swipium 1.1.0 → 1.3.0

package/dist/mobileAudit/checks.js

@@ -0,0 +1,251 @@
+// SWIPIUM-REQ-08 — executable mobile-audit checks. Each check observes the device through the
+// Driver + evidence helpers and returns an honest result: it only reports `pass` when Swipium
+// actually observed the evidence; otherwise `blocked`/`not_applicable`/`skipped`/`fail`. The runner
+// (runner.ts) wraps these with id/title/profile and records issues for fail/blocked outcomes.
+//
+// Checks never purchase, bypass OTP, delete real accounts, or tap unknown external links.
+import { rankCandidates } from '../explore/candidates.js';
+import { allowsControlledLogout } from '../explore/policy.js';
+import { parseSnapshot } from '../snapshot/parse.js';
+import { captureScreenshot, foreground, health, snapshotText } from './evidence.js';
+const ok = (reason, evidenceUris = []) => ({ status: 'pass', reason, evidenceUris });
+const na = (reason) => ({ status: 'not_applicable', reason, evidenceUris: [] });
+const skip = (reason) => ({ status: 'skipped', reason, evidenceUris: [] });
+// ---- smoke ---------------------------------------------------------------------------------
+export async function checkLaunch(ctx) {
+    if (!ctx.appId)
+        return skip('no app id known — cannot drive launch; relying on the current foreground app');
+    try {
+        await ctx.driver.terminateApp(ctx.appId).catch(() => { });
+        await ctx.driver.launchApp(ctx.appId);
+    }
+    catch (e) {
+        return { status: 'fail', category: 'app_bug', severity: 'blocker', reason: `app failed to launch: ${String(e.message ?? e)}`, evidenceUris: [], nextStep: 'Confirm the app is installed and (for debug builds) Metro is reachable.' };
+    }
+    const fg = await foreground(ctx);
+    const shot = await captureScreenshot(ctx, 'audit launch');
+    const evidence = shot ? [shot] : [];
+    if (fg && ctx.appId && fg.includes(ctx.appId.split('/')[0]))
+        return ok(`launched, foreground=${fg}`, evidence);
+    return { status: 'fail', category: 'app_bug', severity: 'high', reason: `expected ${ctx.appId} foreground, saw ${fg}`, evidenceUris: evidence };
+}
+export async function checkHealthScan(ctx) {
+    const h = await health(ctx);
+    const shot = await captureScreenshot(ctx, 'audit health');
+    const evidence = shot ? [shot] : [];
+    if (!h.nativeHealthy) {
+        const crash = h.nativeStatus === 'native_crash' || h.nativeStatus === 'anr';
+        return { status: 'fail', category: 'blocker_app_bug', severity: 'blocker', reason: `native ${h.nativeStatus}`, evidenceUris: evidence, nextStep: crash ? 'Capture the crash/ANR log and fix it; do not blindly retry.' : undefined };
+    }
+    if (h.appStatus === 'error')
+        return { status: 'fail', category: 'blocker_app_bug', severity: 'blocker', reason: 'app error surface (RedBox/error boundary)', evidenceUris: evidence };
+    if (h.appStatus === 'degraded')
+        return { status: 'fail', category: 'app_bug', severity: 'medium', reason: 'recoverable app warning (LogBox)', evidenceUris: evidence };
+    return ok(`healthy (foreground=${h.foreground})`, evidence);
+}
+export async function checkNavigation(ctx) {
+    let xml = '';
+    try {
+        xml = await ctx.driver.dumpXml();
+    }
+    catch {
+        return skip('no UI tree available to evaluate navigation');
+    }
+    let elements;
+    try {
+        elements = parseSnapshot(xml).allNodes.map((n, i) => ({ ref: `@n${i}`, role: n.cls, label: n.desc || undefined, text: n.text || undefined, id: n.id || undefined, clickable: n.clickable === true, bounds: n.bounds }));
+    }
+    catch {
+        return skip('could not parse the UI tree');
+    }
+    const candidates = rankCandidates(elements);
+    const safe = candidates.find((c) => c.risk === 'safe' && c.bounds);
+    if (!safe || !safe.bounds)
+        return skip('no safe navigation control found on this screen');
+    const before = await foreground(ctx);
+    try {
+        await ctx.driver.tapXY(Math.round(safe.bounds.x + safe.bounds.w / 2), Math.round(safe.bounds.y + safe.bounds.h / 2));
+    }
+    catch {
+        return skip('navigation tap not supported on this backend');
+    }
+    const h = await health(ctx);
+    if (!h.healthy)
+        return { status: 'fail', category: 'app_bug', severity: 'high', reason: `navigation tap "${safe.label ?? ''}" produced ${h.nativeStatus}/${h.appStatus}`, evidenceUris: [] };
+    const after = await foreground(ctx);
+    return ok(`navigated safely via "${safe.label ?? safe.locator?.value ?? 'control'}" (${before}→${after})`);
+}
+// ---- store compliance ----------------------------------------------------------------------
+function found(text, ...needles) {
+    return needles.some((n) => text.includes(n));
+}
+export async function checkPrivacyLink(ctx, text) {
+    const shot = await captureScreenshot(ctx, 'audit privacy');
+    if (found(text, 'privacy policy', 'privacy notice'))
+        return ok('Privacy Policy surface found', shot ? [shot] : []);
+    return { status: 'fail', category: 'store_compliance', severity: 'high', reason: 'no Privacy Policy link found on the inspected screens', evidenceUris: shot ? [shot] : [], nextStep: 'Expose a Privacy Policy link (required for app stores).' };
+}
+export async function checkTermsLink(ctx, text) {
+    const shot = await captureScreenshot(ctx, 'audit terms');
+    if (found(text, 'terms of service', 'terms of use', 'terms and conditions', 'terms'))
+        return ok('Terms surface found', shot ? [shot] : []);
+    return { status: 'fail', category: 'store_compliance', severity: 'medium', reason: 'no Terms link found on the inspected screens', evidenceUris: shot ? [shot] : [] };
+}
+export async function checkAccountDeletion(ctx, text) {
+    const hasAccountContext = found(text, 'account', 'profile', 'sign out', 'log out', 'settings');
+    if (!hasAccountContext)
+        return na('no account/profile surface observed — account deletion not applicable here');
+    if (found(text, 'delete account', 'delete your account', 'data deletion', 'close account', 'remove account'))
+        return ok('account deletion / data-deletion path found');
+    return { status: 'fail', category: 'store_compliance', severity: 'high', reason: 'account surface present but no delete-account / data-deletion path found', evidenceUris: [], nextStep: 'Expose an account/data deletion flow (required where the app has accounts).' };
+}
+export async function checkSubscriptionManagement(ctx, text) {
+    const hasSub = found(text, 'subscribe', 'subscription', 'premium', 'free trial', 'upgrade');
+    if (!hasSub)
+        return na('no subscription/paywall surface observed');
+    if (found(text, 'restore purchase', 'restore purchases', 'manage subscription', 'manage your subscription'))
+        return ok('restore / manage-subscription path found');
+    return { status: 'fail', category: 'store_compliance', severity: 'medium', reason: 'subscription surface present but no restore-purchase / manage-subscription path found', evidenceUris: [] };
+}
+export async function checkPaywall(ctx, text) {
+    const isPaywall = found(text, 'subscribe', 'free trial', 'start trial', 'unlock premium', 'upgrade to');
+    if (!isPaywall)
+        return na('no paywall observed');
+    const hasFreePath = found(text, 'not now', 'maybe later', 'skip', 'continue free', 'no thanks', 'close', 'dismiss');
+    if (hasFreePath)
+        return ok('soft paywall with a free/dismiss path');
+    return { status: 'blocked', category: 'hard_gate', severity: 'medium', reason: 'hard paywall with no permitted test path — recorded without purchase', evidenceUris: [], nextStep: 'A hard gate stops only this workflow, not the whole run.' };
+}
+export function checkExternalLinks() {
+    return skip('external links are not auto-opened for safety — verify manually');
+}
+// ---- resilience ----------------------------------------------------------------------------
+const OFFLINE_COPY = ['no internet', 'no connection', 'offline', 'check your connection', 'network unavailable', 'no network'];
+export async function checkOfflineEntry(ctx) {
+    try {
+        await ctx.driver.setAirplane(true);
+    }
+    catch {
+        return { status: 'blocked', reason: 'network manipulation unavailable on this backend', evidenceUris: [] };
+    }
+    const h = await health(ctx);
+    const text = await snapshotText(ctx);
+    const shot = await captureScreenshot(ctx, 'audit offline');
+    const evidence = shot ? [shot] : [];
+    if (!h.healthy)
+        return { status: 'fail', category: 'app_bug', severity: 'high', reason: `app unhealthy offline (${h.nativeStatus}/${h.appStatus})`, evidenceUris: evidence };
+    if (found(text, ...OFFLINE_COPY))
+        return ok('app shows an expected offline state', evidence);
+    return ok('app stayed healthy offline (no explicit offline message observed)', evidence);
+}
+export async function checkNetworkRestoration(ctx) {
+    try {
+        await ctx.driver.setAirplane(false);
+    }
+    catch {
+        return { status: 'blocked', reason: 'network manipulation unavailable on this backend', evidenceUris: [] };
+    }
+    const h = await health(ctx);
+    if (!h.healthy)
+        return { status: 'fail', category: 'app_bug', severity: 'high', reason: `app did not recover after connectivity returned (${h.nativeStatus}/${h.appStatus})`, evidenceUris: [] };
+    return ok('app recovered after network restoration');
+}
+export async function checkProcessRelaunch(ctx) {
+    if (!ctx.appId)
+        return skip('no app id known — cannot drive a kill/relaunch');
+    try {
+        await ctx.driver.terminateApp(ctx.appId);
+        await ctx.driver.launchApp(ctx.appId);
+    }
+    catch (e) {
+        return { status: 'fail', category: 'app_bug', severity: 'high', reason: `relaunch failed: ${String(e.message ?? e)}`, evidenceUris: [] };
+    }
+    const h = await health(ctx);
+    const shot = await captureScreenshot(ctx, 'audit relaunch');
+    if (!h.healthy)
+        return { status: 'fail', category: 'app_bug', severity: 'high', reason: `app unhealthy after relaunch (${h.nativeStatus}/${h.appStatus})`, evidenceUris: shot ? [shot] : [] };
+    return ok('app returned to a sane state after kill/relaunch', shot ? [shot] : []);
+}
+export function checkRotation() {
+    return skip('rotation is not driven automatically — verify manually where supported');
+}
+/**
+ * Find and tap a "Log out" control on the current screen, gated by the controlled account-cycle
+ * policy (logout permitted only on a disposable account; delete/pay/send stay refused). Returns the
+ * post-logout screen text so the caller can check the forgot-password entrypoint on the LOGGED-OUT
+ * surface — without a full exploration that would auto-re-login via stored credentials.
+ */
+export async function findAndTapLogout(ctx, disposableAccount) {
+    let xml = '';
+    try {
+        xml = await ctx.driver.dumpXml();
+    }
+    catch {
+        return { tapped: false, loggedOutText: '', authSurface: false };
+    }
+    let nodes;
+    try {
+        nodes = parseSnapshot(xml).allNodes;
+    }
+    catch {
+        return { tapped: false, loggedOutText: '', authSurface: false };
+    }
+    const logout = nodes.find((n) => n.clickable && /log\s?out|sign\s?out/i.test(`${n.text} ${n.desc} ${n.id}`));
+    if (!logout)
+        return { tapped: false, loggedOutText: await snapshotText(ctx), authSurface: false };
+    // Controlled exception: only a genuine logout, only on a disposable account.
+    if (!allowsControlledLogout({ label: logout.text || logout.desc, id: logout.id }, { accountCycle: true, disposableAccount })) {
+        return { tapped: false, loggedOutText: await snapshotText(ctx), authSurface: false };
+    }
+    const [x1, y1, x2, y2] = logout.bounds;
+    try {
+        await ctx.driver.tapXY(Math.round((x1 + x2) / 2), Math.round((y1 + y2) / 2));
+    }
+    catch {
+        return { tapped: false, loggedOutText: await snapshotText(ctx), authSurface: false };
+    }
+    const loggedOutText = await snapshotText(ctx);
+    const authSurface = /sign\s?in|log\s?in|email|password|username|forgot|create account/.test(loggedOutText);
+    return { tapped: true, loggedOutText, authSurface };
+}
+/**
+ * Evaluate the forgot-password entrypoint from the LOGGED-OUT auth surface (captured right after
+ * logout, before any re-login). Pass when a forgot/reset link is present; a confirmed login screen
+ * without one is an improvement; if logout couldn't reach an auth surface, return blocked rather than
+ * falsely failing (REQ-08 account-cycle bug fix).
+ */
+export function checkForgotPassword(loggedOutText) {
+    const isAuthSurface = /sign\s?in|log\s?in|email|password|username|forgot|create account/.test(loggedOutText);
+    const hasForgot = /forgot.?password|reset.?password|forgot your password|trouble signing in/.test(loggedOutText);
+    if (hasForgot)
+        return { status: 'pass', reason: 'forgot-password entrypoint is present on the logged-out auth surface (not exercised — Swipium never consumes email/OTP)', evidenceUris: [], workflow: 'account_cycle' };
+    if (isAuthSurface)
+        return { status: 'fail', category: 'improvement', severity: 'low', reason: 'no forgot-password entrypoint on the logged-out login screen', evidenceUris: [], workflow: 'account_cycle', nextStep: 'Add a forgot/reset-password entrypoint on the login screen.' };
+    return { status: 'blocked', reason: 'logout not confirmed — could not reach the logged-out auth surface to check the forgot-password entrypoint', evidenceUris: [], workflow: 'account_cycle' };
+}
+// ---- readiness -----------------------------------------------------------------------------
+export async function checkLocatorReadiness(ctx) {
+    let xml = '';
+    try {
+        xml = await ctx.driver.dumpXml();
+    }
+    catch {
+        return skip('no UI tree available to assess locator readiness');
+    }
+    let nodes;
+    try {
+        nodes = parseSnapshot(xml).allNodes;
+    }
+    catch {
+        return skip('could not parse the UI tree');
+    }
+    const clickable = nodes.filter((n) => n.clickable === true);
+    if (clickable.length === 0)
+        return skip('no interactive controls on this screen');
+    const durable = clickable.filter((n) => n.id || n.desc);
+    const pct = Math.round((durable.length / clickable.length) * 100);
+    if (pct >= 70)
+        return ok(`${pct}% of interactive controls have durable locators`);
+    return { status: 'fail', category: 'accessibility_readiness', severity: 'low', reason: `only ${pct}% of interactive controls have durable locators (testID/accessibility id)`, evidenceUris: [], nextStep: 'Add accessibility identifiers / testIDs to important controls.' };
+}
+//# sourceMappingURL=checks.js.map

package/dist/mobileAudit/checks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"checks.js","sourceRoot":"","sources":["../../src/mobileAudit/checks.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,8FAA8F;AAC9F,oGAAoG;AACpG,8FAA8F;AAC9F,EAAE;AACF,0FAA0F;AAE1F,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAGrD,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,EAAyB,MAAM,eAAe,CAAC;AAa3G,MAAM,EAAE,GAAG,CAAC,MAAc,EAAE,eAAyB,EAAE,EAAkB,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;AACvH,MAAM,EAAE,GAAG,CAAC,MAAc,EAAkB,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAC;AACxG,MAAM,IAAI,GAAG,CAAC,MAAc,EAAkB,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAC;AAEnG,+FAA+F;AAE/F,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,GAAqB;IACrD,IAAI,CAAC,GAAG,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC,8EAA8E,CAAC,CAAC;IAC5G,IAAI,CAAC;QACH,MAAM,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACzD,MAAM,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,yBAAyB,MAAM,CAAE,CAAW,CAAC,OAAO,IAAI,CAAC,CAAC,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,QAAQ,EAAE,yEAAyE,EAAE,CAAC;IACnP,CAAC;IACD,MAAM,EAAE,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACpC,IAAI,EAAE,IAAI,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC,wBAAwB,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC;IAC/G,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,GAAG,CAAC,KAAK,oBAAoB,EAAE,EAAE,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC;AAClJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,GAAqB;IACzD,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC;IAC5B,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACpC,IAAI,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QACrB,MAAM,KAAK,GAAG,CAAC,CAAC,YAAY,KAAK,cAAc,IAAI,CAAC,CAAC,YAAY,KAAK,KAAK,CAAC;QAC5E,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,iBAAiB,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,6DAA6D,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;IACvO,CAAC;IACD,IAAI,CAAC,CAAC,SAAS,KAAK,OAAO;QAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,iBAAiB,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,2CAA2C,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC;IACtL,IAAI,CAAC,CAAC,SAAS,KAAK,UAAU;QAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,kCAAkC,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC;IACvK,OAAO,EAAE,CAAC,uBAAuB,CAAC,CAAC,UAAU,GAAG,EAAE,QAAQ,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,GAAqB;IACzD,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,6CAA6C,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,QAAQ,CAAC;IACb,IAAI,CAAC;QACH,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,IAAI,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,KAAK,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC1N,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,6BAA6B,CAAC,CAAC;IAC7C,CAAC;IACD,MAAM,UAAU,GAAG,cAAc,CAAC,QAAiB,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC;IACnE,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC,iDAAiD,CAAC,CAAC;IAC1F,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACvH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,8CAA8C,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,CAAC,CAAC,CAAC,OAAO;QAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,mBAAmB,IAAI,CAAC,KAAK,IAAI,EAAE,cAAc,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;IAC7L,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC;IACpC,OAAO,EAAE,CAAC,yBAAyB,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,OAAO,EAAE,KAAK,IAAI,SAAS,MAAM,MAAM,IAAI,KAAK,GAAG,CAAC,CAAC;AAC7G,CAAC;AAED,+FAA+F;AAE/F,SAAS,KAAK,CAAC,IAAY,EAAE,GAAG,OAAiB;IAC/C,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,GAAqB,EAAE,IAAY;IACxE,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IAC3D,IAAI,KAAK,CAAC,IAAI,EAAE,gBAAgB,EAAE,gBAAgB,CAAC;QAAE,OAAO,EAAE,CAAC,8BAA8B,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACnH,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,kBAAkB,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,uDAAuD,EAAE,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,yDAAyD,EAAE,CAAC;AACpP,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,GAAqB,EAAE,IAAY;IACtE,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IACzD,IAAI,KAAK,CAAC,IAAI,EAAE,kBAAkB,EAAE,cAAc,EAAE,sBAAsB,EAAE,OAAO,CAAC;QAAE,OAAO,EAAE,CAAC,qBAAqB,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC3I,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,kBAAkB,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,8CAA8C,EAAE,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AACxK,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,GAAqB,EAAE,IAAY;IAC5E,MAAM,iBAAiB,GAAG,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;IAC/F,IAAI,CAAC,iBAAiB;QAAE,OAAO,EAAE,CAAC,4EAA4E,CAAC,CAAC;IAChH,IAAI,KAAK,CAAC,IAAI,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,eAAe,EAAE,eAAe,EAAE,gBAAgB,CAAC;QAAE,OAAO,EAAE,CAAC,6CAA6C,CAAC,CAAC;IACvK,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,kBAAkB,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,0EAA0E,EAAE,YAAY,EAAE,EAAE,EAAE,QAAQ,EAAE,6EAA6E,EAAE,CAAC;AAC3Q,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,GAAqB,EAAE,IAAY;IACnF,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,cAAc,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;IAC5F,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC,0CAA0C,CAAC,CAAC;IACnE,IAAI,KAAK,CAAC,IAAI,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,0BAA0B,CAAC;QAAE,OAAO,EAAE,CAAC,0CAA0C,CAAC,CAAC;IACnK,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,kBAAkB,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,uFAAuF,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;AACjM,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,GAAqB,EAAE,IAAY;IACpE,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa,EAAE,gBAAgB,EAAE,YAAY,CAAC,CAAC;IACxG,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,CAAC,qBAAqB,CAAC,CAAC;IACjD,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE,eAAe,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;IACpH,IAAI,WAAW;QAAE,OAAO,EAAE,CAAC,uCAAuC,CAAC,CAAC;IACpE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,sEAAsE,EAAE,YAAY,EAAE,EAAE,EAAE,QAAQ,EAAE,0DAA0D,EAAE,CAAC;AAClP,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,OAAO,IAAI,CAAC,iEAAiE,CAAC,CAAC;AACjF,CAAC;AAED,+FAA+F;AAE/F,MAAM,YAAY,GAAG,CAAC,aAAa,EAAE,eAAe,EAAE,SAAS,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,YAAY,CAAC,CAAC;AAE/H,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,GAAqB;IAC3D,IAAI,CAAC;QACH,MAAM,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,kDAAkD,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;IAC7G,CAAC;IACD,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC;IAC5B,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IAC3D,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACpC,IAAI,CAAC,CAAC,CAAC,OAAO;QAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,0BAA0B,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,SAAS,GAAG,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC;IAC7K,IAAI,KAAK,CAAC,IAAI,EAAE,GAAG,YAAY,CAAC;QAAE,OAAO,EAAE,CAAC,qCAAqC,EAAE,QAAQ,CAAC,CAAC;IAC7F,OAAO,EAAE,CAAC,mEAAmE,EAAE,QAAQ,CAAC,CAAC;AAC3F,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,GAAqB;IACjE,IAAI,CAAC;QACH,MAAM,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,kDAAkD,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;IAC7G,CAAC;IACD,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,CAAC,CAAC,CAAC,OAAO;QAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,oDAAoD,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,SAAS,GAAG,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;IACjM,OAAO,EAAE,CAAC,yCAAyC,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,GAAqB;IAC9D,IAAI,CAAC,GAAG,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC,gDAAgD,CAAC,CAAC;IAC9E,IAAI,CAAC;QACH,MAAM,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACzC,MAAM,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,oBAAoB,MAAM,CAAE,CAAW,CAAC,OAAO,IAAI,CAAC,CAAC,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;IACtJ,CAAC;IACD,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC;IAC5B,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;IAC5D,IAAI,CAAC,CAAC,CAAC,OAAO;QAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,iCAAiC,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,SAAS,GAAG,EAAE,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IAC9L,OAAO,EAAE,CAAC,kDAAkD,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AACpF,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,OAAO,IAAI,CAAC,wEAAwE,CAAC,CAAC;AACxF,CAAC;AAYD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,GAAqB,EAAE,iBAA0B;IACtF,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;IAClE,CAAC;IACD,IAAI,KAAK,CAAC;IACV,IAAI,CAAC;QACH,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;IAClE,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,uBAAuB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAC7G,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC,GAAG,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;IAClG,6EAA6E;IAC7E,IAAI,CAAC,sBAAsB,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,EAAE,CAAC;QAC7H,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC,GAAG,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;IACvF,CAAC;IACD,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;IACvC,IAAI,CAAC;QACH,MAAM,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC/E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC,GAAG,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;IACvF,CAAC;IACD,MAAM,aAAa,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;IAC9C,MAAM,WAAW,GAAG,kEAAkE,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC3G,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,WAAW,EAAE,CAAC;AACtD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,aAAqB;IACvD,MAAM,aAAa,GAAG,kEAAkE,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC7G,MAAM,SAAS,GAAG,0EAA0E,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACjH,IAAI,SAAS;QAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,yHAAyH,EAAE,YAAY,EAAE,EAAE,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC;IACzN,IAAI,aAAa;QAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,8DAA8D,EAAE,YAAY,EAAE,EAAE,EAAE,QAAQ,EAAE,eAAe,EAAE,QAAQ,EAAE,6DAA6D,EAAE,CAAC;IACrR,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,4GAA4G,EAAE,YAAY,EAAE,EAAE,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC;AAClM,CAAC;AAED,+FAA+F;AAE/F,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,GAAqB;IAC/D,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,kDAAkD,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,KAAK,CAAC;IACV,IAAI,CAAC;QACH,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,6BAA6B,CAAC,CAAC;IAC7C,CAAC;IACD,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC;IAC5D,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,wCAAwC,CAAC,CAAC;IAClF,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;IACxD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC;IAClE,IAAI,GAAG,IAAI,EAAE;QAAE,OAAO,EAAE,CAAC,GAAG,GAAG,iDAAiD,CAAC,CAAC;IAClF,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,yBAAyB,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,GAAG,2EAA2E,EAAE,YAAY,EAAE,EAAE,EAAE,QAAQ,EAAE,gEAAgE,EAAE,CAAC;AAChR,CAAC"}

package/dist/mobileAudit/evidence.js

@@ -0,0 +1,49 @@
+// SWIPIUM-REQ-08 — evidence + observation helpers for the executable mobile audit.
+//
+// Thin wrappers over the Driver + SessionStore so audit checks can capture a screenshot, read the
+// current screen's visible text, and run a health check without each check duplicating that plumbing.
+// Sensitive-mode aware (no pixels when session.sensitive). Best-effort — never throws.
+import { parseSnapshot } from '../snapshot/parse.js';
+import { checkHealth } from '../oracle/health.js';
+/** Capture an evidence screenshot (sensitive-mode aware). Returns the artifact URI or undefined. */
+export async function captureScreenshot(ctx, label) {
+    if (ctx.session.sensitive)
+        return undefined;
+    try {
+        const png = await ctx.driver.screenshot();
+        return ctx.sessions.saveArtifact(ctx.session, 'screenshot', `audit-${Date.now()}.png`, png, 'image/png', label);
+    }
+    catch {
+        return undefined;
+    }
+}
+/** Read the current screen's visible text (lowercased, joined). Best-effort → '' on failure. */
+export async function snapshotText(ctx) {
+    try {
+        const xml = await ctx.driver.dumpXml();
+        if (!xml)
+            return '';
+        const nodes = parseSnapshot(xml).allNodes;
+        return nodes
+            .map((n) => `${n.text ?? ''} ${n.desc ?? ''} ${n.id ?? ''}`)
+            .join('  ')
+            .toLowerCase();
+    }
+    catch {
+        return '';
+    }
+}
+/** Run a health check on the current screen. */
+export async function health(ctx) {
+    return checkHealth(ctx.driver, ctx.appId);
+}
+/** Current foreground app/owner. Best-effort → 'unknown'. */
+export async function foreground(ctx) {
+    try {
+        return await ctx.driver.foregroundOwner();
+    }
+    catch {
+        return 'unknown';
+    }
+}
+//# sourceMappingURL=evidence.js.map

package/dist/mobileAudit/evidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence.js","sourceRoot":"","sources":["../../src/mobileAudit/evidence.ts"],"names":[],"mappings":"AAAA,mFAAmF;AACnF,EAAE;AACF,kGAAkG;AAClG,sGAAsG;AACtG,uFAAuF;AAEvF,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,WAAW,EAAqB,MAAM,qBAAqB,CAAC;AAWrE,oGAAoG;AACpG,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,GAAqB,EAAE,KAAa;IAC1E,IAAI,GAAG,CAAC,OAAO,CAAC,SAAS;QAAE,OAAO,SAAS,CAAC;IAC5C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QAC1C,OAAO,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,YAAY,EAAE,SAAS,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;IAClH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,gGAAgG;AAChG,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,GAAqB;IACtD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACvC,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,CAAC;QACpB,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;QAC1C,OAAO,KAAK;aACT,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,EAAE,IAAI,CAAC,CAAC,IAAI,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC;aAC3D,IAAI,CAAC,IAAI,CAAC;aACV,WAAW,EAAE,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,gDAAgD;AAChD,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,GAAqB;IAChD,OAAO,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;AAC5C,CAAC;AAED,6DAA6D;AAC7D,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,GAAqB;IACpD,IAAI,CAAC;QACH,OAAO,MAAM,GAAG,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}

package/dist/mobileAudit/profiles.js

@@ -0,0 +1,73 @@
+// SWIPIUM Mobile QA Toolkit — profile + check definitions (SWIPIUM-REQ-07 "Mobile QA Toolkit").
+//
+// A named, profile-based mobile-release audit. PURE data + selection logic: the qa_mobile_audit tool
+// turns a chosen profile into an ordered checklist (with expected behavior + report classification)
+// and a safety contract the agent executes via the existing driver tools (qa_act / qa_snapshot /
+// qa_app_control / qa_network …). Keeping the catalog pure makes profile behavior unit-testable.
+export const ALL_PROFILES = ['smoke', 'account_cycle', 'store_compliance', 'resilience', 'release_gate'];
+const CHECKS = {
+    launch: { id: 'launch', title: 'App launch + main screen', expected: 'App launches and renders its main screen with no crash/RedBox.', classification: 'blocker_app_bug' },
+    health_scan: { id: 'health_scan', title: 'Crash / RedBox / log scan', expected: 'No native crash, RedBox, unhandled exception, or error surface on the main flow.', classification: 'app_bug' },
+    navigation: { id: 'navigation', title: 'Basic navigation', expected: 'Primary tabs / navigation are reachable and stable.', classification: 'app_bug' },
+    privacy_link: { id: 'privacy_link', title: 'Privacy Policy link', expected: 'Privacy Policy link exists, opens, and is reachable.', classification: 'store_compliance' },
+    terms_link: { id: 'terms_link', title: 'Terms link', expected: 'Terms link exists where account/payment/subscription surfaces need it.', classification: 'store_compliance' },
+    account_deletion: { id: 'account_deletion', title: 'Account deletion path', expected: 'Account/settings exposes a delete-account or data-deletion flow when the app has accounts.', classification: 'store_compliance' },
+    subscription_management: { id: 'subscription_management', title: 'Subscription management / restore', expected: 'Paywall/account exposes restore-purchase and a manage-subscription path or clear system handoff.', classification: 'store_compliance' },
+    paywall: { id: 'paywall', title: 'Paywall classification', expected: 'Soft paywall can be dismissed or a free path exists; a hard paywall is recorded without purchase.', classification: 'hard_gate' },
+    external_links: { id: 'external_links', title: 'External links', expected: 'External links (support/help/store) open without crashing the app.', classification: 'improvement' },
+    create_account: { id: 'create_account', title: 'Create account', expected: 'A safe generated account can be created in test/staging.', classification: 'app_bug', requiresAccountCycle: true, requiresGeneratedData: true },
+    logout: { id: 'logout', title: 'Logout', expected: 'User can log out from the disposable test account.', classification: 'app_bug', requiresAccountCycle: true },
+    login_again: { id: 'login_again', title: 'Login again', expected: 'The same generated account can log back in.', classification: 'app_bug', requiresAccountCycle: true, requiresGeneratedData: true },
+    forgot_password: { id: 'forgot_password', title: 'Forgot password surface', expected: 'A forgot-password entrypoint exists and accepts a test email without consuming email/OTP.', classification: 'improvement', requiresAccountCycle: true },
+    offline_entry: { id: 'offline_entry', title: 'Offline entry', expected: 'App handles offline state gracefully (expected offline message, no crash/blank).', classification: 'app_bug' },
+    network_restoration: { id: 'network_restoration', title: 'Network restoration', expected: 'App recovers after connectivity returns.', classification: 'app_bug' },
+    process_relaunch: { id: 'process_relaunch', title: 'Process kill / relaunch', expected: 'After process kill + relaunch the app restores or returns to a sane state.', classification: 'app_bug' },
+    rotation: { id: 'rotation', title: 'Rotation', expected: 'Rotation (where supported) does not crash or lose critical state.', classification: 'improvement' },
+    locator_readiness: { id: 'locator_readiness', title: 'Accessibility / test IDs', expected: 'Important buttons/fields have stable locators.', classification: 'accessibility_readiness' },
+    issue_recurrence: { id: 'issue_recurrence', title: 'Issue-ledger recurrence', expected: 'No previously-fixed issue has regressed (issue ledger reports no reopened fingerprints).', classification: 'app_bug' },
+};
+const PROFILE_CHECKS = {
+    smoke: ['launch', 'health_scan', 'navigation'],
+    account_cycle: ['create_account', 'logout', 'login_again', 'forgot_password'],
+    store_compliance: ['privacy_link', 'terms_link', 'account_deletion', 'subscription_management', 'paywall', 'external_links'],
+    resilience: ['offline_entry', 'network_restoration', 'process_relaunch', 'rotation'],
+    release_gate: [], // composed below
+};
+// release_gate combines smoke + account-cycle + store-compliance + resilience + readiness + recurrence.
+PROFILE_CHECKS.release_gate = [
+    ...PROFILE_CHECKS.smoke,
+    ...PROFILE_CHECKS.account_cycle,
+    ...PROFILE_CHECKS.store_compliance,
+    ...PROFILE_CHECKS.resilience,
+    'locator_readiness',
+    'issue_recurrence',
+];
+export function checksForProfile(profile) {
+    return PROFILE_CHECKS[profile].map((id) => CHECKS[id]);
+}
+/**
+ * Resolve the account-cycle safety contract for a profile. Logout is permitted ONLY in the
+ * controlled account-cycle / release-gate profiles, never in broad exploration (spec §Account-cycle
+ * safety). A real account is never deleted; OTP/MFA always returns needs_input.
+ */
+export function accountCycleSafety(profile, opts = {}) {
+    const controlled = profile === 'account_cycle' || profile === 'release_gate';
+    const reasons = [];
+    if (controlled)
+        reasons.push('account-cycle profile: logout permitted as an expected step on a disposable account');
+    else
+        reasons.push('logout stays destructive outside the controlled account-cycle workflow');
+    if (controlled && !opts.allowGeneratedData)
+        reasons.push('generated-data permission required: pass allowGeneratedData in test/staging');
+    if (opts.allowTestAccountDeletion)
+        reasons.push('test-account deletion allowed by explicit policy (disposable accounts only)');
+    return {
+        allowsLogout: controlled,
+        requiresGeneratedData: controlled,
+        allowsAccountDeletion: controlled && opts.allowTestAccountDeletion === true,
+        neverDeletesRealAccount: true,
+        otpReturnsNeedsInput: true,
+        reasons,
+    };
+}
+//# sourceMappingURL=profiles.js.map

package/dist/mobileAudit/profiles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profiles.js","sourceRoot":"","sources":["../../src/mobileAudit/profiles.ts"],"names":[],"mappings":"AAAA,gGAAgG;AAChG,EAAE;AACF,qGAAqG;AACrG,oGAAoG;AACpG,iGAAiG;AACjG,iGAAiG;AAMjG,MAAM,CAAC,MAAM,YAAY,GAAmB,CAAC,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,YAAY,EAAE,cAAc,CAAC,CAAC;AAczH,MAAM,MAAM,GAA+B;IACzC,MAAM,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,0BAA0B,EAAE,QAAQ,EAAE,gEAAgE,EAAE,cAAc,EAAE,iBAAiB,EAAE;IAC1K,WAAW,EAAE,EAAE,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,2BAA2B,EAAE,QAAQ,EAAE,kFAAkF,EAAE,cAAc,EAAE,SAAS,EAAE;IAC/L,UAAU,EAAE,EAAE,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,kBAAkB,EAAE,QAAQ,EAAE,qDAAqD,EAAE,cAAc,EAAE,SAAS,EAAE;IAEvJ,YAAY,EAAE,EAAE,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,qBAAqB,EAAE,QAAQ,EAAE,sDAAsD,EAAE,cAAc,EAAE,kBAAkB,EAAE;IACxK,UAAU,EAAE,EAAE,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,wEAAwE,EAAE,cAAc,EAAE,kBAAkB,EAAE;IAC7K,gBAAgB,EAAE,EAAE,EAAE,EAAE,kBAAkB,EAAE,KAAK,EAAE,uBAAuB,EAAE,QAAQ,EAAE,4FAA4F,EAAE,cAAc,EAAE,kBAAkB,EAAE;IACxN,uBAAuB,EAAE,EAAE,EAAE,EAAE,yBAAyB,EAAE,KAAK,EAAE,mCAAmC,EAAE,QAAQ,EAAE,kGAAkG,EAAE,cAAc,EAAE,kBAAkB,EAAE;IACxP,OAAO,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,wBAAwB,EAAE,QAAQ,EAAE,mGAAmG,EAAE,cAAc,EAAE,WAAW,EAAE;IACvM,cAAc,EAAE,EAAE,EAAE,EAAE,gBAAgB,EAAE,KAAK,EAAE,gBAAgB,EAAE,QAAQ,EAAE,oEAAoE,EAAE,cAAc,EAAE,aAAa,EAAE;IAEhL,cAAc,EAAE,EAAE,EAAE,EAAE,gBAAgB,EAAE,KAAK,EAAE,gBAAgB,EAAE,QAAQ,EAAE,0DAA0D,EAAE,cAAc,EAAE,SAAS,EAAE,oBAAoB,EAAE,IAAI,EAAE,qBAAqB,EAAE,IAAI,EAAE;IAC3N,MAAM,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,oDAAoD,EAAE,cAAc,EAAE,SAAS,EAAE,oBAAoB,EAAE,IAAI,EAAE;IAChK,WAAW,EAAE,EAAE,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,6CAA6C,EAAE,cAAc,EAAE,SAAS,EAAE,oBAAoB,EAAE,IAAI,EAAE,qBAAqB,EAAE,IAAI,EAAE;IACrM,eAAe,EAAE,EAAE,EAAE,EAAE,iBAAiB,EAAE,KAAK,EAAE,yBAAyB,EAAE,QAAQ,EAAE,2FAA2F,EAAE,cAAc,EAAE,aAAa,EAAE,oBAAoB,EAAE,IAAI,EAAE;IAE9O,aAAa,EAAE,EAAE,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE,eAAe,EAAE,QAAQ,EAAE,kFAAkF,EAAE,cAAc,EAAE,SAAS,EAAE;IACvL,mBAAmB,EAAE,EAAE,EAAE,EAAE,qBAAqB,EAAE,KAAK,EAAE,qBAAqB,EAAE,QAAQ,EAAE,0CAA0C,EAAE,cAAc,EAAE,SAAS,EAAE;IACjK,gBAAgB,EAAE,EAAE,EAAE,EAAE,kBAAkB,EAAE,KAAK,EAAE,yBAAyB,EAAE,QAAQ,EAAE,4EAA4E,EAAE,cAAc,EAAE,SAAS,EAAE;IACjM,QAAQ,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,mEAAmE,EAAE,cAAc,EAAE,aAAa,EAAE;IAE7J,iBAAiB,EAAE,EAAE,EAAE,EAAE,mBAAmB,EAAE,KAAK,EAAE,0BAA0B,EAAE,QAAQ,EAAE,gDAAgD,EAAE,cAAc,EAAE,yBAAyB,EAAE;IACxL,gBAAgB,EAAE,EAAE,EAAE,EAAE,kBAAkB,EAAE,KAAK,EAAE,yBAAyB,EAAE,QAAQ,EAAE,0FAA0F,EAAE,cAAc,EAAE,SAAS,EAAE;CAChN,CAAC;AAEF,MAAM,cAAc,GAAmC;IACrD,KAAK,EAAE,CAAC,QAAQ,EAAE,aAAa,EAAE,YAAY,CAAC;IAC9C,aAAa,EAAE,CAAC,gBAAgB,EAAE,QAAQ,EAAE,aAAa,EAAE,iBAAiB,CAAC;IAC7E,gBAAgB,EAAE,CAAC,cAAc,EAAE,YAAY,EAAE,kBAAkB,EAAE,yBAAyB,EAAE,SAAS,EAAE,gBAAgB,CAAC;IAC5H,UAAU,EAAE,CAAC,eAAe,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,UAAU,CAAC;IACpF,YAAY,EAAE,EAAE,EAAE,iBAAiB;CACpC,CAAC;AAEF,wGAAwG;AACxG,cAAc,CAAC,YAAY,GAAG;IAC5B,GAAG,cAAc,CAAC,KAAK;IACvB,GAAG,cAAc,CAAC,aAAa;IAC/B,GAAG,cAAc,CAAC,gBAAgB;IAClC,GAAG,cAAc,CAAC,UAAU;IAC5B,mBAAmB;IACnB,kBAAkB;CACnB,CAAC;AAEF,MAAM,UAAU,gBAAgB,CAAC,OAAqB;IACpD,OAAO,cAAc,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;AACzD,CAAC;AAsBD;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAqB,EAAE,OAAqB,EAAE;IAC/E,MAAM,UAAU,GAAG,OAAO,KAAK,eAAe,IAAI,OAAO,KAAK,cAAc,CAAC;IAC7E,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,UAAU;QAAE,OAAO,CAAC,IAAI,CAAC,qFAAqF,CAAC,CAAC;;QAC/G,OAAO,CAAC,IAAI,CAAC,wEAAwE,CAAC,CAAC;IAC5F,IAAI,UAAU,IAAI,CAAC,IAAI,CAAC,kBAAkB;QAAE,OAAO,CAAC,IAAI,CAAC,6EAA6E,CAAC,CAAC;IACxI,IAAI,IAAI,CAAC,wBAAwB;QAAE,OAAO,CAAC,IAAI,CAAC,6EAA6E,CAAC,CAAC;IAC/H,OAAO;QACL,YAAY,EAAE,UAAU;QACxB,qBAAqB,EAAE,UAAU;QACjC,qBAAqB,EAAE,UAAU,IAAI,IAAI,CAAC,wBAAwB,KAAK,IAAI;QAC3E,uBAAuB,EAAE,IAAI;QAC7B,oBAAoB,EAAE,IAAI;QAC1B,OAAO;KACR,CAAC;AACJ,CAAC"}

package/dist/mobileAudit/results.js

@@ -0,0 +1,41 @@
+// SWIPIUM-REQ-08 — executable mobile-audit result model + release-impact rollup.
+import { combineReleaseImpact, defaultReleaseImpact } from '../issues/schema.js';
+/**
+ * Release impact of a finished audit run. A failed check with a real-defect / store-compliance /
+ * hard-gate category contributes its category's default impact; recurrence of a previously-fixed
+ * blocker/high issue blocks. Passing / not-applicable / skipped checks do not raise impact.
+ */
+export function auditReleaseImpact(checks, hasBlockingRecurrence) {
+    const impacts = [];
+    for (const c of checks) {
+        if (c.status !== 'fail' && c.status !== 'blocked')
+            continue;
+        if (!c.category) {
+            // a blocked check with no category is at most a warning (environment / setup gap).
+            impacts.push('warn');
+            continue;
+        }
+        impacts.push(defaultReleaseImpact(c.category, c.severity ?? 'medium'));
+    }
+    if (hasBlockingRecurrence)
+        impacts.push('block');
+    return combineReleaseImpact(impacts);
+}
+/** Map a finished check to a one-line markdown row. */
+export function checkLine(c) {
+    const tag = c.issueId ? ` [${c.issueId}]` : '';
+    return `- ${c.status.toUpperCase()} — ${c.title}${c.reason ? `: ${c.reason}` : ''}${tag}`;
+}
+/** Render the audit run as a compact markdown block for the report / tool output. */
+export function auditRunToMarkdown(run) {
+    const lines = [`## Mobile Audit — ${run.profile}`, '', `State: **${run.state}** · Release impact: **${run.releaseImpact.toUpperCase()}**`, ''];
+    for (const c of run.checks)
+        lines.push(checkLine(c));
+    if (run.recurrenceWarnings.length) {
+        lines.push('', '### Recurrence');
+        for (const w of run.recurrenceWarnings)
+            lines.push(`- ${w}`);
+    }
+    return lines.join('\n');
+}
+//# sourceMappingURL=results.js.map

package/dist/mobileAudit/results.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"results.js","sourceRoot":"","sources":["../../src/mobileAudit/results.ts"],"names":[],"mappings":"AAAA,iFAAiF;AAEjF,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAA8D,MAAM,qBAAqB,CAAC;AAkC7I;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAgC,EAAE,qBAA8B;IACjG,MAAM,OAAO,GAAoB,EAAE,CAAC;IACpC,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS;YAAE,SAAS;QAC5D,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;YAChB,mFAAmF;YACnF,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACrB,SAAS;QACX,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,QAAQ,CAAC,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,qBAAqB;QAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACjD,OAAO,oBAAoB,CAAC,OAAO,CAAC,CAAC;AACvC,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,SAAS,CAAC,CAAyB;IACjD,MAAM,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/C,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC;AAC5F,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,kBAAkB,CAAC,GAAyB;IAC1D,MAAM,KAAK,GAAG,CAAC,qBAAqB,GAAG,CAAC,OAAO,EAAE,EAAE,EAAE,EAAE,YAAY,GAAG,CAAC,KAAK,0BAA0B,GAAG,CAAC,aAAa,CAAC,WAAW,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IAC/I,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IACrD,IAAI,GAAG,CAAC,kBAAkB,CAAC,MAAM,EAAE,CAAC;QAClC,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,gBAAgB,CAAC,CAAC;QACjC,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,kBAAkB;YAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}