fix(maestro): reset notifications via reset-all fallback, declare permission divergences

- iOS reset notifications bypasses the simctl probe gate into the
  existing reset-all fallback (verified live on iOS 26.3 where help
  omits the service); grant/deny stay loud rejections.
- Support matrix and replay docs now declare the intentional gaps
  vs upstream: no silent all-allow launch default, backend-servable
  all expansion, loud rejections, true-reset unset, never denies.

Author: Rohit3523

packages/maestro/src/internal/support-matrix.ts

@@ -1,5 +1,5 @@
 export const MAESTRO_COMPAT_SUPPORTED_CAPABILITIES = [
-  'Flows: launchApp (with clearState, permissions, and Apple-only launch arguments); setPermissions (mid-flow permission grants/denials/resets, expanded per platform); runFlow file/inline with platform, visibility, and limited boolean conditions; onFlowStart/onFlowComplete; repeat.times and retry.',
+  'Flows: launchApp (with clearState, permissions, and Apple-only launch arguments; permissions apply after state clearing but before launch, and a launchApp without permissions touches nothing — there is no silent all: allow default); setPermissions (mid-flow permission grants/denials/resets; all expands to the backend-servable set — Android: camera/contacts/microphone/notifications/photos, iOS: the simctl privacy help subset excluding camera/notifications; anything else fails loudly instead of being skipped; unset fully resets and location: never denies); runFlow file/inline with platform, visibility, and limited boolean conditions; onFlowStart/onFlowComplete; repeat.times and retry.',
   'Interactions: tapOn, doubleTapOn, longPressOn, inputText on the focused element, eraseText, openLink, hideKeyboard, basic pressKey, and back; selector targets poll until available and support recursive index, childOf, above, below, leftOf, rightOf, containsChild, containsDescendants, points, and optional; outer command labels are metadata, not target selectors.',
   'Assertions and navigation: assertVisible, assertNotVisible, assertTrue (literal values and ${VAR} lookups only; "", "false", "0", "null", and "undefined" are falsy, everything else is truthy), extendedWaitUntil, scroll, scrollUntilVisible, absolute/percentage/target swipe, takeScreenshot, waitForAnimationToEnd, and stopApp.',
   'Scripts: ordered runScript file/env scripts with http.post, json, and output variables.',

packages/platform-apple/src/core/__tests__/app-settings.test.ts

@@ -465,6 +465,44 @@ test('setIosSetting permission reset notifications falls back to reset all when
   );
 });
 
+test('setIosSetting permission reset notifications falls back to reset all when unlisted in privacy help', async () => {
+  // Runtimes like iOS 26.3 omit notifications from `simctl privacy help`, yet
+  // direct reset fails only with "operation not permitted" while `reset all`
+  // succeeds — so reset bypasses the probe gate into the existing fallback.
+  const device: DeviceInfo = {
+    ...IOS_TEST_SIMULATOR,
+    simulatorSetPath: '/fake/privacy-help-no-notifications',
+  };
+  const HELP_WITHOUT_NOTIFICATIONS = `Usage: simctl privacy <device> <action> <service> [<bundle identifier>]
+
+        service
+             The service:
+                 microphone - Allow access to audio input.`;
+  await withFakeAppleTool(
+    (args) => {
+      if (isSimctlListDevices(args)) return BOOTED_SIM_LIST_JSON;
+      if (args.includes('help')) return HELP_WITHOUT_NOTIFICATIONS;
+      const flat = args.join(' ');
+      if (flat.includes('reset notifications com.example.app')) {
+        return { stderr: 'Failed to reset access\nOperation not permitted', exitCode: 1 };
+      }
+      if (flat.includes('reset all com.example.app')) return '';
+      return unexpectedArgs(args);
+    },
+    async ({ calls }) => {
+      await setIosSetting(device, 'permission', 'reset', 'com.example.app', {
+        permissionTarget: 'notifications',
+      });
+      const flat = calls.map((args) => args.join(' '));
+      assert.equal(
+        flat.some((line) => line.includes('reset all com.example.app')),
+        true,
+        flat.join('; '),
+      );
+    },
+  );
+});
+
 test('setIosSetting permission deny notifications returns unsupported on runtimes that block it', async () => {
   await withFakeAppleTool(
     (args) => {

packages/platform-apple/src/core/app-settings.ts

@@ -272,7 +272,11 @@ async function runIosPrivacyCommand(
   appBundleId: string,
 ): Promise<void> {
   const supportedServices = await getSimctlPrivacyServices(device);
-  if (!supportedServices.has(target)) {
+  // reset notifications falls back to `reset all` below (direct reset fails
+  // with "operation not permitted" on runtimes whose help omits the service),
+  // so it passes the probe gate even when the service is unlisted. Grant/deny
+  // for notifications stay loud rejections.
+  if (!supportedServices.has(target) && !(action === 'reset' && target === 'notifications')) {
     throw new AppError(
       'UNSUPPORTED_OPERATION',
       `iOS simctl privacy does not support service "${target}" on this runtime.`,
@@ -285,29 +289,40 @@ async function runIosPrivacyCommand(
   }
 
   const args = ['privacy', device.id, action, target, appBundleId];
-  const isNotificationsTarget = target === 'notifications';
-  if (!(action === 'reset' && isNotificationsTarget)) {
-    try {
-      await runSimctl(device, args);
-      return;
-    } catch (error) {
-      if (!(isNotificationsTarget && isNotificationsOperationNotPermitted(error))) {
-        throw error;
-      }
-      throw new AppError(
-        'UNSUPPORTED_OPERATION',
-        'iOS simulator does not support setting notifications permission via simctl privacy on this runtime.',
-        {
-          deviceId: device.id,
-          appBundleId,
-          hint: 'Use reset notifications for reprompt behavior, or toggle notifications manually in Settings.',
-        },
-      );
+  if (action === 'reset' && target === 'notifications') {
+    await resetIosNotificationsPermission(device, appBundleId);
+    return;
+  }
+  try {
+    await runSimctl(device, args);
+    return;
+  } catch (error) {
+    if (!(target === 'notifications' && isNotificationsOperationNotPermitted(error))) {
+      throw error;
     }
+    throw new AppError(
+      'UNSUPPORTED_OPERATION',
+      'iOS simulator does not support setting notifications permission via simctl privacy on this runtime.',
+      {
+        deviceId: device.id,
+        appBundleId,
+        hint: 'Use reset notifications for reprompt behavior, or toggle notifications manually in Settings.',
+      },
+    );
   }
+}
 
+/**
+ * Direct `reset notifications` fails with "operation not permitted" on
+ * runtimes whose help omits the service, while `reset all` succeeds — so
+ * reset goes through the fallback instead of failing loudly like grant/deny.
+ */
+async function resetIosNotificationsPermission(
+  device: DeviceInfo,
+  appBundleId: string,
+): Promise<void> {
   try {
-    await runSimctl(device, args);
+    await runSimctl(device, ['privacy', device.id, 'reset', 'notifications', appBundleId]);
     return;
   } catch (error) {
     if (!isNotificationsOperationNotPermitted(error)) {

website/docs/docs/replay-e2e.md

@@ -70,7 +70,7 @@ agent-device test ./maestro-flows --maestro --platform android --artifacts-dir .
 
 Supported subset:
 
-- Flows: `launchApp` (with `clearState`, `permissions`, and Apple-only launch arguments); `setPermissions` (mid-flow permission grants/denials/resets, expanded per platform); `runFlow` file/inline with platform, visibility, and limited boolean conditions; `onFlowStart`/`onFlowComplete`; `repeat.times` and retry.
+- Flows: `launchApp` (with `clearState`, `permissions`, and Apple-only launch arguments; `permissions` apply after state clearing but before launch, and a `launchApp` without `permissions` touches nothing — there is no silent `all: allow` default); `setPermissions` (mid-flow permission grants/denials/resets; `all` expands to the backend-servable set — Android: camera/contacts/microphone/notifications/photos, iOS: the `simctl privacy help` subset excluding `camera`/`notifications`; anything else fails loudly instead of being skipped; `unset` fully resets and `location: never` denies); `runFlow` file/inline with platform, visibility, and limited boolean conditions; `onFlowStart`/`onFlowComplete`; `repeat.times` and retry.
 - Interactions: `tapOn`, `doubleTapOn`, `longPressOn`, `inputText` on the focused element, `eraseText`, `openLink`, `hideKeyboard`, basic `pressKey`, and `back`; selector targets poll until available and support recursive `index`, `childOf`, `above`, `below`, `leftOf`, `rightOf`, `containsChild`, `containsDescendants`, points, and `optional`; outer command labels are metadata, not target selectors.
 - Assertions and navigation: `assertVisible`, `assertNotVisible`, `assertTrue` (literal values and `${VAR}` lookups only; `""`, `"false"`, `"0"`, `"null"`, and `"undefined"` are falsy, everything else is truthy), `extendedWaitUntil`, `scroll`, `scrollUntilVisible`, absolute/percentage/target `swipe`, `takeScreenshot`, `waitForAnimationToEnd`, and `stopApp`.
 - Scripts: ordered `runScript` file/env scripts with `http.post`, `json`, and `output` variables.