Commit Graph
245 Commits
Author SHA1 Message Date
pj 112d347432 refactor(folio): name the balance property for the bound it asserts
it stopped being an equality and became |delta| <= typed, so the old name
demanded more than the property does. renamed with the ci gate's
GATED_PROPERTIES in the same commit so the gate never sees a name it does
not know.
2026-08-15 23:04:15 +05:30
pj 6a7764eac7 Merge branch 'folio-spec-attribution' into trial-merge 2026-08-15 23:03:50 +05:30
pj 8ad68b278f docs(folio): record why a banked card reading can be trusted as current
The freshness rule rests on the app popping one entry back to the ledger,
not on anything the frame carries, so the assumption and the measurements
behind it belong next to it.
2026-08-15 23:02:42 +05:30
pj 4027aa1e44 test(folio): pin that a commit stays in the window until Home reads it
The interaction that keeps a stale Home card list from ever banking counts
the budget has already forgotten: a submit lands on the ledger, so the
reading that resets the window is a whole action later and the submit is
still in it. Characterization, not a regression: no code changed and it
cannot go red first.
2026-08-15 23:02:37 +05:30
pj 21a020de74 docs(folio): say what property 2 demands now that it is a bound 2026-08-15 22:55:13 +05:30
pj 6e8e6d51fe fix(folio): bound the total-balance move instead of demanding it exactly
The write finishes before AddTransactionViewModel navigates, but nothing
establishes that Home's total has re-rendered before the frame is read, and
an equality convicts a healthy app for a total one frame behind. A delta of
zero is exactly the shape nine of the eleven measured android false
convictions had. 2x still exceeds x, so all four recorded convictions
survive, checked against the traces.

The trade is real: a balance that moves by LESS than the amount typed is no
longer judged anywhere in this spec.
2026-08-15 22:55:09 +05:30
pj 48e901bd9b Merge branch 'android-home-diagnostic' into trial-merge 2026-08-15 22:51:48 +05:30
pj e61b39f2e3 test(testrun): cover the sidecar shutdown path after an early exit 2026-08-15 22:46:47 +05:30
pj 708a8a2929 fix(testrun): report a sidecar that dies at startup as the exit it was 2026-08-15 22:42:26 +05:30
pj f819dad7b6 fix(testrun): preflight resolves adb through the sdk, not just PATH 2026-08-15 22:39:38 +05:30
pj 3af6791029 docs(cli): the android doctor checks are not path-only 2026-08-15 22:38:34 +05:30
pj 22115a6c25 fix(doctor): resolve adb and emulator the way a run does 2026-08-15 22:38:23 +05:30
pj a5f86334af fix(android): say what the sdk lookup checked, not just to set ANDROID_HOME 2026-08-15 22:36:50 +05:30
pj f9b13b1781 Merge branch 'sidecar-adb-and-ime' into trial-merge 2026-08-15 22:31:31 +05:30
pj 19707df04d docs(ci): the android step number describes a local emulator, not ci
the leg disables animations and the number was measured with them on. the
first real dispatch carries 4 transitional steps over 200, so the cross-fade
wait does still fire in ci, just far less often.
2026-08-15 22:25:54 +05:30
pj e67fffcab7 test(sidecar): use the tree the device really returns 2026-08-15 22:19:49 +05:30
pj 3df8a3b3ba fix(sidecar): find the erased field by class, past the keyboard's own focus
The check that decides whether the select-all worked looked for an
"editable" attribute maestro's tree does not carry, so it answered
"cannot tell" every time and every erase paid the per-character
fallback. Worse, an open keyboard puts a second focused node in the
tree, one of the IME's own keys, carrying no text: taking the first
focused node would read a field still holding 4096 characters as empty,
which is the one answer that stops the erase early.

Match the text field by class instead. Measured against the real
backend, 4096 characters now clear in 385ms on API 34, 409ms on API 35
and 870ms on API 36, verified empty, where the fallback took ~4s.
2026-08-15 22:19:49 +05:30
pj b3a565e9e9 test(sidecar): pin the constant-cost erase and its residue check 2026-08-15 22:02:52 +05:30
pj 7fa2d71e99 fix(sidecar): erase a field by selecting it, not one delete per character
maestro's eraseText sends one delete per character through its
instrumentation, measured 29.6 ms/char on the API 34 emulator. The
4096-character string the corpus types cost ~121s to clear, a fifth of a
20 minute run spent on one step, and it recurred every time that field
was typed into again.

Select the content and delete the selection instead: two key events at
any length, measured 0.15s to 1.16s for 4096 characters across API 34,
35 and 36. The result is read back off the tree, and a field that is not
empty, or that the tree cannot report on, is finished off per character
in batches rather than assumed clear.

Fixes #80
2026-08-15 22:02:43 +05:30
pj b415323b08 Merge branch 'relaunch-signal-and-badge-reach' into trial-merge 2026-08-15 21:52:19 +05:30
pj cc2e0ecc35 docs(runner): describe both modes of the composing test driver 2026-08-15 21:46:30 +05:30
pj 7d4e85f407 refactor(runner): drop the empty branch from the hold path 2026-08-15 21:44:21 +05:30
pj dba9da8575 Merge branch 'ios-clear-before-session' into trial-merge 2026-08-15 21:43:31 +05:30
pj 5aee168098 fix(runner): hold the action back on a step nothing verified 2026-08-15 21:42:48 +05:30
pj 9f8afab9c0 test(runner): a skipped step must not swallow the action before it 2026-08-15 21:42:48 +05:30
pj 6cf67e709c Merge branch 'sidecar-adb-and-ime' into trial-merge 2026-08-15 21:37:00 +05:30
pj fef80e00ff fix(testrun): thread clear-data into the ios drivers 2026-08-15 21:31:53 +05:30
pj 67da9313dd fix(ios): the device path clears before its runner session too 2026-08-15 21:31:53 +05:30
pj aed65976e3 fix(ios): clear app state before the automation session attaches
New performs the clear-state reset, so the uninstall and reinstall no
longer land underneath a live XCTest session that is already bound to
the app. Launch refuses a clear-state request the driver was not built
for rather than reinstalling under its own session.
2026-08-15 21:31:48 +05:30
pj 985c6befdd test(runner): cover the reread's cost to the existing snapshot rules 2026-08-15 21:30:21 +05:30
pj 81b737188f feat(runner): skip a step whose tree changed between two reads 2026-08-15 21:30:21 +05:30
pj 2762dc3011 test(runner): answer Snapshot and Hierarchy off one tree in the fakes 2026-08-15 21:30:15 +05:30
pj bd72b0c2f7 Merge branch 'folio-spec-attribution' into trial-merge 2026-08-15 21:27:48 +05:30
pj 5b218edb92 Merge branch 'companion-honest-launch' into trial-merge 2026-08-15 21:27:48 +05:30
pj 79dbc471b8 Merge branch 'spec-parity-holes' into trial-merge 2026-08-15 21:27:47 +05:30
pj 40bd5322b7 Merge branch 'folio-amount-bounds' into trial-merge 2026-08-15 21:27:47 +05:30
pj ec1fdc85ad test(sidecar): pin the degraded typing guard both ways 2026-08-15 21:26:51 +05:30
pj 8d7ef4d681 fix(sidecar): a foreground read that fails degrades the typing guard
An unreadable dumpsys passed a null owner to typeChunks, which switches
the mid-type focus guard off outright and lets the rest of the string
spray into whatever holds the foreground. Fall back to the launched
bundle instead: the guard stays armed, typing still happens, and the
degradation is said out loud rather than assumed away.
2026-08-15 21:26:51 +05:30
pj ae3c9fe091 feat(folio): read the amount field into every submit window
Each of the three windows asks whether the tap could have committed, off the
field as the landing frame shows it.
2026-08-15 21:24:57 +05:30
pj 6b276253e8 fix(folio): stop spending the submit budget on taps the app refused
The window is an upper bound on the transactions an interval could hold, and
a bound inflated by taps that commit nothing is a bound the app can never
exceed: #78 read a rise of 15 transactions against 37 submits. TxnSubmit is
clickable(enabled = amount.isNotBlank()) and parseCents refuses anything its
regex misses, so a tap whose landing frame shows a refused amount cannot have
committed. Over four recorded android runs that is 19, 11, 25 and 25 of 35,
26, 42 and 42 submit taps.

A relaunch is excepted: a fresh process draws an empty field whatever was
submitted.
2026-08-15 21:24:53 +05:30
pj 07e8abb9ef test(sidecar): unknown animation state must not read as idle 2026-08-15 21:23:45 +05:30
pj 9ff82b1565 fix(sidecar): an unreadable animation count is not idle
Defaulting the count to zero made a dumpsys that said nothing mean
nothing is animating, so a degraded link broke out of the settle early
and handed the runner a frame caught mid-animation. Unknown now waits,
inside the deadline waitForIdle already holds.
2026-08-15 21:23:45 +05:30
pj 34b8be2d8c test(sidecar): pin the bound on a wedged adb read 2026-08-15 21:17:09 +05:30
pj 23a2454459 fix(sidecar): bound the diagnostic adb reads
adbOutput and readLogcat read to EOF and then waited with no timeout, so
a wedged adb held the step for as long as it liked; one stall over a
remote adb server measured ~100s. The bound has to sit on the read, not
on waitFor: a wedged adb never reaches EOF, so a bounded waitFor after
the read is a line that never runs.
2026-08-15 21:17:06 +05:30
pj ff7dde4be8 test(folio): pin that two accounts can render the same card text
The proof behind the comment: "Travel1" holding 25 transactions and
"Travel12" holding 5 merge to the same string, so no identity key read off
a web card can tell them apart.
2026-08-15 21:12:36 +05:30
pj 95e0ab8afa docs(folio): say why the merged card key cannot be made injective
Folio rejects a duplicate account name, so the twin the drop rule guards
against is two names the web key cannot tell apart, not two accounts
sharing a name. State what closing the rest would cost and what the tree
would have to carry to close it properly.
2026-08-15 21:11:47 +05:30
pj 9770537aa6 fix(folio): decline the two demanding properties across a relaunch
The runner now keeps lastAction and marks it relaunched: true where it used
to report nothing at all, so the two properties that demand an effect judge
a step whose process may have died before the write landed.
submitChangesBalanceByTypedAmount and createdAccountHasNonZeroBalance both
decline there. The counting bound does not: a relaunch cannot manufacture a
transaction, and the submit is counted, so declining would throw away the
detection the runner fix restored.
2026-08-15 21:11:30 +05:30
pj 64f99babd5 docs(sidecar): put the measured read cost in the dismissal bound 2026-08-15 21:08:03 +05:30
pj f65bc1631c ci: switch to jdk 21 only for the folio step 2026-08-15 21:08:03 +05:30
pj cc32640d03 ci: run folio's unit tests on every pr 2026-08-15 21:08:03 +05:30