Replay & E2E Testing
Record a session as an .ad script, then run it again with replay or run a folder of scripts as an E2E suite with test.
replay has a 60-second wall-clock budget within a 90-second client timeout. Use
replay workflow.ad --timeout 300000 for a five-minute operation budget and a five-minute,
30-second client timeout. At the budget, the running step receives the same cancellation as a
canceled request. When it settles, a failed replay includes details.reason: daemon_request_timeout
and details.timeoutMs. The daemon and other sessions stay available if it responds to the client. An
authored close may already have ended its session. A failed replay keeps the failing script path
and line. A replay that completes every step returns success even if it settles shortly after the
deadline. Cancellation does not prove that native device work has stopped. If a step ignores
cancellation beyond the remaining 30 seconds, the client may report a transport timeout. For a
daemon that does not respond, the client's existing liveness check can reset it. Direct test
runs keep their own timeout behavior.
If a resource step cannot run within replay's budget, the error includes
details.reason: bounded_composite_resource_unsupported, details.shape,
details.dispatched: no for that step, and details.standaloneCommandName for a known public
command. This can affect perf, audio, record, trace, and some logs operations. It also
affects close when it would dispose owned resources or release a provider lease, and acquisition
that would recover another session's durable resources. Opening another app in the same session
keeps its owned resource handles. An Android test IME alone is restored by authored close, even
when restoration settles after the remaining replay time. A failed restore retires the session and
retains the device claim for recovery; inspect both before acting. The name is not a complete command. Inspect the failed
script path and line, then run that original operation separately with its original arguments and
options, the same --session value, and the same private CLI context. If steps remain and the
report offers resume.alternateFrom, use it with planDigest after completing the refused step directly.
resume.from retries the same bounded step and refuses it again. A final
unrecorded logs or audio step leaves no replay tail to resume. Inspect completed steps before
retrying; earlier steps may have changed the app. A nested test with an attempt timeout or
--record-video is refused before its first attempt. Direct test retains its own timeout
behavior. If a nested test reaches a bounded resource refusal, it stops after that attempt even
when you configured retries. Other test failures can still retry. An authored .ad command
without a resource classification fails closed with details.shape: <command>:unclassified
and the same original-input guidance.
To run Maestro YAML flows or export .ad scripts to Maestro YAML, see Run Maestro flows.
How it works
You work in two passes:
- Explore: discover elements and act on refs (
snapshot->click @e../fill @e..) while recording. - Replay: run the recorded
.adscript withreplayfor a deterministic run.
Record a replay script
Pass --save-script to open. When you close the session, the script is written:
By default, the script goes to:
To choose the output file, pass a path to --save-script:
- Missing parent directories are created.
- The script is written on the machine running the daemon, so
--save-scriptis rejected when you use a remote daemon. - For a bare file name that could be read as another argument, use
--save-script=workflow.ador a path-like value such as./workflow.ad.
.ad line grammar
A .ad line is the CLI spelling of one command: <command> [positional ...] [flag ...]. Whitespace separates tokens, so a value with a space needs quotes.
- A token quoted with
"or'is one argument. Single quotes keep a"literal, so'id="far-button"'and"id=\"far-button\""are the same selector — write whichever matches how you typed the command at the shell. - Values in double quotes are JSON strings, so escape
\\,\",\t, and\n. Values in single quotes are literal, as at the shell: a backslash keeps its own character, and the only escape is\'for an apostrophe. - A script line keeps only the flags that command records; CLI-only spellings and per-request options are not part of a step. The common flags a script does not carry are
--settle,--verify,scroll --pixels/--duration-ms, and the device-selection flags (--platform,--serial,--device). help <command>prints the flags each command accepts.help scriptingprints this grammar.
To reach an off-screen element, use a stop condition rather than a fixed scroll amount. A fixed amount passes on one screen size and fails on another:
A # only starts a comment at the beginning of a line. A scroll line carries --until and keeps its distance as a positional (scroll down 0.8 --until <selector>). wait carries --raw, --depth <n>, and --scope <selector|@ref> to choose the capture its target is read from. Scripts use only these long spellings: the -d/-s CLI aliases are not flags in a script, so a hand-written line such as wait text -s so funny still waits for that literal text.
Run replay
-
Replay reads
.adscripts. -
The CLI reads script paths on your machine and sends the script, with the Maestro
runFlowincludes it can resolve and read, to the daemon. An include it cannot read is left out, and the run fails if it reaches that include. The samereplayortestcommand works against a local or a remote daemon without copying files. A script that doesn't exist on your machine fails at once, naming the path you typed. -
A script that does not end in
closeleaves its session open. For a script that does end inclose, pass--keep-sessionto skip only that final action and keep working in the same session:Earlier
closeactions still run.testdoes not accept the flag because each suite attempt cleans up its own session. -
press,click, andlongpresssteps do not wait for a missing target to appear. If a screen needs time to load, add an explicit wait before the interaction, such aswait 'label="Continue"' 5000. Covered, off-screen, and ambiguous targets fail as they do in live commands. -
When the target is missing, replay stops with
REPLAY_DIVERGENCE. For a step recorded with a target annotation (the# agent-device:target-v1line above it),error.details.divergence.kindisselector-missand the step is never sent. For a step without an annotation,error.details.reasonisselector_not_found, as for a live command. -
A step whose read names one element (
iswith a predicate other thanexists/absent, orget attrs) that reaches dispatch with an ambiguous selector fails withAMBIGUOUS_MATCHas the divergence cause — the same code the live command reports, so an ambiguous recorded screen is not replayed as a missing one. An annotated step can also stop earlier, before the command runs: when pre-dispatch target binding cannot confirm the recorded identity (its identity set has more than one member with no sibling or viewport signal isolating one, or no fresh snapshot can be captured to verify against), the divergence cause isIDENTITY_UNVERIFIABLEinstead. Both codes say the recorded screen changed; onlyAMBIGUOUS_MATCHproves your selector matched more than one element.
Run a lightweight .ad suite
testdiscovers.adfiles from files, directories, or globs and runs them serially.- Quote relative globs to expand them on the caller from its working directory, including when the directory name contains glob characters such as
[or{. A missing file input without glob characters reports an error. - The
context platform=...header inside each.adfile decides which platform that file runs on. --platformfilters which files run; with a filter, files without acontext platform=header are skipped. When filtering leaves no runnable sources, the no-match error reports how many sources were skipped for having nocontext platform=header versus how many declared another platform. Add the header to run a file under a filter, or omit--platformand let the selected device decide.- Set
context timeout=...andcontext retries=...per script; CLI flags override them. Retries are capped at3, and duplicate keys in the context header fail fast instead of silently overriding each other. - By default, suite artifacts are written under
.agent-device/test-artifacts/<run-id>/.... Each attempt writesreplay.ad,result.txt, andreplay-timing.ndjson. Failed attempts also keep copied logs and artifact files when the replay produced them. - Copied diagnostic artifacts receive numbered filenames when their names collide with another artifact, a replay source, timing trace, or attempt manifest.
result.txtlists the retained names incopiedArtifacts. replay-timing.ndjsonrecords attempt, cleanup, and per-step start/stop events with durations. Upload it from CI even for passing runs when comparing local and CI performance.- When an attempt hits its timeout, it is marked failed and the replay gets a short grace period to stop before the session is cleaned up.
- The default text reporter streams live progress on stderr while a suite runs, then prints the final summary, failed tests, and passed-on-retry flaky tests. Use
--verboseto include step traces in completed-test progress output. - The default reporter prints a
Warnings:section after the summary when any test accumulated composable warnings — for example a Maestro step withoptional: truethat was skipped — whether that test passed or failed. A failingreplayrun repeats the warnings it accumulated asWarning:lines after the error.--jsoncarries the same strings in each test result'swarningsarray. --reporteris repeatable. Built-ins aredefaultfor the console summary andjunit:<path>for JUnit XML. Passing any explicit reporter list replaces the implicit default reporter, so include--reporter defaultwhen you also want terminal output.--report-junit <path>is an alias for--reporter junit:<path>.- JUnit reports preserve legal Unicode and whitespace, and replace characters forbidden by XML 1.0 (such as terminal ESC or NUL) with
U+FFFD(�) so CI parsers can read the report. JSON and other reporters retain the original suite values. - When
--fail-fastand retries are both set, the current test still consumes its retries before the suite stops.
Custom test reporters
A custom reporter formats suite output. It runs in the local CLI process, not the daemon, and can render both live progress and the final result.
A reporter module can export a reporter object, reporter, createReporter, or a default factory. Factories receive a load context. Reporter hooks receive replay test objects and an IO context with stdout and stderr streams:
For a live terminal reporter that prints each completed test as an emoji, title, and duration:
TypeScript reporters use the same object shape; compile them to JavaScript before passing them to --reporter:
The CLI loads reporter modules with Node dynamic import(). Use .mjs or .js files at runtime; for TypeScript, compile the reporter to JavaScript before passing it to --reporter. Loading .ts files directly depends on Node's type-stripping behavior and is not part of the supported reporter contract.
The live hooks onSuiteStart, onTestStart, onTestStep, and onTestResult run while the suite is running; reporters do not receive generic command progress. Live hooks run as events arrive and are not awaited, so keep their work synchronous and move anything async to onSuiteEnd, which the CLI awaits before exiting. onSuiteEnd receives the final suite result. getExitCode can only raise the suite exit code, never lower it: the highest reporter-provided code wins and failed tests still exit with 1 when no reporter raises it further, so a reporter cannot mask a failing suite. Return an integer from 0 to 255, or undefined to leave the exit code unchanged. Other values fail with INVALID_ARGS; in particular, codes such as 256 are rejected before they can wrap to a successful process exit.
Parametrise .ad scripts
Substitute ${VAR} tokens in .ad scripts using values from the CLI, shell env, script-local env directives, or built-ins.
Precedence
Built-ins
replay and test provide these built-ins in the reserved AD_* namespace.
AD_PLATFORM- matchescontext platform=...or the selected platform when availableAD_SESSION- active session nameAD_FILENAME- path of the running.adfileAD_DEVICE- device identifier (when--deviceis set)AD_ARTIFACTS- attempt artifacts directory (when running undertest)
User-defined keys starting with AD_ are rejected in env, -e, and shell imports such as AD_VAR_AD_FOO, so built-ins cannot be overridden.
Substitution happens inside parsed string values. It does not create extra arguments, so quote selectors or text values that contain spaces:
Fallback and escape
${VAR:-default} yields default when VAR is unset.
\${APP} emits a literal ${APP} with no substitution.
Recipes
Run one flow against two app variants in CI:
Tune timings locally without editing the script:
Extract a reusable selector. Before:
After:
Quote ${VAR} inside selector expressions so the whole expression is treated as a single argument.
Notes
AD_VAR_*values come from the shell that runs the CLI, so they apply the same way whether the daemon runs locally or remotely.- Fallbacks do not nest:
${A:-${B}}is not supported. - An unresolved
${VAR}fails with afile:linereference, so a misspelled variable name stops the run.
Replay divergence and resume
A failing replay/test step returns a structured REPLAY_DIVERGENCE error. The report is size-bounded and redacted, and carries:
step— the 1-based plan index and its source file/line (through MaestrorunFlowincludes).screen— a fresh post-failure snapshot digest with actionable refs, orunavailablewith a reason/hint when capture failed or was sparse (never a stale tree).suggestions— up to 5 ranked, re-resolved candidates for the failing selector (id match ranks above role+label, which ranks above label-only), each with abasisyou can inspect before acting. For a verifiedtarget-v1annotation, equally strong candidates in the recorded scroll region rank first; document order breaks remaining ties.resume— whether and how to continue without re-running the script from the top.
Text output prints a compact summary of the same fields; --json/MCP carry the full object.
Resume a failed replay
During a repair armed with replay --save-script, diagnostic reads stay out of the healed script. To keep a corrective read, pass --record on that invocation, or record: true in that SDK/MCP call. --record is per-invocation only: the config key record and AGENT_DEVICE_RECORD were removed, and a config file or environment still naming them fails with migration guidance. Authored replay observations are retained automatically.
replay --from <n> --plan-digest <sha256> resumes at plan step n, not after it, skipping 1..n-1 without executing them. Both flags come from a divergence report's resume field — from is the failed step, planDigest is the digest of the exact unchanged plan that produced it.
Choose one recovery workflow:
- Change the replay script. Review the suggestion, edit the selector or include, then run a fresh full
replay ./flow.ad. The old digest is intentionally invalid after any plan edit; do not combine it with the edited script. A later divergence supplies a new digest. - Keep the replay plan unchanged. Repair app/device state so the reported failed step can succeed when retried, then resume with the report's unchanged
fromandplanDigest. If you manually complete the failed action itself, the reportedfromwill execute it again; only do that when repeating the action is safe.
The unchanged-plan resume loop is:
- Run
replay ./flow.ad. On failure, readresumefrom the divergence. - Leave the script, includes, platform, and target unchanged. Repair app state yourself so the failed step can be retried safely. Resume does not restore app state; it only skips the earlier steps.
replay ./flow.ad --from <resume.from> --plan-digest <resume.planDigest>.
For how --from counts steps in a Maestro flow, see Resume a failed Maestro flow.
Passing --plan-digest that no longer matches the current script — because you edited it, an include changed, or platform-conditioned expansion differs — fails INVALID_ARGS before any action; run a fresh full replay to get a new digest. --from is replay-only; test rejects it (a suite run must stay full and deterministic).
--update/-u
--update/-u does not rewrite .ad files. The flag is accepted and does nothing: every replay divergence carries ranked suggestions whether or not you pass it. Review a suggestion, then edit the .ad file yourself if it's right. ADR 0012 explains why replay does not rewrite scripts automatically.
Troubleshooting
- Replay fails after UI/layout changes:
- Read the divergence report's
suggestionsand repair the selector by hand; there is no automated rewrite. Because the edit changes the plan digest, run a fresh full replay instead of using the old resume flags.
- Read the divergence report's
- Repeated re-runs are slow or the app is stateful, but the script is still correct:
- Repair app state and resume with the unchanged
--from/--plan-digest. See Resume a failed replay.
- Repair app state and resume with the unchanged
- Replay file parse error:
- Validate quoting in
.adlines (unclosed double quotes are rejected). A selector with a space needs quotes, andhelp scriptingstates how each quote form decodes.
- Validate quoting in
- A replay passes on one device size and fails on another because a target was off screen:
- The script used a fixed
scrollamount. Replace it with the stop condition,scroll down --until <selector>, which repeats until the element is actually on screen.
- The script used a fixed
- A
pressorclickstep fails because its target was not found, but the element is on the screenshot:- A
selector-missdivergence means the target was absent from the captured accessibility tree. Check the selector for this build and whether the app exposes the element to accessibility. Add awaitstep for a landmark on a loading screen before the press.
- A
