chore: sync with tester-army/e2e main

.changeset/decision-executor.md

@@ -0,0 +1,11 @@
+---
+"@e2e-dev/decision": minor
+---
+
+Add `@e2e-dev/decision`, an executor that runs `agent.act` and `agent.assert`
+through a decision model instead of an LLM. It takes any AI SDK evaluation
+model with choice distributions and decides through `experimental_evaluate`,
+one call per action with the operation and target questions fanned out; a
+small language model writes field values when the choice is `type`. Tests
+stay plain natural language with no params. Probability and confidence
+gates are off by default.

.changeset/download-full-ledger-pass.md

@@ -0,0 +1,5 @@
+---
+"e2e": patch
+---
+
+A text download is rewritten with the full ledger pass — fragments and base64-encoded forms of a secret included — the way trace text entries already are. The download path only matched whole values while still labeling the file `redaction: "complete"`, so a cut or base64 copy of a secret could sit in a download the report vouched for as clean.

.changeset/failure-evidence-budget.md

@@ -0,0 +1,5 @@
+---
+'e2e': patch
+---
+
+A failed attempt on an app that stops answering no longer waits 5 s for failure evidence at every capture point, or forever when the engine ignores cancellation. The runner captures the screen and screenshot once per attempt, stops waiting after 5 s, and keeps the original error.

.changeset/oxc-typescript-loader.md

@@ -0,0 +1,12 @@
+---
+'e2e': minor
+'@e2e-dev/web': minor
+'@e2e-dev/mobile': minor
+'@e2e-dev/kernel': minor
+'@e2e-dev/eas': minor
+'@e2e-dev/github': minor
+---
+
+**Breaking: e2e and every `@e2e-dev` package now need Node.js 22.22.3 or newer on Node.js 22, or 24.8.0 or newer** (`engines.node` is `^22.22.3 || >=24.8.0`). Node.js 22.12 through 22.22.2, 23, and 24.0 through 24.7 are no longer supported, and the CLI refuses to start on them, naming the versions to upgrade to. Those releases fail when a CommonJS file a test imports requires TypeScript through the new loader's `module.registerHooks` (nodejs/node#59679 fixed it in 22.22.3 and 24.8.0).
+
+e2e now loads TypeScript with its own loader, built on oxc, instead of tsx. tsx brought in esbuild, whose postinstall script made every `pnpm install` on pnpm 11 and later fail with `ERR_PNPM_IGNORED_BUILDS` until the project approved the build; nothing e2e installs runs an install script now. Config and tests load as before: ESM whatever `package.json` says, `./x.js` and `./x` resolve to `x.ts`, directory index imports, tsconfig `paths` and `baseUrl`, workspace packages exporting `.ts` source, JSX in `.tsx` and `.jsx`, enums, namespaces, `experimentalDecorators`, and source-mapped stack traces. JSON imported without `with { type: 'json' }` still loads. A test file whose name holds `%`, `#`, or a space now collects with its source location instead of failing with "URI malformed" or losing the location. Each file reads its nearest `tsconfig.json` rather than the one in the working directory. What changes: `import` statements in a `.cts` file are no longer compiled into `require` calls (write `import x = require()`); standard decorators without `experimentalDecorators`, auto-accessors, and ES module `import` and value `export` declarations in `.cts` are refused with their line (`import type`, `export type`, `import x = require()`, and `export =` work); the CLI refuses the Bun (`bun --bun`) and Deno runtimes (install with any package manager, run on Node.js); a type imported without `import type` that stays in the output (a decorated member's type under `emitDecoratorMetadata`) fails to load, with an error naming the import; a `.ts` file a CommonJS file requires runs as an ES module like every other `.ts`, so one written with `module.exports` needs the `.cts` extension; and an import written in a JavaScript file resolves as Node.js resolves it, without TypeScript's extension rules or tsconfig `paths`. TypeScript inside an installed package compiles without the project's `tsconfig.json`.

.changeset/plain-string-secret-trace.md

@@ -0,0 +1,5 @@
+---
+'e2e': patch
+---
+
+A secret value a test passes as a plain string (spelled into an `app.open` URL, typed with `fill`) no longer stays in the Playwright trace. Traces and text downloads are now rewritten whenever the session knows a secret value (every static one, and a provider's once resolved), not only after a secret fill or an engine-held secret, so they are labeled `redaction: "complete"` instead of `not-required` or `incomplete`. Screencast frames are still dropped only after a secret fill. Like any secret trace, a rewritten one masks unrelated text that shares 8 characters with a value.

.changeset/replay-lost-list-once.md

@@ -0,0 +1,5 @@
+---
+"e2e": patch
+---
+
+Replaying a repeated scroll on a list that filled the screen, when the list can no longer be found, waits for it once and then scrolls the screen for every remaining repeat. It used to wait out the full relocation backoff (about 14 seconds) before each repeat, so a recorded 4x scroll took about a minute to replay.

.changeset/serial-group-verdicts.md

@@ -0,0 +1,5 @@
+---
+"e2e": patch
+---
+
+A serial group whose session fails to launch, or whose file fails to load, now fails the run. Before, every member was skipped and the run passed with exit code 0. The first member now fails with the launch error and the rest skip with cause `serial-predecessor-failed`, so the `list` reporter, `summary.md`, and `junit.xml` show the failure. A retry that fails to launch keeps the members' verdicts from the attempt before it, so a member that failed there still fails. An infrastructure error in a serial group, at launch or in a member, now exits 3 and sets the run status to `error`, as it does for any other test, instead of exiting 1. When a worker crashes during a serial group, the member that was running fails with `WORKER_CRASH` instead of being skipped as if it never started.

.claude/skills/verify/SKILL.md

@@ -16,7 +16,7 @@ repeat.
 
 ```bash
 pnpm install --frozen-lockfile
-pnpm --filter @e2e-dev/web exec playwright install chromium
+pnpm --filter @e2e-dev/web exec playwright-core install chromium
 pnpm build                    # every consumer below runs dist; rebuild after each change
 ```
 

.fallowrc.json

@@ -16,8 +16,12 @@
     "apps/mobile-benchmark/index.ts",
     "packages/e2e/tests/types/sdk-types.ts",
     "packages/web/tests/types/connection.ts",
+    "packages/web/tests/types/init-scripts.ts",
+    "packages/web/tests/types/routes.ts",
     "packages/mobile/tests/types/options.ts",
-    "packages/e2e/tests/live/*.ts"
+    "packages/decision/tests/types/options.ts",
+    "packages/e2e/tests/live/*.ts",
+    "packages/e2e/src/config/register.ts"
   ],
   "ignorePatterns": [
     "docs/**",
@@ -30,7 +34,8 @@
     "@e2e-dev/web",
     "@openrouter/ai-sdk-provider",
     "@expo/fingerprint",
-    "@expo/repack-app"
+    "@expo/repack-app",
+    "@oxc-project/runtime"
   ],
   "rules": {
     "unused-class-member": "warn",

.github/workflows/agent.yml

@@ -96,7 +96,7 @@ jobs:
           fi
       - run: pnpm install --frozen-lockfile
       - name: Install browsers
-        run: pnpm --filter @e2e-dev/web exec playwright install chromium --with-deps
+        run: pnpm --filter @e2e-dev/web exec playwright-core install chromium --with-deps
       - name: Build
         run: pnpm run build
       - name: Run ${{ matrix.script }}

.github/workflows/benchmark.yml

@@ -67,7 +67,7 @@ jobs:
           cache: pnpm
       - run: pnpm install --frozen-lockfile
       - name: Install browsers
-        run: pnpm --filter @e2e-dev/web exec playwright install chromium --with-deps
+        run: pnpm --filter @e2e-dev/web exec playwright-core install chromium --with-deps
       - name: Build
         run: pnpm run build
       - name: Run test
@@ -132,7 +132,7 @@ jobs:
           fi
       - run: pnpm install --frozen-lockfile
       - name: Install browsers
-        run: pnpm --filter @e2e-dev/web exec playwright install chromium --with-deps
+        run: pnpm --filter @e2e-dev/web exec playwright-core install chromium --with-deps
       - name: Build
         run: pnpm run build
       - name: Run test:agent

.github/workflows/spec.yml

@@ -38,12 +38,14 @@ jobs:
         run: pnpm docs:check-errors
       - name: Peer ranges on the runner
         run: pnpm check:peer-ranges
+      - name: No install scripts in published dependency trees
+        run: pnpm check:install-scripts
       - name: Agent skill scripts
         run: |
           pnpm exec tsc -p .claude/skills/babysit/scripts
           node --test .claude/skills/babysit/scripts/pr-status.test.ts
       - name: Install browsers
-        run: pnpm --filter @e2e-dev/web exec playwright install chromium --with-deps
+        run: node packages/web/dist/bin.js install chromium --with-deps
       - name: Testbed
         run: pnpm --filter @e2e-dev/testbed test
 
@@ -53,16 +55,41 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        node: [22, 24, 26]
+        # The newest release of each line, and the floors in engines.node.
+        node: [22, 24, 26, 22.22.3, 24.8.0]
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - uses: pnpm/action-setup@9fd676a19091d4595eefd76e4bd31c97133911f1 # v4.2.0
       - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: ${{ matrix.node }}
+          # A major alone resolves to the runner's cached release, which can
+          # sit below the patch floor in engines.node (22.22.3).
+          check-latest: true
           cache: pnpm
       - run: pnpm install --frozen-lockfile
       - name: Install browsers
-        run: pnpm --filter @e2e-dev/web exec playwright install chromium --with-deps
+        run: pnpm --filter @e2e-dev/web exec playwright-core install chromium --with-deps
       - name: Unit and integration tests
         run: pnpm test
+
+  # A new user's first install of the packed packages, which pnpm 11 and
+  # later fail on any dependency build script (scripts/install-smoke.ts).
+  install:
+    runs-on: blacksmith-4vcpu-ubuntu-2404
+    timeout-minutes: 15
+    strategy:
+      fail-fast: false
+      matrix:
+        pnpm: [11, 12]
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - uses: pnpm/action-setup@9fd676a19091d4595eefd76e4bd31c97133911f1 # v4.2.0
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+        with:
+          node-version: 26
+          cache: pnpm
+      - run: pnpm install --frozen-lockfile
+      - run: pnpm run build
+      - name: Fresh install with pnpm ${{ matrix.pnpm }}
+        run: node scripts/install-smoke.ts ${{ matrix.pnpm }}