@jevitate/cli 0.1.0 → 0.2.0

package/dist/serve-cli.d.ts

@@ -0,0 +1,4 @@
+import { Command } from "commander";
+import { type CliDeps } from "./cli-shared.js";
+/** Registers the long-running servers: `jevitate mcp` and `jevitate ui`. */
+export declare function registerServeCommands(program: Command, deps: CliDeps, buildProgram: (deps: CliDeps) => Command): void;

package/dist/serve-cli.js

@@ -0,0 +1,95 @@
+import { envCredentialStore, OpenRouterGenerationGateway } from "@jevitate/ai-core";
+import { loadLocalCredentials } from "./credentials-file.js";
+import { fail } from "./envelope.js";
+import { startMcpServer } from "./mcp-api.js";
+import { realOpenRouterCall } from "./openrouter-call.js";
+import { startUiServer } from "./ui-api.js";
+import { intArg } from "./cli-args.js";
+import { renderPrintConfig } from "./init-mcp.js";
+import { mcpToolDeps } from "./mcp-cli-bridge.js";
+import { makeInProcessCliRunner } from "./mcp-cli-runner.js";
+import { resolveJourneysDir, resolveInboxDir, emitJson, DEFAULT_EXPLORE_CATALOG, DEFAULT_EXPLORE_CONSTRAINTS, } from "./cli-shared.js";
+/** Registers the long-running servers: `jevitate mcp` and `jevitate ui`. */
+export function registerServeCommands(program, deps, buildProgram) {
+    // Additive: `jevitate mcp` (Ticket #20) — start an MCP stdio server that
+    // exposes ONLY `@jevitate/mcp-facade`'s allowlisted tools (never the raw
+    // browser primitives in FORBIDDEN_TOOLS). This is the subcommand form of the
+    // MCP server (single-bundle deployment — no separate published package).
+    // The server owns stdin/stdout as the MCP protocol channel, so on success it
+    // blocks and writes NOTHING to stdout; only a setup failure (before the
+    // transport connects) emits a JSON envelope.
+    program
+        .command("mcp")
+        .description("start an MCP stdio server exposing only the allowlisted Jevitate tools")
+        .option("--dir <path>", "journeys directory (default: the repo's .jevitate/journeys; outside a repo ~/.jevitate/journeys)")
+        .option("--print-config <harness>", "print the config snippet to register `jevitate mcp` in a harness (claude | cursor | codex | json) and exit — prints only, writes nothing")
+        .action(async function () {
+        const { dir, printConfig } = this.opts();
+        // `--print-config <harness>` is the universal escape hatch: render the
+        // exact registration snippet and exit WITHOUT starting the server (safe:
+        // no writes, no stdio takeover). An unknown harness is a fail envelope.
+        if (printConfig !== undefined) {
+            const harness = printConfig;
+            if (harness !== "claude" && harness !== "cursor" && harness !== "codex" && harness !== "json") {
+                emitJson(program, fail("E_MCP_PRINT_CONFIG", `--print-config must be one of claude | cursor | codex | json (got '${printConfig}')`));
+                return;
+            }
+            program.configureOutput().writeOut?.(`${renderPrintConfig(harness)}\n`);
+            process.exitCode = 0;
+            return;
+        }
+        try {
+            // Credential store + generation gateway for the allowlisted
+            // `ai_generate_text` tool. The gateway is the REAL OpenRouter adapter:
+            // the key is read only inside it (Authorization header only), every
+            // outbound payload passes the never-to-model guard, and the facade's
+            // preflight returns a typed `setup_required` when the key is absent —
+            // so no `--real/--fake` flag is needed for the non-interactive server.
+            const aiStore = envCredentialStore(deps.ai?.env ?? process.env, deps.ai?.localConfig ?? loadLocalCredentials());
+            const generationGateway = deps.ai?.gateway ??
+                new OpenRouterGenerationGateway({
+                    store: aiStore,
+                    catalog: deps.ai?.catalog ?? DEFAULT_EXPLORE_CATALOG,
+                    constraints: deps.ai?.constraints ?? DEFAULT_EXPLORE_CONSTRAINTS,
+                    call: await realOpenRouterCall(),
+                });
+            // #254: the same default stores the CLI's `inbox`/`mission queue`/`mission result` read (mcpToolDeps).
+            // #255: the CLI-mirroring tools run the SAME program in process, over the same journeys dir.
+            const journeysDir = resolveJourneysDir(deps, dir);
+            const runCli = makeInProcessCliRunner(() => buildProgram({ ...deps, journeysDir }));
+            await startMcpServer(mcpToolDeps(deps, { journeysDir, credentialStore: aiStore, generationGateway, runCli }));
+        }
+        catch (err) {
+            emitJson(program, fail("E_MCP_SERVE", String(err instanceof Error ? err.message : err)));
+        }
+    });
+    // Additive: `jevitate ui` (Task 8) — starts the local, loopback-only HTTP
+    // HITL approval dashboard (ui-api.ts's `startUiServer`). Resolves the SAME
+    // inbox dir `jevitate mcp`'s inbox tools serve (resolveInboxDir), so the
+    // two commands agree on where approvals/handbacks/reviews live. On success
+    // it prints the bound URL (carrying the capability token) and stays alive —
+    // the open HTTP server keeps the process running, the same way `mcp`'s open
+    // stdio transport does.
+    program
+        .command("ui")
+        .description("start the local HITL approval dashboard (loopback-only HTTP server)")
+        .option("--port <n>", "explicit port (fails on conflict; default 4180, retries on conflict)", intArg({ min: 0, max: 65535 }))
+        .option("--no-open", "do not open the dashboard URL in the default browser")
+        .option("--inbox-dir <path>", "inbox store directory (default: ~/.jevitate/inbox — same dir `jevitate mcp` serves)")
+        .action(async function () {
+        const o = this.opts();
+        try {
+            const start = deps.ui?.startUiServer ?? startUiServer;
+            const handle = await start({
+                inboxDir: resolveInboxDir(deps, o.inboxDir),
+                open: o.open ?? true,
+                ...(o.port !== undefined ? { port: Number(o.port) } : {}),
+            });
+            program.configureOutput().writeOut?.(`${handle.url}\n`);
+        }
+        catch (err) {
+            emitJson(program, fail("E_UI_SERVE", String(err instanceof Error ? err.message : err)));
+        }
+    });
+}
+//# sourceMappingURL=serve-cli.js.map

package/dist/serve-cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"serve-cli.js","sourceRoot":"","sources":["../src/serve-cli.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,2BAA2B,EAAE,MAAM,mBAAmB,CAAC;AACpF,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AACrC,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AACvC,OAAO,EAAE,iBAAiB,EAAmB,MAAM,eAAe,CAAC;AACnE,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,EAEL,kBAAkB,EAClB,eAAe,EACf,QAAQ,EACR,uBAAuB,EACvB,2BAA2B,GAC5B,MAAM,iBAAiB,CAAC;AAEzB,4EAA4E;AAC5E,MAAM,UAAU,qBAAqB,CAAC,OAAgB,EAAE,IAAa,EAAE,YAAwC;IAC7G,yEAAyE;IACzE,yEAAyE;IACzE,6EAA6E;IAC7E,yEAAyE;IACzE,6EAA6E;IAC7E,wEAAwE;IACxE,6CAA6C;IAC7C,OAAO;SACJ,OAAO,CAAC,KAAK,CAAC;SACd,WAAW,CAAC,wEAAwE,CAAC;SACrF,MAAM,CAAC,cAAc,EAAE,kGAAkG,CAAC;SAC1H,MAAM,CACL,0BAA0B,EAC1B,0IAA0I,CAC3I;SACA,MAAM,CAAC,KAAK;QACX,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC,IAAI,EAA0C,CAAC;QAEjF,uEAAuE;QACvE,yEAAyE;QACzE,wEAAwE;QACxE,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,OAAO,GAAG,WAAyB,CAAC;YAC1C,IAAI,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,OAAO,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;gBAC9F,QAAQ,CACN,OAAO,EACP,IAAI,CAAC,oBAAoB,EAAE,sEAAsE,WAAW,IAAI,CAAC,CAClH,CAAC;gBACF,OAAO;YACT,CAAC;YACD,OAAO,CAAC,eAAe,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,iBAAiB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACxE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,4DAA4D;YAC5D,uEAAuE;YACvE,oEAAoE;YACpE,qEAAqE;YACrE,sEAAsE;YACtE,uEAAuE;YACvE,MAAM,OAAO,GAAG,kBAAkB,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,WAAW,IAAI,oBAAoB,EAAE,CAAC,CAAC;YAChH,MAAM,iBAAiB,GACrB,IAAI,CAAC,EAAE,EAAE,OAAO;gBAChB,IAAI,2BAA2B,CAAC;oBAC9B,KAAK,EAAE,OAAO;oBACd,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,OAAO,IAAI,uBAAuB;oBACpD,WAAW,EAAE,IAAI,CAAC,EAAE,EAAE,WAAW,IAAI,2BAA2B;oBAChE,IAAI,EAAE,MAAM,kBAAkB,EAAE;iBACjC,CAAC,CAAC;YACL,uGAAuG;YACvG,6FAA6F;YAC7F,MAAM,WAAW,GAAG,kBAAkB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAClD,MAAM,MAAM,GAAG,sBAAsB,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,GAAG,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;YACpF,MAAM,cAAc,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,eAAe,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QAChH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC3F,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,0EAA0E;IAC1E,2EAA2E;IAC3E,yEAAyE;IACzE,2EAA2E;IAC3E,4EAA4E;IAC5E,4EAA4E;IAC5E,wBAAwB;IACxB,OAAO;SACJ,OAAO,CAAC,IAAI,CAAC;SACb,WAAW,CAAC,qEAAqE,CAAC;SAClF,MAAM,CAAC,YAAY,EAAE,sEAAsE,EAAE,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;SAC5H,MAAM,CAAC,WAAW,EAAE,sDAAsD,CAAC;SAC3E,MAAM,CAAC,oBAAoB,EAAE,qFAAqF,CAAC;SACnH,MAAM,CAAC,KAAK;QACX,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAwD,CAAC;QAC5E,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,CAAC,EAAE,EAAE,aAAa,IAAI,aAAa,CAAC;YACtD,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC;gBACzB,QAAQ,EAAE,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC;gBAC3C,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI;gBACpB,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC1D,CAAC,CAAC;YACH,OAAO,CAAC,eAAe,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC;QAC1D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC1F,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/server-log-verify.d.ts

@@ -0,0 +1,34 @@
+import type { Recording } from "@jevitate/recording";
+import { type VerifyFixResult, type VerifySession } from "@jevitate/explore";
+/**
+ * `verify-fix` for a `server-log` defect (#142): NOT a re-check of `@jevitate/explore`'s
+ * `verifyFix` (which looks for a fingerprint among DOM/console/network signals — a server log line
+ * is none of those). Instead, this replays the defect's recorded steps in a fresh browser session
+ * AND re-opens the SAME log sources for the SAME drain window, and asks whether a line matching
+ * the SAME matcher and the SAME normalized message reappears. Kept entirely in the CLI layer (new
+ * file) — `packages/explore/src/verify-fix.ts` is untouched.
+ *
+ * Mirrors `verifyFix`'s own replay discipline (#74): `replays` fresh-context attempts, only ones
+ * that actually reached the defect's step count as evidence, and the pure `verifyReplayVerdict`
+ * rule (fired on every ran attempt ⇒ still-reproduces, none ⇒ fixed, a mix ⇒ intermittent — never
+ * "fixed" off one clean replay).
+ */
+export interface VerifyServerLogParams {
+    readonly recording: Recording;
+    /** Flat index of the last Recording step to replay (the defect's `repro.recordingStepIndex`). */
+    readonly recordingStepIndex: number;
+    readonly fingerprint: string;
+    /** The defect's persisted log sources (raw `--log-source` specs) and matcher (raw `--log-defect`). */
+    readonly sources: readonly string[];
+    readonly matcher: string;
+    readonly normalizedMessage: string;
+    readonly drainMs: number;
+    readonly allowLogCmd: boolean;
+    /** Opens a FRESH browser session (never the one the defect was found in). */
+    readonly openSession: () => Promise<VerifySession>;
+    readonly settleCeilingMs?: number;
+    readonly targetTimeoutMs?: number;
+    /** Fresh-context replays (#74). Default `DEFAULT_VERIFY_REPLAYS` (mirrors `@jevitate/explore`). */
+    readonly replays?: number;
+}
+export declare function verifyServerLogDefect(params: VerifyServerLogParams): Promise<VerifyFixResult>;

package/dist/server-log-verify.js

@@ -0,0 +1,115 @@
+import { RecordingInterpreter } from "@jevitate/interpreter";
+import { perceive, verifyReplayVerdict } from "@jevitate/explore";
+import { closeLogSources, openLogSources, parseLogSourceSpecs } from "./log-sources.js";
+import { matchesLogDefect, normalizeLogMessage, parseLogDefectSpec, parseLogLine } from "./log-lines.js";
+const DEFAULT_REPLAYS = 3;
+function firstLine(e) {
+    return e instanceof Error ? e.message.split("\n")[0] ?? e.message : String(e);
+}
+function sleep(ms) {
+    return new Promise((resolve) => {
+        const t = setTimeout(resolve, ms);
+        t.unref?.();
+    });
+}
+async function runOneServerLogReplay(params, sourceSpecs) {
+    const lines = [];
+    const handles = openLogSources(sourceSpecs, {
+        onLine: (raw, arrivalEpochMs) => {
+            if (lines.length >= 5_000)
+                return;
+            lines.push(parseLogLine(raw, arrivalEpochMs, ""));
+        },
+    });
+    let session;
+    try {
+        session = await params.openSession();
+    }
+    catch (e) {
+        await closeLogSources(handles);
+        return {
+            ran: false,
+            fired: false,
+            detail: `could not open a fresh session: ${firstLine(e)}`,
+            replay: { outcome: "failed", at: -1, error: firstLine(e) },
+        };
+    }
+    try {
+        const interpreter = new RecordingInterpreter(params.targetTimeoutMs === undefined ? {} : { targetTimeoutMs: params.targetTimeoutMs });
+        const outcome = await interpreter.runToCheckpoint(session.actor, params.recording, params.recordingStepIndex);
+        await perceive(session.page, {
+            ...(params.settleCeilingMs === undefined ? {} : { renderWaitMs: params.settleCeilingMs }),
+        }).catch(() => undefined);
+        // Hold the log sources open for the SAME drain window the original run used, so async backend
+        // work that settles late is caught here too — never blocking anything but this one attempt.
+        await sleep(params.drainMs);
+        await closeLogSources(handles);
+        const matcher = parseLogDefectSpec(params.matcher);
+        const fired = lines.some((l) => matchesLogDefect(l, matcher) && normalizeLogMessage(l.message) === params.normalizedMessage);
+        if (outcome.outcome !== "completed") {
+            const replay = outcome.outcome === "failed"
+                ? { outcome: "failed", at: outcome.at, error: outcome.error.split("\n")[0] ?? outcome.error, ...(outcome.reason === undefined ? {} : { reason: outcome.reason }) }
+                : { outcome: "failed", at: outcome.at, error: "replay paused for a human hand-back" };
+            const mismatch = outcome.outcome === "failed" && outcome.reason !== undefined;
+            return {
+                ran: false,
+                fired,
+                replay,
+                detail: mismatch
+                    ? `replay stopped at step ${outcome.at}: ${outcome.reason} — the recorded path was not reproduced, so this proves nothing`
+                    : `replay could not reach step ${params.recordingStepIndex} (failed at ${outcome.at}); the log source was not re-checked against the intended step`,
+            };
+        }
+        return {
+            ran: true,
+            fired,
+            replay: { outcome: "completed" },
+            detail: fired
+                ? "a matching server log line reappeared during the drain window"
+                : "replay reached the defect's step and no matching server log line appeared within the drain window",
+        };
+    }
+    catch (e) {
+        await closeLogSources(handles).catch(() => undefined);
+        return { ran: false, fired: false, detail: `replay failed: ${firstLine(e)}`, replay: { outcome: "failed", at: -1, error: firstLine(e) } };
+    }
+    finally {
+        await session.close().catch(() => undefined);
+    }
+}
+export async function verifyServerLogDefect(params) {
+    const base = { fingerprint: params.fingerprint };
+    let sourceSpecs;
+    try {
+        sourceSpecs = parseLogSourceSpecs(params.sources, params.allowLogCmd);
+        parseLogDefectSpec(params.matcher); // validated once up front, fail closed
+    }
+    catch (e) {
+        return {
+            ...base,
+            verdict: "inconclusive",
+            observedFingerprints: [],
+            replay: { outcome: "failed", at: -1, error: "not replayed" },
+            reason: `the defect's log source(s)/matcher no longer parse: ${firstLine(e)}`,
+        };
+    }
+    const replays = params.replays ?? DEFAULT_REPLAYS;
+    if (!Number.isInteger(replays) || replays < 1)
+        throw new Error(`verifyServerLogDefect: replays must be >= 1, got ${replays}`);
+    const runs = [];
+    for (let i = 0; i < replays; i++)
+        runs.push(await runOneServerLogReplay(params, sourceSpecs));
+    const last = runs[runs.length - 1];
+    const verdict = verifyReplayVerdict(runs);
+    const ran = runs.filter((r) => r.ran).length;
+    const fired = runs.filter((r) => r.ran && r.fired).length;
+    const reason = verdict === "inconclusive"
+        ? last.detail
+        : verdict === "still-reproduces"
+            ? `the matching server log line reappeared on all ${fired}/${ran} replay(s) that ran`
+            : verdict === "fixed"
+                ? `no matching server log line appeared on any of the ${ran}/${runs.length} replay(s) that ran`
+                : `the matching server log line appeared on ${fired}/${ran} replay(s) that ran — intermittent on the current code, never reported as fixed`;
+    return { ...base, verdict, observedFingerprints: fired > 0 ? [params.fingerprint] : [], replay: last.replay, reason, attempts: runs.map((r) => ({ ran: r.ran, fired: r.fired, detail: r.detail })) };
+}
+//# sourceMappingURL=server-log-verify.js.map

package/dist/server-log-verify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-log-verify.js","sourceRoot":"","sources":["../src/server-log-verify.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAE7D,OAAO,EAAE,QAAQ,EAAE,mBAAmB,EAAmE,MAAM,mBAAmB,CAAC;AACnI,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,mBAAmB,EAAsB,MAAM,kBAAkB,CAAC;AAC5G,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,YAAY,EAAgB,MAAM,gBAAgB,CAAC;AAmCvH,MAAM,eAAe,GAAG,CAAC,CAAC;AAE1B,SAAS,SAAS,CAAC,CAAU;IAC3B,OAAO,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AAChF,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,CAAC,GAAG,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAClC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AASD,KAAK,UAAU,qBAAqB,CAAC,MAA6B,EAAE,WAAqC;IACvG,MAAM,KAAK,GAAc,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAG,cAAc,CAAC,WAAW,EAAE;QAC1C,MAAM,EAAE,CAAC,GAAG,EAAE,cAAc,EAAE,EAAE;YAC9B,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK;gBAAE,OAAO;YAClC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC,CAAC;QACpD,CAAC;KACF,CAAC,CAAC;IACH,IAAI,OAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC;IACvC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC;QAC/B,OAAO;YACL,GAAG,EAAE,KAAK;YACV,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,mCAAmC,SAAS,CAAC,CAAC,CAAC,EAAE;YACzD,MAAM,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE;SAC3D,CAAC;IACJ,CAAC;IACD,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,IAAI,oBAAoB,CAAC,MAAM,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC;QACtI,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,eAAe,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,kBAAkB,CAAC,CAAC;QAC9G,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE;YAC3B,GAAG,CAAC,MAAM,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,eAAe,EAAE,CAAC;SAC1F,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC1B,8FAA8F;QAC9F,4FAA4F;QAC5F,MAAM,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC5B,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC;QAE/B,MAAM,OAAO,GAAG,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACnD,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,EAAE,OAAO,CAAC,IAAI,mBAAmB,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,MAAM,CAAC,iBAAiB,CAAC,CAAC;QAE7H,IAAI,OAAO,CAAC,OAAO,KAAK,WAAW,EAAE,CAAC;YACpC,MAAM,MAAM,GACV,OAAO,CAAC,OAAO,KAAK,QAAQ;gBAC1B,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE;gBAClK,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,qCAAqC,EAAE,CAAC;YAC1F,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC;YAC9E,OAAO;gBACL,GAAG,EAAE,KAAK;gBACV,KAAK;gBACL,MAAM;gBACN,MAAM,EAAE,QAAQ;oBACd,CAAC,CAAC,0BAA0B,OAAO,CAAC,EAAE,KAAK,OAAO,CAAC,MAAM,iEAAiE;oBAC1H,CAAC,CAAC,+BAA+B,MAAM,CAAC,kBAAkB,eAAe,OAAO,CAAC,EAAE,gEAAgE;aACtJ,CAAC;QACJ,CAAC;QACD,OAAO;YACL,GAAG,EAAE,IAAI;YACT,KAAK;YACL,MAAM,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE;YAChC,MAAM,EAAE,KAAK;gBACX,CAAC,CAAC,+DAA+D;gBACjE,CAAC,CAAC,mGAAmG;SACxG,CAAC;IACJ,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACtD,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IAC5I,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,MAA6B;IACvE,MAAM,IAAI,GAAG,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC;IACjD,IAAI,WAA4B,CAAC;IACjC,IAAI,CAAC;QACH,WAAW,GAAG,mBAAmB,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;QACtE,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,uCAAuC;IAC7E,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO;YACL,GAAG,IAAI;YACP,OAAO,EAAE,cAAc;YACvB,oBAAoB,EAAE,EAAE;YACxB,MAAM,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE;YAC5D,MAAM,EAAE,uDAAuD,SAAS,CAAC,CAAC,CAAC,EAAE;SAC9E,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,eAAe,CAAC;IAClD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,OAAO,EAAE,CAAC,CAAC;IAE9H,MAAM,IAAI,GAAc,EAAE,CAAC;IAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,EAAE,CAAC,EAAE;QAAE,IAAI,CAAC,IAAI,CAAC,MAAM,qBAAqB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;IAC9F,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAY,CAAC;IAC9C,MAAM,OAAO,GAAqB,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;IAC1D,MAAM,MAAM,GACV,OAAO,KAAK,cAAc;QACxB,CAAC,CAAC,IAAI,CAAC,MAAM;QACb,CAAC,CAAC,OAAO,KAAK,kBAAkB;YAC9B,CAAC,CAAC,kDAAkD,KAAK,IAAI,GAAG,qBAAqB;YACrF,CAAC,CAAC,OAAO,KAAK,OAAO;gBACnB,CAAC,CAAC,sDAAsD,GAAG,IAAI,IAAI,CAAC,MAAM,qBAAqB;gBAC/F,CAAC,CAAC,4CAA4C,KAAK,IAAI,GAAG,iFAAiF,CAAC;IACpJ,OAAO,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,oBAAoB,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC;AACvM,CAAC"}

package/dist/session-check.d.ts

@@ -0,0 +1,14 @@
+/**
+ * #213: was a run's `--storage-state` (a persona's) session honoured? A dead session (an expired or
+ * bogus cookie) does not fail the run by itself: the app shows its sign-in form, and a goal run's
+ * model may simply sign in on its own — the run then passes, silently testing as whoever it logged
+ * in as, not the persona. Code-decided from the FIRST page the run decided on (its seed landing):
+ * a login-like URL (the #82 pattern), or a sign-in form — a visible password field — on it.
+ *
+ * Returns why the session was not honoured, or undefined (no storage state given, or the first page
+ * was not a sign-in page). Never a verdict about the app: a warning on the result and the summary.
+ */
+export declare function sessionLostReason(data: {
+    readonly target?: unknown;
+    readonly transcript?: unknown;
+}): string | undefined;

package/dist/session-check.js

@@ -0,0 +1,44 @@
+import { basename } from "node:path";
+import { isLoginLikeUrl } from "@jevitate/explore";
+/**
+ * #213: was a run's `--storage-state` (a persona's) session honoured? A dead session (an expired or
+ * bogus cookie) does not fail the run by itself: the app shows its sign-in form, and a goal run's
+ * model may simply sign in on its own — the run then passes, silently testing as whoever it logged
+ * in as, not the persona. Code-decided from the FIRST page the run decided on (its seed landing):
+ * a login-like URL (the #82 pattern), or a sign-in form — a visible password field — on it.
+ *
+ * Returns why the session was not honoured, or undefined (no storage state given, or the first page
+ * was not a sign-in page). Never a verdict about the app: a warning on the result and the summary.
+ */
+export function sessionLostReason(data) {
+    const target = isRecord(data.target) ? data.target : undefined;
+    const state = typeof target?.storageStatePath === "string" ? target.storageStatePath : undefined;
+    if (state === undefined)
+        return undefined;
+    const first = Array.isArray(data.transcript) ? data.transcript.find(isRecord) : undefined;
+    if (first === undefined)
+        return undefined;
+    const url = typeof first.url === "string" ? first.url : "";
+    const controls = Array.isArray(first.controls) ? first.controls.filter((c) => typeof c === "string") : [];
+    const loginUrl = url !== "" && isLoginLikeUrl(url);
+    const passwordField = controls.some((c) => PASSWORD_CONTROL.test(c));
+    if (!loginUrl && !passwordField)
+        return undefined;
+    const where = pathOf(url);
+    const what = loginUrl ? `the first page was a sign-in page (${where})` : `the first page (${where}) showed a sign-in form (a password field)`;
+    return `the session in ${basename(state)} was not honoured — ${what}; the run did not start signed in as that session (re-save the storage state, or check its cookie is still valid)`;
+}
+/** A password field's control identity (`textbox "Password"`, `textbox "Passcode"`, …). */
+const PASSWORD_CONTROL = /^(?:textbox|searchbox)\s+"[^"]*\b(?:password|passcode|passwort|mot de passe)\b[^"]*"$/i;
+function pathOf(url) {
+    try {
+        return new URL(url).pathname;
+    }
+    catch {
+        return url === "" ? "?" : url;
+    }
+}
+function isRecord(v) {
+    return v !== null && typeof v === "object" && !Array.isArray(v);
+}
+//# sourceMappingURL=session-check.js.map

package/dist/session-check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-check.js","sourceRoot":"","sources":["../src/session-check.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAEnD;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAkE;IAClG,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/D,MAAM,KAAK,GAAG,OAAO,MAAM,EAAE,gBAAgB,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;IACjG,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1F,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,GAAG,GAAG,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3D,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACvH,MAAM,QAAQ,GAAG,GAAG,KAAK,EAAE,IAAI,cAAc,CAAC,GAAG,CAAC,CAAC;IACnD,MAAM,aAAa,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACrE,IAAI,CAAC,QAAQ,IAAI,CAAC,aAAa;QAAE,OAAO,SAAS,CAAC;IAClD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1B,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,sCAAsC,KAAK,GAAG,CAAC,CAAC,CAAC,mBAAmB,KAAK,4CAA4C,CAAC;IAC9I,OAAO,kBAAkB,QAAQ,CAAC,KAAK,CAAC,uBAAuB,IAAI,mHAAmH,CAAC;AACzL,CAAC;AAED,2FAA2F;AAC3F,MAAM,gBAAgB,GAAG,wFAAwF,CAAC;AAElH,SAAS,MAAM,CAAC,GAAW;IACzB,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;IAChC,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,CAAU;IAC1B,OAAO,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC"}

package/dist/site-cli.d.ts

@@ -0,0 +1,4 @@
+import { Command } from "commander";
+import { type CliDeps } from "./cli-shared.js";
+/** Registers `jevitate site`: `policy get|set` and `simulate`. */
+export declare function registerSiteCommands(program: Command, deps: CliDeps): void;

package/dist/site-cli.js

@@ -0,0 +1,127 @@
+import { readFile } from "node:fs/promises";
+import { SitePolicySchema, simulateTiming } from "@jevitate/domain";
+import { ok, fail } from "./envelope.js";
+import { sitePolicyKey } from "./site-gate-cli.js";
+import { resolveDbPath, withSitePolicyRepository, parsePlannedScript, emitJson } from "./cli-shared.js";
+/** Registers `jevitate site`: `policy get|set` and `simulate`. */
+export function registerSiteCommands(program, deps) {
+    const site = program
+        .command("site")
+        .description("per-site policies for Journey runs: human-like pacing, throttles, run budgets and quiet hours");
+    const sitePolicy = site
+        .command("policy")
+        .description("read or set a site's policy (the site is the Journey's origin, e.g. https://app.example.com)");
+    sitePolicy
+        .command("get <site>")
+        .description("print the policy for a site (an origin) and account")
+        .option("--account <account>", "account id", "primary")
+        .option("--db <path>", "sqlite db path")
+        .option("--json", "emit a JSON envelope")
+        .action(async function (siteId) {
+        const { account, db, json } = this.opts();
+        try {
+            const dbPath = resolveDbPath(deps, db);
+            const policy = await withSitePolicyRepository(dbPath, (repository) => repository.get(sitePolicyKey(siteId), account));
+            const envelope = ok(policy);
+            if (json) {
+                emitJson(program, envelope);
+            }
+            else {
+                if (policy) {
+                    program.configureOutput().writeOut?.(`policy for '${siteId}' (version ${policy.version}): ${JSON.stringify(policy)}\n`);
+                }
+                else {
+                    program.configureOutput().writeOut?.(`no policy configured for '${siteId}' (account '${account}')\n`);
+                }
+                process.exitCode = 0;
+            }
+        }
+        catch (err) {
+            emitJson(program, fail("E_SITE_POLICY_GET", String(err)));
+        }
+    });
+    sitePolicy
+        .command("set <site>")
+        .description("set the policy for a site (an origin): Journey runs there are paced, throttled, budgeted and kept out of quiet hours " +
+        "(journey run, source run, check, MCP run_journey); load run applies the pacing only")
+        .requiredOption("--file <path>", "path to a policy JSON file")
+        .option("--account <account>", "account id", "primary")
+        .option("--db <path>", "sqlite db path")
+        .option("--json", "emit a JSON envelope")
+        .action(async function (siteId) {
+        const { account, db, file, json } = this.opts();
+        let policy;
+        try {
+            const raw = await readFile(file, "utf8");
+            policy = SitePolicySchema.parse(JSON.parse(raw));
+        }
+        catch (err) {
+            emitJson(program, fail("E_INVALID_POLICY", String(err)));
+            return;
+        }
+        try {
+            const dbPath = resolveDbPath(deps, db);
+            // The policy is stored (and reported) under the site's origin: a page URL names its origin.
+            const site = sitePolicyKey(siteId);
+            await withSitePolicyRepository(dbPath, (repository) => repository.set(site, account, policy));
+            const envelope = ok({ site, account, version: policy.version });
+            if (json) {
+                emitJson(program, envelope);
+            }
+            else {
+                program.configureOutput().writeOut?.(`policy for '${site}' (account '${account}') set to version ${policy.version}\n`);
+                process.exitCode = 0;
+            }
+        }
+        catch (err) {
+            emitJson(program, fail("E_SITE_POLICY_SET", String(err)));
+        }
+    });
+    site
+        .command("simulate <site>")
+        .description("estimate, offline, how long a planned step script takes under a site's pacing policy")
+        .requiredOption("--script <path>", "path to a planned-step script JSON file")
+        .option("--seed <n>", "deterministic RNG seed", "0")
+        .option("--account <account>", "account id", "primary")
+        .option("--db <path>", "sqlite db path")
+        .option("--json", "emit a JSON envelope")
+        .action(async function (siteId) {
+        const { account, db, script, seed, json } = this.opts();
+        let plannedScript;
+        try {
+            const raw = await readFile(script, "utf8");
+            plannedScript = parsePlannedScript(raw);
+        }
+        catch (err) {
+            emitJson(program, fail("E_INVALID_SCRIPT", String(err)));
+            return;
+        }
+        const seedNum = Number(seed);
+        if (!Number.isFinite(seedNum)) {
+            emitJson(program, fail("E_INVALID_SEED", `--seed must be a finite number, got ${JSON.stringify(seed)}`));
+            return;
+        }
+        try {
+            const dbPath = resolveDbPath(deps, db);
+            const policy = await withSitePolicyRepository(dbPath, (repository) => repository.get(sitePolicyKey(siteId), account));
+            const interaction = policy?.interaction ?? {};
+            const profile = simulateTiming(interaction, seedNum, plannedScript);
+            const envelope = ok(profile);
+            if (json) {
+                emitJson(program, envelope);
+            }
+            else {
+                const out = program.configureOutput().writeOut;
+                for (const step of profile.steps) {
+                    out?.(`${step.kind} '${step.label}': ${step.delayMs}ms\n`);
+                }
+                out?.(`totalMs: ${profile.totalMs}\n`);
+                process.exitCode = 0;
+            }
+        }
+        catch (err) {
+            emitJson(program, fail("E_SITE_SIMULATE", String(err)));
+        }
+    });
+}
+//# sourceMappingURL=site-cli.js.map

package/dist/site-cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"site-cli.js","sourceRoot":"","sources":["../src/site-cli.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE5C,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAqC,MAAM,kBAAkB,CAAC;AACvG,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAgB,aAAa,EAAE,wBAAwB,EAAE,kBAAkB,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAEtH,kEAAkE;AAClE,MAAM,UAAU,oBAAoB,CAAC,OAAgB,EAAE,IAAa;IAClE,MAAM,IAAI,GAAG,OAAO;SACjB,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,+FAA+F,CAAC,CAAC;IAChH,MAAM,UAAU,GAAG,IAAI;SACpB,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,8FAA8F,CAAC,CAAC;IAE/G,UAAU;SACP,OAAO,CAAC,YAAY,CAAC;SACrB,WAAW,CAAC,qDAAqD,CAAC;SAClE,MAAM,CAAC,qBAAqB,EAAE,YAAY,EAAE,SAAS,CAAC;SACtD,MAAM,CAAC,aAAa,EAAE,gBAAgB,CAAC;SACvC,MAAM,CAAC,QAAQ,EAAE,sBAAsB,CAAC;SACxC,MAAM,CAAC,KAAK,WAA0B,MAAc;QACnD,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,IAAI,EAAoD,CAAC;QAC5F,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACvC,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC,MAAM,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;YACtH,MAAM,QAAQ,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC;YAC5B,IAAI,IAAI,EAAE,CAAC;gBACT,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YAC9B,CAAC;iBAAM,CAAC;gBACN,IAAI,MAAM,EAAE,CAAC;oBACX,OAAO,CAAC,eAAe,EAAE,CAAC,QAAQ,EAAE,CAClC,eAAe,MAAM,cAAc,MAAM,CAAC,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAClF,CAAC;gBACJ,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,eAAe,EAAE,CAAC,QAAQ,EAAE,CAClC,6BAA6B,MAAM,eAAe,OAAO,MAAM,CAChE,CAAC;gBACJ,CAAC;gBACD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACvB,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,mBAAmB,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,UAAU;SACP,OAAO,CAAC,YAAY,CAAC;SACrB,WAAW,CACV,uHAAuH;QACrH,qFAAqF,CACxF;SACA,cAAc,CAAC,eAAe,EAAE,4BAA4B,CAAC;SAC7D,MAAM,CAAC,qBAAqB,EAAE,YAAY,EAAE,SAAS,CAAC;SACtD,MAAM,CAAC,aAAa,EAAE,gBAAgB,CAAC;SACvC,MAAM,CAAC,QAAQ,EAAE,sBAAsB,CAAC;SACxC,MAAM,CAAC,KAAK,WAA0B,MAAc;QACnD,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,IAAI,EAKzC,CAAC;QACL,IAAI,MAAkB,CAAC;QACvB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACzC,MAAM,GAAG,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QACnD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,kBAAkB,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACzD,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACvC,4FAA4F;YAC5F,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;YACnC,MAAM,wBAAwB,CAAC,MAAM,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;YAC9F,MAAM,QAAQ,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;YAChE,IAAI,IAAI,EAAE,CAAC;gBACT,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YAC9B,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,eAAe,EAAE,CAAC,QAAQ,EAAE,CAClC,eAAe,IAAI,eAAe,OAAO,qBAAqB,MAAM,CAAC,OAAO,IAAI,CACjF,CAAC;gBACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACvB,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,mBAAmB,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,IAAI;SACD,OAAO,CAAC,iBAAiB,CAAC;SAC1B,WAAW,CAAC,sFAAsF,CAAC;SACnG,cAAc,CAAC,iBAAiB,EAAE,yCAAyC,CAAC;SAC5E,MAAM,CAAC,YAAY,EAAE,wBAAwB,EAAE,GAAG,CAAC;SACnD,MAAM,CAAC,qBAAqB,EAAE,YAAY,EAAE,SAAS,CAAC;SACtD,MAAM,CAAC,aAAa,EAAE,gBAAgB,CAAC;SACvC,MAAM,CAAC,QAAQ,EAAE,sBAAsB,CAAC;SACxC,MAAM,CAAC,KAAK,WAA0B,MAAc;QACnD,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,IAAI,EAMjD,CAAC;QACL,IAAI,aAA4B,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAC3C,aAAa,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,kBAAkB,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACzD,OAAO;QACT,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9B,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,gBAAgB,EAAE,uCAAuC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YACzG,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACvC,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC,MAAM,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;YACtH,MAAM,WAAW,GAAG,MAAM,EAAE,WAAW,IAAI,EAAE,CAAC;YAC9C,MAAM,OAAO,GAAG,cAAc,CAAC,WAAW,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC;YACpE,MAAM,QAAQ,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC;YAC7B,IAAI,IAAI,EAAE,CAAC;gBACT,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YAC9B,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC,QAAQ,CAAC;gBAC/C,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;oBACjC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,OAAO,MAAM,CAAC,CAAC;gBAC7D,CAAC;gBACD,GAAG,EAAE,CAAC,YAAY,OAAO,CAAC,OAAO,IAAI,CAAC,CAAC;gBACvC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACvB,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,iBAAiB,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/site-gate-cli.d.ts

@@ -0,0 +1,28 @@
+import type { Recording } from "@jevitate/recording";
+import type { Ability } from "@jevitate/screenplay";
+import { type SiteGateDeps } from "@jevitate/runtime";
+/**
+ * The site-policy gate's repositories (`jevitate site policy set`), opened from the policy database
+ * for the duration of `fn`. No database file means no policy was ever set: `fn` gets `undefined`,
+ * and nothing is created on disk.
+ */
+export declare function withSiteGate<T>(dbPath: string | undefined, fn: (deps: SiteGateDeps | undefined) => Promise<T>): Promise<T>;
+/** A site policy's key: the origin of a URL (`https://app.example.com/login` → `https://app.example.com`); any other id as given. */
+export declare function sitePolicyKey(site: string): string;
+/** What a gated Journey run gives its actor, and records once it has run. */
+export interface JourneyGate {
+    /** The pacing ability (none when no policy declares pacing), spread into `whoCan(...)`. */
+    readonly abilities: Ability[];
+    /** Records the run against the site's throttle class; call once the run executed, pass or fail. */
+    readonly done: () => Promise<void>;
+}
+/**
+ * The site-policy gate for one Journey run on `recording.site`'s origin — before any fixture or
+ * browser. Throws `SiteGateRefusedError` (quiet hours, min interval, budget) with when to retry.
+ * `enforceLimits: false` (a load run) applies only the pacing.
+ */
+export declare function gateJourney(siteGate: SiteGateDeps | undefined, recording: Recording, opts: {
+    readonly account?: string;
+    readonly enforceLimits: boolean;
+    readonly runId?: string;
+}): Promise<JourneyGate>;

package/dist/site-gate-cli.js

@@ -0,0 +1,58 @@
+import { existsSync } from "node:fs";
+import { openDatabase, migrateToLatest, SqliteActivityRepository, SqliteBudgetRepository, SqliteSitePolicyRepository } from "@jevitate/storage-sqlite";
+import { randomUUID } from "node:crypto";
+import { SiteGateRefusedError, enterSiteGate, throttleClassOf } from "@jevitate/runtime";
+/**
+ * The site-policy gate's repositories (`jevitate site policy set`), opened from the policy database
+ * for the duration of `fn`. No database file means no policy was ever set: `fn` gets `undefined`,
+ * and nothing is created on disk.
+ */
+export async function withSiteGate(dbPath, fn) {
+    if (dbPath === undefined || !existsSync(dbPath))
+        return fn(undefined);
+    const db = openDatabase(dbPath);
+    try {
+        await migrateToLatest(db);
+        const clock = { nowIso: () => new Date().toISOString(), monotonicMs: () => Date.now() };
+        return await fn({
+            policies: new SqliteSitePolicyRepository(db, clock),
+            budgets: new SqliteBudgetRepository(db),
+            activity: new SqliteActivityRepository(db),
+        });
+    }
+    finally {
+        await db.destroy();
+    }
+}
+/** A site policy's key: the origin of a URL (`https://app.example.com/login` → `https://app.example.com`); any other id as given. */
+export function sitePolicyKey(site) {
+    try {
+        const u = new URL(site);
+        return u.origin === "null" ? site : u.origin;
+    }
+    catch {
+        return site;
+    }
+}
+const UNGATED = { abilities: [], done: async () => undefined };
+/**
+ * The site-policy gate for one Journey run on `recording.site`'s origin — before any fixture or
+ * browser. Throws `SiteGateRefusedError` (quiet hours, min interval, budget) with when to retry.
+ * `enforceLimits: false` (a load run) applies only the pacing.
+ */
+export async function gateJourney(siteGate, recording, opts) {
+    if (siteGate === undefined)
+        return UNGATED;
+    const site = sitePolicyKey(recording.site);
+    const gate = await enterSiteGate(siteGate, {
+        site,
+        account: opts.account ?? "primary",
+        throttleClass: throttleClassOf(recording),
+        runId: opts.runId ?? randomUUID(),
+        enforceLimits: opts.enforceLimits,
+    });
+    if (!gate.ok)
+        throw new SiteGateRefusedError(site, gate.reason, gate.retryAfter);
+    return { abilities: gate.pace === null ? [] : [gate.pace], done: gate.done };
+}
+//# sourceMappingURL=site-gate-cli.js.map

package/dist/site-gate-cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"site-gate-cli.js","sourceRoot":"","sources":["../src/site-gate-cli.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,wBAAwB,EAAE,sBAAsB,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AACvJ,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,EAAE,oBAAoB,EAAE,aAAa,EAAE,eAAe,EAAqB,MAAM,mBAAmB,CAAC;AAE5G;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAI,MAA0B,EAAE,EAAkD;IAClH,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC;IACtE,MAAM,EAAE,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IAChC,IAAI,CAAC;QACH,MAAM,eAAe,CAAC,EAAE,CAAC,CAAC;QAC1B,MAAM,KAAK,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QACxF,OAAO,MAAM,EAAE,CAAC;YACd,QAAQ,EAAE,IAAI,0BAA0B,CAAC,EAAE,EAAE,KAAK,CAAC;YACnD,OAAO,EAAE,IAAI,sBAAsB,CAAC,EAAE,CAAC;YACvC,QAAQ,EAAE,IAAI,wBAAwB,CAAC,EAAE,CAAC;SAC3C,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC;IACrB,CAAC;AACH,CAAC;AAED,qIAAqI;AACrI,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;QACxB,OAAO,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAUD,MAAM,OAAO,GAAgB,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS,EAAE,CAAC;AAE5E;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,QAAkC,EAClC,SAAoB,EACpB,IAA6F;IAE7F,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC;IAC3C,MAAM,IAAI,GAAG,aAAa,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,QAAQ,EAAE;QACzC,IAAI;QACJ,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,SAAS;QAClC,aAAa,EAAE,eAAe,CAAC,SAAS,CAAC;QACzC,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,UAAU,EAAE;QACjC,aAAa,EAAE,IAAI,CAAC,aAAa;KAClC,CAAC,CAAC;IACH,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,IAAI,oBAAoB,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IACjF,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;AAC/E,CAAC"}

package/dist/source-api.js

@@ -30,6 +30,15 @@ export class NoDeclaredOriginsError extends Error {
         this.name = "NoDeclaredOriginsError";
     }
 }
+/** Parses `site`'s origin, or `null` if it isn't a valid absolute URL. */
+function originOf(site) {
+    try {
+        return new URL(site).origin;
+    }
+    catch {
+        return null;
+    }
+}
 function mgrOf(deps) {
     return new GitSourceManager(deps.sourcesDir, deps.git);
 }
@@ -171,9 +180,15 @@ export async function publishJourneyToSource(deps, req) {
     if (!journey.metadata.promoted) {
         throw new NotPromotedError(`journey '${req.id}' is not promoted; promote it before publishing`);
     }
-    const declaredOrigins = req.declareOrigins && req.declareOrigins.length > 0
-        ? req.declareOrigins
-        : collectNavigateOrigins(journey.recording);
+    // #125: `explore-author-journey` writes RELATIVE `navigate` urls (the recorded steps are
+    // relative to `recording.site`), so `collectNavigateOrigins` — which only resolves ABSOLUTE
+    // navigate urls — finds nothing to derive from. Fall back to `recording.site` itself: it's
+    // the origin the whole Recording was authored against, and exactly what an explore-authored
+    // Journey's relative navigates implicitly stay within.
+    const navigateOrigins = collectNavigateOrigins(journey.recording);
+    const siteOrigin = originOf(journey.recording.site);
+    const derivedOrigins = navigateOrigins.length > 0 ? navigateOrigins : siteOrigin ? [siteOrigin] : [];
+    const declaredOrigins = req.declareOrigins && req.declareOrigins.length > 0 ? req.declareOrigins : derivedOrigins;
     if (declaredOrigins.length === 0) {
         throw new NoDeclaredOriginsError(`journey '${req.id}' declares no origins and navigates to no absolute origin; pass --declare-origin <origin>`);
     }