@jevitate/cli 0.2.0 → 0.3.0

package/dist/browser-run-options.d.ts

@@ -1,4 +1,4 @@
-import type { BrowserLaunchOptions, OpenOptions } from "@jevitate/playwright";
+import { type BrowserLaunchOptions, type ExtensionIdentity, type OpenOptions } from "@jevitate/playwright";
 /** The browser options a runner takes: how Chromium is launched, plus how the run is shown (#245). */
 export interface BrowserRunOptions extends BrowserLaunchOptions {
     /** A visible browser window (`--headed` / `JEVITATE_HEADED=1` / a suite item's `headed`). Default: headless. */
@@ -56,3 +56,34 @@ export declare function assertHeadedDisplay(headed: boolean, env?: Readonly<Reco
 export declare function headedFromEnv(env: Readonly<Record<string, string | undefined>>): boolean;
 /** The one-line warning for a headed run that opens several windows at once (#245: warn, never refuse). */
 export declare function multiWindowWarning(what: string): string;
+/** #256: a `chrome-extension://` target or replay that does not match the loaded `--extension`s (exit 64). */
+export declare class ExtensionMismatchError extends Error {
+    readonly code: "E_EXTENSION_ARGS";
+    constructor(message: string);
+}
+/** #256: the `chrome-extension://<id>` origin of every loaded `--extension`. */
+export declare function extensionOrigins(browser: BrowserLaunchOptions | undefined): string[];
+/** #256: what a run records about its loaded extensions (Recording `extensions`), or undefined for none. */
+export declare function loadedExtensions(browser: BrowserLaunchOptions | undefined): ExtensionIdentity[] | undefined;
+/** #256: `{ extensions }` to spread into a Recording a run wrote, or `{}` when it loaded none. */
+export declare function extensionsStamp(browser: BrowserLaunchOptions | undefined): {
+    extensions?: ExtensionIdentity[];
+};
+/**
+ * #256: the `--allow` list a run uses once its loaded extensions' origins are allowed too — ONLY
+ * those ids. With no `--allow`, the default (the URL's own origin) plus the extension origins; with
+ * `--allow`, those plus the extension origins. No extensions: `allow` unchanged.
+ */
+export declare function allowWithExtensions(url: string | undefined, allow: readonly string[], browser: BrowserLaunchOptions | undefined): string[];
+/**
+ * #256: a `chrome-extension://<id>/…` start URL must name an extension this run loads — refused
+ * before any browser opens otherwise (listing the loaded ids, since an unpacked id is derived from
+ * the directory's path). Any other URL passes.
+ */
+export declare function assertExtensionTargetLoaded(url: string | undefined, browser: BrowserLaunchOptions | undefined): void;
+/**
+ * #256: a replay (verify-fix, journey run) refuses when the extensions the Recording ran with are
+ * not the build loaded now — same ids, names and versions — so a "fixed" verdict is never reached
+ * against a different extension build (or without the extension at all).
+ */
+export declare function assertSameExtensionBuild(recorded: readonly ExtensionIdentity[] | undefined, browser: BrowserLaunchOptions | undefined, what: string): void;

package/dist/browser-run-options.js

@@ -8,6 +8,8 @@
  */
 import { readdirSync, statSync } from "node:fs";
 import { basename, dirname, join } from "node:path";
+import { describeExtensions, EXTENSION_ID, extensionIdentity, extensionOrigin, sameExtensionBuild } from "@jevitate/playwright";
+import { normalizeAllowlist } from "@jevitate/explore";
 /** `--slow-mo` when `--headed` is given without one: slow enough for an audience to follow. */
 export const HEADED_DEFAULT_SLOW_MO_MS = 250;
 /**
@@ -103,4 +105,71 @@ export function headedFromEnv(env) {
 export function multiWindowWarning(what) {
     return `warning: --headed with ${what} opens several browser windows; each is shown.\n`;
 }
+/** #256: a `chrome-extension://` target or replay that does not match the loaded `--extension`s (exit 64). */
+export class ExtensionMismatchError extends Error {
+    code = "E_EXTENSION_ARGS";
+    constructor(message) {
+        super(message);
+        this.name = "ExtensionMismatchError";
+    }
+}
+/** #256: the `chrome-extension://<id>` origin of every loaded `--extension`. */
+export function extensionOrigins(browser) {
+    return (browser?.extensions ?? []).map((e) => extensionOrigin(e.id));
+}
+/** #256: what a run records about its loaded extensions (Recording `extensions`), or undefined for none. */
+export function loadedExtensions(browser) {
+    const xs = browser?.extensions ?? [];
+    return xs.length === 0 ? undefined : xs.map(extensionIdentity);
+}
+/** #256: `{ extensions }` to spread into a Recording a run wrote, or `{}` when it loaded none. */
+export function extensionsStamp(browser) {
+    const xs = loadedExtensions(browser);
+    return xs === undefined ? {} : { extensions: xs };
+}
+/**
+ * #256: the `--allow` list a run uses once its loaded extensions' origins are allowed too — ONLY
+ * those ids. With no `--allow`, the default (the URL's own origin) plus the extension origins; with
+ * `--allow`, those plus the extension origins. No extensions: `allow` unchanged.
+ */
+export function allowWithExtensions(url, allow, browser) {
+    const ext = extensionOrigins(browser);
+    if (ext.length === 0)
+        return [...allow];
+    const base = allow.length > 0 ? [...allow] : url === undefined ? [] : normalizeAllowlist([url]);
+    return [...new Set([...base, ...ext])];
+}
+/**
+ * #256: a `chrome-extension://<id>/…` start URL must name an extension this run loads — refused
+ * before any browser opens otherwise (listing the loaded ids, since an unpacked id is derived from
+ * the directory's path). Any other URL passes.
+ */
+export function assertExtensionTargetLoaded(url, browser) {
+    if (url === undefined || !url.toLowerCase().startsWith("chrome-extension:"))
+        return;
+    let host = "";
+    try {
+        host = new URL(url).host;
+    }
+    catch {
+        /* refused below */
+    }
+    const loaded = browser?.extensions ?? [];
+    if (EXTENSION_ID.test(host) && loaded.some((e) => e.id === host))
+        return;
+    const hint = loaded.length === 0 ? "load it with --extension <dir>" : `loaded: ${loaded.map((e) => `${e.name} → ${extensionOrigin(e.id)}/`).join(", ")}`;
+    throw new ExtensionMismatchError(`${url} is not a page of a loaded extension (${hint})`);
+}
+/**
+ * #256: a replay (verify-fix, journey run) refuses when the extensions the Recording ran with are
+ * not the build loaded now — same ids, names and versions — so a "fixed" verdict is never reached
+ * against a different extension build (or without the extension at all).
+ */
+export function assertSameExtensionBuild(recorded, browser, what) {
+    const loaded = loadedExtensions(browser);
+    if (sameExtensionBuild(recorded, loaded))
+        return;
+    throw new ExtensionMismatchError(`${what} was recorded with extensions ${describeExtensions(recorded)} but this run loads ${describeExtensions(loaded)}; ` +
+        "pass the same --extension build (an unpacked extension's id follows its directory path unless its manifest pins a \"key\")");
+}
 //# sourceMappingURL=browser-run-options.js.map

package/dist/browser-run-options.js.map

@@ -1 +1 @@
-{"version":3,"file":"browser-run-options.js","sourceRoot":"","sources":["../src/browser-run-options.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAgBpD,+FAA+F;AAC/F,MAAM,CAAC,MAAM,yBAAyB,GAAG,GAAG,CAAC;AAK7C;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAsC,EAAE,QAAiB;IAC5F,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,GAAG,OAAO,IAAI,EAAE,CAAC;IAC5F,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC5F,OAAO;QACL,GAAG,MAAM;QACT,QAAQ,EAAE,MAAM,KAAK,IAAI;QACzB,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;QACrE,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,CAAC;KACtE,CAAC;AACJ,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,aAAa,CAAC,OAAsC;IAClE,OAAO,OAAO,EAAE,MAAM,KAAK,IAAI,IAAI,OAAO,CAAC,OAAO,KAAK,KAAK,CAAC;AAC/D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,OAAsC,EAAE,YAAoB;IACtF,IAAI,OAAO,EAAE,WAAW,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACzD,MAAM,IAAI,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAC3D,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,IAAI,OAAO,CAAC,YAAY,CAAC,EAAE,GAAG,IAAI,SAAS,CAAC,CAAC;AAClF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,QAAgB;IACzC,IAAI,KAAe,CAAC;IACpB,IAAI,CAAC;QACH,KAAK,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,CAAC,CAAS,EAAU,EAAE;QAClC,IAAI,CAAC;YACH,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;AACzE,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,QAA4B,EAAE,KAA0B;IAC3F,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACtC,MAAM,KAAK,EAAE,CAAC;IACd,OAAO,EAAE,UAAU,EAAE,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;AAC9C,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,SAAS,CAAC,KAA0B;IAClD,IAAI,IAA+B,CAAC;IACpC,OAAO,GAAG,EAAE,CAAC,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC,CAAC;AAClC,CAAC;AAED,qGAAqG;AACrG,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IAClD;QACE,KAAK,CACH,kHAAkH;YAChH,oDAAoD,CACvD,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;IAC1C,CAAC;CACF;AAED,gGAAgG;AAChG,MAAM,UAAU,mBAAmB,CACjC,MAAe,EACf,MAAoD,OAAO,CAAC,GAAG,EAC/D,WAA4B,OAAO,CAAC,QAAQ;IAE5C,IAAI,CAAC,MAAM,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO;IAC5C,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC,KAAK,EAAE;QAAE,MAAM,IAAI,yBAAyB,EAAE,CAAC;AAC9G,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,aAAa,CAAC,GAAiD;IAC7E,MAAM,CAAC,GAAG,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACpD,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,MAAM,CAAC;AACnC,CAAC;AAED,2GAA2G;AAC3G,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,OAAO,0BAA0B,IAAI,kDAAkD,CAAC;AAC1F,CAAC"}
+{"version":3,"file":"browser-run-options.js","sourceRoot":"","sources":["../src/browser-run-options.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,iBAAiB,EAAE,eAAe,EAAE,kBAAkB,EAAuE,MAAM,sBAAsB,CAAC;AACrM,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAevD,+FAA+F;AAC/F,MAAM,CAAC,MAAM,yBAAyB,GAAG,GAAG,CAAC;AAK7C;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAsC,EAAE,QAAiB;IAC5F,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,GAAG,OAAO,IAAI,EAAE,CAAC;IAC5F,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC5F,OAAO;QACL,GAAG,MAAM;QACT,QAAQ,EAAE,MAAM,KAAK,IAAI;QACzB,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;QACrE,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,CAAC;KACtE,CAAC;AACJ,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,aAAa,CAAC,OAAsC;IAClE,OAAO,OAAO,EAAE,MAAM,KAAK,IAAI,IAAI,OAAO,CAAC,OAAO,KAAK,KAAK,CAAC;AAC/D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,OAAsC,EAAE,YAAoB;IACtF,IAAI,OAAO,EAAE,WAAW,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACzD,MAAM,IAAI,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAC3D,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,IAAI,OAAO,CAAC,YAAY,CAAC,EAAE,GAAG,IAAI,SAAS,CAAC,CAAC;AAClF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,QAAgB;IACzC,IAAI,KAAe,CAAC;IACpB,IAAI,CAAC;QACH,KAAK,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,CAAC,CAAS,EAAU,EAAE;QAClC,IAAI,CAAC;YACH,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;AACzE,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,QAA4B,EAAE,KAA0B;IAC3F,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACtC,MAAM,KAAK,EAAE,CAAC;IACd,OAAO,EAAE,UAAU,EAAE,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;AAC9C,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,SAAS,CAAC,KAA0B;IAClD,IAAI,IAA+B,CAAC;IACpC,OAAO,GAAG,EAAE,CAAC,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC,CAAC;AAClC,CAAC;AAED,qGAAqG;AACrG,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IAClD;QACE,KAAK,CACH,kHAAkH;YAChH,oDAAoD,CACvD,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;IAC1C,CAAC;CACF;AAED,gGAAgG;AAChG,MAAM,UAAU,mBAAmB,CACjC,MAAe,EACf,MAAoD,OAAO,CAAC,GAAG,EAC/D,WAA4B,OAAO,CAAC,QAAQ;IAE5C,IAAI,CAAC,MAAM,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO;IAC5C,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC,KAAK,EAAE;QAAE,MAAM,IAAI,yBAAyB,EAAE,CAAC;AAC9G,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,aAAa,CAAC,GAAiD;IAC7E,MAAM,CAAC,GAAG,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACpD,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,MAAM,CAAC;AACnC,CAAC;AAED,2GAA2G;AAC3G,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,OAAO,0BAA0B,IAAI,kDAAkD,CAAC;AAC1F,CAAC;AAED,8GAA8G;AAC9G,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IACtC,IAAI,GAAG,kBAA2B,CAAC;IAC5C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;IACvC,CAAC;CACF;AAED,gFAAgF;AAChF,MAAM,UAAU,gBAAgB,CAAC,OAAyC;IACxE,OAAO,CAAC,OAAO,EAAE,UAAU,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACvE,CAAC;AAED,4GAA4G;AAC5G,MAAM,UAAU,gBAAgB,CAAC,OAAyC;IACxE,MAAM,EAAE,GAAG,OAAO,EAAE,UAAU,IAAI,EAAE,CAAC;IACrC,OAAO,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;AACjE,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,eAAe,CAAC,OAAyC;IACvE,MAAM,EAAE,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACrC,OAAO,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;AACpD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAuB,EAAE,KAAwB,EAAE,OAAyC;IAC9H,MAAM,GAAG,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACtC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAChG,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;AACzC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,2BAA2B,CAAC,GAAuB,EAAE,OAAyC;IAC5G,IAAI,GAAG,KAAK,SAAS,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,mBAAmB,CAAC;QAAE,OAAO;IACpF,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,mBAAmB;IACrB,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,EAAE,UAAU,IAAI,EAAE,CAAC;IACzC,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC;QAAE,OAAO;IACzE,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,gCAAgC,CAAC,CAAC,CAAC,WAAW,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,MAAM,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IACzJ,MAAM,IAAI,sBAAsB,CAAC,GAAG,GAAG,yCAAyC,IAAI,GAAG,CAAC,CAAC;AAC3F,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,QAAkD,EAAE,OAAyC,EAAE,IAAY;IAClJ,MAAM,MAAM,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACzC,IAAI,kBAAkB,CAAC,QAAQ,EAAE,MAAM,CAAC;QAAE,OAAO;IACjD,MAAM,IAAI,sBAAsB,CAC9B,GAAG,IAAI,iCAAiC,kBAAkB,CAAC,QAAQ,CAAC,uBAAuB,kBAAkB,CAAC,MAAM,CAAC,IAAI;QACvH,4HAA4H,CAC/H,CAAC;AACJ,CAAC"}

package/dist/build-info.generated.js

@@ -5,6 +5,6 @@
 // this plain `tsc --build` dist (no bundler substitution), so it needs real committed values
 // here instead. See ./engine.ts, which prefers the esbuild-injected value when present and
 // falls back to these.
-export const GENERATED_COMMIT = "09b80b5";
-export const GENERATED_BUILT_AT = "2026-09-29T20:26:11.852Z";
+export const GENERATED_COMMIT = "7937daf";
+export const GENERATED_BUILT_AT = "2026-10-02T05:17:24.714Z";
 //# sourceMappingURL=build-info.generated.js.map

package/dist/campaign-api.d.ts

@@ -0,0 +1,151 @@
+import type { Command } from "commander";
+import { type JourneyBranchPoint } from "@jevitate/journey";
+import { type MissionOutcome } from "@jevitate/domain";
+import type { ConsolidatedDefect } from "@jevitate/findings";
+import type { AnchoredStrategy } from "./journey-prefix.js";
+import { type MissionFixtures } from "./mission-fixtures.js";
+import { type RunSummary } from "./report-api.js";
+/**
+ * #293 — `jevitate campaign run <spec.json>`: many journey-anchored missions, run in order, read as
+ * ONE deduped report.
+ *
+ * A campaign spec lists jobs: a promoted Journey, the anchors (names or step numbers) to branch off,
+ * the strategies to run from each, and their budgets. The run is:
+ *
+ *  1. discovery — each job's whole Journey is replayed once (`journey run`, fail-closed): a stale
+ *     Journey is reported and its missions are skipped (`journey-stale`), never run from a URL;
+ *  2. anchored missions, in spec order (job → anchor → strategy): each is `explore --from-journey
+ *     <id> --at-step <anchor> --strategy <s>` (its own fresh browser context), with the campaign's
+ *     state restore around it — the `--fixtures` setup/restore semantics (and operator hooks when
+ *     `--allow-shell-hooks` is given) — so one mission's side effects never leak into the next;
+ *  3. one report — every mission's persisted result consolidated by `@jevitate/findings` (the same
+ *     dedupe as `jevitate report`), each defect listing the Journey steps it branched from.
+ *
+ * Bounded: at most 50 jobs and `maxRuns` missions (default 50, at most 200), each with an action
+ * budget (default 40). An invalid spec is refused with EVERY problem listed (E_CAMPAIGN_SPEC, exit
+ * 64) before any browser opens. The campaign's outcome is the worst of its missions' (a broken or
+ * stale mission dominates, as `combineOutcomes` rules) — the report keeps every finding either way.
+ */
+export { CAMPAIGN_LIMITS, CampaignSpecSchema, type CampaignSpec } from "@jevitate/journey";
+/** The spec cannot be run as given — every problem listed (exit 64, nothing ran). */
+export declare class CampaignSpecError extends Error {
+    readonly problems: readonly string[];
+    readonly code: "E_CAMPAIGN_SPEC";
+    constructor(problems: readonly string[]);
+}
+export interface CampaignAnchor {
+    /** What `--at-step` is given (the anchor's name, else the step number). */
+    readonly atStep: string;
+    readonly branch: JourneyBranchPoint;
+}
+export interface CampaignJobPlan {
+    readonly id: string;
+    readonly journey: string;
+    readonly params: Readonly<Record<string, string>>;
+    readonly storageState?: string;
+    readonly anchors: readonly CampaignAnchor[];
+    readonly strategies: readonly AnchoredStrategy[];
+    readonly goal?: string;
+    readonly appClass?: string;
+    readonly success: readonly string[];
+    /** Per mission (a sweep's total already split). */
+    readonly maxActions: number;
+    readonly maxDecisions?: number;
+    /** #293: set when the job sweeps every step (`all`) or every anchor (`anchors`). */
+    readonly sweep?: "all" | "anchors";
+    /** The campaign's state restore for this job's runs (built for its Journey's origins). */
+    readonly fixtures?: MissionFixtures;
+}
+export interface CampaignPlan {
+    readonly name?: string;
+    readonly specPath: string;
+    readonly env?: string;
+    readonly baseUrl?: string;
+    readonly discovery: boolean;
+    readonly totalRuns: number;
+    readonly jobs: readonly CampaignJobPlan[];
+}
+export interface ValidateCampaignOptions {
+    readonly journeysDir: string;
+    /** `--allow-shell-hooks`: the spec's before/after hooks may run. */
+    readonly allowShellHooks?: boolean;
+    /** #247 seams (`environments.json`, `targets.json`). */
+    readonly environmentSeams?: {
+        readonly environmentsFile?: string;
+        readonly targetsFile?: string;
+    };
+}
+/**
+ * Reads and validates a campaign spec against the Journey store — structure, then every job's
+ * Journey (exists, promoted), anchors, params, session, strategies' inputs, the fixtures and the
+ * run cap — and returns the plan. Throws `CampaignSpecError` listing EVERY problem found.
+ */
+export declare function validateCampaign(specPath: string, opts: ValidateCampaignOptions): Promise<CampaignPlan>;
+/**
+ * Validates a campaign spec OBJECT (`specPath` names where it came from; its relative paths resolve
+ * against that file's directory) — what `explore --at-step all|anchors` builds for its sweep.
+ */
+export declare function validateCampaignSpec(raw: unknown, specPath: string, opts: ValidateCampaignOptions): Promise<CampaignPlan>;
+export interface CampaignDiscovery {
+    readonly job: string;
+    readonly journeyId: string;
+    /** `ok`: the whole Journey replays · `stale`: it did not (its missions were skipped) · `error`: the replay could not run. */
+    readonly outcome: "ok" | "stale" | "error";
+    readonly reason?: string;
+}
+export interface CampaignMission {
+    readonly job: string;
+    readonly strategy: AnchoredStrategy;
+    readonly branch: JourneyBranchPoint;
+    /** `ran`: the mission ran (its outcome is `missionOutcome`) · `skipped`: its Journey was stale at discovery · `error`: it could not run. */
+    readonly status: "ran" | "skipped" | "error";
+    readonly missionOutcome: MissionOutcome;
+    readonly exitCode: number;
+    readonly resultPath?: string;
+    readonly failure?: {
+        readonly kind: string;
+        readonly message: string;
+    };
+    /** True when the campaign's state restore (`fixtures`/hooks) ran around this mission (setup before, restore after). */
+    readonly restored?: boolean;
+}
+export interface CampaignResult {
+    readonly name?: string;
+    readonly specPath: string;
+    readonly outDir: string;
+    readonly startedAt: string;
+    readonly finishedAt: string;
+    readonly discovery: readonly CampaignDiscovery[];
+    readonly missions: readonly CampaignMission[];
+    /** One deduped defect list across every mission (`@jevitate/findings`), each with its branch points. */
+    readonly report: {
+        readonly defects: readonly ConsolidatedDefect[];
+        readonly summary: {
+            readonly defects: number;
+            readonly advisory: number;
+            readonly runs: number;
+        };
+        readonly runs: readonly RunSummary[];
+    };
+    /** `campaign.json` (this result) and `campaign.md` (the report) in `outDir`. */
+    readonly resultPath: string;
+    readonly reportPath: string;
+    /** The worst mission outcome (`combineOutcomes`). */
+    readonly missionOutcome: MissionOutcome;
+    readonly exitCode: number;
+}
+export interface RunCampaignOptions {
+    /** A fresh, unparsed program (each run is the same CLI command, in process). */
+    readonly newProgram: () => Command;
+    readonly journeysDir: string;
+    readonly outDir?: string;
+    readonly real?: boolean;
+    readonly fakeAi?: boolean;
+    /** Where `jevitate report`'s target filter would read mission targets (unused without one). */
+    readonly missionTargetsDir: string;
+    readonly nowIso?: () => string;
+    /** More `explore` flags every mission is run with (an `explore --at-step all` sweep forwards its own). */
+    readonly missionArgs?: readonly string[];
+}
+/** Runs a validated campaign: discovery, then every anchored mission in order with state restore, then one report. */
+export declare function runCampaign(plan: CampaignPlan, opts: RunCampaignOptions): Promise<CampaignResult>;