@jevitate/cli 0.28.1 → 0.29.0

package/dist/verify-fix-cli.d.ts

@@ -1,4 +1,9 @@
 import { Command } from "commander";
+import { runVerifyFix } from "./verify-fix-api.js";
+import { type TerminalResultDeps } from "./terminal-result.js";
 import { type CliDeps } from "./cli-shared.js";
 /** Registers `jevitate verify-fix`. */
-export declare function registerVerifyFixCommands(program: Command, deps: CliDeps): void;
+export declare function registerVerifyFixCommands(program: Command, deps: CliDeps, seams?: {
+    readonly runVerifyFix?: typeof runVerifyFix;
+    readonly terminalDeps?: TerminalResultDeps;
+}): void;

package/dist/verify-fix-cli.js

@@ -2,7 +2,7 @@ import { TAG_FLAG, TAG_HELP, collectTag, taggedAction } from "./run-tags-cli.js"
 import { parseScreenshotsArg } from "./run-screenshots.js";
 import { UnauthorizedExploreTargetError } from "@jevitate/explore";
 import { ok, fail } from "./envelope.js";
-import { runVerifyFix, VerifyFixInputError } from "./verify-fix-api.js";
+import { runVerifyFix, verifyFixArtifactPath, VerifyFixInputError } from "./verify-fix-api.js";
 import { LedgerError, ledgerEntryFor } from "./ledger-api.js";
 import { TargetConfigError, loadTargetsFile } from "./target-config.js";
 import { withFixtureFlags } from "./fixture-cli.js";
@@ -10,9 +10,21 @@ import { LITERAL_SECRET_WARNING, SecretArgError, resolveSecretArgs } from "./sec
 import { withEngine } from "./engine.js";
 import { positiveIntArg } from "./cli-args.js";
 import { formatVerifyFixHuman } from "./cli-output.js";
+import { DEFAULT_ADMISSION_TIMEOUT_MS } from "@jevitate/playwright";
+import { clock } from "@jevitate/domain";
+import { artifactStamp } from "./mission-journal.js";
+import { redactSensitiveText, registerTerminalResult } from "./terminal-result.js";
 import { withBrowserLaunchFlags, browserRunFromFlags, withDemoFlags, withScreenshotsFlag, withEmulationFlags, emulationFromFlags, emitCommandResult, collectParam, environmentSeams, resolveDbPath, } from "./cli-shared.js";
+const MIN_MASKED_PARAM_LENGTH = 6;
+/**
+ * #767: how long one replay may run without a progress report. Progress comes only when a replay
+ * opens, so this has to outlast a long but legal replay of a many-step recording: it is a backstop
+ * for a run that has stopped, not a measure of a slow one. Added to the 300 s machine-slot admission
+ * bound, which can also fall between two `progress()` calls.
+ */
+const REPLAY_BOUND_MS = 30 * 60_000;
 /** Registers `jevitate verify-fix`. */
-export function registerVerifyFixCommands(program, deps) {
+export function registerVerifyFixCommands(program, deps, seams = {}) {
     // `verify-fix`: replays a finding's reproduction N times in FRESH browsers (#74) and reports
     // whether its fingerprint still fires. Exit 0 fixed · 1 still reproduces · 2 inconclusive ·
     // 4 intermittent (fired on some but not all replays — never reported as fixed) · 64 usage error.
@@ -60,6 +72,11 @@ export function registerVerifyFixCommands(program, deps) {
             emitVerify(fail("E_VERIFY_FIX_ARGS", err.message));
             return;
         }
+        // `--secret` is the channel for a secret. A `--param` may still hold one by mistake, so it's masked
+        // too, unless it's too short to be one: masking "acme" or "1" everywhere ruins the diagnosis.
+        const secrets = [...o.secret, ...Object.values(o.param).filter((v) => v.length >= MIN_MASKED_PARAM_LENGTH)];
+        // What this run's own error messages mask: `secrets`, plus what the run learns as it goes.
+        const known = [...secrets];
         let verifyFixEmulation;
         // #245: demo mode, resolved (a headed run without a display refused) before any browser opens.
         let browser;
@@ -76,24 +93,56 @@ export function registerVerifyFixCommands(program, deps) {
             }
         }
         catch (err) {
-            emitVerify(fail("E_VERIFY_FIX_ARGS", err instanceof Error ? err.message : String(err)));
+            emitVerify(fail("E_VERIFY_FIX_ARGS", redactSensitiveText(err instanceof Error ? err.message : String(err), known)));
             return;
         }
+        // #195: without --result, the fingerprint's ledger entry is the repro material (the run's output may be long gone).
+        let resultPath;
         try {
-            // #195: without --result, the fingerprint's ledger entry is the repro material (the run's output may be long gone).
-            const resultPath = o.result ?? ledgerEntryFor(fingerprint, o.regressionsDir);
-            const report = await runVerifyFix({
+            resultPath = o.result ?? ledgerEntryFor(fingerprint, o.regressionsDir);
+        }
+        catch (err) {
+            if (err instanceof LedgerError) {
+                emitVerify(fail(err.code, redactSensitiveText(err.message, known)));
+                return;
+            }
+            emitVerify(fail("E_VERIFY_FIX", redactSensitiveText(String(err instanceof Error ? err.message : err), known)));
+            return;
+        }
+        // #767: one stamped path, shared by the report writer and the terminal layer, so a signal or
+        // parent death overwrites the same artifact instead of leaving two.
+        const stamp = artifactStamp(clock.nowIso());
+        const vfArtifact = verifyFixArtifactPath(resultPath, stamp);
+        const handle = registerTerminalResult({
+            command: "verify-fix",
+            json: o.json === true,
+            secrets,
+            artifactPath: vfArtifact,
+            inactivityMs: DEFAULT_ADMISSION_TIMEOUT_MS + REPLAY_BOUND_MS,
+            progress: { phase: "replay" },
+        }, seams.terminalDeps);
+        // A property call, so surface-wiring.test.ts still sees this surface's call to the API.
+        const api = { runVerifyFix: seams.runVerifyFix ?? runVerifyFix };
+        try {
+            const report = await api.runVerifyFix({
                 targets: loadTargetsFile(deps.explore?.targetsConfigPath),
                 resultPath,
                 fingerprint,
+                resultArtifact: true,
+                resultStamp: stamp,
+                onReplay: (replay) => handle.progress({ replay }),
+                onSecrets: (values) => {
+                    known.push(...values);
+                    handle.addSecrets(values);
+                },
                 ...(o.storageState !== undefined ? { storageState: o.storageState } : {}),
                 ...(o.replays !== undefined ? { replays: Number(o.replays) } : {}),
                 ...(o.invariants.length > 0 ? { invariantFiles: o.invariants } : {}),
                 ...(o.allowLogCmd === undefined ? {} : { allowLogCmd: o.allowLogCmd }),
                 ...(o.hangReplayWrites === true ? { hangReplayWrites: true } : {}),
                 fixtureFlags: o,
-                secrets: [...o.secret, ...Object.values(o.param).filter((v) => v !== "")],
-                journeyPrefix: { params: o.param, dbPath: resolveDbPath(deps), environmentSeams: environmentSeams(deps) },
+                secrets,
+                journeyPrefix: { params: o.param, warn: (line) => program.configureOutput().writeErr?.(line), dbPath: resolveDbPath(deps), environmentSeams: environmentSeams(deps) },
                 browserPortFactory: deps.explore?.browserPortFactory,
                 browser,
                 ...(screenshots === undefined ? {} : { screenshots }),
@@ -104,16 +153,21 @@ export function registerVerifyFixCommands(program, deps) {
                 ...(o.allowEmulationOverride === undefined ? {} : { allowEmulationOverride: o.allowEmulationOverride }),
             });
             emitVerify(ok(withEngine(report)), report.exitCode);
+            handle.complete();
         }
         catch (err) {
             if (err instanceof VerifyFixInputError || err instanceof TargetConfigError || err instanceof LedgerError) {
-                emitVerify(fail(err.code, err.message));
+                emitVerify(fail(err.code, redactSensitiveText(err.message, known)));
+                handle.complete();
             }
             else if (err instanceof UnauthorizedExploreTargetError) {
-                emitVerify(fail("E_UNAUTHORIZED_EXPLORE_TARGET", err.message));
+                emitVerify(fail("E_UNAUTHORIZED_EXPLORE_TARGET", redactSensitiveText(err.message, known)));
+                handle.complete();
             }
             else {
-                emitVerify(fail("E_VERIFY_FIX", String(err instanceof Error ? err.message : err)));
+                // #767: an internal error is the terminal layer's: it redacts, writes one artifact, emits
+                // one envelope and exits. (Typed input errors keep their own code and write no artifact.)
+                handle.fail(err);
             }
         }
     }));

package/dist/verify-fix-cli.js.map

@@ -1 +1 @@
-{"version":3,"file":"verify-fix-cli.js","sourceRoot":"","sources":["../src/verify-fix-cli.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjF,OAAO,EAAE,mBAAmB,EAAwB,MAAM,sBAAsB,CAAC;AAEjF,OAAO,EAAE,8BAA8B,EAAE,MAAM,mBAAmB,CAAC;AACnE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAqB,MAAM,eAAe,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AACxE,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACxE,OAAO,EAAE,gBAAgB,EAAqB,MAAM,kBAAkB,CAAC;AACvE,OAAO,EAAE,sBAAsB,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAC7F,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAEvD,OAAO,EAGL,sBAAsB,EACtB,mBAAmB,EACnB,aAAa,EACb,mBAAmB,EAInB,kBAAkB,EAClB,kBAAkB,EAClB,iBAAiB,EACjB,YAAY,EACZ,gBAAgB,EAChB,aAAa,GACd,MAAM,iBAAiB,CAAC;AAEzB,uCAAuC;AACvC,MAAM,UAAU,yBAAyB,CAAC,OAAgB,EAAE,IAAa;IACvE,6FAA6F;IAC7F,4FAA4F;IAC5F,iGAAiG;IACjG,mBAAmB,CAAC,kBAAkB,CACpC,gBAAgB,CACd,aAAa,CACX,sBAAsB,CACpB,OAAO;SACJ,OAAO,CAAC,YAAY,CAAC;SACrB,WAAW,CAAC,2HAA2H,CAAC,CAC5I,EACD,EAAE,WAAW,EAAE,IAAI,EAAE,CACtB,CACF,CACF,CAAC;SACC,QAAQ,CAAC,eAAe,EAAE,+DAA+D,CAAC;SAC1F,MAAM,CAAC,iBAAiB,EAAE,kHAAkH,CAAC;SAC7I,MAAM,CAAC,oBAAoB,EAAE,uCAAuC,CAAC;SACrE,MAAM,CAAC,0BAA0B,EAAE,2GAA2G,CAAC;SAC/I,MAAM,CAAC,wBAAwB,EAAE,gDAAgD,CAAC;SAClF,MAAM,CAAC,eAAe,EAAE,sDAAsD,EAAE,cAAc,CAAC;SAC/F,MAAM,CACL,4BAA4B,EAC5B,oIAAoI,CACrI;SACA,MAAM,CACL,qBAAqB,EACrB,yHAAyH,EACzH,CAAC,CAAC,EAAE,IAAc,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,EACnC,EAAc,CACf;SACA,MAAM,CACL,iBAAiB,EACjB,mHAAmH,EACnH,KAAK,CACN;SACA,MAAM,CACL,sBAAsB,EACtB,0HAA0H,CAC3H;SACA,MAAM,CACL,0BAA0B,EAC1B,0IAA0I,EAC1I,CAAC,CAAC,EAAE,IAAc,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,EACnC,EAAc,CACf;SACA,MAAM,CACL,cAAc,EACd,4IAA4I;QAC1I,8FAA8F,EAChG,YAAY,EACZ,EAA4B,CAC7B;SACA,MAAM,CACL,qBAAqB,EACrB,0HAA0H,CAC3H;SACA,MAAM,CAAC,cAAc,EAAE,iHAAiH,CAAC;SACzI,MAAM,CAAC,iBAAiB,EAAE,0LAA0L,CAAC;SACrN,MAAM,CAAC,QAAQ,EAAE,mDAAmD,CAAC;SACrE,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,CAAC;SAC1C,MAAM,CAAC,YAAY,CAAC,OAAO,EAAE,YAAY,EAAE,KAAK,WAA0B,UAAmB;QAC5F,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAsBhB,CAAC;QACJ,sFAAsF;QACtF,+DAA+D;QAC/D,MAAM,UAAU,GAAG,CAAC,QAA+B,EAAE,QAAiB,EAAQ,EAAE,CAC9E,iBAAiB,CAAC,OAAO,EAAE,QAAQ,EAAE;YACnC,IAAI,EAAE,CAAC,CAAC,IAAI,KAAK,IAAI;YACrB,OAAO,EAAE,YAAY;YACrB,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,oBAAoB,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;YACjE,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC;SAChD,CAAC,CAAC;QACL,2CAA2C;QAC3C,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,iBAAiB,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;YACtE,IAAI,QAAQ,CAAC,QAAQ,GAAG,CAAC;gBAAE,OAAO,CAAC,eAAe,EAAE,CAAC,QAAQ,EAAE,CAAC,sBAAsB,CAAC,CAAC;YACxF,CAAC,CAAC,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC;QAC9B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,CAAC,GAAG,YAAY,cAAc,CAAC;gBAAE,MAAM,GAAG,CAAC;YAChD,UAAU,CAAC,IAAI,CAAC,mBAAmB,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;YACnD,OAAO;QACT,CAAC;QACD,IAAI,kBAA6C,CAAC;QAClD,+FAA+F;QAC/F,IAAI,OAA+C,CAAC;QACpD,MAAM,WAAW,GAAG,CAAC,CAAC,WAAW,IAAI,UAAU,CAAC;QAChD,IAAI,WAAwC,CAAC;QAC7C,IAAI,CAAC;YACH,WAAW,GAAG,mBAAmB,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;YACjD,OAAO,GAAG,mBAAmB,CAAC,CAAC,EAAE,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC;YACnE,kBAAkB,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC;YAC3C,IAAI,WAAW,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;YACnH,IAAI,CAAC,CAAC,WAAW,KAAK,SAAS,IAAI,UAAU,KAAK,SAAS,IAAI,CAAC,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;gBAC5F,MAAM,IAAI,KAAK,CAAC,qCAAqC,UAAU,sBAAsB,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC;YACzG,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,UAAU,CAAC,IAAI,CAAC,mBAAmB,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACxF,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,oHAAoH;YACpH,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,IAAI,cAAc,CAAC,WAAW,EAAE,CAAC,CAAC,cAAc,CAAC,CAAC;YAC7E,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC;gBAChC,OAAO,EAAE,eAAe,CAAC,IAAI,CAAC,OAAO,EAAE,iBAAiB,CAAC;gBACzD,UAAU;gBACV,WAAW;gBACX,GAAG,CAAC,CAAC,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzE,GAAG,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClE,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpE,GAAG,CAAC,CAAC,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;gBACtE,GAAG,CAAC,CAAC,CAAC,gBAAgB,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClE,YAAY,EAAE,CAAC;gBACf,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;gBACzE,aAAa,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,aAAa,CAAC,IAAI,CAAC,EAAE,gBAAgB,EAAE,gBAAgB,CAAC,IAAI,CAAC,EAAE;gBACzG,kBAAkB,EAAE,IAAI,CAAC,OAAO,EAAE,kBAAkB;gBACpD,OAAO;gBACP,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;gBACrD,GAAG,CAAC,CAAC,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1D,GAAG,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;gBACpD,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC,EAAE,CAAC;gBAC3I,GAAG,CAAC,kBAAkB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,kBAAkB,EAAE,CAAC;gBAC9E,GAAG,CAAC,CAAC,CAAC,sBAAsB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,sBAAsB,EAAE,CAAC,CAAC,sBAAsB,EAAE,CAAC;aACxG,CAAC,CAAC;YACH,UAAU,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,mBAAmB,IAAI,GAAG,YAAY,iBAAiB,IAAI,GAAG,YAAY,WAAW,EAAE,CAAC;gBACzG,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;YAC1C,CAAC;iBAAM,IAAI,GAAG,YAAY,8BAA8B,EAAE,CAAC;gBACzD,UAAU,CAAC,IAAI,CAAC,+BAA+B,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;YACjE,CAAC;iBAAM,CAAC;gBACN,UAAU,CAAC,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACrF,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC,CAAC;AACR,CAAC"}
+{"version":3,"file":"verify-fix-cli.js","sourceRoot":"","sources":["../src/verify-fix-cli.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjF,OAAO,EAAE,mBAAmB,EAAwB,MAAM,sBAAsB,CAAC;AAEjF,OAAO,EAAE,8BAA8B,EAAE,MAAM,mBAAmB,CAAC;AACnE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAqB,MAAM,eAAe,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC/F,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACxE,OAAO,EAAE,gBAAgB,EAAqB,MAAM,kBAAkB,CAAC;AACvE,OAAO,EAAE,sBAAsB,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAC7F,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,EAAE,4BAA4B,EAAsB,MAAM,sBAAsB,CAAC;AACxF,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAE,sBAAsB,EAA2B,MAAM,sBAAsB,CAAC;AAC5G,OAAO,EAGL,sBAAsB,EACtB,mBAAmB,EACnB,aAAa,EACb,mBAAmB,EAInB,kBAAkB,EAClB,kBAAkB,EAClB,iBAAiB,EACjB,YAAY,EACZ,gBAAgB,EAChB,aAAa,GACd,MAAM,iBAAiB,CAAC;AAEzB,MAAM,uBAAuB,GAAG,CAAC,CAAC;AAElC;;;;;GAKG;AACH,MAAM,eAAe,GAAG,EAAE,GAAG,MAAM,CAAC;AAEpC,uCAAuC;AACvC,MAAM,UAAU,yBAAyB,CACvC,OAAgB,EAChB,IAAa,EACb,QAAqG,EAAE;IAEvG,6FAA6F;IAC7F,4FAA4F;IAC5F,iGAAiG;IACjG,mBAAmB,CAAC,kBAAkB,CACpC,gBAAgB,CACd,aAAa,CACX,sBAAsB,CACpB,OAAO;SACJ,OAAO,CAAC,YAAY,CAAC;SACrB,WAAW,CAAC,2HAA2H,CAAC,CAC5I,EACD,EAAE,WAAW,EAAE,IAAI,EAAE,CACtB,CACF,CACF,CAAC;SACC,QAAQ,CAAC,eAAe,EAAE,+DAA+D,CAAC;SAC1F,MAAM,CAAC,iBAAiB,EAAE,kHAAkH,CAAC;SAC7I,MAAM,CAAC,oBAAoB,EAAE,uCAAuC,CAAC;SACrE,MAAM,CAAC,0BAA0B,EAAE,2GAA2G,CAAC;SAC/I,MAAM,CAAC,wBAAwB,EAAE,gDAAgD,CAAC;SAClF,MAAM,CAAC,eAAe,EAAE,sDAAsD,EAAE,cAAc,CAAC;SAC/F,MAAM,CACL,4BAA4B,EAC5B,oIAAoI,CACrI;SACA,MAAM,CACL,qBAAqB,EACrB,yHAAyH,EACzH,CAAC,CAAC,EAAE,IAAc,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,EACnC,EAAc,CACf;SACA,MAAM,CACL,iBAAiB,EACjB,mHAAmH,EACnH,KAAK,CACN;SACA,MAAM,CACL,sBAAsB,EACtB,0HAA0H,CAC3H;SACA,MAAM,CACL,0BAA0B,EAC1B,0IAA0I,EAC1I,CAAC,CAAC,EAAE,IAAc,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,EACnC,EAAc,CACf;SACA,MAAM,CACL,cAAc,EACd,4IAA4I;QAC1I,8FAA8F,EAChG,YAAY,EACZ,EAA4B,CAC7B;SACA,MAAM,CACL,qBAAqB,EACrB,0HAA0H,CAC3H;SACA,MAAM,CAAC,cAAc,EAAE,iHAAiH,CAAC;SACzI,MAAM,CAAC,iBAAiB,EAAE,0LAA0L,CAAC;SACrN,MAAM,CAAC,QAAQ,EAAE,mDAAmD,CAAC;SACrE,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,CAAC;SAC1C,MAAM,CAAC,YAAY,CAAC,OAAO,EAAE,YAAY,EAAE,KAAK,WAA0B,UAAmB;QAC5F,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAsBhB,CAAC;QACJ,sFAAsF;QACtF,+DAA+D;QAC/D,MAAM,UAAU,GAAG,CAAC,QAA+B,EAAE,QAAiB,EAAQ,EAAE,CAC9E,iBAAiB,CAAC,OAAO,EAAE,QAAQ,EAAE;YACnC,IAAI,EAAE,CAAC,CAAC,IAAI,KAAK,IAAI;YACrB,OAAO,EAAE,YAAY;YACrB,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,oBAAoB,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;YACjE,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC;SAChD,CAAC,CAAC;QACL,2CAA2C;QAC3C,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,iBAAiB,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;YACtE,IAAI,QAAQ,CAAC,QAAQ,GAAG,CAAC;gBAAE,OAAO,CAAC,eAAe,EAAE,CAAC,QAAQ,EAAE,CAAC,sBAAsB,CAAC,CAAC;YACxF,CAAC,CAAC,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC;QAC9B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,CAAC,GAAG,YAAY,cAAc,CAAC;gBAAE,MAAM,GAAG,CAAC;YAChD,UAAU,CAAC,IAAI,CAAC,mBAAmB,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;YACnD,OAAO;QACT,CAAC;QACD,oGAAoG;QACpG,8FAA8F;QAC9F,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,uBAAuB,CAAC,CAAC,CAAC;QAC5G,2FAA2F;QAC3F,MAAM,KAAK,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC;QAC3B,IAAI,kBAA6C,CAAC;QAClD,+FAA+F;QAC/F,IAAI,OAA+C,CAAC;QACpD,MAAM,WAAW,GAAG,CAAC,CAAC,WAAW,IAAI,UAAU,CAAC;QAChD,IAAI,WAAwC,CAAC;QAC7C,IAAI,CAAC;YACH,WAAW,GAAG,mBAAmB,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;YACjD,OAAO,GAAG,mBAAmB,CAAC,CAAC,EAAE,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC;YACnE,kBAAkB,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC;YAC3C,IAAI,WAAW,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;YACnH,IAAI,CAAC,CAAC,WAAW,KAAK,SAAS,IAAI,UAAU,KAAK,SAAS,IAAI,CAAC,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;gBAC5F,MAAM,IAAI,KAAK,CAAC,qCAAqC,UAAU,sBAAsB,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC;YACzG,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,UAAU,CAAC,IAAI,CAAC,mBAAmB,EAAE,mBAAmB,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;YACpH,OAAO;QACT,CAAC;QACD,oHAAoH;QACpH,IAAI,UAAkB,CAAC;QACvB,IAAI,CAAC;YACH,UAAU,GAAG,CAAC,CAAC,MAAM,IAAI,cAAc,CAAC,WAAW,EAAE,CAAC,CAAC,cAAc,CAAC,CAAC;QACzE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,WAAW,EAAE,CAAC;gBAC/B,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,mBAAmB,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;gBACpE,OAAO;YACT,CAAC;YACD,UAAU,CAAC,IAAI,CAAC,cAAc,EAAE,mBAAmB,CAAC,MAAM,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;YAC/G,OAAO;QACT,CAAC;QACD,6FAA6F;QAC7F,oEAAoE;QACpE,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAC5C,MAAM,UAAU,GAAG,qBAAqB,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAC5D,MAAM,MAAM,GAAG,sBAAsB,CACnC;YACE,OAAO,EAAE,YAAY;YACrB,IAAI,EAAE,CAAC,CAAC,IAAI,KAAK,IAAI;YACrB,OAAO;YACP,YAAY,EAAE,UAAU;YACxB,YAAY,EAAE,4BAA4B,GAAG,eAAe;YAC5D,QAAQ,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE;SAC9B,EACD,KAAK,CAAC,YAAY,CACnB,CAAC;QACF,wFAAwF;QACxF,MAAM,GAAG,GAAG,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,YAAY,EAAE,CAAC;QACjE,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,YAAY,CAAC;gBACpC,OAAO,EAAE,eAAe,CAAC,IAAI,CAAC,OAAO,EAAE,iBAAiB,CAAC;gBACzD,UAAU;gBACV,WAAW;gBACX,cAAc,EAAE,IAAI;gBACpB,WAAW,EAAE,KAAK;gBAClB,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;gBACjD,SAAS,EAAE,CAAC,MAAM,EAAE,EAAE;oBACpB,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC;oBACtB,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;gBAC5B,CAAC;gBACD,GAAG,CAAC,CAAC,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzE,GAAG,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClE,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpE,GAAG,CAAC,CAAC,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;gBACtE,GAAG,CAAC,CAAC,CAAC,gBAAgB,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClE,YAAY,EAAE,CAAC;gBACf,OAAO;gBACP,aAAa,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,aAAa,CAAC,IAAI,CAAC,EAAE,gBAAgB,EAAE,gBAAgB,CAAC,IAAI,CAAC,EAAE;gBACrK,kBAAkB,EAAE,IAAI,CAAC,OAAO,EAAE,kBAAkB;gBACpD,OAAO;gBACP,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;gBACrD,GAAG,CAAC,CAAC,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1D,GAAG,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;gBACpD,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC,EAAE,CAAC;gBAC3I,GAAG,CAAC,kBAAkB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,kBAAkB,EAAE,CAAC;gBAC9E,GAAG,CAAC,CAAC,CAAC,sBAAsB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,sBAAsB,EAAE,CAAC,CAAC,sBAAsB,EAAE,CAAC;aACxG,CAAC,CAAC;YACH,UAAU,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;YACpD,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,mBAAmB,IAAI,GAAG,YAAY,iBAAiB,IAAI,GAAG,YAAY,WAAW,EAAE,CAAC;gBACzG,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,mBAAmB,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;gBACpE,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpB,CAAC;iBAAM,IAAI,GAAG,YAAY,8BAA8B,EAAE,CAAC;gBACzD,UAAU,CAAC,IAAI,CAAC,+BAA+B,EAAE,mBAAmB,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC3F,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpB,CAAC;iBAAM,CAAC;gBACN,0FAA0F;gBAC1F,0FAA0F;gBAC1F,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACnB,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC,CAAC;AACR,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@jevitate/cli",
-  "version": "0.28.1",
-  "description": "Autonomous browser testing that turns discovered bugs into deterministic regression tests: explore a web app in a real browser, confirm findings with evidence, and replay them as regressions in CI.",
+  "version": "0.29.0",
+  "description": "Browser automation and testing in one tool: parameterized Journeys that do real work in your app, and autonomous exploration that turns discovered bugs into deterministic regression tests.",
   "type": "module",
   "license": "MIT",
   "repository": {
@@ -65,26 +65,26 @@
     "zod": "^4.6.5",
     "@jevitate/ai-core": "0.1.0",
     "@jevitate/domain": "0.1.0",
+    "@jevitate/daemon": "0.1.0",
     "@jevitate/example-site": "0.1.0",
     "@jevitate/explore": "0.1.0",
     "@jevitate/findings": "0.1.0",
-    "@jevitate/daemon": "0.1.0",
-    "@jevitate/interpreter": "0.1.0",
     "@jevitate/inbox": "0.1.0",
-    "@jevitate/load": "0.1.0",
+    "@jevitate/interpreter": "0.1.0",
     "@jevitate/journey": "0.1.0",
-    "@jevitate/playwright": "0.1.0",
+    "@jevitate/load": "0.1.0",
     "@jevitate/mcp-facade": "0.1.0",
-    "@jevitate/recorder": "0.1.0",
+    "@jevitate/playwright": "0.1.0",
     "@jevitate/missions": "0.1.0",
+    "@jevitate/recorder": "0.1.0",
     "@jevitate/recording": "0.1.0",
+    "@jevitate/screenplay": "0.1.0",
     "@jevitate/regression": "0.1.0",
+    "@jevitate/skills": "0.1.0",
     "@jevitate/runtime": "0.1.0",
-    "@jevitate/screenplay": "0.1.0",
     "@jevitate/sources": "0.1.0",
-    "@jevitate/ux": "0.1.0",
-    "@jevitate/skills": "0.1.0",
-    "@jevitate/storage-sqlite": "0.1.0"
+    "@jevitate/storage-sqlite": "0.1.0",
+    "@jevitate/ux": "0.1.0"
   },
   "scripts": {
     "build": "node scripts/generate-build-info.mjs && tsc --build",

package/skills/jevitate-run-journey/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: jevitate-run-journey
-description: Find and replay a promoted jevitate Journey (a saved, deterministic browser flow such as a login, checkout or form submission) by id with typed params, on any named environment (`--env`/`--base-url`), optionally with video and screenshots and self-heal. Runs via `jevitate journey find|run` or MCP `find_capabilities`/`run_journey`. Also covers promoting (human-only). Use when a known flow should be re-run or regression-checked, not explored or recorded fresh.
+description: Find and replay a promoted jevitate Journey (a saved, deterministic browser flow such as a login, checkout or form submission) by id with typed params, on any named environment (`--env`/`--base-url`), optionally with video and screenshots and self-heal. Runs via `jevitate journey find|run` or MCP `find_capabilities`/`run_journey`. Also covers promoting (a person's act). Use when a known flow should be re-run or regression-checked, not explored or recorded fresh.
 ---
 
 You drive already-published, promoted Jevitate Journeys. You never write or invent
@@ -17,7 +17,7 @@ artifact; your job is to find the right one and run it with the right params.
 - `jevitate journey list --json` shows ALL Journeys including unpromoted ones —
   use this only for authoring/debugging with a human present, never to find
   something to run autonomously (an unpromoted Journey is unpromoted for a
-  reason and `journey run`/`run_journey` will refuse it anyway).
+  reason). MCP `run_journey` refuses it; the CLI `journey run` does not (below).
 
 ## Run
 
@@ -28,6 +28,25 @@ artifact; your job is to find the right one and run it with the right params.
 - MCP: `run_journey({ id, params, storageState? })` — same param-schema
   validation, same refusal on an unknown id or params. It NEVER accepts inline
   steps or a raw recording — a published id only.
+- A secret parameter's value (a `secret: true` param, or one named like a
+  credential) never goes in an MCP request: `E_SECRET_PARAM_OVER_MCP`, by name.
+  Leave it out and pass `env` or `baseUrl` when `~/.jevitate/targets.json` binds
+  the field under `secretFields`. On the CLI use `--secret-field
+  '<label|testId|id|name>=<value>=env:<VAR>'`; `--param` works and warns.
+- Promotion differs by surface. MCP `run_journey` and `chain_journeys` refuse a
+  Journey that is not promoted, or whose content changed since its approval,
+  before any browser opens: `{error: "refused", code: E_JOURNEY_NOT_PROMOTED |
+  E_JOURNEY_APPROVAL_STALE | E_JOURNEY_APPROVAL_UNKNOWN, fix}`. Do not retry;
+  ask the person to review and promote it (`journey review <id>`, then
+  `journey promote <id>`). The CLI `journey run` runs an unpromoted or stale
+  Journey anyway and prints a `warning:` line on stderr with the same code.
+- MCP runs also refuse, with `outcome: "refused"` and `retryable: false`, a click
+  on a session-ending, destructive or paid control (`E_RUN_REFUSED_DESTRUCTIVE`),
+  a write to an origin outside the run's allowlist
+  (`E_RUN_REFUSED_OFF_ALLOWLIST_WRITE`) and a `production: true` environment
+  (`E_RUN_REFUSED_PRODUCTION`). The result's `setting` names what lifts it, in the
+  target's `mcpRun` section of `~/.jevitate/targets.json`. Only a person edits
+  that; never try to work around it. The CLI applies none of these refusals.
 - Read the JSON envelope's `outcome` field (MCP: also `exitCode`). Only `"ok"`
   (exit 0) is a pass. `"healed-pending-review"` (exit 5) is NOT a pass: a
   self-heal retargeted steps and proposed a Journey revision a person must
@@ -143,7 +162,8 @@ artifact; your job is to find the right one and run it with the right params.
   fails — it never counts as the person's sign-off. Every authored/recorded Journey starts
   `metadata.promoted: false` (`explore-author-journey`, `jevitate record` +
   `recording postdoc`); only a promoted Journey is discoverable via `journey
-  find`/`find_capabilities` and runnable via `journey run`/`run_journey`.
+  find`/`find_capabilities` and runnable over MCP (`run_journey`); the CLI
+  `journey run` also runs an unpromoted one, with a warning.
   There is still no "raw Recording -> promoted Journey in one step" command —
   a Recording becomes a Journey first (through an authoring path, or the
   `JourneyRegistry` API), then `journey promote <id>` promotes it.