@jevitate/cli 0.1.0 → 0.3.0

package/dist/suite-explore-options.d.ts

@@ -0,0 +1,321 @@
+/**
+ * The `jevitate check --suite` item option set (#195), declared ONCE against `jevitate explore`'s
+ * own options. Every explore option (by its commander attribute name) is in exactly one of:
+ *
+ *  - `SUITE_EXPLORE_OPTIONS` — generic options a target (as a default) and a goal/mission item (as
+ *    an override) take under the SAME camelCase name; parsed, typed and validated by
+ *    `check-suite.ts` from this table, and applied by `check-api.ts` exactly as `explore` applies
+ *    the flag;
+ *  - `SUITE_DEDICATED_EXPLORE_OPTIONS` — options the suite already had a dedicated field for
+ *    (`url`, `goal`, `success`, `routes`, `secretFields`, …);
+ *  - `SUITE_EXCLUDED_EXPLORE_OPTIONS` — options that make no sense per item, with the reason.
+ *
+ * `suite-explore-options.test.ts` builds the real `explore` command and fails when an option is in
+ * none of them (a new explore flag must be decided here), or when a table's shape disagrees with
+ * the flag's own (a repeatable flag is a list here, a switch a boolean).
+ *
+ * Secrets: no option here carries a literal secret. `secret` takes `env:<VAR>` references only;
+ * `totp` (like `secretFields`) takes `<descriptor>=env:<VAR>` bindings only — both resolved from
+ * the environment when the check starts, never written in the suite.
+ */
+/** What a suite item is run as: a goal item, or a mission item's strategy. */
+export type ExploreItemKind = "goal" | "coverage" | "exploratory" | "adversarial" | "feature" | "usability";
+export declare const ALL_KINDS: readonly ExploreItemKind[];
+export type SuiteOptionShape = 
+/** a non-empty string */
+"string"
+/** an array of non-empty strings (a repeatable flag) */
+ | "strings" | "boolean"
+/** a positive number */
+ | "positive"
+/** a positive integer */
+ | "integer"
+/** a non-negative integer */
+ | "count"
+/** a number in 0..1 */
+ | "ratio"
+/** a file path, resolved against the suite file's directory */
+ | "path"
+/** `<name>=<storageState path>` entries, the path resolved against the suite file's directory */
+ | "named-paths"
+/** `env:<VAR>` references (never a literal value) */
+ | "env-refs"
+/** `<descriptor>=env:<VAR>` bindings (never a literal value) */
+ | "env-bindings";
+export interface SuiteExploreOption {
+    readonly shape: SuiteOptionShape;
+    /** The item kinds the option applies to (as on `explore`); an item setting it elsewhere is refused. */
+    readonly appliesTo: readonly ExploreItemKind[];
+    /** Allowed values, for an enum-like string. */
+    readonly oneOf?: readonly string[];
+    /** Inclusive range, for an integer. */
+    readonly range?: readonly [number, number];
+}
+export declare const SUITE_EXPLORE_OPTIONS: {
+    readonly show: {
+        readonly shape: "string";
+        readonly appliesTo: readonly ["usability"];
+    };
+    readonly minConfidence: {
+        readonly shape: "ratio";
+        readonly appliesTo: readonly ["usability"];
+    };
+    readonly maxFindingsPerPage: {
+        readonly shape: "integer";
+        readonly appliesTo: readonly ["usability"];
+        readonly range: readonly [1, 1000];
+    };
+    readonly product: {
+        readonly shape: "path";
+        readonly appliesTo: readonly ["usability"];
+    };
+    readonly polish: {
+        readonly shape: "boolean";
+        readonly appliesTo: readonly ["usability"];
+    };
+    readonly probeGuards: {
+        readonly shape: "boolean";
+        readonly appliesTo: readonly ["usability"];
+    };
+    readonly scope: {
+        readonly shape: "string";
+        readonly appliesTo: readonly ["coverage", "exploratory"];
+        readonly oneOf: readonly ["app"];
+    };
+    readonly secret: {
+        readonly shape: "env-refs";
+        readonly appliesTo: readonly ["goal", "adversarial", "usability"];
+    };
+    readonly totp: {
+        readonly shape: "env-bindings";
+        readonly appliesTo: readonly ExploreItemKind[];
+    };
+    readonly fixture: {
+        readonly shape: "path";
+        readonly appliesTo: readonly ExploreItemKind[];
+    };
+    readonly actor: {
+        readonly shape: "named-paths";
+        readonly appliesTo: readonly ["goal"];
+    };
+    readonly saveStorageState: {
+        readonly shape: "path";
+        readonly appliesTo: readonly ExploreItemKind[];
+    };
+    readonly persona: {
+        readonly shape: "named-paths";
+        readonly appliesTo: readonly ExploreItemKind[];
+    };
+    readonly personas: {
+        readonly shape: "path";
+        readonly appliesTo: readonly ExploreItemKind[];
+    };
+    readonly stallTimeout: {
+        readonly shape: "positive";
+        readonly appliesTo: readonly ["coverage", "exploratory", "feature"];
+    };
+    readonly replyWaitMs: {
+        readonly shape: "integer";
+        readonly appliesTo: readonly ExploreItemKind[];
+    };
+    readonly replyCeilingMs: {
+        readonly shape: "integer";
+        readonly appliesTo: readonly ExploreItemKind[];
+    };
+    readonly replyMaxChars: {
+        readonly shape: "integer";
+        readonly appliesTo: readonly ExploreItemKind[];
+        readonly range: readonly [20, 2000];
+    };
+    readonly jobWaitMs: {
+        readonly shape: "integer";
+        readonly appliesTo: readonly ExploreItemKind[];
+    };
+    readonly deny: {
+        readonly shape: "strings";
+        readonly appliesTo: readonly ExploreItemKind[];
+    };
+    readonly paid: {
+        readonly shape: "strings";
+        readonly appliesTo: readonly ExploreItemKind[];
+    };
+    readonly allowDestructive: {
+        readonly shape: "boolean";
+        readonly appliesTo: readonly ExploreItemKind[];
+    };
+    readonly allowWrites: {
+        readonly shape: "boolean";
+        readonly appliesTo: readonly ExploreItemKind[];
+    };
+    readonly allowWrite: {
+        readonly shape: "strings";
+        readonly appliesTo: readonly ExploreItemKind[];
+    };
+    readonly readRpc: {
+        readonly shape: "strings";
+        readonly appliesTo: readonly ExploreItemKind[];
+    };
+    readonly hangReplayWrites: {
+        readonly shape: "boolean";
+        readonly appliesTo: readonly ExploreItemKind[];
+    };
+    readonly settleIgnore: {
+        readonly shape: "strings";
+        readonly appliesTo: readonly ExploreItemKind[];
+    };
+    readonly longPollMs: {
+        readonly shape: "integer";
+        readonly appliesTo: readonly ExploreItemKind[];
+    };
+    readonly apiPrefix: {
+        readonly shape: "strings";
+        readonly appliesTo: readonly ExploreItemKind[];
+    };
+    readonly ignoreNoProgress: {
+        readonly shape: "strings";
+        readonly appliesTo: readonly ExploreItemKind[];
+    };
+    readonly hangReplays: {
+        readonly shape: "count";
+        readonly appliesTo: readonly ["goal", "adversarial"];
+    };
+    readonly minControlCoverage: {
+        readonly shape: "ratio";
+        readonly appliesTo: readonly ["adversarial"];
+    };
+    readonly requireFormSubmit: {
+        readonly shape: "boolean";
+        readonly appliesTo: readonly ["adversarial"];
+    };
+    readonly logSource: {
+        readonly shape: "strings";
+        readonly appliesTo: readonly ExploreItemKind[];
+    };
+    readonly allowLogCmd: {
+        readonly shape: "boolean";
+        readonly appliesTo: readonly ExploreItemKind[];
+    };
+    readonly logDefect: {
+        readonly shape: "strings";
+        readonly appliesTo: readonly ExploreItemKind[];
+    };
+    readonly logQuietOk: {
+        readonly shape: "strings";
+        readonly appliesTo: readonly ExploreItemKind[];
+    };
+    readonly logIgnore: {
+        readonly shape: "strings";
+        readonly appliesTo: readonly ExploreItemKind[];
+    };
+    readonly logScope: {
+        readonly shape: "strings";
+        readonly appliesTo: readonly ExploreItemKind[];
+    };
+    readonly logCorrelationHeader: {
+        readonly shape: "strings";
+        readonly appliesTo: readonly ExploreItemKind[];
+    };
+    readonly logIdPattern: {
+        readonly shape: "strings";
+        readonly appliesTo: readonly ExploreItemKind[];
+    };
+    readonly serverLogDrainMs: {
+        readonly shape: "integer";
+        readonly appliesTo: readonly ExploreItemKind[];
+    };
+    readonly checkOverflow: {
+        readonly shape: "boolean";
+        readonly appliesTo: readonly ExploreItemKind[];
+    };
+    readonly ignoreOverflow: {
+        readonly shape: "strings";
+        readonly appliesTo: readonly ExploreItemKind[];
+    };
+    readonly before: {
+        readonly shape: "string";
+        readonly appliesTo: readonly ["goal"];
+    };
+    readonly after: {
+        readonly shape: "string";
+        readonly appliesTo: readonly ["goal"];
+    };
+    readonly allowShellHooks: {
+        readonly shape: "boolean";
+        readonly appliesTo: readonly ["goal"];
+    };
+    readonly hookTimeoutMs: {
+        readonly shape: "integer";
+        readonly appliesTo: readonly ["goal"];
+    };
+    readonly fixtureIdentity: {
+        readonly shape: "named-paths";
+        readonly appliesTo: readonly ["goal"];
+    };
+    readonly allowVacuousChecks: {
+        readonly shape: "boolean";
+        readonly appliesTo: readonly ExploreItemKind[];
+    };
+    readonly actionDeltas: {
+        readonly shape: "boolean";
+        readonly appliesTo: readonly ["goal", "usability", "coverage", "exploratory", "adversarial"];
+    };
+    readonly headed: {
+        readonly shape: "boolean";
+        readonly appliesTo: readonly ExploreItemKind[];
+    };
+    readonly slowMo: {
+        readonly shape: "count";
+        readonly appliesTo: readonly ExploreItemKind[];
+    };
+    readonly recordVideo: {
+        readonly shape: "path";
+        readonly appliesTo: readonly ExploreItemKind[];
+    };
+    readonly overlay: {
+        readonly shape: "boolean";
+        readonly appliesTo: readonly ExploreItemKind[];
+    };
+    readonly screenshots: {
+        readonly shape: "string";
+        readonly appliesTo: readonly ExploreItemKind[];
+    };
+    readonly evidenceVideo: {
+        readonly shape: "boolean";
+        readonly appliesTo: readonly ExploreItemKind[];
+    };
+};
+export type SuiteExploreOptionName = keyof typeof SUITE_EXPLORE_OPTIONS;
+interface ShapeValue {
+    string: string;
+    strings: readonly string[];
+    boolean: boolean;
+    positive: number;
+    integer: number;
+    count: number;
+    ratio: number;
+    path: string;
+    "named-paths": readonly string[];
+    "env-refs": readonly string[];
+    "env-bindings": readonly string[];
+}
+/** The parsed generic options of a target (defaults) or an item (overrides) — typed from the table. */
+export type SuiteExploreOptions = {
+    readonly [K in SuiteExploreOptionName]?: ShapeValue[(typeof SUITE_EXPLORE_OPTIONS)[K]["shape"]];
+};
+/** Where the suite takes an explore option it has a dedicated field for. */
+export interface DedicatedOption {
+    /** The suite field name. */
+    readonly key: string;
+    /** Where it may appear. */
+    readonly at: readonly ("target" | "journey" | "goal" | "mission" | "verifyFix")[];
+}
+export declare const SUITE_DEDICATED_EXPLORE_OPTIONS: Readonly<Record<string, DedicatedOption>>;
+export declare const SUITE_EXCLUDED_EXPLORE_OPTIONS: Readonly<Record<string, string>>;
+/** Suite key of a generic option (the explore attribute name itself). */
+export declare function isSuiteExploreOption(key: string): key is SuiteExploreOptionName;
+/**
+ * The effective options of one item: the target's defaults for its kind, overridden key by key by
+ * the item's own (an item value REPLACES the target's, lists included).
+ */
+export declare function effectiveExploreOptions(target: SuiteExploreOptions | undefined, item: SuiteExploreOptions | undefined, kind: ExploreItemKind): SuiteExploreOptions;
+export {};

package/dist/suite-explore-options.js

@@ -0,0 +1,162 @@
+/**
+ * The `jevitate check --suite` item option set (#195), declared ONCE against `jevitate explore`'s
+ * own options. Every explore option (by its commander attribute name) is in exactly one of:
+ *
+ *  - `SUITE_EXPLORE_OPTIONS` — generic options a target (as a default) and a goal/mission item (as
+ *    an override) take under the SAME camelCase name; parsed, typed and validated by
+ *    `check-suite.ts` from this table, and applied by `check-api.ts` exactly as `explore` applies
+ *    the flag;
+ *  - `SUITE_DEDICATED_EXPLORE_OPTIONS` — options the suite already had a dedicated field for
+ *    (`url`, `goal`, `success`, `routes`, `secretFields`, …);
+ *  - `SUITE_EXCLUDED_EXPLORE_OPTIONS` — options that make no sense per item, with the reason.
+ *
+ * `suite-explore-options.test.ts` builds the real `explore` command and fails when an option is in
+ * none of them (a new explore flag must be decided here), or when a table's shape disagrees with
+ * the flag's own (a repeatable flag is a list here, a switch a boolean).
+ *
+ * Secrets: no option here carries a literal secret. `secret` takes `env:<VAR>` references only;
+ * `totp` (like `secretFields`) takes `<descriptor>=env:<VAR>` bindings only — both resolved from
+ * the environment when the check starts, never written in the suite.
+ */
+export const ALL_KINDS = ["goal", "coverage", "exploratory", "adversarial", "feature", "usability"];
+const GOAL_UX = ["goal", "usability"];
+const OVERFLOW = ["coverage", "exploratory", "adversarial", "usability"];
+export const SUITE_EXPLORE_OPTIONS = {
+    // usability review
+    show: { shape: "string", appliesTo: ["usability"] },
+    minConfidence: { shape: "ratio", appliesTo: ["usability"] },
+    maxFindingsPerPage: { shape: "integer", appliesTo: ["usability"], range: [1, 1000] },
+    product: { shape: "path", appliesTo: ["usability"] },
+    polish: { shape: "boolean", appliesTo: ["usability"] },
+    probeGuards: { shape: "boolean", appliesTo: ["usability"] },
+    // containment
+    scope: { shape: "string", appliesTo: ["coverage", "exploratory"], oneOf: ["app"] },
+    // secrets and sessions
+    secret: { shape: "env-refs", appliesTo: ["goal", "adversarial", "usability"] },
+    totp: { shape: "env-bindings", appliesTo: GOAL_UX },
+    fixture: { shape: "path", appliesTo: GOAL_UX },
+    actor: { shape: "named-paths", appliesTo: ["goal"] },
+    saveStorageState: { shape: "path", appliesTo: ALL_KINDS },
+    persona: { shape: "named-paths", appliesTo: ALL_KINDS },
+    personas: { shape: "path", appliesTo: ALL_KINDS },
+    // pacing and conversation
+    stallTimeout: { shape: "positive", appliesTo: ["coverage", "exploratory", "feature"] },
+    replyWaitMs: { shape: "integer", appliesTo: GOAL_UX },
+    replyCeilingMs: { shape: "integer", appliesTo: GOAL_UX },
+    replyMaxChars: { shape: "integer", appliesTo: GOAL_UX, range: [20, 2000] },
+    jobWaitMs: { shape: "integer", appliesTo: GOAL_UX },
+    // safety, settle, timing (the target config explore builds from its flags)
+    deny: { shape: "strings", appliesTo: ALL_KINDS },
+    paid: { shape: "strings", appliesTo: ALL_KINDS },
+    allowDestructive: { shape: "boolean", appliesTo: ALL_KINDS },
+    allowWrites: { shape: "boolean", appliesTo: ALL_KINDS },
+    allowWrite: { shape: "strings", appliesTo: ALL_KINDS },
+    readRpc: { shape: "strings", appliesTo: ALL_KINDS },
+    hangReplayWrites: { shape: "boolean", appliesTo: ALL_KINDS },
+    settleIgnore: { shape: "strings", appliesTo: ALL_KINDS },
+    longPollMs: { shape: "integer", appliesTo: ALL_KINDS },
+    apiPrefix: { shape: "strings", appliesTo: ALL_KINDS },
+    ignoreNoProgress: { shape: "strings", appliesTo: ALL_KINDS },
+    hangReplays: { shape: "count", appliesTo: ["goal", "adversarial"] },
+    // adversarial coverage thresholds
+    minControlCoverage: { shape: "ratio", appliesTo: ["adversarial"] },
+    requireFormSubmit: { shape: "boolean", appliesTo: ["adversarial"] },
+    // backend logs (#142)
+    logSource: { shape: "strings", appliesTo: ALL_KINDS },
+    allowLogCmd: { shape: "boolean", appliesTo: ALL_KINDS },
+    logDefect: { shape: "strings", appliesTo: ALL_KINDS },
+    logQuietOk: { shape: "strings", appliesTo: ALL_KINDS },
+    logIgnore: { shape: "strings", appliesTo: ALL_KINDS },
+    logScope: { shape: "strings", appliesTo: ALL_KINDS },
+    logCorrelationHeader: { shape: "strings", appliesTo: ALL_KINDS },
+    logIdPattern: { shape: "strings", appliesTo: ALL_KINDS },
+    serverLogDrainMs: { shape: "integer", appliesTo: ALL_KINDS },
+    // horizontal overflow (#149)
+    checkOverflow: { shape: "boolean", appliesTo: OVERFLOW },
+    ignoreOverflow: { shape: "strings", appliesTo: OVERFLOW },
+    // mission fixtures' shell hooks (#144); the fixtures file itself is the dedicated `fixtures`
+    before: { shape: "string", appliesTo: ["goal"] },
+    after: { shape: "string", appliesTo: ["goal"] },
+    allowShellHooks: { shape: "boolean", appliesTo: ["goal"] },
+    hookTimeoutMs: { shape: "integer", appliesTo: ["goal"] },
+    // #243: named identities a fixture step authenticates as (`auth.identity`), not the item's own session
+    fixtureIdentity: { shape: "named-paths", appliesTo: ["goal"] },
+    // #202: a success check satisfied before the run's first action is a warning, not a failure
+    allowVacuousChecks: { shape: "boolean", appliesTo: GOAL_UX },
+    // #303: opt-in action deltas (every explore item kind but feature)
+    actionDeltas: { shape: "boolean", appliesTo: ["goal", "usability", "coverage", "exploratory", "adversarial"] },
+    // #245 demo mode: opt-in per item (a check stays headless by default, CI included)
+    headed: { shape: "boolean", appliesTo: ALL_KINDS },
+    slowMo: { shape: "count", appliesTo: ALL_KINDS },
+    recordVideo: { shape: "path", appliesTo: ALL_KINDS },
+    overlay: { shape: "boolean", appliesTo: ALL_KINDS },
+    // #251: masked screenshots (`screens`, `steps`, `screens:<dir>`, `steps:<dir>` or `<dir>`)
+    screenshots: { shape: "string", appliesTo: ALL_KINDS },
+    // #250: per-defect captioned repro clip + key screenshots (default: on when the item records video)
+    evidenceVideo: { shape: "boolean", appliesTo: ALL_KINDS },
+};
+export const SUITE_DEDICATED_EXPLORE_OPTIONS = {
+    url: { key: "url", at: ["target", "goal", "mission"] },
+    strategy: { key: "strategy", at: ["mission"] },
+    goal: { key: "goal", at: ["goal", "mission"] },
+    appClass: { key: "appClass", at: ["mission"] },
+    // #225: a usability mission item takes `success`/`successWhen` too (its job's completion checks).
+    success: { key: "success", at: ["goal", "mission"] },
+    successWhen: { key: "successWhen", at: ["goal", "mission"] },
+    feature: { key: "feature", at: ["mission"] },
+    route: { key: "routes", at: ["mission"] },
+    allow: { key: "allow", at: ["target"] },
+    secretField: { key: "secretFields", at: ["target", "goal", "mission"] },
+    storageState: { key: "storageState", at: ["target", "journey", "goal", "mission", "verifyFix"] },
+    fixtures: { key: "fixtures", at: ["target", "goal"] },
+    invariants: { key: "invariants", at: ["target"] },
+    maxActions: { key: "maxActions", at: ["goal", "mission"] },
+    maxDecisions: { key: "maxDecisions", at: ["goal", "mission"] },
+    viewport: { key: "viewport", at: ["target", "journey", "goal", "mission"] },
+    device: { key: "device", at: ["target", "journey", "goal", "mission"] },
+    // #293 journey-anchored missions: the promoted Journey and step a mission item branches off.
+    fromJourney: { key: "fromJourney", at: ["mission"] },
+    atStep: { key: "atStep", at: ["mission"] },
+    param: { key: "params", at: ["journey", "mission"] },
+    env: { key: "env", at: ["journey", "mission"] },
+    baseUrl: { key: "baseUrl", at: ["journey", "mission"] },
+    journeysDir: { key: "journeysDir", at: ["target"] },
+};
+export const SUITE_EXCLUDED_EXPLORE_OPTIONS = {
+    browserExecutable: "a check launches every item's browser the same way: pass --browser-executable to `jevitate check`",
+    browserChannel: "a check launches every item's browser the same way: pass --browser-channel to `jevitate check`",
+    browserArg: "a check launches every item's browser the same way: pass --browser-arg to `jevitate check`",
+    extension: "#256: a check launches every item's browser the same way: pass --extension to `jevitate check` (a suite item with its own `allow` lists the chrome-extension://<id> origin itself)",
+    maxBrowsers: "#205: resource governance is per check, not per item: pass --max-browsers to `jevitate check`",
+    maxBrowserMemory: "#205: resource governance is per check, not per item: pass --max-browser-memory to `jevitate check`",
+    ignoreHostLoad: "#205: whether a check starts on a starved host is decided once, for the whole check: pass --ignore-host-load to `jevitate check`",
+    real: "one model gateway per check: the suite's `ai` or `jevitate check --real`",
+    fakeAi: "one model gateway per check: the suite's `ai` or `jevitate check --fake-ai`",
+    out: "one output directory per check (`jevitate check --out`); item results go to <out>/results",
+    json: "one envelope per check (`jevitate check --json` / --json-out)",
+    fileIssues: "a check is a CI gate: findings are reported in JUnit/SARIF/report.md, never filed mid-run",
+    issueRepo: "a check is a CI gate: findings are reported in JUnit/SARIF/report.md, never filed mid-run",
+    jevitateRepo: "a check is a CI gate: findings are reported in JUnit/SARIF/report.md, never filed mid-run",
+    repeat: "a check gates each item once by finding identity; track flakes across checks with --baseline",
+    minAgreement: "a check gates each item once by finding identity; track flakes across checks with --baseline",
+    typeFixture: "#281: a file typed verbatim into a field is an `explore --type-fixture` binding; a suite goal declares none",
+};
+/** Suite key of a generic option (the explore attribute name itself). */
+export function isSuiteExploreOption(key) {
+    return Object.prototype.hasOwnProperty.call(SUITE_EXPLORE_OPTIONS, key);
+}
+/**
+ * The effective options of one item: the target's defaults for its kind, overridden key by key by
+ * the item's own (an item value REPLACES the target's, lists included).
+ */
+export function effectiveExploreOptions(target, item, kind) {
+    const out = {};
+    for (const [k, v] of Object.entries(target ?? {})) {
+        if (isSuiteExploreOption(k) && SUITE_EXPLORE_OPTIONS[k].appliesTo.includes(kind))
+            out[k] = v;
+    }
+    for (const [k, v] of Object.entries(item ?? {}))
+        out[k] = v;
+    return out;
+}
+//# sourceMappingURL=suite-explore-options.js.map

package/dist/suite-explore-options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"suite-explore-options.js","sourceRoot":"","sources":["../src/suite-explore-options.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAIH,MAAM,CAAC,MAAM,SAAS,GAA+B,CAAC,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,aAAa,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;AAmChI,MAAM,OAAO,GAA+B,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;AAClE,MAAM,QAAQ,GAA+B,CAAC,UAAU,EAAE,aAAa,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC;AAErG,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,mBAAmB;IACnB,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,WAAW,CAAC,EAAE;IACnD,aAAa,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,WAAW,CAAC,EAAE;IAC3D,kBAAkB,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE;IACpF,OAAO,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,WAAW,CAAC,EAAE;IACpD,MAAM,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,WAAW,CAAC,EAAE;IACtD,WAAW,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,WAAW,CAAC,EAAE;IAC3D,cAAc;IACd,KAAK,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,UAAU,EAAE,aAAa,CAAC,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,EAAE;IAClF,uBAAuB;IACvB,MAAM,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,MAAM,EAAE,aAAa,EAAE,WAAW,CAAC,EAAE;IAC9E,IAAI,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,SAAS,EAAE,OAAO,EAAE;IACnD,OAAO,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE;IAC9C,KAAK,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC,MAAM,CAAC,EAAE;IACpD,gBAAgB,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE;IACzD,OAAO,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,SAAS,EAAE,SAAS,EAAE;IACvD,QAAQ,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE;IACjD,0BAA0B;IAC1B,YAAY,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,UAAU,EAAE,aAAa,EAAE,SAAS,CAAC,EAAE;IACtF,WAAW,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE;IACrD,cAAc,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE;IACxD,aAAa,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE;IAC1E,SAAS,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE;IACnD,2EAA2E;IAC3E,IAAI,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE;IAChD,IAAI,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE;IAChD,gBAAgB,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE;IAC5D,WAAW,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE;IACvD,UAAU,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE;IACtD,OAAO,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE;IACnD,gBAAgB,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE;IAC5D,YAAY,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE;IACxD,UAAU,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE;IACtD,SAAS,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE;IACrD,gBAAgB,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE;IAC5D,WAAW,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,MAAM,EAAE,aAAa,CAAC,EAAE;IACnE,kCAAkC;IAClC,kBAAkB,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,aAAa,CAAC,EAAE;IAClE,iBAAiB,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,aAAa,CAAC,EAAE;IACnE,sBAAsB;IACtB,SAAS,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE;IACrD,WAAW,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE;IACvD,SAAS,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE;IACrD,UAAU,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE;IACtD,SAAS,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE;IACrD,QAAQ,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE;IACpD,oBAAoB,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE;IAChE,YAAY,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE;IACxD,gBAAgB,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE;IAC5D,6BAA6B;IAC7B,aAAa,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE;IACxD,cAAc,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE;IACzD,6FAA6F;IAC7F,MAAM,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,MAAM,CAAC,EAAE;IAChD,KAAK,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,MAAM,CAAC,EAAE;IAC/C,eAAe,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,MAAM,CAAC,EAAE;IAC1D,aAAa,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,MAAM,CAAC,EAAE;IACxD,uGAAuG;IACvG,eAAe,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC,MAAM,CAAC,EAAE;IAC9D,4FAA4F;IAC5F,kBAAkB,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE;IAC5D,mEAAmE;IACnE,YAAY,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa,EAAE,aAAa,CAAC,EAAE;IAC9G,mFAAmF;IACnF,MAAM,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE;IAClD,MAAM,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE;IAChD,WAAW,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE;IACpD,OAAO,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE;IACnD,2FAA2F;IAC3F,WAAW,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE;IACtD,oGAAoG;IACpG,aAAa,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE;CACJ,CAAC;AA+BxD,MAAM,CAAC,MAAM,+BAA+B,GAA8C;IACxF,GAAG,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE;IACtD,QAAQ,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE;IAC9C,IAAI,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE;IAC9C,QAAQ,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE;IAC9C,kGAAkG;IAClG,OAAO,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE;IACpD,WAAW,EAAE,EAAE,GAAG,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE;IAC5D,OAAO,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE;IAC5C,KAAK,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE;IACzC,KAAK,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE;IACvC,WAAW,EAAE,EAAE,GAAG,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE;IACvE,YAAY,EAAE,EAAE,GAAG,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,CAAC,EAAE;IAChG,QAAQ,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE;IACrD,UAAU,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE;IACjD,UAAU,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE;IAC1D,YAAY,EAAE,EAAE,GAAG,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE;IAC9D,QAAQ,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE;IAC3E,MAAM,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE;IACvE,6FAA6F;IAC7F,WAAW,EAAE,EAAE,GAAG,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE;IACpD,MAAM,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE;IAC1C,KAAK,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE;IACpD,GAAG,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE;IAC/C,OAAO,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE;IACvD,WAAW,EAAE,EAAE,GAAG,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE;CACpD,CAAC;AAEF,MAAM,CAAC,MAAM,8BAA8B,GAAqC;IAC9E,iBAAiB,EAAE,mGAAmG;IACtH,cAAc,EAAE,gGAAgG;IAChH,UAAU,EAAE,4FAA4F;IACxG,SAAS,EAAE,oLAAoL;IAC/L,WAAW,EAAE,+FAA+F;IAC5G,gBAAgB,EAAE,qGAAqG;IACvH,cAAc,EAAE,kIAAkI;IAClJ,IAAI,EAAE,0EAA0E;IAChF,MAAM,EAAE,6EAA6E;IACrF,GAAG,EAAE,2FAA2F;IAChG,IAAI,EAAE,+DAA+D;IACrE,UAAU,EAAE,2FAA2F;IACvG,SAAS,EAAE,2FAA2F;IACtG,YAAY,EAAE,2FAA2F;IACzG,MAAM,EAAE,8FAA8F;IACtG,YAAY,EAAE,8FAA8F;IAC5G,WAAW,EAAE,6GAA6G;CAC3H,CAAC;AAEF,yEAAyE;AACzE,MAAM,UAAU,oBAAoB,CAAC,GAAW;IAC9C,OAAO,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,qBAAqB,EAAE,GAAG,CAAC,CAAC;AAC1E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAAuC,EAAE,IAAqC,EAAE,IAAqB;IAC3I,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;QAClD,IAAI,oBAAoB,CAAC,CAAC,CAAC,IAAK,qBAAqB,CAAC,CAAC,CAAC,CAAC,SAAwC,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC/H,CAAC;IACD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC;QAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC5D,OAAO,GAA0B,CAAC;AACpC,CAAC"}

package/dist/target-config.d.ts

@@ -0,0 +1,115 @@
+import type { HangConfig, SafetyConfig, SettleConfig, TimingConfig } from "@jevitate/explore";
+/**
+ * Per-target (per-origin) configuration — `~/.jevitate/targets.json`:
+ *
+ * ```json
+ * { "https://app.example.test": {
+ *     "settle": { "ignoreRequests": ["/api/notifications/poll*", "/hub/*"], "longPollMs": 5000 },
+ *     "hangs": { "ignoreNoProgress": ["click Refresh*", "/dashboard"] },
+ *     "timing": { "apiPrefixes": ["/api/", "/graphql"] },
+ *     "safety": { "deny": ["/^Archive/"], "paid": ["/^Analyze/"], "allowDestructive": false, "readRequests": ["Estimate*", "/api/search*"] } } }
+ * ```
+ *
+ * `settle.ignoreRequests` — requests the target marks as background (never in-flight work);
+ * `settle.longPollMs` — long-poll auto-detection threshold; `hangs.ignoreNoProgress` — routes,
+ * action labels or busy indicators where `ui-no-progress` is expected; `safety` — the shared safety
+ * policy (#116: `deny` controls, `allowDestructive`) and extra read requests for the write
+ * classifier (#110: `readRequests`, RPC-method or path globs). CLI flags (`--settle-ignore`,
+ * `--long-poll-ms`, `--ignore-no-progress`, `--deny`, `--allow-destructive`, `--read-rpc`) add to /
+ * override the file for one run. A missing file
+ * is "no target config"; a malformed one fails closed.
+ *
+ * `fixtures` — a mission fixtures file (#140/#144) for goal runs on this origin when `--fixtures`
+ * is absent; a relative path resolves against the targets file's directory.
+ *
+ * `storageState` / `secretFields` (#175) — the operator's auth for missions drained from the queue
+ * (`jevitate mission run`) and `verify_fix` over MCP: a storageState path (relative to this file)
+ * and env-sourced `--secret-field` specs. Never an MCP argument.
+ */
+export interface TargetConfig {
+    readonly settle?: SettleConfig;
+    readonly hangs?: HangConfig;
+    readonly timing?: TimingConfig;
+    readonly safety?: SafetyConfig;
+    /** Mission fixtures file (#140/#144), absolute. */
+    readonly fixtures?: string;
+    /**
+     * Backend log sources (#142 follow-up): raw `--log-source` specs (`file:`/`docker:`/`cmd:`), used
+     * by missions drained from the queue (`jevitate mission run`) and by `verify_fix` over MCP — a
+     * caller-supplied `MissionRequest`/tool argument may NEVER name a path or a command, so a source
+     * is only ever declared here, by the operator, local to this machine.
+     */
+    readonly logSources?: readonly string[];
+    /** Raw `--log-defect` specs (a level or a `/regex/`), evaluated the same way as the CLI flag. */
+    readonly logDefect?: readonly string[];
+    /** Opt-in for a `cmd:` source in `logSources` (mirrors `--allow-log-cmd`). Default `false`. */
+    readonly allowLogCmd?: boolean;
+    /**
+     * #175: the session queued missions on this origin start from (a Playwright storageState JSON,
+     * absolute) — `jevitate mission run` and `verify_fix` over MCP apply it. Operator-declared only:
+     * a `queue_exploration`/MCP argument can never name one, and its contents are never logged or
+     * returned (the browser reads the file).
+     */
+    readonly storageState?: string;
+    /**
+     * #175: write the rotated session back after each queued mission (#82/#159 semantics: live
+     * capture, snapshot fallback, never a logged-out state, mode 0600) — `true` = back to
+     * `storageState`, or a path (absolute). For apps with rotating refresh tokens.
+     */
+    readonly saveStorageState?: true | string;
+    /**
+     * #175: `--secret-field` specs (`label=Password=env:APP_PASSWORD`) for queued goal missions on
+     * this origin — the value is read from the environment at run time, never written here. Also
+     * what the target's `fixtures` may authenticate with (`${secretField.APP_PASSWORD}`, #166).
+     */
+    readonly secretFields?: readonly string[];
+    /** Raw `logSources` entries declared legitimately quiet (mirrors `--log-quiet-ok`, #169). */
+    readonly logQuietOk?: readonly string[];
+    /** Raw `--log-ignore` specs (a `/regex/` or a plain substring), evaluated the same way as the CLI
+     *  flag (#169 item 3). */
+    readonly logIgnore?: readonly string[];
+    /** Raw `--log-scope` specs (#282): only matching backend log lines are attributed to a run. */
+    readonly logScope?: readonly string[];
+    /** Extra correlation-id header names (`--log-correlation-header`, #204). */
+    readonly logCorrelationHeaders?: readonly string[];
+    /** `--log-id-pattern` specs (`/regex/`, #204): how a correlation id is written in a log line. */
+    readonly logIdPatterns?: readonly string[];
+    /**
+     * #247: one session per persona on this origin (an environment's origin, `--env`): each persona's
+     * own storageState path (relative to this file) and `env:VAR` secret-field specs. Never committed:
+     * the repo's `.jevitate/environments.json` refuses any session or secret key.
+     */
+    readonly personas?: Readonly<Record<string, TargetPersona>>;
+}
+/** A persona's session on one origin (#247). */
+export interface TargetPersona {
+    readonly storageState?: string;
+    readonly secretFields?: readonly string[];
+}
+export declare class TargetConfigError extends Error {
+    readonly code: "E_TARGET_CONFIG";
+}
+/** Reads the whole targets file, keyed by origin. */
+export declare function loadTargetsFile(path?: string): Readonly<Record<string, TargetConfig>>;
+export interface TargetFlags {
+    readonly settleIgnore?: readonly string[];
+    readonly longPollMs?: number;
+    readonly ignoreNoProgress?: readonly string[];
+    readonly apiPrefixes?: readonly string[];
+    /** `--deny` patterns (added to the file's). */
+    readonly deny?: readonly string[];
+    /** `--paid` patterns (added to the file's `safety.paid`, #181). */
+    readonly paid?: readonly string[];
+    /** `--allow-destructive` (true wins over the file). */
+    readonly allowDestructive?: boolean;
+    /** `--allow-writes` (true wins over the file, #158). */
+    readonly allowWrites?: boolean;
+    /** `--allow-write` path globs (added to the file's `safety.allowWrites` globs, #158). */
+    readonly allowWrite?: readonly string[];
+    /** `--read-rpc` patterns (added to the file's `safety.readRequests`). */
+    readonly readRpc?: readonly string[];
+    /** `--hang-replay-writes` (#153; true wins over the file). */
+    readonly hangReplayWrites?: boolean;
+}
+/** The config for one origin: the file's entry, with flag patterns ADDED and flag numbers winning. */
+export declare function resolveTargetConfig(file: Readonly<Record<string, TargetConfig>>, origin: string, flags?: TargetFlags): TargetConfig;