArchiveEntries: () => validateMacdriverArchiveEntries,
+  validateMacdriverVersion: () => validateMacdriverVersion,
+  verifyMacdriverSignature: () => verifyMacdriverSignature,
   waitForAgentReady: () => waitForAgentReady,
   waitForWdaReady: () => waitForWdaReady,
   wdaCacheDir: () => wdaCacheDir,
   wdaTestRunArgs: () => wdaTestRunArgs,
-  webOnlyReason: () => webOnlyReason
+  webOnlyReason: () => webOnlyReason,
+  zipinfoArchiveLister: () => zipinfoArchiveLister
 });
 module.exports = __toCommonJS(src_exports);
 
@@ -329,6 +356,9 @@ function createMacDriver(client, options = {}) {
     async hover(selector) {
       await query("hover", selector);
     },
+    scroll() {
+      return rejectUnsupported("scroll");
+    },
     async scrollIntoView(selector) {
       await query("scrollTo", selector);
     },
@@ -400,25 +430,71 @@ function createMacDriver(client, options = {}) {
 // src/browser/mac-helper.ts
 var import_node_child_process = require("child_process");
 var import_node_fs = __toESM(require("fs"), 1);
-var import_node_path = __toESM(require("path"), 1);
+var import_node_os2 = __toESM(require("os"), 1);
+var import_node_path2 = __toESM(require("path"), 1);
 var import_node_url = require("url");
-var import_meta = {};
+
+// src/browser/macdriver-release.ts
+var import_node_os = __toESM(require("os"), 1);
+var import_node_path = __toESM(require("path"), 1);
 var HELPER_BINARY = "prowl-macdriver";
+var MACDRIVER_VERSION = "0.1.0";
+var MACDRIVER_REPO = "prowl-tools/prowl";
+var MACDRIVER_SIGNING_IDENTIFIER = "tools.prowl.macdriver";
+var MACDRIVER_SIGNING_AUTHORITY_PREFIX = "Developer ID Application: Genkei Labs";
+var MACDRIVER_VERSION_PATTERN = /^\d+\.\d+\.\d+(?:-[0-9A-Za-z][0-9A-Za-z.-]*)?(?:\+[0-9A-Za-z][0-9A-Za-z.-]*)?$/;
+function validateMacdriverVersion(version) {
+  if (!MACDRIVER_VERSION_PATTERN.test(version)) {
+    throw new Error(
+      `Invalid prowl-macdriver version "${version}". Expected a release version like 0.1.0.`
+    );
+  }
+  return version;
+}
+function macdriverReleaseTag(version = MACDRIVER_VERSION) {
+  return `macdriver-v${validateMacdriverVersion(version)}`;
+}
+function macdriverAssetName(version = MACDRIVER_VERSION) {
+  return `prowl-macdriver-v${validateMacdriverVersion(version)}-universal.zip`;
+}
+function macdriverChecksumName(version = MACDRIVER_VERSION) {
+  return `${macdriverAssetName(version)}.sha256`;
+}
+function macdriverAssetUrl(assetName, version = MACDRIVER_VERSION) {
+  return `https://github.com/${MACDRIVER_REPO}/releases/download/${macdriverReleaseTag(version)}/${assetName}`;
+}
+function macdriverInstallRoot(homedir = import_node_os.default.homedir()) {
+  return import_node_path.default.join(homedir, ".prowl", "macdriver");
+}
+function macdriverVersionDir(version = MACDRIVER_VERSION, homedir = import_node_os.default.homedir()) {
+  const root = import_node_path.default.resolve(macdriverInstallRoot(homedir));
+  const versionDir = import_node_path.default.resolve(root, validateMacdriverVersion(version));
+  if (!versionDir.startsWith(root + import_node_path.default.sep)) {
+    throw new Error(`Resolved prowl-macdriver version directory escaped install root: ${versionDir}`);
+  }
+  return versionDir;
+}
+function macdriverInstalledBinary(version = MACDRIVER_VERSION, homedir = import_node_os.default.homedir()) {
+  return import_node_path.default.join(macdriverVersionDir(version, homedir), HELPER_BINARY);
+}
+
+// src/browser/mac-helper.ts
+var import_meta = {};
 function macdriverBuildInstructions() {
-  return "The macOS target requires the experimental `prowl-macdriver` helper, which is not shipped in the npm package. Build it locally:\n  cd macdriver && swift build -c release\nor point Prowl at a prebuilt binary via the PROWL_MACDRIVER_BIN environment variable.";
+  return "The macOS target needs the `prowl-macdriver` helper. Install the prebuilt, signed binary (recommended):\n  prowl macdriver install\nContributors building from source can instead run:\n  cd macdriver && swift build -c release\nor point Prowl at a prebuilt binary via the PROWL_MACDRIVER_BIN environment variable.";
 }
 function getPackageRoot() {
-  let dir = import_node_path.default.dirname((0, import_node_url.fileURLToPath)(import_meta.url));
-  const root = import_node_path.default.parse(dir).root;
+  let dir = import_node_path2.default.dirname((0, import_node_url.fileURLToPath)(import_meta.url));
+  const root = import_node_path2.default.parse(dir).root;
   while (dir !== root) {
-    if (import_node_fs.default.existsSync(import_node_path.default.join(dir, "package.json"))) {
+    if (import_node_fs.default.existsSync(import_node_path2.default.join(dir, "package.json"))) {
       return dir;
     }
-    dir = import_node_path.default.dirname(dir);
+    dir = import_node_path2.default.dirname(dir);
   }
   return root;
 }
-function resolveHelperBinary(env = process.env) {
+function resolveHelperBinary(env = process.env, options = {}) {
   const override = env.PROWL_MACDRIVER_BIN;
   if (override) {
     if (!import_node_fs.default.existsSync(override)) {
@@ -429,10 +505,15 @@ ${macdriverBuildInstructions()}`
     }
     return override;
   }
+  const homedir = options.homedir ?? import_node_os2.default.homedir();
+  const userBinary = macdriverInstalledBinary(MACDRIVER_VERSION, homedir);
+  if (import_node_fs.default.existsSync(userBinary)) {
+    return userBinary;
+  }
   const root = getPackageRoot();
   const candidates = [
-    import_node_path.default.join(root, "macdriver", ".build", "release", HELPER_BINARY),
-    import_node_path.default.join(root, "macdriver", ".build", "debug", HELPER_BINARY)
+    import_node_path2.default.join(root, "macdriver", ".build", "release", HELPER_BINARY),
+    import_node_path2.default.join(root, "macdriver", ".build", "debug", HELPER_BINARY)
   ];
   for (const candidate of candidates) {
     if (import_node_fs.default.existsSync(candidate)) {
@@ -604,8 +685,300 @@ async function closeMacSession(session) {
   }
 }
 
-// src/browser/android-driver.ts
+// src/browser/macdriver-install.ts
+var import_node_child_process2 = require("child_process");
+var import_node_crypto = require("crypto");
 var import_node_fs2 = __toESM(require("fs"), 1);
+var import_node_os3 = __toESM(require("os"), 1);
+var import_node_path3 = __toESM(require("path"), 1);
+var import_node_util = require("util");
+var execFileAsync = (0, import_node_util.promisify)(import_node_child_process2.execFile);
+function parseChecksumFile(text) {
+  const token = text.trim().split(/\s+/, 1)[0] ?? "";
+  const digest = token.toLowerCase();
+  if (!/^[0-9a-f]{64}$/.test(digest)) {
+    throw new Error(`Malformed .sha256 checksum file (expected a 64-char hex digest, got: ${text.trim().slice(0, 80)})`);
+  }
+  return digest;
+}
+function sha256Hex(bytes) {
+  return (0, import_node_crypto.createHash)("sha256").update(bytes).digest("hex");
+}
+var commandRunner = async (file, args) => execFileAsync(file, args);
+function commandOutput(result) {
+  return [result.stdout, result.stderr].filter((value) => value !== void 0).map((value) => value.toString()).join("\n").trim();
+}
+function commandErrorDetail(error) {
+  const err = error;
+  return [err.stderr, err.stdout, err.message].filter((value) => value !== void 0 && value !== "").map((value) => value.toString()).join("\n").trim();
+}
+async function runRequiredCommand(run, binaryPath, command, args, label) {
+  try {
+    return await run(command, args);
+  } catch (error) {
+    const detail = commandErrorDetail(error);
+    throw new Error(`${label} failed for ${binaryPath}${detail ? `: ${detail}` : ""}`);
+  }
+}
+var zipinfoArchiveLister = async (zipPath) => {
+  try {
+    const { stdout } = await execFileAsync("zipinfo", ["-1", zipPath]);
+    return stdout.toString().split(/\r?\n/).filter((entry) => entry.length > 0);
+  } catch (error) {
+    const detail = commandErrorDetail(error);
+    throw new Error(`Failed to inspect release archive ${zipPath} with zipinfo${detail ? `: ${detail}` : ""}`);
+  }
+};
+function normalizeArchiveEntryName(entry) {
+  if (entry.length === 0 || entry !== entry.trim() || entry.includes("\0") || entry.includes("\\")) {
+    throw new Error(`Unsafe path in prowl-macdriver release archive: ${JSON.stringify(entry)}`);
+  }
+  if (entry.endsWith("/")) {
+    throw new Error(`Unexpected directory in prowl-macdriver release archive: ${entry}`);
+  }
+  if (import_node_path3.default.posix.isAbsolute(entry)) {
+    throw new Error(`Unsafe absolute path in prowl-macdriver release archive: ${entry}`);
+  }
+  const parts = entry.split("/");
+  if (parts.some((part) => part === "" || part === "." || part === "..")) {
+    throw new Error(`Unsafe path in prowl-macdriver release archive: ${entry}`);
+  }
+  return entry;
+}
+function validateMacdriverArchiveEntries(entries) {
+  const normalized = entries.map(normalizeArchiveEntryName);
+  if (normalized.length !== 1 || normalized[0] !== HELPER_BINARY) {
+    const shown = normalized.length > 0 ? normalized.join(", ") : "(empty archive)";
+    throw new Error(
+      `Unexpected prowl-macdriver release archive contents: ${shown}. Expected exactly "${HELPER_BINARY}" at the archive root.`
+    );
+  }
+}
+var dittoExtractor = async (zipPath, destDir) => {
+  await execFileAsync("ditto", ["-x", "-k", zipPath, destDir]);
+};
+function parseCodesignDetails(text) {
+  const details = { identifier: null, authorities: [], teamIdentifier: null };
+  for (const line of text.split(/\r?\n/)) {
+    const trimmed = line.trim();
+    if (trimmed.startsWith("Identifier=")) {
+      details.identifier = trimmed.slice("Identifier=".length);
+    } else if (trimmed.startsWith("Authority=")) {
+      details.authorities.push(trimmed.slice("Authority=".length));
+    } else if (trimmed.startsWith("TeamIdentifier=")) {
+      details.teamIdentifier = trimmed.slice("TeamIdentifier=".length);
+    }
+  }
+  return details;
+}
+function validateCodesignDetails(details, binaryPath) {
+  if (details.identifier !== MACDRIVER_SIGNING_IDENTIFIER) {
+    throw new Error(
+      `codesign verification failed for ${binaryPath}: expected identifier "${MACDRIVER_SIGNING_IDENTIFIER}", got "${details.identifier ?? "missing"}"`
+    );
+  }
+  const developerIdAuthority = details.authorities.find(
+    (authority) => authority.startsWith(`${MACDRIVER_SIGNING_AUTHORITY_PREFIX} (`)
+  );
+  const authorityTeamId = developerIdAuthority?.match(/\(([A-Z0-9]{10})\)$/)?.[1] ?? null;
+  if (!developerIdAuthority || !authorityTeamId) {
+    const shown = details.authorities.length > 0 ? details.authorities.join(" / ") : "missing";
+    throw new Error(
+      `codesign verification failed for ${binaryPath}: expected ${MACDRIVER_SIGNING_AUTHORITY_PREFIX} signer, got ${shown}`
+    );
+  }
+  if (!details.teamIdentifier) {
+    throw new Error(`codesign verification failed for ${binaryPath}: missing TeamIdentifier`);
+  }
+  if (details.teamIdentifier !== authorityTeamId) {
+    throw new Error(
+      `codesign verification failed for ${binaryPath}: TeamIdentifier ${details.teamIdentifier} does not match Developer ID authority team ${authorityTeamId}`
+    );
+  }
+}
+async function verifyMacdriverSignature(binaryPath, run = commandRunner) {
+  await runRequiredCommand(run, binaryPath, "codesign", ["--verify", "--strict", binaryPath], "codesign verification");
+  const display = await runRequiredCommand(
+    run,
+    binaryPath,
+    "codesign",
+    ["--display", "--verbose=4", binaryPath],
+    "codesign detail inspection"
+  );
+  validateCodesignDetails(parseCodesignDetails(commandOutput(display)), binaryPath);
+  await runRequiredCommand(
+    run,
+    binaryPath,
+    "spctl",
+    ["--assess", "--type", "execute", "--verbose=4", binaryPath],
+    "spctl assessment"
+  );
+}
+var codesignVerifier = async (binaryPath) => {
+  await verifyMacdriverSignature(binaryPath);
+};
+async function downloadAndVerify(options = {}) {
+  const version = options.version ?? MACDRIVER_VERSION;
+  const fetchImpl = options.fetchImpl ?? fetch;
+  const assetName = macdriverAssetName(version);
+  const zipUrl = macdriverAssetUrl(assetName, version);
+  const sumUrl = macdriverAssetUrl(macdriverChecksumName(version), version);
+  const [zipRes, sumRes] = await Promise.all([
+    fetchImpl(zipUrl, { redirect: "follow" }),
+    fetchImpl(sumUrl, { redirect: "follow" })
+  ]);
+  if (zipRes.status === 404 || sumRes.status === 404) {
+    throw new Error(
+      `No published prowl-macdriver release for ${macdriverReleaseTag(version)} yet.
+The signed binary is cut by the maintainer; until then build from source:
+  cd macdriver && swift build -c release`
+    );
+  }
+  if (!zipRes.ok) {
+    throw new Error(`Failed to download ${assetName} (HTTP ${zipRes.status}) from ${zipUrl}`);
+  }
+  if (!sumRes.ok) {
+    throw new Error(`Failed to download the checksum (HTTP ${sumRes.status}) from ${sumUrl}`);
+  }
+  const zipBytes = Buffer.from(await zipRes.arrayBuffer());
+  const expected = parseChecksumFile(await sumRes.text());
+  const actual = sha256Hex(zipBytes);
+  if (actual !== expected) {
+    throw new Error(
+      `Checksum mismatch for ${assetName}.
+  expected: ${expected}
+  actual:   ${actual}
+The download was rejected and discarded; re-run the install, and report it if it repeats.`
+    );
+  }
+  return zipBytes;
+}
+async function installMacdriver(options = {}) {
+  const version = validateMacdriverVersion(options.version ?? MACDRIVER_VERSION);
+  const homedir = options.homedir ?? import_node_os3.default.homedir();
+  const listArchiveEntries = options.listArchiveEntries ?? zipinfoArchiveLister;
+  const extract = options.extract ?? dittoExtractor;
+  const verifySignature = options.verifySignature ?? codesignVerifier;
+  const installRoot = macdriverInstallRoot(homedir);
+  const versionDir = macdriverVersionDir(version, homedir);
+  const binaryPath = macdriverInstalledBinary(version, homedir);
+  if (!options.force && import_node_fs2.default.existsSync(binaryPath)) {
+    return { version, binaryPath, alreadyInstalled: true };
+  }
+  const zipBytes = await downloadAndVerify({ version, fetchImpl: options.fetchImpl });
+  import_node_fs2.default.mkdirSync(installRoot, { recursive: true });
+  const stagingDir = import_node_fs2.default.mkdtempSync(import_node_path3.default.join(installRoot, `.tmp-${version}-`));
+  const extractDir = import_node_path3.default.join(stagingDir, "extract");
+  const zipPath = import_node_path3.default.join(stagingDir, macdriverAssetName(version));
+  try {
+    import_node_fs2.default.mkdirSync(extractDir);
+    import_node_fs2.default.writeFileSync(zipPath, zipBytes);
+    validateMacdriverArchiveEntries(await listArchiveEntries(zipPath));
+    await extract(zipPath, extractDir);
+    const stagedBinaryPath = import_node_path3.default.join(extractDir, HELPER_BINARY);
+    assertExtractedHelper(extractDir, stagedBinaryPath);
+    import_node_fs2.default.chmodSync(stagedBinaryPath, 493);
+    await verifySignature(stagedBinaryPath);
+    replaceVersionDir(versionDir, extractDir, installRoot);
+  } finally {
+    import_node_fs2.default.rmSync(stagingDir, { recursive: true, force: true });
+  }
+  return { version, binaryPath, alreadyInstalled: false };
+}
+function assertExtractedHelper(extractDir, binaryPath) {
+  const entries = import_node_fs2.default.readdirSync(extractDir);
+  if (!entries.includes(HELPER_BINARY)) {
+    throw new Error(`The release archive did not contain a "${HELPER_BINARY}" binary.`);
+  }
+  if (entries.length !== 1 || entries[0] !== HELPER_BINARY) {
+    const shown = entries.length > 0 ? entries.join(", ") : "(empty directory)";
+    throw new Error(
+      `Unexpected extracted prowl-macdriver archive contents: ${shown}. Expected exactly "${HELPER_BINARY}".`
+    );
+  }
+  let stat = null;
+  try {
+    stat = import_node_fs2.default.lstatSync(binaryPath);
+  } catch {
+  }
+  if (!stat?.isFile()) {
+    throw new Error(`The release archive "${HELPER_BINARY}" entry is not a regular file.`);
+  }
+}
+function replaceVersionDir(versionDir, stagedVersionDir, installRoot) {
+  const backupDir = import_node_path3.default.join(installRoot, `.previous-${import_node_path3.default.basename(versionDir)}-${process.pid}-${Date.now()}`);
+  let backedUp = false;
+  try {
+    if (import_node_fs2.default.existsSync(versionDir)) {
+      import_node_fs2.default.renameSync(versionDir, backupDir);
+      backedUp = true;
+    }
+    import_node_fs2.default.renameSync(stagedVersionDir, versionDir);
+    if (backedUp) {
+      import_node_fs2.default.rmSync(backupDir, { recursive: true, force: true });
+    }
+  } catch (error) {
+    if (backedUp && !import_node_fs2.default.existsSync(versionDir) && import_node_fs2.default.existsSync(backupDir)) {
+      import_node_fs2.default.renameSync(backupDir, versionDir);
+    }
+    throw error;
+  }
+}
+var runVersionProbe = async (binaryPath) => {
+  try {
+    const { stdout } = await execFileAsync(binaryPath, ["version"], { timeout: 5e3 });
+    const match = stdout.match(/prowl-macdriver\s+(\S+)/);
+    return match ? match[1] : stdout.trim() || null;
+  } catch {
+    return null;
+  }
+};
+async function collectMacdriverStatus(options = {}) {
+  const env = options.env ?? process.env;
+  const homedir = options.homedir ?? import_node_os3.default.homedir();
+  const probe = options.probe ?? runVersionProbe;
+  let resolved = null;
+  try {
+    const resolvedPath = resolveHelperBinary(env, { homedir });
+    resolved = { path: resolvedPath, source: classifyResolvedSource(resolvedPath, env, homedir) };
+  } catch {
+    resolved = null;
+  }
+  const installed = [];
+  const root = macdriverInstallRoot(homedir);
+  if (import_node_fs2.default.existsSync(root)) {
+    for (const entry of import_node_fs2.default.readdirSync(root, { withFileTypes: true })) {
+      if (!entry.isDirectory()) continue;
+      let binaryPath;
+      try {
+        binaryPath = macdriverInstalledBinary(entry.name, homedir);
+      } catch {
+        continue;
+      }
+      if (import_node_fs2.default.existsSync(binaryPath)) {
+        installed.push({ version: entry.name, binaryPath });
+      }
+    }
+    installed.sort((a, b) => a.version.localeCompare(b.version));
+  }
+  const probedVersion = resolved ? await probe(resolved.path) : null;
+  return { resolved, pinnedVersion: MACDRIVER_VERSION, installed, probedVersion };
+}
+function classifyResolvedSource(resolvedPath, env, homedir) {
+  if (env.PROWL_MACDRIVER_BIN && resolvedPath === env.PROWL_MACDRIVER_BIN) {
+    return "env";
+  }
+  if (resolvedPath.startsWith(macdriverInstallRoot(homedir) + import_node_path3.default.sep)) {
+    return "user-install";
+  }
+  return "source-build";
+}
+function tccGuidance() {
+  return "macOS permissions: the app that hosts Prowl (your terminal \u2014 Terminal, iTerm, VS Code, \u2026)\nmust be granted, in System Settings \u2192 Privacy & Security:\n  \u2022 Accessibility \u2014 required to drive the target app\n  \u2022 Screen Recording \u2014 required for screenshots / visual baselines\nGrant both to the terminal app, not to prowl-macdriver itself, then re-run your hunt.";
+}
+
+// src/browser/android-driver.ts
+var import_node_fs3 = __toESM(require("fs"), 1);
 
 // src/analyzer/xml.ts
 var ENTITIES = {
@@ -888,6 +1261,101 @@ function parseSnapshot(xml) {
   return parseXml(xml);
 }
 
+// src/browser/touch-gestures.ts
+var DEFAULT_SWIPE_FRACTION = 0.75;
+var SCROLL_TO_PROBE_SWIPE_FRACTION = 0.6;
+var MAX_SWIPE_FRACTION = 0.9;
+var SWIPE_HOLD_MS = 100;
+var SWIPE_MOVE_DURATION_MS = 300;
+var SCROLL_TO_SWEEP_DEPTH = 10;
+var SCROLL_TO_PROBE_DIRECTIONS = [
+  ...Array.from({ length: SCROLL_TO_SWEEP_DEPTH }, () => "down"),
+  ...Array.from({ length: SCROLL_TO_SWEEP_DEPTH * 2 }, () => "up")
+];
+var MAX_SCROLL_TO_SWIPES = SCROLL_TO_PROBE_DIRECTIONS.length;
+var OPPOSITE_SWIPE_DIRECTIONS = {
+  up: "down",
+  down: "up",
+  left: "right",
+  right: "left"
+};
+async function probeScrollIntoView({
+  isVisible,
+  swipe,
+  directions = SCROLL_TO_PROBE_DIRECTIONS
+}) {
+  if (await isVisible()) {
+    return true;
+  }
+  for (const direction of directions) {
+    await swipe(direction);
+    if (await isVisible()) {
+      return true;
+    }
+  }
+  return false;
+}
+function toScreenSize(value, source) {
+  const record = value ?? {};
+  const width = Number(record.width);
+  const height = Number(record.height);
+  if (!Number.isFinite(width) || !Number.isFinite(height) || width <= 0 || height <= 0) {
+    throw new Error(`${source} did not return a usable screen size`);
+  }
+  return { width, height };
+}
+function isVertical(direction) {
+  return direction === "up" || direction === "down";
+}
+function swipeDistanceFor(direction, size, amount) {
+  if (amount !== void 0 && !Number.isFinite(amount)) {
+    throw new Error("scroll amount must be a finite number");
+  }
+  const axis = isVertical(direction) ? size.height : size.width;
+  const requested = amount === void 0 ? axis * DEFAULT_SWIPE_FRACTION : Math.abs(amount);
+  const max = axis * MAX_SWIPE_FRACTION;
+  return Math.max(1, Math.round(Math.min(requested, max)));
+}
+function scrollToProbeDistanceFor(direction, size) {
+  const axis = isVertical(direction) ? size.height : size.width;
+  return Math.max(1, Math.round(axis * SCROLL_TO_PROBE_SWIPE_FRACTION));
+}
+function swipeEndpoints(direction, size, distance) {
+  const cx = Math.round(size.width / 2);
+  const cy = Math.round(size.height / 2);
+  const half = Math.round(distance / 2);
+  switch (direction) {
+    case "down":
+      return { start: { x: cx, y: cy + half }, end: { x: cx, y: cy - half } };
+    case "up":
+      return { start: { x: cx, y: cy - half }, end: { x: cx, y: cy + half } };
+    case "right":
+      return { start: { x: cx + half, y: cy }, end: { x: cx - half, y: cy } };
+    case "left":
+      return { start: { x: cx - half, y: cy }, end: { x: cx + half, y: cy } };
+  }
+}
+function buildSwipeActions(start, end) {
+  return {
+    type: "pointer",
+    id: "finger1",
+    parameters: { pointerType: "touch" },
+    actions: [
+      { type: "pointerMove", duration: 0, x: start.x, y: start.y, origin: "viewport" },
+      { type: "pointerDown", button: 0 },
+      { type: "pause", duration: SWIPE_HOLD_MS },
+      { type: "pointerMove", duration: SWIPE_MOVE_DURATION_MS, x: end.x, y: end.y, origin: "viewport" },
+      { type: "pointerUp", button: 0 }
+    ]
+  };
+}
+function buildDirectionalSwipe(direction, size, amount) {
+  const normalizedDirection = amount !== void 0 && amount < 0 ? OPPOSITE_SWIPE_DIRECTIONS[direction] : direction;
+  const distance = swipeDistanceFor(normalizedDirection, size, amount);
+  const { start, end } = swipeEndpoints(normalizedDirection, size, distance);
+  return { actions: buildSwipeActions(start, end), distance, start, end };
+}
+
 // src/browser/android-driver.ts
 var ANDROID_CAPABILITIES = /* @__PURE__ */ new Set([
   "query",
@@ -1003,6 +1471,11 @@ function createAndroidDriver(client, options = {}) {
   async function fillSelector(selector, value) {
     await client.setValue(await resolveOne(selector), value);
   }
+  async function swipe(direction, amount, size) {
+    const actualSize = size ?? await client.windowSize();
+    const { actions } = buildDirectionalSwipe(direction, actualSize, amount);
+    await client.performActions(actions);
+  }
   return {
     capabilities: ANDROID_CAPABILITIES,
     // navigation -----------------------------------------------------------
@@ -1040,8 +1513,31 @@ function createAndroidDriver(client, options = {}) {
     hover() {
       return rejectUnsupported("hover");
     },
-    scrollIntoView() {
-      return rejectUnsupported("scrollTo");
+    // Screen-centred swipe via the W3C actions endpoint (PROWL-080). Direction
+    // semantics match the web step: scrolling "down" reveals lower content, so
+    // the finger drags up. See ./touch-gestures.ts.
+    async scroll(direction, amount) {
+      await swipe(direction, amount);
+    },
+    // Resolve the element, short-circuiting if it is already present in the
+    // hierarchy; otherwise use the shared bounded down/up mobile probe before
+    // failing with a message naming the selector and attempts.
+    async scrollIntoView(selector) {
+      const query = parseAndroidSelector(selector);
+      let probeSize;
+      const found = await probeScrollIntoView({
+        isVisible: async () => (await client.findElements(query)).length > 0,
+        swipe: async (direction) => {
+          probeSize ??= await client.windowSize();
+          await swipe(direction, scrollToProbeDistanceFor(direction, probeSize), probeSize);
+        }
+      });
+      if (found) {
+        return;
+      }
+      throw new Error(
+        `scrollTo: element "${selector}" not visible after ${MAX_SCROLL_TO_SWIPES} scroll attempts on the Android target`
+      );
     },
     setInputFiles() {
       return rejectUnsupported("setInputFiles");
@@ -1097,7 +1593,7 @@ function createAndroidDriver(client, options = {}) {
     },
     async screenshot(screenshotOptions) {
       const png = await client.screenshotPng();
-      import_node_fs2.default.writeFileSync(screenshotOptions.path, png);
+      import_node_fs3.default.writeFileSync(screenshotOptions.path, png);
     },
     // network / dialogs / downloads (all web-only) -------------------------
     onResponse(_handler) {
@@ -1123,14 +1619,14 @@ function createAndroidDriver(client, options = {}) {
 
 // src/browser/android-helper.ts
 var import_node_module = require("module");
-var import_node_child_process4 = require("child_process");
-var import_node_fs4 = __toESM(require("fs"), 1);
-var import_node_path3 = __toESM(require("path"), 1);
+var import_node_child_process5 = require("child_process");
+var import_node_fs5 = __toESM(require("fs"), 1);
+var import_node_path5 = __toESM(require("path"), 1);
 
 // src/browser/android-adb.ts
-var import_node_child_process2 = require("child_process");
+var import_node_child_process3 = require("child_process");
 var execFileAdbRunner = (args, options) => new Promise((resolve) => {
-  (0, import_node_child_process2.execFile)(
+  (0, import_node_child_process3.execFile)(
     "adb",
     args,
     { encoding: "utf-8", timeout: options?.timeoutMs, maxBuffer: 16 * 1024 * 1024 },
@@ -1146,7 +1642,7 @@ var execFileAdbRunner = (args, options) => new Promise((resolve) => {
   );
 });
 var spawnAdbProcess = (args) => {
-  const child = (0, import_node_child_process2.spawn)("adb", args, { stdio: "ignore" });
+  const child = (0, import_node_child_process3.spawn)("adb", args, { stdio: "ignore" });
   child.on("error", () => {
   });
   return { kill: () => child.kill() };
@@ -1370,12 +1866,12 @@ var Uia2Transport = class {
    * {@link Uia2HttpError} on a non-2xx response, or a timeout error when the
    * per-request deadline elapses.
    */
-  async request(method, path18, body, timeoutMs) {
+  async request(method, path20, body, timeoutMs) {
     const requestTimeoutMs = timeoutMs ?? this.requestTimeoutMs;
     const controller = new AbortController();
     const timer = setTimeout(() => controller.abort(), requestTimeoutMs);
     timer.unref?.();
-    const url = `${this.baseUrl}${path18}`;
+    const url = `${this.baseUrl}${path20}`;
     let response;
     try {
       response = await this.fetchImpl(url, {
@@ -1387,7 +1883,7 @@ var Uia2Transport = class {
     } catch (error) {
       if (controller.signal.aborted) {
         const shown = requestTimeoutMs >= 1e3 ? `${Math.round(requestTimeoutMs / 1e3)}s` : `${requestTimeoutMs}ms`;
-        throw new Error(`uiautomator2 request ${method} ${path18} timed out after ${shown}`);
+        throw new Error(`uiautomator2 request ${method} ${path20} timed out after ${shown}`);
       }
       throw error instanceof Error ? error : new Error(String(error));
     } finally {
@@ -1398,7 +1894,7 @@ var Uia2Transport = class {
     if (!response.ok) {
       const wdError = extractWebdriverError(parsed);
       throw new Uia2HttpError(
-        `uiautomator2 ${method} ${path18} failed (${response.status})${wdError ? `: ${wdError}` : ""}`,
+        `uiautomator2 ${method} ${path20} failed (${response.status})${wdError ? `: ${wdError}` : ""}`,
         response.status,
         wdError
       );
@@ -1481,10 +1977,10 @@ function sleep(ms) {
 }
 function createUia2AgentClient(transport, sessionId, options = {}) {
   const base = `/session/${sessionId}`;
-  async function locate(query, path18) {
+  async function locate(query, path20) {
     return transport.request(
       "POST",
-      `${base}${path18}`,
+      `${base}${path20}`,
       androidQueryToLocator(query, { appPackage: options.appPackage })
     );
   }
@@ -1519,6 +2015,13 @@ function createUia2AgentClient(transport, sessionId, options = {}) {
     async pressKeyCode(keyCode) {
       await transport.request("POST", `${base}/appium/device/press_keycode`, { keycode: keyCode });
     },
+    async windowSize() {
+      const value = await transport.request("GET", `${base}/window/current/size`);
+      return toScreenSize(value, "uiautomator2 /window/current/size");
+    },
+    async performActions(actions) {
+      await transport.request("POST", `${base}/actions`, { actions: [actions] });
+    },
     async screenshotPng() {
       const value = await transport.request("GET", `${base}/screenshot`);
       if (typeof value !== "string") {
@@ -1540,9 +2043,9 @@ function createUia2AgentClient(transport, sessionId, options = {}) {
 }
 
 // src/config/target.ts
-var import_node_child_process3 = require("child_process");
-var import_node_fs3 = __toESM(require("fs"), 1);
-var import_node_path2 = __toESM(require("path"), 1);
+var import_node_child_process4 = require("child_process");
+var import_node_fs4 = __toESM(require("fs"), 1);
+var import_node_path4 = __toESM(require("path"), 1);
 var WEB_ONLY_STEP_TYPES = /* @__PURE__ */ new Set([
   "navigate",
   "waitForUrl",
@@ -1555,10 +2058,17 @@ var WEB_ONLY_STEP_TYPES = /* @__PURE__ */ new Set([
   "select",
   "selectOption",
   "setInputFiles",
-  "waitForDownload",
-  "scroll"
-  // directional scroll runs window.scrollBy (evaluate) — use scrollTo instead
+  "waitForDownload"
 ]);
+var MACOS_UNSUPPORTED_STEP_TYPES = /* @__PURE__ */ new Set(["scroll"]);
+function macosUnsupportedReason(step) {
+  for (const type of MACOS_UNSUPPORTED_STEP_TYPES) {
+    if (type in step) {
+      return type;
+    }
+  }
+  return null;
+}
 function webOnlyReason(step) {
   for (const type of WEB_ONLY_STEP_TYPES) {
     if (type in step) {
@@ -1594,6 +2104,14 @@ function assertStepsSupportedByTarget(steps, target) {
         `Step "${reason}" is not supported by the ${label} target. It is web-only; use a portable step (click, fill, type, press, wait, assert visible, screenshot, etc.).`
       );
     }
+    if (target === "macos") {
+      const macReason = macosUnsupportedReason(step);
+      if (macReason) {
+        throw new Error(
+          `Step "${macReason}" is not supported by the macOS target. Directional scroll is a touch swipe available on the iOS and Android targets; there is no macOS accessibility equivalent (use scrollTo to bring a specific element into view instead).`
+        );
+      }
+    }
     if ("if" in step) {
       assertStepsSupportedByTarget(step.if.then, target);
       if (step.if.else) {
@@ -1627,7 +2145,7 @@ function looksLikeIosAppPath(app) {
   }
   if (trimmed.toLowerCase().endsWith(".app")) {
     try {
-      return import_node_fs3.default.statSync(normalizeAppPath(app)).isDirectory();
+      return import_node_fs4.default.statSync(normalizeAppPath(app)).isDirectory();
     } catch {
       return false;
     }
@@ -1635,29 +2153,29 @@ function looksLikeIosAppPath(app) {
   return false;
 }
 function normalizeAppPath(app) {
-  return import_node_path2.default.resolve(trimTrailingPathSeparators(app));
+  return import_node_path4.default.resolve(trimTrailingPathSeparators(app));
 }
 function parseBundleIdentifier(plist) {
   const match = /<key>\s*CFBundleIdentifier\s*<\/key>\s*<string>\s*([^<]+?)\s*<\/string>/s.exec(plist);
   return match?.[1]?.trim() || null;
 }
 function readBundleIdentifier(appPath, ...plistSubPath) {
-  const infoPlistPath = import_node_path2.default.join(normalizeAppPath(appPath), ...plistSubPath);
-  if (!import_node_fs3.default.existsSync(infoPlistPath)) {
+  const infoPlistPath = import_node_path4.default.join(normalizeAppPath(appPath), ...plistSubPath);
+  if (!import_node_fs4.default.existsSync(infoPlistPath)) {
     return null;
   }
   try {
-    const parsed = parseBundleIdentifier(import_node_fs3.default.readFileSync(infoPlistPath, "utf-8"));
+    const parsed = parseBundleIdentifier(import_node_fs4.default.readFileSync(infoPlistPath, "utf-8"));
     if (parsed) {
       return parsed;
     }
   } catch {
   }
-  if (process.platform !== "darwin" || !import_node_fs3.default.existsSync("/usr/bin/plutil")) {
+  if (process.platform !== "darwin" || !import_node_fs4.default.existsSync("/usr/bin/plutil")) {
     return null;
   }
   try {
-    const output = (0, import_node_child_process3.execFileSync)(
+    const output = (0, import_node_child_process4.execFileSync)(
       "/usr/bin/plutil",
       ["-extract", "CFBundleIdentifier", "raw", "-o", "-", infoPlistPath],
       { encoding: "utf-8", stdio: ["ignore", "pipe", "ignore"], timeout: 1e3 }
@@ -1679,7 +2197,7 @@ function appBundleAllowedIdentities(app, readBundleId, isAppPath = looksLikeAppB
     const normalizedPath = normalizeAppPath(app);
     identities.add(trimTrailingPathSeparators(app));
     identities.add(normalizedPath);
-    const bundleName = import_node_path2.default.basename(normalizedPath).replace(/\.app$/i, "");
+    const bundleName = import_node_path4.default.basename(normalizedPath).replace(/\.app$/i, "");
     if (bundleName) {
       identities.add(bundleName);
     }
@@ -1707,9 +2225,9 @@ function looksLikeApkPath(app) {
   return trimmed.includes("/") || trimmed.includes("\\") || trimmed.toLowerCase().endsWith(".apk");
 }
 function normalizeAndroidApkPath(app) {
-  const resolved = import_node_path2.default.resolve(trimTrailingPathSeparators(app));
+  const resolved = import_node_path4.default.resolve(trimTrailingPathSeparators(app));
   try {
-    return import_node_fs3.default.realpathSync.native(resolved);
+    return import_node_fs4.default.realpathSync.native(resolved);
   } catch {
     return resolved;
   }
@@ -1752,12 +2270,12 @@ function resolveAgentApks(requireFn = (0, import_node_module.createRequire)(impo
       "The Android target requires the `appium-uiautomator2-server` package (its prebuilt APKs). It is an optional dependency of prowl-tools; it may have been skipped (--omit=optional) or failed to install. Restore it for a global Prowl install with: npm install -g appium-uiautomator2-server@10.6.2. If Prowl is installed locally in a project, run: npm install appium-uiautomator2-server@10.6.2"
     );
   }
-  const pkgDir = import_node_path3.default.dirname(pkgJsonPath);
+  const pkgDir = import_node_path5.default.dirname(pkgJsonPath);
   const version = requireFn(pkgJsonPath).version;
-  const serverApk = import_node_path3.default.join(pkgDir, "apks", `appium-uiautomator2-server-v${version}.apk`);
-  const testApk = import_node_path3.default.join(pkgDir, "apks", "appium-uiautomator2-server-debug-androidTest.apk");
+  const serverApk = import_node_path5.default.join(pkgDir, "apks", `appium-uiautomator2-server-v${version}.apk`);
+  const testApk = import_node_path5.default.join(pkgDir, "apks", "appium-uiautomator2-server-debug-androidTest.apk");
   for (const apk of [serverApk, testApk]) {
-    if (!import_node_fs4.default.existsSync(apk)) {
+    if (!import_node_fs5.default.existsSync(apk)) {
       throw new Error(`Expected uiautomator2 agent APK is missing: ${apk}. Reinstall dependencies.`);
     }
   }
@@ -1769,7 +2287,7 @@ function looksLikeApk(app) {
 var execFileAaptResolver = async (apkPath) => {
   for (const tool of ["aapt", "aapt2"]) {
     const output = await new Promise((resolve) => {
-      (0, import_node_child_process4.execFile)(
+      (0, import_node_child_process5.execFile)(
         tool,
         ["dump", "badging", apkPath],
         { encoding: "utf-8", timeout: 2e4, maxBuffer: 8 * 1024 * 1024 },
@@ -1803,8 +2321,8 @@ async function resolvePackage(app, runner, serial, aaptResolver, allowedApps) {
     assertAndroidAppAllowed(allowedApps, app);
     return app;
   }
-  const apkPath = import_node_path3.default.resolve(app);
-  if (!import_node_fs4.default.existsSync(apkPath)) {
+  const apkPath = import_node_path5.default.resolve(app);
+  if (!import_node_fs5.default.existsSync(apkPath)) {
     throw new Error(`APK not found: ${apkPath}`);
   }
   const pkg = await aaptResolver(apkPath);
@@ -1864,6 +2382,7 @@ async function launchAndroidSession(options) {
       readyDeadlineMs,
       appPackage: pkg
     });
+    await launchPackage(runner, serial, pkg);
     const driver = createAndroidDriver(client, { appLabel: pkg });
     return { client, driver, package: pkg, serial, teardown };
   } catch (error) {
@@ -1884,6 +2403,7 @@ var IOS_CAPABILITIES = /* @__PURE__ */ new Set([
 ]);
 var WAIT_POLL_INTERVAL_MS2 = 250;
 var DEFAULT_WAIT_TIMEOUT_MS2 = 5e3;
+var DISPLAYED_CHECK_CONCURRENCY = 4;
 var IOS_PRESS_KEYS = ["backspace", "del", "delete", "enter", "home", "return"];
 function escapePredicateArg(value) {
   return value.replace(/\\/g, "\\\\").replace(/"/g, '\\"');
@@ -1958,6 +2478,64 @@ function createIosDriver(client, options) {
   async function fillSelector(selector, value) {
     await client.setValue(await resolveOne(selector), value);
   }
+  async function swipe(direction, amount, size) {
+    const actualSize = size ?? await client.windowSize();
+    const { actions } = buildDirectionalSwipe(direction, actualSize, amount);
+    await client.performActions(actions);
+  }
+  async function visibleElementIds(query) {
+    const ids = await client.findElements(query);
+    const visible = Array.from({ length: ids.length }, () => null);
+    let nextIndex = 0;
+    const workerCount = Math.min(DISPLAYED_CHECK_CONCURRENCY, ids.length);
+    await Promise.all(
+      Array.from({ length: workerCount }, async () => {
+        for (; ; ) {
+          const index = nextIndex;
+          nextIndex += 1;
+          if (index >= ids.length) {
+            return;
+          }
+          const id = ids[index];
+          if (await client.isDisplayed(id)) {
+            visible[index] = id;
+          }
+        }
+      })
+    );
+    return visible.filter((id) => id !== null);
+  }
+  async function hasVisibleElement(query) {
+    const ids = await client.findElements(query);
+    if (ids.length === 0) {
+      return false;
+    }
+    if (await client.isDisplayed(ids[0])) {
+      return true;
+    }
+    let found = false;
+    let nextIndex = 1;
+    const workerCount = Math.min(DISPLAYED_CHECK_CONCURRENCY, ids.length - 1);
+    await Promise.all(
+      Array.from({ length: workerCount }, async () => {
+        for (; ; ) {
+          if (found) {
+            return;
+          }
+          const index = nextIndex;
+          nextIndex += 1;
+          if (index >= ids.length) {
+            return;
+          }
+          if (await client.isDisplayed(ids[index])) {
+            found = true;
+            return;
+          }
+        }
+      })
+    );
+    return found;
+  }
   async function pressKey(key) {
     const name = key.trim().toLowerCase();
     if (name === "enter" || name === "return") {
@@ -1989,6 +2567,9 @@ function createIosDriver(client, options) {
     async count(selector) {
       return (await client.findElements(parseIosSelector(selector))).length;
     },
+    async visibleCount(selector) {
+      return (await visibleElementIds(parseIosSelector(selector))).length;
+    },
     async textContent(selector) {
       const id = await client.findElement(parseIosSelector(selector));
       if (id === null) {
@@ -2013,15 +2594,38 @@ function createIosDriver(client, options) {
     hover() {
       return rejectUnsupported("hover");
     },
-    scrollIntoView() {
-      return rejectUnsupported("scrollTo");
+    // Screen-centred swipe via the W3C actions endpoint (PROWL-080). Direction
+    // semantics match the web step: scrolling "down" reveals lower content, so
+    // the finger drags up. See ./touch-gestures.ts.
+    async scroll(direction, amount) {
+      await swipe(direction, amount);
+    },
+    // Resolve the element, short-circuiting only if WDA reports a matching
+    // element displayed in the viewport; hierarchy-only matches can be offscreen.
+    // Otherwise use the shared bounded down/up mobile probe before failing.
+    async scrollIntoView(selector) {
+      const query = parseIosSelector(selector);
+      let probeSize;
+      const found = await probeScrollIntoView({
+        isVisible: () => hasVisibleElement(query),
+        swipe: async (direction) => {
+          probeSize ??= await client.windowSize();
+          await swipe(direction, scrollToProbeDistanceFor(direction, probeSize), probeSize);
+        }
+      });
+      if (found) {
+        return;
+      }
+      throw new Error(
+        `scrollTo: element "${selector}" not visible after ${MAX_SCROLL_TO_SWIPES} scroll attempts on the iOS target`
+      );
     },
     setInputFiles() {
       return rejectUnsupported("setInputFiles");
     },
     // semantic locators ----------------------------------------------------
     async countByRole(role, name) {
-      return (await client.findElements({ by: "role", role, name })).length;
+      return (await visibleElementIds({ by: "role", role, name })).length;
     },
     async clickFirstByRole(role, name) {
       const id = await client.findElement({ by: "role", role, name });
@@ -2031,7 +2635,7 @@ function createIosDriver(client, options) {
       await client.click(id);
     },
     async countByLabel(label) {
-      return (await client.findElements({ by: "label", value: label })).length;
+      return (await visibleElementIds({ by: "label", value: label })).length;
     },
     async fillFirstByLabel(label, value) {
       const id = await client.findElement({ by: "label", value: label });
@@ -2049,7 +2653,7 @@ function createIosDriver(client, options) {
       const timeoutMs = waitOptions?.timeout ?? DEFAULT_WAIT_TIMEOUT_MS2;
       const deadline = Date.now() + timeoutMs;
       for (; ; ) {
-        if ((await client.findElements(query)).length > 0) {
+        if (await hasVisibleElement(query)) {
           return;
         }
         if (Date.now() >= deadline) {
@@ -2095,19 +2699,19 @@ function createIosDriver(client, options) {
 
 // src/browser/ios-helper.ts
 var import_node_module2 = require("module");
-var import_node_child_process6 = require("child_process");
-var import_node_fs5 = __toESM(require("fs"), 1);
-var import_node_os2 = __toESM(require("os"), 1);
-var import_node_path5 = __toESM(require("path"), 1);
+var import_node_child_process7 = require("child_process");
+var import_node_fs6 = __toESM(require("fs"), 1);
+var import_node_os5 = __toESM(require("os"), 1);
+var import_node_path7 = __toESM(require("path"), 1);
 
 // src/browser/ios-simctl.ts
-var import_node_child_process5 = require("child_process");
+var import_node_child_process6 = require("child_process");
 var import_promises = require("fs/promises");
 var import_node_net = __toESM(require("net"), 1);
-var import_node_os = __toESM(require("os"), 1);
-var import_node_path4 = __toESM(require("path"), 1);
+var import_node_os4 = __toESM(require("os"), 1);
+var import_node_path6 = __toESM(require("path"), 1);
 var spawnXcrunProcess = (args, options) => {
-  const child = (0, import_node_child_process5.spawn)("xcrun", args, {
+  const child = (0, import_node_child_process6.spawn)("xcrun", args, {
     stdio: "ignore",
     env: options?.env ? { ...process.env, ...options.env } : process.env
   });
@@ -2119,10 +2723,10 @@ var spawnXcrunProcess = (args, options) => {
     }
   };
 };
-var DEFAULT_SIMULATOR_LOCK_ROOT = import_node_path4.default.join(import_node_os.default.tmpdir(), "prowl-ios-simulator-locks");
+var DEFAULT_SIMULATOR_LOCK_ROOT = import_node_path6.default.join(import_node_os4.default.tmpdir(), "prowl-ios-simulator-locks");
 var SIMULATOR_LOCK_OWNER_FILE = "owner.json";
 var execFileXcrunRunner = (args, options) => new Promise((resolve) => {
-  (0, import_node_child_process5.execFile)(
+  (0, import_node_child_process6.execFile)(
     "xcrun",
     args,
     {
@@ -2159,7 +2763,7 @@ function isProcessAlive(pid) {
 }
 async function removeStaleSimulatorLock(lockPath) {
   try {
-    const ownerText = await (0, import_promises.readFile)(import_node_path4.default.join(lockPath, SIMULATOR_LOCK_OWNER_FILE), "utf8");
+    const ownerText = await (0, import_promises.readFile)(import_node_path6.default.join(lockPath, SIMULATOR_LOCK_OWNER_FILE), "utf8");
     const owner = JSON.parse(ownerText);
     if (typeof owner.pid === "number" && Number.isInteger(owner.pid) && owner.pid > 0 && !isProcessAlive(owner.pid)) {
       await (0, import_promises.rm)(lockPath, { recursive: true, force: true });
@@ -2177,7 +2781,7 @@ function simulatorReservedError(udid) {
 }
 async function reserveSimulatorUdid(udid, options = {}) {
   const lockRoot = options.lockRoot ?? DEFAULT_SIMULATOR_LOCK_ROOT;
-  const lockPath = import_node_path4.default.join(lockRoot, simulatorLockName(udid));
+  const lockPath = import_node_path6.default.join(lockRoot, simulatorLockName(udid));
   await (0, import_promises.mkdir)(lockRoot, { recursive: true });
   for (let attempt = 0; attempt < 2; attempt += 1) {
     try {
@@ -2201,7 +2805,7 @@ async function reserveSimulatorUdid(udid, options = {}) {
     };
     try {
       await (0, import_promises.writeFile)(
-        import_node_path4.default.join(lockPath, SIMULATOR_LOCK_OWNER_FILE),
+        import_node_path6.default.join(lockPath, SIMULATOR_LOCK_OWNER_FILE),
         `${JSON.stringify({ pid: process.pid, udid, createdAt: (/* @__PURE__ */ new Date()).toISOString() })}
 `,
         { flag: "wx" }
@@ -2393,15 +2997,15 @@ var WdaTransport = class {
    * {@link WdaHttpError} on a non-2xx response, or a timeout error when the
    * per-request deadline elapses.
    */
-  async requestFull(method, path18, body, timeoutMs) {
+  async requestFull(method, path20, body, timeoutMs) {
     const requestTimeoutMs = timeoutMs ?? this.requestTimeoutMs;
     const controller = new AbortController();
     const timer = setTimeout(() => controller.abort(), requestTimeoutMs);
     timer.unref?.();
-    const url = `${this.baseUrl}${path18}`;
+    const url = `${this.baseUrl}${path20}`;
     const timeoutError = () => {
       const shown = requestTimeoutMs >= 1e3 ? `${Math.round(requestTimeoutMs / 1e3)}s` : `${requestTimeoutMs}ms`;
-      return new Error(`WebDriverAgent request ${method} ${path18} timed out after ${shown}`);
+      return new Error(`WebDriverAgent request ${method} ${path20} timed out after ${shown}`);
     };
     let response;
     try {
@@ -2433,7 +3037,7 @@ var WdaTransport = class {
     if (!response.ok) {
       const wdError = extractWebdriverError2(parsed);
       throw new WdaHttpError(
-        `WebDriverAgent ${method} ${path18} failed (${response.status})${wdError ? `: ${wdError}` : ""}`,
+        `WebDriverAgent ${method} ${path20} failed (${response.status})${wdError ? `: ${wdError}` : ""}`,
         response.status,
         wdError
       );
@@ -2441,8 +3045,8 @@ var WdaTransport = class {
     return parsed;
   }
   /** Like {@link requestFull} but returns just the `value` field. */
-  async request(method, path18, body, timeoutMs) {
-    const parsed = await this.requestFull(method, path18, body, timeoutMs);
+  async request(method, path20, body, timeoutMs) {
+    const parsed = await this.requestFull(method, path20, body, timeoutMs);
     return parsed?.value;
   }
 };
@@ -2518,8 +3122,8 @@ function sleep2(ms) {
 }
 function createWdaAgentClient(transport, sessionId) {
   const base = `/session/${sessionId}`;
-  async function locate(query, path18) {
-    return transport.request("POST", `${base}${path18}`, iosQueryToLocator(query));
+  async function locate(query, path20) {
+    return transport.request("POST", `${base}${path20}`, iosQueryToLocator(query));
   }
   return {
     async findElement(query) {
@@ -2549,12 +3153,29 @@ function createWdaAgentClient(transport, sessionId) {
       const value = await transport.request("GET", `${base}/element/${elementId}/text`);
       return typeof value === "string" ? value : value == null ? null : String(value);
     },
+    async isDisplayed(elementId) {
+      try {
+        return await transport.request("GET", `${base}/element/${elementId}/displayed`) === true;
+      } catch (error) {
+        if (isNoSuchElement2(error)) {
+          return false;
+        }
+        throw error;
+      }
+    },
     async sendKeys(keys) {
       await transport.request("POST", `${base}/wda/keys`, { value: keys });
     },
     async homescreen() {
       await transport.request("POST", "/wda/homescreen", {});
     },
+    async windowSize() {
+      const value = await transport.request("GET", `${base}/window/size`);
+      return toScreenSize(value, "WebDriverAgent /window/size");
+    },
+    async performActions(actions) {
+      await transport.request("POST", `${base}/actions`, { actions: [actions] });
+    },
     async source() {
       const value = await transport.request("GET", "/source");
       if (typeof value !== "string") {
@@ -2595,41 +3216,41 @@ function resolveWdaProject(requireFn = (0, import_node_module2.createRequire)(im
       "The iOS target requires the `appium-webdriveragent` package (its WDA Xcode project). It is an optional dependency of prowl-tools; it may have been skipped (--omit=optional) or failed to install. Restore it for a global Prowl install with: npm install -g appium-webdriveragent@16.4.0. If Prowl is installed locally in a project, run: npm install appium-webdriveragent@16.4.0"
     );
   }
-  const pkgDir = import_node_path5.default.dirname(pkgJsonPath);
+  const pkgDir = import_node_path7.default.dirname(pkgJsonPath);
   const version = requireFn(pkgJsonPath).version;
-  const projectPath = import_node_path5.default.join(pkgDir, "WebDriverAgent.xcodeproj");
-  if (!import_node_fs5.default.existsSync(projectPath)) {
+  const projectPath = import_node_path7.default.join(pkgDir, "WebDriverAgent.xcodeproj");
+  if (!import_node_fs6.default.existsSync(projectPath)) {
     throw new Error(`Expected WebDriverAgent project is missing: ${projectPath}. Reinstall dependencies.`);
   }
   return { projectPath, version };
 }
-function wdaCacheDir(wdaVersion, xcode, homeDir = import_node_os2.default.homedir()) {
-  return import_node_path5.default.join(homeDir, ".prowl", "wda", `${wdaVersion}-xcode${xcode}`);
+function wdaCacheDir(wdaVersion, xcode, homeDir = import_node_os5.default.homedir()) {
+  return import_node_path7.default.join(homeDir, ".prowl", "wda", `${wdaVersion}-xcode${xcode}`);
 }
 function productsDir(derivedDataPath) {
-  return import_node_path5.default.join(derivedDataPath, "Build", "Products");
+  return import_node_path7.default.join(derivedDataPath, "Build", "Products");
 }
 function findXctestrunIn(dir) {
   let entries;
   try {
-    entries = import_node_fs5.default.readdirSync(dir);
+    entries = import_node_fs6.default.readdirSync(dir);
   } catch {
     return null;
   }
   const match = entries.filter((name) => name.endsWith(".xctestrun") && !name.startsWith(PREPARED_XCTESTRUN_PREFIX)).sort()[0];
-  return match ? import_node_path5.default.join(dir, match) : null;
+  return match ? import_node_path7.default.join(dir, match) : null;
 }
 function resolveOverrideXctestrun(override) {
-  if (!import_node_fs5.default.existsSync(override)) {
+  if (!import_node_fs6.default.existsSync(override)) {
     throw new Error(`PROWL_WDA_RUNNER points at a missing path: ${override}`);
   }
   if (override.endsWith(".xctestrun")) {
     return override;
   }
   const candidates = [];
-  const stat = import_node_fs5.default.statSync(override);
+  const stat = import_node_fs6.default.statSync(override);
   if (override.endsWith(".app")) {
-    candidates.push(import_node_path5.default.dirname(import_node_path5.default.dirname(override)));
+    candidates.push(import_node_path7.default.dirname(import_node_path7.default.dirname(override)));
   } else if (stat.isDirectory()) {
     candidates.push(override, productsDir(override));
   }
@@ -2646,7 +3267,7 @@ function resolveOverrideXctestrun(override) {
 async function resolveWdaTestRun(options = {}) {
   const runner = options.runner ?? execFileXcrunRunner;
   const env = options.env ?? process.env;
-  const homeDir = options.homeDir ?? import_node_os2.default.homedir();
+  const homeDir = options.homeDir ?? import_node_os5.default.homedir();
   const log = options.logger ?? ((message) => process.stderr.write(`${message}
 `));
   const override = env.PROWL_WDA_RUNNER;
@@ -2668,7 +3289,7 @@ async function resolveWdaTestRun(options = {}) {
   log(
     `Prowl: building WebDriverAgent for the iOS target (first run only; this can take a few minutes)\u2026`
   );
-  import_node_fs5.default.mkdirSync(cacheDir, { recursive: true });
+  import_node_fs6.default.mkdirSync(cacheDir, { recursive: true });
   const result = await runner(
     [
       "xcodebuild",
@@ -2734,7 +3355,7 @@ function injectUsePortIntoXctestrun(plist, port) {
 }
 function runPlutil(args) {
   return new Promise((resolve, reject) => {
-    (0, import_node_child_process6.execFile)(
+    (0, import_node_child_process7.execFile)(
       "plutil",
       args,
       { encoding: "utf-8", maxBuffer: 32 * 1024 * 1024 },
@@ -2762,13 +3383,13 @@ var defaultWdaTestRunPreparer = async ({ xctestrunPath, port }) => {
   }
   const injected = injectUsePortIntoXctestrun(parsed, port);
   const stem = `${PREPARED_XCTESTRUN_PREFIX}${port}-${process.pid}`;
-  const outPath = import_node_path5.default.join(import_node_path5.default.dirname(xctestrunPath), `${stem}.xctestrun`);
-  const jsonPath = import_node_path5.default.join(import_node_os2.default.tmpdir(), `${stem}.json`);
-  import_node_fs5.default.writeFileSync(jsonPath, JSON.stringify(injected));
+  const outPath = import_node_path7.default.join(import_node_path7.default.dirname(xctestrunPath), `${stem}.xctestrun`);
+  const jsonPath = import_node_path7.default.join(import_node_os5.default.tmpdir(), `${stem}.json`);
+  import_node_fs6.default.writeFileSync(jsonPath, JSON.stringify(injected));
   try {
     await runPlutil(["-convert", "xml1", jsonPath, "-o", outPath]);
   } finally {
-    import_node_fs5.default.rmSync(jsonPath, { force: true });
+    import_node_fs6.default.rmSync(jsonPath, { force: true });
   }
   return outPath;
 };
@@ -2776,10 +3397,10 @@ function cleanupPreparedTestRun(preparedPath) {
   if (!preparedPath) {
     return;
   }
-  if (!import_node_path5.default.basename(preparedPath).startsWith(PREPARED_XCTESTRUN_PREFIX)) {
+  if (!import_node_path7.default.basename(preparedPath).startsWith(PREPARED_XCTESTRUN_PREFIX)) {
     return;
   }
-  import_node_fs5.default.rmSync(preparedPath, { force: true });
+  import_node_fs6.default.rmSync(preparedPath, { force: true });
 }
 function wdaTestRunArgs(xctestrunPath, udid) {
   return [
@@ -2801,8 +3422,8 @@ async function resolveBundleId(app, runner, udid, coldStart, allowedApps) {
     }
     return app;
   }
-  const appPath = import_node_path5.default.resolve(app);
-  if (!import_node_fs5.default.existsSync(appPath)) {
+  const appPath = import_node_path7.default.resolve(app);
+  if (!import_node_fs6.default.existsSync(appPath)) {
     throw new Error(`.app bundle not found: ${appPath}`);
   }
   const bundleId = readIosBundleIdentifier(appPath);
@@ -2905,12 +3526,12 @@ async function closeIosSession(session) {
 }
 
 // src/runner/index.ts
-var import_node_fs14 = __toESM(require("fs"), 1);
-var import_node_path14 = __toESM(require("path"), 1);
+var import_node_fs15 = __toESM(require("fs"), 1);
+var import_node_path16 = __toESM(require("path"), 1);
 
 // src/config/loader.ts
-var import_node_fs6 = __toESM(require("fs"), 1);
-var import_node_path6 = __toESM(require("path"), 1);
+var import_node_fs7 = __toESM(require("fs"), 1);
+var import_node_path8 = __toESM(require("path"), 1);
 var import_yaml = __toESM(require("yaml"), 1);
 var import_dotenv = __toESM(require("dotenv"), 1);
 
@@ -2928,7 +3549,7 @@ function isValidHuntName(name) {
 function assertValidHuntName(name) {
   if (!isValidHuntName(name)) {
     throw new Error(
-      `Invalid hunt name: "${name}". Use only letters, numbers, hyphens, underscores, and forward slashes.`
+      `Invalid hunt name: "${name}". A hunt name is its file name under .prowl/hunts/ (letters, numbers, hyphens, underscores, and forward slashes for nested hunts). Accepted forms: a bare name (homepage), a nested name (admin/users), or a path (.prowl/hunts/homepage.yml or hunts/homepage.yml).`
     );
   }
 }
@@ -3249,260 +3870,8 @@ var huntSchema = import_zod.z.object({
   }).strict().optional()
 }).strict();
 
-// src/config/loader.ts
-var DEFAULT_WEB_URL = "http://localhost:3000";
-var DEFAULT_CONFIG = {
-  target: {
-    type: "web",
-    url: DEFAULT_WEB_URL
-  },
-  browser: {
-    headless: true,
-    slowMo: 0,
-    timeout: 3e4,
-    engine: "chromium",
-    viewport: { width: 1280, height: 720 }
-  },
-  artifacts: {
-    screenshots: "on-failure",
-    networkHar: false,
-    console: true,
-    junit: false
-  },
-  assertions: {
-    noConsoleErrors: true,
-    noNetworkErrors: true,
-    maxTotalTimeMs: 3e4,
-    networkIgnorePatterns: []
-  },
-  guardrails: {
-    maxSteps: 50,
-    allowedDomains: ["localhost", "127.0.0.1", "0.0.0.0"],
-    allowedApps: [],
-    forbiddenSelectors: ["[data-danger]", ".delete-btn"],
-    selfHealing: false
-  },
-  auth: {
-    storageStatePath: ".prowl/auth-state.json"
-  },
-  history: {
-    maxRuns: 100
-  }
-};
-var CONFIG_DIR = ".prowl";
-var LEGACY_CONFIG_DIR = ".prowlqa";
-var legacyDirWarned = false;
-function warnLegacyConfigDir() {
-  if (legacyDirWarned) {
-    return;
-  }
-  legacyDirWarned = true;
-  console.warn(
-    'Warning: the ".prowlqa/" config directory is deprecated; rename it to ".prowl/". Support for ".prowlqa/" will be removed in a future release.'
-  );
-}
-function findConfigPath(startDir) {
-  let current = startDir;
-  while (current) {
-    for (const dir of [CONFIG_DIR, LEGACY_CONFIG_DIR]) {
-      const candidate = import_node_path6.default.join(current, dir, "config.yml");
-      if (import_node_fs6.default.existsSync(candidate)) {
-        return candidate;
-      }
-    }
-    const parent = import_node_path6.default.dirname(current);
-    if (parent === current) {
-      break;
-    }
-    current = parent;
-  }
-  return null;
-}
-var VIEWPORT_PRESETS = {
-  mobile: { width: 375, height: 812 },
-  tablet: { width: 768, height: 1024 },
-  desktop: { width: 1280, height: 720 }
-};
-function resolveViewport(value) {
-  if (value === void 0) {
-    return DEFAULT_CONFIG.browser.viewport;
-  }
-  if (typeof value === "string") {
-    const preset = VIEWPORT_PRESETS[value];
-    if (!preset) {
-      throw new Error(`Unknown viewport preset: "${value}". Use mobile, tablet, or desktop.`);
-    }
-    return preset;
-  }
-  return value;
-}
-function resolveTarget(target) {
-  const type = target?.type;
-  if (type === "macos") {
-    return { type: "macos", app: target.app };
-  }
-  if (type === "android") {
-    const androidTarget = target;
-    return {
-      type: "android",
-      app: androidTarget.app,
-      ...androidTarget.deviceSerial !== void 0 ? { deviceSerial: androidTarget.deviceSerial } : {},
-      ...androidTarget.coldStart !== void 0 ? { coldStart: androidTarget.coldStart } : {}
-    };
-  }
-  if (type === "ios") {
-    const iosTarget = target;
-    return {
-      type: "ios",
-      app: iosTarget.app,
-      ...iosTarget.udid !== void 0 ? { udid: iosTarget.udid } : {},
-      ...iosTarget.coldStart !== void 0 ? { coldStart: iosTarget.coldStart } : {}
-    };
-  }
-  return {
-    type: "web",
-    url: target?.url ?? DEFAULT_WEB_URL
-  };
-}
-function mergeConfig(partial) {
-  return {
-    target: resolveTarget(partial.target),
-    browser: {
-      headless: partial.browser?.headless ?? DEFAULT_CONFIG.browser.headless,
-      slowMo: partial.browser?.slowMo ?? DEFAULT_CONFIG.browser.slowMo,
-      timeout: partial.browser?.timeout ?? DEFAULT_CONFIG.browser.timeout,
-      engine: partial.browser?.engine ?? DEFAULT_CONFIG.browser.engine,
-      channel: partial.browser?.channel,
-      viewport: resolveViewport(partial.browser?.viewport)
-    },
-    artifacts: {
-      screenshots: partial.artifacts?.screenshots ?? DEFAULT_CONFIG.artifacts.screenshots,
-      networkHar: partial.artifacts?.networkHar ?? DEFAULT_CONFIG.artifacts.networkHar,
-      console: partial.artifacts?.console ?? DEFAULT_CONFIG.artifacts.console,
-      junit: partial.artifacts?.junit ?? DEFAULT_CONFIG.artifacts.junit
-    },
-    assertions: {
-      noConsoleErrors: partial.assertions?.noConsoleErrors ?? DEFAULT_CONFIG.assertions.noConsoleErrors,
-      noNetworkErrors: partial.assertions?.noNetworkErrors ?? DEFAULT_CONFIG.assertions.noNetworkErrors,
-      maxTotalTimeMs: partial.assertions?.maxTotalTimeMs ?? DEFAULT_CONFIG.assertions.maxTotalTimeMs,
-      networkIgnorePatterns: partial.assertions?.networkIgnorePatterns ?? DEFAULT_CONFIG.assertions.networkIgnorePatterns
-    },
-    guardrails: {
-      maxSteps: partial.guardrails?.maxSteps ?? DEFAULT_CONFIG.guardrails.maxSteps,
-      allowedDomains: partial.guardrails?.allowedDomains ?? DEFAULT_CONFIG.guardrails.allowedDomains,
-      allowedApps: partial.guardrails?.allowedApps ?? DEFAULT_CONFIG.guardrails.allowedApps,
-      forbiddenSelectors: partial.guardrails?.forbiddenSelectors ?? DEFAULT_CONFIG.guardrails.forbiddenSelectors,
-      selfHealing: partial.guardrails?.selfHealing ?? DEFAULT_CONFIG.guardrails.selfHealing
-    },
-    auth: {
-      storageStatePath: partial.auth?.storageStatePath ?? (partial.auth !== void 0 ? DEFAULT_CONFIG.auth.storageStatePath : void 0)
-    },
-    history: {
-      maxRuns: partial.history?.maxRuns ?? DEFAULT_CONFIG.history.maxRuns
-    },
-    bugLog: partial.bugLog,
-    tracing: partial.tracing,
-    reliability: partial.reliability
-  };
-}
-function ensureAllowedDomain(allowed, urlValue) {
-  try {
-    const host = new URL(urlValue).hostname;
-    if (!allowed.includes(host)) {
-      return [...allowed, host];
-    }
-  } catch {
-    return allowed;
-  }
-  return allowed;
-}
-function loadConfig(configPath) {
-  const resolvedPath = configPath ? import_node_path6.default.resolve(configPath) : findConfigPath(process.cwd());
-  if (!resolvedPath) {
-    throw new Error("Could not find .prowl/config.yml. Run `prowl init` first.");
-  }
-  if (!import_node_fs6.default.existsSync(resolvedPath)) {
-    throw new Error(`Config file not found at ${resolvedPath}`);
-  }
-  const configDir = import_node_path6.default.dirname(resolvedPath);
-  if (import_node_path6.default.basename(configDir) === LEGACY_CONFIG_DIR) {
-    warnLegacyConfigDir();
-  }
-  import_dotenv.default.config({ path: import_node_path6.default.join(configDir, ".env"), override: false });
-  const raw = import_node_fs6.default.readFileSync(resolvedPath, "utf-8");
-  const parsed = import_yaml.default.parse(raw) ?? {};
-  const validated = configSchema.parse(parsed);
-  const config = mergeConfig(validated);
-  if (config.target.type === "web") {
-    config.guardrails.allowedDomains = ensureAllowedDomain(
-      config.guardrails.allowedDomains,
-      config.target.url
-    );
-  }
-  return { config, configPath: resolvedPath, configDir };
-}
-function loadHunt(huntName, configDir) {
-  assertValidHuntName(huntName);
-  const huntPath = import_node_path6.default.join(configDir, "hunts", `${huntName}.yml`);
-  if (!import_node_fs6.default.existsSync(huntPath)) {
-    throw new Error(`Hunt file not found: ${huntPath}`);
-  }
-  const raw = import_node_fs6.default.readFileSync(huntPath, "utf-8");
-  const parsed = import_yaml.default.parse(raw) ?? {};
-  const validated = huntSchema.parse(parsed);
-  return validated;
-}
-function loadHuntTags(huntName, configDir) {
-  assertValidHuntName(huntName);
-  const huntPath = import_node_path6.default.join(configDir, "hunts", `${huntName}.yml`);
-  if (!import_node_fs6.default.existsSync(huntPath)) {
-    return [];
-  }
-  const raw = import_node_fs6.default.readFileSync(huntPath, "utf-8");
-  const parsed = import_yaml.default.parse(raw) ?? {};
-  return Array.isArray(parsed.tags) ? parsed.tags : [];
-}
-function loadHuntMeta(huntName, configDir) {
-  assertValidHuntName(huntName);
-  const huntPath = import_node_path6.default.join(configDir, "hunts", `${huntName}.yml`);
-  if (!import_node_fs6.default.existsSync(huntPath)) {
-    return { tags: [] };
-  }
-  const raw = import_node_fs6.default.readFileSync(huntPath, "utf-8");
-  const parsed = import_yaml.default.parse(raw) ?? {};
-  return {
-    description: typeof parsed.description === "string" ? parsed.description : void 0,
-    tags: Array.isArray(parsed.tags) ? parsed.tags : []
-  };
-}
-function listHunts(configDir) {
-  const huntsDir = import_node_path6.default.join(configDir, "hunts");
-  if (!import_node_fs6.default.existsSync(huntsDir)) {
-    return [];
-  }
-  const stats = import_node_fs6.default.statSync(huntsDir);
-  if (!stats.isDirectory()) {
-    throw new Error(`Hunts path is not a directory: ${huntsDir}`);
-  }
-  const results = [];
-  function scanDir(dir) {
-    const entries = import_node_fs6.default.readdirSync(dir, { withFileTypes: true });
-    for (const entry of entries) {
-      if (entry.isFile() && entry.name.endsWith(".yml")) {
-        const fullPath = import_node_path6.default.join(dir, entry.name);
-        const relative = import_node_path6.default.relative(huntsDir, fullPath);
-        results.push(relative.replace(/\.yml$/, ""));
-      } else if (entry.isDirectory()) {
-        scanDir(import_node_path6.default.join(dir, entry.name));
-      }
-    }
-  }
-  scanDir(huntsDir);
-  return results.sort((a, b) => a.localeCompare(b));
-}
-
 // src/config/interpolate.ts
-var import_node_crypto = __toESM(require("crypto"), 1);
+var import_node_crypto2 = __toESM(require("crypto"), 1);
 var VAR_PATTERN = /\{\{([A-Z0-9_]+)\}\}/g;
 function collectInterpolatedValues(input, vars, values) {
   if (typeof input === "string") {
@@ -3541,8 +3910,8 @@ var RANDOM_FIRST_NAMES = ["Alex", "Jordan", "Morgan", "Taylor", "Casey", "Riley"
 var RANDOM_LAST_NAMES = ["Smith", "Johnson", "Brown", "Davis", "Wilson", "Clark", "Hall", "Young"];
 function generateRandomVars(randomSource) {
   const random = randomSource?.random ?? Math.random;
-  const randomBytes = randomSource?.randomBytes ?? import_node_crypto.default.randomBytes;
-  const randomUUID = randomSource?.randomUUID ?? import_node_crypto.default.randomUUID;
+  const randomBytes = randomSource?.randomBytes ?? import_node_crypto2.default.randomBytes;
+  const randomUUID = randomSource?.randomUUID ?? import_node_crypto2.default.randomUUID;
   const hex = randomBytes(4).toString("hex");
   const firstIndex = Math.floor(random() * RANDOM_FIRST_NAMES.length);
   const lastIndex = Math.floor(random() * RANDOM_LAST_NAMES.length);
@@ -3795,86 +4164,358 @@ function interpolateStep(step, vars, stepPath2, redacted) {
       }
     };
   }
-  if ("assertWithAI" in step) {
-    return {
-      assertWithAI: interpolateString(step.assertWithAI, vars).value
-    };
+  if ("assertWithAI" in step) {
+    return {
+      assertWithAI: interpolateString(step.assertWithAI, vars).value
+    };
+  }
+  if ("copyText" in step) {
+    return {
+      copyText: {
+        selector: interpolateString(step.copyText.selector, vars).value,
+        as: step.copyText.as
+      }
+    };
+  }
+  if ("waitForDownload" in step) {
+    if (step.waitForDownload === null) {
+      return { waitForDownload: null };
+    }
+    return {
+      waitForDownload: {
+        ...step.waitForDownload.filename !== void 0 ? { filename: interpolateString(step.waitForDownload.filename, vars).value } : {},
+        ...step.waitForDownload.timeout !== void 0 ? { timeout: step.waitForDownload.timeout } : {}
+      }
+    };
+  }
+  return step;
+}
+function interpolateAssertion(assertion, vars) {
+  if ("selectorExists" in assertion) {
+    return { selectorExists: interpolateString(assertion.selectorExists, vars).value };
+  }
+  if ("selectorNotExists" in assertion) {
+    return { selectorNotExists: interpolateString(assertion.selectorNotExists, vars).value };
+  }
+  if ("urlIncludes" in assertion) {
+    return { urlIncludes: interpolateString(assertion.urlIncludes, vars).value };
+  }
+  if ("urlEquals" in assertion) {
+    return { urlEquals: interpolateString(assertion.urlEquals, vars).value };
+  }
+  if ("noConsoleErrors" in assertion) {
+    return { noConsoleErrors: assertion.noConsoleErrors };
+  }
+  if ("noNetworkErrors" in assertion) {
+    return { noNetworkErrors: assertion.noNetworkErrors };
+  }
+  return assertion;
+}
+function interpolateHunt(hunt, env, randomVars = generateRandomVars()) {
+  const redactedFillSteps = /* @__PURE__ */ new Set();
+  const envVars = Object.fromEntries(
+    Object.entries(env).filter(([, value]) => value !== void 0)
+  );
+  const baseVars = { ...randomVars, ...envVars };
+  const resolvedHuntVars = {};
+  for (const [key, value] of Object.entries(hunt.vars ?? {})) {
+    resolvedHuntVars[key] = interpolateString(value, baseVars).value;
+  }
+  const vars = { ...baseVars, ...resolvedHuntVars };
+  const redactionValues = /* @__PURE__ */ new Set();
+  collectInterpolatedValues(hunt.steps, vars, redactionValues);
+  collectInterpolatedValues(hunt.assertions, vars, redactionValues);
+  const steps = hunt.steps.map(
+    (step, index) => interpolateStep(step, vars, `${index}`, redactedFillSteps)
+  );
+  const assertions = hunt.assertions?.map((assertion) => interpolateAssertion(assertion, vars));
+  return {
+    hunt: {
+      ...hunt,
+      steps,
+      assertions
+    },
+    redactedFillSteps,
+    randomVars,
+    redactionValues: [...redactionValues]
+  };
+}
+
+// src/config/loader.ts
+var DEFAULT_WEB_URL = "http://localhost:3000";
+var DEFAULT_CONFIG = {
+  target: {
+    type: "web",
+    url: DEFAULT_WEB_URL
+  },
+  browser: {
+    headless: true,
+    slowMo: 0,
+    timeout: 3e4,
+    engine: "chromium",
+    viewport: { width: 1280, height: 720 }
+  },
+  artifacts: {
+    screenshots: "on-failure",
+    networkHar: false,
+    console: true,
+    junit: false
+  },
+  assertions: {
+    noConsoleErrors: true,
+    noNetworkErrors: true,
+    maxTotalTimeMs: 3e4,
+    networkIgnorePatterns: []
+  },
+  guardrails: {
+    maxSteps: 50,
+    allowedDomains: ["localhost", "127.0.0.1", "0.0.0.0"],
+    allowedApps: [],
+    forbiddenSelectors: ["[data-danger]", ".delete-btn"],
+    selfHealing: false
+  },
+  auth: {
+    storageStatePath: ".prowl/auth-state.json"
+  },
+  history: {
+    maxRuns: 100
+  }
+};
+var CONFIG_DIR = ".prowl";
+var LEGACY_CONFIG_DIR = ".prowlqa";
+var legacyDirWarned = false;
+function warnLegacyConfigDir() {
+  if (legacyDirWarned) {
+    return;
+  }
+  legacyDirWarned = true;
+  console.warn(
+    'Warning: the ".prowlqa/" config directory is deprecated; rename it to ".prowl/". Support for ".prowlqa/" will be removed in a future release.'
+  );
+}
+function findConfigPath(startDir) {
+  let current = startDir;
+  while (current) {
+    for (const dir of [CONFIG_DIR, LEGACY_CONFIG_DIR]) {
+      const candidate = import_node_path8.default.join(current, dir, "config.yml");
+      if (import_node_fs7.default.existsSync(candidate)) {
+        return candidate;
+      }
+    }
+    const parent = import_node_path8.default.dirname(current);
+    if (parent === current) {
+      break;
+    }
+    current = parent;
+  }
+  return null;
+}
+var VIEWPORT_PRESETS = {
+  mobile: { width: 375, height: 812 },
+  tablet: { width: 768, height: 1024 },
+  desktop: { width: 1280, height: 720 }
+};
+function resolveViewport(value) {
+  if (value === void 0) {
+    return DEFAULT_CONFIG.browser.viewport;
+  }
+  if (typeof value === "string") {
+    const preset = VIEWPORT_PRESETS[value];
+    if (!preset) {
+      throw new Error(`Unknown viewport preset: "${value}". Use mobile, tablet, or desktop.`);
+    }
+    return preset;
+  }
+  return value;
+}
+function resolveTarget(target) {
+  const type = target?.type;
+  if (type === "macos") {
+    return { type: "macos", app: target.app };
+  }
+  if (type === "android") {
+    const androidTarget = target;
+    return {
+      type: "android",
+      app: androidTarget.app,
+      ...androidTarget.deviceSerial !== void 0 ? { deviceSerial: androidTarget.deviceSerial } : {},
+      ...androidTarget.coldStart !== void 0 ? { coldStart: androidTarget.coldStart } : {}
+    };
+  }
+  if (type === "ios") {
+    const iosTarget = target;
+    return {
+      type: "ios",
+      app: iosTarget.app,
+      ...iosTarget.udid !== void 0 ? { udid: iosTarget.udid } : {},
+      ...iosTarget.coldStart !== void 0 ? { coldStart: iosTarget.coldStart } : {}
+    };
+  }
+  return {
+    type: "web",
+    url: target?.url ?? DEFAULT_WEB_URL
+  };
+}
+function mergeConfig(partial) {
+  return {
+    target: resolveTarget(partial.target),
+    browser: {
+      headless: partial.browser?.headless ?? DEFAULT_CONFIG.browser.headless,
+      slowMo: partial.browser?.slowMo ?? DEFAULT_CONFIG.browser.slowMo,
+      timeout: partial.browser?.timeout ?? DEFAULT_CONFIG.browser.timeout,
+      engine: partial.browser?.engine ?? DEFAULT_CONFIG.browser.engine,
+      channel: partial.browser?.channel,
+      viewport: resolveViewport(partial.browser?.viewport)
+    },
+    artifacts: {
+      screenshots: partial.artifacts?.screenshots ?? DEFAULT_CONFIG.artifacts.screenshots,
+      networkHar: partial.artifacts?.networkHar ?? DEFAULT_CONFIG.artifacts.networkHar,
+      console: partial.artifacts?.console ?? DEFAULT_CONFIG.artifacts.console,
+      junit: partial.artifacts?.junit ?? DEFAULT_CONFIG.artifacts.junit
+    },
+    assertions: {
+      noConsoleErrors: partial.assertions?.noConsoleErrors ?? DEFAULT_CONFIG.assertions.noConsoleErrors,
+      noNetworkErrors: partial.assertions?.noNetworkErrors ?? DEFAULT_CONFIG.assertions.noNetworkErrors,
+      maxTotalTimeMs: partial.assertions?.maxTotalTimeMs ?? DEFAULT_CONFIG.assertions.maxTotalTimeMs,
+      networkIgnorePatterns: partial.assertions?.networkIgnorePatterns ?? DEFAULT_CONFIG.assertions.networkIgnorePatterns
+    },
+    guardrails: {
+      maxSteps: partial.guardrails?.maxSteps ?? DEFAULT_CONFIG.guardrails.maxSteps,
+      allowedDomains: partial.guardrails?.allowedDomains ?? DEFAULT_CONFIG.guardrails.allowedDomains,
+      allowedApps: partial.guardrails?.allowedApps ?? DEFAULT_CONFIG.guardrails.allowedApps,
+      forbiddenSelectors: partial.guardrails?.forbiddenSelectors ?? DEFAULT_CONFIG.guardrails.forbiddenSelectors,
+      selfHealing: partial.guardrails?.selfHealing ?? DEFAULT_CONFIG.guardrails.selfHealing
+    },
+    auth: {
+      storageStatePath: partial.auth?.storageStatePath ?? (partial.auth !== void 0 ? DEFAULT_CONFIG.auth.storageStatePath : void 0)
+    },
+    history: {
+      maxRuns: partial.history?.maxRuns ?? DEFAULT_CONFIG.history.maxRuns
+    },
+    bugLog: partial.bugLog,
+    tracing: partial.tracing,
+    reliability: partial.reliability
+  };
+}
+function envStringVars(env) {
+  return Object.fromEntries(
+    Object.entries(env).filter(([, value]) => value !== void 0)
+  );
+}
+function interpolateConfigStrings(value, vars) {
+  if (typeof value === "string") {
+    return interpolateString(value, vars).value;
+  }
+  if (Array.isArray(value)) {
+    return value.map((item) => interpolateConfigStrings(item, vars));
   }
-  if ("copyText" in step) {
-    return {
-      copyText: {
-        selector: interpolateString(step.copyText.selector, vars).value,
-        as: step.copyText.as
-      }
-    };
+  if (value && typeof value === "object") {
+    return Object.fromEntries(
+      Object.entries(value).map(([key, item]) => [key, interpolateConfigStrings(item, vars)])
+    );
   }
-  if ("waitForDownload" in step) {
-    if (step.waitForDownload === null) {
-      return { waitForDownload: null };
+  return value;
+}
+function ensureAllowedDomain(allowed, urlValue) {
+  try {
+    const host = new URL(urlValue).hostname;
+    if (!allowed.includes(host)) {
+      return [...allowed, host];
     }
-    return {
-      waitForDownload: {
-        ...step.waitForDownload.filename !== void 0 ? { filename: interpolateString(step.waitForDownload.filename, vars).value } : {},
-        ...step.waitForDownload.timeout !== void 0 ? { timeout: step.waitForDownload.timeout } : {}
-      }
-    };
+  } catch {
+    return allowed;
   }
-  return step;
+  return allowed;
 }
-function interpolateAssertion(assertion, vars) {
-  if ("selectorExists" in assertion) {
-    return { selectorExists: interpolateString(assertion.selectorExists, vars).value };
+function loadConfig(configPath) {
+  const resolvedPath = configPath ? import_node_path8.default.resolve(configPath) : findConfigPath(process.cwd());
+  if (!resolvedPath) {
+    throw new Error("Could not find .prowl/config.yml. Run `prowl init` first.");
   }
-  if ("selectorNotExists" in assertion) {
-    return { selectorNotExists: interpolateString(assertion.selectorNotExists, vars).value };
+  if (!import_node_fs7.default.existsSync(resolvedPath)) {
+    throw new Error(`Config file not found at ${resolvedPath}`);
   }
-  if ("urlIncludes" in assertion) {
-    return { urlIncludes: interpolateString(assertion.urlIncludes, vars).value };
+  const configDir = import_node_path8.default.dirname(resolvedPath);
+  if (import_node_path8.default.basename(configDir) === LEGACY_CONFIG_DIR) {
+    warnLegacyConfigDir();
   }
-  if ("urlEquals" in assertion) {
-    return { urlEquals: interpolateString(assertion.urlEquals, vars).value };
+  import_dotenv.default.config({ path: import_node_path8.default.join(configDir, ".env"), override: false });
+  const raw = import_node_fs7.default.readFileSync(resolvedPath, "utf-8");
+  const parsed = import_yaml.default.parse(raw) ?? {};
+  const interpolated = interpolateConfigStrings(parsed, envStringVars(process.env));
+  const validated = configSchema.parse(interpolated);
+  const config = mergeConfig(validated);
+  if (config.target.type === "web") {
+    config.guardrails.allowedDomains = ensureAllowedDomain(
+      config.guardrails.allowedDomains,
+      config.target.url
+    );
   }
-  if ("noConsoleErrors" in assertion) {
-    return { noConsoleErrors: assertion.noConsoleErrors };
+  return { config, configPath: resolvedPath, configDir };
+}
+function loadHunt(huntName, configDir) {
+  assertValidHuntName(huntName);
+  const huntPath = import_node_path8.default.join(configDir, "hunts", `${huntName}.yml`);
+  if (!import_node_fs7.default.existsSync(huntPath)) {
+    throw new Error(`Hunt file not found: ${huntPath}`);
   }
-  if ("noNetworkErrors" in assertion) {
-    return { noNetworkErrors: assertion.noNetworkErrors };
+  const raw = import_node_fs7.default.readFileSync(huntPath, "utf-8");
+  const parsed = import_yaml.default.parse(raw) ?? {};
+  const validated = huntSchema.parse(parsed);
+  return validated;
+}
+function loadHuntTags(huntName, configDir) {
+  assertValidHuntName(huntName);
+  const huntPath = import_node_path8.default.join(configDir, "hunts", `${huntName}.yml`);
+  if (!import_node_fs7.default.existsSync(huntPath)) {
+    return [];
   }
-  return assertion;
+  const raw = import_node_fs7.default.readFileSync(huntPath, "utf-8");
+  const parsed = import_yaml.default.parse(raw) ?? {};
+  return Array.isArray(parsed.tags) ? parsed.tags : [];
 }
-function interpolateHunt(hunt, env, randomVars = generateRandomVars()) {
-  const redactedFillSteps = /* @__PURE__ */ new Set();
-  const envVars = Object.fromEntries(
-    Object.entries(env).filter(([, value]) => value !== void 0)
-  );
-  const baseVars = { ...randomVars, ...envVars };
-  const resolvedHuntVars = {};
-  for (const [key, value] of Object.entries(hunt.vars ?? {})) {
-    resolvedHuntVars[key] = interpolateString(value, baseVars).value;
+function loadHuntMeta(huntName, configDir) {
+  assertValidHuntName(huntName);
+  const huntPath = import_node_path8.default.join(configDir, "hunts", `${huntName}.yml`);
+  if (!import_node_fs7.default.existsSync(huntPath)) {
+    return { tags: [] };
   }
-  const vars = { ...baseVars, ...resolvedHuntVars };
-  const redactionValues = /* @__PURE__ */ new Set();
-  collectInterpolatedValues(hunt.steps, vars, redactionValues);
-  collectInterpolatedValues(hunt.assertions, vars, redactionValues);
-  const steps = hunt.steps.map(
-    (step, index) => interpolateStep(step, vars, `${index}`, redactedFillSteps)
-  );
-  const assertions = hunt.assertions?.map((assertion) => interpolateAssertion(assertion, vars));
+  const raw = import_node_fs7.default.readFileSync(huntPath, "utf-8");
+  const parsed = import_yaml.default.parse(raw) ?? {};
   return {
-    hunt: {
-      ...hunt,
-      steps,
-      assertions
-    },
-    redactedFillSteps,
-    randomVars,
-    redactionValues: [...redactionValues]
+    description: typeof parsed.description === "string" ? parsed.description : void 0,
+    tags: Array.isArray(parsed.tags) ? parsed.tags : []
   };
 }
+function listHunts(configDir) {
+  const huntsDir = import_node_path8.default.join(configDir, "hunts");
+  if (!import_node_fs7.default.existsSync(huntsDir)) {
+    return [];
+  }
+  const stats = import_node_fs7.default.statSync(huntsDir);
+  if (!stats.isDirectory()) {
+    throw new Error(`Hunts path is not a directory: ${huntsDir}`);
+  }
+  const results = [];
+  function scanDir(dir) {
+    const entries = import_node_fs7.default.readdirSync(dir, { withFileTypes: true });
+    for (const entry of entries) {
+      if (entry.isFile() && entry.name.endsWith(".yml")) {
+        const fullPath = import_node_path8.default.join(dir, entry.name);
+        const relative = import_node_path8.default.relative(huntsDir, fullPath);
+        results.push(relative.replace(/\.yml$/, ""));
+      } else if (entry.isDirectory()) {
+        scanDir(import_node_path8.default.join(dir, entry.name));
+      }
+    }
+  }
+  scanDir(huntsDir);
+  return results.sort((a, b) => a.localeCompare(b));
+}
 
 // src/browser/playwright-driver.ts
-var import_node_fs7 = __toESM(require("fs"), 1);
-var import_node_path7 = __toESM(require("path"), 1);
+var import_node_fs8 = __toESM(require("fs"), 1);
+var import_node_path9 = __toESM(require("path"), 1);
 var import_playwright = require("playwright");
 var ENGINES = { chromium: import_playwright.chromium, firefox: import_playwright.firefox, webkit: import_playwright.webkit };
 async function launchBrowser(options) {
@@ -3896,14 +4537,14 @@ async function launchBrowser(options) {
       contextOptions.viewport = options.viewport;
     }
     if (options.storageStatePath) {
-      if (import_node_fs7.default.existsSync(options.storageStatePath)) {
+      if (import_node_fs8.default.existsSync(options.storageStatePath)) {
         contextOptions.storageState = options.storageStatePath;
       } else {
         console.warn(`Auth state file not found: ${options.storageStatePath}. Run "prowl login" to create it.`);
       }
     }
     if (options.recordHar) {
-      contextOptions.recordHar = { path: import_node_path7.default.join(options.runDir, "network.har") };
+      contextOptions.recordHar = { path: import_node_path9.default.join(options.runDir, "network.har") };
     }
     const context = await browser.newContext(contextOptions);
     const page = await context.newPage();
@@ -3911,7 +4552,7 @@ async function launchBrowser(options) {
     page.setDefaultNavigationTimeout(options.timeout);
     let tracePath;
     if (options.trace) {
-      tracePath = import_node_path7.default.join(options.runDir, "trace.zip");
+      tracePath = import_node_path9.default.join(options.runDir, "trace.zip");
       await context.tracing.start({ screenshots: true, snapshots: true, sources: true });
     }
     return { browser, context, page, tracePath };
@@ -4006,6 +4647,16 @@ function createPlaywrightDriver(page) {
     async hover(selector) {
       await page.locator(selector).hover();
     },
+    async scroll(direction, amount = 500) {
+      const deltas = {
+        up: [0, -amount],
+        down: [0, amount],
+        left: [-amount, 0],
+        right: [amount, 0]
+      };
+      const [x, y] = deltas[direction];
+      await page.evaluate(([sx, sy]) => window.scrollBy(sx, sy), [x, y]);
+    },
     async scrollIntoView(selector) {
       await page.locator(selector).scrollIntoViewIfNeeded();
     },
@@ -4086,8 +4737,8 @@ function createPlaywrightDriver(page) {
 }
 
 // src/runner/steps.ts
-var import_node_fs9 = __toESM(require("fs"), 1);
-var import_node_path9 = __toESM(require("path"), 1);
+var import_node_fs10 = __toESM(require("fs"), 1);
+var import_node_path11 = __toESM(require("path"), 1);
 
 // src/runner/healing.ts
 var INTERACTIVE_TAGS = ["button", "a", "input", "select", "textarea"];
@@ -4785,11 +5436,14 @@ function toVisibilitySelector(value) {
   if (looksLikeSelector(value)) return value;
   return textContainsSelector(value);
 }
+function countVisible(driver, selector) {
+  return driver.visibleCount?.(selector) ?? driver.count(selector);
+}
 async function runInlineAssert(driver, policy, assertion) {
   if (assertion.visible !== void 0) {
     const selector = toVisibilitySelector(assertion.visible);
     policy.assertAllowedSelector(selector);
-    const count = await driver.count(selector);
+    const count = await countVisible(driver, selector);
     if (count === 0) {
       throw new Error(`Expected visible: ${assertion.visible}`);
     }
@@ -4798,7 +5452,7 @@ async function runInlineAssert(driver, policy, assertion) {
   if (assertion.notVisible !== void 0) {
     const selector = toVisibilitySelector(assertion.notVisible);
     policy.assertAllowedSelector(selector);
-    const count = await driver.count(selector);
+    const count = await countVisible(driver, selector);
     if (count > 0) {
       throw new Error(`Expected not visible: ${assertion.notVisible}`);
     }
@@ -4821,7 +5475,7 @@ async function runInlineAssert(driver, policy, assertion) {
   throw new Error("assert step is missing an assertion type");
 }
 function screenshotPath(screenshotsDir, fileName) {
-  return import_node_path9.default.join(screenshotsDir, fileName);
+  return import_node_path11.default.join(screenshotsDir, fileName);
 }
 function stepPath(prefix, index) {
   return prefix ? `${prefix}.${index}` : `${index}`;
@@ -4838,7 +5492,7 @@ function validateDownloadFilename(suggestedFilename) {
   const safeFilename = suggestedFilename.trim();
   const allowedFilenamePattern = /^[^<>:"/\\|?*]+$/;
   const hasControlCharacter = Array.from(safeFilename).some((char) => char.charCodeAt(0) < 32);
-  if (safeFilename.length === 0 || safeFilename !== suggestedFilename || safeFilename !== import_node_path9.default.basename(safeFilename) || safeFilename.includes("..") || /[/\\]/.test(safeFilename) || hasControlCharacter || !allowedFilenamePattern.test(safeFilename)) {
+  if (safeFilename.length === 0 || safeFilename !== suggestedFilename || safeFilename !== import_node_path11.default.basename(safeFilename) || safeFilename.includes("..") || /[/\\]/.test(safeFilename) || hasControlCharacter || !allowedFilenamePattern.test(safeFilename)) {
     throw new Error(`Invalid download filename: "${suggestedFilename}"`);
   }
   return safeFilename;
@@ -5018,7 +5672,7 @@ var STEP_HANDLERS = {
       if (!("setInputFiles" in h.step)) unknownStep();
       const resolvedInput = await h.policy.resolveActionSelector(h.step.setInputFiles.selector);
       const rawFiles = h.step.setInputFiles.files;
-      const resolveFile = (f) => import_node_path9.default.isAbsolute(f) ? f : import_node_path9.default.join(h.context.configDir, f);
+      const resolveFile = (f) => import_node_path11.default.isAbsolute(f) ? f : import_node_path11.default.join(h.context.configDir, f);
       const resolvedFiles = Array.isArray(rawFiles) ? rawFiles.map(resolveFile) : resolveFile(rawFiles);
       await h.driver.setInputFiles(resolvedInput.selector, resolvedFiles);
       h.policy.ensureLocationAllowed(h.driver);
@@ -5188,25 +5842,21 @@ var STEP_HANDLERS = {
     }
   },
   scroll: {
-    capabilities: ["evaluate"],
+    // Dispatched through the driver's `scroll` verb (interact), so native mobile
+    // targets synthesize a touch swipe while web keeps its `window.scrollBy`
+    // behavior. The per-target step gate rejects `scroll` on macOS before here.
+    capabilities: ["interact"],
     run: async (h) => {
       if (!("scroll" in h.step)) unknownStep();
-      const amount = h.step.scroll.amount ?? 500;
-      const scrollMap = {
-        up: [0, -amount],
-        down: [0, amount],
-        left: [-amount, 0],
-        right: [amount, 0]
-      };
-      const [x, y] = scrollMap[h.step.scroll.direction];
-      await h.driver.evaluate(([sx, sy]) => window.scrollBy(sx, sy), [x, y]);
+      const { direction, amount } = h.step.scroll;
+      await h.driver.scroll(direction, amount);
       return {
         kind: "result",
         result: {
           type: "scroll",
           status: "pass",
           durationMs: Date.now() - h.stepStart,
-          value: `${h.step.scroll.direction} ${amount}px`
+          value: amount === void 0 ? direction : `${direction} ${amount}px`
         }
       };
     }
@@ -5252,7 +5902,7 @@ var STEP_HANDLERS = {
       const condition = h.step.if;
       const selector = condition.visible ?? condition.notVisible;
       h.policy.assertAllowedSelector(selector);
-      const count = await h.driver.count(selector);
+      const count = await countVisible(h.driver, selector);
       const conditionMet = condition.visible !== void 0 ? count > 0 : count === 0;
       if (conditionMet) {
         const subResult = await h.executeNested({
@@ -5339,7 +5989,7 @@ var STEP_HANDLERS = {
         const whileSelector = repeat.while.visible ?? repeat.while.notVisible;
         h.policy.assertAllowedSelector(whileSelector);
         for (let i = 0; i < maxIter; i++) {
-          const whileCount = await h.driver.count(whileSelector);
+          const whileCount = await countVisible(h.driver, whileSelector);
           const shouldContinue = repeat.while.visible !== void 0 ? whileCount > 0 : whileCount === 0;
           if (!shouldContinue) break;
           totalSubSteps += repeat.steps.length;
@@ -5380,15 +6030,15 @@ var STEP_HANDLERS = {
         if (!responseFile) {
           throw new Error("mock.response must include either body or file");
         }
-        const candidateFilePath = import_node_path9.default.isAbsolute(responseFile) ? responseFile : import_node_path9.default.join(h.context.configDir, responseFile);
-        const resolvedConfigDir = import_node_path9.default.resolve(h.context.configDir);
-        const resolvedFilePath = import_node_path9.default.resolve(candidateFilePath);
-        const relativePath = import_node_path9.default.relative(resolvedConfigDir, resolvedFilePath);
-        const isWithinConfigDir = relativePath === "" || relativePath !== ".." && !relativePath.startsWith(`..${import_node_path9.default.sep}`) && !import_node_path9.default.isAbsolute(relativePath);
+        const candidateFilePath = import_node_path11.default.isAbsolute(responseFile) ? responseFile : import_node_path11.default.join(h.context.configDir, responseFile);
+        const resolvedConfigDir = import_node_path11.default.resolve(h.context.configDir);
+        const resolvedFilePath = import_node_path11.default.resolve(candidateFilePath);
+        const relativePath = import_node_path11.default.relative(resolvedConfigDir, resolvedFilePath);
+        const isWithinConfigDir = relativePath === "" || relativePath !== ".." && !relativePath.startsWith(`..${import_node_path11.default.sep}`) && !import_node_path11.default.isAbsolute(relativePath);
         if (!isWithinConfigDir) {
           throw new Error("mock.response.file must resolve within config directory");
         }
-        responseBody = await import_node_fs9.default.promises.readFile(resolvedFilePath, "utf-8");
+        responseBody = await import_node_fs10.default.promises.readFile(resolvedFilePath, "utf-8");
       }
       const contentType = mock.response.contentType ?? "application/json";
       const status = mock.response.status;
@@ -5451,8 +6101,8 @@ var STEP_HANDLERS = {
     capabilities: ["evaluate"],
     run: async (h) => {
       if (!("runScript" in h.step)) unknownStep();
-      const filePath = import_node_path9.default.isAbsolute(h.step.runScript.file) ? h.step.runScript.file : import_node_path9.default.join(h.context.configDir, h.step.runScript.file);
-      const fileContents = import_node_fs9.default.readFileSync(filePath, "utf-8");
+      const filePath = import_node_path11.default.isAbsolute(h.step.runScript.file) ? h.step.runScript.file : import_node_path11.default.join(h.context.configDir, h.step.runScript.file);
+      const fileContents = import_node_fs10.default.readFileSync(filePath, "utf-8");
       await h.driver.evaluate(fileContents);
       return {
         kind: "result",
@@ -5473,19 +6123,19 @@ var STEP_HANDLERS = {
       const name = h.step.assertScreenshot.name;
       const threshold = h.step.assertScreenshot.threshold ?? 0.1;
       const baselineDir = ensureBaselineDir2(h.context.configDir);
-      const baselinePath = import_node_path9.default.join(baselineDir, `${name}.png`);
-      const currentScreenshotPath = import_node_path9.default.join(h.context.runDir, "screenshots", `${name}-current.png`);
-      import_node_fs9.default.mkdirSync(import_node_path9.default.dirname(currentScreenshotPath), { recursive: true });
+      const baselinePath = import_node_path11.default.join(baselineDir, `${name}.png`);
+      const currentScreenshotPath = import_node_path11.default.join(h.context.runDir, "screenshots", `${name}-current.png`);
+      import_node_fs10.default.mkdirSync(import_node_path11.default.dirname(currentScreenshotPath), { recursive: true });
       await h.driver.screenshot({ path: currentScreenshotPath, fullPage: true });
-      h.screenshots.push(import_node_path9.default.join("screenshots", `${name}-current.png`));
-      if (!import_node_fs9.default.existsSync(baselinePath)) {
-        import_node_fs9.default.copyFileSync(currentScreenshotPath, baselinePath);
+      h.screenshots.push(import_node_path11.default.join("screenshots", `${name}-current.png`));
+      if (!import_node_fs10.default.existsSync(baselinePath)) {
+        import_node_fs10.default.copyFileSync(currentScreenshotPath, baselinePath);
         return {
           kind: "result",
           result: { type: "assertScreenshot", status: "pass", durationMs: Date.now() - h.stepStart, value: "baseline created" }
         };
       }
-      const diffPath = import_node_path9.default.join(h.context.runDir, "screenshots", `${name}-diff.png`);
+      const diffPath = import_node_path11.default.join(h.context.runDir, "screenshots", `${name}-diff.png`);
       const comparison = await compareScreenshots2(baselinePath, currentScreenshotPath, diffPath, threshold);
       if (comparison.match) {
         return {
@@ -5498,7 +6148,7 @@ var STEP_HANDLERS = {
           }
         };
       }
-      h.screenshots.push(import_node_path9.default.join("screenshots", `${name}-diff.png`));
+      h.screenshots.push(import_node_path11.default.join("screenshots", `${name}-diff.png`));
       throw new Error(
         `Visual regression: ${(comparison.diffPercentage * 100).toFixed(2)}% diff exceeds threshold ${(threshold * 100).toFixed(0)}%`
       );
@@ -5524,8 +6174,8 @@ var STEP_HANDLERS = {
       }
       const fileName = `assertWithAI_step_${h.index + 1}.png`;
       const relative = await h.addScreenshot(fileName);
-      const screenshotFullPath = import_node_path9.default.join(h.context.runDir, relative);
-      const imageBase64 = import_node_fs9.default.readFileSync(screenshotFullPath).toString("base64");
+      const screenshotFullPath = import_node_path11.default.join(h.context.runDir, relative);
+      const imageBase64 = import_node_fs10.default.readFileSync(screenshotFullPath).toString("base64");
       const assertVision = h.context.assertVision ?? assertWithAiVision;
       const verdict = await assertVision(
         { imageBase64, mediaType: "image/png", assertion },
@@ -5582,7 +6232,7 @@ var STEP_HANDLERS = {
           `Download filename mismatch: expected "${opts.filename}", got "${suggestedFilename}"`
         );
       }
-      const savePath = import_node_path9.default.join(h.context.runDir, suggestedFilename);
+      const savePath = import_node_path11.default.join(h.context.runDir, suggestedFilename);
       await download.saveAs(savePath);
       return {
         kind: "result",
@@ -5611,8 +6261,8 @@ async function executeSteps(context) {
     maxSteps: context.maxSteps,
     selfHealing: context.selfHealing
   });
-  const screenshotsDir = import_node_path9.default.join(context.runDir, "screenshots");
-  import_node_fs9.default.mkdirSync(screenshotsDir, { recursive: true });
+  const screenshotsDir = import_node_path11.default.join(context.runDir, "screenshots");
+  import_node_fs10.default.mkdirSync(screenshotsDir, { recursive: true });
   const currentHuntName = context.huntStack?.[context.huntStack.length - 1];
   policy.assertWithinMaxSteps(context.steps.length, currentHuntName);
   const results = [];
@@ -5622,7 +6272,7 @@ async function executeSteps(context) {
   const addScreenshot = async (fileName) => {
     const fullPath = screenshotPath(screenshotsDir, fileName);
     await captureScreenshot2(driver, fullPath);
-    const relative = import_node_path9.default.join("screenshots", fileName);
+    const relative = import_node_path11.default.join("screenshots", fileName);
     screenshots.push(relative);
     return relative;
   };
@@ -5710,12 +6360,12 @@ async function executeSteps(context) {
   return { results, screenshots, failed: false };
 }
 async function captureFinalScreenshot(page, runDir) {
-  const screenshotsDir = import_node_path9.default.join(runDir, "screenshots");
-  import_node_fs9.default.mkdirSync(screenshotsDir, { recursive: true });
+  const screenshotsDir = import_node_path11.default.join(runDir, "screenshots");
+  import_node_fs10.default.mkdirSync(screenshotsDir, { recursive: true });
   const fileName = "final.png";
   const filePath = screenshotPath(screenshotsDir, fileName);
   await captureScreenshot2(page, filePath);
-  return import_node_path9.default.join("screenshots", fileName);
+  return import_node_path11.default.join("screenshots", fileName);
 }
 
 // src/runner/assertions.ts
@@ -5837,6 +6487,59 @@ async function evaluateAssertions(options) {
   }
   return results;
 }
+async function evaluateNativeAssertions(options) {
+  const assertions = mergeAssertions(options.config, options.huntAssertions);
+  const authoredTypes = new Set(
+    (options.huntAssertions ?? []).map((assertion) => Object.keys(assertion)[0])
+  );
+  const results = [];
+  const warnings = [];
+  for (const assertion of assertions) {
+    const type = Object.keys(assertion)[0] ?? "assertion";
+    try {
+      if ("selectorExists" in assertion) {
+        options.assertAllowedSelector?.(assertion.selectorExists);
+        const count = await options.driver.count(assertion.selectorExists);
+        results.push({
+          type: "selectorExists",
+          value: assertion.selectorExists,
+          status: count > 0 ? "pass" : "fail",
+          error: count > 0 ? void 0 : "Selector not found"
+        });
+        continue;
+      }
+      if ("selectorNotExists" in assertion) {
+        options.assertAllowedSelector?.(assertion.selectorNotExists);
+        const count = await options.driver.count(assertion.selectorNotExists);
+        results.push({
+          type: "selectorNotExists",
+          value: assertion.selectorNotExists,
+          status: count === 0 ? "pass" : "fail",
+          error: count === 0 ? void 0 : "Selector exists"
+        });
+        continue;
+      }
+      const rawValue = assertion[type];
+      results.push({
+        type,
+        value: rawValue,
+        status: "skipped",
+        error: `skipped (web-only): not supported on the ${options.targetLabel} target`
+      });
+      if (authoredTypes.has(type)) {
+        warnings.push(`${type} is web-only; skipped on ${options.targetLabel} target`);
+      }
+    } catch (error) {
+      const detail = error instanceof Error ? error.message : "no error details";
+      results.push({
+        type,
+        status: "fail",
+        error: `Native assertion "${type}" failed: ${detail}`
+      });
+    }
+  }
+  return { results, warnings };
+}
 
 // src/runner/tracing.ts
 var DEFAULT_TRACE_HEADER = "traceparent";
@@ -5875,18 +6578,18 @@ function captureTraceCorrelation(response, headerName, sink, redactionValues = [
 }
 
 // src/reporter/result.ts
-var import_node_fs10 = __toESM(require("fs"), 1);
-var import_node_path10 = __toESM(require("path"), 1);
+var import_node_fs11 = __toESM(require("fs"), 1);
+var import_node_path12 = __toESM(require("path"), 1);
 function writeResult(runDir, result) {
   const fileName = "result.json";
-  const fullPath = import_node_path10.default.join(runDir, fileName);
-  import_node_fs10.default.writeFileSync(fullPath, JSON.stringify(result, null, 2));
+  const fullPath = import_node_path12.default.join(runDir, fileName);
+  import_node_fs11.default.writeFileSync(fullPath, JSON.stringify(result, null, 2));
   return fileName;
 }
 
 // src/reporter/summary.ts
-var import_node_fs11 = __toESM(require("fs"), 1);
-var import_node_path11 = __toESM(require("path"), 1);
+var import_node_fs12 = __toESM(require("fs"), 1);
+var import_node_path13 = __toESM(require("path"), 1);
 function escapeMd(text) {
   return text.replace(/([|`*_{}[\]()#+\-!\\])/g, "\\$1");
 }
@@ -5964,28 +6667,29 @@ function writeSummary(runDir, result) {
     }
   }
   const fileName = "summary.md";
-  const fullPath = import_node_path11.default.join(runDir, fileName);
-  import_node_fs11.default.writeFileSync(fullPath, `${lines.join("\n")}
+  const fullPath = import_node_path13.default.join(runDir, fileName);
+  import_node_fs12.default.writeFileSync(fullPath, `${lines.join("\n")}
 `);
   return fileName;
 }
 
 // src/reporter/junit.ts
-var import_node_fs12 = __toESM(require("fs"), 1);
-var import_node_path12 = __toESM(require("path"), 1);
+var import_node_fs13 = __toESM(require("fs"), 1);
+var import_node_path14 = __toESM(require("path"), 1);
 function escapeXml(text) {
   return text.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&apos;");
 }
 function writeJunit(runDir, result) {
   const totalTests = result.steps.length + result.assertions.length;
   const failures = result.steps.filter((s) => s.status === "fail").length + result.assertions.filter((a) => a.status === "fail").length;
+  const skipped = result.assertions.filter((a) => a.status === "skipped").length;
   const timeSeconds = (result.durationMs / 1e3).toFixed(3);
   const huntName = escapeXml(result.hunt);
   const lines = [];
   lines.push('<?xml version="1.0" encoding="UTF-8"?>');
   lines.push("<testsuites>");
   lines.push(
-    `  <testsuite name="${huntName}" tests="${totalTests}" failures="${failures}" errors="0" time="${timeSeconds}" timestamp="${escapeXml(result.startedAt)}">`
+    `  <testsuite name="${huntName}" tests="${totalTests}" failures="${failures}" errors="0" skipped="${skipped}" time="${timeSeconds}" timestamp="${escapeXml(result.startedAt)}">`
   );
   for (let i = 0; i < result.steps.length; i++) {
     const step = result.steps[i];
@@ -6009,6 +6713,11 @@ function writeJunit(runDir, result) {
       lines.push(`    <testcase name="${caseName}" classname="${huntName}" time="0">`);
       lines.push(`      <failure message="${escapedFailureText}" type="assertion">${escapedFailureText}</failure>`);
       lines.push("    </testcase>");
+    } else if (assertion.status === "skipped") {
+      const skipText = escapeXml(assertion.error ?? "skipped");
+      lines.push(`    <testcase name="${caseName}" classname="${huntName}" time="0">`);
+      lines.push(`      <skipped message="${skipText}"/>`);
+      lines.push("    </testcase>");
     } else {
       lines.push(`    <testcase name="${caseName}" classname="${huntName}" time="0"/>`);
     }
@@ -6016,8 +6725,8 @@ function writeJunit(runDir, result) {
   lines.push("  </testsuite>");
   lines.push("</testsuites>");
   const fileName = "junit.xml";
-  const fullPath = import_node_path12.default.join(runDir, fileName);
-  import_node_fs12.default.writeFileSync(fullPath, `${lines.join("\n")}
+  const fullPath = import_node_path14.default.join(runDir, fileName);
+  import_node_fs13.default.writeFileSync(fullPath, `${lines.join("\n")}
 `);
   return fileName;
 }
@@ -6051,15 +6760,15 @@ function timestamp(prefix) {
 }
 
 // src/runner/history.ts
-var import_node_fs13 = __toESM(require("fs"), 1);
-var import_node_path13 = __toESM(require("path"), 1);
+var import_node_fs14 = __toESM(require("fs"), 1);
+var import_node_path15 = __toESM(require("path"), 1);
 var HISTORY_FILE = "history.json";
 var LOCK_FILE_SUFFIX = ".lock";
 var LOCK_RETRY_MS = 10;
 var LOCK_TIMEOUT_MS = 5e3;
 var SLEEP_BUFFER = new Int32Array(new SharedArrayBuffer(4));
 function historyPath(configDir) {
-  return import_node_path13.default.join(configDir, HISTORY_FILE);
+  return import_node_path15.default.join(configDir, HISTORY_FILE);
 }
 function isHistoryEntry(value) {
   if (!value || typeof value !== "object") {
@@ -6070,11 +6779,11 @@ function isHistoryEntry(value) {
 }
 function readHistory(configDir) {
   const filePath = historyPath(configDir);
-  if (!import_node_fs13.default.existsSync(filePath)) {
+  if (!import_node_fs14.default.existsSync(filePath)) {
     return { entries: [] };
   }
   try {
-    const raw = import_node_fs13.default.readFileSync(filePath, "utf-8");
+    const raw = import_node_fs14.default.readFileSync(filePath, "utf-8");
     const parsed = JSON.parse(raw);
     if (parsed && typeof parsed === "object" && "entries" in parsed && Array.isArray(parsed.entries)) {
       const validatedEntries = parsed.entries.filter(isHistoryEntry);
@@ -6113,12 +6822,12 @@ function sleepSync(ms) {
 function withHistoryLock(configDir, fn) {
   const filePath = historyPath(configDir);
   const lockPath = `${filePath}${LOCK_FILE_SUFFIX}`;
-  import_node_fs13.default.mkdirSync(import_node_path13.default.dirname(filePath), { recursive: true });
+  import_node_fs14.default.mkdirSync(import_node_path15.default.dirname(filePath), { recursive: true });
   const startedAt = Date.now();
   while (Date.now() - startedAt < LOCK_TIMEOUT_MS) {
     let fd;
     try {
-      fd = import_node_fs13.default.openSync(lockPath, "wx");
+      fd = import_node_fs14.default.openSync(lockPath, "wx");
     } catch (error) {
       if (error.code === "EEXIST") {
         sleepSync(LOCK_RETRY_MS);
@@ -6130,10 +6839,10 @@ function withHistoryLock(configDir, fn) {
       return fn();
     } finally {
       try {
-        import_node_fs13.default.closeSync(fd);
+        import_node_fs14.default.closeSync(fd);
       } catch {
       }
-      import_node_fs13.default.rmSync(lockPath, { force: true });
+      import_node_fs14.default.rmSync(lockPath, { force: true });
     }
   }
   throw new Error(
@@ -6146,9 +6855,9 @@ function appendEntry(configDir, entry, maxRuns) {
     const current = readHistory(configDir);
     const next = pruneEntries([...current.entries, entry], maxRuns);
     const tempPath = `${filePath}.${process.pid}.${Date.now()}.tmp`;
-    import_node_fs13.default.writeFileSync(tempPath, `${JSON.stringify({ entries: next }, null, 2)}
+    import_node_fs14.default.writeFileSync(tempPath, `${JSON.stringify({ entries: next }, null, 2)}
 `);
-    import_node_fs13.default.renameSync(tempPath, filePath);
+    import_node_fs14.default.renameSync(tempPath, filePath);
   });
 }
 
@@ -6161,11 +6870,11 @@ function parseViewportFlag(value) {
   return value;
 }
 function resolvePath(configDir, inputPath) {
-  if (import_node_path14.default.isAbsolute(inputPath)) {
+  if (import_node_path16.default.isAbsolute(inputPath)) {
     return inputPath;
   }
-  const projectRoot = import_node_path14.default.dirname(configDir);
-  return import_node_path14.default.join(projectRoot, inputPath);
+  const projectRoot = import_node_path16.default.dirname(configDir);
+  return import_node_path16.default.join(projectRoot, inputPath);
 }
 function buildRunResult(options) {
   return {
@@ -6184,12 +6893,12 @@ function buildRunResult(options) {
 }
 function writeConsoleLog(runDir, entries) {
   const fileName = "console.log";
-  const filePath = import_node_path14.default.join(runDir, fileName);
+  const filePath = import_node_path16.default.join(runDir, fileName);
   const lines = entries.map((entry) => {
     const location = entry.location ? ` (${entry.location})` : "";
     return `[${entry.type}] ${entry.text}${location}`;
   });
-  import_node_fs14.default.writeFileSync(filePath, `${lines.join("\n")}
+  import_node_fs15.default.writeFileSync(filePath, `${lines.join("\n")}
 `);
   return fileName;
 }
@@ -6197,8 +6906,8 @@ async function executeHuntAttempt(options, config, configDir, interpolatedHunt,
   const headless = options.headed ? false : config.browser.headless;
   const slowMo = options.slowMo ?? config.browser.slowMo;
   const maxSteps = config.guardrails.maxSteps;
-  const runDir = import_node_path14.default.join(configDir, "runs", timestamp());
-  import_node_fs14.default.mkdirSync(runDir, { recursive: true });
+  const runDir = import_node_path16.default.join(configDir, "runs", timestamp());
+  import_node_fs15.default.mkdirSync(runDir, { recursive: true });
   const storageStatePath = config.auth.storageStatePath ? resolvePath(configDir, config.auth.storageStatePath) : void 0;
   const engine = options.browser ?? config.browser.engine;
   const channel = options.channel ?? config.browser.channel;
@@ -6381,8 +7090,8 @@ async function runHunt(options) {
 }
 async function executeNativeHuntAttempt(options, config, configDir, interpolatedHunt, redactedFillSteps, randomVars, allowedApps, native) {
   const maxSteps = config.guardrails.maxSteps;
-  const runDir = import_node_path14.default.join(configDir, "runs", timestamp());
-  import_node_fs14.default.mkdirSync(runDir, { recursive: true });
+  const runDir = import_node_path16.default.join(configDir, "runs", timestamp());
+  import_node_fs15.default.mkdirSync(runDir, { recursive: true });
   const session = await native.launchSession();
   let result;
   try {
@@ -6390,6 +7099,13 @@ async function executeNativeHuntAttempt(options, config, configDir, interpolated
     const appIdentity = native.sessionAppIdentity(session);
     const targetLabel = `${native.targetType}:${appIdentity}`;
     const effectiveAllowedApps = [.../* @__PURE__ */ new Set([...allowedApps, native.targetApp, appIdentity])];
+    const assertionPolicy = createRunPolicy(driver, {
+      forbiddenSelectors: config.guardrails.forbiddenSelectors,
+      allowedDomains: [],
+      allowedApps: effectiveAllowedApps,
+      maxSteps,
+      selfHealing: config.guardrails.selfHealing
+    });
     const startedAt = (/* @__PURE__ */ new Date()).toISOString();
     const startTime = Date.now();
     let stepResults = [];
@@ -6429,8 +7145,19 @@ async function executeNativeHuntAttempt(options, config, configDir, interpolated
     } catch {
       finalScreenshot = void 0;
     }
+    const { results: assertionResults, warnings: assertionWarnings } = await evaluateNativeAssertions({
+      driver,
+      config,
+      huntAssertions: interpolatedHunt.assertions,
+      assertAllowedSelector: assertionPolicy.assertAllowedSelector,
+      targetLabel: nativeTargetLabel(native.targetType)
+    });
+    for (const warning of assertionWarnings) {
+      console.warn(warning);
+    }
     const durationMs = Date.now() - startTime;
-    const status = stepFailed ? "fail" : "pass";
+    const assertionsFailed = assertionResults.some((assertion) => assertion.status === "fail");
+    const status = stepFailed || assertionsFailed ? "fail" : "pass";
     const artifacts = {
       screenshots: finalScreenshot ? [...stepScreenshots, finalScreenshot] : stepScreenshots
     };
@@ -6441,7 +7168,7 @@ async function executeNativeHuntAttempt(options, config, configDir, interpolated
       hunt: options.huntName,
       targetUrl: targetLabel,
       steps: stepResults,
-      assertions: [],
+      assertions: assertionResults,
       artifacts
     });
     result = writeReports(runDir, runResult, { junit: options.junit ?? config.artifacts.junit });
@@ -6554,7 +7281,6 @@ async function runNativeHunt(options, config, configDir, target, native) {
   const hunt = loadHunt(options.huntName, configDir);
   const { hunt: interpolatedHunt, redactedFillSteps, randomVars } = interpolateHunt(hunt, process.env);
   assertStepsSupportedByTarget(interpolatedHunt.steps, native.targetType);
-  assertHuntAssertionsSupportedByTarget(interpolatedHunt.assertions, native.targetType);
   native.assertAppAllowed(config.guardrails.allowedApps, target);
   const maxSteps = config.guardrails.maxSteps;
   if (interpolatedHunt.steps.length > maxSteps) {
@@ -6595,7 +7321,7 @@ async function runNativeHunt(options, config, configDir, target, native) {
 }
 function recordHistory(configDir, outcome, maxRuns) {
   try {
-    const relativeRunDir = import_node_path14.default.relative(configDir, outcome.runDir);
+    const relativeRunDir = import_node_path16.default.relative(configDir, outcome.runDir);
     appendEntry(
       configDir,
       {
@@ -6612,11 +7338,11 @@ function recordHistory(configDir, outcome, maxRuns) {
 }
 
 // src/runner/suite.ts
-var import_node_path17 = __toESM(require("path"), 1);
+var import_node_path19 = __toESM(require("path"), 1);
 
 // src/reporter/ci-summary.ts
-var import_node_fs15 = __toESM(require("fs"), 1);
-var import_node_path15 = __toESM(require("path"), 1);
+var import_node_fs16 = __toESM(require("fs"), 1);
+var import_node_path17 = __toESM(require("path"), 1);
 var import_chalk = __toESM(require("chalk"), 1);
 function countCiResults(results) {
   return {
@@ -6646,9 +7372,9 @@ function writeCiResult(ciRunDir, results, startedAt, totalDurationMs, flaky = []
     ...flaky.length > 0 ? { flaky } : {},
     ...clusters.length > 0 ? { clusters } : {}
   };
-  import_node_fs15.default.mkdirSync(ciRunDir, { recursive: true });
-  const filePath = import_node_path15.default.join(ciRunDir, "ci-result.json");
-  import_node_fs15.default.writeFileSync(filePath, JSON.stringify(ciResult, null, 2) + "\n");
+  import_node_fs16.default.mkdirSync(ciRunDir, { recursive: true });
+  const filePath = import_node_path17.default.join(ciRunDir, "ci-result.json");
+  import_node_fs16.default.writeFileSync(filePath, JSON.stringify(ciResult, null, 2) + "\n");
   return filePath;
 }
 
@@ -6715,7 +7441,7 @@ function rankFlaky(configDir, options = {}) {
 }
 
 // src/backlog/fingerprint.ts
-var import_node_crypto2 = require("crypto");
+var import_node_crypto3 = require("crypto");
 function normalizeError(error) {
   return error.toLowerCase().replace(/0x[0-9a-f]+/g, "").replace(/\b\d+(?:\.\d+)?\s*(?:ms|s|px)\b/g, "").replace(/\s+/g, " ").trim();
 }
@@ -6738,7 +7464,7 @@ function computeFingerprint(failure) {
     failure.selector ?? "",
     normalizeError(failure.error)
   ];
-  return (0, import_node_crypto2.createHash)("sha1").update(parts.join("|")).digest("hex").slice(0, 8);
+  return (0, import_node_crypto3.createHash)("sha1").update(parts.join("|")).digest("hex").slice(0, 8);
 }
 function buildMarker(failure, hash) {
   const hunt = sanitizeMarkerValue(failure.hunt);
@@ -6782,8 +7508,8 @@ function clusterFailures(failures) {
 }
 
 // src/backlog/index.ts
-var import_node_fs16 = __toESM(require("fs"), 1);
-var import_node_path16 = __toESM(require("path"), 1);
+var import_node_fs17 = __toESM(require("fs"), 1);
+var import_node_path18 = __toESM(require("path"), 1);
 
 // src/backlog/parse.ts
 var MARKER_FP = /<!--\s*prowl:fp=([0-9a-f]+)/;
@@ -6873,7 +7599,7 @@ ${after}`;
 // src/backlog/index.ts
 function readFileOrEmpty(filePath) {
   try {
-    return import_node_fs16.default.readFileSync(filePath, "utf-8");
+    return import_node_fs17.default.readFileSync(filePath, "utf-8");
   } catch (error) {
     const err = error;
     if (err.code === "ENOENT") return "";
@@ -6889,7 +7615,7 @@ function buildFailure(hunt) {
   if (!hunt.runDir) return failure;
   let run;
   try {
-    const resultJson = readFileOrEmpty(import_node_path16.default.join(hunt.runDir, "result.json"));
+    const resultJson = readFileOrEmpty(import_node_path18.default.join(hunt.runDir, "result.json"));
     if (!resultJson) return failure;
     run = JSON.parse(resultJson);
   } catch (error) {
@@ -6918,8 +7644,8 @@ function extractFailures(suiteResult) {
 }
 function updateBacklogFromSuite(suiteResult, options = {}) {
   const projectRoot = options.projectRoot ?? process.cwd();
-  const backlogPath = options.backlogPath ?? import_node_path16.default.join(projectRoot, "docs", "backlog.md");
-  const resolvedPath = options.resolvedPath ?? import_node_path16.default.join(projectRoot, "docs", "resolved.md");
+  const backlogPath = options.backlogPath ?? import_node_path18.default.join(projectRoot, "docs", "backlog.md");
+  const resolvedPath = options.resolvedPath ?? import_node_path18.default.join(projectRoot, "docs", "resolved.md");
   const date = options.date ?? (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
   const summary = { created: [], regressions: [], skipped: [], backlogPath };
   const failures = extractFailures(suiteResult);
@@ -6951,8 +7677,8 @@ function updateBacklogFromSuite(suiteResult, options = {}) {
     }
   }
   if (ticketsToAdd.length > 0) {
-    import_node_fs16.default.mkdirSync(import_node_path16.default.dirname(backlogPath), { recursive: true });
-    import_node_fs16.default.writeFileSync(backlogPath, insertTickets(backlogContent, ticketsToAdd));
+    import_node_fs17.default.mkdirSync(import_node_path18.default.dirname(backlogPath), { recursive: true });
+    import_node_fs17.default.writeFileSync(backlogPath, insertTickets(backlogContent, ticketsToAdd));
   }
   return summary;
 }
@@ -7113,7 +7839,7 @@ async function runSuite(options = {}) {
   const clusters = clusterFailures(
     extractFailures({ result: { hunts: results }, resultPath: null })
   ).filter((cluster) => cluster.count > 1);
-  const ciRunDir = import_node_path17.default.join(configDir, "runs", timestamp("ci"));
+  const ciRunDir = import_node_path19.default.join(configDir, "runs", timestamp("ci"));
   const resultPath = writeCiResult(ciRunDir, results, startedAt, totalDurationMs, flaky, clusters);
   const { passed, failed, skipped } = countCiResults(results);
   return {
@@ -7798,11 +8524,17 @@ async function generateHunt(options) {
   DEFAULT_REQUEST_TIMEOUT_MS,
   DEFAULT_SIMULATOR_LOCK_ROOT,
   DEFAULT_WDA_REQUEST_TIMEOUT_MS,
+  HELPER_BINARY,
   INTERACTIVE_ROLES,
   IOS_INTERACTIVE_TYPES,
   IOS_MATCH_DIALECT,
   IOS_PRESS_KEYS,
   IOS_WINDOW_TYPE,
+  MACDRIVER_REPO,
+  MACDRIVER_SIGNING_AUTHORITY_PREFIX,
+  MACDRIVER_SIGNING_IDENTIFIER,
+  MACDRIVER_VERSION,
+  MACDRIVER_VERSION_PATTERN,
   MACOS_MATCH_DIALECT,
   NATIVE_ATTRIBUTE_MAP,
   SpawnMacHelperClient,
@@ -7832,6 +8564,8 @@ async function generateHunt(options) {
   closeIosSession,
   closeMacSession,
   clusterFailures,
+  codesignVerifier,
+  collectMacdriverStatus,
   computeFlakeScore,
   configSchema,
   createAndroidDriver,
@@ -7845,6 +8579,8 @@ async function generateHunt(options) {
   defaultAgentConnector,
   defaultIosAgentConnector,
   defaultWdaTestRunPreparer,
+  dittoExtractor,
+  downloadAndVerify,
   escapePredicateArg,
   escapeUiSelectorArg,
   extractElementId,
@@ -7855,6 +8591,7 @@ async function generateHunt(options) {
   healSelector,
   huntSchema,
   injectUsePortIntoXctestrun,
+  installMacdriver,
   interpolateHunt,
   iosAppAllowedIdentities,
   iosNodeToNative,
@@ -7871,7 +8608,14 @@ async function generateHunt(options) {
   loadHunt,
   loadHuntMeta,
   loadHuntTags,
+  macdriverAssetName,
+  macdriverAssetUrl,
   macdriverBuildInstructions,
+  macdriverChecksumName,
+  macdriverInstallRoot,
+  macdriverInstalledBinary,
+  macdriverReleaseTag,
+  macdriverVersionDir,
   matchAndroidSelector,
   matchIosSelector,
   matchNativeTree,
@@ -7881,6 +8625,8 @@ async function generateHunt(options) {
   parseAdbDevices,
   parseAndroidHierarchy,
   parseAndroidSelector,
+  parseChecksumFile,
+  parseCodesignDetails,
   parseForwardPort,
   parseIosHierarchy,
   parseIosSelector,
@@ -7907,19 +8653,26 @@ async function generateHunt(options) {
   resolveWdaTestRun,
   runHunt,
   runSuite,
+  runVersionProbe,
   selectDeviceSerial,
   selectSimulatorUdid,
+  sha256Hex,
   shortIosType,
   stepSchema,
+  tccGuidance,
   unquoteSelectorValue,
   unwrapAndroidTextSelector,
   unwrapIosTextSelector,
   unwrapNativeTextSelector,
   updateBacklogFromSuite,
+  validateMacdriverArchiveEntries,
+  validateMacdriverVersion,
+  verifyMacdriverSignature,
   waitForAgentReady,
   waitForWdaReady,
   wdaCacheDir,
   wdaTestRunArgs,
-  webOnlyReason
+  webOnlyReason,
+  zipinfoArchiveLister
 });
 //# sourceMappingURL=lib.cjs.map