@jevitate/cli 0.4.0 → 0.6.0

package/dist/explore-author.js

@@ -1,8 +1,7 @@
-import { PlaywrightBrowserPort } from "@jevitate/playwright";
-import { sessionLaunchOptions } from "./browser-run-options.js";
-import { CastActor, BrowseTheWeb } from "@jevitate/screenplay";
 import { authorJourney, assertAuthorizedExploreTarget, } from "@jevitate/explore";
 import { FsJourneyStore } from "@jevitate/journey";
+import { runExploration } from "./explore-goal.js";
+import { screenshotsDirFor } from "./run-screenshots.js";
 /**
  * The programmatic surface behind `jevitate explore author-journey` — drives
  * the goal-based exploration mission and feeds its take(s) through RxD's
@@ -23,7 +22,8 @@ export async function runAuthorJourney(opts) {
         url: opts.url,
         origin,
         goal: opts.goal,
-        successAssertion: opts.successAssertion,
+        ...(opts.successAssertion === undefined ? {} : { successAssertion: opts.successAssertion }),
+        ...(opts.successChecks === undefined ? {} : { successChecks: opts.successChecks }),
         allowlist: opts.allowlist,
         judge: opts.judge,
         gen: opts.gen,
@@ -35,6 +35,9 @@ export async function runAuthorJourney(opts) {
         browser: opts.browser,
         ...(opts.storageState !== undefined ? { storageState: opts.storageState } : {}),
         ...(opts.safety === undefined ? {} : { safety: opts.safety }),
+        ...(opts.goalRun === undefined ? {} : { goalRun: opts.goalRun }),
+        ...(opts.outDir === undefined ? {} : { outDir: opts.outDir }),
+        ...(opts.usage === undefined ? {} : { usage: opts.usage }),
     });
     if (result.outcome === "authored") {
         // #170: a Journey authored behind a login (--storage-state) declares it, so a run without a
@@ -47,40 +50,71 @@ export async function runAuthorJourney(opts) {
     }
     return result;
 }
-/** Default authoring step: opens a real browser, builds an actor, authors. */
+/**
+ * Default authoring step (#369): every take — the discovery and each corroborating one — is a full
+ * goal run (`runExploration`, exactly what `jevitate explore --strategy goal` runs, with the same
+ * run-shaping options), in its own browser, writing its own result, transcript and Recording; its
+ * verdict (`goalOutcome`) decides whether the take reached the goal.
+ */
 async function authorViaBrowser(args) {
     if (!args.judge || !args.gen) {
         throw new Error("runAuthorJourney: judge and gen gateways are required to drive the authoring mission");
     }
     const judge = args.judge;
     const gen = args.gen;
-    const portFactory = args.browserPortFactory ?? (() => new PlaywrightBrowserPort());
-    const port = portFactory();
-    const session = await port.open({
-        ...sessionLaunchOptions(args.browser),
-        allowedOrigins: [...args.allowlist],
-        baseUrl: args.origin,
-        ...(args.storageState !== undefined ? { storageState: args.storageState } : {}),
+    const g = args.goalRun ?? {};
+    // targets.json's safety (`goalRun.target`) wins; a caller's `safety` (#249) applies without one.
+    const target = g.target ?? (args.safety === undefined ? undefined : { safety: args.safety });
+    return authorJourney({
+        goal: args.goal,
+        ...(args.successAssertion === undefined ? {} : { successAssertion: args.successAssertion }),
+        ...(args.successChecks === undefined ? {} : { successChecks: args.successChecks }),
+        allowlist: args.allowlist,
+        startUrl: args.url,
+        bounds: args.bounds,
+        takes: args.takes,
+        journeyId: args.journeyId,
+        journeyName: args.journeyName,
+        runTake: async ({ goal, successChecks }) => {
+            const r = await runExploration({
+                ...g,
+                ...(target === undefined ? {} : { target }),
+                url: args.url,
+                goal,
+                successChecks,
+                allowlist: args.allowlist,
+                judge,
+                gen,
+                ...(args.usage === undefined ? {} : { usage: args.usage }),
+                bounds: args.bounds,
+                ...(args.outDir === undefined ? {} : { outDir: args.outDir }),
+                ...(args.browserPortFactory === undefined ? {} : { browserPortFactory: args.browserPortFactory }),
+                ...(args.browser === undefined ? {} : { browser: args.browser }),
+                ...(args.storageState === undefined ? {} : { storageState: args.storageState }),
+            });
+            return goalRunTake(r, g);
+        },
     });
-    try {
-        const actor = CastActor.named("author").whoCan(new BrowseTheWeb(session, [...args.allowlist]));
-        return await authorJourney({
-            goal: args.goal,
-            successAssertion: args.successAssertion,
-            allowlist: args.allowlist,
-            startUrl: args.url,
-            bounds: args.bounds,
-            actor,
-            judgment: judge,
-            generation: gen,
-            takes: args.takes,
-            journeyId: args.journeyId,
-            journeyName: args.journeyName,
-            ...(args.safety === undefined ? {} : { safety: args.safety }),
-        });
-    }
-    finally {
-        await session.close();
-    }
+}
+/** #369: one goal run as an authoring take — its Recording and where everything it wrote is. */
+export function goalRunTake(r, g = {}) {
+    const reason = r.reason ?? r.failure?.message;
+    const recordingPath = r.recordingPaths[0];
+    const diagnostics = {
+        outcome: r.goalOutcome,
+        ...(reason === undefined ? {} : { reason }),
+        stop: r.stop,
+        runOutcome: r.runOutcome,
+        ...(r.failure === undefined ? {} : { failure: { kind: r.failure.kind, message: r.failure.message } }),
+        checks: r.checks,
+        decisions: r.decisions,
+        actions: r.actions,
+        finalUrl: r.finalUrl,
+        resultPath: r.resultPath,
+        transcriptPath: r.transcriptPath,
+        recordingPaths: r.recordingPaths,
+        ...(g.screenshots === undefined || recordingPath === undefined ? {} : { screenshotsDir: screenshotsDirFor(g.screenshots, recordingPath) }),
+    };
+    return { outcome: r.goalOutcome, recording: r.recording, diagnostics };
 }
 //# sourceMappingURL=explore-author.js.map

package/dist/explore-author.js.map

@@ -1 +1 @@
-{"version":3,"file":"explore-author.js","sourceRoot":"","sources":["../src/explore-author.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,qBAAqB,EAA+C,MAAM,sBAAsB,CAAC;AAC1G,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAG/D,OAAO,EACL,aAAa,EACb,6BAA6B,GAG9B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAgEnD;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAA6B;IAClE,wEAAwE;IACxE,MAAM,MAAM,GAAG,6BAA6B,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IAEvE,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,IAAI,gBAAgB,CAAC;IACjD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC;QACxB,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,MAAM;QACN,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,CAAC;QACtB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;QAC3C,OAAO,EAAE,IAAI,CAAC,OAAO;QACnB,GAAG,CAAC,IAAI,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;KAC9D,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;QAClC,4FAA4F;QAC5F,0FAA0F;QAC1F,MAAM,OAAO,GACX,IAAI,CAAC,YAAY,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,KAAK,IAAI;YAC9E,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,EAAE;YACrF,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;QACrB,MAAM,IAAI,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACxD,OAAO,OAAO,KAAK,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,CAAC;IACtE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,8EAA8E;AAC9E,KAAK,UAAU,gBAAgB,CAAC,IAA0B;IACxD,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,sFAAsF,CAAC,CAAC;IAC1G,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IACzB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;IAErB,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAkB,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,qBAAqB,EAAE,CAAC,CAAC;IACnF,MAAM,IAAI,GAAG,WAAW,EAAE,CAAC;IAC3B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC;QAC9B,GAAG,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC;QACrC,cAAc,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC;QACnC,OAAO,EAAE,IAAI,CAAC,MAAM;QACpB,GAAG,CAAC,IAAI,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChF,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,YAAY,CAAC,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAC/F,OAAO,MAAM,aAAa,CAAC;YACzB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;YACvC,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,QAAQ,EAAE,IAAI,CAAC,GAAG;YAClB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,KAAK;YACL,QAAQ,EAAE,KAAK;YACf,UAAU,EAAE,GAAG;YACf,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;SAC9D,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;AACH,CAAC"}
+{"version":3,"file":"explore-author.js","sourceRoot":"","sources":["../src/explore-author.ts"],"names":[],"mappings":"AAKA,OAAO,EACL,aAAa,EACb,6BAA6B,GAK9B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,cAAc,EAA6B,MAAM,mBAAmB,CAAC;AAE9E,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAkFzD;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAA6B;IAClE,wEAAwE;IACxE,MAAM,MAAM,GAAG,6BAA6B,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IAEvE,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,IAAI,gBAAgB,CAAC;IACjD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC;QACxB,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,MAAM;QACN,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,GAAG,CAAC,IAAI,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC3F,GAAG,CAAC,IAAI,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC;QAClF,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,CAAC;QACtB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;QAC3C,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,GAAG,CAAC,IAAI,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/E,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;QAC7D,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;QAChE,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;QAC7D,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;KAC3D,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;QAClC,4FAA4F;QAC5F,0FAA0F;QAC1F,MAAM,OAAO,GACX,IAAI,CAAC,YAAY,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,KAAK,IAAI;YAC9E,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,EAAE;YACrF,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;QACrB,MAAM,IAAI,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACxD,OAAO,OAAO,KAAK,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,CAAC;IACtE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,gBAAgB,CAAC,IAA0B;IACxD,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,sFAAsF,CAAC,CAAC;IAC1G,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IACzB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;IACrB,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;IAC7B,iGAAiG;IACjG,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7F,OAAO,aAAa,CAAC;QACnB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,GAAG,CAAC,IAAI,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC3F,GAAG,CAAC,IAAI,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC;QAClF,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,QAAQ,EAAE,IAAI,CAAC,GAAG;QAClB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE;YACzC,MAAM,CAAC,GAAG,MAAM,cAAc,CAAC;gBAC7B,GAAG,CAAC;gBACJ,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;gBAC3C,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,IAAI;gBACJ,aAAa;gBACb,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,KAAK;gBACL,GAAG;gBACH,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;gBAC1D,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;gBAC7D,GAAG,CAAC,IAAI,CAAC,kBAAkB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,EAAE,CAAC;gBACjG,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;gBAChE,GAAG,CAAC,IAAI,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC;aAChF,CAAC,CAAC;YACH,OAAO,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3B,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,WAAW,CAAC,CAAuB,EAAE,IAAyC,EAAE;IAC9F,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC;IAC9C,MAAM,aAAa,GAAG,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;IAC1C,MAAM,WAAW,GAA0B;QACzC,OAAO,EAAE,CAAC,CAAC,WAAW;QACtB,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;QAC3C,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,GAAG,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QACrG,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,cAAc,EAAE,CAAC,CAAC,cAAc;QAChC,cAAc,EAAE,CAAC,CAAC,cAAc;QAChC,GAAG,CAAC,CAAC,CAAC,WAAW,KAAK,SAAS,IAAI,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,iBAAiB,CAAC,CAAC,CAAC,WAAW,EAAE,aAAa,CAAC,EAAE,CAAC;KAC3I,CAAC;IACF,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,CAAC;AACzE,CAAC"}

package/dist/explore-cli.js

@@ -1,8 +1,9 @@
 import { existsSync } from "node:fs";
 import { envCredentialStore, MissingCredentialError } from "@jevitate/ai-core";
 import { loadLocalCredentials } from "./credentials-file.js";
-import { FixtureNotFoundError, ScopeUnderivableError, UnauthorizedExploreTargetError, resolveCoverageThresholds, parseSecretField, SecretFieldSpecError, TypeFixtureSpecError, validateDenyPatterns, } from "@jevitate/explore";
+import { FixtureNotFoundError, ScopeUnderivableError, UnauthorizedExploreTargetError, resolveCoverageThresholds, TypeFixtureSpecError, validateDenyPatterns, } from "@jevitate/explore";
 import { loadTypeFixtures } from "./type-fixture-file.js";
+import { secretCommandRunner } from "./secret-command.js";
 import { ok, fail } from "./envelope.js";
 import { SessionFileInProjectError, assertSessionFileOutsideProject } from "./project-dir.js";
 import { InvariantsFileError, loadInvariantFiles, resolveInvariantAuthTokens } from "./invariants-file.js";
@@ -17,7 +18,7 @@ import { LITERAL_SECRET_WARNING, SecretArgError, resolveSecretArgs } from "./sec
 import { withEngine } from "./engine.js";
 import { setKillSwitchOutput } from "./kill-signal.js";
 import { EXIT_CODES } from "./exit-codes.js";
-import { intArg, positiveNumberArg, nonNegativeIntArg, positiveIntArg, ratioArg } from "./cli-args.js";
+import { positiveNumberArg, nonNegativeIntArg, positiveIntArg, ratioArg } from "./cli-args.js";
 import { formatMissionHuman, formatMultiRunHuman } from "./cli-output.js";
 import { runExploration, runCoverageMission, runAdversarialCliMission, CLI_ADVERSARIAL_STRATEGIES, runFeatureCliMission, parseSuccessSpec, resolveExploreAllowlist, } from "./explore-api.js";
 import { parseLogSourceSpecs, LogSourceSpecError } from "./log-sources.js";
@@ -44,6 +45,7 @@ import { formatCampaignHuman } from "./campaign-cli.js";
 import { forwardedArgv } from "./multi-run-cli.js";
 import { ANCHORED_STRATEGIES, JourneyPrefixArgsError, JourneyPrefixStaleError, journeyStaleResult, resolveJourneyPrefix, } from "./journey-prefix.js";
 import { clock } from "@jevitate/domain";
+import { GOAL_RUN_OPTIONS, GoalRunFlagError, conversationFromFlags, dialogsFromFlags, secretFieldsFromFlags, successWhenFromFlags, targetFlagsFromFlags, } from "./goal-run-flags.js";
 /**
  * #293: the flags a sweep sets on each of its missions itself (the rest of the command line is
  * forwarded to every mission as given).
@@ -94,71 +96,59 @@ export function registerExploreCommands(program, deps, buildProgram) {
         "Omit it for a find-out goal (e.g. \"find out how many contacts... report the answer\"): the run must then end",
         "with the model's own `report` op, and the grounded answer (#101) is the verdict — no page/network check needed.",
     ].join(" "), (v, prev) => [...prev, v], [])
-        .option("--success-when <when>", "when the --success page checks must hold: final (default; on the final page) | held (on the final page, or all together at any settled step — a one-time secret, a toast). reloadThen is always final")
-        .option("--allow-vacuous-checks", "downgrade a vacuous --success check to a warning. By default a check satisfied before the run's first action — a page check that held on the seed page and never changed " +
-        "(an empty result container), a requestMade/responseStatus matched only by a page-load or polling request — FAILS: it cannot verify the goal")
-        .option("--action-deltas", "opt-in (#303; every --strategy, not --feature): record what each action changed on the page — an accessibility snapshot before and after, announcements, " +
-        "the action's requests — redacted, with a code verdict per step (no-change | relevant-change | inconclusive) used by the goal loop's no-progress check and a persistence re-check after writes (goal), and as defect evidence (adversarial, coverage); " +
-        "adds `delta` to every transcript step (and Recording step, goal) and `actionDeltas` to the result. Costs about 50-100 ms per action on a small page, 0.3-0.5 s on a large one")
+        .addOption(GOAL_RUN_OPTIONS.successWhen())
+        .addOption(GOAL_RUN_OPTIONS.allowVacuousChecks())
+        .addOption(GOAL_RUN_OPTIONS.actionDeltas())
         .option("--feature <name>", "run the capability-scoped feature-testing mission (instead of --goal/--success)")
         .option("--route <glob>", "in-scope route glob (repeatable), e.g. /thread/** — for --feature it replaces the default scope (the start URL's route and everything under it); it widens --strategy adversarial/coverage/exploratory beyond the start URL's route", (v, prev) => [...prev, v], [])
         .option("--scope <mode>", "--strategy coverage/exploratory: 'app' widens containment to the whole app (same as --route '/**'); default: the start URL's route plus --route globs")
         .option("--allow <origin>", "authorized origin (repeatable); REPLACES the default allowlist when given (the URL's own origin is used only when --allow is omitted entirely) -- include the URL's own origin explicitly if you still need it", (v, prev) => [...prev, v], [])
-        .option("--secret <value|env:VAR>", "REDACTION ONLY: a secret/PII value kept out of every model call and artifact (repeatable); env:VAR reads it from the environment (preferred: a literal is visible in the process list and shell history). It is never typed into a field — to log in, bind it with --secret-field (or start from --storage-state)", (v, prev) => [...prev, v], [])
-        .option("--secret-field <binding>", "goal/usability strategy: '<label|testId|type|id|name>=<value>=env:<VAR>' (repeatable), e.g. 'label=Password=env:APP_PASSWORD'. When the run types into a matching field, code types $VAR itself; the model sees only «secret:VAR» and the Recording {redacted:true}", (v, prev) => [...prev, v], [])
-        .option("--totp <binding>", "goal/usability strategy: '<descriptor>=env:<VAR>' with $VAR a base32 TOTP seed (repeatable), e.g. 'label=Authentication code=env:APP_TOTP_SEED'. The 6-digit code is computed locally (RFC 6238) when the field is typed; the seed never reaches a model or disk", (v, prev) => [...prev, v], [])
-        .option("--type-fixture <binding>", "goal strategy: '<label|testId|type|id|name>=<value>=<file>' (repeatable), e.g. 'label=Paste your text=./fixtures/import.txt'. When the run types into a matching field, code types the file's exact text verbatim (line breaks kept, never paraphrased or capped); the model sees only «fixture:<file name>». Recorded as typed unless it holds a --secret", (v, prev) => [...prev, v], [])
-        .option("--fixture <path>", "local file the upload op attaches to a file input (goal and usability strategies); must exist")
+        .addOption(GOAL_RUN_OPTIONS.secret())
+        .addOption(GOAL_RUN_OPTIONS.secretField())
+        .addOption(GOAL_RUN_OPTIONS.totp())
+        .addOption(GOAL_RUN_OPTIONS.typeFixture())
+        .addOption(GOAL_RUN_OPTIONS.fixture())
         .option("--storage-state <file>", "Playwright storageState JSON to start the session authenticated (deterministic login pre-step); must exist")
         .option("--actor <name=storageState>", "multi-actor mission (#147, goal only; repeatable): the FIRST actor is the primary (the only one the model drives, " +
         "from its own storageState); every other actor is an observer in its OWN fresh context that only runs the " +
         "--invariants' cross-actor checks (capture + probe as:/deniedAs) — never clicks or types. Replaces --storage-state", (v, prev) => [...prev, v], [])
-        .option("--save-storage-state <file>", "write the context's storageState (cookies + origin storage) here when the run ends; mode 0600, contents never logged. " +
-        "Useful with a rotating refresh token: --storage-state's file goes stale after one authenticated run refreshes it, " +
-        "so point --save-storage-state at the SAME file (or a new one) to keep it usable for the next run. " +
-        "Written on every exit path -- a crash or a SIGTERM/SIGINT kill included (#159), not only a clean end -- but " +
-        "never over a good file with a session that already looks lost/logged-out; the last known-good state is used " +
-        "instead, or nothing is written if none was ever captured.")
+        .addOption(GOAL_RUN_OPTIONS.saveStorageState())
         .option("--max-actions <n>", "hard cap on executed actions", positiveIntArg)
         .option("--max-decisions <n>", "hard cap on model decisions", positiveIntArg)
         .option("--stall-timeout <seconds>", "--strategy coverage/exploratory and --feature: end the run inconclusive (stalled) when no step completes within this many seconds (default 120)", positiveNumberArg)
-        .option("--reply-wait-ms <ms>", "conversational pages: how long to keep waiting for a reply while the page shows no sign of working on one " +
-        "(goal and usability; default 60000). While a request the message started is in flight, a busy indicator shows, " +
-        "or the reply is still growing, the wait continues up to --reply-ceiling-ms", positiveIntArg)
-        .option("--reply-ceiling-ms <ms>", "conversational pages: hard ceiling on one reply wait, however busy the page stays (default 180000; never below --reply-wait-ms)", positiveIntArg)
-        .option("--reply-max-chars <n>", "conversational pages: cap on each generated chat message (goal and usability; default 300)", intArg({ min: 20, max: 2000 }))
-        .option("--job-wait-ms <ms>", "goal and usability: while the page shows an in-progress status (\"Simulating…\", aria-busy, a job \"is running\"), " +
-        "waits keep waiting with backoff — and a model 'blocked' is deferred — up to this budget (default: --reply-ceiling-ms, 180000); " +
-        "it also bounds a busy indicator the app visibly keeps working behind (live progress, a job poll) before it is a hang, " +
-        "and a wait the page documents (\"usually takes a minute\") can raise it", positiveIntArg)
-        .option("--deny <pattern>", "a control no mission may click (repeatable): an accessible-name regex (/Archive/i or Archive) or a descriptor role=button;name=Archive. " +
-        "Session-ending (Sign out), destructive (Delete, Revoke, Rotate) and paid (Buy, Run simulation, Generate, Send invite) controls are refused by default", (v, prev) => [...prev, v], [])
-        .option("--paid <pattern>", "an app control that costs money or credits (repeatable; same syntax as --deny), e.g. /^(Analyze|Draft|Improve)\\b/i: treated like the built-in paid " +
-        "vocabulary — the budget guard sees it, hang replays never repeat it, and a goal that asks for it may still click it", (v, prev) => [...prev, v], [])
-        .option("--allow-destructive", "let missions click session-ending, destructive and paid controls (a --deny pattern still holds). A goal run already may click one its goal asks for")
+        .addOption(GOAL_RUN_OPTIONS.replyWaitMs())
+        .addOption(GOAL_RUN_OPTIONS.replyQuietMs())
+        .addOption(GOAL_RUN_OPTIONS.replyCeilingMs())
+        .addOption(GOAL_RUN_OPTIONS.replyMaxChars())
+        .addOption(GOAL_RUN_OPTIONS.jobWaitMs())
+        .addOption(GOAL_RUN_OPTIONS.deny())
+        .addOption(GOAL_RUN_OPTIONS.paid())
+        .addOption(GOAL_RUN_OPTIONS.allowDestructive())
+        .addOption(GOAL_RUN_OPTIONS.dialogs())
         .option("--allow-writes", "let a find-out goal (no --success check, ended by report) change the app. By default it is read-only: controls that start a write flow " +
         "(checkout, upgrade, create, save, submit…) are refused and the write requests an action fires are blocked, unless the goal itself asks for a change")
         .option("--allow-write <glob>", "a write-request path a read-only find-out goal never blocks (repeatable; ** spans segments; a glob starting with https:// matches " +
         "origin + path, e.g. https://abc.supabase.co/rest/v1/**), beyond the built-in auth-refresh ones " +
         "(**/refresh*, **/token*, **/oauth/**, **/auth/**/refresh*). The app's background writes outside an action always pass", (v, prev) => [...prev, v], [])
-        .option("--read-rpc <glob>", "a POST request that only READS (repeatable): an RPC-method glob (Estimate*, pkg.Service/Preview*) or a path glob (/api/search*). " +
-        "gRPC-web/Connect Get*/List*/Search*/Find*/Watch*/Stream*/Count*/Describe*/Read* methods are reads already. Reads are never guarded or reported as duplicate writes", (v, prev) => [...prev, v], [])
+        .addOption(GOAL_RUN_OPTIONS.readRpc())
         .option("--real", "use live Jev + OpenRouter gateways (requires keys)", false)
         .option("--fake-ai", "use deterministic fake gateways (pipeline smoke only)", false)
         .option("--out <dir>", "directory to write the emitted Recording")
         .option("--file-issues", "file findings as issues (needs a repo: --issue-repo or ~/.jevitate/filing.json); default: drafts only")
         .option("--issue-repo <owner/name>", "the system-under-test repo findings for THIS target are filed to")
-        .option("--hang-replays <n>", "fresh-context replays that confirm a hang (default 2; 0 = don't replay, the hang is reported unconfirmed)", nonNegativeIntArg)
+        .addOption(GOAL_RUN_OPTIONS.hangReplays())
         .option("--hang-replay-writes", "let hang replays re-send a paid/destructive write the run sent (default: such a hang is reported inconclusive, never replayed)")
-        .option("--settle-ignore <pattern>", "a request URL pattern the target marks as background (never pending work; repeatable, * wildcard)", (v, prev) => [...prev, v], [])
-        .option("--long-poll-ms <n>", "a request pending this long on an interactive page is a long-poll (default 5000)", nonNegativeIntArg)
-        .option("--api-prefix <path>", "a path prefix whose requests are the app's API in the timing summary (repeatable), e.g. /api/", (v, prev) => [...prev, v], [])
-        .option("--ignore-no-progress <pattern>", "a route / action label / busy indicator where ui-no-progress is expected (repeatable, * wildcard)", (v, prev) => [...prev, v], [])
+        .addOption(GOAL_RUN_OPTIONS.settleIgnore())
+        .addOption(GOAL_RUN_OPTIONS.longPollMs())
+        .addOption(GOAL_RUN_OPTIONS.apiPrefix())
+        .addOption(GOAL_RUN_OPTIONS.ignoreNoProgress())
         .option("--jevitate-repo <owner/name>", "where jevitate engine findings are filed (default matt-cochran/jevitate)")
         .option("--min-control-coverage <ratio>", "adversarial: share of the target's controls (0..1) a run must exercise before 'found nothing' is clean (default 0.25); below it the run is inconclusive", ratioArg)
         .option("--no-require-form-submit", "adversarial: do not require a submitted form for a clean result (default: required when the target has a form)")
         .option("--invariants <file>", "app-declared invariants JSON (repeatable; goal, coverage, exploratory, adversarial, --feature): checked around every action, a violation is a defect (exit 1). Validated before any browser opens; probes are GET/HEAD on an --allow origin only", (v, prev) => [...prev, v], [])
         .option("--log-source <spec>", "backend log source (repeatable; every strategy, incl. usability): file:<path> (tailed from its current end) | docker:<container> (docker logs -f --since 0s) | cmd:<command> (needs --allow-log-cmd). Read-only, operator-declared, never the model's choice. Error/warning lines are correlated to the step they landed during and attached to its transcript evidence, redacted", (v, prev) => [...prev, v], [])
+        .addOption(GOAL_RUN_OPTIONS.allowSecretCmd())
+        .addOption(GOAL_RUN_OPTIONS.secretCmdAttempts())
         .option("--allow-log-cmd", "opt-in: a --log-source cmd:<command> may run as a subprocess (operator-declared only; refused otherwise)", false)
         .option("--log-defect <level|/regex/>", "backend log lines matching this (repeatable) become a server-log defect: a level (error|warn|info|debug, matched as level>=this) or a /regex/flags/ over the raw line. Its fingerprint is the normalized message (ids/numbers/uuids/timestamps stripped) plus the correlated route; verify-fix re-checks it by re-tailing the same --log-source(s)", (v, prev) => [...prev, v], [])
         .option("--log-quiet-ok <spec>", "declares a --log-source spec (exact match, repeatable) as legitimately quiet: zero lines from it does not make the --log-defect oracle unhealthy (#169). Without it, a declared source that opened but delivered not one line makes an otherwise-clean run inconclusive, same as one that failed to open", (v, prev) => [...prev, v], [])
@@ -210,6 +200,17 @@ export function registerExploreCommands(program, deps, buildProgram) {
             emitExplore(fail("E_EXPLORE_ARGS", `unknown strategy ${JSON.stringify(o.strategy)} (one of ${EXPLORE_STRATEGIES.join(", ")})`));
             return;
         }
+        // #334: a mistyped --dialogs never silently means "dismiss".
+        let dialogs;
+        try {
+            dialogs = dialogsFromFlags(o);
+        }
+        catch (err) {
+            if (!(err instanceof GoalRunFlagError))
+                throw err;
+            emitExplore(fail(err.code, err.message));
+            return;
+        }
         // #195: a session file never lands in the repo's .jevitate/ (refused before any run, multi-runs included).
         if (o.saveStorageState !== undefined) {
             try {
@@ -432,22 +433,14 @@ export function registerExploreCommands(program, deps, buildProgram) {
         // #120: a killed run prints what this command would have printed — the envelope with --json,
         // else the human summary (#210) — before it exits.
         setKillSwitchOutput(o.json === true ? "envelope" : "human");
-        const conversation = {
-            ...(o.replyWaitMs === undefined ? {} : { replyWaitMs: Number(o.replyWaitMs) }),
-            ...(o.replyCeilingMs === undefined ? {} : { replyCeilingMs: Number(o.replyCeilingMs) }),
-            ...(o.replyMaxChars === undefined ? {} : { replyMaxChars: Number(o.replyMaxChars) }),
-            ...(o.jobWaitMs === undefined ? {} : { jobWaitMs: Number(o.jobWaitMs) }),
-        };
-        if ((conversation.replyWaitMs !== undefined && !(Number.isInteger(conversation.replyWaitMs) && conversation.replyWaitMs > 0)) ||
-            (conversation.replyCeilingMs !== undefined &&
-                !(Number.isInteger(conversation.replyCeilingMs) && conversation.replyCeilingMs > 0)) ||
-            (conversation.replyMaxChars !== undefined &&
-                !(Number.isInteger(conversation.replyMaxChars) && conversation.replyMaxChars >= 20 && conversation.replyMaxChars <= 2000))) {
-            emitExplore(fail("E_EXPLORE_ARGS", "--reply-wait-ms and --reply-ceiling-ms must be positive integers; --reply-max-chars an integer in 20..2000"));
-            return;
+        let conversation;
+        try {
+            conversation = conversationFromFlags(o);
         }
-        if (conversation.jobWaitMs !== undefined && !(Number.isInteger(conversation.jobWaitMs) && conversation.jobWaitMs > 0)) {
-            emitExplore(fail("E_EXPLORE_ARGS", "--job-wait-ms must be a positive integer"));
+        catch (err) {
+            if (!(err instanceof GoalRunFlagError))
+                throw err;
+            emitExplore(fail(err.code, err.message));
             return;
         }
         // #154: refused BEFORE any browser opens — `nonNegativeIntArg` already rejects a bad value at
@@ -495,19 +488,7 @@ export function registerExploreCommands(program, deps, buildProgram) {
         let target;
         if (o.url !== undefined) {
             try {
-                target = resolveTargetConfig(loadTargetsFile(deps.explore?.targetsConfigPath), new URL(setupRefFreeUrl(o.url)).origin, {
-                    settleIgnore: o.settleIgnore,
-                    ignoreNoProgress: o.ignoreNoProgress,
-                    apiPrefixes: o.apiPrefix,
-                    deny: o.deny,
-                    paid: o.paid,
-                    readRpc: o.readRpc,
-                    ...(o.allowDestructive === true ? { allowDestructive: true } : {}),
-                    ...(o.allowWrites === true ? { allowWrites: true } : {}),
-                    allowWrite: o.allowWrite,
-                    ...(o.hangReplayWrites === true ? { hangReplayWrites: true } : {}),
-                    ...(o.longPollMs === undefined ? {} : { longPollMs: Number(o.longPollMs) }),
-                });
+                target = resolveTargetConfig(loadTargetsFile(deps.explore?.targetsConfigPath), new URL(setupRefFreeUrl(o.url)).origin, targetFlagsFromFlags(o, dialogs));
             }
             catch (err) {
                 if (err instanceof TargetConfigError) {
@@ -672,18 +653,17 @@ export function registerExploreCommands(program, deps, buildProgram) {
                 return;
             }
             try {
-                secretFields = [
-                    ...o.secretField.map((s) => parseSecretField(s, "value", process.env)),
-                    ...o.totp.map((s) => parseSecretField(s, "totp", process.env)),
-                ];
+                secretFields = secretFieldsFromFlags(o);
             }
             catch (err) {
-                if (!(err instanceof SecretFieldSpecError))
+                if (!(err instanceof GoalRunFlagError))
                     throw err;
                 emitExplore(fail(err.code, err.message));
                 return;
             }
         }
+        // #324: a cmd: binding's command runs at type time; its output becomes a run secret at once.
+        const secretCommand = secretFields.some((f) => f.kind === "cmd") ? secretCommandRunner() : undefined;
         // #281: fields typed with a file's exact text — read (and checked) before any browser opens.
         let typeFixtures = [];
         if (o.typeFixture.length > 0) {
@@ -910,8 +890,8 @@ export function registerExploreCommands(program, deps, buildProgram) {
                 emitExplore(fail("E_EXPLORE_ASSERTION", String(err instanceof Error ? err.message : err)));
                 return;
             }
-            if (o.successWhen !== undefined && o.successWhen !== "held" && o.successWhen !== "final") {
-                emitExplore(fail("E_EXPLORE_ARGS", `--success-when must be "held" or "final", got ${JSON.stringify(o.successWhen)}`));
+            if (o.successWhen !== undefined && o.successWhen !== "held" && o.successWhen !== "final" && o.successWhen !== "each") {
+                emitExplore(fail("E_EXPLORE_ARGS", `--success-when must be "final", "held" or "each", got ${JSON.stringify(o.successWhen)}`));
                 return;
             }
             if (uxSuccessChecks.length === 0 && (o.successWhen !== undefined || o.allowVacuousChecks === true)) {
@@ -962,6 +942,8 @@ export function registerExploreCommands(program, deps, buildProgram) {
                     conversation,
                     secrets: o.secret.length > 0 ? o.secret : undefined,
                     ...(secretFields.length > 0 ? { secretFields } : {}),
+                    ...(secretCommand === undefined ? {} : { secretCommand }),
+                    ...(o.secretCmdAttempts === undefined ? {} : { secretCommandAttempts: o.secretCmdAttempts }),
                     fixture: o.fixture,
                     outDir: o.out,
                     browserPortFactory: deps.explore?.browserPortFactory,
@@ -974,7 +956,7 @@ export function registerExploreCommands(program, deps, buildProgram) {
                     ...triagedServerLog(serverLog, uxJudge, o.real === true),
                     ...withInvariants,
                     ...(uxSuccessChecks.length === 0 ? {} : { successChecks: uxSuccessChecks }),
-                    ...(o.successWhen === "held" || o.successWhen === "final" ? { successWhen: o.successWhen } : {}),
+                    ...(o.successWhen === "held" || o.successWhen === "final" || o.successWhen === "each" ? { successWhen: o.successWhen } : {}),
                     ...(o.allowVacuousChecks === true ? { allowVacuousChecks: true } : {}),
                     ...withPrefix,
                     ...(o.actionDeltas === true ? { actionDeltas: true } : {}),
@@ -1080,11 +1062,16 @@ export function registerExploreCommands(program, deps, buildProgram) {
             emitExplore(fail("E_EXPLORE_ASSERTION", String(err instanceof Error ? err.message : err)));
             return;
         }
-        if (o.successWhen !== undefined && o.successWhen !== "held" && o.successWhen !== "final") {
-            emitExplore(fail("E_EXPLORE_ARGS", `--success-when must be "held" or "final", got ${JSON.stringify(o.successWhen)}`));
+        let successWhen;
+        try {
+            successWhen = successWhenFromFlags(o);
+        }
+        catch (err) {
+            if (!(err instanceof GoalRunFlagError))
+                throw err;
+            emitExplore(fail(err.code, err.message));
             return;
         }
-        const successWhen = o.successWhen === "held" || o.successWhen === "final" ? o.successWhen : undefined;
         const allowlist = resolveExploreAllowlist(setupRefFreeUrl(o.url), o.allow);
         // Fixtures (#140/#144): the spec and every ${setup.x} reference are validated here, before any
         // browser or request; the setup itself runs just before the mission (below).
@@ -1170,6 +1157,8 @@ export function registerExploreCommands(program, deps, buildProgram) {
                 bounds: Object.keys(bounds).length > 0 ? bounds : undefined,
                 secrets: o.secret.length > 0 ? o.secret : undefined,
                 ...(secretFields.length > 0 ? { secretFields } : {}),
+                ...(secretCommand === undefined ? {} : { secretCommand }),
+                ...(o.secretCmdAttempts === undefined ? {} : { secretCommandAttempts: o.secretCmdAttempts }),
                 ...(typeFixtures.length > 0 ? { typeFixtures } : {}),
                 fixture: o.fixture,
                 outDir: o.out,