merge origin/main (union of executed runner-unit test lists)

Author: thymikee

.github/workflows/ios.yml

@@ -106,6 +106,8 @@ jobs:
             -only-testing:AgentDeviceRunnerUITests/RunnerTests/testBoundedSystemModalProbeTimeoutRecoversThenReleasesOnDrain \
             -only-testing:AgentDeviceRunnerUITests/RunnerTests/testBoundedSystemModalProbeTimeoutRecoversThenReleasesOnDrainForSnapshotRaw \
             -only-testing:AgentDeviceRunnerUITests/RunnerTests/testSnapshotTraversalIdentityPreservesSameOriginNodesWithDifferentBounds \
+            -only-testing:AgentDeviceRunnerUITests/RunnerTests/testPrivateAXDepthLimitedRequiresEveryFrontierResolved \
+            -only-testing:AgentDeviceRunnerUITests/RunnerTests/testDeepExtensionCountsMissedFrontiers \
             -only-testing:AgentDeviceRunnerUITests/RunnerTests/testPreferredPrivateAXBackendPlansAsPenalized \
             -only-testing:AgentDeviceRunnerUITests/RunnerTests/testDecodedPreferredBackendReachesOptionsAndApplicablePlan \
             -only-testing:AgentDeviceRunnerUITests/RunnerTests/testRunnerScreenshotStabilitySettledNeedsEnoughSamples \

CONTEXT.md

@@ -114,6 +114,16 @@ task touches:
 - Ref generation pin: optional `~s<n>` suffix on an @ref carrying the snapshot generation it was
   minted from. Accepted as input everywhere, emitted by no tree output (snapshot token budget),
   auto-appended by the MCP layer, stripped and ignored by replay.
+- Deferred interaction outcome: the daemon's post-response answer to "did that mutation actually
+  take effect" — pending interaction outcome retry, post-gesture stabilization, and Android
+  snapshot freshness recovery. `src/daemon/deferred-interaction-outcome.ts` is its one interface:
+  every mutating route marks through it after dispatch, and every snapshot capture resolves
+  through it; the three `SessionState` fields stay with their R7 owners (the module itself owns
+  `postGestureStabilization`, so the seam adds no node to the R9 cycle). Marking
+  order is load-bearing (pending outcome retry before stabilization), each marker keeps its own
+  eligibility gate, and the module owns only these post-action markers — never ADR 0014 ref-frame
+  expiry or the ADR 0012/0016 staged protocols. Distinct from the same-response settled
+  observation below.
 - Settled observation: opt-in (`--settle`) post-action payload on press/click/fill/longpress — the
   quiet-window stable loop re-captures until the UI settles, and the response carries the diff vs the
   pre-action tree (changed lines only, added lines with fresh refs, `refsGeneration` when the settled

apple/runner/AgentDeviceRunner/AgentDeviceRunnerUITests/RunnerAXSnapshotBridge.h

@@ -3,14 +3,54 @@
 
 NS_ASSUME_NONNULL_BEGIN
 
+/// Keys of the `deepExtension` dictionary in the snapshot response, shared
+/// with the Swift consumer so the response shape has one spelling.
+FOUNDATION_EXPORT NSString *const RunnerAXSnapshotDeepExtensionKey;
+FOUNDATION_EXPORT NSString *const RunnerAXSnapshotDeepExtensionCallsKey;
+FOUNDATION_EXPORT NSString *const RunnerAXSnapshotDeepExtensionNodesAddedKey;
+FOUNDATION_EXPORT NSString *const RunnerAXSnapshotDeepExtensionPendingKey;
+FOUNDATION_EXPORT NSString *const RunnerAXSnapshotDeepExtensionMissedKey;
+
+/// A depth-capped childless node awaiting an element-rooted follow-up request.
+/// Public so the runner unit bundle can drive the extension's miss paths with
+/// fabricated snapshots — the executed contract that missed frontiers are
+/// counted, never silently dropped.
+@interface RunnerAXSnapshotFrontier : NSObject
+@property(nonatomic, strong, nullable) id snapshot;
+@property(nonatomic, strong, nullable) NSMutableDictionary *node;
+@property(nonatomic, assign) NSInteger depth;
+@end
+
 @interface RunnerAXSnapshotBridge : NSObject
 
+/// Captures the app's accessibility tree, then chains element-rooted follow-up
+/// requests from depth-capped frontier nodes (the AX depth limit is
+/// per-request, so re-rooting reaches content the app-rooted request could
+/// not). The response gains a `deepExtension` {calls, nodesAdded,
+/// pendingFrontiers, missedFrontiers} dictionary when any frontier existed and
+/// the call limit allowed extension. Pass 0 to disable extension entirely.
 + (NSDictionary<NSString *, id> *)snapshotTreeForApplication:(XCUIApplication *)application
                                                     maxDepth:(NSInteger)maxDepth
-                                                    maxNodes:(NSInteger)maxNodes;
+                                                    maxNodes:(NSInteger)maxNodes
+                                      deepExtensionCallLimit:(NSInteger)deepExtensionCallLimit
+                                                    deadline:(nullable NSDate *)deadline;
 
 + (NSInteger)processIdentifierForApplication:(XCUIApplication *)application;
 
+/// The frontier-extension loop, exposed for the runner unit bundle: a frontier
+/// whose element vanished or whose re-rooted request fails must count as
+/// missed (see the deepExtension keys above) — an all-miss extension reporting
+/// itself drained would present a capped capture as complete.
++ (nullable NSDictionary *)extendSnapshotFrontiers:(NSMutableArray<RunnerAXSnapshotFrontier *> *)frontiers
+                                          axClient:(id)axClient
+                                        attributes:(NSArray *)attributes
+                                          maxDepth:(NSInteger)maxDepth
+                                          maxNodes:(NSInteger)maxNodes
+                                         nodeCount:(NSInteger *)nodeCount
+                                         truncated:(BOOL *)truncated
+                                      callsAllowed:(NSInteger)callsAllowed
+                                          deadline:(nullable NSDate *)deadline;
+
 @end
 
 NS_ASSUME_NONNULL_END