[jayleaton]

Fixes from the first real-Mac run of the companion (JJ's MacBook, signed build at 4bbd728, "open Chrome and go to example.com"). On main.

Summary

 controller.run(goal "open Chrome and go to example.com", text null)
-  no text → "type" never offered → decider clicks the focused "Address and search bar" → same again → stuck (×3 tasks)
+  text = navigationText(goal) = "example.com"   (the goal's own words, right after the verb; the decider still writes nothing)
+  click chosen on a focused text box → type into it
+  same action again on an unchanged screen → not done; left out of the next question + triedWithoutEffect; stuck only when nothing else fits
 permissions (macOS)
-  stale = macOS says yes && osascript preflight says no  ||  seen in another version@mtime
+  truth = this process's answer (AX trust; Electron's in-process TCC status for Screen Recording, Microphone)
+  stale = Accessibility yes && AX probe fails  ||  missing now && seen working under another signing identity (codesign -d -r-)
+  Microphone in the stale card, with "Reset the Microphone" (tccutil reset Microphone + macOS asks again)
+  Microphone denied (an old build's entry with no recorded history, like JJ's): its Allow button resets it first, then macOS asks

Evidence

• Before (on JJ's Mac): three computer_use tasks ended stuck with "It kept doing the same thing (clicked the textbox “Address and search bar” containing “https://github.com/jayleaton/t3code/pull/138” (focused)) without the screen changing." Settings showed "Screen Recording kept from an older build" while TCC said ScreenCapture: Allowed (System Set).
• After (Linux dev box): helper type-check ✓, 138 passed. Companion type-check ✓, lint ✓, 295 passed, build ✓.
• New tests:
  • A replay of the Chrome run: the focused address bar showing the GitHub URL, and the decider choosing it. The grants now asked for are type "example.com" and then press Enter with the field. This test fails on the old code.
  • Steering: the repeated action is missing from the next question, and triedWithoutEffect is set. After steering, the decider's next pick runs. With nothing left, the task ends stuck.
  • navigationText: URLs, hosts with paths, and no false matches ("open the email from paypal.com…", email addresses).
  • Grants: Screen Recording allowed in-process is granted whatever another process says. A same-certificate update isn't stale. Accessibility on with a failing AX read is stale. A grant missing under the ad-hoc signature is stale for all three permissions, Microphone included. Legacy version@mtime entries never call anything stale.
• Also kept: the scrolled-list test from Computer use on the Mac: safe typing, stops that end the action, display-aware corners, screen reads #88, which the steering edit had dropped (restored in this PR).
• Needs the Mac again: the stale card and Microphone reset on JJ's machine, and a rerun of "go to example.com".

Merge Danger

Door: two-way. The settings' grants entries change format. Old entries are ignored, never called stale.

Blast Radius: app. Affects the controller's step choice on every OS, and macOS permission states in Settings.

🤖 Generated with Claude Code